@cat-factory/worker 0.110.1 → 0.111.0

package/dist/infrastructure/repositories/D1BrainstormSessionRepository.d.ts

@@ -3,9 +3,11 @@ import type { BrainstormSession, BrainstormStage } from '@cat-factory/contracts'
 import type { D1Database } from '@cloudflare/workers-types';
 /**
  * Brainstorm (structured-dialogue) sessions, stored one row per session in
- * `brainstorm_sessions`. The mirror of {@link D1ClarityReviewRepository}, but keyed by
- * (block, stage): the service keeps at most one live session per block+stage, so
- * `getByBlockStage` returns the latest for that stage.
+ * `brainstorm_sessions`. The mirror of {@link D1ClarityReviewRepository} — same rev-guarded
+ * `compareAndSwap` contract — but keyed by (block, stage): a UNIQUE index on
+ * (workspace_id, block_id, stage) (migration 0066) keeps one live session per block+stage, which
+ * `replaceForBlockStage` upserts against, so `getByBlockStage` returns it and the block's other
+ * stage is never disturbed.
  */
 export declare class D1BrainstormSessionRepository implements BrainstormSessionRepository {
     private readonly db;
@@ -14,7 +16,15 @@ export declare class D1BrainstormSessionRepository implements BrainstormSessionR
     });
     getByBlockStage(workspaceId: string, blockId: string, stage: BrainstormStage): Promise<BrainstormSession | null>;
     get(workspaceId: string, id: string): Promise<BrainstormSession | null>;
+    /**
+     * Force-write by session id. A fresh insert starts at rev 0; a write over an existing row BUMPS
+     * it, so a concurrent compareAndSwap holding the old revision still detects that the row moved.
+     * Writing a DIFFERENT id onto a block+stage that already has a session now violates the UNIQUE
+     * index (migration 0066) — loudly, which is the point: only {@link replaceForBlockStage} may
+     * change which session is a block+stage's live one.
+     */
     upsert(workspaceId: string, session: BrainstormSession): Promise<void>;
-    deleteByBlockStage(workspaceId: string, blockId: string, stage: BrainstormStage): Promise<void>;
+    compareAndSwap(workspaceId: string, session: BrainstormSession): Promise<boolean>;
+    replaceForBlockStage(workspaceId: string, session: BrainstormSession): Promise<void>;
 }
 //# sourceMappingURL=D1BrainstormSessionRepository.d.ts.map

package/dist/infrastructure/repositories/D1BrainstormSessionRepository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"D1BrainstormSessionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1BrainstormSessionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,KAAK,EAAkB,iBAAiB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAChG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAuC3D;;;;;GAKG;AACH,qBAAa,6BAA8B,YAAW,2BAA2B;IAC/E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAUnC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAM5E;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC3E;IAEK,kBAAkB,CACtB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,IAAI,CAAC,CAOf;CACF"}
+{"version":3,"file":"D1BrainstormSessionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1BrainstormSessionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,KAAK,EAAkB,iBAAiB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAChG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAyC3D;;;;;;;GAOG;AACH,qBAAa,6BAA8B,YAAW,2BAA2B;IAC/E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAUnC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAM5E;IAED;;;;;;OAMG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC3E;IAEK,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAqCtF;IAEK,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwCzF;CACF"}

