tapimo 0.14.0 → 0.15.1

package/dist/db/Db.js

@@ -1179,6 +1179,1035 @@ export const migrations = [
         name: '0141_sponsored_transactions_promotion_spend_index',
         up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS sponsored_transactions_promotion_spend_idx ON sponsored_transactions (org_id, project_id, status, created_at) WHERE NOT billable`),
     },
+    {
+        name: '0142_funding_transfers_status_updated_at',
+        up: (db) => raw(db, sql `ALTER TABLE funding_transfers ADD COLUMN IF NOT EXISTS status_updated_at text`),
+    },
+    {
+        name: '0143_funding_deposits_status_updated_at',
+        up: (db) => raw(db, sql `ALTER TABLE funding_deposits ADD COLUMN IF NOT EXISTS status_updated_at text`),
+    },
+    {
+        name: '0144_funding_deposit_addresses_status_updated_at',
+        up: (db) => raw(db, sql `ALTER TABLE funding_deposit_addresses ADD COLUMN IF NOT EXISTS status_updated_at text`),
+    },
+    {
+        name: '0145_funding_transfers_state_metrics_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS funding_transfers_state_metrics_idx ON funding_transfers (status, environment, provider_id, method, (status_reason->>'code'), status_updated_at, updated_at)`),
+    },
+    {
+        name: '0146_funding_deposits_state_metrics_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS funding_deposits_state_metrics_idx ON funding_deposits (status, environment, deposit_address_id, (status_reason->>'code'), status_updated_at, updated_at)`),
+    },
+    {
+        name: '0147_funding_deposits_provider_delivered_at',
+        up: (db) => raw(db, sql `ALTER TABLE funding_deposits ADD COLUMN IF NOT EXISTS provider_delivered_at text`),
+    },
+    {
+        name: '0148_funding_transfers_updated_at_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS funding_transfers_updated_at_idx ON funding_transfers (updated_at DESC, id DESC)`),
+    },
+    {
+        name: '0149_funding_deposits_updated_at_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS funding_deposits_updated_at_idx ON funding_deposits (updated_at DESC, id DESC)`),
+    },
+    {
+        name: '0150_funding_deposit_addresses_updated_at_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS funding_deposit_addresses_updated_at_idx ON funding_deposit_addresses (updated_at DESC, id DESC)`),
+    },
+    {
+        name: '0151_sponsorship_attributions',
+        up: (db) => db.schema
+            .createTable('sponsorshipAttributions')
+            .ifNotExists()
+            .addColumn('id', 'text', (c) => c.primaryKey())
+            .addColumn('orgId', 'text', (c) => c.notNull())
+            .addColumn('externalId', 'text')
+            .addColumn('projectId', 'text')
+            .addColumn('startsAt', 'text')
+            .addColumn('endsAt', 'text')
+            .addColumn('spendLimit', 'text')
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addCheckConstraint('sponsorship_attributions_source_check', sql `(external_id IS NULL) <> (project_id IS NULL)`)
+            .addCheckConstraint('sponsorship_attributions_window_check', sql `(starts_at IS NULL) = (ends_at IS NULL)`),
+    },
+    {
+        name: '0152_sponsorship_attributions_external_unique',
+        up: (db) => raw(db, sql `CREATE UNIQUE INDEX IF NOT EXISTS sponsorship_attributions_external_unique ON sponsorship_attributions (org_id, external_id) WHERE external_id IS NOT NULL`),
+    },
+    {
+        name: '0153_sponsorship_attributions_project_unique',
+        up: (db) => raw(db, sql `CREATE UNIQUE INDEX IF NOT EXISTS sponsorship_attributions_project_unique ON sponsorship_attributions (org_id, project_id) WHERE project_id IS NOT NULL`),
+    },
+    {
+        name: '0154_sponsored_transactions_attribution_id',
+        up: (db) => raw(db, sql `ALTER TABLE sponsored_transactions ADD COLUMN IF NOT EXISTS sponsorship_attribution_id text`),
+    },
+    {
+        name: '0155_sponsored_transactions_attribution_spend_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS sponsored_transactions_attribution_spend_idx ON sponsored_transactions (org_id, sponsorship_attribution_id, status, created_at) WHERE NOT billable`),
+    },
+    {
+        name: '0156_project_sponsorship_attributions',
+        up: (db) => raw(db, sql `INSERT INTO sponsorship_attributions (id, org_id, external_id, project_id, starts_at, ends_at, spend_limit, created_at, updated_at)
+          SELECT 'sat_' || md5(projects.org_id || ':' || projects.id), projects.org_id, NULL, projects.id, projects.sponsorship_subsidy_starts_at, projects.sponsorship_subsidy_ends_at, projects.sponsorship_spend_limit, projects.created_at, projects.updated_at
+          FROM projects
+          WHERE projects.sponsorship_subsidy_starts_at IS NOT NULL
+          ON CONFLICT (org_id, project_id) WHERE project_id IS NOT NULL DO UPDATE
+          SET starts_at = EXCLUDED.starts_at, ends_at = EXCLUDED.ends_at, spend_limit = EXCLUDED.spend_limit, updated_at = EXCLUDED.updated_at
+          WHERE sponsorship_attributions.starts_at IS NULL`),
+    },
+    {
+        name: '0157_project_sponsored_transaction_attributions',
+        up: (db) => raw(db, sql `UPDATE sponsored_transactions
+          SET sponsorship_attribution_id = sponsorship_attributions.id
+          FROM sponsorship_attributions
+          WHERE sponsored_transactions.sponsorship_attribution_id IS NULL
+            AND sponsored_transactions.org_id = sponsorship_attributions.org_id
+            AND sponsored_transactions.project_id = sponsorship_attributions.project_id`),
+    },
+    {
+        name: '0158_reward_eligibility_associations',
+        up: (db) => db.schema
+            .createTable('rewardEligibilityAssociations')
+            .ifNotExists()
+            .addColumn('chainId', 'bigint', (c) => c.notNull())
+            .addColumn('vaultAddress', 'text', (c) => c.notNull())
+            .addColumn('walletAddress', 'text', (c) => c.notNull())
+            .addColumn('firstRegisteredAt', 'text', (c) => c.notNull())
+            .addColumn('latestRegisteredAt', 'text', (c) => c.notNull())
+            .addColumn('transactionHash', 'text')
+            .addPrimaryKeyConstraint('reward_eligibility_associations_pkey', [
+            'chainId',
+            'vaultAddress',
+            'walletAddress',
+        ]),
+    },
+    {
+        name: '0159_reward_eligibility_registration_order',
+        up: (db) => raw(db, sql `ALTER TABLE reward_eligibility_associations ADD COLUMN IF NOT EXISTS registration_order bigint GENERATED ALWAYS AS IDENTITY UNIQUE`),
+    },
+    {
+        name: '0160_reward_eligibility_page_index',
+        up: (db) => db.schema
+            .createIndex('reward_eligibility_associations_page_idx')
+            .ifNotExists()
+            .on('rewardEligibilityAssociations')
+            .columns(['chainId', 'vaultAddress', 'registrationOrder']),
+    },
+    {
+        name: '0161_users_name',
+        up: (db) => raw(db, sql `ALTER TABLE users ADD COLUMN IF NOT EXISTS name text`),
+    },
+    {
+        name: '0162_users_image',
+        up: (db) => raw(db, sql `ALTER TABLE users ADD COLUMN IF NOT EXISTS image text`),
+    },
+    {
+        name: '0163_users_email_verified',
+        up: (db) => raw(db, sql `ALTER TABLE users ADD COLUMN IF NOT EXISTS email_verified boolean`),
+    },
+    {
+        name: '0164_users_auth_fields_backfill',
+        up: (db) => raw(db, sql `UPDATE users SET email_verified = email IS NOT NULL, name = COALESCE(NULLIF(btrim(email), ''), id) WHERE email_verified IS NULL OR name IS NULL`),
+    },
+    {
+        name: '0165_users_auth_fields_required',
+        // Defaults keep inserts from the previous Worker valid while the new
+        // required Better Auth fields roll out.
+        up: (db) => raw(db, sql `ALTER TABLE users ALTER COLUMN email_verified SET DEFAULT false, ALTER COLUMN email_verified SET NOT NULL, ALTER COLUMN name SET DEFAULT '', ALTER COLUMN name SET NOT NULL`),
+    },
+    {
+        name: '0166_users_email_auth_precondition',
+        up: (db) => raw(db, sql `DO $$ BEGIN
+          IF EXISTS (SELECT 1 FROM users WHERE email IS NOT NULL AND btrim(email) = '') THEN
+            RAISE EXCEPTION 'users.email contains blank values';
+          END IF;
+        END $$`),
+    },
+    {
+        name: '0167_users_email_normalized',
+        up: (db) => raw(db, sql `UPDATE users SET email = lower(btrim(email))`),
+    },
+    {
+        name: '0168_users_email_index',
+        // SIWE still creates address-keyed users. Enforce email uniqueness in a
+        // later deployment after wallet identities are linked.
