@waffo/pancake-ts 0.5.2 → 0.7.0

package/dist/index.d.cts

@@ -236,18 +236,61 @@ interface SessionToken {
     expiresAt: string;
 }
 /**
- * Webhook configuration for test and production environments.
+ * Webhook channel — HTTP for the standard RSA-signed envelope, the rest for
+ * IM platform native payloads (Feishu / Discord / Telegram / Slack).
+ */
+type WebhookChannel = "http" | "feishu" | "discord" | "telegram" | "slack";
+/**
+ * Configured webhook endpoint (one row of `store.store_webhooks`).
+ *
  * @see waffo-pancake-store-service/app/lib/types.ts
  */
-interface WebhookSettings {
-    /** Test environment webhook URL */
-    testWebhookUrl: string | null;
-    /** Production environment webhook URL */
-    prodWebhookUrl: string | null;
-    /** Event types subscribed in test environment */
-    testEvents: string[];
-    /** Event types subscribed in production environment */
-    prodEvents: string[];
+interface StoreWebhook {
+    /** Webhook UUID (not Short ID) */
+    id: string;
+    /** Owning store Short ID (`STO_…`) */
+    storeId: string;
+    channel: WebhookChannel;
+    /** Target webhook URL */
+    url: string;
+    /** Subscribed event types (use `WebhookEventType` enum or its string literal) */
+    events: `${WebhookEventType}`[];
+    /** Whether this webhook fires in test or prod environment */
+    testMode: boolean;
+    /** Channel-specific credential (e.g. Telegram chat_id) */
+    secret: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Parameters for creating a webhook. */
+interface AddWebhookParams {
+    /** Store Short ID (`STO_…`) */
+    storeId: string;
+    channel: WebhookChannel;
+    /** Target webhook URL */
+    url: string;
+    /** Subscribed event types (use `WebhookEventType` enum or its string literal) */
+    events: `${WebhookEventType}`[];
+    /** Whether this webhook fires in test (true) or prod (false) */
+    testMode: boolean;
+    /** Channel-specific credential (e.g. Telegram chat_id) */
+    secret?: string | null;
+}
+/** Parameters for updating a webhook. `channel` and `testMode` are immutable. */
+interface UpdateWebhookParams {
+    /** Webhook UUID */
+    id: string;
+    /** Replace target URL (must remain on the same channel host) */
+    url?: string;
+    /** Replace subscribed event types (use `WebhookEventType` enum or its string literal) */
+    events?: `${WebhookEventType}`[];
+    /** Replace channel-specific credential */
+    secret?: string | null;
+}
+/** Parameters for hard-deleting a webhook. */
+interface RemoveWebhookParams {
+    /** Webhook UUID */
+    id: string;
 }
 /**
  * Notification settings (all default to true).
@@ -297,7 +340,6 @@ interface Store {
     website: string | null;
     slug: string | null;
     prodEnabled: boolean;
-    webhookSettings: WebhookSettings | null;
     notificationSettings: NotificationSettings | null;
     checkoutSettings: CheckoutSettings | null;
     deletedAt: string | null;
@@ -315,6 +357,10 @@ interface CreateStoreParams {
  * Settings objects support partial updates — omitted sub-fields keep their
  * existing values, `null` clears a field, and a concrete value sets it.
  * Pass the entire settings object as `null` to clear all fields in the group.
+ *
+ * **BREAKING (2026-05)**: the legacy `webhookSettings` field is removed.
+ * Manage webhooks via `client.webhooks.add / update / remove`; query the
+ * webhook list through GraphQL `Store.storeWebhooks`.
  */
 interface UpdateStoreParams {
     /** Store ID */
@@ -329,8 +375,6 @@ interface UpdateStoreParams {
     supportEmail?: string | null;
     /** Store website URL (set to `null` to remove) */
     website?: string | null;
-    /** Webhook configuration (partial update — omitted fields keep existing values, set to `null` to clear all) */
-    webhookSettings?: Partial<WebhookSettings> | null;
     /** Notification preferences (partial update — omitted fields keep existing values, set to `null` to clear all) */
     notificationSettings?: Partial<NotificationSettings> | null;
     /** Checkout page theme configuration (partial update — omitted fields keep existing values, set to `null` to clear all) */
@@ -841,6 +885,12 @@ interface GraphQLResponse<T = Record<string, unknown>> {
             column: number;
         }>;
         path?: string[];
+        aiHint?: string;
+    }>;
+    warnings?: Array<{
+        message: string;
+        layer: string;
+        aiHint?: string;
     }>;
 }
 /**
@@ -1507,9 +1557,13 @@ declare class StoresResource {
     /**
      * Update an existing store's settings.
