pipework 0.7.12 → 0.7.13

package/dist/infra/cache/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../../src/infra/cache/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAGhD,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAClC,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,KAAK,IAAI,gBAAgB,CAAA;IACzB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAUD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CA6GjF"}

package/dist/infra/cache/tenant.js

@@ -0,0 +1,101 @@
+import { getContext } from '../../request/context/store.js';
+export function createTenantCache(config) {
+    const entries = new Map();
+    function isExpired(entry) {
+        if (config.ttlMs === undefined)
+            return false;
+        if (entry.loadedAt === null)
+            return true;
+        return Date.now() - entry.loadedAt > config.ttlMs;
+    }
+    function getOrCreateEntry(tenantId) {
+        let entry = entries.get(tenantId);
+        if (entry === undefined) {
+            entry = {
+                data: undefined,
+                loadPromise: null,
+                loadedAt: null,
+                hits: 0,
+                misses: 0,
+            };
+            entries.set(tenantId, entry);
+        }
+        return entry;
+    }
+    function getDb() {
+        const ctx = getContext();
+        if (ctx !== undefined) {
+            const dbConfig = ctx.instance.config.database(config.database);
+            return ctx.instance.pool.getOrCreate(dbConfig).drizzle;
+        }
+        throw new Error(`[pipework] TenantCache "${config.name}" requires a managed context to load data. ` +
+            `Call .get() inside a request handler or job, or use .preload() during startup with an explicit instance.`);
+    }
+    function resolveTenantId(tenantId) {
+        if (tenantId !== undefined)
+            return tenantId;
+        const ctx = getContext();
+        if (ctx?.tenant != null)
+            return ctx.tenant;
+        throw new Error(`[pipework] TenantCache "${config.name}": no tenantId provided and no tenant in the current context. ` +
+            `Either pass tenantId explicitly — cache.get("tenant-123") — or ensure the request context has a tenant set.`);
+    }
+    async function doLoad(entry, tenantId) {
+        const db = getDb();
+        const result = await config.load(db, tenantId);
+        entry.loadedAt = Date.now();
+        entry.data = result;
+        entry.loadPromise = null;
+        return result;
+    }
+    return {
+        async get(tenantId) {
+            const resolved = resolveTenantId(tenantId);
+            const entry = getOrCreateEntry(resolved);
+            if (entry.data !== undefined && !isExpired(entry)) {
+                entry.hits++;
+                return entry.data;
+            }
+            entry.misses++;
+            if (entry.loadPromise !== null) {
+                return entry.loadPromise;
+            }
+            entry.loadPromise = doLoad(entry, resolved);
+            return entry.loadPromise;
+        },
+        invalidate(tenantId) {
+            if (tenantId !== undefined) {
+                entries.delete(tenantId);
+            }
+            else {
+                entries.clear();
+            }
+        },
+        stats() {
+            let totalHits = 0;
+            let totalMisses = 0;
+            for (const entry of entries.values()) {
+                totalHits += entry.hits;
+                totalMisses += entry.misses;
+            }
+            return {
+                name: config.name,
+                tenantCount: entries.size,
+                totalHits,
+                totalMisses,
+            };
+        },
+        async preload(tenantId) {
+            const entry = getOrCreateEntry(tenantId);
+            if (entry.data !== undefined && !isExpired(entry))
+                return;
+            if (entry.loadPromise !== null) {
+                await entry.loadPromise;
+                return;
+            }
+            entry.loadPromise = doLoad(entry, tenantId);
+            await entry.loadPromise;
+        },
+    };
+}
+//# sourceMappingURL=tenant.js.map

