@tanqory/plugin-sdk 0.2.0

package/dist/client.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TanqoryStoreClient = void 0;
+exports.createTanqoryApp = createTanqoryApp;
+const auth_1 = require("./auth");
+const errors_1 = require("./errors");
+/**
+ * A REST client for one store.
+ *
+ * Paths are relative to that store: `get('/orders')` reaches
+ * `/api/v1/stores/<storeId>/orders`. You never assemble a store path yourself,
+ * which is the point — a hand-built path is how an app ends up reading a store
+ * it was not installed on and getting a confusing 403 instead of a clear one.
+ *
+ * There is no `baseURL` option, and no way to name a host. Tanqory runs one
+ * store's data in one of several regional cells, and which cell is not
+ * something an app should know, cache, or get wrong: the platform edge resolves
+ * it per request from the store id already in the path.
+ */
+class TanqoryStoreClient {
+    auth;
+    storeId;
+    apiBase;
+    constructor(auth, storeId, apiBase) {
+        this.auth = auth;
+        this.storeId = storeId;
+        this.apiBase = apiBase;
+    }
+    get(path, options) {
+        return this.request('GET', path, options);
+    }
+    post(path, body, options) {
+        return this.request('POST', path, { ...options, body });
+    }
+    put(path, body, options) {
+        return this.request('PUT', path, { ...options, body });
+    }
+    patch(path, body, options) {
+        return this.request('PATCH', path, { ...options, body });
+    }
+    delete(path, options) {
+        return this.request('DELETE', path, options);
+    }
+    /** What the merchant granted this app on this store. */
+    scopes() {
+        return this.auth.scopesFor(this.storeId);
+    }
+    async request(method, path, options = {}, retriedAfter401 = false) {
+        const url = new URL(`${this.apiBase}/api/v1/stores/${this.storeId}${path.startsWith('/') ? path : `/${path}`}`);
+        for (const [key, value] of Object.entries(options.query ?? {})) {
+            if (value !== undefined)
+                url.searchParams.set(key, String(value));
+        }
+        const token = await this.auth.tokenFor(this.storeId);
+        const response = await fetch(url, {
+            method,
+            headers: {
+                authorization: `Bearer ${token}`,
+                accept: 'application/json',
+                ...(options.body === undefined ? {} : { 'content-type': 'application/json' }),
+                ...options.headers,
+            },
+            body: options.body === undefined ? undefined : JSON.stringify(options.body),
+            signal: options.signal,
+        });
+        // A 401 here usually means the token aged out between the cache check and
+        // the request landing. Drop it and try once more; a second 401 is a real
+        // rejection — most often the merchant uninstalled while we were working.
+        if (response.status === 401 && !retriedAfter401) {
+            this.auth.invalidate(this.storeId);
+            return this.request(method, path, options, true);
+        }
+        if (response.status === 401)
+            throw new errors_1.TanqoryAuthError();
+        // Deliberately its own type. A 403 from Tanqory means the merchant did not
+        // grant this scope, or apps cannot use that endpoint at all — retrying or
+        // re-authenticating will never fix it, and treating it as a generic failure
+        // sends apps into retry loops that look like abuse from our side.
+        if (response.status === 403) {
+            throw new errors_1.TanqoryScopeError(await this.messageFrom(response));
+        }
+        if (!response.ok) {
+            throw new errors_1.TanqoryError(await this.messageFrom(response), response.status);
+        }
+        if (response.status === 204)
+            return undefined;
+        return (await response.json());
+    }
+    async messageFrom(response) {
+        try {
+            const body = (await response.json());
+            return body.message ?? body.error ?? `Request failed with ${response.status}.`;
+        }
+        catch {
+            return `Request failed with ${response.status}.`;
+        }
+    }
+}
+exports.TanqoryStoreClient = TanqoryStoreClient;
+/**
+ * Entry point for server-side work.
