stripe-experiment-sync 1.0.12 → 1.0.13

package/dist/cli/index.js

@@ -5,12 +5,12 @@ import {
   migrateCommand,
   syncCommand,
   uninstallCommand
-} from "../chunk-6KTLIYUL.js";
-import "../chunk-2TIRMOJR.js";
-import "../chunk-RAM7OG7J.js";
+} from "../chunk-5SS5ZEQF.js";
+import "../chunk-2GSABFXH.js";
+import "../chunk-O2N4AEQS.js";
 import {
   package_default
-} from "../chunk-IO2EEPFD.js";
+} from "../chunk-RCU5ZXAX.js";
 
 // src/cli/index.ts
 import { Command } from "commander";
@@ -54,11 +54,10 @@ supabase.command("install").description("Install Stripe sync to Supabase Edge Fu
     workerInterval: options.workerInterval
   });
 });
-supabase.command("uninstall").description("Uninstall Stripe sync from Supabase Edge Functions").option("--token <token>", "Supabase access token (or SUPABASE_ACCESS_TOKEN env)").option("--project <ref>", "Supabase project ref (or SUPABASE_PROJECT_REF env)").option("--stripe-key <key>", "Stripe API key (or STRIPE_API_KEY env)").action(async (options) => {
+supabase.command("uninstall").description("Uninstall Stripe sync from Supabase Edge Functions").option("--token <token>", "Supabase access token (or SUPABASE_ACCESS_TOKEN env)").option("--project <ref>", "Supabase project ref (or SUPABASE_PROJECT_REF env)").action(async (options) => {
   await uninstallCommand({
     supabaseAccessToken: options.token,
-    supabaseProjectRef: options.project,
-    stripeKey: options.stripeKey
+    supabaseProjectRef: options.project
   });
 });
 program.parse();

package/dist/cli/lib.cjs

@@ -105,7 +105,7 @@ async function loadConfig(options) {
 // package.json
 var package_default = {
   name: "stripe-experiment-sync",
-  version: "1.0.12",
+  version: "1.0.13",
   private: false,
   description: "Stripe Sync Engine to sync Stripe data to Postgres",
   type: "module",
@@ -3645,7 +3645,7 @@ Creating ngrok tunnel for port ${port}...`));
 var import_supabase_management_js = require("supabase-management-js");
 
