@secondlayer/shared 11.7.0 → 11.8.0

package/dist/src/index.d.ts

@@ -152,7 +152,6 @@ interface SubgraphsTable {
 	handler_code: string | null;
 	source_code: string | null;
 	project_id: string | null;
-	visibility: Generated<string>;
 	/** Paid (wallet-ghost) deploys expire unless renewed or claimed; NULL = no expiry. */
 	expires_at: Date | null;
 	/** (event type, contract) probe pairs persisted at deploy for weight classification. */
@@ -283,21 +282,6 @@ interface MagicLinksTable {
 	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
-/** One-shot hashed tokens that attach a play ghost to an email at claim. */
-interface ClaimTokensTable {
-	id: Generated<string>;
-	account_id: string;
-	token_hash: string;
-	created_at: Generated<Date>;
-	expires_at: Date;
-	used_at: Date | null;
-}
-/** 3 play provisions per IP per UTC day. PK (ip_hash, day); `count` caps at 3. */
-interface PlayProvisionsTable {
-	ip_hash: string;
-	day: string;
-	count: Generated<number>;
-}
 interface SubgraphProcessingStatsTable {
 	id: Generated<string>;
 	subgraph_name: string;
@@ -759,8 +743,6 @@ interface Database {
 	accounts: AccountsTable;
 	sessions: SessionsTable;
 	magic_links: MagicLinksTable;
-	claim_tokens: ClaimTokensTable;
-	play_provisions: PlayProvisionsTable;
 	subgraph_health_snapshots: SubgraphHealthSnapshotsTable;
 	subgraph_processing_stats: SubgraphProcessingStatsTable;
 	subgraph_gaps: SubgraphGapsTable;
@@ -769,7 +751,6 @@ interface Database {
 	processed_stripe_events: ProcessedStripeEventsTable;
 	account_spend_caps: AccountSpendCapsTable;
 	account_credits: AccountCreditsTable;
-	hosted_meter_days: HostedMeterDaysTable;
 	webhooks: WebhooksTable;
 	webhook_outbox: WebhookOutboxTable;
 	webhook_deliveries: WebhookDeliveriesTable;
@@ -800,6 +781,8 @@ interface Database {
 	coverage_segments: CoverageSegmentsTable;
 	stage_failures: StageFailuresTable;
 	archive_fetches: ArchiveFetchesTable;
+	waitlists: WaitlistsTable;
+	waitlist_signups: WaitlistSignupsTable;
 }
 interface ServiceHeartbeatsTable {
 	name: string;
@@ -834,18 +817,6 @@ interface AccountCreditsTable {
 type AccountCredits = Selectable<AccountCreditsTable>;
 type InsertAccountCredits = Insertable<AccountCreditsTable>;
 type UpdateAccountCredits = Updateable<AccountCreditsTable>;
-/** Daily idempotency ledger for hosted subgraph running + storage meters. */
-interface HostedMeterDaysTable {
-	day: string;
-	account_id: string;
-	subgraph_name: string;
-	kind: string;
-	usd_micros: string | number | bigint;
-	billed_at: Generated<Date>;
-}
-type HostedMeterDay = Selectable<HostedMeterDaysTable>;
-type InsertHostedMeterDay = Insertable<HostedMeterDaysTable>;
-type UpdateHostedMeterDay = Updateable<HostedMeterDaysTable>;
 /**
 * Archive fetch charge log (design-f089 gate). Append-only: one row per
 * priced attempt to fetch a partition object. `usd_micros` is 0 for
@@ -896,11 +867,6 @@ type Account = Selectable<AccountsTable>;
 type InsertAccount = Insertable<AccountsTable>;
 type MagicLink = Selectable<MagicLinksTable>;
 type InsertMagicLink = Insertable<MagicLinksTable>;
-type ClaimToken = Selectable<ClaimTokensTable>;
-type InsertClaimToken = Insertable<ClaimTokensTable>;
-type UpdateClaimToken = Updateable<ClaimTokensTable>;
-type PlayProvision = Selectable<PlayProvisionsTable>;
-type InsertPlayProvision = Insertable<PlayProvisionsTable>;
 type Session = Selectable<SessionsTable>;
 type InsertSession = Insertable<SessionsTable>;
 type SubgraphHealthSnapshot = Selectable<SubgraphHealthSnapshotsTable>;
@@ -1004,6 +970,30 @@ interface TriggerEvaluatorStateTable {
 	updated_at: Generated<Date>;
 }
 type TriggerEvaluatorState = Selectable<TriggerEvaluatorStateTable>;
+/** A public waitlist page: what it is for and whether it takes signups. */
+interface WaitlistsTable {
+	slug: string;
+	title: string;
+	description: string;
+	url: string;
+	opened_at: Generated<Date>;
+	/** Null while the list is open. */
+	closed_at: Date | null;
+}
+/**
+* One signup per (list, contact, token). `answers` holds the list's own
+* questions, validated per list by the API before insert.
+*/
+interface WaitlistSignupsTable {
+	id: Generated<string>;
+	list: string;
+	contact: string;
+	answers: Record<string, unknown>;
+	created_at: Generated<Date>;
+}
+type Waitlist = Selectable<WaitlistsTable>;
+type WaitlistSignup = Selectable<WaitlistSignupsTable>;
+type InsertWaitlistSignup = Insertable<WaitlistSignupsTable>;
 interface EnvSchemaOutput {
 	DATABASE_URL?: string;
 	/**
@@ -1043,23 +1033,22 @@ declare function isPox5DecoderEnabled(env?: EnvMap): boolean;
 declare function isSbtcDecoderEnabled(env?: EnvMap): boolean;
 /** Default OFF. Opt in with `BNS_DECODER_ENABLED=true`. */
 declare function isBnsDecoderEnabled(env?: EnvMap): boolean;
-import { RawBuilder } from "kysely";
-/**
-* Safely encode a JS value as a JSONB literal for Kysely inserts/updates.
