@resvary/sqlite 0.5.0 → 0.7.0

package/dist/credit.js

@@ -1,16 +1,15 @@
-import { mkdirSync } from 'node:fs';
-import { dirname } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
+import { creditUnitsToString, parseCreditUnits } from '@resvary/sdk/credits';
 import { parseReceiptStoreValue, serializeReceiptStoreValue } from '@resvary/sdk/receipts';
+import { hardenSqliteDatabaseFiles, prepareSqliteDatabasePath } from './filesystem.js';
 export class SqliteCreditStore {
     db;
     transactionTail = Promise.resolve();
     constructor(config) {
-        if (config.path !== ':memory:' && config.createDirectory !== false) {
-            mkdirSync(dirname(config.path), { recursive: true });
-        }
+        prepareSqliteDatabasePath(config.path, config.createDirectory !== false);
         this.db = new DatabaseSync(config.path);
         this.migrate();
+        hardenSqliteDatabaseFiles(config.path);
     }
     async transaction(handler) {
         let release;
@@ -106,6 +105,30 @@ export class SqliteCreditStore {
     listFundingTransactions(fundingIntentId) {
         return reader(this.db).listFundingTransactions(fundingIntentId);
     }
+    getGrantPolicy(id) {
+        return reader(this.db).getGrantPolicy(id);
+    }
+    listGrantPolicies(projectId) {
+        return reader(this.db).listGrantPolicies(projectId);
+    }
+    getCreditLot(id) {
+        return reader(this.db).getCreditLot(id);
+    }
+    listCreditLots(filter) {
+        return reader(this.db).listCreditLots(filter);
+    }
+    listCreditLotAllocations(reservationId) {
+        return reader(this.db).listCreditLotAllocations(reservationId);
+    }
+    getGrantPolicyApplication(id) {
+        return reader(this.db).getGrantPolicyApplication(id);
+    }
+    getGrantPolicyApplicationByIdentity(policyId, accountId, periodKey) {
+        return reader(this.db).getGrantPolicyApplicationByIdentity(policyId, accountId, periodKey);
+    }
+    listGrantPolicyApplications(filter) {
+        return reader(this.db).listGrantPolicyApplications(filter);
+    }
     claimOutboxEvents(input) {
         return this.transaction(async (tx) => {
             const events = (await tx.listOutboxEvents({ projectId: input.projectId }))
@@ -182,132 +205,133 @@ export class SqliteCreditStore {
         this.db.close();
     }
     migrate() {
-        this.db.exec(`
-      PRAGMA journal_mode = WAL;
-      PRAGMA busy_timeout = 5000;
-      PRAGMA foreign_keys = ON;
-
-      CREATE TABLE IF NOT EXISTS resvary_schema_migrations (
-        version INTEGER PRIMARY KEY,
-        applied_at INTEGER NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS resvary_credit_accounts (
-        id TEXT PRIMARY KEY,
-        project_id TEXT NOT NULL,
-        customer_id TEXT NOT NULL,
-        updated_at INTEGER NOT NULL,
-        payload TEXT NOT NULL,
-        UNIQUE(project_id, customer_id)
-      );
-
-      CREATE TABLE IF NOT EXISTS resvary_credit_grants (
-        id TEXT PRIMARY KEY,
-        account_id TEXT NOT NULL,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL
-      );
-      CREATE INDEX IF NOT EXISTS resvary_credit_grants_account ON resvary_credit_grants(account_id);
-
-      CREATE TABLE IF NOT EXISTS resvary_meters (
-        id TEXT PRIMARY KEY,
-        project_id TEXT NOT NULL,
-        meter_key TEXT NOT NULL,
-        payload TEXT NOT NULL,
-        UNIQUE(project_id, meter_key)
-      );
-
-      CREATE TABLE IF NOT EXISTS resvary_price_versions (
-        id TEXT PRIMARY KEY,
-        meter_id TEXT NOT NULL,
-        version INTEGER NOT NULL,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL,
-        UNIQUE(meter_id, version)
-      );
-
-      CREATE TABLE IF NOT EXISTS resvary_credit_reservations (
-        id TEXT PRIMARY KEY,
-        account_id TEXT NOT NULL,
-        project_id TEXT NOT NULL,
-        customer_id TEXT NOT NULL,
-        status TEXT NOT NULL,
-        expires_at INTEGER NOT NULL,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL
-      );
-      CREATE INDEX IF NOT EXISTS resvary_credit_reservations_open
