@noodleseed/one 0.45.0 → 0.47.0

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-validation.js

@@ -0,0 +1,321 @@
+import { randomUUID } from 'node:crypto';
+import { validateSlug } from '../store/validate.js';
+import { BILLING_METER_AGGREGATE_RETENTION_MONTHS, BILLING_METER_EXACT_KEY_TOMBSTONE_RETENTION_DAYS, BILLING_METER_RECEIPT_RETENTION_DAYS, BILLING_METER_RETRY_IDENTITY_VERSION, } from './meter-readiness.js';
+import { BILLING_METER_VALIDATION_WRITER_CONTRACT_VERSION } from './meter-validation-epoch.js';
+import { validateBillingAccountId } from './model.js';
+import { readBillingMeterTransactionTime } from './postgres-meter-clock.js';
+import { billingMeterWindowLockKey } from './postgres-meter-window-lock.js';
+import { validateScalarId } from './postgres-records.js';
+import { validateBillingUsageRetryWindowMs } from './usage-store.js';
+import { resolveUtcMonthlyUsageWindow } from './usage-window.js';
+export class BillingMeterValidationIdempotencyConflictError extends Error {
+    code = 'billing_meter_validation_idempotency_conflict';
+    constructor() {
+        super('billing meter validation identity was reused with different semantics');
+        this.name = 'BillingMeterValidationIdempotencyConflictError';
+    }
+}
+/**
+ * Validation-only transaction for load/reconciliation proof. It is deliberately absent from request
+ * dispatch and accepts only a prepared epoch; it does not make or enforce a customer admission decision.
+ */
+export async function recordBillingMeterValidationUsage(pool, input, options) {
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        const result = await recordBillingMeterValidationUsageTx(client, input, options);
+        await client.query('COMMIT');
+        return result;
+    }
+    catch (error) {
+        try {
+            await client.query('ROLLBACK');
+        }
+        catch {
+            // Preserve the transaction error; a broken client is discarded by pg when released.
+        }
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+/** Reuse the exact receipt/counter transaction from the live writer without accepting an epoch on its API. */
+export function recordBillingMeterValidationUsageTx(client, input, options) {
+    const usage = normalizeValidationInput(input);
+    const retryWindowMs = validateBillingUsageRetryWindowMs(options.retryWindowMs);
+    const expectedKeyGeneration = validateFingerprint('billing meter expected key generation', options.keyGeneration);
+    const expectedReleaseSha = validateReleaseSha(options.releaseSha);
+    const expectedWriterContractVersion = validateWriterContractVersion(options.writerContractVersion ?? BILLING_METER_VALIDATION_WRITER_CONTRACT_VERSION);
+    const writerSessionId = options.writerSessionId === undefined
+        ? undefined
+        : validateScalarId('billing meter writer session id', options.writerSessionId);
+    return recordValidationUsageTx(client, usage, retryWindowMs, expectedKeyGeneration, expectedReleaseSha, expectedWriterContractVersion, writerSessionId);
+}
+async function recordValidationUsageTx(client, usage, retryWindowMs, expectedKeyGeneration, expectedReleaseSha, expectedWriterContractVersion, writerSessionId) {
+    const recordedAt = await readBillingMeterTransactionTime(client);
+    const dedupeKind = usage.highConfidenceKeyHash === undefined ? 'fallback' : 'exact';
+    const dedupeValue = usage.highConfidenceKeyHash ?? usage.fallbackFingerprint;
+    await client.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [
+        `${usage.epochId}:${dedupeKind}:${dedupeValue}`,
+    ]);
+    const epoch = await client.query(`SELECT state, retry_identity_version, key_generation, release_sha, writer_contract_version
+     FROM billing_meter_epochs WHERE id = $1 FOR SHARE`, [usage.epochId]);
+    if (epoch.rows[0]?.state !== 'prepared') {
+        throw new Error('billing meter validation requires a prepared epoch');
+    }
+    if (epoch.rows[0].retry_identity_version !== BILLING_METER_RETRY_IDENTITY_VERSION) {
+        throw new Error('billing meter validation retry identity version is unsupported');
+    }
+    if (epoch.rows[0].key_generation !== expectedKeyGeneration) {
+        throw new Error('billing meter validation key generation does not match the prepared epoch');
+    }
+    if (epoch.rows[0].release_sha !== expectedReleaseSha) {
+        throw new Error('billing meter validation release SHA does not match the prepared epoch');
+    }
+    if (epoch.rows[0].writer_contract_version !== expectedWriterContractVersion) {
+        throw new Error('billing meter validation writer contract does not match the prepared epoch');
+    }
+    if (usage.highConfidenceKeyHash !== undefined) {
