@derwinjs/db 0.9.0 → 0.11.0

package/dist/rum-sample-store.js

@@ -0,0 +1,155 @@
+/**
+ * createPrismaRumSampleStore — Prisma-backed implementation of the SDK
+ * RumSampleStore contract introduced by QAP-113.
+ *
+ * Sprint 11 Phase 3 (Test Surfaces — RUM ingestion). Samples are stored as
+ * one row per insert against the `RumSample` model. There is no uniqueness
+ * constraint on (projectId, metric) — a single page-load may emit multiple
+ * samples per metric, and operators need the full distribution to derive
+ * percentiles.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null from `getBaseline` rather
+ * than throwing or leaking existence (defense-in-depth against tenant
+ * enumeration). The "no samples in window" return is also null, so
+ * cross-tenant probes look identical to "no data this window".
+ *
+ * Percentile math: derived in-memory via array-index math after the
+ * `findMany` returns a value-sorted result set. No third-party stats
+ * library — RumSample row sets per (projectId, metric, window) cap at the
+ * tens-of-thousands order of magnitude, which fits comfortably in process
+ * memory for the percentile read.
+ */
+// ─── Error class ─────────────────────────────────────────────────────────
+/**
+ * Errors thrown by the Prisma-backed RumSampleStore. The store-level
+ * errors are kept inside @derwinjs/db (NOT promoted to @derwinjs/sdk)
+ * because they reflect storage-layer specifics; the route layer maps
+ * them to the operator-facing WebVitalsIngestorError before crossing
+ * the SDK boundary.
+ *
+ * The discriminating `code` field lets callers route handling:
+ *   - `invalid_input` — caller bug rejected at the factory boundary; do
+ *                       not retry.
+ *   - `io_failed`     — underlying Prisma call raised; transient — retry
+ *                       or escalate.
+ */
+export class RumSampleStoreError extends Error {
+    code;
+    cause;
+    constructor(code, message, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = 'RumSampleStoreError';
+        Object.setPrototypeOf(this, RumSampleStoreError.prototype);
+    }
+}
+// ─── Validation ──────────────────────────────────────────────────────────
+function assertNonEmpty(value, fieldName) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new RumSampleStoreError('invalid_input', `createPrismaRumSampleStore: ${fieldName} is required and non-empty`);
+    }
+}
+function assertFiniteNumber(value, fieldName) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        throw new RumSampleStoreError('invalid_input', `createPrismaRumSampleStore: ${fieldName} must be a finite number`);
+    }
+}
+function assertNonNegativeMs(value, fieldName) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
+        throw new RumSampleStoreError('invalid_input', `createPrismaRumSampleStore: ${fieldName} must be a non-negative finite number`);
+    }
+}
+// ─── Percentile helper ──────────────────────────────────────────────────
+/**
+ * Nearest-rank percentile over a value-sorted ascending array. Mirrors the
+ * convention web-vitals.js + most RUM analytics tools use:
+ *
+ *   index = ceil((p / 100) * N) - 1, clamped to [0, N-1].
+ *
+ * For a single-element array all percentiles return that element. For
+ * pre-sorted ascending arrays this is the cheapest correct percentile; the
+ * caller is responsible for sorting before passing the array in.
+ */
+function percentile(sortedAsc, p) {
+    const n = sortedAsc.length;
+    if (n === 0) {
+        throw new RumSampleStoreError('invalid_input', 'createPrismaRumSampleStore: percentile() called on empty array (caller bug)');
+    }
+    const idx = Math.max(0, Math.min(n - 1, Math.ceil((p / 100) * n) - 1));
+    // idx is in [0, n-1] and n >= 1, so the slot is always set. Runtime-guard
+    // form (memory rule 13) instead of `!` or `as number` — both are banned by
+    // @typescript-eslint/no-non-null-assertion + non-nullable-type-assertion-style.
+    const value = sortedAsc[idx];
+    if (value === undefined) {
+        throw new RumSampleStoreError('invalid_input', `createPrismaRumSampleStore: percentile() unreachable branch — idx=${String(idx)} of ${String(n)}`);
+    }
+    return value;
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaRumSampleStore(config) {
+    const { prisma } = config;
+    return {
+        async insert(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            assertNonEmpty(input.metric, 'metric');
+            assertFiniteNumber(input.value, 'value');
+            assertNonEmpty(input.rating, 'rating');
+            assertNonEmpty(input.url, 'url');
+            try {
+                const row = await prisma.rumSample.create({
+                    data: {
+                        projectId: input.projectId,
+                        metric: input.metric,
+                        value: input.value,
+                        rating: input.rating,
+                        url: input.url,
+                        deviceType: input.deviceType ?? null,
+                        sessionId: input.sessionId ?? null,
+                    },
+                    select: { id: true },
+                });
+                return { id: row.id };
+            }
+            catch (err) {
+                throw new RumSampleStoreError('io_failed', `createPrismaRumSampleStore: insert raised: ${err.message}`, err);
+            }
+        },
+        async getBaseline(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            assertNonEmpty(input.metric, 'metric');
+            assertNonNegativeMs(input.sinceMs, 'sinceMs');
+            const windowEnd = new Date();
+            const windowStart = new Date(windowEnd.getTime() - input.sinceMs);
+            let rows;
+            try {
+                rows = await prisma.rumSample.findMany({
+                    where: {
+                        projectId: input.projectId,
+                        metric: input.metric,
+                        capturedAt: { gte: windowStart },
+                    },
+                    orderBy: { value: 'asc' },
+                    select: { value: true },
+                });
+            }
+            catch (err) {
+                throw new RumSampleStoreError('io_failed', `createPrismaRumSampleStore: getBaseline raised: ${err.message}`, err);
+            }
+            if (rows.length === 0)
+                return null;
+            const values = rows.map((r) => r.value);
+            return {
+                metric: input.metric,
+                p50: percentile(values, 50),
+                p75: percentile(values, 75),
+                p95: percentile(values, 95),
+                sampleCount: values.length,
+                windowStart,
+                windowEnd,
+            };
+        },
+    };
+}
+//# sourceMappingURL=rum-sample-store.js.map

