@derwinjs/db 0.8.0 → 0.10.0

package/dist/auto-promotion-evaluator.d.ts

@@ -0,0 +1,63 @@
+/**
+ * createPrismaAutoPromotionEvaluator — Prisma-backed implementation of the
+ * SDK AutoPromotionEvaluator contract introduced by QAP-095.
+ *
+ * Sprint 9 Phase 3 (Policy + UI). Pure-read evaluator. Reads project
+ * mode-change boundary + recent telemetry and reports a 5-gate eligibility
+ * snapshot (see product brief §11.2 promotion criteria). NEVER mutates
+ * state — promotion itself is a separate ProjectModeStore.setMode() call
+ * the UI / cron makes once an operator confirms.
+ *
+ * # Window semantics
+ *
+ *   t0 = now (config-injectable for tests)
+ *   lookbackStart = t0 - PROMOTION_LOOKBACK_DAYS * 1d
+ *
+ *   attempts/regression queries scope to attemptedAt >= lookbackStart.
+ *   escalations queries scope to QATicket.updatedAt >= lookbackStart
+ *   AND finalBucket = ESCALATION (the bucket assignment lands on
+ *   updatedAt — see QATicket schema header).
+ *
+ * # Trust aggregation
+ *
+ * trustPercent is a SAMPLE-SIZE-WEIGHTED average. Each ClassificationTrust
+ * row contributes `trustPercent * attemptsLast30d` to the numerator and
+ * `attemptsLast30d` to the denominator. A row with `attemptsLast30d=0`
+ * contributes nothing — a brand-new tuple with no observations doesn't
+ * dilute the average. If NO rows have any observations, the gate's
+ * current value is 0 (which fails the >= 70 threshold by design).
+ *
+ * # Tenant isolation
+ *
+ * Every query scopes by projectId. The Project row read at the top
+ * (modeChangedAt) doubles as the existence check — `project_not_found`
+ * is thrown before any per-window aggregation runs, so we never spend
+ * round trips for a missing project.
+ */
+import type { PrismaClient } from './prisma.js';
+import { type AutoPromotionEvaluator } from '@derwinjs/sdk';
+export interface PrismaAutoPromotionEvaluatorConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+    /**
+     * Optional clock injection for deterministic window-boundary tests.
+     * Tests pass a fixed Date; production callers omit (defaults to
+     * `new Date()`).
+     */
+    now?: () => Date;
+}
+/**
+ * Public default thresholds — exported so the policy editor UI can render
+ * "needs >= 30 days" copy without round-tripping through the evaluator.
+ * Mirrors the constants above; if a caller-tunable variant ever lands,
+ * the constants stay as the wired defaults.
+ */
+export declare const DEFAULT_PROMOTION_THRESHOLDS: {
+    readonly daysOperating: 30;
+    readonly attempts: 50;
+    readonly trustPercent: 70;
+    readonly regressionPercent: 5;
+    readonly escalations: 0;
+};
+export declare function createPrismaAutoPromotionEvaluator(config: PrismaAutoPromotionEvaluatorConfig): AutoPromotionEvaluator;
+//# sourceMappingURL=auto-promotion-evaluator.d.ts.map

package/dist/auto-promotion-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-promotion-evaluator.d.ts","sourceRoot":"","sources":["../src/auto-promotion-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAEL,KAAK,sBAAsB,EAG5B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,kCAAkC;IACjD,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;IACrB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAYD;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;CAM/B,CAAC;AA6BX,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,kCAAkC,GACzC,sBAAsB,CAuIxB"}

