@cat-factory/node-server 0.238.2 → 0.240.0

package/dist/repositories/directoryFeed.js

@@ -1,7 +1,5 @@
-import { isDirectoryEntityType } from '@cat-factory/contracts';
-import { and, asc, eq, gt, max, sql } from 'drizzle-orm';
-import { directoryChanges } from '../db/schema.js';
-// The append half of the directory change feed (docs/initiatives/directory-sync.md), shared by
+import { sql } from 'drizzle-orm';
+// The append half of the directory change feed (backend/docs/adr/0067-directory-sync.md), shared by
 // every repository that writes a directory entity. Mirror of the Cloudflare facade's
 // `directoryFeed.ts`; the conformance suite `defineDirectoryFeedSuite` holds the two to one
 // behaviour.
@@ -11,6 +9,16 @@ import { directoryChanges } from '../db/schema.js';
 // write, and one that reads the rows it creates must run AFTER, both inside the same transaction.
 /** Advisory-lock class for the feed; the second key is the account. Distinct from every other class. */
 const DIRECTORY_FEED_LOCK_CLASS = 0x6469_7263;
+/** Advisory-lock class for re-linking one login identity; the second key is `provider:subject`. */
+const IDENTITY_LINK_LOCK_CLASS = 0x6964_6c6b;
+/**
+ * Serialize the links of one login identity. Taken before the feed lock, it keeps the owner that
+ * `identityOwnerSource` reads at lock time the owner it reads again when appending, so two re-links
+ * of the same subject cannot lock one set of accounts and then append to another.
+ */
+export async function lockIdentityLink(tx, provider, subject) {
+    await tx.execute(sql `SELECT pg_advisory_xact_lock(${IDENTITY_LINK_LOCK_CLASS}, hashtext(${`${provider}:${subject}`}))`);
+}
 /**
  * Take the feed's per-account advisory lock for every account the source names. It is held until
  * the enclosing transaction ends, so a second appender for the same account cannot compute its
@@ -67,6 +75,17 @@ export function userSource(userId) {
                     user_id AS entity_id
                FROM memberships WHERE user_id = ${text(userId)}`;
 }
+/**
+ * The user a login identity belongs to now, once per account, unless that is `exceptUserId`.
+ * Appended before a re-link so the user losing the account is recorded while the row still names them.
+ */
+export function identityOwnerSource(provider, subject, exceptUserId) {
+    return sql `SELECT m.account_id, CAST('user' AS TEXT) AS entity_type, CAST(NULL AS TEXT) AS workspace_id,
+                    m.user_id AS entity_id
+               FROM memberships m JOIN user_identities i ON i.user_id = m.user_id
+              WHERE i.provider = ${text(provider)} AND i.subject = ${text(subject)}
+                AND i.user_id <> ${text(exceptUserId)}`;
+}
 /** An account membership, plus the member's `user` entity whose visibility it decides. */
 export function accountMembershipSource(accountId, userId) {
     return sql `SELECT ${text(accountId)} AS account_id, CAST('account_membership' AS TEXT) AS entity_type,
@@ -115,42 +134,4 @@ export function reposSource(workspaceId, githubIds) {
               WHERE r.workspace_id = ${text(workspaceId)}
                 AND r.github_id IN (${sql.join(githubIds.map((id) => sql `${id}`), sql `, `)})`;
 }
-function rowToChange(row) {
-    // The vocabulary is append-only, so an unknown value is a row this build cannot interpret, not
-    // one to skip: a reader that dropped it would advance its cursor past a change it never served.
-    if (!isDirectoryEntityType(row.entity_type)) {
-        throw new Error(`Unknown directory entity type '${row.entity_type}' at seq ${row.seq}`);
-    }
-    return {
-        accountId: row.account_id,
-        seq: row.seq,
-        entityType: row.entity_type,
-        workspaceId: row.workspace_id,
-        entityId: row.entity_id,
-        at: row.at,
-    };
-}
-/** Postgres read side of the directory change feed. */
-export class DrizzleDirectoryChangeRepository {
-    db;
-    constructor(db) {
-        this.db = db;
-    }
-    async listAfter(accountId, afterSeq, limit) {
-        const rows = await this.db
-            .select()
-            .from(directoryChanges)
-            .where(and(eq(directoryChanges.account_id, accountId), gt(directoryChanges.seq, afterSeq)))
-            .orderBy(asc(directoryChanges.seq))
-            .limit(limit);
-        return rows.map(rowToChange);
-    }
-    async headSeq(accountId) {
-        const [row] = await this.db
-            .select({ head: max(directoryChanges.seq) })
-            .from(directoryChanges)
-            .where(eq(directoryChanges.account_id, accountId));
-        return row?.head ?? 0;
-    }
-}
 //# sourceMappingURL=directoryFeed.js.map

