Function deliver

apps/sim/lib/data-drains/destinations/webhook.ts:183–242

({ body, contentType, metadata, signal })

    let resolvedIP: string | null = null
    return {
      async deliver({ body, contentType, metadata, signal }) {
        // Resolve once per session and pin across retries to defeat DNS rebinding (TOCTOU).
        if (resolvedIP === null) {
          resolvedIP = await resolvePublicTarget(config.url)
        }
        let lastError: unknown
        for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
          if (signal.aborted) throw signal.reason ?? new Error('Aborted')
          const headers = buildHeaders({ config, credentials, body, contentType, metadata })
          let retryAfterMs: number | null = null
          let response: Awaited<ReturnType<typeof secureFetchWithPinnedIP>> | undefined
          try {
            response = await secureFetchWithPinnedIP(config.url, resolvedIP, {
              method: 'POST',
              body: new Uint8Array(body),
              headers,
              signal,
              timeout: PER_ATTEMPT_TIMEOUT_MS,
              maxResponseBytes: MAX_RESPONSE_BYTES,
            })
          } catch (error) {
            lastError = error
            logger.debug('Webhook delivery attempt failed', {
              url: config.url,
              attempt,
              error: toError(error).message,
            })
          }
          if (response) {
            if (response.ok) {
              const requestId =
                response.headers.get('x-request-id') ??
                response.headers.get('x-amzn-trace-id') ??
                null
              logger.debug('Webhook chunk delivered', {
                url: config.url,
                attempt,
                status: response.status,
                bytes: body.byteLength,
              })
              return {
                locator: requestId
                  ? `${config.url}#${metadata.runId}-${metadata.sequence}@${requestId}`
                  : `${config.url}#${metadata.runId}-${metadata.sequence}`,
              }
            }
            if (!isRetryableStatus(response.status)) {
              throw new Error(`Webhook responded with HTTP ${response.status}`)
            }
            lastError = new Error(`Webhook responded with HTTP ${response.status}`)
            retryAfterMs = parseRetryAfter(response.headers.get('retry-after'))
          }
          if (attempt < MAX_ATTEMPTS) {
            await sleepUntilAborted(backoffWithJitter(attempt, retryAfterMs), signal)
          }
        }
        throw lastError instanceof Error
          ? lastError