@cat-factory/node-server 0.6.0

package/dist/repositories/slack.js

@@ -0,0 +1,150 @@
+import { and, eq, isNull } from 'drizzle-orm';
+import { slackConnections, slackMemberMappings, slackSettings } from '../db/schema.js';
+function rowToConnection(row) {
+    return {
+        accountId: row.account_id,
+        teamId: row.team_id,
+        teamName: row.team_name,
+        teamIconUrl: row.team_icon_url,
+        botUserId: row.bot_user_id,
+        scopesJson: row.scopes,
+        tokenCipher: row.token_cipher,
+        createdAt: row.created_at,
+        deletedAt: row.deleted_at,
+    };
+}
+export class DrizzleSlackConnectionRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async getByAccount(accountId) {
+        const rows = await this.db
+            .select()
+            .from(slackConnections)
+            .where(eq(slackConnections.account_id, accountId))
+            .limit(1);
+        return rows[0] ? rowToConnection(rows[0]) : null;
+    }
+    async getByTeam(teamId) {
+        const rows = await this.db
+            .select()
+            .from(slackConnections)
+            .where(and(eq(slackConnections.team_id, teamId), isNull(slackConnections.deleted_at)))
+            .limit(1);
+        return rows[0] ? rowToConnection(rows[0]) : null;
+    }
+    async upsert(record) {
+        const values = {
+            account_id: record.accountId,
+            team_id: record.teamId,
+            team_name: record.teamName,
+            team_icon_url: record.teamIconUrl,
+            bot_user_id: record.botUserId,
+            scopes: record.scopesJson,
+            token_cipher: record.tokenCipher,
+            created_at: record.createdAt,
+            deleted_at: null,
+        };
+        await this.db
+            .insert(slackConnections)
+            .values(values)
+            .onConflictDoUpdate({
+            target: [slackConnections.account_id],
+            set: {
+                team_id: values.team_id,
+                team_name: values.team_name,
+                team_icon_url: values.team_icon_url,
+                bot_user_id: values.bot_user_id,
+                scopes: values.scopes,
+                token_cipher: values.token_cipher,
+                created_at: values.created_at,
+                deleted_at: null,
+            },
+        });
+    }
+    async softDelete(accountId, at) {
+        await this.db
+            .update(slackConnections)
+            .set({ deleted_at: at })
+            .where(and(eq(slackConnections.account_id, accountId), isNull(slackConnections.deleted_at)));
+    }
+}
+export class DrizzleSlackSettingsRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async getByWorkspace(workspaceId) {
+        const rows = await this.db
+            .select()
+            .from(slackSettings)
+            .where(eq(slackSettings.workspace_id, workspaceId))
+            .limit(1);
+        const row = rows[0];
+        if (!row)
+            return null;
+        return {
+            workspaceId: row.workspace_id,
+            routesJson: row.routes,
+            mentionsEnabled: row.mentions_enabled === 1,
+            updatedAt: row.updated_at,
+        };
+    }
+    async upsert(record) {
+        const values = {
+            workspace_id: record.workspaceId,
+            routes: record.routesJson,
+            mentions_enabled: record.mentionsEnabled ? 1 : 0,
+            updated_at: record.updatedAt,
+        };
+        await this.db
+            .insert(slackSettings)
+            .values(values)
+            .onConflictDoUpdate({
+            target: [slackSettings.workspace_id],
+            set: {
+                routes: values.routes,
+                mentions_enabled: values.mentions_enabled,
+                updated_at: values.updated_at,
+            },
+        });
+    }
+}
+export class DrizzleSlackMemberMappingRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async getByAccount(accountId) {
+        const rows = await this.db
+            .select()
+            .from(slackMemberMappings)
+            .where(eq(slackMemberMappings.account_id, accountId))
+            .limit(1);
+        if (!rows[0])
+            return [];
+        try {
+            const parsed = JSON.parse(rows[0].entries);
+            return Array.isArray(parsed) ? parsed : [];
+        }
+        catch {
+            return [];
+        }
+    }
+    async upsert(accountId, entries, at) {
+        const values = {
+            account_id: accountId,
+            entries: JSON.stringify(entries),
+            updated_at: at,
+        };
+        await this.db
+            .insert(slackMemberMappings)
+            .values(values)
+            .onConflictDoUpdate({
+            target: [slackMemberMappings.account_id],
+            set: { entries: values.entries, updated_at: values.updated_at },
+        });
+    }
+}
+//# sourceMappingURL=slack.js.map