+        const exact = await client.query(`SELECT event_id, classification, semantic_fingerprint
+       FROM billing_meter_exact_key_tombstones
+       WHERE epoch_id = $1 AND key_hash = decode($2, 'hex')`, [usage.epochId, usage.highConfidenceKeyHash]);
+        const prior = exact.rows[0];
+        if (prior !== undefined) {
+            if (!prior.semantic_fingerprint.equals(Buffer.from(usage.semanticFingerprint, 'hex'))) {
+                throw new BillingMeterValidationIdempotencyConflictError();
+            }
+            return {
+                outcome: 'duplicate',
+                deduplicatedBy: 'high_confidence_key',
+                eventId: prior.event_id,
+                classification: prior.classification,
+            };
+        }
+    }
+    else {
+        const retryCutoff = new Date(Date.parse(recordedAt) - retryWindowMs).toISOString();
+        const retryCeiling = new Date(Date.parse(recordedAt) + retryWindowMs).toISOString();
+        const fallback = await client.query(`SELECT event_id, classification
+       FROM billing_meter_usage_events
+       WHERE epoch_id = $1
+         AND fallback_fingerprint = decode($2, 'hex')
+         AND semantic_fingerprint = decode($3, 'hex')
+         AND recorded_at >= $4
+         AND recorded_at <= $5
+       ORDER BY recorded_at DESC, event_id
+       LIMIT 1`, [
+            usage.epochId,
+            usage.fallbackFingerprint,
+            usage.semanticFingerprint,
+            retryCutoff,
+            retryCeiling,
+        ]);
+        const prior = fallback.rows[0];
+        if (prior !== undefined) {
+            return {
+                outcome: 'duplicate',
+                deduplicatedBy: 'bounded_fallback',
+                eventId: prior.event_id,
+                classification: prior.classification,
+            };
+        }
+    }
+    const resolution = await client.query(`SELECT link.billing_account_id,
+            link.version AS link_version,
+            snapshot.id AS snapshot_id,
+            snapshot.version AS snapshot_version,
+            snapshot.monthly_usage_anchor
+     FROM org_billing_links AS link
+     JOIN billing_account_active_snapshots AS active
+       ON active.billing_account_id = link.billing_account_id
+     JOIN billing_entitlement_snapshots AS snapshot
+       ON snapshot.billing_account_id = active.billing_account_id
+      AND snapshot.id = active.snapshot_id
+     WHERE link.org_slug = $1
+       AND link.active
+       AND snapshot.verification_status = 'verified'
+     FOR SHARE OF link, active, snapshot`, [usage.org]);
+    const attribution = resolution.rows[0];
+    if (attribution === undefined) {
+        throw new Error('billing setup is incomplete for organization');
+    }
+    const window = resolveUtcMonthlyUsageWindow(toIso(attribution.monthly_usage_anchor), recordedAt);
+    const resolved = {
+        ...usage,
+        billingAccountId: validateBillingAccountId(attribution.billing_account_id),
+        linkVersion: attribution.link_version,
+        snapshotId: validateScalarId('billing meter snapshot id', attribution.snapshot_id),
+        snapshotVersion: attribution.snapshot_version,
+        windowStart: window.start,
+        windowEnd: window.end,
+        admittedAt: recordedAt,
+        recordedAt,
+    };
+    await client.query('SELECT pg_advisory_xact_lock_shared(hashtextextended($1, 0))', [
+        billingMeterWindowLockKey({
+            epochId: resolved.epochId,
+            windowStart: resolved.windowStart,
+            windowEnd: resolved.windowEnd,
+        }),
+    ]);
+    const sealed = await client.query(`SELECT EXISTS (
+       SELECT 1
+       FROM billing_meter_reconciliation_runs
+       WHERE epoch_id = $1 AND window_start = $2 AND window_end = $3 AND sealed
+     ) AS sealed`, [resolved.epochId, resolved.windowStart, resolved.windowEnd]);
+    if (sealed.rows[0]?.sealed === true) {
+        throw new Error('billing meter validation window is sealed');
+    }
+    const eventId = `bmve_${randomUUID()}`;
+    const eventValues = [
+        eventId,
+        usage.epochId,
+        usage.highConfidenceKeyHash ?? null,
+        usage.fallbackFingerprint,
+        usage.semanticFingerprint,
+        usage.classification,
+        resolved.billingAccountId,
+        resolved.org,
+        resolved.app,
+        resolved.environment,
+        resolved.deploymentId,
+        resolved.linkVersion,
+        resolved.snapshotId,
+        resolved.snapshotVersion,
+        resolved.admittedAt,
+        resolved.windowStart,
+        resolved.windowEnd,
+        resolved.recordedAt,
+    ];
+    await client.query(`INSERT INTO billing_meter_usage_events
+       (event_id, epoch_id, mode, high_confidence_key_hash, fallback_fingerprint,