+ *
+ * ```ts
+ * const tanqory = createTanqoryApp({
+ *   clientId: process.env.TANQORY_CLIENT_ID!,
+ *   clientSecret: process.env.TANQORY_CLIENT_SECRET!,
+ * })
+ *
+ * const orders = await tanqory.store(storeId).get('/orders', { query: { limit: 5 } })
+ * ```
+ */
+function createTanqoryApp(credentials) {
+    const auth = new auth_1.TanqoryAuth(credentials);
+    const apiBase = (credentials.apiBase ??
+        process.env.TANQORY_API_BASE ??
+        'https://api.tanqory.com').replace(/\/+$/, '');
+    const clients = new Map();
+    return {
+        /** A client bound to one store. Memoised, so calling it in a loop is free. */
+        store(storeId) {
+            let client = clients.get(storeId);
+            if (!client) {
+                client = new TanqoryStoreClient(auth, storeId, apiBase);
+                clients.set(storeId, client);
+            }
+            return client;
+        },
+        auth,
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAgIA,4CAsBC;AAtJD,iCAAgE;AAChE,qCAA4E;AAS5E;;;;;;;;;;;;GAYG;AACH,MAAa,kBAAkB;IAEV;IACA;IACA;IAHnB,YACmB,IAAiB,EACjB,OAAe,EACf,OAAe;QAFf,SAAI,GAAJ,IAAI,CAAa;QACjB,YAAO,GAAP,OAAO,CAAQ;QACf,YAAO,GAAP,OAAO,CAAQ;IAC/B,CAAC;IAEJ,GAAG,CAAc,IAAY,EAAE,OAAwB;QACrD,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAC9C,CAAC;IAED,IAAI,CAAc,IAAY,EAAE,IAAc,EAAE,OAAwB;QACtE,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;IAED,GAAG,CAAc,IAAY,EAAE,IAAc,EAAE,OAAwB;QACrE,OAAO,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,KAAK,CAAc,IAAY,EAAE,IAAc,EAAE,OAAwB;QACvE,OAAO,IAAI,CAAC,OAAO,CAAI,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,CAAc,IAAY,EAAE,OAAwB;QACxD,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACjD,CAAC;IAED,wDAAwD;IACxD,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,UAA0B,EAAE,EAC5B,eAAe,GAAG,KAAK;QAEvB,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,GAAG,IAAI,CAAC,OAAO,kBAAkB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAC3F,CAAA;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM;YACN,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBAC7E,GAAG,OAAO,CAAC,OAAO;aACnB;YACD,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;YAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAA;QAEF,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAClC,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,yBAAgB,EAAE,CAAA;QAEzD,2EAA2E;QAC3E,0EAA0E;QAC1E,4EAA4E;QAC5E,kEAAkE;QAClE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,0BAAiB,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/D,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,qBAAY,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC3E,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAA;QAClD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAA;IACrC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,QAAkB;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyC,CAAA;YAC5E,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,uBAAuB,QAAQ,CAAC,MAAM,GAAG,CAAA;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,uBAAuB,QAAQ,CAAC,MAAM,GAAG,CAAA;QAClD,CAAC;IACH,CAAC;CACF;AA3FD,gDA2FC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,gBAAgB,CAAC,WAAkC;IACjE,MAAM,IAAI,GAAG,IAAI,kBAAW,CAAC,WAAW,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG,CACd,WAAW,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,yBAAyB,CAC1B,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAErB,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAA;IAErD,OAAO;QACL,8EAA8E;QAC9E,KAAK,CAAC,OAAe;YACnB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;gBACvD,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC9B,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI;KACL,CAAA;AACH,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,27 @@
+/** Base for everything this SDK throws, so an app can catch one type. */
+export declare class TanqoryError extends Error {
+    readonly status?: number | undefined;
+    readonly code?: string | undefined;
+    constructor(message: string, status?: number | undefined, code?: string | undefined);
+}
+/**
+ * The credentials were rejected, or this app is not installed on that store.
+ *
+ * Tanqory answers both with the same message on purpose — telling them apart
+ * would let anyone enumerate which apps exist and which stores installed them.
