@adminiumjs/meta 0.1.0-rc.1

package/dist/repos/api-keys.js

@@ -0,0 +1,62 @@
+/**
+ * apiKeysRepo — adminium_api_keys (07-meta-store.md §3.7).
+ * Stripe-style `adm_live_…`: the secret is shown once by the server; only the
+ * SHA-256 hash lands here. The key acts with its role's permissions.
+ */
+import { newId } from '../ids.js';
+export function apiKeysRepo(meta) {
+    const { db } = meta;
+    return {
+        async create(input, at = Date.now()) {
+            const row = {
+                id: newId('key'),
+                name: input.name,
+                prefix: input.prefix,
+                tokenHash: input.tokenHash,
+                roleId: input.roleId,
+                createdBy: input.createdBy ?? null,
+                lastUsedAt: null,
+                expiresAt: input.expiresAt ?? null,
+                revokedAt: null,
+                createdAt: at,
+            };
+            await db.insertInto('adminium_api_keys').values(row).execute();
+            return row;
+        },
+        async findByPrefix(prefix) {
+            return db.selectFrom('adminium_api_keys').selectAll().where('prefix', '=', prefix).execute();
+        },
+        async findById(id) {
+            const row = await db.selectFrom('adminium_api_keys').selectAll().where('id', '=', id).executeTakeFirst();
+            return row ?? null;
+        },
+        /** Auth lookup: un-revoked and unexpired at `at`. */
+        async findValidByTokenHash(tokenHash, at = Date.now()) {
+            const row = await db
+                .selectFrom('adminium_api_keys')
+                .selectAll()
+                .where('tokenHash', '=', tokenHash)
+                .where('revokedAt', 'is', null)
+                .where((eb) => eb.or([eb('expiresAt', 'is', null), eb('expiresAt', '>', at)]))
+                .executeTakeFirst();
+            return row ?? null;
+        },
+        async list() {
+            return db.selectFrom('adminium_api_keys').selectAll().orderBy('createdAt', 'desc').execute();
+        },
+        async revoke(id, at = Date.now()) {
+            const res = await db
+                .updateTable('adminium_api_keys')
+                .set({ revokedAt: at })
+                .where('id', '=', id)
+                .where('revokedAt', 'is', null)
+                .executeTakeFirst();
+            return Number(res.numUpdatedRows) === 1;
+        },
+        /** Throttled by the caller (server) like session touches. */
+        async touchLastUsed(id, at = Date.now()) {
+            await db.updateTable('adminium_api_keys').set({ lastUsedAt: at }).where('id', '=', id).execute();
+        },
+    };
+}
+//# sourceMappingURL=api-keys.js.map

package/dist/repos/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../src/repos/api-keys.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAelC,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAwB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC5D,MAAM,GAAG,GAAW;gBAClB,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,EAAE;aACd,CAAC;YACF,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YAC/D,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAc;YAC/B,OAAO,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAU;YACvB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACzG,OAAO,GAAG,IAAI,IAAI,CAAC;QACrB,CAAC;QAED,qDAAqD;QACrD,KAAK,CAAC,oBAAoB,CAAC,SAAiB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YACnE,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,UAAU,CAAC,mBAAmB,CAAC;iBAC/B,SAAS,EAAE;iBACX,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC;iBAClC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;iBAC9B,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;iBAC7E,gBAAgB,EAAE,CAAC;YACtB,OAAO,GAAG,IAAI,IAAI,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,IAAI;YACR,OAAO,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC9C,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,WAAW,CAAC,mBAAmB,CAAC;iBAChC,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;iBACtB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;iBAC9B,gBAAgB,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED,6DAA6D;QAC7D,KAAK,CAAC,aAAa,CAAC,EAAU,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YACrD,MAAM,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACnG,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/repos/audit.d.ts

@@ -0,0 +1,51 @@
+/**
+ * auditRepo — adminium_audit_log (07-meta-store.md §3.11). Append-only;
+ * actor label denormalized so entries survive principal deletion; `changes`
+ * capped at 16 KB serialized (replaced by `{ "_truncated": true }` beyond it).
+ */
+import type { MetaDb } from '../connect.js';
+import { type ActorKind, type AuditCategory, type RecordRef } from '../schema/json-payloads.js';
+export interface AuditEntryInput {
+    actorKind: ActorKind;
+    actorId?: string | null;
+    actorLabel: string;
+    category: AuditCategory;
+    /** Dotted verb, e.g. `record.update`, `session.create`. */
+    action: string;
+    connectionId?: string | null;
+    entity?: RecordRef | null;
+    changes?: {
+        before?: Record<string, unknown> | null;
+        after?: Record<string, unknown> | null;
+    } | null;
+    ip?: string | null;
+    userAgent?: string | null;
+    requestId?: string | null;
+}
+export interface AuditEntry {
+    id: string;
+    createdAt: number;
+    actorKind: ActorKind;
+    actorId: string | null;
+    actorLabel: string;
+    category: AuditCategory;
+    action: string;
+    connectionId: string | null;
+    entity: RecordRef | null;
+    changes: Record<string, unknown> | null;
+    ip: string | null;
+    userAgent: string | null;
+    requestId: string | null;
+}
+export declare function auditRepo(meta: MetaDb): {
+    append(input: AuditEntryInput, at?: number): Promise<AuditEntry>;
+    list(filter?: {
+        actorId?: string;
+        category?: AuditCategory;
+        limit?: number;
+    }): Promise<AuditEntry[]>;
+    /** Retention §8 `audit-log` policy (archive handling lives in the server GC job). */
+    gc(at: number, retentionDays: number): Promise<number>;
+};
+export type AuditRepo = ReturnType<typeof auditRepo>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/repos/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/repos/audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,SAAS,EACf,MAAM,4BAA4B,CAAC;AAIpC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACrG,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AA4BD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM;kBAGd,eAAe,OAAM,MAAM,GAAgB,OAAO,CAAC,UAAU,CAAC;kBAqBxE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACrE,OAAO,CAAC,UAAU,EAAE,CAAC;IAYxB,qFAAqF;WACxE,MAAM,iBAAiB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;EAM/D;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC"}

package/dist/repos/audit.js

@@ -0,0 +1,78 @@
+/**
+ * auditRepo — adminium_audit_log (07-meta-store.md §3.11). Append-only;
+ * actor label denormalized so entries survive principal deletion; `changes`
+ * capped at 16 KB serialized (replaced by `{ "_truncated": true }` beyond it).
+ */
+import { newId } from '../ids.js';
+import { AUDIT_CHANGES_MAX_BYTES, actorKindSchema, auditCategorySchema, recordRefSchema, } from '../schema/json-payloads.js';
+import { packJson, readJsonOrNull } from './util.js';
+function mapEntry(row) {
+    return {
+        id: row.id,
+        createdAt: row.createdAt,
+        actorKind: actorKindSchema.parse(row.actorKind),
+        actorId: row.actorId,
+        actorLabel: row.actorLabel,
+        category: auditCategorySchema.parse(row.category),
+        action: row.action,
+        connectionId: row.connectionId,
+        entity: readJsonOrNull(row.entity),
+        changes: readJsonOrNull(row.changes),
+        ip: row.ip,
+        userAgent: row.userAgent,
+        requestId: row.requestId,
+    };
+}
+/** Serialize `changes` under the 16 KB cap (§3.11). */
+function packChanges(changes) {
+    if (changes === null || changes === undefined)
+        return null;
+    const serialized = packJson(changes);
+    if (Buffer.byteLength(serialized, 'utf8') <= AUDIT_CHANGES_MAX_BYTES)
+        return serialized;
+    return packJson({ _truncated: true });
+}
+export function auditRepo(meta) {
+    const { db } = meta;
+    return {
+        async append(input, at = Date.now()) {
+            const row = {
+                id: newId('aud'),
+                createdAt: at,
+                actorKind: actorKindSchema.parse(input.actorKind),
+                actorId: input.actorId ?? null,
+                actorLabel: input.actorLabel,
+                category: auditCategorySchema.parse(input.category),
