@fivepixels-js/lite-api 0.2.1

package/dist/db/migrations/004_feedback_core.sql

@@ -0,0 +1,236 @@
+CREATE TABLE feedbacks (
+    feedback_id TEXT PRIMARY KEY,
+    project_id TEXT NOT NULL,
+    environment TEXT NOT NULL
+        CHECK (length(environment) BETWEEN 1 AND 50 AND environment = lower(trim(environment))),
+    pathname TEXT NOT NULL
+        CHECK (length(pathname) BETWEEN 1 AND 2000 AND substr(pathname, 1, 1) = '/'),
+    pathname_hash TEXT NOT NULL
+        CHECK (length(pathname_hash) = 64 AND pathname_hash NOT GLOB '*[^0-9a-f]*'),
+    report_id TEXT NOT NULL
+        CHECK (length(report_id) BETWEEN 1 AND 255 AND report_id = trim(report_id)),
+    report_type TEXT NOT NULL
+        CHECK (length(report_type) BETWEEN 1 AND 50 AND report_type = trim(report_type)),
+    target_selector TEXT
+        CHECK (target_selector IS NULL OR (length(target_selector) BETWEEN 1 AND 2000 AND target_selector = trim(target_selector))),
+    status_code INTEGER NOT NULL DEFAULT 1
+        CHECK (status_code IN (1, 2)),
+    field_values TEXT NOT NULL
+        CHECK (json_valid(field_values) AND json_type(field_values) = 'object'),
+    position TEXT NOT NULL
+        CHECK (json_valid(position) AND json_type(position) = 'object'),
+    app_version TEXT NOT NULL
+        CHECK (length(app_version) BETWEEN 1 AND 100 AND app_version = trim(app_version)),
+    author_id TEXT NOT NULL,
+    assignee_id TEXT,
+    integrations TEXT NOT NULL
+        CHECK (json_valid(integrations) AND json_type(integrations) = 'array'),
+    lock_version INTEGER NOT NULL DEFAULT 0
+        CHECK (lock_version >= 0),
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    CONSTRAINT fk_feedbacks_project
+        FOREIGN KEY (project_id) REFERENCES projects(project_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_feedbacks_author
+        FOREIGN KEY (author_id) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_feedbacks_assignee_membership
+        FOREIGN KEY (project_id, assignee_id) REFERENCES project_members(project_id, user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CHECK (
+        length(feedback_id) = 36
+        AND feedback_id = lower(feedback_id)
+        AND substr(feedback_id, 9, 1) = '-'
+        AND substr(feedback_id, 14, 1) = '-'
+        AND substr(feedback_id, 19, 1) = '-'
+        AND substr(feedback_id, 24, 1) = '-'
+        AND replace(feedback_id, '-', '') NOT GLOB '*[^0-9a-f]*'
+    )
+) STRICT;
+
+CREATE INDEX ix_feedbacks_markers
+    ON feedbacks (
+        project_id,
+        environment,
+        pathname_hash,
+        status_code,
+        created_at DESC,
+        feedback_id DESC
+    );
+
+CREATE INDEX ix_feedbacks_author_created_at
+    ON feedbacks (author_id, created_at DESC, feedback_id DESC);
+
+CREATE UNIQUE INDEX uq_feedbacks_project_environment_report_id
+    ON feedbacks (project_id, environment, report_id);
+
+CREATE INDEX ix_feedbacks_assignee_status
+    ON feedbacks (assignee_id, status_code, updated_at DESC, feedback_id DESC);
+
+CREATE TABLE report_cases (
+    report_case_id TEXT PRIMARY KEY,
+    feedback_id TEXT NOT NULL,
+    type_code INTEGER NOT NULL
+        CHECK (type_code BETWEEN 1 AND 4),
+    status_code INTEGER NOT NULL DEFAULT 1
+        CHECK (status_code IN (1, 2)),
+    content TEXT NOT NULL
+        CHECK (length(content) >= 1 AND content = trim(content)),
+    creator_id TEXT NOT NULL,
+    assignee_id TEXT,
+    lock_version INTEGER NOT NULL DEFAULT 0
+        CHECK (lock_version >= 0),
+    resolved_at TEXT,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    CONSTRAINT fk_report_cases_feedback
+        FOREIGN KEY (feedback_id) REFERENCES feedbacks(feedback_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_report_cases_creator
+        FOREIGN KEY (creator_id) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_report_cases_assignee
+        FOREIGN KEY (assignee_id) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CHECK (
+        (status_code = 1 AND resolved_at IS NULL)
+        OR (status_code = 2 AND resolved_at IS NOT NULL)
+    ),
+    CHECK (
+        length(report_case_id) = 36
+        AND report_case_id = lower(report_case_id)
+        AND substr(report_case_id, 9, 1) = '-'
+        AND substr(report_case_id, 14, 1) = '-'
+        AND substr(report_case_id, 19, 1) = '-'
+        AND substr(report_case_id, 24, 1) = '-'
+        AND replace(report_case_id, '-', '') NOT GLOB '*[^0-9a-f]*'
+    )
+) STRICT;
+
+CREATE INDEX ix_report_cases_feedback_status_created_at
+    ON report_cases (feedback_id, status_code, created_at DESC, report_case_id DESC);
+
+CREATE INDEX ix_report_cases_assignee_status
+    ON report_cases (assignee_id, status_code, updated_at DESC, report_case_id DESC);
+
+CREATE TABLE replies (
+    reply_id TEXT PRIMARY KEY,
+    type_code INTEGER NOT NULL