package/dist/auto-promotion-evaluator.js

@@ -0,0 +1,195 @@
+/**
+ * createPrismaAutoPromotionEvaluator — Prisma-backed implementation of the
+ * SDK AutoPromotionEvaluator contract introduced by QAP-095.
+ *
+ * Sprint 9 Phase 3 (Policy + UI). Pure-read evaluator. Reads project
+ * mode-change boundary + recent telemetry and reports a 5-gate eligibility
+ * snapshot (see product brief §11.2 promotion criteria). NEVER mutates
+ * state — promotion itself is a separate ProjectModeStore.setMode() call
+ * the UI / cron makes once an operator confirms.
+ *
+ * # Window semantics
+ *
+ *   t0 = now (config-injectable for tests)
+ *   lookbackStart = t0 - PROMOTION_LOOKBACK_DAYS * 1d
+ *
+ *   attempts/regression queries scope to attemptedAt >= lookbackStart.
+ *   escalations queries scope to QATicket.updatedAt >= lookbackStart
+ *   AND finalBucket = ESCALATION (the bucket assignment lands on
+ *   updatedAt — see QATicket schema header).
+ *
+ * # Trust aggregation
+ *
+ * trustPercent is a SAMPLE-SIZE-WEIGHTED average. Each ClassificationTrust
+ * row contributes `trustPercent * attemptsLast30d` to the numerator and
+ * `attemptsLast30d` to the denominator. A row with `attemptsLast30d=0`
+ * contributes nothing — a brand-new tuple with no observations doesn't
+ * dilute the average. If NO rows have any observations, the gate's
+ * current value is 0 (which fails the >= 70 threshold by design).
+ *
+ * # Tenant isolation
+ *
+ * Every query scopes by projectId. The Project row read at the top
+ * (modeChangedAt) doubles as the existence check — `project_not_found`
+ * is thrown before any per-window aggregation runs, so we never spend
+ * round trips for a missing project.
+ */
+import { AutoPromotionEvaluatorError, } from '@derwinjs/sdk';
+// ─── Constants ───────────────────────────────────────────────────────────
+const PROMOTION_DAYS_OPERATING_MIN = 30;
+const PROMOTION_ATTEMPTS_MIN = 50;
+const PROMOTION_TRUST_MIN = 70;
+const PROMOTION_REGRESSION_MAX = 5;
+const PROMOTION_ESCALATIONS_MAX = 0;
+const PROMOTION_LOOKBACK_DAYS = 30;
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+/**
+ * Public default thresholds — exported so the policy editor UI can render
+ * "needs >= 30 days" copy without round-tripping through the evaluator.
+ * Mirrors the constants above; if a caller-tunable variant ever lands,
+ * the constants stay as the wired defaults.
+ */
+export const DEFAULT_PROMOTION_THRESHOLDS = {
+    daysOperating: PROMOTION_DAYS_OPERATING_MIN,
+    attempts: PROMOTION_ATTEMPTS_MIN,
+    trustPercent: PROMOTION_TRUST_MIN,
+    regressionPercent: PROMOTION_REGRESSION_MAX,
+    escalations: PROMOTION_ESCALATIONS_MAX,
+};
+// ─── Helpers ─────────────────────────────────────────────────────────────
+const MERGED_DISPATCH_STATUSES = ['AUTO_MERGED', 'HUMAN_MERGED'];
+/**
+ * Sample-size-weighted average of trustPercent across rows.
+ * Returns `Math.round(sum(trustPercent * total) / sum(total))`.
+ * Returns 0 when there are no rows OR no observations across rows.
+ */
+function weightedTrustAverage(rows) {
+    let weightedSum = 0;
+    let totalSum = 0;
+    for (const row of rows) {
+        weightedSum += row.trustPercent * row.attemptsLast30d;
+        totalSum += row.attemptsLast30d;
+    }
+    if (totalSum === 0)
+        return 0;
+    return Math.round(weightedSum / totalSum);
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaAutoPromotionEvaluator(config) {
+    const { prisma } = config;
+    const now = config.now ?? (() => new Date());
+    return {
+        async evaluate(input) {
+            if (typeof input.projectId !== 'string' || input.projectId.length === 0) {
+                throw new AutoPromotionEvaluatorError('invalid_input', 'AutoPromotionEvaluator: projectId is required');
+            }
+            const at = now();
+            const lookbackStart = new Date(at.getTime() - PROMOTION_LOOKBACK_DAYS * MS_PER_DAY);
+            // Project existence check + modeChangedAt for daysOperating gate.
+            // This double-duty read also gives us tenant isolation — a missing /
+            // wrong-project id throws before we run any per-window aggregation.
+            const project = await prisma.project.findUnique({
+                where: { id: input.projectId },
+                select: { id: true, modeChangedAt: true },
+            });
+            if (project === null) {
+                throw new AutoPromotionEvaluatorError('project_not_found', `AutoPromotionEvaluator: project ${input.projectId} not found`);
+            }
