@shware/http 0.2.21 → 0.2.23

package/dist/index.cjs

@@ -21,33 +21,21 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
-  AppErrorReason: () => import_reason.AppErrorReason,
-  AuthenticationErrorReason: () => import_reason.AuthenticationErrorReason,
-  ErrorReason: () => import_reason.ErrorReason,
-  ModerationErrorReason: () => import_reason.ModerationErrorReason,
-  MultipartErrorReason: () => import_reason.MultipartErrorReason,
-  NetworkErrorReason: () => import_reason.NetworkErrorReason,
-  StatusErrorReason: () => import_reason.StatusErrorReason,
-  hasText: () => import_string.hasText
+  hasText: () => import_string.hasText,
+  verifyStandardWebhook: () => import_webhook.verifyStandardWebhook
 });
 module.exports = __toCommonJS(index_exports);
-var import_reason = require("./reason.cjs");
 __reExport(index_exports, require("./detail.cjs"), module.exports);
 __reExport(index_exports, require("./status.cjs"), module.exports);
 __reExport(index_exports, require("./vaild.cjs"), module.exports);
 __reExport(index_exports, require("./snowflake.cjs"), module.exports);
 __reExport(index_exports, require("./response.cjs"), module.exports);
 var import_string = require("./utils/string.cjs");
+var import_webhook = require("./webhook.cjs");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  AppErrorReason,
-  AuthenticationErrorReason,
-  ErrorReason,
-  ModerationErrorReason,
-  MultipartErrorReason,
-  NetworkErrorReason,
-  StatusErrorReason,
   hasText,
+  verifyStandardWebhook,
   ...require("./detail.cjs"),
   ...require("./status.cjs"),
   ...require("./vaild.cjs"),

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @example\n * import { Details, Status } from '@repo/error';\n *\n * Status.adapter = () => new Error('Error');\n *\n * const details = Details.new()\n *  .requestInfo({ requestId: '1234567890', servingData: '/v1/tests' })\n *  .errorInfo({ reason: 'ACCOUNT_LOCKED' });\n *\n * throw Status.alreadyExists('xxx').error(details);\n */\n\nexport {\n  NetworkErrorReason,\n  StatusErrorReason,\n  AuthenticationErrorReason,\n  ModerationErrorReason,\n  MultipartErrorReason,\n  AppErrorReason,\n  ErrorReason,\n} from './reason';\n\nexport * from './detail';\nexport * from './status';\nexport * from './vaild';\nexport * from './snowflake';\nexport * from './response';\nexport { hasText } from './utils/string';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA,oBAQO;AAEP,0BAAc,yBAvBd;AAwBA,0BAAc,yBAxBd;AAyBA,0BAAc,wBAzBd;AA0BA,0BAAc,4BA1Bd;AA2BA,0BAAc,2BA3Bd;AA4BA,oBAAwB;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @example\n * import { Details, Status } from '@repo/error';\n *\n * Status.adapter = () => new Error('Error');\n *\n * const details = Details.new()\n *  .requestInfo({ requestId: '1234567890', servingData: '/v1/tests' })\n *  .errorInfo({ reason: 'ACCOUNT_LOCKED' });\n *\n * throw Status.alreadyExists('xxx').error(details);\n */\n\nexport type {\n  NetworkErrorReason,\n  StatusErrorReason,\n  AuthenticationErrorReason,\n  ModerationErrorReason,\n  MultipartErrorReason,\n  AppErrorReason,\n  ErrorReason,\n} from './reason';\n\nexport * from './detail';\nexport * from './status';\nexport * from './vaild';\nexport * from './snowflake';\nexport * from './response';\nexport { hasText } from './utils/string';\nexport { verifyStandardWebhook } from './webhook';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAuBA,0BAAc,yBAvBd;AAwBA,0BAAc,yBAxBd;AAyBA,0BAAc,wBAzBd;AA0BA,0BAAc,4BA1Bd;AA2BA,0BAAc,2BA3Bd;AA4BA,oBAAwB;AACxB,qBAAsC;","names":[]}

package/dist/index.d.cts

@@ -5,4 +5,5 @@ export { Result, valid } from './vaild.cjs';
 export { UidGenerator, uid } from './snowflake.cjs';
 export { Cursor, Empty, Entity, EntityId, InitParams, NextParams, PageParams, PagedResponse, ParentPageParams, PrevParams, Response, pageParamsSchema } from './response.cjs';
 export { hasText } from './utils/string.cjs';
+export { verifyStandardWebhook } from './webhook.cjs';
 import 'zod';

