better-supabase 0.12.0 → 0.14.0

package/dist/blocks/webhooks/index.js

@@ -1,33 +1,31 @@
-import { t as DbException } from "../../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../../errors-BV1SKTVs.js";
-import { t as temporal } from "../../temporal-required-nfZ87U-0.js";
-import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../../result-DIeYscA3.js";
+import { t as DbException } from "../../db-exception-Lngc1W49.js";
+import { n as dbError } from "../../errors-03ysrOt4.js";
+import { t as temporal } from "../../temporal-required-B8qQHYbI.js";
+import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../../result-B3m7xtRY.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
-import { i as toBase64, r as fromBase64 } from "../../base64-D4aqdnDR.js";
-import { a as methodNotAllowed, o as problemResponse } from "../../problem-JRCohp1j.js";
+import { i as toBase64, r as fromBase64 } from "../../base64-B9Wlsdj7.js";
+import { a as methodNotAllowed, o as problemResponse } from "../../problem-BWElIgIb.js";
 import { t as MAX_BATCH } from "../../batch-limit-DKVQDz4o.js";
 import { n as webhooksOutSqlOptions, t as webhooksInSqlOptions } from "../../options-D7f2VKzj.js";
-import { a as stripTypePrefix } from "../../cloud-event-CTh9Sr5w.js";
-import { n as credentialRefInTenant, r as foreignCredentialRef } from "../../provider-C-Ti38J6.js";
-import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { r as blockEmitter } from "../../block-events-DD9Q_NUz.js";
-import { n as hmacHex, r as timingSafeEqual } from "../../hmac-BgpThYQW.js";
-import { i as signWebhook, o as verifySharedSecret, s as verifyWebhook, t as PUBLIC_KEY_PREFIX } from "../../signatures-CeIoAelK.js";
-import { t as cronRoute } from "../../cron-route-mTvWhork.js";
-import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-J7ZepTq2.js";
-import { C as optionalText, D as recordOf, E as readBodyCapped, L as toBlockError, M as seconds, R as toInstant, c as chunksOf, f as errorText, i as batchResultsOf, k as recordsOf, n as applyTemporal, o as blockCall, r as asDbError, s as budget } from "../../block-helpers-DkVZNDrj.js";
-import { t as subjectReaders } from "../../subject-readers-BpwUFJtp.js";
-import { r as withBlockHooks } from "../../block-hooks-C22vuIUd.js";
-import { n as hitRateLimit, o as receiveWebhook } from "../../rate-limit-I3AncmM8.js";
-import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { a as signStripeWebhook, i as isDatabaseWebhook, n as databaseChange, o as stripeInboxVerify, r as hookError, s as verifyStripeWebhook, t as authHook } from "../../verify-DnU-uWU2.js";
+import { B as dbTransport, C as optionalText, D as recordOf, E as readBodyCapped, H as rpcTransport, L as toBlockError, M as seconds, R as toInstant, U as sqlTransport, c as chunksOf, f as errorText, i as batchResultsOf, k as recordsOf, n as applyTemporal, o as blockCall, r as asDbError, s as budget } from "../../block-helpers-CiKtrb6g.js";
+import { r as withBlockHooks } from "../../block-hooks-BymdcD0V.js";
+import { a as stripTypePrefix } from "../../cloud-event-XsM53POL.js";
+import { n as credentialRefInTenant, r as foreignCredentialRef } from "../../provider-EJ0-5GwJ.js";
+import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";
+import { r as blockEmitter } from "../../block-events-pBXPzwnW.js";
+import { n as hmacHex, r as timingSafeEqual } from "../../hmac-B3CTTlfv.js";
+import { i as signWebhook, o as verifySharedSecret, s as verifyWebhook, t as PUBLIC_KEY_PREFIX } from "../../signatures-GUBuhLOB.js";
+import { t as cronRoute } from "../../cron-route-Y0eJ-FNi.js";
+import { t as subjectReaders } from "../../subject-readers-CsTpx44c.js";
+import { n as hitRateLimit, o as receiveWebhook } from "../../rate-limit-DExDw3Cy.js";
+import { n as defineBlock } from "../../define-block-Dze77QTw.js";
+import { a as signStripeWebhook, i as isDatabaseWebhook, n as databaseChange, o as stripeInboxVerify, r as hookError, s as verifyStripeWebhook, t as authHook } from "../../verify-27w0I5C9.js";
 import { toHttp } from "../../events/index.js";
 //#region src/blocks/webhooks/destinations.ts
 /**
-* Stores deliveries in the webhook inbox under `source` (the delivery's
-* source when unset), with the endpoint's tenant and the id
-* `<endpoint id>:<message id>`. The default destination of
-* `createIncomingWebhooks`.
