@fern-api/fern-api-dev 5.75.8 → 5.76.0

package/cli.cjs

@@ -55736,6 +55736,13 @@ var init_WebhookTimestampSchema = __esm({
   }
 });
 
+// ../fern-definition/schema/lib/schemas/api/resources/webhooks/types/WebhookUrlNormalizationSchema.js
+var init_WebhookUrlNormalizationSchema = __esm({
+  "../fern-definition/schema/lib/schemas/api/resources/webhooks/types/WebhookUrlNormalizationSchema.js"() {
+    "use strict";
+  }
+});
+
 // ../fern-definition/schema/lib/schemas/api/resources/webhooks/types/index.js
 var init_types20 = __esm({
   "../fern-definition/schema/lib/schemas/api/resources/webhooks/types/index.js"() {
@@ -55760,6 +55767,7 @@ var init_types20 = __esm({
     init_WebhookSignatureSchema();
     init_WebhookTimestampFormatSchema();
     init_WebhookTimestampSchema();
+    init_WebhookUrlNormalizationSchema();
   }
 });
 
@@ -60428,6 +60436,19 @@ var init_WebhookSignatureAlgorithmSchema2 = __esm({
   }
 });
 
+// ../fern-definition/schema/lib/schemas/serialization/resources/webhooks/types/WebhookUrlNormalizationSchema.js
+var WebhookUrlNormalizationSchema;
+var init_WebhookUrlNormalizationSchema2 = __esm({
+  "../fern-definition/schema/lib/schemas/serialization/resources/webhooks/types/WebhookUrlNormalizationSchema.js"() {
+    "use strict";
+    init_core();
+    WebhookUrlNormalizationSchema = schemas_exports.object({
+      "port-variants": schemas_exports.boolean().optional(),
+      "legacy-query-encoding": schemas_exports.boolean().optional()
+    });
+  }
+});
+
 // ../fern-definition/schema/lib/schemas/serialization/resources/webhooks/types/HmacSignatureSchema.js
 var HmacSignatureSchema;
 var init_HmacSignatureSchema2 = __esm({
@@ -60439,6 +60460,7 @@ var init_HmacSignatureSchema2 = __esm({
     init_WebhookSignatureAlgorithmSchema2();
     init_WebhookSignatureEncodingSchema2();
     init_WebhookTimestampSchema2();
+    init_WebhookUrlNormalizationSchema2();
     HmacSignatureSchema = schemas_exports.object({
       header: schemas_exports.string(),
       algorithm: WebhookSignatureAlgorithmSchema2.optional(),
@@ -60446,7 +60468,8 @@ var init_HmacSignatureSchema2 = __esm({
       "signature-prefix": schemas_exports.string().optional(),
       "payload-format": WebhookPayloadFormatSchema.optional(),
       timestamp: WebhookTimestampSchema.optional(),
-      "body-hash-binding": WebhookBodyHashBindingSchema.optional()
+      "body-hash-binding": WebhookBodyHashBindingSchema.optional(),
+      "url-normalization": WebhookUrlNormalizationSchema.optional()
     });
   }
 });
@@ -61354,6 +61377,7 @@ var init_types40 = __esm({
     init_WebhookSignatureSchema2();
     init_WebhookTimestampFormatSchema2();
     init_WebhookTimestampSchema2();
+    init_WebhookUrlNormalizationSchema2();
   }
 });
 
@@ -61379,7 +61403,8 @@ __export(webhooks_exports2, {
   WebhookSignatureEncodingSchema: () => WebhookSignatureEncodingSchema2,
   WebhookSignatureSchema: () => WebhookSignatureSchema,
   WebhookTimestampFormatSchema: () => WebhookTimestampFormatSchema2,
-  WebhookTimestampSchema: () => WebhookTimestampSchema
+  WebhookTimestampSchema: () => WebhookTimestampSchema,
+  WebhookUrlNormalizationSchema: () => WebhookUrlNormalizationSchema
 });
 var init_webhooks2 = __esm({
   "../fern-definition/schema/lib/schemas/serialization/resources/webhooks/index.js"() {
@@ -61645,6 +61670,7 @@ __export(serialization_exports, {
   WebhookSignatureSchema: () => WebhookSignatureSchema,
   WebhookTimestampFormatSchema: () => WebhookTimestampFormatSchema2,
   WebhookTimestampSchema: () => WebhookTimestampSchema,
+  WebhookUrlNormalizationSchema: () => WebhookUrlNormalizationSchema,
   WithAudiences: () => WithAudiences,
   WithAuthSchema: () => WithAuthSchema,
   WithAvailability: () => WithAvailability,
@@ -70270,6 +70296,13 @@ var init_WebhookName = __esm({
   }
 });
 
