@usequota/nextjs 0.2.1 → 0.3.1

package/README.md

@@ -1,6 +1,6 @@
 # @usequota/nextjs
 
-Next.js SDK for [Quota](https://usequota.app) - AI credit wallet and multi-provider inference API.
+Next.js SDK for [Quota](https://usequota.ai) - AI credit wallet and multi-provider inference API.
 
 ## Installation
 
@@ -409,7 +409,7 @@ export const POST = withQuotaAuth(
     // user is guaranteed to exist
     // accessToken can proxy requests through Quota
     const response = await fetch(
-      "https://api.usequota.app/v1/chat/completions",
+      "https://api.usequota.ai/v1/chat/completions",
       {
         method: "POST",
         headers: {

package/dist/index.d.mts

@@ -4,7 +4,7 @@ import * as react from 'react';
 import { ReactNode } from 'react';
 import { QuotaUser, CreditPackage } from '@usequota/types';
 export { ChatCompletionRequest, ChatCompletionResponse, ChatMessage, CreditPackage, QuotaError as QuotaErrorResponse, QuotaMetadata, QuotaSession, QuotaUser, Tool, ToolCall } from '@usequota/types';
-export { Q as QuotaError, a as QuotaInsufficientCreditsError, b as QuotaNotConnectedError, d as QuotaRateLimitError, c as QuotaTokenExpiredError } from './errors-CmNx3kSz.mjs';
+export { QuotaError, QuotaInsufficientCreditsError, QuotaNotConnectedError, QuotaRateLimitError, QuotaTokenExpiredError, VerifyWebhookOptions, WebhookEvent, createWebhookHandler, parseWebhook, verifyWebhookSignature } from '@usequota/core';
 
 /**
  * @usequota/nextjs - Next.js middleware for OAuth callback handling
@@ -25,7 +25,7 @@ interface QuotaConfig {
     clientSecret: string;
     /**
      * Quota API base URL
-     * @default 'https://api.usequota.app'
+     * @default 'https://api.usequota.ai'
      */
     baseUrl?: string;
     /**
@@ -136,7 +136,7 @@ interface QuotaProviderProps {
     clientId: string;
     /**
      * Quota API base URL
-     * @default 'https://api.usequota.app'
+     * @default 'https://api.usequota.ai'
      */
     baseUrl?: string;
     /**
@@ -541,103 +541,4 @@ interface QuotaUserMenuProps {
  */
 declare function QuotaUserMenu({ className, onBuyCredits, onLogout, showBuyCredits, children, }: QuotaUserMenuProps): react_jsx_runtime.JSX.Element | null;
 
