@waffo/pancake-ts 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -0,0 +1,40 @@
+# Changelog
+
+All notable changes to `@waffo/pancake-ts` will be documented in this file.
+
+Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.2] - 2026-03-11
+
+### Fixed
+
+- **Signing** — Body hash encoding changed from `hex` to `base64` to match auth-service canonical request format
+
+## [0.1.1] - 2026-03-10
+
+### Changed
+
+- **Build** — Switch from `tsc` to `tsup`, output ESM + CJS dual format
+- **Package** — Rename from `@waffo-pancake/sdk` to `@waffo/pancake-ts`
+- **CI/CD** — Add GitHub Actions workflow (`ci-cd.yml`) with lint, test, coverage, build, and npm publish on `v*` tag
+- **Node** — Minimum Node version raised from 18 to 20 (`@vitest/coverage-v8` requires `node:inspector/promises`)
+
+## [0.1.0] - 2026-03-10
+
+### Added
+
+- **Client** — `WaffoPancake` SDK client with RSA-SHA256 request signing and deterministic idempotency key (`X-Idempotency-Key = SHA256(merchantId:path:body)`)
+- **Auth** — `client.auth.issueSessionToken()` for buyer session token issuance
+- **Stores** — `client.stores.create()` / `update()` / `delete()` for store management (webhook, notification, checkout settings)
+- **Store Merchants** — `client.storeMerchants.add()` / `remove()` / `updateRole()` (endpoints return 501, coming soon)
+- **Onetime Products** — `client.onetimeProducts.create()` / `update()` / `publish()` / `updateStatus()` with multi-currency pricing
+- **Subscription Products** — `client.subscriptionProducts.create()` / `update()` / `publish()` / `updateStatus()` with billing period support
+- **Subscription Product Groups** — `client.subscriptionProductGroups.create()` / `update()` / `delete()` / `publish()` for shared trial and plan switching
+- **Orders** — `client.orders.cancelSubscription()` with status machine (pending→canceled, active→canceling)
+- **Checkout** — `client.checkout.createSession()` with trial toggle, billing detail, price snapshot, and metadata
+- **GraphQL** — `client.graphql.query<T>()` for typed GraphQL queries (Query only, no Mutations)
+- **Webhooks** — `verifyWebhook()` with embedded RSA-SHA256 public keys (test/prod), auto environment detection, and replay protection (default 5min tolerance)
+- **Error handling** — `WaffoPancakeError` with HTTP status and call-stack-ordered `errors` array
+- **Types** — 15 runtime enums, 40+ TypeScript interfaces covering all API resources
+- **Engineering** — ESLint 9 (TypeScript ESLint + import order + naming convention + JSDoc), Vitest 4 with v8 coverage, `tsconfig.build.json` for clean `dist/` output
+- **Documentation** — Split into focused documents: README (project intro), `docs/api-reference.md` (complete API reference), `docs/graphql-guide.md` (GraphQL usage guide), `docs/webhook-guide.md` (webhook verification guide)

package/dist/index.cjs

@@ -60,7 +60,7 @@ var WaffoPancakeError = class extends Error {
 // src/signing.ts
 var import_node_crypto = require("crypto");
 function signRequest(method, path, timestamp, body, privateKey) {
-  const bodyHash = (0, import_node_crypto.createHash)("sha256").update(body).digest("hex");
+  const bodyHash = (0, import_node_crypto.createHash)("sha256").update(body).digest("base64");
   const canonicalRequest = `${method}
 ${path}
 ${timestamp}

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/http-client.ts","../src/errors.ts","../src/signing.ts","../src/resources/auth.ts","../src/resources/checkout.ts","../src/resources/graphql.ts","../src/resources/onetime-products.ts","../src/resources/orders.ts","../src/resources/store-merchants.ts","../src/resources/stores.ts","../src/resources/subscription-product-groups.ts","../src/resources/subscription-products.ts","../src/client.ts","../src/webhooks.ts","../src/types.ts"],"sourcesContent":["// Client\nexport { WaffoPancake } from \"./client.js\";\n\n// Errors\nexport { WaffoPancakeError } from \"./errors.js\";\n\n// Webhooks\nexport { verifyWebhook } from \"./webhooks.js\";\n\n// Enums (runtime values)\nexport {\n  BillingPeriod,\n  CheckoutSessionProductType,\n  EntityStatus,\n  Environment,\n  ErrorLayer,\n  MediaType,\n  OnetimeOrderStatus,\n  PaymentStatus,\n  ProductVersionStatus,\n  RefundStatus,\n  RefundTicketStatus,\n  StoreRole,\n  SubscriptionOrderStatus,\n  TaxCategory,\n  WebhookEventType,\n} from \"./types.js\";\n\n// Types (interfaces & type aliases)\nexport type {\n  // Config\n  WaffoPancakeConfig,\n\n  // Response envelope\n  ApiError,\n  ApiErrorResponse,\n  ApiResponse,\n  ApiSuccessResponse,\n\n  // Auth\n  IssueSessionTokenParams,\n  SessionToken,\n\n  // Store\n  CheckoutSettings,\n  CheckoutThemeSettings,\n  CreateStoreParams,\n  DeleteStoreParams,\n  NotificationSettings,\n  Store,\n  UpdateStoreParams,\n  WebhookSettings,\n\n  // Store Merchant\n  AddMerchantParams,\n  AddMerchantResult,\n  RemoveMerchantParams,\n  RemoveMerchantResult,\n  UpdateRoleParams,\n  UpdateRoleResult,\n\n  // Product shared\n  MediaItem,\n  PriceInfo,\n  Prices,\n\n  // Onetime Product\n  CreateOnetimeProductParams,\n  OnetimeProductDetail,\n  PublishOnetimeProductParams,\n  UpdateOnetimeProductParams,\n  UpdateOnetimeStatusParams,\n\n  // Subscription Product\n  CreateSubscriptionProductParams,\n  PublishSubscriptionProductParams,\n  SubscriptionProductDetail,\n  UpdateSubscriptionProductParams,\n  UpdateSubscriptionStatusParams,\n\n  // Subscription Product Group\n  CreateSubscriptionProductGroupParams,\n  DeleteSubscriptionProductGroupParams,\n  GroupRules,\n  PublishSubscriptionProductGroupParams,\n  SubscriptionProductGroup,\n  UpdateSubscriptionProductGroupParams,\n\n  // Order\n  BillingDetail,\n  CancelSubscriptionParams,\n  CancelSubscriptionResult,\n  CheckoutSessionResult,\n  CreateCheckoutSessionParams,\n\n  // GraphQL\n  GraphQLParams,\n  GraphQLResponse,\n\n  // Webhook\n  VerifyWebhookOptions,\n  WebhookEvent,\n  WebhookEventData,\n} from \"./types.js\";\n","import { createHash } from \"node:crypto\";\n\nimport { WaffoPancakeError } from \"./errors.js\";\nimport { signRequest } from \"./signing.js\";\n\nimport type { ApiResponse, WaffoPancakeConfig } from \"./types.js\";\n\nconst DEFAULT_BASE_URL = \"https://waffo-pancake-auth-service.vercel.app\";\n\n/**\n * Internal HTTP client that auto-signs requests and attaches idempotency keys.\n *\n * Not exported publicly — used by resource classes via {@link WaffoPancake}.\n */\nexport class HttpClient {\n  private readonly merchantId: string;\n  private readonly privateKey: string;\n  private readonly baseUrl: string;\n  private readonly _fetch: typeof fetch;\n\n  constructor(config: WaffoPancakeConfig) {\n    this.merchantId = config.merchantId;\n    this.privateKey = config.privateKey;\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this._fetch = config.fetch ?? fetch;\n  }\n\n  /**\n   * Send a signed POST request and return the parsed `data` field.\n   *\n   * Behavior:\n   * - Generates a deterministic `X-Idempotency-Key` from `merchantId + path + body` (same request produces same key)\n   * - Auto-builds RSA-SHA256 signature (`X-Merchant-Id` / `X-Timestamp` / `X-Signature`)\n   * - Unwraps the response envelope: returns `data` on success, throws `WaffoPancakeError` on failure\n   *\n   * @param path - API path (e.g. `/v1/actions/store/create-store`)\n   * @param body - Request body object\n   * @returns Parsed `data` field from the response\n   * @throws {WaffoPancakeError} When the API returns errors\n   */\n  async post<T>(path: string, body: object): Promise<T> {\n    const bodyStr = JSON.stringify(body);\n    const timestamp = Math.floor(Date.now() / 1000).toString();\n    const signature = signRequest(\"POST\", path, timestamp, bodyStr, this.privateKey);\n\n    const response = await this._fetch(`${this.baseUrl}${path}`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"X-Merchant-Id\": this.merchantId,\n        \"X-Timestamp\": timestamp,\n        \"X-Signature\": signature,\n        \"X-Idempotency-Key\": createHash(\"sha256\")\n          .update(`${this.merchantId}:${path}:${bodyStr}`)\n          .digest(\"hex\"),\n      },\n      body: bodyStr,\n    });\n\n    const result = (await response.json()) as ApiResponse<T>;\n\n    if (\"errors\" in result && result.errors) {\n      throw new WaffoPancakeError(response.status, result.errors);\n    }\n\n    return result.data as T;\n  }\n}\n","import type { ApiError } from \"./types.js\";\n\n/**\n * Error thrown when the API returns a non-success response.\n *\n * @example\n * try {\n *   await client.stores.create({ name: \"My Store\" });\n * } catch (err) {\n *   if (err instanceof WaffoPancakeError) {\n *     console.log(err.status);        // 400\n *     console.log(err.errors[0]);     // { message: \"...\", layer: \"store\" }\n *   }\n * }\n */\nexport class WaffoPancakeError extends Error {\n  readonly status: number;\n  readonly errors: ApiError[];\n\n  constructor(status: number, errors: ApiError[]) {\n    const rootCause = errors[0]?.message ?? \"Unknown error\";\n    super(rootCause);\n    this.name = \"WaffoPancakeError\";\n    this.status = status;\n    this.errors = errors;\n  }\n}\n","import { createHash, createSign } from \"node:crypto\";\n\n/**\n * Build canonical request string and sign with RSA-SHA256.\n *\n * Canonical request format:\n *   METHOD\\nPATH\\nTIMESTAMP\\nSHA256(BODY)\n *\n * @param method - HTTP method (e.g. \"POST\")\n * @param path - Request path (e.g. \"/v1/actions/store/create-store\")\n * @param timestamp - Unix epoch seconds string\n * @param body - Serialized JSON body\n * @param privateKey - RSA private key in PEM format\n * @returns Base64-encoded RSA-SHA256 signature\n */\nexport function signRequest(\n  method: string,\n  path: string,\n  timestamp: string,\n  body: string,\n  privateKey: string,\n): string {\n  const bodyHash = createHash(\"sha256\").update(body).digest(\"hex\");\n  const canonicalRequest = `${method}\\n${path}\\n${timestamp}\\n${bodyHash}`;\n\n  const sign = createSign(\"sha256\");\n  sign.update(canonicalRequest);\n  return sign.sign(privateKey, \"base64\");\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { IssueSessionTokenParams, SessionToken } from \"../types.js\";\n\n/** Authentication resource — issue session tokens for buyers. */\nexport class AuthResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Issue a session token for a buyer.\n   *\n   * @param params - Token issuance parameters\n   * @returns Issued session token with expiration\n   *\n   * @example\n   * const { token, expiresAt } = await client.auth.issueSessionToken({\n   *   storeId: \"store_xxx\",\n   *   buyerIdentity: \"customer@example.com\",\n   * });\n   */\n  async issueSessionToken(params: IssueSessionTokenParams): Promise<SessionToken> {\n    return this.http.post<SessionToken>(\"/v1/actions/auth/issue-session-token\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { CheckoutSessionResult, CreateCheckoutSessionParams } from \"../types.js\";\n\n/** Checkout resource — create checkout sessions for payments. */\nexport class CheckoutResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a checkout session. Returns a URL to redirect the customer to.\n   *\n   * @param params - Checkout session parameters\n   * @returns Session ID, checkout URL, and expiration\n   *\n   * @example\n   * const session = await client.checkout.createSession({\n   *   storeId: \"store_xxx\",\n   *   productId: \"prod_xxx\",\n   *   productType: \"onetime\",\n   *   currency: \"USD\",\n   *   buyerEmail: \"customer@example.com\",\n   * });\n   * // Redirect to session.checkoutUrl\n   */\n  async createSession(params: CreateCheckoutSessionParams): Promise<CheckoutSessionResult> {\n    return this.http.post<CheckoutSessionResult>(\"/v1/actions/checkout/create-session\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { GraphQLParams, GraphQLResponse } from \"../types.js\";\n\n/** GraphQL query resource (Query only, no Mutations). */\nexport class GraphQLResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Execute a GraphQL query (Query only, no Mutations).\n   *\n   * @param params - GraphQL query and optional variables\n   * @returns GraphQL response with data and optional errors\n   *\n   * @example\n   * const result = await client.graphql.query<{ stores: Array<{ id: string; name: string }> }>({\n   *   query: `query { stores { id name status } }`,\n   * });\n   * console.log(result.data?.stores);\n   *\n   * @example\n   * const result = await client.graphql.query({\n   *   query: `query ($id: ID!) { onetimeProduct(id: $id) { id name prices } }`,\n   *   variables: { id: \"prod_xxx\" },\n   * });\n   */\n  async query<T = Record<string, unknown>>(params: GraphQLParams): Promise<GraphQLResponse<T>> {\n    return this.http.post<GraphQLResponse<T>>(\"/v1/graphql\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateOnetimeProductParams,\n  OnetimeProductDetail,\n  PublishOnetimeProductParams,\n  UpdateOnetimeProductParams,\n  UpdateOnetimeStatusParams,\n} from \"../types.js\";\n\n/** One-time product management resource. */\nexport class OnetimeProductsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a one-time product with multi-currency pricing.\n   *\n   * @param params - Product creation parameters\n   * @returns Created product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"E-Book\",\n   *   prices: { USD: { amount: 2900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n   * });\n   */\n  async create(params: CreateOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/create-product\", params);\n  }\n\n  /**\n   * Update a one-time product. Creates a new version; skips if unchanged.\n   *\n   * @param params - Product update parameters (all content fields required)\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.update({\n   *   id: \"prod_xxx\",\n   *   name: \"E-Book v2\",\n   *   prices: { USD: { amount: 3900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n   * });\n   */\n  async update(params: UpdateOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/update-product\", params);\n  }\n\n  /**\n   * Publish a one-time product's test version to production.\n   *\n   * @param params - Product to publish\n   * @returns Published product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.publish({ id: \"prod_xxx\" });\n   */\n  async publish(params: PublishOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/publish-product\", params);\n  }\n\n  /**\n   * Update a one-time product's status (active/inactive).\n   *\n   * @param params - Status update parameters\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.updateStatus({\n   *   id: \"prod_xxx\",\n   *   status: ProductVersionStatus.Inactive,\n   * });\n   */\n  async updateStatus(params: UpdateOnetimeStatusParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/update-status\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { CancelSubscriptionParams, CancelSubscriptionResult } from \"../types.js\";\n\n/** Order management resource. */\nexport class OrdersResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Cancel a subscription order.\n   *\n   * - pending -> canceled (immediate)\n   * - active/trialing -> canceling (PSP cancel, webhook updates later)\n   *\n   * @param params - Order to cancel\n   * @returns Order ID and resulting status\n   *\n   * @example\n   * const { orderId, status } = await client.orders.cancelSubscription({\n   *   orderId: \"order_xxx\",\n   * });\n   * // status: \"canceled\" or \"canceling\"\n   */\n  async cancelSubscription(params: CancelSubscriptionParams): Promise<CancelSubscriptionResult> {\n    return this.http.post<CancelSubscriptionResult>(\"/v1/actions/subscription-order/cancel-order\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  AddMerchantParams,\n  AddMerchantResult,\n  RemoveMerchantParams,\n  RemoveMerchantResult,\n  UpdateRoleParams,\n  UpdateRoleResult,\n} from \"../types.js\";\n\n/** Store merchant management resource (coming soon — endpoints return 501). */\nexport class StoreMerchantsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Add a merchant to a store.\n   *\n   * @param params - Merchant addition parameters\n   * @returns Added merchant details\n   *\n   * @example\n   * const result = await client.storeMerchants.add({\n   *   storeId: \"store_xxx\",\n   *   email: \"member@example.com\",\n   *   role: \"admin\",\n   * });\n   */\n  async add(params: AddMerchantParams): Promise<AddMerchantResult> {\n    return this.http.post(\"/v1/actions/store-merchant/add-merchant\", params);\n  }\n\n  /**\n   * Remove a merchant from a store.\n   *\n   * @param params - Merchant removal parameters\n   * @returns Removal confirmation\n   *\n   * @example\n   * const result = await client.storeMerchants.remove({\n   *   storeId: \"store_xxx\",\n   *   merchantId: \"merchant_xxx\",\n   * });\n   */\n  async remove(params: RemoveMerchantParams): Promise<RemoveMerchantResult> {\n    return this.http.post(\"/v1/actions/store-merchant/remove-merchant\", params);\n  }\n\n  /**\n   * Update a merchant's role in a store.\n   *\n   * @param params - Role update parameters\n   * @returns Updated role details\n   *\n   * @example\n   * const result = await client.storeMerchants.updateRole({\n   *   storeId: \"store_xxx\",\n   *   merchantId: \"merchant_xxx\",\n   *   role: \"member\",\n   * });\n   */\n  async updateRole(params: UpdateRoleParams): Promise<UpdateRoleResult> {\n    return this.http.post(\"/v1/actions/store-merchant/update-role\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateStoreParams,\n  DeleteStoreParams,\n  Store,\n  UpdateStoreParams,\n} from \"../types.js\";\n\n/** Store management resource — create, update, and delete stores. */\nexport class StoresResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a new store. Slug is auto-generated from the name.\n   *\n   * @param params - Store creation parameters\n   * @returns Created store entity\n   *\n   * @example\n   * const { store } = await client.stores.create({ name: \"My Store\" });\n   */\n  async create(params: CreateStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/create-store\", params);\n  }\n\n  /**\n   * Update an existing store's settings.\n   *\n   * @param params - Fields to update (only provided fields are changed)\n   * @returns Updated store entity\n   *\n   * @example\n   * const { store } = await client.stores.update({\n   *   id: \"store_xxx\",\n   *   name: \"Updated Name\",\n   *   supportEmail: \"help@example.com\",\n   * });\n   */\n  async update(params: UpdateStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/update-store\", params);\n  }\n\n  /**\n   * Soft-delete a store. Only the owner can delete.\n   *\n   * @param params - Store to delete\n   * @returns Deleted store entity (with `deletedAt` set)\n   *\n   * @example\n   * const { store } = await client.stores.delete({ id: \"store_xxx\" });\n   */\n  async delete(params: DeleteStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/delete-store\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateSubscriptionProductGroupParams,\n  DeleteSubscriptionProductGroupParams,\n  PublishSubscriptionProductGroupParams,\n  SubscriptionProductGroup,\n  UpdateSubscriptionProductGroupParams,\n} from \"../types.js\";\n\n/** Subscription product group management resource (shared trial, plan switching). */\nexport class SubscriptionProductGroupsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a subscription product group for shared-trial or plan switching.\n   *\n   * @param params - Group creation parameters\n   * @returns Created group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"Pro Plans\",\n   *   rules: { sharedTrial: true },\n   *   productIds: [\"prod_aaa\", \"prod_bbb\"],\n   * });\n   */\n  async create(params: CreateSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/create-group\", params);\n  }\n\n  /**\n   * Update a subscription product group. `productIds` is a full replacement.\n   *\n   * @param params - Group update parameters\n   * @returns Updated group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.update({\n   *   id: \"group_xxx\",\n   *   productIds: [\"prod_aaa\", \"prod_bbb\", \"prod_ccc\"],\n   * });\n   */\n  async update(params: UpdateSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/update-group\", params);\n  }\n\n  /**\n   * Hard-delete a subscription product group.\n   *\n   * @param params - Group to delete\n   * @returns Deleted group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.delete({ id: \"group_xxx\" });\n   */\n  async delete(params: DeleteSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/delete-group\", params);\n  }\n\n  /**\n   * Publish a test-environment group to production (upsert).\n   *\n   * @param params - Group to publish\n   * @returns Published group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.publish({ id: \"group_xxx\" });\n   */\n  async publish(params: PublishSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/publish-group\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateSubscriptionProductParams,\n  PublishSubscriptionProductParams,\n  SubscriptionProductDetail,\n  UpdateSubscriptionProductParams,\n  UpdateSubscriptionStatusParams,\n} from \"../types.js\";\n\n/** Subscription product management resource. */\nexport class SubscriptionProductsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a subscription product with billing period and multi-currency pricing.\n   *\n   * @param params - Product creation parameters\n   * @returns Created product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"Pro Plan\",\n   *   billingPeriod: \"monthly\",\n   *   prices: { USD: { amount: 999, taxIncluded: false, taxCategory: \"saas\" } },\n   * });\n   */\n  async create(params: CreateSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/create-product\", params);\n  }\n\n  /**\n   * Update a subscription product. Creates a new version; skips if unchanged.\n   *\n   * @param params - Product update parameters (all content fields required)\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.update({\n   *   id: \"prod_xxx\",\n   *   name: \"Pro Plan v2\",\n   *   billingPeriod: \"monthly\",\n   *   prices: { USD: { amount: 1499, taxIncluded: false, taxCategory: \"saas\" } },\n   * });\n   */\n  async update(params: UpdateSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/update-product\", params);\n  }\n\n  /**\n   * Publish a subscription product's test version to production.\n   *\n   * @param params - Product to publish\n   * @returns Published product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.publish({ id: \"prod_xxx\" });\n   */\n  async publish(params: PublishSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/publish-product\", params);\n  }\n\n  /**\n   * Update a subscription product's status (active/inactive).\n   *\n   * @param params - Status update parameters\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.updateStatus({\n   *   id: \"prod_xxx\",\n   *   status: ProductVersionStatus.Active,\n   * });\n   */\n  async updateStatus(params: UpdateSubscriptionStatusParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/update-status\", params);\n  }\n}\n","import { HttpClient } from \"./http-client.js\";\nimport { AuthResource } from \"./resources/auth.js\";\nimport { CheckoutResource } from \"./resources/checkout.js\";\nimport { GraphQLResource } from \"./resources/graphql.js\";\nimport { OnetimeProductsResource } from \"./resources/onetime-products.js\";\nimport { OrdersResource } from \"./resources/orders.js\";\nimport { StoreMerchantsResource } from \"./resources/store-merchants.js\";\nimport { StoresResource } from \"./resources/stores.js\";\nimport { SubscriptionProductGroupsResource } from \"./resources/subscription-product-groups.js\";\nimport { SubscriptionProductsResource } from \"./resources/subscription-products.js\";\n\nimport type { WaffoPancakeConfig } from \"./types.js\";\n\n/**\n * Waffo Pancake TypeScript SDK client.\n *\n * Uses Merchant API Key (RSA-SHA256) authentication. All requests are\n * automatically signed — no manual header construction needed.\n *\n * @example\n * import { WaffoPancake } from \"@waffo/pancake-ts\";\n *\n * const client = new WaffoPancake({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n *\n * // Create a store\n * const { store } = await client.stores.create({ name: \"My Store\" });\n *\n * // Create a product\n * const { product } = await client.onetimeProducts.create({\n *   storeId: store.id,\n *   name: \"E-Book\",\n *   prices: { USD: { amount: 2900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n * });\n *\n * // Create a checkout session\n * const session = await client.checkout.createSession({\n *   storeId: store.id,\n *   productId: product.id,\n *   productType: \"onetime\",\n *   currency: \"USD\",\n * });\n * // => redirect customer to session.checkoutUrl\n *\n * // Query data via GraphQL\n * const result = await client.graphql.query({\n *   query: `query { stores { id name status } }`,\n * });\n */\nexport class WaffoPancake {\n  private readonly http: HttpClient;\n\n  readonly auth: AuthResource;\n  readonly stores: StoresResource;\n  readonly storeMerchants: StoreMerchantsResource;\n  readonly onetimeProducts: OnetimeProductsResource;\n  readonly subscriptionProducts: SubscriptionProductsResource;\n  readonly subscriptionProductGroups: SubscriptionProductGroupsResource;\n  readonly orders: OrdersResource;\n  readonly checkout: CheckoutResource;\n  readonly graphql: GraphQLResource;\n\n  constructor(config: WaffoPancakeConfig) {\n    this.http = new HttpClient(config);\n\n    this.auth = new AuthResource(this.http);\n    this.stores = new StoresResource(this.http);\n    this.storeMerchants = new StoreMerchantsResource(this.http);\n    this.onetimeProducts = new OnetimeProductsResource(this.http);\n    this.subscriptionProducts = new SubscriptionProductsResource(this.http);\n    this.subscriptionProductGroups = new SubscriptionProductGroupsResource(this.http);\n    this.orders = new OrdersResource(this.http);\n    this.checkout = new CheckoutResource(this.http);\n    this.graphql = new GraphQLResource(this.http);\n  }\n}\n","import { createVerify } from \"node:crypto\";\n\nimport type { VerifyWebhookOptions, WebhookEvent } from \"./types.js\";\n\n/** Default tolerance: 5 minutes */\nconst DEFAULT_TOLERANCE_MS = 5 * 60 * 1000;\n\n/** Waffo Pancake test environment webhook verification public key. */\nconst TEST_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnmRY6yMMA3lVqmAU6ZG\nb1sjL/+r/z6E+ZjkXaDAKiqOhk9rpazni0bNsGXwmftTPk9jy2wn+j6JHODD/WH/\nSCnSfvKkLIjy4Hk7BuCgB174C0ydan7J+KgXLkOwgCAxxB68t2tezldwo74ZpXgn\nF49opzMvQ9prEwIAWOE+kV9iK6gx/AckSMtHIHpUesoPDkldpmFHlB2qpf1vsFTZ\n5kD6DmGl+2GIVK01aChy2lk8pLv0yUMu18v44sLkO5M44TkGPJD9qG09wrvVG2wp\nOTVCn1n5pP8P+HRLcgzbUB3OlZVfdFurn6EZwtyL4ZD9kdkQ4EZE/9inKcp3c1h4\nxwIDAQAB\n-----END PUBLIC KEY-----`;\n\n/** Waffo Pancake production environment webhook verification public key. */\nconst PROD_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+xApdTIb4ua+DgZKQ54\niBsD82ybyhGCLRETONW4Jgbb3A8DUM1LqBk6r/CmTOCHqLalTQHNigvP3R5zkDNX\niRJz6gA4MJ/+8K0+mnEE2RISQzN+Qu65TNd6svb+INm/kMaftY4uIXr6y6kchtTJ\ndwnQhcKdAL2v7h7IFnkVelQsKxDdb2PqX8xX/qwd01iXvMcpCCaXovUwZsxH2QN5\nZKBTseJivbhUeyJCco4fdUyxOMHe2ybCVhyvim2uxAl1nkvL5L8RCWMCAV55LLo0\n9OhmLahz/DYNu13YLVP6dvIT09ZFBYU6Owj1NxdinTynlJCFS9VYwBgmftosSE1U\ndwIDAQAB\n-----END PUBLIC KEY-----`;\n\n/**\n * Parse `X-Waffo-Signature` header.\n *\n * Format: `t=<timestamp>,v1=<base64signature>`\n *\n * @returns Parsed `t` (timestamp string) and `v1` (base64 signature)\n */\nfunction parseSignatureHeader(header: string): { t: string; v1: string } {\n  let t = \"\";\n  let v1 = \"\";\n  for (const pair of header.split(\",\")) {\n    const eqIdx = pair.indexOf(\"=\");\n    if (eqIdx === -1) continue;\n    const key = pair.slice(0, eqIdx).trim();\n    const value = pair.slice(eqIdx + 1).trim();\n    if (key === \"t\") t = value;\n    else if (key === \"v1\") v1 = value;\n  }\n  return { t, v1 };\n}\n\n/**\n * Verify RSA-SHA256 signature against a public key.\n *\n * @param signatureInput - The string to verify (`${t}.${rawBody}`)\n * @param v1 - Base64-encoded signature\n * @param publicKey - PEM public key\n * @returns Whether the signature is valid\n */\nfunction rsaVerify(signatureInput: string, v1: string, publicKey: string): boolean {\n  const verifier = createVerify(\"RSA-SHA256\");\n  verifier.update(signatureInput);\n  return verifier.verify(publicKey, v1, \"base64\");\n}\n\n/**\n * Verify and parse an incoming Waffo Pancake webhook event.\n *\n * Uses built-in Waffo public keys (RSA-SHA256) for signature verification.\n * Test and production environments use different key pairs; both are embedded in the SDK.\n *\n * Behavior:\n * - Parses the `X-Waffo-Signature` header (`t=<timestamp>,v1=<base64sig>`)\n * - Builds signature input `${t}.${rawBody}` and verifies with RSA-SHA256\n * - When `environment` is not specified, tries prod key first, then test key\n * - Optional: checks timestamp to prevent replay attacks (default 5-minute tolerance)\n *\n * @param payload - Raw request body string (must be unparsed)\n * @param signatureHeader - Value of the `X-Waffo-Signature` header\n * @param options - Verification options\n * @returns Parsed webhook event\n * @throws Error if header is missing/malformed, signature is invalid, or timestamp is stale\n *\n * @example\n * // Express (use raw body!)