payweave 0.0.0

package/dist/chunk-NV3MZF7L.js

@@ -0,0 +1,139 @@
+import { z } from 'zod';
+
+// src/db/schema.ts
+var PW_TABLE_PREFIX = "pw_";
+var PW_TABLES = {
+  customers: "pw_customers",
+  plans: "pw_plans",
+  subscriptions: "pw_subscriptions",
+  featureBalances: "pw_feature_balances",
+  webhookEvents: "pw_webhook_events",
+  migrations: "pw_migrations"
+};
+var pwIdSchema = z.string().regex(
+  /^pwv_[0-9A-HJKMNP-TV-Z]{26}$/i,
+  "expected a Payweave row id \u2014 'pwv_' followed by a 26-char ULID"
+);
+var pwSubscriptionStatusSchema = z.enum([
+  "active",
+  "past_due",
+  "canceled",
+  "incomplete",
+  "trialing"
+]);
+var PW_ACTIVE_SUBSCRIPTION_STATUSES = ["active", "past_due", "trialing"];
+var pwResetIntervalSchema = z.enum(["day", "week", "month", "year"]);
+var pwPriceIntervalSchema = z.enum(["month", "year"]);
+var DEFAULT_STALE_CLAIM_AFTER_MS = 6e4;
+var pwCustomerSchema = z.object({
+  id: pwIdSchema,
+  /** Your `customerId` — unique across the table. */
+  externalId: z.string().min(1),
+  /** Column `provider_ids` (JSON), e.g. `{ stripe: "cus_x", paystack: "CUS_x" }`. */
+  providerIds: z.record(z.string().min(1), z.string().min(1)),
+  email: z.string().nullable(),
+  createdAt: z.date(),
+  updatedAt: z.date()
+});
+var pwCustomerUpsertSchema = z.object({
+  externalId: z.string().min(1),
+  email: z.string().optional()
+});
+var pwFeatureInclusionSchema = z.discriminatedUnion("type", [
+  z.looseObject({ type: z.literal("boolean") }),
+  z.looseObject({
+    type: z.literal("metered"),
+    limit: z.number().int().positive(),
+    reset: pwResetIntervalSchema
+  })
+]);
+var pwPlanVersionSchema = z.object({
+  id: pwIdSchema,
+  /** The config-side plan id (`plan()`'s `id`), unique together with `version`. */
+  planId: z.string().min(1),
+  version: z.number().int().positive(),
+  group: z.string().min(1),
+  isDefault: z.boolean(),
+  name: z.string().nullable(),
+  /** Integer minor units — no floats ever (golden rule 7). `null` = free plan. */
+  priceMinor: z.number().int().nonnegative().nullable(),
+  priceCurrency: z.string().nullable(),
+  priceInterval: pwPriceIntervalSchema.nullable(),
+  /** Column `features` (JSON) — resolved includes, keyed by feature id. */
+  features: z.record(z.string().min(1), pwFeatureInclusionSchema),
+  /**
+   * Column `provider_refs` (JSON), e.g.
+   * `{ stripe: { productId, priceId }, paystack: { planCode } }` — filled in
+   * by billing sync (`payweave push`).
+   */
+  providerRefs: z.record(z.string().min(1), z.record(z.string().min(1), z.string().min(1))),
+  pushedAt: z.date()
+});
+var pwPlanVersionInputSchema = pwPlanVersionSchema.omit({
+  id: true,
+  version: true,
+  pushedAt: true
+});
+var pwSubscriptionSchema = z.object({
+  id: pwIdSchema,
+  /** FK → `pw_customers.id` (the `pwv_` id, NOT your external id). */
+  customerId: pwIdSchema,
+  planId: z.string().min(1),
+  planVersion: z.number().int().positive(),
+  group: z.string().min(1),
+  status: pwSubscriptionStatusSchema,
+  provider: z.string().min(1).nullable(),
+  providerSubscriptionRef: z.string().min(1).nullable(),
+  currentPeriodStart: z.date(),
+  currentPeriodEnd: z.date(),
+  cancelAtPeriodEnd: z.boolean(),
+  createdAt: z.date(),
+  updatedAt: z.date()
+});
+var pwSubscriptionInputSchema = pwSubscriptionSchema.omit({
+  id: true,
+  createdAt: true,
+  updatedAt: true
+});
+var pwSubscriptionPatchSchema = pwSubscriptionInputSchema.omit({ customerId: true, group: true }).partial();
+var pwFeatureBalanceSchema = z.object({
+  id: pwIdSchema,
+  /** FK → `pw_customers.id`. */
+  customerId: pwIdSchema,
+  featureId: z.string().min(1),
+  group: z.string().min(1),
+  used: z.number().int(),
+  limit: z.number().int().nonnegative(),
+  resetInterval: pwResetIntervalSchema,
+  /** Billing-cycle anchor — the origin of ALL period arithmetic. */
+  anchor: z.date(),
+  periodStart: z.date(),
+  periodEnd: z.date(),
+  planId: z.string().min(1),
+  planVersion: z.number().int().positive(),
+  updatedAt: z.date()
+});
+var pwFeatureBalanceInitSchema = z.object({
+  limit: z.number().int().nonnegative(),
+  resetInterval: pwResetIntervalSchema,
+  anchor: z.date(),
+  planId: z.string().min(1),
+  planVersion: z.number().int().positive()
+});
+var pwWebhookEventSchema = z.object({
+  dedupeKey: z.string().min(1),
+  provider: z.string().min(1),
+  type: z.string().min(1),
+  receivedAt: z.date(),
+  claimedAt: z.date().nullable(),
+  appliedAt: z.date().nullable()
+});
+var pwMigrationRecordSchema = z.object({
+  name: z.string().min(1),
+  appliedAt: z.date(),
+  checksum: z.string().min(1)
+});
+
+export { DEFAULT_STALE_CLAIM_AFTER_MS, PW_ACTIVE_SUBSCRIPTION_STATUSES, PW_TABLES, PW_TABLE_PREFIX, pwCustomerSchema, pwCustomerUpsertSchema, pwFeatureBalanceInitSchema, pwFeatureBalanceSchema, pwFeatureInclusionSchema, pwIdSchema, pwMigrationRecordSchema, pwPlanVersionInputSchema, pwPlanVersionSchema, pwPriceIntervalSchema, pwResetIntervalSchema, pwSubscriptionInputSchema, pwSubscriptionPatchSchema, pwSubscriptionSchema, pwSubscriptionStatusSchema, pwWebhookEventSchema };
