@usethrottle/webhook-types 5.0.0 → 5.0.1

package/dist/index.d.ts

@@ -957,7 +957,7 @@ export type ThrottleEventOfType<T extends WebhookEventType> = Extract<ThrottleEv
  *  from the @core/scopes canonical registry. */
 export declare const WEBHOOK_EVENT_TYPES: readonly ["cart.created", "cart.updated", "cart.item_added", "cart.item_updated", "cart.item_removed", "cart.shipping_selected", "cart.shipping_cleared", "cart.discount_applied", "cart.discount_removed", "cart.tax_recomputed", "cart.checkout_started", "cart.converted", "cart.abandoned", "cart.merged", "order.created", "order.updated", "order.fulfilled", "order.cancelled", "order.closed", "order.sync_failed", "order.sync_conflict", "order.comped", "order.comp_reversed", "order.held", "order.hold_released", "return.created", "return.updated", "quote.requested", "quote.proposed", "quote.viewed", "quote.comment_added", "quote.revision_requested", "quote.declined", "quote.accepted", "quote.converted", "quote.expired", "payment.pending", "payment.authorized", "payment.processing", "payment.captured", "payment.failed", "payment.voided", "payment.expired", "payment.recorded", "payment.refunded", "payment.partially_refunded", "payment.refund_failed", "payment.vaulted", "payment.disputed", "payment.dispute_cleared", "fulfillment.created", "fulfillment.completed", "fulfillment.cancelled", "fulfillment.shipment.shipped", "fulfillment.shipment.delivered", "fulfillment.digital.delivered", "subscription.created", "subscription.activated", "subscription.updated", "subscription.plan_changed", "subscription.plan_change_scheduled", "subscription.paused", "subscription.resumed", "subscription.cancelled", "subscription.completed", "subscription.renewed", "subscription.past_due", "subscription.payment_failed", "subscription.backup_pm_used", "subscription.create_failed", "subscription.trial_blocked", "discount.applied", "discount.removed", "customer.created", "customer.updated", "customer.deleted", "customer.payment_method_added", "customer.payment_method_removed", "customer.registered", "customer.email_verified", "customer.password_changed", "customer.sessions_revoked", "invoice.past_due", "import.completed", "shipping_tax.provider_connection.unhealthy", "workspace.payment_method.added", "workspace.payment_method.removed", "workspace.payment_method.default_changed", "workspace.payment_method.backup_set", "workspace.payment_method.backup_used", "workspace.platform_charge.succeeded", "workspace.platform_charge.failed", "workspace.trial_expired"];
 /**
- * Verifies the `Throttle-Signature` header against the raw request body.
+ * Verifies the `X-Throttle-Signature` header against the raw request body.
  * Use this from your webhook handler BEFORE parsing the JSON.
  *
  * Header format: `t=<timestamp>,v1=<hex>` — or `t=<timestamp>,v1=<hex>,v1=<hex>`
@@ -965,7 +965,7 @@ export declare const WEBHOOK_EVENT_TYPES: readonly ["cart.created", "cart.update
  * last); any matching digest verifies. The HMAC is computed over
  * `${timestamp}.${rawBody}` with the endpoint's signing secret
  * (returned as `signingSecret` when you created the endpoint via
- * POST /api/v1/webhooks). Reject if the timestamp is more than
+ * POST /api/v1/webhook-endpoints). Reject if the timestamp is more than
  * `toleranceSeconds` old (default 5 minutes) — protects against replay.
  */
 export declare function verifyWebhookSignature(args: {

package/dist/index.js

@@ -157,7 +157,7 @@ const _assertAllEventsListed = true;
 // Signature verification (Stripe-compatible scheme)
 // ----------------------------------------------------------------------------
 /**
- * Verifies the `Throttle-Signature` header against the raw request body.
+ * Verifies the `X-Throttle-Signature` header against the raw request body.
  * Use this from your webhook handler BEFORE parsing the JSON.
  *
  * Header format: `t=<timestamp>,v1=<hex>` — or `t=<timestamp>,v1=<hex>,v1=<hex>`
@@ -165,7 +165,7 @@ const _assertAllEventsListed = true;
  * last); any matching digest verifies. The HMAC is computed over
  * `${timestamp}.${rawBody}` with the endpoint's signing secret
  * (returned as `signingSecret` when you created the endpoint via
- * POST /api/v1/webhooks). Reject if the timestamp is more than
+ * POST /api/v1/webhook-endpoints). Reject if the timestamp is more than
  * `toleranceSeconds` old (default 5 minutes) — protects against replay.
  */
 export function verifyWebhookSignature(args) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usethrottle/webhook-types",
-  "version": "5.0.0",
+  "version": "5.0.1",
   "description": "TypeScript discriminated unions for every Throttle outbound webhook event.",
   "type": "module",
   "main": "./dist/index.js",