@rendobar/sdk 3.4.0 → 4.1.0

package/README.md

@@ -207,7 +207,7 @@ await client.jobs.create({
 });
 ```
 
-Need a typed params object? Import `FfmpegParams` — optional fields (`outputFormat`, `timeout`) have server-side defaults.
+Need a typed params object? Import `FfmpegParams` — optional fields (`timeout`, `compute`) have server-side defaults. The output format comes from the command's output filename.
 
 See the [FFmpeg guide](https://rendobar.com/docs/guides/ffmpeg) for the full security model and supported flags.
 

package/dist/index.cjs

@@ -646,22 +646,6 @@ function createOrgsResource(request) {
 	};
 }
 //#endregion
-//#region src/resources/batches.ts
-function createBatchesResource(request) {
-	return {
-		async create(params, options) {
-			return request("/batches", {
-				method: "POST",
-				body: params,
-				signal: options?.signal
-			});
-		},
-		async get(id, options) {
-			return request(`/batches/${id}`, { signal: options?.signal });
-		}
-	};
-}
-//#endregion
 //#region src/resources/assets.ts
 function createAssetsResource(request) {
 	return {
@@ -879,7 +863,6 @@ function createClient(config = {}) {
 		webhooks: createWebhooksResource(request),
 		apiKeys: createApiKeysResource(request),
 		orgs: createOrgsResource(request),
-		batches: createBatchesResource(request),
 		assets: createAssetsResource(request),
 		team: createTeamResource(request),
 		realtime: createRealtimeClient(baseUrl, {

package/dist/index.d.cts

@@ -2245,7 +2245,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2282,6 +2281,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"waiting">;
 }, $strip>, ZodObject<{
   id: ZodString;
@@ -2289,7 +2289,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2326,6 +2325,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"dispatched">;
   progress: ZodOptional<ZodNumber>;
   eta: ZodOptional<ZodNullable<ZodNumber>>;
@@ -2335,7 +2335,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2372,6 +2371,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"running">;
   progress: ZodNumber;
   eta: ZodNullable<ZodNumber>;
@@ -2381,7 +2381,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2418,6 +2417,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"complete">;
   output: ZodObject<{
     data: ZodUnknown;
@@ -2469,7 +2469,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2506,6 +2505,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"failed">;
   error: ZodObject<{
     code: ZodString;
@@ -2519,7 +2519,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2556,6 +2555,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"cancelled">;
 }, $strip>], "status">;
 declare const jobCreatedResponseSchema: ZodObject<{
@@ -2594,14 +2594,7 @@ declare const jobTypeSchema: ZodObject<{
   type: ZodString;
   tag: ZodString;
   summary: ZodString;
-  needs: ZodArray<ZodString>;
-  pattern: ZodNullable<ZodString>;
-  runner: ZodOptional<ZodObject<{
-    id: ZodString;
-    resource: ZodString;
-  }, $strip>>;
   acceptsMedia: ZodArray<ZodString>;
-  mediaOverrides: ZodOptional<ZodRecord<ZodString, ZodUnknown>>;
 }, $strip>;
 declare const billingStateSchema: ZodObject<{
   balance: ZodObject<{
@@ -2616,7 +2609,6 @@ declare const billingStateSchema: ZodObject<{
       apiRequestsPerMinute: ZodNumber;
       maxJobTimeout: ZodNumber;
       maxInputFileSize: ZodNumber;
-      maxBatchSize: ZodNumber;
     }, $strip>;
   }, $strip>;
   subscription: ZodNullable<ZodObject<{
@@ -2640,7 +2632,6 @@ declare const billingStateSchema: ZodObject<{
       apiRequestsPerMinute: ZodNumber;
       maxJobTimeout: ZodNumber;
       maxInputFileSize: ZodNumber;
-      maxBatchSize: ZodNumber;
     }, $strip>;
   }, $strip>>;
 }, $strip>;
@@ -2698,11 +2689,15 @@ declare const webhookDeliverySchema: ZodObject<{
   id: ZodString;
   endpointId: ZodString;
   endpointName: ZodNullable<ZodString>;
-  jobId: ZodString;
-  batchId: ZodNullable<ZodString>;
+  jobId: ZodNullable<ZodString>;
   event: ZodString;
   payload: ZodString;
-  status: ZodString;
+  status: ZodEnum<{
+    failed: "failed";
+    cancelled: "cancelled";
+    pending: "pending";
+    delivered: "delivered";
+  }>;
   statusCode: ZodNullable<ZodNumber>;
   responseBody: ZodNullable<ZodString>;
   attempts: ZodNumber;
@@ -3025,6 +3020,130 @@ interface LogEntryData {
   meta?: Record<string, unknown>;
 }
 //#endregion
+//#region ../shared/src/constants/webhook-events.d.ts
+declare const WEBHOOK_EVENT_TYPES: readonly ["job.created", "job.started", "job.completed", "job.failed", "job.cancelled", "balance.low", "balance.depleted"];
+type WebhookEventType = (typeof WEBHOOK_EVENT_TYPES)[number];
+//#endregion
+//#region ../shared/src/types/webhook.d.ts
+interface JobCreatedData {
+  jobId: string;
+  jobType: string;
+  status: "waiting";
+  timing: {
+    createdAt: number;
+  };
+}
+interface JobStartedData {
+  jobId: string;
+  jobType: string;
+  status: "running";
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt: number;
+  };
+}
+interface JobCompletedData {
+  jobId: string;
+  jobType: string;
+  status: "complete";
+  output: Output;
+  cost?: {
+    amount: number;
+    currency: "USD";
+    formatted: string;
+    breakdown: string;
+  };
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt?: number;
+    completedAt: number;
+  };
+  steps?: Array<{
+    id: string;
+    name: string;
+    status: string;
+    durationMs?: number;
+    error?: string;
+  }>;
+  outputCategory?: string;
+  mediaType?: string;
+}
+interface JobFailedData {
+  jobId: string;
+  jobType: string;
+  status: "failed";
+  error: JobError;
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt?: number;
+    failedAt: number;
+  };
+  steps?: Array<{
+    id: string;
+    name: string;
+    status: string;
+    durationMs?: number;
+    error?: string;
+  }>;
+}
+interface JobCancelledData {
+  jobId: string;
+  jobType: string;
+  status: "cancelled";
+  timing: {
+    createdAt: number;
+    cancelledAt: number;
+  };
+}
+interface BalanceLowData {
+  balance: number;
+  balanceFormatted: string;
+  threshold: number;
+  thresholdFormatted: string;
+  triggeredByJobId: string;
+  triggeredByJobType: string;
+}
+interface BalanceDepletedData {
+  balance: number;
+  balanceFormatted: string;
+  triggeredByJobId: string;
+  triggeredByJobType: string;
+}
+interface TestEventData {
+  message: string;
+  endpointId: string;
+}
+/**
+ * Maps each event to its `data` shape. The `WebhookPayload` mapped type below
+ * fails to compile if WEBHOOK_EVENT_TYPES gains an event that is missing here,
+ * so this map is the enforced single source of truth for payload shapes.