package/dist/infrastructure/repositories/D1BrainstormSessionRepository.js

@@ -18,15 +18,18 @@ function rowToSession(row) {
         convergedDirection: row.converged_direction,
         iteration: row.iteration,
         maxIterations: row.max_iterations,
+        rev: row.rev ?? 0,
         createdAt: row.created_at,
         updatedAt: row.updated_at,
     };
 }
 /**
  * Brainstorm (structured-dialogue) sessions, stored one row per session in
- * `brainstorm_sessions`. The mirror of {@link D1ClarityReviewRepository}, but keyed by
- * (block, stage): the service keeps at most one live session per block+stage, so
- * `getByBlockStage` returns the latest for that stage.
+ * `brainstorm_sessions`. The mirror of {@link D1ClarityReviewRepository} — same rev-guarded
+ * `compareAndSwap` contract — but keyed by (block, stage): a UNIQUE index on
+ * (workspace_id, block_id, stage) (migration 0066) keeps one live session per block+stage, which
+ * `replaceForBlockStage` upserts against, so `getByBlockStage` returns it and the block's other
+ * stage is never disturbed.
  */
 export class D1BrainstormSessionRepository {
     db;
@@ -49,12 +52,19 @@ export class D1BrainstormSessionRepository {
             .first();
         return row ? rowToSession(row) : null;
     }
+    /**
+     * Force-write by session id. A fresh insert starts at rev 0; a write over an existing row BUMPS
+     * it, so a concurrent compareAndSwap holding the old revision still detects that the row moved.
+     * Writing a DIFFERENT id onto a block+stage that already has a session now violates the UNIQUE
+     * index (migration 0066) — loudly, which is the point: only {@link replaceForBlockStage} may
+     * change which session is a block+stage's live one.
+     */
     async upsert(workspaceId, session) {
-        await this.db
+        const row = await this.db
             .prepare(`INSERT INTO brainstorm_sessions
            (workspace_id, id, block_id, stage, status, items, model, converged_direction,
-            iteration, max_iterations, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+            iteration, max_iterations, rev, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?)
          ON CONFLICT (workspace_id, id) DO UPDATE SET
            block_id = excluded.block_id,
            stage = excluded.stage,
@@ -64,15 +74,63 @@ export class D1BrainstormSessionRepository {
            converged_direction = excluded.converged_direction,
            iteration = excluded.iteration,
            max_iterations = excluded.max_iterations,
-           updated_at = excluded.updated_at`)
+           rev = brainstorm_sessions.rev + 1,
+           updated_at = excluded.updated_at
+         RETURNING rev`)
             .bind(workspaceId, session.id, session.blockId, session.stage, session.status, JSON.stringify(session.items), session.model, session.convergedDirection, session.iteration ?? 1, session.maxIterations ?? 1, session.createdAt, session.updatedAt)
-            .run();
+            .first();
+        if (row)
+            session.rev = row.rev;
     }
-    async deleteByBlockStage(workspaceId, blockId, stage) {
-        await this.db
-            .prepare(`DELETE FROM brainstorm_sessions WHERE workspace_id = ? AND block_id = ? AND stage = ?`)
-            .bind(workspaceId, blockId, stage)
-            .run();
+    async compareAndSwap(workspaceId, session) {
+        // Conditional update guarded on the rev last read onto this session; writes only while the
+        // stored row is unchanged, and never inserts (a deleted session must stay deleted).
+        const row = await this.db
+            .prepare(`UPDATE brainstorm_sessions SET
+           block_id = ?,
+           stage = ?,
+           status = ?,
+           items = ?,
+           model = ?,
+           converged_direction = ?,
+           iteration = ?,
+           max_iterations = ?,
+           updated_at = ?,
+           rev = rev + 1
+         WHERE workspace_id = ? AND id = ? AND rev = ?
+         RETURNING rev`)
+            .bind(session.blockId, session.stage, session.status, JSON.stringify(session.items), session.model, session.convergedDirection, session.iteration ?? 1, session.maxIterations ?? 1, session.updatedAt, workspaceId, session.id, session.rev ?? 0)
+            .first();
+        if (!row)
+            return false;
+        session.rev = row.rev;
+        return true;
+    }
+    async replaceForBlockStage(workspaceId, session) {
+        // ONE conflict-targeted upsert on the (block, STAGE) UNIQUE key (migration 0066), NOT a
+        // delete-then-insert pair — see {@link D1RequirementReviewRepository.replaceForBlock} for why
+        // a transaction around that pair is not enough. The stage is part of the conflict target, so
+        // the block's other stage is untouched by construction rather than by a scoped delete.
+        const row = await this.db
+            .prepare(`INSERT INTO brainstorm_sessions
+           (workspace_id, id, block_id, stage, status, items, model, converged_direction,
+            iteration, max_iterations, rev, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?)
+         ON CONFLICT (workspace_id, block_id, stage) DO UPDATE SET
+           id = excluded.id,
+           status = excluded.status,
+           items = excluded.items,
+           model = excluded.model,
+           converged_direction = excluded.converged_direction,
+           iteration = excluded.iteration,
+           max_iterations = excluded.max_iterations,
+           rev = 0,
+           created_at = excluded.created_at,
+           updated_at = excluded.updated_at
+         RETURNING rev`)
+            .bind(workspaceId, session.id, session.blockId, session.stage, session.status, JSON.stringify(session.items), session.model, session.convergedDirection, session.iteration ?? 1, session.maxIterations ?? 1, session.createdAt, session.updatedAt)
+            .first();
+        session.rev = row?.rev ?? 0;
     }
 }
 //# sourceMappingURL=D1BrainstormSessionRepository.js.map