+        CHECK (type_code BETWEEN 1 AND 9),
+    status_code INTEGER NOT NULL DEFAULT 1
+        CHECK (status_code IN (1, 2)),
+    report_case_id TEXT NOT NULL,
+    parent_reply_id TEXT,
+    content TEXT NOT NULL
+        CHECK (length(content) BETWEEN 1 AND 10000 AND content = trim(content)),
+    author_id TEXT NOT NULL,
+    assignee_id TEXT,
+    previous_assignee_id TEXT,
+    lock_version INTEGER NOT NULL DEFAULT 0
+        CHECK (lock_version >= 0),
+    deleted_at TEXT,
+    created_at TEXT NOT NULL,
+    updated_at TEXT NOT NULL,
+    CONSTRAINT uq_replies_report_case_reply UNIQUE (report_case_id, reply_id),
+    CONSTRAINT fk_replies_report_case
+        FOREIGN KEY (report_case_id) REFERENCES report_cases(report_case_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_replies_parent
+        FOREIGN KEY (report_case_id, parent_reply_id)
+        REFERENCES replies(report_case_id, reply_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_replies_author
+        FOREIGN KEY (author_id) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_replies_assignee
+        FOREIGN KEY (assignee_id) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_replies_previous_assignee
+        FOREIGN KEY (previous_assignee_id) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CHECK (parent_reply_id IS NULL OR parent_reply_id <> reply_id),
+    CHECK (
+        (status_code = 1 AND deleted_at IS NULL)
+        OR (status_code = 2 AND deleted_at IS NOT NULL)
+    ),
+    CHECK (
+        length(reply_id) = 36
+        AND reply_id = lower(reply_id)
+        AND substr(reply_id, 9, 1) = '-'
+        AND substr(reply_id, 14, 1) = '-'
+        AND substr(reply_id, 19, 1) = '-'
+        AND substr(reply_id, 24, 1) = '-'
+        AND replace(reply_id, '-', '') NOT GLOB '*[^0-9a-f]*'
+    )
+) STRICT;
+
+CREATE INDEX ix_replies_report_case_created_at
+    ON replies (report_case_id, created_at, reply_id);
+
+CREATE INDEX ix_replies_parent
+    ON replies (parent_reply_id, created_at, reply_id);
+
+CREATE TABLE page_elements (
+    page_element_id TEXT PRIMARY KEY,
+    mention_id TEXT NOT NULL UNIQUE,
+    label TEXT NOT NULL
+        CHECK (length(label) BETWEEN 1 AND 200 AND label = trim(label) AND instr(label, char(0)) = 0),
+    data_report_id TEXT
+        CHECK (data_report_id IS NULL OR (length(data_report_id) BETWEEN 1 AND 255 AND data_report_id = trim(data_report_id) AND instr(data_report_id, char(0)) = 0)),
+    selector TEXT NOT NULL
+        CHECK (length(selector) BETWEEN 1 AND 2000 AND selector = trim(selector) AND instr(selector, char(0)) = 0),
+    created_by TEXT NOT NULL,
+    created_at TEXT NOT NULL,
+    CONSTRAINT fk_page_elements_creator
+        FOREIGN KEY (created_by) REFERENCES users(user_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CHECK (
+        length(page_element_id) = 36
+        AND page_element_id = lower(page_element_id)
+        AND substr(page_element_id, 9, 1) = '-'
+        AND substr(page_element_id, 14, 1) = '-'
+        AND substr(page_element_id, 19, 1) = '-'
+        AND substr(page_element_id, 24, 1) = '-'
+        AND replace(page_element_id, '-', '') NOT GLOB '*[^0-9a-f]*'
+    ),
+    CHECK (
+        length(mention_id) = 36
+        AND mention_id = lower(mention_id)
+        AND substr(mention_id, 9, 1) = '-'
+        AND substr(mention_id, 14, 1) = '-'
+        AND substr(mention_id, 19, 1) = '-'
+        AND substr(mention_id, 24, 1) = '-'
+        AND replace(mention_id, '-', '') NOT GLOB '*[^0-9a-f]*'
+    )
+) STRICT;
+
+CREATE TABLE report_case_page_elements (
+    report_case_id TEXT NOT NULL,
+    page_element_id TEXT NOT NULL,
+    CONSTRAINT pk_report_case_page_elements PRIMARY KEY (report_case_id, page_element_id),
+    CONSTRAINT fk_report_case_page_elements_case
+        FOREIGN KEY (report_case_id) REFERENCES report_cases(report_case_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_report_case_page_elements_element
+        FOREIGN KEY (page_element_id) REFERENCES page_elements(page_element_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT
+) STRICT;
+
+CREATE INDEX ix_report_case_page_elements_element
+    ON report_case_page_elements (page_element_id, report_case_id);
+
+CREATE TABLE reply_page_elements (
+    reply_id TEXT NOT NULL,
+    page_element_id TEXT NOT NULL,
+    CONSTRAINT pk_reply_page_elements PRIMARY KEY (reply_id, page_element_id),
+    CONSTRAINT fk_reply_page_elements_reply
+        FOREIGN KEY (reply_id) REFERENCES replies(reply_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT,
+    CONSTRAINT fk_reply_page_elements_element
+        FOREIGN KEY (page_element_id) REFERENCES page_elements(page_element_id)
+        ON UPDATE RESTRICT ON DELETE RESTRICT
+) STRICT;
+
+CREATE INDEX ix_reply_page_elements_element
+    ON reply_page_elements (page_element_id, reply_id);