+// ../../ir-sdk/lib/sdk/api/resources/webhooks/types/WebhookNotificationUrlNormalization.js
+var init_WebhookNotificationUrlNormalization = __esm({
+  "../../ir-sdk/lib/sdk/api/resources/webhooks/types/WebhookNotificationUrlNormalization.js"() {
+    "use strict";
+  }
+});
+
 // ../../ir-sdk/lib/sdk/api/resources/webhooks/types/WebhookPayload.js
 var WebhookPayload;
 var init_WebhookPayload = __esm({
@@ -70505,6 +70538,7 @@ var init_types69 = __esm({
     init_WebhookGroup();
     init_WebhookHttpMethod();
     init_WebhookName();
+    init_WebhookNotificationUrlNormalization();
     init_WebhookPayload();
     init_WebhookPayloadBodySort();
     init_WebhookPayloadComponent();
@@ -81223,6 +81257,19 @@ var init_WebhookBodyHashBinding2 = __esm({
   }
 });
 
+// ../../ir-sdk/lib/sdk/serialization/resources/webhooks/types/WebhookNotificationUrlNormalization.js
+var WebhookNotificationUrlNormalization;
+var init_WebhookNotificationUrlNormalization2 = __esm({
+  "../../ir-sdk/lib/sdk/serialization/resources/webhooks/types/WebhookNotificationUrlNormalization.js"() {
+    "use strict";
+    init_core2();
+    WebhookNotificationUrlNormalization = schemas_exports3.objectWithoutOptionalProperties({
+      portVariants: schemas_exports3.boolean(),
+      legacyQueryEncoding: schemas_exports3.boolean()
+    });
+  }
+});
+
 // ../../ir-sdk/lib/sdk/serialization/resources/webhooks/types/HmacSignatureVerification.js
 var HmacSignatureVerification;
 var init_HmacSignatureVerification2 = __esm({
@@ -81232,6 +81279,7 @@ var init_HmacSignatureVerification2 = __esm({
     init_NameAndWireValueOrString3();
     init_HmacAlgorithm2();
     init_WebhookBodyHashBinding2();
+    init_WebhookNotificationUrlNormalization2();
     init_WebhookPayloadFormat2();
     init_WebhookSignatureEncoding2();
     init_WebhookTimestampConfig2();
@@ -81242,7 +81290,8 @@ var init_HmacSignatureVerification2 = __esm({
       signaturePrefix: schemas_exports3.string().optional(),
       payloadFormat: WebhookPayloadFormat,
       timestamp: WebhookTimestampConfig.optional(),
-      bodyHashBinding: WebhookBodyHashBinding.optional()
+      bodyHashBinding: WebhookBodyHashBinding.optional(),
+      notificationUrlNormalization: WebhookNotificationUrlNormalization.optional()
     });
   }
 });
@@ -82861,6 +82910,7 @@ var init_types98 = __esm({
     init_WebhookGroup2();
     init_WebhookHttpMethod2();
     init_WebhookName2();
+    init_WebhookNotificationUrlNormalization2();
     init_WebhookPayload2();
     init_WebhookPayloadBodySort2();
     init_WebhookPayloadComponent2();
@@ -82894,6 +82944,7 @@ __export(webhooks_exports4, {
   WebhookGroup: () => WebhookGroup,
   WebhookHttpMethod: () => WebhookHttpMethod2,
   WebhookName: () => WebhookName,
+  WebhookNotificationUrlNormalization: () => WebhookNotificationUrlNormalization,
   WebhookPayload: () => WebhookPayload2,
   WebhookPayloadBodySort: () => WebhookPayloadBodySort2,
   WebhookPayloadComponent: () => WebhookPayloadComponent2,
@@ -83320,6 +83371,7 @@ __export(serialization_exports2, {
   WebhookHttpMethod: () => WebhookHttpMethod2,
   WebhookId: () => WebhookId,
   WebhookName: () => WebhookName,
+  WebhookNotificationUrlNormalization: () => WebhookNotificationUrlNormalization,
   WebhookPayload: () => WebhookPayload2,
   WebhookPayloadBodySort: () => WebhookPayloadBodySort2,
   WebhookPayloadComponent: () => WebhookPayloadComponent2,
@@ -133936,6 +133988,13 @@ var init_WebhookHttpMethod3 = __esm({
   }
 });
 
