@bopen-io/wallet-toolbox 2.6.2-brc153.5 → 2.15.0-bopen.1

package/out/src/storage/schema/KnexMigrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KnexMigrations.d.ts","sourceRoot":"","sources":["../../../../src/storage/schema/KnexMigrations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAKvC,eAAO,MAAM,sBAAsB,4CAA4C,CAAA;AAC/E,eAAO,MAAM,kCAAkC,6CAA6C,CAAA;AAC5F,eAAO,MAAM,qCAAqC,4DAA4D,CAAA;AAC9G,eAAO,MAAM,wBAAwB,6CAA6C,CAAA;AAElF,UAAU,SAAS;IACjB,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,eAAe,CAAC,cAAc;IACtC,aAAa,EAAE,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/E,gBAAgB,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,MAAM,CAAA;IACvD,YAAY,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;CAChE;AAED,qBAAa,cAAe,YAAW,eAAe,CAAC,MAAM,CAAC;IASnD,KAAK,EAAE,KAAK;IACZ,WAAW,EAAE,MAAM;IACnB,kBAAkB,EAAE,MAAM;IAC1B,qBAAqB,EAAE,MAAM;IAXtC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAK;IAE1C;;;;OAIG;IACH,YACS,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,MAAM,EAGrC;IAEK,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEvC;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,UAEjC;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAExD;IAEK,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAG1C;IAED,OAAa,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAG9C;IAED,eAAe,CACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,MAAM,GAC5B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAimB3B;CACF;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAoB7E"}
+{"version":3,"file":"KnexMigrations.d.ts","sourceRoot":"","sources":["../../../../src/storage/schema/KnexMigrations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAWvC,eAAO,MAAM,uBAAuB,8CAA8C,CAAA;AAElF,eAAO,MAAM,sBAAsB,4CAA4C,CAAA;AAC/E,eAAO,MAAM,4BAA4B,kDAAkD,CAAA;AAC3F,eAAO,MAAM,kCAAkC,6CAA6C,CAAA;AAC5F,eAAO,MAAM,qCAAqC,4DAA4D,CAAA;AAC9G,eAAO,MAAM,wBAAwB,6CAA6C,CAAA;AAClF,eAAO,MAAM,+BAA+B,6DAA6D,CAAA;AACzG,eAAO,MAAM,uBAAuB,+CAA+C,CAAA;AACnF,eAAO,MAAM,+BAA+B,kDAAkD,CAAA;AAE9F,eAAO,MAAM,kCAAkC,kDAAkD,CAAA;AAEjG,UAAU,SAAS;IACjB,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,eAAe,CAAC,cAAc;IACtC,aAAa,EAAE,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/E,gBAAgB,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,MAAM,CAAA;IACvD,YAAY,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;CAChE;AAED,qBAAa,cAAe,YAAW,eAAe,CAAC,MAAM,CAAC;IAanD,KAAK,EAAE,KAAK;IACZ,WAAW,EAAE,MAAM;IACnB,kBAAkB,EAAE,MAAM;IAC1B,qBAAqB,EAAE,MAAM;IAC7B,MAAM,CAAC,EAAE,MAAM;IAhBxB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAK;IAE1C;;;;;;;;OAQG;IACH,YACS,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,MAAM,EAC7B,MAAM,CAAC,EAAE,MAAM,YAAA,EAGvB;IAEK,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAEvC;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,UAEjC;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAExD;IAEK,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAG1C;IAED,OAAa,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAG9C;IAED,eAAe,CACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,EAC1B,qBAAqB,EAAE,MAAM,EAC7B,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAu2B3B;CACF;AA0CD;;;GAGG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB7E"}

package/out/src/storage/schema/KnexMigrations.js

@@ -1,31 +1,45 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KnexMigrations = exports.PAYMENT_REPLAY_MIGRATION = exports.CREATE_ACTION_FUNDING_INDEX_MIGRATION = exports.MONITOR_CREATED_AT_INDEX_MIGRATION = exports.AUTH_SESSION_MIGRATION = void 0;
