idosell 0.4.43 → 0.4.47

package/changelog.md

@@ -5,27 +5,39 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [0.4.43] - 2025-06-07
+## [0.4.47] - 2026-06-24
+### Added
+- Added optional OAuth2 authentication instead of API key authentication
+- Updated to latest v8.7
+
+
+## [0.4.45] - 2026-06-07
+### Added
+- Added handleRaw to pass raw data instead of request
+- Added test to webhooks
+
+
+## [0.4.43] - 2026-06-07
 ### Changed
 - Webhook now supports HMAC checking and groups of webhooks
 - Added raw data to webhook headers and handlers
 
 
-## [0.4.41] - 2025-06-07
+## [0.4.41] - 2026-06-07
 ### Added
 - Added webook support
 - Added LANG_ID enumerator
 - Added mapProductParameters utils helper
 
 
-## [0.4.38] - 2025-06-03
+## [0.4.38] - 2026-06-03
 ### Changed
 - Added enum types from description
 - Updated types to latest versions
 - Updated axios version to latest
 - Added mapping parameters to utils
 
-## [0.4.34] - 2025-05-27
+## [0.4.34] - 2026-05-27
 ### Fixed
 - Reusing idosell object unintentionally copied some fields
 - Requiremens check failed on falsy (0 or empty string), not only fails when undefined or null
@@ -33,33 +45,33 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Fixed missing types
 
-## [0.4.32] - 2025-05-19
+## [0.4.32] - 2026-05-19
 ### Changed
 - Fixed some latest types
 - Fxied paging
 
-## [0.4.30] - 2025-05-07
+## [0.4.30] - 2026-05-07
 ### Changed
 - Updated to Idosell Rest API v8.1
 - Some methods removed from api v8.1, still availible through v7 enpoints - version is enforced for those enpoints
 
-## [0.4.27] - 2025-04-06
+## [0.4.27] - 2026-04-06
 ### Changed
 - Addded missing promotions types
 - Fixed paging for promotions
 
-## [0.4.25] - 2025-04-04
+## [0.4.25] - 2026-04-04
 ### Changed
 - Updated to v7.19
 - Added promotion routes
 - Changed routes that have ProductsProducts to Products like getProductsToFacebookCatalog (before: getProductsProductsToFacebookCatalog)
 
-## [0.4.24] - 2025-03-21
+## [0.4.24] - 2026-03-21
 ### Changed
 - Updated to v7.13
 - Fixed url format
 
-## [0.4.23] - 2025-03-11
+## [0.4.23] - 2026-03-11
 ### Changed
 - Added custom error class
 - Fixed types for ids that can be integer instead of string

package/dist/app.d.ts

@@ -7,109 +7,109 @@ import type {
 } from "./responses.d.ts";
 
 export interface ExecutableDumpParams {
-	url: string;
-	method: string;
-	params: Record<string,any>;
+    url: string;
+    method: string;
+    params: Record<string, any>;
 }
 
 export interface ExecutableOptions {
-	log?: boolean | ((obj: ExecutableDumpParams) => void),
+    log?: boolean | ((obj: ExecutableDumpParams) => void),
     dump?: boolean | ((obj: ExecutableDumpParams) => void),
     logPage?: boolean | ((text: string) => void),
-	skipCheck?: boolean
+    skipCheck?: boolean
 }
 
 export type DateLike = string | number | Date;
 
-export type JSObject = Record<string,any>;
+export type JSObject = Record<string, any>;
 
 export type RequestProxyObject = {
-	auth: {
-		url: string, 
-		apiKey: string, 
-		version: number|string
-	},
-	params: Record<string, any>,
+    auth: {
+        url: string,
+        apiKey: ApyKeyOrOauthCredentials,
+        version: number | string
+    },
+    params: Record<string, any>,
 }
 
 export type RequirementType = {
-	any: string[]|true
-} | string | ((arg: RequestProxyObject | Record<string,any>) => string|false);
+    any: string[] | true
+} | string | ((arg: RequestProxyObject | Record<string, any>) => string | false);
 
 export type GatewayRequestProxyObject = {
-	gate: {
-		method: 'get'|'post'|'put'|'delete',
-		node: string
-	},
-	appendable?: {
-		index: number,
-		arrayNode: string,
-		except: string[]
-	},
-	custom?: Record<string,(..._: any) => false|Record<string,any>>,
-	snakeCase?: boolean,
-	paginationObject?: boolean,
-	next?: boolean,
-	rootparams?: string|boolean,
-	arrays?: string[],
-	req?: RequirementType[],
-	n?: Record<string,number>
+    gate: {
+        method: 'get' | 'post' | 'put' | 'delete',
+        node: string
+    },
+    appendable?: {
+        index: number,
+        arrayNode: string,
+        except: string[]
+    },
+    custom?: Record<string, (..._: any) => false | Record<string, any>>,
+    snakeCase?: boolean,
+    paginationObject?: boolean,
+    next?: boolean,
+    rootparams?: string | boolean,
+    arrays?: string[],
+    req?: RequirementType[],
+    n?: Record<string, number>
 } & RequestProxyObject;
 
 export interface Gateway<R = JSObject, P = JSObject> {
-	/**
-	 * Executes the query to designated API endpoint
-	 * @param options Use options: log - to console log params, url and method, logPage - to console log current page in a loop
-	 * @returns Idosell response
-	 */
-	exec: (options?: ExecutableOptions) => Promise<R>,
-
-	/**
-	 * @returns Object with currently mapped parameters
-	 */
-	getParams: () => P,
-
-	/**
-	 * @description Set object as params
-	 */
-	setParams: (params: P) => this
-
-	/**
-	 * @description Checks if minimal parameters are provided. If not, throws an error.
-	 */
-	checkParams: () => void
+    /**
+     * Executes the query to designated API endpoint
+     * @param options Use options: log - to console log params, url and method, logPage - to console log current page in a loop
+     * @returns Idosell response
+     */
+    exec: (options?: ExecutableOptions) => Promise<R>,
+
+    /**
+     * @returns Object with currently mapped parameters
+     */
+    getParams: () => P,
+
+    /**
+     * @description Set object as params
+     */
+    setParams: (params: P) => this
+
+    /**
+     * @description Checks if minimal parameters are provided. If not, throws an error.
+     */
+    checkParams: () => void
 }
 
-export interface PagableGateway<T,R = JSObject, P = JSObject> extends Gateway<R, P> {
-	/**
+export interface PagableGateway<T, R = JSObject, P = JSObject> extends Gateway<R, P> {
+    /**
      * @returns number of items i.e. products, orders, documents, etc.
      */
-	count: () => Promise<number>,
+    count: () => Promise<number>,
 
