better-supabase 0.14.0 → 0.15.0

package/dist/authorization-HZdJCaVm.d.ts

@@ -0,0 +1,3595 @@
+import { t as BlockOptionsSchema } from "./options-CsGl5BLH.js";
+import { t as AssetsSqlOptions } from "./options-D1hSuf50.js";
+import { t as ContentSqlOptions } from "./options-_F-enoBs.js";
+import { t as CoursesSqlOptions } from "./options-Li1Dyu88.js";
+import { t as CreatedBySqlOptions } from "./options-CM6-18FQ.js";
+import { t as DispatchSqlOptions } from "./options-CyAhRKKm.js";
+import { t as EnrollmentsSqlOptions } from "./options-CSCXNYJO.js";
+import { t as LeadScoringSqlOptions } from "./options-DWVYM8P0.js";
+import { t as MailSyncSqlOptions } from "./options-DplE18Ko.js";
+import { t as MembershipsSqlOptions } from "./options-DINdgVih.js";
+import { t as ModerationSqlOptions } from "./options-DlohRAYd.js";
+import { t as PassesSqlOptions } from "./options-DcOx8_3X.js";
+import { t as PostsSqlOptions } from "./options-D6as77gU.js";
+import { t as ScoresSqlOptions } from "./options-D0bzZx9a.js";
+import { t as SegmentsSqlOptions } from "./options-pOVWwbAK.js";
+import { t as SequencesSqlOptions } from "./options-y_-AkVCs.js";
+import { t as ShipmentsSqlOptions } from "./options-BlzSfWxC.js";
+import { t as SignaturesSqlOptions } from "./options-CE93HOYi.js";
+import { t as UpdatedAtSqlOptions } from "./options-DChZoVfs.js";
+//#region src/blocks/name-registry.generated.d.ts
+/** The names each module's `blocks.<name>` config keys accept. */
+interface BlockNameRegistry {
+  readonly "access-requests": {
+    readonly tables: {
+      readonly "requests": "id" | "tenant" | "user" | "role" | "previousRole" | "reason" | "duration" | "approval" | "grantedAt" | "expiresAt" | "endedAt" | "createdAt";
+    };
+    readonly functions: "end_access" | "expire_access_grants" | "get_access_request" | "grant_access_request" | "list_access_requests" | "request_access";
+    readonly actions: "read" | "create" | "manage";
+    readonly hooks: "before_access_request" | "after_access_request" | "before_access_grant" | "after_access_grant";
+    readonly entities: {
+      readonly "request": "id" | "tenant_id" | "user_id" | "role" | "previous_role" | "reason" | "duration" | "approval_id" | "granted_at" | "expires_at" | "ended_at" | "created_at";
+    };
+    readonly primary: "request";
+  };
+  readonly "activities": {
+    readonly tables: {
+      readonly "engagements": "id" | "tenant" | "type" | "title" | "body" | "outcome" | "owner" | "dueAt" | "doneAt" | "durationSeconds" | "externalRef" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "links": "tenant" | "engagement" | "subjectType" | "subjectId" | "position";
+      readonly "recordings": "id" | "tenant" | "engagement" | "file" | "filename" | "mediaType" | "status" | "language" | "durationSeconds" | "error" | "model" | "createdBy" | "createdAt" | "transcribedAt";
+      readonly "segments": "recording" | "tenant" | "position" | "speaker" | "speakerUser" | "startsMs" | "endsMs" | "text" | "confidence";
+      readonly "notes": "engagement" | "tenant" | "summary" | "actionItems" | "model" | "source" | "createdBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "complete_engagement" | "delete_engagement" | "engagements_of" | "log_engagement" | "next_engagement" | "open_engagements" | "update_engagement";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: "before_engagement_log" | "after_engagement_log";
+    readonly entities: {
+      readonly "engagement": "id" | "tenant_id" | "type" | "title" | "body" | "outcome" | "owner_user_id" | "due_at" | "done_at" | "duration_seconds" | "external_ref" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "engagement";
+  };
+  readonly "agents": {
+    readonly tables: {
+      readonly "agents": "id" | "tenant" | "owner" | "slug" | "name" | "description" | "instructions" | "model" | "tools" | "connectors" | "knowledgeScope" | "starters" | "visibility" | "publishedAt" | "installCount" | "ratingCount" | "ratingSum" | "createdAt" | "updatedAt";
+      readonly "installs": "agent" | "user" | "tenant" | "installedAt";
+      readonly "ratings": "agent" | "user" | "rating" | "comment" | "createdAt";
+      readonly "skills": "id" | "agent" | "provider" | "reference" | "createdAt";
+    };
+    readonly functions: "delete_agent" | "get_agent" | "install_agent" | "list_agents" | "publish_agent" | "rate_agent" | "save_agent" | "set_agent_skills";
+    readonly actions: "read" | "create" | "publish" | "moderate";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "agent": "id" | "organization_id" | "owner_id" | "slug" | "name" | "description" | "instructions" | "model" | "tools" | "connector_ids" | "knowledge_scope" | "starters" | "visibility" | "published_at" | "install_count" | "rating_count" | "rating_sum" | "created_at" | "updated_at";
+    };
+    readonly primary: "agent";
+  };
+  readonly "ai-cache": {
+    readonly tables: {
+      readonly "entries": "key" | "tenant" | "kind" | "model" | "value" | "hits" | "createdAt" | "lastHitAt" | "expiresAt";
+    };
+    readonly functions: "ai_cache_delete" | "ai_cache_get" | "ai_cache_set" | "purge_ai_cache";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "ai-chat": {
+    readonly tables: {
+      readonly "projects": "id" | "tenant" | "owner" | "name" | "instructions" | "model" | "pinned" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "chats": "id" | "tenant" | "owner" | "project" | "agent" | "title" | "model" | "visibility" | "pinned" | "archivedAt" | "temporary" | "expiresAt" | "leaf" | "activeStream" | "activeRun" | "lastMessageAt" | "createdAt" | "updatedAt" | "search";
+      readonly "messages": "chat" | "id" | "parent" | "owner" | "role" | "parts" | "format" | "native" | "metadata" | "model" | "status" | "seq" | "createdAt" | "search";
+      readonly "runs": "id" | "chat" | "owner" | "message" | "stream" | "engine" | "externalRun" | "model" | "status" | "generation" | "usage" | "cost" | "error" | "startedAt" | "endedAt";
+      readonly "approvals": "id" | "chat" | "owner" | "run" | "message" | "tool" | "toolCall" | "input" | "decision" | "reason" | "signature" | "decidedBy" | "decidedAt" | "createdAt";
+      readonly "policies": "tenant" | "tool" | "policy" | "updatedAt";
+      readonly "inputs": "id" | "chat" | "owner" | "run" | "toolCall" | "question" | "schema" | "answer" | "answeredAt" | "createdAt";
+      readonly "sources": "chat" | "message" | "source" | "kind" | "url" | "title" | "metadata";
+      readonly "feedback": "chat" | "message" | "user" | "rating" | "reason" | "comment" | "createdAt" | "updatedAt";
+      readonly "shares": "id" | "chat" | "tokenHash" | "leaf" | "createdBy" | "createdAt" | "revokedAt";
+      readonly "models": "id" | "provider" | "name" | "pricing" | "capabilities" | "plans" | "enabled" | "refreshedAt";
+      readonly "moderation": "id" | "tenant" | "chat" | "message" | "user" | "stage" | "category" | "score" | "action" | "createdAt";
+      readonly "steps": "id" | "run" | "chat" | "owner" | "key" | "label" | "status" | "detail" | "startedAt" | "endedAt";
+      readonly "sandboxes": "id" | "tenant" | "user" | "chat" | "harness" | "provider" | "sandbox" | "container" | "status" | "metadata" | "idleSeconds" | "error" | "lastUsedAt" | "expiresAt" | "stoppedAt" | "createdAt" | "updatedAt";
+      readonly "harness": "chat" | "harness" | "owner" | "resume" | "continue" | "status" | "holder" | "lockedUntil" | "lastActiveAt" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "ai_chat_can_read" | "ai_chat_notify" | "ai_message_path" | "ai_message_path_of" | "ai_message_siblings" | "ai_sandbox_for" | "ai_tool_approval_approvable" | "ai_tool_policies_for" | "allowed_ai_models" | "answer_ai_pending_input" | "append_ai_user_message" | "apply_ai_tool_approval" | "attach_ai_run" | "claim_ai_chat_stream" | "create_ai_chat" | "decide_ai_tool_approval" | "delete_ai_chat" | "delete_ai_project" | "finish_ai_sandbox_stop" | "get_ai_chat" | "get_ai_run" | "get_ai_tool_approvals" | "get_shared_ai_chat" | "idle_ai_sandboxes" | "list_ai_chat_shares" | "list_ai_chats" | "list_ai_moderation_events" | "list_ai_projects" | "list_ai_run_steps" | "list_ai_runs" | "list_ai_sandboxes" | "list_pending_ai_tool_approvals" | "load_ai_harness_session" | "lock_ai_harness_session" | "open_ai_pending_input" | "purge_ai_chats" | "rate_ai_message" | "record_ai_moderation_event" | "record_ai_run_step" | "record_ai_tool_approval" | "register_ai_sandbox" | "release_ai_chat_stream" | "request_ai_chat_stop" | "revoke_ai_chat_share" | "save_ai_assistant_message" | "save_ai_harness_session" | "save_ai_project" | "set_ai_run_cost" | "set_ai_tool_policy" | "share_ai_chat" | "switch_ai_branch" | "touch_ai_sandbox" | "unlock_ai_harness_session" | "update_ai_chat" | "upsert_ai_models";
+    readonly actions: "read" | "create" | "share" | "moderate" | "admin";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "chat": "id" | "organization_id" | "owner_id" | "project_id" | "agent_id" | "title" | "model" | "visibility" | "pinned" | "archived_at" | "is_temporary" | "expires_at" | "current_leaf_id" | "active_stream_id" | "active_run_id" | "last_message_at" | "created_at" | "updated_at" | "search_tsv";
+      readonly "project": "id" | "organization_id" | "owner_id" | "name" | "instructions" | "default_model" | "pinned" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "chat";
+  };
+  readonly "ai-files": {
+    readonly tables: {
+      readonly "files": "id" | "tenant" | "owner" | "chat" | "project" | "bucket" | "path" | "mediaType" | "filename" | "size" | "sha256" | "status" | "source" | "createdAt" | "uploadedAt" | "expiresAt";
+      readonly "providerFiles": "file" | "provider" | "reference" | "expiresAt" | "createdAt";
+      readonly "documents": "id" | "tenant" | "owner" | "chat" | "kind" | "title" | "version" | "createdAt" | "updatedAt";
+      readonly "versions": "document" | "version" | "content" | "storagePath" | "message" | "createdBy" | "createdAt";
+      readonly "suggestions": "id" | "document" | "version" | "original" | "suggested" | "description" | "createdBy" | "createdAt" | "resolvedAt" | "accepted";
+    };
+    readonly functions: "ai_file_object_allowed" | "confirm_ai_file" | "create_ai_document" | "delete_ai_document" | "delete_ai_file" | "expiring_ai_provider_files" | "get_ai_document" | "get_ai_file" | "get_ai_file_by_path" | "get_ai_provider_file" | "list_ai_document_versions" | "list_ai_files" | "list_ai_suggestions" | "purge_ai_files" | "reserve_ai_file" | "resolve_ai_suggestion" | "rollback_ai_document" | "set_ai_provider_file" | "store_ai_file" | "suggest_ai_document_edit" | "update_ai_document";
+    readonly actions: "upload" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "document": "id" | "organization_id" | "owner_id" | "chat_id" | "kind" | "title" | "current_version" | "created_at" | "updated_at";
+    };
+    readonly primary: "document";
+  };
+  readonly "ai-keys": {
+    readonly tables: {
+      readonly "keys": "id" | "tenant" | "provider" | "name" | "credentialRef" | "settings" | "enabled" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "batches": "id" | "tenant" | "user" | "provider" | "reference" | "status" | "rawStatus" | "itemCount" | "counts" | "error" | "metadata" | "resultsSaved" | "polls" | "nextPollAt" | "expiresAt" | "completedAt" | "createdAt" | "updatedAt";
+      readonly "items": "batch" | "request" | "tenant" | "status" | "output" | "usage" | "error" | "createdAt";
+    };
+    readonly functions: "ai_provider_keys_for" | "delete_ai_provider_key" | "delete_ai_provider_keys" | "due_ai_batches" | "get_ai_batch" | "list_ai_batch_items" | "list_ai_batches" | "list_ai_provider_keys" | "record_ai_batch" | "save_ai_batch_items" | "save_ai_provider_key" | "update_ai_batch";
+    readonly actions: "use" | "manage";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "ai-schedules": {
+    readonly tables: {
+      readonly "tasks": "id" | "tenant" | "user" | "chat" | "agent" | "title" | "prompt" | "cron" | "timezone" | "enabled" | "nextRunAt" | "lastRunAt" | "createdAt" | "updatedAt";
+      readonly "runs": "id" | "task" | "tenant" | "user" | "status" | "scheduledFor" | "chat" | "error" | "startedAt" | "finishedAt" | "createdAt";
+    };
+    readonly functions: "claim_due_ai_tasks" | "delete_ai_task" | "finish_ai_task_run" | "list_ai_task_runs" | "list_ai_tasks" | "save_ai_task" | "schedule_ai_tasks" | "start_ai_task_run";
+    readonly actions: "create" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "task": "id" | "organization_id" | "user_id" | "chat_id" | "agent_id" | "title" | "prompt" | "cron" | "timezone" | "enabled" | "next_run_at" | "last_run_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "task";
+  };
+  readonly "announcements": {
+    readonly tables: {
+      readonly "announcements": "id" | "title" | "body" | "severity" | "href" | "audience" | "targets" | "startsAt" | "endsAt" | "dismissible" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "dismissals": "announcement" | "user" | "dismissedAt";
+    };
+    readonly functions: "active_announcements" | "broadcast_announcement" | "delete_announcement" | "dismiss_announcement" | "list_announcements" | "save_announcement";
+    readonly actions: "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "announcement": "id" | "title" | "body" | "severity" | "href" | "audience" | "targets" | "starts_at" | "ends_at" | "dismissible" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "announcement";
+  };
+  readonly "api-keys": {
+    readonly tables: {
+      readonly "keys": "id" | "tenant" | "user" | "name" | "prefix" | "publicId" | "secretHash" | "scopes" | "kind" | "rateLimit" | "windowStart" | "windowHits" | "expiresAt" | "lastUsedAt" | "revokedAt" | "rotatedFrom" | "createdBy" | "createdAt";
+    };
+    readonly functions: "api_key_tenant" | "create_api_key" | "has_scope" | "list_api_keys" | "revoke_api_key" | "rotate_api_key" | "verify_api_key";
+    readonly actions: "manage" | "own";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "key": "id" | "organization_id" | "user_id" | "name" | "prefix" | "public_id" | "secret_hash" | "scopes" | "kind" | "rate_limit" | "window_start" | "window_hits" | "expires_at" | "last_used_at" | "revoked_at" | "rotated_from" | "created_by" | "created_at";
+    };
+    readonly primary: "key";
+  };
+  readonly "approvals": {
+    readonly tables: {
+      readonly "requests": "id" | "tenant" | "subjectType" | "subjectId" | "action" | "policy" | "step" | "status" | "requestedBy" | "reason" | "payload" | "expiresAt" | "remindedAt" | "decidedAt" | "createdAt";
+      readonly "decisions": "id" | "request" | "tenant" | "step" | "approver" | "decision" | "delegateTo" | "comment" | "createdAt";
+    };
+    readonly functions: "approval_eligible" | "approval_finalize" | "approval_notify" | "approval_policy" | "cancel_approval" | "decide_approval" | "delegate_approval" | "expire_approvals" | "get_approval" | "is_approved" | "list_approvals" | "open_approval" | "remind_approvals" | "request_approval";
+    readonly actions: "read" | "request" | "manage";
+    readonly hooks: "before_approval_request" | "after_approval_request" | "before_approval_decide" | "after_approval_decide";
+    readonly entities: {
+      readonly "approval": "id" | "tenant_id" | "subject_type" | "subject_id" | "action" | "policy" | "step" | "status" | "requested_by" | "reason" | "payload" | "expires_at" | "reminded_at" | "decided_at" | "created_at";
+    };
+    readonly primary: "approval";
+  };
+  readonly "assets": {
+    readonly tables: {
+      readonly "locations": "id" | "tenant" | "parent" | "kind" | "name" | "code" | "address" | "latitude" | "longitude" | "metadata" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "assets": "id" | "tenant" | "location" | "kind" | "name" | "tag" | "serial" | "status" | "assigneeType" | "assigneeId" | "latitude" | "longitude" | "metadata" | "retiredAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "assignments": "id" | "tenant" | "asset" | "assigneeType" | "assigneeId" | "note" | "assignedBy" | "assignedAt" | "releasedAt";
+    };
+    readonly functions: "archive_asset_location" | "asset_assignment_history" | "asset_location_check_parent" | "asset_locations_at" | "assets_near" | "assign_asset" | "create_asset" | "create_asset_location" | "get_asset" | "get_asset_location" | "list_asset_locations" | "list_assets" | "release_asset" | "set_asset_link" | "update_asset" | "update_asset_location";
+    readonly actions: "read" | "manage" | "assign";
+    readonly hooks: "before_asset_assign" | "after_asset_assign";
+    readonly entities: {
+      readonly "asset": "id" | "tenant_id" | "location_id" | "kind" | "name" | "tag" | "serial_number" | "status" | "assignee_type" | "assignee_id" | "latitude" | "longitude" | "metadata" | "retired_at" | "created_by" | "created_at" | "updated_at";
+      readonly "asset_location": "id" | "tenant_id" | "parent_id" | "kind" | "name" | "code" | "address" | "latitude" | "longitude" | "metadata" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "asset";
+  };
+  readonly "assignment": {
+    readonly tables: {
+      readonly "queues": "id" | "tenant" | "name" | "subjectType" | "strategy" | "conditions" | "rank" | "enabled" | "createdAt" | "updatedAt";
+      readonly "members": "queue" | "tenant" | "user" | "weight" | "active" | "credit" | "assignedCount" | "lastAssignedAt";
+      readonly "log": "id" | "tenant" | "queue" | "subjectType" | "subjectId" | "user" | "assignedAt";
+    };
+    readonly functions: "assign_subject" | "assignment_history" | "list_assignment_queues" | "remove_assignment_queue" | "save_assignment_queue" | "set_assignment_members";
+    readonly actions: "read" | "manage" | "assign";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "assignment_queue": "id" | "tenant_id" | "name" | "subject_type" | "strategy" | "conditions" | "rank" | "enabled" | "created_at" | "updated_at";
+    };
+    readonly primary: "assignment_queue";
+  };
+  readonly "attachments": {
+    readonly tables: {
+      readonly "attachments": "id" | "tenant" | "subjectType" | "subjectId" | "bucket" | "path" | "name" | "mimeType" | "size" | "status" | "detail" | "uploadedBy" | "createdAt" | "uploadedAt" | "scannedAt" | "metadata" | "version" | "width" | "height" | "pages";
+      readonly "versions": "id" | "tenant" | "attachment" | "version" | "bucket" | "path" | "name" | "mimeType" | "size" | "width" | "height" | "pages" | "status" | "detail" | "uploadedBy" | "uploadedAt" | "scannedAt" | "archivedAt";
+      readonly "scans": "bucket" | "path" | "status" | "detail" | "createdAt" | "scannedAt";
+    };
+    readonly functions: "attachment_object_allowed" | "attachment_object_visible" | "attachment_subject_readable" | "confirm_attachment" | "create_attachment" | "delete_attachment" | "get_attachment" | "list_attachment_versions" | "list_attachments" | "object_clean" | "object_scan" | "replace_attachment" | "restore_attachment_version" | "set_attachment_status" | "set_object_scan";
+    readonly actions: "read" | "upload" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "attachment": "id" | "organization_id" | "subject_type" | "subject_id" | "bucket" | "object_path" | "name" | "mime_type" | "size" | "status" | "scan_detail" | "uploaded_by" | "created_at" | "uploaded_at" | "scanned_at" | "metadata" | "version" | "width" | "height" | "pages";
+    };
+    readonly primary: "attachment";
+  };
+  readonly "audit": {
+    readonly tables: {
+      readonly "log": "id" | "table" | "record" | "op" | "old" | "new" | "changed" | "actor" | "actorRole" | "tenant" | "occurredAt" | "impersonatedBy" | "impersonationReason" | "supportSession" | "eventType" | "category" | "outcome" | "source" | "targetType" | "metadata" | "idempotencyKey" | "actorKind" | "actorLabel" | "tenantLabel" | "targetLabel" | "summary" | "requestId" | "correlationId" | "scope";
+      readonly "restricted": "entry" | "old" | "new" | "ip" | "userAgent" | "metadata" | "sessionId" | "changedValues";
+    };
+    readonly functions: "audit" | "audit_event" | "audit_event_many" | "audit_read_tenants" | "audit_reads_all" | "count_audit_events" | "list_audit_events" | "purge_audit_log";
+    readonly actions: "view" | "viewAll" | "revert";
+    readonly hooks: "audit_retention";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "automations": {
+    readonly tables: {
+      readonly "rules": "id" | "tenant" | "subjectType" | "trigger" | "name" | "description" | "conditions" | "actions" | "enabled" | "stopProcessing" | "rank" | "version" | "createdBy" | "updatedBy" | "createdAt" | "updatedAt" | "defaultKey";
+      readonly "defaults": "key" | "block" | "subjectType" | "trigger" | "name" | "description" | "conditions" | "actions" | "enabled" | "updatedAt";
+      readonly "versions": "rule" | "version" | "tenant" | "name" | "conditions" | "actions" | "savedBy" | "savedAt";
+      readonly "evaluations": "id" | "tenant" | "rule" | "version" | "subjectType" | "subjectId" | "trigger" | "matched" | "results" | "mode" | "evaluatedBy" | "evaluatedAt";
+      readonly "fields": "subjectType" | "id" | "label" | "description" | "type" | "path" | "columnType" | "nullable" | "options" | "operators" | "position" | "updatedAt";
+    };
+    readonly functions: "install_default_rules" | "matching_rules" | "rank_rule" | "record_rule_evaluation" | "remove_rule" | "reset_default_rule" | "rule_boolean" | "rule_bounds" | "rule_check" | "rule_date" | "rule_equal" | "rule_evaluate" | "rule_evaluations_list" | "rule_field_map" | "rule_fields_list" | "rule_get" | "rule_list" | "rule_matches" | "rule_moment" | "rule_node" | "rule_numeric" | "rule_positive" | "rule_text" | "rule_versions_list" | "rules_list" | "run_rules" | "save_rule" | "set_rule_enabled" | "sync_rule_fields";
+    readonly actions: "read" | "edit" | "publish" | "admin";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "rule": "id" | "organization_id" | "subject_type" | "trigger" | "name" | "description" | "conditions" | "actions" | "enabled" | "stop_processing" | "rank" | "version" | "created_by" | "updated_by" | "created_at" | "updated_at" | "default_key";
+    };
+    readonly primary: "rule";
+  };
+  readonly "billable-time": {
+    readonly tables: {
+      readonly "rates": "id" | "tenant" | "user" | "subjectType" | "subjectId" | "rate" | "currency" | "effectiveFrom" | "createdBy" | "createdAt";
+      readonly "billed": "entry" | "tenant" | "invoice" | "rate" | "currency" | "seconds" | "createdAt";
+    };
+    readonly functions: "billable_time_guard" | "billable_time_release" | "delete_time_rate" | "invoice_from_time" | "list_invoiced_time" | "list_time_rates" | "set_time_rate" | "time_rate" | "unbilled_time";
+    readonly actions: "read" | "manage" | "invoice";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "time_rate": "id" | "tenant_id" | "user_id" | "subject_type" | "subject_id" | "rate" | "currency" | "effective_from" | "created_by" | "created_at";
+    };
+    readonly primary: "time_rate";
+  };
+  readonly "billing": {
+    readonly tables: {
+      readonly "customers": "tenant" | "customer" | "account" | "createdAt";
+      readonly "subscriptions": "tenant" | "subscription" | "status" | "price" | "plan" | "periodEnd" | "cancelAt" | "eventAt" | "updatedAt";
+    };
+    readonly functions: "billing_account" | "billing_all_customers" | "billing_all_invoices" | "billing_all_subscriptions" | "billing_customer" | "billing_customer_details" | "billing_customer_tenant" | "billing_invoices" | "billing_payment_methods" | "billing_plan_price" | "billing_platform_customers" | "billing_platform_invoices" | "billing_platform_subscriptions" | "billing_seat_count" | "billing_status" | "billing_stripe_rows" | "billing_subscription" | "billing_subscription_item" | "billing_tax_ids" | "billing_tenant_subscription" | "link_billing_account" | "link_billing_customer";
+    readonly actions: "read" | "manage" | "viewAll";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "bookings": {
+    readonly tables: {
+      readonly "resources": "id" | "tenant" | "name" | "kind" | "capacity" | "tz" | "calendar" | "host" | "checkBusy" | "active" | "createdAt";
+      readonly "availability": "id" | "tenant" | "resource" | "weekday" | "startsAt" | "endsAt";
+      readonly "exceptions": "id" | "tenant" | "resource" | "during" | "available" | "reason";
+      readonly "services": "id" | "tenant" | "name" | "duration" | "bufferBefore" | "bufferAfter" | "resourceKinds" | "step" | "minNotice" | "holdFor" | "reminderOffsets" | "active" | "createdAt";
+      readonly "bookings": "id" | "tenant" | "resource" | "service" | "seat" | "during" | "blocked" | "status" | "holdExpiresAt" | "customerName" | "customerEmail" | "customerUser" | "notes" | "accessHash" | "calendarEvent" | "createdBy" | "createdAt" | "updatedAt" | "cancelledAt" | "cancelReason" | "series";
+      readonly "series": "id" | "tenant" | "service" | "resource" | "rule" | "startsAt" | "tz" | "customerName" | "customerEmail" | "customerUser" | "status" | "endsAt" | "createdBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "add_booking_exception" | "available_slots" | "booking_slots" | "cancel_booking" | "change_booking" | "confirm_booking" | "delete_booking_exception" | "expire_booking_holds" | "expire_booking_holds_in" | "hold_booking" | "list_bookings" | "place_booking" | "save_booking_resource" | "save_booking_service" | "set_booking_availability";
+    readonly actions: "manage" | "create" | "read";
+    readonly hooks: "before_booking_reserve" | "after_booking_reserve" | "after_booking_confirm" | "after_booking_cancel";
+    readonly entities: {
+      readonly "booking": "id" | "tenant_id" | "resource_id" | "service_id" | "seat" | "during" | "blocked" | "status" | "hold_expires_at" | "customer_name" | "customer_email" | "customer_user_id" | "notes" | "access_hash" | "calendar_event_id" | "created_by" | "created_at" | "updated_at" | "cancelled_at" | "cancel_reason" | "series_id";
+    };
+    readonly primary: "booking";
+  };
+  readonly "bulk": {
+    readonly tables: {
+      readonly "runs": "id" | "tenant" | "subjectType" | "action" | "args" | "ids" | "position" | "succeeded" | "failed" | "results" | "status" | "createdBy" | "createdAt" | "finishedAt";
+    };
+    readonly functions: "bulk_apply" | "bulk_row" | "bulk_run" | "bulk_step" | "start_bulk";
+    readonly actions: "run";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "calendar": {
+    readonly tables: {
+      readonly "calendars": "id" | "tenant" | "name" | "tz" | "color" | "ownerType" | "ownerId" | "createdAt";