+ */
+interface WebhookEventDataMap {
+  "job.created": JobCreatedData;
+  "job.started": JobStartedData;
+  "job.completed": JobCompletedData;
+  "job.failed": JobFailedData;
+  "job.cancelled": JobCancelledData;
+  "balance.low": BalanceLowData;
+  "balance.depleted": BalanceDepletedData;
+}
+interface Envelope<E extends string, D> {
+  version: "1";
+  event: E;
+  deliveryId: string;
+  timestamp: number;
+  orgId: string;
+  data: D;
+}
+/**
+ * The exact JSON body Rendobar POSTs to your endpoint, discriminated by `event`.
+ * Switch on `payload.event` and `payload.data` narrows to the matching shape.
+ */
+type WebhookPayload = { [E in WebhookEventType]: Envelope<E, WebhookEventDataMap[E]> }[WebhookEventType] | Envelope<"test", TestEventData>;
+//#endregion
 //#region src/types.d.ts
 /**
  * Primary playable/download URL for a completed job, or `undefined`.
@@ -3209,7 +3328,7 @@ declare function createClient(config?: ClientConfig): {
       signal?: AbortSignal;
     }): Promise<WebhookEndpoint>;
     update(id: string, params: UpdateWebhookParams, options?: {
-      signal /** Default org ID (sent as X-Org-Id header). */? /** Default org ID (sent as X-Org-Id header). */: AbortSignal;
+      signal?: AbortSignal;
     }): Promise<WebhookEndpoint>;
     delete(id: string, options?: {
       signal?: AbortSignal;
@@ -3232,7 +3351,7 @@ declare function createClient(config?: ClientConfig): {
     }>;
     retryDelivery(id: string, options?: {
       signal?: AbortSignal;
-    }): Promise<WebhookDelivery>;
+    }): Promise<RetryDeliveryResult>;
   };
   apiKeys: {
     create(params: {
@@ -3282,28 +3401,12 @@ declare function createClient(config?: ClientConfig): {
       signal?: AbortSignal;
     }): Promise<void>;
     getSettings(options?: {
-      signal?: AbortSignal;
+      signal? /** Custom fetch function for testing or special runtimes. */: AbortSignal;
     }): Promise<OrgSettings>;
     updateSettings(body: Partial<Pick<OrgSettings, "billingEmailsEnabled" | "defaultRegion" | "regionPinned">>, options?: {
       signal?: AbortSignal;
     }): Promise<OrgSettings>;
   };
-  batches: {
-    create(params: {
-      jobs: CreateJobParams[];
-    }, options?: {
-      signal?: AbortSignal;
-    }): Promise<BatchResult>;
-    get(id: string, options?: {
-      signal?: AbortSignal;
-    }): Promise<{
-      id: string;
-      orgId: string;
-      jobCount: number;
-      completedCount: number;
-      createdAt: number;
-    }>;
-  };
   assets: {
     list(params?: ListAssetsParams, options?: {
       signal?: AbortSignal;
@@ -3448,12 +3551,16 @@ interface JobSubscription {
  * semantics on the schema side.
