better-supabase 0.8.0 → 0.10.0

package/dist/usage-BrJGPvCq.js

@@ -0,0 +1,250 @@
+import { n as isRecord } from "./guards-6F2bCtQR.js";
+import { C as optionalText, D as recordOf, I as textOf, M as seconds, R as toInstant, k as recordsOf, n as applyTemporal, o as blockCall, t as DEFAULT_BLOCK_SCHEMA, u as eachLimit, w as pageOf } from "./block-helpers-BfVCR5Fc.js";
+import { r as withBlockHooks } from "./block-hooks-ByKlh8Qy.js";
+import { t as lazyStripe } from "./stripe-XZrSmDTf.js";
+//#region src/blocks/usage/usage.ts
+const numberOf = (value) => typeof value === "number" ? value : Number(value);
+const optionalNumber = (value) => value === null || value === void 0 ? void 0 : numberOf(value);
+const PERIODS = /* @__PURE__ */ new Set([
+	"day",
+	"week",
+	"month",
+	"year",
+	"billing"
+]);
+const periodOf = (value) => {
+	const text = textOf(value);
+	return PERIODS.has(text) ? text : "month";
+};
+function recordedOf(value) {
+	const row = recordOf(value, "record_usage");
+	return {
+		recorded: row["recorded"] === true,
+		today: numberOf(row["today"]),
+		used: numberOf(row["used"])
+	};
+}
+const perMeter = (value) => isRecord(value) ? Object.fromEntries(Object.entries(value).map(([meter, used]) => [meter, numberOf(used)])) : {};
+function statusOf(value) {
+	const row = recordOf(value, "usage_status");
+	return {
+		meter: textOf(row["meter"]),
+		used: numberOf(row["used"]),
+		limit: optionalNumber(row["limit"]),
+		remaining: optionalNumber(row["remaining"]),
+		unlimited: row["unlimited"] === true,
+		period: periodOf(row["period"]),
+		startsAt: row["starts_at"] === void 0 || row["starts_at"] === null ? void 0 : toInstant(textOf(row["starts_at"])),
+		resetsAt: toInstant(textOf(row["resets_at"])),
+		...meterInfo(row)
+	};
+}
+function meterInfo(row) {
+	const unit = optionalText(row["unit"]);
+	const category = optionalText(row["category"]);
+	const label = optionalText(row["label"]);
+	return {
+		...unit === void 0 ? {} : { unit },
+		...category === void 0 ? {} : { category },
+		...label === void 0 ? {} : { label }
+	};
+}
+/** Usage metering and quotas over the `usage` module's functions. */
+function createUsage(options) {
+	applyTemporal(options);
+	const call = blockCall(options.transport, options.schema, options.mappers);
+	const args = (organizationId, meter, record = {}) => ({
+		tenant: organizationId,
+		meter,
+		quantity: record.quantity ?? 1,
+		idempotency_key: record.idempotencyKey,
+		source: record.source,
+		metadata: record.metadata,
+		actor: record.actor
+	});
+	const batch = (check) => (organizationId, entries, record = {}) => call("record_usage_batch", {
+		tenant: organizationId,
+		entries: JSON.stringify(entries.map((entry) => ({
+			meter: entry.meter,
+			quantity: entry.quantity ?? 1
+		}))),
+		idempotency_key: record.idempotencyKey,
+		check,
+		source: record.source,
+		metadata: record.metadata,
+		actor: record.actor
+	}, (value) => {
+		const row = recordOf(value, "record_usage_batch");
+		return {