package/dist/rum-sample-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rum-sample-store.js","sourceRoot":"","sources":["../src/rum-sample-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAYH,4EAA4E;AAE5E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAE1B;IAES;IAH3B,YACkB,IAAmC,EACnD,OAAe,EACU,KAAe;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAA+B;QAE1B,UAAK,GAAL,KAAK,CAAU;QAGxC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,4EAA4E;AAE5E,SAAS,cAAc,CAAC,KAAc,EAAE,SAAiB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,+BAA+B,SAAS,4BAA4B,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,SAAiB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,+BAA+B,SAAS,0BAA0B,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,SAAiB;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,+BAA+B,SAAS,uCAAuC,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,2EAA2E;AAE3E;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,SAAmB,EAAE,CAAS;IAChD,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,gFAAgF;IAChF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,qEAAqE,MAAM,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,0BAA0B,CAAC,MAAkC;IAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAQZ;YACC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACzC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEjC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;oBACxC,IAAI,EAAE;wBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;wBACpC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;qBACnC;oBACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;iBACrB,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,8CAA+C,GAAa,CAAC,OAAO,EAAE,EACtE,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAIjB;YACC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACvC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAE9C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAElE,IAAI,IAAyB,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;oBACrC,KAAK,EAAE;wBACL,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,UAAU,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;qBACjC;oBACD,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;oBACzB,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,mDAAoD,GAAa,CAAC,OAAO,EAAE,EAC3E,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3B,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,WAAW;gBACX,SAAS;aACV,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/scripts/smoke-auto-fix.js

@@ -79,7 +79,7 @@ const stubRepo = {
     openPR: (_opts) => {
         throw new Error('smoke: stubRepo.openPR called — DRY_RUN should not reach repo');
     },
-    mergePR: (_prNumber) => {
+    mergePR: (_input) => {
         throw new Error('smoke: stubRepo.mergePR called — DRY_RUN should not reach repo');
     },
     revertPR: (_prNumber, _reason) => {

