telnyx 7.18.0 → 7.20.0

package/lib/webhooks.js

@@ -1,26 +1,5 @@
 "use strict";
-/**
- * Telnyx webhook verification using native Ed25519.
- *
- * This class provides Ed25519 signature verification for Telnyx webhooks
- * using Node's built-in crypto module (no external dependencies).
- *
- * @example Using base64 public key from Mission Control
- * const webhook = new TelnyxWebhook('eu2zvPjhY6odxV34Z/EsRiERvTodkev4Fq0SlK90Izg=');
- * await webhook.verify(payload, headers);
- *
- * @example Using with Telnyx client
- * const client = new Telnyx({
- *   apiKey: process.env.TELNYX_API_KEY,
- *   publicKey: process.env.TELNYX_PUBLIC_KEY, // Base64 string from Mission Control
- * });
- *
- * // Express example
- * app.post('/webhooks', express.raw({ type: 'application/json' }), async (req, res) => {
- *   const event = await client.webhooks.unwrap(req.body.toString(), { headers: req.headers });
- *   // Signature automatically verified
- * });
- */
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -58,6 +37,28 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.TelnyxWebhook = exports.TelnyxWebhookVerificationError = void 0;
 exports.unsafeUnwrapWebhook = unsafeUnwrapWebhook;
 exports.unwrapWebhook = unwrapWebhook;
+/**
+ * Telnyx webhook verification using native Ed25519.
+ *
+ * This class provides Ed25519 signature verification for Telnyx webhooks
+ * using Node's built-in crypto module (no external dependencies).
+ *
+ * @example Using base64 public key from Mission Control
+ * const webhook = new TelnyxWebhook('eu2zvPjhY6odxV34Z/EsRiERvTodkev4Fq0SlK90Izg=');
+ * await webhook.verify(payload, headers);
+ *
+ * @example Using with Telnyx client
+ * const client = new Telnyx({
+ *   apiKey: process.env.TELNYX_API_KEY,
+ *   publicKey: process.env.TELNYX_PUBLIC_KEY, // Base64 string from Mission Control
+ * });
+ *
+ * // Express example
+ * app.post('/webhooks', express.raw({ type: 'application/json' }), async (req, res) => {
+ *   const event = await client.webhooks.unwrap(req.body.toString(), { headers: req.headers });
+ *   // Signature automatically verified
+ * });
+ */
 const error_1 = require("../core/error.js");
 class TelnyxWebhookVerificationError extends error_1.TelnyxError {
     constructor(message) {
@@ -70,16 +71,45 @@ function unsafeUnwrapWebhook(body) {
     return JSON.parse(body);
 }
 async function unwrapWebhook(body, options, clientPublicKey) {
-    if (options?.headers) {
-        const key = options.key || clientPublicKey;
-        if (!key) {
-            throw new TelnyxWebhookVerificationError('No public key provided for webhook verification');
-        }
-        const webhook = new TelnyxWebhook(key);
-        await webhook.verify(body, options.headers);
+    if (!options?.headers) {
+        throw new TelnyxWebhookVerificationError('Webhook headers are required for verification');
+    }
+    const key = options.key || clientPublicKey;
+    if (!key) {
+        throw new TelnyxWebhookVerificationError('No public key provided for webhook verification');
     }
+    const webhook = new TelnyxWebhook(key);
+    await webhook.verify(body, options.headers);
     return unsafeUnwrapWebhook(body);
 }
+const BASE64_ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+/** Decode strict, padded base64 without relying on Node's Buffer global. */
+function decodeBase64(value) {
+    if (value.length === 0 || value.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(value)) {
+        throw new Error('Invalid base64');
+    }
+    const padding = value.endsWith('==') ? 2
+        : value.endsWith('=') ? 1
+            : 0;
+    const output = new Uint8Array((value.length / 4) * 3 - padding);
+    let outputIndex = 0;
+    for (let index = 0; index < value.length; index += 4) {
+        const a = BASE64_ALPHABET.indexOf(value[index]);
+        const b = BASE64_ALPHABET.indexOf(value[index + 1]);
+        const c = value[index + 2] === '=' ? 0 : BASE64_ALPHABET.indexOf(value[index + 2]);
+        const d = value[index + 3] === '=' ? 0 : BASE64_ALPHABET.indexOf(value[index + 3]);
+        if (a < 0 || b < 0 || c < 0 || d < 0)
+            throw new Error('Invalid base64');
+        const chunk = (a << 18) | (b << 12) | (c << 6) | d;
+        if (outputIndex < output.length)
+            output[outputIndex++] = (chunk >> 16) & 0xff;
+        if (outputIndex < output.length)
+            output[outputIndex++] = (chunk >> 8) & 0xff;
+        if (outputIndex < output.length)
