@keystrokehq/snowflake 0.0.1

package/dist/triggers.d.mts

@@ -0,0 +1,578 @@
+import { i as snowflake } from "./integration-CCWMSTlO.mjs";
+import { scheduledDeltaEventSchema, scheduledSqlEventSchema, snowpipeObjectBatchSchema, streamAppendOnlyEventSchema, streamHasDataEventSchema } from "./events.mjs";
+import { RowValue } from "./rows.mjs";
+import { StatusPageOptions } from "./status-page.mjs";
+import { VerifyEventGridRequestOptions, VerifyPubSubPushOptions, VerifySnsMessageOptions } from "./verification.mjs";
+import { z } from "zod";
+import * as _keystrokehq_core0 from "@keystrokehq/core";
+import { BoundTrigger, CredentialSet } from "@keystrokehq/core";
+import { IntegrationTriggerBindingOptions, createPollingTriggerBindingFactory } from "@keystrokehq/integration-authoring";
+import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
+import { AnyCredentialSet, InferCredentialSetAuth } from "@keystrokehq/core/credential-set";
+import { PollingTriggerManifest, WebhookRequest, WebhookTriggerManifest } from "@keystrokehq/core/trigger";
+
+//#region src/webhook-credentials.d.ts
+/**
+ * AWS SNS webhook credentials.
+ *
+ * SNS verifies message authenticity via an X.509 signature whose public
+ * cert is published at an SNS-hosted URL. The only real secret is the
+ * optional {@link expectedTopicArn}: tight-scoping to a single topic
+ * prevents an attacker that fooled SNS signing (not possible absent a
+ * certificate compromise) from posting events from an unrelated topic.
+ */
+declare const snowflakeS3SnsWebhookCredentialSet: CredentialSet<"snowflake-s3-sns-webhook", z.ZodObject<{
+  expectedTopicArn: z.ZodOptional<z.ZodString>;
+  allowedSigningCertHostPattern: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  autoConfirmSubscriptions: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+    true: "true";
+    false: "false";
+  }>>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  expectedTopicArn: z.ZodOptional<z.ZodString>;
+  allowedSigningCertHostPattern: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  autoConfirmSubscriptions: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+    true: "true";
+    false: "false";
+  }>>>;
+}, z.core.$strip>>[] | undefined>;
+/**
+ * GCP Pub/Sub push subscriptions sign each request with a Google-minted
+ * OIDC JWT (RS256) in the `Authorization` header. Verification requires
+ * knowing:
+ *
+ *  - `expectedAudience`: the OIDC audience configured on the push
+ *    subscription (commonly the webhook URL itself).
+ *  - `expectedServiceAccount`: the push subscription's service-account
+ *    email, which appears as the JWT `email` claim.
+ *
+ * Both are public identifiers, but pinning them prevents an attacker
+ * with any valid Google OIDC token from impersonating the subscription.
+ */
+declare const snowflakeGcsPubSubWebhookCredentialSet: CredentialSet<"snowflake-gcs-pubsub-webhook", z.ZodObject<{
+  expectedAudience: z.ZodString;
+  expectedServiceAccount: z.ZodString;
+  jwksUri: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  issuer: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  expectedAudience: z.ZodString;
+  expectedServiceAccount: z.ZodString;
+  jwksUri: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  issuer: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+}, z.core.$strip>>[] | undefined>;
+/**
+ * Azure Event Grid authenticates webhook endpoints via one-time
+ * handshake validation (validation code or URL) rather than per-request
+ * signatures. If the operator wires a **shared secret** into the
+ * Event Grid subscription as a custom header, that secret can be
+ * checked here as a defence-in-depth measure.
+ *
+ * Event Grid's synchronous handshake (`SubscriptionValidationEvent`) is
+ * not fulfillable through the Keystroke static-response webhook
+ * primitive; Snowflake operators should use **manual handshake** or
+ * Cloud-Events schema. See `IMPLEMENTATION_NOTES.md` § trigger webhooks.