-* Kysely + postgres.js double-encodes JSON when using parameterized queries
-* with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.
-*
-* Generic parameter lets callers set the RawBuilder's output type so they
-* don't need to cast at the insert site. Default is `unknown` — widen at
-* the call site when the column type is narrower, e.g. `jsonb<MyShape>(...)`.
-*/
-declare function jsonb<T = unknown>(value: T): RawBuilder<T>;
-/**
-* Safely parse a JSONB value from the database.
-* Handles double-encoded strings where postgres.js returns a JSON string
-* instead of a parsed object.
-*/
-declare function parseJsonb<T = unknown>(value: unknown): T;
+import { DECODED_EVENT_TYPES, VM_NODE_TO_STORED_TYPE } from "@secondlayer/stacks/filters";
+import { DecodedEventType } from "@secondlayer/stacks/filters";
+import { DECODED_EVENT_TYPES as DECODED_EVENT_TYPES2, VM_EVENT_TYPES, VM_NODE_TO_STORED_TYPE as VM_NODE_TO_STORED_TYPE2, DecodedEventType as DecodedEventType2, VmEventType, VmNodeEventType } from "@secondlayer/stacks/filters";
+type VmStoredToNode = { [K in keyof typeof VM_NODE_TO_STORED_TYPE as (typeof VM_NODE_TO_STORED_TYPE)[K]] : K };
+/** Inverse of {@link VM_NODE_TO_STORED_TYPE}. Replay reconstruction emits the
+*  node-shaped `/new_block.vm_events` body, so ingest can re-parse it. */
+declare const VM_STORED_TO_NODE_TYPE: VmStoredToNode;
+/** Alias kept for the Streams surface (identical to {@link DECODED_EVENT_TYPES}).
+*  Explicit type annotation required — isolatedDeclarations emits `unknown` for
+*  a bare const-to-const alias. */
+declare const STREAMS_EVENT_TYPES: typeof DECODED_EVENT_TYPES;
+type StreamsEventType = DecodedEventType;
+declare const STREAMS_DB_EVENT_TYPES: readonly ["stx_transfer_event", "stx_mint_event", "stx_burn_event", "stx_lock_event", "ft_transfer_event", "ft_mint_event", "ft_burn_event", "nft_transfer_event", "nft_mint_event", "nft_burn_event", "smart_contract_event", "contract_event"];
+type StreamsDbEventType = (typeof STREAMS_DB_EVENT_TYPES)[number];
+declare const DB_TO_STREAMS_EVENT_TYPE: Record<StreamsDbEventType, StreamsEventType>;
+declare const STREAMS_TO_DB_EVENT_TYPES: Record<StreamsEventType, readonly StreamsDbEventType[]>;
 import { Kysely } from "kysely";
 import postgres from "postgres";
 import { sql } from "kysely";
@@ -1895,6 +1884,23 @@ declare const SOURCE_READ_PKS: {
 	readonly events: readonly ["tx_id", "event_index"]
 	readonly chain_reorgs: null
 };
+import { RawBuilder } from "kysely";
+/**
+* Safely encode a JS value as a JSONB literal for Kysely inserts/updates.
+* Kysely + postgres.js double-encodes JSON when using parameterized queries
+* with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.
+*
+* Generic parameter lets callers set the RawBuilder's output type so they
+* don't need to cast at the insert site. Default is `unknown` — widen at
+* the call site when the column type is narrower, e.g. `jsonb<MyShape>(...)`.
+*/
+declare function jsonb<T = unknown>(value: T): RawBuilder<T>;
+/**
+* Safely parse a JSONB value from the database.
+* Handles double-encoded strings where postgres.js returns a JSON string
+* instead of a parsed object.
+*/
+declare function parseJsonb<T = unknown>(value: unknown): T;
 /**
 * Per-migration DB-plane gating for the source/target split.
 *
@@ -1985,8 +1991,6 @@ declare const TABLE_TO_DB: {
 	api_keys: string
 	sessions: string
 	magic_links: string
-	claim_tokens: string
-	play_provisions: string
 	account_spend_caps: string
 	processed_stripe_events: string
 	webhooks: string
@@ -2000,8 +2004,9 @@ declare const TABLE_TO_DB: {
 	subgraph_violations: string
 	subgraph_processing_stats: string
 	account_credits: string
-	hosted_meter_days: string
 	archive_fetches: string
+	waitlists: string
+	waitlist_signups: string
 	service_heartbeats: string
 };
 /** OSS: one application URL. SOURCE_/TARGET_ are hosted split only. */
@@ -2152,6 +2157,56 @@ declare class TenantSuspendedError extends SecondLayerError {
 *  (avoids cross-bundle instanceof failures from bunup class duplication). */
 declare const CODE_TO_STATUS: Record<string, 400 | 401 | 402 | 403 | 404 | 409 | 415 | 422 | 423 | 429 | 503>;
 declare function getErrorMessage(err: unknown): string;
+/**
+* Block finality, anchored to the burn (Bitcoin) chain.
+*
+* Post-Nakamoto, Stacks blocks arrive every few seconds, so a fixed count of
+* Stacks blocks is a poor finality proxy (e.g. 144 fast blocks ≈ 12 minutes).