+			recorded: row["recorded"] === true,
+			today: perMeter(row["today"]),
+			used: perMeter(row["used"])
+		};
+	});
+	const current = (organizationId, meter) => call("usage_status", {
+		tenant: organizationId,
+		meter
+	}, statusOf);
+	const purge = (fn) => (purgeOptions = {}) => call(fn, {
+		older_than: purgeOptions.olderThan === void 0 ? void 0 : seconds(purgeOptions.olderThan),
+		batch: purgeOptions.batch
+	}, (value) => Number(value ?? 0));
+	const purgeHistory = purge("purge_usage_history");
+	const purgeEvents = purge("purge_usage_events");
+	const client = {
+		purgeHistory,
+		purgeEvents,
+		purgeJob: (jobOptions = {}) => async () => ({
+			history: await purgeHistory(jobOptions.history).orThrow(),
+			events: await purgeEvents(jobOptions.events).orThrow()
+		}),
+		record: (organizationId, meter, record) => call("record_usage", args(organizationId, meter, record), recordedOf),
+		consume: (organizationId, meter, record) => call("consume_quota", args(organizationId, meter, record), recordedOf),
+		recordMany: batch(false),
+		consumeMany: batch(true),
+		current,
+		overview: (organizationId) => call("usage_overview", { tenant: organizationId }, (value) => (Array.isArray(value) ? value : []).map(statusOf)),
+		remaining: (organizationId, meter) => current(organizationId, meter).map((status) => status.remaining),
+		history: (organizationId, list = {}) => call("usage_history", {
+			tenant: organizationId,
+			meter: list.meter,
+			max_rows: list.limit ?? 100,
+			before_id: pageOf(list).cursor
+		}, (value) => (Array.isArray(value) ? value.filter(isRecord) : []).map((row) => ({
+			id: numberOf(row["id"]),
+			meter: textOf(row["meter"]),
+			quantity: numberOf(row["quantity"]),
+			actor: optionalText(row["actor"]),
+			source: optionalText(row["source"]),
+			metadata: isRecord(row["metadata"]) ? row["metadata"] : {},
+			recordedAt: toInstant(textOf(row["recorded_at"]))
+		}))),
+		breakdown: (organizationId, meter) => call("usage_breakdown", {
+			tenant: organizationId,
+			meter
+		}, (value) => (Array.isArray(value) ? value.filter(isRecord) : []).map((row) => ({
+			actor: optionalText(row["actor"]),
+			source: optionalText(row["source"]),
+			quantity: numberOf(row["quantity"])
+		}))),
+		meters: () => call("usage_meters", {}, (value) => {
+			const row = isRecord(value) ? value : {};
+			return Object.fromEntries(Object.entries(row).map(([meter, info]) => [meter, meterInfo(isRecord(info) ? info : {})]));
+		})
+	};
+	return withBlockHooks(client, options.hooks, {
+		block: "usage",
+		...options.logger ? { logger: options.logger } : {}
+	});
+}
+/** Customer lookups, and meter events with their marks, in flight at once. */
+const REPORT_CONCURRENCY = 8;
+/**
+* Sends unreported usage to Stripe as meter events, one per counter and
+* delta. The event `identifier` is the tenant, meter, day and new total, so
+* a run that fails after sending and before marking resends the same event,
+* and Stripe drops the duplicate. Run it from a job or a cron route.
