happy2 0.0.5 → 0.0.9

package/packages/happy2-server/dist/modules/webhook/impl/subscriptionSelection.d.ts

@@ -0,0 +1,172 @@
+export declare const subscriptionSelection: {
+    id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "id";
+        tableName: "webhook_subscriptions";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    integration_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "integration_id";
+        tableName: "webhook_subscriptions";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    direction: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "direction";
+        tableName: "webhook_subscriptions";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    chat_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "chat_id";
+        tableName: "webhook_subscriptions";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    url: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "url";
+        tableName: "webhook_subscriptions";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    event_types_json: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "event_types_json";
+        tableName: "webhook_subscriptions";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    active: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "active";
+        tableName: "webhook_subscriptions";
+        dataType: "number";
+        columnType: "SQLiteInteger";
+        data: number;
+        driverParam: number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    created_at: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "created_at";
+        tableName: "webhook_subscriptions";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    updated_at: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "updated_at";
+        tableName: "webhook_subscriptions";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+};
+//# sourceMappingURL=subscriptionSelection.d.ts.map

package/packages/happy2-server/dist/modules/webhook/impl/subscriptionSelection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptionSelection.d.ts","sourceRoot":"","sources":["../../../../sources/modules/webhook/impl/subscriptionSelection.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,qBAAqB;IAC9B,EAAE;;;;;;;;;;;;;;;;;;;IACF,cAAc;;;;;;;;;;;;;;;;;;;IACd,SAAS;;;;;;;;;;;;;;;;;;;IACT,OAAO;;;;;;;;;;;;;;;;;;;IACP,GAAG;;;;;;;;;;;;;;;;;;;IACH,gBAAgB;;;;;;;;;;;;;;;;;;;IAChB,MAAM;;;;;;;;;;;;;;;;;IACN,UAAU;;;;;;;;;;;;;;;;;;;IACV,UAAU;;;;;;;;;;;;;;;;;;;CACb,CAAC"}

package/packages/happy2-server/dist/modules/webhook/impl/subscriptionSelection.js

@@ -0,0 +1,13 @@
+import { webhookSubscriptions } from "../../schema.js";
+export const subscriptionSelection = {
+    id: webhookSubscriptions.id,
+    integration_id: webhookSubscriptions.integrationId,
+    direction: webhookSubscriptions.direction,
+    chat_id: webhookSubscriptions.chatId,
+    url: webhookSubscriptions.url,
+    event_types_json: webhookSubscriptions.eventTypesJson,
+    active: webhookSubscriptions.active,
+    created_at: webhookSubscriptions.createdAt,
+    updated_at: webhookSubscriptions.updatedAt,
+};
+//# sourceMappingURL=subscriptionSelection.js.map

package/packages/happy2-server/dist/modules/webhook/impl/subscriptionSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptionSelection.js","sourceRoot":"","sources":["../../../../sources/modules/webhook/impl/subscriptionSelection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACjC,EAAE,EAAE,oBAAoB,CAAC,EAAE;IAC3B,cAAc,EAAE,oBAAoB,CAAC,aAAa;IAClD,SAAS,EAAE,oBAAoB,CAAC,SAAS;IACzC,OAAO,EAAE,oBAAoB,CAAC,MAAM;IACpC,GAAG,EAAE,oBAAoB,CAAC,GAAG;IAC7B,gBAAgB,EAAE,oBAAoB,CAAC,cAAc;IACrD,MAAM,EAAE,oBAAoB,CAAC,MAAM;IACnC,UAAU,EAAE,oBAAoB,CAAC,SAAS;IAC1C,UAAU,EAAE,oBAAoB,CAAC,SAAS;CAC7C,CAAC"}

package/packages/happy2-server/dist/modules/webhook/impl/truncate.d.ts

@@ -0,0 +1,2 @@
+export declare function truncate(value: string | undefined, maximum: number): string | undefined;
+//# sourceMappingURL=truncate.d.ts.map

