@workos-inc/node 8.0.0-beta.2 → 8.0.0-beta.3

package/lib/cjs/vault/interfaces/object.interface.cjs

@@ -0,0 +1,17 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var object_interface_exports = {};
+module.exports = __toCommonJS(object_interface_exports);
+//# sourceMappingURL=object.interface.cjs.map

package/lib/cjs/vault/interfaces/object.interface.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/vault/interfaces/object.interface.ts"],"sourcesContent":["import { KeyContext } from './key.interface';\n\nexport interface ObjectDigest {\n  id: string;\n  name: string;\n  updatedAt: Date;\n}\n\nexport interface ObjectUpdateBy {\n  id: string;\n  name: string;\n}\n\nexport interface ObjectMetadata {\n  context: KeyContext;\n  environmentId: string;\n  id: string;\n  keyId: string;\n  updatedAt: Date;\n  updatedBy: ObjectUpdateBy;\n  versionId: string;\n}\n\nexport interface VaultObject {\n  id: string;\n  metadata: ObjectMetadata;\n  name: string;\n  value?: string;\n}\n\nexport interface ObjectVersion {\n  createdAt: Date;\n  currentVersion: boolean;\n  id: string;\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/lib/cjs/vault/interfaces/object.interface.d.cts

@@ -0,0 +1,33 @@
+import { KeyContext } from './key.interface.cjs';
+
+interface ObjectDigest {
+    id: string;
+    name: string;
+    updatedAt: Date;
+}
+interface ObjectUpdateBy {
+    id: string;
+    name: string;
+}
+interface ObjectMetadata {
+    context: KeyContext;
+    environmentId: string;
+    id: string;
+    keyId: string;
+    updatedAt: Date;
+    updatedBy: ObjectUpdateBy;
+    versionId: string;
+}
+interface VaultObject {
+    id: string;
+    metadata: ObjectMetadata;
+    name: string;
+    value?: string;
+}
+interface ObjectVersion {
+    createdAt: Date;
+    currentVersion: boolean;
+    id: string;
+}
+
+export type { ObjectDigest, ObjectMetadata, ObjectUpdateBy, ObjectVersion, VaultObject };

package/lib/cjs/vault/serializers/vault-key.serializer.cjs

@@ -0,0 +1,43 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var vault_key_serializer_exports = {};
+__export(vault_key_serializer_exports, {
+  deserializeCreateDataKeyResponse: () => deserializeCreateDataKeyResponse,
+  deserializeDecryptDataKeyResponse: () => deserializeDecryptDataKeyResponse
+});
+module.exports = __toCommonJS(vault_key_serializer_exports);
+const deserializeCreateDataKeyResponse = /* @__PURE__ */ __name((key) => ({
+  context: key.context,
+  dataKey: {
+    key: key.data_key,
+    id: key.id
+  },
+  encryptedKeys: key.encrypted_keys
+}), "deserializeCreateDataKeyResponse");
+const deserializeDecryptDataKeyResponse = /* @__PURE__ */ __name((key) => ({
+  key: key.data_key,
+  id: key.id
+}), "deserializeDecryptDataKeyResponse");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  deserializeCreateDataKeyResponse,
+  deserializeDecryptDataKeyResponse
+});
+//# sourceMappingURL=vault-key.serializer.cjs.map

package/lib/cjs/vault/serializers/vault-key.serializer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/vault/serializers/vault-key.serializer.ts"],"sourcesContent":["import { CreateDataKeyResponse } from '../interfaces/key/create-data-key.interface';\nimport { DecryptDataKeyResponse } from '../interfaces/key/decrypt-data-key.interface';\nimport { DataKey, DataKeyPair } from '../interfaces/key.interface';\n\nexport const deserializeCreateDataKeyResponse = (\n  key: CreateDataKeyResponse,\n): DataKeyPair => ({\n  context: key.context,\n  dataKey: {\n    key: key.data_key,\n    id: key.id,\n  },\n  encryptedKeys: key.encrypted_keys,\n});\n\nexport const deserializeDecryptDataKeyResponse = (\n  key: DecryptDataKeyResponse,\n): DataKey => ({\n  key: key.data_key,\n  id: key.id,\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAM,mCAAmC,wBAC9C,SACiB;AAAA,EACjB,SAAS,IAAI;AAAA,EACb,SAAS;AAAA,IACP,KAAK,IAAI;AAAA,IACT,IAAI,IAAI;AAAA,EACV;AAAA,EACA,eAAe,IAAI;AACrB,IATgD;AAWzC,MAAM,oCAAoC,wBAC/C,SACa;AAAA,EACb,KAAK,IAAI;AAAA,EACT,IAAI,IAAI;AACV,IALiD;","names":[]}

package/lib/cjs/vault/serializers/vault-key.serializer.d.cts

@@ -0,0 +1,8 @@
+import { CreateDataKeyResponse } from '../interfaces/key/create-data-key.interface.cjs';
+import { DecryptDataKeyResponse } from '../interfaces/key/decrypt-data-key.interface.cjs';
+import { DataKeyPair, DataKey } from '../interfaces/key.interface.cjs';
+
+declare const deserializeCreateDataKeyResponse: (key: CreateDataKeyResponse) => DataKeyPair;
+declare const deserializeDecryptDataKeyResponse: (key: DecryptDataKeyResponse) => DataKey;
+
+export { deserializeCreateDataKeyResponse, deserializeDecryptDataKeyResponse };

