pipework 0.211.1 → 0.242.0

package/dist/infra/support/http.js

@@ -0,0 +1,217 @@
+import { createHash, timingSafeEqual } from 'node:crypto';
+import { Builder } from '../../request/di/builder.js';
+import { schema } from '../../data/schema/namespace.js';
+import { NotFoundError, UnauthorizedError, ForbiddenError } from '../../core/errors/index.js';
+import { requireContext, runInContext } from '../../request/context/store.js';
+import { __flowStep } from '../../trace/runtime/flow-step.js';
+import { pipeSystem } from '../../data/db/db.js';
+import { sql } from '../../data/db/sql.js';
+import { BadRequestError } from '../alerts/http.js';
+import { TICKET_STATES } from './schema.js';
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const sha = (s) => createHash('sha256').update(s).digest();
+function authenticate(credentials, header) {
+    const match = header !== undefined ? /^Bearer (.+)$/.exec(header) : null;
+    const given = sha(match?.[1] ?? '');
+    let found = null;
+    for (const [principal, digest] of credentials) {
+        if (timingSafeEqual(given, digest) && match !== null && found === null)
+            found = principal;
+    }
+    if (found === null)
+        throw new UnauthorizedError('A valid service credential is required: send Authorization: Bearer <secret>.');
+    return found;
+}
+function bad(field, problem) {
+    throw new BadRequestError(`Invalid ${field}: ${problem}.`, { field });
+}
+function optString(source, field) {
+    const value = source?.[field];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string')
+        bad(field, 'must be a string');
+    return value;
+}
+function reqString(source, field) {
+    const value = optString(source, field);
+    if (value === undefined)
+        bad(field, 'is required');
+    return value;
+}
+function body(raw) {
+    if (raw === undefined || raw === null)
+        return {};
+    if (typeof raw !== 'object' || Array.isArray(raw))
+        bad('body', 'must be a JSON object');
+    return raw;
+}
+function limitOf(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!/^[1-9][0-9]*$/.test(raw))
+        bad('limit', 'must be a positive integer');
+    return Number(raw);
+}
+function validateOptions(options) {
+    if (!options.path.startsWith('/') || options.path.length < 2 || options.path.endsWith('/')) {
+        throw new Error(`support.http: path "${options.path}" must start with "/" and have no trailing slash, e.g. "/ops/support".`);
+    }
+    const entries = Object.entries(options.credentials);
+    if (entries.length === 0) {
+        throw new Error('support.http: credentials needs at least one entry, name -> secret (the secret is at least 32 characters).');
+    }
+    for (const [name, cred] of entries) {
+        const secret = typeof cred === 'string' ? cred : cred?.secret;
+        if (typeof secret !== 'string' || secret.length < 32) {
+            throw new Error(`support.http: the secret for credential "${name}" is under 32 characters; use a long random value.`);
+        }
+        if (typeof cred !== 'string' && cred.approve !== undefined && typeof cred.approve !== 'boolean') {
+            throw new Error(`support.http: "approve" for credential "${name}" must be true or false.`);
+        }
+    }
+}
+/**
+ * Routes for a support agent, under `options.path` (all JSON, no session, no tenant): GET list (`state`, `category`,
+ * `tenantId`, `limit`, `cursor`), GET `/:id` (ticket, messages, links), PATCH `/:id` (`{ category }`, null clears),
+ * POST `/:id/transition` (`{ to }`), `/:id/notes` (`{ text }`), `/:id/links` (`{ kind, ref, label? }`),
+ * `/:id/drafts` (`{ text, html?, subject? }`, answers `{ draftId, version }`), PATCH and DELETE `/drafts/:id`, and
+ * POST `/drafts/:id/approve` (`{ version }`, 403 for a key without `approve: true`). A stale or already-approved draft is 409.
+ * Every request needs `Authorization: Bearer <secret>` matching one of `credentials`; the credential's name is the actor
+ * (audit rows, a draft's author, the approver), so `canApprove` and `distinctApprover` judge the key's name.
+ * Each call is the handle's own, traced and audited by it. Ids are looked up across tenants on the system channel, which a
+ * database with `rls.platformRole` refuses over the support tables; there these routes do not work. A bad value is 400 naming the field.
+ */
+export function supportHttp(handle, options) {
+    validateOptions(options);
+    const credentials = Object.entries(options.credentials).map(([name, cred]) => {
+        const principal = typeof cred === 'string' ? { name, approve: false } : { name, approve: cred.approve === true };
+        return [principal, sha(typeof cred === 'string' ? cred : cred.secret)];
+    });
+    const base = options.path;
+    const any = schema.check.unknown();
+    const get = (path) => new Builder().public().request().query(any).params(any).route('GET', path);
+    const withBody = (method, path) => new Builder().public().request().query(any).params(any).input(any).route(method, path);
+    const del = (path) => new Builder().public().request().query(any).params(any).route('DELETE', path);
+    const idOf = (params) => String(params.id);
+    // The handle takes its actor from the Flow's auth: run each call as the key's name, in a trace step so its audit
+    // records have one to sit under.
+    const as = (who, fn) => {
+        const flow = requireContext();
+        const step = __flowStep({ ref: 'src/infra/support/http.ts:supportHttp' }, fn);
+        return runInContext({ ...flow, auth: { userId: who.name } }, step);
+    };
+    const tenantOfTicket = async (id) => {
+        if (UUID_RE.test(id)) {
+            const rows = await pipeSystem().execute(sql `SELECT tenant_id FROM support_ticket WHERE id = ${id}::uuid`);
+            if (rows[0] !== undefined)
+                return rows[0]['tenant_id'];
+        }
+        throw new NotFoundError('Support ticket', { ticketId: id });
+    };
+    const tenantOfDraft = async (id) => {
+        if (UUID_RE.test(id)) {
+            const rows = await pipeSystem().execute(sql `SELECT tenant_id FROM support_message WHERE id = ${id}::uuid AND kind = 'draft'`);
+            if (rows[0] !== undefined)
+                return rows[0]['tenant_id'];
+        }
+        throw new NotFoundError('Support draft', { draftId: id });
+    };
+    const draftPatch = (b) => {
+        const text = optString(b, 'text');
+        const html = optString(b, 'html');
+        const subject = optString(b, 'subject');
+        return { ...(text === undefined ? {} : { text }), ...(html === undefined ? {} : { html }), ...(subject === undefined ? {} : { subject }) };
+    };
+    return [
+        get(base).fit(async ({ request, query }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const state = optString(query, 'state');
+            if (state !== undefined && !TICKET_STATES.includes(state))
+                bad('state', `"${state}" is not one of ${TICKET_STATES.join(', ')}`);
+            const category = optString(query, 'category');
+            const tenantId = optString(query, 'tenantId');
+            const limit = limitOf(optString(query, 'limit'));
+            const cursor = optString(query, 'cursor');
+            if (tenantId !== undefined && !UUID_RE.test(tenantId))
+                bad('tenantId', 'must be a UUID');
+            return as(who, () => handle.listAll({
+                ...(state === undefined ? {} : { state: state }), ...(category === undefined ? {} : { category }), ...(tenantId === undefined ? {} : { tenantId }),
+                ...(limit === undefined ? {} : { limit }), ...(cursor === undefined ? {} : { cursor }),
+            }));
+        }),
+        get(`${base}/:id`).fit(async ({ request, params }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const id = idOf(params);
+            return as(who, async () => handle.getFor(await tenantOfTicket(id), id));
+        }),
+        withBody('PATCH', `${base}/:id`).fit(async ({ request, params, input }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const b = body(input);
+            const category = b['category'];
+            if (category !== null && typeof category !== 'string')
+                bad('category', 'must be a string or null');
+            const id = idOf(params);
+            return as(who, async () => handle.setCategoryFor(await tenantOfTicket(id), id, category));
+        }),
+        withBody('POST', `${base}/:id/transition`).fit(async ({ request, params, input }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const to = reqString(body(input), 'to');
+            if (!TICKET_STATES.includes(to))
+                bad('to', `"${to}" is not one of ${TICKET_STATES.join(', ')}`);
+            const id = idOf(params);
+            return as(who, async () => handle.transitionFor(await tenantOfTicket(id), id, to));
+        }),
+        withBody('POST', `${base}/:id/notes`).fit(async ({ request, params, input }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const text = reqString(body(input), 'text');
+            const id = idOf(params);
+            return as(who, async () => handle.addNoteFor(await tenantOfTicket(id), id, text));
+        }),
+        withBody('POST', `${base}/:id/links`).fit(async ({ request, params, input }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const b = body(input);
+            const kind = reqString(b, 'kind');
+            const ref = reqString(b, 'ref');
+            const label = optString(b, 'label');
+            const id = idOf(params);
+            return as(who, async () => handle.linkFor(await tenantOfTicket(id), id, { kind, ref, ...(label === undefined ? {} : { label }) }));
+        }),
+        withBody('POST', `${base}/:id/drafts`).fit(async ({ request, params, input }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const b = body(input);
+            const text = reqString(b, 'text');
+            const html = optString(b, 'html');
+            const subject = optString(b, 'subject');
+            const id = idOf(params);
+            return as(who, async () => handle.draftReplyFor(await tenantOfTicket(id), id, {
+                text, ...(html === undefined ? {} : { html }), ...(subject === undefined ? {} : { subject }),
+            }));
+        }),
+        withBody('PATCH', `${base}/drafts/:id`).fit(async ({ request, params, input }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const patch = draftPatch(body(input));
+            const id = idOf(params);
+            return as(who, async () => handle.editDraftFor(await tenantOfDraft(id), id, patch));
+        }),
+        del(`${base}/drafts/:id`).fit(async ({ request, params }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            const id = idOf(params);
+            return as(who, async () => {
+                await handle.discardDraftFor(await tenantOfDraft(id), id);
+                return { discarded: true };
+            });
+        }),
+        withBody('POST', `${base}/drafts/:id/approve`).fit(async ({ request, params, input }) => {
+            const who = authenticate(credentials, request.headers['authorization']);
+            if (!who.approve)
+                throw new ForbiddenError('This credential may not approve replies.', { actorId: who.name });
+            const version = body(input)['version'];
+            if (typeof version !== 'number' || !Number.isInteger(version))
+                bad('version', 'must be an integer');
+            const id = idOf(params);
+            return as(who, async () => handle.approveFor(await tenantOfDraft(id), id, { expectedVersion: version }));
+        }),
+    ];
+}
+//# sourceMappingURL=http.js.map