package/packages/happy2-server/dist/modules/webhook/impl/truncate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"truncate.d.ts","sourceRoot":"","sources":["../../../../sources/modules/webhook/impl/truncate.ts"],"names":[],"mappings":"AAAA,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEvF"}

package/packages/happy2-server/dist/modules/webhook/impl/truncate.js

@@ -0,0 +1,4 @@
+export function truncate(value, maximum) {
+    return value === undefined ? undefined : value.slice(0, maximum);
+}
+//# sourceMappingURL=truncate.js.map

package/packages/happy2-server/dist/modules/webhook/impl/truncate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"truncate.js","sourceRoot":"","sources":["../../../../sources/modules/webhook/impl/truncate.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,KAAyB,EAAE,OAAe;IAC/D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC"}

package/packages/happy2-server/dist/modules/webhook/incomingWebhookCreate.d.ts

@@ -0,0 +1,14 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type IntegrationMutation, type IssuedIncomingWebhook } from "../integrations/types.js";
+/**
+ * Creates an incoming webhookSubscriptions endpoint for a validated bot and chat under integration-administrator control.
+ * Binding secret, bot, and destination at creation prevents external requests from posting through an incomplete or unauthorized route.
+ */
+export declare function incomingWebhookCreate(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    name: string;
+    description?: string;
+    botId: string;
+    chatId: string;
+}): Promise<IntegrationMutation<IssuedIncomingWebhook>>;
+//# sourceMappingURL=incomingWebhookCreate.d.ts.map

package/packages/happy2-server/dist/modules/webhook/incomingWebhookCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"incomingWebhookCreate.d.ts","sourceRoot":"","sources":["../../../sources/modules/webhook/incomingWebhookCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,KAAK,mBAAmB,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAchG;;;GAGG;AACH,wBAAsB,qBAAqB,CACvC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB,GACF,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAsCrD"}

package/packages/happy2-server/dist/modules/webhook/incomingWebhookCreate.js

@@ -0,0 +1,51 @@
+import { withTransaction } from "../drizzle.js";
+import {} from "../integrations/types.js";
+import { createId } from "@paralleldrive/cuid2";
+import { generateIncomingWebhookToken, secretHash } from "../integrations/secrets.js";
+import { webhookSubscriptions } from "../schema.js";
+import { integrationFinishChange } from "../integration/integrationFinishChange.js";
+import { integrationGet } from "../integration/integrationGet.js";
+import { getSubscriptionDb } from "./impl/getSubscriptionDb.js";
+import { integrationInsert } from "../integration/integrationInsert.js";
+import { userRequireIntegrationAdmin } from "../integration/userRequireIntegrationAdmin.js";
+import { botRequire } from "../integration/botRequire.js";
+import { requireChatDb } from "./impl/requireChatDb.js";
+/**
+ * Creates an incoming webhookSubscriptions endpoint for a validated bot and chat under integration-administrator control.
+ * Binding secret, bot, and destination at creation prevents external requests from posting through an incomplete or unauthorized route.
+ */
+export async function incomingWebhookCreate(executor, input) {
+    const token = generateIncomingWebhookToken();
+    return withTransaction(executor, async (tx) => {
+        await userRequireIntegrationAdmin(tx, input.actorUserId);
+        await botRequire(tx, input.botId);
+        await requireChatDb(tx, input.chatId);
+        const integration = await integrationInsert(tx, {
+            actorUserId: input.actorUserId,
+            kind: "incoming_webhook",
+            name: input.name,
+            description: input.description,
+            botId: input.botId,
+            scopes: ["messages:write"],
+        });
+        const subscriptionId = createId();
+        await tx.insert(webhookSubscriptions).values({
+            id: subscriptionId,
+            integrationId: integration.id,
+            direction: "incoming",
+            chatId: input.chatId,
+            tokenHash: secretHash(token),
+            eventTypesJson: "[]",
+        });
+        const change = await integrationFinishChange(tx, input.actorUserId, "integration.created", integration.id);
+        return {
+            value: {
+                integration: await integrationGet(tx, integration.id),
+                subscription: await getSubscriptionDb(tx, subscriptionId),
+                token,
+            },
+            change,
+        };
+    });
+}
+//# sourceMappingURL=incomingWebhookCreate.js.map

