@noodleseed/one 0.48.0 → 0.49.1

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-admission-ledger.js

@@ -0,0 +1,158 @@
+import { randomUUID } from 'node:crypto';
+import { BillingAuthoritativeAdmissionUnavailableError, BillingAuthoritativeIdempotencyConflictError, } from './authoritative-admission.js';
+import { BILLING_METER_AGGREGATE_RETENTION_MONTHS, BILLING_METER_EXACT_KEY_TOMBSTONE_RETENTION_DAYS, BILLING_METER_RECEIPT_RETENTION_DAYS, } from './meter-readiness.js';
+export async function lockAuthoritativeDedupeIdentity(client, epochId, input) {
+    const value = input.identity.highConfidenceKeyHash;
+    if (value === undefined)
+        return;
+    await client.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [
+        `billing-authoritative-dedupe:v1:${epochId}:exact:${value}`,
+    ]);
+}
+export async function findAuthoritativeDuplicate(client, input) {
+    const exactKey = input.input.identity.highConfidenceKeyHash;
+    if (exactKey !== undefined) {
+        const { rows } = await client.query(`SELECT event_id, classification, semantic_fingerprint, window_end
+       FROM billing_meter_exact_key_tombstones
+       WHERE epoch_id = $1 AND key_hash = decode($2, 'hex')`, [input.epochId, exactKey]);
+        const prior = rows[0];
+        if (prior === undefined)
+            return undefined;
+        if (!prior.semantic_fingerprint.equals(Buffer.from(input.input.identity.semanticFingerprint, 'hex'))) {
+            throw new BillingAuthoritativeIdempotencyConflictError();
+        }
+        return duplicateResult(prior);
+    }
+    // Sessionless/public invocations cannot be partitioned reliably across people behind the same client.
+    // Their bounded fingerprint remains useful receipt metadata, but it must never suppress execution.
+    return undefined;
+}
+function duplicateResult(row) {
+    if (row.classification !== 'included' && row.classification !== 'overage')
+        throw unavailable();
+    return { classification: row.classification, resetAt: toIso(row.window_end) };
+}
+export async function readAuthoritativeIncludedCalls(client, input) {
+    const { rows } = await client.query(`SELECT included_calls::text, window_end
+     FROM billing_meter_account_windows
+     WHERE epoch_id = $1 AND billing_account_id = $2 AND window_start = $3
+     FOR UPDATE`, [input.epochId, input.billingAccountId, input.windowStart]);
+    const row = rows[0];
+    if (row === undefined)
+        return 0;
+    if (toIso(row.window_end) !== input.windowEnd)
+        throw unavailable();
+    return persistedCount(row.included_calls);
+}
+export async function recordAuthoritativeAdmission(client, input) {
+    const eventId = `bmae_${randomUUID()}`;
+    await client.query(`INSERT INTO billing_meter_usage_events
+       (event_id, epoch_id, mode, high_confidence_key_hash, fallback_fingerprint,
+        semantic_fingerprint, classification, billing_account_id, org_slug, app_slug,
+        environment, deployment_id, link_version, snapshot_id, snapshot_version, admitted_at,
+        window_start, window_end, recorded_at, retention_until)
+     VALUES
+       ($1, $2, 'authoritative', decode($3, 'hex'), decode($4, 'hex'), decode($5, 'hex'),
+        $6, $7, $8, $9, $10, $11, $12, $13, $14, $15, $16, $17, $18,
+        $17::timestamptz + interval '${BILLING_METER_RECEIPT_RETENTION_DAYS} days')`, [
+        eventId,
+        input.epochId,
+        input.input.identity.highConfidenceKeyHash ?? null,
+        input.input.identity.fallbackFingerprint,
+        input.input.identity.semanticFingerprint,
+        input.classification,
+        input.attribution.billing_account_id,
+        input.input.org,
+        input.input.app,
+        input.input.environment,
+        input.input.deploymentId,
+        input.attribution.link_version,
+        input.attribution.snapshot_id,
+        input.attribution.snapshot_version,
+        input.recordedAt,
+        input.windowStart,
+        input.windowEnd,
+        input.recordedAt,
+    ]);
+    if (input.input.identity.highConfidenceKeyHash !== undefined) {
+        await client.query(`INSERT INTO billing_meter_exact_key_tombstones
+         (epoch_id, key_hash, semantic_fingerprint, event_id, classification, window_end,
+          created_at, retention_until)
+       VALUES
+         ($1, decode($2, 'hex'), decode($3, 'hex'), $4, $5, $6, $7,
+          $6::timestamptz + interval '${BILLING_METER_EXACT_KEY_TOMBSTONE_RETENTION_DAYS} days')`, [
+            input.epochId,
+            input.input.identity.highConfidenceKeyHash,
+            input.input.identity.semanticFingerprint,
+            eventId,
+            input.classification,
+            input.windowEnd,
+            input.recordedAt,
+        ]);
+    }
+    const increments = input.classification === 'included' ? [1, 0] : [0, 1];
+    const account = await upsertCounter(client, {
+        table: 'billing_meter_account_windows',
+        conflict: 'epoch_id, billing_account_id, window_start',
+        columns: ['epoch_id', 'billing_account_id', 'window_start'],
+        values: [input.epochId, input.attribution.billing_account_id, input.windowStart],
+        windowEnd: input.windowEnd,
+        increments,
+        admittedAt: input.recordedAt,
+    });
+    const organization = await upsertCounter(client, {
+        table: 'billing_meter_org_windows',
+        conflict: 'epoch_id, billing_account_id, org_slug, window_start',
+        columns: ['epoch_id', 'billing_account_id', 'org_slug', 'window_start'],
+        values: [
+            input.epochId,
+            input.attribution.billing_account_id,
+            input.input.org,
+            input.windowStart,
+        ],
+        windowEnd: input.windowEnd,
+        increments,
+        admittedAt: input.recordedAt,
+    });
+    if (!account || !organization)
+        throw unavailable();
+}
+async function upsertCounter(client, input) {
+    const prefix = input.values.map((_, index) => `$${index + 1}`).join(', ');
+    const offset = input.values.length;
+    const result = await client.query(`INSERT INTO ${input.table}
