@polar-sh/sdk 1.0.0-alpha.16 → 1.0.0-alpha.17

package/README.md

@@ -38,6 +38,26 @@ The client uses the production environment by default. To use the sandbox, pass
 Keep organization access tokens on the server and never expose them in browser or client-side
 code.
 
+## Request Timeouts
+
+Set the default timeout for all requests when creating the client. Timeout values are expressed
+in seconds:
+
+```typescript
+const polar = createPolar({
+    accessToken: "polar_oat_xxx",
+    timeout: 30,
+});
+```
+
+Override the timeout for an individual request with the final request options argument:
+
+```typescript
+const customerState = await polar.customers.getStateExternal("customer_external_id", {
+    timeout: 60,
+});
+```
+
 ## Individual API Functions
 
 To import individual API functions for tree-shaking, create a core client and pass it to the

package/dist/2026-04/index.cjs

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_errors = require("../errors-BpzRYs6T.cjs");
-const require_base = require("../base-BRp5LBjD.cjs");
+const require_rolldown_runtime = require("../rolldown-runtime-ak5kbic3.cjs");
+const require_base = require("../base-CKGG5bHP.cjs");
+const require_errors = require("../errors-qCtHlgD9.cjs");
 const require_2026_04_services_benefit_grants = require("./services/benefit_grants.cjs");
 const require_2026_04_services_benefits = require("./services/benefits.cjs");
 const require_2026_04_services_checkout_links = require("./services/checkout_links.cjs");
@@ -28,6 +29,7 @@ const require_2026_04_services_products = require("./services/products.cjs");
 const require_2026_04_services_refunds = require("./services/refunds.cjs");
 const require_2026_04_services_subscriptions = require("./services/subscriptions.cjs");
 const require_2026_04_services_webhooks = require("./services/webhooks.cjs");
+const require_webhooks = require("../webhooks-7EDEgMte.cjs");
 //#region src/2026-04/client.ts
 const SERVERS = {
 	production: "https://api.polar.sh",
@@ -74,86 +76,13 @@ function createPolar(options) {
 }
 //#endregion
 //#region src/2026-04/models.ts
-var models_exports = /* @__PURE__ */ require_errors.__exportAll({});
-//#endregion
-//#region src/webhooks.ts
-const webhookToleranceSeconds = 300;
-var PolarWebhookError = class extends require_base.PolarError {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "PolarWebhookError";
-	}
-};
-var PolarWebhookVerificationError = class extends PolarWebhookError {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "PolarWebhookVerificationError";
-	}
-};
-var PolarWebhookUnknownTypeError = class extends PolarWebhookError {
-	eventType;
-	constructor(eventType) {
-		super(`Unknown webhook event type: ${JSON.stringify(eventType)}`);
-		this.eventType = eventType;
-		this.name = "PolarWebhookUnknownTypeError";
-	}
-};
-const validateWebhook = async (body, headers, secret, eventTypes) => {
-	const bodyText = typeof body === "string" ? body : new TextDecoder().decode(body);
-	await verifySignature(bodyText, headers, secret);
-	let parsed;
-	try {
-		parsed = JSON.parse(bodyText);
-	} catch (error) {
-		throw new PolarWebhookError("Failed to parse webhook payload", { cause: error });
-	}
-	const eventType = typeof parsed === "object" && parsed !== null && "type" in parsed && typeof parsed.type === "string" ? parsed.type : null;
-	if (eventType === null || !eventTypes.has(eventType)) throw new PolarWebhookUnknownTypeError(eventType);
-	return parsed;
-};
-const verifySignature = async (body, headers, secret) => {
-	if (secret.length === 0) throw new PolarWebhookVerificationError("Secret can't be empty");