+//# sourceMappingURL=chunk-NV3MZF7L.js.map
+//# sourceMappingURL=chunk-NV3MZF7L.js.map

package/dist/chunk-NV3MZF7L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/schema.ts"],"names":[],"mappings":";;;AAyBO,IAAM,eAAA,GAAkB;AAOxB,IAAM,SAAA,GAAY;AAAA,EACvB,SAAA,EAAW,cAAA;AAAA,EACX,KAAA,EAAO,UAAA;AAAA,EACP,aAAA,EAAe,kBAAA;AAAA,EACf,eAAA,EAAiB,qBAAA;AAAA,EACjB,aAAA,EAAe,mBAAA;AAAA,EACf,UAAA,EAAY;AACd;AAaO,IAAM,UAAA,GAAa,CAAA,CACvB,MAAA,EAAO,CACP,KAAA;AAAA,EACC,+BAAA;AAAA,EACA;AACF;AAKK,IAAM,0BAAA,GAA6B,EAAE,IAAA,CAAK;AAAA,EAC/C,QAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA;AACF,CAAC;AAQM,IAAM,+BAAA,GAAkC,CAAC,QAAA,EAAU,UAAA,EAAY,UAAU;AAGzE,IAAM,qBAAA,GAAwB,EAAE,IAAA,CAAK,CAAC,OAAO,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAC;AAIrE,IAAM,wBAAwB,CAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,MAAM,CAAC;AAStD,IAAM,4BAAA,GAA+B;AAQrC,IAAM,gBAAA,GAAmB,EAAE,MAAA,CAAO;AAAA,EACvC,EAAA,EAAI,UAAA;AAAA;AAAA,EAEJ,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA;AAAA,EAE5B,WAAA,EAAa,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAA,EAAG,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAC,CAAA;AAAA,EAC1D,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC3B,SAAA,EAAW,EAAE,IAAA,EAAK;AAAA,EAClB,SAAA,EAAW,EAAE,IAAA;AACf,CAAC;AAOM,IAAM,sBAAA,GAAyB,EAAE,MAAA,CAAO;AAAA,EAC7C,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC5B,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACpB,CAAC;AAWM,IAAM,wBAAA,GAA2B,CAAA,CAAE,kBAAA,CAAmB,MAAA,EAAQ;AAAA,EACnE,CAAA,CAAE,YAAY,EAAE,IAAA,EAAM,EAAE,OAAA,CAAQ,SAAS,GAAG,CAAA;AAAA,EAC5C,EAAE,WAAA,CAAY;AAAA,IACZ,IAAA,EAAM,CAAA,CAAE,OAAA,CAAQ,SAAS,CAAA;AAAA,IACzB,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,IACjC,KAAA,EAAO;AAAA,GACR;AACH,CAAC;AASM,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA,EAC1C,EAAA,EAAI,UAAA;AAAA;AAAA,EAEJ,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACxB,SAAS,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,SAAA,EAAW,EAAE,OAAA,EAAQ;AAAA,EACrB,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAE1B,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,WAAA,GAAc,QAAA,EAAS;AAAA,EACpD,aAAA,EAAe,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACnC,aAAA,EAAe,sBAAsB,QAAA,EAAS;AAAA;AAAA,EAE9C,QAAA,EAAU,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAA,EAAG,wBAAwB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM9D,YAAA,EAAc,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAA,EAAG,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,EAAG,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAC,CAAC,CAAA;AAAA,EACxF,QAAA,EAAU,EAAE,IAAA;AACd,CAAC;AAOM,IAAM,wBAAA,GAA2B,oBAAoB,IAAA,CAAK;AAAA,EAC/D,EAAA,EAAI,IAAA;AAAA,EACJ,OAAA,EAAS,IAAA;AAAA,EACT,QAAA,EAAU;AACZ,CAAC;AAcM,IAAM,oBAAA,GAAuB,EAAE,MAAA,CAAO;AAAA,EAC3C,EAAA,EAAI,UAAA;AAAA;AAAA,EAEJ,UAAA,EAAY,UAAA;AAAA,EACZ,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACxB,aAAa,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACvC,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,MAAA,EAAQ,0BAAA;AAAA,EACR,UAAU,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACrC,yBAAyB,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA,EACpD,kBAAA,EAAoB,EAAE,IAAA,EAAK;AAAA,EAC3B,gBAAA,EAAkB,EAAE,IAAA,EAAK;AAAA,EACzB,iBAAA,EAAmB,EAAE,OAAA,EAAQ;AAAA,EAC7B,SAAA,EAAW,EAAE,IAAA,EAAK;AAAA,EAClB,SAAA,EAAW,EAAE,IAAA;AACf,CAAC;AAIM,IAAM,yBAAA,GAA4B,qBAAqB,IAAA,CAAK;AAAA,EACjE,EAAA,EAAI,IAAA;AAAA,EACJ,SAAA,EAAW,IAAA;AAAA,EACX,SAAA,EAAW;AACb,CAAC;AAQM,IAAM,yBAAA,GAA4B,yBAAA,CACtC,IAAA,CAAK,EAAE,UAAA,EAAY,MAAM,KAAA,EAAO,IAAA,EAAM,CAAA,CACtC,OAAA;AAcI,IAAM,sBAAA,GAAyB,EAAE,MAAA,CAAO;AAAA,EAC7C,EAAA,EAAI,UAAA;AAAA;AAAA,EAEJ,UAAA,EAAY,UAAA;AAAA,EACZ,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC3B,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACvB,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI;AAAA,EACrB,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA,EACpC,aAAA,EAAe,qBAAA;AAAA;AAAA,EAEf,MAAA,EAAQ,EAAE,IAAA,EAAK;AAAA,EACf,WAAA,EAAa,EAAE,IAAA,EAAK;AAAA,EACpB,SAAA,EAAW,EAAE,IAAA,EAAK;AAAA,EAClB,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACxB,aAAa,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACvC,SAAA,EAAW,EAAE,IAAA;AACf,CAAC;AASM,IAAM,0BAAA,GAA6B,EAAE,MAAA,CAAO;AAAA,EACjD,OAAO,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,WAAA,EAAY;AAAA,EACpC,aAAA,EAAe,qBAAA;AAAA,EACf,MAAA,EAAQ,EAAE,IAAA,EAAK;AAAA,EACf,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACxB,aAAa,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA;AAChC,CAAC;AAWM,IAAM,oBAAA,GAAuB,EAAE,MAAA,CAAO;AAAA,EAC3C,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC3B,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EAC1B,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACtB,UAAA,EAAY,EAAE,IAAA,EAAK;AAAA,EACnB,SAAA,EAAW,CAAA,CAAE,IAAA,EAAK,CAAE,QAAA,EAAS;AAAA,EAC7B,SAAA,EAAW,CAAA,CAAE,IAAA,EAAK,CAAE,QAAA;AACtB,CAAC;AAUM,IAAM,uBAAA,GAA0B,EAAE,MAAA,CAAO;AAAA,EAC9C,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACtB,SAAA,EAAW,EAAE,IAAA,EAAK;AAAA,EAClB,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAC5B,CAAC","file":"chunk-NV3MZF7L.js","sourcesContent":["/**\n * Row schemas + storage constants for the Payweave database layer. These Zod\n * schemas ARE the logical storage contract — every row an adapter returns\n * must parse against them, and the conformance suite\n * (`test/db/conformance.ts`) enforces exactly that. Exact DDL per dialect\n * lives with each adapter, which owns the mapping from these camelCase field\n * names to snake_case column names (`externalId` ↔ `external_id`,\n * `periodEnd` ↔ `period_end`, …).\n *\n * Conventions (\"Key columns\" notation):\n * - Columns marked `?` are NULLABLE here (`.nullable()` — the\n *   value is always present on the row, `null` when unset). Optional keys\n *   (`?:`) appear only on INPUT shapes.\n * - No floats anywhere: money is integer minor units + currency code (golden\n *   rule 7 applies to storage), counters/versions are integers.\n * - All timestamps are UTC `Date` instances.\n *\n * Re-exported from `./db/index.ts` as part of the public `payweave/db`\n * subpath.\n */\nimport { z } from \"zod\";\n\n// ── Table names ──────────────────────────────────────────────────────────────\n\n/** Every Payweave-owned table/collection is prefixed `pw_`. */\nexport const PW_TABLE_PREFIX = \"pw_\";\n\n/**\n * Canonical table/collection names, keyed by the adapter store that owns\n * them. Adapters and migrations MUST use these constants — never\n * re-spell the names.\n */\nexport const PW_TABLES = {\n  customers: \"pw_customers\",\n  plans: \"pw_plans\",\n  subscriptions: \"pw_subscriptions\",\n  featureBalances: \"pw_feature_balances\",\n  webhookEvents: \"pw_webhook_events\",\n  migrations: \"pw_migrations\",\n} as const;\n\n/** Union of the canonical `pw_*` table names. */\nexport type PwTableName = (typeof PW_TABLES)[keyof typeof PW_TABLES];\n\n// ── Shared scalars ───────────────────────────────────────────────────────────\n\n/**\n * Payweave row id: `pwv_<ulid>` strings, unless noted otherwise below. ULID =\n * 26 chars of Crockford base32; decoding is case-insensitive, so both cases\n * are accepted. The exceptions are `pw_webhook_events.dedupe_key` and\n * `pw_migrations.name`, which are natural keys.\n */\nexport const pwIdSchema = z\n  .string()\n  .regex(\n    /^pwv_[0-9A-HJKMNP-TV-Z]{26}$/i,\n    \"expected a Payweave row id — 'pwv_' followed by a 26-char ULID\",\n  );\n\n/**\n * Subscription lifecycle states (`pw_subscriptions.status`).\n */\nexport const pwSubscriptionStatusSchema = z.enum([\n  \"active\",\n  \"past_due\",\n  \"canceled\",\n  \"incomplete\",\n  \"trialing\",\n]);\nexport type PwSubscriptionStatus = z.infer<typeof pwSubscriptionStatusSchema>;\n\n/**\n * Statuses covered by the partial unique index on (`customer_id`, `group`) —\n * at most ONE subscription per customer/group may be in any of these states\n * `subscriptions.getActive` answers from this set.\n */\nexport const PW_ACTIVE_SUBSCRIPTION_STATUSES = [\"active\", \"past_due\", \"trialing\"] as const;\n\n/** Metered-feature reset interval. */\nexport const pwResetIntervalSchema = z.enum([\"day\", \"week\", \"month\", \"year\"]);\nexport type PwResetInterval = z.infer<typeof pwResetIntervalSchema>;\n\n/** Plan price billing interval (`month` or `year`). */\nexport const pwPriceIntervalSchema = z.enum([\"month\", \"year\"]);\nexport type PwPriceInterval = z.infer<typeof pwPriceIntervalSchema>;\n\n/**\n * Default stale-claim window for `webhookEvents.claim`: a\n * claimed-but-unapplied event becomes re-claimable once\n * `now - claimed_at >= staleClaimAfterMs`, so a crashed apply is retried on\n * provider redelivery instead of silently dropped.\n */\nexport const DEFAULT_STALE_CLAIM_AFTER_MS = 60_000;\n\n// ── pw_customers ─────────────────────────────────────────────────────────────\n\n/**\n * `pw_customers` row — maps YOUR user id (`externalId`, unique) to\n * per-provider customer ids.\n */\nexport const pwCustomerSchema = z.object({\n  id: pwIdSchema,\n  /** Your `customerId` — unique across the table. */\n  externalId: z.string().min(1),\n  /** Column `provider_ids` (JSON), e.g. `{ stripe: \"cus_x\", paystack: \"CUS_x\" }`. */\n  providerIds: z.record(z.string().min(1), z.string().min(1)),\n  email: z.string().nullable(),\n  createdAt: z.date(),\n  updatedAt: z.date(),\n});\nexport type PwCustomer = z.infer<typeof pwCustomerSchema>;\n\n/**\n * Input for `customers.upsert` — keyed by `externalId`; provider refs are\n * linked separately via `customers.linkProviderRef`.