@adminiumjs/meta 0.1.0-rc.1

package/dist/repos/snapshots.d.ts

@@ -0,0 +1,79 @@
+/**
+ * snapshotsRepo — adminium_schema_snapshots (07-meta-store.md §3.14).
+ *
+ * Immutable record of one introspection / schema-import run. The `schema`
+ * JSON is the normalized schema model owned by 05-introspection-engine.md —
+ * opaque here. Exactly one snapshot per connection is active; activation is
+ * app-enforced inside a transaction. Equal checksum to the latest snapshot
+ * ⇒ no-op (the existing row is returned, nothing is inserted).
+ */
+import type { MetaDb } from '../connect.js';
+export declare const SNAPSHOT_SOURCES: readonly ["introspection", "schema-import"];
+export type SnapshotSource = (typeof SNAPSHOT_SOURCES)[number];
+export interface SchemaSnapshot {
+    id: string;
+    connectionId: string;
+    source: string;
+    importFormat: string | null;
+    engineVersion: string | null;
+    /** Normalized schema model JSON — opaque to the meta store. */
+    schema: unknown;
+    stats: Record<string, {
+        rowCount: number;
+    }> | null;
+    checksum: string;
+    isActive: boolean;
+    createdBy: string | null;
+    createdAt: number;
+}
+/** Listing row without the (potentially multi-MB) schema payload. */
+export interface SchemaSnapshotMeta {
+    id: string;
+    connectionId: string;
+    source: string;
+    importFormat: string | null;
+    engineVersion: string | null;
+    checksum: string;
+    isActive: boolean;
+    createdBy: string | null;
+    createdAt: number;
+}
+export interface CreateSnapshotInput {
+    connectionId: string;
+    source: SnapshotSource;
+    importFormat?: string | null;
+    engineVersion?: string | null;
+    schema: unknown;
+    stats?: Record<string, {
+        rowCount: number;
+    }> | null;
+    /** SHA-256 of the canonicalized schema — computed by the caller (server). */
+    checksum: string;
+    createdBy?: string | null;
+    /** Default true: the new snapshot becomes the connection's active one. */
+    activate?: boolean;
+}
+export interface CreateSnapshotResult {
+    snapshot: SchemaSnapshot;
+    /** True when the checksum matched the latest snapshot and no row was written. */
+    noop: boolean;
+}
+export declare function snapshotsRepo(meta: MetaDb): {
+    /**
+     * Persist a snapshot; inside one transaction the previous active row is
+     * deactivated so exactly one stays active per connection (§3.14). Equal
+     * checksum to the latest snapshot short-circuits to a no-op.
+     */
+    create(input: CreateSnapshotInput, at?: number): Promise<CreateSnapshotResult>;
+    findById(id: string): Promise<SchemaSnapshot | null>;
+    /** The connection's active snapshot; falls back to the newest row. */
+    latest(connectionId: string): Promise<SchemaSnapshot | null>;
+    /** The snapshot immediately before the given one (diff default: previous vs latest). */
+    previous(connectionId: string, beforeSnapshotId: string): Promise<SchemaSnapshot | null>;
+    /** History (newest first) without schema payloads. */
+    listForConnection(connectionId: string): Promise<SchemaSnapshotMeta[]>;
+    /** Flip the active snapshot (rollback flows). */
+    activate(id: string): Promise<boolean>;
+};
+export type SnapshotsRepo = ReturnType<typeof snapshotsRepo>;
+//# sourceMappingURL=snapshots.d.ts.map

package/dist/repos/snapshots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshots.d.ts","sourceRoot":"","sources":["../../src/repos/snapshots.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAK5C,eAAO,MAAM,gBAAgB,6CAA8C,CAAC;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,+DAA+D;IAC/D,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IACpD,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,cAAc,CAAC;IACzB,iFAAiF;IACjF,IAAI,EAAE,OAAO,CAAC;CACf;AA4CD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM;IAItC;;;;OAIG;kBACiB,mBAAmB,OAAM,MAAM,GAAgB,OAAO,CAAC,oBAAoB,CAAC;iBA6C7E,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAS1D,sEAAsE;yBAC3C,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAsBlE,wFAAwF;2BAC3D,MAAM,oBAAoB,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAkB9F,sDAAsD;oCAChB,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAW5E,iDAAiD;iBAC9B,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;EAsB/C;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/repos/snapshots.js

@@ -0,0 +1,191 @@
+/**
+ * snapshotsRepo — adminium_schema_snapshots (07-meta-store.md §3.14).
+ *
+ * Immutable record of one introspection / schema-import run. The `schema`
+ * JSON is the normalized schema model owned by 05-introspection-engine.md —
+ * opaque here. Exactly one snapshot per connection is active; activation is
+ * app-enforced inside a transaction. Equal checksum to the latest snapshot
+ * ⇒ no-op (the existing row is returned, nothing is inserted).
+ */
+import { newId } from '../ids.js';
+import { MetaValidationError, packJson, readBool, readJson, readJsonOrNull, writeBool } from './util.js';
+export const SNAPSHOT_SOURCES = ['introspection', 'schema-import'];
+function decode(row) {
+    return {
+        id: row.id,
+        connectionId: row.connectionId,
+        source: row.source,
+        importFormat: row.importFormat,
+        engineVersion: row.engineVersion,
+        schema: readJson(row.schema),
+        stats: readJsonOrNull(row.stats),
+        checksum: row.checksum,
+        isActive: readBool(row.isActive),
+        createdBy: row.createdBy,
+        createdAt: row.createdAt,
+    };
+}
+function decodeMeta(row) {
+    return {
+        id: row.id,
+        connectionId: row.connectionId,
+        source: row.source,
+        importFormat: row.importFormat,
+        engineVersion: row.engineVersion,
+        checksum: row.checksum,
+        isActive: readBool(row.isActive),
+        createdBy: row.createdBy,
+        createdAt: row.createdAt,
+    };
+}
+const META_COLUMNS = [
+    'id',
+    'connectionId',
+    'source',
+    'importFormat',
+    'engineVersion',
+    'checksum',
+    'isActive',
+    'createdBy',
+    'createdAt',
+];
+export function snapshotsRepo(meta) {
+    const { db } = meta;
+    return {
+        /**
+         * Persist a snapshot; inside one transaction the previous active row is
+         * deactivated so exactly one stays active per connection (§3.14). Equal
+         * checksum to the latest snapshot short-circuits to a no-op.
+         */
+        async create(input, at = Date.now()) {
+            if (!SNAPSHOT_SOURCES.includes(input.source)) {
+                throw new MetaValidationError(`invalid snapshot source ${JSON.stringify(input.source)}`);
+            }
+            if (input.checksum.length === 0) {
+                throw new MetaValidationError('snapshot checksum must not be empty');
+            }
+            return db.transaction().execute(async (trx) => {
+                const latest = await trx
+                    .selectFrom('adminium_schema_snapshots')
+                    .selectAll()
+                    .where('connectionId', '=', input.connectionId)
+                    .orderBy('createdAt', 'desc')
+                    .orderBy('id', 'desc')
+                    .limit(1)
+                    .executeTakeFirst();
+                if (latest !== undefined && latest.checksum === input.checksum) {
+                    return { snapshot: decode(latest), noop: true };
+                }
+                const activate = input.activate ?? true;
+                const row = {
+                    id: newId('snap'),
+                    connectionId: input.connectionId,
+                    source: input.source,
+                    importFormat: input.importFormat ?? null,
+                    engineVersion: input.engineVersion ?? null,
+                    schema: packJson(input.schema),
+                    stats: input.stats === null || input.stats === undefined ? null : packJson(input.stats),
+                    checksum: input.checksum,
+                    isActive: writeBool(meta, activate),
+                    createdBy: input.createdBy ?? null,
+                    createdAt: at,
+                };
+                if (activate) {
+                    await trx
+                        .updateTable('adminium_schema_snapshots')
+                        .set({ isActive: writeBool(meta, false) })
+                        .where('connectionId', '=', input.connectionId)
+                        .execute();
+                }
+                await trx.insertInto('adminium_schema_snapshots').values(row).execute();
+                return { snapshot: { ...decode(row), schema: input.schema }, noop: false };
+            });
+        },
+        async findById(id) {
+            const row = await db
+                .selectFrom('adminium_schema_snapshots')
+                .selectAll()
+                .where('id', '=', id)
+                .executeTakeFirst();
+            return row === undefined ? null : decode(row);
+        },
+        /** The connection's active snapshot; falls back to the newest row. */
+        async latest(connectionId) {
+            const active = await db
+                .selectFrom('adminium_schema_snapshots')
+                .selectAll()
+                .where('connectionId', '=', connectionId)
+                .where('isActive', '=', writeBool(meta, true))
+                .orderBy('createdAt', 'desc')
+                .orderBy('id', 'desc')
