@derwinjs/db 0.10.0 → 0.11.0

package/dist/index.d.ts

@@ -36,5 +36,7 @@ export { createPrismaAutoPromotionEvaluator, DEFAULT_PROMOTION_THRESHOLDS, type
 export { createPrismaVisualBaselineStore, type PrismaVisualBaselineStoreConfig, } from './visual-baseline-store.js';
 export { createPrismaContractBaselineStore, type PrismaContractBaselineStoreConfig, } from './contract-baseline-store.js';
 export { createPrismaTenantFuzzConfigStore, type PrismaTenantFuzzConfigStoreConfig, } from './tenant-fuzz-config-store.js';
+export { createPrismaRumSampleStore, RumSampleStoreError, type PrismaRumSampleStoreConfig, } from './rum-sample-store.js';
+export { createPrismaMilestoneEventStore, type PrismaMilestoneEventStoreConfig, } from './milestone-event-store.js';
 export * from './prisma.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,YAAY,EAAG,cAAuB,CAAC;AAIpD,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,KAAK,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,EAClC,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,KAAK,8BAA8B,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uCAAuC,EACvC,KAAK,uCAAuC,GAC7C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qCAAqC,EACrC,KAAK,qCAAqC,GAC3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,SAAS,EACT,cAAc,EACd,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,EAC5B,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,+BAA+B,CAAC;AA4BvC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,YAAY,EAAG,cAAuB,CAAC;AAIpD,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,KAAK,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,EAClC,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,KAAK,8BAA8B,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uCAAuC,EACvC,KAAK,uCAAuC,GAC7C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qCAAqC,EACrC,KAAK,qCAAqC,GAC3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,SAAS,EACT,cAAc,EACd,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,EAC5B,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AA4BpC,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -37,6 +37,8 @@ export { createPrismaAutoPromotionEvaluator, DEFAULT_PROMOTION_THRESHOLDS, } fro
 export { createPrismaVisualBaselineStore, } from './visual-baseline-store.js';
 export { createPrismaContractBaselineStore, } from './contract-baseline-store.js';
 export { createPrismaTenantFuzzConfigStore, } from './tenant-fuzz-config-store.js';
+export { createPrismaRumSampleStore, RumSampleStoreError, } from './rum-sample-store.js';
+export { createPrismaMilestoneEventStore, } from './milestone-event-store.js';
 // ─── Prisma client re-export ─────────────────────────────────────────────
 //
 // @derwinjs/db ships its OWN generated Prisma client (output: prisma-client/

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,cAAuB,CAAC;AAEpD,4EAA4E;AAE5E,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAmC,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,GAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,GAE/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAkC,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,SAAS,GAEV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uCAAuC,GAExC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qCAAqC,GAEtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,SAAS,EACT,cAAc,GAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,GAE/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,GAE7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAE7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iCAAiC,GAElC,MAAM,+BAA+B,CAAC;AAEvC,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,sEAAsE;AACtE,wEAAwE;AACxE,wEAAwE;AACxE,gDAAgD;AAChD,EAAE;AACF,+DAA+D;AAC/D,0EAA0E;AAC1E,yCAAyC;AACzC,+EAA+E;AAC/E,yCAAyC;AACzC,uEAAuE;AACvE,sEAAsE;AACtE,kEAAkE;AAClE,+BAA+B;AAC/B,EAAE;AACF,oBAAoB;AACpB,8DAA8D;AAC9D,4CAA4C;AAC5C,qEAAqE;AACrE,QAAQ;AACR,gDAAgD;AAEhD,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,cAAuB,CAAC;AAEpD,4EAA4E;AAE5E,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAmC,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,GAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,GAE/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAkC,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,SAAS,GAEV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uCAAuC,GAExC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qCAAqC,GAEtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,SAAS,EACT,cAAc,GAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,GAE/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,GAE7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAE7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iCAAiC,GAElC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AAEpC,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,sEAAsE;AACtE,wEAAwE;AACxE,wEAAwE;AACxE,gDAAgD;AAChD,EAAE;AACF,+DAA+D;AAC/D,0EAA0E;AAC1E,yCAAyC;AACzC,+EAA+E;AAC/E,yCAAyC;AACzC,uEAAuE;AACvE,sEAAsE;AACtE,kEAAkE;AAClE,+BAA+B;AAC/B,EAAE;AACF,oBAAoB;AACpB,8DAA8D;AAC9D,4CAA4C;AAC5C,qEAAqE;AACrE,QAAQ;AACR,gDAAgD;AAEhD,cAAc,aAAa,CAAC"}

