@modernedi/sdk 0.1.0 → 0.1.2

package/dist/webhook.d.ts

@@ -0,0 +1,37 @@
+import type { MappedOutputMessage } from "./generated/models/MappedOutputMessage.js";
+export declare const DEFAULT_WEBHOOK_TOLERANCE_SECONDS = 300;
+export type MappedOutputAvailableWebhookEvent = {
+    event: "mapped_output.available";
+    deliveryId: string;
+    createdAt: string;
+    tenantId: number;
+    partnerId: number;
+    message: MappedOutputMessage;
+};
+export type MappedOutputTestWebhookEvent = {
+    event: "mapped_output.test";
+    deliveryId: string;
+    createdAt: string;
+    tenantId: number;
+    partnerId: number;
+    test: true;
+    requestId: string;
+    description: string;
+};
+export type MappedOutputWebhookEvent = MappedOutputAvailableWebhookEvent | MappedOutputTestWebhookEvent;
+export type MappedOutputWebhookHeaders = Headers | Readonly<Record<string, string | readonly string[] | undefined>>;
+export interface VerifyMappedOutputWebhookOptions {
+    rawBody: string | Uint8Array;
+    headers: MappedOutputWebhookHeaders;
+    signingSecret: string;
+    toleranceSeconds?: number;
+    now?: Date | number;
+}
+export type MappedOutputWebhookVerificationErrorCode = "missing_header" | "duplicate_header" | "invalid_timestamp" | "timestamp_outside_tolerance" | "invalid_signature_format" | "signature_mismatch" | "invalid_json" | "invalid_event";
+export declare class MappedOutputWebhookVerificationError extends Error {
+    readonly code: MappedOutputWebhookVerificationErrorCode;
+    readonly name = "MappedOutputWebhookVerificationError";
+    constructor(code: MappedOutputWebhookVerificationErrorCode, message: string);
+}
+export declare function verifyMappedOutputWebhook(options: VerifyMappedOutputWebhookOptions): MappedOutputWebhookEvent;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../src/webhook.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAGrF,eAAO,MAAM,iCAAiC,MAAM,CAAC;AAErD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,KAAK,EAAE,yBAAyB,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,mBAAmB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAChC,iCAAiC,GACjC,4BAA4B,CAAC;AAEjC,MAAM,MAAM,0BAA0B,GAClC,OAAO,GACP,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;AAErE,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAC7B,OAAO,EAAE,0BAA0B,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,wCAAwC,GAChD,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,6BAA6B,GAC7B,0BAA0B,GAC1B,oBAAoB,GACpB,cAAc,GACd,eAAe,CAAC;AAEpB,qBAAa,oCAAqC,SAAQ,KAAK;IAI3D,QAAQ,CAAC,IAAI,EAAE,wCAAwC;IAHzD,SAAkB,IAAI,0CAA0C;IAEhE,YACW,IAAI,EAAE,wCAAwC,EACvD,OAAO,EAAE,MAAM,EAIhB;CACF;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gCAAgC,GACxC,wBAAwB,CAkD1B"}

