@01.software/sdk 0.49.0 → 0.51.0

package/dist/{types-Du4s5anw.d.ts → types-CM5qiR2k.d.cts}

@@ -1,6 +1,6 @@
-import { P as PublicCollection, C as Collection, S as ServerCollection } from './const-DCNV5Kq7.js';
-import { C as CollectionType, a as PublicProduct, P as PublicMarket } from './types-L_nh-ED7.js';
-import { O as Order, k as Transaction, l as Fulfillment, R as Return } from './payload-types-MKbx5MuJ.js';
+import { P as PublicCollection, C as Collection, S as ServerCollection } from './const-D8LixhAJ.cjs';
+import { C as CollectionType, a as PublicProduct, P as PublicMarket } from './types-B14sEt1z.cjs';
+import { O as Order, k as Transaction, l as Fulfillment, R as Return } from './payload-types-BOsckg8B.cjs';
 
 declare const operationBrand: unique symbol;
 type HttpOperation = {
@@ -9,27 +9,15 @@ type HttpOperation = {
     readonly method: 'get' | 'post' | 'patch' | 'delete';
     readonly path: `/${string}`;
     readonly errorFamily?: 'commerce';
+    /**
+     * Canonical commerce reasons emitted by an otherwise legacy-compatible
+     * endpoint. Only these responses may be normalized and parsed as the strict
+     * commerce envelope; every other response retains its established shape.
+     */
+    readonly typedCommerceErrorReasons?: readonly string[];
 };
 
-/**
- * Single source of truth for the commerce HTTP paths the SDK calls.
- *
- * Console exposes these as `slug + Endpoint.path` on collection configs; the SDK
- * has to hardcode the joined `/api/<slug>/<path>` because it cannot import the
- * Console at build time. To stop a Console path change from silently turning into
- * a runtime 404, non-quarantined values are cross-checked against live Console
- * endpoint registration by `apps/console/tests/unit/sdk/endpoint-parity.test.ts`.
- * That test also records canonical Phase 1 operations whose route is absent or
- * whose same-path legacy handler is not yet contract-compatible; registration
- * alone must never be interpreted as transport parity.
- *
- * Keep this internal — it is the transport contract, not public SDK surface.
- */
-type CanonicalCommerceEndpointDescriptor = {
-    readonly method: 'GET' | 'POST' | 'PATCH' | 'DELETE';
-    readonly path: string;
-};
-type CommerceEndpointDescriptor = CanonicalCommerceEndpointDescriptor | HttpOperation;
+type CommerceEndpointDescriptor = HttpOperation;
 
 interface CustomerScopedApiOptions {
     publishableKey?: string;
@@ -380,6 +368,7 @@ interface RequestOptions {
     method?: 'GET' | 'POST' | 'PATCH' | 'DELETE';
     headers?: Record<string, string>;
     errorFamily?: 'commerce';
+    typedCommerceErrorReasons?: readonly string[];
 }
 type EndpointRequestOptions = {
     headers?: Record<string, string>;
@@ -816,6 +805,7 @@ type ReturnWithRefundParams = WithIdempotencyKey<{
     initialShippingRefundOverrideNote?: string;
     pgPaymentId: string;
     paymentKey?: string;
+    /** Canonical trimmed receipt URL; the server rejects values over 2048 characters. */
     refundReceiptUrl?: string;
 }>;
 type CreateFulfillmentParams = WithIdempotencyKey<{
@@ -2359,6 +2349,16 @@ type RetrieveBrowserPaymentSessionParams = {
 type RetrieveServerPaymentSessionParams = {
     paymentSessionId: string;
 };
+type PortOnePaymentSelector = {
+    provider: 'portone';
+    providerAccountKey: string;
+    environment: 'test' | 'live';
+    providerPaymentId: string;
+};
+type FindPortOnePaymentParams = PortOnePaymentSelector;
+type ReconcilePortOnePaymentParams = PortOnePaymentSelector & {
+    idempotencyKey: string;
+};
 type CancelBrowserPaymentSessionParams = RetrieveBrowserPaymentSessionParams & {
     idempotencyKey: string;
 };
@@ -2404,6 +2404,44 @@ type RetrievedCustomPaymentSession = {
     money: Money;
     orderId: string | null;
 };
+type PortOnePaymentCurrentState = {
+    paymentSession: {
+        id: string;
+        provider: 'portone';
+        providerStatus: PaymentProviderStatus;
+        finalizationStatus: 'not_ready' | 'pending' | 'committed';
+        sessionRole: PaymentSessionRole;
+        reconciliation: {
+            status: 'none';
+        } | {
+            status: 'required';
+            reasons: readonly PaymentReconciliationReason[];
+        };
+    };
+    checkout: {
+        id: string;
+    };
+    order: {
+        id: string;
+        orderNumber: string;
+    } | null;
+    money: Money;
+};
+type FindPortOnePaymentResult = {
+    found: false;
+} | {
+    found: true;
+    current: PortOnePaymentCurrentState;
+};
+type PortOneReconciliationDisposition = 'applied' | 'observed' | 'recovered_after_ambiguous_result' | 'requires_attention';
+type ReconcilePortOnePaymentResult = {
+    found: false;
+    disposition: 'requires_attention';
+} | {
+    found: true;
+    disposition: PortOneReconciliationDisposition;
+    current: PortOnePaymentCurrentState;
+};
 type ConfirmCustomPaymentSessionParams = {
     provider: string;
     providerSessionId: string;
@@ -2453,6 +2491,10 @@ type PortOnePaymentNextAction = {
 type PortOneSdkPaymentNextAction = {
     type: 'portone_sdk';
     version: 'v2';
+    /** Standard V2 actions cannot release their Checkout payment slot. */
+    cancelable: false;
+    /** Retry only this exact action and payment ID; never start a sibling session. */
+    retryPolicy: 'same_action_only';
     storeId: string;
     channelKey: string;
     paymentId: string;
@@ -2634,6 +2676,12 @@ declare class PaymentSessionApi extends CustomerScopedApi {
     cancelPortOne(params: CancelBrowserPaymentSessionParams | CancelServerPaymentSessionParams): Promise<PortOnePublicPaymentSession>;
     confirm(params: ConfirmTossPaymentSessionParams): Promise<PublicPaymentSession>;
 }
+/** Server-only facade over the managed PortOne local/convergence engine. */
+declare class PortOnePaymentReconciliationApi extends BaseApi {
+    constructor(options: ServerApiOptions);
+    find(params: FindPortOnePaymentParams): Promise<FindPortOnePaymentResult>;
+    reconcile(params: ReconcilePortOnePaymentParams): Promise<ReconcilePortOnePaymentResult>;
+}
 