package/dist/milestone-event-store.d.ts

@@ -0,0 +1,35 @@
+/**
+ * createPrismaMilestoneEventStore — Prisma-backed implementation of the SDK
+ * MilestoneEventStore contract introduced by QAP-115.
+ *
+ * Sprint 11 Phase 5 (Cross-product tracking timeline). One row per
+ * milestone in the `milestone_events` table, project-scoped via FK. v1
+ * is read-mostly (CRUD); drag-to-reschedule deferred to Sprint 14.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * `update` / `delete` against a row owned by a different projectId
+ * surfaces as `not_found` rather than `tenant_mismatch` (defense-in-depth
+ * against tenant enumeration). The composite (id, projectId) unique-ish
+ * lookup on `update` / `delete` is what enforces this — Prisma's
+ * `update({ where: { id, projectId } })` raises P2025 when nothing
+ * matches, and `deleteMany({ where: { id, projectId } })` returns
+ * `count: 0`.
+ *
+ * Validation runs at the factory boundary BEFORE any Prisma call — empty
+ * `name` / `kind` / `createdBy` / `projectId` throw `invalid_input` so
+ * the error surfaces with a clear caller-bug code rather than as a
+ * Prisma constraint violation.
+ *
+ * The kind column is intentionally a free-form String (not a Prisma
+ * enum). The factory enforces non-empty + trims; consumers may emit
+ * custom kinds (the conflict-detection helpers in @derwinjs/core treat
+ * unknown kinds as "no conflict computed against this kind").
+ */
+import { type PrismaClient } from './prisma.js';
+import { type MilestoneEventStore } from '@derwinjs/sdk';
+export interface PrismaMilestoneEventStoreConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+export declare function createPrismaMilestoneEventStore(config: PrismaMilestoneEventStoreConfig): MilestoneEventStore;
+//# sourceMappingURL=milestone-event-store.d.ts.map

package/dist/milestone-event-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"milestone-event-store.d.ts","sourceRoot":"","sources":["../src/milestone-event-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAKL,KAAK,mBAAmB,EAEzB,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,+BAA+B;IAC9C,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AA6ED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,+BAA+B,GACtC,mBAAmB,CAqJrB"}

