@cat-factory/worker 0.6.0

package/dist/infrastructure/repositories/D1ClarityReviewRepository.js

@@ -0,0 +1,75 @@
+function rowToReview(row) {
+    let items = [];
+    try {
+        const parsed = JSON.parse(row.items);
+        if (Array.isArray(parsed))
+            items = parsed;
+    }
+    catch {
+        items = [];
+    }
+    return {
+        id: row.id,
+        blockId: row.block_id,
+        status: row.status,
+        items,
+        model: row.model,
+        clarifiedReport: row.clarified_report,
+        iteration: row.iteration,
+        maxIterations: row.max_iterations,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+/**
+ * Clarity (bug-report triage) reviews, stored one row per review in `clarity_reviews`.
+ * The mirror of {@link D1RequirementReviewRepository}: items live as a JSON array, the
+ * service keeps at most one live review per block, so `getByBlock` returns the latest.
+ */
+export class D1ClarityReviewRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async getByBlock(workspaceId, blockId) {
+        const row = await this.db
+            .prepare(`SELECT * FROM clarity_reviews
+           WHERE workspace_id = ? AND block_id = ?
+           ORDER BY created_at DESC LIMIT 1`)
+            .bind(workspaceId, blockId)
+            .first();
+        return row ? rowToReview(row) : null;
+    }
+    async get(workspaceId, id) {
+        const row = await this.db
+            .prepare(`SELECT * FROM clarity_reviews WHERE workspace_id = ? AND id = ?`)
+            .bind(workspaceId, id)
+            .first();
+        return row ? rowToReview(row) : null;
+    }
+    async upsert(workspaceId, review) {
+        await this.db
+            .prepare(`INSERT INTO clarity_reviews
+           (workspace_id, id, block_id, status, items, model, clarified_report,
+            iteration, max_iterations, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT (workspace_id, id) DO UPDATE SET
+           block_id = excluded.block_id,
+           status = excluded.status,
+           items = excluded.items,
+           model = excluded.model,
+           clarified_report = excluded.clarified_report,
+           iteration = excluded.iteration,
+           max_iterations = excluded.max_iterations,
+           updated_at = excluded.updated_at`)
+            .bind(workspaceId, review.id, review.blockId, review.status, JSON.stringify(review.items), review.model, review.clarifiedReport, review.iteration ?? 1, review.maxIterations ?? 1, review.createdAt, review.updatedAt)
+            .run();
+    }
+    async deleteByBlock(workspaceId, blockId) {
+        await this.db
+            .prepare(`DELETE FROM clarity_reviews WHERE workspace_id = ? AND block_id = ?`)
+            .bind(workspaceId, blockId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1ClarityReviewRepository.js.map

package/dist/infrastructure/repositories/D1ClarityReviewRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ClarityReviewRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ClarityReviewRepository.ts"],"names":[],"mappings":"AAiBA,SAAS,WAAW,CAAC,GAAqB;IACxC,IAAI,KAAK,GAAwB,EAAE,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,MAA6B,CAAA;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,EAAE,CAAA;IACZ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,CAAC,MAAiC;QAC7C,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,OAAe;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,KAAK,EAAoB,CAAA;QAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,iEAAiE,CAAC;aAC1E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAoB,CAAA;QAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAqB;QACrD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;;4CAYoC,CACrC;aACA,IAAI,CACH,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,SAAS,IAAI,CAAC,EACrB,MAAM,CAAC,aAAa,IAAI,CAAC,EACzB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,OAAe;QACtD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,qEAAqE,CAAC;aAC9E,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1CommitProjectionRepository.d.ts

@@ -0,0 +1,13 @@
+import type { CommitProjectionRepository, GitHubCommit } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed projection of commits (migration 0004). */
+export declare class D1CommitProjectionRepository implements CommitProjectionRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    upsertMany(workspaceId: string, commits: GitHubCommit[]): Promise<void>;
+    deleteOlderThan(epochMs: number): Promise<number>;
+    listByRepo(workspaceId: string, repoGithubId: number, limit?: number): Promise<GitHubCommit[]>;
+}
+//# sourceMappingURL=D1CommitProjectionRepository.d.ts.map