 interface CommerceClientOptions {
     publishableKey: string;
@@ -2846,6 +2894,8 @@ declare class ServerCommerceClient {
         cancel: (params: CancelServerPaymentSessionParams) => Promise<PublicPaymentSession>;
         cancelPortOne: (params: CancelServerPaymentSessionParams) => Promise<PortOnePublicPaymentSession>;
         confirm: (params: ConfirmTossPaymentSessionParams) => Promise<PublicPaymentSession>;
+        findPortOne: (params: FindPortOnePaymentParams) => Promise<FindPortOnePaymentResult>;
+        reconcilePortOne: (params: ReconcilePortOnePaymentParams) => Promise<ReconcilePortOnePaymentResult>;
         custom: {
             create: (params: CreateCustomPaymentSessionParams) => Promise<CustomPaymentSession>;
             retrieve: (params: RetrieveCustomPaymentSessionParams) => Promise<RetrievedCustomPaymentSession>;
@@ -2930,6 +2980,8 @@ interface EventsRangeEvent {
     endsAt?: string | null;
     timezone?: string | null;
     isAllDay: boolean;
+    allDayStartDate?: string | null;
+    allDayEndDateExclusive?: string | null;
     visibility?: string | null;
     sourceType?: string | null;
     registrationPolicy?: string | null;
@@ -2947,6 +2999,8 @@ interface EventsRangeOccurrence {
     endsAt?: string | null;
     timezone?: string | null;
     isAllDay: boolean;
+    allDayStartDate?: string | null;
+    allDayEndDateExclusive?: string | null;
     status?: string | null;
     capacity?: number;
     registrationCount?: number;
@@ -3233,6 +3287,8 @@ interface TenantIntrospectionClient {
     collectionSchema: (collection: string) => Promise<CollectionSchemaResponse>;
     featureProgress: (params: TenantFeatureProgressInput) => Promise<TenantFeatureProgressResponse>;
 }
+/** Canonical tenant-context transport identity shared by SDK-backed callers. */
+declare const TENANT_CONTEXT_PATH = "/api/tenants/context";
 declare class TenantIntrospectionApi extends RawBaseApi implements TenantIntrospectionClient {
     constructor(options: TenantIntrospectionApiOptions);
     context(params?: TenantContextInput): Promise<TenantContextResponse>;
@@ -3554,4 +3610,4 @@ type DeepPartial<T> = {
 };
 type ExtractArrayType<T> = T extends (infer U)[] ? U : never;
 
