@cat-factory/worker 0.6.0

package/dist/infrastructure/repositories/D1LiveContainerRepository.d.ts

@@ -0,0 +1,17 @@
+import type { D1Database } from '@cloudflare/workers-types';
+import type { LiveContainerRecord, LiveContainerStore } from '../containers/ContainerInstanceRegistry';
+/**
+ * The live-container inventory over D1 (`live_containers`, migration 0022). `add`
+ * uses `ON CONFLICT(container_key) DO NOTHING` so a replayed dispatch preserves the
+ * first `started_at` — the container's true age the reaper keys off.
+ */
+export declare class D1LiveContainerRepository implements LiveContainerStore {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    add(record: LiveContainerRecord): Promise<void>;
+    remove(containerKey: string): Promise<void>;
+    listStartedBefore(epochMs: number): Promise<LiveContainerRecord[]>;
+}
+//# sourceMappingURL=D1LiveContainerRepository.d.ts.map

package/dist/infrastructure/repositories/D1LiveContainerRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1LiveContainerRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1LiveContainerRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,yCAAyC,CAAA;AAEhD;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,kBAAkB;IAClE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CASpD;IAEK,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhD;IAEK,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAoBvE;CACF"}

package/dist/infrastructure/repositories/D1LiveContainerRepository.js

@@ -0,0 +1,40 @@
+/**
+ * The live-container inventory over D1 (`live_containers`, migration 0022). `add`
+ * uses `ON CONFLICT(container_key) DO NOTHING` so a replayed dispatch preserves the
+ * first `started_at` — the container's true age the reaper keys off.
+ */
+export class D1LiveContainerRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async add(record) {
+        await this.db
+            .prepare(`INSERT INTO live_containers (container_key, kind, workspace_id, started_at)
+         VALUES (?, ?, ?, ?)
+         ON CONFLICT(container_key) DO NOTHING`)
+            .bind(record.containerKey, record.kind, record.workspaceId ?? null, record.startedAt)
+            .run();
+    }
+    async remove(containerKey) {
+        await this.db
+            .prepare('DELETE FROM live_containers WHERE container_key = ?')
+            .bind(containerKey)
+            .run();
+    }
+    async listStartedBefore(epochMs) {
+        const { results } = await this.db
+            .prepare(`SELECT container_key, kind, workspace_id, started_at FROM live_containers
+         WHERE started_at < ?
+         ORDER BY started_at`)
+            .bind(epochMs)
+            .all();
+        return (results ?? []).map((r) => ({
+            containerKey: r.container_key,
+            kind: r.kind,
+            ...(r.workspace_id != null ? { workspaceId: r.workspace_id } : {}),
+            startedAt: r.started_at,
+        }));
+    }
+}
+//# sourceMappingURL=D1LiveContainerRepository.js.map

package/dist/infrastructure/repositories/D1LiveContainerRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1LiveContainerRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1LiveContainerRepository.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAA2B;QACnC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;+CAEuC,CACxC;aACA,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC;aACpF,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/B,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,qDAAqD,CAAC;aAC9D,IAAI,CAAC,YAAY,CAAC;aAClB,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe;QACrC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;;6BAEqB,CACtB;aACA,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAKA,CAAA;QACN,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,YAAY,EAAE,CAAC,CAAC,aAAa;YAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,SAAS,EAAE,CAAC,CAAC,UAAU;SACxB,CAAC,CAAC,CAAA;IACL,CAAC;CACF"}

package/dist/infrastructure/repositories/D1LlmCallMetricRepository.d.ts

@@ -0,0 +1,15 @@
+import { type LlmCallMetric, type LlmCallMetricRepository, type LlmCallMetricSummary, type LlmPromptChainTip } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed sink for LLM observability (see migration 0026). */
+export declare class D1LlmCallMetricRepository implements LlmCallMetricRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    record(metric: LlmCallMetric): Promise<void>;
+    latestChainTip(workspaceId: string, executionId: string, agentKind: string): Promise<LlmPromptChainTip | null>;
+    listByExecution(workspaceId: string, executionId: string, limit?: number): Promise<LlmCallMetric[]>;
+    summarizeByExecution(workspaceId: string, executionId: string): Promise<LlmCallMetricSummary[]>;
+    deleteOlderThan(epochMs: number): Promise<number>;
+}
+//# sourceMappingURL=D1LlmCallMetricRepository.d.ts.map