package/dist/scripts/smoke-auto-fix.js.map

@@ -1 +1 @@
-{"version":3,"file":"smoke-auto-fix.js","sourceRoot":"","sources":["../../src/scripts/smoke-auto-fix.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAWrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,6EAA6E;AAE7E,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AACtC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,uBAAuB,CAAC;AAEvF,MAAM,YAAY,GAAG;;;;;;CAMpB,CAAC;AAEF,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,WAAW;AACX,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,YAAY,CAAC;AAEvD,6EAA6E;AAE7E;;;;;GAKG;AACH,MAAM,aAAa,GAAuB;IACxC,IAAI,EAAE,mBAAmB;IACzB,YAAY,EAAE,CAAC,IAAsB,EAA4B,EAAE;QACjE,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,QAAQ,GAAkB;IAC9B,MAAM,EAAE,CAAC,KAAkB,EAAyB,EAAE;QACpD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,CAAC,SAAiB,EAAoB,EAAE;QAC/C,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,QAAQ,EAAE,CAAC,SAAiB,EAAE,OAAe,EAA2B,EAAE;QACxE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,YAAY,EAAE,GAA0B,EAAE;QACxC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,WAAW,EAAE,CAAC,SAAiB,EAA0B,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACjF,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACtC,gBAAgB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;CAC9C,CAAC;AAEF,6EAA6E;AAE7E,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;AAClC,MAAM,WAAW,GAAG,yBAAyB,CAAC;IAC5C,MAAM;IACN,gBAAgB,EAAE,kBAAkB;CACrC,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,6BAA6B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/D,MAAM,SAAS,GAAG,qBAAqB,CAAC;IACtC,MAAM;IACN,YAAY;IACZ,yEAAyE;IACzE,sEAAsE;IACtE,aAAa,EAAE;QACb,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,CAAC;QACpB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;KAClB;CACF,CAAC,CAAC;AAEH,IAAI,YAAgC,CAAC;AACrC,IAAI,eAAmC,CAAC;AACxC,IAAI,eAAmC,CAAC;AACxC,MAAM,iBAAiB,GAAa,EAAE,CAAC;AAEvC,KAAK,UAAU,IAAI;IACjB,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/C,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,YAAY,kBAAkB,0CAA0C,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAEpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,IAAI,EAAE;YACJ,SAAS,EAAE,QAAQ,CAAC,EAAE;YACtB,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,oBAAoB;YACjC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,gCAAgC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE;YACxE,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC;SAClB;KACF,CAAC,CAAC;IACH,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,iCAAiC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAExD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC;QAC/C,SAAS,EAAE,QAAQ,CAAC,EAAE;QACtB,OAAO,EAAE,GAAG,CAAC,EAAE;QACf,KAAK,EAAE,GAAG,YAAY,wCAAwC;QAC9D,OAAO,EAAE,wBAAwB;QACjC,cAAc,EAAE,aAAa;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,kBAAkB;gBAC5B,MAAM,EAAE,iBAAiB;aAC1B;SACF;QACD,kBAAkB,EAAE,GAAG,YAAY,6DAA6D;QAChG,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,wBAAwB,CAAC;YACzC,aAAa,EAAE,CAAC,gCAAgC,CAAC;YACjD,aAAa,EAAE,EAAE;SAClB;QACD,mBAAmB,EAAE,sDAAsD;KAC5E,CAAC,CAAC;IACH,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,0BAA0B,OAAO,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAE3E,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAC3C,IAAI,EAAE;YACJ,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;YAC7B,SAAS,EAAE,cAAc;YACzB,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE;gBACP,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,mBAAmB;gBAC9B,YAAY,EAAE,uCAAuC;aACtD;YACD,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,IAAI,IAAI,EAAE;SAC3B;KACF,CAAC,CAAC;IACH,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAErD,uEAAuE;IACvE,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,SAAS,EAAE,aAAa;QACxB,IAAI,EAAE,QAAQ;QACd,WAAW;QACX,YAAY;QACZ,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CACT,sFAAsF,CACvF,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC;QACpC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;QAC7B,SAAS,EAAE,QAAQ,CAAC,EAAE;KACvB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,OAAO,cAAc,GAAG,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAE7E,IAAI,GAAG,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,CAAC,OAAO,mBAAmB,GAAG,CAAC,YAAY,IAAI,EAAE,GAAG,CACnG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEtC,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,mEAAmE;IACnE,mEAAmE;IACnE,4CAA4C;IAC5C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC;QAC5C,EAAE,EAAE,GAAG,CAAC,SAAS;QACjB,SAAS,EAAE,QAAQ,CAAC,EAAE;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,SAAS,2BAA2B,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,mBAAmB,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,uFAAuF,OAAO,CAAC,cAAc,GAAG,CACjH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+CAA+C,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IACpD,IAAI,aAAa,GAAG,cAAc,GAAG,IAAI,IAAI,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,kCAAkC,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CACT,eAAe,GAAG,CAAC,SAAS,aAAa,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,kDAAkD,CACvH,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,+DAA+D;IAC/D,wEAAwE;IACxE,uEAAuE;IACvE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACnC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,IAAI,EAAE;KACH,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtB,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC;KACD,OAAO,CAAC,KAAK,IAAI,EAAE;IAClB,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,UAAmB,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CACX,oEAAoE,EACpE,UAAU,CACX,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC,CAAC,CAAC"}