+* Stores deliveries in the webhook inbox under `source` (the delivery's source
+* when unset), with the endpoint's tenant and the id `<endpoint id>:<message
+* id>`. The default destination of `createIncomingWebhooks`.
 */
 function inboxDestination(sql, options = {}) {
 	return {
@@ -78,9 +76,9 @@ function verifyOf(value) {
 }
 /**
 * Tenant-owned trigger URLs over the `webhooks-in` SQL module: create
-* endpoints, then route `/hooks/<token>` to `receive`. Deliveries land in
-* the webhook inbox (`createWebhookInbox`), where a worker processes them,
-* or in `options.destination`.
+* endpoints, then route `/hooks/<token>` to `receive`. Deliveries land in the
+* webhook inbox (`createWebhookInbox`), where a worker processes them, or in
+* `options.destination`.
 */
 function createIncomingWebhooks(options) {
 	applyTemporal(options);
@@ -278,7 +276,10 @@ function createIncomingWebhooks(options) {
 }
 //#endregion
 //#region src/blocks/webhooks/encoders.ts
-/** The default format: CloudEvents over HTTP, structured or batched per endpoint. */
+/**
+* The default format: CloudEvents over HTTP, structured or batched per
+* endpoint.
+*/
 function cloudEvents() {
 	return {
 		apiVersion: 1,
@@ -291,8 +292,8 @@ function cloudEvents() {
 	};
 }
 /**
-* The 0.8 body, `{ type, timestamp, data }`, with `data` from `transform`;
-* a batch is a JSON array of them. Signed with Standard Webhooks like
+* The 0.8 body, `{ type, timestamp, data }`, with `data` from `transform`; a
+* batch is a JSON array of them. Signed with Standard Webhooks like
 * `cloudevents`.
 */
 function standardEnvelope() {
@@ -348,8 +349,8 @@ const OTLP_RETRYABLE = /* @__PURE__ */ new Set([
 ]);
 /**
 * OTLP/HTTP logs in the JSON encoding: one `ExportLogsServiceRequest` per
-* request, a log record per event with the CloudEvents attributes. Point
-* the endpoint at a collector's `/v1/logs`.
+* request, a log record per event with the CloudEvents attributes. Point the
+* endpoint at a collector's `/v1/logs`.
 */
 function otlpLogs(options = {}) {
 	const resource = attributes({
@@ -422,9 +423,9 @@ function jsonOf(body) {
 /** HEC codes worth a retry: internal error and server busy. */
 const HEC_RETRYABLE = /* @__PURE__ */ new Set([8, 9]);
 /**
-* The Splunk HTTP Event Collector's event format: one JSON object per
-* event, the CloudEvent as `event`. Point the endpoint at
-* `/services/collector/event` and set `credential_ref` to the HEC token.
+* The Splunk HTTP Event Collector's event format: one JSON object per event,
+* the CloudEvent as `event`. Point the endpoint at `/services/collector/event`
+* and set `credential_ref` to the HEC token.
 */
 function splunkHec(options = {}) {
 	return {
@@ -461,9 +462,9 @@ function splunkHec(options = {}) {
 /** RFC 8935 error codes a transmitter can't fix by sending the SET again. */
 const SET_RETRYABLE = /* @__PURE__ */ new Set(["invalid_key"]);
 /**
-* RFC 8935 push delivery of Security Event Tokens: the body is the compact
-* SET from the delivery's `data.set`, one per request. The shared-signals
-* block creates these endpoints (`format: 'set'`) and dispatches to them.
+* RFC 8935 push delivery of Security Event Tokens: the body is the compact SET
+* from the delivery's `data.set`, one per request. The shared-signals block
+* creates these endpoints (`format: 'set'`) and dispatches to them.
