@atribu/node 0.1.0

package/dist/next/index.cjs

@@ -0,0 +1,153 @@
+'use strict';
+
+// src/errors.ts
+var AtribuError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = new.target.name;
+  }
+};
+var AtribuWebhookError = class extends AtribuError {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+  }
+};
+
+// src/webhooks/verify.ts
+async function verifyWebhook(opts) {
+  if (!opts.signature) {
+    throw new AtribuWebhookError("missing_signature", "Missing X-Atribu-Signature header");
+  }
+  const parsed = parseHeader(opts.signature);
+  const bodyString = typeof opts.rawBody === "string" ? opts.rawBody : decodeUtf8(opts.rawBody);
+  const nowMs = (opts.now ?? Date.now)();
+  const tolerance = opts.tolerance ?? 300;
+  const ageSeconds = Math.abs(nowMs / 1e3 - parsed.t);
+  if (ageSeconds > tolerance) {
+    throw new AtribuWebhookError(
+      "expired_timestamp",
+      `Signed timestamp is ${Math.round(ageSeconds)}s old (tolerance ${tolerance}s)`
+    );
+  }
+  const signingInput = `${parsed.t}.${bodyString}`;
+  const matchesCurrent = await safeCompareHmac(opts.secret, signingInput, parsed.v1);
+  if (!matchesCurrent) {
+    const previous = opts.previousSecret;
+    if (!previous || !await safeCompareHmac(previous, signingInput, parsed.v1)) {
+      throw new AtribuWebhookError("invalid_signature", "Signature does not match");
+    }
+  }
+  return JSON.parse(bodyString);
+}
+function parseHeader(header) {
+  let t = null;
+  let v1 = null;
+  for (const part of header.split(",")) {
+    const eq = part.indexOf("=");
+    if (eq < 0) continue;
+    const key = part.slice(0, eq).trim();
+    const value = part.slice(eq + 1).trim();
+    if (key === "t") t = Number(value);
+    else if (key === "v1") v1 = value;
+  }
+  if (t === null || !Number.isFinite(t) || !v1) {
+    throw new AtribuWebhookError("malformed_header", `Malformed signature header: ${header}`);
+  }
+  return { t, v1 };
+}
+async function safeCompareHmac(secret, input, expectedHex) {
+  const encoder = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await crypto.subtle.sign("HMAC", key, encoder.encode(input));
+  const computed = bufferToHex(sig);
+  return constantTimeEqualHex(computed, expectedHex);
+}
+function bufferToHex(buf) {
+  const bytes = new Uint8Array(buf);
+  let hex = "";
+  for (let i = 0; i < bytes.length; i++) {
+    const b = bytes[i];
+    hex += (b < 16 ? "0" : "") + b.toString(16);
+  }
+  return hex;
+}
+function constantTimeEqualHex(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) {
+    diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  }
+  return diff === 0;
+}
+function decodeUtf8(buf) {
+  return new TextDecoder("utf-8").decode(buf);
+}
+
+// src/next/webhook-handler.ts
+function withAtribuWebhook(opts) {
+  if (!opts.secret) throw new Error("withAtribuWebhook: secret is required");
+  return async function handler(request) {
+    const rawBody = await request.text();
+    const signature = request.headers.get("x-atribu-signature");
+    const deliveryId = request.headers.get("x-atribu-delivery-id");
+    let event;
+    try {
+      event = await verifyWebhook({
+        rawBody,
+        signature,
+        secret: opts.secret,
+        previousSecret: opts.previousSecret ?? null,
+        tolerance: opts.tolerance
+      });
+    } catch (err) {
+      if (err instanceof AtribuWebhookError) {
+        opts.onInvalidSignature?.(err, request);
+        return new Response(JSON.stringify({ error: err.code, message: err.message }), {
+          status: 401,
+          headers: { "Content-Type": "application/json" }
+        });
+      }
+      throw err;
+    }
+    const ctx = {
+      request,
+      deliveryId,
+      signatureTimestamp: parseTimestamp(signature)
+    };
+    try {
+      await opts.onEvent(event, ctx);
+    } catch (err) {
+      if (opts.onError) opts.onError(err, event);
+      else console.error("[atribu webhook] onEvent threw:", err);
+      return new Response(JSON.stringify({ error: "handler_error" }), {
+        status: 500,
+        headers: { "Content-Type": "application/json" }
+      });
+    }
+    return new Response(null, { status: 200 });
+  };
+}
+function parseTimestamp(header) {
+  if (!header) return null;
+  for (const part of header.split(",")) {
+    const eq = part.indexOf("=");
+    if (eq < 0) continue;
+    const key = part.slice(0, eq).trim();
+    if (key !== "t") continue;
+    const n = Number(part.slice(eq + 1).trim());
+    return Number.isFinite(n) ? n : null;
+  }
+  return null;
+}
+
+exports.withAtribuWebhook = withAtribuWebhook;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/next/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/errors.ts","../../src/webhooks/verify.ts","../../src/next/webhook-handler.ts"],"names":[],"mappings":";;;AAiCO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EACrC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,OAAO,GAAA,CAAA,MAAA,CAAW,IAAA;AAAA,EACzB;AACF,CAAA;AAmFO,IAAM,kBAAA,GAAN,cAAiC,WAAA,CAAY;AAAA,EACzC,IAAA;AAAA,EACT,WAAA,CAAY,MAAwB,OAAA,EAAiB;AACnD,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF,CAAA;;;AC1FA,eAAsB,cAAc,IAAA,EAAyD;AAC3F,EAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,IAAA,MAAM,IAAI,kBAAA,CAAmB,mBAAA,EAAqB,mCAAmC,CAAA;AAAA,EACvF;AAEA,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,IAAA,CAAK,SAAS,CAAA;AACzC,EAAA,MAAM,UAAA,GAAa,OAAO,IAAA,CAAK,OAAA,KAAY,WAAW,IAAA,CAAK,OAAA,GAAU,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA;AAE5F,EAAA,MAAM,KAAA,GAAA,CAAS,IAAA,CAAK,GAAA,IAAO,IAAA,CAAK,GAAA,GAAK;AACrC,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,GAAA;AACpC,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA,CAAI,KAAA,GAAQ,GAAA,GAAO,OAAO,CAAC,CAAA;AACnD,EAAA,IAAI,aAAa,SAAA,EAAW;AAC1B,IAAA,MAAM,IAAI,kBAAA;AAAA,MACR,mBAAA;AAAA,MACA,uBAAuB,IAAA,CAAK,KAAA,CAAM,UAAU,CAAC,oBAAoB,SAAS,CAAA,EAAA;AAAA,KAC5E;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,CAAA,EAAG,MAAA,CAAO,CAAC,IAAI,UAAU,CAAA,CAAA;AAC9C,EAAA,MAAM,iBAAiB,MAAM,eAAA,CAAgB,KAAK,MAAA,EAAQ,YAAA,EAAc,OAAO,EAAE,CAAA;AACjF,EAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,IAAA,MAAM,WAAW,IAAA,CAAK,cAAA;AACtB,IAAA,IAAI,CAAC,YAAY,CAAE,MAAM,gBAAgB,QAAA,EAAU,YAAA,EAAc,MAAA,CAAO,EAAE,CAAA,EAAI;AAC5E,MAAA,MAAM,IAAI,kBAAA,CAAmB,mBAAA,EAAqB,0BAA0B,CAAA;AAAA,IAC9E;AAAA,EACF;AAEA,EAAA,OAAO,IAAA,CAAK,MAAM,UAAU,CAAA;AAC9B;AAEA,SAAS,YAAY,MAAA,EAA8B;AACjD,EAAA,IAAI,CAAA,GAAmB,IAAA;AACvB,EAAA,IAAI,EAAA,GAAoB,IAAA;AACxB,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA,EAAG;AACpC,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,KAAK,CAAA,EAAG;AACZ,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,EAAE,IAAA,EAAK;AACnC,IAAA,MAAM,QAAQ,IAAA,CAAK,KAAA,CAAM,EAAA,GAAK,CAAC,EAAE,IAAA,EAAK;AACtC,IAAA,IAAI,GAAA,KAAQ,GAAA,EAAK,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAAA,SAAA,IACxB,GAAA,KAAQ,MAAM,EAAA,GAAK,KAAA;AAAA,EAC9B;AACA,EAAA,IAAI,CAAA,KAAM,QAAQ,CAAC,MAAA,CAAO,SAAS,CAAC,CAAA,IAAK,CAAC,EAAA,EAAI;AAC5C,IAAA,MAAM,IAAI,kBAAA,CAAmB,kBAAA,EAAoB,CAAA,4BAAA,EAA+B,MAAM,CAAA,CAAE,CAAA;AAAA,EAC1F;AACA,EAAA,OAAO,EAAE,GAAG,EAAA,EAAG;AACjB;AAEA,eAAe,eAAA,CAAgB,MAAA,EAAgB,KAAA,EAAe,WAAA,EAAuC;AACnG,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,IAC9B,KAAA;AAAA,IACA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,IACrB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,GAAA,EAAK,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAA;AACvE,EAAA,MAAM,QAAA,GAAW,YAAY,GAAG,CAAA;AAChC,EAAA,OAAO,oBAAA,CAAqB,UAAU,WAAW,CAAA;AACnD;AAEA,SAAS,YAAY,GAAA,EAA0B;AAC7C,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,GAAG,CAAA;AAChC,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,MAAM,CAAA,GAAI,MAAM,CAAC,CAAA;AACjB,IAAA,GAAA,IAAA,CAAQ,IAAI,EAAA,GAAK,GAAA,GAAM,EAAA,IAAM,CAAA,CAAE,SAAS,EAAE,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,oBAAA,CAAqB,GAAW,CAAA,EAAoB;AAC3D,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,QAAQ,CAAA,EAAA,EAAK;AACjC,IAAA,IAAA,IAAQ,EAAE,UAAA,CAAW,CAAC,CAAA,GAAI,CAAA,CAAE,WAAW,CAAC,CAAA;AAAA,EAC1C;AACA,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAEA,SAAS,WAAW,GAAA,EAAyB;AAC3C,EAAA,OAAO,IAAI,WAAA,CAAY,OAAO,CAAA,CAAE,OAAO,GAAG,CAAA;AAC5C;;;AC5EO,SAAS,kBACd,IAAA,EACyC;AACzC,EAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAEzE,EAAA,OAAO,eAAe,QAAQ,OAAA,EAAqC;AACjE,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,IAAA,EAAK;AACnC,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,oBAAoB,CAAA;AAC1D,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA;AAE7D,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,KAAA,GAAQ,MAAM,aAAA,CAAc;AAAA,QAC1B,OAAA;AAAA,QACA,SAAA;AAAA,QACA,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,cAAA,EAAgB,KAAK,cAAA,IAAkB,IAAA;AAAA,QACvC,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,eAAe,kBAAA,EAAoB;AACrC,QAAA,IAAA,CAAK,kBAAA,GAAqB,KAAK,OAAO,CAAA;AACtC,QAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,GAAA,CAAI,IAAA,EAAM,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,CAAA,EAAG;AAAA,UAC7E,MAAA,EAAQ,GAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,SAC/C,CAAA;AAAA,MACH;AACA,MAAA,MAAM,GAAA;AAAA,IACR;AAEA,IAAA,MAAM,GAAA,GAAsB;AAAA,MAC1B,OAAA;AAAA,MACA,UAAA;AAAA,MACA,kBAAA,EAAoB,eAAe,SAAS;AAAA,KAC9C;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA;AAAA,IAC/B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,WACpC,OAAA,CAAQ,KAAA,CAAM,iCAAA,EAAmC,GAAG,CAAA;AAEzD,MAAA,OAAO,IAAI,SAAS,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AAAA,QAC9D,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,OAC/C,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,EAC3C,CAAA;AACF;AAEA,SAAS,eAAe,MAAA,EAAsC;AAC5D,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA,EAAG;AACpC,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,KAAK,CAAA,EAAG;AACZ,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,EAAE,IAAA,EAAK;AACnC,IAAA,IAAI,QAAQ,GAAA,EAAK;AACjB,IAAA,MAAM,CAAA,GAAI,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAA,CAAE,MAAM,CAAA;AAC1C,IAAA,OAAO,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,GAAI,CAAA,GAAI,IAAA;AAAA,EAClC;AACA,EAAA,OAAO,IAAA;AACT","file":"index.cjs","sourcesContent":["/**\n * Atribu error class hierarchy.\n *\n * Why typed errors: consumers need to branch on auth-failure vs rate-limit vs\n * server-error vs validation-error to decide whether to retry, refresh\n * credentials, or surface to the user. A single `Error` with a status code\n * forces every consumer to write the same `if (err.status === 401)` ladder.\n *\n * Why no automatic retries: the SDK derives a `retry` hint from status +\n * Retry-After + error code, but consumers' queue/job systems decide whether\n * to act on it. Auto-retry inside the SDK hides backpressure signals and\n * makes error budgets opaque.\n */\n\nimport type { RetryHint } from \"./retry\";\n\nexport type ApiErrorCode =\n  | \"unauthorized\"\n  | \"forbidden\"\n  | \"insufficient_scope\"\n  | \"not_found\"\n  | \"invalid_parameter\"\n  | \"invalid_request\"\n  | \"validation_error\"\n  | \"invalid_content\"\n  | \"invalid_date_range\"\n  | \"rate_limit_exceeded\"\n  | \"connection_not_ready\"\n  | \"provider_error\"\n  | \"service_unavailable\"\n  | \"internal_error\"\n  | string;\n\nexport class AtribuError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = new.target.name;\n  }\n}\n\nexport class AtribuConfigError extends AtribuError {}\n\nexport class AtribuTransportError extends AtribuError {\n  readonly cause: unknown;\n  constructor(message: string, cause: unknown) {\n    super(message);\n    this.cause = cause;\n  }\n}\n\nexport interface ApiErrorBody {\n  code: ApiErrorCode;\n  message: string;\n  status: number;\n  request_id?: string;\n}\n\nexport class AtribuApiError extends AtribuError {\n  readonly code: ApiErrorCode;\n  readonly status: number;\n  readonly requestId: string | null;\n  readonly retry: RetryHint;\n  readonly responseBody: unknown;\n\n  constructor(args: {\n    code: ApiErrorCode;\n    message: string;\n    status: number;\n    requestId: string | null;\n    retry: RetryHint;\n    responseBody: unknown;\n  }) {\n    super(`[${args.code}] ${args.message}`);\n    this.code = args.code;\n    this.status = args.status;\n    this.requestId = args.requestId;\n    this.retry = args.retry;\n    this.responseBody = args.responseBody;\n  }\n\n  isRetryable(): boolean {\n    return this.retry.action === \"retry\" || this.retry.action === \"retry_after\";\n  }\n  isAuthFailure(): boolean {\n    return this.status === 401 || this.code === \"unauthorized\";\n  }\n  isRateLimit(): boolean {\n    return this.status === 429 || this.code === \"rate_limit_exceeded\";\n  }\n}\n\nexport type OauthErrorCode =\n  | \"invalid_request\"\n  | \"invalid_client\"\n  | \"invalid_grant\"\n  | \"unauthorized_client\"\n  | \"unsupported_grant_type\"\n  | \"invalid_scope\"\n  | \"server_error\"\n  | \"unsupported_token_type\"\n  | string;\n\nexport class AtribuOauthError extends AtribuError {\n  readonly code: OauthErrorCode;\n  readonly status: number;\n  readonly description: string | null;\n\n  constructor(args: { code: OauthErrorCode; description: string | null; status: number }) {\n    super(`[oauth/${args.code}] ${args.description ?? args.code}`);\n    this.code = args.code;\n    this.status = args.status;\n    this.description = args.description;\n  }\n}\n\nexport type WebhookErrorCode =\n  | \"missing_signature\"\n  | \"malformed_header\"\n  | \"expired_timestamp\"\n  | \"invalid_signature\";\n\nexport class AtribuWebhookError extends AtribuError {\n  readonly code: WebhookErrorCode;\n  constructor(code: WebhookErrorCode, message: string) {\n    super(message);\n    this.code = code;\n  }\n}\n","/**\n * Verify Atribu webhook signatures using Web Crypto.\n *\n * Why Web Crypto: works in Node 18+, Bun, Deno, Vercel Edge, Cloudflare\n * Workers. No `node:crypto` import keeps this subpath edge-safe.\n *\n * Header format (Stripe-style): `t=<unix_seconds>,v1=<hex_hmac_sha256>`\n * Signed string: `<t>.<rawBody>`\n *\n * Rotation: pass `previousSecret` during the grace window after rotating.\n * Atribu always signs with the current secret; the previous slot exists\n * only so subscribers can dual-verify during their own deploy.\n */\n\nimport { AtribuWebhookError } from \"../errors\";\nimport type { AtribuWebhookEvent } from \"./types\";\n\nexport interface VerifyWebhookOptions {\n  /** Raw, unparsed request body (string or Uint8Array). */\n  rawBody: string | Uint8Array;\n  /** Value of the `X-Atribu-Signature` header. */\n  signature: string | null | undefined;\n  /** Current HMAC secret. */\n  secret: string;\n  /** Previous secret during rotation grace. */\n  previousSecret?: string | null;\n  /** Max age of the signed timestamp in seconds. Default 300 (5 minutes). */\n  tolerance?: number;\n  /** Inject for tests; defaults to Date.now(). */\n  now?: () => number;\n}\n\ninterface ParsedHeader {\n  t: number;\n  v1: string;\n}\n\nexport async function verifyWebhook(opts: VerifyWebhookOptions): Promise<AtribuWebhookEvent> {\n  if (!opts.signature) {\n    throw new AtribuWebhookError(\"missing_signature\", \"Missing X-Atribu-Signature header\");\n  }\n\n  const parsed = parseHeader(opts.signature);\n  const bodyString = typeof opts.rawBody === \"string\" ? opts.rawBody : decodeUtf8(opts.rawBody);\n\n  const nowMs = (opts.now ?? Date.now)();\n  const tolerance = opts.tolerance ?? 300;\n  const ageSeconds = Math.abs(nowMs / 1000 - parsed.t);\n  if (ageSeconds > tolerance) {\n    throw new AtribuWebhookError(\n      \"expired_timestamp\",\n      `Signed timestamp is ${Math.round(ageSeconds)}s old (tolerance ${tolerance}s)`,\n    );\n  }\n\n  const signingInput = `${parsed.t}.${bodyString}`;\n  const matchesCurrent = await safeCompareHmac(opts.secret, signingInput, parsed.v1);\n  if (!matchesCurrent) {\n    const previous = opts.previousSecret;\n    if (!previous || !(await safeCompareHmac(previous, signingInput, parsed.v1))) {\n      throw new AtribuWebhookError(\"invalid_signature\", \"Signature does not match\");\n    }\n  }\n\n  return JSON.parse(bodyString) as AtribuWebhookEvent;\n}\n\nfunction parseHeader(header: string): ParsedHeader {\n  let t: number | null = null;\n  let v1: string | null = null;\n  for (const part of header.split(\",\")) {\n    const eq = part.indexOf(\"=\");\n    if (eq < 0) continue;\n    const key = part.slice(0, eq).trim();\n    const value = part.slice(eq + 1).trim();\n    if (key === \"t\") t = Number(value);\n    else if (key === \"v1\") v1 = value;\n  }\n  if (t === null || !Number.isFinite(t) || !v1) {\n    throw new AtribuWebhookError(\"malformed_header\", `Malformed signature header: ${header}`);\n  }\n  return { t, v1 };\n}\n\nasync function safeCompareHmac(secret: string, input: string, expectedHex: string): Promise<boolean> {\n  const encoder = new TextEncoder();\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  const sig = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(input));\n  const computed = bufferToHex(sig);\n  return constantTimeEqualHex(computed, expectedHex);\n}\n\nfunction bufferToHex(buf: ArrayBuffer): string {\n  const bytes = new Uint8Array(buf);\n  let hex = \"\";\n  for (let i = 0; i < bytes.length; i++) {\n    const b = bytes[i]!;\n    hex += (b < 16 ? \"0\" : \"\") + b.toString(16);\n  }\n  return hex;\n}\n\nfunction constantTimeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) {\n    diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n  }\n  return diff === 0;\n}\n\nfunction decodeUtf8(buf: Uint8Array): string {\n  return new TextDecoder(\"utf-8\").decode(buf);\n}\n","/**\n * Next.js App Router webhook handler.\n *\n * Usage:\n *\n *   // app/api/atribu-webhook/route.ts\n *   import { withAtribuWebhook } from \"@atribu/sdk/next\";\n *\n *   export const POST = withAtribuWebhook({\n *     secret: process.env.ATRIBU_WEBHOOK_SECRET!,\n *     previousSecret: process.env.ATRIBU_WEBHOOK_PREVIOUS_SECRET,\n *     onEvent: async (event) => {\n *       if (event.type === \"message.received\" && event.provider === \"whatsapp\") {\n *         // event.data.wa_message_id typed\n *       }\n *     },\n *   });\n *\n * Reads the raw body via `req.text()`, calls `verifyWebhook`, dispatches\n * the typed event to `onEvent`, and returns a 200/401 response.\n */\n\nimport { AtribuWebhookError } from \"../errors\";\nimport { verifyWebhook } from \"../webhooks/verify\";\nimport type { AtribuWebhookEvent } from \"../webhooks/types\";\n\nexport interface WithAtribuWebhookOptions {\n  secret: string;\n  previousSecret?: string | null;\n  tolerance?: number;\n  onEvent: (event: AtribuWebhookEvent, ctx: WebhookContext) => Promise<void> | void;\n  /** Called when a request arrives but signature validation fails. */\n  onInvalidSignature?: (error: AtribuWebhookError, request: Request) => void;\n  /** Called for any uncaught error inside `onEvent`. Default: log to console. */\n  onError?: (error: unknown, event: AtribuWebhookEvent | null) => void;\n}\n\nexport interface WebhookContext {\n  request: Request;\n  deliveryId: string | null;\n  signatureTimestamp: number | null;\n}\n\nexport function withAtribuWebhook(\n  opts: WithAtribuWebhookOptions,\n): (request: Request) => Promise<Response> {\n  if (!opts.secret) throw new Error(\"withAtribuWebhook: secret is required\");\n\n  return async function handler(request: Request): Promise<Response> {\n    const rawBody = await request.text();\n    const signature = request.headers.get(\"x-atribu-signature\");\n    const deliveryId = request.headers.get(\"x-atribu-delivery-id\");\n\n    let event: AtribuWebhookEvent;\n    try {\n      event = await verifyWebhook({\n        rawBody,\n        signature,\n        secret: opts.secret,\n        previousSecret: opts.previousSecret ?? null,\n        tolerance: opts.tolerance,\n      });\n    } catch (err) {\n      if (err instanceof AtribuWebhookError) {\n        opts.onInvalidSignature?.(err, request);\n        return new Response(JSON.stringify({ error: err.code, message: err.message }), {\n          status: 401,\n          headers: { \"Content-Type\": \"application/json\" },\n        });\n      }\n      throw err;\n    }\n\n    const ctx: WebhookContext = {\n      request,\n      deliveryId,\n      signatureTimestamp: parseTimestamp(signature),\n    };\n\n    try {\n      await opts.onEvent(event, ctx);\n    } catch (err) {\n      if (opts.onError) opts.onError(err, event);\n      else console.error(\"[atribu webhook] onEvent threw:\", err);\n      // Return 500 so Atribu retries — surface real failures via DLQ.\n      return new Response(JSON.stringify({ error: \"handler_error\" }), {\n        status: 500,\n        headers: { \"Content-Type\": \"application/json\" },\n      });\n    }\n\n    return new Response(null, { status: 200 });\n  };\n}\n\nfunction parseTimestamp(header: string | null): number | null {\n  if (!header) return null;\n  for (const part of header.split(\",\")) {\n    const eq = part.indexOf(\"=\");\n    if (eq < 0) continue;\n    const key = part.slice(0, eq).trim();\n    if (key !== \"t\") continue;\n    const n = Number(part.slice(eq + 1).trim());\n    return Number.isFinite(n) ? n : null;\n  }\n  return null;\n}\n"]}

package/dist/next/index.d.cts

@@ -0,0 +1,43 @@
+import { g as AtribuWebhookError } from '../errors-D3ApBz8J.cjs';
+import { A as AtribuWebhookEvent } from '../types-Dc6tIN_V.cjs';
+
+/**
+ * Next.js App Router webhook handler.
+ *
+ * Usage:
+ *
+ *   // app/api/atribu-webhook/route.ts
+ *   import { withAtribuWebhook } from "@atribu/sdk/next";
+ *
+ *   export const POST = withAtribuWebhook({
+ *     secret: process.env.ATRIBU_WEBHOOK_SECRET!,
+ *     previousSecret: process.env.ATRIBU_WEBHOOK_PREVIOUS_SECRET,
+ *     onEvent: async (event) => {
+ *       if (event.type === "message.received" && event.provider === "whatsapp") {
+ *         // event.data.wa_message_id typed
+ *       }
+ *     },
+ *   });
+ *
+ * Reads the raw body via `req.text()`, calls `verifyWebhook`, dispatches
+ * the typed event to `onEvent`, and returns a 200/401 response.
+ */
+
+interface WithAtribuWebhookOptions {
+    secret: string;
+    previousSecret?: string | null;
+    tolerance?: number;
+    onEvent: (event: AtribuWebhookEvent, ctx: WebhookContext) => Promise<void> | void;
+    /** Called when a request arrives but signature validation fails. */
+    onInvalidSignature?: (error: AtribuWebhookError, request: Request) => void;
+    /** Called for any uncaught error inside `onEvent`. Default: log to console. */
+    onError?: (error: unknown, event: AtribuWebhookEvent | null) => void;
+}
+interface WebhookContext {
+    request: Request;
+    deliveryId: string | null;
+    signatureTimestamp: number | null;
+}
+declare function withAtribuWebhook(opts: WithAtribuWebhookOptions): (request: Request) => Promise<Response>;
+
+export { AtribuWebhookEvent, type WebhookContext, type WithAtribuWebhookOptions, withAtribuWebhook };

package/dist/next/index.d.ts

@@ -0,0 +1,43 @@
+import { g as AtribuWebhookError } from '../errors-D3ApBz8J.js';
+import { A as AtribuWebhookEvent } from '../types-Dc6tIN_V.js';
+
+/**
+ * Next.js App Router webhook handler.
+ *
+ * Usage:
+ *
+ *   // app/api/atribu-webhook/route.ts
+ *   import { withAtribuWebhook } from "@atribu/sdk/next";
+ *
+ *   export const POST = withAtribuWebhook({
+ *     secret: process.env.ATRIBU_WEBHOOK_SECRET!,
+ *     previousSecret: process.env.ATRIBU_WEBHOOK_PREVIOUS_SECRET,
+ *     onEvent: async (event) => {
+ *       if (event.type === "message.received" && event.provider === "whatsapp") {
+ *         // event.data.wa_message_id typed
+ *       }
+ *     },
+ *   });
+ *
+ * Reads the raw body via `req.text()`, calls `verifyWebhook`, dispatches
+ * the typed event to `onEvent`, and returns a 200/401 response.
+ */
+
+interface WithAtribuWebhookOptions {
+    secret: string;
+    previousSecret?: string | null;
+    tolerance?: number;
+    onEvent: (event: AtribuWebhookEvent, ctx: WebhookContext) => Promise<void> | void;
+    /** Called when a request arrives but signature validation fails. */
+    onInvalidSignature?: (error: AtribuWebhookError, request: Request) => void;
+    /** Called for any uncaught error inside `onEvent`. Default: log to console. */
+    onError?: (error: unknown, event: AtribuWebhookEvent | null) => void;
+}
+interface WebhookContext {
+    request: Request;
+    deliveryId: string | null;
+    signatureTimestamp: number | null;
+}
+declare function withAtribuWebhook(opts: WithAtribuWebhookOptions): (request: Request) => Promise<Response>;
+
+export { AtribuWebhookEvent, type WebhookContext, type WithAtribuWebhookOptions, withAtribuWebhook };

package/dist/next/index.js

@@ -0,0 +1,151 @@
+// src/errors.ts
+var AtribuError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = new.target.name;
+  }
+};
+var AtribuWebhookError = class extends AtribuError {
+  code;
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+  }
+};
+
+// src/webhooks/verify.ts
+async function verifyWebhook(opts) {
+  if (!opts.signature) {
+    throw new AtribuWebhookError("missing_signature", "Missing X-Atribu-Signature header");
+  }
+  const parsed = parseHeader(opts.signature);
+  const bodyString = typeof opts.rawBody === "string" ? opts.rawBody : decodeUtf8(opts.rawBody);
+  const nowMs = (opts.now ?? Date.now)();
+  const tolerance = opts.tolerance ?? 300;
+  const ageSeconds = Math.abs(nowMs / 1e3 - parsed.t);
+  if (ageSeconds > tolerance) {
+    throw new AtribuWebhookError(
+      "expired_timestamp",
+      `Signed timestamp is ${Math.round(ageSeconds)}s old (tolerance ${tolerance}s)`
+    );
+  }
+  const signingInput = `${parsed.t}.${bodyString}`;
+  const matchesCurrent = await safeCompareHmac(opts.secret, signingInput, parsed.v1);
+  if (!matchesCurrent) {
+    const previous = opts.previousSecret;
+    if (!previous || !await safeCompareHmac(previous, signingInput, parsed.v1)) {
+      throw new AtribuWebhookError("invalid_signature", "Signature does not match");
+    }
+  }
+  return JSON.parse(bodyString);
+}
+function parseHeader(header) {
+  let t = null;
+  let v1 = null;
+  for (const part of header.split(",")) {
+    const eq = part.indexOf("=");
+    if (eq < 0) continue;
+    const key = part.slice(0, eq).trim();
+    const value = part.slice(eq + 1).trim();
+    if (key === "t") t = Number(value);
+    else if (key === "v1") v1 = value;
+  }
+  if (t === null || !Number.isFinite(t) || !v1) {
+    throw new AtribuWebhookError("malformed_header", `Malformed signature header: ${header}`);
+  }
+  return { t, v1 };
+}
+async function safeCompareHmac(secret, input, expectedHex) {
+  const encoder = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await crypto.subtle.sign("HMAC", key, encoder.encode(input));
+  const computed = bufferToHex(sig);
+  return constantTimeEqualHex(computed, expectedHex);
+}
+function bufferToHex(buf) {
+  const bytes = new Uint8Array(buf);
+  let hex = "";
+  for (let i = 0; i < bytes.length; i++) {
+    const b = bytes[i];
+    hex += (b < 16 ? "0" : "") + b.toString(16);
+  }
+  return hex;
+}
+function constantTimeEqualHex(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) {
+    diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  }
+  return diff === 0;
+}
+function decodeUtf8(buf) {
+  return new TextDecoder("utf-8").decode(buf);
+}
+
+// src/next/webhook-handler.ts
+function withAtribuWebhook(opts) {
+  if (!opts.secret) throw new Error("withAtribuWebhook: secret is required");
+  return async function handler(request) {
+    const rawBody = await request.text();
+    const signature = request.headers.get("x-atribu-signature");
+    const deliveryId = request.headers.get("x-atribu-delivery-id");
+    let event;
+    try {
+      event = await verifyWebhook({
+        rawBody,
+        signature,
+        secret: opts.secret,
+        previousSecret: opts.previousSecret ?? null,
+        tolerance: opts.tolerance
+      });
+    } catch (err) {
+      if (err instanceof AtribuWebhookError) {
+        opts.onInvalidSignature?.(err, request);
+        return new Response(JSON.stringify({ error: err.code, message: err.message }), {
+          status: 401,
+          headers: { "Content-Type": "application/json" }
+        });
+      }
+      throw err;
+    }
+    const ctx = {
+      request,
+      deliveryId,
+      signatureTimestamp: parseTimestamp(signature)
+    };
+    try {
+      await opts.onEvent(event, ctx);
+    } catch (err) {
+      if (opts.onError) opts.onError(err, event);
+      else console.error("[atribu webhook] onEvent threw:", err);
+      return new Response(JSON.stringify({ error: "handler_error" }), {
+        status: 500,
+        headers: { "Content-Type": "application/json" }
+      });
+    }
+    return new Response(null, { status: 200 });
+  };
+}
+function parseTimestamp(header) {
+  if (!header) return null;
+  for (const part of header.split(",")) {
+    const eq = part.indexOf("=");
+    if (eq < 0) continue;
+    const key = part.slice(0, eq).trim();
+    if (key !== "t") continue;
+    const n = Number(part.slice(eq + 1).trim());
+    return Number.isFinite(n) ? n : null;
+  }
+  return null;
+}
+
+export { withAtribuWebhook };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/next/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/errors.ts","../../src/webhooks/verify.ts","../../src/next/webhook-handler.ts"],"names":[],"mappings":";AAiCO,IAAM,WAAA,GAAN,cAA0B,KAAA,CAAM;AAAA,EACrC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,OAAO,GAAA,CAAA,MAAA,CAAW,IAAA;AAAA,EACzB;AACF,CAAA;AAmFO,IAAM,kBAAA,GAAN,cAAiC,WAAA,CAAY;AAAA,EACzC,IAAA;AAAA,EACT,WAAA,CAAY,MAAwB,OAAA,EAAiB;AACnD,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF,CAAA;;;AC1FA,eAAsB,cAAc,IAAA,EAAyD;AAC3F,EAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,IAAA,MAAM,IAAI,kBAAA,CAAmB,mBAAA,EAAqB,mCAAmC,CAAA;AAAA,EACvF;AAEA,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,IAAA,CAAK,SAAS,CAAA;AACzC,EAAA,MAAM,UAAA,GAAa,OAAO,IAAA,CAAK,OAAA,KAAY,WAAW,IAAA,CAAK,OAAA,GAAU,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA;AAE5F,EAAA,MAAM,KAAA,GAAA,CAAS,IAAA,CAAK,GAAA,IAAO,IAAA,CAAK,GAAA,GAAK;AACrC,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,GAAA;AACpC,EAAA,MAAM,aAAa,IAAA,CAAK,GAAA,CAAI,KAAA,GAAQ,GAAA,GAAO,OAAO,CAAC,CAAA;AACnD,EAAA,IAAI,aAAa,SAAA,EAAW;AAC1B,IAAA,MAAM,IAAI,kBAAA;AAAA,MACR,mBAAA;AAAA,MACA,uBAAuB,IAAA,CAAK,KAAA,CAAM,UAAU,CAAC,oBAAoB,SAAS,CAAA,EAAA;AAAA,KAC5E;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,CAAA,EAAG,MAAA,CAAO,CAAC,IAAI,UAAU,CAAA,CAAA;AAC9C,EAAA,MAAM,iBAAiB,MAAM,eAAA,CAAgB,KAAK,MAAA,EAAQ,YAAA,EAAc,OAAO,EAAE,CAAA;AACjF,EAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,IAAA,MAAM,WAAW,IAAA,CAAK,cAAA;AACtB,IAAA,IAAI,CAAC,YAAY,CAAE,MAAM,gBAAgB,QAAA,EAAU,YAAA,EAAc,MAAA,CAAO,EAAE,CAAA,EAAI;AAC5E,MAAA,MAAM,IAAI,kBAAA,CAAmB,mBAAA,EAAqB,0BAA0B,CAAA;AAAA,IAC9E;AAAA,EACF;AAEA,EAAA,OAAO,IAAA,CAAK,MAAM,UAAU,CAAA;AAC9B;AAEA,SAAS,YAAY,MAAA,EAA8B;AACjD,EAAA,IAAI,CAAA,GAAmB,IAAA;AACvB,EAAA,IAAI,EAAA,GAAoB,IAAA;AACxB,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA,EAAG;AACpC,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,KAAK,CAAA,EAAG;AACZ,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,EAAE,IAAA,EAAK;AACnC,IAAA,MAAM,QAAQ,IAAA,CAAK,KAAA,CAAM,EAAA,GAAK,CAAC,EAAE,IAAA,EAAK;AACtC,IAAA,IAAI,GAAA,KAAQ,GAAA,EAAK,CAAA,GAAI,MAAA,CAAO,KAAK,CAAA;AAAA,SAAA,IACxB,GAAA,KAAQ,MAAM,EAAA,GAAK,KAAA;AAAA,EAC9B;AACA,EAAA,IAAI,CAAA,KAAM,QAAQ,CAAC,MAAA,CAAO,SAAS,CAAC,CAAA,IAAK,CAAC,EAAA,EAAI;AAC5C,IAAA,MAAM,IAAI,kBAAA,CAAmB,kBAAA,EAAoB,CAAA,4BAAA,EAA+B,MAAM,CAAA,CAAE,CAAA;AAAA,EAC1F;AACA,EAAA,OAAO,EAAE,GAAG,EAAA,EAAG;AACjB;AAEA,eAAe,eAAA,CAAgB,MAAA,EAAgB,KAAA,EAAe,WAAA,EAAuC;AACnG,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,IAC9B,KAAA;AAAA,IACA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,IACrB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,GAAA,EAAK,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAA;AACvE,EAAA,MAAM,QAAA,GAAW,YAAY,GAAG,CAAA;AAChC,EAAA,OAAO,oBAAA,CAAqB,UAAU,WAAW,CAAA;AACnD;AAEA,SAAS,YAAY,GAAA,EAA0B;AAC7C,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,GAAG,CAAA;AAChC,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACrC,IAAA,MAAM,CAAA,GAAI,MAAM,CAAC,CAAA;AACjB,IAAA,GAAA,IAAA,CAAQ,IAAI,EAAA,GAAK,GAAA,GAAM,EAAA,IAAM,CAAA,CAAE,SAAS,EAAE,CAAA;AAAA,EAC5C;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,oBAAA,CAAqB,GAAW,CAAA,EAAoB;AAC3D,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,QAAQ,CAAA,EAAA,EAAK;AACjC,IAAA,IAAA,IAAQ,EAAE,UAAA,CAAW,CAAC,CAAA,GAAI,CAAA,CAAE,WAAW,CAAC,CAAA;AAAA,EAC1C;AACA,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAEA,SAAS,WAAW,GAAA,EAAyB;AAC3C,EAAA,OAAO,IAAI,WAAA,CAAY,OAAO,CAAA,CAAE,OAAO,GAAG,CAAA;AAC5C;;;AC5EO,SAAS,kBACd,IAAA,EACyC;AACzC,EAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAEzE,EAAA,OAAO,eAAe,QAAQ,OAAA,EAAqC;AACjE,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,IAAA,EAAK;AACnC,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,oBAAoB,CAAA;AAC1D,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA;AAE7D,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,KAAA,GAAQ,MAAM,aAAA,CAAc;AAAA,QAC1B,OAAA;AAAA,QACA,SAAA;AAAA,QACA,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,cAAA,EAAgB,KAAK,cAAA,IAAkB,IAAA;AAAA,QACvC,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,eAAe,kBAAA,EAAoB;AACrC,QAAA,IAAA,CAAK,kBAAA,GAAqB,KAAK,OAAO,CAAA;AACtC,QAAA,OAAO,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,GAAA,CAAI,IAAA,EAAM,OAAA,EAAS,GAAA,CAAI,OAAA,EAAS,CAAA,EAAG;AAAA,UAC7E,MAAA,EAAQ,GAAA;AAAA,UACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,SAC/C,CAAA;AAAA,MACH;AACA,MAAA,MAAM,GAAA;AAAA,IACR;AAEA,IAAA,MAAM,GAAA,GAAsB;AAAA,MAC1B,OAAA;AAAA,MACA,UAAA;AAAA,MACA,kBAAA,EAAoB,eAAe,SAAS;AAAA,KAC9C;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA;AAAA,IAC/B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,IAAA,CAAK,OAAA,EAAS,IAAA,CAAK,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,WACpC,OAAA,CAAQ,KAAA,CAAM,iCAAA,EAAmC,GAAG,CAAA;AAEzD,MAAA,OAAO,IAAI,SAAS,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,eAAA,EAAiB,CAAA,EAAG;AAAA,QAC9D,MAAA,EAAQ,GAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA;AAAmB,OAC/C,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,EAC3C,CAAA;AACF;AAEA,SAAS,eAAe,MAAA,EAAsC;AAC5D,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,CAAO,KAAA,CAAM,GAAG,CAAA,EAAG;AACpC,IAAA,MAAM,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC3B,IAAA,IAAI,KAAK,CAAA,EAAG;AACZ,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,EAAE,IAAA,EAAK;AACnC,IAAA,IAAI,QAAQ,GAAA,EAAK;AACjB,IAAA,MAAM,CAAA,GAAI,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAA,CAAE,MAAM,CAAA;AAC1C,IAAA,OAAO,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,GAAI,CAAA,GAAI,IAAA;AAAA,EAClC;AACA,EAAA,OAAO,IAAA;AACT","file":"index.js","sourcesContent":["/**\n * Atribu error class hierarchy.\n *\n * Why typed errors: consumers need to branch on auth-failure vs rate-limit vs\n * server-error vs validation-error to decide whether to retry, refresh\n * credentials, or surface to the user. A single `Error` with a status code\n * forces every consumer to write the same `if (err.status === 401)` ladder.\n *\n * Why no automatic retries: the SDK derives a `retry` hint from status +\n * Retry-After + error code, but consumers' queue/job systems decide whether\n * to act on it. Auto-retry inside the SDK hides backpressure signals and\n * makes error budgets opaque.\n */\n\nimport type { RetryHint } from \"./retry\";\n\nexport type ApiErrorCode =\n  | \"unauthorized\"\n  | \"forbidden\"\n  | \"insufficient_scope\"\n  | \"not_found\"\n  | \"invalid_parameter\"\n  | \"invalid_request\"\n  | \"validation_error\"\n  | \"invalid_content\"\n  | \"invalid_date_range\"\n  | \"rate_limit_exceeded\"\n  | \"connection_not_ready\"\n  | \"provider_error\"\n  | \"service_unavailable\"\n  | \"internal_error\"\n  | string;\n\nexport class AtribuError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = new.target.name;\n  }\n}\n\nexport class AtribuConfigError extends AtribuError {}\n\nexport class AtribuTransportError extends AtribuError {\n  readonly cause: unknown;\n  constructor(message: string, cause: unknown) {\n    super(message);\n    this.cause = cause;\n  }\n}\n\nexport interface ApiErrorBody {\n  code: ApiErrorCode;\n  message: string;\n  status: number;\n  request_id?: string;\n}\n\nexport class AtribuApiError extends AtribuError {\n  readonly code: ApiErrorCode;\n  readonly status: number;\n  readonly requestId: string | null;\n  readonly retry: RetryHint;\n  readonly responseBody: unknown;\n\n  constructor(args: {\n    code: ApiErrorCode;\n    message: string;\n    status: number;\n    requestId: string | null;\n    retry: RetryHint;\n    responseBody: unknown;\n  }) {\n    super(`[${args.code}] ${args.message}`);\n    this.code = args.code;\n    this.status = args.status;\n    this.requestId = args.requestId;\n    this.retry = args.retry;\n    this.responseBody = args.responseBody;\n  }\n\n  isRetryable(): boolean {\n    return this.retry.action === \"retry\" || this.retry.action === \"retry_after\";\n  }\n  isAuthFailure(): boolean {\n    return this.status === 401 || this.code === \"unauthorized\";\n  }\n  isRateLimit(): boolean {\n    return this.status === 429 || this.code === \"rate_limit_exceeded\";\n  }\n}\n\nexport type OauthErrorCode =\n  | \"invalid_request\"\n  | \"invalid_client\"\n  | \"invalid_grant\"\n  | \"unauthorized_client\"\n  | \"unsupported_grant_type\"\n  | \"invalid_scope\"\n  | \"server_error\"\n  | \"unsupported_token_type\"\n  | string;\n\nexport class AtribuOauthError extends AtribuError {\n  readonly code: OauthErrorCode;\n  readonly status: number;\n  readonly description: string | null;\n\n  constructor(args: { code: OauthErrorCode; description: string | null; status: number }) {\n    super(`[oauth/${args.code}] ${args.description ?? args.code}`);\n    this.code = args.code;\n    this.status = args.status;\n    this.description = args.description;\n  }\n}\n\nexport type WebhookErrorCode =\n  | \"missing_signature\"\n  | \"malformed_header\"\n  | \"expired_timestamp\"\n  | \"invalid_signature\";\n\nexport class AtribuWebhookError extends AtribuError {\n  readonly code: WebhookErrorCode;\n  constructor(code: WebhookErrorCode, message: string) {\n    super(message);\n    this.code = code;\n  }\n}\n","/**\n * Verify Atribu webhook signatures using Web Crypto.\n *\n * Why Web Crypto: works in Node 18+, Bun, Deno, Vercel Edge, Cloudflare\n * Workers. No `node:crypto` import keeps this subpath edge-safe.\n *\n * Header format (Stripe-style): `t=<unix_seconds>,v1=<hex_hmac_sha256>`\n * Signed string: `<t>.<rawBody>`\n *\n * Rotation: pass `previousSecret` during the grace window after rotating.\n * Atribu always signs with the current secret; the previous slot exists\n * only so subscribers can dual-verify during their own deploy.\n */\n\nimport { AtribuWebhookError } from \"../errors\";\nimport type { AtribuWebhookEvent } from \"./types\";\n\nexport interface VerifyWebhookOptions {\n  /** Raw, unparsed request body (string or Uint8Array). */\n  rawBody: string | Uint8Array;\n  /** Value of the `X-Atribu-Signature` header. */\n  signature: string | null | undefined;\n  /** Current HMAC secret. */\n  secret: string;\n  /** Previous secret during rotation grace. */\n  previousSecret?: string | null;\n  /** Max age of the signed timestamp in seconds. Default 300 (5 minutes). */\n  tolerance?: number;\n  /** Inject for tests; defaults to Date.now(). */\n  now?: () => number;\n}\n\ninterface ParsedHeader {\n  t: number;\n  v1: string;\n}\n\nexport async function verifyWebhook(opts: VerifyWebhookOptions): Promise<AtribuWebhookEvent> {\n  if (!opts.signature) {\n    throw new AtribuWebhookError(\"missing_signature\", \"Missing X-Atribu-Signature header\");\n  }\n\n  const parsed = parseHeader(opts.signature);\n  const bodyString = typeof opts.rawBody === \"string\" ? opts.rawBody : decodeUtf8(opts.rawBody);\n\n  const nowMs = (opts.now ?? Date.now)();\n  const tolerance = opts.tolerance ?? 300;\n  const ageSeconds = Math.abs(nowMs / 1000 - parsed.t);\n  if (ageSeconds > tolerance) {\n    throw new AtribuWebhookError(\n      \"expired_timestamp\",\n      `Signed timestamp is ${Math.round(ageSeconds)}s old (tolerance ${tolerance}s)`,\n    );\n  }\n\n  const signingInput = `${parsed.t}.${bodyString}`;\n  const matchesCurrent = await safeCompareHmac(opts.secret, signingInput, parsed.v1);\n  if (!matchesCurrent) {\n    const previous = opts.previousSecret;\n    if (!previous || !(await safeCompareHmac(previous, signingInput, parsed.v1))) {\n      throw new AtribuWebhookError(\"invalid_signature\", \"Signature does not match\");\n    }\n  }\n\n  return JSON.parse(bodyString) as AtribuWebhookEvent;\n}\n\nfunction parseHeader(header: string): ParsedHeader {\n  let t: number | null = null;\n  let v1: string | null = null;\n  for (const part of header.split(\",\")) {\n    const eq = part.indexOf(\"=\");\n    if (eq < 0) continue;\n    const key = part.slice(0, eq).trim();\n    const value = part.slice(eq + 1).trim();\n    if (key === \"t\") t = Number(value);\n    else if (key === \"v1\") v1 = value;\n  }\n  if (t === null || !Number.isFinite(t) || !v1) {\n    throw new AtribuWebhookError(\"malformed_header\", `Malformed signature header: ${header}`);\n  }\n  return { t, v1 };\n}\n\nasync function safeCompareHmac(secret: string, input: string, expectedHex: string): Promise<boolean> {\n  const encoder = new TextEncoder();\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  const sig = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(input));\n  const computed = bufferToHex(sig);\n  return constantTimeEqualHex(computed, expectedHex);\n}\n\nfunction bufferToHex(buf: ArrayBuffer): string {\n  const bytes = new Uint8Array(buf);\n  let hex = \"\";\n  for (let i = 0; i < bytes.length; i++) {\n    const b = bytes[i]!;\n    hex += (b < 16 ? \"0\" : \"\") + b.toString(16);\n  }\n  return hex;\n}\n\nfunction constantTimeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) {\n    diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n  }\n  return diff === 0;\n}\n\nfunction decodeUtf8(buf: Uint8Array): string {\n  return new TextDecoder(\"utf-8\").decode(buf);\n}\n","/**\n * Next.js App Router webhook handler.\n *\n * Usage:\n *\n *   // app/api/atribu-webhook/route.ts\n *   import { withAtribuWebhook } from \"@atribu/sdk/next\";\n *\n *   export const POST = withAtribuWebhook({\n *     secret: process.env.ATRIBU_WEBHOOK_SECRET!,\n *     previousSecret: process.env.ATRIBU_WEBHOOK_PREVIOUS_SECRET,\n *     onEvent: async (event) => {\n *       if (event.type === \"message.received\" && event.provider === \"whatsapp\") {\n *         // event.data.wa_message_id typed\n *       }\n *     },\n *   });\n *\n * Reads the raw body via `req.text()`, calls `verifyWebhook`, dispatches\n * the typed event to `onEvent`, and returns a 200/401 response.\n */\n\nimport { AtribuWebhookError } from \"../errors\";\nimport { verifyWebhook } from \"../webhooks/verify\";\nimport type { AtribuWebhookEvent } from \"../webhooks/types\";\n\nexport interface WithAtribuWebhookOptions {\n  secret: string;\n  previousSecret?: string | null;\n  tolerance?: number;\n  onEvent: (event: AtribuWebhookEvent, ctx: WebhookContext) => Promise<void> | void;\n  /** Called when a request arrives but signature validation fails. */\n  onInvalidSignature?: (error: AtribuWebhookError, request: Request) => void;\n  /** Called for any uncaught error inside `onEvent`. Default: log to console. */\n  onError?: (error: unknown, event: AtribuWebhookEvent | null) => void;\n}\n\nexport interface WebhookContext {\n  request: Request;\n  deliveryId: string | null;\n  signatureTimestamp: number | null;\n}\n\nexport function withAtribuWebhook(\n  opts: WithAtribuWebhookOptions,\n): (request: Request) => Promise<Response> {\n  if (!opts.secret) throw new Error(\"withAtribuWebhook: secret is required\");\n\n  return async function handler(request: Request): Promise<Response> {\n    const rawBody = await request.text();\n    const signature = request.headers.get(\"x-atribu-signature\");\n    const deliveryId = request.headers.get(\"x-atribu-delivery-id\");\n\n    let event: AtribuWebhookEvent;\n    try {\n      event = await verifyWebhook({\n        rawBody,\n        signature,\n        secret: opts.secret,\n        previousSecret: opts.previousSecret ?? null,\n        tolerance: opts.tolerance,\n      });\n    } catch (err) {\n      if (err instanceof AtribuWebhookError) {\n        opts.onInvalidSignature?.(err, request);\n        return new Response(JSON.stringify({ error: err.code, message: err.message }), {\n          status: 401,\n          headers: { \"Content-Type\": \"application/json\" },\n        });\n      }\n      throw err;\n    }\n\n    const ctx: WebhookContext = {\n      request,\n      deliveryId,\n      signatureTimestamp: parseTimestamp(signature),\n    };\n\n    try {\n      await opts.onEvent(event, ctx);\n    } catch (err) {\n      if (opts.onError) opts.onError(err, event);\n      else console.error(\"[atribu webhook] onEvent threw:\", err);\n      // Return 500 so Atribu retries — surface real failures via DLQ.\n      return new Response(JSON.stringify({ error: \"handler_error\" }), {\n        status: 500,\n        headers: { \"Content-Type\": \"application/json\" },\n      });\n    }\n\n    return new Response(null, { status: 200 });\n  };\n}\n\nfunction parseTimestamp(header: string | null): number | null {\n  if (!header) return null;\n  for (const part of header.split(\",\")) {\n    const eq = part.indexOf(\"=\");\n    if (eq < 0) continue;\n    const key = part.slice(0, eq).trim();\n    if (key !== \"t\") continue;\n    const n = Number(part.slice(eq + 1).trim());\n    return Number.isFinite(n) ? n : null;\n  }\n  return null;\n}\n"]}