@derwinjs/db 0.1.0

package/dist/fix-policy.d.ts

@@ -0,0 +1,46 @@
+/**
+ * createPrismaFixPolicy — Prisma-backed implementation of the SDK FixPolicy
+ * contract introduced by QAP-012 / ADR-0014.
+ *
+ * QAP-013 (Sprint 2). Per Option A (operator-confirmed during scoping):
+ *
+ *   Pure helpers (matchGlob / isPathAllowed / meetsMinSeverity / DEFAULT_AUTO_FIX_CONFIG)
+ *   live in @derwinjs/core/src/auto-fix/policy-engine.ts. THIS file wires
+ *   those helpers + Prisma reads + the QAFixAttemptStore daily-cap query
+ *   into one factory.
+ *
+ * Sprint 8 extension note: the Policy schema (packages/db/prisma/schema.prisma)
+ * gains explicit auto-fix fields in QAP-080..089 — `enabled`, `mode`,
+ * `pathAllowlist`, `pathBlocklist`, `minSeverity`. Until then, this impl
+ * reads what the schema currently has (`dailyDispatchLimit` from a
+ * CONCURRENCY policy row) and falls back to DEFAULT_AUTO_FIX_CONFIG for the
+ * rest. The contract surface is stable; only the storage backing the
+ * `getConfig` impl will fill in over time.
+ *
+ * Tenant isolation: every read scopes by projectId; isAutoFixAllowed reaches
+ * into the QAFixAttemptStore (which itself is tenant-scoped per QAP-011).
+ * Pattern D from docs/testing.md applies — wrong-project lookups return
+ * sensible defaults (no enumeration leak), not an error or someone else's
+ * data.
+ */
+import type { PrismaClient } from './prisma.js';
+import { type AutoFixConfig, type FixPolicy, type QAFixAttemptStore } from '@derwinjs/sdk';
+export interface PrismaFixPolicyConfig {
+    /** Generated Prisma client. */
+    prisma: PrismaClient;
+    /**
+     * QAFixAttemptStore for the daily-cap query in isAutoFixAllowed. Same
+     * instance the dispatcher uses — sharing prevents two parallel store
+     * connections per project.
+     */
+    attemptStore: QAFixAttemptStore;
+    /**
+     * Optional override for the platform-wide defaults. Tests use this to pin
+     * a specific config without touching the database. Production wiring
+     * should leave this undefined; the platform defaults from
+     * @derwinjs/core/policy-engine apply.
+     */
+    defaultConfig?: AutoFixConfig;
+}
+export declare function createPrismaFixPolicy(config: PrismaFixPolicyConfig): FixPolicy;
+//# sourceMappingURL=fix-policy.d.ts.map

package/dist/fix-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-policy.d.ts","sourceRoot":"","sources":["../src/fix-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,KAAK,aAAa,EAGlB,KAAK,SAAS,EACd,KAAK,iBAAiB,EAEvB,MAAM,eAAe,CAAC;AASvB,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB;;;;OAIG;IACH,YAAY,EAAE,iBAAiB,CAAC;IAChC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAID,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,SAAS,CA0H9E"}

package/dist/fix-policy.js

@@ -0,0 +1,162 @@
+/**
+ * createPrismaFixPolicy — Prisma-backed implementation of the SDK FixPolicy
+ * contract introduced by QAP-012 / ADR-0014.
+ *
+ * QAP-013 (Sprint 2). Per Option A (operator-confirmed during scoping):
+ *
+ *   Pure helpers (matchGlob / isPathAllowed / meetsMinSeverity / DEFAULT_AUTO_FIX_CONFIG)
+ *   live in @derwinjs/core/src/auto-fix/policy-engine.ts. THIS file wires
+ *   those helpers + Prisma reads + the QAFixAttemptStore daily-cap query
+ *   into one factory.
+ *
+ * Sprint 8 extension note: the Policy schema (packages/db/prisma/schema.prisma)
+ * gains explicit auto-fix fields in QAP-080..089 — `enabled`, `mode`,
+ * `pathAllowlist`, `pathBlocklist`, `minSeverity`. Until then, this impl
+ * reads what the schema currently has (`dailyDispatchLimit` from a
+ * CONCURRENCY policy row) and falls back to DEFAULT_AUTO_FIX_CONFIG for the
+ * rest. The contract surface is stable; only the storage backing the
+ * `getConfig` impl will fill in over time.
+ *
+ * Tenant isolation: every read scopes by projectId; isAutoFixAllowed reaches
+ * into the QAFixAttemptStore (which itself is tenant-scoped per QAP-011).
+ * Pattern D from docs/testing.md applies — wrong-project lookups return
+ * sensible defaults (no enumeration leak), not an error or someone else's
+ * data.
+ */
+import { DEFAULT_AUTO_FIX_CONFIG, isPathAllowed as pureIsPathAllowed, meetsMinSeverity as pureMeetsMinSeverity, } from '@derwinjs/core';
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaFixPolicy(config) {
+    const { prisma, attemptStore } = config;
+    const defaults = config.defaultConfig ?? DEFAULT_AUTO_FIX_CONFIG;
+    return {
+        async getConfig(projectId) {
+            // Read the CONCURRENCY policy row if it exists. The Policy model
+            // (Sprint 1 / QAP-005) currently tracks `dailyDispatchLimit` which
+            // maps directly to `maxAttemptsPerDay`. The remaining auto-fix-specific
+            // fields land in Sprint 8's Policy expansion; for now they come from
+            // defaults.
+            //
+            // Tenant scope: where { projectId, policyType: 'CONCURRENCY' } —
+            // findFirst rather than findUnique because the schema doesn't
+            // enforce one-row-per-(project, type) uniqueness yet.
+            const concurrencyPolicy = await prisma.policy.findFirst({
+                where: { projectId, policyType: 'CONCURRENCY' },
+            });
+            return {
+                ...defaults,
+                // Override only the field the schema currently models.
+                maxAttemptsPerDay: concurrencyPolicy?.dailyDispatchLimit ?? defaults.maxAttemptsPerDay,
+            };
+        },
+        async isAutoFixAllowed(projectId) {
+            const cfg = await this.getConfig(projectId);
+            // (1) Master enable gate.
+            if (!cfg.enabled) {
+                return {
+                    allowed: false,
+                    reason: `auto-fix disabled for project ${projectId}`,
+                };
+            }
+            // (2) Daily cap. maxAttemptsPerDay === 0 means "unlimited" (the SDK
+            // contract's note); skip the cap check in that case.
+            if (cfg.maxAttemptsPerDay > 0) {
+                const attemptsToday = await attemptStore.countAttemptsToday({ projectId });
+                if (attemptsToday >= cfg.maxAttemptsPerDay) {
+                    return {
+                        allowed: false,
+                        reason: `daily cap reached (${String(attemptsToday)}/${String(cfg.maxAttemptsPerDay)})`,
+                    };
+                }
+            }
+            return { allowed: true };
+        },
+        meetsMinSeverity(severity, cfg) {
+            // Delegate to the pure helper from @derwinjs/core. Re-exported here
+            // through the FixPolicy interface so callers don't need both deps.
+            return pureMeetsMinSeverity(severity, cfg);
+        },
+        isPathAllowed(path, cfg) {
+            return pureIsPathAllowed(path, cfg);
+        },
+        /**
+         * Update the project's auto-fix policy. Writes through to the Policy row
+         * (CONCURRENCY policyType) for the project, creating it with sensible
+         * defaults + operator overrides if absent. The post-write config is
+         * returned via getConfig so callers see the same shape they'd see on the
+         * next read.
+         *
+         * Sprint 8 note: the Policy schema does not yet have an `enabled` column
+         * (lands in QAP-080..089). Until then, the `enabled` field on the input
+         * is type-checked and validated, but silently no-ops at the storage
+         * layer. The setConfig return value reflects the post-write state from
+         * getConfig, which sources `enabled` from defaults until the schema
+         * gains the column.
+         */
+        async setConfig(projectId, input) {
+            validateUpdateInput(input);
+            // Read the current row (or null) to know whether we update or create.
+            const existing = await prisma.policy.findFirst({
+                where: { projectId, policyType: 'CONCURRENCY' },
+            });
+            if (existing) {
+                // Partial update — only fields the input supplies. `enabled` is
+                // accepted at the contract layer but no-ops here until the Sprint 8
+                // schema lands.
+                await prisma.policy.update({
+                    where: { id: existing.id },
+                    data: {
+                        ...(input.maxAttemptsPerDay !== undefined && {
+                            dailyDispatchLimit: input.maxAttemptsPerDay,
+                        }),
+                        updatedBy: input.updatedBy,
+                    },
+                });
+            }
+            else {
+                // Create a new CONCURRENCY policy row with platform defaults +
+                // operator-supplied overrides where present.
+                await prisma.policy.create({
+                    data: {
+                        projectId,
+                        policyType: 'CONCURRENCY',
+                        pathRules: [],
+                        classificationOverrides: {},
+                        autoMergeTrustThreshold: 70,
+                        autoMergeMediumThreshold: 85,
+                        dailyDispatchLimit: input.maxAttemptsPerDay ?? defaults.maxAttemptsPerDay,
+                        perTicketAttemptLimit: 1,
+                        freezeWindowsCron: [],
+                        escalationTriggers: {},
+                        updatedBy: input.updatedBy,
+                    },
+                });
+            }
+            // Return the post-write config via the existing getConfig path so
+            // callers see the same shape as the next read.
+            return this.getConfig(projectId);
+        },
+    };
+}
+// ─── Validation ───────────────────────────────────────────────────────────
+/**
+ * Validate an AutoFixConfigUpdateInput. Throws plain Error with a
+ * recognizable 'FixPolicy.setConfig:' prefix — matching the existing
+ * FixPolicy convention of not defining a tagged error class. If FixPolicy
+ * gains store-style errors later (Sprint 8), this can be migrated.
+ */
+function validateUpdateInput(input) {
+    if (typeof input.updatedBy !== 'string' || input.updatedBy.trim() === '') {
+        throw new Error('FixPolicy.setConfig: updatedBy is required');
+    }
+    if (input.maxAttemptsPerDay !== undefined) {
+        if (typeof input.maxAttemptsPerDay !== 'number' ||
+            !Number.isInteger(input.maxAttemptsPerDay) ||
+            input.maxAttemptsPerDay < 0) {
+            throw new Error('FixPolicy.setConfig: maxAttemptsPerDay must be a non-negative integer');
+        }
+    }
+    if (input.enabled !== undefined && typeof input.enabled !== 'boolean') {
+        throw new Error('FixPolicy.setConfig: enabled must be a boolean');
+    }
+}
+//# sourceMappingURL=fix-policy.js.map