package/dist/repositories/directoryFeed.js.map

@@ -1 +1 @@
-{"version":3,"file":"directoryFeed.js","sourceRoot":"","sources":["../../src/repositories/directoryFeed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAE9D,OAAO,EAAY,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAElE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAElD,+FAA+F;AAC/F,qFAAqF;AACrF,4FAA4F;AAC5F,aAAa;AACb,EAAE;AACF,iGAAiG;AACjG,gGAAgG;AAChG,kGAAkG;AAElG,wGAAwG;AACxG,MAAM,yBAAyB,GAAG,WAAW,CAAA;AAI7C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAY,EAAE,MAAW;IAC/D,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;mCACa,yBAAyB;iDACX,MAAM;wEACiB,CAAC,CAAA;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAY,EAAE,MAAW,EAAE,EAAU;IAChF,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACnC,8FAA8F;IAC9F,qEAAqE;IACrE,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;;;;;;+DAOyC,EAAE;cACnD,MAAM;sCACkB,CAAC,CAAA;AACvC,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAA,QAAQ,KAAK,WAAW,CAAA;AAE3D,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,SAAwB;IACpD,OAAO,GAAG,CAAA,UAAU,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,WAAmB;IAC1E,OAAO,GAAG,CAAA,gDAAgD,IAAI,CAAC,WAAW,CAAC;;eAE9D,aAAa,CAAC,WAAW,CAAC,EAAE,CAAA;AAC3C,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,GAAG,CAAA;;kDAEsC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;AAChE,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,MAAc;IACvE,OAAO,GAAG,CAAA,UAAU,IAAI,CAAC,SAAS,CAAC;0DACqB,IAAI,CAAC,MAAM,CAAC;;sBAEhD,IAAI,CAAC,SAAS,CAAC,+CAA+C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;AAClG,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,yBAAyB,CAAC,WAAmB,EAAE,MAAc;IAC3E,OAAO,GAAG,CAAA;sBACU,IAAI,CAAC,MAAM,CAAC;4CACU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;AAC/D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iCAAiC,CAAC,SAAiB,EAAE,MAAc;IACjF,OAAO,GAAG,CAAA;;;kCAGsB,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAA;AACtF,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,OAAO,GAAG,CAAA;4CACgC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,GAAG,CAAA,GAAG,eAAe,CAAC,WAAW,CAAC;;;;uCAIJ,IAAI,CAAC,WAAW,CAAC;;;;uCAIjB,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAA;AACnF,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,SAA4B;IAC3E,OAAO,GAAG,CAAA;;;uCAG2B,IAAI,CAAC,WAAW,CAAC;sCAClB,GAAG,CAAC,IAAI,CAC5B,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAA,GAAG,EAAE,EAAE,CAAC,EACjC,GAAG,CAAA,IAAI,CACR,GAAG,CAAA;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,GAAyC;IAC5D,+FAA+F;IAC/F,gGAAgG;IAChG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,WAAW,YAAY,GAAG,CAAC,GAAG,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,EAAE,EAAE,GAAG,CAAC,EAAE;KACX,CAAA;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,OAAO,gCAAgC;IACd,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,QAAgB,EAChB,KAAa;QAEb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;aAC1F,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;aAClC,KAAK,CAAC,KAAK,CAAC,CAAA;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;aAC3C,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QACpD,OAAO,GAAG,EAAE,IAAI,IAAI,CAAC,CAAA;IACvB,CAAC;CACF"}
+{"version":3,"file":"directoryFeed.js","sourceRoot":"","sources":["../../src/repositories/directoryFeed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,GAAG,EAAE,MAAM,aAAa,CAAA;AAG3C,oGAAoG;AACpG,qFAAqF;AACrF,4FAA4F;AAC5F,aAAa;AACb,EAAE;AACF,iGAAiG;AACjG,gGAAgG;AAChG,kGAAkG;AAElG,wGAAwG;AACxG,MAAM,yBAAyB,GAAG,WAAW,CAAA;AAE7C,mGAAmG;AACnG,MAAM,wBAAwB,GAAG,WAAW,CAAA;AAI5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAY,EACZ,QAAgB,EAChB,OAAe;IAEf,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,gCAAgC,wBAAwB,cAAc,GAAG,QAAQ,IAAI,OAAO,EAAE,IAAI,CACtG,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAY,EAAE,MAAW;IAC/D,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;mCACa,yBAAyB;iDACX,MAAM;wEACiB,CAAC,CAAA;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAY,EAAE,MAAW,EAAE,EAAU;IAChF,MAAM,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACnC,8FAA8F;IAC9F,qEAAqE;IACrE,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;;;;;;+DAOyC,EAAE;cACnD,MAAM;sCACkB,CAAC,CAAA;AACvC,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAA,QAAQ,KAAK,WAAW,CAAA;AAE3D,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,SAAwB;IACpD,OAAO,GAAG,CAAA,UAAU,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAA;AACpG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,WAAmB;IAC1E,OAAO,GAAG,CAAA,gDAAgD,IAAI,CAAC,WAAW,CAAC;;eAE9D,aAAa,CAAC,WAAW,CAAC,EAAE,CAAA;AAC3C,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,GAAG,CAAA;;kDAEsC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,OAAe,EAAE,YAAoB;IACzF,OAAO,GAAG,CAAA;;;mCAGuB,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC;mCAC/C,IAAI,CAAC,YAAY,CAAC,EAAE,CAAA;AACvD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,MAAc;IACvE,OAAO,GAAG,CAAA,UAAU,IAAI,CAAC,SAAS,CAAC;0DACqB,IAAI,CAAC,MAAM,CAAC;;sBAEhD,IAAI,CAAC,SAAS,CAAC,+CAA+C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;AAClG,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,yBAAyB,CAAC,WAAmB,EAAE,MAAc;IAC3E,OAAO,GAAG,CAAA;sBACU,IAAI,CAAC,MAAM,CAAC;4CACU,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;AAC/D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iCAAiC,CAAC,SAAiB,EAAE,MAAc;IACjF,OAAO,GAAG,CAAA;;;kCAGsB,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAA;AACtF,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,OAAO,GAAG,CAAA;4CACgC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAA;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,OAAO,GAAG,CAAA,GAAG,eAAe,CAAC,WAAW,CAAC;;;;uCAIJ,IAAI,CAAC,WAAW,CAAC;;;;uCAIjB,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAA;AACnF,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,SAA4B;IAC3E,OAAO,GAAG,CAAA;;;uCAG2B,IAAI,CAAC,WAAW,CAAC;sCAClB,GAAG,CAAC,IAAI,CAC5B,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAA,GAAG,EAAE,EAAE,CAAC,EACjC,GAAG,CAAA,IAAI,CACR,GAAG,CAAA;AACpB,CAAC"}

package/dist/repositories/directoryRepository.d.ts

@@ -0,0 +1,25 @@
+import { type DirectoryAccountMembership, type DirectoryRepo, type DirectoryUser, type DirectoryWorkspace, type DirectoryWorkspaceMembership } from '@cat-factory/contracts';
+import { type DirectoryChangeRecord, type DirectoryRepoKey, type DirectoryRepository, type WorkspaceMembershipKey } from '@cat-factory/kernel';
+import type { DrizzleDb } from '../db/client.js';
+export declare class DrizzleDirectoryRepository implements DirectoryRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    listChanges(accountId: string, afterSeq: number, upToSeq: number, limit: number, workspaceIds: string[] | null): Promise<DirectoryChangeRecord[]>;
+    headSeq(accountId: string): Promise<number>;
+    headSeqs(accountIds: string[]): Promise<Map<string, number>>;
+    oldestSeq(accountId: string): Promise<number | null>;
+    pruneChanges(before: number): Promise<number>;
+    listWorkspaces(accountId: string, after: string | null, limit: number, workspaceIds: string[] | null): Promise<DirectoryWorkspace[]>;
+    listUsers(accountId: string, after: string | null, limit: number): Promise<DirectoryUser[]>;
+    /** One read for the host-account identities of these users, whatever their number. */
+    private hostIdentitiesOf;
+    listAccountMemberships(accountId: string, after: string | null, limit: number): Promise<DirectoryAccountMembership[]>;
+    listWorkspaceMemberships(accountId: string, after: WorkspaceMembershipKey | null, limit: number, workspaceIds: string[] | null): Promise<DirectoryWorkspaceMembership[]>;
+    listRepos(accountId: string, after: DirectoryRepoKey | null, limit: number, workspaceIds: string[] | null): Promise<DirectoryRepo[]>;
+    getWorkspaces(accountId: string, ids: string[]): Promise<DirectoryWorkspace[]>;
+    getUsers(accountId: string, ids: string[]): Promise<DirectoryUser[]>;
+    getAccountMemberships(accountId: string, userIds: string[]): Promise<DirectoryAccountMembership[]>;
+    getWorkspaceMemberships(accountId: string, keys: WorkspaceMembershipKey[]): Promise<DirectoryWorkspaceMembership[]>;
+    getRepos(accountId: string, keys: DirectoryRepoKey[]): Promise<DirectoryRepo[]>;
+}
+//# sourceMappingURL=directoryRepository.d.ts.map

package/dist/repositories/directoryRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directoryRepository.d.ts","sourceRoot":"","sources":["../../src/repositories/directoryRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,4BAA4B,EAClC,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAKxB,KAAK,sBAAsB,EAC5B,MAAM,qBAAqB,CAAA;AAG5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAwHhD,qBAAa,0BAA2B,YAAW,mBAAmB;IACxD,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,GAC5B,OAAO,CAAC,qBAAqB,EAAE,CAAC,CA6BlC;IAEK,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMhD;IAEK,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAUjE;IAEK,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMzD;IAEK,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAclD;IAEK,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,GAC5B,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAc/B;IAEK,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,EAAE,CAAC,CAS1B;IAED,sFAAsF;YACxE,gBAAgB;IAkBxB,sBAAsB,CAC1B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAQvC;IAEK,wBAAwB,CAC5B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,sBAAsB,GAAG,IAAI,EACpC,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,GAC5B,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAuBzC;IAEK,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,gBAAgB,GAAG,IAAI,EAC9B,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,GAC5B,OAAO,CAAC,aAAa,EAAE,CAAC,CAwB1B;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAOnF;IAEK,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAYzE;IAEK,qBAAqB,CACzB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAOvC;IAEK,uBAAuB,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,sBAAsB,EAAE,GAC7B,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAoBzC;IAEK,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAkBpF;CACF"}

package/dist/repositories/directoryRepository.js

@@ -0,0 +1,263 @@
+import {} from '@cat-factory/contracts';
+import { DIRECTORY_ACCOUNT_PROVIDERS, directoryChangeFromRow, WORKSPACE_DIRECTORY_ENTITY_TYPES, withDirectoryAccounts, } from '@cat-factory/kernel';
+import { and, asc, eq, gt, inArray, isNull, lte, max, min, or, sql } from 'drizzle-orm';
+import { directoryChanges, githubRepos, memberships, userIdentities, users, workspaceMembers, workspaces, } from '../db/schema.js';
+import { parseRoles } from './drizzle/accounts.js';
+// The directory read side over Postgres (backend/docs/adr/0067-directory-sync.md). Mirror of the
+// Cloudflare facade's `D1DirectoryRepository`; `defineDirectoryFeedSuite` and
+// `defineDirectoryReadSuite` hold the two to one behaviour. The feed rows themselves are appended
+// by the writing repositories through `directoryFeed.ts`.
+const workspaceColumns = {
+    id: workspaces.id,
+    name: workspaces.name,
+    description: workspaces.description,
+    accessMode: workspaces.access_mode,
+};
+function toWorkspace(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        description: row.description,
+        accessMode: row.accessMode === 'restricted' ? 'restricted' : 'account',
+    };
+}
+const userColumns = {
+    id: users.id,
+    name: users.name,
+    email: users.email,
+    avatarUrl: users.avatar_url,
+};
+const accountMembershipColumns = {
+    userId: memberships.user_id,
+    roles: memberships.roles,
+    createdAt: memberships.created_at,
+};
+function toAccountMembership(row) {
+    return { userId: row.userId, roles: parseRoles(row.roles), createdAt: row.createdAt };
+}
+const workspaceMembershipColumns = {
+    workspaceId: workspaceMembers.workspace_id,
+    userId: workspaceMembers.user_id,
+    role: workspaceMembers.role,
+    createdAt: workspaceMembers.created_at,
+};
+function toWorkspaceMembership(row) {
+    return {
+        workspaceId: row.workspaceId,
+        userId: row.userId,
+        role: row.role === 'admin' || row.role === 'member' ? row.role : 'viewer',
+        createdAt: row.createdAt,
+    };
+}
+const repoColumns = {
+    workspaceId: githubRepos.workspace_id,
+    repoId: githubRepos.github_id,
+    provider: githubRepos.provider,
+    owner: githubRepos.owner,
+    name: githubRepos.name,
+    defaultBranch: githubRepos.default_branch,
+    private: githubRepos.private,
+    isMonorepo: githubRepos.is_monorepo,
+};
+function toRepo(row) {
+    return {
+        workspaceId: row.workspaceId,
+        repoId: row.repoId,
+        provider: row.provider === 'gitlab' ? 'gitlab' : 'github',
+        owner: row.owner,
+        name: row.name,
+        defaultBranch: row.defaultBranch,
+        private: row.private === 1,
+        monorepo: row.isMonorepo === 1,
+    };
+}
+/** A workspace reach as a predicate on `column`, or none for an unrestricted key. */
+function reach(column, workspaceIds) {
+    if (workspaceIds === null)
+        return undefined;
+    if (workspaceIds.length === 0)
+        return sql `false`;
+    return inArray(column, workspaceIds);
+}
+export class DrizzleDirectoryRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async listChanges(accountId, afterSeq, upToSeq, limit, workspaceIds) {
+        const rows = await this.db
+            .select()
+            .from(directoryChanges)
+            .where(and(eq(directoryChanges.account_id, accountId), gt(directoryChanges.seq, afterSeq), lte(directoryChanges.seq, upToSeq), 
+        // A restricted key reads its workspaces' changes plus the deletion of ANY workspace that
+        // no longer exists: deleting a board also drops the key's grant on it, so without the
+        // second arm the key would never learn that a board it mirrored is gone.
+        workspaceIds === null
+            ? undefined
+            : or(and(inArray(directoryChanges.entity_type, [...WORKSPACE_DIRECTORY_ENTITY_TYPES]), reach(directoryChanges.workspace_id, workspaceIds)), and(eq(directoryChanges.entity_type, 'workspace'), sql `NOT EXISTS (SELECT 1 FROM ${workspaces} WHERE ${workspaces.id} = ${directoryChanges.entity_id})`))))
+            .orderBy(asc(directoryChanges.seq))
+            .limit(limit);
+        return rows.map(directoryChangeFromRow);
+    }
+    async headSeq(accountId) {
+        const [row] = await this.db
+            .select({ head: max(directoryChanges.seq) })
+            .from(directoryChanges)
+            .where(eq(directoryChanges.account_id, accountId));
+        return row?.head ?? 0;
+    }
+    async headSeqs(accountIds) {
+        const heads = new Map(accountIds.map((id) => [id, 0]));
+        if (accountIds.length === 0)
+            return heads;
+        const rows = await this.db
+            .select({ accountId: directoryChanges.account_id, head: max(directoryChanges.seq) })
+            .from(directoryChanges)
+            .where(inArray(directoryChanges.account_id, accountIds))
+            .groupBy(directoryChanges.account_id);
+        for (const row of rows)
+            heads.set(row.accountId, row.head ?? 0);
+        return heads;
+    }
+    async oldestSeq(accountId) {
+        const [row] = await this.db
+            .select({ oldest: min(directoryChanges.seq) })
+            .from(directoryChanges)
+            .where(eq(directoryChanges.account_id, accountId));
+        return row?.oldest ?? null;
+    }
+    async pruneChanges(before) {
+        // A `seq` PREFIX per account, up to its newest row older than the cutoff. `at` is not monotonic
+        // in `seq` (a writer stamps it before taking the feed's advisory lock), so deleting by `at`
+        // alone could remove a row while keeping an older-`seq` one, leaving a hole behind the oldest
+        // row that the reader's expiry check cannot see.
+        const result = await this.db.execute(sql `
+      WITH cut AS (SELECT account_id, MAX(seq) AS upto FROM directory_changes
+                    WHERE at < ${before} GROUP BY account_id)
+      DELETE FROM directory_changes c USING cut
+       WHERE c.account_id = cut.account_id
+         AND c.seq <= cut.upto
+         AND c.seq < (SELECT MAX(d.seq) FROM directory_changes d
+                       WHERE d.account_id = c.account_id)`);
+        return result.rowCount ?? 0;
+    }
+    async listWorkspaces(accountId, after, limit, workspaceIds) {
+        const rows = await this.db
+            .select(workspaceColumns)
+            .from(workspaces)
+            .where(and(eq(workspaces.account_id, accountId), gt(workspaces.id, after ?? ''), reach(workspaces.id, workspaceIds)))
+            .orderBy(asc(workspaces.id))
+            .limit(limit);
+        return rows.map(toWorkspace);
+    }
+    async listUsers(accountId, after, limit) {
+        const rows = await this.db
+            .select(userColumns)
+            .from(users)
+            .innerJoin(memberships, eq(memberships.user_id, users.id))
+            .where(and(eq(memberships.account_id, accountId), gt(users.id, after ?? '')))
+            .orderBy(asc(users.id))
+            .limit(limit);
+        return withDirectoryAccounts(rows, await this.hostIdentitiesOf(rows.map((row) => row.id)));
+    }
+    /** One read for the host-account identities of these users, whatever their number. */
+    async hostIdentitiesOf(userIds) {
+        if (userIds.length === 0)
+            return [];
+        return this.db
+            .select({
+            user_id: userIdentities.user_id,
+            provider: userIdentities.provider,
+            subject: userIdentities.subject,
+            metadata: userIdentities.metadata,
+        })
+            .from(userIdentities)
+            .where(and(inArray(userIdentities.user_id, userIds), inArray(userIdentities.provider, [...DIRECTORY_ACCOUNT_PROVIDERS])));
+    }
+    async listAccountMemberships(accountId, after, limit) {
+        const rows = await this.db
+            .select(accountMembershipColumns)
+            .from(memberships)
+            .where(and(eq(memberships.account_id, accountId), gt(memberships.user_id, after ?? '')))
+            .orderBy(asc(memberships.user_id))
+            .limit(limit);
+        return rows.map(toAccountMembership);
+    }
+    async listWorkspaceMemberships(accountId, after, limit, workspaceIds) {
+        const rows = await this.db
+            .select(workspaceMembershipColumns)
+            .from(workspaceMembers)
+            .innerJoin(workspaces, eq(workspaces.id, workspaceMembers.workspace_id))
+            .where(and(eq(workspaces.account_id, accountId), after === null
+            ? undefined
+            : or(gt(workspaceMembers.workspace_id, after.workspaceId), and(eq(workspaceMembers.workspace_id, after.workspaceId), gt(workspaceMembers.user_id, after.userId))), reach(workspaceMembers.workspace_id, workspaceIds)))
+            .orderBy(asc(workspaceMembers.workspace_id), asc(workspaceMembers.user_id))
+            .limit(limit);
+        return rows.map(toWorkspaceMembership);
+    }
+    async listRepos(accountId, after, limit, workspaceIds) {
+        const rows = await this.db
+            .select(repoColumns)
+            .from(githubRepos)
+            .innerJoin(workspaces, eq(workspaces.id, githubRepos.workspace_id))
+            .where(and(eq(workspaces.account_id, accountId), isNull(githubRepos.deleted_at), after === null
+            ? undefined
+            : or(gt(githubRepos.workspace_id, after.workspaceId), and(eq(githubRepos.workspace_id, after.workspaceId), gt(githubRepos.github_id, after.repoId))), reach(githubRepos.workspace_id, workspaceIds)))
+            .orderBy(asc(githubRepos.workspace_id), asc(githubRepos.github_id))
+            .limit(limit);
+        return rows.map(toRepo);
+    }
+    async getWorkspaces(accountId, ids) {
+        if (ids.length === 0)
+            return [];
+        const rows = await this.db
+            .select(workspaceColumns)
+            .from(workspaces)
+            .where(and(eq(workspaces.account_id, accountId), inArray(workspaces.id, ids)));
+        return rows.map(toWorkspace);
+    }
+    async getUsers(accountId, ids) {
+        if (ids.length === 0)
+            return [];
+        // The ids are known up front, so the identities are read beside the users rather than after.
+        const [rows, identities] = await Promise.all([
+            this.db
+                .select(userColumns)
+                .from(users)
+                .innerJoin(memberships, eq(memberships.user_id, users.id))
+                .where(and(eq(memberships.account_id, accountId), inArray(users.id, ids))),
+            this.hostIdentitiesOf(ids),
+        ]);
+        return withDirectoryAccounts(rows, identities);
+    }
+    async getAccountMemberships(accountId, userIds) {
+        if (userIds.length === 0)
+            return [];
+        const rows = await this.db
+            .select(accountMembershipColumns)
+            .from(memberships)
+            .where(and(eq(memberships.account_id, accountId), inArray(memberships.user_id, userIds)));
+        return rows.map(toAccountMembership);
+    }
+    async getWorkspaceMemberships(accountId, keys) {
+        if (keys.length === 0)
+            return [];
+        const rows = await this.db
+            .select(workspaceMembershipColumns)
+            .from(workspaceMembers)
+            .innerJoin(workspaces, eq(workspaces.id, workspaceMembers.workspace_id))
+            .where(and(eq(workspaces.account_id, accountId), or(...keys.map((k) => and(eq(workspaceMembers.workspace_id, k.workspaceId), eq(workspaceMembers.user_id, k.userId))))));
+        return rows.map(toWorkspaceMembership);
+    }
+    async getRepos(accountId, keys) {
+        if (keys.length === 0)
+            return [];
+        const rows = await this.db
+            .select(repoColumns)
+            .from(githubRepos)
+            .innerJoin(workspaces, eq(workspaces.id, githubRepos.workspace_id))
+            .where(and(eq(workspaces.account_id, accountId), isNull(githubRepos.deleted_at), or(...keys.map((k) => and(eq(githubRepos.workspace_id, k.workspaceId), eq(githubRepos.github_id, k.repoId))))));
+        return rows.map(toRepo);
+    }
+}
+//# sourceMappingURL=directoryRepository.js.map

