@adcp/sdk 14.0.0 → 14.2.0

package/dist/lib/webhooks/index.js

@@ -22,6 +22,7 @@ __export(webhooks_exports, {
   WholesaleFeedWebhookNotificationError: () => import_webhook_notification.WholesaleFeedWebhookNotificationError,
   normalizeWholesaleFeedWebhookNotification: () => import_webhook_notification.normalizeWholesaleFeedWebhookNotification,
   parseWholesaleFeedWebhookNotification: () => import_webhook_notification.parseWholesaleFeedWebhookNotification,
+  preflightWebhookRequest: () => preflightWebhookRequest,
   verifyWebhookRequest: () => verifyWebhookRequest
 });
 module.exports = __toCommonJS(webhooks_exports);
@@ -29,49 +30,73 @@ var import_crypto = require("crypto");
 __reExport(webhooks_exports, require('../notifications/account-change-recorded.js'), module.exports);
 var import_webhook_notification = require('../wholesale-feed-sync/webhook-notification.js');
 function verifyWebhookRequest(options) {
+  const preflight = preflightWebhookRequest(options, {
+    now: options.now,
+    maxSkewSeconds: options.maxSkewSeconds ?? options.skewSeconds
+  });
+  if (!preflight.ok) return preflight;
   const secret = options.secret ?? options.globalSecret;
   if (!secret) {
     return fail("missing_secret", "A webhook HMAC secret is required.");
   }
-  const signature = resolveHeader("x-adcp-signature", options.signature, options.headers);
-  if (signature.reason) return fail(signature.reason, signature.message);
-  const timestamp = resolveHeader("x-adcp-timestamp", options.timestamp, options.headers);
-  if (timestamp.reason) return fail(timestamp.reason, timestamp.message);
-  if (!signature.value || !timestamp.value) {
-    return fail("missing_headers", "Webhook is missing x-adcp-signature or x-adcp-timestamp.");
-  }
-  const parsedTimestamp = parseTimestamp(timestamp.value);
-  if (parsedTimestamp === void 0) {
-    return fail("invalid_timestamp", "x-adcp-timestamp must be an integer unix timestamp in seconds.");
-  }
-  const now = options.now ? Math.floor(options.now()) : Math.floor(Date.now() / 1e3);
-  const skewSeconds = options.skewSeconds ?? 300;
-  if (!Number.isFinite(skewSeconds) || skewSeconds < 0) {
-    return fail("invalid_timestamp", "skewSeconds must be a non-negative number.");
-  }
-  if (Math.abs(now - parsedTimestamp) > skewSeconds) {
-    return fail("stale_timestamp", `Webhook timestamp is outside the allowed ${skewSeconds}s skew window.`);
-  }
-  if (!/^sha256=[a-f0-9]{64}$/.test(signature.value)) {
-    return fail("malformed_signature", "x-adcp-signature must match sha256=<64 lowercase hex chars>.");
-  }
+  const { signature, timestamp: parsedTimestamp, checkedAt: now } = preflight;
   const hmac = (0, import_crypto.createHmac)("sha256", secret);
   hmac.update(String(parsedTimestamp), "utf8");
   hmac.update(".", "utf8");
   hmac.update(toBodyBytes(options.rawBody));
   const expected = `sha256=${hmac.digest("hex")}`;
   const expectedBytes = Buffer.from(expected, "utf8");
-  const actualBytes = Buffer.from(signature.value, "utf8");
+  const actualBytes = Buffer.from(signature, "utf8");
   if (actualBytes.length !== expectedBytes.length || !(0, import_crypto.timingSafeEqual)(actualBytes, expectedBytes)) {
     return fail("bad_signature", "Webhook HMAC signature does not match the request body and timestamp.");
   }
   return {
     ok: true,
-    signature: signature.value,
+    signature,
     timestamp: parsedTimestamp,
     verifiedAt: now
   };
 }
+function preflightWebhookRequest(request, options = {}) {
+  const signature = resolveHeader("x-adcp-signature", request.signature, request.headers);
+  if (signature.reason) return { ok: false, reason: signature.reason, message: signature.message };
+  const timestamp = resolveHeader("x-adcp-timestamp", request.timestamp, request.headers);
+  if (timestamp.reason) return { ok: false, reason: timestamp.reason, message: timestamp.message };
+  if (!signature.value || !timestamp.value)
+    return {
+      ok: false,
+      reason: "missing_headers",
+      message: "Webhook is missing x-adcp-signature or x-adcp-timestamp."
+    };
+  const parsedTimestamp = parseTimestamp(timestamp.value);
+  if (parsedTimestamp === void 0)
+    return {
+      ok: false,
+      reason: "invalid_timestamp",
+      message: "x-adcp-timestamp must be an integer unix timestamp in seconds."
+    };
+  const now = Math.floor(options.now ? options.now() : Date.now() / 1e3);
+  const skewSeconds = options.maxSkewSeconds ?? options.skewSeconds ?? 300;
+  if (!Number.isFinite(now) || !Number.isFinite(skewSeconds) || skewSeconds < 0)
+    return {
+      ok: false,
+      reason: "invalid_timestamp",
+      message: "Clock and skew must be finite; skew must be non-negative."
+    };
+  if (Math.abs(now - parsedTimestamp) > skewSeconds)
+    return {
+      ok: false,
+      reason: "stale_timestamp",
+      message: `Webhook timestamp is outside the allowed ${skewSeconds}s skew window.`
+    };
+  if (!/^sha256=[a-f0-9]{64}$/.test(signature.value))
+    return {
+      ok: false,
+      reason: "malformed_signature",
+      message: "x-adcp-signature must match sha256=<64 lowercase hex chars>."
+    };
+  return { ok: true, signature: signature.value, timestamp: parsedTimestamp, checkedAt: now };
+}
 function fail(reason, message) {
   return { ok: false, reason, message };
 }
@@ -148,6 +173,7 @@ function isHeaders(headers) {
   WholesaleFeedWebhookNotificationError,
   normalizeWholesaleFeedWebhookNotification,
   parseWholesaleFeedWebhookNotification,
+  preflightWebhookRequest,
   verifyWebhookRequest,
   ...require('../notifications/account-change-recorded.js')
 });

