import { W as WebhookProvider } from '../router-BncoovUh.js';
export { S as SignatureVerification, a as WebhookEnvelope, b as WebhookHeaders, c as WebhookIdempotencyStore, d as WebhookRouter, e as WebhookRouterOptions, f as WebhookRouterRequest, g as WebhookRouterResponse } from '../router-BncoovUh.js';

/**
 * Pre-built `WebhookProvider` implementations for the inbound surfaces
 * the substrate ships first-party verifiers for.
 *
 * Each provider implementation is intentionally thin: it delegates
 * signature verification to the corresponding pure function in
 * `connectors/webhooks.ts` and parses the body into one or more
 * normalized `WebhookEnvelope` rows. Anything provider-specific that
 * doesn't fit cleanly (Slack URL-verification handshake, etc.) is
 * surfaced via the envelope `eventType` so the consumer's `deliver()`
 * can branch.
 */

/** Stripe webhook provider. Signature header `Stripe-Signature`. */
declare const stripeWebhookProvider: WebhookProvider;
/** Slack Events API provider. Handles the `url_verification` handshake
 *  by emitting a synthetic event the consumer's `deliver()` can echo. */
declare const slackWebhookProvider: WebhookProvider;
/** DocuSeal webhook provider. Signature header `X-Docuseal-Signature`. */
declare const docusealWebhookProvider: WebhookProvider;
/** Gmail push provider. Cloud Pub/Sub posts a JWT-signed envelope; the
 *  *payload* is base64 JSON describing the changed history range. The
 *  signature scheme here is the Pub/Sub JWT auth header — when supplied,
 *  consumers SHOULD verify the JWT against Google's well-known
 *  certificates. We accept the simpler "Bearer <pubsub-shared-secret>"
 *  variant by default (matching `verifyHmacSignature`). */
declare const gmailWebhookProvider: WebhookProvider;
/** Google Drive push provider. Drive does NOT sign the body — it uses
 *  the per-channel token (`X-Goog-Channel-Token`) as the shared secret.
 *  The router compares it constant-time against the resolved secret. */
declare const gdriveWebhookProvider: WebhookProvider;
/** Generic HMAC provider — for the long-tail webhook source where the
 *  caller has standardised on a single sha256-of-body scheme. Header
 *  `X-Signature` by default; override at provider-build time if needed. */
declare function genericHmacWebhookProvider(options: {
    id: string;
    signatureHeader?: string;
    algorithm?: 'sha256' | 'sha1' | 'sha512';
    signaturePrefix?: string;
    /** Parser to convert the raw body into envelopes. Defaults to
     *  "one event with eventType=<provider>.event and payload=JSON". */
    parse?: WebhookProvider['parse'];
}): WebhookProvider;

export { WebhookProvider, docusealWebhookProvider, gdriveWebhookProvider, genericHmacWebhookProvider, gmailWebhookProvider, slackWebhookProvider, stripeWebhookProvider };
