hooklatch 0.0.0-stage → 1.0.0

package/dist/internal/bytes.js

@@ -0,0 +1,38 @@
+export function utf8(value) { return new TextEncoder().encode(value); }
+export function concatBytes(...chunks) {
+    const output = new Uint8Array(chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0));
+    let offset = 0;
+    for (const chunk of chunks) {
+        output.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return output;
+}
+export function decodeHex(value) {
+    if (value.length % 2 !== 0 || !/^[\da-f]*$/i.test(value))
+        return null;
+    const output = new Uint8Array(value.length / 2);
+    for (let i = 0; i < output.length; i += 1)
+        output[i] = Number.parseInt(value.slice(i * 2, i * 2 + 2), 16);
+    return output;
+}
+export function decodeBase64(value) {
+    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(value))
+        return null;
+    const unpadded = value.replace(/=+$/, '');
+    if (unpadded.length % 4 === 1)
+        return null;
+    const padded = unpadded + '='.repeat((4 - unpadded.length % 4) % 4);
+    if (value.includes('=') && value !== padded)
+        return null;
+    try {
+        const binary = atob(padded);
+        if (btoa(binary) !== padded)
+            return null;
+        return Uint8Array.from(binary, (char) => char.charCodeAt(0));
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=bytes.js.map

package/dist/internal/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../../src/internal/bytes.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,IAAI,CAAC,KAAa,IAAgB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE3F,MAAM,UAAU,WAAW,CAAC,GAAG,MAAoB;IACjD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAAC,CAAC;IAEtF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE1G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAEpE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5B,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzC,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC"}

package/dist/internal/crypto.d.ts

@@ -0,0 +1,4 @@
+import type { HmacPolicy } from './provider.js';
+export declare function verifyHmac(keys: readonly Uint8Array[], signatures: readonly Uint8Array[], content: Uint8Array, policy?: HmacPolicy): Promise<boolean>;
+export declare function verifyEd25519(keys: readonly Uint8Array[], signatures: readonly Uint8Array[], content: Uint8Array): Promise<boolean>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/internal/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/internal/crypto.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAMhD,wBAAsB,UAAU,CAC9B,IAAI,EAAE,SAAS,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,UAAU,EAAE,EAAE,OAAO,EAAE,UAAU,EACnF,MAAM,GAAE,UAAkE,GACzE,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,SAAS,UAAU,EAAE,EAAE,UAAU,EAAE,SAAS,UAAU,EAAE,EAAE,OAAO,EAAE,UAAU,GAClF,OAAO,CAAC,OAAO,CAAC,CAsBlB"}

package/dist/internal/crypto.js

@@ -0,0 +1,49 @@
+import { HooklatchError } from '../errors.js';
+function isUnsupported(error) {
+    return error !== null && typeof error === 'object' && 'name' in error && error.name === 'NotSupportedError';
+}
+export async function verifyHmac(keys, signatures, content, policy = { kind: 'hmac', hash: 'SHA-256', signatureBytes: 32 }) {
+    const subtle = globalThis.crypto?.subtle;
+    if (!subtle)
+        throw new HooklatchError('crypto-unavailable', 'Web Crypto is unavailable.');
+    try {
+        for (const bytes of keys) {
+            const key = await subtle.importKey('raw', new Uint8Array(bytes), { name: 'HMAC', hash: policy.hash }, false, ['verify']);
+            for (const signature of signatures) {
+                if (signature.byteLength !== policy.signatureBytes)
+                    continue;
+                if (await subtle.verify('HMAC', key, new Uint8Array(signature), new Uint8Array(content)))
+                    return true;
+            }
+        }
+        return false;
+    }
+    catch (error) {
+        if (isUnsupported(error))
+            throw new HooklatchError('crypto-unavailable', 'Web Crypto is unavailable.');
+        throw new HooklatchError('internal', 'Cryptographic verification failed.');
+    }
+}
+export async function verifyEd25519(keys, signatures, content) {
+    const subtle = globalThis.crypto?.subtle;
+    if (!subtle)
+        throw new HooklatchError('crypto-unavailable', 'Web Crypto is unavailable.');
+    try {
+        for (const bytes of keys) {
+            const key = await subtle.importKey('raw', new Uint8Array(bytes), 'Ed25519', false, ['verify']);
+            for (const signature of signatures) {
+                if (signature.byteLength !== 64)
+                    continue;
+                if (await subtle.verify('Ed25519', key, new Uint8Array(signature), new Uint8Array(content)))
+                    return true;
+            }
+        }
+        return false;
+    }
+    catch (error) {
+        if (isUnsupported(error))
+            throw new HooklatchError('crypto-unavailable', 'Web Crypto is unavailable.');
+        throw new HooklatchError('internal', 'Cryptographic verification failed.');
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/internal/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/internal/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC;AAC9G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAA2B,EAAE,UAAiC,EAAE,OAAmB,EACnF,SAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE;IAE1E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IAEzC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;IAE1F,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAEzH,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,cAAc;oBAAE,SAAS;gBAE7D,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;YACxG,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;QAEvG,MAAM,IAAI,cAAc,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA2B,EAAE,UAAiC,EAAE,OAAmB;IAEnF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IAEzC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;IAE1F,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAE/F,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,UAAU,KAAK,EAAE;oBAAE,SAAS;gBAE1C,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;YAC3G,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;QAEvG,MAAM,IAAI,cAAc,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC"}

