@depup/openai 6.31.0-depup.0

package/resources/webhooks/webhooks.js

@@ -0,0 +1,101 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+var _Webhooks_instances, _Webhooks_validateSecret, _Webhooks_getRequiredHeader;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Webhooks = void 0;
+const tslib_1 = require("../../internal/tslib.js");
+const error_1 = require("../../error.js");
+const resource_1 = require("../../core/resource.js");
+const headers_1 = require("../../internal/headers.js");
+class Webhooks extends resource_1.APIResource {
+    constructor() {
+        super(...arguments);
+        _Webhooks_instances.add(this);
+    }
+    /**
+     * Validates that the given payload was sent by OpenAI and parses the payload.
+     */
+    async unwrap(payload, headers, secret = this._client.webhookSecret, tolerance = 300) {
+        await this.verifySignature(payload, headers, secret, tolerance);
+        return JSON.parse(payload);
+    }
+    /**
+     * Validates whether or not the webhook payload was sent by OpenAI.
+     *
+     * An error will be raised if the webhook payload was not sent by OpenAI.
+     *
+     * @param payload - The webhook payload
+     * @param headers - The webhook headers
+     * @param secret - The webhook secret (optional, will use client secret if not provided)
+     * @param tolerance - Maximum age of the webhook in seconds (default: 300 = 5 minutes)
+     */
+    async verifySignature(payload, headers, secret = this._client.webhookSecret, tolerance = 300) {
+        if (typeof crypto === 'undefined' ||
+            typeof crypto.subtle.importKey !== 'function' ||
+            typeof crypto.subtle.verify !== 'function') {
+            throw new Error('Webhook signature verification is only supported when the `crypto` global is defined');
+        }
+        tslib_1.__classPrivateFieldGet(this, _Webhooks_instances, "m", _Webhooks_validateSecret).call(this, secret);
+        const headersObj = (0, headers_1.buildHeaders)([headers]).values;
+        const signatureHeader = tslib_1.__classPrivateFieldGet(this, _Webhooks_instances, "m", _Webhooks_getRequiredHeader).call(this, headersObj, 'webhook-signature');
+        const timestamp = tslib_1.__classPrivateFieldGet(this, _Webhooks_instances, "m", _Webhooks_getRequiredHeader).call(this, headersObj, 'webhook-timestamp');
+        const webhookId = tslib_1.__classPrivateFieldGet(this, _Webhooks_instances, "m", _Webhooks_getRequiredHeader).call(this, headersObj, 'webhook-id');
+        // Validate timestamp to prevent replay attacks
+        const timestampSeconds = parseInt(timestamp, 10);
+        if (isNaN(timestampSeconds)) {
+            throw new error_1.InvalidWebhookSignatureError('Invalid webhook timestamp format');
+        }
+        const nowSeconds = Math.floor(Date.now() / 1000);
+        if (nowSeconds - timestampSeconds > tolerance) {
+            throw new error_1.InvalidWebhookSignatureError('Webhook timestamp is too old');
+        }
+        if (timestampSeconds > nowSeconds + tolerance) {
+            throw new error_1.InvalidWebhookSignatureError('Webhook timestamp is too new');
+        }
+        // Extract signatures from v1,<base64> format
+        // The signature header can have multiple values, separated by spaces.
+        // Each value is in the format v1,<base64>. We should accept if any match.
+        const signatures = signatureHeader
+            .split(' ')
+            .map((part) => (part.startsWith('v1,') ? part.substring(3) : part));
+        // Decode the secret if it starts with whsec_
+        const decodedSecret = secret.startsWith('whsec_') ?
+            Buffer.from(secret.replace('whsec_', ''), 'base64')
+            : Buffer.from(secret, 'utf-8');
+        // Create the signed payload: {webhook_id}.{timestamp}.{payload}
+        const signedPayload = webhookId ? `${webhookId}.${timestamp}.${payload}` : `${timestamp}.${payload}`;
+        // Import the secret as a cryptographic key for HMAC
+        const key = await crypto.subtle.importKey('raw', decodedSecret, { name: 'HMAC', hash: 'SHA-256' }, false, ['verify']);
+        // Check if any signature matches using timing-safe WebCrypto verify
+        for (const signature of signatures) {
+            try {
+                const signatureBytes = Buffer.from(signature, 'base64');
+                const isValid = await crypto.subtle.verify('HMAC', key, signatureBytes, new TextEncoder().encode(signedPayload));
+                if (isValid) {
+                    return; // Valid signature found
+                }
+            }
+            catch {
+                // Invalid base64 or signature format, continue to next signature
+                continue;
+            }
+        }
+        throw new error_1.InvalidWebhookSignatureError('The given webhook signature does not match the expected signature');
+    }
+}
+exports.Webhooks = Webhooks;
+_Webhooks_instances = new WeakSet(), _Webhooks_validateSecret = function _Webhooks_validateSecret(secret) {
+    if (typeof secret !== 'string' || secret.length === 0) {
+        throw new Error(`The webhook secret must either be set using the env var, OPENAI_WEBHOOK_SECRET, on the client class, OpenAI({ webhookSecret: '123' }), or passed to this function`);
+    }
+}, _Webhooks_getRequiredHeader = function _Webhooks_getRequiredHeader(headers, name) {
+    if (!headers) {
+        throw new Error(`Headers are required`);
+    }
+    const value = headers.get(name);
+    if (value === null || value === undefined) {
+        throw new Error(`Missing required header: ${name}`);
+    }
+    return value;
+};
+//# sourceMappingURL=webhooks.js.map

