better-supabase 0.7.1 → 0.9.0

package/dist/types-DGs5L0VN.d.ts

@@ -1,192 +0,0 @@
-/// <reference lib="esnext.temporal" />
-import { t as AsyncResult, w as ErrorMapper } from "./result-D7y2fT87.js";
-import { t as BlockTransport } from "./block-transport-DvaoPuZ9.js";
-import { r as BlockTemporalOptions } from "./block-helpers-CKtbFcRv.js";
-import { n as Embedder } from "./knowledge-BXBbT0Tr.js";
-//#region src/blocks/memory/types.d.ts
-type MemoryScope = "user" | "agent" | "chat" | "project" | "organization";
-type MemoryKind = "core" | "archival";
-/**
- * Whose memory a call reads or changes. The default is the caller's own
- * memory; `organization` memory is shared and only admins change it. The
- * `project` scope takes a `projectId` (an ai-chat project) and no other
- * scope does. The service role names the user in `ownerId`.
- */
-interface MemoryNamespace {
-  readonly scope?: MemoryScope;
-  readonly agentId?: string;
-  readonly chatId?: string;
-  readonly projectId?: string;
-  readonly ownerId?: string;
-}
-interface MemoryRecord {
-  readonly id: string;
-  readonly organizationId: string;
-  readonly ownerId: string | undefined;
-  readonly scope: MemoryScope;
-  readonly agentId: string | undefined;
-  readonly chatId: string | undefined;
-  readonly projectId: string | undefined;
-  readonly kind: MemoryKind;
-  /** A path under `/memories`, for core memory. */
-  readonly path: string | undefined;
-  readonly content: string;
-  readonly version: number;
-  readonly embeddingModel: string | undefined;
-  readonly sourceMessageId: string | undefined;
-  readonly createdAt: Temporal.Instant;
-  readonly updatedAt: Temporal.Instant;
-}
-interface MemoryHit extends MemoryRecord {
-  readonly score: number;
-  /** Cosine similarity to the query embedding, when both have one. */
-  readonly similarity: number | undefined;
-}
-type MemoryView = {
-  readonly type: "file";
-  readonly path: string;
-  readonly content: string;
-  readonly version: number;
-} | {
-  readonly type: "directory";
-  readonly path: string;
-  readonly entries: readonly {
-    readonly path: string;
-    readonly size: number;
-  }[];
-};
-/** The commands of Anthropic's memory tool (`memory_20250818`). */
-type MemoryCommand = {
-  readonly command: "view";
-  readonly path: string;
-  readonly view_range?: readonly [number, number];
-} | {
-  readonly command: "create";
-  readonly path: string;
-  readonly file_text: string;
-} | {
-  readonly command: "str_replace";
-  readonly path: string;
-  readonly old_str: string;
-  readonly new_str?: string;
-} | {
-  readonly command: "insert";
-  readonly path: string;
-  readonly insert_line: number;
-  readonly insert_text: string;
-} | {
-  readonly command: "delete";
-  readonly path: string;
-} | {
-  readonly command: "rename";
-  readonly old_path: string;
-  readonly new_path: string;
-};
-interface RecalledMessage {
-  readonly chatId: string;
-  readonly messageId: string;
-  readonly similarity: number;
-}
-interface MemoryOptions extends BlockTemporalOptions {
-  /** Calls as the user: `rpcTransport(supabase)`. */
-  readonly transport: BlockTransport;
-  /** Calls as the service role, for embeddings and extracted memories. */
-  readonly service?: BlockTransport;
-  /** The module schema (`sql.modules.memory.schema`), default `better_supabase`. */
-  readonly schema?: string;
-  readonly mappers?: readonly ErrorMapper[];
-  /** Embeds archival memories, messages and queries. */
-  readonly embedder?: Embedder;
-  /** The most characters `render` returns. Default 8000. */
-  readonly maxRender?: number;
