@01.software/sdk 0.33.0 → 0.34.0

package/dist/ui/form.d.cts

@@ -1,5 +1,5 @@
 import React from 'react';
-import { F as Form } from '../payload-types-dkeQyrDC.cjs';
+import { F as Form } from '../payload-types-C7tb7Xbs.cjs';
 import { RichTextData } from './rich-text.cjs';
 import '@payloadcms/richtext-lexical';
 import '@payloadcms/richtext-lexical/lexical';

package/dist/ui/form.d.ts

@@ -1,5 +1,5 @@
 import React from 'react';
-import { F as Form } from '../payload-types-dkeQyrDC.js';
+import { F as Form } from '../payload-types-C7tb7Xbs.js';
 import { RichTextData } from './rich-text.js';
 import '@payloadcms/richtext-lexical';
 import '@payloadcms/richtext-lexical/lexical';

package/dist/ui/video.d.cts

@@ -1,7 +1,7 @@
 import React, { CSSProperties } from 'react';
 import { MuxPlayerProps, MuxPlayerRefAttributes } from '@mux/mux-player-react';
 export { MuxPlayerRefAttributes as VideoPlayerRef } from '@mux/mux-player-react';
-import { V as Video } from '../payload-types-dkeQyrDC.cjs';
+import { V as Video } from '../payload-types-C7tb7Xbs.cjs';
 export { V as VideoGifOptions, a as VideoThumbnailOptions, g as getVideoGif, b as getVideoMp4Url, c as getVideoStoryboard, d as getVideoStreamUrl, e as getVideoThumbnail } from '../video-WR_TFO9a.cjs';
 
 interface VideoPlayerCSSProperties extends CSSProperties {

package/dist/ui/video.d.ts

@@ -1,7 +1,7 @@
 import React, { CSSProperties } from 'react';
 import { MuxPlayerProps, MuxPlayerRefAttributes } from '@mux/mux-player-react';
 export { MuxPlayerRefAttributes as VideoPlayerRef } from '@mux/mux-player-react';
-import { V as Video } from '../payload-types-dkeQyrDC.js';
+import { V as Video } from '../payload-types-C7tb7Xbs.js';
 export { V as VideoGifOptions, a as VideoThumbnailOptions, g as getVideoGif, b as getVideoMp4Url, c as getVideoStoryboard, d as getVideoStreamUrl, e as getVideoThumbnail } from '../video-WR_TFO9a.js';
 
 interface VideoPlayerCSSProperties extends CSSProperties {

package/dist/webhook.cjs

@@ -51,6 +51,7 @@ function isValidWebhookEvent(data) {
 var COMMERCE_NOTIFICATION_OPERATION = "notification";
 var COMMERCE_NOTIFICATION_EVENTS = [
   "orderPaid",
+  "orderCanceled",
   "fulfillmentShipped",
   "orderDelivered",
   "returnRequested",
@@ -136,7 +137,7 @@ function isCommerceNotificationWebhookEvent(event) {
     if (!matchesOptionalId(change.sourceId, sourceId)) return false;
   }
   const changeSourceId = isWebhookCommerceNotificationChange(change) ? change.sourceId : void 0;
-  if (notification.event === "orderPaid" || notification.event === "orderDelivered") {
+  if (notification.event === "orderPaid" || notification.event === "orderCanceled" || notification.event === "orderDelivered") {
     return sourceCollection === "orders" && typeof notification.orderId === "string" && notification.orderId.length > 0 && matchesOptionalId(data.orderId, sourceId) && matchesOptionalId(notification.orderId, sourceId) && matchesOptionalId(data.orderId, notification.orderId) && matchesOptionalId(changeSourceId, data.orderId ?? notification.orderId);
   }
   if (notification.event === "fulfillmentShipped") {