+ */
+declare const snowflakeAzureEventGridWebhookCredentialSet: CredentialSet<"snowflake-azure-eventgrid-webhook", z.ZodObject<{
+  sharedSecret: z.ZodOptional<z.ZodString>;
+  sharedSecretHeader: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  expectedTopicArn: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  sharedSecret: z.ZodOptional<z.ZodString>;
+  sharedSecretHeader: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  expectedTopicArn: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>;
+//#endregion
+//#region src/triggers.d.ts
+type Schedule = Parameters<typeof createPollingTriggerBindingFactory>[0]['schedule'];
+type SnowflakeCredentialSets = readonly [typeof snowflake];
+type SnowflakePollingBoundTrigger<TResponse extends z.ZodTypeAny, TOutput = z.output<TResponse>> = BoundTrigger<z.output<TResponse>, SnowflakeCredentialSets, PollingTriggerManifest, TOutput>;
+type SnowflakeWebhookBoundTrigger<TPayloadSchema extends z.ZodTypeAny, TCredentialSets extends readonly [typeof snowflake, ...AnyCredentialSet[]], TOutput = SnowpipeObjectBatchOutput> = BoundTrigger<z.output<TPayloadSchema>, TCredentialSets, WebhookTriggerManifest, TOutput, WebhookRequest>;
+interface SnowflakePollingBindingOptions<TResponse extends z.ZodTypeAny, TOutput = z.output<TResponse>> extends IntegrationTriggerBindingOptions<z.output<TResponse>, TOutput> {
+  readonly schedule?: Schedule;
+}
+interface StreamHasNewRowsParams {
+  readonly streamName: string;
+  readonly database?: string;
+  readonly schema?: string;
+  readonly warehouse?: string;
+  readonly role?: string;
+}
+declare function streamHasNewRows<TOutput = z.output<typeof streamHasDataEventSchema>>(input: StreamHasNewRowsParams & SnowflakePollingBindingOptions<typeof streamHasDataEventSchema, TOutput>): SnowflakePollingBoundTrigger<typeof streamHasDataEventSchema, TOutput>;
+interface StreamAppendOnlyParams {
+  readonly streamName: string;
+  readonly database?: string;
+  readonly schema?: string;
+  readonly warehouse?: string;
+  readonly role?: string;
+  readonly limit?: number;
+  /** Extra WHERE fragment appended after the default `METADATA$ACTION = 'INSERT'` clause. */
+  readonly where?: string;
+}
+declare function streamAppendOnly<TOutput = z.output<typeof streamAppendOnlyEventSchema>>(input: StreamAppendOnlyParams & SnowflakePollingBindingOptions<typeof streamAppendOnlyEventSchema, TOutput>): SnowflakePollingBoundTrigger<typeof streamAppendOnlyEventSchema, TOutput>;
+interface ScheduledSqlParams {
+  readonly statement: string;
+  readonly warehouse?: string;
+  readonly role?: string;
+  readonly database?: string;
+  readonly schema?: string;
+  /**
+   * Positional bindings for `?` placeholders in {@link statement}. Values
+   * flow through `BindingBuilder` (same type inference as `insertRow`).
+   */
+  readonly bindings?: readonly RowValue[];
+  /** When true, emit even if the statement returns zero rows. Default false. */
+  readonly emitOnEmpty?: boolean;
+}
+declare function scheduledSql<TOutput = z.output<typeof scheduledSqlEventSchema>>(input: ScheduledSqlParams & SnowflakePollingBindingOptions<typeof scheduledSqlEventSchema, TOutput>): SnowflakePollingBoundTrigger<typeof scheduledSqlEventSchema, TOutput>;
+interface ScheduledDeltaParams {
+  readonly table: string;
+  readonly cursorColumn: string;
+  readonly database?: string;
+  readonly schema?: string;
+  readonly warehouse?: string;
+  readonly role?: string;
+  readonly columns?: readonly string[];
+  /** Extra WHERE fragment appended to the high-water comparison. */
+  readonly where?: string;
+  readonly limit?: number;
+  /** Initial high-water value (used only on the first poll). */
+  readonly initialHighWater?: string | number;
+}
+declare function scheduledDelta<TOutput = z.output<typeof scheduledDeltaEventSchema>>(input: ScheduledDeltaParams & SnowflakePollingBindingOptions<typeof scheduledDeltaEventSchema, TOutput>): SnowflakePollingBoundTrigger<typeof scheduledDeltaEventSchema, TOutput>;
+interface TaskRunCompletedParams {
+  readonly taskName?: string;
+  readonly database?: string;
+  readonly schema?: string;
+  readonly warehouse?: string;
+  readonly role?: string;
+  /** Initial lookback when no prior poll exists — defaults to 1 hour. */
+  readonly lookbackMinutes?: number;
+  /** Max rows per poll. Defaults to 200. */
+  readonly limit?: number;
+  /** Restrict to terminal states (default: `['SUCCEEDED', 'FAILED', 'FAILED_AND_AUTO_SUSPENDED', 'CANCELLED']`). */
+  readonly states?: readonly string[];