package/dist/infrastructure/repositories/D1CommitProjectionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1CommitProjectionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1CommitProjectionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACnF,OAAO,KAAK,EAAE,UAAU,EAAuB,MAAM,2BAA2B,CAAA;AAWhF,wDAAwD;AACxD,qBAAa,4BAA6B,YAAW,0BAA0B;IAC7E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAc5E;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQtD;IAEK,UAAU,CACd,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,SAAM,GACV,OAAO,CAAC,YAAY,EAAE,CAAC,CAQzB;CACF"}

package/dist/infrastructure/repositories/D1CommitProjectionRepository.js

@@ -0,0 +1,48 @@
+import { buildUpsert, commitValues, rowToCommit } from './github-mappers';
+/**
+ * Cap how many single-row upserts go in one `db.batch`. A backfill can hand us
+ * 100k+ commits in a single call; chunking keeps each batch well under D1's
+ * statement-count and bound-parameter ceilings (~100 params/statement). Each
+ * statement here binds one row's columns, so the cap is comfortably conservative.
+ */
+const UPSERT_CHUNK_SIZE = 50;
+/** D1-backed projection of commits (migration 0004). */
+export class D1CommitProjectionRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async upsertMany(workspaceId, commits) {
+        if (commits.length === 0)
+            return;
+        const statements = commits.map((commit) => {
+            const { sql, binds } = buildUpsert('github_commits', commitValues(workspaceId, commit), [
+                'workspace_id',
+                'repo_github_id',
+                'sha',
+            ]);
+            return this.db.prepare(sql).bind(...binds);
+        });
+        for (let i = 0; i < statements.length; i += UPSERT_CHUNK_SIZE) {
+            const chunk = statements.slice(i, i + UPSERT_CHUNK_SIZE);
+            await this.db.batch(chunk);
+        }
+    }
+    async deleteOlderThan(epochMs) {
+        // Range delete on idx_gh_commits_authored. NULL authored_at rows are kept,
+        // since we can't place them in the retention window.
+        const { meta } = await this.db
+            .prepare('DELETE FROM github_commits WHERE authored_at IS NOT NULL AND authored_at < ?')
+            .bind(epochMs)
+            .run();
+        return meta.changes ?? 0;
+    }
+    async listByRepo(workspaceId, repoGithubId, limit = 100) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM github_commits WHERE workspace_id = ? AND repo_github_id = ? ORDER BY authored_at DESC LIMIT ?')
+            .bind(workspaceId, repoGithubId, limit)
+            .all();
+        return results.map(rowToCommit);
+    }
+}
+//# sourceMappingURL=D1CommitProjectionRepository.js.map

package/dist/infrastructure/repositories/D1CommitProjectionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1CommitProjectionRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1CommitProjectionRepository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE/F;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B,wDAAwD;AACxD,MAAM,OAAO,4BAA4B;IACtB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,OAAuB;QAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAChC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACxC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,gBAAgB,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;gBACtF,cAAc;gBACd,gBAAgB;gBAChB,KAAK;aACN,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC9D,MAAM,KAAK,GAA0B,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAA;YAC/E,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,OAAO,CAAC,8EAA8E,CAAC;aACvF,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE,CAAA;QACR,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,UAAU,CACd,WAAmB,EACnB,YAAoB,EACpB,KAAK,GAAG,GAAG;QAEX,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,8GAA8G,CAC/G;aACA,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC;aACtC,GAAG,EAAmB,CAAA;QACzB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;CACF"}

package/dist/infrastructure/repositories/D1ConsensusSessionRepository.d.ts

@@ -0,0 +1,19 @@
+import type { ConsensusSessionRepository } from '@cat-factory/kernel';
+import type { ConsensusSession } from '@cat-factory/contracts';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * Consensus session transcripts in `consensus_sessions` (migration 0002), one row
+ * per (execution, step). The participants/rounds/dissent live as JSON columns; the
+ * session is upserted repeatedly as the multi-model process streams progress.
+ */
+export declare class D1ConsensusSessionRepository implements ConsensusSessionRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    get(workspaceId: string, id: string): Promise<ConsensusSession | null>;
+    getByStep(workspaceId: string, executionId: string, stepIndex: number): Promise<ConsensusSession | null>;
+    getByBlock(workspaceId: string, blockId: string): Promise<ConsensusSession | null>;
+    upsert(workspaceId: string, session: ConsensusSession): Promise<void>;
+}
+//# sourceMappingURL=D1ConsensusSessionRepository.d.ts.map

