payweave 0.0.0

package/dist/chunk-QJHXDZYC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/migrations/errors.ts","../src/db/migrations/ledger.ts","../src/db/migrations/ddl.ts","../src/db/migrations/definitions.ts","../src/db/migrations/engine.ts"],"names":["migration"],"mappings":";;;;;AAcO,IAAM,sBAAA,GAAN,cAAqC,aAAA,CAAc;AAAA,EACxD,WAAA,CAAY,OAAA,EAAiB,OAAA,GAAgC,EAAC,EAAG;AAC/D,IAAA,KAAA,CAAM,SAAS,EAAE,WAAA,EAAa,KAAA,EAAO,GAAG,SAAS,CAAA;AACjD,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AACF,CAAA;AAoBO,IAAM,6BAAA,GAAN,cAA4C,sBAAA,CAAuB;AAAA;AAAA,EAE/D,WAAA;AAAA,EACA,MAAA;AAAA,EAET,WAAA,CACE,OAAA,EACA,OAAA,EACA,OAAA,GAAgC,EAAC,EACjC;AACA,IAAA,KAAA,CAAM,SAAS,OAAO,CAAA;AACtB,IAAA,IAAA,CAAK,IAAA,GAAO,+BAAA;AACZ,IAAA,IAAA,CAAK,cAAc,OAAA,CAAQ,WAAA;AAC3B,IAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,MAAA;AAAA,EACxB;AAAA,EAES,MAAA,GAAkC;AACzC,IAAA,OAAO,EAAE,GAAG,KAAA,CAAM,MAAA,EAAO,EAAG,aAAa,IAAA,CAAK,WAAA,EAAa,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAO;AAAA,EACjF;AACF,CAAA;;;AC1CO,IAAM,yBAAyB,SAAA,CAAU,UAAA;AAMzC,SAAS,gBAAgB,OAAA,EAA+B;AAC7D,EAAA,QAAQ,OAAA;AAAS,IACf,KAAK,UAAA;AACH,MAAA,OAAO,8BAA8B,sBAAsB,CAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAAA,IAK7D,KAAK,OAAA;AACH,MAAA,OAAO,8BAA8B,sBAAsB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2DAAA,CAAA;AAAA,IAM7D,KAAK,QAAA;AACH,MAAA,OAAO,8BAA8B,sBAAsB,CAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAAA;AAMjE;AAMO,SAAS,gBAAgB,OAAA,EAA+B;AAE7D,EAAA,OAAO,8BAA8B,sBAAsB,CAAA,cAAA,CAAA;AAC7D;AAGO,SAAS,gBAAgB,OAAA,EAA+B;AAC7D,EAAA,MAAM,YAAA,GAAe,OAAA,KAAY,UAAA,GAAa,YAAA,GAAe,SAAA;AAC7D,EAAA,OAAO,CAAA,YAAA,EAAe,sBAAsB,CAAA,sCAAA,EAAyC,YAAY,CAAA,CAAA,CAAA;AACnG;AAMO,SAAS,kBAAA,CACd,OAAA,EACA,WAAA,EACA,QAAA,EACA,SAAA,EACoB;AACpB,EAAA,OAAO,CAAC,aAAa,OAAA,KAAY,QAAA,GAAW,UAAU,OAAA,EAAQ,GAAI,WAAW,QAAQ,CAAA;AACvF;;;ACjBA,IAAM,sBAAA,GAAyB,+BAAA,CAAgC,GAAA,CAAI,CAAC,CAAA,KAAM,IAAI,CAAC,CAAA,CAAA,CAAG,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AAE7F,IAAM,SAAA,GAAY,CAAC,UAAA,KACjB,MAAA,CAAO,OAAO,CAAC,GAAG,UAAU,CAAC,CAAA;AAKxB,IAAM,2BAA8C,SAAA,CAAU;AAAA,EACnE,gBAAgB,UAAU,CAAA;AAAA,EAC1B,CAAA,aAAA,EAAgB,UAAU,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAAA,EASnC,CAAA,aAAA,EAAgB,UAAU,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAAA,EAe/B,CAAA,aAAA,EAAgB,UAAU,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kFAAA,EAc2C,UAAU,SAAS,CAAA;AAAA,CAAA,CAAA;AAAA,EAErG,CAAA;AAAA,KAAA,EACK,UAAU,aAAa,CAAA;AAAA,mBAAA,EACT,sBAAsB,CAAA,CAAA,CAAA;AAAA,EACzC,CAAA,aAAA,EAAgB,UAAU,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qFAAA,EAc4C,UAAU,SAAS,CAAA;AAAA;AAAA,CAAA,CAAA;AAAA,EAGxG,CAAA,aAAA,EAAgB,UAAU,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQzC,CAAC,CAAA;AAKM,IAAM,wBAA2C,SAAA,CAAU;AAAA,EAChE,gBAAgB,OAAO,CAAA;AAAA,EACvB,CAAA,aAAA,EAAgB,UAAU,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2DAAA,CAAA;AAAA,EAUnC,CAAA,aAAA,EAAgB,UAAU,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2DAAA,CAAA;AAAA,EAgB/B,CAAA,aAAA,EAAgB,UAAU,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAA,EAed,sBAAsB,CAAA;AAAA;AAAA;AAAA,kFAAA,EAGmC,UAAU,SAAS,CAAA;AAAA;AAAA,2DAAA,CAAA;AAAA,EAGrG,CAAA,aAAA,EAAgB,UAAU,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qFAAA,EAe4C,UAAU,SAAS,CAAA;AAAA;AAAA,2DAAA,CAAA;AAAA,EAGxG,CAAA,aAAA,EAAgB,UAAU,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2DAAA;AASzC,CAAC,CAAA;AAKM,IAAM,yBAA4C,SAAA,CAAU;AAAA,EACjE,gBAAgB,QAAQ,CAAA;AAAA,EACxB,CAAA,aAAA,EAAgB,UAAU,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAAA,EASnC,CAAA,aAAA,EAAgB,UAAU,KAAK,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAAA,EAe/B,CAAA,aAAA,EAAgB,UAAU,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kFAAA,EAc2C,UAAU,SAAS,CAAA;AAAA,CAAA,CAAA;AAAA,EAErG,CAAA;AAAA,KAAA,EACK,UAAU,aAAa,CAAA;AAAA,mBAAA,EACT,sBAAsB,CAAA,CAAA,CAAA;AAAA,EACzC,CAAA,aAAA,EAAgB,UAAU,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qFAAA,EAc4C,UAAU,SAAS,CAAA;AAAA;AAAA,CAAA,CAAA;AAAA,EAGxG,CAAA,aAAA,EAAgB,UAAU,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAQzC,CAAC,CAAA;;;AClRD,IAAM,SAAA,GAAY,CAChB,EAAA,EACA,IAAA,EACA,UAAA,KACmB,MAAA,CAAO,MAAA,CAAO,EAAE,EAAA,EAAI,IAAA,EAAM,UAAA,EAAY,CAAA;AAQ3D,IAAM,qBAAA,GAAyE;AAAA,EAC7E,QAAA,EAAU,OAAO,MAAA,CAAO,CAAC,UAAU,WAAA,EAAa,MAAA,EAAQ,wBAAwB,CAAC,CAAC,CAAA;AAAA,EAClF,KAAA,EAAO,OAAO,MAAA,CAAO,CAAC,UAAU,WAAA,EAAa,MAAA,EAAQ,qBAAqB,CAAC,CAAC,CAAA;AAAA,EAC5E,MAAA,EAAQ,OAAO,MAAA,CAAO,CAAC,UAAU,WAAA,EAAa,MAAA,EAAQ,sBAAsB,CAAC,CAAC;AAChF,CAAA;AASO,SAAS,cAAc,OAAA,EAAkD;AAC9E,EAAA,QAAQ,OAAA;AAAS,IACf,KAAK,UAAA;AAAA,IACL,KAAK,OAAA;AAAA,IACL,KAAK,QAAA;AACH,MAAA,OAAO,sBAAsB,OAAO,CAAA;AAAA,IACtC;AACE,MAAA,MAAM,IAAI,sBAAA;AAAA,QACR,CAAA,kCAAA,EAAqC,IAAA,CAAK,SAAA,CAAU,OAAuB,CAAC,CAAA,8KAAA;AAAA,OAG9E;AAAA;AAEN;;;ACZO,SAAS,kBAAkBA,UAAAA,EAAuD;AACvF,EAAA,MAAM,IAAA,GAAO,WAAW,QAAQ,CAAA;AAChC,EAAA,KAAA,MAAW,SAAA,IAAaA,WAAU,UAAA,EAAY;AAC5C,IAAA,IAAA,CAAK,MAAA,CAAO,WAAW,MAAM,CAAA;AAC7B,IAAA,IAAA,CAAK,MAAA,CAAO,MAAU,MAAM,CAAA;AAAA,EAC9B;AACA,EAAA,OAAO,CAAA,OAAA,EAAU,IAAA,CAAK,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AACrC;AAOA,SAAS,sBAAsB,UAAA,EAAkE;AAC/F,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,EAAE,CAAA,EAAG;AAClB,MAAA,MAAM,IAAI,sBAAA;AAAA,QACR,CAAA,0DAAA,EAA6D,EAAE,EAAE,CAAA,EAAA;AAAA,OACnE;AAAA,IACF;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,EAAE,EAAE,CAAA;AACb,IAAA,IAAI,CAAA,CAAE,UAAA,CAAW,MAAA,KAAW,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAK,KAAM,EAAE,CAAA,EAAG;AAC1E,MAAA,MAAM,IAAI,sBAAA;AAAA,QACR,CAAA,6CAAA,EAAgD,EAAE,EAAE,CAAA,mDAAA;AAAA,OACtD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,CAAC,GAAG,UAAU,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,EAAG,CAAA,KAAO,CAAA,CAAE,EAAA,GAAK,CAAA,CAAE,EAAA,GAAK,KAAK,CAAE,CAAA;AAC9D;AAQA,eAAe,kBAAA,CACb,QAAA,EACA,OAAA,EACA,UAAA,EAC8B;AAC9B,EAAA,MAAM,QAAA,CAAS,KAAA,CAAM,eAAA,CAAgB,OAAO,CAAC,CAAA;AAC7C,EAAA,MAAM,EAAE,MAAK,GAAI,MAAM,SAAS,KAAA,CAAM,eAAA,CAAuB,CAAC,CAAA;AAE9D,EAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