package/dist/infrastructure/repositories/D1BrainstormSessionRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"D1BrainstormSessionRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1BrainstormSessionRepository.ts"],"names":[],"mappings":"AAkBA,SAAS,YAAY,CAAC,GAAyB;IAC7C,IAAI,KAAK,GAAqB,EAAE,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,MAA0B,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAA;IACZ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,KAAK,EAAE,GAAG,CAAC,KAAwB;QACnC,MAAM,EAAE,GAAG,CAAC,MAAqC;QACjD,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;QAC3C,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IACvB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,OAAe,EACf,KAAsB;QAEtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC;aACjC,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,qEAAqE,CAAC;aAC9E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,OAA0B;QAC1D,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;;;4CAaoC,CACrC;aACA,IAAI,CACH,WAAW,EACX,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAC7B,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,SAAS,IAAI,CAAC,EACtB,OAAO,CAAC,aAAa,IAAI,CAAC,EAC1B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,WAAmB,EACnB,OAAe,EACf,KAAsB;QAEtB,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,uFAAuF,CACxF;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC;aACjC,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}
+{"version":3,"file":"D1BrainstormSessionRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1BrainstormSessionRepository.ts"],"names":[],"mappings":"AAmBA,SAAS,YAAY,CAAC,GAAyB;IAC7C,IAAI,KAAK,GAAqB,EAAE,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,MAA0B,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAA;IACZ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,KAAK,EAAE,GAAG,CAAC,KAAwB;QACnC,MAAM,EAAE,GAAG,CAAC,MAAqC;QACjD,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;QAC3C,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;QACjB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,6BAA6B;IACvB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,OAAe,EACf,KAAsB;QAEtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC;aACjC,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,qEAAqE,CAAC;aAC9E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,OAA0B;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;;;;;uBAee,CAChB;aACA,IAAI,CACH,WAAW,EACX,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAC7B,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,SAAS,IAAI,CAAC,EACtB,OAAO,CAAC,aAAa,IAAI,CAAC,EAC1B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB;aACA,KAAK,EAAmB,CAAA;QAC3B,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,OAA0B;QAClE,2FAA2F;QAC3F,oFAAoF;QACpF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;;uBAYe,CAChB;aACA,IAAI,CACH,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAC7B,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,SAAS,IAAI,CAAC,EACtB,OAAO,CAAC,aAAa,IAAI,CAAC,EAC1B,OAAO,CAAC,SAAS,EACjB,WAAW,EACX,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,GAAG,IAAI,CAAC,CACjB;aACA,KAAK,EAAmB,CAAA;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QACtB,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,WAAmB,EAAE,OAA0B;QACxE,wFAAwF;QACxF,8FAA8F;QAC9F,6FAA6F;QAC7F,uFAAuF;QACvF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;;;;;uBAee,CAChB;aACA,IAAI,CACH,WAAW,EACX,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAC7B,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,kBAAkB,EAC1B,OAAO,CAAC,SAAS,IAAI,CAAC,EACtB,OAAO,CAAC,aAAa,IAAI,CAAC,EAC1B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB;aACA,KAAK,EAAmB,CAAA;QAC3B,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAC7B,CAAC;CACF"}

package/dist/infrastructure/repositories/D1ClarityReviewRepository.d.ts

@@ -3,8 +3,10 @@ import type { ClarityReview } from '@cat-factory/contracts';
 import type { D1Database } from '@cloudflare/workers-types';
 /**
  * Clarity (bug-report triage) reviews, stored one row per review in `clarity_reviews`.
- * The mirror of {@link D1RequirementReviewRepository}: items live as a JSON array, the
- * service keeps at most one live review per block, so `getByBlock` returns the latest.
+ * The mirror of {@link D1RequirementReviewRepository}, down to the concurrency contract: items
+ * live as a JSON array, a UNIQUE index on (workspace_id, block_id) keeps exactly one live review
+ * per block (which `replaceForBlock` upserts against), and every read-modify-write rides the
+ * rev-guarded `compareAndSwap`.
  */
 export declare class D1ClarityReviewRepository implements ClarityReviewRepository {
     private readonly db;
@@ -13,7 +15,15 @@ export declare class D1ClarityReviewRepository implements ClarityReviewRepositor
     });
     getByBlock(workspaceId: string, blockId: string): Promise<ClarityReview | null>;
     get(workspaceId: string, id: string): Promise<ClarityReview | null>;
+    /**
+     * Force-write by review id. A fresh insert starts at rev 0; a write over an existing row BUMPS
+     * it, so a concurrent compareAndSwap holding the old revision still detects that the row moved.
+     * Writing a DIFFERENT id onto a block that already has a review now violates the block's UNIQUE
+     * index (migration 0066) — loudly, which is the point: only {@link replaceForBlock} may change
+     * which review is a block's live one.
+     */
     upsert(workspaceId: string, review: ClarityReview): Promise<void>;
-    deleteByBlock(workspaceId: string, blockId: string): Promise<void>;
+    compareAndSwap(workspaceId: string, review: ClarityReview): Promise<boolean>;
+    replaceForBlock(workspaceId: string, review: ClarityReview): Promise<void>;
 }
 //# sourceMappingURL=D1ClarityReviewRepository.d.ts.map

package/dist/infrastructure/repositories/D1ClarityReviewRepository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"D1ClarityReviewRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ClarityReviewRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,wBAAwB,CAAA;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAqC3D;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAUpF;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAMxE;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BtE;IAEK,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvE;CACF"}
+{"version":3,"file":"D1ClarityReviewRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ClarityReviewRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,wBAAwB,CAAA;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAuC3D;;;;;;GAMG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAUpF;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAMxE;IAED;;;;;;OAMG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCtE;IAEK,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAmCjF;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC/E;CACF"}

