@calmlens/sdk 0.7.0 → 0.8.1

package/cjs/{CalmLensTypes-BpmT60j-.d.ts → CalmLensTypes-B7hr0SBv.d.ts}

@@ -2979,6 +2979,109 @@ declare const EVENT_TYPE_INFO: {
       lastError: zod.ZodOptional<zod.ZodNullable<zod.ZodString>>;
     }, zod.core.$strip>;
   };
+  readonly "appeal.submitted": {
+    id: "appeal.submitted";
+    name: string;
+    description: string;
+    category: EventCategory;
+    severity: EventSeverity;
+    /** Whether the in-app connector (notification bell) subscribes to the type by default. */
+    notify: boolean;
+    fields: {
+      appealId: EventFieldDefinition<zod.ZodString>;
+      subjectType: EventFieldDefinition<zod.ZodEnum<{
+        post: "post";
+        "reported-post": "reported-post";
+        "reported-user": "reported-user";
+        user: "user";
+      }>>;
+      subjectId: EventFieldDefinition<zod.ZodString>;
+    };
+    /** Example data, used for synthetic test sends (`createSampleEvent`). */
+    example: NoInfer<{
+      appealId: string;
+      subjectType: "post" | "reported-post" | "reported-user" | "user";
+      subjectId: string;
+    }>;
+    factInfo: {
+      label: string;
+      description: string;
+      display: EventFieldDisplay;
+      /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
+      hidden?: boolean;
+      schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
+      key: string;
+    }[];
+    values: zod.ZodObject<{
+      appealId: zod.ZodString;
+      subjectType: zod.ZodEnum<{
+        post: "post";
+        "reported-post": "reported-post";
+        "reported-user": "reported-user";
+        user: "user";
+      }>;
+      subjectId: zod.ZodString;
+    }, zod.core.$strip>;
+  };
+  readonly "appeal.resolved": {
+    id: "appeal.resolved";
+    name: string;
+    description: string;
+    category: EventCategory;
+    severity: EventSeverity;
+    /** Whether the in-app connector (notification bell) subscribes to the type by default. */
+    notify: boolean;
+    fields: {
+      appealId: EventFieldDefinition<zod.ZodString>;
+      subjectType: EventFieldDefinition<zod.ZodEnum<{
+        post: "post";
+        "reported-post": "reported-post";
+        "reported-user": "reported-user";
+        user: "user";
+      }>>;
+      subjectId: EventFieldDefinition<zod.ZodString>;
+      decision: EventFieldDefinition<zod.ZodEnum<{
+        overturned: "overturned";
+        upheld: "upheld";
+      }>>;
+      action: EventFieldDefinition<zod.ZodString>;
+      appliedToAsset: EventFieldDefinition<zod.ZodBoolean>;
+    };
+    /** Example data, used for synthetic test sends (`createSampleEvent`). */
+    example: NoInfer<{
+      appealId: string;
+      subjectType: "post" | "reported-post" | "reported-user" | "user";
+      subjectId: string;
+      decision: "overturned" | "upheld";
+      action: string;
+      appliedToAsset: boolean;
+    }>;
+    factInfo: {
+      label: string;
+      description: string;
+      display: EventFieldDisplay;
+      /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
+      hidden?: boolean;
+      schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
+      key: string;
+    }[];
+    values: zod.ZodObject<{
+      appealId: zod.ZodString;
+      subjectType: zod.ZodEnum<{
+        post: "post";
+        "reported-post": "reported-post";
+        "reported-user": "reported-user";
+        user: "user";
+      }>;
+      subjectId: zod.ZodString;
+      decision: zod.ZodEnum<{
+        overturned: "overturned";
+        upheld: "upheld";
+      }>;
+      action: zod.ZodString;
+      appliedToAsset: zod.ZodBoolean;
+    }, zod.core.$strip>;
+  };
 };
 type EventType = keyof typeof EVENT_TYPE_INFO;
 type EventTypeInfo<TType extends EventType = EventType> = (typeof EVENT_TYPE_INFO)[TType];
@@ -3022,6 +3125,8 @@ declare const EVENT_SCHEMA: zod.ZodObject<{
   projectId: zod.ZodString;
   userId: zod.ZodOptional<zod.ZodNullable<zod.ZodPipe<zod.ZodString, zod.ZodTransform<string, string>>>>;
   type: zod.ZodEnum<{
+    "appeal.resolved": "appeal.resolved";
+    "appeal.submitted": "appeal.submitted";
     "asset.approved": "asset.approved";
     "asset.classified": "asset.classified";
     "asset.failed": "asset.failed";

