@postman/sdk-config 0.4.1 → 0.5.0

package/dist/index.cjs

@@ -34,6 +34,59 @@ var jsonValueSchema = zod.z.lazy(
   ])
 );
 var jsonObjectSchema = zod.z.record(zod.z.string(), jsonValueSchema);
+var hashAlgorithmSchema = zod.z.enum(["sha1", "sha256", "sha384", "sha512"]);
+var encodingSchema = zod.z.enum(["base64", "hex"]);
+var payloadComponentSchema = zod.z.enum(["body", "timestamp", "notification-url", "message-id"]);
+var payloadFormatSchema = zod.z.strictObject({
+  components: zod.z.array(payloadComponentSchema).min(1),
+  delimiter: zod.z.string().optional(),
+  /**
+   * Set when the body is a form-encoded parameter map that must be canonicalized before signing:
+   * keys sorted, each key's values deduped and sorted, concatenated as key-value pairs.
+   */
+  bodySort: zod.z.literal("alphabetical").optional()
+});
+var timestampSchema = zod.z.strictObject({
+  header: nonEmptyStringSchema,
+  format: zod.z.enum(["unix-seconds", "unix-millis", "iso8601"]).optional(),
+  /** Replay window in seconds. */
+  tolerance: zod.z.number().positive().optional()
+});
+var bodyHashLocationSchema = zod.z.discriminatedUnion("type", [
+  zod.z.strictObject({
+    type: zod.z.literal("query-parameter"),
+    name: nonEmptyStringSchema
+  })
+]);
+var bodyHashBindingSchema = zod.z.strictObject({
+  algorithm: hashAlgorithmSchema,
+  encoding: encodingSchema.optional(),
+  location: bodyHashLocationSchema
+});
+var urlNormalizationSchema = zod.z.strictObject({
+  /** Try the URL with and without an explicit default port. */
+  portVariants: zod.z.boolean().optional(),
+  /** Try the URL with the pre-RFC3986 query encoding (`+` for space, unescaped `*`). */
+  legacyQueryEncoding: zod.z.boolean().optional()
+}).refine(
+  ({ portVariants, legacyQueryEncoding }) => portVariants === true || legacyQueryEncoding === true,
+  { message: "url normalization must enable at least one variant" }
+);
+var webhookSignatureSchema = zod.z.discriminatedUnion("type", [
+  zod.z.strictObject({
+    type: zod.z.literal("hmac"),
+    /** Request header carrying the signature. */
+    header: nonEmptyStringSchema,
+    algorithm: hashAlgorithmSchema.optional(),
+    encoding: encodingSchema.optional(),
+    /** Stripped from the header value before comparison, e.g. `sha256=`. */
+    signaturePrefix: zod.z.string().optional(),
+    payloadFormat: payloadFormatSchema.optional(),
+    timestamp: timestampSchema.optional(),
+    bodyHashBinding: bodyHashBindingSchema.optional(),
+    urlNormalization: urlNormalizationSchema.optional()
+  })
+]);
 
 // src/sdk-config-domain/v1/api.ts
 var authVariableSchema = zod.z.strictObject({
@@ -192,13 +245,19 @@ var apiConfigSchema = zod.z.strictObject({
    * Absent means all audiences. A present empty array selects no tagged audience: untagged nodes
    * remain included, while every audience-tagged node is excluded.
    */
-  audiences: zod.z.array(nonEmptyStringSchema).optional()
+  audiences: zod.z.array(nonEmptyStringSchema).optional(),
+  /**
+   * How the API signs the webhooks it sends, enabling a generated verification helper. API-wide, and
+   * independent of whether any webhook is modeled — see {@link webhookSignatureSchema}.
+   */
+  webhookSignature: webhookSignatureSchema.optional()
 });
 
 // src/sdk-config/v1/api.ts
 var sdkConfigV1AuthSchemeSchema = authSchemeSchema;
 var sdkConfigV1AuthConfigSchema = authConfigSchema;
 var sdkConfigV1ApiConfigSchema = apiConfigSchema;
+var sdkConfigV1WebhookSignatureSchema = webhookSignatureSchema;
 var retryOverrideShape = {
   enabled: zod.z.boolean().optional(),
   maxAttempts: zod.z.number().int().min(1).optional(),
@@ -2377,7 +2436,7 @@ function mapLanguageConfig(language, config, state, packageConfig, basePath) {
     case "rust":
       return mapRust(config, state, packageConfig, basePath);
     case "swift":
-      return compact({ moduleName: takeString(config, ["moduleName"], state, basePath) });
+      return mapSwift(config, state, basePath);
     case "cli":
       return mapCli(config, state, packageConfig, basePath);
     case "terraform":
@@ -2544,6 +2603,12 @@ function mapRust(config, state, packageConfig, basePath) {
     defaultFeatures: takeStringArray(config, ["defaultFeatures"], state, basePath)
   });
 }
+function mapSwift(config, state, basePath) {
+  return compact({
+    moduleName: takeString(config, ["moduleName"], state, basePath),
+    nullableAsOptional: takeBoolean(config, ["nullableAsOptional"], state, basePath)
+  });
+}
 function mapCli(config, state, packageConfig, basePath) {
   const identity = takeObject(config, ["packageIdentity"], state, basePath);
   if (identity) {
@@ -3418,6 +3483,7 @@ exports.sdkConfigV1SwiftGenerationConfigSchema = swiftGenerationConfigSchema;
 exports.sdkConfigV1TargetSchema = sdkConfigV1TargetSchema;
 exports.sdkConfigV1TerraformGenerationConfigSchema = terraformGenerationConfigSchema;
 exports.sdkConfigV1TypescriptGenerationConfigSchema = typescriptGenerationConfigSchema;
+exports.sdkConfigV1WebhookSignatureSchema = sdkConfigV1WebhookSignatureSchema;
 exports.sourceConfigSchema = sourceConfigSchema;
 exports.sourceSpecConfigSchema = sourceSpecConfigSchema;
 exports.sourceSpecTypeSchema = sourceSpecTypeSchema;
@@ -3429,5 +3495,6 @@ exports.terraformGenerationConfigSchema = terraformGenerationConfigSchema;
 exports.typescriptGenerationConfigSchema = typescriptGenerationConfigSchema;
 exports.unsupportedFieldSchema = unsupportedFieldSchema;
 exports.validateSdkConfigV1 = validateSdkConfigV1;
+exports.webhookSignatureSchema = webhookSignatureSchema;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map