package/dist/db/migrations/005_project_member_management.sql

@@ -0,0 +1,55 @@
+CREATE INDEX ix_project_members_project_joined_at
+    ON project_members (project_id, joined_at, user_id);
+
+CREATE INDEX ix_users_status_user_name
+    ON users (status_code, user_name, user_id);
+
+CREATE TRIGGER tr_project_members_keep_owner_on_update
+BEFORE UPDATE OF project_id, role_code ON project_members
+FOR EACH ROW
+WHEN OLD.role_code = 1
+ AND (NEW.project_id <> OLD.project_id OR NEW.role_code <> 1)
+ AND (
+     SELECT COUNT(*)
+     FROM project_members
+     WHERE project_id = OLD.project_id
+       AND role_code = 1
+ ) <= 1
+BEGIN
+    SELECT RAISE(ABORT, 'project-owner-required');
+END;
+
+CREATE TRIGGER tr_project_members_keep_owner_on_replace
+BEFORE INSERT ON project_members
+FOR EACH ROW
+WHEN NEW.role_code <> 1
+ AND EXISTS (
+     SELECT 1
+     FROM project_members
+     WHERE project_id = NEW.project_id
+       AND user_id = NEW.user_id
+       AND role_code = 1
+ )
+ AND (
+     SELECT COUNT(*)
+     FROM project_members
+     WHERE project_id = NEW.project_id
+       AND role_code = 1
+ ) <= 1
+BEGIN
+    SELECT RAISE(ABORT, 'project-owner-required');
+END;
+
+CREATE TRIGGER tr_project_members_keep_owner_on_delete
+BEFORE DELETE ON project_members
+FOR EACH ROW
+WHEN OLD.role_code = 1
+ AND (
+     SELECT COUNT(*)
+     FROM project_members
+     WHERE project_id = OLD.project_id
+       AND role_code = 1
+ ) <= 1
+BEGIN
+    SELECT RAISE(ABORT, 'project-owner-required');
+END;