package/dist/infrastructure/repositories/D1ClarityReviewRepository.js

@@ -17,14 +17,17 @@ function rowToReview(row) {
         clarifiedReport: row.clarified_report,
         iteration: row.iteration,
         maxIterations: row.max_iterations,
+        rev: row.rev ?? 0,
         createdAt: row.created_at,
         updatedAt: row.updated_at,
     };
 }
 /**
  * Clarity (bug-report triage) reviews, stored one row per review in `clarity_reviews`.
- * The mirror of {@link D1RequirementReviewRepository}: items live as a JSON array, the
- * service keeps at most one live review per block, so `getByBlock` returns the latest.
+ * The mirror of {@link D1RequirementReviewRepository}, down to the concurrency contract: items
+ * live as a JSON array, a UNIQUE index on (workspace_id, block_id) keeps exactly one live review
+ * per block (which `replaceForBlock` upserts against), and every read-modify-write rides the
+ * rev-guarded `compareAndSwap`.
  */
 export class D1ClarityReviewRepository {
     db;
@@ -47,12 +50,19 @@ export class D1ClarityReviewRepository {
             .first();
         return row ? rowToReview(row) : null;
     }
+    /**
+     * Force-write by review id. A fresh insert starts at rev 0; a write over an existing row BUMPS
+     * it, so a concurrent compareAndSwap holding the old revision still detects that the row moved.
+     * Writing a DIFFERENT id onto a block that already has a review now violates the block's UNIQUE
+     * index (migration 0066) — loudly, which is the point: only {@link replaceForBlock} may change
+     * which review is a block's live one.
+     */
     async upsert(workspaceId, review) {
-        await this.db
+        const row = await this.db
             .prepare(`INSERT INTO clarity_reviews
            (workspace_id, id, block_id, status, items, model, clarified_report,
-            iteration, max_iterations, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+            iteration, max_iterations, rev, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?)
          ON CONFLICT (workspace_id, id) DO UPDATE SET
            block_id = excluded.block_id,
            status = excluded.status,
@@ -61,15 +71,61 @@ export class D1ClarityReviewRepository {
            clarified_report = excluded.clarified_report,
            iteration = excluded.iteration,
            max_iterations = excluded.max_iterations,
-           updated_at = excluded.updated_at`)
+           rev = clarity_reviews.rev + 1,
+           updated_at = excluded.updated_at
+         RETURNING rev`)
             .bind(workspaceId, review.id, review.blockId, review.status, JSON.stringify(review.items), review.model, review.clarifiedReport, review.iteration ?? 1, review.maxIterations ?? 1, review.createdAt, review.updatedAt)
-            .run();
+            .first();
+        if (row)
+            review.rev = row.rev;
     }
-    async deleteByBlock(workspaceId, blockId) {
-        await this.db
-            .prepare(`DELETE FROM clarity_reviews WHERE workspace_id = ? AND block_id = ?`)
-            .bind(workspaceId, blockId)
-            .run();
+    async compareAndSwap(workspaceId, review) {
+        // Conditional update guarded on the rev last read onto this review; writes only while the
+        // stored row is unchanged, and never inserts (a deleted review must stay deleted).
+        const row = await this.db
+            .prepare(`UPDATE clarity_reviews SET
+           block_id = ?,
+           status = ?,
+           items = ?,
+           model = ?,
+           clarified_report = ?,
+           iteration = ?,
+           max_iterations = ?,
+           updated_at = ?,
+           rev = rev + 1
+         WHERE workspace_id = ? AND id = ? AND rev = ?
+         RETURNING rev`)
+            .bind(review.blockId, review.status, JSON.stringify(review.items), review.model, review.clarifiedReport, review.iteration ?? 1, review.maxIterations ?? 1, review.updatedAt, workspaceId, review.id, review.rev ?? 0)
+            .first();
+        if (!row)
+            return false;
+        review.rev = row.rev;
+        return true;
+    }
+    async replaceForBlock(workspaceId, review) {
+        // ONE conflict-targeted upsert on the block's UNIQUE key (migration 0066), NOT a
+        // delete-then-insert pair — see {@link D1RequirementReviewRepository.replaceForBlock} for why
+        // a transaction around that pair is not enough.
+        const row = await this.db
+            .prepare(`INSERT INTO clarity_reviews
+           (workspace_id, id, block_id, status, items, model, clarified_report,
+            iteration, max_iterations, rev, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?)
+         ON CONFLICT (workspace_id, block_id) DO UPDATE SET
+           id = excluded.id,
+           status = excluded.status,
+           items = excluded.items,
+           model = excluded.model,
+           clarified_report = excluded.clarified_report,
+           iteration = excluded.iteration,
+           max_iterations = excluded.max_iterations,
+           rev = 0,
+           created_at = excluded.created_at,
+           updated_at = excluded.updated_at
+         RETURNING rev`)
+            .bind(workspaceId, review.id, review.blockId, review.status, JSON.stringify(review.items), review.model, review.clarifiedReport, review.iteration ?? 1, review.maxIterations ?? 1, review.createdAt, review.updatedAt)
+            .first();
+        review.rev = row?.rev ?? 0;
     }
 }
 //# sourceMappingURL=D1ClarityReviewRepository.js.map