package/lib/cjs/vault/serializers/vault-object.serializer.cjs

@@ -0,0 +1,82 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var vault_object_serializer_exports = {};
+__export(vault_object_serializer_exports, {
+  deserializeListObjects: () => deserializeListObjects,
+  deserializeObject: () => deserializeObject,
+  deserializeObjectMetadata: () => deserializeObjectMetadata,
+  desrializeListObjectVersions: () => desrializeListObjectVersions,
+  serializeCreateObjectEntity: () => serializeCreateObjectEntity,
+  serializeUpdateObjectEntity: () => serializeUpdateObjectEntity
+});
+module.exports = __toCommonJS(vault_object_serializer_exports);
+const deserializeObjectMetadata = /* @__PURE__ */ __name((metadata) => ({
+  context: metadata.context,
+  environmentId: metadata.environment_id,
+  id: metadata.id,
+  keyId: metadata.key_id,
+  updatedAt: new Date(Date.parse(metadata.updated_at)),
+  updatedBy: metadata.updated_by,
+  versionId: metadata.version_id
+}), "deserializeObjectMetadata");
+const deserializeObject = /* @__PURE__ */ __name((object) => ({
+  id: object.id,
+  name: object.name,
+  value: object.value,
+  metadata: deserializeObjectMetadata(object.metadata)
+}), "deserializeObject");
+const deserializeObjectDigest = /* @__PURE__ */ __name((digest) => ({
+  id: digest.id,
+  name: digest.name,
+  updatedAt: new Date(Date.parse(digest.updated_at))
+}), "deserializeObjectDigest");
+const deserializeListObjects = /* @__PURE__ */ __name((list) => ({
+  object: "list",
+  data: list.data.map(deserializeObjectDigest),
+  listMetadata: {
+    after: list.list_metadata.after ?? void 0,
+    before: list.list_metadata.before ?? void 0
+  }
+}), "deserializeListObjects");
+const desrializeListObjectVersions = /* @__PURE__ */ __name((list) => list.data.map(deserializeObjectVersion), "desrializeListObjectVersions");
+const deserializeObjectVersion = /* @__PURE__ */ __name((version) => ({
+  createdAt: new Date(Date.parse(version.created_at)),
+  currentVersion: version.current_version,
+  id: version.id
+}), "deserializeObjectVersion");
+const serializeCreateObjectEntity = /* @__PURE__ */ __name((options) => ({
+  name: options.name,
+  value: options.value,
+  key_context: options.context
+}), "serializeCreateObjectEntity");
+const serializeUpdateObjectEntity = /* @__PURE__ */ __name((options) => ({
+  value: options.value,
+  version_check: options.versionCheck
+}), "serializeUpdateObjectEntity");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  deserializeListObjects,
+  deserializeObject,
+  deserializeObjectMetadata,
+  desrializeListObjectVersions,
+  serializeCreateObjectEntity,
+  serializeUpdateObjectEntity
+});
+//# sourceMappingURL=vault-object.serializer.cjs.map

package/lib/cjs/vault/serializers/vault-object.serializer.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/vault/serializers/vault-object.serializer.ts"],"sourcesContent":["import { List, ListResponse } from '../../common/interfaces';\nimport {\n  ReadObjectMetadataResponse,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  UpdateObjectEntity,\n  ObjectMetadata,\n  VaultObject,\n  ObjectVersionResponse,\n  ObjectVersion,\n  CreateObjectOptions,\n  CreateObjectEntity,\n  ObjectDigestResponse,\n  ObjectDigest,\n  ListObjectVersionsResponse,\n} from '../interfaces';\n\nexport const deserializeObjectMetadata = (\n  metadata: ReadObjectMetadataResponse,\n): ObjectMetadata => ({\n  context: metadata.context,\n  environmentId: metadata.environment_id,\n  id: metadata.id,\n  keyId: metadata.key_id,\n  updatedAt: new Date(Date.parse(metadata.updated_at)),\n  updatedBy: metadata.updated_by,\n  versionId: metadata.version_id,\n});\n\nexport const deserializeObject = (object: ReadObjectResponse): VaultObject => ({\n  id: object.id,\n  name: object.name,\n  value: object.value,\n  metadata: deserializeObjectMetadata(object.metadata),\n});\n\nconst deserializeObjectDigest = (\n  digest: ObjectDigestResponse,\n): ObjectDigest => ({\n  id: digest.id,\n  name: digest.name,\n  updatedAt: new Date(Date.parse(digest.updated_at)),\n});\n\nexport const deserializeListObjects = (\n  list: ListResponse<ObjectDigestResponse>,\n): List<ObjectDigest> => ({\n  object: 'list',\n  data: list.data.map(deserializeObjectDigest),\n  listMetadata: {\n    after: list.list_metadata.after ?? undefined,\n    before: list.list_metadata.before ?? undefined,\n  },\n});\n\nexport const desrializeListObjectVersions = (\n  list: ListObjectVersionsResponse,\n): ObjectVersion[] => list.data.map(deserializeObjectVersion);\n\nconst deserializeObjectVersion = (\n  version: ObjectVersionResponse,\n): ObjectVersion => ({\n  createdAt: new Date(Date.parse(version.created_at)),\n  currentVersion: version.current_version,\n  id: version.id,\n});\n\nexport const serializeCreateObjectEntity = (\n  options: CreateObjectOptions,\n): CreateObjectEntity => ({\n  name: options.name,\n  value: options.value,\n  key_context: options.context,\n});\n\nexport const serializeUpdateObjectEntity = (\n  options: UpdateObjectOptions,\n): UpdateObjectEntity => ({\n  value: options.value,\n  version_check: options.versionCheck,\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBO,MAAM,4BAA4B,wBACvC,cACoB;AAAA,EACpB,SAAS,SAAS;AAAA,EAClB,eAAe,SAAS;AAAA,EACxB,IAAI,SAAS;AAAA,EACb,OAAO,SAAS;AAAA,EAChB,WAAW,IAAI,KAAK,KAAK,MAAM,SAAS,UAAU,CAAC;AAAA,EACnD,WAAW,SAAS;AAAA,EACpB,WAAW,SAAS;AACtB,IAVyC;AAYlC,MAAM,oBAAoB,wBAAC,YAA6C;AAAA,EAC7E,IAAI,OAAO;AAAA,EACX,MAAM,OAAO;AAAA,EACb,OAAO,OAAO;AAAA,EACd,UAAU,0BAA0B,OAAO,QAAQ;AACrD,IALiC;AAOjC,MAAM,0BAA0B,wBAC9B,YACkB;AAAA,EAClB,IAAI,OAAO;AAAA,EACX,MAAM,OAAO;AAAA,EACb,WAAW,IAAI,KAAK,KAAK,MAAM,OAAO,UAAU,CAAC;AACnD,IANgC;AAQzB,MAAM,yBAAyB,wBACpC,UACwB;AAAA,EACxB,QAAQ;AAAA,EACR,MAAM,KAAK,KAAK,IAAI,uBAAuB;AAAA,EAC3C,cAAc;AAAA,IACZ,OAAO,KAAK,cAAc,SAAS;AAAA,IACnC,QAAQ,KAAK,cAAc,UAAU;AAAA,EACvC;AACF,IATsC;AAW/B,MAAM,+BAA+B,wBAC1C,SACoB,KAAK,KAAK,IAAI,wBAAwB,GAFhB;AAI5C,MAAM,2BAA2B,wBAC/B,aACmB;AAAA,EACnB,WAAW,IAAI,KAAK,KAAK,MAAM,QAAQ,UAAU,CAAC;AAAA,EAClD,gBAAgB,QAAQ;AAAA,EACxB,IAAI,QAAQ;AACd,IANiC;AAQ1B,MAAM,8BAA8B,wBACzC,aACwB;AAAA,EACxB,MAAM,QAAQ;AAAA,EACd,OAAO,QAAQ;AAAA,EACf,aAAa,QAAQ;AACvB,IAN2C;AAQpC,MAAM,8BAA8B,wBACzC,aACwB;AAAA,EACxB,OAAO,QAAQ;AAAA,EACf,eAAe,QAAQ;AACzB,IAL2C;","names":[]}

