better-supabase 0.8.0 → 0.9.0

package/dist/types-D__3EN0q.d.ts

@@ -1,425 +0,0 @@
-/// <reference lib="esnext.temporal" />
-import { b as DbError, t as AsyncResult } from "./result-BchM1XZn.js";
-import { t as SqlClient } from "./executor-ngjKL_Pe.js";
-import { m as RequestContext, t as Actor } from "./plugin-CPK2HsbY.js";
-import { i as CursorPageOptions, r as BlockTemporalOptions } from "./block-helpers-C0Xj8War.js";
-import { t as BlockProblemOptions } from "./problem-TvGdxO1t.js";
-import { StandardSchemaV1 } from "@standard-schema/spec";
-//#region src/blocks/jobs/backends.d.ts
-/** The body of a queued message, on pgmq and the table backend alike. */
-interface QueueMessageBody {
-  readonly payload?: unknown;
-  readonly max_attempts?: number;
-  readonly last_error?: string;
-}
-/** A claimed message, as `better_supabase.claim_jobs` returns it. */
-interface QueueMessageRow {
-  readonly id: string | number;
-  /** 1 on the first claim; a lease token for complete, fail and extend. */
-  readonly attempts: number;
-  readonly enqueued_at: Date | string;
-  readonly visible_until: Date | string;
-  readonly message: QueueMessageBody | null;
-}
-/** A queue's counts, as `jobs.stats` returns them. */
-interface QueueStats {
-  /** Visible now: the next claim takes them. */
-  readonly ready: number;
-  /** Claimed by a worker, or waiting out the backoff before a retry. */
-  readonly inFlight: number;
-  /** Enqueued with a delay and not claimed yet. */
-  readonly delayed: number;
-  /** Dead letters kept in the archive. */
-  readonly dead: number;
-  /** Seconds since the oldest message that isn't done was enqueued; null when none is waiting. */
-  readonly oldestAgeSeconds: number | null;
-}
-/** A dead letter, as `better_supabase.list_dead_jobs` returns it. */
-interface DeadJobRow {
-  readonly id: string | number;
-  readonly attempts: number;
-  readonly enqueued_at: Date | string;
-  readonly died_at: Date | string | null;
-  readonly message: QueueMessageBody | null;
-}
-/** A schedule whose run is due, claimed by `runSchedules`. */
-interface DueSchedule {
-  readonly name: string;
-  readonly cron: string;
-  readonly timeZone: string;
-  readonly queue: string;
-  /** The payload as stored, with its recorded context. */
-  readonly payload: unknown;
-  readonly nextRun: Temporal.Instant;
-}
-/** A Supabase client, or anything with `.schema(name).rpc(fn, args)`. */
-interface QueueRpcClient {
-  /**
-   * `never` parameters, so a typed `SupabaseClient<Database>` whose types
-   * leave out `pgmq_public` fits too.
-   */
-  schema(name: never): {
-    rpc(fn: never, args: never): PromiseLike<{
-      data: unknown;
-      error: unknown;
-    }>;
-  };
-}
-/**
- * Where `createJobs` stores jobs. `sqlQueueBackend` (the `jobs` SQL module
- * module, on pgmq or its table backend) and `pgmqPublicBackend` ship with
- * the package; `testQueueBackend` from `better-supabase/testing` checks
- * another one.