+}
+declare const taskRunEventsBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    databaseName: z.ZodOptional<z.ZodString>;
+    schemaName: z.ZodOptional<z.ZodString>;
+    state: z.ZodString;
+    queryId: z.ZodOptional<z.ZodString>;
+    scheduledTime: z.ZodOptional<z.ZodString>;
+    completedTime: z.ZodOptional<z.ZodString>;
+    errorCode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    attemptNumber: z.ZodOptional<z.ZodNumber>;
+    runId: z.ZodOptional<z.ZodString>;
+    row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  highWaterValue: z.ZodNullable<z.ZodString>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare function taskRunCompleted<TOutput = z.output<typeof taskRunEventsBatchSchema>>(input?: TaskRunCompletedParams & SnowflakePollingBindingOptions<typeof taskRunEventsBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof taskRunEventsBatchSchema, TOutput>;
+interface StatementCompletedParams {
+  readonly warehouse?: string;
+  readonly role?: string;
+  readonly database?: string;
+  readonly schema?: string;
+  readonly userName?: string;
+  readonly queryTextLike?: string;
+  readonly lookbackMinutes?: number;
+  readonly limit?: number;
+  readonly executionStatuses?: readonly string[];
+  /** Set to `true` to include pending / running statements (default: terminal only). */
+  readonly includeInFlight?: boolean;
+}
+declare const statementCompletedBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    queryId: z.ZodString;
+    executionStatus: z.ZodString;
+    queryText: z.ZodOptional<z.ZodString>;
+    errorCode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    startTime: z.ZodOptional<z.ZodString>;
+    endTime: z.ZodOptional<z.ZodString>;
+    warehouseName: z.ZodOptional<z.ZodString>;
+    databaseName: z.ZodOptional<z.ZodString>;
+    schemaName: z.ZodOptional<z.ZodString>;
+    userName: z.ZodOptional<z.ZodString>;
+    roleName: z.ZodOptional<z.ZodString>;
+    totalElapsedTimeMs: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  highWaterValue: z.ZodNullable<z.ZodString>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare function statementCompleted<TOutput = z.output<typeof statementCompletedBatchSchema>>(input?: StatementCompletedParams & SnowflakePollingBindingOptions<typeof statementCompletedBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof statementCompletedBatchSchema, TOutput>;
+interface PipeLoadParams {
+  readonly pipeName?: string;
+  readonly database?: string;
+  readonly schema?: string;
+  readonly tableName?: string;
+  readonly warehouse?: string;
+  readonly role?: string;
+  readonly lookbackMinutes?: number;
+  readonly limit?: number;
+}
+declare const pipeLoadBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    pipeName: z.ZodString;
+    filePath: z.ZodString;
+    status: z.ZodString;
+    loadTime: z.ZodOptional<z.ZodString>;
+    rowCount: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    rowParsed: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    errorLimit: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    errorsSeen: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    firstErrorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    firstErrorLineNumber: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    firstErrorColumnName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    fileSize: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    stageLocation: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  highWaterValue: z.ZodNullable<z.ZodString>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare function pipeLoadCompleted<TOutput = z.output<typeof pipeLoadBatchSchema>>(input?: PipeLoadParams & SnowflakePollingBindingOptions<typeof pipeLoadBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof pipeLoadBatchSchema, TOutput>;
+declare function pipeLoadFailed<TOutput = z.output<typeof pipeLoadBatchSchema>>(input?: PipeLoadParams & SnowflakePollingBindingOptions<typeof pipeLoadBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof pipeLoadBatchSchema, TOutput>;
+interface LifecycleParams {
+  readonly database?: string;
+  readonly schema?: string;
+  readonly warehouse?: string;
+  readonly role?: string;
+  readonly like?: string;
+  /** Surface every currently-present row on the first poll. Default false. */
+  readonly emitInitialSnapshot?: boolean;
+}
+interface LifecycleTableParams extends LifecycleParams {
+  readonly in?: {
+    readonly database?: string;
+    readonly schema?: string;
+  };
