@cat-factory/node-server 0.6.0

package/dist/repositories/containerExecution.js

@@ -0,0 +1,199 @@
+import { and, eq, isNull } from 'drizzle-orm';
+import { githubInstallations, runnerPoolConnections, services, workspaces } from '../db/schema.js';
+// Drizzle/Postgres adapters for the persistence the container-agent execution path
+// needs on the Node facade: a workspace's self-hosted runner-pool binding, its
+// GitHub App installation, and the projected repos the shared `buildResolveRepoTarget`
+// reads to tell the harness which repo a run operates on. These mirror the Cloudflare
+// D1 repositories (D1RunnerPoolConnectionRepository / D1GitHubInstallationRepository /
+// D1RepoProjectionRepository) column-for-column so behaviour matches across stores.
+/** Postgres-backed store of workspace → runner-pool bindings (mirror of D1 migration 0013). */
+export class DrizzleRunnerPoolConnectionRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async getByWorkspace(workspaceId) {
+        const rows = await this.db
+            .select()
+            .from(runnerPoolConnections)
+            .where(and(eq(runnerPoolConnections.workspace_id, workspaceId), isNull(runnerPoolConnections.deleted_at)))
+            .limit(1);
+        const row = rows[0];
+        if (!row)
+            return null;
+        return {
+            workspaceId: row.workspace_id,
+            providerId: row.provider_id,
+            label: row.label,
+            baseUrl: row.base_url,
+            manifestJson: row.manifest_json,
+            secretsCipher: row.secrets_cipher,
+            createdAt: row.created_at,
+            deletedAt: row.deleted_at,
+        };
+    }
+    async upsert(record) {
+        // A workspace has a single live pool: clear any prior binding (live or
+        // tombstoned) before inserting, so re-registering a different pool can't
+        // collide on the (workspace_id, provider_id) primary key.
+        await this.db
+            .delete(runnerPoolConnections)
+            .where(eq(runnerPoolConnections.workspace_id, record.workspaceId));
+        await this.db.insert(runnerPoolConnections).values({
+            workspace_id: record.workspaceId,
+            provider_id: record.providerId,
+            label: record.label,
+            base_url: record.baseUrl,
+            manifest_json: record.manifestJson,
+            secrets_cipher: record.secretsCipher,
+            created_at: record.createdAt,
+            deleted_at: null,
+        });
+    }
+    async softDelete(workspaceId, at) {
+        await this.db
+            .update(runnerPoolConnections)
+            .set({ deleted_at: at })
+            .where(and(eq(runnerPoolConnections.workspace_id, workspaceId), isNull(runnerPoolConnections.deleted_at)));
+    }
+}
+function rowToInstallation(row) {
+    return {
+        installationId: row.installation_id,
+        workspaceId: row.workspace_id,
+        accountId: row.account_id ?? null,
+        accountLogin: row.account_login,
+        targetType: row.target_type === 'Organization' ? 'Organization' : 'User',
+        appId: row.app_id ?? null,
+        cachedToken: row.cached_token,
+        tokenExpiresAt: row.token_expires_at,
+        createdAt: row.created_at,
+        deletedAt: row.deleted_at,
+    };
+}
+/** Postgres-backed store of workspace → GitHub App installation bindings (mirror of D1 migration 0004). */
+export class DrizzleGitHubInstallationRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async getByInstallationId(installationId) {
+        const rows = await this.db
+            .select()
+            .from(githubInstallations)
+            .where(eq(githubInstallations.installation_id, installationId))
+            .limit(1);
+        return rows[0] ? rowToInstallation(rows[0]) : null;
+    }
+    async getByWorkspace(workspaceId) {
+        // Prefer the workspace's own direct binding (the connector, or the
+        // auth-disabled path); else one shared via its account.