package/cjs/index.d.ts

@@ -1,4 +1,4 @@
-import { A as GetEventsResponse, B as EventFactValues, C as UpdateAssetOptions, D as GetAssetChildrenResponse, E as VerifyWebhookSignatureOptions, F as Folder, G as AssetStatus, H as EventSeverity, I as Event, J as MetadataItem, K as AssetType, L as TypedEvent, M as RequestErrorCode, O as GetAssetResponse, P as Lens, R as EventCategory, S as SubmitAssetOptions, T as UploadAssetPartOptions, U as EventType, V as EventFacts, W as Asset, Y as ProcessingOptions, _ as MultipartUploadOptions, a as CreateAssetSignedUrlOptions, b as RetrieveAssetOptions, c as EnsureLensOptions, d as ListAssetChildrenOptions, f as ListAssetsOptions, g as MoveFolderOptions, h as MoveAssetOptions, i as CdnServeOptions, j as PostAssetSignedUrlResponse, k as GetAssetsPageResponse, l as EnsureLensesOptions, m as ModerateTextOptions, n as CalmLensClientOptions, o as CreateFolderOptions, p as ListEventsOptions, q as AssetVisibility, r as CdnAssetUrlOptions, s as CreateMultipartUploadPartOptions, t as AssetContentOptions, u as FolderIdOptions, v as MultipartUploadPartOptions, w as UpdateFolderOptions, x as RetryAssetOptions, y as RequestOptions, z as EventFact } from "./CalmLensTypes-BpmT60j-.js";
+import { A as GetEventsResponse, B as EventFactValues, C as UpdateAssetOptions, D as GetAssetChildrenResponse, E as VerifyWebhookSignatureOptions, F as Folder, G as AssetStatus, H as EventSeverity, I as Event, J as MetadataItem, K as AssetType, L as TypedEvent, M as RequestErrorCode, O as GetAssetResponse, P as Lens, R as EventCategory, S as SubmitAssetOptions, T as UploadAssetPartOptions, U as EventType, V as EventFacts, W as Asset, Y as ProcessingOptions, _ as MultipartUploadOptions, a as CreateAssetSignedUrlOptions, b as RetrieveAssetOptions, c as EnsureLensOptions, d as ListAssetChildrenOptions, f as ListAssetsOptions, g as MoveFolderOptions, h as MoveAssetOptions, i as CdnServeOptions, j as PostAssetSignedUrlResponse, k as GetAssetsPageResponse, l as EnsureLensesOptions, m as ModerateTextOptions, n as CalmLensClientOptions, o as CreateFolderOptions, p as ListEventsOptions, q as AssetVisibility, r as CdnAssetUrlOptions, s as CreateMultipartUploadPartOptions, t as AssetContentOptions, u as FolderIdOptions, v as MultipartUploadPartOptions, w as UpdateFolderOptions, x as RetryAssetOptions, y as RequestOptions, z as EventFact } from "./CalmLensTypes-B7hr0SBv.js";
 import * as zod from "zod";
 //#region ../shared/src/AssetSearch.d.ts
 declare const ASSET_SEARCH_QUERY_SCHEMA: zod.ZodObject<{