+}
+declare const lifecycleBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    kind: z.ZodString;
+    name: z.ZodString;
+    change: z.ZodEnum<{
+      created: "created";
+      dropped: "dropped";
+    }>;
+    identity: z.ZodString;
+    owner: z.ZodOptional<z.ZodString>;
+    createdOn: z.ZodOptional<z.ZodString>;
+    detectedAt: z.ZodString;
+    row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  snapshot: z.ZodArray<z.ZodObject<{
+    identity: z.ZodString;
+    signature: z.ZodOptional<z.ZodString>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare function userCreated<TOutput = z.output<typeof lifecycleBatchSchema>>(input?: LifecycleParams & SnowflakePollingBindingOptions<typeof lifecycleBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof lifecycleBatchSchema, TOutput>;
+declare function userDropped<TOutput = z.output<typeof lifecycleBatchSchema>>(input?: LifecycleParams & SnowflakePollingBindingOptions<typeof lifecycleBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof lifecycleBatchSchema, TOutput>;
+declare function roleCreated<TOutput = z.output<typeof lifecycleBatchSchema>>(input?: LifecycleParams & SnowflakePollingBindingOptions<typeof lifecycleBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof lifecycleBatchSchema, TOutput>;
+declare function roleDropped<TOutput = z.output<typeof lifecycleBatchSchema>>(input?: LifecycleParams & SnowflakePollingBindingOptions<typeof lifecycleBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof lifecycleBatchSchema, TOutput>;
+declare function databaseCreated<TOutput = z.output<typeof lifecycleBatchSchema>>(input?: LifecycleParams & SnowflakePollingBindingOptions<typeof lifecycleBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof lifecycleBatchSchema, TOutput>;
+declare function databaseDropped<TOutput = z.output<typeof lifecycleBatchSchema>>(input?: LifecycleParams & SnowflakePollingBindingOptions<typeof lifecycleBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof lifecycleBatchSchema, TOutput>;
+declare function tableCreated<TOutput = z.output<typeof lifecycleBatchSchema>>(input?: LifecycleTableParams & SnowflakePollingBindingOptions<typeof lifecycleBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof lifecycleBatchSchema, TOutput>;
+declare function tableDropped<TOutput = z.output<typeof lifecycleBatchSchema>>(input?: LifecycleTableParams & SnowflakePollingBindingOptions<typeof lifecycleBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof lifecycleBatchSchema, TOutput>;
+interface ShareChangedParams {
+  readonly warehouse?: string;
+  readonly role?: string;
+  readonly like?: string;
+  readonly emitInitialSnapshot?: boolean;
+}
+declare const shareChangedBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    kind: z.ZodOptional<z.ZodString>;
+    change: z.ZodEnum<{
+      created: "created";
+      dropped: "dropped";
+      modified: "modified";
+    }>;
+    identity: z.ZodString;
+    detectedAt: z.ZodString;
+    previousRow: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    currentRow: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  snapshot: z.ZodArray<z.ZodObject<{
+    identity: z.ZodString;
+    signature: z.ZodOptional<z.ZodString>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare function shareChanged<TOutput = z.output<typeof shareChangedBatchSchema>>(input?: ShareChangedParams & SnowflakePollingBindingOptions<typeof shareChangedBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof shareChangedBatchSchema, TOutput>;
+interface GrantsChangedParams {
+  readonly grantee: {
+    readonly role: string;
+  } | {
+    readonly user: string;
+  } | {
+    readonly share: string;
+  };
+  readonly warehouse?: string;
+  readonly sessionRole?: string;
+}
+declare const grantsChangedBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    privilege: z.ZodString;
+    grantedOn: z.ZodString;
+    objectName: z.ZodString;
+    granteeName: z.ZodString;
+    granteeType: z.ZodOptional<z.ZodString>;
+    change: z.ZodEnum<{
+      granted: "granted";
+      revoked: "revoked";
+    }>;
+    identity: z.ZodString;
+    detectedAt: z.ZodString;
+    row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  snapshot: z.ZodArray<z.ZodObject<{
+    identity: z.ZodString;
+    signature: z.ZodOptional<z.ZodString>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare function grantsChanged<TOutput = z.output<typeof grantsChangedBatchSchema>>(input: GrantsChangedParams & SnowflakePollingBindingOptions<typeof grantsChangedBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof grantsChangedBatchSchema, TOutput>;
