@secondlayer/shared 11.4.1 → 11.4.3

package/dist/src/node/local-client.d.ts

@@ -264,6 +264,21 @@ interface MagicLinksTable {
 	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
+/** One-shot hashed tokens that attach a play ghost to an email at claim. */
+interface ClaimTokensTable {
+	id: Generated<string>;
+	account_id: string;
+	token_hash: string;
+	created_at: Generated<Date>;
+	expires_at: Date;
+	used_at: Date | null;
+}
+/** 3 play provisions per IP per UTC day. PK (ip_hash, day); `count` caps at 3. */
+interface PlayProvisionsTable {
+	ip_hash: string;
+	day: string;
+	count: Generated<number>;
+}
 interface SubgraphProcessingStatsTable {
 	id: Generated<string>;
 	subgraph_name: string;
@@ -762,6 +777,8 @@ interface Database {
 	accounts: AccountsTable;
 	sessions: SessionsTable;
 	magic_links: MagicLinksTable;
+	claim_tokens: ClaimTokensTable;
+	play_provisions: PlayProvisionsTable;
 	subgraph_health_snapshots: SubgraphHealthSnapshotsTable;
 	subgraph_processing_stats: SubgraphProcessingStatsTable;
 	subgraph_table_snapshots: SubgraphTableSnapshotsTable;
@@ -771,6 +788,7 @@ interface Database {
 	processed_stripe_events: ProcessedStripeEventsTable;
 	account_spend_caps: AccountSpendCapsTable;
 	account_credits: AccountCreditsTable;
+	hosted_meter_days: HostedMeterDaysTable;
 	subscriptions: SubscriptionsTable;
 	subscription_outbox: SubscriptionOutboxTable;
 	subscription_deliveries: SubscriptionDeliveriesTable;
@@ -870,6 +888,15 @@ interface AccountCreditsTable {
 	refill_last_at: Date | null;
 	updated_at: Generated<Date>;
 }
+/** Daily idempotency ledger for hosted subgraph running + storage meters. */
+interface HostedMeterDaysTable {
+	day: string;
+	account_id: string;
+	subgraph_name: string;
+	kind: string;
+	usd_micros: string | number | bigint;
+	billed_at: Generated<Date>;
+}
 /**
 * Archive fetch charge log (design-f089 gate). Append-only: one row per
 * priced attempt to fetch a partition object. `usd_micros` is 0 for

package/migrations/0124_hosted_meter_days.ts

@@ -0,0 +1,31 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * Daily idempotency ledger for hosted subgraph running + storage meters.
+ * Control plane only. One row per (day, account, subgraph, kind) so the
+ * worker can INSERT ON CONFLICT DO NOTHING and debit only on first insert.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await sql`SET lock_timeout = '30s'`.execute(db);
+	await onControlPlane(async () => {
+		await sql`
+			CREATE TABLE IF NOT EXISTS hosted_meter_days (
+				day            date NOT NULL,
+				account_id     text NOT NULL,
+				subgraph_name  text NOT NULL,
+				kind           text NOT NULL,
+				usd_micros     bigint NOT NULL,
+				billed_at      timestamptz NOT NULL DEFAULT now(),
+				PRIMARY KEY (day, account_id, subgraph_name, kind),
+				CHECK (kind IN ('running', 'storage'))
+			)
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`DROP TABLE IF EXISTS hosted_meter_days`.execute(db);
+	});
+}

package/migrations/0125_claim_tokens.ts

@@ -0,0 +1,42 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * Recreate claim_tokens (dropped in 0118) for accountless play, plus
+ * play_provisions for the 3-per-IP-per-UTC-day cap. Control plane only.
+ * Copy of 0093's claim_tokens shape: hashed one-shot tokens that attach a
+ * ghost account to an email at claim time.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await sql`SET lock_timeout = '30s'`.execute(db);
+	await onControlPlane(async () => {
+		await sql`
+			CREATE TABLE claim_tokens (
+				id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+				account_id UUID NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+				token_hash TEXT NOT NULL UNIQUE,
+				created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+				expires_at TIMESTAMPTZ NOT NULL,
+				used_at TIMESTAMPTZ
+			)
+		`.execute(db);
+		await sql`CREATE INDEX claim_tokens_account_id_idx ON claim_tokens (account_id)`.execute(
+			db,
+		);
+		await sql`
+			CREATE TABLE play_provisions (
+				ip_hash TEXT NOT NULL,
+				day DATE NOT NULL,
+				count INTEGER NOT NULL DEFAULT 1,
+				PRIMARY KEY (ip_hash, day)
+			)
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`DROP TABLE IF EXISTS play_provisions`.execute(db);
+		await sql`DROP TABLE IF EXISTS claim_tokens`.execute(db);
+	});
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@secondlayer/shared",
-	"version": "11.4.1",
+	"version": "11.4.3",
 	"description": "Internal building blocks shared across Secondlayer packages.",
 	"license": "MIT",
 	"repository": {