-  /** `saveExtracted` skips a fact this similar to a saved one. Default 0.92. */
-  readonly dedupeThreshold?: number;
-}
-interface Memory {
-  readonly core: {
-    view(organizationId: string, path?: string, ns?: MemoryNamespace): AsyncResult<MemoryView | undefined>;
-    /** Creates or overwrites a file; `expectedVersion` 0 means it must be new. */
-    write(organizationId: string, path: string, content: string, ns?: MemoryNamespace, options?: {
-      readonly expectedVersion?: number;
-    }): AsyncResult<MemoryRecord>;
-    strReplace(organizationId: string, path: string, oldText: string, newText: string, ns?: MemoryNamespace): AsyncResult<MemoryRecord>;
-    insert(organizationId: string, path: string, line: number, text: string, ns?: MemoryNamespace): AsyncResult<MemoryRecord>;
-    /** Deletes a file or a directory. Returns how many files. */
-    remove(organizationId: string, path: string, ns?: MemoryNamespace): AsyncResult<number>;
-    rename(organizationId: string, oldPath: string, newPath: string, ns?: MemoryNamespace): AsyncResult<number>;
-    list(organizationId: string, ns?: MemoryNamespace): AsyncResult<readonly MemoryRecord[]>;
-  };
-  /** Runs a memory tool command and returns the text for the model. */
-  run(organizationId: string, command: MemoryCommand, ns?: MemoryNamespace): AsyncResult<string>;
-  readonly archival: {
-    save(organizationId: string, content: string, ns?: MemoryNamespace, options?: {
-      readonly sourceMessageId?: string;
-    }): AsyncResult<MemoryRecord>;
-    search(organizationId: string, query: string, ns?: MemoryNamespace, options?: {
-      readonly k?: number;
-      readonly signal?: AbortSignal;
-    }): AsyncResult<readonly MemoryHit[]>;
-    list(organizationId: string, ns?: MemoryNamespace, options?: {
-      readonly limit?: number;
-    }): AsyncResult<readonly MemoryRecord[]>;
-    /** Deletes a memory, or marks it replaced by `supersededBy`. */
-    forget(memoryId: string, options?: {
-      readonly supersededBy?: string;
-    }): AsyncResult<boolean>;
-  };
-  readonly recall: {
-    /** Embeds a message so later chats can recall it (service role). */
-    index(message: {
-      readonly organizationId: string;
-      readonly chatId: string;
-      readonly messageId: string;
-      readonly userId: string;
-      readonly text: string;
-    }): AsyncResult<boolean>;
-    /** The caller's earlier messages closest to `query`. */
-    search(organizationId: string, query: string, options?: {
-      readonly k?: number;
-      readonly excludeChat?: string;
-      /** The service role only: whose messages. */
-      readonly ownerId?: string;
-      readonly signal?: AbortSignal;
-    }): AsyncResult<readonly RecalledMessage[]>;
-  };
-  /**
-   * Core memory as delimited text for a system prompt, cut at
-   * `maxRender` characters. Empty when there is none.
-   */
-  render(organizationId: string, ns?: MemoryNamespace): AsyncResult<string>;
-  /** Saves facts that aren't already remembered. Returns the new ones. */
-  saveExtracted(organizationId: string, facts: readonly string[], ns?: MemoryNamespace, options?: {
-    readonly sourceMessageId?: string;
-  }): AsyncResult<readonly MemoryRecord[]>;
-  /** Embeds memories edited since their last embedding (service role). Returns how many. */
-  embedPending(options?: {
-    readonly batch?: number;
-    readonly signal?: AbortSignal;
-  }): AsyncResult<number>;
-  /**
-   * Documents under an opaque scope key, for agent runtimes (service role).
-   * A write names the version it read; a stale one fails with the hint
-   * `MEMORY_DOCUMENT_CONFLICT`.