- */
-interface QueueBackend {
-  readonly apiVersion: 1;
-  readonly name: string;
-  /** Whether `extend` works, so long-running batches keep their lease. */
-  readonly leases: boolean;
-  send(queue: string, payload: unknown, delay: number, maxAttempts: number, dedupeKey: string | undefined, dedupe?: "always" | "waiting"): Promise<number>;
-  read(queue: string, lease: number, batch: number): Promise<readonly QueueMessageRow[]>;
-  /** `false` when the lease was lost. */
-  complete(job: Job): Promise<boolean>;
-  fail(job: Job, error: string, retryIn: number | undefined): Promise<"queued" | "dead" | null>;
-  extend(job: Job, lease: number): Promise<boolean>;
-  /** Re-enqueues a dead letter; `null` when it isn't one. Absent when the backend can't. */
-  replay?(queue: string, id: number): Promise<number | null>;
-  /** Counts for one queue. Absent when the backend can't. */
-  stats?(queue: string): Promise<QueueStats>;
-  /** Dead letters, newest first, before `before` when given. Absent when the backend can't. */
-  listDead?(queue: string, limit: number, before: number | undefined): Promise<readonly DeadJobRow[]>;
-  /** Re-enqueues the dead letters `ids`, or the newest `limit`; returns how many. */
-  retryDead?(queue: string, ids: readonly number[] | undefined, limit: number): Promise<number>;
-  schedule(name: string, cron: string, queue: string, payload: unknown, timeZone: string, nextRun: Temporal.Instant, tenant?: string): Promise<void>;
-  unschedule(name: string): Promise<boolean>;
-  /** Schedules by name prefix and tenant. Absent when the backend can't list them. */
-  listSchedules?(filter: ScheduleFilter): Promise<readonly ScheduleInfo[]>;
-  /** Removes a tenant's schedules and returns how many. Absent when the backend can't. */
-  unscheduleTenant?(tenant: string): Promise<number>;
-  /** Leases due schedules (the drain scheduler); absent or empty with pg_cron. */
-  dueSchedules?(lease: number, batch: number): Promise<readonly DueSchedule[]>;
-  /** Moves a schedule from `ran` to `next`; `false` when it changed since the claim. */
-  advanceSchedule?(name: string, ran: Temporal.Instant, next: Temporal.Instant): Promise<boolean>;
-}
-/**
- * The `jobs` SQL module over a service SQL connection. The same
- * functions back both `sql.modules.jobs.options.backend` values (pgmq and table)
- * and both schedulers. `now` dates a schedule's first run.
- */
-declare function sqlQueueBackend(sql: SqlClient, now?: () => Temporal.Instant): QueueBackend;
-/**
- * Supabase's `pgmq_public` RPCs (Integrations, Queues, "Expose Queues via
- * PostgREST"). No lease check on complete, no retry delay, no deduplication
- * and no schedules: a failed job reappears when its lease ends.
- */
-declare function pgmqPublicBackend(client: QueueRpcClient): QueueBackend;
-//#endregion
-//#region src/blocks/jobs/types.d.ts
-type QueueSchemas = Readonly<Record<string, StandardSchemaV1>>;
-type PayloadIn<Q extends QueueSchemas, N extends keyof Q> = StandardSchemaV1.InferInput<Q[N]>;
-type PayloadOut<Q extends QueueSchemas, N extends keyof Q> = StandardSchemaV1.InferOutput<Q[N]>;
-/** The actor and tenant of the request that enqueued a job. */
-interface JobContext {
-  readonly actor?: Actor;
-  readonly tenant?: string;
-  /**
-   * The `act` claim of a support or impersonated session, so the job runs
-   * under the same terms (a read-only support session stays read-only).
-   */
-  readonly act?: Readonly<Record<string, unknown>>;
-}
-interface Job<P = unknown> {
-  /** The pgmq message id. */
-  readonly id: number;
-  readonly queue: string;
-  readonly payload: P;
-  /** 1 on the first run (pgmq's `read_ct`). */
-  readonly attempts: number;
-  readonly maxAttempts: number;
-  readonly enqueuedAt: Temporal.Instant;
-  /** End of the lease: the job becomes claimable again after this. */
-  readonly visibleUntil: Temporal.Instant;
-  readonly lastError: string | null;
-  /**
-   * The actor and tenant recorded at enqueue, ready for `bs.forContext(job.context)`,
-   * which runs as that user with RLS.
-   * Without a recorded tenant, `tenant()` applies its `onMissing` unless the
-   * worker runs with `allTenants: true`.
-   */
-  readonly context: RequestContext;
-}
-interface EnqueueOptions {
-  /** Run no earlier than this. */
-  readonly runAt?: Temporal.Instant;
-  /** Seconds to wait before running. */
-  readonly delay?: number;
-  /** Defaults to 5. After this many failed attempts the job is archived as dead. */
-  readonly maxAttempts?: number;
-  /**
-   * While a job with this key is waiting or running, enqueueing again returns
-   * its id. SQL connections only.
-   */
-  readonly dedupeKey?: string;
-  /**
-   * Which jobs with the same `dedupeKey` take the enqueue: `"always"` (the
-   * default) a waiting or running one, `"waiting"` only one no worker has
-   * claimed yet, so a change made during a run queues one follow-up (a
-   * debounce).