package/dist/infra/support/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/infra/support/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AAErD,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC7F,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAgB3C,MAAM,OAAO,GAAG,iEAAiE,CAAA;AACjF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AAE1E,SAAS,YAAY,CAAC,WAAsD,EAAE,MAA0B;IACtG,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACnC,IAAI,KAAK,GAAqB,IAAI,CAAA;IAClC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC9C,IAAI,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;YAAE,KAAK,GAAG,SAAS,CAAA;IAC3F,CAAC;IACD,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,8EAA8E,CAAC,CAAA;IAC/H,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,GAAG,CAAC,KAAa,EAAE,OAAe;IACzC,MAAM,IAAI,eAAe,CAAC,WAAW,KAAK,KAAK,OAAO,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,SAAS,CAAC,MAAe,EAAE,KAAa;IAC/C,MAAM,KAAK,GAAI,MAAqD,EAAE,CAAC,KAAK,CAAC,CAAA;IAC7E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAA;IAC7D,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,SAAS,CAAC,MAAe,EAAE,KAAa;IAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IAClD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,IAAI,CAAC,GAAY;IACxB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAChD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;IACvF,OAAO,GAA8B,CAAA;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,GAAuB;IACtC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,OAA2B;IAClD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,IAAI,wEAAwE,CAAC,CAAA;IAC9H,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAA;IAC/H,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAoC,EAAE,MAAM,CAAA;QAC9F,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,oDAAoD,CAAC,CAAA;QACvH,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,0BAA0B,CAAC,CAAA;QAC5F,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,MAAe,EAAE,OAA2B;IACtE,eAAe,CAAC,OAAO,CAAC,CAAA;IACxB,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;QAC3E,MAAM,SAAS,GAAc,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAA;QAC3H,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAU,CAAA;IACjF,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IACzB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;IAElC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACxG,MAAM,QAAQ,GAAG,CAAC,MAAwB,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACnJ,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAE3G,MAAM,IAAI,GAAG,CAAC,MAAe,EAAU,EAAE,CAAC,MAAM,CAAE,MAAyB,CAAC,EAAE,CAAC,CAAA;IAE/E,iHAAiH;IACjH,iCAAiC;IACjC,MAAM,EAAE,GAAG,CAAI,GAAc,EAAE,EAAoB,EAAc,EAAE;QACjE,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;QAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,GAAG,EAAE,uCAAuC,EAAE,EAAE,EAAE,CAAC,CAAA;QAC7E,OAAO,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;IACpE,CAAC,CAAA;IAED,MAAM,cAAc,GAAG,KAAK,EAAE,EAAU,EAAmB,EAAE;QAC3D,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,mDAAmD,EAAE,QAAQ,CAAC,CAAA;YACzG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAW,CAAA;QAClE,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;IAC7D,CAAC,CAAA;IACD,MAAM,aAAa,GAAG,KAAK,EAAE,EAAU,EAAmB,EAAE;QAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,oDAAoD,EAAE,2BAA2B,CAAC,CAAA;YAC7H,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAW,CAAA;QAClE,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,CAAC,CAA0B,EAAuB,EAAE;QACrE,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACjC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QACvC,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IAC5I,CAAC,CAAA;IAED,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACzC,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YACvC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,OAAO,EAAE,IAAI,KAAK,mBAAmB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACtJ,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;YAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;YAChD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,GAAG,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;YACxF,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;gBAClC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAoB,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;gBACjK,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aACvF,CAAC,CAAC,CAAA;QACL,CAAC,CAAC;QACF,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACzE,CAAC,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;YACxE,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;YACrB,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAA;YAC9B,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,GAAG,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAA;YAClG,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC3F,CAAC,CAAC;QACF,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,iBAAiB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;YAClF,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAA;YACvC,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,mBAAmB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACtH,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAiB,CAAC,CAAC,CAAA;QACnG,CAAC,CAAC;QACF,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;YAC7E,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAA;YAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;QACnF,CAAC,CAAC;QACF,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;YAC7E,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;YACrB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YACjC,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACnC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QACpI,CAAC,CAAC;QACF,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;YAC9E,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;YACrB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YACjC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YACjC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YACvC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE;gBAC5E,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;aAC7F,CAAC,CAAC,CAAA;QACL,CAAC,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;YAC/E,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;QACrF,CAAC,CAAC;QACF,GAAG,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;gBACxB,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;gBACzD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC;QACF,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,qBAAqB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;YACtF,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA;YACvE,IAAI,CAAC,GAAG,CAAC,OAAO;gBAAE,MAAM,IAAI,cAAc,CAAC,0CAA0C,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAA;YACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,GAAG,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAA;YACnG,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;YACvB,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QAC1G,CAAC,CAAC;KACH,CAAA;AACH,CAAC"}