+       (${input.columns.join(', ')}, window_end, included_calls, overage_calls, denied_calls,
+        first_admitted_at, last_admitted_at, updated_at, retention_until)
+     VALUES
+       (${prefix}, $${offset + 1}, $${offset + 2}, $${offset + 3}, 0,
+        $${offset + 4}, $${offset + 4}, $${offset + 4},
+        $${offset + 1}::timestamptz + interval '${BILLING_METER_AGGREGATE_RETENTION_MONTHS} months')
+     ON CONFLICT (${input.conflict}) DO UPDATE SET
+       included_calls = ${input.table}.included_calls + EXCLUDED.included_calls,
+       overage_calls = ${input.table}.overage_calls + EXCLUDED.overage_calls,
+       first_admitted_at = LEAST(
+         ${input.table}.first_admitted_at,
+         EXCLUDED.first_admitted_at
+       ),
+       last_admitted_at = GREATEST(${input.table}.last_admitted_at, EXCLUDED.last_admitted_at),
+       updated_at = GREATEST(${input.table}.updated_at, EXCLUDED.updated_at)
+     WHERE ${input.table}.window_end = EXCLUDED.window_end
+     RETURNING 1`, [...input.values, input.windowEnd, input.increments[0], input.increments[1], input.admittedAt]);
+    return result.rowCount === 1;
+}
+function persistedCount(value) {
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed < 0)
+        throw unavailable();
+    return parsed;
+}
+function toIso(value) {
+    const date = value instanceof Date ? value : new Date(value);
+    if (!Number.isFinite(date.getTime()))
+        throw unavailable();
+    return date.toISOString();
+}
+function unavailable() {
+    return new BillingAuthoritativeAdmissionUnavailableError();
+}
+//# sourceMappingURL=postgres-meter-admission-ledger.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-admission-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-admission-ledger.js","sourceRoot":"","sources":["../../src/billing/postgres-meter-admission-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAEL,6CAA6C,EAC7C,4CAA4C,GAC7C,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wCAAwC,EACxC,gDAAgD,EAChD,oCAAoC,GACrC,MAAM,sBAAsB,CAAC;AAgB9B,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAkB,EAClB,OAAe,EACf,KAAyC;IAEzC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,MAAM,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;QAC1E,mCAAmC,OAAO,UAAU,KAAK,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAkB,EAClB,KAGC;IAID,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAC5D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;4DAEsD,EACtD,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAC1B,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IACE,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAC7D,EACD,CAAC;YACD,MAAM,IAAI,4CAA4C,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,sGAAsG;IACtG,mGAAmG;IACnG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,GAAoB;IAI3C,IAAI,GAAG,CAAC,cAAc,KAAK,UAAU,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS;QAAE,MAAM,WAAW,EAAE,CAAC;IAC/F,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,MAAkB,EAClB,KAKC;IAED,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAIjC;;;gBAGY,EACZ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,WAAW,CAAC,CAC3D,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,SAAS;QAAE,MAAM,WAAW,EAAE,CAAC;IACnE,OAAO,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAkB,EAClB,KAQC;IAED,MAAM,OAAO,GAAG,QAAQ,UAAU,EAAE,EAAE,CAAC;IACvC,MAAM,MAAM,CAAC,KAAK,CAChB;;;;;;;;uCAQmC,oCAAoC,SAAS,EAChF;QACE,OAAO;QACP,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,IAAI,IAAI;QAClD,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB;QACxC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB;QACxC,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,WAAW,CAAC,kBAAkB;QACpC,KAAK,CAAC,KAAK,CAAC,GAAG;QACf,KAAK,CAAC,KAAK,CAAC,GAAG;QACf,KAAK,CAAC,KAAK,CAAC,WAAW;QACvB,KAAK,CAAC,KAAK,CAAC,YAAY;QACxB,KAAK,CAAC,WAAW,CAAC,YAAY;QAC9B,KAAK,CAAC,WAAW,CAAC,WAAW;QAC7B,KAAK,CAAC,WAAW,CAAC,gBAAgB;QAClC,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,UAAU;KACjB,CACF,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,MAAM,CAAC,KAAK,CAChB;;;;;wCAKkC,gDAAgD,SAAS,EAC3F;YACE,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB;YAC1C,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,mBAAmB;YACxC,OAAO;YACP,KAAK,CAAC,cAAc;YACpB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,UAAU;SACjB,CACF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,CAAC,CAAW,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,CAAC,CAAW,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE;QAC1C,KAAK,EAAE,+BAA+B;QACtC,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,CAAC,UAAU,EAAE,oBAAoB,EAAE,cAAc,CAAC;QAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAAC;QAChF,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU;QACV,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE;QAC/C,KAAK,EAAE,2BAA2B;QAClC,QAAQ,EAAE,sDAAsD;QAChE,OAAO,EAAE,CAAC,UAAU,EAAE,oBAAoB,EAAE,UAAU,EAAE,cAAc,CAAC;QACvE,MAAM,EAAE;YACN,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,WAAW,CAAC,kBAAkB;YACpC,KAAK,CAAC,KAAK,CAAC,GAAG;YACf,KAAK,CAAC,WAAW;SAClB;QACD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU;QACV,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY;QAAE,MAAM,WAAW,EAAE,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAkB,EAClB,KAQC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,eAAe,KAAK,CAAC,KAAK;UACpB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;;;UAGxB,MAAM,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC;WACrD,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC;WAC1C,MAAM,GAAG,CAAC,6BAA6B,wCAAwC;oBACtE,KAAK,CAAC,QAAQ;0BACR,KAAK,CAAC,KAAK;yBACZ,KAAK,CAAC,KAAK;;WAEzB,KAAK,CAAC,KAAK;;;qCAGe,KAAK,CAAC,KAAK;+BACjB,KAAK,CAAC,KAAK;aAC7B,KAAK,CAAC,KAAK;iBACP,EACb,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAC/F,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,WAAW,EAAE,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,KAAoB;IACjC,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,WAAW,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,6CAA6C,EAAE,CAAC;AAC7D,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-admission.d.ts

