@noodleseed/one 0.52.0 → 0.53.0

package/node_modules/@noodle-borg/service/dist/billing/postgres-schema.js

@@ -1,9 +1,10 @@
-import { FREE_PLAN_VERSION } from './model.js';
+import { BILLING_PUBLIC_PLAN_VERSIONS } from './paid-plan-catalog.js';
 import { ensureBillingEnforcementActivationSchema } from './postgres-enforcement-activation-schema.js';
 import { ensureBillingEnforcementProfileSchema } from './postgres-enforcement-profile-schema.js';
 import { ensureAuthoritativeMeterSchema } from './postgres-meter-schema.js';
 import { ensureBillingMeterWriterHealthSchema } from './postgres-meter-writer-health-schema.js';
 import { planVersionRowToRecord } from './postgres-records.js';
+import { ensureBillingSubscriptionSchema } from './postgres-subscription-schema.js';
 /** Additive BA-1 schema. No existing organization is linked or otherwise migrated here. */
 export async function ensureBillingSchema(pool) {
     await pool.query(`
@@ -81,12 +82,16 @@ export async function ensureBillingSchema(pool) {
       billing_account_id  text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
       version             integer NOT NULL CHECK (version > 0),
       plan_version_id     text NOT NULL REFERENCES billing_plan_versions(id) ON DELETE RESTRICT,
-      source_kind         text NOT NULL CHECK (source_kind IN ('system-free')),
-      generation_reason   text NOT NULL CHECK (generation_reason IN ('default-account-created')),
-      verification_status text NOT NULL CHECK (verification_status IN ('verified')),
+      schema_version      integer NOT NULL DEFAULT 1,
+      source_kind         text NOT NULL,
+      generation_reason   text NOT NULL,
+      verification_status text NOT NULL,
       effective_from      timestamptz NOT NULL,
+      effective_until     timestamptz,
       monthly_usage_anchor timestamptz NOT NULL,
       entitlements        jsonb NOT NULL,
+      source_subscription_id text,
+      source_subscription_version integer,
       content_checksum    text NOT NULL,
       verified_at         timestamptz NOT NULL,
       created_at          timestamptz NOT NULL,
@@ -102,6 +107,7 @@ export async function ensureBillingSchema(pool) {
         REFERENCES billing_entitlement_snapshots(billing_account_id, id) ON DELETE RESTRICT
     )
   `);
+    await ensureBillingSubscriptionSchema(pool);
     await pool.query(`
     CREATE TABLE IF NOT EXISTS org_billing_home_accounts (
       org_slug                    text PRIMARY KEY REFERENCES orgs(slug) ON DELETE RESTRICT,
@@ -271,23 +277,24 @@ export async function ensureBillingSchema(pool) {
       PRIMARY KEY (migration_id, org_slug)
     )
   `);
-    await pool.query(`INSERT INTO billing_plan_versions
-       (id, plan_code, version, effective_from, entitlements, content_checksum, created_at)
-     VALUES ($1, $2, $3, $4, $5::jsonb, $6, $7)
-     ON CONFLICT (id) DO NOTHING`, [
-        FREE_PLAN_VERSION.id,
-        FREE_PLAN_VERSION.planCode,
-        FREE_PLAN_VERSION.version,
-        FREE_PLAN_VERSION.effectiveFrom,
-        JSON.stringify(FREE_PLAN_VERSION.entitlements),
-        FREE_PLAN_VERSION.contentChecksum,
-        FREE_PLAN_VERSION.createdAt,
-    ]);
-    const { rows } = await pool.query('SELECT * FROM billing_plan_versions WHERE id = $1', [FREE_PLAN_VERSION.id]);
-    const persistedFree = rows[0] ? planVersionRowToRecord(rows[0]) : undefined;
-    if (persistedFree === undefined ||
-        persistedFree.contentChecksum !== FREE_PLAN_VERSION.contentChecksum) {
-        throw new Error('persisted Free plan version does not match the immutable platform definition');
+    for (const plan of BILLING_PUBLIC_PLAN_VERSIONS) {
+        await pool.query(`INSERT INTO billing_plan_versions
+         (id, plan_code, version, effective_from, entitlements, content_checksum, created_at)
+       VALUES ($1, $2, $3, $4, $5::jsonb, $6, $7)
+       ON CONFLICT (id) DO NOTHING`, [
+            plan.id,
+            plan.planCode,
+            plan.version,
+            plan.effectiveFrom,
+            JSON.stringify(plan.entitlements),
+            plan.contentChecksum,
+            plan.createdAt,
+        ]);
+        const { rows } = await pool.query('SELECT * FROM billing_plan_versions WHERE id = $1', [plan.id]);
+        const persisted = rows[0] ? planVersionRowToRecord(rows[0]) : undefined;
+        if (persisted === undefined || persisted.contentChecksum !== plan.contentChecksum) {
+            throw new Error(`persisted ${plan.planCode} plan version does not match the immutable platform definition`);
+        }