+        semantic_fingerprint, classification, billing_account_id, org_slug, app_slug,
+        environment, deployment_id, link_version, snapshot_id, snapshot_version, admitted_at,
+        window_start, window_end, recorded_at, retention_until${writerSessionId === undefined ? '' : ', writer_session_id'})
+     VALUES
+       ($1, $2, 'validation', decode($3, 'hex'), decode($4, 'hex'), decode($5, 'hex'),
+        $6, $7, $8, $9, $10, $11, $12, $13, $14, $15, $16, $17, $18,
+        $17::timestamptz + interval '${BILLING_METER_RECEIPT_RETENTION_DAYS} days'${writerSessionId === undefined ? '' : ', $19'})`, writerSessionId === undefined ? eventValues : [...eventValues, writerSessionId]);
+    if (usage.highConfidenceKeyHash !== undefined) {
+        await client.query(`INSERT INTO billing_meter_exact_key_tombstones
+         (epoch_id, key_hash, semantic_fingerprint, event_id, classification, window_end,
+          created_at, retention_until)
+       VALUES
+         ($1, decode($2, 'hex'), decode($3, 'hex'), $4, $5, $6, $7,
+          $6::timestamptz + interval '${BILLING_METER_EXACT_KEY_TOMBSTONE_RETENTION_DAYS} days')`, [
+            usage.epochId,
+            usage.highConfidenceKeyHash,
+            usage.semanticFingerprint,
+            eventId,
+            usage.classification,
+            resolved.windowEnd,
+            resolved.recordedAt,
+        ]);
+    }
+    const increments = classificationIncrements(usage.classification);
+    const account = await upsertValidationCounter(client, {
+        table: 'billing_meter_account_windows',
+        conflict: 'epoch_id, billing_account_id, window_start',
+        columns: ['epoch_id', 'billing_account_id', 'window_start'],
+        values: [resolved.epochId, resolved.billingAccountId, resolved.windowStart],
+        usage: resolved,
+        increments,
+    });
+    const organization = await upsertValidationCounter(client, {
+        table: 'billing_meter_org_windows',
+        conflict: 'epoch_id, billing_account_id, org_slug, window_start',
+        columns: ['epoch_id', 'billing_account_id', 'org_slug', 'window_start'],
+        values: [resolved.epochId, resolved.billingAccountId, resolved.org, resolved.windowStart],
+        usage: resolved,
+        increments,
+    });
+    if (!account || !organization)
+        throw new Error('billing meter validation window conflict');
+    return {
+        outcome: 'recorded',
+        deduplicatedBy: null,
+        eventId,
+        classification: usage.classification,
+    };
+}
+async function upsertValidationCounter(client, input) {
+    const prefix = input.values.map((_, index) => `$${index + 1}`).join(', ');
+    const offset = input.values.length;
+    const result = await client.query(`INSERT INTO ${input.table}
+       (${input.columns.join(', ')}, window_end, included_calls, overage_calls, denied_calls,
+        first_admitted_at, last_admitted_at, updated_at, retention_until)
+     VALUES
+       (${prefix}, $${offset + 1}, $${offset + 2}, $${offset + 3}, $${offset + 4},
+        $${offset + 5}, $${offset + 5}, $${offset + 6},
+        $${offset + 1}::timestamptz + interval '${BILLING_METER_AGGREGATE_RETENTION_MONTHS} months')
+     ON CONFLICT (${input.conflict}) DO UPDATE SET
+       included_calls = ${input.table}.included_calls + EXCLUDED.included_calls,
+       overage_calls = ${input.table}.overage_calls + EXCLUDED.overage_calls,
+       denied_calls = ${input.table}.denied_calls + EXCLUDED.denied_calls,
+       first_admitted_at = LEAST(${input.table}.first_admitted_at, EXCLUDED.first_admitted_at),
+       last_admitted_at = GREATEST(${input.table}.last_admitted_at, EXCLUDED.last_admitted_at),
+       updated_at = EXCLUDED.updated_at
+     WHERE ${input.table}.window_end = EXCLUDED.window_end
+     RETURNING 1`, [
+        ...input.values,
+        input.usage.windowEnd,
+        ...input.increments,
+        input.usage.admittedAt,
+        input.usage.recordedAt,
+    ]);
+    return result.rowCount === 1;
+}
+function classificationIncrements(classification) {
+    if (classification === 'included')
+        return [1, 0, 0];
+    if (classification === 'overage')
+        return [0, 1, 0];
+    return [0, 0, 1];
+}
+function normalizeValidationInput(input) {
+    if (input.classification !== 'included' &&
+        input.classification !== 'overage' &&
+        input.classification !== 'denied') {
+        throw new Error('billing meter validation classification is invalid');
+    }
+    return {
+        ...input,
+        epochId: validateScalarId('billing meter epoch id', input.epochId),
+        org: validateSlug('org', input.org),
+        app: validateSlug('app', input.app),
+        environment: validateSlug('env', input.environment),
