Makeja Homes

export function buildTenantUrl(schemaName: string): string {
  // Neon's pgbouncer pooler strips the `options=` parameter, so search_path
  // is never set and all queries silently hit the public schema instead.
  const direct = (process.env.DIRECT_DATABASE_URL || /* … */ '').replace('-pooler.', '.')
  // … strip any existing schema= / options= params
  return `${base}${sep}options=--search_path%3D${schemaName}`
}

export function getCachedClient(schemaName: string): PrismaClient {
  const existing = cache.get(schemaName)
  if (existing) {
    cache.delete(schemaName)   // refresh recency
    cache.set(schemaName, existing)
    return existing
  }
  // … create client, then evict the least-recently-used one past the cap
}

export async function sweepAllTenantSchemas(opts: { force?: boolean } = {}) {
  const master = getMasterPrisma()
  await ensureLedger(master)
  await master.$executeRawUnsafe(`SELECT pg_advisory_lock(${ADVISORY_LOCK_KEY})`)
  try {
    const schemas = await listTenantSchemas(master)
    for (const schema of schemas) {
      results.push(await runTenantMigrations(schema, opts))
    }
    // …
  } finally {
    await master.$executeRawUnsafe(`SELECT pg_advisory_unlock(${ADVISORY_LOCK_KEY})`)
  }
}

const hash = crypto
  .createHmac("sha512", process.env.PAYSTACK_SECRET_KEY!)
  .update(body)
  .digest("hex")

const hashBuf = Buffer.from(hash, "hex")
const sigBuf = signature ? Buffer.from(signature, "hex") : Buffer.alloc(0)
const signatureValid =
  hashBuf.length === sigBuf.length && crypto.timingSafeEqual(hashBuf, sigBuf)
// …
await db.$transaction(async (tx) => {
  // mark COMPLETED and credit the bill or deposit together …
})

const stale = await db.$queryRawUnsafe(`
  SELECT id, COALESCE("referenceNumber", reference) AS ref
  FROM payments
  WHERE status::text = 'PENDING'
    AND "paymentMethod"::text = 'PAYSTACK'
    AND "createdAt" < NOW() - INTERVAL '2 minutes'
  LIMIT 20`)

for (const row of stale) {
  const ps = await fetch(
    `https://api.paystack.co/transaction/verify/${encodeURIComponent(row.ref)}`,
    { headers: { Authorization: `Bearer ${process.env.PAYSTACK_SECRET_KEY}` } })
  // Paystack says it never succeeded: mark FAILED. A real success is left
  // to the full verify path (bill matching, wallet credit, receipt) …
}

const BLOCKLIST_TTL_SEC = 25 * 60 * 60 // JWT maxAge is 24h

export async function revokeToken(jti: string) {
  await kvSet(`blocklist:${jti}`, '1', BLOCKLIST_TTL_SEC)
}
export async function isRevoked(jti: string) {
  return kvHas(`blocklist:${jti}`)
}