 */
 function securityEvents() {
 	return {
@@ -613,12 +614,12 @@ function builtinResolver() {
 	})).map((entry) => entry.address);
 }
 /**
-* The default `allowUrl`: HTTPS only, no credentials in the URL, no local
-* host names, and every address the host resolves to must be public. The
-* delivery transport calls it again for each redirect.
+* The default `allowUrl`: HTTPS only, no credentials in the URL, no local host
+* names, and every address the host resolves to must be public. The delivery
+* transport calls it again for each redirect.
 *
-* DNS can change between this check and the connection. Route webhooks
-* through an egress proxy when that matters.
+* DNS can change between this check and the connection. Route webhooks through
+* an egress proxy when that matters.
 */
 function publicUrl(options = {}) {
 	const resolve = options.resolve === false ? void 0 : options.resolve ?? builtinResolver();
@@ -638,7 +639,10 @@ function publicUrl(options = {}) {
 }
 //#endregion
 //#region src/blocks/webhooks/safe-fetch.ts
-/** A request `safeFetch` refused: a URL outside the policy or too many redirects. */
+/**
+* A request `safeFetch` refused: a URL outside the policy or too many
+* redirects.
+*/
 var UnsafeUrlError = class extends Error {
 	name = "UnsafeUrlError";
 };
@@ -665,12 +669,12 @@ const CREDENTIALS = [
 ];
 /**
 * A `fetch` for URLs that users or tenants supply (link previews, imports,
-* avatars by URL, callback URLs): it refuses private, loopback and
-* link-local addresses, non-HTTPS URLs and credentials in the URL, checks
-* every redirect against the same policy before following it, and stops
-* after `timeoutMs`. It throws `UnsafeUrlError` for a refused URL and
-* `UrlCheckError` when the check itself failed (a DNS lookup error). A redirect
-* to another origin drops the credential headers and `sensitiveHeaders`.
+* avatars by URL, callback URLs): it refuses private, loopback and link-local
+* addresses, non-HTTPS URLs and credentials in the URL, checks every redirect
+* against the same policy before following it, and stops after `timeoutMs`. It
+* throws `UnsafeUrlError` for a refused URL and `UrlCheckError` when the check
+* itself failed (a DNS lookup error). A redirect to another origin drops the
+* credential headers and `sensitiveHeaders`.
 *
 * DNS can change between the check and the connection; route the requests
 * through an egress proxy when that matters.
@@ -699,7 +703,7 @@ function createSafeFetch(options = {}) {
 		let method = request.method;
 		const headers = new Headers(request.headers);
 		let body = method === "GET" || method === "HEAD" ? void 0 : await request.arrayBuffer();
-		for (let hop = 0;; hop++) {
+		for (let hop = 0;; hop += 1) {
 			if (hop > 0) await check(url);
 			const response = await send(url, {
 				method,
@@ -765,8 +769,8 @@ async function readCapped(response, limit) {
 	}
 }
 /**
-* A check that threw (a DNS lookup that timed out) is not a refusal: it
-* throws `UrlCheckError`, which the delivery retries.
+* A check that threw (a DNS lookup that timed out) is not a refusal: it throws
+* `UrlCheckError`, which the delivery retries.
 */
 async function allowed(allowUrl, url) {
 	try {
@@ -788,7 +792,7 @@ function fetchTransport(options = {}) {
 			const timeout = AbortSignal.timeout(timeoutMs);
 			const signal = request.signal ? AbortSignal.any([request.signal, timeout]) : timeout;
 			let url = new URL(request.url);
-			for (let hop = 0;; hop++) {
+			for (let hop = 0;; hop += 1) {
 				if (options.allowUrl && !await allowed(options.allowUrl, url)) throw new WebhookPolicyError(`Endpoint URL is not allowed: ${url.host}`);
 				const response = await send(url, {
 					method: "POST",
@@ -841,9 +845,9 @@ function needSecrets(secrets) {
 	if (secrets.length === 0) throw new TypeError("The endpoint has no signing secret");
 }
 /**
-* Signs with the [Standard Webhooks](https://www.standardwebhooks.com/)
-* scheme: `webhook-id`, `webhook-timestamp` and one `v1,` signature per
-* secret in `webhook-signature`. `verifyWebhook` checks it.
