@polar-sh/sdk 1.0.0-alpha.18 → 1.0.0-alpha.19

package/README.md

@@ -125,6 +125,8 @@ app.post("/webhooks/polar", rawBody, async (request, response) => {
 ```
 
 The `express.raw` middleware is required because the signature must be checked against the body
-before it is parsed. `validateEvent` throws `PolarWebhookVerificationError` for invalid signatures
+before it is parsed. Verification accepts Polar's original HMAC key (UTF-8 bytes of the full
+secret, including `whsec_`) and the Standard Webhooks key (base64-decode of the remainder after
+`whsec_`). `validateEvent` throws `PolarWebhookVerificationError` for invalid signatures
 and `PolarWebhookUnknownTypeError` when the event is not supported by the selected API version.
 Both inherit from `PolarWebhookError`.

package/dist/2026-04/index.cjs

@@ -29,7 +29,7 @@ const require_2026_04_services_products = require("./services/products.cjs");
 const require_2026_04_services_refunds = require("./services/refunds.cjs");
 const require_2026_04_services_subscriptions = require("./services/subscriptions.cjs");
 const require_2026_04_services_webhooks = require("./services/webhooks.cjs");
-const require_webhooks = require("../webhooks-7EDEgMte.cjs");
+const require_webhooks = require("../webhooks-B34uKwcx.cjs");
 //#region src/2026-04/client.ts
 const SERVERS = {
 	production: "https://api.polar.sh",