+      readonly "events": "id" | "tenant" | "calendar" | "uid" | "title" | "description" | "location" | "startsAt" | "endsAt" | "allDay" | "tz" | "status" | "rrule" | "exdates" | "recurrence" | "originalStart" | "subjectType" | "subjectId" | "color" | "kind" | "transparency" | "autoDecline" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "attendees": "id" | "tenant" | "event" | "email" | "name" | "user" | "role" | "response";
+      readonly "workingHours": "id" | "tenant" | "user" | "weekday" | "startsAt" | "endsAt" | "tz";
+    };
+    readonly functions: "calendar_attendee_auto_decline" | "calendar_block_auto_decline" | "calendar_busy_blocks" | "calendar_free_busy" | "calendar_rule_starts" | "cancel_calendar_occurrence" | "create_calendar" | "delete_calendar" | "delete_calendar_event" | "import_calendar_events" | "list_calendar_events" | "list_calendar_working_hours" | "list_calendars" | "remove_calendar_attendee" | "respond_calendar_event" | "save_calendar_event" | "set_calendar_attendee" | "set_calendar_working_hours" | "split_calendar_event";
+    readonly actions: "manage" | "write" | "read";
+    readonly hooks: "before_calendar_event_save" | "after_calendar_event_save";
+    readonly entities: {
+      readonly "calendar_event": "id" | "tenant_id" | "calendar_id" | "uid" | "title" | "description" | "location" | "starts_at" | "ends_at" | "all_day" | "tz" | "status" | "rrule" | "exdates" | "recurrence_id" | "original_start" | "subject_type" | "subject_id" | "color" | "kind" | "transparency" | "auto_decline" | "created_by" | "created_at" | "updated_at";
+      readonly "calendar": "id" | "tenant_id" | "name" | "tz" | "color" | "owner_type" | "owner_id" | "created_at";
+    };
+    readonly primary: "calendar_event";
+  };
+  readonly "catalog": {
+    readonly tables: {
+      readonly "products": "id" | "tenant" | "slug" | "title" | "description" | "kind" | "status" | "createdAt" | "updatedAt";
+      readonly "options": "id" | "tenant" | "product" | "name" | "rank";
+      readonly "optionValues": "id" | "tenant" | "option" | "value" | "rank";
+      readonly "variants": "id" | "tenant" | "product" | "sku" | "title" | "barcode" | "weight" | "trackInventory" | "allowBackorder" | "rank" | "createdAt" | "updatedAt";
+      readonly "variantValues": "tenant" | "variant" | "value";
+      readonly "priceLists": "id" | "tenant" | "name" | "customerGroup" | "createdAt";
+      readonly "prices": "id" | "tenant" | "variant" | "priceList" | "currency" | "amount" | "compareAt" | "validFrom" | "validUntil" | "createdAt" | "updatedAt";
+      readonly "categories": "id" | "tenant" | "parent" | "name" | "slug" | "description" | "rank" | "createdAt" | "updatedAt";
+      readonly "productCategories": "tenant" | "product" | "category";
+      readonly "collections": "id" | "tenant" | "title" | "slug" | "kind" | "rule" | "createdAt" | "updatedAt";
+      readonly "collectionProducts": "tenant" | "collection" | "product" | "rank";
+      readonly "storefronts": "tenant" | "publishedAt";
+      readonly "channels": "id" | "tenant" | "key" | "name" | "currency" | "priceList" | "active" | "createdAt" | "updatedAt";
+      readonly "channelProducts": "tenant" | "channel" | "product" | "listedAt";
+      readonly "productTranslations": "tenant" | "product" | "locale" | "title" | "description" | "updatedAt";
+      readonly "variantTranslations": "tenant" | "variant" | "locale" | "title" | "updatedAt";
+      readonly "media": "id" | "tenant" | "product" | "variant" | "attachment" | "position" | "alt" | "createdAt";
+    };
+    readonly functions: "add_to_collection" | "channel_price" | "channel_products" | "currency_minor_units" | "delete_catalog_channel" | "delete_category" | "delete_collection" | "delete_price" | "delete_price_list" | "delete_product" | "delete_product_option" | "delete_variant" | "move_category" | "product_text" | "publish_storefront" | "rank_variant" | "remove_from_collection" | "save_catalog_channel" | "save_category" | "save_collection" | "save_price_list" | "save_product" | "save_product_option" | "save_variant" | "set_channel_listing" | "set_price" | "set_product_categories" | "set_product_status" | "set_product_translation" | "set_variant_translation" | "storefront_products" | "storefront_tenants" | "variant_price";
+    readonly actions: "manage" | "read";
+    readonly hooks: "before_product_save" | "after_product_save" | "before_variant_save" | "after_variant_save" | "before_price_set" | "after_price_set";
+    readonly entities: {
+      readonly "product": "id" | "tenant_id" | "slug" | "title" | "description" | "kind" | "status" | "created_at" | "updated_at";
+      readonly "product_variant": "id" | "tenant_id" | "product_id" | "sku" | "title" | "barcode" | "weight_grams" | "track_inventory" | "allow_backorder" | "rank" | "created_at" | "updated_at";
+    };
+    readonly primary: "product";
+  };
+  readonly "channels": {
+    readonly tables: {
+      readonly "channels": "id" | "tenant" | "name" | "visibility" | "topic" | "purpose" | "subjectType" | "subjectId" | "createdBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "archive_channel" | "channels_for_record" | "create_channel" | "find_channel" | "get_channel" | "invite_to_channel" | "join_channel" | "leave_channel" | "list_channels" | "update_channel";
+    readonly actions: "read" | "create" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "channel": "id" | "tenant_id" | "name" | "visibility" | "topic" | "purpose" | "subject_type" | "subject_id" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "channel";
+  };
+  readonly "chat-sdk-state": {
+    readonly tables: {
+      readonly "subscriptions": "prefix" | "thread" | "createdAt";
+      readonly "locks": "prefix" | "thread" | "token" | "expiresAt" | "updatedAt";
+      readonly "cache": "prefix" | "key" | "value" | "expiresAt" | "updatedAt";
+      readonly "lists": "id" | "prefix" | "key" | "value" | "expiresAt";
+      readonly "queues": "id" | "prefix" | "thread" | "value" | "expiresAt";
+      readonly "installations": "id" | "tenant" | "adapter" | "externalId" | "credentialRef" | "metadata" | "installedBy" | "installedAt" | "uninstalledAt";
+    };
+    readonly functions: "chat_install" | "chat_installation" | "chat_state_acquire_lock" | "chat_state_append_to_list" | "chat_state_delete" | "chat_state_dequeue" | "chat_state_enqueue" | "chat_state_extend_lock" | "chat_state_force_release_lock" | "chat_state_get" | "chat_state_get_list" | "chat_state_is_subscribed" | "chat_state_queue_depth" | "chat_state_release_lock" | "chat_state_set" | "chat_state_set_if_not_exists" | "chat_state_subscribe" | "chat_state_unsubscribe" | "chat_uninstall" | "list_chat_installations" | "purge_chat_state";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "collections": {
+    readonly tables: {
+      readonly "collections": "id" | "tenant" | "subjectType" | "scope" | "owner" | "team" | "name" | "description" | "archivedAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "entries": "collection" | "tenant" | "subjectType" | "subjectId" | "rank" | "addedBy" | "addedAt";
+      readonly "favorites": "user" | "tenant" | "subjectType" | "subjectId" | "rank" | "createdAt";
+      readonly "savedItems": "id" | "user" | "tenant" | "subjectType" | "subjectId" | "note" | "remindAt" | "remindedAt" | "completedAt" | "createdAt";
+    };
+    readonly functions: "add_collection_entries" | "archive_collection" | "collection_entries" | "collection_subject_ids" | "collections_of" | "complete_saved_item" | "create_collection" | "list_collections" | "list_saved_items" | "rank_collection_entry" | "rank_star" | "remind_due_saved_items" | "remove_collection_entries" | "remove_saved_item" | "rename_collection" | "save_for_later" | "star_subject" | "starred_subjects" | "subject_collection_entries" | "unstar_subject";
+    readonly actions: "read" | "write" | "share";
+    readonly hooks: "before_collection_create" | "after_collection_create" | "before_collection_add" | "after_collection_add";
+    readonly entities: {
+      readonly "collection": "id" | "tenant_id" | "subject_type" | "scope" | "owner_id" | "team_id" | "name" | "description" | "archived_at" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "collection";
+  };
+  readonly "comments": {
+    readonly tables: {
+      readonly "tasks": "message" | "tenant" | "task" | "createdBy" | "createdAt";
+    };
+    readonly functions: "comment_conversation" | "comment_counts" | "comment_message_readable" | "comments_json" | "copy_comments" | "create_comment" | "get_comment" | "list_comments" | "list_file_comments";
+    readonly actions: "read" | "create" | "moderate";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "compliance": {
+    readonly tables: {
+      readonly "frameworks": "id" | "tenant" | "key" | "name" | "version" | "description" | "createdAt" | "updatedAt";
+      readonly "controls": "id" | "tenant" | "framework" | "code" | "title" | "description" | "owner" | "applicable" | "createdAt" | "updatedAt";
+      readonly "evidence": "id" | "tenant" | "control" | "task" | "attachment" | "note" | "collectedBy" | "collectedAt" | "validUntil";
+      readonly "tasks": "id" | "tenant" | "control" | "title" | "assignee" | "intervalDays" | "dueOn" | "lastCollectedAt" | "notifiedFor" | "active" | "createdAt" | "updatedAt";
+      readonly "policies": "id" | "tenant" | "key" | "title" | "owner" | "requiresAck" | "currentVersion" | "versionNumber" | "publishedAt" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "acknowledgements": "id" | "tenant" | "policy" | "version" | "user" | "acknowledgedAt";
+    };
+    readonly functions: "acknowledge_policy" | "add_control_evidence" | "archive_policy" | "control_posture" | "get_control" | "list_control_frameworks" | "list_controls" | "list_evidence_tasks" | "list_policies" | "notify_overdue_evidence_tasks" | "policy_acknowledgements" | "publish_policy" | "remove_control_evidence" | "save_control" | "save_control_framework" | "save_evidence_task" | "save_policy";
+    readonly actions: "read" | "manage" | "collect" | "acknowledge";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "control": "id" | "tenant_id" | "framework_id" | "code" | "title" | "description" | "owner_id" | "applicable" | "created_at" | "updated_at";
+      readonly "control_framework": "id" | "tenant_id" | "key" | "name" | "version" | "description" | "created_at" | "updated_at";
+      readonly "evidence_task": "id" | "tenant_id" | "control_id" | "title" | "assignee_id" | "interval_days" | "due_on" | "last_collected_at" | "notified_for" | "active" | "created_at" | "updated_at";
+      readonly "policy": "id" | "tenant_id" | "key" | "title" | "owner_id" | "requires_acknowledgement" | "current_version_id" | "version_number" | "published_at" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "control";
+  };
+  readonly "connectors": {
+    readonly tables: {
+      readonly "servers": "id" | "tenant" | "name" | "url" | "transport" | "authType" | "credentialRef" | "scopes" | "clientMetadata" | "enabled" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "grants": "id" | "user" | "server" | "tenant" | "credentialRef" | "scopes" | "expiresAt" | "grantedAt" | "revokedAt";
+      readonly "sessions": "server" | "user" | "chat" | "session" | "initializeResult" | "lastUsedAt" | "expiresAt";
+      readonly "fingerprints": "server" | "fingerprint" | "tools" | "status" | "approvedBy" | "approvedAt" | "createdAt";
+    };
+    readonly functions: "check_connector_fingerprint" | "decide_connector_fingerprint" | "delete_connector_server" | "expiring_connector_grants" | "get_connector" | "get_connector_session" | "list_connector_servers" | "purge_connector_sessions" | "record_connector_grant" | "renew_connector_grant" | "revoke_connector_grant" | "save_connector_server" | "save_connector_session";
+    readonly actions: "read" | "use" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "server": "id" | "organization_id" | "name" | "url" | "transport" | "auth_type" | "credential_ref" | "scopes" | "client_metadata" | "enabled" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "server";
+  };
+  readonly "contacts": {
+    readonly tables: {
+      readonly "companies": "id" | "tenant" | "name" | "domain" | "website" | "vatId" | "lifecycle" | "owner" | "address" | "mergedInto" | "archivedAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "people": "id" | "tenant" | "name" | "email" | "phone" | "title" | "lifecycle" | "owner" | "user" | "mergedInto" | "archivedAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "links": "tenant" | "company" | "person" | "role" | "isPrimary" | "createdAt";
+      readonly "personContacts": "tenant" | "person" | "contact" | "createdAt";
+    };
+    readonly functions: "archive_company" | "archive_person" | "company_people_of" | "list_companies" | "list_people" | "merge_companies" | "merge_people" | "remove_company_person" | "save_company" | "save_person" | "set_company_person";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: "before_company_save" | "after_company_save" | "before_person_save" | "after_person_save";
+    readonly entities: {
+      readonly "company": "id" | "tenant_id" | "name" | "domain" | "website" | "vat_id" | "lifecycle" | "owner_user_id" | "address" | "merged_into" | "archived_at" | "created_by" | "created_at" | "updated_at";
+      readonly "person": "id" | "tenant_id" | "name" | "email" | "phone" | "title" | "lifecycle" | "owner_user_id" | "user_id" | "merged_into" | "archived_at" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: never;
+  };
+  readonly "content": {
+    readonly tables: {
+      readonly "entries": "id" | "tenant" | "type" | "locale" | "slug" | "title" | "summary" | "body" | "status" | "publishAt" | "publishedAt" | "author" | "translationGroup" | "cover" | "approval" | "createdBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "archive_content_entry" | "content_entry_approved" | "content_entry_go_live" | "create_content_entry" | "get_content_entry" | "list_content_entries" | "public_content_entries" | "public_content_entry" | "publish_content_entry" | "publish_due_content_entries" | "schedule_content_entry" | "update_content_entry";
+    readonly actions: "read" | "write" | "publish";
+    readonly hooks: "before_content_entry_publish" | "after_content_entry_publish";
+    readonly entities: {
+      readonly "content_entry": "id" | "tenant_id" | "type" | "locale" | "slug" | "title" | "summary" | "body" | "status" | "publish_at" | "published_at" | "author_id" | "translation_group_id" | "cover_attachment_id" | "approval_id" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "content_entry";
+  };
+  readonly "contracts": {
+    readonly tables: {
+      readonly "contracts": "id" | "tenant" | "title" | "description" | "counterpartyType" | "counterpartyId" | "owner" | "status" | "value" | "currency" | "startsOn" | "endsOn" | "autoRenew" | "renewalMonths" | "noticeDays" | "renewedCount" | "signatureRequest" | "signedAt" | "terminatedAt" | "terminationReason" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "obligations": "id" | "tenant" | "contract" | "title" | "description" | "dueOn" | "owner" | "status" | "completedAt" | "completedBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "contract_apply_status" | "contract_schedule_renewal" | "contract_signature_settled" | "create_contract" | "delete_obligation" | "get_contract" | "list_contracts" | "list_obligations" | "run_contract_renewals" | "save_obligation" | "send_contract_for_signature" | "set_obligation_status" | "transition_contract" | "update_contract";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "contract": "id" | "tenant_id" | "title" | "description" | "counterparty_type" | "counterparty_id" | "owner_id" | "status" | "value" | "currency" | "starts_on" | "ends_on" | "auto_renew" | "renewal_months" | "notice_days" | "renewed_count" | "signature_request_id" | "signed_at" | "terminated_at" | "termination_reason" | "created_by" | "created_at" | "updated_at";
+      readonly "obligation": "id" | "tenant_id" | "contract_id" | "title" | "description" | "due_on" | "owner_id" | "status" | "completed_at" | "completed_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "contract";
+  };
+  readonly "courses": {
+    readonly tables: {
+      readonly "courses": "id" | "tenant" | "key" | "title" | "summary" | "status" | "certificate" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "modules": "id" | "tenant" | "course" | "title" | "rank" | "createdAt" | "updatedAt";
+      readonly "lessons": "id" | "tenant" | "course" | "module" | "title" | "kind" | "body" | "mediaUrl" | "form" | "required" | "minutes" | "rank" | "createdAt" | "updatedAt";
+      readonly "progress": "enrollment" | "lesson" | "tenant" | "course" | "user" | "startedAt" | "completedAt" | "attempts" | "submission" | "score" | "maxScore" | "passed" | "updatedAt";
+      readonly "certificates": "id" | "tenant" | "course" | "enrollment" | "user" | "code" | "issuedAt" | "revokedAt";
+    };
+    readonly functions: "complete_course_lesson" | "course_finish" | "course_json" | "course_learner_json" | "course_lesson" | "course_lesson_done" | "course_outline" | "course_progress" | "course_steps" | "course_sync" | "delete_course" | "delete_course_lesson" | "delete_course_module" | "enroll_in_course" | "enrollment_ensure" | "enrollment_mark" | "list_course_learners" | "list_courses" | "revoke_course_certificate" | "save_course" | "save_course_lesson" | "save_course_module" | "start_course_lesson" | "unenroll_from_course" | "verify_course_certificate";
+    readonly actions: "read" | "enroll" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "course": "id" | "tenant_id" | "key" | "title" | "summary" | "status" | "issues_certificate" | "created_by" | "created_at" | "updated_at";
+      readonly "course_module": "id" | "tenant_id" | "course_id" | "title" | "rank" | "created_at" | "updated_at";
+      readonly "course_lesson": "id" | "tenant_id" | "course_id" | "module_id" | "title" | "kind" | "body" | "media_url" | "form_id" | "required" | "duration_minutes" | "rank" | "created_at" | "updated_at";
+      readonly "course_certificate": "id" | "tenant_id" | "course_id" | "enrollment_id" | "user_id" | "code" | "issued_at" | "revoked_at";
+    };
+    readonly primary: "course";
+  };
+  readonly "created-by": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "credentials": {
+    readonly tables: {
+      readonly "secrets": "provider" | "name" | "tenant" | "scope" | "vaultId" | "secret" | "updatedAt";
+    };
+    readonly functions: "credential_delete" | "credential_get" | "credential_set";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "custom-fields": {
+    readonly tables: {
+      readonly "definitions": "id" | "tenant" | "entity" | "key" | "label" | "type" | "required" | "sensitive" | "permission" | "rank" | "encrypted";
+      readonly "options": "id" | "definition" | "value" | "label" | "rank";
+      readonly "values": "id" | "tenant" | "definition" | "subjectType" | "subjectId" | "valueText" | "valueNumber" | "valueDate" | "valueBool" | "optionId" | "valueJson";
+    };
+    readonly functions: "delete_field_definition" | "list_field_definitions" | "rank_field_definition" | "read_field_values" | "save_field_definition" | "set_field_value";
+    readonly actions: "manage" | "read" | "sensitive";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "field": "id" | "tenant_id" | "entity" | "key" | "label" | "type" | "required" | "sensitive" | "permission" | "rank" | "encrypted";
+    };
+    readonly primary: "field";
+  };
+  readonly "data-lifecycle": {
+    readonly tables: {
+      readonly "exports": "id" | "subject" | "user" | "tenant" | "status" | "bucket" | "files" | "error" | "requestedBy" | "requestedAt" | "completedAt" | "expiresAt";
+      readonly "deletions": "tenant" | "requestedBy" | "requestedAt" | "purgeAfter" | "cancelledAt" | "purgedAt" | "previouslyDisabled";
+      readonly "policies": "id" | "tenant" | "plan" | "kind" | "keep" | "updatedAt";
+      readonly "holds": "id" | "tenant" | "kind" | "reason" | "placedBy" | "placedAt" | "releasedBy" | "releasedAt";
+    };
+    readonly functions: "anonymize_due" | "cancel_organization_deletion" | "claim_data_export" | "complete_data_export" | "data_export_object_allowed" | "data_export_rows" | "data_lifecycle_credentials" | "data_lifecycle_tables" | "due_organization_deletions" | "expired_data_exports" | "fail_data_export" | "forget_data_exports" | "get_data_export" | "is_held" | "list_data_exports" | "list_legal_holds" | "list_retention_policies" | "organization_credential_refs" | "organization_deletion" | "place_legal_hold" | "purge_organization" | "release_legal_hold" | "remove_retention_policy" | "request_data_export" | "request_organization_deletion" | "retention_cutoff" | "retention_floor" | "retention_for" | "set_retention_policy";
+    readonly actions: "export" | "delete" | "cancelDelete";
+    readonly hooks: "on_organization_purge";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "deals": {
+    readonly tables: {
+      readonly "deals": "id" | "tenant" | "number" | "identifier" | "name" | "companyType" | "companyId" | "motion" | "priority" | "owner" | "product" | "seats" | "amount" | "existingAmount" | "currency" | "valuePeriod" | "amountSource" | "pipeline" | "stage" | "stageEnteredAt" | "outcome" | "probability" | "forecast" | "openedOn" | "closeOn" | "slippedFrom" | "pushCount" | "closedAt" | "nextStep" | "nextAt" | "nextKind" | "flags" | "source" | "note" | "lostReason" | "locked" | "rank" | "archivedAt" | "createdBy" | "createdAt" | "updatedAt" | "listTotal" | "discountTotal" | "subtotal" | "taxTotal" | "total";
+      readonly "contacts": "tenant" | "deal" | "contactType" | "contactId" | "role" | "isPrimary";
+      readonly "members": "tenant" | "deal" | "user" | "role";
+      readonly "lines": "id" | "tenant" | "parent" | "productType" | "productId" | "description" | "quantity" | "unitAmount" | "discountBps" | "taxRateBps" | "taxCode" | "position" | "createdAt";
+    };
+    readonly functions: "archive_deal" | "close_deal" | "create_deal" | "deal_forecast" | "deal_health" | "delete_deal" | "reopen_deal" | "set_deal_contacts" | "set_deal_lines" | "set_deal_lines_recount" | "set_deal_members" | "update_deals";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: "before_deal_create" | "after_deal_create" | "before_deal_update" | "after_deal_update";
+    readonly entities: {
+      readonly "deal": "id" | "tenant_id" | "number" | "identifier" | "name" | "company_type" | "company_id" | "motion" | "priority" | "owner_user_id" | "product" | "seats" | "amount" | "existing_amount" | "currency" | "value_period" | "amount_source" | "pipeline_id" | "stage_id" | "stage_entered_at" | "outcome" | "probability" | "forecast_category" | "opened_on" | "expected_close_on" | "slipped_from" | "push_count" | "closed_at" | "next_step" | "next_at" | "next_kind" | "flags" | "source" | "note" | "lost_reason" | "locked" | "rank" | "archived_at" | "created_by" | "created_at" | "updated_at" | "list_total" | "discount_total" | "subtotal" | "tax_total" | "total";
+    };
+    readonly primary: "deal";
+  };
+  readonly "dispatch": {
+    readonly tables: {
+      readonly "workOrders": "id" | "tenant" | "title" | "description" | "priority" | "status" | "technician" | "startsAt" | "endsAt" | "location" | "asset" | "booking" | "subjectType" | "subjectId" | "address" | "enRouteAt" | "arrivedAt" | "completedAt" | "cancelledAt" | "cancelReason" | "completionNote" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "routes": "id" | "tenant" | "technician" | "routeDate" | "plannedBy" | "createdAt" | "updatedAt";
+      readonly "stops": "id" | "tenant" | "route" | "workOrder" | "position";
+      readonly "parts": "id" | "tenant" | "workOrder" | "name" | "quantity" | "unit" | "asset" | "variant" | "location" | "recordedBy" | "createdAt";
+    };
+    readonly functions: "create_work_order" | "dispatch_board" | "get_work_order" | "list_work_order_parts" | "list_work_orders" | "plan_dispatch_route" | "record_work_order_part" | "remove_work_order_part" | "schedule_work_order" | "set_work_order_status" | "technician_day" | "unschedule_work_order" | "update_work_order";
+    readonly actions: "read" | "manage" | "work";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "work_order": "id" | "tenant_id" | "title" | "description" | "priority" | "status" | "technician_id" | "starts_at" | "ends_at" | "location_id" | "asset_id" | "booking_id" | "subject_type" | "subject_id" | "address" | "en_route_at" | "arrived_at" | "completed_at" | "cancelled_at" | "cancel_reason" | "completion_note" | "created_by" | "created_at" | "updated_at";
+      readonly "dispatch_route": "id" | "tenant_id" | "technician_id" | "route_date" | "planned_by" | "created_at" | "updated_at";
+      readonly "work_order_part": "id" | "tenant_id" | "work_order_id" | "name" | "quantity" | "unit" | "asset_id" | "variant_id" | "location_id" | "recorded_by" | "created_at";
+    };
+    readonly primary: "work_order";
+  };
+  readonly "documents": {
+    readonly tables: {
+      readonly "documents": "id" | "tenant" | "subjectType" | "subjectId" | "name" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "updates": "seq" | "document" | "tenant" | "update" | "actor" | "createdAt";
+      readonly "snapshots": "document" | "tenant" | "state" | "seq" | "createdAt";
+      readonly "suggestions": "id" | "document" | "tenant" | "update" | "summary" | "status" | "createdBy" | "createdAt" | "decidedBy" | "decidedAt" | "note";
+    };
+    readonly functions: "compact_document" | "decide_document_suggestion" | "document_access" | "document_topic_access" | "document_updates_after" | "documents_to_compact" | "list_document_suggestions" | "open_document" | "pull_document_updates" | "push_document_update" | "suggest_document_change";
+    readonly actions: "read" | "write" | "suggest" | "manage";
+    readonly hooks: "before_document_create" | "after_document_create";
+    readonly entities: {
+      readonly "document": "id" | "tenant_id" | "subject_type" | "subject_id" | "name" | "created_by" | "created_at" | "updated_at";
+      readonly "document_suggestion": "id" | "document_id" | "tenant_id" | "payload" | "summary" | "status" | "created_by" | "created_at" | "decided_by" | "decided_at" | "note";
+    };
+    readonly primary: "document";
+  };
+  readonly "domains": {
+    readonly tables: {
+      readonly "hostnames": "id" | "tenant" | "hostname" | "kind" | "token" | "verifiedAt" | "primary" | "createdBy" | "createdAt";
+    };
+    readonly functions: "add_hostname" | "hostname_by_id" | "list_hostnames" | "remove_hostname" | "resolve_hostname" | "set_primary_hostname" | "verify_hostname";