package/dist/index.d.ts

@@ -5,4 +5,5 @@ export { Result, valid } from './vaild.js';
 export { UidGenerator, uid } from './snowflake.js';
 export { Cursor, Empty, Entity, EntityId, InitParams, NextParams, PageParams, PagedResponse, ParentPageParams, PrevParams, Response, pageParamsSchema } from './response.js';
 export { hasText } from './utils/string.js';
+export { verifyStandardWebhook } from './webhook.js';
 import 'zod';

package/dist/index.mjs

@@ -1,27 +1,13 @@
 // src/index.ts
-import {
-  NetworkErrorReason,
-  StatusErrorReason,
-  AuthenticationErrorReason,
-  ModerationErrorReason,
-  MultipartErrorReason,
-  AppErrorReason,
-  ErrorReason
-} from "./reason.mjs";
 export * from "./detail.mjs";
 export * from "./status.mjs";
 export * from "./vaild.mjs";
 export * from "./snowflake.mjs";
 export * from "./response.mjs";
 import { hasText } from "./utils/string.mjs";
+import { verifyStandardWebhook } from "./webhook.mjs";
 export {
-  AppErrorReason,
-  AuthenticationErrorReason,
-  ErrorReason,
-  ModerationErrorReason,
-  MultipartErrorReason,
-  NetworkErrorReason,
-  StatusErrorReason,
-  hasText
+  hasText,
+  verifyStandardWebhook
 };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @example\n * import { Details, Status } from '@repo/error';\n *\n * Status.adapter = () => new Error('Error');\n *\n * const details = Details.new()\n *  .requestInfo({ requestId: '1234567890', servingData: '/v1/tests' })\n *  .errorInfo({ reason: 'ACCOUNT_LOCKED' });\n *\n * throw Status.alreadyExists('xxx').error(details);\n */\n\nexport {\n  NetworkErrorReason,\n  StatusErrorReason,\n  AuthenticationErrorReason,\n  ModerationErrorReason,\n  MultipartErrorReason,\n  AppErrorReason,\n  ErrorReason,\n} from './reason';\n\nexport * from './detail';\nexport * from './status';\nexport * from './vaild';\nexport * from './snowflake';\nexport * from './response';\nexport { hasText } from './utils/string';\n"],"mappings":";AAaA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,SAAS,eAAe;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * @example\n * import { Details, Status } from '@repo/error';\n *\n * Status.adapter = () => new Error('Error');\n *\n * const details = Details.new()\n *  .requestInfo({ requestId: '1234567890', servingData: '/v1/tests' })\n *  .errorInfo({ reason: 'ACCOUNT_LOCKED' });\n *\n * throw Status.alreadyExists('xxx').error(details);\n */\n\nexport type {\n  NetworkErrorReason,\n  StatusErrorReason,\n  AuthenticationErrorReason,\n  ModerationErrorReason,\n  MultipartErrorReason,\n  AppErrorReason,\n  ErrorReason,\n} from './reason';\n\nexport * from './detail';\nexport * from './status';\nexport * from './vaild';\nexport * from './snowflake';\nexport * from './response';\nexport { hasText } from './utils/string';\nexport { verifyStandardWebhook } from './webhook';\n"],"mappings":";AAuBA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,SAAS,eAAe;AACxB,SAAS,6BAA6B;","names":[]}

package/dist/webhook.cjs

@@ -0,0 +1,77 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/webhook.ts
+var webhook_exports = {};
+__export(webhook_exports, {
+  verifyStandardWebhook: () => verifyStandardWebhook
+});
+module.exports = __toCommonJS(webhook_exports);
+var import_crypto = require("crypto");
+var import_status = require("./status.cjs");
+var WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60;
+function verifyTimestamp(webhookTimestamp) {
+  const now = Math.floor(Date.now() / 1e3);
+  const timestamp = parseInt(webhookTimestamp, 10);
+  if (isNaN(timestamp)) {
+    throw import_status.Status.invalidArgument("invalid webhook timestamp").error();
+  }
+  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {
+    throw import_status.Status.invalidArgument("webhook timestamp is too old").error();
+  }
+  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {
+    throw import_status.Status.invalidArgument("webhook timestamp is too new").error();
+  }
+  return timestamp;
+}
+async function verifyStandardWebhook(headers, payload, secret) {
+  const webhookId = headers["webhook-id"];
+  const webhookTimestamp = headers["webhook-timestamp"];
+  const webhookSignature = headers["webhook-signature"];
+  if (!webhookId || !webhookTimestamp || !webhookSignature) {
+    throw import_status.Status.invalidArgument("invalid webhook").error();
+  }
+  const timestamp = verifyTimestamp(webhookTimestamp);
+  const encoder = new TextEncoder();
+  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);
+  const hmac = (0, import_crypto.createHmac)("sha256", Buffer.from(secret, "base64"));
+  const digest = hmac.update(toSign).digest();
+  const computedSignature = `v1,${Buffer.from(digest).toString("base64")}`;
+  const expectedSignature = computedSignature.split(",")[1];
+  const passedSignatures = webhookSignature.split(" ");
+  for (const versionedSignature of passedSignatures) {
+    const [version, signature] = versionedSignature.split(",");
+    if (version !== "v1") continue;
+    if ((0, import_crypto.timingSafeEqual)(encoder.encode(signature), encoder.encode(expectedSignature))) {
+      try {
+        return JSON.parse(payload);
+      } catch (_) {
+        console.error("invalid payload", payload);
+        throw import_status.Status.invalidArgument("invalid webhook payload").error();
+      }
+    }
+  }
+  console.error("webhook verification failed");
+  throw import_status.Status.invalidArgument("invalid webhook signature").error();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  verifyStandardWebhook
+});
+//# sourceMappingURL=webhook.cjs.map

