@stack0/sdk 0.5.18 → 0.6.1

package/dist/index.js

@@ -432,11 +432,19 @@ var Mailboxes = class {
   }
   http;
   /**
-   * Create a new mailbox
+   * Create a new mailbox. The result carries `webhookSecret`, which signs every
+   * inbound delivery; store it now (only `create` and `rotateSecret` return it).
    */
   async create(request) {
     return this.http.post("/mail/mailboxes", request);
   }
+  /**
+   * Replace a mailbox's webhook secret and return the new one. Deliveries are
+   * signed with the new secret from then on.
+   */
+  async rotateSecret(id) {
+    return this.http.post(`/mail/mailboxes/${id}/rotate-secret`, {});
+  }
   /**
    * Get a mailbox by ID
    */
@@ -1898,6 +1906,7 @@ var CDN = class {
     const params = new URLSearchParams();
     if (request.projectSlug) params.set("projectSlug", request.projectSlug);
     if (request.environment) params.set("environment", request.environment);
+    if (request.folder) params.set("folder", request.folder);
     if (request.periodStart) {
       const date = request.periodStart instanceof Date ? request.periodStart.toISOString() : request.periodStart;
       params.set("periodStart", date);
@@ -2263,6 +2272,112 @@ var CDN = class {
     return this.convertMergeJobDates(job);
   }
   // ============================================================================
+  // Video Render Methods
+  // ============================================================================
+  /**
+   * Render a declarative video spec into a video asset
+   *
+   * The spec describes scenes, layers, timing and media as data. There are no
+   * compositions to write and no code to upload — Stack0 owns the renderer.
+   *
+   * `@stack0/video-spec` has the full types, validation and worked examples;
+   * validating locally before you POST turns a round trip into a type error.
+   *
+   * @example
+   * ```typescript
+   * const job = await cdn.createRenderJob({
+   *   projectSlug: 'my-project',
+   *   spec: {
+   *     canvas: { width: 1080, height: 1920, fps: 30 },
+   *     audio: [{ src: musicAssetId, volume: 0.34 }],
+   *     scenes: [
+   *       {
+   *         id: 'hook',
+   *         duration: 2.5,
+   *         layers: [
+   *           { type: 'image', src: afterImageAssetId, zoom: { from: 1, to: 1.06 } },
+   *           { type: 'caption', text: 'i told my mom\nthe kitchen exploded', position: 'upperThird' },
+   *         ],
+   *       },
+   *       {
+   *         // No duration: the thread derives its own length from the messages
+   *         id: 'payoff',
+   *         layers: [
+   *           {
+   *             type: 'messageThread',
+   *             recipient: 'Mom',
+   *             imageSrc: afterImageAssetId,
+   *             messages: [
+   *               { sender: 'recipient', text: 'you home?', history: true },
+   *               { sender: 'user', text: '[IMAGE]' },
+   *               { sender: 'recipient', text: 'WHAT IS THAT' },
+   *             ],
+   *           },
+   *         ],
+   *       },
+   *     ],
+   *   },
+   *   webhookUrl: 'https://your-app.com/webhook',
+   * });
+   * console.log(job.durationInFrames); // known before rendering starts
+   * ```
+   */
+  async createRenderJob(request) {
+    const response = await this.http.post("/cdn/video/render", request);
+    return this.convertRenderJobDates(response);
+  }
+  /**
+   * Get a render job by ID with output asset details
+   *
+   * @example
+   * ```typescript
+   * const job = await cdn.getRenderJob('job-id');
+   * if (job.status === 'completed' && job.outputAsset) {
+   *   console.log(`Output video: ${job.outputAsset.cdnUrl}`);
+   * }
+   * ```
+   */
+  async getRenderJob(jobId) {
+    const response = await this.http.get(`/cdn/video/render/${jobId}`);
+    return this.convertRenderJobDates(response);
+  }
+  /**
+   * List render jobs with optional filters
+   */
+  async listRenderJobs(request) {
+    const params = new URLSearchParams();
+    params.set("projectSlug", request.projectSlug);
+    if (request.status) params.set("status", request.status);
+    if (request.limit) params.set("limit", request.limit.toString());
+    if (request.offset) params.set("offset", request.offset.toString());
+    const response = await this.http.get(`/cdn/video/render?${params.toString()}`);
+    return {
+      ...response,
+      jobs: response.jobs.map((job) => this.convertRenderJobDates(job))
+    };
+  }
+  /**
+   * Cancel a pending or processing render job
+   */
+  async cancelRenderJob(jobId) {
+    return this.http.post(`/cdn/video/render/${jobId}/cancel`, {});
+  }
+  convertRenderJobDates(job) {
+    if (typeof job.createdAt === "string") {
+      job.createdAt = new Date(job.createdAt);
+    }
+    if (job.updatedAt && typeof job.updatedAt === "string") {
+      job.updatedAt = new Date(job.updatedAt);
+    }
+    if (job.startedAt && typeof job.startedAt === "string") {
+      job.startedAt = new Date(job.startedAt);
+    }
+    if (job.completedAt && typeof job.completedAt === "string") {
+      job.completedAt = new Date(job.completedAt);
+    }
+    return job;
+  }
+  // ============================================================================
   // S3 Import Methods
   // ============================================================================
   /**
@@ -5659,6 +5774,92 @@ var Workflows = class {
   }
 };
 
