@adminiumjs/meta 0.1.0-rc.1

package/dist/repos/imports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imports.js","sourceRoot":"","sources":["../../src/repos/imports.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA8CzE,SAAS,MAAM,CAAC,GAAqC;IACnD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAC5C,KAAK,EAAE,CAAC,GAAuB,EAAE;YAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC,CAAC,EAAE;QACJ,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,KAAK,UAAU,QAAQ,CAAC,EAAU;QAChC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACxG,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClC,CAAC;IAED,OAAO;QACL,QAAQ;QAER,KAAK,CAAC,MAAM,CAAC,KAAwB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC5D,MAAM,GAAG,GAAG;gBACV,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,OAAO,EAAE,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,IAAI;gBACX,iBAAiB,EAAE,IAAI;gBACvB,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;aACjB,CAAC;YACF,MAAM,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9D,OAAO,MAAM,CAAC,GAAuC,CAAC,CAAC;QACzD,CAAC;QAED,wEAAwE;QACxE,KAAK,CAAC,IAAI,CAAC,OAAiD,EAAE;YAC5D,IAAI,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,SAAS,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC9F,MAAM,IAAI,GAAG,MAAM,KAAK;iBACrB,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC5B,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;iBACrB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;iBACvB,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,KAAkB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YACrE,KAAK,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,WAAW,CAAC,kBAAkB,CAAC;iBAC/B,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;iBACzE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC;iBAClC,gBAAgB,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,WAAW,CAAC,kBAAkB,CAAC;iBAC/B,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;iBACzC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;iBAC7B,gBAAgB,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,YAAY,CAChB,EAAU,EACV,OAIC,EACD,KAAa,IAAI,CAAC,GAAG,EAAE;YAEvB,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,WAAW,CAAC,kBAAkB,CAAC;iBAC/B,GAAG,CAAC;gBACH,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,UAAU,EAAE,EAAE;gBACd,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7F,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;oBACzC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;aACtD,CAAC;iBACD,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;iBACzD,gBAAgB,EAAE,CAAC;YACtB,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/repos/index.d.ts

@@ -0,0 +1,26 @@
+export * from './util.js';
+export * from './users.js';
+export * from './sessions.js';
+export * from './roles.js';
+export * from './permissions.js';
+export * from './settings.js';
+export * from './user-prefs.js';
+export * from './audit.js';
+export * from './api-keys.js';
+export * from './password-resets.js';
+export * from './jobs.js';
+export * from './connections.js';
+export * from './snapshots.js';
+export * from './overrides.js';
+export * from './llm-overrides.js';
+export * from './pages.js';
+export * from './views.js';
+export * from './llm-runs.js';
+export * from './files.js';
+export * from './exports.js';
+export * from './imports.js';
+export * from './notifications.js';
+export * from './notification-prefs.js';
+export * from './scheduled-reports.js';
+export * from './email-templates.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/repos/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/repos/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/repos/index.js

@@ -0,0 +1,26 @@
+export * from './util.js';
+export * from './users.js';
+export * from './sessions.js';
+export * from './roles.js';
+export * from './permissions.js';
+export * from './settings.js';
+export * from './user-prefs.js';
+export * from './audit.js';
+export * from './api-keys.js';
+export * from './password-resets.js';
+export * from './jobs.js';
+export * from './connections.js';
+export * from './snapshots.js';
+export * from './overrides.js';
+export * from './llm-overrides.js';
+export * from './pages.js';
+export * from './views.js';
+export * from './llm-runs.js';
+export * from './files.js';
+export * from './exports.js';
+export * from './imports.js';
+export * from './notifications.js';
+export * from './notification-prefs.js';
+export * from './scheduled-reports.js';
+export * from './email-templates.js';
+//# sourceMappingURL=index.js.map

package/dist/repos/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/repos/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/repos/jobs.d.ts

@@ -0,0 +1,71 @@
+/**
+ * jobsRepo — adminium_jobs (07-meta-store.md §3.12), the table-backed queue.
+ *
+ * Portable claim (§3.12): a candidate SELECT followed by
+ * `UPDATE … WHERE id = ? AND status = 'pending'` — affected-rows 0 means
+ * another worker won; try the next candidate. No `SELECT … FOR UPDATE SKIP
+ * LOCKED` (not on SQLite), no `UPDATE … LIMIT` (not portable).
+ */
+import type { MetaDb } from '../connect.js';
+import { type JobStatus } from '../schema/json-payloads.js';
+/** A running job whose lock is older than this is reclaimable (§3.12). */
+export declare const JOB_STALE_LOCK_MS: number;
+/** First-retry delay; retry n waits `backoffBaseMs * 2^(n-1)` (server backoff spec). */
+export declare const JOB_BACKOFF_BASE_MS = 30000;
+export interface Job {
+    id: string;
+    kind: string;
+    payload: Record<string, unknown>;
+    status: JobStatus;
+    priority: number;
+    runAt: number;
+    attempts: number;
+    maxAttempts: number;
+    lockedBy: string | null;
+    lockedAt: number | null;
+    dedupeKey: string | null;
+    lastError: string | null;
+    createdAt: number;
+    startedAt: number | null;
+    finishedAt: number | null;
+}
+export interface EnqueueJobInput {
+    kind: string;
+    payload: Record<string, unknown>;
+    runAt?: number;
+    priority?: number;
+    maxAttempts?: number;
+    /** Collapses duplicates while a job with the same key is pending/running. */
+    dedupeKey?: string | null;
+}
+export declare function jobsRepo(meta: MetaDb): {
+    findById: (id: string) => Promise<Job | null>;
+    /**
+     * Enqueue a job. With a `dedupeKey`, an existing pending/running job with
+     * the same key is returned instead of inserting (the unique index is the
+     * hard guarantee underneath).
+     */
+    enqueue(input: EnqueueJobInput, at?: number): Promise<Job>;
+    /**
+     * Claim the next due job for `workerId` using the portable UPDATE guard.
+     * Considers pending jobs due at `at` (priority desc, run_at asc, id asc)
+     * and stale running jobs (lock older than `staleLockMs`). Returns null
+     * when nothing is claimable.
+     */
+    claim(workerId: string, at?: number, staleLockMs?: number): Promise<Job | null>;
+    /** Success: terminal state; dedupe key released for reuse (§3.12). */
+    complete(id: string, at?: number): Promise<boolean>;
+    /**
+     * Failure: retries with exponential backoff until `max_attempts`, then
+     * lands in terminal `failed` (dedupe key released).
+     */
+    fail(id: string, error: string, at?: number, backoffBaseMs?: number): Promise<Job | null>;
+    cancel(id: string, at?: number): Promise<boolean>;
+    /**
+     * Retention §8 `jobs` policy: succeeded/cancelled past `retentionDays`,
+     * failed kept twice as long.
+     */
+    gc(at?: number, retentionDays?: number): Promise<number>;
+};
+export type JobsRepo = ReturnType<typeof jobsRepo>;
+//# sourceMappingURL=jobs.d.ts.map

package/dist/repos/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/repos/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAqC,KAAK,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAI/F,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,QAAa,CAAC;AAE5C,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAE1C,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAsBD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM;mBAGP,MAAM,KAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAQtD;;;;OAIG;mBACkB,eAAe,OAAM,MAAM,GAAgB,OAAO,CAAC,GAAG,CAAC;IAgC5E;;;;;OAKG;oBAES,MAAM,OACZ,MAAM,gBACG,MAAM,GAClB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAyCtB,sEAAsE;iBACnD,MAAM,OAAM,MAAM,GAAgB,OAAO,CAAC,OAAO,CAAC;IAUrE;;;OAGG;aAEG,MAAM,SACH,MAAM,OACT,MAAM,kBACK,MAAM,GACpB,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;eAsBL,MAAM,OAAM,MAAM,GAAgB,OAAO,CAAC,OAAO,CAAC;IAUnE;;;OAGG;YACU,MAAM,2BAAoC,OAAO,CAAC,MAAM,CAAC;EAezE;AAED,MAAM,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC"}

package/dist/repos/jobs.js

@@ -0,0 +1,187 @@
+/**
+ * jobsRepo — adminium_jobs (07-meta-store.md §3.12), the table-backed queue.
+ *
+ * Portable claim (§3.12): a candidate SELECT followed by
+ * `UPDATE … WHERE id = ? AND status = 'pending'` — affected-rows 0 means
+ * another worker won; try the next candidate. No `SELECT … FOR UPDATE SKIP
+ * LOCKED` (not on SQLite), no `UPDATE … LIMIT` (not portable).
+ */
+import { newId } from '../ids.js';
+import { jobPayloadSchema, jobStatusSchema } from '../schema/json-payloads.js';
+import { DAY_MS, packJson, readJson } from './util.js';
+/** A running job whose lock is older than this is reclaimable (§3.12). */
+export const JOB_STALE_LOCK_MS = 5 * 60_000;
+/** First-retry delay; retry n waits `backoffBaseMs * 2^(n-1)` (server backoff spec). */
+export const JOB_BACKOFF_BASE_MS = 30_000;
+function mapJob(row) {
+    return {
+        id: row.id,
+        kind: row.kind,
+        payload: readJson(row.payload),
+        status: jobStatusSchema.parse(row.status),
+        priority: row.priority,
+        runAt: row.runAt,
+        attempts: row.attempts,
+        maxAttempts: row.maxAttempts,
+        lockedBy: row.lockedBy,
+        lockedAt: row.lockedAt,
+        dedupeKey: row.dedupeKey,
+        lastError: row.lastError,
+        createdAt: row.createdAt,
+        startedAt: row.startedAt,
+        finishedAt: row.finishedAt,
+    };
+}
+export function jobsRepo(meta) {
+    const { db } = meta;
+    async function findById(id) {
+        const row = await db.selectFrom('adminium_jobs').selectAll().where('id', '=', id).executeTakeFirst();
+        return row ? mapJob(row) : null;
+    }
+    return {
+        findById,
+        /**
+         * Enqueue a job. With a `dedupeKey`, an existing pending/running job with
+         * the same key is returned instead of inserting (the unique index is the
+         * hard guarantee underneath).
+         */
+        async enqueue(input, at = Date.now()) {
+            const payload = jobPayloadSchema.parse(input.payload);
+            const dedupeKey = input.dedupeKey ?? null;
+            if (dedupeKey !== null) {
+                const existing = await db
+                    .selectFrom('adminium_jobs')
+                    .selectAll()
+                    .where('dedupeKey', '=', dedupeKey)
+                    .executeTakeFirst();
+                if (existing)
+                    return mapJob(existing);
+            }
+            const row = {
+                id: newId('job'),
+                kind: input.kind,
+                payload: packJson(payload),
+                status: 'pending',
+                priority: input.priority ?? 0,
+                runAt: input.runAt ?? at,
+                attempts: 0,
+                maxAttempts: input.maxAttempts ?? 3,
+                lockedBy: null,
+                lockedAt: null,
+                dedupeKey,
+                lastError: null,
+                createdAt: at,
+                startedAt: null,
+                finishedAt: null,
+            };
+            await db.insertInto('adminium_jobs').values(row).execute();
+            return mapJob(row);
+        },
+        /**
+         * Claim the next due job for `workerId` using the portable UPDATE guard.
+         * Considers pending jobs due at `at` (priority desc, run_at asc, id asc)
+         * and stale running jobs (lock older than `staleLockMs`). Returns null
+         * when nothing is claimable.
+         */
+        async claim(workerId, at = Date.now(), staleLockMs = JOB_STALE_LOCK_MS) {
+            const candidates = await db
+                .selectFrom('adminium_jobs')
+                .selectAll()
+                .where((eb) => eb.or([
+                eb.and([eb('status', '=', 'pending'), eb('runAt', '<=', at)]),
+                eb.and([eb('status', '=', 'running'), eb('lockedAt', '<', at - staleLockMs)]),
+            ]))
+                .orderBy('priority', 'desc')
+                .orderBy('runAt', 'asc')
+                .orderBy('id', 'asc')
+                .limit(5)
+                .execute();
+            for (const candidate of candidates) {
+                let guard = db
+                    .updateTable('adminium_jobs')
+                    .set({
+                    status: 'running',
+                    lockedBy: workerId,
+                    lockedAt: at,
+                    startedAt: at,
+                    attempts: candidate.attempts + 1,
+                })
+                    .where('id', '=', candidate.id)
+                    .where('status', '=', candidate.status);
+                // Reclaiming a stale lock: make sure nobody re-locked it meanwhile.
