@whatalo/plugin-sdk 1.2.1 → 1.2.2

package/dist/{types-Bo9GbqrM.d.ts → types-CDKGAQ3o.d.ts}

@@ -12,6 +12,7 @@ declare const WEBHOOK_EVENTS: {
     readonly CUSTOMER_CREATED: "customer.created";
     readonly CUSTOMER_UPDATED: "customer.updated";
     readonly CHECKOUT_COMPLETED: "checkout.completed";
+    readonly CHECKOUT_ABANDONED: "checkout.abandoned";
 };
 /** All supported webhook event types */
 type WebhookEvent = PublicWebhookEvent;
@@ -56,6 +57,17 @@ interface CheckoutCompletedWebhookData {
     customer: RuntimeWebhookCustomer;
     store: RuntimeWebhookStore;
 }
+/** Contact captured on an abandoned draft. No `id` — the draft is pre-customer. */
+interface CheckoutAbandonedWebhookCustomer {
+    name: string | null;
+    email: string | null;
+    phone: string | null;
+}
+interface CheckoutAbandonedWebhookData {
+    checkout: RuntimeWebhookCheckout;
+    customer: CheckoutAbandonedWebhookCustomer;
+    store: RuntimeWebhookStore;
+}
 /** Map of webhook events to their payload data shapes */
 interface WebhookEventData {
     "order.created": OrderCreatedWebhookData;
@@ -68,6 +80,7 @@ interface WebhookEventData {
     "customer.created": CustomerCreatedWebhookData;
     "customer.updated": CustomerUpdatedWebhookData;
     "checkout.completed": CheckoutCompletedWebhookData;
+    "checkout.abandoned": CheckoutAbandonedWebhookData;
 }
 /** Legacy envelope payload. Runtime webhook deliveries do not include the event field in the body. */
 interface WebhookPayload<E extends WebhookEvent = WebhookEvent> {
@@ -98,6 +111,10 @@ interface RuntimeWebhookCustomer {
     id: string;
     [key: string]: unknown;
 }
+interface RuntimeWebhookCheckout {
+    id: string;
+    [key: string]: unknown;
+}
 interface RuntimeOrderWebhookPayload extends RuntimeWebhookBasePayload {
     order: RuntimeWebhookOrder;
     customer?: RuntimeWebhookCustomer;
@@ -113,6 +130,10 @@ interface RuntimeCheckoutCompletedWebhookPayload extends RuntimeWebhookBasePaylo
     customer: RuntimeWebhookCustomer;
     store: RuntimeWebhookStore;
 }
+interface RuntimeCheckoutAbandonedWebhookPayload extends RuntimeWebhookBasePayload {
+    checkout: RuntimeWebhookCheckout;
+    customer?: CheckoutAbandonedWebhookCustomer;
+}
 interface RuntimeWebhookEventData {
     "order.created": RuntimeOrderWebhookPayload;
     "order.updated": RuntimeOrderWebhookPayload;
@@ -124,6 +145,7 @@ interface RuntimeWebhookEventData {
     "customer.created": RuntimeCustomerWebhookPayload;
     "customer.updated": RuntimeCustomerWebhookPayload;
     "checkout.completed": RuntimeCheckoutCompletedWebhookPayload;
+    "checkout.abandoned": RuntimeCheckoutAbandonedWebhookPayload;
 }
 /** Runtime body delivered to subscriber endpoints. The event comes from X-Webhook-Event. */
 type RuntimeWebhookPayload<E extends WebhookEvent = WebhookEvent> = RuntimeWebhookEventData[E];

package/dist/{types-rA6kVlpV.d.cts → types-CPnSzOfX.d.cts}

@@ -12,6 +12,7 @@ declare const WEBHOOK_EVENTS: {
     readonly CUSTOMER_CREATED: "customer.created";
     readonly CUSTOMER_UPDATED: "customer.updated";
     readonly CHECKOUT_COMPLETED: "checkout.completed";
+    readonly CHECKOUT_ABANDONED: "checkout.abandoned";
 };
 /** All supported webhook event types */
 type WebhookEvent = PublicWebhookEvent;
@@ -56,6 +57,17 @@ interface CheckoutCompletedWebhookData {
     customer: RuntimeWebhookCustomer;
     store: RuntimeWebhookStore;
 }
+/** Contact captured on an abandoned draft. No `id` — the draft is pre-customer. */
+interface CheckoutAbandonedWebhookCustomer {
+    name: string | null;
+    email: string | null;
+    phone: string | null;
+}
+interface CheckoutAbandonedWebhookData {
+    checkout: RuntimeWebhookCheckout;
+    customer: CheckoutAbandonedWebhookCustomer;
+    store: RuntimeWebhookStore;
+}
 /** Map of webhook events to their payload data shapes */
 interface WebhookEventData {
     "order.created": OrderCreatedWebhookData;
@@ -68,6 +80,7 @@ interface WebhookEventData {
     "customer.created": CustomerCreatedWebhookData;
     "customer.updated": CustomerUpdatedWebhookData;
     "checkout.completed": CheckoutCompletedWebhookData;
+    "checkout.abandoned": CheckoutAbandonedWebhookData;
 }
 /** Legacy envelope payload. Runtime webhook deliveries do not include the event field in the body. */
 interface WebhookPayload<E extends WebhookEvent = WebhookEvent> {
@@ -98,6 +111,10 @@ interface RuntimeWebhookCustomer {
     id: string;
     [key: string]: unknown;
 }
+interface RuntimeWebhookCheckout {
+    id: string;
+    [key: string]: unknown;
+}
 interface RuntimeOrderWebhookPayload extends RuntimeWebhookBasePayload {
     order: RuntimeWebhookOrder;
     customer?: RuntimeWebhookCustomer;
@@ -113,6 +130,10 @@ interface RuntimeCheckoutCompletedWebhookPayload extends RuntimeWebhookBasePaylo
     customer: RuntimeWebhookCustomer;
     store: RuntimeWebhookStore;
 }
+interface RuntimeCheckoutAbandonedWebhookPayload extends RuntimeWebhookBasePayload {
+    checkout: RuntimeWebhookCheckout;
+    customer?: CheckoutAbandonedWebhookCustomer;
+}
 interface RuntimeWebhookEventData {
     "order.created": RuntimeOrderWebhookPayload;
     "order.updated": RuntimeOrderWebhookPayload;
@@ -124,6 +145,7 @@ interface RuntimeWebhookEventData {
     "customer.created": RuntimeCustomerWebhookPayload;
     "customer.updated": RuntimeCustomerWebhookPayload;
     "checkout.completed": RuntimeCheckoutCompletedWebhookPayload;
+    "checkout.abandoned": RuntimeCheckoutAbandonedWebhookPayload;
 }
 /** Runtime body delivered to subscriber endpoints. The event comes from X-Webhook-Event. */
 type RuntimeWebhookPayload<E extends WebhookEvent = WebhookEvent> = RuntimeWebhookEventData[E];

package/dist/{types-BU71_xQm.d.cts → types-CqyAhbXM.d.cts}

@@ -1,4 +1,4 @@
-import { W as WebhookEvent, R as RuntimeWebhookPayload } from './types-rA6kVlpV.cjs';
+import { W as WebhookEvent, R as RuntimeWebhookPayload } from './types-CPnSzOfX.cjs';
 
 /** Delivery metadata read from webhook headers. */
 interface WebhookHandlerContext<E extends WebhookEvent = WebhookEvent> {

package/dist/webhooks/index.cjs

@@ -94,6 +94,9 @@ function isRuntimeCustomerWebhookPayload(value) {
 function isRuntimeCheckoutCompletedWebhookPayload(value) {
   return hasValidBasePayloadFields(value) && hasStringId(value.order) && hasStringId(value.customer) && isRuntimeWebhookStore(value.store);
 }
+function isRuntimeCheckoutAbandonedWebhookPayload(value) {
+  return hasValidBasePayloadFields(value) && hasStringId(value.checkout) && isRuntimeWebhookStore(value.store);
+}
 function isRuntimeWebhookPayload(value, event) {
   if (!isRecord(value)) return false;
   switch (event) {
@@ -111,6 +114,8 @@ function isRuntimeWebhookPayload(value, event) {
       return isRuntimeCustomerWebhookPayload(value);
     case WEBHOOK_EVENTS.CHECKOUT_COMPLETED:
       return isRuntimeCheckoutCompletedWebhookPayload(value);
+    case WEBHOOK_EVENTS.CHECKOUT_ABANDONED:
+      return isRuntimeCheckoutAbandonedWebhookPayload(value);
     default:
       return false;
   }