+                action: input.action,
+                connectionId: input.connectionId ?? null,
+                entity: input.entity === null || input.entity === undefined ? null : packJson(recordRefSchema.parse(input.entity)),
+                changes: packChanges(input.changes),
+                ip: input.ip ?? null,
+                userAgent: input.userAgent ?? null,
+                requestId: input.requestId ?? null,
+            };
+            await db.insertInto('adminium_audit_log').values(row).execute();
+            return mapEntry(row);
+        },
+        async list(filter = {}) {
+            let q = db.selectFrom('adminium_audit_log').selectAll();
+            if (filter.actorId !== undefined)
+                q = q.where('actorId', '=', filter.actorId);
+            if (filter.category !== undefined)
+                q = q.where('category', '=', filter.category);
+            const rows = await q
+                .orderBy('createdAt', 'desc')
+                .orderBy('id', 'desc')
+                .limit(filter.limit ?? 100)
+                .execute();
+            return rows.map(mapEntry);
+        },
+        /** Retention §8 `audit-log` policy (archive handling lives in the server GC job). */
+        async gc(at, retentionDays) {
+            const cutoff = at - retentionDays * 86_400_000;
+            const res = await db.deleteFrom('adminium_audit_log').where('createdAt', '<', cutoff).executeTakeFirst();
+            return Number(res.numDeletedRows);
+        },
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/repos/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/repos/audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,eAAe,GAIhB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAiCrD,SAAS,QAAQ,CAAC,GAAsC;IACtD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/C,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,cAAc,CAAY,GAAG,CAAC,MAAM,CAAC;QAC7C,OAAO,EAAE,cAAc,CAA0B,GAAG,CAAC,OAAO,CAAC;QAC7D,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,SAAS,WAAW,CAAC,OAAmC;IACtD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,uBAAuB;QAAE,OAAO,UAAU,CAAC;IACxF,OAAO,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAsB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC1D,MAAM,GAAG,GAAG;gBACV,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBACjD,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACnD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAClH,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;aACnC,CAAC;YACF,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YAChE,OAAO,QAAQ,CAAC,GAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,KAAK,CAAC,IAAI,CACR,SAAyE,EAAE;YAE3E,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,SAAS,EAAE,CAAC;YACxD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjF,MAAM,IAAI,GAAG,MAAM,CAAC;iBACjB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC;iBAC1B,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,qFAAqF;QACrF,KAAK,CAAC,EAAE,CAAC,EAAU,EAAE,aAAqB;YACxC,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,GAAG,UAAU,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACzG,OAAO,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/repos/connections.d.ts

@@ -0,0 +1,90 @@
+/**
+ * connectionsRepo — adminium_connections (07-meta-store.md §3.13).
+ *
+ * One row per configured source database. DSNs are stored encrypted; this
+ * package stays crypto-agnostic — the caller (apps/server) provides
+ * {@link DsnCrypto} closures built from its secret handling
+ * (01-architecture.md §3/§7). Repos never see key material.
+ */
+import type { MetaDb } from '../connect.js';
+import { type ConnectionSettings } from '../schema/json-payloads.js';
+/** Caller-provided AES closures — meta never touches key material. */
+export interface DsnCrypto {
+    encrypt(plaintext: string): string;
+    decrypt(token: string): string;
+}
+export interface ConnectionSsl {
+    mode: 'require' | 'verify-full' | 'disable';
+    caFileId?: string | null | undefined;
+}
+/** Decoded connection row. DSNs stay encrypted — use `getDsns()` to decrypt. */
+export interface Connection {
+    id: string;
+    name: string;
+    engine: string;
+    sourceKind: string;
+    introspectDsnEncrypted: string | null;
+    dataDsnEncrypted: string | null;
+    schemaFileId: string | null;
+    readOnly: boolean;
+    ssl: ConnectionSsl | null;
+    settings: ConnectionSettings;
+    status: string;
+    lastTestedAt: number | null;
+    lastLatencyMs: number | null;
+    lastError: string | null;
+    createdBy: string | null;
+    createdAt: number;
+    updatedAt: number;
+}
+/** Decrypted per-role DSNs (01-architecture.md §3 privilege model). */
+export interface ConnectionDsns {
+    introspectDsn: string | null;
+    /** Falls back to the introspect DSN in single-role setups (§3.13). */
+    dataDsn: string | null;
+}
+export interface CreateConnectionInput {
+    name: string;
+    engine: string;
+    sourceKind?: string;
+    /** Plaintext DSNs — encrypted before they reach the database. */
+    introspectDsn?: string | null;
+    dataDsn?: string | null;
+    schemaFileId?: string | null;
+    readOnly?: boolean;
+    ssl?: ConnectionSsl | null;
+    settings?: ConnectionSettings;
+    status?: string;
+    createdBy?: string | null;
+}
+export interface UpdateConnectionInput {
+    name?: string;
+    introspectDsn?: string | null;
+    dataDsn?: string | null;
+    readOnly?: boolean;
+    ssl?: ConnectionSsl | null;
+    settings?: ConnectionSettings;
+    status?: string;
+    lastError?: string | null;
+}
+export interface ConnectionTestOutcome {
+    ok: boolean;
+    latencyMs?: number | null;
+    error?: string | null;
+    /** Probe result — a read-only data role flips the app read-only (§3.13). */
+    readOnly?: boolean;
+}
+export declare function connectionsRepo(meta: MetaDb, crypto: DsnCrypto): {
+    create(input: CreateConnectionInput, at?: number): Promise<Connection>;
+    findById(id: string): Promise<Connection | null>;
+    list(): Promise<Connection[]>;
+    /** Decrypt the stored DSNs; `dataDsn` falls back to the introspect DSN. */
+    getDsns(id: string): Promise<ConnectionDsns | null>;
+    update(id: string, patch: UpdateConnectionInput, at?: number): Promise<Connection | null>;
+    /** Persist a test/probe outcome (health chip fields, §3.13). */
+    recordTestResult(id: string, outcome: ConnectionTestOutcome, at?: number): Promise<void>;
+    /** FK CASCADE removes the connection's snapshots and overrides. */
+    delete(id: string): Promise<boolean>;
+};
+export type ConnectionsRepo = ReturnType<typeof connectionsRepo>;
+//# sourceMappingURL=connections.d.ts.map

package/dist/repos/connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../../src/repos/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAML,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AAIpC,sEAAsE;AACtE,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC;AAED,gFAAgF;AAChF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,aAAa,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sEAAsE;IACtE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAwBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;kBAmDvC,qBAAqB,OAAM,MAAM,GAAgB,OAAO,CAAC,UAAU,CAAC;iBA2BrE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;YASxC,OAAO,CAAC,UAAU,EAAE,CAAC;IAKnC,2EAA2E;gBACzD,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;eASxC,MAAM,SAAS,qBAAqB,OAAM,MAAM,GAAgB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAoC3G,gEAAgE;yBACrC,MAAM,WAAW,qBAAqB,OAAM,MAAM,GAAgB,OAAO,CAAC,IAAI,CAAC;IAgB1G,mEAAmE;eAClD,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;EAK7C;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/repos/connections.js

@@ -0,0 +1,191 @@
+/**
+ * connectionsRepo — adminium_connections (07-meta-store.md §3.13).
+ *
+ * One row per configured source database. DSNs are stored encrypted; this
+ * package stays crypto-agnostic — the caller (apps/server) provides
+ * {@link DsnCrypto} closures built from its secret handling
+ * (01-architecture.md §3/§7). Repos never see key material.