package/dist/internal/headers.d.ts

@@ -0,0 +1,3 @@
+import type { HeaderInput } from '../types.js';
+export declare function normalizeHeaders(input: HeaderInput, opaqueValues?: boolean): Map<string, string>;
+//# sourceMappingURL=headers.d.ts.map

package/dist/internal/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/internal/headers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA4B/C,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,UAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CA0C9F"}

package/dist/internal/headers.js

@@ -0,0 +1,70 @@
+import { HooklatchError } from '../errors.js';
+function isHeaderName(name) {
+    return typeof name === 'string' && /^[!#$%&'*+.^_`|~\da-z-]+$/i.test(name);
+}
+function isHeaderValue(value, opaque) {
+    return typeof value === 'string' && (opaque || !/[\r\n\0]/.test(value));
+}
+function isHeaderRecord(input) {
+    return input !== null && typeof input === 'object';
+}
+function isHeaderValues(value) {
+    return Array.isArray(value);
+}
+/** Opaque values are used only by fal so its signed-field grammar owns rejection. */
+const FAL_HEADER_NAMES = new Set([
+    'x-fal-webhook-signature', 'x-fal-webhook-request-id',
+    'x-fal-webhook-user-id', 'x-fal-webhook-timestamp',
+]);
+function isFalHeaderName(name) {
+    return typeof name === 'string' && FAL_HEADER_NAMES.has(name.toLowerCase());
+}
+export function normalizeHeaders(input, opaqueValues = false) {
+    const result = new Map();
+    const invalid = () => { throw new HooklatchError('invalid-input', 'Invalid header input.'); };
+    const append = (name, value) => {
+        if (opaqueValues && !isFalHeaderName(name))
+            return;
+        if (!isHeaderName(name) || !isHeaderValue(value, opaqueValues))
+            invalid();
+        const key = name.toLowerCase();
+        const previous = result.get(key);
+        result.set(key, previous === undefined ? value : `${previous}, ${value}`);
+    };
+    if (input instanceof Headers) {
+        input.forEach((value, key) => append(key, value));
+    }
+    else if (Array.isArray(input)) {
+        for (const entry of input) {
+            if (!Array.isArray(entry) || entry.length !== 2)
+                invalid();
+            append(entry[0], entry[1]);
+        }
+    }
+    else if (isHeaderRecord(input)) {
+        const entries = [];
+        if (opaqueValues) {
+            for (const key of Object.keys(input)) {
+                if (isFalHeaderName(key))
+                    entries.push([key, input[key]]);
+            }
+        }
+        else
+            entries.push(...Object.entries(input));
+        for (const [key, value] of entries) {
+            if (value === undefined)
+                continue;
+            if (isHeaderValues(value)) {
+                for (const item of value)
+                    append(key, item);
+            }
+            else {
+                append(key, value);
+            }
+        }
+    }
+    else
+        invalid();
+    return result;
+}
+//# sourceMappingURL=headers.js.map

package/dist/internal/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../src/internal/headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,MAAe;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,KAAkB;IACxC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAiC;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,yBAAyB,EAAE,0BAA0B;IACrD,uBAAuB,EAAE,yBAAyB;CACnD,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,YAAY,GAAG,KAAK;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,OAAO,GAAG,GAAU,EAAE,GAAG,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;IAErG,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAa,EAAQ,EAAE;QACnD,IAAI,YAAY,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO;QAEnD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC;YAAE,OAAO,EAAE,CAAC;QAE1E,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC3D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;SAAM,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,OAAO,GAAuD,EAAE,CAAC;QAEvE,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,IAAI,eAAe,CAAC,GAAG,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;;YAAM,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAE9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAElC,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,KAAK,MAAM,IAAI,IAAI,KAAK;oBAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;;QAAM,OAAO,EAAE,CAAC;IAEjB,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/internal/options.d.ts