-export { type PublicAttribute as $, type AddItemParams as A, type CreatePaymentSessionParams as B, CommerceClient as C, type CreatePortOnePaymentSessionParams as D, EventsClient as E, type CustomerSnapshot as F, type DebugConfig as G, type DeepPartial as H, type ExtractArrayType as I, type MembershipStatus as J, type Money as K, type PayloadMutationResponse as L, MarketDiscovery as M, type PaymentFailureReason as N, type OpenCheckoutPaymentState as O, type PayloadFindResponse as P, type PaymentNextAction as Q, type PaymentProviderStatus as R, type PaymentReconciliationReason as S, type PaymentSessionRole as T, type PortOneHostedPaymentMethod as U, type PortOnePaymentNextAction as V, type PortOnePublicPaymentSession as W, type ProductUpsertInput as X, type ProductUpsertParams as Y, type ProductUpsertResponse as Z, type ProductUpsertVariantInput as _, CommunityClient as a, type CollectionSchemaResponse as a$, type PublicCaptureEvidence as a0, type PublicCart as a1, type PublicCartItem as a2, type PublicCartItemAdmission as a3, type PublicCartMarket as a4, type PublicCartReference as a5, type PublicCheckout as a6, type PublicCheckoutItem as a7, type PublicMediaAsset as a8, type PublicMediaSize as a9, type UpdateDiscountCodesParams as aA, type UpdateItemParams as aB, type VariantInput as aC, type Where as aD, RawBaseApi as aE, type ServerApiOptions as aF, ServerCommerceClient as aG, type TenantIntrospectionClient as aH, type SubscribeMembershipParams as aI, type SubscribeMembershipResponse as aJ, type BanCustomerParams as aK, type CommunityBan as aL, type UnbanCustomerParams as aM, type ClientServerConfig as aN, type RootServerClientWithEvents as aO, type CancelServerPaymentSessionParams as aP, CartApi as aQ, type CartApiOptions as aR, CheckoutApi as aS, type CheckoutApiOptions as aT, type CheckoutListItem as aU, type CheckoutQueryParams as aV, type CheckoutQueryResult as aW, type CheckoutStatus as aX, type CollectionCustomFieldDefinition as aY, type CollectionCustomFields as aZ, type CollectionFieldSchema as a_, type PublicOrder as aa, type PublicOrderAmounts as ab, type PublicOrderItem as ac, type PublicOrderReference as ad, type PublicPaymentSession as ae, type ReconciliationRequired as af, type RemoveItemParams as ag, type RetrieveBrowserPaymentSessionParams as ah, type RetrieveCartParams as ai, type RetrieveCheckoutParams as aj, type RetryConfig as ak, type RootClient as al, type RootCollectionClient as am, type RootReadOnlyQueryBuilder as an, type ShippingLine as ao, type Sort as ap, type SpentCheckoutPaymentState as aq, type StorefrontContentListOptions as ar, type StorefrontContentReference as as, type StorefrontGalleryItem as at, type StorefrontGalleryItemsListOptions as au, type StorefrontGalleryItemsSort as av, type StorefrontLink as aw, type StorefrontLinksListOptions as ax, type StorefrontLinksSort as ay, type UpdateCartAttributesParams as az, ContentClient as b, type CustomerLoginData as b$, type ConfirmCustomPaymentSessionOptions as b0, type ConfirmCustomPaymentSessionParams as b1, type ConfirmCustomPaymentSessionResponse as b2, type ConfirmTossPaymentSessionParams as b3, type CreateCustomPaymentSessionParams as b4, type CreateServerCheckoutParams as b5, type CreateServerCheckoutResult as b6, type CustomPaymentSession as b7, type CustomPaymentSessionProof as b8, type EventAdmissionAvailabilityParams as b9, type RetrieveServerCheckoutParams as bA, type RetrieveServerPaymentSessionParams as bB, type RetrievedCustomPaymentSession as bC, type RootServerClient as bD, type ServerCartMergeParams as bE, type ServerCartMineParams as bF, type ServerCheckout as bG, type TenantContextInput as bH, type TenantContextResponse as bI, type TenantCustomFieldType as bJ, type TenantFeatureProgressEvidenceValue as bK, type TenantFeatureProgressFeature as bL, type TenantFeatureProgressGroup as bM, type TenantFeatureProgressInput as bN, type TenantFeatureProgressItem as bO, type TenantFeatureProgressItemState as bP, type TenantFeatureProgressResponse as bQ, type TenantFeatureProgressSeverity as bR, type TenantFeatureProgressStatus as bS, type TenantFieldConfigState as bT, TenantIntrospectionApi as bU, type TenantIntrospectionApiOptions as bV, type ApiDeleteOptions as bW, type PublicReadQueryOptions as bX, CustomerAuth as bY, type CustomerProfile as bZ, type CustomerAuthResponse as b_, type EventAdmissionAvailabilityResponse as ba, type EventAdmissionAvailabilityType as bb, type EventAdmissionPricePresentment as bc, type EventGuestCancelParams as bd, type EventGuestRegistration as be, type EventGuestRegistrationResponse as bf, type EventRegistrationAnswerInput as bg, type EventRegistrationAttendeeInput as bh, type EventRegistrationPublic as bi, type EventRegistrationRegisterParams as bj, type EventRegistrationRegisterResponse as bk, type EventsCalendarItem as bl, type EventsClientOptions as bm, type EventsDateParam as bn, type EventsExternalSource as bo, type EventsLocation as bp, type EventsOccurrenceLocation as bq, type EventsRangeEvent as br, type EventsRangeOccurrence as bs, type EventsRangeParams as bt, type EventsRangeResponse as bu, type EventsTaxonomyItem as bv, ModerationApi as bw, PaymentSessionApi as bx, type PaymentSessionApiOptions as by, type RetrieveCustomPaymentSessionParams as bz, CustomerNamespace as c, MAX_CART_LINE_ADMISSIONS as c$, type CustomerRegisterResponse as c0, type CustomerRegisterData as c1, type CustomerRefreshResponse as c2, type UpdateProfileData as c3, type ProductListingPageParams as c4, type ProductListingPageBaseParams as c5, type ProductDetailParams as c6, type ProductDetailCatalogResult as c7, type ProductListingPageCatalogParams as c8, type ProductListingPageResult as c9, type CommunityComment as cA, type CommunityCommentListSort as cB, type CommunityPost as cC, type CommunityPostCategory as cD, type CommunityPostListSort as cE, type CommunityPostTag as cF, type CommunityPublicAuthorSnapshot as cG, type CommunityPublicMediaAsset as cH, type CommunityPublicReference as cI, type CompatibilityProductSelectionParamEvent as cJ, type CreateFulfillmentParams as cK, type CreateReturnParams as cL, type CustomerAuthOptions as cM, type CustomerAuthorizationUrlInput as cN, type CustomerAuthorizationUrlResult as cO, CustomerOAuth as cP, type CustomerOAuthCallbackResult as cQ, type CustomerOAuthConfig as cR, type CustomerOAuthTokenSet as cS, type CustomerOrderListOptions as cT, DiscountApi as cU, type DiscountApiOptions as cV, type DiscountErrorReasonCode as cW, type FeaturedImagePointerInput as cX, type GetOrderByPaymentIdParams as cY, type LegacyProductSelectionParamEvent as cZ, type ListingGroupsParams as c_, type ProductListingGroupsCatalogItem as ca, type ProductListingPageFullParams as cb, type ProductListingGroupsItem as cc, BaseApi as cd, type ProductDetail as ce, type ProductDetailCatalog as cf, type StockSnapshotResponse as cg, type ProductSelectionMediaSource as ch, type ProductDisplayMediaSource as ci, type ResolveProductSelectionMediaInput as cj, type ResolveProductSelectionMediaResult as ck, type ProductSelectionMediaPointer as cl, type RootClientWithEvents as cm, type BulkImportFulfillmentsParams as cn, type BulkImportFulfillmentsResponse as co, type CalculateShippingParams as cp, type CalculateShippingResult as cq, type CancelOrderParams as cr, type CancelOrderResponse as cs, type CancelReasonCode as ct, type CartDiscountCode as cu, type CartWarning as cv, type CartWarningCode as cw, type Comment as cx, type CommerceClientOptions as cy, type CommunityClientOptions as cz, type CustomerMembershipView as d, type ProductOptionShape as d$, type ManagedPaymentNextAction as d0, type ManagedPublicPaymentSession as d1, type MarketDTO as d2, type MediaValue as d3, type NormalizedOptionSwatch as d4, type NormalizedProductSelection as d5, OrderApi as d6, type OrderApiOptions as d7, type OrderByPaymentResult as d8, PRODUCT_PLP_FIND_OPTIONS as d9, type ProductListingCardOptions as dA, type ProductListingCardPriceRange as dB, type ProductListingCardRepresentativeVariant as dC, type ProductListingGroup as dD, type ProductListingGroupCatalogSummary as dE, type ProductListingGroupCatalogVariant as dF, type ProductListingGroupProjection as dG, type ProductListingGroupSummary as dH, type ProductListingGroupVariant as dI, type ProductListingGroupsCatalogProduct as dJ, type ProductListingGroupsCatalogResponse as dK, type ProductListingGroupsProduct as dL, type ProductListingGroupsResponse as dM, type ProductListingPageFilters as dN, type ProductListingPageSort as dO, type ProductListingProductShape as dP, type ProductListingSwatch as dQ, type ProductLocaleOption as dR, type ProductLocaleReadParams as dS, type ProductLocalizedText as dT, type ProductLocalizedValue as dU, type ProductMediaResolutionSource as dV, type ProductMoneyRange as dW, type ProductOptionMatrix as dX, type