+* Signs with the [Standard Webhooks](https://www.standardwebhooks.com/) scheme:
+* `webhook-id`, `webhook-timestamp` and one `v1,` signature per secret in
+* `webhook-signature`. `verifyWebhook` checks it.
 */
 function standardWebhooks(options = {}) {
 	const names = {
@@ -871,9 +875,9 @@ function standardWebhooks(options = {}) {
 }
 /**
 * Signs with the Standard Webhooks asymmetric scheme: one `v1a,` Ed25519
-* signature over `id.timestamp.body` in `webhook-signature`. Receivers
-* verify it with the `whpk_` key `webhookPublicKey` returns, through
-* `verifyWebhook`. Endpoints opt in with `signing = 'v1a'`.
+* signature over `id.timestamp.body` in `webhook-signature`. Receivers verify
+* it with the `whpk_` key `webhookPublicKey` returns, through `verifyWebhook`.
+* Endpoints opt in with `signing = 'v1a'`.
 */
 function standardWebhooksAsymmetric(options) {
 	const names = {
@@ -1117,7 +1121,10 @@ function createWebhooks(options) {
 		});
 		return ok(encoder.authorize?.(token.data) ?? token.data.headers);
 	}
-	/** The Standard Webhooks headers, from the endpoint's secrets or `asymmetricSigner`. */
+	/**
+	* The Standard Webhooks headers, from the endpoint's secrets or
+	* `asymmetricSigner`.
+	*/
 	async function signatureHeaders(deliveries, body) {
 		const first = deliveries[0];
 		const sign = first.signing === "v1a" ? options.asymmetricSigner : signer;
@@ -1418,7 +1425,10 @@ const webhooksEvents = defineEvents({
 	"webhook.disabled": event(),
 	"webhook.secret_rotated": event()
 });
-/** The `incoming-webhooks` block's event types, for its manifest and `onBlockEvent`. */
+/**
+* The `incoming-webhooks` block's event types, for its manifest and
+* `onBlockEvent`.
+*/
 const incomingWebhooksEvents = defineEvents({
 	"incoming_webhook.created": event(),
 	"incoming_webhook.updated": event(),

package/dist/blocks/work-items/index.d.ts

@@ -1,191 +1,36 @@
 /// <reference lib="esnext.temporal" />
-import { T as ErrorMapper, t as AsyncResult } from "../../result-BREt7qOh.js";
-import { wt as Events } from "../../events-P3raDX2E.js";
-import { T as WorkItemEventData } from "../../index-BpyBH5O2.js";
-import { n as Logger } from "../../logger-DWVYUmwi.js";
-import { t as StandardSchemaV1 } from "../../standard-BcUQuUgu.js";
-import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DezJPPA0.js";
-import { r as BlockTemporalOptions } from "../../block-helpers-CjcQM1yA.js";
-import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DcPJHztl.js";
-import { n as ExtraFields, r as FieldsOf } from "../../block-fields-DnaDbgZS.js";
-import { s as BlockOf } from "../../define-block-BHxLHLys.js";
-import { t as SubjectConfig } from "../../subjects-DP-fvFkk.js";
-//#region src/blocks/work-items/work-items.d.ts
-/** The state a stage's category sets; `completed` and `canceled` are closed. */
-type WorkItemState = "triage" | "backlog" | "unstarted" | "started" | "completed" | "canceled";
-type CloseReason = "completed" | "not_planned" | "duplicate";
-/** A work item. `F` types the extra columns the `fields` schema describes. */
-interface WorkItem<F extends object = Record<never, never>> {
-  readonly id: string;
-  readonly organizationId: string;
-  readonly number: bigint;
-  /** `TASK-12`, or the number-sequences format. */
-  readonly identifier: string;
-  readonly title: string;
-  readonly body?: string;
-  readonly parentId?: string;
-  readonly teamId?: string;
-  readonly projectId?: string;
-  readonly iterationId?: string;
-  /** 0 none, 1 urgent, 2 high, 3 medium, 4 low. */
-  readonly priority: number;
-  readonly estimate?: number;
-  /** Its own progress; `tree` rolls children up when it has none. */
-  readonly progress?: number;
-  readonly startAt?: Temporal.Instant;
-  readonly endAt?: Temporal.Instant;
