better-supabase 0.7.1 → 0.9.0

package/dist/undo-DGo0skyO.d.ts

@@ -0,0 +1,43 @@
+import { t as AsyncResult, w as ErrorMapper } from "./result-Cj3yWhjH.js";
+import { n as Logger } from "./logger-DWVYUmwi.js";
+import { t as BlockTransport } from "./block-transport-DaGGXjIw.js";
+import { n as BlockHooks } from "./block-hooks-BLPWD3Jt.js";
+//#region src/blocks/undo/undo.d.ts
+/** One call that reverses part of a change. */
+interface UndoCall {
+  readonly fn: string;
+  readonly args: Readonly<Record<string, unknown>>;
+}
+/**
+ * What a block method returns when its change has an inverse. It is plain
+ * JSON, so it can travel from a server action to a toast and back. Applying
+ * it runs the calls in order as the caller, so the same permission checks
+ * apply as for any other write.
+ */
+interface UndoToken {
+  readonly v: 1;
+  readonly calls: readonly UndoCall[];
+}
+/** The functions an undo token may call: the inverses the blocks return. */
+declare const UNDO_FUNCTIONS: readonly string[];
+declare function undoToken(calls: readonly UndoCall[]): UndoToken;
+/** Whether a value is an undo token whose calls are all allowed. */
+declare function isUndoToken(value: unknown, allowed?: readonly string[]): value is UndoToken;
+interface UndoOptions {
+  readonly transport: BlockTransport;
+  readonly schema?: string;
+  readonly mappers?: readonly ErrorMapper[];
+  /** Extra functions a token may call, for an app's own inverses. */
+  readonly allow?: readonly string[];
+  /** `withBlockHooks` hooks around `apply`, such as a rule on which tokens a user may apply. */
+  readonly hooks?: BlockHooks<Undo>;
+  /** Receives the errors `after` hooks throw. Default: `console`. */
+  readonly logger?: Logger;
+}
+interface Undo {
+  /** Runs a token's calls in order; stops at the first error. */
+  apply(token: unknown): AsyncResult<number>;
+}
+declare function createUndo(options: UndoOptions): Undo;
+//#endregion
+export { UndoToken as a, undoToken as c, UndoOptions as i, Undo as n, createUndo as o, UndoCall as r, isUndoToken as s, UNDO_FUNCTIONS as t };

package/dist/usage-CdlfuS3i.js

@@ -0,0 +1,250 @@
+import { n as isRecord } from "./guards-6F2bCtQR.js";
+import { C as optionalText, D as recordOf, I as textOf, M as seconds, R as toInstant, k as recordsOf, n as applyTemporal, o as blockCall, t as DEFAULT_BLOCK_SCHEMA, u as eachLimit, w as pageOf } from "./block-helpers-CfG_MvDR.js";
+import { r as withBlockHooks } from "./block-hooks-BsXncUlZ.js";
+import { t as lazyStripe } from "./stripe-XZrSmDTf.js";
+//#region src/blocks/usage/usage.ts
+const numberOf = (value) => typeof value === "number" ? value : Number(value);
+const optionalNumber = (value) => value === null || value === void 0 ? void 0 : numberOf(value);
+const PERIODS = /* @__PURE__ */ new Set([
+	"day",
+	"week",
+	"month",
+	"year",
+	"billing"
+]);
+const periodOf = (value) => {
+	const text = textOf(value);
+	return PERIODS.has(text) ? text : "month";
+};
+function recordedOf(value) {
+	const row = recordOf(value, "record_usage");
+	return {
+		recorded: row["recorded"] === true,
+		today: numberOf(row["today"]),
+		used: numberOf(row["used"])
+	};
+}
+const perMeter = (value) => isRecord(value) ? Object.fromEntries(Object.entries(value).map(([meter, used]) => [meter, numberOf(used)])) : {};
+function statusOf(value) {
+	const row = recordOf(value, "usage_status");
+	return {
+		meter: textOf(row["meter"]),
+		used: numberOf(row["used"]),
+		limit: optionalNumber(row["limit"]),
+		remaining: optionalNumber(row["remaining"]),
+		unlimited: row["unlimited"] === true,
+		period: periodOf(row["period"]),
+		startsAt: row["starts_at"] === void 0 || row["starts_at"] === null ? void 0 : toInstant(textOf(row["starts_at"])),
+		resetsAt: toInstant(textOf(row["resets_at"])),
+		...meterInfo(row)
+	};
+}
+function meterInfo(row) {
+	const unit = optionalText(row["unit"]);
+	const category = optionalText(row["category"]);
+	const label = optionalText(row["label"]);
+	return {
+		...unit === void 0 ? {} : { unit },