package/dist/milestone-event-store.js

@@ -0,0 +1,221 @@
+/**
+ * createPrismaMilestoneEventStore — Prisma-backed implementation of the SDK
+ * MilestoneEventStore contract introduced by QAP-115.
+ *
+ * Sprint 11 Phase 5 (Cross-product tracking timeline). One row per
+ * milestone in the `milestone_events` table, project-scoped via FK. v1
+ * is read-mostly (CRUD); drag-to-reschedule deferred to Sprint 14.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * `update` / `delete` against a row owned by a different projectId
+ * surfaces as `not_found` rather than `tenant_mismatch` (defense-in-depth
+ * against tenant enumeration). The composite (id, projectId) unique-ish
+ * lookup on `update` / `delete` is what enforces this — Prisma's
+ * `update({ where: { id, projectId } })` raises P2025 when nothing
+ * matches, and `deleteMany({ where: { id, projectId } })` returns
+ * `count: 0`.
+ *
+ * Validation runs at the factory boundary BEFORE any Prisma call — empty
+ * `name` / `kind` / `createdBy` / `projectId` throw `invalid_input` so
+ * the error surfaces with a clear caller-bug code rather than as a
+ * Prisma constraint violation.
+ *
+ * The kind column is intentionally a free-form String (not a Prisma
+ * enum). The factory enforces non-empty + trims; consumers may emit
+ * custom kinds (the conflict-detection helpers in @derwinjs/core treat
+ * unknown kinds as "no conflict computed against this kind").
+ */
+import { Prisma } from './prisma.js';
+import { MilestoneEventStoreError, } from '@derwinjs/sdk';
+// ─── Validation ──────────────────────────────────────────────────────────
+function assertNonEmpty(value, fieldName) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new MilestoneEventStoreError('invalid_input', `createPrismaMilestoneEventStore: ${fieldName} is required and non-empty`);
+    }
+}
+function assertDate(value, fieldName) {
+    if (!(value instanceof Date) || Number.isNaN(value.getTime())) {
+        throw new MilestoneEventStoreError('invalid_input', `createPrismaMilestoneEventStore: ${fieldName} must be a valid Date`);
+    }
+}
+function assertCreateInput(input) {
+    assertNonEmpty(input.projectId, 'projectId');
+    assertNonEmpty(input.name, 'name');
+    assertNonEmpty(input.kind, 'kind');
+    assertNonEmpty(input.createdBy, 'createdBy');
+    assertDate(input.startsAt, 'startsAt');
+    if (input.endsAt !== undefined) {
+        assertDate(input.endsAt, 'endsAt');
+        if (input.endsAt.getTime() < input.startsAt.getTime()) {
+            throw new MilestoneEventStoreError('invalid_input', 'createPrismaMilestoneEventStore: endsAt must be greater than or equal to startsAt');
+        }
+    }
+    if (input.description !== undefined && typeof input.description !== 'string') {
+        throw new MilestoneEventStoreError('invalid_input', 'createPrismaMilestoneEventStore: description must be a string when present');
+    }
+}
+function assertUpdatePatch(patch) {
+    if (patch.name !== undefined)
+        assertNonEmpty(patch.name, 'name');
+    if (patch.kind !== undefined)
+        assertNonEmpty(patch.kind, 'kind');
+    if (patch.startsAt !== undefined)
+        assertDate(patch.startsAt, 'startsAt');
+    if (patch.endsAt !== undefined && patch.endsAt !== null)
+        assertDate(patch.endsAt, 'endsAt');
+    if (patch.description !== undefined &&
+        patch.description !== null &&
+        typeof patch.description !== 'string') {
+        throw new MilestoneEventStoreError('invalid_input', 'createPrismaMilestoneEventStore: description must be a string or null when present');
+    }
+    // Cross-field check: if BOTH startsAt and endsAt are in the patch and
+    // both non-null, they must satisfy startsAt <= endsAt.
+    if (patch.startsAt !== undefined &&
+        patch.endsAt !== undefined &&
+        patch.endsAt !== null &&
+        patch.endsAt.getTime() < patch.startsAt.getTime()) {
+        throw new MilestoneEventStoreError('invalid_input', 'createPrismaMilestoneEventStore: endsAt must be greater than or equal to startsAt');
+    }
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaMilestoneEventStore(config) {
+    const { prisma } = config;
+    return {
+        async list(filter) {
+            assertNonEmpty(filter.projectId, 'projectId');
+            const where = { projectId: filter.projectId };
+            const now = Date.now();
+            if (typeof filter.sinceMs === 'number' && Number.isFinite(filter.sinceMs)) {
+                const since = new Date(now - filter.sinceMs);
+                // A range milestone is "in window" if its startsAt OR endsAt
+                // falls in the trailing window. Point-in-time milestones (no
+                // endsAt) match on startsAt only.
+                where.OR = [{ startsAt: { gte: since } }, { endsAt: { gte: since } }];
+            }
+            if (typeof filter.untilMs === 'number' && Number.isFinite(filter.untilMs)) {
+                const until = new Date(now + filter.untilMs);
+                where.startsAt = { ...where.startsAt, lte: until };
+            }
+            if (Array.isArray(filter.kinds) && filter.kinds.length > 0) {
+                where.kind = { in: filter.kinds };
+            }
+            try {
+                const rows = await prisma.milestoneEvent.findMany({
+                    where,
+                    orderBy: { startsAt: 'asc' },
+                });
+                return rows.map(toMilestoneEvent);
+            }
+            catch (err) {
+                throw new MilestoneEventStoreError('storage_failed', `createPrismaMilestoneEventStore: list raised: ${err.message}`, err);
+            }
+        },
+        async create(input) {
+            assertCreateInput(input);
+            try {
+                const row = await prisma.milestoneEvent.create({
+                    data: {
+                        projectId: input.projectId,
+                        name: input.name,
+                        description: input.description ?? null,
+                        startsAt: input.startsAt,
+                        endsAt: input.endsAt ?? null,
+                        kind: input.kind,
+                        createdBy: input.createdBy,
+                    },
+                });
+                return toMilestoneEvent(row);
+            }
+            catch (err) {
+                if (err instanceof Prisma.PrismaClientKnownRequestError && err.code === 'P2003') {
+                    // FK violation on projectId — surface as invalid_input rather
+                    // than storage_failed so the API layer can return 400 (the
+                    // operator passed a nonexistent projectId, not a transient
+                    // storage problem).
+                    throw new MilestoneEventStoreError('invalid_input', `createPrismaMilestoneEventStore: projectId ${input.projectId} does not resolve to a Project row`, err);
+                }
+                throw new MilestoneEventStoreError('storage_failed', `createPrismaMilestoneEventStore: create raised: ${err.message}`, err);
+            }
+        },
+        async update(id, projectId, patch) {
+            assertNonEmpty(id, 'id');
+            assertNonEmpty(projectId, 'projectId');
+            assertUpdatePatch(patch);
+            // Two-step: updateMany returns count so we can distinguish
+            // not-found / wrong-tenant (count === 0) from a successful update
+            // without leaking existence via the standard `update` API's P2025.
+            try {
+                const data = {};
+                if (patch.name !== undefined)
+                    data.name = patch.name;
+                if (patch.description !== undefined)
+                    data.description = patch.description;
+                if (patch.startsAt !== undefined)
+                    data.startsAt = patch.startsAt;
+                if (patch.endsAt !== undefined)
+                    data.endsAt = patch.endsAt;
+                if (patch.kind !== undefined)
+                    data.kind = patch.kind;
+                const result = await prisma.milestoneEvent.updateMany({
+                    where: { id, projectId },
+                    data,
+                });
+                if (result.count === 0) {
+                    throw new MilestoneEventStoreError('not_found', `createPrismaMilestoneEventStore: milestone id=${id} not found in project ${projectId}`);
+                }
+                // Re-read to return the fresh row. updatedAt has been refreshed
+                // by Prisma's @updatedAt directive at this point.
+                const fresh = await prisma.milestoneEvent.findFirst({
+                    where: { id, projectId },
+                });
+                if (fresh === null) {
+                    // Concurrent delete between updateMany + findFirst. Rare; surface
+                    // as not_found.
+                    throw new MilestoneEventStoreError('not_found', `createPrismaMilestoneEventStore: milestone id=${id} disappeared after update in project ${projectId}`);
+                }
+                return toMilestoneEvent(fresh);
+            }
+            catch (err) {
+                if (err instanceof MilestoneEventStoreError)
+                    throw err;
+                throw new MilestoneEventStoreError('storage_failed', `createPrismaMilestoneEventStore: update raised: ${err.message}`, err);
+            }
+        },
+        async delete(id, projectId) {
+            assertNonEmpty(id, 'id');
+            assertNonEmpty(projectId, 'projectId');
+            try {
+                const result = await prisma.milestoneEvent.deleteMany({
+                    where: { id, projectId },
+                });
+                return result.count > 0;
+            }
+            catch (err) {
+                throw new MilestoneEventStoreError('storage_failed', `createPrismaMilestoneEventStore: delete raised: ${err.message}`, err);
+            }
+        },
+    };
+}
+/**
+ * Project a Prisma row to the SDK MilestoneEvent shape. Per memory
+ * rule 22, no defensive `as PrismaMilestoneEventRow` cast at the
+ * argument site — the inferred Prisma return type is exact after
+ * `prisma generate`. The inline interface above just documents the
+ * shape for readers; it's structurally compatible with the generated
+ * MilestoneEventGetPayload.
+ */
+function toMilestoneEvent(row) {
+    return {
+        id: row.id,
+        projectId: row.projectId,
+        name: row.name,
+        description: row.description,
+        startsAt: row.startsAt,
+        endsAt: row.endsAt,
+        kind: row.kind,
+        createdBy: row.createdBy,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+    };
+}
+//# sourceMappingURL=milestone-event-store.js.map