package/dist/repositories/directoryRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directoryRepository.js","sourceRoot":"","sources":["../../src/repositories/directoryRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAMN,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,2BAA2B,EAI3B,sBAAsB,EAEtB,gCAAgC,EAChC,qBAAqB,GAEtB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAY,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAGjG,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,cAAc,EACd,KAAK,EACL,gBAAgB,EAChB,UAAU,GACX,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAElD,iGAAiG;AACjG,8EAA8E;AAC9E,kGAAkG;AAClG,0DAA0D;AAE1D,MAAM,gBAAgB,GAAG;IACvB,EAAE,EAAE,UAAU,CAAC,EAAE;IACjB,IAAI,EAAE,UAAU,CAAC,IAAI;IACrB,WAAW,EAAE,UAAU,CAAC,WAAW;IACnC,UAAU,EAAE,UAAU,CAAC,WAAW;CACnC,CAAA;AAED,SAAS,WAAW,CAAC,GAKpB;IACC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;KACvE,CAAA;AACH,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,SAAS,EAAE,KAAK,CAAC,UAAU;CAC5B,CAAA;AAED,MAAM,wBAAwB,GAAG;IAC/B,MAAM,EAAE,WAAW,CAAC,OAAO;IAC3B,KAAK,EAAE,WAAW,CAAC,KAAK;IACxB,SAAS,EAAE,WAAW,CAAC,UAAU;CAClC,CAAA;AAED,SAAS,mBAAmB,CAAC,GAI5B;IACC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAA;AACvF,CAAC;AAED,MAAM,0BAA0B,GAAG;IACjC,WAAW,EAAE,gBAAgB,CAAC,YAAY;IAC1C,MAAM,EAAE,gBAAgB,CAAC,OAAO;IAChC,IAAI,EAAE,gBAAgB,CAAC,IAAI;IAC3B,SAAS,EAAE,gBAAgB,CAAC,UAAU;CACvC,CAAA;AAED,SAAS,qBAAqB,CAAC,GAK9B;IACC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QACzE,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAA;AACH,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,WAAW,EAAE,WAAW,CAAC,YAAY;IACrC,MAAM,EAAE,WAAW,CAAC,SAAS;IAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ;IAC9B,KAAK,EAAE,WAAW,CAAC,KAAK;IACxB,IAAI,EAAE,WAAW,CAAC,IAAI;IACtB,aAAa,EAAE,WAAW,CAAC,cAAc;IACzC,OAAO,EAAE,WAAW,CAAC,OAAO;IAC5B,UAAU,EAAE,WAAW,CAAC,WAAW;CACpC,CAAA;AAED,SAAS,MAAM,CAAC,GASf;IACC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACzD,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;QAC1B,QAAQ,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC;KAC/B,CAAA;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,KAAK,CAAC,MAAmB,EAAE,YAA6B;IAC/D,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA,OAAO,CAAA;IAChD,OAAO,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,OAAO,0BAA0B;IACR,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,QAAgB,EAChB,OAAe,EACf,KAAa,EACb,YAA6B;QAE7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,EAC1C,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAClC,GAAG,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC;QAClC,yFAAyF;QACzF,sFAAsF;QACtF,yEAAyE;QACzE,YAAY,KAAK,IAAI;YACnB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,CACA,GAAG,CACD,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,GAAG,gCAAgC,CAAC,CAAC,EAC5E,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,YAAY,CAAC,CACnD,EACD,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,EAC7C,GAAG,CAAA,6BAA6B,UAAU,UAAU,UAAU,CAAC,EAAE,MAAM,gBAAgB,CAAC,SAAS,GAAG,CACrG,CACF,CACN,CACF;aACA,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;aAClC,KAAK,CAAC,KAAK,CAAC,CAAA;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;aAC3C,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QACpD,OAAO,GAAG,EAAE,IAAI,IAAI,CAAC,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAoB;QACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACtD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;aACnF,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;aACvD,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAA;QACvC,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAA;QAC/D,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;aAC7C,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;QACpD,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,gGAAgG;QAChG,4FAA4F;QAC5F,8FAA8F;QAC9F,iDAAiD;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;iCAEX,MAAM;;;;;0DAKmB,CAAC,CAAA;QACvD,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,SAAiB,EACjB,KAAoB,EACpB,KAAa,EACb,YAA6B;QAE7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,gBAAgB,CAAC;aACxB,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EACpC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,EAC9B,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CACnC,CACF;aACA,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;aAC3B,KAAK,CAAC,KAAK,CAAC,CAAA;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,KAAoB,EACpB,KAAa;QAEb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,KAAK,CAAC;aACX,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;aACzD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;aAC5E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aACtB,KAAK,CAAC,KAAK,CAAC,CAAA;QACf,OAAO,qBAAqB,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5F,CAAC;IAED,sFAAsF;IAC9E,KAAK,CAAC,gBAAgB,CAAC,OAAiB;QAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QACnC,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,CAAC;YACN,OAAO,EAAE,cAAc,CAAC,OAAO;YAC/B,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,OAAO,EAAE,cAAc,CAAC,OAAO;YAC/B,QAAQ,EAAE,cAAc,CAAC,QAAQ;SAClC,CAAC;aACD,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CACJ,GAAG,CACD,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,EACxC,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,GAAG,2BAA2B,CAAC,CAAC,CACnE,CACF,CAAA;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,SAAiB,EACjB,KAAoB,EACpB,KAAa;QAEb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,wBAAwB,CAAC;aAChC,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;aACvF,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;aACjC,KAAK,CAAC,KAAK,CAAC,CAAA;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,SAAiB,EACjB,KAAoC,EACpC,KAAa,EACb,YAA6B;QAE7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,0BAA0B,CAAC;aAClC,IAAI,CAAC,gBAAgB,CAAC;aACtB,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;aACvE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EACpC,KAAK,KAAK,IAAI;YACZ,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,CACA,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,EACpD,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,EACpD,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAC3C,CACF,EACL,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,YAAY,CAAC,CACnD,CACF;aACA,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;aAC1E,KAAK,CAAC,KAAK,CAAC,CAAA;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,KAA8B,EAC9B,KAAa,EACb,YAA6B;QAE7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,WAAW,CAAC;aACjB,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;aAClE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EACpC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAC9B,KAAK,KAAK,IAAI;YACZ,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,CACA,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,EAC/C,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,EAC/C,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CACxC,CACF,EACL,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,YAAY,CAAC,CAC9C,CACF;aACA,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;aAClE,KAAK,CAAC,KAAK,CAAC,CAAA;QACf,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,GAAa;QAClD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,gBAAgB,CAAC;aACxB,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;QAChF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC9B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,GAAa;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAC/B,6FAA6F;QAC7F,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,IAAI,CAAC,EAAE;iBACJ,MAAM,CAAC,WAAW,CAAC;iBACnB,IAAI,CAAC,KAAK,CAAC;iBACX,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;iBACzD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;SAC3B,CAAC,CAAA;QACF,OAAO,qBAAqB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,SAAiB,EACjB,OAAiB;QAEjB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,wBAAwB,CAAC;aAChC,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC3F,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,SAAiB,EACjB,IAA8B;QAE9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,0BAA0B,CAAC;aAClC,IAAI,CAAC,gBAAgB,CAAC;aACtB,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;aACvE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EACpC,EAAE,CACA,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,GAAG,CACD,EAAE,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,EAChD,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CACvC,CACF,CACF,CACF,CACF,CAAA;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,IAAwB;QACxD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,WAAW,CAAC;aACnB,IAAI,CAAC,WAAW,CAAC;aACjB,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;aAClE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,EACpC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAC9B,EAAE,CACA,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CACtF,CACF,CACF,CACF,CAAA;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;CACF"}

package/dist/repositories/directoryWebhookRepository.d.ts

@@ -0,0 +1,16 @@
+import type { DirectoryWebhookRecord, DirectoryWebhookRepository } from '@cat-factory/kernel';
+import type { DrizzleDb } from '../db/client.js';
+export declare class DrizzleDirectoryWebhookRepository implements DirectoryWebhookRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    list(accountId: string): Promise<DirectoryWebhookRecord[]>;
+    get(accountId: string, id: string): Promise<DirectoryWebhookRecord | null>;
+    put(record: DirectoryWebhookRecord, limit: number): Promise<'stored' | 'limit_reached'>;
+    delete(accountId: string, id: string): Promise<void>;
+    listEnabled(): Promise<DirectoryWebhookRecord[]>;
+    claim(accountId: string, id: string, token: string, now: number, leaseUntil: number): Promise<number | null>;
+    complete(accountId: string, id: string, token: string, toSeq: number): Promise<boolean>;
+    release(accountId: string, id: string, token: string): Promise<void>;
+    private heldBy;
+}
+//# sourceMappingURL=directoryWebhookRepository.d.ts.map

package/dist/repositories/directoryWebhookRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directoryWebhookRepository.d.ts","sourceRoot":"","sources":["../../src/repositories/directoryWebhookRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAE7F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAuBhD,qBAAa,iCAAkC,YAAW,0BAA0B;IACtE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAO/D;IAEK,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAM/E;IAEK,GAAG,CAAC,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,eAAe,CAAC,CA4C5F;IAEK,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIzD;IAEK,WAAW,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAOrD;IAEK,KAAK,CACT,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAcxB;IAEK,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO5F;IAEK,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;IAED,OAAO,CAAC,MAAM;CAOf"}

package/dist/repositories/directoryWebhookRepository.js

@@ -0,0 +1,116 @@
+import { and, asc, count, eq, isNull, lte, or, sql } from 'drizzle-orm';
+import { directoryWebhooks } from '../db/schema.js';
+// Directory webhook endpoints over Postgres. Mirror of the Cloudflare facade's
+// `D1DirectoryWebhookRepository`; `defineDirectoryWebhookSuite` holds the two to one behaviour.
+/** Advisory-lock class for the per-account endpoint cap; the second key is the account. */
+const DIRECTORY_WEBHOOK_CAP_LOCK_CLASS = 0x6477_6863;
+function toRecord(row) {
+    return {
+        accountId: row.account_id,
+        id: row.id,
+        url: row.url,
+        enabled: row.enabled === 1,
+        secretSealed: row.secret_sealed,
+        deliveredSeq: row.delivered_seq,
+        updatedAt: row.updated_at,
+    };
+}
+export class DrizzleDirectoryWebhookRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async list(accountId) {
+        const rows = await this.db
+            .select()
+            .from(directoryWebhooks)
+            .where(eq(directoryWebhooks.account_id, accountId))
+            .orderBy(asc(directoryWebhooks.id));
+        return rows.map(toRecord);
+    }
+    async get(accountId, id) {
+        const [row] = await this.db
+            .select()
+            .from(directoryWebhooks)
+            .where(and(eq(directoryWebhooks.account_id, accountId), eq(directoryWebhooks.id, id)));
+        return row ? toRecord(row) : null;
+    }
+    async put(record, limit) {
+        // At READ COMMITTED there is no row yet to lock, so two registrations counting nine would both
+        // insert. Writes for one account are serialized on a transaction-scoped advisory lock instead,
+        // the same shape the notification webhook cap uses.
+        return await this.db.transaction(async (tx) => {
+            await tx.execute(sql `SELECT pg_advisory_xact_lock(${DIRECTORY_WEBHOOK_CAP_LOCK_CLASS}, hashtext(${record.accountId}))`);
+            const [existing] = await tx
+                .select({ id: directoryWebhooks.id })
+                .from(directoryWebhooks)
+                .where(and(eq(directoryWebhooks.account_id, record.accountId), eq(directoryWebhooks.id, record.id)));
+            if (!existing) {
+                const [counted] = await tx
+                    .select({ total: count() })
+                    .from(directoryWebhooks)
+                    .where(eq(directoryWebhooks.account_id, record.accountId));
+                if ((counted?.total ?? 0) >= limit)
+                    return 'limit_reached';
+            }
+            const editable = {
+                url: record.url,
+                enabled: record.enabled ? 1 : 0,
+                secret_sealed: record.secretSealed,
+                updated_at: record.updatedAt,
+            };
+            await tx
+                .insert(directoryWebhooks)
+                .values({
+                account_id: record.accountId,
+                id: record.id,
+                delivered_seq: record.deliveredSeq,
+                ...editable,
+            })
+                .onConflictDoUpdate({
+                target: [directoryWebhooks.account_id, directoryWebhooks.id],
+                set: editable,
+            });
+            return 'stored';
+        });
+    }
+    async delete(accountId, id) {
+        await this.db
+            .delete(directoryWebhooks)
+            .where(and(eq(directoryWebhooks.account_id, accountId), eq(directoryWebhooks.id, id)));
+    }
+    async listEnabled() {
+        const rows = await this.db
+            .select()
+            .from(directoryWebhooks)
+            .where(eq(directoryWebhooks.enabled, 1))
+            .orderBy(asc(directoryWebhooks.account_id), asc(directoryWebhooks.id));
+        return rows.map(toRecord);
+    }
+    async claim(accountId, id, token, now, leaseUntil) {
+        const [row] = await this.db
+            .update(directoryWebhooks)
+            .set({ lease_token: token, lease_until: leaseUntil })
+            .where(and(eq(directoryWebhooks.account_id, accountId), eq(directoryWebhooks.id, id), eq(directoryWebhooks.enabled, 1), or(isNull(directoryWebhooks.lease_until), lte(directoryWebhooks.lease_until, now))))
+            .returning({ deliveredSeq: directoryWebhooks.delivered_seq });
+        return row ? row.deliveredSeq : null;
+    }
+    async complete(accountId, id, token, toSeq) {
+        const moved = await this.db
+            .update(directoryWebhooks)
+            .set({ delivered_seq: toSeq, lease_token: null, lease_until: null })
+            .where(this.heldBy(accountId, id, token))
+            .returning({ id: directoryWebhooks.id });
+        return moved.length > 0;
+    }
+    async release(accountId, id, token) {
+        await this.db
+            .update(directoryWebhooks)
+            .set({ lease_token: null, lease_until: null })
+            .where(this.heldBy(accountId, id, token));
+    }
+    heldBy(accountId, id, token) {
+        return and(eq(directoryWebhooks.account_id, accountId), eq(directoryWebhooks.id, id), eq(directoryWebhooks.lease_token, token));
+    }
+}
+//# sourceMappingURL=directoryWebhookRepository.js.map

