@sakeetech/viva-payments-core 0.2.6 → 0.2.7

package/dist/webhooks/event-types.d.ts

@@ -32,12 +32,37 @@ export declare function isTransactionEvent(id: number): id is 1796 | 1797 | 1798
  */
 export declare function isOnboardingEvent(id: number): id is 8193 | 8194;
 /**
- * All v1-scope event IDs as a frozen array.
+ * All v1-scope event IDs the webhook handler ACCEPTS INBOUND, as a frozen array.
  *
- * Used by `viva:register-webhooks` CLI to enumerate the required registrations
- * and by the route handler to reject unknown event types.
+ * This is the route handler's allow-list for incoming notifications — it
+ * includes 4865 (Order Updated) because the endpoint legitimately RECEIVES
+ * order-cancellation events. It is NOT the set to register via the ISV API:
+ * 4865 is not registerable at the ISV partner-account level (see
+ * {@link ISV_EVENT_TYPE_IDS}). Use this for inbound validation only.
  *
  * @see references/viva-docs/md/webhooks-for-payments.txt:141
  */
 export declare const V1_EVENT_TYPE_IDS: readonly (1796 | 1797 | 1798 | 4865 | 8193 | 8194)[];
+/**
+ * Event IDs registerable via the ISV webhook API (`POST /isv/v1/webhooks`).
+ *
+ * The ISV partner-account webhook API accepts only the transaction events plus
+ * the two "Marketplace & ISV only" onboarding events. It does NOT accept 4865
+ * (Order Updated) — that is an order-level Smart Checkout event registerable
+ * only per-merchant via Self-Care, and `POST /isv/v1/webhooks` rejects it with
+ * `IsvCreateWebhookFailedInvalidEventTypeId`. (sakee-tech/vivawallet-npm-public#18)
+ *
+ *   1796 — Transaction Payment Created
+ *   1797 — Transaction Reversal Created
+ *   1798 — Transaction Failed
+ *   8193 — Account Connected            (Marketplace & ISV only)
+ *   8194 — Account Verification Status Changed (Marketplace & ISV only)
+ *
+ * 1799 (Transaction Price Calculated) is intentionally excluded — it is
+ * deferred post-v1 (see DEFERRED_EVENT_TYPES).
+ *
+ * @see references/viva-docs/md/webhooks-for-payments.txt:222 (8193/8194 "Marketplace & ISV only")
+ * @see references/viva-docs/md/isv-partner-program.txt:200 (ISV webhook event list — no 4865)
+ */
+export declare const ISV_EVENT_TYPE_IDS: readonly (1796 | 1797 | 1798 | 8193 | 8194)[];
 //# sourceMappingURL=event-types.d.ts.map

package/dist/webhooks/event-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-types.d.ts","sourceRoot":"","sources":["../../src/webhooks/event-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE/E;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAE9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,IAAI,GAAG,IAAI,CAE/D;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,EAEvE,CAAC"}
+{"version":3,"file":"event-types.d.ts","sourceRoot":"","sources":["../../src/webhooks/event-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE/E;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAE9E;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,IAAI,GAAG,IAAI,CAE/D;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,EAEvE,CAAC;AAEZ;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,EAEjE,CAAC"}