-   */
-  readonly dedupe?: "always" | "waiting";
-  /**
-   * The request context whose actor and tenant the job records, next to the
-   * payload. The tenant is `context.tenant`, the one `tenant()` resolved, or
-   * the `tenant_id` claim (then `app_metadata.tenant_id`).
-   */
-  readonly context?: RequestContext;
-}
-interface ScheduleOptions {
-  /** The actor and tenant every scheduled run records, as in `enqueue`. */
-  readonly context?: RequestContext;
-  /**
-   * The tenant the schedule belongs to, for `listSchedules({ tenant })` and
-   * `unscheduleAll({ tenant })`. Defaults to the tenant of `context`. Needs
-   * `sql.modules.jobs.options.scheduler: "drain"`.
-   */
-  readonly tenant?: string;
-  /**
-   * The IANA time zone the cron fields are read in. Defaults to `UTC`.
-   * Other zones need `sql.modules.jobs.options.scheduler: "drain"`.
-   */
-  readonly timeZone?: string;
-}
-/** One schedule of the set `ensureSchedules` keeps. */
-interface ScheduleDefinition<Q extends QueueSchemas, N extends Extract<keyof Q, string> = Extract<keyof Q, string>> extends ScheduleOptions {
-  readonly name: string;
-  readonly cron: string;
-  readonly queue: N;
-  readonly payload: PayloadIn<Q, N>;
-}
-/** Each queue's `ScheduleDefinition`, so `payload` follows `queue`. */
-type ScheduleDefinitions<Q extends QueueSchemas> = { readonly [N in Extract<keyof Q, string>]: ScheduleDefinition<Q, N>; }[Extract<keyof Q, string>];
-interface EnsureSchedulesOptions {
-  /**
-   * The set's name prefix, such as `workflow:`. Every definition's name
-   * starts with it, and existing schedules under it that the set doesn't
-   * name are removed.
-   */
-  readonly prefix: string;
-  /**
-   * Only this tenant's schedules under the prefix are compared and removed,
-   * and definitions without their own tenant get it.
-   */
-  readonly tenant?: string;
-}
-interface EnsureSchedulesResult {
-  /** The names written, in the order given. */
-  readonly scheduled: readonly string[];
-  /** Schedules under the prefix that the set no longer names. */
-  readonly removed: readonly string[];
-}
-interface ListDeadOptions extends CursorPageOptions<number> {
-  /** Defaults to 100, at most 1000. */
-  readonly limit?: number;
-  /** Only dead letters with a lower id, for the next page. */
-  readonly cursor?: number;
-}
-interface RetryDeadOptions {
-  /** The dead letters to retry. Defaults to the newest `limit`. */
-  readonly ids?: readonly number[];
-  /** Defaults to 1000. */
-  readonly limit?: number;
-}
-/** A dead letter as `listDead` returns it. */
-interface DeadJob<P = unknown> {
-  readonly id: number;
-  readonly queue: string;
-  /** The stored payload, unvalidated: its schema may have changed since. */
-  readonly payload: P;
-  readonly context: RequestContext;
-  readonly attempts: number;
-  readonly maxAttempts: number;
-  readonly lastError: string | null;
-  readonly enqueuedAt: Temporal.Instant;
-  /** When it was archived as dead. */
-  readonly diedAt: Temporal.Instant | null;
-}
-interface RunSchedulesOptions {
-  /** Seconds a claimed schedule stays leased. Defaults to 60. */
-  readonly lease?: number;
-  /** Defaults to 100. */
-  readonly batch?: number;
-}
-interface DrainOptions extends Omit<WorkOptions, "pollInterval" | "maxPollInterval" | "signal"> {
-  /** Stop claiming after this many ms; claimed jobs still finish. */
-  readonly budgetMs?: number;
-}
-interface DrainRouteOptions<Q extends QueueSchemas> extends Omit<DrainOptions, "onError">, BlockProblemOptions {
-  /**
-   * The bearer token callers send (`Authorization: Bearer <secret>`), such
-   * as Vercel's `CRON_SECRET`. Required.