+exports.KnexMigrations = exports.WALLET_SYNC_SOURCE_INDEX_MIGRATION = exports.BRC177_NO_SEND_EXPIRY_MIGRATION = exports.PREPARED_BEEF_MIGRATION = exports.MANAGED_CHANGE_POLICY_MIGRATION = exports.PAYMENT_REPLAY_MIGRATION = exports.CREATE_ACTION_FUNDING_INDEX_MIGRATION = exports.MONITOR_CREATED_AT_INDEX_MIGRATION = exports.AUTH_MESSAGE_NONCE_MIGRATION = exports.AUTH_SESSION_MIGRATION = exports.SYNC_TRANSFER_MIGRATION = void 0;
 exports.determineDBType = determineDBType;
 const StorageKnex_1 = require("../StorageKnex");
 const WalletError_1 = require("../../sdk/WalletError");
 const WERR_errors_1 = require("../../sdk/WERR_errors");
+const EntityBase_1 = require("./entities/EntityBase");
+const managedChangePolicy_1 = require("../methods/managedChangePolicy");
+exports.SYNC_TRANSFER_MIGRATION = '2026-09-09-001 add bounded sync transfers';
 exports.AUTH_SESSION_MIGRATION = '2026-07-14-001 add shared auth sessions';
+exports.AUTH_MESSAGE_NONCE_MIGRATION = '2026-09-16-001 add auth message replay claims';
 exports.MONITOR_CREATED_AT_INDEX_MIGRATION = '2026-07-14-002 add monitor created index';
 exports.CREATE_ACTION_FUNDING_INDEX_MIGRATION = '2026-08-02-001 add createAction funding selection index';
 exports.PAYMENT_REPLAY_MIGRATION = '2026-08-04-001 add payment replay claims';
+exports.MANAGED_CHANGE_POLICY_MIGRATION = '2026-08-10-001 upgrade managed change liquidity defaults';
+exports.PREPARED_BEEF_MIGRATION = '2026-08-31-001 add prepared beef artifacts';
+exports.BRC177_NO_SEND_EXPIRY_MIGRATION = '2026-08-30-001 add brc177 nosend expiry state';
+exports.WALLET_SYNC_SOURCE_INDEX_MIGRATION = '2026-08-17-001 add wallet sync source indexes';
 class KnexMigrations {
     chain;
     storageName;
     storageIdentityKey;
     maxOutputScriptLength;
+    dbtype;
     migrations = {};
     /**
      * @param chain
      * @param storageName human readable name for this storage instance
      * @param maxOutputScriptLength limit for scripts kept in outputs table, longer scripts will be pulled from rawTx
+     * @param dbtype when 'Postgres', migrations that add indexes to existing tables run outside a
+     * transaction and build them with CREATE INDEX CONCURRENTLY. Run them one at a time
+     * (`knex.migrate.up`), as `StorageKnex.migrate` does, so other migrations keep their journal
+     * row in their own transaction.
      */
-    constructor(chain, storageName, storageIdentityKey, maxOutputScriptLength) {
+    constructor(chain, storageName, storageIdentityKey, maxOutputScriptLength, dbtype) {
         this.chain = chain;
         this.storageName = storageName;
         this.storageIdentityKey = storageIdentityKey;
         this.maxOutputScriptLength = maxOutputScriptLength;
-        this.migrations = this.setupMigrations(chain, storageName, storageIdentityKey, maxOutputScriptLength);
+        this.dbtype = dbtype;
+        this.migrations = this.setupMigrations(chain, storageName, storageIdentityKey, maxOutputScriptLength, dbtype);
     }
     async getMigrations() {
         return Object.keys(this.migrations).sort((a, b) => a.localeCompare(b));
@@ -44,8 +58,10 @@ class KnexMigrations {
         const km = new KnexMigrations('test', 'dummy', '1'.repeat(64), 100);
         return await km.getLatestMigration();
     }
-    setupMigrations(chain, storageName, storageIdentityKey, maxOutputScriptLength) {
+    setupMigrations(chain, storageName, storageIdentityKey, maxOutputScriptLength, dbtype) {
         const migrations = {};
+        // Index migrations on existing tables run outside a transaction on Postgres; see addIndexes.
