@cat-factory/worker 0.18.6 → 0.20.0

package/dist/infrastructure/repositories/D1WorkspaceSettingsRepository.js

@@ -1,18 +1,22 @@
-function rowToSettings(row) {
-    let perType = null;
-    if (row.task_limit_per_type) {
-        try {
-            perType = JSON.parse(row.task_limit_per_type);
-        }
-        catch {
-            perType = null;
-        }
+function parseJson(raw) {
+    if (!raw)
+        return null;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
     }
+}
+function rowToSettings(row) {
     return {
         waitingEscalationMinutes: row.waiting_escalation_minutes,
         taskLimitMode: row.task_limit_mode,
         taskLimitShared: row.task_limit_shared,
-        taskLimitPerType: perType,
+        taskLimitPerType: parseJson(row.task_limit_per_type),
+        spendCurrency: row.spend_currency,
+        spendMonthlyLimit: row.spend_monthly_limit,
+        spendModelPrices: parseJson(row.spend_model_prices),
     };
 }
 /**
@@ -36,14 +40,17 @@ export class D1WorkspaceSettingsRepository {
         await this.db
             .prepare(`INSERT INTO workspace_settings
            (workspace_id, waiting_escalation_minutes, task_limit_mode, task_limit_shared,
-            task_limit_per_type)
-         VALUES (?, ?, ?, ?, ?)
+            task_limit_per_type, spend_currency, spend_monthly_limit, spend_model_prices)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)
          ON CONFLICT (workspace_id) DO UPDATE SET
            waiting_escalation_minutes = excluded.waiting_escalation_minutes,
            task_limit_mode = excluded.task_limit_mode,
            task_limit_shared = excluded.task_limit_shared,
-           task_limit_per_type = excluded.task_limit_per_type`)
-            .bind(workspaceId, settings.waitingEscalationMinutes, settings.taskLimitMode, settings.taskLimitShared, settings.taskLimitPerType ? JSON.stringify(settings.taskLimitPerType) : null)
+           task_limit_per_type = excluded.task_limit_per_type,
+           spend_currency = excluded.spend_currency,
+           spend_monthly_limit = excluded.spend_monthly_limit,
+           spend_model_prices = excluded.spend_model_prices`)
+            .bind(workspaceId, settings.waitingEscalationMinutes, settings.taskLimitMode, settings.taskLimitShared, settings.taskLimitPerType ? JSON.stringify(settings.taskLimitPerType) : null, settings.spendCurrency, settings.spendMonthlyLimit, settings.spendModelPrices ? JSON.stringify(settings.spendModelPrices) : null)
             .run();
     }
 }

package/dist/infrastructure/repositories/D1WorkspaceSettingsRepository.js.map

@@ -1 +1 @@
-{"version":3,"file":"D1WorkspaceSettingsRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1WorkspaceSettingsRepository.ts"],"names":[],"mappings":"AAWA,SAAS,aAAa,CAAC,GAAyB;IAC9C,IAAI,OAAO,GAA4B,IAAI,CAAA;IAC3C,IAAI,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAqB,CAAA;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO;QACL,wBAAwB,EAAE,GAAG,CAAC,0BAA0B;QACxD,aAAa,EAAE,GAAG,CAAC,eAAgC;QACnD,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,gBAAgB,EAAE,OAAO;KAC1B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,6BAA6B;IACvB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,yDAAyD,CAAC;aAClE,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,QAA2B;QAC3D,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;8DAQsD,CACvD;aACA,IAAI,CACH,WAAW,EACX,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAC7E;aACA,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}
+{"version":3,"file":"D1WorkspaceSettingsRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1WorkspaceSettingsRepository.ts"],"names":[],"mappings":"AAmBA,SAAS,SAAS,CAAI,GAAkB;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAyB;IAC9C,OAAO;QACL,wBAAwB,EAAE,GAAG,CAAC,0BAA0B;QACxD,aAAa,EAAE,GAAG,CAAC,eAAgC;QACnD,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,gBAAgB,EAAE,SAAS,CAAmB,GAAG,CAAC,mBAAmB,CAAC;QACtE,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAC1C,gBAAgB,EAAE,SAAS,CAAmB,GAAG,CAAC,kBAAkB,CAAC;KACtE,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,6BAA6B;IACvB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,yDAAyD,CAAC;aAClE,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,QAA2B;QAC3D,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;4DAWoD,CACrD;aACA,IAAI,CACH,WAAW,EACX,QAAQ,CAAC,wBAAwB,EACjC,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,EAC5E,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAC7E;aACA,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/migrations/0012_workspace_budget.sql