+                .limit(1)
+                .executeTakeFirst();
+            if (active !== undefined)
+                return decode(active);
+            const newest = await db
+                .selectFrom('adminium_schema_snapshots')
+                .selectAll()
+                .where('connectionId', '=', connectionId)
+                .orderBy('createdAt', 'desc')
+                .orderBy('id', 'desc')
+                .limit(1)
+                .executeTakeFirst();
+            return newest === undefined ? null : decode(newest);
+        },
+        /** The snapshot immediately before the given one (diff default: previous vs latest). */
+        async previous(connectionId, beforeSnapshotId) {
+            const anchor = await this.findById(beforeSnapshotId);
+            if (anchor === null)
+                return null;
+            const row = await db
+                .selectFrom('adminium_schema_snapshots')
+                .selectAll()
+                .where('connectionId', '=', connectionId)
+                .where('id', '!=', anchor.id)
+                .where('createdAt', '<=', anchor.createdAt)
+                .orderBy('createdAt', 'desc')
+                .orderBy('id', 'desc')
+                .limit(1)
+                .executeTakeFirst();
+            // Same-millisecond rows tie on createdAt; ULID ids break the tie.
+            if (row !== undefined && row.createdAt === anchor.createdAt && row.id > anchor.id)
+                return null;
+            return row === undefined ? null : decode(row);
+        },
+        /** History (newest first) without schema payloads. */
+        async listForConnection(connectionId) {
+            const rows = await db
+                .selectFrom('adminium_schema_snapshots')
+                .select(META_COLUMNS)
+                .where('connectionId', '=', connectionId)
+                .orderBy('createdAt', 'desc')
+                .orderBy('id', 'desc')
+                .execute();
+            return rows.map(decodeMeta);
+        },
+        /** Flip the active snapshot (rollback flows). */
+        async activate(id) {
+            return db.transaction().execute(async (trx) => {
+                const row = await trx
+                    .selectFrom('adminium_schema_snapshots')
+                    .select(['id', 'connectionId'])
+                    .where('id', '=', id)
+                    .executeTakeFirst();
+                if (row === undefined)
+                    return false;
+                await trx
+                    .updateTable('adminium_schema_snapshots')
+                    .set({ isActive: writeBool(meta, false) })
+                    .where('connectionId', '=', row.connectionId)
+                    .execute();
+                await trx
+                    .updateTable('adminium_schema_snapshots')
+                    .set({ isActive: writeBool(meta, true) })
+                    .where('id', '=', id)
+                    .execute();
+                return true;
+            });
+        },
+    };
+}
+//# sourceMappingURL=snapshots.js.map

package/dist/repos/snapshots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshots.js","sourceRoot":"","sources":["../../src/repos/snapshots.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEzG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,eAAe,CAAU,CAAC;AAmD5E,SAAS,MAAM,CAAC,GAA6C;IAC3D,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;QAC5B,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAuE;IACzF,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG;IACnB,IAAI;IACJ,cAAc;IACd,QAAQ;IACR,cAAc;IACd,eAAe;IACf,UAAU;IACV,UAAU;IACV,WAAW;IACX,WAAW;CACH,CAAC;AAEX,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,OAAO;QACL;;;;WAIG;QACH,KAAK,CAAC,MAAM,CAAC,KAA0B,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC9D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC5C,MAAM,MAAM,GAAG,MAAM,GAAG;qBACrB,UAAU,CAAC,2BAA2B,CAAC;qBACvC,SAAS,EAAE;qBACX,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC;qBAC9C,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;qBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;qBACrB,KAAK,CAAC,CAAC,CAAC;qBACR,gBAAgB,EAAE,CAAC;gBACtB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAClD,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC;gBACxC,MAAM,GAAG,GAAG;oBACV,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;oBACjB,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;oBACxC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;oBAC1C,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;oBACvF,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC;oBACnC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;oBAClC,SAAS,EAAE,EAAE;iBACd,CAAC;gBACF,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,GAAG;yBACN,WAAW,CAAC,2BAA2B,CAAC;yBACxC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;yBACzC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC;yBAC9C,OAAO,EAAE,CAAC;gBACf,CAAC;gBACD,MAAM,GAAG,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACxE,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,GAAY,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACtF,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAU;YACvB,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,UAAU,CAAC,2BAA2B,CAAC;iBACvC,SAAS,EAAE;iBACX,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,gBAAgB,EAAE,CAAC;YACtB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,sEAAsE;QACtE,KAAK,CAAC,MAAM,CAAC,YAAoB;YAC/B,MAAM,MAAM,GAAG,MAAM,EAAE;iBACpB,UAAU,CAAC,2BAA2B,CAAC;iBACvC,SAAS,EAAE;iBACX,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,YAAY,CAAC;iBACxC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;iBAC7C,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,KAAK,CAAC,CAAC,CAAC;iBACR,gBAAgB,EAAE,CAAC;YACtB,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,EAAE;iBACpB,UAAU,CAAC,2BAA2B,CAAC;iBACvC,SAAS,EAAE;iBACX,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,YAAY,CAAC;iBACxC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,KAAK,CAAC,CAAC,CAAC;iBACR,gBAAgB,EAAE,CAAC;YACtB,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAED,wFAAwF;QACxF,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,gBAAwB;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,UAAU,CAAC,2BAA2B,CAAC;iBACvC,SAAS,EAAE;iBACX,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,YAAY,CAAC;iBACxC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;iBAC5B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC;iBAC1C,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,KAAK,CAAC,CAAC,CAAC;iBACR,gBAAgB,EAAE,CAAC;YACtB,kEAAkE;YAClE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC/F,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,sDAAsD;QACtD,KAAK,CAAC,iBAAiB,CAAC,YAAoB;YAC1C,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,UAAU,CAAC,2BAA2B,CAAC;iBACvC,MAAM,CAAC,YAAY,CAAC;iBACpB,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,YAAY,CAAC;iBACxC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,iDAAiD;QACjD,KAAK,CAAC,QAAQ,CAAC,EAAU;YACvB,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC5C,MAAM,GAAG,GAAG,MAAM,GAAG;qBAClB,UAAU,CAAC,2BAA2B,CAAC;qBACvC,MAAM,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;qBAC9B,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;qBACpB,gBAAgB,EAAE,CAAC;gBACtB,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC;gBACpC,MAAM,GAAG;qBACN,WAAW,CAAC,2BAA2B,CAAC;qBACxC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;qBACzC,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC;qBAC5C,OAAO,EAAE,CAAC;gBACb,MAAM,GAAG;qBACN,WAAW,CAAC,2BAA2B,CAAC;qBACxC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;qBACxC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;qBACpB,OAAO,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/repos/user-prefs.d.ts

@@ -0,0 +1,56 @@
+/**
+ * userPrefsRepo — adminium_user_prefs (07-meta-store.md §3.4) plus the
+ * BRIEF §7 preference resolution (§7.2): system default → global settings
+ * override → non-NULL user axis, with `dir` derived from locale unless
+ * explicitly overridden. Clearing an axis = writing NULL, not deleting the row.
+ */
+import { z } from 'zod';
+import type { MetaDb } from '../connect.js';
+import { accentSchema, densitySchema, dirSchema, localeSchema, themeSchema } from '../schema/json-payloads.js';
+export interface UserPrefs {
+    userId: string;
+    theme: z.infer<typeof themeSchema> | null;
+    accent: z.infer<typeof accentSchema> | null;
+    density: z.infer<typeof densitySchema> | null;
+    locale: z.infer<typeof localeSchema> | null;
+    dir: z.infer<typeof dirSchema> | null;
+    uiState: Record<string, unknown> | null;
+    updatedAt: number;
+}
+export type UserPrefsPatch = Partial<Omit<UserPrefs, 'userId' | 'updatedAt'>>;
+export type PrefSource = 'system' | 'global' | 'user';
+export interface ResolvedPrefs {
+    theme: z.infer<typeof themeSchema>;
+    accent: z.infer<typeof accentSchema>;
+    density: z.infer<typeof densitySchema>;
+    locale: z.infer<typeof localeSchema>;
+    dir: z.infer<typeof dirSchema>;
+    /** Per-axis provenance for the "using workspace default" affordances. */
+    source: {
+        theme: PrefSource;
+        accent: PrefSource;
+        density: PrefSource;
+        locale: PrefSource;
+        dir: PrefSource;
+    };
+}
+/** BRIEF §7 baseline — a fresh install without a single settings row. */
+export declare const SYSTEM_PREF_DEFAULTS: {
+    readonly theme: "system";
+    readonly accent: "indigo";
+    readonly density: "comfortable";
+    readonly locale: "en_US";
+};
+export declare function dirForLocale(locale: string): 'ltr' | 'rtl';
+export declare function userPrefsRepo(meta: MetaDb): {
+    get: (userId: string) => Promise<UserPrefs | null>;
+    /**
+     * Upsert the single prefs row. Only the axes present in `patch` change;
+     * `null` clears an axis back to "inherit".