  */
 interface FfmpegParams {
-  /** FFmpeg command. The leading "ffmpeg" is stripped if present. */
+  /** FFmpeg command. The leading "ffmpeg" is stripped if present. The output
+   *  format comes from the command's own output filename — there is no separate
+   *  format param. */
   command: string;
-  /** Output container/format. Inferred from the trailing filename if omitted. */
-  outputFormat?: "mp4" | "mkv" | "webm" | "mov" | "avi" | "ts" | "gif" | "png" | "jpg" | "mp3" | "wav" | "flac" | "ogg" | "aac" | "opus" | "m4a" | "srt" | "vtt";
-  /** Maximum execution time in seconds (1 - 900). Defaults to 120. */
+  /** Max execution time in seconds. Defaults to your plan's max job timeout;
+   *  an explicit value is capped at it. */
   timeout?: number;
+  /** Hardware target. "auto" (default) routes to GPU when the command uses
+   *  NVENC/CUDA; "cpu" / "gpu" force it. */
+  compute?: "auto" | "cpu" | "gpu";
 }
 //#endregion
 //#region src/resources/jobs.d.ts
@@ -3509,22 +3616,29 @@ type TransactionListParams = {
 type CreateWebhookParams = {
   name: string;
   url: string;
-  subscribedEvents: string[];
+  subscribedEvents: WebhookEventType[];
 };
 type UpdateWebhookParams = {
   name?: string;
   url?: string;
-  subscribedEvents?: string[];
+  subscribedEvents?: WebhookEventType[];
   active?: boolean;
 };
 type ListDeliveriesParams = {
   endpointId?: string;
-  event?: string;
+  event?: WebhookEventType;
   status?: string;
   jobId?: string;
   limit?: number;
   offset?: number;
 };
+/** The retry route echoes only these fields — not a full delivery record. */
+type RetryDeliveryResult = {
+  id: string;
+  status: string;
+  event: string;
+  endpointId: string;
+};
 //#endregion
 //#region src/resources/orgs.d.ts
 type OrgCurrentResponse = {
@@ -3551,14 +3665,6 @@ type OrgCurrentResponse = {
   };
 };
 //#endregion
-//#region src/resources/batches.d.ts
-type BatchResult = {
-  batchId: string;
-  jobCount: number;
-  jobIds: string[];
-  status: string;
-};
-//#endregion
 //#region src/resources/uploads.d.ts
 type UploadProgress = {
   loaded: number;
@@ -3588,4 +3694,4 @@ type AssetListPage = {
   meta: AssetListMeta;
 };
 //#endregion
-export { ApiError, type ApiKey, type AssetResponse as Asset, type AssetDownloadResponse, type AssetInitResponse, type AssetListMeta, type AssetListPage, type BatchResult, type BillingInvoice, type BillingState, type ClientConfig, type Cost, type CreateJobParams, type CreateUploadOptions, type CreateWebhookParams, type FfmpegParams, type FileType, type JobResponse as Job, type JobCreatedResponse, type JobError, JobFailedError, type JobListPage, type JobStats, type JobStep, type JobSubscribeOptions, type JobSubscription, type JobTimings, type JobType, type ListAssetsParams, type ListDeliveriesParams, type ListJobsParams, type LogEntryData, type OrgCurrentResponse, type OrgEvent, type OrgSettings, type Organization, type Output, type OutputFile, type PaginationMeta, type PaymentMethod, type RealtimeConnectOptions, type RealtimeConnection, type RendobarClient, type StatsParams, type Transaction, type TransactionListParams, type UpdateWebhookParams, type UploadProgress, type UsageParams, type UsageSummary, type WaitOptions, WaitTimeoutError, type WebhookDelivery, type WebhookEndpoint, createClient, isApiError, jobData, outputUrl };
+export { ApiError, type ApiKey, type AssetResponse as Asset, type AssetDownloadResponse, type AssetInitResponse, type AssetListMeta, type AssetListPage, type BalanceDepletedData, type BalanceLowData, type BillingInvoice, type BillingState, type ClientConfig, type Cost, type CreateJobParams, type CreateUploadOptions, type CreateWebhookParams, type FfmpegParams, type FileType, type JobResponse as Job, type JobCancelledData, type JobCompletedData, type JobCreatedData, type JobCreatedResponse, type JobError, type JobFailedData, JobFailedError, type JobListPage, type JobStartedData, type JobStats, type JobStep, type JobSubscribeOptions, type JobSubscription, type JobTimings, type JobType, type ListAssetsParams, type ListDeliveriesParams, type ListJobsParams, type LogEntryData, type OrgCurrentResponse, type OrgEvent, type OrgSettings, type Organization, type Output, type OutputFile, type PaginationMeta, type PaymentMethod, type RealtimeConnectOptions, type RealtimeConnection, type RendobarClient, type RetryDeliveryResult, type StatsParams, type TestEventData, type Transaction, type TransactionListParams, type UpdateWebhookParams, type UploadProgress, type UsageParams, type UsageSummary, type WaitOptions, WaitTimeoutError, type WebhookDelivery, type WebhookEndpoint, type WebhookEventDataMap, type WebhookPayload, createClient, isApiError, jobData, outputUrl };

package/dist/index.d.mts

@@ -2245,7 +2245,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2282,6 +2281,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"waiting">;
 }, $strip>, ZodObject<{
   id: ZodString;
@@ -2289,7 +2289,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2326,6 +2325,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"dispatched">;
   progress: ZodOptional<ZodNumber>;
   eta: ZodOptional<ZodNullable<ZodNumber>>;
@@ -2335,7 +2335,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2372,6 +2371,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"running">;
   progress: ZodNumber;
   eta: ZodNullable<ZodNumber>;
@@ -2381,7 +2381,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2418,6 +2417,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"complete">;
   output: ZodObject<{
     data: ZodUnknown;