package/dist/repositories/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../../src/repositories/slack.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAStF,SAAS,eAAe,CAAC,GAAuB;IAC9C,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,SAAS,EAAE,GAAG,CAAC,WAAW;QAC1B,UAAU,EAAE,GAAG,CAAC,MAAM;QACtB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,OAAO,gCAAgC;IACd,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;aACjD,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;aACrF,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA6B;QACxC,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,MAAM,CAAC,WAAW;YACjC,WAAW,EAAE,MAAM,CAAC,SAAS;YAC7B,MAAM,EAAE,MAAM,CAAC,UAAU;YACzB,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,UAAU,EAAE,IAAI;SACjB,CAAA;QACD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,gBAAgB,CAAC;aACxB,MAAM,CAAC,MAAM,CAAC;aACd,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC;YACrC,GAAG,EAAE;gBACH,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,IAAI;aACjB;SACF,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,EAAU;QAC5C,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;aACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAChG,CAAC;CACF;AAID,MAAM,OAAO,8BAA8B;IACZ,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;aAClD,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,MAAM,GAAG,GAAiC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,UAAU,EAAE,GAAG,CAAC,MAAM;YACtB,eAAe,EAAE,GAAG,CAAC,gBAAgB,KAAK,CAAC;YAC3C,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA2B;QACtC,MAAM,MAAM,GAAG;YACb,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,MAAM,EAAE,MAAM,CAAC,UAAU;YACzB,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,UAAU,EAAE,MAAM,CAAC,SAAS;SAC7B,CAAA;QACD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,aAAa,CAAC;aACrB,MAAM,CAAC,MAAM,CAAC;aACd,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC;YACpC,GAAG,EAAE;gBACH,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;SACF,CAAC,CAAA;IACN,CAAC;CACF;AAED,MAAM,OAAO,mCAAmC;IACjB,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;aACpD,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;YAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAoC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,OAAkC,EAAE,EAAU;QAC5E,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAChC,UAAU,EAAE,EAAE;SACf,CAAA;QACD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,mBAAmB,CAAC;aAC3B,MAAM,CAAC,MAAM,CAAC;aACd,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC;YACxC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;SAChE,CAAC,CAAA;IACN,CAAC;CACF"}

package/dist/repositories/tasks.d.ts

@@ -0,0 +1,24 @@
+import type { SecretCipher, TaskConnectionRecord, TaskConnectionRepository, TaskRecord, TaskRepository, TaskSourceKind } from '@cat-factory/kernel';
+import type { DrizzleDb } from '../db/client.js';
+export declare class DrizzleTaskConnectionRepository implements TaskConnectionRepository {
+    private readonly db;
+    private readonly cipher;
+    constructor(db: DrizzleDb, cipher: SecretCipher);
+    /** Decode the stored credential blob, decrypting the envelope when present. */
+    private decodeCredentials;
+    private rowToRecord;
+    getByWorkspace(workspaceId: string, source: TaskSourceKind): Promise<TaskConnectionRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<TaskConnectionRecord[]>;
+    upsert(record: TaskConnectionRecord): Promise<void>;
+    softDelete(workspaceId: string, source: TaskSourceKind, at: number): Promise<void>;
+}
+export declare class DrizzleTaskRepository implements TaskRepository {
+    private readonly db;
+    constructor(db: DrizzleDb);
+    upsert(record: TaskRecord): Promise<void>;
+    get(workspaceId: string, source: TaskSourceKind, externalId: string): Promise<TaskRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<TaskRecord[]>;
+    listByBlock(workspaceId: string, blockId: string): Promise<TaskRecord[]>;
+    linkBlock(workspaceId: string, source: TaskSourceKind, externalId: string, blockId: string | null): Promise<void>;
+}
+//# sourceMappingURL=tasks.d.ts.map

