@railhook/node 2.12.0

package/dist/types.d.ts

@@ -0,0 +1,293 @@
+export interface RailhookConfig {
+    apiKey: string;
+    baseUrl?: string;
+    timeout?: number;
+}
+export interface Event {
+    type: string;
+    data: Record<string, unknown>;
+}
+export interface EventResponse {
+    eventId: string;
+    type: string;
+    createdAt: string;
+    deliveriesCreated: number;
+    /**
+     * Schema-validation errors this event was accepted despite, when the project has schema
+     * validation on with the WARN policy. Absent when the payload matched or validation is off.
+     */
+    schemaWarnings?: string[];
+}
+export interface Endpoint {
+    id: string;
+    projectId: string;
+    url: string;
+    description?: string;
+    secret?: string;
+    enabled: boolean;
+    rateLimitPerSecond?: number;
+    allowedSourceIps?: string;
+    mtlsEnabled?: boolean;
+    verificationStatus?: string;
+    verificationAttemptedAt?: string;
+    verificationCompletedAt?: string;
+    verificationSkipReason?: string;
+    createdAt: string;
+    updatedAt?: string;
+}
+export interface EndpointCreateParams {
+    url: string;
+    description?: string;
+    /** Supply your own signing secret. Omit to have the API generate one. */
+    secret?: string;
+    enabled?: boolean;
+    rateLimitPerSecond?: number;
+    /** Comma-separated CIDRs the endpoint is allowed to be reached from. */
+    allowedSourceIps?: string;
+}
+export interface EndpointUpdateParams {
+    url?: string;
+    description?: string;
+    secret?: string;
+    enabled?: boolean;
+    rateLimitPerSecond?: number;
+    allowedSourceIps?: string;
+}
+export interface Subscription {
+    id: string;
+    projectId: string;
+    endpointId: string;
+    eventType: string;
+    enabled: boolean;
+    orderingEnabled: boolean;
+    maxAttempts: number;
+    timeoutSeconds: number;
+    retryDelays?: string;
+    payloadTemplate?: string;
+    customHeaders?: string;
+    transformationId?: string;
+    transformationName?: string;
+    createdAt: string;
+    updatedAt?: string;
+}
+export interface SubscriptionCreateParams {
+    endpointId: string;
+    eventType: string;
+    enabled?: boolean;
+    orderingEnabled?: boolean;
+    maxAttempts?: number;
+    timeoutSeconds?: number;
+    retryDelays?: string;
+    payloadTemplate?: string;
+    customHeaders?: string;
+    transformationId?: string;
+}
+export interface Delivery {
+    id: string;
+    eventId: string;
+    endpointId: string;
+    subscriptionId: string;
+    status: DeliveryStatus;
+    attemptCount: number;
+    maxAttempts: number;
+    nextRetryAt?: string;
+    lastAttemptAt?: string;
+    succeededAt?: string;
+    failedAt?: string;
+    createdAt: string;
+}
+export type DeliveryStatus = 'PENDING' | 'PROCESSING' | 'SUCCESS' | 'FAILED' | 'DLQ';
+export interface DeliveryAttempt {
+    id: string;
+    deliveryId: string;
+    attemptNumber: number;
+    /** JSON object, serialized as a string, of the headers that were sent. */
+    requestHeaders?: string;
+    requestBody?: string;
+    httpStatusCode?: number;
+    /** JSON object, serialized as a string, of the headers that came back. */
+    responseHeaders?: string;
+    responseBody?: string;
+    errorMessage?: string;
+    /** Wall-clock duration of the HTTP request, in milliseconds. */
+    durationMs?: number;
+    /** When the attempt was recorded. */
+    createdAt: string;
+}
+export interface PaginatedResponse<T> {
+    content: T[];
+    totalElements: number;
+    totalPages: number;
+    /** Page size requested. */
+    size: number;
+    /** Zero-based index of this page. */
+    number: number;
+    numberOfElements?: number;
+    first?: boolean;
+    last?: boolean;
+    empty?: boolean;
+}
+export interface EndpointListParams {
+    page?: number;
+    size?: number;
+}
+export interface DeliveryListParams {
+    status?: DeliveryStatus;
+    endpointId?: string;
+    fromDate?: string;
+    toDate?: string;
+    page?: number;
+    size?: number;
+}
+export interface EndpointTestResult {
+    success: boolean;
+    httpStatusCode?: number;
+    responseBody?: string;
+    errorMessage?: string;
+    latencyMs: number;
+    /** Human-readable summary, e.g. "Endpoint returned non-2xx status". */
+    message?: string;
+}
+export interface RateLimitInfo {
+    limit: number;
+    remaining: number;
+    /**
+     * Unix timestamp in **seconds** at which the window resets — the raw value
+     * of the `X-RateLimit-Reset` header, which the API sends in seconds, not
+     * milliseconds.