-   */
-  readonly documents: {
-    read(scopeKey: string, path: string): AsyncResult<MemoryDocument | undefined>;
-    /** `expectedVersion: null` means the document must not exist yet. */
-    write(scopeKey: string, path: string, content: string, options: {
-      readonly expectedVersion: string | null;
-      /** Seconds until the document expires. */
-      readonly expiresIn?: number;
-    }): AsyncResult<MemoryDocument>;
-    /** Deletes expired documents, at most `batch`. Returns how many. */
-    purge(batch?: number): AsyncResult<number>;
-  };
-}
-interface MemoryDocument {
-  readonly content: string;
-  /** Opaque; pass it back as `expectedVersion`. */
-  readonly version: string;
-}
-//#endregion
-export { MemoryKind as a, MemoryRecord as c, RecalledMessage as d, MemoryHit as i, MemoryScope as l, MemoryCommand as n, MemoryNamespace as o, MemoryDocument as r, MemoryOptions as s, Memory as t, MemoryView as u };

package/dist/usage-CrvrL2vw.d.ts

@@ -1,177 +0,0 @@
-/// <reference lib="esnext.temporal" />
-import { t as AsyncResult, w as ErrorMapper } from "./result-D7y2fT87.js";
-import { t as BlockTransport } from "./block-transport-DvaoPuZ9.js";
-import { i as CursorPageOptions, r as BlockTemporalOptions } from "./block-helpers-CKtbFcRv.js";
-import { n as StripeSource } from "./stripe-D04h-QBT.js";
-//#region src/blocks/usage/usage.d.ts
-interface UsageOptions extends BlockTemporalOptions {
-  readonly transport: BlockTransport;
-  /** The module schema (`sql.modules.usage.schema`), default `better_supabase`. */
-  readonly schema?: string;
-  readonly mappers?: readonly ErrorMapper[];
-}
-interface RecordUsageOptions {
-  /** Default 1. */
-  readonly quantity?: number;
-  /** A retried call with the same key counts once. */
-  readonly idempotencyKey?: string;
-  /**
-   * What used it, such as `feature:summary` or `api:/v1/search`, kept in the
-   * history with `sql.modules.usage.options.history`.
-   */
-  readonly source?: string;
-  /** More detail for the history entry, such as a document id. */
-  readonly metadata?: Readonly<Record<string, unknown>>;
-  /**
-   * Who used it, for a service transport recording on a user's behalf.
-   * Ignored for other callers, whose own user id is recorded.
-   */
-  readonly actor?: string;
-}
-/** One meter of a batch. */
-interface UsageEntry {
-  readonly meter: string;
-  /** Default 1. */
-  readonly quantity?: number;
-}
-interface UsageBatchRecorded {
-  /** False when the idempotency key was seen before for every meter. */
-  readonly recorded: boolean;
-  /** Today's usage per meter (UTC). */
-  readonly today: Readonly<Record<string, number>>;
-  /** Usage per meter in its quota's current period, as `current()` reports it. */
-  readonly used: Readonly<Record<string, number>>;
-}
-/** One entry of the usage history. */
-interface UsageHistoryEntry {
-  readonly id: number;
-  readonly meter: string;
-  readonly quantity: number;
-  /** The user who used it, or `undefined` for service usage without one. */
-  readonly actor: string | undefined;
-  readonly source: string | undefined;
-  readonly metadata: Readonly<Record<string, unknown>>;
-  readonly recordedAt: Temporal.Instant;
-}
-/** Usage of a meter in its current window per actor and source. */
-interface UsageBreakdownEntry {
-  readonly actor: string | undefined;
-  readonly source: string | undefined;
-  readonly quantity: number;
-}
-interface UsageHistoryOptions extends CursorPageOptions<number> {
-  readonly meter?: string;
-  /** Defaults to 100, at most 1000. */
-  readonly limit?: number;
-  /** Only entries with a lower id, for the next page. */
-  readonly cursor?: number;
-}
-interface UsageRecorded {
-  /** False when the idempotency key was seen before. */
-  readonly recorded: boolean;
-  /** Today's usage of the meter (UTC). */
-  readonly today: number;
-  /** Usage in the quota's current period, as `current()` reports it. */
-  readonly used: number;
-}
-/**
- * A quota period: a UTC calendar period, or `billing` for the window the
- * app's `usage_billing_period(tenant)` function returns.