package/dist/infra/cache/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../../../src/infra/cache/tenant.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AA+B3D,MAAM,UAAU,iBAAiB,CAAI,MAA4B;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IAEjD,SAAS,SAAS,CAAC,KAAqB;QACtC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QAC5C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAA;IACnD,CAAC;IAED,SAAS,gBAAgB,CAAC,QAAgB;QACxC,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,GAAG;gBACN,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,CAAC;aACV,CAAA;YACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,SAAS,KAAK;QACZ,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;QACxB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC9D,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAA;QACxD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2BAA2B,MAAM,CAAC,IAAI,6CAA6C;YACnF,0GAA0G,CAC3G,CAAA;IACH,CAAC;IAED,SAAS,eAAe,CAAC,QAA4B;QACnD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;QACxB,IAAI,GAAG,EAAE,MAAM,IAAI,IAAI;YAAE,OAAO,GAAG,CAAC,MAAM,CAAA;QAC1C,MAAM,IAAI,KAAK,CACb,2BAA2B,MAAM,CAAC,IAAI,gEAAgE;YACtG,6GAA6G,CAC9G,CAAA;IACH,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,KAAqB,EAAE,QAAgB;QAC3D,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;QAClB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QAC9C,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC3B,KAAK,CAAC,IAAI,GAAG,MAAM,CAAA;QACnB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAA;QACxB,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,QAAiB;YACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;YAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YAExC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,KAAK,CAAC,IAAI,EAAE,CAAA;gBACZ,OAAO,KAAK,CAAC,IAAI,CAAA;YACnB,CAAC;YAED,KAAK,CAAC,MAAM,EAAE,CAAA;YAEd,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,WAAW,CAAA;YAC1B,CAAC;YAED,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YAC3C,OAAO,KAAK,CAAC,WAAW,CAAA;QAC1B,CAAC;QAED,UAAU,CAAC,QAAiB;YAC1B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,EAAE,CAAA;YACjB,CAAC;QACH,CAAC;QAED,KAAK;YACH,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,IAAI,WAAW,GAAG,CAAC,CAAA;YACnB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAA;gBACvB,WAAW,IAAI,KAAK,CAAC,MAAM,CAAA;YAC7B,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,SAAS;gBACT,WAAW;aACZ,CAAA;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,QAAgB;YAC5B,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YACxC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAM;YACzD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC,WAAW,CAAA;gBACvB,OAAM;YACR,CAAC;YACD,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YAC3C,MAAM,KAAK,CAAC,WAAW,CAAA;QACzB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/infra/cache/types.d.ts

@@ -0,0 +1,22 @@
+import type { DB } from '../../data/db/index.js';
+export interface CacheConfig<T> {
+    readonly name: string;
+    readonly load: (db: DB) => Promise<T>;
+    readonly ttlMs?: number;
+    readonly database: string;
+}
+export interface CacheStats {
+    readonly name: string;
+    readonly status: 'empty' | 'loading' | 'loaded' | 'stale';
+    readonly hits: number;
+    readonly misses: number;
+    readonly lastLoadAt: number | null;
+    readonly lastLoadDurationMs: number | null;
+}
+export interface Cache<T> {
+    get(): Promise<T>;
+    invalidate(): void;
+    stats(): CacheStats;
+    preload(): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/infra/cache/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/infra/cache/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAEhD,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAA;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3C;AAED,MAAM,WAAW,KAAK,CAAC,CAAC;IACtB,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAA;IACjB,UAAU,IAAI,IAAI,CAAA;IAClB,KAAK,IAAI,UAAU,CAAA;IACnB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB"}

package/dist/infra/cache/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/infra/cache/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/infra/cache/types.ts"],"names":[],"mappings":""}

package/dist/infra/idempotency/index.d.ts

@@ -0,0 +1,4 @@
+export { createIdempotency, type IdempotencyMiddleware } from './middleware.js';
+export { createStore } from './store.js';
+export type { IdempotencyConfig, IdempotencyRecord, IdempotencyStore } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/infra/idempotency/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infra/idempotency/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA"}

package/dist/infra/idempotency/index.js

@@ -0,0 +1,3 @@
+export { createIdempotency } from './middleware.js';
+export { createStore } from './store.js';
+//# sourceMappingURL=index.js.map

package/dist/infra/idempotency/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infra/idempotency/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAA8B,MAAM,iBAAiB,CAAA;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA"}