+     */
+    set(userId: string, patch: UserPrefsPatch, at?: number): Promise<UserPrefs>;
+    /** §7.2 merge, implemented exactly once, server-side. */
+    resolve(userId: string | null): Promise<ResolvedPrefs>;
+};
+export type UserPrefsRepo = ReturnType<typeof userPrefsRepo>;
+//# sourceMappingURL=user-prefs.d.ts.map

package/dist/repos/user-prefs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-prefs.d.ts","sourceRoot":"","sources":["../../src/repos/user-prefs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,EAEZ,MAAM,4BAA4B,CAAC;AAIpC,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,GAAG,IAAI,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,GAAG,IAAI,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC;AAE9E,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;IAC/B,yEAAyE;IACzE,MAAM,EAAE;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,OAAO,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;CAC7G;AAUD,yEAAyE;AACzE,eAAO,MAAM,oBAAoB;;;;;CAKvB,CAAC;AAEX,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAE1D;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM;kBAIb,MAAM,KAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAsB3D;;;OAGG;gBACe,MAAM,SAAS,cAAc,OAAM,MAAM,GAAgB,OAAO,CAAC,SAAS,CAAC;IAiD7F,yDAAyD;oBACnC,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC;EAqD/D;AAED,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/repos/user-prefs.js

@@ -0,0 +1,147 @@
+/**
+ * userPrefsRepo — adminium_user_prefs (07-meta-store.md §3.4) plus the
+ * BRIEF §7 preference resolution (§7.2): system default → global settings
+ * override → non-NULL user axis, with `dir` derived from locale unless
+ * explicitly overridden. Clearing an axis = writing NULL, not deleting the row.
+ */
+import { z } from 'zod';
+import { accentSchema, densitySchema, dirSchema, localeSchema, themeSchema, uiStateSchema, } from '../schema/json-payloads.js';
+import { MetaValidationError, packJson, readJsonOrNull } from './util.js';
+import { settingsRepo } from './settings.js';
+const AXES = {
+    theme: themeSchema,
+    accent: accentSchema,
+    density: densitySchema,
+    locale: localeSchema,
+    dir: dirSchema,
+};
+/** BRIEF §7 baseline — a fresh install without a single settings row. */
+export const SYSTEM_PREF_DEFAULTS = {
+    theme: 'system',
+    accent: 'indigo',
+    density: 'comfortable',
+    locale: 'en_US',
+};
+export function dirForLocale(locale) {
+    return locale === 'ar_EG' ? 'rtl' : 'ltr';
+}
+export function userPrefsRepo(meta) {
+    const { db } = meta;
+    const settings = settingsRepo(meta);
+    async function get(userId) {
+        const row = await db
+            .selectFrom('adminium_user_prefs')
+            .selectAll()
+            .where('userId', '=', userId)
+            .executeTakeFirst();
+        if (!row)
+            return null;
+        return {
+            userId: row.userId,
+            theme: row.theme === null ? null : themeSchema.parse(row.theme),
+            accent: row.accent === null ? null : accentSchema.parse(row.accent),
+            density: row.density === null ? null : densitySchema.parse(row.density),
+            locale: row.locale === null ? null : localeSchema.parse(row.locale),
+            dir: row.dir === null ? null : dirSchema.parse(row.dir),
+            uiState: readJsonOrNull(row.uiState),
+            updatedAt: row.updatedAt,
+        };
+    }
+    return {
+        get,
+        /**
+         * Upsert the single prefs row. Only the axes present in `patch` change;
+         * `null` clears an axis back to "inherit".