+ */
+import { newId } from '../ids.js';
+import { connectionEngineSchema, connectionSettingsSchema, connectionSourceKindSchema, connectionSslSchema, connectionStatusSchema, } from '../schema/json-payloads.js';
+import { MetaValidationError, packJson, readBool, readJson, readJsonOrNull, writeBool } from './util.js';
+function decode(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        engine: row.engine,
+        sourceKind: row.sourceKind,
+        introspectDsnEncrypted: row.introspectDsnEncrypted,
+        dataDsnEncrypted: row.dataDsnEncrypted,
+        schemaFileId: row.schemaFileId,
+        readOnly: readBool(row.readOnly),
+        ssl: readJsonOrNull(row.ssl),
+        settings: readJson(row.settings),
+        status: row.status,
+        lastTestedAt: row.lastTestedAt,
+        lastLatencyMs: row.lastLatencyMs,
+        lastError: row.lastError,
+        createdBy: row.createdBy,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+    };
+}
+export function connectionsRepo(meta, crypto) {
+    const { db } = meta;
+    function encryptOrNull(dsn) {
+        if (dsn === null || dsn === undefined || dsn.length === 0)
+            return null;
+        return crypto.encrypt(dsn);
+    }
+    function validate(input) {
+        const engine = connectionEngineSchema.safeParse(input.engine);
+        if (!engine.success) {
+            throw new MetaValidationError(`unknown connection engine ${JSON.stringify(input.engine)}`, engine.error.issues);
+        }
+        const sourceKind = connectionSourceKindSchema.safeParse(input.sourceKind ?? 'dsn');
+        if (!sourceKind.success) {
+            throw new MetaValidationError('invalid source_kind', sourceKind.error.issues);
+        }
+        if (sourceKind.data === 'dsn' && (input.introspectDsn === undefined || input.introspectDsn === null)) {
+            throw new MetaValidationError('introspectDsn is required when source_kind = dsn (§3.13)');
+        }
+        if (sourceKind.data === 'schema-file' && (input.schemaFileId === undefined || input.schemaFileId === null)) {
+            throw new MetaValidationError('schemaFileId is required when source_kind = schema-file (§3.13)');
+        }
+        const settings = connectionSettingsSchema.safeParse(input.settings ?? {});
+        if (!settings.success) {
+            throw new MetaValidationError('invalid connection settings payload', settings.error.issues);
+        }
+        const ssl = input.ssl === null || input.ssl === undefined ? null : connectionSslSchema.safeParse(input.ssl);
+        if (ssl !== null && !ssl.success) {
+            throw new MetaValidationError('invalid ssl payload', ssl.error.issues);
+        }
+        const status = connectionStatusSchema.safeParse(input.status ?? 'unconfigured');
+        if (!status.success) {
+            throw new MetaValidationError('invalid connection status', status.error.issues);
+        }
+        return {
+            engine: engine.data,
+            sourceKind: sourceKind.data,
+            settings: settings.data,
+            ssl: ssl === null ? null : ssl.data,
+            status: status.data,
+        };
+    }
+    return {
+        async create(input, at = Date.now()) {
+            const valid = validate(input);
+            const row = {
+                id: newId('conn'),
+                name: input.name,
+                engine: valid.engine,
+                sourceKind: valid.sourceKind,
+                introspectDsnEncrypted: encryptOrNull(input.introspectDsn),
+                dataDsnEncrypted: encryptOrNull(input.dataDsn),
+                schemaFileId: input.schemaFileId ?? null,
+                readOnly: writeBool(meta, input.readOnly ?? false),
+                ssl: valid.ssl === null ? null : packJson(valid.ssl),
+                settings: packJson(valid.settings),
+                status: valid.status,
+                lastTestedAt: null,
+                lastLatencyMs: null,
+                lastError: null,
+                createdBy: input.createdBy ?? null,
+                createdAt: at,
+                updatedAt: at,
+            };
+            await db.insertInto('adminium_connections').values(row).execute();
+            const created = await this.findById(row.id);
+            if (created === null)
+                throw new MetaValidationError('connection insert did not persist');
+            return created;
+        },
+        async findById(id) {
+            const row = await db
+                .selectFrom('adminium_connections')
+                .selectAll()
+                .where('id', '=', id)
+                .executeTakeFirst();
+            return row === undefined ? null : decode(row);
+        },
+        async list() {
+            const rows = await db.selectFrom('adminium_connections').selectAll().orderBy('createdAt', 'asc').execute();
+            return rows.map(decode);
+        },
+        /** Decrypt the stored DSNs; `dataDsn` falls back to the introspect DSN. */
+        async getDsns(id) {
+            const row = await this.findById(id);
+            if (row === null)
+                return null;
+            const introspectDsn = row.introspectDsnEncrypted === null ? null : crypto.decrypt(row.introspectDsnEncrypted);
+            const dataDsn = row.dataDsnEncrypted === null ? introspectDsn : crypto.decrypt(row.dataDsnEncrypted);
+            return { introspectDsn, dataDsn };
+        },
+        async update(id, patch, at = Date.now()) {
+            const set = { updatedAt: at };
+            if (patch.name !== undefined)
+                set.name = patch.name;
+            if (patch.introspectDsn !== undefined)
+                set.introspectDsnEncrypted = encryptOrNull(patch.introspectDsn);
+            if (patch.dataDsn !== undefined)
+                set.dataDsnEncrypted = encryptOrNull(patch.dataDsn);
+            if (patch.readOnly !== undefined)
+                set.readOnly = writeBool(meta, patch.readOnly);
+            if (patch.lastError !== undefined)
+                set.lastError = patch.lastError;
+            if (patch.ssl !== undefined) {
+                if (patch.ssl === null) {
+                    set.ssl = null;
+                }
+                else {
+                    const ssl = connectionSslSchema.safeParse(patch.ssl);
+                    if (!ssl.success)
+                        throw new MetaValidationError('invalid ssl payload', ssl.error.issues);
+                    set.ssl = packJson(ssl.data);
+                }
+            }
+            if (patch.settings !== undefined) {
+                const settings = connectionSettingsSchema.safeParse(patch.settings);
+                if (!settings.success) {
+                    throw new MetaValidationError('invalid connection settings payload', settings.error.issues);
+                }
+                set.settings = packJson(settings.data);
+            }
+            if (patch.status !== undefined) {
+                const status = connectionStatusSchema.safeParse(patch.status);
+                if (!status.success)
+                    throw new MetaValidationError('invalid connection status', status.error.issues);
+                set.status = status.data;
+            }
+            await db
+                .updateTable('adminium_connections')
+                .set(set)
+                .where('id', '=', id)
+                .execute();
+            return this.findById(id);
+        },
+        /** Persist a test/probe outcome (health chip fields, §3.13). */
+        async recordTestResult(id, outcome, at = Date.now()) {
+            const set = {
+                lastTestedAt: at,
+                lastLatencyMs: outcome.latencyMs ?? null,
+                lastError: outcome.ok ? null : (outcome.error ?? 'connection test failed'),
+                status: outcome.ok ? 'connected' : 'error',
+                updatedAt: at,
+            };
+            if (outcome.readOnly !== undefined)
+                set.readOnly = writeBool(meta, outcome.readOnly);
+            await db
+                .updateTable('adminium_connections')
+                .set(set)
+                .where('id', '=', id)
+                .execute();
+        },
+        /** FK CASCADE removes the connection's snapshots and overrides. */
+        async delete(id) {
+            const res = await db.deleteFrom('adminium_connections').where('id', '=', id).executeTakeFirst();
+            return Number(res.numDeletedRows ?? 0n) === 1;
+        },
+    };
+}
+//# sourceMappingURL=connections.js.map

package/dist/repos/connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../src/repos/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,GAEvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AA2EzG,SAAS,MAAM,CAAC,GAAyC;IACvD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;QAClD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,GAAG,EAAE,cAAc,CAAgB,GAAG,CAAC,GAAG,CAAC;QAC3C,QAAQ,EAAE,QAAQ,CAAqB,GAAG,CAAC,QAAQ,CAAC;QACpD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAiB;IAC7D,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,SAAS,aAAa,CAAC,GAA8B;QACnD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,SAAS,QAAQ,CAAC,KAA4B;QAO5C,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,EAAE,CAAC;YACrG,MAAM,IAAI,mBAAmB,CAAC,0DAA0D,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3G,MAAM,IAAI,mBAAmB,CAAC,iEAAiE,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5G,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClF,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,UAAU,EAAE,UAAU,CAAC,IAAI;YAC3B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,CAAC,IAAsB;YACtD,MAAM,EAAE,MAAM,CAAC,IAAI;SACpB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAA4B,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,GAAG,GAAG;gBACV,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;gBACjB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,sBAAsB,EAAE,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC1D,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC9C,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;gBACxC,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC;gBAClD,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;gBACpD,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,YAAY,EAAE,IAAI;gBAClB,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,EAAE;aACd,CAAC;YACF,MAAM,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,mBAAmB,CAAC,mCAAmC,CAAC,CAAC;YACzF,