@lunora/advisor 1.0.0-alpha.20 → 1.0.0-alpha.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.mts +14 -12
- package/dist/index.d.ts +14 -12
- package/package.json +1 -1
package/dist/index.d.mts
CHANGED
|
@@ -714,18 +714,19 @@ interface AdvisorOwnerFieldWrite {
|
|
|
714
714
|
}
|
|
715
715
|
/**
|
|
716
716
|
* One payment webhook-adapter construction (`createStripeAdapter` /
|
|
717
|
-
* `createPolarAdapter`
|
|
718
|
-
* `payment_webhook_wide_tolerance` lint. The adapters
|
|
719
|
-
* timestamp against a `webhookToleranceSeconds` replay
|
|
720
|
-
* implausibly wide window leaves the endpoint accepting
|
|
721
|
-
* payloads long after capture. `toleranceSeconds`
|
|
722
|
-
* literal (when present and a plain numeric
|
|
723
|
-
* conservative ceiling. Produced by the
|
|
724
|
-
* supply it, so the lint finds nothing
|
|
717
|
+
* `createPolarAdapter` / `createAutumnAdapter` / `createDodoPaymentsAdapter`) —
|
|
718
|
+
* the shared input for the `payment_webhook_wide_tolerance` lint. The adapters
|
|
719
|
+
* verify a webhook's signed timestamp against a `webhookToleranceSeconds` replay
|
|
720
|
+
* window (default 300s); an implausibly wide window leaves the endpoint accepting
|
|
721
|
+
* stale, replayable signed payloads long after capture. `toleranceSeconds`
|
|
722
|
+
* carries the statically-known literal (when present and a plain numeric
|
|
723
|
+
* literal); the lint fires only above a conservative ceiling. Produced by the
|
|
724
|
+
* codegen feeder; runtime callers don't supply it, so the lint finds nothing
|
|
725
|
+
* there.
|
|
725
726
|
*/
|
|
726
727
|
interface AdvisorPaymentWebhook {
|
|
727
728
|
/** The adapter factory invoked. */
|
|
728
|
-
callee: "createPolarAdapter" | "createStripeAdapter";
|
|
729
|
+
callee: "createAutumnAdapter" | "createDodoPaymentsAdapter" | "createPolarAdapter" | "createStripeAdapter";
|
|
729
730
|
/** The exported binding name of the enclosing declaration (`<module>` at file scope). */
|
|
730
731
|
exportName: string;
|
|
731
732
|
/** Source file relative to the lunora dir, no extension. */
|
|
@@ -1716,7 +1717,7 @@ interface LintContext {
|
|
|
1716
1717
|
ownerFieldWrites?: ReadonlyArray<AdvisorOwnerFieldWrite>;
|
|
1717
1718
|
/**
|
|
1718
1719
|
* Payment webhook-adapter constructions (`createStripeAdapter` /
|
|
1719
|
-
* `createPolarAdapter`) — the payment-webhook wide-tolerance lint's input. Each row's
|
|
1720
|
+
* `createPolarAdapter` / `createAutumnAdapter` / `createDodoPaymentsAdapter`) — the payment-webhook wide-tolerance lint's input. Each row's
|
|
1720
1721
|
* `toleranceSeconds` is the statically-known `webhookToleranceSeconds` replay
|
|
1721
1722
|
* window (default 300s); the lint fires only above a conservative ceiling, where
|
|
1722
1723
|
* the endpoint would accept stale, replayable signed payloads. Supplied by the
|
|
@@ -2923,8 +2924,9 @@ declare const ownerFieldFromArgsNotAuth: Lint;
|
|
|
2923
2924
|
*/
|
|
2924
2925
|
declare const paymentCreateWithoutAuthorize: Lint;
|
|
2925
2926
|
/**
|
|
2926
|
-
* Flags a payment webhook adapter (`createStripeAdapter` / `createPolarAdapter`
|
|
2927
|
-
*
|
|
2927
|
+
* Flags a payment webhook adapter (`createStripeAdapter` / `createPolarAdapter` /
|
|
2928
|
+
* `createAutumnAdapter` / `createDodoPaymentsAdapter`) configured with an
|
|
2929
|
+
* implausibly wide `webhookToleranceSeconds` replay window.