package/lib/cjs/vault/serializers/vault-object.serializer.d.cts

@@ -0,0 +1,17 @@
+import { ListResponse, List } from '../../common/interfaces/list.interface.cjs';
+import { CreateObjectOptions, CreateObjectEntity } from '../interfaces/object/create-object.interface.cjs';
+import { ListObjectVersionsResponse } from '../interfaces/object/list-object-versions.interface.cjs';
+import { ObjectDigestResponse } from '../interfaces/object/list-objects.interface.cjs';
+import { ReadObjectMetadataResponse, ReadObjectResponse } from '../interfaces/object/read-object.interface.cjs';
+import { UpdateObjectOptions, UpdateObjectEntity } from '../interfaces/object/update-object.interface.cjs';
+import { ObjectMetadata, VaultObject, ObjectDigest, ObjectVersion } from '../interfaces/object.interface.cjs';
+import '../interfaces/key.interface.cjs';
+
+declare const deserializeObjectMetadata: (metadata: ReadObjectMetadataResponse) => ObjectMetadata;
+declare const deserializeObject: (object: ReadObjectResponse) => VaultObject;
+declare const deserializeListObjects: (list: ListResponse<ObjectDigestResponse>) => List<ObjectDigest>;
+declare const desrializeListObjectVersions: (list: ListObjectVersionsResponse) => ObjectVersion[];
+declare const serializeCreateObjectEntity: (options: CreateObjectOptions) => CreateObjectEntity;
+declare const serializeUpdateObjectEntity: (options: UpdateObjectOptions) => UpdateObjectEntity;
+
+export { deserializeListObjects, deserializeObject, deserializeObjectMetadata, desrializeListObjectVersions, serializeCreateObjectEntity, serializeUpdateObjectEntity };