+                if (candidate.status === 'running') {
+                    guard = guard.where('lockedAt', '=', candidate.lockedAt);
+                }
+                const res = await guard.executeTakeFirst();
+                if (Number(res.numUpdatedRows) === 1) {
+                    return await findById(candidate.id);
+                }
+                // Affected-rows 0: another worker won this candidate — try the next.
+            }
+            return null;
+        },
+        /** Success: terminal state; dedupe key released for reuse (§3.12). */
+        async complete(id, at = Date.now()) {
+            const res = await db
+                .updateTable('adminium_jobs')
+                .set({ status: 'succeeded', finishedAt: at, dedupeKey: null, lockedBy: null, lockedAt: null })
+                .where('id', '=', id)
+                .where('status', '=', 'running')
+                .executeTakeFirst();
+            return Number(res.numUpdatedRows) === 1;
+        },
+        /**
+         * Failure: retries with exponential backoff until `max_attempts`, then
+         * lands in terminal `failed` (dedupe key released).
+         */
+        async fail(id, error, at = Date.now(), backoffBaseMs = JOB_BACKOFF_BASE_MS) {
+            const job = await findById(id);
+            if (!job || job.status !== 'running')
+                return null;
+            if (job.attempts >= job.maxAttempts) {
+                await db
+                    .updateTable('adminium_jobs')
+                    .set({ status: 'failed', finishedAt: at, lastError: error, dedupeKey: null, lockedBy: null, lockedAt: null })
+                    .where('id', '=', id)
+                    .where('status', '=', 'running')
+                    .execute();
+            }
+            else {
+                const delay = backoffBaseMs * 2 ** Math.max(0, job.attempts - 1);
+                await db
+                    .updateTable('adminium_jobs')
+                    .set({ status: 'pending', runAt: at + delay, lastError: error, lockedBy: null, lockedAt: null })
+                    .where('id', '=', id)
+                    .where('status', '=', 'running')
+                    .execute();
+            }
+            return await findById(id);
+        },
+        async cancel(id, at = Date.now()) {
+            const res = await db
+                .updateTable('adminium_jobs')
+                .set({ status: 'cancelled', finishedAt: at, dedupeKey: null, lockedBy: null, lockedAt: null })
+                .where('id', '=', id)
+                .where('status', '=', 'pending')
+                .executeTakeFirst();
+            return Number(res.numUpdatedRows) === 1;
+        },
+        /**
+         * Retention §8 `jobs` policy: succeeded/cancelled past `retentionDays`,
+         * failed kept twice as long.
+         */
+        async gc(at = Date.now(), retentionDays = 30) {
+            const cutoff = at - retentionDays * DAY_MS;
+            const failedCutoff = at - 2 * retentionDays * DAY_MS;
+            const res = await db
+                .deleteFrom('adminium_jobs')
+                .where((eb) => eb.or([
+                eb.and([eb('status', 'in', ['succeeded', 'cancelled']), eb('finishedAt', '<', cutoff)]),
+                eb.and([eb('status', '=', 'failed'), eb('finishedAt', '<', failedCutoff)]),
+            ]))
+                .executeTakeFirst();
+            return Number(res.numDeletedRows);
+        },
+    };
+}
+//# sourceMappingURL=jobs.js.map

package/dist/repos/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../src/repos/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAkB,MAAM,4BAA4B,CAAC;AAE/F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEvD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC;AAE5C,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AA8B1C,SAAS,MAAM,CAAC,GAAkC;IAChD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,QAAQ,CAA0B,GAAG,CAAC,OAAO,CAAC;QACvD,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,KAAK,UAAU,QAAQ,CAAC,EAAU;QAChC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACrG,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClC,CAAC;IAED,OAAO;QACL,QAAQ;QAER;;;;WAIG;QACH,KAAK,CAAC,OAAO,CAAC,KAAsB,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC3D,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;YAC1C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,MAAM,EAAE;qBACtB,UAAU,CAAC,eAAe,CAAC;qBAC3B,SAAS,EAAE;qBACX,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC;qBAClC,gBAAgB,EAAE,CAAC;gBACtB,IAAI,QAAQ;oBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,GAAG,GAAG;gBACV,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;gBAC1B,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC;gBAC7B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;gBACxB,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC;gBACnC,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,IAAI;gBACd,SAAS;gBACT,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,EAAE;gBACb,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