+*/
+async function reportUsageToStripe(options) {
+	const call = blockCall(options.transport, options.schema);
+	const entitlements = blockCall(options.transport, DEFAULT_BLOCK_SCHEMA);
+	const stripe = await lazyStripe(options.stripe)();
+	const customers = /* @__PURE__ */ new Map();
+	const customerOf = options.customer ?? (async (organizationId) => entitlements("tenant_stripe_customer", { tenant: organizationId }, optionalText).orThrow());
+	const limit = options.batch ?? 500;
+	const skipMeters = /* @__PURE__ */ new Set();
+	const skipTenants = /* @__PURE__ */ new Set();
+	/** Sends the meter event when there is a delta, then marks the total; `true` when it sent one. */
+	const send = async (pending) => {
+		const { organizationId, meter, day, value, delta, identifier } = pending;
+		if (delta > 0) await stripe.billing.meterEvents.create({
+			event_name: pending.eventName,
+			payload: {
+				stripe_customer_id: pending.customer,
+				value: String(delta)
+			},
+			identifier,
+			timestamp: Math.floor(Math.min(Date.now(), Date.parse(`${day}T23:59:59Z`)) / 1e3)
+		}, { idempotencyKey: identifier });
+		await call("mark_usage_reported", {
+			tenant: organizationId,
+			meter,
+			day,
+			value
+		}, () => void 0).orThrow();
+		return delta > 0;
+	};
+	let reported = 0;
+	let skipped = 0;
+	let handled = 0;
+	for (;;) {
+		const rows = await call("unreported_usage", {
+			max_rows: limit - handled,
+			skip_meters: [...skipMeters],
+			skip_tenants: [...skipTenants]
+		}, (value) => recordsOf(value, "unreported_usage")).orThrow();
+		let passedOver = false;
+		const eventNameOf = (meter) => options.eventName ? options.eventName(meter) : meter;
+		const lookups = /* @__PURE__ */ new Set();
+		for (const row of rows) {
+			const organizationId = textOf(row["organization_id"]);
+			if (!customers.has(organizationId) && !skipTenants.has(organizationId) && eventNameOf(textOf(row["meter"])) !== void 0) lookups.add(organizationId);
+		}
+		await eachLimit([...lookups], REPORT_CONCURRENCY, async (organizationId) => {
+			customers.set(organizationId, await customerOf(organizationId));
+		});
+		const sends = [];
+		for (const row of rows) {
+			const organizationId = textOf(row["organization_id"]);
+			const meter = textOf(row["meter"]);
+			if (skipMeters.has(meter) || skipTenants.has(organizationId)) {
+				skipped += 1;
+				continue;
+			}
+			const eventName = eventNameOf(meter);
+			if (eventName === void 0) {
+				skipMeters.add(meter);
+				skipped += 1;
+				passedOver = true;
+				continue;
+			}
+			const customer = customers.get(organizationId);
+			if (customer === void 0) {
+				skipTenants.add(organizationId);
+				skipped += 1;
+				passedOver = true;
+				continue;
+			}
+			handled += 1;
+			const day = textOf(row["day"]).slice(0, 10);
+			const value = numberOf(row["value"]);
+			const previous = numberOf(row["reported_value"]);
+			const included = optionalNumber(row["included"]);
+			const before = numberOf(row["window_before"] ?? 0);
+			const delta = options.overage === true && row["unlimited"] === true ? 0 : options.overage === true && included !== void 0 ? Math.max(0, before + value - included) - Math.max(0, before + previous - included) : value - previous;
+			const identifier = `${organizationId}:${meter}:${day}:${String(value)}`;
+			sends.push({
+				organizationId,
+				meter,
+				day,
+				value,
+				delta,
+				eventName,
+				customer,
+				identifier
+			});
+		}
+		const sent = [];
+		await eachLimit(sends, REPORT_CONCURRENCY, async (pending, index) => {
+			sent[index] = await send(pending);
+		});
+		reported += sent.filter(Boolean).length;
+		if (!passedOver || handled >= limit || rows.length === 0) break;
+	}
+	return {
+		reported,
+		skipped
+	};
+}
+//#endregion
+export { reportUsageToStripe as n, createUsage as t };

package/dist/usage-CnQHSM_r.d.ts

@@ -0,0 +1,202 @@
+/// <reference lib="esnext.temporal" />
+import { t as AsyncResult } from "./result-Cj3yWhjH.js";
+import { n as Logger } from "./logger-DWVYUmwi.js";
+import { t as BlockTransport } from "./block-transport-NbUJygA7.js";
+import { i as CursorPageOptions, n as BlockOptions } from "./block-helpers-7pMBVsE6.js";
+import { n as BlockHooks } from "./block-hooks-C_WaodoA.js";
+import { g as JobHandler } from "./types-P1S1cj6N.js";
+import { n as StripeSource } from "./stripe-NVcNOhHy.js";
+//#region src/blocks/usage/usage.d.ts
+interface UsageOptions extends BlockOptions {
+  /** `withBlockHooks` hooks around the client's methods, such as a check before `consume`. */
+  readonly hooks?: BlockHooks<Usage>;
+  /** Receives the errors `after` hooks throw. Default: `console`. */
+  readonly logger?: Logger;
+}
+interface RecordUsageOptions {
+  /** Default 1. */
+  readonly quantity?: number;
+  /** A retried call with the same key counts once. */
+  readonly idempotencyKey?: string;
+  /**
+   * What used it, such as `feature:summary` or `api:/v1/search`, kept in the
+   * history with `blocks.usage.options.history`.