+     */
+    reset: number;
+}
+export interface WebhookEvent {
+    eventId: string;
+    deliveryId: string;
+    timestamp: number;
+    type: string;
+    data: Record<string, unknown>;
+}
+export type ProviderType = 'GENERIC' | 'GITHUB' | 'GITLAB' | 'STRIPE' | 'SHOPIFY' | 'SLACK' | 'TWILIO';
+export type VerificationMode = 'NONE' | 'HMAC_GENERIC';
+export type IncomingSourceStatus = 'ACTIVE' | 'DISABLED';
+export type IncomingAuthType = 'NONE' | 'BEARER' | 'BASIC' | 'CUSTOM_HEADER';
+export interface IncomingSource {
+    id: string;
+    projectId: string;
+    name: string;
+    slug: string;
+    providerType: ProviderType;
+    status: IncomingSourceStatus;
+    ingressPathToken: string;
+    ingressUrl: string;
+    verificationMode: VerificationMode;
+    hmacHeaderName?: string;
+    hmacSignaturePrefix?: string;
+    hmacSecretConfigured: boolean;
+    rateLimitPerSecond?: number;
+    createdAt: string;
+    updatedAt?: string;
+}
+export interface IncomingSourceCreateParams {
+    name: string;
+    slug?: string;
+    providerType?: ProviderType;
+    verificationMode?: VerificationMode;
+    hmacSecret?: string;
+    hmacHeaderName?: string;
+    hmacSignaturePrefix?: string;
+    rateLimitPerSecond?: number;
+}
+export interface IncomingSourceUpdateParams {
+    name?: string;
+    slug?: string;
+    providerType?: ProviderType;
+    status?: IncomingSourceStatus;
+    verificationMode?: VerificationMode;
+    hmacSecret?: string;
+    hmacHeaderName?: string;
+    hmacSignaturePrefix?: string;
+    rateLimitPerSecond?: number;
+}
+export interface IncomingDestination {
+    id: string;
+    incomingSourceId: string;
+    url: string;
+    authType: IncomingAuthType;
+    authConfigured: boolean;
+    customHeadersJson?: string;
+    enabled: boolean;
+    maxAttempts: number;
+    timeoutSeconds: number;
+    retryDelays?: string;
+    payloadTransform?: string;
+    transformationId?: string;
+    transformationName?: string;
+    createdAt: string;
+    updatedAt?: string;
+}
+export interface IncomingDestinationCreateParams {
+    url: string;
+    authType?: IncomingAuthType;
+    authConfig?: string;
+    customHeadersJson?: string;
+    enabled?: boolean;
+    maxAttempts?: number;
+    timeoutSeconds?: number;
+    retryDelays?: string;
+    payloadTransform?: string;
+}
+export interface IncomingDestinationUpdateParams {
+    url?: string;
+    authType?: IncomingAuthType;
+    authConfig?: string;
+    customHeadersJson?: string;
+    enabled?: boolean;
+    maxAttempts?: number;
+    timeoutSeconds?: number;
+    retryDelays?: string;
+    payloadTransform?: string;
+}
+export interface IncomingEvent {
+    id: string;
+    incomingSourceId: string;
+    sourceName: string;
+    requestId: string;
+    method: string;
+    path: string;
+    queryParams?: string;
+    headersJson?: string;
+    bodyRaw?: string;
+    bodySha256?: string;
+    contentType?: string;
+    clientIp?: string;
+    userAgent?: string;
+    verified?: boolean;
+    verificationError?: string;
+    receivedAt: string;
+}
+export interface IncomingEventListParams {
+    sourceId?: string;
+    page?: number;
+    size?: number;
+}
+export type ForwardAttemptStatus = 'PENDING' | 'PROCESSING' | 'SUCCESS' | 'FAILED' | 'DLQ';
+export interface IncomingForwardAttempt {
+    id: string;
+    incomingEventId: string;
+    destinationId: string;
+    destinationUrl: string;
+    attemptNumber: number;
+    status: ForwardAttemptStatus;
+    startedAt?: string;
+    finishedAt?: string;
+    responseCode?: number;
+    responseHeadersJson?: string;
+    responseBodySnippet?: string;
+    errorMessage?: string;
+    nextRetryAt?: string;
+    createdAt: string;
+}
+export interface ReplayEventResponse {
+    status: string;
+    eventId: string;
+    destinationsCount: number;
+}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/webhooks.d.ts

@@ -0,0 +1,83 @@
+import { WebhookEvent } from './types';
+export interface WebhookHeaders {
+    'x-signature'?: string;
+    'x-timestamp'?: string;
+    'x-event-id'?: string;
+    'x-delivery-id'?: string;
+    [key: string]: string | undefined;
+}
+export interface VerifyOptions {
+    tolerance?: number;
+}
+/**
+ * Verifies the webhook signature using HMAC-SHA256.