;aACjB,CAAC;YACF,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC,GAAoC,CAAC,CAAC;QACtD,CAAC;QAED;;;;;WAKG;QACH,KAAK,CAAC,KAAK,CACT,QAAgB,EAChB,KAAa,IAAI,CAAC,GAAG,EAAE,EACvB,cAAsB,iBAAiB;YAEvC,MAAM,UAAU,GAAG,MAAM,EAAE;iBACxB,UAAU,CAAC,eAAe,CAAC;iBAC3B,SAAS,EAAE;iBACX,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CACZ,EAAE,CAAC,EAAE,CAAC;gBACJ,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC7D,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;aAC9E,CAAC,CACH;iBACA,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC;iBAC3B,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC;iBACvB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;iBACpB,KAAK,CAAC,CAAC,CAAC;iBACR,OAAO,EAAE,CAAC;YAEb,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,KAAK,GAAG,EAAE;qBACX,WAAW,CAAC,eAAe,CAAC;qBAC5B,GAAG,CAAC;oBACH,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,QAAQ;oBAClB,QAAQ,EAAE,EAAE;oBACZ,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC;iBACjC,CAAC;qBACD,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;qBAC9B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC1C,oEAAoE;gBACpE,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACnC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC3D,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrC,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACtC,CAAC;gBACD,qEAAqE;YACvE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sEAAsE;QACtE,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAChD,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,WAAW,CAAC,eAAe,CAAC;iBAC5B,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;iBAC7F,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;iBAC/B,gBAAgB,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,IAAI,CACR,EAAU,EACV,KAAa,EACb,KAAa,IAAI,CAAC,GAAG,EAAE,EACvB,gBAAwB,mBAAmB;YAE3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAClD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,EAAE;qBACL,WAAW,CAAC,eAAe,CAAC;qBAC5B,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;qBAC5G,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;qBACpB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;qBAC/B,OAAO,EAAE,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBACjE,MAAM,EAAE;qBACL,WAAW,CAAC,eAAe,CAAC;qBAC5B,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;qBAC/F,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;qBACpB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;qBAC/B,OAAO,EAAE,CAAC;YACf,CAAC;YACD,OAAO,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAa,IAAI,CAAC,GAAG,EAAE;YAC9C,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,WAAW,CAAC,eAAe,CAAC;iBAC5B,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;iBAC7F,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;iBACpB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC;iBAC/B,gBAAgB,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,EAAE,CAAC,KAAa,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,GAAG,EAAE;YAClD,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,GAAG,MAAM,CAAC;YAC3C,MAAM,YAAY,GAAG,EAAE,GAAG,CAAC,GAAG,aAAa,GAAG,MAAM,CAAC;YACrD,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,UAAU,CAAC,eAAe,CAAC;iBAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CACZ,EAAE,CAAC,EAAE,CAAC;gBACJ,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACvF,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;aAC3E,CAAC,CACH;iBACA,gBAAgB,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/repos/llm-overrides.d.ts

@@ -0,0 +1,89 @@
+/**
+ * llmOverridesRepo — the LLM-sourced slice of `adminium_schema_overrides`
+ * (06-llm-assist.md §8.3).
+ *
+ * The user remap editor writes single-locale correction ops (`table.label`,
+ * `column.pii`, …) through {@link overridesRepo}; an LLM apply writes a
+ * different, richer set of fields — localized label/description bundles, key
+ * bundles, enum semantics, virtual relations and PII masks — whose values are
+ * localized maps, not plain strings. Those never fit the remap `op` vocabulary,
+ * so they live under their own namespaced ops (`llm.<field>`, {@link llmOverrideOp})
+ * carrying `origin: 'llm'` + `llm_run_id`. Keeping the two namespaces disjoint
+ * means the remap editor and the effective-schema resolver can tell a machine
+ * suggestion from a human edit, and an LLM write can never masquerade as (or
+ * silently clobber) a user edit.
+ *
+ * The repo is intentionally thin and transaction-friendly: every method operates
+ * on the {@link MetaDb} handle it is constructed with, so the apply-EXECUTOR
+ * (apps/server, T10b) can bind it to a Kysely transaction (`{ db: trx, dialect }`)
+ * and upsert overrides + write pages in ONE transaction. `upsert` is idempotent
+ * — keyed on `(connection, op, table, column)` it updates the existing `llm` row
+ * in place rather than inserting a duplicate, which is what makes re-applying the
+ * same run a no-op and re-applying a NEWER run supersede (new `llm_run_id`) the
+ * prior one (§8.3 idempotency + provenance).