+        const indexConfig = dbtype === 'Postgres' ? { transaction: false } : undefined;
         const addTimeStamps = (knex, table, dbtype) => {
             if (dbtype === 'MySQL') {
                 table.timestamp('created_at', { precision: 3 }).defaultTo(knex.fn.now(3)).notNullable();
@@ -56,6 +72,101 @@ class KnexMigrations {
                 table.timestamp('updated_at', { precision: 3 }).defaultTo(knex.fn.now()).notNullable();
             }
         };
+        migrations['2026-09-30-001 unique sync state per storage identity'] = {
+            async up(knex) {
+                // Concurrent findOrInsertSyncStateAuth calls could each insert a row,
+                // after which every lookup for the pair failed. Keep the oldest row.
+                const groups = await knex('sync_states')
+                    .select('userId', 'storageIdentityKey')
+                    .min({ keepId: 'syncStateId' })
+                    .countDistinct({ names: 'storageName' })
+                    .groupBy('userId', 'storageIdentityKey')
+                    .havingRaw('count(*) > 1');
+                const restartAt = groups.length > 0 && (await determineDBType(knex)) === 'SQLite' ? new Date().toISOString() : knex.fn.now(3);
+                for (const group of groups) {
+                    await knex('sync_states')
+                        .where({ userId: group.userId, storageIdentityKey: group.storageIdentityKey })
+                        .where('syncStateId', '>', group.keepId)
+                        .delete();
+                    // Rows with different names may track different source databases
+                    // that reused one identity key, so the kept checkpoint may not
+                    // belong to the next caller. Restart it as a new sync state.
+                    if (Number(group.names) > 1) {
+                        await knex('sync_states')
+                            .where({ syncStateId: group.keepId })
+                            .update({
+                            status: 'unknown',
+                            init: false,
+                            when: null,
+                            syncMap: JSON.stringify((0, EntityBase_1.createSyncMap)()),
+                            updated_at: restartAt
+                        });
+                    }
+                }
+                await knex.schema.alterTable('sync_states', table => {
+                    table.unique(['userId', 'storageIdentityKey'], { indexName: 'sync_states_user_storage_identity' });
+                });
+            },
+            async down(knex) {
+                // MySQL may discard the automatically-created userId foreign key
+                // index once the unique index can support the foreign key.
+                if ((await determineDBType(knex)) === 'MySQL') {
+                    const result = await knex.raw('SHOW INDEX FROM ?? WHERE Key_name = ?', [
+                        'sync_states',
+                        'sync_states_userid_foreign'
+                    ]);
+                    const indexes = result[0];
+                    if (indexes.length === 0) {
+                        await knex.schema.alterTable('sync_states', table => {
+                            table.index(['userId'], 'sync_states_userid_foreign');
+                        });
+                    }
+                }
+                await knex.schema.alterTable('sync_states', table => {
+                    table.dropUnique(['userId', 'storageIdentityKey'], 'sync_states_user_storage_identity');
+                });
+            }
+        };
+        migrations[exports.SYNC_TRANSFER_MIGRATION] = {
+            config: { transaction: true },
+            async up(knex) {
+                const dbtype = await determineDBType(knex);
+                // MySQL DDL commits implicitly; table/slot creation also tolerates an interrupted migration.
+                if (!(await knex.schema.hasTable('sync_transfers')))
+                    await knex.schema.createTable('sync_transfers', table => {
+                        table.integer('slot').primary();
+                        table.string('transferId', 64).unique().nullable();
+                        table.string('identityKey', 130).nullable();
+                        table.string('context', 64).nullable();
+                        table.string('direction', 8).nullable();
+                        table.string('digest', 64).nullable();
+                        table.integer('totalBytes').nullable();
+                        table.integer('receivedBytes').notNullable().defaultTo(0);
+                        table.integer('partBytes').nullable();
+                        table.bigInteger('expiresAt').notNullable().defaultTo(0);
+                        table.string('state', 16).nullable();
+                        table.text('result').nullable();
+                    });
+                // Slot zero serializes allocation across replicas; eight slots bound total disk usage.
