@01.software/sdk 0.32.0 → 0.34.0

package/dist/ui/form.d.cts

@@ -1,5 +1,5 @@
 import React from 'react';
-import { F as Form } from '../payload-types-DVK1QCeU.cjs';
+import { F as Form } from '../payload-types-C7tb7Xbs.cjs';
 import { RichTextData } from './rich-text.cjs';
 import '@payloadcms/richtext-lexical';
 import '@payloadcms/richtext-lexical/lexical';

package/dist/ui/form.d.ts

@@ -1,5 +1,5 @@
 import React from 'react';
-import { F as Form } from '../payload-types-DVK1QCeU.js';
+import { F as Form } from '../payload-types-C7tb7Xbs.js';
 import { RichTextData } from './rich-text.js';
 import '@payloadcms/richtext-lexical';
 import '@payloadcms/richtext-lexical/lexical';

package/dist/ui/video.d.cts

@@ -1,7 +1,7 @@
 import React, { CSSProperties } from 'react';
 import { MuxPlayerProps, MuxPlayerRefAttributes } from '@mux/mux-player-react';
 export { MuxPlayerRefAttributes as VideoPlayerRef } from '@mux/mux-player-react';
-import { V as Video } from '../payload-types-DVK1QCeU.cjs';
+import { V as Video } from '../payload-types-C7tb7Xbs.cjs';
 export { V as VideoGifOptions, a as VideoThumbnailOptions, g as getVideoGif, b as getVideoMp4Url, c as getVideoStoryboard, d as getVideoStreamUrl, e as getVideoThumbnail } from '../video-WR_TFO9a.cjs';
 
 interface VideoPlayerCSSProperties extends CSSProperties {

package/dist/ui/video.d.ts

@@ -1,7 +1,7 @@
 import React, { CSSProperties } from 'react';
 import { MuxPlayerProps, MuxPlayerRefAttributes } from '@mux/mux-player-react';
 export { MuxPlayerRefAttributes as VideoPlayerRef } from '@mux/mux-player-react';
-import { V as Video } from '../payload-types-DVK1QCeU.js';
+import { V as Video } from '../payload-types-C7tb7Xbs.js';
 export { V as VideoGifOptions, a as VideoThumbnailOptions, g as getVideoGif, b as getVideoMp4Url, c as getVideoStoryboard, d as getVideoStreamUrl, e as getVideoThumbnail } from '../video-WR_TFO9a.js';
 
 interface VideoPlayerCSSProperties extends CSSProperties {

package/dist/webhook.cjs

@@ -20,11 +20,18 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/webhook.ts
 var webhook_exports = {};
 __export(webhook_exports, {
+  COMMERCE_NOTIFICATION_EVENTS: () => COMMERCE_NOTIFICATION_EVENTS,
+  COMMERCE_NOTIFICATION_EVENT_TYPE: () => COMMERCE_NOTIFICATION_EVENT_TYPE,
+  COMMERCE_NOTIFICATION_OPERATION: () => COMMERCE_NOTIFICATION_OPERATION,
   CUSTOMER_PASSWORD_RESET_OPERATION: () => CUSTOMER_PASSWORD_RESET_OPERATION,
   ORDER_CHANGED_EVENT_TYPE: () => ORDER_CHANGED_EVENT_TYPE,
+  createCommerceEmailWebhookHandler: () => createCommerceEmailWebhookHandler,
   createCustomerAuthWebhookHandler: () => createCustomerAuthWebhookHandler,
   createTypedWebhookHandler: () => createTypedWebhookHandler,
+  defineCommerceEmailConfig: () => defineCommerceEmailConfig,
+  getCommerceNotificationIdempotencyKey: () => getCommerceNotificationIdempotencyKey,
   handleWebhook: () => handleWebhook,
+  isCommerceNotificationWebhookEvent: () => isCommerceNotificationWebhookEvent,
   isCustomerPasswordResetWebhookEvent: () => isCustomerPasswordResetWebhookEvent,
   isOrderChangedWebhookEvent: () => isOrderChangedWebhookEvent,
   isValidWebhookEvent: () => isValidWebhookEvent,
@@ -35,11 +42,21 @@ module.exports = __toCommonJS(webhook_exports);
 
 // src/core/webhook/index.ts
 var ORDER_CHANGED_EVENT_TYPE = "collection.orderChanged";
+var COMMERCE_NOTIFICATION_EVENT_TYPE = "commerce.notification";
 function isValidWebhookEvent(data) {
   if (typeof data !== "object" || data === null) return false;
   const obj = data;
   return typeof obj.collection === "string" && typeof obj.operation === "string" && obj.operation.length > 0 && typeof obj.data === "object" && obj.data !== null;
 }
+var COMMERCE_NOTIFICATION_OPERATION = "notification";
+var COMMERCE_NOTIFICATION_EVENTS = [
+  "orderPaid",
+  "orderCanceled",
+  "fulfillmentShipped",
+  "orderDelivered",
+  "returnRequested",
+  "returnCompleted"
+];
 function isStringOrNumber(value) {
   return typeof value === "string" || typeof value === "number";
 }
@@ -64,6 +81,30 @@ function isWebhookOrderChange(value) {
   if (!isRecord(value)) return false;
   return value.type === "order" && value.source === "payload-orderable" && (value.orderableFieldName === void 0 || typeof value.orderableFieldName === "string") && hasOptionalOrderValue(value, "previousOrder") && hasOptionalOrderValue(value, "nextOrder") && isWebhookOrderScope(value.scope) && isWebhookOrderMoved(value.moved);
 }
+function isCommerceNotificationEventName(value) {
+  return typeof value === "string" && COMMERCE_NOTIFICATION_EVENTS.includes(value);
+}
+function isCommerceNotificationSourceCollection(value) {
+  return value === "orders" || value === "fulfillments" || value === "returns";
+}
+function isCommerceNotificationData(value) {
+  if (!isRecord(value)) return false;
+  if (value.source !== void 0 && (!isRecord(value.source) || !isCommerceNotificationSourceCollection(value.source.collection) || !isStringOrNumber(value.source.id))) {
+    return false;
+  }
+  return (value.orderId === void 0 || isStringOrNumber(value.orderId)) && (value.orderNumber === void 0 || typeof value.orderNumber === "string") && (value.status === void 0 || typeof value.status === "string") && (value.totalAmount === void 0 || typeof value.totalAmount === "number") && (value.currency === void 0 || typeof value.currency === "string") && (value.fulfillmentId === void 0 || isStringOrNumber(value.fulfillmentId)) && (value.fulfillmentStatus === void 0 || typeof value.fulfillmentStatus === "string") && (value.shippedAt === void 0 || typeof value.shippedAt === "string") && (value.returnId === void 0 || isStringOrNumber(value.returnId)) && (value.returnStatus === void 0 || typeof value.returnStatus === "string") && (value.refundAmount === void 0 || typeof value.refundAmount === "number") && (value.completedAt === void 0 || typeof value.completedAt === "string");
+}
+function isCommerceNotification(value) {
+  if (!isRecord(value)) return false;
+  return isCommerceNotificationEventName(value.event) && typeof value.intentId === "string" && value.intentId.length > 0 && typeof value.dedupeKey === "string" && value.dedupeKey.length > 0 && (value.orderId === void 0 || typeof value.orderId === "string") && (value.fulfillmentId === void 0 || typeof value.fulfillmentId === "string") && (value.returnId === void 0 || typeof value.returnId === "string");
+}
+function isWebhookCommerceNotificationChange(value) {
+  if (!isRecord(value)) return false;
+  return value.type === "notification" && value.source === "commerce-notifications" && isCommerceNotificationEventName(value.event) && isCommerceNotificationSourceCollection(value.sourceCollection) && isStringOrNumber(value.sourceId);
+}
+function matchesOptionalId(actual, expected) {
+  return actual === void 0 || expected === void 0 || actual === expected;
+}
 function isOrderChangedWebhookEvent(event) {
   if (!isValidWebhookEvent(event) || event.operation !== "update" || event.eventType !== ORDER_CHANGED_EVENT_TYPE || !isWebhookOrderChange(event.change)) {
     return false;
@@ -76,6 +117,60 @@ function isOrderChangedWebhookEvent(event) {
   }
   return true;
 }
+function isCommerceNotificationWebhookEvent(event) {
+  if (!isValidWebhookEvent(event) || event.operation !== COMMERCE_NOTIFICATION_OPERATION || event.eventType !== COMMERCE_NOTIFICATION_EVENT_TYPE || !isCommerceNotificationData(event.data) || !isCommerceNotification(event.notification)) {
+    return false;
+  }
+  const notification = event.notification;
+  const data = event.data;
+  const change = event.change;
+  const sourceCollection = data.source?.collection ?? event.collection;
+  const sourceId = data.source?.id;
+  if (!isCommerceNotificationSourceCollection(sourceCollection)) return false;
+  if (data.source !== void 0 && event.collection !== data.source.collection) {
+    return false;
+  }
+  if (change !== void 0) {
+    if (!isWebhookCommerceNotificationChange(change)) return false;
+    if (change.sourceCollection !== sourceCollection) return false;
+    if (change.event !== notification.event) return false;
+    if (!matchesOptionalId(change.sourceId, sourceId)) return false;
+  }
+  const changeSourceId = isWebhookCommerceNotificationChange(change) ? change.sourceId : void 0;
+  if (notification.event === "orderPaid" || notification.event === "orderCanceled" || notification.event === "orderDelivered") {
+    return sourceCollection === "orders" && typeof notification.orderId === "string" && notification.orderId.length > 0 && matchesOptionalId(data.orderId, sourceId) && matchesOptionalId(notification.orderId, sourceId) && matchesOptionalId(data.orderId, notification.orderId) && matchesOptionalId(changeSourceId, data.orderId ?? notification.orderId);
+  }
+  if (notification.event === "fulfillmentShipped") {
+    return sourceCollection === "fulfillments" && matchesOptionalId(data.fulfillmentId, sourceId) && typeof notification.fulfillmentId === "string" && notification.fulfillmentId.length > 0 && matchesOptionalId(notification.fulfillmentId, sourceId) && matchesOptionalId(data.fulfillmentId, notification.fulfillmentId) && matchesOptionalId(changeSourceId, notification.fulfillmentId);
+  }
+  if (notification.event === "returnRequested" || notification.event === "returnCompleted") {
+    return sourceCollection === "returns" && matchesOptionalId(data.returnId, sourceId) && typeof notification.returnId === "string" && notification.returnId.length > 0 && matchesOptionalId(notification.returnId, sourceId) && matchesOptionalId(data.returnId, notification.returnId) && matchesOptionalId(changeSourceId, notification.returnId);
+  }
+  return false;
+}
+function getCommerceNotificationIdempotencyKey(event) {
+  return `${event.notification.intentId}:${event.notification.dedupeKey}`;
+}
+function defineCommerceEmailConfig(config) {
+  return config;
+}
+function createCommerceEmailWebhookHandler(handlers) {
+  return async (event) => {
+    if (!isCommerceNotificationWebhookEvent(event)) {
+      await handlers.unhandled?.(event);
+      return;
+    }
+    const handler = handlers[event.notification.event];
+    if (!handler) {
+      await handlers.unhandled?.(event);
+      return;
+    }
+    await handler({
+      event,
+      idempotencyKey: getCommerceNotificationIdempotencyKey(event)
+    });
+  };
+}
 function isWebhookCollection(event, collection) {
   return isValidWebhookEvent(event) && event.collection === collection;
 }