package/cjs/index.js

@@ -244,6 +244,42 @@ function generateMediaTestCode(signal, projectId) {
 	return `Calm Lens test ${[...suffix].map((character) => HEX_WORDS[Number.parseInt(character, 16)]).join(" ")} ${signal.replace(/[.-]/g, " ")} end test`;
 }
 //#endregion
+//#region ../shared/src/CryptoUtils.ts
+const encoder = new TextEncoder();
+/** Lowercase hex of `bytes`, two characters per byte. */
+const bytesToHex = (bytes) => Array.from(bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes), (byte) => byte.toString(16).padStart(2, "0")).join("");
+(function() {
+	var _ref = require_CalmLensUtils._asyncToGenerator(function* (value) {
+		return bytesToHex(yield crypto.subtle.digest("SHA-256", encoder.encode(value)));
+	});
+	return function sha256Hex(_x) {
+		return _ref.apply(this, arguments);
+	};
+})();
+/** HMAC-SHA256 of `message` keyed with `secret` (both UTF-8 encoded), as lowercase hex. */
+const hmacSha256Hex = function() {
+	var _ref2 = require_CalmLensUtils._asyncToGenerator(function* (secret, message) {
+		const key = yield crypto.subtle.importKey("raw", encoder.encode(secret), {
+			name: "HMAC",
+			hash: "SHA-256"
+		}, false, ["sign"]);
+		return bytesToHex(yield crypto.subtle.sign("HMAC", key, encoder.encode(message)));
+	});
+	return function hmacSha256Hex(_x2, _x3) {
+		return _ref2.apply(this, arguments);
+	};
+}();
+/**
+* Compares two strings without leaking, through timing, where they first differ. Strings of
+* different lengths are unequal immediately (the length itself is not secret here).
+*/
+const timingSafeEqual = (a, b) => {
+	if (a.length !== b.length) return false;
+	let difference = 0;
+	for (let index = 0; index < a.length; index++) difference |= a.charCodeAt(index) ^ b.charCodeAt(index);
+	return difference === 0;
+};
+//#endregion
 //#region src/client/CalmLensWebhooks.ts
 const WEBHOOK_DELIVERY_HEADER = "x-calmlens-delivery";
 const WEBHOOK_TIMESTAMP_HEADER = "x-calmlens-timestamp";
@@ -268,39 +304,18 @@ const toWebhookEventPayload = (event) => {
 		}
 	};
 };
-const encoder = new TextEncoder();
-const hmacSha256Hex = function() {
-	var _ref = require_CalmLensUtils._asyncToGenerator(function* (secret, message) {
-		const key = yield crypto.subtle.importKey("raw", encoder.encode(secret), {
-			name: "HMAC",
-			hash: "SHA-256"
-		}, false, ["sign"]);
-		const signature = yield crypto.subtle.sign("HMAC", key, encoder.encode(message));
-		return Array.from(new Uint8Array(signature), (byte) => byte.toString(16).padStart(2, "0")).join("");
-	});
-	return function hmacSha256Hex(_x, _x2) {
-		return _ref.apply(this, arguments);
-	};
-}();
-/** Constant-time comparison of two strings of the same length. */
-const timingSafeEqual = (a, b) => {
-	if (a.length !== b.length) return false;
-	let diff = 0;
-	for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
-	return diff === 0;
-};
 /** `v1=<hex HMAC-SHA256 of "<timestamp>.<body>">`, the `x-calmlens-signature` header value. */
 const createWebhookSignatureHeader = function() {
-	var _ref2 = require_CalmLensUtils._asyncToGenerator(function* (secret, timestamp, body) {
+	var _ref = require_CalmLensUtils._asyncToGenerator(function* (secret, timestamp, body) {
 		return `v1=${yield hmacSha256Hex(secret, `${timestamp}.${body}`)}`;
 	});
-	return function createWebhookSignatureHeader(_x3, _x4, _x5) {
-		return _ref2.apply(this, arguments);
+	return function createWebhookSignatureHeader(_x, _x2, _x3) {
+		return _ref.apply(this, arguments);
 	};
 }();
 /** Headers for one signed delivery of `body`. */
 const createWebhookHeaders = function() {
-	var _ref3 = require_CalmLensUtils._asyncToGenerator(function* (options) {
+	var _ref2 = require_CalmLensUtils._asyncToGenerator(function* (options) {
 		var _options$timestampSec;
 		const timestamp = (_options$timestampSec = options.timestampSeconds) !== null && _options$timestampSec !== void 0 ? _options$timestampSec : Math.floor(Date.now() / 1e3);
 		return {
@@ -310,8 +325,8 @@ const createWebhookHeaders = function() {
 			[WEBHOOK_SIGNATURE_HEADER]: yield createWebhookSignatureHeader(options.secret, timestamp, options.body)
 		};
 	});
-	return function createWebhookHeaders(_x6) {
-		return _ref3.apply(this, arguments);
+	return function createWebhookHeaders(_x4) {
+		return _ref2.apply(this, arguments);
 	};
 }();
 /**
@@ -319,7 +334,7 @@ const createWebhookHeaders = function() {
 * `"<x-calmlens-timestamp>.<raw body>"`, and the timestamp must be within `toleranceSeconds`
 * (default 300) of now. Returns `false` for anything missing or malformed.
 */
-function verifyWebhookSignature(_x7) {
+function verifyWebhookSignature(_x5) {
 	return _verifyWebhookSignature.apply(this, arguments);
 }
 function _verifyWebhookSignature() {