package/dist/webhook.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/webhook.ts","../src/core/webhook/index.ts"],"sourcesContent":["export {\n  handleWebhook,\n  createTypedWebhookHandler,\n  createCommerceEmailWebhookHandler,\n  createCustomerAuthWebhookHandler,\n  defineCommerceEmailConfig,\n  getCommerceNotificationIdempotencyKey,\n  isValidWebhookEvent,\n  isCommerceNotificationWebhookEvent,\n  isCustomerPasswordResetWebhookEvent,\n  isOrderChangedWebhookEvent,\n  isWebhookCollection,\n  isWebhookOperation,\n  CUSTOMER_PASSWORD_RESET_OPERATION,\n  COMMERCE_NOTIFICATION_EVENT_TYPE,\n  COMMERCE_NOTIFICATION_EVENTS,\n  COMMERCE_NOTIFICATION_OPERATION,\n  ORDER_CHANGED_EVENT_TYPE,\n} from './core/webhook'\nexport type {\n  CollectionWebhookOperation,\n  CommerceEmailChannel,\n  CommerceEmailConfig,\n  CommerceEmailEventConfig,\n  CommerceEmailEventHandlers,\n  CommerceEmailHandlerContext,\n  CommerceNotification,\n  CommerceNotificationData,\n  CommerceNotificationEventName,\n  CommerceNotificationSource,\n  CommerceNotificationSourceCollection,\n  CommerceNotificationWebhookEvent,\n  CustomerAuthWebhookEvent,\n  CustomerAuthWebhookHandlers,\n  CustomerPasswordResetWebhookData,\n  CustomerPasswordResetWebhookEvent,\n  OrderChangedWebhookEvent,\n  WebhookChange,\n  WebhookCommerceNotificationChange,\n  WebhookEvent,\n  WebhookHandler,\n  WebhookKnownOperation,\n  WebhookOperation,\n  WebhookOptions,\n  WebhookOrderChange,\n  WebhookOrderMoved,\n  WebhookOrderScope,\n} from './core/webhook'\n","import type { Collection } from '../client/types'\nimport type { CollectionType } from '../collection/types'\n\nexport type WebhookOperation = string\n\n/**\n * Semantic event type for manual Admin Panel ordering changes.\n *\n * Order-change webhooks remain `operation: \"update\"` events for compatibility.\n * Do not filter on or emit `operation: \"reorder\"`; use this event type with\n * `isOrderChangedWebhookEvent()` to distinguish ordering from normal content\n * updates.\n */\nexport const ORDER_CHANGED_EVENT_TYPE = 'collection.orderChanged' as const\n\n/** Semantic event type for v1 commerce notification webhooks. */\nexport const COMMERCE_NOTIFICATION_EVENT_TYPE = 'commerce.notification' as const\n\n/** Collection webhook operations emitted for tenant collection writes. */\nexport type CollectionWebhookOperation = 'create' | 'update'\n\n/** Describes the ordered area affected by an order-change webhook. */\nexport type WebhookOrderScope =\n  | { kind: 'collection'; collection: string }\n  | { kind: 'join'; collection: string; field: string; id: string | number }\n\n/** Identifies the public moved document for the ordered scope. */\nexport type WebhookOrderMoved = {\n  collection: string\n  id: string | number\n  relatedCollection?: string\n  relatedId?: string | number\n}\n\n/** Metadata attached to `collection.orderChanged` webhook events. */\nexport type WebhookOrderChange = {\n  type: 'order'\n  source: 'payload-orderable'\n  /**\n   * Diagnostic Payload order field name.\n   *\n   * This may contain hidden implementation field names. Application routing\n   * should use `change.scope` and `change.moved` instead.\n   */\n  orderableFieldName?: string\n  previousOrder?: string | null\n  nextOrder?: string | null\n  scope: WebhookOrderScope\n  moved: WebhookOrderMoved\n}\n\n/** Known semantic webhook change metadata. */\nexport type WebhookChange = WebhookOrderChange | WebhookCommerceNotificationChange\n\nexport interface WebhookEvent<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> {\n  collection: T\n  operation: WebhookOperation\n  data: TData\n  eventType?: string\n  change?: unknown\n  timestamp?: string\n  deliveryId?: string\n}\n\nexport type WebhookHandler<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> = (event: WebhookEvent<T, TData>) => Promise<void> | void\n\nexport interface WebhookOptions {\n  secret?: string\n  /** Max accepted skew for signed webhook delivery timestamps. Default: 300s. */\n  toleranceSeconds?: number\n}\n\nexport function isValidWebhookEvent(data: unknown): data is WebhookEvent {\n  if (typeof data !== 'object' || data === null) return false\n  const obj = data as Record<string, unknown>\n  return (\n    typeof obj.collection === 'string' &&\n    typeof obj.operation === 'string' &&\n    obj.operation.length > 0 &&\n    typeof obj.data === 'object' &&\n    obj.data !== null\n  )\n}\n\n/** Webhook event emitted when manual Admin Panel ordering changes. */\nexport type OrderChangedWebhookEvent<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> = WebhookEvent<T, TData> & {\n  operation: 'update'\n  eventType: typeof ORDER_CHANGED_EVENT_TYPE\n  change: WebhookOrderChange\n}\n\nexport const COMMERCE_NOTIFICATION_OPERATION = 'notification' as const\n\nexport const COMMERCE_NOTIFICATION_EVENTS = [\n  'orderPaid',\n  'fulfillmentShipped',\n  'orderDelivered',\n  'returnRequested',\n  'returnCompleted',\n] as const\n\nexport type CommerceNotificationEventName =\n  (typeof COMMERCE_NOTIFICATION_EVENTS)[number]\n\nexport type CommerceNotificationSourceCollection =\n  | 'orders'\n  | 'fulfillments'\n  | 'returns'\n\nexport type CommerceNotificationSource = {\n  collection: CommerceNotificationSourceCollection\n  id: string | number\n}\n\nexport type CommerceNotificationData = {\n  source?: CommerceNotificationSource\n  orderId?: string | number\n  orderNumber?: string\n  status?: string\n  totalAmount?: number\n  currency?: string\n  fulfillmentId?: string | number\n  fulfillmentStatus?: string\n  shippedAt?: string\n  returnId?: string | number\n  returnStatus?: string\n  refundAmount?: number\n  completedAt?: string\n}\n\nexport type CommerceNotification = {\n  event: CommerceNotificationEventName\n  intentId: string\n  dedupeKey: string\n  orderId?: string\n  fulfillmentId?: string\n  returnId?: string\n}\n\nexport type WebhookCommerceNotificationChange = {\n  type: 'notification'\n  source: 'commerce-notifications'\n  event: CommerceNotificationEventName\n  sourceCollection: CommerceNotificationSourceCollection\n  sourceId: string | number\n}\n\n/** Webhook event emitted for v1 commerce notification deliveries. */\nexport type CommerceNotificationWebhookEvent = WebhookEvent<\n  CommerceNotificationSourceCollection,\n  CommerceNotificationData\n> & {\n  operation: typeof COMMERCE_NOTIFICATION_OPERATION\n  eventType: typeof COMMERCE_NOTIFICATION_EVENT_TYPE\n  change?: WebhookCommerceNotificationChange\n  notification: CommerceNotification\n}\n\nexport type CommerceEmailChannel = 'webhook' | 'provider'\n\nexport type CommerceEmailEventConfig = {\n  enabled: boolean\n  channel: CommerceEmailChannel\n  template?: string\n}\n\nexport type CommerceEmailConfig = {\n  version: 1\n  commerceNotifications: Partial<\n    Record<CommerceNotificationEventName, CommerceEmailEventConfig>\n  >\n}\n\nexport type CommerceEmailHandlerContext = {\n  event: CommerceNotificationWebhookEvent\n  idempotencyKey: string\n}\n\ntype MaybePromise<T> = T | Promise<T>\n\nexport type CommerceEmailEventHandlers = Partial<\n  Record<\n    CommerceNotificationEventName,\n    (context: CommerceEmailHandlerContext) => MaybePromise<void>\n  >\n> & {\n  unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>\n}\n\nfunction isStringOrNumber(value: unknown): value is string | number {\n  return typeof value === 'string' || typeof value === 'number'\n}\n\nfunction isWebhookOrderScope(value: unknown): value is WebhookOrderScope {\n  if (!isRecord(value)) return false\n\n  if (value.kind === 'collection') {\n    return typeof value.collection === 'string'\n  }\n\n  if (value.kind === 'join') {\n    return (\n      typeof value.collection === 'string' &&\n      typeof value.field === 'string' &&\n      isStringOrNumber(value.id)\n    )\n  }\n\n  return false\n}\n\nfunction isWebhookOrderMoved(value: unknown): value is WebhookOrderMoved {\n  if (!isRecord(value)) return false\n\n  return (\n    typeof value.collection === 'string' &&\n    isStringOrNumber(value.id) &&\n    (value.relatedCollection === undefined ||\n      typeof value.relatedCollection === 'string') &&\n    (value.relatedId === undefined || isStringOrNumber(value.relatedId))\n  )\n}\n\nfunction hasOptionalOrderValue(\n  value: Record<string, unknown>,\n  key: string,\n): boolean {\n  return (\n    value[key] === undefined ||\n    value[key] === null ||\n    typeof value[key] === 'string'\n  )\n}\n\nfunction isWebhookOrderChange(value: unknown): value is WebhookOrderChange {\n  if (!isRecord(value)) return false\n\n  return (\n    value.type === 'order' &&\n    value.source === 'payload-orderable' &&\n    (value.orderableFieldName === undefined ||\n      typeof value.orderableFieldName === 'string') &&\n    hasOptionalOrderValue(value, 'previousOrder') &&\n    hasOptionalOrderValue(value, 'nextOrder') &&\n    isWebhookOrderScope(value.scope) &&\n    isWebhookOrderMoved(value.moved)\n  )\n}\n\nfunction isCommerceNotificationEventName(\n  value: unknown,\n): value is CommerceNotificationEventName {\n  return (\n    typeof value === 'string' &&\n    (COMMERCE_NOTIFICATION_EVENTS as readonly string[]).includes(value)\n  )\n}\n\nfunction isCommerceNotificationSourceCollection(\n  value: unknown,\n): value is CommerceNotificationSourceCollection {\n  return value === 'orders' || value === 'fulfillments' || value === 'returns'\n}\n\nfunction isCommerceNotificationData(\n  value: unknown,\n): value is CommerceNotificationData {\n  if (!isRecord(value)) return false\n  if (\n    value.source !== undefined &&\n    (!isRecord(value.source) ||\n      !isCommerceNotificationSourceCollection(value.source.collection) ||\n      !isStringOrNumber(value.source.id))\n  ) {\n    return false\n  }\n\n  return (\n    (value.orderId === undefined || isStringOrNumber(value.orderId)) &&\n    (value.orderNumber === undefined || typeof value.orderNumber === 'string') &&\n    (value.status === undefined || typeof value.status === 'string') &&\n    (value.totalAmount === undefined || typeof value.totalAmount === 'number') &&\n    (value.currency === undefined || typeof value.currency === 'string') &&\n    (value.fulfillmentId === undefined ||\n      isStringOrNumber(value.fulfillmentId)) &&\n    (value.fulfillmentStatus === undefined ||\n      typeof value.fulfillmentStatus === 'string') &&\n    (value.shippedAt === undefined || typeof value.shippedAt === 'string') &&\n    (value.returnId === undefined || isStringOrNumber(value.returnId)) &&\n    (value.returnStatus === undefined ||\n      typeof value.returnStatus === 'string') &&\n    (value.refundAmount === undefined ||\n      typeof value.refundAmount === 'number') &&\n    (value.completedAt === undefined || typeof value.completedAt === 'string')\n  )\n}\n\nfunction isCommerceNotification(\n  value: unknown,\n): value is CommerceNotification {\n  if (!isRecord(value)) return false\n  return (\n    isCommerceNotificationEventName(value.event) &&\n    typeof value.intentId === 'string' &&\n    value.intentId.length > 0 &&\n    typeof value.dedupeKey === 'string' &&\n    value.dedupeKey.length > 0 &&\n    (value.orderId === undefined || typeof value.orderId === 'string') &&\n    (value.fulfillmentId === undefined ||\n      typeof value.fulfillmentId === 'string') &&\n    (value.returnId === undefined || typeof value.returnId === 'string')\n  )\n}\n\nfunction isWebhookCommerceNotificationChange(\n  value: unknown,\n): value is WebhookCommerceNotificationChange {\n  if (!isRecord(value)) return false\n  return (\n    value.type === 'notification' &&\n    value.source === 'commerce-notifications' &&\n    isCommerceNotificationEventName(value.event) &&\n    isCommerceNotificationSourceCollection(value.sourceCollection) &&\n    isStringOrNumber(value.sourceId)\n  )\n}\n\nfunction matchesOptionalId(\n  actual: string | number | undefined,\n  expected: string | number | undefined,\n): boolean {\n  return actual === undefined || expected === undefined || actual === expected\n}\n\n/**\n * Returns true for semantic order-change webhooks emitted as update events.\n *\n * Use this guard with `ORDER_CHANGED_EVENT_TYPE` instead of filtering on\n * `operation: \"reorder\"`. Tenant order-change webhooks intentionally keep\n * `operation: \"update\"` for compatibility with existing webhook handlers.\n */\nexport function isOrderChangedWebhookEvent(\n  event: unknown,\n): event is OrderChangedWebhookEvent<string, unknown> {\n  if (\n    !isValidWebhookEvent(event) ||\n    event.operation !