|
|
2928
2930
|
*
|
|
2929
2931
|
* The adapters reject a webhook whose signed timestamp is more than
|
|
2930
2932
|
* `webhookToleranceSeconds` from now, so a captured-then-replayed signed payload
|
package/dist/index.d.ts
CHANGED
|
@@ -714,18 +714,19 @@ interface AdvisorOwnerFieldWrite {
|
|
|
714
714
|
}
|
|
715
715
|
/**
|
|
716
716
|
* One payment webhook-adapter construction (`createStripeAdapter` /
|
|
717
|
-
* `createPolarAdapter`
|
|
718
|
-
* `payment_webhook_wide_tolerance` lint. The adapters
|
|
719
|
-
* timestamp against a `webhookToleranceSeconds` replay
|
|
720
|
-
* implausibly wide window leaves the endpoint accepting
|
|
721
|
-
* payloads long after capture. `toleranceSeconds`
|
|
722
|
-
* literal (when present and a plain numeric
|
|
723
|
-
* conservative ceiling. Produced by the
|
|
724
|
-
* supply it, so the lint finds nothing
|
|
717
|
+
* `createPolarAdapter` / `createAutumnAdapter` / `createDodoPaymentsAdapter`) —
|
|
718
|
+
* the shared input for the `payment_webhook_wide_tolerance` lint. The adapters
|
|
719
|
+
* verify a webhook's signed timestamp against a `webhookToleranceSeconds` replay
|
|
720
|
+
* window (default 300s); an implausibly wide window leaves the endpoint accepting
|
|
721
|
+
* stale, replayable signed payloads long after capture. `toleranceSeconds`
|
|
722
|
+
* carries the statically-known literal (when present and a plain numeric
|
|
723
|
+
* literal); the lint fires only above a conservative ceiling. Produced by the
|
|
724
|
+
* codegen feeder; runtime callers don't supply it, so the lint finds nothing
|
|
725
|
+
* there.
|
|
725
726
|
*/
|
|
726
727
|
interface AdvisorPaymentWebhook {
|
|
727
728
|
/** The adapter factory invoked. */
|
|
728
|
-
callee: "createPolarAdapter" | "createStripeAdapter";
|
|
729
|
+
callee: "createAutumnAdapter" | "createDodoPaymentsAdapter" | "createPolarAdapter" | "createStripeAdapter";
|
|
729
730
|
/** The exported binding name of the enclosing declaration (`<module>` at file scope). */
|
|
730
731
|
exportName: string;
|
|
731
732
|
/** Source file relative to the lunora dir, no extension. */
|
|
@@ -1716,7 +1717,7 @@ interface LintContext {
|
|
|
1716
1717
|
ownerFieldWrites?: ReadonlyArray<AdvisorOwnerFieldWrite>;
|
|
1717
1718
|
/**
|
|
1718
1719
|
* Payment webhook-adapter constructions (`createStripeAdapter` /
|
|
1719
|
-
* `createPolarAdapter`) — the payment-webhook wide-tolerance lint's input. Each row's
|
|
1720
|
+
* `createPolarAdapter` / `createAutumnAdapter` / `createDodoPaymentsAdapter`) — the payment-webhook wide-tolerance lint's input. Each row's
|
|
1720
1721
|
* `toleranceSeconds` is the statically-known `webhookToleranceSeconds` replay
|
|
1721
1722
|
* window (default 300s); the lint fires only above a conservative ceiling, where
|
|
1722
1723
|
* the endpoint would accept stale, replayable signed payloads. Supplied by the
|
|
@@ -2923,8 +2924,9 @@ declare const ownerFieldFromArgsNotAuth: Lint;
|
|
|
2923
2924
|
*/
|
|
2924
2925
|
declare const paymentCreateWithoutAuthorize: Lint;
|
|
2925
2926
|
/**
|
|
2926
|
-
* Flags a payment webhook adapter (`createStripeAdapter` / `createPolarAdapter`
|
|
2927
|
-
*
|
|
2927
|
+
* Flags a payment webhook adapter (`createStripeAdapter` / `createPolarAdapter` /
|
|
2928
|
+
* `createAutumnAdapter` / `createDodoPaymentsAdapter`) configured with an
|
|
2929
|
+
* implausibly wide `webhookToleranceSeconds` replay window.
|
|
2928
2930
|
*
|
|
2929
2931
|
* The adapters reject a webhook whose signed timestamp is more than
|
|
2930
2932
|
* `webhookToleranceSeconds` from now, so a captured-then-replayed signed payload
|