package/dist/infrastructure/repositories/D1ConsensusSessionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ConsensusSessionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ConsensusSessionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,KAAK,EAAwC,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACpG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAiD3D;;;;GAIG;AACH,qBAAa,4BAA6B,YAAW,0BAA0B;IAC7E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAM3E;IAEK,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAUlC;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAUvF;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC1E;CACF"}

package/dist/infrastructure/repositories/D1ConsensusSessionRepository.js

@@ -0,0 +1,88 @@
+function parseJsonArray(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch {
+        return [];
+    }
+}
+function rowToSession(row) {
+    return {
+        id: row.id,
+        blockId: row.block_id,
+        executionId: row.execution_id,
+        stepIndex: row.step_index,
+        agentKind: row.agent_kind,
+        strategy: row.strategy,
+        status: row.status,
+        participants: parseJsonArray(row.participants),
+        rounds: parseJsonArray(row.rounds),
+        synthesis: row.synthesis,
+        confidence: row.confidence,
+        dissent: parseJsonArray(row.dissent),
+        error: row.error,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+/**
+ * Consensus session transcripts in `consensus_sessions` (migration 0002), one row
+ * per (execution, step). The participants/rounds/dissent live as JSON columns; the
+ * session is upserted repeatedly as the multi-model process streams progress.
+ */
+export class D1ConsensusSessionRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async get(workspaceId, id) {
+        const row = await this.db
+            .prepare(`SELECT * FROM consensus_sessions WHERE workspace_id = ? AND id = ?`)
+            .bind(workspaceId, id)
+            .first();
+        return row ? rowToSession(row) : null;
+    }
+    async getByStep(workspaceId, executionId, stepIndex) {
+        const row = await this.db
+            .prepare(`SELECT * FROM consensus_sessions
+           WHERE workspace_id = ? AND execution_id = ? AND step_index = ?
+           ORDER BY created_at DESC LIMIT 1`)
+            .bind(workspaceId, executionId, stepIndex)
+            .first();
+        return row ? rowToSession(row) : null;
+    }
+    async getByBlock(workspaceId, blockId) {
+        const row = await this.db
+            .prepare(`SELECT * FROM consensus_sessions
+           WHERE workspace_id = ? AND block_id = ?
+           ORDER BY created_at DESC LIMIT 1`)
+            .bind(workspaceId, blockId)
+            .first();
+        return row ? rowToSession(row) : null;
+    }
+    async upsert(workspaceId, session) {
+        await this.db
+            .prepare(`INSERT INTO consensus_sessions
+           (workspace_id, id, block_id, execution_id, step_index, agent_kind, strategy, status,
+            participants, rounds, synthesis, confidence, dissent, error, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT (workspace_id, id) DO UPDATE SET
+           block_id = excluded.block_id,
+           execution_id = excluded.execution_id,
+           step_index = excluded.step_index,
+           agent_kind = excluded.agent_kind,
+           strategy = excluded.strategy,
+           status = excluded.status,
+           participants = excluded.participants,
+           rounds = excluded.rounds,
+           synthesis = excluded.synthesis,
+           confidence = excluded.confidence,
+           dissent = excluded.dissent,
+           error = excluded.error,
+           updated_at = excluded.updated_at`)
+            .bind(workspaceId, session.id, session.blockId, session.executionId, session.stepIndex, session.agentKind, session.strategy, session.status, JSON.stringify(session.participants), JSON.stringify(session.rounds), session.synthesis, session.confidence ?? null, JSON.stringify(session.dissent ?? []), session.error ?? null, session.createdAt, session.updatedAt)
+            .run();
+    }
+}
+//# sourceMappingURL=D1ConsensusSessionRepository.js.map

