@noresponse/node 5.1.2 → 6.0.1

package/dist/esm/webhooks.d.ts

@@ -1,150 +1,29 @@
-import { type Account } from "./models/account.js";
-import { type AccountDecisionsByFlow } from "./models/account-decisions-by-flow.js";
-import { type Assessment } from "./models/assessment.js";
+import * as models from "./models/index.js";
+/** How far, in seconds, the NR-Webhook-Timestamp header may be from the receiver's clock. */
 export declare const DEFAULT_TOLERANCE_SECONDS = 300;
-/** Any case-insensitive mapping of header name to value: Fetch Headers, Node IncomingHttpHeaders, a plain object or entries. */
+/** Why a webhook delivery was refused. */
+export type WebhookErrorCode = "missing_header" | "duplicate_header" | "invalid_timestamp" | "unknown_key" | "invalid_signature" | "invalid_payload";
+/** Thrown by constructEvent: answer the delivery with a 400 and do not process it. */
+export declare class WebhookVerificationError extends Error {
+    name: string;
+    readonly code: WebhookErrorCode;
+    constructor(code: WebhookErrorCode, message: string);
+}
+/** Fetch Headers, Node's IncomingHttpHeaders, a plain object or [name, value] entries; names match in any letter case. */
 export type HeaderInput = Headers | Iterable<readonly [string, string]> | Readonly<Record<string, string | string[] | undefined>>;
-/** Webhook key id (whk_...) to its secret. Hold both during a rotation. */
-export type WebhookSecrets = Readonly<Record<string, string | Uint8Array>>;
+/** Each key id, sent in NR-Webhook-Key-Id, mapped to its secret; hold two during a rotation. */
+export type WebhookSecrets = Readonly<Record<string, string>>;
 export type ConstructEventOptions = {
-    /** How far the NR-Webhook-Timestamp may be from now, in seconds. Default 300. */
+    /** Replaces DEFAULT_TOLERANCE_SECONDS. */
     toleranceSeconds?: number;
     /** The receiver's clock in Unix seconds; defaults to now. */
     now?: number;
 };
-/** The final event for an assessment: it has expired and GET now answers 404. */
-export type AssessmentExpired = {
-    assessmentId: string;
-    accountId: string;
-    /** The last served version; expiry is not a revision. */
-    assessmentVersion: number;
-    status: "expired";
-    changeReason: "expired";
-};
-export type EndpointVerification = {
-    endpointId: string;
-    challenge: string;
-};
-/** An account you erased with accounts.delete: delete what you hold for it. */
-export type AccountDeleted = {
-    accountId: string;
-    /** How many assessments the erasure deleted, at least 1. */
-    assessmentsDeleted: number;
-    /** When the erasure took effect, as deletedAt in the accounts.delete answer. */
-    deletedAt: string;
-};
-/**
- * The workspace was deleted. Sent once per environment before its endpoints
- * are torn down: the last event this endpoint receives.
- */
-export type WorkspaceDeleted = {
-    workspaceId: string;
-    environment: "live" | "test";
-    deletedAt: string;
-};
-/**
- * Another endpoint of this environment was disabled after failing
- * continuously for 72 hours. It receives nothing more until it is verified again.
- */
-export type EndpointDisabled = {
-    endpointId: string;
-    /** When its deliveries started failing. */
-    failingSince: string;
-    disabledAt: string;
-};
-/**
- * The account's decision for at least one flow changed. It is not sent when
- * the score moves within the same decision, nor for an account's first risk.
- */
-export type AccountRiskChanged = {
-    /** The account exactly as accounts.get returns it: the new risk and decisions. */
-    account: Account;
-    /** The decision for each flow before the change, as last announced. */
-    previousDecisionsByFlow: AccountDecisionsByFlow;
-};
-export type AssessmentUpdatedEvent = {
-    id: string;
-    type: "assessment.updated";
-    createdAt: string;
-    /**
-     * True on an event sent by webhookEndpoints.sendTestEvent: data is a fixed
-     * example assessment, not one of yours. Acknowledge it and apply nothing.
-     * False on every real event.