package/dist/fix-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix-policy.js","sourceRoot":"","sources":["../src/fix-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAWH,OAAO,EACL,uBAAuB,EACvB,aAAa,IAAI,iBAAiB,EAClC,gBAAgB,IAAI,oBAAoB,GACzC,MAAM,gBAAgB,CAAC;AAsBxB,4EAA4E;AAE5E,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAkB,MAAM,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAEhF,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,SAAiB;YAC/B,iEAAiE;YACjE,mEAAmE;YACnE,wEAAwE;YACxE,qEAAqE;YACrE,YAAY;YACZ,EAAE;YACF,iEAAiE;YACjE,8DAA8D;YAC9D,sDAAsD;YACtD,MAAM,iBAAiB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;gBACtD,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE;aAChD,CAAC,CAAC;YAEH,OAAO;gBACL,GAAG,QAAQ;gBACX,uDAAuD;gBACvD,iBAAiB,EAAE,iBAAiB,EAAE,kBAAkB,IAAI,QAAQ,CAAC,iBAAiB;aACvF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB;YACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAE5C,0BAA0B;YAC1B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,iCAAiC,SAAS,EAAE;iBACrD,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,qDAAqD;YACrD,IAAI,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC3E,IAAI,aAAa,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;oBAC3C,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,sBAAsB,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG;qBACxF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,gBAAgB,CAAC,QAAkB,EAAE,GAAkB;YACrD,oEAAoE;YACpE,mEAAmE;YACnE,OAAO,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,aAAa,CAAC,IAAY,EAAE,GAAkB;YAC5C,OAAO,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED;;;;;;;;;;;;;WAaG;QACH,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,KAA+B;YAChE,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAE3B,sEAAsE;YACtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;gBAC7C,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE;aAChD,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,gEAAgE;gBAChE,oEAAoE;gBACpE,gBAAgB;gBAChB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;oBACzB,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE;oBAC1B,IAAI,EAAE;wBACJ,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI;4BAC3C,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;yBAC5C,CAAC;wBACF,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,+DAA+D;gBAC/D,6CAA6C;gBAC7C,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;oBACzB,IAAI,EAAE;wBACJ,SAAS;wBACT,UAAU,EAAE,aAAa;wBACzB,SAAS,EAAE,EAAE;wBACb,uBAAuB,EAAE,EAAE;wBAC3B,uBAAuB,EAAE,EAAE;wBAC3B,wBAAwB,EAAE,EAAE;wBAC5B,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;wBACzE,qBAAqB,EAAE,CAAC;wBACxB,iBAAiB,EAAE,EAAE;wBACrB,kBAAkB,EAAE,EAAE;wBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B;iBACF,CAAC,CAAC;YACL,CAAC;YAED,kEAAkE;YAClE,+CAA+C;YAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,KAA+B;IAC1D,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,IACE,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;YAC3C,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC1C,KAAK,CAAC,iBAAiB,GAAG,CAAC,EAC3B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @derwinjs/db — Prisma schema + generated client + storage implementations.
+ *
+ * Schema lives at `packages/db/prisma/schema.prisma` (added in QAP-005).
+ * Models per technical spec §3 plus Sprint 2 additions (crossLinkRefs +
+ * dashboardUrl on QATicket per ADR-0008).
+ *
+ * Project-namespaced — every project-scoped table has projectId FK to Project.
+ * pgvector for RAG corpus embeddings (technical spec §14 Q2 / ADR-0007 — switch
+ * lands at Sprint 4 / QAP-040..047 with Profile-v0 ingestion).
+ *
+ * Storage implementations exposed here implement contracts defined in
+ * @derwinjs/sdk. configureQAPlatform wires them in based on the consumer's
+ * configuration. Today: QATicketStore (QAP-018B). More land per sprint.
+ */
+export declare const PACKAGE_NAME: "@derwinjs/db";
+export { createPrismaQATicketStore, type PrismaQATicketStoreConfig } from './qa-ticket-store.js';
+export { createPrismaQAFixAttemptStore, type PrismaQAFixAttemptStoreConfig, } from './qa-fix-attempt-store.js';
+export { createPrismaQARunStore, type PrismaQARunStoreConfig } from './qa-run-store.js';
+export { createPrismaQAPatternStore, type PrismaQAPatternStoreConfig } from './qa-pattern-store.js';
+export { createPrismaQARevertStore, type PrismaQARevertStoreConfig } from './qa-revert-store.js';
+export { createPrismaQAUniformityStore, type PrismaQAUniformityStoreConfig, } from './qa-uniformity-store.js';
+export { createPrismaAgentFindingsIngestor, type PrismaAgentFindingsIngestorConfig, } from './agent-findings-ingestor.js';
+export { createPrismaLearningHealthReporter, type PrismaLearningHealthReporterConfig, } from './learning-health-reporter.js';
+export { createPrismaCoverageGapReporter, type PrismaCoverageGapReporterConfig, } from './coverage-gap-reporter.js';
+export * from './prisma.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,YAAY,EAAG,cAAuB,CAAC;AAIpD,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,KAAK,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,EAClC,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AA4BpC,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,53 @@
+/**
+ * @derwinjs/db — Prisma schema + generated client + storage implementations.
+ *
+ * Schema lives at `packages/db/prisma/schema.prisma` (added in QAP-005).
+ * Models per technical spec §3 plus Sprint 2 additions (crossLinkRefs +
+ * dashboardUrl on QATicket per ADR-0008).
+ *
+ * Project-namespaced — every project-scoped table has projectId FK to Project.
+ * pgvector for RAG corpus embeddings (technical spec §14 Q2 / ADR-0007 — switch
+ * lands at Sprint 4 / QAP-040..047 with Profile-v0 ingestion).
+ *
+ * Storage implementations exposed here implement contracts defined in
+ * @derwinjs/sdk. configureQAPlatform wires them in based on the consumer's
+ * configuration. Today: QATicketStore (QAP-018B). More land per sprint.
+ */
+export const PACKAGE_NAME = '@derwinjs/db';
+// ─── Storage implementations ─────────────────────────────────────────────
+export { createPrismaQATicketStore } from './qa-ticket-store.js';
+export { createPrismaQAFixAttemptStore, } from './qa-fix-attempt-store.js';
+export { createPrismaQARunStore } from './qa-run-store.js';
+export { createPrismaQAPatternStore } from './qa-pattern-store.js';
+export { createPrismaQARevertStore } from './qa-revert-store.js';
+export { createPrismaQAUniformityStore, } from './qa-uniformity-store.js';
+export { createPrismaAgentFindingsIngestor, } from './agent-findings-ingestor.js';
+export { createPrismaLearningHealthReporter, } from './learning-health-reporter.js';
+export { createPrismaCoverageGapReporter, } from './coverage-gap-reporter.js';
+// ─── Prisma client re-export ─────────────────────────────────────────────
+//
+// @derwinjs/db ships its OWN generated Prisma client (output: prisma-client/
+// per the schema's generator block). Consumers MUST import PrismaClient
+// from here, NOT from @prisma/client — see src/prisma.ts for the full
+// rationale. Each Derwin consumer (Lifeline, Side Piece, Bolt, ...) has
+// its own @prisma/client generated against its own schema; @derwinjs/db
+// can't piggyback on it without breaking types.
+//
+// What's re-exported (full surface from the generated client):
+//   - PrismaClient — instantiate with { datasources: { db: { url } }} and
+//     pass to the store factories above.
+//   - Prisma — namespace containing PrismaClientKnownRequestError, validators,
+//     input/output types per model, etc.
+//   - All enums from the schema: ProjectType, ProjectMode, RunTrigger,
+//     RunStatus, AttemptStatus, TicketStatus, ReviewBucket, RiskTier,
+//     Severity, SurfaceCategory, QAPatternStatus, QAFailureClass,
+//     QAUniformityStatus, etc.
+//
+// Consumer pattern:
+//   import { PrismaClient, ProjectType } from '@derwinjs/db';
+//   const derwinPrisma = new PrismaClient({
+//     datasources: { db: { url: process.env.DERWIN_DATABASE_URL } },
+//   });
+//   await derwinPrisma.project.upsert({ ... });
+export * from './prisma.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,cAAuB,CAAC;AAEpD,4EAA4E;AAE5E,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAmC,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,GAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AAEpC,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,sEAAsE;AACtE,wEAAwE;AACxE,wEAAwE;AACxE,gDAAgD;AAChD,EAAE;AACF,+DAA+D;AAC/D,0EAA0E;AAC1E,yCAAyC;AACzC,+EAA+E;AAC/E,yCAAyC;AACzC,uEAAuE;AACvE,sEAAsE;AACtE,kEAAkE;AAClE,+BAA+B;AAC/B,EAAE;AACF,oBAAoB;AACpB,8DAA8D;AAC9D,4CAA4C;AAC5C,qEAAqE;AACrE,QAAQ;AACR,gDAAgD;AAEhD,cAAc,aAAa,CAAC"}

package/dist/learning-health-reporter.d.ts

@@ -0,0 +1,37 @@
+/**
+ * LearningHealthReporter — Prisma-backed aggregate reader over QAFixAttempt
+ * + QAPattern for the dashboard's "Learning Health" widget.
+ *
+ * QAP-019F (Sprint 2 Group D-3, Commit 3). Implements the
+ * LearningHealthReporter contract from @derwinjs/sdk. Migrated from
+ * Lifeline's GET /api/qa/learning-health route. No new schema — pure
+ * aggregate read.
+ *
+ * Response field names + null semantics mirror Lifeline so the QAP-019G
+ * shim is a 1:1 mapping. Five metrics:
+ *   - mergedWithoutEditsPercent (humanEditLines === 0 share of merges)
+ *   - regressionRatePercent (regressionDetected share of merges)
+ *   - topImprovingClassifications (top-5 QAPatterns by fixSuccessScore,
+ *     filtered to fixOutcomeSampleSize >= 3)
+ *   - patternsWithSamples (count of QAPatterns with fixOutcomeSampleSize > 0)
+ *   - dryRunOnlyFailureRatePercent (PRE_VERIFY_PASSED share of dispatches)
+ *
+ * **Schema mapping under Option β** (Lifeline → Derwin):
+ *   - Lifeline `status: 'MERGED'` → Derwin `dispatchStatus IN
+ *     ('AUTO_MERGED', 'HUMAN_MERGED')` (Lifeline's single MERGED is split
+ *     in Derwin's AttemptStatus enum).
+ *   - Lifeline `status: 'DRY_RUN_LOGGED'` → Derwin
+ *     `dispatchStatus = 'PRE_VERIFY_PASSED'` (the closest equivalent —
+ *     pre-verify ran successfully but operator never escalated to PR).
+ *   - Lifeline `outcomeRecordedAt` → Derwin `mergedAt` (timestamp on
+ *     merged attempts).
+ *   - Lifeline `QAPatternInsight` → Derwin `QAPattern` (D-2 rename).
+ */
+import type { PrismaClient } from './prisma.js';
+import { type LearningHealthReporter } from '@derwinjs/sdk';
+export interface PrismaLearningHealthReporterConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+export declare function createPrismaLearningHealthReporter(config: PrismaLearningHealthReporterConfig): LearningHealthReporter;
+//# sourceMappingURL=learning-health-reporter.d.ts.map

package/dist/learning-health-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"learning-health-reporter.d.ts","sourceRoot":"","sources":["../src/learning-health-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAKL,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,kCAAkC;IACjD,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AAUD,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,kCAAkC,GACzC,sBAAsB,CAiGxB"}

package/dist/learning-health-reporter.js

@@ -0,0 +1,141 @@
+/**
+ * LearningHealthReporter — Prisma-backed aggregate reader over QAFixAttempt
+ * + QAPattern for the dashboard's "Learning Health" widget.
+ *
+ * QAP-019F (Sprint 2 Group D-3, Commit 3). Implements the
+ * LearningHealthReporter contract from @derwinjs/sdk. Migrated from
+ * Lifeline's GET /api/qa/learning-health route. No new schema — pure
+ * aggregate read.
+ *
+ * Response field names + null semantics mirror Lifeline so the QAP-019G
+ * shim is a 1:1 mapping. Five metrics:
+ *   - mergedWithoutEditsPercent (humanEditLines === 0 share of merges)
+ *   - regressionRatePercent (regressionDetected share of merges)
+ *   - topImprovingClassifications (top-5 QAPatterns by fixSuccessScore,
+ *     filtered to fixOutcomeSampleSize >= 3)
+ *   - patternsWithSamples (count of QAPatterns with fixOutcomeSampleSize > 0)
+ *   - dryRunOnlyFailureRatePercent (PRE_VERIFY_PASSED share of dispatches)
+ *
+ * **Schema mapping under Option β** (Lifeline → Derwin):
+ *   - Lifeline `status: 'MERGED'` → Derwin `dispatchStatus IN
+ *     ('AUTO_MERGED', 'HUMAN_MERGED')` (Lifeline's single MERGED is split
+ *     in Derwin's AttemptStatus enum).
+ *   - Lifeline `status: 'DRY_RUN_LOGGED'` → Derwin
+ *     `dispatchStatus = 'PRE_VERIFY_PASSED'` (the closest equivalent —
+ *     pre-verify ran successfully but operator never escalated to PR).
+ *   - Lifeline `outcomeRecordedAt` → Derwin `mergedAt` (timestamp on
+ *     merged attempts).
+ *   - Lifeline `QAPatternInsight` → Derwin `QAPattern` (D-2 rename).
+ */
+import { LearningHealthReporterError, } from '@derwinjs/sdk';
+// ─── Constants (Lifeline parity) ─────────────────────────────────────────
+const DEFAULT_WINDOW_DAYS = 30;
+const TOP_PATTERNS_LIMIT = 5;
+const MIN_SAMPLE_SIZE = 3; // pattern threshold below which trend is too noisy
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaLearningHealthReporter(config) {
+    const { prisma } = config;
+    return {
+        async getLearningHealth(filter) {
+            validateFilter(filter);
+            const windowDays = filter.windowDays ?? DEFAULT_WINDOW_DAYS;
+            const windowStart = new Date(Date.now() - windowDays * 24 * 60 * 60 * 1000);
+            // ─── 1. Merged-attempt sample (clean-merge + regression rates) ────
+            const mergedAttempts = await prisma.qAFixAttempt.findMany({
+                where: {
+                    projectId: filter.projectId,
+                    dispatchStatus: { in: ['AUTO_MERGED', 'HUMAN_MERGED'] },
+                    mergedAt: { gte: windowStart },
+                },
+                select: { humanEditLines: true, regressionDetected: true },
+            });
+            const sampleSize = mergedAttempts.length;
+            let mergedWithoutEditsPercent = null;
+            let regressionRatePercent = null;
+            if (sampleSize > 0) {
+                const cleanMerges = mergedAttempts.filter((a) => a.humanEditLines === 0).length;
+                mergedWithoutEditsPercent = Math.round((cleanMerges / sampleSize) * 100);
+                const regressions = mergedAttempts.filter((a) => a.regressionDetected).length;
+                regressionRatePercent = Math.round((regressions / sampleSize) * 100);
+            }
+            // ─── 2. Top-improving classifications ──────────────────────────────
+            const patterns = await prisma.qAPattern.findMany({
+                where: {
+                    projectId: filter.projectId,
+                    fixOutcomeSampleSize: { gte: MIN_SAMPLE_SIZE },
+                    fixSuccessScore: { not: null },
+                },
+                orderBy: { fixSuccessScore: 'desc' },
+                take: TOP_PATTERNS_LIMIT,
+                select: {
+                    classification: true,
+                    fixSuccessScore: true,
+                    fixOutcomeSampleSize: true,
+                },
+            });
+            const topImprovingClassifications = patterns.map((p) => ({
+                classification: p.classification,
+                // Filter ensures fixSuccessScore !== null, but TS narrows it to
+                // number | null because Prisma's type widens. Coerce defensively.
+                score: p.fixSuccessScore ?? 0,
+                sampleSize: p.fixOutcomeSampleSize,
+            }));
+            // ─── 3. Patterns with samples (transparency metric) ────────────────
+            const patternsWithSamples = await prisma.qAPattern.count({
+                where: {
+                    projectId: filter.projectId,
+                    fixOutcomeSampleSize: { gt: 0 },
+                },
+            });
+            // ─── 4. Dry-run-only failure rate ──────────────────────────────────
+            //
+            // Counts in the same time window. Lifeline parity: numerator counts
+            // attempts stuck at PRE_VERIFY_PASSED (Derwin's closest analog to
+            // DRY_RUN_LOGGED); denominator counts those plus everything that
+            // moved past — PR_OPENED + the merged + REJECTED final states.
+            const dryRunCount = await prisma.qAFixAttempt.count({
+                where: {
+                    projectId: filter.projectId,
+                    dispatchStatus: 'PRE_VERIFY_PASSED',
+                    attemptedAt: { gte: windowStart },
+                },
+            });
+            const prCount = await prisma.qAFixAttempt.count({
+                where: {
+                    projectId: filter.projectId,
+                    dispatchStatus: { in: ['PR_OPENED', 'AUTO_MERGED', 'HUMAN_MERGED', 'REJECTED'] },
+                    attemptedAt: { gte: windowStart },
+                },
+            });
+            const totalDispatches = dryRunCount + prCount;
+            let dryRunOnlyFailureRatePercent = null;
+            if (totalDispatches > 0) {
+                dryRunOnlyFailureRatePercent = Math.round((dryRunCount / totalDispatches) * 100);
+            }
+            return {
+                windowDays,
+                sampleSize,
+                mergedWithoutEditsPercent,
+                regressionRatePercent,
+                topImprovingClassifications,
+                patternsWithSamples,
+                dryRunOnlyFailureRatePercent,
+            };
+        },
+    };
+}
+// ─── Validation ──────────────────────────────────────────────────────────
+function validateFilter(filter) {
+    if (typeof filter.projectId !== 'string' || filter.projectId.length === 0) {
+        throw new LearningHealthReporterError('invalid_input', 'LearningHealthReporter: projectId is required');
+    }
+    if (filter.windowDays !== undefined) {
+        if (typeof filter.windowDays !== 'number' || !Number.isFinite(filter.windowDays)) {
+            throw new LearningHealthReporterError('invalid_input', 'LearningHealthReporter: windowDays must be a finite number');
+        }
+        if (filter.windowDays < 1) {
+            throw new LearningHealthReporterError('invalid_input', 'LearningHealthReporter: windowDays must be >= 1');
+        }
+    }
+}
+//# sourceMappingURL=learning-health-reporter.js.map

package/dist/learning-health-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"learning-health-reporter.js","sourceRoot":"","sources":["../src/learning-health-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EACL,2BAA2B,GAK5B,MAAM,eAAe,CAAC;AASvB,4EAA4E;AAE5E,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,eAAe,GAAG,CAAC,CAAC,CAAC,mDAAmD;AAE9E,4EAA4E;AAE5E,MAAM,UAAU,kCAAkC,CAChD,MAA0C;IAE1C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,iBAAiB,CAAC,MAA4B;YAClD,cAAc,CAAC,MAAM,CAAC,CAAC;YAEvB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC;YAC5D,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAE5E,qEAAqE;YACrE,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;gBACxD,KAAK,EAAE;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE;oBACvD,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;iBAC/B;gBACD,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE;aAC3D,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC;YACzC,IAAI,yBAAyB,GAAkB,IAAI,CAAC;YACpD,IAAI,qBAAqB,GAAkB,IAAI,CAAC;YAChD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnB,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBAChF,yBAAyB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC;gBACzE,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;gBAC9E,qBAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC;YACvE,CAAC;YAED,sEAAsE;YACtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAC/C,KAAK,EAAE;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,oBAAoB,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE;oBAC9C,eAAe,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;iBAC/B;gBACD,OAAO,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE;gBACpC,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE;oBACN,cAAc,EAAE,IAAI;oBACpB,eAAe,EAAE,IAAI;oBACrB,oBAAoB,EAAE,IAAI;iBAC3B;aACF,CAAC,CAAC;YACH,MAAM,2BAA2B,GAA6B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjF,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,gEAAgE;gBAChE,kEAAkE;gBAClE,KAAK,EAAE,CAAC,CAAC,eAAe,IAAI,CAAC;gBAC7B,UAAU,EAAE,CAAC,CAAC,oBAAoB;aACnC,CAAC,CAAC,CAAC;YAEJ,sEAAsE;YACtE,MAAM,mBAAmB,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;gBACvD,KAAK,EAAE;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,oBAAoB,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;iBAChC;aACF,CAAC,CAAC;YAEH,sEAAsE;YACtE,EAAE;YACF,oEAAoE;YACpE,kEAAkE;YAClE,iEAAiE;YACjE,+DAA+D;YAC/D,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;gBAClD,KAAK,EAAE;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,cAAc,EAAE,mBAAmB;oBACnC,WAAW,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;iBAClC;aACF,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;gBAC9C,KAAK,EAAE;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE;oBAChF,WAAW,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;iBAClC;aACF,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,WAAW,GAAG,OAAO,CAAC;YAC9C,IAAI,4BAA4B,GAAkB,IAAI,CAAC;YACvD,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;gBACxB,4BAA4B,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,eAAe,CAAC,GAAG,GAAG,CAAC,CAAC;YACnF,CAAC;YAED,OAAO;gBACL,UAAU;gBACV,UAAU;gBACV,yBAAyB;gBACzB,qBAAqB;gBACrB,2BAA2B;gBAC3B,mBAAmB;gBACnB,4BAA4B;aAC7B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,SAAS,cAAc,CAAC,MAA4B;IAClD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,2BAA2B,CACnC,eAAe,EACf,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,2BAA2B,CACnC,eAAe,EACf,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAA2B,CACnC,eAAe,EACf,iDAAiD,CAClD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/prisma.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @derwinjs/db internal re-export of the generated Prisma client.
+ *
+ * The Prisma generator emits to `packages/db/prisma-client/` (see
+ * `prisma/schema.prisma`'s `generator client { output = "../prisma-client" }`
+ * directive). This file is the single internal entrypoint for that
+ * generated module — every store factory inside @derwinjs/db imports
+ * `Prisma` and `PrismaClient` from here instead of from `@prisma/client`.
+ *
+ * **Why a Derwin-owned PrismaClient (not @prisma/client)?**
+ *
+ * Each Derwin consumer (Lifeline, Side Piece, Bolt, Financial Analyzer,
+ * Shackbox, Home Remodeler, Patient Communications Hub) has its own
+ * Prisma schema and its own generated client at `node_modules/@prisma/client`
+ * for ITS OWN tables. If @derwinjs/db imported `PrismaClient` from
+ * `@prisma/client`, consumers' tsc would resolve that to the consumer's
+ * client — which doesn't have Derwin's models (qAUniformity, qARun, etc).
+ * Type-check would fail; runtime would fail.
+ *
+ * By owning the generated client inside @derwinjs/db, we get a Derwin-shaped
+ * `PrismaClient` that ships in the published tarball alongside the rest
+ * of `dist/`. Consumers can safely instantiate `new PrismaClient(...)`
+ * pointed at `DERWIN_DATABASE_URL` and pass it to Derwin's store
+ * factories without type collisions.
+ *
+ * Consumers should import `PrismaClient` from `@derwinjs/db` (which
+ * re-exports it from this module) — never from `@prisma/client` for
+ * Derwin queries.
+ */
+export * from '../prisma-client/index.js';
+//# sourceMappingURL=prisma.d.ts.map