package/dist/webhook.js

@@ -0,0 +1,185 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { MappedOutputMessageFromJSON } from "./generated/models/MappedOutputMessage.js";
+export const DEFAULT_WEBHOOK_TOLERANCE_SECONDS = 300;
+export class MappedOutputWebhookVerificationError extends Error {
+    code;
+    name = "MappedOutputWebhookVerificationError";
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export function verifyMappedOutputWebhook(options) {
+    const timestamp = requiredHeader(options.headers, "X-ModernEDI-Timestamp");
+    const signature = requiredHeader(options.headers, "X-ModernEDI-Signature");
+    const headerEvent = requiredHeader(options.headers, "X-ModernEDI-Event");
+    const headerDeliveryId = requiredHeader(options.headers, "X-ModernEDI-Delivery-Id");
+    const timestampSeconds = parseTimestamp(timestamp);
+    const toleranceSeconds = parseTolerance(options.toleranceSeconds);
+    const nowSeconds = resolveNowSeconds(options.now);
+    if (Math.abs(nowSeconds - timestampSeconds) > toleranceSeconds) {
+        throw verificationError("timestamp_outside_tolerance", "Webhook timestamp is outside the accepted freshness window.");
+    }
+    const signatureMatch = /^sha256=(?<digest>[0-9a-f]{64})$/u.exec(signature);
+    if (signatureMatch?.groups?.digest === undefined) {
+        throw verificationError("invalid_signature_format", "Webhook signature must use sha256 followed by 64 lowercase hexadecimal characters.");
+    }
+    const suppliedDigest = Buffer.from(signatureMatch.groups.digest, "hex");
+    const rawBody = typeof options.rawBody === "string"
+        ? Buffer.from(options.rawBody, "utf8")
+        : Buffer.from(options.rawBody);
+    const expectedDigest = createHmac("sha256", requireSigningSecret(options.signingSecret))
+        .update(timestamp, "ascii")
+        .update(".", "ascii")
+        .update(rawBody)
+        .digest();
+    if (suppliedDigest.length !== expectedDigest.length
+        || !timingSafeEqual(suppliedDigest, expectedDigest)) {
+        throw verificationError("signature_mismatch", "Webhook signature verification failed.");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(rawBody.toString("utf8"));
+    }
+    catch {
+        throw verificationError("invalid_json", "Verified webhook body is not valid JSON.");
+    }
+    const event = parseEvent(parsed);
+    if (event.event !== headerEvent || event.deliveryId !== headerDeliveryId) {
+        throw verificationError("invalid_event", "Verified webhook headers do not match the signed event body.");
+    }
+    return event;
+}
+function parseEvent(value) {
+    if (!isRecord(value)) {
+        throw verificationError("invalid_event", "Verified webhook body must be a JSON object.");
+    }
+    const common = {
+        deliveryId: requiredString(value, "deliveryId"),
+        createdAt: requiredString(value, "createdAt"),
+        tenantId: requiredPositiveInteger(value, "tenantId"),
+        partnerId: requiredPositiveInteger(value, "partnerId"),
+    };
+    if (value.event === "mapped_output.available") {
+        if (!isRecord(value.message)) {
+            throw verificationError("invalid_event", "Mapped-output webhook event is missing its message object.");
+        }
+        validateMappedOutputMessage(value.message);
+        return {
+            event: "mapped_output.available",
+            ...common,
+            message: MappedOutputMessageFromJSON(value.message),
+        };
+    }
+    if (value.event === "mapped_output.test") {
+        if (value.test !== true || "message" in value) {
+            throw verificationError("invalid_event", "Synthetic webhook event must be marked test and must not contain a mapped-output message.");
+        }
+        return {
+            event: "mapped_output.test",
+            ...common,
+            test: true,
+            requestId: requiredString(value, "requestId"),
+            description: requiredString(value, "description"),
+        };
+    }
+    throw verificationError("invalid_event", "Webhook event type is not supported by this SDK version.");
+}
+function requiredHeader(headers, name) {
+    let value;
+    if ("get" in headers && typeof headers.get === "function") {
+        value = headers.get(name);
+    }
+    else {
+        const entries = Object.entries(headers)
+            .filter(([key]) => key.toLowerCase() === name.toLowerCase());
+        if (entries.length > 1) {
+            throw verificationError("duplicate_header", `Webhook header ${name} must occur exactly once.`);
+        }
+        value = entries[0]?.[1];
+    }
+    if (Array.isArray(value)) {
+        if (value.length !== 1) {
+            throw verificationError("duplicate_header", `Webhook header ${name} must occur exactly once.`);
+        }
+        value = value[0];
+    }
+    if (typeof value !== "string" || value.length === 0) {
+        throw verificationError("missing_header", `Required webhook header ${name} is missing.`);
+    }
+    if (value.includes(",")) {
+        throw verificationError("duplicate_header", `Webhook header ${name} must occur exactly once.`);
+    }
+    return value;
+}
+function parseTimestamp(value) {
+    if (!/^(?:0|[1-9][0-9]*)$/u.test(value)) {
+        throw verificationError("invalid_timestamp", "Webhook timestamp must be whole Unix epoch seconds.");
+    }
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed)) {
+        throw verificationError("invalid_timestamp", "Webhook timestamp must be whole Unix epoch seconds.");
+    }
+    return parsed;
+}
+function parseTolerance(value) {
+    const resolved = value ?? DEFAULT_WEBHOOK_TOLERANCE_SECONDS;
+    if (!Number.isSafeInteger(resolved) || resolved < 0) {
+        throw new TypeError("toleranceSeconds must be a non-negative safe integer.");
+    }
+    return resolved;
+}
+function resolveNowSeconds(value) {
+    const milliseconds = value instanceof Date ? value.getTime() : value ?? Date.now();
+    if (!Number.isFinite(milliseconds)) {
+        throw new TypeError("now must be a valid Date or Unix epoch milliseconds.");
+    }
+    return Math.floor(milliseconds / 1000);
+}
+function requireSigningSecret(value) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new TypeError("signingSecret must be a non-empty string.");
+    }
+    return value;
+}
+function requiredString(value, name) {
+    const field = value[name];
+    if (typeof field !== "string" || field.length === 0) {
+        throw verificationError("invalid_event", `Verified webhook field ${name} must be a string.`);
+    }
+    return field;
+}
+function requiredPositiveInteger(value, name) {
+    const field = value[name];
+    if (typeof field !== "number" || !Number.isSafeInteger(field) || field < 1) {
+        throw verificationError("invalid_event", `Verified webhook field ${name} must be a positive integer.`);
+    }
+    return field;
+}
+function validateMappedOutputMessage(value) {
+    for (const name of [
+        "id",
+        "receiptHandle",
+        "messageId",
+        "transactionKey",
+        "environment",
+        "mappedOutputKey",
+        "purpose",
+    ]) {
+        requiredString(value, name);
+    }
+    for (const name of ["deliveryCount", "sequenceNumber"]) {
+        const field = value[name];
+        if (typeof field !== "number" || !Number.isSafeInteger(field) || field < 0) {
+            throw verificationError("invalid_event", `Verified webhook message field ${name} must be a non-negative integer.`);
+        }
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function verificationError(code, message) {
+    return new MappedOutputWebhookVerificationError(code, message);
+}
+//# sourceMappingURL=webhook.js.map