+                await knex('sync_transfers')
+                    .insert(Array.from({ length: 9 }, (_, slot) => ({ slot })))
+                    .onConflict('slot')
+                    .ignore();
+                if (!(await knex.schema.hasTable('sync_transfer_parts')))
+                    await knex.schema.createTable('sync_transfer_parts', table => {
+                        table.integer('slot').notNullable().references('slot').inTable('sync_transfers');
+                        table.integer('offset').notNullable();
+                        table
+                            .specificType('bytes', dbtype === 'MySQL' ? 'mediumblob' : dbtype === 'Postgres' ? 'bytea' : 'blob')
+                            .notNullable();
+                        table.primary(['slot', 'offset']);
+                    });
+            },
+            async down(knex) {
+                await knex.schema.dropTableIfExists('sync_transfer_parts');
+                await knex.schema.dropTableIfExists('sync_transfers');
+            }
+        };
         migrations[exports.AUTH_SESSION_MIGRATION] = {
             async up(knex) {
                 await knex.schema.createTable('auth_sessions', table => {
@@ -75,6 +186,22 @@ class KnexMigrations {
                 await knex.schema.dropTable('auth_sessions');
             }
         };
+        migrations[exports.AUTH_MESSAGE_NONCE_MIGRATION] = {
+            async up(knex) {
+                await knex.schema.createTable('auth_message_nonces', table => {
+                    // Session nonces are 64 characters. Initial-request replay scopes
+                    // use `initial:` plus a 66-character compressed identity key.
+                    table.string('sessionNonce', 130).notNullable();
+                    table.string('messageNonce', 64).notNullable();
+                    table.bigInteger('expiresAt').notNullable();
+                    table.primary(['sessionNonce', 'messageNonce']);
+                    table.index('expiresAt', 'idx_auth_message_nonces_expires');
+                });
+            },
+            async down(knex) {
+                await knex.schema.dropTable('auth_message_nonces');
+            }
+        };
         migrations[exports.PAYMENT_REPLAY_MIGRATION] = {
             async up(knex) {
                 await knex.schema.createTable('payment_replays', table => {
@@ -89,10 +216,9 @@ class KnexMigrations {
             }
         };
         migrations[exports.MONITOR_CREATED_AT_INDEX_MIGRATION] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('monitor_events', table => {
-                    table.index('created_at', 'idx_monitor_events_created_at');
-                });
+                await addIndexes(knex, 'monitor_events', [{ columns: ['created_at'], name: 'idx_monitor_events_created_at' }]);
             },
             async down(knex) {
                 await knex.schema.alterTable('monitor_events', table => {
@@ -101,10 +227,14 @@ class KnexMigrations {
             }
         };
         migrations[exports.CREATE_ACTION_FUNDING_INDEX_MIGRATION] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('outputs', table => {
-                    table.index(['userId', 'basketId', 'spendable', 'spentBy', 'satoshis', 'outputId'], 'idx_outputs_funding_selection');
-                });
+                await addIndexes(knex, 'outputs', [
+                    {
+                        columns: ['userId', 'basketId', 'spendable', 'spentBy', 'satoshis', 'outputId'],
+                        name: 'idx_outputs_funding_selection'
+                    }
+                ]);
             },
             async down(knex) {
                 await knex.schema.alterTable('outputs', table => {
@@ -112,6 +242,130 @@ class KnexMigrations {
                 });
             }
         };
+        migrations[exports.MANAGED_CHANGE_POLICY_MIGRATION] = {
+            async up(knex) {
+                // Only the exact historical defaults identify an untouched basket.
+                // Operator-selected non-default values remain authoritative.