ProductOptionMatrixOption as dY, type ProductOptionMatrixValue as dZ, type ProductOptionMatrixVariant as d_, PRODUCT_UPSERT_READONLY_FIELD_REASON as da, PRODUCT_UPSERT_UNKNOWN_FIELD_REASON as db, type PrepareFulfillmentOrderParams as dc, type PrepareFulfillmentOrderResponse as dd, ProductApi as de, type ProductApiOptions as df, type ProductDetailBrand as dg, type ProductDetailCatalogVariant as dh, type ProductDetailCategory as di, type ProductDetailImage as dj, type ProductDetailImageMedia as dk, type ProductDetailMedia as dl, type ProductDetailOption as dm, type ProductDetailOptionValue as dn, type ProductDetailResult as dp, type ProductDetailTag as dq, type ProductDetailUnavailableReason as dr, type ProductDetailVariant as ds, type ProductDetailVariantOptionValue as dt, type ProductDetailVideo as du, type ProductFallbackLocaleOption as dv, type ProductHrefGroup as dw, type ProductHrefOptions as dx, type ProductHrefProduct as dy, type ProductListingCard as dz, type CancelMembershipParams as e, projectProductToListingShape as e$, type ProductOptionValueShape as e0, type ProductOptionValueSwatch as e1, type ProductOptionValueSwatchInput as e2, type ProductPriceRange as e3, type ProductSelectionAvailableSwatch as e4, type ProductSelectionAvailableValue as e5, type ProductSelectionByOptionValue as e6, ProductSelectionCodecError as e7, type ProductSelectionCodecOptions as e8, type ProductSelectionInput as e9, type StockCheckResponse as eA, type StockCheckResult as eB, type StockSnapshotItem as eC, type StockSnapshotParams as eD, type UpdateFulfillmentParams as eE, type UpdateOrderParams as eF, type UpdateReturnParams as eG, type ValidateDiscountParams as eH, type ValidateDiscountResult as eI, type WithIdempotencyKey as eJ, buildProductHref as eK, buildProductListingCard as eL, buildProductListingGroupProjection as eM, buildProductListingGroupsByOption as eN, buildProductOptionMatrix as eO, buildProductOptionMatrixFromDetail as eP, createProductSelectionCodec as eQ, getAvailableOptionValues as eR, getProductSelectionImages as eS, getSelectedValueByOptionId as eT, getVariantAvailableForSale as eU, getVariantAvailableStock as eV, isProductUpsertFieldValidationErrorBody as eW, normalizeProductSelection as eX, normalizeProductSelectionFromMatrix as eY, normalizeSelectedValueIds as eZ, parseProductSelection as e_, type ProductSelectionOptionValue as ea, type ProductSelectionResolution as eb, type ProductSelectionResolutionContext as ec, type ProductSelectionUrlEmit as ed, type ProductSelectionVariant$1 as ee, type ProductUpsertFieldValidationErrorBody as ef, type ProductUpsertFieldValidationErrorReason as eg, type ProductVariantShape as eh, type PublicCheckoutBase as ei, type RequestOptions as ej, type ResolveCancelRefundFailedResponse as ek, type ResolveCancelRefundOutcome as el, type ResolveCancelRefundParams as em, type ResolveCancelRefundResponse as en, type ResolveCancelRefundSucceededResponse as eo, type ResolveProductDisplayMediaInput as ep, type ResolveProductDisplayMediaResult as eq, type ResolvedCatalogPrice as er, type ReturnCancellationReasonCode as es, type ReturnItem as et, type ReturnReason as eu, type ReturnWithRefundItem as ev, type ReturnWithRefundParams as ew, ShippingApi as ex, type ShippingApiOptions as ey, type StockCheckParams as ez, type CancelMembershipResponse as f, resolveFeaturedImagePointer as f0, resolveProductDisplayMedia as f1, resolveProductSelection as f2, resolveProductSelectionFromMatrix as f3, resolveProductSelectionMedia as f4, resolveVariantForSelection as f5, selectNext as f6, selectedSwatchMediaItemId as f7, stringifyProductSelection as f8, toShopifyPriceRangeV2 as f9, type ClientState as g, type ClientConfig as h, type ApiQueryOptions as i, type CancelBrowserPaymentSessionParams as j, type CartMergeParams as k, type CartMergeResult as l, type CartMineResult as m, type CartMutationResult as n, type CheckoutAbandonedReason as o, type CheckoutAmounts as p, type CheckoutOrderReference as q, type CheckoutPaymentSessionRef as r, type CheckoutShippingAddress as s, type ClearCartParams as t, type ClientMetadata as u, type ContentClientOptions as v, type CreateCartParams as w, type CreateCartResult as x, type CreateCheckoutParams as y, type CreateCheckoutResult as z };
+export { type PublicAttribute as $, type AddItemParams as A, type CreatePaymentSessionParams as B, CommerceClient as C, type CreatePortOnePaymentSessionParams as D, EventsClient as E, type CustomerSnapshot as F, type DebugConfig as G, type DeepPartial as H, type ExtractArrayType as I, type MembershipStatus as J, type Money as K, type PayloadMutationResponse as L, MarketDiscovery as M, type PaymentFailureReason as N, type OpenCheckoutPaymentState as O, type PayloadFindResponse as P, type PaymentNextAction as Q, type PaymentProviderStatus as R, type PaymentReconciliationReason as S, type PaymentSessionRole as T, type PortOneHostedPaymentMethod as U, type PortOnePaymentNextAction as V, type PortOnePublicPaymentSession as W, type ProductUpsertInput as X, type ProductUpsertParams as Y, type ProductUpsertResponse as Z, type ProductUpsertVariantInput as _, CommunityClient as a, type CollectionSchemaResponse as a$, type PublicCaptureEvidence as a0, type PublicCart as a1, type PublicCartItem as a2, type PublicCartItemAdmission as a3, type PublicCartMarket as a4, type PublicCartReference as a5, type PublicCheckout as a6, type PublicCheckoutItem as a7, type PublicMediaAsset as a8, type PublicMediaSize as a9, type UpdateDiscountCodesParams as aA, type UpdateItemParams as aB, type VariantInput as aC, type Where as aD, RawBaseApi as aE, type ServerApiOptions as aF, ServerCommerceClient as aG, type TenantIntrospectionClient as aH, type SubscribeMembershipParams as aI, type SubscribeMembershipResponse as aJ, type BanCustomerParams as aK, type CommunityBan as aL, type UnbanCustomerParams as aM, type ClientServerConfig as aN, type RootServerClientWithEvents as aO, type CancelServerPaymentSessionParams as aP, CartApi as aQ, type CartApiOptions as aR, CheckoutApi as aS, type CheckoutApiOptions as aT, type CheckoutListItem as aU, type CheckoutQueryParams as aV, type CheckoutQueryResult as aW, type CheckoutStatus as aX, type CollectionCustomFieldDefinition as aY, type CollectionCustomFields as aZ, type CollectionFieldSchema as a_, type PublicOrder as aa, type PublicOrderAmounts as ab, type PublicOrderItem as ac, type PublicOrderReference as ad, type PublicPaymentSession as ae, type ReconciliationRequired as af, type RemoveItemParams as ag, type RetrieveBrowserPaymentSessionParams as ah, type RetrieveCartParams as ai, type RetrieveCheckoutParams as aj, type RetryConfig as ak, type RootClient as al, type RootCollectionClient as am, type RootReadOnlyQueryBuilder as an, type ShippingLine as ao, type Sort as ap, type SpentCheckoutPaymentState as aq, type StorefrontContentListOptions as ar, type StorefrontContentReference as as, type StorefrontGalleryItem as at, type StorefrontGalleryItemsListOptions as au, type StorefrontGalleryItemsSort as av, type StorefrontLink as aw, type StorefrontLinksListOptions as ax, type StorefrontLinksSort as ay, type UpdateCartAttributesParams as az, ContentClient as b, type TenantFeatureProgressStatus as b$, type ConfirmCustomPaymentSessionOptions as b0, type ConfirmCustomPaymentSessionParams as b1, type ConfirmCustomPaymentSessionResponse as b2, type ConfirmTossPaymentSessionParams as b3, type CreateCustomPaymentSessionParams as b4, type CreateServerCheckoutParams as b5, type CreateServerCheckoutResult as b6, type CustomPaymentSession as b7, type CustomPaymentSessionProof as b8, type EventAdmissionAvailabilityParams as b9, type PaymentSessionApiOptions as bA, type PortOnePaymentCurrentState as bB, PortOnePaymentReconciliationApi as bC, type PortOnePaymentSelector as bD, type PortOneReconciliationDisposition as bE, type ReconcilePortOnePaymentParams as bF, type ReconcilePortOnePaymentResult as bG, type RetrieveCustomPaymentSessionParams as bH, type RetrieveServerCheckoutParams as bI, type RetrieveServerPaymentSessionParams as bJ, type RetrievedCustomPaymentSession as bK, type RootServerClient as bL, type ServerCartMergeParams as bM, type ServerCartMineParams as bN, type ServerCheckout as bO, TENANT_CONTEXT_PATH as bP, type TenantContextInput as bQ, type TenantContextResponse as bR, type TenantCustomFieldType as bS, type TenantFeatureProgressEvidenceValue as bT, type TenantFeatureProgressFeature as bU, type TenantFeatureProgressGroup as bV, type TenantFeatureProgressInput as bW, type TenantFeatureProgressItem as bX, type TenantFeatureProgressItemState as bY, type TenantFeatureProgressResponse as bZ, type TenantFeatureProgressSeverity as b_, type EventAdmissionAvailabilityResponse as ba, type EventAdmissionAvailabilityType as bb, type EventAdmissionPricePresentment as bc, type EventGuestCancelParams as bd, type