better-supabase 0.13.0 → 0.15.0

package/dist/events-vcqenSYU.d.ts

@@ -0,0 +1,852 @@
+/// <reference lib="esnext.temporal" />
+import { b as DbError } from "./result-DZeA5KS6.js";
+import { Ft as RequestContext, d as MutationIntent, f as MutationKind, m as Operation } from "./types-DFdg_4yN.js";
+import { n as Logger } from "./logger-DWVYUmwi.js";
+//#region src/core/event-map.d.ts
+/**
+ * Event maps: the types a block or an app emits and the data of each. Kept
+ * apart from `block-events.ts` so a block's `events.ts` pulls in no runtime
+ * beyond `defineEvents`.
+ */
+/** Event type to its data, such as `{ "message.sent": MessageEventData }`. */
+type EventMap = {
+  readonly [type: string]: object;
+};
+declare const EVENT_DATA: unique symbol;
+/** One event in `defineEvents`, carrying only its data type. */
+interface EventSpec<T extends object> {
+  readonly [EVENT_DATA]?: T;
+}
+/** The event `type` and its data type `T`, for `defineEvents`. */
+declare function event<T extends object>(): EventSpec<T>;
+/**
+ * A set of event types and, in its type, their data: a block's own events (the
+ * manifest's `events`) or the app's (`defineEvents`). `types` lists the types
+ * at runtime.
+ */
+interface Events<M extends EventMap = EventMap> {
+  /** The event types, the keys of `M`. */
+  readonly types: readonly string[];
+  /** Carries `M` in the type only; always absent. */
+  readonly "~map"?: M;
+}
+/** The event map an `Events` value carries. */
+type EventMapOf<E> = E extends Events<infer M> ? M : never;
+type DataOf<S> = S extends EventSpec<infer T> ? T : never;
+/**
+ * Declares events by type, so blocks, `defineBlocks` and `onBlockEvent` type
+ * their data: `defineEvents({ "invoice.sent": event<{ invoiceId: string }>()
+ * })`.
+ */
+declare function defineEvents<const S extends Readonly<Record<string, EventSpec<object>>>>(spec: S): Events<{ readonly [K in keyof S & string]: DataOf<S[K]>; }>;
+type UnionToIntersection<U> = (U extends unknown ? (value: U) => void : never) extends ((value: infer I) => void) ? I : never;
+/** One map with the events of every `Events` in the tuple. */
+type MergedEventMap<E extends readonly Events[]> = E extends readonly [] ? Record<never, never> : UnionToIntersection<EventMapOf<E[number]>> extends (infer M extends EventMap) ? M : never;
+/** Several `Events` as one, such as a block's events and the app's own. */
+declare function mergeEvents<const E extends readonly Events[]>(...events: E): Events<MergedEventMap<E>>;
+//#endregion
+//#region src/core/block-events.d.ts
+/**
+ * `support.*`: support sessions, where a platform admin views the app as a
+ * user.
+ */
+interface SupportEventData {
+  /** Absent on `support.denied`. */
+  readonly sessionId?: string;
+  readonly adminId: string;
+  readonly targetUserId: string;
+  readonly reason?: string;
+  readonly readOnly?: boolean;
+  readonly expiresAt?: Temporal.Instant;
+  /** `support.denied`: which check refused it. */
+  readonly denial?: "authorize" | "permission" | "policy" | "store";
+  /** `support.ended`: who or what ended it. */
+  readonly endedBy?: "admin" | "expired" | "revoked";
+  /** The organization the session is scoped to, when it has one. */
+  readonly organizationId?: string | null;
+}
+/** `organization.*`: organizations and their members. */
+interface OrganizationEventData {
+  readonly organizationId: string;
+  /** The member the event is about. */
+  readonly userId?: string;
+  readonly role?: string;
+  readonly previousRole?: string;
+}
+/** `invitation.*`. The token is never part of the event. */
+interface InvitationEventData {
+  readonly invitationId: string;
+  /** Absent for a platform-scope invitation. */
+  readonly organizationId?: string;
+  readonly email?: string;
+  readonly role?: string;
+}
+/** `notification.*`. */
+interface NotificationEventData {
+  readonly notificationId: string;
+  readonly organizationId?: string | null;
+  readonly type: string;
+  readonly recipientIds?: readonly string[];
+  readonly channel?: string;
+  readonly error?: string;
+}
+/**
+ * `notification.delivered`, `notification.failed` and the provider events
+ * (`opened`, `clicked`, `bounced`, `complained`, `delayed`): the record the
+ * notification is about is the subject, or the notification itself when it has
+ * none.