package/dist/infrastructure/repositories/D1ConsensusSessionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ConsensusSessionRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ConsensusSessionRepository.ts"],"names":[],"mappings":"AAsBA,SAAS,cAAc,CAAI,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAc,CAAC,CAAC,CAAC,EAAE,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAwB;IAC5C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,QAAQ,EAAE,GAAG,CAAC,QAAwC;QACtD,MAAM,EAAE,GAAG,CAAC,MAAoC;QAChD,YAAY,EAAE,cAAc,CAAuB,GAAG,CAAC,YAAY,CAAC;QACpE,MAAM,EAAE,cAAc,CAAiB,GAAG,CAAC,MAAM,CAAC;QAClD,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,cAAc,CAAS,GAAG,CAAC,OAAO,CAAC;QAC5C,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IACtB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,oEAAoE,CAAC;aAC7E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAuB,CAAA;QAC/B,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,WAAmB,EACnB,SAAiB;QAEjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC;aACzC,KAAK,EAAuB,CAAA;QAC/B,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,OAAe;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;4CAEoC,CACrC;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,KAAK,EAAuB,CAAA;QAC/B,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,OAAyB;QACzD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;;;;;;;4CAiBoC,CACrC;aACA,IAAI,CACH,WAAW,EACX,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EACpC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAC9B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,UAAU,IAAI,IAAI,EAC1B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EACrC,OAAO,CAAC,KAAK,IAAI,IAAI,EACrB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,SAAS,CAClB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1DatadogConnectionRepository.d.ts

@@ -0,0 +1,17 @@
+import type { DatadogConnectionRecord, DatadogConnectionRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * A workspace's Datadog connection (migration 0003). Exactly one row per workspace
+ * (the workspace id is the primary key). `api_key`/`app_key` are stored as sealed
+ * envelopes — the caller encrypts before upsert and decrypts at call time.
+ */
+export declare class D1DatadogConnectionRepository implements DatadogConnectionRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    get(workspaceId: string): Promise<DatadogConnectionRecord | null>;
+    upsert(record: DatadogConnectionRecord): Promise<void>;
+    delete(workspaceId: string): Promise<void>;
+}
+//# sourceMappingURL=D1DatadogConnectionRepository.d.ts.map

package/dist/infrastructure/repositories/D1DatadogConnectionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1DatadogConnectionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1DatadogConnectionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AAC/F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAsB3D;;;;GAIG;AACH,qBAAa,6BAA8B,YAAW,2BAA2B;IAC/E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAMtE;IAEK,MAAM,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB3D;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK/C;CACF"}

package/dist/infrastructure/repositories/D1DatadogConnectionRepository.js

@@ -0,0 +1,47 @@
+function rowToRecord(row) {
+    return {
+        workspaceId: row.workspace_id,
+        site: row.site,
+        apiKey: row.api_key,
+        appKey: row.app_key,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+/**
+ * A workspace's Datadog connection (migration 0003). Exactly one row per workspace
+ * (the workspace id is the primary key). `api_key`/`app_key` are stored as sealed
+ * envelopes — the caller encrypts before upsert and decrypts at call time.
+ */
+export class D1DatadogConnectionRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async get(workspaceId) {
+        const row = await this.db
+            .prepare(`SELECT * FROM datadog_connections WHERE workspace_id = ?`)
+            .bind(workspaceId)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO datadog_connections (workspace_id, site, api_key, app_key, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?)
+         ON CONFLICT (workspace_id) DO UPDATE SET
+           site = excluded.site,
+           api_key = excluded.api_key,
+           app_key = excluded.app_key,
+           updated_at = excluded.updated_at`)
+            .bind(record.workspaceId, record.site, record.apiKey, record.appKey, record.createdAt, record.updatedAt)
+            .run();
+    }
+    async delete(workspaceId) {
+        await this.db
+            .prepare(`DELETE FROM datadog_connections WHERE workspace_id = ?`)
+            .bind(workspaceId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1DatadogConnectionRepository.js.map

package/dist/infrastructure/repositories/D1DatadogConnectionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1DatadogConnectionRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1DatadogConnectionRepository.ts"],"names":[],"mappings":"AAYA,SAAS,WAAW,CAAC,GAAyB;IAC5C,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,6BAA6B;IACvB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,0DAA0D,CAAC;aACnE,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA+B;QAC1C,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;4CAMoC,CACrC;aACA,IAAI,CACH,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,wDAAwD,CAAC;aACjE,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1DocumentConnectionRepository.d.ts