+* A Stacks block is final once its anchoring burn block has enough Bitcoin
+* confirmations — so finality is expressed in burn-block confirmations and
+* mapped to a Stacks height via the burn_block_height carried on each block.
+*/
+/** Bitcoin confirmations required before a block is treated as final. ~1 hour. */
+declare const DEFAULT_BTC_CONFIRMATIONS = 6;
+/**
+* Highest burn (Bitcoin) block height considered finalized given the current
+* burn tip. Stacks blocks whose `burn_block_height` is at or below the result
+* are final. Returns 0 when the chain is shorter than the confirmation window.
+*/
+declare function finalizedBurnHeight(burnTipHeight: number, confirmations?: number): number;
+/**
+* Canonical Streams cursor codec, shared by every product (Streams, Index,
+* Datasets, bulk). A cursor is `"<block_height>:<event_index>"` — an opaque,
+* monotonic resume token. One implementation so encode/decode and the
+* empty-range sentinel can never drift between products.
+*
+* NOTE: this codec IS the shared piece worth centralizing. A broader "shared
+* canonical reader" across the ~10 raw-event query sites (streams-events,
+* streams-bulk/query, l2/storage) was deliberately NOT built: those sites split
+* into distinct query patterns and share only the row_number ordering *pattern*,
+* not an identical reader. The reorg-archive design (migration 0084) keeps the
+* main tables canonical-only, so each reader's `WHERE canonical` filter already
+* needs no dedup logic. Forcing one mega-reader was the wrong abstraction; this
+* codec captures the only part that actually drifts.
+*/
+type StreamsCursor = {
+	block_height: number
+	event_index: number
+};
+/**
+* Event index used to advance a cursor past a fully-filtered range instead of
+* returning null. A filter that eliminates every event in a scanned range would
+* otherwise pin the consumer at the previous cursor and spin forever. Must fit
+* in Postgres int4 (the `stream_event_index` column type) — int4 max is plenty,
+* real blocks have far fewer than ~2.1B events.
+*/
+declare const EMPTY_RANGE_EVENT_INDEX_SENTINEL = 2147483647;
+declare function encodeStreamsCursor(cursor: StreamsCursor): string;
+declare function decodeStreamsCursor(cursor: string): StreamsCursor;
+declare function compareStreamsCursor(a: StreamsCursor, b: StreamsCursor): number;
+declare function isEmptyRangeCursor(cursor: StreamsCursor): boolean;
+/** Exclusive end of every event that can live in `height`. */
+declare function blockEndCursor(height: number): StreamsCursor;
 declare class Logger {
 	private _level?;
 	private _isProduction?;
@@ -2170,7 +2225,6 @@ declare const logger: Logger;
 import { z as z2 } from "zod";
 interface DeploySubgraphRequest {
 	name: string;
-	version?: string;
 	description?: string;
 	sources: Record<string, Record<string, unknown>>;
 	schema: Record<string, unknown>;
@@ -2223,7 +2277,6 @@ interface SubgraphSummary {
 	gapCount: number;
 	/** history_filling = expected gaps while a tip-first backfill op runs. */
 	integrity: "complete" | "gaps_detected" | "history_filling";
-	visibility?: "public" | "private";
 	/** Most recent indexing error reason + when it occurred, if any. */
 	lastError?: string | null;
 	lastErrorAt?: string | null;
@@ -2280,7 +2333,6 @@ interface SubgraphDetail {
 	version: string;
 	schemaHash?: string;
 	status: string;
-	visibility?: "public" | "private";
 	lastProcessedBlock: number;
 	description?: string;
 	sources?: Record<string, unknown>;
@@ -2645,15 +2697,6 @@ type SubgraphSpecFormat = "openapi" | "agent" | "markdown";
 interface SubgraphSpecOptions {
 	serverUrl?: string;
 	generatedAt?: string;
-	/**
-	* Self-hosted instances ignore the `visibility` column when deciding
-	* whether a read needs a key (`/v1/subgraphs` auth is the loopback rule,
-	* not the flag) — but this generator still branched on it, so a spec built
-	* for a self-hosted deploy pointed readers at the authenticated `/api`
-	* path for a read that was actually open. Callers on that mode should set
-	* this so the generated URLs match the auth the API actually enforces.
-	*/
-	forcePublicRead?: boolean;
 }
 interface SubgraphAgentSchema {
 	name: string;
@@ -2692,124 +2735,6 @@ declare function generateSubgraphAgentSchema(detail: SubgraphDetail, options?: S
 declare function generateSubgraphOpenApi(detail: SubgraphDetail, options?: SubgraphSpecOptions): Record<string, unknown>;
 declare function generateSubgraphMarkdown(detail: SubgraphDetail, options?: SubgraphSpecOptions): string;
 declare function generateSubgraphSpec(detail: SubgraphDetail, format: SubgraphSpecFormat, options?: SubgraphSpecOptions): Record<string, unknown> | SubgraphAgentSchema | string;
-declare namespace exports_hmac {
-	export { verifySignatureHeader, verifySignature, signPayload, generateSecret, createSignatureHeader };
-}
-/**
-* Generate a random secret for delivery signing
-* Returns 32 bytes as a 64-character hex string
-*/
-declare function generateSecret(): string;
-/**
-* Sign a payload with HMAC-SHA256
-* Returns the signature as a hex string
-*/
-declare function signPayload(payload: string, secret: string): string;
-/**
-* Verify an HMAC signature
-* Uses constant-time comparison to prevent timing attacks
-*/
-declare function verifySignature(payload: string, signature: string, secret: string): boolean;
-/**
-* Create a Stripe-style signature header
-* Format: t=timestamp,v1=signature
-*/
-declare function createSignatureHeader(payload: string, secret: string, timestamp?: number): string;
-/**
-* Parse and verify a Stripe-style signature header
-* Returns true if valid, false otherwise
-*/
-declare function verifySignatureHeader(payload: string, header: string, secret: string, toleranceSeconds?: number): boolean;
-declare namespace exports_ed25519 {
-	export { verifyEd25519, signEd25519, publicKeyPemFromPrivate, loadEd25519PublicKey, loadEd25519PrivateKey, generateEd25519KeyPair, ed25519KeyId };
-}
-import { KeyObject } from "node:crypto";
-/**
-* Asymmetric ed25519 signing for Streams response proofs.