+                // SQLite sync predicates compare ISO timestamp text, while MySQL uses
+                // native timestamp values. Preserve that provider-specific contract so
+                // the migrated row remains visible to incremental sync immediately.
+                const updatedAt = (await determineDBType(knex)) === 'SQLite' ? new Date().toISOString() : knex.fn.now(3);
+                await knex('output_baskets')
+                    .where({
+                    name: 'default',
+                    numberOfDesiredUTXOs: managedChangePolicy_1.DEFAULT_MANAGED_CHANGE_TARGET_UTXOS,
+                    minimumDesiredUTXOValue: managedChangePolicy_1.LEGACY_MANAGED_CHANGE_MINIMUM_SATOSHIS
+                })
+                    .update({
+                    minimumDesiredUTXOValue: managedChangePolicy_1.DEFAULT_MANAGED_CHANGE_MINIMUM_SATOSHIS,
+                    updated_at: updatedAt
+                });
+            },
+            async down() {
+                // Intentionally irreversible. Restoring 32-satoshi liquidity units on
+                // rollback would actively re-fragment wallets that already migrated.
+            }
+        };
+        migrations[exports.WALLET_SYNC_SOURCE_INDEX_MIGRATION] = {
+            config: indexConfig,
+            async up(knex) {
+                await addIndexes(knex, 'transactions', [
+                    { columns: ['userId', 'provenTxId'], name: 'idx_transactions_user_proven_tx' },
+                    { columns: ['userId', 'txid'], name: 'idx_transactions_user_txid' }
+                ]);
+            },
+            async down(knex) {
+                // MySQL may discard the automatically-created userId index after one
+                // of these wider indexes becomes able to support the foreign key.
+                // Restore it before removing both migration-owned indexes.
+                if ((await determineDBType(knex)) === 'MySQL') {
+                    const result = await knex.raw('SHOW INDEX FROM ?? WHERE Key_name = ?', [
+                        'transactions',
+                        'transactions_userid_foreign'
+                    ]);
+                    const indexes = result[0];
+                    if (indexes.length === 0) {
+                        await knex.schema.alterTable('transactions', table => {
+                            table.index(['userId'], 'transactions_userid_foreign');
+                        });
+                    }
+                }
+                await knex.schema.alterTable('transactions', table => {
+                    table.dropIndex(['userId', 'provenTxId'], 'idx_transactions_user_proven_tx');
+                    table.dropIndex(['userId', 'txid'], 'idx_transactions_user_txid');
+                });
+            }
+        };
+        migrations[exports.BRC177_NO_SEND_EXPIRY_MIGRATION] = {
+            config: indexConfig,
+            async up(knex) {
+                // Outside a transaction a re-run after an interruption can find the
+                // columns already added by the single ALTER TABLE below.
+                if (!isConcurrentIndexBuild(knex) || !(await knex.schema.hasColumn('transactions', 'noSendExpiryMode'))) {
+                    await knex.schema.alterTable('transactions', table => {
+                        table.string('noSendExpiryMode', 16).nullable();
+                        table.bigInteger('noSendExpiryValue').unsigned().nullable();
+                        table.bigInteger('noSendExpiryDeadline').unsigned().nullable();
+                        table.string('noSendExpiryState', 24).nullable();
+                        table.string('noSendExpiryAnchorTxid', 64).nullable();
+                        table.integer('noSendExpiryAnchorVout').unsigned().nullable();
+                        table.bigInteger('noSendExpiryReleasedAt').unsigned().nullable();
+                        table.bigInteger('noSendExpiryObservedAt').unsigned().nullable();
+                        table.string('noSendExpiryReclaimTxid', 64).nullable();
+                        table.binary('noSendExpiryReclaimRawTx').nullable();
+                        table.string('noSendExpiryReclaimDerivationPrefix', 32).nullable();
+                        table.string('noSendExpiryReclaimDerivationSuffix', 32).nullable();