-/**
- * Webhook event types sent by Quota
- */
-interface WebhookEvent {
-    /** Unique event identifier */
-    id: string;
-    /** Event type */
-    type: "user.connected" | "user.disconnected" | "balance.updated" | "balance.low" | "usage.completed";
-    /** ISO 8601 timestamp when event was created */
-    created_at: string;
-    /** Event-specific data payload */
-    data: Record<string, unknown>;
-}
-/**
- * Options for verifying webhook signatures
- */
-interface VerifyWebhookOptions {
-    /** Raw webhook payload (string or Buffer) */
-    payload: string | Buffer;
-    /** Signature from X-Quota-Signature header */
-    signature: string;
-    /** Webhook secret from Quota dashboard */
-    secret: string;
-}
-/**
- * Verify a webhook signature from Quota using HMAC-SHA256
- *
- * @param options - Verification options
- * @returns true if signature is valid, false otherwise
- *
- * @example
- * ```typescript
- * const isValid = verifyWebhookSignature({
- *   payload: rawBody,
- *   signature: request.headers.get('x-quota-signature')!,
- *   secret: process.env.QUOTA_WEBHOOK_SECRET!
- * });
- * ```
- */
-declare function verifyWebhookSignature({ payload, signature, secret, }: VerifyWebhookOptions): boolean;
-/**
- * Parse and verify a webhook request
- * For use in Next.js API routes (App Router)
- *
- * @param req - Next.js Request object
- * @param secret - Webhook secret from Quota dashboard
- * @returns Parsed and verified webhook event
- * @throws Error if signature is missing or invalid
- *
- * @example
- * ```typescript
- * // app/api/quota/webhook/route.ts
- * export async function POST(req: Request) {
- *   try {
- *     const event = await parseWebhook(req, process.env.QUOTA_WEBHOOK_SECRET!);
- *
- *     if (event.type === 'balance.low') {
- *       await sendLowBalanceEmail(event.data);
- *     }
- *
- *     return Response.json({ received: true });
- *   } catch (error) {
- *     return Response.json({ error: error.message }, { status: 400 });
- *   }
- * }
- * ```
- */
-declare function parseWebhook(req: Request, secret: string): Promise<WebhookEvent>;
-/**
- * Create a webhook handler for Next.js App Router
- * Automatically verifies signatures and routes events to handlers
- *
- * @param secret - Webhook secret from Quota dashboard
- * @param handlers - Map of event types to handler functions
- * @returns Next.js route handler function
- *
- * @example
- * ```typescript
- * // app/api/quota/webhook/route.ts
- * import { createWebhookHandler } from '@usequota/nextjs';
- *
- * export const POST = createWebhookHandler(process.env.QUOTA_WEBHOOK_SECRET!, {
- *   'balance.low': async (event) => {
- *     // Send email notification
- *     await sendLowBalanceEmail(event.data.user_id, event.data.current_balance);
- *   },
- *   'user.connected': async (event) => {
- *     // Track new user connection
- *     await analytics.track('user_connected', event.data);
- *   },
- *   'usage.completed': async (event) => {
- *     // Log usage for analytics
- *     await logUsage(event.data);
- *   }
- * });
- * ```
- */
-declare function createWebhookHandler(secret: string, handlers: Partial<Record<WebhookEvent["type"], (event: WebhookEvent) => Promise<void>>>): (req: Request) => Promise<Response>;
-
-export { QuotaBalance, type QuotaBalanceProps, QuotaBuyCredits, type QuotaBuyCreditsProps, type QuotaConfig, QuotaConnectButton, type QuotaConnectButtonProps, QuotaContext, type QuotaContextValue, type QuotaFetchStrategy, QuotaProvider, type QuotaProviderProps, QuotaUserMenu, type QuotaUserMenuProps, type VerifyWebhookOptions, type WebhookEvent, createQuotaMiddleware, createWebhookHandler, parseWebhook, useQuota, useQuotaAuth, useQuotaBalance, useQuotaPackages, useQuotaUser, verifyWebhookSignature };
+export { QuotaBalance, type QuotaBalanceProps, QuotaBuyCredits, type QuotaBuyCreditsProps, type QuotaConfig, QuotaConnectButton, type QuotaConnectButtonProps, QuotaContext, type QuotaContextValue, type QuotaFetchStrategy, QuotaProvider, type QuotaProviderProps, QuotaUserMenu, type QuotaUserMenuProps, createQuotaMiddleware, useQuota, useQuotaAuth, useQuotaBalance, useQuotaPackages, useQuotaUser };

package/dist/index.d.ts

@@ -4,7 +4,7 @@ import * as react from 'react';
 import { ReactNode } from 'react';
 import { QuotaUser, CreditPackage } from '@usequota/types';
 export { ChatCompletionRequest, ChatCompletionResponse, ChatMessage, CreditPackage, QuotaError as QuotaErrorResponse, QuotaMetadata, QuotaSession, QuotaUser, Tool, ToolCall } from '@usequota/types';
-export { Q as QuotaError, a as QuotaInsufficientCreditsError, b as QuotaNotConnectedError, d as QuotaRateLimitError, c as QuotaTokenExpiredError } from './errors-CmNx3kSz.js';
+export { QuotaError, QuotaInsufficientCreditsError, QuotaNotConnectedError, QuotaRateLimitError, QuotaTokenExpiredError, VerifyWebhookOptions, WebhookEvent, createWebhookHandler, parseWebhook, verifyWebhookSignature } from '@usequota/core';
 
 /**
  * @usequota/nextjs - Next.js middleware for OAuth callback handling
@@ -25,7 +25,7 @@ interface QuotaConfig {
     clientSecret: string;
     /**
      * Quota API base URL
-     * @default 'https://api.usequota.app'
+     * @default 'https://api.usequota.ai'
      */
     baseUrl?: string;
     /**
@@ -136,7 +136,7 @@ interface QuotaProviderProps {
     clientId: string;
     /**
      * Quota API base URL
-     * @default 'https://api.usequota.app'
+     * @default 'https://api.usequota.ai'
      */
     baseUrl?: string;
     /**
@@ -541,103 +541,4 @@ interface QuotaUserMenuProps {
  */
 declare function QuotaUserMenu({ className, onBuyCredits, onLogout, showBuyCredits, children, }: QuotaUserMenuProps): react_jsx_runtime.JSX.Element | null;
 