+ */
+interface NotificationDeliveryEventData extends NotificationEventData, SubjectEventData {
+  readonly organizationId: string | null;
+  readonly deliveryId?: string;
+  readonly provider?: string | null;
+  readonly providerEventId?: string | null;
+}
+/** `webhook.*`: outgoing webhooks. */
+interface WebhookEventData {
+  readonly endpointId: string;
+  readonly organizationId?: string;
+  /** `webhook.disabled`: when the endpoint started failing. */
+  readonly failingSince?: string;
+  readonly deliveryId?: string;
+  readonly eventType?: string;
+  /** The HTTP status of the attempt, when there was a response. */
+  readonly status?: number;
+  readonly attempt?: number;
+  readonly error?: string;
+}
+/** `billing.*`: Stripe customers, checkouts, subscriptions and seats. */
+interface BillingEventData {
+  readonly organizationId: string;
+  readonly customerId?: string;
+  /**
+   * The tenant's Stripe Accounts v2 account (`acct_`), when it is billed as
+   * one.
+   */
+  readonly accountId?: string;
+  readonly subscriptionId?: string;
+  /** The Stripe subscription status. */
+  readonly status?: string;
+  /** `billing.seats_synced`: the new and the previous quantity. */
+  readonly quantity?: number;
+  readonly previousQuantity?: number;
+  /** The Stripe event that caused it. */
+  readonly stripeEventId?: string;
+}
+/** `attachment.*`, written to the outbox by the attachments module. */
+interface AttachmentEventData {
+  readonly attachmentId: string;
+  readonly organizationId: string;
+  readonly uploadedBy?: string;
+  readonly subjectType?: string;
+  readonly subjectId?: string;
+  readonly mimeType?: string;
+  readonly size?: number;
+  /** `attachment.scanned`: `clean`, `infected` or `failed`. */
+  readonly status?: string;
+  /**
+   * The file's current version: on `attachment.uploaded`, `.replaced` and
+   * `.restored`.
+   */
+  readonly version?: number;
+}
+/** `data_export.*`, written to the outbox by the data-lifecycle module. */
+interface DataExportEventData {
+  readonly exportId: string;
+  readonly subject: "user" | "organization";
+  readonly organizationId?: string;
+  readonly userId?: string;
+  readonly requestedBy?: string;
+  /** `data_export.completed`: the object paths and when they stop being served. */
+  readonly files?: readonly string[];
+  readonly expiresAt?: string;
+  /** `data_export.failed`. */
+  readonly error?: string;
+}
+/**
+ * `organization.deletion_*` and `organization.purged`, from the data-lifecycle
+ * module.
+ */
+interface OrganizationDeletionEventData {
+  readonly organizationId: string;
+  /** Who requested or cancelled; absent for the purge. */
+  readonly userId?: string;
+  readonly purgeAfter?: string;
+}
+/** `legal_hold.*`, from the data-lifecycle module. */
+interface LegalHoldEventData {
+  readonly holdId: string;
+  /** Absent for a hold on every tenant. */
+  readonly organizationId?: string;
+  /** Absent for a hold on every kind. */
+  readonly kind?: string;
+  readonly reason: string;
+}
+/** `organization.domain_*`, from the sso module. */
+interface OrganizationDomainEventData {
+  readonly organizationId: string;
+  readonly domainId?: string;
+  readonly domain: string;
+  /** The member who verified it, when the app passed one. */
+  readonly userId?: string | null;
+}
+/** `waitlist.*`, from the waitlist module. */
+interface WaitlistEventData {
+  readonly entryId: string;
+  readonly email: string;
+}
+/**
+ * `invite_code.*`, from the waitlist module. The code itself is never part of
+ * the event.