+        const direct = await this.db
+            .select()
+            .from(githubInstallations)
+            .where(and(eq(githubInstallations.workspace_id, workspaceId), isNull(githubInstallations.deleted_at)))
+            .limit(1);
+        if (direct[0])
+            return rowToInstallation(direct[0]);
+        const ws = await this.db
+            .select({ accountId: workspaces.account_id })
+            .from(workspaces)
+            .where(eq(workspaces.id, workspaceId))
+            .limit(1);
+        const accountId = ws[0]?.accountId;
+        if (!accountId)
+            return null;
+        const shared = await this.db
+            .select()
+            .from(githubInstallations)
+            .where(and(eq(githubInstallations.account_id, accountId), isNull(githubInstallations.deleted_at)))
+            .limit(1);
+        return shared[0] ? rowToInstallation(shared[0]) : null;
+    }
+    async listWorkspacesForInstallation(installationId) {
+        const rows = await this.db
+            .select()
+            .from(githubInstallations)
+            .where(and(eq(githubInstallations.installation_id, installationId), isNull(githubInstallations.deleted_at)))
+            .limit(1);
+        const install = rows[0];
+        if (!install)
+            return [];
+        const ids = new Set([install.workspace_id]);
+        if (install.account_id) {
+            const peers = await this.db
+                .select({ id: workspaces.id })
+                .from(workspaces)
+                .where(eq(workspaces.account_id, install.account_id));
+            for (const p of peers)
+                ids.add(p.id);
+        }
+        return [...ids];
+    }
+    async listActive() {
+        const rows = await this.db
+            .select()
+            .from(githubInstallations)
+            .where(isNull(githubInstallations.deleted_at));
+        return rows.map(rowToInstallation);
+    }
+    async upsert(installation) {
+        const values = {
+            installation_id: installation.installationId,
+            workspace_id: installation.workspaceId,
+            account_id: installation.accountId,
+            account_login: installation.accountLogin,
+            target_type: installation.targetType,
+            app_id: installation.appId,
+            cached_token: installation.cachedToken,
+            token_expires_at: installation.tokenExpiresAt,
+            created_at: installation.createdAt,
+            deleted_at: installation.deletedAt,
+        };
+        await this.db
+            .insert(githubInstallations)
+            .values(values)
+            .onConflictDoUpdate({ target: githubInstallations.installation_id, set: values });
+    }
+    async updateCachedToken(installationId, token, expiresAt) {
+        await this.db
+            .update(githubInstallations)
+            .set({ cached_token: token, token_expires_at: expiresAt })
+            .where(eq(githubInstallations.installation_id, installationId));
+    }
+    async softDelete(installationId, at) {
+        await this.db
+            .update(githubInstallations)
+            .set({ deleted_at: at })
+            .where(eq(githubInstallations.installation_id, installationId));
+    }
+}
+/**
+ * Minimal read adapter the shared `buildResolveRepoTarget` needs to resolve a frame's
+ * service (and, for a monorepo, its pinned subdirectory). Only `getByFrameBlock` is
+ * implemented — the full account-owned service store lives in `drizzle.ts`.