+    readonly actions: "read" | "manage";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "donations": {
+    readonly tables: {
+      readonly "funds": "id" | "tenant" | "key" | "name" | "kind" | "goal" | "currency" | "startsOn" | "endsOn" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "pledges": "id" | "tenant" | "donorType" | "donorId" | "fund" | "amount" | "currency" | "frequency" | "startsOn" | "endsOn" | "status" | "provider" | "providerCustomer" | "note" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "receipts": "id" | "tenant" | "donorType" | "donorId" | "sequence" | "number" | "kind" | "year" | "amount" | "currency" | "issuedAt" | "voidedAt" | "voidReason";
+      readonly "donations": "id" | "tenant" | "donorType" | "donorId" | "fund" | "pledge" | "periodStart" | "amount" | "currency" | "receivedOn" | "method" | "status" | "provider" | "paymentReference" | "transaction" | "refundTransaction" | "receipt" | "note" | "createdBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "archive_donation_fund" | "create_pledge" | "donation_settle" | "due_pledge_installments" | "get_gift" | "issue_gift_receipt" | "issue_yearly_receipt" | "list_donation_funds" | "list_donation_receipts" | "list_gifts" | "list_pledges" | "open_gift" | "record_gift" | "record_gift_payment" | "save_donation_fund" | "update_pledge" | "void_donation_receipt" | "yearly_giving_summary";
+    readonly actions: "read" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "donation": "id" | "tenant_id" | "donor_type" | "donor_id" | "fund_id" | "pledge_id" | "period_start" | "amount" | "currency" | "received_on" | "method" | "status" | "provider" | "payment_reference" | "transaction_id" | "refund_transaction_id" | "receipt_id" | "note" | "created_by" | "created_at" | "updated_at";
+      readonly "pledge": "id" | "tenant_id" | "donor_type" | "donor_id" | "fund_id" | "amount" | "currency" | "frequency" | "starts_on" | "ends_on" | "status" | "provider" | "provider_customer" | "note" | "created_by" | "created_at" | "updated_at";
+      readonly "donation_fund": "id" | "tenant_id" | "key" | "name" | "kind" | "goal" | "currency" | "starts_on" | "ends_on" | "archived_at" | "created_at" | "updated_at";
+      readonly "donation_receipt": "id" | "tenant_id" | "donor_type" | "donor_id" | "sequence" | "number" | "kind" | "year" | "amount" | "currency" | "issued_at" | "voided_at" | "void_reason";
+    };
+    readonly primary: "donation";
+  };
+  readonly "drive": {
+    readonly tables: {
+      readonly "nodes": "id" | "tenant" | "parent" | "kind" | "name" | "attachment" | "path" | "rank" | "deletedAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "grants": "id" | "tenant" | "node" | "principalType" | "principalId" | "user" | "team" | "role" | "expiresAt" | "createdBy" | "createdAt";
+    };
+    readonly functions: "drive_ancestors" | "drive_can" | "drive_check_parent" | "drive_clean_name" | "drive_conflict" | "drive_create_folder" | "drive_delete" | "drive_free_name" | "drive_get" | "drive_grants" | "drive_insert_node" | "drive_list" | "drive_lock_siblings" | "drive_move" | "drive_node_json" | "drive_node_moved" | "drive_node_path" | "drive_path" | "drive_readable_ids" | "drive_rename" | "drive_role" | "drive_share" | "drive_shared" | "drive_subtree" | "drive_unshare";
+    readonly actions: "read" | "create" | "manage";
+    readonly hooks: "before_drive_node_create" | "after_drive_node_create" | "before_drive_node_move" | "after_drive_node_move" | "before_drive_node_rename" | "after_drive_node_rename" | "before_drive_node_share" | "after_drive_node_share";
+    readonly entities: {
+      readonly "node": "id" | "tenant_id" | "parent_id" | "kind" | "name" | "attachment_id" | "path" | "rank" | "deleted_at" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "node";
+  };
+  readonly "drive-files": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "employees": {
+    readonly tables: {
+      readonly "employees": "id" | "tenant" | "user" | "name" | "email" | "jobTitle" | "team" | "manager" | "employmentType" | "status" | "startDate" | "endDate" | "offboardReason" | "originType" | "originId" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "privateDetails": "employee" | "tenant" | "user" | "nationalId" | "iban" | "birthDate" | "personalEmail" | "phone" | "address" | "emergencyContacts" | "offboardedAt" | "anonymizedAt" | "updatedAt" | "updatedBy";
+      readonly "contracts": "id" | "tenant" | "employee" | "startsOn" | "endsOn" | "hoursPerWeek" | "salary" | "currency" | "salaryPeriod" | "note" | "createdBy" | "createdAt";
+    };
+    readonly functions: "add_employee_contract" | "create_employee" | "employee_contracts" | "employee_private_details" | "offboard_employee" | "org_chart" | "reports_of" | "save_employee_private_details" | "update_employees";
+    readonly actions: "read" | "write" | "viewSensitive";
+    readonly hooks: "before_employee_create" | "after_employee_create" | "before_employee_update" | "after_employee_update" | "before_employee_offboard" | "after_employee_offboard";
+    readonly entities: {
+      readonly "employee": "id" | "tenant_id" | "user_id" | "name" | "email" | "job_title" | "team_id" | "manager_id" | "employment_type" | "status" | "start_date" | "end_date" | "offboard_reason" | "origin_type" | "origin_id" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "employee";
+  };
+  readonly "enrichment": {
+    readonly tables: {
+      readonly "enrichments": "id" | "tenant" | "company" | "person" | "provider" | "status" | "data" | "filled" | "fetchedAt" | "requestedBy";
+    };
+    readonly functions: "enrichment_due" | "enrichment_target" | "enrichments_of" | "record_enrichment";
+    readonly actions: "read" | "run";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "enrichment": "id" | "tenant_id" | "company_id" | "person_id" | "provider" | "status" | "data" | "filled" | "fetched_at" | "requested_by";
+    };
+    readonly primary: "enrichment";
+  };
+  readonly "enrollments": {
+    readonly tables: {
+      readonly "programs": "id" | "tenant" | "key" | "name" | "description" | "subjectTypes" | "steps" | "enabled" | "version" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "enrollments": "id" | "tenant" | "program" | "programVersion" | "subjectType" | "subjectId" | "user" | "steps" | "completedSteps" | "status" | "enrolledBy" | "enrolledAt" | "completedAt" | "cancelledAt" | "updatedAt";
+      readonly "steps": "enrollment" | "tenant" | "step" | "completedBy" | "completedAt";
+    };
+    readonly functions: "cancel_enrollment" | "complete_enrollment_step" | "delete_enrollment_program" | "enroll" | "enrollment" | "enrollment_ensure" | "enrollment_json" | "enrollment_mark" | "enrollment_programs" | "enrollment_step" | "list_enrollments" | "reset_enrollment_step" | "save_enrollment_program";
+    readonly actions: "read" | "enroll" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "enrollment_program": "id" | "tenant_id" | "key" | "name" | "description" | "subject_types" | "steps" | "enabled" | "version" | "created_by" | "created_at" | "updated_at";
+      readonly "enrollment": "id" | "tenant_id" | "program" | "program_version" | "subject_type" | "subject_id" | "user_id" | "steps" | "completed_steps" | "status" | "enrolled_by" | "enrolled_at" | "completed_at" | "cancelled_at" | "updated_at";
+    };
+    readonly primary: "enrollment_program";
+  };
+  readonly "entitlements": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "expenses": {
+    readonly tables: {
+      readonly "categories": "id" | "tenant" | "key" | "name" | "currency" | "limitAmount" | "receiptOver" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "reports": "id" | "tenant" | "user" | "title" | "currency" | "note" | "approval" | "submittedAt" | "approvedAt" | "approvalTransaction" | "reimbursedAt" | "reimbursement" | "cancelledAt" | "createdAt" | "updatedAt";
+      readonly "lines": "id" | "tenant" | "report" | "category" | "spentOn" | "description" | "merchant" | "amount" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "add_expense_line" | "approve_expense_report" | "archive_expense_category" | "cancel_expense_report" | "check_expense_report" | "create_expense_report" | "expense_report_violations" | "get_expense_report" | "list_expense_categories" | "list_expense_reports" | "reimburse_expense_report" | "remove_expense_line" | "save_expense_category" | "submit_expense_report" | "update_expense_line";
+    readonly actions: "read" | "submit" | "approve" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "expense_report": "id" | "tenant_id" | "user_id" | "title" | "currency" | "note" | "approval_id" | "submitted_at" | "approved_at" | "approval_transaction_id" | "reimbursed_at" | "reimbursement_transaction_id" | "cancelled_at" | "created_at" | "updated_at";
+      readonly "expense_line": "id" | "tenant_id" | "report_id" | "category_id" | "spent_on" | "description" | "merchant" | "amount" | "created_at" | "updated_at";
+      readonly "expense_category": "id" | "tenant_id" | "key" | "name" | "currency" | "limit_amount" | "receipt_over" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "expense_report";
+  };
+  readonly "field-encryption": {
+    readonly tables: {};
+    readonly functions: "drop_field_key" | "field_decrypt" | "field_encrypt" | "field_key" | "field_open" | "field_seal";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "field-history": {
+    readonly tables: {
+      readonly "changes": "id" | "tenant" | "subjectType" | "subjectId" | "field" | "before" | "after" | "changedBy" | "changedAt";
+    };
+    readonly functions: "field_history";
+    readonly actions: "read";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "flags": {
+    readonly tables: {
+      readonly "flags": "key" | "type" | "description" | "variants" | "defaultVariant" | "enabled" | "archived" | "rules" | "rolloutPercentage" | "rolloutVariant" | "updatedAt";
+      readonly "overrides": "id" | "flag" | "tenant" | "user" | "context" | "contextKey" | "variant" | "createdAt";
+    };
+    readonly functions: "delete_flag" | "flag_bucket" | "flag_definitions" | "flag_enabled" | "flag_evaluation" | "list_flags" | "save_flag" | "set_flag_override" | "tenant_ids_with_flag";
+    readonly actions: "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "flag": "key" | "type" | "description" | "variants" | "default_variant" | "enabled" | "archived" | "rules" | "rollout_percentage" | "rollout_variant" | "updated_at";
+    };
+    readonly primary: "flag";
+  };
+  readonly "forecasts": {
+    readonly tables: {
+      readonly "snapshots": "id" | "tenant" | "pipeline" | "since" | "until" | "currency" | "target" | "totals" | "dealCount" | "takenBy" | "takenAt";
+      readonly "deals": "snapshot" | "tenant" | "deal" | "name" | "owner" | "stage" | "forecast" | "outcome" | "amount" | "closeOn" | "closedAt";
+    };
+    readonly functions: "forecast_changes" | "forecast_snapshot" | "forecast_snapshots" | "take_forecast_snapshot";
+    readonly actions: "read" | "snapshot";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "snapshot": "id" | "tenant_id" | "pipeline_id" | "period_start" | "period_end" | "currency" | "target" | "totals" | "deal_count" | "taken_by" | "taken_at";
+    };
+    readonly primary: "snapshot";
+  };
+  readonly "forms": {
+    readonly tables: {
+      readonly "forms": "id" | "tenant" | "key" | "title" | "description" | "status" | "currentVersion" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "versions": "id" | "tenant" | "form" | "number" | "definition" | "schema" | "createdBy" | "createdAt";
+      readonly "submissions": "id" | "tenant" | "form" | "version" | "subjectType" | "subjectId" | "respondent" | "answers" | "status" | "source" | "reviewedBy" | "reviewedAt" | "createdAt" | "submittedAt" | "updatedAt" | "score" | "maxScore" | "passed";
+      readonly "answerKeys": "version" | "tenant" | "answers" | "createdAt";
+    };
+    readonly functions: "create_form" | "delete_form_submission" | "form_answer_matches" | "form_answer_merge" | "form_answer_split" | "form_condition_holds" | "form_condition_schema" | "form_correct_fits" | "form_field_schema" | "form_nps" | "form_resolve" | "form_schema" | "form_score" | "form_submission_save" | "get_form" | "get_form_submission" | "get_form_version" | "list_form_submissions" | "list_forms" | "publish_form_version" | "review_form_submission" | "submit_form" | "update_form";
+    readonly actions: "read" | "manage" | "submit" | "review";
+    readonly hooks: "before_form_publish" | "after_form_publish" | "before_form_submission" | "after_form_submission" | "before_public_form_submission";
+    readonly entities: {
+      readonly "form": "id" | "tenant_id" | "key" | "title" | "description" | "status" | "current_version_id" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "form";
+  };
+  readonly "goals": {
+    readonly tables: {
+      readonly "targets": "id" | "tenant" | "name" | "metric" | "owner" | "team" | "periodStart" | "periodEnd" | "currency" | "goal" | "actual" | "archivedAt" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "save_target" | "target_progress";
+    readonly actions: "read" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "target": "id" | "tenant_id" | "name" | "metric" | "owner_user_id" | "team_id" | "period_start" | "period_end" | "currency" | "goal" | "actual" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "target";
+  };
+  readonly "grants": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "guests": {
+    readonly tables: {
+      readonly "guests": "id" | "tenant" | "email" | "name" | "user" | "partyType" | "partyId" | "status" | "tokenHash" | "invitedBy" | "expiresAt" | "acceptedAt" | "revokedAt" | "createdAt" | "updatedAt";
+      readonly "grants": "id" | "tenant" | "guest" | "subjectType" | "subjectId" | "actions" | "grantedBy" | "expiresAt" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "accept_guest_invite" | "grant_guest_access" | "guest_can" | "invite_guest" | "list_guest_grants" | "list_guests" | "my_guest_access" | "revoke_guest" | "revoke_guest_access";
+    readonly actions: "read" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "guest": "id" | "tenant_id" | "email" | "name" | "user_id" | "party_type" | "party_id" | "status" | "token_hash" | "invited_by" | "expires_at" | "accepted_at" | "revoked_at" | "created_at" | "updated_at";
+      readonly "guest_grant": "id" | "tenant_id" | "guest_id" | "subject_type" | "subject_id" | "actions" | "granted_by" | "expires_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "guest";
+  };
+  readonly "hiring": {
+    readonly tables: {
+      readonly "jobs": "id" | "tenant" | "title" | "team" | "location" | "employmentType" | "description" | "hiringManager" | "status" | "openedAt" | "closedAt" | "createdAt" | "updatedAt";
+      readonly "applications": "id" | "tenant" | "job" | "candidateType" | "candidateId" | "source" | "owner" | "pipeline" | "stage" | "stageEnteredAt" | "state" | "rejectionReason" | "hiredAt" | "rank" | "createdAt" | "updatedAt";
+      readonly "scorecards": "id" | "tenant" | "application" | "stage" | "reviewer" | "rating" | "recommendation" | "notes" | "submittedAt";
+      readonly "interviews": "id" | "tenant" | "application" | "kind" | "startsAt" | "endsAt" | "location" | "interviewers" | "createdBy" | "createdAt";
+    };
+    readonly functions: "application_detail" | "apply_to_job" | "close_application" | "save_job" | "schedule_interview" | "submit_scorecard";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: "before_application_hire" | "after_application_hire";
+    readonly entities: {
+      readonly "job": "id" | "tenant_id" | "title" | "team_id" | "location" | "employment_type" | "description" | "hiring_manager_user_id" | "status" | "opened_at" | "closed_at" | "created_at" | "updated_at";
+      readonly "application": "id" | "tenant_id" | "job_id" | "candidate_type" | "candidate_id" | "source" | "owner_user_id" | "pipeline_id" | "stage_id" | "stage_entered_at" | "state" | "rejection_reason" | "hired_at" | "rank" | "created_at" | "updated_at";
+      readonly "interview": "id" | "tenant_id" | "application_id" | "kind" | "starts_at" | "ends_at" | "location" | "interviewer_user_ids" | "created_by" | "created_at";
+    };
+    readonly primary: "job";
+  };
+  readonly "idempotency": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "identities": {
+    readonly tables: {
+      readonly "links": "id" | "kind" | "provider" | "value" | "workspace" | "user" | "contact" | "source" | "createdAt";
+      readonly "codes": "id" | "user" | "kind" | "provider" | "codeHash" | "expiresAt" | "usedAt" | "createdAt";
+    };
+    readonly functions: "backfill_verified_emails" | "begin_identity_link" | "link_verified_email" | "my_identities" | "on_auth_user_email" | "principal_by_identity" | "redeem_identity_link" | "unlink_identity";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "impersonation": {
+    readonly tables: {
+      readonly "sessions": "id" | "admin" | "target" | "reason" | "tenant" | "readOnly" | "startedAt" | "expiresAt" | "endedAt" | "endedBy" | "metadata";
+      readonly "requests": "id" | "admin" | "target" | "reason" | "tenant" | "readOnly" | "metadata" | "requestedAt" | "expiresAt" | "approvedBy" | "approvedAt" | "session";
+    };
+    readonly functions: "active_support_session" | "apply_support_approval" | "approve_support_request" | "approved_support_request" | "end_support_session" | "expire_support_sessions" | "list_support_sessions" | "request_support_session" | "start_support_session" | "support_request" | "support_target_claims";
+    readonly actions: "start" | "view" | "revoke";
+    readonly hooks: "before_support_start" | "after_support_start" | "after_support_end";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "imports": {
+    readonly tables: {
+      readonly "runs": "id" | "tenant" | "kind" | "status" | "mapping" | "counts" | "errors" | "createdBy" | "createdAt";
+    };
+    readonly functions: "finish_import" | "mark_import_running" | "start_import";
+    readonly actions: "manage";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "inbox": {
+    readonly tables: {
+      readonly "inboxes": "id" | "tenant" | "name" | "channel" | "address" | "installation" | "botMode" | "settings" | "createdAt" | "updatedAt" | "archivedAt";
+      readonly "members": "inbox" | "user" | "role" | "createdAt";
+      readonly "teams": "id" | "tenant" | "name" | "createdAt";
+      readonly "teamMembers": "team" | "user" | "createdAt";
+      readonly "contacts": "id" | "tenant" | "user" | "name" | "email" | "phone" | "avatarUrl" | "metadata" | "createdAt" | "updatedAt";
+      readonly "identities": "id" | "tenant" | "contact" | "channel" | "externalId" | "createdAt";
+      readonly "conversations": "id" | "tenant" | "inbox" | "contact" | "subject" | "status" | "priority" | "assignee" | "team" | "botMode" | "thread" | "snoozedUntil" | "lastMessageAt" | "preview" | "firstResponseAt" | "resolvedAt" | "metadata" | "createdAt" | "updatedAt";
+      readonly "events": "id" | "tenant" | "conversation" | "type" | "actor" | "data" | "createdAt";
+      readonly "details": "message" | "tenant" | "conversation" | "direction" | "authorType" | "format" | "externalId" | "replyTo" | "metadata";
+      readonly "deliveries": "id" | "tenant" | "message" | "channel" | "status" | "externalId" | "error" | "attempts" | "createdAt" | "updatedAt";
+      readonly "inbound": "id" | "tenant" | "adapter" | "externalId" | "inbox" | "headers" | "body" | "status" | "error" | "attempts" | "receivedAt" | "processedAt";
+      readonly "templates": "id" | "tenant" | "inbox" | "name" | "channel" | "language" | "body" | "variables" | "externalId" | "createdAt" | "updatedAt";
+      readonly "scheduled": "id" | "tenant" | "conversation" | "author" | "input" | "scheduledFor" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "assign_conversation" | "cancel_inbox_message" | "create_inbox" | "create_inbox_attachment" | "create_inbox_team" | "delete_message_template" | "edit_inbox_message" | "get_conversation" | "get_inbox_message" | "inbox_add_message" | "inbox_can_conversation" | "inbox_contact_ids" | "inbox_contact_read_at" | "inbox_conversation_allowed" | "inbox_conversation_broadcast" | "inbox_conversation_json" | "inbox_counts" | "inbox_delivery_broadcast" | "inbox_file_allowed" | "inbox_file_failed" | "inbox_message_broadcast" | "inbox_messages_json" | "inbox_note_readable" | "inbox_resolve_contact" | "list_conversation_events" | "list_inbox_conversations" | "list_inbox_messages" | "list_scheduled_inbox_messages" | "mark_conversation_read" | "pending_inbound_events" | "pending_inbox_files" | "publish_due_inbox_messages" | "purge_contact" | "purge_inbound_events" | "react_to_inbox_message" | "record_delivery" | "record_inbound" | "reschedule_inbox_message" | "schedule_inbox_message" | "send_inbox_message" | "set_bot_mode" | "set_conversation_status" | "set_delivery_status" | "set_inbound_event_status" | "set_inbox_member" | "set_inbox_team_member" | "start_conversation" | "store_inbound_event" | "update_inbox" | "upsert_contact" | "upsert_message_template" | "wake_snoozed_conversations";
+    readonly actions: "read" | "reply" | "assign" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "inbox": "id" | "tenant_id" | "name" | "channel" | "channel_address" | "installation_id" | "bot_mode" | "settings" | "created_at" | "updated_at" | "archived_at";
+    };
+    readonly primary: "inbox";
+  };
+  readonly "incidents": {
+    readonly tables: {
+      readonly "components": "id" | "tenant" | "name" | "description" | "group" | "public" | "status" | "position" | "createdAt" | "updatedAt";
+      readonly "history": "id" | "tenant" | "component" | "status" | "startedAt" | "endedAt";
+      readonly "incidents": "id" | "tenant" | "title" | "description" | "severity" | "status" | "public" | "commander" | "startedAt" | "resolvedAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "updates": "id" | "tenant" | "incident" | "status" | "body" | "public" | "author" | "createdAt";
+      readonly "impacts": "tenant" | "incident" | "component" | "impact";
+      readonly "postmortems": "id" | "tenant" | "incident" | "summary" | "impact" | "rootCause" | "resolution" | "actionItems" | "status" | "publishedAt" | "author" | "createdAt" | "updatedAt";
+      readonly "pages": "id" | "tenant" | "slug" | "title" | "description" | "published" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "delete_status_component" | "get_incident" | "get_status_page" | "incident_apply_impacts" | "incident_refresh_components" | "list_incidents" | "list_status_components" | "open_incident" | "post_incident_update" | "public_status_page" | "publish_postmortem" | "save_postmortem" | "save_status_component" | "save_status_page" | "set_incident_impacts" | "update_incident";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "incident": "id" | "tenant_id" | "title" | "description" | "severity" | "status" | "public" | "commander_id" | "started_at" | "resolved_at" | "created_by" | "created_at" | "updated_at";
+      readonly "status_component": "id" | "tenant_id" | "name" | "description" | "group_name" | "public" | "status" | "position" | "created_at" | "updated_at";
+      readonly "postmortem": "id" | "tenant_id" | "incident_id" | "summary" | "impact" | "root_cause" | "resolution" | "action_items" | "status" | "published_at" | "author_id" | "created_at" | "updated_at";
+      readonly "status_page": "id" | "tenant_id" | "slug" | "title" | "description" | "published" | "created_at" | "updated_at";
+    };
+    readonly primary: "incident";
+  };
+  readonly "inventory": {
+    readonly tables: {
+      readonly "locations": "id" | "tenant" | "code" | "name" | "kind" | "active" | "createdAt" | "updatedAt";
+      readonly "levels": "tenant" | "variant" | "location" | "onHand" | "reserved" | "incoming" | "available" | "reorderPoint" | "updatedAt";
+      readonly "reservations": "id" | "tenant" | "variant" | "location" | "quantity" | "status" | "referenceType" | "referenceId" | "expiresAt" | "createdAt" | "updatedAt";
+      readonly "transfers": "id" | "tenant" | "from" | "to" | "status" | "note" | "createdAt" | "shippedAt" | "receivedAt";
+      readonly "transferLines": "tenant" | "transfer" | "variant" | "quantity";
+      readonly "purchaseOrders": "id" | "tenant" | "location" | "supplierType" | "supplierId" | "status" | "currency" | "expectedAt" | "note" | "createdAt" | "updatedAt" | "placedAt";
+      readonly "purchaseOrderLines": "id" | "tenant" | "order" | "variant" | "quantity" | "received" | "unitCost";
+    };
+    readonly functions: "adjust_stock" | "cancel_purchase_order" | "cancel_transfer" | "commit_reservation" | "count_stock" | "create_transfer" | "delete_location" | "expire_reservations" | "move_stock" | "place_purchase_order" | "receive_purchase_order" | "receive_transfer" | "release_reservation" | "reserve_stock" | "save_location" | "save_purchase_order" | "set_location_active" | "set_reorder_point" | "ship_transfer";
+    readonly actions: "manage" | "read" | "reserve" | "purchase";
+    readonly hooks: "before_stock_adjust" | "after_stock_adjust" | "before_stock_reserve" | "after_stock_reserve";
+    readonly entities: {
+      readonly "location": "id" | "tenant_id" | "code" | "name" | "kind" | "active" | "created_at" | "updated_at";
+      readonly "purchase_order": "id" | "tenant_id" | "location_id" | "supplier_type" | "supplier_id" | "status" | "currency" | "expected_at" | "note" | "created_at" | "updated_at" | "placed_at";
+    };
+    readonly primary: "location";
+  };
+  readonly "invitations": {
+    readonly tables: {
+      readonly "invitations": "id" | "email" | "role" | "tokenHash" | "invitedBy" | "createdAt" | "updatedAt" | "expiresAt" | "acceptedAt" | "acceptedBy" | "declinedAt" | "revokedAt" | "tenant" | "prefill";
+      readonly "platformInvitations": "id" | "email" | "role" | "tokenHash" | "invitedBy" | "createdAt" | "updatedAt" | "expiresAt" | "acceptedAt" | "acceptedBy" | "declinedAt" | "revokedAt";
+    };
+    readonly functions: "accept_invitation" | "accept_invitation_by_id" | "create_invitation" | "decline_invitation" | "decline_invitation_by_id" | "invitation_extra" | "invitation_preview" | "invitation_tenant_ids" | "invite_member" | "my_invitations" | "resend_invitation" | "revoke_invitation" | "update_invitation";
+    readonly actions: "invite" | "revoke" | "view" | "invitePlatform";
+    readonly hooks: "before_invitation_create" | "after_invitation_accept" | "invitation_preview_extra";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "invoices": {
+    readonly tables: {