+// ../api-importers/openapi/openapi-ir/lib/sdk/api/resources/finalIr/types/WebhookNotificationUrlNormalization.js
+var init_WebhookNotificationUrlNormalization3 = __esm({
+  "../api-importers/openapi/openapi-ir/lib/sdk/api/resources/finalIr/types/WebhookNotificationUrlNormalization.js"() {
+    "use strict";
+  }
+});
+
 // ../api-importers/openapi/openapi-ir/lib/sdk/api/resources/finalIr/types/WebhookPayloadBodySort.js
 var WebhookPayloadBodySortValues2, WebhookPayloadBodySort3;
 var init_WebhookPayloadBodySort3 = __esm({
@@ -134288,6 +134347,7 @@ var init_types138 = __esm({
     init_WebhookBodyHashQueryParameterLocation3();
     init_WebhookExampleCall();
     init_WebhookHttpMethod3();
+    init_WebhookNotificationUrlNormalization3();
     init_WebhookPayloadBodySort3();
     init_WebhookPayloadComponent3();
     init_WebhookPayloadFormat3();
@@ -139303,6 +139363,19 @@ var init_WebhookBodyHashBinding4 = __esm({
   }
 });
 
+// ../api-importers/openapi/openapi-ir/lib/sdk/serialization/resources/finalIr/types/WebhookNotificationUrlNormalization.js
+var WebhookNotificationUrlNormalization2;
+var init_WebhookNotificationUrlNormalization4 = __esm({
+  "../api-importers/openapi/openapi-ir/lib/sdk/serialization/resources/finalIr/types/WebhookNotificationUrlNormalization.js"() {
+    "use strict";
+    init_core7();
+    WebhookNotificationUrlNormalization2 = schemas_exports9.objectWithoutOptionalProperties({
+      portVariants: schemas_exports9.boolean(),
+      legacyQueryEncoding: schemas_exports9.boolean()
+    });
+  }
+});
+
 // ../api-importers/openapi/openapi-ir/lib/sdk/serialization/resources/finalIr/types/WebhookSignatureAlgorithm.js
 var WebhookSignatureAlgorithm2;
 var init_WebhookSignatureAlgorithm2 = __esm({
@@ -139320,6 +139393,7 @@ var init_HmacWebhookSignatureVerification2 = __esm({
     "use strict";
     init_core7();
     init_WebhookBodyHashBinding4();
+    init_WebhookNotificationUrlNormalization4();
     init_WebhookPayloadFormat4();
     init_WebhookSignatureAlgorithm2();
     init_WebhookSignatureEncoding4();
@@ -139331,7 +139405,8 @@ var init_HmacWebhookSignatureVerification2 = __esm({
       signaturePrefix: schemas_exports9.string().optional(),
       payloadFormat: WebhookPayloadFormat2.optional(),
       timestamp: WebhookTimestamp.optional(),
-      bodyHashBinding: WebhookBodyHashBinding2.optional()
+      bodyHashBinding: WebhookBodyHashBinding2.optional(),
+      notificationUrlNormalization: WebhookNotificationUrlNormalization2.optional()
     });
   }
 });
@@ -140214,6 +140289,7 @@ var init_types142 = __esm({
     init_WebhookBodyHashQueryParameterLocation4();
     init_WebhookExampleCall2();
     init_WebhookHttpMethod4();
+    init_WebhookNotificationUrlNormalization4();
     init_WebhookPayloadBodySort4();
     init_WebhookPayloadComponent4();
     init_WebhookPayloadFormat4();
@@ -140326,6 +140402,7 @@ __export(finalIr_exports2, {
   WebhookBodyHashQueryParameterLocation: () => WebhookBodyHashQueryParameterLocation2,
   WebhookExampleCall: () => WebhookExampleCall,
   WebhookHttpMethod: () => WebhookHttpMethod4,
+  WebhookNotificationUrlNormalization: () => WebhookNotificationUrlNormalization2,
   WebhookPayloadBodySort: () => WebhookPayloadBodySort4,
   WebhookPayloadComponent: () => WebhookPayloadComponent4,
   WebhookPayloadFormat: () => WebhookPayloadFormat2,
@@ -141593,6 +141670,7 @@ __export(serialization_exports5, {
   WebhookBodyHashQueryParameterLocation: () => WebhookBodyHashQueryParameterLocation2,
   WebhookExampleCall: () => WebhookExampleCall,
   WebhookHttpMethod: () => WebhookHttpMethod4,
+  WebhookNotificationUrlNormalization: () => WebhookNotificationUrlNormalization2,