package/cjs/testing.d.ts

@@ -1,4 +1,4 @@
-import { A as GetEventsResponse, C as UpdateAssetOptions, D as GetAssetChildrenResponse, F as Folder, G as AssetStatus, N as AssetBinaryPayloadInput, O as GetAssetResponse, P as Lens, S as SubmitAssetOptions, T as UploadAssetPartOptions, W as Asset, a as CreateAssetSignedUrlOptions, b as RetrieveAssetOptions, c as EnsureLensOptions, d as ListAssetChildrenOptions, f as ListAssetsOptions, g as MoveFolderOptions, h as MoveAssetOptions, i as CdnServeOptions, j as PostAssetSignedUrlResponse, k as GetAssetsPageResponse, l as EnsureLensesOptions, m as ModerateTextOptions, n as CalmLensClientOptions, o as CreateFolderOptions, p as ListEventsOptions, r as CdnAssetUrlOptions, u as FolderIdOptions, w as UpdateFolderOptions, x as RetryAssetOptions } from "./CalmLensTypes-BpmT60j-.js";
+import { A as GetEventsResponse, C as UpdateAssetOptions, D as GetAssetChildrenResponse, F as Folder, G as AssetStatus, N as AssetBinaryPayloadInput, O as GetAssetResponse, P as Lens, S as SubmitAssetOptions, T as UploadAssetPartOptions, W as Asset, a as CreateAssetSignedUrlOptions, b as RetrieveAssetOptions, c as EnsureLensOptions, d as ListAssetChildrenOptions, f as ListAssetsOptions, g as MoveFolderOptions, h as MoveAssetOptions, i as CdnServeOptions, j as PostAssetSignedUrlResponse, k as GetAssetsPageResponse, l as EnsureLensesOptions, m as ModerateTextOptions, n as CalmLensClientOptions, o as CreateFolderOptions, p as ListEventsOptions, r as CdnAssetUrlOptions, u as FolderIdOptions, w as UpdateFolderOptions, x as RetryAssetOptions } from "./CalmLensTypes-B7hr0SBv.js";
 import * as zod from "zod";
 //#region ../shared/src/Permissions.d.ts
 declare const GRANT_SCHEMA: zod.ZodObject<{