+interface WarehouseMetricsParams {
+  readonly warehouseName?: string;
+  readonly warehouse?: string;
+  readonly role?: string;
+  readonly database?: string;
+  readonly schema?: string;
+  readonly lookbackMinutes?: number;
+  readonly limit?: number;
+  /** Emit only when the threshold field exceeds this value (inclusive). */
+  readonly minimum?: number;
+}
+declare const warehouseCreditsBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    warehouseName: z.ZodString;
+    startTime: z.ZodOptional<z.ZodString>;
+    endTime: z.ZodOptional<z.ZodString>;
+    creditsUsed: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    creditsUsedCompute: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    creditsUsedCloudServices: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  highWaterValue: z.ZodNullable<z.ZodString>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare const warehouseQueueBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    warehouseName: z.ZodString;
+    startTime: z.ZodOptional<z.ZodString>;
+    endTime: z.ZodOptional<z.ZodString>;
+    avgRunning: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    avgQueuedLoad: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    avgQueuedProvisioning: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    avgBlocked: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    row: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  highWaterValue: z.ZodNullable<z.ZodString>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare function warehouseCreditsUsage<TOutput = z.output<typeof warehouseCreditsBatchSchema>>(input?: WarehouseMetricsParams & SnowflakePollingBindingOptions<typeof warehouseCreditsBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof warehouseCreditsBatchSchema, TOutput>;
+declare function warehouseQueueDepth<TOutput = z.output<typeof warehouseQueueBatchSchema>>(input?: WarehouseMetricsParams & SnowflakePollingBindingOptions<typeof warehouseQueueBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof warehouseQueueBatchSchema, TOutput>;
+interface StatusPagePollingParams extends StatusPageOptions {
+  readonly emitInitialSnapshot?: boolean;
+}
+declare const statusPageIncidentBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    status: z.ZodString;
+    impact: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodOptional<z.ZodString>;
+    updatedAt: z.ZodOptional<z.ZodString>;
+    resolvedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    shortlink: z.ZodOptional<z.ZodString>;
+    detectedAt: z.ZodString;
+    raw: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  snapshot: z.ZodArray<z.ZodObject<{
+    identity: z.ZodString;
+    signature: z.ZodOptional<z.ZodString>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+declare const statusPageComponentChangeBatchSchema: z.ZodObject<{
+  events: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    previousStatus: z.ZodNullable<z.ZodString>;
+    currentStatus: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    changedAt: z.ZodString;
+    detectedAt: z.ZodString;
+    raw: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  snapshot: z.ZodArray<z.ZodObject<{
+    identity: z.ZodString;
+    signature: z.ZodOptional<z.ZodString>;
+  }, z.core.$catchall<z.ZodUnknown>>>;
+  fetchedAt: z.ZodString;
+}, z.core.$catchall<z.ZodUnknown>>;
+/**
+ * Status-page pollers don't need Snowflake credentials, but they still
+ * flow through the Snowflake binding factory so they show up in the
+ * polling manifest alongside the rest. Credentials are declared but
+ * unused — the poll callback ignores `ctx.credentials.snowflake`.
+ */
+declare function statusPageIncident<TOutput = z.output<typeof statusPageIncidentBatchSchema>>(input?: StatusPagePollingParams & SnowflakePollingBindingOptions<typeof statusPageIncidentBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof statusPageIncidentBatchSchema, TOutput>;
+declare function statusPageComponentChanged<TOutput = z.output<typeof statusPageComponentChangeBatchSchema>>(input?: StatusPagePollingParams & SnowflakePollingBindingOptions<typeof statusPageComponentChangeBatchSchema, TOutput>): SnowflakePollingBoundTrigger<typeof statusPageComponentChangeBatchSchema, TOutput>;
+/**
+ * Shape of the event emitted by an auto-ingest webhook trigger. Same
+ * envelope across the 3 clouds so downstream pipelines can branch on
+ * `provider` without re-modelling.