package/dist/repositories/directoryWebhookRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directoryWebhookRepository.js","sourceRoot":"","sources":["../../src/repositories/directoryWebhookRepository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEnD,+EAA+E;AAC/E,gGAAgG;AAEhG,2FAA2F;AAC3F,MAAM,gCAAgC,GAAG,WAAW,CAAA;AAIpD,SAAS,QAAQ,CAAC,GAAQ;IACxB,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;QAC1B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,OAAO,iCAAiC;IACf,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;aAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,EAAU;QACrC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;QACxF,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAA8B,EAAE,KAAa;QACrD,+FAA+F;QAC/F,+FAA+F;QAC/F,oDAAoD;QACpD,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5C,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,gCAAgC,gCAAgC,cAAc,MAAM,CAAC,SAAS,IAAI,CACtG,CAAA;YACD,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;iBACxB,MAAM,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC;iBACpC,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,EAClD,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CACpC,CACF,CAAA;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;qBACvB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;qBAC1B,IAAI,CAAC,iBAAiB,CAAC;qBACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;gBAC5D,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK;oBAAE,OAAO,eAAe,CAAA;YAC5D,CAAC;YACD,MAAM,QAAQ,GAAG;gBACf,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,UAAU,EAAE,MAAM,CAAC,SAAS;aAC7B,CAAA;YACD,MAAM,EAAE;iBACL,MAAM,CAAC,iBAAiB,CAAC;iBACzB,MAAM,CAAC;gBACN,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,GAAG,QAAQ;aACZ,CAAC;iBACD,kBAAkB,CAAC;gBAClB,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,CAAC;gBAC5D,GAAG,EAAE,QAAQ;aACd,CAAC,CAAA;YACJ,OAAO,QAAQ,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,EAAU;QACxC,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,iBAAiB,CAAC;aACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1F,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;aACvC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAA;QACxE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK,CACT,SAAiB,EACjB,EAAU,EACV,KAAa,EACb,GAAW,EACX,UAAkB;QAElB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,iBAAiB,CAAC;aACzB,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;aACpD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,EAC3C,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,EAC5B,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC,EAChC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CACnF,CACF;aACA,SAAS,CAAC,EAAE,YAAY,EAAE,iBAAiB,CAAC,aAAa,EAAE,CAAC,CAAA;QAC/D,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,EAAU,EAAE,KAAa,EAAE,KAAa;QACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,iBAAiB,CAAC;aACzB,GAAG,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;aACnE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;aACxC,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,EAAU,EAAE,KAAa;QACxD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,iBAAiB,CAAC;aACzB,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;aAC7C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IAC7C,CAAC;IAEO,MAAM,CAAC,SAAiB,EAAE,EAAU,EAAE,KAAa;QACzD,OAAO,GAAG,CACR,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,EAC3C,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,EAC5B,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,CACzC,CAAA;IACH,CAAC;CACF"}

package/dist/repositories/drizzle/accounts.d.ts

@@ -1,4 +1,4 @@
-import type { AccountInvitationRecord, AccountInvitationRepository, AccountRecord, AccountRepository, AccountSettingsPatch, AuditEventPage, AuditEventRecord, AuditEventRepository, AuthAttemptRecord, AuthAttemptRepository, EmailConnectionRecord, EmailConnectionRepository, IdentityProvider, MachineNodeMint, MachineNodeMintOutcome, MachineNodeRecord, MachineNodeRepository, Membership, MembershipRepository, PasswordResetTokenRecord, PasswordResetTokenRepository, PasswordResetTokenStatus, UserIdentityRecord, UserRecord, UserRepository } from '@cat-factory/kernel';
+import type { AccountInvitationRecord, AccountInvitationRepository, AccountRecord, AccountRepository, AccountRole, AccountSettingsPatch, AuditEventPage, AuditEventRecord, AuditEventRepository, AuthAttemptRecord, AuthAttemptRepository, EmailConnectionRecord, EmailConnectionRepository, IdentityProvider, MachineNodeMint, MachineNodeMintOutcome, MachineNodeRecord, MachineNodeRepository, Membership, MembershipRepository, PasswordResetTokenRecord, PasswordResetTokenRepository, PasswordResetTokenStatus, UserIdentityRecord, UserRecord, UserRepository } from '@cat-factory/kernel';
 import type { DrizzleDb } from '../../db/client.js';
 export declare class DrizzleAccountRepository implements AccountRepository {
     private readonly db;
@@ -11,6 +11,8 @@ export declare class DrizzleAccountRepository implements AccountRepository {
     updateSettings(id: string, patch: AccountSettingsPatch): Promise<void>;
     findPersonalByUser(userId: string): Promise<AccountRecord | null>;
 }
+/** Parse the CSV `roles` column into a non-empty role set (defaults to developer). */
+export declare function parseRoles(csv: string | null): AccountRole[];
 export declare class DrizzleMembershipRepository implements MembershipRepository {
     private readonly db;
     constructor(db: DrizzleDb);
@@ -31,6 +33,7 @@ export declare class DrizzleUserRepository implements UserRepository {
     listByIds(ids: string[]): Promise<UserRecord[]>;
     getIdentity(provider: IdentityProvider, subject: string): Promise<UserIdentityRecord | null>;
     linkIdentity(identity: UserIdentityRecord): Promise<void>;
+    private upsertIdentity;
     listIdentities(userId: string): Promise<UserIdentityRecord[]>;
     sessionGeneration(userId: string): Promise<number | null>;
     bumpSessionGeneration(userId: string): Promise<number>;