package/dist/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../src/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AAExF,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAgDrD,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IAIlD,IAAI;IAHG,IAAI,GAAG,sCAAsC,CAAC;IAEhE,YACW,IAA8C,EACvD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;oBAHN,IAAI;QAIb,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAyC;IAEzC,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACzE,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACpF,MAAM,gBAAgB,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,gBAAgB,CAAC,GAAG,gBAAgB,EAAE,CAAC;QAC/D,MAAM,iBAAiB,CACrB,6BAA6B,EAC7B,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,mCAAmC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,cAAc,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,iBAAiB,CACrB,0BAA0B,EAC1B,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QACjD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QACtC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;SACrF,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;SAC1B,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,EAAE,CAAC;IACZ,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;WAC5C,CAAC,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC;QACxD,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CAAC,cAAc,EAAE,0CAA0C,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QACzE,MAAM,iBAAiB,CACrB,eAAe,EACf,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,iBAAiB,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,cAAc,CAAC,KAAK,EAAE,YAAY,CAAC;QAC/C,SAAS,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC;QAC7C,QAAQ,EAAE,uBAAuB,CAAC,KAAK,EAAE,UAAU,CAAC;QACpD,SAAS,EAAE,uBAAuB,CAAC,KAAK,EAAE,WAAW,CAAC;KACvD,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,KAAK,yBAAyB,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,iBAAiB,CACrB,eAAe,EACf,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO;YACL,KAAK,EAAE,yBAAyB;YAChC,GAAG,MAAM;YACT,OAAO,EAAE,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC;SACpD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9C,MAAM,iBAAiB,CACrB,eAAe,EACf,2FAA2F,CAC5F,CAAC;QACJ,CAAC;QACD,OAAO;YACL,KAAK,EAAE,oBAAoB;YAC3B,GAAG,MAAM;YACT,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC;YAC7C,WAAW,EAAE,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC;SAClD,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,CAAC,eAAe,EAAE,0DAA0D,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,cAAc,CAAC,OAAmC,EAAE,IAAY;IACvE,IAAI,KAAoD,CAAC;IACzD,IAAI,KAAK,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC1D,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,iBAAiB,CACrB,kBAAkB,EAClB,kBAAkB,IAAI,2BAA2B,CAClD,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,iBAAiB,CACrB,kBAAkB,EAClB,kBAAkB,IAAI,2BAA2B,CAClD,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,iBAAiB,CAAC,gBAAgB,EAAE,2BAA2B,IAAI,cAAc,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,iBAAiB,CACrB,kBAAkB,EAClB,kBAAkB,IAAI,2BAA2B,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,iBAAiB,CACrB,mBAAmB,EACnB,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,iBAAiB,CACrB,mBAAmB,EACnB,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,MAAM,QAAQ,GAAG,KAAK,IAAI,iCAAiC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgC;IACzD,MAAM,YAAY,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B,EAAE,IAAY;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,iBAAiB,CAAC,eAAe,EAAE,0BAA0B,IAAI,oBAAoB,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA8B,EAAE,IAAY;IAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,iBAAiB,CACrB,eAAe,EACf,0BAA0B,IAAI,8BAA8B,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,2BAA2B,CAAC,KAA8B;IACjE,KAAK,MAAM,IAAI,IAAI;QACjB,IAAI;QACJ,eAAe;QACf,WAAW;QACX,gBAAgB;QAChB,aAAa;QACb,iBAAiB;QACjB,SAAS;KACV,EAAE,CAAC;QACF,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,iBAAiB,CACrB,eAAe,EACf,kCAAkC,IAAI,kCAAkC,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CACxB,IAA8C,EAC9C,OAAe;IAEf,OAAO,IAAI,oCAAoC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC"}