+ */
+type SnowpipeObjectBatchOutput = z.output<typeof snowpipeObjectBatchSchema>;
+type SnowpipeWebhookRequest = _keystrokehq_core0.WebhookRequest;
+interface WebhookBindingOptions<TOutput = SnowpipeObjectBatchOutput> extends IntegrationTriggerBindingOptions<SnowpipeObjectBatchOutput, TOutput, SnowpipeWebhookRequest> {
+  /**
+   * Override the default `/snowflake/...` path suffix. The router serves
+   * webhooks at `/api/v1/webhooks/{orgId}{path}` so authors only supply the
+   * suffix that follows the organization id.
+   */
+  readonly path?: string;
+}
+/**
+ * The public SNS payload schema accepted by this trigger. SNS delivers
+ * an application/json body; we validate it before signature-checking.
+ */
+declare const snsWebhookPayloadSchema: z.ZodObject<{
+  Type: z.ZodEnum<{
+    Notification: "Notification";
+    SubscriptionConfirmation: "SubscriptionConfirmation";
+    UnsubscribeConfirmation: "UnsubscribeConfirmation";
+  }>;
+  MessageId: z.ZodString;
+  TopicArn: z.ZodString;
+  Message: z.ZodString;
+  Timestamp: z.ZodString;
+  SignatureVersion: z.ZodString;
+  Signature: z.ZodString;
+  SigningCertURL: z.ZodString;
+  Subject: z.ZodOptional<z.ZodString>;
+  Token: z.ZodOptional<z.ZodString>;
+  SubscribeURL: z.ZodOptional<z.ZodString>;
+  UnsubscribeURL: z.ZodOptional<z.ZodString>;
+}, z.core.$catchall<z.ZodUnknown>>;
+/**
+ * `triggers.autoIngestS3Sns` — receives AWS SNS HTTPS deliveries,
+ * verifies the SNS signature against the signing certificate, and
+ * emits normalized S3 object events. Subscription-confirmation
+ * messages are surfaced via a sentinel event of type
+ * `SubscriptionConfirmation` so operators can auto-confirm in
+ * downstream logic.
+ */
+declare function autoIngestS3Sns<TOutput = SnowpipeObjectBatchOutput>(input?: WebhookBindingOptions<TOutput> & {
+  /** Test seam — injected verifier overrides. Not persisted. */readonly verifierOptions?: VerifySnsMessageOptions;
+}): SnowflakeWebhookBoundTrigger<typeof snsWebhookPayloadSchema, readonly [typeof snowflake, typeof snowflakeS3SnsWebhookCredentialSet], TOutput>;
+declare const gcsWebhookPayloadSchema: z.ZodObject<{
+  message: z.ZodObject<{
+    messageId: z.ZodOptional<z.ZodString>;
+    publishTime: z.ZodOptional<z.ZodString>;
+    data: z.ZodOptional<z.ZodString>;
+    attributes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  }, z.core.$catchall<z.ZodUnknown>>;
+  subscription: z.ZodOptional<z.ZodString>;
+}, z.core.$catchall<z.ZodUnknown>>;
+/**
+ * `triggers.autoIngestGcsPubSub` — receives GCP Pub/Sub push deliveries,
+ * verifies the Google-signed OIDC JWT against Google's JWKS, and
+ * emits normalized GCS object events extracted from the Pub/Sub
+ * message body.
+ */
+declare function autoIngestGcsPubSub<TOutput = SnowpipeObjectBatchOutput>(input?: WebhookBindingOptions<TOutput> & {
+  readonly verifierOptions?: Partial<VerifyPubSubPushOptions>;
+}): SnowflakeWebhookBoundTrigger<typeof gcsWebhookPayloadSchema, readonly [typeof snowflake, typeof snowflakeGcsPubSubWebhookCredentialSet], TOutput>;
+/**
+ * Event Grid wire format is `AzureEventGridEvent[]`. Keystroke's
+ * webhook primitive validates a single payload schema — so we accept
+ * either a single event or a wrapper object. The runtime reparses the
+ * raw body to preserve the array shape.