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS users_email_idx ON users (email)`),
+    },
+    {
+        name: '0169_users_email_normalized_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS users_email_normalized_idx ON users (lower(btrim(email))) WHERE email IS NOT NULL`),
+    },
+    {
+        name: '0170_auth_sessions',
+        up: (db) => db.schema
+            .createTable('authSessions')
+            .ifNotExists()
+            .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+            .addColumn('expiresAt', 'text', (c) => c.notNull())
+            .addColumn('token', 'text', (c) => c.notNull().unique())
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addColumn('ipAddress', 'text')
+            .addColumn('userAgent', 'text')
+            .addColumn('userId', 'text', (c) => c.notNull().references('users.id').onDelete('cascade')),
+    },
+    {
+        name: '0171_auth_sessions_user_index',
+        up: (db) => db.schema
+            .createIndex('auth_sessions_user_id_idx')
+            .ifNotExists()
+            .on('authSessions')
+            .column('userId'),
+    },
+    {
+        name: '0172_auth_accounts',
+        up: (db) => db.schema
+            .createTable('authAccounts')
+            .ifNotExists()
+            .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+            .addColumn('issuer', 'text', (c) => c.notNull())
+            .addColumn('accountId', 'text', (c) => c.notNull())
+            .addColumn('providerId', 'text', (c) => c.notNull())
+            .addColumn('userId', 'text', (c) => c.notNull().references('users.id').onDelete('cascade'))
+            .addColumn('accessToken', 'text')
+            .addColumn('refreshToken', 'text')
+            .addColumn('idToken', 'text')
+            .addColumn('accessTokenExpiresAt', 'text')
+            .addColumn('refreshTokenExpiresAt', 'text')
+            .addColumn('scope', 'text')
+            .addColumn('password', 'text')
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull()),
+    },
+    {
+        name: '0173_auth_accounts_user_index',
+        up: (db) => db.schema
+            .createIndex('auth_accounts_user_id_idx')
+            .ifNotExists()
+            .on('authAccounts')
+            .column('userId'),
+    },
+    {
+        name: '0174_auth_accounts_identity_index',
+        up: (db) => db.schema
+            .createIndex('auth_accounts_issuer_account_id_unique_idx')
+            .ifNotExists()
+            .unique()
+            .on('authAccounts')
+            .columns(['issuer', 'accountId']),
+    },
+    {
+        name: '0175_auth_verifications',
+        up: (db) => db.schema
+            .createTable('authVerifications')
+            .ifNotExists()
+            .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+            .addColumn('identifier', 'text', (c) => c.notNull())
+            .addColumn('value', 'text', (c) => c.notNull())
+            .addColumn('expiresAt', 'text', (c) => c.notNull())
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull()),
+    },
+    {
+        name: '0176_auth_verifications_identifier_index',
+        up: (db) => db.schema
+            .createIndex('auth_verifications_identifier_idx')
+            .ifNotExists()
+            .on('authVerifications')
+            .column('identifier'),
+    },
+    {
+        name: '0177_auth_sessions_provider',
+        up: (db) => raw(db, sql `ALTER TABLE auth_sessions ADD COLUMN IF NOT EXISTS provider text`),
+    },
+    {
+        name: '0178_reward_campaigns',
+        up: (db) => db.schema
+            .createTable('rewardCampaigns')
+            .ifNotExists()
+            .addColumn('chainId', 'bigint', (c) => c.notNull())
+            .addColumn('vaultAddress', 'text', (c) => c.notNull())
+            .addColumn('assetAddress', 'text', (c) => c.notNull())
+            .addColumn('assetDecimals', 'integer', (c) => c.notNull())
+            .addColumn('earnShareAddress', 'text', (c) => c.notNull())
+            .addColumn('controllerAddress', 'text')
+            .addColumn('distributorAddress', 'text')
+            .addColumn('config', 'jsonb', (c) => c.notNull())
+            .addColumn('pendingConfig', 'jsonb')
+            .addColumn('pendingEffectiveAt', 'bigint')
+            .addColumn('eventCursor', 'jsonb')
+            .addColumn('deliveredThrough', 'bigint', (c) => c.notNull())
+            .addColumn('paused', 'boolean', (c) => c.notNull().defaultTo(false))
+            .addColumn('provisioningError', 'text')
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addPrimaryKeyConstraint('reward_campaigns_pkey', ['chainId', 'vaultAddress'])
+            .addForeignKeyConstraint('reward_campaigns_vault_fkey', ['chainId', 'vaultAddress'], 'earnVaults', ['chainId', 'vaultAddress'], (c) => c.onDelete('restrict')),
+    },
+    {
+        name: '0179_reward_accounts',
+        up: (db) => db.schema
+            .createTable('rewardAccounts')
+            .ifNotExists()
+            .addColumn('chainId', 'bigint', (c) => c.notNull())
+            .addColumn('vaultAddress', 'text', (c) => c.notNull())
+            .addColumn('recipient', 'text', (c) => c.notNull())
+            .addColumn('registrationOrder', 'bigint', (c) => c.notNull())
+            .addColumn('publicEarnShares', 'numeric', (c) => c.notNull())
+            .addColumn('qualifiedEarnShares', 'numeric', (c) => c.notNull())
+            .addColumn('allocatedPrincipalAssets', 'numeric', (c) => c.notNull())
+            .addColumn('accrualRemainder', 'numeric', (c) => c.notNull())
+            .addColumn('pendingRewardAssets', 'numeric', (c) => c.notNull())
+            .addColumn('cumulativeEntitlement', 'numeric', (c) => c.notNull())
+            .addColumn('cumulativePaid', 'numeric', (c) => c.notNull())
+            .addColumn('deferral', 'text')
+            .addColumn('lots', 'jsonb', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addPrimaryKeyConstraint('reward_accounts_pkey', ['chainId', 'vaultAddress', 'recipient'])
+            .addForeignKeyConstraint('reward_accounts_campaign_fkey', ['chainId', 'vaultAddress'], 'rewardCampaigns', ['chainId', 'vaultAddress'], (c) => c.onDelete('cascade')),
+    },
+    {
+        name: '0180_reward_runs',
+        up: (db) => db.schema
+            .createTable('rewardRuns')
+            .ifNotExists()
+            .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+            .addColumn('chainId', 'bigint', (c) => c.notNull())
+            .addColumn('vaultAddress', 'text', (c) => c.notNull())
+            .addColumn('startsAfter', 'bigint', (c) => c.notNull())
+            .addColumn('endsAt', 'bigint', (c) => c.notNull())
+            .addColumn('config', 'jsonb', (c) => c.notNull())
+            .addColumn('phase', 'text', (c) => c.notNull())
+            .addColumn('leaseExpiresAt', 'text')
+            .addColumn('fence', 'bigint', (c) => c.notNull().defaultTo(0))
+            .addColumn('evidence', 'jsonb')
+            .addColumn('fundedAssets', 'numeric')
+            .addColumn('mintedEarnShares', 'numeric')
+            .addColumn('statement', 'jsonb')
+            .addColumn('statementHash', 'text')
+            .addColumn('root', 'text')
+            .addColumn('rootVersion', 'bigint')
+            .addColumn('liability', 'numeric')
+            .addColumn('error', 'text')
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addUniqueConstraint('reward_runs_boundary_key', ['chainId', 'vaultAddress', 'startsAfter'])
+            .addForeignKeyConstraint('reward_runs_campaign_fkey', ['chainId', 'vaultAddress'], 'rewardCampaigns', ['chainId', 'vaultAddress'], (c) => c.onDelete('cascade')),
+    },
+    {
+        name: '0181_reward_transaction_attempts',
+        up: (db) => db.schema
+            .createTable('rewardTransactionAttempts')
+            .ifNotExists()
+            .addColumn('id', 'text', (c) => c.primaryKey().notNull())
+            .addColumn('chainId', 'bigint', (c) => c.notNull())
+            .addColumn('vaultAddress', 'text', (c) => c.notNull())
+            .addColumn('runId', 'text')
+            .addColumn('intent', 'jsonb', (c) => c.notNull())