 // raw-ts:/home/runner/work/sync-engine/sync-engine/packages/sync-engine/src/supabase/edge-functions/stripe-setup.ts
-var stripe_setup_default = "import { StripeSync, runMigrations, VERSION } from 'npm:stripe-experiment-sync'\nimport postgres from 'npm:postgres'\n\nDeno.serve(async (req) => {\n  // Require authentication for both GET and POST\n  const authHeader = req.headers.get('Authorization')\n  if (!authHeader?.startsWith('Bearer ')) {\n    return new Response('Unauthorized', { status: 401 })\n  }\n\n  // Handle GET requests for status\n  if (req.method === 'GET') {\n    const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n    if (!rawDbUrl) {\n      return new Response(JSON.stringify({ error: 'SUPABASE_DB_URL not set' }), {\n        status: 500,\n        headers: { 'Content-Type': 'application/json' },\n      })\n    }\n\n    const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n    let sql\n\n    try {\n      sql = postgres(dbUrl, { max: 1, prepare: false })\n\n      // Query installation status from schema comment\n      const commentResult = await sql`\n        SELECT obj_description(oid, 'pg_namespace') as comment\n        FROM pg_namespace\n        WHERE nspname = 'stripe'\n      `\n\n      const comment = commentResult[0]?.comment || null\n      let installationStatus = 'not_installed'\n\n      if (comment && comment.includes('stripe-sync')) {\n        // Parse installation status from comment\n        if (comment.includes('installation:started')) {\n          installationStatus = 'installing'\n        } else if (comment.includes('installation:error')) {\n          installationStatus = 'error'\n        } else if (comment.includes('installed')) {\n          installationStatus = 'installed'\n        }\n      }\n\n      // Query sync runs (only if schema exists)\n      let syncStatus = []\n      if (comment) {\n        try {\n          syncStatus = await sql`\n            SELECT DISTINCT ON (account_id)\n              account_id, started_at, closed_at, status, error_message,\n              total_processed, total_objects, complete_count, error_count,\n              running_count, pending_count, triggered_by, max_concurrent\n            FROM stripe.sync_runs\n            ORDER BY account_id, started_at DESC\n          `\n        } catch (err) {\n          // Ignore errors if sync_runs view doesn't exist yet\n          console.warn('sync_runs query failed (may not exist yet):', err)\n        }\n      }\n\n      return new Response(\n        JSON.stringify({\n          package_version: VERSION,\n          installation_status: installationStatus,\n          sync_status: syncStatus,\n        }),\n        {\n          status: 200,\n          headers: {\n            'Content-Type': 'application/json',\n            'Cache-Control': 'no-cache, no-store, must-revalidate',\n          },\n        }\n      )\n    } catch (error) {\n      console.error('Status query error:', error)\n      return new Response(\n        JSON.stringify({\n          error: error.message,\n          package_version: VERSION,\n          installation_status: 'not_installed',\n        }),\n        {\n          status: 500,\n          headers: { 'Content-Type': 'application/json' },\n        }\n      )\n    } finally {\n      if (sql) await sql.end()\n    }\n  }\n\n  // Handle POST requests for setup (existing logic)\n  if (req.method !== 'POST') {\n    return new Response('Method not allowed', { status: 405 })\n  }\n\n  let stripeSync = null\n  try {\n    // Get and validate database URL\n    const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n    if (!rawDbUrl) {\n      throw new Error('SUPABASE_DB_URL environment variable is not set')\n    }\n    // Remove sslmode from connection string (not supported by pg in Deno)\n    const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n\n    await runMigrations({ databaseUrl: dbUrl })\n\n    stripeSync = new StripeSync({\n      poolConfig: { connectionString: dbUrl, max: 2 }, // Need 2 for advisory lock + queries\n      stripeSecretKey: Deno.env.get('STRIPE_SECRET_KEY'),\n    })\n\n    // Release any stale advisory locks from previous timeouts\n    await stripeSync.postgresClient.query('SELECT pg_advisory_unlock_all()')\n\n    // Construct webhook URL from SUPABASE_URL (available in all Edge Functions)\n    const supabaseUrl = Deno.env.get('SUPABASE_URL')\n    if (!supabaseUrl) {\n      throw new Error('SUPABASE_URL environment variable is not set')\n    }\n    const webhookUrl = supabaseUrl + '/functions/v1/stripe-webhook'\n\n    const webhook = await stripeSync.findOrCreateManagedWebhook(webhookUrl)\n\n    await stripeSync.postgresClient.pool.end()\n\n    return new Response(\n      JSON.stringify({\n        success: true,\n        message: 'Setup complete',\n        webhookId: webhook.id,\n      }),\n      {\n        status: 200,\n        headers: { 'Content-Type': 'application/json' },\n      }\n    )\n  } catch (error) {\n    console.error('Setup error:', error)\n    // Cleanup on error\n    if (stripeSync) {\n      try {\n        await stripeSync.postgresClient.query('SELECT pg_advisory_unlock_all()')\n        await stripeSync.postgresClient.pool.end()\n      } catch (cleanupErr) {\n        console.warn('Cleanup failed:', cleanupErr)\n      }\n    }\n    return new Response(JSON.stringify({ success: false, error: error.message }), {\n      status: 500,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  }\n})\n";
+var stripe_setup_default = "import { StripeSync, runMigrations, VERSION } from 'npm:stripe-experiment-sync'\nimport postgres from 'npm:postgres'\n\n// Helper to delete edge function via Management API\nasync function deleteEdgeFunction(\n  projectRef: string,\n  functionSlug: string,\n  accessToken: string\n): Promise<void> {\n  const url = `https://api.supabase.com/v1/projects/${projectRef}/functions/${functionSlug}`\n  const response = await fetch(url, {\n    method: 'DELETE',\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      'Content-Type': 'application/json',\n    },\n  })\n\n  if (!response.ok && response.status !== 404) {\n    const text = await response.text()\n    throw new Error(`Failed to delete function ${functionSlug}: ${response.status} ${text}`)\n  }\n}\n\n// Helper to delete secrets via Management API\nasync function deleteSecret(\n  projectRef: string,\n  secretName: string,\n  accessToken: string\n): Promise<void> {\n  const url = `https://api.supabase.com/v1/projects/${projectRef}/secrets`\n  const response = await fetch(url, {\n    method: 'DELETE',\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify([secretName]),\n  })\n\n  if (!response.ok && response.status !== 404) {\n    const text = await response.text()\n    console.warn(`Failed to delete secret ${secretName}: ${response.status} ${text}`)\n  }\n}\n\nDeno.serve(async (req) => {\n  // Handle GET requests for status\n  if (req.method === 'GET') {\n    const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n    if (!rawDbUrl) {\n      return new Response(JSON.stringify({ error: 'SUPABASE_DB_URL not set' }), {\n        status: 500,\n        headers: { 'Content-Type': 'application/json' },\n      })\n    }\n\n    const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n    let sql\n\n    try {\n      sql = postgres(dbUrl, { max: 1, prepare: false })\n\n      // Query installation status from schema comment\n      const commentResult = await sql`\n        SELECT obj_description(oid, 'pg_namespace') as comment\n        FROM pg_namespace\n        WHERE nspname = 'stripe'\n      `\n\n      const comment = commentResult[0]?.comment || null\n      let installationStatus = 'not_installed'\n\n      if (comment && comment.includes('stripe-sync')) {\n        // Parse installation status from comment\n        if (comment.includes('installation:started')) {\n          installationStatus = 'installing'\n        } else if (comment.includes('installation:error')) {\n          installationStatus = 'error'\n        } else if (comment.includes('installed')) {\n          installationStatus = 'installed'\n        }\n      }\n\n      // Query sync runs (only if schema exists)\n      let syncStatus = []\n      if (comment) {\n        try {\n          syncStatus = await sql`\n            SELECT DISTINCT ON (account_id)\n              account_id, started_at, closed_at, status, error_message,\n              total_processed, total_objects, complete_count, error_count,\n              running_count, pending_count, triggered_by, max_concurrent\n            FROM stripe.sync_runs\n            ORDER BY account_id, started_at DESC\n          `\n        } catch (err) {\n          // Ignore errors if sync_runs view doesn't exist yet\n          console.warn('sync_runs query failed (may not exist yet):', err)\n        }\n      }\n\n      return new Response(\n        JSON.stringify({\n          package_version: VERSION,\n          installation_status: installationStatus,\n          sync_status: syncStatus,\n        }),\n        {\n          status: 200,\n          headers: {\n            'Content-Type': 'application/json',\n            'Cache-Control': 'no-cache, no-store, must-revalidate',\n          },\n        }\n      )\n    } catch (error) {\n      console.error('Status query error:', error)\n      return new Response(\n        JSON.stringify({\n          error: error.message,\n          package_version: VERSION,\n          installation_status: 'not_installed',\n        }),\n        {\n          status: 500,\n          headers: { 'Content-Type': 'application/json' },\n        }\n      )\n    } finally {\n      if (sql) await sql.end()\n    }\n  }\n\n  // Handle DELETE requests for uninstall\n  if (req.method === 'DELETE') {\n    let stripeSync = null\n    try {\n      // Parse request body\n      const body = await req.json()\n      const { supabase_access_token, supabase_project_ref } = body\n\n      if (!supabase_access_token || !supabase_project_ref) {\n        throw new Error(\n          'supabase_access_token and supabase_project_ref are required in request body'\n        )\n      }\n\n      // Get and validate database URL\n      const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n      if (!rawDbUrl) {\n        throw new Error('SUPABASE_DB_URL environment variable is not set')\n      }\n      // Remove sslmode from connection string (not supported by pg in Deno)\n      const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n\n      // Stripe key is required for uninstall to delete webhooks\n      const stripeKey = Deno.env.get('STRIPE_SECRET_KEY')\n      if (!stripeKey) {\n        throw new Error('STRIPE_SECRET_KEY environment variable is required for uninstall')\n      }\n\n      // Step 1: Delete Stripe webhooks and clean up database\n      stripeSync = new StripeSync({\n        poolConfig: { connectionString: dbUrl, max: 2 },\n        stripeSecretKey: stripeKey,\n      })\n\n      // Delete all managed webhooks\n      const webhooks = await stripeSync.listManagedWebhooks()\n      for (const webhook of webhooks) {\n        try {\n          await stripeSync.deleteManagedWebhook(webhook.id)\n          console.log(`Deleted webhook: ${webhook.id}`)\n        } catch (err) {\n          console.warn(`Could not delete webhook ${webhook.id}:`, err)\n        }\n      }\n\n      // Unschedule pg_cron job\n      try {\n        await stripeSync.postgresClient.query(`\n          DO $$\n          BEGIN\n            IF EXISTS (SELECT 1 FROM cron.job WHERE jobname = 'stripe-sync-worker') THEN\n              PERFORM cron.unschedule('stripe-sync-worker');\n            END IF;\n          END $$;\n        `)\n      } catch (err) {\n        console.warn('Could not unschedule pg_cron job:', err)\n      }\n\n      // Delete vault secret\n      try {\n        await stripeSync.postgresClient.query(`\n          DELETE FROM vault.secrets\n          WHERE name = 'stripe_sync_service_role_key'\n        `)\n      } catch (err) {\n        console.warn('Could not delete vault secret:', err)\n      }\n\n      // Terminate connections holding locks on stripe schema\n      try {\n        await stripeSync.postgresClient.query(`\n          SELECT pg_terminate_backend(pid)\n          FROM pg_locks l\n          JOIN pg_class c ON l.relation = c.oid\n          JOIN pg_namespace n ON c.relnamespace = n.oid\n          WHERE n.nspname = 'stripe'\n            AND l.pid != pg_backend_pid()\n        `)\n      } catch (err) {\n        console.warn('Could not terminate connections:', err)\n      }\n\n      // Drop schema with retry\n      let dropAttempts = 0\n      const maxAttempts = 3\n      while (dropAttempts < maxAttempts) {\n        try {\n          await stripeSync.postgresClient.query('DROP SCHEMA IF EXISTS stripe CASCADE')\n          break // Success, exit loop\n        } catch (err) {\n          dropAttempts++\n          if (dropAttempts >= maxAttempts) {\n            throw new Error(\n              `Failed to drop schema after ${maxAttempts} attempts. ` +\n                `There may be active connections or locks on the stripe schema. ` +\n                `Error: ${err.message}`\n            )\n          }\n          // Wait 1 second before retrying\n          await new Promise((resolve) => setTimeout(resolve, 1000))\n        }\n      }\n\n      await stripeSync.postgresClient.pool.end()\n\n      // Step 2: Delete Supabase secrets\n      try {\n        await deleteSecret(supabase_project_ref, 'STRIPE_SECRET_KEY', supabase_access_token)\n      } catch (err) {\n        console.warn('Could not delete STRIPE_SECRET_KEY secret:', err)\n      }\n\n      // Step 3: Delete Edge Functions\n      try {\n        await deleteEdgeFunction(supabase_project_ref, 'stripe-setup', supabase_access_token)\n      } catch (err) {\n        console.warn('Could not delete stripe-setup function:', err)\n      }\n\n      try {\n        await deleteEdgeFunction(supabase_project_ref, 'stripe-webhook', supabase_access_token)\n      } catch (err) {\n        console.warn('Could not delete stripe-webhook function:', err)\n      }\n\n      try {\n        await deleteEdgeFunction(supabase_project_ref, 'stripe-worker', supabase_access_token)\n      } catch (err) {\n        console.warn('Could not delete stripe-worker function:', err)\n      }\n\n      return new Response(\n        JSON.stringify({\n          success: true,\n          message: 'Uninstall complete',\n        }),\n        {\n          status: 200,\n          headers: { 'Content-Type': 'application/json' },\n        }\n      )\n    } catch (error) {\n      console.error('Uninstall error:', error)\n      // Cleanup on error\n      if (stripeSync) {\n        try {\n          await stripeSync.postgresClient.pool.end()\n        } catch (cleanupErr) {\n          console.warn('Cleanup failed:', cleanupErr)\n        }\n      }\n      return new Response(JSON.stringify({ success: false, error: error.message }), {\n        status: 500,\n        headers: { 'Content-Type': 'application/json' },\n      })\n    }\n  }\n\n  // Handle POST requests for install\n  if (req.method !== 'POST') {\n    return new Response('Method not allowed', { status: 405 })\n  }\n\n  let stripeSync = null\n  try {\n    // Get and validate database URL\n    const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n    if (!rawDbUrl) {\n      throw new Error('SUPABASE_DB_URL environment variable is not set')\n    }\n    // Remove sslmode from connection string (not supported by pg in Deno)\n    const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n\n    await runMigrations({ databaseUrl: dbUrl })\n\n    stripeSync = new StripeSync({\n      poolConfig: { connectionString: dbUrl, max: 2 }, // Need 2 for advisory lock + queries\n      stripeSecretKey: Deno.env.get('STRIPE_SECRET_KEY'),\n    })\n\n    // Release any stale advisory locks from previous timeouts\n    await stripeSync.postgresClient.query('SELECT pg_advisory_unlock_all()')\n\n    // Construct webhook URL from SUPABASE_URL (available in all Edge Functions)\n    const supabaseUrl = Deno.env.get('SUPABASE_URL')\n    if (!supabaseUrl) {\n      throw new Error('SUPABASE_URL environment variable is not set')\n    }\n    const webhookUrl = supabaseUrl + '/functions/v1/stripe-webhook'\n\n    const webhook = await stripeSync.findOrCreateManagedWebhook(webhookUrl)\n\n    await stripeSync.postgresClient.pool.end()\n\n    return new Response(\n      JSON.stringify({\n        success: true,\n        message: 'Setup complete',\n        webhookId: webhook.id,\n      }),\n      {\n        status: 200,\n        headers: { 'Content-Type': 'application/json' },\n      }\n    )\n  } catch (error) {\n    console.error('Setup error:', error)\n    // Cleanup on error\n    if (stripeSync) {\n      try {\n        await stripeSync.postgresClient.query('SELECT pg_advisory_unlock_all()')\n        await stripeSync.postgresClient.pool.end()\n      } catch (cleanupErr) {\n        console.warn('Cleanup failed:', cleanupErr)\n      }\n    }\n    return new Response(JSON.stringify({ success: false, error: error.message }), {\n      status: 500,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  }\n})\n";
 