package/packages/happy2-server/dist/modules/webhook/incomingWebhookCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incomingWebhookCreate.js","sourceRoot":"","sources":["../../../sources/modules/webhook/incomingWebhookCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAwD,MAAM,0BAA0B,CAAC;AAEhG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,4BAA4B,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,QAAyB,EACzB,KAMC;IAED,MAAM,KAAK,GAAG,4BAA4B,EAAE,CAAC;IAC7C,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,2BAA2B,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE;YAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,CAAC,gBAAgB,CAAC;SAC7B,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,QAAQ,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;YACzC,EAAE,EAAE,cAAc;YAClB,aAAa,EAAE,WAAW,CAAC,EAAE;YAC7B,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC;YAC5B,cAAc,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,CACxC,EAAE,EACF,KAAK,CAAC,WAAW,EACjB,qBAAqB,EACrB,WAAW,CAAC,EAAE,CACjB,CAAC;QACF,OAAO;YACH,KAAK,EAAE;gBACH,WAAW,EAAE,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC;gBACrD,YAAY,EAAE,MAAM,iBAAiB,CAAC,EAAE,EAAE,cAAc,CAAC;gBACzD,KAAK;aACR;YACD,MAAM;SACT,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/webhook/incomingWebhookInvoke.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type IncomingWebhookSink, type IncomingWebhookSinkResult } from "../integrations/types.js";
+/**
+ * Revalidates the incoming subscription, integration, and administrator before passing its configured bot and chat to the message sink.
+ * The action performs no database write itself, but owns the external send boundary and forwards a validated idempotency key when supplied.
+ */
+export declare function incomingWebhookInvoke(executor: DrizzleExecutor, token: string, textValue: string, sink: IncomingWebhookSink, idempotencyKey?: string): Promise<IncomingWebhookSinkResult>;
+//# sourceMappingURL=incomingWebhookInvoke.d.ts.map

package/packages/happy2-server/dist/modules/webhook/incomingWebhookInvoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"incomingWebhookInvoke.d.ts","sourceRoot":"","sources":["../../../sources/modules/webhook/incomingWebhookInvoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EACH,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAEjC,MAAM,0BAA0B,CAAC;AASlC;;;GAGG;AACH,wBAAsB,qBAAqB,CACvC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,mBAAmB,EACzB,cAAc,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,yBAAyB,CAAC,CA2DpC"}