\n */\nexport const pwCustomerUpsertSchema = z.object({\n  externalId: z.string().min(1),\n  email: z.string().optional(),\n});\nexport type PwCustomerUpsert = z.infer<typeof pwCustomerUpsertSchema>;\n\n// ── pw_plans ─────────────────────────────────────────────────────────────────\n\n/**\n * One resolved feature inclusion inside a plan version's `features` JSON\n * column. Loose objects, by design — unknown keys must survive a round-trip\n * through storage, since future callers may enrich inclusions with extra\n * fields.\n */\nexport const pwFeatureInclusionSchema = z.discriminatedUnion(\"type\", [\n  z.looseObject({ type: z.literal(\"boolean\") }),\n  z.looseObject({\n    type: z.literal(\"metered\"),\n    limit: z.number().int().positive(),\n    reset: pwResetIntervalSchema,\n  }),\n]);\nexport type PwFeatureInclusion = z.infer<typeof pwFeatureInclusionSchema>;\n\n/**\n * `pw_plans` row — an IMMUTABLE plan version pushed from config.\n * Append-only: `plans.pushVersion` never mutates or deletes\n * an existing (`planId`, `version`) row; running app instances keep reading\n * the version they were deployed with.\n */\nexport const pwPlanVersionSchema = z.object({\n  id: pwIdSchema,\n  /** The config-side plan id (`plan()`'s `id`), unique together with `version`. */\n  planId: z.string().min(1),\n  version: z.number().int().positive(),\n  group: z.string().min(1),\n  isDefault: z.boolean(),\n  name: z.string().nullable(),\n  /** Integer minor units — no floats ever (golden rule 7). `null` = free plan. */\n  priceMinor: z.number().int().nonnegative().nullable(),\n  priceCurrency: z.string().nullable(),\n  priceInterval: pwPriceIntervalSchema.nullable(),\n  /** Column `features` (JSON) — resolved includes, keyed by feature id. */\n  features: z.record(z.string().min(1), pwFeatureInclusionSchema),\n  /**\n   * Column `provider_refs` (JSON), e.g.\n   * `{ stripe: { productId, priceId }, paystack: { planCode } }` — filled in\n   * by billing sync (`payweave push`).\n   */\n  providerRefs: z.record(z.string().min(1), z.record(z.string().min(1), z.string().min(1))),\n  pushedAt: z.date(),\n});\nexport type PwPlanVersion = z.infer<typeof pwPlanVersionSchema>;\n\n/**\n * Input for `plans.pushVersion` — the adapter assigns `id`, the next\n * `version`, and `pushedAt` (append-only versioning).\n */\nexport const pwPlanVersionInputSchema = pwPlanVersionSchema.omit({\n  id: true,\n  version: true,\n  pushedAt: true,\n});\nexport type PwPlanVersionInput = z.infer<typeof pwPlanVersionInputSchema>;\n\n// ── pw_subscriptions ─────────────────────────────────────────────────────────\n\n/**\n * `pw_subscriptions` row — one active row per (customer, group).\n * The default plan produces NO subscription row; \"customer\n * is on `free`\" is computed at read time.\n *\n * `provider` and `providerSubscriptionRef` are nullable: a free\n * (non-default) plan is \"recorded locally, no provider object\", so a local\n * activation has no provider ref to store.\n */\nexport const pwSubscriptionSchema = z.object({\n  id: pwIdSchema,\n  /** FK → `pw_customers.id` (the `pwv_` id, NOT your external id). */\n  customerId: pwIdSchema,\n  planId: z.string().min(1),\n  planVersion: z.number().int().positive(),\n  group: z.string().min(1),\n  status: pwSubscriptionStatusSchema,\n  provider: z.string().min(1).nullable(),\n  providerSubscriptionRef: z.string().min(1).nullable(),\n  currentPeriodStart: z.date(),\n  currentPeriodEnd: z.date(),\n  cancelAtPeriodEnd: z.boolean(),\n  createdAt: z.date(),\n  updatedAt: z.date(),\n});\nexport type PwSubscription = z.infer<typeof pwSubscriptionSchema>;\n\n/** Input for `subscriptions.create` — the adapter assigns `id` + timestamps. */\nexport const pwSubscriptionInputSchema = pwSubscriptionSchema.omit({\n  id: true,\n  createdAt: true,\n  updatedAt: true,\n});\nexport type PwSubscriptionInput = z.infer<typeof pwSubscriptionInputSchema>;\n\n/**\n * Patch for `subscriptions.update`. A subscription never moves across\n * customers or groups — plan changes patch `planId`/`planVersion`/`status`\n * and period bounds on the SAME row.\n */\nexport const pwSubscriptionPatchSchema = pwSubscriptionInputSchema\n  .omit({ customerId: true, group: true })\n  .partial();\nexport type PwSubscriptionPatch = z.infer<typeof pwSubscriptionPatchSchema>;\n\n// ── pw_feature_balances ──────────────────────────────────────────────────────\n\n/**\n * `pw_feature_balances` row — metered usage state with lazy reset. Unique\n * per (`customerId`, `featureId`, `group`).\n *\n * `used` is a plain integer, NOT non-negative: unconditional `consume` (the\n * `report` path) may push a balance below zero by design. All period math\n * derives from `anchor` — never from a previously computed (clamped)\n * `periodStart`.