 // raw-ts:/home/runner/work/sync-engine/sync-engine/packages/sync-engine/src/supabase/edge-functions/stripe-webhook.ts
 var stripe_webhook_default = "import { StripeSync } from 'npm:stripe-experiment-sync'\n\nDeno.serve(async (req) => {\n  if (req.method !== 'POST') {\n    return new Response('Method not allowed', { status: 405 })\n  }\n\n  const sig = req.headers.get('stripe-signature')\n  if (!sig) {\n    return new Response('Missing stripe-signature header', { status: 400 })\n  }\n\n  const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n  if (!rawDbUrl) {\n    return new Response(JSON.stringify({ error: 'SUPABASE_DB_URL not set' }), { status: 500 })\n  }\n  const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n\n  const stripeSync = new StripeSync({\n    poolConfig: { connectionString: dbUrl, max: 1 },\n    stripeSecretKey: Deno.env.get('STRIPE_SECRET_KEY')!,\n  })\n\n  try {\n    const rawBody = new Uint8Array(await req.arrayBuffer())\n    await stripeSync.processWebhook(rawBody, sig)\n    return new Response(JSON.stringify({ received: true }), {\n      status: 200,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  } catch (error) {\n    console.error('Webhook processing error:', error)\n    const isSignatureError =\n      error.message?.includes('signature') || error.type === 'StripeSignatureVerificationError'\n    const status = isSignatureError ? 400 : 500\n    return new Response(JSON.stringify({ error: error.message }), {\n      status,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  } finally {\n    await stripeSync.postgresClient.pool.end()\n  }\n})\n";
@@ -3659,7 +3659,6 @@ var webhookFunctionCode = stripe_webhook_default;
 var workerFunctionCode = stripe_worker_default;
 