package/dist/infrastructure/repositories/D1ClarityReviewRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"D1ClarityReviewRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ClarityReviewRepository.ts"],"names":[],"mappings":"AAiBA,SAAS,WAAW,CAAC,GAAqB;IACxC,IAAI,KAAK,GAAwB,EAAE,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,MAA6B,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAA;IACZ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,CAAC,MAAiC;QAC7C,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,OAAe;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,KAAK,EAAoB,CAAA;QAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,iEAAiE,CAAC;aAC1E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAoB,CAAA;QAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAqB;QACrD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;;4CAYoC,CACrC;aACA,IAAI,CACH,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,OAAe;QACtD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,qEAAqE,CAAC;aAC9E,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}
+{"version":3,"file":"D1ClarityReviewRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ClarityReviewRepository.ts"],"names":[],"mappings":"AAkBA,SAAS,WAAW,CAAC,GAAqB;IACxC,IAAI,KAAK,GAAwB,EAAE,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,MAA6B,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAA;IACZ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,CAAC,MAAiC;QAC7C,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;QACjB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,OAAe;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,KAAK,EAAoB,CAAA;QAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,iEAAiE,CAAC;aAC1E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAoB,CAAA;QAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAqB;QACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;;;;uBAce,CAChB;aACA,IAAI,CACH,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,KAAK,EAAmB,CAAA;QAC3B,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,MAAqB;QAC7D,0FAA0F;QAC1F,mFAAmF;QACnF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;uBAWe,CAChB;aACA,IAAI,CACH,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,MAAM,CAAC,SAAS,EAChB,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,GAAG,IAAI,CAAC,CAChB;aACA,KAAK,EAAmB,CAAA;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QACtB,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,MAAqB;QAC9D,iFAAiF;QACjF,8FAA8F;QAC9F,gDAAgD;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;;;;;uBAee,CAChB;aACA,IAAI,CACH,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,KAAK,EAAmB,CAAA;QAC3B,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAC5B,CAAC;CACF"}

package/dist/infrastructure/repositories/D1RequirementReviewRepository.d.ts

@@ -3,9 +3,12 @@ import type { RequirementReview } from '@cat-factory/contracts';
 import type { D1Database } from '@cloudflare/workers-types';
 /**
  * Requirements reviews, stored one row per review in `requirement_reviews`
- * (migration 0021). The reviewed items live as a JSON array in `items`; the
- * service keeps at most one live review per block (it deletes the block's prior
- * review before inserting a fresh one), so `getByBlock` returns the latest.
+ * (migration 0021). The reviewed items live as a JSON array in `items`; a block holds at most
+ * ONE live review — a UNIQUE index on (workspace_id, block_id) enforces that (migration 0066),
+ * and {@link replaceForBlock} publishes a fresh one as a single upsert against it — so
+ * `getByBlock` returns it. Every read-modify-write rides the rev-guarded {@link compareAndSwap}
+ * (migration 0065): the whole row is one blob, so a blind write would drop a concurrent editor's
+ * answer.
  */
 export declare class D1RequirementReviewRepository implements RequirementReviewRepository {
     private readonly db;
@@ -14,7 +17,15 @@ export declare class D1RequirementReviewRepository implements RequirementReviewR
     });
     getByBlock(workspaceId: string, blockId: string): Promise<RequirementReview | null>;
     get(workspaceId: string, id: string): Promise<RequirementReview | null>;
+    /**
+     * Force-write by review id. A fresh insert starts at rev 0; a write over an existing row BUMPS
+     * it, so a concurrent compareAndSwap holding the old revision still detects that the row moved.
+     * Writing a DIFFERENT id onto a block that already has a review now violates the block's UNIQUE
+     * index (migration 0066) — loudly, which is the point: only {@link replaceForBlock} may change
+     * which review is a block's live one.
+     */
     upsert(workspaceId: string, review: RequirementReview): Promise<void>;
-    deleteByBlock(workspaceId: string, blockId: string): Promise<void>;
+    compareAndSwap(workspaceId: string, review: RequirementReview): Promise<boolean>;
+    replaceForBlock(workspaceId: string, review: RequirementReview): Promise<void>;
 }
 //# sourceMappingURL=D1RequirementReviewRepository.d.ts.map

package/dist/infrastructure/repositories/D1RequirementReviewRepository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"D1RequirementReviewRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1RequirementReviewRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,KAAK,EAEV,iBAAiB,EAElB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AA0C3D;;;;;GAKG;AACH,qBAAa,6BAA8B,YAAW,2BAA2B;IAC/E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAUxF;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAM5E;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC1E;IAEK,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKvE;CACF"}
+{"version":3,"file":"D1RequirementReviewRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1RequirementReviewRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,KAAK,EAEV,iBAAiB,EAElB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AA4C3D;;;;;;;;GAQG;AACH,qBAAa,6BAA8B,YAAW,2BAA2B;IAC/E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAUxF;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAM5E;IAED;;;;;;OAMG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC1E;IAEK,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAsCrF;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CnF;CACF"}