@@ -0,0 +1,8 @@
+import type { VerifyOptions } from '../types.js';
+export type NormalizedOptions = VerifyOptions & {
+    readonly toleranceSeconds: number;
+    readonly maxBodyBytes: number;
+    readonly now: () => number;
+};
+export declare function normalizeOptions(options: VerifyOptions): NormalizedOptions;
+//# sourceMappingURL=options.d.ts.map

package/dist/internal/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/internal/options.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAoB,MAAM,aAAa,CAAC;AAInE,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B,CAAC;AAuFF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,iBAAiB,CA6D1E"}

package/dist/internal/options.js

@@ -0,0 +1,128 @@
+import { HooklatchError } from '../errors.js';
+import { SUPPORTED_PROVIDERS } from '../providers/index.js';
+import { snapshotGrafanaOptions, snapshotPolarOptions } from './provider-options.js';
+function isOptionsObject(options) {
+    return options !== null && typeof options === 'object' && !Array.isArray(options);
+}
+function isNonEmptySecret(secret) {
+    return typeof secret === 'string' && secret.length > 0;
+}
+function isClock(now) {
+    return typeof now === 'function';
+}
+function invalidOptions() {
+    throw new HooklatchError('invalid-options', 'Invalid verification options.');
+}
+function isUserId(value) {
+    return typeof value === 'string' && /^[\x21-\x2b\x2d-\x7e]{1,1024}$/.test(value);
+}
+/** Data descriptors avoid invoking credential accessors, including non-enumerable ones. */
+function ownData(options, name) {
+    const property = observe(() => Object.getOwnPropertyDescriptor(options, name));
+    if (!property || !Object.hasOwn(property, 'value'))
+        invalidOptions();
+    return property;
+}
+function isKeyArray(value) {
+    return Array.isArray(value);
+}
+function snapshotFal(options) {
+    for (const field of ['secrets', 'secret', 'providerOptions']) {
+        if (observe(() => Object.hasOwn(options, field)))
+            invalidOptions();
+    }
+    const input = ownData(options, 'publicKeys').value;
+    const expectedUserId = ownData(options, 'expectedUserId').value;
+    if (!isUserId(expectedUserId))
+        invalidOptions();
+    const values = observe(() => {
+        if (!isKeyArray(input))
+            invalidOptions();
+        return input;
+    });
+    const length = observe(() => values.length);
+    if (!Number.isSafeInteger(length) || length < 1 || length > 16)
+        invalidOptions();
+    const publicKeys = [];
+    for (let index = 0; index < length; index++) {
+        const key = ownData(values, String(index)).value;
+        publicKeys.push(observe(() => {
+            if (!(key instanceof Uint8Array))
+                invalidOptions();
+            const bytes = new Uint8Array(32);
+            let offset = 0;
+            // The intrinsic iterator reads real view bytes and rejects proxies/detached views.
+            // Stop at byte 33 so malformed configuration cannot allocate an oversized copy.
+            for (const byte of Uint8Array.prototype.values.call(key)) {
+                if (offset === 32)
+                    invalidOptions();
+                bytes[offset++] = byte;
+            }
+            if (offset !== 32)
+                invalidOptions();
+            return bytes;
+        }));
+    }
+    return { publicKeys, expectedUserId };
+}
+/** Only observations of caller-owned data are caught; authored errors retain their codes. */
+function observe(read) {
+    try {
+        return read();
+    }
+    catch {
+        return invalidOptions();
+    }
+}
+export function normalizeOptions(options) {
+    if (!observe(() => isOptionsObject(options)))
+        invalidOptions();
+    const provider = observe(() => options.provider);
+    if (!SUPPORTED_PROVIDERS.includes(provider)) {
+        throw new HooklatchError('unknown-provider', 'Unsupported webhook provider.');
+    }
+    const fal = provider === 'fal' ? snapshotFal(options) : undefined;
+    const secrets = provider === 'fal' ? [] : observe(() => options.secrets);
+    if (provider !== 'fal' && (!observe(() => Array.isArray(secrets)) || observe(() => secrets?.length) === 0)) {
+        throw new HooklatchError('missing-secrets', 'At least one signing secret is required.');
+    }
+    const secretSnapshot = observe(() => [...(secrets ?? [])]);
+    if (secretSnapshot.some((secret) => !isNonEmptySecret(secret))) {
+        throw new HooklatchError('invalid-secret', 'Invalid signing secret.');
+    }
+    const supplied = observe(() => Object.hasOwn(options, 'providerOptions'));
+    const configured = supplied ? observe(() => options.providerOptions) : undefined;
+    if (supplied && configured === undefined)
+        invalidOptions();
+    if (provider !== 'grafana' && provider !== 'polar' && supplied)
+        invalidOptions();
+    if (provider === 'vercel' && observe(() => Object.hasOwn(options, 'publicKeys') || Object.hasOwn(options, 'expectedUserId')))
+        invalidOptions();
+    const grafana = provider === 'grafana' ? observe(() => snapshotGrafanaOptions(configured)) : undefined;
+    const polar = provider === 'polar' && supplied ? observe(() => snapshotPolarOptions(configured)) : undefined;
+    const defaultTolerance = provider === 'paddle' ? 5 : provider === 'workos' ? 180 : 300;
+    const toleranceSeconds = observe(() => options.toleranceSeconds) ?? defaultTolerance;
+    const maxBodyBytes = observe(() => options.maxBodyBytes) ?? 1048576;
+    const now = observe(() => options.now);
+    if (!Number.isFinite(toleranceSeconds) || toleranceSeconds < 0
+        || !Number.isSafeInteger(maxBodyBytes) || maxBodyBytes <= 0
+        || (now !== undefined && !isClock(now)))
+        invalidOptions();
+    const common = { toleranceSeconds, maxBodyBytes,
+        now: now ?? (() => (provider === 'workos' || provider === 'sanity') ? Date.now() / 1000 : Math.floor(Date.now() / 1000)) };
+    if (provider === 'fal') {
+        if (fal === undefined)
+            invalidOptions();
+        return { ...common, provider, ...fal };
+    }
+    const hmac = { ...common, secrets: secretSnapshot };
+    if (provider === 'grafana') {
+        if (grafana === undefined)
+            invalidOptions();
+        return { ...hmac, provider, providerOptions: grafana };
+    }
+    if (provider === 'polar')
+        return { ...hmac, provider, ...(polar !== undefined && { providerOptions: polar }) };
+    return { ...hmac, provider };
+}
+//# sourceMappingURL=options.js.map