-	/**
+    /**
      * Allows to change offset and number of records returned
      * @param pageNumber - The page number to navigate to.
      * @param pageSize - The size of page
      * @returns The updated instance for method chaining.
      */
-	page: (pageNumber: number, pageSize?: number) => T
+    page: (pageNumber: number, pageSize?: number) => T
 
-	/**
-	 * @returns If completed request has more pages
-	 */
-	hasNext: () => boolean
+    /**
+     * @returns If completed request has more pages
+     */
+    hasNext: () => boolean
 }
 
-export interface AppendableGateway<T,R = JSObject, P = JSObject> extends Gateway<R, P> {
-	/**
-	 * Start creating next item in list
-	 */
-	append: () => T
+export interface AppendableGateway<T, R = JSObject, P = JSObject> extends Gateway<R, P> {
+    /**
+     * Start creating next item in list
+     */
+    append: () => T
 }
 
 export interface IdosellErrorFaultStructure {
-	faultCode: number;
-	faultString: string;
+    faultCode: number;
+    faultString: string;
 }
 
 // ─── Final normalized shape ──────────────────────────────────────────────────
@@ -244,12 +244,20 @@ export type DispatchResult =
     | { matched: false; eventType: string }
     | { matched: false; eventType: null; reason: "validation_failed" };
 
+
+export interface RawWebhookInput {
+    headers: Record<string, string>;
+    rawBody: string;           // always string — pre-parse
+    body?: Record<string, unknown>; // optional — caller may pre-parse
+}
+
 export declare class WebhookChain {
     validateHeaders(validator: HeaderValidator): this;
     validateSignature(hmacKey: string): this;
     on<E extends WebhookEventType>(eventType: E, handler: WebhookHandler<E>): this;
     on<O extends WebhookObjectType>(objectType: O, handler: WebhookObjectHandler<O>): this;
     handle(req: import("node:http").IncomingMessage | Request): Promise<DispatchResult>;
+    handleRaw(req: RawWebhookInput): Promise<DispatchResult>;
 }
 
 export type Webhooks = {
@@ -259,4 +267,11 @@ export type Webhooks = {
     on<O extends WebhookObjectType>(objectType: O, handler: WebhookObjectHandler<O>): WebhookChain;
 };
 
-export {};
+export type ApyKeyOrOauthCredentials = string | {
+    login: string;
+    password: string;
+    scope?: ('admin')[];
+    token?: string;
+}
+
+export { };

package/dist/gates.js

@@ -135,6 +135,7 @@ import getPackagesLabels from "./methods/getPackagesLabels.js";
 import postPackagesLabels from "./methods/postPackagesLabels.js";
 import postPackages from "./methods/postPackages.js";
 import putPackages from "./methods/putPackages.js";
+import deletePackages from "./methods/deletePackages.js";
 import searchPackages from "./methods/searchPackages.js";
 import postPaymentsCancel from "./methods/postPaymentsCancel.js";
 import postPaymentsCashback from "./methods/postPaymentsCashback.js";
@@ -473,6 +474,7 @@ const gates = {
     postPackagesLabels,
     postPackages,
     putPackages,
+    deletePackages,
     searchPackages,
     postPaymentsCancel,
     postPaymentsCashback,