,EAAA,EAAI,CAAC,CAAC,CAAC,CAAA;AACrD,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAChC,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,IAAA,GAAO,IAAI,MAAM,CAAA;AACvB,IAAA,MAAM,QAAA,GAAW,IAAI,UAAU,CAAA;AAC/B,IAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,OAAO,aAAa,QAAA,EAAU;AAC5D,MAAA,MAAM,IAAI,sBAAA;AAAA,QACR,CAAA,6GAAA,EAA2G,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC,CAAA,CAAA;AAAA,OAChI;AAAA,IACF;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA;AAC9B,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,MAAM,IAAI,6BAAA;AAAA,QACR,2EAA2E,IAAI,CAAA,0QAAA,CAAA;AAAA,QAI/E,EAAE,WAAA,EAAa,IAAA,EAAM,MAAA,EAAQ,mBAAA;AAAoB,OACnD;AAAA,IACF;AACA,IAAA,MAAM,QAAA,GAAW,kBAAkB,QAAQ,CAAA;AAC3C,IAAA,IAAI,aAAa,QAAA,EAAU;AACzB,MAAA,MAAM,IAAI,6BAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,IAAI,CAAA,qDAAA,EACtB,QAAQ,yCAAyC,QAAQ,CAAA,gKAAA,CAAA;AAAA,QAG9D,EAAE,WAAA,EAAa,IAAA,EAAM,MAAA,EAAQ,mBAAA;AAAoB,OACnD;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,IAAI,IAAI,CAAA;AAAA,EAClB;AACA,EAAA,OAAO,OAAA;AACT;AAeA,eAAsB,eACpB,QAAA,EACA,OAAA,EACA,UAAA,GAAwC,aAAA,CAAc,OAAO,CAAA,EACV;AACnD,EAAA,MAAM,OAAA,GAAU,sBAAsB,UAAU,CAAA;AAChD,EAAA,MAAM,UAAA,GAAa,MAAM,kBAAA,CAAmB,QAAA,EAAU,SAAS,OAAO,CAAA;AACtE,EAAA,OAAO;AAAA,IACL,SAAS,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,UAAA,CAAW,GAAA,CAAI,CAAA,CAAE,EAAE,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE,CAAA;AAAA,IACrE,OAAA,EAAS,OAAA,CAAQ,MAAA,CAAO,CAAC,MAAM,UAAA,CAAW,GAAA,CAAI,CAAA,CAAE,EAAE,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE;AAAA,GACtE;AACF;AAqBA,eAAsB,gBACpB,QAAA,EACA,OAAA,EACA,UAAA,GAAwC,aAAA,CAAc,OAAO,CAAA,EAC7B;AAChC,EAAA,MAAM,OAAA,GAAU,sBAAsB,UAAU,CAAA;AAChD,EAAA,MAAM,UAAA,GAAa,MAAM,kBAAA,CAAmB,QAAA,EAAU,SAAS,OAAO,CAAA;AACtE,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,UAAA,CAAW,GAAA,CAAI,CAAA,CAAE,EAAE,CAAC,CAAA;AAE3D,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAWA,cAAa,OAAA,EAAS;AAC/B,IAAA,MAAM,MAAA,GAAS,OAAO,EAAA,KAAyC;AAC7D,MAAA,KAAA,MAAW,CAAC,KAAA,EAAO,SAAS,KAAKA,UAAAA,CAAU,UAAA,CAAW,SAAQ,EAAG;AAC/D,QAAA,IAAI;AACF,UAAA,MAAM,EAAA,CAAG,MAAM,SAAS,CAAA;AAAA,QAC1B,SAAS,KAAA,EAAO;AACd,UAAA,MAAM,IAAI,sBAAA;AAAA,YACR,CAAA,oBAAA,EAAuBA,WAAU,EAAE,CAAA,sBAAA,EAAyB,QAAQ,CAAC,CAAA,IAAA,EAAOA,UAAAA,CAAU,UAAA,CAAW,MAAM,CAAA,CAAA,CAAA;AAAA,YACvG,EAAE,KAAA;AAAM,WACV;AAAA,QACF;AAAA,MACF;AACA,MAAA,IAAI;AACF,QAAA,MAAM,EAAA,CAAG,KAAA;AAAA,UACP,gBAAgB,OAAO,CAAA;AAAA,UACvB,kBAAA,CAAmB,SAASA,UAAAA,CAAU,EAAA,EAAI,kBAAkBA,UAAS,CAAA,kBAAG,IAAI,IAAA,EAAM;AAAA,SACpF;AAAA,MACF,SAAS,KAAA,EAAO;AACd,QAAA,MAAM,IAAI,sBAAA;AAAA,UACR,CAAA,oBAAA,EAAuBA,WAAU,EAAE,CAAA,gEAAA,CAAA;AAAA,UACnC,EAAE,KAAA;AAAM,SACV;AAAA,MACF;AAAA,IACF,CAAA;AAEA,IAAA,IAAI,SAAS,WAAA,EAAa;AACxB,MAAA,MAAM,QAAA,CAAS,YAAY,MAAM,CAAA;AAAA,IACnC,CAAA,MAAO;AACL,MAAA,MAAM,OAAO,QAAQ,CAAA;AAAA,IACvB;AACA,IAAA,OAAA,CAAQ,IAAA,CAAKA,WAAU,EAAE,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,EAAE,OAAA,EAAQ;AACnB","file":"chunk-QJHXDZYC.js","sourcesContent":["/**\n * Error classes thrown by the SQL migrations engine (docs/v1/database.md §4,\n * PW-703). Both extend {@link PayweaveError} so adapter `migrations.status()`\n * / `migrations.apply()` methods satisfy the golden rule that public SDK\n * methods only ever throw `PayweaveError` subclasses.\n */\nimport { PayweaveError, type PayweaveErrorOptions } from \"../../core/errors\";\n\n/**\n * Base class for every failure the SQL migrations engine raises itself:\n * execution failures (with the driver error as `cause`), malformed embedded\n * migration sets, malformed ledger rows, unsupported dialects. Never\n * retryable — migrations are operator actions, not hot-path calls.\n */\nexport class PayweaveMigrationError extends PayweaveError {\n  constructor(message: string, options: PayweaveErrorOptions = {}) {\n    super(message, { isRetryable: false, ...options });\n    this.name = \"PayweaveMigrationError\";\n  }\n}\n\n/** Why a {@link PayweaveMigrationHistoryError} was raised. */\nexport type PwMigrationHistoryErrorReason = \"checksum-mismatch\" | \"unknown-migration\";\n\n/**\n * Mutated-history detection (database.md §4 — \"never re-run mutated\n * history\"). Raised by BOTH `planMigrations` and `applyMigrations` when the\n * `pw_migrations` ledger disagrees with the migrations embedded in this\n * build:\n *\n * - `\"checksum-mismatch\"` — an applied migration's recorded checksum no\n *   longer matches the embedded content: someone edited an applied migration.\n * - `\"unknown-migration\"` — the ledger names a migration this build does not\n *   embed: the database was migrated by a different/newer build, or the\n *   ledger was edited by hand.\n *\n * The engine refuses to plan or apply ANYTHING once history is inconsistent;\n * there is no override flag by design.\n */\nexport class PayweaveMigrationHistoryError extends PayweaveMigrationError {\n  /** The ledger `name` (= embedded migration `id`) that failed verification. */\n  readonly migrationId: string;\n  readonly reason: PwMigrationHistoryErrorReason;\n\n  constructor(\n    message: string,\n    details: { migrationId: string; reason: PwMigrationHistoryErrorReason },\n    options: PayweaveErrorOptions = {},\n  ) {\n    super(message, options);\n    this.name = \"PayweaveMigrationHistoryError\";\n    this.migrationId = details.migrationId;\n    this.reason = details.reason;\n  }\n\n  override toJSON(): Record<string, unknown> {\n    return { ...super.toJSON(), migrationId: this.migrationId, reason: this.reason };\n  }\n}\n","/**\n * `pw_migrations` checksum-ledger SQL (docs/v1/database.md §2/§4, PW-703).\n * One row per applied migration: `name` (PK — the embedded migration's `id`),\n * `applied_at`, `checksum`. The engine bootstraps the ledger with\n * `CREATE TABLE IF NOT EXISTS` before every read, and `0001_init` embeds the\n * SAME statement so the DDL set alone realizes the full §2 schema.