 // src/supabase/supabase.ts
-var import_stripe3 = __toESM(require("stripe"), 1);
 var STRIPE_SCHEMA_COMMENT_PREFIX = "stripe-sync";
 var INSTALLATION_STARTED_SUFFIX = "installation:started";
 var INSTALLATION_ERROR_SUFFIX = "installation:error";
@@ -3668,6 +3667,7 @@ var SupabaseSetupClient = class {
   api;
   projectRef;
   projectBaseUrl;
+  accessToken;
   constructor(options) {
     this.api = new import_supabase_management_js.SupabaseManagementAPI({
       accessToken: options.accessToken,
@@ -3675,6 +3675,7 @@ var SupabaseSetupClient = class {
     });
     this.projectRef = options.projectRef;
     this.projectBaseUrl = options.projectBaseUrl || process.env.SUPABASE_BASE_URL || "supabase.co";
+    this.accessToken = options.accessToken;
   }
   /**
    * Validate that the project exists and we have access
@@ -3694,20 +3695,20 @@ var SupabaseSetupClient = class {
   /**
    * Deploy an Edge Function
    */
-  async deployFunction(name, code) {
+  async deployFunction(name, code, verifyJwt = false) {
     const functions = await this.api.listFunctions(this.projectRef);
     const exists = functions?.some((f) => f.slug === name);
     if (exists) {
       await this.api.updateFunction(this.projectRef, name, {
         body: code,
-        verify_jwt: false
+        verify_jwt: verifyJwt
       });
     } else {
       await this.api.createFunction(this.projectRef, {
         slug: name,
         name,
         body: code,
-        verify_jwt: false
+        verify_jwt: verifyJwt
       });
     }
   }
@@ -3937,77 +3938,30 @@ var SupabaseSetupClient = class {
   }
   /**
    * Uninstall stripe-sync from a Supabase project
-   * Removes all Edge Functions, secrets, database resources, and Stripe webhooks
+   * Invokes the stripe-setup edge function's DELETE endpoint which handles cleanup
    */
-  async uninstall(stripeSecretKey) {
-    const stripe = stripeSecretKey ? new import_stripe3.default(stripeSecretKey, { apiVersion: "2025-02-24.acacia" }) : null;
+  async uninstall() {
     try {
-      try {
-        const webhookResult = await this.runSQL(`
-          SELECT id FROM stripe._managed_webhooks WHERE id IS NOT NULL
-        `);
-        const webhookIds = webhookResult[0]?.rows?.map((r) => r.id) || [];
-        for (const webhookId of webhookIds) {
-          try {
-            await stripe?.webhookEndpoints.del(webhookId);
-          } catch (err) {
-            console.warn(`Could not delete Stripe webhook ${webhookId}:`, err);
-          }
-        }
-      } catch (err) {
-        console.warn("Could not query/delete webhooks:", err);
-      }
-      await this.deleteFunction("stripe-setup");
-      await this.deleteFunction("stripe-webhook");
-      await this.deleteFunction("stripe-worker");
-      await this.deleteSecret("STRIPE_SECRET_KEY");
-      try {
-        await this.runSQL(`
-          DO $$
-          BEGIN
-            IF EXISTS (SELECT 1 FROM cron.job WHERE jobname = 'stripe-sync-worker') THEN
-              PERFORM cron.unschedule('stripe-sync-worker');
-            END IF;
-          END $$;
-        `);
-      } catch (err) {
-        console.warn("Could not unschedule pg_cron job:", err);
-      }
-      try {
-        await this.runSQL(`
-          DELETE FROM vault.secrets
-          WHERE name = 'stripe_sync_service_role_key'
-        `);
-      } catch (err) {
-        console.warn("Could not delete vault secret:", err);
-      }
-      try {
-        await this.runSQL(`
-          SELECT pg_terminate_backend(pid)
-          FROM pg_locks l
-          JOIN pg_class c ON l.relation = c.oid
-          JOIN pg_namespace n ON c.relnamespace = n.oid
-          WHERE n.nspname = 'stripe'
-            AND l.pid != pg_backend_pid()
-        `);
-      } catch (err) {
-        console.warn("Could not terminate connections:", err);
+      const serviceRoleKey = await this.getServiceRoleKey();
+      const url = `https://${this.projectRef}.${this.projectBaseUrl}/functions/v1/stripe-setup`;
+      const response = await fetch(url, {
+        method: "DELETE",
+        headers: {
+          Authorization: `Bearer ${serviceRoleKey}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          supabase_access_token: this.accessToken,
+          supabase_project_ref: this.projectRef
+        })
+      });
+      if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Uninstall failed: ${response.status} ${text}`);
       }
-      let dropAttempts = 0;
-      const maxAttempts = 3;
-      while (dropAttempts < maxAttempts) {
-        try {
-          await this.runSQL(`DROP SCHEMA IF EXISTS stripe CASCADE`);
-          break;
-        } catch (err) {
-          dropAttempts++;
-          if (dropAttempts >= maxAttempts) {
-            throw new Error(
-              `Failed to drop schema after ${maxAttempts} attempts. There may be active connections or locks on the stripe schema. Error: ${err instanceof Error ? err.message : String(err)}`
-            );
-          }
-          await new Promise((resolve) => setTimeout(resolve, 1e3));
-        }
+      const result = await response.json();
+      if (result.success === false) {
+        throw new Error(`Uninstall failed: ${result.error}`);
       }
     } catch (error) {
       throw new Error(`Uninstall failed: ${error instanceof Error ? error.message : String(error)}`);
@@ -4040,9 +3994,9 @@ var SupabaseSetupClient = class {
       const versionedSetup = this.injectPackageVersion(setupFunctionCode, version);
       const versionedWebhook = this.injectPackageVersion(webhookFunctionCode, version);
       const versionedWorker = this.injectPackageVersion(workerFunctionCode, version);
-      await this.deployFunction("stripe-setup", versionedSetup);
-      await this.deployFunction("stripe-webhook", versionedWebhook);
-      await this.deployFunction("stripe-worker", versionedWorker);
+      await this.deployFunction("stripe-setup", versionedSetup, true);
+      await this.deployFunction("stripe-webhook", versionedWebhook, false);
+      await this.deployFunction("stripe-worker", versionedWorker, true);
       await this.setSecrets([{ name: "STRIPE_SECRET_KEY", value: trimmedStripeKey }]);
       const serviceRoleKey = await this.getServiceRoleKey();
       const setupResult = await this.invokeFunction("stripe-setup", serviceRoleKey);
@@ -4078,18 +4032,14 @@ async function install(params) {
   await client.install(stripeKey, packageVersion, workerIntervalSeconds);
 }
 async function uninstall(params) {
-  const { supabaseAccessToken, supabaseProjectRef, stripeKey } = params;
-  const trimmedStripeKey = stripeKey && stripeKey.trim();
-  if (trimmedStripeKey && !trimmedStripeKey.startsWith("sk_") && !trimmedStripeKey.startsWith("rk_")) {
-    throw new Error('Stripe key should start with "sk_" or "rk_"');
-  }
+  const { supabaseAccessToken, supabaseProjectRef } = params;
   const client = new SupabaseSetupClient({
     accessToken: supabaseAccessToken,
     projectRef: supabaseProjectRef,
     projectBaseUrl: params.baseProjectUrl,
-    managementApiBaseUrl: params.baseManagementApiUrl
+    managementApiBaseUrl: params.baseManagementApiBaseUrl
   });
-  await client.uninstall(trimmedStripeKey);
+  await client.uninstall();
 }
 