EventGuestRegistration as be, type EventGuestRegistrationResponse as bf, type EventRegistrationAnswerInput as bg, type EventRegistrationAttendeeInput as bh, type EventRegistrationPublic as bi, type EventRegistrationRegisterParams as bj, type EventRegistrationRegisterResponse as bk, type EventsCalendarItem as bl, type EventsClientOptions as bm, type EventsDateParam as bn, type EventsExternalSource as bo, type EventsLocation as bp, type EventsOccurrenceLocation as bq, type EventsRangeEvent as br, type EventsRangeOccurrence as bs, type EventsRangeParams as bt, type EventsRangeResponse as bu, type EventsTaxonomyItem as bv, type FindPortOnePaymentParams as bw, type FindPortOnePaymentResult as bx, ModerationApi as by, PaymentSessionApi as bz, CustomerNamespace as c, type FeaturedImagePointerInput as c$, type TenantFieldConfigState as c0, TenantIntrospectionApi as c1, type TenantIntrospectionApiOptions as c2, type ApiDeleteOptions as c3, type PublicReadQueryOptions as c4, CustomerAuth as c5, type CustomerProfile as c6, type CustomerAuthResponse as c7, type CustomerLoginData as c8, type CustomerRegisterResponse as c9, type CartWarningCode as cA, type Comment as cB, type CommerceClientOptions as cC, type CommunityClientOptions as cD, type CommunityComment as cE, type CommunityCommentListSort as cF, type CommunityPost as cG, type CommunityPostCategory as cH, type CommunityPostListSort as cI, type CommunityPostTag as cJ, type CommunityPublicAuthorSnapshot as cK, type CommunityPublicMediaAsset as cL, type CommunityPublicReference as cM, type CompatibilityProductSelectionParamEvent as cN, type CreateFulfillmentParams as cO, type CreateReturnParams as cP, type CustomerAuthOptions as cQ, type CustomerAuthorizationUrlInput as cR, type CustomerAuthorizationUrlResult as cS, CustomerOAuth as cT, type CustomerOAuthCallbackResult as cU, type CustomerOAuthConfig as cV, type CustomerOAuthTokenSet as cW, type CustomerOrderListOptions as cX, DiscountApi as cY, type DiscountApiOptions as cZ, type DiscountErrorReasonCode as c_, type CustomerRegisterData as ca, type CustomerRefreshResponse as cb, type UpdateProfileData as cc, type ProductListingPageParams as cd, type ProductListingPageBaseParams as ce, type ProductDetailParams as cf, type ProductDetailCatalogResult as cg, type ProductListingPageCatalogParams as ch, type ProductListingPageResult as ci, type ProductListingGroupsCatalogItem as cj, type ProductListingPageFullParams as ck, type ProductListingGroupsItem as cl, BaseApi as cm, type ProductDetail as cn, type ProductDetailCatalog as co, type StockSnapshotResponse as cp, type RootClientWithEvents as cq, type BulkImportFulfillmentsParams as cr, type BulkImportFulfillmentsResponse as cs, type CalculateShippingParams as ct, type CalculateShippingResult as cu, type CancelOrderParams as cv, type CancelOrderResponse as cw, type CancelReasonCode as cx, type CartDiscountCode as cy, type CartWarning as cz, type CustomerMembershipView as d, type ProductMoneyRange as d$, type GetOrderByPaymentIdParams as d0, type LegacyProductSelectionParamEvent as d1, type ListingGroupsParams as d2, MAX_CART_LINE_ADMISSIONS as d3, type ManagedPaymentNextAction as d4, type ManagedPublicPaymentSession as d5, type MarketDTO as d6, type MediaValue as d7, type NormalizedOptionSwatch as d8, type NormalizedProductSelection as d9, type ProductFallbackLocaleOption as dA, type ProductHrefGroup as dB, type ProductHrefOptions as dC, type ProductHrefProduct as dD, type ProductListingCard as dE, type ProductListingCardOptions as dF, type ProductListingCardPriceRange as dG, type ProductListingCardRepresentativeVariant as dH, type ProductListingGroup as dI, type ProductListingGroupCatalogSummary as dJ, type ProductListingGroupCatalogVariant as dK, type ProductListingGroupProjection as dL, type ProductListingGroupSummary as dM, type ProductListingGroupVariant as dN, type ProductListingGroupsCatalogProduct as dO, type ProductListingGroupsCatalogResponse as dP, type ProductListingGroupsProduct as dQ, type ProductListingGroupsResponse as dR, type ProductListingPageFilters as dS, type ProductListingPageSort as dT, type ProductListingProductShape as dU, type ProductListingSwatch as dV, type ProductLocaleOption as dW, type ProductLocaleReadParams as dX, type ProductLocalizedText as dY, type ProductLocalizedValue as dZ, type ProductMediaResolutionSource as d_, OrderApi as da, type OrderApiOptions as db, type OrderByPaymentResult as dc, PRODUCT_PLP_FIND_OPTIONS as dd, PRODUCT_UPSERT_READONLY_FIELD_REASON as de, PRODUCT_UPSERT_UNKNOWN_FIELD_REASON as df, type PrepareFulfillmentOrderParams as dg, type PrepareFulfillmentOrderResponse as dh, ProductApi as di, type ProductApiOptions as dj, type ProductDetailBrand as dk, type ProductDetailCatalogVariant as dl, type ProductDetailCategory as dm, type ProductDetailImage as dn, type ProductDetailImageMedia as dp, type ProductDetailMedia as dq, type ProductDetailOption as dr, type ProductDetailOptionValue as ds, type ProductDetailResult as dt, type ProductDetailTag as du, type ProductDetailUnavailableReason as dv, type ProductDetailVariant as dw, type ProductDetailVariantOptionValue as dx, type ProductDetailVideo as dy, type ProductDisplayMediaSource as dz, type CancelMembershipParams as e, getProductSelectionImages as e$, type ProductOptionMatrix as e0, type ProductOptionMatrixOption as e1, type ProductOptionMatrixValue as e2, type ProductOptionMatrixVariant as e3, type ProductOptionShape as e4, type ProductOptionValueShape as e5, type ProductOptionValueSwatch as e6, type ProductOptionValueSwatchInput as e7, type ProductPriceRange as e8, type ProductSelectionAvailableSwatch as e9, type ResolvedCatalogPrice as eA, type ReturnCancellationReasonCode as eB, type ReturnItem as eC, type ReturnReason as eD, type ReturnWithRefundItem as eE, type ReturnWithRefundParams as eF, ShippingApi as eG, type ShippingApiOptions as eH, type StockCheckParams as eI, type StockCheckResponse as eJ, type StockCheckResult as eK, type StockSnapshotItem as eL, type StockSnapshotParams as eM, type UpdateFulfillmentParams as eN, type UpdateOrderParams as eO, type UpdateReturnParams as eP, type ValidateDiscountParams as eQ, type ValidateDiscountResult as eR, type WithIdempotencyKey as eS, buildProductHref as eT, buildProductListingCard as eU, buildProductListingGroupProjection as eV, buildProductListingGroupsByOption as eW, buildProductOptionMatrix as eX, buildProductOptionMatrixFromDetail as eY, createProductSelectionCodec as eZ, getAvailableOptionValues as e_, type ProductSelectionAvailableValue as ea, type ProductSelectionByOptionValue as eb, ProductSelectionCodecError as ec, type ProductSelectionCodecOptions as ed, type ProductSelectionInput as ee, type ProductSelectionMediaPointer as ef, type ProductSelectionMediaSource as eg, type ProductSelectionOptionValue as eh, type ProductSelectionResolution as ei, type ProductSelectionResolutionContext as ej, type ProductSelectionUrlEmit as ek, type ProductSelectionVariant$1 as el, type ProductUpsertFieldValidationErrorBody as em, type ProductUpsertFieldValidationErrorReason as en, type ProductVariantShape as eo, type PublicCheckoutBase as ep, type RequestOptions as eq, type ResolveCancelRefundFailedResponse as er, type ResolveCancelRefundOutcome as es, type ResolveCancelRefundParams as et, type ResolveCancelRefundResponse as eu, type ResolveCancelRefundSucceededResponse as ev, type ResolveProductDisplayMediaInput as ew, type ResolveProductDisplayMediaResult as ex, type ResolveProductSelectionMediaInput as ey, type ResolveProductSelectionMediaResult as ez, type CancelMembershipResponse as f, getSelectedValueByOptionId as f0, getVariantAvailableForSale as f1, getVariantAvailableStock as f2, isProductUpsertFieldValidationErrorBody as f3, normalizeProductSelection as f4, normalizeProductSelectionFromMatrix as f5, normalizeSelectedValueIds as f6, parseProductSelection as f7, projectProductToListingShape as f8, resolveFeaturedImagePointer as f9, resolveProductDisplayMedia as fa, resolveProductSelection as fb, resolveProductSelectionFromMatrix as fc, resolveProductSelectionMedia as fd, resolveVariantForSelection as fe, selectNext as ff, selectedSwatchMediaItemId as fg, stringifyProductSelection as fh, toShopifyPriceRangeV2 as fi, type ClientState as g, type ClientConfig as h, type ApiQueryOptions as i, type CancelBrowserPaymentSessionParams as j, type CartMergeParams as k, type CartMergeResult as l, type CartMineResult as m, type CartMutationResult as n, type CheckoutAbandonedReason as o, type CheckoutAmounts as p, type CheckoutOrderReference as q, type CheckoutPaymentSessionRef as r, type CheckoutShippingAddress as s, type ClearCartParams as t, type ClientMetadata as u, type ContentClientOptions as v, type CreateCartParams as w, type CreateCartResult as x, type CreateCheckoutParams as y, type CreateCheckoutResult as z };

