@secondlayer/shared 11.7.1 → 11.8.1

package/dist/src/index-internal-auth.js

@@ -1,25 +1,9 @@
-import { createRequire } from "node:module";
-var __defProp = Object.defineProperty;
-var __returnValue = (v) => v;
-function __exportSetter(name, newValue) {
-  this[name] = __returnValue.bind(null, newValue);
-}
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, {
-      get: all[name],
-      enumerable: true,
-      configurable: true,
-      set: __exportSetter.bind(all, name)
-    });
-};
-
 // src/index-internal-auth.ts
 var INDEX_INTERNAL_TENANT_ID = "tenant_index_internal";
 var INTERNAL_STREAMS_TENANT_ID = "tenant_streams_decode_internal";
 var DEFAULT_INTERNAL_INDEX_BASE_URL = "http://api:3800";
 var MISSING_INTERNAL_STREAMS_API_KEY = "Set STREAMS_INTERNAL_API_KEY (archive; prefix sl-int_) or INSTANCE_TOKEN (OSS). Empty env no longer falls back to a committed secret.";
-var MISSING_INTERNAL_INDEX_API_KEY = "Set INDEX_INTERNAL_API_KEY (archive; prefix sl-int_) or INSTANCE_TOKEN (OSS). Without one, Index reads go out anonymously and are capped at the last 24h, so any seek into older history 402s.";
+var MISSING_INTERNAL_INDEX_API_KEY = "Set INDEX_INTERNAL_API_KEY (archive; prefix sl-int_) or INSTANCE_TOKEN (OSS). Without one, Index reads carry no credential and platform mode 401s every one of them.";
 function defaultInternalIndexApiKey(env = process.env) {
   const internal = env.INDEX_INTERNAL_API_KEY?.trim();
   if (internal)
@@ -54,14 +38,14 @@ function defaultInternalIndexBaseUrl() {
   return process.env.SUBGRAPH_INDEX_API_URL || process.env.STREAMS_API_URL || DEFAULT_INTERNAL_INDEX_BASE_URL;
 }
 export {
-  requireInternalStreamsApiKey,
-  requireInternalIndexApiKey,
-  defaultInternalStreamsApiKey,
-  defaultInternalIndexBaseUrl,
-  defaultInternalIndexApiKey,
+  INDEX_INTERNAL_TENANT_ID,
   INTERNAL_STREAMS_TENANT_ID,
-  INDEX_INTERNAL_TENANT_ID
+  defaultInternalIndexApiKey,
+  defaultInternalIndexBaseUrl,
+  defaultInternalStreamsApiKey,
+  requireInternalIndexApiKey,
+  requireInternalStreamsApiKey
 };
 
-//# debugId=D4294FDC89E3160364756E2164756E21
+//# debugId=E78A002D4B7D692A64756E2164756E21
 //# sourceMappingURL=index-internal-auth.js.map

package/dist/src/index-internal-auth.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/index-internal-auth.ts"],
   "sourcesContent": [
-    "// Internal service credentials for first-party consumers of /v1/index and\n// /v1/streams over HTTP (decoder, subgraph processor PublicApiBlockSource).\n// Seeded as internal tenants with NO account_id, so these reads are\n// unmetered (metering gates on account_id). Lives in shared so the API (seed)\n// and the consumers import it without a cycle.\n//\n// Resolution: STREAMS_INTERNAL_API_KEY / INDEX_INTERNAL_API_KEY, then\n// INSTANCE_TOKEN (OSS). No committed fallback. Empty-string env values fall\n// through (`trim()`, then empty): compose interpolates\n// `${STREAMS_INTERNAL_API_KEY:-}` which is \"\" when unset.\n//\n// Archive keys must not use the `sk-sl_` prefix; generate with `sl-int_`.\n// OSS compose should omit the internal env and send INSTANCE_TOKEN.\nexport const INDEX_INTERNAL_TENANT_ID = \"tenant_index_internal\";\nexport const INTERNAL_STREAMS_TENANT_ID = \"tenant_streams_decode_internal\";\n\nconst DEFAULT_INTERNAL_INDEX_BASE_URL = \"http://api:3800\";\n\nconst MISSING_INTERNAL_STREAMS_API_KEY =\n\t\"Set STREAMS_INTERNAL_API_KEY (archive; prefix sl-int_) or INSTANCE_TOKEN (OSS). Empty env no longer falls back to a committed secret.\";\n\nconst MISSING_INTERNAL_INDEX_API_KEY =\n\t\"Set INDEX_INTERNAL_API_KEY (archive; prefix sl-int_) or INSTANCE_TOKEN (OSS). Without one, Index reads go out anonymously and are capped at the last 24h, so any seek into older history 402s.\";\n\nexport function defaultInternalIndexApiKey(\n\tenv: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n\tconst internal = env.INDEX_INTERNAL_API_KEY?.trim();\n\tif (internal) return internal;\n\tconst instance = env.INSTANCE_TOKEN?.trim();\n\tif (instance) return instance;\n\treturn undefined;\n}\n\nexport function defaultInternalStreamsApiKey(\n\tenv: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n\tconst internal = env.STREAMS_INTERNAL_API_KEY?.trim();\n\tif (internal) return internal;\n\tconst instance = env.INSTANCE_TOKEN?.trim();\n\tif (instance) return instance;\n\treturn undefined;\n}\n\n/**\n * Platform-mode Index consumer: refuse to run with neither credential.\n *\n * A keyless Index read is not an error — it is an anonymous read, and the API\n * serves it for the last 24h (`api/src/index/free-window.ts`). That makes a\n * missing key invisible right up until a consumer's cursor falls out of the\n * window, at which point every read 402s and the container goes unhealthy,\n * possibly weeks after the misconfiguration. Callers that seek older history\n * on a platform-mode instance should fail here at startup instead.\n *\n * Self-hosted (oss/dedicated) instances are not gated, so they must NOT call\n * this — `defaultInternalIndexApiKey()` returning undefined is correct there.\n */\nexport function requireInternalIndexApiKey(\n\tenv: NodeJS.ProcessEnv = process.env,\n): string {\n\tconst key = defaultInternalIndexApiKey(env);\n\tif (!key) throw new Error(MISSING_INTERNAL_INDEX_API_KEY);\n\treturn key;\n}\n\n/** Decoder startup: refuse to run with neither credential. */\nexport function requireInternalStreamsApiKey(\n\tenv: NodeJS.ProcessEnv = process.env,\n): string {\n\tconst key = defaultInternalStreamsApiKey(env);\n\tif (!key) throw new Error(MISSING_INTERNAL_STREAMS_API_KEY);\n\treturn key;\n}\n\n/** Shared env contract for decoder + subgraph HTTP dogfood. */\nexport function defaultInternalIndexBaseUrl(): string {\n\treturn (\n\t\tprocess.env.SUBGRAPH_INDEX_API_URL ||\n\t\tprocess.env.STREAMS_API_URL ||\n\t\tDEFAULT_INTERNAL_INDEX_BASE_URL\n\t);\n}\n"