      *
-     * Settings objects (`webhookSettings`, `notificationSettings`, `checkoutSettings`)
-     * support partial updates: omitted sub-fields keep existing values, `null` clears
-     * a field. Pass the entire settings object as `null` to clear all fields.
+     * Settings objects (`notificationSettings`, `checkoutSettings`) support
+     * partial updates: omitted sub-fields keep existing values, `null` clears a
+     * field. Pass the entire settings object as `null` to clear all fields.
+     *
+     * **BREAKING (2026-05)**: the legacy `webhookSettings` parameter is removed.
+     * Use `client.webhooks.add / update / remove` to manage webhook endpoints,
+     * and query the configured webhook list via GraphQL `Store.storeWebhooks`.
      *
      * @param params - Fields to update (only provided fields are changed)
      * @returns Updated store entity
@@ -1522,10 +1576,10 @@ declare class StoresResource {
      * });
      *
      * @example
-     * // Clear test webhook URL while keeping other webhook settings
+     * // Toggle a notification preference
      * const { store } = await client.stores.update({
      *   id: "STO_xxx",
-     *   webhookSettings: { testWebhookUrl: null },
+     *   notificationSettings: { emailOrderConfirmation: false },
      * });
      */
     update(params: UpdateStoreParams): Promise<{
@@ -1682,15 +1736,96 @@ declare class SubscriptionProductsResource {
 }
 
 /**
- * Webhook signature verification resource.
+ * Webhook resource — manages webhook configurations (HTTP / Feishu / Discord
+ * / Telegram / Slack) and verifies inbound webhook signatures.
  *
- * Unlike other resources, this does not use HttpClient — webhook verification
- * is a local cryptographic operation that does not require API calls.
+ * **Mutations only**: `add`, `update`, `remove` all hit POST endpoints.
+ * To list a store's webhooks, use GraphQL `Store.storeWebhooks` via
+ * `client.graphql.query`.
+ *
+ * Verification (`verify`) is a local cryptographic operation that does not
+ * require API calls.
  */
 declare class WebhooksResource {
+    private readonly http;
     private readonly publicKeys;
-    /** @param publicKeys - Optional config-level public key(s) from WaffoPancakeConfig */
-    constructor(publicKeys: WebhookPublicKeys | undefined);
+    /**
+     * @param http - HTTP client (used for add/update/remove)
+     * @param publicKeys - Optional config-level public key(s) from WaffoPancakeConfig
+     */
+    constructor(http: HttpClient, publicKeys: WebhookPublicKeys | undefined);
+    /**
+     * Add a webhook endpoint to a store.
+     *
+     * @param params - Webhook configuration
+     * @returns Created webhook entity
+     *
+     * @example
+     * // HTTP webhook (RSA-signed envelope, default)
+     * const { webhook } = await client.webhooks.add({
+     *   storeId: "STO_xxx",
+     *   channel: "http",
+     *   url: "https://example.com/webhook",
+     *   events: ["order.completed", "refund.succeeded"],
+     *   testMode: false,
+     * });
+     *
+     * @example
+     * // Discord webhook (uses Discord embed format)
+     * await client.webhooks.add({
+     *   storeId: "STO_xxx",
+     *   channel: "discord",
+     *   url: "https://discord.com/api/webhooks/...",
+     *   events: ["order.completed"],
+     *   testMode: false,
+     * });
+     *
+     * @example
+     * // Telegram bot — chat_id goes in `secret`; URL is the bot's sendMessage endpoint
+     * await client.webhooks.add({
+     *   storeId: "STO_xxx",
+     *   channel: "telegram",
+     *   url: "https://api.telegram.org/bot123:ABC/sendMessage",
+     *   events: ["order.completed"],
+     *   testMode: false,
+     *   secret: "8737101383",
+     * });
+     */
+    add(params: AddWebhookParams): Promise<{
+        webhook: StoreWebhook;
+    }>;
+    /**
+     * Update an existing webhook (only `url`, `events`, and `secret` are mutable).