+ * So do not branch on the reason; there isn't one.
+ */
+export declare class TanqoryAuthError extends TanqoryError {
+    constructor(message?: string);
+}
+/**
+ * The merchant has not granted this app the scope the endpoint needs, or the
+ * endpoint is not available to apps at all.
+ *
+ * Retrying will not help. Ask for the scope in your next manifest version and
+ * the merchant will be prompted to re-approve.
+ */
+export declare class TanqoryScopeError extends TanqoryError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,qBAAa,YAAa,SAAQ,KAAK;IAGnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAFtB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,YAAY;gBACpC,OAAO,SAA4E;CAIhG;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,YAAY;gBACrC,OAAO,SAAsD;CAI1E"}

package/dist/errors.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TanqoryScopeError = exports.TanqoryAuthError = exports.TanqoryError = void 0;
+/** Base for everything this SDK throws, so an app can catch one type. */
+class TanqoryError extends Error {
+    status;
+    code;
+    constructor(message, status, code) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'TanqoryError';
+    }
+}
+exports.TanqoryError = TanqoryError;
+/**
+ * The credentials were rejected, or this app is not installed on that store.
+ *
+ * Tanqory answers both with the same message on purpose — telling them apart
+ * would let anyone enumerate which apps exist and which stores installed them.
+ * So do not branch on the reason; there isn't one.
+ */
+class TanqoryAuthError extends TanqoryError {
+    constructor(message = 'Invalid client credentials, or this app is not installed on that store.') {
+        super(message, 401, 'AUTH');
+        this.name = 'TanqoryAuthError';
+    }
+}
+exports.TanqoryAuthError = TanqoryAuthError;
+/**
+ * The merchant has not granted this app the scope the endpoint needs, or the
+ * endpoint is not available to apps at all.
+ *
+ * Retrying will not help. Ask for the scope in your next manifest version and
+ * the merchant will be prompted to re-approve.
+ */
+class TanqoryScopeError extends TanqoryError {
+    constructor(message = 'This app is not permitted to perform that action.') {
+        super(message, 403, 'SCOPE');
+        this.name = 'TanqoryScopeError';
+    }
+}
+exports.TanqoryScopeError = TanqoryScopeError;
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAAA,yEAAyE;AACzE,MAAa,YAAa,SAAQ,KAAK;IAG1B;IACA;IAHX,YACE,OAAe,EACN,MAAe,EACf,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,WAAM,GAAN,MAAM,CAAS;QACf,SAAI,GAAJ,IAAI,CAAS;QAGtB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AATD,oCASC;AAED;;;;;;GAMG;AACH,MAAa,gBAAiB,SAAQ,YAAY;IAChD,YAAY,OAAO,GAAG,yEAAyE;QAC7F,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAChC,CAAC;CACF;AALD,4CAKC;AAED;;;;;;GAMG;AACH,MAAa,iBAAkB,SAAQ,YAAY;IACjD,YAAY,OAAO,GAAG,mDAAmD;QACvE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AALD,8CAKC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Build a Tanqory marketplace app.
+ *
+ * This entry point is for your **server**: exchanging credentials, calling the
+ * API on a merchant's behalf, and verifying webhooks. The embedded UI half lives
+ * at `@tanqory/plugin-sdk/client`, kept separate so importing it here cannot
+ * drag React into a serverless function.
+ */
+export { TanqoryAuth, type TanqoryAppCredentials } from './auth';
+export { createTanqoryApp, TanqoryStoreClient, type RequestOptions } from './client';
+export { TanqoryError, TanqoryAuthError, TanqoryScopeError } from './errors';
+export { verifyWebhookSignature, type VerifyOptions } from './webhooks';
+export { appManifestSchema, ManifestError, parseAppManifest, type TanqoryAppManifest, } from './manifest';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,MAAM,QAAQ,CAAA;AAChE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,UAAU,CAAA;AACpF,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAC5E,OAAO,EAAE,sBAAsB,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAA;AACvE,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,27 @@
+"use strict";
+/**
+ * Build a Tanqory marketplace app.