+ */
+export class DrizzleServiceFrameRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async getByFrameBlock(frameBlockId) {
+        const [row] = await this.db
+            .select()
+            .from(services)
+            .where(eq(services.frame_block_id, frameBlockId));
+        return row
+            ? {
+                id: row.id,
+                accountId: row.account_id,
+                frameBlockId: row.frame_block_id,
+                installationId: row.installation_id,
+                repoGithubId: row.repo_github_id,
+                directory: row.directory,
+                createdAt: row.created_at,
+            }
+            : null;
+    }
+}
+//# sourceMappingURL=containerExecution.js.map

package/dist/repositories/containerExecution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerExecution.js","sourceRoot":"","sources":["../../src/repositories/containerExecution.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAElG,mFAAmF;AACnF,+EAA+E;AAC/E,uFAAuF;AACvF,sFAAsF;AACtF,uFAAuF;AACvF,oFAAoF;AAEpF,+FAA+F;AAC/F,MAAM,OAAO,qCAAqC;IACnB,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,qBAAqB,CAAC;aAC3B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,qBAAqB,CAAC,YAAY,EAAE,WAAW,CAAC,EACnD,MAAM,CAAC,qBAAqB,CAAC,UAAU,CAAC,CACzC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAkC;QAC7C,uEAAuE;QACvE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,qBAAqB,CAAC;aAC7B,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QACpE,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC;YACjD,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,UAAU,EAAE,IAAI;SACjB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,EAAU;QAC9C,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,qBAAqB,CAAC;aAC7B,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,qBAAqB,CAAC,YAAY,EAAE,WAAW,CAAC,EACnD,MAAM,CAAC,qBAAqB,CAAC,UAAU,CAAC,CACzC,CACF,CAAA;IACL,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,GAA4C;IACrE,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;QACjC,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,UAAU,EAAE,GAAG,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;QACxE,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;QACzB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,2GAA2G;AAC3G,MAAM,OAAO,mCAAmC;IACjB,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,mBAAmB,CAAC,cAAsB;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;aAC9D,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,mEAAmE;QACnE,wDAAwD;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,WAAW,CAAC,EACjD,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CACvC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,IAAI,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QAElD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aACrB,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC;aAC5C,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;aACrC,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAA;QAClC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAA;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAC3F;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxD,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,cAAsB;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,eAAe,EAAE,cAAc,CAAC,EACvD,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CACvC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAA;QACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;QACnD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE;iBACxB,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;iBAC7B,IAAI,CAAC,UAAU,CAAC;iBAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;YACvD,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACtC,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAA;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAAgC;QAC3C,MAAM,MAAM,GAAG;YACb,eAAe,EAAE,YAAY,CAAC,cAAc;YAC5C,YAAY,EAAE,YAAY,CAAC,WAAW;YACtC,UAAU,EAAE,YAAY,CAAC,SAAS;YAClC,aAAa,EAAE,YAAY,CAAC,YAAY;YACxC,WAAW,EAAE,YAAY,CAAC,UAAU;YACpC,MAAM,EAAE,YAAY,CAAC,KAAK;YAC1B,YAAY,EAAE,YAAY,CAAC,WAAW;YACtC,gBAAgB,EAAE,YAAY,CAAC,cAAc;YAC7C,UAAU,EAAE,YAAY,CAAC,SAAS;YAClC,UAAU,EAAE,YAAY,CAAC,SAAS;SACnC,CAAA;QACD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,mBAAmB,CAAC;aAC3B,MAAM,CAAC,MAAM,CAAC;aACd,kBAAkB,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,cAAsB,EAAE,KAAa,EAAE,SAAiB;QAC9E,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;aACzD,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,cAAsB,EAAE,EAAU;QACjD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAA;IACnE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,6BAA6B;IACX,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,eAAe,CAAC,YAAoB;QACxC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAA;QACnD,OAAO,GAAG;YACR,CAAC,CAAC;gBACE,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,YAAY,EAAE,GAAG,CAAC,cAAc;gBAChC,cAAc,EAAE,GAAG,CAAC,eAAe;gBACnC,YAAY,EAAE,GAAG,CAAC,cAAc;gBAChC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,GAAG,CAAC,UAAU;aAC1B;YACH,CAAC,CAAC,IAAI,CAAA;IACV,CAAC;CACF"}

package/dist/repositories/documents.d.ts

@@ -0,0 +1,31 @@
+import type { DocumentConnectionRecord, DocumentConnectionRepository, DocumentRecord, DocumentRepository, DocumentSourceKind, SecretCipher } from '@cat-factory/kernel';
+import type { DrizzleDb } from '../db/client.js';
+/**
+ * Workspace → document-source connections over Postgres. Source credentials (a
+ * third-party API token) are encrypted at rest with the same AES-256-GCM envelope
+ * cipher the environments/Slack integrations use — never stored plaintext. A legacy
+ * row whose `credentials` predates encryption (no `v1.` envelope) is read as
+ * plaintext JSON, then re-encrypted on the next write.
+ */
+export declare class DrizzleDocumentConnectionRepository implements DocumentConnectionRepository {
+    private readonly db;
+    private readonly cipher;
+    constructor(db: DrizzleDb, cipher: SecretCipher);
+    private decodeCredentials;
+    private rowToRecord;
+    getByWorkspace(workspaceId: string, source: DocumentSourceKind): Promise<DocumentConnectionRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<DocumentConnectionRecord[]>;
+    upsert(record: DocumentConnectionRecord): Promise<void>;
+    softDelete(workspaceId: string, source: DocumentSourceKind, at: number): Promise<void>;
+}
+/** Imported document projections over Postgres, across sources (migration 0012). */
+export declare class DrizzleDocumentRepository implements DocumentRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    upsert(record: DocumentRecord): Promise<void>;
+    get(workspaceId: string, source: DocumentSourceKind, externalId: string): Promise<DocumentRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<DocumentRecord[]>;
+    listByBlock(workspaceId: string, blockId: string): Promise<DocumentRecord[]>;
+    linkBlock(workspaceId: string, source: DocumentSourceKind, externalId: string, blockId: string | null): Promise<void>;
+}
+//# sourceMappingURL=documents.d.ts.map

package/dist/repositories/documents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.d.ts","sourceRoot":"","sources":["../../src/repositories/documents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACb,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAoBhD;;;;;;GAMG;AACH,qBAAa,mCAAoC,YAAW,4BAA4B;IAEpF,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,YACmB,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,YAAY,EACnC;YAEU,iBAAiB;YAUjB,WAAW;IAWnB,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAa1C;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAY9E;IAEK,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB5D;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW3F;CACF;AAmBD,oFAAoF;AACpF,qBAAa,yBAA0B,YAAW,kBAAkB;IACtD,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BlD;IAEK,GAAG,CACP,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAchC;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAOpE;IAEK,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAajF;IAEK,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAAC,IAAI,CAAC,CAWf;CACF"}

package/dist/repositories/documents.js

@@ -0,0 +1,176 @@
+import { and, desc, eq, isNull } from 'drizzle-orm';
+import { documentConnections, documents } from '../db/schema.js';
+// Drizzle/Postgres mirrors of the document-source D1 repositories (migration 0012).
+// A `source` discriminator tags every row, so one pair of tables serves every
+// provider. Behaviourally identical to the D1 repos so the cross-runtime conformance
+// suite asserts the same document behaviour against both stores.
+function parseCredentials(json) {
+    try {
+        const parsed = JSON.parse(json);
+        if (parsed && typeof parsed === 'object')
+            return parsed;
+    }
+    catch {
+        // A malformed bag is treated as empty; the import path then fails closed.
+    }
+    return {};
+}
+/**
+ * Workspace → document-source connections over Postgres. Source credentials (a
+ * third-party API token) are encrypted at rest with the same AES-256-GCM envelope
+ * cipher the environments/Slack integrations use — never stored plaintext. A legacy
+ * row whose `credentials` predates encryption (no `v1.` envelope) is read as
+ * plaintext JSON, then re-encrypted on the next write.
+ */
+export class DrizzleDocumentConnectionRepository {
+    db;
+    cipher;
+    constructor(db, cipher) {
+        this.db = db;
+        this.cipher = cipher;
+    }
+    async decodeCredentials(stored) {
+        if (!stored.startsWith('v1.'))
+            return parseCredentials(stored);
+        try {
+            return parseCredentials(await this.cipher.decrypt(stored));
+        }
+        catch {
+            // Wrong key / corrupt envelope: fail closed with an empty bag.