package/dist/infra/idempotency/middleware.d.ts

@@ -0,0 +1,21 @@
+import type { IdempotencyConfig, IdempotencyStore } from './types.js';
+import type { DB } from '../../data/db/index.js';
+import type { Manifold } from '../../core/pipework.js';
+export interface IdempotencyMiddleware {
+    readonly store: IdempotencyStore;
+    readonly config: Required<IdempotencyConfig>;
+    check(db: DB, tenantId: string, key: string, method: string, path: string): Promise<{
+        status: 'new';
+    } | {
+        status: 'locked';
+    } | {
+        status: 'completed';
+        statusCode: number;
+        body: unknown;
+    }>;
+    complete(db: DB, tenantId: string, key: string, statusCode: number, body: unknown): Promise<void>;
+    fail(db: DB, tenantId: string, key: string): Promise<void>;
+    cleanup(db: DB): Promise<number>;
+}
+export declare function createIdempotency(instance: Manifold, config: IdempotencyConfig): IdempotencyMiddleware;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/infra/idempotency/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/infra/idempotency/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AACrE,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAGtD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAA;IAE5C,KAAK,CACH,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAA;KAAE,GAAG;QAAE,MAAM,EAAE,QAAQ,CAAA;KAAE,GAAG;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAEjH,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjG,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACjC;AAUD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,GAAG,qBAAqB,CAwDtG"}

package/dist/infra/idempotency/middleware.js

@@ -0,0 +1,56 @@
+import { createStore } from './store.js';
+const DEFAULTS = {
+    table: '__pipework_idempotency',
+    headerName: 'Idempotency-Key',
+    ttlSeconds: 86400,
+    lockTimeoutMs: 30_000,
+    methods: ['POST', 'PATCH', 'DELETE'],
+};
+export function createIdempotency(instance, config) {
+    const resolved = {
+        database: config.database,
+        table: config.table ?? DEFAULTS.table,
+        headerName: config.headerName ?? DEFAULTS.headerName,
+        ttlSeconds: config.ttlSeconds ?? DEFAULTS.ttlSeconds,
+        lockTimeoutMs: config.lockTimeoutMs ?? DEFAULTS.lockTimeoutMs,
+        methods: config.methods ?? [...DEFAULTS.methods],
+    };
+    const store = createStore(resolved.table);
+    return {
+        store,
+        config: resolved,
+        async check(db, tenantId, key, method, path) {
+            const existing = await store.find(db, tenantId, key);
+            if (existing === null) {
+                const locked = await store.lock(db, tenantId, key, method, path, resolved.lockTimeoutMs);
+                if (!locked) {
+                    return { status: 'locked' };
+                }
+                return { status: 'new' };
+            }
+            if (existing.statusCode !== null) {
+                return { status: 'completed', statusCode: existing.statusCode, body: existing.responseBody };
+            }
+            if (existing.lockedUntil !== null && existing.lockedUntil.getTime() > Date.now()) {
+                return { status: 'locked' };
+            }
+            // Lock expired — re-lock and retry
+            await store.remove(db, tenantId, key);
+            const locked = await store.lock(db, tenantId, key, method, path, resolved.lockTimeoutMs);
+            if (!locked) {
+                return { status: 'locked' };
+            }
+            return { status: 'new' };
+        },
+        async complete(db, tenantId, key, statusCode, body) {
+            await store.complete(db, tenantId, key, statusCode, body);
+        },
+        async fail(db, tenantId, key) {
+            await store.remove(db, tenantId, key);
+        },
+        async cleanup(db) {
+            return store.cleanup(db, resolved.ttlSeconds);
+        },
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/infra/idempotency/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/infra/idempotency/middleware.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAmBxC,MAAM,QAAQ,GAAG;IACf,KAAK,EAAE,wBAAwB;IAC/B,UAAU,EAAE,iBAAiB;IAC7B,UAAU,EAAE,KAAK;IACjB,aAAa,EAAE,MAAM;IACrB,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU;CACrC,CAAA;AAEV,MAAM,UAAU,iBAAiB,CAAC,QAAkB,EAAE,MAAyB;IAC7E,MAAM,QAAQ,GAAgC;QAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;QACrC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;QACpD,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;QACpD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa;QAC7D,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;KACjD,CAAA;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEzC,OAAO;QACL,KAAK;QACL,MAAM,EAAE,QAAQ;QAEhB,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI;YACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;YAEpD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;gBACxF,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;gBAC7B,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;YAC1B,CAAC;YAED,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAA;YAC9F,CAAC;YAED,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACjF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;YAC7B,CAAC;YAED,mCAAmC;YACnC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;YACrC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;YACxF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;YAC7B,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;QAC1B,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI;YAChD,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;QAC3D,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG;YAC1B,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;QACvC,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAE;YACd,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC/C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/infra/idempotency/store.d.ts

