import { d as defineEventHandler, r as requireAuth, c as createError, cI as requireAdminScope, i as requireApiTokenScopes, q as readBody, e_ as updateWebhook, e$ as isSsrfGuardError } from '../../../nitro/nitro.mjs';
import { a as auditFromEvent } from '../../../_/audit-log-helpers.mjs';
import 'node:crypto';
import 'jsonwebtoken';
import 'node:fs';
import 'node:module';
import 'node:path';
import 'node:url';
import 'node:http';
import 'node:https';
import 'node:events';
import 'node:buffer';
import 'pino';
import 'drizzle-orm/better-sqlite3';
import 'drizzle-orm/node-postgres';
import 'drizzle-orm/mysql2';
import 'better-sqlite3';
import 'pg';
import 'mysql2/promise';
import 'drizzle-orm';
import 'fs';
import 'path';
import 'prom-client';
import 'bcryptjs';
import '@node-rs/argon2';
import 'node:async_hooks';
import 'crypto';
import 'node:dns';
import 'node:util';
import 'node:net';
import 'fs/promises';
import 'url';
import 'semver';
import '../../../_/audit-log-actor.mjs';

const _id__put = defineEventHandler(async (event) => {
  var _a, _b;
  try {
    await requireAuth(event);
    if (!event.context.adminUser) {
      throw createError({
        statusCode: 403,
        statusMessage: "Forbidden",
        message: "Only administrators can manage webhooks"
      });
    }
    await requireAdminScope(event, "webhooks:write");
    requireApiTokenScopes(event.context.apiToken, { scopes: ["webhooks:write"] });
    const id = (_a = event.context.params) == null ? void 0 : _a.id;
    if (!id) {
      throw createError({
        statusCode: 400,
        statusMessage: "Bad Request",
        message: "Webhook ID is required"
      });
    }
    const numericId = parseInt(id);
    if (isNaN(numericId)) {
      throw createError({
        statusCode: 400,
        statusMessage: "Bad Request",
        message: "ID must be a valid number"
      });
    }
    const body = await readBody(event);
    if (body.url) {
      try {
        new URL(body.url);
      } catch {
        throw createError({
          statusCode: 400,
          statusMessage: "Bad Request",
          message: "Invalid URL format"
        });
      }
    }
    if (body.events) {
      const validEvents = [
        "entry.create",
        "entry.update",
        "entry.delete",
        "entry.publish",
        "entry.unpublish",
        "entry.preview.invalidate"
      ];
      const events = Array.isArray(body.events) ? body.events : [body.events];
      for (const event2 of events) {
        if (!validEvents.includes(event2)) {
          throw createError({
            statusCode: 400,
            statusMessage: "Bad Request",
            message: `Invalid event: ${event2}. Valid events are: ${validEvents.join(", ")}`
          });
        }
      }
    }
    const webhook = await updateWebhook(numericId, body);
    const auditAction = body.secret !== void 0 && Object.keys(body).length === 1 ? "webhook.rotate_secret" : "webhook.update";
    auditFromEvent(event, auditAction, {
      target: { entityType: "webhook", entityId: webhook.id, displayName: webhook.name },
      metadata: { changedKeys: Object.keys(body), hasSecret: Boolean(webhook.secret) }
    });
    return {
      success: true,
      data: {
        ...webhook,
        events: JSON.parse(webhook.events),
        content_types: JSON.parse(webhook.content_types),
        headers: webhook.headers ? JSON.parse(webhook.headers) : {},
        enabled: webhook.enabled === 1 || webhook.enabled === true,
        secret: void 0
      }
    };
  } catch (error) {
    if (error && typeof error === "object" && "statusCode" in error) {
      throw error;
    }
    if (isSsrfGuardError(error)) {
      throw createError({
        statusCode: 400,
        statusMessage: "Bad Request",
        message: error instanceof Error ? error.message : "Invalid webhook URL"
      });
    }
    console.error(`[PUT /api/webhooks/${(_b = event.context.params) == null ? void 0 : _b.id}] Error:`, error);
    throw createError({
      statusCode: 500,
      statusMessage: "Failed to update webhook",
      message: error instanceof Error ? error.message : "Unknown error"
    });
  }
});

export { _id__put as default };
//# sourceMappingURL=_id_.put.mjs.map