+            output[outputIndex++] = chunk & 0xff;
+    }
+    return output;
+}
 // Get crypto implementation (works in Node.js and browsers)
 async function getCrypto() {
     if (typeof globalThis.crypto !== 'undefined' && globalThis.crypto.subtle) {
@@ -100,11 +130,11 @@ class TelnyxWebhook {
         if (typeof key === 'string') {
             try {
                 // Telnyx provides keys in base64 format
-                const keyBytes = Buffer.from(key, 'base64');
+                const keyBytes = decodeBase64(key);
                 if (keyBytes.length !== 32) {
                     throw new TelnyxWebhookVerificationError(`Invalid public key: expected 32 bytes, got ${keyBytes.length} bytes`);
                 }
-                this.verifyKey = new Uint8Array(keyBytes);
+                this.verifyKey = keyBytes;
             }
             catch (exc) {
                 if (exc instanceof TelnyxWebhookVerificationError) {
@@ -114,6 +144,9 @@ class TelnyxWebhook {
             }
         }
         else {
+            if (key.length !== 32) {
+                throw new TelnyxWebhookVerificationError(`Invalid public key: expected 32 bytes, got ${key.length} bytes`);
+            }
             this.verifyKey = key;
         }
     }
@@ -137,7 +170,13 @@ class TelnyxWebhook {
         }
         // Validate timestamp format and prevent replay attacks
         try {
-            const webhookTime = parseInt(timestampHeader, 10);
+            if (!/^\d+$/.test(timestampHeader)) {
+                throw new TelnyxWebhookVerificationError(`Invalid timestamp format: ${timestampHeader}`);
+            }
+            const webhookTime = Number(timestampHeader);
+            if (!Number.isSafeInteger(webhookTime)) {
+                throw new TelnyxWebhookVerificationError(`Invalid timestamp format: ${timestampHeader}`);
+            }
             const currentTime = Math.floor(Date.now() / 1000);
             // Allow 5 minutes tolerance
             if (Math.abs(currentTime - webhookTime) > 300) {
@@ -153,7 +192,7 @@ class TelnyxWebhook {
         // Decode the signature from base64
         let signature;
         try {
-            const signatureBuffer = Buffer.from(signatureHeader, 'base64');
+            const signatureBuffer = decodeBase64(signatureHeader);
             if (signatureBuffer.length !== 64) {
                 throw new Error(`Invalid signature length: expected 64 bytes, got ${signatureBuffer.length} bytes`);
             }
@@ -162,13 +201,9 @@ class TelnyxWebhook {
         catch (exc) {
             throw new TelnyxWebhookVerificationError(`Invalid signature format: ${signatureHeader}`);
         }
-        // Create the signed payload: timestamp|payload
+        // Create the exact signed payload: timestamp|unmodified payload
         const encoder = new TextEncoder();
-        const signedPayload = new Uint8Array([
-            ...encoder.encode(timestampHeader),
-            ...encoder.encode('|'),
-            ...encoder.encode(payload),
-        ]);
+        const signedPayload = encoder.encode(`${timestampHeader}|${payload}`);
         // Verify the signature using native crypto
         let isValid;
         try {

package/lib/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/lib/webhooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBH,kDAEC;AAED,sCAgBC;AAlCD,4CAA4C;AAE5C,MAAa,8BAA+B,SAAQ,mBAAW;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AALD,wEAKC;AAOD,SAAgB,mBAAmB,CAAI,IAAY;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;AAC/B,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,OAAyC,EACzC,eAA8B;IAE9B,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,8BAA8B,CAAC,iDAAiD,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,mBAAmB,CAAI,IAAI,CAAC,CAAC;AACtC,CAAC;AAmBD,4DAA4D;AAC5D,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACzE,OAAO,UAAU,CAAC,MAAoB,CAAC;IACzC,CAAC;IACD,qDAAqD;IACrD,MAAM,UAAU,GAAG,wDAAa,QAAQ,GAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,SAAkC,CAAC;AACvD,CAAC;AAED,MAAa,aAAa;IAGxB;;;;OAIG;IACH,YAAY,GAAwB;QAClC,6CAA6C;QAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,wCAAwC;gBACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;oBAC3B,MAAM,IAAI,8BAA8B,CACtC,8CAA8C,QAAQ,CAAC,MAAM,QAAQ,CACtE,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;oBAClD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,IAAI,8BAA8B,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAA+B;QAC3D,qDAAqD;QACrD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAEpE,4BAA4B;QAC5B,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CAAC,mDAAmD,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CAAC,2CAA2C,CAAC,CAAC;QACxF,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAElD,4BAA4B;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,8BAA8B,CAAC,yCAAyC,eAAe,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;gBAClD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,mCAAmC;QACnC,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAE/D,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,eAAe,CAAC,MAAM,QAAQ,CAAC,CAAC;YACtG,CAAC;YAED,SAAS,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,+CAA+C;QAC/C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC;YACnC,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YAClC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;YACtB,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC;QAEH,2CAA2C;QAC3C,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE;gBACjG,QAAQ;aACT,CAAC,CAAC;YAEH,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC,0DAA0D,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CACtC,iEAAiE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,OAA+B,EAAE,IAAY;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA3HD,sCA2HC"}
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/lib/webhooks.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCtF,kDAEC;AAED,sCAiBC;AA1DD;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,4CAA4C;AAE5C,MAAa,8BAA+B,SAAQ,mBAAW;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AALD,wEAKC;AAOD,SAAgB,mBAAmB,CAAI,IAAY;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;AAC/B,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,OAAyC,EACzC,eAA8B;IAE9B,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,8BAA8B,CAAC,+CAA+C,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,8BAA8B,CAAC,iDAAiD,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,mBAAmB,CAAI,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,eAAe,GAAG,kEAAkE,CAAC;AAE3F,4EAA4E;AAC5E,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GACX,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAChE,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC9E,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7E,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;IACxE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAmBD,4DAA4D;AAC5D,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACzE,OAAO,UAAU,CAAC,MAAoB,CAAC;IACzC,CAAC;IACD,qDAAqD;IACrD,MAAM,UAAU,GAAG,wDAAa,QAAQ,GAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,SAAkC,CAAC;AACvD,CAAC;AAED,MAAa,aAAa;IAGxB;;;;OAIG;IACH,YAAY,GAAwB;QAClC,6CAA6C;QAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,wCAAwC;gBACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;oBAC3B,MAAM,IAAI,8BAA8B,CACtC,8CAA8C,QAAQ,CAAC,MAAM,QAAQ,CACtE,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;oBAClD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,IAAI,8BAA8B,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACtB,MAAM,IAAI,8BAA8B,CACtC,8CAA8C,GAAG,CAAC,MAAM,QAAQ,CACjE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAA+B;QAC3D,qDAAqD;QACrD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAEpE,4BAA4B;QAC5B,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CAAC,mDAAmD,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CAAC,2CAA2C,CAAC,CAAC;QACxF,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAElD,4BAA4B;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,8BAA8B,CAAC,yCAAyC,eAAe,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;gBAClD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,mCAAmC;QACnC,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;YAEtD,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,eAAe,CAAC,MAAM,QAAQ,CAAC,CAAC;YACtG,CAAC;YAED,SAAS,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,gEAAgE;QAChE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,CAAC,CAAC;QAEtE,2CAA2C;QAC3C,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE;gBACjG,QAAQ;aACT,CAAC,CAAC;YAEH,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC,0DAA0D,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CACtC,iEAAiE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,OAA+B,EAAE,IAAY;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAlID,sCAkIC"}

package/lib/webhooks.mjs

@@ -1,3 +1,4 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 /**
  * Telnyx webhook verification using native Ed25519.