+ *
+ * This entry point is for your **server**: exchanging credentials, calling the
+ * API on a merchant's behalf, and verifying webhooks. The embedded UI half lives
+ * at `@tanqory/plugin-sdk/client`, kept separate so importing it here cannot
+ * drag React into a serverless function.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseAppManifest = exports.ManifestError = exports.appManifestSchema = exports.verifyWebhookSignature = exports.TanqoryScopeError = exports.TanqoryAuthError = exports.TanqoryError = exports.TanqoryStoreClient = exports.createTanqoryApp = exports.TanqoryAuth = void 0;
+var auth_1 = require("./auth");
+Object.defineProperty(exports, "TanqoryAuth", { enumerable: true, get: function () { return auth_1.TanqoryAuth; } });
+var client_1 = require("./client");
+Object.defineProperty(exports, "createTanqoryApp", { enumerable: true, get: function () { return client_1.createTanqoryApp; } });
+Object.defineProperty(exports, "TanqoryStoreClient", { enumerable: true, get: function () { return client_1.TanqoryStoreClient; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "TanqoryError", { enumerable: true, get: function () { return errors_1.TanqoryError; } });
+Object.defineProperty(exports, "TanqoryAuthError", { enumerable: true, get: function () { return errors_1.TanqoryAuthError; } });
+Object.defineProperty(exports, "TanqoryScopeError", { enumerable: true, get: function () { return errors_1.TanqoryScopeError; } });
+var webhooks_1 = require("./webhooks");
+Object.defineProperty(exports, "verifyWebhookSignature", { enumerable: true, get: function () { return webhooks_1.verifyWebhookSignature; } });
+var manifest_1 = require("./manifest");
+Object.defineProperty(exports, "appManifestSchema", { enumerable: true, get: function () { return manifest_1.appManifestSchema; } });
+Object.defineProperty(exports, "ManifestError", { enumerable: true, get: function () { return manifest_1.ManifestError; } });
+Object.defineProperty(exports, "parseAppManifest", { enumerable: true, get: function () { return manifest_1.parseAppManifest; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,+BAAgE;AAAvD,mGAAA,WAAW,OAAA;AACpB,mCAAoF;AAA3E,0GAAA,gBAAgB,OAAA;AAAE,4GAAA,kBAAkB,OAAA;AAC7C,mCAA4E;AAAnE,sGAAA,YAAY,OAAA;AAAE,0GAAA,gBAAgB,OAAA;AAAE,2GAAA,iBAAiB,OAAA;AAC1D,uCAAuE;AAA9D,kHAAA,sBAAsB,OAAA;AAC/B,uCAKmB;AAJjB,6GAAA,iBAAiB,OAAA;AACjB,yGAAA,aAAa,OAAA;AACb,4GAAA,gBAAgB,OAAA"}

package/dist/manifest.d.ts

@@ -0,0 +1,54 @@
+/**
+ * `tanqory.app.json` — the contract between an app and the platform.
+ *
+ * This file is what review approves, and it is the *only* thing a version pins.
+ * Your code is yours: you deploy whenever you like and Tanqory neither sees it
+ * nor needs to. Change the manifest — a new scope, a new origin, a new webhook
+ * topic — and that needs approving, because it changes what merchants agreed to.
+ *
+ * Validated by hand rather than with a schema library on purpose. This package
+ * is installed by strangers, and every dependency it carries is one they are
+ * being asked to trust; a hundred lines of checking is cheaper than that.
+ */
+export interface TanqoryAppManifest {
+    /** URL-safe identity. Immutable once published — it appears in install links. */
+    handle: string;
+    name: string;
+    /** Where Tanqory frames your app and sends merchants. */
+    appUrl: string;
+    /**
+     * Used **instead of** `appUrl`, and only when the installing store is a
+     * DEVELOPMENT store. This is what lets you point at `localhost` while you
+     * build without any localhost origin ever being trusted for a real merchant.