-*
-* Asymmetric (not HMAC) so the proof is real: only the server holds the private
-* key, and any consumer verifies with the published public key — no shared
-* secret to leak. ed25519 uses node's `sign`/`verify` with a `null` algorithm.
-* Keys are PEM (PKCS8 private / SPKI public) for env transport; load once and
-* reuse the KeyObject on hot paths.
-*/
-declare function generateEd25519KeyPair(): {
-	privateKeyPem: string
-	publicKeyPem: string
-};
-declare function loadEd25519PrivateKey(pem: string): KeyObject;
-declare function loadEd25519PublicKey(pem: string): KeyObject;
-declare function publicKeyPemFromPrivate(privateKeyPem: string): string;
-/** Stable short id for a public key (rotation hint via X-Signature-KeyId). */
-declare function ed25519KeyId(publicKeyPem: string): string;
-declare function signEd25519(payload: string, privateKey: KeyObject): string;
-declare function verifyEd25519(payload: string, signatureBase64: string, publicKey: KeyObject): boolean;
-import { DECODED_EVENT_TYPES, VM_NODE_TO_STORED_TYPE } from "@secondlayer/stacks/filters";
-import { DecodedEventType } from "@secondlayer/stacks/filters";
-import { DECODED_EVENT_TYPES as DECODED_EVENT_TYPES2, VM_EVENT_TYPES, VM_NODE_TO_STORED_TYPE as VM_NODE_TO_STORED_TYPE2, DecodedEventType as DecodedEventType2, VmEventType, VmNodeEventType } from "@secondlayer/stacks/filters";
-type VmStoredToNode = { [K in keyof typeof VM_NODE_TO_STORED_TYPE as (typeof VM_NODE_TO_STORED_TYPE)[K]] : K };
-/** Inverse of {@link VM_NODE_TO_STORED_TYPE}. Replay reconstruction emits the
-*  node-shaped `/new_block.vm_events` body, so ingest can re-parse it. */
-declare const VM_STORED_TO_NODE_TYPE: VmStoredToNode;
-/** Alias kept for the Streams surface (identical to {@link DECODED_EVENT_TYPES}).
-*  Explicit type annotation required — isolatedDeclarations emits `unknown` for
-*  a bare const-to-const alias. */
-declare const STREAMS_EVENT_TYPES: typeof DECODED_EVENT_TYPES;
-type StreamsEventType = DecodedEventType;
-declare const STREAMS_DB_EVENT_TYPES: readonly ["stx_transfer_event", "stx_mint_event", "stx_burn_event", "stx_lock_event", "ft_transfer_event", "ft_mint_event", "ft_burn_event", "nft_transfer_event", "nft_mint_event", "nft_burn_event", "smart_contract_event", "contract_event"];
-type StreamsDbEventType = (typeof STREAMS_DB_EVENT_TYPES)[number];
-declare const DB_TO_STREAMS_EVENT_TYPE: Record<StreamsDbEventType, StreamsEventType>;
-declare const STREAMS_TO_DB_EVENT_TYPES: Record<StreamsEventType, readonly StreamsDbEventType[]>;
-/**
-* Block finality, anchored to the burn (Bitcoin) chain.
-*
-* Post-Nakamoto, Stacks blocks arrive every few seconds, so a fixed count of
-* Stacks blocks is a poor finality proxy (e.g. 144 fast blocks ≈ 12 minutes).
-* A Stacks block is final once its anchoring burn block has enough Bitcoin
-* confirmations — so finality is expressed in burn-block confirmations and
-* mapped to a Stacks height via the burn_block_height carried on each block.
-*/
-/** Bitcoin confirmations required before a block is treated as final. ~1 hour. */
-declare const DEFAULT_BTC_CONFIRMATIONS = 6;
-/**
-* Highest burn (Bitcoin) block height considered finalized given the current
-* burn tip. Stacks blocks whose `burn_block_height` is at or below the result
-* are final. Returns 0 when the chain is shorter than the confirmation window.
-*/
-declare function finalizedBurnHeight(burnTipHeight: number, confirmations?: number): number;
-/**
-* Canonical Streams cursor codec, shared by every product (Streams, Index,
-* Datasets, bulk). A cursor is `"<block_height>:<event_index>"` — an opaque,
-* monotonic resume token. One implementation so encode/decode and the
-* empty-range sentinel can never drift between products.
-*
-* NOTE: this codec IS the shared piece worth centralizing. A broader "shared
-* canonical reader" across the ~10 raw-event query sites (streams-events,
-* streams-bulk/query, l2/storage) was deliberately NOT built: those sites split
-* into distinct query patterns and share only the row_number ordering *pattern*,
-* not an identical reader. The reorg-archive design (migration 0084) keeps the
-* main tables canonical-only, so each reader's `WHERE canonical` filter already
-* needs no dedup logic. Forcing one mega-reader was the wrong abstraction; this
-* codec captures the only part that actually drifts.