== 'update' ||\n    event.eventType !== ORDER_CHANGED_EVENT_TYPE ||\n    !isWebhookOrderChange(event.change)\n  ) {\n    return false\n  }\n\n  if (event.collection !== event.change.scope.collection) {\n    return false\n  }\n\n  if (\n    event.change.scope.kind === 'collection' &&\n    event.change.moved.collection !== event.change.scope.collection\n  ) {\n    return false\n  }\n\n  return true\n}\n\n/**\n * Returns true for semantic commerce notification webhooks.\n *\n * Use `notification.intentId` and `notification.dedupeKey` for semantic\n * idempotency. `deliveryId`, when present, identifies a delivery attempt for\n * observability and is not the semantic notification identity.\n */\nexport function isCommerceNotificationWebhookEvent(\n  event: unknown,\n): event is CommerceNotificationWebhookEvent {\n  if (\n    !isValidWebhookEvent(event) ||\n    event.operation !== COMMERCE_NOTIFICATION_OPERATION ||\n    event.eventType !== COMMERCE_NOTIFICATION_EVENT_TYPE ||\n    !isCommerceNotificationData(event.data) ||\n    !isCommerceNotification((event as { notification?: unknown }).notification)\n  ) {\n    return false\n  }\n\n  const notification = (event as unknown as CommerceNotificationWebhookEvent)\n    .notification\n  const data = event.data\n  const change = event.change\n  const sourceCollection = data.source?.collection ?? event.collection\n  const sourceId = data.source?.id\n\n  if (!isCommerceNotificationSourceCollection(sourceCollection)) return false\n  if (data.source !== undefined && event.collection !== data.source.collection) {\n    return false\n  }\n\n  if (change !== undefined) {\n    if (!isWebhookCommerceNotificationChange(change)) return false\n    if (change.sourceCollection !== sourceCollection) return false\n    if (change.event !== notification.event) return false\n    if (!matchesOptionalId(change.sourceId, sourceId)) return false\n  }\n  const changeSourceId = isWebhookCommerceNotificationChange(change)\n    ? change.sourceId\n    : undefined\n\n  if (\n    notification.event === 'orderPaid' ||\n    notification.event === 'orderDelivered'\n  ) {\n    return (\n      sourceCollection === 'orders' &&\n      typeof notification.orderId === 'string' &&\n      notification.orderId.length > 0 &&\n      matchesOptionalId(data.orderId, sourceId) &&\n      matchesOptionalId(notification.orderId, sourceId) &&\n      matchesOptionalId(data.orderId, notification.orderId) &&\n      matchesOptionalId(changeSourceId, data.orderId ?? notification.orderId)\n    )\n  }\n\n  if (notification.event === 'fulfillmentShipped') {\n    return (\n      sourceCollection === 'fulfillments' &&\n      matchesOptionalId(data.fulfillmentId, sourceId) &&\n      typeof notification.fulfillmentId === 'string' &&\n      notification.fulfillmentId.length > 0 &&\n      matchesOptionalId(notification.fulfillmentId, sourceId) &&\n      matchesOptionalId(data.fulfillmentId, notification.fulfillmentId) &&\n      matchesOptionalId(changeSourceId, notification.fulfillmentId)\n    )\n  }\n\n  if (\n    notification.event === 'returnRequested' ||\n    notification.event === 'returnCompleted'\n  ) {\n    return (\n      sourceCollection === 'returns' &&\n      matchesOptionalId(data.returnId, sourceId) &&\n      typeof notification.returnId === 'string' &&\n      notification.returnId.length > 0 &&\n      matchesOptionalId(notification.returnId, sourceId) &&\n      matchesOptionalId(data.returnId, notification.returnId) &&\n      matchesOptionalId(changeSourceId, notification.returnId)\n    )\n  }\n\n  return false\n}\n\nexport function getCommerceNotificationIdempotencyKey(\n  event: Pick<CommerceNotificationWebhookEvent, 'notification'>,\n): string {\n  return `${event.notification.intentId}:${event.notification.dedupeKey}`\n}\n\nexport function defineCommerceEmailConfig<TConfig extends CommerceEmailConfig>(\n  config: TConfig,\n): TConfig {\n  return config\n}\n\nexport function createCommerceEmailWebhookHandler(\n  handlers: CommerceEmailEventHandlers,\n): WebhookHandler<string, unknown> {\n  return async (event) => {\n    if (!isCommerceNotificationWebhookEvent(event)) {\n      await handlers.unhandled?.(event)\n      return\n    }\n\n    const handler = handlers[event.notification.event]\n    if (!handler) {\n      await handlers.unhandled?.(event)\n      return\n    }\n\n    await handler({\n      event,\n      idempotencyKey: getCommerceNotificationIdempotencyKey(event),\n    })\n  }\n}\n\n/** Narrows a webhook event to a specific collection. */\nexport function isWebhookCollection<TCollection extends string>(\n  event: unknown,\n  collection: TCollection,\n): event is WebhookEvent<TCollection, unknown> {\n  return isValidWebhookEvent(event) && event.collection === collection\n}\n\n/** Narrows a webhook event to a specific operation. */\nexport function isWebhookOperation<TOperation extends string>(\n  event: unknown,\n  operation: TOperation,\n): event is WebhookEvent<string, unknown> & { operation: TOperation } {\n  return isValidWebhookEvent(event) && event.operation === operation\n}\n\nexport const CUSTOMER_PASSWORD_RESET_OPERATION = 'password-reset' as const\n\nexport type WebhookKnownOperation =\n  | CollectionWebhookOperation\n  | typeof CUSTOMER_PASSWORD_RESET_OPERATION\n  | typeof COMMERCE_NOTIFICATION_OPERATION\n\nexport interface CustomerPasswordResetWebhookData {\n  customerId: string | number\n  email: string\n  name: string\n  resetPasswordToken: string\n  resetPasswordExpiresAt: string\n}\n\nexport type CustomerPasswordResetWebhookEvent = WebhookEvent<\n  'customers',\n  CustomerPasswordResetWebhookData\n> & {\n  operation: typeof CUSTOMER_PASSWORD_RESET_OPERATION\n}\n\nexport type CustomerAuthWebhookEvent = CustomerPasswordResetWebhookEvent\n\nexport interface CustomerAuthWebhookHandlers {\n  passwordReset?: (\n    data: CustomerPasswordResetWebhookData,\n    event: CustomerPasswordResetWebhookEvent,\n  ) => MaybePromise<void>\n  unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null\n}\n\nfunction hasString(value: Record<string, unknown>, key: string): boolean {\n  return typeof value[key] === 'string'\n}\n\nfunction hasStringOrNumber(\n  value: Record<string, unknown>,\n  key: string,\n): boolean {\n  return typeof value[key] === 'string' || typeof value[key] === 'number'\n}\n\nexport function isCustomerPasswordResetWebhookEvent(\n  event: WebhookEvent<string, unknown>,\n): event is CustomerPasswordResetWebhookEvent {\n  if (\n    event.collection !== 'customers' ||\n    event.operation !== CUSTOMER_PASSWORD_RESET_OPERATION ||\n    !isRecord(event.data)\n  ) {\n    return false\n  }\n\n  return (\n    hasStringOrNumber(event.data, 'customerId') &&\n    hasString(event.data, 'email') &&\n    hasString(event.data, 'name') &&\n    hasString(event.data, 'resetPasswordToken') &&\n    hasString(event.data, 'resetPasswordExpiresAt')\n  )\n}\n\nexport function createCustomerAuthWebhookHandler(\n  handlers: CustomerAuthWebhookHandlers,\n): WebhookHandler<string, unknown> {\n  return async (event) => {\n    if (isCustomerPasswordResetWebhookEvent(event) && handlers.passwordReset) {\n      await handlers.passwordReset(event.data, event)\n      return\n    }\n\n    await handlers.unhandled?.(event)\n  }\n}\n\nasync function verifySignature(\n  payload: string,\n  secret: string,\n  signature: string,\n  timestamp: string,\n  deliveryId: string,\n): Promise<boolean> {\n  const encoder = new TextEncoder()\n  const key = await crypto.subtle.importKey(\n    'raw',\n    encoder.encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['verify'],\n  )\n  // Validate and convert hex signature to Uint8Array\n  if (signature.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(signature)) {\n    return false\n  }\n  const sigBytes = new Uint8Array(\n    (signature.match(/.{2}/g) ?? []).map((byte) => parseInt(byte, 16)),\n  )\n  // crypto.subtle.verify performs constant-time comparison internally\n  return crypto.subtle.verify(\n    'HMAC',\n    key,\n    sigBytes,\n    encoder.encode(`${timestamp}.${deliveryId}.${payload}`),\n  )\n}\n\nfunction timestampIsFresh(\n  timestamp: string,\n  toleranceSeconds: number,\n): boolean {\n  if (!/^\\d+$/.test(timestamp)) return false\n  const timestampMs = Number(timestamp)\n  if (!Number.isFinite(timestampMs)) return false\n  const skewMs = Math.abs(Date.now() - timestampMs)\n  return skewMs <= toleranceSeconds * 1000\n}\n\nexport async function handleWebhook<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n>(\n  request: Request,\n  handler: WebhookHandler<T, TData>,\n  options?: WebhookOptions,\n): Promise<Response> {\n  try {\n    const rawBody = await request.text()\n\n    if (options?.secret) {\n      const signature = request.headers.get('x-webhook-signature') || ''\n      const timestamp = request.headers.get('x-webhook-timestamp') || ''\n      const deliveryId = request.headers.get('x-webhook-delivery-id') || ''\n      const toleranceSeconds = options.toleranceSeconds ?? 300\n      const valid =\n        Boolean(timestamp && deliveryId) &&\n        timestampIsFresh(timestamp, toleranceSeconds) &&\n        (await verifySignature(\n          rawBody,\n          options.secret,\n          signature,\n          timestamp,\n          deliveryId,\n        ))\n      if (!valid) {\n        return new Response(\n          JSON.stringify({ error: 'Invalid webhook signature' }),\n          { status: 401, headers: { 'Content-Type': 'application/json' } },\n        )\n      }\n    } else {\n      console.warn(\n        '[@01.software/sdk] Webhook signature verification is disabled. ' +\n          'Set { secret } in handleWebhook() options to enable HMAC-SHA256 verification.',\n      )\n    }\n\n    const body = JSON.parse(rawBody)\n\n    if (!isValidWebhookEvent(body)) {\n      return new Response(\n        JSON.stringify({ error: 'Invalid webhook event format' }),\n        { status: 400, headers: { 'Content-Type': 'application/json' } },\n      )\n    }\n\n    await handler(body as WebhookEvent<T, TData>)\n\n    return new Response(\n      JSON.stringify({ success: true, message: 'Webhook processed' }),\n      { status: 200, headers: { 'Content-Type': 'application/json' } },\n    )\n  } catch (error) {\n    console.error('Webhook processing error:', error)\n\n    return new Response(JSON.stringify({ error: 'Internal server error' }), {\n      status: 500,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  }\n}\n\nexport function createTypedWebhookHandler<T extends Collection>(\n  collection: T,\n  handler: (event: WebhookEvent<T>) => Promise<void> | void,\n): WebhookHandler<T> {\n  return async (event: WebhookEvent<T>) => {\n    if (event.collection !