+     */
+    devUrl?: string;
+    embedded?: {
+        enabled: boolean;
+        path?: string;
+    };
+    /** Permission keys, from Tanqory's catalog. Each needs a justification at review. */
+    scopes: string[];
+    webhooks?: Array<{
+        topic: string;
+        path: string;
+    }>;
+    supportUrl?: string;
+    privacyPolicyUrl?: string;
+}
+export declare class ManifestError extends Error {
+    readonly problems: string[];
+    constructor(problems: string[]);
+}
+/**
+ * Parse and validate a manifest.
+ *
+ * Reports **every** problem at once rather than stopping at the first. A
+ * validator that surfaces one error per run turns a five-field mistake into five
+ * round trips, and this is the first thing a new developer runs.
+ */
+export declare function parseAppManifest(input: unknown): TanqoryAppManifest;
+/** Kept for symmetry with tooling that expects a schema-shaped export. */
+export declare const appManifestSchema: {
+    parse: typeof parseAppManifest;
+};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,kBAAkB;IACjC,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9C,qFAAqF;IACrF,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE;gBAAlB,QAAQ,EAAE,MAAM,EAAE;CAIxC;AAoBD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAmEnE;AAED,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB;;CAA8B,CAAA"}

package/dist/manifest.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * `tanqory.app.json` — the contract between an app and the platform.
+ *
+ * This file is what review approves, and it is the *only* thing a version pins.
+ * Your code is yours: you deploy whenever you like and Tanqory neither sees it
+ * nor needs to. Change the manifest — a new scope, a new origin, a new webhook
+ * topic — and that needs approving, because it changes what merchants agreed to.
+ *
+ * Validated by hand rather than with a schema library on purpose. This package
+ * is installed by strangers, and every dependency it carries is one they are
+ * being asked to trust; a hundred lines of checking is cheaper than that.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appManifestSchema = exports.ManifestError = void 0;
+exports.parseAppManifest = parseAppManifest;
+class ManifestError extends Error {
+    problems;
+    constructor(problems) {
+        super(`tanqory.app.json is not valid:\n  - ${problems.join('\n  - ')}`);
+        this.problems = problems;
+        this.name = 'ManifestError';
+    }
+}
+exports.ManifestError = ManifestError;
+const HANDLE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function isHttpsUrl(value, { allowLocalhost = false } = {}) {
+    if (typeof value !== 'string')
+        return false;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol === 'https:')
+        return true;
+    // http is tolerated for `devUrl` only, and only on localhost — a merchant is
+    // never sent to it, and requiring TLS on a laptop is friction with no payoff.
+    return (allowLocalhost && url.protocol === 'http:' && /^(localhost|127\.0\.0\.1)$/.test(url.hostname));
+}
+/**
+ * Parse and validate a manifest.
+ *
+ * Reports **every** problem at once rather than stopping at the first. A
+ * validator that surfaces one error per run turns a five-field mistake into five
+ * round trips, and this is the first thing a new developer runs.
+ */
+function parseAppManifest(input) {
+    const problems = [];
+    const manifest = (input ?? {});
+    if (typeof manifest.handle !== 'string' || !HANDLE.test(manifest.handle)) {
+        problems.push('`handle` must be lowercase letters, digits and single hyphens (e.g. "order-notifier")');
+    }
+    if (typeof manifest.name !== 'string' || manifest.name.trim().length === 0) {
+        problems.push('`name` is required');
+    }
+    if (!isHttpsUrl(manifest.appUrl)) {
+        problems.push('`appUrl` must be an https URL');
+    }
+    if (manifest.devUrl !== undefined && !isHttpsUrl(manifest.devUrl, { allowLocalhost: true })) {
+        problems.push('`devUrl` must be an https URL, or http on localhost');
+    }
+    if (!Array.isArray(manifest.scopes) || manifest.scopes.some((s) => typeof s !== 'string')) {
+        problems.push('`scopes` must be an array of permission keys');
+    }
+    else {
+        const seen = new Set();
+        for (const scope of manifest.scopes) {
+            // A duplicate is always a mistake, and silently de-duplicating it means
+            // the consent screen and the manifest disagree about what was asked for.