package/esm/{CalmLensTypes-BpmT60j-.d.ts → CalmLensTypes-B7hr0SBv.d.ts}

@@ -2979,6 +2979,109 @@ declare const EVENT_TYPE_INFO: {
       lastError: zod.ZodOptional<zod.ZodNullable<zod.ZodString>>;
     }, zod.core.$strip>;
   };
+  readonly "appeal.submitted": {
+    id: "appeal.submitted";
+    name: string;
+    description: string;
+    category: EventCategory;
+    severity: EventSeverity;
+    /** Whether the in-app connector (notification bell) subscribes to the type by default. */
+    notify: boolean;
+    fields: {
+      appealId: EventFieldDefinition<zod.ZodString>;
+      subjectType: EventFieldDefinition<zod.ZodEnum<{
+        post: "post";
+        "reported-post": "reported-post";
+        "reported-user": "reported-user";
+        user: "user";
+      }>>;
+      subjectId: EventFieldDefinition<zod.ZodString>;
+    };
+    /** Example data, used for synthetic test sends (`createSampleEvent`). */
+    example: NoInfer<{
+      appealId: string;
+      subjectType: "post" | "reported-post" | "reported-user" | "user";
+      subjectId: string;
+    }>;
+    factInfo: {
+      label: string;
+      description: string;
+      display: EventFieldDisplay;
+      /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
+      hidden?: boolean;
+      schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
+      key: string;
+    }[];
+    values: zod.ZodObject<{
+      appealId: zod.ZodString;
+      subjectType: zod.ZodEnum<{
+        post: "post";
+        "reported-post": "reported-post";
+        "reported-user": "reported-user";
+        user: "user";
+      }>;
+      subjectId: zod.ZodString;
+    }, zod.core.$strip>;
+  };
+  readonly "appeal.resolved": {
+    id: "appeal.resolved";
+    name: string;
+    description: string;
+    category: EventCategory;
+    severity: EventSeverity;
+    /** Whether the in-app connector (notification bell) subscribes to the type by default. */
+    notify: boolean;
+    fields: {
+      appealId: EventFieldDefinition<zod.ZodString>;
+      subjectType: EventFieldDefinition<zod.ZodEnum<{
+        post: "post";
+        "reported-post": "reported-post";
+        "reported-user": "reported-user";
+        user: "user";
+      }>>;
+      subjectId: EventFieldDefinition<zod.ZodString>;
+      decision: EventFieldDefinition<zod.ZodEnum<{
+        overturned: "overturned";
+        upheld: "upheld";
+      }>>;
+      action: EventFieldDefinition<zod.ZodString>;
+      appliedToAsset: EventFieldDefinition<zod.ZodBoolean>;
+    };
+    /** Example data, used for synthetic test sends (`createSampleEvent`). */
+    example: NoInfer<{
+      appealId: string;
+      subjectType: "post" | "reported-post" | "reported-user" | "user";
+      subjectId: string;
+      decision: "overturned" | "upheld";
+      action: string;
+      appliedToAsset: boolean;
+    }>;
+    factInfo: {
+      label: string;
+      description: string;
+      display: EventFieldDisplay;
+      /** Kept in the data but left out of rendered messages (usually an ID shown by another field). */
+      hidden?: boolean;
+      schema: zod.ZodType<unknown, unknown, zod.core.$ZodTypeInternals<unknown, unknown>>;
+      key: string;
+    }[];
+    values: zod.ZodObject<{
+      appealId: zod.ZodString;
+      subjectType: zod.ZodEnum<{
+        post: "post";
+        "reported-post": "reported-post";
+        "reported-user": "reported-user";
+        user: "user";
+      }>;
+      subjectId: zod.ZodString;
+      decision: zod.ZodEnum<{
+        overturned: "overturned";
+        upheld: "upheld";
+      }>;
+      action: zod.ZodString;
+      appliedToAsset: zod.ZodBoolean;
+    }, zod.core.$strip>;
+  };
 };
 type EventType = keyof typeof EVENT_TYPE_INFO;
 type EventTypeInfo<TType extends EventType = EventType> = (typeof EVENT_TYPE_INFO)[TType];
@@ -3022,6 +3125,8 @@ declare const EVENT_SCHEMA: zod.ZodObject<{
   projectId: zod.ZodString;
   userId: zod.ZodOptional<zod.ZodNullable<zod.ZodPipe<zod.ZodString, zod.ZodTransform<string, string>>>>;
   type: zod.ZodEnum<{
+    "appeal.resolved": "appeal.resolved";
+    "appeal.submitted": "appeal.submitted";
     "asset.approved": "asset.approved";
     "asset.classified": "asset.classified";
     "asset.failed": "asset.failed";