+      readonly "invoices": "id" | "tenant" | "kind" | "number" | "identifier" | "original" | "title" | "companyType" | "companyId" | "contactType" | "contactId" | "currency" | "status" | "termsDays" | "issuedOn" | "dueOn" | "paidTotal" | "creditedTotal" | "paidAt" | "voidedAt" | "voidReason" | "note" | "originType" | "originId" | "depositBps" | "createdBy" | "createdAt" | "updatedAt" | "listTotal" | "discountTotal" | "subtotal" | "taxTotal" | "total";
+      readonly "lines": "id" | "tenant" | "parent" | "productType" | "productId" | "description" | "quantity" | "unitAmount" | "discountBps" | "taxRateBps" | "taxCode" | "position" | "createdAt";
+    };
+    readonly functions: "create_invoice" | "credit_invoice" | "invoice_aging" | "issue_invoice" | "record_invoice_payment" | "set_invoice_lines" | "set_invoice_lines_recount" | "void_invoice" | "write_off_invoice";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: "before_invoice_issue" | "after_invoice_issue" | "before_invoice_payment" | "after_invoice_payment";
+    readonly entities: {
+      readonly "invoice": "id" | "tenant_id" | "kind" | "number" | "identifier" | "original_id" | "title" | "company_type" | "company_id" | "contact_type" | "contact_id" | "currency" | "status" | "terms_days" | "issued_on" | "due_on" | "paid_total" | "credited_total" | "paid_at" | "voided_at" | "void_reason" | "note" | "origin_type" | "origin_id" | "deposit_bps" | "created_by" | "created_at" | "updated_at" | "list_total" | "discount_total" | "subtotal" | "tax_total" | "total";
+    };
+    readonly primary: "invoice";
+  };
+  readonly "jsonb-schemas": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "knowledge": {
+    readonly tables: {
+      readonly "documents": "id" | "tenant" | "owner" | "scope" | "scopeId" | "file" | "title" | "source" | "metadata" | "status" | "error" | "chunkCount" | "model" | "createdAt" | "updatedAt";
+      readonly "chunks": "document" | "index" | "content" | "tokens" | "embedding" | "hash" | "metadata" | "tsv";
+    };
+    readonly functions: "create_knowledge_document" | "delete_knowledge_document" | "fail_knowledge_document" | "get_knowledge_document" | "knowledge_search" | "list_knowledge_documents" | "pending_knowledge_chunks" | "pending_knowledge_documents" | "reembed_knowledge" | "set_knowledge_embeddings" | "write_knowledge_chunks";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "document": "id" | "organization_id" | "owner_id" | "scope" | "scope_id" | "file_id" | "title" | "source" | "metadata" | "status" | "error" | "chunk_count" | "embedding_model" | "created_at" | "updated_at";
+    };
+    readonly primary: "document";
+  };
+  readonly "lead-scoring": {
+    readonly tables: {
+      readonly "checks": "tenant" | "subjectType" | "subjectId" | "stale" | "checkedAt";
+    };
+    readonly functions: "lead_fields" | "lead_person_changed" | "score_lead" | "score_leads_due";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "leases": {
+    readonly tables: {
+      readonly "leases": "id" | "tenant" | "unit" | "partyType" | "partyId" | "title" | "status" | "startsOn" | "endsOn" | "rent" | "currency" | "frequency" | "deposit" | "depositHold" | "renewedAt" | "terminatedOn" | "terminationReason" | "metadata" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "charges": "id" | "tenant" | "lease" | "periodStart" | "periodEnd" | "amount" | "currency" | "transaction" | "createdAt";
+    };
+    readonly functions: "activate_lease" | "create_lease" | "get_lease" | "list_lease_charges" | "list_leases" | "post_due_rent" | "record_rent_payment" | "renew_lease" | "terminate_lease";
+    readonly actions: "read" | "manage" | "maintain";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "lease": "id" | "tenant_id" | "unit_id" | "party_type" | "party_id" | "title" | "status" | "starts_on" | "ends_on" | "rent" | "currency" | "frequency" | "deposit" | "deposit_hold_id" | "renewed_at" | "terminated_on" | "termination_reason" | "metadata" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "lease";
+  };
+  readonly "leave": {
+    readonly tables: {
+      readonly "types": "id" | "tenant" | "key" | "name" | "unit" | "paid" | "tracked" | "allowance" | "carryoverMax" | "color" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "requests": "id" | "tenant" | "user" | "type" | "startsOn" | "endsOn" | "partial" | "amount" | "note" | "approval" | "approvedAt" | "cancelledAt" | "cancelledBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "accrue_leave" | "adjust_leave_balance" | "approve_leave_request" | "archive_leave_type" | "cancel_leave_request" | "close_leave_year" | "leave_available" | "leave_balances" | "leave_ledger_entries" | "leave_post" | "leave_posted" | "leave_working_days" | "list_leave_requests" | "list_leave_types" | "request_leave" | "save_leave_type";
+    readonly actions: "request" | "read" | "approve" | "manage";
+    readonly hooks: "before_leave_request" | "after_leave_request";
+    readonly entities: {
+      readonly "request": "id" | "tenant_id" | "user_id" | "type_id" | "starts_on" | "ends_on" | "partial" | "amount" | "note" | "approval_id" | "approved_at" | "cancelled_at" | "cancelled_by" | "created_at" | "updated_at";
+      readonly "type": "id" | "tenant_id" | "key" | "name" | "unit" | "paid" | "tracked" | "allowance" | "carryover_max" | "color" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "request";
+  };
+  readonly "ledger": {
+    readonly tables: {
+      readonly "accounts": "id" | "tenant" | "kind" | "code" | "name" | "unit" | "scale" | "holderType" | "holderId" | "owner" | "allowNegative" | "readPermission" | "managedBy" | "metadata" | "closedAt" | "createdAt" | "updatedAt";
+      readonly "transactions": "id" | "tenant" | "kind" | "referenceType" | "referenceId" | "memo" | "key" | "reverses" | "metadata" | "effectiveAt" | "actor" | "createdAt";
+      readonly "entries": "id" | "tenant" | "transaction" | "account" | "amount" | "unit" | "createdAt";
+      readonly "balances": "account" | "tenant" | "balance" | "held" | "available" | "updatedAt";
+      readonly "holds": "id" | "tenant" | "account" | "amount" | "status" | "referenceType" | "referenceId" | "expiresAt" | "transaction" | "createdBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "capture_ledger_hold" | "close_ledger_account" | "expire_ledger_holds" | "get_ledger_transaction" | "ledger_account_entries" | "ledger_account_for" | "ledger_append_only" | "ledger_apply_entry" | "ledger_capture" | "ledger_check_balanced" | "ledger_hold" | "ledger_post" | "ledger_read_grants" | "ledger_release" | "ledger_unhold" | "list_ledger_accounts" | "open_ledger_account" | "place_ledger_hold" | "post_ledger_transaction" | "release_ledger_hold" | "reverse_ledger_transaction";
+    readonly actions: "read" | "manage" | "post";
+    readonly hooks: "before_ledger_transaction_post" | "after_ledger_transaction_post";
+    readonly entities: {
+      readonly "ledger_account": "id" | "tenant_id" | "kind" | "code" | "name" | "unit" | "scale" | "holder_type" | "holder_id" | "owner_id" | "allow_negative" | "read_permission" | "managed_by" | "metadata" | "closed_at" | "created_at" | "updated_at";
+      readonly "ledger_transaction": "id" | "tenant_id" | "kind" | "reference_type" | "reference_id" | "memo" | "idempotency_key" | "reverses" | "metadata" | "effective_at" | "actor_id" | "created_at";
+      readonly "ledger_hold": "id" | "tenant_id" | "account_id" | "amount" | "status" | "reference_type" | "reference_id" | "expires_at" | "transaction_id" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "ledger_account";
+  };
+  readonly "mail-sync": {
+    readonly tables: {
+      readonly "accounts": "id" | "tenant" | "user" | "provider" | "address" | "credentialRef" | "share" | "status" | "cursor" | "lastSyncedAt" | "lastError" | "createdAt" | "updatedAt";
+      readonly "threads": "id" | "tenant" | "account" | "externalId" | "subject" | "snippet" | "lastMessageAt" | "messageCount" | "engagement" | "createdAt" | "updatedAt";
+      readonly "messages": "id" | "tenant" | "account" | "thread" | "externalId" | "rfcId" | "direction" | "fromAddress" | "fromName" | "to" | "cc" | "subject" | "snippet" | "bodyText" | "bodyHtml" | "sentAt" | "templateVersion" | "trackingHash" | "openedAt" | "openCount" | "clickedAt" | "clickCount" | "createdAt";
+      readonly "trackedLinks": "tenant" | "message" | "position" | "url" | "clickCount" | "createdAt";
+      readonly "tracking": "id" | "tenant" | "message" | "kind" | "position" | "userAgent" | "occurredAt";
+      readonly "links": "tenant" | "thread" | "subjectType" | "subjectId" | "source" | "createdAt";
+    };
+    readonly functions: "connect_mail_account" | "disconnect_mail_account" | "due_mail_accounts" | "get_mail_account" | "get_mail_thread" | "ingest_mail" | "link_mail_thread" | "list_mail_threads" | "mail_accounts_of" | "mail_template_stats" | "mail_thread_visible" | "mail_threads_of" | "record_sent_mail" | "set_mail_account_status" | "store_mail_message" | "track_mail" | "unlink_mail_thread" | "update_mail_account";
+    readonly actions: "read" | "connect" | "send" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "mail_thread": "id" | "tenant_id" | "account_id" | "external_id" | "subject" | "snippet" | "last_message_at" | "message_count" | "engagement_id" | "created_at" | "updated_at";
+      readonly "mail_account": "id" | "tenant_id" | "user_id" | "provider" | "address" | "credential_ref" | "share" | "status" | "sync_cursor" | "last_synced_at" | "last_error" | "created_at" | "updated_at";
+      readonly "mail_message": "id" | "tenant_id" | "account_id" | "thread_id" | "external_id" | "rfc_message_id" | "direction" | "from_address" | "from_name" | "to_addresses" | "cc_addresses" | "subject" | "snippet" | "body_text" | "body_html" | "sent_at" | "template_version_id" | "tracking_hash" | "opened_at" | "open_count" | "clicked_at" | "click_count" | "created_at";
+    };
+    readonly primary: "mail_thread";
+  };
+  readonly "memberships": {
+    readonly tables: {
+      readonly "memberships": "tenant" | "user" | "role" | "createdAt" | "updatedAt" | "lastUsedAt" | "disabledAt";
+    };
+    readonly functions: "current_tenant_id" | "has_organization_role" | "member_organization_ids" | "membership_claims" | "organization_member_role";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {
+      readonly "organization": never;
+    };
+    readonly primary: never;
+  };
+  readonly "memory": {
+    readonly tables: {
+      readonly "memories": "id" | "tenant" | "owner" | "scope" | "agent" | "chat" | "project" | "kind" | "path" | "content" | "version" | "embedding" | "model" | "sourceMessage" | "supersededBy" | "tsv" | "createdAt" | "updatedAt";
+      readonly "messageEmbeddings": "chat" | "message" | "user" | "tenant" | "embedding" | "model" | "createdAt";
+      readonly "documents": "scopeKey" | "path" | "content" | "version" | "expiresAt" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "memory_create" | "memory_delete" | "memory_document_read" | "memory_document_write" | "memory_forget" | "memory_insert" | "memory_list" | "memory_rename" | "memory_save" | "memory_search" | "memory_str_replace" | "memory_view" | "pending_memory_embeddings" | "purge_memory_documents" | "recall_ai_messages" | "set_ai_message_embedding" | "set_memory_embedding" | "set_memory_embeddings";
+    readonly actions: "read" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "memory": "id" | "organization_id" | "owner_id" | "scope" | "agent_id" | "chat_id" | "project_id" | "kind" | "path" | "content" | "version" | "embedding" | "embedding_model" | "source_message_id" | "superseded_by" | "tsv" | "created_at" | "updated_at";
+    };
+    readonly primary: "memory";
+  };
+  readonly "messaging": {
+    readonly tables: {
+      readonly "conversations": "id" | "tenant" | "kind" | "access" | "subjectType" | "subjectId" | "title" | "memberKey" | "createdBy" | "lastMessageAt" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "members": "conversation" | "tenant" | "user" | "role" | "notify" | "lastReadAt" | "joinedAt";
+      readonly "messages": "id" | "tenant" | "conversation" | "parent" | "thread" | "author" | "kind" | "body" | "document" | "anchor" | "mentions" | "mentionScope" | "broadcast" | "replyCount" | "lastReplyAt" | "replyUsers" | "pinnedAt" | "pinnedBy" | "resolvedAt" | "resolvedBy" | "scheduledFor" | "sentAt" | "editedAt" | "deletedAt" | "createdAt";
+      readonly "edits": "id" | "tenant" | "message" | "body" | "document" | "editor" | "editedAt";
+      readonly "reads": "tenant" | "user" | "conversation" | "thread" | "lastReadAt";
+      readonly "recordMentions": "tenant" | "message" | "conversation" | "subjectType" | "subjectId" | "createdAt";
+      readonly "summaries": "id" | "tenant" | "conversation" | "thread" | "summary" | "model" | "messageCount" | "throughAt" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "add_conversation_members" | "archive_conversation" | "can_conversation" | "conversation_read_at" | "conversation_topic_allowed" | "delete_message" | "edit_message" | "get_message" | "index_record_mentions" | "is_conversation_member" | "list_conversations" | "list_file_anchors" | "list_message_edits" | "list_messages" | "list_pinned_messages" | "list_record_mentions" | "list_replies" | "mark_read" | "messaging_file_anchor_valid" | "messaging_message_broadcast" | "messaging_message_sent" | "messaging_message_written" | "messaging_messages_json" | "open_conversation" | "parse_mentions" | "pin_message" | "publish_due_messages" | "remove_conversation_member" | "resolve_message" | "save_thread_summary" | "send_message" | "set_conversation_notify" | "set_typing" | "thread_summary" | "unread_counts";
+    readonly actions: "read" | "send" | "moderate";
+    readonly hooks: "before_message_send" | "after_message_send" | "before_message_edit" | "after_message_edit";
+    readonly entities: {
+      readonly "message": "id" | "tenant_id" | "conversation_id" | "parent_id" | "thread_id" | "author_id" | "kind" | "body" | "document" | "anchor" | "mentions" | "mention_scope" | "broadcast" | "reply_count" | "last_reply_at" | "reply_user_ids" | "pinned_at" | "pinned_by" | "resolved_at" | "resolved_by" | "scheduled_for" | "sent_at" | "edited_at" | "deleted_at" | "created_at";
+      readonly "conversation": "id" | "tenant_id" | "kind" | "access" | "subject_type" | "subject_id" | "title" | "member_key" | "created_by" | "last_message_at" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "message";
+  };
+  readonly "metrics": {
+    readonly tables: {
+      readonly "points": "tenant" | "metric" | "grain" | "bucketStart" | "dims" | "value" | "count" | "updatedAt";
+    };
+    readonly functions: "metric_definitions" | "metric_series" | "metric_value" | "metrics_rollup";
+    readonly actions: "read" | "manage";
+    readonly hooks: "before_metric_rollup" | "after_metric_rollup";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "mfa": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "moderation": {
+    readonly tables: {
+      readonly "items": "id" | "tenant" | "subjectType" | "subjectId" | "author" | "status" | "openReports" | "reason" | "decidedBy" | "decidedAt" | "createdAt" | "updatedAt";
+      readonly "reports": "id" | "tenant" | "item" | "reporter" | "reason" | "note" | "status" | "resolvedBy" | "resolvedAt" | "createdAt";
+      readonly "actions": "id" | "tenant" | "item" | "action" | "fromStatus" | "toStatus" | "reason" | "actor" | "createdAt";
+      readonly "bans": "id" | "tenant" | "user" | "reason" | "bannedBy" | "expiresAt" | "liftedBy" | "liftedAt" | "createdAt";
+    };
+    readonly functions: "ban_user" | "list_bans" | "moderate" | "moderation_apply" | "moderation_banned" | "moderation_item" | "moderation_queue" | "moderation_statuses" | "moderation_track" | "report_content" | "unban_user";
+    readonly actions: "read" | "report" | "manage" | "ban";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "moderation_item": "id" | "tenant_id" | "subject_type" | "subject_id" | "author_id" | "status" | "open_reports" | "reason" | "decided_by" | "decided_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "moderation_item";
+  };
+  readonly "notifications": {
+    readonly tables: {
+      readonly "events": "id" | "tenant" | "type" | "actor" | "subjectType" | "subjectId" | "subjectLabel" | "summary" | "actionPath" | "priority" | "data" | "key" | "createdBy" | "createdAt";
+      readonly "recipients": "id" | "event" | "tenant" | "user" | "readAt" | "dismissedAt" | "resolvedAt" | "deliveredAt" | "createdAt";
+      readonly "deliveries": "id" | "recipient" | "tenant" | "channel" | "status" | "provider" | "providerMessageId" | "error" | "attempts" | "attemptedAt" | "nextAttemptAt" | "deliveredAt" | "providerStatus" | "providerStatusAt" | "templateKey" | "createdAt";
+      readonly "deliveryEvents": "id" | "delivery" | "tenant" | "kind" | "provider" | "providerEventId" | "occurredAt" | "detail" | "createdAt";
+      readonly "subscriptions": "id" | "tenant" | "user" | "subjectType" | "subjectId" | "level" | "createdAt" | "updatedAt";
+      readonly "preferences": "id" | "user" | "tenant" | "type" | "channel" | "enabled" | "createdAt" | "updatedAt";
+      readonly "suppressions": "id" | "channel" | "address" | "user" | "reason" | "provider" | "providerEventId" | "detail" | "createdAt";
+    };
+    readonly functions: "broadcast_notification" | "claim_notification_deliveries" | "complete_notification_delivery" | "dismiss_notifications" | "get_notification" | "list_notification_preferences" | "list_notification_subscriptions" | "list_notification_suppressions" | "list_notifications" | "list_subject_deliveries" | "mark_notifications_read" | "mark_notifications_unread" | "notification_counts" | "notification_enabled" | "notification_page" | "notify" | "purge_notifications" | "record_delivery_event" | "resolve_notifications" | "send_notification" | "send_notifications" | "set_notification_preference" | "set_notification_subscription" | "suppress_notification_address" | "unsuppress_notification_address";
+    readonly actions: "send" | "read";
+    readonly hooks: "notification_audience" | "before_notification_send" | "after_notify";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "numbering": {
+    readonly tables: {
+      readonly "sequences": "tenant" | "entity" | "period" | "lastNumber" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "next_number" | "number_format" | "number_period" | "preview_number" | "sync_number_sequences";
+    readonly actions: "assign";
+    readonly hooks: "before_number_assign" | "after_number_assign";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "oauth-server": {
+    readonly tables: {
+      readonly "clients": "id" | "clientId" | "secretHash" | "registrationTokenHash" | "name" | "redirectUris" | "grantTypes" | "authMethod" | "scope" | "metadata" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "grants": "id" | "userId" | "clientId" | "scopes" | "resource" | "createdAt" | "updatedAt" | "revokedAt";
+      readonly "codes": "codeHash" | "clientId" | "userId" | "grantId" | "redirectUri" | "scope" | "resource" | "codeChallenge" | "nonce" | "expiresAt" | "consumedAt" | "createdAt";
+      readonly "devices": "deviceCodeHash" | "userCode" | "clientId" | "scope" | "resource" | "status" | "userId" | "grantId" | "pollInterval" | "lastPolledAt" | "expiresAt" | "consumedAt" | "createdAt";
+      readonly "revocations": "jti" | "grantId" | "expiresAt" | "createdAt";
+    };
+    readonly functions: "create_oauth_authorization_code" | "create_oauth_device_code" | "decide_oauth_device_code" | "delete_oauth_client" | "is_oauth_token_revoked" | "list_oauth_grants" | "my_oauth_grants" | "oauth_client" | "oauth_device_request" | "oauth_grant_for" | "poll_oauth_device_code" | "purge_oauth_server" | "redeem_oauth_authorization_code" | "register_oauth_client" | "revoke_my_oauth_grant" | "revoke_oauth_grant" | "revoke_oauth_token" | "rotate_oauth_client_secret" | "update_oauth_client" | "verify_oauth_client" | "verify_oauth_registration_token";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "onboarding": {
+    readonly tables: {};
+    readonly functions: "complete_onboarding_step" | "onboarding_progress" | "reset_onboarding_step";
+    readonly actions: "read" | "complete";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "orders": {
+    readonly tables: {
+      readonly "carts": "id" | "tenant" | "user" | "currency" | "priceList" | "status" | "email" | "shippingAddress" | "billingAddress" | "shippingRate" | "createdAt" | "updatedAt" | "convertedAt";
+      readonly "cartLines": "id" | "tenant" | "cart" | "variant" | "quantity" | "unitAmount" | "createdAt" | "updatedAt";
+      readonly "shippingRates": "id" | "tenant" | "name" | "countries" | "currency" | "kind" | "amount" | "perKg" | "freeOver" | "active" | "createdAt" | "updatedAt";
+      readonly "orders": "id" | "tenant" | "number" | "sequence" | "cart" | "customer" | "email" | "status" | "currency" | "subtotal" | "discountTotal" | "shippingTotal" | "taxTotal" | "total" | "paidTotal" | "refundedTotal" | "taxInclusive" | "shippingAddress" | "billingAddress" | "shipping" | "promotions" | "tax" | "taxTransaction" | "invoiceNumber" | "invoiceSequence" | "invoicedAt" | "placedAt" | "paidAt" | "fulfilledAt" | "completedAt" | "cancelledAt" | "cancelReason" | "updatedAt";
+      readonly "orderLines": "id" | "tenant" | "order" | "position" | "variant" | "product" | "sku" | "title" | "quantity" | "unitAmount" | "subtotal" | "discount" | "tax" | "total" | "requiresShipping" | "location" | "reservation" | "fulfilled" | "returned" | "backordered";
+      readonly "payments": "id" | "tenant" | "order" | "provider" | "reference" | "status" | "currency" | "amount" | "captured" | "refunded" | "createdAt" | "updatedAt";
+      readonly "fulfillments": "id" | "tenant" | "order" | "location" | "status" | "carrier" | "trackingNumber" | "trackingUrl" | "createdAt" | "shippedAt" | "deliveredAt";
+      readonly "fulfillmentLines": "tenant" | "fulfillment" | "line" | "quantity";
+      readonly "returns": "id" | "tenant" | "order" | "status" | "reason" | "requestedBy" | "createdAt" | "receivedAt";
+      readonly "returnLines": "tenant" | "return" | "line" | "quantity";
+      readonly "refunds": "id" | "tenant" | "order" | "payment" | "return" | "amount" | "currency" | "status" | "reason" | "providerReference" | "createdAt" | "completedAt";
+      readonly "kitchenStations": "id" | "tenant" | "key" | "name" | "position" | "isDefault" | "active" | "createdAt" | "updatedAt";
+      readonly "kitchenRoutes": "product" | "tenant" | "station";
+      readonly "preparations": "line" | "tenant" | "order" | "station" | "state" | "note" | "queuedAt" | "startedAt" | "readyAt" | "servedAt" | "updatedAt" | "updatedBy";
+    };
+    readonly functions: "add_to_cart" | "cancel_fulfillment" | "cancel_order" | "cart_totals" | "complete_refund" | "create_cart" | "create_fulfillment" | "create_refund" | "delete_shipping_rate" | "deliver_fulfillment" | "expire_orders" | "get_order" | "merge_carts" | "order_cancel" | "order_json" | "order_transition" | "place_order" | "price_cart" | "receive_return" | "record_payment" | "reject_return" | "request_return" | "save_shipping_rate" | "set_cart_details" | "set_cart_line" | "set_cart_shipping_rate" | "set_order_tax_transaction" | "ship_fulfillment" | "shipping_options";
+    readonly actions: "manage" | "read" | "prepare";
+    readonly hooks: "before_order_place" | "after_order_place" | "before_fulfillment_create" | "after_fulfillment_create" | "before_refund_create" | "after_refund_create";
+    readonly entities: {
+      readonly "order": "id" | "tenant_id" | "number" | "sequence" | "cart_id" | "customer_id" | "email" | "status" | "currency" | "subtotal" | "discount_total" | "shipping_total" | "tax_total" | "total" | "paid_total" | "refunded_total" | "tax_inclusive" | "shipping_address" | "billing_address" | "shipping" | "promotions" | "tax" | "tax_transaction" | "invoice_number" | "invoice_sequence" | "invoiced_at" | "placed_at" | "paid_at" | "fulfilled_at" | "completed_at" | "cancelled_at" | "cancel_reason" | "updated_at";
+      readonly "cart": "id" | "tenant_id" | "user_id" | "currency" | "price_list_id" | "status" | "email" | "shipping_address" | "billing_address" | "shipping_rate_id" | "created_at" | "updated_at" | "converted_at";
+    };
+    readonly primary: "order";
+  };
+  readonly "organizations": {
+    readonly tables: {
+      readonly "organizations": "id" | "name" | "slug" | "createdBy" | "createdAt" | "updatedAt" | "disabledAt" | "deletedAt";
+    };
+    readonly functions: "create_organization" | "delete_organization" | "ensure_organization_owner" | "guard_membership" | "guard_membership_role" | "leave_organization" | "list_members" | "list_my_organizations" | "mark_used" | "organization_slug_problem" | "remove_member" | "resume_member" | "suspend_member" | "switch_organization" | "transfer_ownership" | "update_member_role" | "update_organization";
+    readonly actions: "update" | "delete" | "removeMember" | "suspendMember" | "updateRole" | "transferOwnership";
+    readonly hooks: "before_organization_create" | "after_organization_create" | "before_organization_update" | "after_organization_update" | "after_member_change";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "outbox": {
+    readonly tables: {
+      readonly "events": "id" | "position" | "type" | "source" | "subject" | "tenant" | "key" | "payload" | "actor" | "createdAt" | "xid";
+      readonly "consumers": "name" | "cursorXid" | "cursor" | "types" | "leaseOwner" | "leaseUntil" | "attempts" | "lastError" | "retryAt" | "updatedAt";
+      readonly "deadLetters": "consumer" | "position" | "eventId" | "type" | "event" | "attempts" | "error" | "deadAt";
+    };
+    readonly functions: "emit_event" | "outbox_ack" | "outbox_claim" | "outbox_dead_letters" | "outbox_fail" | "outbox_history" | "outbox_register" | "outbox_row_event" | "outbox_unregister" | "purge_outbox" | "track_events";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "passes": {
+    readonly tables: {
+      readonly "passes": "id" | "tenant" | "kind" | "holderUser" | "holderName" | "holderEmail" | "subjectType" | "subjectId" | "booking" | "resource" | "usesAllowed" | "uses" | "validFrom" | "validUntil" | "status" | "nonce" | "issuedBy" | "createdAt" | "updatedAt" | "revokedAt";
+      readonly "checkIns": "id" | "tenant" | "pass" | "resource" | "booking" | "gate" | "method" | "admitted" | "reason" | "checkedInBy" | "createdAt";
+    };
+    readonly functions: "check_in_pass" | "get_pass" | "issue_pass" | "list_pass_check_ins" | "list_passes" | "my_passes" | "revoke_pass";