@@ -0,0 +1,3 @@
+import type { IdempotencyStore } from './types.js';
+export declare function createStore(table: string): IdempotencyStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/infra/idempotency/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/infra/idempotency/store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAqB,MAAM,YAAY,CAAA;AAErE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA2E3D"}

package/dist/infra/idempotency/store.js

@@ -0,0 +1,63 @@
+import { sql } from '../../data/db/sql.js';
+export function createStore(table) {
+    return {
+        async ensureTable(db) {
+            await db.execute(sql.raw(`
+        CREATE TABLE IF NOT EXISTS ${table} (
+          key TEXT NOT NULL,
+          tenant_id TEXT NOT NULL,
+          method TEXT NOT NULL,
+          path TEXT NOT NULL,
+          status_code INTEGER,
+          response_body JSONB,
+          locked_until TIMESTAMPTZ,
+          created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+          PRIMARY KEY (tenant_id, key)
+        )
+      `));
+        },
+        async find(db, tenantId, key) {
+            const rows = await db.execute(sql `SELECT key, tenant_id, method, path, status_code, response_body, locked_until, created_at
+            FROM ${sql.raw(table)}
+            WHERE tenant_id = ${tenantId} AND key = ${key}`);
+            const row = rows[0];
+            if (row === undefined)
+                return null;
+            return {
+                key: row['key'],
+                tenantId: row['tenant_id'],
+                method: row['method'],
+                path: row['path'],
+                statusCode: row['status_code'],
+                responseBody: row['response_body'],
+                lockedUntil: row['locked_until'] !== null ? new Date(row['locked_until']) : null,
+                createdAt: new Date(row['created_at']),
+            };
+        },
+        async lock(db, tenantId, key, method, path, lockMs) {
+            const lockUntil = new Date(Date.now() + lockMs);
+            const rows = await db.execute(sql `INSERT INTO ${sql.raw(table)} (key, tenant_id, method, path, locked_until)
+            VALUES (${key}, ${tenantId}, ${method}, ${path}, ${lockUntil.toISOString()})
+            ON CONFLICT (tenant_id, key) DO NOTHING
+            RETURNING key`);
+            return rows.length > 0;
+        },
+        async complete(db, tenantId, key, statusCode, responseBody) {
+            await db.execute(sql `UPDATE ${sql.raw(table)}
+            SET status_code = ${statusCode},
+                response_body = ${JSON.stringify(responseBody)},
+                locked_until = NULL
+            WHERE tenant_id = ${tenantId} AND key = ${key}`);
+        },
+        async remove(db, tenantId, key) {
+            await db.execute(sql `DELETE FROM ${sql.raw(table)} WHERE tenant_id = ${tenantId} AND key = ${key}`);
+        },
+        async cleanup(db, ttlSeconds) {
+            const rows = await db.execute(sql `DELETE FROM ${sql.raw(table)}
+            WHERE created_at < now() - ${ttlSeconds.toString() + ' seconds'}::interval
+            RETURNING key`);
+            return rows.length;
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/infra/idempotency/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/infra/idempotency/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAI1C,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,EAAM;YACtB,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;qCACM,KAAK;;;;;;;;;;;OAWnC,CAAC,CAAC,CAAA;QACL,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,QAAgB,EAAE,GAAW;YAC9C,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA;mBACQ,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;gCACD,QAAQ,cAAc,GAAG,EAAE,CACpD,CAAA;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAwC,CAAA;YAC1D,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAA;YAElC,OAAO;gBACL,GAAG,EAAE,GAAG,CAAC,KAAK,CAAW;gBACzB,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAW;gBACpC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAW;gBAC/B,IAAI,EAAE,GAAG,CAAC,MAAM,CAAW;gBAC3B,UAAU,EAAE,GAAG,CAAC,aAAa,CAAkB;gBAC/C,YAAY,EAAE,GAAG,CAAC,eAAe,CAAC;gBAClC,WAAW,EAAE,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC1F,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAW,CAAC;aACjD,CAAA;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,QAAgB,EAAE,GAAW,EAAE,MAAc,EAAE,IAAY,EAAE,MAAc;YAC5F,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAA;YAC/C,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;sBAClB,GAAG,KAAK,QAAQ,KAAK,MAAM,KAAK,IAAI,KAAK,SAAS,CAAC,WAAW,EAAE;;0BAE5D,CACnB,CAAA;YACD,OAAQ,IAAkB,CAAC,MAAM,GAAG,CAAC,CAAA;QACvC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAM,EAAE,QAAgB,EAAE,GAAW,EAAE,UAAkB,EAAE,YAAqB;YAC7F,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,UAAU,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;gCACH,UAAU;kCACR,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;gCAE9B,QAAQ,cAAc,GAAG,EAAE,CACpD,CAAA;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAM,EAAE,QAAgB,EAAE,GAAW;YAChD,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,QAAQ,cAAc,GAAG,EAAE,CAClF,CAAA;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,EAAM,EAAE,UAAkB;YACtC,MAAM,IAAI,GAAc,MAAM,EAAE,CAAC,OAAO,CACtC,GAAG,CAAA,eAAe,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;yCACC,UAAU,CAAC,QAAQ,EAAE,GAAG,UAAU;0BACjD,CACnB,CAAA;YACD,OAAQ,IAAkB,CAAC,MAAM,CAAA;QACnC,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/infra/idempotency/types.d.ts