package/dist/webhooks/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/webhooks/index.ts","../../src/webhooks/verify.ts","../../src/webhooks/types.ts"],"sourcesContent":["export { verifyWebhook } from \"./verify.js\";\nexport { WEBHOOK_EVENTS, isRuntimeWebhookPayload, isWebhookEvent } from \"./types.js\";\nexport type { VerifyWebhookParams } from \"./verify.js\";\nexport type {\n  WebhookEvent,\n  WebhookEventData,\n  WebhookPayload,\n  RuntimeWebhookBasePayload,\n  RuntimeWebhookEventData,\n  RuntimeWebhookPayload,\n  RuntimeWebhookStore,\n} from \"./types.js\";\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst DEFAULT_TOLERANCE_SECONDS = 300;\n\nexport interface VerifyWebhookParams {\n  /** Raw request body as a string (NOT parsed JSON) */\n  payload: string;\n  /** Value of the X-Webhook-Signature header */\n  signature: string;\n  /** Value of the X-Webhook-Timestamp header (Unix epoch in seconds) */\n  timestamp: string | number;\n  /** App's webhook secret (provided during app installation) */\n  secret: string;\n  /** Maximum timestamp drift allowed in seconds. Defaults to 300 seconds. */\n  toleranceSeconds?: number;\n  /** Current Unix epoch time in seconds. Intended for tests. */\n  currentTime?: number;\n}\n\n/**\n * Verify webhook signature using HMAC-SHA256 over `${timestamp}.${payload}`.\n * Uses timing-safe comparison to prevent timing attacks.\n */\nexport function verifyWebhook({\n  payload,\n  signature,\n  timestamp,\n  secret,\n  toleranceSeconds = DEFAULT_TOLERANCE_SECONDS,\n  currentTime = Math.floor(Date.now() / 1000),\n}: VerifyWebhookParams): boolean {\n  if (!payload || !signature || !secret || timestamp === \"\") return false;\n\n  const timestampString = String(timestamp);\n  const timestampValue =\n    typeof timestamp === \"number\" ? timestamp : Number(timestamp);\n\n  if (!Number.isInteger(timestampValue)) return false;\n  if (!Number.isFinite(toleranceSeconds) || toleranceSeconds < 0) return false;\n  if (!Number.isFinite(currentTime)) return false;\n\n  const ageSeconds = Math.abs(currentTime - timestampValue);\n  if (ageSeconds > toleranceSeconds) return false;\n\n  const expected = createHmac(\"sha256\", secret)\n    .update(`${timestampString}.${payload}`, \"utf8\")\n    .digest(\"hex\");\n\n  if (expected.length !== signature.length) return false;\n  if (!/^[a-f0-9]+$/i.test(signature)) return false;\n\n  try {\n    return timingSafeEqual(\n      Buffer.from(expected, \"hex\"),\n      Buffer.from(signature, \"hex\")\n    );\n  } catch {\n    return false;\n  }\n}\n","import {\n  PUBLIC_WEBHOOK_EVENTS,\n  isPublicWebhookEvent,\n  type PublicWebhookEvent,\n} from \"@whatalo/protocol/events\";\nimport type { Product, Order, Customer } from \"../client/types.js\";\n\nexport const WEBHOOK_EVENTS = PUBLIC_WEBHOOK_EVENTS;\n\n/** All supported webhook event types */\nexport type WebhookEvent = PublicWebhookEvent;\n\n/** Validate an event header against the public runtime webhook event set. */\nexport function isWebhookEvent(value: string): value is WebhookEvent {\n  return isPublicWebhookEvent(value);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction hasStringId(value: unknown): value is { id: string } {\n  return isRecord(value) && typeof value.id === \"string\";\n}\n\nfunction isOptionalString(\n  value: Record<string, unknown>,\n  key: string\n): boolean {\n  return value[key] === undefined || typeof value[key] === \"string\";\n}\n\nfunction isRuntimeWebhookStore(value: unknown): value is RuntimeWebhookStore {\n  return (\n    isRecord(value) &&\n    typeof value.id === \"string\" &&\n    typeof value.timezone === \"string\" &&\n    (value.name === undefined || typeof value.name === \"string\")\n  );\n}\n\nfunction hasValidBasePayloadFields(value: Record<string, unknown>): boolean {\n  if (!isOptionalString(value, \"event_id\")) return false;\n  if (!isOptionalString(value, \"occurred_at\")) return false;\n\n  return isRuntimeWebhookStore(value.store);\n}\n\nfunction isRuntimeOrderWebhookPayload(value: Record<string, unknown>): boolean {\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.order) &&\n    (value.customer === undefined || hasStringId(value.customer))\n  );\n}\n\nfunction isRuntimeProductWebhookPayload(value: Record<string, unknown>): boolean {\n  return hasValidBasePayloadFields(value) && hasStringId(value.product);\n}\n\nfunction isRuntimeCustomerWebhookPayload(value: Record<string, unknown>): boolean {\n  return hasValidBasePayloadFields(value) && hasStringId(value.customer);\n}\n\nfunction isRuntimeCheckoutCompletedWebhookPayload(\n  value: Record<string, unknown>\n): boolean {\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.order) &&\n    hasStringId(value.customer) &&\n    isRuntimeWebhookStore(value.store)\n  );\n}\n\nexport interface OrderCreatedWebhookData {\n  order: Order;\n}\n\nexport interface OrderUpdatedWebhookData {\n  order: Order;\n  changes: string[];\n}\n\nexport interface OrderCancelledWebhookData {\n  orderId: string;\n  reason?: string;\n}\n\nexport interface OrderCompletedWebhookData {\n  order: Order;\n}\n\nexport interface ProductCreatedWebhookData {\n  product: Product;\n}\n\nexport interface ProductUpdatedWebhookData {\n  product: Product;\n  changes: string[];\n}\n\nexport interface ProductDeletedWebhookProduct {\n  id: string;\n}\n\nexport interface ProductDeletedWebhookData {\n  product: ProductDeletedWebhookProduct;\n}\n\nexport interface CustomerCreatedWebhookData {\n  customer: Customer;\n}\n\nexport interface CustomerUpdatedWebhookData {\n  customer: Customer;\n  changes: string[];\n}\n\nexport interface CheckoutCompletedWebhookData {\n  order: RuntimeWebhookOrder;\n  customer: RuntimeWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\n/** Map of webhook events to their payload data shapes */\nexport interface WebhookEventData {\n  \"order.created\": OrderCreatedWebhookData;\n  \"order.updated\": OrderUpdatedWebhookData;\n  \"order.cancelled\": OrderCancelledWebhookData;\n  \"order.completed\": OrderCompletedWebhookData;\n  \"product.created\": ProductCreatedWebhookData;\n  \"product.updated\": ProductUpdatedWebhookData;\n  \"product.deleted\": ProductDeletedWebhookData;\n  \"customer.created\": CustomerCreatedWebhookData;\n  \"customer.updated\": CustomerUpdatedWebhookData;\n  \"checkout.completed\": CheckoutCompletedWebhookData;\n}\n\n/** Legacy envelope payload. Runtime webhook deliveries do not include the event field in the body. */\nexport interface WebhookPayload<E extends WebhookEvent = WebhookEvent> {\n  event: E;\n  timestamp: string;\n  storeId: string;\n  data: WebhookEventData[E];\n}\n\nexport interface RuntimeWebhookStore {\n  id: string;\n  name?: string;\n  timezone: string;\n}\n\nexport interface RuntimeWebhookBasePayload {\n  event_id?: string;\n  occurred_at?: string;\n  store: RuntimeWebhookStore;\n}\n\nexport interface RuntimeWebhookOrder {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookProduct {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookCustomer {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeOrderWebhookPayload extends RuntimeWebhookBasePayload {\n  order: RuntimeWebhookOrder;\n  customer?: RuntimeWebhookCustomer;\n}\n\nexport interface RuntimeProductWebhookPayload extends RuntimeWebhookBasePayload {\n  product: RuntimeWebhookProduct;\n}\n\nexport interface RuntimeCustomerWebhookPayload extends RuntimeWebhookBasePayload {\n  customer: RuntimeWebhookCustomer;\n}\n\nexport interface RuntimeCheckoutCompletedWebhookPayload\n  extends RuntimeWebhookBasePayload {\n  order: RuntimeWebhookOrder;\n  customer: RuntimeWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\nexport interface RuntimeWebhookEventData {\n  \"order.created\": RuntimeOrderWebhookPayload;\n  \"order.updated\": RuntimeOrderWebhookPayload;\n  \"order.cancelled\": RuntimeOrderWebhookPayload;\n  \"order.completed\": RuntimeOrderWebhookPayload;\n  \"product.created\": RuntimeProductWebhookPayload;\n  \"product.updated\": RuntimeProductWebhookPayload;\n  \"product.deleted\": RuntimeProductWebhookPayload;\n  \"customer.created\": RuntimeCustomerWebhookPayload;\n  \"customer.updated\": RuntimeCustomerWebhookPayload;\n  \"checkout.completed\": RuntimeCheckoutCompletedWebhookPayload;\n}\n\n/** Runtime