+        deploymentId: validateScalarId('billing meter deployment id', input.deploymentId),
+        ...(input.highConfidenceKeyHash === undefined
+            ? {}
+            : {
+                highConfidenceKeyHash: validateFingerprint('billing meter high-confidence key', input.highConfidenceKeyHash),
+            }),
+        fallbackFingerprint: validateFingerprint('billing meter fallback fingerprint', input.fallbackFingerprint),
+        semanticFingerprint: validateFingerprint('billing meter semantic fingerprint', input.semanticFingerprint),
+    };
+}
+function toIso(value) {
+    const date = value instanceof Date ? value : new Date(value);
+    if (!Number.isFinite(date.getTime()))
+        throw new Error('billing meter timestamp is invalid');
+    return date.toISOString();
+}
+function validateFingerprint(name, value) {
+    if (!/^[0-9a-f]{64}$/.test(value))
+        throw new Error(`${name} must be a SHA-256 digest`);
+    return value;
+}
+function validateReleaseSha(value) {
+    if (!/^[0-9a-f]{40}$/.test(value)) {
+        throw new Error('billing meter release SHA must be a full 40-character commit digest');
+    }
+    return value;
+}
+function validateWriterContractVersion(value) {
+    if (!Number.isSafeInteger(value) || value < 1) {
+        throw new Error('billing meter writer contract version must be positive');
+    }
+    return value;
+}
+//# sourceMappingURL=postgres-meter-validation.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-validation.js","sourceRoot":"","sources":["../../src/billing/postgres-meter-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,wCAAwC,EACxC,gDAAgD,EAChD,oCAAoC,EACpC,oCAAoC,GACrC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gDAAgD,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,iCAAiC,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAsCjE,MAAM,OAAO,8CAA+C,SAAQ,KAAK;IAC9D,IAAI,GAAG,+CAAwD,CAAC;IAEzE;QACE,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,GAAG,gDAAgD,CAAC;IAC/D,CAAC;CACF;AAsCD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAAU,EACV,KAAwC,EACxC,OAA4C;IAE5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACjF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,oFAAoF;QACtF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,mCAAmC,CACjD,MAAkB,EAClB,KAAwC,EACxC,OAAiD;IAEjD,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,iCAAiC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,qBAAqB,GAAG,mBAAmB,CAC/C,uCAAuC,EACvC,OAAO,CAAC,aAAa,CACtB,CAAC;IACF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,6BAA6B,GAAG,6BAA6B,CACjE,OAAO,CAAC,qBAAqB,IAAI,gDAAgD,CAClF,CAAC;IACF,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe,KAAK,SAAS;QACnC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gBAAgB,CAAC,iCAAiC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACnF,OAAO,uBAAuB,CAC5B,MAAM,EACN,KAAK,EACL,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,6BAA6B,EAC7B,eAAe,CAChB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,MAAkB,EAClB,KAAgC,EAChC,aAAqB,EACrB,qBAA6B,EAC7B,kBAA0B,EAC1B,6BAAqC,EACrC,eAAmC;IAEnC,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,KAAK,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IACpF,MAAM,WAAW,GAAG,KAAK,CAAC,qBAAqB,IAAI,KAAK,CAAC,mBAAmB,CAAC;IAC7E,MAAM,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;QAC1E,GAAG,KAAK,CAAC,OAAO,IAAI,UAAU,IAAI,WAAW,EAAE;KAChD,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAO9B;uDACmD,EACnD,CAAC,KAAK,CAAC,OAAO,CAAC,CAChB,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,KAAK,oCAAoC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,KAAK,qBAAqB,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uBAAuB,KAAK,6BAA6B,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAC9B;;4DAEsD,EACtD,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAC7C,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtF,MAAM,IAAI,8CAA8C,EAAE,CAAC;YAC7D,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,cAAc,EAAE,qBAAqB;gBACrC,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;;;;;eAQS,EACT;YACE,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,mBAAmB;YACzB,KAAK,CAAC,mBAAmB;YACzB,WAAW;YACX,YAAY;SACb,CACF,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,cAAc,EAAE,kBAAkB;gBAClC,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CACnC;;;;;;;;;;;;;;yCAcqC,EACrC,CAAC,KAAK,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE,UAAU,CAAC,CAAC;IACjG,MAAM,QAAQ,GAA4B;QACxC,GAAG,KAAK;QACR,gBAAgB,EAAE,wBAAwB,CAAC,WAAW,CAAC,kBAAkB,CAAC;QAC1E,WAAW,EAAE,WAAW,CAAC,YAAY;QACrC,UAAU,EAAE,gBAAgB,CAAC,2BAA2B,EAAE,WAAW,CAAC,WAAW,CAAC;QAClF,eAAe,EAAE,WAAW,CAAC,gBAAgB;QAC7C,WAAW,EAAE,MAAM,CAAC,KAAK;QACzB,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,UAAU,EAAE,UAAU;QACtB,UAAU;KACX,CAAC;