tapimo 0.14.0 → 0.15.1

package/src/db/Db.ts

@@ -12,24 +12,44 @@ import {
 import * as pg from 'pg'
 
 import type * as AdminAuditLogs from './tables/adminAuditLogs.js'
+import type * as ApiKeyAdmissionBootstraps from './tables/apiKeyAdmissionBootstraps.js'
+import type * as ApiKeyAdmissions from './tables/apiKeyAdmissions.js'
+import type * as ApiKeyOwnerAdmissions from './tables/apiKeyOwnerAdmissions.js'
+import type * as ApiKeyOwnerTombstones from './tables/apiKeyOwnerTombstones.js'
+import type * as ApiKeyRevocations from './tables/apiKeyRevocations.js'
+import type * as AuthAccounts from './tables/authAccounts.js'
+import type * as AuthSessions from './tables/authSessions.js'
+import type * as AuthVerifications from './tables/authVerifications.js'
 import type * as BillingSettings from './tables/billingSettings.js'
 import type * as EarlyAccess from './tables/earlyAccess.js'
 import type * as EarnVaults from './tables/earnVaults.js'
 import type * as EnabledBillingSources from './tables/enabledBillingSources.js'
-import type * as FundingCatalog from './tables/fundingCatalog.js'
-import type * as FundingDepositAddresses from './tables/fundingDepositAddresses.js'
-import type * as FundingDepositRequestObservations from './tables/fundingDepositRequestObservations.js'
-import type * as FundingDeposits from './tables/fundingDeposits.js'
-import type * as FundingIdempotency from './tables/fundingIdempotency.js'
-import type * as FundingTransferEvents from './tables/fundingTransferEvents.js'
-import type * as FundingTransfers from './tables/fundingTransfers.js'
-import type * as FundingTransferTransactions from './tables/fundingTransferTransactions.js'
 import type * as Invitations from './tables/invitations.js'
 import type * as InviteLinks from './tables/inviteLinks.js'
 import type * as Memberships from './tables/memberships.js'
 import type * as Organizations from './tables/organizations.js'
 import type * as Projects from './tables/projects.js'
 import type * as RequestUsage from './tables/requestUsage.js'
+import type * as RewardAccounts from './tables/rewardAccounts.js'
+import type * as RewardCampaignDistributors from './tables/rewardCampaignDistributors.js'
+import type * as RewardCampaigns from './tables/rewardCampaigns.js'
+import type * as RewardCredits from './tables/rewardCredits.js'
+import type * as RewardEligibilityAssociations from './tables/rewardEligibilityAssociations.js'
+import type * as RewardRuns from './tables/rewardRuns.js'
+import type * as RewardTransactionAttempts from './tables/rewardTransactionAttempts.js'
+import type * as RoutesCatalog from './tables/routesCatalog.js'
+import type * as RoutesDepositAddresses from './tables/routesDepositAddresses.js'
+import type * as RoutesDepositRequestObservations from './tables/routesDepositRequestObservations.js'
+import type * as RoutesDeposits from './tables/routesDeposits.js'
+import type * as RoutesIdempotency from './tables/routesIdempotency.js'
+import type * as RoutesSubsidies from './tables/routesSubsidies.js'
+import type * as RoutesTransferEvents from './tables/routesTransferEvents.js'
+import type * as RoutesTransfers from './tables/routesTransfers.js'
+import type * as RoutesTransferSubsidies from './tables/routesTransferSubsidies.js'
+import type * as RoutesTransferSubsidyNonces from './tables/routesTransferSubsidyNonces.js'
+import type * as RoutesTransferTransactions from './tables/routesTransferTransactions.js'
+import type * as SponsorshipReconciliationCursors from './tables/sponsorshipReconciliationCursors.js'
+import type * as SponsorshipAttributions from './tables/sponsorshipAttributions.js'
 import type * as SponsoredTransactions from './tables/sponsoredTransactions.js'
 import type * as StripeCustomers from './tables/stripeCustomers.js'
 import type * as Users from './tables/users.js'
@@ -46,22 +66,18 @@ import type * as WebhookSubscriptions from './tables/webhookSubscriptions.js'
  */
 export type Database = {
   admin_audit_logs: AdminAuditLogs.Table
+  api_key_admission_bootstraps: ApiKeyAdmissionBootstraps.Table
+  api_key_admissions: ApiKeyAdmissions.Table
+  api_key_owner_admissions: ApiKeyOwnerAdmissions.Table
+  api_key_owner_tombstones: ApiKeyOwnerTombstones.Table
+  api_key_revocations: ApiKeyRevocations.Table
+  auth_accounts: AuthAccounts.Table
+  auth_sessions: AuthSessions.Table
+  auth_verifications: AuthVerifications.Table
   billing_settings: BillingSettings.Table
   early_access: EarlyAccess.Table
   earn_vaults: EarnVaults.Table
   enabled_billing_sources: EnabledBillingSources.Table
-  funding_catalogs: FundingCatalog.CatalogTable
-  funding_chain_tokens: FundingCatalog.ChainTokenTable
-  funding_chains: FundingCatalog.ChainTable
-  funding_deposit_addresses: FundingDepositAddresses.Table
-  funding_deposit_request_observations: FundingDepositRequestObservations.Table
-  funding_deposits: FundingDeposits.Table
-  funding_idempotency_requests: FundingIdempotency.Table
-  funding_routes: FundingCatalog.RouteTable
-  funding_tokens: FundingCatalog.TokenTable
-  funding_transfer_events: FundingTransferEvents.Table
-  funding_transfer_transactions: FundingTransferTransactions.Table
-  funding_transfers: FundingTransfers.Table
   invitations: Invitations.Table
   invite_link_redemptions: InviteLinks.RedemptionTable
   invite_links: InviteLinks.Table
@@ -77,6 +93,30 @@ export type Database = {
   projects: Projects.Table
   request_usage_buckets: RequestUsage.BucketTable
   request_usage_meter_events: RequestUsage.MeterEventTable
+  reward_accounts: RewardAccounts.Table
+  reward_campaign_distributors: RewardCampaignDistributors.Table
+  reward_campaigns: RewardCampaigns.Table
+  reward_credits: RewardCredits.Table
+  reward_eligibility_associations: RewardEligibilityAssociations.Table
+  reward_runs: RewardRuns.Table
+  reward_transaction_attempts: RewardTransactionAttempts.Table
+  routes_catalogs: RoutesCatalog.CatalogTable
+  routes_chain_tokens: RoutesCatalog.ChainTokenTable
+  routes_chains: RoutesCatalog.ChainTable
+  routes_deposit_addresses: RoutesDepositAddresses.Table
+  routes_deposit_request_observations: RoutesDepositRequestObservations.Table
+  routes_deposits: RoutesDeposits.Table
+  routes_idempotency_requests: RoutesIdempotency.Table
+  routes_routes: RoutesCatalog.RouteTable
+  routes_subsidies: RoutesSubsidies.Table
+  routes_tokens: RoutesCatalog.TokenTable
+  routes_transfer_events: RoutesTransferEvents.Table
+  routes_transfer_subsidies: RoutesTransferSubsidies.Table
+  routes_transfer_subsidy_nonces: RoutesTransferSubsidyNonces.Table
+  routes_transfer_transactions: RoutesTransferTransactions.Table
+  routes_transfers: RoutesTransfers.Table
+  sponsorship_reconciliation_cursors: SponsorshipReconciliationCursors.Table
+  sponsorship_attributions: SponsorshipAttributions.Table
   sponsored_transactions: SponsoredTransactions.Table
   stripe_customers: StripeCustomers.Table
   users: Users.Table
@@ -1523,6 +1563,1423 @@ export const migrations: readonly Migration[] = [
         sql`CREATE INDEX IF NOT EXISTS sponsored_transactions_promotion_spend_idx ON sponsored_transactions (org_id, project_id, status, created_at) WHERE NOT billable`,
       ),
   },
+  {
+    name: '0142_funding_transfers_status_updated_at',
+    up: (db) =>
+      raw(db, sql`ALTER TABLE funding_transfers ADD COLUMN IF NOT EXISTS status_updated_at text`),
+  },
+  {
+    name: '0143_funding_deposits_status_updated_at',
+    up: (db) =>
+      raw(db, sql`ALTER TABLE funding_deposits ADD COLUMN IF NOT EXISTS status_updated_at text`),
+  },
+  {
+    name: '0144_funding_deposit_addresses_status_updated_at',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE funding_deposit_addresses ADD COLUMN IF NOT EXISTS status_updated_at text`,
