diffio 0.1.1 → 0.1.2

package/README.md

@@ -17,17 +17,11 @@ npm install
 
 ## Configuration
 
-Set the API key with `DIFFIO_API_KEY`. You can also override the base URL with `DIFFIO_API_BASE_URL`.
+Set the API key with `DIFFIO_API_KEY`. If you need to set the base URL explicitly, use the production endpoint with `DIFFIO_API_BASE_URL`.
 
 ```bash
 export DIFFIO_API_KEY="diffio_live_..."
-export DIFFIO_API_BASE_URL="https://us-central1-diffioai.cloudfunctions.net"
-```
-
-For emulators, set the base URL to the Functions emulator host.
-
-```bash
-export DIFFIO_API_BASE_URL="http://127.0.0.1:5001/diffioai/us-central1"
+export DIFFIO_API_BASE_URL="https://us-central1-diffioai.cloudfunctions.net/v1"
 ```
 
 ## Request options
@@ -166,16 +160,6 @@ for (const generation of generations.generations) {
 }
 ```
 
-## Webhooks portal access
-
-```ts
-import { DiffioClient } from "diffio";
-
-const client = new DiffioClient({ apiKey: "diffio_live_..." });
-const portal = await client.webhooks.getPortalAccess({ mode: "test" });
-console.log(portal.portalUrl);
-```
-
 ## Send a test webhook event
 
 ```ts
@@ -184,13 +168,46 @@ import { DiffioClient } from "diffio";
 const client = new DiffioClient({ apiKey: "diffio_live_..." });
 const event = await client.webhooks.sendTestEvent({
   eventType: "generation.completed",
-  mode: "test",
+  mode: "live",
   samplePayload: { apiProjectId: "proj_123" }
 });
 