     }
 }
 //# sourceMappingURL=postgres-schema.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-schema.js","sourceRoot":"","sources":["../../src/billing/postgres-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,wCAAwC,EAAE,MAAM,6CAA6C,CAAC;AACvG,OAAO,EAAE,qCAAqC,EAAE,MAAM,0CAA0C,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,EAAuB,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU;IAClD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;GAUhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;GAqBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;GAkBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;GAehB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;GAKhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;GAYhB,CAAC,CAAC;IACH,MAAM,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,oCAAoC,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,qCAAqC,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,wCAAwC,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;GAiBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;GAYhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;GAShB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;GAShB,CAAC,CAAC;IAEH,MAAM,IAAI,CAAC,KAAK,CACd;;;iCAG6B,EAC7B;QACE,iBAAiB,CAAC,EAAE;QACpB,iBAAiB,CAAC,QAAQ;QAC1B,iBAAiB,CAAC,OAAO;QACzB,iBAAiB,CAAC,aAAa;QAC/B,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC;QAC9C,iBAAiB,CAAC,eAAe;QACjC,iBAAiB,CAAC,SAAS;KAC5B,CACF,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,mDAAmD,EACnD,CAAC,iBAAiB,CAAC,EAAE,CAAC,CACvB,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IACE,aAAa,KAAK,SAAS;QAC3B,aAAa,CAAC,eAAe,KAAK,iBAAiB,CAAC,eAAe,EACnE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}
+{"version":3,"file":"postgres-schema.js","sourceRoot":"","sources":["../../src/billing/postgres-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,wCAAwC,EAAE,MAAM,6CAA6C,CAAC;AACvG,OAAO,EAAE,qCAAqC,EAAE,MAAM,0CAA0C,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,EAAuB,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AAEpF,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU;IAClD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;GAUhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;GAqBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;GAsBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;GAehB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;GAKhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;GAYhB,CAAC,CAAC;IACH,MAAM,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,oCAAoC,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,qCAAqC,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,wCAAwC,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;GAiBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;GAYhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;GAShB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;GAShB,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,4BAA4B,EAAE,CAAC;QAChD,MAAM,IAAI,CAAC,KAAK,CACd;;;mCAG6B,EAC7B;YACE,IAAI,CAAC,EAAE;YACP,IAAI,CAAC,QAAQ;YACb,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,aAAa;YAClB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;YACjC,IAAI,CAAC,eAAe;YACpB,IAAI,CAAC,SAAS;SACf,CACF,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,mDAAmD,EACnD,CAAC,IAAI,CAAC,EAAE,CAAC,CACV,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,QAAQ,gEAAgE,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-schema.d.ts

@@ -0,0 +1,4 @@
+import type { Pool } from 'pg';
+/** Additive, dormant paid-subscription history. This schema never advances an active snapshot. */
+export declare function ensureBillingSubscriptionSchema(pool: Pool): Promise<void>;
+//# sourceMappingURL=postgres-subscription-schema.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-subscription-schema.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-subscription-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAE3C,kGAAkG;AAClG,wBAAsB,+BAA+B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB/E"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-schema.js

@@ -0,0 +1,319 @@
+/** Additive, dormant paid-subscription history. This schema never advances an active snapshot. */
+export async function ensureBillingSubscriptionSchema(pool) {
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        try {
+            // Service replicas may all start against the same database. Serialize this migration so the
+            // catalog checks and trigger installation below cannot race one another.
