@rendobar/sdk 3.3.0 → 4.0.0

package/dist/index.cjs

@@ -249,6 +249,12 @@ function createJobsResource(request) {
 		},
 		async types(options) {
 			return request("/jobs/types", { signal: options?.signal });
+		},
+		async stats(params, options) {
+			return request("/jobs/stats", {
+				query: params,
+				signal: options?.signal
+			});
 		}
 	};
 }
@@ -640,22 +646,6 @@ function createOrgsResource(request) {
 	};
 }
 //#endregion
-//#region src/resources/batches.ts
-function createBatchesResource(request) {
-	return {
-		async create(params, options) {
-			return request("/batches", {
-				method: "POST",
-				body: params,
-				signal: options?.signal
-			});
-		},
-		async get(id, options) {
-			return request(`/batches/${id}`, { signal: options?.signal });
-		}
-	};
-}
-//#endregion
 //#region src/resources/assets.ts
 function createAssetsResource(request) {
 	return {
@@ -873,7 +863,6 @@ function createClient(config = {}) {
 		webhooks: createWebhooksResource(request),
 		apiKeys: createApiKeysResource(request),
 		orgs: createOrgsResource(request),
-		batches: createBatchesResource(request),
 		assets: createAssetsResource(request),
 		team: createTeamResource(request),
 		realtime: createRealtimeClient(baseUrl, {