package/packages/happy2-server/dist/modules/webhook/incomingWebhookInvoke.js

@@ -0,0 +1,56 @@
+import {} from "../drizzle.js";
+import { IntegrationError, } from "../integrations/types.js";
+import { accounts, integrations, users, webhookSubscriptions } from "../schema.js";
+import { and, eq, isNull } from "drizzle-orm";
+import { parseScopes } from "../integration/parseScopes.js";
+import { requiredText } from "./impl/requiredText.js";
+import { secretHash } from "../integrations/secrets.js";
+/**
+ * Revalidates the incoming subscription, integration, and administrator before passing its configured bot and chat to the message sink.
+ * The action performs no database write itself, but owns the external send boundary and forwards a validated idempotency key when supplied.
+ */
+export async function incomingWebhookInvoke(executor, token, textValue, sink, idempotencyKey) {
+    if (!token.startsWith("happy2_hook_") || token.length > 256)
+        throw new IntegrationError("unauthorized", "Incoming webhook token is invalid");
+    const textBody = requiredText(textValue, "Webhook message", 40_000);
+    if (idempotencyKey !== undefined &&
+        (idempotencyKey.length === 0 ||
+            idempotencyKey.length > 200 ||
+            !/^[\x21-\x7e]+$/.test(idempotencyKey)))
+        throw new IntegrationError("invalid", "Idempotency key is invalid");
+    const [row] = await executor
+        .select({
+        id: webhookSubscriptions.id,
+        chatId: webhookSubscriptions.chatId,
+        integrationId: integrations.id,
+        botId: integrations.botId,
+        scopesJson: integrations.scopesJson,
+        createdByUserId: integrations.createdByUserId,
+    })
+        .from(webhookSubscriptions)
+        .innerJoin(integrations, eq(integrations.id, webhookSubscriptions.integrationId))
+        .innerJoin(users, eq(users.id, integrations.createdByUserId))
+        .innerJoin(accounts, eq(accounts.id, users.accountId))
+        .where(and(eq(webhookSubscriptions.direction, "incoming"), eq(webhookSubscriptions.tokenHash, secretHash(token)), eq(webhookSubscriptions.active, 1), eq(integrations.kind, "incoming_webhook"), eq(integrations.active, 1), isNull(integrations.deletedAt), eq(users.role, "admin"), isNull(users.deletedAt), eq(accounts.active, 1), isNull(accounts.bannedAt), isNull(accounts.deletedAt)));
+    if (!row || !parseScopes(row.scopesJson).includes("messages:write"))
+        throw new IntegrationError("unauthorized", "Incoming webhook token is invalid");
+    const chatId = row.chatId ?? undefined;
+    const botId = row.botId ?? undefined;
+    const actorUserId = row.createdByUserId ?? undefined;
+    if (!chatId || !botId || !actorUserId)
+        throw new IntegrationError("forbidden", "Incoming webhook is no longer configured");
+    return sink.sendMessage({
+        actorUserId,
+        integrationId: row.integrationId,
+        subscriptionId: row.id,
+        botId,
+        chatId,
+        text: textBody,
+        ...(idempotencyKey
+            ? {
+                idempotencyKey,
+            }
+            : {}),
+    });
+}
+//# sourceMappingURL=incomingWebhookInvoke.js.map

package/packages/happy2-server/dist/modules/webhook/incomingWebhookInvoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incomingWebhookInvoke.js","sourceRoot":"","sources":["../../../sources/modules/webhook/incomingWebhookInvoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAGH,gBAAgB,GACnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,QAAyB,EACzB,KAAa,EACb,SAAiB,EACjB,IAAyB,EACzB,cAAuB;IAEvB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QACvD,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACpE,IACI,cAAc,KAAK,SAAS;QAC5B,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;YACxB,cAAc,CAAC,MAAM,GAAG,GAAG;YAC3B,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE3C,MAAM,IAAI,gBAAgB,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,EAAE,EAAE,oBAAoB,CAAC,EAAE;QAC3B,MAAM,EAAE,oBAAoB,CAAC,MAAM;QACnC,aAAa,EAAE,YAAY,CAAC,EAAE;QAC9B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,eAAe,EAAE,YAAY,CAAC,eAAe;KAChD,CAAC;SACD,IAAI,CAAC,oBAAoB,CAAC;SAC1B,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;SAChF,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;SAC5D,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;SACrD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,CAAC,EAC9C,EAAE,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EACrD,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC,EAClC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,kBAAkB,CAAC,EACzC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,EAC1B,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAC9B,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EACtB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACzB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7B,CACJ,CAAC;IACN,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC/D,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,mCAAmC,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC;IACrC,MAAM,WAAW,GAAG,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IACrD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW;QACjC,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,0CAA0C,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,WAAW,CAAC;QACpB,WAAW;QACX,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,cAAc,EAAE,GAAG,CAAC,EAAE;QACtB,KAAK;QACL,MAAM;QACN,IAAI,EAAE,QAAQ;QACd,GAAG,CAAC,cAAc;YACd,CAAC,CAAC;gBACI,cAAc;aACjB;YACH,CAAC,CAAC,EAAE,CAAC;KACZ,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/webhook/outgoingWebhookCreate.d.ts