 // src/cli/commands.ts
@@ -4551,8 +4501,7 @@ async function uninstallCommand(options) {
     import_dotenv2.default.config();
     let accessToken = options.supabaseAccessToken || process.env.SUPABASE_ACCESS_TOKEN || "";
     let projectRef = options.supabaseProjectRef || process.env.SUPABASE_PROJECT_REF || "";
-    let stripeKey = options.stripeKey || process.env.STRIPE_API_KEY || process.env.STRIPE_SECRET_KEY || "";
-    if (!accessToken || !projectRef || !stripeKey) {
+    if (!accessToken || !projectRef) {
       const inquirer2 = (await import("inquirer")).default;
       const questions = [];
       if (!accessToken) {
@@ -4572,25 +4521,11 @@ async function uninstallCommand(options) {
           validate: (input) => input.trim() !== "" || "Project ref is required"
         });
       }
-      if (!stripeKey) {
-        questions.push({
-          type: "password",
-          name: "stripeKey",
-          message: "Enter your Stripe secret key:",
-          mask: "*",
-          validate: (input) => {
-            if (!input.trim()) return "Stripe key is required";
-            if (!input.startsWith("sk_")) return 'Stripe key should start with "sk_"';
-            return true;
-          }
-        });
-      }
       if (questions.length > 0) {
         console.log(import_chalk3.default.yellow("\nMissing required configuration. Please provide:"));
         const answers = await inquirer2.prompt(questions);
         if (answers.accessToken) accessToken = answers.accessToken;
         if (answers.projectRef) projectRef = answers.projectRef;
-        if (answers.stripeKey) stripeKey = answers.stripeKey;
       }
     }
     console.log(import_chalk3.default.blue("\n\u{1F5D1}\uFE0F  Uninstalling Stripe Sync from Supabase...\n"));
@@ -4598,8 +4533,7 @@ async function uninstallCommand(options) {
     console.log(import_chalk3.default.gray("Removing all resources..."));
     await uninstall({
       supabaseAccessToken: accessToken,
-      supabaseProjectRef: projectRef,
-      stripeKey
+      supabaseProjectRef: projectRef
     });
     console.log(import_chalk3.default.cyan("\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"));
     console.log(import_chalk3.default.cyan.bold("  Uninstall Complete!"));

package/dist/cli/lib.js

@@ -6,10 +6,10 @@ import {
   migrateCommand,
   syncCommand,
   uninstallCommand
-} from "../chunk-6KTLIYUL.js";
-import "../chunk-2TIRMOJR.js";
-import "../chunk-RAM7OG7J.js";
-import "../chunk-IO2EEPFD.js";
+} from "../chunk-5SS5ZEQF.js";
+import "../chunk-2GSABFXH.js";
+import "../chunk-O2N4AEQS.js";
+import "../chunk-RCU5ZXAX.js";
 export {
   backfillCommand,
   createTunnel,

package/dist/index.cjs

@@ -46,7 +46,7 @@ var importMetaUrl = /* @__PURE__ */ getImportMetaUrl();
 // package.json
 var package_default = {
   name: "stripe-experiment-sync",
-  version: "1.0.12",
+  version: "1.0.13",
   private: false,
   description: "Stripe Sync Engine to sync Stripe data to Postgres",
   type: "module",

package/dist/index.js

@@ -5,8 +5,8 @@ import {
   createStripeWebSocketClient,
   hashApiKey,
   runMigrations
-} from "./chunk-2TIRMOJR.js";
-import "./chunk-IO2EEPFD.js";
+} from "./chunk-2GSABFXH.js";
+import "./chunk-RCU5ZXAX.js";
 export {
   PostgresClient,
   StripeSync,

package/dist/supabase/index.cjs

@@ -1,9 +1,7 @@
 "use strict";
-var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -17,14 +15,6 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/supabase/index.ts
@@ -48,7 +38,7 @@ module.exports = __toCommonJS(supabase_exports);
 var import_supabase_management_js = require("supabase-management-js");
 
