Kevin Codex 3d8ce76840 fix(review 2): metadata key ownership, independent deploy secrets, locked repair scripts ...

- Metadata ownership is per (chain, launcher, meta_key), the thing the public URI is keyed by:
  the first registration under a key fixes its content; later rows under the same key must match
  exactly (the salt search) or get 409. Serialized with a transaction-scoped advisory lock so two
  concurrent first writes cannot both win (tested: 10/10 races → one 200, one 409). Reads prefer the
  launched row, then the FIRST registration, never a newer one.
- fly-secrets.sh reads every key independently from the secrets file (no RPC derivation), fails on
  missing required keys, supports --dry-run; verified against mocked files.
- rebuild-launch-totals.sql / rebuild-holders.sql run in one transaction holding SHARE locks on the
  raw event tables and EXCLUSIVE on the target table, so ingestion waits instead of racing (tested:
  an ingestion started mid-rebuild blocked 3s, then applied on top; totals consistent).

2026-09-07 12:51:08 +08:00

..

lib

Initial commit

2026-09-07 11:28:24 +08:00

fly-secrets.sh

fix(review 2): metadata key ownership, independent deploy secrets, locked repair scripts

2026-09-07 12:51:08 +08:00

migrate.mjs

fix: signed-or-insert-only metadata, salt-search-stable URI, atomic trade/fee accounting; CI, contributing, security policy

2026-09-07 11:48:37 +08:00

rebuild-holders.sql

fix(review 2): metadata key ownership, independent deploy secrets, locked repair scripts

2026-09-07 12:51:08 +08:00

rebuild-launch-totals.sql

fix(review 2): metadata key ownership, independent deploy secrets, locked repair scripts

2026-09-07 12:51:08 +08:00

smoke.sh

Initial commit

2026-09-07 11:28:24 +08:00