+            // Gate 1 — daysOperating (floor((now - modeChangedAt) / 1d))
+            const daysOperating = Math.floor((at.getTime() - project.modeChangedAt.getTime()) / MS_PER_DAY);
+            // Gate 2 — attempts in last 30d (AUTO_MERGED ∪ HUMAN_MERGED)
+            const attempts = await prisma.qAFixAttempt.count({
+                where: {
+                    projectId: input.projectId,
+                    dispatchStatus: { in: [...MERGED_DISPATCH_STATUSES] },
+                    attemptedAt: { gte: lookbackStart },
+                },
+            });
+            // Gate 3 — trustPercent (sample-size-weighted average across all
+            // (classification, surface) tuples for this project).
+            const trustRows = await prisma.classificationTrust.findMany({
+                where: { projectId: input.projectId },
+                select: { trustPercent: true, attemptsLast30d: true },
+            });
+            const trustPercent = weightedTrustAverage(trustRows);
+            // Gate 4 — regressionPercent (regressed / total in last 30d, * 100).
+            // totalRecent counts ALL dispatchStatus values within the window so
+            // the denominator captures every post-author attempt, not just merged
+            // ones. This matches the operator-facing definition of "recent fix
+            // activity" used elsewhere in the policy editor.
+            const totalRecent = await prisma.qAFixAttempt.count({
+                where: {
+                    projectId: input.projectId,
+                    attemptedAt: { gte: lookbackStart },
+                },
+            });
+            const regressed = await prisma.qAFixAttempt.count({
+                where: {
+                    projectId: input.projectId,
+                    regressionDetected: true,
+                    attemptedAt: { gte: lookbackStart },
+                },
+            });
+            const regressionPercent = totalRecent === 0 ? 0 : Math.round((regressed / totalRecent) * 100);
+            // Gate 5 — escalations (QATicket.finalBucket=ESCALATION in last 30d).
+            const escalations = await prisma.qATicket.count({
+                where: {
+                    projectId: input.projectId,
+                    finalBucket: 'ESCALATION',
+                    updatedAt: { gte: lookbackStart },
+                },
+            });
+            // Build the 5 gate results in a stable order. UI renders them as a
+            // table in this order; reordering would break operator muscle memory.
+            const gates = [
+                {
+                    name: 'daysOperating',
+                    pass: daysOperating >= PROMOTION_DAYS_OPERATING_MIN,
+                    current: daysOperating,
+                    threshold: PROMOTION_DAYS_OPERATING_MIN,
+                    comparator: 'gte',
+                    label: 'Days operating in current mode',
+                },
+                {
+                    name: 'attempts',
+                    pass: attempts >= PROMOTION_ATTEMPTS_MIN,
+                    current: attempts,
+                    threshold: PROMOTION_ATTEMPTS_MIN,
+                    comparator: 'gte',
+                    label: 'Merged attempts (last 30 days)',
+                },
+                {
+                    name: 'trustPercent',
+                    pass: trustPercent >= PROMOTION_TRUST_MIN,
+                    current: trustPercent,
+                    threshold: PROMOTION_TRUST_MIN,
+                    comparator: 'gte',
+                    label: 'Weighted trust percent',
+                },
+                {
+                    name: 'regressionPercent',
+                    pass: regressionPercent <= PROMOTION_REGRESSION_MAX,
+                    current: regressionPercent,
+                    threshold: PROMOTION_REGRESSION_MAX,
+                    comparator: 'lte',
+                    label: 'Regression rate (last 30 days)',
+                },
+                {
+                    name: 'escalations',
+                    pass: escalations === PROMOTION_ESCALATIONS_MAX,
+                    current: escalations,
+                    threshold: PROMOTION_ESCALATIONS_MAX,
+                    comparator: 'eq',
+                    label: 'Escalations (last 30 days)',
+                },
+            ];
+            const eligible = gates.every((gate) => gate.pass);
+            return {
+                eligible,
+                gates,
+                computedAt: at,
+            };
+        },
+    };
+}
+//# sourceMappingURL=auto-promotion-evaluator.js.map