+      ),
+  },
+  {
+    name: '0145_funding_transfers_state_metrics_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS funding_transfers_state_metrics_idx ON funding_transfers (status, environment, provider_id, method, (status_reason->>'code'), status_updated_at, updated_at)`,
+      ),
+  },
+  {
+    name: '0146_funding_deposits_state_metrics_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS funding_deposits_state_metrics_idx ON funding_deposits (status, environment, deposit_address_id, (status_reason->>'code'), status_updated_at, updated_at)`,
+      ),
+  },
+  {
+    name: '0147_funding_deposits_provider_delivered_at',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE funding_deposits ADD COLUMN IF NOT EXISTS provider_delivered_at text`,
+      ),
+  },
+  {
+    name: '0148_funding_transfers_updated_at_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS funding_transfers_updated_at_idx ON funding_transfers (updated_at DESC, id DESC)`,
+      ),
+  },
+  {
+    name: '0149_funding_deposits_updated_at_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS funding_deposits_updated_at_idx ON funding_deposits (updated_at DESC, id DESC)`,
+      ),
+  },
+  {
+    name: '0150_funding_deposit_addresses_updated_at_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS funding_deposit_addresses_updated_at_idx ON funding_deposit_addresses (updated_at DESC, id DESC)`,
+      ),
+  },
+  {
+    name: '0151_sponsorship_attributions',
+    up: (db) =>
+      db.schema
+        .createTable('sponsorshipAttributions')
+        .ifNotExists()
+        .addColumn('id', 'text', (c) => c.primaryKey())
+        .addColumn('orgId', 'text', (c) => c.notNull())
+        .addColumn('externalId', 'text')
+        .addColumn('projectId', 'text')
+        .addColumn('startsAt', 'text')
+        .addColumn('endsAt', 'text')
+        .addColumn('spendLimit', 'text')
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addCheckConstraint(
+          'sponsorship_attributions_source_check',
+          sql`(external_id IS NULL) <> (project_id IS NULL)`,
+        )
+        .addCheckConstraint(
+          'sponsorship_attributions_window_check',
+          sql`(starts_at IS NULL) = (ends_at IS NULL)`,
+        ),
+  },
+  {
+    name: '0152_sponsorship_attributions_external_unique',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE UNIQUE INDEX IF NOT EXISTS sponsorship_attributions_external_unique ON sponsorship_attributions (org_id, external_id) WHERE external_id IS NOT NULL`,
+      ),
+  },
+  {
+    name: '0153_sponsorship_attributions_project_unique',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE UNIQUE INDEX IF NOT EXISTS sponsorship_attributions_project_unique ON sponsorship_attributions (org_id, project_id) WHERE project_id IS NOT NULL`,
+      ),
+  },
+  {
+    name: '0154_sponsored_transactions_attribution_id',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE sponsored_transactions ADD COLUMN IF NOT EXISTS sponsorship_attribution_id text`,
+      ),
+  },
+  {
+    name: '0155_sponsored_transactions_attribution_spend_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS sponsored_transactions_attribution_spend_idx ON sponsored_transactions (org_id, sponsorship_attribution_id, status, created_at) WHERE NOT billable`,
+      ),
+  },
+  {
+    name: '0156_project_sponsorship_attributions',
+    up: (db) =>
+      raw(
+        db,
+        sql`INSERT INTO sponsorship_attributions (id, org_id, external_id, project_id, starts_at, ends_at, spend_limit, created_at, updated_at)
+          SELECT 'sat_' || md5(projects.org_id || ':' || projects.id), projects.org_id, NULL, projects.id, projects.sponsorship_subsidy_starts_at, projects.sponsorship_subsidy_ends_at, projects.sponsorship_spend_limit, projects.created_at, projects.updated_at
+          FROM projects
+          WHERE projects.sponsorship_subsidy_starts_at IS NOT NULL
+          ON CONFLICT (org_id, project_id) WHERE project_id IS NOT NULL DO UPDATE
+          SET starts_at = EXCLUDED.starts_at, ends_at = EXCLUDED.ends_at, spend_limit = EXCLUDED.spend_limit, updated_at = EXCLUDED.updated_at
+          WHERE sponsorship_attributions.starts_at IS NULL`,
+      ),
+  },
+  {
+    name: '0157_project_sponsored_transaction_attributions',
+    up: (db) =>
+      raw(
+        db,
+        sql`UPDATE sponsored_transactions
+          SET sponsorship_attribution_id = sponsorship_attributions.id
+          FROM sponsorship_attributions
+          WHERE sponsored_transactions.sponsorship_attribution_id IS NULL
+            AND sponsored_transactions.org_id = sponsorship_attributions.org_id
+            AND sponsored_transactions.project_id = sponsorship_attributions.project_id`,
+      ),
+  },
+  {
+    name: '0158_reward_eligibility_associations',
+    up: (db) =>
+      db.schema
+        .createTable('rewardEligibilityAssociations')
+        .ifNotExists()
+        .addColumn('chainId', 'bigint', (c) => c.notNull())
+        .addColumn('vaultAddress', 'text', (c) => c.notNull())
+        .addColumn('walletAddress', 'text', (c) => c.notNull())
+        .addColumn('firstRegisteredAt', 'text', (c) => c.notNull())
+        .addColumn('latestRegisteredAt', 'text', (c) => c.notNull())
+        .addColumn('transactionHash', 'text')
+        .addPrimaryKeyConstraint('reward_eligibility_associations_pkey', [
+          'chainId',
+          'vaultAddress',
+          'walletAddress',
+        ]),
+  },
+  {
+    name: '0159_reward_eligibility_registration_order',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE reward_eligibility_associations ADD COLUMN IF NOT EXISTS registration_order bigint GENERATED ALWAYS AS IDENTITY UNIQUE`,
+      ),
+  },
+  {
+    name: '0160_reward_eligibility_page_index',
+    up: (db) =>
+      db.schema
+        .createIndex('reward_eligibility_associations_page_idx')
+        .ifNotExists()
+        .on('rewardEligibilityAssociations')
+        .columns(['chainId', 'vaultAddress', 'registrationOrder']),
+  },
+  {
+    name: '0161_users_name',
+    up: (db) => raw(db, sql`ALTER TABLE users ADD COLUMN IF NOT EXISTS name text`),
+  },
+  {
+    name: '0162_users_image',
+    up: (db) => raw(db, sql`ALTER TABLE users ADD COLUMN IF NOT EXISTS image text`),
+  },
+  {
+    name: '0163_users_email_verified',
+    up: (db) => raw(db, sql`ALTER TABLE users ADD COLUMN IF NOT EXISTS email_verified boolean`),
+  },
+  {
+    name: '0164_users_auth_fields_backfill',
+    up: (db) =>
+      raw(
+        db,
+        sql`UPDATE users SET email_verified = email IS NOT NULL, name = COALESCE(NULLIF(btrim(email), ''), id) WHERE email_verified IS NULL OR name IS NULL`,
+      ),
+  },
+  {
+    name: '0165_users_auth_fields_required',
+    // Defaults keep inserts from the previous Worker valid while the new
+    // required Better Auth fields roll out.
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE users ALTER COLUMN email_verified SET DEFAULT false, ALTER COLUMN email_verified SET NOT NULL, ALTER COLUMN name SET DEFAULT '', ALTER COLUMN name SET NOT NULL`,
+      ),
+  },
+  {
+    name: '0166_users_email_auth_precondition',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $$ BEGIN
+          IF EXISTS (SELECT 1 FROM users WHERE email IS NOT NULL AND btrim(email) = '') THEN
+            RAISE EXCEPTION 'users.email contains blank values';
+          END IF;
+        END $$`,
+      ),
+  },
+  {
+    name: '0167_users_email_normalized',
+    up: (db) => raw(db, sql`UPDATE users SET email = lower(btrim(email))`),
+  },
+  {
+    name: '0168_users_email_index',
+    // SIWE still creates address-keyed users. Enforce email uniqueness in a
+    // later deployment after wallet identities are linked.