package/dist/infrastructure/repositories/D1RequirementReviewRepository.js

@@ -20,15 +20,19 @@ function rowToReview(row) {
         iteration: row.iteration,
         maxIterations: row.max_iterations,
         recommendations: parseJsonArray(row.recommendations),
+        rev: row.rev ?? 0,
         createdAt: row.created_at,
         updatedAt: row.updated_at,
     };
 }
 /**
  * Requirements reviews, stored one row per review in `requirement_reviews`
- * (migration 0021). The reviewed items live as a JSON array in `items`; the
- * service keeps at most one live review per block (it deletes the block's prior
- * review before inserting a fresh one), so `getByBlock` returns the latest.
+ * (migration 0021). The reviewed items live as a JSON array in `items`; a block holds at most
+ * ONE live review — a UNIQUE index on (workspace_id, block_id) enforces that (migration 0066),
+ * and {@link replaceForBlock} publishes a fresh one as a single upsert against it — so
+ * `getByBlock` returns it. Every read-modify-write rides the rev-guarded {@link compareAndSwap}
+ * (migration 0065): the whole row is one blob, so a blind write would drop a concurrent editor's
+ * answer.
  */
 export class D1RequirementReviewRepository {
     db;
@@ -51,12 +55,19 @@ export class D1RequirementReviewRepository {
             .first();
         return row ? rowToReview(row) : null;
     }
+    /**
+     * Force-write by review id. A fresh insert starts at rev 0; a write over an existing row BUMPS
+     * it, so a concurrent compareAndSwap holding the old revision still detects that the row moved.
+     * Writing a DIFFERENT id onto a block that already has a review now violates the block's UNIQUE
+     * index (migration 0066) — loudly, which is the point: only {@link replaceForBlock} may change
+     * which review is a block's live one.
+     */
     async upsert(workspaceId, review) {
-        await this.db
+        const row = await this.db
             .prepare(`INSERT INTO requirement_reviews
            (workspace_id, id, block_id, status, items, model, incorporated_requirements,
-            iteration, max_iterations, recommendations, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+            iteration, max_iterations, recommendations, rev, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?)
          ON CONFLICT (workspace_id, id) DO UPDATE SET
            block_id = excluded.block_id,
            status = excluded.status,
@@ -66,15 +77,68 @@ export class D1RequirementReviewRepository {
            iteration = excluded.iteration,
            max_iterations = excluded.max_iterations,
            recommendations = excluded.recommendations,
-           updated_at = excluded.updated_at`)
+           rev = requirement_reviews.rev + 1,
+           updated_at = excluded.updated_at
+         RETURNING rev`)
             .bind(workspaceId, review.id, review.blockId, review.status, JSON.stringify(review.items), review.model, review.incorporatedRequirements, review.iteration ?? 1, review.maxIterations ?? 1, JSON.stringify(review.recommendations ?? []), review.createdAt, review.updatedAt)
-            .run();
+            .first();
+        if (row)
+            review.rev = row.rev;
     }
-    async deleteByBlock(workspaceId, blockId) {
-        await this.db
-            .prepare(`DELETE FROM requirement_reviews WHERE workspace_id = ? AND block_id = ?`)
-            .bind(workspaceId, blockId)
-            .run();
+    async compareAndSwap(workspaceId, review) {
+        // Conditional update guarded on the rev last read onto this review; writes only while the
+        // stored row is unchanged, and never inserts (a deleted review must stay deleted).
+        const expected = review.rev ?? 0;
+        const row = await this.db
+            .prepare(`UPDATE requirement_reviews SET
+           block_id = ?,
+           status = ?,
+           items = ?,
+           model = ?,
+           incorporated_requirements = ?,
+           iteration = ?,
+           max_iterations = ?,
+           recommendations = ?,
+           updated_at = ?,
+           rev = rev + 1
+         WHERE workspace_id = ? AND id = ? AND rev = ?
+         RETURNING rev`)
+            .bind(review.blockId, review.status, JSON.stringify(review.items), review.model, review.incorporatedRequirements, review.iteration ?? 1, review.maxIterations ?? 1, JSON.stringify(review.recommendations ?? []), review.updatedAt, workspaceId, review.id, expected)
+            .first();
+        if (!row)
+            return false;
+        review.rev = row.rev;
+        return true;
+    }
+    async replaceForBlock(workspaceId, review) {
+        // ONE conflict-targeted upsert on the block's UNIQUE key (migration 0066), NOT a
+        // delete-then-insert pair: there is no window between two statements for a second review run
+        // to interleave into, on either runtime. The predecessor's row IS this row — its `id` is
+        // overwritten — so the superseded review is gone rather than left beside the live one, and
+        // `rev` restarts at 0 so a writer still holding the predecessor's revision can't match.
+        const row = await this.db
+            .prepare(`INSERT INTO requirement_reviews
+           (workspace_id, id, block_id, status, items, model, incorporated_requirements,
+            iteration, max_iterations, recommendations, rev, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?)
+         ON CONFLICT (workspace_id, block_id) DO UPDATE SET
+           id = excluded.id,
+           status = excluded.status,
+           items = excluded.items,
+           model = excluded.model,
+           incorporated_requirements = excluded.incorporated_requirements,
+           iteration = excluded.iteration,
+           max_iterations = excluded.max_iterations,
+           recommendations = excluded.recommendations,
+           rev = 0,
+           created_at = excluded.created_at,
+           updated_at = excluded.updated_at
+         RETURNING rev`)
+            .bind(workspaceId, review.id, review.blockId, review.status, JSON.stringify(review.items), review.model, review.incorporatedRequirements, review.iteration ?? 1, review.maxIterations ?? 1, JSON.stringify(review.recommendations ?? []), review.createdAt, review.updatedAt)
+            .first();
+        // Read the revision back rather than assuming it: the caller keeps mutating this object
+        // through `compareAndSwap`, so a `rev` it only believes is right desynchronises it.
+        review.rev = row?.rev ?? 0;
     }
 }
 //# sourceMappingURL=D1RequirementReviewRepository.js.map