 console.log(event.svixMessageId);
 ```
 
+## Verify webhook signatures
+
+Use the raw request body (not parsed JSON) plus the `svix-*` headers and your webhook signing secret.
+
+```ts
+import express from "express";
+import { DiffioClient } from "diffio";
+
+const app = express();
+const client = new DiffioClient({ apiKey: process.env.DIFFIO_API_KEY });
+
+app.post("/webhooks/diffio", express.raw({ type: "application/json" }), (req, res) => {
+  const payload = req.body;
+  const headers = {
+    "svix-id": req.header("svix-id"),
+    "svix-timestamp": req.header("svix-timestamp"),
+    "svix-signature": req.header("svix-signature")
+  };
+
+  try {
+    const event = client.webhooks.verifySignature({
+      payload,
+      headers,
+      secret: process.env.DIFFIO_WEBHOOK_SECRET
+    });
+    console.log("Webhook received", event.eventType);
+    res.status(200).send("ok");
+  } catch (err) {
+    res.status(400).send("Invalid signature");
+  }
+});
+```
+
 ## Runtime compatibility
 
 Use Node 18 or later so `fetch` is available without extra packages.

package/dist/Client.d.ts

@@ -1,5 +1,5 @@
 import type { BaseClientOptions, BaseRequestOptions, NormalizedClientOptions } from "./BaseClient";
-import type { AudioIsolationResult, CreateGenerationResponse, CreateProjectResponse, GenerationDownloadResponse, GenerationProgressResponse, ListProjectGenerationsResponse, ListProjectsResponse, RestoreMetadata, WebhookPortalResponse, WebhookTestEventResponse } from "./api/types";
+import type { AudioIsolationResult, CreateGenerationResponse, CreateProjectResponse, GenerationDownloadResponse, GenerationProgressResponse, ListProjectGenerationsResponse, ListProjectsResponse, RestoreMetadata, WebhookTestEventResponse } from "./api/types";
 import { AudioIsolationClient, GenerationsClient, ProjectsClient, WebhooksClient } from "./api/resources";
 export declare namespace DiffioClient {
     type Options = BaseClientOptions;
@@ -58,11 +58,6 @@ export declare class DiffioClient {
         downloadType?: string;
         requestOptions?: DiffioClient.RequestOptions;
     }): Promise<GenerationDownloadResponse>;
-    getWebhooksPortalAccess(options: {
-        mode: string;
-        apiKeyId?: string;
-        requestOptions?: DiffioClient.RequestOptions;
-    }): Promise<WebhookPortalResponse>;
     sendWebhookTestEvent(options: {
         eventType: string;
         mode: string;

package/dist/Client.js

@@ -207,18 +207,6 @@ class DiffioClient {
         const response = await this._requestJson("POST", "get_generation_download", payload, requestOptions);
         return (0, serialization_1.parseGenerationDownloadResponse)(response);
     }
-    async getWebhooksPortalAccess(options) {
-        const { mode, apiKeyId, requestOptions } = options;
-        if (!WEBHOOK_MODES.includes(mode)) {
-            throw new errors_1.DiffioApiError("mode must be test or live");
-        }
-        const payload = { mode };
-        if (apiKeyId != null) {
-            payload.apiKeyId = apiKeyId;
-        }
-        const response = await this._requestJson("POST", "webhooks/app_portal_access", payload, requestOptions);
-        return (0, serialization_1.parseWebhookPortalResponse)(response);
-    }
     async sendWebhookTestEvent(options) {
         const { eventType, mode, apiKeyId, samplePayload, requestOptions } = options;
         if (!WEBHOOK_EVENT_TYPES.includes(eventType)) {

package/dist/api/resources/webhooks/client/Client.d.ts

@@ -1,10 +1,5 @@
 import type { DiffioClient } from "../../../../Client";
-import type { WebhookPortalResponse, WebhookTestEventResponse } from "../../../types";
-export interface WebhookPortalAccessOptions {
-    mode: string;
-    apiKeyId?: string;
-    requestOptions?: DiffioClient.RequestOptions;
-}
+import type { GenerationWebhookEvent, WebhookTestEventResponse } from "../../../types";
 export interface WebhookTestEventOptions {
     eventType: string;
     mode: string;
@@ -12,9 +7,15 @@ export interface WebhookTestEventOptions {
     samplePayload?: Record<string, unknown>;
     requestOptions?: DiffioClient.RequestOptions;
 }
+export type WebhookHeaders = Record<string, string | string[] | undefined> | Headers;
+export interface WebhookVerifyOptions {
+    payload: string | Uint8Array;
+    headers: WebhookHeaders;
+    secret: string;
+}
 export declare class WebhooksClient {
     private _parent;
     constructor(parent: DiffioClient);
-    getPortalAccess(options: WebhookPortalAccessOptions): Promise<WebhookPortalResponse>;
     sendTestEvent(options: WebhookTestEventOptions): Promise<WebhookTestEventResponse>;
+    verifySignature(options: WebhookVerifyOptions): GenerationWebhookEvent;
 }

package/dist/api/resources/webhooks/client/Client.js

@@ -1,15 +1,73 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WebhooksClient = void 0;
+const errors_1 = require("../../../../errors");
+const serialization_1 = require("../../../serialization");
+const svix_1 = require("svix");
 class WebhooksClient {
     constructor(parent) {
         this._parent = parent;
     }
-    async getPortalAccess(options) {
-        return this._parent.getWebhooksPortalAccess(options);
-    }
     async sendTestEvent(options) {
         return this._parent.sendWebhookTestEvent(options);
     }
+    verifySignature(options) {
+        const { payload, headers, secret } = options;
+        if (!secret) {
+            throw new errors_1.DiffioApiError("secret is required");
+        }
+        const normalizedHeaders = normalizeSvixHeaders(headers);
+        const body = normalizePayload(payload);
+        const webhook = new svix_1.Webhook(secret);
+        try {
+            const event = webhook.verify(body, normalizedHeaders);
+            if (!event || typeof event !== "object") {