package/dist/webhooks/event-types.js

@@ -8,7 +8,7 @@
  * @see references/viva-docs/md/webhooks-for-payments.txt:141
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.V1_EVENT_TYPE_IDS = exports.EVENT_TYPES = void 0;
+exports.ISV_EVENT_TYPE_IDS = exports.V1_EVENT_TYPE_IDS = exports.EVENT_TYPES = void 0;
 exports.isTransactionEvent = isTransactionEvent;
 exports.isOnboardingEvent = isOnboardingEvent;
 var webhook_events_js_1 = require("../types/webhook-events.js");
@@ -42,14 +42,41 @@ function isOnboardingEvent(id) {
     return id === 8193 || id === 8194;
 }
 /**
- * All v1-scope event IDs as a frozen array.
+ * All v1-scope event IDs the webhook handler ACCEPTS INBOUND, as a frozen array.
  *
- * Used by `viva:register-webhooks` CLI to enumerate the required registrations
- * and by the route handler to reject unknown event types.
+ * This is the route handler's allow-list for incoming notifications — it
+ * includes 4865 (Order Updated) because the endpoint legitimately RECEIVES
+ * order-cancellation events. It is NOT the set to register via the ISV API:
+ * 4865 is not registerable at the ISV partner-account level (see
+ * {@link ISV_EVENT_TYPE_IDS}). Use this for inbound validation only.
  *
  * @see references/viva-docs/md/webhooks-for-payments.txt:141
  */
 exports.V1_EVENT_TYPE_IDS = Object.freeze([
     1796, 1797, 1798, 4865, 8193, 8194,
 ]);
+/**
+ * Event IDs registerable via the ISV webhook API (`POST /isv/v1/webhooks`).
+ *
+ * The ISV partner-account webhook API accepts only the transaction events plus
+ * the two "Marketplace & ISV only" onboarding events. It does NOT accept 4865
+ * (Order Updated) — that is an order-level Smart Checkout event registerable
+ * only per-merchant via Self-Care, and `POST /isv/v1/webhooks` rejects it with
+ * `IsvCreateWebhookFailedInvalidEventTypeId`. (sakee-tech/vivawallet-npm-public#18)
+ *
+ *   1796 — Transaction Payment Created
+ *   1797 — Transaction Reversal Created
+ *   1798 — Transaction Failed
+ *   8193 — Account Connected            (Marketplace & ISV only)
+ *   8194 — Account Verification Status Changed (Marketplace & ISV only)
+ *
+ * 1799 (Transaction Price Calculated) is intentionally excluded — it is
+ * deferred post-v1 (see DEFERRED_EVENT_TYPES).
+ *
+ * @see references/viva-docs/md/webhooks-for-payments.txt:222 (8193/8194 "Marketplace & ISV only")
+ * @see references/viva-docs/md/isv-partner-program.txt:200 (ISV webhook event list — no 4865)
+ */
+exports.ISV_EVENT_TYPE_IDS = Object.freeze([
+    1796, 1797, 1798, 8193, 8194,
+]);
 //# sourceMappingURL=event-types.js.map

package/dist/webhooks/event-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-types.js","sourceRoot":"","sources":["../../src/webhooks/event-types.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAgBH,gDAEC;AAYD,8CAEC;AA9BD,gEAA+E;AAAtE,gHAAA,WAAW,OAAA;AAEpB;;;;;;;;;;;GAWG;AACH,SAAgB,kBAAkB,CAAC,EAAU;IAC3C,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAAC,EAAU;IAC1C,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAyD,MAAM,CAAC,MAAM,CAAC;IACnG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CAC1B,CAAC,CAAC"}
+{"version":3,"file":"event-types.js","sourceRoot":"","sources":["../../src/webhooks/event-types.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAgBH,gDAEC;AAYD,8CAEC;AA9BD,gEAA+E;AAAtE,gHAAA,WAAW,OAAA;AAEpB;;;;;;;;;;;GAWG;AACH,SAAgB,kBAAkB,CAAC,EAAU;IAC3C,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAAC,EAAU;IAC1C,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;AACpC,CAAC;AAED;;;;;;;;;;GAUG;AACU,QAAA,iBAAiB,GAAyD,MAAM,CAAC,MAAM,CAAC;IACnG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CAC1B,CAAC,CAAC;AAEZ;;;;;;;;;;;;;;;;;;;;GAoBG;AACU,QAAA,kBAAkB,GAAkD,MAAM,CAAC,MAAM,CAAC;IAC7F,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACpB,CAAC,CAAC"}

package/dist/webhooks/index.d.ts

@@ -15,6 +15,6 @@
 export { buildChallengeResponse } from './challenge-response.js';
 export { VIVA_DEMO_IPS, VIVA_PROD_IPS, isAllowedSourceIp, } from './ip-allowlist.js';
 export { extractClientIp, type ClientIpRequest, } from './extract-client-ip.js';
-export { EVENT_TYPES, type VivaEventTypeId, isTransactionEvent, isOnboardingEvent, V1_EVENT_TYPE_IDS, } from './event-types.js';
+export { EVENT_TYPES, type VivaEventTypeId, isTransactionEvent, isOnboardingEvent, V1_EVENT_TYPE_IDS, ISV_EVENT_TYPE_IDS, } from './event-types.js';
 export { mapStatusLetter, validateStatusTransition, applyStatusTransition, type StatusTransitionResult, } from './status-lattice.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/webhooks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,WAAW,EACX,KAAK,eAAe,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EACL,aAAa,EACb,aAAa,EACb,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,WAAW,EACX,KAAK,eAAe,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC"}