+            .addColumn('intentId', 'text', (c) => c.notNull())
+            .addColumn('signer', 'text', (c) => c.notNull())
+            .addColumn('nonce', 'numeric')
+            .addColumn('expiresAt', 'text')
+            .addColumn('signedBytes', 'text')
+            .addColumn('transactionHash', 'text')
+            .addColumn('state', 'text', (c) => c.notNull())
+            .addColumn('receipt', 'jsonb')
+            .addColumn('confirmedBlockHash', 'text')
+            .addColumn('replacementOf', 'text')
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addForeignKeyConstraint('reward_transaction_attempts_campaign_fkey', ['chainId', 'vaultAddress'], 'rewardCampaigns', ['chainId', 'vaultAddress'], (c) => c.onDelete('cascade'))
+            .addForeignKeyConstraint('reward_transaction_attempts_run_fkey', ['runId'], 'rewardRuns', ['id'], (c) => c.onDelete('cascade'))
+            .addForeignKeyConstraint('reward_transaction_attempts_replacement_fkey', ['replacementOf'], 'rewardTransactionAttempts', ['id'], (c) => c.onDelete('restrict')),
+    },
+    {
+        name: '0182_reward_transaction_attempt_nonce_key',
+        up: (db) => raw(db, sql `CREATE UNIQUE INDEX IF NOT EXISTS reward_transaction_attempt_nonce_key ON reward_transaction_attempts (chain_id, signer, nonce) WHERE nonce IS NOT NULL`),
+    },
+    {
+        name: '0183_reward_campaigns_due_index',
+        up: (db) => db.schema
+            .createIndex('reward_campaigns_due_idx')
+            .ifNotExists()
+            .on('rewardCampaigns')
+            .columns(['paused', 'deliveredThrough']),
+    },
+    {
+        name: '0184_reward_transaction_attempt_live_intent_key',
+        up: (db) => raw(db, sql `CREATE UNIQUE INDEX IF NOT EXISTS reward_transaction_attempt_live_intent_key ON reward_transaction_attempts (intent_id) WHERE state IN ('created', 'signed', 'broadcast')`),
+    },
+    {
+        name: '0185_reward_campaign_signer',
+        up: (db) => raw(db, sql `ALTER TABLE reward_campaigns ADD COLUMN IF NOT EXISTS signer_address text`),
+    },
+    {
+        name: '0186_reward_transaction_attempt_run_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS reward_transaction_attempt_run_idx ON reward_transaction_attempts (run_id, created_at)`),
+    },
+    {
+        name: '0187_reward_transaction_attempt_intent_run_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS reward_transaction_attempt_intent_run_idx ON reward_transaction_attempts (intent_id, run_id, created_at)`),
+    },
+    {
+        name: '0188_reward_campaign_earn_share_decimals',
+        up: (db) => raw(db, sql `ALTER TABLE reward_campaigns ADD COLUMN IF NOT EXISTS earn_share_decimals integer NOT NULL DEFAULT 18`),
+    },
+    {
+        name: '0189_reward_campaign_earn_share_decimals_default',
+        up: (db) => raw(db, sql `ALTER TABLE reward_campaigns ALTER COLUMN earn_share_decimals DROP DEFAULT`),
+    },
+    {
+        name: '0190_routes_tables',
+        up: (db) => raw(db, sql `DO $$
+          DECLARE
+            entry record;
+            target_name text;
+          BEGIN
+            -- Tests replay every DDL statement on new connections, recreating empty legacy tables.
+            IF to_regclass('routes_catalogs') IS NOT NULL THEN
+              DROP TABLE IF EXISTS
+                funding_deposit_request_observations,
+                funding_deposits,
+                funding_deposit_addresses,
+                funding_transfer_transactions,
+                funding_transfer_events,
+                funding_idempotency_requests,
+                funding_transfers,
+                funding_routes,
+                funding_chain_tokens,
+                funding_tokens,
+                funding_chains,
+                funding_catalogs
+              CASCADE;
+            END IF;
+
+            IF to_regclass('funding_catalogs') IS NOT NULL AND to_regclass('routes_catalogs') IS NULL THEN
+              ALTER TABLE funding_catalogs RENAME TO routes_catalogs;
+            END IF;
+            IF to_regclass('funding_chain_tokens') IS NOT NULL AND to_regclass('routes_chain_tokens') IS NULL THEN
+              ALTER TABLE funding_chain_tokens RENAME TO routes_chain_tokens;
+            END IF;
+            IF to_regclass('funding_chains') IS NOT NULL AND to_regclass('routes_chains') IS NULL THEN
+              ALTER TABLE funding_chains RENAME TO routes_chains;
+            END IF;
+            IF to_regclass('funding_deposit_addresses') IS NOT NULL AND to_regclass('routes_deposit_addresses') IS NULL THEN
+              ALTER TABLE funding_deposit_addresses RENAME TO routes_deposit_addresses;
+            END IF;
+            IF to_regclass('funding_deposit_request_observations') IS NOT NULL AND to_regclass('routes_deposit_request_observations') IS NULL THEN
+              ALTER TABLE funding_deposit_request_observations RENAME TO routes_deposit_request_observations;
+            END IF;
+            IF to_regclass('funding_deposits') IS NOT NULL AND to_regclass('routes_deposits') IS NULL THEN
+              ALTER TABLE funding_deposits RENAME TO routes_deposits;
+            END IF;
+            IF to_regclass('funding_idempotency_requests') IS NOT NULL AND to_regclass('routes_idempotency_requests') IS NULL THEN
+              ALTER TABLE funding_idempotency_requests RENAME TO routes_idempotency_requests;
+            END IF;
+            IF to_regclass('funding_routes') IS NOT NULL AND to_regclass('routes_routes') IS NULL THEN
+              ALTER TABLE funding_routes RENAME TO routes_routes;
+            END IF;
+            IF to_regclass('funding_tokens') IS NOT NULL AND to_regclass('routes_tokens') IS NULL THEN
+              ALTER TABLE funding_tokens RENAME TO routes_tokens;
+            END IF;
+            IF to_regclass('funding_transfer_events') IS NOT NULL AND to_regclass('routes_transfer_events') IS NULL THEN
+              ALTER TABLE funding_transfer_events RENAME TO routes_transfer_events;
+            END IF;
+            IF to_regclass('funding_transfer_transactions') IS NOT NULL AND to_regclass('routes_transfer_transactions') IS NULL THEN
+              ALTER TABLE funding_transfer_transactions RENAME TO routes_transfer_transactions;
+            END IF;
+            IF to_regclass('funding_transfers') IS NOT NULL AND to_regclass('routes_transfers') IS NULL THEN
+              ALTER TABLE funding_transfers RENAME TO routes_transfers;
+            END IF;
+
+            UPDATE routes_deposit_addresses
+            SET snapshot = jsonb_set(snapshot, '{subsidize}', to_jsonb(subsidize), true)
+            WHERE snapshot->'subsidize' IS DISTINCT FROM to_jsonb(subsidize);
+
+            FOR entry IN
+              SELECT c.conname AS name, t.relname AS table_name
+              FROM pg_constraint AS c
+              JOIN pg_class AS t ON t.oid = c.conrelid
+              JOIN pg_namespace AS n ON n.oid = t.relnamespace
+              WHERE n.nspname = current_schema() AND c.conname LIKE 'funding\_%' ESCAPE '\\'
+            LOOP
+              target_name := regexp_replace(entry.name, '^funding_', 'routes_');
+              EXECUTE format(
+                'ALTER TABLE %I.%I RENAME CONSTRAINT %I TO %I',
+                current_schema(),
+                entry.table_name,
+                entry.name,
+                target_name
+              );
+            END LOOP;
+
+            FOR entry IN
+              SELECT indexname AS name
+              FROM pg_indexes
+              WHERE schemaname = current_schema() AND indexname LIKE 'funding\_%' ESCAPE '\\'
+            LOOP
+              target_name := regexp_replace(entry.name, '^funding_', 'routes_');
+              IF to_regclass(target_name) IS NULL THEN
+                EXECUTE format('ALTER INDEX %I.%I RENAME TO %I', current_schema(), entry.name, target_name);
+              ELSE
+                EXECUTE format('DROP INDEX %I.%I', current_schema(), entry.name);
+              END IF;
+            END LOOP;
+          END $$`),
+    },
+    {
+        // Correct the deelUSD router boundary so registry reads can verify its bytecode.