package/dist/internal/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/internal/options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAWrF,SAAS,eAAe,CAAC,OAAsB;IAC7C,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,OAAO,CAAC,GAAyB;IACxC,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC;AACnC,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,2FAA2F;AAC3F,SAAS,OAAO,CAAC,OAA2C,EAAE,IAAY;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAE/E,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,cAAc,EAAE,CAAC;IAErE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IACzC,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC7D,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAE,cAAc,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,KAAK,GAAY,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC;IAC5D,MAAM,cAAc,GAAY,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,KAAK,CAAC;IAEzE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,cAAc,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE;QAC1B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,cAAc,EAAE,CAAC;QAEzC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE;QAAE,cAAc,EAAE,CAAC;IACjF,MAAM,UAAU,GAAiB,EAAE,CAAC;IAEpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAY,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAE1D,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC;gBAAE,cAAc,EAAE,CAAC;YAEnD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,MAAM,GAAG,CAAC,CAAC;YAEf,mFAAmF;YACnF,gFAAgF;YAChF,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzD,IAAI,MAAM,KAAK,EAAE;oBAAE,cAAc,EAAE,CAAC;gBACpC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;YACzB,CAAC;YAED,IAAI,MAAM,KAAK,EAAE;gBAAE,cAAc,EAAE,CAAC;YAEpC,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AACxC,CAAC;AAED,6FAA6F;AAC7F,SAAS,OAAO,CAAQ,IAAiB;IACvC,IAAI,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;IAAC,CAAC;IACtB,MAAM,CAAC;QAAC,OAAO,cAAc,EAAE,CAAC;IAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAsB;IACrD,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAAE,cAAc,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEjD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,cAAc,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,MAAM,OAAO,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzE,IAAI,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3D,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjF,IAAI,QAAQ,IAAI,UAAU,KAAK,SAAS;QAAE,cAAc,EAAE,CAAC;IAE3D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ;QAAE,cAAc,EAAE,CAAC;IAEjF,IAAI,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAAE,cAAc,EAAE,CAAC;IAE/I,MAAM,OAAO,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7G,MAAM,gBAAgB,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACvF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,CAAC;IACrF,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;WACzD,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC;WACxD,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAE,cAAc,EAAE,CAAC;IAE5D,MAAM,MAAM,GAAG,EAAE,gBAAgB,EAAE,YAAY;QAC7C,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;IAE7H,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,SAAS;YAAE,cAAc,EAAE,CAAC;QAExC,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAEpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,SAAS;YAAE,cAAc,EAAE,CAAC;QAE5C,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAE/G,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/internal/prepare.d.ts