  *
@@ -31,16 +32,45 @@ export function unsafeUnwrapWebhook(body) {
     return JSON.parse(body);
 }
 export async function unwrapWebhook(body, options, clientPublicKey) {
-    if (options?.headers) {
-        const key = options.key || clientPublicKey;
-        if (!key) {
-            throw new TelnyxWebhookVerificationError('No public key provided for webhook verification');
-        }
-        const webhook = new TelnyxWebhook(key);
-        await webhook.verify(body, options.headers);
+    if (!options?.headers) {
+        throw new TelnyxWebhookVerificationError('Webhook headers are required for verification');
+    }
+    const key = options.key || clientPublicKey;
+    if (!key) {
+        throw new TelnyxWebhookVerificationError('No public key provided for webhook verification');
     }
+    const webhook = new TelnyxWebhook(key);
+    await webhook.verify(body, options.headers);
     return unsafeUnwrapWebhook(body);
 }
+const BASE64_ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+/** Decode strict, padded base64 without relying on Node's Buffer global. */
+function decodeBase64(value) {
+    if (value.length === 0 || value.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(value)) {
+        throw new Error('Invalid base64');
+    }
+    const padding = value.endsWith('==') ? 2
+        : value.endsWith('=') ? 1
+            : 0;
+    const output = new Uint8Array((value.length / 4) * 3 - padding);
+    let outputIndex = 0;
+    for (let index = 0; index < value.length; index += 4) {
+        const a = BASE64_ALPHABET.indexOf(value[index]);
+        const b = BASE64_ALPHABET.indexOf(value[index + 1]);
+        const c = value[index + 2] === '=' ? 0 : BASE64_ALPHABET.indexOf(value[index + 2]);
+        const d = value[index + 3] === '=' ? 0 : BASE64_ALPHABET.indexOf(value[index + 3]);
+        if (a < 0 || b < 0 || c < 0 || d < 0)
+            throw new Error('Invalid base64');
+        const chunk = (a << 18) | (b << 12) | (c << 6) | d;
+        if (outputIndex < output.length)
+            output[outputIndex++] = (chunk >> 16) & 0xff;
+        if (outputIndex < output.length)
+            output[outputIndex++] = (chunk >> 8) & 0xff;
+        if (outputIndex < output.length)
+            output[outputIndex++] = chunk & 0xff;
+    }
+    return output;
+}
 // Get crypto implementation (works in Node.js and browsers)
 async function getCrypto() {
     if (typeof globalThis.crypto !== 'undefined' && globalThis.crypto.subtle) {
@@ -61,11 +91,11 @@ export class TelnyxWebhook {
         if (typeof key === 'string') {
             try {
                 // Telnyx provides keys in base64 format
-                const keyBytes = Buffer.from(key, 'base64');
+                const keyBytes = decodeBase64(key);
                 if (keyBytes.length !== 32) {
                     throw new TelnyxWebhookVerificationError(`Invalid public key: expected 32 bytes, got ${keyBytes.length} bytes`);
                 }
-                this.verifyKey = new Uint8Array(keyBytes);
+                this.verifyKey = keyBytes;
             }
             catch (exc) {
                 if (exc instanceof TelnyxWebhookVerificationError) {
@@ -75,6 +105,9 @@ export class TelnyxWebhook {
             }
         }
         else {
+            if (key.length !== 32) {
+                throw new TelnyxWebhookVerificationError(`Invalid public key: expected 32 bytes, got ${key.length} bytes`);
+            }
             this.verifyKey = key;
         }
     }
@@ -98,7 +131,13 @@ export class TelnyxWebhook {
         }
         // Validate timestamp format and prevent replay attacks
         try {
-            const webhookTime = parseInt(timestampHeader, 10);
+            if (!/^\d+$/.test(timestampHeader)) {
+                throw new TelnyxWebhookVerificationError(`Invalid timestamp format: ${timestampHeader}`);
+            }
+            const webhookTime = Number(timestampHeader);
+            if (!Number.isSafeInteger(webhookTime)) {
+                throw new TelnyxWebhookVerificationError(`Invalid timestamp format: ${timestampHeader}`);
+            }