+            if (seen.has(scope))
+                problems.push(`\`scopes\` lists "${scope}" more than once`);
+            seen.add(scope);
+        }
+    }
+    if (manifest.embedded !== undefined) {
+        const embedded = manifest.embedded;
+        if (typeof embedded?.enabled !== 'boolean') {
+            problems.push('`embedded.enabled` must be a boolean');
+        }
+        if (embedded?.path !== undefined && typeof embedded.path !== 'string') {
+            problems.push('`embedded.path` must be a string');
+        }
+        else if (typeof embedded?.path === 'string' && !embedded.path.startsWith('/')) {
+            problems.push('`embedded.path` must start with "/"');
+        }
+    }
+    if (manifest.webhooks !== undefined) {
+        if (!Array.isArray(manifest.webhooks)) {
+            problems.push('`webhooks` must be an array');
+        }
+        else {
+            manifest.webhooks.forEach((hook, index) => {
+                const entry = hook;
+                if (typeof entry?.topic !== 'string' || entry.topic.length === 0) {
+                    problems.push(`\`webhooks[${index}].topic\` is required`);
+                }
+                if (typeof entry?.path !== 'string' || !entry.path.startsWith('/')) {
+                    problems.push(`\`webhooks[${index}].path\` must be a path starting with "/"`);
+                }
+            });
+        }
+    }
+    for (const field of ['supportUrl', 'privacyPolicyUrl']) {
+        if (manifest[field] !== undefined && !isHttpsUrl(manifest[field])) {
+            problems.push(`\`${field}\` must be an https URL`);
+        }
+    }
+    if (problems.length > 0)
+        throw new ManifestError(problems);
+    return manifest;
+}
+/** Kept for symmetry with tooling that expects a schema-shaped export. */
+exports.appManifestSchema = { parse: parseAppManifest };
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAsDH,4CAmEC;AAnGD,MAAa,aAAc,SAAQ,KAAK;IACjB;IAArB,YAAqB,QAAkB;QACrC,KAAK,CAAC,uCAAuC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QADpD,aAAQ,GAAR,QAAQ,CAAU;QAErC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AALD,sCAKC;AAED,MAAM,MAAM,GAAG,4BAA4B,CAAA;AAE3C,SAAS,UAAU,CAAC,KAAc,EAAE,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,EAAE;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1C,6EAA6E;IAC7E,8EAA8E;IAC9E,OAAO,CACL,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9F,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAA;IAEzD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,QAAQ,CAAC,IAAI,CACX,uFAAuF,CACxF,CAAA;IACH,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IACrC,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5F,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAA;IACtE,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC1F,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAA;IAC/D,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAkB,EAAE,CAAC;YAChD,wEAAwE;YACxE,yEAAyE;YACzE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,KAAK,kBAAkB,CAAC,CAAA;YAChF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAmC,CAAA;QAC7D,IAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;QACnD,CAAC;aAAM,IAAI,OAAO,QAAQ,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChF,QAAQ,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;QAC9C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBACxC,MAAM,KAAK,GAAG,IAA+B,CAAA;gBAC7C,IAAI,OAAO,KAAK,EAAE,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjE,QAAQ,CAAC,IAAI,CAAC,cAAc,KAAK,uBAAuB,CAAC,CAAA;gBAC3D,CAAC;gBACD,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnE,QAAQ,CAAC,IAAI,CAAC,cAAc,KAAK,2CAA2C,CAAC,CAAA;gBAC/E,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAU,EAAE,CAAC;QAChE,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,CAAA;QACpD,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC1D,OAAO,QAAyC,CAAA;AAClD,CAAC;AAED,0EAA0E;AAC7D,QAAA,iBAAiB,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAA"}