package/resources/webhooks/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/resources/webhooks/webhooks.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;;;AAEtF,0CAA2D;AAC3D,qDAAkD;AAClD,uDAAmE;AAEnE,MAAa,QAAS,SAAQ,sBAAW;IAAzC;;;IAqIA,CAAC;IApIC;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAe,EACf,OAAoB,EACpB,SAAoC,IAAI,CAAC,OAAO,CAAC,aAAa,EAC9D,YAAoB,GAAG;QAEvB,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;IACnD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,eAAe,CACnB,OAAe,EACf,OAAoB,EACpB,SAAoC,IAAI,CAAC,OAAO,CAAC,aAAa,EAC9D,YAAoB,GAAG;QAEvB,IACE,OAAO,MAAM,KAAK,WAAW;YAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,UAAU;YAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,EAC1C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;QAC1G,CAAC;QAED,+BAAA,IAAI,qDAAgB,MAApB,IAAI,EAAiB,MAAM,CAAC,CAAC;QAE7B,MAAM,UAAU,GAAG,IAAA,sBAAY,EAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAClD,MAAM,eAAe,GAAG,+BAAA,IAAI,wDAAmB,MAAvB,IAAI,EAAoB,UAAU,EAAE,mBAAmB,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,+BAAA,IAAI,wDAAmB,MAAvB,IAAI,EAAoB,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,+BAAA,IAAI,wDAAmB,MAAvB,IAAI,EAAoB,UAAU,EAAE,YAAY,CAAC,CAAC;QAEpE,+CAA+C;QAC/C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,oCAA4B,CAAC,kCAAkC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEjD,IAAI,UAAU,GAAG,gBAAgB,GAAG,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,oCAA4B,CAAC,8BAA8B,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,gBAAgB,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,oCAA4B,CAAC,8BAA8B,CAAC,CAAC;QACzE,CAAC;QAED,6CAA6C;QAC7C,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,UAAU,GAAG,eAAe;aAC/B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEtE,6CAA6C;QAC7C,MAAM,aAAa,GACjB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC;YACrD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEjC,gEAAgE;QAChE,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;QAErG,oDAAoD;QACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,aAAa,EACb,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QAEF,oEAAoE;QACpE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACxC,MAAM,EACN,GAAG,EACH,cAAc,EACd,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CACxC,CAAC;gBAEF,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,wBAAwB;gBAClC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,IAAI,oCAA4B,CACpC,mEAAmE,CACpE,CAAC;IACJ,CAAC;CAuBF;AArID,4BAqIC;kGArBiB,MAAiC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,mKAAmK,CACpK,CAAC;IACJ,CAAC;AACH,CAAC,qEAEkB,OAAgB,EAAE,IAAY;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/resources/webhooks/webhooks.mjs