@@ -2469,7 +2469,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2506,6 +2505,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"failed">;
   error: ZodObject<{
     code: ZodString;
@@ -2519,7 +2519,6 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   type: ZodString;
   source: ZodString;
   client: ZodNullable<ZodString>;
-  batchId: ZodNullable<ZodString>;
   retryCount: ZodNumber;
   idempotencyKey: ZodNullable<ZodString>;
   mediaType: ZodNullable<ZodString>;
@@ -2556,6 +2555,7 @@ declare const jobResponseSchema: ZodDiscriminatedUnion<[ZodObject<{
   startedAt: ZodNullable<ZodNumber>;
   completedAt: ZodNullable<ZodNumber>;
   settledAt: ZodNullable<ZodNumber>;
+  retentionExpiresAt: ZodNullable<ZodNumber>;
   status: ZodLiteral<"cancelled">;
 }, $strip>], "status">;
 declare const jobCreatedResponseSchema: ZodObject<{
@@ -2594,14 +2594,7 @@ declare const jobTypeSchema: ZodObject<{
   type: ZodString;
   tag: ZodString;
   summary: ZodString;
-  needs: ZodArray<ZodString>;
-  pattern: ZodNullable<ZodString>;
-  runner: ZodOptional<ZodObject<{
-    id: ZodString;
-    resource: ZodString;
-  }, $strip>>;
   acceptsMedia: ZodArray<ZodString>;
-  mediaOverrides: ZodOptional<ZodRecord<ZodString, ZodUnknown>>;
 }, $strip>;
 declare const billingStateSchema: ZodObject<{
   balance: ZodObject<{
@@ -2616,7 +2609,6 @@ declare const billingStateSchema: ZodObject<{
       apiRequestsPerMinute: ZodNumber;
       maxJobTimeout: ZodNumber;
       maxInputFileSize: ZodNumber;
-      maxBatchSize: ZodNumber;
     }, $strip>;
   }, $strip>;
   subscription: ZodNullable<ZodObject<{
@@ -2640,7 +2632,6 @@ declare const billingStateSchema: ZodObject<{
       apiRequestsPerMinute: ZodNumber;
       maxJobTimeout: ZodNumber;
       maxInputFileSize: ZodNumber;
-      maxBatchSize: ZodNumber;
     }, $strip>;
   }, $strip>>;
 }, $strip>;
@@ -2698,11 +2689,15 @@ declare const webhookDeliverySchema: ZodObject<{
   id: ZodString;
   endpointId: ZodString;
   endpointName: ZodNullable<ZodString>;
-  jobId: ZodString;
-  batchId: ZodNullable<ZodString>;
+  jobId: ZodNullable<ZodString>;
   event: ZodString;
   payload: ZodString;
-  status: ZodString;
+  status: ZodEnum<{
+    failed: "failed";
+    cancelled: "cancelled";
+    pending: "pending";
+    delivered: "delivered";
+  }>;
   statusCode: ZodNullable<ZodNumber>;
   responseBody: ZodNullable<ZodString>;
   attempts: ZodNumber;
@@ -3025,6 +3020,130 @@ interface LogEntryData {
   meta?: Record<string, unknown>;
 }
 //#endregion
+//#region ../shared/src/constants/webhook-events.d.ts
+declare const WEBHOOK_EVENT_TYPES: readonly ["job.created", "job.started", "job.completed", "job.failed", "job.cancelled", "balance.low", "balance.depleted"];
+type WebhookEventType = (typeof WEBHOOK_EVENT_TYPES)[number];
+//#endregion
+//#region ../shared/src/types/webhook.d.ts
+interface JobCreatedData {
+  jobId: string;
+  jobType: string;
+  status: "waiting";
+  timing: {
+    createdAt: number;
+  };
+}
+interface JobStartedData {
+  jobId: string;
+  jobType: string;
+  status: "running";
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt: number;
+  };
+}
+interface JobCompletedData {
+  jobId: string;
+  jobType: string;
+  status: "complete";
+  output: Output;
+  cost?: {
+    amount: number;
+    currency: "USD";
+    formatted: string;
+    breakdown: string;
+  };
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt?: number;
+    completedAt: number;
+  };
+  steps?: Array<{
+    id: string;
+    name: string;
+    status: string;
+    durationMs?: number;
+    error?: string;
+  }>;
+  outputCategory?: string;
+  mediaType?: string;
+}
+interface JobFailedData {
+  jobId: string;
+  jobType: string;
+  status: "failed";
+  error: JobError;
+  timing: {
+    createdAt: number;
+    dispatchedAt?: number;
+    startedAt?: number;
+    failedAt: number;
+  };
+  steps?: Array<{
+    id: string;
+    name: string;
+    status: string;
+    durationMs?: number;
+    error?: string;
+  }>;
+}
+interface JobCancelledData {
+  jobId: string;
+  jobType: string;
+  status: "cancelled";
+  timing: {
+    createdAt: number;
+    cancelledAt: number;
+  };
+}
+interface BalanceLowData {
+  balance: number;
+  balanceFormatted: string;
+  threshold: number;
+  thresholdFormatted: string;
+  triggeredByJobId: string;
+  triggeredByJobType: string;
+}
+interface BalanceDepletedData {
+  balance: number;
+  balanceFormatted: string;
+  triggeredByJobId: string;
+  triggeredByJobType: string;
+}
+interface TestEventData {
+  message: string;
+  endpointId: string;
+}
+/**
+ * Maps each event to its `data` shape. The `WebhookPayload` mapped type below
+ * fails to compile if WEBHOOK_EVENT_TYPES gains an event that is missing here,
+ * so this map is the enforced single source of truth for payload shapes.
+ */
+interface WebhookEventDataMap {
+  "job.created": JobCreatedData;
+  "job.started": JobStartedData;
+  "job.completed": JobCompletedData;
+  "job.failed": JobFailedData;
+  "job.cancelled": JobCancelledData;
+  "balance.low": BalanceLowData;
+  "balance.depleted": BalanceDepletedData;
+}
+interface Envelope<E extends string, D> {
+  version: "1";
+  event: E;
+  deliveryId: string;
+  timestamp: number;
+  orgId: string;
+  data: D;
+}
+/**
+ * The exact JSON body Rendobar POSTs to your endpoint, discriminated by `event`.
+ * Switch on `payload.event` and `payload.data` narrows to the matching shape.
+ */
+type WebhookPayload = { [E in WebhookEventType]: Envelope<E, WebhookEventDataMap[E]> }[WebhookEventType] | Envelope<"test", TestEventData>;
+//#endregion
 //#region src/types.d.ts
 /**
  * Primary playable/download URL for a completed job, or `undefined`.