+		...category === void 0 ? {} : { category },
+		...label === void 0 ? {} : { label }
+	};
+}
+/** Usage metering and quotas over the `usage` module's functions. */
+function createUsage(options) {
+	applyTemporal(options);
+	const call = blockCall(options.transport, options.schema, options.mappers);
+	const args = (organizationId, meter, record = {}) => ({
+		tenant: organizationId,
+		meter,
+		quantity: record.quantity ?? 1,
+		idempotency_key: record.idempotencyKey,
+		source: record.source,
+		metadata: record.metadata,
+		actor: record.actor
+	});
+	const batch = (check) => (organizationId, entries, record = {}) => call("record_usage_batch", {
+		tenant: organizationId,
+		entries: JSON.stringify(entries.map((entry) => ({
+			meter: entry.meter,
+			quantity: entry.quantity ?? 1
+		}))),
+		idempotency_key: record.idempotencyKey,
+		check,
+		source: record.source,
+		metadata: record.metadata,
+		actor: record.actor
+	}, (value) => {
+		const row = recordOf(value, "record_usage_batch");
+		return {
+			recorded: row["recorded"] === true,
+			today: perMeter(row["today"]),
+			used: perMeter(row["used"])
+		};
+	});
+	const current = (organizationId, meter) => call("usage_status", {
+		tenant: organizationId,
+		meter
+	}, statusOf);
+	const purge = (fn) => (purgeOptions = {}) => call(fn, {
+		older_than: purgeOptions.olderThan === void 0 ? void 0 : seconds(purgeOptions.olderThan),
+		batch: purgeOptions.batch
+	}, (value) => Number(value ?? 0));
+	const purgeHistory = purge("purge_usage_history");
+	const purgeEvents = purge("purge_usage_events");
+	const client = {
+		purgeHistory,
+		purgeEvents,
+		purgeJob: (jobOptions = {}) => async () => ({
+			history: await purgeHistory(jobOptions.history).orThrow(),
+			events: await purgeEvents(jobOptions.events).orThrow()
+		}),
+		record: (organizationId, meter, record) => call("record_usage", args(organizationId, meter, record), recordedOf),
+		consume: (organizationId, meter, record) => call("consume_quota", args(organizationId, meter, record), recordedOf),
+		recordMany: batch(false),
+		consumeMany: batch(true),
+		current,
+		overview: (organizationId) => call("usage_overview", { tenant: organizationId }, (value) => (Array.isArray(value) ? value : []).map(statusOf)),
+		remaining: (organizationId, meter) => current(organizationId, meter).map((status) => status.remaining),
+		history: (organizationId, list = {}) => call("usage_history", {
+			tenant: organizationId,
+			meter: list.meter,
+			max_rows: list.limit ?? 100,
+			before_id: pageOf(list).cursor
+		}, (value) => (Array.isArray(value) ? value.filter(isRecord) : []).map((row) => ({
+			id: numberOf(row["id"]),
+			meter: textOf(row["meter"]),
+			quantity: numberOf(row["quantity"]),
+			actor: optionalText(row["actor"]),
+			source: optionalText(row["source"]),
+			metadata: isRecord(row["metadata"]) ? row["metadata"] : {},
+			recordedAt: toInstant(textOf(row["recorded_at"]))
+		}))),
+		breakdown: (organizationId, meter) => call("usage_breakdown", {
+			tenant: organizationId,
+			meter
+		}, (value) => (Array.isArray(value) ? value.filter(isRecord) : []).map((row) => ({
+			actor: optionalText(row["actor"]),
+			source: optionalText(row["source"]),
+			quantity: numberOf(row["quantity"])
+		}))),
+		meters: () => call("usage_meters", {}, (value) => {
+			const row = isRecord(value) ? value : {};
+			return Object.fromEntries(Object.entries(row).map(([meter, info]) => [meter, meterInfo(isRecord(info) ? info : {})]));
+		})
+	};
+	return withBlockHooks(client, options.hooks, {
+		block: "usage",
+		...options.logger ? { logger: options.logger } : {}
+	});
+}
+/** Customer lookups, and meter events with their marks, in flight at once. */
+const REPORT_CONCURRENCY = 8;
+/**
+* Sends unreported usage to Stripe as meter events, one per counter and
+* delta. The event `identifier` is the tenant, meter, day and new total, so
+* a run that fails after sending and before marking resends the same event,
+* and Stripe drops the duplicate. Run it from a job or a cron route.