+ */
+interface InviteCodeEventData {
+  readonly codeId: string;
+  readonly organizationId?: string | null;
+  readonly prefix: string;
+  readonly role?: string | null;
+}
+/** `sso_provider.*`, from the sso module. */
+interface SsoProviderEventData {
+  readonly organizationId: string;
+  readonly providerId: string;
+  readonly domains: readonly string[];
+  readonly userId?: string | null;
+}
+/** `scim_user.*` and `scim_group.*`, from the sso module. */
+interface ScimEventData {
+  readonly organizationId: string;
+  readonly scimUserId?: string;
+  readonly scimGroupId?: string;
+}
+/** `api_key.*`, from the api-keys module. The secret is never part of the event. */
+interface ApiKeyEventData {
+  readonly keyId: string;
+  readonly organizationId?: string | null;
+  readonly userId?: string | null;
+  readonly name: string;
+  readonly publicId: string;
+  /** `api_key.rotated`: the key it replaced. */
+  readonly previousKeyId?: string;
+}
+/** `organization_setting.*` and `platform_setting.*`, from the settings module. */
+interface SettingEventData {
+  readonly organizationId?: string;
+  readonly key: string;
+}
+/** `flag.*`, from the flags module. */
+interface FlagEventData {
+  readonly key: string;
+  /** `flag.override_set`: the variant, or `null` when the override was removed. */
+  readonly variant?: string | null;
+  readonly organizationId?: string | null;
+  readonly userId?: string | null;
+  /** `flag.override_set` on a custom context, such as `brand`. */
+  readonly context?: string | null;
+  readonly contextKey?: string | null;
+}
+/** `announcement.*`, from the announcements module. */
+interface AnnouncementEventData {
+  readonly announcementId: string;
+}
+/**
+ * `credential.*`, from the credentials module. The secret is never part of the
+ * event.
+ */
+interface CredentialEventData {
+  readonly provider: string;
+  readonly name: string;
+}
+/** `connector.*` and `connector_grant.*`, from the connectors module. */
+interface ConnectorEventData {
+  readonly organizationId: string;
+  readonly serverId: string;
+  readonly name?: string;
+  /** `connector.fingerprint_decided`. */
+  readonly fingerprint?: string;
+  readonly approved?: boolean;
+  /** `connector_grant.*`. */
+  readonly grantId?: string;
+  readonly userId?: string;
+}
+/** `agent.*`, from the agents module. */
+interface AgentEventData {
+  readonly organizationId: string;
+  readonly agentId: string;
+  readonly slug?: string;
+  readonly visibility?: string;
+  /** `agent.installed` and `agent.uninstalled`: the member. */
+  readonly userId?: string;
+}
+/**
+ * `ai_provider_key.*`, from the ai-keys module. Only the credential reference
+ * is stored.
+ */
+interface AiProviderKeyEventData {
+  readonly organizationId: string;
+  readonly keyId: string;
+  readonly provider: string;
+  readonly name: string;
+}
+/** `ai_tool_policy.set` and `ai_tool_approval.decided`, from the ai-chat module. */
+interface AiToolEventData {
+  readonly organizationId: string;
+  readonly tool: string;
+  readonly policy?: string | null;
+  readonly chatId?: string;
+  readonly approvalId?: string;
+  readonly decision?: string;
+}
+/**
+ * `incoming_webhook.*`, from the webhooks-in module. Secrets are never part of
+ * the event.
+ */
+interface IncomingWebhookEventData {
+  readonly organizationId: string;
+  readonly endpointId: string;
+  readonly name?: string;
+  readonly verify?: string;
+  readonly enabled?: boolean;
+  /** `incoming_webhook.token_rotated`: whether the secret changed too. */
+  readonly secretRotated?: boolean;
+}
+/** `inbox_conversation.*` and `inbox_message.received`, from the inbox module. */
+interface InboxEventData {
+  readonly conversationId: string;
+  readonly organizationId: string;
+  readonly inboxId: string;
+  readonly contactId?: string | null;
+  readonly assigneeId?: string | null;
+  readonly previousAssigneeId?: string | null;
+  readonly status?: string;
+  /** `inbox_message.received`. */
+  readonly messageId?: string;
+}
+/** `push.*`, from the push module. */
+interface PushDeviceEventData {
+  readonly deviceId: string;
+  readonly userId: string;
+  readonly platform?: string;
+  readonly provider?: string;
+}
+/** `workflow_run.*`, from the workflows module. */
+interface WorkflowRunEventData {
+  readonly runId: string;
+  readonly organizationId?: string | null;
+  readonly engine: string;
+  readonly externalId?: string | null;
+  readonly definition?: string | null;
+  readonly status: string;
+  readonly error?: string | null;
+  /** The record the run belongs to, when it was started on one. */
+  readonly subjectType?: string | null;
+  readonly subjectId?: string | null;
+}
+/**
+ * `workflow.published` and `workflow_alert.triggered`, from the workflow-editor
+ * module.