-   */
-  readonly secret: string | undefined;
-  /** The queues to drain, in order, with their handlers. */
-  readonly handlers: { readonly [N in Extract<keyof Q, string>]?: JobHandler<PayloadOut<Q, N>>; };
-  /** Total time in ms for schedules and queues. Defaults to 50000. */
-  readonly budgetMs?: number;
-  /** Enqueue due schedules first (the drain scheduler). Defaults to true. */
-  readonly schedules?: boolean;
-  readonly onError?: (error: DbError, job?: Job) => void;
-  /** Hooks around each authorized drain, such as cron monitor check-ins. */
-  readonly monitor?: DrainMonitor;
-}
-interface DrainRouteResult {
-  /** Schedules whose run was enqueued. */
-  readonly schedules: number;
-  readonly queues: Readonly<Record<string, DrainResult>>;
-  /** True when the budget ran out before every queue was empty. */
-  readonly budgetExhausted: boolean;
-  /** Schedule or queue runs that failed as a whole (individual job failures are in `queues`). */
-  readonly errors: number;
-}
-/**
- * Hooks around one authorized drain, for cron monitoring such as Sentry
- * check-ins. A hook that throws is reported to `onError` and never fails
- * the drain.
- */
-interface DrainMonitor {
-  /** Before schedules run. Its return value (a check-in id) is passed to `onFinish`. */
-  onStart?(request: Request): unknown;
-  /** After the queues ran, with the result the route answers with. */
-  onFinish?(result: DrainRouteResult, started: unknown): unknown;
-}
-/** A schedule as `listSchedules` returns it. */
-interface ScheduleInfo {
-  readonly name: string;
-  readonly cron: string;
-  readonly timeZone: string;
-  /** Null under pg_cron, which keeps only the command. */
-  readonly queue: string | null;
-  readonly tenant: string | null;
-  /** The next run; null under pg_cron. */
-  readonly nextRun: Temporal.Instant | null;
-  readonly lastRun: Temporal.Instant | null;
-  /** Set while a drain holds the schedule. */
-  readonly leasedUntil: Temporal.Instant | null;
-  readonly createdAt: Temporal.Instant | null;
-}
-interface ScheduleFilter {
-  /** Schedules whose name starts with this, e.g. `workflow:`. */
-  readonly prefix?: string;
-  readonly tenant?: string;
-}
-interface ClaimOptions {
-  /** Defaults to 1. */
-  readonly batch?: number;
-  /** Seconds a claimed job stays invisible to other workers. Defaults to 300. */
-  readonly lease?: number;
-}
-interface FailOptions {
-  /** Retry after this many seconds instead of the exponential backoff. SQL connections only. */
-  readonly retryIn?: number;
-}
-type JobHandler<P> = (payload: P, job: Job<P>, signal: AbortSignal) => unknown;
-interface WorkOptions extends ClaimOptions {
-  /** Jobs handled at once. Defaults to 1. */
-  readonly concurrency?: number;
-  /**
-   * First wait between polls when the queue is empty, in ms. Defaults to
-   * 1000. Each empty poll doubles the wait up to `maxPollInterval`; a claimed
-   * job resets it.
-   */
-  readonly pollInterval?: number;
-  /** Longest wait between empty polls, in ms. Defaults to 30000. */
-  readonly maxPollInterval?: number;
-  /** Stops the loop; running jobs finish first. */
-  readonly signal?: AbortSignal;
-  readonly onError?: (error: DbError, job: Job) => void;
-  /**
-   * Run jobs that recorded no tenant with a context that `tenant()` and
-   * tenant buckets don't scope. Off by default, so such jobs get the
-   * `onMissing` of `tenant()`.