             const currentTime = Math.floor(Date.now() / 1000);
             // Allow 5 minutes tolerance
             if (Math.abs(currentTime - webhookTime) > 300) {
@@ -114,7 +153,7 @@ export class TelnyxWebhook {
         // Decode the signature from base64
         let signature;
         try {
-            const signatureBuffer = Buffer.from(signatureHeader, 'base64');
+            const signatureBuffer = decodeBase64(signatureHeader);
             if (signatureBuffer.length !== 64) {
                 throw new Error(`Invalid signature length: expected 64 bytes, got ${signatureBuffer.length} bytes`);
             }
@@ -123,13 +162,9 @@ export class TelnyxWebhook {
         catch (exc) {
             throw new TelnyxWebhookVerificationError(`Invalid signature format: ${signatureHeader}`);
         }
-        // Create the signed payload: timestamp|payload
+        // Create the exact signed payload: timestamp|unmodified payload
         const encoder = new TextEncoder();
-        const signedPayload = new Uint8Array([
-            ...encoder.encode(timestampHeader),
-            ...encoder.encode('|'),
-            ...encoder.encode(payload),
-        ]);
+        const signedPayload = encoder.encode(`${timestampHeader}|${payload}`);
         // Verify the signature using native crypto
         let isValid;
         try {

package/lib/webhooks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.mjs","sourceRoot":"","sources":["../src/lib/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,0BAAsB;AAE5C,MAAM,OAAO,8BAA+B,SAAQ,WAAW;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAOD,MAAM,UAAU,mBAAmB,CAAI,IAAY;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,OAAyC,EACzC,eAA8B;IAE9B,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,8BAA8B,CAAC,iDAAiD,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,mBAAmB,CAAI,IAAI,CAAC,CAAC;AACtC,CAAC;AAmBD,4DAA4D;AAC5D,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACzE,OAAO,UAAU,CAAC,MAAoB,CAAC;IACzC,CAAC;IACD,qDAAqD;IACrD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,SAAkC,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,aAAa;IAGxB;;;;OAIG;IACH,YAAY,GAAwB;QAClC,6CAA6C;QAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,wCAAwC;gBACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;oBAC3B,MAAM,IAAI,8BAA8B,CACtC,8CAA8C,QAAQ,CAAC,MAAM,QAAQ,CACtE,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;oBAClD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,IAAI,8BAA8B,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAA+B;QAC3D,qDAAqD;QACrD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAEpE,4BAA4B;QAC5B,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CAAC,mDAAmD,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CAAC,2CAA2C,CAAC,CAAC;QACxF,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAElD,4BAA4B;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,8BAA8B,CAAC,yCAAyC,eAAe,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;gBAClD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,mCAAmC;QACnC,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YAE/D,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,eAAe,CAAC,MAAM,QAAQ,CAAC,CAAC;YACtG,CAAC;YAED,SAAS,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,+CAA+C;QAC/C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC;YACnC,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YAClC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;YACtB,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;SAC3B,CAAC,CAAC;QAEH,2CAA2C;QAC3C,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE;gBACjG,QAAQ;aACT,CAAC,CAAC;YAEH,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC,0DAA0D,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CACtC,iEAAiE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,OAA+B,EAAE,IAAY;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}