+ */
+interface WorkflowEventData {
+  readonly organizationId?: string | null;
+  readonly definitionId?: string;
+  readonly versionId?: string;
+  readonly version?: number;
+  /** `workflow_alert.triggered`. */
+  readonly alertId?: string;
+  readonly definition?: string;
+  readonly onEvent?: string;
+  readonly channel?: string;
+  readonly runId?: string;
+  readonly status?: string;
+  readonly error?: string | null;
+}
+/**
+ * `object.uploaded`, from the attachments module: a Storage object in a scanned
+ * bucket.
+ */
+interface StorageObjectEventData {
+  readonly bucket: string;
+  readonly path: string;
+}
+/** `audit.revealed`, from the audit module: who looked at restricted details. */
+interface AuditRevealEventData {
+  readonly organizationId?: string | null;
+  readonly entries: readonly string[];
+}
+/**
+ * `ai_chat.*` and `ai_chat_message.completed`, written to the outbox by the
+ * ai-chat module.
+ */
+interface AiChatEventData {
+  readonly chatId: string;
+  readonly organizationId: string;
+  readonly ownerId: string;
+  /** `ai_chat_message.completed`: the saved answer. */
+  readonly messageId?: string;
+  readonly model?: string;
+  /** `complete`, `aborted` or `error`. */
+  readonly status?: string;
+  /** `ai_chat.shared`: the share link and the message it ends at. */
+  readonly shareId?: string;
+  readonly leafId?: string;
+}
+/**
+ * The keys every subject-bound event carries in its data: the tenant and the
+ * record the event is about. Outbox consumers such as `activitySink` and
+ * `watcherSink` read these, so they work for every block without per-block
+ * code. The CloudEvent `subject` names the block's own row (a comment, a tag),
+ * and `partitionkey` repeats the tenant.
+ */
+interface SubjectEventData {
+  readonly organizationId: string | null;
+  readonly subjectType: string;
+  readonly subjectId: string;
+}
+/** The event types in `M` whose data is a `SubjectEventData`. */
+type SubjectEventType<M extends EventMap = EventMap> = { readonly [K in keyof M]: M[K] extends SubjectEventData ? K : never; }[keyof M] & string;
+/** `SaasEventData` for an event about one subject. */
+type SaasSubjectEventData = SaasEventData & SubjectEventData;
+/**
+ * Events from the generic SaaS blocks (numbers, teams, tags, status, fields,
+ * shares, reminders, imports, saved views, relations, bulk runs).
+ */
+interface SaasEventData {
+  readonly organizationId?: string | null;
+  readonly id?: string;
+  readonly entity?: string;
+  readonly period?: string;
+  readonly number?: number;
+  readonly subjectType?: string;
+  readonly subjectId?: string;
+  readonly from?: string;
+  readonly to?: string;
+  readonly reason?: string;
+  readonly userId?: string;
+  readonly kind?: string;
+  readonly name?: string;
+  readonly status?: string;
+  readonly count?: number;
+  readonly role?: string;
+  readonly error?: string | null;
+  /** The other end of a relation, for `subject.linked` and `subject.unlinked`. */
+  readonly targetType?: string;
+  readonly targetId?: string;
+  /** Rows that failed in a bulk run. */
+  readonly failed?: number;
+  /** When a `status.paused` pause ends, or `null` until it is resumed. */
+  readonly until?: string | null;
+  /** The lifecycle flag of a `status.flagged` event, and whether it is now on. */
+  readonly flag?: string;
+  readonly enabled?: boolean;
+}
+/** Events from the calendar and bookings blocks. */
+interface SchedulingEventData {
+  readonly organizationId?: string | null;
+  readonly id?: string;
+  readonly name?: string;
+  readonly calendarId?: string;
+  readonly resourceId?: string;
+  readonly serviceId?: string | null;
+}
+/**
+ * Events from the collaboration blocks (versions, trash, reactions, approvals,
+ * access requests, documents).