+    up: (db) => raw(db, sql`CREATE INDEX IF NOT EXISTS users_email_idx ON users (email)`),
+  },
+  {
+    name: '0169_users_email_normalized_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS users_email_normalized_idx ON users (lower(btrim(email))) WHERE email IS NOT NULL`,
+      ),
+  },
+  {
+    name: '0170_auth_sessions',
+    up: (db) =>
+      db.schema
+        .createTable('authSessions')
+        .ifNotExists()
+        .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+        .addColumn('expiresAt', 'text', (c) => c.notNull())
+        .addColumn('token', 'text', (c) => c.notNull().unique())
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addColumn('ipAddress', 'text')
+        .addColumn('userAgent', 'text')
+        .addColumn('userId', 'text', (c) => c.notNull().references('users.id').onDelete('cascade')),
+  },
+  {
+    name: '0171_auth_sessions_user_index',
+    up: (db) =>
+      db.schema
+        .createIndex('auth_sessions_user_id_idx')
+        .ifNotExists()
+        .on('authSessions')
+        .column('userId'),
+  },
+  {
+    name: '0172_auth_accounts',
+    up: (db) =>
+      db.schema
+        .createTable('authAccounts')
+        .ifNotExists()
+        .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+        .addColumn('issuer', 'text', (c) => c.notNull())
+        .addColumn('accountId', 'text', (c) => c.notNull())
+        .addColumn('providerId', 'text', (c) => c.notNull())
+        .addColumn('userId', 'text', (c) => c.notNull().references('users.id').onDelete('cascade'))
+        .addColumn('accessToken', 'text')
+        .addColumn('refreshToken', 'text')
+        .addColumn('idToken', 'text')
+        .addColumn('accessTokenExpiresAt', 'text')
+        .addColumn('refreshTokenExpiresAt', 'text')
+        .addColumn('scope', 'text')
+        .addColumn('password', 'text')
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull()),
+  },
+  {
+    name: '0173_auth_accounts_user_index',
+    up: (db) =>
+      db.schema
+        .createIndex('auth_accounts_user_id_idx')
+        .ifNotExists()
+        .on('authAccounts')
+        .column('userId'),
+  },
+  {
+    name: '0174_auth_accounts_identity_index',
+    up: (db) =>
+      db.schema
+        .createIndex('auth_accounts_issuer_account_id_unique_idx')
+        .ifNotExists()
+        .unique()
+        .on('authAccounts')
+        .columns(['issuer', 'accountId']),
+  },
+  {
+    name: '0175_auth_verifications',
+    up: (db) =>
+      db.schema
+        .createTable('authVerifications')
+        .ifNotExists()
+        .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+        .addColumn('identifier', 'text', (c) => c.notNull())
+        .addColumn('value', 'text', (c) => c.notNull())
+        .addColumn('expiresAt', 'text', (c) => c.notNull())
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull()),
+  },
+  {
+    name: '0176_auth_verifications_identifier_index',
+    up: (db) =>
+      db.schema
+        .createIndex('auth_verifications_identifier_idx')
+        .ifNotExists()
+        .on('authVerifications')
+        .column('identifier'),
+  },
+  {
+    name: '0177_auth_sessions_provider',
+    up: (db) => raw(db, sql`ALTER TABLE auth_sessions ADD COLUMN IF NOT EXISTS provider text`),
+  },
+  {
+    name: '0178_reward_campaigns',
+    up: (db) =>
+      db.schema
+        .createTable('rewardCampaigns')
+        .ifNotExists()
+        .addColumn('chainId', 'bigint', (c) => c.notNull())
+        .addColumn('vaultAddress', 'text', (c) => c.notNull())
+        .addColumn('assetAddress', 'text', (c) => c.notNull())
+        .addColumn('assetDecimals', 'integer', (c) => c.notNull())
+        .addColumn('earnShareAddress', 'text', (c) => c.notNull())
+        .addColumn('controllerAddress', 'text')
+        .addColumn('distributorAddress', 'text')
+        .addColumn('config', 'jsonb', (c) => c.notNull())
+        .addColumn('pendingConfig', 'jsonb')
+        .addColumn('pendingEffectiveAt', 'bigint')
+        .addColumn('eventCursor', 'jsonb')
+        .addColumn('deliveredThrough', 'bigint', (c) => c.notNull())
+        .addColumn('paused', 'boolean', (c) => c.notNull().defaultTo(false))
+        .addColumn('provisioningError', 'text')
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addPrimaryKeyConstraint('reward_campaigns_pkey', ['chainId', 'vaultAddress'])
+        .addForeignKeyConstraint(
+          'reward_campaigns_vault_fkey',
+          ['chainId', 'vaultAddress'],
+          'earnVaults',
+          ['chainId', 'vaultAddress'],
+          (c) => c.onDelete('restrict'),
+        ),
+  },
+  {
+    name: '0179_reward_accounts',
+    up: (db) =>
+      db.schema
+        .createTable('rewardAccounts')
+        .ifNotExists()
+        .addColumn('chainId', 'bigint', (c) => c.notNull())
+        .addColumn('vaultAddress', 'text', (c) => c.notNull())
+        .addColumn('recipient', 'text', (c) => c.notNull())
+        .addColumn('registrationOrder', 'bigint', (c) => c.notNull())
+        .addColumn('publicEarnShares', 'numeric', (c) => c.notNull())
+        .addColumn('qualifiedEarnShares', 'numeric', (c) => c.notNull())
+        .addColumn('allocatedPrincipalAssets', 'numeric', (c) => c.notNull())
+        .addColumn('accrualRemainder', 'numeric', (c) => c.notNull())
+        .addColumn('pendingRewardAssets', 'numeric', (c) => c.notNull())
+        .addColumn('cumulativeEntitlement', 'numeric', (c) => c.notNull())
+        .addColumn('cumulativePaid', 'numeric', (c) => c.notNull())
+        .addColumn('deferral', 'text')
+        .addColumn('lots', 'jsonb', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addPrimaryKeyConstraint('reward_accounts_pkey', ['chainId', 'vaultAddress', 'recipient'])
+        .addForeignKeyConstraint(
+          'reward_accounts_campaign_fkey',
+          ['chainId', 'vaultAddress'],
+          'rewardCampaigns',
+          ['chainId', 'vaultAddress'],
+          (c) => c.onDelete('cascade'),
+        ),
+  },
+  {
+    name: '0180_reward_runs',
+    up: (db) =>
+      db.schema
+        .createTable('rewardRuns')
+        .ifNotExists()
+        .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+        .addColumn('chainId', 'bigint', (c) => c.notNull())
+        .addColumn('vaultAddress', 'text', (c) => c.notNull())
+        .addColumn('startsAfter', 'bigint', (c) => c.notNull())
+        .addColumn('endsAt', 'bigint', (c) => c.notNull())
+        .addColumn('config', 'jsonb', (c) => c.notNull())
+        .addColumn('phase', 'text', (c) => c.notNull())
+        .addColumn('leaseExpiresAt', 'text')
+        .addColumn('fence', 'bigint', (c) => c.notNull().defaultTo(0))
+        .addColumn('evidence', 'jsonb')
+        .addColumn('fundedAssets', 'numeric')
+        .addColumn('mintedEarnShares', 'numeric')
+        .addColumn('statement', 'jsonb')
+        .addColumn('statementHash', 'text')
+        .addColumn('root', 'text')
+        .addColumn('rootVersion', 'bigint')
+        .addColumn('liability', 'numeric')
+        .addColumn('error', 'text')
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addUniqueConstraint('reward_runs_boundary_key', ['chainId', 'vaultAddress', 'startsAfter'])
+        .addForeignKeyConstraint(
+          'reward_runs_campaign_fkey',
+          ['chainId', 'vaultAddress'],
+          'rewardCampaigns',
+          ['chainId', 'vaultAddress'],
+          (c) => c.onDelete('cascade'),
+        ),
+  },
+  {
+    name: '0181_reward_transaction_attempts',
+    up: (db) =>
+      db.schema
+        .createTable('rewardTransactionAttempts')
+        .ifNotExists()
+        .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+        .addColumn('chainId', 'bigint', (c) => c.notNull())
+        .addColumn('vaultAddress', 'text', (c) => c.notNull())
+        .addColumn('runId', 'text')
+        .addColumn('intent', 'jsonb', (c) => c.notNull())
+        .addColumn('intentId', 'text', (c) => c.notNull())
+        .addColumn('signer', 'text', (c) => c.notNull())
+        .addColumn('nonce', 'numeric')
+        .addColumn('expiresAt', 'text')
+        .addColumn('signedBytes', 'text')
+        .addColumn('transactionHash', 'text')
+        .addColumn('state', 'text', (c) => c.notNull())
+        .addColumn('receipt', 'jsonb')
+        .addColumn('confirmedBlockHash', 'text')
+        .addColumn('replacementOf', 'text')
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addForeignKeyConstraint(
+          'reward_transaction_attempts_campaign_fkey',
+          ['chainId', 'vaultAddress'],
+          'rewardCampaigns',
+          ['chainId', 'vaultAddress'],
+          (c) => c.onDelete('cascade'),
+        )
+        .addForeignKeyConstraint(
+          'reward_transaction_attempts_run_fkey',
+          ['runId'],
+          'rewardRuns',
+          ['id'],
+          (c) => c.onDelete('cascade'),
+        )
+        .addForeignKeyConstraint(
+          'reward_transaction_attempts_replacement_fkey',
+          ['replacementOf'],
+          'rewardTransactionAttempts',
+          ['id'],
+          (c) => c.onDelete('restrict'),
+        ),
+  },
+  {
+    name: '0182_reward_transaction_attempt_nonce_key',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE UNIQUE INDEX IF NOT EXISTS reward_transaction_attempt_nonce_key ON reward_transaction_attempts (chain_id, signer, nonce) WHERE nonce IS NOT NULL`,
+      ),
+  },
+  {
+    name: '0183_reward_campaigns_due_index',
+    up: (db) =>
+      db.schema
+        .createIndex('reward_campaigns_due_idx')
+        .ifNotExists()
+        .on('rewardCampaigns')
+        .columns(['paused', 'deliveredThrough']),
+  },
+  {
+    name: '0184_reward_transaction_attempt_live_intent_key',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE UNIQUE INDEX IF NOT EXISTS reward_transaction_attempt_live_intent_key ON reward_transaction_attempts (intent_id) WHERE state IN ('created', 'signed', 'broadcast')`,
+      ),
+  },
+  {
+    name: '0185_reward_campaign_signer',
+    up: (db) =>
+      raw(db, sql`ALTER TABLE reward_campaigns ADD COLUMN IF NOT EXISTS signer_address text`),
+  },
+  {
+    name: '0186_reward_transaction_attempt_run_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS reward_transaction_attempt_run_idx ON reward_transaction_attempts (run_id, created_at)`,
+      ),
+  },
+  {
+    name: '0187_reward_transaction_attempt_intent_run_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS reward_transaction_attempt_intent_run_idx ON reward_transaction_attempts (intent_id, run_id, created_at)`,
+      ),
+  },
+  {
+    name: '0188_reward_campaign_earn_share_decimals',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE reward_campaigns ADD COLUMN IF NOT EXISTS earn_share_decimals integer NOT NULL DEFAULT 18`,
+      ),
+  },
+  {
+    name: '0189_reward_campaign_earn_share_decimals_default',
+    up: (db) =>
+      raw(db, sql`ALTER TABLE reward_campaigns ALTER COLUMN earn_share_decimals DROP DEFAULT`),
+  },
+  {
+    name: '0190_routes_tables',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $$
+          DECLARE
+            entry record;
+            target_name text;
+          BEGIN
+            -- Tests replay every DDL statement on new connections, recreating empty legacy tables.