+{"version":3,"file":"smoke-auto-fix.js","sourceRoot":"","sources":["../../src/scripts/smoke-auto-fix.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAarD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,6EAA6E;AAE7E,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AACtC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,uBAAuB,CAAC;AAEvF,MAAM,YAAY,GAAG;;;;;;CAMpB,CAAC;AAEF,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,WAAW;AACX,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,YAAY,CAAC;AAEvD,6EAA6E;AAE7E;;;;;GAKG;AACH,MAAM,aAAa,GAAuB;IACxC,IAAI,EAAE,mBAAmB;IACzB,YAAY,EAAE,CAAC,IAAsB,EAA4B,EAAE;QACjE,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,QAAQ,GAAkB;IAC9B,MAAM,EAAE,CAAC,KAAkB,EAAyB,EAAE;QACpD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,CAAC,MAAoB,EAA0B,EAAE;QACxD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,QAAQ,EAAE,CAAC,SAAiB,EAAE,OAAe,EAA2B,EAAE;QACxE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,YAAY,EAAE,GAA0B,EAAE;QACxC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,WAAW,EAAE,CAAC,SAAiB,EAA0B,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACjF,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACtC,gBAAgB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;CAC9C,CAAC;AAEF,6EAA6E;AAE7E,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;AAClC,MAAM,WAAW,GAAG,yBAAyB,CAAC;IAC5C,MAAM;IACN,gBAAgB,EAAE,kBAAkB;CACrC,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,6BAA6B,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/D,MAAM,SAAS,GAAG,qBAAqB,CAAC;IACtC,MAAM;IACN,YAAY;IACZ,yEAAyE;IACzE,sEAAsE;IACtE,aAAa,EAAE;QACb,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,CAAC;QACpB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;KAClB;CACF,CAAC,CAAC;AAEH,IAAI,YAAgC,CAAC;AACrC,IAAI,eAAmC,CAAC;AACxC,IAAI,eAAmC,CAAC;AACxC,MAAM,iBAAiB,GAAa,EAAE,CAAC;AAEvC,KAAK,UAAU,IAAI;IACjB,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/C,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,YAAY,kBAAkB,0CAA0C,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAEpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,IAAI,EAAE;YACJ,SAAS,EAAE,QAAQ,CAAC,EAAE;YACtB,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,oBAAoB;YACjC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,gCAAgC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE;YACxE,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,IAAI,IAAI,EAAE;YACvB,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC;SAClB;KACF,CAAC,CAAC;IACH,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,iCAAiC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAExD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC;QAC/C,SAAS,EAAE,QAAQ,CAAC,EAAE;QACtB,OAAO,EAAE,GAAG,CAAC,EAAE;QACf,KAAK,EAAE,GAAG,YAAY,wCAAwC;QAC9D,OAAO,EAAE,wBAAwB;QACjC,cAAc,EAAE,aAAa;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,kBAAkB;gBAC5B,MAAM,EAAE,iBAAiB;aAC1B;SACF;QACD,kBAAkB,EAAE,GAAG,YAAY,6DAA6D;QAChG,WAAW,EAAE;YACX,aAAa,EAAE,CAAC,wBAAwB,CAAC;YACzC,aAAa,EAAE,CAAC,gCAAgC,CAAC;YACjD,aAAa,EAAE,EAAE;SAClB;QACD,mBAAmB,EAAE,sDAAsD;KAC5E,CAAC,CAAC;IACH,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,0BAA0B,OAAO,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAE3E,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAC3C,IAAI,EAAE;YACJ,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;YAC7B,SAAS,EAAE,cAAc;YACzB,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE;gBACP,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,mBAAmB;gBAC9B,YAAY,EAAE,uCAAuC;aACtD;YACD,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,IAAI,IAAI,EAAE;SAC3B;KACF,CAAC,CAAC;IACH,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAErD,uEAAuE;IACvE,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,SAAS,EAAE,aAAa;QACxB,IAAI,EAAE,QAAQ;QACd,WAAW;QACX,YAAY;QACZ,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CACT,sFAAsF,CACvF,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC;QACpC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;QAC7B,SAAS,EAAE,QAAQ,CAAC,EAAE;KACvB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,OAAO,cAAc,GAAG,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;IAE7E,IAAI,GAAG,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,2CAA2C,GAAG,CAAC,OAAO,mBAAmB,GAAG,CAAC,YAAY,IAAI,EAAE,GAAG,CACnG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEtC,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,mEAAmE;IACnE,mEAAmE;IACnE,4CAA4C;IAC5C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC;QAC5C,EAAE,EAAE,GAAG,CAAC,SAAS;QACjB,SAAS,EAAE,QAAQ,CAAC,EAAE;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,SAAS,2BAA2B,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,mBAAmB,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,uFAAuF,OAAO,CAAC,cAAc,GAAG,CACjH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,+CAA+C,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IACpD,IAAI,aAAa,GAAG,cAAc,GAAG,IAAI,IAAI,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,kCAAkC,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CACT,eAAe,GAAG,CAAC,SAAS,aAAa,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,kDAAkD,CACvH,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,+DAA+D;IAC/D,wEAAwE;IACxE,uEAAuE;IACvE,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;YACnC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,IAAI,EAAE;KACH,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtB,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC;KACD,OAAO,CAAC,KAAK,IAAI,EAAE;IAClB,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,UAAmB,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CACX,oEAAoE,EACpE,UAAU,CACX,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC,CAAC,CAAC"}