== collection) {\n      throw new Error(\n        `Expected collection \"${collection}\", got \"${event.collection}\"`,\n      )\n    }\n    return handler(event)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACaO,IAAM,2BAA2B;AAGjC,IAAM,mCAAmC;AA8DzC,SAAS,oBAAoB,MAAqC;AACvE,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,QAAM,MAAM;AACZ,SACE,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,cAAc,YACzB,IAAI,UAAU,SAAS,KACvB,OAAO,IAAI,SAAS,YACpB,IAAI,SAAS;AAEjB;AAYO,IAAM,kCAAkC;AAExC,IAAM,+BAA+B;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA0FA,SAAS,iBAAiB,OAA0C;AAClE,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU;AACvD;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,MAAI,MAAM,SAAS,cAAc;AAC/B,WAAO,OAAO,MAAM,eAAe;AAAA,EACrC;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,WACE,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,UAAU,YACvB,iBAAiB,MAAM,EAAE;AAAA,EAE7B;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,SACE,OAAO,MAAM,eAAe,YAC5B,iBAAiB,MAAM,EAAE,MACxB,MAAM,sBAAsB,UAC3B,OAAO,MAAM,sBAAsB,cACpC,MAAM,cAAc,UAAa,iBAAiB,MAAM,SAAS;AAEtE;AAEA,SAAS,sBACP,OACA,KACS;AACT,SACE,MAAM,GAAG,MAAM,UACf,MAAM,GAAG,MAAM,QACf,OAAO,MAAM,GAAG,MAAM;AAE1B;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,SACE,MAAM,SAAS,WACf,MAAM,WAAW,wBAChB,MAAM,uBAAuB,UAC5B,OAAO,MAAM,uBAAuB,aACtC,sBAAsB,OAAO,eAAe,KAC5C,sBAAsB,OAAO,WAAW,KACxC,oBAAoB,MAAM,KAAK,KAC/B,oBAAoB,MAAM,KAAK;AAEnC;AAEA,SAAS,gCACP,OACwC;AACxC,SACE,OAAO,UAAU,YAChB,6BAAmD,SAAS,KAAK;AAEtE;AAEA,SAAS,uCACP,OAC+C;AAC/C,SAAO,UAAU,YAAY,UAAU,kBAAkB,UAAU;AACrE;AAEA,SAAS,2BACP,OACmC;AACnC,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,MACE,MAAM,WAAW,WAChB,CAAC,SAAS,MAAM,MAAM,KACrB,CAAC,uCAAuC,MAAM,OAAO,UAAU,KAC/D,CAAC,iBAAiB,MAAM,OAAO,EAAE,IACnC;AACA,WAAO;AAAA,EACT;AAEA,UACG,MAAM,YAAY,UAAa,iBAAiB,MAAM,OAAO,OAC7D,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB,cAChE,MAAM,WAAW,UAAa,OAAO,MAAM,WAAW,cACtD,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB,cAChE,MAAM,aAAa,UAAa,OAAO,MAAM,aAAa,cAC1D,MAAM,kBAAkB,UACvB,iBAAiB,MAAM,aAAa,OACrC,MAAM,sBAAsB,UAC3B,OAAO,MAAM,sBAAsB,cACpC,MAAM,cAAc,UAAa,OAAO,MAAM,cAAc,cAC5D,MAAM,aAAa,UAAa,iBAAiB,MAAM,QAAQ,OAC/D,MAAM,iBAAiB,UACtB,OAAO,MAAM,iBAAiB,cAC/B,MAAM,iBAAiB,UACtB,OAAO,MAAM,iBAAiB,cAC/B,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB;AAErE;AAEA,SAAS,uBACP,OAC+B;AAC/B,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SACE,gCAAgC,MAAM,KAAK,KAC3C,OAAO,MAAM,aAAa,YAC1B,MAAM,SAAS,SAAS,KACxB,OAAO,MAAM,cAAc,YAC3B,MAAM,UAAU,SAAS,MACxB,MAAM,YAAY,UAAa,OAAO,MAAM,YAAY,cACxD,MAAM,kBAAkB,UACvB,OAAO,MAAM,kBAAkB,cAChC,MAAM,aAAa,UAAa,OAAO,MAAM,aAAa;AAE/D;AAEA,SAAS,oCACP,OAC4C;AAC5C,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SACE,MAAM,SAAS,kBACf,MAAM,WAAW,4BACjB,gCAAgC,MAAM,KAAK,KAC3C,uCAAuC,MAAM,gBAAgB,KAC7D,iBAAiB,MAAM,QAAQ;AAEnC;AAEA,SAAS,kBACP,QACA,UACS;AACT,SAAO,WAAW,UAAa,aAAa,UAAa,WAAW;AACtE;AASO,SAAS,2BACd,OACoD;AACpD,MACE,CAAC,oBAAoB,KAAK,KAC1B,MAAM,cAAc,YACpB,MAAM,cAAc,4BACpB,CAAC,qBAAqB,MAAM,MAAM,GAClC;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,eAAe,MAAM,OAAO,MAAM,YAAY;AACtD,WAAO;AAAA,EACT;AAEA,MACE,MAAM,OAAO,MAAM,SAAS,gBAC5B,MAAM,OAAO,MAAM,eAAe,MAAM,OAAO,MAAM,YACrD;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AASO,SAAS,mCACd,OAC2C;AAC3C,MACE,CAAC,oBAAoB,KAAK,KAC1B,MAAM,cAAc,mCACpB,MAAM,cAAc,oCACpB,CAAC,2BAA2B,MAAM,IAAI,KACtC,CAAC,uBAAwB,MAAqC,YAAY,GAC1E;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAgB,MACnB;AACH,QAAM,OAAO,MAAM;AACnB,QAAM,SAAS,MAAM;AACrB,QAAM,mBAAmB,KAAK,QAAQ,cAAc,MAAM;AAC1D,QAAM,WAAW,KAAK,QAAQ;AAE9B,MAAI,CAAC,uCAAuC,gBAAgB,EAAG,QAAO;AACtE,MAAI,KAAK,WAAW,UAAa,MAAM,eAAe,KAAK,OAAO,YAAY;AAC5E,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,QAAW;AACxB,QAAI,CAAC,oCAAoC,MAAM,EAAG,QAAO;AACzD,QAAI,OAAO,qBAAqB,iBAAkB,QAAO;AACzD,QAAI,OAAO,UAAU,aAAa,MAAO,QAAO;AAChD,QAAI,CAAC,kBAAkB,OAAO,UAAU,QAAQ,EAAG,QAAO;AAAA,EAC5D;AACA,QAAM,iBAAiB,oCAAoC,MAAM,IAC7D,OAAO,WACP;AAEJ,MACE,aAAa,UAAU,eACvB,aAAa,UAAU,kBACvB;AACA,WACE,qBAAqB,YACrB,OAAO,aAAa,YAAY,YAChC,aAAa,QAAQ,SAAS,KAC9B,kBAAkB,KAAK,SAAS,QAAQ,KACxC,kBAAkB,aAAa,SAAS,QAAQ,KAChD,kBAAkB,KAAK,SAAS,aAAa,OAAO,KACpD,kBAAkB,gBAAgB,KAAK,WAAW,aAAa,OAAO;AAAA,EAE1E;AAEA,MAAI,aAAa,UAAU,sBAAsB;AAC/C,WACE,qBAAqB,kBACrB,kBAAkB,KAAK,eAAe,QAAQ,KAC9C,OAAO,aAAa,kBAAkB,YACtC,aAAa,cAAc,SAAS,KACpC,kBAAkB,aAAa,eAAe,QAAQ,KACtD,kBAAkB,KAAK,eAAe,aAAa,aAAa,KAChE,kBAAkB,gBAAgB,aAAa,aAAa;AAAA,EAEhE;AAEA,MACE,aAAa,UAAU,qBACvB,aAAa,UAAU,mBACvB;AACA,WACE,qBAAqB,aACrB,kBAAkB,KAAK,UAAU,QAAQ,KACzC,OAAO,aAAa,aAAa,YACjC,aAAa,SAAS,SAAS,KAC/B,kBAAkB,aAAa,UAAU,QAAQ,KACjD,kBAAkB,KAAK,UAAU,aAAa,QAAQ,KACtD,kBAAkB,gBAAgB,aAAa,QAAQ;AAAA,EAE3D;AAEA,SAAO;AACT;AAEO,SAAS,sCACd,OACQ;AACR,SAAO,GAAG,MAAM,aAAa,QAAQ,IAAI,MAAM,aAAa,SAAS;AACvE;AAEO,SAAS,0BACd,QACS;AACT,SAAO;AACT;AAEO,SAAS,kCACd,UACiC;AACjC,SAAO,OAAO,UAAU;AACtB,QAAI,CAAC,mCAAmC,KAAK,GAAG;AAC9C,YAAM,SAAS,YAAY,KAAK;AAChC;AAAA,IACF;AAEA,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK;AACjD,QAAI,CAAC,SAAS;AACZ,YAAM,SAAS,YAAY,KAAK;AAChC;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,gBAAgB,sCAAsC,KAAK;AAAA,IAC7D,CAAC;AAAA,EACH;AACF;AAGO,SAAS,oBACd,OACA,YAC6C;AAC7C,SAAO,oBAAoB,KAAK,KAAK,MAAM,eAAe;AAC5D;AAGO,SAAS,mBACd,OACA,WACoE;AACpE,SAAO,oBAAoB,KAAK,KAAK,MAAM,cAAc;AAC3D;AAEO,IAAM,oCAAoC;AAgCjD,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,UAAU,OAAgC,KAAsB;AACvE,SAAO,OAAO,MAAM,GAAG,MAAM;AAC/B;AAEA,SAAS,kBACP,OACA,KACS;AACT,SAAO,OAAO,MAAM,GAAG,MAAM,YAAY,OAAO,MAAM,GAAG,MAAM;AACjE;AAEO,SAAS,oCACd,OAC4C;AAC5C,MACE,MAAM,eAAe,eACrB,MAAM,cAAc,qCACpB,CAAC,SAAS,MAAM,IAAI,GACpB;AACA,WAAO;AAAA,EACT;AAEA,SACE,kBAAkB,MAAM,MAAM,YAAY,KAC1C,UAAU,MAAM,MAAM,OAAO,KAC7B,UAAU,MAAM,MAAM,MAAM,KAC5B,UAAU,MAAM,MAAM,oBAAoB,KAC1C,UAAU,MAAM,MAAM,wBAAwB;AAElD;AAEO,SAAS,iCACd,UACiC;AACjC,SAAO,OAAO,UAAU;AACtB,QAAI,oCAAoC,KAAK,KAAK,SAAS,eAAe;AACxE,YAAM,SAAS,cAAc,MAAM,MAAM,KAAK;AAC9C;AAAA,IACF;AAEA,UAAM,SAAS,YAAY,KAAK;AAAA,EAClC;AACF;AAEA,eAAe,gBACb,SACA,QACA,WACA,WACA,YACkB;AAClB,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,QAAQ,OAAO,MAAM;AAAA,IACrB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,MAAI,UAAU,SAAS,MAAM,KAAK,CAAC,iBAAiB,KAAK,SAAS,GAAG;AACnE,WAAO;AAAA,EACT;AACA,QAAM,WAAW,IAAI;AAAA,KAClB,UAAU,MAAM,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,SAAS,MAAM,EAAE,CAAC;AAAA,EACnE;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,OAAO,EAAE;AAAA,EACxD;AACF;AAEA,SAAS,iBACP,WACA,kBACS;AACT,MAAI,CAAC,QAAQ,KAAK,SAAS,EAAG,QAAO;AACrC,QAAM,cAAc,OAAO,SAAS;AACpC,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAC1C,QAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW;AAChD,SAAO,UAAU,mBAAmB;AACtC;AAEA,eAAsB,cAIpB,SACA,SACA,SACmB;AACnB,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,KAAK;AAEnC,QAAI,SAAS,QAAQ;AACnB,YAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,YAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,YAAM,aAAa,QAAQ,QAAQ,IAAI,uBAAuB,KAAK;AACnE,YAAM,mBAAmB,QAAQ,oBAAoB;AACrD,YAAM,QACJ,QAAQ,aAAa,UAAU,KAC/B,iBAAiB,WAAW,gBAAgB,KAC3C,MAAM;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACF,UAAI,CAAC,OAAO;AACV,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,4BAA4B,CAAC;AAAA,UACrD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,OAAO,KAAK,MAAM,OAAO;AAE/B,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,IAAI;AAAA,QACT,KAAK,UAAU,EAAE,OAAO,+BAA+B,CAAC;AAAA,QACxD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,QAAQ,IAA8B;AAE5C,WAAO,IAAI;AAAA,MACT,KAAK,UAAU,EAAE,SAAS,MAAM,SAAS,oBAAoB,CAAC;AAAA,MAC9D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,IACjE;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,6BAA6B,KAAK;AAEhD,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,wBAAwB,CAAC,GAAG;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAEO,SAAS,0BACd,YACA,SACmB;AACnB,SAAO,OAAO,UAA2B;AACvC,QAAI,MAAM,eAAe,YAAY;AACnC,YAAM,IAAI;AAAA,QACR,wBAAwB,UAAU,WAAW,MAAM,UAAU;AAAA,MAC/D;AAAA,IACF;AACA,WAAO,QAAQ,KAAK;AAAA,EACtB;AACF;","names":[]}
+{"version":3,"sources":["../src/webhook.ts","../src/core/webhook/index.ts"],"sourcesContent":["export {\n  handleWebhook,\n  createTypedWebhookHandler,\n  createCommerceEmailWebhookHandler,\n  createCustomerAuthWebhookHandler,\n  defineCommerceEmailConfig,\n  getCommerceNotificationIdempotencyKey,\n  isValidWebhookEvent,\n  isCommerceNotificationWebhookEvent,\n  isCustomerPasswordResetWebhookEvent,\n  isOrderChangedWebhookEvent,\n  isWebhookCollection,\n  isWebhookOperation,\n  CUSTOMER_PASSWORD_RESET_OPERATION,\n  COMMERCE_NOTIFICATION_EVENT_TYPE,\n  COMMERCE_NOTIFICATION_EVENTS,\n  COMMERCE_NOTIFICATION_OPERATION,\n  ORDER_CHANGED_EVENT_TYPE,\n} from './core/webhook'\nexport type {\n  CollectionWebhookOperation,\n  CommerceEmailChannel,\n  CommerceEmailConfig,\n  CommerceEmailEventConfig,\n  CommerceEmailEventHandlers,\n  CommerceEmailHandlerContext,\n  CommerceNotification,\n  CommerceNotificationData,\n  CommerceNotificationEventName,\n  CommerceNotificationSource,\n  CommerceNotificationSourceCollection,\n  CommerceNotificationWebhookEvent,\n  CustomerAuthWebhookEvent,\n  CustomerAuthWebhookHandlers,\n  CustomerPasswordResetWebhookData,\n  CustomerPasswordResetWebhookEvent,\n  OrderChangedWebhookEvent,\n  WebhookChange,\n  WebhookCommerceNotificationChange,\n  WebhookEvent,\n  WebhookHandler,\n  WebhookKnownOperation,\n  WebhookOperation,\n  WebhookOptions,\n  WebhookOrderChange,\n  WebhookOrderMoved,\n  WebhookOrderScope,\n} from './core/webhook'\nexport type {\n  WebhookSigningSecretReveal,\n  WebhookWithoutSecret,\n} from './webhook-types'\n","import type { Collection } from '../client/types'\nimport type { CollectionType } from '../collection/types'\n\nexport type WebhookOperation = string\n\n/**\n * Semantic event type for manual Admin Panel ordering changes.\n *\n * Order-change webhooks remain `operation: \"update\"` events for compatibility.\n * Do not filter on or emit `operation: \"reorder\"`; use this event type with\n * `isOrderChangedWebhookEvent()` to distinguish ordering from normal content\n * updates.\n */\nexport const ORDER_CHANGED_EVENT_TYPE = 'collection.orderChanged' as const\n\n/** Semantic event type for v1 commerce notification webhooks. */\nexport const COMMERCE_NOTIFICATION_EVENT_TYPE = 'commerce.notification' as const\n\n/** Collection webhook operations emitted for tenant collection writes. */\nexport type CollectionWebhookOperation = 'create' | 'update'\n\n/** Describes the ordered area affected by an order-change webhook. */\nexport type WebhookOrderScope =\n  | { kind: 'collection'; collection: string }\n  | { kind: 'join'; collection: string; field: string; id: string | number }\n\n/** Identifies the public moved document for the ordered scope. */\nexport type WebhookOrderMoved = {\n  collection: string\n  id: string | number\n  relatedCollection?: string\n  relatedId?: string | number\n}\n\n/** Metadata attached to `collection.orderChanged` webhook events. */\nexport type WebhookOrderChange = {\n  type: 'order'\n  source: 'payload-orderable'\n  /**\n   * Diagnostic Payload order field name.\n   *\n   * This may contain hidden implementation field names. Application routing\n   * should use `change.scope` and `change.moved` instead.\n   */\n  orderableFieldName?: string\n  previousOrder?: string | null\n  nextOrder?: string | null\n  scope: WebhookOrderScope\n  moved: WebhookOrderMoved\n}\n\n/** Known semantic webhook change metadata. */\nexport type WebhookChange = WebhookOrderChange | WebhookCommerceNotificationChange\n\nexport interface WebhookEvent<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> {\n  collection: T\n  operation: WebhookOperation\n  data: TData\n  eventType?: string\n  change?: unknown\n  timestamp?: string\n  deliveryId?: string\n}\n\nexport type WebhookHandler<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> = (event: WebhookEvent<T, TData>) => Promise<void> | void\n\nexport interface WebhookOptions {\n  secret?: string\n  /** Max accepted skew for signed webhook delivery timestamps. Default: 300s. */\n  toleranceSeconds?: number\n}\n\nexport function isValidWebhookEvent(data: unknown): data is WebhookEvent {\n  if (typeof data !== 'object' || data === null) return false\n  const obj = data as Record<string, unknown>\n  return (\n    typeof obj.collection === 'string' &&\n    typeof obj.operation === 'string' &&\n    obj.operation.length > 0 &&\n    typeof obj.data === 'object' &&\n    obj.data !== null\n  )\n}\n\n/** Webhook event emitted when manual Admin Panel ordering changes. */\nexport type OrderChangedWebhookEvent<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n> = WebhookEvent<T, TData> & {\n  operation: 'update'\n  eventType: typeof ORDER_CHANGED_EVENT_TYPE\n  change: WebhookOrderChange\n}\n\nexport const COMMERCE_NOTIFICATION_OPERATION = 'notification' as const\n\nexport const COMMERCE_NOTIFICATION_EVENTS = [\n  'orderPaid',\n  'orderCanceled',\n  'fulfillmentShipped',\n  'orderDelivered',\n  'returnRequested',\n  'returnCompleted',\n] as const\n\nexport type CommerceNotificationEventName =\n  (typeof COMMERCE_NOTIFICATION_EVENTS)[number]\n\nexport type CommerceNotificationSourceCollection =\n  | 'orders'\n  | 'fulfillments'\n  | 'returns'\n\nexport type CommerceNotificationSource = {\n  collection: CommerceNotificationSourceCollection\n  id: string | number\n}\n\nexport type CommerceNotificationData = {\n  source?: CommerceNotificationSource\n  orderId?: string | number\n  orderNumber?: string\n  status?: string\n  totalAmount?: number\n  currency?: string\n  fulfillmentId?: string | number\n  fulfillmentStatus?: string\n  shippedAt?: string\n  returnId?: string | number\n  returnStatus?: string\n  refundAmount?: number\n  completedAt?: string\n}\n\nexport type CommerceNotification = {\n  event: CommerceNotificationEventName\n  intentId: string\n  dedupeKey: string\n  orderId?: string\n  fulfillmentId?: string\n  returnId?: string\n}\n\nexport type WebhookCommerceNotificationChange = {\n  type: 'notification'\n  source: 'commerce-notifications'\n  event: CommerceNotificationEventName\n  sourceCollection: CommerceNotificationSourceCollection\n  sourceId: string | number\n}\n\n/** Webhook event emitted for v1 commerce notification deliveries. */\nexport type CommerceNotificationWebhookEvent = WebhookEvent<\n  CommerceNotificationSourceCollection,\n  CommerceNotificationData\n> & {\n  operation: typeof COMMERCE_NOTIFICATION_OPERATION\n  eventType: typeof COMMERCE_NOTIFICATION_EVENT_TYPE\n  change?: WebhookCommerceNotificationChange\n  notification: CommerceNotification\n}\n\nexport type CommerceEmailChannel = 'webhook' | 'provider'\n\nexport type CommerceEmailEventConfig = {\n  enabled: boolean\n  channel: CommerceEmailChannel\n  template?: string\n}\n\nexport type CommerceEmailConfig = {\n  version: 1\n  commerceNotifications: Partial<\n    Record<CommerceNotificationEventName, CommerceEmailEventConfig>\n  >\n}\n\nexport type CommerceEmailHandlerContext = {\n  event: CommerceNotificationWebhookEvent\n  idempotencyKey: string\n}\n\ntype MaybePromise<T> = T | Promise<T>\n\nexport type CommerceEmailEventHandlers = Partial<\n  Record<\n    CommerceNotificationEventName,\n    (context: CommerceEmailHandlerContext) => MaybePromise<void>\n  >\n> & {\n  unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>\n}\n\nfunction isStringOrNumber(value: unknown): value is string | number {\n  return typeof value === 'string' || typeof value === 'number'\n}\n\nfunction isWebhookOrderScope(value: unknown): value is WebhookOrderScope {\n  if (!isRecord(value)) return false\n\n  if (value.kind === 'collection') {\n    return typeof value.collection === 'string'\n  }\n\n  if (value.kind === 'join') {\n    return (\n      typeof value.collection === 'string' &&\n      typeof value.field === 'string' &&\n      isStringOrNumber(value.id)\n    )\n  }\n\n  return false\n}\n\nfunction isWebhookOrderMoved(value: unknown): value is WebhookOrderMoved {\n  if (!isRecord(value)) return false\n\n  return (\n    typeof value.collection === 'string' &&\n    isStringOrNumber(value.id) &&\n    (value.relatedCollection === undefined ||\n      typeof value.relatedCollection === 'string') &&\n    (value.relatedId === undefined || isStringOrNumber(value.relatedId))\n  )\n}\n\nfunction hasOptionalOrderValue(\n  value: Record<string, unknown>,\n  key: string,\n): boolean {\n  return (\n    value[key] === undefined ||\n    value[key] === null ||\n    typeof value[key] === 'string'\n  )\n}\n\nfunction isWebhookOrderChange(value: unknown): value is WebhookOrderChange {\n  if (!isRecord(value)) return false\n\n  return (\n    value.type === 'order' &&\n    value.source === 'payload-orderable' &&\n    (value.orderableFieldName === undefined ||\n      typeof value.orderableFieldName === 'string') &&\n    hasOptionalOrderValue(value, 'previousOrder') &&\n    hasOptionalOrderValue(value, 'nextOrder') &&\n    isWebhookOrderScope(value.scope) &&\n    isWebhookOrderMoved(value.moved)\n  )\n}\n\nfunction isCommerceNotificationEventName(\n  value: unknown,\n): value is CommerceNotificationEventName {\n  return (\n    typeof value === 'string' &&\n    (COMMERCE_NOTIFICATION_EVENTS as readonly string[]).includes(value)\n  )\n}\n\nfunction isCommerceNotificationSourceCollection(\n  value: unknown,\n): value is CommerceNotificationSourceCollection {\n  return value === 'orders' || value === 'fulfillments' || value === 'returns'\n}\n\nfunction isCommerceNotificationData(\n  value: unknown,\n): value is CommerceNotificationData {\n  if (!isRecord(value)) return false\n  if (\n    value.source !== undefined &&\n    (!isRecord(value.source) ||\n      !isCommerceNotificationSourceCollection(value.source.collection) ||\n      !isStringOrNumber(value.source.id))\n  ) {\n    return false\n  }\n\n  return (\n    (value.orderId === undefined || isStringOrNumber(value.orderId)) &&\n    (value.orderNumber === undefined || typeof value.orderNumber === 'string') &&\n    (value.status === undefined || typeof value.status === 'string') &&\n    (value.totalAmount === undefined || typeof value.totalAmount === 'number') &&\n    (value.currency === undefined || typeof value.currency === 'string') &&\n    (value.fulfillmentId === undefined ||\n      isStringOrNumber(value.fulfillmentId)) &&\n    (value.fulfillmentStatus === undefined ||\n      typeof value.fulfillmentStatus === 'string') &&\n    (value.shippedAt === undefined || typeof value.shippedAt === 'string') &&\n    (value.returnId === undefined || isStringOrNumber(value.returnId)) &&\n    (value.returnStatus === undefined ||\n      typeof value.returnStatus === 'string') &&\n    (value.refundAmount === undefined ||\n      typeof value.refundAmount === 'number') &&\n    (value.completedAt === undefined || typeof value.completedAt === 'string')\n  )\n}\n\nfunction isCommerceNotification(\n  value: unknown,\n): value is CommerceNotification {\n  if (!isRecord(value)) return false\n  return (\n    isCommerceNotificationEventName(value.event) &&\n    typeof value.intentId === 'string' &&\n    value.intentId.length > 0 &&\n    typeof value.dedupeKey === 'string' &&\n    value.dedupeKey.length > 0 &&\n    (value.orderId === undefined || typeof value.orderId === 'string') &&\n    (value.fulfillmentId === undefined ||\n      typeof value.fulfillmentId === 'string') &&\n    (value.returnId === undefined || typeof value.returnId === 'string')\n  )\n}\n\nfunction isWebhookCommerceNotificationChange(\n  value: unknown,\n): value is WebhookCommerceNotificationChange {\n  if (!isRecord(value)) return false\n  return (\n    value.type === 'notification' &&\n    value.source === 'commerce-notifications' &&\n    isCommerceNotificationEventName(value.event) &&\n    isCommerceNotificationSourceCollection(value.sourceCollection) &&\n    isStringOrNumber(value.sourceId)\n  )\n}\n\nfunction matchesOptionalId(\n  actual: string | number | undefined,\n  expected: string | number | undefined,\n): boolean {\n  return actual === undefined || expected === undefined || actual === expected\n}\n\n/**\n * Returns true for semantic order-change webhooks emitted as update events.\n *\n * Use this guard with `ORDER_CHANGED_EVENT_TYPE` instead of filtering on\n * `operation: \"reorder\"`. Tenant order-change webhooks intentionally keep\n * `operation: \"update\"` for compatibility with existing webhook handlers.\n */\nexport function isOrderChangedWebhookEvent(\n  event: unknown,\n): event is OrderChangedWebhookEvent<string, unknown> {\n  if (\n    !isValidWebhookEvent(event) ||\n    event.operation !== 'update' ||\n    event.eventType !== ORDER_CHANGED_EVENT_TYPE ||\n    !isWebhookOrderChange(event.change)\n  ) {\n    return false\n  }\n\n  if (event.collection !== event.change.scope.collection) {\n    return false\n  }\n\n  if (\n    event.change.scope.kind === 'collection' &&\n    event.change.moved.collection !== event.change.scope.collection\n  ) {\n    return false\n  }\n\n  return true\n}\n\n/**\n * Returns true for semantic commerce notification webhooks.\n *\n * Use `notification.intentId` and `notification.dedupeKey` for semantic\n * idempotency. `deliveryId`, when present, identifies a delivery attempt for\n * observability and is not the semantic notification identity.\n */\nexport function isCommerceNotificationWebhookEvent(\n  event: unknown,\n): event is CommerceNotificationWebhookEvent {\n  if (\n    !isValidWebhookEvent(event) ||\n    event.operation !== COMMERCE_NOTIFICATION_OPERATION ||\n    event.eventType !== COMMERCE_NOTIFICATION_EVENT_TYPE ||\n    !isCommerceNotificationData(event.data) ||\n    !isCommerceNotification((event as { notification?: unknown }).notification)\n  ) {\n    return false\n  }\n\n  const notification = (event as unknown as CommerceNotificationWebhookEvent)\n    .notification\n  const data = event.data\n  const change = event.change\n  const sourceCollection = data.source?.collection ?? event.collection\n  const sourceId = data.source?.id\n\n  if (!isCommerceNotificationSourceCollection(sourceCollection)) return false\n  if (data.source !== undefined && event.collection !== data.source.collection) {\n    return false\n  }\n\n  if (change !== undefined) {\n    if (!isWebhookCommerceNotificationChange(change)) return false\n    if (change.sourceCollection !== sourceCollection) return false\n    if (change.event !== notification.event) return false\n    if (!matchesOptionalId(change.sourceId, sourceId)) return false\n  }\n  const changeSourceId = isWebhookCommerceNotificationChange(change)\n    ? change.sourceId\n    : undefined\n\n  if (\n    notification.event === 'orderPaid' ||\n    notification.event === 'orderCanceled' ||\n    notification.event === 'orderDelivered'\n  ) {\n    return (\n      sourceCollection === 'orders' &&\n      typeof notification.orderId === 'string' &&\n      notification.orderId.length > 0 &&\n      matchesOptionalId(data.orderId, sourceId) &&\n      matchesOptionalId(notification.orderId, sourceId) &&\n      matchesOptionalId(data.orderId, notification.orderId) &&\n      matchesOptionalId(changeSourceId, data.orderId ?? notification.orderId)\n    )\n  }\n\n  if (notification.event === 'fulfillmentShipped') {\n    return (\n      sourceCollection === 'fulfillments' &&\n      matchesOptionalId(data.fulfillmentId, sourceId) &&\n      typeof notification.fulfillmentId === 'string' &&\n      notification.fulfillmentId.length > 0 &&\n      matchesOptionalId(notification.fulfillmentId, sourceId) &&\n      matchesOptionalId(data.fulfillmentId, notification.fulfillmentId) &&\n      matchesOptionalId(changeSourceId, notification.fulfillmentId)\n    )\n  }\n\n  if (\n    notification.event === 'returnRequested' ||\n    notification.event === 'returnCompleted'\n  ) {\n    return (\n      sourceCollection === 'returns' &&\n      matchesOptionalId(data.returnId, sourceId) &&\n      typeof notification.returnId === 'string' &&\n      notification.returnId.length > 0 &&\n      matchesOptionalId(notification.returnId, sourceId) &&\n      matchesOptionalId(data.returnId, notification.returnId) &&\n      matchesOptionalId(changeSourceId, notification.returnId)\n    )\n  }\n\n  return false\n}\n\nexport function getCommerceNotificationIdempotencyKey(\n  event: Pick<CommerceNotificationWebhookEvent, 'notification'>,\n): string {\n  return `${event.notification.intentId}:${event.notification.dedupeKey}`\n}\n\nexport function defineCommerceEmailConfig<TConfig extends CommerceEmailConfig>(\n  config: TConfig,\n): TConfig {\n  return config\n}\n\nexport function createCommerceEmailWebhookHandler(\n  handlers: CommerceEmailEventHandlers,\n): WebhookHandler<string, unknown> {\n  return async (event) => {\n    if (!isCommerceNotificationWebhookEvent(event)) {\n      await handlers.unhandled?.(event)\n      return\n    }\n\n    const handler = handlers[event.notification.event]\n    if (!handler) {\n      await handlers.unhandled?.(event)\n      return\n    }\n\n    await handler({\n      event,\n      idempotencyKey: getCommerceNotificationIdempotencyKey(event),\n    })\n  }\n}\n\n/** Narrows a webhook event to a specific collection. */\nexport function isWebhookCollection<TCollection extends string>(\n  event: unknown,\n  collection: TCollection,\n): event is WebhookEvent<TCollection, unknown> {\n  return isValidWebhookEvent(event) && event.collection === collection\n}\n\n/** Narrows a webhook event to a specific operation. */\nexport function isWebhookOperation<TOperation extends string>(\n  event: unknown,\n  operation: TOperation,\n): event is WebhookEvent<string, unknown> & { operation: TOperation } {\n  return isValidWebhookEvent(event) && event.operation === operation\n}\n\nexport const CUSTOMER_PASSWORD_RESET_OPERATION = 'password-reset' as const\n\nexport type WebhookKnownOperation =\n  | CollectionWebhookOperation\n  | typeof CUSTOMER_PASSWORD_RESET_OPERATION\n  | typeof COMMERCE_NOTIFICATION_OPERATION\n\nexport interface CustomerPasswordResetWebhookData {\n  customerId: string | number\n  email: string\n  name: string\n  resetPasswordToken: string\n  resetPasswordExpiresAt: string\n}\n\nexport type CustomerPasswordResetWebhookEvent = WebhookEvent<\n  'customers',\n  CustomerPasswordResetWebhookData\n> & {\n  operation: typeof CUSTOMER_PASSWORD_RESET_OPERATION\n}\n\nexport type CustomerAuthWebhookEvent = CustomerPasswordResetWebhookEvent\n\nexport interface CustomerAuthWebhookHandlers {\n  passwordReset?: (\n    data: CustomerPasswordResetWebhookData,\n    event: CustomerPasswordResetWebhookEvent,\n  ) => MaybePromise<void>\n  unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null\n}\n\nfunction hasString(value: Record<string, unknown>, key: string): boolean {\n  return typeof value[key] === 'string'\n}\n\nfunction hasStringOrNumber(\n  value: Record<string, unknown>,\n  key: string,\n): boolean {\n  return typeof value[key] === 'string' || typeof value[key] === 'number'\n}\n\nexport function isCustomerPasswordResetWebhookEvent(\n  event: WebhookEvent<string, unknown>,\n): event is CustomerPasswordResetWebhookEvent {\n  if (\n    event.collection !