@mappa-ai/mappa-node 1.2.3 → 1.2.4

package/dist/index.cjs

@@ -1614,7 +1614,7 @@ function isObject(v) {
 }
 /**
 * Async signature verification using WebCrypto (works in modern Node and browsers).
-* Signature scheme placeholder:
+* Signature scheme:
 *   headers["mappa-signature"] = "t=1700000000,v1=<hex_hmac_sha256>"
 * Signed payload: `${t}.${rawBody}`
 */
@@ -1632,20 +1632,24 @@ var WebhooksResource = class {
 		if (!timingSafeEqualHex(await hmacHex(params.secret, signed), parts.v1)) throw new Error("Invalid signature");
 		return { ok: true };
 	}
+	/**
+	* Parse and validate a webhook event payload.
+	*
+	* @param payload - Raw JSON string from the webhook request body
+	* @returns Parsed and validated webhook event
+	* @throws Error if payload is invalid or missing required fields
+	*/
 	parseEvent(payload) {
 		const raw = JSON.parse(payload);
 		if (!isObject(raw)) throw new Error("Invalid webhook payload: not an object");
 		const obj = raw;
-		const id = obj.id;
 		const type = obj.type;
-		const createdAt = obj.createdAt;
-		if (typeof id !== "string") throw new Error("Invalid webhook payload: id must be a string");
+		const timestamp = obj.timestamp;
 		if (typeof type !== "string") throw new Error("Invalid webhook payload: type must be a string");
-		if (typeof createdAt !== "string") throw new Error("Invalid webhook payload: createdAt must be a string");
+		if (typeof timestamp !== "string") throw new Error("Invalid webhook payload: timestamp must be a string");
 		return {
-			id,
 			type,
-			createdAt,
+			timestamp,
 			data: "data" in obj ? obj.data : void 0
 		};
 	}