package/dist/webhook.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/webhook.ts","../src/core/webhook/index.ts"],"sourcesContent":["export {\n  handleWebhook,\n  createTypedWebhookHandler,\n  createCustomerAuthWebhookHandler,\n  isValidWebhookEvent,\n  isCustomerPasswordResetWebhookEvent,\n  isOrderChangedWebhookEvent,\n  isWebhookCollection,\n  isWebhookOperation,\n  CUSTOMER_PASSWORD_RESET_OPERATION,\n  ORDER_CHANGED_EVENT_TYPE,\n} from './core/webhook'\nexport type {\n  CollectionWebhookOperation,\n  CustomerAuthWebhookEvent,\n  CustomerAuthWebhookHandlers,\n  CustomerPasswordResetWebhookData,\n  CustomerPasswordResetWebhookEvent,\n  OrderChangedWebhookEvent,\n  WebhookChange,\n  WebhookEvent,\n  WebhookHandler,\n  WebhookKnownOperation,\n  WebhookOperation,\n  WebhookOptions,\n  WebhookOrderChange,\n  WebhookOrderMoved,\n  WebhookOrderScope,\n} from './core/webhook'\n","import type { Collection } from '../client/types'\nimport type { CollectionType } from '../collection/types'\n\nexport type WebhookOperation = string\n\n/**\n * Semantic event type for manual Admin Panel ordering changes.\n *\n * Order-change webhooks remain `operation: \"update\"` events for compatibility.\n * Do not filter on or emit `operation: \"reorder\"`; use this event type with\n * `isOrderChangedWebhookEvent()` to distinguish ordering from normal content\n * updates.\n */\nexport const ORDER_CHANGED_EVENT_TYPE = 'collection.orderChanged' as const\n\n/** Collection webhook operations emitted for tenant collection writes. */\nexport type CollectionWebhookOperation = 'create' | 'update'\n\n/** Describes the ordered area affected by an order-change webhook. */\nexport type WebhookOrderScope =\n  | { kind: 'collection'; collection: string }\n  | { kind: 'join'; collection: string; field: string; id: string | number }\n\n/** Identifies the public moved document for the ordered scope. */\nexport type WebhookOrderMoved = {\n  collection: string\n  id: string | number\n  relatedCollection?: string\n  relatedId?: string | number\n}\n\n/** Metadata attached to `collection.orderChanged` webhook events. */\nexport type WebhookOrderChange = {\n  type: 'order'\n  source: 'payload-orderable'\n  /**\n   * Diagnostic Payload order field name.\n   *\n   * This may contain hidden implementation field names. Application routing\n   * should use `change.scope` and `change.moved` instead.\n   */\n  orderableFieldName?: string\n  previousOrder?: string | null\n  nextOrder?: string | null\n  scope: WebhookOrderScope\n  moved: WebhookOrderMoved\n}\n\n/** Known semantic webhook change metadata. */\nexport type WebhookChange = WebhookOrderChange\n\nexport interface WebhookEvent<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> {\n  collection: T\n  operation: WebhookOperation\n  data: TData\n  eventType?: string\n  change?: unknown\n  timestamp?: string\n  deliveryId?: string\n}\n\nexport type WebhookHandler<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> = (event: WebhookEvent<T, TData>) => Promise<void> | void\n\nexport interface WebhookOptions {\n  secret?: string\n  /** Max accepted skew for signed webhook delivery timestamps. Default: 300s. */\n  toleranceSeconds?: number\n}\n\nexport function isValidWebhookEvent(data: unknown): data is WebhookEvent {\n  if (typeof data !== 'object' || data === null) return false\n  const obj = data as Record<string, unknown>\n  return (\n    typeof obj.collection === 'string' &&\n    typeof obj.operation === 'string' &&\n    obj.operation.length > 0 &&\n    typeof obj.data === 'object' &&\n    obj.data !== null\n  )\n}\n\n/** Webhook event emitted when manual Admin Panel ordering changes. */\nexport type OrderChangedWebhookEvent<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> = WebhookEvent<T, TData> & {\n  operation: 'update'\n  eventType: typeof ORDER_CHANGED_EVENT_TYPE\n  change: WebhookOrderChange\n}\n\nfunction isStringOrNumber(value: unknown): value is string | number {\n  return typeof value === 'string' || typeof value === 'number'\n}\n\nfunction isWebhookOrderScope(value: unknown): value is WebhookOrderScope {\n  if (!isRecord(value)) return false\n\n  if (value.kind === 'collection') {\n    return typeof value.collection === 'string'\n  }\n\n  if (value.kind === 'join') {\n    return (\n      typeof value.collection === 'string' &&\n      typeof value.field === 'string' &&\n      isStringOrNumber(value.id)\n    )\n  }\n\n  return false\n}\n\nfunction isWebhookOrderMoved(value: unknown): value is WebhookOrderMoved {\n  if (!isRecord(value)) return false\n\n  return (\n    typeof value.collection === 'string' &&\n    isStringOrNumber(value.id) &&\n    (value.relatedCollection === undefined ||\n      typeof value.relatedCollection === 'string') &&\n    (value.relatedId === undefined || isStringOrNumber(value.relatedId))\n  )\n}\n\nfunction hasOptionalOrderValue(\n  value: Record<string, unknown>,\n  key: string,\n): boolean {\n  return (\n    value[key] === undefined ||\n    value[key] === null ||\n    typeof value[key] === 'string'\n  )\n}\n\nfunction isWebhookOrderChange(value: unknown): value is WebhookOrderChange {\n  if (!isRecord(value)) return false\n\n  return (\n    value.type === 'order' &&\n    value.source === 'payload-orderable' &&\n    (value.orderableFieldName === undefined ||\n      typeof value.orderableFieldName === 'string') &&\n    hasOptionalOrderValue(value, 'previousOrder') &&\n    hasOptionalOrderValue(value, 'nextOrder') &&\n    isWebhookOrderScope(value.scope) &&\n    isWebhookOrderMoved(value.moved)\n  )\n}\n\n/**\n * Returns true for semantic order-change webhooks emitted as update events.\n *\n * Use this guard with `ORDER_CHANGED_EVENT_TYPE` instead of filtering on\n * `operation: \"reorder\"`. Tenant order-change webhooks intentionally keep\n * `operation: \"update\"` for compatibility with existing webhook handlers.\n */\nexport function isOrderChangedWebhookEvent(\n  event: unknown,\n): event is OrderChangedWebhookEvent<string, unknown> {\n  if (\n    !isValidWebhookEvent(event) ||\n    event.operation !== 'update' ||\n    event.eventType !== ORDER_CHANGED_EVENT_TYPE ||\n    !isWebhookOrderChange(event.change)\n  ) {\n    return false\n  }\n\n  if (event.collection !== event.change.scope.collection) {\n    return false\n  }\n\n  if (\n    event.change.scope.kind === 'collection' &&\n    event.change.moved.collection !== event.change.scope.collection\n  ) {\n    return false\n  }\n\n  return true\n}\n\n/** Narrows a webhook event to a specific collection. */\nexport function isWebhookCollection<TCollection extends string>(\n  event: unknown,\n  collection: TCollection,\n): event is WebhookEvent<TCollection, unknown> {\n  return isValidWebhookEvent(event) && event.collection === collection\n}\n\n/** Narrows a webhook event to a specific operation. */\nexport function isWebhookOperation<TOperation extends string>(\n  event: unknown,\n  operation: TOperation,\n): event is WebhookEvent<string, unknown> & { operation: TOperation } {\n  return isValidWebhookEvent(event) && event.operation === operation\n}\n\nexport const CUSTOMER_PASSWORD_RESET_OPERATION = 'password-reset' as const\n\nexport type WebhookKnownOperation =\n  | CollectionWebhookOperation\n  | typeof CUSTOMER_PASSWORD_RESET_OPERATION\n\nexport interface CustomerPasswordResetWebhookData {\n  customerId: string | number\n  email: string\n  name: string\n  resetPasswordToken: string\n  resetPasswordExpiresAt: string\n}\n\nexport type CustomerPasswordResetWebhookEvent = WebhookEvent<\n  'customers',\n  CustomerPasswordResetWebhookData\n> & {\n  operation: typeof CUSTOMER_PASSWORD_RESET_OPERATION\n}\n\nexport type CustomerAuthWebhookEvent = CustomerPasswordResetWebhookEvent\n\ntype MaybePromise<T> = T | Promise<T>\n\nexport interface CustomerAuthWebhookHandlers {\n  passwordReset?: (\n    data: CustomerPasswordResetWebhookData,\n    event: CustomerPasswordResetWebhookEvent,\n  ) => MaybePromise<void>\n  unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null\n}\n\nfunction hasString(value: Record<string, unknown>, key: string): boolean {\n  return typeof value[key] === 'string'\n}\n\nfunction hasStringOrNumber(\n  value: Record<string, unknown>,\n  key: string,\n): boolean {\n  return typeof value[key] === 'string' || typeof value[key] === 'number'\n}\n\nexport function isCustomerPasswordResetWebhookEvent(\n  event: WebhookEvent<string, unknown>,\n): event is CustomerPasswordResetWebhookEvent {\n  if (\n    event.collection !== 'customers' ||\n    event.operation !== CUSTOMER_PASSWORD_RESET_OPERATION ||\n    !isRecord(event.data)\n  ) {\n    return false\n  }\n\n  return (\n    hasStringOrNumber(event.data, 'customerId') &&\n    hasString(event.data, 'email') &&\n    hasString(event.data, 'name') &&\n    hasString(event.data, 'resetPasswordToken') &&\n    hasString(event.data, 'resetPasswordExpiresAt')\n  )\n}\n\nexport function createCustomerAuthWebhookHandler(\n  handlers: CustomerAuthWebhookHandlers,\n): WebhookHandler<string, unknown> {\n  return async (event) => {\n    if (isCustomerPasswordResetWebhookEvent(event) && handlers.passwordReset) {\n      await handlers.passwordReset(event.data, event)\n      return\n    }\n\n    await handlers.unhandled?.(event)\n  }\n}\n\nasync function verifySignature(\n  payload: string,\n  secret: string,\n  signature: string,\n  timestamp: string,\n  deliveryId: string,\n): Promise<boolean> {\n  const encoder = new TextEncoder()\n  const key = await crypto.subtle.importKey(\n    'raw',\n    encoder.encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['verify'],\n  )\n  // Validate and convert hex signature to Uint8Array\n  if (signature.