export { q as ZpiWebhookVerifyError } from './errors-DdzqYqxK.js';

declare const WEBHOOK_EVENTS: readonly ["bulk.completed", "bulk.failed", "bulk.item", "key.created", "key.deleted", "key.disabled", "quota.exceeded", "quota.warning", "request.error", "webhook.test"];
type ZpiWebhookEventName = (typeof WEBHOOK_EVENTS)[number];
interface ZpiWebhookEvent<T = Record<string, unknown>> {
    id: string;
    event: ZpiWebhookEventName | (string & {});
    data: T;
    deliveredAt: string;
}
interface VerifyWebhookOpts {
    /** Raw request body EXACTLY as received — do not JSON.parse before verifying. */
    payload: string;
    /** Value of the X-Zpi-Signature header ("sha256=<hex>" or bare hex). */
    signature: string | null | undefined;
    /** The webhook's secret (shown once at creation in the dashboard). */
    secret: string;
}
/** True when the signature matches the payload. Never throws on bad input. */
declare function verifyWebhook(opts: VerifyWebhookOpts): Promise<boolean>;
/**
 * Verify AND parse in one step — the recommended entry point for handlers.
 * Throws ZpiWebhookVerifyError on a bad signature or malformed envelope.
 */
declare function parseWebhook<T = Record<string, unknown>>(payload: string, opts: {
    signature: string | null | undefined;
    secret: string;
}): Promise<ZpiWebhookEvent<T>>;

export { type VerifyWebhookOpts, WEBHOOK_EVENTS, type ZpiWebhookEvent, type ZpiWebhookEventName, parseWebhook, verifyWebhook };