@@ -0,0 +1,28 @@
+import type { DB } from '../../data/db/index.js';
+export interface IdempotencyConfig {
+    database: string;
+    table?: string;
+    headerName?: string;
+    ttlSeconds?: number;
+    lockTimeoutMs?: number;
+    methods?: ReadonlyArray<'POST' | 'PUT' | 'PATCH' | 'DELETE'>;
+}
+export interface IdempotencyRecord {
+    key: string;
+    tenantId: string;
+    method: string;
+    path: string;
+    statusCode: number | null;
+    responseBody: unknown;
+    lockedUntil: Date | null;
+    createdAt: Date;
+}
+export interface IdempotencyStore {
+    ensureTable(db: DB): Promise<void>;
+    find(db: DB, tenantId: string, key: string): Promise<IdempotencyRecord | null>;
+    lock(db: DB, tenantId: string, key: string, method: string, path: string, lockMs: number): Promise<boolean>;
+    complete(db: DB, tenantId: string, key: string, statusCode: number, responseBody: unknown): Promise<void>;
+    remove(db: DB, tenantId: string, key: string): Promise<void>;
+    cleanup(db: DB, ttlSeconds: number): Promise<number>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/infra/idempotency/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/infra/idempotency/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAEhD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAA;CAC7D;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,OAAO,CAAA;IACrB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IAC9E,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3G,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzG,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACrD"}

package/dist/infra/idempotency/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/infra/idempotency/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/infra/idempotency/types.ts"],"names":[],"mappings":""}

package/dist/infra/webhook/inbound.d.ts

@@ -0,0 +1,16 @@
+import type { Handler, HttpMethod } from '../../request/di/types.js';
+import type { SignatureVerifier } from './verify.js';
+export interface InboundWebhookConfig<TPayload> {
+    path: string;
+    method?: HttpMethod;
+    verifier: SignatureVerifier;
+    parsePayload?: (rawBody: Buffer) => TPayload;
+    idempotencyKey?: (payload: TPayload) => string;
+}
+export interface InboundWebhookContext<TPayload> {
+    payload: TPayload;
+    rawBody: Buffer;
+    headers: Readonly<Record<string, string | undefined>>;
+}
+export declare function defineInboundWebhook<TPayload = unknown>(config: InboundWebhookConfig<TPayload>, handler: (ctx: InboundWebhookContext<TPayload>) => Promise<unknown>): Handler<Record<string, unknown>, unknown>;
+//# sourceMappingURL=inbound.d.ts.map

package/dist/infra/webhook/inbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../../src/infra/webhook/inbound.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAIpD,MAAM,WAAW,oBAAoB,CAAC,QAAQ;IAC5C,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,QAAQ,CAAA;IAC5C,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,MAAM,CAAA;CAC/C;AAED,MAAM,WAAW,qBAAqB,CAAC,QAAQ;IAC7C,OAAO,EAAE,QAAQ,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;CACtD;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,GAAG,OAAO,EACrD,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EACtC,OAAO,EAAE,CAAC,GAAG,EAAE,qBAAqB,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAClE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAsB3C"}

