@spicyapi/sdk 0.1.0

package/dist/src/sdk/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/sdk/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEpC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB;CAU3D;AAED,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIpD;AAED,qBAAa,iBAAkB,SAAQ,mBAAmB;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAK9B;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;gBAE9B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,UAAU;CAOrE;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C"}

package/dist/src/sdk/errors.js

@@ -0,0 +1,53 @@
+export class SpicyApiError extends Error {
+    status;
+    code;
+    requestId;
+    retryAfterSeconds;
+    rateLimitLimit;
+    rateLimitRemaining;
+    constructor(message, options) {
+        super(message);
+        this.name = "SpicyApiError";
+        this.status = options.status;
+        this.code = options.code;
+        this.requestId = options.requestId;
+        this.retryAfterSeconds = options.retryAfterSeconds;
+        this.rateLimitLimit = options.rateLimitLimit;
+        this.rateLimitRemaining = options.rateLimitRemaining;
+    }
+}
+export class SpicyTransportError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "SpicyTransportError";
+    }
+}
+export class SpicyTimeoutError extends SpicyTransportError {
+    timeoutMs;
+    constructor(timeoutMs) {
+        super(`request exceeded the local ${timeoutMs}ms timeout`);
+        this.name = "SpicyTimeoutError";
+        this.timeoutMs = timeoutMs;
+    }
+}
+export class SpicyWaitTimeoutError extends Error {
+    taskId;
+    timeoutMs;
+    lastTask;
+    constructor(taskId, timeoutMs, lastTask) {
+        super(`task ${taskId} did not reach a terminal state within ${timeoutMs}ms`);
+        this.name = "SpicyWaitTimeoutError";
+        this.taskId = taskId;
+        this.timeoutMs = timeoutMs;
+        this.lastTask = lastTask;
+    }
+}
+export class SpicyUploadError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.name = "SpicyUploadError";
+        this.status = status;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/src/sdk/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/sdk/errors.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAS;IACf,IAAI,CAAqB;IACzB,SAAS,CAAqB;IAC9B,iBAAiB,CAAqB;IACtC,cAAc,CAAqB;IACnC,kBAAkB,CAAqB;IAEhD,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACvD,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,mBAAmB;IAC/C,SAAS,CAAS;IAE3B,YAAY,SAAiB;QAC3B,KAAK,CAAC,8BAA8B,SAAS,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,QAAQ,CAAyB;IAE1C,YAAY,MAAc,EAAE,SAAiB,EAAE,QAAqB;QAClE,KAAK,CAAC,QAAQ,MAAM,0CAA0C,SAAS,IAAI,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,MAAM,CAAS;IAExB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/src/sdk/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./client.js";
+export * from "./errors.js";
+export type * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/sdk/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/sdk/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,mBAAmB,YAAY,CAAC"}

package/dist/src/sdk/index.js

@@ -0,0 +1,3 @@
+export * from "./client.js";
+export * from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/src/sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/sdk/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}