package/dist/gateways.d.ts

@@ -1,5 +1,5 @@
 /* eslint-disable @typescript-eslint/no-empty-object-type */
-import type { PagableGateway, AppendableGateway, Gateway, DateLike, JSObject, IdosellErrorFaultStructure, Webhooks, IaiWebhookHeaders } from "./app.d.ts"
+import type { PagableGateway, AppendableGateway, Gateway, DateLike, JSObject, IdosellErrorFaultStructure, Webhooks, IaiWebhookHeaders, ApyKeyOrOauthCredentials } from "./app.d.ts"
 import type { GetClientsBalanceResponse, BooleanStatusResponse, GetClientsResponse, PostClientsResponse, PutClientsResponse, SearchClientsCrmResponse, GetClientsDeliveryAddressResponse, PostClientsDeliveryAddressResponse, PutClientsDeliveryAddressResponse, VouchersResponse, PutVouchersResponse, SearchClientsGiftcardsResponse, GetClientsGiftcardsTypesResponse, GetClientsMembershipCardsResponse, PutClientsMembershipCardsResponse, SearchClientsNewsletterEmailResponse, SearchClientsNewsletterSmsResponse, GetClientsPayerAddressResponse, PostClientsPayerAddressResponse, PutClientsPayerAddressResponse, GetClientsPricelistsClientsResponse, PutClientsPricelistsClientsResponse, GetClientsPricelistsResponse, PostClientsPricelistsResponse, GetClientsPricelistsProductsResponse, PutClientsPricelistsProductsResponse, GetClientsPricesActiveCardResponse, GetClientsPricesDiscountGroupsResponse, GetClientsPricesDiscountsResponse, PutClientsPricesDiscountsResponse, GetClientsProfitPointsResponse, GetClientsProvinceListResponse, GetClientsTagsResponse, PostClientsTagsResponse, PutClientsTagsResponse, GetConfigVariablesResponse, PutConfigVariablesResponse, GetCouriersAssignedToShippingProfilesResponse, GetCouriersResponse, GetCouriersPickupPointsResponse, PutCouriersPickupPointsResponse, GetCpaCampaignResponse, CmsCampaignResponse, CmsResponse, GetCpaResponse, GetDeliveriesProfilesResponse, GetDeliveriesRegionsResponse, PostDeliveriesRegionsResponse, GetDiscountsGroupsClientsResponse, GetDiscountsGroupsResponse, PostDiscountsGroupsResponse, GetEntriesResponse, PostEntriesResponse, GetEntriesPagesToDisplayResponse, GetEntriesSourcesResponse, GetMenuResponse, PostMenuResponse, PutMenuResponse, PutMenuSortResponse, GetOrdersAnalyticsResponse, GetOrdersAuctionDetailsResponse, PutOrdersCourierResponse, PostOrdersDocumentsCreateResponse, GetOrdersDocumentsResponse, PostOrdersDocumentsResponse, GetOrdersHandlerResponse, GetOrdersHistoryResponse, GetOrdersImagesResponse, PostOrdersImagesResponse, GetOrdersLabelsResponse, SearchOrdersOpinionsResponse, GetOrdersOpinionsRateResponse, SearchOrdersResponse, PostOrdersResponse, PutOrdersResponse, GetOrdersPackagesResponse, PutOrdersPackagesResponse, PutOrdersProductsSerialNumbersResponse, PutOrdersProfitMarginResponse, GetOrdersProfitabilityResponse, GetOrdersStatusesResponse, GetOrdersWarehouseResponse, PostPackagesLabelsResponse, PutPackagesResponse, SearchPackagesResponse, GetPaymentsFormsResponse, GetPaymentsResponse, PostPaymentsResponse, GetPaymentsProfilesResponse, PostPaymentsRepaymentResponse, GetProductsSKUbyBarcodeResponse, GetProductsAttachmentsGetContentResponse, PutProductsAttachmentsResponse, GetProductsAuctionsResponse, GetProductsBrandsResponse, PutProductsBrandsResponse, GetProductsCategoriesResponse, PutProductsCategoriesResponse, SearchProductsCategoriesIdosellResponse, GetProductsCodeExistenceResponse, SearchProductsDeliveryTimeResponse, GetProductsDescriptionsResponse, ProductIdentResponse, PutProductsGroupsSettingsResponse, GetProductsIdBySizecodeResponse, PutProductsImagesResponse, GetProductsMarketingZonesResponse, PutProductsMarketingZonesResponse, GetProductsOmnibusPricesResponse, GetProductsOpinionsResponse, PostProductsOpinionsResponse, GetProductsOpinionsRateResponse, PutProductsParametersResponse, SearchProductsParametersResponse, SearchProductsResponse, PostProductsResponse, PutProductsResponse, PutProductsMarketingPromotionResponse, GetProductsQuestionsResponse, GetProductsReservationsResponse, GetProductsSeriesResponse, PutProductsSeriesResponse, GetProductsSizesResponse, PutProductsSizesResponse, PutProductsStockQuantityResponse, GetProductsStocksResponse, PutProductsStocksResponse, GetProductsStrikethroughPricesResponse, PutProductsSupplierCodeResponse, PutProductsSupplierProductDataResponse, PromotionBoolResponse, SearchPromotionsElementsResponse, SearchPromotionsHistoryResponse, PromotionIdResponse, GetPromotionsResponse, SearchPromotionsListViewResponse, GetPromotionsArchiveResponse, SearchPromotionsArchiveResponse, GetPromotionsSettingsResponse, GetRegulationsHistoryResponse, GetResponsibilityEntitiesResponse, PutResponsibilityEntitiesResponse, GetReturnsResponse, PostReturnsResponse, PutReturnsResponse, PutReturnsSerialNumberResponse, GetRmaResponse, PutRmaResponse, GetRmaStatusesResponse, GetShopsCurrenciesResponse, GetShopsLanguagesResponse, GetSizechartsResponse, PutSizechartsResponse, GetSizesResponse, PutSizesResponse, GetSnippetsCampaignResponse, GetSnippetsCookiesResponse, GetSnippetsResponse, GetSystemConfigResponse, GetSystemCurrenciesResponse, PutSystemCurrenciesResponse, GetSystemProcessesAutomationResponse, GetSystemServerLoadResponse, GetSystemServerTimeResponse, GetSystemShopsDataResponse, GetSystemUnitsResponse, PutSystemUnitsResponse, GetSystemUsersResponse, GetVouchersTypesResponse, GetVouchersResponse, GetWarrantiesCountTotalResponse, PutWarrantiesLanguageDataResponse, GetWarrantiesResponse, PutWarrantiesResponse, GetWmsLocationsResponse, GetWmsStocksdocumentsDocumentsResponse, PostWmsStocksdocumentsDocumentsResponse, PutWmsStocksdocumentsDocumentsResponse, GetWmsStocksdocumentsOpenedDocumentsResponse, GetWmsStocksdocumentsProductsResponse, PutWmsStocksdocumentsProductsResponse, GetWmsSuppliersResponse, PutWmsSuppliersResponse, GetProductsMarketingPromotionResponse, PostProductsMarketingPromotionResponse } from "./responses.d.ts"
 import type * as RequestParams from "./reqparams.d.ts";
 import { ENUMS } from "./enums";
@@ -1209,6 +1209,12 @@ export interface PostEntriesRequest extends AppendableGateway<PostEntriesRequest
     blogUrl: (blogUrl: string) => this
     /** News item URL */
     newsUrl: (newsUrl: string) => this
+    /** Meta title of the entry */
+    metaTitle: (metaTitle: string) => this
+    /** Meta description of the entry */
+    metaDescription: (metaDescription: string) => this
+    /** Meta keywords of the entry */
+    metaKeywords: (metaKeywords: string) => this
     /** Add Post to blog entries */
     blog: () => this;
     /** Add Post to news entries */
@@ -2048,6 +2054,11 @@ export interface PutPackagesRequest extends AppendableGateway<PutPackagesRequest
     packages: (packages: RequestParams.PutPackagesParams["orderPackages"][number]["packages"]) => this
 }
 