+ *
+ * The header is `t=<unix-ms>,v1=<hex>`, and it may carry **more than one** `v1`.
+ * After you rotate an endpoint's secret, Railhook signs each delivery with both
+ * the new secret and the retired one for the endpoint's grace window (24 hours
+ * by default), so you can deploy the new secret whenever you like instead of at
+ * the instant you press rotate. The delivery is authentic if *any* `v1` matches,
+ * which is what this checks.
+ *
+ * @param payload - Raw request body as string
+ * @param signature - X-Signature header value (format: t=timestamp,v1=signature[,v1=...])
+ * @param secret - Endpoint webhook secret
+ * @param options - Verification options
+ * @returns true if signature is valid
+ * @throws RailhookError if signature is invalid
+ */
+export declare function verifySignature(payload: string, signature: string, secret: string, options?: VerifyOptions): boolean;
+/**
+ * Verifies the [Standard Webhooks](https://www.standardwebhooks.com) headers.
+ *
+ * Endpoints receive both header sets by default (`signatureScheme: 'BOTH'`), so use
+ * whichever you prefer — this one if you would rather your verification match what other
+ * providers send, `verifySignature` if you are already verifying `X-Signature`.
+ *
+ * Two things differ from Railhook's own scheme beyond the header names: the message id is
+ * part of what is signed, and the digest is base64 rather than hex. Rotation works the same
+ * way — during the grace window the header carries a space-separated signature per valid
+ * secret, and any one matching is enough.
+ *
+ * @param payload - Raw request body as string
+ * @param headers - Request headers, including the three `webhook-*` ones
+ * @param secret - The endpoint's `standardWebhooksSecret` (`whsec_…`), not the raw secret.
+ *                 A plain secret is accepted too and used as-is.
+ * @returns true if the signature is valid
+ * @throws RailhookError if it is not
+ */
+export declare function verifyStandardWebhook(payload: string, headers: WebhookHeaders, secret: string, options?: {
+    toleranceSeconds?: number;
+}): boolean;
+/**
+ * Constructs a webhook event from the request.
+ *
+ * What Railhook actually PUTs on the wire is the event's **payload**, not an
+ * envelope: a `client.events.send({ type: 'order.completed', data: {...} })`
+ * arrives at your endpoint as the `data` object alone, with the identifiers
+ * carried in headers (`X-Event-Id`, `X-Delivery-Id`, `X-Timestamp`,
+ * `X-Sequence-Number`). So:
+ *
+ * - `eventId` / `deliveryId` / `timestamp` come from the headers and are
+ *   always populated for a real delivery.
+ * - `data` is the parsed body.
+ * - `type` is only populated when the body happens to carry a `type` key —
+ *   which for a default subscription it does not. Route on the payload, or
+ *   configure the subscription's `payloadTemplate` to wrap the event so that
+ *   `type` is part of the body.
+ *
+ * @param payload - Raw request body as string
+ * @param headers - Request headers
+ * @param secret - Endpoint webhook secret
+ * @param options - Verification options
+ * @returns Parsed and verified webhook event
+ */
+export declare function constructEvent(payload: string, headers: WebhookHeaders, secret: string, options?: VerifyOptions): WebhookEvent;
+/**
+ * Generates a signature for testing purposes
+ * @param payload - Request body as string
+ * @param secret - Webhook secret
+ * @param timestamp - Optional timestamp (defaults to now)
+ * @returns Signature string in format t=timestamp,v1=signature
+ */
+export declare function generateSignature(payload: string, secret: string, timestamp?: number): string;