== 'customers' ||\n    event.operation !== CUSTOMER_PASSWORD_RESET_OPERATION ||\n    !isRecord(event.data)\n  ) {\n    return false\n  }\n\n  return (\n    hasStringOrNumber(event.data, 'customerId') &&\n    hasString(event.data, 'email') &&\n    hasString(event.data, 'name') &&\n    hasString(event.data, 'resetPasswordToken') &&\n    hasString(event.data, 'resetPasswordExpiresAt')\n  )\n}\n\nexport function createCustomerAuthWebhookHandler(\n  handlers: CustomerAuthWebhookHandlers,\n): WebhookHandler<string, unknown> {\n  return async (event) => {\n    if (isCustomerPasswordResetWebhookEvent(event) && handlers.passwordReset) {\n      await handlers.passwordReset(event.data, event)\n      return\n    }\n\n    await handlers.unhandled?.(event)\n  }\n}\n\nasync function verifySignature(\n  payload: string,\n  secret: string,\n  signature: string,\n  timestamp: string,\n  deliveryId: string,\n): Promise<boolean> {\n  const encoder = new TextEncoder()\n  const key = await crypto.subtle.importKey(\n    'raw',\n    encoder.encode(secret),\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['verify'],\n  )\n  // Validate and convert hex signature to Uint8Array\n  if (signature.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(signature)) {\n    return false\n  }\n  const sigBytes = new Uint8Array(\n    (signature.match(/.{2}/g) ?? []).map((byte) => parseInt(byte, 16)),\n  )\n  // crypto.subtle.verify performs constant-time comparison internally\n  return crypto.subtle.verify(\n    'HMAC',\n    key,\n    sigBytes,\n    encoder.encode(`${timestamp}.${deliveryId}.${payload}`),\n  )\n}\n\nfunction timestampIsFresh(\n  timestamp: string,\n  toleranceSeconds: number,\n): boolean {\n  if (!/^\\d+$/.test(timestamp)) return false\n  const timestampMs = Number(timestamp)\n  if (!Number.isFinite(timestampMs)) return false\n  const skewMs = Math.abs(Date.now() - timestampMs)\n  return skewMs <= toleranceSeconds * 1000\n}\n\nexport async function handleWebhook<\n  T extends Collection | string = Collection,\n  TData = T extends Collection ? CollectionType<T> : Record<string, unknown>,\n>(\n  request: Request,\n  handler: WebhookHandler<T, TData>,\n  options?: WebhookOptions,\n): Promise<Response> {\n  try {\n    const rawBody = await request.text()\n\n    if (options?.secret) {\n      const signature = request.headers.get('x-webhook-signature') || ''\n      const timestamp = request.headers.get('x-webhook-timestamp') || ''\n      const deliveryId = request.headers.get('x-webhook-delivery-id') || ''\n      const toleranceSeconds = options.toleranceSeconds ?? 300\n      const valid =\n        Boolean(timestamp && deliveryId) &&\n        timestampIsFresh(timestamp, toleranceSeconds) &&\n        (await verifySignature(\n          rawBody,\n          options.secret,\n          signature,\n          timestamp,\n          deliveryId,\n        ))\n      if (!valid) {\n        return new Response(\n          JSON.stringify({ error: 'Invalid webhook signature' }),\n          { status: 401, headers: { 'Content-Type': 'application/json' } },\n        )\n      }\n    } else {\n      console.warn(\n        '[@01.software/sdk] Webhook signature verification is disabled. ' +\n          'Set { secret } in handleWebhook() options to enable HMAC-SHA256 verification.',\n      )\n    }\n\n    const body = JSON.parse(rawBody)\n\n    if (!isValidWebhookEvent(body)) {\n      return new Response(\n        JSON.stringify({ error: 'Invalid webhook event format' }),\n        { status: 400, headers: { 'Content-Type': 'application/json' } },\n      )\n    }\n\n    await handler(body as WebhookEvent<T, TData>)\n\n    return new Response(\n      JSON.stringify({ success: true, message: 'Webhook processed' }),\n      { status: 200, headers: { 'Content-Type': 'application/json' } },\n    )\n  } catch (error) {\n    console.error('Webhook processing error:', error)\n\n    return new Response(JSON.stringify({ error: 'Internal server error' }), {\n      status: 500,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  }\n}\n\nexport function createTypedWebhookHandler<T extends Collection>(\n  collection: T,\n  handler: (event: WebhookEvent<T>) => Promise<void> | void,\n): WebhookHandler<T> {\n  return async (event: WebhookEvent<T>) => {\n    if (event.collection !== collection) {\n      throw new Error(\n        `Expected collection \"${collection}\", got \"${event.collection}\"`,\n      )\n    }\n    return handler(event)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACaO,IAAM,2BAA2B;AAGjC,IAAM,mCAAmC;AA8DzC,SAAS,oBAAoB,MAAqC;AACvE,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM,QAAO;AACtD,QAAM,MAAM;AACZ,SACE,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,cAAc,YACzB,IAAI,UAAU,SAAS,KACvB,OAAO,IAAI,SAAS,YACpB,IAAI,SAAS;AAEjB;AAYO,IAAM,kCAAkC;AAExC,IAAM,+BAA+B;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA0FA,SAAS,iBAAiB,OAA0C;AAClE,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU;AACvD;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,MAAI,MAAM,SAAS,cAAc;AAC/B,WAAO,OAAO,MAAM,eAAe;AAAA,EACrC;AAEA,MAAI,MAAM,SAAS,QAAQ;AACzB,WACE,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,UAAU,YACvB,iBAAiB,MAAM,EAAE;AAAA,EAE7B;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,SACE,OAAO,MAAM,eAAe,YAC5B,iBAAiB,MAAM,EAAE,MACxB,MAAM,sBAAsB,UAC3B,OAAO,MAAM,sBAAsB,cACpC,MAAM,cAAc,UAAa,iBAAiB,MAAM,SAAS;AAEtE;AAEA,SAAS,sBACP,OACA,KACS;AACT,SACE,MAAM,GAAG,MAAM,UACf,MAAM,GAAG,MAAM,QACf,OAAO,MAAM,GAAG,MAAM;AAE1B;AAEA,SAAS,qBAAqB,OAA6C;AACzE,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,SACE,MAAM,SAAS,WACf,MAAM,WAAW,wBAChB,MAAM,uBAAuB,UAC5B,OAAO,MAAM,uBAAuB,aACtC,sBAAsB,OAAO,eAAe,KAC5C,sBAAsB,OAAO,WAAW,KACxC,oBAAoB,MAAM,KAAK,KAC/B,oBAAoB,MAAM,KAAK;AAEnC;AAEA,SAAS,gCACP,OACwC;AACxC,SACE,OAAO,UAAU,YAChB,6BAAmD,SAAS,KAAK;AAEtE;AAEA,SAAS,uCACP,OAC+C;AAC/C,SAAO,UAAU,YAAY,UAAU,kBAAkB,UAAU;AACrE;AAEA,SAAS,2BACP,OACmC;AACnC,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,MACE,MAAM,WAAW,WAChB,CAAC,SAAS,MAAM,MAAM,KACrB,CAAC,uCAAuC,MAAM,OAAO,UAAU,KAC/D,CAAC,iBAAiB,MAAM,OAAO,EAAE,IACnC;AACA,WAAO;AAAA,EACT;AAEA,UACG,MAAM,YAAY,UAAa,iBAAiB,MAAM,OAAO,OAC7D,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB,cAChE,MAAM,WAAW,UAAa,OAAO,MAAM,WAAW,cACtD,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB,cAChE,MAAM,aAAa,UAAa,OAAO,MAAM,aAAa,cAC1D,MAAM,kBAAkB,UACvB,iBAAiB,MAAM,aAAa,OACrC,MAAM,sBAAsB,UAC3B,OAAO,MAAM,sBAAsB,cACpC,MAAM,cAAc,UAAa,OAAO,MAAM,cAAc,cAC5D,MAAM,aAAa,UAAa,iBAAiB,MAAM,QAAQ,OAC/D,MAAM,iBAAiB,UACtB,OAAO,MAAM,iBAAiB,cAC/B,MAAM,iBAAiB,UACtB,OAAO,MAAM,iBAAiB,cAC/B,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB;AAErE;AAEA,SAAS,uBACP,OAC+B;AAC/B,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SACE,gCAAgC,MAAM,KAAK,KAC3C,OAAO,MAAM,aAAa,YAC1B,MAAM,SAAS,SAAS,KACxB,OAAO,MAAM,cAAc,YAC3B,MAAM,UAAU,SAAS,MACxB,MAAM,YAAY,UAAa,OAAO,MAAM,YAAY,cACxD,MAAM,kBAAkB,UACvB,OAAO,MAAM,kBAAkB,cAChC,MAAM,aAAa,UAAa,OAAO,MAAM,aAAa;AAE/D;AAEA,SAAS,oCACP,OAC4C;AAC5C,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,SACE,MAAM,SAAS,kBACf,MAAM,WAAW,4BACjB,gCAAgC,MAAM,KAAK,KAC3C,uCAAuC,MAAM,gBAAgB,KAC7D,iBAAiB,MAAM,QAAQ;AAEnC;AAEA,SAAS,kBACP,QACA,UACS;AACT,SAAO,WAAW,UAAa,aAAa,UAAa,WAAW;AACtE;AASO,SAAS,2BACd,OACoD;AACpD,MACE,CAAC,oBAAoB,KAAK,KAC1B,MAAM,cAAc,YACpB,MAAM,cAAc,4BACpB,CAAC,qBAAqB,MAAM,MAAM,GAClC;AACA,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,eAAe,MAAM,OAAO,MAAM,YAAY;AACtD,WAAO;AAAA,EACT;AAEA,MACE,MAAM,OAAO,MAAM,SAAS,gBAC5B,MAAM,OAAO,MAAM,eAAe,MAAM,OAAO,MAAM,YACrD;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AASO,SAAS,mCACd,OAC2C;AAC3C,MACE,CAAC,oBAAoB,KAAK,KAC1B,MAAM,cAAc,mCACpB,MAAM,cAAc,oCACpB,CAAC,2BAA2B,MAAM,IAAI,KACtC,CAAC,uBAAwB,MAAqC,YAAY,GAC1E;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAgB,MACnB;AACH,QAAM,OAAO,MAAM;AACnB,QAAM,SAAS,MAAM;AACrB,QAAM,mBAAmB,KAAK,QAAQ,cAAc,MAAM;AAC1D,QAAM,WAAW,KAAK,QAAQ;AAE9B,MAAI,CAAC,uCAAuC,gBAAgB,EAAG,QAAO;AACtE,MAAI,KAAK,WAAW,UAAa,MAAM,eAAe,KAAK,OAAO,YAAY;AAC5E,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,QAAW;AACxB,QAAI,CAAC,oCAAoC,MAAM,EAAG,QAAO;AACzD,QAAI,OAAO,qBAAqB,iBAAkB,QAAO;AACzD,QAAI,OAAO,UAAU,aAAa,MAAO,QAAO;AAChD,QAAI,CAAC,kBAAkB,OAAO,UAAU,QAAQ,EAAG,QAAO;AAAA,EAC5D;AACA,QAAM,iBAAiB,oCAAoC,MAAM,IAC7D,OAAO,WACP;AAEJ,MACE,aAAa,UAAU,eACvB,aAAa,UAAU,mBACvB,aAAa,UAAU,kBACvB;AACA,WACE,qBAAqB,YACrB,OAAO,aAAa,YAAY,YAChC,aAAa,QAAQ,SAAS,KAC9B,kBAAkB,KAAK,SAAS,QAAQ,KACxC,kBAAkB,aAAa,SAAS,QAAQ,KAChD,kBAAkB,KAAK,SAAS,aAAa,OAAO,KACpD,kBAAkB,gBAAgB,KAAK,WAAW,aAAa,OAAO;AAAA,EAE1E;AAEA,MAAI,aAAa,UAAU,sBAAsB;AAC/C,WACE,qBAAqB,kBACrB,kBAAkB,KAAK,eAAe,QAAQ,KAC9C,OAAO,aAAa,kBAAkB,YACtC,aAAa,cAAc,SAAS,KACpC,kBAAkB,aAAa,eAAe,QAAQ,KACtD,kBAAkB,KAAK,eAAe,aAAa,aAAa,KAChE,kBAAkB,gBAAgB,aAAa,aAAa;AAAA,EAEhE;AAEA,MACE,aAAa,UAAU,qBACvB,aAAa,UAAU,mBACvB;AACA,WACE,qBAAqB,aACrB,kBAAkB,KAAK,UAAU,QAAQ,KACzC,OAAO,aAAa,aAAa,YACjC,aAAa,SAAS,SAAS,KAC/B,kBAAkB,aAAa,UAAU,QAAQ,KACjD,kBAAkB,KAAK,UAAU,aAAa,QAAQ,KACtD,kBAAkB,gBAAgB,aAAa,QAAQ;AAAA,EAE3D;AAEA,SAAO;AACT;AAEO,SAAS,sCACd,OACQ;AACR,SAAO,GAAG,MAAM,aAAa,QAAQ,IAAI,MAAM,aAAa,SAAS;AACvE;AAEO,SAAS,0BACd,QACS;AACT,SAAO;AACT;AAEO,SAAS,kCACd,UACiC;AACjC,SAAO,OAAO,UAAU;AACtB,QAAI,CAAC,mCAAmC,KAAK,GAAG;AAC9C,YAAM,SAAS,YAAY,KAAK;AAChC;AAAA,IACF;AAEA,UAAM,UAAU,SAAS,MAAM,aAAa,KAAK;AACjD,QAAI,CAAC,SAAS;AACZ,YAAM,SAAS,YAAY,KAAK;AAChC;AAAA,IACF;AAEA,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,gBAAgB,sCAAsC,KAAK;AAAA,IAC7D,CAAC;AAAA,EACH;AACF;AAGO,SAAS,oBACd,OACA,YAC6C;AAC7C,SAAO,oBAAoB,KAAK,KAAK,MAAM,eAAe;AAC5D;AAGO,SAAS,mBACd,OACA,WACoE;AACpE,SAAO,oBAAoB,KAAK,KAAK,MAAM,cAAc;AAC3D;AAEO,IAAM,oCAAoC;AAgCjD,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,UAAU,OAAgC,KAAsB;AACvE,SAAO,OAAO,MAAM,GAAG,MAAM;AAC/B;AAEA,SAAS,kBACP,OACA,KACS;AACT,SAAO,OAAO,MAAM,GAAG,MAAM,YAAY,OAAO,MAAM,GAAG,MAAM;AACjE;AAEO,SAAS,oCACd,OAC4C;AAC5C,MACE,MAAM,eAAe,eACrB,MAAM,cAAc,qCACpB,CAAC,SAAS,MAAM,IAAI,GACpB;AACA,WAAO;AAAA,EACT;AAEA,SACE,kBAAkB,MAAM,MAAM,YAAY,KAC1C,UAAU,MAAM,MAAM,OAAO,KAC7B,UAAU,MAAM,MAAM,MAAM,KAC5B,UAAU,MAAM,MAAM,oBAAoB,KAC1C,UAAU,MAAM,MAAM,wBAAwB;AAElD;AAEO,SAAS,iCACd,UACiC;AACjC,SAAO,OAAO,UAAU;AACtB,QAAI,oCAAoC,KAAK,KAAK,SAAS,eAAe;AACxE,YAAM,SAAS,cAAc,MAAM,MAAM,KAAK;AAC9C;AAAA,IACF;AAEA,UAAM,SAAS,YAAY,KAAK;AAAA,EAClC;AACF;AAEA,eAAe,gBACb,SACA,QACA,WACA,WACA,YACkB;AAClB,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC9B;AAAA,IACA,QAAQ,OAAO,MAAM;AAAA,IACrB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,QAAQ;AAAA,EACX;AAEA,MAAI,UAAU,SAAS,MAAM,KAAK,CAAC,iBAAiB,KAAK,SAAS,GAAG;AACnE,WAAO;AAAA,EACT;AACA,QAAM,WAAW,IAAI;AAAA,KAClB,UAAU,MAAM,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,SAAS,MAAM,EAAE,CAAC;AAAA,EACnE;AAEA,SAAO,OAAO,OAAO;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,OAAO,EAAE;AAAA,EACxD;AACF;AAEA,SAAS,iBACP,WACA,kBACS;AACT,MAAI,CAAC,QAAQ,KAAK,SAAS,EAAG,QAAO;AACrC,QAAM,cAAc,OAAO,SAAS;AACpC,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAC1C,QAAM,SAAS,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW;AAChD,SAAO,UAAU,mBAAmB;AACtC;AAEA,eAAsB,cAIpB,SACA,SACA,SACmB;AACnB,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,KAAK;AAEnC,QAAI,SAAS,QAAQ;AACnB,YAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,YAAM,YAAY,QAAQ,QAAQ,IAAI,qBAAqB,KAAK;AAChE,YAAM,aAAa,QAAQ,QAAQ,IAAI,uBAAuB,KAAK;AACnE,YAAM,mBAAmB,QAAQ,oBAAoB;AACrD,YAAM,QACJ,QAAQ,aAAa,UAAU,KAC/B,iBAAiB,WAAW,gBAAgB,KAC3C,MAAM;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACF,UAAI,CAAC,OAAO;AACV,eAAO,IAAI;AAAA,UACT,KAAK,UAAU,EAAE,OAAO,4BAA4B,CAAC;AAAA,UACrD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,QACjE;AAAA,MACF;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,OAAO,KAAK,MAAM,OAAO;AAE/B,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,IAAI;AAAA,QACT,KAAK,UAAU,EAAE,OAAO,+BAA+B,CAAC;AAAA,QACxD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,MACjE;AAAA,IACF;AAEA,UAAM,QAAQ,IAA8B;AAE5C,WAAO,IAAI;AAAA,MACT,KAAK,UAAU,EAAE,SAAS,MAAM,SAAS,oBAAoB,CAAC;AAAA,MAC9D,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,mBAAmB,EAAE;AAAA,IACjE;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,MAAM,6BAA6B,KAAK;AAEhD,WAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,wBAAwB,CAAC,GAAG;AAAA,MACtE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAEO,SAAS,0BACd,YACA,SACmB;AACnB,SAAO,OAAO,UAA2B;AACvC,QAAI,MAAM,eAAe,YAAY;AACnC,YAAM,IAAI;AAAA,QACR,wBAAwB,UAAU,WAAW,MAAM,UAAU;AAAA,MAC/D;AAAA,IACF;AACA,WAAO,QAAQ,KAAK;AAAA,EACtB;AACF;","names":[]}