+            return {};
+        }
+    }
+    async rowToRecord(row) {
+        return {
+            workspaceId: row.workspace_id,
+            source: row.source,
+            credentials: await this.decodeCredentials(row.credentials),
+            label: row.label,
+            createdAt: row.created_at,
+            deletedAt: row.deleted_at,
+        };
+    }
+    async getByWorkspace(workspaceId, source) {
+        const rows = await this.db
+            .select()
+            .from(documentConnections)
+            .where(and(eq(documentConnections.workspace_id, workspaceId), eq(documentConnections.source, source), isNull(documentConnections.deleted_at)))
+            .limit(1);
+        return rows[0] ? this.rowToRecord(rows[0]) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const rows = await this.db
+            .select()
+            .from(documentConnections)
+            .where(and(eq(documentConnections.workspace_id, workspaceId), isNull(documentConnections.deleted_at)))
+            .orderBy(desc(documentConnections.created_at));
+        return Promise.all(rows.map((row) => this.rowToRecord(row)));
+    }
+    async upsert(record) {
+        const credentials = await this.cipher.encrypt(JSON.stringify(record.credentials));
+        // A workspace has a single live connection per source: clear any prior binding
+        // (live or tombstoned) before inserting, so reconnecting can't collide on the
+        // (workspace_id, source) primary key. Delete + insert run in one transaction so a
+        // concurrent reader never sees the connection transiently absent.
+        await this.db.transaction(async (tx) => {
+            await tx
+                .delete(documentConnections)
+                .where(and(eq(documentConnections.workspace_id, record.workspaceId), eq(documentConnections.source, record.source)));
+            await tx.insert(documentConnections).values({
+                workspace_id: record.workspaceId,
+                source: record.source,
+                credentials,
+                label: record.label,
+                created_at: record.createdAt,
+                deleted_at: null,
+            });
+        });
+    }
+    async softDelete(workspaceId, source, at) {
+        await this.db
+            .update(documentConnections)
+            .set({ deleted_at: at })
+            .where(and(eq(documentConnections.workspace_id, workspaceId), eq(documentConnections.source, source), isNull(documentConnections.deleted_at)));
+    }
+}
+function rowToDocument(row) {
+    return {
+        workspaceId: row.workspace_id,
+        source: row.source,
+        externalId: row.external_id,
+        title: row.title,
+        url: row.url,
+        excerpt: row.excerpt,
+        body: row.body,
+        linkedBlockId: row.linked_block_id,
+        syncedAt: row.synced_at,
+        deletedAt: row.deleted_at,
+    };
+}
+/** Imported document projections over Postgres, across sources (migration 0012). */
+export class DrizzleDocumentRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async upsert(record) {
+        const values = {
+            workspace_id: record.workspaceId,
+            source: record.source,
+            external_id: record.externalId,
+            title: record.title,
+            url: record.url,
+            excerpt: record.excerpt,
+            body: record.body,
+            linked_block_id: record.linkedBlockId,
+            synced_at: record.syncedAt,
+            deleted_at: null,
+        };
+        await this.db
+            .insert(documents)
+            .values(values)
+            .onConflictDoUpdate({
+            target: [documents.workspace_id, documents.source, documents.external_id],
+            set: {
+                title: values.title,
+                url: values.url,
+                excerpt: values.excerpt,
+                body: values.body,
+                linked_block_id: values.linked_block_id,
+                synced_at: values.synced_at,
+                deleted_at: null,
+            },
+        });
+    }
+    async get(workspaceId, source, externalId) {
+        const rows = await this.db
+            .select()
+            .from(documents)
+            .where(and(eq(documents.workspace_id, workspaceId), eq(documents.source, source), eq(documents.external_id, externalId), isNull(documents.deleted_at)))
+            .limit(1);
+        return rows[0] ? rowToDocument(rows[0]) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const rows = await this.db
+            .select()
+            .from(documents)
+            .where(and(eq(documents.workspace_id, workspaceId), isNull(documents.deleted_at)))
+            .orderBy(desc(documents.synced_at));
+        return rows.map(rowToDocument);
+    }
+    async listByBlock(workspaceId, blockId) {
+        const rows = await this.db
+            .select()
+            .from(documents)
+            .where(and(eq(documents.workspace_id, workspaceId), eq(documents.linked_block_id, blockId), isNull(documents.deleted_at)))
+            .orderBy(desc(documents.synced_at));
+        return rows.map(rowToDocument);
+    }
+    async linkBlock(workspaceId, source, externalId, blockId) {
+        await this.db
