@secondlayer/shared 6.28.1 → 6.30.0

package/migrations/0092_subgraph_visibility.ts

@@ -0,0 +1,33 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+// Subgraph read visibility. 'public' = anon-readable on /v1/subgraphs/:name
+// (wildcard CORS, anon rate limits); 'private' = reads require the owning
+// account's bearer key, anon resolution 404s. Existing rows default 'private'
+// so nothing already deployed becomes world-readable; the public default for
+// new managed deploys is applied at the API layer, not here. Public names are
+// a single global namespace (claim-on-publish), enforced by the partial
+// unique index. Control-plane (TARGET).
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await sql`SET lock_timeout = '30s'`.execute(db);
+	await onControlPlane(async () => {
+		await sql`
+			ALTER TABLE subgraphs
+			ADD COLUMN visibility TEXT NOT NULL DEFAULT 'private'
+			CHECK (visibility IN ('public', 'private'))
+		`.execute(db);
+		await sql`
+			CREATE UNIQUE INDEX subgraphs_public_name_uidx
+			ON subgraphs (name) WHERE visibility = 'public'
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`DROP INDEX IF EXISTS subgraphs_public_name_uidx`.execute(db);
+		await sql`ALTER TABLE subgraphs DROP COLUMN IF EXISTS visibility`.execute(
+			db,
+		);
+	});
+}

package/migrations/0093_ghost_accounts.ts

@@ -0,0 +1,47 @@
+import { type Kysely, sql } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+// Ghost accounts: anonymous self-serve API keys. `POST /v1/keys` with no auth
+// mints an account with ghost=true and email NULL; a claim token (hash stored,
+// raw returned once in the claim URL) later attaches an email via the magic-link
+// flow. Email's NOT NULL is dropped; the existing plain UNIQUE constraint stays —
+// Postgres unique constraints ignore NULLs (multiple NULL emails coexist), so
+// `ON CONFLICT (email)` upserts keep working unchanged and no partial index is
+// needed. Control-plane (TARGET).
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await sql`SET lock_timeout = '30s'`.execute(db);
+	await onControlPlane(async () => {
+		await sql`
+			ALTER TABLE accounts
+			ADD COLUMN ghost BOOLEAN NOT NULL DEFAULT false
+		`.execute(db);
+		await sql`ALTER TABLE accounts ALTER COLUMN email DROP NOT NULL`.execute(
+			db,
+		);
+		await sql`
+			CREATE TABLE claim_tokens (
+				id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+				account_id UUID NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+				token_hash TEXT NOT NULL UNIQUE,
+				created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+				expires_at TIMESTAMPTZ NOT NULL,
+				used_at TIMESTAMPTZ
+			)
+		`.execute(db);
+		// Sweeper + claim flow look tokens up by account.
+		await sql`CREATE INDEX claim_tokens_account_id_idx ON claim_tokens (account_id)`.execute(
+			db,
+		);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`DROP TABLE IF EXISTS claim_tokens`.execute(db);
+		// Unclaimed ghosts have NULL emails — they cannot survive a NOT NULL
+		// restore, so drop them before reinstating the constraint.
+		await sql`DELETE FROM accounts WHERE email IS NULL`.execute(db);
+		await sql`ALTER TABLE accounts ALTER COLUMN email SET NOT NULL`.execute(db);
+		await sql`ALTER TABLE accounts DROP COLUMN IF EXISTS ghost`.execute(db);
+	});
+}

package/migrations/0094_paid_subgraph_deploys.ts

@@ -0,0 +1,39 @@
+import { sql } from "kysely";
+import type { Kysely } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * x402-paid subgraph deploys (agent-owned indexers).
+ *
+ * - `accounts.wallet_principal`: a Stacks principal that owns a wallet-ghost
+ *   account — the identity behind accountless paid deploys. One account per
+ *   principal (partial unique; NULL for every other account).
+ * - `subgraphs.expires_at`: paid deploys live for a bounded window unless
+ *   renewed (paid) or the owning account is claimed; NULL = no expiry
+ *   (every non-paid subgraph).
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`ALTER TABLE accounts ADD COLUMN wallet_principal TEXT`.execute(
+			db,
+		);
+		await sql`CREATE UNIQUE INDEX accounts_wallet_principal_uidx ON accounts (wallet_principal) WHERE wallet_principal IS NOT NULL`.execute(
+			db,
+		);
+		await sql`ALTER TABLE subgraphs ADD COLUMN expires_at TIMESTAMPTZ`.execute(
+			db,
+		);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`ALTER TABLE subgraphs DROP COLUMN IF EXISTS expires_at`.execute(
+			db,
+		);
+		await sql`DROP INDEX IF EXISTS accounts_wallet_principal_uidx`.execute(db);
+		await sql`ALTER TABLE accounts DROP COLUMN IF EXISTS wallet_principal`.execute(
+			db,
+		);
+	});
+}