+*/
+async function reportUsageToStripe(options) {
+	const call = blockCall(options.transport, options.schema);
+	const entitlements = blockCall(options.transport, DEFAULT_BLOCK_SCHEMA);
+	const stripe = await lazyStripe(options.stripe)();
+	const customers = /* @__PURE__ */ new Map();
+	const customerOf = options.customer ?? (async (organizationId) => entitlements("tenant_stripe_customer", { tenant: organizationId }, optionalText).orThrow());
+	const limit = options.batch ?? 500;
+	const skipMeters = /* @__PURE__ */ new Set();
+	const skipTenants = /* @__PURE__ */ new Set();
+	/** Sends the meter event when there is a delta, then marks the total; `true` when it sent one. */
+	const send = async (pending) => {
+		const { organizationId, meter, day, value, delta, identifier } = pending;
+		if (delta > 0) await stripe.billing.meterEvents.create({
+			event_name: pending.eventName,
+			payload: {
+				stripe_customer_id: pending.customer,
+				value: String(delta)
+			},
+			identifier,
+			timestamp: Math.floor(Math.min(Date.now(), Date.parse(`${day}T23:59:59Z`)) / 1e3)
+		}, { idempotencyKey: identifier });
+		await call("mark_usage_reported", {
+			tenant: organizationId,
+			meter,
+			day,
+			value
+		}, () => void 0).orThrow();
+		return delta > 0;
+	};
+	let reported = 0;
+	let skipped = 0;
+	let handled = 0;
+	for (;;) {
+		const rows = await call("unreported_usage", {
+			max_rows: limit - handled,
+			skip_meters: [...skipMeters],
+			skip_tenants: [...skipTenants]
+		}, (value) => recordsOf(value, "unreported_usage")).orThrow();
+		let passedOver = false;
+		const eventNameOf = (meter) => options.eventName ? options.eventName(meter) : meter;
+		const lookups = /* @__PURE__ */ new Set();
+		for (const row of rows) {
+			const organizationId = textOf(row["organization_id"]);
+			if (!customers.has(organizationId) && !skipTenants.has(organizationId) && eventNameOf(textOf(row["meter"])) !== void 0) lookups.add(organizationId);
+		}
+		await eachLimit([...lookups], REPORT_CONCURRENCY, async (organizationId) => {
+			customers.set(organizationId, await customerOf(organizationId));
+		});
+		const sends = [];
+		for (const row of rows) {
+			const organizationId = textOf(row["organization_id"]);
+			const meter = textOf(row["meter"]);
+			if (skipMeters.has(meter) || skipTenants.has(organizationId)) {
+				skipped += 1;
+				continue;
+			}
+			const eventName = eventNameOf(meter);
+			if (eventName === void 0) {
+				skipMeters.add(meter);
+				skipped += 1;
+				passedOver = true;
+				continue;
+			}
+			const customer = customers.get(organizationId);
+			if (customer === void 0) {
+				skipTenants.add(organizationId);
+				skipped += 1;
+				passedOver = true;
+				continue;
+			}
+			handled += 1;
+			const day = textOf(row["day"]).slice(0, 10);
+			const value = numberOf(row["value"]);
+			const previous = numberOf(row["reported_value"]);
+			const included = optionalNumber(row["included"]);
+			const before = numberOf(row["window_before"] ?? 0);
+			const delta = options.overage === true && row["unlimited"] === true ? 0 : options.overage === true && included !== void 0 ? Math.max(0, before + value - included) - Math.max(0, before + previous - included) : value - previous;
+			const identifier = `${organizationId}:${meter}:${day}:${String(value)}`;
+			sends.push({
+				organizationId,
+				meter,
+				day,
+				value,
+				delta,
+				eventName,
+				customer,
+				identifier
+			});
+		}
+		const sent = [];
+		await eachLimit(sends, REPORT_CONCURRENCY, async (pending, index) => {
+			sent[index] = await send(pending);