@@ -0,0 +1,17 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type IntegrationMutation, type IssuedOutgoingWebhook } from "../integrations/types.js";
+import { type SecretProtector } from "../integrations/secrets.js";
+import { type WebhookUrlPolicy } from "../integrations/ssrf.js";
+/**
+ * Creates an outgoing webhookSubscriptions route with validated event filters, destination URL, signing secret, and chat scope.
+ * The administrator-authorized boundary gives delivery workers one complete subscription rather than independently configured routing pieces.
+ */
+export declare function outgoingWebhookCreate(executor: DrizzleExecutor, urlPolicy: WebhookUrlPolicy, protector: SecretProtector, input: {
+    actorUserId: string;
+    name: string;
+    description?: string;
+    url: string;
+    eventTypes: readonly string[];
+    chatId?: string;
+}): Promise<IntegrationMutation<IssuedOutgoingWebhook>>;
+//# sourceMappingURL=outgoingWebhookCreate.d.ts.map

package/packages/happy2-server/dist/modules/webhook/outgoingWebhookCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outgoingWebhookCreate.d.ts","sourceRoot":"","sources":["../../../sources/modules/webhook/outgoingWebhookCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,KAAK,mBAAmB,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEhG,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAYhE;;;GAGG;AACH,wBAAsB,qBAAqB,CACvC,QAAQ,EAAE,eAAe,EACzB,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,eAAe,EAC1B,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,GACF,OAAO,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAwCrD"}

package/packages/happy2-server/dist/modules/webhook/outgoingWebhookCreate.js

@@ -0,0 +1,55 @@
+import { withTransaction } from "../drizzle.js";
+import {} from "../integrations/types.js";
+import { generateSigningSecret } from "../integrations/secrets.js";
+import {} from "../integrations/ssrf.js";
+import { createId } from "@paralleldrive/cuid2";
+import { normalizeEventTypes } from "./impl/normalizeEventTypes.js";
+import { webhookSubscriptions } from "../schema.js";
+import { integrationFinishChange } from "../integration/integrationFinishChange.js";
+import { integrationGet } from "../integration/integrationGet.js";
+import { getSubscriptionDb } from "./impl/getSubscriptionDb.js";
+import { integrationInsert } from "../integration/integrationInsert.js";
+import { userRequireIntegrationAdmin } from "../integration/userRequireIntegrationAdmin.js";
+import { requireChatDb } from "./impl/requireChatDb.js";
+/**
+ * Creates an outgoing webhookSubscriptions route with validated event filters, destination URL, signing secret, and chat scope.
+ * The administrator-authorized boundary gives delivery workers one complete subscription rather than independently configured routing pieces.
+ */
+export async function outgoingWebhookCreate(executor, urlPolicy, protector, input) {
+    const url = urlPolicy.validateForStorage(input.url);
+    const eventTypes = normalizeEventTypes(input.eventTypes);
+    const signingSecret = generateSigningSecret();
+    const ciphertext = await protector.protect(signingSecret);
+    return withTransaction(executor, async (tx) => {
+        await userRequireIntegrationAdmin(tx, input.actorUserId);
+        if (input.chatId)
+            await requireChatDb(tx, input.chatId);
+        const integration = await integrationInsert(tx, {
+            actorUserId: input.actorUserId,
+            kind: "outgoing_webhook",
+            name: input.name,
+            description: input.description,
+            scopes: ["events:read"],
+        });
+        const subscriptionId = createId();
+        await tx.insert(webhookSubscriptions).values({
+            id: subscriptionId,
+            integrationId: integration.id,
+            direction: "outgoing",
+            chatId: input.chatId ?? null,
+            url,
+            signingSecretCiphertext: ciphertext,
+            eventTypesJson: JSON.stringify(eventTypes),
+        });
+        const change = await integrationFinishChange(tx, input.actorUserId, "integration.created", integration.id);
+        return {
+            value: {
+                integration: await integrationGet(tx, integration.id),
+                subscription: await getSubscriptionDb(tx, subscriptionId),
+                signingSecret,
+            },
+            change,
+        };
+    });
+}
+//# sourceMappingURL=outgoingWebhookCreate.js.map