package/dist/webhook.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhook.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'crypto';\nimport { Status } from './status';\n\nconst WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60; // 5 minutes\n\nfunction verifyTimestamp(webhookTimestamp: string) {\n  const now = Math.floor(Date.now() / 1000);\n  const timestamp = parseInt(webhookTimestamp, 10);\n  if (isNaN(timestamp)) {\n    throw Status.invalidArgument('invalid webhook timestamp').error();\n  }\n  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too old').error();\n  }\n  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too new').error();\n  }\n  return timestamp;\n}\n\n/**\n * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript\n * hono usage:\n * ```ts\n * const webhook = await verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');\n * ```\n */\nexport async function verifyStandardWebhook(\n  headers: Record<string, string>,\n  payload: string,\n  secret: string\n) {\n  const webhookId = headers['webhook-id'];\n  const webhookTimestamp = headers['webhook-timestamp'];\n  const webhookSignature = headers['webhook-signature'];\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    throw Status.invalidArgument('invalid webhook').error();\n  }\n  const timestamp = verifyTimestamp(webhookTimestamp);\n\n  const encoder = new TextEncoder();\n  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);\n  const hmac = createHmac('sha256', Buffer.from(secret, 'base64'));\n  const digest = hmac.update(toSign).digest();\n\n  const computedSignature = `v1,${Buffer.from(digest).toString('base64')}`;\n  const expectedSignature = computedSignature.split(',')[1];\n  const passedSignatures = webhookSignature.split(' ');\n\n  for (const versionedSignature of passedSignatures) {\n    const [version, signature] = versionedSignature.split(',');\n    if (version !== 'v1') continue;\n    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {\n      try {\n        return JSON.parse(payload);\n      } catch (_) {\n        console.error('invalid payload', payload);\n        throw Status.invalidArgument('invalid webhook payload').error();\n      }\n    }\n  }\n  console.error('webhook verification failed');\n  throw Status.invalidArgument('invalid webhook signature').error();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAA4C;AAC5C,oBAAuB;AAEvB,IAAM,+BAA+B,IAAI;AAEzC,SAAS,gBAAgB,kBAA0B;AACjD,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,YAAY,SAAS,kBAAkB,EAAE;AAC/C,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,qBAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAAA,EAClE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,qBAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,qBAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,SAAO;AACT;AASA,eAAsB,sBACpB,SACA,SACA,QACA;AACA,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,MAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBAAkB;AACxD,UAAM,qBAAO,gBAAgB,iBAAiB,EAAE,MAAM;AAAA,EACxD;AACA,QAAM,YAAY,gBAAgB,gBAAgB;AAElD,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,SAAS,QAAQ,OAAO,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE;AACpE,QAAM,WAAO,0BAAW,UAAU,OAAO,KAAK,QAAQ,QAAQ,CAAC;AAC/D,QAAM,SAAS,KAAK,OAAO,MAAM,EAAE,OAAO;AAE1C,QAAM,oBAAoB,MAAM,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,CAAC;AACtE,QAAM,oBAAoB,kBAAkB,MAAM,GAAG,EAAE,CAAC;AACxD,QAAM,mBAAmB,iBAAiB,MAAM,GAAG;AAEnD,aAAW,sBAAsB,kBAAkB;AACjD,UAAM,CAAC,SAAS,SAAS,IAAI,mBAAmB,MAAM,GAAG;AACzD,QAAI,YAAY,KAAM;AACtB,YAAI,+BAAgB,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,iBAAiB,CAAC,GAAG;AACjF,UAAI;AACF,eAAO,KAAK,MAAM,OAAO;AAAA,MAC3B,SAAS,GAAG;AACV,gBAAQ,MAAM,mBAAmB,OAAO;AACxC,cAAM,qBAAO,gBAAgB,yBAAyB,EAAE,MAAM;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACA,UAAQ,MAAM,6BAA6B;AAC3C,QAAM,qBAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAClE;","names":[]}