+     *
+     * `channel` and `testMode` cannot be changed — remove the webhook and
+     * re-add it instead. URL changes must remain on the same channel host
+     * whitelist.
+     *
+     * @param params - Fields to update
+     * @returns Updated webhook entity
+     *
+     * @example
+     * await client.webhooks.update({
+     *   id: "11111111-2222-3333-4444-555555555555",
+     *   events: ["order.completed", "refund.succeeded", "subscription.canceled"],
+     * });
+     */
+    update(params: UpdateWebhookParams): Promise<{
+        webhook: StoreWebhook;
+    }>;
+    /**
+     * Hard-delete a webhook. Historical `webhook_deliveries` rows are retained
+     * (with `storeWebhookId` set to null) for audit purposes.
+     *
+     * @param params - Webhook to remove
+     * @returns The removed webhook entity (snapshot before deletion)
+     *
+     * @example
+     * await client.webhooks.remove({ id: "11111111-..." });
+     */
+    remove(params: RemoveWebhookParams): Promise<{
+        webhook: StoreWebhook;
+    }>;
     /**
      * Verify and parse an incoming webhook event.
      *
@@ -1882,4 +2017,4 @@ declare class WaffoPancakeError extends Error {
  */
 declare function verifyWebhook<T = Record<string, unknown>>(payload: string, signatureHeader: string | undefined | null, options?: VerifyWebhookOptions): WebhookEvent<T>;
 
-export { type AddMerchantParams, type AddMerchantResult, type AnonymousCheckoutParams, type ApiError, type ApiErrorResponse, type ApiResponse, type ApiSuccessResponse, type AuthenticatedCheckoutParams, type AuthenticatedCheckoutResult, type BillingDetail, BillingPeriod, type CancelOnetimeOrderParams, type CancelOnetimeOrderResult, type CancelSubscriptionParams, type CancelSubscriptionResult, type CheckoutSessionResult, type CheckoutSettings, type CheckoutThemeSettings, type CreateCheckoutSessionParams, type CreateOnetimeProductParams, type CreateRefundTicketParams, type CreateStoreParams, type CreateSubscriptionProductGroupParams, type CreateSubscriptionProductParams, type DeleteStoreParams, type DeleteSubscriptionProductGroupParams, EntityStatus, Environment, ErrorLayer, type GraphQLParams, type GraphQLResponse, type GroupRules, type IssueSessionTokenParams, type MediaItem, MediaType, type NotificationSettings, OnetimeOrderStatus, type OnetimeProductDetail, PaymentStatus, type PriceInfo, type Prices, ProductVersionStatus, type PublishOnetimeProductParams, type PublishSubscriptionProductGroupParams, type PublishSubscriptionProductParams, type ReactivateSubscriptionParams, type ReactivateSubscriptionResult, RefundStatus, type RefundTicket, RefundTicketStatus, type RefundTicketVersionData, type RemoveMerchantParams, type RemoveMerchantResult, type RequestedAmount, type ResubmitRefundTicketParams, type SessionToken, type Store, StoreRole, SubscriptionOrderStatus, type SubscriptionProductDetail, type SubscriptionProductGroup, TaxCategory, type UpdateOnetimeProductParams, type UpdateOnetimeStatusParams, type UpdateRoleParams, type UpdateRoleResult, type UpdateStoreParams, type UpdateSubscriptionProductGroupParams, type UpdateSubscriptionProductParams, type UpdateSubscriptionStatusParams, type VerifyWebhookOptions, WaffoPancake, type WaffoPancakeConfig, WaffoPancakeError, type WebhookEvent, type WebhookEventData, WebhookEventType, type WebhookPublicKeys, type WebhookSettings, verifyWebhook };
+export { type AddMerchantParams, type AddMerchantResult, type AddWebhookParams, type AnonymousCheckoutParams, type ApiError, type ApiErrorResponse, type ApiResponse, type ApiSuccessResponse, type AuthenticatedCheckoutParams, type AuthenticatedCheckoutResult, type BillingDetail, BillingPeriod, type CancelOnetimeOrderParams, type CancelOnetimeOrderResult, type CancelSubscriptionParams, type CancelSubscriptionResult, type CheckoutSessionResult, type CheckoutSettings, type CheckoutThemeSettings, type CreateCheckoutSessionParams, type CreateOnetimeProductParams, type CreateRefundTicketParams, type CreateStoreParams, type CreateSubscriptionProductGroupParams, type