body delivered to subscriber endpoints. The event comes from X-Webhook-Event. */\nexport type RuntimeWebhookPayload<E extends WebhookEvent = WebhookEvent> =\n  RuntimeWebhookEventData[E];\n\n/** Validate the minimum runtime payload shape before invoking typed handlers. */\nexport function isRuntimeWebhookPayload<E extends WebhookEvent>(\n  value: unknown,\n  event: E\n): value is RuntimeWebhookPayload<E> {\n  if (!isRecord(value)) return false;\n\n  switch (event) {\n    case WEBHOOK_EVENTS.ORDER_CREATED:\n    case WEBHOOK_EVENTS.ORDER_UPDATED:\n    case WEBHOOK_EVENTS.ORDER_CANCELLED:\n    case WEBHOOK_EVENTS.ORDER_COMPLETED:\n      return isRuntimeOrderWebhookPayload(value);\n    case WEBHOOK_EVENTS.PRODUCT_CREATED:\n    case WEBHOOK_EVENTS.PRODUCT_UPDATED:\n    case WEBHOOK_EVENTS.PRODUCT_DELETED:\n      return isRuntimeProductWebhookPayload(value);\n    case WEBHOOK_EVENTS.CUSTOMER_CREATED:\n    case WEBHOOK_EVENTS.CUSTOMER_UPDATED:\n      return isRuntimeCustomerWebhookPayload(value);\n    case WEBHOOK_EVENTS.CHECKOUT_COMPLETED:\n      return isRuntimeCheckoutCompletedWebhookPayload(value);\n    default:\n      return false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,yBAA4C;AAE5C,IAAM,4BAA4B;AAqB3B,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,EACnB,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC5C,GAAiC;AAC/B,MAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,cAAc,GAAI,QAAO;AAElE,QAAM,kBAAkB,OAAO,SAAS;AACxC,QAAM,iBACJ,OAAO,cAAc,WAAW,YAAY,OAAO,SAAS;AAE9D,MAAI,CAAC,OAAO,UAAU,cAAc,EAAG,QAAO;AAC9C,MAAI,CAAC,OAAO,SAAS,gBAAgB,KAAK,mBAAmB,EAAG,QAAO;AACvE,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAE1C,QAAM,aAAa,KAAK,IAAI,cAAc,cAAc;AACxD,MAAI,aAAa,iBAAkB,QAAO;AAE1C,QAAM,eAAW,+BAAW,UAAU,MAAM,EACzC,OAAO,GAAG,eAAe,IAAI,OAAO,IAAI,MAAM,EAC9C,OAAO,KAAK;AAEf,MAAI,SAAS,WAAW,UAAU,OAAQ,QAAO;AACjD,MAAI,CAAC,eAAe,KAAK,SAAS,EAAG,QAAO;AAE5C,MAAI;AACF,eAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,WAAW,KAAK;AAAA,IAC9B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC3DA,oBAIO;AAGA,IAAM,iBAAiB;AAMvB,SAAS,eAAe,OAAsC;AACnE,aAAO,oCAAqB,KAAK;AACnC;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAAyC;AAC5D,SAAO,SAAS,KAAK,KAAK,OAAO,MAAM,OAAO;AAChD;AAEA,SAAS,iBACP,OACA,KACS;AACT,SAAO,MAAM,GAAG,MAAM,UAAa,OAAO,MAAM,GAAG,MAAM;AAC3D;AAEA,SAAS,sBAAsB,OAA8C;AAC3E,SACE,SAAS,KAAK,KACd,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,aAAa,aACzB,MAAM,SAAS,UAAa,OAAO,MAAM,SAAS;AAEvD;AAEA,SAAS,0BAA0B,OAAyC;AAC1E,MAAI,CAAC,iBAAiB,OAAO,UAAU,EAAG,QAAO;AACjD,MAAI,CAAC,iBAAiB,OAAO,aAAa,EAAG,QAAO;AAEpD,SAAO,sBAAsB,MAAM,KAAK;AAC1C;AAEA,SAAS,6BAA6B,OAAyC;AAC7E,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,KAAK,MACtB,MAAM,aAAa,UAAa,YAAY,MAAM,QAAQ;AAE/D;AAEA,SAAS,+BAA+B,OAAyC;AAC/E,SAAO,0BAA0B,KAAK,KAAK,YAAY,MAAM,OAAO;AACtE;AAEA,SAAS,gCAAgC,OAAyC;AAChF,SAAO,0BAA0B,KAAK,KAAK,YAAY,MAAM,QAAQ;AACvE;AAEA,SAAS,yCACP,OACS;AACT,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,KAAK,KACvB,YAAY,MAAM,QAAQ,KAC1B,sBAAsB,MAAM,KAAK;AAErC;AA2IO,SAAS,wBACd,OACA,OACmC;AACnC,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,UAAQ,OAAO;AAAA,IACb,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,6BAA6B,KAAK;AAAA,IAC3C,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,+BAA+B,KAAK;AAAA,IAC7C,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,gCAAgC,KAAK;AAAA,IAC9C,KAAK,eAAe;AAClB,aAAO,yCAAyC,KAAK;AAAA,IACvD;AACE,aAAO;AAAA,EACX;AACF;","names":[]}
+{"version":3,"sources":["../../src/webhooks/index.ts","../../src/webhooks/verify.ts","../../src/webhooks/types.ts"],"sourcesContent":["export { verifyWebhook } from \"./verify.js\";\nexport { WEBHOOK_EVENTS, isRuntimeWebhookPayload, isWebhookEvent } from \"./types.js\";\nexport type { VerifyWebhookParams } from \"./verify.js\";\nexport type {\n  WebhookEvent,\n  WebhookEventData,\n  WebhookPayload,\n  RuntimeWebhookBasePayload,\n  RuntimeWebhookEventData,\n  RuntimeWebhookPayload,\n  RuntimeWebhookStore,\n} from \"./types.js\";\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst DEFAULT_TOLERANCE_SECONDS = 300;\n\nexport interface VerifyWebhookParams {\n  /** Raw request body as a string (NOT parsed JSON) */\n  payload: string;\n  /** Value of the X-Webhook-Signature header */\n  signature: string;\n  /** Value of the X-Webhook-Timestamp header (Unix epoch in seconds) */\n  timestamp: string | number;\n  /** App's webhook secret (provided during app installation) */\n  secret: string;\n  /** Maximum timestamp drift allowed in seconds. Defaults to 300 seconds. */\n  toleranceSeconds?: number;\n  /** Current Unix epoch time in seconds. Intended for tests. */\n  currentTime?: number;\n}\n\n/**\n * Verify webhook signature using HMAC-SHA256 over `${timestamp}.${payload}`.\n * Uses timing-safe comparison to prevent timing attacks.\n */\nexport function verifyWebhook({\n  payload,\n  signature,\n  timestamp,\n  secret,\n  toleranceSeconds = DEFAULT_TOLERANCE_SECONDS,\n  currentTime = Math.floor(Date.now() / 1000),\n}: VerifyWebhookParams): boolean {\n  if (!payload || !signature || !secret || timestamp === \"\") return false;\n\n  const timestampString = String(timestamp);\n  const timestampValue =\n    typeof timestamp === \"number\" ? timestamp : Number(timestamp);\n\n  if (!Number.isInteger(timestampValue)) return false;\n  if (!Number.isFinite(toleranceSeconds) || toleranceSeconds < 0) return false;\n  if (!Number.isFinite(currentTime)) return false;\n\n  const ageSeconds = Math.abs(currentTime - timestampValue);\n  if (ageSeconds > toleranceSeconds) return false;\n\n  const expected = createHmac(\"sha256\", secret)\n    .update(`${timestampString}.${payload}`, \"utf8\")\n    .digest(\"hex\");\n\n  if (expected.length !== signature.length) return false;\n  if (!/^[a-f0-9]+$/i.test(signature)) return false;\n\n  try {\n    return timingSafeEqual(\n      Buffer.from(expected, \"hex\"),\n      Buffer.from(signature, \"hex\")\n    );\n  } catch {\n    return false;\n  }\n}\n","import {\n  PUBLIC_WEBHOOK_EVENTS,\n  isPublicWebhookEvent,\n  type PublicWebhookEvent,\n} from \"@whatalo/protocol/events\";\nimport type { Product, Order, Customer } from \"../client/types.js\";\n\nexport const WEBHOOK_EVENTS = PUBLIC_WEBHOOK_EVENTS;\n\n/** All supported webhook event types */\nexport type WebhookEvent = PublicWebhookEvent;\n\n/** Validate an event header against the public runtime webhook event set. */\nexport function isWebhookEvent(value: string): value is WebhookEvent {\n  return isPublicWebhookEvent(value);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction hasStringId(value: unknown): value is { id: string } {\n  return isRecord(value) && typeof value.id === \"string\";\n}\n\nfunction isOptionalString(\n  value: Record<string, unknown>,\n  key: string\n): boolean {\n  return value[key] === undefined || typeof value[key] === \"string\";\n}\n\nfunction isRuntimeWebhookStore(value: unknown): value is RuntimeWebhookStore {\n  return (\n    isRecord(value) &&\n    typeof value.id === \"string\" &&\n    typeof value.timezone === \"string\" &&\n    (value.name === undefined || typeof value.name === \"string\")\n  );\n}\n\nfunction hasValidBasePayloadFields(value: Record<string, unknown>): boolean {\n  if (!isOptionalString(value, \"event_id\")) return false;\n  if (!isOptionalString(value, \"occurred_at\")) return false;\n\n  return isRuntimeWebhookStore(value.store);\n}\n\nfunction isRuntimeOrderWebhookPayload(value: Record<string, unknown>): boolean {\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.order) &&\n    (value.customer === undefined || hasStringId(value.customer))\n  );\n}\n\nfunction isRuntimeProductWebhookPayload(value: Record<string, unknown>): boolean {\n  return hasValidBasePayloadFields(value) && hasStringId(value.product);\n}\n\nfunction isRuntimeCustomerWebhookPayload(value: Record<string, unknown>): boolean {\n  return hasValidBasePayloadFields(value) && hasStringId(value.customer);\n}\n\nfunction isRuntimeCheckoutCompletedWebhookPayload(\n  value: Record<string, unknown>\n): boolean {\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.order) &&\n    hasStringId(value.customer) &&\n    isRuntimeWebhookStore(value.store)\n  );\n}\n\nfunction isRuntimeCheckoutAbandonedWebhookPayload(\n  value: Record<string, unknown>\n): boolean {\n  // An abandoned draft is pre-customer, so `customer` carries no `id` and is not required.