waba-toolkit 0.1.2 → 0.2.0

package/dist/index.js

@@ -1,3 +1,42 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  WABAClient: () => WABAClient,
+  WABAError: () => WABAError,
+  WABAMediaError: () => WABAMediaError,
+  WABANetworkError: () => WABANetworkError,
+  WABASignatureError: () => WABASignatureError,
+  classifyMessage: () => classifyMessage,
+  classifyWebhook: () => classifyWebhook,
+  extractMediaId: () => extractMediaId,
+  getCallId: () => getCallId,
+  getContactInfo: () => getContactInfo,
+  getMessageId: () => getMessageId,
+  getMessageTimestamp: () => getMessageTimestamp,
+  isMediaMessage: () => isMediaMessage,
+  verifyWebhookSignature: () => verifyWebhookSignature
+});
+module.exports = __toCommonJS(index_exports);
+
 // src/errors.ts
 var WABAError = class extends Error {
   constructor(message, code, details) {
@@ -34,7 +73,7 @@ var WABASignatureError = class extends WABAError {
 };
 
 // src/verify.ts
-import { createHmac, timingSafeEqual } from "crypto";
+var import_node_crypto = require("crypto");
 function verifyWebhookSignature(options) {
   const { signature, rawBody, appSecret } = options;
   if (!appSecret) {
@@ -44,7 +83,7 @@ function verifyWebhookSignature(options) {
     return false;
   }
   const signatureHash = signature.startsWith("sha256=") ? signature.slice(7) : signature;
-  const hmac = createHmac("sha256", appSecret);
+  const hmac = (0, import_node_crypto.createHmac)("sha256", appSecret);
   const bodyBuffer = typeof rawBody === "string" ? Buffer.from(rawBody, "utf-8") : rawBody;
   const expectedHash = hmac.update(bodyBuffer).digest("hex");
   const signatureBuffer = Buffer.from(signatureHash, "utf-8");
@@ -52,7 +91,7 @@ function verifyWebhookSignature(options) {
   if (signatureBuffer.length !== expectedBuffer.length) {
     return false;
   }
-  return timingSafeEqual(signatureBuffer, expectedBuffer);
+  return (0, import_node_crypto.timingSafeEqual)(signatureBuffer, expectedBuffer);
 }
 
 // src/client.ts
@@ -249,7 +288,7 @@ function getContactInfo(webhook) {
   const change = entry?.changes?.[0];
   const value = change?.value;
   if (!value || !("contacts" in value) || !value.contacts?.length) {
-    return void 0;
+    return null;
   }
   const contact = value.contacts[0];
   const metadata = value.metadata;
@@ -263,7 +302,38 @@ function getMessageTimestamp(message) {
   const epochSeconds = parseInt(message.timestamp, 10);
   return new Date(epochSeconds * 1e3);
 }
-export {
+function getMessageId(webhook) {
+  const entry = webhook.entry?.[0];
+  const change = entry?.changes?.[0];
+  const value = change?.value;
+  if (!value) {
+    return null;
+  }
+  if ("messages" in value) {
+    const messageValue = value;
+    return messageValue.messages?.[0]?.id ?? null;
+  }
+  if ("statuses" in value) {
+    const statusValue = value;
+    return statusValue.statuses?.[0]?.id ?? null;
+  }
+  return null;
+}
+function getCallId(webhook) {
+  const entry = webhook.entry?.[0];
+  const change = entry?.changes?.[0];
+  const value = change?.value;
+  if (!value) {
+    return null;
+  }
+  if ("calls" in value) {
+    const callValue = value;
+    return callValue.calls?.[0]?.id ?? null;
+  }
+  return null;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   WABAClient,
   WABAError,
   WABAMediaError,
@@ -272,9 +342,11 @@ export {
   classifyMessage,
   classifyWebhook,
   extractMediaId,
+  getCallId,
   getContactInfo,
+  getMessageId,
   getMessageTimestamp,
   isMediaMessage,
   verifyWebhookSignature
-};
+});
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/errors.ts","../src/verify.ts","../src/client.ts","../src/webhooks/classify.ts","../src/webhooks/messages.ts","../src/helpers.ts"],"sourcesContent":["/** Base error class for all WABA errors */\nexport class WABAError extends Error {\n  constructor(\n    message: string,\n    public readonly code?: number,\n    public readonly details?: unknown\n  ) {\n    super(message);\n    this.name = 'WABAError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for media-related failures (404, access denied) */\nexport class WABAMediaError extends WABAError {\n  constructor(\n    message: string,\n    public readonly mediaId: string,\n    code?: number\n  ) {\n    super(message, code);\n    this.name = 'WABAMediaError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for network/connection failures */\nexport class WABANetworkError extends WABAError {\n  override readonly cause?: Error;\n\n  constructor(message: string, cause?: Error) {\n    super(message);\n    this.name = 'WABANetworkError';\n    this.cause = cause;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for invalid webhook signatures */\nexport class WABASignatureError extends WABAError {\n  constructor(message: string = 'Invalid webhook signature') {\n    super(message);\n    this.name = 'WABASignatureError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n","import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { WABASignatureError } from './errors.js';\n\nexport interface VerifyWebhookSignatureOptions {\n  /** X-Hub-Signature-256 header value */\n  signature: string | undefined;\n  /** Raw request body (NOT parsed JSON) */\n  rawBody: Buffer | string;\n  /** Meta App Secret */\n  appSecret: string | undefined;\n}\n\n/**\n * Verifies webhook signature using HMAC-SHA256.\n * Uses timing-safe comparison to prevent timing attacks.\n *\n * @throws {WABASignatureError} If appSecret is not provided\n * @returns true if signature is valid, false otherwise\n */\nexport function verifyWebhookSignature(\n  options: VerifyWebhookSignatureOptions\n): boolean {\n  const { signature, rawBody, appSecret } = options;\n\n  if (!appSecret) {\n    throw new WABASignatureError('appSecret is required for webhook verification');\n  }\n\n  if (!signature) {\n    return false;\n  }\n\n  // Remove 'sha256=' prefix if present\n  const signatureHash = signature.startsWith('sha256=')\n    ? signature.slice(7)\n    : signature;\n\n  // Compute expected signature\n  const hmac = createHmac('sha256', appSecret);\n  const bodyBuffer =\n    typeof rawBody === 'string' ? Buffer.from(rawBody, 'utf-8') : rawBody;\n  const expectedHash = hmac.update(bodyBuffer).digest('hex');\n\n  // Convert to buffers for timing-safe comparison\n  const signatureBuffer = Buffer.from(signatureHash, 'utf-8');\n  const expectedBuffer = Buffer.from(expectedHash, 'utf-8');\n\n  // Ensure same length before comparison\n  if (signatureBuffer.length !== expectedBuffer.length) {\n    return false;\n  }\n\n  return timingSafeEqual(signatureBuffer, expectedBuffer);\n}\n","import type { WABAClientOptions, GetMediaOptions } from './types/client.js';\nimport type {\n  MediaMetadata,\n  MediaStreamResult,\n  MediaBufferResult,\n  RawMediaResponse,\n} from './types/media.js';\nimport { WABAMediaError, WABANetworkError, WABASignatureError } from './errors.js';\nimport { verifyWebhookSignature } from './verify.js';\n\nconst DEFAULT_API_VERSION = 'v22.0';\nconst DEFAULT_BASE_URL = 'https://graph.facebook.com';\n\n/**\n * Client for WhatsApp Business API media operations.\n */\nexport class WABAClient {\n  private readonly accessToken: string;\n  private readonly appSecret?: string;\n  private readonly apiVersion: string;\n  private readonly baseUrl: string;\n\n  constructor(options: WABAClientOptions) {\n    this.accessToken = options.accessToken;\n    this.appSecret = options.appSecret;\n    this.apiVersion = options.apiVersion ?? DEFAULT_API_VERSION;\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n  }\n\n  /**\n   * Verifies webhook signature using HMAC-SHA256.\n   * Requires appSecret to be set in constructor options.\n   *\n   * @throws {WABASignatureError} If appSecret was not provided in constructor\n   * @returns true if signature is valid, false otherwise\n   */\n  verifyWebhook(signature: string | undefined, rawBody: Buffer | string): boolean {\n    if (!this.appSecret) {\n      throw new WABASignatureError(\n        'appSecret is required for webhook verification. Pass it in WABAClientOptions.'\n      );\n    }\n    return verifyWebhookSignature({ signature, rawBody, appSecret: this.appSecret });\n  }\n\n  /**\n   * Fetches media by ID from WhatsApp Business API.