package/dist/tenant-fuzz-config-store.d.ts

@@ -0,0 +1,28 @@
+/**
+ * createPrismaTenantFuzzConfigStore — Prisma-backed implementation of the SDK
+ * TenantFuzzConfigStore contract introduced by QAP-104.
+ *
+ * Sprint 10 Phase 4 (Test Surfaces — Multi-tenant isolation fuzz). The
+ * store persists one row per project (TenantFuzzConfig.projectId @unique)
+ * and gates writes on operator consent: `consentToFuzz=false` MUST come
+ * with an empty probePairs array, otherwise we throw `no_consent`. This
+ * complements the fuzzer-side consent gate so probe pairs cannot be
+ * staged ahead of opt-in.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null rather than throwing or
+ * leaking existence (defense-in-depth against tenant enumeration).
+ *
+ * The two JSON columns (`tenantSafeRoutes`, `probePairs`) are validated
+ * shape-wise on read AND on write. Bad shapes from out-of-band writes
+ * surface as TenantFuzzConfigStoreError('invalid_input') rather than
+ * silently leaking malformed configs to the fuzzer.
+ */
+import { type PrismaClient } from './prisma.js';
+import { type TenantFuzzConfigStore } from '@derwinjs/sdk';
+export interface PrismaTenantFuzzConfigStoreConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+export declare function createPrismaTenantFuzzConfigStore(config: PrismaTenantFuzzConfigStoreConfig): TenantFuzzConfigStore;
+//# sourceMappingURL=tenant-fuzz-config-store.d.ts.map

package/dist/tenant-fuzz-config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-fuzz-config-store.d.ts","sourceRoot":"","sources":["../src/tenant-fuzz-config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAGL,KAAK,qBAAqB,EAG3B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,iCAAiC;IAChD,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AA+JD,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,iCAAiC,GACxC,qBAAqB,CA8DvB"}