\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.checkout) &&\n    isRuntimeWebhookStore(value.store)\n  );\n}\n\nexport interface OrderCreatedWebhookData {\n  order: Order;\n}\n\nexport interface OrderUpdatedWebhookData {\n  order: Order;\n  changes: string[];\n}\n\nexport interface OrderCancelledWebhookData {\n  orderId: string;\n  reason?: string;\n}\n\nexport interface OrderCompletedWebhookData {\n  order: Order;\n}\n\nexport interface ProductCreatedWebhookData {\n  product: Product;\n}\n\nexport interface ProductUpdatedWebhookData {\n  product: Product;\n  changes: string[];\n}\n\nexport interface ProductDeletedWebhookProduct {\n  id: string;\n}\n\nexport interface ProductDeletedWebhookData {\n  product: ProductDeletedWebhookProduct;\n}\n\nexport interface CustomerCreatedWebhookData {\n  customer: Customer;\n}\n\nexport interface CustomerUpdatedWebhookData {\n  customer: Customer;\n  changes: string[];\n}\n\nexport interface CheckoutCompletedWebhookData {\n  order: RuntimeWebhookOrder;\n  customer: RuntimeWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\n/** Contact captured on an abandoned draft. No `id` — the draft is pre-customer. */\nexport interface CheckoutAbandonedWebhookCustomer {\n  name: string | null;\n  email: string | null;\n  phone: string | null;\n}\n\nexport interface CheckoutAbandonedWebhookData {\n  checkout: RuntimeWebhookCheckout;\n  customer: CheckoutAbandonedWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\n/** Map of webhook events to their payload data shapes */\nexport interface WebhookEventData {\n  \"order.created\": OrderCreatedWebhookData;\n  \"order.updated\": OrderUpdatedWebhookData;\n  \"order.cancelled\": OrderCancelledWebhookData;\n  \"order.completed\": OrderCompletedWebhookData;\n  \"product.created\": ProductCreatedWebhookData;\n  \"product.updated\": ProductUpdatedWebhookData;\n  \"product.deleted\": ProductDeletedWebhookData;\n  \"customer.created\": CustomerCreatedWebhookData;\n  \"customer.updated\": CustomerUpdatedWebhookData;\n  \"checkout.completed\": CheckoutCompletedWebhookData;\n  \"checkout.abandoned\": CheckoutAbandonedWebhookData;\n}\n\n/** Legacy envelope payload. Runtime webhook deliveries do not include the event field in the body. */\nexport interface WebhookPayload<E extends WebhookEvent = WebhookEvent> {\n  event: E;\n  timestamp: string;\n  storeId: string;\n  data: WebhookEventData[E];\n}\n\nexport interface RuntimeWebhookStore {\n  id: string;\n  name?: string;\n  timezone: string;\n}\n\nexport interface RuntimeWebhookBasePayload {\n  event_id?: string;\n  occurred_at?: string;\n  store: RuntimeWebhookStore;\n}\n\nexport interface RuntimeWebhookOrder {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookProduct {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookCustomer {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookCheckout {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeOrderWebhookPayload extends RuntimeWebhookBasePayload {\n  order: RuntimeWebhookOrder;\n  customer?: RuntimeWebhookCustomer;\n}\n\nexport interface RuntimeProductWebhookPayload extends RuntimeWebhookBasePayload {\n  product: RuntimeWebhookProduct;\n}\n\nexport interface RuntimeCustomerWebhookPayload extends RuntimeWebhookBasePayload {\n  customer: RuntimeWebhookCustomer;\n}\n\nexport interface RuntimeCheckoutCompletedWebhookPayload\n  extends RuntimeWebhookBasePayload {\n  order: RuntimeWebhookOrder;\n  customer: RuntimeWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\nexport interface RuntimeCheckoutAbandonedWebhookPayload\n  extends RuntimeWebhookBasePayload {\n  checkout: RuntimeWebhookCheckout;\n  // Pre-customer draft: contact fields only, no customer id.\n  customer?: CheckoutAbandonedWebhookCustomer;\n}\n\nexport interface RuntimeWebhookEventData {\n  \"order.created\": RuntimeOrderWebhookPayload;\n  \"order.updated\": RuntimeOrderWebhookPayload;\n  \"order.cancelled\": RuntimeOrderWebhookPayload;\n  \"order.completed\": RuntimeOrderWebhookPayload;\n  \"product.created\": RuntimeProductWebhookPayload;\n  \"product.updated\": RuntimeProductWebhookPayload;\n  \"product.deleted\": RuntimeProductWebhookPayload;\n  \"customer.created\": RuntimeCustomerWebhookPayload;\n  \"customer.updated\": RuntimeCustomerWebhookPayload;\n  \"checkout.completed\": RuntimeCheckoutCompletedWebhookPayload;\n  \"checkout.abandoned\": RuntimeCheckoutAbandonedWebhookPayload;\n}\n\n/** Runtime body delivered to subscriber endpoints. The event comes from X-Webhook-Event. */\nexport type RuntimeWebhookPayload<E extends WebhookEvent = WebhookEvent> =\n  RuntimeWebhookEventData[E];\n\n/** Validate the minimum runtime payload shape before invoking typed handlers. */\nexport function isRuntimeWebhookPayload<E extends WebhookEvent>(\n  value: unknown,\n  event: E\n): value is RuntimeWebhookPayload<E> {\n  if (!isRecord(value)) return false;\n\n  switch (event) {\n    case WEBHOOK_EVENTS.ORDER_CREATED:\n    case WEBHOOK_EVENTS.ORDER_UPDATED:\n    case WEBHOOK_EVENTS.ORDER_CANCELLED:\n    case WEBHOOK_EVENTS.ORDER_COMPLETED:\n      return isRuntimeOrderWebhookPayload(value);\n    case WEBHOOK_EVENTS.PRODUCT_CREATED:\n    case WEBHOOK_EVENTS.PRODUCT_UPDATED:\n    case WEBHOOK_EVENTS.PRODUCT_DELETED:\n      return isRuntimeProductWebhookPayload(value);\n    case WEBHOOK_EVENTS.CUSTOMER_CREATED:\n    case WEBHOOK_EVENTS.CUSTOMER_UPDATED:\n      return isRuntimeCustomerWebhookPayload(value);\n    case WEBHOOK_EVENTS.CHECKOUT_COMPLETED:\n      return isRuntimeCheckoutCompletedWebhookPayload(value);\n    case WEBHOOK_EVENTS.CHECKOUT_ABANDONED:\n      return isRuntimeCheckoutAbandonedWebhookPayload(value);\n    default:\n      return false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,yBAA4C;AAE5C,IAAM,4BAA4B;AAqB3B,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,EACnB,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC5C,GAAiC;AAC/B,MAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,cAAc,GAAI,QAAO;AAElE,QAAM,kBAAkB,OAAO,SAAS;AACxC,QAAM,iBACJ,OAAO,cAAc,WAAW,YAAY,OAAO,SAAS;AAE9D,MAAI,CAAC,OAAO,UAAU,cAAc,EAAG,QAAO;AAC9C,MAAI,CAAC,OAAO,SAAS,gBAAgB,KAAK,mBAAmB,EAAG,QAAO;AACvE,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAE1C,QAAM,aAAa,KAAK,IAAI,cAAc,cAAc;AACxD,MAAI,aAAa,iBAAkB,QAAO;AAE1C,QAAM,eAAW,+BAAW,UAAU,MAAM,EACzC,OAAO,GAAG,eAAe,IAAI,OAAO,IAAI,MAAM,EAC9C,OAAO,KAAK;AAEf,MAAI,SAAS,WAAW,UAAU,OAAQ,QAAO;AACjD,MAAI,CAAC,eAAe,KAAK,SAAS,EAAG,QAAO;AAE5C,MAAI;AACF,eAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,WAAW,KAAK;AAAA,IAC9B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC3DA,oBAIO;AAGA,IAAM,iBAAiB;AAMvB,SAAS,eAAe,OAAsC;AACnE,aAAO,oCAAqB,KAAK;AACnC;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAAyC;AAC5D,SAAO,SAAS,KAAK,KAAK,OAAO,MAAM,OAAO;AAChD;AAEA,SAAS,iBACP,OACA,KACS;AACT,SAAO,MAAM,GAAG,MAAM,UAAa,OAAO,MAAM,GAAG,MAAM;AAC3D;AAEA,SAAS,sBAAsB,OAA8C;AAC3E,SACE,SAAS,KAAK,KACd,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,aAAa,aACzB,MAAM,SAAS,UAAa,OAAO,MAAM,SAAS;AAEvD;AAEA,SAAS,0BAA0B,OAAyC;AAC1E,MAAI,CAAC,iBAAiB,OAAO,UAAU,EAAG,QAAO;AACjD,MAAI,CAAC,iBAAiB,OAAO,aAAa,EAAG,QAAO;AAEpD,SAAO,sBAAsB,MAAM,KAAK;AAC1C;AAEA,SAAS,6BAA6B,OAAyC;AAC7E,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,KAAK,MACtB,MAAM,aAAa,UAAa,YAAY,MAAM,QAAQ;AAE/D;AAEA,SAAS,+BAA+B,OAAyC;AAC/E,SAAO,0BAA0B,KAAK,KAAK,YAAY,MAAM,OAAO;AACtE;AAEA,SAAS,gCAAgC,OAAyC;AAChF,SAAO,0BAA0B,KAAK,KAAK,YAAY,MAAM,QAAQ;AACvE;AAEA,SAAS,yCACP,OACS;AACT,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,KAAK,KACvB,YAAY,MAAM,QAAQ,KAC1B,sBAAsB,MAAM,KAAK;AAErC;AAEA,SAAS,yCACP,OACS;AAET,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,QAAQ,KAC1B,sBAAsB,MAAM,KAAK;AAErC;AAsKO,SAAS,wBACd,OACA,OACmC;AACnC,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,UAAQ,OAAO;AAAA,IACb,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,6BAA6B,KAAK;AAAA,IAC3C,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,+BAA+B,KAAK;AAAA,IAC7C,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,gCAAgC,KAAK;AAAA,IAC9C,KAAK,eAAe;AAClB,aAAO,yCAAyC,KAAK;AAAA,IACvD,KAAK,eAAe;AAClB,aAAO,yCAAyC,KAAK;AAAA,IACvD;AACE,aAAO;AAAA,EACX;AACF;","names":[]}

