@cat-factory/worker 0.6.0

package/dist/infrastructure/repositories/D1PromptFragmentRepository.js

@@ -0,0 +1,90 @@
+function parseJson(raw) {
+    if (!raw)
+        return null;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+function rowToRecord(row) {
+    return {
+        fragmentId: row.fragment_id,
+        ownerKind: row.owner_kind,
+        ownerId: row.owner_id,
+        version: row.version,
+        title: row.title,
+        category: row.category,
+        summary: row.summary,
+        body: row.body,
+        appliesTo: parseJson(row.applies_to),
+        tags: parseJson(row.tags),
+        sourceId: row.source_id,
+        sourcePath: row.source_path,
+        sourceSha: row.source_sha,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        deletedAt: row.deleted_at,
+    };
+}
+/** D1-backed store of managed prompt-fragment rows, both tiers (migration 0020). */
+export class D1PromptFragmentRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async listByOwner(ownerKind, ownerId, includeDeleted = false) {
+        const where = includeDeleted
+            ? 'owner_kind = ? AND owner_id = ?'
+            : 'owner_kind = ? AND owner_id = ? AND deleted_at IS NULL';
+        const { results } = await this.db
+            .prepare(`SELECT * FROM prompt_fragments WHERE ${where}`)
+            .bind(ownerKind, ownerId)
+            .all();
+        return results.map(rowToRecord);
+    }
+    async get(ownerKind, ownerId, fragmentId) {
+        const row = await this.db
+            .prepare('SELECT * FROM prompt_fragments WHERE owner_kind = ? AND owner_id = ? AND fragment_id = ?')
+            .bind(ownerKind, ownerId, fragmentId)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO prompt_fragments
+          (fragment_id, owner_kind, owner_id, version, title, category, summary, body,
+           applies_to, tags, source_id, source_path, source_sha, created_at, updated_at, deleted_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT (owner_kind, owner_id, fragment_id) DO UPDATE SET
+           version = excluded.version,
+           title = excluded.title,
+           category = excluded.category,
+           summary = excluded.summary,
+           body = excluded.body,
+           applies_to = excluded.applies_to,
+           tags = excluded.tags,
+           source_id = excluded.source_id,
+           source_path = excluded.source_path,
+           source_sha = excluded.source_sha,
+           updated_at = excluded.updated_at,
+           deleted_at = excluded.deleted_at`)
+            .bind(record.fragmentId, record.ownerKind, record.ownerId, record.version, record.title, record.category, record.summary, record.body, record.appliesTo ? JSON.stringify(record.appliesTo) : null, record.tags ? JSON.stringify(record.tags) : null, record.sourceId, record.sourcePath, record.sourceSha, record.createdAt, record.updatedAt, record.deletedAt)
+            .run();
+    }
+    async softDelete(ownerKind, ownerId, fragmentId, at) {
+        await this.db
+            .prepare('UPDATE prompt_fragments SET deleted_at = ?, updated_at = ? WHERE owner_kind = ? AND owner_id = ? AND fragment_id = ?')
+            .bind(at, at, ownerKind, ownerId, fragmentId)
+            .run();
+    }
+    async listBySource(sourceId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM prompt_fragments WHERE source_id = ? AND deleted_at IS NULL')
+            .bind(sourceId)
+            .all();
+        return results.map(rowToRecord);
+    }
+}
+//# sourceMappingURL=D1PromptFragmentRepository.js.map

package/dist/infrastructure/repositories/D1PromptFragmentRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1PromptFragmentRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1PromptFragmentRepository.ts"],"names":[],"mappings":"AA2BA,SAAS,SAAS,CAAI,GAAkB;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAsB;IACzC,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,SAAS,EAAE,GAAG,CAAC,UAA+B;QAC9C,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,SAAS,CAAoB,GAAG,CAAC,UAAU,CAAC;QACvD,IAAI,EAAE,SAAS,CAAW,GAAG,CAAC,IAAI,CAAC;QACnC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,0BAA0B;IACpB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAA4B,EAC5B,OAAe,EACf,cAAc,GAAG,KAAK;QAEtB,MAAM,KAAK,GAAG,cAAc;YAC1B,CAAC,CAAC,iCAAiC;YACnC,CAAC,CAAC,wDAAwD,CAAA;QAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CAAC,wCAAwC,KAAK,EAAE,CAAC;aACxD,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;aACxB,GAAG,EAAqB,CAAA;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,GAAG,CACP,SAA4B,EAC5B,OAAe,EACf,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,0FAA0F,CAC3F;aACA,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;aACpC,KAAK,EAAqB,CAAA;QAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA4B;QACvC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;;;;;;4CAgBoC,CACrC;aACA,IAAI,CACH,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAChD,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAA4B,EAC5B,OAAe,EACf,UAAkB,EAClB,EAAU;QAEV,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,sHAAsH,CACvH;aACA,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;aAC5C,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CAAC,2EAA2E,CAAC;aACpF,IAAI,CAAC,QAAQ,CAAC;aACd,GAAG,EAAqB,CAAA;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;CACF"}