-/**
- * Webhook event types sent by Quota
- */
-interface WebhookEvent {
-    /** Unique event identifier */
-    id: string;
-    /** Event type */
-    type: "user.connected" | "user.disconnected" | "balance.updated" | "balance.low" | "usage.completed";
-    /** ISO 8601 timestamp when event was created */
-    created_at: string;
-    /** Event-specific data payload */
-    data: Record<string, unknown>;
-}
-/**
- * Options for verifying webhook signatures
- */
-interface VerifyWebhookOptions {
-    /** Raw webhook payload (string or Buffer) */
-    payload: string | Buffer;
-    /** Signature from X-Quota-Signature header */
-    signature: string;
-    /** Webhook secret from Quota dashboard */
-    secret: string;
-}
-/**
- * Verify a webhook signature from Quota using HMAC-SHA256
- *
- * @param options - Verification options
- * @returns true if signature is valid, false otherwise
- *
- * @example
- * ```typescript
- * const isValid = verifyWebhookSignature({
- *   payload: rawBody,
- *   signature: request.headers.get('x-quota-signature')!,
- *   secret: process.env.QUOTA_WEBHOOK_SECRET!
- * });
- * ```
- */
-declare function verifyWebhookSignature({ payload, signature, secret, }: VerifyWebhookOptions): boolean;
-/**
- * Parse and verify a webhook request
- * For use in Next.js API routes (App Router)
- *
- * @param req - Next.js Request object
- * @param secret - Webhook secret from Quota dashboard
- * @returns Parsed and verified webhook event
- * @throws Error if signature is missing or invalid
- *
- * @example
- * ```typescript
- * // app/api/quota/webhook/route.ts
- * export async function POST(req: Request) {
- *   try {
- *     const event = await parseWebhook(req, process.env.QUOTA_WEBHOOK_SECRET!);
- *
- *     if (event.type === 'balance.low') {
- *       await sendLowBalanceEmail(event.data);
- *     }
- *
- *     return Response.json({ received: true });
- *   } catch (error) {
- *     return Response.json({ error: error.message }, { status: 400 });
- *   }
- * }
- * ```
- */
-declare function parseWebhook(req: Request, secret: string): Promise<WebhookEvent>;
-/**
- * Create a webhook handler for Next.js App Router
- * Automatically verifies signatures and routes events to handlers
- *
- * @param secret - Webhook secret from Quota dashboard
- * @param handlers - Map of event types to handler functions
- * @returns Next.js route handler function
- *
- * @example
- * ```typescript
- * // app/api/quota/webhook/route.ts
- * import { createWebhookHandler } from '@usequota/nextjs';
- *
- * export const POST = createWebhookHandler(process.env.QUOTA_WEBHOOK_SECRET!, {
- *   'balance.low': async (event) => {
- *     // Send email notification
- *     await sendLowBalanceEmail(event.data.user_id, event.data.current_balance);
- *   },
- *   'user.connected': async (event) => {
- *     // Track new user connection
- *     await analytics.track('user_connected', event.data);
- *   },
- *   'usage.completed': async (event) => {
- *     // Log usage for analytics
- *     await logUsage(event.data);
- *   }
- * });
- * ```
- */
-declare function createWebhookHandler(secret: string, handlers: Partial<Record<WebhookEvent["type"], (event: WebhookEvent) => Promise<void>>>): (req: Request) => Promise<Response>;
-
-export { QuotaBalance, type QuotaBalanceProps, QuotaBuyCredits, type QuotaBuyCreditsProps, type QuotaConfig, QuotaConnectButton, type QuotaConnectButtonProps, QuotaContext, type QuotaContextValue, type QuotaFetchStrategy, QuotaProvider, type QuotaProviderProps, QuotaUserMenu, type QuotaUserMenuProps, type VerifyWebhookOptions, type WebhookEvent, createQuotaMiddleware, createWebhookHandler, parseWebhook, useQuota, useQuotaAuth, useQuotaBalance, useQuotaPackages, useQuotaUser, verifyWebhookSignature };
+export { QuotaBalance, type QuotaBalanceProps, QuotaBuyCredits, type QuotaBuyCreditsProps, type QuotaConfig, QuotaConnectButton, type QuotaConnectButtonProps, QuotaContext, type QuotaContextValue, type QuotaFetchStrategy, QuotaProvider, type QuotaProviderProps, QuotaUserMenu, type QuotaUserMenuProps, createQuotaMiddleware, useQuota, useQuotaAuth, useQuotaBalance, useQuotaPackages, useQuotaUser };

package/dist/index.js

@@ -1,9 +1,7 @@
 "use strict";
-var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -17,14 +15,6 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/index.ts
@@ -34,28 +24,28 @@ __export(index_exports, {
   QuotaBuyCredits: () => QuotaBuyCredits,
   QuotaConnectButton: () => QuotaConnectButton,
   QuotaContext: () => QuotaContext,
-  QuotaError: () => QuotaError,
-  QuotaInsufficientCreditsError: () => QuotaInsufficientCreditsError,
-  QuotaNotConnectedError: () => QuotaNotConnectedError,
+  QuotaError: () => import_core.QuotaError,
+  QuotaInsufficientCreditsError: () => import_core.QuotaInsufficientCreditsError,
+  QuotaNotConnectedError: () => import_core.QuotaNotConnectedError,
   QuotaProvider: () => QuotaProvider,
-  QuotaRateLimitError: () => QuotaRateLimitError,
-  QuotaTokenExpiredError: () => QuotaTokenExpiredError,
+  QuotaRateLimitError: () => import_core.QuotaRateLimitError,
+  QuotaTokenExpiredError: () => import_core.QuotaTokenExpiredError,
   QuotaUserMenu: () => QuotaUserMenu,
   createQuotaMiddleware: () => createQuotaMiddleware,
-  createWebhookHandler: () => createWebhookHandler,
-  parseWebhook: () => parseWebhook,
+  createWebhookHandler: () => import_core2.createWebhookHandler,
+  parseWebhook: () => import_core2.parseWebhook,
   useQuota: () => useQuota,
   useQuotaAuth: () => useQuotaAuth,
   useQuotaBalance: () => useQuotaBalance,
   useQuotaPackages: () => useQuotaPackages,
   useQuotaUser: () => useQuotaUser,
-  verifyWebhookSignature: () => verifyWebhookSignature
+  verifyWebhookSignature: () => import_core2.verifyWebhookSignature
 });
 module.exports = __toCommonJS(index_exports);
 
 // src/middleware.ts
 var import_server = require("next/server");
-var DEFAULT_BASE_URL = "https://api.usequota.app";
+var DEFAULT_BASE_URL = "https://api.usequota.ai";
 var DEFAULT_CALLBACK_PATH = "/api/quota/callback";
 var DEFAULT_COOKIE_PREFIX = "quota";
 var DEFAULT_COOKIE_MAX_AGE = 60 * 60 * 24 * 7;
@@ -120,7 +110,8 @@ function createQuotaMiddleware(config) {
         headers: {
           "Content-Type": "application/json"
         },
-        body: JSON.stringify(tokenBody)
+        body: JSON.stringify(tokenBody),
+        signal: AbortSignal.timeout(1e4)
       });
       if (!tokenResponse.ok) {
         const errorData = await tokenResponse.json();
@@ -137,16 +128,6 @@ function createQuotaMiddleware(config) {
       redirectUrl.searchParams.set("quota_success", "true");
       const response = import_server.NextResponse.redirect(redirectUrl);
       if ("access_token" in tokenData) {
-        const cookieOptions = [
-          `Path=${cookiePath}`,
-          "HttpOnly",
-          "Secure",
-          "SameSite=Lax",
-          `Max-Age=${cookieMaxAge}`
-        ];
-        if (cookieDomain) {
-          cookieOptions.push(`Domain=${cookieDomain}`);
-        }
         response.cookies.set(
           `${cookiePrefix}_access_token`,
           tokenData.access_token,
@@ -203,7 +184,7 @@ function createQuotaMiddleware(config) {
 var import_react = require("react");
 var import_jsx_runtime = require("react/jsx-runtime");
 var QuotaContext = (0, import_react.createContext)(null);
-var DEFAULT_BASE_URL2 = "https://api.usequota.app";
+var DEFAULT_BASE_URL2 = "https://api.usequota.ai";
 var DEFAULT_CALLBACK_PATH2 = "/api/quota/callback";
 var DEFAULT_API_PATH = "/api/quota/me";
 function QuotaProvider({
@@ -965,135 +946,9 @@ function LogoutIcon() {
   );
 }
 