+                        table.bigInteger('noSendExpiryReclaimSatoshis').unsigned().nullable();
+                    });
+                }
+                await addIndexes(knex, 'transactions', [
+                    { columns: ['noSendExpiryState', 'noSendExpiryDeadline'], name: 'idx_transactions_nosend_expiry' },
+                    { columns: ['userId', 'noSendExpiryReclaimTxid'], name: 'idx_transactions_nosend_reclaim' }
+                ]);
+                if ((await determineDBType(knex)) === 'MySQL') {
+                    await knex.raw('ALTER TABLE transactions MODIFY COLUMN noSendExpiryReclaimRawTx LONGBLOB');
+                }
+            },
+            async down(knex) {
+                await knex.schema.alterTable('transactions', table => {
+                    table.dropIndex(['noSendExpiryState', 'noSendExpiryDeadline'], 'idx_transactions_nosend_expiry');
+                    table.dropIndex(['userId', 'noSendExpiryReclaimTxid'], 'idx_transactions_nosend_reclaim');
+                    table.dropColumns('noSendExpiryMode', 'noSendExpiryValue', 'noSendExpiryDeadline', 'noSendExpiryState', 'noSendExpiryAnchorTxid', 'noSendExpiryAnchorVout', 'noSendExpiryReleasedAt', 'noSendExpiryObservedAt', 'noSendExpiryReclaimTxid', 'noSendExpiryReclaimRawTx', 'noSendExpiryReclaimDerivationPrefix', 'noSendExpiryReclaimDerivationSuffix', 'noSendExpiryReclaimSatoshis');
+                });
+            }
+        };
+        migrations[exports.PREPARED_BEEF_MIGRATION] = {
+            async up(knex) {
+                const dbtype = await determineDBType(knex);
+                await knex.schema.createTable('prepared_beef_metadata', table => {
+                    table.integer('preparedBeefMetadataId').unsigned().primary();
+                    table.integer('proofEpoch').unsigned().notNullable();
+                });
+                await knex('prepared_beef_metadata').insert({ preparedBeefMetadataId: 1, proofEpoch: 0 });
+                await knex.schema.createTable('prepared_beefs', table => {
+                    addTimeStamps(knex, table, dbtype);
+                    table.increments('preparedBeefId').notNullable();
+                    table.integer('userId').unsigned().references('userId').inTable('users').notNullable();
+                    table.string('rootTxid', 64).notNullable();
+                    table.binary('beef').notNullable();
+                    table.string('checksum', 64).notNullable();
+                    table.integer('formatVersion').unsigned().notNullable();
+                    table.string('state', 16).notNullable();
+                    table.integer('txCount').unsigned().notNullable();
+                    table.integer('bumpCount').unsigned().notNullable();
+                    table.integer('byteLength').unsigned().notNullable();
+                    table.unique(['userId', 'rootTxid']);
+                    table.index(['state', 'formatVersion'], 'idx_prepared_beefs_state_version');
+                });
+                if (dbtype === 'MySQL') {
+                    await knex.raw('ALTER TABLE prepared_beefs MODIFY COLUMN beef LONGBLOB NOT NULL');
+                }
+            },
+            async down(knex) {
+                await knex.schema.dropTable('prepared_beefs');
+                await knex.schema.dropTable('prepared_beef_metadata');
+            }
+        };
         migrations['2026-07-15-001 add action batch reservations and blobs'] = {
             async up(knex) {
                 const dbtype = await determineDBType(knex);
@@ -186,10 +440,9 @@ class KnexMigrations {
             }
         };
         migrations['2025-10-13-001 add outputs spendable index'] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('outputs', table => {
-                    table.index('spendable');
-                });
+                await addIndexes(knex, 'outputs', [{ columns: ['spendable'] }]);
             },
             async down(knex) {
                 await knex.schema.alterTable('outputs', table => {
@@ -198,17 +451,18 @@ class KnexMigrations {
             }
         };
         migrations['2026-02-27-001 add listOutputs path indexes'] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('outputs', table => {