+        name: '0191_deelusd_earn_router_deployment_block',
+        up: (db) => raw(db, sql `UPDATE earn_vaults
+          SET zones = jsonb_set(zones, '{0,deploymentBlock}', '35822949'::jsonb)
+          WHERE chain_id = 4217
+            AND vault_address = '0x4f94590b636f5878bce585e82379de81e1ec174f'
+            AND zones->0->>'chainId' = '421700001'
+            AND lower(zones->0->>'earnRouter') = '0x8117e0ba6239b9695f780deb010f72a2fa4bdfb6'
+            AND zones->0->>'deploymentBlock' = '35816964'`),
+    },
+    {
+        name: '0192_reward_account_eligibility_registration',
+        up: (db) => raw(db, sql `ALTER TABLE reward_accounts ADD COLUMN IF NOT EXISTS eligibility_registered_at text`),
+    },
+    {
+        name: '0193_routes_subsidies',
+        up: (db) => db.schema
+            .createTable('routesSubsidies')
+            .ifNotExists()
+            .addColumn('apiKeyId', 'text')
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addColumn('enabled', 'boolean', (c) => c.notNull())
+            .addColumn('frequency', 'text', (c) => c.notNull())
+            .addColumn('maxAmount', 'text')
+            .addColumn('orgId', 'text', (c) => c.notNull().references('organizations.id').onDelete('cascade'))
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addCheckConstraint('routes_subsidies_frequency_check', sql `frequency = 'tx'`)
+            .addCheckConstraint('routes_subsidies_enabled_check', sql `CASE WHEN enabled THEN CASE WHEN max_amount ~ '^(0|[1-9][0-9]*)([.][0-9]{1,6})?$' THEN max_amount::numeric > 0 ELSE false END ELSE max_amount IS NULL END`),
+    },
+    {
+        name: '0194_routes_subsidies_org_unique',
+        up: (db) => raw(db, sql `CREATE UNIQUE INDEX IF NOT EXISTS routes_subsidies_org_unique ON routes_subsidies (org_id) WHERE api_key_id IS NULL`),
+    },
+    {
+        name: '0195_routes_subsidies_api_key_unique',
+        up: (db) => raw(db, sql `CREATE UNIQUE INDEX IF NOT EXISTS routes_subsidies_api_key_unique ON routes_subsidies (api_key_id) WHERE api_key_id IS NOT NULL`),
+    },
+    {
+        name: '0196_routes_subsidies_backfill',
+        up: (db) => raw(db, sql `INSERT INTO routes_subsidies (api_key_id, created_at, enabled, frequency, max_amount, org_id, updated_at) SELECT NULL, created_at, true, 'tx', '5', id, updated_at FROM organizations ON CONFLICT DO NOTHING`),
+    },
+    {
+        name: '0197_routes_deposits_subsidy_meter_reported_at',
+        up: (db) => raw(db, sql `ALTER TABLE routes_deposits ADD COLUMN IF NOT EXISTS subsidy_meter_reported_at text`),
+    },
+    {
+        name: '0198_routes_deposits_unreported_subsidy_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_deposits_unreported_subsidy_idx ON routes_deposits (status_updated_at, id) WHERE environment = 'production' AND status = 'completed' AND settlement_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL AND subsidy_meter_reported_at IS NULL`),
+    },
+    {
+        name: '0199_routes_deposits_subsidy_usage_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_deposits_subsidy_usage_idx ON routes_deposits (org_id, environment, status_updated_at) WHERE status = 'completed' AND settlement_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL`),
+    },
+    {
+        name: '0200_routes_deposits_legacy_subsidies_reported',
+        up: (db) => raw(db, sql `UPDATE routes_deposits SET subsidy_meter_reported_at = coalesce(status_updated_at, updated_at) WHERE environment = 'production' AND settlement_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL AND subsidy_meter_reported_at IS NULL`),
+    },
+    {
+        name: '0201_routes_deposits_billable_subsidy_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_deposits_billable_subsidy_idx ON routes_deposits (status_updated_at, id) WHERE environment = 'production' AND settlement_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0 AND subsidy_meter_reported_at IS NULL AND (status = 'completed' OR (status IN ('action-required', 'settling') AND tempo_gas_paid IS NOT NULL))`),
+    },
+    {
+        name: '0202_routes_deposits_provider_subsidy',
+        up: (db) => raw(db, sql `ALTER TABLE routes_deposits ADD COLUMN IF NOT EXISTS provider_subsidy jsonb`),
+    },
+    {
+        name: '0203_routes_deposits_billable_subsidy_index_v2',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_deposits_billable_subsidy_v2_idx ON routes_deposits (status_updated_at, id) WHERE environment = 'production' AND subsidy_meter_reported_at IS NULL AND (status = 'completed' OR (status IN ('action-required', 'settling') AND tempo_gas_paid IS NOT NULL)) AND (((provider_subsidy->'amount'->>'baseUnits')::numeric > 0) OR (settlement_transaction_hash IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0))`),
+    },
+    {
+        name: '0204_routes_deposits_subsidy_usage_index_v2',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_deposits_subsidy_usage_v2_idx ON routes_deposits (org_id, environment, subsidy_meter_reported_at) WHERE (provider_subsidy->'amount'->>'baseUnits')::numeric > 0 OR (subsidy_amount->>'baseUnits')::numeric > 0`),
+    },
+    {
+        name: '0205_sponsored_transactions_admin_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS sponsored_transactions_admin_idx ON sponsored_transactions (created_at DESC, id DESC)`),
+    },
+    {
+        name: '0206_routes_deposits_admin_subsidy_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_deposits_admin_subsidy_idx ON routes_deposits (updated_at DESC, id DESC) WHERE (provider_subsidy->'amount'->>'baseUnits')::numeric > 0 OR (subsidy_amount->>'baseUnits')::numeric > 0`),
+    },
+    {
+        name: '0207_routes_deposit_addresses_drop_api_key',
+        up: (db) => raw(db, sql `ALTER TABLE routes_deposit_addresses DROP COLUMN IF EXISTS api_key_id`),
+    },
+    {
+        name: '0208_routes_subsidies_drop_api_key_policies',
+        up: (db) => raw(db, sql `DO $$
+          BEGIN
+            IF EXISTS (
+              SELECT 1
+              FROM information_schema.columns
+              WHERE table_schema = current_schema()
+                AND table_name = 'routes_subsidies'
+                AND column_name = 'api_key_id'
+            ) THEN
+              DELETE FROM routes_subsidies WHERE api_key_id IS NOT NULL;
+            END IF;
+          END $$`),
+    },
+    {
+        name: '0209_routes_subsidies_drop_api_key_indexes',
+        up: (db) => raw(db, sql `DROP INDEX IF EXISTS routes_subsidies_org_unique, routes_subsidies_api_key_unique`),
+    },
+    {
+        name: '0210_routes_subsidies_drop_api_key',
+        up: (db) => raw(db, sql `ALTER TABLE routes_subsidies DROP COLUMN IF EXISTS api_key_id`),
+    },
+    {
+        name: '0211_routes_subsidies_org_unique',
+        up: (db) => raw(db, sql `CREATE UNIQUE INDEX IF NOT EXISTS routes_subsidies_org_unique ON routes_subsidies (org_id)`),
+    },
+    {
+        name: '0212_routes_transfer_subsidy_nonces',
+        up: (db) => db.schema
+            .createTable('routesTransferSubsidyNonces')
+            .ifNotExists()
+            .addColumn('account', 'text', (c) => c.notNull())
+            .addColumn('chainId', 'text', (c) => c.notNull())
+            .addColumn('nextNonce', 'text', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addPrimaryKeyConstraint('routes_transfer_subsidy_nonces_pkey', ['chainId', 'account']),
+    },
+    {
+        name: '0213_routes_transfers_subsidy_amount',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_amount jsonb`), // prettier-ignore
+    },
+    {
+        name: '0214_routes_transfers_subsidy_meter_reported_at',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_meter_reported_at text`), // prettier-ignore
+    },
+    {
+        name: '0215_routes_transfers_subsidy_transaction_hash',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_transaction_hash text`), // prettier-ignore
+    },
+    {
+        name: '0216_routes_transfers_billable_subsidy_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_transfers_billable_subsidy_idx ON routes_transfers (status_updated_at, id) WHERE environment = 'production' AND status = 'completed' AND subsidy_transaction_hash IS NOT NULL AND subsidy_amount IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0 AND subsidy_meter_reported_at IS NULL`),
+    },
+    {
+        name: '0217_routes_transfers_subsidy_account',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_account text`), // prettier-ignore
+    },
+    {
+        name: '0218_routes_transfers_subsidy_chain_id',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_chain_id text`), // prettier-ignore
+    },
+    {
+        name: '0219_routes_transfers_subsidy_native_amount',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_native_amount text`), // prettier-ignore
+    },
+    {
+        name: '0220_routes_transfers_subsidy_token_address',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_token_address text`), // prettier-ignore
+    },
+    {
+        name: '0221_routes_transfers_subsidy_reservation_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_transfers_subsidy_reservation_idx ON routes_transfers (subsidy_chain_id, subsidy_account, subsidy_token_address) WHERE status IN ('processing', 'action-required') AND subsidy_amount IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0`),
+    },
+    {
+        name: '0222_routes_transfers_subsidy_commitment_amount',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS subsidy_commitment_amount jsonb`), // prettier-ignore
+    },
+    {
+        name: '0223_routes_transfers_provider_delivered_at',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfers ADD COLUMN IF NOT EXISTS provider_delivered_at text`), // prettier-ignore
+    },
+    {
+        name: '0224_routes_transfer_subsidy_nonces_blocked_at',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfer_subsidy_nonces ADD COLUMN IF NOT EXISTS blocked_at text`), // prettier-ignore
+    },
+    {
+        name: '0225_routes_transfer_subsidy_nonces_blocked_transfer_id',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfer_subsidy_nonces ADD COLUMN IF NOT EXISTS blocked_transfer_id text`), // prettier-ignore
+    },
+    {
+        name: '0226_routes_transfer_subsidy_nonces_blocked_reason',
+        up: (db) => raw(db, sql `ALTER TABLE routes_transfer_subsidy_nonces ADD COLUMN IF NOT EXISTS blocked_reason text`), // prettier-ignore
+    },
+    {
+        name: '0227_routes_transfers_subsidy_commitment_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_transfers_subsidy_commitment_idx ON routes_transfers (subsidy_chain_id, subsidy_account, subsidy_token_address) WHERE status IN ('awaiting-source', 'processing', 'action-required', 'refunding') AND subsidy_commitment_amount IS NOT NULL AND (subsidy_commitment_amount->>'baseUnits')::numeric > 0`),
+    },
+    {
+        name: '0228_routes_transfer_subsidy_nonces_block_check',
+        up: (db) => raw(db, sql `DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'routes_transfer_subsidy_nonces_block_check' AND conrelid = 'routes_transfer_subsidy_nonces'::regclass) THEN ALTER TABLE routes_transfer_subsidy_nonces ADD CONSTRAINT routes_transfer_subsidy_nonces_block_check CHECK ((blocked_at IS NULL AND blocked_transfer_id IS NULL AND blocked_reason IS NULL) OR (blocked_at IS NOT NULL AND blocked_transfer_id IS NOT NULL AND blocked_reason = 'broadcast_rejected')); END IF; END $$`),
+    },
+    {
+        // The test harness replays idempotent DDL on new connections, so legacy
+        // index migrations still need this unused physical column to exist.
