snapshot of https://github.com/toeverything/AFFiNE.git (canary, 2026-09-16; blobs > 131072B omitted)

packages/backend/server/migrations/20260906090000_payment_auth_runtime/migration.sql

@@ -0,0 +1,132 @@
+-- Additive while 0.27.4 and the new server can share the database. Provider
+-- namespaces that cannot be inferred from legacy rows remain NULL until the
+-- cutover validates and adopts them. Destructive cleanup is deferred.
+ALTER TABLE "user_stripe_customers"
+  ADD COLUMN "provider_namespace" TEXT;
+
+ALTER TABLE "provider_subscriptions"
+  ADD COLUMN "provider_namespace" TEXT,
+  ADD COLUMN "source_identity" TEXT,
+  ADD COLUMN "gives_access" BOOLEAN,
+  ADD COLUMN "will_renew" BOOLEAN;
+
+UPDATE "provider_subscriptions"
+SET "source_identity" = "external_subscription_id"
+WHERE "provider" = 'stripe' AND "external_subscription_id" IS NOT NULL;
+
+ALTER TABLE "invoices"
+  ADD COLUMN "provider_namespace" TEXT;
+
+ALTER TABLE "payment_events"
+  ADD COLUMN "provider_namespace" TEXT,
+  ADD COLUMN "next_attempt_at" TIMESTAMPTZ(3);
+
+ALTER TABLE "subscription_trial_usages"
+  ADD COLUMN "provider_namespace" TEXT;
+
+ALTER TABLE "user_connected_accounts"
+  ADD COLUMN "provider_namespace" TEXT;
+
+CREATE UNIQUE INDEX "provider_subscriptions_provider_namespace_source_identity_key"
+  ON "provider_subscriptions"("provider_namespace", "source_identity");
+
+CREATE UNIQUE INDEX "payment_events_provider_namespace_external_event_id_key"
+  ON "payment_events"("provider_namespace", "external_event_id");
+
+CREATE UNIQUE INDEX "user_connected_accounts_provider_namespace_subject_key"
+  ON "user_connected_accounts"("provider_namespace", "provider_account_id")
+  WHERE "provider_namespace" IS NOT NULL;
+
+CREATE TABLE "payment_financial_facts" (
+  "id" VARCHAR NOT NULL,
+  "provider" "Provider" NOT NULL,
+  "provider_namespace" TEXT NOT NULL,
+  "object_kind" TEXT NOT NULL,
+  "external_id" TEXT NOT NULL,
+  "source_identity" TEXT,
+  "external_invoice_id" TEXT,
+  "external_payment_id" TEXT,
+  "status" TEXT NOT NULL,
+  "amount" INTEGER,
+  "currency" VARCHAR(3),
+  "occurred_at" TIMESTAMPTZ(3),
+  "metadata" JSONB NOT NULL DEFAULT '{}',
+  "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updated_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+  CONSTRAINT "payment_financial_facts_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "payment_financial_facts_kind_check" CHECK ("object_kind" IN ('refund', 'dispute', 'invoice')),
+  CONSTRAINT "payment_financial_facts_identity_check" CHECK (length("provider_namespace") > 0 AND length("external_id") > 0)
+);
+
+CREATE UNIQUE INDEX "payment_financial_facts_provider_namespace_object_kind_external_id_key"
+  ON "payment_financial_facts"("provider_namespace", "object_kind", "external_id");
+CREATE INDEX "payment_financial_facts_provider_namespace_source_identity_idx"
+  ON "payment_financial_facts"("provider_namespace", "source_identity");
+CREATE INDEX "payment_financial_facts_provider_namespace_external_invoice_id_idx"
+  ON "payment_financial_facts"("provider_namespace", "external_invoice_id");
+
+CREATE TABLE "payment_operations" (
+  "id" VARCHAR NOT NULL,
+  "provider" "Provider" NOT NULL,
+  "provider_namespace" TEXT NOT NULL,
+  "operation_type" TEXT NOT NULL,
+  "intent_id" TEXT NOT NULL,
+  "primary_resource_key" TEXT NOT NULL,
+  "resource_keys" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  "target_type" TEXT,
+  "target_id" VARCHAR,
+  "status" TEXT NOT NULL DEFAULT 'pending',
+  "steps" JSONB NOT NULL DEFAULT '[]',
+  "result" JSONB,
+  "first_sent_at" TIMESTAMPTZ(3),
+  "replay_deadline" TIMESTAMPTZ(3),
+  "next_attempt_at" TIMESTAMPTZ(3),
+  "attempt_count" INTEGER NOT NULL DEFAULT 0,
+  "last_error_code" TEXT,
+  "last_error" TEXT,
+  "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updated_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+  CONSTRAINT "payment_operations_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "payment_operations_status_check" CHECK ("status" IN ('pending', 'completed', 'rejected', 'blocked')),
+  CONSTRAINT "payment_operations_target_type_check" CHECK ("target_type" IS NULL OR "target_type" IN ('user', 'workspace', 'instance')),
+  CONSTRAINT "payment_operations_steps_check" CHECK (jsonb_typeof("steps") = 'array'),
+  CONSTRAINT "payment_operations_identity_check" CHECK (
+    length("provider_namespace") > 0 AND length("intent_id") > 0 AND length("primary_resource_key") > 0
+  ),
+  CONSTRAINT "payment_operations_attempt_count_check" CHECK ("attempt_count" >= 0)
+);
+
+CREATE UNIQUE INDEX "payment_operations_provider_namespace_intent_id_key"
+  ON "payment_operations"("provider_namespace", "intent_id");
+CREATE INDEX "payment_operations_status_next_attempt_at_idx"
+  ON "payment_operations"("status", "next_attempt_at");
+CREATE INDEX "payment_operations_provider_namespace_primary_resource_key_idx"
+  ON "payment_operations"("provider_namespace", "primary_resource_key");
+CREATE UNIQUE INDEX "payment_operations_unfinished_resource_key"
+  ON "payment_operations"("provider_namespace", "primary_resource_key")
+  WHERE "status" IN ('pending', 'blocked');
+
+ALTER INDEX "payment_financial_facts_provider_namespace_object_kind_external"
+  RENAME TO "payment_financial_facts_namespace_kind_external_key";
+ALTER INDEX "payment_financial_facts_provider_namespace_external_invoice_id_"
+  RENAME TO "payment_financial_facts_namespace_invoice_idx";
+
+ALTER TABLE "payment_events"
+  DROP CONSTRAINT "payment_events_processing_status_check",
+  ADD CONSTRAINT "payment_events_processing_status_check"
+    CHECK ("processing_status" IN ('pending', 'processing', 'processed', 'failed', 'ignored', 'blocked'));
+
+ALTER TABLE "users"
+  ADD COLUMN "auth_epoch" INTEGER NOT NULL DEFAULT 0;
+
+ALTER TABLE "auth_refresh_tokens"
+  ADD COLUMN "successor_ciphertext" TEXT,
+  ADD COLUMN "successor_expires_at" TIMESTAMPTZ(3);
+
+ALTER TABLE "auth_refresh_tokens"
+  ADD CONSTRAINT "auth_refresh_tokens_successor_material_check" CHECK (
+    ("successor_ciphertext" IS NULL AND "successor_expires_at" IS NULL)
+    OR ("successor_ciphertext" IS NOT NULL AND "successor_expires_at" IS NOT NULL)
+  );