-  readonly dueAt?: Temporal.Instant;
-  readonly pipelineId?: string;
-  readonly stageId?: string;
-  readonly stageEnteredAt?: Temporal.Instant;
-  readonly state: WorkItemState;
-  readonly closeReason?: CloseReason;
-  readonly closedAt?: Temporal.Instant;
-  /** A locked item keeps its dates, as a locked Gantt bar. */
-  readonly locked: boolean;
-  readonly rank: string;
-  readonly assigneeIds: readonly string[];
-  /** The extra columns, keyed by database name. */
-  readonly fields: ExtraFields<F>;
-  readonly archived: boolean;
-  readonly createdAt: Temporal.Instant;
-  readonly updatedAt: Temporal.Instant;
-}
-interface WorkItemInput<F extends object = Record<never, never>> {
-  readonly title: string;
-  readonly body?: string;
-  readonly parentId?: string;
-  readonly teamId?: string;
-  readonly projectId?: string;
-  readonly iterationId?: string;
-  readonly priority?: number;
-  readonly estimate?: number;
-  readonly progress?: number;
-  readonly startAt?: Temporal.Instant;
-  readonly endAt?: Temporal.Instant;
-  readonly dueAt?: Temporal.Instant;
-  readonly pipelineId?: string;
-  readonly stageId?: string;
-  /** The extra columns to set. */
-  readonly fields?: Partial<F>;
-}
-type WorkItemField = "title" | "body" | "parentId" | "teamId" | "projectId" | "iterationId" | "priority" | "estimate" | "progress" | "startAt" | "endAt" | "dueAt" | "stageId" | "closeReason";
-/** One cell edit or drag: a built-in field or an extra column. `null` clears the field. */
-interface WorkItemChange<F extends object = Record<never, never>> {
-  readonly workItemId: string;
-  readonly field: WorkItemField | (keyof F & string);
-  readonly value: unknown;
-}
-interface WorkItemChangeResult {
-  readonly accepted: readonly {
-    readonly workItemId: string;
-    readonly field: string;
-  }[];
-  readonly rejected: readonly {
-    readonly workItemId: string;
-    readonly field: string;
-    readonly hint?: string;
-    readonly reason: string;
-  }[];
-}
-/** A node of `tree`, for a Gantt chart or a nested list. */
-interface WorkItemNode {
-  readonly id: string;
-  readonly parentId?: string;
-  readonly identifier: string;
-  readonly title: string;
-  readonly state: WorkItemState;
-  readonly startAt?: Temporal.Instant;
-  readonly endAt?: Temporal.Instant;
-  readonly dueAt?: Temporal.Instant;
-  readonly locked: boolean;
-  readonly depth: number;
-  readonly progress: number;
-}
-interface WorkItemListOptions {
-  readonly teamId?: string;
-  readonly projectId?: string;
-  readonly iterationId?: string;
-  readonly parentId?: string;
-  readonly assigneeId?: string;
-  readonly states?: readonly WorkItemState[];
-  /** Only items that aren't completed or canceled. */
-  readonly open?: boolean;
-  /** Matches the title, or the start of the identifier. */
-  readonly search?: string;
-  /** Continues after this item. */
-  readonly after?: string;
-  readonly limit?: number;
-}
-interface Project {
-  readonly id: string;
-  readonly key: string;
-  readonly name: string;
-  readonly ownerId?: string;
-  readonly status: "planned" | "active" | "paused" | "completed" | "canceled";
-  readonly startOn?: Temporal.PlainDate;
-  readonly targetOn?: Temporal.PlainDate;
-  /** The share of its items that are completed, canceled ones left out. */
-  readonly progress?: number;
-}
-interface Iteration {
-  readonly id: string;
-  readonly teamId?: string;
-  readonly name: string;
-  readonly startsOn: Temporal.PlainDate;
-  readonly endsOn: Temporal.PlainDate;
-}
-interface WorkItems<F extends object = Record<never, never>> {
-  create(organizationId: string, input: WorkItemInput<F>, assigneeIds?: readonly string[]): AsyncResult<WorkItem<F>>;