+            IF to_regclass('routes_catalogs') IS NOT NULL THEN
+              DROP TABLE IF EXISTS
+                funding_deposit_request_observations,
+                funding_deposits,
+                funding_deposit_addresses,
+                funding_transfer_transactions,
+                funding_transfer_events,
+                funding_idempotency_requests,
+                funding_transfers,
+                funding_routes,
+                funding_chain_tokens,
+                funding_tokens,
+                funding_chains,
+                funding_catalogs
+              CASCADE;
+            END IF;
+
+            IF to_regclass('funding_catalogs') IS NOT NULL AND to_regclass('routes_catalogs') IS NULL THEN
+              ALTER TABLE funding_catalogs RENAME TO routes_catalogs;
+            END IF;
+            IF to_regclass('funding_chain_tokens') IS NOT NULL AND to_regclass('routes_chain_tokens') IS NULL THEN
+              ALTER TABLE funding_chain_tokens RENAME TO routes_chain_tokens;
+            END IF;
+            IF to_regclass('funding_chains') IS NOT NULL AND to_regclass('routes_chains') IS NULL THEN
+              ALTER TABLE funding_chains RENAME TO routes_chains;
+            END IF;
+            IF to_regclass('funding_deposit_addresses') IS NOT NULL AND to_regclass('routes_deposit_addresses') IS NULL THEN
+              ALTER TABLE funding_deposit_addresses RENAME TO routes_deposit_addresses;
+            END IF;
+            IF to_regclass('funding_deposit_request_observations') IS NOT NULL AND to_regclass('routes_deposit_request_observations') IS NULL THEN
+              ALTER TABLE funding_deposit_request_observations RENAME TO routes_deposit_request_observations;
+            END IF;
+            IF to_regclass('funding_deposits') IS NOT NULL AND to_regclass('routes_deposits') IS NULL THEN
+              ALTER TABLE funding_deposits RENAME TO routes_deposits;
+            END IF;
+            IF to_regclass('funding_idempotency_requests') IS NOT NULL AND to_regclass('routes_idempotency_requests') IS NULL THEN
+              ALTER TABLE funding_idempotency_requests RENAME TO routes_idempotency_requests;
+            END IF;
+            IF to_regclass('funding_routes') IS NOT NULL AND to_regclass('routes_routes') IS NULL THEN
+              ALTER TABLE funding_routes RENAME TO routes_routes;
+            END IF;
+            IF to_regclass('funding_tokens') IS NOT NULL AND to_regclass('routes_tokens') IS NULL THEN
+              ALTER TABLE funding_tokens RENAME TO routes_tokens;
+            END IF;
+            IF to_regclass('funding_transfer_events') IS NOT NULL AND to_regclass('routes_transfer_events') IS NULL THEN
+              ALTER TABLE funding_transfer_events RENAME TO routes_transfer_events;
+            END IF;
+            IF to_regclass('funding_transfer_transactions') IS NOT NULL AND to_regclass('routes_transfer_transactions') IS NULL THEN
+              ALTER TABLE funding_transfer_transactions RENAME TO routes_transfer_transactions;
+            END IF;
+            IF to_regclass('funding_transfers') IS NOT NULL AND to_regclass('routes_transfers') IS NULL THEN
+              ALTER TABLE funding_transfers RENAME TO routes_transfers;
+            END IF;
+
+            UPDATE routes_deposit_addresses
+            SET snapshot = jsonb_set(snapshot, '{subsidize}', to_jsonb(subsidize), true)
+            WHERE snapshot->'subsidize' IS DISTINCT FROM to_jsonb(subsidize);
+
+            FOR entry IN
+              SELECT c.conname AS name, t.relname AS table_name
+              FROM pg_constraint AS c
+              JOIN pg_class AS t ON t.oid = c.conrelid
+              JOIN pg_namespace AS n ON n.oid = t.relnamespace
+              WHERE n.nspname = current_schema() AND c.conname LIKE 'funding\_%' ESCAPE '\\'
+            LOOP
+              target_name := regexp_replace(entry.name, '^funding_', 'routes_');
+              EXECUTE format(
+                'ALTER TABLE %I.%I RENAME CONSTRAINT %I TO %I',
+                current_schema(),
+                entry.table_name,
+                entry.name,
+                target_name
+              );
+            END LOOP;
+
+            FOR entry IN
+              SELECT indexname AS name
+              FROM pg_indexes
+              WHERE schemaname = current_schema() AND indexname LIKE 'funding\_%' ESCAPE '\\'
+            LOOP
+              target_name := regexp_replace(entry.name, '^funding_', 'routes_');
+              IF to_regclass(target_name) IS NULL THEN
+                EXECUTE format('ALTER INDEX %I.%I RENAME TO %I', current_schema(), entry.name, target_name);
+              ELSE
+                EXECUTE format('DROP INDEX %I.%I', current_schema(), entry.name);
+              END IF;
+            END LOOP;
+          END $$`,
+      ),
+  },
+  {
+    // Correct the deelUSD router boundary so registry reads can verify its bytecode.
+    name: '0191_deelusd_earn_router_deployment_block',
+    up: (db) =>
+      raw(
+        db,
+        sql`UPDATE earn_vaults
+          SET zones = jsonb_set(zones, '{0,deploymentBlock}', '35822949'::jsonb)
+          WHERE chain_id = 4217
+            AND vault_address = '0x4f94590b636f5878bce585e82379de81e1ec174f'
+            AND zones->0->>'chainId' = '421700001'
+            AND lower(zones->0->>'earnRouter') = '0x8117e0ba6239b9695f780deb010f72a2fa4bdfb6'
+            AND zones->0->>'deploymentBlock' = '35816964'`,
+      ),
+  },
+  {
+    name: '0192_reward_account_eligibility_registration',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE reward_accounts ADD COLUMN IF NOT EXISTS eligibility_registered_at text`,
+      ),
+  },
+  {
+    name: '0193_routes_subsidies',
+    up: (db) =>
+      db.schema
+        .createTable('routesSubsidies')
+        .ifNotExists()
+        .addColumn('apiKeyId', 'text')
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addColumn('enabled', 'boolean', (c) => c.notNull())
+        .addColumn('frequency', 'text', (c) => c.notNull())
+        .addColumn('maxAmount', 'text')
+        .addColumn('orgId', 'text', (c) =>
+          c.notNull().references('organizations.id').onDelete('cascade'),
+        )
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addCheckConstraint('routes_subsidies_frequency_check', sql`frequency = 'tx'`)
+        .addCheckConstraint(
+          'routes_subsidies_enabled_check',
+          sql`CASE WHEN enabled THEN CASE WHEN max_amount ~ '^(0|[1-9][0-9]*)([.][0-9]{1,6})?$' THEN max_amount::numeric > 0 ELSE false END ELSE max_amount IS NULL END`,
+        ),
+  },
+  {
+    name: '0194_routes_subsidies_org_unique',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE UNIQUE INDEX IF NOT EXISTS routes_subsidies_org_unique ON routes_subsidies (org_id) WHERE api_key_id IS NULL`,
+      ),
+  },
+  {
+    name: '0195_routes_subsidies_api_key_unique',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE UNIQUE INDEX IF NOT EXISTS routes_subsidies_api_key_unique ON routes_subsidies (api_key_id) WHERE api_key_id IS NOT NULL`,
+      ),
+  },
+  {
+    name: '0196_routes_subsidies_backfill',
+    up: (db) =>
+      raw(
+        db,
+        sql`INSERT INTO routes_subsidies (api_key_id, created_at, enabled, frequency, max_amount, org_id, updated_at) SELECT NULL, created_at, true, 'tx', '5', id, updated_at FROM organizations ON CONFLICT DO NOTHING`,
+      ),
+  },
+  {
+    name: '0197_routes_deposits_subsidy_meter_reported_at',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE routes_deposits ADD COLUMN IF NOT EXISTS subsidy_meter_reported_at text`,
+      ),
+  },
+  {
+    name: '0198_routes_deposits_unreported_subsidy_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_deposits_unreported_subsidy_idx ON routes_deposits (status_updated_at, id) WHERE environment = 'production' AND status = 'completed' AND settlement_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL AND subsidy_meter_reported_at IS NULL`,
+      ),
+  },
+  {
+    name: '0199_routes_deposits_subsidy_usage_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_deposits_subsidy_usage_idx ON routes_deposits (org_id, environment, status_updated_at) WHERE status = 'completed' AND settlement_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL`,
+      ),
+  },
+  {
+    name: '0200_routes_deposits_legacy_subsidies_reported',
+    up: (db) =>
+      raw(
+        db,
+        sql`UPDATE routes_deposits SET subsidy_meter_reported_at = coalesce(status_updated_at, updated_at) WHERE environment = 'production' AND settlement_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL AND subsidy_meter_reported_at IS NULL`,
+      ),
+  },
+  {
+    name: '0201_routes_deposits_billable_subsidy_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_deposits_billable_subsidy_idx ON routes_deposits (status_updated_at, id) WHERE environment = 'production' AND settlement_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0 AND subsidy_meter_reported_at IS NULL AND (status = 'completed' OR (status IN ('action-required', 'settling') AND tempo_gas_paid IS NOT NULL))`,
+      ),
+  },
+  {
+    name: '0202_routes_deposits_provider_subsidy',
+    up: (db) =>
+      raw(db, sql`ALTER TABLE routes_deposits ADD COLUMN IF NOT EXISTS provider_subsidy jsonb`),
+  },
+  {
+    name: '0203_routes_deposits_billable_subsidy_index_v2',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_deposits_billable_subsidy_v2_idx ON routes_deposits (status_updated_at, id) WHERE environment = 'production' AND subsidy_meter_reported_at IS NULL AND (status = 'completed' OR (status IN ('action-required', 'settling') AND tempo_gas_paid IS NOT NULL)) AND (((provider_subsidy->'amount'->>'baseUnits')::numeric > 0) OR (settlement_transaction_hash IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0))`,
+      ),
+  },
+  {