+ */
+interface CollaborationEventData extends SubjectEventData {
+  readonly id?: string;
+  readonly number?: number;
+  readonly label?: string | null;
+  readonly source?: string;
+  readonly restoredFrom?: number;
+  /** The trash batch: a subject and the children trashed with it. */
+  readonly batchId?: string;
+  /** The emoji, or a custom emoji's `:shortcode:`. */
+  readonly emoji?: string;
+  /** Who reacted: a user id, or the name the service passed. */
+  readonly actor?: string;
+  /** A reaction's kind: `emoji`, or `vote` (whose `emoji` is `vote`). */
+  readonly kind?: "emoji" | "vote";
+  /** A vote's direction, `1` or `-1`; `1` for an emoji. */
+  readonly value?: number;
+  /** The action an approval request is for, such as `publish`. */
+  readonly action?: string;
+  /** An approval request's status after the event. */
+  readonly status?: string;
+  /** The approval step the request is on, from 0. */
+  readonly step?: number;
+}
+/** Events from the access-requests module. */
+interface AccessRequestEventData {
+  readonly organizationId: string;
+  readonly userId: string;
+  readonly role: string;
+  /** The access request. */
+  readonly id: string;
+  readonly approvalId?: string | null;
+  /** When the granted role ends; null for a grant without a duration. */
+  readonly expiresAt?: string | null;
+  /** For `access.ended`: `expired` or `revoked`. */
+  readonly reason?: string;
+}
+/** Events from the documents module. */
+interface DocumentEventData extends SubjectEventData {
+  readonly organizationId: string;
+  /** The document. */
+  readonly id: string;
+  readonly name: string;
+}
+/** Events about a suggested change to a document. */
+interface DocumentSuggestionEventData extends DocumentEventData {
+  readonly suggestionId: string;
+  /** Who suggested the change. */
+  readonly authorId: string | null;
+  readonly status: "open" | "accepted" | "rejected" | "withdrawn";
+}
+/**
+ * Events from the catalog and inventory blocks. Amounts and quantities are
+ * text: JSON numbers lose `bigint` precision.
+ */
+interface CommerceEventData {
+  readonly organizationId: string | null;
+  readonly id?: string;
+  readonly slug?: string;
+  readonly kind?: string | null;
+  readonly from?: string;
+  readonly to?: string;
+  readonly productId?: string;
+  readonly variantId?: string;
+  readonly sku?: string;
+  readonly priceListId?: string | null;
+  readonly currency?: string;
+  readonly amount?: string;
+  readonly previousAmount?: string | null;
+  readonly locationId?: string;
+  readonly quantity?: string;
+  readonly reason?: string;
+  readonly status?: string;
+  readonly available?: string;
+  readonly reorderPoint?: string;
+  readonly supplierType?: string | null;
+  readonly supplierId?: string | null;
+  readonly orderId?: string;
+  readonly number?: string;
+  readonly customerId?: string | null;
+  readonly subtotal?: string;
+  readonly discountTotal?: string;
+  readonly shippingTotal?: string;
+  readonly taxTotal?: string;
+  readonly total?: string;
+  readonly refundedTotal?: string;
+  /** Units across the order's lines. */
+  readonly units?: string;
+  readonly invoiceNumber?: string | null;
+  readonly carrier?: string | null;
+  readonly trackingNumber?: string | null;
+  readonly promotionId?: string;
+  readonly code?: string | null;
+}
+/** `CommerceEventData` for an event about one subject, such as a variant. */
+type CommerceSubjectEventData = CommerceEventData & SubjectEventData;
+/** Events from the drive module. `subjectId` is the node. */
+interface DriveEventData extends SubjectEventData {
+  /** For `drive.node_created`: `folder` or `file`. */
+  readonly kind?: "folder" | "file";
+  /** For `drive.node_created` and `drive.node_renamed`. */
+  readonly name?: string;
+  /** For `drive.node_renamed`. */
+  readonly previousName?: string;
+  /** For `drive.node_created` and `drive.node_moved`; `null` at the root. */
+  readonly parentId?: string | null;
+  /** For `drive.node_moved`. */
+  readonly previousParentId?: string | null;
+  /**
+   * For `drive.node_shared` and `drive.node_unshared`: `user`, `team` or
+   * `role`.
+   */
+  readonly principalType?: string;
+  readonly principalId?: string;
+  /** For `drive.node_shared`. */
+  readonly role?: string;
+  /**
+   * For `drive.node_purged`: the stored objects to delete, as `{ bucket, path
+   * }`.
+   */
+  readonly objects?: readonly {
+    readonly bucket: string;
+    readonly path: string;
+  }[];
+}
+/** `form.created` and `form_version.published` from the forms module. */
+interface FormEventData {
+  readonly organizationId: string;
+  /** The form, or for `form_version.published` the version. */
+  readonly id: string;
+  readonly key?: string;
+  readonly formId?: string;
+  readonly number?: number;
+}
+/**
+ * Submission events from the forms module. The subject is the record the
+ * submission is linked to, or the form itself (`form`) when it has none.