-        ON resvary_credit_reservations(project_id, customer_id, status, expires_at);
-
-      CREATE TABLE IF NOT EXISTS resvary_usage_events (
-        id TEXT PRIMARY KEY,
-        account_id TEXT NOT NULL,
-        received_at INTEGER NOT NULL,
-        payload TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS resvary_usage_receipts (
-        id TEXT PRIMARY KEY,
-        account_id TEXT NOT NULL,
-        reservation_id TEXT NOT NULL UNIQUE,
-        usage_event_id TEXT NOT NULL UNIQUE,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL
-      );
-      CREATE INDEX IF NOT EXISTS resvary_usage_receipts_account ON resvary_usage_receipts(account_id, created_at);
-
-      CREATE TABLE IF NOT EXISTS resvary_ledger_entries (
-        id TEXT PRIMARY KEY,
-        account_id TEXT NOT NULL,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL
-      );
-      CREATE INDEX IF NOT EXISTS resvary_ledger_entries_account ON resvary_ledger_entries(account_id, created_at);
-
-      CREATE TABLE IF NOT EXISTS resvary_funding_intents (
-        id TEXT PRIMARY KEY,
-        project_id TEXT NOT NULL,
-        customer_id TEXT NOT NULL,
-        status TEXT NOT NULL,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL
-      );
-
-      CREATE TABLE IF NOT EXISTS resvary_funding_transactions (
-        id TEXT PRIMARY KEY,
-        funding_intent_id TEXT NOT NULL,
-        network TEXT NOT NULL,
-        tx_hash_norm TEXT NOT NULL,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL,
-        UNIQUE(network, tx_hash_norm)
-      );
-
-      CREATE TABLE IF NOT EXISTS resvary_idempotency_keys (
-        scope TEXT NOT NULL,
-        key TEXT NOT NULL,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL,
-        PRIMARY KEY(scope, key)
-      );
-
-      CREATE TABLE IF NOT EXISTS resvary_outbox_events (
-        id TEXT PRIMARY KEY,
-        project_id TEXT NOT NULL,
-        type TEXT NOT NULL,
-        status TEXT NOT NULL,
-        created_at INTEGER NOT NULL,
-        payload TEXT NOT NULL
-      );
-      CREATE INDEX IF NOT EXISTS resvary_outbox_events_pending
-        ON resvary_outbox_events(project_id, status, created_at);
-
-      INSERT OR IGNORE INTO resvary_schema_migrations(version, applied_at)
-        VALUES (1, CAST(strftime('%s', 'now') AS INTEGER) * 1000);
+        this.db.exec(`
+      PRAGMA journal_mode = WAL;
+      PRAGMA busy_timeout = 5000;
+      PRAGMA foreign_keys = ON;
+
+      CREATE TABLE IF NOT EXISTS resvary_schema_migrations (
+        version INTEGER PRIMARY KEY,
+        applied_at INTEGER NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS resvary_credit_accounts (
+        id TEXT PRIMARY KEY,
+        project_id TEXT NOT NULL,
+        customer_id TEXT NOT NULL,
+        updated_at INTEGER NOT NULL,
+        payload TEXT NOT NULL,
+        UNIQUE(project_id, customer_id)
+      );
+
+      CREATE TABLE IF NOT EXISTS resvary_credit_grants (
+        id TEXT PRIMARY KEY,
+        account_id TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS resvary_credit_grants_account ON resvary_credit_grants(account_id);
+
+      CREATE TABLE IF NOT EXISTS resvary_meters (
+        id TEXT PRIMARY KEY,
+        project_id TEXT NOT NULL,
+        meter_key TEXT NOT NULL,
+        payload TEXT NOT NULL,
+        UNIQUE(project_id, meter_key)
+      );
+
+      CREATE TABLE IF NOT EXISTS resvary_price_versions (
+        id TEXT PRIMARY KEY,
+        meter_id TEXT NOT NULL,
+        version INTEGER NOT NULL,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL,
+        UNIQUE(meter_id, version)
+      );
+
+      CREATE TABLE IF NOT EXISTS resvary_credit_reservations (
+        id TEXT PRIMARY KEY,
+        account_id TEXT NOT NULL,
+        project_id TEXT NOT NULL,
+        customer_id TEXT NOT NULL,
+        status TEXT NOT NULL,
+        expires_at INTEGER NOT NULL,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS resvary_credit_reservations_open
+        ON resvary_credit_reservations(project_id, customer_id, status, expires_at);
+
