@01.software/sdk 0.1.3 → 0.1.5

package/dist/{payload-types-D-pPck9V.d.cts → payload-types-BAZCcssT.d.cts}

@@ -139,9 +139,7 @@ interface Config {
     globals: {};
     globalsSelect: {};
     locale: null;
-    user: User & {
-        collection: 'users';
-    };
+    user: User;
     jobs: {
         tasks: unknown;
         workflows: unknown;
@@ -232,6 +230,7 @@ interface User {
         expiresAt: string;
     }[] | null;
     password?: string | null;
+    collection: 'users';
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -591,6 +590,16 @@ interface TenantOgImage {
     height?: number | null;
     focalX?: number | null;
     focalY?: number | null;
+    sizes?: {
+        '1200'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+    };
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -621,6 +630,64 @@ interface TenantLogo {
     height?: number | null;
     focalX?: number | null;
     focalY?: number | null;
+    sizes?: {
+        '16'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '32'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '64'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '128'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '180'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '192'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '512'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+    };
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -898,6 +965,7 @@ interface ProductCategory {
     description?: string | null;
     image?: (number | null) | ProductImage;
     parent?: (number | null) | ProductCategory;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -916,6 +984,9 @@ interface ProductTag {
     generateSlug?: boolean | null;
     slug?: string | null;
     description?: string | null;
+    image?: (number | null) | ProductImage;
+    parent?: (number | null) | ProductTag;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -972,6 +1043,7 @@ interface ProductVariant {
      * Override price (uses product price if empty)
      */
     price?: number | null;
+    isSoldOut?: boolean | null;
     images?: (number | ProductImage)[] | null;
     productOptions?: {
         docs?: (number | ProductOption)[];
@@ -1265,7 +1337,9 @@ interface PostCategory {
     generateSlug?: boolean | null;
     slug?: string | null;
     description?: string | null;
+    image?: (number | null) | PostImage;
     parent?: (number | null) | PostCategory;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -1284,6 +1358,9 @@ interface PostTag {
     generateSlug?: boolean | null;
     slug?: string | null;
     description?: string | null;
+    image?: (number | null) | PostImage;
+    parent?: (number | null) | PostTag;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -1365,6 +1442,9 @@ interface DocumentCategory {
     generateSlug?: boolean | null;
     slug?: string | null;
     description?: string | null;
+    image?: (number | null) | DocumentImage;
+    parent?: (number | null) | DocumentCategory;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -2122,6 +2202,64 @@ interface TenantLogosSelect<T extends boolean = true> {
     height?: T;
     focalX?: T;
     focalY?: T;
+    sizes?: T | {
+        '16'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '32'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '64'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '128'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '180'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '192'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '512'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+    };
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -2151,6 +2289,16 @@ interface TenantOgImagesSelect<T extends boolean = true> {
     height?: T;
     focalX?: T;
     focalY?: T;
+    sizes?: T | {
+        '1200'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+    };
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -2273,6 +2421,7 @@ interface ProductVariantsSelect<T extends boolean = true> {
     title?: T;
     sku?: T;
     price?: T;
+    isSoldOut?: T;
     images?: T;
     productOptions?: T;
     updatedAt?: T;
@@ -2309,6 +2458,7 @@ interface ProductCategoriesSelect<T extends boolean = true> {
     description?: T;
     image?: T;
     parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }
@@ -2323,6 +2473,9 @@ interface ProductTagsSelect<T extends boolean = true> {
     generateSlug?: T;
     slug?: T;
     description?: T;
+    image?: T;
+    parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }
@@ -2607,7 +2760,9 @@ interface PostCategoriesSelect<T extends boolean = true> {
     generateSlug?: T;
     slug?: T;
     description?: T;
+    image?: T;
     parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }
@@ -2622,6 +2777,9 @@ interface PostTagsSelect<T extends boolean = true> {
     generateSlug?: T;
     slug?: T;
     description?: T;
+    image?: T;
+    parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }
@@ -2726,6 +2884,9 @@ interface DocumentCategoriesSelect<T extends boolean = true> {
     generateSlug?: T;
     slug?: T;
     description?: T;
+    image?: T;
+    parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }

package/dist/{payload-types-D-pPck9V.d.ts → payload-types-BAZCcssT.d.ts}

@@ -139,9 +139,7 @@ interface Config {
     globals: {};
     globalsSelect: {};
     locale: null;
-    user: User & {
-        collection: 'users';
-    };
+    user: User;
     jobs: {
         tasks: unknown;
         workflows: unknown;
@@ -232,6 +230,7 @@ interface User {
         expiresAt: string;
     }[] | null;
     password?: string | null;
+    collection: 'users';
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -591,6 +590,16 @@ interface TenantOgImage {
     height?: number | null;
     focalX?: number | null;
     focalY?: number | null;
+    sizes?: {
+        '1200'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+    };
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -621,6 +630,64 @@ interface TenantLogo {
     height?: number | null;
     focalX?: number | null;
     focalY?: number | null;
+    sizes?: {
+        '16'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '32'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '64'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '128'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '180'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '192'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+        '512'?: {
+            url?: string | null;
+            width?: number | null;
+            height?: number | null;
+            mimeType?: string | null;
+            filesize?: number | null;
+            filename?: string | null;
+        };
+    };
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -898,6 +965,7 @@ interface ProductCategory {
     description?: string | null;
     image?: (number | null) | ProductImage;
     parent?: (number | null) | ProductCategory;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -916,6 +984,9 @@ interface ProductTag {
     generateSlug?: boolean | null;
     slug?: string | null;
     description?: string | null;
+    image?: (number | null) | ProductImage;
+    parent?: (number | null) | ProductTag;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -972,6 +1043,7 @@ interface ProductVariant {
      * Override price (uses product price if empty)
      */
     price?: number | null;
+    isSoldOut?: boolean | null;
     images?: (number | ProductImage)[] | null;
     productOptions?: {
         docs?: (number | ProductOption)[];
@@ -1265,7 +1337,9 @@ interface PostCategory {
     generateSlug?: boolean | null;
     slug?: string | null;
     description?: string | null;
+    image?: (number | null) | PostImage;
     parent?: (number | null) | PostCategory;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -1284,6 +1358,9 @@ interface PostTag {
     generateSlug?: boolean | null;
     slug?: string | null;
     description?: string | null;
+    image?: (number | null) | PostImage;
+    parent?: (number | null) | PostTag;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -1365,6 +1442,9 @@ interface DocumentCategory {
     generateSlug?: boolean | null;
     slug?: string | null;
     description?: string | null;
+    image?: (number | null) | DocumentImage;
+    parent?: (number | null) | DocumentCategory;
+    color?: string | null;
     updatedAt: string;
     createdAt: string;
 }
@@ -2122,6 +2202,64 @@ interface TenantLogosSelect<T extends boolean = true> {
     height?: T;
     focalX?: T;
     focalY?: T;
+    sizes?: T | {
+        '16'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '32'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '64'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '128'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '180'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '192'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+        '512'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+    };
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -2151,6 +2289,16 @@ interface TenantOgImagesSelect<T extends boolean = true> {
     height?: T;
     focalX?: T;
     focalY?: T;
+    sizes?: T | {
+        '1200'?: T | {
+            url?: T;
+            width?: T;
+            height?: T;
+            mimeType?: T;
+            filesize?: T;
+            filename?: T;
+        };
+    };
 }
 /**
  * This interface was referenced by `Config`'s JSON-Schema
@@ -2273,6 +2421,7 @@ interface ProductVariantsSelect<T extends boolean = true> {
     title?: T;
     sku?: T;
     price?: T;
+    isSoldOut?: T;
     images?: T;
     productOptions?: T;
     updatedAt?: T;
@@ -2309,6 +2458,7 @@ interface ProductCategoriesSelect<T extends boolean = true> {
     description?: T;
     image?: T;
     parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }
@@ -2323,6 +2473,9 @@ interface ProductTagsSelect<T extends boolean = true> {
     generateSlug?: T;
     slug?: T;
     description?: T;
+    image?: T;
+    parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }
@@ -2607,7 +2760,9 @@ interface PostCategoriesSelect<T extends boolean = true> {
     generateSlug?: T;
     slug?: T;
     description?: T;
+    image?: T;
     parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }
@@ -2622,6 +2777,9 @@ interface PostTagsSelect<T extends boolean = true> {
     generateSlug?: T;
     slug?: T;
     description?: T;
+    image?: T;
+    parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }
@@ -2726,6 +2884,9 @@ interface DocumentCategoriesSelect<T extends boolean = true> {
     generateSlug?: T;
     slug?: T;
     description?: T;
+    image?: T;
+    parent?: T;
+    color?: T;
     updatedAt?: T;
     createdAt?: T;
 }

package/dist/{webhook-CC3SGR_a.d.ts → webhook-CYJ0OPds.d.ts}

@@ -1,4 +1,4 @@
-import { C as Config } from './payload-types-D-pPck9V.js';
+import { C as Config } from './payload-types-BAZCcssT.js';
 