- */
-type UsagePeriod = "day" | "week" | "month" | "year" | "billing";
-/** One meter of `sql.modules.usage.options.meters`. */
-interface UsageMeterInfo {
-  readonly unit?: string;
-  readonly category?: string;
-  readonly label?: string;
-}
-interface UsageStatus {
-  readonly meter: string;
-  /** Usage in the current period. */
-  readonly used: number;
-  /** `undefined` without a quota and for an unlimited one. */
-  readonly limit: number | undefined;
-  readonly remaining: number | undefined;
-  readonly unlimited: boolean;
-  readonly period: UsagePeriod;
-  /** When the current period started. */
-  readonly startsAt: Temporal.Instant | undefined;
-  readonly resetsAt: Temporal.Instant;
-  /** From the meter catalog, when the module has one. */
-  readonly unit?: string;
-  readonly category?: string;
-  readonly label?: string;
-}
-interface Usage {
-  /** Adds usage without checking the quota (metering only). */
-  record(organizationId: string, meter: string, options?: RecordUsageOptions): AsyncResult<UsageRecorded>;
-  /** Adds usage when it fits the quota, or returns `quota_exceeded`. */
-  consume(organizationId: string, meter: string, options?: RecordUsageOptions): AsyncResult<UsageRecorded>;
-  /**
-   * Adds several meters in one transaction, all or none, such as input and
-   * output tokens of one call. The idempotency key covers the batch.
-   */
-  recordMany(organizationId: string, entries: readonly UsageEntry[], options?: Omit<RecordUsageOptions, "quantity">): AsyncResult<UsageBatchRecorded>;
-  /**
-   * Like `recordMany`, but checks each meter's quota first; when one doesn't
-   * fit, nothing is recorded and the result is `quota_exceeded`.
-   */
-  consumeMany(organizationId: string, entries: readonly UsageEntry[], options?: Omit<RecordUsageOptions, "quantity">): AsyncResult<UsageBatchRecorded>;
-  current(organizationId: string, meter: string): AsyncResult<UsageStatus>;
-  overview(organizationId: string): AsyncResult<readonly UsageStatus[]>;
-  /** Units left in the period, or `undefined` without a quota. */
-  remaining(organizationId: string, meter: string): AsyncResult<number | undefined>;
-  /** The meter catalog (`options.meters`), empty without one. */
-  meters(): AsyncResult<Readonly<Record<string, UsageMeterInfo>>>;
-  /**
-   * The tenant's usage entries, newest first, with who and what used each
-   * (`usage.read`). Empty without `sql.modules.usage.options.history`.
-   */
-  history(organizationId: string, options?: UsageHistoryOptions): AsyncResult<readonly UsageHistoryEntry[]>;
-  /**
-   * The meter's usage in its current quota window per actor and source,
-   * largest first (`usage.read`). Empty without the history option.
-   */
-  breakdown(organizationId: string, meter: string): AsyncResult<readonly UsageBreakdownEntry[]>;
-}
-/** Usage metering and quotas over the `usage` module's functions. */
-declare function createUsage(options: UsageOptions): Usage;
-interface ReportUsageOptions {
-  /** A service-role transport: the reporting functions are granted to `service_role` only. */
-  readonly transport: BlockTransport;
-  readonly stripe: StripeSource;
-  readonly schema?: string;
-  /** The Stripe meter's `event_name` for a meter; default the meter itself. */
-  readonly eventName?: (meter: string) => string | undefined;
-  /**
-   * The tenant's Stripe customer. Default: `tenant_stripe_customer()` from
-   * the `entitlements` module (`config.entitlements.customer`).
-   */
-  readonly customer?: (organizationId: string) => Promise<string | undefined>;
-  /** Counters per run, default 500. */
-  readonly batch?: number;
-  /**
-   * Send only the usage above the tenant's quota (the allowance its plan
-   * includes) in each quota window, instead of every unit. A meter without
-   * a quota sends everything, and one with an unlimited quota sends nothing.