@@ -0,0 +1,18 @@
+import type { Pool } from 'pg';
+import { type BillingAuthoritativeAdmissionInput, type BillingAuthoritativeAdmissionResult, type BillingAuthoritativeAdmissionStore } from './authoritative-admission.js';
+export interface PostgresBillingAuthoritativeAdmissionStoreOptions {
+    /** One-way key-generation marker; never the raw HMAC key. */
+    readonly keyGeneration: string;
+    readonly admissionContractVersion?: number;
+    /** Bounded test/operations override. Default: 1000ms. */
+    readonly lockTimeoutMs?: number;
+    /** Bounded test/operations override. Default: 2000ms. */
+    readonly statementTimeoutMs?: number;
+}
+/** The one transactional authority for pooled monthly call admission. */
+export declare class PostgresBillingAuthoritativeAdmissionStore implements BillingAuthoritativeAdmissionStore {
+    #private;
+    constructor(pool: Pool, options: PostgresBillingAuthoritativeAdmissionStoreOptions);
+    admit(rawInput: BillingAuthoritativeAdmissionInput): Promise<BillingAuthoritativeAdmissionResult>;
+}
+//# sourceMappingURL=postgres-meter-admission.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-admission.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-meter-admission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAE3C,OAAO,EACL,KAAK,kCAAkC,EACvC,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,EAGxC,MAAM,8BAA8B,CAAC;AAsBtC,MAAM,WAAW,iDAAiD;IAChE,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,yDAAyD;IACzD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,yDAAyD;IACzD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAmCD,yEAAyE;AACzE,qBAAa,0CACX,YAAW,kCAAkC;;gBAQjC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,iDAAiD;IAmB5E,KAAK,CACT,QAAQ,EAAE,kCAAkC,GAC3C,OAAO,CAAC,mCAAmC,CAAC;CAqIhD"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-admission.js

@@ -0,0 +1,326 @@
+import { DEPLOYMENT_ID_PATTERN, validateSlug } from '../store/validate.js';
+import { BillingAuthoritativeAdmissionUnavailableError, BillingAuthoritativeIdempotencyConflictError, } from './authoritative-admission.js';
+import { BillingCommercialEntitlementError, parseBillingCommercialFreeV1Entitlements, } from './commercial-entitlements.js';
+import { BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION } from './enforcement-activation.js';
+import { billingContentChecksum } from './model.js';
+import { BillingAuthoritativeAuthorityInconsistentError, readBillingAuthoritativeAuthorityTx, } from './postgres-authoritative-authority.js';
+import { findAuthoritativeDuplicate, lockAuthoritativeDedupeIdentity, readAuthoritativeIncludedCalls, recordAuthoritativeAdmission, } from './postgres-meter-admission-ledger.js';
+import { readBillingMeterTransactionTime } from './postgres-meter-clock.js';
+import { BILLING_METER_VALIDATION_EPOCH_LIFECYCLE_LOCK_KEY } from './postgres-meter-epochs.js';
+import { resolveUtcMonthlyUsageWindow } from './usage-window.js';
+const DEFAULT_LOCK_TIMEOUT_MS = 1_000;
+const DEFAULT_STATEMENT_TIMEOUT_MS = 2_000;
+/** The one transactional authority for pooled monthly call admission. */
+export class PostgresBillingAuthoritativeAdmissionStore {
+    #pool;
+    #keyGeneration;
+    #admissionContractVersion;
+    #lockTimeoutMs;
+    #statementTimeoutMs;
+    constructor(pool, options) {
+        this.#pool = pool;
+        this.#keyGeneration = validateFingerprint('billing meter key generation', options.keyGeneration);
+        this.#admissionContractVersion = validateAdmissionContractVersion(options.admissionContractVersion ?? BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION);
+        this.#lockTimeoutMs = boundedTimeout('billing authoritative admission lock timeout', options.lockTimeoutMs ?? DEFAULT_LOCK_TIMEOUT_MS);
+        this.#statementTimeoutMs = boundedTimeout('billing authoritative admission statement timeout', options.statementTimeoutMs ?? DEFAULT_STATEMENT_TIMEOUT_MS);
+    }
+    async admit(rawInput) {
+        const input = normalizeInput(rawInput);
+        const client = await this.#pool.connect();
+        try {
+            await client.query('BEGIN ISOLATION LEVEL READ COMMITTED');
+            await client.query(`SELECT set_config('lock_timeout', $1, true),
+                set_config('statement_timeout', $2, true)`, [`${this.#lockTimeoutMs}ms`, `${this.#statementTimeoutMs}ms`]);
+            await client.query('SELECT pg_advisory_xact_lock_shared(hashtextextended($1, 0))', [
+                BILLING_METER_VALIDATION_EPOCH_LIFECYCLE_LOCK_KEY,
+            ]);
+            let authority;
+            try {
+                authority = await readBillingAuthoritativeAuthorityTx(client, {
+                    keyGeneration: this.#keyGeneration,
+                    admissionContractVersion: this.#admissionContractVersion,
+                });
+            }
+            catch (error) {
+                if (error instanceof BillingAuthoritativeAuthorityInconsistentError &&
+                    (await proveLegacyExemption(client, input.org))) {
+                    await client.query('COMMIT');
+                    return { outcome: 'bypass', reason: 'legacy_internal_exempt' };
+                }
+                throw error;
+            }
+            if (authority.state === 'unconfigured') {
+                await client.query('COMMIT');
+                return { outcome: 'bypass', reason: 'cohort_unsealed' };
+            }
+            if (authority.state === 'inactive') {
+                await client.query('COMMIT');
+                return { outcome: 'bypass', reason: authority.reason };
+            }
+            const recordedAt = await readBillingMeterTransactionTime(client);
+            const initialAttribution = await readAttribution(client, input.org, false);
+            if (initialAttribution === undefined)
+                throw unavailable();
+            validateAttribution(initialAttribution);
+            const initialWindow = resolveUtcMonthlyUsageWindow(toIso(initialAttribution.monthly_usage_anchor), recordedAt);