package/dist/repositories/tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/repositories/tasks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAEZ,oBAAoB,EACpB,wBAAwB,EACxB,UAAU,EACV,cAAc,EACd,cAAc,EACf,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AA6BhD,qBAAa,+BAAgC,YAAW,wBAAwB;IAE5E,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,YACmB,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,YAAY,EACnC;IAEJ,+EAA+E;YACjE,iBAAiB;YASjB,WAAW;IAanB,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAYtC;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAO1E;IAEK,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBxD;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWvF;CACF;AAuBD,qBAAa,qBAAsB,YAAW,cAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,EAAE;IAA/B,YAA6B,EAAE,EAAE,SAAS,EAAI;IAExC,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC9C;IAEK,GAAG,CACP,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAa5B;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAOhE;IAEK,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAa7E;IAEK,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAAC,IAAI,CAAC,CAWf;CACF"}

package/dist/repositories/tasks.js

@@ -0,0 +1,194 @@
+import { and, desc, eq, isNull } from 'drizzle-orm';
+import { taskConnections, tasks } from '../db/schema.js';
+// Drizzle/Postgres implementations of the task-source ports, mirroring the
+// Cloudflare facade's `D1TaskConnectionRepository` / `D1TaskRepository` (D1
+// migration 0014) so the Jira integration behaves identically across runtimes.
+// Source credentials are third-party secrets, encrypted at rest with the same
+// AES-256-GCM envelope the Cloudflare store uses (never written in plaintext).
+function parseCredentials(json) {
+    try {
+        const parsed = JSON.parse(json);
+        if (parsed && typeof parsed === 'object')
+            return parsed;
+    }
+    catch {
+        // A malformed bag is treated as empty; the import path then fails closed.
+    }
+    return {};
+}
+function parseJsonArray(json) {
+    try {
+        const parsed = JSON.parse(json);
+        if (Array.isArray(parsed))
+            return parsed;
+    }
+    catch {
+        // A malformed blob is treated as empty.
+    }
+    return [];
+}
+export class DrizzleTaskConnectionRepository {
+    db;
+    cipher;
+    constructor(db, cipher) {
+        this.db = db;
+        this.cipher = cipher;
+    }
+    /** Decode the stored credential blob, decrypting the envelope when present. */
+    async decodeCredentials(stored) {
+        if (!stored.startsWith('v1.'))
+            return parseCredentials(stored);
+        try {
+            return parseCredentials(await this.cipher.decrypt(stored));
+        }
+        catch {
+            return {};
+        }
+    }
+    async rowToRecord(row) {
+        return {
+            workspaceId: row.workspace_id,
+            source: row.source,
+            credentials: await this.decodeCredentials(row.credentials),
+            label: row.label,
+            createdAt: row.created_at,
+            deletedAt: row.deleted_at,
+        };
+    }
+    async getByWorkspace(workspaceId, source) {
+        const [row] = await this.db
+            .select()
+            .from(taskConnections)
+            .where(and(eq(taskConnections.workspace_id, workspaceId), eq(taskConnections.source, source), isNull(taskConnections.deleted_at)));
+        return row ? this.rowToRecord(row) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const rows = await this.db
+            .select()
+            .from(taskConnections)
+            .where(and(eq(taskConnections.workspace_id, workspaceId), isNull(taskConnections.deleted_at)))
+            .orderBy(desc(taskConnections.created_at));
+        return Promise.all(rows.map((row) => this.rowToRecord(row)));
+    }
+    async upsert(record) {
+        const credentials = await this.cipher.encrypt(JSON.stringify(record.credentials));
+        // A workspace has a single live connection per source: clear any prior binding
+        // (live or tombstoned) before inserting, so reconnecting can't collide on the PK.
+        await this.db.transaction(async (tx) => {
+            await tx
+                .delete(taskConnections)