@@ -0,0 +1,14 @@
+-- Per-workspace spend budget. Moved out of the deployment-wide env vars
+-- (SPEND_MONTHLY_LIMIT / SPEND_CURRENCY / SPEND_MODEL_PRICES) onto the workspace
+-- settings row so a budget is tunable per workspace in the UI. All nullable;
+-- NULL ⇒ the built-in DEFAULT_SPEND_PRICING base table.
+ALTER TABLE workspace_settings ADD COLUMN spend_currency TEXT;
+ALTER TABLE workspace_settings ADD COLUMN spend_monthly_limit REAL;
+-- JSON object of per-model price overrides ({ "provider:model": {inputPerMillion, outputPerMillion} }).
+ALTER TABLE workspace_settings ADD COLUMN spend_model_prices TEXT;
+
+-- The spend gate now sums a SINGLE workspace's usage since the period start
+-- (`totalsSinceForWorkspace`) on every metered LLM-proxy call + web-search + step,
+-- not just the deployment-wide display rollup. Index (workspace_id, created_at) so that
+-- hot-path aggregate doesn't scan the whole ledger and filter workspace_id row-by-row.
+CREATE INDEX idx_token_usage_workspace ON token_usage (workspace_id, created_at);

package/migrations/0013_incident_enrichment_connections.sql

@@ -0,0 +1,12 @@
+-- Per-workspace incident-enrichment connection (PagerDuty + incident.io). Moved out
+-- of the deployment-wide env vars (PAGERDUTY_API_TOKEN / PAGERDUTY_FROM_EMAIL /
+-- INCIDENTIO_API_KEY) onto a sealed per-workspace row. Both vendors live in ONE sealed
+-- `credentials` blob; `summary` is the non-secret presence map for the UI. Mirrors the
+-- observability_connections shape (migration 0007).
+CREATE TABLE incident_enrichment_connections (
+  workspace_id TEXT    NOT NULL PRIMARY KEY,
+  credentials  TEXT    NOT NULL,              -- sealed JSON { pagerDuty?, incidentIo? }
+  summary      TEXT    NOT NULL DEFAULT '{}', -- non-secret presence JSON
+  created_at   INTEGER NOT NULL,
+  updated_at   INTEGER NOT NULL
+);

package/migrations/0014_account_settings.sql

@@ -0,0 +1,14 @@
+-- Per-account (deployment-wide) settings, moved out of env vars. One row per account.
+-- `config` is non-secret tuning JSON (retention, inline-web-search, enable gates);
+-- `secrets_cipher` is ONE sealed JSON blob grouping every integration credential
+-- (Slack OAuth app, web-search keys, Langfuse keys), domain tag
+-- 'cat-factory:account-settings'; `summary` is non-secret presence JSON for the UI.
+-- A missing row means "all defaults". Mirrors the email_connections per-account shape.
+CREATE TABLE account_settings (
+  account_id     TEXT    NOT NULL PRIMARY KEY,
+  config         TEXT    NOT NULL,
+  secrets_cipher TEXT,
+  summary        TEXT    NOT NULL DEFAULT '{}',
+  created_at     INTEGER NOT NULL,
+  updated_at     INTEGER NOT NULL
+);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/worker",
-  "version": "0.18.6",
+  "version": "0.20.0",
   "description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
   "repository": {
     "type": "git",
@@ -9,7 +9,8 @@
   },
   "files": [
     "dist",
-    "migrations"
+    "migrations",
+    "sandbox-migrations"
   ],
   "type": "module",
   "main": "./dist/index.js",
@@ -39,18 +40,18 @@
     "pino": "^10.3.1",
     "valibot": "^1.4.1",
     "workers-ai-provider": "^3.2.0",
-    "@cat-factory/agents": "0.14.5",
-    "@cat-factory/consensus": "0.7.34",
-    "@cat-factory/contracts": "0.23.0",
-    "@cat-factory/gates": "0.1.2",
-    "@cat-factory/integrations": "0.18.3",
-    "@cat-factory/kernel": "0.26.1",
-    "@cat-factory/observability-langfuse": "0.7.32",
-    "@cat-factory/orchestration": "0.19.2",
-    "@cat-factory/prompt-fragments": "0.7.20",
-    "@cat-factory/provider-cloudflare": "0.7.34",
-    "@cat-factory/server": "0.23.6",
-    "@cat-factory/spend": "0.8.26"
+    "@cat-factory/agents": "0.14.7",
+    "@cat-factory/consensus": "0.7.36",
+    "@cat-factory/contracts": "0.25.0",
+    "@cat-factory/gates": "0.1.4",
+    "@cat-factory/integrations": "0.20.0",
+    "@cat-factory/kernel": "0.28.0",
+    "@cat-factory/observability-langfuse": "0.7.34",
+    "@cat-factory/orchestration": "0.21.0",
+    "@cat-factory/prompt-fragments": "0.7.22",
+    "@cat-factory/provider-cloudflare": "0.7.36",
+    "@cat-factory/server": "0.25.0",
+    "@cat-factory/spend": "0.9.1"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.16.19",
@@ -58,7 +59,7 @@
     "typescript": "7.0.1-rc",
     "vitest": "^4.1.9",
     "wrangler": "^4.104.0",
-    "@cat-factory/conformance": "0.7.34"
+    "@cat-factory/conformance": "0.7.36"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",