package/esm/index.d.ts

@@ -1,4 +1,4 @@
-import { A as GetEventsResponse, B as EventFactValues, C as UpdateAssetOptions, D as GetAssetChildrenResponse, E as VerifyWebhookSignatureOptions, F as Folder, G as AssetStatus, H as EventSeverity, I as Event, J as MetadataItem, K as AssetType, L as TypedEvent, M as RequestErrorCode, O as GetAssetResponse, P as Lens, R as EventCategory, S as SubmitAssetOptions, T as UploadAssetPartOptions, U as EventType, V as EventFacts, W as Asset, Y as ProcessingOptions, _ as MultipartUploadOptions, a as CreateAssetSignedUrlOptions, b as RetrieveAssetOptions, c as EnsureLensOptions, d as ListAssetChildrenOptions, f as ListAssetsOptions, g as MoveFolderOptions, h as MoveAssetOptions, i as CdnServeOptions, j as PostAssetSignedUrlResponse, k as GetAssetsPageResponse, l as EnsureLensesOptions, m as ModerateTextOptions, n as CalmLensClientOptions, o as CreateFolderOptions, p as ListEventsOptions, q as AssetVisibility, r as CdnAssetUrlOptions, s as CreateMultipartUploadPartOptions, t as AssetContentOptions, u as FolderIdOptions, v as MultipartUploadPartOptions, w as UpdateFolderOptions, x as RetryAssetOptions, y as RequestOptions, z as EventFact } from "./CalmLensTypes-BpmT60j-.js";
+import { A as GetEventsResponse, B as EventFactValues, C as UpdateAssetOptions, D as GetAssetChildrenResponse, E as VerifyWebhookSignatureOptions, F as Folder, G as AssetStatus, H as EventSeverity, I as Event, J as MetadataItem, K as AssetType, L as TypedEvent, M as RequestErrorCode, O as GetAssetResponse, P as Lens, R as EventCategory, S as SubmitAssetOptions, T as UploadAssetPartOptions, U as EventType, V as EventFacts, W as Asset, Y as ProcessingOptions, _ as MultipartUploadOptions, a as CreateAssetSignedUrlOptions, b as RetrieveAssetOptions, c as EnsureLensOptions, d as ListAssetChildrenOptions, f as ListAssetsOptions, g as MoveFolderOptions, h as MoveAssetOptions, i as CdnServeOptions, j as PostAssetSignedUrlResponse, k as GetAssetsPageResponse, l as EnsureLensesOptions, m as ModerateTextOptions, n as CalmLensClientOptions, o as CreateFolderOptions, p as ListEventsOptions, q as AssetVisibility, r as CdnAssetUrlOptions, s as CreateMultipartUploadPartOptions, t as AssetContentOptions, u as FolderIdOptions, v as MultipartUploadPartOptions, w as UpdateFolderOptions, x as RetryAssetOptions, y as RequestOptions, z as EventFact } from "./CalmLensTypes-B7hr0SBv.js";
 import * as zod from "zod";
 //#region ../shared/src/AssetSearch.d.ts
 declare const ASSET_SEARCH_QUERY_SCHEMA: zod.ZodObject<{