+// src/mail/webhooks.ts
+var WebhookVerificationError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "WebhookVerificationError";
+  }
+};
+function header(headers, name) {
+  if (typeof headers.get === "function") return headers.get(name) ?? void 0;
+  const record = headers;
+  for (const key of Object.keys(record)) {
+    if (key.toLowerCase() === name) {
+      const v = record[key];
+      return Array.isArray(v) ? v[0] : v;
+    }
+  }
+  return void 0;
+}
+function base64ToBytes(b64) {
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function bytesToBase64(bytes) {
+  let bin = "";
+  for (const b of bytes) bin += String.fromCharCode(b);
+  return btoa(bin);
+}
+async function subtle() {
+  const global = globalThis.crypto;
+  if (global?.subtle) return global.subtle;
+  const specifier = "node:crypto";
+  const nodeCrypto = await import(
+    /* webpackIgnore: true */
+    /* @vite-ignore */
+    specifier
+  );
+  return nodeCrypto.webcrypto.subtle;
+}
+function timingSafeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+async function verifyInboundWebhook(options) {
+  const id = header(options.headers, "webhook-id");
+  const timestamp = header(options.headers, "webhook-timestamp");
+  const signatures = header(options.headers, "webhook-signature");
+  if (!id || !timestamp || !signatures) {
+    throw new WebhookVerificationError("missing webhook-id, webhook-timestamp, or webhook-signature header");
+  }
+  const seconds = Number(timestamp);
+  if (!Number.isInteger(seconds)) throw new WebhookVerificationError("webhook-timestamp is not a whole number");
+  const now = Math.floor((options.now ?? /* @__PURE__ */ new Date()).getTime() / 1e3);
+  const tolerance = options.toleranceSeconds ?? 300;
+  if (Math.abs(now - seconds) > tolerance) {
+    throw new WebhookVerificationError(`webhook-timestamp is more than ${tolerance} seconds from now`);
+  }
+  const body = typeof options.payload === "string" ? options.payload : new TextDecoder().decode(options.payload instanceof ArrayBuffer ? new Uint8Array(options.payload) : options.payload);
+  const secret = options.secret.startsWith("whsec_") ? options.secret.slice(6) : options.secret;
+  const webcrypto = await subtle();
+  const key = await webcrypto.importKey(
+    "raw",
+    base64ToBytes(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const mac = new Uint8Array(
+    await webcrypto.sign("HMAC", key, new TextEncoder().encode(`${id}.${seconds}.${body}`))
+  );
+  const expected = bytesToBase64(mac);
+  const matched = signatures.split(" ").map((s) => s.split(",", 2)).some(([version, sig]) => version === "v1" && sig !== void 0 && timingSafeEqual(sig, expected));
+  if (!matched) throw new WebhookVerificationError("no webhook-signature matches");
+  let payload;
+  try {
+    payload = JSON.parse(body);
+  } catch {
+    throw new WebhookVerificationError("the payload is not JSON");
+  }
+  if (payload.id !== id) throw new WebhookVerificationError("the payload id does not match webhook-id");
+  return payload;
+}
+
 // src/index.ts
 var Stack0 = class {
   http;
@@ -5740,7 +5941,9 @@ exports.Sequences = Sequences;
 exports.Stack0 = Stack0;
 exports.Templates = Templates;
 exports.Webdata = Webdata;
+exports.WebhookVerificationError = WebhookVerificationError;
 exports.Workflows = Workflows;
 exports.default = src_default;
+exports.verifyInboundWebhook = verifyInboundWebhook;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map