+ */
+interface FormSubmissionEventData extends SubjectEventData {
+  readonly organizationId: string;
+  /** The submission. */
+  readonly id: string;
+  readonly formId: string;
+  readonly versionId?: string;
+  /** `member`, `public` or `service`. */
+  readonly source?: string;
+  /** For `form_submission.reviewed`: `submitted`, `accepted` or `rejected`. */
+  readonly status?: string;
+  /**
+   * For `form_submission.submitted` on a scored form: the points earned, out of
+   * `maxScore`.
+   */
+  readonly score?: number;
+  readonly maxScore?: number;
+  /** Against the pass mark; absent without one. */
+  readonly passed?: boolean;
+}
+/**
+ * Signature events from the signatures module. The subject is the record the
+ * request asks signers to sign.
+ */
+interface SignatureEventData extends SubjectEventData {
+  readonly organizationId: string;
+  /** The signature request. */
+  readonly id: string;
+  readonly versionId?: string;
+  /** For `signature.signed`: the signature. */
+  readonly signatureId?: string;
+  /** For `signature.signed` and `signature.declined`. */
+  readonly signer?: string;
+  /** For `signature.signed`: `drawn`, `typed` or `click`. */
+  readonly method?: string;
+}
+/** `template.published` from the templates module. */
+interface TemplateEventData {
+  readonly organizationId: string | null;
+  /** The template. */
+  readonly id: string;
+  readonly versionId: string;
+  readonly version: number;
+  /** The template type, such as `invoice`. */
+  readonly type: string;
+}
+/**
+ * `template.applied` from the templates module. The subject is the record the
+ * application created.
+ */
+interface TemplateApplicationEventData extends SubjectEventData {
+  readonly organizationId: string;
+  /** The application. */
+  readonly id: string;
+  readonly templateId: string;
+  readonly versionId: string;
+}
+/**
+ * Time entry events from the time-tracking module. `subjectType` and
+ * `subjectId` are null for time not tracked on a record.
+ */
+interface TimeEntryEventData {
+  readonly organizationId: string;
+  /** The time entry. */
+  readonly id: string;
+  readonly userId: string;
+  readonly subjectType: string | null;
+  readonly subjectId: string | null;
+  /** When the entry starts, the time metrics bucket its seconds by. */
+  readonly startedAt: string;
+  /** For `time_entry.updated`: when the entry started before the update. */
+  readonly previousStartedAt?: string;
+  /** For `time_entry.recorded` and `time_entry.updated`; null while running. */
+  readonly seconds?: number | null;
+  readonly billable?: boolean;
+  /** The hourly rate in minor units, as text (ADR 0037), when the entry has one. */
+  readonly rate?: string | null;
+  /** The rate's ISO 4217 currency code, set exactly when `rate` is. */
+  readonly rateCurrency?: string | null;
+}
+/** Timesheet events from the time-tracking module. */
+interface TimesheetEventData {
+  readonly organizationId: string;
+  /** The timesheet. */
+  readonly id: string;
+  readonly userId: string;
+  /** The Monday the week starts on, as `YYYY-MM-DD`. */
+  readonly week: string;
+  readonly approvalId: string | null;
+}
+type BlockEventType<M extends EventMap = EventMap> = keyof M & string;
+/**
+ * Event types that changed name in 0.6, old to new, for sinks and consumers
+ * that still receive the old ones (`BLOCK_EVENT_RENAMES[type] ?? type`).
+ * `better-supabase codemod 0.6` rewrites the string literals.
+ */
+declare const BLOCK_EVENT_RENAMES: Readonly<Record<string, string>>;
+/** Where an event came from, beyond its data. */
+interface BlockEventMeta {
+  /** E.g. `organizations/<id>`; becomes the CloudEvents `subject`. */
+  readonly subject?: string;
+  readonly tenant?: string;
+  /** The user who caused it. */
+  readonly actorId?: string;
+  readonly context?: RequestContext;
+}
+/**
+ * A block event as `betterSupabase.on('block', handler)` receives it. `M` types
+ * its data: a block's own events, or the union from `defineBlocks`.