@@ -3209,7 +3328,7 @@ declare function createClient(config?: ClientConfig): {
       signal?: AbortSignal;
     }): Promise<WebhookEndpoint>;
     update(id: string, params: UpdateWebhookParams, options?: {
-      signal /** Default org ID (sent as X-Org-Id header). */? /** Default org ID (sent as X-Org-Id header). */: AbortSignal;
+      signal?: AbortSignal;
     }): Promise<WebhookEndpoint>;
     delete(id: string, options?: {
       signal?: AbortSignal;
@@ -3232,7 +3351,7 @@ declare function createClient(config?: ClientConfig): {
     }>;
     retryDelivery(id: string, options?: {
       signal?: AbortSignal;
-    }): Promise<WebhookDelivery>;
+    }): Promise<RetryDeliveryResult>;
   };
   apiKeys: {
     create(params: {
@@ -3282,28 +3401,12 @@ declare function createClient(config?: ClientConfig): {
       signal?: AbortSignal;
     }): Promise<void>;
     getSettings(options?: {
-      signal?: AbortSignal;
+      signal? /** Custom fetch function for testing or special runtimes. */: AbortSignal;
     }): Promise<OrgSettings>;
     updateSettings(body: Partial<Pick<OrgSettings, "billingEmailsEnabled" | "defaultRegion" | "regionPinned">>, options?: {
       signal?: AbortSignal;
     }): Promise<OrgSettings>;
   };
-  batches: {
-    create(params: {
-      jobs: CreateJobParams[];
-    }, options?: {
-      signal?: AbortSignal;
-    }): Promise<BatchResult>;
-    get(id: string, options?: {
-      signal?: AbortSignal;
-    }): Promise<{
-      id: string;
-      orgId: string;
-      jobCount: number;
-      completedCount: number;
-      createdAt: number;
-    }>;
-  };
   assets: {
     list(params?: ListAssetsParams, options?: {
       signal?: AbortSignal;
@@ -3448,12 +3551,16 @@ interface JobSubscription {
  * semantics on the schema side.
  */
 interface FfmpegParams {
-  /** FFmpeg command. The leading "ffmpeg" is stripped if present. */
+  /** FFmpeg command. The leading "ffmpeg" is stripped if present. The output
+   *  format comes from the command's own output filename — there is no separate
+   *  format param. */
   command: string;
-  /** Output container/format. Inferred from the trailing filename if omitted. */
-  outputFormat?: "mp4" | "mkv" | "webm" | "mov" | "avi" | "ts" | "gif" | "png" | "jpg" | "mp3" | "wav" | "flac" | "ogg" | "aac" | "opus" | "m4a" | "srt" | "vtt";
-  /** Maximum execution time in seconds (1 - 900). Defaults to 120. */
+  /** Max execution time in seconds. Defaults to your plan's max job timeout;
+   *  an explicit value is capped at it. */
   timeout?: number;
+  /** Hardware target. "auto" (default) routes to GPU when the command uses
+   *  NVENC/CUDA; "cpu" / "gpu" force it. */
+  compute?: "auto" | "cpu" | "gpu";
 }
 //#endregion
 //#region src/resources/jobs.d.ts
@@ -3509,22 +3616,29 @@ type TransactionListParams = {
 type CreateWebhookParams = {
   name: string;
   url: string;
-  subscribedEvents: string[];
+  subscribedEvents: WebhookEventType[];
 };
 type UpdateWebhookParams = {
   name?: string;
   url?: string;
-  subscribedEvents?: string[];
+  subscribedEvents?: WebhookEventType[];
   active?: boolean;
 };
 type ListDeliveriesParams = {
   endpointId?: string;
-  event?: string;
+  event?: WebhookEventType;
   status?: string;
   jobId?: string;
   limit?: number;
   offset?: number;
 };
+/** The retry route echoes only these fields — not a full delivery record. */
+type RetryDeliveryResult = {
+  id: string;
+  status: string;
+  event: string;
+  endpointId: string;
+};
 //#endregion
 //#region src/resources/orgs.d.ts
 type OrgCurrentResponse = {
@@ -3551,14 +3665,6 @@ type OrgCurrentResponse = {
   };
 };
 //#endregion
-//#region src/resources/batches.d.ts
-type BatchResult = {
-  batchId: string;
-  jobCount: number;
-  jobIds: string[];
-  status: string;
-};
-//#endregion
 //#region src/resources/uploads.d.ts
 type UploadProgress = {
   loaded: number;
@@ -3588,4 +3694,4 @@ type AssetListPage = {
   meta: AssetListMeta;
 };
 //#endregion
-export { ApiError, type ApiKey, type AssetResponse as Asset, type AssetDownloadResponse, type AssetInitResponse, type AssetListMeta, type AssetListPage, type BatchResult, type BillingInvoice, type BillingState, type ClientConfig, type Cost, type CreateJobParams, type CreateUploadOptions, type CreateWebhookParams, type FfmpegParams, type FileType, type JobResponse as Job, type JobCreatedResponse, type JobError, JobFailedError, type JobListPage, type JobStats, type JobStep, type JobSubscribeOptions, type JobSubscription, type JobTimings, type JobType, type ListAssetsParams, type ListDeliveriesParams, type ListJobsParams, type LogEntryData, type OrgCurrentResponse, type OrgEvent, type OrgSettings, type Organization, type Output, type OutputFile, type PaginationMeta, type PaymentMethod, type RealtimeConnectOptions, type RealtimeConnection, type RendobarClient, type StatsParams, type Transaction, type TransactionListParams, type UpdateWebhookParams, type UploadProgress, type UsageParams, type UsageSummary, type WaitOptions, WaitTimeoutError, type WebhookDelivery, type WebhookEndpoint, createClient, isApiError, jobData, outputUrl };