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(signature)) {\n    return false\n  }\n  const sigBytes = new Uint8Array(\n    (signature.match(/.{2}/g) ?? []).map((byte) => parseInt(byte, 16)),\n  )\n  // crypto.subtle.verify performs constant-time comparison internally\n  return crypto.subtle.verify(\n    'HMAC',\n    key,\n    sigBytes,\n    encoder.encode(`${timestamp}.${deliveryId}.${payload}`),\n  )\n}\n\nfunction timestampIsFresh(\n  timestamp: string,\n  toleranceSeconds: number,\n): boolean {\n  if (!/^\\d+$/.test(timestamp)) return false\n  const timestampMs = Number(timestamp)\n  if (!Number.isFinite(timestampMs)) return false\n  const skewMs = Math.abs(Date.now() - timestampMs)\n  return skewMs <= toleranceSeconds * 1000\n}\n\nexport async function handleWebhook<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n>(\n  request: Request,\n  handler: WebhookHandler<T, TData>,\n  options?: WebhookOptions,\n): Promise<Response> {\n  try {\n    const rawBody = await request.text()\n\n    if (options?.secret) {\n      const signature = request.headers.get('x-webhook-signature') || ''\n      const timestamp = request.headers.get('x-webhook-timestamp') || ''\n      const deliveryId = request.headers.get('x-webhook-delivery-id') || ''\n      const toleranceSeconds = options.toleranceSeconds ?? 300\n      const valid =\n        Boolean(timestamp && deliveryId) &&\n        timestampIsFresh(timestamp, toleranceSeconds) &&\n        (await verifySignature(\n          rawBody,\n          options.secret,\n          signature,\n          timestamp,\n          deliveryId,\n        ))\n      if (!valid) {\n        return new Response(\n          JSON.stringify({ error: 'Invalid webhook signature' }),\n          { status: 401, headers: { 'Content-Type': 'application/json' } },\n        )\n      }\n    } else {\n      console.warn(\n        '[@01.software/sdk] Webhook signature verification is disabled. ' +\n          'Set { secret } in handleWebhook() options to enable HMAC-SHA256 verification.',\n      )\n    }\n\n    const body = JSON.parse(rawBody)\n\n    if (!isValidWebhookEvent(body)) {\n      return new Response(\n        JSON.stringify({ error: 'Invalid webhook event format' }),\n        { status: 400, headers: { 'Content-Type': 'application/json' } },\n      )\n    }\n\n    await handler(body as WebhookEvent<T, TData>)\n\n    return new Response(\n      JSON.stringify({ success: true, message: 'Webhook processed' }),\n      { status: 200, headers: { 'Content-Type': 'application/json' } },\n    )\n  } catch (error) {\n    console.error('Webhook processing error:', error)\n\n    return new Response(JSON.stringify({ error: 'Internal server error' }), {\n      status: 500,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  }\n}\n\nexport function createTypedWebhookHandler<T extends Collection>(\n  collection: T,\n  handler: (event: WebhookEvent<T>) => Promise<void> | void,\n): WebhookHandler<T> {\n  return async (event: WebhookEvent<T>) => {\n    if (event.collection !== collection) {\n      throw new Error(\n        `Expected collection \"${collection}\", got \"${event.collection}\"`,\n      )\n    }\n    return handler(event)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACaO,IAAM,2BAA2B;AA8DjC,SAAS,oBAAoB,MAAqC;AACvE,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,QAAM,MAAM;AACZ,SACE,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,cAAc,YACzB,IAAI,UAAU,SAAS,KACvB,OAAO,IAAI,SAAS,YACpB,IAAI,SAAS;AAEjB;AAYA,SAAS,iBAAiB,OAA0C;AAClE,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU;AACvD;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,MAAI,MAAM,SAAS,cAAc;AAC/B,WAAO,OAAO,MAAM,eAAe;AAAA,EACrC;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,WACE,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,UAAU,YACvB,iBAAiB,MAAM,EAAE;AAAA,EAE7B;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,SACE,OAAO,MAAM,eAAe,YAC5B,iBAAiB,MAAM,EAAE,MACxB,MAAM,sBAAsB,UAC3B,OAAO,MAAM,sBAAsB,cACpC,MAAM,cAAc,UAAa,iBAAiB,MAAM,SAAS;AAEtE;AAEA,SAAS,sBACP,OACA,KACS;AACT,SACE,MAAM,GAAG,MAAM,UACf,MAAM,GAAG,MAAM,QACf,OAAO,MAAM,GAAG,MAAM;AAE1B;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,SACE,MAAM,SAAS,WACf,MAAM,WAAW,wBAChB,MAAM,uBAAuB,UAC5B,OAAO,MAAM,uBAAuB,aACtC,sBAAsB,OAAO,eAAe,KAC5C,sBAAsB,OAAO,WAAW,KACxC,oBAAoB,MAAM,KAAK,KAC/B,oBAAoB,MAAM,KAAK;AAEnC;AASO,SAAS,2BACd,OACoD;AACpD,MACE,CAAC,oBAAoB,KAAK,KAC1B,MAAM,cAAc,YACpB,MAAM,cAAc,4BACpB,CAAC,qBAAqB,MAAM,MAAM,GAClC;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,eAAe,MAAM,OAAO,MAAM,YAAY;AACtD,WAAO;AAAA,EACT;AAEA,MACE,MAAM,OAAO,MAAM,SAAS,gBAC5B,MAAM,OAAO,MAAM,eAAe,MAAM,OAAO,MAAM,YACrD;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAGO,SAAS,oBACd,OACA,YAC6C;AAC7C,SAAO,oBAAoB,KAAK,KAAK,MAAM,eAAe;AAC5D;AAGO,SAAS,mBACd,OACA,WACoE;AACpE,SAAO,oBAAoB,KAAK,KAAK,MAAM,cAAc;AAC3D;AAEO,IAAM,oCAAoC;AAiCjD,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,UAAU,OAAgC,KAAsB;AACvE,SAAO,OAAO,MAAM,GAAG,MAAM;AAC/B;AAEA,SAAS,kBACP,OACA,KACS;AACT,SAAO,OAAO,MAAM,GAAG,MAAM,YAAY,OAAO,MAAM,GAAG,MAAM;AACjE;AAEO,SAAS,oCACd,OAC4C;AAC5C,MACE,MAAM,eAAe,eACrB,MAAM,cAAc,qCACpB,CAAC,SAAS,MAAM,IAAI,GACpB;AACA,WAAO;AAAA,EACT;AAEA,SACE,kBAAkB,MAAM,MAAM,YAAY,KAC1C,UAAU,MAAM,MAAM,OAAO,KAC7B,UAAU,MAAM,MAAM,MAAM,KAC5B,UAAU,MAAM,MAAM,oBAAoB,KAC1C,UAAU,MAAM,MAAM,wBAAwB;AAElD;AAEO,SAAS,iCACd,UACiC;AACjC,SAAO,OAAO,UAAU;AACtB,QAAI,oCAAoC,KAAK,KAAK,SAAS,eAAe;AACxE,YAAM,SAAS,cAAc,MAAM,MAAM,KAAK;AAC9C;AAAA,IACF;AAEA,UAAM,SAAS,YAAY,KAAK;AAAA,EAClC;AACF;AAEA,eAAe,gBACb,SACA,QACA,WACA,WACA,YACkB;AAClB,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,QAAQ,OAAO,MAAM;AAAA,IACrB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,MAAI,UAAU,SAAS,MAAM,KAAK,CAAC,iBAAiB,KAAK,SAAS,GAAG;AACnE,WAAO;AAAA,EACT;AACA,QAAM,WAAW,IAAI;AAAA,KAClB,UAAU,MAAM,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,SAAS,MAAM,EAAE,CAAC;AAAA,EACnE;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,OAAO,EAAE;AAAA,EACxD;AACF;AAEA,SAAS,iBACP,WACA,kBACS;AACT,MAAI,CAAC,QAAQ,KAAK,SAAS,EAAG,QAAO;AACrC,QAAM,cAAc,OAAO,SAAS;AACpC,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAC1C,QAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW;AAChD,SAAO,UAAU,mBAAmB;AACtC;AAEA,eAAsB,cAIpB,SACA,SACA,SACmB;AACnB,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,KAAK;AAEnC,QAAI,SAAS,QAAQ;AACnB,YAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,YAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,YAAM,aAAa,QAAQ,QAAQ,IAAI,uBAAuB,KAAK;AACnE,YAAM,mBAAmB,QAAQ,oBAAoB;AACrD,YAAM,QACJ,QAAQ,aAAa,UAAU,KAC/B,iBAAiB,WAAW,gBAAgB,KAC3C,MAAM;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACF,UAAI,CAAC,OAAO;AACV,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,4BAA4B,CAAC;AAAA,UACrD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,OAAO,KAAK,MAAM,OAAO;AAE/B,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,IAAI;AAAA,QACT,KAAK,UAAU,EAAE,OAAO,+BAA+B,CAAC;AAAA,QACxD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,QAAQ,IAA8B;AAE5C,WAAO,IAAI;AAAA,MACT,KAAK,UAAU,EAAE,SAAS,MAAM,SAAS,oBAAoB,CAAC;AAAA,MAC9D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,IACjE;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,6BAA6B,KAAK;AAEhD,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,wBAAwB,CAAC,GAAG;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAEO,SAAS,0BACd,YACA,SACmB;AACnB,SAAO,OAAO,UAA2B;AACvC,QAAI,MAAM,eAAe,YAAY;AACnC,YAAM,IAAI;AAAA,QACR,wBAAwB,UAAU,WAAW,MAAM,UAAU;AAAA,MAC/D;AAAA,IACF;AACA,WAAO,QAAQ,KAAK;AAAA,EACtB;AACF;","names":[]}
+{"version":3,"sources":["../src/webhook.ts","../src/core/webhook/index.ts"],"sourcesContent":["export {\n  handleWebhook,\n  createTypedWebhookHandler,\n  createCommerceEmailWebhookHandler,\n  createCustomerAuthWebhookHandler,\n  defineCommerceEmailConfig,\n  getCommerceNotificationIdempotencyKey,\n  isValidWebhookEvent,\n  isCommerceNotificationWebhookEvent,\n  isCustomerPasswordResetWebhookEvent,\n  isOrderChangedWebhookEvent,\n  isWebhookCollection,\n  isWebhookOperation,\n  CUSTOMER_PASSWORD_RESET_OPERATION,\n  COMMERCE_NOTIFICATION_EVENT_TYPE,\n  COMMERCE_NOTIFICATION_EVENTS,\n  COMMERCE_NOTIFICATION_OPERATION,\n  ORDER_CHANGED_EVENT_TYPE,\n} from './core/webhook'\nexport type {\n  CollectionWebhookOperation,\n  CommerceEmailChannel,\n  CommerceEmailConfig,\n  CommerceEmailEventConfig,\n  CommerceEmailEventHandlers,\n  CommerceEmailHandlerContext,\n  CommerceNotification,\n  CommerceNotificationData,\n  CommerceNotificationEventName,\n  CommerceNotificationSource,\n  CommerceNotificationSourceCollection,\n  CommerceNotificationWebhookEvent,\n  CustomerAuthWebhookEvent,\n  CustomerAuthWebhookHandlers,\n  CustomerPasswordResetWebhookData,\n  CustomerPasswordResetWebhookEvent,\n  OrderChangedWebhookEvent,\n  WebhookChange,\n  WebhookCommerceNotificationChange,\n  WebhookEvent,\n  WebhookHandler,\n  WebhookKnownOperation,\n  WebhookOperation,\n  WebhookOptions,\n  WebhookOrderChange,\n  WebhookOrderMoved,\n  WebhookOrderScope,\n} from './core/webhook'\nexport type {\n  WebhookSigningSecretReveal,\n  WebhookWithoutSecret,\n} from './webhook-types'\n","import type { Collection } from '../client/types'\nimport type { CollectionType } from '../collection/types'\n\nexport type WebhookOperation = string\n\n/**\n * Semantic event type for manual Admin Panel ordering changes.\n *\n * Order-change webhooks remain `operation: \"update\"` events for compatibility.\n * Do not filter on or emit `operation: \"reorder\"`; use this event type with\n * `isOrderChangedWebhookEvent()` to distinguish ordering from normal content\n * updates.