package/dist/lib/webhooks/index.mjs

@@ -6,49 +6,73 @@ import {
   WholesaleFeedWebhookNotificationError
 } from "../wholesale-feed-sync/webhook-notification.mjs";
 function verifyWebhookRequest(options) {
+  const preflight = preflightWebhookRequest(options, {
+    now: options.now,
+    maxSkewSeconds: options.maxSkewSeconds ?? options.skewSeconds
+  });
+  if (!preflight.ok) return preflight;
   const secret = options.secret ?? options.globalSecret;
   if (!secret) {
     return fail("missing_secret", "A webhook HMAC secret is required.");
   }
-  const signature = resolveHeader("x-adcp-signature", options.signature, options.headers);
-  if (signature.reason) return fail(signature.reason, signature.message);
-  const timestamp = resolveHeader("x-adcp-timestamp", options.timestamp, options.headers);
-  if (timestamp.reason) return fail(timestamp.reason, timestamp.message);
-  if (!signature.value || !timestamp.value) {
-    return fail("missing_headers", "Webhook is missing x-adcp-signature or x-adcp-timestamp.");
-  }
-  const parsedTimestamp = parseTimestamp(timestamp.value);
-  if (parsedTimestamp === void 0) {
-    return fail("invalid_timestamp", "x-adcp-timestamp must be an integer unix timestamp in seconds.");
-  }
-  const now = options.now ? Math.floor(options.now()) : Math.floor(Date.now() / 1e3);
-  const skewSeconds = options.skewSeconds ?? 300;
-  if (!Number.isFinite(skewSeconds) || skewSeconds < 0) {
-    return fail("invalid_timestamp", "skewSeconds must be a non-negative number.");
-  }
-  if (Math.abs(now - parsedTimestamp) > skewSeconds) {
-    return fail("stale_timestamp", `Webhook timestamp is outside the allowed ${skewSeconds}s skew window.`);
-  }
-  if (!/^sha256=[a-f0-9]{64}$/.test(signature.value)) {
-    return fail("malformed_signature", "x-adcp-signature must match sha256=<64 lowercase hex chars>.");
-  }
+  const { signature, timestamp: parsedTimestamp, checkedAt: now } = preflight;
   const hmac = createHmac("sha256", secret);
   hmac.update(String(parsedTimestamp), "utf8");
   hmac.update(".", "utf8");
   hmac.update(toBodyBytes(options.rawBody));
   const expected = `sha256=${hmac.digest("hex")}`;
   const expectedBytes = Buffer.from(expected, "utf8");
-  const actualBytes = Buffer.from(signature.value, "utf8");
+  const actualBytes = Buffer.from(signature, "utf8");
   if (actualBytes.length !== expectedBytes.length || !timingSafeEqual(actualBytes, expectedBytes)) {
     return fail("bad_signature", "Webhook HMAC signature does not match the request body and timestamp.");
   }
   return {
     ok: true,
-    signature: signature.value,
+    signature,
     timestamp: parsedTimestamp,
     verifiedAt: now
   };
 }
+function preflightWebhookRequest(request, options = {}) {
+  const signature = resolveHeader("x-adcp-signature", request.signature, request.headers);
+  if (signature.reason) return { ok: false, reason: signature.reason, message: signature.message };
+  const timestamp = resolveHeader("x-adcp-timestamp", request.timestamp, request.headers);
+  if (timestamp.reason) return { ok: false, reason: timestamp.reason, message: timestamp.message };
+  if (!signature.value || !timestamp.value)
+    return {
+      ok: false,
+      reason: "missing_headers",
+      message: "Webhook is missing x-adcp-signature or x-adcp-timestamp."
+    };
+  const parsedTimestamp = parseTimestamp(timestamp.value);
+  if (parsedTimestamp === void 0)
+    return {
+      ok: false,
+      reason: "invalid_timestamp",
+      message: "x-adcp-timestamp must be an integer unix timestamp in seconds."
+    };
+  const now = Math.floor(options.now ? options.now() : Date.now() / 1e3);
+  const skewSeconds = options.maxSkewSeconds ?? options.skewSeconds ?? 300;
+  if (!Number.isFinite(now) || !Number.isFinite(skewSeconds) || skewSeconds < 0)
+    return {
+      ok: false,
+      reason: "invalid_timestamp",
+      message: "Clock and skew must be finite; skew must be non-negative."
+    };
+  if (Math.abs(now - parsedTimestamp) > skewSeconds)
+    return {
+      ok: false,
+      reason: "stale_timestamp",
+      message: `Webhook timestamp is outside the allowed ${skewSeconds}s skew window.`
+    };
+  if (!/^sha256=[a-f0-9]{64}$/.test(signature.value))
+    return {
+      ok: false,
+      reason: "malformed_signature",
+      message: "x-adcp-signature must match sha256=<64 lowercase hex chars>."
+    };
+  return { ok: true, signature: signature.value, timestamp: parsedTimestamp, checkedAt: now };
+}
 function fail(reason, message) {
   return { ok: false, reason, message };
 }
@@ -124,5 +148,6 @@ export {
   WholesaleFeedWebhookNotificationError,
   normalizeWholesaleFeedWebhookNotification,
   parseWholesaleFeedWebhookNotification,
+  preflightWebhookRequest,
   verifyWebhookRequest
 };

package/dist/lib/wholesale-feed-sync/index.d.mts

@@ -5,3 +5,5 @@ export { normalizeWholesaleFeedWebhookNotification, parseWholesaleFeedWebhookNot
 export type { WholesaleFeedSyncClient, WholesaleFeedSyncConfig, WholesaleFeedSyncEvents, WholesaleFeedSyncMode, WholesaleFeedSyncPersistedState, WholesaleFeedSyncPersistenceHooks, WholesaleFeedSyncState, ProductFilter, ResolvedCapabilities, SignalFilter, } from './types.mjs';
 export type { NormalizedWholesaleFeedWebhookNotification, WholesaleFeedWebhookAffectedEntityType, WholesaleFeedWebhookCacheScope, WholesaleFeedWebhookNotificationErrorCode, WholesaleFeedWebhookNotificationErrorDetails, WholesaleFeedWebhookNotificationType, } from './webhook-notification.mjs';
 export type { LegacyWholesaleFeedEvent, LegacyWholesaleFeedWebhook, LegacyWholesaleProduct, LegacyWholesaleSignal, } from './protocol-types.mjs';
+export { refreshWholesaleFeed, applyWholesaleFeedWebhook, InMemoryWholesaleFeedMirrorStore } from './mirror.mjs';
+export type { WholesaleFeedMirrorStore, WholesaleFeedMirrorScope, WholesaleFeedMirrorItem, WholesaleFeedMirrorSnapshot, WholesaleFeedMirrorCommit, WholesaleFeedRefreshOutcome, RefreshWholesaleFeedOptions, ApplyWholesaleFeedWebhookOptions, } from './mirror.mjs';

package/dist/lib/wholesale-feed-sync/index.d.ts

@@ -5,3 +5,5 @@ export { normalizeWholesaleFeedWebhookNotification, parseWholesaleFeedWebhookNot
 export type { WholesaleFeedSyncClient, WholesaleFeedSyncConfig, WholesaleFeedSyncEvents, WholesaleFeedSyncMode, WholesaleFeedSyncPersistedState, WholesaleFeedSyncPersistenceHooks, WholesaleFeedSyncState, ProductFilter, ResolvedCapabilities, SignalFilter, } from './types';
 export type { NormalizedWholesaleFeedWebhookNotification, WholesaleFeedWebhookAffectedEntityType, WholesaleFeedWebhookCacheScope, WholesaleFeedWebhookNotificationErrorCode, WholesaleFeedWebhookNotificationErrorDetails, WholesaleFeedWebhookNotificationType, } from './webhook-notification';
 export type { LegacyWholesaleFeedEvent, LegacyWholesaleFeedWebhook, LegacyWholesaleProduct, LegacyWholesaleSignal, } from './protocol-types';
+export { refreshWholesaleFeed, applyWholesaleFeedWebhook, InMemoryWholesaleFeedMirrorStore } from './mirror';
+export type { WholesaleFeedMirrorStore, WholesaleFeedMirrorScope, WholesaleFeedMirrorItem, WholesaleFeedMirrorSnapshot, WholesaleFeedMirrorCommit, WholesaleFeedRefreshOutcome, RefreshWholesaleFeedOptions, ApplyWholesaleFeedWebhookOptions, } from './mirror';

package/dist/lib/wholesale-feed-sync/index.js

@@ -18,23 +18,30 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var wholesale_feed_sync_exports = {};
 __export(wholesale_feed_sync_exports, {
+  InMemoryWholesaleFeedMirrorStore: () => import_mirror.InMemoryWholesaleFeedMirrorStore,
   WholesaleFeedSync: () => import_sync.WholesaleFeedSync,
   WholesaleFeedWebhookNotificationError: () => import_webhook_notification.WholesaleFeedWebhookNotificationError,
   WholesaleFeedWebhookRegistrationError: () => import_register.WholesaleFeedWebhookRegistrationError,
+  applyWholesaleFeedWebhook: () => import_mirror.applyWholesaleFeedWebhook,
   normalizeWholesaleFeedWebhookNotification: () => import_webhook_notification.normalizeWholesaleFeedWebhookNotification,
   parseWholesaleFeedWebhookNotification: () => import_webhook_notification.parseWholesaleFeedWebhookNotification,
+  refreshWholesaleFeed: () => import_mirror.refreshWholesaleFeed,
   registerWholesaleFeedWebhooks: () => import_register.registerWholesaleFeedWebhooks
 });
 module.exports = __toCommonJS(wholesale_feed_sync_exports);
 var import_sync = require('./sync.js');
 var import_register = require('./register.js');
 var import_webhook_notification = require('./webhook-notification.js');
+var import_mirror = require('./mirror.js');
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  InMemoryWholesaleFeedMirrorStore,
   WholesaleFeedSync,
   WholesaleFeedWebhookNotificationError,
   WholesaleFeedWebhookRegistrationError,
+  applyWholesaleFeedWebhook,
   normalizeWholesaleFeedWebhookNotification,
   parseWholesaleFeedWebhookNotification,
+  refreshWholesaleFeed,
   registerWholesaleFeedWebhooks
 });