-   */
-  readonly allTenants?: boolean;
-}
-interface DrainResult {
-  readonly succeeded: number;
-  readonly failed: number;
-}
-interface Jobs<Q extends QueueSchemas> {
-  /** Validates the payload with the queue's schema, then enqueues it. Returns the job id. */
-  enqueue<N extends Extract<keyof Q, string>>(queue: N, payload: PayloadIn<Q, N>, options?: EnqueueOptions): AsyncResult<number>;
-  claim<N extends Extract<keyof Q, string>>(queue: N, options?: ClaimOptions): AsyncResult<Job<PayloadOut<Q, N>>[]>;
-  /** Archives the job. `false` when the lease was lost (another worker claimed it since). */
-  complete(job: Job): AsyncResult<boolean>;
-  /** Returns the new state: `queued` (will retry), `dead` (archived), or `null` when the lease was lost. */
-  fail(job: Job, error: unknown, options?: FailOptions): AsyncResult<"queued" | "dead" | null>;
-  /** Pushes the lease out by `lease` seconds. `false` when it was lost or the transport can't. */
-  extend(job: Job, lease: number): AsyncResult<boolean>;
-  /**
-   * Enqueues a dead letter again with its payload and attempts, and removes
-   * it from the archive. Returns the new id, or `null` when `id` is not a
-   * dead letter of `queue`. SQL connections only.
-   */
-  replay(queue: Extract<keyof Q, string>, id: number): AsyncResult<number | null>;
-  /**
-   * Counts per queue (ready, in flight, delayed, dead and the oldest
-   * waiting message's age), for an admin page. Defaults to every queue
-   * `createJobs` declared. SQL connections only.
-   */
-  stats<N extends Extract<keyof Q, string>>(queues?: readonly N[]): AsyncResult<Record<N, QueueStats>>;
-  /** A queue's dead letters, newest first, for an admin page. SQL connections only. */
-  listDead<N extends Extract<keyof Q, string>>(queue: N, options?: ListDeadOptions): AsyncResult<DeadJob<PayloadOut<Q, N>>[]>;
-  /**
-   * Enqueues dead letters again, the `ids` given or the newest `limit`
-   * (1000), each with its payload, attempts and dedupe key. Returns how many
-   * went back on the queue. SQL connections only.
-   */
-  retryDead(queue: Extract<keyof Q, string>, options?: RetryDeadOptions): AsyncResult<number>;
-  /**
-   * Enqueues `payload` on a cron schedule (`'0 3 * * *'`, `'@daily'`,
-   * `'30 seconds'`), with pg_cron or the drain scheduler
-   * (`sql.modules.jobs.options.scheduler`). Re-scheduling a name replaces it. SQL
-   * connections only.
-   */
-  schedule<N extends Extract<keyof Q, string>>(name: string, cron: string, queue: N, payload: PayloadIn<Q, N>, options?: ScheduleOptions): AsyncResult<void>;
-  unschedule(name: string): AsyncResult<boolean>;
-  /**
-   * Makes the schedules under `prefix` (and `tenant`) exactly `definitions`:
-   * writes each one, keeping the next run of a schedule whose cron and time
-   * zone didn't change, and removes the rest. Every payload and cron is
-   * checked before anything is written. Run it on deploy or after a
-   * settings change; running it twice changes nothing. SQL connections only.
-   */
-  ensureSchedules(definitions: readonly ScheduleDefinitions<Q>[], options: EnsureSchedulesOptions): AsyncResult<EnsureSchedulesResult>;
-  /** Schedules by name prefix or tenant, with their next and last run. SQL connections only. */
-  listSchedules(filter?: ScheduleFilter): AsyncResult<ScheduleInfo[]>;
-  /** Removes every schedule of a tenant, for tenant deletion; returns how many. SQL connections only. */
-  unscheduleAll(filter: {
-    readonly tenant: string;
-  }): AsyncResult<number>;
-  /**
-   * Enqueues one run of every due schedule (the drain scheduler) and moves
-   * it to its next time. Returns how many ran. Missed runs collapse into one.
-   */
-  runSchedules(options?: RunSchedulesOptions): AsyncResult<number>;
-  /** Processes ready jobs until the queue is empty or the budget is spent. For cron and edge invocations. */
-  drain<N extends Extract<keyof Q, string>>(queue: N, handler: JobHandler<PayloadOut<Q, N>>, options?: DrainOptions): Promise<DrainResult>;
-  /**
-   * A route handler for a cron caller such as Vercel Cron: checks the bearer
-   * secret, runs due schedules, then drains each queue in `handlers` within
-   * the budget, and answers with a `DrainRouteResult`.