IACF,MAAM,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;QACjF,yBAAyB,CAAC;YACxB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;KACH,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B;;;;iBAIa,EACb,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAC7D,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,UAAU,EAAE,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG;QAClB,OAAO;QACP,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,qBAAqB,IAAI,IAAI;QACnC,KAAK,CAAC,mBAAmB;QACzB,KAAK,CAAC,mBAAmB;QACzB,KAAK,CAAC,cAAc;QACpB,QAAQ,CAAC,gBAAgB;QACzB,QAAQ,CAAC,GAAG;QACZ,QAAQ,CAAC,GAAG;QACZ,QAAQ,CAAC,WAAW;QACpB,QAAQ,CAAC,YAAY;QACrB,QAAQ,CAAC,WAAW;QACpB,QAAQ,CAAC,UAAU;QACnB,QAAQ,CAAC,eAAe;QACxB,QAAQ,CAAC,UAAU;QACnB,QAAQ,CAAC,WAAW;QACpB,QAAQ,CAAC,SAAS;QAClB,QAAQ,CAAC,UAAU;KACpB,CAAC;IACF,MAAM,MAAM,CAAC,KAAK,CAChB;;;;gEAKM,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qBACvC;;;;uCAI+B,oCAAoC,SACjE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OACvC,GAAG,EACP,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,eAAe,CAAC,CAChF,CAAC;IACF,IAAI,KAAK,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,MAAM,CAAC,KAAK,CAChB;;;;;wCAKkC,gDAAgD,SAAS,EAC3F;YACE,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,qBAAqB;YAC3B,KAAK,CAAC,mBAAmB;YACzB,OAAO;YACP,KAAK,CAAC,cAAc;YACpB,QAAQ,CAAC,SAAS;YAClB,QAAQ,CAAC,UAAU;SACpB,CACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE;QACpD,KAAK,EAAE,+BAA+B;QACtC,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,CAAC,UAAU,EAAE,oBAAoB,EAAE,cAAc,CAAC;QAC3D,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,WAAW,CAAC;QAC3E,KAAK,EAAE,QAAQ;QACf,UAAU;KACX,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE;QACzD,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE,sDAAsD;QAChE,OAAO,EAAE,CAAC,UAAU,EAAE,oBAAoB,EAAE,UAAU,EAAE,cAAc,CAAC;QACvE,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,WAAW,CAAC;QACzF,KAAK,EAAE,QAAQ;QACf,UAAU;KACX,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC3F,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,cAAc,EAAE,IAAI;QACpB,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,MAAkB,EAClB,KAOC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,eAAe,KAAK,CAAC,KAAK;UACpB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;;;UAGxB,MAAM,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC;WACrE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC;WAC1C,MAAM,GAAG,CAAC,6BAA6B,wCAAwC;oBACtE,KAAK,CAAC,QAAQ;0BACR,KAAK,CAAC,KAAK;yBACZ,KAAK,CAAC,KAAK;wBACZ,KAAK,CAAC,KAAK;mCACA,KAAK,CAAC,KAAK;qCACT,KAAK,CAAC,KAAK;;aAEnC,KAAK,CAAC,KAAK;iBACP,EACb;QACE,GAAG,KAAK,CAAC,MAAM;QACf,KAAK,CAAC,KAAK,CAAC,SAAS;QACrB,GAAG,KAAK,CAAC,UAAU;QACnB,KAAK,CAAC,KAAK,CAAC,UAAU;QACtB,KAAK,CAAC,KAAK,CAAC,UAAU;KACvB,CACF,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,wBAAwB,CAC/B,cAAoD;IAEpD,IAAI,cAAc,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAwC;IAExC,IACE,KAAK,CAAC,cAAc,KAAK,UAAU;QACnC,KAAK,CAAC,cAAc,KAAK,SAAS;QAClC,KAAK,CAAC,cAAc,KAAK,QAAQ,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO;QACL,GAAG,KAAK;QACR,OAAO,EAAE,gBAAgB,CAAC,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC;QAClE,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;QACnC,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;QACnC,WAAW,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;QACnD,YAAY,EAAE,gBAAgB,CAAC,6BAA6B,EAAE,KAAK,CAAC,YAAY,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,qBAAqB,EAAE,mBAAmB,CACxC,mCAAmC,EACnC,KAAK,CAAC,qBAAqB,CAC5B;aACF,CAAC;QACN,mBAAmB,EAAE,mBAAmB,CACtC,oCAAoC,EACpC,KAAK,CAAC,mBAAmB,CAC1B;QACD,mBAAmB,EAAE,mBAAmB,CACtC,oCAAoC,EACpC,KAAK,CAAC,mBAAmB,CAC1B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAoB;IACjC,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAa;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-window-lock.d.ts

@@ -0,0 +1,10 @@
+export declare const BILLING_METER_CHANGED_WINDOW_RECONCILIATION_DELAY_MS: number;
+export declare const BILLING_METER_CLEAN_WINDOW_RECONCILIATION_INTERVAL_MS: number;
+export declare const BILLING_METER_FAILED_WINDOW_RECONCILIATION_DELAY_MS: number;
+export declare const BILLING_METER_INTEGRITY_MODULUS = "2305843009213693951";
+export declare function billingMeterWindowLockKey(input: {
+    readonly epochId: string;
+    readonly windowStart: string;
+    readonly windowEnd: string;
+}): string;
+//# sourceMappingURL=postgres-meter-window-lock.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-window-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-window-lock.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-meter-window-lock.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oDAAoD,QAAkB,CAAC;AACpF,eAAO,MAAM,qDAAqD,QAAsB,CAAC;AACzF,eAAO,MAAM,mDAAmD,QAAkB,CAAC;AACnF,eAAO,MAAM,+BAA+B,wBAAwB,CAAC;AAErE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GAAG,MAAM,CAOT"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-window-lock.js