package/dist/src/sdk/types.d.ts

@@ -0,0 +1,73 @@
+import type { components } from "../generated/openapi.js";
+export type ApiModel = components["schemas"]["APIModel"];
+export type ApiModelPrice = components["schemas"]["APIModelPrice"];
+export type ModelList = components["schemas"]["APIModelList"];
+export type Balance = components["schemas"]["Balance"];
+export type TaskRecord = components["schemas"]["TaskRecord"];
+export type TaskState = TaskRecord["state"];
+export type CreateTaskResult = components["schemas"]["CreateTaskResponse"];
+export type RetryTaskResult = components["schemas"]["RetryTaskResponse"];
+export type UploadTicket = components["schemas"]["UploadURLResponse"];
+export type UploadedFile = components["schemas"]["FileCommitResponse"];
+export type DownloadTicket = components["schemas"]["DownloadURLResponse"];
+export type UploadContentType = components["schemas"]["UploadURLRequest"]["contentType"];
+export interface CreateTaskInput {
+    model: string;
+    input: Record<string, unknown>;
+    callBackUrl?: string;
+    /** Caller-declared execution metadata forwarded without a platform content gate. */
+    mature?: boolean;
+}
+export interface ListModelsOptions {
+    modality?: "image" | "video" | "audio" | "text" | undefined;
+    provider?: string | undefined;
+    task?: string | undefined;
+    search?: string | undefined;
+    includeSchema?: boolean | undefined;
+    includeExamples?: boolean | undefined;
+    signal?: AbortSignal | undefined;
+}
+export interface RequestOptions {
+    signal?: AbortSignal | undefined;
+}
+export interface BillableRequestOptions extends RequestOptions {
+    idempotencyKey?: string | undefined;
+}
+export interface WaitForTaskOptions extends RequestOptions {
+    intervalMs?: number;
+    timeoutMs?: number;
+    onUpdate?: ((task: TaskRecord) => void | Promise<void>) | undefined;
+}
+export interface ProbeResult {
+    path: "/healthz" | "/readyz";
+    ok: boolean;
+    status: number;
+    body: string;
+    error?: string;
+}
+export interface ServiceStatus {
+    operational: boolean;
+    health: ProbeResult;
+    readiness: ProbeResult;
+    checkedAt: string;
+}
+export interface SpicyClientOptions {
+    apiKey?: string | undefined;
+    apiBaseUrl?: string | undefined;
+    serviceBaseUrl?: string | undefined;
+    timeoutMs?: number;
+    maxRetries?: number;
+    retryBaseDelayMs?: number;
+    maxRetryDelayMs?: number;
+    fetch?: typeof fetch | undefined;
+    now?: (() => number) | undefined;
+    random?: (() => number) | undefined;
+    sleep?: ((milliseconds: number, signal?: AbortSignal) => Promise<void>) | undefined;
+}
+export interface UploadBytesOptions extends RequestOptions {
+    contentType: UploadContentType;
+}
+export interface UploadFileOptions extends RequestOptions {
+    contentType?: UploadContentType | undefined;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/sdk/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/sdk/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC;AACzD,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC;AAC9D,MAAM,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC;AACvD,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;AAC5C,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,CAAC;AAC3E,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,mBAAmB,CAAC,CAAC;AACzE,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACvE,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAC,CAAC,aAAa,CAAC,CAAC;AAEzF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CACrE;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;IACjC,MAAM,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;IACpC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CACrF;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,WAAW,EAAE,iBAAiB,CAAC;CAChC;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CAC7C"}

package/dist/src/sdk/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/sdk/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/sdk/types.ts"],"names":[],"mappings":""}

package/dist/src/webhooks/index.d.ts

@@ -0,0 +1,28 @@
+import type { components } from "../generated/openapi.js";
+export type WebhookPayload = components["schemas"]["LegacyWebhookPayload"] | components["schemas"]["TaskRecordEnvelope"];
+export type WebhookPayloadVersion = 1 | 2;
+export interface VerifyWebhookOptions {
+    rawBody: string | Uint8Array;
+    timestamp: string;
+    signature: string;
+    payloadVersion: WebhookPayloadVersion;
+    secret: string;
+    toleranceSeconds?: number;
+    now?: () => number;
+    maxBodyBytes?: number;
+}
+export interface VerifiedWebhook<T extends WebhookPayload = WebhookPayload> {
+    payload: T;
+    payloadVersion: WebhookPayloadVersion;
+    taskId: string;
+    deliveryId?: string;
+    timestamp: number;
+}
+export type WebhookVerificationReason = "body_too_large" | "invalid_json" | "invalid_payload" | "invalid_secret" | "invalid_signature" | "invalid_timestamp" | "stale_timestamp";
+export declare class SpicyWebhookVerificationError extends Error {
+    readonly reason: WebhookVerificationReason;
+    constructor(reason: WebhookVerificationReason, message: string);
+}
+export declare function computeWebhookSignature(taskId: string, timestamp: string | number, rawBody: string | Uint8Array, secret: string): string;
+export declare function verifyWebhook<T extends WebhookPayload = WebhookPayload>(options: VerifyWebhookOptions): VerifiedWebhook<T>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/webhooks/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,MAAM,cAAc,GACxB,UAAU,CAAC,SAAS,CAAC,CAAC,sBAAsB,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,CAAC;AAE9F,MAAM,MAAM,qBAAqB,GAAG,CAAC,GAAG,CAAC,CAAC;AAE1C,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,qBAAqB,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,cAAc,GAAG,cAAc;IACxE,OAAO,EAAE,CAAC,CAAC;IACX,cAAc,EAAE,qBAAqB,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,yBAAyB,GACjC,gBAAgB,GAChB,cAAc,GACd,iBAAiB,GACjB,gBAAgB,GAChB,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;gBAE/B,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM;CAK/D;AAgBD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAAG,MAAM,EAC1B,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,MAAM,EAAE,MAAM,GACb,MAAM,CAGR;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,cAAc,GAAG,cAAc,EACrE,OAAO,EAAE,oBAAoB,GAC5B,eAAe,CAAC,CAAC,CAAC,CAgFpB"}