package/lib/cjs/vault/vault.cjs

@@ -0,0 +1,170 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var vault_exports = {};
+__export(vault_exports, {
+  Vault: () => Vault
+});
+module.exports = __toCommonJS(vault_exports);
+var import_leb = require("leb");
+var import_base64 = require('../common/utils/base64.cjs');
+var import_vault_key = require('./serializers/vault-key.serializer.cjs');
+var import_vault_object = require('./serializers/vault-object.serializer.cjs');
+class Vault {
+  constructor(workos) {
+    this.workos = workos;
+    this.cryptoProvider = workos.getCryptoProvider();
+  }
+  static {
+    __name(this, "Vault");
+  }
+  cryptoProvider;
+  decode(payload) {
+    const inputData = (0, import_base64.base64ToUint8Array)(payload);
+    const iv = new Uint8Array(inputData.subarray(0, 12));
+    const tag = new Uint8Array(inputData.subarray(12, 28));
+    const { value: keyLen, nextIndex } = (0, import_leb.decodeUInt32)(inputData, 28);
+    const keysBuffer = inputData.subarray(nextIndex, nextIndex + keyLen);
+    const keys = (0, import_base64.uint8ArrayToBase64)(keysBuffer);
+    const ciphertext = new Uint8Array(inputData.subarray(nextIndex + keyLen));
+    return {
+      iv,
+      tag,
+      keys,
+      ciphertext
+    };
+  }
+  async createObject(options) {
+    const { data } = await this.workos.post(
+      `/vault/v1/kv`,
+      (0, import_vault_object.serializeCreateObjectEntity)(options)
+    );
+    return (0, import_vault_object.deserializeObjectMetadata)(data);
+  }
+  async listObjects(options) {
+    const url = new URL("/vault/v1/kv", this.workos.baseURL);
+    if (options?.after) {
+      url.searchParams.set("after", options.after);
+    }
+    if (options?.limit) {
+      url.searchParams.set("limit", options.limit.toString());
+    }
+    const { data } = await this.workos.get(
+      url.toString()
+    );
+    return (0, import_vault_object.deserializeListObjects)(data);
+  }
+  async listObjectVersions(options) {
+    const { data } = await this.workos.get(
+      `/vault/v1/kv/${encodeURIComponent(options.id)}/versions`
+    );
+    return (0, import_vault_object.desrializeListObjectVersions)(data);
+  }
+  async readObject(options) {
+    const { data } = await this.workos.get(
+      `/vault/v1/kv/${encodeURIComponent(options.id)}`
+    );
+    return (0, import_vault_object.deserializeObject)(data);
+  }
+  async describeObject(options) {
+    const { data } = await this.workos.get(
+      `/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`
+    );
+    return (0, import_vault_object.deserializeObject)(data);
+  }
+  async updateObject(options) {
+    const { data } = await this.workos.put(
+      `/vault/v1/kv/${encodeURIComponent(options.id)}`,
+      (0, import_vault_object.serializeUpdateObjectEntity)(options)
+    );
+    return (0, import_vault_object.deserializeObject)(data);
+  }
+  async deleteObject(options) {
+    return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);
+  }
+  async createDataKey(options) {
+    const { data } = await this.workos.post(
+      `/vault/v1/keys/data-key`,
+      options
+    );
+    return (0, import_vault_key.deserializeCreateDataKeyResponse)(data);
+  }
+  async decryptDataKey(options) {
+    const { data } = await this.workos.post(
+      `/vault/v1/keys/decrypt`,
+      options
+    );
+    return (0, import_vault_key.deserializeDecryptDataKeyResponse)(data);
+  }
+  async encrypt(data, context, associatedData) {
+    const keyPair = await this.createDataKey({
+      context
+    });
+    const encoder = new TextEncoder();
+    const key = (0, import_base64.base64ToUint8Array)(keyPair.dataKey.key);
+    const keyBlob = (0, import_base64.base64ToUint8Array)(keyPair.encryptedKeys);
+    const prefixLenBuffer = (0, import_leb.encodeUInt32)(keyBlob.length);
+    const aadBuffer = associatedData ? encoder.encode(associatedData) : void 0;
+    const iv = this.cryptoProvider.randomBytes(12);
+    const {
+      ciphertext,
+      iv: resultIv,
+      tag
+    } = await this.cryptoProvider.encrypt(
+      encoder.encode(data),
+      key,
+      iv,
+      aadBuffer
+    );
+    const resultArray = new Uint8Array(
+      resultIv.length + tag.length + prefixLenBuffer.length + keyBlob.length + ciphertext.length
+    );
+    let offset = 0;
+    resultArray.set(resultIv, offset);
+    offset += resultIv.length;
+    resultArray.set(tag, offset);
+    offset += tag.length;
+    resultArray.set(new Uint8Array(prefixLenBuffer), offset);
+    offset += prefixLenBuffer.length;
+    resultArray.set(keyBlob, offset);
+    offset += keyBlob.length;
+    resultArray.set(ciphertext, offset);
+    return (0, import_base64.uint8ArrayToBase64)(resultArray);
+  }
+  async decrypt(encryptedData, associatedData) {
+    const decoded = this.decode(encryptedData);
+    const dataKey = await this.decryptDataKey({ keys: decoded.keys });
+    const key = (0, import_base64.base64ToUint8Array)(dataKey.key);
+    const encoder = new TextEncoder();
+    const aadBuffer = associatedData ? encoder.encode(associatedData) : void 0;
+    const decrypted = await this.cryptoProvider.decrypt(
+      decoded.ciphertext,
+      key,
+      decoded.iv,
+      decoded.tag,
+      aadBuffer
+    );
+    return new TextDecoder().decode(decrypted);
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  Vault
+});
+//# sourceMappingURL=vault.cjs.map