+{"version":3,"file":"webhooks.mjs","sourceRoot":"","sources":["../src/lib/webhooks.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,0BAAsB;AAE5C,MAAM,OAAO,8BAA+B,SAAQ,WAAW;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAOD,MAAM,UAAU,mBAAmB,CAAI,IAAY;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,OAAyC,EACzC,eAA8B;IAE9B,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,8BAA8B,CAAC,+CAA+C,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,8BAA8B,CAAC,iDAAiD,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,mBAAmB,CAAI,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,eAAe,GAAG,kEAAkE,CAAC;AAE3F,4EAA4E;AAC5E,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GACX,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAChE,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC9E,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7E,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;IACxE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAmBD,4DAA4D;AAC5D,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACzE,OAAO,UAAU,CAAC,MAAoB,CAAC;IACzC,CAAC;IACD,qDAAqD;IACrD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,SAAkC,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,aAAa;IAGxB;;;;OAIG;IACH,YAAY,GAAwB;QAClC,6CAA6C;QAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,wCAAwC;gBACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;oBAC3B,MAAM,IAAI,8BAA8B,CACtC,8CAA8C,QAAQ,CAAC,MAAM,QAAQ,CACtE,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;oBAClD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,IAAI,8BAA8B,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACtB,MAAM,IAAI,8BAA8B,CACtC,8CAA8C,GAAG,CAAC,MAAM,QAAQ,CACjE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAA+B;QAC3D,qDAAqD;QACrD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAEpE,4BAA4B;QAC5B,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CAAC,mDAAmD,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,8BAA8B,CAAC,2CAA2C,CAAC,CAAC;QACxF,CAAC;QAED,uDAAuD;QACvD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAElD,4BAA4B;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,8BAA8B,CAAC,yCAAyC,eAAe,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,8BAA8B,EAAE,CAAC;gBAClD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,mCAAmC;QACnC,IAAI,SAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;YAEtD,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,eAAe,CAAC,MAAM,QAAQ,CAAC,CAAC;YACtG,CAAC;YAED,SAAS,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC,6BAA6B,eAAe,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,gEAAgE;QAChE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,CAAC,CAAC;QAEtE,2CAA2C;QAC3C,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE;gBACjG,QAAQ;aACT,CAAC,CAAC;YAEH,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CAAC,0DAA0D,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAA8B,CACtC,iEAAiE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,OAA+B,EAAE,IAAY;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "telnyx",
-  "version": "7.18.0",
-  "description": "Telnyx API SDK for global Voice, SMS, MMS, WhatsApp, Fax, Wireless IoT, SIP Trunking, and Call Control.",
+  "version": "7.20.0",
+  "description": "The official TypeScript library for the Telnyx API",
   "author": "Telnyx <support@telnyx.com>",
   "types": "./index.d.ts",
   "main": "./index.js",
@@ -15,9 +15,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "dependencies": {
-    "standardwebhooks": "^1.0.0"
-  },
+  "dependencies": {},
   "peerDependencies": {
     "ws": "^8.18.0"
   },

package/resources/ai/assistants/assistants.d.mts

@@ -373,6 +373,15 @@ export declare namespace AssistantTool {
              * Telnyx manage it.
              */
             description?: string;
+            /**
+             * The number the inbound call was received on, forwarded so an unverified
+             * non-Telnyx `from` can be used as the caller id -- typically to transfer out as
+             * the original caller by pairing `from: "{{telnyx_end_user_target}}"` with
+             * `diversion: "{{telnyx_agent_target}}"`. The caller id is only accepted while
+             * that number is still on an active inbound call to this `diversion` number, and
+             * the `diversion` number must be one you own or have verified.