+		});
+		reported += sent.filter(Boolean).length;
+		if (!passedOver || handled >= limit || rows.length === 0) break;
+	}
+	return {
+		reported,
+		skipped
+	};
+}
+//#endregion
+export { reportUsageToStripe as n, createUsage as t };

package/dist/usage-DM2rzczj.d.ts

@@ -0,0 +1,202 @@
+/// <reference lib="esnext.temporal" />
+import { t as AsyncResult } from "./result-Cj3yWhjH.js";
+import { n as Logger } from "./logger-DWVYUmwi.js";
+import { t as BlockTransport } from "./block-transport-DaGGXjIw.js";
+import { i as CursorPageOptions, n as BlockOptions } from "./block-helpers-C86hPEjI.js";
+import { n as BlockHooks } from "./block-hooks-BLPWD3Jt.js";
+import { g as JobHandler } from "./types-CdP0z5tS.js";
+import { n as StripeSource } from "./stripe-NVcNOhHy.js";
+//#region src/blocks/usage/usage.d.ts
+interface UsageOptions extends BlockOptions {
+  /** `withBlockHooks` hooks around the client's methods, such as a check before `consume`. */
+  readonly hooks?: BlockHooks<Usage>;
+  /** Receives the errors `after` hooks throw. Default: `console`. */
+  readonly logger?: Logger;
+}
+interface RecordUsageOptions {
+  /** Default 1. */
+  readonly quantity?: number;
+  /** A retried call with the same key counts once. */
+  readonly idempotencyKey?: string;
+  /**
+   * What used it, such as `feature:summary` or `api:/v1/search`, kept in the
+   * history with `blocks.usage.options.history`.
+   */
+  readonly source?: string;
+  /** More detail for the history entry, such as a document id. */
+  readonly metadata?: Readonly<Record<string, unknown>>;
+  /**
+   * Who used it, for a service transport recording on a user's behalf.
+   * Ignored for other callers, whose own user id is recorded.
+   */
+  readonly actor?: string;
+}
+/** One meter of a batch. */
+interface UsageEntry {
+  readonly meter: string;
+  /** Default 1. */
+  readonly quantity?: number;
+}
+interface UsageBatchRecorded {
+  /** False when the idempotency key was seen before for every meter. */
+  readonly recorded: boolean;
+  /** Today's usage per meter (UTC). */
+  readonly today: Readonly<Record<string, number>>;
+  /** Usage per meter in its quota's current period, as `current()` reports it. */
+  readonly used: Readonly<Record<string, number>>;
+}
+/** One entry of the usage history. */
+interface UsageHistoryEntry {
+  readonly id: number;
+  readonly meter: string;
+  readonly quantity: number;
+  /** The user who used it, or `undefined` for service usage without one. */
+  readonly actor: string | undefined;
+  readonly source: string | undefined;
+  readonly metadata: Readonly<Record<string, unknown>>;
+  readonly recordedAt: Temporal.Instant;
+}
+/** Usage of a meter in its current window per actor and source. */
+interface UsageBreakdownEntry {
+  readonly actor: string | undefined;
+  readonly source: string | undefined;
+  readonly quantity: number;
+}
+interface UsageHistoryOptions extends CursorPageOptions<number> {
+  readonly meter?: string;
+  /** Defaults to 100, at most 1000. */
+  readonly limit?: number;
+  /** Only entries with a lower id, for the next page. */
+  readonly cursor?: number;
+}
+interface UsageRecorded {
+  /** False when the idempotency key was seen before. */
+  readonly recorded: boolean;
+  /** Today's usage of the meter (UTC). */
+  readonly today: number;
+  /** Usage in the quota's current period, as `current()` reports it. */
+  readonly used: number;
+}
+/**
+ * A quota period: a UTC calendar period, or `billing` for the window the
+ * app's `usage_billing_period(tenant)` function returns.