\n *\n * Placeholder + parameter conventions (kept here so PW-704/705/706 executors\n * stay pass-through): postgres uses `$1…`, mysql/sqlite use `?`; `applied_at`\n * binds a `Date` on postgres/mysql and an epoch-millisecond integer on sqlite\n * (sqlite stores all timestamps as `INTEGER` epoch ms — see `./ddl`).\n */\nimport { PW_TABLES } from \"../schema\";\nimport type { PwSqlDialect } from \"./types\";\n\n/** Canonical ledger table name (`pw_migrations`). */\nexport const MIGRATION_LEDGER_TABLE = PW_TABLES.migrations;\n\n/**\n * Idempotent ledger bootstrap. Also embedded verbatim as the first statement\n * of `0001_init`, where re-execution is a no-op.\n */\nexport function ledgerEnsureSql(dialect: PwSqlDialect): string {\n  switch (dialect) {\n    case \"postgres\":\n      return `CREATE TABLE IF NOT EXISTS ${MIGRATION_LEDGER_TABLE} (\n  name TEXT PRIMARY KEY,\n  applied_at TIMESTAMPTZ NOT NULL,\n  checksum TEXT NOT NULL\n)`;\n    case \"mysql\":\n      return `CREATE TABLE IF NOT EXISTS ${MIGRATION_LEDGER_TABLE} (\n  name VARCHAR(255) NOT NULL,\n  applied_at DATETIME(3) NOT NULL,\n  checksum VARCHAR(255) NOT NULL,\n  PRIMARY KEY (name)\n) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`;\n    case \"sqlite\":\n      return `CREATE TABLE IF NOT EXISTS ${MIGRATION_LEDGER_TABLE} (\n  name TEXT PRIMARY KEY,\n  applied_at INTEGER NOT NULL,\n  checksum TEXT NOT NULL\n)`;\n  }\n}\n\n/**\n * Full ledger read for history verification. Identical text on every dialect\n * (no parameters); ordered for deterministic output.\n */\nexport function ledgerSelectSql(dialect: PwSqlDialect): string {\n  void dialect; // Same shape everywhere today; keeps the call sites uniform.\n  return `SELECT name, checksum FROM ${MIGRATION_LEDGER_TABLE} ORDER BY name`;\n}\n\n/** Ledger append for one applied migration; see {@link ledgerInsertParams}. */\nexport function ledgerInsertSql(dialect: PwSqlDialect): string {\n  const placeholders = dialect === \"postgres\" ? \"$1, $2, $3\" : \"?, ?, ?\";\n  return `INSERT INTO ${MIGRATION_LEDGER_TABLE} (name, applied_at, checksum) VALUES (${placeholders})`;\n}\n\n/**\n * Parameters for {@link ledgerInsertSql}, in column order\n * (`name`, `applied_at`, `checksum`). sqlite binds `applied_at` as epoch ms.\n */\nexport function ledgerInsertParams(\n  dialect: PwSqlDialect,\n  migrationId: string,\n  checksum: string,\n  appliedAt: Date,\n): readonly unknown[] {\n  return [migrationId, dialect === \"sqlite\" ? appliedAt.getTime() : appliedAt, checksum];\n}\n","/**\n * Embedded DDL for migration `0001_init` — the full docs/v1/database.md §2\n * logical schema, per dialect. These string constants ARE the\n * migration content: they are hashed byte-for-byte into the `pw_migrations`\n * checksum, so **once `0001_init` has been applied anywhere it is immutable\n * forever** — even a whitespace edit is mutated history and makes every\n * existing database fail loudly. Schema changes ship as\n * `0002_...`, never as edits here. Forward-only: no down migrations exist.\n *\n * Per-dialect storage mapping (build-time resolutions, recorded in\n * database.md §4):\n *\n * | logical            | postgres      | mysql                      | sqlite            |\n * |--------------------|---------------|----------------------------|-------------------|\n * | timestamp (UTC)    | `TIMESTAMPTZ` | `DATETIME(3)` (UTC session)| `INTEGER` epoch ms|\n * | JSON               | `JSONB`       | `JSON`                     | `TEXT`            |\n * | boolean            | `BOOLEAN`     | `TINYINT(1)`               | `INTEGER` 0|1     |\n * | money/usage int    | `BIGINT`      | `BIGINT`                   | `INTEGER` (64-bit)|\n * | id / key string    | `TEXT`        | `VARCHAR(255)`             | `TEXT`            |\n *\n * - NO float/decimal column exists anywhere — money is integer minor units +\n *   currency code (golden rule 7 applies to storage; database.md §2).\n * - MySQL sessions must run in UTC (`time_zone = '+00:00'`) — PW-705 forces\n *   this in the pool config; `DATETIME` has no zone of its own.\n * - MySQL tables are `utf8mb4` with BINARY collation (`utf8mb4_bin`) so key\n *   comparisons stay case-sensitive, matching postgres/sqlite semantics.\n * - `group` and `limit` are reserved words: quoted `\"...\"` on\n *   postgres/sqlite, `` `...` `` on mysql. Adapters must match this quoting.\n * - sqlite booleans carry `CHECK (col IN (0, 1))` because sqlite is otherwise\n *   dynamically typed; no other CHECK constraints exist (row validity is\n *   enforced by the zod row schemas at the adapter boundary).\n *\n * THE PARTIAL-UNIQUE ACTIVE-SUBSCRIPTION RULE: at most one\n * `pw_subscriptions` row per (`customer_id`, `group`) with `status` in\n * ('active', 'past_due', 'trialing').\n *\n * - postgres + sqlite: native partial unique index\n *   (`CREATE UNIQUE INDEX ... WHERE status IN (...)`).\n * - mysql: NO partial indexes exist, so the rule is emulated with a STORED\n *   generated column `active_slot` — `'x'` when `status` is in the active\n *   set, `NULL` otherwise — plus a composite unique index on\n *   (`customer_id`, `group`, `active_slot`). MySQL unique indexes never\n *   treat NULLs as equal, so inactive rows can pile up freely while a second\n *   active-set row collides. `active_slot` is generated storage: adapters\n *   must NEVER write it (an INSERT that names it errors — that is the DDL\n *   working). Recorded in database.md §4 (PW-703 build-time resolution).\n */\nimport { PW_ACTIVE_SUBSCRIPTION_STATUSES, PW_TABLES } from \"../schema\";\nimport { ledgerEnsureSql } from \"./ledger\";\n\n/**\n * The active-status set of the partial-unique rule, as a SQL `IN (...)` list.\n * Derived from {@link PW_ACTIVE_SUBSCRIPTION_STATUSES} so the DDL can never\n * drift from the contract constant.