evo360-types 1.3.399 → 1.3.400

package/dist/apps/evo-finops/zod-schemas.d.ts

@@ -10682,18 +10682,18 @@ export declare const zProviderPayloadSnapshotSchema: z.ZodObject<{
     raw?: string | undefined;
     method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | undefined;
     body?: unknown;
+    headers?: Record<string, string> | undefined;
     http_status?: number | undefined;
     endpoint?: string | undefined;
-    headers?: Record<string, string> | undefined;
 }, {
     direction: "webhook" | "request" | "response";
     raw?: string | undefined;
     method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | undefined;
     at?: unknown;
     body?: unknown;
+    headers?: Record<string, string> | undefined;
     http_status?: number | undefined;
     endpoint?: string | undefined;
-    headers?: Record<string, string> | undefined;
 }>;
 export declare const zAsaasPaymentLinkBillingTypeSchema: z.ZodEnum<["UNDEFINED", "BOLETO", "CREDIT_CARD", "PIX"]>;
 export declare const zAsaasPaymentLinkChargeTypeSchema: z.ZodEnum<["DETACHED", "RECURRENT", "INSTALLMENT"]>;
@@ -11661,18 +11661,18 @@ export declare const zServiceInvoiceSchema: z.ZodObject<{
         raw?: string | undefined;
         method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | undefined;
         body?: unknown;
+        headers?: Record<string, string> | undefined;
         http_status?: number | undefined;
         endpoint?: string | undefined;
-        headers?: Record<string, string> | undefined;
     }, {
         direction: "webhook" | "request" | "response";
         raw?: string | undefined;
         method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | undefined;
         at?: unknown;
         body?: unknown;
+        headers?: Record<string, string> | undefined;
         http_status?: number | undefined;
         endpoint?: string | undefined;
-        headers?: Record<string, string> | undefined;
     }>, "many">>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     id: z.ZodString;
@@ -12080,18 +12080,18 @@ export declare const zServiceInvoiceSchema: z.ZodObject<{
         raw?: string | undefined;
         method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | undefined;
         body?: unknown;
+        headers?: Record<string, string> | undefined;
         http_status?: number | undefined;
         endpoint?: string | undefined;
-        headers?: Record<string, string> | undefined;
     }, {
         direction: "webhook" | "request" | "response";
         raw?: string | undefined;
         method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | undefined;
         at?: unknown;
         body?: unknown;
+        headers?: Record<string, string> | undefined;
         http_status?: number | undefined;
         endpoint?: string | undefined;
-        headers?: Record<string, string> | undefined;
     }>, "many">>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     id: z.ZodString;
@@ -12499,17 +12499,17 @@ export declare const zServiceInvoiceSchema: z.ZodObject<{
         raw?: string | undefined;
         method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | undefined;
         body?: unknown;
+        headers?: Record<string, string> | undefined;
         http_status?: number | undefined;
         endpoint?: string | undefined;
-        headers?: Record<string, string> | undefined;
     }, {
         direction: "webhook" | "request" | "response";
         raw?: string | undefined;
         method?: "GET" | "POST" | "PUT" | "DELETE" | "PATCH" | undefined;
         at?: unknown;
         body?: unknown;
+        headers?: Record<string, string> | undefined;
         http_status?: number | undefined;
         endpoint?: string | undefined;
-        headers?: Record<string, string> | undefined;
     }>, "many">>;
 }, z.ZodTypeAny, "passthrough">>;

package/dist/index.d.ts

@@ -26,6 +26,7 @@ export * from "./types/evo-task-runner";
 export * from "./types/evo-integrations";
 export * from "./types/nex-customers";
 export * from "./types/nex-tenants";
+export * from "./types/nexus-webhooks";
 export * from "./types/evo-hub-ia";
 export * from "./types/evo-mcp";
 export * from "./apps/shared/zod-schemas";

package/dist/index.js

@@ -43,6 +43,7 @@ __exportStar(require("./types/evo-task-runner"), exports);
 __exportStar(require("./types/evo-integrations"), exports);
 __exportStar(require("./types/nex-customers"), exports);
 __exportStar(require("./types/nex-tenants"), exports);
+__exportStar(require("./types/nexus-webhooks"), exports);
 __exportStar(require("./types/evo-hub-ia"), exports);
 __exportStar(require("./types/evo-mcp"), exports);
 // zod schemas