@@ -0,0 +1,5 @@
+import type { VerifyOptions } from '../types.js';
+import type { PreparedVerifier } from './verification.js';
+/** Shared preparation validates and snapshots trusted options before any request body is read. */
+export declare function prepareVerification(options: VerifyOptions): PreparedVerifier;
+//# sourceMappingURL=prepare.d.ts.map

package/dist/internal/prepare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare.d.ts","sourceRoot":"","sources":["../../src/internal/prepare.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB,CAI5E"}

package/dist/internal/prepare.js

@@ -0,0 +1,9 @@
+import { getProviderDescriptor } from '../providers/index.js';
+import { normalizeOptions } from './options.js';
+import { prepareVerifier } from './verification.js';
+/** Shared preparation validates and snapshots trusted options before any request body is read. */
+export function prepareVerification(options) {
+    const normalized = normalizeOptions(options);
+    return prepareVerifier(normalized, getProviderDescriptor(normalized.provider, normalized.providerOptions));
+}
+//# sourceMappingURL=prepare.js.map

package/dist/internal/prepare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare.js","sourceRoot":"","sources":["../../src/internal/prepare.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE7C,OAAO,eAAe,CAAC,UAAU,EAAE,qBAAqB,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;AAC7G,CAAC"}

package/dist/internal/provider-options.d.ts

@@ -0,0 +1,7 @@
+import type { GrafanaOptions, PolarOptions } from '../types.js';
+type Configuration = GrafanaOptions | PolarOptions;
+/** Read selected own properties exactly once, before validation or asynchronous work. */
+export declare function snapshotGrafanaOptions(value: Configuration | undefined): GrafanaOptions;
+export declare function snapshotPolarOptions(value: Configuration | undefined): PolarOptions;
+export {};
+//# sourceMappingURL=provider-options.d.ts.map

package/dist/internal/provider-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-options.d.ts","sourceRoot":"","sources":["../../src/internal/provider-options.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhE,KAAK,aAAa,GAAG,cAAc,GAAG,YAAY,CAAC;AAoBnD,yFAAyF;AACzF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,cAAc,CAqCvF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAYnF"}