-*/
-type StreamsCursor = {
-	block_height: number
-	event_index: number
-};
-/**
-* Event index used to advance a cursor past a fully-filtered range instead of
-* returning null. A filter that eliminates every event in a scanned range would
-* otherwise pin the consumer at the previous cursor and spin forever. Must fit
-* in Postgres int4 (the `stream_event_index` column type) — int4 max is plenty,
-* real blocks have far fewer than ~2.1B events.
-*/
-declare const EMPTY_RANGE_EVENT_INDEX_SENTINEL = 2147483647;
-declare function encodeStreamsCursor(cursor: StreamsCursor): string;
-declare function decodeStreamsCursor(cursor: string): StreamsCursor;
-declare function compareStreamsCursor(a: StreamsCursor, b: StreamsCursor): number;
-declare function isEmptyRangeCursor(cursor: StreamsCursor): boolean;
-/** Exclusive end of every event that can live in `height`. */
-declare function blockEndCursor(height: number): StreamsCursor;
 /**
 * Payload for `sbtc_deposit` (topic: completed-deposit).
 * `sender` is the Stacks address that initiated the deposit and receives the sBTC.
@@ -3069,4 +2994,56 @@ interface ChainTestDelivery {
 * "Chain webhook webhook payloads" doc.
 */
 type ChainWebhookDelivery = ChainApplyDeliveryOf<"stx_transfer", ChainEventEnvelope<"stx_transfer_event", ChainStxTransferData>> | ChainApplyDeliveryOf<"stx_mint", ChainEventEnvelope<"stx_mint_event", ChainStxMintData>> | ChainApplyDeliveryOf<"stx_burn", ChainEventEnvelope<"stx_burn_event", ChainStxBurnData>> | ChainApplyDeliveryOf<"stx_lock", ChainEventEnvelope<"stx_lock_event", ChainStxLockData>> | ChainApplyDeliveryOf<"ft_transfer", ChainEventEnvelope<"ft_transfer_event", ChainFtTransferData>> | ChainApplyDeliveryOf<"ft_mint", ChainEventEnvelope<"ft_mint_event", ChainFtMintData>> | ChainApplyDeliveryOf<"ft_burn", ChainEventEnvelope<"ft_burn_event", ChainFtBurnData>> | ChainApplyDeliveryOf<"nft_transfer", ChainEventEnvelope<"nft_transfer_event", ChainNftTransferData>> | ChainApplyDeliveryOf<"nft_mint", ChainEventEnvelope<"nft_mint_event", ChainNftMintData>> | ChainApplyDeliveryOf<"nft_burn", ChainEventEnvelope<"nft_burn_event", ChainNftBurnData>> | ChainApplyDeliveryOf<"print_event", ChainEventEnvelope<"contract_event", ChainPrintEventData>> | ChainApplyDeliveryOf<"contract_call", ChainTxLevelEvent> | ChainApplyDeliveryOf<"contract_deploy", ChainTxLevelEvent> | ChainApplyDeliveryOf<"sbtc_deposit", SbtcDepositEvent> | ChainApplyDeliveryOf<"sbtc_withdrawal_create", SbtcWithdrawalEvent> | ChainApplyDeliveryOf<"sbtc_withdrawal_accept", SbtcWithdrawalEvent> | ChainApplyDeliveryOf<"sbtc_withdrawal_reject", SbtcWithdrawalEvent> | ChainApplyDeliveryOf<"sbtc_withdrawal_swept_confirmed", SbtcWithdrawalSweptConfirmedEvent> | ChainReorgRollbackDelivery | ChainTestDelivery;
-export { validateWebhookFilterForTable, sql, setMigrationRole, parseJsonb, onControlPlane, onChainPlane, logger, jsonb, isSbtcDecoderEnabled, isPox5DecoderEnabled, isPox4DecoderEnabled, isEmptyRangeCursor, isBnsDecoderEnabled, getTargetDb, getSourceDb, getRawClientFor, getRawClient, getMigrationRole, getErrorMessage, getEnv, getDbSplitStatus, getDb, generateSubgraphSpec, generateSubgraphOpenApi, generateSubgraphMarkdown, generateSubgraphAgentSchema, formatWebhookSchemaErrors, finalizedBurnHeight, encodeStreamsCursor, exports_ed25519 as ed25519, decodeStreamsCursor, exports_hmac as crypto, compareStreamsCursor, closeDb, blockEndCursor, assertDbSplit, applicationDatabaseUrl, WebhooksTable, WebhookSummary, WebhookStatusSchema, WebhookStatus, WebhookSchemaTables, WebhookSchemaTable, WebhookSchemaColumn, WebhookRuntimeSchema, WebhookRuntime, WebhookOutboxTable, WebhookOutbox, WebhookKind, WebhookFormatSchema, WebhookFormat, WebhookFilterSchema, WebhookFilterPrimitiveSchema, WebhookFilterPrimitive, WebhookFilterOperatorSchema, WebhookFilterOperator, WebhookFilterClauseSchema, WebhookFilterClause, WebhookFilter, WebhookDetail, WebhookDelivery, WebhookDeliveriesTable, Webhook, WEBHOOK_STATUSES, WEBHOOK_RUNTIMES, WEBHOOK_FORMATS, WEBHOOK_FILTER_OPERATORS, VmNodeEventType, VmEventsTable, VmEventsArchiveTable, VmEventType, VmEvent, VersionConflictError, ValidationError, VM_STORED_TO_NODE_TYPE, VM_NODE_TO_STORED_TYPE2 