package/esm/index.js

@@ -242,6 +242,42 @@ function generateMediaTestCode(signal, projectId) {
 	return `Calm Lens test ${[...suffix].map((character) => HEX_WORDS[Number.parseInt(character, 16)]).join(" ")} ${signal.replace(/[.-]/g, " ")} end test`;
 }
 //#endregion
+//#region ../shared/src/CryptoUtils.ts
+const encoder = new TextEncoder();
+/** Lowercase hex of `bytes`, two characters per byte. */
+const bytesToHex = (bytes) => Array.from(bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes), (byte) => byte.toString(16).padStart(2, "0")).join("");
+(function() {
+	var _ref = _asyncToGenerator(function* (value) {
+		return bytesToHex(yield crypto.subtle.digest("SHA-256", encoder.encode(value)));
+	});
+	return function sha256Hex(_x) {
+		return _ref.apply(this, arguments);
+	};
+})();
+/** HMAC-SHA256 of `message` keyed with `secret` (both UTF-8 encoded), as lowercase hex. */
+const hmacSha256Hex = function() {
+	var _ref2 = _asyncToGenerator(function* (secret, message) {
+		const key = yield crypto.subtle.importKey("raw", encoder.encode(secret), {
+			name: "HMAC",
+			hash: "SHA-256"
+		}, false, ["sign"]);
+		return bytesToHex(yield crypto.subtle.sign("HMAC", key, encoder.encode(message)));
+	});
+	return function hmacSha256Hex(_x2, _x3) {
+		return _ref2.apply(this, arguments);
+	};
+}();
+/**
+* Compares two strings without leaking, through timing, where they first differ. Strings of
+* different lengths are unequal immediately (the length itself is not secret here).
+*/
+const timingSafeEqual = (a, b) => {
+	if (a.length !== b.length) return false;
+	let difference = 0;
+	for (let index = 0; index < a.length; index++) difference |= a.charCodeAt(index) ^ b.charCodeAt(index);
+	return difference === 0;
+};
+//#endregion
 //#region src/client/CalmLensWebhooks.ts
 const WEBHOOK_DELIVERY_HEADER = "x-calmlens-delivery";
 const WEBHOOK_TIMESTAMP_HEADER = "x-calmlens-timestamp";
@@ -266,39 +302,18 @@ const toWebhookEventPayload = (event) => {
 		}
 	};
 };
-const encoder = new TextEncoder();
-const hmacSha256Hex = function() {
-	var _ref = _asyncToGenerator(function* (secret, message) {
-		const key = yield crypto.subtle.importKey("raw", encoder.encode(secret), {
-			name: "HMAC",
-			hash: "SHA-256"
-		}, false, ["sign"]);
-		const signature = yield crypto.subtle.sign("HMAC", key, encoder.encode(message));
-		return Array.from(new Uint8Array(signature), (byte) => byte.toString(16).padStart(2, "0")).join("");
-	});
-	return function hmacSha256Hex(_x, _x2) {
-		return _ref.apply(this, arguments);
-	};
-}();
-/** Constant-time comparison of two strings of the same length. */
-const timingSafeEqual = (a, b) => {
-	if (a.length !== b.length) return false;
-	let diff = 0;
-	for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
-	return diff === 0;
-};
 /** `v1=<hex HMAC-SHA256 of "<timestamp>.<body>">`, the `x-calmlens-signature` header value. */
 const createWebhookSignatureHeader = function() {
-	var _ref2 = _asyncToGenerator(function* (secret, timestamp, body) {
+	var _ref = _asyncToGenerator(function* (secret, timestamp, body) {
 		return `v1=${yield hmacSha256Hex(secret, `${timestamp}.${body}`)}`;
 	});
-	return function createWebhookSignatureHeader(_x3, _x4, _x5) {
-		return _ref2.apply(this, arguments);
+	return function createWebhookSignatureHeader(_x, _x2, _x3) {
+		return _ref.apply(this, arguments);
 	};
 }();
 /** Headers for one signed delivery of `body`. */
 const createWebhookHeaders = function() {
-	var _ref3 = _asyncToGenerator(function* (options) {
+	var _ref2 = _asyncToGenerator(function* (options) {
 		var _options$timestampSec;
 		const timestamp = (_options$timestampSec = options.timestampSeconds) !== null && _options$timestampSec !== void 0 ? _options$timestampSec : Math.floor(Date.now() / 1e3);
 		return {
@@ -308,8 +323,8 @@ const createWebhookHeaders = function() {
 			[WEBHOOK_SIGNATURE_HEADER]: yield createWebhookSignatureHeader(options.secret, timestamp, options.body)
 		};
 	});
-	return function createWebhookHeaders(_x6) {
-		return _ref3.apply(this, arguments);
+	return function createWebhookHeaders(_x4) {
+		return _ref2.apply(this, arguments);
 	};
 }();
 /**
@@ -317,7 +332,7 @@ const createWebhookHeaders = function() {
 * `"<x-calmlens-timestamp>.<raw body>"`, and the timestamp must be within `toleranceSeconds`
 * (default 300) of now. Returns `false` for anything missing or malformed.
 */
-function verifyWebhookSignature(_x7) {
+function verifyWebhookSignature(_x5) {
 	return _verifyWebhookSignature.apply(this, arguments);
 }
 function _verifyWebhookSignature() {