 /**
  * Collection type derived from Payload Config.

package/dist/{webhook-CeKIz4r5.d.cts → webhook-DdNkaI-f.d.cts}

@@ -1,4 +1,4 @@
-import { C as Config } from './payload-types-D-pPck9V.cjs';
+import { C as Config } from './payload-types-BAZCcssT.cjs';
 
 /**
  * Collection type derived from Payload Config.

package/dist/webhook.cjs

@@ -64,10 +64,10 @@ function verifySignature(payload, secret, signature) {
     );
     const sig = yield crypto.subtle.sign("HMAC", key, encoder.encode(payload));
     const expected = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
-    if (expected.length !== signature.length) return false;
-    let result = 0;
-    for (let i = 0; i < expected.length; i++) {
-      result |= expected.charCodeAt(i) ^ signature.charCodeAt(i);
+    let result = expected.length !== signature.length ? 1 : 0;
+    const len = Math.max(expected.length, signature.length);
+    for (let i = 0; i < len; i++) {
+      result |= (expected.charCodeAt(i) || 0) ^ (signature.charCodeAt(i) || 0);
     }
     return result === 0;
   });

package/dist/webhook.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/webhook.ts","../src/core/webhook/index.tsx"],"sourcesContent":["export {\n  handleWebhook,\n  createTypedWebhookHandler,\n  isValidWebhookEvent,\n} from './core/webhook'\nexport type {\n  WebhookEvent,\n  WebhookHandler,\n  WebhookOperation,\n  WebhookOptions,\n} from './core/webhook'\n","import type { Collection } from '../client/types'\nimport type { CollectionType } from '../collection/types'\n\nexport type WebhookOperation = 'create' | 'update'\n\nexport interface WebhookEvent<T extends Collection = Collection> {\n  collection: T\n  operation: WebhookOperation\n  data: CollectionType<T>\n}\n\nexport type WebhookHandler<T extends Collection = Collection> = (\n  event: WebhookEvent<T>,\n) => Promise<void> | void\n\nexport interface WebhookOptions {\n  secret?: string\n}\n\nexport function isValidWebhookEvent(data: unknown): data is WebhookEvent {\n  if (typeof data !== 'object' || data === null) return false\n  const obj = data as Record<string, unknown>\n  return (\n    typeof obj.collection === 'string' &&\n    (obj.operation === 'create' || obj.operation === 'update') &&\n    typeof obj.data === 'object' &&\n    obj.data !== null\n  )\n}\n\nasync function verifySignature(\n  payload: string,\n  secret: string,\n  signature: string,\n): Promise<boolean> {\n  const encoder = new TextEncoder()\n  const key = await crypto.subtle.importKey(\n    'raw',\n    encoder.encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign'],\n  )\n  const sig = await crypto.subtle.sign('HMAC', key, encoder.encode(payload))\n  const expected = Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('')\n  // Constant-time comparison to prevent timing attacks\n  if (expected.length !== signature.length) return false\n  let result = 0\n  for (let i = 0; i < expected.length; i++) {\n    result |= expected.charCodeAt(i) ^ signature.charCodeAt(i)\n  }\n  return result === 0\n}\n\nexport async function handleWebhook<T extends Collection = Collection>(\n  request: Request,\n  handler: WebhookHandler<T>,\n  options?: WebhookOptions,\n): Promise<Response> {\n  try {\n    const rawBody = await request.text()\n\n    if (options?.secret) {\n      const signature = request.headers.get('x-webhook-signature') || ''\n      const valid = await verifySignature(rawBody, options.secret, signature)\n      if (!valid) {\n        return new Response(\n          JSON.stringify({ error: 'Invalid webhook signature' }),\n          { status: 401, headers: { 'Content-Type': 'application/json' } },\n        )\n      }\n    }\n\n    const body = JSON.parse(rawBody)\n\n    if (!isValidWebhookEvent(body)) {\n      return new Response(\n        JSON.stringify({ error: 'Invalid webhook event format' }),\n        { status: 400, headers: { 'Content-Type': 'application/json' } },\n      )\n    }\n\n    await handler(body as WebhookEvent<T>)\n\n    return new Response(\n      JSON.stringify({ success: true, message: 'Webhook processed' }),\n      { status: 200, headers: { 'Content-Type': 'application/json' } },\n    )\n  } catch (error) {\n    console.error('Webhook processing error:', error)\n\n    return new Response(\n      JSON.stringify({\n        error: 'Internal server error',\n        message: error instanceof Error ? error.message : 'Unknown error',\n      }),\n      { status: 500, headers: { 'Content-Type': 'application/json' } },\n    )\n  }\n}\n\nexport function createTypedWebhookHandler<T extends Collection>(\n  collection: T,\n  handler: (event: WebhookEvent<T>) => Promise<void> | void,\n): WebhookHandler<T> {\n  return async (event: WebhookEvent<T>) => {\n    if (event.collection !