+      CREATE TABLE IF NOT EXISTS resvary_usage_events (
+        id TEXT PRIMARY KEY,
+        account_id TEXT NOT NULL,
+        received_at INTEGER NOT NULL,
+        payload TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS resvary_usage_receipts (
+        id TEXT PRIMARY KEY,
+        account_id TEXT NOT NULL,
+        reservation_id TEXT NOT NULL UNIQUE,
+        usage_event_id TEXT NOT NULL UNIQUE,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS resvary_usage_receipts_account ON resvary_usage_receipts(account_id, created_at);
+
+      CREATE TABLE IF NOT EXISTS resvary_ledger_entries (
+        id TEXT PRIMARY KEY,
+        account_id TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS resvary_ledger_entries_account ON resvary_ledger_entries(account_id, created_at);
+
+      CREATE TABLE IF NOT EXISTS resvary_funding_intents (
+        id TEXT PRIMARY KEY,
+        project_id TEXT NOT NULL,
+        customer_id TEXT NOT NULL,
+        status TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL
+      );
+
+      CREATE TABLE IF NOT EXISTS resvary_funding_transactions (
+        id TEXT PRIMARY KEY,
+        funding_intent_id TEXT NOT NULL,
+        network TEXT NOT NULL,
+        tx_hash_norm TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL,
+        UNIQUE(network, tx_hash_norm)
+      );
+
+      CREATE TABLE IF NOT EXISTS resvary_idempotency_keys (
+        scope TEXT NOT NULL,
+        key TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL,
+        PRIMARY KEY(scope, key)
+      );
+
+      CREATE TABLE IF NOT EXISTS resvary_outbox_events (
+        id TEXT PRIMARY KEY,
+        project_id TEXT NOT NULL,
+        type TEXT NOT NULL,
+        status TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        payload TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS resvary_outbox_events_pending
+        ON resvary_outbox_events(project_id, status, created_at);
+
+      INSERT OR IGNORE INTO resvary_schema_migrations(version, applied_at)
+        VALUES (1, CAST(strftime('%s', 'now') AS INTEGER) * 1000);
     `);
         this.migrateFundingV2();
         this.migrateOutboxV3();
         this.migrateFundingTransactionHashV4();
+        this.migrateCreditLotsV5();
     }
     migrateFundingV2() {
         const row = this.db
@@ -317,51 +341,51 @@ export class SqliteCreditStore {
             return;
         this.db.exec('BEGIN IMMEDIATE;');
         try {
-            this.db.exec(`
-        ALTER TABLE resvary_funding_transactions
-          ADD COLUMN rail TEXT NOT NULL DEFAULT 'arc_direct';
-        ALTER TABLE resvary_funding_transactions
-          ADD COLUMN external_payment_id_norm TEXT;
-        UPDATE resvary_funding_transactions
-          SET external_payment_id_norm = tx_hash_norm
-          WHERE external_payment_id_norm IS NULL;
-
-        ALTER TABLE resvary_funding_transactions
-          RENAME TO resvary_funding_transactions_v1;
-        CREATE TABLE resvary_funding_transactions (
-          id TEXT PRIMARY KEY,
-          funding_intent_id TEXT NOT NULL,
-          rail TEXT NOT NULL,
-          network TEXT NOT NULL,
-          external_payment_id_norm TEXT NOT NULL,
-          tx_hash_norm TEXT,
-          created_at INTEGER NOT NULL,
-          payload TEXT NOT NULL,
-          UNIQUE(rail, network, external_payment_id_norm)
-        );
-        INSERT INTO resvary_funding_transactions(
-          id,
-          funding_intent_id,
-          rail,
-          network,
-          external_payment_id_norm,
-          tx_hash_norm,
-          created_at,
-          payload
-        )
-        SELECT
-          id,
-          funding_intent_id,
-          rail,
-          network,
-          external_payment_id_norm,
-          tx_hash_norm,
-          created_at,
-          payload
-        FROM resvary_funding_transactions_v1;
-        DROP TABLE resvary_funding_transactions_v1;
-        CREATE INDEX resvary_funding_transactions_tx_hash
-          ON resvary_funding_transactions(network, tx_hash_norm);
+            this.db.exec(`