+    readonly actions: "read" | "manage" | "checkIn";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "pass": "id" | "tenant_id" | "kind" | "holder_user_id" | "holder_name" | "holder_email" | "subject_type" | "subject_id" | "booking_id" | "resource_id" | "uses_allowed" | "uses" | "valid_from" | "valid_until" | "status" | "nonce" | "issued_by" | "created_at" | "updated_at" | "revoked_at";
+      readonly "pass_check_in": "id" | "tenant_id" | "pass_id" | "resource_id" | "booking_id" | "gate" | "method" | "admitted" | "reason" | "checked_in_by" | "created_at";
+    };
+    readonly primary: "pass";
+  };
+  readonly "permissions": {
+    readonly tables: {
+      readonly "roles": "id" | "key" | "scope" | "tenant";
+      readonly "permissions": "id" | "key";
+      readonly "rolePermissions": "role" | "permission";
+      readonly "overrides": "tenant" | "role" | "permission" | "granted";
+      readonly "platformAssignments": "user" | "role";
+    };
+    readonly functions: "can" | "can_assign" | "can_assign_as" | "can_user" | "is_platform" | "member_can" | "permission_claims" | "tenant_ids_with";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "pgtap": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "pipelines": {
+    readonly tables: {
+      readonly "pipelines": "id" | "tenant" | "subjectType" | "scope" | "key" | "name" | "rank" | "isDefault" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "stages": "id" | "tenant" | "pipeline" | "key" | "systemKey" | "name" | "color" | "rank" | "category" | "outcome" | "probability" | "rottingAfterDays" | "wipLimit" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "transitions": "tenant" | "pipeline" | "from" | "to";
+      readonly "history": "id" | "tenant" | "subjectType" | "subjectId" | "pipeline" | "fromStage" | "toStage" | "stageName" | "category" | "outcome" | "amount" | "currency" | "actor" | "enteredAt" | "exitedAt";
+    };
+    readonly functions: "archive_pipeline" | "archive_pipeline_stage" | "default_pipeline" | "list_pipelines" | "pipeline_board" | "pipeline_health" | "pipeline_stats" | "rank_pipeline_stage" | "save_pipeline" | "save_pipeline_stage" | "set_pipeline_transitions";
+    readonly actions: "read" | "manage";
+    readonly hooks: "before_pipeline_save" | "after_pipeline_save" | "before_pipeline_stage_save" | "after_pipeline_stage_save" | "before_pipeline_stage_change" | "after_pipeline_stage_change";
+    readonly entities: {
+      readonly "pipeline": "id" | "tenant_id" | "subject_type" | "scope_id" | "key" | "name" | "rank" | "is_default" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "pipeline";
+  };
+  readonly "posts": {
+    readonly tables: {
+      readonly "boards": "id" | "tenant" | "key" | "name" | "description" | "kind" | "archivedAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "posts": "id" | "tenant" | "board" | "author" | "title" | "body" | "status" | "moderation" | "pinnedAt" | "lockedAt" | "mergedInto" | "replyCount" | "lastActivityAt" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "create_post" | "delete_post" | "get_post" | "list_post_boards" | "list_posts" | "merge_posts" | "posts_moderated" | "posts_removed" | "posts_replied" | "posts_reply_guard" | "save_post_board" | "set_post_state" | "update_post" | "vote_on_post";
+    readonly actions: "read" | "write" | "moderate" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "post_board": "id" | "tenant_id" | "key" | "name" | "description" | "kind" | "archived_at" | "created_by" | "created_at" | "updated_at";
+      readonly "post": "id" | "tenant_id" | "board_id" | "author_id" | "title" | "body" | "status" | "moderation_status" | "pinned_at" | "locked_at" | "merged_into_id" | "reply_count" | "last_activity_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "post";
+  };
+  readonly "profiles": {
+    readonly tables: {
+      readonly "profiles": "key" | "email" | "username" | "fullName" | "firstName" | "lastName" | "avatar" | "avatarPath" | "activeTenant" | "activeTeam" | "onboarding" | "disabledAt" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "allocate_username" | "backfill_profiles" | "guard_profile" | "mirror_profile_email" | "my_profile" | "on_auth_user_created" | "sync_profile" | "update_my_profile";
+    readonly actions: never;
+    readonly hooks: "after_profile_sync" | "before_profile_update" | "after_profile_update";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "promotions": {
+    readonly tables: {
+      readonly "promotions": "id" | "tenant" | "name" | "description" | "kind" | "percent" | "currency" | "amount" | "minSubtotal" | "scope" | "targets" | "startsAt" | "endsAt" | "usageLimit" | "perCustomerLimit" | "redemptions" | "stackable" | "priority" | "automatic" | "active" | "createdAt" | "updatedAt";
+      readonly "codes": "id" | "tenant" | "promotion" | "code" | "usageLimit" | "redemptions" | "createdAt";
+      readonly "cartCodes": "tenant" | "cart" | "code" | "createdAt";
+      readonly "redemptions": "id" | "tenant" | "promotion" | "code" | "order" | "customer" | "email" | "currency" | "amount" | "status" | "createdAt" | "releasedAt";
+    };
+    readonly functions: "apply_promotion_code" | "cart_discounts" | "create_promotion_codes" | "delete_promotion" | "delete_promotion_code" | "move_cart_codes" | "redeem_promotions" | "release_promotions" | "remove_promotion_code" | "round_half_even" | "save_promotion" | "set_promotion_active";
+    readonly actions: "manage" | "read";
+    readonly hooks: "before_promotion_save" | "after_promotion_save" | "before_promotion_activate";
+    readonly entities: {
+      readonly "promotion": "id" | "tenant_id" | "name" | "description" | "kind" | "percent" | "currency" | "amount" | "min_subtotal" | "scope" | "target_ids" | "starts_at" | "ends_at" | "usage_limit" | "per_customer_limit" | "redemptions" | "stackable" | "priority" | "automatic" | "active" | "created_at" | "updated_at";
+    };
+    readonly primary: "promotion";
+  };
+  readonly "push": {
+    readonly tables: {
+      readonly "devices": "id" | "user" | "token" | "platform" | "provider" | "deviceName" | "appVersion" | "createdAt" | "lastSeenAt";
+    };
+    readonly functions: "prune_push_tokens" | "push_tokens_for" | "register_push_device" | "unregister_push_device";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "queue": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "quotes": {
+    readonly tables: {
+      readonly "quotes": "id" | "tenant" | "number" | "identifier" | "revision" | "supersedes" | "title" | "companyType" | "companyId" | "contactType" | "contactId" | "owner" | "currency" | "status" | "validUntil" | "terms" | "note" | "originType" | "originId" | "tokenHash" | "sentAt" | "viewedAt" | "decidedAt" | "decidedBy" | "decisionNote" | "createdBy" | "createdAt" | "updatedAt" | "listTotal" | "discountTotal" | "subtotal" | "taxTotal" | "total";
+      readonly "lines": "id" | "tenant" | "parent" | "productType" | "productId" | "description" | "quantity" | "unitAmount" | "discountBps" | "taxRateBps" | "taxCode" | "position" | "createdAt";
+    };
+    readonly functions: "create_quote" | "decide_quote" | "expire_quotes" | "public_quote" | "respond_to_quote" | "revise_quote" | "send_quote" | "set_quote_lines" | "set_quote_lines_recount" | "update_quote";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: "before_quote_send" | "after_quote_send" | "before_quote_accept" | "after_quote_accept";
+    readonly entities: {
+      readonly "quote": "id" | "tenant_id" | "number" | "identifier" | "revision" | "supersedes_id" | "title" | "company_type" | "company_id" | "contact_type" | "contact_id" | "owner_user_id" | "currency" | "status" | "valid_until" | "terms" | "note" | "origin_type" | "origin_id" | "token_hash" | "sent_at" | "viewed_at" | "decided_at" | "decided_by" | "decision_note" | "created_by" | "created_at" | "updated_at" | "list_total" | "discount_total" | "subtotal" | "tax_total" | "total";
+    };
+    readonly primary: "quote";
+  };
+  readonly "rank": {
+    readonly tables: {};
+    readonly functions: "can_subject" | "move" | "rank_between" | "rank_key" | "rebalance_ranks";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "rate-limit": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "reactions": {
+    readonly tables: {
+      readonly "reactions": "id" | "tenant" | "subjectType" | "subjectId" | "actor" | "user" | "kind" | "emoji" | "value" | "createdAt";
+      readonly "scores": "tenant" | "subjectType" | "subjectId" | "score" | "up" | "down" | "updatedAt";
+      readonly "emoji": "id" | "tenant" | "shortcode" | "attachment" | "url" | "createdBy" | "createdAt";
+    };
+    readonly functions: "delete_custom_emoji" | "list_custom_emoji" | "react" | "reaction_list" | "reaction_subject_visible" | "reaction_summary" | "reactions_changed" | "reactions_check" | "reactions_tally" | "save_custom_emoji" | "vote" | "vote_summary" | "vote_tally";
+    readonly actions: "read" | "create" | "manage";
+    readonly hooks: "before_react" | "after_react";
+    readonly entities: {
+      readonly "reaction": "id" | "tenant_id" | "subject_type" | "subject_id" | "actor" | "user_id" | "kind" | "emoji" | "value" | "created_at";
+    };
+    readonly primary: "reaction";
+  };
+  readonly "read-sets": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "realtime-tables": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "relations": {
+    readonly tables: {
+      readonly "relations": "id" | "tenant" | "kind" | "sourceType" | "sourceId" | "targetType" | "targetId" | "data" | "createdBy" | "createdAt";
+    };
+    readonly functions: "ancestors" | "converted_into" | "descendants" | "link" | "relation_rollup" | "relation_walk" | "relations_by_kind" | "relations_of" | "unlink";
+    readonly actions: "read" | "manage";
+    readonly hooks: "before_relation_link" | "after_relation_link";
+    readonly entities: {
+      readonly "relation": "id" | "tenant_id" | "kind" | "source_type" | "source_id" | "target_type" | "target_id" | "data" | "created_by" | "created_at";
+    };
+    readonly primary: "relation";
+  };
+  readonly "reminders": {
+    readonly tables: {
+      readonly "rules": "id" | "tenant" | "subjectType" | "subjectId" | "dtstart" | "tzid" | "rrule" | "frequency" | "intervalCount" | "weekDays" | "monthDay" | "monthWeekday" | "monthOrdinal";
+      readonly "reminders": "id" | "tenant" | "subjectType" | "subjectId" | "user" | "method" | "offsetMinutes";
+      readonly "deliveries": "id" | "reminder" | "occurrenceAt" | "sentAt";
+    };
+    readonly functions: "delete_reminder" | "list_my_reminders" | "list_reminder_schedule" | "mark_reminder_sent" | "save_reminder";
+    readonly actions: "manage" | "read";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "reminder": "id" | "tenant_id" | "subject_type" | "subject_id" | "user_id" | "method" | "offset_minutes";
+    };
+    readonly primary: "reminder";
+  };
+  readonly "reserved-slugs": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "reviews": {
+    readonly tables: {
+      readonly "reviews": "id" | "tenant" | "subjectType" | "subjectId" | "author" | "authorName" | "rating" | "title" | "body" | "status" | "verified" | "rejectionReason" | "reply" | "repliedBy" | "repliedAt" | "publishedAt" | "createdAt" | "updatedAt";
+      readonly "stats": "tenant" | "subjectType" | "subjectId" | "count" | "total" | "histogram" | "updatedAt";
+    };
+    readonly functions: "delete_review" | "list_reviews" | "my_review" | "publish_review" | "reject_review" | "reply_to_review" | "review_moderation_item" | "review_queue" | "review_stats_refresh" | "review_subject_readable" | "review_summary" | "reviews_changed" | "reviews_moderated" | "submit_review";
+    readonly actions: "manage";
+    readonly hooks: "before_review_submit" | "after_review_submit";
+    readonly entities: {
+      readonly "review": "id" | "tenant_id" | "subject_type" | "subject_id" | "author_id" | "author_name" | "rating" | "title" | "body" | "status" | "verified" | "rejection_reason" | "reply" | "replied_by" | "replied_at" | "published_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "review";
+  };
+  readonly "rls-guard": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "saved-views": {
+    readonly tables: {
+      readonly "views": "id" | "tenant" | "list" | "scope" | "owner" | "team" | "name" | "kind" | "state" | "rank" | "isDefault" | "createdAt" | "updatedAt";
+      readonly "preferences": "view" | "user" | "tenant" | "isDefault" | "hidden" | "pinned" | "updatedAt";
+    };
+    readonly functions: "delete_view" | "duplicate_view" | "list_views" | "rank_view" | "save_view" | "set_default_view" | "set_view_preference";
+    readonly actions: "read" | "share";
+    readonly hooks: "before_view_save" | "after_view_save";
+    readonly entities: {
+      readonly "view": "id" | "tenant_id" | "list" | "scope" | "owner_id" | "team_id" | "name" | "kind" | "state" | "rank" | "is_default" | "created_at" | "updated_at";
+    };
+    readonly primary: "view";
+  };
+  readonly "scores": {
+    readonly tables: {
+      readonly "models": "id" | "tenant" | "key" | "name" | "description" | "subjectType" | "rules" | "metrics" | "bands" | "enabled" | "version" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "versions": "model" | "version" | "tenant" | "rules" | "metrics" | "bands" | "savedBy" | "savedAt";
+      readonly "scores": "id" | "tenant" | "model" | "modelVersion" | "subjectType" | "subjectId" | "score" | "band" | "breakdown" | "current" | "computedAt";
+    };
+    readonly functions: "compute_score" | "delete_score_model" | "get_score_model" | "list_score_models" | "save_score_model" | "score_history" | "subject_scores" | "top_scores";
+    readonly actions: "read" | "manage" | "compute";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "score_model": "id" | "tenant_id" | "key" | "name" | "description" | "subject_type" | "rules" | "metrics" | "bands" | "enabled" | "version" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "score_model";
+  };
+  readonly "search": {
+    readonly tables: {
+      readonly "documents": "tenant" | "subjectType" | "subjectId" | "title" | "titleSearch" | "body" | "url" | "tsv" | "contentHash" | "embedding" | "updatedAt";
+    };
+    readonly functions: "search" | "search_favorites" | "search_index_row" | "search_normalize" | "search_recents" | "search_refresh" | "search_reindex" | "search_remove" | "search_star" | "search_touch" | "search_user_state";
+    readonly actions: "read";
+    readonly hooks: "before_search_document_index" | "after_search_document_index";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "security-events": {
+    readonly tables: {
+      readonly "streams": "id" | "tenant" | "receiver" | "audience" | "description" | "eventsRequested" | "eventsDelivered" | "method" | "endpoint" | "status" | "reason" | "verifiedAt" | "createdAt" | "updatedAt";
+      readonly "events": "stream" | "jti" | "token" | "createdAt";
+      readonly "received": "issuer" | "jti" | "receivedAt";
+    };
+    readonly functions: "create_ssf_stream" | "delete_ssf_stream" | "forget_ssf_received" | "note_ssf_verification" | "poll_ssf_events" | "purge_shared_signals" | "queue_ssf_set" | "record_ssf_received" | "set_ssf_stream_status" | "ssf_stream" | "ssf_streams" | "ssf_streams_for_event" | "update_ssf_stream";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "segments": {
+    readonly tables: {
+      readonly "segments": "id" | "tenant" | "name" | "description" | "subjectType" | "conditions" | "memberCount" | "refreshedAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "members": "segment" | "tenant" | "subjectId" | "enteredAt";
+    };
+    readonly functions: "evaluate_segment" | "list_segment_members" | "refresh_due_segments" | "refresh_segment" | "remove_segment" | "save_segment" | "segment_get" | "segments_list" | "segments_of";
+    readonly actions: "read" | "edit";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "segment": "id" | "tenant_id" | "name" | "description" | "subject_type" | "conditions" | "member_count" | "refreshed_at" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "segment";
+  };
+  readonly "sequences": {
+    readonly tables: {
+      readonly "sequences": "id" | "tenant" | "key" | "name" | "description" | "status" | "exitOnReply" | "account" | "steps" | "version" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "members": "enrollment" | "tenant" | "sequence" | "subjectType" | "subjectId" | "address" | "name" | "account" | "thread" | "step" | "nextRunAt" | "status" | "exitReason" | "attempts" | "lastError" | "variables" | "enrolledBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "change_sequence_enrollment" | "delete_sequence" | "enroll_in_sequence" | "enrollment_ensure" | "enrollment_mark" | "get_sequence" | "list_sequence_enrollments" | "list_sequences" | "run_due_sequences" | "save_sequence" | "sequence_exit" | "sequence_member_json" | "sequence_place" | "sequence_resync" | "sequence_step_done" | "sequence_step_failed" | "sequence_step_sent" | "sequence_steps_check";
+    readonly actions: "read" | "enroll" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "sequence": "id" | "tenant_id" | "key" | "name" | "description" | "status" | "exit_on_reply" | "mail_account_id" | "steps" | "version" | "created_by" | "created_at" | "updated_at";
+      readonly "sequence_enrollment": "enrollment_id" | "tenant_id" | "sequence_id" | "subject_type" | "subject_id" | "address" | "name" | "mail_account_id" | "mail_thread_id" | "step" | "next_run_at" | "status" | "exit_reason" | "attempts" | "last_error" | "variables" | "enrolled_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "sequence";
+  };
+  readonly "service-accounts": {
+    readonly tables: {
+      readonly "principals": "id" | "tenant" | "name" | "role" | "isDefault" | "createdBy" | "createdAt" | "disabledAt";
+    };
+    readonly functions: "default_service_principal" | "disable_service_principal" | "register_service_principal" | "service_principals_list" | "set_service_principal_role";
+    readonly actions: "read" | "manage";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "sessions": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "settings": {
+    readonly tables: {
+      readonly "user": "user" | "key" | "value" | "updatedBy" | "updatedAt";
+      readonly "organization": "tenant" | "key" | "value" | "updatedBy" | "updatedAt";
+      readonly "platform": "key" | "value" | "updatedBy" | "updatedAt";
+    };
+    readonly functions: "get_organization_settings" | "get_platform_settings" | "get_user_settings" | "record_organization_setting" | "record_platform_setting" | "reset_organization_setting" | "reset_platform_setting" | "reset_user_setting" | "set_organization_setting" | "set_platform_setting" | "set_user_setting";
+    readonly actions: "read" | "update" | "platform";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "share-links": {
+    readonly tables: {
+      readonly "links": "id" | "tenant" | "subjectType" | "subjectId" | "tokenHash" | "role" | "version" | "expiresAt" | "revokedAt" | "maxUses" | "useCount" | "createdBy" | "leaf" | "versionId";
+      readonly "views": "id" | "tenant" | "subjectType" | "subjectId" | "version" | "viewerKind" | "viewer" | "firstViewedAt" | "lastViewedAt" | "viewCount";
+      readonly "state": "subjectType" | "subjectId" | "user" | "starredAt" | "lastOpenedAt";
+    };
+    readonly functions: "create_share_link" | "list_share_links" | "record_view" | "resolve_share_link" | "revoke_share_link" | "set_user_state";
+    readonly actions: "create" | "read";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "link": "id" | "tenant_id" | "subject_type" | "subject_id" | "token_hash" | "role" | "version" | "expires_at" | "revoked_at" | "max_uses" | "use_count" | "created_by" | "leaf_id" | "version_id";
+    };
+    readonly primary: "link";
+  };
+  readonly "shipments": {
+    readonly tables: {
+      readonly "shipments": "id" | "tenant" | "reference" | "status" | "fromAddress" | "toAddress" | "fromLocation" | "subjectType" | "subjectId" | "carrier" | "service" | "trackingNumber" | "trackingUrl" | "labelId" | "labelUrl" | "labelFormat" | "labelCost" | "currency" | "labeledAt" | "deliveredAt" | "cancelledAt" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "packages": "id" | "tenant" | "shipment" | "position" | "weight" | "length" | "width" | "height" | "reference";
+      readonly "trackingEvents": "id" | "tenant" | "shipment" | "externalId" | "status" | "occurredAt" | "description" | "location" | "source" | "createdAt";
+    };
+    readonly functions: "cancel_shipment" | "create_shipment" | "get_shipment" | "ingest_tracking_events" | "list_shipments" | "list_tracking_events" | "record_tracking_events" | "set_shipment_label";
+    readonly actions: "read" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "shipment": "id" | "tenant_id" | "reference" | "status" | "from_address" | "to_address" | "from_location_id" | "subject_type" | "subject_id" | "carrier" | "service" | "tracking_number" | "tracking_url" | "label_id" | "label_url" | "label_format" | "label_cost" | "currency" | "labeled_at" | "delivered_at" | "cancelled_at" | "created_by" | "created_at" | "updated_at";
+      readonly "shipment_package": "id" | "tenant_id" | "shipment_id" | "position" | "weight_grams" | "length_mm" | "width_mm" | "height_mm" | "reference";
+      readonly "shipment_tracking_event": "id" | "tenant_id" | "shipment_id" | "external_id" | "status" | "occurred_at" | "description" | "location" | "source" | "created_at";
+    };
+    readonly primary: "shipment";
+  };
+  readonly "signatures": {
+    readonly tables: {
+      readonly "requests": "id" | "tenant" | "subjectType" | "subjectId" | "version" | "contentHash" | "signers" | "order" | "status" | "approval" | "message" | "requestedBy" | "createdAt" | "completedAt";
+      readonly "signatures": "id" | "request" | "tenant" | "signer" | "method" | "typedName" | "image" | "signedHash" | "ip" | "userAgent" | "signedAt";
+    };
+    readonly functions: "cancel_signature_request" | "create_signature_request" | "decline_signature_request" | "get_signature_request" | "list_signature_requests" | "sign_signature" | "signature_verification";
+    readonly actions: "read" | "request" | "manage";
+    readonly hooks: "before_signature_request" | "after_signature_request" | "before_signature_sign" | "after_signature_sign";
+    readonly entities: {
+      readonly "request": "id" | "tenant_id" | "subject_type" | "subject_id" | "version_id" | "content_hash" | "signers" | "sign_order" | "status" | "approval_request_id" | "message" | "requested_by" | "created_at" | "completed_at";
+    };
+    readonly primary: "request";
+  };
+  readonly "signing-keys": {
+    readonly tables: {
+      readonly "keys": "id" | "ownerType" | "ownerId" | "kid" | "alg" | "publicJwk" | "vaultId" | "state" | "publishUntil" | "createdAt" | "retiredAt";
+    };
+    readonly functions: "add_signing_key" | "delete_signing_keys" | "drop_signing_key_vault_secret" | "note_signing_key_exp" | "purge_signing_keys" | "retire_signing_key" | "signing_jwks" | "signing_key";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "sla": {
+    readonly tables: {
+      readonly "policies": "id" | "tenant" | "subjectType" | "name" | "priority" | "firstResponse" | "nextResponse" | "resolution" | "warnPercent" | "businessHours" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "clocks": "id" | "tenant" | "subjectType" | "subjectId" | "policy" | "metric" | "startedAt" | "dueAt" | "pausedAt" | "pausedSeconds" | "warnedAt" | "breachedAt" | "metAt" | "createdAt";
+    };
+    readonly functions: "check_sla_clocks" | "record_sla_event" | "save_sla_policy" | "sla_clocks_of" | "sla_due_at" | "start_sla_clocks";
+    readonly actions: "read" | "manage";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "policy": "id" | "tenant_id" | "subject_type" | "name" | "priority" | "first_response_minutes" | "next_response_minutes" | "resolution_minutes" | "warn_at_percent" | "business_hours" | "archived_at" | "created_at" | "updated_at";
+    };
+    readonly primary: "policy";
+  };
+  readonly "sso": {
+    readonly tables: {
+      readonly "domains": "id" | "tenant" | "domain" | "token" | "verifiedAt" | "autoJoinRole" | "enforceSso" | "createdBy" | "createdAt";
+      readonly "providers": "id" | "tenant" | "type" | "metadataUrl" | "domains" | "createdAt";
+      readonly "scimUsers": "id" | "tenant" | "user" | "externalId" | "userName" | "displayName" | "givenName" | "familyName" | "email" | "emails" | "active" | "version" | "createdAt" | "updatedAt";
+      readonly "scimGroups": "id" | "tenant" | "displayName" | "externalId" | "role" | "version" | "createdAt" | "updatedAt";
+      readonly "scimMembers": "group" | "member";
+    };
+    readonly functions: "add_organization_domain" | "check_sso_provider" | "list_organization_domains" | "list_sso_providers" | "organization_domain" | "register_sso_provider" | "remove_organization_domain" | "scim_delete_group" | "scim_delete_user" | "scim_get_group" | "scim_get_user" | "scim_group_role" | "scim_list_groups" | "scim_list_users" | "scim_save_group" | "scim_save_user" | "scim_sync_member" | "sso_access_token_check" | "sso_domain_for" | "sso_on_auth_user" | "sso_provider" | "unregister_sso_provider" | "update_organization_domain" | "verify_organization_domain";
+    readonly actions: "manage";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "state-machine": {
+    readonly tables: {
+      readonly "history": "id" | "tenant" | "subjectType" | "subjectId" | "fromStatus" | "toStatus" | "actor" | "reason" | "createdAt";
+      readonly "stages": "id" | "tenant" | "subjectType" | "subjectId" | "label" | "outcome" | "display" | "clearedAt" | "createdAt";
+      readonly "lifecycles": "id" | "tenant" | "subjectType" | "subjectId" | "version" | "flags" | "pausedAt" | "pausedUntil" | "pauseReason" | "pausedBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "list_status_history" | "list_status_stages" | "pause_lifecycle" | "resume_lifecycle" | "set_lifecycle_flag" | "status_state" | "transition";
+    readonly actions: never;
+    readonly hooks: "before_status_transition" | "after_status_transition";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "streams": {
+    readonly tables: {
+      readonly "streams": "id" | "tenant" | "owner" | "kind" | "wake" | "createdAt" | "closedAt" | "cancelRequestedAt" | "expiresAt";
+      readonly "chunks": "stream" | "idx" | "data";
+    };
+    readonly functions: "purge_streams" | "stream_append" | "stream_cancel" | "stream_close" | "stream_open" | "stream_read" | "stream_status";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "subjects": {