+ */
+declare const azureWebhookPayloadSchema: z.ZodUnion<readonly [z.ZodArray<z.ZodObject<{
+  id: z.ZodString;
+  eventType: z.ZodString;
+  subject: z.ZodString;
+  eventTime: z.ZodString;
+  dataVersion: z.ZodOptional<z.ZodString>;
+  metadataVersion: z.ZodOptional<z.ZodString>;
+  topic: z.ZodOptional<z.ZodString>;
+  data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$catchall<z.ZodUnknown>>>, z.ZodObject<{
+  id: z.ZodString;
+  eventType: z.ZodString;
+  subject: z.ZodString;
+  eventTime: z.ZodString;
+  dataVersion: z.ZodOptional<z.ZodString>;
+  metadataVersion: z.ZodOptional<z.ZodString>;
+  topic: z.ZodOptional<z.ZodString>;
+  data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$catchall<z.ZodUnknown>>]>;
+/**
+ * `triggers.autoIngestAzureEventGrid` — receives Azure Event Grid
+ * deliveries. Validates shared-secret header (if configured), parses
+ * the batch, and emits normalized Azure Blob object events. The
+ * synchronous subscription-validation handshake is NOT supported
+ * through the Keystroke static-response primitive; operators must
+ * use manual validation URLs (see IMPLEMENTATION_NOTES.md).
+ */
+declare function autoIngestAzureEventGrid<TOutput = SnowpipeObjectBatchOutput>(input?: WebhookBindingOptions<TOutput> & {
+  readonly verifierOptions?: VerifyEventGridRequestOptions;
+}): SnowflakeWebhookBoundTrigger<typeof azureWebhookPayloadSchema, readonly [typeof snowflake, typeof snowflakeAzureEventGridWebhookCredentialSet], TOutput>;
+/**
+ * Convenience namespace grouping every polling trigger in this package.
+ * Equivalent to calling the individual factory functions directly.
+ */
+declare const polling: Readonly<{
+  streamHasNewRows: typeof streamHasNewRows;
+  streamAppendOnly: typeof streamAppendOnly;
+  scheduledSql: typeof scheduledSql;
+  scheduledDelta: typeof scheduledDelta;
+  taskRunCompleted: typeof taskRunCompleted;
+  statementCompleted: typeof statementCompleted;
+  pipeLoadCompleted: typeof pipeLoadCompleted;
+  pipeLoadFailed: typeof pipeLoadFailed;
+  userCreated: typeof userCreated;
+  userDropped: typeof userDropped;
+  roleCreated: typeof roleCreated;
+  roleDropped: typeof roleDropped;
+  databaseCreated: typeof databaseCreated;
+  databaseDropped: typeof databaseDropped;
+  tableCreated: typeof tableCreated;
+  tableDropped: typeof tableDropped;
+  shareChanged: typeof shareChanged;
+  grantsChanged: typeof grantsChanged;
+  warehouseCreditsUsage: typeof warehouseCreditsUsage;
+  warehouseQueueDepth: typeof warehouseQueueDepth;
+  statusPageIncident: typeof statusPageIncident;
+  statusPageComponentChanged: typeof statusPageComponentChanged;
+}>;
+/**
+ * Convenience namespace grouping every auto-ingest webhook trigger.
+ */
+declare const webhooks: Readonly<{
+  autoIngestS3Sns: typeof autoIngestS3Sns;
+  autoIngestGcsPubSub: typeof autoIngestGcsPubSub;
+  autoIngestAzureEventGrid: typeof autoIngestAzureEventGrid;
+}>;
+/**
+ * Nested `autoIngest` namespace per the spec (§7 PLAN.md) so callers
+ * can reach the three webhook triggers via `triggers.autoIngest.<cloud>`.
+ */
+declare const autoIngest: Readonly<{
+  s3Sns: typeof autoIngestS3Sns;
+  gcsPubSub: typeof autoIngestGcsPubSub;
+  azureEventGrid: typeof autoIngestAzureEventGrid;
+}>;
+//#endregion
+export { autoIngest, autoIngestAzureEventGrid, autoIngestGcsPubSub, autoIngestS3Sns, databaseCreated, databaseDropped, grantsChanged, pipeLoadCompleted, pipeLoadFailed, polling, roleCreated, roleDropped, scheduledDelta, scheduledSql, shareChanged, statementCompleted, statusPageComponentChanged, statusPageIncident, streamAppendOnly, streamHasNewRows, tableCreated, tableDropped, taskRunCompleted, userCreated, userDropped, warehouseCreditsUsage, warehouseQueueDepth, webhooks };