\n   *\n   * Step 1: GET /{apiVersion}/{mediaId} → retrieves temporary URL + metadata\n   * Step 2: GET {temporaryUrl} → downloads binary content\n   *\n   * @throws {WABAMediaError} - Media not found (404) or access denied\n   * @throws {WABANetworkError} - Network/connection failures\n   */\n  async getMedia(mediaId: string): Promise<MediaStreamResult>;\n  async getMedia(\n    mediaId: string,\n    options: { asBuffer: true }\n  ): Promise<MediaBufferResult>;\n  async getMedia(\n    mediaId: string,\n    options?: GetMediaOptions\n  ): Promise<MediaStreamResult | MediaBufferResult>;\n  async getMedia(\n    mediaId: string,\n    options?: GetMediaOptions\n  ): Promise<MediaStreamResult | MediaBufferResult> {\n    // Step 1: Get media metadata and temporary URL\n    const metadata = await this.fetchMediaMetadata(mediaId);\n\n    // Step 2: Download the actual media\n    const response = await this.downloadMedia(metadata.url, mediaId);\n\n    if (options?.asBuffer) {\n      const buffer = await response.arrayBuffer();\n      return {\n        ...metadata,\n        buffer,\n      };\n    }\n\n    if (!response.body) {\n      throw new WABAMediaError('Response body is null', mediaId);\n    }\n\n    return {\n      ...metadata,\n      stream: response.body,\n    };\n  }\n\n  private async fetchMediaMetadata(mediaId: string): Promise<MediaMetadata> {\n    const url = `${this.baseUrl}/${this.apiVersion}/${mediaId}`;\n\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.accessToken}`,\n        },\n      });\n    } catch (error) {\n      throw new WABANetworkError(\n        `Failed to fetch media metadata: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        error instanceof Error ? error : undefined\n      );\n    }\n\n    if (!response.ok) {\n      const errorBody = await response.text().catch(() => 'Unknown error');\n      throw new WABAMediaError(\n        `Failed to fetch media metadata: ${response.status} ${errorBody}`,\n        mediaId,\n        response.status\n      );\n    }\n\n    const data = (await response.json()) as RawMediaResponse;\n\n    // Normalize snake_case to camelCase\n    return {\n      id: data.id,\n      mimeType: data.mime_type,\n      sha256: data.sha256,\n      fileSize: parseInt(data.file_size, 10),\n      url: data.url,\n    };\n  }\n\n  private async downloadMedia(url: string, mediaId: string): Promise<Response> {\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.accessToken}`,\n        },\n      });\n    } catch (error) {\n      throw new WABANetworkError(\n        `Failed to download media: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        error instanceof Error ? error : undefined\n      );\n    }\n\n    if (!response.ok) {\n      throw new WABAMediaError(\n        `Failed to download media: ${response.status}`,\n        mediaId,\n        response.status\n      );\n    }\n\n    return response;\n  }\n}\n","import type {\n  WebhookPayload,\n  WebhookClassification,\n  MessageWebhookValue,\n  StatusWebhookValue,\n  CallWebhookValue,\n} from '../types/webhooks.js';\n\n/**\n * Classifies a webhook payload into its type.\n * Returns a discriminated union for type-safe handling.\n */\nexport function classifyWebhook(payload: WebhookPayload): WebhookClassification {\n  const entry = payload.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value) {\n    return { type: 'unknown', payload };\n  }\n\n  // Check for calls array (call webhooks)\n  if ('calls' in value && Array.isArray(value.calls)) {\n    return { type: 'call', payload: value as CallWebhookValue };\n  }\n\n  // Check for statuses array (status webhooks)\n  if ('statuses' in value && Array.isArray(value.statuses)) {\n    return { type: 'status', payload: value as StatusWebhookValue };\n  }\n\n  // Check for messages array (message webhooks)\n  if ('messages' in value && Array.isArray(value.messages)) {\n    return { type: 'message', payload: value as MessageWebhookValue };\n  }\n\n  // Check for errors without messages (error webhook)\n  if ('errors' in value && Array.isArray(value.errors)) {\n    return { type: 'message', payload: value as MessageWebhookValue };\n  }\n\n  return { type: 'unknown', payload };\n}\n","import type {\n  IncomingMessage,\n  MessageClassification,\n  TextMessage,\n  ImageMessage,\n  AudioMessage,\n  VideoMessage,\n  DocumentMessage,\n  StickerMessage,\n  LocationMessage,\n  ContactsMessage,\n  InteractiveMessage,\n  ReactionMessage,\n  ButtonMessage,\n  OrderMessage,\n  SystemMessage,\n  ReferralMessage,\n  UnsupportedMessage,\n} from '../types/messages.js';\n\n/**\n * Classifies an incoming message by its type.\n * Returns a discriminated union for type-safe handling.\n */\nexport function classifyMessage(message: IncomingMessage): MessageClassification {\n  switch (message.type) {\n    case 'text':\n      return { type: 'text', message: message as TextMessage };\n    case 'image':\n      return { type: 'image', message: message as ImageMessage };\n    case 'audio':\n      return { type: 'audio', message: message as AudioMessage };\n    case 'video':\n      return { type: 'video', message: message as VideoMessage };\n    case 'document':\n      return { type: 'document', message: message as DocumentMessage };\n    case 'sticker':\n      return { type: 'sticker', message: message as StickerMessage };\n    case 'location':\n      return { type: 'location', message: message as LocationMessage };\n    case 'contacts':\n      return { type: 'contacts', message: message as ContactsMessage };\n    case 'interactive':\n      return { type: 'interactive', message: message as InteractiveMessage };\n    case 'reaction':\n      return { type: 'reaction', message: message as ReactionMessage };\n    case 'button':\n      return { type: 'button', message: message as ButtonMessage };\n    case 'order':\n      return { type: 'order', message: message as OrderMessage };\n    case 'system':\n      return { type: 'system', message: message as SystemMessage };\n    case 'referral':\n      return { type: 'referral', message: message as ReferralMessage };\n    default:\n      return { type: 'unsupported', message: message as UnsupportedMessage };\n  }\n}\n","import type {\n  IncomingMessage,\n  MediaMessage,\n  ImageMessage,\n  AudioMessage,\n  VideoMessage,\n  DocumentMessage,\n  StickerMessage,\n} from './types/messages.js';\nimport type { WebhookPayload } from './types/webhooks.js';\n\nconst MEDIA_TYPES = new Set(['image', 'audio', 'video', 'document', 'sticker']);\n\n/**\n * Type guard: returns true if message contains downloadable media.\n * Narrows type to messages with image/audio/video/document/sticker.\n */\nexport function isMediaMessage(message: IncomingMessage): message is MediaMessage {\n  return MEDIA_TYPES.has(message.type);\n}\n\n/**\n * Extracts media ID from any media message type.\n * Returns undefined if message has no media.\n */\nexport function extractMediaId(message: IncomingMessage): string | undefined {\n  if (!isMediaMessage(message)) {\n    return undefined;\n  }\n\n  switch (message.type) {\n    case 'image':\n      return (message as ImageMessage).image.id;\n    case 'audio':\n      return (message as AudioMessage).audio.id;\n    case 'video':\n      return (message as VideoMessage).video.id;\n    case 'document':\n      return (message as DocumentMessage).document.id;\n    case 'sticker':\n      return (message as StickerMessage).sticker.id;\n    default:\n      return undefined;\n  }\n}\n\nexport interface ContactInfo {\n  waId: string;\n  profileName: string | undefined;\n  phoneNumberId: string;\n}\n\n/**\n * Extracts sender info from webhook payload.\n * Returns undefined if the webhook doesn't contain message contact info.\n */\nexport function getContactInfo(webhook: WebhookPayload): ContactInfo | undefined {\n  const entry = webhook.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value || !('contacts' in value) || !value.contacts?.length) {\n    return undefined;\n  }\n\n  const contact = value.contacts[0];\n  const metadata = value.metadata;\n\n  return {\n    waId: contact.wa_id,\n    profileName: contact.profile?.name,\n    phoneNumberId: metadata.phone_number_id,\n  };\n}\n\n/**\n * Parses message timestamp to Date object.\n * WhatsApp timestamps are Unix epoch seconds as strings.\n */\nexport function getMessageTimestamp(message: IncomingMessage): Date {\n  const epochSeconds = parseInt(message.timestamp, 10);\n  return new Date(epochSeconds * 1000);\n}\n"],"mappings":";AACO,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC,YACE,SACgB,MACA,SAChB;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,iBAAN,cAA6B,UAAU;AAAA,EAC5C,YACE,SACgB,SAChB,MACA;AACA,UAAM,SAAS,IAAI;AAHH;AAIhB,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,mBAAN,cAA+B,UAAU;AAAA,EAC5B;AAAA,EAElB,YAAY,SAAiB,OAAe;AAC1C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,QAAQ;AACb,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,qBAAN,cAAiC,UAAU;AAAA,EAChD,YAAY,UAAkB,6BAA6B;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;;;AC7CA,SAAS,YAAY,uBAAuB;AAmBrC,SAAS,uBACd,SACS;AACT,QAAM,EAAE,WAAW,SAAS,UAAU,IAAI;AAE1C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,mBAAmB,gDAAgD;AAAA,EAC/E;AAEA,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAGA,QAAM,gBAAgB,UAAU,WAAW,SAAS,IAChD,UAAU,MAAM,CAAC,IACjB;AAGJ,QAAM,OAAO,WAAW,UAAU,SAAS;AAC3C,QAAM,aACJ,OAAO,YAAY,WAAW,OAAO,KAAK,SAAS,OAAO,IAAI;AAChE,QAAM,eAAe,KAAK,OAAO,UAAU,EAAE,OAAO,KAAK;AAGzD,QAAM,kBAAkB,OAAO,KAAK,eAAe,OAAO;AAC1D,QAAM,iBAAiB,OAAO,KAAK,cAAc,OAAO;AAGxD,MAAI,gBAAgB,WAAW,eAAe,QAAQ;AACpD,WAAO;AAAA,EACT;AAEA,SAAO,gBAAgB,iBAAiB,cAAc;AACxD;;;AC3CA,IAAM,sBAAsB;AAC5B,IAAM,mBAAmB;AAKlB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAA4B;AACtC,SAAK,cAAc,QAAQ;AAC3B,SAAK,YAAY,QAAQ;AACzB,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,UAAU,QAAQ,WAAW;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,cAAc,WAA+B,SAAmC;AAC9E,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,uBAAuB,EAAE,WAAW,SAAS,WAAW,KAAK,UAAU,CAAC;AAAA,EACjF;AAAA,EAoBA,MAAM,SACJ,SACA,SACgD;AAEhD,UAAM,WAAW,MAAM,KAAK,mBAAmB,OAAO;AAGtD,UAAM,WAAW,MAAM,KAAK,cAAc,SAAS,KAAK,OAAO;AAE/D,QAAI,SAAS,UAAU;AACrB,YAAM,SAAS,MAAM,SAAS,YAAY;AAC1C,aAAO;AAAA,QACL,GAAG;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,MAAM;AAClB,YAAM,IAAI,eAAe,yBAAyB,OAAO;AAAA,IAC3D;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAc,mBAAmB,SAAyC;AACxE,UAAM,MAAM,GAAG,KAAK,OAAO,IAAI,KAAK,UAAU,IAAI,OAAO;AAEzD,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK;AAAA,QAC1B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,KAAK,WAAW;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,mCAAmC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QAC3F,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,eAAe;AACnE,YAAM,IAAI;AAAA,QACR,mCAAmC,SAAS,MAAM,IAAI,SAAS;AAAA,QAC/D;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAGlC,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,UAAU,SAAS,KAAK,WAAW,EAAE;AAAA,MACrC,KAAK,KAAK;AAAA,IACZ;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,KAAa,SAAoC;AAC3E,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK;AAAA,QAC1B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,KAAK,WAAW;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACrF,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,6BAA6B,SAAS,MAAM;AAAA,QAC5C;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;;;AChJO,SAAS,gBAAgB,SAAgD;AAC9E,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,MAAM,WAAW,QAAQ;AAAA,EACpC;AAGA,MAAI,WAAW,SAAS,MAAM,QAAQ,MAAM,KAAK,GAAG;AAClD,WAAO,EAAE,MAAM,QAAQ,SAAS,MAA0B;AAAA,EAC5D;AAGA,MAAI,cAAc,SAAS,MAAM,QAAQ,MAAM,QAAQ,GAAG;AACxD,WAAO,EAAE,MAAM,UAAU,SAAS,MAA4B;AAAA,EAChE;AAGA,MAAI,cAAc,SAAS,MAAM,QAAQ,MAAM,QAAQ,GAAG;AACxD,WAAO,EAAE,MAAM,WAAW,SAAS,MAA6B;AAAA,EAClE;AAGA,MAAI,YAAY,SAAS,MAAM,QAAQ,MAAM,MAAM,GAAG;AACpD,WAAO,EAAE,MAAM,WAAW,SAAS,MAA6B;AAAA,EAClE;AAEA,SAAO,EAAE,MAAM,WAAW,QAAQ;AACpC;;;AClBO,SAAS,gBAAgB,SAAiD;AAC/E,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,QAAgC;AAAA,IACzD,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,WAAW,QAAmC;AAAA,IAC/D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,eAAe,QAAuC;AAAA,IACvE,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,UAAU,QAAkC;AAAA,IAC7D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,UAAU,QAAkC;AAAA,IAC7D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE;AACE,aAAO,EAAE,MAAM,eAAe,QAAuC;AAAA,EACzE;AACF;;;AC9CA,IAAM,cAAc,oBAAI,IAAI,CAAC,SAAS,SAAS,SAAS,YAAY,SAAS,CAAC;AAMvE,SAAS,eAAe,SAAmD;AAChF,SAAO,YAAY,IAAI,QAAQ,IAAI;AACrC;AAMO,SAAS,eAAe,SAA8C;AAC3E,MAAI,CAAC,eAAe,OAAO,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAA4B,SAAS;AAAA,IAC/C,KAAK;AACH,aAAQ,QAA2B,QAAQ;AAAA,IAC7C;AACE,aAAO;AAAA,EACX;AACF;AAYO,SAAS,eAAe,SAAkD;AAC/E,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,SAAS,EAAE,cAAc,UAAU,CAAC,MAAM,UAAU,QAAQ;AAC/D,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,MAAM,SAAS,CAAC;AAChC,QAAM,WAAW,MAAM;AAEvB,SAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd,aAAa,QAAQ,SAAS;AAAA,IAC9B,eAAe,SAAS;AAAA,EAC1B;AACF;AAMO,SAAS,oBAAoB,SAAgC;AAClE,QAAM,eAAe,SAAS,QAAQ,WAAW,EAAE;AACnD,SAAO,IAAI,KAAK,eAAe,GAAI;AACrC;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/errors.ts","../src/verify.ts","../src/client.ts","../src/webhooks/classify.ts","../src/webhooks/messages.ts","../src/helpers.ts"],"sourcesContent":["// Main client\nexport { WABAClient } from './client.js';\n\n// Webhook classification\nexport { classifyWebhook, classifyMessage } from './webhooks/index.js';\n\n// Signature verification\nexport { verifyWebhookSignature } from './verify.js';\nexport type { VerifyWebhookSignatureOptions } from './verify.js';\n\n// Utility helpers\nexport {\n  isMediaMessage,\n  extractMediaId,\n  getContactInfo,\n  getMessageTimestamp,\n  getMessageId,\n  getCallId,\n} from './helpers.js';\nexport type { ContactInfo } from './helpers.js';\n\n// Error classes\nexport {\n  WABAError,\n  WABAMediaError,\n  WABANetworkError,\n  WABASignatureError,\n} from './errors.js';\n\n// Types\nexport type {\n  // Client types\n  WABAClientOptions,\n  GetMediaOptions,\n  // Media types\n  MediaMetadata,\n  MediaStreamResult,\n  MediaBufferResult,\n  // Webhook types\n  WebhookPayload,\n  WebhookEntry,\n  WebhookChange,\n  WebhookValue,\n  WebhookContact,\n  WebhookMetadata,\n  WebhookError,\n  MessageWebhookValue,\n  StatusWebhookValue,\n  CallWebhookValue,\n  MessageStatus,\n  ConversationObject,\n  PricingObject,\n  StatusEntry,\n  CallEntry,\n  WebhookClassification,\n  // Message types\n  MessageContext,\n  IncomingMessageBase,\n  TextMessage,\n  MediaObject,\n  ImageMessage,\n  AudioMessage,\n  VideoMessage,\n  DocumentMessage,\n  StickerMessage,\n  LocationMessage,\n  ContactCard,\n  ContactsMessage,\n  ButtonReply,\n  ListReply,\n  InteractiveMessage,\n  ReactionMessage,\n  ButtonMessage,\n  OrderMessage,\n  SystemMessage,\n  ReferralMessage,\n  UnsupportedMessage,\n  IncomingMessage,\n  MediaMessage,\n  MessageClassification,\n} from './types/index.js';\n","/** Base error class for all WABA errors */\nexport class WABAError extends Error {\n  constructor(\n    message: string,\n    public readonly code?: number,\n    public readonly details?: unknown\n  ) {\n    super(message);\n    this.name = 'WABAError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for media-related failures (404, access denied) */\nexport class WABAMediaError extends WABAError {\n  constructor(\n    message: string,\n    public readonly mediaId: string,\n    code?: number\n  ) {\n    super(message, code);\n    this.name = 'WABAMediaError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for network/connection failures */\nexport class WABANetworkError extends WABAError {\n  override readonly cause?: Error;\n\n  constructor(message: string, cause?: Error) {\n    super(message);\n    this.name = 'WABANetworkError';\n    this.cause = cause;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for invalid webhook signatures */\nexport class WABASignatureError extends WABAError {\n  constructor(message: string = 'Invalid webhook signature') {\n    super(message);\n    this.name = 'WABASignatureError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n","import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { WABASignatureError } from './errors.js';\n\nexport interface VerifyWebhookSignatureOptions {\n  /** X-Hub-Signature-256 header value */\n  signature: string | undefined;\n  /** Raw request body (NOT parsed JSON) */\n  rawBody: Buffer | string;\n  /** Meta App Secret */\n  appSecret: string | undefined;\n}\n\n/**\n * Verifies webhook signature using HMAC-SHA256.\n * Uses timing-safe comparison to prevent timing attacks.\n *\n * @throws {WABASignatureError} If appSecret is not provided\n * @returns true if signature is valid, false otherwise\n */\nexport function verifyWebhookSignature(\n  options: VerifyWebhookSignatureOptions\n): boolean {\n  const { signature, rawBody, appSecret } = options;\n\n  if (!appSecret) {\n    throw new WABASignatureError('appSecret is required for webhook verification');\n  }\n\n  if (!signature) {\n    return false;\n  }\n\n  // Remove 'sha256=' prefix if present\n  const signatureHash = signature.startsWith('sha256=')\n    ? signature.slice(7)\n    : signature;\n\n  // Compute expected signature\n  const hmac = createHmac('sha256', appSecret);\n  const bodyBuffer =\n    typeof rawBody === 'string' ? Buffer.from(rawBody, 'utf-8') : rawBody;\n  const expectedHash = hmac.update(bodyBuffer).digest('hex');\n\n  // Convert to buffers for timing-safe comparison\n  const signatureBuffer = Buffer.from(signatureHash, 'utf-8');\n  const expectedBuffer = Buffer.from(expectedHash, 'utf-8');\n\n  // Ensure same length before comparison\n  if (signatureBuffer.length !== expectedBuffer.length) {\n    return false;\n  }\n\n  return timingSafeEqual(signatureBuffer, expectedBuffer);\n}\n","import type { WABAClientOptions, GetMediaOptions } from './types/client.js';\nimport type {\n  MediaMetadata,\n  MediaStreamResult,\n  MediaBufferResult,\n  RawMediaResponse,\n} from './types/media.js';\nimport { WABAMediaError, WABANetworkError, WABASignatureError } from './errors.js';\nimport { verifyWebhookSignature } from './verify.js';\n\nconst DEFAULT_API_VERSION = 'v22.0';\nconst DEFAULT_BASE_URL = 'https://graph.facebook.com';\n\n/**\n * Client for WhatsApp Business API media operations.\n */\nexport class WABAClient {\n  private readonly accessToken: string;\n  private readonly appSecret?: string;\n  private readonly apiVersion: string;\n  private readonly baseUrl: string;\n\n  constructor(options: WABAClientOptions) {\n    this.accessToken = options.accessToken;\n    this.appSecret = options.appSecret;\n    this.apiVersion = options.apiVersion ?? DEFAULT_API_VERSION;\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n  }\n\n  /**\n   * Verifies webhook signature using HMAC-SHA256.\n   * Requires appSecret to be set in constructor options.