\n */\nexport const pwFeatureBalanceSchema = z.object({\n  id: pwIdSchema,\n  /** FK → `pw_customers.id`. */\n  customerId: pwIdSchema,\n  featureId: z.string().min(1),\n  group: z.string().min(1),\n  used: z.number().int(),\n  limit: z.number().int().nonnegative(),\n  resetInterval: pwResetIntervalSchema,\n  /** Billing-cycle anchor — the origin of ALL period arithmetic. */\n  anchor: z.date(),\n  periodStart: z.date(),\n  periodEnd: z.date(),\n  planId: z.string().min(1),\n  planVersion: z.number().int().positive(),\n  updatedAt: z.date(),\n});\nexport type PwFeatureBalance = z.infer<typeof pwFeatureBalanceSchema>;\n\n/**\n * Row template for `balances.consume`'s lazy creation and for\n * `balances.resetTo` (plan changes). Only the underivable fields: the adapter\n * derives `used` (starts at 0), the current `periodStart`/`periodEnd` (from\n * `anchor` + `resetInterval` + `now`), and `updatedAt`.\n */\nexport const pwFeatureBalanceInitSchema = z.object({\n  limit: z.number().int().nonnegative(),\n  resetInterval: pwResetIntervalSchema,\n  anchor: z.date(),\n  planId: z.string().min(1),\n  planVersion: z.number().int().positive(),\n});\nexport type PwFeatureBalanceInit = z.infer<typeof pwFeatureBalanceInitSchema>;\n\n// ── pw_webhook_events ────────────────────────────────────────────────────────\n\n/**\n * `pw_webhook_events` row — the idempotency gate for `event.apply()`.\n * `dedupeKey` is the primary key (a natural key, not a\n * `pwv_` id); `claimedAt`/`appliedAt` drive the once-only + stale-claim\n * semantics of `webhookEvents.claim`.\n */\nexport const pwWebhookEventSchema = z.object({\n  dedupeKey: z.string().min(1),\n  provider: z.string().min(1),\n  type: z.string().min(1),\n  receivedAt: z.date(),\n  claimedAt: z.date().nullable(),\n  appliedAt: z.date().nullable(),\n});\nexport type PwWebhookEvent = z.infer<typeof pwWebhookEventSchema>;\n\n// ── pw_migrations ────────────────────────────────────────────────────────────\n\n/**\n * `pw_migrations` row — migration ledger for SQL adapters.\n * `name` is the primary key; a checksum mismatch on an applied migration\n * fails loudly (never re-run mutated history).\n */\nexport const pwMigrationRecordSchema = z.object({\n  name: z.string().min(1),\n  appliedAt: z.date(),\n  checksum: z.string().min(1),\n});\nexport type PwMigrationRecord = z.infer<typeof pwMigrationRecordSchema>;\n"]}

package/dist/chunk-NXQBP35U.js

@@ -0,0 +1,13 @@
+import { createHmac, timingSafeEqual } from 'crypto';
+
+// src/webhooks/paystack.ts
+function verifyPaystack(rawBody, signatureHeader, secret) {
+  const digest = createHmac("sha512", secret).update(rawBody).digest("hex");
+  const expected = Buffer.from(digest, "utf8");
+  const received = Buffer.from(signatureHeader ?? "", "utf8");
+  return expected.length === received.length && timingSafeEqual(expected, received);
+}
+
+export { verifyPaystack };
+//# sourceMappingURL=chunk-NXQBP35U.js.map
+//# sourceMappingURL=chunk-NXQBP35U.js.map

package/dist/chunk-NXQBP35U.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/webhooks/paystack.ts"],"names":[],"mappings":";;;AAeO,SAAS,cAAA,CACd,OAAA,EACA,eAAA,EACA,MAAA,EACS;AACT,EAAA,MAAM,MAAA,GAAS,WAAW,QAAA,EAAU,MAAM,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AACxE,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,MAAM,CAAA;AAC3C,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,eAAA,IAAmB,IAAI,MAAM,CAAA;AAC1D,EAAA,OAAO,SAAS,MAAA,KAAW,QAAA,CAAS,MAAA,IAAU,eAAA,CAAgB,UAAU,QAAQ,CAAA;AAClF","file":"chunk-NXQBP35U.js","sourcesContent":["/**\n * Paystack webhook verification. HMAC-SHA512 over the RAW request\n * body, hex digest, keyed with the API secret key. Timing-safe with a\n * length-guard; fails closed on a missing/short header.\n *\n * Docs: https://paystack.com/docs/payments/webhooks/#verify-event-origin\n */\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\n/**\n * @param rawBody - Exact received bytes (never a re-serialized object).\n * @param signatureHeader - Value of the `x-paystack-signature` header.\n * @param secret - Paystack API secret key (`sk_live_*` / `sk_test_*`).\n * @returns `true` iff the signature matches; `false` otherwise (never throws).\n */\nexport function verifyPaystack(\n  rawBody: string | Uint8Array,\n  signatureHeader: string | null | undefined,\n  secret: string,\n): boolean {\n  const digest = createHmac(\"sha512\", secret).update(rawBody).digest(\"hex\");\n  const expected = Buffer.from(digest, \"utf8\");\n  const received = Buffer.from(signatureHeader ?? \"\", \"utf8\");\n  return expected.length === received.length && timingSafeEqual(expected, received);\n}\n"]}

package/dist/chunk-QJHXDZYC.js

@@ -0,0 +1,412 @@
+import { PW_TABLES, PW_ACTIVE_SUBSCRIPTION_STATUSES } from './chunk-NV3MZF7L.js';
+import { PayweaveError } from './chunk-HTRGMZFH.js';
+import { createHash } from 'crypto';
+
+// src/db/migrations/errors.ts
+var PayweaveMigrationError = class extends PayweaveError {
+  constructor(message, options = {}) {
+    super(message, { isRetryable: false, ...options });
+    this.name = "PayweaveMigrationError";
+  }
+};
+var PayweaveMigrationHistoryError = class extends PayweaveMigrationError {
+  /** The ledger `name` (= embedded migration `id`) that failed verification. */
+  migrationId;
+  reason;
+  constructor(message, details, options = {}) {
+    super(message, options);
+    this.name = "PayweaveMigrationHistoryError";