package/dist/index.d.cts

@@ -2243,6 +2243,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2276,11 +2281,17 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"waiting">;
 }, $strip>, ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2314,6 +2325,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"dispatched">;
   progress: ZodOptional<ZodNumber>;
   eta: ZodOptional<ZodNullable<ZodNumber>>;
@@ -2321,6 +2333,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2354,6 +2371,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"running">;
   progress: ZodNumber;
   eta: ZodNullable<ZodNumber>;
@@ -2361,6 +2379,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2394,6 +2417,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"complete">;
   output: ZodObject<{
     data: ZodUnknown;
@@ -2443,6 +2467,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2476,6 +2505,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"failed">;
   error: ZodObject<{
     code: ZodString;
@@ -2487,6 +2517,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2520,24 +2555,46 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"cancelled">;
 }, $strip>], "status">;
 declare const jobCreatedResponseSchema: ZodObject<{
   id: ZodString;
   status: ZodLiteral<"waiting">;
 }, $strip>;
+declare const jobStatsResponseSchema: ZodObject<{
+  data: ZodObject<{
+    window: ZodObject<{
+      from: ZodNumber;
+      to: ZodNumber;
+    }, $strip>;
+    totals: ZodObject<{
+      jobs: ZodNumber;
+      succeeded: ZodNumber;
+      failed: ZodNumber;
+      cancelled: ZodNumber;
+      running: ZodNumber;
+    }, $strip>;
+    successRate: ZodNullable<ZodNumber>;
+    avgDurationMs: ZodNullable<ZodNumber>;
+    spend: ZodObject<{
+      amount: ZodNumber;
+      formatted: ZodString;
+    }, $strip>;
+    activity: ZodArray<ZodObject<{
+      bucketStart: ZodNumber;
+      succeeded: ZodNumber;
+      failed: ZodNumber;
+      other: ZodNumber;
+    }, $strip>>;
+  }, $strip>;
+}, $strip>;
+type JobStats = output<typeof jobStatsResponseSchema>["data"];
 declare const jobTypeSchema: ZodObject<{
   type: ZodString;
   tag: ZodString;
   summary: ZodString;
-  needs: ZodArray<ZodString>;
-  pattern: ZodNullable<ZodString>;
-  runner: ZodOptional<ZodObject<{
-    id: ZodString;
-    resource: ZodString;
-  }, $strip>>;
   acceptsMedia: ZodArray<ZodString>;
-  mediaOverrides: ZodOptional<ZodRecord<ZodString, ZodUnknown>>;
 }, $strip>;
 declare const billingStateSchema: ZodObject<{
   balance: ZodObject<{
@@ -2552,7 +2609,6 @@ declare const billingStateSchema: ZodObject<{
       apiRequestsPerMinute: ZodNumber;
       maxJobTimeout: ZodNumber;
       maxInputFileSize: ZodNumber;
-      maxBatchSize: ZodNumber;
     }, $strip>;
   }, $strip>;
   subscription: ZodNullable<ZodObject<{
@@ -2576,7 +2632,6 @@ declare const billingStateSchema: ZodObject<{
       apiRequestsPerMinute: ZodNumber;
       maxJobTimeout: ZodNumber;
       maxInputFileSize: ZodNumber;
-      maxBatchSize: ZodNumber;
     }, $strip>;
   }, $strip>>;
 }, $strip>;
@@ -2634,11 +2689,15 @@ declare const webhookDeliverySchema: ZodObject<{
   id: ZodString;
   endpointId: ZodString;
   endpointName: ZodNullable<ZodString>;
-  jobId: ZodString;
-  batchId: ZodNullable<ZodString>;
+  jobId: ZodNullable<ZodString>;
   event: ZodString;
   payload: ZodString;
-  status: ZodString;
+  status: ZodEnum<{
+    failed: "failed";
+    cancelled: "cancelled";
+    pending: "pending";
+    delivered: "delivered";
+  }>;
   statusCode: ZodNullable<ZodNumber>;
   responseBody: ZodNullable<ZodString>;
   attempts: ZodNumber;
@@ -2961,6 +3020,130 @@ interface LogEntryData {
   meta?: Record<string, unknown>;
 }
 //#endregion
+//#region ../shared/src/constants/webhook-events.d.ts
+declare const WEBHOOK_EVENT_TYPES: readonly ["job.created", "job.started", "job.completed", "job.failed", "job.cancelled", "balance.low", "balance.depleted"];
+type WebhookEventType = (typeof WEBHOOK_EVENT_TYPES)[number];
+//#endregion
+//#region ../shared/src/types/webhook.d.ts
+interface JobCreatedData {
+  jobId: string;
+  jobType: string;
+  status: "waiting";
+  timing: {
+    createdAt: number;
+  };
+}
+interface JobStartedData {
+  jobId: string;
+  jobType: string;
+  status: "running";
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt: number;
+  };
+}
+interface JobCompletedData {
+  jobId: string;
+  jobType: string;
+  status: "complete";
+  output: Output;
+  cost?: {
+    amount: number;
+    currency: "USD";
+    formatted: string;
+    breakdown: string;
+  };
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt?: number;
+    completedAt: number;
+  };
+  steps?: Array<{
+    id: string;
+    name: string;
+    status: string;
+    durationMs?: number;
+    error?: string;
+  }>;
+  outputCategory?: string;
+  mediaType?: string;
+}
+interface JobFailedData {
+  jobId: string;
+  jobType: string;
+  status: "failed";
+  error: JobError;
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt?: number;
+    failedAt: number;
+  };
+  steps?: Array<{
+    id: string;
+    name: string;
+    status: string;
+    durationMs?: number;
+    error?: string;
+  }>;
+}
+interface JobCancelledData {
+  jobId: string;
+  jobType: string;
+  status: "cancelled";
+  timing: {
+    createdAt: number;
+    cancelledAt: number;
+  };
+}
+interface BalanceLowData {
+  balance: number;
+  balanceFormatted: string;
+  threshold: number;
+  thresholdFormatted: string;
+  triggeredByJobId: string;
+  triggeredByJobType: string;
+}
+interface BalanceDepletedData {
+  balance: number;
+  balanceFormatted: string;
+  triggeredByJobId: string;
+  triggeredByJobType: string;
+}
+interface TestEventData {
+  message: string;
+  endpointId: string;
+}
+/**
+ * Maps each event to its `data` shape. The `WebhookPayload` mapped type below
+ * fails to compile if WEBHOOK_EVENT_TYPES gains an event that is missing here,
+ * so this map is the enforced single source of truth for payload shapes.
+ */
+interface WebhookEventDataMap {
+  "job.created": JobCreatedData;
+  "job.started": JobStartedData;
+  "job.completed": JobCompletedData;
+  "job.failed": JobFailedData;
+  "job.cancelled": JobCancelledData;
+  "balance.low": BalanceLowData;
+  "balance.depleted": BalanceDepletedData;
+}
+interface Envelope<E extends string, D> {
+  version: "1";
+  event: E;
+  deliveryId: string;
+  timestamp: number;
+  orgId: string;
+  data: D;
+}
+/**
+ * The exact JSON body Rendobar POSTs to your endpoint, discriminated by `event`.
+ * Switch on `payload.event` and `payload.data` narrows to the matching shape.
+ */
+type WebhookPayload = { [E in WebhookEventType]: Envelope<E, WebhookEventDataMap[E]> }[WebhookEventType] | Envelope<"test", TestEventData>;