as VM_NODE_TO_STORED_TYPE, VM_EVENT_TYPES, UpdateWebhookRequestSchema, UpdateWebhookRequest, UpdateWebhookOutbox, UpdateWebhook, UpdateVmEvent, UpdateTransaction, UpdateSubgraphOperation, UpdateSubgraph, UpdateIndexProgress, UpdateHostedMeterDay, UpdateEvent, UpdateContract, UpdateClaimToken, UpdateBlock, UpdateArchiveFetch, UpdateApiKey, UpdateAccountSpendCap, UpdateAccountCredits, TriggerEvaluatorStateTable, TriggerEvaluatorState, TransactionsTable, TransactionsArchiveTable, Transaction, TenantSuspendedError, TABLE_TO_DB, SyncScopesTable, SubgraphsTable, SubgraphViolationsTable, SubgraphSyncInfo, SubgraphSummary, SubgraphSpecOptions, SubgraphSpecFormat, SubgraphQueryParams, SubgraphProcessingStatsTable, SubgraphOperationsTable, SubgraphOperationStatus, SubgraphOperationKind, SubgraphOperation, SubgraphHealthSnapshotsTable, SubgraphHealthSnapshot, SubgraphGapsTable, SubgraphGapsResponse, SubgraphGapRange, SubgraphGapEntry, SubgraphGap, SubgraphDetail, SubgraphAggregateResponse, SubgraphAggregateParams, SubgraphAgentSchema, Subgraph, StreamsEventType, StreamsDbEventType, StreamsCursor, StageRunsTable, StageRegistryTable, StageKind, StageFailuresTable, StageBlockReceiptsTable, SessionsTable, Session, ServiceHeartbeatsTable, SecondLayerError, SbtcWithdrawalSweptConfirmedEvent, SbtcWithdrawalEvent, SbtcTokenEventsTable, SbtcTokenEventType, SbtcSettlementsTable, SbtcEventsTable, SbtcEventTopic, SbtcDepositEvent, STREAMS_TO_DB_EVENT_TYPES, STREAMS_EVENT_TYPES, STREAMS_DB_EVENT_TYPES, SOURCE_READ_TYPES, SOURCE_READ_PKS, SOURCE_READ_COLUMNS, RunStatus, RotateSecretResponse, RetryState, ReplayWebhookRequestSchema, ReplayWebhookRequest, ReplayResult, RepairMode, ReindexResponse, RateLimitError, ProcessedStripeEventsTable, Pox5EventsTable, Pox5EventTopic, Pox4FunctionName, Pox4CallsTable, PlayProvisionsTable, PlayProvision, PendingForkBlocksTable, PaymentRequiredError, ParsedUpdateWebhookRequest, ParsedReplayWebhookRequest, ParsedCreateWebhookRequest, OutboxStatus, ObserverJournalTable, ObserverJournalStatus, NumericAsText, NotFoundError, NativeClock, MigrationRole, MempoolTransactionsTable, MempoolTransaction, MagicLinksTable, MagicLink, KeyRotatedError, InstancesTable, InsertWebhookOutbox, InsertWebhookDelivery, InsertWebhook, InsertVmEvent, InsertTransaction, InsertSubgraphOperation, InsertSubgraphHealthSnapshot, InsertSubgraphGap, InsertSubgraph, InsertSession, InsertPlayProvision, InsertMempoolTransaction, InsertMagicLink, InsertIndexProgress, InsertHostedMeterDay, InsertEvent, InsertContract, InsertClaimToken, InsertBlock, InsertArchiveFetch, InsertApiKey, InsertAccountSpendCap, InsertAccountCredits, InsertAccount, IndexProgressTable, IndexProgress, IndexPrimaryKey, IndexColumnType, IndexColumn, HostedMeterDaysTable, HostedMeterDay, ForbiddenError, FailureUnit, FailureClass, EventsTable, EventsArchiveTable, Event, ErrorCodes, ErrorCode, Env, EMPTY_RANGE_EVENT_INDEX_SENTINEL, DeploySubgraphResponse, DeploySubgraphRequestSchema, DeploySubgraphRequest, DeliveryRow, DecoderCheckpointsTable, DecodedEventsTable, DecodedEventType2 as DecodedEventType, DeadRow, DeadLetterEventsTable, DbSplitStatus, DbReadRow, DbPlane, DatabaseError, Database, DEFAULT_BTC_CONFIRMATIONS, DECODED_EVENT_TYPES2 as DECODED_EVENT_TYPES, DB_TO_STREAMS_EVENT_TYPE, CreateWebhookResponse, CreateWebhookRequestSchema, CreateWebhookRequest, CoverageSegmentsTable, ContractsTable, Contract, ClaimTokensTable, ClaimToken, ChainWebhookEnvelope, ChainWebhookDelivery, ChainTxLevelEvent, ChainTestDelivery, ChainStxTransferData, ChainStxMintData, ChainStxLockData, ChainStxBurnData, ChainReorgsTable, ChainReorgRollbackEnvelope, ChainReorgRollbackDelivery, ChainReorgOrphanedEntry, ChainReadCacheTable, ChainPrintEventData, ChainNftTransferData, ChainNftMintData, ChainNftBurnData, ChainFtTransferData, ChainFtMintData, ChainFtBurnData, ChainEventEnvelope, ChainApplyEnvelopeOf, ChainApplyEnvelope, ChainApplyDeliveryOf, CODE_TO_STATUS, CHAIN_TRIGGER_TYPES, CHAIN_TRIGGER_FIELDS, BurnBlockRewardsTable, BurnBlockRewardSlotsTable, BnsNamespacesTable, BnsNamespaceEventsTable, BnsNamespaceEventStatus, BnsNamesTable, BnsNameEventsTable, BnsNameEventTopic, BnsMarketplaceEventsTable, BnsMarketplaceAction, BlocksTable, Block, AuthorizationError, AuthenticationError, ArchiveFetchesTable, ArchiveFetch, ApiKeysTable, ApiKey, AccountsTable, AccountSpendCapsTable, AccountSpendCap, AccountCreditsTable, AccountCredits, Account };