\n   *\n   * @throws {WABASignatureError} If appSecret was not provided in constructor\n   * @returns true if signature is valid, false otherwise\n   */\n  verifyWebhook(signature: string | undefined, rawBody: Buffer | string): boolean {\n    if (!this.appSecret) {\n      throw new WABASignatureError(\n        'appSecret is required for webhook verification. Pass it in WABAClientOptions.'\n      );\n    }\n    return verifyWebhookSignature({ signature, rawBody, appSecret: this.appSecret });\n  }\n\n  /**\n   * Fetches media by ID from WhatsApp Business API.\n   *\n   * Step 1: GET /{apiVersion}/{mediaId} → retrieves temporary URL + metadata\n   * Step 2: GET {temporaryUrl} → downloads binary content\n   *\n   * @throws {WABAMediaError} - Media not found (404) or access denied\n   * @throws {WABANetworkError} - Network/connection failures\n   */\n  async getMedia(mediaId: string): Promise<MediaStreamResult>;\n  async getMedia(\n    mediaId: string,\n    options: { asBuffer: true }\n  ): Promise<MediaBufferResult>;\n  async getMedia(\n    mediaId: string,\n    options?: GetMediaOptions\n  ): Promise<MediaStreamResult | MediaBufferResult>;\n  async getMedia(\n    mediaId: string,\n    options?: GetMediaOptions\n  ): Promise<MediaStreamResult | MediaBufferResult> {\n    // Step 1: Get media metadata and temporary URL\n    const metadata = await this.fetchMediaMetadata(mediaId);\n\n    // Step 2: Download the actual media\n    const response = await this.downloadMedia(metadata.url, mediaId);\n\n    if (options?.asBuffer) {\n      const buffer = await response.arrayBuffer();\n      return {\n        ...metadata,\n        buffer,\n      };\n    }\n\n    if (!response.body) {\n      throw new WABAMediaError('Response body is null', mediaId);\n    }\n\n    return {\n      ...metadata,\n      stream: response.body,\n    };\n  }\n\n  private async fetchMediaMetadata(mediaId: string): Promise<MediaMetadata> {\n    const url = `${this.baseUrl}/${this.apiVersion}/${mediaId}`;\n\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.accessToken}`,\n        },\n      });\n    } catch (error) {\n      throw new WABANetworkError(\n        `Failed to fetch media metadata: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        error instanceof Error ? error : undefined\n      );\n    }\n\n    if (!response.ok) {\n      const errorBody = await response.text().catch(() => 'Unknown error');\n      throw new WABAMediaError(\n        `Failed to fetch media metadata: ${response.status} ${errorBody}`,\n        mediaId,\n        response.status\n      );\n    }\n\n    const data = (await response.json()) as RawMediaResponse;\n\n    // Normalize snake_case to camelCase\n    return {\n      id: data.id,\n      mimeType: data.mime_type,\n      sha256: data.sha256,\n      fileSize: parseInt(data.file_size, 10),\n      url: data.url,\n    };\n  }\n\n  private async downloadMedia(url: string, mediaId: string): Promise<Response> {\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.accessToken}`,\n        },\n      });\n    } catch (error) {\n      throw new WABANetworkError(\n        `Failed to download media: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        error instanceof Error ? error : undefined\n      );\n    }\n\n    if (!response.ok) {\n      throw new WABAMediaError(\n        `Failed to download media: ${response.status}`,\n        mediaId,\n        response.status\n      );\n    }\n\n    return response;\n  }\n}\n","import type {\n  WebhookPayload,\n  WebhookClassification,\n  MessageWebhookValue,\n  StatusWebhookValue,\n  CallWebhookValue,\n} from '../types/webhooks.js';\n\n/**\n * Classifies a webhook payload into its type.\n * Returns a discriminated union for type-safe handling.\n */\nexport function classifyWebhook(payload: WebhookPayload): WebhookClassification {\n  const entry = payload.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value) {\n    return { type: 'unknown', payload };\n  }\n\n  // Check for calls array (call webhooks)\n  if ('calls' in value && Array.isArray(value.calls)) {\n    return { type: 'call', payload: value as CallWebhookValue };\n  }\n\n  // Check for statuses array (status webhooks)\n  if ('statuses' in value && Array.isArray(value.statuses)) {\n    return { type: 'status', payload: value as StatusWebhookValue };\n  }\n\n  // Check for messages array (message webhooks)\n  if ('messages' in value && Array.isArray(value.messages)) {\n    return { type: 'message', payload: value as MessageWebhookValue };\n  }\n\n  // Check for errors without messages (error webhook)\n  if ('errors' in value && Array.isArray(value.errors)) {\n    return { type: 'message', payload: value as MessageWebhookValue };\n  }\n\n  return { type: 'unknown', payload };\n}\n","import type {\n  IncomingMessage,\n  MessageClassification,\n  TextMessage,\n  ImageMessage,\n  AudioMessage,\n  VideoMessage,\n  DocumentMessage,\n  StickerMessage,\n  LocationMessage,\n  ContactsMessage,\n  InteractiveMessage,\n  ReactionMessage,\n  ButtonMessage,\n  OrderMessage,\n  SystemMessage,\n  ReferralMessage,\n  UnsupportedMessage,\n} from '../types/messages.js';\n\n/**\n * Classifies an incoming message by its type.\n * Returns a discriminated union for type-safe handling.\n */\nexport function classifyMessage(message: IncomingMessage): MessageClassification {\n  switch (message.type) {\n    case 'text':\n      return { type: 'text', message: message as TextMessage };\n    case 'image':\n      return { type: 'image', message: message as ImageMessage };\n    case 'audio':\n      return { type: 'audio', message: message as AudioMessage };\n    case 'video':\n      return { type: 'video', message: message as VideoMessage };\n    case 'document':\n      return { type: 'document', message: message as DocumentMessage };\n    case 'sticker':\n      return { type: 'sticker', message: message as StickerMessage };\n    case 'location':\n      return { type: 'location', message: message as LocationMessage };\n    case 'contacts':\n      return { type: 'contacts', message: message as ContactsMessage };\n    case 'interactive':\n      return { type: 'interactive', message: message as InteractiveMessage };\n    case 'reaction':\n      return { type: 'reaction', message: message as ReactionMessage };\n    case 'button':\n      return { type: 'button', message: message as ButtonMessage };\n    case 'order':\n      return { type: 'order', message: message as OrderMessage };\n    case 'system':\n      return { type: 'system', message: message as SystemMessage };\n    case 'referral':\n      return { type: 'referral', message: message as ReferralMessage };\n    default:\n      return { type: 'unsupported', message: message as UnsupportedMessage };\n  }\n}\n","import type {\n  IncomingMessage,\n  MediaMessage,\n  ImageMessage,\n  AudioMessage,\n  VideoMessage,\n  DocumentMessage,\n  StickerMessage,\n} from './types/messages.js';\nimport type {\n  WebhookPayload,\n  MessageWebhookValue,\n  StatusWebhookValue,\n  CallWebhookValue,\n} from './types/webhooks.js';\n\nconst MEDIA_TYPES = new Set(['image', 'audio', 'video', 'document', 'sticker']);\n\n/**\n * Type guard: returns true if message contains downloadable media.\n * Narrows type to messages with image/audio/video/document/sticker.\n */\nexport function isMediaMessage(message: IncomingMessage): message is MediaMessage {\n  return MEDIA_TYPES.has(message.type);\n}\n\n/**\n * Extracts media ID from any media message type.\n * Returns undefined if message has no media.\n */\nexport function extractMediaId(message: IncomingMessage): string | undefined {\n  if (!isMediaMessage(message)) {\n    return undefined;\n  }\n\n  switch (message.type) {\n    case 'image':\n      return (message as ImageMessage).image.id;\n    case 'audio':\n      return (message as AudioMessage).audio.id;\n    case 'video':\n      return (message as VideoMessage).video.id;\n    case 'document':\n      return (message as DocumentMessage).document.id;\n    case 'sticker':\n      return (message as StickerMessage).sticker.id;\n    default:\n      return undefined;\n  }\n}\n\nexport interface ContactInfo {\n  waId: string;\n  profileName: string | undefined;\n  phoneNumberId: string;\n}\n\n/**\n * Extracts sender info from webhook payload.\n * Returns null if the webhook doesn't contain message contact info.\n */\nexport function getContactInfo(webhook: WebhookPayload): ContactInfo | null {\n  const entry = webhook.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value || !('contacts' in value) || !value.contacts?.length) {\n    return null;\n  }\n\n  const contact = value.contacts[0];\n  const metadata = value.metadata;\n\n  return {\n    waId: contact.wa_id,\n    profileName: contact.profile?.name,\n    phoneNumberId: metadata.phone_number_id,\n  };\n}\n\n/**\n * Parses message timestamp to Date object.\n * WhatsApp timestamps are Unix epoch seconds as strings.\n */\nexport function getMessageTimestamp(message: IncomingMessage): Date {\n  const epochSeconds = parseInt(message.timestamp, 10);\n  return new Date(epochSeconds * 1000);\n}\n\n/**\n * Extracts message ID from message or status webhook.