+         */
+        async set(userId, patch, at = Date.now()) {
+            const values = {};
+            for (const axis of ['theme', 'accent', 'density', 'locale', 'dir']) {
+                const v = patch[axis];
+                if (v === undefined)
+                    continue;
+                if (v !== null) {
+                    const parsed = AXES[axis].safeParse(v);
+                    if (!parsed.success) {
+                        throw new MetaValidationError(`invalid pref ${axis}: ${JSON.stringify(v)}`, parsed.error.issues);
+                    }
+                }
+                values[axis] = v;
+            }
+            if (patch.uiState !== undefined) {
+                values.uiState = patch.uiState === null ? null : packJson(uiStateSchema.parse(patch.uiState));
+            }
+            const res = await db
+                .updateTable('adminium_user_prefs')
+                .set({ ...values, updatedAt: at })
+                .where('userId', '=', userId)
+                .executeTakeFirst();
+            if (Number(res.numUpdatedRows) === 0) {
+                await db
+                    .insertInto('adminium_user_prefs')
+                    .values({
+                    userId,
+                    theme: values.theme ?? null,
+                    accent: values.accent ?? null,
+                    density: values.density ?? null,
+                    locale: values.locale ?? null,
+                    dir: values.dir ?? null,
+                    uiState: values.uiState ?? null,
+                    updatedAt: at,
+                })
+                    .execute();
+            }
+            const row = await get(userId);
+            if (!row)
+                throw new Error('user prefs row disappeared during set');
+            return row;
+        },
+        /** §7.2 merge, implemented exactly once, server-side. */
+        async resolve(userId) {
+            const glob = {
+                theme: await settings.get('appearance.theme'),
+                accent: await settings.get('appearance.accent'),
+                density: await settings.get('appearance.density'),
+                locale: await settings.get('locale.default'),
+            };
+            const globIsDefault = {
+                theme: glob.theme === SYSTEM_PREF_DEFAULTS.theme,
+                accent: glob.accent === SYSTEM_PREF_DEFAULTS.accent,
+                density: glob.density === SYSTEM_PREF_DEFAULTS.density,
+                locale: glob.locale === SYSTEM_PREF_DEFAULTS.locale,
+            };
+            const user = userId === null ? null : await get(userId);
+            const pick = (axis) => {
+                const u = user?.[axis];
+                if (u !== null && u !== undefined) {
+                    return { value: u, source: 'user' };
+                }
+                return {
+                    value: glob[axis],
+                    source: globIsDefault[axis] ? 'system' : 'global',
+                };
+            };
+            const theme = pick('theme');
+            const accent = pick('accent');
+            const density = pick('density');
+            const locale = pick('locale');
+            const dir = user?.dir !== null && user?.dir !== undefined
+                ? { value: user.dir, source: 'user' }
+                : { value: dirForLocale(locale.value), source: locale.source };
+            return {
+                theme: theme.value,
+                accent: accent.value,
+                density: density.value,
+                locale: locale.value,
+                dir: dir.value,
+                source: {
+                    theme: theme.source,
+                    accent: accent.source,
+                    density: density.source,
+                    locale: locale.source,
+                    dir: dir.source,
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=user-prefs.js.map

package/dist/repos/user-prefs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-prefs.js","sourceRoot":"","sources":["../../src/repos/user-prefs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,EACX,aAAa,GACd,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA2B7C,MAAM,IAAI,GAAG;IACX,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,SAAS;CACN,CAAC;AAEX,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,OAAO;CACP,CAAC;AAEX,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAEpC,KAAK,UAAU,GAAG,CAAC,MAAc;QAC/B,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,UAAU,CAAC,qBAAqB,CAAC;aACjC,SAAS,EAAE;aACX,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;YAC/D,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YACnE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;YACvE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YACnE,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACvD,OAAO,EAAE,cAAc,CAA0B,GAAG,CAAC,OAAO,CAAC;YAC7D,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG;QAEH;;;WAGG;QACH,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,KAAqB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YACtE,MAAM,MAAM,GAOP,EAAE,CAAC;YACR,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAU,EAAE,CAAC;gBAC5E,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtB,IAAI,CAAC,KAAK,SAAS;oBAAE,SAAS;gBAC9B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACf,MAAM,MAAM,GAAI,IAAI,CAAC,IAAI,CAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;oBAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACpB,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACnG,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAChG,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,WAAW,CAAC,qBAAqB,CAAC;iBAClC,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;iBACjC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;iBAC5B,gBAAgB,EAAE,CAAC;YACtB,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,MAAM,EAAE;qBACL,UAAU,CAAC,qBAAqB,CAAC;qBACjC,MAAM,CAAC;oBACN,MAAM;oBACN,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;oBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;oBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;oBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;oBAC7B,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;oBAC/B,SAAS,EAAE,EAAE;iBACd,CAAC;qBACD,OAAO,EAAE,CAAC;YACf,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACnE,OAAO,GAAG,CAAC;QACb,CAAC;QAED,yDAAyD;QACzD,KAAK,CAAC,OAAO,CAAC,MAAqB;YACjC,MAAM,IAAI,GAAG;gBACX,KAAK,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAC7C,MAAM,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAC/C,OAAO,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBACjD,MAAM,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC;aAC7C,CAAC;YACF,MAAM,aAAa,GAAG;gBACpB,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,oBAAoB,CAAC,KAAK;gBAChD,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,oBAAoB,CAAC,MAAM;gBACnD,OAAO,EAAE,IAAI,CAAC,OAAO,KAAK,oBAAoB,CAAC,OAAO;gBACtD,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,oBAAoB,CAAC,MAAM;aACpD,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;YAExD,MAAM,IAAI,GAAG,CACX,IAAO,EAC0C,EAAE;gBACnD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;gBACvB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;oBAClC,OAAO,EAAE,KAAK,EAAE,CAAgC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBACrE,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAgC;oBAChD,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;iBAClD,CAAC;YACJ,CAAC,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,GAAG,GACP,IAAI,EAAE,GAAG,KAAK,IAAI,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS;gBAC3C,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAoB,EAAE;gBACnD,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAEnE,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,OAAO,EAAE,OAAO,CAAC,KAAK;gBACtB,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,GAAG,EAAE,GAAG,CAAC,KAAK;gBACd,MAAM,EAAE;oBACN,KAAK,EAAE,KAAK,CAAC,MAAM;oBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,GAAG,EAAE,GAAG,CAAC,MAAM;iBAChB;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/repos/users.d.ts

@@ -0,0 +1,38 @@
+/**
+ * usersRepo — adminium_users (07-meta-store.md §3.3).
+ * Thin data access only: password hashing happens in the server.
+ */
+import type { MetaDb } from '../connect.js';
+import { type UserStatus } from '../schema/json-payloads.js';
+export interface User {
+    id: string;
+    email: string;
+    name: string;
+    passwordHash: string | null;
+    status: UserStatus;
+    totpSecretEncrypted: string | null;
+    totpEnabled: boolean;
+    recoveryCodes: string[] | null;
+    avatarFileId: string | null;
+    lastLoginAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface CreateUserInput {
+    email: string;
+    name: string;
+    passwordHash?: string | null;
+    status?: UserStatus;
+}
+export declare function usersRepo(meta: MetaDb): {
+    create(input: CreateUserInput, at?: number): Promise<User>;
+    findByEmail(email: string): Promise<User | null>;
+    findById(id: string): Promise<User | null>;
+    updatePassword(userId: string, passwordHash: string, at?: number): Promise<boolean>;
+    updateStatus(userId: string, status: UserStatus, at?: number): Promise<boolean>;
+    setRecoveryCodes(userId: string, codes: string[] | null, at?: number): Promise<boolean>;
+    recordLogin(userId: string, at?: number): Promise<void>;
+    count(): Promise<number>;
+};
+export type UsersRepo = ReturnType<typeof usersRepo>;
+//# sourceMappingURL=users.d.ts.map

package/dist/repos/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/repos/users.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAyC,KAAK,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAIpG,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,UAAU,CAAC;IACnB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAmBD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM;kBAGd,eAAe,OAAM,MAAM,GAAgB,OAAO,CAAC,IAAI,CAAC;uBAwBnD,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;iBASnC,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;2BAKnB,MAAM,gBAAgB,MAAM,OAAM,MAAM,GAAgB,OAAO,CAAC,OAAO,CAAC;yBAS1E,MAAM,UAAU,UAAU,OAAM,MAAM,GAAgB,OAAO,CAAC,OAAO,CAAC;6BASlE,MAAM,SAAS,MAAM,EAAE,GAAG,IAAI,OAAM,MAAM,GAAgB,OAAO,CAAC,OAAO,CAAC;wBAU/E,MAAM,OAAM,MAAM,GAAgB,OAAO,CAAC,IAAI,CAAC;aAQ1D,OAAO,CAAC,MAAM,CAAC;EAQjC;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC"}

package/dist/repos/users.js

@@ -0,0 +1,103 @@
+/**
+ * usersRepo — adminium_users (07-meta-store.md §3.3).