+        ALTER TABLE resvary_funding_transactions
+          ADD COLUMN rail TEXT NOT NULL DEFAULT 'arc_direct';
+        ALTER TABLE resvary_funding_transactions
+          ADD COLUMN external_payment_id_norm TEXT;
+        UPDATE resvary_funding_transactions
+          SET external_payment_id_norm = tx_hash_norm
+          WHERE external_payment_id_norm IS NULL;
+
+        ALTER TABLE resvary_funding_transactions
+          RENAME TO resvary_funding_transactions_v1;
+        CREATE TABLE resvary_funding_transactions (
+          id TEXT PRIMARY KEY,
+          funding_intent_id TEXT NOT NULL,
+          rail TEXT NOT NULL,
+          network TEXT NOT NULL,
+          external_payment_id_norm TEXT NOT NULL,
+          tx_hash_norm TEXT,
+          created_at INTEGER NOT NULL,
+          payload TEXT NOT NULL,
+          UNIQUE(rail, network, external_payment_id_norm)
+        );
+        INSERT INTO resvary_funding_transactions(
+          id,
+          funding_intent_id,
+          rail,
+          network,
+          external_payment_id_norm,
+          tx_hash_norm,
+          created_at,
+          payload
+        )
+        SELECT
+          id,
+          funding_intent_id,
+          rail,
+          network,
+          external_payment_id_norm,
+          tx_hash_norm,
+          created_at,
+          payload
+        FROM resvary_funding_transactions_v1;
+        DROP TABLE resvary_funding_transactions_v1;
+        CREATE INDEX resvary_funding_transactions_tx_hash
+          ON resvary_funding_transactions(network, tx_hash_norm);
       `);
             const intents = this.db
                 .prepare('SELECT id, payload FROM resvary_funding_intents')
@@ -391,10 +415,10 @@ export class SqliteCreditStore {
                     },
                 };
                 this.db
-                    .prepare(`
-          UPDATE resvary_funding_transactions
-          SET rail = ?, external_payment_id_norm = ?, payload = ?
-          WHERE id = ?
+                    .prepare(`
+          UPDATE resvary_funding_transactions
+          SET rail = ?, external_payment_id_norm = ?, payload = ?
+          WHERE id = ?
         `)
                     .run(migrated.rail, migrated.externalPaymentId.toLowerCase(), serializeReceiptStoreValue(migrated), transactionRow.id);
             }
@@ -416,14 +440,14 @@ export class SqliteCreditStore {
             return;
         this.db.exec('BEGIN IMMEDIATE;');
         try {
-            this.db.exec(`
-        ALTER TABLE resvary_outbox_events ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0;
-        ALTER TABLE resvary_outbox_events ADD COLUMN next_attempt_at INTEGER NOT NULL DEFAULT 0;
-        ALTER TABLE resvary_outbox_events ADD COLUMN lease_owner TEXT;
-        ALTER TABLE resvary_outbox_events ADD COLUMN lease_expires_at INTEGER;
-        DROP INDEX IF EXISTS resvary_outbox_events_pending;
-        CREATE INDEX resvary_outbox_events_due
-          ON resvary_outbox_events(project_id, status, next_attempt_at, created_at);
+            this.db.exec(`
+        ALTER TABLE resvary_outbox_events ADD COLUMN attempt_count INTEGER NOT NULL DEFAULT 0;
+        ALTER TABLE resvary_outbox_events ADD COLUMN next_attempt_at INTEGER NOT NULL DEFAULT 0;
+        ALTER TABLE resvary_outbox_events ADD COLUMN lease_owner TEXT;
+        ALTER TABLE resvary_outbox_events ADD COLUMN lease_expires_at INTEGER;
+        DROP INDEX IF EXISTS resvary_outbox_events_pending;
+        CREATE INDEX resvary_outbox_events_due
+          ON resvary_outbox_events(project_id, status, next_attempt_at, created_at);
       `);
             const rows = this.db
                 .prepare('SELECT id, created_at, payload FROM resvary_outbox_events')
@@ -436,8 +460,8 @@ export class SqliteCreditStore {
                     nextAttemptAt: event.nextAttemptAt ?? item.created_at,
                 };
                 this.db
-                    .prepare(`UPDATE resvary_outbox_events
-             SET attempt_count = ?, next_attempt_at = ?, lease_owner = ?, lease_expires_at = ?, payload = ?