-   */
-  readonly overage?: boolean;
-}
-interface ReportUsageResult {
-  /** Meter events sent; usage inside the quota with `overage` is marked without one. */
-  readonly reported: number;
-  /**
-   * Counters left for a later run: no customer, or no event name. They don't
-   * hold up the other counters of the batch.
-   */
-  readonly skipped: number;
-}
-/**
- * Sends unreported usage to Stripe as meter events, one per counter and
- * delta. The event `identifier` is the tenant, meter, day and new total, so
- * a run that fails after sending and before marking resends the same event,
- * and Stripe drops the duplicate. Run it from a job or a cron route.
- */
-declare function reportUsageToStripe(options: ReportUsageOptions): Promise<ReportUsageResult>;
-//#endregion
-export { UsageBatchRecorded as a, UsageHistoryEntry as c, UsageOptions as d, UsagePeriod as f, reportUsageToStripe as g, createUsage as h, Usage as i, UsageHistoryOptions as l, UsageStatus as m, ReportUsageOptions as n, UsageBreakdownEntry as o, UsageRecorded as p, ReportUsageResult as r, UsageEntry as s, RecordUsageOptions as t, UsageMeterInfo as u };

package/dist/vault-wlbBhqm7.d.ts

@@ -1,50 +0,0 @@
-import { t as AsyncResult, w as ErrorMapper } from "./result-D7y2fT87.js";
-import { t as BlockTransport } from "./block-transport-DvaoPuZ9.js";
-import { c as SetCredentialOptions, i as CredentialRef, r as CredentialProvider } from "./provider-D-UEMvSD.js";
-//#region src/credentials/vault.d.ts
-/** How a request the third party sends is signed with the stored secret. */
-type VaultInboundScheme = "standard-webhooks" | "hmac-sha256" | "shared-secret";
-/**
- * A credential in Vault. `scope: 'user'` keeps one secret per user subject.
- * The token goes out as `<header>: <scheme> <token>`, `Authorization: Bearer`
- * by default; `scheme: null` sends it bare (`x-api-key`).
- */
-interface VaultCredentialRef {
-  readonly provider: "vault";
-  readonly secret: string;
-  /** Stores the secret as `tenant/<tenant>/<secret>`, apart from every other tenant's. */
-  readonly tenant?: string;
-  readonly scope?: "app" | "user";
-  readonly header?: string;
-  readonly scheme?: string | null;
-  readonly inbound?: VaultInboundScheme;
-  /** Defaults to `x-hub-signature-256` for `hmac-sha256`, `authorization` for `shared-secret`. */
-  readonly signatureHeader?: string;
-}
-interface VaultCredentialsOptions {
-  /** `sqlTransport(postgres.asService())` or `rpcTransport` with the service role key. */
-  readonly transport: BlockTransport;
-  /** The schema of the `credentials` module. Defaults to `better_supabase`. */
-  readonly schema?: string;
-  readonly mappers?: readonly ErrorMapper[];
-  /**
-   * How long a read secret stays in memory, in milliseconds. Defaults to
-   * 60000; `0` reads Vault on every call. `set` and `revoke` clear it.
-   */
-  readonly cacheMs?: number;
-}
-interface VaultCredentials extends CredentialProvider {
-  readonly name: "vault";
-  /** Stores or replaces the credential a ref names, for `subject` when the ref is per user. */
-  set(ref: CredentialRef, value: string, options?: SetCredentialOptions): AsyncResult<void>;
-  verifyInbound(request: Request, ref: CredentialRef): AsyncResult<boolean>;
-}
-/**
- * A `CredentialProvider` over the `credentials` SQL module: tokens and API
- * keys in Supabase Vault, read through security definer functions only the
- * service role may call. Static secrets only; OAuth connections come from
- * a provider such as `better-supabase/vercel-connect`.