\n * Returns null if not a message/status webhook or ID not present.\n */\nexport function getMessageId(webhook: WebhookPayload): string | null {\n  const entry = webhook.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value) {\n    return null;\n  }\n\n  // Try message webhook\n  if ('messages' in value) {\n    const messageValue = value as MessageWebhookValue;\n    return messageValue.messages?.[0]?.id ?? null;\n  }\n\n  // Try status webhook\n  if ('statuses' in value) {\n    const statusValue = value as StatusWebhookValue;\n    return statusValue.statuses?.[0]?.id ?? null;\n  }\n\n  return null;\n}\n\n/**\n * Extracts call ID from call webhook.\n * Returns null if not a call webhook or ID not present.\n */\nexport function getCallId(webhook: WebhookPayload): string | null {\n  const entry = webhook.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value) {\n    return null;\n  }\n\n  // Check if it's a call webhook\n  if ('calls' in value) {\n    const callValue = value as CallWebhookValue;\n    return callValue.calls?.[0]?.id ?? null;\n  }\n\n  return null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCO,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC,YACE,SACgB,MACA,SAChB;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,iBAAN,cAA6B,UAAU;AAAA,EAC5C,YACE,SACgB,SAChB,MACA;AACA,UAAM,SAAS,IAAI;AAHH;AAIhB,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,mBAAN,cAA+B,UAAU;AAAA,EAC5B;AAAA,EAElB,YAAY,SAAiB,OAAe;AAC1C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,QAAQ;AACb,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,qBAAN,cAAiC,UAAU;AAAA,EAChD,YAAY,UAAkB,6BAA6B;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;;;AC7CA,yBAA4C;AAmBrC,SAAS,uBACd,SACS;AACT,QAAM,EAAE,WAAW,SAAS,UAAU,IAAI;AAE1C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,mBAAmB,gDAAgD;AAAA,EAC/E;AAEA,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAGA,QAAM,gBAAgB,UAAU,WAAW,SAAS,IAChD,UAAU,MAAM,CAAC,IACjB;AAGJ,QAAM,WAAO,+BAAW,UAAU,SAAS;AAC3C,QAAM,aACJ,OAAO,YAAY,WAAW,OAAO,KAAK,SAAS,OAAO,IAAI;AAChE,QAAM,eAAe,KAAK,OAAO,UAAU,EAAE,OAAO,KAAK;AAGzD,QAAM,kBAAkB,OAAO,KAAK,eAAe,OAAO;AAC1D,QAAM,iBAAiB,OAAO,KAAK,cAAc,OAAO;AAGxD,MAAI,gBAAgB,WAAW,eAAe,QAAQ;AACpD,WAAO;AAAA,EACT;AAEA,aAAO,oCAAgB,iBAAiB,cAAc;AACxD;;;AC3CA,IAAM,sBAAsB;AAC5B,IAAM,mBAAmB;AAKlB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAA4B;AACtC,SAAK,cAAc,QAAQ;AAC3B,SAAK,YAAY,QAAQ;AACzB,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,UAAU,QAAQ,WAAW;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,cAAc,WAA+B,SAAmC;AAC9E,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,uBAAuB,EAAE,WAAW,SAAS,WAAW,KAAK,UAAU,CAAC;AAAA,EACjF;AAAA,EAoBA,MAAM,SACJ,SACA,SACgD;AAEhD,UAAM,WAAW,MAAM,KAAK,mBAAmB,OAAO;AAGtD,UAAM,WAAW,MAAM,KAAK,cAAc,SAAS,KAAK,OAAO;AAE/D,QAAI,SAAS,UAAU;AACrB,YAAM,SAAS,MAAM,SAAS,YAAY;AAC1C,aAAO;AAAA,QACL,GAAG;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,MAAM;AAClB,YAAM,IAAI,eAAe,yBAAyB,OAAO;AAAA,IAC3D;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAc,mBAAmB,SAAyC;AACxE,UAAM,MAAM,GAAG,KAAK,OAAO,IAAI,KAAK,UAAU,IAAI,OAAO;AAEzD,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK;AAAA,QAC1B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,KAAK,WAAW;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,mCAAmC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QAC3F,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,eAAe;AACnE,YAAM,IAAI;AAAA,QACR,mCAAmC,SAAS,MAAM,IAAI,SAAS;AAAA,QAC/D;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAGlC,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,UAAU,SAAS,KAAK,WAAW,EAAE;AAAA,MACrC,KAAK,KAAK;AAAA,IACZ;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,KAAa,SAAoC;AAC3E,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK;AAAA,QAC1B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,KAAK,WAAW;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACrF,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,6BAA6B,SAAS,MAAM;AAAA,QAC5C;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;;;AChJO,SAAS,gBAAgB,SAAgD;AAC9E,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,MAAM,WAAW,QAAQ;AAAA,EACpC;AAGA,MAAI,WAAW,SAAS,MAAM,QAAQ,MAAM,KAAK,GAAG;AAClD,WAAO,EAAE,MAAM,QAAQ,SAAS,MAA0B;AAAA,EAC5D;AAGA,MAAI,cAAc,SAAS,MAAM,QAAQ,MAAM,QAAQ,GAAG;AACxD,WAAO,EAAE,MAAM,UAAU,SAAS,MAA4B;AAAA,EAChE;AAGA,MAAI,cAAc,SAAS,MAAM,QAAQ,MAAM,QAAQ,GAAG;AACxD,WAAO,EAAE,MAAM,WAAW,SAAS,MAA6B;AAAA,EAClE;AAGA,MAAI,YAAY,SAAS,MAAM,QAAQ,MAAM,MAAM,GAAG;AACpD,WAAO,EAAE,MAAM,WAAW,SAAS,MAA6B;AAAA,EAClE;AAEA,SAAO,EAAE,MAAM,WAAW,QAAQ;AACpC;;;AClBO,SAAS,gBAAgB,SAAiD;AAC/E,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,QAAgC;AAAA,IACzD,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,WAAW,QAAmC;AAAA,IAC/D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,eAAe,QAAuC;AAAA,IACvE,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,UAAU,QAAkC;AAAA,IAC7D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,UAAU,QAAkC;AAAA,IAC7D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE;AACE,aAAO,EAAE,MAAM,eAAe,QAAuC;AAAA,EACzE;AACF;;;ACzCA,IAAM,cAAc,oBAAI,IAAI,CAAC,SAAS,SAAS,SAAS,YAAY,SAAS,CAAC;AAMvE,SAAS,eAAe,SAAmD;AAChF,SAAO,YAAY,IAAI,QAAQ,IAAI;AACrC;AAMO,SAAS,eAAe,SAA8C;AAC3E,MAAI,CAAC,eAAe,OAAO,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAA4B,SAAS;AAAA,IAC/C,KAAK;AACH,aAAQ,QAA2B,QAAQ;AAAA,IAC7C;AACE,aAAO;AAAA,EACX;AACF;AAYO,SAAS,eAAe,SAA6C;AAC1E,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,SAAS,EAAE,cAAc,UAAU,CAAC,MAAM,UAAU,QAAQ;AAC/D,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,MAAM,SAAS,CAAC;AAChC,QAAM,WAAW,MAAM;AAEvB,SAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd,aAAa,QAAQ,SAAS;AAAA,IAC9B,eAAe,SAAS;AAAA,EAC1B;AACF;AAMO,SAAS,oBAAoB,SAAgC;AAClE,QAAM,eAAe,SAAS,QAAQ,WAAW,EAAE;AACnD,SAAO,IAAI,KAAK,eAAe,GAAI;AACrC;AAMO,SAAS,aAAa,SAAwC;AACnE,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAGA,MAAI,cAAc,OAAO;AACvB,UAAM,eAAe;AACrB,WAAO,aAAa,WAAW,CAAC,GAAG,MAAM;AAAA,EAC3C;AAGA,MAAI,cAAc,OAAO;AACvB,UAAM,cAAc;AACpB,WAAO,YAAY,WAAW,CAAC,GAAG,MAAM;AAAA,EAC1C;AAEA,SAAO;AACT;AAMO,SAAS,UAAU,SAAwC;AAChE,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAGA,MAAI,WAAW,OAAO;AACpB,UAAM,YAAY;AAClB,WAAO,UAAU,QAAQ,CAAC,GAAG,MAAM;AAAA,EACrC;AAEA,SAAO;AACT;","names":[]}

package/dist/index.mjs

@@ -0,0 +1,312 @@
+// src/errors.ts
+var WABAError = class extends Error {
+  constructor(message, code, details) {
+    super(message);
+    this.code = code;
+    this.details = details;
+    this.name = "WABAError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var WABAMediaError = class extends WABAError {
+  constructor(message, mediaId, code) {
+    super(message, code);
+    this.mediaId = mediaId;
+    this.name = "WABAMediaError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var WABANetworkError = class extends WABAError {
+  cause;
+  constructor(message, cause) {
+    super(message);
+    this.name = "WABANetworkError";
+    this.cause = cause;
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var WABASignatureError = class extends WABAError {
+  constructor(message = "Invalid webhook signature") {
+    super(message);
+    this.name = "WABASignatureError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+
+// src/verify.ts
+import { createHmac, timingSafeEqual } from "crypto";
+function verifyWebhookSignature(options) {
+  const { signature, rawBody, appSecret } = options;
+  if (!appSecret) {
+    throw new WABASignatureError("appSecret is required for webhook verification");
+  }
+  if (!signature) {
+    return false;
+  }
+  const signatureHash = signature.startsWith("sha256=") ? signature.slice(7) : signature;
+  const hmac = createHmac("sha256", appSecret);
+  const bodyBuffer = typeof rawBody === "string" ? Buffer.from(rawBody, "utf-8") : rawBody;
+  const expectedHash = hmac.update(bodyBuffer).digest("hex");
+  const signatureBuffer = Buffer.from(signatureHash, "utf-8");
+  const expectedBuffer = Buffer.from(expectedHash, "utf-8");
+  if (signatureBuffer.length !== expectedBuffer.length) {
+    return false;
+  }
+  return timingSafeEqual(signatureBuffer, expectedBuffer);
+}
+
+// src/client.ts
+var DEFAULT_API_VERSION = "v22.0";
+var DEFAULT_BASE_URL = "https://graph.facebook.com";
+var WABAClient = class {
+  accessToken;
+  appSecret;
+  apiVersion;
+  baseUrl;
+  constructor(options) {
+    this.accessToken = options.accessToken;
+    this.appSecret = options.appSecret;
+    this.apiVersion = options.apiVersion ?? DEFAULT_API_VERSION;
+    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
+  }
+  /**
+   * Verifies webhook signature using HMAC-SHA256.
+   * Requires appSecret to be set in constructor options.
+   *
+   * @throws {WABASignatureError} If appSecret was not provided in constructor
+   * @returns true if signature is valid, false otherwise
+   */
+  verifyWebhook(signature, rawBody) {
+    if (!this.appSecret) {
+      throw new WABASignatureError(
+        "appSecret is required for webhook verification. Pass it in WABAClientOptions."