+                .where(and(eq(taskConnections.workspace_id, record.workspaceId), eq(taskConnections.source, record.source)));
+            await tx.insert(taskConnections).values({
+                workspace_id: record.workspaceId,
+                source: record.source,
+                credentials,
+                label: record.label,
+                created_at: record.createdAt,
+                deleted_at: null,
+            });
+        });
+    }
+    async softDelete(workspaceId, source, at) {
+        await this.db
+            .update(taskConnections)
+            .set({ deleted_at: at })
+            .where(and(eq(taskConnections.workspace_id, workspaceId), eq(taskConnections.source, source), isNull(taskConnections.deleted_at)));
+    }
+}
+function rowToTask(row) {
+    return {
+        workspaceId: row.workspace_id,
+        source: row.source,
+        externalId: row.external_id,
+        title: row.title,
+        url: row.url,
+        status: row.status,
+        type: row.type,
+        assignee: row.assignee,
+        priority: row.priority,
+        labels: parseJsonArray(row.labels),
+        description: row.description,
+        comments: parseJsonArray(row.comments),
+        excerpt: row.excerpt,
+        linkedBlockId: row.linked_block_id,
+        syncedAt: row.synced_at,
+        deletedAt: row.deleted_at,
+    };
+}
+export class DrizzleTaskRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async upsert(record) {
+        const values = {
+            workspace_id: record.workspaceId,
+            source: record.source,
+            external_id: record.externalId,
+            title: record.title,
+            url: record.url,
+            status: record.status,
+            type: record.type,
+            assignee: record.assignee,
+            priority: record.priority,
+            labels: JSON.stringify(record.labels),
+            description: record.description,
+            comments: JSON.stringify(record.comments),
+            excerpt: record.excerpt,
+            linked_block_id: record.linkedBlockId,
+            synced_at: record.syncedAt,
+            deleted_at: null,
+        };
+        await this.db
+            .insert(tasks)
+            .values(values)
+            .onConflictDoUpdate({
+            target: [tasks.workspace_id, tasks.source, tasks.external_id],
+            set: {
+                title: values.title,
+                url: values.url,
+                status: values.status,
+                type: values.type,
+                assignee: values.assignee,
+                priority: values.priority,
+                labels: values.labels,
+                description: values.description,
+                comments: values.comments,
+                excerpt: values.excerpt,
+                linked_block_id: values.linked_block_id,
+                synced_at: values.synced_at,
+                deleted_at: null,
+            },
+        });
+    }
+    async get(workspaceId, source, externalId) {
+        const [row] = await this.db
+            .select()
+            .from(tasks)
+            .where(and(eq(tasks.workspace_id, workspaceId), eq(tasks.source, source), eq(tasks.external_id, externalId), isNull(tasks.deleted_at)));
+        return row ? rowToTask(row) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const rows = await this.db
+            .select()
+            .from(tasks)
+            .where(and(eq(tasks.workspace_id, workspaceId), isNull(tasks.deleted_at)))
+            .orderBy(desc(tasks.synced_at));
+        return rows.map(rowToTask);
+    }
+    async listByBlock(workspaceId, blockId) {
+        const rows = await this.db
+            .select()
+            .from(tasks)
+            .where(and(eq(tasks.workspace_id, workspaceId), eq(tasks.linked_block_id, blockId), isNull(tasks.deleted_at)))
+            .orderBy(desc(tasks.synced_at));
+        return rows.map(rowToTask);
+    }
+    async linkBlock(workspaceId, source, externalId, blockId) {
+        await this.db
+            .update(tasks)
+            .set({ linked_block_id: blockId })
+            .where(and(eq(tasks.workspace_id, workspaceId), eq(tasks.source, source), eq(tasks.external_id, externalId)));
+    }
+}
+//# sourceMappingURL=tasks.js.map