+export interface DeletePackagesRequest extends Gateway {
+    /** Parcels's ID */
+    packageId: (value: number|string) => this;
+}
+
 export interface SearchPackagesRequest extends AppendableGateway<SearchPackagesRequest, SearchPackagesResponse, RequestParams.SearchPackagesParams> {
     /** Consignments numbers. */
     deliveryPackageNumbers: (value: string|string[]) => this;
@@ -2672,7 +2683,7 @@ export interface PutProductsParametersRequest extends AppendableGateway<PutProdu
     card_icons: (card_icons: RequestParams.PutProductsParametersParams["items"][number]["card_icons"]) => this
     /** Icons of section, parameter or value to display on the list of products. */
     link_icons: (link_icons: RequestParams.PutProductsParametersParams["items"][number]["link_icons"]) => this
-    /** Parameter's additional feature. 1. Status: context_id = "CONTEXT_STATE" Takes values context_value_id: - CONTEXT_STATE_NEW - New, - CONTEXT_STATE_USED - Used, - CONTEXT_STATE_USED_EXCELLENT - Used - excellent condition - CONTEXT_STATE_USED_VERYGOOD - Used - very good condition - CONTEXT_STATE_USED_CORRECT - Used - good condition - CONTEXT_STATE_USED_ACCEPTABLE - Used - acceptable condition - CONTEXT_STATE_REFURBISHED_EXCELLENT - Refurbished - excellent condition - CONTEXT_STATE_REFURBISHED_VERYGOOD - Refurbished - very good condition - CONTEXT_STATE_REFURBISHED_CORRECT - Refurbished - good condition - CONTEXT_STATE_NEW_OTHERS - New other (see details) - CONTEXT_STATE_NEW_WITH_DEFECTS - New with defects - CONTEXT_STATE_NEW_OEM - New - OEM - CONTEXT_STATE_NEW_OPEN_BOX - New - open box - CONTEXT_STATE_REFURBISHED_BY_PRODUCER - Renewed by a manufacturer, - CONTEXT_STATE_REFURBISHED_BY_SELLER - Renewed by a seller, - CONTEXT_STATE_FOR_PARTS_OR_BROKEN - In parts or damaged. 2. Product weight in grams: context_id = "CONTEXT_STD_UNIT_WEIGHT" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 3. A product's value in milliliters: context_id = "CONTEXT_STD_UNIT_VOLUME" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 4. Sex: context_id = "CONTEXT_SEX" Takes values context_value_id: - CONTEXT_SEX_MAN - Man, - CONTEXT_SEX_WOMAN - Woman, - CONTEXT_SEX_UNISEX - Unisex. 5. Age group: context_id = "CONTEXT_AGE_GROUP" Takes values context_value_id: - CONTEXT_AGE_GROUP_ADULT - Adults, - CONTEXT_AGE_GROUP_MINOR - Children. 6. Maximum number of products in an order: context_id = "CONTEXT_MAX_QUANTITY_PER_RETAIL_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 7. Maximum number of products in a wholesale order: context_id = "CONTEXT_MAX_QUANTITY_PER_WHOLESALE_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 8. Minimal number of products in an order: context_id = "CONTEXT_MIN_QUANTITY_PER_RETAIL_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 9. Minimum number of products in a wholesale order: context_id = "CONTEXT_MIN_QUANTITY_PER_WHOLESALE_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 10. Maximal number of a single size in an order: context_id = "CONTEXT_MAX_SIZE_QUANTITY_PER_RETAIL_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 11. Maximal number of a single size in a wholesale order: context_id = "CONTEXT_MAX_SIZE_QUANTITY_PER_WHOLESALE_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 12. Minimal number of a single size in an order: context_id = "CONTEXT_MIN_SIZE_QUANTITY_PER_RETAIL_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 13. Minimal number of a single size in a wholesale order: context_id = "CONTEXT_MIN_SIZE_QUANTITY_PER_WHOLESALE_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 14. Net weight: context_id = "CONTEXT_WEIGHT_NET" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 15. Color: context_id = "CONTEXT_COLOR" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 16. #!TylkoDlaDoroslych!#: context_id = "CONTEXT_ONLY_ADULTS" Takes values context_value_id: - CONTEXT_ONLY_ADULTS_YES - yes, - CONTEXT_ONLY_ADULTS_NO - no. 17. Prescription drug: context_id = "CONTEXT_PRESCRIPTION_MEDICINE" Takes values context_value_id: - CONTEXT_PRESCRIPTION_MEDICINE_YES - yes, - CONTEXT_PRESCRIPTION_MEDICINE_NO - no. 18. Season Rate: context_id = "CONTEXT_SEASON" Takes values context_value_id: - CONTEXT_SEASON_SPRING - Spring, - CONTEXT_SEASON_SUMMER - Summer, - CONTEXT_SEASON_FALL - Autumn, - CONTEXT_SEASON_WINTER - Winter, - CONTEXT_SEASON_SPRING_SUMMER - Spring/Summer, - CONTEXT_SEASON_FALL_WINTER - Autumn/Winter 19. Risk - signal word: context_id = \"CONTEXT_HAZMAT_SIGNAL\" Takes values context_value_id: - CONTEXT_HAZMAT_SIGNAL_DANGER - danger, - CONTEXT_HAZMAT_SIGNAL_WARNING - warnging, - CONTEXT_HAZMAT_SIGNAL_CAUTION - caution, - CONTEXT_HAZMAT_SIGNAL_NOTICE - notice, 20. Risk - warning pictogram context_id = \"CONTEXT_HAZMAT_PICTOGRAM\" Takes values context_value_id: - GHS01, GHS02, GHS03, GHS04, GHS05, GHS06, GHS07, GHS08, GHS09 21. Risk - type of hazard: context_id = \"CONTEXT_HAZMAT_STATEMENT\" Takes values context_value_id: - H200, H201, H202, H203, H204, H205, H220, H221, H222, H223, H224, H225, H226, H228, H240, H241, H242, H250, H251, H252, H260, H261, H270, H271, H272, H280, H281, H290, H300, H301, H302, H304, H310, H311, H312, H314, H315, H317, H318, H319, H330, H331, H332, H334, H335, H336, H340, H341, H350, H351, H360, H361, H362, H370, H371, H372, H373, H400, H410, H411, H412, H413, EUH 001, EUH 014, EUH 018, EUH 019, EUH 044, EUH 029, EUH 031, EUH 032, EUH 066, EUH 070, EUH 071, EUH 201, EUH 201A, EUH 202, EUH 203, EUH 204, EUH 205, EUH 206, EUH 207, EUH 208, EUH 209, EUH 209A, EUH 210, EUH 401 22. Repair score: context_id = \"CONTEXT_REPAIR_SCORE\" Takes values context_value_id: - The value of the additional feature is set automatically based on the parameter's value 23. Safety - information pictogram: context_id = \"CONTEXT_SAFETY_PICTOGRAM\" Takes values context_value_id: - 1 (Not suitable for small children) - 2 (CE mark) 24. Safety - type of warning: context_id = \"CONTEXT_SAFETY_STATEMENT\" Takes values context_value_id: - 1 (Not suitable for children under 3 years) - 2 (Keep out of the reach of children) - 3 (Product contains a button cell or coin battery) - 4 (Use under the direct supervision of adults) - 5 (Required protective gear. Do not use in public traffic) - 6 (Contains toy. Adult supervision recommended) - 7 (To prevent possible injury from entanglement, remove this toy as soon as the child begins to crawl) - 8 (Use only in shallow water under adult supervision) - 9 (Only use under adult supervision) - 10 (This toy does not provide protection) - 11 (Contains fragrances that may cause allergies) - 12 (For household use only). */