+export { ApiError, type ApiKey, type AssetResponse as Asset, type AssetDownloadResponse, type AssetInitResponse, type AssetListMeta, type AssetListPage, type BalanceDepletedData, type BalanceLowData, type BillingInvoice, type BillingState, type ClientConfig, type Cost, type CreateJobParams, type CreateUploadOptions, type CreateWebhookParams, type FfmpegParams, type FileType, type JobResponse as Job, type JobCancelledData, type JobCompletedData, type JobCreatedData, type JobCreatedResponse, type JobError, type JobFailedData, JobFailedError, type JobListPage, type JobStartedData, type JobStats, type JobStep, type JobSubscribeOptions, type JobSubscription, type JobTimings, type JobType, type ListAssetsParams, type ListDeliveriesParams, type ListJobsParams, type LogEntryData, type OrgCurrentResponse, type OrgEvent, type OrgSettings, type Organization, type Output, type OutputFile, type PaginationMeta, type PaymentMethod, type RealtimeConnectOptions, type RealtimeConnection, type RendobarClient, type RetryDeliveryResult, type StatsParams, type TestEventData, type Transaction, type TransactionListParams, type UpdateWebhookParams, type UploadProgress, type UsageParams, type UsageSummary, type WaitOptions, WaitTimeoutError, type WebhookDelivery, type WebhookEndpoint, type WebhookEventDataMap, type WebhookPayload, createClient, isApiError, jobData, outputUrl };

package/dist/index.mjs

@@ -645,22 +645,6 @@ function createOrgsResource(request) {
 	};
 }
 //#endregion
-//#region src/resources/batches.ts
-function createBatchesResource(request) {
-	return {
-		async create(params, options) {
-			return request("/batches", {
-				method: "POST",
-				body: params,
-				signal: options?.signal
-			});
-		},
-		async get(id, options) {
-			return request(`/batches/${id}`, { signal: options?.signal });
-		}
-	};
-}
-//#endregion
 //#region src/resources/assets.ts
 function createAssetsResource(request) {
 	return {
@@ -878,7 +862,6 @@ function createClient(config = {}) {
 		webhooks: createWebhooksResource(request),
 		apiKeys: createApiKeysResource(request),
 		orgs: createOrgsResource(request),
-		batches: createBatchesResource(request),
 		assets: createAssetsResource(request),
 		team: createTeamResource(request),
 		realtime: createRealtimeClient(baseUrl, {

package/dist/webhooks.cjs

@@ -1,12 +1,67 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 //#region src/lib/webhook-verify.ts
 /**
-* Verify a Rendobar webhook signature using HMAC-SHA256.
-* Works in any runtime with Web Crypto API (Node 18+, Deno, CF Workers, browser).
+* Verify Rendobar webhook signatures. Zero runtime deps — works in any runtime
+* with the Web Crypto API (Node 18+, Deno, CF Workers, browser).
 *
-* Usage in a webhook handler:
-*   import { verifyWebhookSignature } from "@rendobar/sdk/webhooks";
-*   const valid = await verifyWebhookSignature(body, signature, secret);
+* Prefer `verifyWebhook(body, headers, secret)` — it reads the signature +
+* timestamp headers, rebuilds the signed string, checks freshness (replay
+* protection), and handles the secret-rotation window for you:
+*
+*   import { verifyWebhook } from "@rendobar/sdk/webhooks";
+*   const ok = await verifyWebhook(rawBody, req.headers, process.env.WEBHOOK_SECRET);
+*   if (!ok) return res.status(401).send("Invalid signature");
+*
+* `verifyWebhookSignature` is the low-level HMAC primitive. It signs exactly the
+* string you pass, so you must build `${timestamp}.${body}` yourself — the raw
+* body alone will NOT match, because Rendobar signs the timestamped form.
+*/
+const SIG_HEADER = "x-rendobar-signature";
+const SIG_PREVIOUS_HEADER = "x-rendobar-signature-previous";
+const TIMESTAMP_HEADER = "x-rendobar-timestamp";
+const DEFAULT_TOLERANCE_SEC = 300;
+function getHeader(headers, name) {
+	if (headers instanceof Headers) return headers.get(name) ?? void 0;
+	const lower = name.toLowerCase();
+	for (const key of Object.keys(headers)) if (key.toLowerCase() === lower) {
+		const v = headers[key];
+		return Array.isArray(v) ? v[0] : v ?? void 0;
+	}
+}
+/**
+* Verify a webhook request end to end: signature + timestamp freshness + secret
+* rotation. Returns `true` only if the body is authentic and recent.
+*
+* @param body      Raw request body string (NOT parsed JSON — bytes as received).
+* @param headers   The incoming request headers (Web `Headers` or a plain record).
+* @param secret    Your endpoint's signing secret (`whsec_...`).
+* @param opts.toleranceSec  Max clock skew in seconds (default 300). Pass
+*                           `Infinity` to disable the replay/freshness check.
+*/
+async function verifyWebhook(body, headers, secret, opts = {}) {
+	const toleranceSec = opts.toleranceSec ?? DEFAULT_TOLERANCE_SEC;
+	const signature = getHeader(headers, SIG_HEADER);
+	const timestamp = getHeader(headers, TIMESTAMP_HEADER);
+	if (!signature || !timestamp) return false;
+	const tsSec = Number(timestamp);
+	if (!Number.isFinite(tsSec)) return false;
+	if (Number.isFinite(toleranceSec)) {
+		const nowSec = Math.floor(Date.now() / 1e3);
+		if (Math.abs(nowSec - tsSec) > toleranceSec) return false;
+	}
+	const signed = `${timestamp}.${body}`;
+	if (await verifyWebhookSignature(signed, signature, secret)) return true;
+	const previous = getHeader(headers, SIG_PREVIOUS_HEADER);
+	if (previous && await verifyWebhookSignature(signed, previous, secret)) return true;
+	return false;
+}
+/**
+* Low-level HMAC-SHA256 check. Signs `payload` verbatim and compares (constant
+* time) against `signature` (`sha256=<hex>` or bare hex).