   WebhookPayloadBodySort: () => WebhookPayloadBodySort4,
   WebhookPayloadComponent: () => WebhookPayloadComponent4,
   WebhookPayloadFormat: () => WebhookPayloadFormat2,
@@ -146936,7 +147014,8 @@ function convertSignatureVerification(signatureVerification) {
         "signature-prefix": signatureVerification.signaturePrefix,
         "payload-format": convertPayloadFormat(signatureVerification.payloadFormat),
         timestamp: convertTimestamp(signatureVerification.timestamp),
-        "body-hash-binding": convertBodyHashBinding(signatureVerification.bodyHashBinding)
+        "body-hash-binding": convertBodyHashBinding(signatureVerification.bodyHashBinding),
+        "url-normalization": convertUrlNormalization(signatureVerification.notificationUrlNormalization)
       };
     case "asymmetric":
       return {
@@ -147024,6 +147103,15 @@ function convertBodyHashBinding(binding) {
     location: convertBodyHashLocation(binding.location)
   };
 }
+function convertUrlNormalization(normalization) {
+  if (normalization == null) {
+    return void 0;
+  }
+  return {
+    "port-variants": normalization.portVariants,
+    "legacy-query-encoding": normalization.legacyQueryEncoding
+  };
+}
 function convertBodyHashAlgorithm(algorithm) {
   switch (algorithm) {
     case "sha256":
@@ -166382,6 +166470,29 @@ function convertBodyHashBinding2(binding, logger4) {
     location: convertBodyHashLocation2(binding.location)
   };
 }
+function convertUrlNormalization2(normalization, logger4) {
+  if (normalization == null) {
+    return void 0;
+  }
+  const portVariants = normalization["port-variants"];
+  const legacyQueryEncoding = normalization["legacy-query-encoding"];
+  if (portVariants != null && typeof portVariants !== "boolean") {
+    logger4.warn(`Ignoring webhook url-normalization: "port-variants" must be a boolean, got "${typeof portVariants}".`);
+    return void 0;
+  }
+  if (legacyQueryEncoding != null && typeof legacyQueryEncoding !== "boolean") {
+    logger4.warn(`Ignoring webhook url-normalization: "legacy-query-encoding" must be a boolean, got "${typeof legacyQueryEncoding}".`);
+    return void 0;
+  }
+  if (!portVariants && !legacyQueryEncoding) {
+    logger4.warn('Ignoring webhook url-normalization: enable at least one of "port-variants" or "legacy-query-encoding".');
+    return void 0;
+  }
+  return {
+    portVariants: portVariants ?? false,
+    legacyQueryEncoding: legacyQueryEncoding ?? false
+  };
+}
 function convertBodyHashAlgorithm2(algorithm) {
   switch (algorithm) {
     case "sha256":
@@ -166460,7 +166571,8 @@ function convertSignatureSchema(extension4, logger4) {
       signaturePrefix: extension4["signature-prefix"],
       payloadFormat: convertPayloadFormat2(extension4["payload-format"]),
       timestamp: convertTimestamp2(extension4.timestamp),
-      bodyHashBinding: convertBodyHashBinding2(extension4["body-hash-binding"], logger4)
+      bodyHashBinding: convertBodyHashBinding2(extension4["body-hash-binding"], logger4),
+      notificationUrlNormalization: convertUrlNormalization2(extension4["url-normalization"], logger4)
     });
   }
   if (extension4.type === "asymmetric") {
@@ -275409,7 +275521,17 @@ function convertHmacSignature({ hmac, file: file4 }) {
     signaturePrefix: hmac["signature-prefix"],
     payloadFormat: convertPayloadFormat3(hmac["payload-format"]),
     timestamp: convertTimestampConfig({ timestamp: hmac.timestamp, file: file4 }),
-    bodyHashBinding: convertBodyHashBinding3(hmac["body-hash-binding"])
+    bodyHashBinding: convertBodyHashBinding3(hmac["body-hash-binding"]),
+    notificationUrlNormalization: convertUrlNormalization3(hmac["url-normalization"])