package/dist/repositories/tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../../src/repositories/tasks.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEnD,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAExD,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAE/E,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAgC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,cAAc,CAAI,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAa,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,OAAO,+BAA+B;IAEvB,EAAE;IACF,MAAM;IAFzB,YACmB,EAAa,EACb,MAAoB;kBADpB,EAAE;sBACF,MAAM;IACtB,CAAC;IAEJ,+EAA+E;IACvE,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAC5C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC9D,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,GAAwC;QAExC,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAwB;YACpC,WAAW,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC;YAC1D,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,MAAsB;QAEtB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,WAAW,CAAC,EAC7C,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CACnC,CACF,CAAA;QACH,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;aAC7F,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAA;QAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA4B;QACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QACjF,+EAA+E;QAC/E,kFAAkF;QAClF,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACrC,MAAM,EAAE;iBACL,MAAM,CAAC,eAAe,CAAC;iBACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,EACpD,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAC1C,CACF,CAAA;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;gBACtC,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW;gBACX,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,UAAU,EAAE,IAAI;aACjB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,MAAsB,EAAE,EAAU;QACtE,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,eAAe,CAAC;aACvB,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,WAAW,CAAC,EAC7C,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CACnC,CACF,CAAA;IACL,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAA8B;IAC/C,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,MAAM,EAAE,GAAG,CAAC,MAAwB;QACpC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,cAAc,CAAS,GAAG,CAAC,MAAM,CAAC;QAC1C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,cAAc,CAAc,GAAG,CAAC,QAAQ,CAAC;QACnD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,OAAO,qBAAqB;IACH,EAAE;IAA/B,YAA6B,EAAa;kBAAb,EAAE;IAAc,CAAC;IAE9C,KAAK,CAAC,MAAM,CAAC,MAAkB;QAC7B,MAAM,MAAM,GAAG;YACb,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,UAAU;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,UAAU,EAAE,IAAI;SACjB,CAAA;QACD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,KAAK,CAAC;aACb,MAAM,CAAC,MAAM,CAAC;aACd,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;YAC7D,GAAG,EAAE;gBACH,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,IAAI;aACjB;SACF,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAAsB,EACtB,UAAkB;QAElB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,EACnC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EACxB,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,EACjC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CACzB,CACF,CAAA;QACH,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;aACzE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,OAAe;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,EACnC,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,EAClC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CACzB,CACF;aACA,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,MAAsB,EACtB,UAAkB,EAClB,OAAsB;QAEtB,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,KAAK,CAAC;aACb,GAAG,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;aACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,EACnC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EACxB,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAClC,CACF,CAAA;IACL,CAAC;CACF"}