+            if (initialAttribution.profile_mode === 'legacy_internal_exempt') {
+                const lockedExemption = await readAttribution(client, input.org, true);
+                if (lockedExemption === undefined ||
+                    !validAttribution(lockedExemption) ||
+                    !sameAttribution(initialAttribution, lockedExemption)) {
+                    throw unavailable();
+                }
+                await client.query('COMMIT');
+                return { outcome: 'bypass', reason: 'legacy_internal_exempt' };
+            }
+            await lockAuthoritativeDedupeIdentity(client, authority.epochId, input);
+            await client.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [
+                accountWindowLockKey(authority.epochId, initialAttribution.billing_account_id, initialWindow.start),
+            ]);
+            const attribution = await readAttribution(client, input.org, true);
+            if (attribution === undefined ||
+                !validAttribution(attribution) ||
+                !sameAttribution(initialAttribution, attribution)) {
+                throw unavailable();
+            }
+            if (attribution.profile_mode === 'legacy_internal_exempt') {
+                await client.query('COMMIT');
+                return { outcome: 'bypass', reason: 'legacy_internal_exempt' };
+            }
+            if (attribution.profile_mode !== 'enforced')
+                throw unavailable();
+            const entitlements = parseBillingCommercialFreeV1Entitlements(attribution.entitlements);
+            const duplicate = await findAuthoritativeDuplicate(client, {
+                epochId: authority.epochId,
+                input,
+            });
+            if (duplicate !== undefined) {
+                await client.query('COMMIT');
+                return {
+                    outcome: 'admitted',
+                    receiptOutcome: 'duplicate',
+                    classification: duplicate.classification,
+                    resetAt: duplicate.resetAt,
+                };
+            }
+            const includedCalls = await readAuthoritativeIncludedCalls(client, {
+                epochId: authority.epochId,
+                billingAccountId: attribution.billing_account_id,
+                windowStart: initialWindow.start,
+                windowEnd: initialWindow.end,
+            });
+            if (includedCalls >= entitlements.includedCalls && !entitlements.overageAllowed) {
+                await client.query('COMMIT');
+                return {
+                    outcome: 'denied',
+                    reason: 'billing_usage_limit_exceeded',
+                    resetAt: initialWindow.end,
+                };
+            }
+            const classification = includedCalls < entitlements.includedCalls ? 'included' : 'overage';
+            await recordAuthoritativeAdmission(client, {
+                epochId: authority.epochId,
+                input,
+                attribution,
+                classification,
+                recordedAt,
+                windowStart: initialWindow.start,
+                windowEnd: initialWindow.end,
+            });
+            await client.query('COMMIT');
+            return {
+                outcome: 'admitted',
+                receiptOutcome: 'recorded',
+                classification,
+                resetAt: initialWindow.end,
+            };
+        }
+        catch (error) {
+            await rollbackQuietly(client);
+            throw translateAdmissionError(error);
+        }
+        finally {
+            client.release();
+        }
+    }
+}
+async function proveLegacyExemption(client, org) {
+    const initial = await readAttribution(client, org, false);
+    if (initial === undefined)
+        return false;
+    validateAttribution(initial);
+    if (initial.profile_mode !== 'legacy_internal_exempt')
+        return false;
+    const locked = await readAttribution(client, org, true);
+    if (locked === undefined || !validAttribution(locked) || !sameAttribution(initial, locked)) {
+        throw unavailable();
+    }
+    return true;
+}
+async function readAttribution(client, org, lock) {
+    const { rows } = await client.query(`SELECT link.billing_account_id, link.version AS link_version,
+            account.state AS account_state, account.created_at AS account_created_at,
+            snapshot.id AS snapshot_id, snapshot.version AS snapshot_version,
+            snapshot.plan_version_id AS snapshot_plan_version_id,
+            snapshot.verification_status AS snapshot_verification_status,
+            snapshot.effective_from AS snapshot_effective_from,
+            snapshot.monthly_usage_anchor, snapshot.entitlements,
+            snapshot.content_checksum AS snapshot_content_checksum,
+            profile.version AS profile_version, profile.mode AS profile_mode,
+            profile.source AS profile_source,
+            profile.cohort_seal_id AS profile_cohort_seal_id,
+            profile.effective_from AS profile_effective_from,
+            seal.id AS cohort_seal_id, seal.sealed_at AS cohort_sealed_at
+     FROM org_billing_links AS link
+     JOIN billing_accounts AS account ON account.id = link.billing_account_id
+     JOIN billing_account_active_snapshots AS active_snapshot
+       ON active_snapshot.billing_account_id = link.billing_account_id
+     JOIN billing_entitlement_snapshots AS snapshot
+       ON snapshot.billing_account_id = active_snapshot.billing_account_id
+      AND snapshot.id = active_snapshot.snapshot_id
+     JOIN billing_account_active_enforcement_profiles AS active_profile
+       ON active_profile.billing_account_id = link.billing_account_id
+     JOIN billing_account_enforcement_profiles AS profile
+       ON profile.billing_account_id = active_profile.billing_account_id
+      AND profile.version = active_profile.profile_version
+     JOIN billing_enforcement_cohort_seals AS seal ON seal.singleton = true
+     WHERE link.org_slug = $1 AND link.active