\n * app.post(\"/webhooks\", express.raw({ type: \"application/json\" }), (req, res) => {\n *   try {\n *     const event = verifyWebhook(\n *       req.body.toString(\"utf-8\"),\n *       req.headers[\"x-waffo-signature\"] as string,\n *     );\n *     res.status(200).send(\"OK\");\n *     handleEventAsync(event).catch(console.error);\n *   } catch {\n *     res.status(401).send(\"Invalid signature\");\n *   }\n * });\n *\n * @example\n * // Next.js App Router\n * export async function POST(request: Request) {\n *   const body = await request.text();\n *   const sig = request.headers.get(\"x-waffo-signature\");\n *   const event = verifyWebhook(body, sig);\n *   // handle event ...\n *   return new Response(\"OK\");\n * }\n *\n * @example\n * // Specify environment explicitly\n * const event = verifyWebhook(body, sig, { environment: \"prod\" });\n *\n * @example\n * // Disable replay protection\n * const event = verifyWebhook(body, sig, { toleranceMs: 0 });\n */\nexport function verifyWebhook<T = Record<string, unknown>>(\n  payload: string,\n  signatureHeader: string | undefined | null,\n  options?: VerifyWebhookOptions,\n): WebhookEvent<T> {\n  if (!signatureHeader) {\n    throw new Error(\"Missing X-Waffo-Signature header\");\n  }\n\n  const { t, v1 } = parseSignatureHeader(signatureHeader);\n  if (!t || !v1) {\n    throw new Error(\"Malformed X-Waffo-Signature header: missing t or v1\");\n  }\n\n  // Replay protection\n  const toleranceMs = options?.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n  if (toleranceMs > 0) {\n    const timestampMs = Number(t);\n    if (Number.isNaN(timestampMs)) {\n      throw new Error(\"Invalid timestamp in X-Waffo-Signature header\");\n    }\n    if (Math.abs(Date.now() - timestampMs) > toleranceMs) {\n      throw new Error(\"Webhook timestamp outside tolerance window (possible replay attack)\");\n    }\n  }\n\n  // RSA-SHA256 verification\n  const signatureInput = `${t}.${payload}`;\n  const env = options?.environment;\n\n  if (env === \"test\") {\n    if (!rsaVerify(signatureInput, v1, TEST_PUBLIC_KEY)) {\n      throw new Error(\"Invalid webhook signature (test key)\");\n    }\n  } else if (env === \"prod\") {\n    if (!rsaVerify(signatureInput, v1, PROD_PUBLIC_KEY)) {\n      throw new Error(\"Invalid webhook signature (prod key)\");\n    }\n  } else {\n    // Auto-detect: try prod first, then test\n    const prodValid = rsaVerify(signatureInput, v1, PROD_PUBLIC_KEY);\n    if (!prodValid) {\n      const testValid = rsaVerify(signatureInput, v1, TEST_PUBLIC_KEY);\n      if (!testValid) {\n        throw new Error(\"Invalid webhook signature (tried both prod and test keys)\");\n      }\n    }\n  }\n\n  return JSON.parse(payload) as WebhookEvent<T>;\n}\n","// ---------------------------------------------------------------------------\n// Client config\n// ---------------------------------------------------------------------------\n\nexport interface WaffoPancakeConfig {\n  /** Merchant ID (X-Merchant-Id header) */\n  merchantId: string;\n  /** RSA private key in PEM format for request signing */\n  privateKey: string;\n  /** Base URL override (default: https://waffo-pancake-auth-service.vercel.app) */\n  baseUrl?: string;\n  /** Custom fetch implementation (default: global fetch) */\n  fetch?: typeof fetch;\n}\n\n// ---------------------------------------------------------------------------\n// API response envelope\n// ---------------------------------------------------------------------------\n\n/**\n * Single error object within the `errors` array.\n *\n * @example\n * { message: \"Store slug already exists\", layer: \"store\" }\n */\nexport interface ApiError {\n  /** Error message */\n  message: string;\n  /** Layer where the error originated */\n  layer: `${ErrorLayer}`;\n}\n\n/** Successful API response envelope. */\nexport interface ApiSuccessResponse<T> {\n  data: T;\n}\n\n/**\n * Error API response envelope.\n *\n * `errors` are ordered by call stack: `[0]` is the deepest layer, `[n]` is the outermost.\n */\nexport interface ApiErrorResponse {\n  data: null;\n  errors: ApiError[];\n}\n\n/** Union type of success and error API responses. */\nexport type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;\n\n// ---------------------------------------------------------------------------\n// Enums (runtime-accessible values)\n// ---------------------------------------------------------------------------\n\n/**\n * Environment type.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport enum Environment {\n  Test = \"test\",\n  Prod = \"prod\",\n}\n\n/**\n * Tax category for products.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum TaxCategory {\n  DigitalGoods = \"digital_goods\",\n  SaaS = \"saas\",\n  Software = \"software\",\n  Ebook = \"ebook\",\n  OnlineCourse = \"online_course\",\n  Consulting = \"consulting\",\n  ProfessionalService = \"professional_service\",\n}\n\n/**\n * Subscription billing period.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum BillingPeriod {\n  Weekly = \"weekly\",\n  Monthly = \"monthly\",\n  Quarterly = \"quarterly\",\n  Yearly = \"yearly\",\n}\n\n/**\n * Product version status.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum ProductVersionStatus {\n  Active = \"active\",\n  Inactive = \"inactive\",\n}\n\n/**\n * Store entity status.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport enum EntityStatus {\n  Active = \"active\",\n  Inactive = \"inactive\",\n  Suspended = \"suspended\",\n}\n\n/**\n * Store member role.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport enum StoreRole {\n  Owner = \"owner\",\n  Admin = \"admin\",\n  Member = \"member\",\n}\n\n/**\n * One-time order status.\n * @see waffo-pancake-order-service/app/lib/resources/onetime-order.ts\n */\nexport enum OnetimeOrderStatus {\n  Pending = \"pending\",\n  Completed = \"completed\",\n  Canceled = \"canceled\",\n}\n\n/**\n * Subscription order status.\n *\n * State machine:\n * - pending -> active, canceled\n * - active -> canceling, past_due, canceled, expired\n * - canceling -> active, canceled\n * - past_due -> active, canceled\n * - canceled -> terminal\n * - expired -> terminal\n *\n * @see waffo-pancake-order-service/app/lib/resources/subscription-order.ts\n */\nexport enum SubscriptionOrderStatus {\n  Pending = \"pending\",\n  Active = \"active\",\n  Canceling = \"canceling\",\n  Canceled = \"canceled\",\n  PastDue = \"past_due\",\n  Expired = \"expired\",\n}\n\n/**\n * Payment status.\n * @see waffo-pancake-order-service/app/lib/resources/payment.ts\n */\nexport enum PaymentStatus {\n  Pending = \"pending\",\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n  Canceled = \"canceled\",\n}\n\n/**\n * Refund ticket status.\n * @see waffo-pancake-order-service/app/lib/resources/refund-ticket.ts\n */\nexport enum RefundTicketStatus {\n  Pending = \"pending\",\n  Approved = \"approved\",\n  Rejected = \"rejected\",\n  Processing = \"processing\",\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n}\n\n/**\n * Refund status.\n * @see waffo-pancake-order-service/app/lib/resources/refund.ts\n */\nexport enum RefundStatus {\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n}\n\n/**\n * Media asset type.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum MediaType {\n  Image = \"image\",\n  Video = \"video\",\n}\n\n/**\n * Checkout session product type.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport enum CheckoutSessionProductType {\n  Onetime = \"onetime\",\n  Subscription = \"subscription\",\n}\n\n/** Error layer identifier in the call stack. */\nexport enum ErrorLayer {\n  Gateway = \"gateway\",\n  User = \"user\",\n  Store = \"store\",\n  Product = \"product\",\n  Order = \"order\",\n  GraphQL = \"graphql\",\n  Resource = \"resource\",\n  Email = \"email\",\n}\n\n// ---------------------------------------------------------------------------\n// Auth\n// ---------------------------------------------------------------------------\n\n/**\n * Parameters for issuing a buyer session token.\n * @see waffo-pancake-user-service/app/lib/utils/jwt.ts IssueSessionTokenRequest\n */\nexport interface IssueSessionTokenParams {\n  /** Buyer identity (email or any merchant-provided identifier string) */\n  buyerIdentity: string;\n  /** Store ID */\n  storeId: string;\n}\n\n/**\n * Issued session token response.\n *\n * @example\n * { token: \"eyJhbGciOi...\", expiresAt: \"2026-03-10T09:00:00.000Z\" }\n */\nexport interface SessionToken {\n  /** JWT token string */\n  token: string;\n  /** Expiration time (ISO 8601 UTC) */\n  expiresAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store — from waffo-pancake-store-service\n// ---------------------------------------------------------------------------\n\n/**\n * Webhook configuration for test and production environments.\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface WebhookSettings {\n  /** Test environment webhook URL */\n  testWebhookUrl: string | null;\n  /** Production environment webhook URL */\n  prodWebhookUrl: string | null;\n  /** Event types subscribed in test environment */\n  testEvents: string[];\n  /** Event types subscribed in production environment */\n  prodEvents: string[];\n}\n\n/**\n * Notification settings (all default to true).\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface NotificationSettings {\n  emailOrderConfirmation: boolean;\n  emailSubscriptionConfirmation: boolean;\n  emailSubscriptionCycled: boolean;\n  emailSubscriptionCanceled: boolean;\n  emailSubscriptionRevoked: boolean;\n  emailSubscriptionPastDue: boolean;\n  notifyNewOrders: boolean;\n  notifyNewSubscriptions: boolean;\n}\n\n/**\n * Single-theme checkout page styling.\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface CheckoutThemeSettings {\n  checkoutLogo: string | null;\n  checkoutColorPrimary: string;\n  checkoutColorBackground: string;\n  checkoutColorCard: string;\n  checkoutColorText: string;\n  checkoutColorTextSecondary: string;\n  checkoutBorderRadius: string;\n}\n\n/**\n * Checkout page configuration (light and dark themes).\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface CheckoutSettings {\n  light: CheckoutThemeSettings;\n  dark: CheckoutThemeSettings;\n}\n\n/**\n * Store entity.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport interface Store {\n  id: string;\n  name: string;\n  status: EntityStatus;\n  logo: string | null;\n  supportEmail: string | null;\n  website: string | null;\n  slug: string | null;\n  isPublic: boolean;\n  prodEnabled: boolean;\n  webhookSettings: WebhookSettings | null;\n  notificationSettings: NotificationSettings | null;\n  checkoutSettings: CheckoutSettings | null;\n  deletedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/** Parameters for creating a store. */\nexport interface CreateStoreParams {\n  /** Store name (slug is auto-generated) */\n  name: string;\n}\n\n/** Parameters for updating a store. */\nexport interface UpdateStoreParams {\n  /** Store ID */\n  id: string;\n  name?: string;\n  status?: EntityStatus;\n  logo?: string | null;\n  supportEmail?: string | null;\n  website?: string | null;\n  isPublic?: boolean;\n  webhookSettings?: WebhookSettings | null;\n  notificationSettings?: NotificationSettings | null;\n  checkoutSettings?: CheckoutSettings | null;\n}\n\n/** Parameters for deleting (soft-delete) a store. */\nexport interface DeleteStoreParams {\n  /** Store ID */\n  id: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store Merchant (coming soon — endpoints return 501)\n// ---------------------------------------------------------------------------\n\n/** Parameters for adding a merchant to a store. */\nexport interface AddMerchantParams {\n  storeId: string;\n  email: string;\n  role: \"admin\" | \"member\";\n}\n\n/** Result of adding a merchant to a store. */\nexport interface AddMerchantResult {\n  storeId: string;\n  merchantId: string;\n  email: string;\n  role: string;\n  status: string;\n  addedAt: string;\n}\n\n/** Parameters for removing a merchant from a store. */\nexport interface RemoveMerchantParams {\n  storeId: string;\n  merchantId: string;\n}\n\n/** Result of removing a merchant from a store. */\nexport interface RemoveMerchantResult {\n  message: string;\n  removedAt: string;\n}\n\n/** Parameters for updating a merchant's role. */\nexport interface UpdateRoleParams {\n  storeId: string;\n  merchantId: string;\n  role: \"admin\" | \"member\";\n}\n\n/** Result of updating a merchant's role. */\nexport interface UpdateRoleResult {\n  storeId: string;\n  merchantId: string;\n  role: string;\n  updatedAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Product — shared types from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Price for a single currency.\n *\n * Amounts are stored in the smallest currency unit (e.g. cents, yen)\n * to avoid floating-point precision issues.\n *\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n *\n * @example\n * // USD $9.99\n * { amount: 999, taxIncluded: true, taxCategory: \"saas\" }\n *\n * @example\n * // JPY ¥1000\n * { amount: 1000, taxIncluded: false, taxCategory: \"software\" }\n */\nexport interface PriceInfo {\n  /** Price amount in smallest currency unit */\n  amount: number;\n  /** Whether the price is tax-inclusive */\n  taxIncluded: boolean;\n  /** Tax category */\n  taxCategory: TaxCategory;\n}\n\n/**\n * Multi-currency prices (keyed by ISO 4217 currency code).\n *\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n *\n * @example\n * {\n *   \"USD\": { amount: 999, taxIncluded: true, taxCategory: \"saas\" },\n *   \"EUR\": { amount: 899, taxIncluded: true, taxCategory: \"saas\" }\n * }\n */\nexport type Prices = Record<string, PriceInfo>;\n\n/**\n * Media asset (image or video).\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport interface MediaItem {\n  /** Media type */\n  type: `${MediaType}`;\n  /** Asset URL */\n  url: string;\n  /** Alt text */\n  alt?: string;\n  /** Thumbnail URL */\n  thumbnail?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Onetime Product — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * One-time product detail (public API shape).\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts OnetimeProductDetail\n */\nexport interface OnetimeProductDetail {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  prices: Prices;\n  media: MediaItem[];\n  successUrl: string | null;\n  metadata: Record<string, unknown>;\n  status: ProductVersionStatus;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a one-time product.\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts CreateOnetimeProductRequestBody\n */\nexport interface CreateOnetimeProductParams {\n  storeId: string;\n  name: string;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Parameters for updating a one-time product (creates a new version; skips if unchanged).\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts UpdateOnetimeProductContentRequestBody\n */\nexport interface UpdateOnetimeProductParams {\n  id: string;\n  name: string;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/** Parameters for publishing a one-time product's test version to production. */\nexport interface PublishOnetimeProductParams {\n  /** Product ID */\n  id: string;\n}\n\n/**\n * Parameters for updating a one-time product's status.\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts UpdateOnetimeStatusRequestBody\n */\nexport interface UpdateOnetimeStatusParams {\n  id: string;\n  status: ProductVersionStatus;\n}\n\n// ---------------------------------------------------------------------------\n// Subscription Product — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Subscription product detail (public API shape).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts SubscriptionProductDetail\n */\nexport interface SubscriptionProductDetail {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  media: MediaItem[];\n  successUrl: string | null;\n  metadata: Record<string, unknown>;\n  status: ProductVersionStatus;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a subscription product.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts CreateSubscriptionProductRequestBody\n */\nexport interface CreateSubscriptionProductParams {\n  storeId: string;\n  name: string;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Parameters for updating a subscription product (creates a new version; skips if unchanged).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts UpdateSubscriptionProductContentRequestBody\n */\nexport interface UpdateSubscriptionProductParams {\n  id: string;\n  name: string;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/** Parameters for publishing a subscription product's test version to production. */\nexport interface PublishSubscriptionProductParams {\n  /** Product ID */\n  id: string;\n}\n\n/**\n * Parameters for updating a subscription product's status.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts UpdateSubscriptionStatusRequestBody\n */\nexport interface UpdateSubscriptionStatusParams {\n  id: string;\n  status: ProductVersionStatus;\n}\n\n// ---------------------------------------------------------------------------\n// Subscription Product Group — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Group rules for subscription product groups.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts\n */\nexport interface GroupRules {\n  /** Whether trial period is shared across products in the group */\n  sharedTrial: boolean;\n}\n\n/**\n * Subscription product group entity.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts\n */\nexport interface SubscriptionProductGroup {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  rules: GroupRules;\n  productIds: string[];\n  environment: Environment;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a subscription product group.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts CreateGroupRequestBody\n */\nexport interface CreateSubscriptionProductGroupParams {\n  storeId: string;\n  name: string;\n  description?: string;\n  rules?: GroupRules;\n  productIds?: string[];\n}\n\n/**\n * Parameters for updating a subscription product group (`productIds` is a full replacement).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts UpdateGroupRequestBody\n */\nexport interface UpdateSubscriptionProductGroupParams {\n  id: string;\n  name?: string;\n  description?: string;\n  rules?: GroupRules;\n  productIds?: string[];\n}\n\n/** Parameters for hard-deleting a subscription product group. */\nexport interface DeleteSubscriptionProductGroupParams {\n  /** Group ID */\n  id: string;\n}\n\n/** Parameters for publishing a test-environment group to production (upsert). */\nexport interface PublishSubscriptionProductGroupParams {\n  /** Group ID */\n  id: string;\n}\n\n// ---------------------------------------------------------------------------\n// Order — from waffo-pancake-order-service\n// ---------------------------------------------------------------------------\n\n/** Parameters for canceling a subscription order. */\nexport interface CancelSubscriptionParams {\n  /** Order ID */\n  orderId: string;\n}\n\n/**\n * Result of canceling a subscription order.\n * @see waffo-pancake-order-service cancel-order route.ts\n */\nexport interface CancelSubscriptionResult {\n  orderId: string;\n  /** Status after cancellation (`\"canceled\"` or `\"canceling\"`) */\n  status: `${SubscriptionOrderStatus}`;\n}\n\n/**\n * Buyer billing details for checkout.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport interface BillingDetail {\n  /** Country code (ISO 3166-1 alpha-2) */\n  country: string;\n  /** Whether this is a business purchase */\n  isBusiness: boolean;\n  /** Postal / ZIP code */\n  postcode?: string;\n  /** State / province code (required for US/CA) */\n  state?: string;\n  /** Business name (required when isBusiness=true) */\n  businessName?: string;\n  /** Tax ID (required for EU businesses) */\n  taxId?: string;\n}\n\n/**\n * Parameters for creating a checkout session.\n * @see waffo-pancake-order-service/app/lib/types.ts CreateCheckoutSessionRequest\n */\nexport interface CreateCheckoutSessionParams {\n  /** Store ID */\n  storeId?: string;\n  /** Product ID */\n  productId: string;\n  /** Product type */\n  productType: `${CheckoutSessionProductType}`;\n  /** Currency code (ISO 4217) */\n  currency: string;\n  /** Optional price snapshot override (reads from DB if omitted) */\n  priceSnapshot?: PriceInfo;\n  /** Trial toggle override (subscription only) */\n  withTrial?: boolean;\n  /** Pre-filled buyer email */\n  buyerEmail?: string;\n  /** Pre-filled billing details */\n  billingDetail?: BillingDetail;\n  /** Redirect URL after successful payment */\n  successUrl?: string;\n  /** Session expiration in seconds (default: 7 days) */\n  expiresInSeconds?: number;\n  /** Custom metadata */\n  metadata?: Record<string, string>;\n}\n\n/** Result of creating a checkout session. */\nexport interface CheckoutSessionResult {\n  /** Session ID */\n  sessionId: string;\n  /** URL to redirect the customer to */\n  checkoutUrl: string;\n  /** Session expiration time (ISO 8601 UTC) */\n  expiresAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// GraphQL\n// ---------------------------------------------------------------------------\n\n/** Parameters for a GraphQL query. */\nexport interface GraphQLParams {\n  /** GraphQL query string */\n  query: string;\n  /** Query variables */\n  variables?: Record<string, unknown>;\n}\n\n/** GraphQL response envelope. */\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data: T | null;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: string[];\n  }>;\n}\n\n// ---------------------------------------------------------------------------\n// Webhook\n// ---------------------------------------------------------------------------\n\n/**\n * Webhook event types.\n * @see docs/api-reference/webhooks.mdx\n */\nexport enum WebhookEventType {\n  /** One-time order first payment succeeded */\n  OrderCompleted = \"order.completed\",\n  /** Subscription first payment succeeded (newly activated) */\n  SubscriptionActivated = \"subscription.activated\",\n  /** Subscription renewal payment succeeded */\n  SubscriptionPaymentSucceeded = \"subscription.payment_succeeded\",\n  /** Buyer initiated cancellation (expires at end of current period) */\n  SubscriptionCanceling = \"subscription.canceling\",\n  /** Buyer withdrew cancellation (subscription restored) */\n  SubscriptionUncanceled = \"subscription.uncanceled\",\n  /** Subscription product changed (upgrade/downgrade) */\n  SubscriptionUpdated = \"subscription.updated\",\n  /** Subscription fully terminated */\n  SubscriptionCanceled = \"subscription.canceled\",\n  /** Renewal payment failed (past due) */\n  SubscriptionPastDue = \"subscription.past_due\",\n  /** Refund succeeded */\n  RefundSucceeded = \"refund.succeeded\",\n  /** Refund failed */\n  RefundFailed = \"refund.failed\",\n}\n\n/**\n * Common data fields in a webhook event payload.\n * @see docs/api-reference/webhooks.mdx\n */\nexport interface WebhookEventData {\n  orderId: string;\n  buyerEmail: string;\n  currency: string;\n  /** Amount in smallest currency unit */\n  amount: number;\n  /** Tax amount in smallest currency unit */\n  taxAmount: number;\n  productName: string;\n}\n\n/**\n * Webhook event payload.\n *\n * @see docs/api-reference/webhooks.mdx\n *\n * @example\n * {\n *   id: \"550e8400-...\",\n *   timestamp: \"2026-03-10T08:30:00.000Z\",\n *   eventType: \"order.completed\",\n *   eventId: \"pay_660e8400-...\",\n *   storeId: \"770e8400-...\",\n *   mode: \"prod\",\n *   data: { orderId: \"...\", buyerEmail: \"...\", currency: \"USD\", amount: 2900, taxAmount: 290, productName: \"Pro Plan\" }\n * }\n */\nexport interface WebhookEvent<T = WebhookEventData> {\n  /** Delivery record unique ID (UUID), usable for idempotent deduplication */\n  id: string;\n  /** Event timestamp (ISO 8601 UTC) */\n  timestamp: string;\n  /** Event type */\n  eventType: `${WebhookEventType}` | (string & {});\n  /** Business event ID (e.g. payment ID, order ID) */\n  eventId: string;\n  /** Store ID the event belongs to */\n  storeId: string;\n  /** Environment identifier */\n  mode: `${Environment}`;\n  /** Event data */\n  data: T;\n}\n\n/** Options for {@link verifyWebhook}. */\nexport interface VerifyWebhookOptions {\n  /**\n   * Specify which environment's public key to use for verification.\n   * When omitted, both keys are tried automatically (prod first).\n   */\n  environment?: `${Environment}`;\n  /**\n   * Timestamp tolerance window in milliseconds for replay protection.\n   * Set to 0 to skip timestamp checking.\n   * @default 300000 (5 minutes)\n   */\n  toleranceMs?: number;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,sBAA2B;;;ACepB,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAClC;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,QAAoB;AAC9C,UAAM,YAAY,OAAO,CAAC,GAAG,WAAW;AACxC,UAAM,SAAS;AACf,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AACF;;;AC1BA,yBAAuC;AAehC,SAAS,YACd,QACA,MACA,WACA,MACA,YACQ;AACR,QAAM,eAAW,+BAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAC/D,QAAM,mBAAmB,GAAG,MAAM;AAAA,EAAK,IAAI;AAAA,EAAK,SAAS;AAAA,EAAK,QAAQ;AAEtE,QAAM,WAAO,+BAAW,QAAQ;AAChC,OAAK,OAAO,gBAAgB;AAC5B,SAAO,KAAK,KAAK,YAAY,QAAQ;AACvC;;;AFrBA,IAAM,mBAAmB;AAOlB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,QAA4B;AACtC,SAAK,aAAa,OAAO;AACzB,SAAK,aAAa,OAAO;AACzB,SAAK,WAAW,OAAO,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AACtE,SAAK,SAAS,OAAO,SAAS;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,KAAQ,MAAc,MAA0B;AACpD,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,EAAE,SAAS;AACzD,UAAM,YAAY,YAAY,QAAQ,MAAM,WAAW,SAAS,KAAK,UAAU;AAE/E,UAAM,WAAW,MAAM,KAAK,OAAO,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB,KAAK;AAAA,QACtB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,yBAAqB,gCAAW,QAAQ,EACrC,OAAO,GAAG,KAAK,UAAU,IAAI,IAAI,IAAI,OAAO,EAAE,EAC9C,OAAO,KAAK;AAAA,MACjB;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAED,UAAM,SAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,YAAY,UAAU,OAAO,QAAQ;AACvC,YAAM,IAAI,kBAAkB,SAAS,QAAQ,OAAO,MAAM;AAAA,IAC5D;AAEA,WAAO,OAAO;AAAA,EAChB;AACF;;;AG/DO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAchD,MAAM,kBAAkB,QAAwD;AAC9E,WAAO,KAAK,KAAK,KAAmB,wCAAwC,MAAM;AAAA,EACpF;AACF;;;AClBO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBhD,MAAM,cAAc,QAAqE;AACvF,WAAO,KAAK,KAAK,KAA4B,uCAAuC,MAAM;AAAA,EAC5F;AACF;;;ACtBO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBhD,MAAM,MAAmC,QAAoD;AAC3F,WAAO,KAAK,KAAK,KAAyB,eAAe,MAAM;AAAA,EACjE;AACF;;;AClBO,IAAM,0BAAN,MAA8B;AAAA,EACnC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAehD,MAAM,OAAO,QAAgF;AAC3F,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAgF;AAC3F,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAAiF;AAC7F,WAAO,KAAK,KAAK,KAAK,+CAA+C,MAAM;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,aAAa,QAA+E;AAChG,WAAO,KAAK,KAAK,KAAK,6CAA6C,MAAM;AAAA,EAC3E;AACF;;;ACvEO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBhD,MAAM,mBAAmB,QAAqE;AAC5F,WAAO,KAAK,KAAK,KAA+B,+CAA+C,MAAM;AAAA,EACvG;AACF;;;ACdO,IAAM,yBAAN,MAA6B;AAAA,EAClC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAehD,MAAM,IAAI,QAAuD;AAC/D,WAAO,KAAK,KAAK,KAAK,2CAA2C,MAAM;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAO,QAA6D;AACxE,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,WAAW,QAAqD;AACpE,WAAO,KAAK,KAAK,KAAK,0CAA0C,MAAM;AAAA,EACxE;AACF;;;ACtDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWhD,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AACF;;;AC5CO,IAAM,oCAAN,MAAwC;AAAA,EAC7C,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBhD,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAA6F;AACzG,WAAO,KAAK,KAAK,KAAK,wDAAwD,MAAM;AAAA,EACtF;AACF;;;AC9DO,IAAM,+BAAN,MAAmC;AAAA,EACxC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBhD,MAAM,OAAO,QAA0F;AACrG,WAAO,KAAK,KAAK,KAAK,mDAAmD,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAO,QAA0F;AACrG,WAAO,KAAK,KAAK,KAAK,mDAAmD,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAA2F;AACvG,WAAO,KAAK,KAAK,KAAK,oDAAoD,MAAM;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,aAAa,QAAyF;AAC1G,WAAO,KAAK,KAAK,KAAK,kDAAkD,MAAM;AAAA,EAChF;AACF;;;AC1BO,IAAM,eAAN,MAAmB;AAAA,EACP;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAA4B;AACtC,SAAK,OAAO,IAAI,WAAW,MAAM;AAEjC,SAAK,OAAO,IAAI,aAAa,KAAK,IAAI;AACtC,SAAK,SAAS,IAAI,eAAe,KAAK,IAAI;AAC1C,SAAK,iBAAiB,IAAI,uBAAuB,KAAK,IAAI;AAC1D,SAAK,kBAAkB,IAAI,wBAAwB,KAAK,IAAI;AAC5D,SAAK,uBAAuB,IAAI,6BAA6B,KAAK,IAAI;AACtE,SAAK,4BAA4B,IAAI,kCAAkC,KAAK,IAAI;AAChF,SAAK,SAAS,IAAI,eAAe,KAAK,IAAI;AAC1C,SAAK,WAAW,IAAI,iBAAiB,KAAK,IAAI;AAC9C,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAAA,EAC9C;AACF;;;AC7EA,IAAAC,sBAA6B;AAK7B,IAAM,uBAAuB,IAAI,KAAK;AAGtC,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWxB,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBxB,SAAS,qBAAqB,QAA2C;AACvE,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,QAAI,UAAU,GAAI;AAClB,UAAM,MAAM,KAAK,MAAM,GAAG,KAAK,EAAE,KAAK;AACtC,UAAM,QAAQ,KAAK,MAAM,QAAQ,CAAC,EAAE,KAAK;AACzC,QAAI,QAAQ,IAAK,KAAI;AAAA,aACZ,QAAQ,KAAM,MAAK;AAAA,EAC9B;AACA,SAAO,EAAE,GAAG,GAAG;AACjB;AAUA,SAAS,UAAU,gBAAwB,IAAY,WAA4B;AACjF,QAAM,eAAW,kCAAa,YAAY;AAC1C,WAAS,OAAO,cAAc;AAC9B,SAAO,SAAS,OAAO,WAAW,IAAI,QAAQ;AAChD;AAqDO,SAAS,cACd,SACA,iBACA,SACiB;AACjB,MAAI,CAAC,iBAAiB;AACpB,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAEA,QAAM,EAAE,GAAG,GAAG,IAAI,qBAAqB,eAAe;AACtD,MAAI,CAAC,KAAK,CAAC,IAAI;AACb,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AAGA,QAAM,cAAc,SAAS,eAAe;AAC5C,MAAI,cAAc,GAAG;AACnB,UAAM,cAAc,OAAO,CAAC;AAC5B,QAAI,OAAO,MAAM,WAAW,GAAG;AAC7B,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,QAAI,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,IAAI,aAAa;AACpD,YAAM,IAAI,MAAM,qEAAqE;AAAA,IACvF;AAAA,EACF;AAGA,QAAM,iBAAiB,GAAG,CAAC,IAAI,OAAO;AACtC,QAAM,MAAM,SAAS;AAErB,MAAI,QAAQ,QAAQ;AAClB,QAAI,CAAC,UAAU,gBAAgB,IAAI,eAAe,GAAG;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAAA,EACF,WAAW,QAAQ,QAAQ;AACzB,QAAI,CAAC,UAAU,gBAAgB,IAAI,eAAe,GAAG;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAAA,EACF,OAAO;AAEL,UAAM,YAAY,UAAU,gBAAgB,IAAI,eAAe;AAC/D,QAAI,CAAC,WAAW;AACd,YAAM,YAAY,UAAU,gBAAgB,IAAI,eAAe;AAC/D,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AAEA,SAAO,KAAK,MAAM,OAAO;AAC3B;;;AC3GO,IAAK,cAAL,kBAAKC,iBAAL;AACL,EAAAA,aAAA,UAAO;AACP,EAAAA,aAAA,UAAO;AAFG,SAAAA;AAAA,GAAA;AASL,IAAK,cAAL,kBAAKC,iBAAL;AACL,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,UAAO;AACP,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,WAAQ;AACR,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,yBAAsB;AAPZ,SAAAA;AAAA,GAAA;AAcL,IAAK,gBAAL,kBAAKC,mBAAL;AACL,EAAAA,eAAA,YAAS;AACT,EAAAA,eAAA,aAAU;AACV,EAAAA,eAAA,eAAY;AACZ,EAAAA,eAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAWL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,YAAS;AACT,EAAAA,sBAAA,cAAW;AAFD,SAAAA;AAAA,GAAA;AASL,IAAK,eAAL,kBAAKC,kBAAL;AACL,EAAAA,cAAA,YAAS;AACT,EAAAA,cAAA,cAAW;AACX,EAAAA,cAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAUL,IAAK,YAAL,kBAAKC,eAAL;AACL,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,YAAS;AAHC,SAAAA;AAAA,GAAA;AAUL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,aAAU;AACV,EAAAA,oBAAA,eAAY;AACZ,EAAAA,oBAAA,cAAW;AAHD,SAAAA;AAAA,GAAA;AAmBL,IAAK,0BAAL,kBAAKC,6BAAL;AACL,EAAAA,yBAAA,aAAU;AACV,EAAAA,yBAAA,YAAS;AACT,EAAAA,yBAAA,eAAY;AACZ,EAAAA,yBAAA,cAAW;AACX,EAAAA,yBAAA,aAAU;AACV,EAAAA,yBAAA,aAAU;AANA,SAAAA;AAAA,GAAA;AAaL,IAAK,gBAAL,kBAAKC,mBAAL;AACL,EAAAA,eAAA,aAAU;AACV,EAAAA,eAAA,eAAY;AACZ,EAAAA,eAAA,YAAS;AACT,EAAAA,eAAA,cAAW;AAJD,SAAAA;AAAA,GAAA;AAWL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,aAAU;AACV,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,gBAAa;AACb,EAAAA,oBAAA,eAAY;AACZ,EAAAA,oBAAA,YAAS;AANC,SAAAA;AAAA,GAAA;AAaL,IAAK,eAAL,kBAAKC,kBAAL;AACL,EAAAA,cAAA,eAAY;AACZ,EAAAA,cAAA,YAAS;AAFC,SAAAA;AAAA,GAAA;AASL,IAAK,YAAL,kBAAKC,eAAL;AACL,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,WAAQ;AAFE,SAAAA;AAAA,GAAA;AASL,IAAK,6BAAL,kBAAKC,gCAAL;AACL,EAAAA,4BAAA,aAAU;AACV,EAAAA,4BAAA,kBAAe;AAFL,SAAAA;AAAA,GAAA;AAML,IAAK,aAAL,kBAAKC,gBAAL;AACL,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,UAAO;AACP,EAAAA,YAAA,WAAQ;AACR,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,WAAQ;AACR,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,cAAW;AACX,EAAAA,YAAA,WAAQ;AARE,SAAAA;AAAA,GAAA;AA4iBL,IAAK,mBAAL,kBAAKC,sBAAL;AAEL,EAAAA,kBAAA,oBAAiB;AAEjB,EAAAA,kBAAA,2BAAwB;AAExB,EAAAA,kBAAA,kCAA+B;AAE/B,EAAAA,kBAAA,2BAAwB;AAExB,EAAAA,kBAAA,4BAAyB;AAEzB,EAAAA,kBAAA,yBAAsB;AAEtB,EAAAA,kBAAA,0BAAuB;AAEvB,EAAAA,kBAAA,yBAAsB;AAEtB,EAAAA,kBAAA,qBAAkB;AAElB,EAAAA,kBAAA,kBAAe;AApBL,SAAAA;AAAA,GAAA;","names":["import_node_crypto","import_node_crypto","Environment","TaxCategory","BillingPeriod","ProductVersionStatus","EntityStatus","StoreRole","OnetimeOrderStatus","SubscriptionOrderStatus","PaymentStatus","RefundTicketStatus","RefundStatus","MediaType","CheckoutSessionProductType","ErrorLayer","WebhookEventType"]}