CreateSubscriptionProductParams, type DeleteStoreParams, type DeleteSubscriptionProductGroupParams, EntityStatus, Environment, ErrorLayer, type GraphQLParams, type GraphQLResponse, type GroupRules, type IssueSessionTokenParams, type MediaItem, MediaType, type NotificationSettings, OnetimeOrderStatus, type OnetimeProductDetail, PaymentStatus, type PriceInfo, type Prices, ProductVersionStatus, type PublishOnetimeProductParams, type PublishSubscriptionProductGroupParams, type PublishSubscriptionProductParams, type ReactivateSubscriptionParams, type ReactivateSubscriptionResult, RefundStatus, type RefundTicket, RefundTicketStatus, type RefundTicketVersionData, type RemoveMerchantParams, type RemoveMerchantResult, type RemoveWebhookParams, type RequestedAmount, type ResubmitRefundTicketParams, type SessionToken, type Store, StoreRole, type StoreWebhook, SubscriptionOrderStatus, type SubscriptionProductDetail, type SubscriptionProductGroup, TaxCategory, type UpdateOnetimeProductParams, type UpdateOnetimeStatusParams, type UpdateRoleParams, type UpdateRoleResult, type UpdateStoreParams, type UpdateSubscriptionProductGroupParams, type UpdateSubscriptionProductParams, type UpdateSubscriptionStatusParams, type UpdateWebhookParams, type VerifyWebhookOptions, WaffoPancake, type WaffoPancakeConfig, WaffoPancakeError, type WebhookChannel, type WebhookEvent, type WebhookEventData, WebhookEventType, type WebhookPublicKeys, verifyWebhook };

package/dist/index.d.ts

@@ -236,18 +236,61 @@ interface SessionToken {
     expiresAt: string;
 }
 /**
- * Webhook configuration for test and production environments.
+ * Webhook channel — HTTP for the standard RSA-signed envelope, the rest for
+ * IM platform native payloads (Feishu / Discord / Telegram / Slack).
+ */
+type WebhookChannel = "http" | "feishu" | "discord" | "telegram" | "slack";
+/**
+ * Configured webhook endpoint (one row of `store.store_webhooks`).
+ *
  * @see waffo-pancake-store-service/app/lib/types.ts
  */
-interface WebhookSettings {
-    /** Test environment webhook URL */
-    testWebhookUrl: string | null;
-    /** Production environment webhook URL */
-    prodWebhookUrl: string | null;
-    /** Event types subscribed in test environment */
-    testEvents: string[];
-    /** Event types subscribed in production environment */
-    prodEvents: string[];
+interface StoreWebhook {
+    /** Webhook UUID (not Short ID) */
+    id: string;
+    /** Owning store Short ID (`STO_…`) */
+    storeId: string;
+    channel: WebhookChannel;
+    /** Target webhook URL */
+    url: string;
+    /** Subscribed event types (use `WebhookEventType` enum or its string literal) */
+    events: `${WebhookEventType}`[];
+    /** Whether this webhook fires in test or prod environment */
+    testMode: boolean;
+    /** Channel-specific credential (e.g. Telegram chat_id) */
+    secret: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Parameters for creating a webhook. */
+interface AddWebhookParams {
+    /** Store Short ID (`STO_…`) */
+    storeId: string;
+    channel: WebhookChannel;
+    /** Target webhook URL */
+    url: string;
+    /** Subscribed event types (use `WebhookEventType` enum or its string literal) */
+    events: `${WebhookEventType}`[];
+    /** Whether this webhook fires in test (true) or prod (false) */
+    testMode: boolean;
+    /** Channel-specific credential (e.g. Telegram chat_id) */
+    secret?: string | null;
+}
+/** Parameters for updating a webhook. `channel` and `testMode` are immutable. */
+interface UpdateWebhookParams {
+    /** Webhook UUID */
+    id: string;
+    /** Replace target URL (must remain on the same channel host) */
+    url?: string;
+    /** Replace subscribed event types (use `WebhookEventType` enum or its string literal) */
+    events?: `${WebhookEventType}`[];
+    /** Replace channel-specific credential */
+    secret?: string | null;
+}
+/** Parameters for hard-deleting a webhook. */
+interface RemoveWebhookParams {
+    /** Webhook UUID */
+    id: string;
 }
 /**
  * Notification settings (all default to true).