 // raw-ts:/home/runner/work/sync-engine/sync-engine/packages/sync-engine/src/supabase/edge-functions/stripe-setup.ts
-var stripe_setup_default = "import { StripeSync, runMigrations, VERSION } from 'npm:stripe-experiment-sync'\nimport postgres from 'npm:postgres'\n\nDeno.serve(async (req) => {\n  // Require authentication for both GET and POST\n  const authHeader = req.headers.get('Authorization')\n  if (!authHeader?.startsWith('Bearer ')) {\n    return new Response('Unauthorized', { status: 401 })\n  }\n\n  // Handle GET requests for status\n  if (req.method === 'GET') {\n    const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n    if (!rawDbUrl) {\n      return new Response(JSON.stringify({ error: 'SUPABASE_DB_URL not set' }), {\n        status: 500,\n        headers: { 'Content-Type': 'application/json' },\n      })\n    }\n\n    const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n    let sql\n\n    try {\n      sql = postgres(dbUrl, { max: 1, prepare: false })\n\n      // Query installation status from schema comment\n      const commentResult = await sql`\n        SELECT obj_description(oid, 'pg_namespace') as comment\n        FROM pg_namespace\n        WHERE nspname = 'stripe'\n      `\n\n      const comment = commentResult[0]?.comment || null\n      let installationStatus = 'not_installed'\n\n      if (comment && comment.includes('stripe-sync')) {\n        // Parse installation status from comment\n        if (comment.includes('installation:started')) {\n          installationStatus = 'installing'\n        } else if (comment.includes('installation:error')) {\n          installationStatus = 'error'\n        } else if (comment.includes('installed')) {\n          installationStatus = 'installed'\n        }\n      }\n\n      // Query sync runs (only if schema exists)\n      let syncStatus = []\n      if (comment) {\n        try {\n          syncStatus = await sql`\n            SELECT DISTINCT ON (account_id)\n              account_id, started_at, closed_at, status, error_message,\n              total_processed, total_objects, complete_count, error_count,\n              running_count, pending_count, triggered_by, max_concurrent\n            FROM stripe.sync_runs\n            ORDER BY account_id, started_at DESC\n          `\n        } catch (err) {\n          // Ignore errors if sync_runs view doesn't exist yet\n          console.warn('sync_runs query failed (may not exist yet):', err)\n        }\n      }\n\n      return new Response(\n        JSON.stringify({\n          package_version: VERSION,\n          installation_status: installationStatus,\n          sync_status: syncStatus,\n        }),\n        {\n          status: 200,\n          headers: {\n            'Content-Type': 'application/json',\n            'Cache-Control': 'no-cache, no-store, must-revalidate',\n          },\n        }\n      )\n    } catch (error) {\n      console.error('Status query error:', error)\n      return new Response(\n        JSON.stringify({\n          error: error.message,\n          package_version: VERSION,\n          installation_status: 'not_installed',\n        }),\n        {\n          status: 500,\n          headers: { 'Content-Type': 'application/json' },\n        }\n      )\n    } finally {\n      if (sql) await sql.end()\n    }\n  }\n\n  // Handle POST requests for setup (existing logic)\n  if (req.method !== 'POST') {\n    return new Response('Method not allowed', { status: 405 })\n  }\n\n  let stripeSync = null\n  try {\n    // Get and validate database URL\n    const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n    if (!rawDbUrl) {\n      throw new Error('SUPABASE_DB_URL environment variable is not set')\n    }\n    // Remove sslmode from connection string (not supported by pg in Deno)\n    const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n\n    await runMigrations({ databaseUrl: dbUrl })\n\n    stripeSync = new StripeSync({\n      poolConfig: { connectionString: dbUrl, max: 2 }, // Need 2 for advisory lock + queries\n      stripeSecretKey: Deno.env.get('STRIPE_SECRET_KEY'),\n    })\n\n    // Release any stale advisory locks from previous timeouts\n    await stripeSync.postgresClient.query('SELECT pg_advisory_unlock_all()')\n\n    // Construct webhook URL from SUPABASE_URL (available in all Edge Functions)\n    const supabaseUrl = Deno.env.get('SUPABASE_URL')\n    if (!supabaseUrl) {\n      throw new Error('SUPABASE_URL environment variable is not set')\n    }\n    const webhookUrl = supabaseUrl + '/functions/v1/stripe-webhook'\n\n    const webhook = await stripeSync.findOrCreateManagedWebhook(webhookUrl)\n\n    await stripeSync.postgresClient.pool.end()\n\n    return new Response(\n      JSON.stringify({\n        success: true,\n        message: 'Setup complete',\n        webhookId: webhook.id,\n      }),\n      {\n        status: 200,\n        headers: { 'Content-Type': 'application/json' },\n      }\n    )\n  } catch (error) {\n    console.error('Setup error:', error)\n    // Cleanup on error\n    if (stripeSync) {\n      try {\n        await stripeSync.postgresClient.query('SELECT pg_advisory_unlock_all()')\n        await stripeSync.postgresClient.pool.end()\n      } catch (cleanupErr) {\n        console.warn('Cleanup failed:', cleanupErr)\n      }\n    }\n    return new Response(JSON.stringify({ success: false, error: error.message }), {\n      status: 500,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  }\n})\n";
+var stripe_setup_default = "import { StripeSync, runMigrations, VERSION } from 'npm:stripe-experiment-sync'\nimport postgres from 'npm:postgres'\n\n// Helper to delete edge function via Management API\nasync function deleteEdgeFunction(\n  projectRef: string,\n  functionSlug: string,\n  accessToken: string\n): Promise<void> {\n  const url = `https://api.supabase.com/v1/projects/${projectRef}/functions/${functionSlug}`\n  const response = await fetch(url, {\n    method: 'DELETE',\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      'Content-Type': 'application/json',\n    },\n  })\n\n  if (!response.ok && response.status !== 404) {\n    const text = await response.text()\n    throw new Error(`Failed to delete function ${functionSlug}: ${response.status} ${text}`)\n  }\n}\n\n// Helper to delete secrets via Management API\nasync function deleteSecret(\n  projectRef: string,\n  secretName: string,\n  accessToken: string\n): Promise<void> {\n  const url = `https://api.supabase.com/v1/projects/${projectRef}/secrets`\n  const response = await fetch(url, {\n    method: 'DELETE',\n    headers: {\n      Authorization: `Bearer ${accessToken}`,\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify([secretName]),\n  })\n\n  if (!response.ok && response.status !== 404) {\n    const text = await response.text()\n    console.warn(`Failed to delete secret ${secretName}: ${response.status} ${text}`)\n  }\n}\n\nDeno.serve(async (req) => {\n  // Handle GET requests for status\n  if (req.method === 'GET') {\n    const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n    if (!rawDbUrl) {\n      return new Response(JSON.stringify({ error: 'SUPABASE_DB_URL not set' }), {\n        status: 500,\n        headers: { 'Content-Type': 'application/json' },\n      })\n    }\n\n    const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n    let sql\n\n    try {\n      sql = postgres(dbUrl, { max: 1, prepare: false })\n\n      // Query installation status from schema comment\n      const commentResult = await sql`\n        SELECT obj_description(oid, 'pg_namespace') as comment\n        FROM pg_namespace\n        WHERE nspname = 'stripe'\n      `\n\n      const comment = commentResult[0]?.comment || null\n      let installationStatus = 'not_installed'\n\n      if (comment && comment.includes('stripe-sync')) {\n        // Parse installation status from comment\n        if (comment.includes('installation:started')) {\n          installationStatus = 'installing'\n        } else if (comment.includes('installation:error')) {\n          installationStatus = 'error'\n        } else if (comment.includes('installed')) {\n          installationStatus = 'installed'\n        }\n      }\n\n      // Query sync runs (only if schema exists)\n      let syncStatus = []\n      if (comment) {\n        try {\n          syncStatus = await sql`\n            SELECT DISTINCT ON (account_id)\n              account_id, started_at, closed_at, status, error_message,\n              total_processed, total_objects, complete_count, error_count,\n              running_count, pending_count, triggered_by, max_concurrent\n            FROM stripe.sync_runs\n            ORDER BY account_id, started_at DESC\n          `\n        } catch (err) {\n          // Ignore errors if sync_runs view doesn't exist yet\n          console.warn('sync_runs query failed (may not exist yet):', err)\n        }\n      }\n\n      return new Response(\n        JSON.stringify({\n          package_version: VERSION,\n          installation_status: installationStatus,\n          sync_status: syncStatus,\n        }),\n        {\n          status: 200,\n          headers: {\n            'Content-Type': 'application/json',\n            'Cache-Control': 'no-cache, no-store, must-revalidate',\n          },\n        }\n      )\n    } catch (error) {\n      console.error('Status query error:', error)\n      return new Response(\n        JSON.stringify({\n          error: error.message,\n          package_version: VERSION,\n          installation_status: 'not_installed',\n        }),\n        {\n          status: 500,\n          headers: { 'Content-Type': 'application/json' },\n        }\n      )\n    } finally {\n      if (sql) await sql.end()\n    }\n  }\n\n  // Handle DELETE requests for uninstall\n  if (req.method === 'DELETE') {\n    let stripeSync = null\n    try {\n      // Parse request body\n      const body = await req.json()\n      const { supabase_access_token, supabase_project_ref } = body\n\n      if (!supabase_access_token || !supabase_project_ref) {\n        throw new Error(\n          'supabase_access_token and supabase_project_ref are required in request body'\n        )\n      }\n\n      // Get and validate database URL\n      const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n      if (!rawDbUrl) {\n        throw new Error('SUPABASE_DB_URL environment variable is not set')\n      }\n      // Remove sslmode from connection string (not supported by pg in Deno)\n      const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n\n      // Stripe key is required for uninstall to delete webhooks\n      const stripeKey = Deno.env.get('STRIPE_SECRET_KEY')\n      if (!stripeKey) {\n        throw new Error('STRIPE_SECRET_KEY environment variable is required for uninstall')\n      }\n\n      // Step 1: Delete Stripe webhooks and clean up database\n      stripeSync = new StripeSync({\n        poolConfig: { connectionString: dbUrl, max: 2 },\n        stripeSecretKey: stripeKey,\n      })\n\n      // Delete all managed webhooks\n      const webhooks = await stripeSync.listManagedWebhooks()\n      for (const webhook of webhooks) {\n        try {\n          await stripeSync.deleteManagedWebhook(webhook.id)\n          console.log(`Deleted webhook: ${webhook.id}`)\n        } catch (err) {\n          console.warn(`Could not delete webhook ${webhook.id}:`, err)\n        }\n      }\n\n      // Unschedule pg_cron job\n      try {\n        await stripeSync.postgresClient.query(`\n          DO $$\n          BEGIN\n            IF EXISTS (SELECT 1 FROM cron.job WHERE jobname = 'stripe-sync-worker') THEN\n              PERFORM cron.unschedule('stripe-sync-worker');\n            END IF;\n          END $$;\n        `)\n      } catch (err) {\n        console.warn('Could not unschedule pg_cron job:', err)\n      }\n\n      // Delete vault secret\n      try {\n        await stripeSync.postgresClient.query(`\n          DELETE FROM vault.secrets\n          WHERE name = 'stripe_sync_service_role_key'\n        `)\n      } catch (err) {\n        console.warn('Could not delete vault secret:', err)\n      }\n\n      // Terminate connections holding locks on stripe schema\n      try {\n        await stripeSync.postgresClient.query(`\n          SELECT pg_terminate_backend(pid)\n          FROM pg_locks l\n          JOIN pg_class c ON l.relation = c.oid\n          JOIN pg_namespace n ON c.relnamespace = n.oid\n          WHERE n.nspname = 'stripe'\n            AND l.pid != pg_backend_pid()\n        `)\n      } catch (err) {\n        console.warn('Could not terminate connections:', err)\n      }\n\n      // Drop schema with retry\n      let dropAttempts = 0\n      const maxAttempts = 3\n      while (dropAttempts < maxAttempts) {\n        try {\n          await stripeSync.postgresClient.query('DROP SCHEMA IF EXISTS stripe CASCADE')\n          break // Success, exit loop\n        } catch (err) {\n          dropAttempts++\n          if (dropAttempts >= maxAttempts) {\n            throw new Error(\n              `Failed to drop schema after ${maxAttempts} attempts. ` +\n                `There may be active connections or locks on the stripe schema. ` +\n                `Error: ${err.message}`\n            )\n          }\n          // Wait 1 second before retrying\n          await new Promise((resolve) => setTimeout(resolve, 1000))\n        }\n      }\n\n      await stripeSync.postgresClient.pool.end()\n\n      // Step 2: Delete Supabase secrets\n      try {\n        await deleteSecret(supabase_project_ref, 'STRIPE_SECRET_KEY', supabase_access_token)\n      } catch (err) {\n        console.warn('Could not delete STRIPE_SECRET_KEY secret:', err)\n      }\n\n      // Step 3: Delete Edge Functions\n      try {\n        await deleteEdgeFunction(supabase_project_ref, 'stripe-setup', supabase_access_token)\n      } catch (err) {\n        console.warn('Could not delete stripe-setup function:', err)\n      }\n\n      try {\n        await deleteEdgeFunction(supabase_project_ref, 'stripe-webhook', supabase_access_token)\n      } catch (err) {\n        console.warn('Could not delete stripe-webhook function:', err)\n      }\n\n      try {\n        await deleteEdgeFunction(supabase_project_ref, 'stripe-worker', supabase_access_token)\n      } catch (err) {\n        console.warn('Could not delete stripe-worker function:', err)\n      }\n\n      return new Response(\n        JSON.stringify({\n          success: true,\n          message: 'Uninstall complete',\n        }),\n        {\n          status: 200,\n          headers: { 'Content-Type': 'application/json' },\n        }\n      )\n    } catch (error) {\n      console.error('Uninstall error:', error)\n      // Cleanup on error\n      if (stripeSync) {\n        try {\n          await stripeSync.postgresClient.pool.end()\n        } catch (cleanupErr) {\n          console.warn('Cleanup failed:', cleanupErr)\n        }\n      }\n      return new Response(JSON.stringify({ success: false, error: error.message }), {\n        status: 500,\n        headers: { 'Content-Type': 'application/json' },\n      })\n    }\n  }\n\n  // Handle POST requests for install\n  if (req.method !== 'POST') {\n    return new Response('Method not allowed', { status: 405 })\n  }\n\n  let stripeSync = null\n  try {\n    // Get and validate database URL\n    const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n    if (!rawDbUrl) {\n      throw new Error('SUPABASE_DB_URL environment variable is not set')\n    }\n    // Remove sslmode from connection string (not supported by pg in Deno)\n    const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n\n    await runMigrations({ databaseUrl: dbUrl })\n\n    stripeSync = new StripeSync({\n      poolConfig: { connectionString: dbUrl, max: 2 }, // Need 2 for advisory lock + queries\n      stripeSecretKey: Deno.env.get('STRIPE_SECRET_KEY'),\n    })\n\n    // Release any stale advisory locks from previous timeouts\n    await stripeSync.postgresClient.query('SELECT pg_advisory_unlock_all()')\n\n    // Construct webhook URL from SUPABASE_URL (available in all Edge Functions)\n    const supabaseUrl = Deno.env.get('SUPABASE_URL')\n    if (!supabaseUrl) {\n      throw new Error('SUPABASE_URL environment variable is not set')\n    }\n    const webhookUrl = supabaseUrl + '/functions/v1/stripe-webhook'\n\n    const webhook = await stripeSync.findOrCreateManagedWebhook(webhookUrl)\n\n    await stripeSync.postgresClient.pool.end()\n\n    return new Response(\n      JSON.stringify({\n        success: true,\n        message: 'Setup complete',\n        webhookId: webhook.id,\n      }),\n      {\n        status: 200,\n        headers: { 'Content-Type': 'application/json' },\n      }\n    )\n  } catch (error) {\n    console.error('Setup error:', error)\n    // Cleanup on error\n    if (stripeSync) {\n      try {\n        await stripeSync.postgresClient.query('SELECT pg_advisory_unlock_all()')\n        await stripeSync.postgresClient.pool.end()\n      } catch (cleanupErr) {\n        console.warn('Cleanup failed:', cleanupErr)\n      }\n    }\n    return new Response(JSON.stringify({ success: false, error: error.message }), {\n      status: 500,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  }\n})\n";
 