+    this.migrationId = details.migrationId;
+    this.reason = details.reason;
+  }
+  toJSON() {
+    return { ...super.toJSON(), migrationId: this.migrationId, reason: this.reason };
+  }
+};
+
+// src/db/migrations/ledger.ts
+var MIGRATION_LEDGER_TABLE = PW_TABLES.migrations;
+function ledgerEnsureSql(dialect) {
+  switch (dialect) {
+    case "postgres":
+      return `CREATE TABLE IF NOT EXISTS ${MIGRATION_LEDGER_TABLE} (
+  name TEXT PRIMARY KEY,
+  applied_at TIMESTAMPTZ NOT NULL,
+  checksum TEXT NOT NULL
+)`;
+    case "mysql":
+      return `CREATE TABLE IF NOT EXISTS ${MIGRATION_LEDGER_TABLE} (
+  name VARCHAR(255) NOT NULL,
+  applied_at DATETIME(3) NOT NULL,
+  checksum VARCHAR(255) NOT NULL,
+  PRIMARY KEY (name)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`;
+    case "sqlite":
+      return `CREATE TABLE IF NOT EXISTS ${MIGRATION_LEDGER_TABLE} (
+  name TEXT PRIMARY KEY,
+  applied_at INTEGER NOT NULL,
+  checksum TEXT NOT NULL
+)`;
+  }
+}
+function ledgerSelectSql(dialect) {
+  return `SELECT name, checksum FROM ${MIGRATION_LEDGER_TABLE} ORDER BY name`;
+}
+function ledgerInsertSql(dialect) {
+  const placeholders = dialect === "postgres" ? "$1, $2, $3" : "?, ?, ?";
+  return `INSERT INTO ${MIGRATION_LEDGER_TABLE} (name, applied_at, checksum) VALUES (${placeholders})`;
+}
+function ledgerInsertParams(dialect, migrationId, checksum, appliedAt) {
+  return [migrationId, dialect === "sqlite" ? appliedAt.getTime() : appliedAt, checksum];
+}
+
+// src/db/migrations/ddl.ts
+var ACTIVE_STATUS_SQL_LIST = PW_ACTIVE_SUBSCRIPTION_STATUSES.map((s) => `'${s}'`).join(", ");
+var freezeSql = (statements) => Object.freeze([...statements]);
+var POSTGRES_INIT_STATEMENTS = freezeSql([
+  ledgerEnsureSql("postgres"),
+  `CREATE TABLE ${PW_TABLES.customers} (
+  id TEXT PRIMARY KEY,
+  external_id TEXT NOT NULL,
+  provider_ids JSONB NOT NULL,
+  email TEXT,
+  created_at TIMESTAMPTZ NOT NULL,
+  updated_at TIMESTAMPTZ NOT NULL,
+  CONSTRAINT pw_customers_external_id_uq UNIQUE (external_id)
+)`,
+  `CREATE TABLE ${PW_TABLES.plans} (
+  id TEXT PRIMARY KEY,
+  plan_id TEXT NOT NULL,
+  version INTEGER NOT NULL,
+  "group" TEXT NOT NULL,
+  is_default BOOLEAN NOT NULL,
+  name TEXT,
+  price_minor BIGINT,
+  price_currency TEXT,
+  price_interval TEXT,
+  features JSONB NOT NULL,
+  provider_refs JSONB NOT NULL,
+  pushed_at TIMESTAMPTZ NOT NULL,
+  CONSTRAINT pw_plans_plan_id_version_uq UNIQUE (plan_id, version)
+)`,
+  `CREATE TABLE ${PW_TABLES.subscriptions} (
+  id TEXT PRIMARY KEY,
+  customer_id TEXT NOT NULL,
+  plan_id TEXT NOT NULL,
+  plan_version INTEGER NOT NULL,
+  "group" TEXT NOT NULL,
+  status TEXT NOT NULL,
+  provider TEXT,
+  provider_subscription_ref TEXT,
+  current_period_start TIMESTAMPTZ NOT NULL,
+  current_period_end TIMESTAMPTZ NOT NULL,
+  cancel_at_period_end BOOLEAN NOT NULL,
+  created_at TIMESTAMPTZ NOT NULL,
+  updated_at TIMESTAMPTZ NOT NULL,
+  CONSTRAINT pw_subscriptions_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id)
+)`,
+  `CREATE UNIQUE INDEX pw_subscriptions_active_uq
+  ON ${PW_TABLES.subscriptions} (customer_id, "group")
+  WHERE status IN (${ACTIVE_STATUS_SQL_LIST})`,
+  `CREATE TABLE ${PW_TABLES.featureBalances} (
+  id TEXT PRIMARY KEY,
+  customer_id TEXT NOT NULL,
+  feature_id TEXT NOT NULL,
+  "group" TEXT NOT NULL,
+  used BIGINT NOT NULL,
+  "limit" BIGINT NOT NULL,
+  reset_interval TEXT NOT NULL,
+  anchor TIMESTAMPTZ NOT NULL,
+  period_start TIMESTAMPTZ NOT NULL,
+  period_end TIMESTAMPTZ NOT NULL,
+  plan_id TEXT NOT NULL,
+  plan_version INTEGER NOT NULL,
+  updated_at TIMESTAMPTZ NOT NULL,
+  CONSTRAINT pw_feature_balances_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id),
+  CONSTRAINT pw_feature_balances_customer_feature_group_uq UNIQUE (customer_id, feature_id, "group")
+)`,
+  `CREATE TABLE ${PW_TABLES.webhookEvents} (
+  dedupe_key TEXT PRIMARY KEY,
+  provider TEXT NOT NULL,
+  type TEXT NOT NULL,
+  received_at TIMESTAMPTZ NOT NULL,
+  claimed_at TIMESTAMPTZ,
+  applied_at TIMESTAMPTZ
+)`
+]);
+var MYSQL_INIT_STATEMENTS = freezeSql([
+  ledgerEnsureSql("mysql"),
+  `CREATE TABLE ${PW_TABLES.customers} (
+  id VARCHAR(255) NOT NULL,
+  external_id VARCHAR(255) NOT NULL,
+  provider_ids JSON NOT NULL,
+  email VARCHAR(255) NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  PRIMARY KEY (id),
+  CONSTRAINT pw_customers_external_id_uq UNIQUE (external_id)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,
+  `CREATE TABLE ${PW_TABLES.plans} (
+  id VARCHAR(255) NOT NULL,
+  plan_id VARCHAR(255) NOT NULL,
+  version INT NOT NULL,
+  \`group\` VARCHAR(255) NOT NULL,
+  is_default TINYINT(1) NOT NULL,
+  name VARCHAR(255) NULL,
+  price_minor BIGINT NULL,
+  price_currency VARCHAR(255) NULL,
+  price_interval VARCHAR(255) NULL,
+  features JSON NOT NULL,
+  provider_refs JSON NOT NULL,
+  pushed_at DATETIME(3) NOT NULL,
+  PRIMARY KEY (id),