+ */
+type BlockEvent<M extends EventMap = EventMap, K extends BlockEventType<M> = BlockEventType<M>> = { readonly [T in K]: BlockEventMeta & {
+  readonly type: T;
+  /** A copy: changing it never changes what the block does (invariant 5). */
+  readonly data: M[T];
+  readonly time: Temporal.Instant;
+}; }[K];
+/** A type, or a `prefix.*` pattern such as `support.*`. */
+type BlockEventPattern<M extends EventMap = EventMap> = BlockEventType<M> | `${BlockEventType<M> extends `${infer P}.${string}` ? P : never}.*`;
+/** The event types a pattern matches. */
+type BlockEventsMatching<M extends EventMap, P extends BlockEventPattern<M>> = P extends `${infer Prefix}.*` ? Extract<BlockEventType<M>, `${Prefix}.${string}`> : Extract<P, BlockEventType<M>>;
+/**
+ * Fixed OpenTelemetry attribute names for block work, so dashboards and queries
+ * can rely on them.
+ */
+declare const BLOCK_ATTRIBUTES: {
+  readonly event: "better_supabase.block.event";
+  readonly tenant: "better_supabase.tenant";
+  readonly actor: "better_supabase.actor.id";
+  readonly supportSessionId: "better_supabase.support.session_id";
+  readonly organizationId: "better_supabase.organization.id";
+  readonly invitationId: "better_supabase.invitation.id";
+  readonly notificationType: "better_supabase.notification.type";
+  readonly webhookEndpointId: "better_supabase.webhook.endpoint_id";
+};
+/** The `BLOCK_ATTRIBUTES` an event carries. */
+declare function blockEventAttributes(event: BlockEvent): Record<string, string>;
+/**
+ * Emits a block event on `events` with a copy of `data`. Does nothing without a
+ * `block` handler, so blocks call it unconditionally. `M` is the emitting
+ * block's event map.
+ */
+declare function emitBlockEvent<M extends EventMap, K extends BlockEventType<M> = BlockEventType<M>>(events: EventHub, type: K, data: M[K], meta?: BlockEventMeta): void;
+/** The `emit` of a block whose events are `M`. */
+type BlockEmit<M extends EventMap> = <K extends BlockEventType<M>>(type: K, data: M[K], subject: string, tenant?: string | null) => void;
+//#endregion
+//#region src/core/events.d.ts
+interface QueryEvent {
+  readonly table: string;
+  readonly operation: Operation["kind"];
+  readonly ok: boolean;
+  readonly durationMs: number;
+  readonly rows: number;
+  /**
+   * An unbounded read returned `maxRows` rows: PostgREST's `db-max-rows`
+   * probably cut it short. Add `limit` or use `page`.
+   */
+  readonly truncated: boolean;
+}
+interface MutationNotice {
+  readonly table: string;
+  readonly kind: MutationKind;
+  /** See `MutationEvent.intent`. */
+  readonly intent?: MutationIntent;
+  /** A copy of the returned rows: changing it never changes the result. */
+  readonly rows: readonly Readonly<Record<string, unknown>>[];
+  /** See `MutationEvent.keys`. */
+  readonly keys?: readonly Readonly<Record<string, unknown>>[];
+  /** See `MutationEvent.tenant`. */
+  readonly tenant?: string;
+  readonly context: RequestContext;
+}
+/**
+ * A successful RPC registered with `betterSupabase.defineRpc(name, {
+ * invalidates })`.
+ */
+interface RpcNotice {
+  readonly name: string;
+  /** App keys of the tables the function changes. */
+  readonly invalidates: readonly string[];
+  readonly context: RequestContext;
+}
+interface ErrorEvent {
+  readonly table?: string;
+  readonly error: DbError;
+}
+interface AuthEvent {
+  readonly source: "bearer" | "cookie" | "none";
+  readonly ok: boolean;
+  readonly userId?: string;
+  /**
+   * Why there is no user: the anon reason (`expired`, `signed_out`, ...) or the
+   * invalid reason (`token`, `claims`, `actor`).
+   */
+  readonly reason?: "none" | "expired" | "signed_out" | "refresh_failed" | "token" | "claims" | "actor";
+  /** The user's `source` as the resolver set it, e.g. a custom resolver's name. */
+  readonly rawSource?: string;
+}
+interface RefreshEvent {
+  readonly ok: boolean;
+  readonly shared: boolean;
+  readonly durationMs: number;
+  /**
+   * Why a failed refresh failed: `network` (Auth unreachable, timed out, or
+   * answering 5xx or 429; the session is kept), `raced` (another request
+   * rotated the token first; the cookies are kept) or `rejected` (the refresh
+   * token is dead; the user is signed out).