 // raw-ts:/home/runner/work/sync-engine/sync-engine/packages/sync-engine/src/supabase/edge-functions/stripe-webhook.ts
 var stripe_webhook_default = "import { StripeSync } from 'npm:stripe-experiment-sync'\n\nDeno.serve(async (req) => {\n  if (req.method !== 'POST') {\n    return new Response('Method not allowed', { status: 405 })\n  }\n\n  const sig = req.headers.get('stripe-signature')\n  if (!sig) {\n    return new Response('Missing stripe-signature header', { status: 400 })\n  }\n\n  const rawDbUrl = Deno.env.get('SUPABASE_DB_URL')\n  if (!rawDbUrl) {\n    return new Response(JSON.stringify({ error: 'SUPABASE_DB_URL not set' }), { status: 500 })\n  }\n  const dbUrl = rawDbUrl.replace(/[?&]sslmode=[^&]*/g, '').replace(/[?&]$/, '')\n\n  const stripeSync = new StripeSync({\n    poolConfig: { connectionString: dbUrl, max: 1 },\n    stripeSecretKey: Deno.env.get('STRIPE_SECRET_KEY')!,\n  })\n\n  try {\n    const rawBody = new Uint8Array(await req.arrayBuffer())\n    await stripeSync.processWebhook(rawBody, sig)\n    return new Response(JSON.stringify({ received: true }), {\n      status: 200,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  } catch (error) {\n    console.error('Webhook processing error:', error)\n    const isSignatureError =\n      error.message?.includes('signature') || error.type === 'StripeSignatureVerificationError'\n    const status = isSignatureError ? 400 : 500\n    return new Response(JSON.stringify({ error: error.message }), {\n      status,\n      headers: { 'Content-Type': 'application/json' },\n    })\n  } finally {\n    await stripeSync.postgresClient.pool.end()\n  }\n})\n";
@@ -64,7 +54,7 @@ var workerFunctionCode = stripe_worker_default;
 // package.json
 var package_default = {
   name: "stripe-experiment-sync",
-  version: "1.0.12",
+  version: "1.0.13",
   private: false,
   description: "Stripe Sync Engine to sync Stripe data to Postgres",
   type: "module",
@@ -144,7 +134,6 @@ var package_default = {
 };
 