+        name: '0229_routes_subsidies_legacy_api_key_compatibility',
+        up: (db) => raw(db, sql `ALTER TABLE routes_subsidies ADD COLUMN IF NOT EXISTS api_key_id text`), // prettier-ignore
+    },
+    {
+        name: '0230_routes_transfers_admin_subsidy_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_transfers_admin_subsidy_idx ON routes_transfers (updated_at DESC, id DESC) WHERE subsidy_amount IS NOT NULL AND (subsidy_amount->>'baseUnits')::numeric > 0`),
+    },
+    {
+        name: '0231_routes_transfers_expired_subsidy_commitments_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_transfers_expired_subsidy_commitments_idx ON routes_transfers (quote_expires_at, id) WHERE status = 'awaiting-source' AND subsidy_commitment_amount IS NOT NULL AND (subsidy_commitment_amount->>'baseUnits')::numeric > 0`),
+    },
+    {
+        name: '0232_sponsorship_reconciliation_cursors',
+        up: (db) => db.schema
+            .createTable('sponsorshipReconciliationCursors')
+            .ifNotExists()
+            .addColumn('blockNumber', 'text', (c) => c.notNull())
+            .addColumn('chainId', 'integer', (c) => c.notNull())
+            .addColumn('feePayer', 'text', (c) => c.notNull())
+            .addColumn('transactionIndex', 'integer', (c) => c.notNull())
+            .addColumn('updatedAt', 'text', (c) => c.notNull())
+            .addPrimaryKeyConstraint('sponsorship_reconciliation_cursors_pkey', [
+            'chainId',
+            'feePayer',
+        ]),
+    },
+    {
+        name: '0233_sponsored_transactions_recovery_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS sponsored_transactions_recovery_idx ON sponsored_transactions (finalized_at, chain_id, created_at) WHERE status = 'failed' AND transaction_hash IS NULL`),
+    },
+    {
+        name: '0234_sponsorship_reconciliation_progress',
+        up: (db) => raw(db, sql `ALTER TABLE sponsorship_reconciliation_cursors ADD COLUMN IF NOT EXISTS complete boolean NOT NULL DEFAULT false, ADD COLUMN IF NOT EXISTS retry_count integer NOT NULL DEFAULT 0, ADD COLUMN IF NOT EXISTS retry_key text, ADD COLUMN IF NOT EXISTS revision text NOT NULL DEFAULT ''`),
+    },
+    {
+        name: '0235_routes_deposits_unattributed_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_deposits_unattributed_idx ON routes_deposits (deposit_address_id, created_at, id) WHERE provider_request_id IS NULL`),
+    },
+    {
+        name: '0236_routes_transfer_subsidies',
+        up: (db) => db.schema
+            .createTable('routesTransferSubsidies')
+            .ifNotExists()
+            .addColumn('sourceChainId', 'text', (c) => c.notNull())
+            .addColumn('transactionRef', 'text', (c) => c.notNull())
+            .addColumn('destinationChainId', 'text', (c) => c.notNull())
+            .addColumn('recipient', 'text', (c) => c.notNull())
+            .addColumn('tokenAddress', 'text', (c) => c.notNull())
+            .addColumn('transaction', 'jsonb', (c) => c.notNull())
+            .addColumn('transferId', 'text', (c) => c.notNull())
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addPrimaryKeyConstraint('routes_transfer_subsidies_pkey', [
+            'sourceChainId',
+            'transactionRef',
+        ]),
+    },
+    {
+        name: '0237_routes_transfer_subsidies_capture',
+        // Capture legacy Worker writes during rollout and retain settlement evidence after transfer deletion.
+        up: (db) => raw(db, sql `DO $$
+        BEGIN
+          LOCK TABLE routes_transfers IN SHARE ROW EXCLUSIVE MODE;
+          INSERT INTO routes_transfer_subsidies (
+            source_chain_id, transaction_ref, destination_chain_id, recipient,
+            token_address, transaction, transfer_id, created_at
+          )
+          SELECT snapshot->'sourceChain'->>'id', snapshot->'sourceTransactionHashes'->>0,
+            subsidy_chain_id, lower(snapshot->>'recipient'), subsidy_token_address,
+            provider_state->'transferSubsidy', id, updated_at
+          FROM routes_transfers
+          WHERE subsidy_transaction_hash IS NOT NULL
+            AND provider_state->'transferSubsidy' IS NOT NULL
+            AND snapshot->'sourceTransactionHashes'->>0 IS NOT NULL
+          ON CONFLICT DO NOTHING;
+
+          CREATE OR REPLACE FUNCTION capture_routes_transfer_subsidy() RETURNS trigger
+          LANGUAGE plpgsql SET search_path FROM CURRENT AS $capture$
+          DECLARE
+            settlement routes_transfer_subsidies%ROWTYPE;
+            source_chain text;
+            source_ref text;
+          BEGIN
+            IF NEW.subsidy_transaction_hash IS NULL OR NEW.provider_state->'transferSubsidy' IS NULL THEN
+              RETURN NEW;
+            END IF;
+            source_chain := NEW.snapshot->'sourceChain'->>'id';
+            source_ref := NEW.snapshot->'sourceTransactionHashes'->>0;
+            IF source_ref IS NULL THEN
+              RAISE EXCEPTION 'Subsidy source evidence is missing';
+            END IF;
+            INSERT INTO routes_transfer_subsidies (
+              source_chain_id, transaction_ref, destination_chain_id, recipient,
+              token_address, transaction, transfer_id, created_at
+            ) VALUES (
+              source_chain, source_ref, NEW.subsidy_chain_id, lower(NEW.snapshot->>'recipient'),
+              NEW.subsidy_token_address, NEW.provider_state->'transferSubsidy', NEW.id, NEW.updated_at
+            ) ON CONFLICT DO NOTHING;
+            SELECT * INTO STRICT settlement FROM routes_transfer_subsidies
+              WHERE source_chain_id = source_chain AND transaction_ref = source_ref;
+            IF settlement.transaction IS DISTINCT FROM NEW.provider_state->'transferSubsidy'
+              OR settlement.destination_chain_id IS DISTINCT FROM NEW.subsidy_chain_id
+              OR settlement.recipient IS DISTINCT FROM lower(NEW.snapshot->>'recipient')
+              OR settlement.token_address IS DISTINCT FROM NEW.subsidy_token_address THEN
+              RAISE EXCEPTION 'Source payment already has a different subsidy settlement';
+            END IF;
+            IF settlement.transfer_id <> NEW.id THEN
+              NEW.subsidy_amount := NULL;
+              NEW.subsidy_commitment_amount := NULL;
+              NEW.subsidy_native_amount := NULL;
+            END IF;
+            RETURN NEW;
+          END $capture$;
+          DROP TRIGGER IF EXISTS routes_transfer_subsidy_capture ON routes_transfers;
+          CREATE TRIGGER routes_transfer_subsidy_capture
+            BEFORE INSERT OR UPDATE OF provider_state, subsidy_transaction_hash, subsidy_amount
+            ON routes_transfers FOR EACH ROW EXECUTE FUNCTION capture_routes_transfer_subsidy();
+        END $$`),
+    },
+    {
+        name: '0238_routes_transfer_source_claim_scope',
+        // Derive tenancy for old and new writers before replacing global source uniqueness.