== collection) {\n      throw new Error(`Expected collection \"${collection}\", got \"${event.collection}\"`)\n    }\n    return handler(event)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACmBO,SAAS,oBAAoB,MAAqC;AACvE,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,QAAM,MAAM;AACZ,SACE,OAAO,IAAI,eAAe,aACzB,IAAI,cAAc,YAAY,IAAI,cAAc,aACjD,OAAO,IAAI,SAAS,YACpB,IAAI,SAAS;AAEjB;AAEA,SAAe,gBACb,SACA,QACA,WACkB;AAAA;AAClB,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,MAAM,MAAM,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA,QAAQ,OAAO,MAAM;AAAA,MACrB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AACA,UAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,QAAQ,OAAO,OAAO,CAAC;AACzE,UAAM,WAAW,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAC5C,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAEV,QAAI,SAAS,WAAW,UAAU,OAAQ,QAAO;AACjD,QAAI,SAAS;AACb,aAAS,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,gBAAU,SAAS,WAAW,CAAC,IAAI,UAAU,WAAW,CAAC;AAAA,IAC3D;AACA,WAAO,WAAW;AAAA,EACpB;AAAA;AAEA,SAAsB,cACpB,SACA,SACA,SACmB;AAAA;AACnB,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,KAAK;AAEnC,UAAI,mCAAS,QAAQ;AACnB,cAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,cAAM,QAAQ,MAAM,gBAAgB,SAAS,QAAQ,QAAQ,SAAS;AACtE,YAAI,CAAC,OAAO;AACV,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU,EAAE,OAAO,4BAA4B,CAAC;AAAA,YACrD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UACjE;AAAA,QACF;AAAA,MACF;AAEA,YAAM,OAAO,KAAK,MAAM,OAAO;AAE/B,UAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,+BAA+B,CAAC;AAAA,UACxD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,QAAQ,IAAuB;AAErC,aAAO,IAAI;AAAA,QACT,KAAK,UAAU,EAAE,SAAS,MAAM,SAAS,oBAAoB,CAAC;AAAA,QAC9D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,6BAA6B,KAAK;AAEhD,aAAO,IAAI;AAAA,QACT,KAAK,UAAU;AAAA,UACb,OAAO;AAAA,UACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QACpD,CAAC;AAAA,QACD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAAA;AAEO,SAAS,0BACd,YACA,SACmB;AACnB,SAAO,CAAO,UAA2B;AACvC,QAAI,MAAM,eAAe,YAAY;AACnC,YAAM,IAAI,MAAM,wBAAwB,UAAU,WAAW,MAAM,UAAU,GAAG;AAAA,IAClF;AACA,WAAO,QAAQ,KAAK;AAAA,EACtB;AACF;","names":[]}
+{"version":3,"sources":["../src/webhook.ts","../src/core/webhook/index.tsx"],"sourcesContent":["export {\n  handleWebhook,\n  createTypedWebhookHandler,\n  isValidWebhookEvent,\n} from './core/webhook'\nexport type {\n  WebhookEvent,\n  WebhookHandler,\n  WebhookOperation,\n  WebhookOptions,\n} from './core/webhook'\n","import type { Collection } from '../client/types'\nimport type { CollectionType } from '../collection/types'\n\nexport type WebhookOperation = 'create' | 'update'\n\nexport interface WebhookEvent<T extends Collection = Collection> {\n  collection: T\n  operation: WebhookOperation\n  data: CollectionType<T>\n}\n\nexport type WebhookHandler<T extends Collection = Collection> = (\n  event: WebhookEvent<T>,\n) => Promise<void> | void\n\nexport interface WebhookOptions {\n  secret?: string\n}\n\nexport function isValidWebhookEvent(data: unknown): data is WebhookEvent {\n  if (typeof data !== 'object' || data === null) return false\n  const obj = data as Record<string, unknown>\n  return (\n    typeof obj.collection === 'string' &&\n    (obj.operation === 'create' || obj.operation === 'update') &&\n    typeof obj.data === 'object' &&\n    obj.data !== null\n  )\n}\n\nasync function verifySignature(\n  payload: string,\n  secret: string,\n  signature: string,\n): Promise<boolean> {\n  const encoder = new TextEncoder()\n  const key = await crypto.subtle.importKey(\n    'raw',\n    encoder.encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign'],\n  )\n  const sig = await crypto.subtle.sign('HMAC', key, encoder.encode(payload))\n  const expected = Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('')\n  // Constant-time comparison to prevent timing attacks\n  let result = expected.length !