fix(webhook): enforce dict payload and strict bool per CodeRabbit review

data now requires dict[str, Any] and livemode requires StrictBool so
malformed payloads raise InvalidRequestError instead of silently
coercing (e.g. a JSON-encoded "false" string, or an array/scalar data
payload).

Author: Depo-dev

src/shade/models/webhook.py

@@ -16,7 +16,7 @@
 from enum import Enum
 from typing import Any
 
-from pydantic import Field
+from pydantic import Field, StrictBool
 
 from .base import ShadeObject
 
@@ -83,6 +83,6 @@ class WebhookEvent(ShadeObject):
 
     id: str
     type: str
-    data: Any
+    data: dict[str, Any]
     created_at: datetime = Field(alias="createdAt")
-    livemode: bool
+    livemode: StrictBool

tests/test_webhook_event.py

@@ -44,9 +44,9 @@ def test_data_stays_a_raw_dict():
     assert event.data["status"] == "completed"
 
 
-def test_data_accepts_non_dict_payloads_unchanged():
-    event = WebhookEvent.from_dict(_api_response(data=["a", "b"]))
-    assert event.data == ["a", "b"]
+def test_non_dict_data_raises():
+    with pytest.raises(InvalidRequestError):
+        WebhookEvent.from_dict(_api_response(data=["a", "b"]))
 
 
 def test_payload_is_not_mutated():
@@ -88,9 +88,9 @@ def test_livemode_reflects_payload(livemode, expected):
     assert event.livemode is expected
 
 
-def test_livemode_coerced_from_json_falsy_value():
-    event = WebhookEvent.from_dict(_api_response(livemode="false"))
-    assert event.livemode is False
+def test_livemode_string_value_raises():
+    with pytest.raises(InvalidRequestError):
+        WebhookEvent.from_dict(_api_response(livemode="false"))
 
 
 @pytest.mark.parametrize("field", ["id", "type", "data", "createdAt", "livemode"])