+    "// Internal service credentials for first-party consumers of /v1/index and\n// /v1/streams over HTTP (decoder, subgraph processor PublicApiBlockSource).\n// Seeded as internal tenants with NO account_id, so these reads are\n// unmetered (metering gates on account_id). Lives in shared so the API (seed)\n// and the consumers import it without a cycle.\n//\n// Resolution: STREAMS_INTERNAL_API_KEY / INDEX_INTERNAL_API_KEY, then\n// INSTANCE_TOKEN (OSS). No committed fallback. Empty-string env values fall\n// through (`trim()`, then empty): compose interpolates\n// `${STREAMS_INTERNAL_API_KEY:-}` which is \"\" when unset.\n//\n// Archive keys must not use the `sk-sl_` prefix; generate with `sl-int_`.\n// OSS compose should omit the internal env and send INSTANCE_TOKEN.\nexport const INDEX_INTERNAL_TENANT_ID = \"tenant_index_internal\";\nexport const INTERNAL_STREAMS_TENANT_ID = \"tenant_streams_decode_internal\";\n\nconst DEFAULT_INTERNAL_INDEX_BASE_URL = \"http://api:3800\";\n\nconst MISSING_INTERNAL_STREAMS_API_KEY =\n\t\"Set STREAMS_INTERNAL_API_KEY (archive; prefix sl-int_) or INSTANCE_TOKEN (OSS). Empty env no longer falls back to a committed secret.\";\n\nconst MISSING_INTERNAL_INDEX_API_KEY =\n\t\"Set INDEX_INTERNAL_API_KEY (archive; prefix sl-int_) or INSTANCE_TOKEN (OSS). Without one, Index reads carry no credential and platform mode 401s every one of them.\";\n\nexport function defaultInternalIndexApiKey(\n\tenv: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n\tconst internal = env.INDEX_INTERNAL_API_KEY?.trim();\n\tif (internal) return internal;\n\tconst instance = env.INSTANCE_TOKEN?.trim();\n\tif (instance) return instance;\n\treturn undefined;\n}\n\nexport function defaultInternalStreamsApiKey(\n\tenv: NodeJS.ProcessEnv = process.env,\n): string | undefined {\n\tconst internal = env.STREAMS_INTERNAL_API_KEY?.trim();\n\tif (internal) return internal;\n\tconst instance = env.INSTANCE_TOKEN?.trim();\n\tif (instance) return instance;\n\treturn undefined;\n}\n\n/**\n * Platform-mode Index consumer: refuse to run with neither credential.\n *\n * Platform mode requires a credential on every Index read (a keyless read\n * 401s, `api/src/index/auth.ts`) — a first-party consumer with no internal\n * key would fail every request at call time. Fail here at startup instead.\n *\n * Self-hosted (oss/dedicated) instances are not gated, so they must NOT call\n * this — `defaultInternalIndexApiKey()` returning undefined is correct there.\n */\nexport function requireInternalIndexApiKey(\n\tenv: NodeJS.ProcessEnv = process.env,\n): string {\n\tconst key = defaultInternalIndexApiKey(env);\n\tif (!key) throw new Error(MISSING_INTERNAL_INDEX_API_KEY);\n\treturn key;\n}\n\n/** Decoder startup: refuse to run with neither credential. */\nexport function requireInternalStreamsApiKey(\n\tenv: NodeJS.ProcessEnv = process.env,\n): string {\n\tconst key = defaultInternalStreamsApiKey(env);\n\tif (!key) throw new Error(MISSING_INTERNAL_STREAMS_API_KEY);\n\treturn key;\n}\n\n/** Shared env contract for decoder + subgraph HTTP dogfood. */\nexport function defaultInternalIndexBaseUrl(): string {\n\treturn (\n\t\tprocess.env.SUBGRAPH_INDEX_API_URL ||\n\t\tprocess.env.STREAMS_API_URL ||\n\t\tDEFAULT_INTERNAL_INDEX_BASE_URL\n\t);\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAaO,IAAM,2BAA2B;AACjC,IAAM,6BAA6B;AAE1C,IAAM,kCAAkC;AAExC,IAAM,mCACL;AAED,IAAM,iCACL;AAEM,SAAS,0BAA0B,CACzC,MAAyB,QAAQ,KACZ;AAAA,EACrB,MAAM,WAAW,IAAI,wBAAwB,KAAK;AAAA,EAClD,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB,MAAM,WAAW,IAAI,gBAAgB,KAAK;AAAA,EAC1C,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB;AAAA;AAGM,SAAS,4BAA4B,CAC3C,MAAyB,QAAQ,KACZ;AAAA,EACrB,MAAM,WAAW,IAAI,0BAA0B,KAAK;AAAA,EACpD,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB,MAAM,WAAW,IAAI,gBAAgB,KAAK;AAAA,EAC1C,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB;AAAA;AAgBM,SAAS,0BAA0B,CACzC,MAAyB,QAAQ,KACxB;AAAA,EACT,MAAM,MAAM,2BAA2B,GAAG;AAAA,EAC1C,IAAI,CAAC;AAAA,IAAK,MAAM,IAAI,MAAM,8BAA8B;AAAA,EACxD,OAAO;AAAA;AAID,SAAS,4BAA4B,CAC3C,MAAyB,QAAQ,KACxB;AAAA,EACT,MAAM,MAAM,6BAA6B,GAAG;AAAA,EAC5C,IAAI,CAAC;AAAA,IAAK,MAAM,IAAI,MAAM,gCAAgC;AAAA,EAC1D,OAAO;AAAA;AAID,SAAS,2BAA2B,GAAW;AAAA,EACrD,OACC,QAAQ,IAAI,0BACZ,QAAQ,IAAI,mBACZ;AAAA;",
-  "debugId": "D4294FDC89E3160364756E2164756E21",
+  "mappings": ";AAaO,IAAM,2BAA2B;AACjC,IAAM,6BAA6B;AAE1C,IAAM,kCAAkC;AAExC,IAAM,mCACL;AAED,IAAM,iCACL;AAEM,SAAS,0BAA0B,CACzC,MAAyB,QAAQ,KACZ;AAAA,EACrB,MAAM,WAAW,IAAI,wBAAwB,KAAK;AAAA,EAClD,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB,MAAM,WAAW,IAAI,gBAAgB,KAAK;AAAA,EAC1C,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB;AAAA;AAGM,SAAS,4BAA4B,CAC3C,MAAyB,QAAQ,KACZ;AAAA,EACrB,MAAM,WAAW,IAAI,0BAA0B,KAAK;AAAA,EACpD,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB,MAAM,WAAW,IAAI,gBAAgB,KAAK;AAAA,EAC1C,IAAI;AAAA,IAAU,OAAO;AAAA,EACrB;AAAA;AAaM,SAAS,0BAA0B,CACzC,MAAyB,QAAQ,KACxB;AAAA,EACT,MAAM,MAAM,2BAA2B,GAAG;AAAA,EAC1C,IAAI,CAAC;AAAA,IAAK,MAAM,IAAI,MAAM,8BAA8B;AAAA,EACxD,OAAO;AAAA;AAID,SAAS,4BAA4B,CAC3C,MAAyB,QAAQ,KACxB;AAAA,EACT,MAAM,MAAM,6BAA6B,GAAG;AAAA,EAC5C,IAAI,CAAC;AAAA,IAAK,MAAM,IAAI,MAAM,gCAAgC;AAAA,EAC1D,OAAO;AAAA;AAID,SAAS,2BAA2B,GAAW;AAAA,EACrD,OACC,QAAQ,IAAI,0BACZ,QAAQ,IAAI,mBACZ;AAAA;",
+  "debugId": "E78A002D4B7D692A64756E2164756E21",
   "names": []
 }

package/dist/src/index.d.ts

@@ -152,7 +152,6 @@ interface SubgraphsTable {
 	handler_code: string | null;
 	source_code: string | null;
 	project_id: string | null;
-	visibility: Generated<string>;
 	/** Paid (wallet-ghost) deploys expire unless renewed or claimed; NULL = no expiry. */
 	expires_at: Date | null;
 	/** (event type, contract) probe pairs persisted at deploy for weight classification. */
@@ -782,6 +781,7 @@ interface Database {
 	coverage_segments: CoverageSegmentsTable;
 	stage_failures: StageFailuresTable;
 	archive_fetches: ArchiveFetchesTable;
+	usage_ledger: UsageLedgerTable;
 	waitlists: WaitlistsTable;
 	waitlist_signups: WaitlistSignupsTable;
 }
@@ -835,6 +835,30 @@ interface ArchiveFetchesTable {
 type ArchiveFetch = Selectable<ArchiveFetchesTable>;
 type InsertArchiveFetch = Insertable<ArchiveFetchesTable>;
 type UpdateArchiveFetch = Updateable<ArchiveFetchesTable>;
+/**
+* One metered ledger for every billable unit (archive partitions, hosted
+* Index/Streams rows, and future hosted-stack meters). Append-only, written
+* only by `meter()`. `idempotency_key` is UNIQUE so a retried submission
+* no-ops instead of double-charging. `debited` is false when the balance
+* (or a spend cap) refused the charge — the row still exists so the gap is
+* visible, never silently dropped. `usd_micros` is negative for a Stripe
+* top-up (`unit: "topup"`).