+ */
+import type { MetaDb } from '../connect.js';
+/**
+ * §8.3 apply-target fields the LLM path writes to `adminium_schema_overrides`.
+ * Mirrors `@adminium/llm` `OverrideField` (the pure planner's descriptor field);
+ * kept as a local literal so `@adminium/meta` takes no dependency on the llm pkg.
+ */
+export declare const LLM_OVERRIDE_FIELDS: readonly ["label", "key", "pii", "copy", "enum_semantics", "virtual_relation", "relation_suppressed"];
+export type LlmOverrideField = (typeof LLM_OVERRIDE_FIELDS)[number];
+/** The `adminium_schema_overrides.op` value persisted for an LLM `field`. */
+export declare function llmOverrideOp(field: LlmOverrideField): string;
+/** Parse an `op` string back to its `field`, or `null` when it is not an LLM op. */
+export declare function llmOverrideField(op: string): LlmOverrideField | null;
+export interface LlmOverride {
+    id: string;
+    connectionId: string;
+    field: LlmOverrideField;
+    /** Qualified source name, e.g. `public.customers`. */
+    tableName: string;
+    columnName: string | null;
+    /** Localized/structured value, or `null` for an explicit clear (a PII rejection). */
+    value: Record<string, unknown> | null;
+    /** Per-suggestion model confidence 0..1 (§8.3). */
+    confidence: number | null;
+    llmRunId: string | null;
+    status: 'active' | 'disabled';
+    createdBy: string | null;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface UpsertLlmOverrideInput {
+    connectionId: string;
+    field: LlmOverrideField;
+    tableName: string;
+    columnName?: string | null;
+    /** Object value (localized maps where applicable) or `null` for a clear. */
+    value: Record<string, unknown> | null;
+    /** Per-suggestion model confidence 0..1 (§8.3). */
+    confidence?: number | null;
+    llmRunId?: string | null;
+    createdBy?: string | null;
+}
+export interface UpsertLlmOverrideResult {
+    override: LlmOverride;
+    /** `inserted` — no prior `llm` row for this target; `updated` — superseded one. */
+    action: 'inserted' | 'updated';
+    /** The row as it was BEFORE this upsert, for single-transaction undo (null on insert). */
+    before: LlmOverride | null;
+}
+export declare function llmOverridesRepo(meta: MetaDb): {
+    /**
+     * Idempotent upsert of one §8.3 LLM override, keyed on
+     * `(connection, op, table, column)`. Inserts a fresh `origin: 'llm'` row or
+     * updates the existing one in place (value + superseding `llm_run_id`),
+     * returning the prior state for undo. Never touches `origin: 'user'` rows.
+     */
+    upsert(input: UpsertLlmOverrideInput, at?: number): Promise<UpsertLlmOverrideResult>;
+    /** Restore a prior row image captured by {@link upsert} (undo of an `updated` write). */
+    restore(before: LlmOverride, at?: number): Promise<void>;
+    /** Delete a row inserted by this apply (undo of an `inserted` write). */
+    deleteById(id: string): Promise<void>;
+    /** All `origin: 'llm'` overrides for a connection, in application order. */
+    listForConnection(connectionId: string): Promise<LlmOverride[]>;
+};
+export type LlmOverridesRepo = ReturnType<typeof llmOverridesRepo>;
+//# sourceMappingURL=llm-overrides.d.ts.map

package/dist/repos/llm-overrides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-overrides.d.ts","sourceRoot":"","sources":["../../src/repos/llm-overrides.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAK5C;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,uGAQtB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAapE,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAE7D;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAIpE;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,gBAAgB,CAAC;IACxB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qFAAqF;IACrF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,mDAAmD;IACnD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,WAAW,CAAC;IACtB,mFAAmF;IACnF,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,0FAA0F;IAC1F,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;CAC5B;AAwCD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM;IAqBzC;;;;;OAKG;kBACiB,sBAAsB,OAAM,MAAM,GAAgB,OAAO,CAAC,uBAAuB,CAAC;IA4DtG,yFAAyF;oBACnE,WAAW,OAAM,MAAM,GAAgB,OAAO,CAAC,IAAI,CAAC;IAc1E,yEAAyE;mBACpD,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,4EAA4E;oCACtC,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;EAYxE;AAED,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/repos/llm-overrides.js

@@ -0,0 +1,205 @@
+/**
+ * llmOverridesRepo — the LLM-sourced slice of `adminium_schema_overrides`
+ * (06-llm-assist.md §8.3).