-     */
-    test: boolean;
-    /** The assessment exactly as assessments.get returns it at this version. */
-    data: Assessment;
-};
-export type AssessmentExpiredEvent = {
-    id: string;
-    type: "assessment.updated";
-    createdAt: string;
-    /** Always false: an expiry is never a test event. */
-    test: false;
-    data: AssessmentExpired;
-};
-export type EndpointVerificationEvent = {
-    id: string;
-    type: "endpoint.verification";
-    createdAt: string;
-    /** Always false. */
-    test: false;
-    data: EndpointVerification;
-};
-export type AccountDeletedEvent = {
-    id: string;
-    type: "account.deleted";
-    createdAt: string;
-    /** Always false. */
-    test: false;
-    data: AccountDeleted;
-};
-export type WorkspaceDeletedEvent = {
-    id: string;
-    type: "workspace.deleted";
-    createdAt: string;
-    /** Always false. */
-    test: false;
-    data: WorkspaceDeleted;
-};
-export type EndpointDisabledEvent = {
-    id: string;
-    type: "webhook_endpoint.disabled";
-    createdAt: string;
-    /** Always false. */
-    test: false;
-    data: EndpointDisabled;
-};
-export type AccountRiskChangedEvent = {
-    id: string;
-    type: "account.risk_changed";
-    createdAt: string;
-    /** Always false. */
-    test: false;
-    data: AccountRiskChanged;
-};
-export type WebhookEvent = AssessmentUpdatedEvent | AssessmentExpiredEvent | EndpointVerificationEvent | AccountDeletedEvent | WorkspaceDeletedEvent | EndpointDisabledEvent | AccountRiskChangedEvent;
-export type WebhookErrorCode = "missing_header" | "duplicate_header" | "invalid_timestamp" | "unknown_key" | "invalid_signature" | "invalid_payload";
-/** Thrown by constructEvent and verificationResponse. Answer 400 and do not process the delivery. */
-export declare class WebhookVerificationError extends Error {
-    readonly code: WebhookErrorCode;
-    constructor(code: WebhookErrorCode, message: string);
-}
 /**
- * Verify a delivery and return the typed event.
+ * Verifies a webhook delivery and parses its body.
  *
- * `payload` is the raw request body (bytes, or the exact text). `headers` is
- * any case-insensitive header mapping; a repeated signature header, in any
- * letter case, is refused. `secrets` maps each whk_ key id NoResponse gave you
- * to its secret, so two can be held during a rotation. Deliveries older than
- * `toleranceSeconds` (default 300) are refused; deduplicate on `event.id`
- * and keep the highest `data.detail.assessmentVersion` yourself.
+ * `payload` is the raw request body exactly as received: re-encoding parsed JSON breaks the signature.
+ * A header repeated in any letter case, or sent as a comma-joined list, is refused.
  */
-export declare function constructEvent(payload: Uint8Array | string, headers: HeaderInput, secrets: WebhookSecrets, options?: ConstructEventOptions): WebhookEvent;
-/** The body to answer an endpoint.verification event with, as JSON, status 200. */
-export declare function verificationResponse(event: WebhookEvent): {
-    challenge: string;
-};
-/** True for the terminal expiry event. Delete what you hold for the assessment and fetch nothing. */
-export declare function isExpiredEvent(event: WebhookEvent): event is AssessmentExpiredEvent;
+export declare function constructEvent(payload: Uint8Array | string, headers: HeaderInput, secrets: WebhookSecrets, options?: ConstructEventOptions): Promise<models.WebhookEvent>;
 //# sourceMappingURL=webhooks.d.ts.map

package/dist/esm/webhooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/webhooks.ts"],"names":[],"mappings":"AAQA,OAAO,EAAyB,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAwC,KAAK,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC1H,OAAO,EAA4B,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEnF,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAc7C,gIAAgI;AAChI,MAAM,MAAM,WAAW,GACnB,OAAO,GACP,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACnC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;AAE5D,2EAA2E;AAC3E,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;AAE3E,MAAM,MAAM,qBAAqB,GAAG;IAClC,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,YAAY,EAAE,SAAS,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,kFAAkF;IAClF,OAAO,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,uBAAuB,EAAE,sBAAsB,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,IAAI,EAAE,OAAO,CAAC;IACd,4EAA4E;IAC5E,IAAI,EAAE,UAAU,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,iBAAiB,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,uBAAuB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,oBAAoB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,cAAc,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,gBAAgB,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,gBAAgB,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,GACpB,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,mBAAmB,GACnB,qBAAqB,GACrB,qBAAqB,GACrB,uBAAuB,CAAC;AAE5B,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB,qGAAqG;AACrG,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,YAAY,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAIlD;CACF;AAqDD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,UAAU,GAAG,MAAM,EAC5B,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE,qBAA0B,GAClC,YAAY,CAuFd;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAK/E;AAED,qGAAqG;AACrG,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,IAAI,sBAAsB,CAEnF"}