\n */\nexport const ORDER_CHANGED_EVENT_TYPE = 'collection.orderChanged' as const\n\n/** Semantic event type for v1 commerce notification webhooks. */\nexport const COMMERCE_NOTIFICATION_EVENT_TYPE = 'commerce.notification' as const\n\n/** Collection webhook operations emitted for tenant collection writes. */\nexport type CollectionWebhookOperation = 'create' | 'update'\n\n/** Describes the ordered area affected by an order-change webhook. */\nexport type WebhookOrderScope =\n  | { kind: 'collection'; collection: string }\n  | { kind: 'join'; collection: string; field: string; id: string | number }\n\n/** Identifies the public moved document for the ordered scope. */\nexport type WebhookOrderMoved = {\n  collection: string\n  id: string | number\n  relatedCollection?: string\n  relatedId?: string | number\n}\n\n/** Metadata attached to `collection.orderChanged` webhook events. */\nexport type WebhookOrderChange = {\n  type: 'order'\n  source: 'payload-orderable'\n  /**\n   * Diagnostic Payload order field name.\n   *\n   * This may contain hidden implementation field names. Application routing\n   * should use `change.scope` and `change.moved` instead.\n   */\n  orderableFieldName?: string\n  previousOrder?: string | null\n  nextOrder?: string | null\n  scope: WebhookOrderScope\n  moved: WebhookOrderMoved\n}\n\n/** Known semantic webhook change metadata. */\nexport type WebhookChange = WebhookOrderChange | WebhookCommerceNotificationChange\n\nexport interface WebhookEvent<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> {\n  collection: T\n  operation: WebhookOperation\n  data: TData\n  eventType?: string\n  change?: unknown\n  timestamp?: string\n  deliveryId?: string\n}\n\nexport type WebhookHandler<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> = (event: WebhookEvent<T, TData>) => Promise<void> | void\n\nexport interface WebhookOptions {\n  secret?: string\n  /** Max accepted skew for signed webhook delivery timestamps. Default: 300s. */\n  toleranceSeconds?: number\n}\n\nexport function isValidWebhookEvent(data: unknown): data is WebhookEvent {\n  if (typeof data !== 'object' || data === null) return false\n  const obj = data as Record<string, unknown>\n  return (\n    typeof obj.collection === 'string' &&\n    typeof obj.operation === 'string' &&\n    obj.operation.length > 0 &&\n    typeof obj.data === 'object' &&\n    obj.data !== null\n  )\n}\n\n/** Webhook event emitted when manual Admin Panel ordering changes. */\nexport type OrderChangedWebhookEvent<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> = WebhookEvent<T, TData> & {\n  operation: 'update'\n  eventType: typeof ORDER_CHANGED_EVENT_TYPE\n  change: WebhookOrderChange\n}\n\nexport const COMMERCE_NOTIFICATION_OPERATION = 'notification' as const\n\nexport const COMMERCE_NOTIFICATION_EVENTS = [\n  'orderPaid',\n  'orderCanceled',\n  'fulfillmentShipped',\n  'orderDelivered',\n  'returnRequested',\n  'returnCompleted',\n] as const\n\nexport type CommerceNotificationEventName =\n  (typeof COMMERCE_NOTIFICATION_EVENTS)[number]\n\nexport type CommerceNotificationSourceCollection =\n  | 'orders'\n  | 'fulfillments'\n  | 'returns'\n\nexport type CommerceNotificationSource = {\n  collection: CommerceNotificationSourceCollection\n  id: string | number\n}\n\nexport type CommerceNotificationData = {\n  source?: CommerceNotificationSource\n  orderId?: string | number\n  orderNumber?: string\n  status?: string\n  totalAmount?: number\n  currency?: string\n  fulfillmentId?: string | number\n  fulfillmentStatus?: string\n  shippedAt?: string\n  returnId?: string | number\n  returnStatus?: string\n  refundAmount?: number\n  completedAt?: string\n}\n\nexport type CommerceNotification = {\n  event: CommerceNotificationEventName\n  intentId: string\n  dedupeKey: string\n  orderId?: string\n  fulfillmentId?: string\n  returnId?: string\n}\n\nexport type WebhookCommerceNotificationChange = {\n  type: 'notification'\n  source: 'commerce-notifications'\n  event: CommerceNotificationEventName\n  sourceCollection: CommerceNotificationSourceCollection\n  sourceId: string | number\n}\n\n/** Webhook event emitted for v1 commerce notification deliveries. */\nexport type CommerceNotificationWebhookEvent = WebhookEvent<\n  CommerceNotificationSourceCollection,\n  CommerceNotificationData\n> & {\n  operation: typeof COMMERCE_NOTIFICATION_OPERATION\n  eventType: typeof COMMERCE_NOTIFICATION_EVENT_TYPE\n  change?: WebhookCommerceNotificationChange\n  notification: CommerceNotification\n}\n\nexport type CommerceEmailChannel = 'webhook' | 'provider'\n\nexport type CommerceEmailEventConfig = {\n  enabled: boolean\n  channel: CommerceEmailChannel\n  template?: string\n}\n\nexport type CommerceEmailConfig = {\n  version: 1\n  commerceNotifications: Partial<\n    Record<CommerceNotificationEventName, CommerceEmailEventConfig>\n  >\n}\n\nexport type CommerceEmailHandlerContext = {\n  event: CommerceNotificationWebhookEvent\n  idempotencyKey: string\n}\n\ntype MaybePromise<T> = T | Promise<T>\n\nexport type CommerceEmailEventHandlers = Partial<\n  Record<\n    CommerceNotificationEventName,\n    (context: CommerceEmailHandlerContext) => MaybePromise<void>\n  >\n> & {\n  unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>\n}\n\nfunction isStringOrNumber(value: unknown): value is string | number {\n  return typeof value === 'string' || typeof value === 'number'\n}\n\nfunction isWebhookOrderScope(value: unknown): value is WebhookOrderScope {\n  if (!isRecord(value)) return false\n\n  if (value.kind === 'collection') {\n    return typeof value.collection === 'string'\n  }\n\n  if (value.kind === 'join') {\n    return (\n      typeof value.collection === 'string' &&\n      typeof value.field === 'string' &&\n      isStringOrNumber(value.id)\n    )\n  }\n\n  return false\n}\n\nfunction isWebhookOrderMoved(value: unknown): value is WebhookOrderMoved {\n  if (!isRecord(value)) return false\n\n  return (\n    typeof value.collection === 'string' &&\n    isStringOrNumber(value.id) &&\n    (value.relatedCollection === undefined ||\n      typeof value.relatedCollection === 'string') &&\n    (value.relatedId === undefined || isStringOrNumber(value.relatedId))\n  )\n}\n\nfunction hasOptionalOrderValue(\n  value: Record<string, unknown>,\n  key: string,\n): boolean {\n  return (\n    value[key] === undefined ||\n    value[key] === null ||\n    typeof value[key] === 'string'\n  )\n}\n\nfunction isWebhookOrderChange(value: unknown): value is WebhookOrderChange {\n  if (!isRecord(value)) return false\n\n  return (\n    value.type === 'order' &&\n    value.source === 'payload-orderable' &&\n    (value.orderableFieldName === undefined ||\n      typeof value.orderableFieldName === 'string') &&\n    hasOptionalOrderValue(value, 'previousOrder') &&\n    hasOptionalOrderValue(value, 'nextOrder') &&\n    isWebhookOrderScope(value.scope) &&\n    isWebhookOrderMoved(value.moved)\n  )\n}\n\nfunction isCommerceNotificationEventName(\n  value: unknown,\n): value is CommerceNotificationEventName {\n  return (\n    typeof value === 'string' &&\n    (COMMERCE_NOTIFICATION_EVENTS as readonly string[]).includes(value)\n  )\n}\n\nfunction isCommerceNotificationSourceCollection(\n  value: unknown,\n): value is CommerceNotificationSourceCollection {\n  return value === 'orders' || value === 'fulfillments' || value === 'returns'\n}\n\nfunction isCommerceNotificationData(\n  value: unknown,\n): value is CommerceNotificationData {\n  if (!isRecord(value)) return false\n  if (\n    value.source !== undefined &&\n    (!isRecord(value.source) ||\n      !isCommerceNotificationSourceCollection(value.source.collection) ||\n      !isStringOrNumber(value.source.id))\n  ) {\n    return false\n  }\n\n  return (\n    (value.orderId === undefined || isStringOrNumber(value.orderId)) &&\n    (value.orderNumber === undefined || typeof value.orderNumber === 'string') &&\n    (value.status === undefined || typeof value.status === 'string') &&\n    (value.totalAmount === undefined || typeof value.totalAmount === 'number') &&\n    (value.currency === undefined || typeof value.currency === 'string') &&\n    (value.fulfillmentId === undefined ||\n      isStringOrNumber(value.fulfillmentId)) &&\n    (value.fulfillmentStatus === undefined ||\n      typeof value.fulfillmentStatus === 'string') &&\n    (value.shippedAt === undefined || typeof value.shippedAt === 'string') &&\n    (value.returnId === undefined || isStringOrNumber(value.returnId)) &&\n    (value.returnStatus === undefined ||\n      typeof value.returnStatus === 'string') &&\n    (value.refundAmount === undefined ||\n      typeof value.refundAmount === 'number') &&\n    (value.completedAt === undefined || typeof value.completedAt === 'string')\n  )\n}\n\nfunction isCommerceNotification(\n  value: unknown,\n): value is CommerceNotification {\n  if (!isRecord(value)) return false\n  return (\n    isCommerceNotificationEventName(value.event) &&\n    typeof value.intentId === 'string' &&\n    value.intentId.length > 0 &&\n    typeof value.dedupeKey === 'string' &&\n    value.dedupeKey.length > 0 &&\n    (value.orderId === undefined || typeof value.orderId === 'string') &&\n    (value.fulfillmentId === undefined ||\n      typeof value.fulfillmentId === 'string') &&\n    (value.returnId === undefined || typeof value.returnId === 'string')\n  )\n}\n\nfunction isWebhookCommerceNotificationChange(\n  value: unknown,\n): value is WebhookCommerceNotificationChange {\n  if (!isRecord(value)) return false\n  return (\n    value.type === 'notification' &&\n    value.source === 'commerce-notifications' &&\n    isCommerceNotificationEventName(value.event) &&\n    isCommerceNotificationSourceCollection(value.sourceCollection) &&\n    isStringOrNumber(value.sourceId)\n  )\n}\n\nfunction matchesOptionalId(\n  actual: string | number | undefined,\n  expected: string | number | undefined,\n): boolean {\n  return actual === undefined || expected === undefined || actual === expected\n}\n\n/**\n * Returns true for semantic order-change webhooks emitted as update events.