package/dist/db/migrations/006_align_credentials.sql

@@ -0,0 +1,33 @@
+-- Preflight in migrate.ts rejects schema drift and inconsistent credential keys.
+-- Only this unreferenced child table is rebuilt. foreign_keys stays ON.
+CREATE TABLE local_credentials_v6 (
+    user_id                TEXT PRIMARY KEY
+,   login_id               TEXT COLLATE NOCASE NOT NULL
+,   email                  TEXT NOT NULL
+,   password_hash          TEXT NOT NULL
+,   failed_login_count     INTEGER NOT NULL DEFAULT 0
+,   locked_until           TEXT
+,   email_verified_at      TEXT
+,   password_changed_at    TEXT NOT NULL
+,   last_login_at          TEXT
+,   lock_version           INTEGER NOT NULL DEFAULT 0
+,   created_at             TEXT NOT NULL
+,   updated_at             TEXT NOT NULL
+,   CONSTRAINT fk_local_credentials_user FOREIGN KEY (user_id)
+        REFERENCES users (user_id) ON DELETE RESTRICT
+,   CHECK (login_id = trim(login_id) AND length(login_id) BETWEEN 4 AND 50)
+,   CHECK (substr(login_id, 1, 1) GLOB '[A-Za-z0-9]')
+,   CHECK (login_id NOT GLOB '*[^A-Za-z0-9._-]*')
+,   CHECK (email = trim(email) AND length(email) BETWEEN 3 AND 320)
+,   CHECK (password_hash = trim(password_hash) AND length(password_hash) BETWEEN 20 AND 512)
+,   CHECK (failed_login_count >= 0)
+,   CHECK (lock_version >= 0)
+) STRICT;
+
+INSERT INTO local_credentials_v6 (user_id, login_id, email, password_hash, failed_login_count, locked_until, email_verified_at, password_changed_at, last_login_at, lock_version, created_at, updated_at)
+SELECT user_id, login_id, email, password_hash, failed_login_count, locked_until, email_verified_at, password_changed_at, last_login_at, lock_version, created_at, updated_at FROM local_credentials;
+
+DROP TABLE local_credentials;
+ALTER TABLE local_credentials_v6 RENAME TO local_credentials;
+CREATE UNIQUE INDEX uq_local_credentials_login_id ON local_credentials (login_id);
+CREATE UNIQUE INDEX uq_local_credentials_email ON local_credentials (email);