package/dist/src/webhooks/index.js

@@ -0,0 +1,83 @@
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+export class SpicyWebhookVerificationError extends Error {
+    reason;
+    constructor(reason, message) {
+        super(message);
+        this.name = "SpicyWebhookVerificationError";
+        this.reason = reason;
+    }
+}
+function rawBytes(rawBody) {
+    return typeof rawBody === "string" ? new TextEncoder().encode(rawBody) : rawBody;
+}
+function extractTaskId(payload, version) {
+    if (payload === null || typeof payload !== "object" || Array.isArray(payload))
+        return undefined;
+    const record = payload;
+    if (version === 1)
+        return typeof record.task_id === "string" ? record.task_id : undefined;
+    if (record.data === null || typeof record.data !== "object" || Array.isArray(record.data))
+        return undefined;
+    const data = record.data;
+    return typeof data.taskId === "string" ? data.taskId : undefined;
+}
+export function computeWebhookSignature(taskId, timestamp, rawBody, secret) {
+    const digest = createHash("sha256").update(rawBytes(rawBody)).digest("hex");
+    return createHmac("sha256", secret).update(`${taskId}.${timestamp}.${digest}`).digest("base64");
+}
+export function verifyWebhook(options) {
+    const bytes = rawBytes(options.rawBody);
+    const maxBodyBytes = options.maxBodyBytes ?? 1_048_576;
+    if (bytes.byteLength > maxBodyBytes) {
+        throw new SpicyWebhookVerificationError("body_too_large", `webhook body exceeds ${maxBodyBytes} bytes`);
+    }
+    if (!options.secret.trim()) {
+        throw new SpicyWebhookVerificationError("invalid_secret", "webhook secret is required");
+    }
+    if (!/^\d+$/.test(options.timestamp)) {
+        throw new SpicyWebhookVerificationError("invalid_timestamp", "webhook timestamp must be Unix seconds");
+    }
+    let payload;
+    try {
+        payload = JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        throw new SpicyWebhookVerificationError("invalid_json", "webhook body is not valid JSON");
+    }
+    const taskId = extractTaskId(payload, options.payloadVersion);
+    if (!taskId) {
+        throw new SpicyWebhookVerificationError("invalid_payload", `webhook payload version ${options.payloadVersion} does not contain a task ID`);
+    }
+    const expected = Buffer.from(computeWebhookSignature(taskId, options.timestamp, bytes, options.secret), "base64");
+    const suppliedRaw = Buffer.from(options.signature, "base64");
+    const supplied = Buffer.alloc(expected.byteLength);
+    suppliedRaw.copy(supplied, 0, 0, expected.byteLength);
+    const signatureMatches = suppliedRaw.byteLength === expected.byteLength && timingSafeEqual(expected, supplied);
+    if (!signatureMatches) {
+        throw new SpicyWebhookVerificationError("invalid_signature", "webhook signature does not match");
+    }
+    const timestamp = Number(options.timestamp);
+    if (!Number.isSafeInteger(timestamp)) {
+        throw new SpicyWebhookVerificationError("invalid_timestamp", "webhook timestamp is outside the safe range");
+    }
+    const toleranceSeconds = options.toleranceSeconds ?? 300;
+    if (!Number.isInteger(toleranceSeconds) || toleranceSeconds < 0 || toleranceSeconds > 86_400) {
+        throw new TypeError("toleranceSeconds must be an integer between 0 and 86400");
+    }
+    const nowSeconds = Math.floor((options.now ?? Date.now)() / 1_000);
+    if (Math.abs(nowSeconds - timestamp) > toleranceSeconds) {
+        throw new SpicyWebhookVerificationError("stale_timestamp", "webhook timestamp is outside the tolerance window");
+    }