+{"version":3,"sources":["../src/index.ts","../src/http-client.ts","../src/errors.ts","../src/signing.ts","../src/resources/auth.ts","../src/resources/checkout.ts","../src/resources/graphql.ts","../src/resources/onetime-products.ts","../src/resources/orders.ts","../src/resources/store-merchants.ts","../src/resources/stores.ts","../src/resources/subscription-product-groups.ts","../src/resources/subscription-products.ts","../src/client.ts","../src/webhooks.ts","../src/types.ts"],"sourcesContent":["// Client\nexport { WaffoPancake } from \"./client.js\";\n\n// Errors\nexport { WaffoPancakeError } from \"./errors.js\";\n\n// Webhooks\nexport { verifyWebhook } from \"./webhooks.js\";\n\n// Enums (runtime values)\nexport {\n  BillingPeriod,\n  CheckoutSessionProductType,\n  EntityStatus,\n  Environment,\n  ErrorLayer,\n  MediaType,\n  OnetimeOrderStatus,\n  PaymentStatus,\n  ProductVersionStatus,\n  RefundStatus,\n  RefundTicketStatus,\n  StoreRole,\n  SubscriptionOrderStatus,\n  TaxCategory,\n  WebhookEventType,\n} from \"./types.js\";\n\n// Types (interfaces & type aliases)\nexport type {\n  // Config\n  WaffoPancakeConfig,\n\n  // Response envelope\n  ApiError,\n  ApiErrorResponse,\n  ApiResponse,\n  ApiSuccessResponse,\n\n  // Auth\n  IssueSessionTokenParams,\n  SessionToken,\n\n  // Store\n  CheckoutSettings,\n  CheckoutThemeSettings,\n  CreateStoreParams,\n  DeleteStoreParams,\n  NotificationSettings,\n  Store,\n  UpdateStoreParams,\n  WebhookSettings,\n\n  // Store Merchant\n  AddMerchantParams,\n  AddMerchantResult,\n  RemoveMerchantParams,\n  RemoveMerchantResult,\n  UpdateRoleParams,\n  UpdateRoleResult,\n\n  // Product shared\n  MediaItem,\n  PriceInfo,\n  Prices,\n\n  // Onetime Product\n  CreateOnetimeProductParams,\n  OnetimeProductDetail,\n  PublishOnetimeProductParams,\n  UpdateOnetimeProductParams,\n  UpdateOnetimeStatusParams,\n\n  // Subscription Product\n  CreateSubscriptionProductParams,\n  PublishSubscriptionProductParams,\n  SubscriptionProductDetail,\n  UpdateSubscriptionProductParams,\n  UpdateSubscriptionStatusParams,\n\n  // Subscription Product Group\n  CreateSubscriptionProductGroupParams,\n  DeleteSubscriptionProductGroupParams,\n  GroupRules,\n  PublishSubscriptionProductGroupParams,\n  SubscriptionProductGroup,\n  UpdateSubscriptionProductGroupParams,\n\n  // Order\n  BillingDetail,\n  CancelSubscriptionParams,\n  CancelSubscriptionResult,\n  CheckoutSessionResult,\n  CreateCheckoutSessionParams,\n\n  // GraphQL\n  GraphQLParams,\n  GraphQLResponse,\n\n  // Webhook\n  VerifyWebhookOptions,\n  WebhookEvent,\n  WebhookEventData,\n} from \"./types.js\";\n","import { createHash } from \"node:crypto\";\n\nimport { WaffoPancakeError } from \"./errors.js\";\nimport { signRequest } from \"./signing.js\";\n\nimport type { ApiResponse, WaffoPancakeConfig } from \"./types.js\";\n\nconst DEFAULT_BASE_URL = \"https://waffo-pancake-auth-service.vercel.app\";\n\n/**\n * Internal HTTP client that auto-signs requests and attaches idempotency keys.\n *\n * Not exported publicly — used by resource classes via {@link WaffoPancake}.\n */\nexport class HttpClient {\n  private readonly merchantId: string;\n  private readonly privateKey: string;\n  private readonly baseUrl: string;\n  private readonly _fetch: typeof fetch;\n\n  constructor(config: WaffoPancakeConfig) {\n    this.merchantId = config.merchantId;\n    this.privateKey = config.privateKey;\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this._fetch = config.fetch ?? fetch;\n  }\n\n  /**\n   * Send a signed POST request and return the parsed `data` field.\n   *\n   * Behavior:\n   * - Generates a deterministic `X-Idempotency-Key` from `merchantId + path + body` (same request produces same key)\n   * - Auto-builds RSA-SHA256 signature (`X-Merchant-Id` / `X-Timestamp` / `X-Signature`)\n   * - Unwraps the response envelope: returns `data` on success, throws `WaffoPancakeError` on failure\n   *\n   * @param path - API path (e.g. `/v1/actions/store/create-store`)\n   * @param body - Request body object\n   * @returns Parsed `data` field from the response\n   * @throws {WaffoPancakeError} When the API returns errors\n   */\n  async post<T>(path: string, body: object): Promise<T> {\n    const bodyStr = JSON.stringify(body);\n    const timestamp = Math.floor(Date.now() / 1000).toString();\n    const signature = signRequest(\"POST\", path, timestamp, bodyStr, this.privateKey);\n\n    const response = await this._fetch(`${this.baseUrl}${path}`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"X-Merchant-Id\": this.merchantId,\n        \"X-Timestamp\": timestamp,\n        \"X-Signature\": signature,\n        \"X-Idempotency-Key\": createHash(\"sha256\")\n          .update(`${this.merchantId}:${path}:${bodyStr}`)\n          .digest(\"hex\"),\n      },\n      body: bodyStr,\n    });\n\n    const result = (await response.json()) as ApiResponse<T>;\n\n    if (\"errors\" in result && result.errors) {\n      throw new WaffoPancakeError(response.status, result.errors);\n    }\n\n    return result.data as T;\n  }\n}\n","import type { ApiError } from \"./types.js\";\n\n/**\n * Error thrown when the API returns a non-success response.\n *\n * @example\n * try {\n *   await client.stores.create({ name: \"My Store\" });\n * } catch (err) {\n *   if (err instanceof WaffoPancakeError) {\n *     console.log(err.status);        // 400\n *     console.log(err.errors[0]);     // { message: \"...\", layer: \"store\" }\n *   }\n * }\n */\nexport class WaffoPancakeError extends Error {\n  readonly status: number;\n  readonly errors: ApiError[];\n\n  constructor(status: number, errors: ApiError[]) {\n    const rootCause = errors[0]?.message ?? \"Unknown error\";\n    super(rootCause);\n    this.name = \"WaffoPancakeError\";\n    this.status = status;\n    this.errors = errors;\n  }\n}\n","import { createHash, createSign } from \"node:crypto\";\n\n/**\n * Build canonical request string and sign with RSA-SHA256.\n *\n * Canonical request format:\n *   METHOD\\nPATH\\nTIMESTAMP\\nSHA256(BODY)\n *\n * @param method - HTTP method (e.g. \"POST\")\n * @param path - Request path (e.g. \"/v1/actions/store/create-store\")\n * @param timestamp - Unix epoch seconds string\n * @param body - Serialized JSON body\n * @param privateKey - RSA private key in PEM format\n * @returns Base64-encoded RSA-SHA256 signature\n */\nexport function signRequest(\n  method: string,\n  path: string,\n  timestamp: string,\n  body: string,\n  privateKey: string,\n): string {\n  const bodyHash = createHash(\"sha256\").update(body).digest(\"base64\");\n  const canonicalRequest = `${method}\\n${path}\\n${timestamp}\\n${bodyHash}`;\n\n  const sign = createSign(\"sha256\");\n  sign.update(canonicalRequest);\n  return sign.sign(privateKey, \"base64\");\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { IssueSessionTokenParams, SessionToken } from \"../types.js\";\n\n/** Authentication resource — issue session tokens for buyers. */\nexport class AuthResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Issue a session token for a buyer.\n   *\n   * @param params - Token issuance parameters\n   * @returns Issued session token with expiration\n   *\n   * @example\n   * const { token, expiresAt } = await client.auth.issueSessionToken({\n   *   storeId: \"store_xxx\",\n   *   buyerIdentity: \"customer@example.com\",\n   * });\n   */\n  async issueSessionToken(params: IssueSessionTokenParams): Promise<SessionToken> {\n    return this.http.post<SessionToken>(\"/v1/actions/auth/issue-session-token\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { CheckoutSessionResult, CreateCheckoutSessionParams } from \"../types.js\";\n\n/** Checkout resource — create checkout sessions for payments. */\nexport class CheckoutResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a checkout session. Returns a URL to redirect the customer to.\n   *\n   * @param params - Checkout session parameters\n   * @returns Session ID, checkout URL, and expiration\n   *\n   * @example\n   * const session = await client.checkout.createSession({\n   *   storeId: \"store_xxx\",\n   *   productId: \"prod_xxx\",\n   *   productType: \"onetime\",\n   *   currency: \"USD\",\n   *   buyerEmail: \"customer@example.com\",\n   * });\n   * // Redirect to session.checkoutUrl\n   */\n  async createSession(params: CreateCheckoutSessionParams): Promise<CheckoutSessionResult> {\n    return this.http.post<CheckoutSessionResult>(\"/v1/actions/checkout/create-session\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { GraphQLParams, GraphQLResponse } from \"../types.js\";\n\n/** GraphQL query resource (Query only, no Mutations). */\nexport class GraphQLResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Execute a GraphQL query (Query only, no Mutations).\n   *\n   * @param params - GraphQL query and optional variables\n   * @returns GraphQL response with data and optional errors\n   *\n   * @example\n   * const result = await client.graphql.query<{ stores: Array<{ id: string; name: string }> }>({\n   *   query: `query { stores { id name status } }`,\n   * });\n   * console.log(result.data?.stores);\n   *\n   * @example\n   * const result = await client.graphql.query({\n   *   query: `query ($id: ID!) { onetimeProduct(id: $id) { id name prices } }`,\n   *   variables: { id: \"prod_xxx\" },\n   * });\n   */\n  async query<T = Record<string, unknown>>(params: GraphQLParams): Promise<GraphQLResponse<T>> {\n    return this.http.post<GraphQLResponse<T>>(\"/v1/graphql\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateOnetimeProductParams,\n  OnetimeProductDetail,\n  PublishOnetimeProductParams,\n  UpdateOnetimeProductParams,\n  UpdateOnetimeStatusParams,\n} from \"../types.js\";\n\n/** One-time product management resource. */\nexport class OnetimeProductsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a one-time product with multi-currency pricing.\n   *\n   * @param params - Product creation parameters\n   * @returns Created product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"E-Book\",\n   *   prices: { USD: { amount: 2900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n   * });\n   */\n  async create(params: CreateOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/create-product\", params);\n  }\n\n  /**\n   * Update a one-time product. Creates a new version; skips if unchanged.\n   *\n   * @param params - Product update parameters (all content fields required)\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.update({\n   *   id: \"prod_xxx\",\n   *   name: \"E-Book v2\",\n   *   prices: { USD: { amount: 3900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n   * });\n   */\n  async update(params: UpdateOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/update-product\", params);\n  }\n\n  /**\n   * Publish a one-time product's test version to production.\n   *\n   * @param params - Product to publish\n   * @returns Published product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.publish({ id: \"prod_xxx\" });\n   */\n  async publish(params: PublishOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/publish-product\", params);\n  }\n\n  /**\n   * Update a one-time product's status (active/inactive).\n   *\n   * @param params - Status update parameters\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.updateStatus({\n   *   id: \"prod_xxx\",\n   *   status: ProductVersionStatus.Inactive,\n   * });\n   */\n  async updateStatus(params: UpdateOnetimeStatusParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/update-status\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { CancelSubscriptionParams, CancelSubscriptionResult } from \"../types.js\";\n\n/** Order management resource. */\nexport class OrdersResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Cancel a subscription order.\n   *\n   * - pending -> canceled (immediate)\n   * - active/trialing -> canceling (PSP cancel, webhook updates later)\n   *\n   * @param params - Order to cancel\n   * @returns Order ID and resulting status\n   *\n   * @example\n   * const { orderId, status } = await client.orders.cancelSubscription({\n   *   orderId: \"order_xxx\",\n   * });\n   * // status: \"canceled\" or \"canceling\"\n   */\n  async cancelSubscription(params: CancelSubscriptionParams): Promise<CancelSubscriptionResult> {\n    return this.http.post<CancelSubscriptionResult>(\"/v1/actions/subscription-order/cancel-order\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  AddMerchantParams,\n  AddMerchantResult,\n  RemoveMerchantParams,\n  RemoveMerchantResult,\n  UpdateRoleParams,\n  UpdateRoleResult,\n} from \"../types.js\";\n\n/** Store merchant management resource (coming soon — endpoints return 501). */\nexport class StoreMerchantsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Add a merchant to a store.\n   *\n   * @param params - Merchant addition parameters\n   * @returns Added merchant details\n   *\n   * @example\n   * const result = await client.storeMerchants.add({\n   *   storeId: \"store_xxx\",\n   *   email: \"member@example.com\",\n   *   role: \"admin\",\n   * });\n   */\n  async add(params: AddMerchantParams): Promise<AddMerchantResult> {\n    return this.http.post(\"/v1/actions/store-merchant/add-merchant\", params);\n  }\n\n  /**\n   * Remove a merchant from a store.\n   *\n   * @param params - Merchant removal parameters\n   * @returns Removal confirmation\n   *\n   * @example\n   * const result = await client.storeMerchants.remove({\n   *   storeId: \"store_xxx\",\n   *   merchantId: \"merchant_xxx\",\n   * });\n   */\n  async remove(params: RemoveMerchantParams): Promise<RemoveMerchantResult> {\n    return this.http.post(\"/v1/actions/store-merchant/remove-merchant\", params);\n  }\n\n  /**\n   * Update a merchant's role in a store.\n   *\n   * @param params - Role update parameters\n   * @returns Updated role details\n   *\n   * @example\n   * const result = await client.storeMerchants.updateRole({\n   *   storeId: \"store_xxx\",\n   *   merchantId: \"merchant_xxx\",\n   *   role: \"member\",\n   * });\n   */\n  async updateRole(params: UpdateRoleParams): Promise<UpdateRoleResult> {\n    return this.http.post(\"/v1/actions/store-merchant/update-role\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateStoreParams,\n  DeleteStoreParams,\n  Store,\n  UpdateStoreParams,\n} from \"../types.js\";\n\n/** Store management resource — create, update, and delete stores. */\nexport class StoresResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a new store. Slug is auto-generated from the name.\n   *\n   * @param params - Store creation parameters\n   * @returns Created store entity\n   *\n   * @example\n   * const { store } = await client.stores.create({ name: \"My Store\" });\n   */\n  async create(params: CreateStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/create-store\", params);\n  }\n\n  /**\n   * Update an existing store's settings.\n   *\n   * @param params - Fields to update (only provided fields are changed)\n   * @returns Updated store entity\n   *\n   * @example\n   * const { store } = await client.stores.update({\n   *   id: \"store_xxx\",\n   *   name: \"Updated Name\",\n   *   supportEmail: \"help@example.com\",\n   * });\n   */\n  async update(params: UpdateStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/update-store\", params);\n  }\n\n  /**\n   * Soft-delete a store. Only the owner can delete.\n   *\n   * @param params - Store to delete\n   * @returns Deleted store entity (with `deletedAt` set)\n   *\n   * @example\n   * const { store } = await client.stores.delete({ id: \"store_xxx\" });\n   */\n  async delete(params: DeleteStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/delete-store\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateSubscriptionProductGroupParams,\n  DeleteSubscriptionProductGroupParams,\n  PublishSubscriptionProductGroupParams,\n  SubscriptionProductGroup,\n  UpdateSubscriptionProductGroupParams,\n} from \"../types.js\";\n\n/** Subscription product group management resource (shared trial, plan switching). */\nexport class SubscriptionProductGroupsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a subscription product group for shared-trial or plan switching.\n   *\n   * @param params - Group creation parameters\n   * @returns Created group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"Pro Plans\",\n   *   rules: { sharedTrial: true },\n   *   productIds: [\"prod_aaa\", \"prod_bbb\"],\n   * });\n   */\n  async create(params: CreateSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/create-group\", params);\n  }\n\n  /**\n   * Update a subscription product group. `productIds` is a full replacement.\n   *\n   * @param params - Group update parameters\n   * @returns Updated group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.update({\n   *   id: \"group_xxx\",\n   *   productIds: [\"prod_aaa\", \"prod_bbb\", \"prod_ccc\"],\n   * });\n   */\n  async update(params: UpdateSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/update-group\", params);\n  }\n\n  /**\n   * Hard-delete a subscription product group.\n   *\n   * @param params - Group to delete\n   * @returns Deleted group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.delete({ id: \"group_xxx\" });\n   */\n  async delete(params: DeleteSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/delete-group\", params);\n  }\n\n  /**\n   * Publish a test-environment group to production (upsert).\n   *\n   * @param params - Group to publish\n   * @returns Published group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.publish({ id: \"group_xxx\" });\n   */\n  async publish(params: PublishSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/publish-group\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateSubscriptionProductParams,\n  PublishSubscriptionProductParams,\n  SubscriptionProductDetail,\n  UpdateSubscriptionProductParams,\n  UpdateSubscriptionStatusParams,\n} from \"../types.js\";\n\n/** Subscription product management resource. */\nexport class SubscriptionProductsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a subscription product with billing period and multi-currency pricing.\n   *\n   * @param params - Product creation parameters\n   * @returns Created product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"Pro Plan\",\n   *   billingPeriod: \"monthly\",\n   *   prices: { USD: { amount: 999, taxIncluded: false, taxCategory: \"saas\" } },\n   * });\n   */\n  async create(params: CreateSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/create-product\", params);\n  }\n\n  /**\n   * Update a subscription product. Creates a new version; skips if unchanged.\n   *\n   * @param params - Product update parameters (all content fields required)\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.update({\n   *   id: \"prod_xxx\",\n   *   name: \"Pro Plan v2\",\n   *   billingPeriod: \"monthly\",\n   *   prices: { USD: { amount: 1499, taxIncluded: false, taxCategory: \"saas\" } },\n   * });\n   */\n  async update(params: UpdateSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/update-product\", params);\n  }\n\n  /**\n   * Publish a subscription product's test version to production.\n   *\n   * @param params - Product to publish\n   * @returns Published product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.publish({ id: \"prod_xxx\" });\n   */\n  async publish(params: PublishSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/publish-product\", params);\n  }\n\n  /**\n   * Update a subscription product's status (active/inactive).\n   *\n   * @param params - Status update parameters\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.updateStatus({\n   *   id: \"prod_xxx\",\n   *   status: ProductVersionStatus.Active,\n   * });\n   */\n  async updateStatus(params: UpdateSubscriptionStatusParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/update-status\", params);\n  }\n}\n","import { HttpClient } from \"./http-client.js\";\nimport { AuthResource } from \"./resources/auth.js\";\nimport { CheckoutResource } from \"./resources/checkout.js\";\nimport { GraphQLResource } from \"./resources/graphql.js\";\nimport { OnetimeProductsResource } from \"./resources/onetime-products.js\";\nimport { OrdersResource } from \"./resources/orders.js\";\nimport { StoreMerchantsResource } from \"./resources/store-merchants.js\";\nimport { StoresResource } from \"./resources/stores.js\";\nimport { SubscriptionProductGroupsResource } from \"./resources/subscription-product-groups.js\";\nimport { SubscriptionProductsResource } from \"./resources/subscription-products.js\";\n\nimport type { WaffoPancakeConfig } from \"./types.js\";\n\n/**\n * Waffo Pancake TypeScript SDK client.\n *\n * Uses Merchant API Key (RSA-SHA256) authentication. All requests are\n * automatically signed — no manual header construction needed.\n *\n * @example\n * import { WaffoPancake } from \"@waffo/pancake-ts\";\n *\n * const client = new WaffoPancake({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n *\n * // Create a store\n * const { store } = await client.stores.create({ name: \"My Store\" });\n *\n * // Create a product\n * const { product } = await client.onetimeProducts.create({\n *   storeId: store.id,\n *   name: \"E-Book\",\n *   prices: { USD: { amount: 2900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n * });\n *\n * // Create a checkout session\n * const session = await client.checkout.createSession({\n *   storeId: store.id,\n *   productId: product.id,\n *   productType: \"onetime\",\n *   currency: \"USD\",\n * });\n * // => redirect customer to session.checkoutUrl\n *\n * // Query data via GraphQL\n * const result = await client.graphql.query({\n *   query: `query { stores { id name status } }`,\n * });\n */\nexport class WaffoPancake {\n  private readonly http: HttpClient;\n\n  readonly auth: AuthResource;\n  readonly stores: StoresResource;\n  readonly storeMerchants: StoreMerchantsResource;\n  readonly onetimeProducts: OnetimeProductsResource;\n  readonly subscriptionProducts: SubscriptionProductsResource;\n  readonly subscriptionProductGroups: SubscriptionProductGroupsResource;\n  readonly orders: OrdersResource;\n  readonly checkout: CheckoutResource;\n  readonly graphql: GraphQLResource;\n\n  constructor(config: WaffoPancakeConfig) {\n    this.http = new HttpClient(config);\n\n    this.auth = new AuthResource(this.http);\n    this.stores = new StoresResource(this.http);\n    this.storeMerchants = new StoreMerchantsResource(this.http);\n    this.onetimeProducts = new OnetimeProductsResource(this.http);\n    this.subscriptionProducts = new SubscriptionProductsResource(this.http);\n    this.subscriptionProductGroups = new SubscriptionProductGroupsResource(this.http);\n    this.orders = new OrdersResource(this.http);\n    this.checkout = new CheckoutResource(this.http);\n    this.graphql = new GraphQLResource(this.http);\n  }\n}\n","import { createVerify } from \"node:crypto\";\n\nimport type { VerifyWebhookOptions, WebhookEvent } from \"./types.js\";\n\n/** Default tolerance: 5 minutes */\nconst DEFAULT_TOLERANCE_MS = 5 * 60 * 1000;\n\n/** Waffo Pancake test environment webhook verification public key. */\nconst TEST_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnmRY6yMMA3lVqmAU6ZG\nb1sjL/+r/z6E+ZjkXaDAKiqOhk9rpazni0bNsGXwmftTPk9jy2wn+j6JHODD/WH/\nSCnSfvKkLIjy4Hk7BuCgB174C0ydan7J+KgXLkOwgCAxxB68t2tezldwo74ZpXgn\nF49opzMvQ9prEwIAWOE+kV9iK6gx/AckSMtHIHpUesoPDkldpmFHlB2qpf1vsFTZ\n5kD6DmGl+2GIVK01aChy2lk8pLv0yUMu18v44sLkO5M44TkGPJD9qG09wrvVG2wp\nOTVCn1n5pP8P+HRLcgzbUB3OlZVfdFurn6EZwtyL4ZD9kdkQ4EZE/9inKcp3c1h4\nxwIDAQAB\n-----END PUBLIC KEY-----`;\n\n/** Waffo Pancake production environment webhook verification public key. */\nconst PROD_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+xApdTIb4ua+DgZKQ54\niBsD82ybyhGCLRETONW4Jgbb3A8DUM1LqBk6r/CmTOCHqLalTQHNigvP3R5zkDNX\niRJz6gA4MJ/+8K0+mnEE2RISQzN+Qu65TNd6svb+INm/kMaftY4uIXr6y6kchtTJ\ndwnQhcKdAL2v7h7IFnkVelQsKxDdb2PqX8xX/qwd01iXvMcpCCaXovUwZsxH2QN5\nZKBTseJivbhUeyJCco4fdUyxOMHe2ybCVhyvim2uxAl1nkvL5L8RCWMCAV55LLo0\n9OhmLahz/DYNu13YLVP6dvIT09ZFBYU6Owj1NxdinTynlJCFS9VYwBgmftosSE1U\ndwIDAQAB\n-----END PUBLIC KEY-----`;\n\n/**\n * Parse `X-Waffo-Signature` header.\n *\n * Format: `t=<timestamp>,v1=<base64signature>`\n *\n * @returns Parsed `t` (timestamp string) and `v1` (base64 signature)\n */\nfunction parseSignatureHeader(header: string): { t: string; v1: string } {\n  let t = \"\";\n  let v1 = \"\";\n  for (const pair of header.split(\",\")) {\n    const eqIdx = pair.indexOf(\"=\");\n    if (eqIdx === -1) continue;\n    const key = pair.slice(0, eqIdx).trim();\n    const value = pair.slice(eqIdx + 1).trim();\n    if (key === \"t\") t = value;\n    else if (key === \"v1\") v1 = value;\n  }\n  return { t, v1 };\n}\n\n/**\n * Verify RSA-SHA256 signature against a public key.\n *\n * @param signatureInput - The string to verify (`${t}.${rawBody}`)\n * @param v1 - Base64-encoded signature\n * @param publicKey - PEM public key\n * @returns Whether the signature is valid\n */\nfunction rsaVerify(signatureInput: string, v1: string, publicKey: string): boolean {\n  const verifier = createVerify(\"RSA-SHA256\");\n  verifier.update(signatureInput);\n  return verifier.verify(publicKey, v1, \"base64\");\n}\n\n/**\n * Verify and parse an incoming Waffo Pancake webhook event.\n *\n * Uses built-in Waffo public keys (RSA-SHA256) for signature verification.\n * Test and production environments use different key pairs; both are embedded in the SDK.\n *\n * Behavior:\n * - Parses the `X-Waffo-Signature` header (`t=<timestamp>,v1=<base64sig>`)\n * - Builds signature input `${t}.${rawBody}` and verifies with RSA-SHA256\n * - When `environment` is not specified, tries prod key first, then test key\n * - Optional: checks timestamp to prevent replay attacks (default 5-minute tolerance)\n *\n * @param payload - Raw request body string (must be unparsed)\n * @param signatureHeader - Value of the `X-Waffo-Signature` header\n * @param options - Verification options\n * @returns Parsed webhook event\n * @throws Error if header is missing/malformed, signature is invalid, or timestamp is stale\n *\n * @example\n * // Express (use raw body!)\n * app.post(\"/webhooks\", express.raw({ type: \"application/json\" }), (req, res) => {\n *   try {\n *     const event = verifyWebhook(\n *       req.body.toString(\"utf-8\"),\n *       req.headers[\"x-waffo-signature\"] as string,\n *     );\n *     res.status(200).send(\"OK\");\n *     handleEventAsync(event).catch(console.error);\n *   } catch {\n *     res.status(401).send(\"Invalid signature\");\n *   }\n * });\n *\n * @example\n * // Next.js App Router\n * export async function POST(request: Request) {\n *   const body = await request.text();\n *   const sig = request.headers.get(\"x-waffo-signature\");\n *   const event = verifyWebhook(body, sig);\n *   // handle event ...