@secondlayer/shared 11.16.1 → 11.18.0

package/dist/src/streams-rows/index.d.ts

@@ -223,6 +223,10 @@ type RuneStreamsEvent = {
 	event_type: RuneEventType
 	rune_id: string
 	payload: RuneEventPayload
+	/** The event's block time, ISO 8601. Absent when the indexer has no header
+	*  time for that block yet (rows written before block times were recorded,
+	*  until backfilled). */
+	ts?: string
 	/** True when this event's block is past the finality boundary (immutable).
 	*  Optional for back-compat with the same reasoning as `StreamsEventBase`. */
 	finalized?: boolean

package/migrations/0150_sentinel_accounts.ts

@@ -0,0 +1,27 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * Which accounts Sentinel's service key may touch. A row exists only for an
+ * account Sentinel created (`via = 'created'`) or one whose owner opted in
+ * from Sentinel's UI (`via = 'consent'`). Every `/internal/sentinel/*` call
+ * (and Sentinel-key `/internal/meters` items) beyond resolve/link requires a
+ * row, so a leaked key can't spend from or credit an arbitrary account.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`
+			CREATE TABLE sentinel_accounts (
+				account_id uuid PRIMARY KEY REFERENCES accounts(id) ON DELETE CASCADE,
+				linked_at  timestamptz NOT NULL DEFAULT now(),
+				via        text NOT NULL CHECK (via IN ('created', 'consent'))
+			)
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`DROP TABLE IF EXISTS sentinel_accounts`.execute(db);
+	});
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@secondlayer/shared",
-	"version": "11.16.1",
+	"version": "11.18.0",
 	"description": "Internal building blocks shared across Secondlayer packages.",
 	"license": "MIT",
 	"repository": {