+   */
+  readonly reason?: "network" | "raced" | "rejected";
+  /** The Auth server's HTTP status, when it answered. */
+  readonly status?: number;
+  /** The Auth server's `error_code`, such as `refresh_token_not_found`. */
+  readonly code?: string;
+}
+/**
+ * A refresh that failed because the Auth server was unreachable, timed out or
+ * answered 5xx or 429. `kept`: the access token was still valid, so the request
+ * runs as the user; otherwise it runs as `anon` with `reason: "refresh_failed"`
+ * and the cookies stay untouched.
+ */
+interface AuthOutageEvent {
+  readonly cause: "network" | "timeout" | "status";
+  readonly status?: number;
+  readonly kept: boolean;
+  readonly durationMs: number;
+}
+interface BetterSupabaseEvents {
+  query: QueryEvent;
+  mutation: MutationNotice;
+  rpc: RpcNotice;
+  error: ErrorEvent;
+  auth: AuthEvent;
+  refresh: RefreshEvent;
+  /** Support sessions, organizations, invitations, notifications and webhooks. */
+  block: BlockEvent;
+}
+type EventName = keyof BetterSupabaseEvents;
+type EventHandler<K extends EventName> = (event: BetterSupabaseEvents[K]) => void;
+/**
+ * Observers only: a handler that throws is reported to the logger and never
+ * changes a result.
+ */
+declare class EventHub {
+  #private;
+  readonly logger: Logger;
+  /** The definition's `now` option; block events take their `time` from it. */
+  readonly now: (() => Temporal.Instant) | undefined;
+  constructor(logger?: Logger, now?: () => Temporal.Instant);
+  on<K extends EventName>(name: K, handler: EventHandler<K>): () => void;
+  has(name: EventName): boolean;
+  /**
+   * Keeps async work a handler started (a sink send) until it settles, so
+   * adapters can hand it to `after()` or `waitUntil`. Its outcome is ignored:
+   * handlers report their own failures.
+   */
+  track(work: PromiseLike<unknown>): void;
+  /** Whether tracked work is still running. */
+  get pending(): boolean;
+  /** Resolves once the work tracked so far has settled. Never rejects. */
+  settled(): Promise<void>;
+  emit<K extends EventName>(name: K, event: BetterSupabaseEvents[K]): void;
+}
+//#endregion
+export { SaasEventData as $, CollaborationEventData as A, FormEventData as B, BillingEventData as C, Events as Ct, BlockEventPattern as D, mergeEvents as Dt, BlockEventMeta as E, event as Et, DataExportEventData as F, InviteCodeEventData as G, InboxEventData as H, DocumentEventData as I, NotificationEventData as J, LegalHoldEventData as K, DocumentSuggestionEventData as L, CommerceSubjectEventData as M, ConnectorEventData as N, BlockEventType as O, CredentialEventData as P, PushDeviceEventData as Q, DriveEventData as R, BLOCK_EVENT_RENAMES as S, EventSpec as St, BlockEvent as T, defineEvents as Tt, IncomingWebhookEventData as U, FormSubmissionEventData as V, InvitationEventData as W, OrganizationDomainEventData as X, OrganizationDeletionEventData as Y, OrganizationEventData as Z, AnnouncementEventData as _, WorkflowRunEventData as _t, EventHandler as a, SsoProviderEventData as at, AuditRevealEventData as b, EventMap as bt, MutationNotice as c, SubjectEventType as ct, RpcNotice as d, TemplateEventData as dt, SaasSubjectEventData as et, AccessRequestEventData as f, TimeEntryEventData as ft, AiToolEventData as g, WorkflowEventData as gt, AiProviderKeyEventData as h, WebhookEventData as ht, ErrorEvent as i, SignatureEventData as it, CommerceEventData as j, BlockEventsMatching as k, QueryEvent as l, SupportEventData as lt, AiChatEventData as m, WaitlistEventData as mt, AuthOutageEvent as n, ScimEventData as nt, EventHub as o, StorageObjectEventData as ot, AgentEventData as p, TimesheetEventData as pt, NotificationDeliveryEventData as q, BetterSupabaseEvents as r, SettingEventData as rt, EventName as s, SubjectEventData as st, AuthEvent as t, SchedulingEventData as tt, RefreshEvent as u, TemplateApplicationEventData as ut, ApiKeyEventData as v, blockEventAttributes as vt, BlockEmit as w, MergedEventMap as wt, BLOCK_ATTRIBUTES as x, EventMapOf as xt, AttachmentEventData as y, emitBlockEvent as yt, FlagEventData as z };