+//#endregion
 //#region src/types.d.ts
 /**
  * Primary playable/download URL for a completed job, or `undefined`.
@@ -3065,6 +3248,9 @@ declare function createClient(config?: ClientConfig): {
     types(options?: {
       signal?: AbortSignal;
     }): Promise<JobType[]>;
+    stats(params?: StatsParams, options?: {
+      signal?: AbortSignal;
+    }): Promise<JobStats>;
   };
   billing: {
     state(options?: {
@@ -3142,7 +3328,7 @@ declare function createClient(config?: ClientConfig): {
       signal?: AbortSignal;
     }): Promise<WebhookEndpoint>;
     update(id: string, params: UpdateWebhookParams, options?: {
-      signal /** Default org ID (sent as X-Org-Id header). */? /** Default org ID (sent as X-Org-Id header). */: AbortSignal;
+      signal?: AbortSignal;
     }): Promise<WebhookEndpoint>;
     delete(id: string, options?: {
       signal?: AbortSignal;
@@ -3165,7 +3351,7 @@ declare function createClient(config?: ClientConfig): {
     }>;
     retryDelivery(id: string, options?: {
       signal?: AbortSignal;
-    }): Promise<WebhookDelivery>;
+    }): Promise<RetryDeliveryResult>;
   };
   apiKeys: {
     create(params: {
@@ -3215,28 +3401,12 @@ declare function createClient(config?: ClientConfig): {
       signal?: AbortSignal;
     }): Promise<void>;
     getSettings(options?: {
-      signal?: AbortSignal;
+      signal? /** Custom fetch function for testing or special runtimes. */: AbortSignal;
     }): Promise<OrgSettings>;
     updateSettings(body: Partial<Pick<OrgSettings, "billingEmailsEnabled" | "defaultRegion" | "regionPinned">>, options?: {
       signal?: AbortSignal;
     }): Promise<OrgSettings>;
   };
-  batches: {
-    create(params: {
-      jobs: CreateJobParams[];
-    }, options?: {
-      signal?: AbortSignal;
-    }): Promise<BatchResult>;
-    get(id: string, options?: {
-      signal?: AbortSignal;
-    }): Promise<{
-      id: string;
-      orgId: string;
-      jobCount: number;
-      completedCount: number;
-      createdAt: number;
-    }>;
-  };
   assets: {
     list(params?: ListAssetsParams, options?: {
       signal?: AbortSignal;
@@ -3401,7 +3571,15 @@ type ListJobsParams = {
   status?: string;
   type?: string;
   limit?: number;
-  offset?: number;
+  offset?: number; /** Sort field. Default: created. */
+  sort?: "created" | "duration" | "cost"; /** Sort direction. Default: desc. */
+  order?: "asc" | "desc"; /** Filter by originating client (sdk | cli | mcp | dashboard | ...). */
+  client?: string; /** Filter jobs created at or after this Unix ms timestamp. */
+  from?: number; /** Filter jobs created at or before this Unix ms timestamp. */
+  to?: number;
+};
+type StatsParams = {
+  /** Time window for the aggregate. Default: 24h. */window?: "24h" | "7d" | "30d";
 };
 type WaitOptions = {
   /** Max wait time in ms. Default: 300_000 (5 minutes). */timeout?: number; /** Initial poll interval in ms. Default: 2_000. Grows with exponential backoff. */
@@ -3434,22 +3612,29 @@ type TransactionListParams = {
 type CreateWebhookParams = {
   name: string;
   url: string;
-  subscribedEvents: string[];
+  subscribedEvents: WebhookEventType[];
 };
 type UpdateWebhookParams = {
   name?: string;
   url?: string;
-  subscribedEvents?: string[];
+  subscribedEvents?: WebhookEventType[];
   active?: boolean;
 };
 type ListDeliveriesParams = {
   endpointId?: string;
-  event?: string;
+  event?: WebhookEventType;
   status?: string;
   jobId?: string;
   limit?: number;
   offset?: number;
 };
+/** The retry route echoes only these fields — not a full delivery record. */
+type RetryDeliveryResult = {
+  id: string;
+  status: string;
+  event: string;
+  endpointId: string;
+};
 //#endregion
 //#region src/resources/orgs.d.ts
 type OrgCurrentResponse = {
@@ -3476,14 +3661,6 @@ type OrgCurrentResponse = {
   };
 };
 //#endregion
-//#region src/resources/batches.d.ts
-type BatchResult = {
-  batchId: string;
-  jobCount: number;
-  jobIds: string[];
-  status: string;
-};
-//#endregion
 //#region src/resources/uploads.d.ts
 type UploadProgress = {
   loaded: number;
@@ -3513,4 +3690,4 @@ type AssetListPage = {
   meta: AssetListMeta;
 };
 //#endregion
-export { ApiError, type ApiKey, type AssetResponse as Asset, type AssetDownloadResponse, type AssetInitResponse, type AssetListMeta, type AssetListPage, type BatchResult, type BillingInvoice, type BillingState, type ClientConfig, type Cost, type CreateJobParams, type CreateUploadOptions, type CreateWebhookParams, type FfmpegParams, type FileType, type JobResponse as Job, type JobCreatedResponse, type JobError, JobFailedError, type JobListPage, type JobStep, type JobSubscribeOptions, type JobSubscription, type JobTimings, type JobType, type ListAssetsParams, type ListDeliveriesParams, type ListJobsParams, type LogEntryData, type OrgCurrentResponse, type OrgEvent, type OrgSettings, type Organization, type Output, type OutputFile, type PaginationMeta, type PaymentMethod, type RealtimeConnectOptions, type RealtimeConnection, type RendobarClient, type Transaction, type TransactionListParams, type UpdateWebhookParams, type UploadProgress, type UsageParams, type UsageSummary, type WaitOptions, WaitTimeoutError, type WebhookDelivery, type WebhookEndpoint, createClient, isApiError, jobData, outputUrl };
+export { ApiError, type ApiKey, type AssetResponse as Asset, type AssetDownloadResponse, type AssetInitResponse, type AssetListMeta, type AssetListPage, type BalanceDepletedData, type BalanceLowData, type BillingInvoice, type BillingState, type ClientConfig, type Cost, type CreateJobParams, type CreateUploadOptions, type CreateWebhookParams, type FfmpegParams, type FileType, type JobResponse as Job, type JobCancelledData, type JobCompletedData, type JobCreatedData, type JobCreatedResponse, type JobError, type JobFailedData, JobFailedError, type JobListPage, type JobStartedData, type JobStats, type JobStep, type JobSubscribeOptions, type JobSubscription, type JobTimings, type JobType, type ListAssetsParams, type ListDeliveriesParams, type ListJobsParams, type LogEntryData, type OrgCurrentResponse, type OrgEvent, type OrgSettings, type Organization, type Output, type OutputFile, type PaginationMeta, type PaymentMethod, type RealtimeConnectOptions, type RealtimeConnection, type RendobarClient, type RetryDeliveryResult, type StatsParams, type TestEventData, type Transaction, type TransactionListParams, type UpdateWebhookParams, type UploadProgress, type UsageParams, type UsageSummary, type WaitOptions, WaitTimeoutError, type WebhookDelivery, type WebhookEndpoint, type WebhookEventDataMap, type WebhookPayload, createClient, isApiError, jobData, outputUrl };