package/dist/retention.d.ts

@@ -0,0 +1,38 @@
+import type { Clock, LlmCallMetricRepository, PipelineScheduleRepository, SubscriptionActivationRepository, TokenUsageRepository } from '@cat-factory/kernel';
+import type { Logger, RetentionConfig } from '@cat-factory/server';
+/** Recurring-pipeline run history is kept ~1 week (the inspector's window). */
+export declare const SCHEDULE_RUN_RETENTION_MS: number;
+/** The Node-persisted repositories with an age-based prune. */
+export interface RetentionRepos {
+    tokenUsageRepository: Pick<TokenUsageRepository, 'deleteOlderThan'>;
+    llmCallMetricRepository: Pick<LlmCallMetricRepository, 'deleteOlderThan'>;
+    pipelineScheduleRepository: Pick<PipelineScheduleRepository, 'pruneRunsBefore'>;
+    subscriptionActivationRepository: Pick<SubscriptionActivationRepository, 'deleteExpired'>;
+}
+/** Rows reclaimed from each table, for logging. */
+export interface RetentionResult {
+    tokenUsage: number;
+    llmCallMetrics: number;
+    scheduleRuns: number;
+    activations: number;
+}
+/**
+ * How often the retention sweep runs. The windows are measured in days, so an hourly
+ * pass keeps the tables bounded at negligible cost — each prune is an indexed range
+ * delete that usually reclaims nothing.
+ */
+export declare const RETENTION_SWEEP_INTERVAL_MS: number;
+/**
+ * Prune each Node-persisted unbounded table to its retention window. Pure over its
+ * repos so it is unit-testable without a database (mirrors the Worker's pure
+ * `sweepRetention`). Returns the counts removed per table.
+ */
+export declare function sweepRetention(repos: RetentionRepos, retention: RetentionConfig, now: number): Promise<RetentionResult>;
+/**
+ * Start the periodic retention sweep, the Node analogue of the Worker's cron prune.
+ * Runs once immediately (so a restart reclaims promptly) then on an hourly timer.
+ * Best-effort: a failed sweep is logged and retried next tick, never thrown. Returns
+ * a stop function that clears the timer.
+ */
+export declare function startRetentionSweeper(repos: RetentionRepos, retention: RetentionConfig, clock: Clock, log: Logger): () => void;
+//# sourceMappingURL=retention.d.ts.map

package/dist/retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.d.ts","sourceRoot":"","sources":["../src/retention.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,gCAAgC,EAChC,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAElE,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,QAA0B,CAAA;AAUhE,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAA;IACnE,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,CAAA;IACzE,0BAA0B,EAAE,IAAI,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAA;IAG/E,gCAAgC,EAAE,IAAI,CAAC,gCAAgC,EAAE,eAAe,CAAC,CAAA;CAC1F;AAED,mDAAmD;AACnD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,QAAiB,CAAA;AAYzD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,cAAc,EACrB,SAAS,EAAE,eAAe,EAC1B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,eAAe,CAAC,CAe1B;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,cAAc,EACrB,SAAS,EAAE,eAAe,EAC1B,KAAK,EAAE,KAAK,EACZ,GAAG,EAAE,MAAM,GACV,MAAM,IAAI,CAyBZ"}