package/dist/auto-promotion-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-promotion-evaluator.js","sourceRoot":"","sources":["../src/auto-promotion-evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,EACL,2BAA2B,GAI5B,MAAM,eAAe,CAAC;AAevB,4EAA4E;AAE5E,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,aAAa,EAAE,4BAA4B;IAC3C,QAAQ,EAAE,sBAAsB;IAChC,YAAY,EAAE,mBAAmB;IACjC,iBAAiB,EAAE,wBAAwB;IAC3C,WAAW,EAAE,yBAAyB;CAC9B,CAAC;AAEX,4EAA4E;AAE5E,MAAM,wBAAwB,GAAG,CAAC,aAAa,EAAE,cAAc,CAAU,CAAC;AAO1E;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAgB;IAC5C,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,WAAW,IAAI,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,eAAe,CAAC;QACtD,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC;IAClC,CAAC;IACD,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,kCAAkC,CAChD,MAA0C;IAE1C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAEnD,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,KAA4B;YACzC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,2BAA2B,CACnC,eAAe,EACf,+CAA+C,CAChD,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,uBAAuB,GAAG,UAAU,CAAC,CAAC;YAEpF,kEAAkE;YAClE,qEAAqE;YACrE,oEAAoE;YACpE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE;gBAC9B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;aAC1C,CAAC,CAAC;YACH,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,2BAA2B,CACnC,mBAAmB,EACnB,mCAAmC,KAAK,CAAC,SAAS,YAAY,CAC/D,CAAC;YACJ,CAAC;YAED,6DAA6D;YAC7D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAC9B,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAC9D,CAAC;YAEF,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;gBAC/C,KAAK,EAAE;oBACL,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,wBAAwB,CAAC,EAAE;oBACrD,WAAW,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;iBACpC;aACF,CAAC,CAAC;YAEH,iEAAiE;YACjE,sDAAsD;YACtD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC;gBAC1D,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBACrC,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;aACtD,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAErD,qEAAqE;YACrE,oEAAoE;YACpE,sEAAsE;YACtE,mEAAmE;YACnE,iDAAiD;YACjD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;gBAClD,KAAK,EAAE;oBACL,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,WAAW,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;iBACpC;aACF,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;gBAChD,KAAK,EAAE;oBACL,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,kBAAkB,EAAE,IAAI;oBACxB,WAAW,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;iBACpC;aACF,CAAC,CAAC;YACH,MAAM,iBAAiB,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC;YAE9F,sEAAsE;YACtE,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC9C,KAAK,EAAE;oBACL,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,WAAW,EAAE,YAAY;oBACzB,SAAS,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE;iBAClC;aACF,CAAC,CAAC;YAEH,mEAAmE;YACnE,sEAAsE;YACtE,MAAM,KAAK,GAA0B;gBACnC;oBACE,IAAI,EAAE,eAAe;oBACrB,IAAI,EAAE,aAAa,IAAI,4BAA4B;oBACnD,OAAO,EAAE,aAAa;oBACtB,SAAS,EAAE,4BAA4B;oBACvC,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE,gCAAgC;iBACxC;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,IAAI,EAAE,QAAQ,IAAI,sBAAsB;oBACxC,OAAO,EAAE,QAAQ;oBACjB,SAAS,EAAE,sBAAsB;oBACjC,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE,gCAAgC;iBACxC;gBACD;oBACE,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,YAAY,IAAI,mBAAmB;oBACzC,OAAO,EAAE,YAAY;oBACrB,SAAS,EAAE,mBAAmB;oBAC9B,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE,wBAAwB;iBAChC;gBACD;oBACE,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,iBAAiB,IAAI,wBAAwB;oBACnD,OAAO,EAAE,iBAAiB;oBAC1B,SAAS,EAAE,wBAAwB;oBACnC,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE,gCAAgC;iBACxC;gBACD;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,WAAW,KAAK,yBAAyB;oBAC/C,OAAO,EAAE,WAAW;oBACpB,SAAS,EAAE,yBAAyB;oBACpC,UAAU,EAAE,IAAI;oBAChB,KAAK,EAAE,4BAA4B;iBACpC;aACF,CAAC;YAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAElD,OAAO;gBACL,QAAQ;gBACR,KAAK;gBACL,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/contract-baseline-store.d.ts