+            await client.query(`SELECT pg_advisory_xact_lock(hashtext('noodle.billing.subscription-schema.v1'))`);
+            await ensureBillingSubscriptionSchemaTx(client);
+            await client.query('COMMIT');
+        }
+        catch (error) {
+            await client.query('ROLLBACK');
+            throw error;
+        }
+    }
+    finally {
+        client.release();
+    }
+}
+async function ensureBillingSubscriptionSchemaTx(client) {
+    await client.query(`
+    CREATE TABLE IF NOT EXISTS billing_base_subscriptions (
+      id                 text PRIMARY KEY,
+      billing_account_id text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      created_at         timestamptz NOT NULL,
+      UNIQUE (billing_account_id, id)
+    )
+  `);
+    await client.query(`
+    CREATE TABLE IF NOT EXISTS billing_base_subscription_revisions (
+      schema_version      integer NOT NULL CHECK (schema_version = 1),
+      subscription_id     text NOT NULL,
+      billing_account_id  text NOT NULL,
+      version             integer NOT NULL CHECK (version > 0),
+      plan_version_id     text NOT NULL
+        CHECK (plan_version_id IN ('pro@1', 'scale@1'))
+        REFERENCES billing_plan_versions(id) ON DELETE RESTRICT,
+      state               text NOT NULL CHECK (state IN ('active', 'payment_grace', 'ended')),
+      billing_interval    text NOT NULL CHECK (billing_interval IN ('month', 'year')),
+      currency            text NOT NULL CHECK (currency = 'usd'),
+      base_amount_minor   bigint NOT NULL
+        CHECK (base_amount_minor >= 0 AND base_amount_minor <= 9007199254740991),
+      current_period_start timestamptz NOT NULL,
+      current_period_end   timestamptz NOT NULL CHECK (current_period_end > current_period_start),
+      effective_from       timestamptz NOT NULL,
+      effective_until      timestamptz NOT NULL CHECK (effective_until > effective_from),
+      renews               boolean NOT NULL,
+      content_checksum     text NOT NULL,
+      verified_at          timestamptz NOT NULL,
+      created_at           timestamptz NOT NULL,
+      PRIMARY KEY (subscription_id, version),
+      UNIQUE (billing_account_id, subscription_id, version),
+      UNIQUE (billing_account_id, subscription_id, version, plan_version_id),
+      CONSTRAINT billing_base_subscription_revisions_snapshot_source_key
+        UNIQUE (
+          billing_account_id,
+          subscription_id,
+          version,
+          plan_version_id,
+          effective_from,
+          effective_until
+        ),
+      FOREIGN KEY (billing_account_id, subscription_id)
+        REFERENCES billing_base_subscriptions(billing_account_id, id) ON DELETE RESTRICT,
+      CHECK (verified_at >= effective_from),
+      CHECK (created_at >= verified_at),
+      CHECK (state <> 'active' OR effective_until = current_period_end),
+      CONSTRAINT billing_base_subscription_revisions_payment_grace_check CHECK (
+        state <> 'payment_grace' OR
+        (
+          effective_until = current_period_end + INTERVAL '168 hours' AND
+          verified_at >= current_period_end
+        )
+      ),
+      CHECK (state <> 'ended' OR (NOT renews AND verified_at >= effective_until))
+    )
+  `);
+    await client.query(`
+    CREATE TABLE IF NOT EXISTS billing_account_current_base_subscriptions (
+      billing_account_id text PRIMARY KEY REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      subscription_id    text NOT NULL,
+      revision_version   integer NOT NULL CHECK (revision_version > 0),
+      FOREIGN KEY (billing_account_id, subscription_id, revision_version)
+        REFERENCES billing_base_subscription_revisions
+          (billing_account_id, subscription_id, version)
+        ON DELETE RESTRICT
+    )
+  `);
+    await client.query(`
+    ALTER TABLE billing_entitlement_snapshots
+      ADD COLUMN IF NOT EXISTS schema_version integer NOT NULL DEFAULT 1,
+      ADD COLUMN IF NOT EXISTS effective_until timestamptz,
+      ADD COLUMN IF NOT EXISTS source_subscription_id text,
+      ADD COLUMN IF NOT EXISTS source_subscription_version integer
+  `);
+    await client.query(`
+    DO $billing_snapshot_anchor_consistency$
+    BEGIN
+      IF EXISTS (
+        SELECT 1