\n *   return new Response(\"OK\");\n * }\n *\n * @example\n * // Specify environment explicitly\n * const event = verifyWebhook(body, sig, { environment: \"prod\" });\n *\n * @example\n * // Disable replay protection\n * const event = verifyWebhook(body, sig, { toleranceMs: 0 });\n */\nexport function verifyWebhook<T = Record<string, unknown>>(\n  payload: string,\n  signatureHeader: string | undefined | null,\n  options?: VerifyWebhookOptions,\n): WebhookEvent<T> {\n  if (!signatureHeader) {\n    throw new Error(\"Missing X-Waffo-Signature header\");\n  }\n\n  const { t, v1 } = parseSignatureHeader(signatureHeader);\n  if (!t || !v1) {\n    throw new Error(\"Malformed X-Waffo-Signature header: missing t or v1\");\n  }\n\n  // Replay protection\n  const toleranceMs = options?.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n  if (toleranceMs > 0) {\n    const timestampMs = Number(t);\n    if (Number.isNaN(timestampMs)) {\n      throw new Error(\"Invalid timestamp in X-Waffo-Signature header\");\n    }\n    if (Math.abs(Date.now() - timestampMs) > toleranceMs) {\n      throw new Error(\"Webhook timestamp outside tolerance window (possible replay attack)\");\n    }\n  }\n\n  // RSA-SHA256 verification\n  const signatureInput = `${t}.${payload}`;\n  const env = options?.environment;\n\n  if (env === \"test\") {\n    if (!rsaVerify(signatureInput, v1, TEST_PUBLIC_KEY)) {\n      throw new Error(\"Invalid webhook signature (test key)\");\n    }\n  } else if (env === \"prod\") {\n    if (!rsaVerify(signatureInput, v1, PROD_PUBLIC_KEY)) {\n      throw new Error(\"Invalid webhook signature (prod key)\");\n    }\n  } else {\n    // Auto-detect: try prod first, then test\n    const prodValid = rsaVerify(signatureInput, v1, PROD_PUBLIC_KEY);\n    if (!prodValid) {\n      const testValid = rsaVerify(signatureInput, v1, TEST_PUBLIC_KEY);\n      if (!testValid) {\n        throw new Error(\"Invalid webhook signature (tried both prod and test keys)\");\n      }\n    }\n  }\n\n  return JSON.parse(payload) as WebhookEvent<T>;\n}\n","// ---------------------------------------------------------------------------\n// Client config\n// ---------------------------------------------------------------------------\n\nexport interface WaffoPancakeConfig {\n  /** Merchant ID (X-Merchant-Id header) */\n  merchantId: string;\n  /** RSA private key in PEM format for request signing */\n  privateKey: string;\n  /** Base URL override (default: https://waffo-pancake-auth-service.vercel.app) */\n  baseUrl?: string;\n  /** Custom fetch implementation (default: global fetch) */\n  fetch?: typeof fetch;\n}\n\n// ---------------------------------------------------------------------------\n// API response envelope\n// ---------------------------------------------------------------------------\n\n/**\n * Single error object within the `errors` array.\n *\n * @example\n * { message: \"Store slug already exists\", layer: \"store\" }\n */\nexport interface ApiError {\n  /** Error message */\n  message: string;\n  /** Layer where the error originated */\n  layer: `${ErrorLayer}`;\n}\n\n/** Successful API response envelope. */\nexport interface ApiSuccessResponse<T> {\n  data: T;\n}\n\n/**\n * Error API response envelope.\n *\n * `errors` are ordered by call stack: `[0]` is the deepest layer, `[n]` is the outermost.\n */\nexport interface ApiErrorResponse {\n  data: null;\n  errors: ApiError[];\n}\n\n/** Union type of success and error API responses. */\nexport type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;\n\n// ---------------------------------------------------------------------------\n// Enums (runtime-accessible values)\n// ---------------------------------------------------------------------------\n\n/**\n * Environment type.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport enum Environment {\n  Test = \"test\",\n  Prod = \"prod\",\n}\n\n/**\n * Tax category for products.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum TaxCategory {\n  DigitalGoods = \"digital_goods\",\n  SaaS = \"saas\",\n  Software = \"software\",\n  Ebook = \"ebook\",\n  OnlineCourse = \"online_course\",\n  Consulting = \"consulting\",\n  ProfessionalService = \"professional_service\",\n}\n\n/**\n * Subscription billing period.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum BillingPeriod {\n  Weekly = \"weekly\",\n  Monthly = \"monthly\",\n  Quarterly = \"quarterly\",\n  Yearly = \"yearly\",\n}\n\n/**\n * Product version status.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum ProductVersionStatus {\n  Active = \"active\",\n  Inactive = \"inactive\",\n}\n\n/**\n * Store entity status.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport enum EntityStatus {\n  Active = \"active\",\n  Inactive = \"inactive\",\n  Suspended = \"suspended\",\n}\n\n/**\n * Store member role.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport enum StoreRole {\n  Owner = \"owner\",\n  Admin = \"admin\",\n  Member = \"member\",\n}\n\n/**\n * One-time order status.\n * @see waffo-pancake-order-service/app/lib/resources/onetime-order.ts\n */\nexport enum OnetimeOrderStatus {\n  Pending = \"pending\",\n  Completed = \"completed\",\n  Canceled = \"canceled\",\n}\n\n/**\n * Subscription order status.\n *\n * State machine:\n * - pending -> active, canceled\n * - active -> canceling, past_due, canceled, expired\n * - canceling -> active, canceled\n * - past_due -> active, canceled\n * - canceled -> terminal\n * - expired -> terminal\n *\n * @see waffo-pancake-order-service/app/lib/resources/subscription-order.ts\n */\nexport enum SubscriptionOrderStatus {\n  Pending = \"pending\",\n  Active = \"active\",\n  Canceling = \"canceling\",\n  Canceled = \"canceled\",\n  PastDue = \"past_due\",\n  Expired = \"expired\",\n}\n\n/**\n * Payment status.\n * @see waffo-pancake-order-service/app/lib/resources/payment.ts\n */\nexport enum PaymentStatus {\n  Pending = \"pending\",\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n  Canceled = \"canceled\",\n}\n\n/**\n * Refund ticket status.\n * @see waffo-pancake-order-service/app/lib/resources/refund-ticket.ts\n */\nexport enum RefundTicketStatus {\n  Pending = \"pending\",\n  Approved = \"approved\",\n  Rejected = \"rejected\",\n  Processing = \"processing\",\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n}\n\n/**\n * Refund status.\n * @see waffo-pancake-order-service/app/lib/resources/refund.ts\n */\nexport enum RefundStatus {\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n}\n\n/**\n * Media asset type.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum MediaType {\n  Image = \"image\",\n  Video = \"video\",\n}\n\n/**\n * Checkout session product type.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport enum CheckoutSessionProductType {\n  Onetime = \"onetime\",\n  Subscription = \"subscription\",\n}\n\n/** Error layer identifier in the call stack. */\nexport enum ErrorLayer {\n  Gateway = \"gateway\",\n  User = \"user\",\n  Store = \"store\",\n  Product = \"product\",\n  Order = \"order\",\n  GraphQL = \"graphql\",\n  Resource = \"resource\",\n  Email = \"email\",\n}\n\n// ---------------------------------------------------------------------------\n// Auth\n// ---------------------------------------------------------------------------\n\n/**\n * Parameters for issuing a buyer session token.\n * @see waffo-pancake-user-service/app/lib/utils/jwt.ts IssueSessionTokenRequest\n */\nexport interface IssueSessionTokenParams {\n  /** Buyer identity (email or any merchant-provided identifier string) */\n  buyerIdentity: string;\n  /** Store ID */\n  storeId: string;\n}\n\n/**\n * Issued session token response.\n *\n * @example\n * { token: \"eyJhbGciOi...\", expiresAt: \"2026-03-10T09:00:00.000Z\" }\n */\nexport interface SessionToken {\n  /** JWT token string */\n  token: string;\n  /** Expiration time (ISO 8601 UTC) */\n  expiresAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store — from waffo-pancake-store-service\n// ---------------------------------------------------------------------------\n\n/**\n * Webhook configuration for test and production environments.\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface WebhookSettings {\n  /** Test environment webhook URL */\n  testWebhookUrl: string | null;\n  /** Production environment webhook URL */\n  prodWebhookUrl: string | null;\n  /** Event types subscribed in test environment */\n  testEvents: string[];\n  /** Event types subscribed in production environment */\n  prodEvents: string[];\n}\n\n/**\n * Notification settings (all default to true).\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface NotificationSettings {\n  emailOrderConfirmation: boolean;\n  emailSubscriptionConfirmation: boolean;\n  emailSubscriptionCycled: boolean;\n  emailSubscriptionCanceled: boolean;\n  emailSubscriptionRevoked: boolean;\n  emailSubscriptionPastDue: boolean;\n  notifyNewOrders: boolean;\n  notifyNewSubscriptions: boolean;\n}\n\n/**\n * Single-theme checkout page styling.\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface CheckoutThemeSettings {\n  checkoutLogo: string | null;\n  checkoutColorPrimary: string;\n  checkoutColorBackground: string;\n  checkoutColorCard: string;\n  checkoutColorText: string;\n  checkoutColorTextSecondary: string;\n  checkoutBorderRadius: string;\n}\n\n/**\n * Checkout page configuration (light and dark themes).\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface CheckoutSettings {\n  light: CheckoutThemeSettings;\n  dark: CheckoutThemeSettings;\n}\n\n/**\n * Store entity.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport interface Store {\n  id: string;\n  name: string;\n  status: EntityStatus;\n  logo: string | null;\n  supportEmail: string | null;\n  website: string | null;\n  slug: string | null;\n  isPublic: boolean;\n  prodEnabled: boolean;\n  webhookSettings: WebhookSettings | null;\n  notificationSettings: NotificationSettings | null;\n  checkoutSettings: CheckoutSettings | null;\n  deletedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/** Parameters for creating a store. */\nexport interface CreateStoreParams {\n  /** Store name (slug is auto-generated) */\n  name: string;\n}\n\n/** Parameters for updating a store. */\nexport interface UpdateStoreParams {\n  /** Store ID */\n  id: string;\n  name?: string;\n  status?: EntityStatus;\n  logo?: string | null;\n  supportEmail?: string | null;\n  website?: string | null;\n  isPublic?: boolean;\n  webhookSettings?: WebhookSettings | null;\n  notificationSettings?: NotificationSettings | null;\n  checkoutSettings?: CheckoutSettings | null;\n}\n\n/** Parameters for deleting (soft-delete) a store. */\nexport interface DeleteStoreParams {\n  /** Store ID */\n  id: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store Merchant (coming soon — endpoints return 501)\n// ---------------------------------------------------------------------------\n\n/** Parameters for adding a merchant to a store. */\nexport interface AddMerchantParams {\n  storeId: string;\n  email: string;\n  role: \"admin\" | \"member\";\n}\n\n/** Result of adding a merchant to a store. */\nexport interface AddMerchantResult {\n  storeId: string;\n  merchantId: string;\n  email: string;\n  role: string;\n  status: string;\n  addedAt: string;\n}\n\n/** Parameters for removing a merchant from a store. */\nexport interface RemoveMerchantParams {\n  storeId: string;\n  merchantId: string;\n}\n\n/** Result of removing a merchant from a store. */\nexport interface RemoveMerchantResult {\n  message: string;\n  removedAt: string;\n}\n\n/** Parameters for updating a merchant's role. */\nexport interface UpdateRoleParams {\n  storeId: string;\n  merchantId: string;\n  role: \"admin\" | \"member\";\n}\n\n/** Result of updating a merchant's role. */\nexport interface UpdateRoleResult {\n  storeId: string;\n  merchantId: string;\n  role: string;\n  updatedAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Product — shared types from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Price for a single currency.\n *\n * Amounts are stored in the smallest currency unit (e.g. cents, yen)\n * to avoid floating-point precision issues.\n *\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n *\n * @example\n * // USD $9.99\n * { amount: 999, taxIncluded: true, taxCategory: \"saas\" }\n *\n * @example\n * // JPY ¥1000\n * { amount: 1000, taxIncluded: false, taxCategory: \"software\" }\n */\nexport interface PriceInfo {\n  /** Price amount in smallest currency unit */\n  amount: number;\n  /** Whether the price is tax-inclusive */\n  taxIncluded: boolean;\n  /** Tax category */\n  taxCategory: TaxCategory;\n}\n\n/**\n * Multi-currency prices (keyed by ISO 4217 currency code).\n *\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n *\n * @example\n * {\n *   \"USD\": { amount: 999, taxIncluded: true, taxCategory: \"saas\" },\n *   \"EUR\": { amount: 899, taxIncluded: true, taxCategory: \"saas\" }\n * }\n */\nexport type Prices = Record<string, PriceInfo>;\n\n/**\n * Media asset (image or video).\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport interface MediaItem {\n  /** Media type */\n  type: `${MediaType}`;\n  /** Asset URL */\n  url: string;\n  /** Alt text */\n  alt?: string;\n  /** Thumbnail URL */\n  thumbnail?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Onetime Product — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * One-time product detail (public API shape).\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts OnetimeProductDetail\n */\nexport interface OnetimeProductDetail {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  prices: Prices;\n  media: MediaItem[];\n  successUrl: string | null;\n  metadata: Record<string, unknown>;\n  status: ProductVersionStatus;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a one-time product.\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts CreateOnetimeProductRequestBody\n */\nexport interface CreateOnetimeProductParams {\n  storeId: string;\n  name: string;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Parameters for updating a one-time product (creates a new version; skips if unchanged).\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts UpdateOnetimeProductContentRequestBody\n */\nexport interface UpdateOnetimeProductParams {\n  id: string;\n  name: string;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/** Parameters for publishing a one-time product's test version to production. */\nexport interface PublishOnetimeProductParams {\n  /** Product ID */\n  id: string;\n}\n\n/**\n * Parameters for updating a one-time product's status.\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts UpdateOnetimeStatusRequestBody\n */\nexport interface UpdateOnetimeStatusParams {\n  id: string;\n  status: ProductVersionStatus;\n}\n\n// ---------------------------------------------------------------------------\n// Subscription Product — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Subscription product detail (public API shape).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts SubscriptionProductDetail\n */\nexport interface SubscriptionProductDetail {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  media: MediaItem[];\n  successUrl: string | null;\n  metadata: Record<string, unknown>;\n  status: ProductVersionStatus;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a subscription product.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts CreateSubscriptionProductRequestBody\n */\nexport interface CreateSubscriptionProductParams {\n  storeId: string;\n  name: string;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Parameters for updating a subscription product (creates a new version; skips if unchanged).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts UpdateSubscriptionProductContentRequestBody\n */\nexport interface UpdateSubscriptionProductParams {\n  id: string;\n  name: string;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/** Parameters for publishing a subscription product's test version to production. */\nexport interface PublishSubscriptionProductParams {\n  /** Product ID */\n  id: string;\n}\n\n/**\n * Parameters for updating a subscription product's status.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts UpdateSubscriptionStatusRequestBody\n */\nexport interface UpdateSubscriptionStatusParams {\n  id: string;\n  status: ProductVersionStatus;\n}\n\n// ---------------------------------------------------------------------------\n// Subscription Product Group — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Group rules for subscription product groups.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts\n */\nexport interface GroupRules {\n  /** Whether trial period is shared across products in the group */\n  sharedTrial: boolean;\n}\n\n/**\n * Subscription product group entity.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts\n */\nexport interface SubscriptionProductGroup {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  rules: GroupRules;\n  productIds: string[];\n  environment: Environment;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a subscription product group.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts CreateGroupRequestBody\n */\nexport interface CreateSubscriptionProductGroupParams {\n  storeId: string;\n  name: string;\n  description?: string;\n  rules?: GroupRules;\n  productIds?: string[];\n}\n\n/**\n * Parameters for updating a subscription product group (`productIds` is a full replacement).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts UpdateGroupRequestBody\n */\nexport interface UpdateSubscriptionProductGroupParams {\n  id: string;\n  name?: string;\n  description?: string;\n  rules?: GroupRules;\n  productIds?: string[];\n}\n\n/** Parameters for hard-deleting a subscription product group. */\nexport interface DeleteSubscriptionProductGroupParams {\n  /** Group ID */\n  id: string;\n}\n\n/** Parameters for publishing a test-environment group to production (upsert). */\nexport interface PublishSubscriptionProductGroupParams {\n  /** Group ID */\n  id: string;\n}\n\n// ---------------------------------------------------------------------------\n// Order — from waffo-pancake-order-service\n// ---------------------------------------------------------------------------\n\n/** Parameters for canceling a subscription order. */\nexport interface CancelSubscriptionParams {\n  /** Order ID */\n  orderId: string;\n}\n\n/**\n * Result of canceling a subscription order.\n * @see waffo-pancake-order-service cancel-order route.ts\n */\nexport interface CancelSubscriptionResult {\n  orderId: string;\n  /** Status after cancellation (`\"canceled\"` or `\"canceling\"`) */\n  status: `${SubscriptionOrderStatus}`;\n}\n\n/**\n * Buyer billing details for checkout.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport interface BillingDetail {\n  /** Country code (ISO 3166-1 alpha-2) */\n  country: string;\n  /** Whether this is a business purchase */\n  isBusiness: boolean;\n  /** Postal / ZIP code */\n  postcode?: string;\n  /** State / province code (required for US/CA) */\n  state?: string;\n  /** Business name (required when isBusiness=true) */\n  businessName?: string;\n  /** Tax ID (required for EU businesses) */\n  taxId?: string;\n}\n\n/**\n * Parameters for creating a checkout session.\n * @see waffo-pancake-order-service/app/lib/types.ts CreateCheckoutSessionRequest\n */\nexport interface CreateCheckoutSessionParams {\n  /** Store ID */\n  storeId?: string;\n  /** Product ID */\n  productId: string;\n  /** Product type */\n  productType: `${CheckoutSessionProductType}`;\n  /** Currency code (ISO 4217) */\n  currency: string;\n  /** Optional price snapshot override (reads from DB if omitted) */\n  priceSnapshot?: PriceInfo;\n  /** Trial toggle override (subscription only) */\n  withTrial?: boolean;\n  /** Pre-filled buyer email */\n  buyerEmail?: string;\n  /** Pre-filled billing details */\n  billingDetail?: BillingDetail;\n  /** Redirect URL after successful payment */\n  successUrl?: string;\n  /** Session expiration in seconds (default: 7 days) */\n  expiresInSeconds?: number;\n  /** Custom metadata */\n  metadata?: Record<string, string>;\n}\n\n/** Result of creating a checkout session. */\nexport interface CheckoutSessionResult {\n  /** Session ID */\n  sessionId: string;\n  /** URL to redirect the customer to */\n  checkoutUrl: string;\n  /** Session expiration time (ISO 8601 UTC) */\n  expiresAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// GraphQL\n// ---------------------------------------------------------------------------\n\n/** Parameters for a GraphQL query. */\nexport interface GraphQLParams {\n  /** GraphQL query string */\n  query: string;\n  /** Query variables */\n  variables?: Record<string, unknown>;\n}\n\n/** GraphQL response envelope. */\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data: T | null;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: string[];\n  }>;\n}\n\n// ---------------------------------------------------------------------------\n// Webhook\n// ---------------------------------------------------------------------------\n\n/**\n * Webhook event types.\n * @see docs/api-reference/webhooks.mdx\n */\nexport enum WebhookEventType {\n  /** One-time order first payment succeeded */\n  OrderCompleted = \"order.completed\",\n  /** Subscription first payment succeeded (newly activated) */\n  SubscriptionActivated = \"subscription.activated\",\n  /** Subscription renewal payment succeeded */\n  SubscriptionPaymentSucceeded = \"subscription.payment_succeeded\",\n  /** Buyer initiated cancellation (expires at end of current period) */\n  SubscriptionCanceling = \"subscription.canceling\",\n  /** Buyer withdrew cancellation (subscription restored) */\n  SubscriptionUncanceled = \"subscription.uncanceled\",\n  /** Subscription product changed (upgrade/downgrade) */\n  SubscriptionUpdated = \"subscription.updated\",\n  /** Subscription fully terminated */\n  SubscriptionCanceled = \"subscription.canceled\",\n  /** Renewal payment failed (past due) */\n  SubscriptionPastDue = \"subscription.past_due\",\n  /** Refund succeeded */\n  RefundSucceeded = \"refund.succeeded\",\n  /** Refund failed */\n  RefundFailed = \"refund.failed\",\n}\n\n/**\n * Common data fields in a webhook event payload.\n * @see docs/api-reference/webhooks.mdx\n */\nexport interface WebhookEventData {\n  orderId: string;\n  buyerEmail: string;\n  currency: string;\n  /** Amount in smallest currency unit */\n  amount: number;\n  /** Tax amount in smallest currency unit */\n  taxAmount: number;\n  productName: string;\n}\n\n/**\n * Webhook event payload.\n *\n * @see docs/api-reference/webhooks.mdx\n *\n * @example\n * {\n *   id: \"550e8400-...\",\n *   timestamp: \"2026-03-10T08:30:00.000Z\",\n *   eventType: \"order.completed\",\n *   eventId: \"pay_660e8400-...\",\n *   storeId: \"770e8400-...\",\n *   mode: \"prod\",\n *   data: { orderId: \"...\", buyerEmail: \"...\", currency: \"USD\", amount: 2900, taxAmount: 290, productName: \"Pro Plan\" }\n * }\n */\nexport interface WebhookEvent<T = WebhookEventData> {\n  /** Delivery record unique ID (UUID), usable for idempotent deduplication */\n  id: string;\n  /** Event timestamp (ISO 8601 UTC) */\n  timestamp: string;\n  /** Event type */\n  eventType: `${WebhookEventType}` | (string & {});\n  /** Business event ID (e.g. payment ID, order ID) */\n  eventId: string;\n  /** Store ID the event belongs to */\n  storeId: string;\n  /** Environment identifier */\n  mode: `${Environment}`;\n  /** Event data */\n  data: T;\n}\n\n/** Options for {@link verifyWebhook}. */\nexport interface VerifyWebhookOptions {\n  /**\n   * Specify which environment's public key to use for verification.\n   * When omitted, both keys are tried automatically (prod first).\n   */\n  environment?: `${Environment}`;\n  /**\n   * Timestamp tolerance window in milliseconds for replay protection.\n   * Set to 0 to skip timestamp checking.\n   * @default 300000 (5 minutes)\n   */\n  toleranceMs?: number;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,sBAA2B;;;ACepB,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAClC;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,QAAoB;AAC9C,UAAM,YAAY,OAAO,CAAC,GAAG,WAAW;AACxC,UAAM,SAAS;AACf,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AACF;;;AC1BA,yBAAuC;AAehC,SAAS,YACd,QACA,MACA,WACA,MACA,YACQ;AACR,QAAM,eAAW,+BAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,QAAQ;AAClE,QAAM,mBAAmB,GAAG,MAAM;AAAA,EAAK,IAAI;AAAA,EAAK,SAAS;AAAA,EAAK,QAAQ;AAEtE,QAAM,WAAO,+BAAW,QAAQ;AAChC,OAAK,OAAO,gBAAgB;AAC5B,SAAO,KAAK,KAAK,YAAY,QAAQ;AACvC;;;AFrBA,IAAM,mBAAmB;AAOlB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,QAA4B;AACtC,SAAK,aAAa,OAAO;AACzB,SAAK,aAAa,OAAO;AACzB,SAAK,WAAW,OAAO,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AACtE,SAAK,SAAS,OAAO,SAAS;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,KAAQ,MAAc,MAA0B;AACpD,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,EAAE,SAAS;AACzD,UAAM,YAAY,YAAY,QAAQ,MAAM,WAAW,SAAS,KAAK,UAAU;AAE/E,UAAM,WAAW,MAAM,KAAK,OAAO,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB,KAAK;AAAA,QACtB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,yBAAqB,gCAAW,QAAQ,EACrC,OAAO,GAAG,KAAK,UAAU,IAAI,IAAI,IAAI,OAAO,EAAE,EAC9C,OAAO,KAAK;AAAA,MACjB;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAED,UAAM,SAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,YAAY,UAAU,OAAO,QAAQ;AACvC,YAAM,IAAI,kBAAkB,SAAS,QAAQ,OAAO,MAAM;AAAA,IAC5D;AAEA,WAAO,OAAO;AAAA,EAChB;AACF;;;AG/DO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAchD,MAAM,kBAAkB,QAAwD;AAC9E,WAAO,KAAK,KAAK,KAAmB,wCAAwC,MAAM;AAAA,EACpF;AACF;;;AClBO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBhD,MAAM,cAAc,QAAqE;AACvF,WAAO,KAAK,KAAK,KAA4B,uCAAuC,MAAM;AAAA,EAC5F;AACF;;;ACtBO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBhD,MAAM,MAAmC,QAAoD;AAC3F,WAAO,KAAK,KAAK,KAAyB,eAAe,MAAM;AAAA,EACjE;AACF;;;AClBO,IAAM,0BAAN,MAA8B;AAAA,EACnC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAehD,MAAM,OAAO,QAAgF;AAC3F,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAgF;AAC3F,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAAiF;AAC7F,WAAO,KAAK,KAAK,KAAK,+CAA+C,MAAM;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,aAAa,QAA+E;AAChG,WAAO,KAAK,KAAK,KAAK,6CAA6C,MAAM;AAAA,EAC3E;AACF;;;ACvEO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBhD,MAAM,mBAAmB,QAAqE;AAC5F,WAAO,KAAK,KAAK,KAA+B,+CAA+C,MAAM;AAAA,EACvG;AACF;;;ACdO,IAAM,yBAAN,MAA6B;AAAA,EAClC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAehD,MAAM,IAAI,QAAuD;AAC/D,WAAO,KAAK,KAAK,KAAK,2CAA2C,MAAM;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAO,QAA6D;AACxE,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,WAAW,QAAqD;AACpE,WAAO,KAAK,KAAK,KAAK,0CAA0C,MAAM;AAAA,EACxE;AACF;;;ACtDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWhD,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AACF;;;AC5CO,IAAM,oCAAN,MAAwC;AAAA,EAC7C,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBhD,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAA6F;AACzG,WAAO,KAAK,KAAK,KAAK,wDAAwD,MAAM;AAAA,EACtF;AACF;;;AC9DO,IAAM,+BAAN,MAAmC;AAAA,EACxC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBhD,MAAM,OAAO,QAA0F;AACrG,WAAO,KAAK,KAAK,KAAK,mDAAmD,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAO,QAA0F;AACrG,WAAO,KAAK,KAAK,KAAK,mDAAmD,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAA2F;AACvG,WAAO,KAAK,KAAK,KAAK,oDAAoD,MAAM;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,aAAa,QAAyF;AAC1G,WAAO,KAAK,KAAK,KAAK,kDAAkD,MAAM;AAAA,EAChF;AACF;;;AC1BO,IAAM,eAAN,MAAmB;AAAA,EACP;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAA4B;AACtC,SAAK,OAAO,IAAI,WAAW,MAAM;AAEjC,SAAK,OAAO,IAAI,aAAa,KAAK,IAAI;AACtC,SAAK,SAAS,IAAI,eAAe,KAAK,IAAI;AAC1C,SAAK,iBAAiB,IAAI,uBAAuB,KAAK,IAAI;AAC1D,SAAK,kBAAkB,IAAI,wBAAwB,KAAK,IAAI;AAC5D,SAAK,uBAAuB,IAAI,6BAA6B,KAAK,IAAI;AACtE,SAAK,4BAA4B,IAAI,kCAAkC,KAAK,IAAI;AAChF,SAAK,SAAS,IAAI,eAAe,KAAK,IAAI;AAC1C,SAAK,WAAW,IAAI,iBAAiB,KAAK,IAAI;AAC9C,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAAA,EAC9C;AACF;;;AC7EA,IAAAC,sBAA6B;AAK7B,IAAM,uBAAuB,IAAI,KAAK;AAGtC,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWxB,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBxB,SAAS,qBAAqB,QAA2C;AACvE,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,QAAI,UAAU,GAAI;AAClB,UAAM,MAAM,KAAK,MAAM,GAAG,KAAK,EAAE,KAAK;AACtC,UAAM,QAAQ,KAAK,MAAM,QAAQ,CAAC,EAAE,KAAK;AACzC,QAAI,QAAQ,IAAK,KAAI;AAAA,aACZ,QAAQ,KAAM,MAAK;AAAA,EAC9B;AACA,SAAO,EAAE,GAAG,GAAG;AACjB;AAUA,SAAS,UAAU,gBAAwB,IAAY,WAA4B;AACjF,QAAM,eAAW,kCAAa,YAAY;AAC1C,WAAS,OAAO,cAAc;AAC9B,SAAO,SAAS,OAAO,WAAW,IAAI,QAAQ;AAChD;AAqDO,SAAS,cACd,SACA,iBACA,SACiB;AACjB,MAAI,CAAC,iBAAiB;AACpB,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAEA,QAAM,EAAE,GAAG,GAAG,IAAI,qBAAqB,eAAe;AACtD,MAAI,CAAC,KAAK,CAAC,IAAI;AACb,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AAGA,QAAM,cAAc,SAAS,eAAe;AAC5C,MAAI,cAAc,GAAG;AACnB,UAAM,cAAc,OAAO,CAAC;AAC5B,QAAI,OAAO,MAAM,WAAW,GAAG;AAC7B,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,QAAI,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,IAAI,aAAa;AACpD,YAAM,IAAI,MAAM,qEAAqE;AAAA,IACvF;AAAA,EACF;AAGA,QAAM,iBAAiB,GAAG,CAAC,IAAI,OAAO;AACtC,QAAM,MAAM,SAAS;AAErB,MAAI,QAAQ,QAAQ;AAClB,QAAI,CAAC,UAAU,gBAAgB,IAAI,eAAe,GAAG;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAAA,EACF,WAAW,QAAQ,QAAQ;AACzB,QAAI,CAAC,UAAU,gBAAgB,IAAI,eAAe,GAAG;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAAA,EACF,OAAO;AAEL,UAAM,YAAY,UAAU,gBAAgB,IAAI,eAAe;AAC/D,QAAI,CAAC,WAAW;AACd,YAAM,YAAY,UAAU,gBAAgB,IAAI,eAAe;AAC/D,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AAEA,SAAO,KAAK,MAAM,OAAO;AAC3B;;;AC3GO,IAAK,cAAL,kBAAKC,iBAAL;AACL,EAAAA,aAAA,UAAO;AACP,EAAAA,aAAA,UAAO;AAFG,SAAAA;AAAA,GAAA;AASL,IAAK,cAAL,kBAAKC,iBAAL;AACL,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,UAAO;AACP,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,WAAQ;AACR,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,yBAAsB;AAPZ,SAAAA;AAAA,GAAA;AAcL,IAAK,gBAAL,kBAAKC,mBAAL;AACL,EAAAA,eAAA,YAAS;AACT,EAAAA,eAAA,aAAU;AACV,EAAAA,eAAA,eAAY;AACZ,EAAAA,eAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAWL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,YAAS;AACT,EAAAA,sBAAA,cAAW;AAFD,SAAAA;AAAA,GAAA;AASL,IAAK,eAAL,kBAAKC,kBAAL;AACL,EAAAA,cAAA,YAAS;AACT,EAAAA,cAAA,cAAW;AACX,EAAAA,cAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAUL,IAAK,YAAL,kBAAKC,eAAL;AACL,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,YAAS;AAHC,SAAAA;AAAA,GAAA;AAUL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,aAAU;AACV,EAAAA,oBAAA,eAAY;AACZ,EAAAA,oBAAA,cAAW;AAHD,SAAAA;AAAA,GAAA;AAmBL,IAAK,0BAAL,kBAAKC,6BAAL;AACL,EAAAA,yBAAA,aAAU;AACV,EAAAA,yBAAA,YAAS;AACT,EAAAA,yBAAA,eAAY;AACZ,EAAAA,yBAAA,cAAW;AACX,EAAAA,yBAAA,aAAU;AACV,EAAAA,yBAAA,aAAU;AANA,SAAAA;AAAA,GAAA;AAaL,IAAK,gBAAL,kBAAKC,mBAAL;AACL,EAAAA,eAAA,aAAU;AACV,EAAAA,eAAA,eAAY;AACZ,EAAAA,eAAA,YAAS;AACT,EAAAA,eAAA,cAAW;AAJD,SAAAA;AAAA,GAAA;AAWL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,aAAU;AACV,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,gBAAa;AACb,EAAAA,oBAAA,eAAY;AACZ,EAAAA,oBAAA,YAAS;AANC,SAAAA;AAAA,GAAA;AAaL,IAAK,eAAL,kBAAKC,kBAAL;AACL,EAAAA,cAAA,eAAY;AACZ,EAAAA,cAAA,YAAS;AAFC,SAAAA;AAAA,GAAA;AASL,IAAK,YAAL,kBAAKC,eAAL;AACL,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,WAAQ;AAFE,SAAAA;AAAA,GAAA;AASL,IAAK,6BAAL,kBAAKC,gCAAL;AACL,EAAAA,4BAAA,aAAU;AACV,EAAAA,4BAAA,kBAAe;AAFL,SAAAA;AAAA,GAAA;AAML,IAAK,aAAL,kBAAKC,gBAAL;AACL,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,UAAO;AACP,EAAAA,YAAA,WAAQ;AACR,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,WAAQ;AACR,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,cAAW;AACX,EAAAA,YAAA,WAAQ;AARE,SAAAA;AAAA,GAAA;AA4iBL,IAAK,mBAAL,kBAAKC,sBAAL;AAEL,EAAAA,kBAAA,oBAAiB;AAEjB,EAAAA,kBAAA,2BAAwB;AAExB,EAAAA,kBAAA,kCAA+B;AAE/B,EAAAA,kBAAA,2BAAwB;AAExB,EAAAA,kBAAA,4BAAyB;AAEzB,EAAAA,kBAAA,yBAAsB;AAEtB,EAAAA,kBAAA,0BAAuB;AAEvB,EAAAA,kBAAA,yBAAsB;AAEtB,EAAAA,kBAAA,qBAAkB;AAElB,EAAAA,kBAAA,kBAAe;AApBL,SAAAA;AAAA,GAAA;","names":["import_node_crypto","import_node_crypto","Environment","TaxCategory","BillingPeriod","ProductVersionStatus","EntityStatus","StoreRole","OnetimeOrderStatus","SubscriptionOrderStatus","PaymentStatus","RefundTicketStatus","RefundStatus","MediaType","CheckoutSessionProductType","ErrorLayer","WebhookEventType"]}