package/packages/happy2-server/dist/modules/webhook/outgoingWebhookCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outgoingWebhookCreate.js","sourceRoot":"","sources":["../../../sources/modules/webhook/outgoingWebhookCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAwD,MAAM,0BAA0B,CAAC;AAEhG,OAAO,EAAE,qBAAqB,EAAwB,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAyB,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,QAAyB,EACzB,SAA2B,EAC3B,SAA0B,EAC1B,KAOC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1D,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,2BAA2B,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE;YAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,CAAC,aAAa,CAAC;SAC1B,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,QAAQ,EAAE,CAAC;QAClC,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;YACzC,EAAE,EAAE,cAAc;YAClB,aAAa,EAAE,WAAW,CAAC,EAAE;YAC7B,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,GAAG;YACH,uBAAuB,EAAE,UAAU;YACnC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,CACxC,EAAE,EACF,KAAK,CAAC,WAAW,EACjB,qBAAqB,EACrB,WAAW,CAAC,EAAE,CACjB,CAAC;QACF,OAAO;YACH,KAAK,EAAE;gBACH,WAAW,EAAE,MAAM,cAAc,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC;gBACrD,YAAY,EAAE,MAAM,iBAAiB,CAAC,EAAE,EAAE,cAAc,CAAC;gBACzD,aAAa;aAChB;YACD,MAAM;SACT,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryDispatchDue.d.ts

@@ -0,0 +1,17 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type SecretProtector } from "../integrations/secrets.js";
+import { type WebhookTransport } from "../integrations/types.js";
+import { type WebhookUrlPolicy } from "../integrations/ssrf.js";
+/**
+ * Leases due webhook deliveries, resolves each destination under the SSRF policy, signs its payload, and records the HTTP outcome or retry failure.
+ * Network I/O intentionally sits between separate claim and terminal updates so no database transaction remains open while the remote endpoint responds.
+ */
+export declare function webhookDeliveryDispatchDue(executor: DrizzleExecutor, urlPolicy: WebhookUrlPolicy, protector: SecretProtector, nowProvider: () => Date, transport: WebhookTransport, options?: {
+    limit?: number;
+    leaseMs?: number;
+    maxAttempts?: number;
+}): Promise<{
+    delivered: number;
+    failed: number;
+}>;
+//# sourceMappingURL=webhookDeliveryDispatchDue.d.ts.map

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryDispatchDue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookDeliveryDispatchDue.d.ts","sourceRoot":"","sources":["../../../sources/modules/webhook/webhookDeliveryDispatchDue.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAMhE;;;GAGG;AACH,wBAAsB,0BAA0B,CAC5C,QAAQ,EAAE,eAAe,EACzB,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,eAAe,EAC1B,WAAW,EAAE,MAAM,IAAI,EACvB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,GAAE;IACL,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACnB,GACP,OAAO,CAAC;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC,CAwCD"}