package/dist/db/migrations/007_align_storage_values.sql

@@ -0,0 +1,78 @@
+-- Frozen v1 conversion functions are registered by migrate.ts.
+-- Preflight counts and validates the affected rows; no identifiers/versions/passwords change.
+
+UPDATE users
+SET created_at = fp_storage_timestamp_v1(created_at),
+    updated_at = fp_storage_timestamp_v1(updated_at)
+WHERE created_at IS NOT NULL OR updated_at IS NOT NULL;
+
+UPDATE local_credentials
+SET locked_until = fp_storage_timestamp_v1(locked_until),
+    email_verified_at = fp_storage_timestamp_v1(email_verified_at),
+    password_changed_at = fp_storage_timestamp_v1(password_changed_at),
+    last_login_at = fp_storage_timestamp_v1(last_login_at),
+    created_at = fp_storage_timestamp_v1(created_at),
+    updated_at = fp_storage_timestamp_v1(updated_at)
+WHERE locked_until IS NOT NULL OR email_verified_at IS NOT NULL OR password_changed_at IS NOT NULL OR last_login_at IS NOT NULL OR created_at IS NOT NULL OR updated_at IS NOT NULL;
+
+UPDATE auth_refresh_tokens
+SET expires_at = fp_storage_timestamp_v1(expires_at),
+    last_used_at = fp_storage_timestamp_v1(last_used_at),
+    revoked_at = fp_storage_timestamp_v1(revoked_at),
+    created_at = fp_storage_timestamp_v1(created_at)
+WHERE expires_at IS NOT NULL OR last_used_at IS NOT NULL OR revoked_at IS NOT NULL OR created_at IS NOT NULL;
+
+UPDATE projects
+SET created_at = fp_storage_timestamp_v1(created_at),
+    updated_at = fp_storage_timestamp_v1(updated_at)
+WHERE created_at IS NOT NULL OR updated_at IS NOT NULL;
+
+UPDATE project_members
+SET joined_at = fp_storage_timestamp_v1(joined_at),
+    updated_at = fp_storage_timestamp_v1(updated_at)
+WHERE joined_at IS NOT NULL OR updated_at IS NOT NULL;
+
+UPDATE feedbacks
+SET created_at = fp_storage_timestamp_v1(created_at),
+    updated_at = fp_storage_timestamp_v1(updated_at)
+WHERE created_at IS NOT NULL OR updated_at IS NOT NULL;
+
+UPDATE replies
+SET deleted_at = fp_storage_timestamp_v1(deleted_at),
+    created_at = fp_storage_timestamp_v1(created_at),
+    updated_at = fp_storage_timestamp_v1(updated_at)
+WHERE deleted_at IS NOT NULL OR created_at IS NOT NULL OR updated_at IS NOT NULL;
+
+UPDATE report_cases
+SET resolved_at = fp_storage_timestamp_v1(resolved_at),
+    created_at = fp_storage_timestamp_v1(created_at),
+    updated_at = fp_storage_timestamp_v1(updated_at)
+WHERE resolved_at IS NOT NULL OR created_at IS NOT NULL OR updated_at IS NOT NULL;
+
+UPDATE page_elements
+SET created_at = fp_storage_timestamp_v1(created_at)
+WHERE created_at IS NOT NULL;
+
+UPDATE feedbacks
+SET pathname_hash = fp_pathname_hash_v1(pathname)
+WHERE pathname_hash <> fp_pathname_hash_v1(pathname);
+
+-- Preserve paging performance for SQL Server-compatible GUID tie breakers.
+DROP INDEX ix_projects_status_created_at;
+CREATE INDEX ix_projects_status_created_at ON projects (status_code, created_at DESC, (substr(project_id, 25, 12) || substr(project_id, 20, 4) || substr(project_id, 17, 2) || substr(project_id, 15, 2) || substr(project_id, 12, 2) || substr(project_id, 10, 2) || substr(project_id, 7, 2) || substr(project_id, 5, 2) || substr(project_id, 3, 2) || substr(project_id, 1, 2)) DESC);
+DROP INDEX ix_projects_creator_created_at;
+CREATE INDEX ix_projects_creator_created_at ON projects (creator_id, created_at DESC, (substr(project_id, 25, 12) || substr(project_id, 20, 4) || substr(project_id, 17, 2) || substr(project_id, 15, 2) || substr(project_id, 12, 2) || substr(project_id, 10, 2) || substr(project_id, 7, 2) || substr(project_id, 5, 2) || substr(project_id, 3, 2) || substr(project_id, 1, 2)) DESC);