- */
-declare function vaultCredentials(options: VaultCredentialsOptions): VaultCredentials;
-//#endregion
-export { vaultCredentials as a, VaultInboundScheme as i, VaultCredentials as n, VaultCredentialsOptions as r, VaultCredentialRef as t };

package/dist/verify-DL41hbvY.js

@@ -1,232 +0,0 @@
-import { n as dbError } from "./errors-B11Duf73.js";
-import { c as optionalTemporal, s as nowInstant } from "./temporal-BJGitm-h.js";
-import { n as temporalMissing } from "./temporal-required-BVvW7SYJ.js";
-import { a as ok, r as err } from "./result-DzUbqgdW.js";
-import { i as toBase64, r as fromBase64 } from "./base64-D2gsioCY.js";
-import { c as toApp } from "./shared-CxWmcyqB.js";
-//#region src/blocks/webhooks/verify.ts
-const encoder = /* @__PURE__ */ new TextEncoder();
-/** Accepts `whsec_…`, `v1,whsec_…` (Supabase Auth hooks) or raw base64. */
-function secretBytes(secret) {
-	const raw = secret.replace(/^v1,/, "").replace(/^whsec_/, "");
-	try {
-		return fromBase64(raw);
-	} catch {
-		throw new TypeError("Webhook secret is not valid base64");
-	}
-}
-/** Secrets come from configuration, so a handful of keys suffice. */
-const keys = /* @__PURE__ */ new Map();
-function keyFor(secret) {
-	let key = keys.get(secret);
-	if (!key) {
-		key = crypto.subtle.importKey("raw", secretBytes(secret), {
-			name: "HMAC",
-			hash: "SHA-256"
-		}, false, ["sign", "verify"]);
-		if (keys.size < 16) {
-			keys.set(secret, key);
-			key.catch(() => keys.delete(secret));
-		}
-	}
-	return key;
-}
-async function signature(secret, content) {
-	return toBase64(new Uint8Array(await crypto.subtle.sign("HMAC", await keyFor(secret), encoder.encode(content))));
-}
-function decodeSignature(value) {
-	try {
-		return fromBase64(value);
-	} catch {
-		return;
-	}
-}
-/** Constant-time string comparison. */
-function timingSafeEqual(a, b) {
-	const left = encoder.encode(a);
-	const right = encoder.encode(b);
-	let diff = left.length ^ right.length;
-	for (let index = 0; index < Math.max(left.length, right.length); index++) diff |= (left[index] ?? 0) ^ (right[index] ?? 0);
-	return diff === 0;
-}
-function header(headers, name) {
-	if (headers instanceof Headers) return headers.get(name);
-	return Object.entries(headers).find(([key]) => key.toLowerCase() === name)?.[1] ?? null;
-}
-const unauthorized = (code, message) => dbError("unauthorized", message, { code });
-/** Headers for a signed Standard Webhooks request. */
-async function signWebhook(secret, message) {
-	const timestamp = String(Math.floor((message.timestamp ?? nowInstant()).epochMilliseconds / 1e3));
-	return {
-		"webhook-id": message.id,
-		"webhook-timestamp": timestamp,
-		"webhook-signature": `v1,${await signature(secret, `${message.id}.${timestamp}.${message.body}`)}`
-	};
-}
-/**
-* Verifies a Standard Webhooks signature (`webhook-id`, `webhook-timestamp`,
-* `webhook-signature`, or the `svix-` names Svix-based senders use) and
-* parses the JSON body. Pass several secrets while rotating.