package/dist/infra/support/index.d.ts

@@ -1,3 +1,5 @@
 export { createSupport, supportTemplates, DraftStateError } from './handle.js';
+export { supportHttp } from './http.js';
+export type { SupportHttpOptions } from './http.js';
 export type { Support, SupportConfig, TicketApi, Ticket, TicketMessage, TicketLink, TicketDetail, TicketState, ListOptions, ListPage, DraftInput, SupportSink, SupportDelivery, ScreenVerdict, ReceiveResult, ReceiveInput, SupportEventKind, SupportEventPayload, } from './handle.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/infra/support/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infra/support/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC9E,YAAY,EACV,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EACtH,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,GAC5H,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infra/support/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACnD,YAAY,EACV,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EACtH,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,GAC5H,MAAM,aAAa,CAAA"}

package/dist/infra/support/index.js

@@ -1,2 +1,3 @@
 export { createSupport, supportTemplates, DraftStateError } from './handle.js';
+export { supportHttp } from './http.js';
 //# sourceMappingURL=index.js.map

package/dist/infra/support/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infra/support/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infra/support/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA"}

package/dist/infra/support/namespace.d.ts

@@ -1,8 +1,11 @@
 import { createSupport } from './handle.js';
+import { supportHttp } from './http.js';
 /** Support namespace — tickets from email (and later chat), with replies sent only after an approval. */
 export declare const support: {
     /** Creates the support handle: tickets, messages, notes, links, drafts, `approve`, `receiveEmail`, and the events job. */
     readonly create: typeof createSupport;
+    /** Routes for a support agent: list, read, triage, notes, links, drafts, approve; bearer credentials that name the actor, and only some may approve. */
+    readonly http: typeof supportHttp;
     /** The reply template to spread into `mail.create({ templates })`; it renders the approved draft verbatim. */
     readonly templates: {
         readonly 'pipework.support.reply': ({ subject, text, html }: {