+    /** Parameter's additional feature. 1. Status: context_id = "CONTEXT_STATE" Takes values context_value_id: - CONTEXT_STATE_NEW - New, - CONTEXT_STATE_USED - Used, - CONTEXT_STATE_USED_EXCELLENT - Used - excellent condition - CONTEXT_STATE_USED_VERYGOOD - Used - very good condition - CONTEXT_STATE_USED_CORRECT - Used - good condition - CONTEXT_STATE_USED_ACCEPTABLE - Used - acceptable condition - CONTEXT_STATE_REFURBISHED_EXCELLENT - Refurbished - excellent condition - CONTEXT_STATE_REFURBISHED_VERYGOOD - Refurbished - very good condition - CONTEXT_STATE_REFURBISHED_CORRECT - Refurbished - good condition - CONTEXT_STATE_REFURBISHED_ACCEPTABLE - Refurbished - acceptable - CONTEXT_STATE_NEW_OTHERS - New other (see details) - CONTEXT_STATE_NEW_WITH_DEFECTS - New with defects - CONTEXT_STATE_NEW_OEM - New - OEM - CONTEXT_STATE_NEW_OPEN_BOX - New - open box - CONTEXT_STATE_REFURBISHED_BY_PRODUCER - Renewed by a manufacturer, - CONTEXT_STATE_REFURBISHED_BY_SELLER - Renewed by a seller, - CONTEXT_STATE_FOR_PARTS_OR_BROKEN - In parts or damaged. 2. Product weight in grams: context_id = "CONTEXT_STD_UNIT_WEIGHT" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 3. A product's value in milliliters: context_id = "CONTEXT_STD_UNIT_VOLUME" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 4. Sex: context_id = "CONTEXT_SEX" Takes values context_value_id: - CONTEXT_SEX_MAN - Man, - CONTEXT_SEX_WOMAN - Woman, - CONTEXT_SEX_UNISEX - Unisex. 5. Age group: context_id = "CONTEXT_AGE_GROUP" Takes values context_value_id: - CONTEXT_AGE_GROUP_ADULT - Adults, - CONTEXT_AGE_GROUP_MINOR - Children. 6. Maximum number of products in an order: context_id = "CONTEXT_MAX_QUANTITY_PER_RETAIL_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 7. Maximum number of products in a wholesale order: context_id = "CONTEXT_MAX_QUANTITY_PER_WHOLESALE_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 8. Minimal number of products in an order: context_id = "CONTEXT_MIN_QUANTITY_PER_RETAIL_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 9. Minimum number of products in a wholesale order: context_id = "CONTEXT_MIN_QUANTITY_PER_WHOLESALE_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 10. Maximal number of a single size in an order: context_id = "CONTEXT_MAX_SIZE_QUANTITY_PER_RETAIL_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 11. Maximal number of a single size in a wholesale order: context_id = "CONTEXT_MAX_SIZE_QUANTITY_PER_WHOLESALE_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 12. Minimal number of a single size in an order: context_id = "CONTEXT_MIN_SIZE_QUANTITY_PER_RETAIL_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 13. Minimal number of a single size in a wholesale order: context_id = "CONTEXT_MIN_SIZE_QUANTITY_PER_WHOLESALE_ORDER" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 14. Net weight: context_id = "CONTEXT_WEIGHT_NET" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 15. Color: context_id = "CONTEXT_COLOR" Takes values context_value_id: - Value of additional feature is set automatically basing on the parameter's value. 16. #!TylkoDlaDoroslych!#: context_id = "CONTEXT_ONLY_ADULTS" Takes values context_value_id: - CONTEXT_ONLY_ADULTS_YES - yes, - CONTEXT_ONLY_ADULTS_NO - no. 17. Prescription drug: context_id = "CONTEXT_PRESCRIPTION_MEDICINE" Takes values context_value_id: - CONTEXT_PRESCRIPTION_MEDICINE_YES - yes, - CONTEXT_PRESCRIPTION_MEDICINE_NO - no. 18. Season Rate: context_id = "CONTEXT_SEASON" Takes values context_value_id: - CONTEXT_SEASON_SPRING - Spring, - CONTEXT_SEASON_SUMMER - Summer, - CONTEXT_SEASON_FALL - Autumn, - CONTEXT_SEASON_WINTER - Winter, - CONTEXT_SEASON_SPRING_SUMMER - Spring/Summer, - CONTEXT_SEASON_FALL_WINTER - Autumn/Winter 19. Risk - signal word: context_id = \"CONTEXT_HAZMAT_SIGNAL\" Takes values context_value_id: - CONTEXT_HAZMAT_SIGNAL_DANGER - danger, - CONTEXT_HAZMAT_SIGNAL_WARNING - warnging, - CONTEXT_HAZMAT_SIGNAL_CAUTION - caution, - CONTEXT_HAZMAT_SIGNAL_NOTICE - notice, 20. Risk - warning pictogram context_id = \"CONTEXT_HAZMAT_PICTOGRAM\" Takes values context_value_id: - GHS01, GHS02, GHS03, GHS04, GHS05, GHS06, GHS07, GHS08, GHS09 21. Risk - type of hazard: context_id = \"CONTEXT_HAZMAT_STATEMENT\" Takes values context_value_id: - H200, H201, H202, H203, H204, H205, H220, H221, H222, H223, H224, H225, H226, H228, H240, H241, H242, H250, H251, H252, H260, H261, H270, H271, H272, H280, H281, H290, H300, H301, H302, H304, H310, H311, H312, H314, H315, H317, H318, H319, H330, H331, H332, H334, H335, H336, H340, H341, H350, H351, H360, H361, H362, H370, H371, H372, H373, H400, H410, H411, H412, H413, EUH 001, EUH 014, EUH 018, EUH 019, EUH 044, EUH 029, EUH 031, EUH 032, EUH 066, EUH 070, EUH 071, EUH 201, EUH 201A, EUH 202, EUH 203, EUH 204, EUH 205, EUH 206, EUH 207, EUH 208, EUH 209, EUH 209A, EUH 210, EUH 401 22. Repair score: context_id = \"CONTEXT_REPAIR_SCORE\" Takes values context_value_id: - The value of the additional feature is set automatically based on the parameter's value 23. Safety - information pictogram: context_id = \"CONTEXT_SAFETY_PICTOGRAM\" Takes values context_value_id: - 1 (Not suitable for small children) - 2 (CE mark) 24. Safety - type of warning: context_id = \"CONTEXT_SAFETY_STATEMENT\" Takes values context_value_id: - 1 (Not suitable for children under 3 years) - 2 (Keep out of the reach of children) - 3 (Product contains a button cell or coin battery) - 4 (Use under the direct supervision of adults) - 5 (Required protective gear. Do not use in public traffic) - 6 (Contains toy. Adult supervision recommended) - 7 (To prevent possible injury from entanglement, remove this toy as soon as the child begins to crawl) - 8 (Use only in shallow water under adult supervision) - 9 (Only use under adult supervision) - 10 (This toy does not provide protection) - 11 (Contains fragrances that may cause allergies) - 12 (For household use only). */
     context_id: (context_id: number|string) => this
     /** value of additional feature - Values described in context_id. */
     context_value_id: (context_value_id: number|string) => this
@@ -4034,6 +4045,8 @@ export interface GetReturnsRequest extends PagableGateway<GetReturnsRequest, Get
     stock_id: (value: number|string) => this;
     /** Return a set as its constituent products */
     bundleAsProducts: (value: boolean) => this;
+    /** Search by ID of a shop to which a return is sent. */
+    shop_ids: (value: number|string|number[]|string[]) => this;
     /** Define range of dates and their type */
     dates: (dateFrom: DateLike, dateTo: DateLike, type?: "date_add"|"date_end") => this;
 }
@@ -5182,6 +5195,7 @@ export interface Gateways {
     postPackagesLabels: PostPackagesLabelsRequest,
     postPackages: PostPackagesRequest,
     putPackages: PutPackagesRequest,
+    deletePackages: DeletePackagesRequest,
     searchPackages: SearchPackagesRequest,
     postPaymentsCancel: PostPaymentsCancelRequest,
     postPaymentsCashback: PostPaymentsCashbackRequest,
@@ -5420,6 +5434,6 @@ export interface Gateways {
 }
 
