@settlemint/dalp-sdk 3.0.6-main.28276968545 → 3.0.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@settlemint/dalp-sdk",
-  "version": "3.0.6-main.28276968545",
+  "version": "3.0.6",
   "private": false,
   "description": "Fully typed SDK for the DALP tokenization platform API",
   "homepage": "https://settlemint.com",
@@ -41,37 +41,37 @@
     "access": "public"
   },
   "scripts": {
-    "build": "rm -rf dist && bun scripts/build.js && tsc -p tsconfig.build.json && bun scripts/fix-dts-extensions.js",
+    "build": "rm -rf dist && bun scripts/build.js && tsgo -p tsconfig.build.json && bun scripts/fix-dts-extensions.js",
     "publint": "publint run --strict --pack npm",
     "attw": "attw --pack . --profile esm-only",
     "publish": "cp ../../LICENSE . && npm publish --ignore-scripts --tag ${TAG:-latest} --access public",
     "prepack": "cp ../../LICENSE .",
     "test": "bun test --parallel=2 tests",
-    "typecheck": "tsc"
+    "typecheck": "tsgo"
   },
   "dependencies": {
-    "@better-auth/api-key": "1.6.20",
-    "@better-auth/passkey": "1.6.20",
+    "@better-auth/api-key": "1.6.19",
+    "@better-auth/passkey": "1.6.19",
     "@orpc/client": "1.14.6",
     "@orpc/contract": "1.14.6",
     "@orpc/openapi-client": "1.14.6",
-    "better-auth": "1.6.20",
+    "better-auth": "1.6.19",
     "currency-codes": "2.2.0",
     "date-fns": "4.4.0",
     "dnum": "2.17.0",
     "iso-3166": "4.4.0",
     "standardwebhooks": "1.0.0",
-    "viem": "2.53.1",
+    "viem": "2.52.2",
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@arethetypeswrong/cli": "0.18.4",
+    "@arethetypeswrong/cli": "0.18.3",
     "@dalp/api-contract": "workspace:*",
     "@dalp/errors": "workspace:*",
     "@tools/typescript-config": "workspace:*",
     "@types/bun": "1.3.14",
     "publint": "0.3.21",
-    "typescript": "7.0.1-rc"
+    "typescript": "6.0.3"
   },
   "engines": {
     "node": ">=20"

package/dist/sign-webhook-receipt.d.ts

@@ -1,72 +0,0 @@
-/**
- * Counter-sign a DALP webhook delivery receipt.
- *
- * The inbound half of webhook signing (`verifyWebhook`) proves a delivery
- * DALP sent is authentic. This is the return half: after a consumer verifies
- * and accepts a delivery, it counter-signs a receipt so the platform has
- * non-repudiation proof the consumer received and acknowledged that specific
- * delivery. Submit the result to `POST /api/v2/webhook-receipts`.
- *
- * The canonical signing string and HMAC mirror the server-side implementation,
- * which a published package cannot import. A shared golden test vector pins the
- * output of both so the two copies cannot drift.
- *
- * @module
- */
-/**
- * Scheme tag prefixed to the counter-signed receipt signing string. It
- * domain-separates receipt signatures from inbound delivery signatures and
- * reserves room for a future scheme revision.
- */
-export declare const RECEIPT_SIGNING_SCHEME = "dalp.whr.v1";
-/** The delivery tuple a receipt signature binds. */
-export interface ReceiptSigningTuple {
-    /** The delivery being acknowledged. A retry allocates a fresh `deliveryId`. */
-    deliveryId: string;
-    /** The endpoint that received the delivery. */
-    endpointId: string;
-    /** The event identifier carried by the delivery (`evt_*`). */
-    evtId: string;
-    /** The hash of the delivered event body (`sha256:<hex>`). */
-    innerEventHash: string;
-}
-export interface SignWebhookReceiptInput extends ReceiptSigningTuple {
-    /** The endpoint signing secret (`dalp_whsk_...`); the prefix is stripped for you. */
-    secret: string;
-}
-/**
- * Build the canonical string a consumer HMACs to counter-sign a receipt.
- *
- * Binding the signature to the full delivery tuple, not just the event body
- * hash, is what closes the receipt-replay window: a retry allocates a fresh
- * `deliveryId` for the same event, so a signature minted for one attempt
- * produces a different signing string than another attempt and no longer
- * verifies against it.
- *
- * Newline-joined is unambiguous because every field carries no newline:
- * `deliveryId`/`endpointId` are UUIDs, `evtId` is the server-issued `evt_*`
- * identifier, and `innerEventHash` is `sha256:<hex>`.
- */
-export declare function buildReceiptSigningString(tuple: ReceiptSigningTuple): string;
-/**
- * Counter-sign a webhook delivery receipt.
- *
- * Returns the lowercase hex `HMAC-SHA256(key, signingString)` to submit as the
- * receipt's `consumerSignature`. The key is the base64-decoded prefix-stripped
- * secret, the same derivation the Standard Webhooks library uses for inbound
- * delivery verification (`verifyWebhook`) and that the dispatcher signs with —
- * so the receipt and the delivery share key material.
- *
- * @example
- * ```typescript
- * const consumerSignature = signWebhookReceipt({
- *   deliveryId,
- *   endpointId,
- *   evtId,
- *   innerEventHash,
- *   secret, // the endpoint's dalp_whsk_... signing secret
- * });
- * ```
- */
-export declare function signWebhookReceipt({ secret, ...tuple }: SignWebhookReceiptInput): string;
-//# sourceMappingURL=sign-webhook-receipt.d.ts.map

package/dist/sign-webhook-receipt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sign-webhook-receipt.d.ts","sourceRoot":"","sources":["../src/sign-webhook-receipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,gBAAgB,CAAC;AAEpD,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAE5E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,uBAAuB,GAAG,MAAM,CAGxF"}