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAE5C,6FAA6F;AAC7F,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAE7C,0CAA0C;AAC1C,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,aAAa,GACb,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB,sFAAsF;AACtF,qBAAa,wBAAyB,SAAQ,KAAK;IACxC,IAAI,SAA8B;IAC3C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAEhC,YAAY,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAGlD;CACF;AAED,0HAA0H;AAC1H,MAAM,MAAM,WAAW,GACnB,OAAO,GACP,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACnC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;AAE5D,gGAAgG;AAChG,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9D,MAAM,MAAM,qBAAqB,GAAG;IAClC,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAMF;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,UAAU,GAAG,MAAM,EAC5B,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAmF9B"}

package/dist/esm/webhooks.js

@@ -1,189 +1,115 @@
-/**
- * Webhook verification. Hand-written; not generated. Needs Node.js (node:crypto).
- *
- * Verify the exact bytes received: the signature is HMAC-SHA256 over
- * "<timestamp>.<raw body>", so re-serialising parsed JSON breaks it.
- */
-import { createHmac, timingSafeEqual } from "node:crypto";
-import * as z from "zod/v4-mini";
-import { Account$inboundSchema } from "./models/account.js";
-import { AccountDecisionsByFlow$inboundSchema } from "./models/account-decisions-by-flow.js";
-import { Assessment$inboundSchema } from "./models/assessment.js";
+import * as models from "./models/index.js";
+/** How far, in seconds, the NR-Webhook-Timestamp header may be from the receiver's clock. */
 export const DEFAULT_TOLERANCE_SECONDS = 300;
-const REQUIRED = ["nr-webhook-id", "nr-webhook-timestamp", "nr-webhook-key-id", "nr-webhook-signature"];
-const KEY_ID = /^whk_[A-Za-z0-9]{8,64}$/;
-const SIGNATURE = /^v1=[0-9a-f]{64}$/;
-const TIMESTAMP = /^[0-9]{1,12}$/;
-const CHALLENGE = /^[A-Za-z0-9_-]{43}$/;
-const EVENT_ID = /^evt_[0-9A-HJKMNP-TV-Z]{26}$/;
-const ASSESSMENT_ID = /^asm_[0-9A-HJKMNP-TV-Z]{26}$/;
-const ACCOUNT_ID = /^[A-Za-z0-9][A-Za-z0-9._:|-]{0,127}$/;
-const ENDPOINT_ID = /^whe_[0-9A-HJKMNP-TV-Z]{26}$/;
-const WORKSPACE_ID = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,122}$/;
-const DATETIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/;
-/** Thrown by constructEvent and verificationResponse. Answer 400 and do not process the delivery. */
+/** Thrown by constructEvent: answer the delivery with a 400 and do not process it. */
 export class WebhookVerificationError extends Error {
+    name = "WebhookVerificationError";
     code;
     constructor(code, message) {
         super(message);
-        this.name = "WebhookVerificationError";
         this.code = code;
     }
 }
 function fail(code, message) {
     throw new WebhookVerificationError(code, message);
 }
-function isRecord(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function validDateTime(value) {
-    return DATETIME.test(value) && !Number.isNaN(Date.parse(value));
-}
-function entriesOf(headers) {
-    if (typeof Headers !== "undefined" && headers instanceof Headers)
-        return [...headers.entries()];
-    if (typeof headers[Symbol.iterator] === "function") {
-        return [...headers];
-    }
-    return Object.entries(headers);
-}
-function collect(headers) {
-    const found = new Map();
-    for (const [name, raw] of entriesOf(headers)) {
-        const key = name.toLowerCase();
-        if (!REQUIRED.includes(key))
-            continue;
-        if (Array.isArray(raw)) {
-            if (raw.length !== 1)
-                fail("duplicate_header", `Webhook header ${key} is repeated`);
-        }
-        const value = Array.isArray(raw) ? raw[0] : raw;
-        if (found.has(key))
-            fail("duplicate_header", `Webhook header ${key} is repeated`);
-        if (typeof value === "string")
-            found.set(key, value);
-    }
-    for (const name of REQUIRED) {
-        if (!found.get(name))
-            fail("missing_header", `Webhook header ${name} is missing`);
-    }
-    return found;
-}
-function expired(data) {
-    const { assessment_id, account_id, assessment_version, change_reason } = data;
-    if (typeof assessment_id !== "string" || !ASSESSMENT_ID.test(assessment_id) ||
-        typeof account_id !== "string" || !ACCOUNT_ID.test(account_id) ||
-        typeof assessment_version !== "number" || !Number.isInteger(assessment_version) || assessment_version < 1 ||
-        change_reason !== "expired") {
-        fail("invalid_payload", "Expired assessment event is malformed");
-    }
-    return { assessmentId: assessment_id, accountId: account_id, assessmentVersion: assessment_version, status: "expired", changeReason: "expired" };
-}
 /**
- * Verify a delivery and return the typed event.