-  /** Extra column changes are validated with the `fields` schema first. */
-  update(changes: readonly WorkItemChange<F>[]): AsyncResult<WorkItemChangeResult>;
-  /** Replaces the assignees; new ones are notified and every one watches. */
-  assign(workItemId: string, userIds: readonly string[]): AsyncResult<number>;
-  archive(workItemId: string, archived?: boolean): AsyncResult<boolean>;
-  remove(workItemId: string): AsyncResult<boolean>;
-  tree(rootId: string): AsyncResult<WorkItemNode[]>;
-  list(organizationId: string, options?: WorkItemListOptions): AsyncResult<WorkItem<F>[]>;
-  saveProject(organizationId: string, project: Partial<Omit<Project, "id" | "progress" | "startOn" | "targetOn">> & {
-    readonly id?: string;
-    readonly startOn?: Temporal.PlainDate | null;
-    readonly targetOn?: Temporal.PlainDate | null;
-    readonly archived?: boolean;
-  }): AsyncResult<Project>;
-  saveIteration(organizationId: string, iteration: Partial<Omit<Iteration, "id">> & {
-    readonly id?: string;
-  }): AsyncResult<Iteration>;
-}
-interface WorkItemsOptions<S extends StandardSchemaV1 | undefined = undefined> extends BlockTemporalOptions {
-  readonly transport: BlockTransport;
-  readonly schema?: string;
+import { Ct as Events } from "../../events-DbLjvxDX.js";
+import { D as WorkItemEventData } from "../../block-events-records-BGVyoz57.js";
+import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-d53POsem.js";
+import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-CmjPKqQ_.js";
+import { i as EventSink } from "../../cloud-event-SPyXMdcd.js";
+import { Lt as Section, c as BlockOf, rn as EntitySchema } from "../../define-block-COpcS6aT.js";
+import { _ as WorkItems, a as Project, c as WorkItemChangeResult, d as WorkItemListOptions, f as WorkItemNode, g as WorkItemWatcher, h as WorkItemWatchLevel, i as Iteration, l as WorkItemField, m as WorkItemState, n as ChecklistItemInput, o as WorkItem, p as WorkItemRecurrence, r as CloseReason, s as WorkItemChange, t as ChecklistItem, u as WorkItemInput, v as WorkItemsOptions, y as createWorkItems } from "../../work-items-Cnntm8ij.js";
+//#region src/blocks/work-items/recurrence.d.ts
+/**
+ * The first occurrence of `rule` after `after`, or `undefined` when the rule
+ * has ended (COUNT or UNTIL) or has none in the next five years.
+ */
+export declare function nextWorkItemOccurrence(rule: WorkItemRecurrence, after: Temporal.Instant): Temporal.Instant | undefined;
+interface WorkItemRecurrenceSinkOptions {
   /**
-   * A Standard Schema for the item's extra columns
-   * (`blocks.work-items.options.extraColumns`), keyed by database name. It
-   * types and parses them on reads, and validates them on `create` and
-   * `update`.
+   * The closed event's type without `typePrefix`, after
+   * `blocks.work-items.entities` (`task.closed`). Default `work_item.closed`.
    */
-  readonly fields?: S;
-  readonly hooks?: NoInfer<BlockHooks<WorkItems<FieldsOf<S>>>>;
-  readonly logger?: Logger;
-  readonly mappers?: readonly ErrorMapper[];
+  readonly type?: string;
+  /** Stripped from each event type. Defaults to `dev.better-supabase`. */
+  readonly typePrefix?: string;
+  /** The current time, for an item without a due date. */
+  readonly now?: () => Temporal.Instant;
 }
 /**
- * The work-items block: issues and tasks on pipelines, with batched edits
- * for a grid or a Gantt chart, assignees, a progress tree, projects and
- * iterations.
- */
-export declare function createWorkItems<S extends StandardSchemaV1 | undefined = undefined>(options: WorkItemsOptions<S>): WorkItems<FieldsOf<S>>;
-/**
- * The `config.subjects` entry for work items, so comments, tags, files,
- * relations (`blocks` for Gantt dependencies), rank and search attach.
- * The board moves an item by its stage id.