package/dist/lib/wholesale-feed-sync/index.mjs

@@ -5,11 +5,15 @@ import {
   parseWholesaleFeedWebhookNotification,
   WholesaleFeedWebhookNotificationError
 } from "./webhook-notification.mjs";
+import { refreshWholesaleFeed, applyWholesaleFeedWebhook, InMemoryWholesaleFeedMirrorStore } from "./mirror.mjs";
 export {
+  InMemoryWholesaleFeedMirrorStore,
   WholesaleFeedSync,
   WholesaleFeedWebhookNotificationError,
   WholesaleFeedWebhookRegistrationError,
+  applyWholesaleFeedWebhook,
   normalizeWholesaleFeedWebhookNotification,
   parseWholesaleFeedWebhookNotification,
+  refreshWholesaleFeed,
   registerWholesaleFeedWebhooks
 };

package/dist/lib/wholesale-feed-sync/mirror.d.mts

@@ -0,0 +1,97 @@
+import type { AccountReference } from '../types/index.mjs';
+import type { AdcpErrorInfo } from '../core/ConversationTypes.mjs';
+import type { WholesaleFeedSyncClient } from './types.mjs';
+import type { LegacyWholesaleFeedEvent, LegacyWholesaleFeedWebhook, LegacyWholesaleProduct, LegacyWholesaleSignal } from './protocol-types.mjs';
+export type WholesaleFeedMirrorItem = LegacyWholesaleProduct | LegacyWholesaleSignal;
+/** accountKey must include the caller/principal and account overlay, even for public catalogs. */
+export interface WholesaleFeedMirrorScope {
+    agentUrl: string;
+    accountKey: string;
+    entity: 'product' | 'signal';
+}
+export interface WholesaleFeedMirrorSnapshot {
+    revision: number;
+    items: WholesaleFeedMirrorItem[];
+    wholesaleFeedVersion?: string;
+    pricingVersion?: string;
+    cacheScope: 'public' | 'account';
+    lastSyncedAt?: string;
+    lastWebhookEventId?: string;
+    lastWebhookIdempotencyKey?: string;
+    error?: AdcpErrorInfo;
+}
+export interface WholesaleFeedMirrorCommit {
+    upserts: WholesaleFeedMirrorItem[];
+    deletes: string[];
+    wholesaleFeedVersion?: string;
+    pricingVersion?: string;
+    cacheScope: 'public' | 'account';
+    lastSyncedAt: string;
+    lastWebhookEventId?: string;
+    lastWebhookIdempotencyKey?: string;
+    /** Persist this delivery receipt atomically with the row/token commit. */
+    webhookReceipt?: {
+        eventId: string;
+        idempotencyKey: string;
+    };
+}
+/** Consistent reads; atomically check/increment revisions with rows, tokens, and receipts. */
+export interface WholesaleFeedMirrorStore {
+    read(scope: WholesaleFeedMirrorScope): Promise<WholesaleFeedMirrorSnapshot>;
+    hasWebhookReceipt(scope: WholesaleFeedMirrorScope, idempotencyKey: string): Promise<boolean>;
+    commit(scope: WholesaleFeedMirrorScope, expectedRevision: number, change: WholesaleFeedMirrorCommit): Promise<boolean>;
+    recordError(scope: WholesaleFeedMirrorScope, expectedRevision: number, error: AdcpErrorInfo): Promise<boolean>;
+}
+export type WholesaleFeedRefreshOutcome = {
+    outcome: 'unchanged';
+    snapshot: WholesaleFeedMirrorSnapshot;