package/dist/infra/support/namespace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/infra/support/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAoB,MAAM,aAAa,CAAA;AAE7D,yGAAyG;AACzG,eAAO,MAAM,OAAO;IAClB,0HAA0H;;IAE1H,8GAA8G;;;;;gBAG4zb,CAAC;;;;gBAAyD,CAAC;;;CAD79b,CAAA"}
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/infra/support/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAoB,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAEvC,yGAAyG;AACzG,eAAO,MAAM,OAAO;IAClB,0HAA0H;;IAE1H,wJAAwJ;;IAExJ,8GAA8G;;;;;gBAGiyf,CAAC;;;;gBAAyD,CAAC;;;CADl8f,CAAA"}

package/dist/infra/support/namespace.js

@@ -1,8 +1,11 @@
 import { createSupport, supportTemplates } from './handle.js';
+import { supportHttp } from './http.js';
 /** Support namespace — tickets from email (and later chat), with replies sent only after an approval. */
 export const support = {
     /** Creates the support handle: tickets, messages, notes, links, drafts, `approve`, `receiveEmail`, and the events job. */
     create: createSupport,
+    /** Routes for a support agent: list, read, triage, notes, links, drafts, approve; bearer credentials that name the actor, and only some may approve. */
+    http: supportHttp,
     /** The reply template to spread into `mail.create({ templates })`; it renders the approved draft verbatim. */
     templates: supportTemplates,
 };

package/dist/infra/support/namespace.js.map

@@ -1 +1 @@
-{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/infra/support/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE7D,yGAAyG;AACzG,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,0HAA0H;IAC1H,MAAM,EAAE,aAAa;IACrB,8GAA8G;IAC9G,SAAS,EAAE,gBAAgB;CACnB,CAAA"}
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/infra/support/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAEvC,yGAAyG;AACzG,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,0HAA0H;IAC1H,MAAM,EAAE,aAAa;IACrB,wJAAwJ;IACxJ,IAAI,EAAE,WAAW;IACjB,8GAA8G;IAC9G,SAAS,EAAE,gBAAgB;CACnB,CAAA"}

package/dist/infra/support/schema.d.ts

@@ -20,9 +20,9 @@ export declare const supportTicket: import("../../data/domain/types.js").Defined
     }> & import("../../data/domain/field.js").FieldModifiers<string, {
         tenant: true;
     }>;
-    state: import("../../data/domain/types.js").FieldDescriptor<"open" | "closed" | "triaged" | "awaiting_approval" | "answered", {
+    state: import("../../data/domain/types.js").FieldDescriptor<"open" | "closed" | "awaiting_approval" | "triaged" | "answered", {
         hasDefault: true;
-    }> & import("../../data/domain/field.js").FieldModifiers<"open" | "closed" | "triaged" | "awaiting_approval" | "answered", {
+    }> & import("../../data/domain/field.js").FieldModifiers<"open" | "closed" | "awaiting_approval" | "triaged" | "answered", {
         hasDefault: true;
     }>;
     category: import("../../data/domain/types.js").FieldDescriptor<string | null, {
@@ -109,9 +109,9 @@ export declare const supportMessage: import("../../data/domain/types.js").Define
     }> & import("../../data/domain/field.js").FieldModifiers<import("zod/v4").JSONType, {
         nullable: true;
     }>;
-    draftStatus: import("../../data/domain/types.js").FieldDescriptor<"draft" | "approved" | "discarded" | null, {
+    draftStatus: import("../../data/domain/types.js").FieldDescriptor<"approved" | "draft" | "discarded" | null, {
         nullable: true;
-    }> & import("../../data/domain/field.js").FieldModifiers<"draft" | "approved" | "discarded" | null, {
+    }> & import("../../data/domain/field.js").FieldModifiers<"approved" | "draft" | "discarded" | null, {
         nullable: true;
     }>;
     version: import("../../data/domain/types.js").FieldDescriptor<number, {

package/dist/infra/webhook/outbound.d.ts

@@ -1,5 +1,7 @@
 import type { DB } from '../../data/db/index.js';
 import { type WebhookSignatureOptions } from './sign.js';
+import type { FetchTarget } from '../fetch/handle.js';
+import type { Socket } from 'node:net';
 export interface OutboundWebhookConfig {
     table?: string;
     deliveryTable?: string;
@@ -10,6 +12,20 @@ export interface OutboundWebhookConfig {
         maxDelayMs?: number;
     };
     timeoutMs?: number;
+    /**
+     * Where deliveries may go. `'public'` (default): only public addresses; a private, loopback or link-local address, a name
+     * resolving to one, or a redirect is refused and recorded on the delivery row's `error` column. `'any'`: for an app that
+     * sends webhooks to its own internal services; redirects are still not followed and the kept response is still capped.
+     * `'any'` throws at creation when `environment` is `production`.
+     */
+    addresses?: 'public' | 'any';
+    /** The app's environment (`config.environment`); `addresses: 'any'` is refused when it is `production`. */
+    environment?: string;
+    /** For tests: replaces DNS and the socket of the `'public'` path, as `untrustedFetch.get` takes them. The address check still runs. */
+    network?: {
+        resolve: (hostname: string) => Promise<string[]>;
+        connect: (target: FetchTarget) => Socket;
+    };
 }
 export interface WebhookEndpoint {
     id: string;

package/dist/infra/webhook/outbound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbound.d.ts","sourceRoot":"","sources":["../../../src/infra/webhook/outbound.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAChD,OAAO,EAAe,KAAK,uBAAuB,EAAE,MAAM,WAAW,CAAA;AAGrE,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,uBAAuB,CAAA;IACjC,KAAK,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACtF,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC7F,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,QAAQ,CAAC,GAAG;QAAE,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3H,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IACnE,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC/E;AAED,qFAAqF;AACrF,eAAO,MAAM,8BAA8B,kCAAkC,CAAA;AAW7E,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,qBAA0B,GAAG,eAAe,CA4LzF"}
+{"version":3,"file":"outbound.d.ts","sourceRoot":"","sources":["../../../src/infra/webhook/outbound.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAChD,OAAO,EAAe,KAAK,uBAAuB,EAAE,MAAM,WAAW,CAAA;AAErE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AAGtC,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,uBAAuB,CAAA;IACjC,KAAK,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAA;IAC5B,2GAA2G;IAC3G,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,uIAAuI;IACvI,OAAO,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAChD,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAA;KACzC,CAAA;CACF;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACtF,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC7F,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,QAAQ,CAAC,GAAG;QAAE,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3H,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IACnE,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC/E;AAED,qFAAqF;AACrF,eAAO,MAAM,8BAA8B,kCAAkC,CAAA;AAqD7E,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,qBAA0B,GAAG,eAAe,CAiMzF"}

