create-ailk 0.5.0 → 0.6.1

package/templates/apps/api/src/routes/webhooks/index.ts

@@ -0,0 +1,89 @@
+/**
+ * Webhooks route group.
+ *
+ * Routes:
+ *   POST /v1/webhooks/stripe — verify Stripe signature, dispatch event,
+ *                               fire telemetry, respond 200.
+ *   POST /v1/webhooks/calcom — verify the scheduling provider's signature,
+ *                               normalize a booking event into an
+ *                               Appointment row (#6085, brief H7).
+ *                               Module-conditional (`scheduling`, § D1) —
+ *                               reached through an indirect dynamic import
+ *                               so a keyless scaffold never resolves
+ *                               `calcom.ts`, which it does not have.
+ *
+ * Rate limit: each receiver carries its OWN 100 req/min/IP bucket, from the
+ * ONE plugin-level `rateLimit` registration below (a second plugin-level
+ * registration in this same scope would fail — § D3). Above either
+ * provider's actual retry cadence but tight enough to make replay-flood
+ * DoS unattractive. Encapsulated to the webhooks scope so the global
+ * content limit (60/min) doesn't bleed in.
+ */
+import rateLimit from "@fastify/rate-limit";
+import type { FastifyPluginAsync, FastifyReply, FastifyRequest } from "fastify";
+
+import { isModuleEnabled } from "../../config/modules.js";
+import { loadSlice } from "../../lib/slice-load.js";
+
+import { stripeWebhookHandler } from "./stripe.js";
+
+export const STRIPE_WEBHOOK_RATE_LIMIT_PER_MIN = 100;
+export const CALCOM_WEBHOOK_RATE_LIMIT_PER_MIN = 100;
+
+// Kept off the `import()` call site so `tsc` never resolves it and the OSS
+// strip stays green on a keyless scaffold (#5182 D1); traced to
+// `@vercel/nft` by staying a module-level constant read at THIS call site
+// (#5304 D3) — the `routes/project-listings/index.ts:135` in-route-index
+// shape (§ D1), applied here because `webhooks/index.ts` is NOT itself a
+// scheduling-owned file (it also registers the Stripe receiver, a base-tree
+// commerce primitive, so it ships to every scaffold) while `calcom.ts` IS
+// (`packages/create-ailk/src/module-architecture.ts`'s scheduling
+// `ownedFiles`) and does not exist on a keyless one.
+const CALCOM_HANDLER = "./calcom.js";
+
+export const webhooksRoutes: FastifyPluginAsync = async (fastify) => {
+  // Register rate-limit at this scope so the webhook gets its own bucket
+  // distinct from the public content API's global limiter.
+  await fastify.register(rateLimit, {
+    global: false,
+    max: STRIPE_WEBHOOK_RATE_LIMIT_PER_MIN,
+    timeWindow: "1 minute",
+  });
+
+  fastify.post(
+    "/v1/webhooks/stripe",
+    {
+      config: {
+        rateLimit: {
+          max: STRIPE_WEBHOOK_RATE_LIMIT_PER_MIN,
+          timeWindow: "1 minute",
+        },
+      },
+    },
+    stripeWebhookHandler,
+  );
+
+  if (isModuleEnabled("scheduling")) {
+    const mod = (await loadSlice(CALCOM_HANDLER, () => import(CALCOM_HANDLER))) as {
+      calcomWebhookHandler?: (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+    };
+    const handler = mod.calcomWebhookHandler;
+    if (!handler) {
+      throw new Error(
+        `AILK slice drift: '${CALCOM_HANDLER}' does not export 'calcomWebhookHandler'`,
+      );
+    }
+    fastify.post(
+      "/v1/webhooks/calcom",
+      {
+        config: {
+          rateLimit: {
+            max: CALCOM_WEBHOOK_RATE_LIMIT_PER_MIN,
+            timeWindow: "1 minute",
+          },
+        },
+      },
+      handler,
+    );
+  }
+};