+*/
+interface UsageLedgerTable {
+	id: Generated<string>;
+	account_id: string;
+	unit: string;
+	quantity: string | number | bigint;
+	usd_micros: string | number | bigint;
+	debited: Generated<boolean>;
+	source: string;
+	idempotency_key: string;
+	occurred_at: Generated<Date>;
+	recorded_at: Generated<Date>;
+}
+type UsageLedgerRow = Selectable<UsageLedgerTable>;
+type InsertUsageLedgerRow = Insertable<UsageLedgerTable>;
+type UpdateUsageLedgerRow = Updateable<UsageLedgerTable>;
 type Block = Selectable<BlocksTable>;
 type InsertBlock = Insertable<BlocksTable>;
 type UpdateBlock = Updateable<BlocksTable>;
@@ -939,6 +963,10 @@ interface WebhookOutboxTable {
 	failed_at: Date | null;
 	locked_by: string | null;
 	locked_until: Date | null;
+	/** Set when a reorg marks an in-flight row `dead` instead of retrying it
+	*  into an orphaned fork. Null otherwise — delivery failures track their
+	*  history on `webhooks.last_error`, not per-row. */
+	last_error: string | null;
 	created_at: Generated<Date>;
 }
 type WebhookOutbox = Selectable<WebhookOutboxTable>;
@@ -1034,23 +1062,22 @@ declare function isPox5DecoderEnabled(env?: EnvMap): boolean;
 declare function isSbtcDecoderEnabled(env?: EnvMap): boolean;
 /** Default OFF. Opt in with `BNS_DECODER_ENABLED=true`. */
 declare function isBnsDecoderEnabled(env?: EnvMap): boolean;
-import { RawBuilder } from "kysely";
-/**
-* Safely encode a JS value as a JSONB literal for Kysely inserts/updates.
-* Kysely + postgres.js double-encodes JSON when using parameterized queries
-* with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.
-*
-* Generic parameter lets callers set the RawBuilder's output type so they
-* don't need to cast at the insert site. Default is `unknown` — widen at
-* the call site when the column type is narrower, e.g. `jsonb<MyShape>(...)`.
-*/
-declare function jsonb<T = unknown>(value: T): RawBuilder<T>;
-/**
-* Safely parse a JSONB value from the database.
-* Handles double-encoded strings where postgres.js returns a JSON string
-* instead of a parsed object.
-*/
-declare function parseJsonb<T = unknown>(value: unknown): T;
+import { DECODED_EVENT_TYPES, VM_NODE_TO_STORED_TYPE } from "@secondlayer/stacks/filters";
+import { DecodedEventType } from "@secondlayer/stacks/filters";
+import { DECODED_EVENT_TYPES as DECODED_EVENT_TYPES2, VM_EVENT_TYPES, VM_NODE_TO_STORED_TYPE as VM_NODE_TO_STORED_TYPE2, DecodedEventType as DecodedEventType2, VmEventType, VmNodeEventType } from "@secondlayer/stacks/filters";
+type VmStoredToNode = { [K in keyof typeof VM_NODE_TO_STORED_TYPE as (typeof VM_NODE_TO_STORED_TYPE)[K]] : K };
+/** Inverse of {@link VM_NODE_TO_STORED_TYPE}. Replay reconstruction emits the
+*  node-shaped `/new_block.vm_events` body, so ingest can re-parse it. */
+declare const VM_STORED_TO_NODE_TYPE: VmStoredToNode;
+/** Alias kept for the Streams surface (identical to {@link DECODED_EVENT_TYPES}).
+*  Explicit type annotation required — isolatedDeclarations emits `unknown` for
+*  a bare const-to-const alias. */
+declare const STREAMS_EVENT_TYPES: typeof DECODED_EVENT_TYPES;
+type StreamsEventType = DecodedEventType;
+declare const STREAMS_DB_EVENT_TYPES: readonly ["stx_transfer_event", "stx_mint_event", "stx_burn_event", "stx_lock_event", "ft_transfer_event", "ft_mint_event", "ft_burn_event", "nft_transfer_event", "nft_mint_event", "nft_burn_event", "smart_contract_event", "contract_event"];
+type StreamsDbEventType = (typeof STREAMS_DB_EVENT_TYPES)[number];
+declare const DB_TO_STREAMS_EVENT_TYPE: Record<StreamsDbEventType, StreamsEventType>;
+declare const STREAMS_TO_DB_EVENT_TYPES: Record<StreamsEventType, readonly StreamsDbEventType[]>;
 import { Kysely } from "kysely";
 import postgres from "postgres";
 import { sql } from "kysely";
@@ -1886,6 +1913,23 @@ declare const SOURCE_READ_PKS: {
 	readonly events: readonly ["tx_id", "event_index"]
 	readonly chain_reorgs: null
 };
+import { RawBuilder } from "kysely";
+/**
+* Safely encode a JS value as a JSONB literal for Kysely inserts/updates.
+* Kysely + postgres.js double-encodes JSON when using parameterized queries
+* with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.
+*
+* Generic parameter lets callers set the RawBuilder's output type so they
+* don't need to cast at the insert site. Default is `unknown` — widen at
+* the call site when the column type is narrower, e.g. `jsonb<MyShape>(...)`.