package/dist/infra/webhook/outbound.js

@@ -1,5 +1,6 @@
 import { sql } from '../../data/db/sql.js';
 import { signPayload } from './sign.js';
+import { untrustedPost } from '../fetch/handle.js';
 import { unscopedExecutor, scopedExecutor, requireUnscopedExecutor } from '../../auth/tenant/scoped-db.js';
 /** The delivery table `createOutboundWebhook` uses unless `deliveryTable` is set. */
 export const DEFAULT_WEBHOOK_DELIVERY_TABLE = '__pipework_webhook_deliveries';
@@ -11,6 +12,48 @@ const DEFAULTS = {
     maxDelayMs: 3_600_000,
     timeoutMs: 30_000,
 };
+/** The most of an endpoint's response kept on the delivery row. */
+const RESPONSE_BODY_CAP = 64 * 1024;
+/** Plain fetch, for `addresses: 'any'`: no redirect followed, the kept body capped, one time limit. */
+async function sendAnywhere(url, headers, body, timeoutMs) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetch(url, { method: 'POST', headers, body, signal: controller.signal, redirect: 'manual' });
+        const statusCode = response.status;
+        if (statusCode >= 300 && statusCode < 400) {
+            await response.body?.cancel().catch(() => undefined);
+            return { statusCode, responseBody: null, success: false, error: 'redirects' };
+        }
+        const success = statusCode >= 200 && statusCode < 300;
+        const chunks = [];
+        let total = 0;
+        let over = false;
+        const reader = response.body?.getReader();
+        try {
+            while (reader !== undefined) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                total += value.length;
+                if (total > RESPONSE_BODY_CAP) {
+                    over = true;
+                    break;
+                }
+                chunks.push(Buffer.from(value));
+            }
+        }
+        catch { /* a body that breaks is not kept; the status decides */ }
+        await reader?.cancel().catch(() => undefined);
+        return { statusCode, responseBody: over ? null : Buffer.concat(chunks).toString('utf8'), success, error: null };
+    }
+    catch {
+        return { statusCode: null, responseBody: null, success: false, error: controller.signal.aborted ? 'timeout' : 'network' };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
 export function createOutboundWebhook(config = {}) {
     const endpointTable = config.table ?? DEFAULTS.table;
     const deliveryTable = config.deliveryTable ?? DEFAULTS.deliveryTable;
@@ -19,6 +62,11 @@ export function createOutboundWebhook(config = {}) {
     const maxDelayMs = config.retry?.maxDelayMs ?? DEFAULTS.maxDelayMs;
     const timeoutMs = config.timeoutMs ?? DEFAULTS.timeoutMs;
     const signingOptions = config.signing ?? {};
+    const addresses = config.addresses ?? 'public';
+    if (addresses === 'any' && config.environment === 'production') {
+        throw new Error('[pipework] webhook.createOutbound: `addresses: \'any\'` is refused when the environment is production, because a tenant-registered URL could then reach the app\'s private network (cloud metadata, internal services). '
+            + 'Fix: remove `addresses` so deliveries go to public addresses only, or set it only outside production.\n');
+    }
     return {
         async ensureTables(handle) {
             const db = unscopedExecutor(handle).db;
@@ -42,6 +90,7 @@ export function createOutboundWebhook(config = {}) {
           payload JSONB NOT NULL,
           status_code INTEGER,
           response_body TEXT,
+          error TEXT,
           attempt INTEGER NOT NULL DEFAULT 0,
           max_attempts INTEGER NOT NULL,
           next_retry_at TIMESTAMPTZ,
@@ -49,6 +98,7 @@ export function createOutboundWebhook(config = {}) {
           created_at TIMESTAMPTZ NOT NULL DEFAULT now()
         )
       `));
+            await db.execute(sql.raw(`ALTER TABLE ${deliveryTable} ADD COLUMN IF NOT EXISTS error TEXT`));
         },
         async send(handle, tenantId, eventType, payload) {
             const db = scopedExecutor(handle, tenantId, 'webhook.send()').db;
@@ -79,37 +129,38 @@ export function createOutboundWebhook(config = {}) {
                 return { success: false, statusCode: null };
             const attempt = delivery['attempt'] + 1;
             const signed = signPayload(delivery['payload'], delivery['secret'], signingOptions);
-            let statusCode = null;
-            let responseBody = null;
-            let success = false;
-            try {
-                const controller = new AbortController();
-                const timer = setTimeout(() => controller.abort(), timeoutMs);
-                const response = await fetch(delivery['url'], {
-                    method: 'POST',
-                    headers: {
-                        'Content-Type': 'application/json',
-                        'X-Webhook-Id': signed.messageId,
-                        'X-Webhook-Timestamp': signed.timestamp.toString(),
-                        'X-Webhook-Signature': signed.signature,
-                    },
-                    body: signed.body,
-                    signal: controller.signal,
-                });
-                clearTimeout(timer);
-                statusCode = response.status;
-                responseBody = await response.text().catch(() => null);
-                success = statusCode >= 200 && statusCode < 300;
+            const headers = {
+                'Content-Type': 'application/json',
+                'X-Webhook-Id': signed.messageId,
+                'X-Webhook-Timestamp': signed.timestamp.toString(),
+                'X-Webhook-Signature': signed.signature,
+            };
+            const url = delivery['url'];
+            let outcome;
+            if (addresses === 'any') {
+                outcome = await sendAnywhere(url, headers, signed.body, timeoutMs);
             }
-            catch {
-                statusCode = null;
-                responseBody = null;
-                success = false;
+            else {
+                const sent = await untrustedPost(url, {
+                    body: signed.body, headers, maxBytes: RESPONSE_BODY_CAP, timeoutMs, maxRedirects: 0,
+                    ...(config.network ?? {}),
+                });
+                if (sent.ok) {
+                    outcome = { statusCode: sent.status, responseBody: Buffer.from(sent.body).toString('utf8'), success: true, error: null };
+                }
+                else if (sent.status !== undefined) {
+                    // The answer arrived; the body is not kept (non-2xx, or a 2xx body over the cap).
+                    outcome = { statusCode: sent.status, responseBody: null, success: sent.status >= 200 && sent.status < 300, error: null };
+                }
+                else {
+                    outcome = { statusCode: null, responseBody: null, success: false, error: sent.reason };
+                }
             }
+            const { statusCode, responseBody, success, error } = outcome;
             if (success || attempt >= delivery['max_attempts']) {
                 await db.execute(sql `UPDATE ${sql.raw(deliveryTable)}
               SET attempt = ${attempt}, status_code = ${statusCode},
-                  response_body = ${responseBody}, completed_at = now(), next_retry_at = NULL
+                  response_body = ${responseBody}, error = ${error}, completed_at = now(), next_retry_at = NULL
               WHERE id = ${deliveryId}`);
             }
             else {
@@ -117,7 +168,7 @@ export function createOutboundWebhook(config = {}) {
                 const nextRetry = new Date(Date.now() + delayMs);
                 await db.execute(sql `UPDATE ${sql.raw(deliveryTable)}
               SET attempt = ${attempt}, status_code = ${statusCode},
-                  response_body = ${responseBody}, next_retry_at = ${nextRetry.toISOString()}
+                  response_body = ${responseBody}, error = ${error}, next_retry_at = ${nextRetry.toISOString()}
               WHERE id = ${deliveryId}`);
             }
             return { success, statusCode };