@@ -0,0 +1,27 @@
+import type { DocumentConnectionRecord, DocumentConnectionRepository, DocumentSourceKind, SecretCipher } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * D1-backed store of workspace → document-source connections (migration 0012).
+ *
+ * Source credentials (e.g. a Notion/Confluence API token) are third-party
+ * secrets, so they are encrypted at rest with the same AES-256-GCM envelope the
+ * environments integration uses — never written to D1 in plaintext. A row whose
+ * `credentials` column predates encryption (no `v1.` envelope) is still read as
+ * legacy plaintext JSON, then re-encrypted on the next write.
+ */
+export declare class D1DocumentConnectionRepository implements DocumentConnectionRepository {
+    private readonly db;
+    private readonly cipher;
+    constructor({ db, cipher }: {
+        db: D1Database;
+        cipher: SecretCipher;
+    });
+    /** Decode the stored credential blob, decrypting the envelope when present. */
+    private decodeCredentials;
+    private rowToRecord;
+    getByWorkspace(workspaceId: string, source: DocumentSourceKind): Promise<DocumentConnectionRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<DocumentConnectionRecord[]>;
+    upsert(record: DocumentConnectionRecord): Promise<void>;
+    softDelete(workspaceId: string, source: DocumentSourceKind, at: number): Promise<void>;
+}
+//# sourceMappingURL=D1DocumentConnectionRepository.d.ts.map

package/dist/infrastructure/repositories/D1DocumentConnectionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1DocumentConnectionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1DocumentConnectionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAClB,YAAY,EACb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAqB3D;;;;;;;;GAQG;AACH,qBAAa,8BAA+B,YAAW,4BAA4B;IACjF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IAErC,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,YAAY,CAAA;KAAE,EAGnE;IAED,+EAA+E;YACjE,iBAAiB;YAYjB,WAAW;IAWnB,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAQ1C;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAQ9E;IAEK,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB5D;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3F;CACF"}

package/dist/infrastructure/repositories/D1DocumentConnectionRepository.js

@@ -0,0 +1,89 @@
+function parseCredentials(json) {
+    try {
+        const parsed = JSON.parse(json);
+        if (parsed && typeof parsed === 'object')
+            return parsed;
+    }
+    catch {
+        // A malformed bag is treated as empty; the import path then fails closed.
+    }
+    return {};
+}
+/**
+ * D1-backed store of workspace → document-source connections (migration 0012).
+ *
+ * Source credentials (e.g. a Notion/Confluence API token) are third-party
+ * secrets, so they are encrypted at rest with the same AES-256-GCM envelope the
+ * environments integration uses — never written to D1 in plaintext. A row whose
+ * `credentials` column predates encryption (no `v1.` envelope) is still read as
+ * legacy plaintext JSON, then re-encrypted on the next write.
+ */
+export class D1DocumentConnectionRepository {
+    db;
+    cipher;
+    constructor({ db, cipher }) {
+        this.db = db;
+        this.cipher = cipher;
+    }
+    /** Decode the stored credential blob, decrypting the envelope when present. */
+    async decodeCredentials(stored) {
+        // Legacy plaintext rows (written before encryption) lack the envelope tag.
+        if (!stored.startsWith('v1.'))
+            return parseCredentials(stored);
+        try {
+            return parseCredentials(await this.cipher.decrypt(stored));
+        }
+        catch {
+            // Wrong key / corrupt envelope: fail closed with an empty bag so the
+            // import path errors rather than leaking a decrypt exception.
+            return {};
+        }
+    }
+    async rowToRecord(row) {
+        return {
+            workspaceId: row.workspace_id,
+            source: row.source,
+            credentials: await this.decodeCredentials(row.credentials),
+            label: row.label,
+            createdAt: row.created_at,
+            deletedAt: row.deleted_at,
+        };
+    }
+    async getByWorkspace(workspaceId, source) {
+        const row = await this.db
+            .prepare('SELECT * FROM document_connections WHERE workspace_id = ? AND source = ? AND deleted_at IS NULL')
+            .bind(workspaceId, source)
+            .first();
+        return row ? this.rowToRecord(row) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM document_connections WHERE workspace_id = ? AND deleted_at IS NULL ORDER BY created_at DESC')
+            .bind(workspaceId)
+            .all();
+        return Promise.all(results.map((row) => this.rowToRecord(row)));
+    }
+    async upsert(record) {
+        // A workspace has a single live connection per source: clear any prior
+        // binding (live or tombstoned) before inserting, so reconnecting can't
+        // collide on the (workspace_id, source) primary key.
+        await this.db
+            .prepare('DELETE FROM document_connections WHERE workspace_id = ? AND source = ?')
+            .bind(record.workspaceId, record.source)
+            .run();
+        const credentials = await this.cipher.encrypt(JSON.stringify(record.credentials));
+        await this.db
+            .prepare(`INSERT INTO document_connections
+          (workspace_id, source, credentials, label, created_at, deleted_at)
+         VALUES (?, ?, ?, ?, ?, NULL)`)
+            .bind(record.workspaceId, record.source, credentials, record.label, record.createdAt)
+            .run();
+    }
+    async softDelete(workspaceId, source, at) {
+        await this.db
+            .prepare('UPDATE document_connections SET deleted_at = ? WHERE workspace_id = ? AND source = ? AND deleted_at IS NULL')
+            .bind(at, workspaceId, source)
+            .run();
+    }
+}
+//# sourceMappingURL=D1DocumentConnectionRepository.js.map