-*/
-async function verifyWebhook(input, secrets, options = {}) {
-	const headers = input.headers;
-	const prefix = header(headers, "webhook-id") === null ? "svix" : "webhook";
-	const id = header(headers, `${prefix}-id`);
-	const timestamp = header(headers, `${prefix}-timestamp`);
-	const signatures = header(headers, `${prefix}-signature`);
-	if (!id || !timestamp || !signatures) return err(unauthorized("WEBHOOK_MISSING_HEADERS", "Missing webhook signature headers"));
-	const seconds = Number(timestamp);
-	if (!/^\d+$/.test(timestamp)) return err(unauthorized("WEBHOOK_INVALID_TIMESTAMP", "Invalid webhook timestamp"));
-	const namespace = optionalTemporal();
-	if (namespace === void 0) return err(temporalMissing());
-	const now = (options.now?.() ?? namespace.Now.instant()).epochMilliseconds / 1e3;
-	const tolerance = options.tolerance ?? 300;
-	if (seconds < now - tolerance) return err(unauthorized("WEBHOOK_TIMESTAMP_TOO_OLD", "Webhook timestamp is too old"));
-	if (seconds > now + tolerance) return err(unauthorized("WEBHOOK_TIMESTAMP_TOO_NEW", "Webhook timestamp is in the future"));
-	const body = input instanceof Request ? await input.text() : input.body;
-	const content = encoder.encode(`${id}.${timestamp}.${body}`);
-	const offered = signatures.split(" ").map((entry) => entry.split(",")).filter(([version, value]) => version === "v1" && value).flatMap(([, value]) => decodeSignature(value) ?? []);
-	let valid = false;
-	for (const secret of typeof secrets === "string" ? [secrets] : secrets) {
-		const key = await keyFor(secret);
-		for (const candidate of offered) if (await crypto.subtle.verify("HMAC", key, candidate, content)) valid = true;
-	}
-	if (!valid) return err(unauthorized("WEBHOOK_INVALID_SIGNATURE", "Invalid webhook signature"));
-	try {
-		return ok({
-			id,
-			timestamp: namespace.Instant.fromEpochMilliseconds(seconds * 1e3),
-			payload: JSON.parse(body),
-			body
-		});
-	} catch {
-		return err(dbError("invalid_request", "Webhook body is not JSON"));
-	}
-}
-/** Checks a shared-secret header (database webhooks), in constant time. */
-function verifySharedSecret(request, secret, headerName = "authorization") {
-	return timingSafeEqual((request.headers.get(headerName) ?? "").replace(/^Bearer\s+/i, ""), secret);
-}
-const toHex = (bytes) => Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-/** Stripe signs with the endpoint secret's UTF-8 bytes, not its base64 decoding. */
-async function stripeSignature(secret, content) {
-	const key = await crypto.subtle.importKey("raw", encoder.encode(secret), {
-		name: "HMAC",
-		hash: "SHA-256"
-	}, false, ["sign"]);
-	return toHex(new Uint8Array(await crypto.subtle.sign("HMAC", key, encoder.encode(content))));
-}
-/** The `Stripe-Signature` header for `body`, for tests and local replays. */
-async function signStripeWebhook(secret, body, timestamp = nowInstant()) {
-	const seconds = String(Math.floor(timestamp.epochMilliseconds / 1e3));
-	return `t=${seconds},v1=${await stripeSignature(secret, `${seconds}.${body}`)}`;
-}
-/**
-* Verifies a `Stripe-Signature` header (`t=…,v1=…`) with the endpoint's
-* `whsec_…` secret and parses the event. Pass several secrets while rolling
-* the endpoint secret. Runs on WebCrypto, so it needs no `stripe` package.