package/dist/prisma.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma.d.ts","sourceRoot":"","sources":["../src/prisma.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,cAAc,2BAA2B,CAAC"}

package/dist/prisma.js

@@ -0,0 +1,31 @@
+/**
+ * @derwinjs/db internal re-export of the generated Prisma client.
+ *
+ * The Prisma generator emits to `packages/db/prisma-client/` (see
+ * `prisma/schema.prisma`'s `generator client { output = "../prisma-client" }`
+ * directive). This file is the single internal entrypoint for that
+ * generated module — every store factory inside @derwinjs/db imports
+ * `Prisma` and `PrismaClient` from here instead of from `@prisma/client`.
+ *
+ * **Why a Derwin-owned PrismaClient (not @prisma/client)?**
+ *
+ * Each Derwin consumer (Lifeline, Side Piece, Bolt, Financial Analyzer,
+ * Shackbox, Home Remodeler, Patient Communications Hub) has its own
+ * Prisma schema and its own generated client at `node_modules/@prisma/client`
+ * for ITS OWN tables. If @derwinjs/db imported `PrismaClient` from
+ * `@prisma/client`, consumers' tsc would resolve that to the consumer's
+ * client — which doesn't have Derwin's models (qAUniformity, qARun, etc).
+ * Type-check would fail; runtime would fail.
+ *
+ * By owning the generated client inside @derwinjs/db, we get a Derwin-shaped
+ * `PrismaClient` that ships in the published tarball alongside the rest
+ * of `dist/`. Consumers can safely instantiate `new PrismaClient(...)`
+ * pointed at `DERWIN_DATABASE_URL` and pass it to Derwin's store
+ * factories without type collisions.
+ *
+ * Consumers should import `PrismaClient` from `@derwinjs/db` (which
+ * re-exports it from this module) — never from `@prisma/client` for
+ * Derwin queries.
+ */
+export * from '../prisma-client/index.js';
+//# sourceMappingURL=prisma.js.map

package/dist/prisma.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma.js","sourceRoot":"","sources":["../src/prisma.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,cAAc,2BAA2B,CAAC"}

package/dist/qa-fix-attempt-store.d.ts

@@ -0,0 +1,28 @@
+/**
+ * QAFixAttemptStore — Prisma implementation against Derwin's QAFixAttempt table.
+ *
+ * QAP-011 (Sprint 2). Implements the QAFixAttemptStore contract from
+ * @derwinjs/sdk (see packages/sdk/src/types/qa-fix-attempt-store.ts) against
+ * the @derwinjs/db Prisma client. Mirrors createPrismaQATicketStore in
+ * structure: a factory taking `{ prisma }` so callers inject the client
+ * (per the architecture pivot's DI seam — @derwinjs/db owns persistence; the
+ * orchestrator wires it in via configureQAPlatform()).
+ *
+ * Tenant isolation: every method scopes by projectId in the WHERE clause.
+ * App-layer guards in Sprint 2 ahead of the full Supabase RLS migration
+ * (Sprint 3 / QAP-024). The negative path (wrong-project read) returns
+ * null / throws not_found rather than the wrong tenant's row — defense in
+ * depth against tenant enumeration.
+ *
+ * Composes with QATicketStore: a ticket id is the qaTicketId FK; the store
+ * does NOT validate the ticket exists pre-insert (Prisma's P2003 surfaces
+ * FK violations consistently).
+ */
+import { type PrismaClient } from './prisma.js';
+import { type QAFixAttemptStore } from '@derwinjs/sdk';
+export interface PrismaQAFixAttemptStoreConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+export declare function createPrismaQAFixAttemptStore(config: PrismaQAFixAttemptStoreConfig): QAFixAttemptStore;
+//# sourceMappingURL=qa-fix-attempt-store.d.ts.map

package/dist/qa-fix-attempt-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qa-fix-attempt-store.d.ts","sourceRoot":"","sources":["../src/qa-fix-attempt-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAOL,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,6BAA6B;IAC5C,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AAID,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,6BAA6B,GACpC,iBAAiB,CA0MnB"}