\n *\n * Use this guard with `ORDER_CHANGED_EVENT_TYPE` instead of filtering on\n * `operation: \"reorder\"`. Tenant order-change webhooks intentionally keep\n * `operation: \"update\"` for compatibility with existing webhook handlers.\n */\nexport function isOrderChangedWebhookEvent(\n  event: unknown,\n): event is OrderChangedWebhookEvent<string, unknown> {\n  if (\n    !isValidWebhookEvent(event) ||\n    event.operation !== 'update' ||\n    event.eventType !== ORDER_CHANGED_EVENT_TYPE ||\n    !isWebhookOrderChange(event.change)\n  ) {\n    return false\n  }\n\n  if (event.collection !== event.change.scope.collection) {\n    return false\n  }\n\n  if (\n    event.change.scope.kind === 'collection' &&\n    event.change.moved.collection !== event.change.scope.collection\n  ) {\n    return false\n  }\n\n  return true\n}\n\n/**\n * Returns true for semantic commerce notification webhooks.\n *\n * Use `notification.intentId` and `notification.dedupeKey` for semantic\n * idempotency. `deliveryId`, when present, identifies a delivery attempt for\n * observability and is not the semantic notification identity.\n */\nexport function isCommerceNotificationWebhookEvent(\n  event: unknown,\n): event is CommerceNotificationWebhookEvent {\n  if (\n    !isValidWebhookEvent(event) ||\n    event.operation !== COMMERCE_NOTIFICATION_OPERATION ||\n    event.eventType !== COMMERCE_NOTIFICATION_EVENT_TYPE ||\n    !isCommerceNotificationData(event.data) ||\n    !isCommerceNotification((event as { notification?: unknown }).notification)\n  ) {\n    return false\n  }\n\n  const notification = (event as unknown as CommerceNotificationWebhookEvent)\n    .notification\n  const data = event.data\n  const change = event.change\n  const sourceCollection = data.source?.collection ?? event.collection\n  const sourceId = data.source?.id\n\n  if (!isCommerceNotificationSourceCollection(sourceCollection)) return false\n  if (data.source !== undefined && event.collection !== data.source.collection) {\n    return false\n  }\n\n  if (change !== undefined) {\n    if (!isWebhookCommerceNotificationChange(change)) return false\n    if (change.sourceCollection !== sourceCollection) return false\n    if (change.event !== notification.event) return false\n    if (!matchesOptionalId(change.sourceId, sourceId)) return false\n  }\n  const changeSourceId = isWebhookCommerceNotificationChange(change)\n    ? change.sourceId\n    : undefined\n\n  if (\n    notification.event === 'orderPaid' ||\n    notification.event === 'orderCanceled' ||\n    notification.event === 'orderDelivered'\n  ) {\n    return (\n      sourceCollection === 'orders' &&\n      typeof notification.orderId === 'string' &&\n      notification.orderId.length > 0 &&\n      matchesOptionalId(data.orderId, sourceId) &&\n      matchesOptionalId(notification.orderId, sourceId) &&\n      matchesOptionalId(data.orderId, notification.orderId) &&\n      matchesOptionalId(changeSourceId, data.orderId ?? notification.orderId)\n    )\n  }\n\n  if (notification.event === 'fulfillmentShipped') {\n    return (\n      sourceCollection === 'fulfillments' &&\n      matchesOptionalId(data.fulfillmentId, sourceId) &&\n      typeof notification.fulfillmentId === 'string' &&\n      notification.fulfillmentId.length > 0 &&\n      matchesOptionalId(notification.fulfillmentId, sourceId) &&\n      matchesOptionalId(data.fulfillmentId, notification.fulfillmentId) &&\n      matchesOptionalId(changeSourceId, notification.fulfillmentId)\n    )\n  }\n\n  if (\n    notification.event === 'returnRequested' ||\n    notification.event === 'returnCompleted'\n  ) {\n    return (\n      sourceCollection === 'returns' &&\n      matchesOptionalId(data.returnId, sourceId) &&\n      typeof notification.returnId === 'string' &&\n      notification.returnId.length > 0 &&\n      matchesOptionalId(notification.returnId, sourceId) &&\n      matchesOptionalId(data.returnId, notification.returnId) &&\n      matchesOptionalId(changeSourceId, notification.returnId)\n    )\n  }\n\n  return false\n}\n\nexport function getCommerceNotificationIdempotencyKey(\n  event: Pick<CommerceNotificationWebhookEvent, 'notification'>,\n): string {\n  return `${event.notification.intentId}:${event.notification.dedupeKey}`\n}\n\nexport function defineCommerceEmailConfig<TConfig extends CommerceEmailConfig>(\n  config: TConfig,\n): TConfig {\n  return config\n}\n\nexport function createCommerceEmailWebhookHandler(\n  handlers: CommerceEmailEventHandlers,\n): WebhookHandler<string, unknown> {\n  return async (event) => {\n    if (!isCommerceNotificationWebhookEvent(event)) {\n      await handlers.unhandled?.(event)\n      return\n    }\n\n    const handler = handlers[event.notification.event]\n    if (!handler) {\n      await handlers.unhandled?.(event)\n      return\n    }\n\n    await handler({\n      event,\n      idempotencyKey: getCommerceNotificationIdempotencyKey(event),\n    })\n  }\n}\n\n/** Narrows a webhook event to a specific collection. */\nexport function isWebhookCollection<TCollection extends string>(\n  event: unknown,\n  collection: TCollection,\n): event is WebhookEvent<TCollection, unknown> {\n  return isValidWebhookEvent(event) && event.collection === collection\n}\n\n/** Narrows a webhook event to a specific operation. */\nexport function isWebhookOperation<TOperation extends string>(\n  event: unknown,\n  operation: TOperation,\n): event is WebhookEvent<string, unknown> & { operation: TOperation } {\n  return isValidWebhookEvent(event) && event.operation === operation\n}\n\nexport const CUSTOMER_PASSWORD_RESET_OPERATION = 'password-reset' as const\n\nexport type WebhookKnownOperation =\n  | CollectionWebhookOperation\n  | typeof CUSTOMER_PASSWORD_RESET_OPERATION\n  | typeof COMMERCE_NOTIFICATION_OPERATION\n\nexport interface CustomerPasswordResetWebhookData {\n  customerId: string | number\n  email: string\n  name: string\n  resetPasswordToken: string\n  resetPasswordExpiresAt: string\n}\n\nexport type CustomerPasswordResetWebhookEvent = WebhookEvent<\n  'customers',\n  CustomerPasswordResetWebhookData\n> & {\n  operation: typeof CUSTOMER_PASSWORD_RESET_OPERATION\n}\n\nexport type CustomerAuthWebhookEvent = CustomerPasswordResetWebhookEvent\n\nexport interface CustomerAuthWebhookHandlers {\n  passwordReset?: (\n    data: CustomerPasswordResetWebhookData,\n    event: CustomerPasswordResetWebhookEvent,\n  ) => MaybePromise<void>\n  unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null\n}\n\nfunction hasString(value: Record<string, unknown>, key: string): boolean {\n  return typeof value[key] === 'string'\n}\n\nfunction hasStringOrNumber(\n  value: Record<string, unknown>,\n  key: string,\n): boolean {\n  return typeof value[key] === 'string' || typeof value[key] === 'number'\n}\n\nexport function isCustomerPasswordResetWebhookEvent(\n  event: WebhookEvent<string, unknown>,\n): event is CustomerPasswordResetWebhookEvent {\n  if (\n    event.collection !== 'customers' ||\n    event.operation !== CUSTOMER_PASSWORD_RESET_OPERATION ||\n    !isRecord(event.data)\n  ) {\n    return false\n  }\n\n  return (\n    hasStringOrNumber(event.data, 'customerId') &&\n    hasString(event.data, 'email') &&\n    hasString(event.data, 'name') &&\n    hasString(event.data, 'resetPasswordToken') &&\n    hasString(event.data, 'resetPasswordExpiresAt')\n  )\n}\n\nexport function createCustomerAuthWebhookHandler(\n  handlers: CustomerAuthWebhookHandlers,\n): WebhookHandler<string, unknown> {\n  return async (event) => {\n    if (isCustomerPasswordResetWebhookEvent(event) && handlers.passwordReset) {\n      await handlers.passwordReset(event.data, event)\n      return\n    }\n\n    await handlers.unhandled?.(event)\n  }\n}\n\nasync function verifySignature(\n  payload: string,\n  secret: string,\n  signature: string,\n  timestamp: string,\n  deliveryId: string,\n): Promise<boolean> {\n  const encoder = new TextEncoder()\n  const key = await crypto.subtle.importKey(\n    'raw',\n    encoder.encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['verify'],\n  )\n  // Validate and convert hex signature to Uint8Array\n  if (signature.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(signature)) {\n    return false\n  }\n  const sigBytes = new Uint8Array(\n    (signature.match(/.{2}/g) ?? []).map((byte) => parseInt(byte, 16)),\n  )\n  // crypto.subtle.verify performs constant-time comparison internally\n  return crypto.subtle.verify(\n    'HMAC',\n    key,\n    sigBytes,\n    encoder.encode(`${timestamp}.${deliveryId}.${payload}`),\n  )\n}\n\nfunction timestampIsFresh(\n  timestamp: string,\n  toleranceSeconds: number,\n): boolean {\n  if (!/^\\d+$/.test(timestamp)) return false\n  const timestampMs = Number(timestamp)\n  if (!Number.isFinite(timestampMs)) return false\n  const skewMs = Math.abs(Date.now() - timestampMs)\n  return skewMs <= toleranceSeconds * 1000\n}\n\nexport async function handleWebhook<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n>(\n  request: Request,\n  handler: WebhookHandler<T, TData>,\n  options?: WebhookOptions,\n): Promise<Response> {\n  try {\n    const rawBody = await request.text()\n\n    if (options?.secret) {\n      const signature = request.headers.get('x-webhook-signature') || ''\n      const timestamp = request.headers.get('x-webhook-timestamp') || ''\n      const deliveryId = request.headers.get('x-webhook-delivery-id') || ''\n      const toleranceSeconds = options.toleranceSeconds ?? 