package/dist/infrastructure/repositories/D1ProviderApiKeyRepository.d.ts

@@ -0,0 +1,21 @@
+import type { ApiKeyProvider, ApiKeyScope, ApiKeyScopeRef, ProviderApiKeyRecord, ProviderApiKeyRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed store of the direct-provider API-key pool (migration 0042). */
+export declare class D1ProviderApiKeyRepository implements ProviderApiKeyRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    listByScope(scope: ApiKeyScope, scopeId: string, provider?: ApiKeyProvider): Promise<ProviderApiKeyRecord[]>;
+    listForPool(scopes: ApiKeyScopeRef[], provider: ApiKeyProvider): Promise<ProviderApiKeyRecord[]>;
+    listConfiguredProviders(scopes: ApiKeyScopeRef[]): Promise<ApiKeyProvider[]>;
+    getById(scope: ApiKeyScope, scopeId: string, id: string): Promise<ProviderApiKeyRecord | null>;
+    add(record: ProviderApiKeyRecord): Promise<void>;
+    markLeased(id: string, at: number): Promise<void>;
+    recordUsage(id: string, usage: {
+        inputTokens: number;
+        outputTokens: number;
+    }, at: number, windowMs: number): Promise<void>;
+    softDelete(scope: ApiKeyScope, scopeId: string, id: string, at: number): Promise<void>;
+}
+//# sourceMappingURL=D1ProviderApiKeyRepository.d.ts.map

package/dist/infrastructure/repositories/D1ProviderApiKeyRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ProviderApiKeyRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ProviderApiKeyRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAoC3D,4EAA4E;AAC5E,qBAAa,0BAA2B,YAAW,wBAAwB;IACzE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,WAAW,CACf,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,cAAc,GACxB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAYjC;IAEK,WAAW,CACf,MAAM,EAAE,cAAc,EAAE,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAejC;IAEK,uBAAuB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAajF;IAEK,OAAO,CACX,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAQtC;IAEK,GAAG,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBrD;IAEK,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKtD;IAEK,WAAW,CACf,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EACpD,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CA4Bf;IAEK,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3F;CACF"}