package/dist/webhook.d.cts

@@ -0,0 +1,10 @@
+/**
+ * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript
+ * hono usage:
+ * ```ts
+ * const webhook = await verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');
+ * ```
+ */
+declare function verifyStandardWebhook(headers: Record<string, string>, payload: string, secret: string): Promise<any>;
+
+export { verifyStandardWebhook };

package/dist/webhook.d.ts

@@ -0,0 +1,10 @@
+/**
+ * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript
+ * hono usage:
+ * ```ts
+ * const webhook = await verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');
+ * ```
+ */
+declare function verifyStandardWebhook(headers: Record<string, string>, payload: string, secret: string): Promise<any>;
+
+export { verifyStandardWebhook };

package/dist/webhook.mjs

@@ -0,0 +1,52 @@
+// src/webhook.ts
+import { createHmac, timingSafeEqual } from "crypto";
+import { Status } from "./status.mjs";
+var WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60;
+function verifyTimestamp(webhookTimestamp) {
+  const now = Math.floor(Date.now() / 1e3);
+  const timestamp = parseInt(webhookTimestamp, 10);
+  if (isNaN(timestamp)) {
+    throw Status.invalidArgument("invalid webhook timestamp").error();
+  }
+  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {
+    throw Status.invalidArgument("webhook timestamp is too old").error();
+  }
+  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {
+    throw Status.invalidArgument("webhook timestamp is too new").error();
+  }
+  return timestamp;
+}
+async function verifyStandardWebhook(headers, payload, secret) {
+  const webhookId = headers["webhook-id"];
+  const webhookTimestamp = headers["webhook-timestamp"];
+  const webhookSignature = headers["webhook-signature"];
+  if (!webhookId || !webhookTimestamp || !webhookSignature) {
+    throw Status.invalidArgument("invalid webhook").error();
+  }
+  const timestamp = verifyTimestamp(webhookTimestamp);
+  const encoder = new TextEncoder();
+  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);
+  const hmac = createHmac("sha256", Buffer.from(secret, "base64"));
+  const digest = hmac.update(toSign).digest();
+  const computedSignature = `v1,${Buffer.from(digest).toString("base64")}`;
+  const expectedSignature = computedSignature.split(",")[1];
+  const passedSignatures = webhookSignature.split(" ");
+  for (const versionedSignature of passedSignatures) {
+    const [version, signature] = versionedSignature.split(",");
+    if (version !== "v1") continue;
+    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {
+      try {
+        return JSON.parse(payload);
+      } catch (_) {
+        console.error("invalid payload", payload);
+        throw Status.invalidArgument("invalid webhook payload").error();
+      }
+    }
+  }
+  console.error("webhook verification failed");
+  throw Status.invalidArgument("invalid webhook signature").error();
+}
+export {
+  verifyStandardWebhook
+};
+//# sourceMappingURL=webhook.mjs.map