@@ -0,0 +1,97 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+var _Webhooks_instances, _Webhooks_validateSecret, _Webhooks_getRequiredHeader;
+import { __classPrivateFieldGet } from "../../internal/tslib.mjs";
+import { InvalidWebhookSignatureError } from "../../error.mjs";
+import { APIResource } from "../../core/resource.mjs";
+import { buildHeaders } from "../../internal/headers.mjs";
+export class Webhooks extends APIResource {
+    constructor() {
+        super(...arguments);
+        _Webhooks_instances.add(this);
+    }
+    /**
+     * Validates that the given payload was sent by OpenAI and parses the payload.
+     */
+    async unwrap(payload, headers, secret = this._client.webhookSecret, tolerance = 300) {
+        await this.verifySignature(payload, headers, secret, tolerance);
+        return JSON.parse(payload);
+    }
+    /**
+     * Validates whether or not the webhook payload was sent by OpenAI.
+     *
+     * An error will be raised if the webhook payload was not sent by OpenAI.
+     *
+     * @param payload - The webhook payload
+     * @param headers - The webhook headers
+     * @param secret - The webhook secret (optional, will use client secret if not provided)
+     * @param tolerance - Maximum age of the webhook in seconds (default: 300 = 5 minutes)
+     */
+    async verifySignature(payload, headers, secret = this._client.webhookSecret, tolerance = 300) {
+        if (typeof crypto === 'undefined' ||
+            typeof crypto.subtle.importKey !== 'function' ||
+            typeof crypto.subtle.verify !== 'function') {
+            throw new Error('Webhook signature verification is only supported when the `crypto` global is defined');
+        }
+        __classPrivateFieldGet(this, _Webhooks_instances, "m", _Webhooks_validateSecret).call(this, secret);
+        const headersObj = buildHeaders([headers]).values;
+        const signatureHeader = __classPrivateFieldGet(this, _Webhooks_instances, "m", _Webhooks_getRequiredHeader).call(this, headersObj, 'webhook-signature');
+        const timestamp = __classPrivateFieldGet(this, _Webhooks_instances, "m", _Webhooks_getRequiredHeader).call(this, headersObj, 'webhook-timestamp');
+        const webhookId = __classPrivateFieldGet(this, _Webhooks_instances, "m", _Webhooks_getRequiredHeader).call(this, headersObj, 'webhook-id');
+        // Validate timestamp to prevent replay attacks
+        const timestampSeconds = parseInt(timestamp, 10);
+        if (isNaN(timestampSeconds)) {
+            throw new InvalidWebhookSignatureError('Invalid webhook timestamp format');
+        }
+        const nowSeconds = Math.floor(Date.now() / 1000);
+        if (nowSeconds - timestampSeconds > tolerance) {
+            throw new InvalidWebhookSignatureError('Webhook timestamp is too old');
+        }
+        if (timestampSeconds > nowSeconds + tolerance) {
+            throw new InvalidWebhookSignatureError('Webhook timestamp is too new');
+        }
+        // Extract signatures from v1,<base64> format
+        // The signature header can have multiple values, separated by spaces.
+        // Each value is in the format v1,<base64>. We should accept if any match.
+        const signatures = signatureHeader
+            .split(' ')
+            .map((part) => (part.startsWith('v1,') ? part.substring(3) : part));
+        // Decode the secret if it starts with whsec_
+        const decodedSecret = secret.startsWith('whsec_') ?
+            Buffer.from(secret.replace('whsec_', ''), 'base64')
+            : Buffer.from(secret, 'utf-8');
+        // Create the signed payload: {webhook_id}.{timestamp}.{payload}
+        const signedPayload = webhookId ? `${webhookId}.${timestamp}.${payload}` : `${timestamp}.${payload}`;
+        // Import the secret as a cryptographic key for HMAC
+        const key = await crypto.subtle.importKey('raw', decodedSecret, { name: 'HMAC', hash: 'SHA-256' }, false, ['verify']);
+        // Check if any signature matches using timing-safe WebCrypto verify
+        for (const signature of signatures) {
+            try {
+                const signatureBytes = Buffer.from(signature, 'base64');
+                const isValid = await crypto.subtle.verify('HMAC', key, signatureBytes, new TextEncoder().encode(signedPayload));
+                if (isValid) {
+                    return; // Valid signature found
+                }
+            }
+            catch {
+                // Invalid base64 or signature format, continue to next signature
+                continue;
+            }
+        }
+        throw new InvalidWebhookSignatureError('The given webhook signature does not match the expected signature');
+    }
+}
+_Webhooks_instances = new WeakSet(), _Webhooks_validateSecret = function _Webhooks_validateSecret(secret) {
+    if (typeof secret !== 'string' || secret.length === 0) {
+        throw new Error(`The webhook secret must either be set using the env var, OPENAI_WEBHOOK_SECRET, on the client class, OpenAI({ webhookSecret: '123' }), or passed to this function`);
+    }
+}, _Webhooks_getRequiredHeader = function _Webhooks_getRequiredHeader(headers, name) {
+    if (!headers) {
+        throw new Error(`Headers are required`);
+    }
+    const value = headers.get(name);
+    if (value === null || value === undefined) {
+        throw new Error(`Missing required header: ${name}`);
+    }
+    return value;
+};
+//# sourceMappingURL=webhooks.mjs.map