== signature.length ? 1 : 0\n  const len = Math.max(expected.length, signature.length)\n  for (let i = 0; i < len; i++) {\n    result |= (expected.charCodeAt(i) || 0) ^ (signature.charCodeAt(i) || 0)\n  }\n  return result === 0\n}\n\nexport async function handleWebhook<T extends Collection = Collection>(\n  request: Request,\n  handler: WebhookHandler<T>,\n  options?: WebhookOptions,\n): Promise<Response> {\n  try {\n    const rawBody = await request.text()\n\n    if (options?.secret) {\n      const signature = request.headers.get('x-webhook-signature') || ''\n      const valid = await verifySignature(rawBody, options.secret, signature)\n      if (!valid) {\n        return new Response(\n          JSON.stringify({ error: 'Invalid webhook signature' }),\n          { status: 401, headers: { 'Content-Type': 'application/json' } },\n        )\n      }\n    }\n\n    const body = JSON.parse(rawBody)\n\n    if (!isValidWebhookEvent(body)) {\n      return new Response(\n        JSON.stringify({ error: 'Invalid webhook event format' }),\n        { status: 400, headers: { 'Content-Type': 'application/json' } },\n      )\n    }\n\n    await handler(body as WebhookEvent<T>)\n\n    return new Response(\n      JSON.stringify({ success: true, message: 'Webhook processed' }),\n      { status: 200, headers: { 'Content-Type': 'application/json' } },\n    )\n  } catch (error) {\n    console.error('Webhook processing error:', error)\n\n    return new Response(\n      JSON.stringify({\n        error: 'Internal server error',\n        message: error instanceof Error ? error.message : 'Unknown error',\n      }),\n      { status: 500, headers: { 'Content-Type': 'application/json' } },\n    )\n  }\n}\n\nexport function createTypedWebhookHandler<T extends Collection>(\n  collection: T,\n  handler: (event: WebhookEvent<T>) => Promise<void> | void,\n): WebhookHandler<T> {\n  return async (event: WebhookEvent<T>) => {\n    if (event.collection !== collection) {\n      throw new Error(`Expected collection \"${collection}\", got \"${event.collection}\"`)\n    }\n    return handler(event)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACmBO,SAAS,oBAAoB,MAAqC;AACvE,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,QAAM,MAAM;AACZ,SACE,OAAO,IAAI,eAAe,aACzB,IAAI,cAAc,YAAY,IAAI,cAAc,aACjD,OAAO,IAAI,SAAS,YACpB,IAAI,SAAS;AAEjB;AAEA,SAAe,gBACb,SACA,QACA,WACkB;AAAA;AAClB,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,MAAM,MAAM,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA,QAAQ,OAAO,MAAM;AAAA,MACrB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,MAChC;AAAA,MACA,CAAC,MAAM;AAAA,IACT;AACA,UAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,QAAQ,OAAO,OAAO,CAAC;AACzE,UAAM,WAAW,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAC5C,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAEV,QAAI,SAAS,SAAS,WAAW,UAAU,SAAS,IAAI;AACxD,UAAM,MAAM,KAAK,IAAI,SAAS,QAAQ,UAAU,MAAM;AACtD,aAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,iBAAW,SAAS,WAAW,CAAC,KAAK,MAAM,UAAU,WAAW,CAAC,KAAK;AAAA,IACxE;AACA,WAAO,WAAW;AAAA,EACpB;AAAA;AAEA,SAAsB,cACpB,SACA,SACA,SACmB;AAAA;AACnB,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,KAAK;AAEnC,UAAI,mCAAS,QAAQ;AACnB,cAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,cAAM,QAAQ,MAAM,gBAAgB,SAAS,QAAQ,QAAQ,SAAS;AACtE,YAAI,CAAC,OAAO;AACV,iBAAO,IAAI;AAAA,YACT,KAAK,UAAU,EAAE,OAAO,4BAA4B,CAAC;AAAA,YACrD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,UACjE;AAAA,QACF;AAAA,MACF;AAEA,YAAM,OAAO,KAAK,MAAM,OAAO;AAE/B,UAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,+BAA+B,CAAC;AAAA,UACxD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAEA,YAAM,QAAQ,IAAuB;AAErC,aAAO,IAAI;AAAA,QACT,KAAK,UAAU,EAAE,SAAS,MAAM,SAAS,oBAAoB,CAAC;AAAA,QAC9D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,MAAM,6BAA6B,KAAK;AAEhD,aAAO,IAAI;AAAA,QACT,KAAK,UAAU;AAAA,UACb,OAAO;AAAA,UACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QACpD,CAAC;AAAA,QACD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAAA;AAEO,SAAS,0BACd,YACA,SACmB;AACnB,SAAO,CAAO,UAA2B;AACvC,QAAI,MAAM,eAAe,YAAY;AACnC,YAAM,IAAI,MAAM,wBAAwB,UAAU,WAAW,MAAM,UAAU,GAAG;AAAA,IAClF;AACA,WAAO,QAAQ,KAAK;AAAA,EACtB;AACF;","names":[]}