\n */\nconst ACTIVE_STATUS_SQL_LIST = PW_ACTIVE_SUBSCRIPTION_STATUSES.map((s) => `'${s}'`).join(\", \");\n\nconst freezeSql = (statements: readonly string[]): readonly string[] =>\n  Object.freeze([...statements]);\n\n// ── postgres ─────────────────────────────────────────────────────────────────\n\n/** `0001_init` statements, postgres dialect. IMMUTABLE — see module header. */\nexport const POSTGRES_INIT_STATEMENTS: readonly string[] = freezeSql([\n  ledgerEnsureSql(\"postgres\"),\n  `CREATE TABLE ${PW_TABLES.customers} (\n  id TEXT PRIMARY KEY,\n  external_id TEXT NOT NULL,\n  provider_ids JSONB NOT NULL,\n  email TEXT,\n  created_at TIMESTAMPTZ NOT NULL,\n  updated_at TIMESTAMPTZ NOT NULL,\n  CONSTRAINT pw_customers_external_id_uq UNIQUE (external_id)\n)`,\n  `CREATE TABLE ${PW_TABLES.plans} (\n  id TEXT PRIMARY KEY,\n  plan_id TEXT NOT NULL,\n  version INTEGER NOT NULL,\n  \"group\" TEXT NOT NULL,\n  is_default BOOLEAN NOT NULL,\n  name TEXT,\n  price_minor BIGINT,\n  price_currency TEXT,\n  price_interval TEXT,\n  features JSONB NOT NULL,\n  provider_refs JSONB NOT NULL,\n  pushed_at TIMESTAMPTZ NOT NULL,\n  CONSTRAINT pw_plans_plan_id_version_uq UNIQUE (plan_id, version)\n)`,\n  `CREATE TABLE ${PW_TABLES.subscriptions} (\n  id TEXT PRIMARY KEY,\n  customer_id TEXT NOT NULL,\n  plan_id TEXT NOT NULL,\n  plan_version INTEGER NOT NULL,\n  \"group\" TEXT NOT NULL,\n  status TEXT NOT NULL,\n  provider TEXT,\n  provider_subscription_ref TEXT,\n  current_period_start TIMESTAMPTZ NOT NULL,\n  current_period_end TIMESTAMPTZ NOT NULL,\n  cancel_at_period_end BOOLEAN NOT NULL,\n  created_at TIMESTAMPTZ NOT NULL,\n  updated_at TIMESTAMPTZ NOT NULL,\n  CONSTRAINT pw_subscriptions_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id)\n)`,\n  `CREATE UNIQUE INDEX pw_subscriptions_active_uq\n  ON ${PW_TABLES.subscriptions} (customer_id, \"group\")\n  WHERE status IN (${ACTIVE_STATUS_SQL_LIST})`,\n  `CREATE TABLE ${PW_TABLES.featureBalances} (\n  id TEXT PRIMARY KEY,\n  customer_id TEXT NOT NULL,\n  feature_id TEXT NOT NULL,\n  \"group\" TEXT NOT NULL,\n  used BIGINT NOT NULL,\n  \"limit\" BIGINT NOT NULL,\n  reset_interval TEXT NOT NULL,\n  anchor TIMESTAMPTZ NOT NULL,\n  period_start TIMESTAMPTZ NOT NULL,\n  period_end TIMESTAMPTZ NOT NULL,\n  plan_id TEXT NOT NULL,\n  plan_version INTEGER NOT NULL,\n  updated_at TIMESTAMPTZ NOT NULL,\n  CONSTRAINT pw_feature_balances_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id),\n  CONSTRAINT pw_feature_balances_customer_feature_group_uq UNIQUE (customer_id, feature_id, \"group\")\n)`,\n  `CREATE TABLE ${PW_TABLES.webhookEvents} (\n  dedupe_key TEXT PRIMARY KEY,\n  provider TEXT NOT NULL,\n  type TEXT NOT NULL,\n  received_at TIMESTAMPTZ NOT NULL,\n  claimed_at TIMESTAMPTZ,\n  applied_at TIMESTAMPTZ\n)`,\n]);\n\n// ── mysql ────────────────────────────────────────────────────────────────────\n\n/** `0001_init` statements, mysql dialect. IMMUTABLE — see module header. */\nexport const MYSQL_INIT_STATEMENTS: readonly string[] = freezeSql([\n  ledgerEnsureSql(\"mysql\"),\n  `CREATE TABLE ${PW_TABLES.customers} (\n  id VARCHAR(255) NOT NULL,\n  external_id VARCHAR(255) NOT NULL,\n  provider_ids JSON NOT NULL,\n  email VARCHAR(255) NULL,\n  created_at DATETIME(3) NOT NULL,\n  updated_at DATETIME(3) NOT NULL,\n  PRIMARY KEY (id),\n  CONSTRAINT pw_customers_external_id_uq UNIQUE (external_id)\n) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,\n  `CREATE TABLE ${PW_TABLES.plans} (\n  id VARCHAR(255) NOT NULL,\n  plan_id VARCHAR(255) NOT NULL,\n  version INT NOT NULL,\n  \\`group\\` VARCHAR(255) NOT NULL,\n  is_default TINYINT(1) NOT NULL,\n  name VARCHAR(255) NULL,\n  price_minor BIGINT NULL,\n  price_currency VARCHAR(255) NULL,\n  price_interval VARCHAR(255) NULL,\n  features JSON NOT NULL,\n  provider_refs JSON NOT NULL,\n  pushed_at DATETIME(3) NOT NULL,\n  PRIMARY KEY (id),\n  CONSTRAINT pw_plans_plan_id_version_uq UNIQUE (plan_id, version)\n) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,\n  `CREATE TABLE ${PW_TABLES.subscriptions} (\n  id VARCHAR(255) NOT NULL,\n  customer_id VARCHAR(255) NOT NULL,\n  plan_id VARCHAR(255) NOT NULL,\n  plan_version INT NOT NULL,\n  \\`group\\` VARCHAR(255) NOT NULL,\n  status VARCHAR(255) NOT NULL,\n  provider VARCHAR(255) NULL,\n  provider_subscription_ref VARCHAR(255) NULL,\n  current_period_start DATETIME(3) NOT NULL,\n  current_period_end DATETIME(3) NOT NULL,\n  cancel_at_period_end TINYINT(1) NOT NULL,\n  created_at DATETIME(3) NOT NULL,\n  updated_at DATETIME(3) NOT NULL,\n  active_slot CHAR(1) GENERATED ALWAYS AS (\n    CASE WHEN status IN (${ACTIVE_STATUS_SQL_LIST}) THEN 'x' ELSE NULL END\n  ) STORED,\n  PRIMARY KEY (id),\n  CONSTRAINT pw_subscriptions_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id),\n  CONSTRAINT pw_subscriptions_active_uq UNIQUE (customer_id, \\`group\\`, active_slot)\n) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,\n  `CREATE TABLE ${PW_TABLES.featureBalances} (\n  id VARCHAR(255) NOT NULL,\n  customer_id VARCHAR(255) NOT NULL,\n  feature_id VARCHAR(255) NOT NULL,\n  \\`group\\` VARCHAR(255) NOT NULL,\n  used BIGINT NOT NULL,\n  \\`limit\\` BIGINT NOT NULL,\n  reset_interval VARCHAR(255) NOT NULL,\n  anchor DATETIME(3) NOT NULL,\n  period_start DATETIME(3) NOT NULL,\n  period_end DATETIME(3) NOT NULL,\n  plan_id VARCHAR(255) NOT NULL,\n  plan_version INT NOT NULL,\n  updated_at DATETIME(3) NOT NULL,\n  PRIMARY KEY (id),\n  CONSTRAINT pw_feature_balances_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id),\n  CONSTRAINT pw_feature_balances_customer_feature_group_uq UNIQUE (customer_id, feature_id, \\`group\\`)\n) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,\n  `CREATE TABLE ${PW_TABLES.webhookEvents} (\n  dedupe_key VARCHAR(255) NOT NULL,\n  provider VARCHAR(255) NOT NULL,\n  type VARCHAR(255) NOT NULL,\n  received_at DATETIME(3) NOT NULL,\n  claimed_at DATETIME(3) NULL,\n  applied_at DATETIME(3) NULL,\n  PRIMARY KEY (dedupe_key)\n) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_bin`,\n]);\n\n// ── sqlite ───────────────────────────────────────────────────────────────────\n\n/** `0001_init` statements, sqlite dialect. IMMUTABLE — see module header. */\nexport const SQLITE_INIT_STATEMENTS: readonly string[] = freezeSql([\n  ledgerEnsureSql(\"sqlite\"),\n  `CREATE TABLE ${PW_TABLES.customers} (\n  id TEXT PRIMARY KEY,\n  external_id TEXT NOT NULL,\n  provider_ids TEXT NOT NULL,\n  email TEXT,\n  created_at INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL,\n  CONSTRAINT pw_customers_external_id_uq UNIQUE (external_id)\n)`,\n  `CREATE TABLE ${PW_TABLES.plans} (\n  id TEXT PRIMARY KEY,\n  plan_id TEXT NOT NULL,\n  version INTEGER NOT NULL,\n  \"group\" TEXT NOT NULL,\n  is_default INTEGER NOT NULL CHECK (is_default IN (0, 1)),\n  name TEXT,\n  price_minor INTEGER,\n  price_currency TEXT,\n  price_interval TEXT,\n  features TEXT NOT NULL,\n  provider_refs TEXT NOT NULL,\n  pushed_at INTEGER NOT NULL,\n  CONSTRAINT pw_plans_plan_id_version_uq UNIQUE (plan_id, version)\n)`,\n  `CREATE TABLE ${PW_TABLES.subscriptions} (\n  id TEXT PRIMARY KEY,\n  customer_id TEXT NOT NULL,\n  plan_id TEXT NOT NULL,\n  plan_version INTEGER NOT NULL,\n  \"group\" TEXT NOT NULL,\n  status TEXT NOT NULL,\n  provider TEXT,\n  provider_subscription_ref TEXT,\n  current_period_start INTEGER NOT NULL,\n  current_period_end INTEGER NOT NULL,\n  cancel_at_period_end INTEGER NOT NULL CHECK (cancel_at_period_end IN (0, 1)),\n  created_at INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL,\n  CONSTRAINT pw_subscriptions_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id)\n)`,\n  `CREATE UNIQUE INDEX pw_subscriptions_active_uq\n  ON ${PW_TABLES.subscriptions} (customer_id, \"group\")\n  WHERE status IN (${ACTIVE_STATUS_SQL_LIST})`,\n  `CREATE TABLE ${PW_TABLES.featureBalances} (\n  id TEXT PRIMARY KEY,\n  customer_id TEXT NOT NULL,\n  feature_id TEXT NOT NULL,\n  \"group\" TEXT NOT NULL,\n  used INTEGER NOT NULL,\n  \"limit\" INTEGER NOT NULL,\n  reset_interval TEXT NOT NULL,\n  anchor INTEGER NOT NULL,\n  period_start INTEGER NOT NULL,\n  period_end INTEGER NOT NULL,\n  plan_id TEXT NOT NULL,\n  plan_version INTEGER NOT NULL,\n  updated_at INTEGER NOT NULL,\n  CONSTRAINT pw_feature_balances_customer_id_fk FOREIGN KEY (customer_id) REFERENCES ${PW_TABLES.customers} (id),\n  CONSTRAINT pw_feature_balances_customer_feature_group_uq UNIQUE (customer_id, feature_id, \"group\")\n)`,\n  `CREATE TABLE ${PW_TABLES.webhookEvents} (\n  dedupe_key TEXT PRIMARY KEY,\n  provider TEXT NOT NULL,\n  type TEXT NOT NULL,\n  received_at INTEGER NOT NULL,\n  claimed_at INTEGER,\n  applied_at INTEGER\n)`,\n]);\n","/**\n * The embedded, ordered migration list per SQL dialect (docs/v1/database.md\n * §4, PW-703). Pure data: no filesystem reads, no drivers — `dist` never\n * touches runtime files. Ordering is id-lexicographic (zero-padded numeric\n * prefixes), and the list is APPEND-ONLY: a migration that has been applied\n * anywhere is immutable forever; changes ship as the next id.\n */\nimport { PayweaveMigrationError } from \"./errors\";\nimport {\n  MYSQL_INIT_STATEMENTS,\n  POSTGRES_INIT_STATEMENTS,\n  SQLITE_INIT_STATEMENTS,\n} from \"./ddl\";\nimport type { PwSqlDialect, PwSqlMigration } from \"./types\";\n\nconst migration = (\n  id: string,\n  name: string,\n  statements: readonly string[],\n): PwSqlMigration => Object.freeze({ id, name, statements });\n\n/**\n * Ids of every embedded migration, in execution order. Identical across\n * dialects by construction — only the statement TEXT varies per dialect.\n */\nexport const PW_MIGRATION_IDS = Object.freeze([\"0001_init\"] as const);\n\nconst MIGRATIONS_BY_DIALECT: Record<PwSqlDialect, readonly PwSqlMigration[]> = {\n  postgres: Object.freeze([migration(\"0001_init\", \"init\", POSTGRES_INIT_STATEMENTS)]),\n  mysql: Object.freeze([migration(\"0001_init\", \"init\", MYSQL_INIT_STATEMENTS)]),\n  sqlite: Object.freeze([migration(\"0001_init\", \"init\", SQLITE_INIT_STATEMENTS)]),\n};\n\n/**\n * The embedded migration list for `dialect`, in execution order. Pure and\n * deterministic — same input, same (frozen) output. Throws\n * {@link PayweaveMigrationError} for any non-SQL dialect: mongodb has NO SQL\n * migrations (its adapter ensures collections/indexes itself) and\n * prisma/drizzle users own their migrations.\n */\nexport function migrationsFor(dialect: PwSqlDialect): readonly PwSqlMigration[] {\n  switch (dialect) {\n    case \"postgres\":\n    case \"mysql\":\n    case \"sqlite\":\n      return MIGRATIONS_BY_DIALECT[dialect];\n    default:\n      throw new PayweaveMigrationError(\n        `Unsupported SQL migration dialect ${JSON.stringify(dialect satisfies never)} — ` +\n          `the Payweave migrations engine covers \"postgres\", \"mysql\" and \"sqlite\" only ` +\n          `(docs/v1/database.md §4: mongodb/prisma/drizzle have no Payweave-owned SQL migrations).`,\n      );\n  }\n}\n","/**\n * The driver-agnostic SQL migrations engine (docs/v1/database.md §4, PW-703).\n * SQL adapters (PW-704/705/706) expose it as `DatabaseAdapter.migrations`:\n *\n * ```ts\n * migrations: {\n *   status: () => planMigrations(executor, \"postgres\"),\n *   apply:  () => applyMigrations(executor, \"postgres\"),\n * }\n * ```\n *\n * Mechanics:\n * - Embedded + ordered: migrations are string constants compiled into the\n *   build (`./definitions`) — no filesystem reads, no drivers, ever.\n * - Checksum ledger: every applied migration is recorded in `pw_migrations`\n *   (`name` = migration id, `applied_at`, `checksum`). The ledger table is\n *   created with `CREATE TABLE IF NOT EXISTS` before every read, so both\n *   `planMigrations` and `applyMigrations` work on a fresh database (a plan\n *   against an empty database therefore performs that one idempotent DDL\n *   write).\n * - Forward-only: no down migrations exist in v1, and none are scaffolded.\n * - Mutated history FAILS LOUDLY: ledger↔embedded verification runs on BOTH\n *   plan and apply — see {@link PayweaveMigrationHistoryError}.