+*/
+declare function jsonb<T = unknown>(value: T): RawBuilder<T>;
+/**
+* Safely parse a JSONB value from the database.
+* Handles double-encoded strings where postgres.js returns a JSON string
+* instead of a parsed object.
+*/
+declare function parseJsonb<T = unknown>(value: unknown): T;
 /**
 * Per-migration DB-plane gating for the source/target split.
 *
@@ -1990,6 +2034,7 @@ declare const TABLE_TO_DB: {
 	subgraph_processing_stats: string
 	account_credits: string
 	archive_fetches: string
+	usage_ledger: string
 	waitlists: string
 	waitlist_signups: string
 	service_heartbeats: string
@@ -2117,9 +2162,9 @@ declare class RateLimitError extends SecondLayerError {
 	constructor(message: string);
 }
 /**
-* HTTP 402. Carries the x402 challenge (or a retry-later reason) in `details` so
-* the global error handler emits it in the body. The wire `PAYMENT-REQUIRED`
-* header is set separately by the x402 middleware on the challenge path.
+* HTTP 402: insufficient credits. Carries a machine-readable reason (e.g.
+* `insufficient_credits`, `UPGRADE_REQUIRED`) in `details` so the global
+* error handler emits it in the body, alongside a top-up hint/link.
 */
 declare class PaymentRequiredError extends SecondLayerError {
 	constructor(message: string, details?: Record<string, unknown>);
@@ -2142,6 +2187,56 @@ declare class TenantSuspendedError extends SecondLayerError {
 *  (avoids cross-bundle instanceof failures from bunup class duplication). */
 declare const CODE_TO_STATUS: Record<string, 400 | 401 | 402 | 403 | 404 | 409 | 415 | 422 | 423 | 429 | 503>;
 declare function getErrorMessage(err: unknown): string;
+/**
+* Block finality, anchored to the burn (Bitcoin) chain.
+*
+* Post-Nakamoto, Stacks blocks arrive every few seconds, so a fixed count of
+* Stacks blocks is a poor finality proxy (e.g. 144 fast blocks ≈ 12 minutes).
+* A Stacks block is final once its anchoring burn block has enough Bitcoin
+* confirmations — so finality is expressed in burn-block confirmations and
+* mapped to a Stacks height via the burn_block_height carried on each block.
+*/
+/** Bitcoin confirmations required before a block is treated as final. ~1 hour. */
+declare const DEFAULT_BTC_CONFIRMATIONS = 6;
+/**
+* Highest burn (Bitcoin) block height considered finalized given the current
+* burn tip. Stacks blocks whose `burn_block_height` is at or below the result
+* are final. Returns 0 when the chain is shorter than the confirmation window.
+*/
+declare function finalizedBurnHeight(burnTipHeight: number, confirmations?: number): number;
+/**
+* Canonical Streams cursor codec, shared by every product (Streams, Index,
+* Datasets, bulk). A cursor is `"<block_height>:<event_index>"` — an opaque,
+* monotonic resume token. One implementation so encode/decode and the
+* empty-range sentinel can never drift between products.
+*
+* NOTE: this codec IS the shared piece worth centralizing. A broader "shared
+* canonical reader" across the ~10 raw-event query sites (streams-events,
+* streams-bulk/query, l2/storage) was deliberately NOT built: those sites split
+* into distinct query patterns and share only the row_number ordering *pattern*,
+* not an identical reader. The reorg-archive design (migration 0084) keeps the
+* main tables canonical-only, so each reader's `WHERE canonical` filter already
+* needs no dedup logic. Forcing one mega-reader was the wrong abstraction; this
+* codec captures the only part that actually drifts.
+*/
+type StreamsCursor = {
+	block_height: number
+	event_index: number
+};
+/**
+* Event index used to advance a cursor past a fully-filtered range instead of
+* returning null. A filter that eliminates every event in a scanned range would
+* otherwise pin the consumer at the previous cursor and spin forever. Must fit
+* in Postgres int4 (the `stream_event_index` column type) — int4 max is plenty,
+* real blocks have far fewer than ~2.1B events.
+*/
+declare const EMPTY_RANGE_EVENT_INDEX_SENTINEL = 2147483647;
+declare function encodeStreamsCursor(cursor: StreamsCursor): string;
+declare function decodeStreamsCursor(cursor: string): StreamsCursor;
+declare function compareStreamsCursor(a: StreamsCursor, b: StreamsCursor): number;
+declare function isEmptyRangeCursor(cursor: StreamsCursor): boolean;
+/** Exclusive end of every event that can live in `height`. */
+declare function blockEndCursor(height: number): StreamsCursor;
 declare class Logger {
 	private _level?;
 	private _isProduction?;
@@ -2160,7 +2255,6 @@ declare const logger: Logger;
 import { z as z2 } from "zod";
 interface DeploySubgraphRequest {
 	name: string;
-	version?: string;
 	description?: string;
 	sources: Record<string, Record<string, unknown>>;
 	schema: Record<string, unknown>;
@@ -2213,7 +2307,6 @@ interface SubgraphSummary {
 	gapCount: number;
 	/** history_filling = expected gaps while a tip-first backfill op runs. */
 	integrity: "complete" | "gaps_detected" | "history_filling";
-	visibility?: "public" | "private";
 	/** Most recent indexing error reason + when it occurred, if any. */
 	lastError?: string | null;
 	lastErrorAt?: string | null;
@@ -2270,7 +2363,6 @@ interface SubgraphDetail {
 	version: string;
 	schemaHash?: string;
 	status: string;
-	visibility?: "public" | "private";
 	lastProcessedBlock: number;
 	description?: string;
 	sources?: Record<string, unknown>;
@@ -2583,6 +2675,13 @@ interface WebhookDetail extends WebhookSummary {
 	circuitFailures: number;
 	circuitOpenedAt: string | null;
 	lastError: string | null;
+	/** Set on a `kind="chain"` webhook when this instance's chain-trigger
+	*  evaluator isn't running (`SUBGRAPH_SOURCE` != `streams-index`) — the
+	*  webhook will never fire until that's fixed. Null otherwise. Surfaced
+	*  on create (so it's seen immediately) and on every read (so `secondlayer
+	*  webhooks doctor` reports it for a webhook created before the mismatch,
+	*  or on an instance whose config changed since). */
+	warning: string | null;
 }
 interface CreateWebhookResponse {
 	webhook: WebhookDetail;
@@ -2635,15 +2734,6 @@ type SubgraphSpecFormat = "openapi" | "agent" | "markdown";
 interface SubgraphSpecOptions {
 	serverUrl?: string;
 	generatedAt?: string;
-	/**
-	* Self-hosted instances ignore the `visibility` column when deciding
-	* whether a read needs a key (`/v1/subgraphs` auth is the loopback rule,
-	* not the flag) — but this generator still branched on it, so a spec built
-	* for a self-hosted deploy pointed readers at the authenticated `/api`
-	* path for a read that was actually open. Callers on that mode should set
-	* this so the generated URLs match the auth the API actually enforces.
