Webhooks

const endpoint = await client.webhooks.create({
  url: "https://your-app.com/webhooks/keystone",
  description: "Production webhook",
  events: ["settlement.state.*", "settlement.state.finalized"],
});

// IMPORTANT: store the secret securely - it's only returned once
console.log(endpoint.secret);

const { items } = await client.webhooks.list();

const endpoint = await client.webhooks.get("endpoint-uuid");
console.log(endpoint.url);
console.log(endpoint.events);
console.log(endpoint.isActive);

await client.webhooks.update("endpoint-uuid", {
  url: "https://new-url.com/webhooks",
  events: ["*"],
  isActive: true,
});

await client.webhooks.delete("endpoint-uuid");

const result = await client.webhooks.test("endpoint-uuid");

console.log(result.success);    // true
console.log(result.statusCode); // 200
console.log(result.durationMs); // 142
console.log(result.error);      // null

const result = await client.webhooks.rotateSecret("endpoint-uuid");

console.log(result.newSecret);                  // "whsec_..."
console.log(result.previousSecretValidUntil);   // 24h from now

const { items: deliveries } = await client.webhooks.listDeliveries("endpoint-uuid");

for (const d of deliveries) {
  console.log(`${d.event}: ${d.success ? "OK" : "FAILED"} (${d.responseStatus}) - ${d.durationMs}ms`);
  if (d.error) console.log(`  Error: ${d.error}`);
}

import { verifyWebhookSignature } from "@keystoneos/sdk";

app.post("/webhooks/keystone", express.raw({ type: "application/json" }), (req, res) => {
  const isValid = verifyWebhookSignature(
    req.body,
    req.headers["x-keystone-signature"] as string,
    process.env.WEBHOOK_SECRET!,
  );

  if (!isValid) return res.status(401).send("Invalid signature");

  const { event, data } = JSON.parse(req.body);

  switch (event) {
    case "settlement.state.finalized":
      console.log(`Finalized: ${data.settlement_id}`);
      break;
    default:
      if (event.startsWith("settlement.state.")) {
        console.log(`${data.settlement_id}: ${data.state}`);
      }
  }

  res.sendStatus(200);
});