package/resources/webhooks/webhooks.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.mjs","sourceRoot":"","sources":["../../src/resources/webhooks/webhooks.ts"],"names":[],"mappings":"AAAA,sFAAsF;;;OAE/E,EAAE,4BAA4B,EAAE;OAChC,EAAE,WAAW,EAAE;OACf,EAAE,YAAY,EAAe;AAEpC,MAAM,OAAO,QAAS,SAAQ,WAAW;IAAzC;;;IAqIA,CAAC;IApIC;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,OAAe,EACf,OAAoB,EACpB,SAAoC,IAAI,CAAC,OAAO,CAAC,aAAa,EAC9D,YAAoB,GAAG;QAEvB,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;IACnD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,eAAe,CACnB,OAAe,EACf,OAAoB,EACpB,SAAoC,IAAI,CAAC,OAAO,CAAC,aAAa,EAC9D,YAAoB,GAAG;QAEvB,IACE,OAAO,MAAM,KAAK,WAAW;YAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,UAAU;YAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,EAC1C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;QAC1G,CAAC;QAED,uBAAA,IAAI,qDAAgB,MAApB,IAAI,EAAiB,MAAM,CAAC,CAAC;QAE7B,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAClD,MAAM,eAAe,GAAG,uBAAA,IAAI,wDAAmB,MAAvB,IAAI,EAAoB,UAAU,EAAE,mBAAmB,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,uBAAA,IAAI,wDAAmB,MAAvB,IAAI,EAAoB,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,uBAAA,IAAI,wDAAmB,MAAvB,IAAI,EAAoB,UAAU,EAAE,YAAY,CAAC,CAAC;QAEpE,+CAA+C;QAC/C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,4BAA4B,CAAC,kCAAkC,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEjD,IAAI,UAAU,GAAG,gBAAgB,GAAG,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,4BAA4B,CAAC,8BAA8B,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,gBAAgB,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,4BAA4B,CAAC,8BAA8B,CAAC,CAAC;QACzE,CAAC;QAED,6CAA6C;QAC7C,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,UAAU,GAAG,eAAe;aAC/B,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEtE,6CAA6C;QAC7C,MAAM,aAAa,GACjB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC;YACrD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEjC,gEAAgE;QAChE,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;QAErG,oDAAoD;QACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,aAAa,EACb,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QAEF,oEAAoE;QACpE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACxC,MAAM,EACN,GAAG,EACH,cAAc,EACd,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CACxC,CAAC;gBAEF,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,wBAAwB;gBAClC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,IAAI,4BAA4B,CACpC,mEAAmE,CACpE,CAAC;IACJ,CAAC;CAuBF;kGArBiB,MAAiC;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,mKAAmK,CACpK,CAAC;IACJ,CAAC;AACH,CAAC,qEAEkB,OAAgB,EAAE,IAAY;IAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/resources/webhooks.d.mts