300\n      const valid =\n        Boolean(timestamp && deliveryId) &&\n        timestampIsFresh(timestamp, toleranceSeconds) &&\n        (await verifySignature(\n          rawBody,\n          options.secret,\n          signature,\n          timestamp,\n          deliveryId,\n        ))\n      if (!valid) {\n        return new Response(\n          JSON.stringify({ error: 'Invalid webhook signature' }),\n          { status: 401, headers: { 'Content-Type': 'application/json' } },\n        )\n      }\n    } else {\n      console.warn(\n        '[@01.software/sdk] Webhook signature verification is disabled. ' +\n          'Set { secret } in handleWebhook() options to enable HMAC-SHA256 verification.',\n      )\n    }\n\n    const body = JSON.parse(rawBody)\n\n    if (!isValidWebhookEvent(body)) {\n      return new Response(\n        JSON.stringify({ error: 'Invalid webhook event format' }),\n        { status: 400, headers: { 'Content-Type': 'application/json' } },\n      )\n    }\n\n    await handler(body as WebhookEvent<T, TData>)\n\n    return new Response(\n      JSON.stringify({ success: true, message: 'Webhook processed' }),\n      { status: 200, headers: { 'Content-Type': 'application/json' } },\n    )\n  } catch (error) {\n    console.error('Webhook processing error:', error)\n\n    return new Response(JSON.stringify({ error: 'Internal server error' }), {\n      status: 500,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  }\n}\n\nexport function createTypedWebhookHandler<T extends Collection>(\n  collection: T,\n  handler: (event: WebhookEvent<T>) => Promise<void> | void,\n): WebhookHandler<T> {\n  return async (event: WebhookEvent<T>) => {\n    if (event.collection !== collection) {\n      throw new Error(\n        `Expected collection \"${collection}\", got \"${event.collection}\"`,\n      )\n    }\n    return handler(event)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACaO,IAAM,2BAA2B;AAGjC,IAAM,mCAAmC;AA8DzC,SAAS,oBAAoB,MAAqC;AACvE,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,QAAM,MAAM;AACZ,SACE,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,cAAc,YACzB,IAAI,UAAU,SAAS,KACvB,OAAO,IAAI,SAAS,YACpB,IAAI,SAAS;AAEjB;AAYO,IAAM,kCAAkC;AAExC,IAAM,+BAA+B;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA0FA,SAAS,iBAAiB,OAA0C;AAClE,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU;AACvD;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,MAAI,MAAM,SAAS,cAAc;AAC/B,WAAO,OAAO,MAAM,eAAe;AAAA,EACrC;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,WACE,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,UAAU,YACvB,iBAAiB,MAAM,EAAE;AAAA,EAE7B;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,SACE,OAAO,MAAM,eAAe,YAC5B,iBAAiB,MAAM,EAAE,MACxB,MAAM,sBAAsB,UAC3B,OAAO,MAAM,sBAAsB,cACpC,MAAM,cAAc,UAAa,iBAAiB,MAAM,SAAS;AAEtE;AAEA,SAAS,sBACP,OACA,KACS;AACT,SACE,MAAM,GAAG,MAAM,UACf,MAAM,GAAG,MAAM,QACf,OAAO,MAAM,GAAG,MAAM;AAE1B;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,SACE,MAAM,SAAS,WACf,MAAM,WAAW,wBAChB,MAAM,uBAAuB,UAC5B,OAAO,MAAM,uBAAuB,aACtC,sBAAsB,OAAO,eAAe,KAC5C,sBAAsB,OAAO,WAAW,KACxC,oBAAoB,MAAM,KAAK,KAC/B,oBAAoB,MAAM,KAAK;AAEnC;AAEA,SAAS,gCACP,OACwC;AACxC,SACE,OAAO,UAAU,YAChB,6BAAmD,SAAS,KAAK;AAEtE;AAEA,SAAS,uCACP,OAC+C;AAC/C,SAAO,UAAU,YAAY,UAAU,kBAAkB,UAAU;AACrE;AAEA,SAAS,2BACP,OACmC;AACnC,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,MACE,MAAM,WAAW,WAChB,CAAC,SAAS,MAAM,MAAM,KACrB,CAAC,uCAAuC,MAAM,OAAO,UAAU,KAC/D,CAAC,iBAAiB,MAAM,OAAO,EAAE,IACnC;AACA,WAAO;AAAA,EACT;AAEA,UACG,MAAM,YAAY,UAAa,iBAAiB,MAAM,OAAO,OAC7D,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB,cAChE,MAAM,WAAW,UAAa,OAAO,MAAM,WAAW,cACtD,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB,cAChE,MAAM,aAAa,UAAa,OAAO,MAAM,aAAa,cAC1D,MAAM,kBAAkB,UACvB,iBAAiB,MAAM,aAAa,OACrC,MAAM,sBAAsB,UAC3B,OAAO,MAAM,sBAAsB,cACpC,MAAM,cAAc,UAAa,OAAO,MAAM,cAAc,cAC5D,MAAM,aAAa,UAAa,iBAAiB,MAAM,QAAQ,OAC/D,MAAM,iBAAiB,UACtB,OAAO,MAAM,iBAAiB,cAC/B,MAAM,iBAAiB,UACtB,OAAO,MAAM,iBAAiB,cAC/B,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB;AAErE;AAEA,SAAS,uBACP,OAC+B;AAC/B,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SACE,gCAAgC,MAAM,KAAK,KAC3C,OAAO,MAAM,aAAa,YAC1B,MAAM,SAAS,SAAS,KACxB,OAAO,MAAM,cAAc,YAC3B,MAAM,UAAU,SAAS,MACxB,MAAM,YAAY,UAAa,OAAO,MAAM,YAAY,cACxD,MAAM,kBAAkB,UACvB,OAAO,MAAM,kBAAkB,cAChC,MAAM,aAAa,UAAa,OAAO,MAAM,aAAa;AAE/D;AAEA,SAAS,oCACP,OAC4C;AAC5C,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SACE,MAAM,SAAS,kBACf,MAAM,WAAW,4BACjB,gCAAgC,MAAM,KAAK,KAC3C,uCAAuC,MAAM,gBAAgB,KAC7D,iBAAiB,MAAM,QAAQ;AAEnC;AAEA,SAAS,kBACP,QACA,UACS;AACT,SAAO,WAAW,UAAa,aAAa,UAAa,WAAW;AACtE;AASO,SAAS,2BACd,OACoD;AACpD,MACE,CAAC,oBAAoB,KAAK,KAC1B,MAAM,cAAc,YACpB,MAAM,cAAc,4BACpB,CAAC,qBAAqB,MAAM,MAAM,GAClC;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,eAAe,MAAM,OAAO,MAAM,YAAY;AACtD,WAAO;AAAA,EACT;AAEA,MACE,MAAM,OAAO,MAAM,SAAS,gBAC5B,MAAM,OAAO,MAAM,eAAe,MAAM,OAAO,MAAM,YACrD;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AASO,SAAS,mCACd,OAC2C;AAC3C,MACE,CAAC,oBAAoB,KAAK,KAC1B,MAAM,cAAc,mCACpB,MAAM,cAAc,oCACpB,CAAC,2BAA2B,MAAM,IAAI,KACtC,CAAC,uBAAwB,MAAqC,YAAY,GAC1E;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAgB,MACnB;AACH,QAAM,OAAO,MAAM;AACnB,QAAM,SAAS,MAAM;AACrB,QAAM,mBAAmB,KAAK,QAAQ,cAAc,MAAM;AAC1D,QAAM,WAAW,KAAK,QAAQ;AAE9B,MAAI,CAAC,uCAAuC,gBAAgB,EAAG,QAAO;AACtE,MAAI,KAAK,WAAW,UAAa,MAAM,eAAe,KAAK,OAAO,YAAY;AAC5E,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,QAAW;AACxB,QAAI,CAAC,oCAAoC,MAAM,EAAG,QAAO;AACzD,QAAI,OAAO,qBAAqB,iBAAkB,QAAO;AACzD,QAAI,OAAO,UAAU,aAAa,MAAO,QAAO;AAChD,QAAI,CAAC,kBAAkB,OAAO,UAAU,QAAQ,EAAG,QAAO;AAAA,EAC5D;AACA,QAAM,iBAAiB,oCAAoC,MAAM,IAC7D,OAAO,WACP;AAEJ,MACE,aAAa,UAAU,eACvB,aAAa,UAAU,mBACvB,aAAa,UAAU,kBACvB;AACA,WACE,qBAAqB,YACrB,OAAO,aAAa,YAAY,YAChC,aAAa,QAAQ,SAAS,KAC9B,kBAAkB,KAAK,SAAS,QAAQ,KACxC,kBAAkB,aAAa,SAAS,QAAQ,KAChD,kBAAkB,KAAK,SAAS,aAAa,OAAO,KACpD,kBAAkB,gBAAgB,KAAK,WAAW,aAAa,OAAO;AAAA,EAE1E;AAEA,MAAI,aAAa,UAAU,sBAAsB;AAC/C,WACE,qBAAqB,kBACrB,kBAAkB,KAAK,eAAe,QAAQ,KAC9C,OAAO,aAAa,kBAAkB,YACtC,aAAa,cAAc,SAAS,KACpC,kBAAkB,aAAa,eAAe,QAAQ,KACtD,kBAAkB,KAAK,eAAe,aAAa,aAAa,KAChE,kBAAkB,gBAAgB,aAAa,aAAa;AAAA,EAEhE;AAEA,MACE,aAAa,UAAU,qBACvB,aAAa,UAAU,mBACvB;AACA,WACE,qBAAqB,aACrB,kBAAkB,KAAK,UAAU,QAAQ,KACzC,OAAO,aAAa,aAAa,YACjC,aAAa,SAAS,SAAS,KAC/B,kBAAkB,aAAa,UAAU,QAAQ,KACjD,kBAAkB,KAAK,UAAU,aAAa,QAAQ,KACtD,kBAAkB,gBAAgB,aAAa,QAAQ;AAAA,EAE3D;AAEA,SAAO;AACT;AAEO,SAAS,sCACd,OACQ;AACR,SAAO,GAAG,MAAM,aAAa,QAAQ,IAAI,MAAM,aAAa,SAAS;AACvE;AAEO,SAAS,0BACd,QACS;AACT,SAAO;AACT;AAEO,SAAS,kCACd,UACiC;AACjC,SAAO,OAAO,UAAU;AACtB,QAAI,CAAC,mCAAmC,KAAK,GAAG;AAC9C,YAAM,SAAS,YAAY,KAAK;AAChC;AAAA,IACF;AAEA,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK;AACjD,QAAI,CAAC,SAAS;AACZ,YAAM,SAAS,YAAY,KAAK;AAChC;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,gBAAgB,sCAAsC,KAAK;AAAA,IAC7D,CAAC;AAAA,EACH;AACF;AAGO,SAAS,oBACd,OACA,YAC6C;AAC7C,SAAO,oBAAoB,KAAK,KAAK,MAAM,eAAe;AAC5D;AAGO,SAAS,mBACd,OACA,WACoE;AACpE,SAAO,oBAAoB,KAAK,KAAK,MAAM,cAAc;AAC3D;AAEO,IAAM,oCAAoC;AAgCjD,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,UAAU,OAAgC,KAAsB;AACvE,SAAO,OAAO,MAAM,GAAG,MAAM;AAC/B;AAEA,SAAS,kBACP,OACA,KACS;AACT,SAAO,OAAO,MAAM,GAAG,MAAM,YAAY,OAAO,MAAM,GAAG,MAAM;AACjE;AAEO,SAAS,oCACd,OAC4C;AAC5C,MACE,MAAM,eAAe,eACrB,MAAM,cAAc,qCACpB,CAAC,SAAS,MAAM,IAAI,GACpB;AACA,WAAO;AAAA,EACT;AAEA,SACE,kBAAkB,MAAM,MAAM,YAAY,KAC1C,UAAU,MAAM,MAAM,OAAO,KAC7B,UAAU,MAAM,MAAM,MAAM,KAC5B,UAAU,MAAM,MAAM,oBAAoB,KAC1C,UAAU,MAAM,MAAM,wBAAwB;AAElD;AAEO,SAAS,iCACd,UACiC;AACjC,SAAO,OAAO,UAAU;AACtB,QAAI,oCAAoC,KAAK,KAAK,SAAS,eAAe;AACxE,YAAM,SAAS,cAAc,MAAM,MAAM,KAAK;AAC9C;AAAA,IACF;AAEA,UAAM,SAAS,YAAY,KAAK;AAAA,EAClC;AACF;AAEA,eAAe,gBACb,SACA,QACA,WACA,WACA,YACkB;AAClB,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,QAAQ,OAAO,MAAM;AAAA,IACrB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,MAAI,UAAU,SAAS,MAAM,KAAK,CAAC,iBAAiB,KAAK,SAAS,GAAG;AACnE,WAAO;AAAA,EACT;AACA,QAAM,WAAW,IAAI;AAAA,KAClB,UAAU,MAAM,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,SAAS,MAAM,EAAE,CAAC;AAAA,EACnE;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,OAAO,EAAE;AAAA,EACxD;AACF;AAEA,SAAS,iBACP,WACA,kBACS;AACT,MAAI,CAAC,QAAQ,KAAK,SAAS,EAAG,QAAO;AACrC,QAAM,cAAc,OAAO,SAAS;AACpC,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAC1C,QAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW;AAChD,SAAO,UAAU,mBAAmB;AACtC;AAEA,eAAsB,cAIpB,SACA,SACA,SACmB;AACnB,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,KAAK;AAEnC,QAAI,SAAS,QAAQ;AACnB,YAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,YAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,YAAM,aAAa,QAAQ,QAAQ,IAAI,uBAAuB,KAAK;AACnE,YAAM,mBAAmB,QAAQ,oBAAoB;AACrD,YAAM,QACJ,QAAQ,aAAa,UAAU,KAC/B,iBAAiB,WAAW,gBAAgB,KAC3C,MAAM;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACF,UAAI,CAAC,OAAO;AACV,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,4BAA4B,CAAC;AAAA,UACrD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,OAAO,KAAK,MAAM,OAAO;AAE/B,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,IAAI;AAAA,QACT,KAAK,UAAU,EAAE,OAAO,+BAA+B,CAAC;AAAA,QACxD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,QAAQ,IAA8B;AAE5C,WAAO,IAAI;AAAA,MACT,KAAK,UAAU,EAAE,SAAS,MAAM,SAAS,oBAAoB,CAAC;AAAA,MAC9D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,IACjE;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,6BAA6B,KAAK;AAEhD,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,wBAAwB,CAAC,GAAG;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAEO,SAAS,0BACd,YACA,SACmB;AACnB,SAAO,OAAO,UAA2B;AACvC,QAAI,MAAM,eAAe,YAAY;AACnC,YAAM,IAAI;AAAA,QACR,wBAAwB,UAAU,WAAW,MAAM,UAAU;AAAA,MAC/D;AAAA,IACF;AACA,WAAO,QAAQ,KAAK;AAAA,EACtB;AACF;","names":[]}