+    readonly tables: {};
+    readonly functions: "can_subject" | "can_subject_for" | "my_work" | "record_summary" | "subject_presence_allowed" | "subject_title" | "subject_titles" | "subject_types" | "subject_url";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "tags": {
+    readonly tables: {
+      readonly "tags": "id" | "tenant" | "kind" | "name" | "slug" | "color" | "description" | "rank" | "createdAt" | "updatedAt";
+      readonly "taggings": "tenant" | "tag" | "subjectType" | "subjectId" | "createdAt";
+    };
+    readonly functions: "create_tag" | "delete_tag" | "list_tags" | "rank_tag" | "subject_tags" | "tag" | "untag" | "update_tag";
+    readonly actions: "manage" | "read" | "apply";
+    readonly hooks: "before_tag_apply" | "after_tag_apply";
+    readonly entities: {
+      readonly "tag": "id" | "tenant_id" | "kind" | "name" | "slug" | "color" | "description" | "rank" | "created_at" | "updated_at";
+    };
+    readonly primary: "tag";
+  };
+  readonly "tasks": {
+    readonly tables: {
+      readonly "items": "id" | "tenant" | "number" | "identifier" | "title" | "body" | "parent" | "team" | "project" | "iteration" | "priority" | "estimate" | "progress" | "startAt" | "endAt" | "dueAt" | "pipeline" | "stage" | "stageEnteredAt" | "state" | "closeReason" | "closedAt" | "locked" | "rank" | "archivedAt" | "recursFrom" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "checklist": "id" | "tenant" | "item" | "title" | "done" | "doneAt" | "doneBy" | "rank" | "createdBy" | "createdAt";
+      readonly "assignees": "tenant" | "item" | "user" | "createdAt";
+      readonly "projects": "id" | "tenant" | "key" | "name" | "owner" | "status" | "startOn" | "targetOn" | "archivedAt" | "createdAt" | "updatedAt";
+      readonly "iterations": "id" | "tenant" | "team" | "name" | "startsOn" | "endsOn" | "createdAt";
+    };
+    readonly functions: "archive_work_item" | "create_work_item" | "delete_work_item" | "delete_work_item_checklist_item" | "get_work_item" | "list_work_item_checklist" | "list_work_items" | "save_iteration" | "save_project" | "save_work_item_checklist_item" | "set_work_item_assignees" | "update_work_items" | "work_item_tree";
+    readonly actions: "read" | "write" | "manage";
+    readonly hooks: "before_work_item_create" | "after_work_item_create" | "before_work_item_update" | "after_work_item_update";
+    readonly entities: {
+      readonly "work_item": "id" | "tenant_id" | "number" | "identifier" | "title" | "body" | "parent_id" | "team_id" | "project_id" | "iteration_id" | "priority" | "estimate" | "progress" | "start_at" | "end_at" | "due_at" | "pipeline_id" | "stage_id" | "stage_entered_at" | "state" | "close_reason" | "closed_at" | "locked" | "rank" | "archived_at" | "recurs_from" | "created_by" | "created_at" | "updated_at";
+      readonly "project": "id" | "tenant_id" | "key" | "name" | "owner_user_id" | "status" | "start_on" | "target_on" | "archived_at" | "created_at" | "updated_at";
+      readonly "iteration": "id" | "tenant_id" | "team_id" | "name" | "starts_on" | "ends_on" | "created_at";
+      readonly "checklist_item": "id" | "tenant_id" | "work_item_id" | "title" | "done" | "done_at" | "done_by" | "rank" | "created_by" | "created_at";
+    };
+    readonly primary: "work_item";
+  };
+  readonly "teams": {
+    readonly tables: {
+      readonly "teams": "id" | "tenant" | "name" | "slug" | "description" | "status" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "members": "team" | "user" | "tenant" | "createdAt";
+    };
+    readonly functions: "add_team_member" | "archive_team" | "create_team" | "delete_team" | "list_teams" | "remove_team_member" | "team_ids_of" | "update_team";
+    readonly actions: "manage" | "read";
+    readonly hooks: "before_team_create" | "after_team_create";
+    readonly entities: {
+      readonly "team": "id" | "tenant_id" | "name" | "slug" | "description" | "status" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "team";
+  };
+  readonly "templates": {
+    readonly tables: {
+      readonly "templates": "id" | "tenant" | "scope" | "key" | "type" | "name" | "language" | "isDefault" | "settings" | "forkedFrom" | "forkedFromVersion" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "versions": "id" | "template" | "version" | "body" | "hash" | "publishedAt" | "createdBy" | "createdAt";
+      readonly "applications": "id" | "template" | "version" | "tenant" | "subjectType" | "subjectId" | "appliedBy" | "appliedAt";
+      readonly "workflows": "id" | "template" | "definition" | "inputs" | "enabled" | "createdBy" | "createdAt";
+    };
+    readonly functions: "fork_template" | "publish_template_version" | "record_template_application" | "remove_template" | "save_template" | "save_template_draft" | "set_default_template" | "sync_templates" | "template_applications_list" | "template_apply_target" | "template_get" | "template_versions_list" | "templates_list";
+    readonly actions: "read" | "apply" | "manage";
+    readonly hooks: "before_template_save" | "after_template_save" | "before_template_apply" | "after_template_apply";
+    readonly entities: {
+      readonly "template": "id" | "tenant_id" | "scope" | "key" | "type" | "name" | "language" | "is_default" | "settings" | "forked_from" | "forked_from_version" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "template";
+  };
+  readonly "time-tracking": {
+    readonly tables: {
+      readonly "entries": "id" | "tenant" | "user" | "subjectType" | "subjectId" | "startedAt" | "endedAt" | "billable" | "rate" | "rateCurrency" | "note" | "createdAt" | "updatedAt" | "seconds";
+      readonly "timesheets": "id" | "tenant" | "user" | "week" | "approval" | "note" | "submittedAt" | "approvedAt" | "createdAt";
+    };
+    readonly functions: "approve_timesheet" | "delete_time_entry" | "get_timesheet" | "list_time_entries" | "list_timesheets" | "log_time" | "reopen_timesheet" | "running_timer" | "start_timer" | "stop_timer" | "submit_timesheet" | "time_entry_guard" | "time_week" | "time_week_locked" | "update_time_entry";
+    readonly actions: "read" | "track" | "approve" | "manage";
+    readonly hooks: "before_time_entry_save" | "after_time_entry_save" | "before_timesheet_submit" | "after_timesheet_submit";
+    readonly entities: {
+      readonly "entry": "id" | "tenant_id" | "user_id" | "subject_type" | "subject_id" | "started_at" | "ended_at" | "billable" | "rate" | "rate_currency" | "note" | "created_at" | "updated_at" | "seconds";
+      readonly "timesheet": "id" | "tenant_id" | "user_id" | "week" | "approval_id" | "note" | "submitted_at" | "approved_at" | "created_at";
+    };
+    readonly primary: "entry";
+  };
+  readonly "timeline": {
+    readonly tables: {
+      readonly "activity": "id" | "tenant" | "event" | "type" | "actor" | "subjectType" | "subjectId" | "summary" | "data" | "occurredAt";
+    };
+    readonly functions: "activity_subject_deliveries" | "activity_subject_readable" | "list_activity" | "record_activity";
+    readonly actions: "read";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "entry": "id" | "organization_id" | "event_id" | "type" | "actor_id" | "subject_type" | "subject_id" | "summary" | "data" | "occurred_at";
+    };
+    readonly primary: "entry";
+  };
+  readonly "trash": {
+    readonly tables: {
+      readonly "items": "id" | "tenant" | "subjectType" | "subjectId" | "title" | "batch" | "depth" | "trashedBy" | "trashedAt" | "purgeAfter";
+    };
+    readonly functions: "is_trashed" | "list_trash" | "purge_expired_trash" | "purge_trash" | "restore_trash" | "trash" | "trash_cascade" | "trash_purge_batch" | "trash_restore_batch";
+    readonly actions: "read" | "create" | "restore" | "manage";
+    readonly hooks: "before_trash" | "after_trash" | "before_untrash" | "after_untrash";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "updated-at": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "usage": {
+    readonly tables: {
+      readonly "counters": "tenant" | "meter" | "day" | "value" | "reported" | "updatedAt";
+      readonly "events": "tenant" | "meter" | "key" | "quantity" | "recordedAt";
+      readonly "history": "id" | "tenant" | "meter" | "quantity" | "actor" | "source" | "metadata" | "recordedAt";
+      readonly "distinct": "tenant" | "meter" | "periodStart" | "subject" | "firstSeen";
+      readonly "quotas": "id" | "tenant" | "plan" | "meter" | "limit" | "period" | "createdAt";
+    };
+    readonly functions: "consume_quota" | "mark_usage_reported" | "purge_usage_events" | "purge_usage_history" | "record_usage" | "record_usage_batch" | "unreported_usage" | "usage_breakdown" | "usage_history" | "usage_meters" | "usage_overview" | "usage_quota" | "usage_status" | "usage_used" | "usage_window" | "usage_window_start" | "within_quota";
+    readonly actions: "read" | "record";
+    readonly hooks: "usage_billing_period";
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "vector-search": {
+    readonly tables: {};
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "vercel-marketplace": {
+    readonly tables: {
+      readonly "installations": "id" | "configurationId" | "teamId" | "userId" | "tenant" | "tenantCreated" | "accessTokenSecret" | "status" | "metadata" | "removedAt" | "createdAt" | "updatedAt";
+      readonly "resources": "id" | "installation" | "externalId" | "name" | "plan" | "status" | "metadata" | "tenant" | "tenantCreated" | "secretRefs" | "createdAt" | "updatedAt";
+      readonly "plans": "id" | "name" | "kind" | "details" | "createdAt" | "updatedAt";
+      readonly "invoices": "id" | "installation" | "externalId" | "state" | "periodStart" | "periodEnd" | "total" | "currency" | "items" | "eventAt" | "createdAt" | "updatedAt";
+      readonly "meterReports": "id" | "installation" | "resourceExternalId" | "meterId" | "periodStart" | "periodEnd" | "quantity" | "reportedQuantity" | "reportedAt" | "createdAt";
+    };
+    readonly functions: "delete_marketplace_resource" | "link_marketplace_tenant" | "mark_marketplace_meter_reported" | "mark_marketplace_meter_sent" | "marketplace_access_token" | "marketplace_installation" | "marketplace_resource" | "marketplace_resources" | "record_marketplace_invoice" | "record_marketplace_meter_report" | "remove_marketplace_installation" | "seal_marketplace_access_token" | "set_marketplace_resource_state" | "unreported_marketplace_meter_reports" | "upsert_marketplace_installation" | "upsert_marketplace_plan" | "upsert_marketplace_resource";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "versions": {
+    readonly tables: {
+      readonly "versions": "id" | "tenant" | "subjectType" | "subjectId" | "number" | "label" | "content" | "storagePath" | "contentHash" | "source" | "frozen" | "createdBy" | "createdAt";
+    };
+    readonly functions: "delete_version" | "get_version" | "label_version" | "list_versions" | "restore_version" | "snapshot_version" | "version_insert" | "versions_capture";
+    readonly actions: "read" | "create" | "restore" | "manage";
+    readonly hooks: "before_version_snapshot" | "after_version_snapshot" | "before_version_restore" | "after_version_restore";
+    readonly entities: {
+      readonly "version": "id" | "tenant_id" | "subject_type" | "subject_id" | "number" | "label" | "content" | "storage_path" | "content_hash" | "source" | "frozen" | "created_by" | "created_at";
+    };
+    readonly primary: "version";
+  };
+  readonly "waitlist": {
+    readonly tables: {
+      readonly "entries": "id" | "email" | "status" | "position" | "referrer" | "metadata" | "user" | "decidedBy" | "decidedAt" | "createdAt";
+      readonly "codes": "id" | "hash" | "prefix" | "maxUses" | "uses" | "expiresAt" | "tenant" | "role" | "createdBy" | "createdAt" | "revokedAt";
+      readonly "redemptions": "code" | "user" | "redeemedAt";
+    };
+    readonly functions: "create_invite_code" | "decide_waitlist_entry" | "join_waitlist" | "list_invite_codes" | "list_waitlist" | "redeem_for" | "redeem_invite_code" | "revoke_invite_code" | "waitlist_admit" | "waitlist_on_auth_user";
+    readonly actions: "manage" | "invite";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "entry": "id" | "email" | "status" | "position" | "referrer" | "metadata" | "user_id" | "decided_by" | "decided_at" | "created_at";
+    };
+    readonly primary: "entry";
+  };
+  readonly "webhook-inbox": {
+    readonly tables: {
+      readonly "messages": "id" | "source" | "messageId" | "eventType" | "payload" | "headers" | "status" | "attempts" | "maxAttempts" | "availableAt" | "lockedBy" | "lockedUntil" | "lastError" | "receivedAt" | "processedAt" | "tenant" | "checkpoint";
+    };
+    readonly functions: never;
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "webhooks-in": {
+    readonly tables: {
+      readonly "endpoints": "id" | "tenant" | "name" | "tokenHash" | "verify" | "secret" | "secretId" | "previousSecret" | "previousSecretId" | "previousSecretExpiresAt" | "signatureHeader" | "enabled" | "maxBodyBytes" | "receiveCount" | "lastReceivedAt" | "lastStatus" | "metadata" | "subjectType" | "subjectId" | "createdBy" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "create_incoming_webhook" | "delete_incoming_webhook" | "drop_incoming_webhook_secret" | "incoming_webhook_by_token" | "incoming_webhook_subject_readable" | "incoming_webhook_tenant_ids" | "list_incoming_webhooks" | "record_incoming_webhook" | "rotate_incoming_webhook" | "rotate_incoming_webhook_secret" | "set_incoming_webhook_enabled" | "update_incoming_webhook";
+    readonly actions: "create" | "update" | "delete" | "view";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "webhooks-out": {
+    readonly tables: {
+      readonly "endpoints": "id" | "tenant" | "name" | "url" | "enabled" | "eventTypes" | "permissions" | "batch" | "signing" | "format" | "credentialRef" | "failingSince" | "disabledAt" | "disabledReason" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "secrets": "id" | "endpoint" | "tenant" | "secret" | "vaultId" | "expiresAt" | "createdAt";
+      readonly "deliveries": "id" | "tenant" | "endpoint" | "event" | "run" | "type" | "subject" | "payload" | "status" | "attempt" | "availableAt" | "leasedUntil" | "responseStatus" | "responseBody" | "durationMs" | "lastError" | "processedAt" | "createdAt" | "updatedAt";
+    };
+    readonly functions: "claim_webhook_deliveries" | "complete_webhook_delivery" | "dispatch_webhook" | "drop_webhook_vault_secret" | "publish_webhook_event" | "publish_webhook_events" | "purge_webhook_deliveries" | "redeliver_webhook" | "reset_webhook_endpoint" | "rotate_webhook_secret" | "webhook_secrets";
+    readonly actions: "manage" | "view";
+    readonly hooks: "after_webhook_delivery";
+    readonly entities: {
+      readonly "endpoint": "id" | "organization_id" | "name" | "url" | "enabled" | "event_types" | "permissions" | "batch" | "signing" | "format" | "credential_ref" | "failing_since" | "disabled_at" | "disabled_reason" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "endpoint";
+  };
+  readonly "workflow-editor": {
+    readonly tables: {
+      readonly "definitions": "id" | "tenant" | "slug" | "name" | "description" | "subjectTypes" | "scope" | "forkedFrom" | "forkedFromVersion" | "restricted" | "createdBy" | "createdAt" | "updatedAt";
+      readonly "optOuts": "tenant" | "definition" | "createdBy" | "createdAt";
+      readonly "grants": "id" | "definition" | "principalKind" | "principalId" | "action" | "createdBy" | "createdAt";
+      readonly "versions": "id" | "definition" | "version" | "graph" | "compiled" | "status" | "createdBy" | "createdAt" | "publishedAt" | "publishedBy" | "owner" | "permissions" | "inputSchema";
+      readonly "triggers": "id" | "definition" | "kind" | "config" | "enabled" | "createdAt" | "updatedAt";
+      readonly "webhookTokens": "tokenHash" | "trigger" | "createdAt";
+      readonly "credentials": "id" | "tenant" | "kind" | "name" | "ref" | "scopes" | "createdBy" | "createdAt";
+      readonly "steps": "name" | "title" | "description" | "inputSchema" | "outputSchema" | "credentialKind" | "operation" | "updatedAt";
+      readonly "nodeRuns": "run" | "node" | "status" | "attempts" | "output" | "error" | "startedAt" | "endedAt";
+      readonly "alerts": "id" | "definition" | "onEvent" | "threshold" | "channel" | "createdBy" | "createdAt";
+      readonly "alertFires": "alert" | "run" | "firedAt";
+    };
+    readonly functions: "check_workflow_alerts" | "fork_workflow_definition" | "publish_workflow_version" | "record_workflow_node_run" | "remove_workflow_alert" | "remove_workflow_credential" | "remove_workflow_definition" | "remove_workflow_trigger" | "rotate_workflow_webhook_token" | "save_workflow_alert" | "save_workflow_credential" | "save_workflow_definition" | "save_workflow_draft" | "save_workflow_trigger" | "set_workflow_definition_grant" | "set_workflow_opt_out" | "start_test_run" | "sync_workflow_steps" | "validate_workflow_graph" | "workflow_alerts_list" | "workflow_credential_get" | "workflow_credentials_list" | "workflow_definition_get" | "workflow_definition_grants_list" | "workflow_definitions_list" | "workflow_graph_permissions" | "workflow_node_runs_list" | "workflow_run_principal" | "workflow_runs_alert" | "workflow_start_target" | "workflow_steps_list" | "workflow_subject_start_target" | "workflow_triggers_list" | "workflow_version_get" | "workflow_versions_list" | "workflow_webhook_target";
+    readonly actions: "read" | "run" | "edit" | "publish" | "admin";
+    readonly hooks: never;
+    readonly entities: {
+      readonly "definition": "id" | "tenant_id" | "slug" | "name" | "description" | "subject_types" | "scope" | "forked_from" | "forked_from_version" | "restricted" | "created_by" | "created_at" | "updated_at";
+    };
+    readonly primary: "definition";
+  };
+  readonly "workflow-sdk": {
+    readonly tables: {};
+    readonly functions: "dispatch_workflow_deliveries" | "workflow_sdk_mirror_run";
+    readonly actions: never;
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+  readonly "workflows": {
+    readonly tables: {
+      readonly "runs": "id" | "engine" | "externalId" | "definition" | "tenant" | "actor" | "status" | "attributes" | "error" | "createdAt" | "updatedAt" | "startedAt" | "completedAt" | "cancelRequestedAt" | "subjectType" | "subjectId" | "principalKind" | "principalId" | "mode" | "triggerNode";
+      readonly "schedules": "id" | "tenant" | "name" | "workflow" | "input" | "cron" | "timezone" | "nextRunAt" | "lastRunAt" | "lockedUntil" | "paused" | "createdBy" | "createdAt";
+      readonly "semaphores": "key" | "holder" | "acquiredAt" | "expiresAt";
+      readonly "startRequests": "id" | "key" | "workflow" | "input" | "tenant" | "actor" | "concurrency" | "status" | "notBefore" | "claimedUntil" | "runId" | "createdAt" | "startedAt" | "subjectType" | "subjectId";
+    };
+    readonly functions: "acquire_workflow_semaphore" | "advance_workflow_schedule" | "claim_due_workflow_schedules" | "claim_workflow_start_requests" | "create_workflow_schedule" | "mark_workflow_start_request" | "pause_workflow_schedule" | "purge_workflow_runs" | "record_workflow_run" | "release_workflow_semaphore" | "remove_workflow_schedule" | "request_workflow_cancel" | "request_workflow_start" | "workflow_admission_active" | "workflow_run_get" | "workflow_runs_changed" | "workflow_runs_list" | "workflow_schedules_list";
+    readonly actions: "read" | "run" | "admin";
+    readonly hooks: never;
+    readonly entities: {};
+    readonly primary: never;
+  };
+}
+//#endregion
+//#region src/blocks/name-registry.d.ts
+/** The names one module's config keys accept. */
+interface BlockSqlNameSet {
+  /** Logical table to its logical columns. */
+  readonly tables: {
+    readonly [table: string]: string;
+  };
+  readonly functions: string;
+  readonly actions: string;
+  readonly hooks: string;
+  /** Entity to the default column names of its table. */
+  readonly entities: {
+    readonly [entity: string]: string;
+  };
+  readonly primary: string;
+}
+/** The names of a module the registry doesn't know: every name is a string. */
+type AnyModuleNames = BlockSqlNameSet;
+type NamesOf<M extends string> = M extends keyof BlockNameRegistry ? BlockNameRegistry[M] : AnyModuleNames;
+type TablesOf<M extends string> = keyof NamesOf<M>["tables"] & string;
+//#endregion
+//#region src/blocks/access-requests/options.d.ts
+/** `blocks.access-requests.options`. */
+type AccessRequestsSqlOptions = {
+  readonly roles?: unknown;
+  readonly policy?: unknown;
+  readonly maxDuration?: unknown;
+  readonly join?: boolean;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/activities/options.d.ts
+/** `blocks.activities.options`. */
+type ActivitiesSqlOptions = {
+  readonly types?: readonly string[];
+  readonly extraColumns?: unknown;
+  /**
+   * Recordings of calls and meetings as ai-files files, their transcripts and
+   * notes on each engagement. Needs the ai-files block. Default `false`.
+   */
+  readonly recordings?: boolean;
+  /**
+   * Log a `meeting` engagement for each confirmed booking, on the person with
+   * the booker's email and their company. Needs the bookings block. Default:
+   * false.
+   */
+  readonly bookings?: boolean;
+};
+//#endregion
+//#region src/blocks/agents/options.d.ts
+/** `blocks.agents.options`. */
+type AgentsSqlOptions = {
+  readonly maxInstructions?: number;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/ai-cache/options.d.ts
+/** `blocks.ai-cache.options`. */
+type AiCacheSqlOptions = {
+  readonly maxTtl?: number;
+  readonly maxBytes?: number;
+};
+//#endregion
+//#region src/blocks/ai-chat/options.d.ts
+/** `blocks.ai-chat.options`. */
+type AiChatSqlOptions = {
+  readonly topic?: string;
+  readonly listTopic?: string;
+  readonly temporaryTtl?: unknown;
+  readonly staleAfter?: unknown;
+  readonly sandboxIdleAfter?: number;
+  readonly meterUsage?: boolean;
+  readonly inputMeter?: string;
+  readonly outputMeter?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/ai-files/options.d.ts
+/** `blocks.ai-files.options`. */
+type AiFilesSqlOptions = {
+  readonly bucket?: string;
+  readonly maxSize?: number;
+  readonly allowedMimeTypes?: readonly string[];
+  readonly pendingTtl?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/ai-keys/options.d.ts
+/** `blocks["ai-keys"].options`. */
+type AiKeysSqlOptions = {
+  readonly pollEvery?: number;
+};
+//#endregion
+//#region src/blocks/ai-schedules/options.d.ts
+/** `blocks["ai-schedules"].options`. */
+type AiSchedulesSqlOptions = {
+  readonly queue?: string;
+  readonly staleAfter?: string;
+  readonly maxPrompt?: number;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/announcements/options.d.ts
+/** `blocks.announcements.options`. */
+type AnnouncementsSqlOptions = {
+  readonly topic?: string;
+  readonly event?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/api-keys/options.d.ts
+/** `blocks.api-keys.options`. */
+type ApiKeysSqlOptions = {
+  readonly scopes?: "catalog" | readonly string[];
+  readonly kinds?: readonly string[];
+  readonly touchInterval?: number;
+  readonly prefix?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/approvals/options.d.ts
+/** `blocks.approvals.options`. */
+type ApprovalsSqlOptions = {
+  readonly policies?: unknown;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/attachments/options.d.ts
+/** `blocks.attachments.options`. */
+type AttachmentsSqlOptions = {
+  readonly bucket?: string;
+  readonly requireScan?: boolean;
+  readonly maxSize?: number;
+  readonly allowedMimeTypes?: readonly string[];
+  readonly path?: string;
+  readonly scanBuckets?: readonly string[];
+  readonly publicBuckets?: readonly string[];
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/audit/options.d.ts
+/** `blocks.audit.options`. */
+type AuditSqlOptions = {
+  readonly appendOnly?: boolean;
+  readonly chain?: boolean;
+  readonly correlationIdHeader?: string;
+  readonly eventCategory?: string;
+  readonly eventRoles?: readonly string[];
+  readonly trustedRoles?: readonly string[];
+  readonly eventSource?: string;
+  readonly exempt?: unknown;
+  readonly impersonators?: string;
+  readonly keepMappedMetadata?: boolean;
+  readonly metadataColumns?: unknown;
+  readonly partitioned?: boolean;
+  readonly readPolicy?: boolean;
+  readonly requestIdHeader?: string;
+  readonly restricted?: boolean;
+  readonly tenantColumn?: string;
+  readonly tenantLabel?: unknown;
+  readonly tenantLabelKey?: string;
+  readonly values?: unknown;
+};
+//#endregion
+//#region src/blocks/automations/options.d.ts
+/** `blocks.automations.options`. */
+type AutomationsSqlOptions = {
+  /** The most conditions one rule may hold. */
+  readonly maxConditions?: number;
+  /** How deep groups may nest, the root group counting as 1. */
+  readonly maxDepth?: number;
+  /** The most actions one rule may run. */
+  readonly maxActions?: number;
+  /**
+   * Keys of default automations the blocks ship turned off, such as
+   * `quotes.quote_to_order`, to ship turned on.
+   */
+  readonly enable?: readonly string[];
+  /** Keys of default automations to ship turned off. */
+  readonly disable?: readonly string[];
+};
+//#endregion
+//#region src/blocks/billing/options.d.ts
+/** `blocks.billing.options`. */
+type BillingSqlOptions = {
+  readonly seatRoles?: readonly string[];
+  readonly plans?: unknown;
+  readonly tenantKey?: unknown;
+  /** Where subscriptions are read from. Default `sync-engine`. */
+  readonly subscriptions?: string;
+};
+//#endregion
+//#region src/blocks/bookings/options.d.ts
+/** `blocks.bookings.options`. */
+type BookingsSqlOptions = {
+  readonly extraColumns?: unknown;
+  /** Adds booking series: a recurrence rule that books every occurrence. */
+  readonly recurring?: boolean;
+};
+//#endregion
+//#region src/blocks/bulk/options.d.ts
+/** `blocks['bulk'].options`. */
+type BulkSqlOptions = {
+  readonly limit?: number;
+  readonly actions?: unknown;
+};
+//#endregion
+//#region src/blocks/calendar/options.d.ts
+/** `blocks.calendar.options`. */
+type CalendarSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/catalog/options.d.ts
+/** `blocks.catalog.options`. */
+type CatalogSqlOptions = {
+  readonly storefront?: string;
+  readonly extraColumns?: unknown;
+  /** Language tags the catalog translates into; the first is the default. */
+  readonly locales?: readonly string[];
+};
+//#endregion
+//#region src/blocks/collections/options.d.ts
+/** `blocks.collections.options`. */
+type CollectionsSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/comments/options.d.ts
+/**
+ * `blocks.comments.options`. The body limit, documents and extra columns are
+ * the messaging block's options, and the records come from `config.records`.