package/dist/infrastructure/repositories/D1ProviderApiKeyRepository.js

@@ -0,0 +1,108 @@
+function rowToRecord(row) {
+    return {
+        id: row.id,
+        scope: row.scope,
+        scopeId: row.scope_id,
+        provider: row.provider,
+        label: row.label,
+        keyCipher: row.key_cipher,
+        createdAt: row.created_at,
+        lastUsedAt: row.last_used_at,
+        windowStartedAt: row.window_started_at,
+        inputTokens: row.input_tokens,
+        outputTokens: row.output_tokens,
+        requestCount: row.request_count,
+        deletedAt: row.deleted_at,
+    };
+}
+/** D1-backed store of the direct-provider API-key pool (migration 0042). */
+export class D1ProviderApiKeyRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async listByScope(scope, scopeId, provider) {
+        const providerFilter = provider ? ' AND provider = ?' : '';
+        const binds = provider ? [scope, scopeId, provider] : [scope, scopeId];
+        const { results } = await this.db
+            .prepare(`SELECT * FROM provider_api_keys
+          WHERE scope = ? AND scope_id = ?${providerFilter} AND deleted_at IS NULL
+          ORDER BY created_at ASC`)
+            .bind(...binds)
+            .all();
+        return (results ?? []).map(rowToRecord);
+    }
+    async listForPool(scopes, provider) {
+        if (scopes.length === 0)
+            return [];
+        const pairs = scopes.map(() => '(scope = ? AND scope_id = ?)').join(' OR ');
+        const binds = [];
+        for (const s of scopes)
+            binds.push(s.scope, s.scopeId);
+        binds.push(provider);
+        const { results } = await this.db
+            .prepare(`SELECT * FROM provider_api_keys
+          WHERE (${pairs}) AND provider = ? AND deleted_at IS NULL
+          ORDER BY created_at ASC`)
+            .bind(...binds)
+            .all();
+        return (results ?? []).map(rowToRecord);
+    }
+    async listConfiguredProviders(scopes) {
+        if (scopes.length === 0)
+            return [];
+        const pairs = scopes.map(() => '(scope = ? AND scope_id = ?)').join(' OR ');
+        const binds = [];
+        for (const s of scopes)
+            binds.push(s.scope, s.scopeId);
+        const { results } = await this.db
+            .prepare(`SELECT DISTINCT provider FROM provider_api_keys
+          WHERE (${pairs}) AND deleted_at IS NULL`)
+            .bind(...binds)
+            .all();
+        return (results ?? []).map((r) => r.provider);
+    }
+    async getById(scope, scopeId, id) {
+        const row = await this.db
+            .prepare('SELECT * FROM provider_api_keys WHERE id = ? AND scope = ? AND scope_id = ? AND deleted_at IS NULL')
+            .bind(id, scope, scopeId)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async add(record) {
+        await this.db
+            .prepare(`INSERT INTO provider_api_keys
+          (id, scope, scope_id, provider, label, key_cipher, created_at, last_used_at,
+           window_started_at, input_tokens, output_tokens, request_count, deleted_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)`)
+            .bind(record.id, record.scope, record.scopeId, record.provider, record.label, record.keyCipher, record.createdAt, record.lastUsedAt, record.windowStartedAt, record.inputTokens, record.outputTokens, record.requestCount)
+            .run();
+    }
+    async markLeased(id, at) {
+        await this.db
+            .prepare('UPDATE provider_api_keys SET last_used_at = ? WHERE id = ?')
+            .bind(at, id)
+            .run();
+    }
+    async recordUsage(id, usage, at, windowMs) {
+        // A single atomic statement (no read-modify-write) — mirrors the subscription
+        // repo. Keyed by row id alone: a leased key may belong to any scope segment.
+        const active = '(window_started_at IS NOT NULL AND ? - window_started_at < ?)';
+        await this.db
+            .prepare(`UPDATE provider_api_keys
+          SET window_started_at = CASE WHEN ${active} THEN window_started_at ELSE ? END,
+              input_tokens      = CASE WHEN ${active} THEN input_tokens  ELSE 0 END + ?,
+              output_tokens     = CASE WHEN ${active} THEN output_tokens ELSE 0 END + ?,
+              request_count     = CASE WHEN ${active} THEN request_count ELSE 0 END + 1
+          WHERE id = ?`)
+            .bind(at, windowMs, at, at, windowMs, usage.inputTokens, at, windowMs, usage.outputTokens, at, windowMs, id)
+            .run();
+    }
+    async softDelete(scope, scopeId, id, at) {
+        await this.db
+            .prepare('UPDATE provider_api_keys SET deleted_at = ? WHERE id = ? AND scope = ? AND scope_id = ? AND deleted_at IS NULL')
+            .bind(at, id, scope, scopeId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1ProviderApiKeyRepository.js.map