+} | {
+    outcome: 'applied';
+    snapshot: WholesaleFeedMirrorSnapshot;
+    diff: LegacyWholesaleFeedEvent[];
+} | {
+    outcome: 'degraded';
+    error: AdcpErrorInfo;
+    cause: Error;
+} | {
+    outcome: 'superseded';
+};
+export interface RefreshWholesaleFeedOptions {
+    client: WholesaleFeedSyncClient;
+    store: WholesaleFeedMirrorStore;
+    scope: WholesaleFeedMirrorScope;
+    account?: AccountReference;
+    /** Disable against sellers that do not advertise wholesale-feed versioning. Defaults to true. */
+    conditional?: boolean;
+    /** Local cancellation fence; no timer is started by the core. */
+    isCurrent?: () => boolean;
+}
+export declare class InMemoryWholesaleFeedMirrorStore implements WholesaleFeedMirrorStore {
+    private readonly maxWebhookReceipts;
+    private readonly records;
+    private readonly receipts;
+    private receiptCount;
+    /** Fail closed at capacity rather than evicting receipts inside the delivery retry window. */
+    constructor(maxWebhookReceipts?: number);
+    hasWebhookReceipt(scope: WholesaleFeedMirrorScope, idempotencyKey: string): Promise<boolean>;
+    private key;
+    read(scope: WholesaleFeedMirrorScope): Promise<WholesaleFeedMirrorSnapshot>;
+    /** Seed a detached record when restoring a shell snapshot. */
+    restore(scope: WholesaleFeedMirrorScope, snapshot: WholesaleFeedMirrorSnapshot): void;
+    commit(scope: WholesaleFeedMirrorScope, expectedRevision: number, change: WholesaleFeedMirrorCommit): Promise<boolean>;
+    recordError(scope: WholesaleFeedMirrorScope, expectedRevision: number, error: AdcpErrorInfo): Promise<boolean>;
+}
+/** Refresh one legacy get_products/get_signals feed without owning scheduling or storage. */
+export declare function refreshWholesaleFeed(options: RefreshWholesaleFeedOptions): Promise<WholesaleFeedRefreshOutcome>;
+export interface ApplyWholesaleFeedWebhookOptions extends RefreshWholesaleFeedOptions {
+    webhook: LegacyWholesaleFeedWebhook;
+    /** Expected subscription route, supplied after authentication by the receiver. */
+    webhookScope?: {
+        accountId?: string;
+        subscriberId?: string;
+    };
+}
+/** Apply an authenticated legacy delta, or repair from the seller on bulk change/order/version mismatch. */
+export declare function applyWholesaleFeedWebhook(options: ApplyWholesaleFeedWebhookOptions): Promise<WholesaleFeedRefreshOutcome>;
+export declare function applyWholesaleFeedEvent(entity: WholesaleFeedMirrorScope['entity'], previous: WholesaleFeedMirrorItem[], event: LegacyWholesaleFeedEvent): WholesaleFeedMirrorItem[] | undefined;
+export declare function diffWholesaleFeed(entity: WholesaleFeedMirrorScope['entity'], previous: WholesaleFeedMirrorItem[], next: WholesaleFeedMirrorItem[], cacheScope: 'public' | 'account', includeAllChanges?: boolean): LegacyWholesaleFeedEvent[];