package/dist/internal/provider-options.js

@@ -0,0 +1,69 @@
+import { HooklatchError } from '../errors.js';
+import { createGrafanaDescriptor } from '../providers/grafana.js';
+function invalidOptions() {
+    throw new HooklatchError('invalid-options', 'Invalid provider options.');
+}
+function isConfiguration(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isString(value) {
+    return typeof value === 'string';
+}
+function rejectUnexpectedKeys(value, allowed) {
+    for (const key of Reflect.ownKeys(value)) {
+        if (Object.getOwnPropertyDescriptor(value, key)?.enumerable && !allowed.some((name) => name === key))
+            invalidOptions();
+    }
+}
+/** Read selected own properties exactly once, before validation or asynchronous work. */
+export function snapshotGrafanaOptions(value) {
+    if (!isConfiguration(value))
+        invalidOptions();
+    rejectUnexpectedKeys(value, ['mode', 'signatureHeader', 'timestampHeader']);
+    if (!Object.hasOwn(value, 'mode') || !('mode' in value))
+        invalidOptions();
+    const mode = value.mode;
+    const hasSignature = Object.hasOwn(value, 'signatureHeader');
+    const signature = hasSignature && 'signatureHeader' in value ? value.signatureHeader : undefined;
+    if (hasSignature && !isString(signature))
+        invalidOptions();
+    const signatureOptions = signature !== undefined ? { signatureHeader: signature } : {};
+    let snapshot;
+    if (mode === 'body') {
+        if (Object.hasOwn(value, 'timestampHeader'))
+            invalidOptions();
+        snapshot = { mode, ...signatureOptions };
+    }
+    else if (mode === 'timestamped') {
+        if (!Object.hasOwn(value, 'timestampHeader') || !('timestampHeader' in value))
+            invalidOptions();
+        const timestamp = value.timestampHeader;
+        if (!isString(timestamp))
+            invalidOptions();
+        snapshot = { mode, ...signatureOptions, timestampHeader: timestamp };
+    }
+    else {
+        return invalidOptions();
+    }
+    // The pure factory remains the authority for RFC field names, reservations and collisions.
+    createGrafanaDescriptor(snapshot);
+    // Validate original code points first: Unicode case conversion can produce ASCII.
+    const normalizedSignature = signature !== undefined ? { signatureHeader: signature.toLowerCase() } : {};
+    return snapshot.mode === 'body'
+        ? { mode: snapshot.mode, ...normalizedSignature }
+        : { mode: snapshot.mode, ...normalizedSignature, timestampHeader: snapshot.timestampHeader.toLowerCase() };
+}
+export function snapshotPolarOptions(value) {
+    if (!isConfiguration(value))
+        invalidOptions();
+    rejectUnexpectedKeys(value, ['secretMode']);
+    if (!Object.hasOwn(value, 'secretMode'))
+        return {};
+    if (!('secretMode' in value))
+        invalidOptions();
+    const secretMode = value.secretMode;
+    if (secretMode !== 'current' && secretMode !== 'legacy')
+        invalidOptions();
+    return { secretMode };
+}
+//# sourceMappingURL=provider-options.js.map

package/dist/internal/provider-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-options.js","sourceRoot":"","sources":["../../src/internal/provider-options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAKlE,SAAS,cAAc;IACrB,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,KAAgC;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAoB,EAAE,OAA0B;IAC5E,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,cAAc,EAAE,CAAC;IACzH,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,sBAAsB,CAAC,KAAgC;IACrE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,cAAc,EAAE,CAAC;IAC9C,oBAAoB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAE5E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,cAAc,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,YAAY,IAAI,iBAAiB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjG,IAAI,YAAY,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,cAAc,EAAE,CAAC;IAC3D,MAAM,gBAAgB,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,IAAI,QAAwB,CAAC;IAE7B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC;YAAE,cAAc,EAAE,CAAC;QAE9D,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC3C,CAAC;SAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,iBAAiB,IAAI,KAAK,CAAC;YAAE,cAAc,EAAE,CAAC;QAChG,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC;QAExC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,cAAc,EAAE,CAAC;QAE3C,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,gBAAgB,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC;IAED,2FAA2F;IAC3F,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAElC,kFAAkF;IAClF,MAAM,mBAAmB,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAExG,OAAO,QAAQ,CAAC,IAAI,KAAK,MAAM;QAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,mBAAmB,EAAE;QACjD,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,mBAAmB,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;QAAE,cAAc,EAAE,CAAC;IAC9C,oBAAoB,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAE5C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnD,IAAI,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC;QAAE,cAAc,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAEpC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,QAAQ;QAAE,cAAc,EAAE,CAAC;IAE1E,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC"}