package/dist/infrastructure/repositories/D1DocumentConnectionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1DocumentConnectionRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1DocumentConnectionRepository.ts"],"names":[],"mappings":"AAiBA,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAgC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,8BAA8B;IACxB,EAAE,CAAY;IACd,MAAM,CAAc;IAErC,YAAY,EAAE,EAAE,EAAE,MAAM,EAA4C;QAClE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,+EAA+E;IACvE,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAC5C,2EAA2E;QAC3E,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC9D,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,8DAA8D;YAC9D,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAA0B;QAClD,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,MAAM,EAAE,GAAG,CAAC,MAA4B;YACxC,WAAW,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC;YAC1D,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,MAA0B;QAE1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,iGAAiG,CAClG;aACA,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;aACzB,KAAK,EAAyB,CAAA;QACjC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,2GAA2G,CAC5G;aACA,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAyB,CAAA;QAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAgC;QAC3C,uEAAuE;QACvE,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,wEAAwE,CAAC;aACjF,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;aACvC,GAAG,EAAE,CAAA;QACR,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QACjF,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;sCAE8B,CAC/B;aACA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;aACpF,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,MAA0B,EAAE,EAAU;QAC1E,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,6GAA6G,CAC9G;aACA,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC;aAC7B,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1DocumentRepository.d.ts

@@ -0,0 +1,15 @@
+import type { DocumentRecord, DocumentRepository, DocumentSourceKind } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed store of imported document projections, across sources (migration 0012). */
+export declare class D1DocumentRepository implements DocumentRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    upsert(record: DocumentRecord): Promise<void>;
+    get(workspaceId: string, source: DocumentSourceKind, externalId: string): Promise<DocumentRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<DocumentRecord[]>;
+    listByBlock(workspaceId: string, blockId: string): Promise<DocumentRecord[]>;
+    linkBlock(workspaceId: string, source: DocumentSourceKind, externalId: string, blockId: string | null): Promise<void>;
+}
+//# sourceMappingURL=D1DocumentRepository.d.ts.map

package/dist/infrastructure/repositories/D1DocumentRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1DocumentRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1DocumentRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AACjG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AA8B3D,yFAAyF;AACzF,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BlD;IAEK,GAAG,CACP,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAQhC;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAQpE;IAEK,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAQjF;IAEK,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAAC,IAAI,CAAC,CAOf;CACF"}

package/dist/infrastructure/repositories/D1DocumentRepository.js

@@ -0,0 +1,66 @@
+function rowToRecord(row) {
+    return {
+        workspaceId: row.workspace_id,
+        source: row.source,
+        externalId: row.external_id,
+        title: row.title,
+        url: row.url,
+        excerpt: row.excerpt,
+        body: row.body,
+        linkedBlockId: row.linked_block_id,
+        syncedAt: row.synced_at,
+        deletedAt: row.deleted_at,
+    };
+}
+/** D1-backed store of imported document projections, across sources (migration 0012). */
+export class D1DocumentRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO documents
+          (workspace_id, source, external_id, title, url, excerpt, body,
+           linked_block_id, synced_at, deleted_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)
+         ON CONFLICT (workspace_id, source, external_id) DO UPDATE SET
+           title = excluded.title,
+           url = excluded.url,
+           excerpt = excluded.excerpt,
+           body = excluded.body,
+           linked_block_id = excluded.linked_block_id,
+           synced_at = excluded.synced_at,
+           deleted_at = NULL`)
+            .bind(record.workspaceId, record.source, record.externalId, record.title, record.url, record.excerpt, record.body, record.linkedBlockId, record.syncedAt)
+            .run();
+    }
+    async get(workspaceId, source, externalId) {
+        const row = await this.db
+            .prepare('SELECT * FROM documents WHERE workspace_id = ? AND source = ? AND external_id = ? AND deleted_at IS NULL')
+            .bind(workspaceId, source, externalId)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM documents WHERE workspace_id = ? AND deleted_at IS NULL ORDER BY synced_at DESC')
+            .bind(workspaceId)
+            .all();
+        return results.map(rowToRecord);
+    }
+    async listByBlock(workspaceId, blockId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM documents WHERE workspace_id = ? AND linked_block_id = ? AND deleted_at IS NULL ORDER BY synced_at DESC')
+            .bind(workspaceId, blockId)
+            .all();
+        return results.map(rowToRecord);
+    }
+    async linkBlock(workspaceId, source, externalId, blockId) {
+        await this.db
+            .prepare('UPDATE documents SET linked_block_id = ? WHERE workspace_id = ? AND source = ? AND external_id = ?')
+            .bind(blockId, workspaceId, source, externalId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1DocumentRepository.js.map