@@ -0,0 +1,21 @@
+/**
+ * createPrismaContractBaselineStore — Prisma-backed implementation of the SDK
+ * ContractBaselineStore contract introduced by QAP-103.
+ *
+ * Sprint 10 Phase 3 (Test Surfaces — API contract diff). Baselines are
+ * stored as Postgres TEXT (model ContractBaseline) keyed by
+ * (projectId, specKey). One row per (projectId, specKey) — setBaseline
+ * upserts and is the only path to replace an approved baseline.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null rather than throwing or
+ * leaking existence (defense-in-depth against tenant enumeration).
+ */
+import type { PrismaClient } from './prisma.js';
+import { type ContractBaselineStore } from '@derwinjs/sdk';
+export interface PrismaContractBaselineStoreConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+export declare function createPrismaContractBaselineStore(config: PrismaContractBaselineStoreConfig): ContractBaselineStore;
+//# sourceMappingURL=contract-baseline-store.d.ts.map

package/dist/contract-baseline-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-baseline-store.d.ts","sourceRoot":"","sources":["../src/contract-baseline-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,iCAAiC;IAChD,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AAqDD,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,iCAAiC,GACxC,qBAAqB,CA0EvB"}

package/dist/contract-baseline-store.js

@@ -0,0 +1,103 @@
+/**
+ * createPrismaContractBaselineStore — Prisma-backed implementation of the SDK
+ * ContractBaselineStore contract introduced by QAP-103.
+ *
+ * Sprint 10 Phase 3 (Test Surfaces — API contract diff). Baselines are
+ * stored as Postgres TEXT (model ContractBaseline) keyed by
+ * (projectId, specKey). One row per (projectId, specKey) — setBaseline
+ * upserts and is the only path to replace an approved baseline.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null rather than throwing or
+ * leaking existence (defense-in-depth against tenant enumeration).
+ */
+import { ContractBaselineStoreError, } from '@derwinjs/sdk';
+// ─── Validation ──────────────────────────────────────────────────────────
+function assertNonEmpty(value, fieldName) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new ContractBaselineStoreError('invalid_input', `createPrismaContractBaselineStore: ${fieldName} is required and non-empty`);
+    }
+}
+function assertValidFormat(value) {
+    if (value !== 'openapi' && value !== 'json-schema') {
+        throw new ContractBaselineStoreError('invalid_format', `createPrismaContractBaselineStore: format must be 'openapi' or 'json-schema'`);
+    }
+}
+/**
+ * Map a Prisma row to the SDK ContractBaseline shape. Coerces the stored
+ * `format` string back to the SDK union — defense in depth in case a
+ * malformed value somehow landed (the factory's setBaseline path validates
+ * before write, but external writes or bad migrations could bypass it).
+ */
+function toContractBaseline(row) {
+    const format = row.format === 'json-schema' ? 'json-schema' : 'openapi';
+    return {
+        id: row.id,
+        projectId: row.projectId,
+        specKey: row.specKey,
+        spec: row.spec,
+        format,
+        capturedAt: row.capturedAt,
+        capturedBy: row.capturedBy,
+    };
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaContractBaselineStore(config) {
+    const { prisma } = config;
+    return {
+        async getBaseline(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            assertNonEmpty(input.specKey, 'specKey');
+            const row = await prisma.contractBaseline.findUnique({
+                where: {
+                    projectId_specKey: {
+                        projectId: input.projectId,
+                        specKey: input.specKey,
+                    },
+                },
+            });
+            if (row === null)
+                return null;
+            return toContractBaseline(row);
+        },
+        async setBaseline(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            assertNonEmpty(input.specKey, 'specKey');
+            assertNonEmpty(input.spec, 'spec');
+            assertNonEmpty(input.capturedBy, 'capturedBy');
+            assertValidFormat(input.format);
+            const row = await prisma.contractBaseline.upsert({
+                where: {
+                    projectId_specKey: {
+                        projectId: input.projectId,
+                        specKey: input.specKey,
+                    },
+                },
+                create: {
+                    projectId: input.projectId,
+                    specKey: input.specKey,
+                    spec: input.spec,
+                    format: input.format,
+                    capturedBy: input.capturedBy,
+                },
+                update: {
+                    spec: input.spec,
+                    format: input.format,
+                    capturedBy: input.capturedBy,
+                    capturedAt: new Date(),
+                },
+                select: { id: true },
+            });
+            return { id: row.id };
+        },
+        async listBaselines(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            const rows = await prisma.contractBaseline.findMany({
+                where: { projectId: input.projectId },
+                orderBy: { capturedAt: 'desc' },
+            });
+            return rows.map(toContractBaseline);
+        },
+    };
+}
+//# sourceMappingURL=contract-baseline-store.js.map