+     ${lock ? 'FOR SHARE OF link, account, active_snapshot, snapshot, active_profile, profile, seal' : ''}`, [org]);
+    return rows[0];
+}
+function sameAttribution(initial, locked) {
+    return (initial.billing_account_id === locked.billing_account_id &&
+        initial.link_version === locked.link_version &&
+        initial.account_state === locked.account_state &&
+        toIso(initial.account_created_at) === toIso(locked.account_created_at) &&
+        initial.snapshot_id === locked.snapshot_id &&
+        initial.snapshot_version === locked.snapshot_version &&
+        initial.snapshot_plan_version_id === locked.snapshot_plan_version_id &&
+        initial.snapshot_verification_status === locked.snapshot_verification_status &&
+        toIso(initial.snapshot_effective_from) === toIso(locked.snapshot_effective_from) &&
+        initial.snapshot_content_checksum === locked.snapshot_content_checksum &&
+        toIso(initial.monthly_usage_anchor) === toIso(locked.monthly_usage_anchor) &&
+        initial.profile_version === locked.profile_version &&
+        initial.profile_mode === locked.profile_mode &&
+        initial.profile_source === locked.profile_source &&
+        initial.profile_cohort_seal_id === locked.profile_cohort_seal_id &&
+        toIso(initial.profile_effective_from) === toIso(locked.profile_effective_from) &&
+        initial.cohort_seal_id === locked.cohort_seal_id &&
+        toIso(initial.cohort_sealed_at) === toIso(locked.cohort_sealed_at));
+}
+function validateAttribution(row) {
+    const profileEffectiveFrom = toIso(row.profile_effective_from);
+    const cohortSealedAt = toIso(row.cohort_sealed_at);
+    const validLegacyProfile = row.profile_mode === 'legacy_internal_exempt' &&
+        row.profile_source === 'legacy_cohort_seal' &&
+        profileEffectiveFrom === cohortSealedAt;
+    const validEnforcedProfile = row.profile_mode === 'enforced' &&
+        row.profile_source === 'post_seal_account' &&
+        profileEffectiveFrom >= cohortSealedAt;
+    if (row.account_state !== 'active' ||
+        row.profile_cohort_seal_id !== row.cohort_seal_id ||
+        (!validLegacyProfile && !validEnforcedProfile) ||
+        row.snapshot_verification_status !== 'verified' ||
+        !Number.isSafeInteger(row.snapshot_version) ||
+        row.snapshot_version < 1) {
+        throw unavailable();
+    }
+    const effectiveFrom = toIso(row.snapshot_effective_from);
+    const monthlyUsageAnchor = toIso(row.monthly_usage_anchor);
+    const expectedChecksum = billingContentChecksum({
+        billingAccountId: row.billing_account_id,
+        version: row.snapshot_version,
+        planVersionId: row.snapshot_plan_version_id,
+        effectiveFrom,
+        monthlyUsageAnchor,
+        entitlements: row.entitlements,
+    });
+    if (row.snapshot_content_checksum !== expectedChecksum)
+        throw unavailable();
+}
+function validAttribution(row) {
+    try {
+        validateAttribution(row);
+        return true;
+    }
+    catch (error) {
+        if (error instanceof BillingAuthoritativeAdmissionUnavailableError)
+            return false;
+        throw error;
+    }
+}
+function normalizeInput(input) {
+    const deploymentId = input.deploymentId.trim();
+    if (deploymentId.length === 0 ||
+        deploymentId.length > 256 ||
+        !DEPLOYMENT_ID_PATTERN.test(deploymentId)) {
+        throw new Error('deployment id must be a bounded lowercase identifier');
+    }
+    return {
+        org: validateSlug('org', input.org),
+        app: validateSlug('app', input.app),
+        environment: validateSlug('env', input.environment),
+        deploymentId,
+        identity: {
+            ...(input.identity.highConfidenceKeyHash === undefined
+                ? {}
+                : {
+                    highConfidenceKeyHash: validateFingerprint('high-confidence execution key hash', input.identity.highConfidenceKeyHash),
+                }),
+            fallbackFingerprint: validateFingerprint('fallback fingerprint', input.identity.fallbackFingerprint),
+            semanticFingerprint: validateFingerprint('semantic fingerprint', input.identity.semanticFingerprint),
+        },
+    };
+}
+function accountWindowLockKey(epochId, accountId, windowStart) {
+    return `billing-authoritative-account-window:v1:${epochId}:${accountId}:${windowStart}`;
+}
+function validateFingerprint(label, value) {
+    if (!/^[0-9a-f]{64}$/.test(value))
+        throw new Error(`${label} must be a SHA-256 digest`);
+    return value;
+}
+function validateAdmissionContractVersion(value) {
+    if (value !== BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION) {
+        throw new Error('billing authoritative admission contract version is unsupported');
+    }
+    return value;
+}
+function boundedTimeout(label, value) {
+    if (!Number.isSafeInteger(value) || value < 1 || value > 5_000) {
+        throw new Error(`${label} must be between 1 and 5000 milliseconds`);
+    }
+    return value;
+}
+function translateAdmissionError(error) {
+    if (error instanceof BillingAuthoritativeAuthorityInconsistentError)
+        return unavailable();
+    if (error instanceof BillingCommercialEntitlementError)
+        return unavailable();
+    if (error instanceof BillingAuthoritativeAdmissionUnavailableError ||
+        error instanceof BillingAuthoritativeIdempotencyConflictError) {
+        return error;
+    }
+    const code = typeof error === 'object' && error !== null && 'code' in error
+        ? String(error.code)
+        : undefined;
+    return code === '55P03' || code === '57014' ? unavailable() : error;
+}
+function toIso(value) {
+    const date = value instanceof Date ? value : new Date(value);
+    if (!Number.isFinite(date.getTime()))
+        throw unavailable();
+    return date.toISOString();
+}
+function unavailable() {
+    return new BillingAuthoritativeAdmissionUnavailableError();
+}
+async function rollbackQuietly(client) {
+    try {
+        await client.query('ROLLBACK');
+    }
+    catch {
+        // Preserve the authoritative admission error.