-	*/
-	forcePublicRead?: boolean;
 }
 interface SubgraphAgentSchema {
 	name: string;
@@ -2682,124 +2772,6 @@ declare function generateSubgraphAgentSchema(detail: SubgraphDetail, options?: S
 declare function generateSubgraphOpenApi(detail: SubgraphDetail, options?: SubgraphSpecOptions): Record<string, unknown>;
 declare function generateSubgraphMarkdown(detail: SubgraphDetail, options?: SubgraphSpecOptions): string;
 declare function generateSubgraphSpec(detail: SubgraphDetail, format: SubgraphSpecFormat, options?: SubgraphSpecOptions): Record<string, unknown> | SubgraphAgentSchema | string;
-declare namespace exports_hmac {
-	export { verifySignatureHeader, verifySignature, signPayload, generateSecret, createSignatureHeader };
-}
-/**
-* Generate a random secret for delivery signing
-* Returns 32 bytes as a 64-character hex string
-*/
-declare function generateSecret(): string;
-/**
-* Sign a payload with HMAC-SHA256
-* Returns the signature as a hex string
-*/
-declare function signPayload(payload: string, secret: string): string;
-/**
-* Verify an HMAC signature
-* Uses constant-time comparison to prevent timing attacks
-*/
-declare function verifySignature(payload: string, signature: string, secret: string): boolean;
-/**
-* Create a Stripe-style signature header
-* Format: t=timestamp,v1=signature
-*/
-declare function createSignatureHeader(payload: string, secret: string, timestamp?: number): string;
-/**
-* Parse and verify a Stripe-style signature header
-* Returns true if valid, false otherwise
-*/
-declare function verifySignatureHeader(payload: string, header: string, secret: string, toleranceSeconds?: number): boolean;
-declare namespace exports_ed25519 {
-	export { verifyEd25519, signEd25519, publicKeyPemFromPrivate, loadEd25519PublicKey, loadEd25519PrivateKey, generateEd25519KeyPair, ed25519KeyId };
-}
-import { KeyObject } from "node:crypto";
-/**
-* Asymmetric ed25519 signing for Streams response proofs.
-*
-* Asymmetric (not HMAC) so the proof is real: only the server holds the private
-* key, and any consumer verifies with the published public key — no shared
-* secret to leak. ed25519 uses node's `sign`/`verify` with a `null` algorithm.
-* Keys are PEM (PKCS8 private / SPKI public) for env transport; load once and
-* reuse the KeyObject on hot paths.
-*/
-declare function generateEd25519KeyPair(): {
-	privateKeyPem: string
-	publicKeyPem: string
-};
-declare function loadEd25519PrivateKey(pem: string): KeyObject;
-declare function loadEd25519PublicKey(pem: string): KeyObject;
-declare function publicKeyPemFromPrivate(privateKeyPem: string): string;
-/** Stable short id for a public key (rotation hint via X-Signature-KeyId). */
-declare function ed25519KeyId(publicKeyPem: string): string;
-declare function signEd25519(payload: string, privateKey: KeyObject): string;
-declare function verifyEd25519(payload: string, signatureBase64: string, publicKey: KeyObject): boolean;
-import { DECODED_EVENT_TYPES, VM_NODE_TO_STORED_TYPE } from "@secondlayer/stacks/filters";
-import { DecodedEventType } from "@secondlayer/stacks/filters";
-import { DECODED_EVENT_TYPES as DECODED_EVENT_TYPES2, VM_EVENT_TYPES, VM_NODE_TO_STORED_TYPE as VM_NODE_TO_STORED_TYPE2, DecodedEventType as DecodedEventType2, VmEventType, VmNodeEventType } from "@secondlayer/stacks/filters";
-type VmStoredToNode = { [K in keyof typeof VM_NODE_TO_STORED_TYPE as (typeof VM_NODE_TO_STORED_TYPE)[K]] : K };
-/** Inverse of {@link VM_NODE_TO_STORED_TYPE}. Replay reconstruction emits the
-*  node-shaped `/new_block.vm_events` body, so ingest can re-parse it. */
-declare const VM_STORED_TO_NODE_TYPE: VmStoredToNode;
-/** Alias kept for the Streams surface (identical to {@link DECODED_EVENT_TYPES}).
-*  Explicit type annotation required — isolatedDeclarations emits `unknown` for
-*  a bare const-to-const alias. */
-declare const STREAMS_EVENT_TYPES: typeof DECODED_EVENT_TYPES;
-type StreamsEventType = DecodedEventType;
-declare const STREAMS_DB_EVENT_TYPES: readonly ["stx_transfer_event", "stx_mint_event", "stx_burn_event", "stx_lock_event", "ft_transfer_event", "ft_mint_event", "ft_burn_event", "nft_transfer_event", "nft_mint_event", "nft_burn_event", "smart_contract_event", "contract_event"];
-type StreamsDbEventType = (typeof STREAMS_DB_EVENT_TYPES)[number];
-declare const DB_TO_STREAMS_EVENT_TYPE: Record<StreamsDbEventType, StreamsEventType>;
-declare const STREAMS_TO_DB_EVENT_TYPES: Record<StreamsEventType, readonly StreamsDbEventType[]>;
-/**
-* Block finality, anchored to the burn (Bitcoin) chain.
-*
-* Post-Nakamoto, Stacks blocks arrive every few seconds, so a fixed count of
-* Stacks blocks is a poor finality proxy (e.g. 144 fast blocks ≈ 12 minutes).
-* A Stacks block is final once its anchoring burn block has enough Bitcoin
-* confirmations — so finality is expressed in burn-block confirmations and
-* mapped to a Stacks height via the burn_block_height carried on each block.
-*/
-/** Bitcoin confirmations required before a block is treated as final. ~1 hour. */
-declare const DEFAULT_BTC_CONFIRMATIONS = 6;
-/**
-* Highest burn (Bitcoin) block height considered finalized given the current
-* burn tip. Stacks blocks whose `burn_block_height` is at or below the result
-* are final. Returns 0 when the chain is shorter than the confirmation window.
-*/
-declare function finalizedBurnHeight(burnTipHeight: number, confirmations?: number): number;
-/**
-* Canonical Streams cursor codec, shared by every product (Streams, Index,
-* Datasets, bulk). A cursor is `"<block_height>:<event_index>"` — an opaque,
-* monotonic resume token. One implementation so encode/decode and the
-* empty-range sentinel can never drift between products.
-*
-* NOTE: this codec IS the shared piece worth centralizing. A broader "shared
-* canonical reader" across the ~10 raw-event query sites (streams-events,
-* streams-bulk/query, l2/storage) was deliberately NOT built: those sites split
-* into distinct query patterns and share only the row_number ordering *pattern*,
-* not an identical reader. The reorg-archive design (migration 0084) keeps the
-* main tables canonical-only, so each reader's `WHERE canonical` filter already
-* needs no dedup logic. Forcing one mega-reader was the wrong abstraction; this
-* codec captures the only part that actually drifts.
-*/
-type StreamsCursor = {
-	block_height: number
-	event_index: number
-};
-/**
-* Event index used to advance a cursor past a fully-filtered range instead of
-* returning null. A filter that eliminates every event in a scanned range would
-* otherwise pin the consumer at the previous cursor and spin forever. Must fit
-* in Postgres int4 (the `stream_event_index` column type) — int4 max is plenty,
-* real blocks have far fewer than ~2.1B events.