package/dist/index.ts

@@ -27,6 +27,7 @@ export * from "./types/evo-task-runner";
 export * from "./types/evo-integrations";
 export * from "./types/nex-customers";
 export * from "./types/nex-tenants";
+export * from "./types/nexus-webhooks";
 export * from "./types/evo-hub-ia";
 export * from "./types/evo-mcp";
 

package/dist/types/nexus-webhooks/index.d.ts

@@ -0,0 +1,107 @@
+import type { IFireGlobalDoc } from "../shared";
+/** Topico central: todo emitNexusEvent() publica aqui (envelope canonico). */
+export declare const NEXUS_WEBHOOK_EVENTS_TOPIC: "nexus-webhook-events";
+/** Topico de fan-out: 1 mensagem por (subscription x evento) casado. */
+export declare const NEXUS_WEBHOOK_DELIVERIES_TOPIC: "nexus-webhook-deliveries";
+/** Topico de auditoria: 1 mensagem por tentativa de entrega (sink BQ). */
+export declare const NEXUS_WEBHOOK_DELIVERY_LOG_TOPIC: "nexus-webhook-delivery-log";
+/** Raiz Firestore do registry (subdocs `private/secret` guardam o segredo). */
+export declare const NEXUS_WEBHOOKS_PLATFORM_PATH: "platform/nexus-webhooks";
+/** Versao do contrato do envelope, carimbada em `api_version`. */
+export declare const NEXUS_WEBHOOK_API_VERSION: "2026-07-01";
+export type NexusWebhookActorKind = "user" | "system" | "provider";
+export type NexusWebhookDeliveryStatus = "pending" | "delivered" | "failed" | "dead_letter";
+/** Catalogo v1 de tipos de evento. Alimenta `GET /event-types` e a validacao
+ *  de filtros das subscriptions (globs sao validados a parte). */
+export declare const NEXUS_WEBHOOK_EVENT_TYPES: readonly ["tenant.created", "tenant.updated", "tenant.status_changed", "finops.customer.created", "finops.customer.updated", "finops.customer.status_changed", "finops.customer.deleted", "finops.contract.created", "finops.contract.updated", "finops.contract.status_changed", "finops.contract.deleted", "finops.billing.created", "finops.billing.updated", "finops.billing.status_changed", "finops.billing.deleted", "finops.invoice.created", "finops.invoice.updated", "finops.invoice.status_changed", "finops.invoice.deleted", "finops.payment.received", "forms.onboarding.submitted", "forms.onboarding.updated", "forms.onboarding.completed"];
+export type NexusWebhookEventType = (typeof NEXUS_WEBHOOK_EVENT_TYPES)[number];
+export interface INexusWebhookActor {
+    kind: NexusWebhookActorKind;
+    /** uid do usuario, nome do sistema, ou nome do provider (asaas/inter/...). */
+    id: string | null;
+}
+export interface INexusWebhookResource {
+    /** ex.: 'customer', 'contract', 'billing', 'invoice', 'tenant', 'form'. */
+    kind: string;
+    id: string;
+    /** caminho Firestore do recurso, quando aplicavel. */
+    path?: string | null;
+}
+/** Envelope canonico. Publicado em NEXUS_WEBHOOK_EVENTS_TOPIC e entregue
+ *  como body (JSON) do POST ao assinante. `id` e a chave de idempotencia. */
+export interface INexusWebhookEvent {
+    id: string;
+    type: NexusWebhookEventType | string;
+    api_version: string;
+    occurred_at: string;
+    actor: INexusWebhookActor;
+    resource: INexusWebhookResource;
+    /** snapshot fat do recurso + campos do evento (previous_status, etc.). */
+    data: Record<string, unknown>;
+}
+export type NexusWebhookDisabledReason = "circuit_breaker" | "manual" | null;
+export interface INexusWebhookSubscription extends IFireGlobalDoc {
+    name: string;
+    url: string;
+    /** tipos exatos e/ou globs (`tenant.*`, `finops.billing.*`, `*`). */
+    events: string[];
+    active: boolean;
+    /** headers HTTP custom enviados em cada POST (nao inclui a assinatura). */
+    headers?: Record<string, string> | null;
+    disabled_reason?: NexusWebhookDisabledReason;
+    auto_disabled_at?: Date | null;
+    consecutive_failures?: number;
+}
+export interface INexusWebhookRotatedSecret {
+    secret: string;
+    /** apos esta data o secret antigo deixa de ser aceito (janela dupla). */
+    expires_at: Date | null;
+}
+/** Subdoc `subscriptions/{id}/private/secret`. Nunca sai da API (retornado
+ *  so na criacao/rotacao). */
+export interface INexusWebhookSecretDoc {
+    secret: string;
+    rotated_from?: INexusWebhookRotatedSecret | null;
+    created_at?: Date | null;
+    updated_at?: Date | null;
+}
+export interface INexusWebhookDeliveryAttempt {
+    at: string;
+    response_code: number | null;
+    error?: string | null;
+    duration_ms: number;
+}
+/** Subdoc `subscriptions/{subId}/deliveries/{eventId}` (docId = event id ⇒
+ *  dedup natural). Estado mutavel; historico completo vai para o BQ. */
+export interface INexusWebhookDelivery {
+    event_id: string;
+    event_type: string;
+    status: NexusWebhookDeliveryStatus;
+    attempts: INexusWebhookDeliveryAttempt[];
+    last_response_code?: number | null;
+    /** envelope integral (re-entregue no replay sem reconstruir). */
+    envelope: INexusWebhookEvent;
+    created_at?: Date | null;
+    updated_at?: Date | null;
+    delivered_at?: Date | null;
+}
+/** Mensagem publicada em NEXUS_WEBHOOK_DELIVERIES_TOPIC (fan-out). */
+export interface INexusWebhookDeliveryMessage {
+    subscription_id: string;
+    envelope: INexusWebhookEvent;
+}
+/** Uma linha por tentativa em `nexus.nex_webhook_delivery_events`. */
+export interface INexusWebhookDeliveryLogEvent {
+    event_id: string;
+    event_type: string;
+    subscription_id: string;
+    subscription_name: string;
+    status: NexusWebhookDeliveryStatus;
+    attempt_number: number;
+    response_code: number | null;
+    error: string | null;
+    duration_ms: number;
+    url: string;
+    occurred_at: string;
+    delivered_at: string;
+}