package/dist/index.d.mts

@@ -2243,6 +2243,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2276,11 +2281,17 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"waiting">;
 }, $strip>, ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2314,6 +2325,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"dispatched">;
   progress: ZodOptional<ZodNumber>;
   eta: ZodOptional<ZodNullable<ZodNumber>>;
@@ -2321,6 +2333,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2354,6 +2371,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"running">;
   progress: ZodNumber;
   eta: ZodNullable<ZodNumber>;
@@ -2361,6 +2379,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2394,6 +2417,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"complete">;
   output: ZodObject<{
     data: ZodUnknown;
@@ -2443,6 +2467,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2476,6 +2505,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"failed">;
   error: ZodObject<{
     code: ZodString;
@@ -2487,6 +2517,11 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   id: ZodString;
   orgId: ZodString;
   type: ZodString;
+  source: ZodString;
+  client: ZodNullable<ZodString>;
+  retryCount: ZodNumber;
+  idempotencyKey: ZodNullable<ZodString>;
+  mediaType: ZodNullable<ZodString>;
   inputs: ZodRecord<ZodString, ZodUnknown>;
   params: ZodRecord<ZodString, ZodUnknown>;
   cost: ZodNullable<ZodObject<{
@@ -2520,24 +2555,46 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"cancelled">;
 }, $strip>], "status">;
 declare const jobCreatedResponseSchema: ZodObject<{
   id: ZodString;
   status: ZodLiteral<"waiting">;
 }, $strip>;
+declare const jobStatsResponseSchema: ZodObject<{
+  data: ZodObject<{
+    window: ZodObject<{
+      from: ZodNumber;
+      to: ZodNumber;
+    }, $strip>;
+    totals: ZodObject<{
+      jobs: ZodNumber;
+      succeeded: ZodNumber;
+      failed: ZodNumber;
+      cancelled: ZodNumber;
+      running: ZodNumber;
+    }, $strip>;
+    successRate: ZodNullable<ZodNumber>;
+    avgDurationMs: ZodNullable<ZodNumber>;
+    spend: ZodObject<{
+      amount: ZodNumber;
+      formatted: ZodString;
+    }, $strip>;
+    activity: ZodArray<ZodObject<{
+      bucketStart: ZodNumber;
+      succeeded: ZodNumber;
+      failed: ZodNumber;
+      other: ZodNumber;
+    }, $strip>>;
+  }, $strip>;
+}, $strip>;
+type JobStats = output<typeof jobStatsResponseSchema>["data"];
 declare const jobTypeSchema: ZodObject<{
   type: ZodString;
   tag: ZodString;
   summary: ZodString;
-  needs: ZodArray<ZodString>;
-  pattern: ZodNullable<ZodString>;
-  runner: ZodOptional<ZodObject<{
-    id: ZodString;
-    resource: ZodString;
-  }, $strip>>;
   acceptsMedia: ZodArray<ZodString>;
-  mediaOverrides: ZodOptional<ZodRecord<ZodString, ZodUnknown>>;
 }, $strip>;
 declare const billingStateSchema: ZodObject<{
   balance: ZodObject<{
@@ -2552,7 +2609,6 @@ declare const billingStateSchema: ZodObject<{
       apiRequestsPerMinute: ZodNumber;
       maxJobTimeout: ZodNumber;
       maxInputFileSize: ZodNumber;
-      maxBatchSize: ZodNumber;
     }, $strip>;
   }, $strip>;
   subscription: ZodNullable<ZodObject<{
@@ -2576,7 +2632,6 @@ declare const billingStateSchema: ZodObject<{
       apiRequestsPerMinute: ZodNumber;
       maxJobTimeout: ZodNumber;
       maxInputFileSize: ZodNumber;
-      maxBatchSize: ZodNumber;
     }, $strip>;
   }, $strip>>;
 }, $strip>;
@@ -2634,11 +2689,15 @@ declare const webhookDeliverySchema: ZodObject<{
   id: ZodString;
   endpointId: ZodString;
   endpointName: ZodNullable<ZodString>;
-  jobId: ZodString;
-  batchId: ZodNullable<ZodString>;
+  jobId: ZodNullable<ZodString>;
   event: ZodString;
   payload: ZodString;
-  status: ZodString;
+  status: ZodEnum<{
+    failed: "failed";
+    cancelled: "cancelled";
+    pending: "pending";
+    delivered: "delivered";
+  }>;
   statusCode: ZodNullable<ZodNumber>;
   responseBody: ZodNullable<ZodString>;
   attempts: ZodNumber;
@@ -2961,6 +3020,130 @@ interface LogEntryData {
   meta?: Record<string, unknown>;
 }
 //#endregion
+//#region ../shared/src/constants/webhook-events.d.ts
+declare const WEBHOOK_EVENT_TYPES: readonly ["job.created", "job.started", "job.completed", "job.failed", "job.cancelled", "balance.low", "balance.depleted"];
+type WebhookEventType = (typeof WEBHOOK_EVENT_TYPES)[number];
+//#endregion
+//#region ../shared/src/types/webhook.d.ts
+interface JobCreatedData {
+  jobId: string;
+  jobType: string;
+  status: "waiting";
+  timing: {
+    createdAt: number;
+  };
+}
+interface JobStartedData {
+  jobId: string;
+  jobType: string;
+  status: "running";
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt: number;
+  };
+}
+interface JobCompletedData {
+  jobId: string;
+  jobType: string;
+  status: "complete";
+  output: Output;
+  cost?: {
+    amount: number;
+    currency: "USD";
+    formatted: string;
+    breakdown: string;
+  };
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt?: number;
+    completedAt: number;
+  };
+  steps?: Array<{
+    id: string;
+    name: string;
+    status: string;
+    durationMs?: number;
+    error?: string;
+  }>;
+  outputCategory?: string;
+  mediaType?: string;
+}
+interface JobFailedData {
+  jobId: string;
+  jobType: string;
+  status: "failed";
+  error: JobError;
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt?: number;
+    failedAt: number;
+  };
+  steps?: Array<{
+    id: string;
+    name: string;
+    status: string;
+    durationMs?: number;
+    error?: string;
+  }>;
+}
+interface JobCancelledData {
+  jobId: string;
+  jobType: string;
+  status: "cancelled";
+  timing: {
+    createdAt: number;
+    cancelledAt: number;
+  };
+}
+interface BalanceLowData {
+  balance: number;
+  balanceFormatted: string;
+  threshold: number;
+  thresholdFormatted: string;
+  triggeredByJobId: string;
+  triggeredByJobType: string;
+}
+interface BalanceDepletedData {
+  balance: number;
+  balanceFormatted: string;
+  triggeredByJobId: string;
+  triggeredByJobType: string;
+}
+interface TestEventData {
+  message: string;
+  endpointId: string;
+}
+/**
+ * Maps each event to its `data` shape. The `WebhookPayload` mapped type below
+ * fails to compile if WEBHOOK_EVENT_TYPES gains an event that is missing here,
+ * so this map is the enforced single source of truth for payload shapes.
+ */
+interface WebhookEventDataMap {
+  "job.created": JobCreatedData;
+  "job.started": JobStartedData;
+  "job.completed": JobCompletedData;
+  "job.failed": JobFailedData;
+  "job.cancelled": JobCancelledData;
+  "balance.low": BalanceLowData;
+  "balance.depleted": BalanceDepletedData;
+}
+interface Envelope<E extends string, D> {
+  version: "1";
+  event: E;
+  deliveryId: string;
+  timestamp: number;
+  orgId: string;
+  data: D;
+}
+/**
+ * The exact JSON body Rendobar POSTs to your endpoint, discriminated by `event`.