package/dist/internal/provider.d.ts

@@ -0,0 +1,40 @@
+import type { EventIdentity, FailureDetails, Provider } from '../types.js';
+export type NormalizedHeaders = ReadonlyMap<string, string>;
+export interface ParsedSignature {
+    readonly ok: true;
+    readonly signatures: readonly Uint8Array[];
+    readonly signedContent: Uint8Array;
+    /** Untrusted until core signature verification succeeds. */
+    readonly identity: EventIdentity;
+}
+export type ParseResult = ParsedSignature | FailureDetails;
+export type HmacPolicy = {
+    readonly kind: 'hmac';
+    readonly hash: 'SHA-1';
+    readonly signatureBytes: 20;
+} | {
+    readonly kind: 'hmac';
+    readonly hash: 'SHA-256';
+    readonly signatureBytes: 32;
+};
+export type FalParseResult = FailureDetails | (ParsedSignature & {
+    readonly recipient: string;
+});
+export interface FalProviderDescriptor {
+    readonly provider: 'fal';
+    readonly crypto: {
+        readonly kind: 'ed25519';
+        readonly signatureBytes: 64;
+    };
+    parse(headers: NormalizedHeaders, rawBody: Uint8Array): Promise<FalParseResult>;
+}
+export type AnyProviderDescriptor = ProviderDescriptor | FalProviderDescriptor;
+export interface ProviderDescriptor {
+    readonly provider: Exclude<Provider, 'fal'>;
+    readonly crypto?: HmacPolicy;
+    /** Throw HooklatchError('invalid-secret') on invalid configuration. */
+    decodeSecret(secret: string): Uint8Array;
+    /** Parse and format only. Freshness and HMAC checks belong to core. */
+    parse(headers: NormalizedHeaders, rawBody: Uint8Array): ParseResult;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/internal/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/internal/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,UAAU,EAAE,SAAS,UAAU,EAAE,CAAC;IAC3C,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;CAClC;AAED,MAAM,MAAM,WAAW,GAAG,eAAe,GAAG,cAAc,CAAC;AAE3D,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAA;CAAE,CAAC;AAErF,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,CAAC,eAAe,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEjG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAA;KAAE,CAAC;IAC3E,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACjF;AAED,MAAM,MAAM,qBAAqB,GAAG,kBAAkB,GAAG,qBAAqB,CAAC;AAE/E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,uEAAuE;IACvE,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IACzC,uEAAuE;IACvE,KAAK,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,UAAU,GAAG,WAAW,CAAC;CACrE"}

package/dist/internal/provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=provider.js.map

package/dist/internal/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/internal/provider.ts"],"names":[],"mappings":""}

package/dist/internal/verification.d.ts

@@ -0,0 +1,13 @@
+import type { FailureDetails, VerificationResult, VerifyOptions, WebhookRequest } from '../types.js';
+import type { AnyProviderDescriptor } from './provider.js';
+import type { NormalizedOptions } from './options.js';
+export interface PreparedVerifier {
+    readonly options: NormalizedOptions;
+    readonly descriptor: AnyProviderDescriptor;
+    readonly keys: readonly Uint8Array[];
+}
+export declare function prepareVerifier(options: VerifyOptions, descriptor: AnyProviderDescriptor): PreparedVerifier;
+export declare function readClock(prepared: PreparedVerifier): number;
+export declare function failure(prepared: PreparedVerifier, reason: FailureDetails['reason'], message: string): VerificationResult;
+export declare function verifyPrepared(request: WebhookRequest, prepared: PreparedVerifier, receivedAt?: number): Promise<VerificationResult>;
+//# sourceMappingURL=verification.d.ts.map

package/dist/internal/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../src/internal/verification.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAItD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;CACtC;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,qBAAqB,GAAG,gBAAgB,CAe3G;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAW5D;AAED,wBAAgB,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAEzH;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,SAAsB,GACpF,OAAO,CAAC,kBAAkB,CAAC,CA+B7B"}