package/dist/infra/webhook/outbound.js.map

@@ -1 +1 @@
-{"version":3,"file":"outbound.js","sourceRoot":"","sources":["../../../src/infra/webhook/outbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAE1C,OAAO,EAAE,WAAW,EAAgC,MAAM,WAAW,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AA+C1G,qFAAqF;AACrF,MAAM,CAAC,MAAM,8BAA8B,GAAG,+BAA+B,CAAA;AAE7E,MAAM,QAAQ,GAAG;IACf,KAAK,EAAE,8BAA8B;IACrC,aAAa,EAAE,8BAA8B;IAC7C,WAAW,EAAE,CAAC;IACd,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,SAAS;IACrB,SAAS,EAAE,MAAM;CACT,CAAA;AAEV,MAAM,UAAU,qBAAqB,CAAC,SAAgC,EAAE;IACtE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAA;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAA;IACpE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAA;IACrE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,cAAc,IAAI,QAAQ,CAAC,cAAc,CAAA;IAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAA;IAClE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAA;IACxD,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;IAE3C,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,MAAM;YACvB,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;YACtC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;qCACM,aAAa;;;;;;;;;OAS3C,CAAC,CAAC,CAAA;YAEH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;qCACM,aAAa;;;;;;;;;;;;;;OAc3C,CAAC,CAAC,CAAA;QACL,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO;YAC7C,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAA;YAChE,MAAM,SAAS,GAAc,MAAM,EAAE,CAAC,OAAO,CAC3C,GAAG,CAAA,+BAA+B,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;gCAChC,QAAQ;;sCAEF,SAAS,iBAAiB,CACzD,CAAA;YAED,MAAM,WAAW,GAAa,EAAE,CAAA;YAChC,KAAK,MAAM,GAAG,IAAI,SAA6B,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAc,MAAM,EAAE,CAAC,OAAO,CACxC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;wBAC1B,GAAG,CAAC,EAAE,KAAK,QAAQ,KAAK,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,WAAW;2BAC1E,CAClB,CAAA;gBACD,MAAM,QAAQ,GAAI,MAA2B,CAAC,CAAC,CAAC,CAAA;gBAChD,IAAI,QAAQ,KAAK,SAAS;oBAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YAC3D,CAAC;YAED,OAAO,WAAW,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU;YAC9B,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,mBAAmB,EAAE,8CAA8C,CAAC,CAAA;YAC/G,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA;;mBAEQ,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;mBACtB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;2BACd,UAAU,6BAA6B,CAC3D,CAAA;YAED,MAAM,QAAQ,GAAI,IAAkC,CAAC,CAAC,CAAC,CAAA;YACvD,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YAEvE,MAAM,OAAO,GAAI,QAAQ,CAAC,SAAS,CAAY,GAAG,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAW,EAAE,cAAc,CAAC,CAAA;YAE7F,IAAI,UAAU,GAAkB,IAAI,CAAA;YACpC,IAAI,YAAY,GAAkB,IAAI,CAAA;YACtC,IAAI,OAAO,GAAG,KAAK,CAAA;YAEnB,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;gBACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;gBAE7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAW,EAAE;oBACtD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,cAAc,EAAE,MAAM,CAAC,SAAS;wBAChC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;wBAClD,qBAAqB,EAAE,MAAM,CAAC,SAAS;qBACxC;oBACD,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAA;gBAEF,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAA;gBAC5B,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBACtD,OAAO,GAAG,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,CAAA;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,IAAI,CAAA;gBACjB,YAAY,GAAG,IAAI,CAAA;gBACnB,OAAO,GAAG,KAAK,CAAA;YACjB,CAAC;YAED,IAAI,OAAO,IAAI,OAAO,IAAK,QAAQ,CAAC,cAAc,CAAY,EAAE,CAAC;gBAC/D,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,UAAU,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;8BACf,OAAO,mBAAmB,UAAU;oCAC9B,YAAY;2BACrB,UAAU,EAAE,CAC9B,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;gBAC/E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAA;gBAChD,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,UAAU,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;8BACf,OAAO,mBAAmB,UAAU;oCAC9B,YAAY,qBAAqB,SAAS,CAAC,WAAW,EAAE;2BACjE,UAAU,EAAE,CAC9B,CAAA;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;QAChC,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM;YACzB,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,0BAA0B,EAAE,8CAA8C,CAAC,CAAA;YACtH,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,kBAAkB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;;;sBAG7B,CACf,CAAA;YAED,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,KAAK,MAAM,GAAG,IAAI,IAAwB,EAAE,CAAC;gBAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;gBAC9B,SAAS,EAAE,CAAA;YACb,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ;YACrC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC,EAAE,CAAA;YACrF,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;sBAC1B,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;sBACtD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;yBACjD,CAClB,CAAA;YACD,OAAO,CAAE,IAAyB,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;QAC5C,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ;YAClC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC,EAAE,CAAA;YACzE,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA;mBACQ,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;gCACT,QAAQ;oCACJ,CAC7B,CAAA;YACD,OAAQ,IAAkC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAW;gBACvB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAW;gBACpC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAW;gBACzB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAW;gBAC/B,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAa;gBACjC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAY;aACjC,CAAC,CAAC,CAAA;QACL,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;YAC/C,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC,EAAE,CAAA;YAC1E,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;yBACvB,UAAU,oBAAoB,QAAQ;yBACtC,CAClB,CAAA;YACD,OAAQ,IAAkB,CAAC,MAAM,GAAG,CAAC,CAAA;QACvC,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"outbound.js","sourceRoot":"","sources":["../../../src/infra/webhook/outbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAE1C,OAAO,EAAE,WAAW,EAAgC,MAAM,WAAW,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAGlD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AA6D1G,qFAAqF;AACrF,MAAM,CAAC,MAAM,8BAA8B,GAAG,+BAA+B,CAAA;AAE7E,MAAM,QAAQ,GAAG;IACf,KAAK,EAAE,8BAA8B;IACrC,aAAa,EAAE,8BAA8B;IAC7C,WAAW,EAAE,CAAC;IACd,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,SAAS;IACrB,SAAS,EAAE,MAAM;CACT,CAAA;AAEV,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAA;AAOnC,uGAAuG;AACvG,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,OAA+B,EAAE,IAAY,EAAE,SAAiB;IACvG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;IAC7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACnH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAA;QAClC,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACpD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,CAAA;QACrD,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC3C,IAAI,IAAI;oBAAE,MAAK;gBACf,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;gBACrB,IAAI,KAAK,GAAG,iBAAiB,EAAE,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC;oBAAC,MAAK;gBAAC,CAAC;gBACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC;QACpE,MAAM,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACjH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;IAC3H,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAgC,EAAE;IACtE,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAA;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAA;IACpE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAA;IACrE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,cAAc,IAAI,QAAQ,CAAC,cAAc,CAAA;IAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAA;IAClE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAA;IACxD,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAA;IAC9C,IAAI,SAAS,KAAK,KAAK,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,0NAA0N;cACxN,yGAAyG,CAC5G,CAAA;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,MAAM;YACvB,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAA;YACtC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;qCACM,aAAa;;;;;;;;;OAS3C,CAAC,CAAC,CAAA;YAEH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;qCACM,aAAa;;;;;;;;;;;;;;;OAe3C,CAAC,CAAC,CAAA;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,aAAa,sCAAsC,CAAC,CAAC,CAAA;QAC/F,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO;YAC7C,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAA;YAChE,MAAM,SAAS,GAAc,MAAM,EAAE,CAAC,OAAO,CAC3C,GAAG,CAAA,+BAA+B,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;gCAChC,QAAQ;;sCAEF,SAAS,iBAAiB,CACzD,CAAA;YAED,MAAM,WAAW,GAAa,EAAE,CAAA;YAChC,KAAK,MAAM,GAAG,IAAI,SAA6B,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAc,MAAM,EAAE,CAAC,OAAO,CACxC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;wBAC1B,GAAG,CAAC,EAAE,KAAK,QAAQ,KAAK,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,WAAW;2BAC1E,CAClB,CAAA;gBACD,MAAM,QAAQ,GAAI,MAA2B,CAAC,CAAC,CAAC,CAAA;gBAChD,IAAI,QAAQ,KAAK,SAAS;oBAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YAC3D,CAAC;YAED,OAAO,WAAW,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU;YAC9B,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,mBAAmB,EAAE,8CAA8C,CAAC,CAAA;YAC/G,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA;;mBAEQ,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;mBACtB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;2BACd,UAAU,6BAA6B,CAC3D,CAAA;YAED,MAAM,QAAQ,GAAI,IAAkC,CAAC,CAAC,CAAC,CAAA;YACvD,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YAEvE,MAAM,OAAO,GAAI,QAAQ,CAAC,SAAS,CAAY,GAAG,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAW,EAAE,cAAc,CAAC,CAAA;YAE7F,MAAM,OAAO,GAAG;gBACd,cAAc,EAAE,kBAAkB;gBAClC,cAAc,EAAE,MAAM,CAAC,SAAS;gBAChC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;gBAClD,qBAAqB,EAAE,MAAM,CAAC,SAAS;aACxC,CAAA;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAW,CAAA;YACrC,IAAI,OAAgB,CAAA;YACpB,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;gBACxB,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;YACpE,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;oBACpC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;oBACnF,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;iBAC1B,CAAC,CAAA;gBACF,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;oBACZ,OAAO,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;gBAC1H,CAAC;qBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACrC,kFAAkF;oBAClF,OAAO,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;gBAC1H,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;gBACxF,CAAC;YACH,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;YAE5D,IAAI,OAAO,IAAI,OAAO,IAAK,QAAQ,CAAC,cAAc,CAAY,EAAE,CAAC;gBAC/D,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,UAAU,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;8BACf,OAAO,mBAAmB,UAAU;oCAC9B,YAAY,aAAa,KAAK;2BACvC,UAAU,EAAE,CAC9B,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;gBAC/E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAA;gBAChD,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,UAAU,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;8BACf,OAAO,mBAAmB,UAAU;oCAC9B,YAAY,aAAa,KAAK,qBAAqB,SAAS,CAAC,WAAW,EAAE;2BACnF,UAAU,EAAE,CAC9B,CAAA;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAA;QAChC,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM;YACzB,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,EAAE,0BAA0B,EAAE,8CAA8C,CAAC,CAAA;YACtH,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,kBAAkB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;;;sBAG7B,CACf,CAAA;YAED,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,KAAK,MAAM,GAAG,IAAI,IAAwB,EAAE,CAAC;gBAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;gBAC9B,SAAS,EAAE,CAAA;YACb,CAAC;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ;YACrC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC,EAAE,CAAA;YACrF,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;sBAC1B,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;sBACtD,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM;yBACjD,CAClB,CAAA;YACD,OAAO,CAAE,IAAyB,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAA;QAC5C,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ;YAClC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,yBAAyB,CAAC,CAAC,EAAE,CAAA;YACzE,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA;mBACQ,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;gCACT,QAAQ;oCACJ,CAC7B,CAAA;YACD,OAAQ,IAAkC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAW;gBACvB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAW;gBACpC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAW;gBACzB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAW;gBAC/B,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAa;gBACjC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAY;aACjC,CAAC,CAAC,CAAA;QACL,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU;YAC/C,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC,EAAE,CAAA;YAC1E,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;yBACvB,UAAU,oBAAoB,QAAQ;yBACtC,CAClB,CAAA;YACD,OAAQ,IAAkB,CAAC,MAAM,GAAG,CAAC,CAAA;QACvC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/request/di/builder.d.ts