+        up: (db) => raw(db, sql `DO $$
+        BEGIN
+          ALTER TABLE routes_transfer_transactions
+            ADD COLUMN IF NOT EXISTS org_id text,
+            ADD COLUMN IF NOT EXISTS environment text,
+            ADD COLUMN IF NOT EXISTS project_id text;
+          UPDATE routes_transfer_transactions AS evidence
+            SET org_id = owner.org_id, environment = owner.environment, project_id = owner.project_id
+            FROM routes_transfers AS owner WHERE owner.id = evidence.transfer_id;
+          ALTER TABLE routes_transfer_transactions
+            ALTER COLUMN org_id SET NOT NULL, ALTER COLUMN environment SET NOT NULL;
+          CREATE OR REPLACE FUNCTION scope_routes_transfer_transaction() RETURNS trigger
+          LANGUAGE plpgsql SET search_path FROM CURRENT AS $scope$
+          BEGIN
+            SELECT org_id, environment, project_id INTO STRICT NEW.org_id, NEW.environment, NEW.project_id
+              FROM routes_transfers WHERE id = NEW.transfer_id;
+            RETURN NEW;
+          END $scope$;
+          DROP TRIGGER IF EXISTS routes_transfer_transaction_scope ON routes_transfer_transactions;
+          CREATE TRIGGER routes_transfer_transaction_scope
+            BEFORE INSERT OR UPDATE ON routes_transfer_transactions
+            FOR EACH ROW EXECUTE FUNCTION scope_routes_transfer_transaction();
+          CREATE UNIQUE INDEX IF NOT EXISTS routes_transfer_transactions_source_owner_unique
+            ON routes_transfer_transactions (org_id, environment, project_id, chain_id, transaction_ref)
+            NULLS NOT DISTINCT WHERE role = 'source';
+          DROP INDEX IF EXISTS routes_transfer_transactions_source_unique;
+        END $$`),
+    },
+    {
+        name: '0239_routes_transfer_source_lookup_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_transfer_transactions_source_lookup_idx ON routes_transfer_transactions (chain_id, transaction_ref) WHERE role = 'source'`),
+    },
+    {
+        name: '0240_sponsored_transactions_finalization_attempted_at',
+        up: (db) => raw(db, sql `ALTER TABLE sponsored_transactions ADD COLUMN IF NOT EXISTS finalization_attempted_at text`),
+    },
+    {
+        name: '0241_sponsored_transactions_finalization_queue_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS sponsored_transactions_finalization_queue_idx ON sponsored_transactions (finalization_attempted_at NULLS FIRST, created_at, id) WHERE status = 'pending'`),
+    },
+    {
+        name: '0242_api_key_owner_tombstones',
+        up: (db) => db.schema
+            .createTable('api_key_owner_tombstones')
+            .ifNotExists()
+            .addColumn('id', 'text', (column) => column.primaryKey())
+            .addColumn('createdAt', 'text', (column) => column.notNull()),
+    },
+    {
+        name: '0243_api_key_owner_admissions',
+        up: (db) => db.schema
+            .createTable('api_key_owner_admissions')
+            .ifNotExists()
+            .addColumn('orgId', 'text', (column) => column.primaryKey())
+            .addColumn('liveKeys', 'integer', (column) => column.notNull())
+            .addColumn('updatedAt', 'text', (column) => column.notNull()),
+    },
+    {
+        name: '0244_api_key_admissions',
+        up: (db) => db.schema
+            .createTable('api_key_admissions')
+            .ifNotExists()
+            .addColumn('expiresAt', 'text')
+            .addColumn('id', 'text', (column) => column.notNull().unique())
+            .addColumn('orgId', 'text', (column) => column.notNull())
+            .addColumn('projectId', 'text')
+            .addPrimaryKeyConstraint('api_key_admissions_pkey', ['orgId', 'id']),
+    },
+    {
+        name: '0245_api_key_admission_bootstraps',
+        up: (db) => db.schema
+            .createTable('api_key_admission_bootstraps')
+            .ifNotExists()
+            .addColumn('orgId', 'text', (column) => column.primaryKey())
+            .addColumn('bootstrappedAt', 'text', (column) => column.notNull()),
+    },
+    {
+        name: '0246_api_key_revocations',
+        up: (db) => db.schema
+            .createTable('api_key_revocations')
+            .ifNotExists()
+            .addColumn('id', 'text', (column) => column.primaryKey())
+            .addColumn('revokedAt', 'text', (column) => column.notNull()),
+    },
+    {
+        name: '0247_api_key_revocation_lifecycle',
+        up: (db) => raw(db, sql `ALTER TABLE api_key_revocations ADD COLUMN IF NOT EXISTS org_id text REFERENCES organizations(id) ON DELETE CASCADE, ADD COLUMN IF NOT EXISTS expires_at text`),
+    },
+    {
+        name: '0248_api_key_revocation_expiry_backfill',
+        up: (db) => raw(db, sql `UPDATE api_key_revocations SET expires_at = to_char(revoked_at::timestamptz + interval '7 days', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') WHERE expires_at IS NULL`),
+    },
+    {
+        name: '0249_api_key_revocation_expiry_required',
+        up: (db) => raw(db, sql `ALTER TABLE api_key_revocations ALTER COLUMN expires_at SET NOT NULL`),
+    },
+    {
+        name: '0250_api_key_revocation_expiry_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS api_key_revocations_expiry_idx ON api_key_revocations (expires_at, id)`),
+    },
+    {
+        name: '0251_api_key_revocation_org_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS api_key_revocations_org_idx ON api_key_revocations (org_id) WHERE org_id IS NOT NULL`),
+    },
+    {
+        // Triggers make migrate-before-deploy safe: older Workers still fence raw owner deletes and acquire the same locks as new key writes.
+        name: '0252_api_key_owner_delete_trigger_function',
+        up: (db) => raw(db, sql `CREATE OR REPLACE FUNCTION api_key_fence_deleted_owner() RETURNS trigger LANGUAGE plpgsql AS $api_key_fence$
+          DECLARE owner_key text;
+          BEGIN
+            IF TG_TABLE_NAME = 'organizations' THEN
+              owner_key := 'organization:' || OLD.id;
+            ELSE
+              PERFORM pg_advisory_xact_lock(hashtextextended('organization:' || OLD.org_id, 0));
+              owner_key := 'project:' || OLD.org_id || ':' || OLD.id;
+            END IF;
+            PERFORM pg_advisory_xact_lock(hashtextextended(owner_key, 0));
+            EXECUTE format('INSERT INTO %I.api_key_owner_tombstones (id, created_at) VALUES ($1, $2) ON CONFLICT (id) DO NOTHING', TG_TABLE_SCHEMA)
+              USING owner_key, to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"');
+            RETURN OLD;
+          END
+        $api_key_fence$`),
+    },
+    {
+        name: '0253_api_key_organization_delete_trigger',
+        up: (db) => raw(db, sql `DO $api_key_trigger$
+          BEGIN
+            IF NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgname = 'api_key_fence_deleted_organization' AND tgrelid = 'organizations'::regclass) THEN
+              CREATE TRIGGER api_key_fence_deleted_organization BEFORE DELETE ON organizations FOR EACH ROW EXECUTE FUNCTION api_key_fence_deleted_owner();
+            END IF;
+          END
+        $api_key_trigger$`),
+    },
+    {
+        name: '0254_api_key_project_delete_trigger',
+        up: (db) => raw(db, sql `DO $api_key_trigger$
+          BEGIN
+            IF NOT EXISTS (SELECT 1 FROM pg_trigger WHERE tgname = 'api_key_fence_deleted_project' AND tgrelid = 'projects'::regclass) THEN
+              CREATE TRIGGER api_key_fence_deleted_project BEFORE DELETE ON projects FOR EACH ROW EXECUTE FUNCTION api_key_fence_deleted_owner();
+            END IF;
+          END
+        $api_key_trigger$`),
+    },
+    {
+        // The table lock partitions legacy writers; a 24-hour organization-deletion embargo lets pre-fence Worker requests finish before owners can disappear.