package/dist/repositories/drizzle/accounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../../src/repositories/drizzle/accounts.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,uBAAuB,EACvB,2BAA2B,EAC3B,aAAa,EACb,iBAAiB,EAEjB,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EAErB,qBAAqB,EACrB,yBAAyB,EAEzB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,UAAU,EACV,oBAAoB,EACpB,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,EACxB,kBAAkB,EAClB,UAAU,EACV,cAAc,EACf,MAAM,qBAAqB,CAAA;AAgB5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AA6BnD,qBAAa,wBAAyB,YAAW,iBAAiB;IACpD,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAGnD;IAEK,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAYvD;IAEK,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAWlD;IAEK,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAyBnE;IAEK,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpD;IAEK,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3E;IAEK,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAMtE;CACF;AAqBD,qBAAa,2BAA4B,YAAW,oBAAoB;IAC1D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAOtD;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAO5D;IAEK,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAMvE;IAEK,MAAM,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBlD;IAEK,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO7D;CACF;AAuBD,qBAAa,qBAAsB,YAAW,cAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAGhD;IAEK,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5C;IAEK,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC,CAAC,GAC/D,OAAO,CAAC,IAAI,CAAC,CAWf;IAEK,cAAc,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAO5F;IAEK,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAM3D;IAEK,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAIpD;IAEK,WAAW,CACf,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAMpC;IAEK,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAe9D;IAEK,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAMlE;IAEK,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ9D;IAEK,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc3D;CACF;AAgBD,qBAAa,kCAAmC,YAAW,2BAA2B;IACxE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3D;IAEK,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAM7D;IAEK,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAMhF;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAOzE;IAEK,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;CACF;AAeD,qBAAa,mCAAoC,YAAW,4BAA4B;IAC1E,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAS5D;IAEK,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAMjF;IAEK,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAS3E;IAEK,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;IAEK,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO1C;IAEK,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKnD;CACF;AAED,sGAAsG;AACtG,qBAAa,4BAA6B,YAAW,qBAAqB;IAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtD;IAEK,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMnE;IAEK,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMjE;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGtD;CACF;AAeD,2FAA2F;AAC3F,qBAAa,4BAA6B,YAAW,qBAAqB;IAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA8BvE;IAEK,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAG3D;IAEK,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAO7D;IAEK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASzF;IAEK,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMhD;IAEK,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGnD;CACF;AAED,qEAAqE;AACrE,qBAAa,2BAA4B,YAAW,oBAAoB;IAC1D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAInD;IAEK,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrD;IAEK,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,cAAc,CAAC,CA6BzB;CACF;AAcD,qBAAa,gCAAiC,YAAW,yBAAyB;IACpE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAM3E;IAEK,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBzD;IAEK,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;CACF"}
+{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../../src/repositories/drizzle/accounts.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,uBAAuB,EACvB,2BAA2B,EAC3B,aAAa,EACb,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EAErB,qBAAqB,EACrB,yBAAyB,EAEzB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EACrB,UAAU,EACV,oBAAoB,EACpB,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,EACxB,kBAAkB,EAClB,UAAU,EACV,cAAc,EACf,MAAM,qBAAqB,CAAA;AAmB5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AA6BnD,qBAAa,wBAAyB,YAAW,iBAAiB;IACpD,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAGnD;IAEK,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAYvD;IAEK,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAWlD;IAEK,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAyBnE;IAEK,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpD;IAEK,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3E;IAEK,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAMtE;CACF;AAED,sFAAsF;AACtF,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,EAAE,CAM5D;AAWD,qBAAa,2BAA4B,YAAW,oBAAoB;IAC1D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAOtD;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAO5D;IAEK,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAMvE;IAEK,MAAM,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBlD;IAEK,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO7D;CACF;AAuBD,qBAAa,qBAAsB,YAAW,cAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAGhD;IAEK,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5C;IAEK,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC,CAAC,GAC/D,OAAO,CAAC,IAAI,CAAC,CAWf;IAEK,cAAc,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAO5F;IAEK,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAM3D;IAEK,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAIpD;IAEK,WAAW,CACf,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAMpC;IAEK,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB9D;YAEa,cAAc;IAoBtB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAMlE;IAEK,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ9D;IAEK,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc3D;CACF;AAgBD,qBAAa,kCAAmC,YAAW,2BAA2B;IACxE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3D;IAEK,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAM7D;IAEK,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAMhF;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAOzE;IAEK,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;CACF;AAeD,qBAAa,mCAAoC,YAAW,4BAA4B;IAC1E,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAS5D;IAEK,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAMjF;IAEK,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAS3E;IAEK,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;IAEK,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO1C;IAEK,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKnD;CACF;AAED,sGAAsG;AACtG,qBAAa,4BAA6B,YAAW,qBAAqB;IAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtD;IAEK,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMnE;IAEK,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMjE;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGtD;CACF;AAeD,2FAA2F;AAC3F,qBAAa,4BAA6B,YAAW,qBAAqB;IAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,UAAU,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA8BvE;IAEK,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAG3D;IAEK,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAO7D;IAEK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASzF;IAEK,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMhD;IAEK,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGnD;CACF;AAED,qEAAqE;AACrE,qBAAa,2BAA4B,YAAW,oBAAoB;IAC1D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAInD;IAEK,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKrD;IAEK,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,cAAc,CAAC,CA6BzB;CACF;AAcD,qBAAa,gCAAiC,YAAW,yBAAyB;IACpE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAM3E;IAEK,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBzD;IAEK,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;CACF"}