package/dist/infrastructure/repositories/D1DocumentRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1DocumentRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1DocumentRepository.ts"],"names":[],"mappings":"AAgBA,SAAS,WAAW,CAAC,GAAgB;IACnC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,MAAM,EAAE,GAAG,CAAC,MAA4B;QACxC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,OAAO,oBAAoB;IACd,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAsB;QACjC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;6BAWqB,CACtB;aACA,IAAI,CACH,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,QAAQ,CAChB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAA0B,EAC1B,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,0GAA0G,CAC3G;aACA,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;aACrC,KAAK,EAAe,CAAA;QACvB,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,+FAA+F,CAChG;aACA,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAe,CAAA;QACrB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,OAAe;QACpD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,uHAAuH,CACxH;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,GAAG,EAAe,CAAA;QACrB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,MAA0B,EAC1B,UAAkB,EAClB,OAAsB;QAEtB,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,oGAAoG,CACrG;aACA,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;aAC9C,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1EmailConnectionRepository.d.ts

@@ -0,0 +1,13 @@
+import type { EmailConnectionRecord, EmailConnectionRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed per-account email-sender connection (sealed provider API key). */
+export declare class D1EmailConnectionRepository implements EmailConnectionRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    getByAccount(accountId: string): Promise<EmailConnectionRecord | null>;
+    upsert(record: EmailConnectionRecord): Promise<void>;
+    softDelete(accountId: string, at: number): Promise<void>;
+}
+//# sourceMappingURL=D1EmailConnectionRepository.d.ts.map

package/dist/infrastructure/repositories/D1EmailConnectionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1EmailConnectionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1EmailConnectionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EAE1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAwB3D,+EAA+E;AAC/E,qBAAa,2BAA4B,YAAW,yBAAyB;IAC3E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAM3E;IAEK,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBzD;IAEK,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;CACF"}

package/dist/infrastructure/repositories/D1EmailConnectionRepository.js

@@ -0,0 +1,46 @@
+function rowToRecord(row) {
+    return {
+        accountId: row.account_id,
+        provider: row.provider,
+        fromAddress: row.from_address,
+        apiKeyCipher: row.api_key_cipher,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        deletedAt: row.deleted_at,
+    };
+}
+/** D1-backed per-account email-sender connection (sealed provider API key). */
+export class D1EmailConnectionRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async getByAccount(accountId) {
+        const row = await this.db
+            .prepare('SELECT * FROM email_connections WHERE account_id = ? AND deleted_at IS NULL')
+            .bind(accountId)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO email_connections
+           (account_id, provider, from_address, api_key_cipher, created_at, updated_at, deleted_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT (account_id) DO UPDATE SET
+           provider = excluded.provider,
+           from_address = excluded.from_address,
+           api_key_cipher = excluded.api_key_cipher,
+           updated_at = excluded.updated_at,
+           deleted_at = excluded.deleted_at`)
+            .bind(record.accountId, record.provider, record.fromAddress, record.apiKeyCipher, record.createdAt, record.updatedAt, record.deletedAt)
+            .run();
+    }
+    async softDelete(accountId, at) {
+        await this.db
+            .prepare('UPDATE email_connections SET deleted_at = ?, updated_at = ? WHERE account_id = ?')
+            .bind(at, at, accountId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1EmailConnectionRepository.js.map