package/dist/webhooks/index.js

@@ -14,7 +14,7 @@
  * @see references/viva-docs/md/webhooks-for-payments.txt:254
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.applyStatusTransition = exports.validateStatusTransition = exports.mapStatusLetter = exports.V1_EVENT_TYPE_IDS = exports.isOnboardingEvent = exports.isTransactionEvent = exports.EVENT_TYPES = exports.extractClientIp = exports.isAllowedSourceIp = exports.VIVA_PROD_IPS = exports.VIVA_DEMO_IPS = exports.buildChallengeResponse = void 0;
+exports.applyStatusTransition = exports.validateStatusTransition = exports.mapStatusLetter = exports.ISV_EVENT_TYPE_IDS = exports.V1_EVENT_TYPE_IDS = exports.isOnboardingEvent = exports.isTransactionEvent = exports.EVENT_TYPES = exports.extractClientIp = exports.isAllowedSourceIp = exports.VIVA_PROD_IPS = exports.VIVA_DEMO_IPS = exports.buildChallengeResponse = void 0;
 var challenge_response_js_1 = require("./challenge-response.js");
 Object.defineProperty(exports, "buildChallengeResponse", { enumerable: true, get: function () { return challenge_response_js_1.buildChallengeResponse; } });
 var ip_allowlist_js_1 = require("./ip-allowlist.js");
@@ -28,6 +28,7 @@ Object.defineProperty(exports, "EVENT_TYPES", { enumerable: true, get: function
 Object.defineProperty(exports, "isTransactionEvent", { enumerable: true, get: function () { return event_types_js_1.isTransactionEvent; } });
 Object.defineProperty(exports, "isOnboardingEvent", { enumerable: true, get: function () { return event_types_js_1.isOnboardingEvent; } });
 Object.defineProperty(exports, "V1_EVENT_TYPE_IDS", { enumerable: true, get: function () { return event_types_js_1.V1_EVENT_TYPE_IDS; } });
+Object.defineProperty(exports, "ISV_EVENT_TYPE_IDS", { enumerable: true, get: function () { return event_types_js_1.ISV_EVENT_TYPE_IDS; } });
 var status_lattice_js_1 = require("./status-lattice.js");
 Object.defineProperty(exports, "mapStatusLetter", { enumerable: true, get: function () { return status_lattice_js_1.mapStatusLetter; } });
 Object.defineProperty(exports, "validateStatusTransition", { enumerable: true, get: function () { return status_lattice_js_1.validateStatusTransition; } });

package/dist/webhooks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,iEAAiE;AAAxD,+HAAA,sBAAsB,OAAA;AAE/B,qDAI2B;AAHzB,gHAAA,aAAa,OAAA;AACb,gHAAA,aAAa,OAAA;AACb,oHAAA,iBAAiB,OAAA;AAGnB,+DAGgC;AAF9B,uHAAA,eAAe,OAAA;AAIjB,mDAM0B;AALxB,6GAAA,WAAW,OAAA;AAEX,oHAAA,kBAAkB,OAAA;AAClB,mHAAA,iBAAiB,OAAA;AACjB,mHAAA,iBAAiB,OAAA;AAGnB,yDAK6B;AAJ3B,oHAAA,eAAe,OAAA;AACf,6HAAA,wBAAwB,OAAA;AACxB,0HAAA,qBAAqB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,iEAAiE;AAAxD,+HAAA,sBAAsB,OAAA;AAE/B,qDAI2B;AAHzB,gHAAA,aAAa,OAAA;AACb,gHAAA,aAAa,OAAA;AACb,oHAAA,iBAAiB,OAAA;AAGnB,+DAGgC;AAF9B,uHAAA,eAAe,OAAA;AAIjB,mDAO0B;AANxB,6GAAA,WAAW,OAAA;AAEX,oHAAA,kBAAkB,OAAA;AAClB,mHAAA,iBAAiB,OAAA;AACjB,mHAAA,iBAAiB,OAAA;AACjB,oHAAA,kBAAkB,OAAA;AAGpB,yDAK6B;AAJ3B,oHAAA,eAAe,OAAA;AACf,6HAAA,wBAAwB,OAAA;AACxB,0HAAA,qBAAqB,OAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakeetech/viva-payments-core",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "description": "Framework-agnostic Viva Wallet client for ISV integrations. Used by medusa-payment-viva and vendure-payment-viva.",
   "license": "MIT",
   "repository": {