+                    .prepare(`UPDATE resvary_outbox_events
+             SET attempt_count = ?, next_attempt_at = ?, lease_owner = ?, lease_expires_at = ?, payload = ?
              WHERE id = ?`)
                     .run(migrated.attemptCount, migrated.nextAttemptAt, migrated.leaseOwner ?? null, migrated.leaseExpiresAt ?? null, serializeReceiptStoreValue(migrated), item.id);
             }
@@ -460,21 +484,21 @@ export class SqliteCreditStore {
         this.db.exec('BEGIN IMMEDIATE;');
         try {
             const duplicate = this.db
-                .prepare(`SELECT network, tx_hash_norm, COUNT(*) AS count
-           FROM resvary_funding_transactions
-           WHERE tx_hash_norm IS NOT NULL
-           GROUP BY network, tx_hash_norm
-           HAVING COUNT(*) > 1
+                .prepare(`SELECT network, tx_hash_norm, COUNT(*) AS count
+           FROM resvary_funding_transactions
+           WHERE tx_hash_norm IS NOT NULL
+           GROUP BY network, tx_hash_norm
+           HAVING COUNT(*) > 1
            LIMIT 1`)
                 .get();
             if (duplicate) {
                 throw new Error(`Cannot migrate SQLite funding transaction uniqueness: ${duplicate.count} records use ${duplicate.network}:${duplicate.tx_hash_norm}`);
             }
-            this.db.exec(`
-        DROP INDEX IF EXISTS resvary_funding_transactions_tx_hash;
-        CREATE UNIQUE INDEX resvary_funding_transactions_tx_hash
-          ON resvary_funding_transactions(network, tx_hash_norm)
-          WHERE tx_hash_norm IS NOT NULL;
+            this.db.exec(`
+        DROP INDEX IF EXISTS resvary_funding_transactions_tx_hash;
+        CREATE UNIQUE INDEX resvary_funding_transactions_tx_hash
+          ON resvary_funding_transactions(network, tx_hash_norm)
+          WHERE tx_hash_norm IS NOT NULL;
       `);
             this.db
                 .prepare('INSERT INTO resvary_schema_migrations(version, applied_at) VALUES (4, ?)')