package/dist/webhook.d.cts

@@ -1,2 +1,2 @@
-export { c as WebhookEvent, d as WebhookHandler, W as WebhookOperation, e as WebhookOptions, f as createTypedWebhookHandler, h as handleWebhook, i as isValidWebhookEvent } from './webhook-CeKIz4r5.cjs';
-import './payload-types-D-pPck9V.cjs';
+export { c as WebhookEvent, d as WebhookHandler, W as WebhookOperation, e as WebhookOptions, f as createTypedWebhookHandler, h as handleWebhook, i as isValidWebhookEvent } from './webhook-DdNkaI-f.cjs';
+import './payload-types-BAZCcssT.cjs';

package/dist/webhook.d.ts

@@ -1,2 +1,2 @@
-export { c as WebhookEvent, d as WebhookHandler, W as WebhookOperation, e as WebhookOptions, f as createTypedWebhookHandler, h as handleWebhook, i as isValidWebhookEvent } from './webhook-CC3SGR_a.js';
-import './payload-types-D-pPck9V.js';
+export { c as WebhookEvent, d as WebhookHandler, W as WebhookOperation, e as WebhookOptions, f as createTypedWebhookHandler, h as handleWebhook, i as isValidWebhookEvent } from './webhook-CYJ0OPds.js';
+import './payload-types-BAZCcssT.js';

package/dist/webhook.js

@@ -37,10 +37,10 @@ function verifySignature(payload, secret, signature) {
     );
     const sig = yield crypto.subtle.sign("HMAC", key, encoder.encode(payload));
     const expected = Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
-    if (expected.length !== signature.length) return false;
-    let result = 0;
-    for (let i = 0; i < expected.length; i++) {
-      result |= expected.charCodeAt(i) ^ signature.charCodeAt(i);
+    let result = expected.length !== signature.length ? 1 : 0;
+    const len = Math.max(expected.length, signature.length);
+    for (let i = 0; i < len; i++) {
+      result |= (expected.charCodeAt(i) || 0) ^ (signature.charCodeAt(i) || 0);
     }
     return result === 0;
   });