 // src/supabase/supabase.ts
-var import_stripe = __toESM(require("stripe"), 1);
 var STRIPE_SCHEMA_COMMENT_PREFIX = "stripe-sync";
 var INSTALLATION_STARTED_SUFFIX = "installation:started";
 var INSTALLATION_ERROR_SUFFIX = "installation:error";
@@ -153,6 +142,7 @@ var SupabaseSetupClient = class {
   api;
   projectRef;
   projectBaseUrl;
+  accessToken;
   constructor(options) {
     this.api = new import_supabase_management_js.SupabaseManagementAPI({
       accessToken: options.accessToken,
@@ -160,6 +150,7 @@ var SupabaseSetupClient = class {
     });
     this.projectRef = options.projectRef;
     this.projectBaseUrl = options.projectBaseUrl || process.env.SUPABASE_BASE_URL || "supabase.co";
+    this.accessToken = options.accessToken;
   }
   /**
    * Validate that the project exists and we have access
@@ -179,20 +170,20 @@ var SupabaseSetupClient = class {
   /**
    * Deploy an Edge Function
    */
-  async deployFunction(name, code) {
+  async deployFunction(name, code, verifyJwt = false) {
     const functions = await this.api.listFunctions(this.projectRef);
     const exists = functions?.some((f) => f.slug === name);
     if (exists) {
       await this.api.updateFunction(this.projectRef, name, {
         body: code,
-        verify_jwt: false
+        verify_jwt: verifyJwt
       });
     } else {
       await this.api.createFunction(this.projectRef, {
         slug: name,
         name,
         body: code,
-        verify_jwt: false
+        verify_jwt: verifyJwt
       });
     }
   }
@@ -422,77 +413,30 @@ var SupabaseSetupClient = class {
   }
   /**
    * Uninstall stripe-sync from a Supabase project
-   * Removes all Edge Functions, secrets, database resources, and Stripe webhooks
+   * Invokes the stripe-setup edge function's DELETE endpoint which handles cleanup
    */
-  async uninstall(stripeSecretKey) {
-    const stripe = stripeSecretKey ? new import_stripe.default(stripeSecretKey, { apiVersion: "2025-02-24.acacia" }) : null;
+  async uninstall() {
     try {
-      try {
-        const webhookResult = await this.runSQL(`
-          SELECT id FROM stripe._managed_webhooks WHERE id IS NOT NULL
-        `);
-        const webhookIds = webhookResult[0]?.rows?.map((r) => r.id) || [];
-        for (const webhookId of webhookIds) {
-          try {
-            await stripe?.webhookEndpoints.del(webhookId);
-          } catch (err) {
-            console.warn(`Could not delete Stripe webhook ${webhookId}:`, err);
-          }
-        }
-      } catch (err) {
-        console.warn("Could not query/delete webhooks:", err);
-      }
-      await this.deleteFunction("stripe-setup");
-      await this.deleteFunction("stripe-webhook");
-      await this.deleteFunction("stripe-worker");
-      await this.deleteSecret("STRIPE_SECRET_KEY");
-      try {
-        await this.runSQL(`
-          DO $$
-          BEGIN
-            IF EXISTS (SELECT 1 FROM cron.job WHERE jobname = 'stripe-sync-worker') THEN
-              PERFORM cron.unschedule('stripe-sync-worker');
-            END IF;
-          END $$;
-        `);
-      } catch (err) {
-        console.warn("Could not unschedule pg_cron job:", err);
-      }
-      try {
-        await this.runSQL(`
-          DELETE FROM vault.secrets
-          WHERE name = 'stripe_sync_service_role_key'
-        `);
-      } catch (err) {
-        console.warn("Could not delete vault secret:", err);
-      }
-      try {
-        await this.runSQL(`
-          SELECT pg_terminate_backend(pid)
-          FROM pg_locks l
-          JOIN pg_class c ON l.relation = c.oid
-          JOIN pg_namespace n ON c.relnamespace = n.oid
-          WHERE n.nspname = 'stripe'
-            AND l.pid != pg_backend_pid()
-        `);
-      } catch (err) {
-        console.warn("Could not terminate connections:", err);
+      const serviceRoleKey = await this.getServiceRoleKey();
+      const url = `https://${this.projectRef}.${this.projectBaseUrl}/functions/v1/stripe-setup`;
+      const response = await fetch(url, {
+        method: "DELETE",
+        headers: {
+          Authorization: `Bearer ${serviceRoleKey}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          supabase_access_token: this.accessToken,
+          supabase_project_ref: this.projectRef
+        })
+      });
+      if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Uninstall failed: ${response.status} ${text}`);
       }
-      let dropAttempts = 0;
-      const maxAttempts = 3;
-      while (dropAttempts < maxAttempts) {
-        try {
-          await this.runSQL(`DROP SCHEMA IF EXISTS stripe CASCADE`);
-          break;
-        } catch (err) {
-          dropAttempts++;
-          if (dropAttempts >= maxAttempts) {
-            throw new Error(
-              `Failed to drop schema after ${maxAttempts} attempts. There may be active connections or locks on the stripe schema. Error: ${err instanceof Error ? err.message : String(err)}`
-            );
-          }
-          await new Promise((resolve) => setTimeout(resolve, 1e3));
-        }
+      const result = await response.json();
+      if (result.success === false) {
+        throw new Error(`Uninstall failed: ${result.error}`);
       }
     } catch (error) {
       throw new Error(`Uninstall failed: ${error instanceof Error ? error.message : String(error)}`);
@@ -525,9 +469,9 @@ var SupabaseSetupClient = class {
       const versionedSetup = this.injectPackageVersion(setupFunctionCode, version);
       const versionedWebhook = this.injectPackageVersion(webhookFunctionCode, version);
       const versionedWorker = this.injectPackageVersion(workerFunctionCode, version);
-      await this.deployFunction("stripe-setup", versionedSetup);
-      await this.deployFunction("stripe-webhook", versionedWebhook);
-      await this.deployFunction("stripe-worker", versionedWorker);
+      await this.deployFunction("stripe-setup", versionedSetup, true);
+      await this.deployFunction("stripe-webhook", versionedWebhook, false);
+      await this.deployFunction("stripe-worker", versionedWorker, true);
       await this.setSecrets([{ name: "STRIPE_SECRET_KEY", value: trimmedStripeKey }]);
       const serviceRoleKey = await this.getServiceRoleKey();
       const setupResult = await this.invokeFunction("stripe-setup", serviceRoleKey);
@@ -563,18 +507,14 @@ async function install(params) {
   await client.install(stripeKey, packageVersion, workerIntervalSeconds);
 }
 async function uninstall(params) {
-  const { supabaseAccessToken, supabaseProjectRef, stripeKey } = params;
-  const trimmedStripeKey = stripeKey && stripeKey.trim();
-  if (trimmedStripeKey && !trimmedStripeKey.startsWith("sk_") && !trimmedStripeKey.startsWith("rk_")) {
-    throw new Error('Stripe key should start with "sk_" or "rk_"');
-  }
+  const { supabaseAccessToken, supabaseProjectRef } = params;
   const client = new SupabaseSetupClient({
     accessToken: supabaseAccessToken,
     projectRef: supabaseProjectRef,
     projectBaseUrl: params.baseProjectUrl,
-    managementApiBaseUrl: params.baseManagementApiUrl
+    managementApiBaseUrl: params.baseManagementApiBaseUrl
   });
-  await client.uninstall(trimmedStripeKey);
+  await client.uninstall();
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {