@cat-factory/worker 0.6.0

package/dist/infrastructure/repositories/D1ServiceRepository.js

@@ -0,0 +1,114 @@
+import { chunkForIn } from './chunk';
+function rowToService(row) {
+    return {
+        id: row.id,
+        accountId: row.account_id,
+        frameBlockId: row.frame_block_id,
+        installationId: row.installation_id,
+        repoGithubId: row.repo_github_id,
+        directory: row.directory,
+        createdAt: row.created_at,
+    };
+}
+/** Account-owned services (migration 0030). The canonical, shareable board unit. */
+export class D1ServiceRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async get(id) {
+        const row = await this.db
+            .prepare(`SELECT * FROM services WHERE id = ?`)
+            .bind(id)
+            .first();
+        return row ? rowToService(row) : null;
+    }
+    async getByFrameBlock(frameBlockId) {
+        const row = await this.db
+            .prepare(`SELECT * FROM services WHERE frame_block_id = ?`)
+            .bind(frameBlockId)
+            .first();
+        return row ? rowToService(row) : null;
+    }
+    async listByAccount(accountId) {
+        // `IS` matches NULL too, so the legacy/unscoped org (accountId null) lists cleanly.
+        const { results } = await this.db
+            .prepare(`SELECT * FROM services WHERE account_id IS ? ORDER BY created_at`)
+            .bind(accountId)
+            .all();
+        return (results ?? []).map(rowToService);
+    }
+    async listByIds(ids) {
+        if (ids.length === 0)
+            return [];
+        const out = [];
+        // Chunk the IN list to stay under D1's bound-parameter limit.
+        for (const chunk of chunkForIn(ids)) {
+            const placeholders = chunk.map(() => '?').join(', ');
+            const { results } = await this.db
+                .prepare(`SELECT * FROM services WHERE id IN (${placeholders})`)
+                .bind(...chunk)
+                .all();
+            for (const row of results ?? [])
+                out.push(rowToService(row));
+        }
+        return out;
+    }
+    async getByRepo(installationId, repoGithubId) {
+        const row = await this.db
+            .prepare(`SELECT * FROM services WHERE installation_id = ? AND repo_github_id = ?`)
+            .bind(installationId, repoGithubId)
+            .first();
+        return row ? rowToService(row) : null;
+    }
+    async insert(service) {
+        await this.db
+            .prepare(`INSERT INTO services (id, account_id, frame_block_id, installation_id, repo_github_id, directory, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`)
+            .bind(service.id, service.accountId, service.frameBlockId, service.installationId, service.repoGithubId, service.directory ?? null, service.createdAt)
+            .run();
+    }
+    async update(id, patch) {
+        const sets = [];
+        const binds = [];
+        if ('accountId' in patch) {
+            sets.push('account_id = ?');
+            binds.push(patch.accountId ?? null);
+        }
+        if ('installationId' in patch) {
+            sets.push('installation_id = ?');
+            binds.push(patch.installationId ?? null);
+        }
+        if ('repoGithubId' in patch) {
+            sets.push('repo_github_id = ?');
+            binds.push(patch.repoGithubId ?? null);
+        }
+        if ('directory' in patch) {
+            sets.push('directory = ?');
+            binds.push(patch.directory ?? null);
+        }
+        if (sets.length === 0)
+            return;
+        binds.push(id);
+        await this.db
+            .prepare(`UPDATE services SET ${sets.join(', ')} WHERE id = ?`)
+            .bind(...binds)
+            .run();
+    }
+    async delete(id) {
+        await this.db.prepare(`DELETE FROM services WHERE id = ?`).bind(id).run();
+    }
+    async deleteMany(ids) {
+        if (ids.length === 0)
+            return;
+        // Chunk the IN list to stay under D1's bound-parameter limit.
+        for (const chunk of chunkForIn(ids)) {
+            const placeholders = chunk.map(() => '?').join(', ');
+            await this.db
+                .prepare(`DELETE FROM services WHERE id IN (${placeholders})`)
+                .bind(...chunk)
+                .run();
+        }
+    }
+}
+//# sourceMappingURL=D1ServiceRepository.js.map

package/dist/infrastructure/repositories/D1ServiceRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1ServiceRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1ServiceRepository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAYpC,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,mBAAmB;IACb,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,qCAAqC,CAAC;aAC9C,IAAI,CAAC,EAAE,CAAC;aACR,KAAK,EAAc,CAAA;QACtB,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,YAAoB;QACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,iDAAiD,CAAC;aAC1D,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,EAAc,CAAA;QACtB,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAwB;QAC1C,oFAAoF;QACpF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CAAC,kEAAkE,CAAC;aAC3E,IAAI,CAAC,SAAS,CAAC;aACf,GAAG,EAAc,CAAA;QACpB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAa;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QAC/B,MAAM,GAAG,GAAc,EAAE,CAAA;QACzB,8DAA8D;QAC9D,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC9B,OAAO,CAAC,uCAAuC,YAAY,GAAG,CAAC;iBAC/D,IAAI,CAAC,GAAG,KAAK,CAAC;iBACd,GAAG,EAAc,CAAA;YACpB,KAAK,MAAM,GAAG,IAAI,OAAO,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAC9D,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,YAAoB;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,yEAAyE,CAAC;aAClF,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC;aAClC,KAAK,EAAc,CAAA;QACtB,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;sCAC8B,CAC/B;aACA,IAAI,CACH,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,SAAS,IAAI,IAAI,EACzB,OAAO,CAAC,SAAS,CAClB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAmB;QAC1C,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,MAAM,KAAK,GAAc,EAAE,CAAA;QAC3B,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;QACrC,CAAC;QACD,IAAI,gBAAgB,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;YAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,CAAA;QAC1C,CAAC;QACD,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;YAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAA;QACxC,CAAC;QACD,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;QACrC,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACd,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;aAC9D,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAa;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAC5B,8DAA8D;QAC9D,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpD,MAAM,IAAI,CAAC,EAAE;iBACV,OAAO,CAAC,qCAAqC,YAAY,GAAG,CAAC;iBAC7D,IAAI,CAAC,GAAG,KAAK,CAAC;iBACd,GAAG,EAAE,CAAA;QACV,CAAC;IACH,CAAC;CACF"}

package/dist/infrastructure/repositories/D1SlackRepositories.d.ts

@@ -0,0 +1,29 @@
+import type { SlackConnectionRecord, SlackConnectionRepository, SlackMemberMappingEntry, SlackMemberMappingRepository, SlackSettingsRecord, SlackSettingsRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+export declare class D1SlackConnectionRepository implements SlackConnectionRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    getByAccount(accountId: string): Promise<SlackConnectionRecord | null>;
+    getByTeam(teamId: string): Promise<SlackConnectionRecord | null>;
+    upsert(record: SlackConnectionRecord): Promise<void>;
+    softDelete(accountId: string, at: number): Promise<void>;
+}
+export declare class D1SlackSettingsRepository implements SlackSettingsRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    getByWorkspace(workspaceId: string): Promise<SlackSettingsRecord | null>;
+    upsert(record: SlackSettingsRecord): Promise<void>;
+}
+export declare class D1SlackMemberMappingRepository implements SlackMemberMappingRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    getByAccount(accountId: string): Promise<SlackMemberMappingEntry[]>;
+    upsert(accountId: string, entries: SlackMemberMappingEntry[], at: number): Promise<void>;
+}
+//# sourceMappingURL=D1SlackRepositories.d.ts.map

package/dist/infrastructure/repositories/D1SlackRepositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1SlackRepositories.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1SlackRepositories.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAiC3D,qBAAa,2BAA4B,YAAW,yBAAyB;IAC3E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAM3E;IAEK,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAMrE;IAEK,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BzD;IAEK,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO7D;CACF;AASD,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAY7E;IAEK,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYvD;CACF;AAQD,qBAAa,8BAA+B,YAAW,4BAA4B;IACjF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAYxE;IAEK,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW7F;CACF"}

package/dist/infrastructure/repositories/D1SlackRepositories.js

@@ -0,0 +1,119 @@
+function rowToConnection(row) {
+    return {
+        accountId: row.account_id,
+        teamId: row.team_id,
+        teamName: row.team_name,
+        teamIconUrl: row.team_icon_url,
+        botUserId: row.bot_user_id,
+        scopesJson: row.scopes,
+        tokenCipher: row.token_cipher,
+        createdAt: row.created_at,
+        deletedAt: row.deleted_at,
+    };
+}
+export class D1SlackConnectionRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async getByAccount(accountId) {
+        const row = await this.db
+            .prepare('SELECT * FROM slack_connections WHERE account_id = ?')
+            .bind(accountId)
+            .first();
+        return row ? rowToConnection(row) : null;
+    }
+    async getByTeam(teamId) {
+        const row = await this.db
+            .prepare('SELECT * FROM slack_connections WHERE team_id = ? AND deleted_at IS NULL')
+            .bind(teamId)
+            .first();
+        return row ? rowToConnection(row) : null;
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO slack_connections
+           (account_id, team_id, team_name, team_icon_url, bot_user_id, scopes, token_cipher, created_at, deleted_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, NULL)
+         ON CONFLICT (account_id) DO UPDATE SET
+           team_id = excluded.team_id,
+           team_name = excluded.team_name,
+           team_icon_url = excluded.team_icon_url,
+           bot_user_id = excluded.bot_user_id,
+           scopes = excluded.scopes,
+           token_cipher = excluded.token_cipher,
+           created_at = excluded.created_at,
+           deleted_at = NULL`)
+            .bind(record.accountId, record.teamId, record.teamName, record.teamIconUrl, record.botUserId, record.scopesJson, record.tokenCipher, record.createdAt)
+            .run();
+    }
+    async softDelete(accountId, at) {
+        await this.db
+            .prepare('UPDATE slack_connections SET deleted_at = ? WHERE account_id = ? AND deleted_at IS NULL')
+            .bind(at, accountId)
+            .run();
+    }
+}
+export class D1SlackSettingsRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async getByWorkspace(workspaceId) {
+        const row = await this.db
+            .prepare('SELECT * FROM slack_settings WHERE workspace_id = ?')
+            .bind(workspaceId)
+            .first();
+        if (!row)
+            return null;
+        return {
+            workspaceId: row.workspace_id,
+            routesJson: row.routes,
+            mentionsEnabled: row.mentions_enabled === 1,
+            updatedAt: row.updated_at,
+        };
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO slack_settings (workspace_id, routes, mentions_enabled, updated_at)
+         VALUES (?, ?, ?, ?)
+         ON CONFLICT (workspace_id) DO UPDATE SET
+           routes = excluded.routes,
+           mentions_enabled = excluded.mentions_enabled,
+           updated_at = excluded.updated_at`)
+            .bind(record.workspaceId, record.routesJson, record.mentionsEnabled ? 1 : 0, record.updatedAt)
+            .run();
+    }
+}
+export class D1SlackMemberMappingRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async getByAccount(accountId) {
+        const row = await this.db
+            .prepare('SELECT * FROM slack_member_mappings WHERE account_id = ?')
+            .bind(accountId)
+            .first();
+        if (!row)
+            return [];
+        try {
+            const parsed = JSON.parse(row.entries);
+            return Array.isArray(parsed) ? parsed : [];
+        }
+        catch {
+            return [];
+        }
+    }
+    async upsert(accountId, entries, at) {
+        await this.db
+            .prepare(`INSERT INTO slack_member_mappings (account_id, entries, updated_at)
+         VALUES (?, ?, ?)
+         ON CONFLICT (account_id) DO UPDATE SET
+           entries = excluded.entries,
+           updated_at = excluded.updated_at`)
+            .bind(accountId, JSON.stringify(entries), at)
+            .run();
+    }
+}
+//# sourceMappingURL=D1SlackRepositories.js.map

package/dist/infrastructure/repositories/D1SlackRepositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1SlackRepositories.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1SlackRepositories.ts"],"names":[],"mappings":"AA2BA,SAAS,eAAe,CAAC,GAAuB;IAC9C,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,SAAS,EAAE,GAAG,CAAC,WAAW;QAC1B,UAAU,EAAE,GAAG,CAAC,MAAM;QACtB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,OAAO,2BAA2B;IACrB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,sDAAsD,CAAC;aAC/D,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,EAAsB,CAAA;QAC9B,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,0EAA0E,CAAC;aACnF,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,EAAsB,CAAA;QAC9B,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA6B;QACxC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;6BAWqB,CACtB;aACA,IAAI,CACH,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,EAAU;QAC5C,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,yFAAyF,CAC1F;aACA,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;aACnB,GAAG,EAAE,CAAA;IACV,CAAC;CACF;AASD,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,qDAAqD,CAAC;aAC9D,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,EAAoB,CAAA;QAC5B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,UAAU,EAAE,GAAG,CAAC,MAAM;YACtB,eAAe,EAAE,GAAG,CAAC,gBAAgB,KAAK,CAAC;YAC3C,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA2B;QACtC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;4CAKoC,CACrC;aACA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC;aAC7F,GAAG,EAAE,CAAA;IACV,CAAC;CACF;AAQD,MAAM,OAAO,8BAA8B;IACxB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,0DAA0D,CAAC;aACnE,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,EAAyB,CAAA;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAoC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,OAAkC,EAAE,EAAU;QAC5E,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;4CAIoC,CACrC;aACA,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;aAC5C,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1TaskConnectionRepository.d.ts

@@ -0,0 +1,27 @@
+import type { TaskConnectionRecord, TaskConnectionRepository, TaskSourceKind, SecretCipher } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/**
+ * D1-backed store of workspace → task-source connections (migration 0014).
+ *
+ * Source credentials (e.g. a Jira API token) are third-party secrets, so they
+ * are encrypted at rest with the same AES-256-GCM envelope the documents /
+ * environments integrations use — never written to D1 in plaintext. A row whose
+ * `credentials` column predates encryption (no `v1.` envelope) is still read as
+ * legacy plaintext JSON, then re-encrypted on the next write.
+ */
+export declare class D1TaskConnectionRepository implements TaskConnectionRepository {
+    private readonly db;
+    private readonly cipher;
+    constructor({ db, cipher }: {
+        db: D1Database;
+        cipher: SecretCipher;
+    });
+    /** Decode the stored credential blob, decrypting the envelope when present. */
+    private decodeCredentials;
+    private rowToRecord;
+    getByWorkspace(workspaceId: string, source: TaskSourceKind): Promise<TaskConnectionRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<TaskConnectionRecord[]>;
+    upsert(record: TaskConnectionRecord): Promise<void>;
+    softDelete(workspaceId: string, source: TaskSourceKind, at: number): Promise<void>;
+}
+//# sourceMappingURL=D1TaskConnectionRepository.d.ts.map

package/dist/infrastructure/repositories/D1TaskConnectionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1TaskConnectionRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1TaskConnectionRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACxB,cAAc,EACd,YAAY,EACb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAqB3D;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,YAAW,wBAAwB;IACzE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IAErC,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,YAAY,CAAA;KAAE,EAGnE;IAED,+EAA+E;YACjE,iBAAiB;YAYjB,WAAW;IAWnB,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAQtC;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAQ1E;IAEK,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBxD;IAEK,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOvF;CACF"}

package/dist/infrastructure/repositories/D1TaskConnectionRepository.js

@@ -0,0 +1,89 @@
+function parseCredentials(json) {
+    try {
+        const parsed = JSON.parse(json);
+        if (parsed && typeof parsed === 'object')
+            return parsed;
+    }
+    catch {
+        // A malformed bag is treated as empty; the import path then fails closed.
+    }
+    return {};
+}
+/**
+ * D1-backed store of workspace → task-source connections (migration 0014).
+ *
+ * Source credentials (e.g. a Jira API token) are third-party secrets, so they
+ * are encrypted at rest with the same AES-256-GCM envelope the documents /
+ * environments integrations use — never written to D1 in plaintext. A row whose
+ * `credentials` column predates encryption (no `v1.` envelope) is still read as
+ * legacy plaintext JSON, then re-encrypted on the next write.
+ */
+export class D1TaskConnectionRepository {
+    db;
+    cipher;
+    constructor({ db, cipher }) {
+        this.db = db;
+        this.cipher = cipher;
+    }
+    /** Decode the stored credential blob, decrypting the envelope when present. */
+    async decodeCredentials(stored) {
+        // Legacy plaintext rows (written before encryption) lack the envelope tag.
+        if (!stored.startsWith('v1.'))
+            return parseCredentials(stored);
+        try {
+            return parseCredentials(await this.cipher.decrypt(stored));
+        }
+        catch {
+            // Wrong key / corrupt envelope: fail closed with an empty bag so the
+            // import path errors rather than leaking a decrypt exception.
+            return {};
+        }
+    }
+    async rowToRecord(row) {
+        return {
+            workspaceId: row.workspace_id,
+            source: row.source,
+            credentials: await this.decodeCredentials(row.credentials),
+            label: row.label,
+            createdAt: row.created_at,
+            deletedAt: row.deleted_at,
+        };
+    }
+    async getByWorkspace(workspaceId, source) {
+        const row = await this.db
+            .prepare('SELECT * FROM task_connections WHERE workspace_id = ? AND source = ? AND deleted_at IS NULL')
+            .bind(workspaceId, source)
+            .first();
+        return row ? this.rowToRecord(row) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM task_connections WHERE workspace_id = ? AND deleted_at IS NULL ORDER BY created_at DESC')
+            .bind(workspaceId)
+            .all();
+        return Promise.all(results.map((row) => this.rowToRecord(row)));
+    }
+    async upsert(record) {
+        // A workspace has a single live connection per source: clear any prior
+        // binding (live or tombstoned) before inserting, so reconnecting can't
+        // collide on the (workspace_id, source) primary key.
+        await this.db
+            .prepare('DELETE FROM task_connections WHERE workspace_id = ? AND source = ?')
+            .bind(record.workspaceId, record.source)
+            .run();
+        const credentials = await this.cipher.encrypt(JSON.stringify(record.credentials));
+        await this.db
+            .prepare(`INSERT INTO task_connections
+          (workspace_id, source, credentials, label, created_at, deleted_at)
+         VALUES (?, ?, ?, ?, ?, NULL)`)
+            .bind(record.workspaceId, record.source, credentials, record.label, record.createdAt)
+            .run();
+    }
+    async softDelete(workspaceId, source, at) {
+        await this.db
+            .prepare('UPDATE task_connections SET deleted_at = ? WHERE workspace_id = ? AND source = ? AND deleted_at IS NULL')
+            .bind(at, workspaceId, source)
+            .run();
+    }
+}
+//# sourceMappingURL=D1TaskConnectionRepository.js.map

package/dist/infrastructure/repositories/D1TaskConnectionRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1TaskConnectionRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1TaskConnectionRepository.ts"],"names":[],"mappings":"AAiBA,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAgC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA0B;IACpB,EAAE,CAAY;IACd,MAAM,CAAc;IAErC,YAAY,EAAE,EAAE,EAAE,MAAM,EAA4C;QAClE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,+EAA+E;IACvE,KAAK,CAAC,iBAAiB,CAAC,MAAc;QAC5C,2EAA2E;QAC3E,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAC9D,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,8DAA8D;YAC9D,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAsB;QAC9C,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAwB;YACpC,WAAW,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC;YAC1D,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,WAAmB,EACnB,MAAsB;QAEtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,6FAA6F,CAC9F;aACA,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;aACzB,KAAK,EAAqB,CAAA;QAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,uGAAuG,CACxG;aACA,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAqB,CAAA;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA4B;QACvC,uEAAuE;QACvE,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,oEAAoE,CAAC;aAC7E,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;aACvC,GAAG,EAAE,CAAA;QACR,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QACjF,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;sCAE8B,CAC/B;aACA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;aACpF,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,WAAmB,EAAE,MAAsB,EAAE,EAAU;QACtE,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,yGAAyG,CAC1G;aACA,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC;aAC7B,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1TaskRepository.d.ts

@@ -0,0 +1,15 @@
+import type { TaskRecord, TaskRepository, TaskSourceKind } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed store of imported issue projections, across sources (migration 0014). */
+export declare class D1TaskRepository implements TaskRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    upsert(record: TaskRecord): Promise<void>;
+    get(workspaceId: string, source: TaskSourceKind, externalId: string): Promise<TaskRecord | null>;
+    listByWorkspace(workspaceId: string): Promise<TaskRecord[]>;
+    listByBlock(workspaceId: string, blockId: string): Promise<TaskRecord[]>;
+    linkBlock(workspaceId: string, source: TaskSourceKind, externalId: string, blockId: string | null): Promise<void>;
+}
+//# sourceMappingURL=D1TaskRepository.d.ts.map

package/dist/infrastructure/repositories/D1TaskRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1TaskRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1TaskRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAClG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAqD3D,sFAAsF;AACtF,qBAAa,gBAAiB,YAAW,cAAc;IACrD,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC9C;IAEK,GAAG,CACP,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAQ5B;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAQhE;IAEK,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAQ7E;IAEK,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAAC,IAAI,CAAC,CAOf;CACF"}

package/dist/infrastructure/repositories/D1TaskRepository.js

@@ -0,0 +1,90 @@
+/** Parse a JSON column, falling back to an empty array on anything malformed. */
+function parseJsonArray(json) {
+    try {
+        const parsed = JSON.parse(json);
+        if (Array.isArray(parsed))
+            return parsed;
+    }
+    catch {
+        // A malformed blob is treated as empty.
+    }
+    return [];
+}
+function rowToRecord(row) {
+    return {
+        workspaceId: row.workspace_id,
+        source: row.source,
+        externalId: row.external_id,
+        title: row.title,
+        url: row.url,
+        status: row.status,
+        type: row.type,
+        assignee: row.assignee,
+        priority: row.priority,
+        labels: parseJsonArray(row.labels),
+        description: row.description,
+        comments: parseJsonArray(row.comments),
+        excerpt: row.excerpt,
+        linkedBlockId: row.linked_block_id,
+        syncedAt: row.synced_at,
+        deletedAt: row.deleted_at,
+    };
+}
+/** D1-backed store of imported issue projections, across sources (migration 0014). */
+export class D1TaskRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async upsert(record) {
+        await this.db
+            .prepare(`INSERT INTO tasks
+          (workspace_id, source, external_id, title, url, status, type, assignee, priority,
+           labels, description, comments, excerpt, linked_block_id, synced_at, deleted_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)
+         ON CONFLICT (workspace_id, source, external_id) DO UPDATE SET
+           title = excluded.title,
+           url = excluded.url,
+           status = excluded.status,
+           type = excluded.type,
+           assignee = excluded.assignee,
+           priority = excluded.priority,
+           labels = excluded.labels,
+           description = excluded.description,
+           comments = excluded.comments,
+           excerpt = excluded.excerpt,
+           linked_block_id = excluded.linked_block_id,
+           synced_at = excluded.synced_at,
+           deleted_at = NULL`)
+            .bind(record.workspaceId, record.source, record.externalId, record.title, record.url, record.status, record.type, record.assignee, record.priority, JSON.stringify(record.labels), record.description, JSON.stringify(record.comments), record.excerpt, record.linkedBlockId, record.syncedAt)
+            .run();
+    }
+    async get(workspaceId, source, externalId) {
+        const row = await this.db
+            .prepare('SELECT * FROM tasks WHERE workspace_id = ? AND source = ? AND external_id = ? AND deleted_at IS NULL')
+            .bind(workspaceId, source, externalId)
+            .first();
+        return row ? rowToRecord(row) : null;
+    }
+    async listByWorkspace(workspaceId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM tasks WHERE workspace_id = ? AND deleted_at IS NULL ORDER BY synced_at DESC')
+            .bind(workspaceId)
+            .all();
+        return results.map(rowToRecord);
+    }
+    async listByBlock(workspaceId, blockId) {
+        const { results } = await this.db
+            .prepare('SELECT * FROM tasks WHERE workspace_id = ? AND linked_block_id = ? AND deleted_at IS NULL ORDER BY synced_at DESC')
+            .bind(workspaceId, blockId)
+            .all();
+        return results.map(rowToRecord);
+    }
+    async linkBlock(workspaceId, source, externalId, blockId) {
+        await this.db
+            .prepare('UPDATE tasks SET linked_block_id = ? WHERE workspace_id = ? AND source = ? AND external_id = ?')
+            .bind(blockId, workspaceId, source, externalId)
+            .run();
+    }
+}
+//# sourceMappingURL=D1TaskRepository.js.map

package/dist/infrastructure/repositories/D1TaskRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1TaskRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1TaskRepository.ts"],"names":[],"mappings":"AAsBA,iFAAiF;AACjF,SAAS,cAAc,CAAI,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAa,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,MAAM,EAAE,GAAG,CAAC,MAAwB;QACpC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,cAAc,CAAS,GAAG,CAAC,MAAM,CAAC;QAC1C,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,cAAc,CAAc,GAAG,CAAC,QAAQ,CAAC;QACnD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,OAAO,gBAAgB;IACV,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAkB;QAC7B,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;;;;;;;;;;;;6BAiBqB,CACtB;aACA,IAAI,CACH,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,QAAQ,EACf,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAC7B,MAAM,CAAC,WAAW,EAClB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC/B,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,QAAQ,CAChB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAAsB,EACtB,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,sGAAsG,CACvG;aACA,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;aACrC,KAAK,EAAW,CAAA;QACnB,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,2FAA2F,CAC5F;aACA,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAW,CAAA;QACjB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,OAAe;QACpD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN,mHAAmH,CACpH;aACA,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC1B,GAAG,EAAW,CAAA;QACjB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CACb,WAAmB,EACnB,MAAsB,EACtB,UAAkB,EAClB,OAAsB;QAEtB,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN,gGAAgG,CACjG;aACA,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;aAC9C,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}

package/dist/infrastructure/repositories/D1TokenUsageRepository.d.ts

@@ -0,0 +1,13 @@
+import type { TokenUsageRecord, TokenUsageRepository, TokenUsageTotals } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** D1-backed ledger for the spend safeguard (see migration 0003). */
+export declare class D1TokenUsageRepository implements TokenUsageRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    record(usage: TokenUsageRecord): Promise<void>;
+    totalsSince(epochMs: number): Promise<TokenUsageTotals>;
+    deleteOlderThan(epochMs: number): Promise<number>;
+}
+//# sourceMappingURL=D1TokenUsageRepository.d.ts.map

package/dist/infrastructure/repositories/D1TokenUsageRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1TokenUsageRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1TokenUsageRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACnG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAE3D,qEAAqE;AACrE,qBAAa,sBAAuB,YAAW,oBAAoB;IACjE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBnD;IAEK,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiB5D;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtD;CACF"}

package/dist/infrastructure/repositories/D1TokenUsageRepository.js

@@ -0,0 +1,41 @@
+/** D1-backed ledger for the spend safeguard (see migration 0003). */
+export class D1TokenUsageRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async record(usage) {
+        await this.db
+            .prepare(`INSERT INTO token_usage
+           (id, workspace_id, execution_id, agent_kind, provider, model,
+            input_tokens, output_tokens, cost_estimate, created_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .bind(usage.id, usage.workspaceId, usage.executionId, usage.agentKind, usage.provider, usage.model, usage.inputTokens, usage.outputTokens, usage.costEstimate, usage.createdAt)
+            .run();
+    }
+    async totalsSince(epochMs) {
+        const row = await this.db
+            .prepare(`SELECT
+           COALESCE(SUM(input_tokens), 0)  AS input_tokens,
+           COALESCE(SUM(output_tokens), 0) AS output_tokens,
+           COALESCE(SUM(cost_estimate), 0) AS cost_estimate
+         FROM token_usage
+         WHERE created_at >= ?`)
+            .bind(epochMs)
+            .first();
+        return {
+            inputTokens: row?.input_tokens ?? 0,
+            outputTokens: row?.output_tokens ?? 0,
+            costEstimate: row?.cost_estimate ?? 0,
+        };
+    }
+    async deleteOlderThan(epochMs) {
+        // Range delete on idx_token_usage_created; bounded by the rows being pruned.
+        const { meta } = await this.db
+            .prepare('DELETE FROM token_usage WHERE created_at < ?')
+            .bind(epochMs)
+            .run();
+        return meta.changes ?? 0;
+    }
+}
+//# sourceMappingURL=D1TokenUsageRepository.js.map

package/dist/infrastructure/repositories/D1TokenUsageRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1TokenUsageRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1TokenUsageRepository.ts"],"names":[],"mappings":"AAGA,qEAAqE;AACrE,MAAM,OAAO,sBAAsB;IAChB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;+CAGuC,CACxC;aACA,IAAI,CACH,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,SAAS,CAChB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;;;;+BAKuB,CACxB;aACA,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,EAA0E,CAAA;QAClF,OAAO;YACL,WAAW,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC;YACnC,YAAY,EAAE,GAAG,EAAE,aAAa,IAAI,CAAC;YACrC,YAAY,EAAE,GAAG,EAAE,aAAa,IAAI,CAAC;SACtC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,6EAA6E;QAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,OAAO,CAAC,8CAA8C,CAAC;aACvD,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE,CAAA;QACR,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1B,CAAC;CACF"}

package/dist/infrastructure/repositories/D1TrackerSettingsRepository.d.ts

@@ -0,0 +1,12 @@
+import type { TrackerSettings, TrackerSettingsRepository } from '@cat-factory/kernel';
+import type { D1Database } from '@cloudflare/workers-types';
+/** A workspace's issue-tracker selection, one row per workspace (migration 0029). */
+export declare class D1TrackerSettingsRepository implements TrackerSettingsRepository {
+    private readonly db;
+    constructor({ db }: {
+        db: D1Database;
+    });
+    get(workspaceId: string): Promise<TrackerSettings | null>;
+    put(workspaceId: string, settings: TrackerSettings): Promise<void>;
+}
+//# sourceMappingURL=D1TrackerSettingsRepository.d.ts.map

package/dist/infrastructure/repositories/D1TrackerSettingsRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"D1TrackerSettingsRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1TrackerSettingsRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAQ3D,qFAAqF;AACrF,qBAAa,2BAA4B,YAAW,yBAAyB;IAC3E,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAW9D;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAYvE;CACF"}

package/dist/infrastructure/repositories/D1TrackerSettingsRepository.js

@@ -0,0 +1,32 @@
+/** A workspace's issue-tracker selection, one row per workspace (migration 0029). */
+export class D1TrackerSettingsRepository {
+    db;
+    constructor({ db }) {
+        this.db = db;
+    }
+    async get(workspaceId) {
+        const row = await this.db
+            .prepare(`SELECT * FROM tracker_settings WHERE workspace_id = ?`)
+            .bind(workspaceId)
+            .first();
+        if (!row)
+            return null;
+        return {
+            tracker: row.tracker ?? null,
+            jiraProjectKey: row.jira_project_key,
+            updatedAt: row.updated_at,
+        };
+    }
+    async put(workspaceId, settings) {
+        await this.db
+            .prepare(`INSERT INTO tracker_settings (workspace_id, tracker, jira_project_key, updated_at)
+         VALUES (?, ?, ?, ?)
+         ON CONFLICT (workspace_id) DO UPDATE SET
+           tracker = excluded.tracker,
+           jira_project_key = excluded.jira_project_key,
+           updated_at = excluded.updated_at`)
+            .bind(workspaceId, settings.tracker, settings.jiraProjectKey, settings.updatedAt)
+            .run();
+    }
+}
+//# sourceMappingURL=D1TrackerSettingsRepository.js.map