@@ -486,6 +510,176 @@ export class SqliteCreditStore {
             throw error;
         }
     }
+    migrateCreditLotsV5() {
+        const row = this.db
+            .prepare('SELECT MAX(version) AS version FROM resvary_schema_migrations')
+            .get();
+        if ((row?.version ?? 0) >= 5)
+            return;
+        this.db.exec('BEGIN IMMEDIATE;');
+        try {
+            this.db.exec(`
+        CREATE TABLE resvary_grant_policies (
+          id TEXT PRIMARY KEY,
+          project_id TEXT NOT NULL,
+          policy_key TEXT NOT NULL,
+          version INTEGER NOT NULL,
+          created_at INTEGER NOT NULL,
+          payload TEXT NOT NULL,
+          UNIQUE(project_id, policy_key, version)
+        );
+        CREATE INDEX resvary_grant_policies_project
+          ON resvary_grant_policies(project_id, created_at);
+
+        CREATE TABLE resvary_credit_lots (
+          id TEXT PRIMARY KEY,
+          account_id TEXT NOT NULL,
+          project_id TEXT NOT NULL,
+          customer_id TEXT NOT NULL,
+          kind TEXT NOT NULL,
+          policy_id TEXT,
+          expires_at INTEGER,
+          created_at INTEGER NOT NULL,
+          payload TEXT NOT NULL
+        );
+        CREATE INDEX resvary_credit_lots_account
+          ON resvary_credit_lots(account_id, created_at);
+        CREATE INDEX resvary_credit_lots_expiry
+          ON resvary_credit_lots(project_id, expires_at)
+          WHERE expires_at IS NOT NULL;
+
+        CREATE TABLE resvary_credit_lot_allocations (
+          id TEXT PRIMARY KEY,
+          reservation_id TEXT NOT NULL,
+          lot_id TEXT NOT NULL,
+          account_id TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          payload TEXT NOT NULL,
+          UNIQUE(reservation_id, lot_id)
+        );
+        CREATE INDEX resvary_credit_lot_allocations_reservation
+          ON resvary_credit_lot_allocations(reservation_id, created_at);
+
+        CREATE TABLE resvary_grant_policy_applications (
+          id TEXT PRIMARY KEY,
+          policy_id TEXT NOT NULL,
+          account_id TEXT NOT NULL,
+          project_id TEXT NOT NULL,
+          customer_id TEXT NOT NULL,
+          policy_type TEXT NOT NULL,
+          period_key TEXT NOT NULL,
+          created_at INTEGER NOT NULL,
+          payload TEXT NOT NULL,
+          UNIQUE(policy_id, account_id, period_key)
+        );
+        CREATE INDEX resvary_grant_policy_applications_customer
+          ON resvary_grant_policy_applications(project_id, customer_id, created_at);
+      `);
+            const accounts = this.db
+                .prepare('SELECT payload FROM resvary_credit_accounts ORDER BY id')
+                .all();
+            for (const accountRow of accounts) {
+                const account = parseReceiptStoreValue(accountRow.payload);
+                const posted = parseCreditUnits(account.postedUnits);
+                const reserved = parseCreditUnits(account.reservedUnits);
+                if (reserved > posted) {
+                    throw new Error(`Cannot migrate SQLite credit lots: account invariant failed for ${account.id}`);
+                }
+                const reservations = this.db
+                    .prepare(`SELECT payload FROM resvary_credit_reservations
+             WHERE account_id = ? AND status = 'open' ORDER BY created_at, id`)
+                    .all(account.id);
+                const open = reservations.map((item) => parseReceiptStoreValue(item.payload));
+                const reservationTotal = open.reduce((total, reservation) => total + parseCreditUnits(reservation.reservedUnits), 0n);
+                if (reservationTotal !== reserved) {
+                    throw new Error(`Cannot migrate SQLite credit lots: open reservations do not match account ${account.id}`);
+                }
+                if (posted === 0n)
+                    continue;
+                const lotId = `lot_legacy_${account.id}`;
+                const available = posted - reserved;
+                const lot = {
+                    id: lotId,
+                    accountId: account.id,
+                    projectId: account.projectId,
+                    customerId: account.customerId,
+                    kind: 'legacy',
+                    originalAmount: creditUnitsToString(posted),
+                    originalUnits: posted.toString(),
+                    availableAmount: creditUnitsToString(available),
+                    availableUnits: available.toString(),
+                    reservedAmount: creditUnitsToString(reserved),
+                    reservedUnits: reserved.toString(),
+                    consumedAmount: '0',
+                    consumedUnits: '0',