+    name: '0204_routes_deposits_subsidy_usage_index_v2',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_deposits_subsidy_usage_v2_idx ON routes_deposits (org_id, environment, subsidy_meter_reported_at) WHERE (provider_subsidy->'amount'->>'baseUnits')::numeric > 0 OR (subsidy_amount->>'baseUnits')::numeric > 0`,
+      ),
+  },
+  {
+    name: '0205_sponsored_transactions_admin_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS sponsored_transactions_admin_idx ON sponsored_transactions (created_at DESC, id DESC)`,
+      ),
+  },
+  {
+    name: '0206_routes_deposits_admin_subsidy_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_deposits_admin_subsidy_idx ON routes_deposits (updated_at DESC, id DESC) WHERE (provider_subsidy->'amount'->>'baseUnits')::numeric > 0 OR (subsidy_amount->>'baseUnits')::numeric > 0`,
+      ),
+  },
+  {
+    name: '0207_routes_deposit_addresses_drop_api_key',
+    up: (db) => raw(db, sql`ALTER TABLE routes_deposit_addresses DROP COLUMN IF EXISTS api_key_id`),
+  },
+  {
+    name: '0208_routes_subsidies_drop_api_key_policies',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $$
+          BEGIN
+            IF EXISTS (
+              SELECT 1
+              FROM information_schema.columns
+              WHERE table_schema = current_schema()
+                AND table_name = 'routes_subsidies'
+                AND column_name = 'api_key_id'
+            ) THEN
+              DELETE FROM routes_subsidies WHERE api_key_id IS NOT NULL;
+            END IF;
+          END $$`,
+      ),
+  },
+  {
+    name: '0209_routes_subsidies_drop_api_key_indexes',
+    up: (db) =>
+      raw(
+        db,
+        sql`DROP INDEX IF EXISTS routes_subsidies_org_unique, routes_subsidies_api_key_unique`,
+      ),
+  },
+  {
+    name: '0210_routes_subsidies_drop_api_key',
+    up: (db) => raw(db, sql`ALTER TABLE routes_subsidies DROP COLUMN IF EXISTS api_key_id`),
+  },
+  {
+    name: '0211_routes_subsidies_org_unique',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE UNIQUE INDEX IF NOT EXISTS routes_subsidies_org_unique ON routes_subsidies (org_id)`,
+      ),
+  },
+  {
+    name: '0212_routes_transfer_subsidy_nonces',
+    up: (db) =>
+      db.schema
+        .createTable('routesTransferSubsidyNonces')
+        .ifNotExists()
+        .addColumn('account', 'text', (c) => c.notNull())
+        .addColumn('chainId', 'text', (c) => c.notNull())
+        .addColumn('nextNonce', 'text', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addPrimaryKeyConstraint('routes_transfer_subsidy_nonces_pkey', ['chainId', 'account']),
+  },
+  {
+    name: '0213_routes_transfers_subsidy_amount',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_amount jsonb`), // prettier-ignore
+  },
+  {
+    name: '0214_routes_transfers_subsidy_meter_reported_at',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_meter_reported_at text`), // prettier-ignore
+  },
+  {
+    name: '0215_routes_transfers_subsidy_transaction_hash',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_transaction_hash text`), // prettier-ignore
+  },
+  {
+    name: '0216_routes_transfers_billable_subsidy_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_transfers_billable_subsidy_idx ON routes_transfers (status_updated_at, id) WHERE environment = 'production' AND status = 'completed' AND subsidy_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0 AND subsidy_meter_reported_at IS NULL`,
+      ),
+  },
+  {
+    name: '0217_routes_transfers_subsidy_account',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_account text`), // prettier-ignore
+  },
+  {
+    name: '0218_routes_transfers_subsidy_chain_id',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_chain_id text`), // prettier-ignore
+  },
+  {
+    name: '0219_routes_transfers_subsidy_native_amount',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_native_amount text`), // prettier-ignore
+  },
+  {
+    name: '0220_routes_transfers_subsidy_token_address',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_token_address text`), // prettier-ignore
+  },
+  {
+    name: '0221_routes_transfers_subsidy_reservation_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_transfers_subsidy_reservation_idx ON routes_transfers (subsidy_chain_id, subsidy_account, subsidy_token_address) WHERE status IN ('processing', 'action-required') AND subsidy_amount IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0`,
+      ),
+  },
+  {
+    name: '0222_routes_transfers_subsidy_commitment_amount',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_commitment_amount jsonb`), // prettier-ignore
+  },
+  {
+    name: '0223_routes_transfers_provider_delivered_at',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS provider_delivered_at text`), // prettier-ignore
+  },
+  {
+    name: '0224_routes_transfer_subsidy_nonces_blocked_at',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfer_subsidy_nonces ADD COLUMN IF NOT EXISTS blocked_at text`), // prettier-ignore
+  },
+  {
+    name: '0225_routes_transfer_subsidy_nonces_blocked_transfer_id',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfer_subsidy_nonces ADD COLUMN IF NOT EXISTS blocked_transfer_id text`), // prettier-ignore
+  },
+  {
+    name: '0226_routes_transfer_subsidy_nonces_blocked_reason',
+    up: (db) => raw(db, sql`ALTER TABLE routes_transfer_subsidy_nonces ADD COLUMN IF NOT EXISTS blocked_reason text`), // prettier-ignore
+  },
+  {
+    name: '0227_routes_transfers_subsidy_commitment_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_transfers_subsidy_commitment_idx ON routes_transfers (subsidy_chain_id, subsidy_account, subsidy_token_address) WHERE status IN ('awaiting-source', 'processing', 'action-required', 'refunding') AND subsidy_commitment_amount IS NOT NULL AND (subsidy_commitment_amount->>'baseUnits')::numeric > 0`,
+      ),
+  },
+  {
+    name: '0228_routes_transfer_subsidy_nonces_block_check',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'routes_transfer_subsidy_nonces_block_check' AND conrelid = 'routes_transfer_subsidy_nonces'::regclass) THEN ALTER TABLE routes_transfer_subsidy_nonces ADD CONSTRAINT routes_transfer_subsidy_nonces_block_check CHECK ((blocked_at IS NULL AND blocked_transfer_id IS NULL AND blocked_reason IS NULL) OR (blocked_at IS NOT NULL AND blocked_transfer_id IS NOT NULL AND blocked_reason = 'broadcast_rejected')); END IF; END $$`,
+      ),
+  },
+  {
+    // The test harness replays idempotent DDL on new connections, so legacy
+    // index migrations still need this unused physical column to exist.
+    name: '0229_routes_subsidies_legacy_api_key_compatibility',
+    up: (db) => raw(db, sql`ALTER TABLE routes_subsidies ADD COLUMN IF NOT EXISTS api_key_id text`), // prettier-ignore
+  },
+  {
+    name: '0230_routes_transfers_admin_subsidy_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_transfers_admin_subsidy_idx ON routes_transfers (updated_at DESC, id DESC) WHERE subsidy_amount IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0`,
+      ),
+  },
+  {
+    name: '0231_routes_transfers_expired_subsidy_commitments_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_transfers_expired_subsidy_commitments_idx ON routes_transfers (quote_expires_at, id) WHERE status = 'awaiting-source' AND subsidy_commitment_amount IS NOT NULL AND (subsidy_commitment_amount->>'baseUnits')::numeric > 0`,
+      ),
+  },
+  {
+    name: '0232_sponsorship_reconciliation_cursors',
+    up: (db) =>
+      db.schema
+        .createTable('sponsorshipReconciliationCursors')
+        .ifNotExists()
+        .addColumn('blockNumber', 'text', (c) => c.notNull())
+        .addColumn('chainId', 'integer', (c) => c.notNull())
+        .addColumn('feePayer', 'text', (c) => c.notNull())
+        .addColumn('transactionIndex', 'integer', (c) => c.notNull())
+        .addColumn('updatedAt', 'text', (c) => c.notNull())
+        .addPrimaryKeyConstraint('sponsorship_reconciliation_cursors_pkey', [
+          'chainId',
+          'feePayer',
+        ]),
+  },
+  {
+    name: '0233_sponsored_transactions_recovery_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS sponsored_transactions_recovery_idx ON sponsored_transactions (finalized_at, chain_id, created_at) WHERE status = 'failed' AND transaction_hash IS NULL`,
+      ),
+  },
+  {
+    name: '0234_sponsorship_reconciliation_progress',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE sponsorship_reconciliation_cursors ADD COLUMN IF NOT EXISTS complete boolean NOT NULL DEFAULT false, ADD COLUMN IF NOT EXISTS retry_count integer NOT NULL DEFAULT 0, ADD COLUMN IF NOT EXISTS retry_key text, ADD COLUMN IF NOT EXISTS revision text NOT NULL DEFAULT ''`,
+      ),
+  },
+  {
+    name: '0235_routes_deposits_unattributed_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_deposits_unattributed_idx ON routes_deposits (deposit_address_id, created_at, id) WHERE provider_request_id IS NULL`,
+      ),
+  },
+  {
+    name: '0236_routes_transfer_subsidies',
+    up: (db) =>
+      db.schema
+        .createTable('routesTransferSubsidies')
+        .ifNotExists()
+        .addColumn('sourceChainId', 'text', (c) => c.notNull())
+        .addColumn('transactionRef', 'text', (c) => c.notNull())
+        .addColumn('destinationChainId', 'text', (c) => c.notNull())
+        .addColumn('recipient', 'text', (c) => c.notNull())
+        .addColumn('tokenAddress', 'text', (c) => c.notNull())
+        .addColumn('transaction', 'jsonb', (c) => c.notNull())
+        .addColumn('transferId', 'text', (c) => c.notNull())
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addPrimaryKeyConstraint('routes_transfer_subsidies_pkey', [
+          'sourceChainId',
+          'transactionRef',
+        ]),
+  },
+  {
+    name: '0237_routes_transfer_subsidies_capture',
+    // Capture legacy Worker writes during rollout and retain settlement evidence after transfer deletion.