+   */
+  readonly source?: string;
+  /** More detail for the history entry, such as a document id. */
+  readonly metadata?: Readonly<Record<string, unknown>>;
+  /**
+   * Who used it, for a service transport recording on a user's behalf.
+   * Ignored for other callers, whose own user id is recorded.
+   */
+  readonly actor?: string;
+}
+/** One meter of a batch. */
+interface UsageEntry {
+  readonly meter: string;
+  /** Default 1. */
+  readonly quantity?: number;
+}
+interface UsageBatchRecorded {
+  /** False when the idempotency key was seen before for every meter. */
+  readonly recorded: boolean;
+  /** Today's usage per meter (UTC). */
+  readonly today: Readonly<Record<string, number>>;
+  /** Usage per meter in its quota's current period, as `current()` reports it. */
+  readonly used: Readonly<Record<string, number>>;
+}
+/** One entry of the usage history. */
+interface UsageHistoryEntry {
+  readonly id: number;
+  readonly meter: string;
+  readonly quantity: number;
+  /** The user who used it, or `undefined` for service usage without one. */
+  readonly actor: string | undefined;
+  readonly source: string | undefined;
+  readonly metadata: Readonly<Record<string, unknown>>;
+  readonly recordedAt: Temporal.Instant;
+}
+/** Usage of a meter in its current window per actor and source. */
+interface UsageBreakdownEntry {
+  readonly actor: string | undefined;
+  readonly source: string | undefined;
+  readonly quantity: number;
+}
+interface UsageHistoryOptions extends CursorPageOptions<number> {
+  readonly meter?: string;
+  /** Defaults to 100, at most 1000. */
+  readonly limit?: number;
+  /** Only entries with a lower id, for the next page. */
+  readonly cursor?: number;
+}
+interface UsageRecorded {
+  /** False when the idempotency key was seen before. */
+  readonly recorded: boolean;
+  /** Today's usage of the meter (UTC). */
+  readonly today: number;
+  /** Usage in the quota's current period, as `current()` reports it. */
+  readonly used: number;
+}
+/**
+ * A quota period: a UTC calendar period, or `billing` for the window the
+ * app's `usage_billing_period(tenant)` function returns.
+ */
+type UsagePeriod = "day" | "week" | "month" | "year" | "billing";
+/** One meter of `blocks.usage.options.meters`. */
+interface UsageMeterInfo {
+  readonly unit?: string;
+  readonly category?: string;
+  readonly label?: string;
+}
+interface UsageStatus {
+  readonly meter: string;
+  /** Usage in the current period. */
+  readonly used: number;
+  /** `undefined` without a quota and for an unlimited one. */
+  readonly limit: number | undefined;
+  readonly remaining: number | undefined;
+  readonly unlimited: boolean;
+  readonly period: UsagePeriod;
+  /** When the current period started. */
+  readonly startsAt: Temporal.Instant | undefined;
+  readonly resetsAt: Temporal.Instant;
+  /** From the meter catalog, when the module has one. */
+  readonly unit?: string;
+  readonly category?: string;
+  readonly label?: string;
+}
+interface Usage {
+  /** Adds usage without checking the quota (metering only). */
+  record(organizationId: string, meter: string, options?: RecordUsageOptions): AsyncResult<UsageRecorded>;
+  /** Adds usage when it fits the quota, or returns `quota_exceeded`. */
+  consume(organizationId: string, meter: string, options?: RecordUsageOptions): AsyncResult<UsageRecorded>;
+  /**
+   * Adds several meters in one transaction, all or none, such as input and
+   * output tokens of one call. The idempotency key covers the batch.