package/dist/webhook.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhook.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'crypto';\nimport { Status } from './status';\n\nconst WEBHOOK_TOLERANCE_IN_SECONDS = 5 * 60; // 5 minutes\n\nfunction verifyTimestamp(webhookTimestamp: string) {\n  const now = Math.floor(Date.now() / 1000);\n  const timestamp = parseInt(webhookTimestamp, 10);\n  if (isNaN(timestamp)) {\n    throw Status.invalidArgument('invalid webhook timestamp').error();\n  }\n  if (timestamp < now - WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too old').error();\n  }\n  if (timestamp > now + WEBHOOK_TOLERANCE_IN_SECONDS) {\n    throw Status.invalidArgument('webhook timestamp is too new').error();\n  }\n  return timestamp;\n}\n\n/**\n * reference: https://github.com/standard-webhooks/standard-webhooks/tree/main/libraries/javascript\n * hono usage:\n * ```ts\n * const webhook = await verifyStandardWebhook(c.req.header(), await c.req.text(), 'secret');\n * ```\n */\nexport async function verifyStandardWebhook(\n  headers: Record<string, string>,\n  payload: string,\n  secret: string\n) {\n  const webhookId = headers['webhook-id'];\n  const webhookTimestamp = headers['webhook-timestamp'];\n  const webhookSignature = headers['webhook-signature'];\n  if (!webhookId || !webhookTimestamp || !webhookSignature) {\n    throw Status.invalidArgument('invalid webhook').error();\n  }\n  const timestamp = verifyTimestamp(webhookTimestamp);\n\n  const encoder = new TextEncoder();\n  const toSign = encoder.encode(`${webhookId}.${timestamp}.${payload}`);\n  const hmac = createHmac('sha256', Buffer.from(secret, 'base64'));\n  const digest = hmac.update(toSign).digest();\n\n  const computedSignature = `v1,${Buffer.from(digest).toString('base64')}`;\n  const expectedSignature = computedSignature.split(',')[1];\n  const passedSignatures = webhookSignature.split(' ');\n\n  for (const versionedSignature of passedSignatures) {\n    const [version, signature] = versionedSignature.split(',');\n    if (version !== 'v1') continue;\n    if (timingSafeEqual(encoder.encode(signature), encoder.encode(expectedSignature))) {\n      try {\n        return JSON.parse(payload);\n      } catch (_) {\n        console.error('invalid payload', payload);\n        throw Status.invalidArgument('invalid webhook payload').error();\n      }\n    }\n  }\n  console.error('webhook verification failed');\n  throw Status.invalidArgument('invalid webhook signature').error();\n}\n"],"mappings":";AAAA,SAAS,YAAY,uBAAuB;AAC5C,SAAS,cAAc;AAEvB,IAAM,+BAA+B,IAAI;AAEzC,SAAS,gBAAgB,kBAA0B;AACjD,QAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACxC,QAAM,YAAY,SAAS,kBAAkB,EAAE;AAC/C,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,OAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAAA,EAClE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,OAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,MAAI,YAAY,MAAM,8BAA8B;AAClD,UAAM,OAAO,gBAAgB,8BAA8B,EAAE,MAAM;AAAA,EACrE;AACA,SAAO;AACT;AASA,eAAsB,sBACpB,SACA,SACA,QACA;AACA,QAAM,YAAY,QAAQ,YAAY;AACtC,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,QAAM,mBAAmB,QAAQ,mBAAmB;AACpD,MAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,kBAAkB;AACxD,UAAM,OAAO,gBAAgB,iBAAiB,EAAE,MAAM;AAAA,EACxD;AACA,QAAM,YAAY,gBAAgB,gBAAgB;AAElD,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,SAAS,QAAQ,OAAO,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE;AACpE,QAAM,OAAO,WAAW,UAAU,OAAO,KAAK,QAAQ,QAAQ,CAAC;AAC/D,QAAM,SAAS,KAAK,OAAO,MAAM,EAAE,OAAO;AAE1C,QAAM,oBAAoB,MAAM,OAAO,KAAK,MAAM,EAAE,SAAS,QAAQ,CAAC;AACtE,QAAM,oBAAoB,kBAAkB,MAAM,GAAG,EAAE,CAAC;AACxD,QAAM,mBAAmB,iBAAiB,MAAM,GAAG;AAEnD,aAAW,sBAAsB,kBAAkB;AACjD,UAAM,CAAC,SAAS,SAAS,IAAI,mBAAmB,MAAM,GAAG;AACzD,QAAI,YAAY,KAAM;AACtB,QAAI,gBAAgB,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,iBAAiB,CAAC,GAAG;AACjF,UAAI;AACF,eAAO,KAAK,MAAM,OAAO;AAAA,MAC3B,SAAS,GAAG;AACV,gBAAQ,MAAM,mBAAmB,OAAO;AACxC,cAAM,OAAO,gBAAgB,yBAAyB,EAAE,MAAM;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AACA,UAAQ,MAAM,6BAA6B;AAC3C,QAAM,OAAO,gBAAgB,2BAA2B,EAAE,MAAM;AAClE;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shware/http",
-  "version": "0.2.21",
+  "version": "0.2.23",
   "private": false,
   "type": "module",
   "scripts": {
@@ -30,16 +30,16 @@
   ],
   "devDependencies": {
     "@types/jest": "^29.5.14",
-    "@types/node": "^22.13.13",
+    "@types/node": "^22.15.18",
     "jest": "^29.7.0",
-    "ts-jest": "^29.3.0",
-    "typescript": "^5.8.2"
+    "ts-jest": "^29.3.4",
+    "typescript": "^5.8.3"
   },
   "dependencies": {
-    "zod": "^3.24.2"
+    "zod": "^3.24.4"
   },
   "peerDependencies": {
-    "hono": "^4.7.5"
+    "hono": "^4.7.9"
   },
   "peerDependenciesMeta": {
     "hono": {