\n *\n * CHECKSUM SCHEME (stable by contract — changing it would invalidate every\n * ledger in the wild): `\"sha256:\" + hex(SHA-256(stmt₀ ‖ NUL ‖ stmt₁ ‖ NUL ‖ …))`\n * over the exact UTF-8 bytes of each statement, each terminated by a NUL\n * separator (so `[\"ab\"]` and `[\"a\",\"b\"]` hash differently). NO normalization\n * of any kind — a whitespace or comment edit IS a content change by design.\n */\nimport { createHash } from \"node:crypto\";\nimport { PayweaveMigrationError, PayweaveMigrationHistoryError } from \"./errors\";\nimport { migrationsFor } from \"./definitions\";\nimport { ledgerEnsureSql, ledgerInsertParams, ledgerInsertSql, ledgerSelectSql } from \"./ledger\";\nimport type { MigrationExecutor, PwSqlDialect, PwSqlMigration } from \"./types\";\n\n/**\n * Stable content hash of a migration's statements (`sha256:<64 hex>`); the\n * value recorded in — and verified against — the `pw_migrations.checksum`\n * column. See the module header for the exact scheme.\n */\nexport function migrationChecksum(migration: Pick<PwSqlMigration, \"statements\">): string {\n  const hash = createHash(\"sha256\");\n  for (const statement of migration.statements) {\n    hash.update(statement, \"utf8\");\n    hash.update(\"\\u0000\", \"utf8\");\n  }\n  return `sha256:${hash.digest(\"hex\")}`;\n}\n\n/**\n * Validate + order a migration set: ids unique, statements non-empty, and\n * execution order id-lexicographic (codepoint order — locale-independent)\n * regardless of input order.\n */\nfunction normalizeMigrationSet(migrations: readonly PwSqlMigration[]): readonly PwSqlMigration[] {\n  const seen = new Set<string>();\n  for (const m of migrations) {\n    if (seen.has(m.id)) {\n      throw new PayweaveMigrationError(\n        `Malformed embedded migration set: duplicate migration id \"${m.id}\".`,\n      );\n    }\n    seen.add(m.id);\n    if (m.statements.length === 0 || m.statements.some((s) => s.trim() === \"\")) {\n      throw new PayweaveMigrationError(\n        `Malformed embedded migration set: migration \"${m.id}\" has an empty statement list or a blank statement.`,\n      );\n    }\n  }\n  // Ids are unique (checked above), so the comparator never sees equals.\n  return [...migrations].sort((a, b) => (a.id < b.id ? -1 : 1));\n}\n\n/**\n * Bootstrap the ledger if absent, read it, and verify it against the embedded\n * set. Returns the set of applied migration ids. Throws\n * {@link PayweaveMigrationHistoryError} on any ledger↔embedded inconsistency\n * — the loud-failure gate shared by plan and apply.\n */\nasync function readVerifiedLedger(\n  executor: MigrationExecutor,\n  dialect: PwSqlDialect,\n  migrations: readonly PwSqlMigration[],\n): Promise<ReadonlySet<string>> {\n  await executor.query(ledgerEnsureSql(dialect));\n  const { rows } = await executor.query(ledgerSelectSql(dialect));\n\n  const byId = new Map(migrations.map((m) => [m.id, m]));\n  const applied = new Set<string>();\n  for (const row of rows) {\n    const name = row[\"name\"];\n    const checksum = row[\"checksum\"];\n    if (typeof name !== \"string\" || typeof checksum !== \"string\") {\n      throw new PayweaveMigrationError(\n        `The pw_migrations ledger returned a malformed row (expected string \"name\" and \"checksum\" columns) — got ${JSON.stringify(row)}.`,\n      );\n    }\n    const embedded = byId.get(name);\n    if (embedded === undefined) {\n      throw new PayweaveMigrationHistoryError(\n        `Payweave migration history mismatch: the pw_migrations ledger contains \"${name}\", ` +\n          `which is not among the migrations embedded in this build. Refusing to plan or apply ` +\n          `against an unknown migration history — this usually means the database was migrated ` +\n          `by a newer Payweave version, or the ledger was edited by hand (docs/v1/database.md §4).`,\n        { migrationId: name, reason: \"unknown-migration\" },\n      );\n    }\n    const expected = migrationChecksum(embedded);\n    if (checksum !== expected) {\n      throw new PayweaveMigrationHistoryError(\n        `Payweave migration \"${name}\" was modified after it was applied: ledger checksum ` +\n          `${checksum} does not match this build's checksum ${expected}. Applied migrations are ` +\n          `immutable — NEVER edit an applied migration; ship the change as a new migration ` +\n          `instead (forward-only, docs/v1/database.md §4).`,\n        { migrationId: name, reason: \"checksum-mismatch\" },\n      );\n    }\n    applied.add(name);\n  }\n  return applied;\n}\n\n/**\n * Compute the migration plan without applying anything — the engine behind\n * `DatabaseAdapter.migrations.status()`. Verifies history first and throws\n * {@link PayweaveMigrationHistoryError} on mutation, exactly like apply.\n * Ledger rows for migrations the build doesn't know are NEVER silently\n * ignored; ledger gaps (an unapplied migration ordered before an applied one)\n * are reported as pending and applied in embedded order.\n *\n * @param executor Adapter-supplied executor; see {@link MigrationExecutor}.\n * @param dialect  SQL dialect whose embedded migration set to plan against.\n * @param migrations Override of the embedded set — for tests/tooling only;\n *   adapters MUST omit it (defaults to `migrationsFor(dialect)`).\n */\nexport async function planMigrations(\n  executor: MigrationExecutor,\n  dialect: PwSqlDialect,\n  migrations: readonly PwSqlMigration[] = migrationsFor(dialect),\n): Promise<{ pending: string[]; applied: string[] }> {\n  const ordered = normalizeMigrationSet(migrations);\n  const appliedSet = await readVerifiedLedger(executor, dialect, ordered);\n  return {\n    pending: ordered.filter((m) => !appliedSet.has(m.id)).map((m) => m.id),\n    applied: ordered.filter((m) => appliedSet.has(m.id)).map((m) => m.id),\n  };\n}\n\n/**\n * Apply every pending migration, in order, forward-only — the engine behind\n * `DatabaseAdapter.migrations.apply()`. Re-running with nothing pending is a\n * no-op (`{ applied: [] }`).