package/lib/cjs/vault/vault.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/vault/vault.ts"],"sourcesContent":["import { decodeUInt32, encodeUInt32 } from 'leb';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\nimport { List, ListResponse } from '../common/interfaces';\nimport { PaginationOptions } from '../index.worker';\nimport { base64ToUint8Array, uint8ArrayToBase64 } from '../common/utils/base64';\nimport type { WorkOS } from '../workos';\nimport {\n  CreateDataKeyOptions,\n  CreateDataKeyResponse,\n  CreateObjectOptions,\n  DataKey,\n  DataKeyPair,\n  DecryptDataKeyOptions,\n  DecryptDataKeyResponse,\n  DeleteObjectOptions,\n  KeyContext,\n  ListObjectVersionsResponse,\n  ObjectDigest,\n  ObjectDigestResponse,\n  ObjectMetadata,\n  ObjectVersion,\n  ReadObjectMetadataResponse,\n  ReadObjectOptions,\n  ReadObjectResponse,\n  UpdateObjectOptions,\n  VaultObject,\n} from './interfaces';\nimport {\n  deserializeCreateDataKeyResponse,\n  deserializeDecryptDataKeyResponse,\n} from './serializers/vault-key.serializer';\nimport {\n  deserializeListObjects,\n  deserializeObject,\n  deserializeObjectMetadata,\n  desrializeListObjectVersions,\n  serializeCreateObjectEntity,\n  serializeUpdateObjectEntity,\n} from './serializers/vault-object.serializer';\n\ninterface Decoded {\n  iv: Uint8Array;\n  tag: Uint8Array;\n  keys: string;\n  ciphertext: Uint8Array;\n}\n\nexport class Vault {\n  private cryptoProvider: CryptoProvider;\n\n  constructor(private readonly workos: WorkOS) {\n    this.cryptoProvider = workos.getCryptoProvider();\n  }\n\n  private decode(payload: string): Decoded {\n    const inputData = base64ToUint8Array(payload);\n    // Use 12 bytes for IV (standard for AES-GCM)\n    const iv = new Uint8Array(inputData.subarray(0, 12));\n    const tag = new Uint8Array(inputData.subarray(12, 28));\n    const { value: keyLen, nextIndex } = decodeUInt32(inputData, 28);\n\n    // Use subarray instead of slice and convert directly to base64\n    const keysBuffer = inputData.subarray(nextIndex, nextIndex + keyLen);\n    const keys = uint8ArrayToBase64(keysBuffer);\n\n    const ciphertext = new Uint8Array(inputData.subarray(nextIndex + keyLen));\n\n    return {\n      iv,\n      tag,\n      keys,\n      ciphertext,\n    };\n  }\n\n  async createObject(options: CreateObjectOptions): Promise<ObjectMetadata> {\n    const { data } = await this.workos.post<ReadObjectMetadataResponse>(\n      `/vault/v1/kv`,\n      serializeCreateObjectEntity(options),\n    );\n    return deserializeObjectMetadata(data);\n  }\n\n  async listObjects(\n    options?: PaginationOptions | undefined,\n  ): Promise<List<ObjectDigest>> {\n    const url = new URL('/vault/v1/kv', this.workos.baseURL);\n    if (options?.after) {\n      url.searchParams.set('after', options.after);\n    }\n    if (options?.limit) {\n      url.searchParams.set('limit', options.limit.toString());\n    }\n\n    const { data } = await this.workos.get<ListResponse<ObjectDigestResponse>>(\n      url.toString(),\n    );\n    return deserializeListObjects(data);\n  }\n\n  async listObjectVersions(\n    options: ReadObjectOptions,\n  ): Promise<ObjectVersion[]> {\n    const { data } = await this.workos.get<ListObjectVersionsResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/versions`,\n    );\n    return desrializeListObjectVersions(data);\n  }\n\n  async readObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n    );\n    return deserializeObject(data);\n  }\n\n  async describeObject(options: ReadObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.get<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}/metadata`,\n    );\n    return deserializeObject(data);\n  }\n\n  async updateObject(options: UpdateObjectOptions): Promise<VaultObject> {\n    const { data } = await this.workos.put<ReadObjectResponse>(\n      `/vault/v1/kv/${encodeURIComponent(options.id)}`,\n      serializeUpdateObjectEntity(options),\n    );\n    return deserializeObject(data);\n  }\n\n  async deleteObject(options: DeleteObjectOptions): Promise<void> {\n    return this.workos.delete(`/vault/v1/kv/${encodeURIComponent(options.id)}`);\n  }\n\n  async createDataKey(options: CreateDataKeyOptions): Promise<DataKeyPair> {\n    const { data } = await this.workos.post<CreateDataKeyResponse>(\n      `/vault/v1/keys/data-key`,\n      options,\n    );\n    return deserializeCreateDataKeyResponse(data);\n  }\n\n  async decryptDataKey(options: DecryptDataKeyOptions): Promise<DataKey> {\n    const { data } = await this.workos.post<DecryptDataKeyResponse>(\n      `/vault/v1/keys/decrypt`,\n      options,\n    );\n    return deserializeDecryptDataKeyResponse(data);\n  }\n\n  async encrypt(\n    data: string,\n    context: KeyContext,\n    associatedData?: string,\n  ): Promise<string> {\n    const keyPair = await this.createDataKey({\n      context,\n    });\n\n    // Convert base64 key to Uint8Array\n    const encoder = new TextEncoder();\n\n    // Use our cross-runtime base64 utility\n    const key = base64ToUint8Array(keyPair.dataKey.key);\n    const keyBlob = base64ToUint8Array(keyPair.encryptedKeys);\n\n    const prefixLenBuffer = encodeUInt32(keyBlob.length);\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    // Use a 12-byte IV for AES-GCM (industry standard)\n    const iv = this.cryptoProvider.randomBytes(12);\n\n    const {\n      ciphertext,\n      iv: resultIv,\n      tag,\n    } = await this.cryptoProvider.encrypt(\n      encoder.encode(data),\n      key,\n      iv,\n      aadBuffer,\n    );\n\n    // Concatenate all parts into a single array\n    const resultArray = new Uint8Array(\n      resultIv.length +\n        tag.length +\n        prefixLenBuffer.length +\n        keyBlob.length +\n        ciphertext.length,\n    );\n\n    let offset = 0;\n    resultArray.set(resultIv, offset);\n    offset += resultIv.length;\n\n    resultArray.set(tag, offset);\n    offset += tag.length;\n\n    resultArray.set(new Uint8Array(prefixLenBuffer), offset);\n    offset += prefixLenBuffer.length;\n\n    resultArray.set(keyBlob, offset);\n    offset += keyBlob.length;\n\n    resultArray.set(ciphertext, offset);\n\n    // Convert to base64 using our cross-runtime utility\n    return uint8ArrayToBase64(resultArray);\n  }\n\n  async decrypt(\n    encryptedData: string,\n    associatedData?: string,\n  ): Promise<string> {\n    const decoded = this.decode(encryptedData);\n    const dataKey = await this.decryptDataKey({ keys: decoded.keys });\n\n    // Convert base64 key to Uint8Array using our cross-runtime utility\n    const key = base64ToUint8Array(dataKey.key);\n\n    const encoder = new TextEncoder();\n    const aadBuffer = associatedData\n      ? encoder.encode(associatedData)\n      : undefined;\n\n    const decrypted = await this.cryptoProvider.decrypt(\n      decoded.ciphertext,\n      key,\n      decoded.iv,\n      decoded.tag,\n      aadBuffer,\n    );\n\n    return new TextDecoder().decode(decrypted);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBAA2C;AAI3C,oBAAuD;AAuBvD,uBAGO;AACP,0BAOO;AASA,MAAM,MAAM;AAAA,EAGjB,YAA6B,QAAgB;AAAhB;AAC3B,SAAK,iBAAiB,OAAO,kBAAkB;AAAA,EACjD;AAAA,EApDF,OA+CmB;AAAA;AAAA;AAAA,EACT;AAAA,EAMA,OAAO,SAA0B;AACvC,UAAM,gBAAY,kCAAmB,OAAO;AAE5C,UAAM,KAAK,IAAI,WAAW,UAAU,SAAS,GAAG,EAAE,CAAC;AACnD,UAAM,MAAM,IAAI,WAAW,UAAU,SAAS,IAAI,EAAE,CAAC;AACrD,UAAM,EAAE,OAAO,QAAQ,UAAU,QAAI,yBAAa,WAAW,EAAE;AAG/D,UAAM,aAAa,UAAU,SAAS,WAAW,YAAY,MAAM;AACnE,UAAM,WAAO,kCAAmB,UAAU;AAE1C,UAAM,aAAa,IAAI,WAAW,UAAU,SAAS,YAAY,MAAM,CAAC;AAExE,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,SAAuD;AACxE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC;AAAA,UACA,iDAA4B,OAAO;AAAA,IACrC;AACA,eAAO,+CAA0B,IAAI;AAAA,EACvC;AAAA,EAEA,MAAM,YACJ,SAC6B;AAC7B,UAAM,MAAM,IAAI,IAAI,gBAAgB,KAAK,OAAO,OAAO;AACvD,QAAI,SAAS,OAAO;AAClB,UAAI,aAAa,IAAI,SAAS,QAAQ,KAAK;AAAA,IAC7C;AACA,QAAI,SAAS,OAAO;AAClB,UAAI,aAAa,IAAI,SAAS,QAAQ,MAAM,SAAS,CAAC;AAAA,IACxD;AAEA,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,IAAI,SAAS;AAAA,IACf;AACA,eAAO,4CAAuB,IAAI;AAAA,EACpC;AAAA,EAEA,MAAM,mBACJ,SAC0B;AAC1B,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC;AAAA,IAChD;AACA,eAAO,kDAA6B,IAAI;AAAA,EAC1C;AAAA,EAEA,MAAM,WAAW,SAAkD;AACjE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC;AAAA,IAChD;AACA,eAAO,uCAAkB,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,eAAe,SAAkD;AACrE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC;AAAA,IAChD;AACA,eAAO,uCAAkB,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,aAAa,SAAoD;AACrE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC;AAAA,UAC9C,iDAA4B,OAAO;AAAA,IACrC;AACA,eAAO,uCAAkB,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,aAAa,SAA6C;AAC9D,WAAO,KAAK,OAAO,OAAO,gBAAgB,mBAAmB,QAAQ,EAAE,CAAC,EAAE;AAAA,EAC5E;AAAA,EAEA,MAAM,cAAc,SAAqD;AACvE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AACA,eAAO,mDAAiC,IAAI;AAAA,EAC9C;AAAA,EAEA,MAAM,eAAe,SAAkD;AACrE,UAAM,EAAE,KAAK,IAAI,MAAM,KAAK,OAAO;AAAA,MACjC;AAAA,MACA;AAAA,IACF;AACA,eAAO,oDAAkC,IAAI;AAAA,EAC/C;AAAA,EAEA,MAAM,QACJ,MACA,SACA,gBACiB;AACjB,UAAM,UAAU,MAAM,KAAK,cAAc;AAAA,MACvC;AAAA,IACF,CAAC;AAGD,UAAM,UAAU,IAAI,YAAY;AAGhC,UAAM,UAAM,kCAAmB,QAAQ,QAAQ,GAAG;AAClD,UAAM,cAAU,kCAAmB,QAAQ,aAAa;AAExD,UAAM,sBAAkB,yBAAa,QAAQ,MAAM;AACnD,UAAM,YAAY,iBACd,QAAQ,OAAO,cAAc,IAC7B;AAGJ,UAAM,KAAK,KAAK,eAAe,YAAY,EAAE;AAE7C,UAAM;AAAA,MACJ;AAAA,MACA,IAAI;AAAA,MACJ;AAAA,IACF,IAAI,MAAM,KAAK,eAAe;AAAA,MAC5B,QAAQ,OAAO,IAAI;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAGA,UAAM,cAAc,IAAI;AAAA,MACtB,SAAS,SACP,IAAI,SACJ,gBAAgB,SAChB,QAAQ,SACR,WAAW;AAAA,IACf;AAEA,QAAI,SAAS;AACb,gBAAY,IAAI,UAAU,MAAM;AAChC,cAAU,SAAS;AAEnB,gBAAY,IAAI,KAAK,MAAM;AAC3B,cAAU,IAAI;AAEd,gBAAY,IAAI,IAAI,WAAW,eAAe,GAAG,MAAM;AACvD,cAAU,gBAAgB;AAE1B,gBAAY,IAAI,SAAS,MAAM;AAC/B,cAAU,QAAQ;AAElB,gBAAY,IAAI,YAAY,MAAM;AAGlC,eAAO,kCAAmB,WAAW;AAAA,EACvC;AAAA,EAEA,MAAM,QACJ,eACA,gBACiB;AACjB,UAAM,UAAU,KAAK,OAAO,aAAa;AACzC,UAAM,UAAU,MAAM,KAAK,eAAe,EAAE,MAAM,QAAQ,KAAK,CAAC;AAGhE,UAAM,UAAM,kCAAmB,QAAQ,GAAG;AAE1C,UAAM,UAAU,IAAI,YAAY;AAChC,UAAM,YAAY,iBACd,QAAQ,OAAO,cAAc,IAC7B;AAEJ,UAAM,YAAY,MAAM,KAAK,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,WAAO,IAAI,YAAY,EAAE,OAAO,SAAS;AAAA,EAC3C;AACF;","names":[]}