package/dist/types/nexus-webhooks/index.js

@@ -0,0 +1,53 @@
+"use strict";
+// Nexus outbound webhooks — canonical event envelope, subscription registry,
+// delivery tracking and BigQuery audit shapes.
+//
+// Regra do repo: `types/` = interfaces TS escritas a mao (sem zod, sem z.infer).
+// A validacao de payload (zod) vive nas rotas do endpoint nex_webhooks.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NEXUS_WEBHOOK_EVENT_TYPES = exports.NEXUS_WEBHOOK_API_VERSION = exports.NEXUS_WEBHOOKS_PLATFORM_PATH = exports.NEXUS_WEBHOOK_DELIVERY_LOG_TOPIC = exports.NEXUS_WEBHOOK_DELIVERIES_TOPIC = exports.NEXUS_WEBHOOK_EVENTS_TOPIC = void 0;
+// ── Constants ──
+/** Topico central: todo emitNexusEvent() publica aqui (envelope canonico). */
+exports.NEXUS_WEBHOOK_EVENTS_TOPIC = "nexus-webhook-events";
+/** Topico de fan-out: 1 mensagem por (subscription x evento) casado. */
+exports.NEXUS_WEBHOOK_DELIVERIES_TOPIC = "nexus-webhook-deliveries";
+/** Topico de auditoria: 1 mensagem por tentativa de entrega (sink BQ). */
+exports.NEXUS_WEBHOOK_DELIVERY_LOG_TOPIC = "nexus-webhook-delivery-log";
+/** Raiz Firestore do registry (subdocs `private/secret` guardam o segredo). */
+exports.NEXUS_WEBHOOKS_PLATFORM_PATH = "platform/nexus-webhooks";
+/** Versao do contrato do envelope, carimbada em `api_version`. */
+exports.NEXUS_WEBHOOK_API_VERSION = "2026-07-01";
+/** Catalogo v1 de tipos de evento. Alimenta `GET /event-types` e a validacao
+ *  de filtros das subscriptions (globs sao validados a parte). */
+exports.NEXUS_WEBHOOK_EVENT_TYPES = [
+    // tenant (nex-tenants)
+    "tenant.created",
+    "tenant.updated",
+    "tenant.status_changed",
+    // finops — customer
+    "finops.customer.created",
+    "finops.customer.updated",
+    "finops.customer.status_changed",
+    "finops.customer.deleted",
+    // finops — contract
+    "finops.contract.created",
+    "finops.contract.updated",
+    "finops.contract.status_changed",
+    "finops.contract.deleted",
+    // finops — billing
+    "finops.billing.created",
+    "finops.billing.updated",
+    "finops.billing.status_changed",
+    "finops.billing.deleted",
+    // finops — invoice (nota fiscal)
+    "finops.invoice.created",
+    "finops.invoice.updated",
+    "finops.invoice.status_changed",
+    "finops.invoice.deleted",
+    // finops — payment (evento semantico)
+    "finops.payment.received",
+    // forms (onboarding)
+    "forms.onboarding.submitted",
+    "forms.onboarding.updated",
+    "forms.onboarding.completed",
+];