package/dist/contract-baseline-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-baseline-store.js","sourceRoot":"","sources":["../src/contract-baseline-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EACL,0BAA0B,GAG3B,MAAM,eAAe,CAAC;AASvB,4EAA4E;AAE5E,SAAS,cAAc,CAAC,KAAc,EAAE,SAAiB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,sCAAsC,SAAS,4BAA4B,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,0BAA0B,CAClC,gBAAgB,EAChB,8EAA8E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAYD;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,GAA8B;IACxD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM;QACN,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,iCAAiC,CAC/C,MAAyC;IAEzC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAGjB;YACC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC;gBACnD,KAAK,EAAE;oBACL,iBAAiB,EAAE;wBACjB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB;iBACF;aACF,CAAC,CAAC;YAEH,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAMjB;YACC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACzC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACnC,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC/C,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEhC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAC/C,KAAK,EAAE;oBACL,iBAAiB,EAAE;wBACjB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB;iBACF;gBACD,MAAM,EAAE;oBACN,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,UAAU,EAAE,IAAI,IAAI,EAAE;iBACvB;gBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YAEH,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAA4B;YAC9C,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAE7C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAClD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBACrC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;aAChC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -31,5 +31,10 @@ export { createPrismaTrustThresholdConfigStore, type PrismaTrustThresholdConfigS
 export { createPrismaFreezeWindowEvaluator, parseCron, mostRecentFire, type PrismaFreezeWindowEvaluatorConfig, } from './freeze-window-evaluator.js';
 export { createPrismaBudgetGate, type PrismaBudgetGateConfig } from './budget-gate.js';
 export { createPrismaKillSwitchEvaluator, DEFAULT_KILL_SWITCH_THRESHOLDS, type PrismaKillSwitchEvaluatorConfig, } from './kill-switch-evaluator.js';
+export { createPrismaProjectModeStore, type PrismaProjectModeStoreConfig, } from './project-mode-store.js';
+export { createPrismaAutoPromotionEvaluator, DEFAULT_PROMOTION_THRESHOLDS, type PrismaAutoPromotionEvaluatorConfig, } from './auto-promotion-evaluator.js';
+export { createPrismaVisualBaselineStore, type PrismaVisualBaselineStoreConfig, } from './visual-baseline-store.js';
+export { createPrismaContractBaselineStore, type PrismaContractBaselineStoreConfig, } from './contract-baseline-store.js';
+export { createPrismaTenantFuzzConfigStore, type PrismaTenantFuzzConfigStoreConfig, } from './tenant-fuzz-config-store.js';
 export * from './prisma.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,YAAY,EAAG,cAAuB,CAAC;AAIpD,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,KAAK,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,EAClC,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,KAAK,8BAA8B,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uCAAuC,EACvC,KAAK,uCAAuC,GAC7C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qCAAqC,EACrC,KAAK,qCAAqC,GAC3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,SAAS,EACT,cAAc,EACd,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AA4BpC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,YAAY,EAAG,cAAuB,CAAC;AAIpD,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,KAAK,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,EAC7B,KAAK,6BAA6B,GACnC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,EAClC,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,KAAK,8BAA8B,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uCAAuC,EACvC,KAAK,uCAAuC,GAC7C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qCAAqC,EACrC,KAAK,qCAAqC,GAC3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,SAAS,EACT,cAAc,EACd,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,EAC5B,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,KAAK,kCAAkC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,EAC/B,KAAK,+BAA+B,GACrC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iCAAiC,EACjC,KAAK,iCAAiC,GACvC,MAAM,+BAA+B,CAAC;AA4BvC,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -32,6 +32,11 @@ export { createPrismaTrustThresholdConfigStore, } from './trust-threshold-config
 export { createPrismaFreezeWindowEvaluator, parseCron, mostRecentFire, } from './freeze-window-evaluator.js';
 export { createPrismaBudgetGate } from './budget-gate.js';
 export { createPrismaKillSwitchEvaluator, DEFAULT_KILL_SWITCH_THRESHOLDS, } from './kill-switch-evaluator.js';
+export { createPrismaProjectModeStore, } from './project-mode-store.js';
+export { createPrismaAutoPromotionEvaluator, DEFAULT_PROMOTION_THRESHOLDS, } from './auto-promotion-evaluator.js';
+export { createPrismaVisualBaselineStore, } from './visual-baseline-store.js';
+export { createPrismaContractBaselineStore, } from './contract-baseline-store.js';
+export { createPrismaTenantFuzzConfigStore, } from './tenant-fuzz-config-store.js';
 // ─── Prisma client re-export ─────────────────────────────────────────────
 //
 // @derwinjs/db ships its OWN generated Prisma client (output: prisma-client/

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,cAAuB,CAAC;AAEpD,4EAA4E;AAE5E,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAmC,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,GAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,GAE/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAkC,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,SAAS,GAEV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uCAAuC,GAExC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qCAAqC,GAEtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,SAAS,EACT,cAAc,GAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,GAE/B,MAAM,4BAA4B,CAAC;AAEpC,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,sEAAsE;AACtE,wEAAwE;AACxE,wEAAwE;AACxE,gDAAgD;AAChD,EAAE;AACF,+DAA+D;AAC/D,0EAA0E;AAC1E,yCAAyC;AACzC,+EAA+E;AAC/E,yCAAyC;AACzC,uEAAuE;AACvE,sEAAsE;AACtE,kEAAkE;AAClE,+BAA+B;AAC/B,EAAE;AACF,oBAAoB;AACpB,8DAA8D;AAC9D,4CAA4C;AAC5C,qEAAqE;AACrE,QAAQ;AACR,gDAAgD;AAEhD,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,cAAuB,CAAC;AAEpD,4EAA4E;AAE5E,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAmC,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,yBAAyB,EAAkC,MAAM,sBAAsB,CAAC;AACjG,OAAO,EACL,6BAA6B,GAE9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kCAAkC,GAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,GAE/B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,yBAAyB,EAAkC,MAAM,qBAAqB,CAAC;AAChG,OAAO,EACL,4BAA4B,EAC5B,SAAS,GAEV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uCAAuC,GAExC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,qCAAqC,GAEtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,SAAS,EACT,cAAc,GAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,kBAAkB,CAAC;AACvF,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,GAE/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,4BAA4B,GAE7B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,kCAAkC,EAClC,4BAA4B,GAE7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,+BAA+B,GAEhC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,GAElC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iCAAiC,GAElC,MAAM,+BAA+B,CAAC;AAEvC,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,sEAAsE;AACtE,wEAAwE;AACxE,wEAAwE;AACxE,gDAAgD;AAChD,EAAE;AACF,+DAA+D;AAC/D,0EAA0E;AAC1E,yCAAyC;AACzC,+EAA+E;AAC/E,yCAAyC;AACzC,uEAAuE;AACvE,sEAAsE;AACtE,kEAAkE;AAClE,+BAA+B;AAC/B,EAAE;AACF,oBAAoB;AACpB,8DAA8D;AAC9D,4CAA4C;AAC5C,qEAAqE;AACrE,QAAQ;AACR,gDAAgD;AAEhD,cAAc,aAAa,CAAC"}