-*/
-declare const EMPTY_RANGE_EVENT_INDEX_SENTINEL = 2147483647;
-declare function encodeStreamsCursor(cursor: StreamsCursor): string;
-declare function decodeStreamsCursor(cursor: string): StreamsCursor;
-declare function compareStreamsCursor(a: StreamsCursor, b: StreamsCursor): number;
-declare function isEmptyRangeCursor(cursor: StreamsCursor): boolean;
-/** Exclusive end of every event that can live in `height`. */
-declare function blockEndCursor(height: number): StreamsCursor;
 /**
 * Payload for `sbtc_deposit` (topic: completed-deposit).
 * `sender` is the Stacks address that initiated the deposit and receives the sBTC.
@@ -3059,4 +3031,56 @@ interface ChainTestDelivery {
 * "Chain webhook webhook payloads" doc.
 */
 type ChainWebhookDelivery = ChainApplyDeliveryOf<"stx_transfer", ChainEventEnvelope<"stx_transfer_event", ChainStxTransferData>> | ChainApplyDeliveryOf<"stx_mint", ChainEventEnvelope<"stx_mint_event", ChainStxMintData>> | ChainApplyDeliveryOf<"stx_burn", ChainEventEnvelope<"stx_burn_event", ChainStxBurnData>> | ChainApplyDeliveryOf<"stx_lock", ChainEventEnvelope<"stx_lock_event", ChainStxLockData>> | ChainApplyDeliveryOf<"ft_transfer", ChainEventEnvelope<"ft_transfer_event", ChainFtTransferData>> | ChainApplyDeliveryOf<"ft_mint", ChainEventEnvelope<"ft_mint_event", ChainFtMintData>> | ChainApplyDeliveryOf<"ft_burn", ChainEventEnvelope<"ft_burn_event", ChainFtBurnData>> | ChainApplyDeliveryOf<"nft_transfer", ChainEventEnvelope<"nft_transfer_event", ChainNftTransferData>> | ChainApplyDeliveryOf<"nft_mint", ChainEventEnvelope<"nft_mint_event", ChainNftMintData>> | ChainApplyDeliveryOf<"nft_burn", ChainEventEnvelope<"nft_burn_event", ChainNftBurnData>> | ChainApplyDeliveryOf<"print_event", ChainEventEnvelope<"contract_event", ChainPrintEventData>> | ChainApplyDeliveryOf<"contract_call", ChainTxLevelEvent> | ChainApplyDeliveryOf<"contract_deploy", ChainTxLevelEvent> | ChainApplyDeliveryOf<"sbtc_deposit", SbtcDepositEvent> | ChainApplyDeliveryOf<"sbtc_withdrawal_create", SbtcWithdrawalEvent> | ChainApplyDeliveryOf<"sbtc_withdrawal_accept", SbtcWithdrawalEvent> | ChainApplyDeliveryOf<"sbtc_withdrawal_reject", SbtcWithdrawalEvent> | ChainApplyDeliveryOf<"sbtc_withdrawal_swept_confirmed", SbtcWithdrawalSweptConfirmedEvent> | ChainReorgRollbackDelivery | ChainTestDelivery;
-export { validateWebhookFilterForTable, sql, setMigrationRole, parseJsonb, onControlPlane, onChainPlane, logger, jsonb, isSbtcDecoderEnabled, isPox5DecoderEnabled, isPox4DecoderEnabled, isEmptyRangeCursor, isBnsDecoderEnabled, getTargetDb, getSourceDb, getRawClientFor, getRawClient, getMigrationRole, getErrorMessage, getEnv, getDbSplitStatus, getDb, generateSubgraphSpec, generateSubgraphOpenApi, generateSubgraphMarkdown, generateSubgraphAgentSchema, formatWebhookSchemaErrors, finalizedBurnHeight, encodeStreamsCursor, exports_ed25519 as ed25519, decodeStreamsCursor, exports_hmac as crypto, compareStreamsCursor, closeDb, blockEndCursor, assertDbSplit, applicationDatabaseUrl, WebhooksTable, WebhookSummary, WebhookStatusSchema, WebhookStatus, WebhookSchemaTables, WebhookSchemaTable, WebhookSchemaColumn, WebhookRuntimeSchema, WebhookRuntime, WebhookOutboxTable, WebhookOutbox, WebhookKind, WebhookFormatSchema, WebhookFormat, WebhookFilterSchema, WebhookFilterPrimitiveSchema, WebhookFilterPrimitive, WebhookFilterOperatorSchema, WebhookFilterOperator, WebhookFilterClauseSchema, WebhookFilterClause, WebhookFilter, WebhookDetail, WebhookDelivery, WebhookDeliveriesTable, Webhook, WaitlistsTable, WaitlistSignupsTable, WaitlistSignup, Waitlist, WEBHOOK_STATUSES, WEBHOOK_RUNTIMES, WEBHOOK_FORMATS, WEBHOOK_FILTER_OPERATORS, VmNodeEventType, VmEventsTable, VmEventsArchiveTable, VmEventType, VmEvent, VersionConflictError, ValidationError, VM_STORED_TO_NODE_TYPE, VM_NODE_TO_STORED_TYPE2 as VM_NODE_TO_STORED_TYPE, VM_EVENT_TYPES, UpdateWebhookRequestSchema, UpdateWebhookRequest, UpdateWebhookOutbox, UpdateWebhook, UpdateVmEvent, UpdateTransaction, UpdateSubgraphOperation, UpdateSubgraph, UpdateIndexProgress, UpdateEvent, UpdateContract, UpdateBlock, UpdateArchiveFetch, UpdateApiKey, UpdateAccountSpendCap, UpdateAccountCredits, TriggerEvaluatorStateTable, TriggerEvaluatorState, TransactionsTable, TransactionsArchiveTable, Transaction, TenantSuspendedError, TABLE_TO_DB, SyncScopesTable, SubgraphsTable, SubgraphViolationsTable, SubgraphSyncInfo, SubgraphSummary, SubgraphSpecOptions, SubgraphSpecFormat, SubgraphQueryParams, SubgraphProcessingStatsTable, SubgraphOperationsTable, SubgraphOperationStatus, SubgraphOperationKind, SubgraphOperation, SubgraphHealthSnapshotsTable, SubgraphHealthSnapshot, SubgraphGapsTable, SubgraphGapsResponse, SubgraphGapRange, SubgraphGapEntry, SubgraphGap, SubgraphDetail, SubgraphAggregateResponse, SubgraphAggregateParams, SubgraphAgentSchema, Subgraph, StreamsEventType, StreamsDbEventType, StreamsCursor, StageRunsTable, StageRegistryTable, StageKind, StageFailuresTable, StageBlockReceiptsTable, SessionsTable, Session, ServiceHeartbeatsTable, SecondLayerError, SbtcWithdrawalSweptConfirmedEvent, SbtcWithdrawalEvent, SbtcTokenEventsTable, SbtcTokenEventType, SbtcSettlementsTable, SbtcEventsTable, SbtcEventTopic, SbtcDepositEvent, STREAMS_TO_DB_EVENT_TYPES, STREAMS_EVENT_TYPES, STREAMS_DB_EVENT_TYPES, SOURCE_READ_TYPES, SOURCE_READ_PKS, SOURCE_READ_COLUMNS, RunStatus, RotateSecretResponse, RetryState, ReplayWebhookRequestSchema, ReplayWebhookRequest, ReplayResult, RepairMode, ReindexResponse, RateLimitError, ProcessedStripeEventsTable, Pox5EventsTable, Pox5EventTopic, Pox4FunctionName, Pox4CallsTable, PendingForkBlocksTable, PaymentRequiredError, ParsedUpdateWebhookRequest, ParsedReplayWebhookRequest, ParsedCreateWebhookRequest, OutboxStatus, ObserverJournalTable, ObserverJournalStatus, NumericAsText, NotFoundError, NativeClock, MigrationRole, MempoolTransactionsTable, MempoolTransaction, MagicLinksTable, MagicLink, KeyRotatedError, InstancesTable, InsertWebhookOutbox, InsertWebhookDelivery, InsertWebhook, InsertWaitlistSignup, InsertVmEvent, InsertTransaction, InsertSubgraphOperation, InsertSubgraphHealthSnapshot, InsertSubgraphGap, InsertSubgraph, InsertSession, InsertMempoolTransaction, InsertMagicLink, InsertIndexProgress, InsertEvent, InsertContract, InsertBlock, InsertArchiveFetch, InsertApiKey, InsertAccountSpendCap, InsertAccountCredits, InsertAccount, IndexProgressTable, IndexProgress, IndexPrimaryKey, IndexColumnType, IndexColumn, ForbiddenError, FailureUnit, FailureClass, EventsTable, EventsArchiveTable, Event, ErrorCodes, ErrorCode, Env, EMPTY_RANGE_EVENT_INDEX_SENTINEL, DeploySubgraphResponse, DeploySubgraphRequestSchema, DeploySubgraphRequest, DeliveryRow, DecoderCheckpointsTable, DecodedEventsTable, DecodedEventType2 as DecodedEventType, DeadRow, DeadLetterEventsTable, DbSplitStatus, DbReadRow, DbPlane, DatabaseError, Database, DEFAULT_BTC_CONFIRMATIONS, DECODED_EVENT_TYPES2 as DECODED_EVENT_TYPES, DB_TO_STREAMS_EVENT_TYPE, CreateWebhookResponse, CreateWebhookRequestSchema, CreateWebhookRequest, CoverageSegmentsTable, ContractsTable, Contract, ChainWebhookEnvelope, ChainWebhookDelivery, ChainTxLevelEvent, ChainTestDelivery, ChainStxTransferData, ChainStxMintData, ChainStxLockData, ChainStxBurnData, ChainReorgsTable, ChainReorgRollbackEnvelope, ChainReorgRollbackDelivery, ChainReorgOrphanedEntry, ChainReadCacheTable, ChainPrintEventData, ChainNftTransferData, ChainNftMintData, ChainNftBurnData, ChainFtTransferData, ChainFtMintData, ChainFtBurnData, ChainEventEnvelope, ChainApplyEnvelopeOf, ChainApplyEnvelope, ChainApplyDeliveryOf, CODE_TO_STATUS, CHAIN_TRIGGER_TYPES, CHAIN_TRIGGER_FIELDS, BurnBlockRewardsTable, BurnBlockRewardSlotsTable, BnsNamespacesTable, BnsNamespaceEventsTable, BnsNamespaceEventStatus, BnsNamesTable, BnsNameEventsTable, BnsNameEventTopic, BnsMarketplaceEventsTable, BnsMarketplaceAction, BlocksTable, Block, AuthorizationError, AuthenticationError, ArchiveFetchesTable, ArchiveFetch, ApiKeysTable, ApiKey, AccountsTable, AccountSpendCapsTable, AccountSpendCap, AccountCreditsTable, AccountCredits, Account };
+declare namespace exports_hmac {
+	export { createSignatureHeader, generateSecret, signPayload, verifySignature, verifySignatureHeader };
+}
+/**
+* Generate a random secret for delivery signing
+* Returns 32 bytes as a 64-character hex string
+*/
+declare function generateSecret(): string;
+/**
+* Sign a payload with HMAC-SHA256
+* Returns the signature as a hex string
+*/
+declare function signPayload(payload: string, secret: string): string;
+/**
+* Verify an HMAC signature
+* Uses constant-time comparison to prevent timing attacks
+*/
+declare function verifySignature(payload: string, signature: string, secret: string): boolean;
+/**
+* Create a Stripe-style signature header
+* Format: t=timestamp,v1=signature
+*/
+declare function createSignatureHeader(payload: string, secret: string, timestamp?: number): string;
+/**
+* Parse and verify a Stripe-style signature header
+* Returns true if valid, false otherwise
+*/
+declare function verifySignatureHeader(payload: string, header: string, secret: string, toleranceSeconds?: number): boolean;
+declare namespace exports_ed25519 {
+	export { ed25519KeyId, generateEd25519KeyPair, loadEd25519PrivateKey, loadEd25519PublicKey, publicKeyPemFromPrivate, signEd25519, verifyEd25519 };
+}
+import { KeyObject } from "node:crypto";
+/**
+* Asymmetric ed25519 signing for Streams response proofs.
+*
+* Asymmetric (not HMAC) so the proof is real: only the server holds the private
+* key, and any consumer verifies with the published public key — no shared
+* secret to leak. ed25519 uses node's `sign`/`verify` with a `null` algorithm.
+* Keys are PEM (PKCS8 private / SPKI public) for env transport; load once and
+* reuse the KeyObject on hot paths.