package/dist/milestone-event-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"milestone-event-store.js","sourceRoot":"","sources":["../src/milestone-event-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,wBAAwB,GAMzB,MAAM,eAAe,CAAC;AASvB,4EAA4E;AAE5E,SAAS,cAAc,CAAC,KAAc,EAAE,SAAiB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,oCAAoC,SAAS,4BAA4B,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,SAAiB;IACnD,IAAI,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,oCAAoC,SAAS,uBAAuB,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgC;IACzD,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7C,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7C,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,mFAAmF,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC7E,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,4EAA4E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgC;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5F,IACE,KAAK,CAAC,WAAW,KAAK,SAAS;QAC/B,KAAK,CAAC,WAAW,KAAK,IAAI;QAC1B,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EACrC,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,sEAAsE;IACtE,uDAAuD;IACvD,IACE,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC5B,KAAK,CAAC,MAAM,KAAK,SAAS;QAC1B,KAAK,CAAC,MAAM,KAAK,IAAI;QACrB,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EACjD,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,mFAAmF,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,+BAA+B,CAC7C,MAAuC;IAEvC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,MAAgC;YACzC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAE9C,MAAM,KAAK,GAAoC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1E,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7C,6DAA6D;gBAC7D,6DAA6D;gBAC7D,kCAAkC;gBAClC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1E,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7C,KAAK,CAAC,QAAQ,GAAG,EAAE,GAAI,KAAK,CAAC,QAA8C,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;YAC5F,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3D,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACpC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChD,KAAK;oBACL,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;iBAC7B,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,iDAAkD,GAAa,CAAC,OAAO,EAAE,EACzE,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAgC;YAC3C,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAEzB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;oBAC7C,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;wBACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;wBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B;iBACF,CAAC,CAAC;gBACH,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,MAAM,CAAC,6BAA6B,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAChF,8DAA8D;oBAC9D,2DAA2D;oBAC3D,2DAA2D;oBAC3D,oBAAoB;oBACpB,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,8CAA8C,KAAK,CAAC,SAAS,oCAAoC,EACjG,GAAG,CACJ,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,mDAAoD,GAAa,CAAC,OAAO,EAAE,EAC3E,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,SAAiB,EACjB,KAAgC;YAEhC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACvC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAEzB,2DAA2D;YAC3D,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAqC,EAAE,CAAC;gBAClD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBACrD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;oBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;gBAC1E,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACjE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBAErD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;oBACpD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;oBACxB,IAAI;iBACL,CAAC,CAAC;gBAEH,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;oBACvB,MAAM,IAAI,wBAAwB,CAChC,WAAW,EACX,iDAAiD,EAAE,yBAAyB,SAAS,EAAE,CACxF,CAAC;gBACJ,CAAC;gBAED,gEAAgE;gBAChE,kDAAkD;gBAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC;oBAClD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;iBACzB,CAAC,CAAC;gBACH,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,kEAAkE;oBAClE,gBAAgB;oBAChB,MAAM,IAAI,wBAAwB,CAChC,WAAW,EACX,iDAAiD,EAAE,wCAAwC,SAAS,EAAE,CACvG,CAAC;gBACJ,CAAC;gBACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,wBAAwB;oBAAE,MAAM,GAAG,CAAC;gBACvD,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,mDAAoD,GAAa,CAAC,OAAO,EAAE,EAC3E,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,SAAiB;YACxC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAEvC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;oBACpD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;iBACzB,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,mDAAoD,GAAa,CAAC,OAAO,EAAE,EAC3E,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAiBD;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC"}

package/dist/rum-sample-store.d.ts

@@ -0,0 +1,48 @@
+/**
+ * createPrismaRumSampleStore — Prisma-backed implementation of the SDK
+ * RumSampleStore contract introduced by QAP-113.
+ *
+ * Sprint 11 Phase 3 (Test Surfaces — RUM ingestion). Samples are stored as
+ * one row per insert against the `RumSample` model. There is no uniqueness
+ * constraint on (projectId, metric) — a single page-load may emit multiple
+ * samples per metric, and operators need the full distribution to derive
+ * percentiles.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null from `getBaseline` rather
+ * than throwing or leaking existence (defense-in-depth against tenant
+ * enumeration). The "no samples in window" return is also null, so
+ * cross-tenant probes look identical to "no data this window".
+ *
+ * Percentile math: derived in-memory via array-index math after the
+ * `findMany` returns a value-sorted result set. No third-party stats
+ * library — RumSample row sets per (projectId, metric, window) cap at the
+ * tens-of-thousands order of magnitude, which fits comfortably in process
+ * memory for the percentile read.
+ */
+import type { PrismaClient } from './prisma.js';
+import type { RumSampleStore } from '@derwinjs/sdk';
+export interface PrismaRumSampleStoreConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+/**
+ * Errors thrown by the Prisma-backed RumSampleStore. The store-level
+ * errors are kept inside @derwinjs/db (NOT promoted to @derwinjs/sdk)
+ * because they reflect storage-layer specifics; the route layer maps
+ * them to the operator-facing WebVitalsIngestorError before crossing
+ * the SDK boundary.
+ *
+ * The discriminating `code` field lets callers route handling:
+ *   - `invalid_input` — caller bug rejected at the factory boundary; do
+ *                       not retry.
+ *   - `io_failed`     — underlying Prisma call raised; transient — retry
+ *                       or escalate.
+ */
+export declare class RumSampleStoreError extends Error {
+    readonly code: 'invalid_input' | 'io_failed';
+    readonly cause?: unknown | undefined;
+    constructor(code: 'invalid_input' | 'io_failed', message: string, cause?: unknown | undefined);
+}
+export declare function createPrismaRumSampleStore(config: PrismaRumSampleStoreConfig): RumSampleStore;
+//# sourceMappingURL=rum-sample-store.d.ts.map