package/dist/ui/form.d.cts

@@ -1,5 +1,5 @@
 import React from 'react';
-import { F as Form } from '../payload-types-MKbx5MuJ.cjs';
+import { F as Form } from '../payload-types-BOsckg8B.cjs';
 import { RichTextData } from './rich-text.cjs';
 import '@payloadcms/richtext-lexical';
 import '@payloadcms/richtext-lexical/lexical';

package/dist/ui/form.d.ts

@@ -1,5 +1,5 @@
 import React from 'react';
-import { F as Form } from '../payload-types-MKbx5MuJ.js';
+import { F as Form } from '../payload-types-BOsckg8B.js';
 import { RichTextData } from './rich-text.js';
 import '@payloadcms/richtext-lexical';
 import '@payloadcms/richtext-lexical/lexical';

package/dist/ui/video.d.cts

@@ -1,7 +1,7 @@
 import React, { CSSProperties } from 'react';
 import { MuxPlayerProps, MuxPlayerRefAttributes } from '@mux/mux-player-react';
 export { MuxPlayerRefAttributes as VideoPlayerRef } from '@mux/mux-player-react';
-import { V as Video } from '../payload-types-MKbx5MuJ.cjs';
+import { V as Video } from '../payload-types-BOsckg8B.cjs';
 export { V as VideoGifOptions, a as VideoThumbnailOptions, g as getVideoGif, b as getVideoMp4Url, c as getVideoStoryboard, d as getVideoStreamUrl, e as getVideoThumbnail } from '../video-WR_TFO9a.cjs';
 
 interface VideoPlayerCSSProperties extends CSSProperties {

package/dist/ui/video.d.ts

@@ -1,7 +1,7 @@
 import React, { CSSProperties } from 'react';
 import { MuxPlayerProps, MuxPlayerRefAttributes } from '@mux/mux-player-react';
 export { MuxPlayerRefAttributes as VideoPlayerRef } from '@mux/mux-player-react';
-import { V as Video } from '../payload-types-MKbx5MuJ.js';
+import { V as Video } from '../payload-types-BOsckg8B.js';
 export { V as VideoGifOptions, a as VideoThumbnailOptions, g as getVideoGif, b as getVideoMp4Url, c as getVideoStoryboard, d as getVideoStreamUrl, e as getVideoThumbnail } from '../video-WR_TFO9a.js';
 
 interface VideoPlayerCSSProperties extends CSSProperties {

package/dist/webhook.cjs

@@ -31,6 +31,8 @@ __export(webhook_exports, {
   createTypedWebhookHandler: () => createTypedWebhookHandler,
   defineCommerceEmailConfig: () => defineCommerceEmailConfig,
   getCommerceNotificationIdempotencyKey: () => getCommerceNotificationIdempotencyKey,
+  handleSignedWebhook: () => handleSignedWebhook,
+  handleUnsignedWebhook: () => handleUnsignedWebhook,
   handleWebhook: () => handleWebhook,
   isCommerceNotificationWebhookEvent: () => isCommerceNotificationWebhookEvent,
   isCustomerPasswordResetWebhookEvent: () => isCustomerPasswordResetWebhookEvent,
@@ -41,13 +43,109 @@ __export(webhook_exports, {
 });
 module.exports = __toCommonJS(webhook_exports);
 