+*/
+declare function generateEd25519KeyPair(): {
+	privateKeyPem: string
+	publicKeyPem: string
+};
+declare function loadEd25519PrivateKey(pem: string): KeyObject;
+declare function loadEd25519PublicKey(pem: string): KeyObject;
+declare function publicKeyPemFromPrivate(privateKeyPem: string): string;
+/** Stable short id for a public key (rotation hint via X-Signature-KeyId). */
+declare function ed25519KeyId(publicKeyPem: string): string;
+declare function signEd25519(payload: string, privateKey: KeyObject): string;
+declare function verifyEd25519(payload: string, signatureBase64: string, publicKey: KeyObject): boolean;
+export { Account, AccountCredits, AccountCreditsTable, AccountSpendCap, AccountSpendCapsTable, AccountsTable, ApiKey, ApiKeysTable, ArchiveFetch, ArchiveFetchesTable, AuthenticationError, AuthorizationError, Block, BlocksTable, BnsMarketplaceAction, BnsMarketplaceEventsTable, BnsNameEventTopic, BnsNameEventsTable, BnsNamesTable, BnsNamespaceEventStatus, BnsNamespaceEventsTable, BnsNamespacesTable, BurnBlockRewardSlotsTable, BurnBlockRewardsTable, CHAIN_TRIGGER_FIELDS, CHAIN_TRIGGER_TYPES, CODE_TO_STATUS, ChainApplyDeliveryOf, ChainApplyEnvelope, ChainApplyEnvelopeOf, ChainEventEnvelope, ChainFtBurnData, ChainFtMintData, ChainFtTransferData, ChainNftBurnData, ChainNftMintData, ChainNftTransferData, ChainPrintEventData, ChainReadCacheTable, ChainReorgOrphanedEntry, ChainReorgRollbackDelivery, ChainReorgRollbackEnvelope, ChainReorgsTable, ChainStxBurnData, ChainStxLockData, ChainStxMintData, ChainStxTransferData, ChainTestDelivery, ChainTxLevelEvent, ChainWebhookDelivery, ChainWebhookEnvelope, Contract, ContractsTable, CoverageSegmentsTable, CreateWebhookRequest, CreateWebhookRequestSchema, CreateWebhookResponse, DB_TO_STREAMS_EVENT_TYPE, DECODED_EVENT_TYPES2 as DECODED_EVENT_TYPES, DEFAULT_BTC_CONFIRMATIONS, Database, DatabaseError, DbPlane, DbReadRow, DbSplitStatus, DeadLetterEventsTable, DeadRow, DecodedEventType2 as DecodedEventType, DecodedEventsTable, DecoderCheckpointsTable, DeliveryRow, DeploySubgraphRequest, DeploySubgraphRequestSchema, DeploySubgraphResponse, EMPTY_RANGE_EVENT_INDEX_SENTINEL, Env, ErrorCode, ErrorCodes, Event, EventsArchiveTable, EventsTable, FailureClass, FailureUnit, ForbiddenError, IndexColumn, IndexColumnType, IndexPrimaryKey, IndexProgress, IndexProgressTable, InsertAccount, InsertAccountCredits, InsertAccountSpendCap, InsertApiKey, InsertArchiveFetch, InsertBlock, InsertContract, InsertEvent, InsertIndexProgress, InsertMagicLink, InsertMempoolTransaction, InsertSession, InsertSubgraph, InsertSubgraphGap, InsertSubgraphHealthSnapshot, InsertSubgraphOperation, InsertTransaction, InsertUsageLedgerRow, InsertVmEvent, InsertWaitlistSignup, InsertWebhook, InsertWebhookDelivery, InsertWebhookOutbox, InstancesTable, KeyRotatedError, MagicLink, MagicLinksTable, MempoolTransaction, MempoolTransactionsTable, MigrationRole, NativeClock, NotFoundError, NumericAsText, ObserverJournalStatus, ObserverJournalTable, OutboxStatus, ParsedCreateWebhookRequest, ParsedReplayWebhookRequest, ParsedUpdateWebhookRequest, PaymentRequiredError, PendingForkBlocksTable, Pox4CallsTable, Pox4FunctionName, Pox5EventTopic, Pox5EventsTable, ProcessedStripeEventsTable, RateLimitError, ReindexResponse, RepairMode, ReplayResult, ReplayWebhookRequest, ReplayWebhookRequestSchema, RetryState, RotateSecretResponse, RunStatus, SOURCE_READ_COLUMNS, SOURCE_READ_PKS, SOURCE_READ_TYPES, STREAMS_DB_EVENT_TYPES, STREAMS_EVENT_TYPES, STREAMS_TO_DB_EVENT_TYPES, SbtcDepositEvent, SbtcEventTopic, SbtcEventsTable, SbtcSettlementsTable, SbtcTokenEventType, SbtcTokenEventsTable, SbtcWithdrawalEvent, SbtcWithdrawalSweptConfirmedEvent, SecondLayerError, ServiceHeartbeatsTable, Session, SessionsTable, StageBlockReceiptsTable, StageFailuresTable, StageKind, StageRegistryTable, StageRunsTable, StreamsCursor, StreamsDbEventType, StreamsEventType, Subgraph, SubgraphAgentSchema, SubgraphAggregateParams, SubgraphAggregateResponse, SubgraphDetail, SubgraphGap, SubgraphGapEntry, SubgraphGapRange, SubgraphGapsResponse, SubgraphGapsTable, SubgraphHealthSnapshot, SubgraphHealthSnapshotsTable, SubgraphOperation, SubgraphOperationKind, SubgraphOperationStatus, SubgraphOperationsTable, SubgraphProcessingStatsTable, SubgraphQueryParams, SubgraphSpecFormat, SubgraphSpecOptions, SubgraphSummary, SubgraphSyncInfo, SubgraphViolationsTable, SubgraphsTable, SyncScopesTable, TABLE_TO_DB, TenantSuspendedError, Transaction, TransactionsArchiveTable, TransactionsTable, TriggerEvaluatorState, TriggerEvaluatorStateTable, UpdateAccountCredits, UpdateAccountSpendCap, UpdateApiKey, UpdateArchiveFetch, UpdateBlock, UpdateContract, UpdateEvent, UpdateIndexProgress, UpdateSubgraph, UpdateSubgraphOperation, UpdateTransaction, UpdateUsageLedgerRow, UpdateVmEvent, UpdateWebhook, UpdateWebhookOutbox, UpdateWebhookRequest, UpdateWebhookRequestSchema, UsageLedgerRow, UsageLedgerTable, VM_EVENT_TYPES, VM_NODE_TO_STORED_TYPE2 as VM_NODE_TO_STORED_TYPE, VM_STORED_TO_NODE_TYPE, ValidationError, VersionConflictError, VmEvent, VmEventType, VmEventsArchiveTable, VmEventsTable, VmNodeEventType, WEBHOOK_FILTER_OPERATORS, WEBHOOK_FORMATS, WEBHOOK_RUNTIMES, WEBHOOK_STATUSES, Waitlist, WaitlistSignup, WaitlistSignupsTable, WaitlistsTable, Webhook, WebhookDeliveriesTable, WebhookDelivery, WebhookDetail, WebhookFilter, WebhookFilterClause, WebhookFilterClauseSchema, WebhookFilterOperator, WebhookFilterOperatorSchema, WebhookFilterPrimitive, WebhookFilterPrimitiveSchema, WebhookFilterSchema, WebhookFormat, WebhookFormatSchema, WebhookKind, WebhookOutbox, WebhookOutboxTable, WebhookRuntime, WebhookRuntimeSchema, WebhookSchemaColumn, WebhookSchemaTable, WebhookSchemaTables, WebhookStatus, WebhookStatusSchema, WebhookSummary, WebhooksTable, applicationDatabaseUrl, assertDbSplit, blockEndCursor, closeDb, compareStreamsCursor, exports_hmac as crypto, decodeStreamsCursor, exports_ed25519 as ed25519, encodeStreamsCursor, finalizedBurnHeight, formatWebhookSchemaErrors, generateSubgraphAgentSchema, generateSubgraphMarkdown, generateSubgraphOpenApi, generateSubgraphSpec, getDb, getDbSplitStatus, getEnv, getErrorMessage, getMigrationRole, getRawClient, getRawClientFor, getSourceDb, getTargetDb, isBnsDecoderEnabled, isEmptyRangeCursor, isPox4DecoderEnabled, isPox5DecoderEnabled, isSbtcDecoderEnabled, jsonb, logger, onChainPlane, onControlPlane, parseJsonb, setMigrationRole, sql, validateWebhookFilterForTable };