/**
 * Webhook signature verification.
 *
 * Compose delivery uses a Stripe-style signature header:
 *   `X-Signature: t=<unix>,v1=<hex>`
 * where `v1` is `HMAC-SHA256(timestamp + "." + payload, secret)`.
 *
 * `verify()` is a constant-time comparison.
 */
export interface WebhookEvent<T = unknown> {
    id?: string;
    type: string;
    timestamp: number;
    data: T;
}
export interface VerifyWebhookInput {
    body: string;
    signature: string;
    secret: string;
    /** Max allowed skew between `t` and now, in seconds. Default 300 (5 min). */
    toleranceSeconds?: number;
}
export declare class WebhooksResource {
    verify(input: VerifyWebhookInput): Promise<boolean>;
    constructEvent<T = unknown>(input: VerifyWebhookInput): Promise<WebhookEvent<T>>;
}
//# sourceMappingURL=webhooks.d.ts.map