+ */
+type UsagePeriod = "day" | "week" | "month" | "year" | "billing";
+/** One meter of `blocks.usage.options.meters`. */
+interface UsageMeterInfo {
+  readonly unit?: string;
+  readonly category?: string;
+  readonly label?: string;
+}
+interface UsageStatus {
+  readonly meter: string;
+  /** Usage in the current period. */
+  readonly used: number;
+  /** `undefined` without a quota and for an unlimited one. */
+  readonly limit: number | undefined;
+  readonly remaining: number | undefined;
+  readonly unlimited: boolean;
+  readonly period: UsagePeriod;
+  /** When the current period started. */
+  readonly startsAt: Temporal.Instant | undefined;
+  readonly resetsAt: Temporal.Instant;
+  /** From the meter catalog, when the module has one. */
+  readonly unit?: string;
+  readonly category?: string;
+  readonly label?: string;
+}
+interface Usage {
+  /** Adds usage without checking the quota (metering only). */
+  record(organizationId: string, meter: string, options?: RecordUsageOptions): AsyncResult<UsageRecorded>;
+  /** Adds usage when it fits the quota, or returns `quota_exceeded`. */
+  consume(organizationId: string, meter: string, options?: RecordUsageOptions): AsyncResult<UsageRecorded>;
+  /**
+   * Adds several meters in one transaction, all or none, such as input and
+   * output tokens of one call. The idempotency key covers the batch.
+   */
+  recordMany(organizationId: string, entries: readonly UsageEntry[], options?: Omit<RecordUsageOptions, "quantity">): AsyncResult<UsageBatchRecorded>;
+  /**
+   * Like `recordMany`, but checks each meter's quota first; when one doesn't
+   * fit, nothing is recorded and the result is `quota_exceeded`.
+   */
+  consumeMany(organizationId: string, entries: readonly UsageEntry[], options?: Omit<RecordUsageOptions, "quantity">): AsyncResult<UsageBatchRecorded>;
+  current(organizationId: string, meter: string): AsyncResult<UsageStatus>;
+  overview(organizationId: string): AsyncResult<readonly UsageStatus[]>;
+  /** Units left in the period, or `undefined` without a quota. */
+  remaining(organizationId: string, meter: string): AsyncResult<number | undefined>;
+  /** The meter catalog (`options.meters`), empty without one. */
+  meters(): AsyncResult<Readonly<Record<string, UsageMeterInfo>>>;
+  /**
+   * The tenant's usage entries, newest first, with who and what used each
+   * (`usage.read`). Empty without `blocks.usage.options.history`.
+   */
+  history(organizationId: string, options?: UsageHistoryOptions): AsyncResult<readonly UsageHistoryEntry[]>;
+  /**
+   * The meter's usage in its current quota window per actor and source,
+   * largest first (`usage.read`). Empty without the history option.
+   */
+  breakdown(organizationId: string, meter: string): AsyncResult<readonly UsageBreakdownEntry[]>;
+  /**
+   * Deletes up to `batch` history entries older than `olderThan` (default
+   * 400 days, `purge_usage_history`); returns how many.
+   */
+  purgeHistory(options?: PurgeUsageOptions): AsyncResult<number>;
+  /**
+   * Deletes up to `batch` idempotency keys of recorded usage older than
+   * `olderThan` (default 30 days, `purge_usage_events`); returns how many.