+        name: '0255_routes_organization_delete_fence',
+        up: (db) => raw(db, sql `DO $migration$ BEGIN LOCK TABLE routes_idempotency_requests IN SHARE ROW EXCLUSIVE MODE; EXECUTE $definition$ CREATE OR REPLACE FUNCTION api_key_fence_deleted_owner() RETURNS trigger LANGUAGE plpgsql AS $body$ DECLARE owner_key text; BEGIN IF TG_TABLE_NAME = 'organizations' THEN PERFORM pg_advisory_xact_lock(hashtextextended('routes-subsidy:' || OLD.id, 0)); PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); owner_key := 'organization:' || OLD.id; ELSE PERFORM pg_advisory_xact_lock(hashtextextended('organization:' || OLD.org_id, 0)); owner_key := 'project:' || OLD.org_id || ':' || OLD.id; END IF; PERFORM pg_advisory_xact_lock(hashtextextended(owner_key, 0)); EXECUTE format('INSERT INTO %I.api_key_owner_tombstones (id, created_at) VALUES ($1, $2) ON CONFLICT (id) DO NOTHING', TG_TABLE_SCHEMA) USING owner_key, to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'); IF TG_TABLE_NAME = 'organizations' THEN EXECUTE format('INSERT INTO %I.api_key_owner_tombstones (id, created_at) VALUES ($1, $2) ON CONFLICT (id) DO NOTHING', TG_TABLE_SCHEMA) USING 'routes-ownerless-legacy-cutoff', to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"'); END IF; RETURN OLD; END $body$ $definition$; EXECUTE $definition$ CREATE OR REPLACE FUNCTION fence_routes_organization_delete() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ BEGIN PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'routes-legacy-attempt-drain' AND created_at::timestamptz + interval '24 hours' > CURRENT_TIMESTAMP) THEN RAISE EXCEPTION 'route lifecycle rollout drain is active' USING ERRCODE = '23503'; END IF; IF EXISTS (SELECT 1 FROM routes_deposit_addresses WHERE org_id = OLD.id AND (status != 'deactivated' OR (provider_id = 'relay' AND subsidize))) OR EXISTS (SELECT 1 FROM routes_idempotency_requests AS request WHERE request.status IN ('pending', 'provisioned') AND (request.expires_at::timestamptz > CURRENT_TIMESTAMP OR COALESCE((to_jsonb(request)->>'irrevocable')::boolean, false)) AND (((to_jsonb(request)->>'org_id') = OLD.id AND (to_jsonb(request)->>'operation') = 'deposit_address') OR to_jsonb(request)->>'org_id' IS NULL OR to_jsonb(request)->>'operation' IS NULL)) THEN RAISE EXCEPTION 'organization has active route deposit address work' USING ERRCODE = '23503'; END IF; RETURN OLD; END $body$ $definition$; EXECUTE $definition$ CREATE OR REPLACE FUNCTION fence_routes_deposit_address_owner() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ BEGIN PERFORM pg_advisory_xact_lock(hashtextextended('routes-subsidy:' || NEW.org_id, 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'organization:' || NEW.org_id) THEN RAISE EXCEPTION 'route deposit address owner was deleted' USING ERRCODE = '23503'; END IF; RETURN NEW; END $body$ $definition$; EXECUTE $definition$ CREATE OR REPLACE FUNCTION fence_routes_idempotency_owner() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ DECLARE owner_id text; BEGIN owner_id := to_jsonb(NEW)->>'org_id'; IF owner_id IS NULL THEN SELECT org_id INTO owner_id FROM api_key_admissions WHERE id = NEW.api_key_id; END IF; IF owner_id IS NULL THEN PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'routes-ownerless-legacy-cutoff') THEN RAISE EXCEPTION 'ownerless route idempotency creation is disabled' USING ERRCODE = '23503'; END IF; RETURN NEW; END IF; PERFORM pg_advisory_xact_lock(hashtextextended('routes-subsidy:' || owner_id, 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'organization:' || owner_id) THEN RAISE EXCEPTION 'route idempotency owner was deleted' USING ERRCODE = '23503'; END IF; RETURN NEW; END $body$ $definition$; EXECUTE 'CREATE OR REPLACE TRIGGER routes_deposit_address_owner_fence BEFORE INSERT OR UPDATE OF org_id ON routes_deposit_addresses FOR EACH ROW EXECUTE FUNCTION fence_routes_deposit_address_owner()'; EXECUTE 'CREATE OR REPLACE TRIGGER routes_idempotency_owner_fence BEFORE INSERT OR UPDATE ON routes_idempotency_requests FOR EACH ROW EXECUTE FUNCTION fence_routes_idempotency_owner()'; EXECUTE 'CREATE OR REPLACE TRIGGER routes_organization_delete_fence BEFORE DELETE ON organizations FOR EACH ROW EXECUTE FUNCTION fence_routes_organization_delete()'; INSERT INTO api_key_owner_tombstones (id, created_at) VALUES ('routes-legacy-attempt-drain', to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')) ON CONFLICT (id) DO NOTHING; END $migration$`),
+    },
+    {
+        name: '0256_routes_idempotency_organization',
+        up: (db) => raw(db, sql `ALTER TABLE routes_idempotency_requests ADD COLUMN IF NOT EXISTS org_id text`),
+    },
+    {
+        name: '0257_routes_idempotency_operation',
+        up: (db) => raw(db, sql `ALTER TABLE routes_idempotency_requests ADD COLUMN IF NOT EXISTS operation text`),
+    },
+    {
+        name: '0258_routes_idempotency_irrevocable',
+        up: (db) => raw(db, sql `ALTER TABLE routes_idempotency_requests ADD COLUMN IF NOT EXISTS irrevocable boolean NOT NULL DEFAULT false`),
+    },
+    {
+        name: '0259_routes_idempotency_organization_inflight_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_idempotency_requests_organization_inflight_idx ON routes_idempotency_requests (org_id) WHERE org_id IS NOT NULL AND operation = 'deposit_address' AND status IN ('pending', 'provisioned')`),
+    },
+    {
+        name: '0260_routes_idempotency_match_hash',
+        up: (db) => raw(db, sql `ALTER TABLE routes_idempotency_requests ADD COLUMN IF NOT EXISTS match_hash text`),
+    },
+    {
+        name: '0261_routes_idempotency_match_inflight_index',
+        up: (db) => raw(db, sql `CREATE INDEX IF NOT EXISTS routes_idempotency_requests_match_inflight_idx ON routes_idempotency_requests (org_id, match_hash) WHERE match_hash IS NOT NULL AND operation = 'deposit_address' AND status IN ('pending', 'provisioned')`),
+    },
+    {
+        name: '0262_routes_organization_delete_fence_unattributed_checkpoint',
+        up: (db) => raw(db, sql `CREATE OR REPLACE FUNCTION fence_routes_organization_delete() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ BEGIN PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'routes-legacy-attempt-drain' AND created_at::timestamptz + interval '24 hours' > CURRENT_TIMESTAMP) THEN RAISE EXCEPTION 'route lifecycle rollout drain is active' USING ERRCODE = '23503'; END IF; IF EXISTS (SELECT 1 FROM routes_deposit_addresses WHERE org_id = OLD.id AND (status != 'deactivated' OR (provider_id = 'relay' AND subsidize))) OR EXISTS (SELECT 1 FROM routes_idempotency_requests AS request WHERE request.status IN ('pending', 'provisioned') AND (request.expires_at::timestamptz > CURRENT_TIMESTAMP OR COALESCE((to_jsonb(request)->>'irrevocable')::boolean, false)) AND (((to_jsonb(request)->>'org_id') = OLD.id AND (to_jsonb(request)->>'operation') = 'deposit_address') OR to_jsonb(request)->>'org_id' IS NULL OR to_jsonb(request)->>'operation' IS NULL)) THEN RAISE EXCEPTION 'organization has active route deposit address work' USING ERRCODE = '23503'; END IF; RETURN OLD; END $body$`),
+    },
+    {
+        // Rolling workers may insert after preflight; these triggers share the deletion lock and reject owners deleted while provisioning.