-   */
-  drainRoute(options: DrainRouteOptions<Q>): (request: Request) => Promise<Response>;
-  /** Polls and processes jobs until `signal` aborts. */
-  work<N extends Extract<keyof Q, string>>(queue: N, handler: JobHandler<PayloadOut<Q, N>>, options?: WorkOptions): Promise<DrainResult>;
-}
-/** The options `createJobs` takes. */
-interface JobsOptions extends BlockTemporalOptions {
-  /**
-   * The clock for `runAt` delays and schedule runs; pass the definition's
-   * `now` option to share one clock. Defaults to `Temporal.Now.instant()`.
-   */
-  readonly now?: () => Temporal.Instant;
-}
-//#endregion
-export { QueueMessageBody as A, ScheduleFilter as C, DeadJobRow as D, WorkOptions as E, sqlQueueBackend as F, QueueRpcClient as M, QueueStats as N, DueSchedule as O, pgmqPublicBackend as P, ScheduleDefinitions as S, ScheduleOptions as T, ListDeadOptions as _, DrainResult as a, RunSchedulesOptions as b, EnqueueOptions as c, FailOptions as d, Job as f, JobsOptions as g, Jobs as h, DrainOptions as i, QueueMessageRow as j, QueueBackend as k, EnsureSchedulesOptions as l, JobHandler as m, DeadJob as n, DrainRouteOptions as o, JobContext as p, DrainMonitor as r, DrainRouteResult as s, ClaimOptions as t, EnsureSchedulesResult as u, QueueSchemas as v, ScheduleInfo as w, ScheduleDefinition as x, RetryDeadOptions as y };

package/dist/usage-D0NNUFfr.d.ts

@@ -1,177 +0,0 @@
-/// <reference lib="esnext.temporal" />
-import { t as AsyncResult, w as ErrorMapper } from "./result-BchM1XZn.js";
-import { t as BlockTransport } from "./block-transport-inD4fFq-.js";
-import { i as CursorPageOptions, r as BlockTemporalOptions } from "./block-helpers-C0Xj8War.js";
-import { n as StripeSource } from "./stripe-D04h-QBT.js";
-//#region src/blocks/usage/usage.d.ts
-interface UsageOptions extends BlockTemporalOptions {
-  readonly transport: BlockTransport;
-  /** The module schema (`sql.modules.usage.schema`), default `better_supabase`. */
-  readonly schema?: string;
-  readonly mappers?: readonly ErrorMapper[];
-}
-interface RecordUsageOptions {
-  /** Default 1. */
-  readonly quantity?: number;
-  /** A retried call with the same key counts once. */
-  readonly idempotencyKey?: string;
-  /**
-   * What used it, such as `feature:summary` or `api:/v1/search`, kept in the
-   * history with `sql.modules.usage.options.history`.
-   */
-  readonly source?: string;
-  /** More detail for the history entry, such as a document id. */
-  readonly metadata?: Readonly<Record<string, unknown>>;
-  /**
-   * Who used it, for a service transport recording on a user's behalf.
-   * Ignored for other callers, whose own user id is recorded.
-   */
-  readonly actor?: string;
-}
-/** One meter of a batch. */
-interface UsageEntry {
-  readonly meter: string;
-  /** Default 1. */
-  readonly quantity?: number;
-}
-interface UsageBatchRecorded {
-  /** False when the idempotency key was seen before for every meter. */
-  readonly recorded: boolean;
-  /** Today's usage per meter (UTC). */
-  readonly today: Readonly<Record<string, number>>;
-  /** Usage per meter in its quota's current period, as `current()` reports it. */
-  readonly used: Readonly<Record<string, number>>;
-}
-/** One entry of the usage history. */
-interface UsageHistoryEntry {
-  readonly id: number;
-  readonly meter: string;
-  readonly quantity: number;
-  /** The user who used it, or `undefined` for service usage without one. */
-  readonly actor: string | undefined;
-  readonly source: string | undefined;
-  readonly metadata: Readonly<Record<string, unknown>>;
-  readonly recordedAt: Temporal.Instant;
-}
-/** Usage of a meter in its current window per actor and source. */
-interface UsageBreakdownEntry {
-  readonly actor: string | undefined;
-  readonly source: string | undefined;
-  readonly quantity: number;
-}
-interface UsageHistoryOptions extends CursorPageOptions<number> {
-  readonly meter?: string;
-  /** Defaults to 100, at most 1000. */
-  readonly limit?: number;
-  /** Only entries with a lower id, for the next page. */
-  readonly cursor?: number;
-}
-interface UsageRecorded {
-  /** False when the idempotency key was seen before. */
-  readonly recorded: boolean;
-  /** Today's usage of the meter (UTC). */
-  readonly today: number;
-  /** Usage in the quota's current period, as `current()` reports it. */
-  readonly used: number;
-}
-/**
- * A quota period: a UTC calendar period, or `billing` for the window the
- * app's `usage_billing_period(tenant)` function returns.
