@beechcms/api 0.5.0 → 0.6.0-preview.2

package/src/shared/idempotency.repository.d1.test.ts

@@ -1,79 +1,83 @@
-import { describe, it, expect, vi } from 'vitest'
-import { D1IdempotencyRepository } from './idempotency.repository.d1'
-
-function makeMockDb(opts: { firstResult?: unknown } = {}) {
-  const { firstResult = null } = opts
-  const runMock = vi.fn().mockResolvedValue({ success: true })
-  const firstMock = vi.fn().mockResolvedValue(firstResult)
-  const bindMock = vi.fn(() => ({ run: runMock, first: firstMock }))
-  const prepareMock = vi.fn(() => ({ bind: bindMock }))
-  return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock }
-}
-
-describe('D1IdempotencyRepository', () => {
-  describe('lookup', () => {
-    it('returns a mapped IdempotencyRecord when the key is found', async () => {
-      const row = {
-        idempotency_key: 'idem-1',
-        request_fingerprint: 'fp-abc',
-        response_status: 200,
-        response_body: '{"ok":true}',
-        expires_at: 9999,
-      }
-      const { db } = makeMockDb({ firstResult: row })
-      const result = await new D1IdempotencyRepository(db).lookup('idem-1')
-      expect(result).toEqual({
-        key: 'idem-1',
-        fingerprint: 'fp-abc',
-        responseStatus: 200,
-        responseBody: '{"ok":true}',
-        expiresAt: 9999,
-      })
-    })
-
-    it('returns null when the key is not found', async () => {
-      const { db } = makeMockDb({ firstResult: null })
-      expect(await new D1IdempotencyRepository(db).lookup('missing')).toBeNull()
-    })
-
-    it('queries the correct table', async () => {
-      const { db, prepareMock } = makeMockDb()
-      await new D1IdempotencyRepository(db).lookup('k')
-      expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('public_idempotency_keys'))
-    })
-  })
-
-  describe('store', () => {
-    it('calls INSERT INTO public_idempotency_keys with upsert on conflict', async () => {
-      const { db, prepareMock } = makeMockDb()
-      await new D1IdempotencyRepository(db).store({
-        key: 'idem-1', fingerprint: 'fp', responseStatus: 201, responseBody: '{}', expiresAt: 9999,
-      })
-      const sql = prepareMock.mock.calls[0][0] as string
-      expect(sql).toContain('INSERT INTO public_idempotency_keys')
-      expect(sql).toContain('ON CONFLICT')
-    })
-
-    it('binds key, fingerprint, status, body, and expiresAt', async () => {
-      const { db, bindMock } = makeMockDb()
-      await new D1IdempotencyRepository(db).store({
-        key: 'idem-1', fingerprint: 'fp-x', responseStatus: 200, responseBody: '{"ok":1}', expiresAt: 8888,
-      })
-      const args = bindMock.mock.calls[0] as unknown[]
-      expect(args).toContain('idem-1')
-      expect(args).toContain('fp-x')
-      expect(args).toContain(200)
-      expect(args).toContain('{"ok":1}')
-      expect(args).toContain(8888)
-    })
-  })
-
-  describe('cleanup', () => {
-    it('calls DELETE with the expiration timestamp', async () => {
-      const { db, prepareMock, bindMock } = makeMockDb()
-      await new D1IdempotencyRepository(db).cleanup(12345)
-      expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('DELETE FROM public_idempotency_keys'))
-      expect(bindMock).toHaveBeenCalledWith(12345)