+        FROM billing_entitlement_snapshots
+        GROUP BY billing_account_id
+        HAVING MIN(monthly_usage_anchor) <> MAX(monthly_usage_anchor)
+      ) THEN
+        RAISE EXCEPTION 'persisted billing account has inconsistent monthly usage anchors';
+      END IF;
+    END
+    $billing_snapshot_anchor_consistency$
+  `);
+    await client.query(`
+    CREATE OR REPLACE FUNCTION billing_enforce_entitlement_anchor_stability()
+    RETURNS trigger
+    LANGUAGE plpgsql
+    AS $billing_snapshot_anchor_guard$
+    BEGIN
+      IF TG_OP = 'UPDATE' THEN
+        IF NEW.billing_account_id IS DISTINCT FROM OLD.billing_account_id THEN
+          RAISE EXCEPTION 'billing entitlement snapshot account is immutable'
+            USING ERRCODE = '23514';
+        END IF;
+        IF NEW.monthly_usage_anchor IS DISTINCT FROM OLD.monthly_usage_anchor THEN
+          RAISE EXCEPTION 'billing account monthly usage anchor is immutable'
+            USING ERRCODE = '23514';
+        END IF;
+        RETURN NEW;
+      END IF;
+
+      PERFORM 1 FROM billing_accounts
+      WHERE id = NEW.billing_account_id
+      FOR UPDATE;
+      IF EXISTS (
+        SELECT 1 FROM billing_entitlement_snapshots
+        WHERE billing_account_id = NEW.billing_account_id
+          AND monthly_usage_anchor IS DISTINCT FROM NEW.monthly_usage_anchor
+      ) THEN
+        RAISE EXCEPTION 'billing account monthly usage anchor is immutable'
+          USING ERRCODE = '23514';
+      END IF;
+      RETURN NEW;
+    END
+    $billing_snapshot_anchor_guard$
+  `);
+    await client.query(`
+    DO $billing_snapshot_anchor_trigger$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgname = 'billing_entitlement_snapshots_anchor_stability'
+          AND tgrelid = 'billing_entitlement_snapshots'::regclass
+          AND NOT tgisinternal
+      ) THEN
+        BEGIN
+          CREATE TRIGGER billing_entitlement_snapshots_anchor_stability
+          BEFORE INSERT OR UPDATE ON billing_entitlement_snapshots
+          FOR EACH ROW EXECUTE FUNCTION billing_enforce_entitlement_anchor_stability();
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_snapshot_anchor_trigger$
+  `);
+    await client.query(`
+    DO $billing_paid_snapshot_constraints$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_base_subscription_revisions_snapshot_source_key'
+          AND conrelid = 'billing_base_subscription_revisions'::regclass
+      ) THEN
+        BEGIN
+          ALTER TABLE billing_base_subscription_revisions
+            ADD CONSTRAINT billing_base_subscription_revisions_snapshot_source_key
+            UNIQUE (
+              billing_account_id,
+              subscription_id,
+              version,
+              plan_version_id,
+              effective_from,
+              effective_until
+            );
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_entitlement_snapshots_provenance_v2_check'
+          AND conrelid = 'billing_entitlement_snapshots'::regclass
+      ) THEN
+        BEGIN
+          ALTER TABLE billing_entitlement_snapshots
+            ADD CONSTRAINT billing_entitlement_snapshots_provenance_v2_check
+            CHECK (
+              verification_status = 'verified' AND (
+                (
+                  schema_version = 1 AND
+                  source_kind = 'system-free' AND
+                  generation_reason = 'default-account-created' AND
+                  effective_until IS NULL AND
+                  source_subscription_id IS NULL AND
+                  source_subscription_version IS NULL
+                ) OR (
+                  schema_version = 2 AND
+                  source_kind = 'subscription' AND
+                  generation_reason = 'subscription-reconciled' AND
+                  effective_until > effective_from AND
+                  source_subscription_id IS NOT NULL AND
+                  source_subscription_version > 0
+                )
+              )
+            );
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_paid_snapshot_constraints$
+  `);
+    // Replace the earlier four-column draft FK inside the same transaction. Including both effective
+    // bounds makes the snapshot an exact projection of the referenced immutable revision.