@@ -0,0 +1,2 @@
+export * from "./webhooks/index.mjs";
+//# sourceMappingURL=webhooks.d.mts.map

package/resources/webhooks.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.mts","sourceRoot":"","sources":["../src/resources/webhooks.ts"],"names":[],"mappings":""}

package/resources/webhooks.d.ts

@@ -0,0 +1,2 @@
+export * from "./webhooks/index.js";
+//# sourceMappingURL=webhooks.d.ts.map

package/resources/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/resources/webhooks.ts"],"names":[],"mappings":""}

package/resources/webhooks.js

@@ -0,0 +1,6 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("../internal/tslib.js");
+tslib_1.__exportStar(require("./webhooks/index.js"), exports);
+//# sourceMappingURL=webhooks.js.map

package/resources/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/resources/webhooks.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,8DAAiC"}

package/resources/webhooks.mjs

@@ -0,0 +1,3 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+export * from "./webhooks/index.mjs";
+//# sourceMappingURL=webhooks.mjs.map

package/resources/webhooks.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.mjs","sourceRoot":"","sources":["../src/resources/webhooks.ts"],"names":[],"mappings":"AAAA,sFAAsF"}

package/resources.d.mts

@@ -0,0 +1,2 @@
+export * from "./resources/index.mjs";
+//# sourceMappingURL=resources.d.mts.map

package/resources.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.mts","sourceRoot":"","sources":["src/resources.ts"],"names":[],"mappings":""}

package/resources.d.ts

@@ -0,0 +1,2 @@
+export * from "./resources/index.js";
+//# sourceMappingURL=resources.d.ts.map

package/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["src/resources.ts"],"names":[],"mappings":""}

package/resources.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("./internal/tslib.js");
+tslib_1.__exportStar(require("./resources/index.js"), exports);
+//# sourceMappingURL=resources.js.map

package/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["src/resources.ts"],"names":[],"mappings":";;;AAAA,+DAAkC"}

package/resources.mjs

@@ -0,0 +1,2 @@
+export * from "./resources/index.mjs";
+//# sourceMappingURL=resources.mjs.map

package/resources.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.mjs","sourceRoot":"","sources":["src/resources.ts"],"names":[],"mappings":""}

package/src/_vendor/partial-json-parser/README.md

@@ -0,0 +1,3 @@
+# Partial JSON Parser
+
+Vendored from https://www.npmjs.com/package/partial-json with some modifications