+ * Thin data access only: password hashing happens in the server.
+ */
+import { newId } from '../ids.js';
+import { recoveryCodesSchema, userStatusSchema } from '../schema/json-payloads.js';
+import { MetaValidationError, packJson, readBool, readJsonOrNull, writeBool } from './util.js';
+function mapUser(row) {
+    return {
+        id: row.id,
+        email: row.email,
+        name: row.name,
+        passwordHash: row.passwordHash,
+        status: userStatusSchema.parse(row.status),
+        totpSecretEncrypted: row.totpSecretEncrypted,
+        totpEnabled: readBool(row.totpEnabled),
+        recoveryCodes: readJsonOrNull(row.recoveryCodes),
+        avatarFileId: row.avatarFileId,
+        lastLoginAt: row.lastLoginAt,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+    };
+}
+export function usersRepo(meta) {
+    const { db } = meta;
+    return {
+        async create(input, at = Date.now()) {
+            const status = userStatusSchema.parse(input.status ?? 'active');
+            const email = input.email.trim().toLowerCase();
+            if (email.length === 0 || email.length > 320 || !email.includes('@')) {
+                throw new MetaValidationError(`invalid email: ${JSON.stringify(input.email)}`);
+            }
+            const row = {
+                id: newId('usr'),
+                email,
+                name: input.name,
+                passwordHash: input.passwordHash ?? null,
+                status,
+                totpSecretEncrypted: null,
+                totpEnabled: writeBool(meta, false),
+                recoveryCodes: null,
+                avatarFileId: null,
+                lastLoginAt: null,
+                createdAt: at,
+                updatedAt: at,
+            };
+            await db.insertInto('adminium_users').values(row).execute();
+            return mapUser(row);
+        },
+        async findByEmail(email) {
+            const row = await db
+                .selectFrom('adminium_users')
+                .selectAll()
+                .where('email', '=', email.trim().toLowerCase())
+                .executeTakeFirst();
+            return row ? mapUser(row) : null;
+        },
+        async findById(id) {
+            const row = await db.selectFrom('adminium_users').selectAll().where('id', '=', id).executeTakeFirst();
+            return row ? mapUser(row) : null;
+        },
+        async updatePassword(userId, passwordHash, at = Date.now()) {
+            const res = await db
+                .updateTable('adminium_users')
+                .set({ passwordHash, updatedAt: at })
+                .where('id', '=', userId)
+                .executeTakeFirst();
+            return Number(res.numUpdatedRows) === 1;
+        },
+        async updateStatus(userId, status, at = Date.now()) {
+            const res = await db
+                .updateTable('adminium_users')
+                .set({ status: userStatusSchema.parse(status), updatedAt: at })
+                .where('id', '=', userId)
+                .executeTakeFirst();
+            return Number(res.numUpdatedRows) === 1;
+        },
+        async setRecoveryCodes(userId, codes, at = Date.now()) {
+            const value = codes === null ? null : packJson(recoveryCodesSchema.parse(codes));
+            const res = await db
+                .updateTable('adminium_users')
+                .set({ recoveryCodes: value, updatedAt: at })
+                .where('id', '=', userId)
+                .executeTakeFirst();
+            return Number(res.numUpdatedRows) === 1;
+        },
+        async recordLogin(userId, at = Date.now()) {
+            await db
+                .updateTable('adminium_users')
+                .set({ lastLoginAt: at, updatedAt: at })
+                .where('id', '=', userId)
+                .execute();
+        },
+        async count() {
+            const row = await db
+                .selectFrom('adminium_users')
+                .select(({ fn }) => fn.countAll().as('n'))
+                .executeTakeFirst();
+            return Number(row?.n ?? 0);
+        },
+    };
+}
+//# sourceMappingURL=users.js.map