+ */
+type CommentsSqlOptions = {
+  readonly follow?: boolean;
+  readonly mentionGroups?: unknown;
+  /** `false` sends no `comment.posted` notification to the record's followers. */
+  readonly notify?: boolean;
+};
+//#endregion
+//#region src/blocks/compliance/options.d.ts
+/** `blocks.compliance.options`. */
+type ComplianceSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/connectors/options.d.ts
+/** `blocks.connectors.options`. */
+type ConnectorsSqlOptions = {
+  readonly allowHttp?: boolean;
+  readonly trustFirstUse?: boolean;
+  readonly sessionTtl?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/contacts/options.d.ts
+/** `blocks.contacts.options`. */
+type ContactsSqlOptions = {
+  readonly companyLifecycles?: unknown;
+  readonly personLifecycles?: unknown;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/contracts/options.d.ts
+/** `blocks.contracts.options`. */
+type ContractsSqlOptions = {
+  /** Days before the notice deadline the owner's renewal reminder fires. */
+  readonly reminderDays?: number;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/credentials/options.d.ts
+/** `blocks.credentials.options`. */
+type CredentialsSqlOptions = {
+  readonly secretStorage?: string;
+};
+//#endregion
+//#region src/blocks/custom-fields/options.d.ts
+/** `blocks.custom-fields.options`. */
+type CustomFieldsSqlOptions = {
+  readonly layout?: string;
+  /**
+   * Writes one `read` audit entry per `read_field_values` call that returns an
+   * encrypted or sensitive value. Needs the audit block.
+   */
+  readonly auditReads?: boolean;
+};
+//#endregion
+//#region src/blocks/data-lifecycle/options.d.ts
+/** `blocks.data-lifecycle.options`. */
+type DataLifecycleSqlOptions = {
+  readonly bucket?: string;
+  readonly grace?: string;
+  readonly exportTtl?: string;
+  readonly tables?: unknown;
+  readonly autoTables?: unknown;
+  readonly tenantRow?: unknown;
+  readonly anonymize?: unknown;
+  readonly omitPattern?: unknown;
+};
+//#endregion
+//#region src/blocks/deals/options.d.ts
+/** `blocks.deals.options`. */
+type DealsSqlOptions = {
+  readonly company?: string;
+  readonly contact?: string;
+  readonly motions?: unknown;
+  readonly priorities?: unknown;
+  readonly prefix?: string;
+  readonly readAll?: boolean;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/documents/options.d.ts
+/** `blocks.documents.options`. */
+type DocumentsSqlOptions = {
+  readonly topic?: string;
+  readonly maxUpdateBytes?: number;
+  readonly compactAfter?: number;
+};
+//#endregion
+//#region src/blocks/domains/options.d.ts
+/** `blocks.domains.options`. */
+type DomainsSqlOptions = {
+  /**
+   * The app's own domain: one label below it is a subdomain verified when
+   * added.
+   */
+  readonly platformDomain?: string;
+  /** The TXT record name's first label: `<txtPrefix>.<hostname>`. */
+  readonly txtPrefix?: string;
+};
+//#endregion
+//#region src/blocks/donations/options.d.ts
+/** `blocks.donations.options`. */
+type DonationsSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/drive/options.d.ts
+/** `blocks.drive.options`. */
+type DriveSqlOptions = {
+  readonly roles?: readonly string[];
+  readonly writeRole?: unknown;
+  readonly shareRole?: unknown;
+  readonly memberRole?: unknown;
+  readonly subjectType?: string;
+  readonly conflict?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/employees/options.d.ts
+/** `blocks.employees.options`. */
+type EmployeesSqlOptions = {
+  readonly employmentTypes?: readonly string[];
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/expenses/options.d.ts
+/** `blocks.expenses.options`. */
+type ExpensesSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/flags/options.d.ts
+/**
+ * A custom context's source: the table and column that hold a tenant's value,
+ * and the column with the tenant id (`id` by default).
+ */
+interface FlagContextColumn {
+  readonly table: string;
+  readonly column: string;
+  readonly tenant?: string;
+}
+/** `blocks['flags'].options`. */
+type FlagsSqlOptions = {
+  /**
+   * Custom contexts by name, e.g. `{ brand: { table: "public.organizations",
+   * column: "brand_id" } }`.
+   */
+  readonly contexts?: Readonly<Record<string, FlagContextColumn>>;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/forms/options.d.ts
+/** `blocks.forms.options`. */
+type FormsSqlOptions = {
+  readonly handlers?: unknown;
+  readonly publicLimit?: unknown;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/goals/options.d.ts
+/** `blocks.goals.options`. */
+type GoalsSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/grants/options.d.ts
+/** `blocks['grants'].options`. */
+type GrantsSqlOptions = {
+  readonly fromPolicies?: unknown;
+};
+//#endregion
+//#region src/blocks/hiring/options.d.ts
+/** `blocks.hiring.options`. */
+type HiringSqlOptions = {
+  readonly candidate?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/identities/options.d.ts
+/** `blocks['identities'].options`. */
+type IdentitiesSqlOptions = {
+  readonly codeMinutes?: number;
+  readonly verifiedEmails?: boolean;
+};
+//#endregion
+//#region src/blocks/impersonation/options.d.ts
+/** `blocks.impersonation.options`. */
+type ImpersonationSqlOptions = {
+  readonly allowPlatformTargets?: unknown;
+  readonly allowWrites?: unknown;
+  readonly approval?: unknown;
+  readonly approvalTtl?: unknown;
+  readonly auditCategory?: unknown;
+  readonly claimsHook?: unknown;
+  readonly maxTtl?: unknown;
+  readonly requireReason?: unknown;
+};
+//#endregion
+//#region src/blocks/inbox/options.d.ts
+/** `blocks.inbox.options`. */
+type InboxSqlOptions = {
+  readonly topic?: string;
+  readonly bucket?: string;
+  readonly maxBodyLength?: number;
+  readonly botQueue?: unknown;
+  readonly outboundQueue?: unknown;
+  readonly scheduleQueue?: unknown;
+  readonly notify?: boolean;
+};
+//#endregion
+//#region src/blocks/incidents/options.d.ts
+/** `blocks.incidents.options`. */
+type IncidentsSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/inventory/options.d.ts
+/** `blocks.inventory.options`. */
+type InventorySqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/invoices/options.d.ts
+/** `blocks.invoices.options`. */
+type InvoicesSqlOptions = {
+  readonly company?: string;
+  readonly contact?: string;
+  readonly prefix?: string;
+  readonly creditPrefix?: string;
+  readonly termsDays?: number;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/knowledge/options.d.ts
+/** `blocks.knowledge.options`. */
+type KnowledgeSqlOptions = {
+  readonly dimensions?: number;
+  readonly type?: string;
+  readonly textSearch?: string;
+  readonly embedQueue?: string;
+  readonly ingestQueue?: string;
+};
+//#endregion
+//#region src/blocks/leases/options.d.ts
+/** `blocks.leases.options`. */
+type LeasesSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/leave/options.d.ts
+/** `blocks.leave.options`. */
+type LeaveSqlOptions = {
+  readonly policy?: unknown;
+  readonly workingDays?: readonly string[];
+  readonly allowNegative?: boolean;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/memory/options.d.ts
+/** `blocks.memory.options`. */
+type MemorySqlOptions = {
+  readonly dimensions?: unknown;
+  readonly type?: unknown;
+  readonly textSearch?: unknown;
+  readonly maxContent?: number;
+};
+//#endregion
+//#region src/blocks/messaging/options.d.ts
+/** `blocks.messaging.options`. */
+type MessagingSqlOptions = {
+  /** The Realtime topic prefix: pings go to `<topic>:<conversation id>`. */
+  readonly topic?: string;
+  /** `1` keeps threads one level deep; `unlimited` nests replies. */
+  readonly threadDepth?: 1 | "unlimited";
+  readonly maxBodyLength?: number;
+  /** Seconds an author may edit a message; `0` for always. */
+  readonly editWindow?: number;
+  /** The jobs queue that sends scheduled messages. */
+  readonly scheduleQueue?: string;
+  readonly extraColumns?: unknown;
+  /**
+   * `false` sends no `message.mentioned`, `message.direct` or `message.replied`
+   * notification.
+   */
+  readonly notify?: boolean;
+};
+//#endregion
+//#region src/blocks/metrics/options.d.ts
+/** `blocks.metrics.options`. */
+type MetricsSqlOptions = {
+  readonly metrics?: unknown;
+  readonly window?: string;
+};
+//#endregion
+//#region src/blocks/notifications/options.d.ts
+/** `blocks.notifications.options`. */
+type NotificationsSqlOptions = {
+  readonly channelDefaults?: unknown;
+  readonly channels?: readonly string[];
+  readonly createdEvent?: string;
+  readonly maxRecipients?: number;
+  readonly partitioned?: boolean;
+  readonly priorities?: readonly string[];
+  readonly realtime?: string;
+  readonly topic?: string;
+  readonly updatedEvent?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/numbering/options.d.ts
+/** One numbered entity of `blocks.numbering.options.entities`. */
+type NumberSequenceEntityOptions = {
+  readonly period: "none" | "year" | "month" | "format" | {
+    readonly fiscalYearStartMonth: number;
+  };
+  readonly format: string;
+  /**
+   * A tenant's own format: `column` is `schema.table.column`, `key` holds the
+   * tenant id (default `id`).
+   */
+  readonly formatFrom?: {
+    readonly column: string;
+    readonly key?: string;
+  };
+  readonly periodFrom?: {
+    readonly column: string;
+    readonly key?: string;
+  };
+  readonly table?: string;
+  readonly column?: string;
+  readonly sequenceColumn?: string;
+  readonly tenantColumn?: string;
+  readonly periodColumn?: string;
+  readonly assignOn?: string;
+  readonly permission?: string;
+};
+/** `blocks.numbering.options`. */
+type NumberingSqlOptions = {
+  readonly entities?: Readonly<Record<string, NumberSequenceEntityOptions>>;
+};
+//#endregion
+//#region src/blocks/oauth-server/options.d.ts
+/** `blocks.oauth-server.options`. */
+type OAuthServerSqlOptions = {
+  /**
+   * The pattern a client id must match: a regular expression, or `"slug"` for
+   * lower-case slugs such as `acme-cli`. The default accepts the 22-character
+   * ids `registerClient` generates and any `[A-Za-z0-9._~-]{8,128}` id.
+   */
+  readonly clientIdPattern?: string;
+};
+//#endregion
+//#region src/blocks/onboarding/options.d.ts
+/** `blocks.onboarding.options`. */
+type OnboardingSqlOptions = {
+  readonly checklists?: unknown;
+};
+//#endregion
+//#region src/blocks/orders/options.d.ts
+/** `blocks.orders.options`. */
+type OrdersSqlOptions = {
+  readonly paymentWindowMinutes?: number;
+  readonly extraColumns?: unknown;
+  /** Per-line preparation states and kitchen stations. Off by default. */
+  readonly kitchen?: boolean;
+};
+//#endregion
+//#region src/blocks/organizations/options.d.ts
+/** `blocks.organizations.options`. */
+type OrganizationsSqlOptions = {
+  readonly assignmentGuard?: string;
+  readonly attributes?: readonly string[];
+  readonly auditCategory?: unknown;
+  readonly deleteMode?: string;
+  readonly extraColumns?: unknown;
+  readonly formerOwnerRole?: string;
+  readonly ownerInvariant?: boolean;
+  readonly ownerRole?: string;
+  readonly reservedSlugs?: readonly string[];
+  readonly slugCitext?: boolean;
+  readonly slugMaxLength?: number;
+  readonly slugMinLength?: number;
+  readonly slugPattern?: string;
+};
+/** `blocks.invitations.options`. */
+type InvitationsSqlOptions = {
+  readonly maxValidFor?: string;
+  readonly platformRoles?: unknown;
+  readonly prefill?: boolean;
+  readonly previewColumns?: readonly string[];
+  readonly requireConfirmedEmail?: boolean;
+  readonly tokenBytes?: number;
+  readonly tokenStorage?: string;
+  readonly validFor?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/outbox/options.d.ts
+/** `blocks.outbox.options`. */
+type OutboxSqlOptions = {
+  readonly defaultSource?: string;
+  readonly emitRoles?: readonly string[];
+  readonly blockSource?: unknown;
+  readonly partitioned?: boolean;
+  readonly retention?: string;
+  readonly settle?: string;
+};
+//#endregion
+//#region src/blocks/permissions/options.d.ts
+/** `blocks.permissions.options`. */
+type PermissionsSqlOptions = {
+  readonly platformRoleScope?: string;
+  readonly scope?: string;
+  readonly tenantRoleScope?: string;
+};
+//#endregion
+//#region src/blocks/pipelines/options.d.ts
+/** `blocks.pipelines.options`. */
+type PipelinesSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/profiles/options.d.ts
+/** `blocks.profiles.options`. */
+type ProfilesSqlOptions = {
+  readonly columnGrants?: boolean;
+  readonly extraColumns?: unknown;
+  readonly metadata?: unknown;
+  readonly mirrorEmail?: boolean;
+  readonly readPolicy?: unknown;
+  readonly reservedUsernames?: readonly string[];
+  readonly serviceColumns?: readonly string[];
+  readonly splitName?: boolean;
+  readonly syncTrigger?: boolean;
+  readonly updatable?: readonly string[];
+  readonly username?: boolean;
+  readonly usernameFrom?: unknown;
+  readonly usernameMaxLength?: number;
+  readonly usernameMinLength?: number;
+};
+//#endregion
+//#region src/blocks/promotions/options.d.ts
+/** `blocks.promotions.options`. */
+type PromotionsSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/push/options.d.ts
+/** `blocks.push.options`. */
+type PushSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/queue/options.d.ts
+/** `blocks.queue.options`. */
+type QueueSqlOptions = {
+  readonly backend?: string;
+  readonly scheduler?: string;
+};
+/** `blocks.rate-limit.options`. */
+type RateLimitSqlOptions = {
+  readonly preRequest?: boolean;
+};
+/** `blocks.webhook-inbox.options`. */
+type WebhookInboxSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/quotes/options.d.ts
+/** `blocks.quotes.options`. */
+type QuotesSqlOptions = {
+  readonly company?: string;
+  readonly contact?: string;
+  readonly prefix?: string;
+  readonly validDays?: number;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/reactions/options.d.ts
+/** `blocks.reactions.options`. */
+type ReactionsSqlOptions = {
+  readonly topic?: string;
+};
+//#endregion
+//#region src/blocks/relations/options.d.ts
+/** `blocks.relations.options`. */
+type RelationsSqlOptions = {
+  readonly kinds?: unknown;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/reminders/options.d.ts
+/** `blocks.reminders.options`. */
+type RemindersSqlOptions = {
+  readonly ruleFormat?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/reserved-slugs/options.d.ts
+/** `blocks.reserved-slugs.options`. */
+type ReservedSlugsSqlOptions = {
+  readonly maxLength?: number;
+  readonly minLength?: number;
+  readonly slugs?: readonly string[];
+};
+//#endregion
+//#region src/blocks/reviews/options.d.ts
+/** `blocks.reviews.options`. */
+type ReviewsSqlOptions = {
+  readonly scale?: number;
+  readonly maxBodyLength?: number;
+  readonly moderation?: string;
+  readonly requirePurchase?: boolean;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/saved-views/options.d.ts
+/** `blocks.saved-views.options`. */
+type SavedViewsSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/search/options.d.ts
+/** `blocks.search.options`. */
+type SearchSqlOptions = {
+  readonly config?: string;
+  readonly dimensions?: number;
+};
+//#endregion
+//#region src/blocks/security-events/options.d.ts
+/** `blocks["security-events"].options`. */
+type SecurityEventsSqlOptions = {
+  readonly retention?: string;
+};
+//#endregion
+//#region src/blocks/service-accounts/options.d.ts
+/** `blocks["service-accounts"].options`. */
+type ServiceAccountsSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/sessions/options.d.ts
+/** `blocks['sessions'].options`. */
+type SessionsSqlOptions = {
+  readonly exclude?: readonly string[];
+  readonly policies?: boolean;
+};
+//#endregion
+//#region src/blocks/settings/options.d.ts
+/** `blocks.settings.options`. */
+type SettingsSqlOptions = {
+  readonly schemas?: unknown;
+  readonly platform?: unknown;
+};
+//#endregion
+//#region src/blocks/share-links/options.d.ts
+/** `blocks.share-links.options`. */
+type ShareLinksSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/signing-keys/options.d.ts
+/** `blocks.signing-keys.options`. */
+type SigningKeysSqlOptions = {
+  readonly jwksGrace?: string;
+};
+//#endregion
+//#region src/blocks/sla/options.d.ts
+/** `blocks.sla.options`. */
+type SlaSqlOptions = {
+  readonly businessHours?: unknown;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/sso/options.d.ts
+/** `blocks.sso.options`. */
+type SsoSqlOptions = {
+  readonly txtPrefix?: string;
+  readonly defaultRole?: string;
+  readonly roleOrder?: readonly string[];
+  readonly groupRoles?: unknown;
+  /** Adds `scim_sync_log` and its functions, for `sqlScimSyncLog`. */
+  readonly syncLog?: boolean;
+};
+//#endregion
+//#region src/blocks/state-machine/options.d.ts
+/** `blocks.state-machine.options`. */
+type StateMachineSqlOptions = {
+  readonly machines?: unknown;
+};
+//#endregion
+//#region src/blocks/streams/options.d.ts
+/** `blocks.streams.options`. */
+type StreamsSqlOptions = {
+  readonly topic?: string;
+};
+//#endregion
+//#region src/blocks/tags/options.d.ts
+/** `blocks.tags.options`. */
+type TagsSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/tasks/options.d.ts
+/** `blocks.tasks.options`. */
+type TasksSqlOptions = {
+  readonly prefix?: string;
+  readonly maxAssignees?: number;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/teams/options.d.ts
+/** `blocks.teams.options`. */
+type TeamsSqlOptions = {
+  readonly teamIdType?: unknown;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/templates/options.d.ts
+/** `blocks.templates.options`. */
+type TemplatesSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/time-tracking/options.d.ts
+/** `blocks.time-tracking.options`. */
+type TimeTrackingSqlOptions = {
+  readonly policy?: unknown;
+  readonly timeZone?: string;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/trash/options.d.ts
+/** `blocks.trash.options`. */
+type TrashSqlOptions = {
+  readonly retentionDays?: number;
+  readonly extraColumns?: unknown;
+  /**
+   * The column that marks a trashed row on tables outside `on`;
+   * `trashExtension` filters on it and sets it on delete.
+   */
+  readonly deletedAt?: string;
+};
+//#endregion
+//#region src/blocks/usage/options.d.ts
+/** `blocks.usage.options`. */
+type UsageSqlOptions = {
+  readonly meters?: unknown;
+  readonly history?: boolean;
+  readonly partitioned?: boolean;
+};
+//#endregion
+//#region src/blocks/vector-search/options.d.ts
+/** `blocks.vector-search.options`. */
+type VectorSearchSqlOptions = {
+  readonly schema?: unknown;
+};
+//#endregion
+//#region src/blocks/vercel-marketplace/options.d.ts
+/** `blocks.vercel-marketplace.options`. */
+type VercelMarketplaceSqlOptions = {
+  /**
+   * The currency an invoice takes when the webhook names none (ISO 4217,
+   * lowercase).
+   */
+  readonly currency?: string;
+};
+//#endregion
+//#region src/blocks/versions/options.d.ts
+/** `blocks.versions.options`. */
+type VersionsSqlOptions = {
+  readonly keep?: number;
+  readonly debounce?: number;
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/waitlist/options.d.ts
+/** `blocks.waitlist.options`. */
+type WaitlistSqlOptions = {
+  readonly defaultRole?: string;
+  readonly codeField?: string;
+  readonly roles?: readonly string[];
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/webhooks/options.d.ts
+/** `blocks.webhooks-out.options`. */
+type WebhooksOutSqlOptions = {
+  readonly allowHttp?: boolean;
+  readonly defaultFormat?: string;
+  readonly disableAfter?: string;
+  readonly eventIdType?: unknown;
+  readonly partitioned?: boolean;
+  readonly runIdType?: unknown;
+  readonly secretStorage?: string;
+  readonly statuses?: unknown;
+};
+/** `blocks.webhooks-in.options`. */
+type WebhooksInSqlOptions = {
+  readonly maxBodyBytes?: number;
+  readonly secretStorage?: string;
+};
+//#endregion
+//#region src/blocks/workflow-editor/options.d.ts
+/** `blocks["workflow-editor"].options`. */
+type WorkflowEditorSqlOptions = {
+  readonly extraColumns?: unknown;
+};
+//#endregion
+//#region src/blocks/workflow-sdk/options.d.ts
+/** `blocks["workflow-sdk"].options`. */
+type WorkflowSdkSqlOptions = {
+  readonly delivery?: string;
+  readonly queue?: string;
+  readonly batch?: number;
+  readonly timeout?: number;
+  readonly schedule?: string;
+};
+//#endregion
+//#region src/blocks/options-registry.d.ts
+type None = Record<never, never>;
+/**
+ * The options of every SQL module, keyed by module name. `BlocksConfig` types
+ * `blocks.<module>.options` from it, and `schemas/config-v1.json` is generated
+ * from `BLOCK_OPTION_SCHEMAS`.
+ */
+interface BlockOptionsRegistry {
+  readonly "access-requests": AccessRequestsSqlOptions;
+  readonly activities: ActivitiesSqlOptions;
+  readonly agents: AgentsSqlOptions;
+  readonly "ai-cache": AiCacheSqlOptions;
+  readonly "ai-chat": AiChatSqlOptions;
+  readonly "ai-files": AiFilesSqlOptions;
+  readonly "ai-keys": AiKeysSqlOptions;
+  readonly "ai-schedules": AiSchedulesSqlOptions;
+  readonly announcements: AnnouncementsSqlOptions;
+  readonly "api-keys": ApiKeysSqlOptions;
+  readonly approvals: ApprovalsSqlOptions;
+  readonly assets: AssetsSqlOptions;
+  readonly assignment: None;
+  readonly attachments: AttachmentsSqlOptions;
+  readonly audit: AuditSqlOptions;
+  readonly automations: AutomationsSqlOptions;
+  readonly "billable-time": None;
+  readonly billing: BillingSqlOptions;
+  readonly bookings: BookingsSqlOptions;
+  readonly bulk: BulkSqlOptions;
+  readonly calendar: CalendarSqlOptions;
+  readonly catalog: CatalogSqlOptions;
+  readonly channels: None;
+  readonly "chat-sdk-state": None;
+  readonly collections: CollectionsSqlOptions;
+  readonly comments: CommentsSqlOptions;
+  readonly compliance: ComplianceSqlOptions;
+  readonly connectors: ConnectorsSqlOptions;
+  readonly contacts: ContactsSqlOptions;
+  readonly contracts: ContractsSqlOptions;
+  readonly courses: CoursesSqlOptions;
+  readonly "created-by": CreatedBySqlOptions;
+  readonly credentials: CredentialsSqlOptions;
+  readonly "custom-fields": CustomFieldsSqlOptions;
+  readonly flags: FlagsSqlOptions;
+  readonly "data-lifecycle": DataLifecycleSqlOptions;
+  readonly deals: DealsSqlOptions;
+  readonly dispatch: DispatchSqlOptions;
+  readonly documents: DocumentsSqlOptions;
+  readonly domains: DomainsSqlOptions;
+  readonly donations: DonationsSqlOptions;
+  readonly drive: DriveSqlOptions;
+  readonly "drive-files": None;
+  readonly employees: EmployeesSqlOptions;
+  readonly enrichment: None;
+  readonly enrollments: EnrollmentsSqlOptions;
+  readonly entitlements: None;
+  readonly expenses: ExpensesSqlOptions;
+  readonly "field-encryption": None;
+  readonly "field-history": None;
+  readonly forecasts: None;
+  readonly forms: FormsSqlOptions;
+  readonly goals: GoalsSqlOptions;
+  readonly grants: GrantsSqlOptions;
+  readonly guests: None;
+  readonly hiring: HiringSqlOptions;
+  readonly idempotency: None;
+  readonly identities: IdentitiesSqlOptions;
+  readonly impersonation: ImpersonationSqlOptions;
+  readonly imports: None;
+  readonly inbox: InboxSqlOptions;
+  readonly incidents: IncidentsSqlOptions;
+  readonly inventory: InventorySqlOptions;
+  readonly invitations: InvitationsSqlOptions;
+  readonly invoices: InvoicesSqlOptions;
+  readonly "jsonb-schemas": None;
+  readonly knowledge: KnowledgeSqlOptions;
+  readonly "lead-scoring": LeadScoringSqlOptions;
+  readonly leases: LeasesSqlOptions;
+  readonly leave: LeaveSqlOptions;
+  readonly ledger: None;
+  readonly "mail-sync": MailSyncSqlOptions;
+  readonly memberships: MembershipsSqlOptions;
+  readonly memory: MemorySqlOptions;
+  readonly messaging: MessagingSqlOptions;
+  readonly metrics: MetricsSqlOptions;
+  readonly mfa: None;
+  readonly moderation: ModerationSqlOptions;
+  readonly notifications: NotificationsSqlOptions;
+  readonly numbering: NumberingSqlOptions;
+  readonly "oauth-server": OAuthServerSqlOptions;
+  readonly onboarding: OnboardingSqlOptions;
+  readonly orders: OrdersSqlOptions;
+  readonly organizations: OrganizationsSqlOptions;
+  readonly outbox: OutboxSqlOptions;
+  readonly passes: PassesSqlOptions;
+  readonly permissions: PermissionsSqlOptions;
+  readonly pgtap: None;
+  readonly pipelines: PipelinesSqlOptions;
+  readonly posts: PostsSqlOptions;
+  readonly content: ContentSqlOptions;
+  readonly profiles: ProfilesSqlOptions;
+  readonly promotions: PromotionsSqlOptions;
+  readonly push: PushSqlOptions;
+  readonly queue: QueueSqlOptions;
+  readonly quotes: QuotesSqlOptions;
+  readonly rank: None;
+  readonly "rate-limit": RateLimitSqlOptions;
+  readonly reactions: ReactionsSqlOptions;
+  readonly "read-sets": None;
+  readonly "realtime-tables": None;
+  readonly relations: RelationsSqlOptions;
+  readonly reminders: RemindersSqlOptions;
+  readonly "reserved-slugs": ReservedSlugsSqlOptions;
+  readonly reviews: ReviewsSqlOptions;
+  readonly "rls-guard": None;
+  readonly "saved-views": SavedViewsSqlOptions;
+  readonly scores: ScoresSqlOptions;
+  readonly search: SearchSqlOptions;
+  readonly "security-events": SecurityEventsSqlOptions;
+  readonly segments: SegmentsSqlOptions;
+  readonly sequences: SequencesSqlOptions;
+  readonly "service-accounts": ServiceAccountsSqlOptions;
+  readonly sessions: SessionsSqlOptions;
+  readonly settings: SettingsSqlOptions;
+  readonly "share-links": ShareLinksSqlOptions;
+  readonly shipments: ShipmentsSqlOptions;
+  readonly signatures: SignaturesSqlOptions;
+  readonly "signing-keys": SigningKeysSqlOptions;
+  readonly sla: SlaSqlOptions;
+  readonly sso: SsoSqlOptions;
+  readonly "state-machine": StateMachineSqlOptions;
+  readonly streams: StreamsSqlOptions;
+  readonly subjects: None;
+  readonly tags: TagsSqlOptions;
+  readonly tasks: TasksSqlOptions;
+  readonly teams: TeamsSqlOptions;
+  readonly templates: TemplatesSqlOptions;
+  readonly "time-tracking": TimeTrackingSqlOptions;
+  readonly timeline: None;
+  readonly trash: TrashSqlOptions;
+  readonly "updated-at": UpdatedAtSqlOptions;
+  readonly usage: UsageSqlOptions;
+  readonly "vector-search": VectorSearchSqlOptions;
+  readonly "vercel-marketplace": VercelMarketplaceSqlOptions;
+  readonly versions: VersionsSqlOptions;
+  readonly waitlist: WaitlistSqlOptions;
+  readonly "webhook-inbox": WebhookInboxSqlOptions;
+  readonly "webhooks-in": WebhooksInSqlOptions;
+  readonly "webhooks-out": WebhooksOutSqlOptions;
+  readonly "workflow-editor": WorkflowEditorSqlOptions;
+  readonly "workflow-sdk": WorkflowSdkSqlOptions;
+  readonly workflows: None;
+}
+/** The options schema of every SQL module, keyed by module name. */
+declare const BLOCK_OPTION_SCHEMAS: { readonly [M in keyof BlockOptionsRegistry]: BlockOptionsSchema<BlockOptionsRegistry[M]>; };
+//#endregion
+//#region src/config/blocks.d.ts
+/**
+ * `blocks` in `better-supabase.config.ts`: how each SQL module maps onto the
+ * app's database. A module's contract (the functions other modules and the
+ * TypeScript side call) stays the same in every mode; only the tables behind it
+ * change.
+ */
+/**
+ * `managed`: the module writes its tables, functions and views, and leaves
+ * alone every table the app's schema already has (`ownTables`), writing its
+ * functions over that table instead. `custom`: the app implements the contract
+ * functions itself; the module writes nothing and doctor checks the signatures
+ * (BS307).
+ */
+type BlockMode = "managed" | "custom";
+/**
+ * Who a block's rows belong to. `tenant`: a tenant, checked through the access
+ * contract (`can`, `tenant_ids_with`). `user`: the signed-in user, whose id the
+ * scope column holds. `none`: one shared space every signed-in user reads and
+ * writes. Blocks that need tenants run only in `tenant`.
+ */
+type BlockScope = "tenant" | "user" | "none";
+/**
+ * A new name for one of a block's entities: its singular `name`, an irregular
+ * plural and, for an entity the block registers as a subject, the URL of one
+ * row with `{column}` placeholders.
+ */
+interface EntityConfig<Columns extends string = string> {
+  /** Defaults to the entity's own name. */
+  readonly name?: string;
+  /** Defaults to the English plural of `name`. */
+  readonly plural?: string;
+  /**
+   * The page `subject_url` returns, with `{column}` placeholders from the
+   * entity's logical columns: `/tasks/{id}`. A list page needs none.
+   */
+  readonly url?: `${string}{${Columns}}${string}` | (string & {});
+  /** `false` keeps the entity out of `config.records`. */
+  readonly subject?: false;
+}
+/**
+ * `blocks.<name>.names`: entity to its new name, e.g. `{ work_item: "task" }`,
+ * or the new name of the block's primary entity alone (`"task"`). The module's
+ * tables, columns, functions, events, permission keys, hooks and TypeScript
+ * names follow.
+ */
+type EntitiesConfig<Names extends BlockSqlNameSet = AnyModuleNames> = ([Names["primary"]] extends [never] ? never : string) | ([keyof Names["entities"]] extends [never] ? never : { readonly [E in keyof Names["entities"]]?: string | EntityConfig<Names["entities"][E]>; });
+/**
+ * `blocks.<instance>.on`: the record types an attachable block attaches to, as
+ * a list of type names or keyed by type name with settings for each.
+ */
+type InstanceOn = readonly string[] | Readonly<Record<string, Readonly<Record<string, unknown>>>>;
+/**
+ * What makes a `blocks` entry an instance: the block it installs, the record
+ * types it attaches to and the instances its dependencies resolve to.
+ */
+interface InstanceKeys {
+  /**
+   * The block this entry installs. Defaults to the key, so `tags: {}` is the
+   * `tags` block; `labels: { block: "tags" }` installs it a second time.
+   */
+  readonly block?: string;
+  /** The record types it attaches to. Defaults to every record type. */
+  readonly on?: InstanceOn;
+  /**
+   * Dependency block to the instance it uses, e.g. `{ pipelines:
+   * "maintenanceStages" }`. Needed only when the dependency is installed more
+   * than once.
+   */
+  readonly uses?: Readonly<Record<string, string>>;
+}
+/**
+ * Options every module takes; `Options` types `options`
+ * (`blocks.<module>.options`) and `Names` the names the other keys accept.
+ */
+interface BlockConfig<Options extends object = Readonly<Record<string, unknown>>, Names extends BlockSqlNameSet = AnyModuleNames> extends InstanceKeys {
+  readonly mode?: BlockMode;
+  /**
+   * Schema of the module's functions and managed tables. Defaults to
+   * `sql.schema`, then `better_supabase`.
+   */
+  readonly schema?: string;
+  /**
+   * Logical table to `table` or `schema.table`, e.g. `{ memberships:
+   * 'public.organization_users' }`. An unqualified name is in `schema`. `null`
+   * marks an optional table the app doesn't have.
+   */
+  readonly tables?: { readonly [T in keyof Names["tables"]]?: string | null; };
+  /**
+   * Logical table to logical column to column name, e.g. `{ memberships: {
+   * tenant: 'organization_id', role: 'role_id' } }`. `null` marks an optional
+   * column the adopted table doesn't have.
+   */
+  readonly columns?: { readonly [T in keyof Names["tables"]]?: { readonly [C in Names["tables"][T]]?: string | null; }; };
+  /** Type of tenant ids: `uuid` (default), `text`, `bigint` or `integer`. */
+  readonly idType?: string;
+  /** Who the block's rows belong to. Defaults to `sql.scope`, then `tenant`. */
+  readonly scope?: BlockScope;
+  /**
+   * Function name to the name the module writes it under, e.g. `{
+   * create_organization: 'start_company' }`. Keys are the default names; an
+   * unknown function is an error. `blocks.permissions.functions` is the custom
+   * model's templates instead.
+   */
+  readonly functions?: { readonly [F in Names["functions"]]?: string; };
+  /**
+   * Module action to permission key, checked through the access contract, e.g.
+   * `{ invite: 'organization.members.invite' }`.
+   */
+  readonly permissions?: { readonly [A in Names["actions"]]?: string; };
+  /** New names for the block's entities. */
+  readonly entities?: EntitiesConfig<Names>;
+  /**
+   * Module-specific options, typed from the block manifest's options schema;
+   * each module's docs page lists them.
+   */
+  readonly options?: Options;
+  /**
+   * The app's optional `before_*` and `after_*` functions the module calls when
+   * they exist, e.g. `after_organization_create(organization, user)`. They are
+   * looked up in `schema` (default `public`); `functions` maps a hook name to
+   * another function, e.g. `{ after_organization_create:
+   * 'app.seed_organization' }`.
+   */
+  readonly hooks?: {
+    readonly schema?: string;
+    readonly functions?: { readonly [H in Names["hooks"]]?: string; };
+  };
+  /**
+   * Whether the module writes its events to the outbox (`emit_event`) when the
+   * `outbox` module is installed. Defaults to true.
+   */
+  readonly events?: boolean;
+  /**
+   * Whether the module writes its actions to the audit log (`audit_event`) when
+   * the `audit` module is installed. Defaults to true.
+   */
+  readonly audit?: boolean;
+  /**
+   * A schema for the Data API, such as `api`: the module writes a `security
+   * invoker` wrapper there for each of its functions that `anon` or
+   * `authenticated` may execute (or only those in `functions`), so
+   * `rpcTransport(supabase, { schema: "api" })` reaches them without exposing
+   * the module schema (doctor BS312). Defaults to `sql.api`; `false` writes no
+   * wrappers even when `sql.api` is set.
+   */
+  readonly api?: string | false | {
+    readonly schema: string;
+    readonly functions?: readonly string[];
+  };
+}
+/**
+ * Where the active tenant of a request comes from. Every source counts only
+ * while the caller is a member, so a stale claim or setting grants nothing.
+ */
+type ActiveTenantSource = "claim" | "resolver" | {
+  readonly profileColumn: string;
+  readonly key?: string;
+};
+/**
+ * URL tenancy: the tenant comes from the request (a slug), not a stored
+ * setting.
+ */
+declare const DEFAULT_ACTIVE_TENANT: ActiveTenantSource;
+/**
+ * The access contract every module checks permissions through: `can(scope, id,
+ * permission)`, `tenant_ids_with(permission)`, `is_platform(permission)` and
+ * `can_user(user, scope, id, permission)`.
+ */
+/**
+ * A table whose row says whether a tenant or a user is active. Needs
+ * `disabledAt`, `status` with `active`, or both.
+ */
+interface DisabledRow {
+  /** `schema.table`. */
+  readonly table: string;
+  /** The column holding the tenant id or the user id. */
+  readonly id: string;
+  /** A nullable timestamp column; a row with a value is disabled. */
+  readonly disabledAt?: string;
+  /** A status column; only a row whose value is in `active` is active. */
+  readonly status?: string;
+  readonly active?: readonly string[];
+}
+interface AccessBlockConfig<Options extends object = Readonly<Record<string, unknown>>, Names extends BlockSqlNameSet = AnyModuleNames> extends Omit<BlockConfig<Options, Names>, "functions"> {
+  /**
+   * `roles`: a fixed role list from `roles` (the default without
+   * `authorization`; with it, `provider` is the default). `catalog`: role,
+   * permission and override tables (`tables.roles`, `permissions`,
+   * `rolePermissions`, `overrides`, `platformAssignments`). `provider`: the
+   * functions of the config's `authorization` provider. `custom`: expression
+   * templates in `functions`.
+   */
+  readonly model?: "roles" | "catalog" | "provider" | "custom";
+  /**
+   * `roles` model: role name to permission keys. `*` grants everything and
+   * `prefix.*` a prefix. Defaults to owner, admin, member and viewer.
+   */
+  readonly roles?: Readonly<Record<string, readonly string[]>>;
+  /**
+   * `custom` model: SQL expressions with `{scope}`, `{id}`, `{permission}` and
+   * `{user}` placeholders, e.g. `{ can:
+   * 'public.authorize_scope({scope}::public.scope_type, {id}, {permission})'
+   * }`.
+   */
+  readonly functions?: {
+    readonly can?: string;
+    readonly tenantIdsWith?: string;
+    readonly isPlatform?: string;
+    readonly canUser?: string;
+    /**
+     * `{tenant}` and `{role}`: whether the caller may assign the role. Required
+     * by the `custom` model. The `provider` model defaults to the provider's
+     * `canAssign`; without either, only the service role assigns roles unless
+     * the `tenant` module is installed, and doctor BS411 warns.
+     */
+    readonly canAssign?: string;
+    /**
+     * `{user}`, `{tenant}` and `{role}`: whether that user may assign the role,
+     * for SQL that acts later for a stored user (an invitation accept checking
+     * the inviter again), as `can_assign_as`. The `provider` model defaults to
+     * the provider's `canAssignFor`.
+     */
+    readonly canAssignFor?: string;
+    /**
+     * `{permission}` and `{tenant}`: the user ids that hold the permission in
+     * the tenant, for the `custom` model's notification audiences.
+     */
+    readonly holdersOf?: string;
+    /** `{user}`: the permission claim for the access token hook. */
+    readonly permissionClaims?: string;
+  };
+  /**
+   * `roles` model: the JWT claim holding the caller's platform permission keys
+   * (an array). Defaults to `platform_permissions`.
+   */
+  readonly platformClaim?: string;
+  /**
+   * OAuth scope to the permission keys it grants a delegated token (a
+   * `client_id`, or an `act` chain that is not a support or impersonation
+   * level). The access functions refuse every key the token's scopes don't map
+   * to, whatever the user holds. A scope without an entry grants the key with
+   * its own name; map a scope to `["*"]` to grant everything. Merged over
+   * `authorization.delegation.scopes`.
+   */
+  readonly scopes?: Readonly<Record<string, readonly string[]>>;
+  /**
+   * What disables a tenant or a user. A string is a column that disables when
+   * set, as `schema.table.column`, keyed by the table's `id` (tenant) or the
+   * column named in `userKey` (user). An object is an active row: only a row
+   * whose `disabledAt` is null and whose `status` is in `active` is active, and
+   * a missing row counts as disabled. Disabled tenants and users get no
+   * permissions. Under the `provider` model both default to the provider's
+   * `suspension`.
+   */
+  readonly disabled?: {
+    readonly tenant?: string | DisabledRow;
+    readonly user?: string | DisabledRow;
+    readonly userKey?: string;
+  };
+  readonly activeTenant?: ActiveTenantSource;
+}
+/** A block name, a key of the block options registry. */
+type BlockName = Extract<keyof BlockOptionsRegistry, string>;
+/** One block's config, with `options` and names typed from the block. */
+type BlockConfigOf<M extends BlockName> = M extends "permissions" ? AccessBlockConfig<BlockOptionsRegistry[M], NamesOf<M>> : BlockConfig<BlockOptionsRegistry[M], NamesOf<M>>;
+/**
+ * An instance under its own key: the block it names in `block`, checked by
+ * `defineConfig` against that block's options and names.
+ */
+interface NamedInstance extends InstanceKeys {
+  readonly block?: BlockName;
+  readonly [key: string]: unknown;
+}
+/**
+ * `blocks` in the config, keyed by instance. A key that is a block name
+ * installs that block, with `options` typed from its manifest's options schema;
+ * any other key names an instance and sets `block`.
+ */
+type BlocksConfig = { readonly [M in BlockName]?: BlockConfigOf<M>; } & {
+  readonly [instance: string]: NamedInstance | undefined;
+};
+/**
+ * `blocks` keyed by any module name, as the resolved config and the SQL
+ * renderer read it.
+ */
+interface AnyBlocksConfig {
+  readonly permissions?: AccessBlockConfig;
+  /**
+   * `AccessBlockConfig` is listed so a `permissions` entry fits the index
+   * signature.
+   */
+  readonly [module: string]: BlockConfig | AccessBlockConfig | undefined;
+}
+/**
+ * The tenant's new singular name (`blocks.memberships.names.organization`), or
+ * `undefined` while it is `organization`. `blocks` may be the config's list of
+ * block names, which renames nothing.
+ */
+declare function tenantNameOf(blocks: AnyBlocksConfig | readonly string[] | undefined): string | undefined;
+/** A module's config with defaults applied. */
+interface ResolvedBlock {
+  readonly mode: BlockMode;
+  readonly schema: string;
+  readonly tables: Readonly<Record<string, string | null>>;
+  readonly columns: Readonly<Record<string, Readonly<Record<string, string | null>>>>;
+  readonly idType?: string;
+  readonly scope?: BlockScope;
+  readonly functions: Readonly<Record<string, string>>;
+  readonly permissions: Readonly<Record<string, string>>;
+  readonly options: Readonly<Record<string, unknown>>;
+  readonly hooks: {
+    readonly schema: string;
+    readonly functions: Readonly<Record<string, string>>;
+  };
+  readonly events: boolean;
+  readonly audit: boolean;
+  readonly api?: {
+    readonly schema: string;
+    readonly functions?: readonly string[];
+  };
+}
+declare function resolveBlock(config?: BlockConfig): ResolvedBlock;
+//#endregion
+//#region src/config/authorization.d.ts
+/**
+ * SQL expression templates the SQL modules and the access policies call.
+ * `{permission}` is a text expression (a literal or a parameter), `{user}` a
+ * uuid expression, `{tenant}` an expression of the tenant id type and `{role}`
+ * a text expression. `{scope}` is the scope's name unquoted, so it can be part
+ * of a function name (`app.ids_{scope}({permission})`); write `'{scope}'` to
+ * pass it as text.
+ */
+interface AuthorizationFunctions {
+  /**
+   * The ids of the `{scope}` instances where the caller holds `{permission}`,
+   * as a set: it is used as `select t.id::text from <template> as t(id)`.
+   */
+  readonly idsWith: string;
+  /** Whether the caller holds `{permission}` platform-wide. */
+  readonly isPlatform: string;
+  /** `idsWith` for `{user}`, so `can_user` answers for another user. */
+  readonly idsWithFor?: string;
+  /** `isPlatform` for `{user}`. */
+  readonly isPlatformFor?: string;
+  /** The ids of the `{scope}` instances the caller is a member of, as a set. */
+  readonly memberIds?: string;
+  /**
+   * `memberIds` for `{user}`, which the access token hook calls as
+   * `supabase_auth_admin`.
+   */
+  readonly memberIdsFor?: string;
+  /**
+   * The team ids `{user}` belongs to, as a set of the team id type: it is used
+   * as `select t.id from <template> as t(id)`. Under the provider model the
+   * teams module's `team_ids_of()`, and the team sharing in `saved-views` and
+   * `collections`, call it instead of reading `team_members`.
+   */
+  readonly teamIdsOf?: string;
+  /** Whether the caller may assign `{role}` in `{tenant}`. */
+  readonly canAssign?: string;
+  /** Whether `{user}` may assign `{role}` in `{tenant}`. */
+  readonly canAssignFor?: string;
+  /**
+   * The permission keys `{user}` holds in `{tenant}`, as a `text[]`. It fills
+   * `member_permissions` and the `permissions` claim; without it both are
+   * empty.
+   */
+  readonly permissionsFor?: string;
+  /**
+   * Whether the caller may decide the tool call `{tool}` (text) waits on in
+   * `{tenant}`. Without it only the chat's owner and the service role decide.
+   *
+   * @deprecated Use `isApprover`, which every module that waits for an
+   * approval reads. `canApprove` is read for tool calls only when
+   * `isApprover` is unset.
+   */
+  readonly canApprove?: string;
+  /**
+   * Whether the caller may approve the request `{subject}` (text) of kind
+   * `{kind}` (a text literal: `'ai-tool'` with the tool name as `{subject}`,
+   * `'support-session'` with the request id, or the app's own kind) in
+   * `{tenant}`. `{requester}` is the uuid of the user who asked (the approval's
+   * `requested_by`, the support admin, the chat's owner), or `null`; a provider
+   * that resolves out-of-office covers reads it to refuse a cover by the
+   * requester's own delegator. It replaces each module's own eligibility check;
+   * the requester is refused before it runs. Without it a module falls back to
+   * its default approver (the chat's owner, a platform permission).
+   */
+  readonly isApprover?: string;
+  /**
+   * The user ids that hold `{permission}` on `{tenant}`, as a set: it is used
+   * as `select u from <template> as t(u)`. A notification's `permission`
+   * audience calls it. Without it, naming `permission` is refused.
+   */
+  readonly holdersOf?: string;
+  /**
+   * Whether the caller's session may write. No placeholders. Write functions
+   * and write policies call it instead of the built-in act check.
+   */
+  readonly actorMayWrite?: string;
+  /**
+   * Whether the caller holds `{permission}` on the instance `{id}` (text) of
+   * `{resource}` in `{tenant}`, at `{scope}`. A realtime topic that declares a
+   * `permission` calls it for the instance in its topic name.
+   */
+  readonly permitted?: string;
+  /**
+   * The records the caller may reach as a guest for `{action}` (`read`,
+   * `comment` or `upload`), as a set of `(tenant text, subject_type text,
+   * subject_id text)`: it is used as `select g.tenant, g.subject_type,
+   * g.subject_id from <template> as g(tenant, subject_type, subject_id)`.
+   * `ctx.scope.guest` calls it, so comments, attachments, invoices and bookings
+   * let a provider's external users in (ADR 0070). With the `guests` block
+   * installed its grants are added to these.
+   */
+  readonly portalSubjects?: string;
+  /**
+   * The parties the caller acts for as a guest, as a set of `(tenant text,
+   * party_type text, party_id text)`. No placeholders. `ctx.scope.guestParty`
+   * calls it for portal reads such as a customer's own invoices.
+   */
+  readonly portalParties?: string;
+}
+/** One scope the provider decides permissions in, such as `organization`. */
+interface AuthorizationScope {
+  /** Lower case letters, digits and `_`, starting with a letter. */
+  readonly name: string;
+  /**
+   * The Postgres type of the scope's ids: `uuid`, `text`, `bigint` or
+   * `integer`.
+   */
+  readonly idType?: string;
+  /** The scope this one sits in; the root scope has none. */
+  readonly parent?: string;
+}
+/** A function the templates call, which must exist and be executable by `role`. */
+interface AuthorizationRequirement {
+  /** `schema.name`. */
+  readonly function: string;
+  /** The argument types, such as `text` or `uuid, text`. */
+  readonly args?: string;
+  readonly role: string;
+}
+/** A permission key the provider defines. */
+interface AuthorizationPermission {
+  readonly key: string;
+  /**
+   * `true` when the SQL functions answer for the key completely. A key with row
+   * conditions they don't check is `false`, and policies refuse it. Unset means
+   * unknown, which counts as `false`.
+   */
+  readonly sqlComplete?: boolean;
+  /** The scopes it can be granted at. */
+  readonly scopes?: readonly string[];
+}
+/**
+ * One named operation: what workflow builder nodes, MCP tools, AI tools and
+ * inbox commands with that name need. The provider supplies the table;
+ * `blocks.<module>.permissions` still renames a module's own keys.
+ */
+interface AuthorizationOperation {
+  /** The permission key the operation needs. */
+  readonly permission: string;
+  readonly meta?: {
+    /** `low`, `medium` or `high`; a `high` operation can ask for approval. */
+    readonly risk?: "low" | "medium" | "high";
+    /** What it changes: `read`, `write`, `delete`, `external`. */
+    readonly effects?: readonly ("read" | "write" | "delete" | "external")[];
+    readonly title?: string;
+  };
+}
+/** A table of memberships the provider reads. */
+interface AuthorizationMembership {
+  /** `schema.table`. */
+  readonly table: string;
+  readonly userColumn: string;
+  /** The scope column, or the scope every row is in. */
+  readonly scope: {
+    readonly column: string;
+  } | {
+    readonly value: string;
+  };
+  readonly idColumn: string;
+}
+/** A membership table whose role column points into a roles table. */
+interface AuthorizationRoleSource {
+  /** `schema.table` of the memberships. */
+  readonly table: string;
+  readonly role: {
+    readonly column: string;
+    readonly through: {
+      /** `schema.table` of the roles. */
+      readonly table: string;
+      readonly id: string;
+      readonly column: string;
+    };
+  };
+}
+/** The access token hook the provider generates. */
+interface AuthorizationTokenHook {
+  /** `schema.name`. */
+  readonly function: string;
+  /** The claim it writes the active tenant id to. */
+  readonly tenantClaim?: string;
+  /** Claims it writes itself, which a second writer would contradict. */
+  readonly ownedClaims: readonly string[];
+  /**
+   * Claims it fills from other functions, such as `features` from
+   * `better_supabase.feature_claims`.
+   */
+  readonly registeredClaims?: readonly {
+    readonly name: string;
+    /** `schema.name`. */
+    readonly function: string;
+  }[];
+  /** A byte budget over some claims, which doctor `--as` measures (BS405). */
+  readonly budget?: {
+    readonly claims: readonly string[];
+    readonly bytes: number;
+    /**
+     * A claim the hook sets to `true` when it dropped entries to stay within
+     * the budget.
+     */
+    readonly truncatedClaim?: string;
+  };
+  /**
+   * Comment lines the provider's generated files contain, so doctor recognises
+   * them.
+   */
+  readonly markers?: {
+    /** In the file that defines the hook. */
+    readonly hook?: string;
+    /** In the migration that grants the hook's functions. */
+    readonly grants?: string;
+  };
+  /** The command that writes the hook's grants, for BS404. */
+  readonly grantsCommand?: string;
+}
+/**
+ * An authorization system the SQL modules, the policies and doctor delegate to.
+ * It is plain data, usually built from the provider's own output files.
+ */
+interface AuthorizationProvider {
+  readonly apiVersion: 1;
+  /** The provider's name, for messages. */
+  readonly name: string;
+  readonly scopes: readonly AuthorizationScope[];
+  /** The scope tenants are. */
+  readonly tenantScope: string;
+  readonly functions: AuthorizationFunctions;
+  readonly requires?: readonly AuthorizationRequirement[];
+  readonly permissions?: readonly AuthorizationPermission[];
+  /**
+   * Operations by name (`workflow.node.http`, `mcp.tool.search_posts`,
+   * `ai.tool.send_email`, `inbox.command.assign`). A module looks an operation
+   * up here first and uses its own default permission otherwise.
+   */
+  readonly operations?: Readonly<Record<string, AuthorizationOperation>>;
+  readonly memberships?: readonly AuthorizationMembership[];
+  /** Rows that say whether a user or a tenant is active. */
+  readonly suspension?: {
+    readonly user?: DisabledRow;
+    readonly tenant?: DisabledRow;
+  };
+  readonly roleSources?: readonly AuthorizationRoleSource[];
+  /** `schema.table.column` of every column that decides access (BS213). */
+  readonly decidingColumns?: readonly string[];
+  readonly tokenHook?: AuthorizationTokenHook;
+  /** What a delegated token (an OAuth client or agent) may use. */
+  readonly delegation?: {
+    /**
+     * OAuth scope to the permission keys it grants (RFC 9396 details stay with
+     * the app). `blocks.permissions.scopes` is merged over it.
+     */
+    readonly scopes?: Readonly<Record<string, readonly string[]>>;
+  };
+  /** How `canApprove` decisions are made. */
+  readonly approvals?: {
+    /** The user who asked for the tool call can't approve it. Default `false`. */
+    readonly distinctApprover?: boolean;
+  };
+  /** What the provider found wrong while building this, for doctor. */
+  readonly problems?: readonly string[];
+}
+/**
+ * The error for a provider built for another API version, or `undefined` for
+ * version 1.
+ */
+declare function providerApiProblem(provider: {
+  readonly name?: unknown;
+  readonly apiVersion?: unknown;
+}): string | undefined;
+//#endregion
+export { BLOCK_OPTION_SCHEMAS as A, EntityConfig as C, ResolvedBlock as D, NamedInstance as E, BlockNameRegistry as F, MessagingSqlOptions as M, CommentsSqlOptions as N, resolveBlock as O, TablesOf as P, EntitiesConfig as S, InstanceOn as T, BlockName as _, AuthorizationProvider as a, DEFAULT_ACTIVE_TENANT as b, AuthorizationScope as c, AccessBlockConfig as d, ActiveTenantSource as f, BlockMode as g, BlockConfigOf as h, AuthorizationPermission as i, BlockOptionsRegistry as j, tenantNameOf as k, AuthorizationTokenHook as l, BlockConfig as m, AuthorizationMembership as n, AuthorizationRequirement as o, AnyBlocksConfig as p, AuthorizationOperation as r, AuthorizationRoleSource as s, AuthorizationFunctions as t, providerApiProblem as u, BlockScope as v, InstanceKeys as w, DisabledRow as x, BlocksConfig as y };