+   */
+  recordMany(organizationId: string, entries: readonly UsageEntry[], options?: Omit<RecordUsageOptions, "quantity">): AsyncResult<UsageBatchRecorded>;
+  /**
+   * Like `recordMany`, but checks each meter's quota first; when one doesn't
+   * fit, nothing is recorded and the result is `quota_exceeded`.
+   */
+  consumeMany(organizationId: string, entries: readonly UsageEntry[], options?: Omit<RecordUsageOptions, "quantity">): AsyncResult<UsageBatchRecorded>;
+  current(organizationId: string, meter: string): AsyncResult<UsageStatus>;
+  overview(organizationId: string): AsyncResult<readonly UsageStatus[]>;
+  /** Units left in the period, or `undefined` without a quota. */
+  remaining(organizationId: string, meter: string): AsyncResult<number | undefined>;
+  /** The meter catalog (`options.meters`), empty without one. */
+  meters(): AsyncResult<Readonly<Record<string, UsageMeterInfo>>>;
+  /**
+   * The tenant's usage entries, newest first, with who and what used each
+   * (`usage.read`). Empty without `blocks.usage.options.history`.
+   */
+  history(organizationId: string, options?: UsageHistoryOptions): AsyncResult<readonly UsageHistoryEntry[]>;
+  /**
+   * The meter's usage in its current quota window per actor and source,
+   * largest first (`usage.read`). Empty without the history option.
+   */
+  breakdown(organizationId: string, meter: string): AsyncResult<readonly UsageBreakdownEntry[]>;
+  /**
+   * Deletes up to `batch` history entries older than `olderThan` (default
+   * 400 days, `purge_usage_history`); returns how many.
+   */
+  purgeHistory(options?: PurgeUsageOptions): AsyncResult<number>;
+  /**
+   * Deletes up to `batch` idempotency keys of recorded usage older than
+   * `olderThan` (default 30 days, `purge_usage_events`); returns how many.
+   * A retry with a purged key records again.
+   */
+  purgeEvents(options?: PurgeUsageOptions): AsyncResult<number>;
+  /** A job handler that runs `purgeHistory` and `purgeEvents`; schedule it nightly. */
+  purgeJob(options?: {
+    readonly history?: PurgeUsageOptions;
+    readonly events?: PurgeUsageOptions;
+  }): JobHandler<unknown>;
+}
+interface PurgeUsageOptions {
+  /** Seconds, or an interval such as `"90 days"`. */
+  readonly olderThan?: number | string;
+  /** Defaults to 10000. */
+  readonly batch?: number;
+}
+/** Usage metering and quotas over the `usage` module's functions. */
+declare function createUsage(options: UsageOptions): Usage;
+interface ReportUsageOptions {
+  /** A service-role transport: the reporting functions are granted to `service_role` only. */
+  readonly transport: BlockTransport;
+  readonly stripe: StripeSource;
+  readonly schema?: string;
+  /** The Stripe meter's `event_name` for a meter; default the meter itself. */
+  readonly eventName?: (meter: string) => string | undefined;
+  /**
+   * The tenant's Stripe customer. Default: `tenant_stripe_customer()` from
+   * the `entitlements` module (`config.entitlements.customer`).
+   */
+  readonly customer?: (organizationId: string) => Promise<string | undefined>;
+  /** Counters per run, default 500. */
+  readonly batch?: number;
+  /**
+   * Send only the usage above the tenant's quota (the allowance its plan
+   * includes) in each quota window, instead of every unit. A meter without
+   * a quota sends everything, and one with an unlimited quota sends nothing.