+    }
+}
+//# sourceMappingURL=postgres-meter-admission.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-admission.js","sourceRoot":"","sources":["../../src/billing/postgres-meter-admission.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAIL,6CAA6C,EAC7C,4CAA4C,GAC7C,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iCAAiC,EACjC,wCAAwC,GACzC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,gDAAgD,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAEL,8CAA8C,EAC9C,mCAAmC,GACpC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,iDAAiD,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAYjE,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAgC3C,yEAAyE;AACzE,MAAM,OAAO,0CAA0C;IAG5C,KAAK,CAAO;IACZ,cAAc,CAAS;IACvB,yBAAyB,CAAS;IAClC,cAAc,CAAS;IACvB,mBAAmB,CAAS;IAErC,YAAY,IAAU,EAAE,OAA0D;QAChF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,cAAc,GAAG,mBAAmB,CACvC,8BAA8B,EAC9B,OAAO,CAAC,aAAa,CACtB,CAAC;QACF,IAAI,CAAC,yBAAyB,GAAG,gCAAgC,CAC/D,OAAO,CAAC,wBAAwB,IAAI,gDAAgD,CACrF,CAAC;QACF,IAAI,CAAC,cAAc,GAAG,cAAc,CAClC,8CAA8C,EAC9C,OAAO,CAAC,aAAa,IAAI,uBAAuB,CACjD,CAAC;QACF,IAAI,CAAC,mBAAmB,GAAG,cAAc,CACvC,mDAAmD,EACnD,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,QAA4C;QAE5C,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC3D,MAAM,MAAM,CAAC,KAAK,CAChB;0DACkD,EAClD,CAAC,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAC9D,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBACjF,iDAAiD;aAClD,CAAC,CAAC;YACH,IAAI,SAAgD,CAAC;YACrD,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,mCAAmC,CAAC,MAAM,EAAE;oBAC5D,aAAa,EAAE,IAAI,CAAC,cAAc;oBAClC,wBAAwB,EAAE,IAAI,CAAC,yBAAyB;iBACzD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,KAAK,YAAY,8CAA8C;oBAC/D,CAAC,MAAM,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAC/C,CAAC;oBACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAC7B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;gBACjE,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,SAAS,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBACvC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;YAC1D,CAAC;YACD,IAAI,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACnC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;YACzD,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,kBAAkB,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3E,IAAI,kBAAkB,KAAK,SAAS;gBAAE,MAAM,WAAW,EAAE,CAAC;YAC1D,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;YACxC,MAAM,aAAa,GAAG,4BAA4B,CAChD,KAAK,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,EAC9C,UAAU,CACX,CAAC;YACF,IAAI,kBAAkB,CAAC,YAAY,KAAK,wBAAwB,EAAE,CAAC;gBACjE,MAAM,eAAe,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACvE,IACE,eAAe,KAAK,SAAS;oBAC7B,CAAC,gBAAgB,CAAC,eAAe,CAAC;oBAClC,CAAC,eAAe,CAAC,kBAAkB,EAAE,eAAe,CAAC,EACrD,CAAC;oBACD,MAAM,WAAW,EAAE,CAAC;gBACtB,CAAC;gBACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;YACjE,CAAC;YACD,MAAM,+BAA+B,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxE,MAAM,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;gBAC1E,oBAAoB,CAClB,SAAS,CAAC,OAAO,EACjB,kBAAkB,CAAC,kBAAkB,EACrC,aAAa,CAAC,KAAK,CACpB;aACF,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACnE,IACE,WAAW,KAAK,SAAS;gBACzB,CAAC,gBAAgB,CAAC,WAAW,CAAC;gBAC9B,CAAC,eAAe,CAAC,kBAAkB,EAAE,WAAW,CAAC,EACjD,CAAC;gBACD,MAAM,WAAW,EAAE,CAAC;YACtB,CAAC;YACD,IAAI,WAAW,CAAC,YAAY,KAAK,wBAAwB,EAAE,CAAC;gBAC1D,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;YACjE,CAAC;YACD,IAAI,WAAW,CAAC,YAAY,KAAK,UAAU;gBAAE,MAAM,WAAW,EAAE,CAAC;YACjE,MAAM,YAAY,GAAG,wCAAwC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAExF,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC,MAAM,EAAE;gBACzD,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,KAAK;aACN,CAAC,CAAC;YACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,cAAc,EAAE,WAAW;oBAC3B,cAAc,EAAE,SAAS,CAAC,cAAc;oBACxC,OAAO,EAAE,SAAS,CAAC,OAAO;iBAC3B,CAAC;YACJ,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,8BAA8B,CAAC,MAAM,EAAE;gBACjE,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,gBAAgB,EAAE,WAAW,CAAC,kBAAkB;gBAChD,WAAW,EAAE,aAAa,CAAC,KAAK;gBAChC,SAAS,EAAE,aAAa,CAAC,GAAG;aAC7B,CAAC,CAAC;YACH,IAAI,aAAa,IAAI,YAAY,CAAC,aAAa,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;gBAChF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,8BAA8B;oBACtC,OAAO,EAAE,aAAa,CAAC,GAAG;iBAC3B,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,GAAG,aAAa,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3F,MAAM,4BAA4B,CAAC,MAAM,EAAE;gBACzC,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,KAAK;gBACL,WAAW;gBACX,cAAc;gBACd,UAAU;gBACV,WAAW,EAAE,aAAa,CAAC,KAAK;gBAChC,SAAS,EAAE,aAAa,CAAC,GAAG;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,cAAc,EAAE,UAAU;gBAC1B,cAAc;gBACd,OAAO,EAAE,aAAa,CAAC,GAAG;aAC3B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;YAC9B,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,oBAAoB,CAAC,MAAkB,EAAE,GAAW;IACjE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,YAAY,KAAK,wBAAwB;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC3F,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAkB,EAClB,GAAW,EACX,IAAa;IAEb,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG,IAAI,CAAC,CAAC,CAAC,sFAAsF,CAAC,CAAC,CAAC,EAAE,EAAE,EACvG,CAAC,GAAG,CAAC,CACN,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,OAAuB,EAAE,MAAsB;IACtE,OAAO,CACL,OAAO,CAAC,kBAAkB,KAAK,MAAM,CAAC,kBAAkB;QACxD,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;QAC5C,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;QAC9C,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACtE,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QAC1C,OAAO,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;QACpD,OAAO,CAAC,wBAAwB,KAAK,MAAM,CAAC,wBAAwB;QACpE,OAAO,CAAC,4BAA4B,KAAK,MAAM,CAAC,4BAA4B;QAC5E,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC;QAChF,OAAO,CAAC,yBAAyB,KAAK,MAAM,CAAC,yBAAyB;QACtE,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC1E,OAAO,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe;QAClD,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;QAC5C,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAChD,OAAO,CAAC,sBAAsB,KAAK,MAAM,CAAC,sBAAsB;QAChE,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAC9E,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAChD,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAmB;IAC9C,MAAM,oBAAoB,GAAG,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnD,MAAM,kBAAkB,GACtB,GAAG,CAAC,YAAY,KAAK,wBAAwB;QAC7C,GAAG,CAAC,cAAc,KAAK,oBAAoB;QAC3C,oBAAoB,KAAK,cAAc,CAAC;IAC1C,MAAM,oBAAoB,GACxB,GAAG,CAAC,YAAY,KAAK,UAAU;QAC/B,GAAG,CAAC,cAAc,KAAK,mBAAmB;QAC1C,oBAAoB,IAAI,cAAc,CAAC;IACzC,IACE,GAAG,CAAC,aAAa,KAAK,QAAQ;QAC9B,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC,cAAc;QACjD,CAAC,CAAC,kBAAkB,IAAI,CAAC,oBAAoB,CAAC;QAC9C,GAAG,CAAC,4BAA4B,KAAK,UAAU;QAC/C,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC3C,GAAG,CAAC,gBAAgB,GAAG,CAAC,EACxB,CAAC;QACD,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACzD,MAAM,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;QAC9C,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,OAAO,EAAE,GAAG,CAAC,gBAAgB;QAC7B,aAAa,EAAE,GAAG,CAAC,wBAAwB;QAC3C,aAAa;QACb,kBAAkB;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;KAC/B,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,yBAAyB,KAAK,gBAAgB;QAAE,MAAM,WAAW,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAmB;IAC3C,IAAI,CAAC;QACH,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,6CAA6C;YAAE,OAAO,KAAK,CAAC;QACjF,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAyC;IAC/D,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC/C,IACE,YAAY,CAAC,MAAM,KAAK,CAAC;QACzB,YAAY,CAAC,MAAM,GAAG,GAAG;QACzB,CAAC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,EACzC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;QACnC,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;QACnC,WAAW,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;QACnD,YAAY;QACZ,QAAQ,EAAE;YACR,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,KAAK,SAAS;gBACpD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,qBAAqB,EAAE,mBAAmB,CACxC,oCAAoC,EACpC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CACrC;iBACF,CAAC;YACN,mBAAmB,EAAE,mBAAmB,CACtC,sBAAsB,EACtB,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CACnC;YACD,mBAAmB,EAAE,mBAAmB,CACtC,sBAAsB,EACtB,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CACnC;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,SAAiB,EAAE,WAAmB;IACnF,OAAO,2CAA2C,OAAO,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa;IACvD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAa;IACrD,IAAI,KAAK,KAAK,gDAAgD,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,8CAA8C;QAAE,OAAO,WAAW,EAAE,CAAC;IAC1F,IAAI,KAAK,YAAY,iCAAiC;QAAE,OAAO,WAAW,EAAE,CAAC;IAC7E,IACE,KAAK,YAAY,6CAA6C;QAC9D,KAAK,YAAY,4CAA4C,EAC7D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QAC5D,CAAC,CAAC,MAAM,CAAE,KAAoC,CAAC,IAAI,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACtE,CAAC;AAED,SAAS,KAAK,CAAC,KAAoB;IACjC,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,WAAW,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,6CAA6C,EAAE,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAkB;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epochs.d.ts

@@ -1,6 +1,8 @@
 import type { Pool, PoolClient } from 'pg';
 import type { ControlPlaneIdentity } from '../auth/deploy-gate.js';
 import { type BillingMeterValidationEpochPrepareRequest, type BillingMeterValidationEpochResult, type BillingMeterValidationEpochRetireRequest, type BillingMeterValidationEpochStore } from './meter-validation-epoch.js';
+export declare const BILLING_METER_EPOCH_LIFECYCLE_LOCK_KEY = "billing-meter-validation-epoch-lifecycle:v1";
+/** @deprecated Existing consumers retain this name; both constants use the same cross-version lock. */
 export declare const BILLING_METER_VALIDATION_EPOCH_LIFECYCLE_LOCK_KEY = "billing-meter-validation-epoch-lifecycle:v1";
 export interface BillingMeterValidationEpochPrepareBindings {
     readonly keyGeneration: string;