+            .update(documents)
+            .set({ linked_block_id: blockId })
+            .where(and(eq(documents.workspace_id, workspaceId), eq(documents.source, source), eq(documents.external_id, externalId)));
+    }
+}
+//# sourceMappingURL=documents.js.map

package/dist/repositories/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../src/repositories/documents.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEnD,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhE,oFAAoF;AACpF,8EAA8E;AAC9E,qFAAqF;AACrF,iEAAiE;AAEjE,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAgC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAID;;;;;;GAMG;AACH,MAAM,OAAO,mCAAmC;IAE3B,EAAE;IACF,MAAM;IAFzB,YACmB,EAAa,EACb,MAAoB;kBADpB,EAAE;sBACF,MAAM;IACtB,CAAC;IAEI,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAC5C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC9D,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;YAC/D,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAA0B;QAClD,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,MAAM,EAAE,GAAG,CAAC,MAA4B;YACxC,WAAW,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC;YAC1D,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,MAA0B;QAE1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,WAAW,CAAC,EACjD,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CACvC,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,WAAW,CAAC,EACjD,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CACvC,CACF;aACA,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAA;QAChD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAgC;QAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QACjF,+EAA+E;QAC/E,8EAA8E;QAC9E,kFAAkF;QAClF,kEAAkE;QAClE,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,MAAM,EAAE;iBACL,MAAM,CAAC,mBAAmB,CAAC;iBAC3B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,EACxD,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAC9C,CACF,CAAA;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC;gBAC1C,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW;gBACX,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,UAAU,EAAE,IAAI;aACjB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,MAA0B,EAAE,EAAU;QAC1E,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,YAAY,EAAE,WAAW,CAAC,EACjD,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,CACvC,CACF,CAAA;IACL,CAAC;CACF;AAID,SAAS,aAAa,CAAC,GAAgB;IACrC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,MAAM,EAAE,GAAG,CAAC,MAA4B;QACxC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,yBAAyB;IACP,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,MAAM,CAAC,MAAsB;QACjC,MAAM,MAAM,GAAG;YACb,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,UAAU,EAAE,IAAI;SACjB,CAAA;QACD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,SAAS,CAAC;aACjB,MAAM,CAAC,MAAM,CAAC;aACd,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC;YACzE,GAAG,EAAE;gBACH,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,IAAI;aACjB;SACF,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAA0B,EAC1B,UAAkB;QAElB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,EACvC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,EACrC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAC7B,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;aACjF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,OAAe;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,EACvC,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,EACtC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAC7B,CACF;aACA,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,MAA0B,EAC1B,UAAkB,EAClB,OAAsB;QAEtB,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,SAAS,CAAC;aACjB,GAAG,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;aACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,EACvC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CACtC,CACF,CAAA;IACL,CAAC;CACF"}

package/dist/repositories/drizzle.d.ts

@@ -0,0 +1,105 @@
+import type { AccountInvitationRepository, AccountRepository, EmailConnectionRepository, AgentRunRepository, BlockRepository, Clock, ExecutionRepository, MembershipRepository, MergePresetRepository, MergeThresholdPreset, ModelDefaultsRepository, ServiceFragmentDefaultsRepository, LlmCallMetricRepository, PipelineRepository, PipelineScheduleRepository, RepoBlueprintRecord, RepoBlueprintRepository, ConsensusSession, ConsensusSessionRepository, RequirementReview, RequirementReviewRepository, ClarityReview, ClarityReviewRepository, ServiceRepository, WorkspaceMountRepository, TokenUsageRepository, TrackerSettingsRepository, UserRepository, WorkspaceRepository } from '@cat-factory/kernel';
+import type { DrizzleDb } from '../db/client.js';
+/**
+ * Requirements reviews over Postgres (the Drizzle mirror of the Worker's
+ * `D1RequirementReviewRepository`, migration 0021). The reviewed items live as a JSON
+ * array in `items`; the service keeps at most one live review per block (it deletes
+ * the block's prior review before inserting a fresh one), so `getByBlock` returns the
+ * latest. Behaviourally identical to the D1 repo so the cross-runtime conformance
+ * suite asserts the same requirements-rework substitution against both stores.