+   */
+  readonly overage?: boolean;
+}
+interface ReportUsageResult {
+  /** Meter events sent; usage inside the quota with `overage` is marked without one. */
+  readonly reported: number;
+  /**
+   * Counters left for a later run: no customer, or no event name. They don't
+   * hold up the other counters of the batch.
+   */
+  readonly skipped: number;
+}
+/**
+ * Sends unreported usage to Stripe as meter events, one per counter and
+ * delta. The event `identifier` is the tenant, meter, day and new total, so
+ * a run that fails after sending and before marking resends the same event,
+ * and Stripe drops the duplicate. Run it from a job or a cron route.
+ */
+declare function reportUsageToStripe(options: ReportUsageOptions): Promise<ReportUsageResult>;
+//#endregion
+export { reportUsageToStripe as _, Usage as a, UsageEntry as c, UsageMeterInfo as d, UsageOptions as f, createUsage as g, UsageStatus as h, ReportUsageResult as i, UsageHistoryEntry as l, UsageRecorded as m, RecordUsageOptions as n, UsageBatchRecorded as o, UsagePeriod as p, ReportUsageOptions as r, UsageBreakdownEntry as s, PurgeUsageOptions as t, UsageHistoryOptions as u };

package/dist/vault-EnOQJWjn.d.ts

@@ -0,0 +1,50 @@
+import { t as AsyncResult, w as ErrorMapper } from "./result-Cj3yWhjH.js";
+import { c as SetCredentialOptions, i as CredentialRef, r as CredentialProvider } from "./provider-CQ1SrhLa.js";
+import { t as BlockTransport } from "./block-transport-NbUJygA7.js";
+//#region src/credentials/vault.d.ts
+/** How a request the third party sends is signed with the stored secret. */
+type VaultInboundScheme = "standard-webhooks" | "hmac-sha256" | "shared-secret";
+/**
+ * A credential in Vault. `scope: 'user'` keeps one secret per user subject.
+ * The token goes out as `<header>: <scheme> <token>`, `Authorization: Bearer`
+ * by default; `scheme: null` sends it bare (`x-api-key`).
+ */
+interface VaultCredentialRef {
+  readonly provider: "vault";
+  readonly secret: string;
+  /** Stores the secret as `tenant/<tenant>/<secret>`, apart from every other tenant's. */
+  readonly tenant?: string;
+  readonly scope?: "app" | "user";
+  readonly header?: string;
+  readonly scheme?: string | null;
+  readonly inbound?: VaultInboundScheme;
+  /** Defaults to `x-hub-signature-256` for `hmac-sha256`, `authorization` for `shared-secret`. */
+  readonly signatureHeader?: string;
+}
+interface VaultCredentialsOptions {
+  /** `sqlTransport(postgres.asService())` or `rpcTransport` with the service role key. */
+  readonly transport: BlockTransport;
+  /** The schema of the `credentials` module. Defaults to `better_supabase`. */
+  readonly schema?: string;
+  readonly mappers?: readonly ErrorMapper[];
+  /**
+   * How long a read secret stays in memory, in milliseconds. Defaults to
+   * 60000; `0` reads Vault on every call. `set` and `revoke` clear it.
+   */
+  readonly cacheMs?: number;
+}
+interface VaultCredentials extends CredentialProvider {
+  readonly name: "vault";
+  /** Stores or replaces the credential a ref names, for `subject` when the ref is per user. */
+  set(ref: CredentialRef, value: string, options?: SetCredentialOptions): AsyncResult<void>;
+  verifyInbound(request: Request, ref: CredentialRef): AsyncResult<boolean>;
+}
+/**
+ * A `CredentialProvider` over the `credentials` SQL module: tokens and API
+ * keys in Supabase Vault, read through security definer functions only the
+ * service role may call. Static secrets only; OAuth connections come from
+ * a provider such as `better-supabase/vercel-connect`.