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $$
+        BEGIN
+          LOCK TABLE routes_transfers IN SHARE ROW EXCLUSIVE MODE;
+          INSERT INTO routes_transfer_subsidies (
+            source_chain_id, transaction_ref, destination_chain_id, recipient,
+            token_address, transaction, transfer_id, created_at
+          )
+          SELECT snapshot->'sourceChain'->>'id', snapshot->'sourceTransactionHashes'->>0,
+            subsidy_chain_id, lower(snapshot->>'recipient'), subsidy_token_address,
+            provider_state->'transferSubsidy', id, updated_at
+          FROM routes_transfers
+          WHERE subsidy_transaction_hash IS NOT NULL
+            AND provider_state->'transferSubsidy' IS NOT NULL
+            AND snapshot->'sourceTransactionHashes'->>0 IS NOT NULL
+          ON CONFLICT DO NOTHING;
+
+          CREATE OR REPLACE FUNCTION capture_routes_transfer_subsidy() RETURNS trigger
+          LANGUAGE plpgsql SET search_path FROM CURRENT AS $capture$
+          DECLARE
+            settlement routes_transfer_subsidies%ROWTYPE;
+            source_chain text;
+            source_ref text;
+          BEGIN
+            IF NEW.subsidy_transaction_hash IS NULL OR NEW.provider_state->'transferSubsidy' IS NULL THEN
+              RETURN NEW;
+            END IF;
+            source_chain := NEW.snapshot->'sourceChain'->>'id';
+            source_ref := NEW.snapshot->'sourceTransactionHashes'->>0;
+            IF source_ref IS NULL THEN
+              RAISE EXCEPTION 'Subsidy source evidence is missing';
+            END IF;
+            INSERT INTO routes_transfer_subsidies (
+              source_chain_id, transaction_ref, destination_chain_id, recipient,
+              token_address, transaction, transfer_id, created_at
+            ) VALUES (
+              source_chain, source_ref, NEW.subsidy_chain_id, lower(NEW.snapshot->>'recipient'),
+              NEW.subsidy_token_address, NEW.provider_state->'transferSubsidy', NEW.id, NEW.updated_at
+            ) ON CONFLICT DO NOTHING;
+            SELECT * INTO STRICT settlement FROM routes_transfer_subsidies
+              WHERE source_chain_id = source_chain AND transaction_ref = source_ref;
+            IF settlement.transaction IS DISTINCT FROM NEW.provider_state->'transferSubsidy'
+              OR settlement.destination_chain_id IS DISTINCT FROM NEW.subsidy_chain_id
+              OR settlement.recipient IS DISTINCT FROM lower(NEW.snapshot->>'recipient')
+              OR settlement.token_address IS DISTINCT FROM NEW.subsidy_token_address THEN
+              RAISE EXCEPTION 'Source payment already has a different subsidy settlement';
+            END IF;
+            IF settlement.transfer_id <> NEW.id THEN
+              NEW.subsidy_amount := NULL;
+              NEW.subsidy_commitment_amount := NULL;
+              NEW.subsidy_native_amount := NULL;
+            END IF;
+            RETURN NEW;
+          END $capture$;
+          DROP TRIGGER IF EXISTS routes_transfer_subsidy_capture ON routes_transfers;
+          CREATE TRIGGER routes_transfer_subsidy_capture
+            BEFORE INSERT OR UPDATE OF provider_state, subsidy_transaction_hash, subsidy_amount
+            ON routes_transfers FOR EACH ROW EXECUTE FUNCTION capture_routes_transfer_subsidy();
+        END $$`,
+      ),
+  },
+  {
+    name: '0238_routes_transfer_source_claim_scope',
+    // Derive tenancy for old and new writers before replacing global source uniqueness.
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $$
+        BEGIN
+          ALTER TABLE routes_transfer_transactions
+            ADD COLUMN IF NOT EXISTS org_id text,
+            ADD COLUMN IF NOT EXISTS environment text,
+            ADD COLUMN IF NOT EXISTS project_id text;
+          UPDATE routes_transfer_transactions AS evidence
+            SET org_id = owner.org_id, environment = owner.environment, project_id = owner.project_id
+            FROM routes_transfers AS owner WHERE owner.id = evidence.transfer_id;
+          ALTER TABLE routes_transfer_transactions
+            ALTER COLUMN org_id SET NOT NULL, ALTER COLUMN environment SET NOT NULL;
+          CREATE OR REPLACE FUNCTION scope_routes_transfer_transaction() RETURNS trigger
+          LANGUAGE plpgsql SET search_path FROM CURRENT AS $scope$
+          BEGIN
+            SELECT org_id, environment, project_id INTO STRICT NEW.org_id, NEW.environment, NEW.project_id
+              FROM routes_transfers WHERE id = NEW.transfer_id;
+            RETURN NEW;
+          END $scope$;
+          DROP TRIGGER IF EXISTS routes_transfer_transaction_scope ON routes_transfer_transactions;
+          CREATE TRIGGER routes_transfer_transaction_scope
+            BEFORE INSERT OR UPDATE ON routes_transfer_transactions
+            FOR EACH ROW EXECUTE FUNCTION scope_routes_transfer_transaction();
+          CREATE UNIQUE INDEX IF NOT EXISTS routes_transfer_transactions_source_owner_unique
+            ON routes_transfer_transactions (org_id, environment, project_id, chain_id, transaction_ref)
+            NULLS NOT DISTINCT WHERE role = 'source';
+          DROP INDEX IF EXISTS routes_transfer_transactions_source_unique;
+        END $$`,
+      ),
+  },
+  {
+    name: '0239_routes_transfer_source_lookup_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_transfer_transactions_source_lookup_idx ON routes_transfer_transactions (chain_id, transaction_ref) WHERE role = 'source'`,
+      ),
+  },
+  {
+    name: '0240_sponsored_transactions_finalization_attempted_at',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE sponsored_transactions ADD COLUMN IF NOT EXISTS finalization_attempted_at text`,
+      ),
+  },
+  {
+    name: '0241_sponsored_transactions_finalization_queue_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS sponsored_transactions_finalization_queue_idx ON sponsored_transactions (finalization_attempted_at NULLS FIRST, created_at, id) WHERE status = 'pending'`,
+      ),
+  },
+  {
+    name: '0242_api_key_owner_tombstones',
+    up: (db) =>
+      db.schema
+        .createTable('api_key_owner_tombstones')
+        .ifNotExists()
+        .addColumn('id', 'text', (column) => column.primaryKey())
+        .addColumn('createdAt', 'text', (column) => column.notNull()),
+  },
+  {
+    name: '0243_api_key_owner_admissions',
+    up: (db) =>
+      db.schema
+        .createTable('api_key_owner_admissions')
+        .ifNotExists()
+        .addColumn('orgId', 'text', (column) => column.primaryKey())
+        .addColumn('liveKeys', 'integer', (column) => column.notNull())
+        .addColumn('updatedAt', 'text', (column) => column.notNull()),
+  },
+  {
+    name: '0244_api_key_admissions',
+    up: (db) =>
+      db.schema
+        .createTable('api_key_admissions')
+        .ifNotExists()
+        .addColumn('expiresAt', 'text')
+        .addColumn('id', 'text', (column) => column.notNull().unique())
+        .addColumn('orgId', 'text', (column) => column.notNull())
+        .addColumn('projectId', 'text')
+        .addPrimaryKeyConstraint('api_key_admissions_pkey', ['orgId', 'id']),
+  },
+  {
+    name: '0245_api_key_admission_bootstraps',
+    up: (db) =>
+      db.schema
+        .createTable('api_key_admission_bootstraps')
+        .ifNotExists()
+        .addColumn('orgId', 'text', (column) => column.primaryKey())
+        .addColumn('bootstrappedAt', 'text', (column) => column.notNull()),
+  },
+  {
+    name: '0246_api_key_revocations',
+    up: (db) =>
+      db.schema
+        .createTable('api_key_revocations')
+        .ifNotExists()
+        .addColumn('id', 'text', (column) => column.primaryKey())
+        .addColumn('revokedAt', 'text', (column) => column.notNull()),
+  },
+  {
+    name: '0247_api_key_revocation_lifecycle',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE api_key_revocations ADD COLUMN IF NOT EXISTS org_id text REFERENCES organizations(id) ON DELETE CASCADE, ADD COLUMN IF NOT EXISTS expires_at text`,
+      ),
+  },
+  {
+    name: '0248_api_key_revocation_expiry_backfill',
+    up: (db) =>
+      raw(
+        db,
+        sql`UPDATE api_key_revocations SET expires_at = to_char(revoked_at::timestamptz + interval '7 days', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') WHERE expires_at IS NULL`,
+      ),
+  },
+  {
+    name: '0249_api_key_revocation_expiry_required',
+    up: (db) => raw(db, sql`ALTER TABLE api_key_revocations ALTER COLUMN expires_at SET NOT NULL`),
+  },
+  {
+    name: '0250_api_key_revocation_expiry_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS api_key_revocations_expiry_idx ON api_key_revocations (expires_at, id)`,
+      ),
+  },
+  {
+    name: '0251_api_key_revocation_org_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS api_key_revocations_org_idx ON api_key_revocations (org_id) WHERE org_id IS NOT NULL`,
+      ),
+  },
+  {
+    // Triggers make migrate-before-deploy safe: older Workers still fence raw owner deletes and acquire the same locks as new key writes.