package/dist/retention.js

@@ -0,0 +1,53 @@
+/** Recurring-pipeline run history is kept ~1 week (the inspector's window). */
+export const SCHEDULE_RUN_RETENTION_MS = 7 * 24 * 60 * 60 * 1000;
+/**
+ * How often the retention sweep runs. The windows are measured in days, so an hourly
+ * pass keeps the tables bounded at negligible cost — each prune is an indexed range
+ * delete that usually reclaims nothing.
+ */
+export const RETENTION_SWEEP_INTERVAL_MS = 60 * 60 * 1000;
+/** Delete rows older than `now - windowMs`, treating a non-positive window as "disabled". */
+async function prune(windowMs, now, del) {
+    if (windowMs <= 0)
+        return 0;
+    return del(now - windowMs);
+}
+/**
+ * Prune each Node-persisted unbounded table to its retention window. Pure over its
+ * repos so it is unit-testable without a database (mirrors the Worker's pure
+ * `sweepRetention`). Returns the counts removed per table.
+ */
+export async function sweepRetention(repos, retention, now) {
+    return {
+        tokenUsage: await prune(retention.tokenUsageMs, now, (c) => repos.tokenUsageRepository.deleteOlderThan(c)),
+        llmCallMetrics: await prune(retention.llmCallMetricsMs, now, (c) => repos.llmCallMetricRepository.deleteOlderThan(c)),
+        // Fixed ~1-week window (not part of the configurable retention policy).
+        scheduleRuns: await prune(SCHEDULE_RUN_RETENTION_MS, now, (c) => repos.pipelineScheduleRepository.pruneRunsBefore(c)),
+        // Delete activations whose own TTL (expires_at) has passed — `now`, not a window.
+        activations: await repos.subscriptionActivationRepository.deleteExpired(now),
+    };
+}
+/**
+ * Start the periodic retention sweep, the Node analogue of the Worker's cron prune.
+ * Runs once immediately (so a restart reclaims promptly) then on an hourly timer.
+ * Best-effort: a failed sweep is logged and retried next tick, never thrown. Returns
+ * a stop function that clears the timer.
+ */
+export function startRetentionSweeper(repos, retention, clock, log) {
+    const tick = async () => {
+        try {
+            const { tokenUsage, llmCallMetrics, scheduleRuns, activations } = await sweepRetention(repos, retention, clock.now());
+            if (tokenUsage > 0 || llmCallMetrics > 0 || scheduleRuns > 0 || activations > 0) {
+                log.info({ tokenUsage, llmCallMetrics, scheduleRuns, activations }, 'retention sweep reclaimed rows');
+            }
+        }
+        catch (error) {
+            log.error({ err: error instanceof Error ? error.message : String(error) }, 'retention sweep failed');
+        }
+    };
+    void tick();
+    const timer = setInterval(() => void tick(), RETENTION_SWEEP_INTERVAL_MS);
+    timer.unref?.(); // never keep the process alive on the sweep timer alone
+    return () => clearInterval(timer);
+}
+//# sourceMappingURL=retention.js.map

package/dist/retention.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../src/retention.ts"],"names":[],"mappings":"AASA,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AA4BhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEzD,6FAA6F;AAC7F,KAAK,UAAU,KAAK,CAClB,QAAgB,EAChB,GAAW,EACX,GAAwC;IAExC,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,CAAC,CAAA;IAC3B,OAAO,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAqB,EACrB,SAA0B,EAC1B,GAAW;IAEX,OAAO;QACL,UAAU,EAAE,MAAM,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACzD,KAAK,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,CAC9C;QACD,cAAc,EAAE,MAAM,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACjE,KAAK,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC,CAAC,CACjD;QACD,wEAAwE;QACxE,YAAY,EAAE,MAAM,KAAK,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9D,KAAK,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC,CACpD;QACD,kFAAkF;QAClF,WAAW,EAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,aAAa,CAAC,GAAG,CAAC;KAC7E,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAqB,EACrB,SAA0B,EAC1B,KAAY,EACZ,GAAW;IAEX,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAAM,cAAc,CACpF,KAAK,EACL,SAAS,EACT,KAAK,CAAC,GAAG,EAAE,CACZ,CAAA;YACD,IAAI,UAAU,GAAG,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,IAAI,CACN,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,EACzD,gCAAgC,CACjC,CAAA;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,CACP,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC/D,wBAAwB,CACzB,CAAA;QACH,CAAC;IACH,CAAC,CAAA;IACD,KAAK,IAAI,EAAE,CAAA;IACX,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,2BAA2B,CAAC,CAAA;IACzE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA,CAAC,wDAAwD;IACxE,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;AACnC,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,10 @@
+import type { Clock, IdGenerator } from '@cat-factory/kernel';
+/** Wall-clock time source. */
+export declare class SystemClock implements Clock {
+    now(): number;
+}
+/** Prefixed, collision-resistant ids (`blk_<uuid-ish>`), built on Web Crypto. */
+export declare class CryptoIdGenerator implements IdGenerator {
+    next(prefix: string): string;
+}
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAE7D,8BAA8B;AAC9B,qBAAa,WAAY,YAAW,KAAK;IACvC,GAAG,IAAI,MAAM,CAEZ;CACF;AAED,iFAAiF;AACjF,qBAAa,iBAAkB,YAAW,WAAW;IACnD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3B;CACF"}