-// src/errors.ts
-var QuotaError = class extends Error {
-  /** Machine-readable error code */
-  code;
-  /** HTTP status code associated with this error */
-  statusCode;
-  /** Optional hint for resolving the error */
-  hint;
-  constructor(message, code, statusCode, hint) {
-    super(message);
-    this.name = "QuotaError";
-    this.code = code;
-    this.statusCode = statusCode;
-    this.hint = hint;
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var QuotaInsufficientCreditsError = class extends QuotaError {
-  /** Current balance (if available) */
-  balance;
-  /** Credits required for the operation (if available) */
-  required;
-  constructor(message, options) {
-    super(
-      message ?? "Insufficient credits to complete this operation",
-      "insufficient_credits",
-      402,
-      "Purchase more credits or reduce usage"
-    );
-    this.name = "QuotaInsufficientCreditsError";
-    this.balance = options?.balance;
-    this.required = options?.required;
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var QuotaNotConnectedError = class extends QuotaError {
-  constructor(message) {
-    super(
-      message ?? "User has not connected a Quota account",
-      "not_connected",
-      401,
-      "Connect your Quota account to use this feature"
-    );
-    this.name = "QuotaNotConnectedError";
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var QuotaTokenExpiredError = class extends QuotaError {
-  constructor(message) {
-    super(
-      message ?? "Quota access token has expired and could not be refreshed",
-      "token_expired",
-      401,
-      "Reconnect your Quota account"
-    );
-    this.name = "QuotaTokenExpiredError";
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var QuotaRateLimitError = class extends QuotaError {
-  /** Seconds until the rate limit resets */
-  retryAfter;
-  constructor(message, retryAfter) {
-    super(
-      message ?? "Rate limit exceeded",
-      "rate_limit_exceeded",
-      429,
-      "Wait before retrying"
-    );
-    this.name = "QuotaRateLimitError";
-    this.retryAfter = retryAfter ?? 60;
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-
-// src/webhooks.ts
-var import_crypto = __toESM(require("crypto"));
-function verifyWebhookSignature({
-  payload,
-  signature,
-  secret
-}) {
-  const payloadString = typeof payload === "string" ? payload : payload.toString("utf8");
-  const hmac = import_crypto.default.createHmac("sha256", secret);
-  hmac.update(payloadString);
-  const expectedSignature = hmac.digest("hex");
-  try {
-    return import_crypto.default.timingSafeEqual(
-      Buffer.from(signature, "hex"),
-      Buffer.from(expectedSignature, "hex")
-    );
-  } catch {
-    return false;
-  }
-}
-async function parseWebhook(req, secret) {
-  const signature = req.headers.get("x-quota-signature");
-  if (!signature) {
-    throw new Error("Missing X-Quota-Signature header");
-  }
-  const payload = await req.text();
-  if (!verifyWebhookSignature({ payload, signature, secret })) {
-    throw new Error("Invalid webhook signature");
-  }
-  return JSON.parse(payload);
-}
-function createWebhookHandler(secret, handlers) {
-  return async (req) => {
-    try {
-      const event = await parseWebhook(req, secret);
-      const handler = handlers[event.type];
-      if (handler) {
-        await handler(event);
-      }
-      return new Response(JSON.stringify({ received: true }), {
-        status: 200,
-        headers: { "Content-Type": "application/json" }
-      });
-    } catch (error) {
-      console.error("Webhook error:", error);
-      return new Response(
-        JSON.stringify({
-          error: error instanceof Error ? error.message : "Unknown error"
-        }),
-        { status: 400, headers: { "Content-Type": "application/json" } }
-      );
-    }
-  };
-}
+// src/index.ts
+var import_core = require("@usequota/core");
+var import_core2 = require("@usequota/core");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   QuotaBalance,