+    name: '0252_api_key_owner_delete_trigger_function',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE OR REPLACE FUNCTION api_key_fence_deleted_owner() RETURNS trigger LANGUAGE plpgsql AS $api_key_fence$
+          DECLARE owner_key text;
+          BEGIN
+            IF TG_TABLE_NAME = 'organizations' THEN
+              owner_key := 'organization:' || OLD.id;
+            ELSE
+              PERFORM pg_advisory_xact_lock(hashtextextended('organization:' || OLD.org_id, 0));
+              owner_key := 'project:' || OLD.org_id || ':' || OLD.id;
+            END IF;
+            PERFORM pg_advisory_xact_lock(hashtextextended(owner_key, 0));
+            EXECUTE format('INSERT INTO %I.api_key_owner_tombstones (id, created_at) VALUES ($1, $2) ON CONFLICT (id) DO NOTHING', TG_TABLE_SCHEMA)
+              USING owner_key, to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"');
+            RETURN OLD;
+          END
+        $api_key_fence$`,
+      ),
+  },
+  {
+    name: '0253_api_key_organization_delete_trigger',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $api_key_trigger$
+          BEGIN
+            IF NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgname = 'api_key_fence_deleted_organization' AND tgrelid = 'organizations'::regclass) THEN
+              CREATE TRIGGER api_key_fence_deleted_organization BEFORE DELETE ON organizations FOR EACH ROW EXECUTE FUNCTION api_key_fence_deleted_owner();
+            END IF;
+          END
+        $api_key_trigger$`,
+      ),
+  },
+  {
+    name: '0254_api_key_project_delete_trigger',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $api_key_trigger$
+          BEGIN
+            IF NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgname = 'api_key_fence_deleted_project' AND tgrelid = 'projects'::regclass) THEN
+              CREATE TRIGGER api_key_fence_deleted_project BEFORE DELETE ON projects FOR EACH ROW EXECUTE FUNCTION api_key_fence_deleted_owner();
+            END IF;
+          END
+        $api_key_trigger$`,
+      ),
+  },
+  {
+    // The table lock partitions legacy writers; a 24-hour organization-deletion embargo lets pre-fence Worker requests finish before owners can disappear.
+    name: '0255_routes_organization_delete_fence',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $migration$ BEGIN LOCK TABLE routes_idempotency_requests IN SHARE ROW EXCLUSIVE MODE; EXECUTE $definition$ CREATE OR REPLACE FUNCTION api_key_fence_deleted_owner() RETURNS trigger LANGUAGE plpgsql AS $body$ DECLARE owner_key text; BEGIN IF TG_TABLE_NAME = 'organizations' THEN PERFORM pg_advisory_xact_lock(hashtextextended('routes-subsidy:' || OLD.id, 0)); PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); owner_key := 'organization:' || OLD.id; ELSE PERFORM pg_advisory_xact_lock(hashtextextended('organization:' || OLD.org_id, 0)); owner_key := 'project:' || OLD.org_id || ':' || OLD.id; END IF; PERFORM pg_advisory_xact_lock(hashtextextended(owner_key, 0)); EXECUTE format('INSERT INTO %I.api_key_owner_tombstones (id, created_at) VALUES ($1, $2) ON CONFLICT (id) DO NOTHING', TG_TABLE_SCHEMA) USING owner_key, to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'); IF TG_TABLE_NAME = 'organizations' THEN EXECUTE format('INSERT INTO %I.api_key_owner_tombstones (id, created_at) VALUES ($1, $2) ON CONFLICT (id) DO NOTHING', TG_TABLE_SCHEMA) USING 'routes-ownerless-legacy-cutoff', to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'); END IF; RETURN OLD; END $body$ $definition$; EXECUTE $definition$ CREATE OR REPLACE FUNCTION fence_routes_organization_delete() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ BEGIN PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'routes-legacy-attempt-drain' AND created_at::timestamptz + interval '24 hours' > CURRENT_TIMESTAMP) THEN RAISE EXCEPTION 'route lifecycle rollout drain is active' USING ERRCODE = '23503'; END IF; IF EXISTS (SELECT 1 FROM routes_deposit_addresses WHERE org_id = OLD.id AND (status != 'deactivated' OR (provider_id = 'relay' AND subsidize))) OR EXISTS (SELECT 1 FROM routes_idempotency_requests AS request WHERE request.status IN ('pending', 'provisioned') AND (request.expires_at::timestamptz > CURRENT_TIMESTAMP OR COALESCE((to_jsonb(request)->>'irrevocable')::boolean, false)) AND (((to_jsonb(request)->>'org_id') = OLD.id AND (to_jsonb(request)->>'operation') = 'deposit_address') OR to_jsonb(request)->>'org_id' IS NULL OR to_jsonb(request)->>'operation' IS NULL)) THEN RAISE EXCEPTION 'organization has active route deposit address work' USING ERRCODE = '23503'; END IF; RETURN OLD; END $body$ $definition$; EXECUTE $definition$ CREATE OR REPLACE FUNCTION fence_routes_deposit_address_owner() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ BEGIN PERFORM pg_advisory_xact_lock(hashtextextended('routes-subsidy:' || NEW.org_id, 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'organization:' || NEW.org_id) THEN RAISE EXCEPTION 'route deposit address owner was deleted' USING ERRCODE = '23503'; END IF; RETURN NEW; END $body$ $definition$; EXECUTE $definition$ CREATE OR REPLACE FUNCTION fence_routes_idempotency_owner() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ DECLARE owner_id text; BEGIN owner_id := to_jsonb(NEW)->>'org_id'; IF owner_id IS NULL THEN SELECT org_id INTO owner_id FROM api_key_admissions WHERE id = NEW.api_key_id; END IF; IF owner_id IS NULL THEN PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'routes-ownerless-legacy-cutoff') THEN RAISE EXCEPTION 'ownerless route idempotency creation is disabled' USING ERRCODE = '23503'; END IF; RETURN NEW; END IF; PERFORM pg_advisory_xact_lock(hashtextextended('routes-subsidy:' || owner_id, 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'organization:' || owner_id) THEN RAISE EXCEPTION 'route idempotency owner was deleted' USING ERRCODE = '23503'; END IF; RETURN NEW; END $body$ $definition$; EXECUTE 'CREATE OR REPLACE TRIGGER routes_deposit_address_owner_fence BEFORE INSERT OR UPDATE OF org_id ON routes_deposit_addresses FOR EACH ROW EXECUTE FUNCTION fence_routes_deposit_address_owner()'; EXECUTE 'CREATE OR REPLACE TRIGGER routes_idempotency_owner_fence BEFORE INSERT OR UPDATE ON routes_idempotency_requests FOR EACH ROW EXECUTE FUNCTION fence_routes_idempotency_owner()'; EXECUTE 'CREATE OR REPLACE TRIGGER routes_organization_delete_fence BEFORE DELETE ON organizations FOR EACH ROW EXECUTE FUNCTION fence_routes_organization_delete()'; INSERT INTO api_key_owner_tombstones (id, created_at) VALUES ('routes-legacy-attempt-drain', to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')) ON CONFLICT (id) DO NOTHING; END $migration$`,
+      ),
+  },
+  {
+    name: '0256_routes_idempotency_organization',
+    up: (db) =>
+      raw(db, sql`ALTER TABLE routes_idempotency_requests ADD COLUMN IF NOT EXISTS org_id text`),
+  },
+  {
+    name: '0257_routes_idempotency_operation',
+    up: (db) =>
+      raw(db, sql`ALTER TABLE routes_idempotency_requests ADD COLUMN IF NOT EXISTS operation text`),
+  },
+  {
+    name: '0258_routes_idempotency_irrevocable',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE routes_idempotency_requests ADD COLUMN IF NOT EXISTS irrevocable boolean NOT NULL DEFAULT false`,
+      ),
+  },
+  {
+    name: '0259_routes_idempotency_organization_inflight_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_idempotency_requests_organization_inflight_idx ON routes_idempotency_requests (org_id) WHERE org_id IS NOT NULL AND operation = 'deposit_address' AND status IN ('pending', 'provisioned')`,
+      ),
+  },
+  {
+    name: '0260_routes_idempotency_match_hash',
+    up: (db) =>
+      raw(
+        db,
+        sql`ALTER TABLE routes_idempotency_requests ADD COLUMN IF NOT EXISTS match_hash text`,
+      ),
+  },
+  {
+    name: '0261_routes_idempotency_match_inflight_index',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE INDEX IF NOT EXISTS routes_idempotency_requests_match_inflight_idx ON routes_idempotency_requests (org_id, match_hash) WHERE match_hash IS NOT NULL AND operation = 'deposit_address' AND status IN ('pending', 'provisioned')`,
+      ),
+  },
+  {
+    name: '0262_routes_organization_delete_fence_unattributed_checkpoint',
+    up: (db) =>
+      raw(
+        db,
+        sql`CREATE OR REPLACE FUNCTION fence_routes_organization_delete() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ BEGIN PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'routes-legacy-attempt-drain' AND created_at::timestamptz + interval '24 hours' > CURRENT_TIMESTAMP) THEN RAISE EXCEPTION 'route lifecycle rollout drain is active' USING ERRCODE = '23503'; END IF; IF EXISTS (SELECT 1 FROM routes_deposit_addresses WHERE org_id = OLD.id AND (status != 'deactivated' OR (provider_id = 'relay' AND subsidize))) OR EXISTS (SELECT 1 FROM routes_idempotency_requests AS request WHERE request.status IN ('pending', 'provisioned') AND (request.expires_at::timestamptz > CURRENT_TIMESTAMP OR COALESCE((to_jsonb(request)->>'irrevocable')::boolean, false)) AND (((to_jsonb(request)->>'org_id') = OLD.id AND (to_jsonb(request)->>'operation') = 'deposit_address') OR to_jsonb(request)->>'org_id' IS NULL OR to_jsonb(request)->>'operation' IS NULL)) THEN RAISE EXCEPTION 'organization has active route deposit address work' USING ERRCODE = '23503'; END IF; RETURN OLD; END $body$`,
+      ),
+  },
+  {
+    // Rolling workers may insert after preflight; these triggers share the deletion lock and reject owners deleted while provisioning.