@@ -297,7 +340,6 @@ interface Store {
     website: string | null;
     slug: string | null;
     prodEnabled: boolean;
-    webhookSettings: WebhookSettings | null;
     notificationSettings: NotificationSettings | null;
     checkoutSettings: CheckoutSettings | null;
     deletedAt: string | null;
@@ -315,6 +357,10 @@ interface CreateStoreParams {
  * Settings objects support partial updates — omitted sub-fields keep their
  * existing values, `null` clears a field, and a concrete value sets it.
  * Pass the entire settings object as `null` to clear all fields in the group.
+ *
+ * **BREAKING (2026-05)**: the legacy `webhookSettings` field is removed.
+ * Manage webhooks via `client.webhooks.add / update / remove`; query the
+ * webhook list through GraphQL `Store.storeWebhooks`.
  */
 interface UpdateStoreParams {
     /** Store ID */
@@ -329,8 +375,6 @@ interface UpdateStoreParams {
     supportEmail?: string | null;
     /** Store website URL (set to `null` to remove) */
     website?: string | null;
-    /** Webhook configuration (partial update — omitted fields keep existing values, set to `null` to clear all) */
-    webhookSettings?: Partial<WebhookSettings> | null;
     /** Notification preferences (partial update — omitted fields keep existing values, set to `null` to clear all) */
     notificationSettings?: Partial<NotificationSettings> | null;
     /** Checkout page theme configuration (partial update — omitted fields keep existing values, set to `null` to clear all) */
@@ -841,6 +885,12 @@ interface GraphQLResponse<T = Record<string, unknown>> {
             column: number;
         }>;
         path?: string[];
+        aiHint?: string;
+    }>;
+    warnings?: Array<{
+        message: string;
+        layer: string;
+        aiHint?: string;
     }>;
 }
 /**
@@ -1507,9 +1557,13 @@ declare class StoresResource {
     /**
      * Update an existing store's settings.
      *
-     * Settings objects (`webhookSettings`, `notificationSettings`, `checkoutSettings`)
-     * support partial updates: omitted sub-fields keep existing values, `null` clears
-     * a field. Pass the entire settings object as `null` to clear all fields.
+     * Settings objects (`notificationSettings`, `checkoutSettings`) support
+     * partial updates: omitted sub-fields keep existing values, `null` clears a
+     * field. Pass the entire settings object as `null` to clear all fields.
+     *
+     * **BREAKING (2026-05)**: the legacy `webhookSettings` parameter is removed.
+     * Use `client.webhooks.add / update / remove` to manage webhook endpoints,
+     * and query the configured webhook list via GraphQL `Store.storeWebhooks`.
      *
      * @param params - Fields to update (only provided fields are changed)
      * @returns Updated store entity
@@ -1522,10 +1576,10 @@ declare class StoresResource {
      * });
      *
      * @example
-     * // Clear test webhook URL while keeping other webhook settings
+     * // Toggle a notification preference
      * const { store } = await client.stores.update({
      *   id: "STO_xxx",
-     *   webhookSettings: { testWebhookUrl: null },
+     *   notificationSettings: { emailOrderConfirmation: false },
      * });
      */
     update(params: UpdateStoreParams): Promise<{
@@ -1682,15 +1736,96 @@ declare class SubscriptionProductsResource {
 }
 
 /**
- * Webhook signature verification resource.
+ * Webhook resource — manages webhook configurations (HTTP / Feishu / Discord
+ * / Telegram / Slack) and verifies inbound webhook signatures.
  *
- * Unlike other resources, this does not use HttpClient — webhook verification
- * is a local cryptographic operation that does not require API calls.
+ * **Mutations only**: `add`, `update`, `remove` all hit POST endpoints.
+ * To list a store's webhooks, use GraphQL `Store.storeWebhooks` via
+ * `client.graphql.query`.
+ *
+ * Verification (`verify`) is a local cryptographic operation that does not
+ * require API calls.