package/dist/runtime.js

@@ -0,0 +1,13 @@
+/** Wall-clock time source. */
+export class SystemClock {
+    now() {
+        return Date.now();
+    }
+}
+/** Prefixed, collision-resistant ids (`blk_<uuid-ish>`), built on Web Crypto. */
+export class CryptoIdGenerator {
+    next(prefix) {
+        return `${prefix}_${crypto.randomUUID().replace(/-/g, '').slice(0, 24)}`;
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAEA,8BAA8B;AAC9B,MAAM,OAAO,WAAW;IACtB,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,CAAA;IACnB,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,iBAAiB;IAC5B,IAAI,CAAC,MAAc;QACjB,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;IAC1E,CAAC;CACF"}

package/dist/server.d.ts

@@ -0,0 +1,41 @@
+import { serve } from '@hono/node-server';
+import { type AppEnv, type ServerContainer } from '@cat-factory/server';
+import { Hono } from 'hono';
+import { type NodeContainerOptions } from './container.js';
+export interface CreateServerOptions extends NodeContainerOptions {
+}
+/** Build the Hono app around a ready container (shared by `createServer` + `start`). */
+export declare function createApp(container: ServerContainer, env?: NodeJS.ProcessEnv): Hono<AppEnv>;
+/**
+ * Build the app from container options (convenience, e.g. embedding / tests).
+ *
+ * WARNING: unless a started `boss` is passed in `options`, the container wires the
+ * engine's NoopWorkRunner — a started execution then returns `running` but is never
+ * driven to completion. Use {@link start} for a fully-wired service (durable pg-boss
+ * worker + stale-run sweeper); pass `boss` here only if you drive runs yourself.
+ */
+export declare function createServer(options: CreateServerOptions): Hono<AppEnv>;
+/**
+ * Boot the Node HTTP server: connect to Postgres (`DATABASE_URL`), ensure the schema,
+ * start pg-boss + the durable execution worker + the stale-run sweeper, build the app,
+ * and listen. Registers SIGTERM/SIGINT handlers for a clean, ordered shutdown.
+ */
+export declare function start(options?: {
+    env?: NodeJS.ProcessEnv;
+    /**
+     * The composition root to build. Defaults to {@link buildNodeContainer}; a sibling
+     * facade (local mode) passes its own builder (same signature) so it reuses this
+     * whole boot sequence — Postgres + pg-boss + sweepers — while supplying only its
+     * differentiators (e.g. the local Docker transport + PAT token source).
+     */
+    buildContainer?: (options: NodeContainerOptions) => ServerContainer;
+    /**
+     * The address to bind the HTTP listener to. Defaults to `HOST` from the env, else
+     * all interfaces. A facade or operator can pass `127.0.0.1` to keep the service off
+     * the LAN — but note repo-operating agent containers reach this service's LLM proxy
+     * via `PUBLIC_URL`, so on native Linux Docker (where that resolves to the bridge
+     * gateway, not loopback) a loopback-only bind makes the proxy unreachable to them.
+     */
+    host?: string;
+}): Promise<ReturnType<typeof serve>>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACzC,OAAO,EACL,KAAK,MAAM,EACX,KAAK,eAAe,EAMrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,OAAO,EAAE,KAAK,oBAAoB,EAAsB,MAAM,gBAAgB,CAAA;AAsB9E,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;CAAG;AAEpE,wFAAwF;AACxF,wBAAgB,SAAS,CACvB,SAAS,EAAE,eAAe,EAC1B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,IAAI,CAAC,MAAM,CAAC,CAkBd;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,CAEvE;AAED;;;;GAIG;AACH,wBAAsB,KAAK,CACzB,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,eAAe,CAAA;IACnE;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;CACT,GACL,OAAO,CAAC,UAAU,CAAC,OAAO,KAAK,CAAC,CAAC,CA+FnC"}