-                    table.index(['userId', 'spendable', 'outputId'], 'idx_outputs_user_spendable_outputid');
-                    table.index(['userId', 'basketId', 'spendable', 'outputId'], 'idx_outputs_user_basket_spendable_outputid');
-                });
-                await knex.schema.alterTable('output_tags_map', table => {
-                    table.index(['outputId', 'isDeleted', 'outputTagId'], 'idx_output_tags_map_output_deleted_tag');
-                });
-                await knex.schema.alterTable('tx_labels_map', table => {
-                    table.index(['transactionId', 'isDeleted'], 'idx_tx_labels_map_tx_deleted');
-                });
+                await addIndexes(knex, 'outputs', [
+                    { columns: ['userId', 'spendable', 'outputId'], name: 'idx_outputs_user_spendable_outputid' },
+                    { columns: ['userId', 'basketId', 'spendable', 'outputId'], name: 'idx_outputs_user_basket_spendable_outputid' }
+                ]);
+                await addIndexes(knex, 'output_tags_map', [
+                    { columns: ['outputId', 'isDeleted', 'outputTagId'], name: 'idx_output_tags_map_output_deleted_tag' }
+                ]);
+                await addIndexes(knex, 'tx_labels_map', [
+                    { columns: ['transactionId', 'isDeleted'], name: 'idx_tx_labels_map_tx_deleted' }
+                ]);
             },
             async down(knex) {
                 // MySQL may discard the automatically-created userId index once one
@@ -236,11 +490,12 @@ class KnexMigrations {
             }
         };
         migrations['2026-02-27-002 add createAction path indexes'] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('outputs', table => {
-                    table.index(['userId', 'basketId', 'spendable', 'satoshis'], 'idx_outputs_user_basket_spendable_satoshis');
-                    table.index(['spentBy'], 'idx_outputs_spentby');
-                });
+                await addIndexes(knex, 'outputs', [
+                    { columns: ['userId', 'basketId', 'spendable', 'satoshis'], name: 'idx_outputs_user_basket_spendable_satoshis' },
+                    { columns: ['spentBy'], name: 'idx_outputs_spentby' }
+                ]);
             },
             async down(knex) {
                 // MySQL may discard the automatically-created index that supports the
@@ -263,10 +518,9 @@ class KnexMigrations {
             }
         };
         migrations['2025-10-18-002 add proven_tx_reqs txid index'] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('proven_tx_reqs', table => {
-                    table.index('txid');
-                });
+                await addIndexes(knex, 'proven_tx_reqs', [{ columns: ['txid'] }]);
             },
             async down(knex) {
                 await knex.schema.alterTable('proven_tx_reqs', table => {
@@ -275,10 +529,9 @@ class KnexMigrations {
             }
         };
         migrations['2025-10-18-001 add transactions txid index'] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('transactions', table => {
-                    table.index('txid');
-                });
+                await addIndexes(knex, 'transactions', [{ columns: ['txid'] }]);
             },
             async down(knex) {
                 await knex.schema.alterTable('transactions', table => {
@@ -287,10 +540,9 @@ class KnexMigrations {
             }
         };
         migrations['2025-09-06-001 add proven txs blockHash index'] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('proven_txs', table => {
-                    table.index('blockHash');
-                });
+                await addIndexes(knex, 'proven_txs', [{ columns: ['blockHash'] }]);
             },
             async down(knex) {
                 await knex.schema.alterTable('proven_txs', table => {
@@ -299,10 +551,9 @@ class KnexMigrations {
             }
         };
         migrations['2025-05-13-001 add monitor events event index'] = {
+            config: indexConfig,
             async up(knex) {
-                await knex.schema.alterTable('monitor_events', table => {
-                    table.index('event');
-                });
+                await addIndexes(knex, 'monitor_events', [{ columns: ['event'] }]);
             },
             async down(knex) {