+DROP INDEX ix_project_members_project_joined_at;
+CREATE INDEX ix_project_members_project_joined_at ON project_members (project_id, joined_at, (substr(user_id, 25, 12) || substr(user_id, 20, 4) || substr(user_id, 17, 2) || substr(user_id, 15, 2) || substr(user_id, 12, 2) || substr(user_id, 10, 2) || substr(user_id, 7, 2) || substr(user_id, 5, 2) || substr(user_id, 3, 2) || substr(user_id, 1, 2)));
+DROP INDEX ix_feedbacks_markers;
+CREATE INDEX ix_feedbacks_markers ON feedbacks (project_id, environment, pathname_hash, status_code, created_at DESC, (substr(feedback_id, 25, 12) || substr(feedback_id, 20, 4) || substr(feedback_id, 17, 2) || substr(feedback_id, 15, 2) || substr(feedback_id, 12, 2) || substr(feedback_id, 10, 2) || substr(feedback_id, 7, 2) || substr(feedback_id, 5, 2) || substr(feedback_id, 3, 2) || substr(feedback_id, 1, 2)) DESC);
+DROP INDEX ix_feedbacks_author_created_at;
+CREATE INDEX ix_feedbacks_author_created_at ON feedbacks (author_id, created_at DESC, (substr(feedback_id, 25, 12) || substr(feedback_id, 20, 4) || substr(feedback_id, 17, 2) || substr(feedback_id, 15, 2) || substr(feedback_id, 12, 2) || substr(feedback_id, 10, 2) || substr(feedback_id, 7, 2) || substr(feedback_id, 5, 2) || substr(feedback_id, 3, 2) || substr(feedback_id, 1, 2)) DESC);
+DROP INDEX ix_report_cases_feedback_status_created_at;
+CREATE INDEX ix_report_cases_feedback_status_created_at ON report_cases (feedback_id, status_code, created_at DESC, (substr(report_case_id, 25, 12) || substr(report_case_id, 20, 4) || substr(report_case_id, 17, 2) || substr(report_case_id, 15, 2) || substr(report_case_id, 12, 2) || substr(report_case_id, 10, 2) || substr(report_case_id, 7, 2) || substr(report_case_id, 5, 2) || substr(report_case_id, 3, 2) || substr(report_case_id, 1, 2)) DESC);
+DROP INDEX ix_replies_report_case_created_at;
+CREATE INDEX ix_replies_report_case_created_at ON replies (report_case_id, created_at, (substr(reply_id, 25, 12) || substr(reply_id, 20, 4) || substr(reply_id, 17, 2) || substr(reply_id, 15, 2) || substr(reply_id, 12, 2) || substr(reply_id, 10, 2) || substr(reply_id, 7, 2) || substr(reply_id, 5, 2) || substr(reply_id, 3, 2) || substr(reply_id, 1, 2)));
+DROP INDEX ix_users_status_user_name;
+CREATE INDEX ix_users_status_user_name ON users (status_code, user_name, (substr(user_id, 25, 12) || substr(user_id, 20, 4) || substr(user_id, 17, 2) || substr(user_id, 15, 2) || substr(user_id, 12, 2) || substr(user_id, 10, 2) || substr(user_id, 7, 2) || substr(user_id, 5, 2) || substr(user_id, 3, 2) || substr(user_id, 1, 2)));
+CREATE INDEX ix_feedbacks_path_created_at ON feedbacks (project_id, environment, pathname_hash, created_at DESC, (substr(feedback_id, 25, 12) || substr(feedback_id, 20, 4) || substr(feedback_id, 17, 2) || substr(feedback_id, 15, 2) || substr(feedback_id, 12, 2) || substr(feedback_id, 10, 2) || substr(feedback_id, 7, 2) || substr(feedback_id, 5, 2) || substr(feedback_id, 3, 2) || substr(feedback_id, 1, 2)) DESC);
+CREATE INDEX ix_report_cases_feedback_created_at ON report_cases (feedback_id, created_at DESC, (substr(report_case_id, 25, 12) || substr(report_case_id, 20, 4) || substr(report_case_id, 17, 2) || substr(report_case_id, 15, 2) || substr(report_case_id, 12, 2) || substr(report_case_id, 10, 2) || substr(report_case_id, 7, 2) || substr(report_case_id, 5, 2) || substr(report_case_id, 3, 2) || substr(report_case_id, 1, 2)) DESC);