+*
+* NOTE: Rendobar signs `${timestamp}.${body}`, so pass that exact string as
+* `payload` — the raw body alone will not match. Most callers should use
+* `verifyWebhook` instead, which builds the string and checks freshness.
 */
 async function verifyWebhookSignature(payload, signature, secret) {
 	const expected = signature.startsWith("sha256=") ? signature.slice(7) : signature;
@@ -22,4 +77,5 @@ async function verifyWebhookSignature(payload, signature, secret) {
 	return mismatch === 0;
 }
 //#endregion
+exports.verifyWebhook = verifyWebhook;
 exports.verifyWebhookSignature = verifyWebhookSignature;

package/dist/webhooks.d.cts

@@ -1,12 +1,43 @@
 //#region src/lib/webhook-verify.d.ts
 /**
- * Verify a Rendobar webhook signature using HMAC-SHA256.
- * Works in any runtime with Web Crypto API (Node 18+, Deno, CF Workers, browser).
+ * Verify Rendobar webhook signatures. Zero runtime deps — works in any runtime
+ * with the Web Crypto API (Node 18+, Deno, CF Workers, browser).
  *
- * Usage in a webhook handler:
- *   import { verifyWebhookSignature } from "@rendobar/sdk/webhooks";
- *   const valid = await verifyWebhookSignature(body, signature, secret);
+ * Prefer `verifyWebhook(body, headers, secret)` — it reads the signature +
+ * timestamp headers, rebuilds the signed string, checks freshness (replay
+ * protection), and handles the secret-rotation window for you:
+ *
+ *   import { verifyWebhook } from "@rendobar/sdk/webhooks";
+ *   const ok = await verifyWebhook(rawBody, req.headers, process.env.WEBHOOK_SECRET);
+ *   if (!ok) return res.status(401).send("Invalid signature");
+ *
+ * `verifyWebhookSignature` is the low-level HMAC primitive. It signs exactly the
+ * string you pass, so you must build `${timestamp}.${body}` yourself — the raw
+ * body alone will NOT match, because Rendobar signs the timestamped form.
+ */
+/** Accepts a Web `Headers` object or a plain header record (e.g. Node `req.headers`). */
+type WebhookHeaders = Headers | Record<string, string | string[] | undefined>;
+/**
+ * Verify a webhook request end to end: signature + timestamp freshness + secret
+ * rotation. Returns `true` only if the body is authentic and recent.
+ *
+ * @param body      Raw request body string (NOT parsed JSON — bytes as received).
+ * @param headers   The incoming request headers (Web `Headers` or a plain record).
+ * @param secret    Your endpoint's signing secret (`whsec_...`).
+ * @param opts.toleranceSec  Max clock skew in seconds (default 300). Pass
+ *                           `Infinity` to disable the replay/freshness check.
+ */
+declare function verifyWebhook(body: string, headers: WebhookHeaders, secret: string, opts?: {
+  toleranceSec?: number;
+}): Promise<boolean>;
+/**
+ * Low-level HMAC-SHA256 check. Signs `payload` verbatim and compares (constant
+ * time) against `signature` (`sha256=<hex>` or bare hex).
+ *
+ * NOTE: Rendobar signs `${timestamp}.${body}`, so pass that exact string as
+ * `payload` — the raw body alone will not match. Most callers should use
+ * `verifyWebhook` instead, which builds the string and checks freshness.
  */
 declare function verifyWebhookSignature(payload: string, signature: string, secret: string): Promise<boolean>;
 //#endregion
-export { verifyWebhookSignature };
+export { type WebhookHeaders, verifyWebhook, verifyWebhookSignature };

package/dist/webhooks.d.mts

@@ -1,12 +1,43 @@
 //#region src/lib/webhook-verify.d.ts
 /**
- * Verify a Rendobar webhook signature using HMAC-SHA256.
- * Works in any runtime with Web Crypto API (Node 18+, Deno, CF Workers, browser).
+ * Verify Rendobar webhook signatures. Zero runtime deps — works in any runtime
+ * with the Web Crypto API (Node 18+, Deno, CF Workers, browser).
  *
- * Usage in a webhook handler:
- *   import { verifyWebhookSignature } from "@rendobar/sdk/webhooks";
- *   const valid = await verifyWebhookSignature(body, signature, secret);
+ * Prefer `verifyWebhook(body, headers, secret)` — it reads the signature +
+ * timestamp headers, rebuilds the signed string, checks freshness (replay
+ * protection), and handles the secret-rotation window for you:
+ *
+ *   import { verifyWebhook } from "@rendobar/sdk/webhooks";
+ *   const ok = await verifyWebhook(rawBody, req.headers, process.env.WEBHOOK_SECRET);
+ *   if (!ok) return res.status(401).send("Invalid signature");
+ *
+ * `verifyWebhookSignature` is the low-level HMAC primitive. It signs exactly the
+ * string you pass, so you must build `${timestamp}.${body}` yourself — the raw
+ * body alone will NOT match, because Rendobar signs the timestamped form.
+ */
+/** Accepts a Web `Headers` object or a plain header record (e.g. Node `req.headers`). */
+type WebhookHeaders = Headers | Record<string, string | string[] | undefined>;
+/**
+ * Verify a webhook request end to end: signature + timestamp freshness + secret
+ * rotation. Returns `true` only if the body is authentic and recent.