+      );
+    }
+    return verifyWebhookSignature({ signature, rawBody, appSecret: this.appSecret });
+  }
+  async getMedia(mediaId, options) {
+    const metadata = await this.fetchMediaMetadata(mediaId);
+    const response = await this.downloadMedia(metadata.url, mediaId);
+    if (options?.asBuffer) {
+      const buffer = await response.arrayBuffer();
+      return {
+        ...metadata,
+        buffer
+      };
+    }
+    if (!response.body) {
+      throw new WABAMediaError("Response body is null", mediaId);
+    }
+    return {
+      ...metadata,
+      stream: response.body
+    };
+  }
+  async fetchMediaMetadata(mediaId) {
+    const url = `${this.baseUrl}/${this.apiVersion}/${mediaId}`;
+    let response;
+    try {
+      response = await fetch(url, {
+        method: "GET",
+        headers: {
+          Authorization: `Bearer ${this.accessToken}`
+        }
+      });
+    } catch (error) {
+      throw new WABANetworkError(
+        `Failed to fetch media metadata: ${error instanceof Error ? error.message : "Unknown error"}`,
+        error instanceof Error ? error : void 0
+      );
+    }
+    if (!response.ok) {
+      const errorBody = await response.text().catch(() => "Unknown error");
+      throw new WABAMediaError(
+        `Failed to fetch media metadata: ${response.status} ${errorBody}`,
+        mediaId,
+        response.status
+      );
+    }
+    const data = await response.json();
+    return {
+      id: data.id,
+      mimeType: data.mime_type,
+      sha256: data.sha256,
+      fileSize: parseInt(data.file_size, 10),
+      url: data.url
+    };
+  }
+  async downloadMedia(url, mediaId) {
+    let response;
+    try {
+      response = await fetch(url, {
+        method: "GET",
+        headers: {
+          Authorization: `Bearer ${this.accessToken}`
+        }
+      });
+    } catch (error) {
+      throw new WABANetworkError(
+        `Failed to download media: ${error instanceof Error ? error.message : "Unknown error"}`,
+        error instanceof Error ? error : void 0
+      );
+    }
+    if (!response.ok) {
+      throw new WABAMediaError(
+        `Failed to download media: ${response.status}`,
+        mediaId,
+        response.status
+      );
+    }
+    return response;
+  }
+};
+
+// src/webhooks/classify.ts
+function classifyWebhook(payload) {
+  const entry = payload.entry?.[0];
+  const change = entry?.changes?.[0];
+  const value = change?.value;
+  if (!value) {
+    return { type: "unknown", payload };
+  }
+  if ("calls" in value && Array.isArray(value.calls)) {
+    return { type: "call", payload: value };
+  }
+  if ("statuses" in value && Array.isArray(value.statuses)) {
+    return { type: "status", payload: value };
+  }
+  if ("messages" in value && Array.isArray(value.messages)) {
+    return { type: "message", payload: value };
+  }
+  if ("errors" in value && Array.isArray(value.errors)) {
+    return { type: "message", payload: value };
+  }
+  return { type: "unknown", payload };
+}
+
+// src/webhooks/messages.ts
+function classifyMessage(message) {
+  switch (message.type) {
+    case "text":
+      return { type: "text", message };
+    case "image":
+      return { type: "image", message };
+    case "audio":
+      return { type: "audio", message };
+    case "video":
+      return { type: "video", message };
+    case "document":
+      return { type: "document", message };
+    case "sticker":
+      return { type: "sticker", message };
+    case "location":
+      return { type: "location", message };
+    case "contacts":
+      return { type: "contacts", message };
+    case "interactive":
+      return { type: "interactive", message };
+    case "reaction":
+      return { type: "reaction", message };
+    case "button":
+      return { type: "button", message };
+    case "order":
+      return { type: "order", message };
+    case "system":
+      return { type: "system", message };
+    case "referral":
+      return { type: "referral", message };
+    default:
+      return { type: "unsupported", message };
+  }
+}
+
+// src/helpers.ts
+var MEDIA_TYPES = /* @__PURE__ */ new Set(["image", "audio", "video", "document", "sticker"]);
+function isMediaMessage(message) {
+  return MEDIA_TYPES.has(message.type);
+}
+function extractMediaId(message) {
+  if (!isMediaMessage(message)) {
+    return void 0;
+  }
+  switch (message.type) {
+    case "image":
+      return message.image.id;
+    case "audio":
+      return message.audio.id;
+    case "video":
+      return message.video.id;
+    case "document":
+      return message.document.id;
+    case "sticker":
+      return message.sticker.id;
+    default:
+      return void 0;
+  }
+}
+function getContactInfo(webhook) {
+  const entry = webhook.entry?.[0];
+  const change = entry?.changes?.[0];
+  const value = change?.value;
+  if (!value || !("contacts" in value) || !value.contacts?.length) {
+    return null;
+  }
+  const contact = value.contacts[0];
+  const metadata = value.metadata;
+  return {
+    waId: contact.wa_id,
+    profileName: contact.profile?.name,
+    phoneNumberId: metadata.phone_number_id
+  };
+}
+function getMessageTimestamp(message) {
+  const epochSeconds = parseInt(message.timestamp, 10);
+  return new Date(epochSeconds * 1e3);
+}
+function getMessageId(webhook) {
+  const entry = webhook.entry?.[0];
+  const change = entry?.changes?.[0];
+  const value = change?.value;
+  if (!value) {
+    return null;
+  }
+  if ("messages" in value) {
+    const messageValue = value;
+    return messageValue.messages?.[0]?.id ?? null;
+  }
+  if ("statuses" in value) {
+    const statusValue = value;
+    return statusValue.statuses?.[0]?.id ?? null;
+  }
+  return null;
+}
+function getCallId(webhook) {
+  const entry = webhook.entry?.[0];
+  const change = entry?.changes?.[0];
+  const value = change?.value;
+  if (!value) {
+    return null;
+  }
+  if ("calls" in value) {
+    const callValue = value;
+    return callValue.calls?.[0]?.id ?? null;
+  }
+  return null;
+}
+export {
+  WABAClient,
+  WABAError,
+  WABAMediaError,
+  WABANetworkError,
+  WABASignatureError,
+  classifyMessage,
+  classifyWebhook,
+  extractMediaId,
+  getCallId,
+  getContactInfo,
+  getMessageId,
+  getMessageTimestamp,
+  isMediaMessage,
+  verifyWebhookSignature
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/verify.ts","../src/client.ts","../src/webhooks/classify.ts","../src/webhooks/messages.ts","../src/helpers.ts"],"sourcesContent":["/** Base error class for all WABA errors */\nexport class WABAError extends Error {\n  constructor(\n    message: string,\n    public readonly code?: number,\n    public readonly details?: unknown\n  ) {\n    super(message);\n    this.name = 'WABAError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for media-related failures (404, access denied) */\nexport class WABAMediaError extends WABAError {\n  constructor(\n    message: string,\n    public readonly mediaId: string,\n    code?: number\n  ) {\n    super(message, code);\n    this.name = 'WABAMediaError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for network/connection failures */\nexport class WABANetworkError extends WABAError {\n  override readonly cause?: Error;\n\n  constructor(message: string, cause?: Error) {\n    super(message);\n    this.name = 'WABANetworkError';\n    this.cause = cause;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Error for invalid webhook signatures */\nexport class WABASignatureError extends WABAError {\n  constructor(message: string = 'Invalid webhook signature') {\n    super(message);\n    this.name = 'WABASignatureError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n","import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { WABASignatureError } from './errors.js';\n\nexport interface VerifyWebhookSignatureOptions {\n  /** X-Hub-Signature-256 header value */\n  signature: string | undefined;\n  /** Raw request body (NOT parsed JSON) */\n  rawBody: Buffer | string;\n  /** Meta App Secret */\n  appSecret: string | undefined;\n}\n\n/**\n * Verifies webhook signature using HMAC-SHA256.\n * Uses timing-safe comparison to prevent timing attacks.\n *\n * @throws {WABASignatureError} If appSecret is not provided\n * @returns true if signature is valid, false otherwise\n */\nexport function verifyWebhookSignature(\n  options: VerifyWebhookSignatureOptions\n): boolean {\n  const { signature, rawBody, appSecret } = options;\n\n  if (!appSecret) {\n    throw new WABASignatureError('appSecret is required for webhook verification');\n  }\n\n  if (!signature) {\n    return false;\n  }\n\n  // Remove 'sha256=' prefix if present\n  const signatureHash = signature.startsWith('sha256=')\n    ? signature.slice(7)\n    : signature;\n\n  // Compute expected signature\n  const hmac = createHmac('sha256', appSecret);\n  const bodyBuffer =\n    typeof rawBody === 'string' ? Buffer.from(rawBody, 'utf-8') : rawBody;\n  const expectedHash = hmac.update(bodyBuffer).digest('hex');\n\n  // Convert to buffers for timing-safe comparison\n  const signatureBuffer = Buffer.from(signatureHash, 'utf-8');\n  const expectedBuffer = Buffer.from(expectedHash, 'utf-8');\n\n  // Ensure same length before comparison\n  if (signatureBuffer.length !