package/sandbox-migrations/0001_init.sql

@@ -0,0 +1,99 @@
+-- Sandbox (the parallel prompt/model testing surface) — schema for the DEDICATED
+-- `SANDBOX_DB` D1 database (its own binding + migrations lineage, applied separately
+-- from the main DB's `migrations/`). Because this is its own database, the tables are
+-- unprefixed: the database is the namespace. The Node facade mirrors this as a Postgres
+-- `sandbox` schema (Drizzle). Shipped baselines are NOT stored (read live from
+-- `@cat-factory/agents`); only candidate prompt versions are. JSON-shaped fields are
+-- stored as TEXT JSON. See backend/CLAUDE.md "Keep the runtimes symmetric".
+
+-- Candidate prompt-version lineages under test (origin always 'candidate').
+CREATE TABLE prompt_versions (
+  workspace_id   TEXT    NOT NULL,
+  id             TEXT    NOT NULL,
+  lineage_id     TEXT    NOT NULL,
+  agent_kind     TEXT    NOT NULL,
+  name           TEXT    NOT NULL,
+  origin         TEXT    NOT NULL,
+  system_text    TEXT    NOT NULL,
+  base_prompt_id TEXT,
+  version        INTEGER NOT NULL,
+  parent_id      TEXT,
+  labels         TEXT    NOT NULL DEFAULT '[]',
+  created_at     INTEGER NOT NULL,
+  created_by     TEXT,
+  archived_at    INTEGER,
+  PRIMARY KEY (workspace_id, id)
+);
+CREATE INDEX idx_sandbox_prompts_kind ON prompt_versions (workspace_id, agent_kind);
+
+-- Fixtures (builtins seeded lazily on first list, plus workspace-authored ones).
+CREATE TABLE fixtures (
+  workspace_id TEXT    NOT NULL,
+  id           TEXT    NOT NULL,
+  kind         TEXT    NOT NULL,
+  name         TEXT    NOT NULL,
+  payload      TEXT,
+  repo_ref     TEXT,
+  objective    TEXT,
+  origin       TEXT    NOT NULL,
+  created_at   INTEGER NOT NULL,
+  PRIMARY KEY (workspace_id, id)
+);
+
+-- Experiment definitions (the matrix is a JSON blob).
+CREATE TABLE experiments (
+  workspace_id  TEXT    NOT NULL,
+  id            TEXT    NOT NULL,
+  name          TEXT    NOT NULL,
+  agent_kind    TEXT    NOT NULL,
+  judge_model   TEXT    NOT NULL,
+  repeats       INTEGER NOT NULL,
+  status        TEXT    NOT NULL,
+  matrix        TEXT    NOT NULL,
+  budget_tokens INTEGER,
+  created_at    INTEGER NOT NULL,
+  created_by    TEXT,
+  PRIMARY KEY (workspace_id, id)
+);
+
+-- Individual run cells (the results grid).
+CREATE TABLE runs (
+  workspace_id      TEXT    NOT NULL,
+  id                TEXT    NOT NULL,
+  experiment_id     TEXT    NOT NULL,
+  prompt_version_id TEXT    NOT NULL,
+  model             TEXT    NOT NULL,
+  fixture_id        TEXT    NOT NULL,
+  repeat_index      INTEGER NOT NULL,
+  status            TEXT    NOT NULL,
+  output_text       TEXT,
+  usage             TEXT,
+  latency_ms        INTEGER,
+  branch            TEXT,
+  pr_url            TEXT,
+  diff              TEXT,
+  error             TEXT,
+  seed_sha          TEXT,
+  prompt_label      TEXT    NOT NULL,
+  started_at        INTEGER,
+  finished_at       INTEGER,
+  PRIMARY KEY (workspace_id, id)
+);
+CREATE INDEX idx_sandbox_runs_experiment ON runs (workspace_id, experiment_id);
+CREATE INDEX idx_sandbox_runs_queued ON runs (workspace_id, experiment_id, status);
+
+-- Per-cell grades (rubric dimension scores + optional objective signal). Grades are
+-- listed per experiment by joining to `runs` on `run_id` (so the row stays a faithful
+-- `SandboxGrade` with no denormalized experiment id).
+CREATE TABLE grades (
+  workspace_id   TEXT    NOT NULL,
+  id             TEXT    NOT NULL,
+  run_id         TEXT    NOT NULL,
+  judge_model    TEXT    NOT NULL,
+  scores         TEXT    NOT NULL DEFAULT '[]',
+  weighted_total REAL    NOT NULL,
+  objective      TEXT,
+  created_at     INTEGER NOT NULL,
+  PRIMARY KEY (workspace_id, id)
+);
+CREATE INDEX idx_sandbox_grades_run ON grades (workspace_id, run_id);