+ * Switch on `payload.event` and `payload.data` narrows to the matching shape.
+ */
+type WebhookPayload = { [E in WebhookEventType]: Envelope<E, WebhookEventDataMap[E]> }[WebhookEventType] | Envelope<"test", TestEventData>;
+//#endregion
 //#region src/types.d.ts
 /**
  * Primary playable/download URL for a completed job, or `undefined`.
@@ -3065,6 +3248,9 @@ declare function createClient(config?: ClientConfig): {
     types(options?: {
       signal?: AbortSignal;
     }): Promise<JobType[]>;
+    stats(params?: StatsParams, options?: {
+      signal?: AbortSignal;
+    }): Promise<JobStats>;
   };
   billing: {
     state(options?: {
@@ -3142,7 +3328,7 @@ declare function createClient(config?: ClientConfig): {
       signal?: AbortSignal;
     }): Promise<WebhookEndpoint>;
     update(id: string, params: UpdateWebhookParams, options?: {
-      signal /** Default org ID (sent as X-Org-Id header). */? /** Default org ID (sent as X-Org-Id header). */: AbortSignal;
+      signal?: AbortSignal;
     }): Promise<WebhookEndpoint>;
     delete(id: string, options?: {
       signal?: AbortSignal;
@@ -3165,7 +3351,7 @@ declare function createClient(config?: ClientConfig): {
     }>;
     retryDelivery(id: string, options?: {
       signal?: AbortSignal;
-    }): Promise<WebhookDelivery>;
+    }): Promise<RetryDeliveryResult>;
   };
   apiKeys: {
     create(params: {
@@ -3215,28 +3401,12 @@ declare function createClient(config?: ClientConfig): {
       signal?: AbortSignal;
     }): Promise<void>;
     getSettings(options?: {
-      signal?: AbortSignal;
+      signal? /** Custom fetch function for testing or special runtimes. */: AbortSignal;
     }): Promise<OrgSettings>;
     updateSettings(body: Partial<Pick<OrgSettings, "billingEmailsEnabled" | "defaultRegion" | "regionPinned">>, options?: {
       signal?: AbortSignal;
     }): Promise<OrgSettings>;
   };
-  batches: {
-    create(params: {
-      jobs: CreateJobParams[];
-    }, options?: {
-      signal?: AbortSignal;
-    }): Promise<BatchResult>;
-    get(id: string, options?: {
-      signal?: AbortSignal;
-    }): Promise<{
-      id: string;
-      orgId: string;
-      jobCount: number;
-      completedCount: number;
-      createdAt: number;
-    }>;
-  };
   assets: {
     list(params?: ListAssetsParams, options?: {
       signal?: AbortSignal;
@@ -3401,7 +3571,15 @@ type ListJobsParams = {
   status?: string;
   type?: string;
   limit?: number;
-  offset?: number;
+  offset?: number; /** Sort field. Default: created. */
+  sort?: "created" | "duration" | "cost"; /** Sort direction. Default: desc. */
+  order?: "asc" | "desc"; /** Filter by originating client (sdk | cli | mcp | dashboard | ...). */
+  client?: string; /** Filter jobs created at or after this Unix ms timestamp. */
+  from?: number; /** Filter jobs created at or before this Unix ms timestamp. */
+  to?: number;
+};
+type StatsParams = {
+  /** Time window for the aggregate. Default: 24h. */window?: "24h" | "7d" | "30d";
 };
 type WaitOptions = {
   /** Max wait time in ms. Default: 300_000 (5 minutes). */timeout?: number; /** Initial poll interval in ms. Default: 2_000. Grows with exponential backoff. */
@@ -3434,22 +3612,29 @@ type TransactionListParams = {
 type CreateWebhookParams = {
   name: string;
   url: string;
-  subscribedEvents: string[];
+  subscribedEvents: WebhookEventType[];
 };
 type UpdateWebhookParams = {
   name?: string;
   url?: string;
-  subscribedEvents?: string[];
+  subscribedEvents?: WebhookEventType[];
   active?: boolean;
 };
 type ListDeliveriesParams = {
   endpointId?: string;
-  event?: string;
+  event?: WebhookEventType;
   status?: string;
   jobId?: string;
   limit?: number;
   offset?: number;
 };
+/** The retry route echoes only these fields — not a full delivery record. */
+type RetryDeliveryResult = {
+  id: string;
+  status: string;
+  event: string;
+  endpointId: string;
+};
 //#endregion
 //#region src/resources/orgs.d.ts
 type OrgCurrentResponse = {
@@ -3476,14 +3661,6 @@ type OrgCurrentResponse = {
   };
 };
 //#endregion
-//#region src/resources/batches.d.ts
-type BatchResult = {
-  batchId: string;
-  jobCount: number;
-  jobIds: string[];
-  status: string;
-};
-//#endregion
 //#region src/resources/uploads.d.ts
 type UploadProgress = {
   loaded: number;
@@ -3513,4 +3690,4 @@ type AssetListPage = {
   meta: AssetListMeta;
 };
 //#endregion
-export { ApiError, type ApiKey, type AssetResponse as Asset, type AssetDownloadResponse, type AssetInitResponse, type AssetListMeta, type AssetListPage, type BatchResult, type BillingInvoice, type BillingState, type ClientConfig, type Cost, type CreateJobParams, type CreateUploadOptions, type CreateWebhookParams, type FfmpegParams, type FileType, type JobResponse as Job, type JobCreatedResponse, type JobError, JobFailedError, type JobListPage, type JobStep, type JobSubscribeOptions, type JobSubscription, type JobTimings, type JobType, type ListAssetsParams, type ListDeliveriesParams, type ListJobsParams, type LogEntryData, type OrgCurrentResponse, type OrgEvent, type OrgSettings, type Organization, type Output, type OutputFile, type PaginationMeta, type PaymentMethod, type RealtimeConnectOptions, type RealtimeConnection, type RendobarClient, type Transaction, type TransactionListParams, type UpdateWebhookParams, type UploadProgress, type UsageParams, type UsageSummary, type WaitOptions, WaitTimeoutError, type WebhookDelivery, type WebhookEndpoint, createClient, isApiError, jobData, outputUrl };
+export { ApiError, type ApiKey, type AssetResponse as Asset, type AssetDownloadResponse, type AssetInitResponse, type AssetListMeta, type AssetListPage, type BalanceDepletedData, type BalanceLowData, type BillingInvoice, type BillingState, type ClientConfig, type Cost, type CreateJobParams, type CreateUploadOptions, type CreateWebhookParams, type FfmpegParams, type FileType, type JobResponse as Job, type JobCancelledData, type JobCompletedData, type JobCreatedData, type JobCreatedResponse, type JobError, type JobFailedData, JobFailedError, type JobListPage, type JobStartedData, type JobStats, type JobStep, type JobSubscribeOptions, type JobSubscription, type JobTimings, type JobType, type ListAssetsParams, type ListDeliveriesParams, type ListJobsParams, type LogEntryData, type OrgCurrentResponse, type OrgEvent, type OrgSettings, type Organization, type Output, type OutputFile, type PaginationMeta, type PaymentMethod, type RealtimeConnectOptions, type RealtimeConnection, type RendobarClient, type RetryDeliveryResult, type StatsParams, type TestEventData, type Transaction, type TransactionListParams, type UpdateWebhookParams, type UploadProgress, type UsageParams, type UsageSummary, type WaitOptions, WaitTimeoutError, type WebhookDelivery, type WebhookEndpoint, type WebhookEventDataMap, type WebhookPayload, createClient, isApiError, jobData, outputUrl };