package/src/_vendor/partial-json-parser/parser.ts

@@ -0,0 +1,247 @@
+const STR = 0b000000001;
+const NUM = 0b000000010;
+const ARR = 0b000000100;
+const OBJ = 0b000001000;
+const NULL = 0b000010000;
+const BOOL = 0b000100000;
+const NAN = 0b001000000;
+const INFINITY = 0b010000000;
+const MINUS_INFINITY = 0b100000000;
+
+const INF = INFINITY | MINUS_INFINITY;
+const SPECIAL = NULL | BOOL | INF | NAN;
+const ATOM = STR | NUM | SPECIAL;
+const COLLECTION = ARR | OBJ;
+const ALL = ATOM | COLLECTION;
+
+const Allow = {
+  STR,
+  NUM,
+  ARR,
+  OBJ,
+  NULL,
+  BOOL,
+  NAN,
+  INFINITY,
+  MINUS_INFINITY,
+  INF,
+  SPECIAL,
+  ATOM,
+  COLLECTION,
+  ALL,
+};
+
+// The JSON string segment was unable to be parsed completely
+class PartialJSON extends Error {}
+
+class MalformedJSON extends Error {}
+
+/**
+ * Parse incomplete JSON
+ * @param {string} jsonString Partial JSON to be parsed
+ * @param {number} allowPartial Specify what types are allowed to be partial, see {@link Allow} for details
+ * @returns The parsed JSON
+ * @throws {PartialJSON} If the JSON is incomplete (related to the `allow` parameter)
+ * @throws {MalformedJSON} If the JSON is malformed
+ */
+function parseJSON(jsonString: string, allowPartial: number = Allow.ALL): any {
+  if (typeof jsonString !== 'string') {
+    throw new TypeError(`expecting str, got ${typeof jsonString}`);
+  }
+  if (!jsonString.trim()) {
+    throw new Error(`${jsonString} is empty`);
+  }
+  return _parseJSON(jsonString.trim(), allowPartial);
+}
+
+const _parseJSON = (jsonString: string, allow: number) => {
+  const length = jsonString.length;
+  let index = 0;
+
+  const markPartialJSON = (msg: string) => {
+    throw new PartialJSON(`${msg} at position ${index}`);
+  };
+
+  const throwMalformedError = (msg: string) => {
+    throw new MalformedJSON(`${msg} at position ${index}`);
+  };
+
+  const parseAny: () => any = () => {
+    skipBlank();
+    if (index >= length) markPartialJSON('Unexpected end of input');
+    if (jsonString[index] === '"') return parseStr();
+    if (jsonString[index] === '{') return parseObj();
+    if (jsonString[index] === '[') return parseArr();
+    if (
+      jsonString.substring(index, index + 4) === 'null' ||
+      (Allow.NULL & allow && length - index < 4 && 'null'.startsWith(jsonString.substring(index)))
+    ) {
+      index += 4;
+      return null;
+    }
+    if (
+      jsonString.substring(index, index + 4) === 'true' ||
+      (Allow.BOOL & allow && length - index < 4 && 'true'.startsWith(jsonString.substring(index)))
+    ) {
+      index += 4;
+      return true;
+    }
+    if (
+      jsonString.substring(index, index + 5) === 'false' ||
+      (Allow.BOOL & allow && length - index < 5 && 'false'.startsWith(jsonString.substring(index)))
+    ) {
+      index += 5;
+      return false;
+    }
+    if (
+      jsonString.substring(index, index + 8) === 'Infinity' ||
+      (Allow.INFINITY & allow && length - index < 8 && 'Infinity'.startsWith(jsonString.substring(index)))
+    ) {
+      index += 8;
+      return Infinity;
+    }
+    if (
+      jsonString.substring(index, index + 9) === '-Infinity' ||
+      (Allow.MINUS_INFINITY & allow &&
+        1 < length - index &&
+        length - index < 9 &&
+        '-Infinity'.startsWith(jsonString.substring(index)))
+    ) {
+      index += 9;
+      return -Infinity;
+    }
+    if (
+      jsonString.substring(index, index + 3) === 'NaN' ||
+      (Allow.NAN & allow && length - index < 3 && 'NaN'.startsWith(jsonString.substring(index)))
+    ) {
+      index += 3;
+      return NaN;
+    }
+    return parseNum();
+  };
+
+  const parseStr: () => string = () => {
+    const start = index;
+    let escape = false;
+    index++; // skip initial quote