package/lib/cjs/vault/vault.d.cts

@@ -0,0 +1,126 @@
+import '../common/interfaces/pagination-options.interface.cjs';
+import '../common/interfaces/list.interface.cjs';
+export { V as Vault } from '../workos-Da6gE2T5.cjs';
+import './interfaces/key/create-data-key.interface.cjs';
+import './interfaces/key/decrypt-data-key.interface.cjs';
+import './interfaces/key.interface.cjs';
+import './interfaces/object/create-object.interface.cjs';
+import './interfaces/object/delete-object.interface.cjs';
+import './interfaces/object/read-object.interface.cjs';
+import './interfaces/object/update-object.interface.cjs';
+import './interfaces/object.interface.cjs';
+import '../common/interfaces/get-options.interface.cjs';
+import '../common/interfaces/post-options.interface.cjs';
+import '../common/interfaces/put-options.interface.cjs';
+import '../common/interfaces/workos-options.interface.cjs';
+import '../common/interfaces/app-info.interface.cjs';
+import '../events/interfaces/list-events-options.interface.cjs';
+import '../common/interfaces/event.interface.cjs';
+import '../directory-sync/interfaces/directory.interface.cjs';
+import '../directory-sync/interfaces/directory-group.interface.cjs';
+import '../directory-sync/interfaces/directory-user.interface.cjs';
+import '../roles/interfaces/role.interface.cjs';
+import '../organizations/interfaces/organization.interface.cjs';
+import '../organization-domains/interfaces/organization-domain.interface.cjs';
+import '../sso/interfaces/connection.interface.cjs';
+import '../sso/interfaces/connection-type.enum.cjs';
+import '../user-management/interfaces/user.interface.cjs';
+import '../user-management/interfaces/authentication-event.interface.cjs';
+import '../user-management/interfaces/authentication-radar-risk-detected-event.interface.cjs';
+import '../user-management/interfaces/email-verification.interface.cjs';
+import '../user-management/interfaces/invitation.interface.cjs';
+import '../user-management/interfaces/organization-membership.interface.cjs';
+import '../user-management/interfaces/magic-auth.interface.cjs';
+import '../user-management/interfaces/password-reset.interface.cjs';
+import '../user-management/interfaces/session.interface.cjs';
+import '../user-management/interfaces/impersonator.interface.cjs';
+import '../common/utils/pagination.cjs';
+import '../organizations/interfaces/create-organization-options.interface.cjs';
+import '../organizations/interfaces/domain-data.interface.cjs';
+import '../organizations/interfaces/feature-flag.interface.cjs';
+import '../organizations/interfaces/list-organization-feature-flags-options.interface.cjs';
+import '../organizations/interfaces/list-organizations-options.interface.cjs';
+import '../organizations/interfaces/update-organization-options.interface.cjs';
+import '../organizations/interfaces/list-organization-roles-options.interface.cjs';
+import '../organization-domains/interfaces/create-organization-domain-options.interface.cjs';
+import '../passwordless/interfaces/passwordless-session.interface.cjs';
+import '../passwordless/interfaces/create-passwordless-session-options.interface.cjs';
+import '../passwordless/interfaces/send-session-response.interface.cjs';
+import '../portal/interfaces/generate-portal-link-intent.interface.cjs';
+import '../common/interfaces/unknown-record.interface.cjs';
+import '../sso/interfaces/authorization-url-options.interface.cjs';
+import '../sso/interfaces/get-profile-options.interface.cjs';
+import '../sso/interfaces/get-profile-and-token-options.interface.cjs';
+import '../sso/interfaces/list-connections-options.interface.cjs';
+import '../sso/interfaces/profile-and-token.interface.cjs';
+import '../sso/interfaces/profile.interface.cjs';
+import '../webhooks/webhooks.cjs';
+import '../common/crypto/crypto-provider.cjs';
+import '../mfa/interfaces/challenge-factor-options.cjs';
+import '../mfa/interfaces/challenge.interface.cjs';
+import '../mfa/interfaces/enroll-factor-options.cjs';
+import '../mfa/interfaces/factor.interface.cjs';
+import '../mfa/interfaces/sms.interface.cjs';
+import '../mfa/interfaces/totp.interface.cjs';
+import '../mfa/interfaces/verify-challenge-options.cjs';
+import '../mfa/interfaces/verify-challenge-response.cjs';
+import '../audit-logs/interfaces/audit-log-export-options.interface.cjs';
+import '../audit-logs/interfaces/audit-log-export.interface.cjs';
+import '../audit-logs/interfaces/create-audit-log-event-options.interface.cjs';
+import '../audit-logs/interfaces/create-audit-log-schema-options.interface.cjs';
+import 'jose';
+import '../user-management/interfaces/authenticate-with-code-options.interface.cjs';
+import '../user-management/interfaces/authenticate-with-options-base.interface.cjs';
+import '../user-management/interfaces/authenticate-with-code-and-verifier-options.interface.cjs';
+import '../user-management/interfaces/authenticate-with-email-verification-options.interface.cjs';
+import '../user-management/interfaces/authenticate-with-magic-auth-options.interface.cjs';
+import '../user-management/interfaces/authenticate-with-organization-selection.interface.cjs';
+import '../user-management/interfaces/authenticate-with-password-options.interface.cjs';
+import '../user-management/interfaces/authenticate-with-refresh-token-options.interface.cjs';
+import '../user-management/interfaces/authenticate-with-session-cookie.interface.cjs';
+import '../user-management/interfaces/authentication-response.interface.cjs';
+import '../user-management/interfaces/oauth-tokens.interface.cjs';
+import '../user-management/interfaces/authenticate-with-totp-options.interface.cjs';
+import '../user-management/interfaces/authorization-url-options.interface.cjs';
+import '../user-management/interfaces/create-magic-auth-options.interface.cjs';
+import '../user-management/interfaces/create-organization-membership-options.interface.cjs';
+import '../user-management/interfaces/create-password-reset-options.interface.cjs';
+import '../user-management/interfaces/create-user-options.interface.cjs';
+import '../user-management/interfaces/password-hash-type.interface.cjs';
+import '../user-management/interfaces/enroll-auth-factor.interface.cjs';
+import '../user-management/interfaces/factor.interface.cjs';
+import '../user-management/interfaces/identity.interface.cjs';
+import '../user-management/interfaces/list-auth-factors-options.interface.cjs';
+import '../user-management/interfaces/list-invitations-options.interface.cjs';
+import '../user-management/interfaces/list-organization-memberships-options.interface.cjs';
+import '../user-management/interfaces/list-sessions-options.interface.cjs';
+import '../user-management/interfaces/list-users-options.interface.cjs';
+import '../user-management/interfaces/reset-password-options.interface.cjs';
+import '../user-management/interfaces/revoke-session-options.interface.cjs';
+import '../user-management/interfaces/send-invitation-options.interface.cjs';
+import '../user-management/interfaces/send-verification-email-options.interface.cjs';
+import '../user-management/interfaces/update-organization-membership-options.interface.cjs';
+import '../user-management/interfaces/update-user-options.interface.cjs';
+import '../user-management/interfaces/verify-email-options.interface.cjs';
+import '../user-management/interfaces/session-handler-options.interface.cjs';
+import '../user-management/interfaces/refresh-and-seal-session-data.interface.cjs';
+import '../fga/interfaces/check.interface.cjs';
+import '../fga/interfaces/resource.interface.cjs';
+import '../fga/interfaces/resource-op.enum.cjs';
+import '../fga/interfaces/warrant.interface.cjs';
+import '../fga/interfaces/warrant-op.enum.cjs';
+import '../fga/interfaces/check-op.enum.cjs';
+import '../fga/interfaces/warning.interface.cjs';
+import '../fga/interfaces/query.interface.cjs';
+import '../fga/interfaces/warrant-token.interface.cjs';
+import '../fga/utils/fga-paginatable.cjs';
+import '../fga/interfaces/list.interface.cjs';
+import '../common/net/http-client.cjs';
+import '../common/interfaces/http-client.interface.cjs';
+import '../widgets/interfaces/get-token.cjs';
+import '../actions/actions.cjs';
+import '../actions/interfaces/action.interface.cjs';
+import '../actions/interfaces/response-payload.interface.cjs';
+import '../directory-sync/interfaces/list-directories-options.interface.cjs';
+import '../directory-sync/interfaces/list-groups-options.interface.cjs';
+import '../directory-sync/interfaces/list-directory-users-options.interface.cjs';