package/dist/index.mjs

@@ -248,6 +248,12 @@ function createJobsResource(request) {
 		},
 		async types(options) {
 			return request("/jobs/types", { signal: options?.signal });
+		},
+		async stats(params, options) {
+			return request("/jobs/stats", {
+				query: params,
+				signal: options?.signal
+			});
 		}
 	};
 }
@@ -639,22 +645,6 @@ function createOrgsResource(request) {
 	};
 }
 //#endregion
-//#region src/resources/batches.ts
-function createBatchesResource(request) {
-	return {
-		async create(params, options) {
-			return request("/batches", {
-				method: "POST",
-				body: params,
-				signal: options?.signal
-			});
-		},
-		async get(id, options) {
-			return request(`/batches/${id}`, { signal: options?.signal });
-		}
-	};
-}
-//#endregion
 //#region src/resources/assets.ts
 function createAssetsResource(request) {
 	return {
@@ -872,7 +862,6 @@ function createClient(config = {}) {
 		webhooks: createWebhooksResource(request),
 		apiKeys: createApiKeysResource(request),
 		orgs: createOrgsResource(request),
-		batches: createBatchesResource(request),
 		assets: createAssetsResource(request),
 		team: createTeamResource(request),
 		realtime: createRealtimeClient(baseUrl, {

package/dist/webhooks.cjs

@@ -1,12 +1,67 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region src/lib/webhook-verify.ts
 /**
-* Verify a Rendobar webhook signature using HMAC-SHA256.
-* Works in any runtime with Web Crypto API (Node 18+, Deno, CF Workers, browser).
+* Verify Rendobar webhook signatures. Zero runtime deps — works in any runtime
+* with the Web Crypto API (Node 18+, Deno, CF Workers, browser).
 *
-* Usage in a webhook handler:
-*   import { verifyWebhookSignature } from "@rendobar/sdk/webhooks";
-*   const valid = await verifyWebhookSignature(body, signature, secret);
+* Prefer `verifyWebhook(body, headers, secret)` — it reads the signature +
+* timestamp headers, rebuilds the signed string, checks freshness (replay
+* protection), and handles the secret-rotation window for you:
+*
+*   import { verifyWebhook } from "@rendobar/sdk/webhooks";
+*   const ok = await verifyWebhook(rawBody, req.headers, process.env.WEBHOOK_SECRET);
+*   if (!ok) return res.status(401).send("Invalid signature");
+*
+* `verifyWebhookSignature` is the low-level HMAC primitive. It signs exactly the
+* string you pass, so you must build `${timestamp}.${body}` yourself — the raw
+* body alone will NOT match, because Rendobar signs the timestamped form.
+*/
+const SIG_HEADER = "x-rendobar-signature";
+const SIG_PREVIOUS_HEADER = "x-rendobar-signature-previous";
+const TIMESTAMP_HEADER = "x-rendobar-timestamp";
+const DEFAULT_TOLERANCE_SEC = 300;
+function getHeader(headers, name) {
+	if (headers instanceof Headers) return headers.get(name) ?? void 0;
+	const lower = name.toLowerCase();
+	for (const key of Object.keys(headers)) if (key.toLowerCase() === lower) {
+		const v = headers[key];
+		return Array.isArray(v) ? v[0] : v ?? void 0;
+	}
+}
+/**
+* Verify a webhook request end to end: signature + timestamp freshness + secret
+* rotation. Returns `true` only if the body is authentic and recent.
+*
+* @param body      Raw request body string (NOT parsed JSON — bytes as received).
+* @param headers   The incoming request headers (Web `Headers` or a plain record).
+* @param secret    Your endpoint's signing secret (`whsec_...`).
+* @param opts.toleranceSec  Max clock skew in seconds (default 300). Pass
+*                           `Infinity` to disable the replay/freshness check.
+*/
+async function verifyWebhook(body, headers, secret, opts = {}) {
+	const toleranceSec = opts.toleranceSec ?? DEFAULT_TOLERANCE_SEC;
+	const signature = getHeader(headers, SIG_HEADER);
+	const timestamp = getHeader(headers, TIMESTAMP_HEADER);
+	if (!signature || !timestamp) return false;
+	const tsSec = Number(timestamp);
+	if (!Number.isFinite(tsSec)) return false;
+	if (Number.isFinite(toleranceSec)) {
+		const nowSec = Math.floor(Date.now() / 1e3);
+		if (Math.abs(nowSec - tsSec) > toleranceSec) return false;
+	}
+	const signed = `${timestamp}.${body}`;
+	if (await verifyWebhookSignature(signed, signature, secret)) return true;
+	const previous = getHeader(headers, SIG_PREVIOUS_HEADER);
+	if (previous && await verifyWebhookSignature(signed, previous, secret)) return true;
+	return false;
+}
+/**
+* Low-level HMAC-SHA256 check. Signs `payload` verbatim and compares (constant
+* time) against `signature` (`sha256=<hex>` or bare hex).
+*
+* NOTE: Rendobar signs `${timestamp}.${body}`, so pass that exact string as
+* `payload` — the raw body alone will not match. Most callers should use
+* `verifyWebhook` instead, which builds the string and checks freshness.
 */
 async function verifyWebhookSignature(payload, signature, secret) {
 	const expected = signature.startsWith("sha256=") ? signature.slice(7) : signature;
@@ -22,4 +77,5 @@ async function verifyWebhookSignature(payload, signature, secret) {
 	return mismatch === 0;
 }
 //#endregion
+exports.verifyWebhook = verifyWebhook;
 exports.verifyWebhookSignature = verifyWebhookSignature;