package/dist/index.js

@@ -17,7 +17,7 @@ var WaffoPancakeError = class extends Error {
 // src/signing.ts
 import { createHash, createSign } from "crypto";
 function signRequest(method, path, timestamp, body, privateKey) {
-  const bodyHash = createHash("sha256").update(body).digest("hex");
+  const bodyHash = createHash("sha256").update(body).digest("base64");
   const canonicalRequest = `${method}
 ${path}
 ${timestamp}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/http-client.ts","../src/errors.ts","../src/signing.ts","../src/resources/auth.ts","../src/resources/checkout.ts","../src/resources/graphql.ts","../src/resources/onetime-products.ts","../src/resources/orders.ts","../src/resources/store-merchants.ts","../src/resources/stores.ts","../src/resources/subscription-product-groups.ts","../src/resources/subscription-products.ts","../src/client.ts","../src/webhooks.ts","../src/types.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport { WaffoPancakeError } from \"./errors.js\";\nimport { signRequest } from \"./signing.js\";\n\nimport type { ApiResponse, WaffoPancakeConfig } from \"./types.js\";\n\nconst DEFAULT_BASE_URL = \"https://waffo-pancake-auth-service.vercel.app\";\n\n/**\n * Internal HTTP client that auto-signs requests and attaches idempotency keys.\n *\n * Not exported publicly — used by resource classes via {@link WaffoPancake}.\n */\nexport class HttpClient {\n  private readonly merchantId: string;\n  private readonly privateKey: string;\n  private readonly baseUrl: string;\n  private readonly _fetch: typeof fetch;\n\n  constructor(config: WaffoPancakeConfig) {\n    this.merchantId = config.merchantId;\n    this.privateKey = config.privateKey;\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this._fetch = config.fetch ?? fetch;\n  }\n\n  /**\n   * Send a signed POST request and return the parsed `data` field.\n   *\n   * Behavior:\n   * - Generates a deterministic `X-Idempotency-Key` from `merchantId + path + body` (same request produces same key)\n   * - Auto-builds RSA-SHA256 signature (`X-Merchant-Id` / `X-Timestamp` / `X-Signature`)\n   * - Unwraps the response envelope: returns `data` on success, throws `WaffoPancakeError` on failure\n   *\n   * @param path - API path (e.g. `/v1/actions/store/create-store`)\n   * @param body - Request body object\n   * @returns Parsed `data` field from the response\n   * @throws {WaffoPancakeError} When the API returns errors\n   */\n  async post<T>(path: string, body: object): Promise<T> {\n    const bodyStr = JSON.stringify(body);\n    const timestamp = Math.floor(Date.now() / 1000).toString();\n    const signature = signRequest(\"POST\", path, timestamp, bodyStr, this.privateKey);\n\n    const response = await this._fetch(`${this.baseUrl}${path}`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"X-Merchant-Id\": this.merchantId,\n        \"X-Timestamp\": timestamp,\n        \"X-Signature\": signature,\n        \"X-Idempotency-Key\": createHash(\"sha256\")\n          .update(`${this.merchantId}:${path}:${bodyStr}`)\n          .digest(\"hex\"),\n      },\n      body: bodyStr,\n    });\n\n    const result = (await response.json()) as ApiResponse<T>;\n\n    if (\"errors\" in result && result.errors) {\n      throw new WaffoPancakeError(response.status, result.errors);\n    }\n\n    return result.data as T;\n  }\n}\n","import type { ApiError } from \"./types.js\";\n\n/**\n * Error thrown when the API returns a non-success response.\n *\n * @example\n * try {\n *   await client.stores.create({ name: \"My Store\" });\n * } catch (err) {\n *   if (err instanceof WaffoPancakeError) {\n *     console.log(err.status);        // 400\n *     console.log(err.errors[0]);     // { message: \"...\", layer: \"store\" }\n *   }\n * }\n */\nexport class WaffoPancakeError extends Error {\n  readonly status: number;\n  readonly errors: ApiError[];\n\n  constructor(status: number, errors: ApiError[]) {\n    const rootCause = errors[0]?.message ?? \"Unknown error\";\n    super(rootCause);\n    this.name = \"WaffoPancakeError\";\n    this.status = status;\n    this.errors = errors;\n  }\n}\n","import { createHash, createSign } from \"node:crypto\";\n\n/**\n * Build canonical request string and sign with RSA-SHA256.\n *\n * Canonical request format:\n *   METHOD\\nPATH\\nTIMESTAMP\\nSHA256(BODY)\n *\n * @param method - HTTP method (e.g. \"POST\")\n * @param path - Request path (e.g. \"/v1/actions/store/create-store\")\n * @param timestamp - Unix epoch seconds string\n * @param body - Serialized JSON body\n * @param privateKey - RSA private key in PEM format\n * @returns Base64-encoded RSA-SHA256 signature\n */\nexport function signRequest(\n  method: string,\n  path: string,\n  timestamp: string,\n  body: string,\n  privateKey: string,\n): string {\n  const bodyHash = createHash(\"sha256\").update(body).digest(\"hex\");\n  const canonicalRequest = `${method}\\n${path}\\n${timestamp}\\n${bodyHash}`;\n\n  const sign = createSign(\"sha256\");\n  sign.update(canonicalRequest);\n  return sign.sign(privateKey, \"base64\");\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { IssueSessionTokenParams, SessionToken } from \"../types.js\";\n\n/** Authentication resource — issue session tokens for buyers. */\nexport class AuthResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Issue a session token for a buyer.\n   *\n   * @param params - Token issuance parameters\n   * @returns Issued session token with expiration\n   *\n   * @example\n   * const { token, expiresAt } = await client.auth.issueSessionToken({\n   *   storeId: \"store_xxx\",\n   *   buyerIdentity: \"customer@example.com\",\n   * });\n   */\n  async issueSessionToken(params: IssueSessionTokenParams): Promise<SessionToken> {\n    return this.http.post<SessionToken>(\"/v1/actions/auth/issue-session-token\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { CheckoutSessionResult, CreateCheckoutSessionParams } from \"../types.js\";\n\n/** Checkout resource — create checkout sessions for payments. */\nexport class CheckoutResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a checkout session. Returns a URL to redirect the customer to.\n   *\n   * @param params - Checkout session parameters\n   * @returns Session ID, checkout URL, and expiration\n   *\n   * @example\n   * const session = await client.checkout.createSession({\n   *   storeId: \"store_xxx\",\n   *   productId: \"prod_xxx\",\n   *   productType: \"onetime\",\n   *   currency: \"USD\",\n   *   buyerEmail: \"customer@example.com\",\n   * });\n   * // Redirect to session.checkoutUrl\n   */\n  async createSession(params: CreateCheckoutSessionParams): Promise<CheckoutSessionResult> {\n    return this.http.post<CheckoutSessionResult>(\"/v1/actions/checkout/create-session\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { GraphQLParams, GraphQLResponse } from \"../types.js\";\n\n/** GraphQL query resource (Query only, no Mutations). */\nexport class GraphQLResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Execute a GraphQL query (Query only, no Mutations).\n   *\n   * @param params - GraphQL query and optional variables\n   * @returns GraphQL response with data and optional errors\n   *\n   * @example\n   * const result = await client.graphql.query<{ stores: Array<{ id: string; name: string }> }>({\n   *   query: `query { stores { id name status } }`,\n   * });\n   * console.log(result.data?.stores);\n   *\n   * @example\n   * const result = await client.graphql.query({\n   *   query: `query ($id: ID!) { onetimeProduct(id: $id) { id name prices } }`,\n   *   variables: { id: \"prod_xxx\" },\n   * });\n   */\n  async query<T = Record<string, unknown>>(params: GraphQLParams): Promise<GraphQLResponse<T>> {\n    return this.http.post<GraphQLResponse<T>>(\"/v1/graphql\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateOnetimeProductParams,\n  OnetimeProductDetail,\n  PublishOnetimeProductParams,\n  UpdateOnetimeProductParams,\n  UpdateOnetimeStatusParams,\n} from \"../types.js\";\n\n/** One-time product management resource. */\nexport class OnetimeProductsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a one-time product with multi-currency pricing.\n   *\n   * @param params - Product creation parameters\n   * @returns Created product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"E-Book\",\n   *   prices: { USD: { amount: 2900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n   * });\n   */\n  async create(params: CreateOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/create-product\", params);\n  }\n\n  /**\n   * Update a one-time product. Creates a new version; skips if unchanged.\n   *\n   * @param params - Product update parameters (all content fields required)\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.update({\n   *   id: \"prod_xxx\",\n   *   name: \"E-Book v2\",\n   *   prices: { USD: { amount: 3900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n   * });\n   */\n  async update(params: UpdateOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/update-product\", params);\n  }\n\n  /**\n   * Publish a one-time product's test version to production.\n   *\n   * @param params - Product to publish\n   * @returns Published product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.publish({ id: \"prod_xxx\" });\n   */\n  async publish(params: PublishOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/publish-product\", params);\n  }\n\n  /**\n   * Update a one-time product's status (active/inactive).\n   *\n   * @param params - Status update parameters\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.updateStatus({\n   *   id: \"prod_xxx\",\n   *   status: ProductVersionStatus.Inactive,\n   * });\n   */\n  async updateStatus(params: UpdateOnetimeStatusParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/update-status\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { CancelSubscriptionParams, CancelSubscriptionResult } from \"../types.js\";\n\n/** Order management resource. */\nexport class OrdersResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Cancel a subscription order.\n   *\n   * - pending -> canceled (immediate)\n   * - active/trialing -> canceling (PSP cancel, webhook updates later)\n   *\n   * @param params - Order to cancel\n   * @returns Order ID and resulting status\n   *\n   * @example\n   * const { orderId, status } = await client.orders.cancelSubscription({\n   *   orderId: \"order_xxx\",\n   * });\n   * // status: \"canceled\" or \"canceling\"\n   */\n  async cancelSubscription(params: CancelSubscriptionParams): Promise<CancelSubscriptionResult> {\n    return this.http.post<CancelSubscriptionResult>(\"/v1/actions/subscription-order/cancel-order\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  AddMerchantParams,\n  AddMerchantResult,\n  RemoveMerchantParams,\n  RemoveMerchantResult,\n  UpdateRoleParams,\n  UpdateRoleResult,\n} from \"../types.js\";\n\n/** Store merchant management resource (coming soon — endpoints return 501). */\nexport class StoreMerchantsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Add a merchant to a store.\n   *\n   * @param params - Merchant addition parameters\n   * @returns Added merchant details\n   *\n   * @example\n   * const result = await client.storeMerchants.add({\n   *   storeId: \"store_xxx\",\n   *   email: \"member@example.com\",\n   *   role: \"admin\",\n   * });\n   */\n  async add(params: AddMerchantParams): Promise<AddMerchantResult> {\n    return this.http.post(\"/v1/actions/store-merchant/add-merchant\", params);\n  }\n\n  /**\n   * Remove a merchant from a store.\n   *\n   * @param params - Merchant removal parameters\n   * @returns Removal confirmation\n   *\n   * @example\n   * const result = await client.storeMerchants.remove({\n   *   storeId: \"store_xxx\",\n   *   merchantId: \"merchant_xxx\",\n   * });\n   */\n  async remove(params: RemoveMerchantParams): Promise<RemoveMerchantResult> {\n    return this.http.post(\"/v1/actions/store-merchant/remove-merchant\", params);\n  }\n\n  /**\n   * Update a merchant's role in a store.\n   *\n   * @param params - Role update parameters\n   * @returns Updated role details\n   *\n   * @example\n   * const result = await client.storeMerchants.updateRole({\n   *   storeId: \"store_xxx\",\n   *   merchantId: \"merchant_xxx\",\n   *   role: \"member\",\n   * });\n   */\n  async updateRole(params: UpdateRoleParams): Promise<UpdateRoleResult> {\n    return this.http.post(\"/v1/actions/store-merchant/update-role\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateStoreParams,\n  DeleteStoreParams,\n  Store,\n  UpdateStoreParams,\n} from \"../types.js\";\n\n/** Store management resource — create, update, and delete stores. */\nexport class StoresResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a new store. Slug is auto-generated from the name.\n   *\n   * @param params - Store creation parameters\n   * @returns Created store entity\n   *\n   * @example\n   * const { store } = await client.stores.create({ name: \"My Store\" });\n   */\n  async create(params: CreateStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/create-store\", params);\n  }\n\n  /**\n   * Update an existing store's settings.\n   *\n   * @param params - Fields to update (only provided fields are changed)\n   * @returns Updated store entity\n   *\n   * @example\n   * const { store } = await client.stores.update({\n   *   id: \"store_xxx\",\n   *   name: \"Updated Name\",\n   *   supportEmail: \"help@example.com\",\n   * });\n   */\n  async update(params: UpdateStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/update-store\", params);\n  }\n\n  /**\n   * Soft-delete a store. Only the owner can delete.\n   *\n   * @param params - Store to delete\n   * @returns Deleted store entity (with `deletedAt` set)\n   *\n   * @example\n   * const { store } = await client.stores.delete({ id: \"store_xxx\" });\n   */\n  async delete(params: DeleteStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/delete-store\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateSubscriptionProductGroupParams,\n  DeleteSubscriptionProductGroupParams,\n  PublishSubscriptionProductGroupParams,\n  SubscriptionProductGroup,\n  UpdateSubscriptionProductGroupParams,\n} from \"../types.js\";\n\n/** Subscription product group management resource (shared trial, plan switching). */\nexport class SubscriptionProductGroupsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a subscription product group for shared-trial or plan switching.\n   *\n   * @param params - Group creation parameters\n   * @returns Created group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"Pro Plans\",\n   *   rules: { sharedTrial: true },\n   *   productIds: [\"prod_aaa\", \"prod_bbb\"],\n   * });\n   */\n  async create(params: CreateSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/create-group\", params);\n  }\n\n  /**\n   * Update a subscription product group. `productIds` is a full replacement.\n   *\n   * @param params - Group update parameters\n   * @returns Updated group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.update({\n   *   id: \"group_xxx\",\n   *   productIds: [\"prod_aaa\", \"prod_bbb\", \"prod_ccc\"],\n   * });\n   */\n  async update(params: UpdateSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/update-group\", params);\n  }\n\n  /**\n   * Hard-delete a subscription product group.\n   *\n   * @param params - Group to delete\n   * @returns Deleted group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.delete({ id: \"group_xxx\" });\n   */\n  async delete(params: DeleteSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/delete-group\", params);\n  }\n\n  /**\n   * Publish a test-environment group to production (upsert).\n   *\n   * @param params - Group to publish\n   * @returns Published group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.publish({ id: \"group_xxx\" });\n   */\n  async publish(params: PublishSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/publish-group\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateSubscriptionProductParams,\n  PublishSubscriptionProductParams,\n  SubscriptionProductDetail,\n  UpdateSubscriptionProductParams,\n  UpdateSubscriptionStatusParams,\n} from \"../types.js\";\n\n/** Subscription product management resource. */\nexport class SubscriptionProductsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a subscription product with billing period and multi-currency pricing.\n   *\n   * @param params - Product creation parameters\n   * @returns Created product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"Pro Plan\",\n   *   billingPeriod: \"monthly\",\n   *   prices: { USD: { amount: 999, taxIncluded: false, taxCategory: \"saas\" } },\n   * });\n   */\n  async create(params: CreateSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/create-product\", params);\n  }\n\n  /**\n   * Update a subscription product. Creates a new version; skips if unchanged.\n   *\n   * @param params - Product update parameters (all content fields required)\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.update({\n   *   id: \"prod_xxx\",\n   *   name: \"Pro Plan v2\",\n   *   billingPeriod: \"monthly\",\n   *   prices: { USD: { amount: 1499, taxIncluded: false, taxCategory: \"saas\" } },\n   * });\n   */\n  async update(params: UpdateSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/update-product\", params);\n  }\n\n  /**\n   * Publish a subscription product's test version to production.\n   *\n   * @param params - Product to publish\n   * @returns Published product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.publish({ id: \"prod_xxx\" });\n   */\n  async publish(params: PublishSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/publish-product\", params);\n  }\n\n  /**\n   * Update a subscription product's status (active/inactive).\n   *\n   * @param params - Status update parameters\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.updateStatus({\n   *   id: \"prod_xxx\",\n   *   status: ProductVersionStatus.Active,\n   * });\n   */\n  async updateStatus(params: UpdateSubscriptionStatusParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/update-status\", params);\n  }\n}\n","import { HttpClient } from \"./http-client.js\";\nimport { AuthResource } from \"./resources/auth.js\";\nimport { CheckoutResource } from \"./resources/checkout.js\";\nimport { GraphQLResource } from \"./resources/graphql.js\";\nimport { OnetimeProductsResource } from \"./resources/onetime-products.js\";\nimport { OrdersResource } from \"./resources/orders.js\";\nimport { StoreMerchantsResource } from \"./resources/store-merchants.js\";\nimport { StoresResource } from \"./resources/stores.js\";\nimport { SubscriptionProductGroupsResource } from \"./resources/subscription-product-groups.js\";\nimport { SubscriptionProductsResource } from \"./resources/subscription-products.js\";\n\nimport type { WaffoPancakeConfig } from \"./types.js\";\n\n/**\n * Waffo Pancake TypeScript SDK client.\n *\n * Uses Merchant API Key (RSA-SHA256) authentication. All requests are\n * automatically signed — no manual header construction needed.\n *\n * @example\n * import { WaffoPancake } from \"@waffo/pancake-ts\";\n *\n * const client = new WaffoPancake({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n *\n * // Create a store\n * const { store } = await client.stores.create({ name: \"My Store\" });\n *\n * // Create a product\n * const { product } = await client.onetimeProducts.create({\n *   storeId: store.id,\n *   name: \"E-Book\",\n *   prices: { USD: { amount: 2900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n * });\n *\n * // Create a checkout session\n * const session = await client.checkout.createSession({\n *   storeId: store.id,\n *   productId: product.id,\n *   productType: \"onetime\",\n *   currency: \"USD\",\n * });\n * // => redirect customer to session.checkoutUrl\n *\n * // Query data via GraphQL\n * const result = await client.graphql.query({\n *   query: `query { stores { id name status } }`,\n * });\n */\nexport class WaffoPancake {\n  private readonly http: HttpClient;\n\n  readonly auth: AuthResource;\n  readonly stores: StoresResource;\n  readonly storeMerchants: StoreMerchantsResource;\n  readonly onetimeProducts: OnetimeProductsResource;\n  readonly subscriptionProducts: SubscriptionProductsResource;\n  readonly subscriptionProductGroups: SubscriptionProductGroupsResource;\n  readonly orders: OrdersResource;\n  readonly checkout: CheckoutResource;\n  readonly graphql: GraphQLResource;\n\n  constructor(config: WaffoPancakeConfig) {\n    this.http = new HttpClient(config);\n\n    this.auth = new AuthResource(this.http);\n    this.stores = new StoresResource(this.http);\n    this.storeMerchants = new StoreMerchantsResource(this.http);\n    this.onetimeProducts = new OnetimeProductsResource(this.http);\n    this.subscriptionProducts = new SubscriptionProductsResource(this.http);\n    this.subscriptionProductGroups = new SubscriptionProductGroupsResource(this.http);\n    this.orders = new OrdersResource(this.http);\n    this.checkout = new CheckoutResource(this.http);\n    this.graphql = new GraphQLResource(this.http);\n  }\n}\n","import { createVerify } from \"node:crypto\";\n\nimport type { VerifyWebhookOptions, WebhookEvent } from \"./types.js\";\n\n/** Default tolerance: 5 minutes */\nconst DEFAULT_TOLERANCE_MS = 5 * 60 * 1000;\n\n/** Waffo Pancake test environment webhook verification public key. */\nconst TEST_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnmRY6yMMA3lVqmAU6ZG\nb1sjL/+r/z6E+ZjkXaDAKiqOhk9rpazni0bNsGXwmftTPk9jy2wn+j6JHODD/WH/\nSCnSfvKkLIjy4Hk7BuCgB174C0ydan7J+KgXLkOwgCAxxB68t2tezldwo74ZpXgn\nF49opzMvQ9prEwIAWOE+kV9iK6gx/AckSMtHIHpUesoPDkldpmFHlB2qpf1vsFTZ\n5kD6DmGl+2GIVK01aChy2lk8pLv0yUMu18v44sLkO5M44TkGPJD9qG09wrvVG2wp\nOTVCn1n5pP8P+HRLcgzbUB3OlZVfdFurn6EZwtyL4ZD9kdkQ4EZE/9inKcp3c1h4\nxwIDAQAB\n-----END PUBLIC KEY-----`;\n\n/** Waffo Pancake production environment webhook verification public key. */\nconst PROD_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+xApdTIb4ua+DgZKQ54\niBsD82ybyhGCLRETONW4Jgbb3A8DUM1LqBk6r/CmTOCHqLalTQHNigvP3R5zkDNX\niRJz6gA4MJ/+8K0+mnEE2RISQzN+Qu65TNd6svb+INm/kMaftY4uIXr6y6kchtTJ\ndwnQhcKdAL2v7h7IFnkVelQsKxDdb2PqX8xX/qwd01iXvMcpCCaXovUwZsxH2QN5\nZKBTseJivbhUeyJCco4fdUyxOMHe2ybCVhyvim2uxAl1nkvL5L8RCWMCAV55LLo0\n9OhmLahz/DYNu13YLVP6dvIT09ZFBYU6Owj1NxdinTynlJCFS9VYwBgmftosSE1U\ndwIDAQAB\n-----END PUBLIC KEY-----`;\n\n/**\n * Parse `X-Waffo-Signature` header.\n *\n * Format: `t=<timestamp>,v1=<base64signature>`\n *\n * @returns Parsed `t` (timestamp string) and `v1` (base64 signature)\n */\nfunction parseSignatureHeader(header: string): { t: string; v1: string } {\n  let t = \"\";\n  let v1 = \"\";\n  for (const pair of header.split(\",\")) {\n    const eqIdx = pair.indexOf(\"=\");\n    if (eqIdx === -1) continue;\n    const key = pair.slice(0, eqIdx).trim();\n    const value = pair.slice(eqIdx + 1).trim();\n    if (key === \"t\") t = value;\n    else if (key === \"v1\") v1 = value;\n  }\n  return { t, v1 };\n}\n\n/**\n * Verify RSA-SHA256 signature against a public key.\n *\n * @param signatureInput - The string to verify (`${t}.${rawBody}`)\n * @param v1 - Base64-encoded signature\n * @param publicKey - PEM public key\n * @returns Whether the signature is valid\n */\nfunction rsaVerify(signatureInput: string, v1: string, publicKey: string): boolean {\n  const verifier = createVerify(\"RSA-SHA256\");\n  verifier.update(signatureInput);\n  return verifier.verify(publicKey, v1, \"base64\");\n}\n\n/**\n * Verify and parse an incoming Waffo Pancake webhook event.\n *\n * Uses built-in Waffo public keys (RSA-SHA256) for signature verification.\n * Test and production environments use different key pairs; both are embedded in the SDK.\n *\n * Behavior:\n * - Parses the `X-Waffo-Signature` header (`t=<timestamp>,v1=<base64sig>`)\n * - Builds signature input `${t}.${rawBody}` and verifies with RSA-SHA256\n * - When `environment` is not specified, tries prod key first, then test key\n * - Optional: checks timestamp to prevent replay attacks (default 5-minute tolerance)\n *\n * @param payload - Raw request body string (must be unparsed)\n * @param signatureHeader - Value of the `X-Waffo-Signature` header\n * @param options - Verification options\n * @returns Parsed webhook event\n * @throws Error if header is missing/malformed, signature is invalid, or timestamp is stale\n *\n * @example\n * // Express (use raw body!)\n * app.post(\"/webhooks\", express.raw({ type: \"application/json\" }), (req, res) => {\n *   try {\n *     const event = verifyWebhook(\n *       req.body.toString(\"utf-8\"),\n *       req.headers[\"x-waffo-signature\"] as string,\n *     );\n *     res.status(200).send(\"OK\");\n *     handleEventAsync(event).catch(console.error);\n *   } catch {\n *     res.status(401).send(\"Invalid signature\");\n *   }\n * });\n *\n * @example\n * // Next.js App Router\n * export async function POST(request: Request) {\n *   const body = await request.text();\n *   const sig = request.headers.get(\"x-waffo-signature\");\n *   const event = verifyWebhook(body, sig);\n *   // handle event ...\n *   return new Response(\"OK\");\n * }\n *\n * @example\n * // Specify environment explicitly\n * const event = verifyWebhook(body, sig, { environment: \"prod\" });\n *\n * @example\n * // Disable replay protection\n * const event = verifyWebhook(body, sig, { toleranceMs: 0 });\n */\nexport function verifyWebhook<T = Record<string, unknown>>(\n  payload: string,\n  signatureHeader: string | undefined | null,\n  options?: VerifyWebhookOptions,\n): WebhookEvent<T> {\n  if (!signatureHeader) {\n    throw new Error(\"Missing X-Waffo-Signature header\");\n  }\n\n  const { t, v1 } = parseSignatureHeader(signatureHeader);\n  if (!t || !v1) {\n    throw new Error(\"Malformed X-Waffo-Signature header: missing t or v1\");\n  }\n\n  // Replay protection\n  const toleranceMs = options?.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n  if (toleranceMs > 0) {\n    const timestampMs = Number(t);\n    if (Number.isNaN(timestampMs)) {\n      throw new Error(\"Invalid timestamp in X-Waffo-Signature header\");\n    }\n    if (Math.abs(Date.now() - timestampMs) > toleranceMs) {\n      throw new Error(\"Webhook timestamp outside tolerance window (possible replay attack)\");\n    }\n  }\n\n  // RSA-SHA256 verification\n  const signatureInput = `${t}.