+                    expiredAmount: '0',
+                    expiredUnits: '0',
+                    createdAt: account.createdAt,
+                    updatedAt: account.updatedAt,
+                    metadata: { migratedFrom: 'sqlite-v4' },
+                };
+                insert(this.db, 'resvary_credit_lots', [
+                    'id',
+                    'account_id',
+                    'project_id',
+                    'customer_id',
+                    'kind',
+                    'policy_id',
+                    'expires_at',
+                    'created_at',
+                ], [
+                    lot.id,
+                    lot.accountId,
+                    lot.projectId,
+                    lot.customerId,
+                    lot.kind,
+                    null,
+                    null,
+                    lot.createdAt,
+                ], lot);
+                for (const reservation of open) {
+                    const units = parseCreditUnits(reservation.reservedUnits);
+                    if (units === 0n)
+                        continue;
+                    const allocation = {
+                        id: `cla_legacy_${reservation.id}`,
+                        reservationId: reservation.id,
+                        lotId,
+                        accountId: account.id,
+                        projectId: account.projectId,
+                        customerId: account.customerId,
+                        allocatedAmount: creditUnitsToString(units),
+                        allocatedUnits: units.toString(),
+                        reservedAmount: creditUnitsToString(units),
+                        reservedUnits: units.toString(),
+                        consumedAmount: '0',
+                        consumedUnits: '0',
+                        releasedAmount: '0',
+                        releasedUnits: '0',
+                        expiredAmount: '0',
+                        expiredUnits: '0',
+                        createdAt: reservation.createdAt,
+                        updatedAt: account.updatedAt,
+                    };
+                    insert(this.db, 'resvary_credit_lot_allocations', ['id', 'reservation_id', 'lot_id', 'account_id', 'created_at'], [
+                        allocation.id,
+                        allocation.reservationId,
+                        allocation.lotId,
+                        allocation.accountId,
+                        allocation.createdAt,
+                    ], allocation);
+                }
+            }
+            this.db
+                .prepare('INSERT INTO resvary_schema_migrations(version, applied_at) VALUES (5, ?)')
+                .run(Date.now());
+            this.db.exec('COMMIT;');
+        }
+        catch (error) {
+            this.db.exec('ROLLBACK;');
+            throw error;
+        }
+    }
 }
 class SqliteCreditTransaction {
     db;
@@ -564,6 +758,30 @@ class SqliteCreditTransaction {
     listFundingTransactions(fundingIntentId) {
         return reader(this.db).listFundingTransactions(fundingIntentId);
     }
+    getGrantPolicy(id) {
+        return reader(this.db).getGrantPolicy(id);
+    }
+    listGrantPolicies(projectId) {
+        return reader(this.db).listGrantPolicies(projectId);
+    }
+    getCreditLot(id) {
+        return reader(this.db).getCreditLot(id);
+    }
+    listCreditLots(filter) {
+        return reader(this.db).listCreditLots(filter);
+    }
+    listCreditLotAllocations(reservationId) {
+        return reader(this.db).listCreditLotAllocations(reservationId);
+    }
+    getGrantPolicyApplication(id) {
+        return reader(this.db).getGrantPolicyApplication(id);
+    }
+    getGrantPolicyApplicationByIdentity(policyId, accountId, periodKey) {
+        return reader(this.db).getGrantPolicyApplicationByIdentity(policyId, accountId, periodKey);
+    }
+    listGrantPolicyApplications(filter) {
+        return reader(this.db).listGrantPolicyApplications(filter);
+    }
     async saveAccount(value) {
         upsert(this.db, 'resvary_credit_accounts', ['id', 'project_id', 'customer_id', 'updated_at'], [value.id, value.projectId, value.customerId, value.updatedAt], value);
     }
@@ -644,6 +862,54 @@ class SqliteCreditTransaction {
             value.createdAt,
         ], value);
     }
+    async saveGrantPolicy(value) {
+        insert(this.db, 'resvary_grant_policies', ['id', 'project_id', 'policy_key', 'version', 'created_at'], [value.id, value.projectId, value.key, value.version, value.createdAt], value);
+    }
+    async saveCreditLot(value) {
+        upsert(this.db, 'resvary_credit_lots', [
+            'id',
+            'account_id',
+            'project_id',