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAU;YACvB,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,UAAU,CAAC,sBAAsB,CAAC;iBAClC,SAAS,EAAE;iBACX,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,gBAAgB,EAAE,CAAC;YACtB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3G,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAED,2EAA2E;QAC3E,KAAK,CAAC,OAAO,CAAC,EAAU;YACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,MAAM,aAAa,GACjB,GAAG,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC1F,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACrG,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAA4B,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC5E,MAAM,GAAG,GAA4B,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YACvD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACpD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;gBAAE,GAAG,CAAC,sBAAsB,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACvG,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,GAAG,CAAC,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YACnE,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;oBACvB,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACrD,IAAI,CAAC,GAAG,CAAC,OAAO;wBAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACzF,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtB,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9F,CAAC;gBACD,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9D,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACrG,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;YAC3B,CAAC;YACD,MAAM,EAAE;iBACL,WAAW,CAAC,sBAAsB,CAAC;iBACnC,GAAG,CAAC,GAAY,CAAC;iBACjB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,gEAAgE;QAChE,KAAK,CAAC,gBAAgB,CAAC,EAAU,EAAE,OAA8B,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YACxF,MAAM,GAAG,GAA4B;gBACnC,YAAY,EAAE,EAAE;gBAChB,aAAa,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACxC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,wBAAwB,CAAC;gBAC1E,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;gBAC1C,SAAS,EAAE,EAAE;aACd,CAAC;YACF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAAE,GAAG,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrF,MAAM,EAAE;iBACL,WAAW,CAAC,sBAAsB,CAAC;iBACnC,GAAG,CAAC,GAAY,CAAC;iBACjB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,OAAO,EAAE,CAAC;QACf,CAAC;QAED,mEAAmE;QACnE,KAAK,CAAC,MAAM,CAAC,EAAU;YACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAChG,OAAO,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/repos/email-templates.d.ts

@@ -0,0 +1,47 @@
+/**
+ * emailTemplatesRepo — adminium_email_templates (07-meta-store.md §3.28):
+ * overrides of built-in email templates, unique on `(key, locale)`. The row
+ * IS the template the workspace edits; `is_builtin_copy` marks rows the
+ * server seeded verbatim from a built-in (true) versus rows a human has
+ * touched (false — every editor write clears it, §3.28).
+ *
+ * `blocks` is the ordered open-record array (`emailBlocksSchema`); the
+ * concrete block shape is owned by the email editor (09-generated-app.md
+ * §email-editor) — the repo validates the envelope, never the block bodies.
+ */
+import type { MetaDb } from '../connect.js';
+export interface EmailTemplate {
+    id: string;
+    key: string;
+    locale: string;
+    name: string;
+    subject: string;
+    blocks: Record<string, unknown>[];
+    enabled: boolean;
+    isBuiltinCopy: boolean;
+    updatedBy: string | null;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface UpsertEmailTemplateInput {
+    name: string;
+    subject: string;
+    blocks: Record<string, unknown>[];
+    enabled: boolean;
+    /** The editing user; null for system seeds. */
+    updatedBy?: string | null | undefined;
+    /** Seed writes pass true; editor writes default false (§3.28). */
+    isBuiltinCopy?: boolean | undefined;
+}
+export declare function emailTemplatesRepo(meta: MetaDb): {
+    findByKeyLocale: (key: string, locale: string) => Promise<EmailTemplate | null>;
+    list(): Promise<EmailTemplate[]>;
+    /**
+     * `(key, locale)` upsert, portably: UPDATE first, INSERT on zero affected
+     * rows (no cross-dialect ON CONFLICT — repos/util.ts convention).
+     */
+    upsert(key: string, locale: string, input: UpsertEmailTemplateInput, at?: number): Promise<EmailTemplate>;
+    remove(key: string, locale: string): Promise<boolean>;
+};
+export type EmailTemplatesRepo = ReturnType<typeof emailTemplatesRepo>;
+//# sourceMappingURL=email-templates.d.ts.map

package/dist/repos/email-templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-templates.d.ts","sourceRoot":"","sources":["../../src/repos/email-templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAM5C,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACtC,kEAAkE;IAClE,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACrC;AAkBD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM;2BAGT,MAAM,UAAU,MAAM,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;YAa1E,OAAO,CAAC,aAAa,EAAE,CAAC;IAUtC;;;OAGG;gBAEI,MAAM,UACH,MAAM,SACP,wBAAwB,OAC3B,MAAM,GACT,OAAO,CAAC,aAAa,CAAC;gBA2BP,MAAM,UAAU,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;EAS9D;AAED,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC"}