package/dist/webhook.d.cts

@@ -1,186 +1,27 @@
-import { C as Collection } from './const-sPR2IkCe.cjs';
-import { C as CollectionType } from './types-B3YT092I.cjs';
-import './payload-types-dkeQyrDC.cjs';
+export { C as COMMERCE_NOTIFICATION_EVENTS, a as COMMERCE_NOTIFICATION_EVENT_TYPE, b as COMMERCE_NOTIFICATION_OPERATION, c as CUSTOMER_PASSWORD_RESET_OPERATION, d as CollectionWebhookOperation, e as CommerceEmailChannel, f as CommerceEmailConfig, g as CommerceEmailEventConfig, h as CommerceEmailEventHandlers, i as CommerceEmailHandlerContext, j as CommerceNotification, k as CommerceNotificationData, l as CommerceNotificationEventName, m as CommerceNotificationSource, n as CommerceNotificationSourceCollection, o as CommerceNotificationWebhookEvent, p as CustomerAuthWebhookEvent, q as CustomerAuthWebhookHandlers, r as CustomerPasswordResetWebhookData, s as CustomerPasswordResetWebhookEvent, O as ORDER_CHANGED_EVENT_TYPE, t as OrderChangedWebhookEvent, W as WebhookChange, u as WebhookCommerceNotificationChange, v as WebhookEvent, w as WebhookHandler, x as WebhookKnownOperation, y as WebhookOperation, z as WebhookOptions, A as WebhookOrderChange, B as WebhookOrderMoved, D as WebhookOrderScope, E as createCommerceEmailWebhookHandler, F as createCustomerAuthWebhookHandler, G as createTypedWebhookHandler, H as defineCommerceEmailConfig, I as getCommerceNotificationIdempotencyKey, J as handleWebhook, K as isCommerceNotificationWebhookEvent, L as isCustomerPasswordResetWebhookEvent, M as isOrderChangedWebhookEvent, N as isValidWebhookEvent, P as isWebhookCollection, Q as isWebhookOperation } from './index-CjA3U6X3.cjs';
+import { W as Webhook } from './payload-types-C7tb7Xbs.cjs';
+import './const-BTvdrXtY.cjs';
+import './types-Bx558PU6.cjs';
 