package/dist/infrastructure/repositories/D1RequirementReviewRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"D1RequirementReviewRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1RequirementReviewRepository.ts"],"names":[],"mappings":"AAsBA,SAAS,cAAc,CAAI,GAA8B;IACvD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAc,CAAC,CAAC,CAAC,EAAE,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAyB;IAC5C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,CAAC,MAAqC;QACjD,KAAK,EAAE,cAAc,CAAwB,GAAG,CAAC,KAAK,CAAC;QACvD,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,wBAAwB,EAAE,GAAG,CAAC,yBAAyB;QACvD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,eAAe,EAAE,cAAc,CAA4B,GAAG,CAAC,eAAe,CAAC;QAC/E,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA6B;IACvB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,OAAe;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,qEAAqE,CAAC;aAC9E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAyB;QACzD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;;;4CAaoC,CACrC;aACA,IAAI,CACH,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,wBAAwB,EAC/B,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,EAC5C,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,OAAe;QACtD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,yEAAyE,CAAC;aAClF,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}
+{"version":3,"file":"D1RequirementReviewRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1RequirementReviewRepository.ts"],"names":[],"mappings":"AAuBA,SAAS,cAAc,CAAI,GAA8B;IACvD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAc,CAAC,CAAC,CAAC,EAAE,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAyB;IAC5C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,CAAC,MAAqC;QACjD,KAAK,EAAE,cAAc,CAAwB,GAAG,CAAC,KAAK,CAAC;QACvD,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,wBAAwB,EAAE,GAAG,CAAC,yBAAyB;QACvD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,eAAe,EAAE,cAAc,CAA4B,GAAG,CAAC,eAAe,CAAC;QAC/E,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;QACjB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,6BAA6B;IACvB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,OAAe;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,qEAAqE,CAAC;aAC9E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAyB;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;;;;;uBAee,CAChB;aACA,IAAI,CACH,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,wBAAwB,EAC/B,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,EAC5C,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,KAAK,EAAmB,CAAA;QAC3B,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,MAAyB;QACjE,0FAA0F;QAC1F,mFAAmF;QACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAA;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;;uBAYe,CAChB;aACA,IAAI,CACH,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,wBAAwB,EAC/B,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,EAC5C,MAAM,CAAC,SAAS,EAChB,WAAW,EACX,MAAM,CAAC,EAAE,EACT,QAAQ,CACT;aACA,KAAK,EAAmB,CAAA;QAC3B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QACtB,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;QACpB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,MAAyB;QAClE,iFAAiF;QACjF,6FAA6F;QAC7F,yFAAyF;QACzF,2FAA2F;QAC3F,wFAAwF;QACxF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;;;;;;;;;;;;uBAgBe,CAChB;aACA,IAAI,CACH,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,wBAAwB,EAC/B,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,EAC5C,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,KAAK,EAAmB,CAAA;QAC3B,wFAAwF;QACxF,oFAAoF;QACpF,MAAM,CAAC,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAC5B,CAAC;CACF"}

package/migrations/0065_review_rev.sql

@@ -0,0 +1,14 @@
+-- Optimistic concurrency for the iterative-review stores (race-condition audit 2.5).
+--
+-- A requirements / clarity / brainstorm review is ONE JSON blob holding every finding, and every
+-- mutation used to load it, edit one item, and write the whole row back. Two writers in that
+-- window (two people answering different findings, a dismissal racing the durable driver's
+-- incorporation pass) left only the last writer's edit — and because incorporation refuses to run
+-- while any finding is still `open`, a lost dismissal wedged the loop on a phantom open item.
+--
+-- `rev` is the monotonic token every read-modify-write now CASes on: the store writes only while
+-- the row still carries the revision the caller loaded, so a lost race reloads and re-applies
+-- instead of clobbering. Existing rows start at 0, which is exactly what an unset column reads as.
+ALTER TABLE requirement_reviews ADD COLUMN rev INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE clarity_reviews ADD COLUMN rev INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE brainstorm_sessions ADD COLUMN rev INTEGER NOT NULL DEFAULT 0;