package/dist/manifest.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=manifest.spec.d.ts.map

package/dist/manifest.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.spec.d.ts","sourceRoot":"","sources":["../src/manifest.spec.ts"],"names":[],"mappings":""}

package/dist/manifest.spec.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const manifest_1 = require("./manifest");
+const VALID = {
+    handle: 'order-notifier',
+    name: 'Order Notifier',
+    appUrl: 'https://order-notifier.example.com',
+    scopes: ['orders.view'],
+};
+/** Collect the problems without asserting on prose. */
+function problemsOf(input) {
+    try {
+        (0, manifest_1.parseAppManifest)(input);
+        return [];
+    }
+    catch (error) {
+        return error instanceof manifest_1.ManifestError ? error.problems : [String(error)];
+    }
+}
+(0, vitest_1.describe)('parseAppManifest', () => {
+    (0, vitest_1.it)('accepts a minimal manifest', () => {
+        (0, vitest_1.expect)((0, manifest_1.parseAppManifest)(VALID)).toMatchObject({ handle: 'order-notifier' });
+    });
+    (0, vitest_1.it)('reports every problem at once, not just the first', () => {
+        // A validator that stops at the first error turns a five-field mistake into
+        // five round trips — and this is the first thing a new developer runs.
+        const problems = problemsOf({ handle: 'Not Valid', appUrl: 'ftp://x', scopes: 'nope' });
+        (0, vitest_1.expect)(problems.length).toBeGreaterThanOrEqual(4);
+    });
+    (0, vitest_1.describe)('handle', () => {
+        vitest_1.it.each([
+            ['uppercase', 'OrderNotifier'],
+            ['spaces', 'order notifier'],
+            ['leading hyphen', '-order'],
+            ['double hyphen', 'order--notifier'],
+            ['empty', ''],
+        ])('rejects %s', (_label, handle) => {
+            (0, vitest_1.expect)(problemsOf({ ...VALID, handle })).not.toEqual([]);
+        });
+    });
+    (0, vitest_1.describe)('urls', () => {
+        (0, vitest_1.it)('requires https for appUrl', () => {
+            (0, vitest_1.expect)(problemsOf({ ...VALID, appUrl: 'http://example.com' })).not.toEqual([]);
+        });
+        (0, vitest_1.it)('allows http on localhost for devUrl only', () => {
+            // A merchant is never sent to devUrl, and demanding TLS on a laptop is
+            // friction with no payoff.
+            (0, vitest_1.expect)(problemsOf({ ...VALID, devUrl: 'http://localhost:3000' })).toEqual([]);
+            (0, vitest_1.expect)(problemsOf({ ...VALID, devUrl: 'http://evil.example.com' })).not.toEqual([]);
+        });
+    });
+    (0, vitest_1.describe)('scopes', () => {
+        (0, vitest_1.it)('rejects a duplicate', () => {
+            // Silently de-duplicating would make the consent screen and the manifest
+            // disagree about what was asked for.
+            (0, vitest_1.expect)(problemsOf({ ...VALID, scopes: ['orders.view', 'orders.view'] })).not.toEqual([]);
+        });
+        (0, vitest_1.it)('accepts an empty list', () => {
+            // An app that only renders UI needs no scopes, and forcing one would push
+            // developers to request something they do not use.