-type WebhookOperation = string;
 /**
- * Semantic event type for manual Admin Panel ordering changes.
- *
- * Order-change webhooks remain `operation: "update"` events for compatibility.
- * Do not filter on or emit `operation: "reorder"`; use this event type with
- * `isOrderChangedWebhookEvent()` to distinguish ordering from normal content
- * updates.
+ * Webhook records returned from ordinary list/find — `secret` is encrypted at
+ * rest and omitted from API reads (`access.read: false` on the collection).
  */
-declare const ORDER_CHANGED_EVENT_TYPE: "collection.orderChanged";
-/** Semantic event type for v1 commerce notification webhooks. */
-declare const COMMERCE_NOTIFICATION_EVENT_TYPE: "commerce.notification";
-/** Collection webhook operations emitted for tenant collection writes. */
-type CollectionWebhookOperation = 'create' | 'update';
-/** Describes the ordered area affected by an order-change webhook. */
-type WebhookOrderScope = {
-    kind: 'collection';
-    collection: string;
-} | {
-    kind: 'join';
-    collection: string;
-    field: string;
-    id: string | number;
-};
-/** Identifies the public moved document for the ordered scope. */
-type WebhookOrderMoved = {
-    collection: string;
-    id: string | number;
-    relatedCollection?: string;
-    relatedId?: string | number;
-};
-/** Metadata attached to `collection.orderChanged` webhook events. */
-type WebhookOrderChange = {
-    type: 'order';
-    source: 'payload-orderable';
-    /**
-     * Diagnostic Payload order field name.
-     *
-     * This may contain hidden implementation field names. Application routing
-     * should use `change.scope` and `change.moved` instead.
-     */
-    orderableFieldName?: string;
-    previousOrder?: string | null;
-    nextOrder?: string | null;
-    scope: WebhookOrderScope;
-    moved: WebhookOrderMoved;
-};
-/** Known semantic webhook change metadata. */
-type WebhookChange = WebhookOrderChange | WebhookCommerceNotificationChange;
-interface WebhookEvent<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> {
-    collection: T;
-    operation: WebhookOperation;
-    data: TData;
-    eventType?: string;
-    change?: unknown;
-    timestamp?: string;
-    deliveryId?: string;
-}
-type WebhookHandler<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> = (event: WebhookEvent<T, TData>) => Promise<void> | void;
-interface WebhookOptions {
-    secret?: string;
-    /** Max accepted skew for signed webhook delivery timestamps. Default: 300s. */
-    toleranceSeconds?: number;
-}
-declare function isValidWebhookEvent(data: unknown): data is WebhookEvent;
-/** Webhook event emitted when manual Admin Panel ordering changes. */
-type OrderChangedWebhookEvent<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>> = WebhookEvent<T, TData> & {
-    operation: 'update';
-    eventType: typeof ORDER_CHANGED_EVENT_TYPE;
-    change: WebhookOrderChange;
-};
-declare const COMMERCE_NOTIFICATION_OPERATION: "notification";
-declare const COMMERCE_NOTIFICATION_EVENTS: readonly ["orderPaid", "fulfillmentShipped", "orderDelivered", "returnRequested", "returnCompleted"];
-type CommerceNotificationEventName = (typeof COMMERCE_NOTIFICATION_EVENTS)[number];
-type CommerceNotificationSourceCollection = 'orders' | 'fulfillments' | 'returns';
-type CommerceNotificationSource = {
-    collection: CommerceNotificationSourceCollection;
-    id: string | number;
-};
-type CommerceNotificationData = {
-    source?: CommerceNotificationSource;
-    orderId?: string | number;
-    orderNumber?: string;
-    status?: string;
-    totalAmount?: number;
-    currency?: string;
-    fulfillmentId?: string | number;
-    fulfillmentStatus?: string;
-    shippedAt?: string;
-    returnId?: string | number;
-    returnStatus?: string;
-    refundAmount?: number;
-    completedAt?: string;
-};
-type CommerceNotification = {
-    event: CommerceNotificationEventName;
-    intentId: string;
-    dedupeKey: string;
-    orderId?: string;
-    fulfillmentId?: string;
-    returnId?: string;
-};
-type WebhookCommerceNotificationChange = {
-    type: 'notification';
-    source: 'commerce-notifications';
-    event: CommerceNotificationEventName;
-    sourceCollection: CommerceNotificationSourceCollection;
-    sourceId: string | number;
-};
-/** Webhook event emitted for v1 commerce notification deliveries. */
-type CommerceNotificationWebhookEvent = WebhookEvent<CommerceNotificationSourceCollection, CommerceNotificationData> & {
-    operation: typeof COMMERCE_NOTIFICATION_OPERATION;
-    eventType: typeof COMMERCE_NOTIFICATION_EVENT_TYPE;
-    change?: WebhookCommerceNotificationChange;
-    notification: CommerceNotification;
-};
-type CommerceEmailChannel = 'webhook' | 'provider';
-type CommerceEmailEventConfig = {
-    enabled: boolean;
-    channel: CommerceEmailChannel;
-    template?: string;
-};
-type CommerceEmailConfig = {
-    version: 1;
-    commerceNotifications: Partial<Record<CommerceNotificationEventName, CommerceEmailEventConfig>>;
-};
-type CommerceEmailHandlerContext = {
-    event: CommerceNotificationWebhookEvent;
-    idempotencyKey: string;
-};
-type MaybePromise<T> = T | Promise<T>;
-type CommerceEmailEventHandlers = Partial<Record<CommerceNotificationEventName, (context: CommerceEmailHandlerContext) => MaybePromise<void>>> & {
-    unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>;
-};
-/**
- * Returns true for semantic order-change webhooks emitted as update events.
- *
- * Use this guard with `ORDER_CHANGED_EVENT_TYPE` instead of filtering on
- * `operation: "reorder"`. Tenant order-change webhooks intentionally keep
- * `operation: "update"` for compatibility with existing webhook handlers.
- */
-declare function isOrderChangedWebhookEvent(event: unknown): event is OrderChangedWebhookEvent<string, unknown>;
+type WebhookWithoutSecret = Omit<Webhook, 'secret'>;
 /**
- * Returns true for semantic commerce notification webhooks.
- *
- * Use `notification.intentId` and `notification.dedupeKey` for semantic
- * idempotency. `deliveryId`, when present, identifies a delivery attempt for
- * observability and is not the semantic notification identity.
+ * One-time plaintext signing secret from Console reveal/rotate Admin actions.
+ * Persists audit metadata on the webhook document as `secretRevealedAt` /
+ * `secretRotatedAt` / `secretRotatedBy` (not returned in this JSON body).
  */
-declare function isCommerceNotificationWebhookEvent(event: unknown): event is CommerceNotificationWebhookEvent;
-declare function getCommerceNotificationIdempotencyKey(event: Pick<CommerceNotificationWebhookEvent, 'notification'>): string;
-declare function defineCommerceEmailConfig<TConfig extends CommerceEmailConfig>(config: TConfig): TConfig;
-declare function createCommerceEmailWebhookHandler(handlers: CommerceEmailEventHandlers): WebhookHandler<string, unknown>;
-/** Narrows a webhook event to a specific collection. */
-declare function isWebhookCollection<TCollection extends string>(event: unknown, collection: TCollection): event is WebhookEvent<TCollection, unknown>;
-/** Narrows a webhook event to a specific operation. */
-declare function isWebhookOperation<TOperation extends string>(event: unknown, operation: TOperation): event is WebhookEvent<string, unknown> & {
-    operation: TOperation;
-};
-declare const CUSTOMER_PASSWORD_RESET_OPERATION: "password-reset";
-type WebhookKnownOperation = CollectionWebhookOperation | typeof CUSTOMER_PASSWORD_RESET_OPERATION | typeof COMMERCE_NOTIFICATION_OPERATION;
-interface CustomerPasswordResetWebhookData {
-    customerId: string | number;
-    email: string;
-    name: string;
-    resetPasswordToken: string;
-    resetPasswordExpiresAt: string;
-}
-type CustomerPasswordResetWebhookEvent = WebhookEvent<'customers', CustomerPasswordResetWebhookData> & {
-    operation: typeof CUSTOMER_PASSWORD_RESET_OPERATION;
+type WebhookSigningSecretReveal = {
+    success: boolean;
+    webhookId: string;
+    /** Plaintext hex signing secret — copy to receiver `WEBHOOK_SECRET`. */
+    secret: string;
+    /** reveal-secret response timestamp (maps to `secretRevealedAt` on save). */
+    revealedAt?: string;
+    /** rotate-secret response timestamp (maps to `secretRotatedAt` on save). */
+    rotatedAt?: string;
 };
-type CustomerAuthWebhookEvent = CustomerPasswordResetWebhookEvent;
-interface CustomerAuthWebhookHandlers {
-    passwordReset?: (data: CustomerPasswordResetWebhookData, event: CustomerPasswordResetWebhookEvent) => MaybePromise<void>;
-    unhandled?: (event: WebhookEvent<string, unknown>) => MaybePromise<void>;
-}
-declare function isCustomerPasswordResetWebhookEvent(event: WebhookEvent<string, unknown>): event is CustomerPasswordResetWebhookEvent;
-declare function createCustomerAuthWebhookHandler(handlers: CustomerAuthWebhookHandlers): WebhookHandler<string, unknown>;
-declare function handleWebhook<T extends Collection | string = Collection, TData = T extends Collection ? CollectionType<T> : Record<string, unknown>>(request: Request, handler: WebhookHandler<T, TData>, options?: WebhookOptions): Promise<Response>;
-declare function createTypedWebhookHandler<T extends Collection>(collection: T, handler: (event: WebhookEvent<T>) => Promise<void> | void): WebhookHandler<T>;
 
-export { COMMERCE_NOTIFICATION_EVENTS, COMMERCE_NOTIFICATION_EVENT_TYPE, COMMERCE_NOTIFICATION_OPERATION, CUSTOMER_PASSWORD_RESET_OPERATION, type CollectionWebhookOperation, type CommerceEmailChannel, type CommerceEmailConfig, type CommerceEmailEventConfig, type CommerceEmailEventHandlers, type CommerceEmailHandlerContext, type CommerceNotification, type CommerceNotificationData, type CommerceNotificationEventName, type CommerceNotificationSource, type CommerceNotificationSourceCollection, type CommerceNotificationWebhookEvent, type CustomerAuthWebhookEvent, type CustomerAuthWebhookHandlers, type CustomerPasswordResetWebhookData, type CustomerPasswordResetWebhookEvent, ORDER_CHANGED_EVENT_TYPE, type OrderChangedWebhookEvent, type WebhookChange, type WebhookCommerceNotificationChange, type WebhookEvent, type WebhookHandler, type WebhookKnownOperation, type WebhookOperation, type WebhookOptions, type WebhookOrderChange, type WebhookOrderMoved, type WebhookOrderScope, createCommerceEmailWebhookHandler, createCustomerAuthWebhookHandler, createTypedWebhookHandler, defineCommerceEmailConfig, getCommerceNotificationIdempotencyKey, handleWebhook, isCommerceNotificationWebhookEvent, isCustomerPasswordResetWebhookEvent, isOrderChangedWebhookEvent, isValidWebhookEvent, isWebhookCollection, isWebhookOperation };
+export type { WebhookSigningSecretReveal, WebhookWithoutSecret };