  */
 declare class WebhooksResource {
+    private readonly http;
     private readonly publicKeys;
-    /** @param publicKeys - Optional config-level public key(s) from WaffoPancakeConfig */
-    constructor(publicKeys: WebhookPublicKeys | undefined);
+    /**
+     * @param http - HTTP client (used for add/update/remove)
+     * @param publicKeys - Optional config-level public key(s) from WaffoPancakeConfig
+     */
+    constructor(http: HttpClient, publicKeys: WebhookPublicKeys | undefined);
+    /**
+     * Add a webhook endpoint to a store.
+     *
+     * @param params - Webhook configuration
+     * @returns Created webhook entity
+     *
+     * @example
+     * // HTTP webhook (RSA-signed envelope, default)
+     * const { webhook } = await client.webhooks.add({
+     *   storeId: "STO_xxx",
+     *   channel: "http",
+     *   url: "https://example.com/webhook",
+     *   events: ["order.completed", "refund.succeeded"],
+     *   testMode: false,
+     * });
+     *
+     * @example
+     * // Discord webhook (uses Discord embed format)
+     * await client.webhooks.add({
+     *   storeId: "STO_xxx",
+     *   channel: "discord",
+     *   url: "https://discord.com/api/webhooks/...",
+     *   events: ["order.completed"],
+     *   testMode: false,
+     * });
+     *
+     * @example
+     * // Telegram bot — chat_id goes in `secret`; URL is the bot's sendMessage endpoint
+     * await client.webhooks.add({
+     *   storeId: "STO_xxx",
+     *   channel: "telegram",
+     *   url: "https://api.telegram.org/bot123:ABC/sendMessage",
+     *   events: ["order.completed"],
+     *   testMode: false,
+     *   secret: "8737101383",
+     * });
+     */
+    add(params: AddWebhookParams): Promise<{
+        webhook: StoreWebhook;
+    }>;
+    /**
+     * Update an existing webhook (only `url`, `events`, and `secret` are mutable).
+     *
+     * `channel` and `testMode` cannot be changed — remove the webhook and
+     * re-add it instead. URL changes must remain on the same channel host
+     * whitelist.
+     *
+     * @param params - Fields to update
+     * @returns Updated webhook entity
+     *
+     * @example
+     * await client.webhooks.update({
+     *   id: "11111111-2222-3333-4444-555555555555",
+     *   events: ["order.completed", "refund.succeeded", "subscription.canceled"],
+     * });
+     */
+    update(params: UpdateWebhookParams): Promise<{
+        webhook: StoreWebhook;
+    }>;
+    /**
+     * Hard-delete a webhook. Historical `webhook_deliveries` rows are retained
+     * (with `storeWebhookId` set to null) for audit purposes.
+     *
+     * @param params - Webhook to remove
+     * @returns The removed webhook entity (snapshot before deletion)
+     *
+     * @example
+     * await client.webhooks.remove({ id: "11111111-..." });
+     */
+    remove(params: RemoveWebhookParams): Promise<{
+        webhook: StoreWebhook;
+    }>;
     /**
      * Verify and parse an incoming webhook event.
      *
@@ -1882,4 +2017,4 @@ declare class WaffoPancakeError extends Error {
  */
 declare function verifyWebhook<T = Record<string, unknown>>(payload: string, signatureHeader: string | undefined | null, options?: VerifyWebhookOptions): WebhookEvent<T>;
 
-export { type AddMerchantParams, type AddMerchantResult, type AnonymousCheckoutParams, type ApiError, type ApiErrorResponse, type ApiResponse, type ApiSuccessResponse, type AuthenticatedCheckoutParams, type AuthenticatedCheckoutResult, type BillingDetail, BillingPeriod, type CancelOnetimeOrderParams, type CancelOnetimeOrderResult, type CancelSubscriptionParams, type CancelSubscriptionResult, type CheckoutSessionResult, type CheckoutSettings, type CheckoutThemeSettings, type CreateCheckoutSessionParams, type CreateOnetimeProductParams, type CreateRefundTicketParams, type CreateStoreParams, type CreateSubscriptionProductGroupParams, type CreateSubscriptionProductParams, type DeleteStoreParams, type DeleteSubscriptionProductGroupParams, EntityStatus, Environment, ErrorLayer, type GraphQLParams, type GraphQLResponse, type GroupRules, type IssueSessionTokenParams, type