import {
  BorrowSDK,
  ChainType,
  SdkWebhookEventType,
} from '@satsterminal-sdk/borrow';

const sdk = new BorrowSDK({
  apiKey: process.env.SATS_TERMINAL_API_KEY!,
  wallet,
});

await sdk.updateWebhookConfig({
  enabled: true,
  url: 'https://api.example.com/webhooks/satsterminal',
  events: [SdkWebhookEventType.BTC_DEPOSIT_CONFIRMED],
});

const { secret } = await sdk.rotateWebhookSecret();

{
  "id": "SDK_BTC_DEPOSIT_CONFIRMED-<transactionId>",
  "type": "sdk.borrow.btc_deposit_confirmed",
  "apiVersion": "2026-05-28",
  "createdAt": "2026-05-28T12:00:00.000Z",
  "data": {
    "transactionId": "<sdkBorrowTransactionId>",
    "workflowId": "<temporalWorkflowId>",
    "status": "DEPOSIT_CONFIRMED",
    "btcDepositTxHash": "<btc deposit tx hash or null>",
    "bridgeRedeemTxHash": "<bridge redeem tx hash or null>",
    "depositAddress": "<btc deposit address or null>"
  }
}

import crypto from 'node:crypto';

function verifySatsTerminalWebhook({
  rawBody,
  timestamp,
  signatureHeader,
  secret,
}: {
  rawBody: string;
  timestamp: string;
  signatureHeader: string;
  secret: string;
}) {
  const expected = crypto
    .createHmac('sha256', secret)
    .update(`${timestamp}.${rawBody}`)
    .digest('hex');

  const received = signatureHeader.replace(/^v1=/, '');

  return crypto.timingSafeEqual(
    Buffer.from(expected, 'hex'),
    Buffer.from(received, 'hex'),
  );
}