+    await client.query(`
+    DO $billing_paid_snapshot_revision_fk$
+    BEGIN
+      IF EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_entitlement_snapshots_subscription_revision_fk'
+          AND conrelid = 'billing_entitlement_snapshots'::regclass
+          AND array_length(conkey, 1) <> 6
+      ) THEN
+        ALTER TABLE billing_entitlement_snapshots
+          DROP CONSTRAINT billing_entitlement_snapshots_subscription_revision_fk;
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_entitlement_snapshots_subscription_revision_fk'
+          AND conrelid = 'billing_entitlement_snapshots'::regclass
+      ) THEN
+        BEGIN
+          ALTER TABLE billing_entitlement_snapshots
+            ADD CONSTRAINT billing_entitlement_snapshots_subscription_revision_fk
+            FOREIGN KEY (
+              billing_account_id,
+              source_subscription_id,
+              source_subscription_version,
+              plan_version_id,
+              effective_from,
+              effective_until
+            ) REFERENCES billing_base_subscription_revisions (
+              billing_account_id,
+              subscription_id,
+              version,
+              plan_version_id,
+              effective_from,
+              effective_until
+            ) ON DELETE RESTRICT;
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_paid_snapshot_revision_fk$
+  `);
+    // Install the replacement provenance guard before retiring the legacy Free-only checks. PostgreSQL
+    // exposes all of this transactional DDL atomically, so readers never observe an unguarded table.
+    await client.query(`
+    ALTER TABLE billing_entitlement_snapshots
+      DROP CONSTRAINT IF EXISTS billing_entitlement_snapshots_source_kind_check,
+      DROP CONSTRAINT IF EXISTS billing_entitlement_snapshots_generation_reason_check,
+      DROP CONSTRAINT IF EXISTS billing_entitlement_snapshots_verification_status_check
+  `);
+    await client.query(`
+    CREATE OR REPLACE FUNCTION billing_reject_subscription_history_mutation()
+    RETURNS trigger
+    LANGUAGE plpgsql
+    AS $billing_subscription_history_guard$
+    BEGIN
+      RAISE EXCEPTION 'billing subscription history is append-only' USING ERRCODE = '55000';
+    END
+    $billing_subscription_history_guard$
+  `);
+    await client.query(`
+    DO $billing_subscription_history_triggers$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgname = 'billing_base_subscriptions_append_only'
+          AND tgrelid = 'billing_base_subscriptions'::regclass
+          AND NOT tgisinternal
+      ) THEN
+        BEGIN
+          CREATE TRIGGER billing_base_subscriptions_append_only
+          BEFORE UPDATE OR DELETE ON billing_base_subscriptions
+          FOR EACH ROW EXECUTE FUNCTION billing_reject_subscription_history_mutation();
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgname = 'billing_base_subscription_revisions_append_only'
+          AND tgrelid = 'billing_base_subscription_revisions'::regclass
+          AND NOT tgisinternal
+      ) THEN
+        BEGIN
+          CREATE TRIGGER billing_base_subscription_revisions_append_only
+          BEFORE UPDATE OR DELETE ON billing_base_subscription_revisions
+          FOR EACH ROW EXECUTE FUNCTION billing_reject_subscription_history_mutation();
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_subscription_history_triggers$
+  `);
+}
