API foundations for apparel wholesale integrations.

Fetch buyer-visible brands and products with marketplace discovery filters.

curl "http://localhost:3004/api/v1/catalog?category=Outerwear&shipToCountry=United%20Kingdom&productLimit=12" \
  -H "Authorization: Bearer <YOUR_APPAREL_MARKET_API_KEY>" \
  -H "Accept: application/json"

Small fetch client for server jobs, partner tools, or smoke tests.

type CatalogResponse = {
  apiVersion: string;
  data: { brands: Array<{ id: string; name: string }>; products: Array<{ id: string; name: string }> };
};

export async function readCatalog(apiKey: string) {
  const response = await fetch("http://localhost:3004/api/v1/catalog?availabilityType=Ready-to-Ship", {
    headers: {
      Authorization: `Bearer ${apiKey}`,
      Accept: "application/json"
    }
  });

  if (!response.ok) {
    throw new Error(`Catalog API failed: ${response.status}`);
  }

  return (await response.json()) as CatalogResponse;
}

Verify Apparel Market webhook signatures before parsing or trusting the event.

import { createHmac, timingSafeEqual } from "node:crypto";

export function verifyApparelMarketWebhook(input: {
  rawBody: string;
  timestamp: string;
  signature: string;
  signingSecret: string;
}) {
  const expectedSignature =
    "v1:" +
    createHmac("sha256", input.signingSecret)
      .update(`${input.timestamp}.${input.rawBody}`)
      .digest("hex");

  const expected = Buffer.from(expectedSignature);
  const received = Buffer.from(input.signature);

  return received.length === expected.length && timingSafeEqual(received, expected);
}

Minimal route handler pattern that verifies the raw body before processing the event.

export async function POST(request: Request) {
  const rawBody = await request.text();
  const timestamp = request.headers.get("x-apparel-market-timestamp") ?? "";
  const signature = request.headers.get("x-apparel-market-signature") ?? "";

  const verified = verifyApparelMarketWebhook({
    rawBody,
    timestamp,
    signature,
    signingSecret: process.env.APPAREL_MARKET_WEBHOOK_SECRET ?? ""
  });

  if (!verified) {
    return Response.json({ error: "invalid_signature" }, { status: 401 });
  }

  const event = JSON.parse(rawBody);
  return Response.json({ received: true, eventType: event.type ?? null });
}

Created

May 29, 2026, 10:45 AM

Secret

whsec_ord_****_seed

Delivery

local_scaffold

Attempts

Not recorded

Order event subscription scaffold is paused until order/integration adapters graduate to live delivery.

Created

May 29, 2026, 10:30 AM

Secret

whsec_cat_****_seed

Delivery

local_scaffold

Attempts

Not recorded

Catalog event subscription scaffold for docs and local QA only; no outbound delivery worker is enabled.

Queued

0

Sent

0

Failed

0

Dead-lettered

0

Replay ready

0

Retry exhausted

0

Previews

0 redacted

Blocked controls

5

Run a dry-run or injected-live webhook worker smoke before partner replay drills.

Keep POST /api/v1/webhooks/subscriptions disabled until public-write adapter controls are satisfied.

Overdue retry

0

Next hour

0

Later retry

0

Overdue retry: No scheduled retry. Escalate overdue queued webhook attempts before new replay work is started.

Next hour: No scheduled retry. Let the retry worker process the next-hour queue and watch for another failure response.

Later retry: No scheduled retry. Keep later retries queued and revisit after nearer retry buckets are clear.

webhooks.subscriptions:write remains blocked until tenant-scoped adapter controls are certified, idempotent, audited, and reversible.

Route enabled

No

Tenant safe

No

Controls

Blocked

Blocked

5

No production route is enabled for POST /api/v1/webhooks/subscriptions.

Signed delivery plans are available. Attempt rows will appear here after the disabled, dry-run, or injected live worker records an execution attempt.

Product writes can make buyer-visible merchandising claims, so the public route stays closed until tenant ownership, idempotency, media ingestion, and moderation release controls are live together.

Route enabled

No

Pilot surface

Use the connector catalog import pipeline and release review workflow instead of a public write route.

No production route is enabled for POST /api/v1/catalog/products.

Inventory writes affect ATP, reservation holds, allocation plans, and buyer trust, so unaudited public writes are gated behind the inventory ledger and connector reconciliation rules.

Route enabled

No

Pilot surface

Use signed connector stock-update adapters and inventory movement evidence.

No production route is enabled for PATCH /api/v1/inventory/availability.

Order writeback can alter fulfillment, payment, and buyer communication state, so the route remains closed until order state gates and external references are provider-certified.

Route enabled

No

Pilot surface

Use operator-reviewed external order routing and writeback execution evidence.

No production route is enabled for POST /api/v1/orders/{orderId}/routing.

Webhook subscription writes require secret custody, tenant admin review, delivery queueing, and dead-letter operations before partners can mutate endpoints through a public API.

Route enabled

No

Pilot surface

Use the local developer subscriptions and delivery-attempt evidence surfaced on /developers.

No production route is enabled for POST /api/v1/webhooks/subscriptions.