+ */
+declare function vaultCredentials(options: VaultCredentialsOptions): VaultCredentials;
+//#endregion
+export { vaultCredentials as a, VaultInboundScheme as i, VaultCredentials as n, VaultCredentialsOptions as r, VaultCredentialRef as t };

package/dist/vercel-connect/index.d.ts

@@ -1,4 +1,4 @@
-import { a as CredentialSubject, r as CredentialProvider } from "../provider-ib9wzUDz.js";
+import { a as CredentialSubject, r as CredentialProvider } from "../provider-CQ1SrhLa.js";
 //#region src/vercel-connect/vercel-connect.d.ts
 interface ConnectTokenParams {
   subject: CredentialSubject;

package/dist/vercel-connect/index.js

@@ -1,8 +1,8 @@
-import { n as dbError } from "../errors-2M6CKMP4.js";
-import { c as optionalTemporal } from "../temporal-BJGitm-h.js";
-import { a as ok, r as err, t as AsyncResult } from "../result-DEqHCMKP.js";
+import { n as dbError } from "../errors-8i6tSICm.js";
+import { c as optionalTemporal } from "../temporal-CB5Fpo5d.js";
+import { a as ok, r as err, t as AsyncResult } from "../result-COkvI9t5.js";
 import { n as isRecord } from "../guards-6F2bCtQR.js";
-import { t as importOptionalPeer } from "../optional-peer-D1pi-skw.js";
+import { t as importOptionalPeer } from "../optional-peer-Dx8TaYXw.js";
 //#region src/vercel-connect/vercel-connect.ts
 const isModule = (value) => isRecord(value) && typeof value["getTokenResponse"] === "function" && typeof value["revokeToken"] === "function" && typeof value["startAuthorization"] === "function";
 /**

package/dist/verify-3NLjUIER.d.ts

@@ -0,0 +1,142 @@
+/// <reference lib="esnext.temporal" />
+import { f as Result } from "./result-Cj3yWhjH.js";
+import { M as Row, a as AnyModels, i as AnyFunctions, z as TableKey } from "./types-BO8lVTun.js";
+import { t as BetterSupabase } from "./define-DXTC706J.js";
+import { n as VerifyOptions, r as WebhookInput, t as VerifiedWebhook } from "./signatures-BMdJ7neI.js";
+//#region src/blocks/webhooks/verify.d.ts
+/** The `Stripe-Signature` header for `body`, for tests and local replays. */
+declare function signStripeWebhook(secret: string, body: string, timestamp?: Temporal.Instant): Promise<string>;
+/**
+ * Verifies a `Stripe-Signature` header (`t=…,v1=…`) with the endpoint's
+ * `whsec_…` secret and parses the event. Pass several secrets while rolling
+ * the endpoint secret. Runs on WebCrypto, so it needs no `stripe` package.
+ */
+declare function verifyStripeWebhook<T = unknown>(input: WebhookInput, secrets: string | readonly string[], options?: VerifyOptions): Promise<Result<VerifiedWebhook<T>>>;
+/**
+ * `createWebhookInbox({ source: 'stripe', verify: stripeInboxVerify(secret) })`:
+ * stores Stripe events keyed by their event id.