+   * A retry with a purged key records again.
+   */
+  purgeEvents(options?: PurgeUsageOptions): AsyncResult<number>;
+  /** A job handler that runs `purgeHistory` and `purgeEvents`; schedule it nightly. */
+  purgeJob(options?: {
+    readonly history?: PurgeUsageOptions;
+    readonly events?: PurgeUsageOptions;
+  }): JobHandler<unknown>;
+}
+interface PurgeUsageOptions {
+  /** Seconds, or an interval such as `"90 days"`. */
+  readonly olderThan?: number | string;
+  /** Defaults to 10000. */
+  readonly batch?: number;
+}
+/** Usage metering and quotas over the `usage` module's functions. */
+declare function createUsage(options: UsageOptions): Usage;
+interface ReportUsageOptions {
+  /** A service-role transport: the reporting functions are granted to `service_role` only. */
+  readonly transport: BlockTransport;
+  readonly stripe: StripeSource;
+  readonly schema?: string;
+  /** The Stripe meter's `event_name` for a meter; default the meter itself. */
+  readonly eventName?: (meter: string) => string | undefined;
+  /**
+   * The tenant's Stripe customer. Default: `tenant_stripe_customer()` from
+   * the `entitlements` module (`config.entitlements.customer`).
+   */
+  readonly customer?: (organizationId: string) => Promise<string | undefined>;
+  /** Counters per run, default 500. */
+  readonly batch?: number;
+  /**
+   * Send only the usage above the tenant's quota (the allowance its plan
+   * includes) in each quota window, instead of every unit. A meter without
+   * a quota sends everything, and one with an unlimited quota sends nothing.
+   */
+  readonly overage?: boolean;
+}
+interface ReportUsageResult {
+  /** Meter events sent; usage inside the quota with `overage` is marked without one. */
+  readonly reported: number;
+  /**
+   * Counters left for a later run: no customer, or no event name. They don't
+   * hold up the other counters of the batch.
+   */
+  readonly skipped: number;
+}
+/**
+ * Sends unreported usage to Stripe as meter events, one per counter and
+ * delta. The event `identifier` is the tenant, meter, day and new total, so
+ * a run that fails after sending and before marking resends the same event,
+ * and Stripe drops the duplicate. Run it from a job or a cron route.
+ */
+declare function reportUsageToStripe(options: ReportUsageOptions): Promise<ReportUsageResult>;
+//#endregion
+export { reportUsageToStripe as _, Usage as a, UsageEntry as c, UsageMeterInfo as d, UsageOptions as f, createUsage as g, UsageStatus as h, ReportUsageResult as i, UsageHistoryEntry as l, UsageRecorded as m, RecordUsageOptions as n, UsageBatchRecorded as o, UsagePeriod as p, ReportUsageOptions as r, UsageBreakdownEntry as s, PurgeUsageOptions as t, UsageHistoryOptions as u };

package/dist/vault-tOkPLnMB.d.ts

@@ -0,0 +1,50 @@
+import { t as AsyncResult, w as ErrorMapper } from "./result-Cj3yWhjH.js";
+import { c as SetCredentialOptions, i as CredentialRef, r as CredentialProvider } from "./provider-9gBq9W6k.js";
+import { t as BlockTransport } from "./block-transport-DaGGXjIw.js";
+//#region src/credentials/vault.d.ts
+/** How a request the third party sends is signed with the stored secret. */
+type VaultInboundScheme = "standard-webhooks" | "hmac-sha256" | "shared-secret";
+/**
+ * A credential in Vault. `scope: 'user'` keeps one secret per user subject.
+ * The token goes out as `<header>: <scheme> <token>`, `Authorization: Bearer`
+ * by default; `scheme: null` sends it bare (`x-api-key`).