+declare namespace exports_hmac {
+	export { createSignatureHeader, generateSecret, signPayload, verifySignature, verifySignatureHeader };
+}
+/**
+* Generate a random secret for delivery signing
+* Returns 32 bytes as a 64-character hex string
+*/
+declare function generateSecret(): string;
+/**
+* Sign a payload with HMAC-SHA256
+* Returns the signature as a hex string
+*/
+declare function signPayload(payload: string, secret: string): string;
+/**
+* Verify an HMAC signature
+* Uses constant-time comparison to prevent timing attacks
+*/
+declare function verifySignature(payload: string, signature: string, secret: string): boolean;
+/**
+* Create a Stripe-style signature header
+* Format: t=timestamp,v1=signature
+*/
+declare function createSignatureHeader(payload: string, secret: string, timestamp?: number): string;
+/**
+* Parse and verify a Stripe-style signature header
+* Returns true if valid, false otherwise
+*/
+declare function verifySignatureHeader(payload: string, header: string, secret: string, toleranceSeconds?: number): boolean;
+declare namespace exports_ed25519 {
+	export { ed25519KeyId, generateEd25519KeyPair, loadEd25519PrivateKey, loadEd25519PublicKey, publicKeyPemFromPrivate, signEd25519, verifyEd25519 };
+}
+import { KeyObject } from "node:crypto";
+/**
+* Asymmetric ed25519 signing for Streams response proofs.
+*
+* Asymmetric (not HMAC) so the proof is real: only the server holds the private
+* key, and any consumer verifies with the published public key — no shared
+* secret to leak. ed25519 uses node's `sign`/`verify` with a `null` algorithm.
+* Keys are PEM (PKCS8 private / SPKI public) for env transport; load once and
+* reuse the KeyObject on hot paths.
+*/
+declare function generateEd25519KeyPair(): {
+	privateKeyPem: string
+	publicKeyPem: string
+};
+declare function loadEd25519PrivateKey(pem: string): KeyObject;
+declare function loadEd25519PublicKey(pem: string): KeyObject;
+declare function publicKeyPemFromPrivate(privateKeyPem: string): string;
+/** Stable short id for a public key (rotation hint via X-Signature-KeyId). */
+declare function ed25519KeyId(publicKeyPem: string): string;
+declare function signEd25519(payload: string, privateKey: KeyObject): string;
+declare function verifyEd25519(payload: string, signatureBase64: string, publicKey: KeyObject): boolean;
+export { Account, AccountCredits, AccountCreditsTable, AccountSpendCap, AccountSpendCapsTable, AccountsTable, ApiKey, ApiKeysTable, ArchiveFetch, ArchiveFetchesTable, AuthenticationError, AuthorizationError, Block, BlocksTable, BnsMarketplaceAction, BnsMarketplaceEventsTable, BnsNameEventTopic, BnsNameEventsTable, BnsNamesTable, BnsNamespaceEventStatus, BnsNamespaceEventsTable, BnsNamespacesTable, BurnBlockRewardSlotsTable, BurnBlockRewardsTable, CHAIN_TRIGGER_FIELDS, CHAIN_TRIGGER_TYPES, CODE_TO_STATUS, ChainApplyDeliveryOf, ChainApplyEnvelope, ChainApplyEnvelopeOf, ChainEventEnvelope, ChainFtBurnData, ChainFtMintData, ChainFtTransferData, ChainNftBurnData, ChainNftMintData, ChainNftTransferData, ChainPrintEventData, ChainReadCacheTable, ChainReorgOrphanedEntry, ChainReorgRollbackDelivery, ChainReorgRollbackEnvelope, ChainReorgsTable, ChainStxBurnData, ChainStxLockData, ChainStxMintData, ChainStxTransferData, ChainTestDelivery, ChainTxLevelEvent, ChainWebhookDelivery, ChainWebhookEnvelope, Contract, ContractsTable, CoverageSegmentsTable, CreateWebhookRequest, CreateWebhookRequestSchema, CreateWebhookResponse, DB_TO_STREAMS_EVENT_TYPE, DECODED_EVENT_TYPES2 as DECODED_EVENT_TYPES, DEFAULT_BTC_CONFIRMATIONS, Database, DatabaseError, DbPlane, DbReadRow, DbSplitStatus, DeadLetterEventsTable, DeadRow, DecodedEventType2 as