package/dist/rum-sample-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rum-sample-store.d.ts","sourceRoot":"","sources":["../src/rum-sample-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAe,cAAc,EAAE,MAAM,eAAe,CAAC;AAIjE,MAAM,WAAW,0BAA0B;IACzC,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AAID;;;;;;;;;;;;GAYG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,IAAI,EAAE,eAAe,GAAG,WAAW;aAE1B,KAAK,CAAC,EAAE,OAAO;gBAFxB,IAAI,EAAE,eAAe,GAAG,WAAW,EACnD,OAAO,EAAE,MAAM,EACU,KAAK,CAAC,EAAE,OAAO,YAAA;CAM3C;AAmED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,GAAG,cAAc,CAwF7F"}

package/dist/rum-sample-store.js

@@ -0,0 +1,155 @@
+/**
+ * createPrismaRumSampleStore — Prisma-backed implementation of the SDK
+ * RumSampleStore contract introduced by QAP-113.
+ *
+ * Sprint 11 Phase 3 (Test Surfaces — RUM ingestion). Samples are stored as
+ * one row per insert against the `RumSample` model. There is no uniqueness
+ * constraint on (projectId, metric) — a single page-load may emit multiple
+ * samples per metric, and operators need the full distribution to derive
+ * percentiles.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null from `getBaseline` rather
+ * than throwing or leaking existence (defense-in-depth against tenant
+ * enumeration). The "no samples in window" return is also null, so
+ * cross-tenant probes look identical to "no data this window".
+ *
+ * Percentile math: derived in-memory via array-index math after the
+ * `findMany` returns a value-sorted result set. No third-party stats
+ * library — RumSample row sets per (projectId, metric, window) cap at the
+ * tens-of-thousands order of magnitude, which fits comfortably in process
+ * memory for the percentile read.
+ */
+// ─── Error class ─────────────────────────────────────────────────────────
+/**
+ * Errors thrown by the Prisma-backed RumSampleStore. The store-level
+ * errors are kept inside @derwinjs/db (NOT promoted to @derwinjs/sdk)
+ * because they reflect storage-layer specifics; the route layer maps
+ * them to the operator-facing WebVitalsIngestorError before crossing
+ * the SDK boundary.
+ *
+ * The discriminating `code` field lets callers route handling:
+ *   - `invalid_input` — caller bug rejected at the factory boundary; do
+ *                       not retry.
+ *   - `io_failed`     — underlying Prisma call raised; transient — retry
+ *                       or escalate.
+ */
+export class RumSampleStoreError extends Error {
+    code;
+    cause;
+    constructor(code, message, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = 'RumSampleStoreError';
+        Object.setPrototypeOf(this, RumSampleStoreError.prototype);
+    }
+}
+// ─── Validation ──────────────────────────────────────────────────────────
+function assertNonEmpty(value, fieldName) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new RumSampleStoreError('invalid_input', `createPrismaRumSampleStore: ${fieldName} is required and non-empty`);
+    }
+}
+function assertFiniteNumber(value, fieldName) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        throw new RumSampleStoreError('invalid_input', `createPrismaRumSampleStore: ${fieldName} must be a finite number`);
+    }
+}
+function assertNonNegativeMs(value, fieldName) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
+        throw new RumSampleStoreError('invalid_input', `createPrismaRumSampleStore: ${fieldName} must be a non-negative finite number`);
+    }
+}
+// ─── Percentile helper ──────────────────────────────────────────────────
+/**
+ * Nearest-rank percentile over a value-sorted ascending array. Mirrors the
+ * convention web-vitals.js + most RUM analytics tools use:
+ *
+ *   index = ceil((p / 100) * N) - 1, clamped to [0, N-1].
+ *
+ * For a single-element array all percentiles return that element. For
+ * pre-sorted ascending arrays this is the cheapest correct percentile; the
+ * caller is responsible for sorting before passing the array in.
+ */
+function percentile(sortedAsc, p) {
+    const n = sortedAsc.length;
+    if (n === 0) {
+        throw new RumSampleStoreError('invalid_input', 'createPrismaRumSampleStore: percentile() called on empty array (caller bug)');
+    }
+    const idx = Math.max(0, Math.min(n - 1, Math.ceil((p / 100) * n) - 1));
+    // idx is in [0, n-1] and n >= 1, so the slot is always set. Runtime-guard
+    // form (memory rule 13) instead of `!` or `as number` — both are banned by
+    // @typescript-eslint/no-non-null-assertion + non-nullable-type-assertion-style.
+    const value = sortedAsc[idx];
+    if (value === undefined) {
+        throw new RumSampleStoreError('invalid_input', `createPrismaRumSampleStore: percentile() unreachable branch — idx=${String(idx)} of ${String(n)}`);
+    }
+    return value;
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaRumSampleStore(config) {
+    const { prisma } = config;
+    return {
+        async insert(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            assertNonEmpty(input.metric, 'metric');
+            assertFiniteNumber(input.value, 'value');
+            assertNonEmpty(input.rating, 'rating');
+            assertNonEmpty(input.url, 'url');
+            try {
+                const row = await prisma.rumSample.create({
+                    data: {
+                        projectId: input.projectId,
+                        metric: input.metric,
+                        value: input.value,
+                        rating: input.rating,
+                        url: input.url,
+                        deviceType: input.deviceType ?? null,
+                        sessionId: input.sessionId ?? null,
+                    },
+                    select: { id: true },
+                });
+                return { id: row.id };
+            }
+            catch (err) {
+                throw new RumSampleStoreError('io_failed', `createPrismaRumSampleStore: insert raised: ${err.message}`, err);
+            }
+        },
+        async getBaseline(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            assertNonEmpty(input.metric, 'metric');
+            assertNonNegativeMs(input.sinceMs, 'sinceMs');
+            const windowEnd = new Date();
+            const windowStart = new Date(windowEnd.getTime() - input.sinceMs);
+            let rows;
+            try {
+                rows = await prisma.rumSample.findMany({
+                    where: {
+                        projectId: input.projectId,
+                        metric: input.metric,
+                        capturedAt: { gte: windowStart },
+                    },
+                    orderBy: { value: 'asc' },
+                    select: { value: true },
+                });
+            }
+            catch (err) {
+                throw new RumSampleStoreError('io_failed', `createPrismaRumSampleStore: getBaseline raised: ${err.message}`, err);
+            }
+            if (rows.length === 0)
+                return null;
+            const values = rows.map((r) => r.value);
+            return {
+                metric: input.metric,
+                p50: percentile(values, 50),
+                p75: percentile(values, 75),
+                p95: percentile(values, 95),
+                sampleCount: values.length,
+                windowStart,
+                windowEnd,
+            };
+        },
+    };
+}
+//# sourceMappingURL=rum-sample-store.js.map