+ * Verifies a webhook delivery and parses its body.
  *
- * `payload` is the raw request body (bytes, or the exact text). `headers` is
- * any case-insensitive header mapping; a repeated signature header, in any
- * letter case, is refused. `secrets` maps each whk_ key id NoResponse gave you
- * to its secret, so two can be held during a rotation. Deliveries older than
- * `toleranceSeconds` (default 300) are refused; deduplicate on `event.id`
- * and keep the highest `data.detail.assessmentVersion` yourself.
+ * `payload` is the raw request body exactly as received: re-encoding parsed JSON breaks the signature.
+ * A header repeated in any letter case, or sent as a comma-joined list, is refused.
  */
-export function constructEvent(payload, headers, secrets, options = {}) {
-    const raw = typeof payload === "string" ? Buffer.from(payload, "utf8") : Buffer.from(payload.buffer, payload.byteOffset, payload.byteLength);
+export async function constructEvent(payload, headers, secrets, options = {}) {
     const tolerance = options.toleranceSeconds ?? DEFAULT_TOLERANCE_SECONDS;
     const now = options.now ?? Math.floor(Date.now() / 1000);
-    const found = collect(headers);
-    const timestamp = found.get("nr-webhook-timestamp");
-    if (!TIMESTAMP.test(timestamp) || Math.abs(now - Number(timestamp)) > tolerance) {
-        fail("invalid_timestamp", "Webhook timestamp is outside the replay window");
-    }
-    const keyId = found.get("nr-webhook-key-id");
-    if (!KEY_ID.test(keyId) || !Object.prototype.hasOwnProperty.call(secrets, keyId)) {
-        fail("unknown_key", "Webhook key id is not one this receiver holds");
-    }
-    const signature = found.get("nr-webhook-signature");
-    if (!SIGNATURE.test(signature))
-        fail("invalid_signature", "Webhook signature is malformed");
-    const expected = createHmac("sha256", secrets[keyId]).update(timestamp).update(".").update(raw).digest();
-    if (!timingSafeEqual(expected, Buffer.from(signature.slice(3), "hex"))) {
-        fail("invalid_signature", "Webhook signature does not match");
-    }
-    let body;
+    const header = headerReader(headers);
+    const id = header("NR-Webhook-Id");
+    const timestamp = header("NR-Webhook-Timestamp");
+    const keyId = header("NR-Webhook-Key-Id");
+    const signature = header("NR-Webhook-Signature");
+    if (!/^[0-9]{1,12}$/.test(timestamp)) {
+        fail("invalid_timestamp", "NR-Webhook-Timestamp is not a Unix time in seconds");
+    }
+    if (Math.abs(now - Number(timestamp)) > tolerance) {
+        fail("invalid_timestamp", "NR-Webhook-Timestamp is outside the tolerance");
+    }
+    if (!Object.prototype.hasOwnProperty.call(secrets, keyId)) {
+        fail("unknown_key", "NR-Webhook-Key-Id names a key this receiver does not hold");
+    }
+    const secret = secrets[keyId];
+    if (!secret) {
+        fail("invalid_signature", "the webhook secret is empty");
+    }
+    const prefix = "v1=";
+    const received = signature.startsWith(prefix)
+        ? decodeSignature(signature.slice(prefix.length))
+        : undefined;
+    if (!received) {
+        fail("invalid_signature", "NR-Webhook-Signature is malformed");
+    }
+    const subtle = globalThis?.crypto?.subtle;
+    if (!subtle) {
+        throw new Error("Verifying webhooks needs WebCrypto (globalThis.crypto.subtle)");
+    }
+    const encoder = new TextEncoder();
+    const substitute = (text) => text.replaceAll("{timestamp}", timestamp).replaceAll("{id}", id);
+    const body = typeof payload === "string" ? encoder.encode(payload) : payload;
+    const signed = concatBytes(encoder.encode(substitute("{timestamp}.")), body);
+    const key = await subtle.importKey("raw", encoder.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["verify"]);
+    if (!(await subtle.verify("HMAC", key, received, signed))) {
+        fail("invalid_signature", "NR-Webhook-Signature does not match");
+    }
+    const text = new TextDecoder().decode(body);
+    let envelope;
     try {
-        body = JSON.parse(raw.toString("utf8"));
+        envelope = JSON.parse(text);
     }
     catch {
-        fail("invalid_payload", "Webhook body is not JSON");
-    }
-    if (!isRecord(body) || body["id"] !== found.get("nr-webhook-id")) {
-        fail("invalid_payload", "Webhook event id does not match NR-Webhook-Id");