+        name: '0263_routes_creation_owner_fences',
+        up: (db) => raw(db, sql `DO $migration$ BEGIN EXECUTE $definition$ CREATE OR REPLACE FUNCTION fence_routes_idempotency_owner() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ DECLARE owner_id text; BEGIN owner_id := NEW.org_id; IF owner_id IS NULL THEN SELECT org_id INTO owner_id FROM api_key_admissions WHERE id = NEW.api_key_id; END IF; IF owner_id IS NULL THEN PERFORM pg_advisory_xact_lock(hashtextextended('routes-ownerless-legacy', 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'routes-ownerless-legacy-cutoff') THEN RAISE EXCEPTION 'ownerless route idempotency creation is disabled' USING ERRCODE = '23503'; END IF; RETURN NEW; END IF; PERFORM pg_advisory_xact_lock(hashtextextended('routes-subsidy:' || owner_id, 0)); IF EXISTS (SELECT 1 FROM api_key_owner_tombstones WHERE id = 'organization:' || owner_id) THEN RAISE EXCEPTION 'route idempotency owner was deleted' USING ERRCODE = '23503'; END IF; RETURN NEW; END $body$ $definition$; EXECUTE 'CREATE OR REPLACE TRIGGER routes_idempotency_owner_fence BEFORE INSERT OR UPDATE OF org_id, status ON routes_idempotency_requests FOR EACH ROW EXECUTE FUNCTION fence_routes_idempotency_owner()'; END $migration$`),
+    },
+    {
+        // Existing unattributed checkpoints get one bounded drain window because their subsidy intent cannot be reconstructed.
+        name: '0264_routes_legacy_checkpoint_drain',
+        up: (db) => raw(db, sql `WITH marker AS (INSERT INTO api_key_owner_tombstones (id, created_at) VALUES ('routes-legacy-checkpoint-drain', to_char(clock_timestamp() AT TIME ZONE 'UTC', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"')) ON CONFLICT (id) DO UPDATE SET created_at = api_key_owner_tombstones.created_at RETURNING created_at) UPDATE routes_idempotency_requests AS request SET expires_at = to_char(marker.created_at::timestamptz + interval '24 hours', 'YYYY-MM-DD"T"HH24:MI:SS.MS"Z"') FROM marker WHERE request.status = 'provisioned' AND (request.org_id IS NULL OR request.operation IS NULL) AND request.expires_at::timestamptz < marker.created_at::timestamptz + interval '24 hours'`),
+    },
+    {
+        name: '0265_routes_deposit_address_creator',
+        up: (db) => raw(db, sql `DO $migration$ BEGIN ALTER TABLE routes_deposit_addresses ADD COLUMN IF NOT EXISTS creator_user_id text; UPDATE routes_deposit_addresses AS address SET creator_user_id = organization.user_id FROM organizations AS organization WHERE address.org_id = organization.id AND address.creator_user_id IS NULL; CREATE INDEX IF NOT EXISTS routes_deposit_addresses_creator_user_idx ON routes_deposit_addresses (creator_user_id) WHERE creator_user_id IS NOT NULL; EXECUTE $definition$ CREATE OR REPLACE FUNCTION set_routes_deposit_address_creator() RETURNS trigger LANGUAGE plpgsql SET search_path FROM CURRENT AS $body$ BEGIN NEW.creator_user_id := (SELECT user_id FROM organizations WHERE id = NEW.org_id); RETURN NEW; END $body$ $definition$; EXECUTE 'CREATE OR REPLACE TRIGGER routes_deposit_address_creator BEFORE INSERT OR UPDATE OF org_id ON routes_deposit_addresses FOR EACH ROW EXECUTE FUNCTION set_routes_deposit_address_creator()'; END $migration$`),
+    },
+    {
+        name: '0266_reward_credits',
+        up: (db) => db.schema
+            .createTable('rewardCredits')
+            .ifNotExists()
+            .addColumn('chainId', 'bigint', (c) => c.notNull())
+            .addColumn('vaultAddress', 'text', (c) => c.notNull())
+            .addColumn('recipient', 'text', (c) => c.notNull())
+            .addColumn('reference', 'text', (c) => c.notNull())
+            .addColumn('assets', 'numeric', (c) => c.notNull())
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addPrimaryKeyConstraint('reward_credits_pkey', [
+            'chainId',
+            'vaultAddress',
+            'recipient',
+            'reference',
+        ])
+            // Runs rewrite reward_accounts wholesale, so the ledger must not cascade from it.
+            .addForeignKeyConstraint('reward_credits_campaign_fkey', ['chainId', 'vaultAddress'], 'rewardCampaigns', ['chainId', 'vaultAddress'], (c) => c.onDelete('cascade')),
+    },
+    {
+        name: '0267_reward_campaign_distributors',
+        up: (db) => db.schema
+            .createTable('rewardCampaignDistributors')
+            .ifNotExists()
+            .addColumn('chainId', 'bigint', (c) => c.notNull())
+            .addColumn('vaultAddress', 'text', (c) => c.notNull())
+            .addColumn('distributorAddress', 'text', (c) => c.notNull())
+            .addColumn('createdAt', 'text', (c) => c.notNull())
+            .addPrimaryKeyConstraint('reward_campaign_distributors_pkey', [
+            'chainId',
+            'vaultAddress',
+            'distributorAddress',
+        ])
+            .addForeignKeyConstraint('reward_campaign_distributors_campaign_fkey', ['chainId', 'vaultAddress'], 'rewardCampaigns', ['chainId', 'vaultAddress'], (c) => c.onDelete('cascade')),
+    },
+    {
+        name: '0268_reward_campaign_distributors_backfill',
+        up: (db) => raw(db, sql `INSERT INTO reward_campaign_distributors (chain_id, vault_address, distributor_address, created_at) SELECT chain_id, vault_address, distributor_address, updated_at FROM reward_campaigns WHERE distributor_address IS NOT NULL ON CONFLICT DO NOTHING`),
+    },
+    {
+        // This verified distributor paid rewards before distributor history was retained.
+        name: '0269_reward_campaign_previous_distributor',
+        up: (db) => raw(db, sql `INSERT INTO reward_campaign_distributors (chain_id, vault_address, distributor_address, created_at) SELECT chain_id, vault_address, '0x6c857bf1fe7de1bc1d5c639c721b2633f8fe34f3', created_at FROM reward_campaigns WHERE chain_id = 4217 AND vault_address = '0xd730394f3bb85a4828e35fc5e361dcc9f894fa4f' ON CONFLICT DO NOTHING`),
+    },
+    {
+        // Provider subsidy billing first became active with this production Worker deployment.
+        name: '0270_routes_deposits_legacy_provider_subsidies_reported',
+        up: (db) => raw(db, sql `UPDATE routes_deposits SET subsidy_meter_reported_at = coalesce(status_updated_at, updated_at) WHERE environment = 'production' AND subsidy_meter_reported_at IS NULL AND (provider_subsidy->'amount'->>'baseUnits')::numeric > 0 AND (status = 'completed' OR (status IN ('action-required', 'settling') AND tempo_gas_paid IS NOT NULL)) AND coalesce(status_updated_at, updated_at) < '2026-09-03T06:10:21.000Z'`),
+    },
 ];
 /**
  * Adapts a raw statement to the migration contract (argument-less
@@ -1207,10 +2236,7 @@ function fromDialect(dialect, options = {}) {
     // transaction poolers reset session state between statements.
     const kysely = options.schema ? root.withPlugin(new WithSchemaPlugin(options.schema)) : root;
     // Builds Db over a top-level Kysely handle or transaction-scoped Kysely handle.
-    function build(kysely) {
-        // Prevents same-handle nested transactions from deadlocking capped pools.
-        // Nested work must use the callback's scoped `tx`.
-        let active = false;
+    function build(kysely, transactional = false) {
         return {
             async close() {
                 await kysely.destroy();
@@ -1270,15 +2296,9 @@ function fromDialect(dialect, options = {}) {
                 });
             },
             async transaction(fn) {
-                if (active)
+                if (transactional)
                     throw new Error('Db.transaction does not support nesting.');
-                active = true;
-                try {
-                    return await kysely.transaction().execute((trx) => fn(build(trx)));
-                }
-                finally {
-                    active = false;
-                }
+                return kysely.transaction().execute((trx) => fn(build(trx, true)));
             },
         };
     }
@@ -1286,20 +2306,20 @@ function fromDialect(dialect, options = {}) {
 }
 /**
  * Creates a Postgres-backed {@link Db} via Kysely's `PostgresDialect`. Optional
- * `schema` qualifies repository queries, scopes migrations, and caps the pool.
+ * `schema` qualifies repository queries and scopes migrations.
  *
  * @param options - Postgres options.
  * @returns The database.
  */
 export function postgres(options) {
-    const { connectionString, schema } = options;
+    const { connectionString, maxConnections, schema } = options;
     // Bounded connect and pool-checkout wait: the pg default (0) waits forever,
     // so an unresponsive origin parks callers and their invocation memory
     // invisibly instead of failing into the retry paths.
     const pool = new pg.Pool({
         connectionString,
         connectionTimeoutMillis: 30_000,
-        ...(schema ? { max: 1 } : {}),
+        ...(maxConnections === undefined && !schema ? {} : { max: maxConnections ?? 1 }),
     });
     return fromDialect(new PostgresDialect({ pool }), { schema });
 }