${payload}`;\n  const env = options?.environment;\n\n  if (env === \"test\") {\n    if (!rsaVerify(signatureInput, v1, TEST_PUBLIC_KEY)) {\n      throw new Error(\"Invalid webhook signature (test key)\");\n    }\n  } else if (env === \"prod\") {\n    if (!rsaVerify(signatureInput, v1, PROD_PUBLIC_KEY)) {\n      throw new Error(\"Invalid webhook signature (prod key)\");\n    }\n  } else {\n    // Auto-detect: try prod first, then test\n    const prodValid = rsaVerify(signatureInput, v1, PROD_PUBLIC_KEY);\n    if (!prodValid) {\n      const testValid = rsaVerify(signatureInput, v1, TEST_PUBLIC_KEY);\n      if (!testValid) {\n        throw new Error(\"Invalid webhook signature (tried both prod and test keys)\");\n      }\n    }\n  }\n\n  return JSON.parse(payload) as WebhookEvent<T>;\n}\n","// ---------------------------------------------------------------------------\n// Client config\n// ---------------------------------------------------------------------------\n\nexport interface WaffoPancakeConfig {\n  /** Merchant ID (X-Merchant-Id header) */\n  merchantId: string;\n  /** RSA private key in PEM format for request signing */\n  privateKey: string;\n  /** Base URL override (default: https://waffo-pancake-auth-service.vercel.app) */\n  baseUrl?: string;\n  /** Custom fetch implementation (default: global fetch) */\n  fetch?: typeof fetch;\n}\n\n// ---------------------------------------------------------------------------\n// API response envelope\n// ---------------------------------------------------------------------------\n\n/**\n * Single error object within the `errors` array.\n *\n * @example\n * { message: \"Store slug already exists\", layer: \"store\" }\n */\nexport interface ApiError {\n  /** Error message */\n  message: string;\n  /** Layer where the error originated */\n  layer: `${ErrorLayer}`;\n}\n\n/** Successful API response envelope. */\nexport interface ApiSuccessResponse<T> {\n  data: T;\n}\n\n/**\n * Error API response envelope.\n *\n * `errors` are ordered by call stack: `[0]` is the deepest layer, `[n]` is the outermost.\n */\nexport interface ApiErrorResponse {\n  data: null;\n  errors: ApiError[];\n}\n\n/** Union type of success and error API responses. */\nexport type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;\n\n// ---------------------------------------------------------------------------\n// Enums (runtime-accessible values)\n// ---------------------------------------------------------------------------\n\n/**\n * Environment type.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport enum Environment {\n  Test = \"test\",\n  Prod = \"prod\",\n}\n\n/**\n * Tax category for products.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum TaxCategory {\n  DigitalGoods = \"digital_goods\",\n  SaaS = \"saas\",\n  Software = \"software\",\n  Ebook = \"ebook\",\n  OnlineCourse = \"online_course\",\n  Consulting = \"consulting\",\n  ProfessionalService = \"professional_service\",\n}\n\n/**\n * Subscription billing period.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum BillingPeriod {\n  Weekly = \"weekly\",\n  Monthly = \"monthly\",\n  Quarterly = \"quarterly\",\n  Yearly = \"yearly\",\n}\n\n/**\n * Product version status.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum ProductVersionStatus {\n  Active = \"active\",\n  Inactive = \"inactive\",\n}\n\n/**\n * Store entity status.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport enum EntityStatus {\n  Active = \"active\",\n  Inactive = \"inactive\",\n  Suspended = \"suspended\",\n}\n\n/**\n * Store member role.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport enum StoreRole {\n  Owner = \"owner\",\n  Admin = \"admin\",\n  Member = \"member\",\n}\n\n/**\n * One-time order status.\n * @see waffo-pancake-order-service/app/lib/resources/onetime-order.ts\n */\nexport enum OnetimeOrderStatus {\n  Pending = \"pending\",\n  Completed = \"completed\",\n  Canceled = \"canceled\",\n}\n\n/**\n * Subscription order status.\n *\n * State machine:\n * - pending -> active, canceled\n * - active -> canceling, past_due, canceled, expired\n * - canceling -> active, canceled\n * - past_due -> active, canceled\n * - canceled -> terminal\n * - expired -> terminal\n *\n * @see waffo-pancake-order-service/app/lib/resources/subscription-order.ts\n */\nexport enum SubscriptionOrderStatus {\n  Pending = \"pending\",\n  Active = \"active\",\n  Canceling = \"canceling\",\n  Canceled = \"canceled\",\n  PastDue = \"past_due\",\n  Expired = \"expired\",\n}\n\n/**\n * Payment status.\n * @see waffo-pancake-order-service/app/lib/resources/payment.ts\n */\nexport enum PaymentStatus {\n  Pending = \"pending\",\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n  Canceled = \"canceled\",\n}\n\n/**\n * Refund ticket status.\n * @see waffo-pancake-order-service/app/lib/resources/refund-ticket.ts\n */\nexport enum RefundTicketStatus {\n  Pending = \"pending\",\n  Approved = \"approved\",\n  Rejected = \"rejected\",\n  Processing = \"processing\",\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n}\n\n/**\n * Refund status.\n * @see waffo-pancake-order-service/app/lib/resources/refund.ts\n */\nexport enum RefundStatus {\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n}\n\n/**\n * Media asset type.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum MediaType {\n  Image = \"image\",\n  Video = \"video\",\n}\n\n/**\n * Checkout session product type.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport enum CheckoutSessionProductType {\n  Onetime = \"onetime\",\n  Subscription = \"subscription\",\n}\n\n/** Error layer identifier in the call stack. */\nexport enum ErrorLayer {\n  Gateway = \"gateway\",\n  User = \"user\",\n  Store = \"store\",\n  Product = \"product\",\n  Order = \"order\",\n  GraphQL = \"graphql\",\n  Resource = \"resource\",\n  Email = \"email\",\n}\n\n// ---------------------------------------------------------------------------\n// Auth\n// ---------------------------------------------------------------------------\n\n/**\n * Parameters for issuing a buyer session token.\n * @see waffo-pancake-user-service/app/lib/utils/jwt.ts IssueSessionTokenRequest\n */\nexport interface IssueSessionTokenParams {\n  /** Buyer identity (email or any merchant-provided identifier string) */\n  buyerIdentity: string;\n  /** Store ID */\n  storeId: string;\n}\n\n/**\n * Issued session token response.\n *\n * @example\n * { token: \"eyJhbGciOi...\", expiresAt: \"2026-03-10T09:00:00.000Z\" }\n */\nexport interface SessionToken {\n  /** JWT token string */\n  token: string;\n  /** Expiration time (ISO 8601 UTC) */\n  expiresAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store — from waffo-pancake-store-service\n// ---------------------------------------------------------------------------\n\n/**\n * Webhook configuration for test and production environments.\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface WebhookSettings {\n  /** Test environment webhook URL */\n  testWebhookUrl: string | null;\n  /** Production environment webhook URL */\n  prodWebhookUrl: string | null;\n  /** Event types subscribed in test environment */\n  testEvents: string[];\n  /** Event types subscribed in production environment */\n  prodEvents: string[];\n}\n\n/**\n * Notification settings (all default to true).\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface NotificationSettings {\n  emailOrderConfirmation: boolean;\n  emailSubscriptionConfirmation: boolean;\n  emailSubscriptionCycled: boolean;\n  emailSubscriptionCanceled: boolean;\n  emailSubscriptionRevoked: boolean;\n  emailSubscriptionPastDue: boolean;\n  notifyNewOrders: boolean;\n  notifyNewSubscriptions: boolean;\n}\n\n/**\n * Single-theme checkout page styling.\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface CheckoutThemeSettings {\n  checkoutLogo: string | null;\n  checkoutColorPrimary: string;\n  checkoutColorBackground: string;\n  checkoutColorCard: string;\n  checkoutColorText: string;\n  checkoutColorTextSecondary: string;\n  checkoutBorderRadius: string;\n}\n\n/**\n * Checkout page configuration (light and dark themes).\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface CheckoutSettings {\n  light: CheckoutThemeSettings;\n  dark: CheckoutThemeSettings;\n}\n\n/**\n * Store entity.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport interface Store {\n  id: string;\n  name: string;\n  status: EntityStatus;\n  logo: string | null;\n  supportEmail: string | null;\n  website: string | null;\n  slug: string | null;\n  isPublic: boolean;\n  prodEnabled: boolean;\n  webhookSettings: WebhookSettings | null;\n  notificationSettings: NotificationSettings | null;\n  checkoutSettings: CheckoutSettings | null;\n  deletedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/** Parameters for creating a store. */\nexport interface CreateStoreParams {\n  /** Store name (slug is auto-generated) */\n  name: string;\n}\n\n/** Parameters for updating a store. */\nexport interface UpdateStoreParams {\n  /** Store ID */\n  id: string;\n  name?: string;\n  status?: EntityStatus;\n  logo?: string | null;\n  supportEmail?: string | null;\n  website?: string | null;\n  isPublic?: boolean;\n  webhookSettings?: WebhookSettings | null;\n  notificationSettings?: NotificationSettings | null;\n  checkoutSettings?: CheckoutSettings | null;\n}\n\n/** Parameters for deleting (soft-delete) a store. */\nexport interface DeleteStoreParams {\n  /** Store ID */\n  id: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store Merchant (coming soon — endpoints return 501)\n// ---------------------------------------------------------------------------\n\n/** Parameters for adding a merchant to a store. */\nexport interface AddMerchantParams {\n  storeId: string;\n  email: string;\n  role: \"admin\" | \"member\";\n}\n\n/** Result of adding a merchant to a store. */\nexport interface AddMerchantResult {\n  storeId: string;\n  merchantId: string;\n  email: string;\n  role: string;\n  status: string;\n  addedAt: string;\n}\n\n/** Parameters for removing a merchant from a store. */\nexport interface RemoveMerchantParams {\n  storeId: string;\n  merchantId: string;\n}\n\n/** Result of removing a merchant from a store. */\nexport interface RemoveMerchantResult {\n  message: string;\n  removedAt: string;\n}\n\n/** Parameters for updating a merchant's role. */\nexport interface UpdateRoleParams {\n  storeId: string;\n  merchantId: string;\n  role: \"admin\" | \"member\";\n}\n\n/** Result of updating a merchant's role. */\nexport interface UpdateRoleResult {\n  storeId: string;\n  merchantId: string;\n  role: string;\n  updatedAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Product — shared types from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Price for a single currency.\n *\n * Amounts are stored in the smallest currency unit (e.g. cents, yen)\n * to avoid floating-point precision issues.\n *\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n *\n * @example\n * // USD $9.99\n * { amount: 999, taxIncluded: true, taxCategory: \"saas\" }\n *\n * @example\n * // JPY ¥1000\n * { amount: 1000, taxIncluded: false, taxCategory: \"software\" }\n */\nexport interface PriceInfo {\n  /** Price amount in smallest currency unit */\n  amount: number;\n  /** Whether the price is tax-inclusive */\n  taxIncluded: boolean;\n  /** Tax category */\n  taxCategory: TaxCategory;\n}\n\n/**\n * Multi-currency prices (keyed by ISO 4217 currency code).\n *\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n *\n * @example\n * {\n *   \"USD\": { amount: 999, taxIncluded: true, taxCategory: \"saas\" },\n *   \"EUR\": { amount: 899, taxIncluded: true, taxCategory: \"saas\" }\n * }\n */\nexport type Prices = Record<string, PriceInfo>;\n\n/**\n * Media asset (image or video).\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport interface MediaItem {\n  /** Media type */\n  type: `${MediaType}`;\n  /** Asset URL */\n  url: string;\n  /** Alt text */\n  alt?: string;\n  /** Thumbnail URL */\n  thumbnail?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Onetime Product — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * One-time product detail (public API shape).\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts OnetimeProductDetail\n */\nexport interface OnetimeProductDetail {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  prices: Prices;\n  media: MediaItem[];\n  successUrl: string | null;\n  metadata: Record<string, unknown>;\n  status: ProductVersionStatus;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a one-time product.\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts CreateOnetimeProductRequestBody\n */\nexport interface CreateOnetimeProductParams {\n  storeId: string;\n  name: string;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Parameters for updating a one-time product (creates a new version; skips if unchanged).\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts UpdateOnetimeProductContentRequestBody\n */\nexport interface UpdateOnetimeProductParams {\n  id: string;\n  name: string;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/** Parameters for publishing a one-time product's test version to production. */\nexport interface PublishOnetimeProductParams {\n  /** Product ID */\n  id: string;\n}\n\n/**\n * Parameters for updating a one-time product's status.\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts UpdateOnetimeStatusRequestBody\n */\nexport interface UpdateOnetimeStatusParams {\n  id: string;\n  status: ProductVersionStatus;\n}\n\n// ---------------------------------------------------------------------------\n// Subscription Product — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Subscription product detail (public API shape).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts SubscriptionProductDetail\n */\nexport interface SubscriptionProductDetail {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  media: MediaItem[];\n  successUrl: string | null;\n  metadata: Record<string, unknown>;\n  status: ProductVersionStatus;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a subscription product.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts CreateSubscriptionProductRequestBody\n */\nexport interface CreateSubscriptionProductParams {\n  storeId: string;\n  name: string;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Parameters for updating a subscription product (creates a new version; skips if unchanged).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts UpdateSubscriptionProductContentRequestBody\n */\nexport interface UpdateSubscriptionProductParams {\n  id: string;\n  name: string;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/** Parameters for publishing a subscription product's test version to production. */\nexport interface PublishSubscriptionProductParams {\n  /** Product ID */\n  id: string;\n}\n\n/**\n * Parameters for updating a subscription product's status.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts UpdateSubscriptionStatusRequestBody\n */\nexport interface UpdateSubscriptionStatusParams {\n  id: string;\n  status: ProductVersionStatus;\n}\n\n// ---------------------------------------------------------------------------\n// Subscription Product Group — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Group rules for subscription product groups.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts\n */\nexport interface GroupRules {\n  /** Whether trial period is shared across products in the group */\n  sharedTrial: boolean;\n}\n\n/**\n * Subscription product group entity.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts\n */\nexport interface SubscriptionProductGroup {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  rules: GroupRules;\n  productIds: string[];\n  environment: Environment;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a subscription product group.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts CreateGroupRequestBody\n */\nexport interface CreateSubscriptionProductGroupParams {\n  storeId: string;\n  name: string;\n  description?: string;\n  rules?: GroupRules;\n  productIds?: string[];\n}\n\n/**\n * Parameters for updating a subscription product group (`productIds` is a full replacement).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts UpdateGroupRequestBody\n */\nexport interface UpdateSubscriptionProductGroupParams {\n  id: string;\n  name?: string;\n  description?: string;\n  rules?: GroupRules;\n  productIds?: string[];\n}\n\n/** Parameters for hard-deleting a subscription product group. */\nexport interface DeleteSubscriptionProductGroupParams {\n  /** Group ID */\n  id: string;\n}\n\n/** Parameters for publishing a test-environment group to production (upsert). */\nexport interface PublishSubscriptionProductGroupParams {\n  /** Group ID */\n  id: string;\n}\n\n// ---------------------------------------------------------------------------\n// Order — from waffo-pancake-order-service\n// ---------------------------------------------------------------------------\n\n/** Parameters for canceling a subscription order. */\nexport interface CancelSubscriptionParams {\n  /** Order ID */\n  orderId: string;\n}\n\n/**\n * Result of canceling a subscription order.\n * @see waffo-pancake-order-service cancel-order route.ts\n */\nexport interface CancelSubscriptionResult {\n  orderId: string;\n  /** Status after cancellation (`\"canceled\"` or `\"canceling\"`) */\n  status: `${SubscriptionOrderStatus}`;\n}\n\n/**\n * Buyer billing details for checkout.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport interface BillingDetail {\n  /** Country code (ISO 3166-1 alpha-2) */\n  country: string;\n  /** Whether this is a business purchase */\n  isBusiness: boolean;\n  /** Postal / ZIP code */\n  postcode?: string;\n  /** State / province code (required for US/CA) */\n  state?: string;\n  /** Business name (required when isBusiness=true) */\n  businessName?: string;\n  /** Tax ID (required for EU businesses) */\n  taxId?: string;\n}\n\n/**\n * Parameters for creating a checkout session.\n * @see waffo-pancake-order-service/app/lib/types.ts CreateCheckoutSessionRequest\n */\nexport interface CreateCheckoutSessionParams {\n  /** Store ID */\n  storeId?: string;\n  /** Product ID */\n  productId: string;\n  /** Product type */\n  productType: `${CheckoutSessionProductType}`;\n  /** Currency code (ISO 4217) */\n  currency: string;\n  /** Optional price snapshot override (reads from DB if omitted) */\n  priceSnapshot?: PriceInfo;\n  /** Trial toggle override (subscription only) */\n  withTrial?: boolean;\n  /** Pre-filled buyer email */\n  buyerEmail?: string;\n  /** Pre-filled billing details */\n  billingDetail?: BillingDetail;\n  /** Redirect URL after successful payment */\n  successUrl?: string;\n  /** Session expiration in seconds (default: 7 days) */\n  expiresInSeconds?: number;\n  /** Custom metadata */\n  metadata?: Record<string, string>;\n}\n\n/** Result of creating a checkout session. */\nexport interface CheckoutSessionResult {\n  /** Session ID */\n  sessionId: string;\n  /** URL to redirect the customer to */\n  checkoutUrl: string;\n  /** Session expiration time (ISO 8601 UTC) */\n  expiresAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// GraphQL\n// ---------------------------------------------------------------------------\n\n/** Parameters for a GraphQL query. */\nexport interface GraphQLParams {\n  /** GraphQL query string */\n  query: string;\n  /** Query variables */\n  variables?: Record<string, unknown>;\n}\n\n/** GraphQL response envelope. */\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data: T | null;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: string[];\n  }>;\n}\n\n// ---------------------------------------------------------------------------\n// Webhook\n// ---------------------------------------------------------------------------\n\n/**\n * Webhook event types.\n * @see docs/api-reference/webhooks.mdx\n */\nexport enum WebhookEventType {\n  /** One-time order first payment succeeded */\n  OrderCompleted = \"order.completed\",\n  /** Subscription first payment succeeded (newly activated) */\n  SubscriptionActivated = \"subscription.activated\",\n  /** Subscription renewal payment succeeded */\n  SubscriptionPaymentSucceeded = \"subscription.payment_succeeded\",\n  /** Buyer initiated cancellation (expires at end of current period) */\n  SubscriptionCanceling = \"subscription.canceling\",\n  /** Buyer withdrew cancellation (subscription restored) */\n  SubscriptionUncanceled = \"subscription.uncanceled\",\n  /** Subscription product changed (upgrade/downgrade) */\n  SubscriptionUpdated = \"subscription.updated\",\n  /** Subscription fully terminated */\n  SubscriptionCanceled = \"subscription.canceled\",\n  /** Renewal payment failed (past due) */\n  SubscriptionPastDue = \"subscription.past_due\",\n  /** Refund succeeded */\n  RefundSucceeded = \"refund.succeeded\",\n  /** Refund failed */\n  RefundFailed = \"refund.failed\",\n}\n\n/**\n * Common data fields in a webhook event payload.\n * @see docs/api-reference/webhooks.mdx\n */\nexport interface WebhookEventData {\n  orderId: string;\n  buyerEmail: string;\n  currency: string;\n  /** Amount in smallest currency unit */\n  amount: number;\n  /** Tax amount in smallest currency unit */\n  taxAmount: number;\n  productName: string;\n}\n\n/**\n * Webhook event payload.\n *\n * @see docs/api-reference/webhooks.mdx\n *\n * @example\n * {\n *   id: \"550e8400-...\",\n *   timestamp: \"2026-03-10T08:30:00.000Z\",\n *   eventType: \"order.completed\",\n *   eventId: \"pay_660e8400-...\",\n *   storeId: \"770e8400-...\",\n *   mode: \"prod\",\n *   data: { orderId: \"...\", buyerEmail: \"...\", currency: \"USD\", amount: 2900, taxAmount: 290, productName: \"Pro Plan\" }\n * }\n */\nexport interface WebhookEvent<T = WebhookEventData> {\n  /** Delivery record unique ID (UUID), usable for idempotent deduplication */\n  id: string;\n  /** Event timestamp (ISO 8601 UTC) */\n  timestamp: string;\n  /** Event type */\n  eventType: `${WebhookEventType}` | (string & {});\n  /** Business event ID (e.g. payment ID, order ID) */\n  eventId: string;\n  /** Store ID the event belongs to */\n  storeId: string;\n  /** Environment identifier */\n  mode: `${Environment}`;\n  /** Event data */\n  data: T;\n}\n\n/** Options for {@link verifyWebhook}. */\nexport interface VerifyWebhookOptions {\n  /**\n   * Specify which environment's public key to use for verification.\n   * When omitted, both keys are tried automatically (prod first).\n   */\n  environment?: `${Environment}`;\n  /**\n   * Timestamp tolerance window in milliseconds for replay protection.\n   * Set to 0 to skip timestamp checking.\n   * @default 300000 (5 minutes)\n   */\n  toleranceMs?: number;\n}\n"],"mappings":";AAAA,SAAS,cAAAA,mBAAkB;;;ACepB,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAClC;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,QAAoB;AAC9C,UAAM,YAAY,OAAO,CAAC,GAAG,WAAW;AACxC,UAAM,SAAS;AACf,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AACF;;;AC1BA,SAAS,YAAY,kBAAkB;AAehC,SAAS,YACd,QACA,MACA,WACA,MACA,YACQ;AACR,QAAM,WAAW,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAC/D,QAAM,mBAAmB,GAAG,MAAM;AAAA,EAAK,IAAI;AAAA,EAAK,SAAS;AAAA,EAAK,QAAQ;AAEtE,QAAM,OAAO,WAAW,QAAQ;AAChC,OAAK,OAAO,gBAAgB;AAC5B,SAAO,KAAK,KAAK,YAAY,QAAQ;AACvC;;;AFrBA,IAAM,mBAAmB;AAOlB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,QAA4B;AACtC,SAAK,aAAa,OAAO;AACzB,SAAK,aAAa,OAAO;AACzB,SAAK,WAAW,OAAO,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AACtE,SAAK,SAAS,OAAO,SAAS;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,KAAQ,MAAc,MAA0B;AACpD,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,EAAE,SAAS;AACzD,UAAM,YAAY,YAAY,QAAQ,MAAM,WAAW,SAAS,KAAK,UAAU;AAE/E,UAAM,WAAW,MAAM,KAAK,OAAO,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB,KAAK;AAAA,QACtB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,qBAAqBC,YAAW,QAAQ,EACrC,OAAO,GAAG,KAAK,UAAU,IAAI,IAAI,IAAI,OAAO,EAAE,EAC9C,OAAO,KAAK;AAAA,MACjB;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAED,UAAM,SAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,YAAY,UAAU,OAAO,QAAQ;AACvC,YAAM,IAAI,kBAAkB,SAAS,QAAQ,OAAO,MAAM;AAAA,IAC5D;AAEA,WAAO,OAAO;AAAA,EAChB;AACF;;;AG/DO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAchD,MAAM,kBAAkB,QAAwD;AAC9E,WAAO,KAAK,KAAK,KAAmB,wCAAwC,MAAM;AAAA,EACpF;AACF;;;AClBO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBhD,MAAM,cAAc,QAAqE;AACvF,WAAO,KAAK,KAAK,KAA4B,uCAAuC,MAAM;AAAA,EAC5F;AACF;;;ACtBO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBhD,MAAM,MAAmC,QAAoD;AAC3F,WAAO,KAAK,KAAK,KAAyB,eAAe,MAAM;AAAA,EACjE;AACF;;;AClBO,IAAM,0BAAN,MAA8B;AAAA,EACnC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAehD,MAAM,OAAO,QAAgF;AAC3F,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAgF;AAC3F,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAAiF;AAC7F,WAAO,KAAK,KAAK,KAAK,+CAA+C,MAAM;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,aAAa,QAA+E;AAChG,WAAO,KAAK,KAAK,KAAK,6CAA6C,MAAM;AAAA,EAC3E;AACF;;;ACvEO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBhD,MAAM,mBAAmB,QAAqE;AAC5F,WAAO,KAAK,KAAK,KAA+B,+CAA+C,MAAM;AAAA,EACvG;AACF;;;ACdO,IAAM,yBAAN,MAA6B;AAAA,EAClC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAehD,MAAM,IAAI,QAAuD;AAC/D,WAAO,KAAK,KAAK,KAAK,2CAA2C,MAAM;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAO,QAA6D;AACxE,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,WAAW,QAAqD;AACpE,WAAO,KAAK,KAAK,KAAK,0CAA0C,MAAM;AAAA,EACxE;AACF;;;ACtDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWhD,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AACF;;;AC5CO,IAAM,oCAAN,MAAwC;AAAA,EAC7C,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBhD,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAA6F;AACzG,WAAO,KAAK,KAAK,KAAK,wDAAwD,MAAM;AAAA,EACtF;AACF;;;AC9DO,IAAM,+BAAN,MAAmC;AAAA,EACxC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBhD,MAAM,OAAO,QAA0F;AACrG,WAAO,KAAK,KAAK,KAAK,mDAAmD,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAO,QAA0F;AACrG,WAAO,KAAK,KAAK,KAAK,mDAAmD,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAA2F;AACvG,WAAO,KAAK,KAAK,KAAK,oDAAoD,MAAM;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,aAAa,QAAyF;AAC1G,WAAO,KAAK,KAAK,KAAK,kDAAkD,MAAM;AAAA,EAChF;AACF;;;AC1BO,IAAM,eAAN,MAAmB;AAAA,EACP;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAA4B;AACtC,SAAK,OAAO,IAAI,WAAW,MAAM;AAEjC,SAAK,OAAO,IAAI,aAAa,KAAK,IAAI;AACtC,SAAK,SAAS,IAAI,eAAe,KAAK,IAAI;AAC1C,SAAK,iBAAiB,IAAI,uBAAuB,KAAK,IAAI;AAC1D,SAAK,kBAAkB,IAAI,wBAAwB,KAAK,IAAI;AAC5D,SAAK,uBAAuB,IAAI,6BAA6B,KAAK,IAAI;AACtE,SAAK,4BAA4B,IAAI,kCAAkC,KAAK,IAAI;AAChF,SAAK,SAAS,IAAI,eAAe,KAAK,IAAI;AAC1C,SAAK,WAAW,IAAI,iBAAiB,KAAK,IAAI;AAC9C,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAAA,EAC9C;AACF;;;AC7EA,SAAS,oBAAoB;AAK7B,IAAM,uBAAuB,IAAI,KAAK;AAGtC,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWxB,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBxB,SAAS,qBAAqB,QAA2C;AACvE,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,QAAI,UAAU,GAAI;AAClB,UAAM,MAAM,KAAK,MAAM,GAAG,KAAK,EAAE,KAAK;AACtC,UAAM,QAAQ,KAAK,MAAM,QAAQ,CAAC,EAAE,KAAK;AACzC,QAAI,QAAQ,IAAK,KAAI;AAAA,aACZ,QAAQ,KAAM,MAAK;AAAA,EAC9B;AACA,SAAO,EAAE,GAAG,GAAG;AACjB;AAUA,SAAS,UAAU,gBAAwB,IAAY,WAA4B;AACjF,QAAM,WAAW,aAAa,YAAY;AAC1C,WAAS,OAAO,cAAc;AAC9B,SAAO,SAAS,OAAO,WAAW,IAAI,QAAQ;AAChD;AAqDO,SAAS,cACd,SACA,iBACA,SACiB;AACjB,MAAI,CAAC,iBAAiB;AACpB,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAEA,QAAM,EAAE,GAAG,GAAG,IAAI,qBAAqB,eAAe;AACtD,MAAI,CAAC,KAAK,CAAC,IAAI;AACb,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AAGA,QAAM,cAAc,SAAS,eAAe;AAC5C,MAAI,cAAc,GAAG;AACnB,UAAM,cAAc,OAAO,CAAC;AAC5B,QAAI,OAAO,MAAM,WAAW,GAAG;AAC7B,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,QAAI,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,IAAI,aAAa;AACpD,YAAM,IAAI,MAAM,qEAAqE;AAAA,IACvF;AAAA,EACF;AAGA,QAAM,iBAAiB,GAAG,CAAC,IAAI,OAAO;AACtC,QAAM,MAAM,SAAS;AAErB,MAAI,QAAQ,QAAQ;AAClB,QAAI,CAAC,UAAU,gBAAgB,IAAI,eAAe,GAAG;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAAA,EACF,WAAW,QAAQ,QAAQ;AACzB,QAAI,CAAC,UAAU,gBAAgB,IAAI,eAAe,GAAG;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAAA,EACF,OAAO;AAEL,UAAM,YAAY,UAAU,gBAAgB,IAAI,eAAe;AAC/D,QAAI,CAAC,WAAW;AACd,YAAM,YAAY,UAAU,gBAAgB,IAAI,eAAe;AAC/D,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AAEA,SAAO,KAAK,MAAM,OAAO;AAC3B;;;AC3GO,IAAK,cAAL,kBAAKC,iBAAL;AACL,EAAAA,aAAA,UAAO;AACP,EAAAA,aAAA,UAAO;AAFG,SAAAA;AAAA,GAAA;AASL,IAAK,cAAL,kBAAKC,iBAAL;AACL,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,UAAO;AACP,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,WAAQ;AACR,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,yBAAsB;AAPZ,SAAAA;AAAA,GAAA;AAcL,IAAK,gBAAL,kBAAKC,mBAAL;AACL,EAAAA,eAAA,YAAS;AACT,EAAAA,eAAA,aAAU;AACV,EAAAA,eAAA,eAAY;AACZ,EAAAA,eAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAWL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,YAAS;AACT,EAAAA,sBAAA,cAAW;AAFD,SAAAA;AAAA,GAAA;AASL,IAAK,eAAL,kBAAKC,kBAAL;AACL,EAAAA,cAAA,YAAS;AACT,EAAAA,cAAA,cAAW;AACX,EAAAA,cAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAUL,IAAK,YAAL,kBAAKC,eAAL;AACL,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,YAAS;AAHC,SAAAA;AAAA,GAAA;AAUL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,aAAU;AACV,EAAAA,oBAAA,eAAY;AACZ,EAAAA,oBAAA,cAAW;AAHD,SAAAA;AAAA,GAAA;AAmBL,IAAK,0BAAL,kBAAKC,6BAAL;AACL,EAAAA,yBAAA,aAAU;AACV,EAAAA,yBAAA,YAAS;AACT,EAAAA,yBAAA,eAAY;AACZ,EAAAA,yBAAA,cAAW;AACX,EAAAA,yBAAA,aAAU;AACV,EAAAA,yBAAA,aAAU;AANA,SAAAA;AAAA,GAAA;AAaL,IAAK,gBAAL,kBAAKC,mBAAL;AACL,EAAAA,eAAA,aAAU;AACV,EAAAA,eAAA,eAAY;AACZ,EAAAA,eAAA,YAAS;AACT,EAAAA,eAAA,cAAW;AAJD,SAAAA;AAAA,GAAA;AAWL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,aAAU;AACV,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,gBAAa;AACb,EAAAA,oBAAA,eAAY;AACZ,EAAAA,oBAAA,YAAS;AANC,SAAAA;AAAA,GAAA;AAaL,IAAK,eAAL,kBAAKC,kBAAL;AACL,EAAAA,cAAA,eAAY;AACZ,EAAAA,cAAA,YAAS;AAFC,SAAAA;AAAA,GAAA;AASL,IAAK,YAAL,kBAAKC,eAAL;AACL,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,WAAQ;AAFE,SAAAA;AAAA,GAAA;AASL,IAAK,6BAAL,kBAAKC,gCAAL;AACL,EAAAA,4BAAA,aAAU;AACV,EAAAA,4BAAA,kBAAe;AAFL,SAAAA;AAAA,GAAA;AAML,IAAK,aAAL,kBAAKC,gBAAL;AACL,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,UAAO;AACP,EAAAA,YAAA,WAAQ;AACR,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,WAAQ;AACR,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,cAAW;AACX,EAAAA,YAAA,WAAQ;AARE,SAAAA;AAAA,GAAA;AA4iBL,IAAK,mBAAL,kBAAKC,sBAAL;AAEL,EAAAA,kBAAA,oBAAiB;AAEjB,EAAAA,kBAAA,2BAAwB;AAExB,EAAAA,kBAAA,kCAA+B;AAE/B,EAAAA,kBAAA,2BAAwB;AAExB,EAAAA,kBAAA,4BAAyB;AAEzB,EAAAA,kBAAA,yBAAsB;AAEtB,EAAAA,kBAAA,0BAAuB;AAEvB,EAAAA,kBAAA,yBAAsB;AAEtB,EAAAA,kBAAA,qBAAkB;AAElB,EAAAA,kBAAA,kBAAe;AApBL,SAAAA;AAAA,GAAA;","names":["createHash","createHash","Environment","TaxCategory","BillingPeriod","ProductVersionStatus","EntityStatus","StoreRole","OnetimeOrderStatus","SubscriptionOrderStatus","PaymentStatus","RefundTicketStatus","RefundStatus","MediaType","CheckoutSessionProductType","ErrorLayer","WebhookEventType"]}