@@ -0,0 +1,13 @@
+export const BILLING_METER_CHANGED_WINDOW_RECONCILIATION_DELAY_MS = 15 * 60 * 1_000;
+export const BILLING_METER_CLEAN_WINDOW_RECONCILIATION_INTERVAL_MS = 6 * 60 * 60 * 1_000;
+export const BILLING_METER_FAILED_WINDOW_RECONCILIATION_DELAY_MS = 15 * 60 * 1_000;
+export const BILLING_METER_INTEGRITY_MODULUS = '2305843009213693951';
+export function billingMeterWindowLockKey(input) {
+    const windowStartMs = Date.parse(input.windowStart);
+    const windowEndMs = Date.parse(input.windowEnd);
+    if (!Number.isSafeInteger(windowStartMs) || !Number.isSafeInteger(windowEndMs)) {
+        throw new Error('billing meter window lock requires valid instants');
+    }
+    return `billing-meter-window:${input.epochId}:${windowStartMs}:${windowEndMs}`;
+}
+//# sourceMappingURL=postgres-meter-window-lock.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-window-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-window-lock.js","sourceRoot":"","sources":["../../src/billing/postgres-meter-window-lock.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oDAAoD,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AACpF,MAAM,CAAC,MAAM,qDAAqD,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AACzF,MAAM,CAAC,MAAM,mDAAmD,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AACnF,MAAM,CAAC,MAAM,+BAA+B,GAAG,qBAAqB,CAAC;AAErE,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,wBAAwB,KAAK,CAAC,OAAO,IAAI,aAAa,IAAI,WAAW,EAAE,CAAC;AACjF,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-window-schema.d.ts

@@ -0,0 +1,6 @@
+import type { Pool } from 'pg';
+/** Create the one-row-per-window checkpoint before the receipt table adds its completeness FK. */
+export declare function ensureBillingMeterWindowRegistrySchema(pool: Pool): Promise<void>;
+/** Attach receipt-side checkpoint maintenance only after the partitioned receipt parent exists. */
+export declare function ensureBillingMeterReceiptIntegritySchema(pool: Pool): Promise<void>;
+//# sourceMappingURL=postgres-meter-window-schema.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-window-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-window-schema.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-meter-window-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAI/B,kGAAkG;AAClG,wBAAsB,sCAAsC,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDtF;AAED,mGAAmG;AACnG,wBAAsB,wCAAwC,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CA+LxF"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-window-schema.js

@@ -0,0 +1,248 @@
+import { BILLING_METER_AGGREGATE_RETENTION_MONTHS } from './meter-readiness.js';
+import { BILLING_METER_INTEGRITY_MODULUS } from './postgres-meter-window-lock.js';
+/** Create the one-row-per-window checkpoint before the receipt table adds its completeness FK. */
+export async function ensureBillingMeterWindowRegistrySchema(pool) {
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_meter_windows (
+      epoch_id                 text NOT NULL
+        REFERENCES billing_meter_epochs(id) ON DELETE RESTRICT,
+      window_start             timestamptz NOT NULL,
+      window_end               timestamptz NOT NULL CHECK (window_end > window_start),
+      receipt_included_calls   bigint NOT NULL DEFAULT 0 CHECK (receipt_included_calls >= 0),
+      receipt_overage_calls    bigint NOT NULL DEFAULT 0 CHECK (receipt_overage_calls >= 0),
+      receipt_denied_calls     bigint NOT NULL DEFAULT 0 CHECK (receipt_denied_calls >= 0),
+      writer_observed_calls    bigint NOT NULL DEFAULT 0 CHECK (writer_observed_calls >= 0),
+      account_integrity_a      numeric(19, 0) NOT NULL DEFAULT 0
+        CHECK (account_integrity_a >= 0 AND account_integrity_a < ${BILLING_METER_INTEGRITY_MODULUS}),
+      account_integrity_b      numeric(19, 0) NOT NULL DEFAULT 0
+        CHECK (account_integrity_b >= 0 AND account_integrity_b < ${BILLING_METER_INTEGRITY_MODULUS}),
+      org_integrity_a          numeric(19, 0) NOT NULL DEFAULT 0
+        CHECK (org_integrity_a >= 0 AND org_integrity_a < ${BILLING_METER_INTEGRITY_MODULUS}),
+      org_integrity_b          numeric(19, 0) NOT NULL DEFAULT 0
+        CHECK (org_integrity_b >= 0 AND org_integrity_b < ${BILLING_METER_INTEGRITY_MODULUS}),
+      first_observed_at        timestamptz,
+      last_observed_at         timestamptz,
+      last_writer_observed_at  timestamptz,
+      sealed_at                timestamptz,
+      retention_until          timestamptz NOT NULL,
+      PRIMARY KEY (epoch_id, window_start, window_end),
+      CHECK (
+        (first_observed_at IS NULL AND last_observed_at IS NULL) OR