package/dist/webhooks.d.cts

@@ -1,12 +1,43 @@
 //#region src/lib/webhook-verify.d.ts
 /**
- * Verify a Rendobar webhook signature using HMAC-SHA256.
- * Works in any runtime with Web Crypto API (Node 18+, Deno, CF Workers, browser).
+ * Verify Rendobar webhook signatures. Zero runtime deps — works in any runtime
+ * with the Web Crypto API (Node 18+, Deno, CF Workers, browser).
  *
- * Usage in a webhook handler:
- *   import { verifyWebhookSignature } from "@rendobar/sdk/webhooks";
- *   const valid = await verifyWebhookSignature(body, signature, secret);
+ * Prefer `verifyWebhook(body, headers, secret)` — it reads the signature +
+ * timestamp headers, rebuilds the signed string, checks freshness (replay
+ * protection), and handles the secret-rotation window for you:
+ *
+ *   import { verifyWebhook } from "@rendobar/sdk/webhooks";
+ *   const ok = await verifyWebhook(rawBody, req.headers, process.env.WEBHOOK_SECRET);
+ *   if (!ok) return res.status(401).send("Invalid signature");
+ *
+ * `verifyWebhookSignature` is the low-level HMAC primitive. It signs exactly the
+ * string you pass, so you must build `${timestamp}.${body}` yourself — the raw
+ * body alone will NOT match, because Rendobar signs the timestamped form.
+ */
+/** Accepts a Web `Headers` object or a plain header record (e.g. Node `req.headers`). */
+type WebhookHeaders = Headers | Record<string, string | string[] | undefined>;
+/**
+ * Verify a webhook request end to end: signature + timestamp freshness + secret
+ * rotation. Returns `true` only if the body is authentic and recent.
+ *
+ * @param body      Raw request body string (NOT parsed JSON — bytes as received).
+ * @param headers   The incoming request headers (Web `Headers` or a plain record).
+ * @param secret    Your endpoint's signing secret (`whsec_...`).
+ * @param opts.toleranceSec  Max clock skew in seconds (default 300). Pass
+ *                           `Infinity` to disable the replay/freshness check.
+ */
+declare function verifyWebhook(body: string, headers: WebhookHeaders, secret: string, opts?: {
+  toleranceSec?: number;
+}): Promise<boolean>;
+/**
+ * Low-level HMAC-SHA256 check. Signs `payload` verbatim and compares (constant
+ * time) against `signature` (`sha256=<hex>` or bare hex).
+ *
+ * NOTE: Rendobar signs `${timestamp}.${body}`, so pass that exact string as
+ * `payload` — the raw body alone will not match. Most callers should use
+ * `verifyWebhook` instead, which builds the string and checks freshness.
  */
 declare function verifyWebhookSignature(payload: string, signature: string, secret: string): Promise<boolean>;
 //#endregion
-export { verifyWebhookSignature };
+export { type WebhookHeaders, verifyWebhook, verifyWebhookSignature };

package/dist/webhooks.d.mts

@@ -1,12 +1,43 @@
 //#region src/lib/webhook-verify.d.ts
 /**
- * Verify a Rendobar webhook signature using HMAC-SHA256.
- * Works in any runtime with Web Crypto API (Node 18+, Deno, CF Workers, browser).
+ * Verify Rendobar webhook signatures. Zero runtime deps — works in any runtime
+ * with the Web Crypto API (Node 18+, Deno, CF Workers, browser).
  *
- * Usage in a webhook handler:
- *   import { verifyWebhookSignature } from "@rendobar/sdk/webhooks";
- *   const valid = await verifyWebhookSignature(body, signature, secret);
+ * Prefer `verifyWebhook(body, headers, secret)` — it reads the signature +
+ * timestamp headers, rebuilds the signed string, checks freshness (replay
+ * protection), and handles the secret-rotation window for you:
+ *
+ *   import { verifyWebhook } from "@rendobar/sdk/webhooks";
+ *   const ok = await verifyWebhook(rawBody, req.headers, process.env.WEBHOOK_SECRET);
+ *   if (!ok) return res.status(401).send("Invalid signature");
+ *
+ * `verifyWebhookSignature` is the low-level HMAC primitive. It signs exactly the
+ * string you pass, so you must build `${timestamp}.${body}` yourself — the raw
+ * body alone will NOT match, because Rendobar signs the timestamped form.
+ */
+/** Accepts a Web `Headers` object or a plain header record (e.g. Node `req.headers`). */
+type WebhookHeaders = Headers | Record<string, string | string[] | undefined>;
+/**
+ * Verify a webhook request end to end: signature + timestamp freshness + secret
+ * rotation. Returns `true` only if the body is authentic and recent.
+ *
+ * @param body      Raw request body string (NOT parsed JSON — bytes as received).
+ * @param headers   The incoming request headers (Web `Headers` or a plain record).
+ * @param secret    Your endpoint's signing secret (`whsec_...`).
+ * @param opts.toleranceSec  Max clock skew in seconds (default 300). Pass
+ *                           `Infinity` to disable the replay/freshness check.
+ */
+declare function verifyWebhook(body: string, headers: WebhookHeaders, secret: string, opts?: {
+  toleranceSec?: number;
+}): Promise<boolean>;
+/**
+ * Low-level HMAC-SHA256 check. Signs `payload` verbatim and compares (constant
+ * time) against `signature` (`sha256=<hex>` or bare hex).
+ *
+ * NOTE: Rendobar signs `${timestamp}.${body}`, so pass that exact string as
+ * `payload` — the raw body alone will not match. Most callers should use
+ * `verifyWebhook` instead, which builds the string and checks freshness.
  */
 declare function verifyWebhookSignature(payload: string, signature: string, secret: string): Promise<boolean>;
 //#endregion
-export { verifyWebhookSignature };
+export { type WebhookHeaders, verifyWebhook, verifyWebhookSignature };