-*/
-async function verifyStripeWebhook(input, secrets, options = {}) {
-	const value = header(input.headers, "stripe-signature");
-	if (!value) return err(unauthorized("WEBHOOK_MISSING_HEADERS", "Missing Stripe-Signature header"));
-	const parts = value.split(",").map((part) => {
-		const index = part.indexOf("=");
-		return [part.slice(0, index).trim(), part.slice(index + 1).trim()];
-	});
-	const timestamp = parts.find(([name]) => name === "t")?.[1] ?? "";
-	const offered = parts.filter(([name]) => name === "v1").map(([, sig]) => sig);
-	if (!/^\d+$/.test(timestamp)) return err(unauthorized("WEBHOOK_INVALID_TIMESTAMP", "Invalid webhook timestamp"));
-	const namespace = optionalTemporal();
-	if (namespace === void 0) return err(temporalMissing());
-	const seconds = Number(timestamp);
-	const now = (options.now?.() ?? namespace.Now.instant()).epochMilliseconds / 1e3;
-	if (Math.abs(now - seconds) > (options.tolerance ?? 300)) return err(unauthorized("WEBHOOK_TIMESTAMP_OUT_OF_RANGE", "Webhook timestamp is outside the tolerance"));
-	const body = input instanceof Request ? await input.text() : input.body;
-	let valid = false;
-	for (const secret of typeof secrets === "string" ? [secrets] : secrets) {
-		const expected = await stripeSignature(secret, `${timestamp}.${body}`);
-		for (const candidate of offered) if (timingSafeEqual(candidate, expected)) valid = true;
-	}
-	if (!valid) return err(unauthorized("WEBHOOK_INVALID_SIGNATURE", "Invalid webhook signature"));
-	let payload;
-	try {
-		payload = JSON.parse(body);
-	} catch {
-		return err(dbError("invalid_request", "Webhook body is not JSON"));
-	}
-	const id = typeof payload === "object" && payload !== null && "id" in payload ? String(payload.id) : "";
-	return ok({
-		id,
-		timestamp: namespace.Instant.fromEpochMilliseconds(seconds * 1e3),
-		payload,
-		body
-	});
-}
-/**
-* `createWebhookInbox({ source: 'stripe', verify: stripeInboxVerify(secret) })`:
-* stores Stripe events keyed by their event id.
-*/
-function stripeInboxVerify(secrets, options = {}) {
-	return async (request, body) => {
-		const verified = await verifyStripeWebhook({
-			headers: request.headers,
-			body
-		}, secrets, options);
-		return verified.ok ? ok({
-			id: verified.data.id,
-			payload: verified.data.payload
-		}) : verified;
-	};
-}
-/** Rejects a hook with a status and message Supabase Auth passes to the client. */
-function hookError(status, message) {
-	return { error: {
-		http_code: status,
-		message
-	} };
-}
-/**
-* A `(request) => Response` handler for a Supabase Auth hook: verifies the
-* Standard Webhooks signature, types the payload and serializes the answer.
-*
-* ```ts
-* export const POST = authHook('custom_access_token', env.AUTH_HOOK_SECRET, async ({ claims, user_id }) => ({
-*   claims: { ...claims, tenant_id: await organizationFor(user_id) },
-* }));
-* ```
-*/
-function authHook(_kind, secret, handler, options) {
-	return async (request) => {
-		const verified = await verifyWebhook(request, secret, options);
-		if (!verified.ok) return Response.json(hookError(verified.error.status, verified.error.message), { status: verified.error.status });
-		try {
-			const answer = await handler(verified.data.payload, verified.data);
-			const status = "error" in answer ? answer.error.http_code : 200;
-			return Response.json(answer, { status });
-		} catch (cause) {
-			console.error("better-supabase: auth hook failed", cause);
-			return Response.json(hookError(500, "Hook failed"), { status: 500 });
-		}
-	};
-}
-function isDatabaseWebhook(value) {
-	if (typeof value !== "object" || value === null) return false;
-	const payload = value;
-	return (payload["type"] === "INSERT" || payload["type"] === "UPDATE" || payload["type"] === "DELETE") && typeof payload["table"] === "string" && typeof payload["schema"] === "string";
-}
-/**
-* Reads a database webhook payload for `table` as an app-cased change.
-* Returns `null` for other tables or payloads that aren't database webhooks.
-*/
-function databaseChange(betterSupabase, table, payload) {
-	const meta = betterSupabase.meta.tables[table];
-	if (!meta || !isDatabaseWebhook(payload) || payload.table !== meta.name || payload.schema !== meta.schema) return null;
-	return {
-		type: payload.type,
-		table,
-		record: payload.record ? toApp(meta, payload.record) : null,
-		oldRecord: payload.old_record ? toApp(meta, payload.old_record) : null
-	};
-}
-//#endregion
-export { signStripeWebhook as a, timingSafeEqual as c, verifyWebhook as d, isDatabaseWebhook as i, verifySharedSecret as l, databaseChange as n, signWebhook as o, hookError as r, stripeInboxVerify as s, authHook as t, verifyStripeWebhook as u };