package/dist/tenant-fuzz-config-store.js

@@ -0,0 +1,173 @@
+/**
+ * createPrismaTenantFuzzConfigStore — Prisma-backed implementation of the SDK
+ * TenantFuzzConfigStore contract introduced by QAP-104.
+ *
+ * Sprint 10 Phase 4 (Test Surfaces — Multi-tenant isolation fuzz). The
+ * store persists one row per project (TenantFuzzConfig.projectId @unique)
+ * and gates writes on operator consent: `consentToFuzz=false` MUST come
+ * with an empty probePairs array, otherwise we throw `no_consent`. This
+ * complements the fuzzer-side consent gate so probe pairs cannot be
+ * staged ahead of opt-in.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null rather than throwing or
+ * leaking existence (defense-in-depth against tenant enumeration).
+ *
+ * The two JSON columns (`tenantSafeRoutes`, `probePairs`) are validated
+ * shape-wise on read AND on write. Bad shapes from out-of-band writes
+ * surface as TenantFuzzConfigStoreError('invalid_input') rather than
+ * silently leaking malformed configs to the fuzzer.
+ */
+import { Prisma } from './prisma.js';
+import { TenantFuzzConfigStoreError, } from '@derwinjs/sdk';
+// ─── Validation ──────────────────────────────────────────────────────────
+const VALID_METHODS = new Set(['GET', 'POST', 'PUT', 'PATCH', 'DELETE']);
+function assertNonEmpty(value, fieldName) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: ${fieldName} is required and non-empty`);
+    }
+}
+function assertRouteShape(value, ix) {
+    if (typeof value !== 'object' || value === null) {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: tenantSafeRoutes[${String(ix)}] must be an object`);
+    }
+    const route = value;
+    if (typeof route.method !== 'string' || !VALID_METHODS.has(route.method)) {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: tenantSafeRoutes[${String(ix)}].method must be one of GET/POST/PUT/PATCH/DELETE`);
+    }
+    if (typeof route.pathTemplate !== 'string' || route.pathTemplate.trim() === '') {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: tenantSafeRoutes[${String(ix)}].pathTemplate is required and non-empty`);
+    }
+    if (typeof route.description !== 'string') {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: tenantSafeRoutes[${String(ix)}].description must be a string`);
+    }
+    if (typeof route.bodyTemplate !== 'undefined' && typeof route.bodyTemplate !== 'string') {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: tenantSafeRoutes[${String(ix)}].bodyTemplate must be a string when present`);
+    }
+}
+function assertPairShape(value, ix) {
+    if (typeof value !== 'object' || value === null) {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: probePairs[${String(ix)}] must be an object`);
+    }
+    const pair = value;
+    if (typeof pair.sessionToken !== 'string' || pair.sessionToken.trim() === '') {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: probePairs[${String(ix)}].sessionToken is required and non-empty`);
+    }
+    if (typeof pair.targetResourceId !== 'string' || pair.targetResourceId.trim() === '') {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: probePairs[${String(ix)}].targetResourceId is required and non-empty`);
+    }
+    if (typeof pair.label !== 'string') {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: probePairs[${String(ix)}].label must be a string`);
+    }
+}
+/**
+ * Validate the SDK input shape before any DB write. Routes + pairs are
+ * shape-checked; the consent invariant (probePairs require consent) is
+ * enforced separately so the error surfaces with the dedicated
+ * `no_consent` code rather than `invalid_input`.
+ */
+function assertConfigShape(input) {
+    assertNonEmpty(input.projectId, 'projectId');
+    if (!Array.isArray(input.tenantSafeRoutes)) {
+        throw new TenantFuzzConfigStoreError('invalid_input', 'createPrismaTenantFuzzConfigStore: tenantSafeRoutes must be an array');
+    }
+    if (!Array.isArray(input.probePairs)) {
+        throw new TenantFuzzConfigStoreError('invalid_input', 'createPrismaTenantFuzzConfigStore: probePairs must be an array');
+    }
+    for (let ix = 0; ix < input.tenantSafeRoutes.length; ix++) {
+        assertRouteShape(input.tenantSafeRoutes[ix], ix);
+    }
+    for (let ix = 0; ix < input.probePairs.length; ix++) {
+        assertPairShape(input.probePairs[ix], ix);
+    }
+}
+/**
+ * Map a Prisma row to the SDK TenantFuzzConfig shape. We re-validate the
+ * JSON columns on read — defense-in-depth in case a malformed value
+ * landed via raw SQL or a bad migration. Failed shape checks throw
+ * invalid_input so callers see the bad row as a contract violation
+ * rather than a silently empty config.
+ */
+function toTenantFuzzConfig(row) {
+    const routes = [];
+    if (Array.isArray(row.tenantSafeRoutes)) {
+        for (let ix = 0; ix < row.tenantSafeRoutes.length; ix++) {
+            const candidate = row.tenantSafeRoutes[ix];
+            assertRouteShape(candidate, ix);
+            routes.push(candidate);
+        }
+    }
+    else {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: stored tenantSafeRoutes is not an array (projectId=${row.projectId})`);
+    }
+    const pairs = [];
+    if (Array.isArray(row.probePairs)) {
+        for (let ix = 0; ix < row.probePairs.length; ix++) {
+            const candidate = row.probePairs[ix];
+            assertPairShape(candidate, ix);
+            pairs.push(candidate);
+        }
+    }
+    else {
+        throw new TenantFuzzConfigStoreError('invalid_input', `createPrismaTenantFuzzConfigStore: stored probePairs is not an array (projectId=${row.projectId})`);
+    }
+    return {
+        projectId: row.projectId,
+        consentToFuzz: row.consentToFuzz,
+        tenantSafeRoutes: routes,
+        probePairs: pairs,
+    };
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaTenantFuzzConfigStore(config) {
+    const { prisma } = config;
+    return {
+        async getConfig(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            const row = await prisma.tenantFuzzConfig.findUnique({
+                where: { projectId: input.projectId },
+            });
+            if (row === null)
+                return null;
+            return toTenantFuzzConfig(row);
+        },
+        async setConfig(input) {
+            assertConfigShape(input);
+            // Defense-in-depth consent gate: the operator can't stage probePairs
+            // without first granting consentToFuzz. This complements the
+            // fuzzer-side consent re-check.
+            if (!input.consentToFuzz && input.probePairs.length > 0) {
+                throw new TenantFuzzConfigStoreError('no_consent', 'createPrismaTenantFuzzConfigStore: probePairs cannot be persisted without consentToFuzz=true (defense-in-depth)');
+            }
+            const tenantSafeRoutesJson = input.tenantSafeRoutes;
+            const probePairsJson = input.probePairs;
+            try {
+                await prisma.tenantFuzzConfig.upsert({
+                    where: { projectId: input.projectId },
+                    create: {
+                        projectId: input.projectId,
+                        consentToFuzz: input.consentToFuzz,
+                        tenantSafeRoutes: tenantSafeRoutesJson,
+                        probePairs: probePairsJson,
+                        updatedBy: 'system',
+                    },
+                    update: {
+                        consentToFuzz: input.consentToFuzz,
+                        tenantSafeRoutes: tenantSafeRoutesJson,
+                        probePairs: probePairsJson,
+                    },
+                });
+            }
+            catch (err) {
+                // FK violation on projectId — Prisma raises P2003. Surface as
+                // project_not_found so callers can route the missing-project flow
+                // distinctly from generic invalid_input.
+                if (err instanceof Prisma.PrismaClientKnownRequestError && err.code === 'P2003') {
+                    throw new TenantFuzzConfigStoreError('project_not_found', `createPrismaTenantFuzzConfigStore: projectId ${input.projectId} does not resolve to a Project row`, err);
+                }
+                throw err;
+            }
+        },
+    };
+}
+//# sourceMappingURL=tenant-fuzz-config-store.js.map