package/dist/project-mode-store.d.ts

@@ -0,0 +1,28 @@
+/**
+ * createPrismaProjectModeStore — Prisma-backed implementation of the SDK
+ * ProjectModeStore contract introduced by QAP-090.
+ *
+ * Sprint 9 (Policy + UI, Phase 1). Single choke point for reading and
+ * writing `Project.mode` (OBSERVE / TICKET_ONLY / AUTHOR / AUTO — see
+ * product brief §11.2). Every mode change goes through `setMode` so the
+ * audit log (ProjectModeLog) stays in lockstep with the Project row.
+ *
+ * Tenant isolation: every read scopes by projectId. `getMode` returns
+ * null for unknown projectId; `listLog` returns an empty array. `setMode`
+ * throws `project_not_found` (rather than returning null) because a
+ * mode-change call against a missing project is a caller bug, not a
+ * cross-tenant probe — this matches the operator UX of the policy editor.
+ *
+ * Atomicity: `setMode` wraps (a) read fromMode → (b) update Project.mode +
+ * modeChangedAt + modeChangedBy → (c) insert ProjectModeLog row in a
+ * single Prisma interactive transaction so a partial write never leaves
+ * the audit log out of sync with the Project row.
+ */
+import type { PrismaClient } from './prisma.js';
+import { type ProjectModeStore } from '@derwinjs/sdk';
+export interface PrismaProjectModeStoreConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+export declare function createPrismaProjectModeStore(config: PrismaProjectModeStoreConfig): ProjectModeStore;
+//# sourceMappingURL=project-mode-store.d.ts.map

package/dist/project-mode-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-mode-store.d.ts","sourceRoot":"","sources":["../src/project-mode-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAML,KAAK,gBAAgB,EAEtB,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,4BAA4B;IAC3C,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AAgED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,4BAA4B,GACnC,gBAAgB,CA+ElB"}

package/dist/project-mode-store.js

@@ -0,0 +1,126 @@
+/**
+ * createPrismaProjectModeStore — Prisma-backed implementation of the SDK
+ * ProjectModeStore contract introduced by QAP-090.
+ *
+ * Sprint 9 (Policy + UI, Phase 1). Single choke point for reading and
+ * writing `Project.mode` (OBSERVE / TICKET_ONLY / AUTHOR / AUTO — see
+ * product brief §11.2). Every mode change goes through `setMode` so the
+ * audit log (ProjectModeLog) stays in lockstep with the Project row.
+ *
+ * Tenant isolation: every read scopes by projectId. `getMode` returns
+ * null for unknown projectId; `listLog` returns an empty array. `setMode`
+ * throws `project_not_found` (rather than returning null) because a
+ * mode-change call against a missing project is a caller bug, not a
+ * cross-tenant probe — this matches the operator UX of the policy editor.
+ *
+ * Atomicity: `setMode` wraps (a) read fromMode → (b) update Project.mode +
+ * modeChangedAt + modeChangedBy → (c) insert ProjectModeLog row in a
+ * single Prisma interactive transaction so a partial write never leaves
+ * the audit log out of sync with the Project row.
+ */
+import { ProjectModeStoreError, ProjectModeValues, } from '@derwinjs/sdk';
+// ─── Validation ──────────────────────────────────────────────────────────
+function validateSetInput(input) {
+    if (typeof input.projectId !== 'string' || input.projectId.length === 0) {
+        throw new ProjectModeStoreError('invalid_input', 'ProjectModeStore: projectId is required');
+    }
+    if (!ProjectModeValues.includes(input.toMode)) {
+        throw new ProjectModeStoreError('invalid_mode', `ProjectModeStore: toMode must be one of ${ProjectModeValues.join(', ')} (got ${input.toMode})`);
+    }
+    if (typeof input.reason !== 'string' || input.reason.trim().length === 0) {
+        throw new ProjectModeStoreError('invalid_input', 'ProjectModeStore: reason is required');
+    }
+    if (typeof input.changedBy !== 'string' || input.changedBy.trim().length === 0) {
+        throw new ProjectModeStoreError('invalid_input', 'ProjectModeStore: changedBy is required');
+    }
+}
+function mapProjectRow(row) {
+    return {
+        projectId: row.id,
+        mode: row.mode,
+        modeChangedAt: row.modeChangedAt,
+        modeChangedBy: row.modeChangedBy,
+    };
+}
+function mapLogRow(row) {
+    return {
+        id: row.id,
+        projectId: row.projectId,
+        fromMode: row.fromMode,
+        toMode: row.toMode,
+        reason: row.reason,
+        changedBy: row.changedBy,
+        changedAt: row.changedAt,
+    };
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaProjectModeStore(config) {
+    const { prisma } = config;
+    return {
+        async getMode(input) {
+            const row = await prisma.project.findUnique({
+                where: { id: input.projectId },
+                select: {
+                    id: true,
+                    mode: true,
+                    modeChangedAt: true,
+                    modeChangedBy: true,
+                },
+            });
+            if (row === null)
+                return null;
+            return mapProjectRow(row);
+        },
+        async setMode(input) {
+            validateSetInput(input);
+            // Atomic: read fromMode → update Project → insert log row.
+            // Interactive transaction so all three steps share a snapshot and
+            // commit together.
+            const updated = await prisma.$transaction(async (tx) => {
+                const existing = await tx.project.findUnique({
+                    where: { id: input.projectId },
+                    select: { id: true, mode: true },
+                });
+                if (existing === null) {
+                    throw new ProjectModeStoreError('project_not_found', `ProjectModeStore: project ${input.projectId} not found`);
+                }
+                const fromMode = existing.mode;
+                const now = new Date();
+                const next = await tx.project.update({
+                    where: { id: input.projectId },
+                    data: {
+                        mode: input.toMode,
+                        modeChangedAt: now,
+                        modeChangedBy: input.changedBy,
+                    },
+                    select: {
+                        id: true,
+                        mode: true,
+                        modeChangedAt: true,
+                        modeChangedBy: true,
+                    },
+                });
+                await tx.projectModeLog.create({
+                    data: {
+                        projectId: input.projectId,
+                        fromMode,
+                        toMode: input.toMode,
+                        reason: input.reason,
+                        changedBy: input.changedBy,
+                    },
+                });
+                return next;
+            });
+            return mapProjectRow(updated);
+        },
+        async listLog(input) {
+            const rows = await prisma.projectModeLog.findMany({
+                where: { projectId: input.projectId },
+                orderBy: { changedAt: 'desc' },
+                take: input.limit ?? 50,
+            });
+            return rows.map(mapLogRow);
+        },
+    };
+}
+//# sourceMappingURL=project-mode-store.js.map