+ */
+declare function stripeInboxVerify(secrets: string | readonly string[], options?: VerifyOptions): (request: Request, body: string) => Promise<Result<{
+  id: string;
+  payload: unknown;
+}>>;
+interface HookUser {
+  readonly id: string;
+  readonly email?: string;
+  readonly phone?: string;
+  readonly app_metadata?: Readonly<Record<string, unknown>>;
+  readonly user_metadata?: Readonly<Record<string, unknown>>;
+  readonly [key: string]: unknown;
+}
+interface AuthHookError {
+  readonly error: {
+    readonly http_code: number;
+    readonly message: string;
+  };
+}
+interface AuthHooks {
+  custom_access_token: {
+    input: {
+      readonly user_id: string;
+      readonly claims: Readonly<Record<string, unknown>> & {
+        readonly sub: string;
+        readonly role: string;
+      };
+      readonly authentication_method: string;
+    };
+    output: {
+      readonly claims: Readonly<Record<string, unknown>>;
+    };
+  };
+  send_email: {
+    input: {
+      readonly user: HookUser;
+      readonly email_data: {
+        readonly token: string;
+        readonly token_hash: string;
+        readonly redirect_to: string;
+        readonly email_action_type: string;
+        readonly site_url: string;
+        readonly token_new: string;
+        readonly token_hash_new: string;
+        /** Auth adds fields over time (`old_email`, `factor_type`, ...). */
+        readonly [key: string]: unknown;
+      };
+    };
+    output: Record<never, never>;
+  };
+  send_sms: {
+    input: {
+      readonly user: HookUser;
+      readonly sms: {
+        readonly otp: string;
+      };
+    };
+    output: Record<never, never>;
+  };
+  mfa_verification_attempt: {
+    input: {
+      readonly factor_id: string;
+      readonly factor_type: string;
+      readonly user_id: string;
+      readonly valid: boolean;
+    };
+    output: {
+      readonly decision: "continue" | "reject";
+      readonly message?: string;
+    };
+  };
+  password_verification_attempt: {
+    input: {
+      readonly user_id: string;
+      readonly valid: boolean;
+    };
+    output: {
+      readonly decision: "continue" | "reject";
+      readonly message?: string;
+      readonly should_logout_user?: boolean;
+    };
+  };
+  before_user_created: {
+    input: {
+      readonly metadata: Readonly<Record<string, unknown>>;
+      readonly user: HookUser;
+    };
+    output: Record<never, never>;
+  };
+}
+type AuthHookKind = keyof AuthHooks;
+/** Rejects a hook with a status and message Supabase Auth passes to the client. */
+declare function hookError(status: number, message: string): AuthHookError;
+/**
+ * A `(request) => Response` handler for a Supabase Auth hook: verifies the
+ * Standard Webhooks signature, types the payload and serializes the answer.
+ *
+ * ```ts
+ * export const POST = authHook('custom_access_token', env.AUTH_HOOK_SECRET, async ({ claims, user_id }) => ({
+ *   claims: { ...claims, tenant_id: await organizationFor(user_id) },
+ * }));
+ * ```
+ */
+declare function authHook<K extends AuthHookKind>(_kind: K, secret: string | readonly string[], handler: (payload: AuthHooks[K]["input"], webhook: VerifiedWebhook<AuthHooks[K]["input"]>) => AuthHooks[K]["output"] | AuthHookError | Promise<AuthHooks[K]["output"] | AuthHookError>, options?: VerifyOptions): (request: Request) => Promise<Response>;
+interface DatabaseWebhookPayload {
+  readonly type: "INSERT" | "UPDATE" | "DELETE";
+  readonly table: string;
+  readonly schema: string;
+  readonly record: Readonly<Record<string, unknown>> | null;
+  readonly old_record: Readonly<Record<string, unknown>> | null;
+}
+interface DatabaseChange<R> {
+  readonly type: "INSERT" | "UPDATE" | "DELETE";
+  readonly table: string;
+  readonly record: R | null;
+  readonly oldRecord: Partial<R> | null;
+}
+declare function isDatabaseWebhook(value: unknown): value is DatabaseWebhookPayload;
+/**
+ * Reads a database webhook payload for `table` as an app-cased change.
+ * Returns `null` for other tables or payloads that aren't database webhooks.
+ */
+declare function databaseChange<M extends AnyModels, D, F extends AnyFunctions, E, T extends TableKey<M>>(betterSupabase: BetterSupabase<M, D, F, E>, table: T, payload: unknown): DatabaseChange<Row<M, T>> | null;
+//#endregion
+export { DatabaseWebhookPayload as a, hookError as c, stripeInboxVerify as d, verifyStripeWebhook as f, DatabaseChange as i, isDatabaseWebhook as l, AuthHookKind as n, authHook as o, AuthHooks as r, databaseChange as s, AuthHookError as t, signStripeWebhook as u };