+ */
+interface VaultCredentialRef {
+  readonly provider: "vault";
+  readonly secret: string;
+  /** Stores the secret as `tenant/<tenant>/<secret>`, apart from every other tenant's. */
+  readonly tenant?: string;
+  readonly scope?: "app" | "user";
+  readonly header?: string;
+  readonly scheme?: string | null;
+  readonly inbound?: VaultInboundScheme;
+  /** Defaults to `x-hub-signature-256` for `hmac-sha256`, `authorization` for `shared-secret`. */
+  readonly signatureHeader?: string;
+}
+interface VaultCredentialsOptions {
+  /** `sqlTransport(postgres.asService())` or `rpcTransport` with the service role key. */
+  readonly transport: BlockTransport;
+  /** The schema of the `credentials` module. Defaults to `better_supabase`. */
+  readonly schema?: string;
+  readonly mappers?: readonly ErrorMapper[];
+  /**
+   * How long a read secret stays in memory, in milliseconds. Defaults to
+   * 60000; `0` reads Vault on every call. `set` and `revoke` clear it.
+   */
+  readonly cacheMs?: number;
+}
+interface VaultCredentials extends CredentialProvider {
+  readonly name: "vault";
+  /** Stores or replaces the credential a ref names, for `subject` when the ref is per user. */
+  set(ref: CredentialRef, value: string, options?: SetCredentialOptions): AsyncResult<void>;
+  verifyInbound(request: Request, ref: CredentialRef): AsyncResult<boolean>;
+}
+/**
+ * A `CredentialProvider` over the `credentials` SQL module: tokens and API
+ * keys in Supabase Vault, read through security definer functions only the
+ * service role may call. Static secrets only; OAuth connections come from
+ * a provider such as `better-supabase/vercel-connect`.
+ */
+declare function vaultCredentials(options: VaultCredentialsOptions): VaultCredentials;
+//#endregion
+export { vaultCredentials as a, VaultInboundScheme as i, VaultCredentials as n, VaultCredentialsOptions as r, VaultCredentialRef as t };

package/dist/vercel-connect/index.d.ts

@@ -1,4 +1,4 @@
-import { a as CredentialSubject, r as CredentialProvider } from "../provider-D-UEMvSD.js";
+import { a as CredentialSubject, r as CredentialProvider } from "../provider-9gBq9W6k.js";
 //#region src/vercel-connect/vercel-connect.d.ts
 interface ConnectTokenParams {
   subject: CredentialSubject;

package/dist/vercel-connect/index.js

@@ -1,21 +1,15 @@
-import { n as dbError } from "../errors-B11Duf73.js";
-import { c as optionalTemporal } from "../temporal-BJGitm-h.js";
-import { a as ok, r as err, t as AsyncResult } from "../result-DzUbqgdW.js";
-import { d as isRecord } from "../block-helpers-DWHxHsEQ.js";
+import { n as dbError } from "../errors-8i6tSICm.js";
+import { c as optionalTemporal } from "../temporal-CB5Fpo5d.js";
+import { a as ok, r as err, t as AsyncResult } from "../result-BlgnMB0H.js";
+import { n as isRecord } from "../guards-6F2bCtQR.js";
+import { t as importOptionalPeer } from "../optional-peer-Dx8TaYXw.js";
 //#region src/vercel-connect/vercel-connect.ts
 const isModule = (value) => isRecord(value) && typeof value["getTokenResponse"] === "function" && typeof value["revokeToken"] === "function" && typeof value["startAuthorization"] === "function";
 /**
 * Loads `@vercel/connect` on first use. The specifier is a variable so
 * bundlers leave the optional peer out of apps that don't use it.
 */
-async function loadConnect() {
-	const specifier = "@vercel/connect";
-	try {
-		return await import(specifier);
-	} catch {
-		return;
-	}
-}
+const loadConnect = () => importOptionalPeer("@vercel/connect");
 function connectRef(ref) {
 	const { connector, installationId, scopes } = ref;
 	if (ref.provider !== "vercel-connect" || typeof connector !== "string") return err(dbError("invalid_input", `vercel-connect resolves refs with a connector, not "${ref.provider}"`, { hint: "CREDENTIAL_REF_INVALID" }));