package/dist/index.mjs

@@ -1,14 +1,6 @@
-import {
-  QuotaError,
-  QuotaInsufficientCreditsError,
-  QuotaNotConnectedError,
-  QuotaRateLimitError,
-  QuotaTokenExpiredError
-} from "./chunk-BMI3VFWV.mjs";
-
 // src/middleware.ts
 import { NextResponse } from "next/server";
-var DEFAULT_BASE_URL = "https://api.usequota.app";
+var DEFAULT_BASE_URL = "https://api.usequota.ai";
 var DEFAULT_CALLBACK_PATH = "/api/quota/callback";
 var DEFAULT_COOKIE_PREFIX = "quota";
 var DEFAULT_COOKIE_MAX_AGE = 60 * 60 * 24 * 7;
@@ -73,7 +65,8 @@ function createQuotaMiddleware(config) {
         headers: {
           "Content-Type": "application/json"
         },
-        body: JSON.stringify(tokenBody)
+        body: JSON.stringify(tokenBody),
+        signal: AbortSignal.timeout(1e4)
       });
       if (!tokenResponse.ok) {
         const errorData = await tokenResponse.json();
@@ -90,16 +83,6 @@ function createQuotaMiddleware(config) {
       redirectUrl.searchParams.set("quota_success", "true");
       const response = NextResponse.redirect(redirectUrl);
       if ("access_token" in tokenData) {
-        const cookieOptions = [
-          `Path=${cookiePath}`,
-          "HttpOnly",
-          "Secure",
-          "SameSite=Lax",
-          `Max-Age=${cookieMaxAge}`
-        ];
-        if (cookieDomain) {
-          cookieOptions.push(`Domain=${cookieDomain}`);
-        }
         response.cookies.set(
           `${cookiePrefix}_access_token`,
           tokenData.access_token,
@@ -162,7 +145,7 @@ import {
 } from "react";
 import { jsx } from "react/jsx-runtime";
 var QuotaContext = createContext(null);
-var DEFAULT_BASE_URL2 = "https://api.usequota.app";
+var DEFAULT_BASE_URL2 = "https://api.usequota.ai";
 var DEFAULT_CALLBACK_PATH2 = "/api/quota/callback";
 var DEFAULT_API_PATH = "/api/quota/me";
 function QuotaProvider({
@@ -929,60 +912,19 @@ function LogoutIcon() {
   );
 }
 
-// src/webhooks.ts
-import crypto from "crypto";
-function verifyWebhookSignature({
-  payload,
-  signature,
-  secret
-}) {
-  const payloadString = typeof payload === "string" ? payload : payload.toString("utf8");
-  const hmac = crypto.createHmac("sha256", secret);
-  hmac.update(payloadString);
-  const expectedSignature = hmac.digest("hex");
-  try {
-    return crypto.timingSafeEqual(
-      Buffer.from(signature, "hex"),
-      Buffer.from(expectedSignature, "hex")
-    );
-  } catch {
-    return false;
-  }
-}
-async function parseWebhook(req, secret) {
-  const signature = req.headers.get("x-quota-signature");
-  if (!signature) {
-    throw new Error("Missing X-Quota-Signature header");
-  }
-  const payload = await req.text();
-  if (!verifyWebhookSignature({ payload, signature, secret })) {
-    throw new Error("Invalid webhook signature");
-  }
-  return JSON.parse(payload);
-}
-function createWebhookHandler(secret, handlers) {
-  return async (req) => {
-    try {
-      const event = await parseWebhook(req, secret);
-      const handler = handlers[event.type];
-      if (handler) {
-        await handler(event);
-      }
-      return new Response(JSON.stringify({ received: true }), {
-        status: 200,
-        headers: { "Content-Type": "application/json" }
-      });
-    } catch (error) {
-      console.error("Webhook error:", error);
-      return new Response(
-        JSON.stringify({
-          error: error instanceof Error ? error.message : "Unknown error"
-        }),
-        { status: 400, headers: { "Content-Type": "application/json" } }
-      );
-    }
-  };
-}
+// src/index.ts
+import {
+  QuotaError,
+  QuotaInsufficientCreditsError,
+  QuotaNotConnectedError,
+  QuotaTokenExpiredError,
+  QuotaRateLimitError
+} from "@usequota/core";
+import {
+  verifyWebhookSignature,
+  parseWebhook,
+  createWebhookHandler
+} from "@usequota/core";
 export {
   QuotaBalance,
   QuotaBuyCredits,