+  CONSTRAINT pw_plans_plan_id_version_uq UNIQUE (plan_id, version)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,
+  `CREATE TABLE ${PW_TABLES.subscriptions} (
+  id VARCHAR(255) NOT NULL,
+  customer_id VARCHAR(255) NOT NULL,
+  plan_id VARCHAR(255) NOT NULL,
+  plan_version INT NOT NULL,
+  \`group\` VARCHAR(255) NOT NULL,
+  status VARCHAR(255) NOT NULL,
+  provider VARCHAR(255) NULL,
+  provider_subscription_ref VARCHAR(255) NULL,
+  current_period_start DATETIME(3) NOT NULL,
+  current_period_end DATETIME(3) NOT NULL,
+  cancel_at_period_end TINYINT(1) NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  active_slot CHAR(1) GENERATED ALWAYS AS (
+    CASE WHEN status IN (${ACTIVE_STATUS_SQL_LIST}) THEN 'x' ELSE NULL END
+  ) STORED,
+  PRIMARY KEY (id),
+  CONSTRAINT pw_subscriptions_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id),
+  CONSTRAINT pw_subscriptions_active_uq UNIQUE (customer_id, \`group\`, active_slot)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,
+  `CREATE TABLE ${PW_TABLES.featureBalances} (
+  id VARCHAR(255) NOT NULL,
+  customer_id VARCHAR(255) NOT NULL,
+  feature_id VARCHAR(255) NOT NULL,
+  \`group\` VARCHAR(255) NOT NULL,
+  used BIGINT NOT NULL,
+  \`limit\` BIGINT NOT NULL,
+  reset_interval VARCHAR(255) NOT NULL,
+  anchor DATETIME(3) NOT NULL,
+  period_start DATETIME(3) NOT NULL,
+  period_end DATETIME(3) NOT NULL,
+  plan_id VARCHAR(255) NOT NULL,
+  plan_version INT NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  PRIMARY KEY (id),
+  CONSTRAINT pw_feature_balances_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id),
+  CONSTRAINT pw_feature_balances_customer_feature_group_uq UNIQUE (customer_id, feature_id, \`group\`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,
+  `CREATE TABLE ${PW_TABLES.webhookEvents} (
+  dedupe_key VARCHAR(255) NOT NULL,
+  provider VARCHAR(255) NOT NULL,
+  type VARCHAR(255) NOT NULL,
+  received_at DATETIME(3) NOT NULL,
+  claimed_at DATETIME(3) NULL,
+  applied_at DATETIME(3) NULL,
+  PRIMARY KEY (dedupe_key)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`
+]);
+var SQLITE_INIT_STATEMENTS = freezeSql([
+  ledgerEnsureSql("sqlite"),
+  `CREATE TABLE ${PW_TABLES.customers} (
+  id TEXT PRIMARY KEY,
+  external_id TEXT NOT NULL,
+  provider_ids TEXT NOT NULL,
+  email TEXT,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  CONSTRAINT pw_customers_external_id_uq UNIQUE (external_id)
+)`,
+  `CREATE TABLE ${PW_TABLES.plans} (
+  id TEXT PRIMARY KEY,
+  plan_id TEXT NOT NULL,
+  version INTEGER NOT NULL,
+  "group" TEXT NOT NULL,
+  is_default INTEGER NOT NULL CHECK (is_default IN (0, 1)),
+  name TEXT,
+  price_minor INTEGER,
+  price_currency TEXT,
+  price_interval TEXT,
+  features TEXT NOT NULL,
+  provider_refs TEXT NOT NULL,
+  pushed_at INTEGER NOT NULL,
+  CONSTRAINT pw_plans_plan_id_version_uq UNIQUE (plan_id, version)
+)`,
+  `CREATE TABLE ${PW_TABLES.subscriptions} (
+  id TEXT PRIMARY KEY,
+  customer_id TEXT NOT NULL,
+  plan_id TEXT NOT NULL,
+  plan_version INTEGER NOT NULL,
+  "group" TEXT NOT NULL,
+  status TEXT NOT NULL,
+  provider TEXT,
+  provider_subscription_ref TEXT,
+  current_period_start INTEGER NOT NULL,
+  current_period_end INTEGER NOT NULL,
+  cancel_at_period_end INTEGER NOT NULL CHECK (cancel_at_period_end IN (0, 1)),
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  CONSTRAINT pw_subscriptions_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id)
+)`,
+  `CREATE UNIQUE INDEX pw_subscriptions_active_uq
+  ON ${PW_TABLES.subscriptions} (customer_id, "group")
+  WHERE status IN (${ACTIVE_STATUS_SQL_LIST})`,
+  `CREATE TABLE ${PW_TABLES.featureBalances} (
+  id TEXT PRIMARY KEY,
+  customer_id TEXT NOT NULL,
+  feature_id TEXT NOT NULL,
+  "group" TEXT NOT NULL,
+  used INTEGER NOT NULL,
+  "limit" INTEGER NOT NULL,
+  reset_interval TEXT NOT NULL,
+  anchor INTEGER NOT NULL,
+  period_start INTEGER NOT NULL,
+  period_end INTEGER NOT NULL,
+  plan_id TEXT NOT NULL,
+  plan_version INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  CONSTRAINT pw_feature_balances_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id),
+  CONSTRAINT pw_feature_balances_customer_feature_group_uq UNIQUE (customer_id, feature_id, "group")
+)`,
+  `CREATE TABLE ${PW_TABLES.webhookEvents} (
+  dedupe_key TEXT PRIMARY KEY,
+  provider TEXT NOT NULL,
+  type TEXT NOT NULL,
+  received_at INTEGER NOT NULL,
+  claimed_at INTEGER,
+  applied_at INTEGER
+)`
+]);
+
+// src/db/migrations/definitions.ts
+var migration = (id, name, statements) => Object.freeze({ id, name, statements });
+var MIGRATIONS_BY_DIALECT = {
+  postgres: Object.freeze([migration("0001_init", "init", POSTGRES_INIT_STATEMENTS)]),
+  mysql: Object.freeze([migration("0001_init", "init", MYSQL_INIT_STATEMENTS)]),
+  sqlite: Object.freeze([migration("0001_init", "init", SQLITE_INIT_STATEMENTS)])
+};
+function migrationsFor(dialect) {
+  switch (dialect) {
+    case "postgres":
+    case "mysql":
+    case "sqlite":