package/esm/testing.d.ts

@@ -1,4 +1,4 @@
-import { A as GetEventsResponse, C as UpdateAssetOptions, D as GetAssetChildrenResponse, F as Folder, G as AssetStatus, N as AssetBinaryPayloadInput, O as GetAssetResponse, P as Lens, S as SubmitAssetOptions, T as UploadAssetPartOptions, W as Asset, a as CreateAssetSignedUrlOptions, b as RetrieveAssetOptions, c as EnsureLensOptions, d as ListAssetChildrenOptions, f as ListAssetsOptions, g as MoveFolderOptions, h as MoveAssetOptions, i as CdnServeOptions, j as PostAssetSignedUrlResponse, k as GetAssetsPageResponse, l as EnsureLensesOptions, m as ModerateTextOptions, n as CalmLensClientOptions, o as CreateFolderOptions, p as ListEventsOptions, r as CdnAssetUrlOptions, u as FolderIdOptions, w as UpdateFolderOptions, x as RetryAssetOptions } from "./CalmLensTypes-BpmT60j-.js";
+import { A as GetEventsResponse, C as UpdateAssetOptions, D as GetAssetChildrenResponse, F as Folder, G as AssetStatus, N as AssetBinaryPayloadInput, O as GetAssetResponse, P as Lens, S as SubmitAssetOptions, T as UploadAssetPartOptions, W as Asset, a as CreateAssetSignedUrlOptions, b as RetrieveAssetOptions, c as EnsureLensOptions, d as ListAssetChildrenOptions, f as ListAssetsOptions, g as MoveFolderOptions, h as MoveAssetOptions, i as CdnServeOptions, j as PostAssetSignedUrlResponse, k as GetAssetsPageResponse, l as EnsureLensesOptions, m as ModerateTextOptions, n as CalmLensClientOptions, o as CreateFolderOptions, p as ListEventsOptions, r as CdnAssetUrlOptions, u as FolderIdOptions, w as UpdateFolderOptions, x as RetryAssetOptions } from "./CalmLensTypes-B7hr0SBv.js";
 import * as zod from "zod";
 //#region ../shared/src/Permissions.d.ts
 declare const GRANT_SCHEMA: zod.ZodObject<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calmlens/sdk",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/Censkh/CalmLens.git",
@@ -18,17 +18,13 @@
     "node": ">=22"
   },
   "scripts": {
-    "generate:fixtures": "bun scripts/generateFixtures.ts",
     "prepublishOnly": "npm run check && npm run test && npm run build",
     "test": "bun test --parallel=4 tests",
-    "example:start": "cd example && npm run start",
     "check:fix": "tsc --noEmit --project tsconfig.json && npx @biomejs/biome check --write",
     "check": "tsc --noEmit --project tsconfig.json && npx @biomejs/biome check",
     "cleanup": "rimraf esm && rimraf cjs && rimraf bin",
     "build": "npm run cleanup && rolldown -c rolldown.config.mjs && node scripts/post-build.js && npm run verify:package",
-    "verify:package": "node scripts/verify-package.mjs",
-    "website:dev": "cd website && npm run start",
-    "website:deploy": "cd website && npm run deploy"
+    "verify:package": "node scripts/verify-package.mjs"
   },
   "keywords": [
     "typescript",
@@ -51,8 +47,8 @@
   "devDependencies": {
     "@biomejs/biome": "^2.5.15",
     "@oxc-project/runtime": "0.148.0",
-    "@types/bun": "^1.3.13",
-    "@types/node": "22.20.2",
+    "@types/bun": "^1.4.2",
+    "@types/node": "26.6.1",
     "rimraf": "6.1.3",
     "rolldown": "1.2.13",
     "rolldown-plugin-dts": "0.28.7",