- */
-type UsagePeriod = "day" | "week" | "month" | "year" | "billing";
-/** One meter of `sql.modules.usage.options.meters`. */
-interface UsageMeterInfo {
-  readonly unit?: string;
-  readonly category?: string;
-  readonly label?: string;
-}
-interface UsageStatus {
-  readonly meter: string;
-  /** Usage in the current period. */
-  readonly used: number;
-  /** `undefined` without a quota and for an unlimited one. */
-  readonly limit: number | undefined;
-  readonly remaining: number | undefined;
-  readonly unlimited: boolean;
-  readonly period: UsagePeriod;
-  /** When the current period started. */
-  readonly startsAt: Temporal.Instant | undefined;
-  readonly resetsAt: Temporal.Instant;
-  /** From the meter catalog, when the module has one. */
-  readonly unit?: string;
-  readonly category?: string;
-  readonly label?: string;
-}
-interface Usage {
-  /** Adds usage without checking the quota (metering only). */
-  record(organizationId: string, meter: string, options?: RecordUsageOptions): AsyncResult<UsageRecorded>;
-  /** Adds usage when it fits the quota, or returns `quota_exceeded`. */
-  consume(organizationId: string, meter: string, options?: RecordUsageOptions): AsyncResult<UsageRecorded>;
-  /**
-   * Adds several meters in one transaction, all or none, such as input and
-   * output tokens of one call. The idempotency key covers the batch.
-   */
-  recordMany(organizationId: string, entries: readonly UsageEntry[], options?: Omit<RecordUsageOptions, "quantity">): AsyncResult<UsageBatchRecorded>;
-  /**
-   * Like `recordMany`, but checks each meter's quota first; when one doesn't
-   * fit, nothing is recorded and the result is `quota_exceeded`.
-   */
-  consumeMany(organizationId: string, entries: readonly UsageEntry[], options?: Omit<RecordUsageOptions, "quantity">): AsyncResult<UsageBatchRecorded>;
-  current(organizationId: string, meter: string): AsyncResult<UsageStatus>;
-  overview(organizationId: string): AsyncResult<readonly UsageStatus[]>;
-  /** Units left in the period, or `undefined` without a quota. */
-  remaining(organizationId: string, meter: string): AsyncResult<number | undefined>;
-  /** The meter catalog (`options.meters`), empty without one. */
-  meters(): AsyncResult<Readonly<Record<string, UsageMeterInfo>>>;
-  /**
-   * The tenant's usage entries, newest first, with who and what used each
-   * (`usage.read`). Empty without `sql.modules.usage.options.history`.
-   */
-  history(organizationId: string, options?: UsageHistoryOptions): AsyncResult<readonly UsageHistoryEntry[]>;
-  /**
-   * The meter's usage in its current quota window per actor and source,
-   * largest first (`usage.read`). Empty without the history option.
-   */
-  breakdown(organizationId: string, meter: string): AsyncResult<readonly UsageBreakdownEntry[]>;
-}
-/** Usage metering and quotas over the `usage` module's functions. */
-declare function createUsage(options: UsageOptions): Usage;
-interface ReportUsageOptions {
-  /** A service-role transport: the reporting functions are granted to `service_role` only. */
-  readonly transport: BlockTransport;
-  readonly stripe: StripeSource;
-  readonly schema?: string;
-  /** The Stripe meter's `event_name` for a meter; default the meter itself. */
-  readonly eventName?: (meter: string) => string | undefined;
-  /**
-   * The tenant's Stripe customer. Default: `tenant_stripe_customer()` from
-   * the `entitlements` module (`config.entitlements.customer`).
-   */
-  readonly customer?: (organizationId: string) => Promise<string | undefined>;
-  /** Counters per run, default 500. */
-  readonly batch?: number;
-  /**
-   * Send only the usage above the tenant's quota (the allowance its plan
-   * includes) in each quota window, instead of every unit. A meter without
-   * a quota sends everything, and one with an unlimited quota sends nothing.