+{"version":3,"sources":["../src/http-client.ts","../src/errors.ts","../src/signing.ts","../src/resources/auth.ts","../src/resources/checkout.ts","../src/resources/graphql.ts","../src/resources/onetime-products.ts","../src/resources/orders.ts","../src/resources/store-merchants.ts","../src/resources/stores.ts","../src/resources/subscription-product-groups.ts","../src/resources/subscription-products.ts","../src/client.ts","../src/webhooks.ts","../src/types.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport { WaffoPancakeError } from \"./errors.js\";\nimport { signRequest } from \"./signing.js\";\n\nimport type { ApiResponse, WaffoPancakeConfig } from \"./types.js\";\n\nconst DEFAULT_BASE_URL = \"https://waffo-pancake-auth-service.vercel.app\";\n\n/**\n * Internal HTTP client that auto-signs requests and attaches idempotency keys.\n *\n * Not exported publicly — used by resource classes via {@link WaffoPancake}.\n */\nexport class HttpClient {\n  private readonly merchantId: string;\n  private readonly privateKey: string;\n  private readonly baseUrl: string;\n  private readonly _fetch: typeof fetch;\n\n  constructor(config: WaffoPancakeConfig) {\n    this.merchantId = config.merchantId;\n    this.privateKey = config.privateKey;\n    this.baseUrl = (config.baseUrl ?? DEFAULT_BASE_URL).replace(/\\/+$/, \"\");\n    this._fetch = config.fetch ?? fetch;\n  }\n\n  /**\n   * Send a signed POST request and return the parsed `data` field.\n   *\n   * Behavior:\n   * - Generates a deterministic `X-Idempotency-Key` from `merchantId + path + body` (same request produces same key)\n   * - Auto-builds RSA-SHA256 signature (`X-Merchant-Id` / `X-Timestamp` / `X-Signature`)\n   * - Unwraps the response envelope: returns `data` on success, throws `WaffoPancakeError` on failure\n   *\n   * @param path - API path (e.g. `/v1/actions/store/create-store`)\n   * @param body - Request body object\n   * @returns Parsed `data` field from the response\n   * @throws {WaffoPancakeError} When the API returns errors\n   */\n  async post<T>(path: string, body: object): Promise<T> {\n    const bodyStr = JSON.stringify(body);\n    const timestamp = Math.floor(Date.now() / 1000).toString();\n    const signature = signRequest(\"POST\", path, timestamp, bodyStr, this.privateKey);\n\n    const response = await this._fetch(`${this.baseUrl}${path}`, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"X-Merchant-Id\": this.merchantId,\n        \"X-Timestamp\": timestamp,\n        \"X-Signature\": signature,\n        \"X-Idempotency-Key\": createHash(\"sha256\")\n          .update(`${this.merchantId}:${path}:${bodyStr}`)\n          .digest(\"hex\"),\n      },\n      body: bodyStr,\n    });\n\n    const result = (await response.json()) as ApiResponse<T>;\n\n    if (\"errors\" in result && result.errors) {\n      throw new WaffoPancakeError(response.status, result.errors);\n    }\n\n    return result.data as T;\n  }\n}\n","import type { ApiError } from \"./types.js\";\n\n/**\n * Error thrown when the API returns a non-success response.\n *\n * @example\n * try {\n *   await client.stores.create({ name: \"My Store\" });\n * } catch (err) {\n *   if (err instanceof WaffoPancakeError) {\n *     console.log(err.status);        // 400\n *     console.log(err.errors[0]);     // { message: \"...\", layer: \"store\" }\n *   }\n * }\n */\nexport class WaffoPancakeError extends Error {\n  readonly status: number;\n  readonly errors: ApiError[];\n\n  constructor(status: number, errors: ApiError[]) {\n    const rootCause = errors[0]?.message ?? \"Unknown error\";\n    super(rootCause);\n    this.name = \"WaffoPancakeError\";\n    this.status = status;\n    this.errors = errors;\n  }\n}\n","import { createHash, createSign } from \"node:crypto\";\n\n/**\n * Build canonical request string and sign with RSA-SHA256.\n *\n * Canonical request format:\n *   METHOD\\nPATH\\nTIMESTAMP\\nSHA256(BODY)\n *\n * @param method - HTTP method (e.g. \"POST\")\n * @param path - Request path (e.g. \"/v1/actions/store/create-store\")\n * @param timestamp - Unix epoch seconds string\n * @param body - Serialized JSON body\n * @param privateKey - RSA private key in PEM format\n * @returns Base64-encoded RSA-SHA256 signature\n */\nexport function signRequest(\n  method: string,\n  path: string,\n  timestamp: string,\n  body: string,\n  privateKey: string,\n): string {\n  const bodyHash = createHash(\"sha256\").update(body).digest(\"base64\");\n  const canonicalRequest = `${method}\\n${path}\\n${timestamp}\\n${bodyHash}`;\n\n  const sign = createSign(\"sha256\");\n  sign.update(canonicalRequest);\n  return sign.sign(privateKey, \"base64\");\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { IssueSessionTokenParams, SessionToken } from \"../types.js\";\n\n/** Authentication resource — issue session tokens for buyers. */\nexport class AuthResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Issue a session token for a buyer.\n   *\n   * @param params - Token issuance parameters\n   * @returns Issued session token with expiration\n   *\n   * @example\n   * const { token, expiresAt } = await client.auth.issueSessionToken({\n   *   storeId: \"store_xxx\",\n   *   buyerIdentity: \"customer@example.com\",\n   * });\n   */\n  async issueSessionToken(params: IssueSessionTokenParams): Promise<SessionToken> {\n    return this.http.post<SessionToken>(\"/v1/actions/auth/issue-session-token\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { CheckoutSessionResult, CreateCheckoutSessionParams } from \"../types.js\";\n\n/** Checkout resource — create checkout sessions for payments. */\nexport class CheckoutResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a checkout session. Returns a URL to redirect the customer to.\n   *\n   * @param params - Checkout session parameters\n   * @returns Session ID, checkout URL, and expiration\n   *\n   * @example\n   * const session = await client.checkout.createSession({\n   *   storeId: \"store_xxx\",\n   *   productId: \"prod_xxx\",\n   *   productType: \"onetime\",\n   *   currency: \"USD\",\n   *   buyerEmail: \"customer@example.com\",\n   * });\n   * // Redirect to session.checkoutUrl\n   */\n  async createSession(params: CreateCheckoutSessionParams): Promise<CheckoutSessionResult> {\n    return this.http.post<CheckoutSessionResult>(\"/v1/actions/checkout/create-session\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { GraphQLParams, GraphQLResponse } from \"../types.js\";\n\n/** GraphQL query resource (Query only, no Mutations). */\nexport class GraphQLResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Execute a GraphQL query (Query only, no Mutations).\n   *\n   * @param params - GraphQL query and optional variables\n   * @returns GraphQL response with data and optional errors\n   *\n   * @example\n   * const result = await client.graphql.query<{ stores: Array<{ id: string; name: string }> }>({\n   *   query: `query { stores { id name status } }`,\n   * });\n   * console.log(result.data?.stores);\n   *\n   * @example\n   * const result = await client.graphql.query({\n   *   query: `query ($id: ID!) { onetimeProduct(id: $id) { id name prices } }`,\n   *   variables: { id: \"prod_xxx\" },\n   * });\n   */\n  async query<T = Record<string, unknown>>(params: GraphQLParams): Promise<GraphQLResponse<T>> {\n    return this.http.post<GraphQLResponse<T>>(\"/v1/graphql\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateOnetimeProductParams,\n  OnetimeProductDetail,\n  PublishOnetimeProductParams,\n  UpdateOnetimeProductParams,\n  UpdateOnetimeStatusParams,\n} from \"../types.js\";\n\n/** One-time product management resource. */\nexport class OnetimeProductsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a one-time product with multi-currency pricing.\n   *\n   * @param params - Product creation parameters\n   * @returns Created product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"E-Book\",\n   *   prices: { USD: { amount: 2900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n   * });\n   */\n  async create(params: CreateOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/create-product\", params);\n  }\n\n  /**\n   * Update a one-time product. Creates a new version; skips if unchanged.\n   *\n   * @param params - Product update parameters (all content fields required)\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.update({\n   *   id: \"prod_xxx\",\n   *   name: \"E-Book v2\",\n   *   prices: { USD: { amount: 3900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n   * });\n   */\n  async update(params: UpdateOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/update-product\", params);\n  }\n\n  /**\n   * Publish a one-time product's test version to production.\n   *\n   * @param params - Product to publish\n   * @returns Published product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.publish({ id: \"prod_xxx\" });\n   */\n  async publish(params: PublishOnetimeProductParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/publish-product\", params);\n  }\n\n  /**\n   * Update a one-time product's status (active/inactive).\n   *\n   * @param params - Status update parameters\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.onetimeProducts.updateStatus({\n   *   id: \"prod_xxx\",\n   *   status: ProductVersionStatus.Inactive,\n   * });\n   */\n  async updateStatus(params: UpdateOnetimeStatusParams): Promise<{ product: OnetimeProductDetail }> {\n    return this.http.post(\"/v1/actions/onetime-product/update-status\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type { CancelSubscriptionParams, CancelSubscriptionResult } from \"../types.js\";\n\n/** Order management resource. */\nexport class OrdersResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Cancel a subscription order.\n   *\n   * - pending -> canceled (immediate)\n   * - active/trialing -> canceling (PSP cancel, webhook updates later)\n   *\n   * @param params - Order to cancel\n   * @returns Order ID and resulting status\n   *\n   * @example\n   * const { orderId, status } = await client.orders.cancelSubscription({\n   *   orderId: \"order_xxx\",\n   * });\n   * // status: \"canceled\" or \"canceling\"\n   */\n  async cancelSubscription(params: CancelSubscriptionParams): Promise<CancelSubscriptionResult> {\n    return this.http.post<CancelSubscriptionResult>(\"/v1/actions/subscription-order/cancel-order\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  AddMerchantParams,\n  AddMerchantResult,\n  RemoveMerchantParams,\n  RemoveMerchantResult,\n  UpdateRoleParams,\n  UpdateRoleResult,\n} from \"../types.js\";\n\n/** Store merchant management resource (coming soon — endpoints return 501). */\nexport class StoreMerchantsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Add a merchant to a store.\n   *\n   * @param params - Merchant addition parameters\n   * @returns Added merchant details\n   *\n   * @example\n   * const result = await client.storeMerchants.add({\n   *   storeId: \"store_xxx\",\n   *   email: \"member@example.com\",\n   *   role: \"admin\",\n   * });\n   */\n  async add(params: AddMerchantParams): Promise<AddMerchantResult> {\n    return this.http.post(\"/v1/actions/store-merchant/add-merchant\", params);\n  }\n\n  /**\n   * Remove a merchant from a store.\n   *\n   * @param params - Merchant removal parameters\n   * @returns Removal confirmation\n   *\n   * @example\n   * const result = await client.storeMerchants.remove({\n   *   storeId: \"store_xxx\",\n   *   merchantId: \"merchant_xxx\",\n   * });\n   */\n  async remove(params: RemoveMerchantParams): Promise<RemoveMerchantResult> {\n    return this.http.post(\"/v1/actions/store-merchant/remove-merchant\", params);\n  }\n\n  /**\n   * Update a merchant's role in a store.\n   *\n   * @param params - Role update parameters\n   * @returns Updated role details\n   *\n   * @example\n   * const result = await client.storeMerchants.updateRole({\n   *   storeId: \"store_xxx\",\n   *   merchantId: \"merchant_xxx\",\n   *   role: \"member\",\n   * });\n   */\n  async updateRole(params: UpdateRoleParams): Promise<UpdateRoleResult> {\n    return this.http.post(\"/v1/actions/store-merchant/update-role\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateStoreParams,\n  DeleteStoreParams,\n  Store,\n  UpdateStoreParams,\n} from \"../types.js\";\n\n/** Store management resource — create, update, and delete stores. */\nexport class StoresResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a new store. Slug is auto-generated from the name.\n   *\n   * @param params - Store creation parameters\n   * @returns Created store entity\n   *\n   * @example\n   * const { store } = await client.stores.create({ name: \"My Store\" });\n   */\n  async create(params: CreateStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/create-store\", params);\n  }\n\n  /**\n   * Update an existing store's settings.\n   *\n   * @param params - Fields to update (only provided fields are changed)\n   * @returns Updated store entity\n   *\n   * @example\n   * const { store } = await client.stores.update({\n   *   id: \"store_xxx\",\n   *   name: \"Updated Name\",\n   *   supportEmail: \"help@example.com\",\n   * });\n   */\n  async update(params: UpdateStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/update-store\", params);\n  }\n\n  /**\n   * Soft-delete a store. Only the owner can delete.\n   *\n   * @param params - Store to delete\n   * @returns Deleted store entity (with `deletedAt` set)\n   *\n   * @example\n   * const { store } = await client.stores.delete({ id: \"store_xxx\" });\n   */\n  async delete(params: DeleteStoreParams): Promise<{ store: Store }> {\n    return this.http.post(\"/v1/actions/store/delete-store\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateSubscriptionProductGroupParams,\n  DeleteSubscriptionProductGroupParams,\n  PublishSubscriptionProductGroupParams,\n  SubscriptionProductGroup,\n  UpdateSubscriptionProductGroupParams,\n} from \"../types.js\";\n\n/** Subscription product group management resource (shared trial, plan switching). */\nexport class SubscriptionProductGroupsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a subscription product group for shared-trial or plan switching.\n   *\n   * @param params - Group creation parameters\n   * @returns Created group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"Pro Plans\",\n   *   rules: { sharedTrial: true },\n   *   productIds: [\"prod_aaa\", \"prod_bbb\"],\n   * });\n   */\n  async create(params: CreateSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/create-group\", params);\n  }\n\n  /**\n   * Update a subscription product group. `productIds` is a full replacement.\n   *\n   * @param params - Group update parameters\n   * @returns Updated group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.update({\n   *   id: \"group_xxx\",\n   *   productIds: [\"prod_aaa\", \"prod_bbb\", \"prod_ccc\"],\n   * });\n   */\n  async update(params: UpdateSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/update-group\", params);\n  }\n\n  /**\n   * Hard-delete a subscription product group.\n   *\n   * @param params - Group to delete\n   * @returns Deleted group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.delete({ id: \"group_xxx\" });\n   */\n  async delete(params: DeleteSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/delete-group\", params);\n  }\n\n  /**\n   * Publish a test-environment group to production (upsert).\n   *\n   * @param params - Group to publish\n   * @returns Published group entity\n   *\n   * @example\n   * const { group } = await client.subscriptionProductGroups.publish({ id: \"group_xxx\" });\n   */\n  async publish(params: PublishSubscriptionProductGroupParams): Promise<{ group: SubscriptionProductGroup }> {\n    return this.http.post(\"/v1/actions/subscription-product-group/publish-group\", params);\n  }\n}\n","import type { HttpClient } from \"../http-client.js\";\nimport type {\n  CreateSubscriptionProductParams,\n  PublishSubscriptionProductParams,\n  SubscriptionProductDetail,\n  UpdateSubscriptionProductParams,\n  UpdateSubscriptionStatusParams,\n} from \"../types.js\";\n\n/** Subscription product management resource. */\nexport class SubscriptionProductsResource {\n  constructor(private readonly http: HttpClient) {}\n\n  /**\n   * Create a subscription product with billing period and multi-currency pricing.\n   *\n   * @param params - Product creation parameters\n   * @returns Created product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.create({\n   *   storeId: \"store_xxx\",\n   *   name: \"Pro Plan\",\n   *   billingPeriod: \"monthly\",\n   *   prices: { USD: { amount: 999, taxIncluded: false, taxCategory: \"saas\" } },\n   * });\n   */\n  async create(params: CreateSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/create-product\", params);\n  }\n\n  /**\n   * Update a subscription product. Creates a new version; skips if unchanged.\n   *\n   * @param params - Product update parameters (all content fields required)\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.update({\n   *   id: \"prod_xxx\",\n   *   name: \"Pro Plan v2\",\n   *   billingPeriod: \"monthly\",\n   *   prices: { USD: { amount: 1499, taxIncluded: false, taxCategory: \"saas\" } },\n   * });\n   */\n  async update(params: UpdateSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/update-product\", params);\n  }\n\n  /**\n   * Publish a subscription product's test version to production.\n   *\n   * @param params - Product to publish\n   * @returns Published product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.publish({ id: \"prod_xxx\" });\n   */\n  async publish(params: PublishSubscriptionProductParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/publish-product\", params);\n  }\n\n  /**\n   * Update a subscription product's status (active/inactive).\n   *\n   * @param params - Status update parameters\n   * @returns Updated product detail\n   *\n   * @example\n   * const { product } = await client.subscriptionProducts.updateStatus({\n   *   id: \"prod_xxx\",\n   *   status: ProductVersionStatus.Active,\n   * });\n   */\n  async updateStatus(params: UpdateSubscriptionStatusParams): Promise<{ product: SubscriptionProductDetail }> {\n    return this.http.post(\"/v1/actions/subscription-product/update-status\", params);\n  }\n}\n","import { HttpClient } from \"./http-client.js\";\nimport { AuthResource } from \"./resources/auth.js\";\nimport { CheckoutResource } from \"./resources/checkout.js\";\nimport { GraphQLResource } from \"./resources/graphql.js\";\nimport { OnetimeProductsResource } from \"./resources/onetime-products.js\";\nimport { OrdersResource } from \"./resources/orders.js\";\nimport { StoreMerchantsResource } from \"./resources/store-merchants.js\";\nimport { StoresResource } from \"./resources/stores.js\";\nimport { SubscriptionProductGroupsResource } from \"./resources/subscription-product-groups.js\";\nimport { SubscriptionProductsResource } from \"./resources/subscription-products.js\";\n\nimport type { WaffoPancakeConfig } from \"./types.js\";\n\n/**\n * Waffo Pancake TypeScript SDK client.\n *\n * Uses Merchant API Key (RSA-SHA256) authentication. All requests are\n * automatically signed — no manual header construction needed.\n *\n * @example\n * import { WaffoPancake } from \"@waffo/pancake-ts\";\n *\n * const client = new WaffoPancake({\n *   merchantId: process.env.WAFFO_MERCHANT_ID!,\n *   privateKey: process.env.WAFFO_PRIVATE_KEY!,\n * });\n *\n * // Create a store\n * const { store } = await client.stores.create({ name: \"My Store\" });\n *\n * // Create a product\n * const { product } = await client.onetimeProducts.create({\n *   storeId: store.id,\n *   name: \"E-Book\",\n *   prices: { USD: { amount: 2900, taxIncluded: false, taxCategory: \"digital_goods\" } },\n * });\n *\n * // Create a checkout session\n * const session = await client.checkout.createSession({\n *   storeId: store.id,\n *   productId: product.id,\n *   productType: \"onetime\",\n *   currency: \"USD\",\n * });\n * // => redirect customer to session.checkoutUrl\n *\n * // Query data via GraphQL\n * const result = await client.graphql.query({\n *   query: `query { stores { id name status } }`,\n * });\n */\nexport class WaffoPancake {\n  private readonly http: HttpClient;\n\n  readonly auth: AuthResource;\n  readonly stores: StoresResource;\n  readonly storeMerchants: StoreMerchantsResource;\n  readonly onetimeProducts: OnetimeProductsResource;\n  readonly subscriptionProducts: SubscriptionProductsResource;\n  readonly subscriptionProductGroups: SubscriptionProductGroupsResource;\n  readonly orders: OrdersResource;\n  readonly checkout: CheckoutResource;\n  readonly graphql: GraphQLResource;\n\n  constructor(config: WaffoPancakeConfig) {\n    this.http = new HttpClient(config);\n\n    this.auth = new AuthResource(this.http);\n    this.stores = new StoresResource(this.http);\n    this.storeMerchants = new StoreMerchantsResource(this.http);\n    this.onetimeProducts = new OnetimeProductsResource(this.http);\n    this.subscriptionProducts = new SubscriptionProductsResource(this.http);\n    this.subscriptionProductGroups = new SubscriptionProductGroupsResource(this.http);\n    this.orders = new OrdersResource(this.http);\n    this.checkout = new CheckoutResource(this.http);\n    this.graphql = new GraphQLResource(this.http);\n  }\n}\n","import { createVerify } from \"node:crypto\";\n\nimport type { VerifyWebhookOptions, WebhookEvent } from \"./types.js\";\n\n/** Default tolerance: 5 minutes */\nconst DEFAULT_TOLERANCE_MS = 5 * 60 * 1000;\n\n/** Waffo Pancake test environment webhook verification public key. */\nconst TEST_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnmRY6yMMA3lVqmAU6ZG\nb1sjL/+r/z6E+ZjkXaDAKiqOhk9rpazni0bNsGXwmftTPk9jy2wn+j6JHODD/WH/\nSCnSfvKkLIjy4Hk7BuCgB174C0ydan7J+KgXLkOwgCAxxB68t2tezldwo74ZpXgn\nF49opzMvQ9prEwIAWOE+kV9iK6gx/AckSMtHIHpUesoPDkldpmFHlB2qpf1vsFTZ\n5kD6DmGl+2GIVK01aChy2lk8pLv0yUMu18v44sLkO5M44TkGPJD9qG09wrvVG2wp\nOTVCn1n5pP8P+HRLcgzbUB3OlZVfdFurn6EZwtyL4ZD9kdkQ4EZE/9inKcp3c1h4\nxwIDAQAB\n-----END PUBLIC KEY-----`;\n\n/** Waffo Pancake production environment webhook verification public key. */\nconst PROD_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+xApdTIb4ua+DgZKQ54\niBsD82ybyhGCLRETONW4Jgbb3A8DUM1LqBk6r/CmTOCHqLalTQHNigvP3R5zkDNX\niRJz6gA4MJ/+8K0+mnEE2RISQzN+Qu65TNd6svb+INm/kMaftY4uIXr6y6kchtTJ\ndwnQhcKdAL2v7h7IFnkVelQsKxDdb2PqX8xX/qwd01iXvMcpCCaXovUwZsxH2QN5\nZKBTseJivbhUeyJCco4fdUyxOMHe2ybCVhyvim2uxAl1nkvL5L8RCWMCAV55LLo0\n9OhmLahz/DYNu13YLVP6dvIT09ZFBYU6Owj1NxdinTynlJCFS9VYwBgmftosSE1U\ndwIDAQAB\n-----END PUBLIC KEY-----`;\n\n/**\n * Parse `X-Waffo-Signature` header.\n *\n * Format: `t=<timestamp>,v1=<base64signature>`\n *\n * @returns Parsed `t` (timestamp string) and `v1` (base64 signature)\n */\nfunction parseSignatureHeader(header: string): { t: string; v1: string } {\n  let t = \"\";\n  let v1 = \"\";\n  for (const pair of header.split(\",\")) {\n    const eqIdx = pair.indexOf(\"=\");\n    if (eqIdx === -1) continue;\n    const key = pair.slice(0, eqIdx).trim();\n    const value = pair.slice(eqIdx + 1).trim();\n    if (key === \"t\") t = value;\n    else if (key === \"v1\") v1 = value;\n  }\n  return { t, v1 };\n}\n\n/**\n * Verify RSA-SHA256 signature against a public key.\n *\n * @param signatureInput - The string to verify (`${t}.${rawBody}`)\n * @param v1 - Base64-encoded signature\n * @param publicKey - PEM public key\n * @returns Whether the signature is valid\n */\nfunction rsaVerify(signatureInput: string, v1: string, publicKey: string): boolean {\n  const verifier = createVerify(\"RSA-SHA256\");\n  verifier.update(signatureInput);\n  return verifier.verify(publicKey, v1, \"base64\");\n}\n\n/**\n * Verify and parse an incoming Waffo Pancake webhook event.\n *\n * Uses built-in Waffo public keys (RSA-SHA256) for signature verification.\n * Test and production environments use different key pairs; both are embedded in the SDK.\n *\n * Behavior:\n * - Parses the `X-Waffo-Signature` header (`t=<timestamp>,v1=<base64sig>`)\n * - Builds signature input `${t}.${rawBody}` and verifies with RSA-SHA256\n * - When `environment` is not specified, tries prod key first, then test key\n * - Optional: checks timestamp to prevent replay attacks (default 5-minute tolerance)\n *\n * @param payload - Raw request body string (must be unparsed)\n * @param signatureHeader - Value of the `X-Waffo-Signature` header\n * @param options - Verification options\n * @returns Parsed webhook event\n * @throws Error if header is missing/malformed, signature is invalid, or timestamp is stale\n *\n * @example\n * // Express (use raw body!)\n * app.post(\"/webhooks\", express.raw({ type: \"application/json\" }), (req, res) => {\n *   try {\n *     const event = verifyWebhook(\n *       req.body.toString(\"utf-8\"),\n *       req.headers[\"x-waffo-signature\"] as string,\n *     );\n *     res.status(200).send(\"OK\");\n *     handleEventAsync(event).catch(console.error);\n *   } catch {\n *     res.status(401).send(\"Invalid signature\");\n *   }\n * });\n *\n * @example\n * // Next.js App Router\n * export async function POST(request: Request) {\n *   const body = await request.text();\n *   const sig = request.headers.get(\"x-waffo-signature\");\n *   const event = verifyWebhook(body, sig);\n *   // handle event ...\n *   return new Response(\"OK\");\n * }\n *\n * @example\n * // Specify environment explicitly\n * const event = verifyWebhook(body, sig, { environment: \"prod\" });\n *\n * @example\n * // Disable replay protection\n * const event = verifyWebhook(body, sig, { toleranceMs: 0 });\n */\nexport function verifyWebhook<T = Record<string, unknown>>(\n  payload: string,\n  signatureHeader: string | undefined | null,\n  options?: VerifyWebhookOptions,\n): WebhookEvent<T> {\n  if (!signatureHeader) {\n    throw new Error(\"Missing X-Waffo-Signature header\");\n  }\n\n  const { t, v1 } = parseSignatureHeader(signatureHeader);\n  if (!t || !v1) {\n    throw new Error(\"Malformed X-Waffo-Signature header: missing t or v1\");\n  }\n\n  // Replay protection\n  const toleranceMs = options?.toleranceMs ?? DEFAULT_TOLERANCE_MS;\n  if (toleranceMs > 0) {\n    const timestampMs = Number(t);\n    if (Number.isNaN(timestampMs)) {\n      throw new Error(\"Invalid timestamp in X-Waffo-Signature header\");\n    }\n    if (Math.abs(Date.now() - timestampMs) > toleranceMs) {\n      throw new Error(\"Webhook timestamp outside tolerance window (possible replay attack)\");\n    }\n  }\n\n  // RSA-SHA256 verification\n  const signatureInput = `${t}.${payload}`;\n  const env = options?.environment;\n\n  if (env === \"test\") {\n    if (!rsaVerify(signatureInput, v1, TEST_PUBLIC_KEY)) {\n      throw new Error(\"Invalid webhook signature (test key)\");\n    }\n  } else if (env === \"prod\") {\n    if (!rsaVerify(signatureInput, v1, PROD_PUBLIC_KEY)) {\n      throw new Error(\"Invalid webhook signature (prod key)\");\n    }\n  } else {\n    // Auto-detect: try prod first, then test\n    const prodValid = rsaVerify(signatureInput, v1, PROD_PUBLIC_KEY);\n    if (!prodValid) {\n      const testValid = rsaVerify(signatureInput, v1, TEST_PUBLIC_KEY);\n      if (!testValid) {\n        throw new Error(\"Invalid webhook signature (tried both prod and test keys)\");\n      }\n    }\n  }\n\n  return JSON.parse(payload) as WebhookEvent<T>;\n}\n","// ---------------------------------------------------------------------------\n// Client config\n// ---------------------------------------------------------------------------\n\nexport interface WaffoPancakeConfig {\n  /** Merchant ID (X-Merchant-Id header) */\n  merchantId: string;\n  /** RSA private key in PEM format for request signing */\n  privateKey: string;\n  /** Base URL override (default: https://waffo-pancake-auth-service.vercel.app) */\n  baseUrl?: string;\n  /** Custom fetch implementation (default: global fetch) */\n  fetch?: typeof fetch;\n}\n\n// ---------------------------------------------------------------------------\n// API response envelope\n// ---------------------------------------------------------------------------\n\n/**\n * Single error object within the `errors` array.\n *\n * @example\n * { message: \"Store slug already exists\", layer: \"store\" }\n */\nexport interface ApiError {\n  /** Error message */\n  message: string;\n  /** Layer where the error originated */\n  layer: `${ErrorLayer}`;\n}\n\n/** Successful API response envelope. */\nexport interface ApiSuccessResponse<T> {\n  data: T;\n}\n\n/**\n * Error API response envelope.\n *\n * `errors` are ordered by call stack: `[0]` is the deepest layer, `[n]` is the outermost.\n */\nexport interface ApiErrorResponse {\n  data: null;\n  errors: ApiError[];\n}\n\n/** Union type of success and error API responses. */\nexport type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;\n\n// ---------------------------------------------------------------------------\n// Enums (runtime-accessible values)\n// ---------------------------------------------------------------------------\n\n/**\n * Environment type.