+ *
+ * The user remap editor writes single-locale correction ops (`table.label`,
+ * `column.pii`, …) through {@link overridesRepo}; an LLM apply writes a
+ * different, richer set of fields — localized label/description bundles, key
+ * bundles, enum semantics, virtual relations and PII masks — whose values are
+ * localized maps, not plain strings. Those never fit the remap `op` vocabulary,
+ * so they live under their own namespaced ops (`llm.<field>`, {@link llmOverrideOp})
+ * carrying `origin: 'llm'` + `llm_run_id`. Keeping the two namespaces disjoint
+ * means the remap editor and the effective-schema resolver can tell a machine
+ * suggestion from a human edit, and an LLM write can never masquerade as (or
+ * silently clobber) a user edit.
+ *
+ * The repo is intentionally thin and transaction-friendly: every method operates
+ * on the {@link MetaDb} handle it is constructed with, so the apply-EXECUTOR
+ * (apps/server, T10b) can bind it to a Kysely transaction (`{ db: trx, dialect }`)
+ * and upsert overrides + write pages in ONE transaction. `upsert` is idempotent
+ * — keyed on `(connection, op, table, column)` it updates the existing `llm` row
+ * in place rather than inserting a duplicate, which is what makes re-applying the
+ * same run a no-op and re-applying a NEWER run supersede (new `llm_run_id`) the
+ * prior one (§8.3 idempotency + provenance).
+ */
+import { newId } from '../ids.js';
+import { MetaValidationError, packJson, readJson } from './util.js';
+/**
+ * §8.3 apply-target fields the LLM path writes to `adminium_schema_overrides`.
+ * Mirrors `@adminium/llm` `OverrideField` (the pure planner's descriptor field);
+ * kept as a local literal so `@adminium/meta` takes no dependency on the llm pkg.
+ */
+export const LLM_OVERRIDE_FIELDS = [
+    'label',
+    'key',
+    'pii',
+    'copy',
+    'enum_semantics',
+    'virtual_relation',
+    'relation_suppressed',
+];
+const FIELD_SET = new Set(LLM_OVERRIDE_FIELDS);
+/** Column-scoped fields require `columnName`; table-scoped fields forbid it. */
+const COLUMN_FIELDS = new Set([
+    'label', // a column label bundle is column-scoped; a table label bundle is not (columnName decides)
+    'pii',
+    'enum_semantics',
+]);
+const OP_PREFIX = 'llm.';
+/** The `adminium_schema_overrides.op` value persisted for an LLM `field`. */
+export function llmOverrideOp(field) {
+    return `${OP_PREFIX}${field}`;
+}
+/** Parse an `op` string back to its `field`, or `null` when it is not an LLM op. */
+export function llmOverrideField(op) {
+    if (!op.startsWith(OP_PREFIX))
+        return null;
+    const field = op.slice(OP_PREFIX.length);
+    return FIELD_SET.has(field) ? field : null;
+}
+function decode(row) {
+    const field = llmOverrideField(row.op);
+    if (field === null) {
+        throw new MetaValidationError(`not an llm override op: ${JSON.stringify(row.op)}`);
+    }
+    return {
+        id: row.id,
+        connectionId: row.connectionId,
+        field,
+        tableName: row.tableName,
+        columnName: row.columnName,
+        value: readJson(row.value),
+        confidence: row.confidence,
+        llmRunId: row.llmRunId,
+        status: row.status,
+        createdBy: row.createdBy,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+    };
+}
+/** Value must be a plain JSON object or `null` — a hallucinated scalar never reaches the DB. */
+function assertValue(field, value) {
+    if (value === null)
+        return;
+    if (typeof value !== 'object' || Array.isArray(value)) {
+        throw new MetaValidationError(`llm override ${field} value must be an object or null`);
+    }
+}
+function assertColumnShape(field, columnName) {
+    const needsColumn = COLUMN_FIELDS.has(field);
+    // `label` is dual-scoped (table bundle OR column bundle); only the strictly
+    // column-only fields (pii, enum_semantics) demand a column here.