package/dist/rum-sample-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rum-sample-store.js","sourceRoot":"","sources":["../src/rum-sample-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAYH,4EAA4E;AAE5E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAE1B;IAES;IAH3B,YACkB,IAAmC,EACnD,OAAe,EACU,KAAe;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAA+B;QAE1B,UAAK,GAAL,KAAK,CAAU;QAGxC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,4EAA4E;AAE5E,SAAS,cAAc,CAAC,KAAc,EAAE,SAAiB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,+BAA+B,SAAS,4BAA4B,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,SAAiB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,+BAA+B,SAAS,0BAA0B,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,SAAiB;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,+BAA+B,SAAS,uCAAuC,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,2EAA2E;AAE3E;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,SAAmB,EAAE,CAAS;IAChD,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,gFAAgF;IAChF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,qEAAqE,MAAM,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,0BAA0B,CAAC,MAAkC;IAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAQZ;YACC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACzC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEjC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;oBACxC,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;wBACpC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;qBACnC;oBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;iBACrB,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,8CAA+C,GAAa,CAAC,OAAO,EAAE,EACtE,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAIjB;YACC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAE9C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAElE,IAAI,IAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;oBACrC,KAAK,EAAE;wBACL,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,UAAU,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;qBACjC;oBACD,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;oBACzB,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mDAAoD,GAAa,CAAC,OAAO,EAAE,EAC3E,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,WAAW;gBACX,SAAS;aACV,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@derwinjs/db",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Prisma schema + migrations for Derwin's own Postgres. 14 models, project-namespaced. Per ADR-0005. Ships its own generated Prisma client (multi-platform binaries) for cross-consumer compatibility.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -33,8 +33,8 @@
   },
   "dependencies": {
     "@prisma/client": "^5.22.0",
-    "@derwinjs/sdk": "0.10.0",
-    "@derwinjs/core": "0.10.0"
+    "@derwinjs/core": "0.11.0",
+    "@derwinjs/sdk": "0.11.0"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "^2.1.9",

package/prisma/migrations/20260508000100_sprint11_phase3_rum_samples/migration.sql