package/dist/infra/webhook/inbound.js

@@ -0,0 +1,21 @@
+import { Builder } from '../../request/di/builder.js';
+import { UnauthorizedError } from '../../core/errors/index.js';
+export function defineInboundWebhook(config, handler) {
+    const method = config.method ?? 'POST';
+    const parse = config.parsePayload ?? ((raw) => JSON.parse(raw.toString('utf-8')));
+    return new Builder()
+        .public()
+        .rawBody()
+        .request()
+        .route(method, config.path)
+        .fit(async ({ rawBody, request }) => {
+        if (!config.verifier.verify(rawBody, request.headers)) {
+            throw new UnauthorizedError('Webhook signature verification failed.\n\n' +
+                '  The request signature does not match the expected value.\n' +
+                '  Check that the signing secret is correct and the raw body is unmodified.\n');
+        }
+        const payload = parse(rawBody);
+        return handler({ payload, rawBody, headers: request.headers });
+    });
+}
+//# sourceMappingURL=inbound.js.map

package/dist/infra/webhook/inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../../src/infra/webhook/inbound.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AAgB9D,MAAM,UAAU,oBAAoB,CAClC,MAAsC,EACtC,OAAmE;IAEnE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAA;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAa,CAAC,CAAA;IAErG,OAAO,IAAI,OAAO,EAAE;SACjB,MAAM,EAAE;SACR,OAAO,EAAE;SACT,OAAO,EAAE;SACT,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;SAC1B,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,iBAAiB,CACzB,4CAA4C;gBAC5C,8DAA8D;gBAC9D,8EAA8E,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;QAE9B,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACN,CAAC"}

package/dist/infra/webhook/index.d.ts

@@ -0,0 +1,5 @@
+export { defineInboundWebhook, type InboundWebhookConfig, type InboundWebhookContext } from './inbound.js';
+export { hmacVerifier, stripeVerifier, githubVerifier, type SignatureVerifier } from './verify.js';
+export { signPayload, type SignedPayload, type WebhookSignatureOptions } from './sign.js';
+export { createOutboundWebhook, type OutboundWebhookConfig, type OutboundWebhook, type WebhookEndpoint, type DeliveryAttempt } from './outbound.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/infra/webhook/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infra/webhook/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAC1G,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAClG,OAAO,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,uBAAuB,EAAE,MAAM,WAAW,CAAA;AACzF,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,KAAK,eAAe,EAC9E,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA"}

package/dist/infra/webhook/index.js

@@ -0,0 +1,5 @@
+export { defineInboundWebhook } from './inbound.js';
+export { hmacVerifier, stripeVerifier, githubVerifier } from './verify.js';
+export { signPayload } from './sign.js';
+export { createOutboundWebhook } from './outbound.js';
+//# sourceMappingURL=index.js.map

package/dist/infra/webhook/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infra/webhook/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAyD,MAAM,cAAc,CAAA;AAC1G,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAA0B,MAAM,aAAa,CAAA;AAClG,OAAO,EAAE,WAAW,EAAoD,MAAM,WAAW,CAAA;AACzF,OAAO,EAAE,qBAAqB,EACgB,MAAM,eAAe,CAAA"}

package/dist/infra/webhook/namespace.d.ts

@@ -0,0 +1,22 @@
+import { defineInboundWebhook } from './inbound.js';
+import { hmacVerifier, stripeVerifier, githubVerifier } from './verify.js';
+import { signPayload } from './sign.js';
+import { createOutboundWebhook } from './outbound.js';
+/** Webhook namespace — inbound verification, outbound delivery with retries, HMAC signing. */
+export declare const webhook: {
+    /** Defines an inbound webhook handler with signature verification and optional idempotency. */
+    readonly defineInbound: typeof defineInboundWebhook;
+    /** Creates an outbound webhook system — endpoint registration, payload signing, delivery with retries. */
+    readonly createOutbound: typeof createOutboundWebhook;
+    readonly verify: {
+        /** Creates an HMAC signature verifier for inbound webhooks. */
+        readonly hmac: typeof hmacVerifier;
+        /** Creates a Stripe-compatible signature verifier. */
+        readonly stripe: typeof stripeVerifier;
+        /** Creates a GitHub-compatible signature verifier. */
+        readonly github: typeof githubVerifier;
+    };
+    /** Signs a payload with HMAC for outbound delivery — returns body, signature, timestamp, messageId. */
+    readonly sign: typeof signPayload;
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/infra/webhook/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/infra/webhook/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAErD,8FAA8F;AAC9F,eAAO,MAAM,OAAO;IAClB,+FAA+F;;IAE/F,0GAA0G;;;QAIxG,+DAA+D;;QAE/D,sDAAsD;;QAEtD,sDAAsD;;;IAIxD,uGAAuG;;CAE/F,CAAA"}