package/dist/webhooks/index.d.cts

@@ -1,4 +1,4 @@
-export { e as RuntimeWebhookBasePayload, f as RuntimeWebhookEventData, R as RuntimeWebhookPayload, g as RuntimeWebhookStore, a as WEBHOOK_EVENTS, W as WebhookEvent, c as WebhookEventData, d as WebhookPayload, i as isRuntimeWebhookPayload, b as isWebhookEvent } from '../types-rA6kVlpV.cjs';
+export { e as RuntimeWebhookBasePayload, f as RuntimeWebhookEventData, R as RuntimeWebhookPayload, g as RuntimeWebhookStore, a as WEBHOOK_EVENTS, W as WebhookEvent, c as WebhookEventData, d as WebhookPayload, i as isRuntimeWebhookPayload, b as isWebhookEvent } from '../types-CPnSzOfX.cjs';
 import '@whatalo/protocol/events';
 import '../types-B8BAV362.cjs';
 

package/dist/webhooks/index.d.ts

@@ -1,4 +1,4 @@
-export { e as RuntimeWebhookBasePayload, f as RuntimeWebhookEventData, R as RuntimeWebhookPayload, g as RuntimeWebhookStore, a as WEBHOOK_EVENTS, W as WebhookEvent, c as WebhookEventData, d as WebhookPayload, i as isRuntimeWebhookPayload, b as isWebhookEvent } from '../types-Bo9GbqrM.js';
+export { e as RuntimeWebhookBasePayload, f as RuntimeWebhookEventData, R as RuntimeWebhookPayload, g as RuntimeWebhookStore, a as WEBHOOK_EVENTS, W as WebhookEvent, c as WebhookEventData, d as WebhookPayload, i as isRuntimeWebhookPayload, b as isWebhookEvent } from '../types-CDKGAQ3o.js';
 import '@whatalo/protocol/events';
 import '../types-B8BAV362.js';
 

package/dist/webhooks/index.mjs

@@ -68,6 +68,9 @@ function isRuntimeCustomerWebhookPayload(value) {
 function isRuntimeCheckoutCompletedWebhookPayload(value) {
   return hasValidBasePayloadFields(value) && hasStringId(value.order) && hasStringId(value.customer) && isRuntimeWebhookStore(value.store);
 }
+function isRuntimeCheckoutAbandonedWebhookPayload(value) {
+  return hasValidBasePayloadFields(value) && hasStringId(value.checkout) && isRuntimeWebhookStore(value.store);
+}
 function isRuntimeWebhookPayload(value, event) {
   if (!isRecord(value)) return false;
   switch (event) {
@@ -85,6 +88,8 @@ function isRuntimeWebhookPayload(value, event) {
       return isRuntimeCustomerWebhookPayload(value);
     case WEBHOOK_EVENTS.CHECKOUT_COMPLETED:
       return isRuntimeCheckoutCompletedWebhookPayload(value);
+    case WEBHOOK_EVENTS.CHECKOUT_ABANDONED:
+      return isRuntimeCheckoutAbandonedWebhookPayload(value);
     default:
       return false;
   }