+//# sourceMappingURL=postgres-subscription-schema.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-subscription-schema.js","sourceRoot":"","sources":["../../src/billing/postgres-subscription-schema.ts"],"names":[],"mappings":"AAEA,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,IAAU;IAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,4FAA4F;YAC5F,yEAAyE;YACzE,MAAM,MAAM,CAAC,KAAK,CAChB,iFAAiF,CAClF,CAAC;YACF,MAAM,iCAAiC,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,MAAkB;IACjE,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;GAOlB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDlB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;GAUlB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;GAMlB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAalB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgClB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;GAmBlB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDlB,CAAC,CAAC;IAEH,iGAAiG;IACjG,sFAAsF;IACtF,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyClB,CAAC,CAAC;IAEH,mGAAmG;IACnG,iGAAiG;IACjG,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;GAKlB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;GASlB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiClB,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/subscription-model.d.ts

@@ -0,0 +1,40 @@
+import { type EntitlementSnapshotRecord, type PaidEntitlementSnapshotRecord } from './model.js';
+export type BillingBaseSubscriptionState = 'active' | 'payment_grace' | 'ended';
+export type BillingInterval = 'month' | 'year';
+export interface BillingBaseSubscriptionRecord {
+    readonly id: string;
+    readonly billingAccountId: string;
+    readonly createdAt: string;
+}
+export interface BillingBaseSubscriptionRevisionRecord {
+    readonly schemaVersion: 1;
+    readonly subscriptionId: string;
+    readonly billingAccountId: string;
+    readonly version: number;
+    readonly planVersionId: string;
+    readonly state: BillingBaseSubscriptionState;
+    readonly billingInterval: BillingInterval;
+    readonly currency: 'usd';
+    readonly baseAmountMinor: number;
+    readonly currentPeriodStart: string;
+    readonly currentPeriodEnd: string;
+    readonly effectiveFrom: string;
+    readonly effectiveUntil: string;
+    readonly renews: boolean;
+    readonly contentChecksum: string;
+    readonly verifiedAt: string;
+    readonly createdAt: string;
+}
+export type BillingBaseSubscriptionRevisionInput = Omit<BillingBaseSubscriptionRevisionRecord, 'schemaVersion' | 'contentChecksum'>;
+export declare function createBillingBaseSubscriptionRevision(input: BillingBaseSubscriptionRevisionInput): BillingBaseSubscriptionRevisionRecord;
+export declare function parseBillingBaseSubscriptionRevision(value: unknown): BillingBaseSubscriptionRevisionRecord;
+export interface CreatePaidEntitlementSnapshotInput {
+    readonly id: string;
+    readonly version: number;
+    readonly sourceSubscription: BillingBaseSubscriptionRevisionRecord;
+    readonly previousSnapshot: EntitlementSnapshotRecord;
+}
+export declare function createPaidEntitlementSnapshot(input: CreatePaidEntitlementSnapshotInput): PaidEntitlementSnapshotRecord;
+export declare function parsePaidEntitlementSnapshot(value: unknown): PaidEntitlementSnapshotRecord;
+export declare function validateBillingSubscriptionId(value: string): string;
+//# sourceMappingURL=subscription-model.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/subscription-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-model.d.ts","sourceRoot":"","sources":["../../src/billing/subscription-model.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAEnC,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,4BAA4B,GAAG,QAAQ,GAAG,eAAe,GAAG,OAAO,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAI/C,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,oCAAoC,GAAG,IAAI,CACrD,qCAAqC,EACrC,eAAe,GAAG,iBAAiB,CACpC,CAAC;AAOF,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,oCAAoC,GAC1C,qCAAqC,CAMvC;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,GACb,qCAAqC,CAyBvC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,EAAE,qCAAqC,CAAC;IACnE,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;CACtD;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kCAAkC,GACxC,6BAA6B,CAsC/B;AAmDD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,CAmC1F;AAiLD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGnE"}