+    if (field !== 'label' && needsColumn && (columnName === null || columnName.length === 0)) {
+        throw new MetaValidationError(`llm override ${field} requires columnName`);
+    }
+}
+export function llmOverridesRepo(meta) {
+    const { db } = meta;
+    async function findLlmRow(connectionId, op, tableName, columnName) {
+        let q = db
+            .selectFrom('adminium_schema_overrides')
+            .selectAll()
+            .where('connectionId', '=', connectionId)
+            .where('origin', '=', 'llm')
+            .where('op', '=', op)
+            .where('tableName', '=', tableName);
+        q = columnName === null ? q.where('columnName', 'is', null) : q.where('columnName', '=', columnName);
+        return q.executeTakeFirst();
+    }
+    return {
+        /**
+         * Idempotent upsert of one §8.3 LLM override, keyed on
+         * `(connection, op, table, column)`. Inserts a fresh `origin: 'llm'` row or
+         * updates the existing one in place (value + superseding `llm_run_id`),
+         * returning the prior state for undo. Never touches `origin: 'user'` rows.
+         */
+        async upsert(input, at = Date.now()) {
+            if (!FIELD_SET.has(input.field)) {
+                throw new MetaValidationError(`unknown llm override field ${JSON.stringify(input.field)}`);
+            }
+            if (input.tableName.length === 0)
+                throw new MetaValidationError('tableName must not be empty');
+            const columnName = input.columnName ?? null;
+            assertColumnShape(input.field, columnName);
+            assertValue(input.field, input.value);
+            const op = llmOverrideOp(input.field);
+            const confidence = input.confidence ?? null;
+            const existing = await findLlmRow(input.connectionId, op, input.tableName, columnName);
+            const packed = packJson(input.value);
+            if (existing !== undefined) {
+                const before = decode(existing);
+                await db
+                    .updateTable('adminium_schema_overrides')
+                    .set({
+                    value: packed,
+                    confidence,
+                    llmRunId: input.llmRunId ?? null,
+                    status: 'active',
+                    updatedAt: at,
+                })
+                    .where('id', '=', existing.id)
+                    .execute();
+                return {
+                    override: {
+                        ...before,
+                        value: input.value,
+                        confidence,
+                        llmRunId: input.llmRunId ?? null,
+                        status: 'active',
+                        updatedAt: at,
+                    },
+                    action: 'updated',
+                    before,
+                };
+            }
+            const row = {
+                id: newId('ovr'),
+                connectionId: input.connectionId,
+                op,
+                tableName: input.tableName,
+                columnName,
+                value: packed,
+                origin: 'llm',
+                confidence,
+                llmRunId: input.llmRunId ?? null,
+                status: 'active',
+                createdBy: input.createdBy ?? null,
+                createdAt: at,
+                updatedAt: at,
+            };
+            await db.insertInto('adminium_schema_overrides').values(row).execute();
+            return { override: decode(row), action: 'inserted', before: null };
+        },
+        /** Restore a prior row image captured by {@link upsert} (undo of an `updated` write). */
+        async restore(before, at = Date.now()) {
+            await db
+                .updateTable('adminium_schema_overrides')
+                .set({
+                value: packJson(before.value),
+                confidence: before.confidence,
+                llmRunId: before.llmRunId,
+                status: before.status,
+                updatedAt: at,
+            })
+                .where('id', '=', before.id)
+                .execute();
+        },
+        /** Delete a row inserted by this apply (undo of an `inserted` write). */
+        async deleteById(id) {
+            await db.deleteFrom('adminium_schema_overrides').where('id', '=', id).execute();
+        },
+        /** All `origin: 'llm'` overrides for a connection, in application order. */
+        async listForConnection(connectionId) {
+            const rows = await db
+                .selectFrom('adminium_schema_overrides')
+                .selectAll()
+                .where('connectionId', '=', connectionId)
+                .where('origin', '=', 'llm')
+                .orderBy('createdAt', 'asc')
+                .orderBy('id', 'asc')
+                .execute();
+            return rows.map(decode);
+        },
+    };
+}
+//# sourceMappingURL=llm-overrides.js.map