package/dist/webhooks/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/webhooks/verify.ts","../../src/webhooks/types.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst DEFAULT_TOLERANCE_SECONDS = 300;\n\nexport interface VerifyWebhookParams {\n  /** Raw request body as a string (NOT parsed JSON) */\n  payload: string;\n  /** Value of the X-Webhook-Signature header */\n  signature: string;\n  /** Value of the X-Webhook-Timestamp header (Unix epoch in seconds) */\n  timestamp: string | number;\n  /** App's webhook secret (provided during app installation) */\n  secret: string;\n  /** Maximum timestamp drift allowed in seconds. Defaults to 300 seconds. */\n  toleranceSeconds?: number;\n  /** Current Unix epoch time in seconds. Intended for tests. */\n  currentTime?: number;\n}\n\n/**\n * Verify webhook signature using HMAC-SHA256 over `${timestamp}.${payload}`.\n * Uses timing-safe comparison to prevent timing attacks.\n */\nexport function verifyWebhook({\n  payload,\n  signature,\n  timestamp,\n  secret,\n  toleranceSeconds = DEFAULT_TOLERANCE_SECONDS,\n  currentTime = Math.floor(Date.now() / 1000),\n}: VerifyWebhookParams): boolean {\n  if (!payload || !signature || !secret || timestamp === \"\") return false;\n\n  const timestampString = String(timestamp);\n  const timestampValue =\n    typeof timestamp === \"number\" ? timestamp : Number(timestamp);\n\n  if (!Number.isInteger(timestampValue)) return false;\n  if (!Number.isFinite(toleranceSeconds) || toleranceSeconds < 0) return false;\n  if (!Number.isFinite(currentTime)) return false;\n\n  const ageSeconds = Math.abs(currentTime - timestampValue);\n  if (ageSeconds > toleranceSeconds) return false;\n\n  const expected = createHmac(\"sha256\", secret)\n    .update(`${timestampString}.${payload}`, \"utf8\")\n    .digest(\"hex\");\n\n  if (expected.length !== signature.length) return false;\n  if (!/^[a-f0-9]+$/i.test(signature)) return false;\n\n  try {\n    return timingSafeEqual(\n      Buffer.from(expected, \"hex\"),\n      Buffer.from(signature, \"hex\")\n    );\n  } catch {\n    return false;\n  }\n}\n","import {\n  PUBLIC_WEBHOOK_EVENTS,\n  isPublicWebhookEvent,\n  type PublicWebhookEvent,\n} from \"@whatalo/protocol/events\";\nimport type { Product, Order, Customer } from \"../client/types.js\";\n\nexport const WEBHOOK_EVENTS = PUBLIC_WEBHOOK_EVENTS;\n\n/** All supported webhook event types */\nexport type WebhookEvent = PublicWebhookEvent;\n\n/** Validate an event header against the public runtime webhook event set. */\nexport function isWebhookEvent(value: string): value is WebhookEvent {\n  return isPublicWebhookEvent(value);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction hasStringId(value: unknown): value is { id: string } {\n  return isRecord(value) && typeof value.id === \"string\";\n}\n\nfunction isOptionalString(\n  value: Record<string, unknown>,\n  key: string\n): boolean {\n  return value[key] === undefined || typeof value[key] === \"string\";\n}\n\nfunction isRuntimeWebhookStore(value: unknown): value is RuntimeWebhookStore {\n  return (\n    isRecord(value) &&\n    typeof value.id === \"string\" &&\n    typeof value.timezone === \"string\" &&\n    (value.name === undefined || typeof value.name === \"string\")\n  );\n}\n\nfunction hasValidBasePayloadFields(value: Record<string, unknown>): boolean {\n  if (!isOptionalString(value, \"event_id\")) return false;\n  if (!isOptionalString(value, \"occurred_at\")) return false;\n\n  return isRuntimeWebhookStore(value.store);\n}\n\nfunction isRuntimeOrderWebhookPayload(value: Record<string, unknown>): boolean {\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.order) &&\n    (value.customer === undefined || hasStringId(value.customer))\n  );\n}\n\nfunction isRuntimeProductWebhookPayload(value: Record<string, unknown>): boolean {\n  return hasValidBasePayloadFields(value) && hasStringId(value.product);\n}\n\nfunction isRuntimeCustomerWebhookPayload(value: Record<string, unknown>): boolean {\n  return hasValidBasePayloadFields(value) && hasStringId(value.customer);\n}\n\nfunction isRuntimeCheckoutCompletedWebhookPayload(\n  value: Record<string, unknown>\n): boolean {\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.order) &&\n    hasStringId(value.customer) &&\n    isRuntimeWebhookStore(value.store)\n  );\n}\n\nexport interface OrderCreatedWebhookData {\n  order: Order;\n}\n\nexport interface OrderUpdatedWebhookData {\n  order: Order;\n  changes: string[];\n}\n\nexport interface OrderCancelledWebhookData {\n  orderId: string;\n  reason?: string;\n}\n\nexport interface OrderCompletedWebhookData {\n  order: Order;\n}\n\nexport interface ProductCreatedWebhookData {\n  product: Product;\n}\n\nexport interface ProductUpdatedWebhookData {\n  product: Product;\n  changes: string[];\n}\n\nexport interface ProductDeletedWebhookProduct {\n  id: string;\n}\n\nexport interface ProductDeletedWebhookData {\n  product: ProductDeletedWebhookProduct;\n}\n\nexport interface CustomerCreatedWebhookData {\n  customer: Customer;\n}\n\nexport interface CustomerUpdatedWebhookData {\n  customer: Customer;\n  changes: string[];\n}\n\nexport interface CheckoutCompletedWebhookData {\n  order: RuntimeWebhookOrder;\n  customer: RuntimeWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\n/** Map of webhook events to their payload data shapes */\nexport interface WebhookEventData {\n  \"order.created\": OrderCreatedWebhookData;\n  \"order.updated\": OrderUpdatedWebhookData;\n  \"order.cancelled\": OrderCancelledWebhookData;\n  \"order.completed\": OrderCompletedWebhookData;\n  \"product.created\": ProductCreatedWebhookData;\n  \"product.updated\": ProductUpdatedWebhookData;\n  \"product.deleted\": ProductDeletedWebhookData;\n  \"customer.created\": CustomerCreatedWebhookData;\n  \"customer.updated\": CustomerUpdatedWebhookData;\n  \"checkout.completed\": CheckoutCompletedWebhookData;\n}\n\n/** Legacy envelope payload. Runtime webhook deliveries do not include the event field in the body. */\nexport interface WebhookPayload<E extends WebhookEvent = WebhookEvent> {\n  event: E;\n  timestamp: string;\n  storeId: string;\n  data: WebhookEventData[E];\n}\n\nexport interface RuntimeWebhookStore {\n  id: string;\n  name?: string;\n  timezone: string;\n}\n\nexport interface RuntimeWebhookBasePayload {\n  event_id?: string;\n  occurred_at?: string;\n  store: RuntimeWebhookStore;\n}\n\nexport interface RuntimeWebhookOrder {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookProduct {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookCustomer {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeOrderWebhookPayload extends RuntimeWebhookBasePayload {\n  order: RuntimeWebhookOrder;\n  customer?: RuntimeWebhookCustomer;\n}\n\nexport interface RuntimeProductWebhookPayload extends RuntimeWebhookBasePayload {\n  product: RuntimeWebhookProduct;\n}\n\nexport interface RuntimeCustomerWebhookPayload extends RuntimeWebhookBasePayload {\n  customer: RuntimeWebhookCustomer;\n}\n\nexport interface RuntimeCheckoutCompletedWebhookPayload\n  extends RuntimeWebhookBasePayload {\n  order: RuntimeWebhookOrder;\n  customer: RuntimeWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\nexport interface RuntimeWebhookEventData {\n  \"order.created\": RuntimeOrderWebhookPayload;\n  \"order.updated\": RuntimeOrderWebhookPayload;\n  \"order.cancelled\": RuntimeOrderWebhookPayload;\n  \"order.completed\": RuntimeOrderWebhookPayload;\n  \"product.created\": RuntimeProductWebhookPayload;\n  \"product.updated\": RuntimeProductWebhookPayload;\n  \"product.deleted\": RuntimeProductWebhookPayload;\n  \"customer.created\": RuntimeCustomerWebhookPayload;\n  \"customer.updated\": RuntimeCustomerWebhookPayload;\n  \"checkout.completed\": RuntimeCheckoutCompletedWebhookPayload;\n}\n\n/** Runtime body delivered to subscriber endpoints. The event comes from X-Webhook-Event. */\nexport type RuntimeWebhookPayload<E extends WebhookEvent = WebhookEvent> =\n  RuntimeWebhookEventData[E];\n\n/** Validate the minimum runtime payload shape before