+ */
+export declare class DrizzleRequirementReviewRepository implements RequirementReviewRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    getByBlock(workspaceId: string, blockId: string): Promise<RequirementReview | null>;
+    get(workspaceId: string, id: string): Promise<RequirementReview | null>;
+    upsert(workspaceId: string, review: RequirementReview): Promise<void>;
+    deleteByBlock(workspaceId: string, blockId: string): Promise<void>;
+}
+/**
+ * Consensus session transcripts (`consensus_sessions`), the Drizzle/Postgres mirror of
+ * {@link D1ConsensusSessionRepository}. One row per (execution, step); the
+ * participants/rounds/dissent live as JSON columns, upserted as the process streams.
+ */
+export declare class DrizzleConsensusSessionRepository implements ConsensusSessionRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    get(workspaceId: string, id: string): Promise<ConsensusSession | null>;
+    getByStep(workspaceId: string, executionId: string, stepIndex: number): Promise<ConsensusSession | null>;
+    getByBlock(workspaceId: string, blockId: string): Promise<ConsensusSession | null>;
+    upsert(workspaceId: string, session: ConsensusSession): Promise<void>;
+}
+/**
+ * Clarity (bug-report triage) reviews over Postgres — the Drizzle mirror of the Worker's
+ * `D1ClarityReviewRepository`. Behaviourally identical to the D1 repo so the cross-runtime
+ * conformance suite asserts the same clarified-brief substitution against both stores.
+ */
+export declare class DrizzleClarityReviewRepository implements ClarityReviewRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    getByBlock(workspaceId: string, blockId: string): Promise<ClarityReview | null>;
+    get(workspaceId: string, id: string): Promise<ClarityReview | null>;
+    upsert(workspaceId: string, review: ClarityReview): Promise<void>;
+    deleteByBlock(workspaceId: string, blockId: string): Promise<void>;
+}
+/**
+ * Per-workspace merge threshold presets over Postgres (the Drizzle mirror of the
+ * Worker's `D1MergePresetRepository`, migration 0024). Enforces the single-default
+ * invariant: promoting a preset to default demotes every other in the workspace
+ * before the upsert. The default preset cannot be removed (the service keeps that
+ * rule too; the DELETE also guards `is_default = 0`). Behaviourally identical to the
+ * D1 repo so the cross-runtime conformance suite asserts the same preset resolution.
+ */
+export declare class DrizzleMergePresetRepository implements MergePresetRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    get(workspaceId: string, id: string): Promise<MergeThresholdPreset | null>;
+    list(workspaceId: string): Promise<MergeThresholdPreset[]>;
+    getDefault(workspaceId: string): Promise<MergeThresholdPreset | null>;
+    upsert(workspaceId: string, preset: MergeThresholdPreset): Promise<void>;
+    remove(workspaceId: string, id: string): Promise<void>;
+}
+/**
+ * Repository blueprints over Postgres (the Drizzle mirror of the Worker's
+ * `D1RepoBlueprintRepository`, migration 0011). One row per (workspace, repo):
+ * `upsert` replaces the existing blueprint in place, keyed by the unique
+ * `(workspace_id, repo_owner, repo_name)` index, so the row is always the single
+ * current decomposition. The service → modules tree is persisted whole as JSON.