+                throw new errors_1.DiffioApiError("Webhook payload must be an object");
+            }
+            return (0, serialization_1.parseGenerationWebhookEvent)(event);
+        }
+        catch (error) {
+            if (error instanceof errors_1.DiffioApiError) {
+                throw error;
+            }
+            const message = error instanceof Error ? error.message : "Webhook signature verification failed";
+            throw new errors_1.DiffioApiError(message);
+        }
+    }
 }
 exports.WebhooksClient = WebhooksClient;
+function normalizePayload(payload) {
+    if (typeof payload === "string") {
+        return payload;
+    }
+    if (typeof Buffer !== "undefined") {
+        return Buffer.from(payload).toString("utf8");
+    }
+    return new TextDecoder().decode(payload);
+}
+function normalizeSvixHeaders(headers) {
+    const normalized = {};
+    if (typeof Headers !== "undefined" && headers instanceof Headers) {
+        for (const [key, value] of headers.entries()) {
+            normalized[key.toLowerCase()] = value;
+        }
+    }
+    else {
+        for (const [key, value] of Object.entries(headers)) {
+            if (value == null) {
+                continue;
+            }
+            normalized[key.toLowerCase()] = Array.isArray(value) ? value.join(",") : String(value);
+        }
+    }
+    const required = ["svix-id", "svix-timestamp", "svix-signature"];
+    const missing = required.filter((header) => !normalized[header]);
+    if (missing.length > 0) {
+        throw new errors_1.DiffioApiError(`Missing webhook headers: ${missing.join(", ")}`);
+    }
+    return {
+        "svix-id": normalized["svix-id"],
+        "svix-timestamp": normalized["svix-timestamp"],
+        "svix-signature": normalized["svix-signature"]
+    };
+}

package/dist/api/serialization.d.ts

@@ -1,4 +1,4 @@
-import type { AudioIsolationResult, CreateGenerationResponse, CreateProjectResponse, GenerationWebhookEvent, GenerationDownloadResponse, GenerationProgressResponse, GenerationProgressStage, ListProjectGenerationsResponse, ListProjectsResponse, ProjectGenerationSummary, ProjectSummary, WebhookPortalResponse, WebhookTestEventResponse } from "./types";
+import type { AudioIsolationResult, CreateGenerationResponse, CreateProjectResponse, GenerationWebhookEvent, GenerationDownloadResponse, GenerationProgressResponse, GenerationProgressStage, ListProjectGenerationsResponse, ListProjectsResponse, ProjectGenerationSummary, ProjectSummary, WebhookTestEventResponse } from "./types";
 export declare function parseCreateProjectResponse(data: any): CreateProjectResponse;
 export declare function parseProjectSummary(data: any): ProjectSummary;
 export declare function parseListProjectsResponse(data: any): ListProjectsResponse;
@@ -8,7 +8,6 @@ export declare function parseListProjectGenerationsResponse(data: any): ListProj
 export declare function parseGenerationProgressStage(data: any): GenerationProgressStage;
 export declare function parseGenerationProgressResponse(data: any): GenerationProgressResponse;
 export declare function parseGenerationDownloadResponse(data: any): GenerationDownloadResponse;
-export declare function parseWebhookPortalResponse(data: any): WebhookPortalResponse;
 export declare function parseWebhookTestEventResponse(data: any): WebhookTestEventResponse;
 export declare function parseGenerationWebhookEvent(data: any): GenerationWebhookEvent;
 export declare function createAudioIsolationResult(project: CreateProjectResponse, generation: CreateGenerationResponse): AudioIsolationResult;

package/dist/api/serialization.js

@@ -9,7 +9,6 @@ exports.parseListProjectGenerationsResponse = parseListProjectGenerationsRespons
 exports.parseGenerationProgressStage = parseGenerationProgressStage;
 exports.parseGenerationProgressResponse = parseGenerationProgressResponse;
 exports.parseGenerationDownloadResponse = parseGenerationDownloadResponse;
-exports.parseWebhookPortalResponse = parseWebhookPortalResponse;
 exports.parseWebhookTestEventResponse = parseWebhookTestEventResponse;
 exports.parseGenerationWebhookEvent = parseGenerationWebhookEvent;
 exports.createAudioIsolationResult = createAudioIsolationResult;
@@ -102,13 +101,6 @@ function parseGenerationDownloadResponse(data) {
         mimeType: data.mimeType
     };
 }
-function parseWebhookPortalResponse(data) {
-    return {
-        portalUrl: data.portalUrl,
-        mode: data.mode ?? null,
-        apiKeyId: data.apiKeyId ?? null
-    };
-}
 function parseWebhookTestEventResponse(data) {
     return {
         svixMessageId: data.svixMessageId,

package/dist/api/types.d.ts

@@ -76,11 +76,6 @@ export interface AudioIsolationResult {
     project: CreateProjectResponse;
     generation: CreateGenerationResponse;
 }
-export interface WebhookPortalResponse {
-    portalUrl: string;
-    mode?: WebhookMode | string | null;
-    apiKeyId?: string | null;
-}
 export interface WebhookTestEventResponse {
     svixMessageId: string;
     eventId: string;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const DIFFIO_SDK_VERSION = "0.1.0";
+export declare const DIFFIO_SDK_VERSION = "0.1.2";

package/dist/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DIFFIO_SDK_VERSION = void 0;
-exports.DIFFIO_SDK_VERSION = "0.1.0";
+exports.DIFFIO_SDK_VERSION = "0.1.2";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "diffio",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Diffio API client for Node.js",
   "repository": {
     "type": "git",
@@ -22,7 +22,8 @@
     "test:wire": "jest --selectProjects wire"
   },
   "dependencies": {
-    "mime-types": "^2.1.35"
+    "mime-types": "^2.1.35",
+    "svix": "^1.84.1"
   },
   "devDependencies": {
     "@types/jest": "^29.5.14",