package/migrations/0066_review_block_unique.sql

@@ -0,0 +1,64 @@
+-- One live review per block, enforced by the DATABASE (race-condition audit 2.5, follow-up).
+--
+-- Migration 0065 gave the review stores a `rev` + `compareAndSwap`, and the service publishes a
+-- fresh review through an atomic replace. But "atomic" was carried by a transaction wrapping a
+-- DELETE-then-INSERT, and a transaction is not a uniqueness constraint: under Postgres' default
+-- READ COMMITTED a DELETE takes no predicate lock, so two review runs for one block both delete
+-- nothing (or each other's already-gone row), both insert, and both commit — leaving TWO live
+-- reviews, which is exactly the hazard the replace was introduced to close. SQLite serializes
+-- writers so D1 happened to be safe; that is a runtime accident, not a guarantee, and the two
+-- facades must not disagree about a domain invariant.
+--
+-- The invariant is therefore expressed where it belongs: a UNIQUE index on the block key. With it
+-- the replace becomes a single conflict-targeted upsert (no delete, nothing to interleave) on both
+-- runtimes, and any future writer that tries to add a second live review fails loudly instead of
+-- silently splitting the block's review in two.
+--
+-- Self-healing, like every constraint-adding migration here: pre-existing duplicates (rows a
+-- delete/insert pair already interleaved into existence) are deleted before the index is created,
+-- newest `created_at` winning — the same row `getByBlock` returns today, so the surviving review is
+-- the one the product is already showing. Dropping the superseded duplicates is correct: they were
+-- never reachable.
+
+DELETE FROM requirement_reviews
+WHERE rowid NOT IN (
+  SELECT rowid FROM requirement_reviews r
+  WHERE r.rowid = (
+    SELECT rowid FROM requirement_reviews x
+    WHERE x.workspace_id = r.workspace_id AND x.block_id = r.block_id
+    ORDER BY x.created_at DESC, x.rowid DESC
+    LIMIT 1
+  )
+);
+DROP INDEX IF EXISTS idx_requirement_reviews_block;
+CREATE UNIQUE INDEX idx_requirement_reviews_block
+  ON requirement_reviews (workspace_id, block_id);
+
+DELETE FROM clarity_reviews
+WHERE rowid NOT IN (
+  SELECT rowid FROM clarity_reviews r
+  WHERE r.rowid = (
+    SELECT rowid FROM clarity_reviews x
+    WHERE x.workspace_id = r.workspace_id AND x.block_id = r.block_id
+    ORDER BY x.created_at DESC, x.rowid DESC
+    LIMIT 1
+  )
+);
+DROP INDEX IF EXISTS idx_clarity_reviews_block;
+CREATE UNIQUE INDEX idx_clarity_reviews_block ON clarity_reviews (workspace_id, block_id);
+
+-- Brainstorm is keyed by (block, stage): a block legitimately holds one live `requirements` and
+-- one live `architecture` session at once, so the stage is part of the uniqueness key.
+DELETE FROM brainstorm_sessions
+WHERE rowid NOT IN (
+  SELECT rowid FROM brainstorm_sessions r
+  WHERE r.rowid = (
+    SELECT rowid FROM brainstorm_sessions x
+    WHERE x.workspace_id = r.workspace_id AND x.block_id = r.block_id AND x.stage = r.stage
+    ORDER BY x.created_at DESC, x.rowid DESC
+    LIMIT 1
+  )
+);
+DROP INDEX IF EXISTS idx_brainstorm_sessions_block_stage;
+CREATE UNIQUE INDEX idx_brainstorm_sessions_block_stage
+  ON brainstorm_sessions (workspace_id, block_id, stage);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/worker",
-  "version": "0.110.1",
+  "version": "0.111.0",
   "description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
   "repository": {
     "type": "git",
@@ -42,22 +42,22 @@
     "pino": "^10.3.1",
     "valibot": "^1.4.2",
     "workers-ai-provider": "^4.0.0",
-    "@cat-factory/agents": "0.75.0",
-    "@cat-factory/caching": "0.10.55",
-    "@cat-factory/consensus": "0.11.52",
-    "@cat-factory/contracts": "0.177.0",
-    "@cat-factory/eks": "0.1.151",
-    "@cat-factory/gates": "0.7.42",
-    "@cat-factory/gitlab": "0.13.18",
-    "@cat-factory/integrations": "0.103.2",
-    "@cat-factory/kernel": "0.170.0",
-    "@cat-factory/observability-langfuse": "0.7.273",
-    "@cat-factory/observability-otel": "0.2.56",
-    "@cat-factory/orchestration": "0.150.1",
-    "@cat-factory/prompt-fragments": "0.15.0",
-    "@cat-factory/provider-cloudflare": "0.7.302",
-    "@cat-factory/server": "0.160.0",
-    "@cat-factory/spend": "0.12.99"
+    "@cat-factory/agents": "0.75.1",
+    "@cat-factory/caching": "0.10.56",
+    "@cat-factory/consensus": "0.11.53",
+    "@cat-factory/contracts": "0.178.0",
+    "@cat-factory/eks": "0.1.152",
+    "@cat-factory/gates": "0.7.43",
+    "@cat-factory/gitlab": "0.13.19",
+    "@cat-factory/integrations": "0.103.3",
+    "@cat-factory/kernel": "0.171.0",
+    "@cat-factory/observability-langfuse": "0.7.274",
+    "@cat-factory/observability-otel": "0.2.57",
+    "@cat-factory/orchestration": "0.151.0",
+    "@cat-factory/prompt-fragments": "0.15.1",
+    "@cat-factory/provider-cloudflare": "0.7.303",
+    "@cat-factory/server": "0.162.0",
+    "@cat-factory/spend": "0.12.100"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.18.8",
@@ -65,7 +65,7 @@
     "typescript": "7.0.2",
     "vitest": "^4.1.10",
     "wrangler": "^4.114.0",
-    "@cat-factory/conformance": "0.12.13"
+    "@cat-factory/conformance": "0.12.15"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",