+ * An outbox sink that creates the next item when a repeating one is completed:
+ * `outbox.relay('work-items', workItemRecurrenceSink(workItems))`. Build
+ * `workItems` with a service transport. The next item is due at the rule's
+ * first occurrence after the completed item's due date (or now), and `repeat`
+ * runs once per item, so a redelivered event changes nothing.
  */
-export declare function workItemsSubjects(options?: {
-  readonly schema?: string;
-  readonly url?: string;
-}): {
-  readonly work_item: SubjectConfig;
-};
+export declare function workItemRecurrenceSink(workItems: Pick<WorkItems, "get" | "repeat">, options?: WorkItemRecurrenceSinkOptions): EventSink;
 //#endregion
 //#region src/blocks/work-items/events.d.ts
 /** The events of the `work-items` block: type to data. */
@@ -201,8 +46,42 @@ type WorkItemsEvents = {
 /** The `work-items` block's event types, for its manifest and `onBlockEvent`. */
 export declare const workItemsEvents: Events<WorkItemsEvents>;
 //#endregion
+//#region src/blocks/work-items/section.d.ts
+/** A pending write to a work item's checklist, for `useOptimistic`. */
+type WorkItemChecklistOptimisticAction = {
+  readonly type: "save";
+  readonly item: ChecklistItem;
+} | {
+  readonly type: "remove";
+  readonly id: string;
+};
+/**
+ * The checklist with a pending write applied: `save` adds the item or replaces
+ * the one with the same id, kept in rank order; `remove` takes it out.
+ */
+export declare function workItemChecklistOptimistic(state: readonly ChecklistItem[], action: WorkItemChecklistOptimisticAction): readonly ChecklistItem[];
+/**
+ * A work item's checklist, on the work item's own page: the subject is the work
+ * item (`{ type: "work_item", id }`, or its renamed type). A checklist change
+ * emits `work_item.updated`, which makes the section stale.
+ */
+export declare const workItemChecklistSection: Section<WorkItems, readonly ChecklistItem[], never, WorkItemChecklistOptimisticAction>;
+//#endregion
 //#region src/blocks/work-items/manifest.d.ts
 /** The `work-items` block's manifest (ADR 0029). */
-export declare const workItemsBlock: BlockOf<"work-items", typeof createWorkItems, WorkItemsEvents>;
+export declare const workItemsBlock: BlockOf<"work-items", typeof createWorkItems, WorkItemsEvents, Record<never, never>, "sink", {
+  readonly checklist: typeof workItemChecklistSection;
+}>;
+//#endregion
+//#region src/blocks/work-items/schemas.d.ts
+/** What `create` takes, with the bounds the SQL checks. */
+export declare const workItemInputSchema: EntitySchema<WorkItemInput>;
+/**
+ * One edit `update` takes. `field` is a built-in field or an extra column, so
+ * any name passes; the SQL rejects an unknown one.
+ */
+export declare const workItemChangeSchema: EntitySchema<WorkItemChange>;
+/** The options `list` takes. */
+export declare const workItemListFilterSchema: EntitySchema<WorkItemListOptions>;
 //#endregion
-export { type BlockHooks, type BlockTransport, type BlockTransportMiddleware, type CloseReason, type Iteration, type Project, type RpcClient, type WorkItem, type WorkItemChange, type WorkItemChangeResult, type WorkItemField, type WorkItemInput, type WorkItemListOptions, type WorkItemNode, type WorkItemState, type WorkItems, type WorkItemsEvents, type WorkItemsOptions, dbTransport, extendBlock, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };
+export { type BlockHooks, type BlockTransport, type BlockTransportMiddleware, type ChecklistItem, type ChecklistItemInput, type CloseReason, type Iteration, type Project, type RpcClient, type WorkItem, type WorkItemChange, type WorkItemChangeResult, type WorkItemChecklistOptimisticAction, type WorkItemField, type WorkItemInput, type WorkItemListOptions, type WorkItemNode, type WorkItemRecurrence, type WorkItemRecurrenceSinkOptions, type WorkItemState, type WorkItemWatchLevel, type WorkItemWatcher, type WorkItems, type WorkItemsEvents, type WorkItemsOptions, createWorkItems, dbTransport, extendBlock, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };