"use strict"; var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) { if (k2 === undefined) k2 = k; var desc = Object.getOwnPropertyDescriptor(m, k); if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) { desc = { enumerable: true, get: function() { return m[k]; } }; } Object.defineProperty(o, k2, desc); }) : (function(o, m, k, k2) { if (k2 === undefined) k2 = k; o[k2] = m[k]; })); var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) { Object.defineProperty(o, "default", { enumerable: true, value: v }); }) : function(o, v) { o["default"] = v; }); var __importStar = (this && this.__importStar) || (function () { var ownKeys = function(o) { ownKeys = Object.getOwnPropertyNames || function (o) { var ar = []; for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k; return ar; }; return ownKeys(o); }; return function (mod) { if (mod && mod.__esModule) return mod; var result = {}; if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]); __setModuleDefault(result, mod); return result; }; })(); Object.defineProperty(exports, "__esModule", { value: true }); exports.WebhookDispatcher = void 0; const MAX_ATTEMPTS = 3; const BASE_DELAY_MS = 1000; class WebhookDispatcher { constructor(endpointRepo, logger) { this.endpointRepo = endpointRepo; this.logger = logger; } async dispatchFinding(finding) { const endpoints = await this.endpointRepo.findEnabled(); await Promise.allSettled(endpoints.map(ep => this.deliverWithRetry(ep.url, ep.secret.value, finding))); } async deliverWithRetry(url, secret, payload) { const body = JSON.stringify({ event: 'finding.created', data: payload }); const { createHmac } = await Promise.resolve().then(() => __importStar(require('crypto'))); const signature = createHmac('sha256', secret).update(body).digest('hex'); for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) { try { const res = await fetch(url, { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-ABE-Signature': `sha256=${signature}`, 'X-ABE-Event': 'finding.created', 'User-Agent': 'ABE-Webhook/1.0', }, body, signal: AbortSignal.timeout(10000), }); this.logger.info({ url, status: res.status, attempt }, 'Webhook delivered'); return; } catch (err) { this.logger.warn({ url, attempt, err }, 'Webhook delivery failed'); if (attempt < MAX_ATTEMPTS) { await sleep(BASE_DELAY_MS * 2 ** (attempt - 1)); } } } this.logger.error({ url }, 'Webhook delivery failed after max attempts'); } } exports.WebhookDispatcher = WebhookDispatcher; function sleep(ms) { return new Promise(resolve => setTimeout(resolve, ms)); }