+// src/core/webhook/validation.ts
+function isValidWebhookEventData(data) {
+  if (typeof data !== "object" || data === null) return false;
+  const event = data;
+  return typeof event.collection === "string" && typeof event.operation === "string" && event.operation.length > 0 && typeof event.data === "object" && event.data !== null;
+}
+
+// src/core/webhook/receiver.ts
+async function verifySignature(rawBody, secret, signature, timestamp, deliveryId) {
+  const encoder = new TextEncoder();
+  const signedPrefix = encoder.encode(`${timestamp}.${deliveryId}.`);
+  const signedPayload = new Uint8Array(signedPrefix.length + rawBody.length);
+  signedPayload.set(signedPrefix);
+  signedPayload.set(rawBody, signedPrefix.length);
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["verify"]
+  );
+  if (signature.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(signature)) {
+    return false;
+  }
+  const sigBytes = new Uint8Array(
+    (signature.match(/.{2}/g) ?? []).map((byte) => parseInt(byte, 16))
+  );
+  return crypto.subtle.verify("HMAC", key, sigBytes, signedPayload);
+}
+function timestampIsFresh(timestamp, toleranceSeconds) {
+  if (!/^\d+$/.test(timestamp)) return false;
+  const timestampMs = Number(timestamp);
+  if (!Number.isFinite(timestampMs)) return false;
+  const skewMs = Math.abs(Date.now() - timestampMs);
+  return skewMs <= toleranceSeconds * 1e3;
+}
+var MAX_TOLERANCE_SECONDS = 86400;
+function toleranceIsValid(toleranceSeconds) {
+  return typeof toleranceSeconds === "number" && Number.isFinite(toleranceSeconds) && toleranceSeconds >= 0 && toleranceSeconds <= MAX_TOLERANCE_SECONDS;
+}
+async function processWebhookRequest(request, handler, verify) {
+  try {
+    const rawBody = new Uint8Array(await request.arrayBuffer());
+    const verificationFailure = await verify?.(rawBody);
+    if (verificationFailure) return verificationFailure;
+    const body = JSON.parse(new TextDecoder().decode(rawBody));
+    if (!isValidWebhookEventData(body)) {
+      return new Response(
+        JSON.stringify({ error: "Invalid webhook event format" }),
+        { status: 400, headers: { "Content-Type": "application/json" } }
+      );
+    }
+    await handler(body);
+    return new Response(
+      JSON.stringify({ success: true, message: "Webhook processed" }),
+      { status: 200, headers: { "Content-Type": "application/json" } }
+    );
+  } catch (error) {
+    console.error("Webhook processing error:", error);
+    return new Response(JSON.stringify({ error: "Internal server error" }), {
+      status: 500,
+      headers: { "Content-Type": "application/json" }
+    });
+  }
+}
+async function handleSignedWebhook(request, handler, options) {
+  const secret = options?.secret;
+  const configuredTolerance = options?.toleranceSeconds;
+  const toleranceSeconds = configuredTolerance ?? 300;
+  if (typeof secret !== "string" || secret.trim().length === 0) {
+    return new Response(
+      JSON.stringify({ error: "Webhook signing secret is not configured" }),
+      { status: 500, headers: { "Content-Type": "application/json" } }
+    );
+  }
+  if (!toleranceIsValid(toleranceSeconds)) {
+    return new Response(
+      JSON.stringify({ error: "Webhook signature tolerance is not valid" }),
+      { status: 500, headers: { "Content-Type": "application/json" } }
+    );
+  }
+  return processWebhookRequest(request, handler, async (rawBody) => {
+    const signature = request.headers.get("x-webhook-signature") || "";
+    const timestamp = request.headers.get("x-webhook-timestamp") || "";
+    const deliveryId = request.headers.get("x-webhook-delivery-id") || "";
+    const valid = Boolean(timestamp && deliveryId) && timestampIsFresh(timestamp, toleranceSeconds) && await verifySignature(rawBody, secret, signature, timestamp, deliveryId);
+    if (!valid) {
+      return new Response(
+        JSON.stringify({ error: "Invalid webhook signature" }),
+        { status: 401, headers: { "Content-Type": "application/json" } }
+      );
+    }
+  });
+}
+async function handleUnsignedWebhook(request, handler) {
+  return processWebhookRequest(request, handler);
+}
+
 // src/core/webhook/index.ts
 var ORDER_CHANGED_EVENT_TYPE = "collection.orderChanged";
 var COMMERCE_NOTIFICATION_EVENT_TYPE = "commerce.notification";
 function isValidWebhookEvent(data) {
-  if (typeof data !== "object" || data === null) return false;
-  const obj = data;
-  return typeof obj.collection === "string" && typeof obj.operation === "string" && obj.operation.length > 0 && typeof obj.data === "object" && obj.data !== null;
+  return isValidWebhookEventData(data);
 }
 var COMMERCE_NOTIFICATION_OPERATION = "notification";
 var COMMERCE_NOTIFICATION_EVENTS = [
@@ -59,7 +157,9 @@ var COMMERCE_NOTIFICATION_EVENTS = [
   "returnApproved",
   "returnRejected",
   "returnCanceled",
-  "returnCompleted"
+  "returnCompleted",
+  "paymentReconciliationRequired",
+  "paymentRefundRequiresAttention"
 ];
 function isStringOrNumber(value) {
   return typeof value === "string" || typeof value === "number";
@@ -89,18 +189,25 @@ function isCommerceNotificationEventName(value) {
   return typeof value === "string" && COMMERCE_NOTIFICATION_EVENTS.includes(value);
 }
 function isCommerceNotificationSourceCollection(value) {
-  return value === "orders" || value === "fulfillments" || value === "returns";
+  return value === "orders" || value === "fulfillments" || value === "returns" || value === "payment-sessions" || value === "payment-refund-attempts";
 }
 function isCommerceNotificationData(value) {
   if (!isRecord(value)) return false;
   if (value.source !== void 0 && (!isRecord(value.source) || !isCommerceNotificationSourceCollection(value.source.collection) || !isStringOrNumber(value.source.id))) {
     return false;
   }
-  return (value.orderId === void 0 || isStringOrNumber(value.orderId)) && (value.orderNumber === void 0 || typeof value.orderNumber === "string") && (value.status === void 0 || typeof value.status === "string") && (value.totalAmount === void 0 || typeof value.totalAmount === "number") && (value.currency === void 0 || typeof value.currency === "string") && (value.fulfillmentId === void 0 || isStringOrNumber(value.fulfillmentId)) && (value.fulfillmentStatus === void 0 || typeof value.fulfillmentStatus === "string") && (value.shippedAt === void 0 || typeof value.shippedAt === "string") && (value.returnId === void 0 || isStringOrNumber(value.returnId)) && (value.returnStatus === void 0 || typeof value.returnStatus === "string") && (value.refundAmount === void 0 || typeof value.refundAmount === "number") && (value.completedAt === void 0 || typeof value.completedAt === "string");
+  return (value.orderId === void 0 || isStringOrNumber(value.orderId)) && (value.orderNumber === void 0 || typeof value.orderNumber === "string") && (value.status === void 0 || typeof value.status === "string") && (value.totalAmount === void 0 || typeof value.totalAmount === "number") && (value.currency === void 0 || typeof value.currency === "string") && (value.fulfillmentId === void 0 || isStringOrNumber(value.fulfillmentId)) && (value.fulfillmentStatus === void 0 || typeof value.fulfillmentStatus === "string") && (value.shippedAt === void 0 || typeof value.shippedAt === "string") && (value.returnId === void 0 || isStringOrNumber(value.returnId)) && (value.returnStatus === void 0 || typeof value.returnStatus === "string") && (value.refundAmount === void 0 || typeof value.refundAmount === "number") && (value.completedAt === void 0 || typeof value.completedAt === "string") && (value.paymentSessionId === void 0 || typeof value.paymentSessionId === "string") && (value.checkoutId === void 0 || typeof value.checkoutId === "string") && (value.refundAttemptId === void 0 || typeof value.refundAttemptId === "string") && (value.reason === void 0 || typeof value.reason === "string") && (value.observedAt === void 0 || typeof value.observedAt === "string") && (value.providerObject === void 0 || isRecord(value.providerObject) && typeof value.providerObject.provider === "string" && (value.providerObject.kind === "payment" || value.providerObject.kind === "refund") && typeof value.providerObject.id === "string") && (value.money === void 0 || isRecord(value.money) && Number.isSafeInteger(value.money.amountMinor) && Number(value.money.amountMinor) > 0 && typeof value.money.currency === "string");