+        (first_observed_at IS NOT NULL AND last_observed_at IS NOT NULL AND
+          last_observed_at >= first_observed_at)
+      ),
+      CHECK (
+        retention_until =
+          window_end + interval '${BILLING_METER_AGGREGATE_RETENTION_MONTHS} months'
+      )
+    )
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS billing_meter_windows_unsealed_idx
+      ON billing_meter_windows (epoch_id, window_end, first_observed_at)
+      WHERE sealed_at IS NULL
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS billing_meter_windows_observation_span_idx
+      ON billing_meter_windows (first_observed_at, last_observed_at)
+      WHERE first_observed_at IS NOT NULL
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS billing_meter_windows_retention_idx
+      ON billing_meter_windows (retention_until)
+  `);
+}
+/** Attach receipt-side checkpoint maintenance only after the partitioned receipt parent exists. */
+export async function ensureBillingMeterReceiptIntegritySchema(pool) {
+    await pool.query(`
+    DO $$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conrelid = 'billing_meter_usage_events'::regclass
+          AND conname = 'billing_meter_usage_events_window_fkey'
+      ) THEN
+        ALTER TABLE billing_meter_usage_events
+          ADD CONSTRAINT billing_meter_usage_events_window_fkey
+          FOREIGN KEY (epoch_id, window_start, window_end)
+          REFERENCES billing_meter_windows(epoch_id, window_start, window_end)
+          ON DELETE RESTRICT;
+      END IF;
+    END
+    $$
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION billing_meter_integrity_lane(
+      integrity_scope text,
+      account_id text,
+      organization_slug text,
+      usage_classification text,
+      lane integer
+    ) RETURNS numeric AS $$
+      WITH lane_bytes AS (
+        SELECT decode(
+          substr(
+            md5(
+              integrity_scope || ':' || octet_length(account_id)::text || ':' || account_id ||
+              ':' || octet_length(organization_slug)::text || ':' || organization_slug ||
+              ':' || usage_classification
+            ),
+            CASE lane WHEN 1 THEN 1 WHEN 2 THEN 17 END,
+            16
+          ),
+          'hex'
+        ) AS value
+        WHERE lane IN (1, 2)
+      )
+      SELECT mod(
+        coalesce(
+          sum(get_byte(value, ordinal)::numeric * power(256::numeric, 7 - ordinal)),
+          0
+        ),
+        ${BILLING_METER_INTEGRITY_MODULUS}
+      )
+      FROM lane_bytes
+      CROSS JOIN generate_series(0, 7) AS ordinal
+    $$ LANGUAGE sql IMMUTABLE STRICT PARALLEL SAFE
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION billing_meter_receipt_before_insert()
+    RETURNS trigger AS $$
+    DECLARE
+      window_sealed_at timestamptz;
+    BEGIN
+      PERFORM pg_advisory_xact_lock_shared(
+        hashtextextended(
+          'billing-meter-window:' || NEW.epoch_id || ':' ||
+          ((extract(epoch FROM NEW.window_start) * 1000)::bigint)::text || ':' ||
+          ((extract(epoch FROM NEW.window_end) * 1000)::bigint)::text,
+          0
+        )
+      );
+      INSERT INTO billing_meter_windows
+        (epoch_id, window_start, window_end, retention_until)
+      VALUES
+        (NEW.epoch_id, NEW.window_start, NEW.window_end,
+         NEW.window_end + interval '${BILLING_METER_AGGREGATE_RETENTION_MONTHS} months')
+      ON CONFLICT (epoch_id, window_start, window_end) DO NOTHING;
+      SELECT sealed_at INTO window_sealed_at
+      FROM billing_meter_windows
+      WHERE epoch_id = NEW.epoch_id
+        AND window_start = NEW.window_start
+        AND window_end = NEW.window_end;
+      IF window_sealed_at IS NOT NULL THEN
+        RAISE EXCEPTION 'billing meter validation window is sealed';
+      END IF;
+      RETURN NEW;
+    END
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION billing_meter_receipt_after_insert()
+    RETURNS trigger AS $$
+    BEGIN
+      UPDATE billing_meter_windows
+      SET receipt_included_calls = receipt_included_calls +
+            CASE WHEN NEW.classification = 'included' THEN 1 ELSE 0 END,
+          receipt_overage_calls = receipt_overage_calls +
+            CASE WHEN NEW.classification = 'overage' THEN 1 ELSE 0 END,
+          receipt_denied_calls = receipt_denied_calls +
+            CASE WHEN NEW.classification = 'denied' THEN 1 ELSE 0 END,
+          writer_observed_calls = writer_observed_calls +
+            CASE WHEN to_jsonb(NEW)->>'writer_session_id' IS NULL THEN 0 ELSE 1 END,
+          account_integrity_a = mod(
+            account_integrity_a + billing_meter_integrity_lane(
+              'account', NEW.billing_account_id, '', NEW.classification, 1
+            ),