+  };
+}
+function convertUrlNormalization3(normalization) {
+  if (normalization == null) {
+    return void 0;
+  }
+  return {
+    portVariants: normalization["port-variants"] ?? false,
+    legacyQueryEncoding: normalization["legacy-query-encoding"] ?? false
   };
 }
 function convertBodyHashBinding3(binding) {
@@ -326019,6 +326141,34 @@ var init_fern_schema = __esm({
         ],
         additionalProperties: false
       },
+      "webhooks.WebhookUrlNormalizationSchema": {
+        type: "object",
+        properties: {
+          "port-variants": {
+            oneOf: [
+              {
+                type: "boolean"
+              },
+              {
+                type: "null"
+              }
+            ],
+            description: "Try the URL both with the scheme's standard port added (:443 for https, :80 for\nhttp) if absent, and with the port removed. All Twilio libraries do this."
+          },
+          "legacy-query-encoding": {
+            oneOf: [
+              {
+                type: "boolean"
+              },
+              {
+                type: "null"
+              }
+            ],
+            description: "Additionally try each port variant with the query string re-encoded using legacy\nform-encoding, reversing percent-encoding differences introduced by WHATWG URL\nparsing. Twilio's Node library does this; the others do not."
+          }
+        },
+        additionalProperties: false
+      },
       "webhooks.AsymmetricAlgorithmSchema": {
         type: "string",
         enum: [
@@ -326117,6 +326267,17 @@ var init_fern_schema = __esm({
                 description: `When set, the raw body is not signed directly; instead a hash of the body is
 transmitted separately (e.g. Twilio's "bodySHA256" query parameter for JSON
 bodies) and verification also recomputes and compares the body hash.`
+              },
+              "url-normalization": {
+                oneOf: [
+                  {
+                    $ref: "#/definitions/webhooks.WebhookUrlNormalizationSchema"
+                  },
+                  {
+                    type: "null"
+                  }
+                ],
+                description: "When set, the signature is verified against multiple normalized forms of the\nnotification URL (e.g. with/without port, legacy query encoding), succeeding if any\ncandidate matches. Required by providers like Twilio."
               }
             },
             required: [
@@ -330426,6 +330587,34 @@ var init_package_yml_schema = __esm({
         ],
         additionalProperties: false
       },
+      "webhooks.WebhookUrlNormalizationSchema": {
+        type: "object",
+        properties: {
+          "port-variants": {
+            oneOf: [
+              {
+                type: "boolean"
+              },
+              {
+                type: "null"
+              }
+            ],
+            description: "Try the URL both with the scheme's standard port added (:443 for https, :80 for\nhttp) if absent, and with the port removed. All Twilio libraries do this."
+          },
+          "legacy-query-encoding": {
+            oneOf: [
+              {
+                type: "boolean"
+              },
+              {
+                type: "null"
+              }
+            ],
+            description: "Additionally try each port variant with the query string re-encoded using legacy\nform-encoding, reversing percent-encoding differences introduced by WHATWG URL\nparsing. Twilio's Node library does this; the others do not."
+          }
+        },
+        additionalProperties: false
+      },
       "webhooks.AsymmetricAlgorithmSchema": {