@@ -0,0 +1,31 @@
+-- Sprint 11 Phase 3 (QAP-113) — RUM / Web Vitals samples.
+--
+-- Stores consumer-pushed Real User Monitoring (RUM) samples emitted by the
+-- consumer app's web-vitals hooks. One row per (projectId, metric, capturedAt)
+-- — there is no uniqueness constraint because the same metric + URL may fire
+-- many times per session. Baseline statistics (p50/p75/p95) are derived on
+-- demand from this row set rather than maintained as a rolling aggregate.
+--
+-- Idempotent (IF NOT EXISTS) — safe to re-run on environments where the
+-- table or index already exists.
+
+CREATE TABLE IF NOT EXISTS "derwin"."rum_samples" (
+    "id" TEXT NOT NULL,
+    "projectId" TEXT NOT NULL,
+    "metric" TEXT NOT NULL,
+    "value" DOUBLE PRECISION NOT NULL,
+    "rating" TEXT NOT NULL,
+    "url" TEXT NOT NULL,
+    "deviceType" TEXT,
+    "sessionId" TEXT,
+    "capturedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "rum_samples_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX IF NOT EXISTS "rum_samples_projectId_metric_capturedAt_idx"
+    ON "derwin"."rum_samples"("projectId", "metric", "capturedAt" DESC);
+
+ALTER TABLE "derwin"."rum_samples"
+    ADD CONSTRAINT "rum_samples_projectId_fkey"
+    FOREIGN KEY ("projectId") REFERENCES "derwin"."projects"("id")
+    ON DELETE CASCADE ON UPDATE CASCADE;

package/prisma/migrations/20260508000200_sprint11_phase5_milestone_events/migration.sql

@@ -0,0 +1,42 @@
+-- Sprint 11 Phase 5 (QAP-115) — MilestoneEvent foundation.
+--
+-- Cross-product tracking timeline data source. Backs the Tracking Timeline
+-- Gantt UI (Phase 6) plus future cross-product coherence features (e.g.,
+-- conflict alerts when a release lands inside another project's freeze
+-- window). The spec's `tenantId?` field is intentionally omitted in v1 —
+-- per the Derwin multi-tenant boundary rule (each consumer = ONE Project
+-- row), milestones are project-scoped only; if a downstream consumer ever
+-- needs intra-project tenant slicing it can be added as an optional column
+-- in a future migration without breaking the existing queries.
+--
+-- `kind` is held as a String column rather than a Prisma enum so consumers
+-- can emit custom kinds (alongside the canonical
+-- release / freeze / demo / launch) without requiring a migration. The
+-- conflict-detection helpers in `@derwinjs/core` validate the value at
+-- runtime where it matters.
+--
+-- Two indexes:
+--   - (projectId, startsAt ASC) supports the per-project chronological
+--     listing the Phase 6 Gantt issues on every read.
+--   - (projectId, kind) supports the swimlane-by-kind grouping the Gantt
+--     uses to lay out releases / freezes / demos / launches.
+
+CREATE TABLE "derwin"."milestone_events" (
+    "id" TEXT NOT NULL,
+    "projectId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "description" TEXT,
+    "startsAt" TIMESTAMP(3) NOT NULL,
+    "endsAt" TIMESTAMP(3),
+    "kind" TEXT NOT NULL,
+    "createdBy" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+    CONSTRAINT "milestone_events_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX "milestone_events_projectId_startsAt_idx" ON "derwin"."milestone_events"("projectId", "startsAt" ASC);
+
+CREATE INDEX "milestone_events_projectId_kind_idx" ON "derwin"."milestone_events"("projectId", "kind");
+
+ALTER TABLE "derwin"."milestone_events" ADD CONSTRAINT "milestone_events_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "derwin"."projects"("id") ON DELETE CASCADE ON UPDATE CASCADE;