== expectedBuffer.length) {\n    return false;\n  }\n\n  return timingSafeEqual(signatureBuffer, expectedBuffer);\n}\n","import type { WABAClientOptions, GetMediaOptions } from './types/client.js';\nimport type {\n  MediaMetadata,\n  MediaStreamResult,\n  MediaBufferResult,\n  RawMediaResponse,\n} from './types/media.js';\nimport { WABAMediaError, WABANetworkError, WABASignatureError } from './errors.js';\nimport { verifyWebhookSignature } from './verify.js';\n\nconst DEFAULT_API_VERSION = 'v22.0';\nconst DEFAULT_BASE_URL = 'https://graph.facebook.com';\n\n/**\n * Client for WhatsApp Business API media operations.\n */\nexport class WABAClient {\n  private readonly accessToken: string;\n  private readonly appSecret?: string;\n  private readonly apiVersion: string;\n  private readonly baseUrl: string;\n\n  constructor(options: WABAClientOptions) {\n    this.accessToken = options.accessToken;\n    this.appSecret = options.appSecret;\n    this.apiVersion = options.apiVersion ?? DEFAULT_API_VERSION;\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n  }\n\n  /**\n   * Verifies webhook signature using HMAC-SHA256.\n   * Requires appSecret to be set in constructor options.\n   *\n   * @throws {WABASignatureError} If appSecret was not provided in constructor\n   * @returns true if signature is valid, false otherwise\n   */\n  verifyWebhook(signature: string | undefined, rawBody: Buffer | string): boolean {\n    if (!this.appSecret) {\n      throw new WABASignatureError(\n        'appSecret is required for webhook verification. Pass it in WABAClientOptions.'\n      );\n    }\n    return verifyWebhookSignature({ signature, rawBody, appSecret: this.appSecret });\n  }\n\n  /**\n   * Fetches media by ID from WhatsApp Business API.\n   *\n   * Step 1: GET /{apiVersion}/{mediaId} → retrieves temporary URL + metadata\n   * Step 2: GET {temporaryUrl} → downloads binary content\n   *\n   * @throws {WABAMediaError} - Media not found (404) or access denied\n   * @throws {WABANetworkError} - Network/connection failures\n   */\n  async getMedia(mediaId: string): Promise<MediaStreamResult>;\n  async getMedia(\n    mediaId: string,\n    options: { asBuffer: true }\n  ): Promise<MediaBufferResult>;\n  async getMedia(\n    mediaId: string,\n    options?: GetMediaOptions\n  ): Promise<MediaStreamResult | MediaBufferResult>;\n  async getMedia(\n    mediaId: string,\n    options?: GetMediaOptions\n  ): Promise<MediaStreamResult | MediaBufferResult> {\n    // Step 1: Get media metadata and temporary URL\n    const metadata = await this.fetchMediaMetadata(mediaId);\n\n    // Step 2: Download the actual media\n    const response = await this.downloadMedia(metadata.url, mediaId);\n\n    if (options?.asBuffer) {\n      const buffer = await response.arrayBuffer();\n      return {\n        ...metadata,\n        buffer,\n      };\n    }\n\n    if (!response.body) {\n      throw new WABAMediaError('Response body is null', mediaId);\n    }\n\n    return {\n      ...metadata,\n      stream: response.body,\n    };\n  }\n\n  private async fetchMediaMetadata(mediaId: string): Promise<MediaMetadata> {\n    const url = `${this.baseUrl}/${this.apiVersion}/${mediaId}`;\n\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.accessToken}`,\n        },\n      });\n    } catch (error) {\n      throw new WABANetworkError(\n        `Failed to fetch media metadata: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        error instanceof Error ? error : undefined\n      );\n    }\n\n    if (!response.ok) {\n      const errorBody = await response.text().catch(() => 'Unknown error');\n      throw new WABAMediaError(\n        `Failed to fetch media metadata: ${response.status} ${errorBody}`,\n        mediaId,\n        response.status\n      );\n    }\n\n    const data = (await response.json()) as RawMediaResponse;\n\n    // Normalize snake_case to camelCase\n    return {\n      id: data.id,\n      mimeType: data.mime_type,\n      sha256: data.sha256,\n      fileSize: parseInt(data.file_size, 10),\n      url: data.url,\n    };\n  }\n\n  private async downloadMedia(url: string, mediaId: string): Promise<Response> {\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: 'GET',\n        headers: {\n          Authorization: `Bearer ${this.accessToken}`,\n        },\n      });\n    } catch (error) {\n      throw new WABANetworkError(\n        `Failed to download media: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        error instanceof Error ? error : undefined\n      );\n    }\n\n    if (!response.ok) {\n      throw new WABAMediaError(\n        `Failed to download media: ${response.status}`,\n        mediaId,\n        response.status\n      );\n    }\n\n    return response;\n  }\n}\n","import type {\n  WebhookPayload,\n  WebhookClassification,\n  MessageWebhookValue,\n  StatusWebhookValue,\n  CallWebhookValue,\n} from '../types/webhooks.js';\n\n/**\n * Classifies a webhook payload into its type.\n * Returns a discriminated union for type-safe handling.\n */\nexport function classifyWebhook(payload: WebhookPayload): WebhookClassification {\n  const entry = payload.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value) {\n    return { type: 'unknown', payload };\n  }\n\n  // Check for calls array (call webhooks)\n  if ('calls' in value && Array.isArray(value.calls)) {\n    return { type: 'call', payload: value as CallWebhookValue };\n  }\n\n  // Check for statuses array (status webhooks)\n  if ('statuses' in value && Array.isArray(value.statuses)) {\n    return { type: 'status', payload: value as StatusWebhookValue };\n  }\n\n  // Check for messages array (message webhooks)\n  if ('messages' in value && Array.isArray(value.messages)) {\n    return { type: 'message', payload: value as MessageWebhookValue };\n  }\n\n  // Check for errors without messages (error webhook)\n  if ('errors' in value && Array.isArray(value.errors)) {\n    return { type: 'message', payload: value as MessageWebhookValue };\n  }\n\n  return { type: 'unknown', payload };\n}\n","import type {\n  IncomingMessage,\n  MessageClassification,\n  TextMessage,\n  ImageMessage,\n  AudioMessage,\n  VideoMessage,\n  DocumentMessage,\n  StickerMessage,\n  LocationMessage,\n  ContactsMessage,\n  InteractiveMessage,\n  ReactionMessage,\n  ButtonMessage,\n  OrderMessage,\n  SystemMessage,\n  ReferralMessage,\n  UnsupportedMessage,\n} from '../types/messages.js';\n\n/**\n * Classifies an incoming message by its type.\n * Returns a discriminated union for type-safe handling.\n */\nexport function classifyMessage(message: IncomingMessage): MessageClassification {\n  switch (message.type) {\n    case 'text':\n      return { type: 'text', message: message as TextMessage };\n    case 'image':\n      return { type: 'image', message: message as ImageMessage };\n    case 'audio':\n      return { type: 'audio', message: message as AudioMessage };\n    case 'video':\n      return { type: 'video', message: message as VideoMessage };\n    case 'document':\n      return { type: 'document', message: message as DocumentMessage };\n    case 'sticker':\n      return { type: 'sticker', message: message as StickerMessage };\n    case 'location':\n      return { type: 'location', message: message as LocationMessage };\n    case 'contacts':\n      return { type: 'contacts', message: message as ContactsMessage };\n    case 'interactive':\n      return { type: 'interactive', message: message as InteractiveMessage };\n    case 'reaction':\n      return { type: 'reaction', message: message as ReactionMessage };\n    case 'button':\n      return { type: 'button', message: message as ButtonMessage };\n    case 'order':\n      return { type: 'order', message: message as OrderMessage };\n    case 'system':\n      return { type: 'system', message: message as SystemMessage };\n    case 'referral':\n      return { type: 'referral', message: message as ReferralMessage };\n    default:\n      return { type: 'unsupported', message: message as UnsupportedMessage };\n  }\n}\n","import type {\n  IncomingMessage,\n  MediaMessage,\n  ImageMessage,\n  AudioMessage,\n  VideoMessage,\n  DocumentMessage,\n  StickerMessage,\n} from './types/messages.js';\nimport type {\n  WebhookPayload,\n  MessageWebhookValue,\n  StatusWebhookValue,\n  CallWebhookValue,\n} from './types/webhooks.js';\n\nconst MEDIA_TYPES = new Set(['image', 'audio', 'video', 'document', 'sticker']);\n\n/**\n * Type guard: returns true if message contains downloadable media.\n * Narrows type to messages with image/audio/video/document/sticker.\n */\nexport function isMediaMessage(message: IncomingMessage): message is MediaMessage {\n  return MEDIA_TYPES.has(message.type);\n}\n\n/**\n * Extracts media ID from any media message type.\n * Returns undefined if message has no media.