package/dist/infrastructure/repositories/D1ProviderApiKeyRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ProviderApiKeyRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ProviderApiKeyRepository.ts"],"names":[],"mappings":"AAyBA,SAAS,WAAW,CAAC,GAAsB;IACzC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAoB;QAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,QAAQ,EAAE,GAAG,CAAC,QAA0B;QACxC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,YAAY;QAC5B,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,OAAO,0BAA0B;IACpB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAkB,EAClB,OAAe,EACf,QAAyB;QAEzB,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACtE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;4CACoC,cAAc;kCACxB,CAC3B;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAqB,CAAA;QAC3B,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,WAAW,CACf,MAAwB,EACxB,QAAwB;QAExB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;QACtD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;mBACW,KAAK;kCACU,CAC3B;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAqB,CAAA;QAC3B,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAAwB;QACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;QACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;mBACW,KAAK,0BAA0B,CAC3C;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAwB,CAAA;QAC9B,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAA0B,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAkB,EAClB,OAAe,EACf,EAAU;QAEV,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,oGAAoG,CACrG;aACA,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC;aACxB,KAAK,EAAqB,CAAA;QAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAA4B;QACpC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;2DAGmD,CACpD;aACA,IAAI,CACH,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,YAAY,CACpB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,EAAU;QACrC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,4DAA4D,CAAC;aACrE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;aACZ,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,WAAW,CACf,EAAU,EACV,KAAoD,EACpD,EAAU,EACV,QAAgB;QAEhB,8EAA8E;QAC9E,6EAA6E;QAC7E,MAAM,MAAM,GAAG,+DAA+D,CAAA;QAC9E,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;8CACsC,MAAM;8CACN,MAAM;8CACN,MAAM;8CACN,MAAM;uBAC7B,CAChB;aACA,IAAI,CACH,EAAE,EACF,QAAQ,EACR,EAAE,EACF,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,YAAY,EAClB,EAAE,EACF,QAAQ,EACR,EAAE,CACH;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAkB,EAAE,OAAe,EAAE,EAAU,EAAE,EAAU;QAC1E,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,gHAAgH,CACjH;aACA,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC;aAC5B,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1ProviderSubscriptionTokenRepository.d.ts

@@ -0,0 +1,19 @@
+import type { ProviderSubscriptionTokenRecord, ProviderSubscriptionTokenRepository, SubscriptionVendor } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed store of a workspace's subscription token pool (migration 0035). */
+export declare class D1ProviderSubscriptionTokenRepository implements ProviderSubscriptionTokenRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    listByVendor(workspaceId: string, vendor: SubscriptionVendor): Promise<ProviderSubscriptionTokenRecord[]>;
+    getById(workspaceId: string, id: string): Promise<ProviderSubscriptionTokenRecord | null>;
+    add(record: ProviderSubscriptionTokenRecord): Promise<void>;
+    markLeased(workspaceId: string, id: string, at: number): Promise<void>;
+    recordUsage(workspaceId: string, id: string, usage: {
+        inputTokens: number;
+        outputTokens: number;
+    }, at: number, windowMs: number): Promise<void>;
+    softDelete(workspaceId: string, id: string, at: number): Promise<void>;
+}
+//# sourceMappingURL=D1ProviderSubscriptionTokenRepository.d.ts.map

package/dist/infrastructure/repositories/D1ProviderSubscriptionTokenRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ProviderSubscriptionTokenRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ProviderSubscriptionTokenRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,+BAA+B,EAC/B,mCAAmC,EACnC,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAkC3D,iFAAiF;AACjF,qBAAa,qCAAsC,YAAW,mCAAmC;IAC/F,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,YAAY,CAChB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAU5C;IAEK,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC,CAQ9F;IAEK,GAAG,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhE;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3E;IAEK,WAAW,CACf,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EACpD,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAgCf;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3E;CACF"}

package/dist/infrastructure/repositories/D1ProviderSubscriptionTokenRepository.js

@@ -0,0 +1,78 @@
+function rowToRecord(row) {
+    return {
+        id: row.id,
+        workspaceId: row.workspace_id,
+        vendor: row.vendor,
+        label: row.label,
+        tokenCipher: row.token_cipher,
+        createdAt: row.created_at,
+        lastUsedAt: row.last_used_at,
+        windowStartedAt: row.window_started_at,
+        inputTokens: row.input_tokens,
+        outputTokens: row.output_tokens,
+        requestCount: row.request_count,
+        deletedAt: row.deleted_at,
+    };
+}
+/** D1-backed store of a workspace's subscription token pool (migration 0035). */
+export class D1ProviderSubscriptionTokenRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async listByVendor(workspaceId, vendor) {
+        const { results } = await this.db
+            .prepare(`SELECT * FROM provider_subscription_tokens
+          WHERE workspace_id = ? AND vendor = ? AND deleted_at IS NULL
+          ORDER BY created_at ASC`)
+            .bind(workspaceId, vendor)
+            .all();
+        return (results ?? []).map(rowToRecord);
+    }
+    async getById(workspaceId, id) {
+        const row = await this.db
+            .prepare('SELECT * FROM provider_subscription_tokens WHERE id = ? AND workspace_id = ? AND deleted_at IS NULL')
+            .bind(id, workspaceId)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async add(record) {
+        await this.db
+            .prepare(`INSERT INTO provider_subscription_tokens
+          (id, workspace_id, vendor, label, token_cipher, created_at, last_used_at,
+           window_started_at, input_tokens, output_tokens, request_count, deleted_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)`)
+            .bind(record.id, record.workspaceId, record.vendor, record.label, record.tokenCipher, record.createdAt, record.lastUsedAt, record.windowStartedAt, record.inputTokens, record.outputTokens, record.requestCount)
+            .run();
+    }
+    async markLeased(workspaceId, id, at) {
+        await this.db
+            .prepare('UPDATE provider_subscription_tokens SET last_used_at = ? WHERE id = ? AND workspace_id = ?')
+            .bind(at, id, workspaceId)
+            .run();
+    }
+    async recordUsage(workspaceId, id, usage, at, windowMs) {
+        // A single atomic statement (no read-modify-write) so two jobs finishing on the
+        // same token can't lose each other's counters. The window-active test
+        // (`window_started_at` set AND younger than `windowMs`) is evaluated against the
+        // row's pre-update values in every branch, so a stale window resets to `at` and
+        // its counters start from this run; an active one accumulates.
+        const active = '(window_started_at IS NOT NULL AND ? - window_started_at < ?)';
+        await this.db
+            .prepare(`UPDATE provider_subscription_tokens
+          SET window_started_at = CASE WHEN ${active} THEN window_started_at ELSE ? END,
+              input_tokens      = CASE WHEN ${active} THEN input_tokens  ELSE 0 END + ?,
+              output_tokens     = CASE WHEN ${active} THEN output_tokens ELSE 0 END + ?,
+              request_count     = CASE WHEN ${active} THEN request_count ELSE 0 END + 1
+          WHERE id = ? AND workspace_id = ?`)
+            .bind(at, windowMs, at, at, windowMs, usage.inputTokens, at, windowMs, usage.outputTokens, at, windowMs, id, workspaceId)
+            .run();
+    }
+    async softDelete(workspaceId, id, at) {
+        await this.db
+            .prepare('UPDATE provider_subscription_tokens SET deleted_at = ? WHERE id = ? AND workspace_id = ? AND deleted_at IS NULL')
+            .bind(at, id, workspaceId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1ProviderSubscriptionTokenRepository.js.map

package/dist/infrastructure/repositories/D1ProviderSubscriptionTokenRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ProviderSubscriptionTokenRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ProviderSubscriptionTokenRepository.ts"],"names":[],"mappings":"AAsBA,SAAS,WAAW,CAAC,GAAiC;IACpD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,MAAM,EAAE,GAAG,CAAC,MAA4B;QACxC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,YAAY;QAC5B,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,OAAO,qCAAqC;IAC/B,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,WAAmB,EACnB,MAA0B;QAE1B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;;kCAE0B,CAC3B;aACA,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;aACzB,GAAG,EAAgC,CAAA;QACtC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,EAAU;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,qGAAqG,CACtG;aACA,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC;aACrB,KAAK,EAAgC,CAAA;QACxC,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAuC;QAC/C,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;wDAGgD,CACjD;aACA,IAAI,CACH,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,YAAY,CACpB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,EAAU,EAAE,EAAU;QAC1D,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,4FAA4F,CAC7F;aACA,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC;aACzB,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,WAAW,CACf,WAAmB,EACnB,EAAU,EACV,KAAoD,EACpD,EAAU,EACV,QAAgB;QAEhB,gFAAgF;QAChF,sEAAsE;QACtE,iFAAiF;QACjF,gFAAgF;QAChF,+DAA+D;QAC/D,MAAM,MAAM,GAAG,+DAA+D,CAAA;QAC9E,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;8CACsC,MAAM;8CACN,MAAM;8CACN,MAAM;8CACN,MAAM;4CACR,CACrC;aACA,IAAI,CACH,EAAE,EACF,QAAQ,EACR,EAAE,EACF,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,WAAW,EACjB,EAAE,EACF,QAAQ,EACR,KAAK,CAAC,YAAY,EAClB,EAAE,EACF,QAAQ,EACR,EAAE,EACF,WAAW,CACZ;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,EAAU,EAAE,EAAU;QAC1D,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,iHAAiH,CAClH;aACA,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC;aACzB,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1PullRequestProjectionRepository.d.ts

@@ -0,0 +1,13 @@
+import type { GitHubPullRequest, PullRequestProjectionRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed projection of pull requests (migration 0004). */
+export declare class D1PullRequestProjectionRepository implements PullRequestProjectionRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    upsertMany(workspaceId: string, pulls: GitHubPullRequest[]): Promise<void>;
+    listByRepo(workspaceId: string, repoGithubId: number): Promise<GitHubPullRequest[]>;
+    listByWorkspace(workspaceId: string): Promise<GitHubPullRequest[]>;
+}
+//# sourceMappingURL=D1PullRequestProjectionRepository.d.ts.map

package/dist/infrastructure/repositories/D1PullRequestProjectionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1PullRequestProjectionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1PullRequestProjectionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAA;AAC7F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAQ3D,8DAA8D;AAC9D,qBAAa,iCAAkC,YAAW,+BAA+B;IACvF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAW/E;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAQxF;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAQvE;CACF"}

package/dist/infrastructure/repositories/D1PullRequestProjectionRepository.js

@@ -0,0 +1,32 @@
+import { buildUpsert, pullRequestValues, rowToPullRequest, } from './github-mappers';
+/** D1-backed projection of pull requests (migration 0004). */
+export class D1PullRequestProjectionRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async upsertMany(workspaceId, pulls) {
+        if (pulls.length === 0)
+            return;
+        const statements = pulls.map((pr) => {
+            const { sql, binds } = buildUpsert('github_pull_requests', pullRequestValues(workspaceId, pr), ['workspace_id', 'repo_github_id', 'number']);
+            return this.db.prepare(sql).bind(...binds);
+        });
+        await this.db.batch(statements);
+    }
+    async listByRepo(workspaceId, repoGithubId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM github_pull_requests WHERE workspace_id = ? AND repo_github_id = ? AND deleted_at IS NULL ORDER BY number DESC')
+            .bind(workspaceId, repoGithubId)
+            .all();
+        return results.map(rowToPullRequest);
+    }
+    async listByWorkspace(workspaceId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM github_pull_requests WHERE workspace_id = ? AND deleted_at IS NULL ORDER BY gh_updated_at DESC')
+            .bind(workspaceId)
+            .all();
+        return results.map(rowToPullRequest);
+    }
+}
+//# sourceMappingURL=D1PullRequestProjectionRepository.js.map

package/dist/infrastructure/repositories/D1PullRequestProjectionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1PullRequestProjectionRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1PullRequestProjectionRepository.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,WAAW,EACX,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,kBAAkB,CAAA;AAEzB,8DAA8D;AAC9D,MAAM,OAAO,iCAAiC;IAC3B,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,KAA0B;QAC9D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YAClC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,WAAW,CAChC,sBAAsB,EACtB,iBAAiB,CAAC,WAAW,EAAE,EAAE,CAAC,EAClC,CAAC,cAAc,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAC7C,CAAA;YACD,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,YAAoB;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,8HAA8H,CAC/H;aACA,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC;aAC/B,GAAG,EAAwB,CAAA;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,8GAA8G,CAC/G;aACA,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAwB,CAAA;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACtC,CAAC;CACF"}

package/dist/infrastructure/repositories/D1RateLimitRepository.d.ts

@@ -0,0 +1,18 @@
+import type { IdGenerator, RateLimitRepository, RateLimitSnapshot } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * D1-backed ledger of observed GitHub rate-limit headers (migration 0004),
+ * imitating the token_usage spend ledger. One row per observation; lets us track
+ * headroom over time and back off proactively.
+ */
+export declare class D1RateLimitRepository implements RateLimitRepository {
+    private readonly db;
+    private readonly idGenerator;
+    constructor({ db, idGenerator }: {
+        db: D1Database;
+        idGenerator: IdGenerator;
+    });
+    record(snapshot: RateLimitSnapshot): Promise<void>;
+    deleteOlderThan(epochMs: number): Promise<number>;
+}
+//# sourceMappingURL=D1RateLimitRepository.d.ts.map

package/dist/infrastructure/repositories/D1RateLimitRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1RateLimitRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1RateLimitRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAE3D;;;;GAIG;AACH,qBAAa,qBAAsB,YAAW,mBAAmB;IAC/D,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IAEzC,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE,EAG5E;IAEK,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBvD;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtD;CACF"}

package/dist/infrastructure/repositories/D1RateLimitRepository.js

@@ -0,0 +1,30 @@
+/**
+ * D1-backed ledger of observed GitHub rate-limit headers (migration 0004),
+ * imitating the token_usage spend ledger. One row per observation; lets us track
+ * headroom over time and back off proactively.
+ */
+export class D1RateLimitRepository {
+    db;
+    idGenerator;
+    constructor({ db, idGenerator }) {
+        this.db = db;
+        this.idGenerator = idGenerator;
+    }
+    async record(snapshot) {
+        await this.db
+            .prepare(`INSERT INTO github_rate_limits
+           (id, installation_id, resource, limit_total, remaining, reset_at, observed_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`)
+            .bind(this.idGenerator.next('grl'), snapshot.installationId, snapshot.resource, snapshot.limit, snapshot.remaining, snapshot.resetAt, snapshot.observedAt)
+            .run();
+    }
+    async deleteOlderThan(epochMs) {
+        // Range delete on idx_gh_ratelimit_observed; this telemetry retains the least.
+        const { meta } = await this.db
+            .prepare('DELETE FROM github_rate_limits WHERE observed_at < ?')
+            .bind(epochMs)
+            .run();
+        return meta.changes ?? 0;
+    }
+}
+//# sourceMappingURL=D1RateLimitRepository.js.map

package/dist/infrastructure/repositories/D1RateLimitRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1RateLimitRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1RateLimitRepository.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,OAAO,qBAAqB;IACf,EAAE,CAAY;IACd,WAAW,CAAa;IAEzC,YAAY,EAAE,EAAE,EAAE,WAAW,EAAgD;QAC3E,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA2B;QACtC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;sCAE8B,CAC/B;aACA,IAAI,CACH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAC5B,QAAQ,CAAC,cAAc,EACvB,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,UAAU,CACpB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,+EAA+E;QAC/E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,OAAO,CAAC,sDAAsD,CAAC;aAC/D,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE,CAAA;QACR,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1B,CAAC;CACF"}

package/dist/infrastructure/repositories/D1ReferenceArchitectureRepository.d.ts

@@ -0,0 +1,15 @@
+import type { ReferenceArchitectureRecord, ReferenceArchitectureRecordPatch, ReferenceArchitectureRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed list of reference architectures (migration 0010). */
+export declare class D1ReferenceArchitectureRepository implements ReferenceArchitectureRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    insert(record: ReferenceArchitectureRecord): Promise<void>;
+    update(workspaceId: string, id: string, patch: ReferenceArchitectureRecordPatch): Promise<void>;
+    get(workspaceId: string, id: string): Promise<ReferenceArchitectureRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<ReferenceArchitectureRecord[]>;
+    softDelete(workspaceId: string, id: string, at: number): Promise<void>;
+}
+//# sourceMappingURL=D1ReferenceArchitectureRepository.d.ts.map

package/dist/infrastructure/repositories/D1ReferenceArchitectureRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ReferenceArchitectureRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ReferenceArchitectureRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,+BAA+B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAwC3D,kEAAkE;AAClE,qBAAa,iCAAkC,YAAW,+BAA+B;IACvF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,MAAM,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB/D;IAEK,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,IAAI,CAAC,CAcf;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAStF;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,EAAE,CAAC,CASjF;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ3E;CACF"}

package/dist/infrastructure/repositories/D1ReferenceArchitectureRepository.js

@@ -0,0 +1,77 @@
+function rowToRecord(row) {
+    return {
+        id: row.id,
+        workspaceId: row.workspace_id,
+        name: row.name,
+        description: row.description,
+        repoOwner: row.repo_owner,
+        repoName: row.repo_name,
+        defaultInstructions: row.default_instructions,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        deletedAt: row.deleted_at,
+    };
+}
+/** Maps a patch field name to its DB column. */
+const PATCH_COLUMNS = {
+    name: 'name',
+    description: 'description',
+    repoOwner: 'repo_owner',
+    repoName: 'repo_name',
+    defaultInstructions: 'default_instructions',
+    updatedAt: 'updated_at',
+};
+/** D1-backed list of reference architectures (migration 0010). */
+export class D1ReferenceArchitectureRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async insert(record) {
+        await this.db
+            .prepare(`INSERT INTO reference_architectures
+          (id, workspace_id, name, description, repo_owner, repo_name,
+           default_instructions, created_at, updated_at, deleted_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)`)
+            .bind(record.id, record.workspaceId, record.name, record.description, record.repoOwner, record.repoName, record.defaultInstructions, record.createdAt, record.updatedAt)
+            .run();
+    }
+    async update(workspaceId, id, patch) {
+        const entries = Object.entries(patch).filter(([, value]) => value !== undefined);
+        if (entries.length === 0)
+            return;
+        const setClause = entries
+            .map(([key]) => `${PATCH_COLUMNS[key]} = ?`)
+            .join(', ');
+        const values = entries.map(([, value]) => value);
+        await this.db
+            .prepare(`UPDATE reference_architectures SET ${setClause}
+         WHERE workspace_id = ? AND id = ? AND deleted_at IS NULL`)
+            .bind(...values, workspaceId, id)
+            .run();
+    }
+    async get(workspaceId, id) {
+        const row = await this.db
+            .prepare(`SELECT * FROM reference_architectures
+         WHERE workspace_id = ? AND id = ? AND deleted_at IS NULL`)
+            .bind(workspaceId, id)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const { results } = await this.db
+            .prepare(`SELECT * FROM reference_architectures
+         WHERE workspace_id = ? AND deleted_at IS NULL ORDER BY created_at DESC`)
+            .bind(workspaceId)
+            .all();
+        return (results ?? []).map(rowToRecord);
+    }
+    async softDelete(workspaceId, id, at) {
+        await this.db
+            .prepare(`UPDATE reference_architectures SET deleted_at = ?
+         WHERE workspace_id = ? AND id = ? AND deleted_at IS NULL`)
+            .bind(at, workspaceId, id)
+            .run();
+    }
+}
+//# sourceMappingURL=D1ReferenceArchitectureRepository.js.map

package/dist/infrastructure/repositories/D1ReferenceArchitectureRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ReferenceArchitectureRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ReferenceArchitectureRepository.ts"],"names":[],"mappings":"AAoBA,SAAS,WAAW,CAAC,GAA6B;IAChD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,mBAAmB,EAAE,GAAG,CAAC,oBAAoB;QAC7C,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,aAAa,GAA2D;IAC5E,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,YAAY;IACvB,QAAQ,EAAE,WAAW;IACrB,mBAAmB,EAAE,sBAAsB;IAC3C,SAAS,EAAE,YAAY;CACxB,CAAA;AAED,kEAAkE;AAClE,MAAM,OAAO,iCAAiC;IAC3B,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAmC;QAC9C,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;kDAG0C,CAC3C;aACA,IAAI,CACH,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,mBAAmB,EAC1B,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,MAAM,CACV,WAAmB,EACnB,EAAU,EACV,KAAuC;QAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;QAChF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAChC,MAAM,SAAS,GAAG,OAAO;aACtB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,GAA6C,CAAC,MAAM,CAAC;aACrF,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAA+B,CAAC,CAAA;QAC1E,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,sCAAsC,SAAS;kEACW,CAC3D;aACA,IAAI,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC;aAChC,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;kEAC0D,CAC3D;aACA,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;aACrB,KAAK,EAA4B,CAAA;QACpC,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;gFACwE,CACzE;aACA,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAA4B,CAAA;QAClC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,EAAU,EAAE,EAAU;QAC1D,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;kEAC0D,CAC3D;aACA,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC;aACzB,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1ReleaseHealthConfigRepository.d.ts

@@ -0,0 +1,17 @@
+import type { ReleaseHealthConfigRecord, ReleaseHealthConfigRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * Per-block (service frame) monitor/SLO mapping for the post-release-health gate
+ * (migration 0003). `monitor_ids`/`slo_ids` are JSON arrays as text.
+ */
+export declare class D1ReleaseHealthConfigRepository implements ReleaseHealthConfigRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    getByBlock(workspaceId: string, blockId: string): Promise<ReleaseHealthConfigRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<ReleaseHealthConfigRecord[]>;
+    upsert(record: ReleaseHealthConfigRecord): Promise<void>;
+    delete(workspaceId: string, blockId: string): Promise<void>;
+}
+//# sourceMappingURL=D1ReleaseHealthConfigRepository.d.ts.map

package/dist/infrastructure/repositories/D1ReleaseHealthConfigRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ReleaseHealthConfigRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ReleaseHealthConfigRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AACnG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAiC3D;;;GAGG;AACH,qBAAa,+BAAgC,YAAW,6BAA6B;IACnF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CACd,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAM3C;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAM/E;IAEK,MAAM,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB7D;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhE;CACF"}