+        fail("invalid_payload", "the body is not JSON");
     }
-    const { id, type, created_at, data, test } = body;
-    if (typeof id !== "string" || !EVENT_ID.test(id) || typeof created_at !== "string" || !validDateTime(created_at) || !isRecord(data)) {
-        fail("invalid_payload", "Webhook event envelope is malformed");
+    if (typeof envelope !== "object"
+        || envelope === null
+        || Array.isArray(envelope)
+        || envelope["id"] !== id) {
+        fail("invalid_payload", "the body's id does not equal NR-Webhook-Id");
     }
-    if (type === "endpoint.verification") {
-        const { endpoint_id, challenge } = data;
-        if (typeof endpoint_id !== "string" || !ENDPOINT_ID.test(endpoint_id) || typeof challenge !== "string" || !CHALLENGE.test(challenge)) {
-            fail("invalid_payload", "Endpoint verification event is malformed");
-        }
-        return { id, type, createdAt: created_at, test: false, data: { endpointId: endpoint_id, challenge } };
-    }
-    if (type === "account.deleted") {
-        const { account_id, assessments_deleted, deleted_at } = data;
-        if (typeof account_id !== "string" || !ACCOUNT_ID.test(account_id) ||
-            typeof assessments_deleted !== "number" || !Number.isInteger(assessments_deleted) || assessments_deleted < 1 ||
-            typeof deleted_at !== "string" || !validDateTime(deleted_at)) {
-            fail("invalid_payload", "Account deleted event is malformed");
-        }
-        return { id, type, createdAt: created_at, test: false, data: { accountId: account_id, assessmentsDeleted: assessments_deleted, deletedAt: deleted_at } };
+    const event = models.webhookEventFromJSON(text);
+    if (!event.ok) {
+        fail("invalid_payload", "the body is not a known webhook event");
     }
-    if (type === "workspace.deleted") {
-        const { workspace_id, environment, deleted_at } = data;
-        if (typeof workspace_id !== "string" || !WORKSPACE_ID.test(workspace_id) ||
-            (environment !== "live" && environment !== "test") ||
-            typeof deleted_at !== "string" || !validDateTime(deleted_at)) {
-            fail("invalid_payload", "Workspace deleted event is malformed");
-        }
-        return { id, type, createdAt: created_at, test: false, data: { workspaceId: workspace_id, environment, deletedAt: deleted_at } };
-    }
-    if (type === "webhook_endpoint.disabled") {
-        const { endpoint_id, failing_since, disabled_at } = data;
-        if (typeof endpoint_id !== "string" || !ENDPOINT_ID.test(endpoint_id) ||
-            typeof failing_since !== "string" || !validDateTime(failing_since) ||
-            typeof disabled_at !== "string" || !validDateTime(disabled_at)) {
-            fail("invalid_payload", "Endpoint disabled event is malformed");
+    return event.value;
+}
+function headerReader(headers) {
+    const entries = Symbol.iterator in headers
+        ? [...headers]
+        : Object.entries(headers);
+    return (name) => {
+        const wanted = name.toLowerCase();
+        const [value, ...rest] = entries
+            .filter(([key]) => key.toLowerCase() === wanted)
+            .flatMap(([, values]) => values ?? []);
+        if (rest.length > 0 || value?.includes(",")) {
+            fail("duplicate_header", `${name} is repeated`);
         }
-        return { id, type, createdAt: created_at, test: false, data: { endpointId: endpoint_id, failingSince: failing_since, disabledAt: disabled_at } };
-    }
-    if (type === "account.risk_changed") {
-        const account = z.safeParse(Account$inboundSchema, data["account"]);
-        const previous = z.safeParse(AccountDecisionsByFlow$inboundSchema, data["previous_decisions_by_flow"]);
-        if (!account.success || !previous.success || !ACCOUNT_ID.test(account.data.id)) {
-            fail("invalid_payload", "Account risk changed event is malformed");
+        if (!value) {
+            fail("missing_header", `${name} is missing`);
         }
-        return { id, type, createdAt: created_at, test: false, data: { account: account.data, previousDecisionsByFlow: previous.data } };
-    }
-    if (type !== "assessment.updated")
-        fail("invalid_payload", "Unknown webhook event type");
-    if (data["status"] === "expired") {