\n *\n * Per migration: each statement runs as its own `executor.query()` call, then\n * one ledger row is inserted (`name`, `applied_at` = now, `checksum`). When\n * the executor provides `transaction`, statements + ledger insert run inside\n * ONE transaction per migration, so a failure rolls that migration back\n * whole; without it, execution stops at the failing statement and the error\n * surfaces (already-completed migrations stay recorded either way). Failures\n * are wrapped in {@link PayweaveMigrationError} naming the migration and\n * statement, with the driver error as `cause`.\n *\n * @param executor Adapter-supplied executor; see {@link MigrationExecutor}.\n * @param dialect  SQL dialect whose embedded migration set to apply.\n * @param migrations Override of the embedded set — for tests/tooling only;\n *   adapters MUST omit it (defaults to `migrationsFor(dialect)`).\n */\nexport async function applyMigrations(\n  executor: MigrationExecutor,\n  dialect: PwSqlDialect,\n  migrations: readonly PwSqlMigration[] = migrationsFor(dialect),\n): Promise<{ applied: string[] }> {\n  const ordered = normalizeMigrationSet(migrations);\n  const appliedSet = await readVerifiedLedger(executor, dialect, ordered);\n  const pending = ordered.filter((m) => !appliedSet.has(m.id));\n\n  const applied: string[] = [];\n  for (const migration of pending) {\n    const runOne = async (tx: MigrationExecutor): Promise<void> => {\n      for (const [index, statement] of migration.statements.entries()) {\n        try {\n          await tx.query(statement);\n        } catch (cause) {\n          throw new PayweaveMigrationError(\n            `Payweave migration \"${migration.id}\" failed at statement ${index + 1} of ${migration.statements.length}.`,\n            { cause },\n          );\n        }\n      }\n      try {\n        await tx.query(\n          ledgerInsertSql(dialect),\n          ledgerInsertParams(dialect, migration.id, migrationChecksum(migration), new Date()),\n        );\n      } catch (cause) {\n        throw new PayweaveMigrationError(\n          `Payweave migration \"${migration.id}\" executed, but recording it in the pw_migrations ledger failed.`,\n          { cause },\n        );\n      }\n    };\n\n    if (executor.transaction) {\n      await executor.transaction(runOne);\n    } else {\n      await runOne(executor);\n    }\n    applied.push(migration.id);\n  }\n  return { applied };\n}\n"]}

package/dist/chunk-TWZK62TZ.js

@@ -0,0 +1,83 @@
+import { PayweaveValidationError } from './chunk-HTRGMZFH.js';
+
+// src/core/money.ts
+var CURRENCY_EXPONENTS = {
+  // 0-exponent (no minor unit) — includes the West/Central African CFA francs
+  // relevant to Paystack/Flutterwave coverage.
+  BIF: 0,
+  CLP: 0,
+  DJF: 0,
+  GNF: 0,
+  ISK: 0,
+  JPY: 0,
+  KMF: 0,
+  KRW: 0,
+  PYG: 0,
+  RWF: 0,
+  UGX: 0,
+  VND: 0,
+  VUV: 0,
+  XAF: 0,
+  XOF: 0,
+  XPF: 0,
+  // 3-exponent (thousandths)
+  BHD: 3,
+  IQD: 3,
+  JOD: 3,
+  KWD: 3,
+  LYD: 3,
+  OMR: 3,
+  TND: 3
+};
+var DEFAULT_EXPONENT = 2;
+function exponentFor(currency) {
+  return CURRENCY_EXPONENTS[currency.toUpperCase()] ?? DEFAULT_EXPONENT;
+}
+function money(value, currency) {
+  if (!Number.isSafeInteger(value)) {
+    throw new PayweaveValidationError(
+      `amount must be integer minor units \u2014 got ${value}; did you mean toMinor(${value}, '${currency}')?`
+    );
+  }
+  return { value, currency: currency.toUpperCase() };
+}
+function assertMoney(m) {
+  if (!Number.isSafeInteger(m.value)) {
+    throw new PayweaveValidationError(
+      `amount must be integer minor units \u2014 got ${m.value}; did you mean toMinor(${m.value}, '${m.currency}')?`
+    );
+  }
+  return m;
+}
+function toMajor(m) {
+  assertMoney(m);
+  const exp = exponentFor(m.currency);
+  if (exp === 0) return m.value;
+  return m.value / 10 ** exp;
+}
+function toMinor(major, currency) {
+  if (typeof major !== "number" || !Number.isFinite(major)) {
+    throw new PayweaveValidationError(
+      `amount must be a finite number \u2014 got ${String(major)}`
+    );
+  }
+  const exp = exponentFor(currency);
+  const factor = 10 ** exp;
+  const scaled = major * factor;
+  const rounded = Math.round(scaled);
+  if (Math.abs(scaled - rounded) > 1e-6) {
+    throw new PayweaveValidationError(
+      `amount ${major} has more precision than ${currency.toUpperCase()} allows (${exp} minor-unit digits)`
+    );
+  }
+  if (!Number.isSafeInteger(rounded)) {
+    throw new PayweaveValidationError(
+      `amount ${major} ${currency.toUpperCase()} exceeds the safe integer range in minor units`
+    );
+  }
+  return { value: rounded, currency: currency.toUpperCase() };
+}
+
+export { CURRENCY_EXPONENTS, DEFAULT_EXPONENT, assertMoney, exponentFor, money, toMajor, toMinor };
+//# sourceMappingURL=chunk-TWZK62TZ.js.map
+//# sourceMappingURL=chunk-TWZK62TZ.js.map

package/dist/chunk-TWZK62TZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/money.ts"],"names":[],"mappings":";;;AAgBO,IAAM,kBAAA,GAAg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gBAAA,GAAmB;AAOzB,SAAS,YAAY,QAAA,EAA0B;AACpD,EAAA,OAAO,kBAAA,CAAmB,QAAA,CAAS,WAAA,EAAa,CAAA,IAAK,gBAAA;AACvD;AASO,SAAS,KAAA,CAAM,OAAe,QAAA,EAAyB;AAC5D,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,CAAA,8CAAA,EAA4C,KAAK,CAAA,uBAAA,EAA0B,KAAK,MAAM,QAAQ,CAAA,GAAA;AAAA,KAChG;AAAA,EACF;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,QAAA,EAAU,QAAA,CAAS,aAAY,EAAE;AACnD;AAOO,SAAS,YAAY,CAAA,EAAiB;AAC3C,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,CAAA,CAAE,KAAK,CAAA,EAAG;AAClC,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,CAAA,8CAAA,EAA4C,EAAE,KAAK,CAAA,uBAAA,EAA0B,EAAE,KAAK,CAAA,GAAA,EAAM,EAAE,QAAQ,CAAA,GAAA;AAAA,KACtG;AAAA,EACF;AACA,EAAA,OAAO,CAAA;AACT;AASO,SAAS,QAAQ,CAAA,EAAkB;AACxC,EAAA,WAAA,CAAY,CAAC,CAAA;AACb,EAAA,MAAM,GAAA,GAAM,WAAA