 declare const webhooks: Webhooks;
-declare const defaultExport: (url: string, apiKey: string, version?: number | string) => Gateways;
+declare const defaultExport: (url: string, apiKey: ApyKeyOrOauthCredentials, version?: number | string) => Gateways;
 export default defaultExport;
 export { ENUMS, RequestParams, utils, webhooks, IaiWebhookHeaders }

package/dist/index.js

@@ -22,7 +22,12 @@ function normalizeUrl(input = "") {
     return parsed.origin;
 }
 const idosell = (url, apiKey, version = DEFAULT_VERSION) => {
-    const auth = { url: normalizeUrl(url), apiKey, version, apikey: apiKey ? apiKey.slice(0, 6) + '*'.repeat(20) : "" };
+    let hiddenKey = '*'.repeat(10);
+    if (typeof apiKey === 'string')
+        hiddenKey = apiKey.slice(0, 6) + '*'.repeat(20);
+    else
+        hiddenKey = `${apiKey.login}:${apiKey.password.slice(0, 4)}${'*'.repeat(6)}`;
+    const auth = { url: normalizeUrl(url), apiKey, version, apikey: hiddenKey };
     Object.defineProperty(auth, 'apiKey', { enumerable: false });
     const element = { auth, params: {} };
     return new Proxy(element, gateProxy);

package/dist/methods/deletePackages.js

@@ -0,0 +1,6 @@
+import { paramsProxy } from "../params.js";
+export default (object) => {
+    object.gate = { method: 'delete', node: '/packages/packages' };
+    object.req = ["packageId"];
+    return new Proxy(object, paramsProxy);
+};

package/dist/reqparams.d.ts

@@ -2691,7 +2691,7 @@ export type PutProductsAttachmentsParams = {
             /** @description Attachment document types list. */
             documentTypes?: {
                 /** @description Document type. */
-                documentType?: "energy_label" | "instruction_with_safety_information" | "user_manual" | "installation_instructions" | "product_card" | "guide" | "software_data_processing" | "hardware_data_processing" | "others";
+                documentType?: "energy_label" | "instruction_with_safety_information" | "user_manual" | "installation_instructions" | "product_card" | "guide" | "software_data_processing" | "hardware_data_processing" | "image_of_packaging" | "label_of_packaging" | "declaration_of_conformity" | "image_of_ukca_ce_mark" | "others";
                 /** @description Additional description. */
                 description?: string;
             }[];
@@ -7260,4 +7260,44 @@ export type GetWmsLocationsParams =  {
     resultsLimit?: number;
 };
 
+export type GetReturnsParams =  {
+    /** @description Search by the order serial number to which a return was added. */
+    order_sn?: number;
+    /** @description Search by return ID. */
+    return_id?: number;
+    /** @description Search by a return shipment number from a customer to the shop . */
+    return_shipping_number?: string;
+    /** @description Date range. */
+    range?: {
+        /** @description Data for date range. */
+        date?: {
+            /** @description Beginning date in YYYY-MM-DD format. */
+            date_begin?: string;
+            /** @description Ending date in YYYY-MM-DD format. */
+            date_end?: string;
+            /** */
+            dates_type?: "date_add" | "date_end";
+        };
+    };
+    /** @description Number of results on page. */
+    results_limit?: number;
+    /** @description Result page number. */
+    results_page?: number;
+    /** @description 1 - Return not handled, 2 - Return accepted, 3 - Return not accepted, 13 - Return canceled by the customer, 14 - Return canceled, 15 - Resend the order, 16 - Abort resending order, 17 - A customer generated a return - it will be delivered personally, 18 - A customer generated a return - it will be sent by the customer. */
+    status?: number;
+    /** @description Search by return ID. */
+    return_ids?: number[];
+    /** @description Search by ID of a stock to which a return is sent. */
+    stock_id?: number;
+    /** @description Return a set as its constituent products */
+    bundleAsProducts?: boolean;
+    /** @description Search by ID of a shop to which a return is sent. */
+    shop_ids?: number[];
+};
+
+export type DeletePackagesParams = {
+    /** @description Parcels's ID */
+    packageId: number;
+};
+
 export { };

package/dist/request.js

@@ -165,9 +165,26 @@ export const sendRequest = async (request, options = {}) => {
     if (!options.skipCheck)
         processRequired(request);
     const headers = {
-        'X-API-KEY': request.auth.apiKey,
         Accept: 'application/json'
     };
+    if (typeof request.auth.apiKey === 'string') {
+        headers['X-API-KEY'] = request.auth.apiKey;
+    }
+    else {
+        const { login, password, scope } = request.auth.apiKey;
+        let token = request.auth.apiKey.token;
+        if (!token) {
+            const base64 = Buffer.from(`${login}:${password}`).toString('base64');
+            const response = await axios.post(`${request.auth.url}/api/authorize/1/authorize/accessToken`, { scope: scope ?? ['admin'] }, { headers: {
+                    authorization: `Basic ${base64}`,
+                } });
+            if (response.data.access_token) {
+                token = response.data.access_token;
+                request.auth.apiKey.token = response.data.access_token;
+            }
+        }
+        headers.authorization = `Bearer ${token}`;
+    }
     request.next = false;
     const { method, node } = request.gate;
     let url = `${request.auth.url}/api/admin/v${request.auth.version}${node}`;