+             */
+            diversion?: string;
             /**
              * Configuration for voicemail detection (AMD - Answering Machine Detection) on the
              * transferred call. Allows the assistant to detect when a voicemail system answers
@@ -2206,17 +2215,19 @@ export interface TranscriptionSettings {
      * supported models will automatically detect the language. For `deepgram/flux`,
      * supported values are: `auto` (Telnyx language detection controls the language
      * hint), `multi` (no language hint), and language-specific hints `en`, `es`, `fr`,
-     * `de`, `hi`, `ru`, `pt`, `ja`, `it`, and `nl`. For `soniox/stt-rt-v4`, `auto`
-     * omits the language hint and lets Soniox auto-detect; ISO 639-1 codes (e.g. `en`,
-     * `es`) bias detection toward that language. For `humain/realtime`, supported
-     * values are `ar`, `en`, `codeswitch` (Arabic/English code-switching), and `auto`
-     * (resolves server-side to code-switching). Unlike other models, `humain/realtime`
-     * does not fall back to `auto` when `language` is omitted — omitting it applies
-     * `en` instead. For `reson8/turns`, supported values are `auto` (or unset) for
-     * automatic language detection, and the language codes `nl`, `en`, `fr`, `fy`,
-     * `de`, `it`, `pl`, `pt`, `es`, and `sv` to fix the transcription language. For
-     * `cohere/ar-stt`, supported values are `ar` and `en`; unlike other models, this
-     * model does not auto-detect and defaults to `ar` when `language` is omitted.
+     * `de`, `hi`, `ru`, `pt`, `ja`, `it`, and `nl`. For `soniox/stt-rt-v4` and
+     * `soniox/stt-rt-v5`, `auto` omits the language hint and lets Soniox auto-detect;
+     * ISO 639-1 codes (e.g. `en`, `es`) bias detection toward that language;
+     * `settings.language_hints` can pin multiple languages at once instead. For
+     * `humain/realtime`, supported values are `ar`, `en`, `codeswitch` (Arabic/English
+     * code-switching), and `auto` (resolves server-side to code-switching). Unlike
+     * other models, `humain/realtime` does not fall back to `auto` when `language` is
+     * omitted — omitting it applies `en` instead. For `reson8/turns`, supported values
+     * are `auto` (or unset) for automatic language detection, and the language codes
+     * `nl`, `en`, `fr`, `fy`, `de`, `it`, `pl`, `pt`, `es`, and `sv` to fix the
+     * transcription language. For `cohere/ar-stt`, supported values are `ar` and `en`;
+     * unlike other models, this model does not auto-detect and defaults to `ar` when
+     * `language` is omitted.
      */
     language?: string;
     /**
@@ -2230,8 +2241,9 @@ export interface TranscriptionSettings {
      * - `assemblyai/universal-streaming` is a multilingual streaming model with
      *   configurable turn detection.
      * - `xai/grok-stt` is a multilingual Grok STT model.
-     * - `soniox/stt-rt-v4` is a multilingual streaming model with automatic language
-     *   detection and configurable endpointing.
+     * - `soniox/stt-rt-v4` and `soniox/stt-rt-v5` are multilingual streaming models
+     *   with automatic language detection, configurable endpointing, term biasing
+     *   (`context`), and `language_hints`.
      * - `nvidia/parakeet-v3` is a multilingual transcription model with automatic
      *   language detection.
      * - `humain/realtime` is a streaming model with native Arabic and Arabic/English
@@ -2240,7 +2252,7 @@ export interface TranscriptionSettings {
      *   with automatic language detection.
      * - `cohere/ar-stt` is a non-streaming Arabic and English transcription model.