package/dist/internal/verification.js

@@ -0,0 +1,66 @@
+import { HooklatchError } from '../errors.js';
+import { normalizeOptions } from './options.js';
+import { normalizeHeaders } from './headers.js';
+import { verifyHmac, verifyEd25519 } from './crypto.js';
+export function prepareVerifier(options, descriptor) {
+    const normalized = normalizeOptions(options);
+    let keys;
+    if (normalized.provider === 'fal') {
+        if (descriptor.provider !== 'fal')
+            throw new HooklatchError('internal', 'Invalid provider configuration.');
+        keys = normalized.publicKeys;
+    }
+    else {
+        if (descriptor.provider === 'fal')
+            throw new HooklatchError('internal', 'Invalid provider configuration.');
+        keys = normalized.secrets.map((secret) => new Uint8Array(descriptor.decodeSecret(secret)));
+    }
+    if (keys.some((key) => key.byteLength === 0))
+        throw new HooklatchError('invalid-secret', 'Invalid signing secret.');
+    return { options: normalized, descriptor, keys };
+}
+export function readClock(prepared) {
+    let now;
+    try {
+        now = prepared.options.now();
+    }
+    catch {
+        throw new HooklatchError('invalid-options', 'Invalid verification clock.');
+    }
+    if (!Number.isFinite(now) || now < 0 || now > Number.MAX_SAFE_INTEGER) {
+        throw new HooklatchError('invalid-options', 'Invalid verification clock.');
+    }
+    return now;
+}
+export function failure(prepared, reason, message) {
+    return { ok: false, provider: prepared.options.provider, reason, message };
+}
+export async function verifyPrepared(request, prepared, receivedAt = readClock(prepared)) {
+    if (!request || !(request.rawBody instanceof Uint8Array))
+        throw new HooklatchError('invalid-input', 'Raw body must be a Uint8Array.');
+    if (request.rawBody.byteLength > prepared.options.maxBodyBytes)
+        return failure(prepared, 'body-too-large', 'Request body exceeds the configured limit.');
+    const rawBody = new Uint8Array(request.rawBody);
+    const headers = normalizeHeaders(request.headers, prepared.options.provider === 'fal');
+    const parsed = await prepared.descriptor.parse(headers, rawBody);
+    if (!parsed.ok)
+        return { ...parsed, provider: prepared.options.provider };
+    const valid = prepared.descriptor.provider === 'fal'
+        ? await verifyEd25519(prepared.keys, parsed.signatures, parsed.signedContent)
+        : await verifyHmac(prepared.keys, parsed.signatures, parsed.signedContent, prepared.descriptor.crypto);
+    if (!valid || (prepared.options.provider === 'fal'
+        && (!('recipient' in parsed) || parsed.recipient !== prepared.options.expectedUserId))) {
+        return failure(prepared, 'invalid-signature', 'Webhook signature is invalid.');
+    }
+    const timestamp = parsed.identity.timestamp;
+    if (timestamp !== null) {
+        const age = receivedAt - timestamp;
+        if (age > prepared.options.toleranceSeconds)
+            return failure(prepared, 'timestamp-expired', 'Webhook timestamp is outside the allowed past window.');
+        if (age < -prepared.options.toleranceSeconds)
+            return failure(prepared, 'timestamp-future', 'Webhook timestamp is outside the allowed future window.');
+    }
+    return { ok: true, provider: prepared.options.provider, rawBody,
+        identity: { ...parsed.identity, authenticatedFields: [...parsed.identity.authenticatedFields] } };
+}
+//# sourceMappingURL=verification.js.map

package/dist/internal/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/internal/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAQxD,MAAM,UAAU,eAAe,CAAC,OAAsB,EAAE,UAAiC;IACvF,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,IAA2B,CAAC;IAEhC,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK;YAAE,MAAM,IAAI,cAAc,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;QAC3G,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK;YAAE,MAAM,IAAI,cAAc,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;QAC3G,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;IAEpH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAA0B;IAClD,IAAI,GAAW,CAAC;IAEhB,IAAI,CAAC;QAAC,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAAC,CAAC;IACrC,MAAM,CAAC;QAAC,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;IAAC,CAAC;IAErF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACtE,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAA0B,EAAE,MAAgC,EAAE,OAAe;IACnG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAuB,EAAE,QAA0B,EAAE,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC;IAErF,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;IAEtI,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,4CAA4C,CAAC,CAAC;IACzJ,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEjE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAE1E,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK;QAClD,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC;QAC7E,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAEzG,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK;WAC7C,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACzF,OAAO,OAAO,CAAC,QAAQ,EAAE,mBAAmB,EAAE,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;IAE5C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,UAAU,GAAG,SAAS,CAAC;QAEnC,IAAI,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,mBAAmB,EAAE,uDAAuD,CAAC,CAAC;QAEpJ,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,QAAQ,EAAE,kBAAkB,EAAE,yDAAyD,CAAC,CAAC;IACxJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO;QAC7D,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC;AACtG,CAAC"}

package/dist/node/adapters/cloudflare.d.ts

@@ -0,0 +1 @@
+export * from "../../cjs/adapters/cloudflare.cjs";

package/dist/node/adapters/cloudflare.js

@@ -0,0 +1,3 @@
+import implementation from "../../cjs/adapters/cloudflare.cjs";
+
+export const createWebhookHandler = implementation.createWebhookHandler;

package/dist/node/adapters/express.d.ts

@@ -0,0 +1 @@
+export * from "../../cjs/adapters/express.cjs";