package/dist/responses.d.ts

@@ -1436,6 +1436,12 @@ export type GetEntriesResponse = {
             titleLinkType: string;
             /** @description Provided URL (for link to specified URL option) */
             link: string;
+            /** @description Meta title of the entry */
+            metaTitle: string;
+            /** @description Meta description of the entry */
+            metaDescription: string;
+            /** @description Meta keywords of the entry */
+            metaKeywords: string;
         };
     };
 };
@@ -2002,7 +2008,7 @@ export type GetOrdersPackagesResponse = {
                     /** @description Type */
                     type: "radio" | "text" | "select" | "checkbox";
                     /** @description Default value for option */
-                    defaultValue: string;
+                    defaultValue: string | string[];
                     /** @description Available values for the options */
                     options?: {
                         /** @description Id */
@@ -2910,7 +2916,7 @@ export type PutProductsAttachmentsResponse = {
             /** @description Attachment document types list. */
             documentTypes?: {
                 /** @description Document type. */
-                documentType?: "energy_label" | "instruction_with_safety_information" | "user_manual" | "installation_instructions" | "product_card" | "guide" | "others";
+                documentType?: "energy_label" | "instruction_with_safety_information" | "user_manual" | "installation_instructions" | "product_card" | "guide" | "software_data_processing" | "hardware_data_processing" | "image_of_packaging" | "label_of_packaging" | "declaration_of_conformity" | "image_of_ukca_ce_mark" | "others";
                 /** @description Additional description. */
                 description?: string;
             }[];
@@ -7190,6 +7196,45 @@ export type GetSystemShopsDataResponse = {
     }[];
     /** @description Monitoring address protocol from the main Printer window. */
     typeOfPrinterProtocolAdress: string;
+    /** @description List of inherited settings. */
+    shop_inherit_settings: {
+        /** @description Shop ID */
+        shop_id: number;
+        /** @description Determines whether inheritance is active. */
+        shop_inherit_on: "y" | "n";
+        /** @description Shop ID from which the settings are inherited. */
+        shop_inherit_from: number;
+        /** @description Determines whether inheritance in enabled for offers. */
+        shop_inherit_offer: "y" | "n";
+        /** @description Determines whether inheritance in enabled for navigation descriptions. */
+        shop_inherit_navdescs: "y" | "n";
+        /** @description Determines whether inheritance in enabled for configuration. */
+        shop_inherit_config: "y" | "n";
+        /** @description Determines whether inheritance in enabled for country and locale settings. */
+        shop_inherit_country: "y" | "n";
+        /** @description Determines whether inheritance in enabled for banners. */
+        shop_inherit_banners: "y" | "n";
+        /** @description Determines whether inheritance in enabled for HTML and JS snippets. */
+        shop_inherit_snippets: "y" | "n";
+        /** @description Determines whether inheritance in enabled for toplayer settings. */
+        shop_inherit_toplayers: "y" | "n";
+        /** @description Determines whether inheritance in enabled for site masks. */
+        shop_inherit_masks: "y" | "n";
+        /** @description Determines whether inheritance in enabled for CMS pages. */
+        shop_inherit_cms: "y" | "n";
+        /** @description Determines whether inheritance in enabled for CPA programs. */
+        shop_inherit_cpa: "y" | "n";
+        /** @description Determines whether inheritance in enabled for affiliate programs. */
+        shop_inherit_affiliate: "y" | "n";
+        /** @description Determines whether inheritance in enabled for rebate programs. */
+        shop_inherit_rebates: "y" | "n";
+        /** @description Determines whether inheritance in enabled for prices. */
+        shop_inherit_prices: "y" | "n";
+        /** @description Determines whether inheritance in enabled for sale and shipment documents. */
+        shop_inherit_invoices: "y" | "n";
+        /** @description Determines whether inheritance in enabled for process automation. */
+        shop_inherit_automats: "y" | "n";
+    }[];
 };
 
 export type GetSystemUnitsResponse = {
@@ -9610,4 +9655,9 @@ export type GetProductsAttachmentsGetContentResponse = {
     }[];
 };
 
+export type DeletePackagesResponse = {
+    /** @description request status */
+    result: string;
+};
+
 export { };

package/dist/webhooks.js

@@ -1,5 +1,5 @@
 /* eslint-disable no-unused-vars */
-import { normalizeIaiRequest, WebhookValidationError } from "./webhooks.normalizer.js";
+import { extractHeaders, normalizeIaiRequest, WebhookValidationError } from "./webhooks.normalizer.js";
 import { createHmac } from "node:crypto";
 // ─── Runtime constants ────────────────────────────────────────────────────────
 export const WEBHOOK_OBJECT_TYPE = {
@@ -106,6 +106,14 @@ export class WebhookChain {
     }
     async handle(req) {
         const { headers, body, rawBody } = await normalizeIaiRequest(req);
+        return this.dispatch(headers, body, rawBody);
+    }
+    async handleRaw({ headers: rawHeaders, rawBody, body }) {
+        const headers = extractHeaders(rawHeaders);
+        const parsedBody = body ?? JSON.parse(rawBody);
+        return this.dispatch(headers, parsedBody, rawBody);
+    }
+    async dispatch(headers, body, rawBody) {
         if (this.validator !== null) {
             let valid = false;
             try {
@@ -118,7 +126,6 @@ export class WebhookChain {
                 return { matched: false, eventType: null, reason: "validation_failed" };
             }
         }
-        // Validate signature if a key was provided
         if (this.hmacKey) {
             const computed = createHmac("sha256", this.hmacKey).update(rawBody).digest("hex");
             if (computed !== headers.signature) {

package/dist/webhooks.normalizer.js

@@ -39,7 +39,7 @@ function parseAuthHeader(headers) {
     }
     return token;
 }
-function extractHeaders(raw) {
+export function extractHeaders(raw) {
     return {
         token: parseAuthHeader(raw),
         apiVersion: parseIntHeader(raw, "x-iai-api-version"),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "idosell",
-  "version": "0.4.43",
+  "version": "0.4.47",
   "description": "Idosell 3 REST connector",
   "main": "dist/index.js",
   "types": "dist/gateways.d.ts",

package/tests/deletePackages.test.js

@@ -0,0 +1,7 @@
+import idosell from "./dist/index.ts"
+import { expect, test } from "vitest"
+
+test("deletePackagesPackageId", () => {
+    const params = idosell().deletePackages.packageId(242).checkParams();
+    expect(params).toEqual({"packageId":242});
+})