+      return MIGRATIONS_BY_DIALECT[dialect];
+    default:
+      throw new PayweaveMigrationError(
+        `Unsupported SQL migration dialect ${JSON.stringify(dialect)} \u2014 the Payweave migrations engine covers "postgres", "mysql" and "sqlite" only (docs/v1/database.md \xA74: mongodb/prisma/drizzle have no Payweave-owned SQL migrations).`
+      );
+  }
+}
+
+// src/db/migrations/engine.ts
+function migrationChecksum(migration2) {
+  const hash = createHash("sha256");
+  for (const statement of migration2.statements) {
+    hash.update(statement, "utf8");
+    hash.update("\0", "utf8");
+  }
+  return `sha256:${hash.digest("hex")}`;
+}
+function normalizeMigrationSet(migrations) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const m of migrations) {
+    if (seen.has(m.id)) {
+      throw new PayweaveMigrationError(
+        `Malformed embedded migration set: duplicate migration id "${m.id}".`
+      );
+    }
+    seen.add(m.id);
+    if (m.statements.length === 0 || m.statements.some((s) => s.trim() === "")) {
+      throw new PayweaveMigrationError(
+        `Malformed embedded migration set: migration "${m.id}" has an empty statement list or a blank statement.`
+      );
+    }
+  }
+  return [...migrations].sort((a, b) => a.id < b.id ? -1 : 1);
+}
+async function readVerifiedLedger(executor, dialect, migrations) {
+  await executor.query(ledgerEnsureSql(dialect));
+  const { rows } = await executor.query(ledgerSelectSql());
+  const byId = new Map(migrations.map((m) => [m.id, m]));
+  const applied = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    const name = row["name"];
+    const checksum = row["checksum"];
+    if (typeof name !== "string" || typeof checksum !== "string") {
+      throw new PayweaveMigrationError(
+        `The pw_migrations ledger returned a malformed row (expected string "name" and "checksum" columns) \u2014 got ${JSON.stringify(row)}.`
+      );
+    }
+    const embedded = byId.get(name);
+    if (embedded === void 0) {
+      throw new PayweaveMigrationHistoryError(
+        `Payweave migration history mismatch: the pw_migrations ledger contains "${name}", which is not among the migrations embedded in this build. Refusing to plan or apply against an unknown migration history \u2014 this usually means the database was migrated by a newer Payweave version, or the ledger was edited by hand (docs/v1/database.md \xA74).`,
+        { migrationId: name, reason: "unknown-migration" }
+      );
+    }
+    const expected = migrationChecksum(embedded);
+    if (checksum !== expected) {
+      throw new PayweaveMigrationHistoryError(
+        `Payweave migration "${name}" was modified after it was applied: ledger checksum ${checksum} does not match this build's checksum ${expected}. Applied migrations are immutable \u2014 NEVER edit an applied migration; ship the change as a new migration instead (forward-only, docs/v1/database.md \xA74).`,
+        { migrationId: name, reason: "checksum-mismatch" }
+      );
+    }
+    applied.add(name);
+  }
+  return applied;
+}
+async function planMigrations(executor, dialect, migrations = migrationsFor(dialect)) {
+  const ordered = normalizeMigrationSet(migrations);
+  const appliedSet = await readVerifiedLedger(executor, dialect, ordered);
+  return {
+    pending: ordered.filter((m) => !appliedSet.has(m.id)).map((m) => m.id),
+    applied: ordered.filter((m) => appliedSet.has(m.id)).map((m) => m.id)
+  };
+}
+async function applyMigrations(executor, dialect, migrations = migrationsFor(dialect)) {
+  const ordered = normalizeMigrationSet(migrations);
+  const appliedSet = await readVerifiedLedger(executor, dialect, ordered);
+  const pending = ordered.filter((m) => !appliedSet.has(m.id));
+  const applied = [];
+  for (const migration2 of pending) {
+    const runOne = async (tx) => {
+      for (const [index, statement] of migration2.statements.entries()) {
+        try {
+          await tx.query(statement);
+        } catch (cause) {
+          throw new PayweaveMigrationError(
+            `Payweave migration "${migration2.id}" failed at statement ${index + 1} of ${migration2.statements.length}.`,
+            { cause }
+          );
+        }
+      }
+      try {
+        await tx.query(
+          ledgerInsertSql(dialect),
+          ledgerInsertParams(dialect, migration2.id, migrationChecksum(migration2), /* @__PURE__ */ new Date())
+        );
+      } catch (cause) {
+        throw new PayweaveMigrationError(
+          `Payweave migration "${migration2.id}" executed, but recording it in the pw_migrations ledger failed.`,
+          { cause }
+        );
+      }
+    };
+    if (executor.transaction) {
+      await executor.transaction(runOne);
+    } else {
+      await runOne(executor);
+    }
+    applied.push(migration2.id);
+  }
+  return { applied };
+}
+
+export { applyMigrations, planMigrations };
+//# sourceMappingURL=chunk-QJHXDZYC.js.map
+//# sourceMappingURL=chunk-QJHXDZYC.js.map