package/dist/infra/webhook/namespace.js

@@ -0,0 +1,22 @@
+import { defineInboundWebhook } from './inbound.js';
+import { hmacVerifier, stripeVerifier, githubVerifier } from './verify.js';
+import { signPayload } from './sign.js';
+import { createOutboundWebhook } from './outbound.js';
+/** Webhook namespace — inbound verification, outbound delivery with retries, HMAC signing. */
+export const webhook = {
+    /** Defines an inbound webhook handler with signature verification and optional idempotency. */
+    defineInbound: defineInboundWebhook,
+    /** Creates an outbound webhook system — endpoint registration, payload signing, delivery with retries. */
+    createOutbound: createOutboundWebhook,
+    verify: {
+        /** Creates an HMAC signature verifier for inbound webhooks. */
+        hmac: hmacVerifier,
+        /** Creates a Stripe-compatible signature verifier. */
+        stripe: stripeVerifier,
+        /** Creates a GitHub-compatible signature verifier. */
+        github: githubVerifier,
+    },
+    /** Signs a payload with HMAC for outbound delivery — returns body, signature, timestamp, messageId. */
+    sign: signPayload,
+};
+//# sourceMappingURL=namespace.js.map

package/dist/infra/webhook/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/infra/webhook/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAErD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,+FAA+F;IAC/F,aAAa,EAAE,oBAAoB;IACnC,0GAA0G;IAC1G,cAAc,EAAE,qBAAqB;IAErC,MAAM,EAAE;QACN,+DAA+D;QAC/D,IAAI,EAAE,YAAY;QAClB,sDAAsD;QACtD,MAAM,EAAE,cAAc;QACtB,sDAAsD;QACtD,MAAM,EAAE,cAAc;KACvB;IAED,uGAAuG;IACvG,IAAI,EAAE,WAAW;CACT,CAAA"}

package/dist/infra/webhook/outbound.d.ts

@@ -0,0 +1,48 @@
+import type { DB } from '../../data/db/index.js';
+import { type WebhookSignatureOptions } from './sign.js';
+export interface OutboundWebhookConfig {
+    table?: string;
+    deliveryTable?: string;
+    signing?: WebhookSignatureOptions;
+    retry?: {
+        maxAttempts?: number;
+        initialDelayMs?: number;
+        maxDelayMs?: number;
+    };
+    timeoutMs?: number;
+}
+export interface WebhookEndpoint {
+    id: string;
+    tenantId: string;
+    url: string;
+    secret: string;
+    events: string[];
+    active: boolean;
+}
+export interface DeliveryAttempt {
+    id: string;
+    endpointId: string;
+    tenantId: string;
+    eventType: string;
+    payload: unknown;
+    statusCode: number | null;
+    responseBody: string | null;
+    attempt: number;
+    maxAttempts: number;
+    nextRetryAt: Date | null;
+    createdAt: Date;
+}
+export interface OutboundWebhook {
+    ensureTables(db: DB): Promise<void>;
+    send(db: DB, tenantId: string, eventType: string, payload: unknown): Promise<string[]>;
+    deliver(db: DB, deliveryId: string): Promise<{
+        success: boolean;
+        statusCode: number | null;
+    }>;
+    processPending(db: DB): Promise<number>;
+    registerEndpoint(db: DB, endpoint: Omit<WebhookEndpoint, 'id'>): Promise<string>;
+    listEndpoints(db: DB, tenantId: string): Promise<WebhookEndpoint[]>;
+    removeEndpoint(db: DB, tenantId: string, endpointId: string): Promise<boolean>;
+}
+export declare function createOutboundWebhook(config?: OutboundWebhookConfig): OutboundWebhook;
+//# sourceMappingURL=outbound.d.ts.map

package/dist/infra/webhook/outbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.d.ts","sourceRoot":"","sources":["../../../src/infra/webhook/outbound.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAChD,OAAO,EAAe,KAAK,uBAAuB,EAAE,MAAM,WAAW,CAAA;AAErE,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,uBAAuB,CAAA;IACjC,KAAK,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACtF,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC7F,cAAc,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAChF,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IACnE,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC/E;AAWD,wBAAgB,qBAAqB,CAAC,MAAM,GAAE,qBAA0B,GAAG,eAAe,CAqLzF"}