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport enum Environment {\n  Test = \"test\",\n  Prod = \"prod\",\n}\n\n/**\n * Tax category for products.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum TaxCategory {\n  DigitalGoods = \"digital_goods\",\n  SaaS = \"saas\",\n  Software = \"software\",\n  Ebook = \"ebook\",\n  OnlineCourse = \"online_course\",\n  Consulting = \"consulting\",\n  ProfessionalService = \"professional_service\",\n}\n\n/**\n * Subscription billing period.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum BillingPeriod {\n  Weekly = \"weekly\",\n  Monthly = \"monthly\",\n  Quarterly = \"quarterly\",\n  Yearly = \"yearly\",\n}\n\n/**\n * Product version status.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum ProductVersionStatus {\n  Active = \"active\",\n  Inactive = \"inactive\",\n}\n\n/**\n * Store entity status.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport enum EntityStatus {\n  Active = \"active\",\n  Inactive = \"inactive\",\n  Suspended = \"suspended\",\n}\n\n/**\n * Store member role.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport enum StoreRole {\n  Owner = \"owner\",\n  Admin = \"admin\",\n  Member = \"member\",\n}\n\n/**\n * One-time order status.\n * @see waffo-pancake-order-service/app/lib/resources/onetime-order.ts\n */\nexport enum OnetimeOrderStatus {\n  Pending = \"pending\",\n  Completed = \"completed\",\n  Canceled = \"canceled\",\n}\n\n/**\n * Subscription order status.\n *\n * State machine:\n * - pending -> active, canceled\n * - active -> canceling, past_due, canceled, expired\n * - canceling -> active, canceled\n * - past_due -> active, canceled\n * - canceled -> terminal\n * - expired -> terminal\n *\n * @see waffo-pancake-order-service/app/lib/resources/subscription-order.ts\n */\nexport enum SubscriptionOrderStatus {\n  Pending = \"pending\",\n  Active = \"active\",\n  Canceling = \"canceling\",\n  Canceled = \"canceled\",\n  PastDue = \"past_due\",\n  Expired = \"expired\",\n}\n\n/**\n * Payment status.\n * @see waffo-pancake-order-service/app/lib/resources/payment.ts\n */\nexport enum PaymentStatus {\n  Pending = \"pending\",\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n  Canceled = \"canceled\",\n}\n\n/**\n * Refund ticket status.\n * @see waffo-pancake-order-service/app/lib/resources/refund-ticket.ts\n */\nexport enum RefundTicketStatus {\n  Pending = \"pending\",\n  Approved = \"approved\",\n  Rejected = \"rejected\",\n  Processing = \"processing\",\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n}\n\n/**\n * Refund status.\n * @see waffo-pancake-order-service/app/lib/resources/refund.ts\n */\nexport enum RefundStatus {\n  Succeeded = \"succeeded\",\n  Failed = \"failed\",\n}\n\n/**\n * Media asset type.\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport enum MediaType {\n  Image = \"image\",\n  Video = \"video\",\n}\n\n/**\n * Checkout session product type.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport enum CheckoutSessionProductType {\n  Onetime = \"onetime\",\n  Subscription = \"subscription\",\n}\n\n/** Error layer identifier in the call stack. */\nexport enum ErrorLayer {\n  Gateway = \"gateway\",\n  User = \"user\",\n  Store = \"store\",\n  Product = \"product\",\n  Order = \"order\",\n  GraphQL = \"graphql\",\n  Resource = \"resource\",\n  Email = \"email\",\n}\n\n// ---------------------------------------------------------------------------\n// Auth\n// ---------------------------------------------------------------------------\n\n/**\n * Parameters for issuing a buyer session token.\n * @see waffo-pancake-user-service/app/lib/utils/jwt.ts IssueSessionTokenRequest\n */\nexport interface IssueSessionTokenParams {\n  /** Buyer identity (email or any merchant-provided identifier string) */\n  buyerIdentity: string;\n  /** Store ID */\n  storeId: string;\n}\n\n/**\n * Issued session token response.\n *\n * @example\n * { token: \"eyJhbGciOi...\", expiresAt: \"2026-03-10T09:00:00.000Z\" }\n */\nexport interface SessionToken {\n  /** JWT token string */\n  token: string;\n  /** Expiration time (ISO 8601 UTC) */\n  expiresAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store — from waffo-pancake-store-service\n// ---------------------------------------------------------------------------\n\n/**\n * Webhook configuration for test and production environments.\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface WebhookSettings {\n  /** Test environment webhook URL */\n  testWebhookUrl: string | null;\n  /** Production environment webhook URL */\n  prodWebhookUrl: string | null;\n  /** Event types subscribed in test environment */\n  testEvents: string[];\n  /** Event types subscribed in production environment */\n  prodEvents: string[];\n}\n\n/**\n * Notification settings (all default to true).\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface NotificationSettings {\n  emailOrderConfirmation: boolean;\n  emailSubscriptionConfirmation: boolean;\n  emailSubscriptionCycled: boolean;\n  emailSubscriptionCanceled: boolean;\n  emailSubscriptionRevoked: boolean;\n  emailSubscriptionPastDue: boolean;\n  notifyNewOrders: boolean;\n  notifyNewSubscriptions: boolean;\n}\n\n/**\n * Single-theme checkout page styling.\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface CheckoutThemeSettings {\n  checkoutLogo: string | null;\n  checkoutColorPrimary: string;\n  checkoutColorBackground: string;\n  checkoutColorCard: string;\n  checkoutColorText: string;\n  checkoutColorTextSecondary: string;\n  checkoutBorderRadius: string;\n}\n\n/**\n * Checkout page configuration (light and dark themes).\n * @see waffo-pancake-store-service/app/lib/types.ts\n */\nexport interface CheckoutSettings {\n  light: CheckoutThemeSettings;\n  dark: CheckoutThemeSettings;\n}\n\n/**\n * Store entity.\n * @see waffo-pancake-store-service/app/lib/resources/store.ts\n */\nexport interface Store {\n  id: string;\n  name: string;\n  status: EntityStatus;\n  logo: string | null;\n  supportEmail: string | null;\n  website: string | null;\n  slug: string | null;\n  isPublic: boolean;\n  prodEnabled: boolean;\n  webhookSettings: WebhookSettings | null;\n  notificationSettings: NotificationSettings | null;\n  checkoutSettings: CheckoutSettings | null;\n  deletedAt: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/** Parameters for creating a store. */\nexport interface CreateStoreParams {\n  /** Store name (slug is auto-generated) */\n  name: string;\n}\n\n/** Parameters for updating a store. */\nexport interface UpdateStoreParams {\n  /** Store ID */\n  id: string;\n  name?: string;\n  status?: EntityStatus;\n  logo?: string | null;\n  supportEmail?: string | null;\n  website?: string | null;\n  isPublic?: boolean;\n  webhookSettings?: WebhookSettings | null;\n  notificationSettings?: NotificationSettings | null;\n  checkoutSettings?: CheckoutSettings | null;\n}\n\n/** Parameters for deleting (soft-delete) a store. */\nexport interface DeleteStoreParams {\n  /** Store ID */\n  id: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store Merchant (coming soon — endpoints return 501)\n// ---------------------------------------------------------------------------\n\n/** Parameters for adding a merchant to a store. */\nexport interface AddMerchantParams {\n  storeId: string;\n  email: string;\n  role: \"admin\" | \"member\";\n}\n\n/** Result of adding a merchant to a store. */\nexport interface AddMerchantResult {\n  storeId: string;\n  merchantId: string;\n  email: string;\n  role: string;\n  status: string;\n  addedAt: string;\n}\n\n/** Parameters for removing a merchant from a store. */\nexport interface RemoveMerchantParams {\n  storeId: string;\n  merchantId: string;\n}\n\n/** Result of removing a merchant from a store. */\nexport interface RemoveMerchantResult {\n  message: string;\n  removedAt: string;\n}\n\n/** Parameters for updating a merchant's role. */\nexport interface UpdateRoleParams {\n  storeId: string;\n  merchantId: string;\n  role: \"admin\" | \"member\";\n}\n\n/** Result of updating a merchant's role. */\nexport interface UpdateRoleResult {\n  storeId: string;\n  merchantId: string;\n  role: string;\n  updatedAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Product — shared types from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Price for a single currency.\n *\n * Amounts are stored in the smallest currency unit (e.g. cents, yen)\n * to avoid floating-point precision issues.\n *\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n *\n * @example\n * // USD $9.99\n * { amount: 999, taxIncluded: true, taxCategory: \"saas\" }\n *\n * @example\n * // JPY ¥1000\n * { amount: 1000, taxIncluded: false, taxCategory: \"software\" }\n */\nexport interface PriceInfo {\n  /** Price amount in smallest currency unit */\n  amount: number;\n  /** Whether the price is tax-inclusive */\n  taxIncluded: boolean;\n  /** Tax category */\n  taxCategory: TaxCategory;\n}\n\n/**\n * Multi-currency prices (keyed by ISO 4217 currency code).\n *\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n *\n * @example\n * {\n *   \"USD\": { amount: 999, taxIncluded: true, taxCategory: \"saas\" },\n *   \"EUR\": { amount: 899, taxIncluded: true, taxCategory: \"saas\" }\n * }\n */\nexport type Prices = Record<string, PriceInfo>;\n\n/**\n * Media asset (image or video).\n * @see waffo-pancake-product-service/app/lib/resources/types.ts\n */\nexport interface MediaItem {\n  /** Media type */\n  type: `${MediaType}`;\n  /** Asset URL */\n  url: string;\n  /** Alt text */\n  alt?: string;\n  /** Thumbnail URL */\n  thumbnail?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Onetime Product — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * One-time product detail (public API shape).\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts OnetimeProductDetail\n */\nexport interface OnetimeProductDetail {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  prices: Prices;\n  media: MediaItem[];\n  successUrl: string | null;\n  metadata: Record<string, unknown>;\n  status: ProductVersionStatus;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a one-time product.\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts CreateOnetimeProductRequestBody\n */\nexport interface CreateOnetimeProductParams {\n  storeId: string;\n  name: string;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Parameters for updating a one-time product (creates a new version; skips if unchanged).\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts UpdateOnetimeProductContentRequestBody\n */\nexport interface UpdateOnetimeProductParams {\n  id: string;\n  name: string;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/** Parameters for publishing a one-time product's test version to production. */\nexport interface PublishOnetimeProductParams {\n  /** Product ID */\n  id: string;\n}\n\n/**\n * Parameters for updating a one-time product's status.\n * @see waffo-pancake-product-service/app/lib/resources/onetime-product.ts UpdateOnetimeStatusRequestBody\n */\nexport interface UpdateOnetimeStatusParams {\n  id: string;\n  status: ProductVersionStatus;\n}\n\n// ---------------------------------------------------------------------------\n// Subscription Product — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Subscription product detail (public API shape).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts SubscriptionProductDetail\n */\nexport interface SubscriptionProductDetail {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  media: MediaItem[];\n  successUrl: string | null;\n  metadata: Record<string, unknown>;\n  status: ProductVersionStatus;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a subscription product.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts CreateSubscriptionProductRequestBody\n */\nexport interface CreateSubscriptionProductParams {\n  storeId: string;\n  name: string;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Parameters for updating a subscription product (creates a new version; skips if unchanged).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts UpdateSubscriptionProductContentRequestBody\n */\nexport interface UpdateSubscriptionProductParams {\n  id: string;\n  name: string;\n  billingPeriod: BillingPeriod;\n  prices: Prices;\n  description?: string;\n  media?: MediaItem[];\n  successUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\n/** Parameters for publishing a subscription product's test version to production. */\nexport interface PublishSubscriptionProductParams {\n  /** Product ID */\n  id: string;\n}\n\n/**\n * Parameters for updating a subscription product's status.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product.ts UpdateSubscriptionStatusRequestBody\n */\nexport interface UpdateSubscriptionStatusParams {\n  id: string;\n  status: ProductVersionStatus;\n}\n\n// ---------------------------------------------------------------------------\n// Subscription Product Group — from waffo-pancake-product-service\n// ---------------------------------------------------------------------------\n\n/**\n * Group rules for subscription product groups.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts\n */\nexport interface GroupRules {\n  /** Whether trial period is shared across products in the group */\n  sharedTrial: boolean;\n}\n\n/**\n * Subscription product group entity.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts\n */\nexport interface SubscriptionProductGroup {\n  id: string;\n  storeId: string;\n  name: string;\n  description: string | null;\n  rules: GroupRules;\n  productIds: string[];\n  environment: Environment;\n  createdAt: string;\n  updatedAt: string;\n}\n\n/**\n * Parameters for creating a subscription product group.\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts CreateGroupRequestBody\n */\nexport interface CreateSubscriptionProductGroupParams {\n  storeId: string;\n  name: string;\n  description?: string;\n  rules?: GroupRules;\n  productIds?: string[];\n}\n\n/**\n * Parameters for updating a subscription product group (`productIds` is a full replacement).\n * @see waffo-pancake-product-service/app/lib/resources/subscription-product-group.ts UpdateGroupRequestBody\n */\nexport interface UpdateSubscriptionProductGroupParams {\n  id: string;\n  name?: string;\n  description?: string;\n  rules?: GroupRules;\n  productIds?: string[];\n}\n\n/** Parameters for hard-deleting a subscription product group. */\nexport interface DeleteSubscriptionProductGroupParams {\n  /** Group ID */\n  id: string;\n}\n\n/** Parameters for publishing a test-environment group to production (upsert). */\nexport interface PublishSubscriptionProductGroupParams {\n  /** Group ID */\n  id: string;\n}\n\n// ---------------------------------------------------------------------------\n// Order — from waffo-pancake-order-service\n// ---------------------------------------------------------------------------\n\n/** Parameters for canceling a subscription order. */\nexport interface CancelSubscriptionParams {\n  /** Order ID */\n  orderId: string;\n}\n\n/**\n * Result of canceling a subscription order.\n * @see waffo-pancake-order-service cancel-order route.ts\n */\nexport interface CancelSubscriptionResult {\n  orderId: string;\n  /** Status after cancellation (`\"canceled\"` or `\"canceling\"`) */\n  status: `${SubscriptionOrderStatus}`;\n}\n\n/**\n * Buyer billing details for checkout.\n * @see waffo-pancake-order-service/app/lib/types.ts\n */\nexport interface BillingDetail {\n  /** Country code (ISO 3166-1 alpha-2) */\n  country: string;\n  /** Whether this is a business purchase */\n  isBusiness: boolean;\n  /** Postal / ZIP code */\n  postcode?: string;\n  /** State / province code (required for US/CA) */\n  state?: string;\n  /** Business name (required when isBusiness=true) */\n  businessName?: string;\n  /** Tax ID (required for EU businesses) */\n  taxId?: string;\n}\n\n/**\n * Parameters for creating a checkout session.\n * @see waffo-pancake-order-service/app/lib/types.ts CreateCheckoutSessionRequest\n */\nexport interface CreateCheckoutSessionParams {\n  /** Store ID */\n  storeId?: string;\n  /** Product ID */\n  productId: string;\n  /** Product type */\n  productType: `${CheckoutSessionProductType}`;\n  /** Currency code (ISO 4217) */\n  currency: string;\n  /** Optional price snapshot override (reads from DB if omitted) */\n  priceSnapshot?: PriceInfo;\n  /** Trial toggle override (subscription only) */\n  withTrial?: boolean;\n  /** Pre-filled buyer email */\n  buyerEmail?: string;\n  /** Pre-filled billing details */\n  billingDetail?: BillingDetail;\n  /** Redirect URL after successful payment */\n  successUrl?: string;\n  /** Session expiration in seconds (default: 7 days) */\n  expiresInSeconds?: number;\n  /** Custom metadata */\n  metadata?: Record<string, string>;\n}\n\n/** Result of creating a checkout session. */\nexport interface CheckoutSessionResult {\n  /** Session ID */\n  sessionId: string;\n  /** URL to redirect the customer to */\n  checkoutUrl: string;\n  /** Session expiration time (ISO 8601 UTC) */\n  expiresAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// GraphQL\n// ---------------------------------------------------------------------------\n\n/** Parameters for a GraphQL query. */\nexport interface GraphQLParams {\n  /** GraphQL query string */\n  query: string;\n  /** Query variables */\n  variables?: Record<string, unknown>;\n}\n\n/** GraphQL response envelope. */\nexport interface GraphQLResponse<T = Record<string, unknown>> {\n  data: T | null;\n  errors?: Array<{\n    message: string;\n    locations?: Array<{ line: number; column: number }>;\n    path?: string[];\n  }>;\n}\n\n// ---------------------------------------------------------------------------\n// Webhook\n// ---------------------------------------------------------------------------\n\n/**\n * Webhook event types.\n * @see docs/api-reference/webhooks.mdx\n */\nexport enum WebhookEventType {\n  /** One-time order first payment succeeded */\n  OrderCompleted = \"order.completed\",\n  /** Subscription first payment succeeded (newly activated) */\n  SubscriptionActivated = \"subscription.activated\",\n  /** Subscription renewal payment succeeded */\n  SubscriptionPaymentSucceeded = \"subscription.payment_succeeded\",\n  /** Buyer initiated cancellation (expires at end of current period) */\n  SubscriptionCanceling = \"subscription.canceling\",\n  /** Buyer withdrew cancellation (subscription restored) */\n  SubscriptionUncanceled = \"subscription.uncanceled\",\n  /** Subscription product changed (upgrade/downgrade) */\n  SubscriptionUpdated = \"subscription.updated\",\n  /** Subscription fully terminated */\n  SubscriptionCanceled = \"subscription.canceled\",\n  /** Renewal payment failed (past due) */\n  SubscriptionPastDue = \"subscription.past_due\",\n  /** Refund succeeded */\n  RefundSucceeded = \"refund.succeeded\",\n  /** Refund failed */\n  RefundFailed = \"refund.failed\",\n}\n\n/**\n * Common data fields in a webhook event payload.\n * @see docs/api-reference/webhooks.mdx\n */\nexport interface WebhookEventData {\n  orderId: string;\n  buyerEmail: string;\n  currency: string;\n  /** Amount in smallest currency unit */\n  amount: number;\n  /** Tax amount in smallest currency unit */\n  taxAmount: number;\n  productName: string;\n}\n\n/**\n * Webhook event payload.\n *\n * @see docs/api-reference/webhooks.mdx\n *\n * @example\n * {\n *   id: \"550e8400-...\",\n *   timestamp: \"2026-03-10T08:30:00.000Z\",\n *   eventType: \"order.completed\",\n *   eventId: \"pay_660e8400-...\",\n *   storeId: \"770e8400-...\",\n *   mode: \"prod\",\n *   data: { orderId: \"...\", buyerEmail: \"...\", currency: \"USD\", amount: 2900, taxAmount: 290, productName: \"Pro Plan\" }\n * }\n */\nexport interface WebhookEvent<T = WebhookEventData> {\n  /** Delivery record unique ID (UUID), usable for idempotent deduplication */\n  id: string;\n  /** Event timestamp (ISO 8601 UTC) */\n  timestamp: string;\n  /** Event type */\n  eventType: `${WebhookEventType}` | (string & {});\n  /** Business event ID (e.g. payment ID, order ID) */\n  eventId: string;\n  /** Store ID the event belongs to */\n  storeId: string;\n  /** Environment identifier */\n  mode: `${Environment}`;\n  /** Event data */\n  data: T;\n}\n\n/** Options for {@link verifyWebhook}. */\nexport interface VerifyWebhookOptions {\n  /**\n   * Specify which environment's public key to use for verification.\n   * When omitted, both keys are tried automatically (prod first).\n   */\n  environment?: `${Environment}`;\n  /**\n   * Timestamp tolerance window in milliseconds for replay protection.\n   * Set to 0 to skip timestamp checking.\n   * @default 300000 (5 minutes)\n   */\n  toleranceMs?: number;\n}\n"],"mappings":";AAAA,SAAS,cAAAA,mBAAkB;;;ACepB,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAClC;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,QAAoB;AAC9C,UAAM,YAAY,OAAO,CAAC,GAAG,WAAW;AACxC,UAAM,SAAS;AACf,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AACF;;;AC1BA,SAAS,YAAY,kBAAkB;AAehC,SAAS,YACd,QACA,MACA,WACA,MACA,YACQ;AACR,QAAM,WAAW,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,QAAQ;AAClE,QAAM,mBAAmB,GAAG,MAAM;AAAA,EAAK,IAAI;AAAA,EAAK,SAAS;AAAA,EAAK,QAAQ;AAEtE,QAAM,OAAO,WAAW,QAAQ;AAChC,OAAK,OAAO,gBAAgB;AAC5B,SAAO,KAAK,KAAK,YAAY,QAAQ;AACvC;;;AFrBA,IAAM,mBAAmB;AAOlB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,QAA4B;AACtC,SAAK,aAAa,OAAO;AACzB,SAAK,aAAa,OAAO;AACzB,SAAK,WAAW,OAAO,WAAW,kBAAkB,QAAQ,QAAQ,EAAE;AACtE,SAAK,SAAS,OAAO,SAAS;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,KAAQ,MAAc,MAA0B;AACpD,UAAM,UAAU,KAAK,UAAU,IAAI;AACnC,UAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,EAAE,SAAS;AACzD,UAAM,YAAY,YAAY,QAAQ,MAAM,WAAW,SAAS,KAAK,UAAU;AAE/E,UAAM,WAAW,MAAM,KAAK,OAAO,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,iBAAiB,KAAK;AAAA,QACtB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,qBAAqBC,YAAW,QAAQ,EACrC,OAAO,GAAG,KAAK,UAAU,IAAI,IAAI,IAAI,OAAO,EAAE,EAC9C,OAAO,KAAK;AAAA,MACjB;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AAED,UAAM,SAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,YAAY,UAAU,OAAO,QAAQ;AACvC,YAAM,IAAI,kBAAkB,SAAS,QAAQ,OAAO,MAAM;AAAA,IAC5D;AAEA,WAAO,OAAO;AAAA,EAChB;AACF;;;AG/DO,IAAM,eAAN,MAAmB;AAAA,EACxB,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAchD,MAAM,kBAAkB,QAAwD;AAC9E,WAAO,KAAK,KAAK,KAAmB,wCAAwC,MAAM;AAAA,EACpF;AACF;;;AClBO,IAAM,mBAAN,MAAuB;AAAA,EAC5B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBhD,MAAM,cAAc,QAAqE;AACvF,WAAO,KAAK,KAAK,KAA4B,uCAAuC,MAAM;AAAA,EAC5F;AACF;;;ACtBO,IAAM,kBAAN,MAAsB;AAAA,EAC3B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBhD,MAAM,MAAmC,QAAoD;AAC3F,WAAO,KAAK,KAAK,KAAyB,eAAe,MAAM;AAAA,EACjE;AACF;;;AClBO,IAAM,0BAAN,MAA8B;AAAA,EACnC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAehD,MAAM,OAAO,QAAgF;AAC3F,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAgF;AAC3F,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAAiF;AAC7F,WAAO,KAAK,KAAK,KAAK,+CAA+C,MAAM;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,aAAa,QAA+E;AAChG,WAAO,KAAK,KAAK,KAAK,6CAA6C,MAAM;AAAA,EAC3E;AACF;;;ACvEO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBhD,MAAM,mBAAmB,QAAqE;AAC5F,WAAO,KAAK,KAAK,KAA+B,+CAA+C,MAAM;AAAA,EACvG;AACF;;;ACdO,IAAM,yBAAN,MAA6B;AAAA,EAClC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAehD,MAAM,IAAI,QAAuD;AAC/D,WAAO,KAAK,KAAK,KAAK,2CAA2C,MAAM;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAO,QAA6D;AACxE,WAAO,KAAK,KAAK,KAAK,8CAA8C,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,WAAW,QAAqD;AACpE,WAAO,KAAK,KAAK,KAAK,0CAA0C,MAAM;AAAA,EACxE;AACF;;;ACtDO,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWhD,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,OAAO,QAAsD;AACjE,WAAO,KAAK,KAAK,KAAK,kCAAkC,MAAM;AAAA,EAChE;AACF;;;AC5CO,IAAM,oCAAN,MAAwC;AAAA,EAC7C,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBhD,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,OAAO,QAA4F;AACvG,WAAO,KAAK,KAAK,KAAK,uDAAuD,MAAM;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAA6F;AACzG,WAAO,KAAK,KAAK,KAAK,wDAAwD,MAAM;AAAA,EACtF;AACF;;;AC9DO,IAAM,+BAAN,MAAmC;AAAA,EACxC,YAA6B,MAAkB;AAAlB;AAAA,EAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBhD,MAAM,OAAO,QAA0F;AACrG,WAAO,KAAK,KAAK,KAAK,mDAAmD,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,OAAO,QAA0F;AACrG,WAAO,KAAK,KAAK,KAAK,mDAAmD,MAAM;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,QAAQ,QAA2F;AACvG,WAAO,KAAK,KAAK,KAAK,oDAAoD,MAAM;AAAA,EAClF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,aAAa,QAAyF;AAC1G,WAAO,KAAK,KAAK,KAAK,kDAAkD,MAAM;AAAA,EAChF;AACF;;;AC1BO,IAAM,eAAN,MAAmB;AAAA,EACP;AAAA,EAER;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAA4B;AACtC,SAAK,OAAO,IAAI,WAAW,MAAM;AAEjC,SAAK,OAAO,IAAI,aAAa,KAAK,IAAI;AACtC,SAAK,SAAS,IAAI,eAAe,KAAK,IAAI;AAC1C,SAAK,iBAAiB,IAAI,uBAAuB,KAAK,IAAI;AAC1D,SAAK,kBAAkB,IAAI,wBAAwB,KAAK,IAAI;AAC5D,SAAK,uBAAuB,IAAI,6BAA6B,KAAK,IAAI;AACtE,SAAK,4BAA4B,IAAI,kCAAkC,KAAK,IAAI;AAChF,SAAK,SAAS,IAAI,eAAe,KAAK,IAAI;AAC1C,SAAK,WAAW,IAAI,iBAAiB,KAAK,IAAI;AAC9C,SAAK,UAAU,IAAI,gBAAgB,KAAK,IAAI;AAAA,EAC9C;AACF;;;AC7EA,SAAS,oBAAoB;AAK7B,IAAM,uBAAuB,IAAI,KAAK;AAGtC,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWxB,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBxB,SAAS,qBAAqB,QAA2C;AACvE,MAAI,IAAI;AACR,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,QAAI,UAAU,GAAI;AAClB,UAAM,MAAM,KAAK,MAAM,GAAG,KAAK,EAAE,KAAK;AACtC,UAAM,QAAQ,KAAK,MAAM,QAAQ,CAAC,EAAE,KAAK;AACzC,QAAI,QAAQ,IAAK,KAAI;AAAA,aACZ,QAAQ,KAAM,MAAK;AAAA,EAC9B;AACA,SAAO,EAAE,GAAG,GAAG;AACjB;AAUA,SAAS,UAAU,gBAAwB,IAAY,WAA4B;AACjF,QAAM,WAAW,aAAa,YAAY;AAC1C,WAAS,OAAO,cAAc;AAC9B,SAAO,SAAS,OAAO,WAAW,IAAI,QAAQ;AAChD;AAqDO,SAAS,cACd,SACA,iBACA,SACiB;AACjB,MAAI,CAAC,iBAAiB;AACpB,UAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAEA,QAAM,EAAE,GAAG,GAAG,IAAI,qBAAqB,eAAe;AACtD,MAAI,CAAC,KAAK,CAAC,IAAI;AACb,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AAGA,QAAM,cAAc,SAAS,eAAe;AAC5C,MAAI,cAAc,GAAG;AACnB,UAAM,cAAc,OAAO,CAAC;AAC5B,QAAI,OAAO,MAAM,WAAW,GAAG;AAC7B,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,QAAI,KAAK,IAAI,KAAK,IAAI,IAAI,WAAW,IAAI,aAAa;AACpD,YAAM,IAAI,MAAM,qEAAqE;AAAA,IACvF;AAAA,EACF;AAGA,QAAM,iBAAiB,GAAG,CAAC,IAAI,OAAO;AACtC,QAAM,MAAM,SAAS;AAErB,MAAI,QAAQ,QAAQ;AAClB,QAAI,CAAC,UAAU,gBAAgB,IAAI,eAAe,GAAG;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAAA,EACF,WAAW,QAAQ,QAAQ;AACzB,QAAI,CAAC,UAAU,gBAAgB,IAAI,eAAe,GAAG;AACnD,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AAAA,EACF,OAAO;AAEL,UAAM,YAAY,UAAU,gBAAgB,IAAI,eAAe;AAC/D,QAAI,CAAC,WAAW;AACd,YAAM,YAAY,UAAU,gBAAgB,IAAI,eAAe;AAC/D,UAAI,CAAC,WAAW;AACd,cAAM,IAAI,MAAM,2DAA2D;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AAEA,SAAO,KAAK,MAAM,OAAO;AAC3B;;;AC3GO,IAAK,cAAL,kBAAKC,iBAAL;AACL,EAAAA,aAAA,UAAO;AACP,EAAAA,aAAA,UAAO;AAFG,SAAAA;AAAA,GAAA;AASL,IAAK,cAAL,kBAAKC,iBAAL;AACL,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,UAAO;AACP,EAAAA,aAAA,cAAW;AACX,EAAAA,aAAA,WAAQ;AACR,EAAAA,aAAA,kBAAe;AACf,EAAAA,aAAA,gBAAa;AACb,EAAAA,aAAA,yBAAsB;AAPZ,SAAAA;AAAA,GAAA;AAcL,IAAK,gBAAL,kBAAKC,mBAAL;AACL,EAAAA,eAAA,YAAS;AACT,EAAAA,eAAA,aAAU;AACV,EAAAA,eAAA,eAAY;AACZ,EAAAA,eAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAWL,IAAK,uBAAL,kBAAKC,0BAAL;AACL,EAAAA,sBAAA,YAAS;AACT,EAAAA,sBAAA,cAAW;AAFD,SAAAA;AAAA,GAAA;AASL,IAAK,eAAL,kBAAKC,kBAAL;AACL,EAAAA,cAAA,YAAS;AACT,EAAAA,cAAA,cAAW;AACX,EAAAA,cAAA,eAAY;AAHF,SAAAA;AAAA,GAAA;AAUL,IAAK,YAAL,kBAAKC,eAAL;AACL,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,YAAS;AAHC,SAAAA;AAAA,GAAA;AAUL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,aAAU;AACV,EAAAA,oBAAA,eAAY;AACZ,EAAAA,oBAAA,cAAW;AAHD,SAAAA;AAAA,GAAA;AAmBL,IAAK,0BAAL,kBAAKC,6BAAL;AACL,EAAAA,yBAAA,aAAU;AACV,EAAAA,yBAAA,YAAS;AACT,EAAAA,yBAAA,eAAY;AACZ,EAAAA,yBAAA,cAAW;AACX,EAAAA,yBAAA,aAAU;AACV,EAAAA,yBAAA,aAAU;AANA,SAAAA;AAAA,GAAA;AAaL,IAAK,gBAAL,kBAAKC,mBAAL;AACL,EAAAA,eAAA,aAAU;AACV,EAAAA,eAAA,eAAY;AACZ,EAAAA,eAAA,YAAS;AACT,EAAAA,eAAA,cAAW;AAJD,SAAAA;AAAA,GAAA;AAWL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,aAAU;AACV,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,gBAAa;AACb,EAAAA,oBAAA,eAAY;AACZ,EAAAA,oBAAA,YAAS;AANC,SAAAA;AAAA,GAAA;AAaL,IAAK,eAAL,kBAAKC,kBAAL;AACL,EAAAA,cAAA,eAAY;AACZ,EAAAA,cAAA,YAAS;AAFC,SAAAA;AAAA,GAAA;AASL,IAAK,YAAL,kBAAKC,eAAL;AACL,EAAAA,WAAA,WAAQ;AACR,EAAAA,WAAA,WAAQ;AAFE,SAAAA;AAAA,GAAA;AASL,IAAK,6BAAL,kBAAKC,gCAAL;AACL,EAAAA,4BAAA,aAAU;AACV,EAAAA,4BAAA,kBAAe;AAFL,SAAAA;AAAA,GAAA;AAML,IAAK,aAAL,kBAAKC,gBAAL;AACL,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,UAAO;AACP,EAAAA,YAAA,WAAQ;AACR,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,WAAQ;AACR,EAAAA,YAAA,aAAU;AACV,EAAAA,YAAA,cAAW;AACX,EAAAA,YAAA,WAAQ;AARE,SAAAA;AAAA,GAAA;AA4iBL,IAAK,mBAAL,kBAAKC,sBAAL;AAEL,EAAAA,kBAAA,oBAAiB;AAEjB,EAAAA,kBAAA,2BAAwB;AAExB,EAAAA,kBAAA,kCAA+B;AAE/B,EAAAA,kBAAA,2BAAwB;AAExB,EAAAA,kBAAA,4BAAyB;AAEzB,EAAAA,kBAAA,yBAAsB;AAEtB,EAAAA,kBAAA,0BAAuB;AAEvB,EAAAA,kBAAA,yBAAsB;AAEtB,EAAAA,kBAAA,qBAAkB;AAElB,EAAAA,kBAAA,kBAAe;AApBL,SAAAA;AAAA,GAAA;","names":["createHash","createHash","Environment","TaxCategory","BillingPeriod","ProductVersionStatus","EntityStatus","StoreRole","OnetimeOrderStatus","SubscriptionOrderStatus","PaymentStatus","RefundTicketStatus","RefundStatus","MediaType","CheckoutSessionProductType","ErrorLayer","WebhookEventType"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waffo/pancake-ts",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "TypeScript SDK for Waffo Pancake API (Merchant API Key authentication)",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -19,7 +19,8 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "CHANGELOG.md"
   ],
   "scripts": {
     "build": "tsup",