package/examples/verify-webhook.ts

@@ -0,0 +1,43 @@
+import {
+  type MappedOutputMessage,
+  type ModernEdiClient,
+  verifyMappedOutputWebhook,
+} from "@modernedi/sdk";
+
+type ClaimDeliveryId = (deliveryId: string) => Promise<boolean>;
+type ProcessMappedOutput = (messageId: string, message: MappedOutputMessage) => Promise<void>;
+
+export async function receiveMappedOutputWebhook(
+  rawBody: Uint8Array,
+  headers: Headers,
+  signingSecret: string,
+  claimDeliveryId: ClaimDeliveryId,
+  processMappedOutput: ProcessMappedOutput,
+): Promise<"duplicate" | "test" | "processed"> {
+  const event = verifyMappedOutputWebhook({ rawBody, headers, signingSecret });
+
+  // Implement this as an atomic, durable insert with a uniqueness constraint.
+  if (!await claimDeliveryId(event.deliveryId)) {
+    return "duplicate";
+  }
+  if (event.event === "mapped_output.test") {
+    return "test";
+  }
+
+  // Also make business processing idempotent on message.id across legitimate redeliveries.
+  await processMappedOutput(event.message.id, event.message);
+  return "processed";
+}
+
+export async function testMappedOutputWebhook(
+  modernEdi: ModernEdiClient,
+  partnerId: number,
+) {
+  const result = await modernEdi.mappedOutputs.testMappedOutputWebhook({ partnerId });
+  return {
+    requestId: result.requestId,
+    delivered: result.delivered,
+    destinationStatusCode: result.statusCode,
+    error: result.error,
+  };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modernedi/sdk",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Official TypeScript SDK for the ModernEDI Integration API",
   "license": "Apache-2.0",
   "author": {
@@ -37,11 +37,6 @@
   "engines": {
     "node": ">=20"
   },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/brcolow/modernedi.git",
-    "directory": "sdks/typescript"
-  },
   "homepage": "https://www.modernedi.com/integration-api/",
   "bugs": {
     "url": "https://www.modernedi.com/contact",
@@ -53,7 +48,7 @@
   },
   "scripts": {
     "generate": "npm --prefix ../codegen run generate:typescript",
-    "check:generated": "npm --prefix ../codegen run check:typescript",
+    "check:generated": "npm --prefix ../codegen test && npm --prefix ../codegen run check:typescript",
     "build": "tsc -p tsconfig.json",
     "test": "npm run build && npm run typecheck:contracts && node --test test/*.test.mjs",
     "typecheck:contracts": "tsc -p tsconfig.contract-tests.json",
@@ -64,6 +59,6 @@
   },
   "devDependencies": {
     "@types/node": "20.19.43",
-    "typescript": "~5.9.3"
+    "typescript": "^7.0.2"
   }
 }