DecodedEventType, DecodedEventsTable, DecoderCheckpointsTable, DeliveryRow, DeploySubgraphRequest, DeploySubgraphRequestSchema, DeploySubgraphResponse, EMPTY_RANGE_EVENT_INDEX_SENTINEL, Env, ErrorCode, ErrorCodes, Event, EventsArchiveTable, EventsTable, FailureClass, FailureUnit, ForbiddenError, IndexColumn, IndexColumnType, IndexPrimaryKey, IndexProgress, IndexProgressTable, InsertAccount, InsertAccountCredits, InsertAccountSpendCap, InsertApiKey, InsertArchiveFetch, InsertBlock, InsertContract, InsertEvent, InsertIndexProgress, InsertMagicLink, InsertMempoolTransaction, InsertSession, InsertSubgraph, InsertSubgraphGap, InsertSubgraphHealthSnapshot, InsertSubgraphOperation, InsertTransaction, InsertVmEvent, InsertWaitlistSignup, InsertWebhook, InsertWebhookDelivery, InsertWebhookOutbox, InstancesTable, KeyRotatedError, MagicLink, MagicLinksTable, MempoolTransaction, MempoolTransactionsTable, MigrationRole, NativeClock, NotFoundError, NumericAsText, ObserverJournalStatus, ObserverJournalTable, OutboxStatus, ParsedCreateWebhookRequest, ParsedReplayWebhookRequest, ParsedUpdateWebhookRequest, PaymentRequiredError, PendingForkBlocksTable, Pox4CallsTable, Pox4FunctionName, Pox5EventTopic, Pox5EventsTable, ProcessedStripeEventsTable, RateLimitError, ReindexResponse, RepairMode, ReplayResult, ReplayWebhookRequest, ReplayWebhookRequestSchema, RetryState, RotateSecretResponse, RunStatus, SOURCE_READ_COLUMNS, SOURCE_READ_PKS, SOURCE_READ_TYPES, STREAMS_DB_EVENT_TYPES, STREAMS_EVENT_TYPES, STREAMS_TO_DB_EVENT_TYPES, SbtcDepositEvent, SbtcEventTopic, SbtcEventsTable, SbtcSettlementsTable, SbtcTokenEventType, SbtcTokenEventsTable, SbtcWithdrawalEvent, SbtcWithdrawalSweptConfirmedEvent, SecondLayerError, ServiceHeartbeatsTable, Session, SessionsTable, StageBlockReceiptsTable, StageFailuresTable, StageKind, StageRegistryTable, StageRunsTable, StreamsCursor, StreamsDbEventType, StreamsEventType, Subgraph, SubgraphAgentSchema, SubgraphAggregateParams, SubgraphAggregateResponse, SubgraphDetail, SubgraphGap, SubgraphGapEntry, SubgraphGapRange, SubgraphGapsResponse, SubgraphGapsTable, SubgraphHealthSnapshot, SubgraphHealthSnapshotsTable, SubgraphOperation, SubgraphOperationKind, SubgraphOperationStatus, SubgraphOperationsTable, SubgraphProcessingStatsTable, SubgraphQueryParams, SubgraphSpecFormat, SubgraphSpecOptions, SubgraphSummary, SubgraphSyncInfo, SubgraphViolationsTable, SubgraphsTable, SyncScopesTable, TABLE_TO_DB, TenantSuspendedError, Transaction, TransactionsArchiveTable, TransactionsTable, TriggerEvaluatorState, TriggerEvaluatorStateTable, UpdateAccountCredits, UpdateAccountSpendCap, UpdateApiKey, UpdateArchiveFetch, UpdateBlock, UpdateContract, UpdateEvent, UpdateIndexProgress, UpdateSubgraph, UpdateSubgraphOperation, UpdateTransaction, UpdateVmEvent, UpdateWebhook, UpdateWebhookOutbox, UpdateWebhookRequest, UpdateWebhookRequestSchema, VM_EVENT_TYPES, VM_NODE_TO_STORED_TYPE2 as VM_NODE_TO_STORED_TYPE, VM_STORED_TO_NODE_TYPE, ValidationError, VersionConflictError, VmEvent, VmEventType, VmEventsArchiveTable, VmEventsTable, VmNodeEventType, WEBHOOK_FILTER_OPERATORS, WEBHOOK_FORMATS, WEBHOOK_RUNTIMES, WEBHOOK_STATUSES, Waitlist, WaitlistSignup, WaitlistSignupsTable, WaitlistsTable, Webhook, WebhookDeliveriesTable, WebhookDelivery, WebhookDetail, WebhookFilter, WebhookFilterClause, WebhookFilterClauseSchema, WebhookFilterOperator, WebhookFilterOperatorSchema, WebhookFilterPrimitive, WebhookFilterPrimitiveSchema, WebhookFilterSchema, WebhookFormat, WebhookFormatSchema, WebhookKind, WebhookOutbox, WebhookOutboxTable, WebhookRuntime, WebhookRuntimeSchema, WebhookSchemaColumn, WebhookSchemaTable, WebhookSchemaTables, WebhookStatus, WebhookStatusSchema, WebhookSummary, WebhooksTable, applicationDatabaseUrl, assertDbSplit, blockEndCursor, closeDb, compareStreamsCursor, exports_hmac as crypto, decodeStreamsCursor, exports_ed25519 as ed25519, encodeStreamsCursor, finalizedBurnHeight, formatWebhookSchemaErrors, generateSubgraphAgentSchema, generateSubgraphMarkdown, generateSubgraphOpenApi, generateSubgraphSpec, getDb, getDbSplitStatus, getEnv, getErrorMessage, getMigrationRole, getRawClient, getRawClientFor, getSourceDb, getTargetDb, isBnsDecoderEnabled, isEmptyRangeCursor, isPox4DecoderEnabled, isPox5DecoderEnabled, isSbtcDecoderEnabled, jsonb, logger, onChainPlane, onControlPlane, parseJsonb, setMigrationRole, sql, validateWebhookFilterForTable };