package/migrations/0095_x402_balances.ts

@@ -0,0 +1,37 @@
+import { sql } from "kysely";
+import type { Kysely } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * Prepaid x402 credit.
+ *
+ * - `x402_balances`: one running USD-micros balance per payer principal.
+ *   Deposits (confirmed-tier on-chain payments) credit it; per-call
+ *   drawdowns debit it atomically (`balance >= price` guard in the UPDATE,
+ *   CHECK as the backstop). No per-drawdown ledger rows — deposits are the
+ *   on-chain accounting record.
+ * - `x402_payments.kind`: distinguishes per-call payments from balance
+ *   deposits in the existing ledger.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`
+			CREATE TABLE x402_balances (
+				principal TEXT PRIMARY KEY,
+				balance_usd_micros BIGINT NOT NULL DEFAULT 0 CHECK (balance_usd_micros >= 0),
+				updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+			)
+		`.execute(db);
+		await sql`
+			ALTER TABLE x402_payments
+			ADD COLUMN kind TEXT NOT NULL DEFAULT 'payment'
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`ALTER TABLE x402_payments DROP COLUMN IF EXISTS kind`.execute(db);
+		await sql`DROP TABLE IF EXISTS x402_balances`.execute(db);
+	});
+}

package/migrations/0096_x402_continuity.ts

@@ -0,0 +1,48 @@
+import { sql } from "kysely";
+import type { Kysely } from "kysely";
+import { onControlPlane } from "../src/db/migration-role.ts";
+
+/**
+ * Wallet→account continuity (the x402 funnel).
+ *
+ * - `x402_payments.account_id`: once a wallet links to a claimed account, its
+ *   historical on-chain payments attach here (nullable — accountless rows
+ *   stay unlinked; SET NULL survives account deletion/sweeps).
+ * - `x402_balances.spent_month` / `spent_month_usd_micros`: rolling
+ *   month-bucketed consumption per principal — powers the "spent $X this
+ *   month, Pro removes the meter" nudge without re-pricing ledger rows.
+ */
+export async function up(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`
+			ALTER TABLE x402_payments
+			ADD COLUMN account_id UUID REFERENCES accounts(id) ON DELETE SET NULL
+		`.execute(db);
+		await sql`
+			CREATE INDEX x402_payments_account_idx ON x402_payments (account_id)
+			WHERE account_id IS NOT NULL
+		`.execute(db);
+		await sql`ALTER TABLE x402_balances ADD COLUMN spent_month TEXT`.execute(
+			db,
+		);
+		await sql`
+			ALTER TABLE x402_balances
+			ADD COLUMN spent_month_usd_micros BIGINT NOT NULL DEFAULT 0
+		`.execute(db);
+	});
+}
+
+export async function down(db: Kysely<unknown>): Promise<void> {
+	await onControlPlane(async () => {
+		await sql`ALTER TABLE x402_balances DROP COLUMN IF EXISTS spent_month_usd_micros`.execute(
+			db,
+		);
+		await sql`ALTER TABLE x402_balances DROP COLUMN IF EXISTS spent_month`.execute(
+			db,
+		);
+		await sql`DROP INDEX IF EXISTS x402_payments_account_idx`.execute(db);
+		await sql`ALTER TABLE x402_payments DROP COLUMN IF EXISTS account_id`.execute(
+			db,
+		);
+	});
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@secondlayer/shared",
-	"version": "6.28.1",
+	"version": "6.30.0",
 	"license": "MIT",
 	"repository": {
 		"type": "git",
@@ -112,6 +112,10 @@
 			"types": "./dist/src/errors.d.ts",
 			"import": "./dist/src/errors.js"
 		},
+		"./x402": {
+			"types": "./dist/src/x402.d.ts",
+			"import": "./dist/src/x402.js"
+		},
 		"./crypto/secrets": {
 			"types": "./dist/src/crypto/secrets.d.ts",
 			"import": "./dist/src/crypto/secrets.js"
@@ -163,7 +167,7 @@
 		"prepublishOnly": "bun run build"
 	},
 	"dependencies": {
-		"@secondlayer/stacks": "^2.4.0",
+		"@secondlayer/stacks": "^2.5.0",
 		"kysely": "0.28.15",
 		"kysely-postgres-js": "3.0.0",
 		"postgres": "^3.4.6",