invoking typed handlers. */\nexport function isRuntimeWebhookPayload<E extends WebhookEvent>(\n  value: unknown,\n  event: E\n): value is RuntimeWebhookPayload<E> {\n  if (!isRecord(value)) return false;\n\n  switch (event) {\n    case WEBHOOK_EVENTS.ORDER_CREATED:\n    case WEBHOOK_EVENTS.ORDER_UPDATED:\n    case WEBHOOK_EVENTS.ORDER_CANCELLED:\n    case WEBHOOK_EVENTS.ORDER_COMPLETED:\n      return isRuntimeOrderWebhookPayload(value);\n    case WEBHOOK_EVENTS.PRODUCT_CREATED:\n    case WEBHOOK_EVENTS.PRODUCT_UPDATED:\n    case WEBHOOK_EVENTS.PRODUCT_DELETED:\n      return isRuntimeProductWebhookPayload(value);\n    case WEBHOOK_EVENTS.CUSTOMER_CREATED:\n    case WEBHOOK_EVENTS.CUSTOMER_UPDATED:\n      return isRuntimeCustomerWebhookPayload(value);\n    case WEBHOOK_EVENTS.CHECKOUT_COMPLETED:\n      return isRuntimeCheckoutCompletedWebhookPayload(value);\n    default:\n      return false;\n  }\n}\n"],"mappings":";AAAA,SAAS,YAAY,uBAAuB;AAE5C,IAAM,4BAA4B;AAqB3B,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,EACnB,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC5C,GAAiC;AAC/B,MAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,cAAc,GAAI,QAAO;AAElE,QAAM,kBAAkB,OAAO,SAAS;AACxC,QAAM,iBACJ,OAAO,cAAc,WAAW,YAAY,OAAO,SAAS;AAE9D,MAAI,CAAC,OAAO,UAAU,cAAc,EAAG,QAAO;AAC9C,MAAI,CAAC,OAAO,SAAS,gBAAgB,KAAK,mBAAmB,EAAG,QAAO;AACvE,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAE1C,QAAM,aAAa,KAAK,IAAI,cAAc,cAAc;AACxD,MAAI,aAAa,iBAAkB,QAAO;AAE1C,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,eAAe,IAAI,OAAO,IAAI,MAAM,EAC9C,OAAO,KAAK;AAEf,MAAI,SAAS,WAAW,UAAU,OAAQ,QAAO;AACjD,MAAI,CAAC,eAAe,KAAK,SAAS,EAAG,QAAO;AAE5C,MAAI;AACF,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,WAAW,KAAK;AAAA,IAC9B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC3DA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAGA,IAAM,iBAAiB;AAMvB,SAAS,eAAe,OAAsC;AACnE,SAAO,qBAAqB,KAAK;AACnC;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAAyC;AAC5D,SAAO,SAAS,KAAK,KAAK,OAAO,MAAM,OAAO;AAChD;AAEA,SAAS,iBACP,OACA,KACS;AACT,SAAO,MAAM,GAAG,MAAM,UAAa,OAAO,MAAM,GAAG,MAAM;AAC3D;AAEA,SAAS,sBAAsB,OAA8C;AAC3E,SACE,SAAS,KAAK,KACd,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,aAAa,aACzB,MAAM,SAAS,UAAa,OAAO,MAAM,SAAS;AAEvD;AAEA,SAAS,0BAA0B,OAAyC;AAC1E,MAAI,CAAC,iBAAiB,OAAO,UAAU,EAAG,QAAO;AACjD,MAAI,CAAC,iBAAiB,OAAO,aAAa,EAAG,QAAO;AAEpD,SAAO,sBAAsB,MAAM,KAAK;AAC1C;AAEA,SAAS,6BAA6B,OAAyC;AAC7E,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,KAAK,MACtB,MAAM,aAAa,UAAa,YAAY,MAAM,QAAQ;AAE/D;AAEA,SAAS,+BAA+B,OAAyC;AAC/E,SAAO,0BAA0B,KAAK,KAAK,YAAY,MAAM,OAAO;AACtE;AAEA,SAAS,gCAAgC,OAAyC;AAChF,SAAO,0BAA0B,KAAK,KAAK,YAAY,MAAM,QAAQ;AACvE;AAEA,SAAS,yCACP,OACS;AACT,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,KAAK,KACvB,YAAY,MAAM,QAAQ,KAC1B,sBAAsB,MAAM,KAAK;AAErC;AA2IO,SAAS,wBACd,OACA,OACmC;AACnC,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,UAAQ,OAAO;AAAA,IACb,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,6BAA6B,KAAK;AAAA,IAC3C,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,+BAA+B,KAAK;AAAA,IAC7C,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,gCAAgC,KAAK;AAAA,IAC9C,KAAK,eAAe;AAClB,aAAO,yCAAyC,KAAK;AAAA,IACvD;AACE,aAAO;AAAA,EACX;AACF;","names":[]}
+{"version":3,"sources":["../../src/webhooks/verify.ts","../../src/webhooks/types.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst DEFAULT_TOLERANCE_SECONDS = 300;\n\nexport interface VerifyWebhookParams {\n  /** Raw request body as a string (NOT parsed JSON) */\n  payload: string;\n  /** Value of the X-Webhook-Signature header */\n  signature: string;\n  /** Value of the X-Webhook-Timestamp header (Unix epoch in seconds) */\n  timestamp: string | number;\n  /** App's webhook secret (provided during app installation) */\n  secret: string;\n  /** Maximum timestamp drift allowed in seconds. Defaults to 300 seconds. */\n  toleranceSeconds?: number;\n  /** Current Unix epoch time in seconds. Intended for tests. */\n  currentTime?: number;\n}\n\n/**\n * Verify webhook signature using HMAC-SHA256 over `${timestamp}.${payload}`.\n * Uses timing-safe comparison to prevent timing attacks.\n */\nexport function verifyWebhook({\n  payload,\n  signature,\n  timestamp,\n  secret,\n  toleranceSeconds = DEFAULT_TOLERANCE_SECONDS,\n  currentTime = Math.floor(Date.now() / 1000),\n}: VerifyWebhookParams): boolean {\n  if (!payload || !signature || !secret || timestamp === \"\") return false;\n\n  const timestampString = String(timestamp);\n  const timestampValue =\n    typeof timestamp === \"number\" ? timestamp : Number(timestamp);\n\n  if (!Number.isInteger(timestampValue)) return false;\n  if (!Number.isFinite(toleranceSeconds) || toleranceSeconds < 0) return false;\n  if (!Number.isFinite(currentTime)) return false;\n\n  const ageSeconds = Math.abs(currentTime - timestampValue);\n  if (ageSeconds > toleranceSeconds) return false;\n\n  const expected = createHmac(\"sha256\", secret)\n    .update(`${timestampString}.${payload}`, \"utf8\")\n    .digest(\"hex\");\n\n  if (expected.length !== signature.length) return false;\n  if (!/^[a-f0-9]+$/i.test(signature)) return false;\n\n  try {\n    return timingSafeEqual(\n      Buffer.from(expected, \"hex\"),\n      Buffer.from(signature, \"hex\")\n    );\n  } catch {\n    return false;\n  }\n}\n","import {\n  PUBLIC_WEBHOOK_EVENTS,\n  isPublicWebhookEvent,\n  type PublicWebhookEvent,\n} from \"@whatalo/protocol/events\";\nimport type { Product, Order, Customer } from \"../client/types.js\";\n\nexport const WEBHOOK_EVENTS = PUBLIC_WEBHOOK_EVENTS;\n\n/** All supported webhook event types */\nexport type WebhookEvent = PublicWebhookEvent;\n\n/** Validate an event header against the public runtime webhook event set. */\nexport function isWebhookEvent(value: string): value is WebhookEvent {\n  return isPublicWebhookEvent(value);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction hasStringId(value: unknown): value is { id: string } {\n  return isRecord(value) && typeof value.id === \"string\";\n}\n\nfunction isOptionalString(\n  value: Record<string, unknown>,\n  key: string\n): boolean {\n  return value[key] === undefined || typeof value[key] === \"string\";\n}\n\nfunction isRuntimeWebhookStore(value: unknown): value is RuntimeWebhookStore {\n  return (\n    isRecord(value) &&\n    typeof value.id === \"string\" &&\n    typeof value.timezone === \"string\" &&\n    (value.name === undefined || typeof value.name === \"string\")\n  );\n}\n\nfunction hasValidBasePayloadFields(value: Record<string, unknown>): boolean {\n  if (!isOptionalString(value, \"event_id\")) return false;\n  if (!isOptionalString(value, \"occurred_at\")) return false;\n\n  return isRuntimeWebhookStore(value.store);\n}\n\nfunction isRuntimeOrderWebhookPayload(value: Record<string, unknown>): boolean {\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.order) &&\n    (value.customer === undefined || hasStringId(value.customer))\n  );\n}\n\nfunction isRuntimeProductWebhookPayload(value: Record<string, unknown>): boolean {\n  return hasValidBasePayloadFields(value) && hasStringId(value.product);\n}\n\nfunction isRuntimeCustomerWebhookPayload(value: Record<string, unknown>): boolean {\n  return hasValidBasePayloadFields(value) && hasStringId(value.customer);\n}\n\nfunction isRuntimeCheckoutCompletedWebhookPayload(\n  value: Record<string, unknown>\n): boolean {\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.order) &&\n    hasStringId(value.customer) &&\n    isRuntimeWebhookStore(value.store)\n  );\n}\n\nfunction isRuntimeCheckoutAbandonedWebhookPayload(\n  value: Record<string, unknown>\n): boolean {\n  // An abandoned draft is pre-customer, so `customer` carries no `id` and is not required.