\n */\nexport function extractMediaId(message: IncomingMessage): string | undefined {\n  if (!isMediaMessage(message)) {\n    return undefined;\n  }\n\n  switch (message.type) {\n    case 'image':\n      return (message as ImageMessage).image.id;\n    case 'audio':\n      return (message as AudioMessage).audio.id;\n    case 'video':\n      return (message as VideoMessage).video.id;\n    case 'document':\n      return (message as DocumentMessage).document.id;\n    case 'sticker':\n      return (message as StickerMessage).sticker.id;\n    default:\n      return undefined;\n  }\n}\n\nexport interface ContactInfo {\n  waId: string;\n  profileName: string | undefined;\n  phoneNumberId: string;\n}\n\n/**\n * Extracts sender info from webhook payload.\n * Returns null if the webhook doesn't contain message contact info.\n */\nexport function getContactInfo(webhook: WebhookPayload): ContactInfo | null {\n  const entry = webhook.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value || !('contacts' in value) || !value.contacts?.length) {\n    return null;\n  }\n\n  const contact = value.contacts[0];\n  const metadata = value.metadata;\n\n  return {\n    waId: contact.wa_id,\n    profileName: contact.profile?.name,\n    phoneNumberId: metadata.phone_number_id,\n  };\n}\n\n/**\n * Parses message timestamp to Date object.\n * WhatsApp timestamps are Unix epoch seconds as strings.\n */\nexport function getMessageTimestamp(message: IncomingMessage): Date {\n  const epochSeconds = parseInt(message.timestamp, 10);\n  return new Date(epochSeconds * 1000);\n}\n\n/**\n * Extracts message ID from message or status webhook.\n * Returns null if not a message/status webhook or ID not present.\n */\nexport function getMessageId(webhook: WebhookPayload): string | null {\n  const entry = webhook.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value) {\n    return null;\n  }\n\n  // Try message webhook\n  if ('messages' in value) {\n    const messageValue = value as MessageWebhookValue;\n    return messageValue.messages?.[0]?.id ?? null;\n  }\n\n  // Try status webhook\n  if ('statuses' in value) {\n    const statusValue = value as StatusWebhookValue;\n    return statusValue.statuses?.[0]?.id ?? null;\n  }\n\n  return null;\n}\n\n/**\n * Extracts call ID from call webhook.\n * Returns null if not a call webhook or ID not present.\n */\nexport function getCallId(webhook: WebhookPayload): string | null {\n  const entry = webhook.entry?.[0];\n  const change = entry?.changes?.[0];\n  const value = change?.value;\n\n  if (!value) {\n    return null;\n  }\n\n  // Check if it's a call webhook\n  if ('calls' in value) {\n    const callValue = value as CallWebhookValue;\n    return callValue.calls?.[0]?.id ?? null;\n  }\n\n  return null;\n}\n"],"mappings":";AACO,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC,YACE,SACgB,MACA,SAChB;AACA,UAAM,OAAO;AAHG;AACA;AAGhB,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,iBAAN,cAA6B,UAAU;AAAA,EAC5C,YACE,SACgB,SAChB,MACA;AACA,UAAM,SAAS,IAAI;AAHH;AAIhB,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,mBAAN,cAA+B,UAAU;AAAA,EAC5B;AAAA,EAElB,YAAY,SAAiB,OAAe;AAC1C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,QAAQ;AACb,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;AAGO,IAAM,qBAAN,cAAiC,UAAU;AAAA,EAChD,YAAY,UAAkB,6BAA6B;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EAClD;AACF;;;AC7CA,SAAS,YAAY,uBAAuB;AAmBrC,SAAS,uBACd,SACS;AACT,QAAM,EAAE,WAAW,SAAS,UAAU,IAAI;AAE1C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,mBAAmB,gDAAgD;AAAA,EAC/E;AAEA,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAGA,QAAM,gBAAgB,UAAU,WAAW,SAAS,IAChD,UAAU,MAAM,CAAC,IACjB;AAGJ,QAAM,OAAO,WAAW,UAAU,SAAS;AAC3C,QAAM,aACJ,OAAO,YAAY,WAAW,OAAO,KAAK,SAAS,OAAO,IAAI;AAChE,QAAM,eAAe,KAAK,OAAO,UAAU,EAAE,OAAO,KAAK;AAGzD,QAAM,kBAAkB,OAAO,KAAK,eAAe,OAAO;AAC1D,QAAM,iBAAiB,OAAO,KAAK,cAAc,OAAO;AAGxD,MAAI,gBAAgB,WAAW,eAAe,QAAQ;AACpD,WAAO;AAAA,EACT;AAEA,SAAO,gBAAgB,iBAAiB,cAAc;AACxD;;;AC3CA,IAAM,sBAAsB;AAC5B,IAAM,mBAAmB;AAKlB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAA4B;AACtC,SAAK,cAAc,QAAQ;AAC3B,SAAK,YAAY,QAAQ;AACzB,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,UAAU,QAAQ,WAAW;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,cAAc,WAA+B,SAAmC;AAC9E,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,WAAO,uBAAuB,EAAE,WAAW,SAAS,WAAW,KAAK,UAAU,CAAC;AAAA,EACjF;AAAA,EAoBA,MAAM,SACJ,SACA,SACgD;AAEhD,UAAM,WAAW,MAAM,KAAK,mBAAmB,OAAO;AAGtD,UAAM,WAAW,MAAM,KAAK,cAAc,SAAS,KAAK,OAAO;AAE/D,QAAI,SAAS,UAAU;AACrB,YAAM,SAAS,MAAM,SAAS,YAAY;AAC1C,aAAO;AAAA,QACL,GAAG;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,MAAM;AAClB,YAAM,IAAI,eAAe,yBAAyB,OAAO;AAAA,IAC3D;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF;AAAA,EAEA,MAAc,mBAAmB,SAAyC;AACxE,UAAM,MAAM,GAAG,KAAK,OAAO,IAAI,KAAK,UAAU,IAAI,OAAO;AAEzD,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK;AAAA,QAC1B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,KAAK,WAAW;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,mCAAmC,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QAC3F,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,eAAe;AACnE,YAAM,IAAI;AAAA,QACR,mCAAmC,SAAS,MAAM,IAAI,SAAS;AAAA,QAC/D;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAGlC,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,UAAU,SAAS,KAAK,WAAW,EAAE;AAAA,MACrC,KAAK,KAAK;AAAA,IACZ;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,KAAa,SAAoC;AAC3E,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK;AAAA,QAC1B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,KAAK,WAAW;AAAA,QAC3C;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI;AAAA,QACR,6BAA6B,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACrF,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI;AAAA,QACR,6BAA6B,SAAS,MAAM;AAAA,QAC5C;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;;;AChJO,SAAS,gBAAgB,SAAgD;AAC9E,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,MAAM,WAAW,QAAQ;AAAA,EACpC;AAGA,MAAI,WAAW,SAAS,MAAM,QAAQ,MAAM,KAAK,GAAG;AAClD,WAAO,EAAE,MAAM,QAAQ,SAAS,MAA0B;AAAA,EAC5D;AAGA,MAAI,cAAc,SAAS,MAAM,QAAQ,MAAM,QAAQ,GAAG;AACxD,WAAO,EAAE,MAAM,UAAU,SAAS,MAA4B;AAAA,EAChE;AAGA,MAAI,cAAc,SAAS,MAAM,QAAQ,MAAM,QAAQ,GAAG;AACxD,WAAO,EAAE,MAAM,WAAW,SAAS,MAA6B;AAAA,EAClE;AAGA,MAAI,YAAY,SAAS,MAAM,QAAQ,MAAM,MAAM,GAAG;AACpD,WAAO,EAAE,MAAM,WAAW,SAAS,MAA6B;AAAA,EAClE;AAEA,SAAO,EAAE,MAAM,WAAW,QAAQ;AACpC;;;AClBO,SAAS,gBAAgB,SAAiD;AAC/E,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,QAAgC;AAAA,IACzD,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,WAAW,QAAmC;AAAA,IAC/D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,eAAe,QAAuC;AAAA,IACvE,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE,KAAK;AACH,aAAO,EAAE,MAAM,UAAU,QAAkC;AAAA,IAC7D,KAAK;AACH,aAAO,EAAE,MAAM,SAAS,QAAiC;AAAA,IAC3D,KAAK;AACH,aAAO,EAAE,MAAM,UAAU,QAAkC;AAAA,IAC7D,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,QAAoC;AAAA,IACjE;AACE,aAAO,EAAE,MAAM,eAAe,QAAuC;AAAA,EACzE;AACF;;;ACzCA,IAAM,cAAc,oBAAI,IAAI,CAAC,SAAS,SAAS,SAAS,YAAY,SAAS,CAAC;AAMvE,SAAS,eAAe,SAAmD;AAChF,SAAO,YAAY,IAAI,QAAQ,IAAI;AACrC;AAMO,SAAS,eAAe,SAA8C;AAC3E,MAAI,CAAC,eAAe,OAAO,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAAyB,MAAM;AAAA,IACzC,KAAK;AACH,aAAQ,QAA4B,SAAS;AAAA,IAC/C,KAAK;AACH,aAAQ,QAA2B,QAAQ;AAAA,IAC7C;AACE,aAAO;AAAA,EACX;AACF;AAYO,SAAS,eAAe,SAA6C;AAC1E,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,SAAS,EAAE,cAAc,UAAU,CAAC,MAAM,UAAU,QAAQ;AAC/D,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,MAAM,SAAS,CAAC;AAChC,QAAM,WAAW,MAAM;AAEvB,SAAO;AAAA,IACL,MAAM,QAAQ;AAAA,IACd,aAAa,QAAQ,SAAS;AAAA,IAC9B,eAAe,SAAS;AAAA,EAC1B;AACF;AAMO,SAAS,oBAAoB,SAAgC;AAClE,QAAM,eAAe,SAAS,QAAQ,WAAW,EAAE;AACnD,SAAO,IAAI,KAAK,eAAe,GAAI;AACrC;AAMO,SAAS,aAAa,SAAwC;AACnE,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAGA,MAAI,cAAc,OAAO;AACvB,UAAM,eAAe;AACrB,WAAO,aAAa,WAAW,CAAC,GAAG,MAAM;AAAA,EAC3C;AAGA,MAAI,cAAc,OAAO;AACvB,UAAM,cAAc;AACpB,WAAO,YAAY,WAAW,CAAC,GAAG,MAAM;AAAA,EAC1C;AAEA,SAAO;AACT;AAMO,SAAS,UAAU,SAAwC;AAChE,QAAM,QAAQ,QAAQ,QAAQ,CAAC;AAC/B,QAAM,SAAS,OAAO,UAAU,CAAC;AACjC,QAAM,QAAQ,QAAQ;AAEtB,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAGA,MAAI,WAAW,OAAO;AACpB,UAAM,YAAY;AAClB,WAAO,UAAU,QAAQ,CAAC,GAAG,MAAM;AAAA,EACrC;AAEA,SAAO;AACT;","names":[]}

package/package.json

@@ -1,15 +1,18 @@
 {
   "name": "waba-toolkit",
-  "version": "0.1.2",
-  "description": "Minimal, type-safe toolkit for WhatsApp Business API webhook processing and media handling",
-  "type": "module",
+  "version": "0.2.0",
+  "description": "Type-safe, zero-dependency WhatsApp Business API toolkit for webhooks, media downloads, and signature verification",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
   "engines": {
     "node": ">=20.0.0"
   },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
     }
   },
   "files": [
@@ -26,9 +29,17 @@
     "whatsapp",
     "waba",
     "whatsapp-business-api",
+    "whatsapp-cloud-api",
     "webhook",
-    "meta"
+    "meta",
+    "cloud-api",
+    "messaging",
+    "typescript"
   ],
+  "homepage": "https://github.com/teknicus/waba-toolkit",
+  "bugs": {
+    "url": "https://github.com/teknicus/waba-toolkit/issues"
+  },
   "license": "MIT",
   "devDependencies": {
     "@types/node": "^25.0.3",
@@ -36,5 +47,8 @@
     "typescript": "^5.0.0",
     "vitest": "^4.0.16"
   },
-  "repository": "github:teknicus/waba-toolkit"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/teknicus/waba-toolkit.git"
+  }
 }