-    })
-  })
-})
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { describe, it, expect, vi } from 'vitest'
+import { D1IdempotencyRepository } from './idempotency.repository.d1'
+
+function makeMockDb(opts: { firstResult?: unknown } = {}) {
+  const { firstResult = null } = opts
+  const runMock = vi.fn().mockResolvedValue({ success: true })
+  const firstMock = vi.fn().mockResolvedValue(firstResult)
+  const bindMock = vi.fn(() => ({ run: runMock, first: firstMock }))
+  const prepareMock = vi.fn(() => ({ bind: bindMock }))
+  return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock }
+}
+
+describe('D1IdempotencyRepository', () => {
+  describe('lookup', () => {
+    it('returns a mapped IdempotencyRecord when the key is found', async () => {
+      const row = {
+        idempotency_key: 'idem-1',
+        request_fingerprint: 'fp-abc',
+        response_status: 200,
+        response_body: '{"ok":true}',
+        expires_at: 9999,
+      }
+      const { db } = makeMockDb({ firstResult: row })
+      const result = await new D1IdempotencyRepository(db).lookup('idem-1')
+      expect(result).toEqual({
+        key: 'idem-1',
+        fingerprint: 'fp-abc',
+        responseStatus: 200,
+        responseBody: '{"ok":true}',
+        expiresAt: 9999,
+      })
+    })
+
+    it('returns null when the key is not found', async () => {
+      const { db } = makeMockDb({ firstResult: null })
+      expect(await new D1IdempotencyRepository(db).lookup('missing')).toBeNull()
+    })
+
+    it('queries the correct table', async () => {
+      const { db, prepareMock } = makeMockDb()
+      await new D1IdempotencyRepository(db).lookup('k')
+      expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('public_idempotency_keys'))
+    })
+  })
+
+  describe('store', () => {
+    it('calls INSERT INTO public_idempotency_keys with upsert on conflict', async () => {
+      const { db, prepareMock } = makeMockDb()
+      await new D1IdempotencyRepository(db).store({
+        key: 'idem-1', fingerprint: 'fp', responseStatus: 201, responseBody: '{}', expiresAt: 9999,
+      })
+      const sql = prepareMock.mock.calls[0][0] as string
+      expect(sql).toContain('INSERT INTO public_idempotency_keys')
+      expect(sql).toContain('ON CONFLICT')
+    })
+
+    it('binds key, fingerprint, status, body, and expiresAt', async () => {
+      const { db, bindMock } = makeMockDb()
+      await new D1IdempotencyRepository(db).store({
+        key: 'idem-1', fingerprint: 'fp-x', responseStatus: 200, responseBody: '{"ok":1}', expiresAt: 8888,
+      })
+      const args = bindMock.mock.calls[0] as unknown[]
+      expect(args).toContain('idem-1')
+      expect(args).toContain('fp-x')
+      expect(args).toContain(200)
+      expect(args).toContain('{"ok":1}')
+      expect(args).toContain(8888)
+    })
+  })
+
+  describe('cleanup', () => {
+    it('calls DELETE with the expiration timestamp', async () => {
+      const { db, prepareMock, bindMock } = makeMockDb()
+      await new D1IdempotencyRepository(db).cleanup(12345)
+      expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('DELETE FROM public_idempotency_keys'))
+      expect(bindMock).toHaveBeenCalledWith(12345)
+    })
+  })
+})