package/dist/webhook.d.cts

@@ -1,111 +1,27 @@
-import { C as Collection } from './const-Brk2Ff0q.cjs';
-import { C as CollectionType } from './types-ByMrR_Z_.cjs';
-import './payload-types-DVK1QCeU.cjs';
+export { C as COMMERCE_NOTIFICATION_EVENTS, a as COMMERCE_NOTIFICATION_EVENT_TYPE, b as COMMERCE_NOTIFICATION_OPERATION, c as CUSTOMER_PASSWORD_RESET_OPERATION, d as CollectionWebhookOperation, e as CommerceEmailChannel, f as CommerceEmailConfig, g as CommerceEmailEventConfig, h as CommerceEmailEventHandlers, i as CommerceEmailHandlerContext, j as CommerceNotification, k as CommerceNotificationData, l as CommerceNotificationEventName, m as CommerceNotificationSource, n as CommerceNotificationSourceCollection, o as CommerceNotificationWebhookEvent, p as CustomerAuthWebhookEvent, q as CustomerAuthWebhookHandlers, r as CustomerPasswordResetWebhookData, s as CustomerPasswordResetWebhookEvent, O as ORDER_CHANGED_EVENT_TYPE, t as OrderChangedWebhookEvent, W as WebhookChange, u as WebhookCommerceNotificationChange, v as WebhookEvent, w as WebhookHandler, x as WebhookKnownOperation, y as WebhookOperation, z as WebhookOptions, A as WebhookOrderChange, B as WebhookOrderMoved, D as WebhookOrderScope, E as createCommerceEmailWebhookHandler, F as createCustomerAuthWebhookHandler, G as createTypedWebhookHandler, H as defineCommerceEmailConfig, I as getCommerceNotificationIdempotencyKey, J as handleWebhook, K as isCommerceNotificationWebhookEvent, L as isCustomerPasswordResetWebhookEvent, M as isOrderChangedWebhookEvent, N as isValidWebhookEvent, P as isWebhookCollection, Q as isWebhookOperation } from './index-CjA3U6X3.cjs';
+import { W as Webhook } from './payload-types-C7tb7Xbs.cjs';
+import './const-BTvdrXtY.cjs';
+import './types-Bx558PU6.cjs';
 
-type WebhookOperation = string;
 /**
- * Semantic event type for manual Admin Panel ordering changes.
- *
- * Order-change webhooks remain `operation: "update"` events for compatibility.
- * Do not filter on or emit `operation: "reorder"`; use this event type with
- * `isOrderChangedWebhookEvent()` to distinguish ordering from normal content
- * updates.
+ * Webhook records returned from ordinary list/find — `secret` is encrypted at
+ * rest and omitted from API reads (`access.read: false` on the collection).
  */
-declare const ORDER_CHANGED_EVENT_TYPE: "collection.orderChanged";
-/** Collection webhook operations emitted for tenant collection writes. */
-type CollectionWebhookOperation = 'create' | 'update';
-/** Describes the ordered area affected by an order-change webhook. */
-type WebhookOrderScope = {
-    kind: 'collection';
-    collection: string;
-} | {
-    kind: 'join';
-    collection: string;
-    field: string;
-    id: string | number;
-};
-/** Identifies the public moved document for the ordered scope. */
-type WebhookOrderMoved = {
-    collection: string;
-    id: string | number;
-    relatedCollection?: string;
-    relatedId?: string | number;
-};
-/** Metadata attached to `collection.orderChanged` webhook events. */
-type WebhookOrderChange = {
-    type: 'order';
-    source: 'payload-orderable';
-    /**
-     * Diagnostic Payload order field name.
-     *
-     * This may contain hidden implementation field names. Application routing
-     * should use `change.scope` and `change.moved` instead.
-     */
-    orderableFieldName?: string;
-    previousOrder?: string | null;
-    nextOrder?: string | null;
-    scope: WebhookOrderScope;
-    moved: WebhookOrderMoved;
-};
-/** Known semantic webhook change metadata. */
-type WebhookChange = WebhookOrderChange;
-interface WebhookEvent<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> {
-    collection: T;
-    operation: WebhookOperation;
-    data: TData;
-    eventType?: string;
-    change?: unknown;
-    timestamp?: string;
-    deliveryId?: string;
-}
-type WebhookHandler<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> = (event: WebhookEvent<T, TData>) => Promise<void> | void;
-interface WebhookOptions {
-    secret?: string;
-    /** Max accepted skew for signed webhook delivery timestamps. Default: 300s. */
-    toleranceSeconds?: number;
-}
-declare function isValidWebhookEvent(data: unknown): data is WebhookEvent;
-/** Webhook event emitted when manual Admin Panel ordering changes. */
-type OrderChangedWebhookEvent<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> = WebhookEvent<T, TData> & {
-    operation: 'update';
-    eventType: typeof ORDER_CHANGED_EVENT_TYPE;
-    change: WebhookOrderChange;
-};
+type WebhookWithoutSecret = Omit<Webhook, 'secret'>;
 /**
- * Returns true for semantic order-change webhooks emitted as update events.
- *
- * Use this guard with `ORDER_CHANGED_EVENT_TYPE` instead of filtering on
- * `operation: "reorder"`. Tenant order-change webhooks intentionally keep
- * `operation: "update"` for compatibility with existing webhook handlers.
+ * One-time plaintext signing secret from Console reveal/rotate Admin actions.
+ * Persists audit metadata on the webhook document as `secretRevealedAt` /
+ * `secretRotatedAt` / `secretRotatedBy` (not returned in this JSON body).
  */
-declare function isOrderChangedWebhookEvent(event: unknown): event is OrderChangedWebhookEvent<string, unknown>;
-/** Narrows a webhook event to a specific collection. */
-declare function isWebhookCollection<TCollection extends string>(event: unknown, collection: TCollection): event is WebhookEvent<TCollection, unknown>;
-/** Narrows a webhook event to a specific operation. */
-declare function isWebhookOperation<TOperation extends string>(event: unknown, operation: TOperation): event is WebhookEvent<string, unknown> & {
-    operation: TOperation;
-};
-declare const CUSTOMER_PASSWORD_RESET_OPERATION: "password-reset";
-type WebhookKnownOperation = CollectionWebhookOperation | typeof CUSTOMER_PASSWORD_RESET_OPERATION;
-interface CustomerPasswordResetWebhookData {
-    customerId: string | number;
-    email: string;
-    name: string;
-    resetPasswordToken: string;
-    resetPasswordExpiresAt: string;
-}
-type CustomerPasswordResetWebhookEvent = WebhookEvent<'customers', CustomerPasswordResetWebhookData> & {
-    operation: typeof CUSTOMER_PASSWORD_RESET_OPERATION;
+type WebhookSigningSecretReveal = {
+    success: boolean;
+    webhookId: string;
+    /** Plaintext hex signing secret — copy to receiver `WEBHOOK_SECRET`. */
+    secret: string;
+    /** reveal-secret response timestamp (maps to `secretRevealedAt` on save). */
+    revealedAt?: string;
+    /** rotate-secret response timestamp (maps to `secretRotatedAt` on save). */
+    rotatedAt?: string;
 };
-type CustomerAuthWebhookEvent = CustomerPasswordResetWebhookEvent;
-type MaybePromise<T> = T | Promise<T>;
-interface CustomerAuthWebhookHandlers {
-    passwordReset?: (data: CustomerPasswordResetWebhookData, event: CustomerPasswordResetWebhookEvent) => MaybePromise<void>;
-    unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>;
-}
-declare function isCustomerPasswordResetWebhookEvent(event: WebhookEvent<string, unknown>): event is CustomerPasswordResetWebhookEvent;
-declare function createCustomerAuthWebhookHandler(handlers: CustomerAuthWebhookHandlers): WebhookHandler<string, unknown>;
-declare function handleWebhook<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>>(request: Request, handler: WebhookHandler<T, TData>, options?: WebhookOptions): Promise<Response>;
-declare function createTypedWebhookHandler<T extends Collection>(collection: T, handler: (event: WebhookEvent<T>) => Promise<void> | void): WebhookHandler<T>;
 