package/tests/webhooks.test.ts

@@ -0,0 +1,158 @@
+// vitest tests for the webhook dispatcher
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { createHmac } from 'node:crypto';
+import { webhooks } from '../dist/webhooks';
+import { normalizeIaiRequest } from '../dist/webhooks.normalizer';
+
+const API_VERSION = '8';
+const SIGNATURE_KEY = 'secret-hmac-key';
+const TOKEN = 'authentication-bearer-token'
+
+// Helper to build a Request with appropriate headers and body
+function buildRequest({
+    body,
+    eventType = 'productUpdated',
+    objectType = 'product',
+}: {
+    body: unknown;
+    eventType?: string;
+    objectType?: string;
+}) {
+    const rawBody = JSON.stringify(body);
+    const signature = createHmac('sha256', SIGNATURE_KEY).update(rawBody).digest('hex');
+    const headers = new Headers({
+        'Content-Type': 'application/json',
+        'x-iai-api-version': API_VERSION,
+        'x-iai-event-time': new Date().toISOString(),
+        'x-iai-event-type': eventType,
+        'x-iai-event-uid': 'uid-123',
+        'x-iai-object-type': objectType,
+        'x-iai-panel-id': '1',
+        'x-iai-signature': signature,
+        'x-iai-webhook-time': new Date().toISOString(),
+        'authorization': `Bearer ${TOKEN}`,
+    });
+    return new Request('https://api.example.com/webhook', {
+        method: 'POST',
+        headers,
+        body: rawBody,
+    });
+}
+
+describe('WebhookChain dispatcher', () => {
+    let mockHandler: ReturnType<typeof vi.fn>;
+
+    beforeEach(() => {
+        mockHandler = vi.fn();
+    });
+
+    it('routes a matching event to the registered handler', async () => {
+        const requestBody = {
+            results: [{ productDisplayedCode: 'ABC123' }],
+        };
+        const req = buildRequest({ body: requestBody });
+
+        const chain = webhooks
+            .validateHeaders((h) => h.token === TOKEN)
+            .validateSignature(SIGNATURE_KEY)
+            .on('productUpdated', mockHandler);
+
+        const result = await chain.handle(req);
+
+        expect(result).toEqual({ matched: true, eventType: 'productUpdated' });
+        expect(mockHandler).toHaveBeenCalledTimes(1);
+        const ctx = mockHandler.mock.calls[0][0];
+        expect(ctx.body).toEqual(requestBody);
+        expect(ctx.headers.eventType).toBe('productUpdated');
+        expect(ctx.headers.objectType).toBe('product');
+    });
+
+    it('returns unmatched when no handler is registered for the event', async () => {
+        const requestBody = { foo: 'bar' };
+        const req = buildRequest({ body: requestBody, eventType: 'orderCreated', objectType: 'order' });
+
+        const chain = webhooks
+            .validateHeaders((h) => h.token === TOKEN)
+            .validateSignature(SIGNATURE_KEY);
+
+        const result = await chain.handle(req);
+        expect(result).toEqual({ matched: false, eventType: 'orderCreated' });
+        expect(mockHandler).not.toHaveBeenCalled();
+    });
+
+    it('fails validateHeaders when token mismatched', async () => {
+        const requestBody = { foo: 'bar' };
+        const req = buildRequest({ body: requestBody });
+        const chain = webhooks
+            .validateHeaders(() => false)
+            .validateSignature(SIGNATURE_KEY)
+            .on('productUpdated', mockHandler);
+        const result = await chain.handle(req);
+        expect(result).toEqual({ matched: false, eventType: null, reason: 'validation_failed' });
+    });
+
+    it('fails validateSignature with wrong key', async () => {
+        const requestBody = { foo: 'bar' };
+        const req = buildRequest({ body: requestBody });
+        const chain = webhooks
+            .validateHeaders((h) => h.token === TOKEN)
+            .validateSignature('wrong-key')
+            .on('productUpdated', mockHandler);
+        await expect(chain.handle(req)).rejects.toThrow('Invalid webhook signature');
+    });
+
+    it('registers handler for object type "order" and matches order events', async () => {
+        const requestBody = { foo: 'bar' };
+        const req = buildRequest({ body: requestBody, eventType: 'orderCreated', objectType: 'order' });
+        const chain = webhooks
+            .validateHeaders((h) => h.token === TOKEN)
+            .validateSignature(SIGNATURE_KEY)
+            .on('order', mockHandler);
+        await expect(chain.handle(req)).resolves.not.toThrow();
+    });
+
+    it('normalizes request and verifies header shape', async () => {
+        const requestBody = { foo: 'bar' };
+        const req = buildRequest({ body: requestBody });
+        const { headers } = await normalizeIaiRequest(req);
+        // Basic shape checks
+        expect(headers).toMatchObject({
+            token: TOKEN,
+            apiVersion: Number(API_VERSION),
+            eventType: 'productUpdated',
+            objectType: 'product',
+            panelId: 1,
+            signature: expect.any(String),
+        });
+        // Type checks for dates
+        expect(headers.eventTime).toBeInstanceOf(Date);
+        expect(headers.webhookTime).toBeInstanceOf(Date);
+    });
+
+    it('handleRaw processes raw webhook input correctly', async () => {
+        const requestBody = { foo: 'bar' };
+        const rawBody = JSON.stringify(requestBody);
+        const rawHeaders = {
+            'content-type': 'application/json',
+            'x-iai-api-version': API_VERSION,
+            'x-iai-event-time': new Date().toISOString(),
+            'x-iai-event-type': 'productUpdated',
+            'x-iai-event-uid': 'uid-123',
+            'x-iai-object-type': 'product',
+            'x-iai-panel-id': '1',
+            'x-iai-signature': createHmac('sha256', SIGNATURE_KEY).update(rawBody).digest('hex'),
+            'x-iai-webhook-time': new Date().toISOString(),
+            'authorization': `Bearer ${TOKEN}`,
+        } as Record<string, string>;
+        const chain = webhooks
+            .validateHeaders((h) => h.token === TOKEN)
+            .validateSignature(SIGNATURE_KEY)
+            .on('productUpdated', mockHandler);
+        const result = await chain.handleRaw({ headers: rawHeaders, rawBody, body: requestBody });
+        expect(result).toEqual({ matched: true, eventType: 'productUpdated' });
+        expect(mockHandler).toHaveBeenCalledTimes(1);
+        const ctx = mockHandler.mock.calls[0][0];
+        expect(ctx.body).toEqual(requestBody);
+        expect(ctx.headers.objectType).toBe('product');
+    });
+});