+ */
+export declare class DrizzleRepoBlueprintRepository implements RepoBlueprintRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    upsert(record: RepoBlueprintRecord): Promise<void>;
+    get(workspaceId: string, id: string): Promise<RepoBlueprintRecord | null>;
+    getByRepo(workspaceId: string, repoOwner: string, repoName: string): Promise<RepoBlueprintRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<RepoBlueprintRecord[]>;
+    delete(workspaceId: string, id: string): Promise<void>;
+}
+export interface CoreRepositories {
+    workspaceRepository: WorkspaceRepository;
+    accountRepository: AccountRepository;
+    membershipRepository: MembershipRepository;
+    userRepository: UserRepository;
+    invitationRepository: AccountInvitationRepository;
+    emailConnectionRepository: EmailConnectionRepository;
+    blockRepository: BlockRepository;
+    pipelineRepository: PipelineRepository;
+    executionRepository: ExecutionRepository;
+    tokenUsageRepository: TokenUsageRepository;
+    llmCallMetricRepository: LlmCallMetricRepository;
+    agentRunRepository: AgentRunRepository;
+    modelDefaultsRepository: ModelDefaultsRepository;
+    serviceFragmentDefaultsRepository: ServiceFragmentDefaultsRepository;
+    pipelineScheduleRepository: PipelineScheduleRepository;
+    trackerSettingsRepository: TrackerSettingsRepository;
+    serviceRepository: ServiceRepository;
+    workspaceMountRepository: WorkspaceMountRepository;
+    requirementReviewRepository: RequirementReviewRepository;
+    consensusSessionRepository: ConsensusSessionRepository;
+    clarityReviewRepository: ClarityReviewRepository;
+    mergePresetRepository: MergePresetRepository;
+    repoBlueprintRepository: RepoBlueprintRepository;
+}
+/** Build the Drizzle/Postgres-backed core repositories. */
+export declare function createDrizzleRepositories(db: DrizzleDb, clock: Clock): CoreRepositories;
+//# sourceMappingURL=drizzle.d.ts.map

package/dist/repositories/drizzle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle.d.ts","sourceRoot":"","sources":["../../src/repositories/drizzle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,2BAA2B,EAE3B,iBAAiB,EAKjB,yBAAyB,EAKzB,kBAAkB,EAGlB,eAAe,EACf,KAAK,EAEL,mBAAmB,EAEnB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,iCAAiC,EAEjC,uBAAuB,EAIvB,kBAAkB,EAElB,0BAA0B,EAG1B,mBAAmB,EACnB,uBAAuB,EAEvB,gBAAgB,EAChB,0BAA0B,EAC1B,iBAAiB,EAEjB,2BAA2B,EAC3B,aAAa,EAEb,uBAAuB,EAIvB,iBAAiB,EAGjB,wBAAwB,EAIxB,oBAAoB,EAGpB,yBAAyB,EAGzB,cAAc,EAGd,mBAAmB,EAEpB,MAAM,qBAAqB,CAAA;AAa5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AA0jDhD;;;;;;;GAOG;AACH,qBAAa,kCAAmC,YAAW,2BAA2B;IACxE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAaxF;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAO5E;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8B1E;IAEK,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASvE;CACF;AAyDD;;;;GAIG;AACH,qBAAa,iCAAkC,YAAW,0BAA0B;IACtE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAO3E;IAEK,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAclC;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAavF;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC1E;CACF;AAED;;;;GAIG;AACH,qBAAa,8BAA+B,YAAW,uBAAuB;IAChE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAUpF;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAOxE;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BtE;IAEK,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvE;CACF;AAoBD;;;;;;;GAOG;AACH,qBAAa,4BAA6B,YAAW,qBAAqB;IAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAS/E;IAEK,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAO/D;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAa1E;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8C7E;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3D;CACF;AAiBD;;;;;;GAMG;AACH,qBAAa,8BAA+B,YAAW,uBAAuB;IAChE,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBvD;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAO9E;IAEK,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAarC;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAOzE;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI3D;CACF;AAED,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,cAAc,EAAE,cAAc,CAAA;IAC9B,oBAAoB,EAAE,2BAA2B,CAAA;IACjD,yBAAyB,EAAE,yBAAyB,CAAA;IACpD,eAAe,EAAE,eAAe,CAAA;IAChC,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,iCAAiC,EAAE,iCAAiC,CAAA;IACpE,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,yBAAyB,EAAE,yBAAyB,CAAA;IACpD,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,wBAAwB,EAAE,wBAAwB,CAAA;IAClD,2BAA2B,EAAE,2BAA2B,CAAA;IACxD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,qBAAqB,CAAA;IAC5C,uBAAuB,EAAE,uBAAuB,CAAA;CACjD;AAED,2DAA2D;AAC3D,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,gBAAgB,CA0BvF"}