package/dist/webhooks.mjs

@@ -1,11 +1,66 @@
 //#region src/lib/webhook-verify.ts
 /**
-* Verify a Rendobar webhook signature using HMAC-SHA256.
-* Works in any runtime with Web Crypto API (Node 18+, Deno, CF Workers, browser).
+* Verify Rendobar webhook signatures. Zero runtime deps — works in any runtime
+* with the Web Crypto API (Node 18+, Deno, CF Workers, browser).
 *
-* Usage in a webhook handler:
-*   import { verifyWebhookSignature } from "@rendobar/sdk/webhooks";
-*   const valid = await verifyWebhookSignature(body, signature, secret);
+* Prefer `verifyWebhook(body, headers, secret)` — it reads the signature +
+* timestamp headers, rebuilds the signed string, checks freshness (replay
+* protection), and handles the secret-rotation window for you:
+*
+*   import { verifyWebhook } from "@rendobar/sdk/webhooks";
+*   const ok = await verifyWebhook(rawBody, req.headers, process.env.WEBHOOK_SECRET);
+*   if (!ok) return res.status(401).send("Invalid signature");
+*
+* `verifyWebhookSignature` is the low-level HMAC primitive. It signs exactly the
+* string you pass, so you must build `${timestamp}.${body}` yourself — the raw
+* body alone will NOT match, because Rendobar signs the timestamped form.
+*/
+const SIG_HEADER = "x-rendobar-signature";
+const SIG_PREVIOUS_HEADER = "x-rendobar-signature-previous";
+const TIMESTAMP_HEADER = "x-rendobar-timestamp";
+const DEFAULT_TOLERANCE_SEC = 300;
+function getHeader(headers, name) {
+	if (headers instanceof Headers) return headers.get(name) ?? void 0;
+	const lower = name.toLowerCase();
+	for (const key of Object.keys(headers)) if (key.toLowerCase() === lower) {
+		const v = headers[key];
+		return Array.isArray(v) ? v[0] : v ?? void 0;
+	}
+}
+/**
+* Verify a webhook request end to end: signature + timestamp freshness + secret
+* rotation. Returns `true` only if the body is authentic and recent.
+*
+* @param body      Raw request body string (NOT parsed JSON — bytes as received).
+* @param headers   The incoming request headers (Web `Headers` or a plain record).
+* @param secret    Your endpoint's signing secret (`whsec_...`).
+* @param opts.toleranceSec  Max clock skew in seconds (default 300). Pass
+*                           `Infinity` to disable the replay/freshness check.
+*/
+async function verifyWebhook(body, headers, secret, opts = {}) {
+	const toleranceSec = opts.toleranceSec ?? DEFAULT_TOLERANCE_SEC;
+	const signature = getHeader(headers, SIG_HEADER);
+	const timestamp = getHeader(headers, TIMESTAMP_HEADER);
+	if (!signature || !timestamp) return false;
+	const tsSec = Number(timestamp);
+	if (!Number.isFinite(tsSec)) return false;
+	if (Number.isFinite(toleranceSec)) {
+		const nowSec = Math.floor(Date.now() / 1e3);
+		if (Math.abs(nowSec - tsSec) > toleranceSec) return false;
+	}
+	const signed = `${timestamp}.${body}`;
+	if (await verifyWebhookSignature(signed, signature, secret)) return true;
+	const previous = getHeader(headers, SIG_PREVIOUS_HEADER);
+	if (previous && await verifyWebhookSignature(signed, previous, secret)) return true;
+	return false;
+}
+/**
+* Low-level HMAC-SHA256 check. Signs `payload` verbatim and compares (constant
+* time) against `signature` (`sha256=<hex>` or bare hex).
+*
+* NOTE: Rendobar signs `${timestamp}.${body}`, so pass that exact string as
+* `payload` — the raw body alone will not match. Most callers should use
+* `verifyWebhook` instead, which builds the string and checks freshness.
 */
 async function verifyWebhookSignature(payload, signature, secret) {
 	const expected = signature.startsWith("sha256=") ? signature.slice(7) : signature;
@@ -21,4 +76,4 @@ async function verifyWebhookSignature(payload, signature, secret) {
 	return mismatch === 0;
 }
 //#endregion
-export { verifyWebhookSignature };
+export { verifyWebhook, verifyWebhookSignature };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rendobar/sdk",
-  "version": "3.3.0",
+  "version": "4.0.0",
   "type": "module",
   "description": "TypeScript client for the Rendobar media processing API",
   "main": "./dist/index.cjs",