-export { CUSTOMER_PASSWORD_RESET_OPERATION, type CollectionWebhookOperation, type CustomerAuthWebhookEvent, type CustomerAuthWebhookHandlers, type CustomerPasswordResetWebhookData, type CustomerPasswordResetWebhookEvent, ORDER_CHANGED_EVENT_TYPE, type OrderChangedWebhookEvent, type WebhookChange, type WebhookEvent, type WebhookHandler, type WebhookKnownOperation, type WebhookOperation, type WebhookOptions, type WebhookOrderChange, type WebhookOrderMoved, type WebhookOrderScope, createCustomerAuthWebhookHandler, createTypedWebhookHandler, handleWebhook, isCustomerPasswordResetWebhookEvent, isOrderChangedWebhookEvent, isValidWebhookEvent, isWebhookCollection, isWebhookOperation };
+export type { WebhookSigningSecretReveal, WebhookWithoutSecret };

package/dist/webhook.d.ts

@@ -1,111 +1,27 @@
-import { C as Collection } from './const-DcY2_z9O.js';
-import { C as CollectionType } from './types-DUPC7Xn6.js';
-import './payload-types-DVK1QCeU.js';
+export { C as COMMERCE_NOTIFICATION_EVENTS, a as COMMERCE_NOTIFICATION_EVENT_TYPE, b as COMMERCE_NOTIFICATION_OPERATION, c as CUSTOMER_PASSWORD_RESET_OPERATION, d as CollectionWebhookOperation, e as CommerceEmailChannel, f as CommerceEmailConfig, g as CommerceEmailEventConfig, h as CommerceEmailEventHandlers, i as CommerceEmailHandlerContext, j as CommerceNotification, k as CommerceNotificationData, l as CommerceNotificationEventName, m as CommerceNotificationSource, n as CommerceNotificationSourceCollection, o as CommerceNotificationWebhookEvent, p as CustomerAuthWebhookEvent, q as CustomerAuthWebhookHandlers, r as CustomerPasswordResetWebhookData, s as CustomerPasswordResetWebhookEvent, O as ORDER_CHANGED_EVENT_TYPE, t as OrderChangedWebhookEvent, W as WebhookChange, u as WebhookCommerceNotificationChange, v as WebhookEvent, w as WebhookHandler, x as WebhookKnownOperation, y as WebhookOperation, z as WebhookOptions, A as WebhookOrderChange, B as WebhookOrderMoved, D as WebhookOrderScope, E as createCommerceEmailWebhookHandler, F as createCustomerAuthWebhookHandler, G as createTypedWebhookHandler, H as defineCommerceEmailConfig, I as getCommerceNotificationIdempotencyKey, J as handleWebhook, K as isCommerceNotificationWebhookEvent, L as isCustomerPasswordResetWebhookEvent, M as isOrderChangedWebhookEvent, N as isValidWebhookEvent, P as isWebhookCollection, Q as isWebhookOperation } from './index-DK8_NXkh.js';
+import { W as Webhook } from './payload-types-C7tb7Xbs.js';
+import './const-CdqCauHQ.js';
+import './types-1ylMrCuW.js';
 
-type WebhookOperation = string;
 /**
- * Semantic event type for manual Admin Panel ordering changes.
- *
- * Order-change webhooks remain `operation: "update"` events for compatibility.
- * Do not filter on or emit `operation: "reorder"`; use this event type with
- * `isOrderChangedWebhookEvent()` to distinguish ordering from normal content
- * updates.
+ * Webhook records returned from ordinary list/find — `secret` is encrypted at
+ * rest and omitted from API reads (`access.read: false` on the collection).
  */
-declare const ORDER_CHANGED_EVENT_TYPE: "collection.orderChanged";
-/** Collection webhook operations emitted for tenant collection writes. */
-type CollectionWebhookOperation = 'create' | 'update';
-/** Describes the ordered area affected by an order-change webhook. */
-type WebhookOrderScope = {
-    kind: 'collection';
-    collection: string;
-} | {
-    kind: 'join';
-    collection: string;
-    field: string;
-    id: string | number;
-};
-/** Identifies the public moved document for the ordered scope. */
-type WebhookOrderMoved = {
-    collection: string;
-    id: string | number;
-    relatedCollection?: string;
-    relatedId?: string | number;
-};
-/** Metadata attached to `collection.orderChanged` webhook events. */
-type WebhookOrderChange = {
-    type: 'order';
-    source: 'payload-orderable';
-    /**
-     * Diagnostic Payload order field name.
-     *
-     * This may contain hidden implementation field names. Application routing
-     * should use `change.scope` and `change.moved` instead.
-     */
-    orderableFieldName?: string;
-    previousOrder?: string | null;
-    nextOrder?: string | null;
-    scope: WebhookOrderScope;
-    moved: WebhookOrderMoved;
-};
-/** Known semantic webhook change metadata. */
-type WebhookChange = WebhookOrderChange;
-interface WebhookEvent<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> {
-    collection: T;
-    operation: WebhookOperation;
-    data: TData;
-    eventType?: string;
-    change?: unknown;
-    timestamp?: string;
-    deliveryId?: string;
-}
-type WebhookHandler<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> = (event: WebhookEvent<T, TData>) => Promise<void> | void;
-interface WebhookOptions {
-    secret?: string;
-    /** Max accepted skew for signed webhook delivery timestamps. Default: 300s. */
-    toleranceSeconds?: number;
-}
-declare function isValidWebhookEvent(data: unknown): data is WebhookEvent;
-/** Webhook event emitted when manual Admin Panel ordering changes. */
-type OrderChangedWebhookEvent<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> = WebhookEvent<T, TData> & {
-    operation: 'update';
-    eventType: typeof ORDER_CHANGED_EVENT_TYPE;
-    change: WebhookOrderChange;
-};
+type WebhookWithoutSecret = Omit<Webhook, 'secret'>;
 /**
- * Returns true for semantic order-change webhooks emitted as update events.
- *
- * Use this guard with `ORDER_CHANGED_EVENT_TYPE` instead of filtering on
- * `operation: "reorder"`. Tenant order-change webhooks intentionally keep
- * `operation: "update"` for compatibility with existing webhook handlers.
+ * One-time plaintext signing secret from Console reveal/rotate Admin actions.
+ * Persists audit metadata on the webhook document as `secretRevealedAt` /
+ * `secretRotatedAt` / `secretRotatedBy` (not returned in this JSON body).
  */
-declare function isOrderChangedWebhookEvent(event: unknown): event is OrderChangedWebhookEvent<string, unknown>;
-/** Narrows a webhook event to a specific collection. */
-declare function isWebhookCollection<TCollection extends string>(event: unknown, collection: TCollection): event is WebhookEvent<TCollection, unknown>;
-/** Narrows a webhook event to a specific operation. */
-declare function isWebhookOperation<TOperation extends string>(event: unknown, operation: TOperation): event is WebhookEvent<string, unknown> & {
-    operation: TOperation;
-};
-declare const CUSTOMER_PASSWORD_RESET_OPERATION: "password-reset";
-type WebhookKnownOperation = CollectionWebhookOperation | typeof CUSTOMER_PASSWORD_RESET_OPERATION;
-interface CustomerPasswordResetWebhookData {
-    customerId: string | number;
-    email: string;
-    name: string;
-    resetPasswordToken: string;
-    resetPasswordExpiresAt: string;
-}
-type CustomerPasswordResetWebhookEvent = WebhookEvent<'customers', CustomerPasswordResetWebhookData> & {
-    operation: typeof CUSTOMER_PASSWORD_RESET_OPERATION;
+type WebhookSigningSecretReveal = {
+    success: boolean;
+    webhookId: string;
+    /** Plaintext hex signing secret — copy to receiver `WEBHOOK_SECRET`. */
+    secret: string;
+    /** reveal-secret response timestamp (maps to `secretRevealedAt` on save). */
+    revealedAt?: string;
+    /** rotate-secret response timestamp (maps to `secretRotatedAt` on save). */
+    rotatedAt?: string;
 };
-type CustomerAuthWebhookEvent = CustomerPasswordResetWebhookEvent;
-type MaybePromise<T> = T | Promise<T>;
-interface CustomerAuthWebhookHandlers {
-    passwordReset?: (data: CustomerPasswordResetWebhookData, event: CustomerPasswordResetWebhookEvent) => MaybePromise<void>;
-    unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>;
-}
-declare function isCustomerPasswordResetWebhookEvent(event: WebhookEvent<string, unknown>): event is CustomerPasswordResetWebhookEvent;
-declare function createCustomerAuthWebhookHandler(handlers: CustomerAuthWebhookHandlers): WebhookHandler<string, unknown>;
-declare function handleWebhook<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>>(request: Request, handler: WebhookHandler<T, TData>, options?: WebhookOptions): Promise<Response>;
-declare function createTypedWebhookHandler<T extends Collection>(collection: T, handler: (event: WebhookEvent<T>) => Promise<void> | void): WebhookHandler<T>;
 
-export { CUSTOMER_PASSWORD_RESET_OPERATION, type CollectionWebhookOperation, type CustomerAuthWebhookEvent, type CustomerAuthWebhookHandlers, type CustomerPasswordResetWebhookData, type CustomerPasswordResetWebhookEvent, ORDER_CHANGED_EVENT_TYPE, type OrderChangedWebhookEvent, type WebhookChange, type WebhookEvent, type WebhookHandler, type WebhookKnownOperation, type WebhookOperation, type WebhookOptions, type WebhookOrderChange, type WebhookOrderMoved, type WebhookOrderScope, createCustomerAuthWebhookHandler, createTypedWebhookHandler, handleWebhook, isCustomerPasswordResetWebhookEvent, isOrderChangedWebhookEvent, isValidWebhookEvent, isWebhookCollection, isWebhookOperation };
+export type { WebhookSigningSecretReveal, WebhookWithoutSecret };