var __create = Object.create;
var __defProp = Object.defineProperty;
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
var __getOwnPropNames = Object.getOwnPropertyNames;
var __getProtoOf = Object.getPrototypeOf;
var __hasOwnProp = Object.prototype.hasOwnProperty;
var __export = (target, all) => {
  for (var name in all)
    __defProp(target, name, { get: all[name], enumerable: true });
};
var __copyProps = (to, from, except, desc) => {
  if (from && typeof from === "object" || typeof from === "function") {
    for (let key of __getOwnPropNames(from))
      if (!__hasOwnProp.call(to, key) && key !== except)
        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
  }
  return to;
};
var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
  // If the importer is in node compatibility mode or this is not an ESM
  // file that has been converted to a CommonJS file using a Babel-
  // compatible transform (i.e. "__esModule" has not been set), then set
  // "default" to the CommonJS "module.exports" for node compatibility.
  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
  mod
));
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
var supabaseAuthEncoder_exports = {};
__export(supabaseAuthEncoder_exports, {
  getSupabaseAuthHeader: () => getSupabaseAuthHeader
});
module.exports = __toCommonJS(supabaseAuthEncoder_exports);
var import_now = __toESM(require("@babel/runtime-corejs3/core-js/date/now"));
var import_jsonwebtoken = __toESM(require("jsonwebtoken"));
const getExpiryTime = () => {
  return (0, import_now.default)() + 3600 * 1e3;
};
const getSupabaseAuthHeader = (userId, email) => {
  if (!process.env.SUPABASE_JWT_SECRET) {
    throw new Error("SUPABASE_JWT_SECRET env var is not set.");
  }
  const payload = {
    aud: "authenticated",
    exp: getExpiryTime(),
    sub: userId ?? "test-user-id",
    email: email ?? "user@example.com",
    app_metadata: {
      provider: "email"
    },
    user_metadata: {},
    role: "authenticated",
    roles: []
  };
  const token = import_jsonwebtoken.default.sign(payload, process.env.SUPABASE_JWT_SECRET);
  return {
    authProvider: "supabase",
    authorization: `Bearer ${token}`
  };
};
// Annotate the CommonJS export names for ESM import in node:
0 && (module.exports = {
  getSupabaseAuthHeader
});
//# sourceMappingURL=supabaseAuthEncoder.js.map