+    while (index < length && (jsonString[index] !== '"' || (escape && jsonString[index - 1] === '\\'))) {
+      escape = jsonString[index] === '\\' ? !escape : false;
+      index++;
+    }
+    if (jsonString.charAt(index) == '"') {
+      try {
+        return JSON.parse(jsonString.substring(start, ++index - Number(escape)));
+      } catch (e) {
+        throwMalformedError(String(e));
+      }
+    } else if (Allow.STR & allow) {
+      try {
+        return JSON.parse(jsonString.substring(start, index - Number(escape)) + '"');
+      } catch (e) {
+        // SyntaxError: Invalid escape sequence
+        return JSON.parse(jsonString.substring(start, jsonString.lastIndexOf('\\')) + '"');
+      }
+    }
+    markPartialJSON('Unterminated string literal');
+  };
+
+  const parseObj = () => {
+    index++; // skip initial brace
+    skipBlank();
+    const obj: Record<string, any> = {};
+    try {
+      while (jsonString[index] !== '}') {
+        skipBlank();
+        if (index >= length && Allow.OBJ & allow) return obj;
+        const key = parseStr();
+        skipBlank();
+        index++; // skip colon
+        try {
+          const value = parseAny();
+          Object.defineProperty(obj, key, { value, writable: true, enumerable: true, configurable: true });
+        } catch (e) {
+          if (Allow.OBJ & allow) return obj;
+          else throw e;
+        }
+        skipBlank();
+        if (jsonString[index] === ',') index++; // skip comma
+      }
+    } catch (e) {
+      if (Allow.OBJ & allow) return obj;
+      else markPartialJSON("Expected '}' at end of object");
+    }
+    index++; // skip final brace
+    return obj;
+  };
+
+  const parseArr = () => {
+    index++; // skip initial bracket
+    const arr = [];
+    try {
+      while (jsonString[index] !== ']') {
+        arr.push(parseAny());
+        skipBlank();
+        if (jsonString[index] === ',') {
+          index++; // skip comma
+        }
+      }
+    } catch (e) {
+      if (Allow.ARR & allow) {
+        return arr;
+      }
+      markPartialJSON("Expected ']' at end of array");
+    }
+    index++; // skip final bracket
+    return arr;
+  };
+
+  const parseNum = () => {
+    if (index === 0) {
+      if (jsonString === '-' && Allow.NUM & allow) markPartialJSON("Not sure what '-' is");
+      try {
+        return JSON.parse(jsonString);
+      } catch (e) {
+        if (Allow.NUM & allow) {
+          try {
+            if ('.' === jsonString[jsonString.length - 1])
+              return JSON.parse(jsonString.substring(0, jsonString.lastIndexOf('.')));
+            return JSON.parse(jsonString.substring(0, jsonString.lastIndexOf('e')));
+          } catch (e) {}
+        }
+        throwMalformedError(String(e));
+      }
+    }
+
+    const start = index;
+
+    if (jsonString[index] === '-') index++;
+    while (jsonString[index] && !',]}'.includes(jsonString[index]!)) index++;
+
+    if (index == length && !(Allow.NUM & allow)) markPartialJSON('Unterminated number literal');
+
+    try {
+      return JSON.parse(jsonString.substring(start, index));
+    } catch (e) {
+      if (jsonString.substring(start, index) === '-' && Allow.NUM & allow)
+        markPartialJSON("Not sure what '-' is");
+      try {
+        return JSON.parse(jsonString.substring(start, jsonString.lastIndexOf('e')));
+      } catch (e) {
+        throwMalformedError(String(e));
+      }
+    }
+  };
+
+  const skipBlank = () => {
+    while (index < length && ' \n\r\t'.includes(jsonString[index]!)) {
+      index++;
+    }
+  };
+
+  return parseAny();
+};
+
+// using this function with malformed JSON is undefined behavior
+const partialParse = (input: string) => parseJSON(input, Allow.ALL ^ Allow.NUM);
+
+export { partialParse, PartialJSON, MalformedJSON };

package/src/_vendor/zod-to-json-schema/LICENSE

@@ -0,0 +1,15 @@
+ISC License
+
+Copyright (c) 2020, Stefan Terdell
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/src/_vendor/zod-to-json-schema/Options.ts

@@ -0,0 +1,80 @@
+import { ZodSchema, ZodTypeDef } from 'zod/v3';
+import { Refs, Seen } from './Refs';
+import { JsonSchema7Type } from './parseDef';
+
+export type Targets = 'jsonSchema7' | 'jsonSchema2019-09' | 'openApi3';
+
+export type DateStrategy = 'format:date-time' | 'format:date' | 'string' | 'integer';
+
+export const ignoreOverride = Symbol('Let zodToJsonSchema decide on which parser to use');
+
+export type Options<Target extends Targets = 'jsonSchema7'> = {
+  name: string | undefined;
+  $refStrategy: 'root' | 'relative' | 'none' | 'seen' | 'extract-to-root';
+  basePath: string[];
+  effectStrategy: 'input' | 'any';
+  pipeStrategy: 'input' | 'output' | 'all';
+  dateStrategy: DateStrategy | DateStrategy[];
+  mapStrategy: 'entries' | 'record';
+  removeAdditionalStrategy: 'passthrough' | 'strict';
+  nullableStrategy: 'from-target' | 'property';
+  target: Target;
+  strictUnions: boolean;
+  definitionPath: string;
+  definitions: Record<string, ZodSchema | ZodTypeDef>;
+  errorMessages: boolean;
+  markdownDescription: boolean;
+  patternStrategy: 'escape' | 'preserve';
+  applyRegexFlags: boolean;
+  emailStrategy: 'format:email' | 'format:idn-email' | 'pattern:zod';
+  base64Strategy: 'format:binary' | 'contentEncoding:base64' | 'pattern:zod';
+  nameStrategy: 'ref' | 'duplicate-ref' | 'title';
+  override?: (
+    def: ZodTypeDef,
+    refs: Refs,
+    seen: Seen | undefined,
+    forceResolution?: boolean,
+  ) => JsonSchema7Type | undefined | typeof ignoreOverride;
+  openaiStrictMode?: boolean;
+};
+
+const defaultOptions: Omit<Options, 'definitions' | 'basePath'> = {
+  name: undefined,
+  $refStrategy: 'root',
+  effectStrategy: 'input',
+  pipeStrategy: 'all',
+  dateStrategy: 'format:date-time',
+  mapStrategy: 'entries',
+  nullableStrategy: 'from-target',
+  removeAdditionalStrategy: 'passthrough',
+  definitionPath: 'definitions',
+  target: 'jsonSchema7',
+  strictUnions: false,
+  errorMessages: false,
+  markdownDescription: false,
+  patternStrategy: 'escape',
+  applyRegexFlags: false,
+  emailStrategy: 'format:email',
+  base64Strategy: 'contentEncoding:base64',
+  nameStrategy: 'ref',
+};
+
+export const getDefaultOptions = <Target extends Targets>(
+  options: Partial<Options<Target>> | string | undefined,
+) => {
+  // We need to add `definitions` here as we may mutate it
+  return (
+    typeof options === 'string' ?
+      {
+        ...defaultOptions,
+        basePath: ['#'],
+        definitions: {},
+        name: options,
+      }
+    : {
+        ...defaultOptions,
+        basePath: ['#'],
+        definitions: {},
+        ...options,
+      }) as Options<Target>;
+};

package/src/_vendor/zod-to-json-schema/README.md

@@ -0,0 +1,3 @@
+# Zod to Json Schema
+
+Vendored version of https://github.com/StefanTerdell/zod-to-json-schema that has been updated to generate JSON Schemas that are compatible with OpenAI's [strict mode](https://platform.openai.com/docs/guides/structured-outputs/supported-schemas)