package/dist/project-mode-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-mode-store.js","sourceRoot":"","sources":["../src/project-mode-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAMlB,MAAM,eAAe,CAAC;AASvB,4EAA4E;AAE5E,SAAS,gBAAgB,CAAC,KAA0B;IAClD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,qBAAqB,CAC7B,cAAc,EACd,2CAA2C,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAWD,SAAS,aAAa,CAAC,GAAe;IACpC,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,EAAE;QACjB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;KACjC,CAAC;AACJ,CAAC;AAYD,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,4BAA4B,CAC1C,MAAoC;IAEpC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAA4B;YACxC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC1C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE;gBAC9B,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,aAAa,EAAE,IAAI;oBACnB,aAAa,EAAE,IAAI;iBACpB;aACF,CAAC,CAAC;YACH,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAA0B;YACtC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAExB,2DAA2D;YAC3D,kEAAkE;YAClE,mBAAmB;YACnB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACrD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;oBAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE;oBAC9B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;iBACjC,CAAC,CAAC;gBACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,MAAM,IAAI,qBAAqB,CAC7B,mBAAmB,EACnB,6BAA6B,KAAK,CAAC,SAAS,YAAY,CACzD,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GAAgB,QAAQ,CAAC,IAAI,CAAC;gBAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBAEvB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;oBACnC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE;oBAC9B,IAAI,EAAE;wBACJ,IAAI,EAAE,KAAK,CAAC,MAAM;wBAClB,aAAa,EAAE,GAAG;wBAClB,aAAa,EAAE,KAAK,CAAC,SAAS;qBAC/B;oBACD,MAAM,EAAE;wBACN,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,IAAI;wBACV,aAAa,EAAE,IAAI;wBACnB,aAAa,EAAE,IAAI;qBACpB;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;oBAC7B,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ;wBACR,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B;iBACF,CAAC,CAAC;gBAEH,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAA4C;YACxD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAChD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBACrC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;aACxB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/scripts/smoke-auto-fix.js

@@ -79,7 +79,7 @@ const stubRepo = {
     openPR: (_opts) => {
         throw new Error('smoke: stubRepo.openPR called — DRY_RUN should not reach repo');
     },
-    mergePR: (_prNumber) => {
+    mergePR: (_input) => {
         throw new Error('smoke: stubRepo.mergePR called — DRY_RUN should not reach repo');
     },
     revertPR: (_prNumber, _reason) => {