-        return { id, type, createdAt: created_at, test: false, data: expired(data) };
-    }
-    const result = z.safeParse(Assessment$inboundSchema, data);
-    if (!result.success)
-        fail("invalid_payload", "Webhook data is not an assessment");
-    return { id, type, createdAt: created_at, test: test === true, data: result.data };
+        return value;
+    };
 }
-/** The body to answer an endpoint.verification event with, as JSON, status 200. */
-export function verificationResponse(event) {
-    if (event.type !== "endpoint.verification") {
-        fail("invalid_payload", "Not an endpoint.verification event");
+function decodeSignature(text) {
+    if (!/^(?:[0-9a-fA-F]{2})*$/.test(text)) {
+        return undefined;
     }
-    return { challenge: event.data.challenge };
+    return Uint8Array.from(text.match(/../g) ?? [], (byte) => parseInt(byte, 16));
 }
-/** True for the terminal expiry event. Delete what you hold for the assessment and fetch nothing. */
-export function isExpiredEvent(event) {
-    return event.type === "assessment.updated" && event.data.status === "expired";
+function concatBytes(...parts) {
+    const out = new Uint8Array(parts.reduce((length, part) => length + part.length, 0));
+    let offset = 0;
+    for (const part of parts) {
+        out.set(part, offset);
+        offset += part.length;
+    }
+    return out;
 }
 //# sourceMappingURL=webhooks.js.map

package/dist/esm/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAgB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,oCAAoC,EAA+B,MAAM,uCAAuC,CAAC;AAC1H,OAAO,EAAE,wBAAwB,EAAmB,MAAM,wBAAwB,CAAC;AAEnF,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAE7C,MAAM,QAAQ,GAAG,CAAC,eAAe,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,sBAAsB,CAAU,CAAC;AACjH,MAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,SAAS,GAAG,eAAe,CAAC;AAClC,MAAM,SAAS,GAAG,qBAAqB,CAAC;AACxC,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAChD,MAAM,aAAa,GAAG,8BAA8B,CAAC;AACrD,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAC1D,MAAM,WAAW,GAAG,8BAA8B,CAAC;AACnD,MAAM,YAAY,GAAG,oCAAoC,CAAC;AAC1D,MAAM,QAAQ,GAAG,sEAAsE,CAAC;AA+JxF,qGAAqG;AACrG,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,CAAmB;IAChC,YAAY,IAAsB,EAAE,OAAe,EAAE;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CAClB;CACF;AAED,SAAS,IAAI,CAAC,IAAsB,EAAE,OAAe,EAAS;IAC5D,MAAM,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAAA,CACnD;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IAClE,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC7E;AAED,SAAS,aAAa,CAAC,KAAa,EAAW;IAC7C,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACjE;AAED,SAAS,SAAS,CAAC,OAAoB,EAA2D;IAChG,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,YAAY,OAAO;QAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,IAAI,OAAQ,OAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,UAAU,EAAE,CAAC;QAC1E,OAAO,CAAC,GAAI,OAA+C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,OAAwD,CAAC,CAAC;AAAA,CACjF;AAED,SAAS,OAAO,CAAC,OAAoB,EAAuB;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAE,QAA8B,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,GAAG,cAAc,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,GAAG,cAAc,CAAC,CAAC;QAClF,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,IAAI,aAAa,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACd;AAED,SAAS,OAAO,CAAC,IAA6B,EAAqB;IACjE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC9E,IACE,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC;QACvE,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;QAC9D,OAAO,kBAAkB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;QACzG,aAAa,KAAK,SAAS,EAC3B,CAAC;QACD,IAAI,CAAC,iBAAiB,EAAE,uCAAuC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAAA,CAClJ;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA4B,EAC5B,OAAoB,EACpB,OAAuB,EACvB,OAAO,GAA0B,EAAE,EACrB;IACd,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAE,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC;QAChF,IAAI,CAAC,mBAAmB,EAAE,gDAAgD,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAE,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAE,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,mBAAmB,EAAE,gCAAgC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1G,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAClD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpI,IAAI,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACrC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QACxC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrI,IAAI,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC7D,IACE,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAC9D,OAAO,mBAAmB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,GAAG,CAAC;YAC5G,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAC5D,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC;IAC3J,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QACvD,IACE,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;YACpE,CAAC,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,MAAM,CAAC;YAClD,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAC5D,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACzC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QACzD,IACE,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;YACjE,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC;YAClE,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAC9D,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC;IACnJ,CAAC;IACD,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,oCAAoC,EAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,uBAAuB,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,IAAI,KAAK,oBAAoB;QAAE,IAAI,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAAA,CACpF;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,KAAmB,EAAyB;IAC/E,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC3C,IAAI,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;AAAA,CAC5C;AAED,qGAAqG;AACrG,MAAM,UAAU,cAAc,CAAC,KAAmB,EAAmC;IACnF,OAAO,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;AAAA,CAC/E"}
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAE5C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAW7C,sFAAsF;AACtF,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,GAAG,0BAA0B,CAAC;IAClC,IAAI,CAAmB;IAEhC,YAAY,IAAsB,EAAE,OAAe,EAAE;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CAClB;CACF;AAkBD,SAAS,IAAI,CAAC,IAAsB,EAAE,OAAe,EAAS;IAC5D,MAAM,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAAA,CACnD;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA4B,EAC5B,OAAoB,EACpB,OAAuB,EACvB,OAAO,GAA0B,EAAE,EACL;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,IAAI,yBAAyB,CAAC;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAEjD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,IAAI,CACF,mBAAmB,EACnB,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC;QAClD,IAAI,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1D,IAAI,CACF,aAAa,EACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3C,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7E,MAAM,MAAM,GAAG,WAAW,CACxB,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,EAC1C,IAAI,CACL,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAChC,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EACtB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,mBAAmB,EAAE,qCAAqC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;IACD,IACE,OAAO,QAAQ,KAAK,QAAQ;WACzB,QAAQ,KAAK,IAAI;WACjB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;WACtB,QAAoC,CAAC,IAAI,CAAC,KAAK,EAAE,EACrD,CAAC;QACD,IAAI,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,CAAC,iBAAiB,EAAE,uCAAuC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC;AAAA,CACpB;AAED,SAAS,YAAY,CAAC,OAAoB,EAA4B;IACpE,MAAM,OAAO,GAET,MAAM,CAAC,QAAQ,IAAI,OAAO;QAC5B,CAAC,CAAC,CAAC,GAAI,OAA+C,CAAC;QACvD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO;aAC7B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;aAC/C,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,kBAAkB,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,gBAAgB,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IAAA,CACd,CAAC;AAAA,CACH;AAED,SAAS,eAAe,CAAC,IAAY,EAAuC;IAC1E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAAA,CAC/E;AAED,SAAS,WAAW,CAAC,GAAG,KAAmB,EAA2B;IACpE,MAAM,GAAG,GAAG,IAAI,UAAU,CACxB,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CACxD,CAAC;IACF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AAAA,CACZ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noresponse/node",
-  "version": "5.1.2",
+  "version": "6.0.1",
   "author": "NoResponse",
   "bugs": {
     "url": "https://github.com/noresponsehq/node/issues"