+ *
+ * @param body      Raw request body string (NOT parsed JSON — bytes as received).
+ * @param headers   The incoming request headers (Web `Headers` or a plain record).
+ * @param secret    Your endpoint's signing secret (`whsec_...`).
+ * @param opts.toleranceSec  Max clock skew in seconds (default 300). Pass
+ *                           `Infinity` to disable the replay/freshness check.
+ */
+declare function verifyWebhook(body: string, headers: WebhookHeaders, secret: string, opts?: {
+  toleranceSec?: number;
+}): Promise<boolean>;
+/**
+ * Low-level HMAC-SHA256 check. Signs `payload` verbatim and compares (constant
+ * time) against `signature` (`sha256=<hex>` or bare hex).
+ *
+ * NOTE: Rendobar signs `${timestamp}.${body}`, so pass that exact string as
+ * `payload` — the raw body alone will not match. Most callers should use
+ * `verifyWebhook` instead, which builds the string and checks freshness.
  */
 declare function verifyWebhookSignature(payload: string, signature: string, secret: string): Promise<boolean>;
 //#endregion
-export { verifyWebhookSignature };
+export { type WebhookHeaders, verifyWebhook, verifyWebhookSignature };

package/dist/webhooks.mjs

@@ -1,11 +1,66 @@
 //#region src/lib/webhook-verify.ts
 /**
-* Verify a Rendobar webhook signature using HMAC-SHA256.
-* Works in any runtime with Web Crypto API (Node 18+, Deno, CF Workers, browser).
+* Verify Rendobar webhook signatures. Zero runtime deps — works in any runtime
+* with the Web Crypto API (Node 18+, Deno, CF Workers, browser).
 *
-* Usage in a webhook handler:
-*   import { verifyWebhookSignature } from "@rendobar/sdk/webhooks";
-*   const valid = await verifyWebhookSignature(body, signature, secret);
+* Prefer `verifyWebhook(body, headers, secret)` — it reads the signature +
+* timestamp headers, rebuilds the signed string, checks freshness (replay
+* protection), and handles the secret-rotation window for you:
+*
+*   import { verifyWebhook } from "@rendobar/sdk/webhooks";
+*   const ok = await verifyWebhook(rawBody, req.headers, process.env.WEBHOOK_SECRET);
+*   if (!ok) return res.status(401).send("Invalid signature");
+*
+* `verifyWebhookSignature` is the low-level HMAC primitive. It signs exactly the
+* string you pass, so you must build `${timestamp}.${body}` yourself — the raw
+* body alone will NOT match, because Rendobar signs the timestamped form.
+*/
+const SIG_HEADER = "x-rendobar-signature";
+const SIG_PREVIOUS_HEADER = "x-rendobar-signature-previous";
+const TIMESTAMP_HEADER = "x-rendobar-timestamp";
+const DEFAULT_TOLERANCE_SEC = 300;
+function getHeader(headers, name) {
+	if (headers instanceof Headers) return headers.get(name) ?? void 0;
+	const lower = name.toLowerCase();
+	for (const key of Object.keys(headers)) if (key.toLowerCase() === lower) {
+		const v = headers[key];
+		return Array.isArray(v) ? v[0] : v ?? void 0;
+	}
+}
+/**
+* Verify a webhook request end to end: signature + timestamp freshness + secret
+* rotation. Returns `true` only if the body is authentic and recent.
+*
+* @param body      Raw request body string (NOT parsed JSON — bytes as received).
+* @param headers   The incoming request headers (Web `Headers` or a plain record).
+* @param secret    Your endpoint's signing secret (`whsec_...`).
+* @param opts.toleranceSec  Max clock skew in seconds (default 300). Pass
+*                           `Infinity` to disable the replay/freshness check.
+*/
+async function verifyWebhook(body, headers, secret, opts = {}) {
+	const toleranceSec = opts.toleranceSec ?? DEFAULT_TOLERANCE_SEC;
+	const signature = getHeader(headers, SIG_HEADER);
+	const timestamp = getHeader(headers, TIMESTAMP_HEADER);
+	if (!signature || !timestamp) return false;
+	const tsSec = Number(timestamp);
+	if (!Number.isFinite(tsSec)) return false;
+	if (Number.isFinite(toleranceSec)) {
+		const nowSec = Math.floor(Date.now() / 1e3);
+		if (Math.abs(nowSec - tsSec) > toleranceSec) return false;
+	}
+	const signed = `${timestamp}.${body}`;
+	if (await verifyWebhookSignature(signed, signature, secret)) return true;
+	const previous = getHeader(headers, SIG_PREVIOUS_HEADER);
+	if (previous && await verifyWebhookSignature(signed, previous, secret)) return true;
+	return false;
+}
+/**
+* Low-level HMAC-SHA256 check. Signs `payload` verbatim and compares (constant
+* time) against `signature` (`sha256=<hex>` or bare hex).
+*
+* NOTE: Rendobar signs `${timestamp}.${body}`, so pass that exact string as
+* `payload` — the raw body alone will not match. Most callers should use
+* `verifyWebhook` instead, which builds the string and checks freshness.
 */
 async function verifyWebhookSignature(payload, signature, secret) {
 	const expected = signature.startsWith("sha256=") ? signature.slice(7) : signature;
@@ -21,4 +76,4 @@ async function verifyWebhookSignature(payload, signature, secret) {
 	return mismatch === 0;
 }
 //#endregion
-export { verifyWebhookSignature };
+export { verifyWebhook, verifyWebhookSignature };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rendobar/sdk",
-  "version": "3.4.0",
+  "version": "4.1.0",
   "type": "module",
   "description": "TypeScript client for the Rendobar media processing API",
   "main": "./dist/index.cjs",