+            (0, vitest_1.expect)(problemsOf({ ...VALID, scopes: [] })).toEqual([]);
+        });
+    });
+    (0, vitest_1.describe)('webhooks', () => {
+        (0, vitest_1.it)('requires a topic and a rooted path', () => {
+            (0, vitest_1.expect)(problemsOf({ ...VALID, webhooks: [{ topic: '', path: 'no-slash' }] }).length).toBe(2);
+        });
+        (0, vitest_1.it)('accepts a well-formed subscription', () => {
+            (0, vitest_1.expect)(problemsOf({ ...VALID, webhooks: [{ topic: 'orders/create', path: '/hooks/orders' }] })).toEqual([]);
+        });
+    });
+    (0, vitest_1.it)('requires embedded.path to be rooted when present', () => {
+        (0, vitest_1.expect)(problemsOf({ ...VALID, embedded: { enabled: true, path: 'embed' } })).not.toEqual([]);
+        (0, vitest_1.expect)(problemsOf({ ...VALID, embedded: { enabled: true, path: '/embed' } })).toEqual([]);
+    });
+    (0, vitest_1.it)('does not throw on null or a non-object', () => {
+        (0, vitest_1.expect)(problemsOf(null)).not.toEqual([]);
+        (0, vitest_1.expect)(problemsOf('a string')).not.toEqual([]);
+    });
+});
+//# sourceMappingURL=manifest.spec.js.map

package/dist/manifest.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.spec.js","sourceRoot":"","sources":["../src/manifest.spec.ts"],"names":[],"mappings":";;AAAA,mCAA6C;AAE7C,yCAA4D;AAE5D,MAAM,KAAK,GAAG;IACZ,MAAM,EAAE,gBAAgB;IACxB,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,oCAAoC;IAC5C,MAAM,EAAE,CAAC,aAAa,CAAC;CACxB,CAAA;AAED,uDAAuD;AACvD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC;QACH,IAAA,2BAAgB,EAAC,KAAK,CAAC,CAAA;QACvB,OAAO,EAAE,CAAA;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,YAAY,wBAAa,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC;AAED,IAAA,iBAAQ,EAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAA,WAAE,EAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,IAAA,eAAM,EAAC,IAAA,2BAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QACvF,IAAA,eAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,IAAA,iBAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,WAAE,CAAC,IAAI,CAAC;YACN,CAAC,WAAW,EAAE,eAAe,CAAC;YAC9B,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YAC5B,CAAC,gBAAgB,EAAE,QAAQ,CAAC;YAC5B,CAAC,eAAe,EAAE,iBAAiB,CAAC;YACpC,CAAC,OAAO,EAAE,EAAE,CAAC;SACd,CAAC,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;YAClC,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAA,iBAAQ,EAAC,MAAM,EAAE,GAAG,EAAE;QACpB,IAAA,WAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;YACnC,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAChF,CAAC,CAAC,CAAA;QAEF,IAAA,WAAE,EAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,uEAAuE;YACvE,2BAA2B;YAC3B,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC7E,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACrF,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAA,iBAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,IAAA,WAAE,EAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,yEAAyE;YACzE,qCAAqC;YACrC,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC1F,CAAC,CAAC,CAAA;QAEF,IAAA,WAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;YAC/B,0EAA0E;YAC1E,mDAAmD;YACnD,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAA,iBAAQ,EAAC,UAAU,EAAE,GAAG,EAAE;QACxB,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9F,CAAC,CAAC,CAAA;QAEF,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,IAAA,eAAM,EACJ,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CACxF,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC5F,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,IAAA,WAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,IAAA,eAAM,EAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACxC,IAAA,eAAM,EAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/webhooks.d.ts

@@ -0,0 +1,22 @@
+export interface VerifyOptions {
+    /** Override only if your clocks are genuinely worse than five minutes out. */
+    toleranceSeconds?: number;
+    /** Injectable for tests. */
+    now?: () => number;
+}
+/**
+ * Verify that a webhook really came from Tanqory and has not been replayed.
+ *
+ * Pass the **raw** request body — the exact bytes received. Re-serialising a
+ * parsed object changes key order and whitespace, and the signature will not
+ * match. In frameworks that parse JSON for you, read the raw body first.
+ *
+ * ```ts
+ * const raw = await request.text()
+ * if (!verifyWebhookSignature(raw, request.headers.get('x-tanqory-signature'), secret)) {
+ *   return new Response('bad signature', { status: 401 })
+ * }
+ * ```
+ */
+export declare function verifyWebhookSignature(rawBody: string, signatureHeader: string | null | undefined, secret: string, options?: VerifyOptions): boolean;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,4BAA4B;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC1C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAiBT"}