@secondlayer/shared 12.1.0 → 12.1.1

package/dist/src/archive/range-digest.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/archive/semantic-digest-builder.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/coverage/index.d.ts

@@ -601,12 +601,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -1024,7 +1026,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/index.d.ts

@@ -285,12 +285,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -708,7 +710,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/chain-reorgs.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/contracts.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/instance.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/integrity.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/subgraph-gaps.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/subgraph-operations.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/subgraphs.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/sync-scope.d.ts

@@ -294,12 +294,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -717,7 +719,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/queries/webhooks.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/db/schema.d.ts

@@ -283,12 +283,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -706,7 +708,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/index.d.ts

@@ -496,12 +496,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -919,7 +921,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/node/local-client.d.ts

@@ -284,12 +284,14 @@ interface ApiKeysTable {
 	rate_limit: Generated<number>;
 	ip_address: string;
 	account_id: string;
-	product: Generated<"account" | "streams" | "index" | "sentinel">;
+	product: Generated<"account" | "streams" | "index" | "sentinel" | "docs">;
 	/** Sentinel permission areas; set only on `product = 'sentinel'` keys. */
 	areas: unknown | null;
 	tier: "free" | "build" | "scale" | "enterprise" | "internal" | null;
 	last_used_at: Date | null;
 	revoked_at: Date | null;
+	/** Set only on `docs` keys (24h). A key past this instant never authenticates. */
+	expires_at: Date | null;
 	created_at: Generated<Date>;
 }
 /** Singleton self-host / publisher identity. Network is immutable. */
@@ -707,7 +709,7 @@ interface PendingForkBlocksTable {
 	payload: ColumnType<unknown, unknown, unknown>;
 	received_at: Generated<Date>;
 }
-type ObserverJournalStatus = "received" | "processed" | "failed";
+type ObserverJournalStatus = "received" | "processed" | "failed" | "retried";
 /**
 * Exact observer callback receipt. `raw_body` is immutable evidence; the
 * processing columns are updated only after the current derived-state write

package/dist/src/streams-rows/index.d.ts

@@ -119,7 +119,7 @@ type StreamsEventBase = {
 	*/
 	matched?: string[]
 	/**
-	* Which chain this event came from (plan 059). Every Stacks Streams
+	* Which chain this event came from. Every Stacks Streams
 	* response sets this to `"stacks"`; optional here for back-compat with
 	* fixtures/tests that pre-date the field — the same reasoning as
 	* `finalized?`. Cursors stay per-chain but chain-agnostic in shape, so this

package/migrations/0161_observer_journal_retried.ts

@@ -0,0 +1,50 @@
+import { type Kysely, sql } from "kysely";
+import { onChainPlane } from "../src/db/migration-role.ts";
+
+/**
+ * Observer journal status `retried`: a `failed` row whose exact bytes (same
+ * `raw_body_sha256`) were later `processed`, i.e. the node redelivered the
+ * block and it succeeded. `failed` now means unresolved, which is what the
+ * health check and canonical audit count. `error` stays on the row.
+ *
+ * Backfills existing rows with the same rule. `down` turns `retried` rows back
+ * into `failed` before restoring the three-value constraint.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onChainPlane(async () => {
+		await sql`SET lock_timeout = '30s'`.execute(db);
+		await sql`ALTER TABLE observer_journal DROP CONSTRAINT observer_journal_status_check`.execute(
+			db,
+		);
+		await sql`
+			ALTER TABLE observer_journal ADD CONSTRAINT observer_journal_status_check
+				CHECK (status IN ('received', 'processed', 'failed', 'retried'))
+		`.execute(db);
+		await sql`
+			UPDATE observer_journal f SET status = 'retried'
+			 WHERE f.status = 'failed'
+			   AND EXISTS (
+				SELECT 1 FROM observer_journal p
+				 WHERE p.status = 'processed' AND p.network = f.network
+				   AND p.raw_body_sha256 = f.raw_body_sha256
+				   AND p.sequence > f.sequence
+			   )
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onChainPlane(async () => {
+		await sql`SET lock_timeout = '30s'`.execute(db);
+		await sql`UPDATE observer_journal SET status = 'failed' WHERE status = 'retried'`.execute(
+			db,
+		);
+		await sql`ALTER TABLE observer_journal DROP CONSTRAINT observer_journal_status_check`.execute(
+			db,
+		);
+		await sql`
+			ALTER TABLE observer_journal ADD CONSTRAINT observer_journal_status_check
+				CHECK (status IN ('received', 'processed', 'failed'))
+		`.execute(db);
+	});
+}

package/migrations/0164_api_keys_docs_product.ts

@@ -0,0 +1,52 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * Docs keys: `api_keys.product = 'docs'`, short-lived (24h) read keys minted
+ * for a signed-in reader so code samples can carry their own key. They resolve
+ * on the Streams and Index read planes only. `expires_at` is null for every
+ * other key. At most one active docs key per account (minting a new one revokes
+ * the previous).
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`SET lock_timeout = '30s'`.execute(db);
+		await sql`ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS expires_at timestamptz`.execute(
+			db,
+		);
+		await sql`
+			ALTER TABLE api_keys DROP CONSTRAINT IF EXISTS api_keys_product_check
+		`.execute(db);
+		await sql`
+			ALTER TABLE api_keys
+				ADD CONSTRAINT api_keys_product_check
+				CHECK (product IN ('account', 'streams', 'index', 'sentinel', 'docs'))
+		`.execute(db);
+		await sql`
+			CREATE UNIQUE INDEX IF NOT EXISTS api_keys_one_active_docs_per_account
+				ON api_keys (account_id)
+				WHERE status = 'active' AND product = 'docs'
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`SET lock_timeout = '30s'`.execute(db);
+		await sql`DROP INDEX IF EXISTS api_keys_one_active_docs_per_account`.execute(
+			db,
+		);
+		await sql`DELETE FROM api_keys WHERE product = 'docs'`.execute(db);
+		await sql`
+			ALTER TABLE api_keys DROP CONSTRAINT IF EXISTS api_keys_product_check
+		`.execute(db);
+		await sql`
+			ALTER TABLE api_keys
+				ADD CONSTRAINT api_keys_product_check
+				CHECK (product IN ('account', 'streams', 'index', 'sentinel'))
+		`.execute(db);
+		await sql`ALTER TABLE api_keys DROP COLUMN IF EXISTS expires_at`.execute(
+			db,
+		);
+	});
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@secondlayer/shared",
-	"version": "12.1.0",
+	"version": "12.1.1",
 	"description": "Internal building blocks shared across Secondlayer packages.",
 	"license": "MIT",
 	"repository": {
@@ -249,7 +249,7 @@
 		"prepublishOnly": "bun run build"
 	},
 	"dependencies": {
-		"@secondlayer/stacks": "^6.2.0",
+		"@secondlayer/stacks": "^6.2.1",
 		"kysely": "0.28.17",
 		"kysely-postgres-js": "3.0.0",
 		"postgres": "^3.4.6",