      */
-    model?: 'deepgram/flux' | 'deepgram/nova-3' | 'deepgram/nova-2' | 'azure/fast' | 'assemblyai/universal-streaming' | 'xai/grok-stt' | 'soniox/stt-rt-v4' | 'nvidia/parakeet-v3' | 'humain/realtime' | 'reson8/turns' | 'cohere/ar-stt' | 'distil-whisper/distil-large-v2' | 'openai/whisper-large-v3-turbo';
+    model?: 'deepgram/flux' | 'deepgram/nova-3' | 'deepgram/nova-2' | 'azure/fast' | 'assemblyai/universal-streaming' | 'xai/grok-stt' | 'soniox/stt-rt-v4' | 'soniox/stt-rt-v5' | 'nvidia/parakeet-v3' | 'humain/realtime' | 'reson8/turns' | 'cohere/ar-stt' | 'distil-whisper/distil-large-v2' | 'openai/whisper-large-v3-turbo';
     /**
      * Region on third party cloud providers (currently Azure) if using one of their
      * models. Some regions require `api_key_ref`.
@@ -2249,6 +2261,16 @@ export interface TranscriptionSettings {
     settings?: TranscriptionSettingsConfig;
 }
 export interface TranscriptionSettingsConfig {
+    /**
+     * Available only for soniox/stt-rt-v4 and soniox/stt-rt-v5. A comma-separated list
+     * of terms to boost for recognition during transcription, for staff names,
+     * building names, or other domain-specific vocabulary. This field may be templated
+     * with
+     * [dynamic variables](https://developers.telnyx.com/docs/inference/ai-assistants/dynamic-variables)
+     * using mustache syntax (e.g. `Telnyx,{{customer_name}},VoIP`). Variables are
+     * resolved at call time before the value is sent to Soniox.
+     */
+    context?: string;
     /**
      * Available only for deepgram/flux. Confidence threshold for eager end of turn
      * detection. Must be lower than or equal to eot_threshold. Setting this equal to
@@ -2256,8 +2278,9 @@ export interface TranscriptionSettingsConfig {
      */
     eager_eot_threshold?: number;
     /**
-     * Available only for soniox/stt-rt-v4. When true, Soniox emits end-of-utterance
-     * events at the cadence configured by `max_endpoint_delay_ms`.
+     * Available only for soniox/stt-rt-v4 and soniox/stt-rt-v5. When true, Soniox
+     * emits end-of-utterance events at the cadence configured by
+     * `max_endpoint_delay_ms`.
      */
     enable_endpoint_detection?: boolean;
     /**
@@ -2277,8 +2300,8 @@ export interface TranscriptionSettingsConfig {
      */
     eot_timeout_ms?: number;
     /**
-     * Available only for soniox/stt-rt-v4. When true, Soniox streams interim
-     * (non-final) results in addition to finalized transcripts.
+     * Available only for soniox/stt-rt-v4 and soniox/stt-rt-v5. When true, Soniox
+     * streams interim (non-final) results in addition to finalized transcripts.
      */
     interim_results?: boolean;
     /**
@@ -2292,8 +2315,14 @@ export interface TranscriptionSettingsConfig {
      */
     keyterm?: string;
     /**
-     * Available only for soniox/stt-rt-v4. Maximum silence (in milliseconds) before
-     * Soniox emits an end-of-utterance event. Only honored when
+     * Available only for soniox/stt-rt-v4 and soniox/stt-rt-v5. A list of ISO 639-1
+     * language codes (e.g. `["nl", "fr"]`) to pin recognition to multiple languages at
+     * once, overriding the single hint derived from `language`.
+     */
+    language_hints?: Array<string>;
+    /**
+     * Available only for soniox/stt-rt-v4 and soniox/stt-rt-v5. Maximum silence (in
+     * milliseconds) before Soniox emits an end-of-utterance event. Only honored when
      * `enable_endpoint_detection` is true.
      */
     max_endpoint_delay_ms?: number;