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryDispatchDue.js

@@ -0,0 +1,58 @@
+import { DeliveryHttpError } from "./impl/deliveryHttpError.js";
+import {} from "../drizzle.js";
+import { MAX_DELIVERY_ATTEMPTS } from "./impl/maxDeliveryAttempts.js";
+import {} from "../integrations/secrets.js";
+import {} from "../integrations/types.js";
+import {} from "../integrations/ssrf.js";
+import { createHmac } from "node:crypto";
+import { positiveLimit } from "./impl/positiveLimit.js";
+import { claimDueDeliveries } from "./impl/claimDueDeliveries.js";
+import { completeDelivery } from "./impl/completeDelivery.js";
+import { failDelivery } from "./impl/failDelivery.js";
+/**
+ * Leases due webhook deliveries, resolves each destination under the SSRF policy, signs its payload, and records the HTTP outcome or retry failure.
+ * Network I/O intentionally sits between separate claim and terminal updates so no database transaction remains open while the remote endpoint responds.
+ */
+export async function webhookDeliveryDispatchDue(executor, urlPolicy, protector, nowProvider, transport, options = {}) {
+    const limit = positiveLimit(options.limit ?? 25, 100);
+    const leaseMs = positiveLimit(options.leaseMs ?? 30_000, 300_000);
+    const maxAttempts = positiveLimit(options.maxAttempts ?? MAX_DELIVERY_ATTEMPTS, 20);
+    const claimed = await claimDueDeliveries(executor, nowProvider, limit, leaseMs, maxAttempts);
+    let delivered = 0;
+    let failed = 0;
+    for (const delivery of claimed) {
+        try {
+            const target = await urlPolicy.resolveForDelivery(delivery.url);
+            const secret = await protector.reveal(delivery.signingSecretCiphertext);
+            const timestamp = Math.floor(nowProvider().getTime() / 1_000).toString();
+            const signature = `v1=${createHmac("sha256", secret).update(`${timestamp}.${delivery.payloadJson}`, "utf8").digest("hex")}`;
+            const response = await transport.deliver({
+                deliveryId: delivery.id,
+                eventId: delivery.eventId,
+                eventType: delivery.eventType,
+                url: target.url,
+                allowedAddresses: target.addresses,
+                body: delivery.payloadJson,
+                headers: {
+                    "content-type": "application/json",
+                    "x-happy2-event-id": delivery.eventId,
+                    "x-happy2-signature": signature,
+                    "x-happy2-timestamp": timestamp,
+                },
+            });
+            if (response.statusCode < 200 || response.statusCode >= 300)
+                throw new DeliveryHttpError(response.statusCode, response.body);
+            await completeDelivery(executor, delivery, response.statusCode, response.body);
+            delivered += 1;
+        }
+        catch (error) {
+            await failDelivery(executor, nowProvider, delivery, error, maxAttempts);
+            failed += 1;
+        }
+    }
+    return {
+        delivered,
+        failed,
+    };
+}
+//# sourceMappingURL=webhookDeliveryDispatchDue.js.map

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryDispatchDue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookDeliveryDispatchDue.js","sourceRoot":"","sources":["../../../sources/modules/webhook/webhookDeliveryDispatchDue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAwB,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAyB,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAyB,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,QAAyB,EACzB,SAA2B,EAC3B,SAA0B,EAC1B,WAAuB,EACvB,SAA2B,EAC3B,OAAO,GAIH,EAAE;IAKN,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,qBAAqB,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7F,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YACxE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;YACzE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5H,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBACrC,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,gBAAgB,EAAE,MAAM,CAAC,SAAS;gBAClC,IAAI,EAAE,QAAQ,CAAC,WAAW;gBAC1B,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,mBAAmB,EAAE,QAAQ,CAAC,OAAO;oBACrC,oBAAoB,EAAE,SAAS;oBAC/B,oBAAoB,EAAE,SAAS;iBAClC;aACJ,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG;gBACvD,MAAM,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/E,SAAS,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACtB,MAAM,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO;QACH,SAAS;QACT,MAAM;KACT,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryEnqueueOutgoingEvent.d.ts

@@ -0,0 +1,13 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type QueuedWebhookDelivery } from "../integrations/types.js";
+/**
+ * Inserts webhookDeliveries for each active outgoing subscription whose scope and filters match the durable product event.
+ * Enqueueing from the event transaction prevents external delivery of an event whose underlying server mutation did not commit.
+ */
+export declare function webhookDeliveryEnqueueOutgoingEvent(executor: DrizzleExecutor, nowProvider: () => Date, input: {
+    eventId: string;
+    eventType: string;
+    chatId?: string;
+    payload: Record<string, unknown>;
+}): Promise<QueuedWebhookDelivery[]>;
+//# sourceMappingURL=webhookDeliveryEnqueueOutgoingEvent.d.ts.map

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryEnqueueOutgoingEvent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookDeliveryEnqueueOutgoingEvent.d.ts","sourceRoot":"","sources":["../../../sources/modules/webhook/webhookDeliveryEnqueueOutgoingEvent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAYtE;;;GAGG;AACH,wBAAsB,mCAAmC,CACrD,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,IAAI,EACvB,KAAK,EAAE;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,GACF,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAwClC"}