+    name: '0263_routes_creation_owner_fences',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $migration$ BEGIN EXECUTE $definition$ CREATE OR REPLACE FUNCTION fence_routes_idempotency_owner() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ DECLARE owner_id text; BEGIN owner_id := NEW.org_id; IF owner_id IS NULL THEN SELECT org_id INTO owner_id FROM api_key_admissions WHERE id = NEW.api_key_id; END IF; IF owner_id IS NULL THEN PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'routes-ownerless-legacy-cutoff') THEN RAISE EXCEPTION 'ownerless route idempotency creation is disabled' USING ERRCODE = '23503'; END IF; RETURN NEW; END IF; PERFORM pg_advisory_xact_lock(hashtextextended('routes-subsidy:' || owner_id, 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'organization:' || owner_id) THEN RAISE EXCEPTION 'route idempotency owner was deleted' USING ERRCODE = '23503'; END IF; RETURN NEW; END $body$ $definition$; EXECUTE 'CREATE OR REPLACE TRIGGER routes_idempotency_owner_fence BEFORE INSERT OR UPDATE OF org_id, status ON routes_idempotency_requests FOR EACH ROW EXECUTE FUNCTION fence_routes_idempotency_owner()'; END $migration$`,
+      ),
+  },
+  {
+    // Existing unattributed checkpoints get one bounded drain window because their subsidy intent cannot be reconstructed.
+    name: '0264_routes_legacy_checkpoint_drain',
+    up: (db) =>
+      raw(
+        db,
+        sql`WITH marker AS (INSERT INTO api_key_owner_tombstones (id, created_at) VALUES ('routes-legacy-checkpoint-drain', to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')) ON CONFLICT (id) DO UPDATE SET created_at = api_key_owner_tombstones.created_at RETURNING created_at) UPDATE routes_idempotency_requests AS request SET expires_at = to_char(marker.created_at::timestamptz + interval '24 hours', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') FROM marker WHERE request.status = 'provisioned' AND (request.org_id IS NULL OR request.operation IS NULL) AND request.expires_at::timestamptz < marker.created_at::timestamptz + interval '24 hours'`,
+      ),
+  },
+  {
+    name: '0265_routes_deposit_address_creator',
+    up: (db) =>
+      raw(
+        db,
+        sql`DO $migration$ BEGIN ALTER TABLE routes_deposit_addresses ADD COLUMN IF NOT EXISTS creator_user_id text; UPDATE routes_deposit_addresses AS address SET creator_user_id = organization.user_id FROM organizations AS organization WHERE address.org_id = organization.id AND address.creator_user_id IS NULL; CREATE INDEX IF NOT EXISTS routes_deposit_addresses_creator_user_idx ON routes_deposit_addresses (creator_user_id) WHERE creator_user_id IS NOT NULL; EXECUTE $definition$ CREATE OR REPLACE FUNCTION set_routes_deposit_address_creator() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ BEGIN NEW.creator_user_id := (SELECT user_id FROM organizations WHERE id = NEW.org_id); RETURN NEW; END $body$ $definition$; EXECUTE 'CREATE OR REPLACE TRIGGER routes_deposit_address_creator BEFORE INSERT OR UPDATE OF org_id ON routes_deposit_addresses FOR EACH ROW EXECUTE FUNCTION set_routes_deposit_address_creator()'; END $migration$`,
+      ),
+  },
+  {
+    name: '0266_reward_credits',
+    up: (db) =>
+      db.schema
+        .createTable('rewardCredits')
+        .ifNotExists()
+        .addColumn('chainId', 'bigint', (c) => c.notNull())
+        .addColumn('vaultAddress', 'text', (c) => c.notNull())
+        .addColumn('recipient', 'text', (c) => c.notNull())
+        .addColumn('reference', 'text', (c) => c.notNull())
+        .addColumn('assets', 'numeric', (c) => c.notNull())
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addPrimaryKeyConstraint('reward_credits_pkey', [
+          'chainId',
+          'vaultAddress',
+          'recipient',
+          'reference',
+        ])
+        // Runs rewrite reward_accounts wholesale, so the ledger must not cascade from it.
+        .addForeignKeyConstraint(
+          'reward_credits_campaign_fkey',
+          ['chainId', 'vaultAddress'],
+          'rewardCampaigns',
+          ['chainId', 'vaultAddress'],
+          (c) => c.onDelete('cascade'),
+        ),
+  },
+  {
+    name: '0267_reward_campaign_distributors',
+    up: (db) =>
+      db.schema
+        .createTable('rewardCampaignDistributors')
+        .ifNotExists()
+        .addColumn('chainId', 'bigint', (c) => c.notNull())
+        .addColumn('vaultAddress', 'text', (c) => c.notNull())
+        .addColumn('distributorAddress', 'text', (c) => c.notNull())
+        .addColumn('createdAt', 'text', (c) => c.notNull())
+        .addPrimaryKeyConstraint('reward_campaign_distributors_pkey', [
+          'chainId',
+          'vaultAddress',
+          'distributorAddress',
+        ])
+        .addForeignKeyConstraint(
+          'reward_campaign_distributors_campaign_fkey',
+          ['chainId', 'vaultAddress'],
+          'rewardCampaigns',
+          ['chainId', 'vaultAddress'],
+          (c) => c.onDelete('cascade'),
+        ),
+  },
+  {
+    name: '0268_reward_campaign_distributors_backfill',
+    up: (db) =>
+      raw(
+        db,
+        sql`INSERT INTO reward_campaign_distributors (chain_id, vault_address, distributor_address, created_at) SELECT chain_id, vault_address, distributor_address, updated_at FROM reward_campaigns WHERE distributor_address IS NOT NULL ON CONFLICT DO NOTHING`,
+      ),
+  },
+  {
+    // This verified distributor paid rewards before distributor history was retained.
+    name: '0269_reward_campaign_previous_distributor',
+    up: (db) =>
+      raw(
+        db,
+        sql`INSERT INTO reward_campaign_distributors (chain_id, vault_address, distributor_address, created_at) SELECT chain_id, vault_address, '0x6c857bf1fe7de1bc1d5c639c721b2633f8fe34f3', created_at FROM reward_campaigns WHERE chain_id = 4217 AND vault_address = '0xd730394f3bb85a4828e35fc5e361dcc9f894fa4f' ON CONFLICT DO NOTHING`,
+      ),
+  },
+  {
+    // Provider subsidy billing first became active with this production Worker deployment.
+    name: '0270_routes_deposits_legacy_provider_subsidies_reported',
+    up: (db) =>
+      raw(
+        db,
+        sql`UPDATE routes_deposits SET subsidy_meter_reported_at = coalesce(status_updated_at, updated_at) WHERE environment = 'production' AND subsidy_meter_reported_at IS NULL AND (provider_subsidy->'amount'->>'baseUnits')::numeric > 0 AND (status = 'completed' OR (status IN ('action-required', 'settling') AND tempo_gas_paid IS NOT NULL)) AND coalesce(status_updated_at, updated_at) < '2026-09-03T06:10:21.000Z'`,
+      ),
+  },
 ]
 
 /**
@@ -1554,10 +3011,7 @@ function fromDialect(dialect: Dialect, options: fromDialect.Options = {}): Db {
   // transaction poolers reset session state between statements.
   const kysely = options.schema ? root.withPlugin(new WithSchemaPlugin(options.schema)) : root
   // Builds Db over a top-level Kysely handle or transaction-scoped Kysely handle.
-  function build(kysely: Kysely<Database>): Db {
-    // Prevents same-handle nested transactions from deadlocking capped pools.
-    // Nested work must use the callback's scoped `tx`.
-    let active = false
+  function build(kysely: Kysely<Database>, transactional = false): Db {
     return {
       async close() {
         await kysely.destroy()
@@ -1630,13 +3084,8 @@ function fromDialect(dialect: Dialect, options: fromDialect.Options = {}): Db {
         })
       },
       async transaction(fn) {
-        if (active) throw new Error('Db.transaction does not support nesting.')
-        active = true
-        try {
-          return await kysely.transaction().execute((trx) => fn(build(trx)))
-        } finally {
-          active = false
-        }
+        if (transactional) throw new Error('Db.transaction does not support nesting.')
+        return kysely.transaction().execute((trx) => fn(build(trx, true)))
       },
     }
   }
@@ -1653,20 +3102,20 @@ declare namespace fromDialect {
 
 /**
  * Creates a Postgres-backed {@link Db} via Kysely's `PostgresDialect`. Optional
- * `schema` qualifies repository queries, scopes migrations, and caps the pool.
+ * `schema` qualifies repository queries and scopes migrations.
  *
  * @param options - Postgres options.
  * @returns The database.
  */
 export function postgres(options: postgres.Options): Db {
-  const { connectionString, schema } = options
+  const { connectionString, maxConnections, schema } = options
   // Bounded connect and pool-checkout wait: the pg default (0) waits forever,
   // so an unresponsive origin parks callers and their invocation memory
   // invisibly instead of failing into the retry paths.
   const pool = new pg.Pool({
     connectionString,
     connectionTimeoutMillis: 30_000,
-    ...(schema ? { max: 1 } : {}),
+    ...(maxConnections === undefined && !schema ? {} : { max: maxConnections ?? 1 }),
   })
   return fromDialect(new PostgresDialect({ pool }), { schema })
 }
@@ -1676,6 +3125,8 @@ export declare namespace postgres {
   type Options = {
     /** Postgres connection string (`postgresql://…`). */
     connectionString: string
+    /** Maximum connections held by this local pool; defaults to `1` with schema scoping. */
+    maxConnections?: number | undefined
     /** Schema to qualify and create during migration (isolates concurrent tests). */
     schema?: string | undefined
   }