package/dist/tenant-fuzz-config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-fuzz-config-store.js","sourceRoot":"","sources":["../src/tenant-fuzz-config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,0BAA0B,GAK3B,MAAM,eAAe,CAAC;AASvB,4EAA4E;AAE5E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEzE,SAAS,cAAc,CAAC,KAAc,EAAE,SAAiB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,sCAAsC,SAAS,4BAA4B,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,EAAU;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,uDAAuD,MAAM,CAAC,EAAE,CAAC,qBAAqB,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,uDAAuD,MAAM,CAAC,EAAE,CAAC,mDAAmD,CACrH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/E,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,uDAAuD,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,uDAAuD,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAClG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,WAAW,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACxF,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,uDAAuD,MAAM,CAAC,EAAE,CAAC,8CAA8C,CAChH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,EAAU;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,iDAAiD,MAAM,CAAC,EAAE,CAAC,qBAAqB,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7E,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,iDAAiD,MAAM,CAAC,EAAE,CAAC,0CAA0C,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrF,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,iDAAiD,MAAM,CAAC,EAAE,CAAC,8CAA8C,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,iDAAiD,MAAM,CAAC,EAAE,CAAC,0BAA0B,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAuB;IAChD,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QAC1D,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QACpD,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAYD;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAA8B;IACxD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YACxD,MAAM,SAAS,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC3C,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,yFAAyF,GAAG,CAAC,SAAS,GAAG,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACrC,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,0BAA0B,CAClC,eAAe,EACf,mFAAmF,GAAG,CAAC,SAAS,GAAG,CACpG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,gBAAgB,EAAE,MAAM;QACxB,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,iCAAiC,CAC/C,MAAyC;IAEzC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,KAA4B;YAC1C,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAE7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC;gBACnD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;aACtC,CAAC,CAAC;YAEH,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAuB;YACrC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAEzB,qEAAqE;YACrE,6DAA6D;YAC7D,gCAAgC;YAChC,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,0BAA0B,CAClC,YAAY,EACZ,iHAAiH,CAClH,CAAC;YACJ,CAAC;YAED,MAAM,oBAAoB,GAAG,KAAK,CAAC,gBAAoD,CAAC;YACxF,MAAM,cAAc,GAAG,KAAK,CAAC,UAA8C,CAAC;YAE5E,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC;oBACnC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;oBACrC,MAAM,EAAE;wBACN,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,gBAAgB,EAAE,oBAAoB;wBACtC,UAAU,EAAE,cAAc;wBAC1B,SAAS,EAAE,QAAQ;qBACpB;oBACD,MAAM,EAAE;wBACN,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,gBAAgB,EAAE,oBAAoB;wBACtC,UAAU,EAAE,cAAc;qBAC3B;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,8DAA8D;gBAC9D,kEAAkE;gBAClE,yCAAyC;gBACzC,IAAI,GAAG,YAAY,MAAM,CAAC,6BAA6B,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAChF,MAAM,IAAI,0BAA0B,CAClC,mBAAmB,EACnB,gDAAgD,KAAK,CAAC,SAAS,oCAAoC,EACnG,GAAG,CACJ,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/visual-baseline-store.d.ts

@@ -0,0 +1,21 @@
+/**
+ * createPrismaVisualBaselineStore — Prisma-backed implementation of the SDK
+ * VisualBaselineStore contract introduced by QAP-105.
+ *
+ * Sprint 10 Phase 2 (Test Surfaces). Baselines are stored as Postgres BYTEA
+ * (model VisualBaseline) keyed by (projectId, scopeKey). One row per
+ * (projectId, scopeKey) — setBaseline upserts and is the only path to
+ * replace an approved baseline.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null rather than throwing or
+ * leaking existence (defense-in-depth against tenant enumeration).
+ */
+import type { PrismaClient } from './prisma.js';
+import { type VisualBaselineStore } from '@derwinjs/sdk';
+export interface PrismaVisualBaselineStoreConfig {
+    /** Generated Prisma client. Pass an instance per process. */
+    prisma: PrismaClient;
+}
+export declare function createPrismaVisualBaselineStore(config: PrismaVisualBaselineStoreConfig): VisualBaselineStore;
+//# sourceMappingURL=visual-baseline-store.d.ts.map

package/dist/visual-baseline-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visual-baseline-store.d.ts","sourceRoot":"","sources":["../src/visual-baseline-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAA4B,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAInF,MAAM,WAAW,+BAA+B;IAC9C,6DAA6D;IAC7D,MAAM,EAAE,YAAY,CAAC;CACtB;AAwBD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,+BAA+B,GACtC,mBAAmB,CA0ErB"}