package/lib/cjs/webhooks/webhooks.cjs

@@ -0,0 +1,62 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var webhooks_exports = {};
+__export(webhooks_exports, {
+  Webhooks: () => Webhooks
+});
+module.exports = __toCommonJS(webhooks_exports);
+var import_serializers = require('../common/serializers/index.cjs');
+var import_signature_provider = require('../common/crypto/signature-provider.cjs');
+class Webhooks {
+  static {
+    __name(this, "Webhooks");
+  }
+  signatureProvider;
+  constructor(cryptoProvider) {
+    this.signatureProvider = new import_signature_provider.SignatureProvider(cryptoProvider);
+  }
+  get verifyHeader() {
+    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);
+  }
+  get computeSignature() {
+    return this.signatureProvider.computeSignature.bind(this.signatureProvider);
+  }
+  get getTimestampAndSignatureHash() {
+    return this.signatureProvider.getTimestampAndSignatureHash.bind(
+      this.signatureProvider
+    );
+  }
+  async constructEvent({
+    payload,
+    sigHeader,
+    secret,
+    tolerance = 18e4
+  }) {
+    const options = { payload, sigHeader, secret, tolerance };
+    await this.verifyHeader(options);
+    const webhookPayload = payload;
+    return (0, import_serializers.deserializeEvent)(webhookPayload);
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  Webhooks
+});
+//# sourceMappingURL=webhooks.cjs.map

package/lib/cjs/webhooks/webhooks.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/webhooks/webhooks.ts"],"sourcesContent":["import { deserializeEvent } from '../common/serializers';\nimport { Event, EventResponse } from '../common/interfaces';\nimport { SignatureProvider } from '../common/crypto/signature-provider';\nimport { CryptoProvider } from '../common/crypto/crypto-provider';\n\nexport class Webhooks {\n  private signatureProvider: SignatureProvider;\n\n  constructor(cryptoProvider: CryptoProvider) {\n    this.signatureProvider = new SignatureProvider(cryptoProvider);\n  }\n\n  get verifyHeader() {\n    return this.signatureProvider.verifyHeader.bind(this.signatureProvider);\n  }\n\n  get computeSignature() {\n    return this.signatureProvider.computeSignature.bind(this.signatureProvider);\n  }\n\n  get getTimestampAndSignatureHash() {\n    return this.signatureProvider.getTimestampAndSignatureHash.bind(\n      this.signatureProvider,\n    );\n  }\n\n  async constructEvent({\n    payload,\n    sigHeader,\n    secret,\n    tolerance = 180000,\n  }: {\n    payload: Record<string, unknown>;\n    sigHeader: string;\n    secret: string;\n    tolerance?: number;\n  }): Promise<Event> {\n    const options = { payload, sigHeader, secret, tolerance };\n    await this.verifyHeader(options);\n\n    const webhookPayload = payload as unknown as EventResponse;\n\n    return deserializeEvent(webhookPayload);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAiC;AAEjC,gCAAkC;AAG3B,MAAM,SAAS;AAAA,EALtB,OAKsB;AAAA;AAAA;AAAA,EACZ;AAAA,EAER,YAAY,gBAAgC;AAC1C,SAAK,oBAAoB,IAAI,4CAAkB,cAAc;AAAA,EAC/D;AAAA,EAEA,IAAI,eAAe;AACjB,WAAO,KAAK,kBAAkB,aAAa,KAAK,KAAK,iBAAiB;AAAA,EACxE;AAAA,EAEA,IAAI,mBAAmB;AACrB,WAAO,KAAK,kBAAkB,iBAAiB,KAAK,KAAK,iBAAiB;AAAA,EAC5E;AAAA,EAEA,IAAI,+BAA+B;AACjC,WAAO,KAAK,kBAAkB,6BAA6B;AAAA,MACzD,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EAEA,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GAKmB;AACjB,UAAM,UAAU,EAAE,SAAS,WAAW,QAAQ,UAAU;AACxD,UAAM,KAAK,aAAa,OAAO;AAE/B,UAAM,iBAAiB;AAEvB,eAAO,qCAAiB,cAAc;AAAA,EACxC;AACF;","names":[]}