MediaItem, MediaType, type NotificationSettings, OnetimeOrderStatus, type OnetimeProductDetail, PaymentStatus, type PriceInfo, type Prices, ProductVersionStatus, type PublishOnetimeProductParams, type PublishSubscriptionProductGroupParams, type PublishSubscriptionProductParams, type ReactivateSubscriptionParams, type ReactivateSubscriptionResult, RefundStatus, type RefundTicket, RefundTicketStatus, type RefundTicketVersionData, type RemoveMerchantParams, type RemoveMerchantResult, type RequestedAmount, type ResubmitRefundTicketParams, type SessionToken, type Store, StoreRole, SubscriptionOrderStatus, type SubscriptionProductDetail, type SubscriptionProductGroup, TaxCategory, type UpdateOnetimeProductParams, type UpdateOnetimeStatusParams, type UpdateRoleParams, type UpdateRoleResult, type UpdateStoreParams, type UpdateSubscriptionProductGroupParams, type UpdateSubscriptionProductParams, type UpdateSubscriptionStatusParams, type VerifyWebhookOptions, WaffoPancake, type WaffoPancakeConfig, WaffoPancakeError, type WebhookEvent, type WebhookEventData, WebhookEventType, type WebhookPublicKeys, type WebhookSettings, verifyWebhook };
+export { type AddMerchantParams, type AddMerchantResult, type AddWebhookParams, type AnonymousCheckoutParams, type ApiError, type ApiErrorResponse, type ApiResponse, type ApiSuccessResponse, type AuthenticatedCheckoutParams, type AuthenticatedCheckoutResult, type BillingDetail, BillingPeriod, type CancelOnetimeOrderParams, type CancelOnetimeOrderResult, type CancelSubscriptionParams, type CancelSubscriptionResult, type CheckoutSessionResult, type CheckoutSettings, type CheckoutThemeSettings, type CreateCheckoutSessionParams, type CreateOnetimeProductParams, type CreateRefundTicketParams, type CreateStoreParams, type CreateSubscriptionProductGroupParams, type CreateSubscriptionProductParams, type DeleteStoreParams, type DeleteSubscriptionProductGroupParams, EntityStatus, Environment, ErrorLayer, type GraphQLParams, type GraphQLResponse, type GroupRules, type IssueSessionTokenParams, type MediaItem, MediaType, type NotificationSettings, OnetimeOrderStatus, type OnetimeProductDetail, PaymentStatus, type PriceInfo, type Prices, ProductVersionStatus, type PublishOnetimeProductParams, type PublishSubscriptionProductGroupParams, type PublishSubscriptionProductParams, type ReactivateSubscriptionParams, type ReactivateSubscriptionResult, RefundStatus, type RefundTicket, RefundTicketStatus, type RefundTicketVersionData, type RemoveMerchantParams, type RemoveMerchantResult, type RemoveWebhookParams, type RequestedAmount, type ResubmitRefundTicketParams, type SessionToken, type Store, StoreRole, type StoreWebhook, SubscriptionOrderStatus, type SubscriptionProductDetail, type SubscriptionProductGroup, TaxCategory, type UpdateOnetimeProductParams, type UpdateOnetimeStatusParams, type UpdateRoleParams, type UpdateRoleResult, type UpdateStoreParams, type UpdateSubscriptionProductGroupParams, type UpdateSubscriptionProductParams, type UpdateSubscriptionStatusParams, type UpdateWebhookParams, type VerifyWebhookOptions, WaffoPancake, type WaffoPancakeConfig, WaffoPancakeError, type WebhookChannel, type WebhookEvent, type WebhookEventData, WebhookEventType, type WebhookPublicKeys, verifyWebhook };

package/dist/index.js

@@ -791,9 +791,13 @@ var StoresResource = class {
   /**
    * Update an existing store's settings.
    *
-   * Settings objects (`webhookSettings`, `notificationSettings`, `checkoutSettings`)
-   * support partial updates: omitted sub-fields keep existing values, `null` clears
-   * a field. Pass the entire settings object as `null` to clear all fields.
+   * Settings objects (`notificationSettings`, `checkoutSettings`) support
+   * partial updates: omitted sub-fields keep existing values, `null` clears a
+   * field. Pass the entire settings object as `null` to clear all fields.
+   *
+   * **BREAKING (2026-05)**: the legacy `webhookSettings` parameter is removed.
+   * Use `client.webhooks.add / update / remove` to manage webhook endpoints,
+   * and query the configured webhook list via GraphQL `Store.storeWebhooks`.