package/src/shared/idempotency.repository.d1.ts

@@ -1,56 +1,60 @@
-import { IdempotencyRepository, IdempotencyRecord } from '@beechcms/core'
-import { BaseD1Repository } from './base.repository.d1.js'
-
-export class D1IdempotencyRepository extends BaseD1Repository implements IdempotencyRepository {
-  /**
-   * Looks up an idempotency record by its key.
-   */
-  async lookup(idempotencyKey: string): Promise<IdempotencyRecord | null> {
-    const idempotencyRecordResult = await this.database.prepare(
-      `SELECT idempotency_key, request_fingerprint, response_status, response_body, expires_at
-       FROM public_idempotency_keys WHERE idempotency_key = ? LIMIT 1`
-    ).bind(idempotencyKey).first<any>()
-
-    if (!idempotencyRecordResult) {
-      return null
-    }
-
-    return {
-      key: idempotencyRecordResult.idempotency_key,
-      fingerprint: idempotencyRecordResult.request_fingerprint,
-      responseStatus: idempotencyRecordResult.response_status,
-      responseBody: idempotencyRecordResult.response_body,
-      expiresAt: idempotencyRecordResult.expires_at
-    }
-  }
-
-  /**
-   * Stores or updates an idempotency record.
-   */
-  async store(idempotencyData: IdempotencyRecord): Promise<void> {
-    await this.database.prepare(
-      `INSERT INTO public_idempotency_keys (idempotency_key, request_fingerprint, response_status, response_body, created_at, expires_at)
-       VALUES (?, ?, ?, ?, ?, ?)
-       ON CONFLICT(idempotency_key) DO UPDATE SET
-         request_fingerprint = excluded.request_fingerprint,
-         response_status = excluded.response_status,
-         response_body = excluded.response_body,
-         created_at = excluded.created_at,
-         expires_at = excluded.expires_at`
-    ).bind(
-      idempotencyData.key, 
-      idempotencyData.fingerprint, 
-      idempotencyData.responseStatus, 
-      idempotencyData.responseBody, 
-      Math.floor(Date.now() / 1000), 
-      idempotencyData.expiresAt
-    ).run()
-  }
-
-  /**
-   * Cleans up expired idempotency records.
-   */
-  async cleanup(expirationTimestamp: number): Promise<void> {
-    await this.database.prepare(`DELETE FROM public_idempotency_keys WHERE expires_at < ?`).bind(expirationTimestamp).run()
-  }
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { IdempotencyRepository, IdempotencyRecord } from '@beechcms/core'
+import { BaseD1Repository } from './base.repository.d1.js'
+
+export class D1IdempotencyRepository extends BaseD1Repository implements IdempotencyRepository {
+  /**
+   * Looks up an idempotency record by its key.
+   */
+  async lookup(idempotencyKey: string): Promise<IdempotencyRecord | null> {
+    const idempotencyRecordResult = await this.database.prepare(
+      `SELECT idempotency_key, request_fingerprint, response_status, response_body, expires_at
+       FROM public_idempotency_keys WHERE idempotency_key = ? LIMIT 1`
+    ).bind(idempotencyKey).first<any>()
+
+    if (!idempotencyRecordResult) {
+      return null
+    }
+
+    return {
+      key: idempotencyRecordResult.idempotency_key,
+      fingerprint: idempotencyRecordResult.request_fingerprint,
+      responseStatus: idempotencyRecordResult.response_status,
+      responseBody: idempotencyRecordResult.response_body,
+      expiresAt: idempotencyRecordResult.expires_at
+    }
+  }
+
+  /**
+   * Stores or updates an idempotency record.
+   */
+  async store(idempotencyData: IdempotencyRecord): Promise<void> {
+    await this.database.prepare(
+      `INSERT INTO public_idempotency_keys (idempotency_key, request_fingerprint, response_status, response_body, created_at, expires_at)
+       VALUES (?, ?, ?, ?, ?, ?)
+       ON CONFLICT(idempotency_key) DO UPDATE SET
+         request_fingerprint = excluded.request_fingerprint,
+         response_status = excluded.response_status,
+         response_body = excluded.response_body,
+         created_at = excluded.created_at,
+         expires_at = excluded.expires_at`
+    ).bind(
+      idempotencyData.key, 
+      idempotencyData.fingerprint, 
+      idempotencyData.responseStatus, 
+      idempotencyData.responseBody, 
+      Math.floor(Date.now() / 1000), 
+      idempotencyData.expiresAt
+    ).run()
+  }
+
+  /**
+   * Cleans up expired idempotency records.
+   */
+  async cleanup(expirationTimestamp: number): Promise<void> {
+    await this.database.prepare(`DELETE FROM public_idempotency_keys WHERE expires_at < ?`).bind(expirationTimestamp).run()
+  }
+}

package/src/shared/in-memory-activity-logger.ts

@@ -1,15 +1,19 @@
-import type { IActivityLogger, ActivityLogEntry } from '@beechcms/core'
-
-/**
- * Test double for {@link IActivityLogger}.
- *
- * Captures every call into a public array so test assertions can verify
- * audit-trail side effects without touching D1. Preserves insertion order.
- */
-export class InMemoryActivityLogger implements IActivityLogger {
-  public readonly entries: ActivityLogEntry[] = []
-
-  log(entry: ActivityLogEntry): void {
-    this.entries.push(entry)
-  }
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import type { IActivityLogger, ActivityLogEntry } from '@beechcms/core'
+
+/**
+ * Test double for {@link IActivityLogger}.
+ *
+ * Captures every call into a public array so test assertions can verify
+ * audit-trail side effects without touching D1. Preserves insertion order.
+ */
+export class InMemoryActivityLogger implements IActivityLogger {
+  public readonly entries: ActivityLogEntry[] = []
+
+  log(entry: ActivityLogEntry): void {
+    this.entries.push(entry)
+  }
+}

package/src/shared/in-memory-notification-service.ts

@@ -1,15 +1,19 @@
-import type { INotificationService, CreateNotificationInput } from '@beechcms/core'
-
-/**
- * Test double for {@link INotificationService}.
- *
- * Captures every call into a public array so tests can assert what would have
- * been delivered without touching D1.
- */
-export class InMemoryNotificationService implements INotificationService {
-  public readonly receivedNotifications: CreateNotificationInput[] = []
-
-  notify(input: CreateNotificationInput): void {
-    this.receivedNotifications.push(input)
-  }
-}
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import type { INotificationService, CreateNotificationInput } from '@beechcms/core'
+
+/**
+ * Test double for {@link INotificationService}.
+ *
+ * Captures every call into a public array so tests can assert what would have
+ * been delivered without touching D1.
+ */
+export class InMemoryNotificationService implements INotificationService {
+  public readonly receivedNotifications: CreateNotificationInput[] = []
+
+  notify(input: CreateNotificationInput): void {
+    this.receivedNotifications.push(input)
+  }
+}

package/src/shared/in-memory-seed.repository.ts

@@ -0,0 +1,58 @@
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import type { ISeedRepository, Seed, SeedRecord } from '@beechcms/core'
+
+/**
+ * In-memory ISeedRepository for testing and for the config.seeds back-compat shim.
+ * Returns a fixed seed list with a static version token.
+ */
+export class InMemorySeedRepository implements ISeedRepository {
+  private readonly seeds: Seed[]
+  private version = 1
+
+  constructor(seeds: Seed[]) {
+    this.seeds = seeds.filter(s => s && typeof s === 'object' && 'slug' in s)
+  }
+
+  async listActive(): Promise<Seed[]> {
+    return this.seeds
+  }
+
+  async listAll(): Promise<SeedRecord[]> {
+    return this.seeds.map(s => ({
+      slug: s.slug,
+      definition: s,
+      status: 'active' as const,
+      source: 'code' as const,
+      createdAt: 0,
+      updatedAt: 0,
+    }))
+  }
+
+  async get(slug: string): Promise<SeedRecord | null> {
+    const s = this.seeds.find(s => s.slug === slug)
+    if (!s) return null
+    return { slug: s.slug, definition: s, status: 'active', source: 'code', createdAt: 0, updatedAt: 0 }
+  }
+  upsert(_slug: string, _definition: Seed, _source?: 'code' | 'runtime'): Promise<void> {
+    return Promise.resolve()
+  }
+
+  softDelete(_slug: string): Promise<void> {
+    return Promise.resolve()
+  }
+
+  hardDelete(_slug: string): Promise<void> {
+    return Promise.resolve()
+  }
+
+  async getRegistryVersion(): Promise<number> {
+    return this.version
+  }
+
+  async bumpRegistryVersion(): Promise<number> {
+    return ++this.version
+  }
+}