+    const record = payload;
+    const deliveryId = options.payloadVersion === 2 && typeof record.request_id === "string"
+        ? record.request_id
+        : undefined;
+    return {
+        payload: payload,
+        payloadVersion: options.payloadVersion,
+        taskId,
+        ...(deliveryId === undefined ? {} : { deliveryId }),
+        timestamp,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/src/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/webhooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAqCtE,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAC7C,MAAM,CAA4B;IAE3C,YAAY,MAAiC,EAAE,OAAe;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,OAA4B;IAC5C,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACnF,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,OAA8B;IACrE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChG,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,MAAM,IAAI,GAAG,MAAM,CAAC,IAA+B,CAAC;IACpD,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,SAA0B,EAC1B,OAA4B,EAC5B,MAAc;IAEd,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAA6B;IAE7B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC;IACvD,IAAI,KAAK,CAAC,UAAU,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,6BAA6B,CACrC,gBAAgB,EAChB,wBAAwB,YAAY,QAAQ,CAC7C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,6BAA6B,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,6BAA6B,CACrC,mBAAmB,EACnB,wCAAwC,CACzC,CAAC;IACJ,CAAC;IAED,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,6BAA6B,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,6BAA6B,CACrC,iBAAiB,EACjB,2BAA2B,OAAO,CAAC,cAAc,6BAA6B,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAC1B,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EACzE,QAAQ,CACT,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnD,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,gBAAgB,GACpB,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,6BAA6B,CACrC,mBAAmB,EACnB,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,6BAA6B,CACrC,mBAAmB,EACnB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,IAAI,gBAAgB,GAAG,MAAM,EAAE,CAAC;QAC7F,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC,GAAG,gBAAgB,EAAE,CAAC;QACxD,MAAM,IAAI,6BAA6B,CACrC,iBAAiB,EACjB,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,MAAM,UAAU,GACd,OAAO,CAAC,cAAc,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACnE,CAAC,CAAC,MAAM,CAAC,UAAU;QACnB,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,OAAO,EAAE,OAAY;QACrB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,MAAM;QACN,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,SAAS;KACV,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@spicyapi/sdk",
+  "version": "0.1.0",
+  "description": "Official TypeScript SDK and typed public API contract for SpicyAPI",
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SpicyAPI/spicy-devkit.git",
+    "directory": "packages/sdk"
+  },
+  "homepage": "https://spicyapi.ai",
+  "bugs": {
+    "url": "https://spicyapi.ai/contact"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "main": "./dist/src/index.js",
+  "types": "./dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "import": "./dist/src/index.js"
+    },
+    "./webhooks": {
+      "types": "./dist/src/webhooks/index.d.ts",
+      "import": "./dist/src/webhooks/index.js"
+    },
+    "./openapi": {
+      "types": "./dist/src/generated/openapi.d.ts",
+      "import": "./dist/src/generated/openapi.js"
+    }
+  },
+  "files": [
+    "dist/src",
+    "contracts/openapi.yaml",
+    "README.md",
+    "SECURITY.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}