package/dist/visual-baseline-store.js

@@ -0,0 +1,87 @@
+/**
+ * createPrismaVisualBaselineStore — Prisma-backed implementation of the SDK
+ * VisualBaselineStore contract introduced by QAP-105.
+ *
+ * Sprint 10 Phase 2 (Test Surfaces). Baselines are stored as Postgres BYTEA
+ * (model VisualBaseline) keyed by (projectId, scopeKey). One row per
+ * (projectId, scopeKey) — setBaseline upserts and is the only path to
+ * replace an approved baseline.
+ *
+ * Tenant isolation: every method scopes by projectId. Pattern D applies —
+ * unknown / wrong-project lookups return null rather than throwing or
+ * leaking existence (defense-in-depth against tenant enumeration).
+ */
+import { VisualBaselineStoreError } from '@derwinjs/sdk';
+// ─── Validation ──────────────────────────────────────────────────────────
+function assertNonEmpty(value, fieldName) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new VisualBaselineStoreError('invalid_input', `createPrismaVisualBaselineStore: ${fieldName} is required and non-empty`);
+    }
+}
+function assertNonEmptyBytes(bytes) {
+    if (!(bytes instanceof Uint8Array) || bytes.length === 0) {
+        throw new VisualBaselineStoreError('invalid_input', 'createPrismaVisualBaselineStore: bytes must be a non-empty Uint8Array');
+    }
+}
+// ─── Factory ─────────────────────────────────────────────────────────────
+export function createPrismaVisualBaselineStore(config) {
+    const { prisma } = config;
+    return {
+        async getBaseline(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            assertNonEmpty(input.scopeKey, 'scopeKey');
+            let row;
+            try {
+                row = await prisma.visualBaseline.findUnique({
+                    where: {
+                        projectId_scopeKey: {
+                            projectId: input.projectId,
+                            scopeKey: input.scopeKey,
+                        },
+                    },
+                    select: { bytes: true },
+                });
+            }
+            catch (err) {
+                throw new VisualBaselineStoreError('io_failed', `createPrismaVisualBaselineStore: getBaseline raised: ${err.message}`, err);
+            }
+            if (row === null)
+                return null;
+            // Prisma maps Bytes columns to Buffer at runtime; Buffer extends
+            // Uint8Array so callers see the contract type.
+            return new Uint8Array(row.bytes);
+        },
+        async setBaseline(input) {
+            assertNonEmpty(input.projectId, 'projectId');
+            assertNonEmpty(input.scopeKey, 'scopeKey');
+            assertNonEmptyBytes(input.bytes);
+            // Prisma's BYTEA writes accept Buffer. Buffer.from(Uint8Array) copies
+            // bytes into a new Buffer — predictable and avoids ArrayBufferLike
+            // typing edge cases (SharedArrayBuffer, etc.). Screenshot byte sizes
+            // are small enough that the copy cost is negligible.
+            const buf = Buffer.from(input.bytes);
+            try {
+                await prisma.visualBaseline.upsert({
+                    where: {
+                        projectId_scopeKey: {
+                            projectId: input.projectId,
+                            scopeKey: input.scopeKey,
+                        },
+                    },
+                    create: {
+                        projectId: input.projectId,
+                        scopeKey: input.scopeKey,
+                        bytes: buf,
+                    },
+                    update: {
+                        bytes: buf,
+                    },
+                });
+            }
+            catch (err) {
+                throw new VisualBaselineStoreError('io_failed', `createPrismaVisualBaselineStore: setBaseline raised: ${err.message}`, err);
+            }
+        },
+    };
+}
+//# sourceMappingURL=visual-baseline-store.js.map

package/dist/visual-baseline-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visual-baseline-store.js","sourceRoot":"","sources":["../src/visual-baseline-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,wBAAwB,EAA4B,MAAM,eAAe,CAAC;AASnF,4EAA4E;AAE5E,SAAS,cAAc,CAAC,KAAc,EAAE,SAAiB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,oCAAoC,SAAS,4BAA4B,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,wBAAwB,CAChC,eAAe,EACf,uEAAuE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,+BAA+B,CAC7C,MAAuC;IAEvC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAE1B,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAA8C;YAC9D,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAE3C,IAAI,GAAG,CAAC;YACR,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;oBAC3C,KAAK,EAAE;wBACL,kBAAkB,EAAE;4BAClB,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACzB;qBACF;oBACD,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,wBAAwB,CAChC,WAAW,EACX,wDAAyD,GAAa,CAAC,OAAO,EAAE,EAChF,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,iEAAiE;YACjE,+CAA+C;YAC/C,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAIjB;YACC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC3C,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAEjC,sEAAsE;YACtE,mEAAmE;YACnE,qEAAqE;YACrE,qDAAqD;YACrD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;oBACjC,KAAK,EAAE;wBACL,kBAAkB,EAAE;4BAClB,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;yBACzB;qBACF;oBACD,MAAM,EAAE;wBACN,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,KAAK,EAAE,GAAG;qBACX;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,GAAG;qBACX;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,wBAAwB,CAChC,WAAW,EACX,wDAAyD,GAAa,CAAC,OAAO,EAAE,EAChF,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@derwinjs/db",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "description": "Prisma schema + migrations for Derwin's own Postgres. 14 models, project-namespaced. Per ADR-0005. Ships its own generated Prisma client (multi-platform binaries) for cross-consumer compatibility.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -33,8 +33,8 @@
   },
   "dependencies": {
     "@prisma/client": "^5.22.0",
-    "@derwinjs/core": "0.9.0",
-    "@derwinjs/sdk": "0.9.0"
+    "@derwinjs/core": "0.11.0",
+    "@derwinjs/sdk": "0.11.0"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "^2.1.9",