+            'customer_id',
+            'kind',
+            'policy_id',
+            'expires_at',
+            'created_at',
+        ], [
+            value.id,
+            value.accountId,
+            value.projectId,
+            value.customerId,
+            value.kind,
+            value.policyId ?? null,
+            value.expiresAt ?? null,
+            value.createdAt,
+        ], value);
+    }
+    async saveCreditLotAllocation(value) {
+        upsert(this.db, 'resvary_credit_lot_allocations', ['id', 'reservation_id', 'lot_id', 'account_id', 'created_at'], [value.id, value.reservationId, value.lotId, value.accountId, value.createdAt], value);
+    }
+    async saveGrantPolicyApplication(value) {
+        insert(this.db, 'resvary_grant_policy_applications', [
+            'id',
+            'policy_id',
+            'account_id',
+            'project_id',
+            'customer_id',
+            'policy_type',
+            'period_key',
+            'created_at',
+        ], [
+            value.id,
+            value.policyId,
+            value.accountId,
+            value.projectId,
+            value.customerId,
+            value.policyType,
+            value.periodKey,
+            value.createdAt,
+        ], value);
+    }
 }
 function reader(db) {
     return {
@@ -729,7 +995,7 @@ function reader(db) {
             return one(db, 'SELECT payload FROM resvary_funding_transactions WHERE id = ?', [id]);
         },
         async getFundingTransactionByExternalPayment(rail, network, externalPaymentId) {
-            return one(db, `SELECT payload FROM resvary_funding_transactions
+            return one(db, `SELECT payload FROM resvary_funding_transactions
          WHERE rail = ? AND network = ? AND external_payment_id_norm = ?`, [rail, network, externalPaymentId.toLowerCase()]);
         },
         async getFundingTransactionByTxHash(network, txHash) {
@@ -740,6 +1006,44 @@ function reader(db) {
                 ? all(db, 'SELECT payload FROM resvary_funding_transactions WHERE funding_intent_id = ? ORDER BY created_at ASC', [fundingIntentId])
                 : all(db, 'SELECT payload FROM resvary_funding_transactions ORDER BY created_at ASC');
         },
+        async getGrantPolicy(id) {
+            return one(db, 'SELECT payload FROM resvary_grant_policies WHERE id = ?', [
+                id,
+            ]);
+        },
+        async listGrantPolicies(projectId) {
+            return projectId
+                ? all(db, 'SELECT payload FROM resvary_grant_policies WHERE project_id = ? ORDER BY created_at, version', [projectId])
+                : all(db, 'SELECT payload FROM resvary_grant_policies ORDER BY created_at, version');
+        },
+        async getCreditLot(id) {
+            return one(db, 'SELECT payload FROM resvary_credit_lots WHERE id = ?', [id]);
+        },
+        async listCreditLots(filter = {}) {
+            return all(db, 'SELECT payload FROM resvary_credit_lots ORDER BY created_at, id').filter((item) => matchesBalanceFilter(item, filter) &&
+                (!filter.policyId || item.policyId === filter.policyId) &&
+                (!filter.kind || item.kind === filter.kind) &&
+                (filter.expiresBefore === undefined ||
+                    (item.expiresAt !== undefined && item.expiresAt <= filter.expiresBefore)));
+        },
+        async listCreditLotAllocations(reservationId) {
+            return reservationId
+                ? all(db, 'SELECT payload FROM resvary_credit_lot_allocations WHERE reservation_id = ? ORDER BY created_at, id', [reservationId])
+                : all(db, 'SELECT payload FROM resvary_credit_lot_allocations ORDER BY created_at, id');
+        },
+        async getGrantPolicyApplication(id) {
+            return one(db, 'SELECT payload FROM resvary_grant_policy_applications WHERE id = ?', [id]);
+        },
+        async getGrantPolicyApplicationByIdentity(policyId, accountId, periodKey) {
+            return one(db, `SELECT payload FROM resvary_grant_policy_applications
+         WHERE policy_id = ? AND account_id = ? AND period_key = ?`, [policyId, accountId, periodKey]);
+        },
+        async listGrantPolicyApplications(filter = {}) {
+            return all(db, 'SELECT payload FROM resvary_grant_policy_applications ORDER BY created_at, id').filter((item) => matchesBalanceFilter(item, filter) &&
+                (!filter.policyId || item.policyId === filter.policyId) &&
+                (!filter.policyType || item.policyType === filter.policyType) &&
+                (!filter.periodKey || item.periodKey === filter.periodKey));
+        },
     };
 }
 function insert(db, table, columns, values, payload, conflictColumns = ['id']) {