package/dist/infrastructure/repositories/D1LlmCallMetricRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1LlmCallMetricRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1LlmCallMetricRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAoE3D,iEAAiE;AACjE,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAyCjD;IAEK,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAcnC;IAEK,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,aAAa,EAAE,CAAC,CAY1B;IAEK,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAgDjC;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtD;CACF"}

package/dist/infrastructure/repositories/D1LlmCallMetricRepository.js

@@ -0,0 +1,123 @@
+import { LLM_WARNING_FINISH_REASONS, } from '@cat-factory/kernel';
+// `length` and `content_filter` as a SQL list literal, derived from the shared
+// constant so the warning classification matches the service + the Node store.
+const WARNING_REASONS_SQL = LLM_WARNING_FINISH_REASONS.map((r) => `'${r}'`).join(', ');
+function rowToMetric(row) {
+    return {
+        id: row.id,
+        workspaceId: row.workspace_id,
+        executionId: row.execution_id,
+        agentKind: row.agent_kind,
+        provider: row.provider,
+        model: row.model,
+        createdAt: row.created_at,
+        streaming: row.streaming === 1,
+        messageCount: row.message_count,
+        toolCount: row.tool_count,
+        requestMaxTokens: row.request_max_tokens,
+        promptTokens: row.prompt_tokens,
+        cachedPromptTokens: row.cached_prompt_tokens,
+        completionTokens: row.completion_tokens,
+        totalTokens: row.total_tokens,
+        finishReason: row.finish_reason,
+        upstreamMs: row.upstream_ms,
+        overheadMs: row.overhead_ms,
+        totalMs: row.total_ms,
+        ok: row.ok === 1,
+        httpStatus: row.http_status,
+        errorMessage: row.error_message,
+        promptText: row.prompt_text,
+        promptPrefixCount: row.prompt_prefix_count,
+        promptHash: row.prompt_hash,
+        responseText: row.response_text,
+        reasoningText: row.reasoning_text,
+    };
+}
+/** D1-backed sink for LLM observability (see migration 0026). */
+export class D1LlmCallMetricRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async record(metric) {
+        await this.db
+            .prepare(`INSERT INTO llm_call_metrics
+           (id, workspace_id, execution_id, agent_kind, provider, model, created_at,
+            streaming, message_count, tool_count, request_max_tokens,
+            prompt_tokens, cached_prompt_tokens, completion_tokens, total_tokens, finish_reason,
+            upstream_ms, overhead_ms, total_ms, ok, http_status, error_message,
+            prompt_text, prompt_prefix_count, prompt_hash, response_text, reasoning_text)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .bind(metric.id, metric.workspaceId, metric.executionId, metric.agentKind, metric.provider, metric.model, metric.createdAt, metric.streaming ? 1 : 0, metric.messageCount, metric.toolCount, metric.requestMaxTokens, metric.promptTokens, metric.cachedPromptTokens, metric.completionTokens, metric.totalTokens, metric.finishReason, metric.upstreamMs, metric.overheadMs, metric.totalMs, metric.ok ? 1 : 0, metric.httpStatus, metric.errorMessage, metric.promptText, metric.promptPrefixCount, metric.promptHash, metric.responseText, metric.reasoningText)
+            .run();
+    }
+    async latestChainTip(workspaceId, executionId, agentKind) {
+        // The newest call for the conversation; one indexed row, no text columns.
+        const row = await this.db
+            .prepare(
+        // message_count breaks a same-millisecond createdAt tie in chain order (it
+        // grows monotonically as the conversation appends); id is the last resort.
+        `SELECT message_count, prompt_hash FROM llm_call_metrics
+         WHERE workspace_id = ? AND execution_id = ? AND agent_kind = ?
+         ORDER BY created_at DESC, message_count DESC, id DESC
+         LIMIT 1`)
+            .bind(workspaceId, executionId, agentKind)
+            .first();
+        return row ? { messageCount: row.message_count, promptHash: row.prompt_hash } : null;
+    }
+    async listByExecution(workspaceId, executionId, limit) {
+        // Newest first; `LIMIT -1` means "no limit" in SQLite, so an omitted cap reads all.
+        const { results } = await this.db
+            .prepare(`SELECT * FROM llm_call_metrics
+         WHERE workspace_id = ? AND execution_id = ?
+         ORDER BY created_at DESC, id DESC
+         LIMIT ?`)
+            .bind(workspaceId, executionId, limit ?? -1)
+            .all();
+        return (results ?? []).map(rowToMetric);
+    }
+    async summarizeByExecution(workspaceId, executionId) {
+        // Aggregate-only: deliberately selects no prompt/response text, so this stays
+        // cheap to run on every execution emit (it backs the live board rollups).
+        const { results } = await this.db
+            .prepare(`SELECT
+           agent_kind                                                   AS agent_kind,
+           COUNT(*)                                                     AS calls,
+           COALESCE(SUM(prompt_tokens), 0)                              AS prompt_tokens,
+           COALESCE(SUM(completion_tokens), 0)                          AS completion_tokens,
+           COALESCE(MAX(completion_tokens), 0)                          AS peak_completion_tokens,
+           MAX(request_max_tokens)                                      AS max_output_tokens,
+           COALESCE(SUM(CASE WHEN finish_reason = 'length' THEN 1 ELSE 0 END), 0)         AS truncated_calls,
+           COALESCE(SUM(upstream_ms), 0)                                AS upstream_ms,
+           COALESCE(SUM(overhead_ms), 0)                                AS overhead_ms,
+           COALESCE(SUM(CASE WHEN ok = 0 THEN 1 ELSE 0 END), 0)         AS errors,
+           COALESCE(SUM(CASE WHEN ok = 1 AND finish_reason IN (${WARNING_REASONS_SQL}) THEN 1 ELSE 0 END), 0) AS warnings
+         FROM llm_call_metrics
+         WHERE workspace_id = ? AND execution_id = ?
+         GROUP BY agent_kind`)
+            .bind(workspaceId, executionId)
+            .all();
+        return (results ?? []).map((r) => ({
+            agentKind: r.agent_kind,
+            calls: r.calls,
+            promptTokens: r.prompt_tokens,
+            completionTokens: r.completion_tokens,
+            peakCompletionTokens: r.peak_completion_tokens,
+            maxOutputTokens: r.max_output_tokens,
+            truncatedCalls: r.truncated_calls,
+            upstreamMs: r.upstream_ms,
+            overheadMs: r.overhead_ms,
+            errors: r.errors,
+            warnings: r.warnings,
+        }));
+    }
+    async deleteOlderThan(epochMs) {
+        // Range delete on idx_llm_call_metrics_created; bounded by the rows being pruned.
+        const { meta } = await this.db
+            .prepare('DELETE FROM llm_call_metrics WHERE created_at < ?')
+            .bind(epochMs)
+            .run();
+        return meta.changes ?? 0;
+    }
+}
+//# sourceMappingURL=D1LlmCallMetricRepository.js.map