package/dist/lib/wholesale-feed-sync/mirror.d.ts

@@ -0,0 +1,97 @@
+import type { AccountReference } from '../types';
+import type { AdcpErrorInfo } from '../core/ConversationTypes';
+import type { WholesaleFeedSyncClient } from './types';
+import type { LegacyWholesaleFeedEvent, LegacyWholesaleFeedWebhook, LegacyWholesaleProduct, LegacyWholesaleSignal } from './protocol-types';
+export type WholesaleFeedMirrorItem = LegacyWholesaleProduct | LegacyWholesaleSignal;
+/** accountKey must include the caller/principal and account overlay, even for public catalogs. */
+export interface WholesaleFeedMirrorScope {
+    agentUrl: string;
+    accountKey: string;
+    entity: 'product' | 'signal';
+}
+export interface WholesaleFeedMirrorSnapshot {
+    revision: number;
+    items: WholesaleFeedMirrorItem[];
+    wholesaleFeedVersion?: string;
+    pricingVersion?: string;
+    cacheScope: 'public' | 'account';
+    lastSyncedAt?: string;
+    lastWebhookEventId?: string;
+    lastWebhookIdempotencyKey?: string;
+    error?: AdcpErrorInfo;
+}
+export interface WholesaleFeedMirrorCommit {
+    upserts: WholesaleFeedMirrorItem[];
+    deletes: string[];
+    wholesaleFeedVersion?: string;
+    pricingVersion?: string;
+    cacheScope: 'public' | 'account';
+    lastSyncedAt: string;
+    lastWebhookEventId?: string;
+    lastWebhookIdempotencyKey?: string;
+    /** Persist this delivery receipt atomically with the row/token commit. */
+    webhookReceipt?: {
+        eventId: string;
+        idempotencyKey: string;
+    };
+}
+/** Consistent reads; atomically check/increment revisions with rows, tokens, and receipts. */
+export interface WholesaleFeedMirrorStore {
+    read(scope: WholesaleFeedMirrorScope): Promise<WholesaleFeedMirrorSnapshot>;
+    hasWebhookReceipt(scope: WholesaleFeedMirrorScope, idempotencyKey: string): Promise<boolean>;
+    commit(scope: WholesaleFeedMirrorScope, expectedRevision: number, change: WholesaleFeedMirrorCommit): Promise<boolean>;
+    recordError(scope: WholesaleFeedMirrorScope, expectedRevision: number, error: AdcpErrorInfo): Promise<boolean>;
+}
+export type WholesaleFeedRefreshOutcome = {
+    outcome: 'unchanged';
+    snapshot: WholesaleFeedMirrorSnapshot;
+} | {
+    outcome: 'applied';
+    snapshot: WholesaleFeedMirrorSnapshot;
+    diff: LegacyWholesaleFeedEvent[];
+} | {
+    outcome: 'degraded';
+    error: AdcpErrorInfo;
+    cause: Error;
+} | {
+    outcome: 'superseded';
+};
+export interface RefreshWholesaleFeedOptions {
+    client: WholesaleFeedSyncClient;
+    store: WholesaleFeedMirrorStore;
+    scope: WholesaleFeedMirrorScope;
+    account?: AccountReference;
+    /** Disable against sellers that do not advertise wholesale-feed versioning. Defaults to true. */
+    conditional?: boolean;
+    /** Local cancellation fence; no timer is started by the core. */
+    isCurrent?: () => boolean;
+}
+export declare class InMemoryWholesaleFeedMirrorStore implements WholesaleFeedMirrorStore {
+    private readonly maxWebhookReceipts;
+    private readonly records;
+    private readonly receipts;
+    private receiptCount;
+    /** Fail closed at capacity rather than evicting receipts inside the delivery retry window. */
+    constructor(maxWebhookReceipts?: number);
+    hasWebhookReceipt(scope: WholesaleFeedMirrorScope, idempotencyKey: string): Promise<boolean>;
+    private key;
+    read(scope: WholesaleFeedMirrorScope): Promise<WholesaleFeedMirrorSnapshot>;
+    /** Seed a detached record when restoring a shell snapshot. */
+    restore(scope: WholesaleFeedMirrorScope, snapshot: WholesaleFeedMirrorSnapshot): void;
+    commit(scope: WholesaleFeedMirrorScope, expectedRevision: number, change: WholesaleFeedMirrorCommit): Promise<boolean>;
+    recordError(scope: WholesaleFeedMirrorScope, expectedRevision: number, error: AdcpErrorInfo): Promise<boolean>;
+}
+/** Refresh one legacy get_products/get_signals feed without owning scheduling or storage. */
+export declare function refreshWholesaleFeed(options: RefreshWholesaleFeedOptions): Promise<WholesaleFeedRefreshOutcome>;
+export interface ApplyWholesaleFeedWebhookOptions extends RefreshWholesaleFeedOptions {
+    webhook: LegacyWholesaleFeedWebhook;
+    /** Expected subscription route, supplied after authentication by the receiver. */
+    webhookScope?: {
+        accountId?: string;
+        subscriberId?: string;
+    };
+}
+/** Apply an authenticated legacy delta, or repair from the seller on bulk change/order/version mismatch. */
+export declare function applyWholesaleFeedWebhook(options: ApplyWholesaleFeedWebhookOptions): Promise<WholesaleFeedRefreshOutcome>;
+export declare function applyWholesaleFeedEvent(entity: WholesaleFeedMirrorScope['entity'], previous: WholesaleFeedMirrorItem[], event: LegacyWholesaleFeedEvent): WholesaleFeedMirrorItem[] | undefined;
+export declare function diffWholesaleFeed(entity: WholesaleFeedMirrorScope['entity'], previous: WholesaleFeedMirrorItem[], next: WholesaleFeedMirrorItem[], cacheScope: 'public' | 'account', includeAllChanges?: boolean): LegacyWholesaleFeedEvent[];