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryEnqueueOutgoingEvent.js

@@ -0,0 +1,54 @@
+import { withTransaction } from "../drizzle.js";
+import {} from "../integrations/types.js";
+import { and, eq } from "drizzle-orm";
+import { asDelivery } from "../integration/asDelivery.js";
+import { boundedIdentifier } from "./impl/boundedIdentifier.js";
+import { createId } from "@paralleldrive/cuid2";
+import { deliverySelection } from "../integration/deliverySelection.js";
+import { normalizedEventType } from "./impl/normalizedEventType.js";
+import { outgoingSubscriptionIds } from "./impl/outgoingSubscriptionIds.js";
+import { serializedPayload } from "../integration/serializedPayload.js";
+import { webhookDeliveries } from "../schema.js";
+/**
+ * Inserts webhookDeliveries for each active outgoing subscription whose scope and filters match the durable product event.
+ * Enqueueing from the event transaction prevents external delivery of an event whose underlying server mutation did not commit.
+ */
+export async function webhookDeliveryEnqueueOutgoingEvent(executor, nowProvider, input) {
+    boundedIdentifier(input.eventId, "Event id");
+    const eventType = normalizedEventType(input.eventType);
+    const payloadJson = serializedPayload({
+        eventId: input.eventId,
+        eventType,
+        occurredAt: nowProvider().toISOString(),
+        payload: input.payload,
+    });
+    if ((await outgoingSubscriptionIds(executor, eventType, input.chatId)).length === 0)
+        return [];
+    return withTransaction(executor, async (tx) => {
+        const subscriptions = await outgoingSubscriptionIds(tx, eventType, input.chatId);
+        const deliveries = [];
+        for (const row of subscriptions) {
+            const subscriptionId = row.id;
+            const id = createId();
+            await tx
+                .insert(webhookDeliveries)
+                .values({
+                id,
+                subscriptionId,
+                eventId: input.eventId,
+                eventType,
+                payloadJson,
+                nextAttemptAt: nowProvider().toISOString(),
+            })
+                .onConflictDoNothing();
+            const [delivery] = await tx
+                .select(deliverySelection)
+                .from(webhookDeliveries)
+                .where(and(eq(webhookDeliveries.subscriptionId, subscriptionId), eq(webhookDeliveries.eventId, input.eventId)));
+            if (delivery)
+                deliveries.push(asDelivery(delivery));
+        }
+        return deliveries;
+    });
+}
+//# sourceMappingURL=webhookDeliveryEnqueueOutgoingEvent.js.map

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryEnqueueOutgoingEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookDeliveryEnqueueOutgoingEvent.js","sourceRoot":"","sources":["../../../sources/modules/webhook/webhookDeliveryEnqueueOutgoingEvent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAA8B,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACrD,QAAyB,EACzB,WAAuB,EACvB,KAKC;IAED,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,iBAAiB,CAAC;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS;QACT,UAAU,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,uBAAuB,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/F,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAC9B,MAAM,cAAc,GAAG,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;YACtB,MAAM,EAAE;iBACH,MAAM,CAAC,iBAAiB,CAAC;iBACzB,MAAM,CAAC;gBACJ,EAAE;gBACF,cAAc;gBACd,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS;gBACT,WAAW;gBACX,aAAa,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE;aAC7C,CAAC;iBACD,mBAAmB,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;iBACtB,MAAM,CAAC,iBAAiB,CAAC;iBACzB,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,iBAAiB,CAAC,cAAc,EAAE,cAAc,CAAC,EACpD,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAC/C,CACJ,CAAC;YACN,IAAI,QAAQ;gBAAE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/webhook/webhookDeliveryEnqueuePendingSyncEvents.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type QueuedWebhookDelivery } from "../integrations/types.js";
+/**
+ * Backfills delivery rows for the oldest sync sequences that still match an outgoing subscription but have not been queued.
+ * Each sequence delegates conflict-safe insertion to the event enqueue path, allowing a worker to retry this scan without duplicating deliveries.
+ */
+export declare function webhookDeliveryEnqueuePendingSyncEvents(executor: DrizzleExecutor, nowProvider: () => Date, limit?: number): Promise<QueuedWebhookDelivery[]>;
+//# sourceMappingURL=webhookDeliveryEnqueuePendingSyncEvents.d.ts.map