package/dist/infrastructure/repositories/D1LlmCallMetricRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1LlmCallMetricRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1LlmCallMetricRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,GAK3B,MAAM,qBAAqB,CAAA;AAG5B,+EAA+E;AAC/E,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAgCtF,SAAS,WAAW,CAAC,GAAc;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,SAAS,KAAK,CAAC;QAC9B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;QAC5C,gBAAgB,EAAE,GAAG,CAAC,iBAAiB;QACvC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;QAChB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAC1C,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,aAAa,EAAE,GAAG,CAAC,cAAc;KAClC,CAAA;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAqB;QAChC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;kGAM0F,CAC3F;aACA,IAAI,CACH,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACxB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACjB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,aAAa,CACrB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,WAAmB,EACnB,SAAiB;QAEjB,0EAA0E;QAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO;QACN,2EAA2E;QAC3E,2EAA2E;QAC3E;;;iBAGS,CACV;aACA,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC;aACzC,KAAK,EAAkD,CAAA;QAC1D,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACtF,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,WAAmB,EACnB,KAAc;QAEd,oFAAoF;QACpF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;;;iBAGS,CACV;aACA,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;aAC3C,GAAG,EAAa,CAAA;QACnB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,WAAmB,EACnB,WAAmB;QAEnB,8EAA8E;QAC9E,0EAA0E;QAC1E,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;;;;;;;;;;;iEAWyD,mBAAmB;;;6BAGvD,CACtB;aACA,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;aAC9B,GAAG,EAYA,CAAA;QACN,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,YAAY,EAAE,CAAC,CAAC,aAAa;YAC7B,gBAAgB,EAAE,CAAC,CAAC,iBAAiB;YACrC,oBAAoB,EAAE,CAAC,CAAC,sBAAsB;YAC9C,eAAe,EAAE,CAAC,CAAC,iBAAiB;YACpC,cAAc,EAAE,CAAC,CAAC,eAAe;YACjC,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,kFAAkF;QAClF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,OAAO,CAAC,mDAAmD,CAAC;aAC5D,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE,CAAA;QACR,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1B,CAAC;CACF"}

