chore: import upstream snapshot with attribution

apps/sim/lib/webhooks/provider-subscription-utils.ts

@@ -0,0 +1,48 @@
+import { db } from '@sim/db'
+import { account } from '@sim/db/schema'
+import { createLogger } from '@sim/logger'
+import { eq } from 'drizzle-orm'
+import { getBaseUrl } from '@/lib/core/utils/urls'
+import { resolveOAuthAccountId } from '@/app/api/auth/oauth/utils'
+
+const logger = createLogger('WebhookProviderSubscriptions')
+
+/** Safely read a webhook row's provider config as a plain object. */
+export function getProviderConfig(webhook: Record<string, unknown>): Record<string, unknown> {
+  return (webhook.providerConfig as Record<string, unknown>) || {}
+}
+
+/** Build the public callback URL providers should deliver webhook events to. */
+export function getNotificationUrl(webhook: Record<string, unknown>): string {
+  return `${getBaseUrl()}/api/webhooks/trigger/${webhook.path}`
+}
+
+/**
+ * Resolve an OAuth-backed credential to the owning user and account.
+ *
+ * Provider subscription handlers use this when they need to refresh tokens or
+ * make provider API calls on behalf of the credential owner during webhook
+ * registration and cleanup.
+ */
+export async function getCredentialOwner(
+  credentialId: string,
+  requestId: string
+): Promise<{ userId: string; accountId: string } | null> {
+  const resolved = await resolveOAuthAccountId(credentialId)
+  if (!resolved) {
+    logger.warn(`[${requestId}] Failed to resolve OAuth account for credentialId ${credentialId}`)
+    return null
+  }
+  const [credentialRecord] = await db
+    .select({ userId: account.userId })
+    .from(account)
+    .where(eq(account.id, resolved.accountId))
+    .limit(1)
+
+  if (!credentialRecord?.userId) {
+    logger.warn(`[${requestId}] Credential owner not found for credentialId ${credentialId}`)
+    return null
+  }
+
+  return { userId: credentialRecord.userId, accountId: resolved.accountId }
+}