-	const normalizedHeaders = Object.fromEntries(Object.entries(headers).map(([key, value]) => [key.toLowerCase(), value]));
-	const webhookId = normalizedHeaders["webhook-id"];
-	const webhookTimestamp = normalizedHeaders["webhook-timestamp"];
-	const webhookSignature = normalizedHeaders["webhook-signature"];
-	if (!webhookId || !webhookTimestamp || !webhookSignature) throw new PolarWebhookVerificationError("Missing required headers");
-	const timestamp = Number(webhookTimestamp);
-	if (!Number.isFinite(timestamp)) throw new PolarWebhookVerificationError("Invalid signature headers");
-	const now = Date.now() / 1e3;
-	if (timestamp < now - webhookToleranceSeconds) throw new PolarWebhookVerificationError("Message timestamp too old");
-	if (timestamp > now + webhookToleranceSeconds) throw new PolarWebhookVerificationError("Message timestamp too new");
-	const signedContent = `${webhookId}.${Math.floor(timestamp)}.${body}`;
-	const textEncoder = new TextEncoder();
-	const signedContentBytes = textEncoder.encode(signedContent);
-	const signingKey = await globalThis.crypto.subtle.importKey("raw", textEncoder.encode(secret), {
-		name: "HMAC",
-		hash: "SHA-256"
-	}, false, ["verify"]);
-	for (const versionedSignature of webhookSignature.split(" ")) {
-		const [version, signature] = versionedSignature.split(",", 2);
-		if (version !== "v1" || signature === void 0) continue;
-		const decodedSignature = decodeBase64(signature);
-		if (decodedSignature !== null && await globalThis.crypto.subtle.verify("HMAC", signingKey, decodedSignature, signedContentBytes)) return;
-	}
-	throw new PolarWebhookVerificationError("No matching signature found");
-};
-const decodeBase64 = (value) => {
-	try {
-		const decodedValue = globalThis.atob(value);
-		const bytes = new Uint8Array(new ArrayBuffer(decodedValue.length));
-		for (let index = 0; index < decodedValue.length; index++) bytes[index] = decodedValue.charCodeAt(index);
-		return bytes;
-	} catch {
-		return null;
-	}
-};
+var models_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({});
 //#endregion
 //#region src/2026-04/webhooks.ts
-var webhooks_exports = /* @__PURE__ */ require_errors.__exportAll({
-	PolarWebhookError: () => PolarWebhookError,
-	PolarWebhookUnknownTypeError: () => PolarWebhookUnknownTypeError,
-	PolarWebhookVerificationError: () => PolarWebhookVerificationError,
+var webhooks_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({
+	PolarWebhookError: () => require_webhooks.PolarWebhookError,
+	PolarWebhookUnknownTypeError: () => require_webhooks.PolarWebhookUnknownTypeError,
+	PolarWebhookVerificationError: () => require_webhooks.PolarWebhookVerificationError,
 	validateEvent: () => validateEvent
 });
 const knownEventTypes = /* @__PURE__ */ new Set([
@@ -173,6 +102,9 @@ const knownEventTypes = /* @__PURE__ */ new Set([
 	"customer_seat.assigned",
 	"customer_seat.claimed",
 	"customer_seat.revoked",
+	"discount.created",
+	"discount.deleted",
+	"discount.updated",
 	"member.created",
 	"member.deleted",
 	"member.updated",
@@ -188,6 +120,7 @@ const knownEventTypes = /* @__PURE__ */ new Set([
 	"subscription.active",
 	"subscription.canceled",
 	"subscription.created",
+	"subscription.cycled",
 	"subscription.past_due",
 	"subscription.paused",
 	"subscription.resumed",
@@ -199,7 +132,7 @@ const knownEventTypes = /* @__PURE__ */ new Set([
 * Verify a raw Polar webhook request and return its typed payload.
 */
 const validateEvent = (body, headers, secret) => {
-	return validateWebhook(body, headers, secret, knownEventTypes);
+	return require_webhooks.validateWebhook(body, headers, secret, knownEventTypes);
 };
 //#endregion
 exports.createPolar = createPolar;