 }
 function isCommerceNotification(value) {
   if (!isRecord(value)) return false;
-  return isCommerceNotificationEventName(value.event) && typeof value.intentId === "string" && value.intentId.length > 0 && typeof value.dedupeKey === "string" && value.dedupeKey.length > 0 && (value.orderId === void 0 || typeof value.orderId === "string") && (value.fulfillmentId === void 0 || typeof value.fulfillmentId === "string") && (value.returnId === void 0 || typeof value.returnId === "string");
+  return isCommerceNotificationEventName(value.event) && typeof value.intentId === "string" && value.intentId.length > 0 && typeof value.dedupeKey === "string" && value.dedupeKey.length > 0 && (value.orderId === void 0 || typeof value.orderId === "string") && (value.fulfillmentId === void 0 || typeof value.fulfillmentId === "string") && (value.returnId === void 0 || typeof value.returnId === "string") && (value.paymentSessionId === void 0 || typeof value.paymentSessionId === "string") && (value.refundAttemptId === void 0 || typeof value.refundAttemptId === "string");
+}
+function isPaymentIncidentNotificationData(value, event) {
+  const reconciliation = event === "paymentReconciliationRequired";
+  const expectedCollection = reconciliation ? "payment-sessions" : "payment-refund-attempts";
+  const expectedStatus = reconciliation ? "reconciliation_required" : "requires_attention";
+  const expectedReason = reconciliation ? "orderless_capture" : "local_commit_ambiguous";
+  return value.source?.collection === expectedCollection && typeof value.source.id === "string" && value.source.id.length > 0 && typeof value.paymentSessionId === "string" && value.paymentSessionId.length > 0 && isRecord(value.providerObject) && typeof value.providerObject.provider === "string" && value.providerObject.provider.length > 0 && (value.providerObject.kind === "payment" || value.providerObject.kind === "refund") && typeof value.providerObject.id === "string" && value.providerObject.id.length > 0 && isRecord(value.money) && Number.isSafeInteger(value.money.amountMinor) && Number(value.money.amountMinor) > 0 && typeof value.money.currency === "string" && value.money.currency.length > 0 && value.status === expectedStatus && value.reason === expectedReason && typeof value.observedAt === "string" && value.observedAt.length > 0 && !Number.isNaN(Date.parse(value.observedAt)) && (value.checkoutId === void 0 || typeof value.checkoutId === "string" && value.checkoutId.length > 0) && (value.orderId === void 0 || typeof value.orderId === "string" && value.orderId.length > 0) && (reconciliation ? value.source.id === value.paymentSessionId && value.providerObject.kind === "payment" && value.refundAttemptId === void 0 : typeof value.refundAttemptId === "string" && value.refundAttemptId.length > 0 && value.source.id === value.refundAttemptId);
 }
 function isWebhookCommerceNotificationChange(value) {
   if (!isRecord(value)) return false;
@@ -141,6 +248,15 @@ function isCommerceNotificationWebhookEvent(event) {
     if (!matchesOptionalId(change.sourceId, sourceId)) return false;
   }
   const changeSourceId = isWebhookCommerceNotificationChange(change) ? change.sourceId : void 0;
+  if (notification.event === "paymentReconciliationRequired" || notification.event === "paymentRefundRequiresAttention") {
+    if (!isPaymentIncidentNotificationData(data, notification.event)) {
+      return false;
+    }
+    const incidentData = data;
+    const expectedCollection = notification.event === "paymentReconciliationRequired" ? "payment-sessions" : "payment-refund-attempts";
+    const notificationSourceId = notification.event === "paymentReconciliationRequired" ? notification.paymentSessionId : notification.refundAttemptId;
+    return sourceCollection === expectedCollection && typeof notification.paymentSessionId === "string" && notification.paymentSessionId === incidentData.paymentSessionId && typeof notificationSourceId === "string" && notificationSourceId === incidentData.source.id && matchesOptionalId(changeSourceId, incidentData.source.id);
+  }
   if (notification.event === "orderPaid" || notification.event === "orderCanceled" || notification.event === "orderDelivered") {
     return sourceCollection === "orders" && typeof notification.orderId === "string" && notification.orderId.length > 0 && matchesOptionalId(data.orderId, sourceId) && matchesOptionalId(notification.orderId, sourceId) && matchesOptionalId(data.orderId, notification.orderId) && matchesOptionalId(changeSourceId, data.orderId ?? notification.orderId);
   }
@@ -209,80 +325,8 @@ function createCustomerAuthWebhookHandler(handlers) {
     await handlers.unhandled?.(event);
   };
 }
-async function verifySignature(payload, secret, signature, timestamp, deliveryId) {
-  const encoder = new TextEncoder();
-  const key = await crypto.subtle.importKey(
-    "raw",
-    encoder.encode(secret),
-    { name: "HMAC", hash: "SHA-256" },
-    false,
-    ["verify"]
-  );
-  if (signature.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(signature)) {
-    return false;
-  }
-  const sigBytes = new Uint8Array(
-    (signature.match(/.{2}/g) ?? []).map((byte) => parseInt(byte, 16))
-  );
-  return crypto.subtle.verify(
-    "HMAC",
-    key,
-    sigBytes,
-    encoder.encode(`${timestamp}.${deliveryId}.${payload}`)
-  );
-}
-function timestampIsFresh(timestamp, toleranceSeconds) {
-  if (!/^\d+$/.test(timestamp)) return false;
-  const timestampMs = Number(timestamp);
-  if (!Number.isFinite(timestampMs)) return false;
-  const skewMs = Math.abs(Date.now() - timestampMs);
-  return skewMs <= toleranceSeconds * 1e3;
-}
 async function handleWebhook(request, handler, options) {
-  try {
-    const rawBody = await request.text();
-    if (options?.secret) {
-      const signature = request.headers.get("x-webhook-signature") || "";
-      const timestamp = request.headers.get("x-webhook-timestamp") || "";
-      const deliveryId = request.headers.get("x-webhook-delivery-id") || "";
-      const toleranceSeconds = options.toleranceSeconds ?? 300;
-      const valid = Boolean(timestamp && deliveryId) && timestampIsFresh(timestamp, toleranceSeconds) && await verifySignature(
-        rawBody,
-        options.secret,
-        signature,
-        timestamp,
-        deliveryId
-      );
-      if (!valid) {
-        return new Response(
-          JSON.stringify({ error: "Invalid webhook signature" }),
-          { status: 401, headers: { "Content-Type": "application/json" } }
-        );
-      }
-    } else {
-      console.warn(
-        "[@01.software/sdk] Webhook signature verification is disabled. Set { secret } in handleWebhook() options to enable HMAC-SHA256 verification."
-      );
-    }
-    const body = JSON.parse(rawBody);
-    if (!isValidWebhookEvent(body)) {
-      return new Response(
-        JSON.stringify({ error: "Invalid webhook event format" }),
-        { status: 400, headers: { "Content-Type": "application/json" } }
-      );
-    }
-    await handler(body);
-    return new Response(
-      JSON.stringify({ success: true, message: "Webhook processed" }),
-      { status: 200, headers: { "Content-Type": "application/json" } }
-    );
-  } catch (error) {
-    console.error("Webhook processing error:", error);
-    return new Response(JSON.stringify({ error: "Internal server error" }), {
-      status: 500,
-      headers: { "Content-Type": "application/json" }
-    });
-  }
+  return handleSignedWebhook(request, handler, options);
 }
 function createTypedWebhookHandler(collection, handler) {
   return async (event) => {