+            ${BILLING_METER_INTEGRITY_MODULUS}
+          ),
+          account_integrity_b = mod(
+            account_integrity_b + billing_meter_integrity_lane(
+              'account', NEW.billing_account_id, '', NEW.classification, 2
+            ),
+            ${BILLING_METER_INTEGRITY_MODULUS}
+          ),
+          org_integrity_a = mod(
+            org_integrity_a + billing_meter_integrity_lane(
+              'organization', NEW.billing_account_id, NEW.org_slug, NEW.classification, 1
+            ),
+            ${BILLING_METER_INTEGRITY_MODULUS}
+          ),
+          org_integrity_b = mod(
+            org_integrity_b + billing_meter_integrity_lane(
+              'organization', NEW.billing_account_id, NEW.org_slug, NEW.classification, 2
+            ),
+            ${BILLING_METER_INTEGRITY_MODULUS}
+          ),
+          first_observed_at = least(coalesce(first_observed_at, NEW.recorded_at), NEW.recorded_at),
+          last_observed_at = greatest(coalesce(last_observed_at, NEW.recorded_at), NEW.recorded_at),
+          last_writer_observed_at = CASE
+            WHEN to_jsonb(NEW)->>'writer_session_id' IS NULL THEN last_writer_observed_at
+            ELSE greatest(coalesce(last_writer_observed_at, NEW.recorded_at), NEW.recorded_at)
+          END
+      WHERE epoch_id = NEW.epoch_id
+        AND window_start = NEW.window_start
+        AND window_end = NEW.window_end
+        AND sealed_at IS NULL;
+      IF NOT FOUND THEN
+        RAISE EXCEPTION 'billing meter validation window is sealed';
+      END IF;
+      RETURN NULL;
+    END
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION billing_meter_receipt_guard_mutation()
+    RETURNS trigger AS $$
+    BEGIN
+      IF TG_OP = 'UPDATE' THEN
+        RAISE EXCEPTION 'billing meter receipts are immutable';
+      END IF;
+      IF current_setting('noodle.billing_meter_receipt_maintenance', true) = 'on' AND EXISTS (
+        SELECT 1 FROM billing_meter_windows
+        WHERE epoch_id = OLD.epoch_id
+          AND window_start = OLD.window_start
+          AND window_end = OLD.window_end
+          AND sealed_at IS NOT NULL
+      ) THEN
+        RETURN OLD;
+      END IF;
+      RAISE EXCEPTION 'billing meter receipt deletion requires sealed maintenance';
+    END
+    $$ LANGUAGE plpgsql
+  `);
+    await pool.query(`
+    DO $$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgrelid = 'billing_meter_usage_events'::regclass
+          AND tgname = 'billing_meter_receipt_before_insert_trigger'
+      ) THEN
+        CREATE TRIGGER billing_meter_receipt_before_insert_trigger
+        BEFORE INSERT ON billing_meter_usage_events
+        FOR EACH ROW EXECUTE FUNCTION billing_meter_receipt_before_insert();
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgrelid = 'billing_meter_usage_events'::regclass
+          AND tgname = 'billing_meter_receipt_after_insert_trigger'
+      ) THEN
+        CREATE TRIGGER billing_meter_receipt_after_insert_trigger
+        AFTER INSERT ON billing_meter_usage_events
+        FOR EACH ROW EXECUTE FUNCTION billing_meter_receipt_after_insert();
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgrelid = 'billing_meter_usage_events'::regclass
+          AND tgname = 'billing_meter_receipt_guard_mutation_trigger'
+      ) THEN
+        CREATE TRIGGER billing_meter_receipt_guard_mutation_trigger
+        BEFORE UPDATE OR DELETE ON billing_meter_usage_events
+        FOR EACH ROW EXECUTE FUNCTION billing_meter_receipt_guard_mutation();
+      END IF;
+    END
+    $$
+  `);
+}
+//# sourceMappingURL=postgres-meter-window-schema.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-window-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-window-schema.js","sourceRoot":"","sources":["../../src/billing/postgres-meter-window-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wCAAwC,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAElF,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,IAAU;IACrE,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;oEAWiD,+BAA+B;;oEAE/B,+BAA+B;;4DAEvC,+BAA+B;;4DAE/B,+BAA+B;;;;;;;;;;;;;;mCAcxD,wCAAwC;;;GAGxE,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;AACL,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,IAAU;IACvE,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;GAgBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA4BT,+BAA+B;;;;;GAKtC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;sCAkBmB,wCAAwC;;;;;;;;;;;;;GAa3E,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;cAiBL,+BAA+B;;;;;;cAM/B,+BAA+B;;;;;;cAM/B,+BAA+B;;;;;;cAM/B,+BAA+B;;;;;;;;;;;;;;;;;;GAkB1C,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;GAmBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgChB,CAAC,CAAC;AACL,CAAC"}