    *
    * @param params - Fields to update (only provided fields are changed)
    * @returns Updated store entity
@@ -806,10 +810,10 @@ var StoresResource = class {
    * });
    *
    * @example
-   * // Clear test webhook URL while keeping other webhook settings
+   * // Toggle a notification preference
    * const { store } = await client.stores.update({
    *   id: "STO_xxx",
-   *   webhookSettings: { testWebhookUrl: null },
+   *   notificationSettings: { emailOrderConfirmation: false },
    * });
    */
   async update(params) {
@@ -1090,10 +1094,91 @@ function verifyWebhook(payload, signatureHeader, options) {
 
 // src/resources/webhooks.ts
 var WebhooksResource = class {
-  /** @param publicKeys - Optional config-level public key(s) from WaffoPancakeConfig */
-  constructor(publicKeys) {
+  /**
+   * @param http - HTTP client (used for add/update/remove)
+   * @param publicKeys - Optional config-level public key(s) from WaffoPancakeConfig
+   */
+  constructor(http, publicKeys) {
+    this.http = http;
     this.publicKeys = publicKeys;
   }
+  /**
+   * Add a webhook endpoint to a store.
+   *
+   * @param params - Webhook configuration
+   * @returns Created webhook entity
+   *
+   * @example
+   * // HTTP webhook (RSA-signed envelope, default)
+   * const { webhook } = await client.webhooks.add({
+   *   storeId: "STO_xxx",
+   *   channel: "http",
+   *   url: "https://example.com/webhook",
+   *   events: ["order.completed", "refund.succeeded"],
+   *   testMode: false,
+   * });
+   *
+   * @example
+   * // Discord webhook (uses Discord embed format)
+   * await client.webhooks.add({
+   *   storeId: "STO_xxx",
+   *   channel: "discord",
+   *   url: "https://discord.com/api/webhooks/...",
+   *   events: ["order.completed"],
+   *   testMode: false,
+   * });
+   *
+   * @example
+   * // Telegram bot — chat_id goes in `secret`; URL is the bot's sendMessage endpoint
+   * await client.webhooks.add({
+   *   storeId: "STO_xxx",
+   *   channel: "telegram",
+   *   url: "https://api.telegram.org/bot123:ABC/sendMessage",
+   *   events: ["order.completed"],
+   *   testMode: false,
+   *   secret: "8737101383",
+   * });
+   */
+  async add(params) {
+    validateShortId("storeId", params.storeId, "STO");
+    validateRequired("channel", params.channel);
+    validateRequired("url", params.url);
+    return this.http.post("/v1/actions/store/add-webhook", params);
+  }
+  /**
+   * Update an existing webhook (only `url`, `events`, and `secret` are mutable).
+   *
+   * `channel` and `testMode` cannot be changed — remove the webhook and
+   * re-add it instead. URL changes must remain on the same channel host
+   * whitelist.
+   *
+   * @param params - Fields to update
+   * @returns Updated webhook entity
+   *
+   * @example
+   * await client.webhooks.update({
+   *   id: "11111111-2222-3333-4444-555555555555",
+   *   events: ["order.completed", "refund.succeeded", "subscription.canceled"],
+   * });
+   */
+  async update(params) {
+    validateRequired("id", params.id);
+    return this.http.post("/v1/actions/store/update-webhook", params);
+  }
+  /**
+   * Hard-delete a webhook. Historical `webhook_deliveries` rows are retained
+   * (with `storeWebhookId` set to null) for audit purposes.
+   *
+   * @param params - Webhook to remove
+   * @returns The removed webhook entity (snapshot before deletion)
+   *
+   * @example
+   * await client.webhooks.remove({ id: "11111111-..." });
+   */
+  async remove(params) {
+    validateRequired("id", params.id);
+    return this.http.post("/v1/actions/store/remove-webhook", params);
+  }
   /**
    * Verify and parse an incoming webhook event.
    *
@@ -1157,7 +1242,7 @@ var WaffoPancake = class {
     this.orders = new OrdersResource(this.http);
     this.checkout = new CheckoutResource(this.http);
     this.graphql = new GraphQLResource(this.http);
-    this.webhooks = new WebhooksResource(config.webhookPublicKey);
+    this.webhooks = new WebhooksResource(this.http, config.webhookPublicKey);
   }
   /**
    * Create a buyer session for self-service operations.