         type: "string",
         enum: [
@@ -330524,6 +330713,17 @@ var init_package_yml_schema = __esm({
                 description: `When set, the raw body is not signed directly; instead a hash of the body is
 transmitted separately (e.g. Twilio's "bodySHA256" query parameter for JSON
 bodies) and verification also recomputes and compares the body hash.`
+              },
+              "url-normalization": {
+                oneOf: [
+                  {
+                    $ref: "#/definitions/webhooks.WebhookUrlNormalizationSchema"
+                  },
+                  {
+                    type: "null"
+                  }
+                ],
+                description: "When set, the signature is verified against multiple normalized forms of the\nnotification URL (e.g. with/without port, legacy query encoding), succeeding if any\ncandidate matches. Required by providers like Twilio."
               }
             },
             required: [
@@ -681332,6 +681532,21 @@ function validateHmac(signature, violations) {
   if (signature["body-hash-binding"] != null) {
     validateBodyHashBinding(signature, violations);
   }
+  if (signature["url-normalization"] != null) {
+    validateUrlNormalization(signature, violations);
+  }
+}
+function validateUrlNormalization(signature, violations) {
+  const normalization = signature["url-normalization"];
+  if (normalization == null) {
+    return;
+  }
+  if (!normalization["port-variants"] && !normalization["legacy-query-encoding"]) {
+    violations.push({
+      severity: "error",
+      message: "url-normalization must enable at least one of port-variants or legacy-query-encoding"
+    });
+  }
 }
 function validateBodyHashBinding(signature, violations) {
   const binding = signature["body-hash-binding"];
@@ -691168,7 +691383,7 @@ var AccessTokenPosthogManager = class {
         properties: {
           ...event,
           ...event.properties,
-          version: "5.75.8",
+          version: "5.76.0",
           usingAccessToken: true,
           ...getRunIdProperties()
         }
@@ -691234,7 +691449,7 @@ var UserPosthogManager = class {
       distinctId: this.userId ?? await this.getPersistedDistinctId(),
       event: "CLI",
       properties: {
-        version: "5.75.8",
+        version: "5.76.0",
         ...event,
         ...event.properties,
         usingAccessToken: false,
@@ -872339,7 +872554,7 @@ var LOCAL_STORAGE_FOLDER4 = ".fern-dev";
 var LOGS_FOLDER_NAME = "logs";
 var MAX_LOGS_DIR_SIZE_BYTES = 100 * 1024 * 1024;
 function getCliSource() {
-  const version7 = "5.75.8";
+  const version7 = "5.76.0";
   return `cli@${version7}`;
 }
 var DebugLogger = class {
@@ -904992,7 +905207,7 @@ var LegacyDocsPublisher = class {
         previewId,
         disableTemplates: void 0,
         skipUpload,
-        cliVersion: "5.75.8",
+        cliVersion: "5.76.0",
         loginCommand: "fern auth login"
       });
       if (taskContext.getResult() === TaskResult.Failure) {
@@ -971905,7 +972120,7 @@ function getAutomationContextFromEnv() {
     config_branch: process.env.FERN_CONFIG_BRANCH,
     config_pr_number: process.env.FERN_CONFIG_PR_NUMBER,
     trigger: process.env.GITHUB_EVENT_NAME,
-    cli_version: "5.75.8"
+    cli_version: "5.76.0"
   };
 }
 function isAutomationMode() {
@@ -972737,7 +972952,7 @@ var CliContext = class _CliContext {
     if (false) {
       this.logger.error("CLI_VERSION is not defined");
     }
-    return "5.75.8";
+    return "5.76.0";
   }
   getCliName() {
     if (false) {

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "5.75.8",
+  "version": "5.76.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/fern-api/fern.git",