@@ -1,6 +1,6 @@
 import type { Schema, Infer } from '../../data/schema/types.js';
 import type { DB } from '../../data/db/index.js';
-import type { Handler, HttpMethod, RouteMeta, AuthRequirement, PermissionMeta, JobRetryConfig, JobTransactionMode, Checkpoint, RouteScreen, UploadConfig, BinaryUploadConfig, MultipartUploadConfig, BinaryUpload, MultipartUpload, FileConfig } from './types.js';
+import type { Handler, HttpMethod, RouteMeta, AuthRequirement, PermissionMeta, JobRetryConfig, JobTransactionMode, Checkpoint, RouteScreen, UploadConfig, BinaryUploadConfig, MultipartUploadConfig, BinaryUpload, MultipartUpload, FileConfig, RouteRefusedHook } from './types.js';
 import type { ResourceOperations, Resource, PaginationConfig } from '../fixture/types.js';
 import type { HttpRequest, HttpResponse, CorsConfig } from '../http/types.js';
 interface BuilderState {
@@ -24,8 +24,10 @@ interface BuilderState {
     wantsRequest: boolean;
     wantsResponse: boolean;
     wantsRawBody: boolean;
+    ignoresBody: boolean;
     upload: UploadConfig | null;
     file: FileConfig | null;
+    onRefused: RouteRefusedHook<any, any, any> | null;
 }
 /**
  * Deps shape after `.transaction('manual')`: the databases the handler declared
@@ -141,6 +143,14 @@ export declare class Builder<TDeps extends Record<string, unknown>, TDb extends
     rawBody(): Builder<TDeps & {
         rawBody: Buffer;
     }, TDb>;
+    /**
+     * Makes this route accept a body of any content type and never read it: the body is drained
+     * unparsed (a declared length over 64 KiB is refused with 413) and `input` is undefined.
+     * For a POST whose body carries nothing the handler needs, such as an RFC 8058 one-click
+     * unsubscribe (`List-Unsubscribe=One-Click` as form-urlencoded or multipart). This route only:
+     * no other route's parsing changes. Cannot be combined with `.input()`, `.rawBody()` or `.upload()`.
+     */
+    ignoreBody(): Builder<TDeps, TDb>;
     /**
      * Makes this route accept a file upload and hands the handler the file as a
      * stream in the `upload` dep. The body is never buffered whole.
@@ -228,6 +238,19 @@ export declare class Builder<TDeps extends Record<string, unknown>, TDb extends
         mediaTypes: readonly string[];
         status?: number;
     }): Builder<TDeps, TDb>;
+    /**
+     * Runs `hook` once for every 4xx this route answers, including those made before
+     * the handler: the input/params/query 422, auth 401, permission 403, 429, upload
+     * 413/415 and the handler's own thrown 4xx. Never for a 5xx, nor the route's `screen`.
+     * It gets `{ status, code, message, fields, auth, params, query, request,
+     * requestId }`; `auth` is null where auth itself refused, `params`/`query` are null
+     * when they fail their schema. A plain object it returns is merged into the
+     * response's `error`; `code`, `message`, `fields` and `details` keep pipework's
+     * values (a hook that sets one is warned and dropped). A throw is logged and the
+     * refusal is sent as without the hook. Runs in the request's Flow as a trace step
+     * after the upload `onRefuse`, once the request transaction has rolled back: it has none.
+     */
+    onRefused(hook: RouteRefusedHook<DepOf<TDeps, 'auth'>, DepOf<TDeps, 'params'>, DepOf<TDeps, 'query'>>): Builder<TDeps, TDb>;
     fixture<TAuth>(name: string, operations: ResourceOperations<TAuth>): Resource<TAuth>;
     fit<TReturn>(fn: (deps: TDeps) => Promise<TReturn>): Handler<TDeps, TReturn>;
 }