\n  return (\n    hasValidBasePayloadFields(value) &&\n    hasStringId(value.checkout) &&\n    isRuntimeWebhookStore(value.store)\n  );\n}\n\nexport interface OrderCreatedWebhookData {\n  order: Order;\n}\n\nexport interface OrderUpdatedWebhookData {\n  order: Order;\n  changes: string[];\n}\n\nexport interface OrderCancelledWebhookData {\n  orderId: string;\n  reason?: string;\n}\n\nexport interface OrderCompletedWebhookData {\n  order: Order;\n}\n\nexport interface ProductCreatedWebhookData {\n  product: Product;\n}\n\nexport interface ProductUpdatedWebhookData {\n  product: Product;\n  changes: string[];\n}\n\nexport interface ProductDeletedWebhookProduct {\n  id: string;\n}\n\nexport interface ProductDeletedWebhookData {\n  product: ProductDeletedWebhookProduct;\n}\n\nexport interface CustomerCreatedWebhookData {\n  customer: Customer;\n}\n\nexport interface CustomerUpdatedWebhookData {\n  customer: Customer;\n  changes: string[];\n}\n\nexport interface CheckoutCompletedWebhookData {\n  order: RuntimeWebhookOrder;\n  customer: RuntimeWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\n/** Contact captured on an abandoned draft. No `id` — the draft is pre-customer. */\nexport interface CheckoutAbandonedWebhookCustomer {\n  name: string | null;\n  email: string | null;\n  phone: string | null;\n}\n\nexport interface CheckoutAbandonedWebhookData {\n  checkout: RuntimeWebhookCheckout;\n  customer: CheckoutAbandonedWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\n/** Map of webhook events to their payload data shapes */\nexport interface WebhookEventData {\n  \"order.created\": OrderCreatedWebhookData;\n  \"order.updated\": OrderUpdatedWebhookData;\n  \"order.cancelled\": OrderCancelledWebhookData;\n  \"order.completed\": OrderCompletedWebhookData;\n  \"product.created\": ProductCreatedWebhookData;\n  \"product.updated\": ProductUpdatedWebhookData;\n  \"product.deleted\": ProductDeletedWebhookData;\n  \"customer.created\": CustomerCreatedWebhookData;\n  \"customer.updated\": CustomerUpdatedWebhookData;\n  \"checkout.completed\": CheckoutCompletedWebhookData;\n  \"checkout.abandoned\": CheckoutAbandonedWebhookData;\n}\n\n/** Legacy envelope payload. Runtime webhook deliveries do not include the event field in the body. */\nexport interface WebhookPayload<E extends WebhookEvent = WebhookEvent> {\n  event: E;\n  timestamp: string;\n  storeId: string;\n  data: WebhookEventData[E];\n}\n\nexport interface RuntimeWebhookStore {\n  id: string;\n  name?: string;\n  timezone: string;\n}\n\nexport interface RuntimeWebhookBasePayload {\n  event_id?: string;\n  occurred_at?: string;\n  store: RuntimeWebhookStore;\n}\n\nexport interface RuntimeWebhookOrder {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookProduct {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookCustomer {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeWebhookCheckout {\n  id: string;\n  [key: string]: unknown;\n}\n\nexport interface RuntimeOrderWebhookPayload extends RuntimeWebhookBasePayload {\n  order: RuntimeWebhookOrder;\n  customer?: RuntimeWebhookCustomer;\n}\n\nexport interface RuntimeProductWebhookPayload extends RuntimeWebhookBasePayload {\n  product: RuntimeWebhookProduct;\n}\n\nexport interface RuntimeCustomerWebhookPayload extends RuntimeWebhookBasePayload {\n  customer: RuntimeWebhookCustomer;\n}\n\nexport interface RuntimeCheckoutCompletedWebhookPayload\n  extends RuntimeWebhookBasePayload {\n  order: RuntimeWebhookOrder;\n  customer: RuntimeWebhookCustomer;\n  store: RuntimeWebhookStore;\n}\n\nexport interface RuntimeCheckoutAbandonedWebhookPayload\n  extends RuntimeWebhookBasePayload {\n  checkout: RuntimeWebhookCheckout;\n  // Pre-customer draft: contact fields only, no customer id.\n  customer?: CheckoutAbandonedWebhookCustomer;\n}\n\nexport interface RuntimeWebhookEventData {\n  \"order.created\": RuntimeOrderWebhookPayload;\n  \"order.updated\": RuntimeOrderWebhookPayload;\n  \"order.cancelled\": RuntimeOrderWebhookPayload;\n  \"order.completed\": RuntimeOrderWebhookPayload;\n  \"product.created\": RuntimeProductWebhookPayload;\n  \"product.updated\": RuntimeProductWebhookPayload;\n  \"product.deleted\": RuntimeProductWebhookPayload;\n  \"customer.created\": RuntimeCustomerWebhookPayload;\n  \"customer.updated\": RuntimeCustomerWebhookPayload;\n  \"checkout.completed\": RuntimeCheckoutCompletedWebhookPayload;\n  \"checkout.abandoned\": RuntimeCheckoutAbandonedWebhookPayload;\n}\n\n/** Runtime body delivered to subscriber endpoints. The event comes from X-Webhook-Event. */\nexport type RuntimeWebhookPayload<E extends WebhookEvent = WebhookEvent> =\n  RuntimeWebhookEventData[E];\n\n/** Validate the minimum runtime payload shape before invoking typed handlers. */\nexport function isRuntimeWebhookPayload<E extends WebhookEvent>(\n  value: unknown,\n  event: E\n): value is RuntimeWebhookPayload<E> {\n  if (!isRecord(value)) return false;\n\n  switch (event) {\n    case WEBHOOK_EVENTS.ORDER_CREATED:\n    case WEBHOOK_EVENTS.ORDER_UPDATED:\n    case WEBHOOK_EVENTS.ORDER_CANCELLED:\n    case WEBHOOK_EVENTS.ORDER_COMPLETED:\n      return isRuntimeOrderWebhookPayload(value);\n    case WEBHOOK_EVENTS.PRODUCT_CREATED:\n    case WEBHOOK_EVENTS.PRODUCT_UPDATED:\n    case WEBHOOK_EVENTS.PRODUCT_DELETED:\n      return isRuntimeProductWebhookPayload(value);\n    case WEBHOOK_EVENTS.CUSTOMER_CREATED:\n    case WEBHOOK_EVENTS.CUSTOMER_UPDATED:\n      return isRuntimeCustomerWebhookPayload(value);\n    case WEBHOOK_EVENTS.CHECKOUT_COMPLETED:\n      return isRuntimeCheckoutCompletedWebhookPayload(value);\n    case WEBHOOK_EVENTS.CHECKOUT_ABANDONED:\n      return isRuntimeCheckoutAbandonedWebhookPayload(value);\n    default:\n      return false;\n  }\n}\n"],"mappings":";AAAA,SAAS,YAAY,uBAAuB;AAE5C,IAAM,4BAA4B;AAqB3B,SAAS,cAAc;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,mBAAmB;AAAA,EACnB,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC5C,GAAiC;AAC/B,MAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,cAAc,GAAI,QAAO;AAElE,QAAM,kBAAkB,OAAO,SAAS;AACxC,QAAM,iBACJ,OAAO,cAAc,WAAW,YAAY,OAAO,SAAS;AAE9D,MAAI,CAAC,OAAO,UAAU,cAAc,EAAG,QAAO;AAC9C,MAAI,CAAC,OAAO,SAAS,gBAAgB,KAAK,mBAAmB,EAAG,QAAO;AACvE,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAE1C,QAAM,aAAa,KAAK,IAAI,cAAc,cAAc;AACxD,MAAI,aAAa,iBAAkB,QAAO;AAE1C,QAAM,WAAW,WAAW,UAAU,MAAM,EACzC,OAAO,GAAG,eAAe,IAAI,OAAO,IAAI,MAAM,EAC9C,OAAO,KAAK;AAEf,MAAI,SAAS,WAAW,UAAU,OAAQ,QAAO;AACjD,MAAI,CAAC,eAAe,KAAK,SAAS,EAAG,QAAO;AAE5C,MAAI;AACF,WAAO;AAAA,MACL,OAAO,KAAK,UAAU,KAAK;AAAA,MAC3B,OAAO,KAAK,WAAW,KAAK;AAAA,IAC9B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AC3DA;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAGA,IAAM,iBAAiB;AAMvB,SAAS,eAAe,OAAsC;AACnE,SAAO,qBAAqB,KAAK;AACnC;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,YAAY,OAAyC;AAC5D,SAAO,SAAS,KAAK,KAAK,OAAO,MAAM,OAAO;AAChD;AAEA,SAAS,iBACP,OACA,KACS;AACT,SAAO,MAAM,GAAG,MAAM,UAAa,OAAO,MAAM,GAAG,MAAM;AAC3D;AAEA,SAAS,sBAAsB,OAA8C;AAC3E,SACE,SAAS,KAAK,KACd,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,aAAa,aACzB,MAAM,SAAS,UAAa,OAAO,MAAM,SAAS;AAEvD;AAEA,SAAS,0BAA0B,OAAyC;AAC1E,MAAI,CAAC,iBAAiB,OAAO,UAAU,EAAG,QAAO;AACjD,MAAI,CAAC,iBAAiB,OAAO,aAAa,EAAG,QAAO;AAEpD,SAAO,sBAAsB,MAAM,KAAK;AAC1C;AAEA,SAAS,6BAA6B,OAAyC;AAC7E,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,KAAK,MACtB,MAAM,aAAa,UAAa,YAAY,MAAM,QAAQ;AAE/D;AAEA,SAAS,+BAA+B,OAAyC;AAC/E,SAAO,0BAA0B,KAAK,KAAK,YAAY,MAAM,OAAO;AACtE;AAEA,SAAS,gCAAgC,OAAyC;AAChF,SAAO,0BAA0B,KAAK,KAAK,YAAY,MAAM,QAAQ;AACvE;AAEA,SAAS,yCACP,OACS;AACT,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,KAAK,KACvB,YAAY,MAAM,QAAQ,KAC1B,sBAAsB,MAAM,KAAK;AAErC;AAEA,SAAS,yCACP,OACS;AAET,SACE,0BAA0B,KAAK,KAC/B,YAAY,MAAM,QAAQ,KAC1B,sBAAsB,MAAM,KAAK;AAErC;AAsKO,SAAS,wBACd,OACA,OACmC;AACnC,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAE7B,UAAQ,OAAO;AAAA,IACb,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,6BAA6B,KAAK;AAAA,IAC3C,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,+BAA+B,KAAK;AAAA,IAC7C,KAAK,eAAe;AAAA,IACpB,KAAK,eAAe;AAClB,aAAO,gCAAgC,KAAK;AAAA,IAC9C,KAAK,eAAe;AAClB,aAAO,yCAAyC,KAAK;AAAA,IACvD,KAAK,eAAe;AAClB,aAAO,yCAAyC,KAAK;AAAA,IACvD;AACE,aAAO;AAAA,EACX;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@whatalo/plugin-sdk",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "type": "module",
   "license": "MIT",
   "description": "Official TypeScript SDK for building Whatalo plugins",