package/dist/types/nexus-webhooks/index.ts

@@ -0,0 +1,187 @@
+// Nexus outbound webhooks — canonical event envelope, subscription registry,
+// delivery tracking and BigQuery audit shapes.
+//
+// Regra do repo: `types/` = interfaces TS escritas a mao (sem zod, sem z.infer).
+// A validacao de payload (zod) vive nas rotas do endpoint nex_webhooks.
+
+import type { IFireGlobalDoc } from "../shared";
+
+// ── Constants ──
+
+/** Topico central: todo emitNexusEvent() publica aqui (envelope canonico). */
+export const NEXUS_WEBHOOK_EVENTS_TOPIC = "nexus-webhook-events" as const;
+
+/** Topico de fan-out: 1 mensagem por (subscription x evento) casado. */
+export const NEXUS_WEBHOOK_DELIVERIES_TOPIC =
+  "nexus-webhook-deliveries" as const;
+
+/** Topico de auditoria: 1 mensagem por tentativa de entrega (sink BQ). */
+export const NEXUS_WEBHOOK_DELIVERY_LOG_TOPIC =
+  "nexus-webhook-delivery-log" as const;
+
+/** Raiz Firestore do registry (subdocs `private/secret` guardam o segredo). */
+export const NEXUS_WEBHOOKS_PLATFORM_PATH = "platform/nexus-webhooks" as const;
+
+/** Versao do contrato do envelope, carimbada em `api_version`. */
+export const NEXUS_WEBHOOK_API_VERSION = "2026-07-01" as const;
+
+// ── Enums / Literals ──
+
+export type NexusWebhookActorKind = "user" | "system" | "provider";
+
+export type NexusWebhookDeliveryStatus =
+  | "pending"
+  | "delivered"
+  | "failed"
+  | "dead_letter";
+
+/** Catalogo v1 de tipos de evento. Alimenta `GET /event-types` e a validacao
+ *  de filtros das subscriptions (globs sao validados a parte). */
+export const NEXUS_WEBHOOK_EVENT_TYPES = [
+  // tenant (nex-tenants)
+  "tenant.created",
+  "tenant.updated",
+  "tenant.status_changed",
+  // finops — customer
+  "finops.customer.created",
+  "finops.customer.updated",
+  "finops.customer.status_changed",
+  "finops.customer.deleted",
+  // finops — contract
+  "finops.contract.created",
+  "finops.contract.updated",
+  "finops.contract.status_changed",
+  "finops.contract.deleted",
+  // finops — billing
+  "finops.billing.created",
+  "finops.billing.updated",
+  "finops.billing.status_changed",
+  "finops.billing.deleted",
+  // finops — invoice (nota fiscal)
+  "finops.invoice.created",
+  "finops.invoice.updated",
+  "finops.invoice.status_changed",
+  "finops.invoice.deleted",
+  // finops — payment (evento semantico)
+  "finops.payment.received",
+  // forms (onboarding)
+  "forms.onboarding.submitted",
+  "forms.onboarding.updated",
+  "forms.onboarding.completed",
+] as const;
+
+export type NexusWebhookEventType = (typeof NEXUS_WEBHOOK_EVENT_TYPES)[number];
+
+// ── Envelope ──
+
+export interface INexusWebhookActor {
+  kind: NexusWebhookActorKind;
+  /** uid do usuario, nome do sistema, ou nome do provider (asaas/inter/...). */
+  id: string | null;
+}
+
+export interface INexusWebhookResource {
+  /** ex.: 'customer', 'contract', 'billing', 'invoice', 'tenant', 'form'. */
+  kind: string;
+  id: string;
+  /** caminho Firestore do recurso, quando aplicavel. */
+  path?: string | null;
+}
+
+/** Envelope canonico. Publicado em NEXUS_WEBHOOK_EVENTS_TOPIC e entregue
+ *  como body (JSON) do POST ao assinante. `id` e a chave de idempotencia. */