package/dist/infrastructure/repositories/D1LocalModelEndpointRepository.d.ts

@@ -0,0 +1,15 @@
+import type { LocalModelEndpointRecord, LocalModelEndpointRepository } from '@cat-factory/kernel';
+import type { LocalRunner } from '@cat-factory/contracts';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed store of a user's locally-run model endpoints (migration 0002). */
+export declare class D1LocalModelEndpointRepository implements LocalModelEndpointRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    listByUser(userId: string): Promise<LocalModelEndpointRecord[]>;
+    getByUserProvider(userId: string, provider: LocalRunner): Promise<LocalModelEndpointRecord | null>;
+    upsert(record: LocalModelEndpointRecord): Promise<void>;
+    remove(userId: string, provider: LocalRunner): Promise<void>;
+}
+//# sourceMappingURL=D1LocalModelEndpointRepository.d.ts.map

package/dist/infrastructure/repositories/D1LocalModelEndpointRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1LocalModelEndpointRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1LocalModelEndpointRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AACjG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAmC3D,gFAAgF;AAChF,qBAAa,8BAA+B,YAAW,4BAA4B;IACjF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAC/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAMpE;IAEK,iBAAiB,CACrB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAM1C;IAEK,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB5D;IAEK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAKjE;CACF"}

package/dist/infrastructure/repositories/D1LocalModelEndpointRepository.js

@@ -0,0 +1,63 @@
+function toRecord(row) {
+    return {
+        userId: row.user_id,
+        provider: row.provider,
+        label: row.label,
+        baseUrl: row.base_url,
+        apiKeyCipher: row.api_key_cipher,
+        models: parseModels(row.models),
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+function parseModels(json) {
+    try {
+        const parsed = JSON.parse(json);
+        return Array.isArray(parsed) ? parsed.map(String) : [];
+    }
+    catch {
+        return [];
+    }
+}
+/** D1-backed store of a user's locally-run model endpoints (migration 0002). */
+export class D1LocalModelEndpointRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async listByUser(userId) {
+        const { results } = await this.db
+            .prepare(`SELECT * FROM local_model_endpoints WHERE user_id = ? ORDER BY created_at ASC`)
+            .bind(userId)
+            .all();
+        return (results ?? []).map(toRecord);
+    }
+    async getByUserProvider(userId, provider) {
+        const row = await this.db
+            .prepare(`SELECT * FROM local_model_endpoints WHERE user_id = ? AND provider = ?`)
+            .bind(userId, provider)
+            .first();
+        return row ? toRecord(row) : null;
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO local_model_endpoints
+           (user_id, provider, label, base_url, api_key_cipher, models, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT (user_id, provider) DO UPDATE SET
+           label = excluded.label,
+           base_url = excluded.base_url,
+           api_key_cipher = excluded.api_key_cipher,
+           models = excluded.models,
+           updated_at = excluded.updated_at`)
+            .bind(record.userId, record.provider, record.label, record.baseUrl, record.apiKeyCipher, JSON.stringify(record.models), record.createdAt, record.updatedAt)
+            .run();
+    }
+    async remove(userId, provider) {
+        await this.db
+            .prepare(`DELETE FROM local_model_endpoints WHERE user_id = ? AND provider = ?`)
+            .bind(userId, provider)
+            .run();
+    }
+}
+//# sourceMappingURL=D1LocalModelEndpointRepository.js.map

package/dist/infrastructure/repositories/D1LocalModelEndpointRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1LocalModelEndpointRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1LocalModelEndpointRepository.ts"],"names":[],"mappings":"AAeA,SAAS,QAAQ,CAAC,GAA0B;IAC1C,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,QAAQ,EAAE,GAAG,CAAC,QAAuB;QACrC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,OAAO,8BAA8B;IACxB,EAAE,CAAY;IAC/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CAAC,+EAA+E,CAAC;aACxF,IAAI,CAAC,MAAM,CAAC;aACZ,GAAG,EAAyB,CAAA;QAC/B,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,MAAc,EACd,QAAqB;QAErB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,wEAAwE,CAAC;aACjF,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;aACtB,KAAK,EAAyB,CAAA;QACjC,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAgC;QAC3C,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;4CAQoC,CACrC;aACA,IAAI,CACH,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,YAAY,EACnB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAC7B,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,QAAqB;QAChD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,sEAAsE,CAAC;aAC/E,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;aACtB,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1MembershipRepository.d.ts

@@ -0,0 +1,15 @@
+import type { Membership, MembershipRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed store of account memberships (user ↔ account + roles; migration 0043). */
+export declare class D1MembershipRepository implements MembershipRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    listByUser(userId: string): Promise<Membership[]>;
+    listByAccount(accountId: string): Promise<Membership[]>;
+    get(accountId: string, userId: string): Promise<Membership | null>;
+    upsert(membership: Membership): Promise<void>;
+    remove(accountId: string, userId: string): Promise<void>;
+}
+//# sourceMappingURL=D1MembershipRepository.d.ts.map

package/dist/infrastructure/repositories/D1MembershipRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1MembershipRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1MembershipRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,UAAU,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AACxF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AA2B3D,uFAAuF;AACvF,qBAAa,sBAAuB,YAAW,oBAAoB;IACjE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAMtD;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAM5D;IAEK,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAMvE;IAEK,MAAM,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAalD;IAEK,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;CACF"}

package/dist/infrastructure/repositories/D1MembershipRepository.js

@@ -0,0 +1,58 @@
+/** Parse the CSV `roles` column into a non-empty role set (defaults to developer). */
+function parseRoles(csv) {
+    const roles = (csv ?? '')
+        .split(',')
+        .map((r) => r.trim())
+        .filter((r) => r === 'admin' || r === 'developer' || r === 'product');
+    return roles.length > 0 ? [...new Set(roles)] : ['developer'];
+}
+function rowToMembership(row) {
+    return {
+        accountId: row.account_id,
+        userId: row.user_id,
+        roles: parseRoles(row.roles),
+        createdAt: row.created_at,
+    };
+}
+/** D1-backed store of account memberships (user ↔ account + roles; migration 0043). */
+export class D1MembershipRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async listByUser(userId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM memberships WHERE user_id = ? ORDER BY created_at ASC')
+            .bind(userId)
+            .all();
+        return results.map(rowToMembership);
+    }
+    async listByAccount(accountId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM memberships WHERE account_id = ? ORDER BY created_at ASC')
+            .bind(accountId)
+            .all();
+        return results.map(rowToMembership);
+    }
+    async get(accountId, userId) {
+        const row = await this.db
+            .prepare('SELECT * FROM memberships WHERE account_id = ? AND user_id = ?')
+            .bind(accountId, userId)
+            .first();
+        return row ? rowToMembership(row) : null;
+    }
+    async upsert(membership) {
+        await this.db
+            .prepare(`INSERT INTO memberships (account_id, user_id, roles, created_at) VALUES (?, ?, ?, ?)
+         ON CONFLICT (account_id, user_id) DO UPDATE SET roles = excluded.roles`)
+            .bind(membership.accountId, membership.userId, membership.roles.join(','), membership.createdAt)
+            .run();
+    }
+    async remove(accountId, userId) {
+        await this.db
+            .prepare('DELETE FROM memberships WHERE account_id = ? AND user_id = ?')
+            .bind(accountId, userId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1MembershipRepository.js.map

package/dist/infrastructure/repositories/D1MembershipRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1MembershipRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1MembershipRepository.ts"],"names":[],"mappings":"AAUA,sFAAsF;AACtF,SAAS,UAAU,CAAC,GAAkB;IACpC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;SACtB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,SAAS,CAAC,CAAA;IACzF,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,eAAe,CAAC,GAAkB;IACzC,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;QAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,OAAO,sBAAsB;IAChB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CAAC,qEAAqE,CAAC;aAC9E,IAAI,CAAC,MAAM,CAAC;aACZ,GAAG,EAAiB,CAAA;QACvB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CAAC,wEAAwE,CAAC;aACjF,IAAI,CAAC,SAAS,CAAC;aACf,GAAG,EAAiB,CAAA;QACvB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAc;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,gEAAgE,CAAC;aACzE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;aACvB,KAAK,EAAiB,CAAA;QACzB,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAsB;QACjC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;gFACwE,CACzE;aACA,IAAI,CACH,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAC1B,UAAU,CAAC,SAAS,CACrB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,MAAc;QAC5C,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,8DAA8D,CAAC;aACvE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;aACvB,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1MergePresetRepository.d.ts

@@ -0,0 +1,21 @@
+import type { MergePresetRepository } from '@cat-factory/kernel';
+import type { MergeThresholdPreset } from '@cat-factory/contracts';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * Merge threshold presets, one row per preset in `merge_threshold_presets`
+ * (migration 0024). Enforces the single-default invariant: promoting a preset to
+ * default demotes every other in the workspace, in one statement before the
+ * upsert. The default preset cannot be removed (the service keeps that rule).
+ */
+export declare class D1MergePresetRepository implements MergePresetRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    get(workspaceId: string, id: string): Promise<MergeThresholdPreset | null>;
+    list(workspaceId: string): Promise<MergeThresholdPreset[]>;
+    getDefault(workspaceId: string): Promise<MergeThresholdPreset | null>;
+    upsert(workspaceId: string, preset: MergeThresholdPreset): Promise<void>;
+    remove(workspaceId: string, id: string): Promise<void>;
+}
+//# sourceMappingURL=D1MergePresetRepository.d.ts.map

package/dist/infrastructure/repositories/D1MergePresetRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1MergePresetRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1MergePresetRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAA2B,MAAM,wBAAwB,CAAA;AAC3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAkC3D;;;;;GAKG;AACH,qBAAa,uBAAwB,YAAW,qBAAqB;IACnE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAM/E;IAEK,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAQ/D;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAU1E;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+C7E;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3D;CACF"}

package/dist/infrastructure/repositories/D1MergePresetRepository.js

@@ -0,0 +1,88 @@
+function rowToPreset(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        maxComplexity: row.max_complexity,
+        maxRisk: row.max_risk,
+        maxImpact: row.max_impact,
+        ciMaxAttempts: row.ci_max_attempts,
+        maxRequirementIterations: row.max_requirement_iterations,
+        maxRequirementConcernAllowed: row.max_requirement_concern_allowed,
+        releaseWatchWindowMinutes: row.release_watch_window_minutes,
+        releaseMaxAttempts: row.release_max_attempts,
+        isDefault: row.is_default === 1,
+        createdAt: row.created_at,
+    };
+}
+/**
+ * Merge threshold presets, one row per preset in `merge_threshold_presets`
+ * (migration 0024). Enforces the single-default invariant: promoting a preset to
+ * default demotes every other in the workspace, in one statement before the
+ * upsert. The default preset cannot be removed (the service keeps that rule).
+ */
+export class D1MergePresetRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async get(workspaceId, id) {
+        const row = await this.db
+            .prepare(`SELECT * FROM merge_threshold_presets WHERE workspace_id = ? AND id = ?`)
+            .bind(workspaceId, id)
+            .first();
+        return row ? rowToPreset(row) : null;
+    }
+    async list(workspaceId) {
+        const { results } = await this.db
+            .prepare(`SELECT * FROM merge_threshold_presets WHERE workspace_id = ? ORDER BY created_at ASC`)
+            .bind(workspaceId)
+            .all();
+        return results.map(rowToPreset);
+    }
+    async getDefault(workspaceId) {
+        const row = await this.db
+            .prepare(`SELECT * FROM merge_threshold_presets
+           WHERE workspace_id = ? AND is_default = 1
+           ORDER BY created_at ASC LIMIT 1`)
+            .bind(workspaceId)
+            .first();
+        return row ? rowToPreset(row) : null;
+    }
+    async upsert(workspaceId, preset) {
+        // Promoting this preset to default demotes any other default first, so the
+        // single-default invariant holds.
+        if (preset.isDefault) {
+            await this.db
+                .prepare(`UPDATE merge_threshold_presets SET is_default = 0
+             WHERE workspace_id = ? AND id <> ?`)
+                .bind(workspaceId, preset.id)
+                .run();
+        }
+        await this.db
+            .prepare(`INSERT INTO merge_threshold_presets
+           (workspace_id, id, name, max_complexity, max_risk, max_impact, ci_max_attempts,
+            max_requirement_iterations, max_requirement_concern_allowed,
+            release_watch_window_minutes, release_max_attempts, is_default, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT (workspace_id, id) DO UPDATE SET
+           name = excluded.name,
+           max_complexity = excluded.max_complexity,
+           max_risk = excluded.max_risk,
+           max_impact = excluded.max_impact,
+           ci_max_attempts = excluded.ci_max_attempts,
+           max_requirement_iterations = excluded.max_requirement_iterations,
+           max_requirement_concern_allowed = excluded.max_requirement_concern_allowed,
+           release_watch_window_minutes = excluded.release_watch_window_minutes,
+           release_max_attempts = excluded.release_max_attempts,
+           is_default = excluded.is_default`)
+            .bind(workspaceId, preset.id, preset.name, preset.maxComplexity, preset.maxRisk, preset.maxImpact, preset.ciMaxAttempts, preset.maxRequirementIterations, preset.maxRequirementConcernAllowed, preset.releaseWatchWindowMinutes, preset.releaseMaxAttempts, preset.isDefault ? 1 : 0, preset.createdAt)
+            .run();
+    }
+    async remove(workspaceId, id) {
+        await this.db
+            .prepare(`DELETE FROM merge_threshold_presets WHERE workspace_id = ? AND id = ? AND is_default = 0`)
+            .bind(workspaceId, id)
+            .run();
+    }
+}
+//# sourceMappingURL=D1MergePresetRepository.js.map

package/dist/infrastructure/repositories/D1MergePresetRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1MergePresetRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1MergePresetRepository.ts"],"names":[],"mappings":"AAmBA,SAAS,WAAW,CAAC,GAAmB;IACtC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,wBAAwB,EAAE,GAAG,CAAC,0BAA0B;QACxD,4BAA4B,EAAE,GAAG,CAAC,+BAA0D;QAC5F,yBAAyB,EAAE,GAAG,CAAC,4BAA4B;QAC3D,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;QAC5C,SAAS,EAAE,GAAG,CAAC,UAAU,KAAK,CAAC;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAuB;IACjB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,yEAAyE,CAAC;aAClF,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAAkB,CAAA;QAC1B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,sFAAsF,CACvF;aACA,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAkB,CAAA;QACxB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;2CAEmC,CACpC;aACA,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,EAAkB,CAAA;QAC1B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAA4B;QAC5D,2EAA2E;QAC3E,kCAAkC;QAClC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,EAAE;iBACV,OAAO,CACN;gDACsC,CACvC;iBACA,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;iBAC5B,GAAG,EAAE,CAAA;QACV,CAAC;QACD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;;;;;4CAeoC,CACrC;aACA,IAAI,CACH,WAAW,EACX,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,wBAAwB,EAC/B,MAAM,CAAC,4BAA4B,EACnC,MAAM,CAAC,yBAAyB,EAChC,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACxB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,EAAU;QAC1C,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,0FAA0F,CAC3F;aACA,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1ModelDefaultsRepository.d.ts

@@ -0,0 +1,18 @@
+import type { ModelDefaultsRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * A workspace's per-agent-kind default models, one row per (workspace, agent kind)
+ * in `workspace_model_defaults` (migration 0028). `replace` rewrites the whole map
+ * for a workspace atomically (delete-all then insert-each in one `db.batch`), so a
+ * kind omitted from the new map is cleared.
+ */
+export declare class D1ModelDefaultsRepository implements ModelDefaultsRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    get(workspaceId: string): Promise<Record<string, string>>;
+    getForKind(workspaceId: string, agentKind: string): Promise<string | null>;
+    replace(workspaceId: string, defaults: Record<string, string>): Promise<void>;
+}
+//# sourceMappingURL=D1ModelDefaultsRepository.d.ts.map

package/dist/infrastructure/repositories/D1ModelDefaultsRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ModelDefaultsRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ModelDefaultsRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAO3D;;;;;GAKG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQ9D;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ/E;IAEK,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBlF;CACF"}

package/dist/infrastructure/repositories/D1ModelDefaultsRepository.js

@@ -0,0 +1,47 @@
+/**
+ * A workspace's per-agent-kind default models, one row per (workspace, agent kind)
+ * in `workspace_model_defaults` (migration 0028). `replace` rewrites the whole map
+ * for a workspace atomically (delete-all then insert-each in one `db.batch`), so a
+ * kind omitted from the new map is cleared.
+ */
+export class D1ModelDefaultsRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async get(workspaceId) {
+        const { results } = await this.db
+            .prepare(`SELECT agent_kind, model_id FROM workspace_model_defaults WHERE workspace_id = ?`)
+            .bind(workspaceId)
+            .all();
+        const map = {};
+        for (const row of results)
+            map[row.agent_kind] = row.model_id;
+        return map;
+    }
+    async getForKind(workspaceId, agentKind) {
+        const row = await this.db
+            .prepare(`SELECT model_id FROM workspace_model_defaults WHERE workspace_id = ? AND agent_kind = ?`)
+            .bind(workspaceId, agentKind)
+            .first();
+        return row ? row.model_id : null;
+    }
+    async replace(workspaceId, defaults) {
+        // Rewrite the whole per-kind map atomically: clear the workspace's rows, then
+        // insert one per entry. Batched so the snapshot a reader sees is consistent.
+        const statements = [
+            this.db
+                .prepare(`DELETE FROM workspace_model_defaults WHERE workspace_id = ?`)
+                .bind(workspaceId),
+        ];
+        const updatedAt = Date.now();
+        for (const [agentKind, modelId] of Object.entries(defaults)) {
+            statements.push(this.db
+                .prepare(`INSERT INTO workspace_model_defaults (workspace_id, agent_kind, model_id, updated_at)
+             VALUES (?, ?, ?, ?)`)
+                .bind(workspaceId, agentKind, modelId, updatedAt));
+        }
+        await this.db.batch(statements);
+    }
+}
+//# sourceMappingURL=D1ModelDefaultsRepository.js.map

package/dist/infrastructure/repositories/D1ModelDefaultsRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ModelDefaultsRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ModelDefaultsRepository.ts"],"names":[],"mappings":"AAQA;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CAAC,kFAAkF,CAAC;aAC3F,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAmB,CAAA;QACzB,MAAM,GAAG,GAA2B,EAAE,CAAA;QACtC,KAAK,MAAM,GAAG,IAAI,OAAO;YAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAA;QAC7D,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,SAAiB;QACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,yFAAyF,CAC1F;aACA,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;aAC5B,KAAK,EAAwB,CAAA;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,QAAgC;QACjE,8EAA8E;QAC9E,6EAA6E;QAC7E,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,6DAA6D,CAAC;iBACtE,IAAI,CAAC,WAAW,CAAC;SACrB,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,UAAU,CAAC,IAAI,CACb,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;iCACqB,CACtB;iBACA,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CACpD,CAAA;QACH,CAAC;QACD,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;CACF"}

package/dist/infrastructure/repositories/D1NotificationRepository.d.ts

@@ -0,0 +1,20 @@
+import type { NotificationRepository } from '@cat-factory/kernel';
+import type { Notification, NotificationType } from '@cat-factory/contracts';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * Notifications, one row per notification in `notifications` (migration 0024).
+ * The optional structured `payload` (assessment / PR url / pipeline name) is a
+ * JSON column. Open notifications back the board inbox + snapshot; the engine
+ * de-dupes an open card per (block, type) via {@link findOpenByBlock}.
+ */
+export declare class D1NotificationRepository implements NotificationRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    get(workspaceId: string, id: string): Promise<Notification | null>;
+    listOpen(workspaceId: string): Promise<Notification[]>;
+    findOpenByBlock(workspaceId: string, blockId: string, type: NotificationType): Promise<Notification | null>;
+    upsert(workspaceId: string, notification: Notification): Promise<void>;
+}
+//# sourceMappingURL=D1NotificationRepository.d.ts.map

package/dist/infrastructure/repositories/D1NotificationRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1NotificationRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1NotificationRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,KAAK,EACV,YAAY,EAGZ,gBAAgB,EACjB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAwC3D;;;;;GAKG;AACH,qBAAa,wBAAyB,YAAW,sBAAsB;IACrE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAMvE;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAU3D;IAEK,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAU9B;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC3E;CACF"}