-   */
-  readonly overage?: boolean;
-}
-interface ReportUsageResult {
-  /** Meter events sent; usage inside the quota with `overage` is marked without one. */
-  readonly reported: number;
-  /**
-   * Counters left for a later run: no customer, or no event name. They don't
-   * hold up the other counters of the batch.
-   */
-  readonly skipped: number;
-}
-/**
- * Sends unreported usage to Stripe as meter events, one per counter and
- * delta. The event `identifier` is the tenant, meter, day and new total, so
- * a run that fails after sending and before marking resends the same event,
- * and Stripe drops the duplicate. Run it from a job or a cron route.
- */
-declare function reportUsageToStripe(options: ReportUsageOptions): Promise<ReportUsageResult>;
-//#endregion
-export { UsageBatchRecorded as a, UsageHistoryEntry as c, UsageOptions as d, UsagePeriod as f, reportUsageToStripe as g, createUsage as h, Usage as i, UsageHistoryOptions as l, UsageStatus as m, ReportUsageOptions as n, UsageBreakdownEntry as o, UsageRecorded as p, ReportUsageResult as r, UsageEntry as s, RecordUsageOptions as t, UsageMeterInfo as u };

package/dist/vault-BpmApxxW.d.ts

@@ -1,50 +0,0 @@
-import { t as AsyncResult, w as ErrorMapper } from "./result-BchM1XZn.js";
-import { t as BlockTransport } from "./block-transport-inD4fFq-.js";
-import { c as SetCredentialOptions, i as CredentialRef, r as CredentialProvider } from "./provider-ib9wzUDz.js";
-//#region src/credentials/vault.d.ts
-/** How a request the third party sends is signed with the stored secret. */
-type VaultInboundScheme = "standard-webhooks" | "hmac-sha256" | "shared-secret";
-/**
- * A credential in Vault. `scope: 'user'` keeps one secret per user subject.
- * The token goes out as `<header>: <scheme> <token>`, `Authorization: Bearer`
- * by default; `scheme: null` sends it bare (`x-api-key`).
- */
-interface VaultCredentialRef {
-  readonly provider: "vault";
-  readonly secret: string;
-  /** Stores the secret as `tenant/<tenant>/<secret>`, apart from every other tenant's. */
-  readonly tenant?: string;
-  readonly scope?: "app" | "user";
-  readonly header?: string;
-  readonly scheme?: string | null;
-  readonly inbound?: VaultInboundScheme;
-  /** Defaults to `x-hub-signature-256` for `hmac-sha256`, `authorization` for `shared-secret`. */
-  readonly signatureHeader?: string;
-}
-interface VaultCredentialsOptions {
-  /** `sqlTransport(postgres.asService())` or `rpcTransport` with the service role key. */
-  readonly transport: BlockTransport;
-  /** The schema of the `credentials` module. Defaults to `better_supabase`. */
-  readonly schema?: string;
-  readonly mappers?: readonly ErrorMapper[];
-  /**
-   * How long a read secret stays in memory, in milliseconds. Defaults to
-   * 60000; `0` reads Vault on every call. `set` and `revoke` clear it.
-   */
-  readonly cacheMs?: number;
-}
-interface VaultCredentials extends CredentialProvider {
-  readonly name: "vault";
-  /** Stores or replaces the credential a ref names, for `subject` when the ref is per user. */
-  set(ref: CredentialRef, value: string, options?: SetCredentialOptions): AsyncResult<void>;
-  verifyInbound(request: Request, ref: CredentialRef): AsyncResult<boolean>;
-}
-/**
- * A `CredentialProvider` over the `credentials` SQL module: tokens and API
- * keys in Supabase Vault, read through security definer functions only the
- * service role may call. Static secrets only; OAuth connections come from
- * a provider such as `better-supabase/vercel-connect`.
- */
-declare function vaultCredentials(options: VaultCredentialsOptions): VaultCredentials;
-//#endregion
-export { vaultCredentials as a, VaultInboundScheme as i, VaultCredentials as n, VaultCredentialsOptions as r, VaultCredentialRef as t };