+export interface INexusWebhookEvent {
+  id: string; // evt_<uuid>
+  type: NexusWebhookEventType | string;
+  api_version: string;
+  occurred_at: string; // ISO 8601
+  actor: INexusWebhookActor;
+  resource: INexusWebhookResource;
+  /** snapshot fat do recurso + campos do evento (previous_status, etc.). */
+  data: Record<string, unknown>;
+}
+
+// ── Subscription (registry) ──
+
+export type NexusWebhookDisabledReason =
+  | "circuit_breaker"
+  | "manual"
+  | null;
+
+export interface INexusWebhookSubscription extends IFireGlobalDoc {
+  name: string;
+  url: string;
+  /** tipos exatos e/ou globs (`tenant.*`, `finops.billing.*`, `*`). */
+  events: string[];
+  active: boolean;
+  /** headers HTTP custom enviados em cada POST (nao inclui a assinatura). */
+  headers?: Record<string, string> | null;
+  disabled_reason?: NexusWebhookDisabledReason;
+  auto_disabled_at?: Date | null;
+  consecutive_failures?: number;
+}
+
+// ── Secret (subdoc privado) ──
+
+export interface INexusWebhookRotatedSecret {
+  secret: string;
+  /** apos esta data o secret antigo deixa de ser aceito (janela dupla). */
+  expires_at: Date | null;
+}
+
+/** Subdoc `subscriptions/{id}/private/secret`. Nunca sai da API (retornado
+ *  so na criacao/rotacao). */
+export interface INexusWebhookSecretDoc {
+  secret: string; // whsec_<hex>
+  rotated_from?: INexusWebhookRotatedSecret | null;
+  created_at?: Date | null;
+  updated_at?: Date | null;
+}
+
+// ── Delivery (subdoc por evento) ──
+
+export interface INexusWebhookDeliveryAttempt {
+  at: string; // ISO 8601
+  response_code: number | null;
+  error?: string | null;
+  duration_ms: number;
+}
+
+/** Subdoc `subscriptions/{subId}/deliveries/{eventId}` (docId = event id ⇒
+ *  dedup natural). Estado mutavel; historico completo vai para o BQ. */
+export interface INexusWebhookDelivery {
+  event_id: string;
+  event_type: string;
+  status: NexusWebhookDeliveryStatus;
+  attempts: INexusWebhookDeliveryAttempt[];
+  last_response_code?: number | null;
+  /** envelope integral (re-entregue no replay sem reconstruir). */
+  envelope: INexusWebhookEvent;
+  created_at?: Date | null;
+  updated_at?: Date | null;
+  delivered_at?: Date | null;
+}
+
+/** Mensagem publicada em NEXUS_WEBHOOK_DELIVERIES_TOPIC (fan-out). */
+export interface INexusWebhookDeliveryMessage {
+  subscription_id: string;
+  envelope: INexusWebhookEvent;
+}
+
+// ── Delivery log (sink BQ) ──
+
+/** Uma linha por tentativa em `nexus.nex_webhook_delivery_events`. */
+export interface INexusWebhookDeliveryLogEvent {
+  event_id: string;
+  event_type: string;
+  subscription_id: string;
+  subscription_name: string;
+  status: NexusWebhookDeliveryStatus;
+  attempt_number: number;
+  response_code: number | null;
+  error: string | null;
+  duration_ms: number;
+  url: string;
+  occurred_at: string; // ISO 8601 — do envelope (particionamento BQ)
+  delivered_at: string; // ISO 8601 — momento da tentativa
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evo360-types",
-  "version": "1.3.399",
+  "version": "1.3.400",
   "description": "HREVO360 Shared Types",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",