package/src/shared/media.repository.d1.test.ts

@@ -1,103 +1,107 @@
-import { describe, it, expect, vi } from 'vitest'
-import { D1MediaRepository } from './media.repository.d1'
-
-function makeMockDb(opts: { firstResult?: unknown; allResults?: unknown[] } = {}) {
-  const { firstResult = null, allResults = [] } = opts
-  const runMock = vi.fn().mockResolvedValue({ success: true })
-  const firstMock = vi.fn().mockResolvedValue(firstResult)
-  const allMock = vi.fn().mockResolvedValue({ results: allResults })
-  // bind() returns the same interface so chains like prepare().bind().all() work.
-  // The statement also exposes first/all/run directly for queries that skip bind().
-  const bindMock = vi.fn(() => ({ run: runMock, first: firstMock, all: allMock }))
-  const stmt = { bind: bindMock, run: runMock, first: firstMock, all: allMock }
-  const prepareMock = vi.fn(() => stmt)
-  return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock, firstMock, allMock }
-}
-
-describe('D1MediaRepository', () => {
-  describe('trackUpload', () => {
-    it('calls INSERT INTO media_objects with correct bound values', async () => {
-      const { db, prepareMock, bindMock } = makeMockDb()
-      const obj = { key: 'k1', filename: 'img.png', mime_type: 'image/png', size_bytes: 1024, uploaded_by: 'user-1' }
-      await new D1MediaRepository(db).trackUpload(obj)
-      expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO media_objects'))
-      expect(bindMock).toHaveBeenCalledWith('k1', 'img.png', 'image/png', 1024, 'user-1')
-    })
-  })
-
-  describe('getByKey', () => {
-    it('returns the media object when found', async () => {
-      const row = { key: 'k1', filename: 'img.png', mime_type: 'image/png', size_bytes: 512, uploaded_by: 'u1', created_at: 1000 }
-      const { db } = makeMockDb({ firstResult: row })
-      const result = await new D1MediaRepository(db).getByKey('k1')
-      expect(result).toEqual(row)
-    })
-
-    it('returns null when the key is not found', async () => {
-      const { db } = makeMockDb({ firstResult: null })
-      expect(await new D1MediaRepository(db).getByKey('ghost')).toBeNull()
-    })
-
-    it('passes the key as bound value', async () => {
-      const { db, bindMock } = makeMockDb()
-      await new D1MediaRepository(db).getByKey('my-key')
-      expect(bindMock).toHaveBeenCalledWith('my-key')
-    })
-  })
-
-  describe('untrack', () => {
-    it('calls DELETE FROM media_objects with the key', async () => {
-      const { db, prepareMock, bindMock } = makeMockDb()
-      await new D1MediaRepository(db).untrack('k1')
-      expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('DELETE FROM media_objects'))
-      expect(bindMock).toHaveBeenCalledWith('k1')
-    })
-  })
-
-  describe('list', () => {
-    it('returns items and total from D1', async () => {
-      const rows = [
-        { key: 'k1', filename: 'a.png', mime_type: 'image/png', size_bytes: 100, uploaded_by: 'u1', created_at: 1000 },
-      ]
-      const { db, allMock, firstMock } = makeMockDb()
-      // list() calls all() for items then first() for count (without bind)
-      allMock.mockResolvedValueOnce({ results: rows })
-      firstMock.mockResolvedValueOnce({ total: 1 })
-
-      const result = await new D1MediaRepository(db).list({ limit: 10, offset: 0 })
-      expect(result.items).toHaveLength(1)
-      expect(result.total).toBe(1)
-    })
-
-    it('returns empty items and 0 total when D1 returns nothing', async () => {
-      const { db, allMock, firstMock } = makeMockDb()
-      allMock.mockResolvedValueOnce({ results: [] })
-      firstMock.mockResolvedValueOnce(null) // count row is null → 0
-
-      const result = await new D1MediaRepository(db).list({ limit: 10, offset: 0 })
-      expect(result.items).toEqual([])
-      expect(result.total).toBe(0)
-    })
-
-    it('passes limit and offset as bound values for the list query', async () => {
-      const { db, bindMock, allMock, firstMock } = makeMockDb()
-      allMock.mockResolvedValueOnce({ results: [] })
-      firstMock.mockResolvedValueOnce({ total: 0 })
-
-      await new D1MediaRepository(db).list({ limit: 5, offset: 10 })
-      expect(bindMock).toHaveBeenCalledWith(5, 10)
-    })
-  })
-
-  describe('count', () => {
-    it('returns the count from D1', async () => {
-      const { db } = makeMockDb({ firstResult: { total: 42 } })
-      expect(await new D1MediaRepository(db).count()).toBe(42)
-    })
-
-    it('returns 0 when D1 returns null', async () => {
-      const { db } = makeMockDb({ firstResult: null })
-      expect(await new D1MediaRepository(db).count()).toBe(0)
-    })
-  })
-})
+// SPDX-License-Identifier: BUSL-1.1
+// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
+// See LICENSE in the repository root for license terms.
+
+import { describe, it, expect, vi } from 'vitest'
+import { D1MediaRepository } from './media.repository.d1'
+
+function makeMockDb(opts: { firstResult?: unknown; allResults?: unknown[] } = {}) {
+  const { firstResult = null, allResults = [] } = opts
+  const runMock = vi.fn().mockResolvedValue({ success: true })
+  const firstMock = vi.fn().mockResolvedValue(firstResult)
+  const allMock = vi.fn().mockResolvedValue({ results: allResults })
+  // bind() returns the same interface so chains like prepare().bind().all() work.
+  // The statement also exposes first/all/run directly for queries that skip bind().
+  const bindMock = vi.fn(() => ({ run: runMock, first: firstMock, all: allMock }))
+  const stmt = { bind: bindMock, run: runMock, first: firstMock, all: allMock }
+  const prepareMock = vi.fn(() => stmt)
+  return { db: { prepare: prepareMock } as any, prepareMock, bindMock, runMock, firstMock, allMock }
+}
+
+describe('D1MediaRepository', () => {
+  describe('trackUpload', () => {
+    it('calls INSERT INTO media_objects with correct bound values', async () => {
+      const { db, prepareMock, bindMock } = makeMockDb()
+      const obj = { key: 'k1', filename: 'img.png', mime_type: 'image/png', size_bytes: 1024, uploaded_by: 'user-1' }
+      await new D1MediaRepository(db).trackUpload(obj)
+      expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('INSERT INTO media_objects'))
+      expect(bindMock).toHaveBeenCalledWith('k1', 'img.png', 'image/png', 1024, 'user-1')
+    })
+  })
+
+  describe('getByKey', () => {
+    it('returns the media object when found', async () => {
+      const row = { key: 'k1', filename: 'img.png', mime_type: 'image/png', size_bytes: 512, uploaded_by: 'u1', created_at: 1000 }
+      const { db } = makeMockDb({ firstResult: row })
+      const result = await new D1MediaRepository(db).getByKey('k1')
+      expect(result).toEqual(row)
+    })
+
+    it('returns null when the key is not found', async () => {
+      const { db } = makeMockDb({ firstResult: null })
+      expect(await new D1MediaRepository(db).getByKey('ghost')).toBeNull()
+    })
+
+    it('passes the key as bound value', async () => {
+      const { db, bindMock } = makeMockDb()
+      await new D1MediaRepository(db).getByKey('my-key')
+      expect(bindMock).toHaveBeenCalledWith('my-key')
+    })
+  })
+
+  describe('untrack', () => {
+    it('calls DELETE FROM media_objects with the key', async () => {
+      const { db, prepareMock, bindMock } = makeMockDb()
+      await new D1MediaRepository(db).untrack('k1')
+      expect(prepareMock).toHaveBeenCalledWith(expect.stringContaining('DELETE FROM media_objects'))
+      expect(bindMock).toHaveBeenCalledWith('k1')
+    })
+  })
+
+  describe('list', () => {
+    it('returns items and total from D1', async () => {
+      const rows = [
+        { key: 'k1', filename: 'a.png', mime_type: 'image/png', size_bytes: 100, uploaded_by: 'u1', created_at: 1000 },
+      ]
+      const { db, allMock, firstMock } = makeMockDb()
+      // list() calls all() for items then first() for count (without bind)
+      allMock.mockResolvedValueOnce({ results: rows })
+      firstMock.mockResolvedValueOnce({ total: 1 })
+
+      const result = await new D1MediaRepository(db).list({ limit: 10, offset: 0 })
+      expect(result.items).toHaveLength(1)
+      expect(result.total).toBe(1)
+    })
+
+    it('returns empty items and 0 total when D1 returns nothing', async () => {
+      const { db, allMock, firstMock } = makeMockDb()
+      allMock.mockResolvedValueOnce({ results: [] })
+      firstMock.mockResolvedValueOnce(null) // count row is null → 0
+
+      const result = await new D1MediaRepository(db).list({ limit: 10, offset: 0 })
+      expect(result.items).toEqual([])
+      expect(result.total).toBe(0)
+    })
+
+    it('passes limit and offset as bound values for the list query', async () => {
+      const { db, bindMock, allMock, firstMock } = makeMockDb()
+      allMock.mockResolvedValueOnce({ results: [] })
+      firstMock.mockResolvedValueOnce({ total: 0 })
+
+      await new D1MediaRepository(db).list({ limit: 5, offset: 10 })
+      expect(bindMock).toHaveBeenCalledWith(5, 10)
+    })
+  })
+
+  describe('count', () => {
+    it('returns the count from D1', async () => {
+      const { db } = makeMockDb({ firstResult: { total: 42 } })
+      expect(await new D1MediaRepository(db).count()).toBe(42)
+    })
+
+    it('returns 0 when D1 returns null', async () => {
+      const { db } = makeMockDb({ firstResult: null })
+      expect(await new D1MediaRepository(db).count()).toBe(0)
+    })
+  })
+})