,CAAY,CAAA,CAAE,QAAQ,CAAA;AAClC,EAAA,IAAI,GAAA,KAAQ,CAAA,EAAG,OAAO,CAAA,CAAE,KAAA;AACxB,EAAA,OAAO,CAAA,CAAE,QAAQ,EAAA,IAAM,GAAA;AACzB;AAYO,SAAS,OAAA,CAAQ,OAAe,QAAA,EAAyB;AAC9D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,EAAG;AACxD,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,CAAA,0CAAA,EAAwC,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KACvD;AAAA,EACF;AACA,EAAA,MAAM,GAAA,GAAM,YAAY,QAAQ,CAAA;AAChC,EAAA,MAAM,SAAS,EAAA,IAAM,GAAA;AAGrB,EAAA,MAAM,SAAS,KAAA,GAAQ,MAAA;AACvB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AACjC,EAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAA,GAAS,OAAO,IAAI,IAAA,EAAM;AACrC,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,UAAU,KAAK,CAAA,yBAAA,EAA4B,SAAS,WAAA,EAAa,YAAY,GAAG,CAAA,mBAAA;AAAA,KAClF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA,EAAG;AAClC,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA,EAAI,QAAA,CAAS,aAAa,CAAA,8CAAA;AAAA,KAC3C;AAAA,EACF;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,OAAA,EAAS,QAAA,EAAU,QAAA,CAAS,aAAY,EAAE;AAC5D","file":"chunk-TWZK62TZ.js","sourcesContent":["/**\n * Money — integer minor units, always (TDD §6.4, PRD §6.2). No floating-point\n * amounts ever cross a provider boundary. `value` is an integer count of the\n * currency's minor unit (kobo, cents, …); `currency` is an ISO-4217 code.\n */\nimport { PayweaveValidationError } from \"./errors\";\n\n/** A monetary amount. `value` is ALWAYS an integer in the currency's minor units. */\nexport type Money = { value: number; currency: string };\n\n/**\n * ISO-4217 minor-unit exponents that are NOT the default of 2. Zero-exponent\n * currencies have no minor unit (₦-style kobo does not exist for them), so a\n * \"major\" amount already equals the \"minor\" amount. Three-exponent currencies\n * (Gulf dinars) use thousandths. Anything absent defaults to 2.\n */\nexport const CURRENCY_EXPONENTS: Record<string, 0 | 2 | 3> = {\n  // 0-exponent (no minor unit) — includes the West/Central African CFA francs\n  // relevant to Paystack/Flutterwave coverage.\n  BIF: 0,\n  CLP: 0,\n  DJF: 0,\n  GNF: 0,\n  ISK: 0,\n  JPY: 0,\n  KMF: 0,\n  KRW: 0,\n  PYG: 0,\n  RWF: 0,\n  UGX: 0,\n  VND: 0,\n  VUV: 0,\n  XAF: 0,\n  XOF: 0,\n  XPF: 0,\n  // 3-exponent (thousandths)\n  BHD: 3,\n  IQD: 3,\n  JOD: 3,\n  KWD: 3,\n  LYD: 3,\n  OMR: 3,\n  TND: 3,\n};\n\n/** Default minor-unit exponent for any currency not in {@link CURRENCY_EXPONENTS}. */\nexport const DEFAULT_EXPONENT = 2;\n\n/**\n * Minor-unit exponent for a currency code (case-insensitive). Unknown codes\n * fall back to {@link DEFAULT_EXPONENT} (2) — the adapter layer logs a warning\n * for unknown currencies; this pure function does not.\n */\nexport function exponentFor(currency: string): number {\n  return CURRENCY_EXPONENTS[currency.toUpperCase()] ?? DEFAULT_EXPONENT;\n}\n\n/**\n * Construct a validated {@link Money} from a MINOR-unit value. Rejects\n * non-integers (a float here almost always means the caller passed major units)\n * with a fix-it message pointing at {@link toMinor}.\n *\n * @example money(500000, \"NGN\") // ₦5,000 as { value: 500000, currency: \"NGN\" }\n */\nexport function money(value: number, currency: string): Money {\n  if (!Number.isSafeInteger(value)) {\n    throw new PayweaveValidationError(\n      `amount must be integer minor units — got ${value}; did you mean toMinor(${value}, '${currency}')?`,\n    );\n  }\n  return { value, currency: currency.toUpperCase() };\n}\n\n/**\n * Assert an existing {@link Money} carries an integer minor-unit value. Returns\n * the same object for convenient chaining; throws {@link PayweaveValidationError}\n * on a non-integer.\n */\nexport function assertMoney(m: Money): Money {\n  if (!Number.isSafeInteger(m.value)) {\n    throw new PayweaveValidationError(\n      `amount must be integer minor units — got ${m.value}; did you mean toMinor(${m.value}, '${m.currency}')?`,\n    );\n  }\n  return m;\n}\n\n/**\n * Convert a MINOR-unit {@link Money} to a major-unit number (for display or for\n * providers that expect major units, e.g. Flutterwave v3). Validates the source\n * value is an integer first.\n *\n * @example toMajor({ value: 500000, currency: \"NGN\" }) // 5000\n */\nexport function toMajor(m: Money): number {\n  assertMoney(m);\n  const exp = exponentFor(m.currency);\n  if (exp === 0) return m.value;\n  return m.value / 10 ** exp;\n}\n\n/**\n * Convert a MAJOR-unit amount to a minor-unit {@link Money} using integer-safe\n * math (never `value / 100`). A rounding guard rejects amounts with more\n * fractional precision than the currency permits (e.g. `50.555` for a\n * 2-exponent currency) rather than silently truncating.\n *\n * @example toMinor(5000, \"NGN\")   // { value: 500000, currency: \"NGN\" }\n * @example toMinor(50.5, \"NGN\")   // { value: 5050, currency: \"NGN\" }\n * @example toMinor(1000, \"XOF\")   // { value: 1000, currency: \"XOF\" } (0-exponent)\n */\nexport function toMinor(major: number, currency: string): Money {\n  if (typeof major !== \"number\" || !Number.isFinite(major)) {\n    throw new PayweaveValidationError(\n      `amount must be a finite number — got ${String(major)}`,\n    );\n  }\n  const exp = exponentFor(currency);\n  const factor = 10 ** exp;\n  // Scale then round; the guard below catches any precision the currency can't\n  // represent, so the rounding only ever absorbs floating-point noise.\n  const scaled = major * factor;\n  const rounded = Math.round(scaled);\n  if (Math.abs(scaled - rounded) > 1e-6) {\n    throw new PayweaveValidationError(\n      `amount ${major} has more precision than ${currency.toUpperCase()} allows (${exp} minor-unit digits)`,\n    );\n  }\n  if (!Number.isSafeInteger(rounded)) {\n    throw new PayweaveValidationError(\n      `amount ${major} ${currency.toUpperCase()} exceeds the safe integer range in minor units`,\n    );\n  }\n  return { value: rounded, currency: currency.toUpperCase() };\n}\n"]}