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epochs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-meter-epochs.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-meter-epochs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAKnE,OAAO,EAGL,KAAK,yCAAyC,EAC9C,KAAK,iCAAiC,EAEtC,KAAK,wCAAwC,EAC7C,KAAK,gCAAgC,EAMtC,MAAM,6BAA6B,CAAC;AAKrC,eAAO,MAAM,iDAAiD,gDACf,CAAC;AAEhD,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,MAAM,2CAA2C,GAAG,CAAC,KAAK,EAAE;IAChE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0CAA0C,CAAC;CAC/D,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvB,MAAM,WAAW,+CAA+C;IAC9D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,mGAAmG;IACnG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,2CAA2C,CAAC;IACxE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAmBD,kFAAkF;AAClF,qBAAa,wCAAyC,YAAW,gCAAgC;;IAC/F,QAAQ,CAAC,gBAAgB,EAAG,eAAe,CAAU;gBAIzC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,+CAA+C;IAKhF,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,OAAO,EAAE,yCAAyC,CAAC;QAC5D,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAS9C,qBAAqB,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,OAAO,EAAE,wCAAwC,CAAC;QAC3D,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,iCAAiC,CAAC;CAuP/C"}
+{"version":3,"file":"postgres-meter-epochs.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-meter-epochs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAMnE,OAAO,EAGL,KAAK,yCAAyC,EAC9C,KAAK,iCAAiC,EAEtC,KAAK,wCAAwC,EAC7C,KAAK,gCAAgC,EAMtC,MAAM,6BAA6B,CAAC;AAKrC,eAAO,MAAM,sCAAsC,gDAAgD,CAAC;AACpG,uGAAuG;AACvG,eAAO,MAAM,iDAAiD,gDACtB,CAAC;AAEzC,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,MAAM,2CAA2C,GAAG,CAAC,KAAK,EAAE;IAChE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0CAA0C,CAAC;CAC/D,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvB,MAAM,WAAW,+CAA+C;IAC9D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,mGAAmG;IACnG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,2CAA2C,CAAC;IACxE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAmBD,kFAAkF;AAClF,qBAAa,wCAAyC,YAAW,gCAAgC;;IAC/F,QAAQ,CAAC,gBAAgB,EAAG,eAAe,CAAU;gBAIzC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,+CAA+C;IAKhF,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,OAAO,EAAE,yCAAyC,CAAC;QAC5D,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAS9C,qBAAqB,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,OAAO,EAAE,wCAAwC,CAAC;QAC3D,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,iCAAiC,CAAC;CAyP/C"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epochs.js

@@ -1,11 +1,14 @@
 import { createHash, randomUUID } from 'node:crypto';
 import { insertAuditEvent } from '@noodle-borg/module-audit';
+import { BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION } from './enforcement-activation.js';
 import { BILLING_METER_RETRY_IDENTITY_VERSION, deriveBillingMeterKeyGeneration, } from './meter-readiness.js';
 import { BILLING_METER_VALIDATION_WRITER_CONTRACT_VERSION, BillingMeterValidationEpochConflictError, BillingMeterValidationEpochResultSchema, billingMeterValidationEpochRequestFingerprint, billingMeterValidationEpochSuccessAudit, normalizeBillingMeterServiceUrl, parseBillingMeterValidationEpochPrepareRequest, parseBillingMeterValidationEpochRetireRequest, } from './meter-validation-epoch.js';
 import { normalizeBillingEmail } from './model.js';
 import { readBillingMeterTransactionTime } from './postgres-meter-clock.js';
 import { validateScalarId } from './postgres-records.js';
-export const BILLING_METER_VALIDATION_EPOCH_LIFECYCLE_LOCK_KEY = 'billing-meter-validation-epoch-lifecycle:v1';
+export const BILLING_METER_EPOCH_LIFECYCLE_LOCK_KEY = 'billing-meter-validation-epoch-lifecycle:v1';
+/** @deprecated Existing consumers retain this name; both constants use the same cross-version lock. */
+export const BILLING_METER_VALIDATION_EPOCH_LIFECYCLE_LOCK_KEY = BILLING_METER_EPOCH_LIFECYCLE_LOCK_KEY;
 /** Durable, validation-only lifecycle. It never creates an active meter epoch. */
 export class PostgresBillingMeterValidationEpochStore {
     successAuditMode = 'transactional';
@@ -66,14 +69,16 @@ export class PostgresBillingMeterValidationEpochStore {
             const preparedAt = await readBillingMeterTransactionTime(client);
             const epochId = `bmev_${(this.#options.id ?? randomUUID)()}`;
             await client.query(`INSERT INTO billing_meter_epochs
-           (id, schema_version, state, key_generation, release_sha, retry_identity_version,
-            writer_contract_version, prepared_at)
-         VALUES ($1, 1, 'prepared', $2, $3, $4, $5, $6)`, [
+           (id, schema_version, purpose, state, key_generation, release_sha,
+            retry_identity_version, writer_contract_version, admission_contract_version,
+            prepared_at)
+         VALUES ($1, 1, 'validation', 'prepared', $2, $3, $4, $5, $6, $7)`, [
                 epochId,
                 bindings.keyGeneration,
                 bindings.releaseSha,
                 bindings.retryIdentityVersion,
                 bindings.writerContractVersion,
+                BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION,
                 preparedAt,
             ]);
             const preflightReady = await this.#options.preparePreflight({
@@ -229,7 +234,7 @@ function hashIdempotencyKey(value) {
 }
 function lockLifecycle(client) {
     return client.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [
-        BILLING_METER_VALIDATION_EPOCH_LIFECYCLE_LOCK_KEY,
+        BILLING_METER_EPOCH_LIFECYCLE_LOCK_KEY,
     ]);
 }
 async function findOperation(client, idempotencyHash) {