                 await knex.schema.alterTable('monitor_events', table => {
@@ -358,7 +609,11 @@ class KnexMigrations {
                     knex
                 });
                 const settings = await storage.makeAvailable();
-                await knex.raw(`update users set activeStorage = '${settings.storageIdentityKey}' where activeStorage is NULL`);
+                await knex.raw('update users set ?? = ? where ?? is NULL', [
+                    'activeStorage',
+                    settings.storageIdentityKey,
+                    'activeStorage'
+                ]);
                 await knex.schema.alterTable('users', table => {
                     table.string('activeStorage').notNullable().alter();
                 });
@@ -444,8 +699,8 @@ class KnexMigrations {
                     table.increments('basketId');
                     table.integer('userId').unsigned().references('userId').inTable('users').notNullable();
                     table.string('name', 300).notNullable();
-                    table.integer('numberOfDesiredUTXOs', 6).defaultTo(6).notNullable();
-                    table.integer('minimumDesiredUTXOValue', 15).defaultTo(10000).notNullable();
+                    table.integer('numberOfDesiredUTXOs', 6).defaultTo(managedChangePolicy_1.DEFAULT_MANAGED_CHANGE_TARGET_UTXOS).notNullable();
+                    table.integer('minimumDesiredUTXOValue', 15).defaultTo(managedChangePolicy_1.DEFAULT_MANAGED_CHANGE_MINIMUM_SATOSHIS).notNullable();
                     table.boolean('isDeleted').notNullable().defaultTo(false);
                     table.unique(['name', 'userId']);
                 });
@@ -581,7 +836,8 @@ class KnexMigrations {
                     await knex.raw('ALTER TABLE transactions MODIFY COLUMN inputBEEF LONGBLOB');
                     await knex.raw('ALTER TABLE outputs MODIFY COLUMN lockingScript LONGBLOB');
                 }
-                else {
+                else if (dbtype !== 'Postgres') {
+                    // Postgres bytea is unbounded; there is nothing to widen.
                     await knex.schema.alterTable('proven_tx_reqs', table => {
                         table.binary('rawTx', 10000000).alter();
                         table.binary('beef', 10000000).alter();
@@ -628,11 +884,46 @@ class KnexMigrations {
     }
 }
 exports.KnexMigrations = KnexMigrations;
+/** Postgres outside a transaction: the migration runs with `config: { transaction: false }`. */
+function isConcurrentIndexBuild(knex) {
+    return knex.client.dialect === 'postgresql' && knex.isTransaction !== true;
+}
+/**
+ * Adds indexes to an existing table. On Postgres outside a transaction each
+ * index is built with CREATE INDEX CONCURRENTLY IF NOT EXISTS, which does not
+ * block writes to a populated table and can be re-run after an interruption.
+ * Otherwise the knex schema builder issues the same statements as before.
+ */
+async function addIndexes(knex, table, indexes) {
+    if (!isConcurrentIndexBuild(knex)) {
+        await knex.schema.alterTable(table, t => {
+            for (const { columns, name } of indexes)
+                t.index(columns, name);
+        });
+        return;
+    }
+    for (const { columns, name = `${table}_${columns.join('_')}_index`.toLowerCase() } of indexes) {
+        // An interrupted concurrent build leaves an invalid index, which IF NOT EXISTS would keep.
+        const invalid = await knex.raw(`select 1 from pg_index i join pg_class c on c.oid = i.indexrelid
+       where c.relname = ? and c.relnamespace = current_schema()::regnamespace and not i.indisvalid`, [name]);
+        if (invalid.rows.length > 0)
+            await knex.raw('drop index concurrently if exists ??', [name]);
+        await knex.raw(`create index concurrently if not exists ?? on ?? (${columns.map(() => '??').join(', ')})`, [
+            name,
+            table,
+            ...columns
+        ]);
+    }
+}
 /**
  * @param knex
  * @returns {DBType} connected database engine variant
  */
 async function determineDBType(knex) {
+    // The MySQL probe below is not valid Postgres SQL, and a failed statement
+    // would abort the surrounding migration transaction.
+    if (knex.client?.dialect === 'postgresql')
+        return 'Postgres';
     try {
         const q = `SELECT 
   CASE