package/dist/db/storage-migration.d.ts

@@ -0,0 +1,9 @@
+import type { SqliteDatabase } from './connection.js';
+interface PriorMigration {
+    sql: string;
+    version: number;
+}
+export declare function assertDatabaseIntegrity(database: SqliteDatabase): void;
+export declare function prepareStorageMigration(database: SqliteDatabase, prior: PriorMigration[], version: number): () => void;
+export {};
+//# sourceMappingURL=storage-migration.d.ts.map

package/dist/db/storage-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migration.d.ts","sourceRoot":"","sources":["../../src/db/storage-migration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGtD,UAAU,cAAc;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAQzD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAKtE;AAID,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,cAAc,EAAE,EACvB,OAAO,EAAE,MAAM,GACd,MAAM,IAAI,CA0DZ"}

package/dist/db/storage-migration.js

@@ -0,0 +1,79 @@
+import BetterSqlite3 from 'better-sqlite3';
+import { pathnameHash, storageTimestamp } from '../storage/values.js';
+function schema(database) {
+    return database.prepare("SELECT name, type, sql FROM sqlite_schema WHERE name NOT LIKE 'sqlite_%' ORDER BY name, type").all();
+}
+export function assertDatabaseIntegrity(database) {
+    if (database.pragma('foreign_keys', { simple: true }) !== 1)
+        throw new Error('foreign-keys-required');
+    if (database.pragma('foreign_key_check').length !== 0)
+        throw new Error('foreign-key-check-failed');
+    const integrity = database.pragma('integrity_check');
+    if (integrity.length !== 1 || integrity[0]?.integrity_check !== 'ok')
+        throw new Error('integrity-check-failed');
+}
+// Reject unknown schema rather than dropping custom columns, indices, triggers or dependencies.
+// This guard runs under the same IMMEDIATE transaction as the migration itself.
+export function prepareStorageMigration(database, prior, version) {
+    assertDatabaseIntegrity(database);
+    const expected = new BetterSqlite3(':memory:');
+    try {
+        for (const migration of prior) {
+            if (migration.version < version)
+                expected.exec(migration.sql);
+        }
+        if (JSON.stringify(schema(expected)) !== JSON.stringify(schema(database))) {
+            throw new Error('unsupported-custom-schema');
+        }
+    }
+    finally {
+        expected.close();
+    }
+    if (version === 6) {
+        const credentials = database.prepare('SELECT login_id, normalized_login_id, email, normalized_email FROM local_credentials').iterate();
+        for (const row of credentials) {
+            if (row.normalized_login_id !== row.login_id.toLowerCase()
+                || row.normalized_email !== row.email || row.email !== row.email.trim().toLowerCase()) {
+                throw new Error('inconsistent-credential-keys');
+            }
+        }
+    }
+    const tables = schema(database).filter((row) => row.type === 'table' && row.name !== 'schema_migrations');
+    // Table/column names below have just been compared against bundled, trusted migrations.
+    const before = tables.map(({ name }) => ({
+        name,
+        count: database.prepare(`SELECT COUNT(*) AS count FROM "${name}"`).get().count,
+    }));
+    if (version === 7) {
+        for (const table of tables) {
+            const columns = database.prepare('SELECT name FROM pragma_table_xinfo(?)').all(table.name);
+            for (const { name } of columns.filter((column) => column.name.endsWith('_at') || column.name === 'locked_until')) {
+                for (const row of database.prepare(`SELECT "${name}" AS value FROM "${table.name}" WHERE "${name}" IS NOT NULL`).iterate()) {
+                    const value = row.value;
+                    storageTimestamp(value);
+                }
+            }
+        }
+        database.function('fp_storage_timestamp_v1', { deterministic: true }, (value) => {
+            if (value === null)
+                return null;
+            if (typeof value !== 'string')
+                throw new Error('invalid-storage-timestamp');
+            return storageTimestamp(value);
+        });
+        database.function('fp_pathname_hash_v1', { deterministic: true }, (value) => {
+            if (typeof value !== 'string')
+                throw new Error('invalid-storage-pathname');
+            return pathnameHash(value);
+        });
+    }
+    return () => {
+        for (const { name, count } of before) {
+            if (database.prepare(`SELECT COUNT(*) AS count FROM "${name}"`).get().count !== count) {
+                throw new Error('migration-row-count-mismatch');
+            }
+        }
+        assertDatabaseIntegrity(database);
+    };
+}
+//# sourceMappingURL=storage-migration.js.map

package/dist/db/storage-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-migration.js","sourceRoot":"","sources":["../../src/db/storage-migration.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAMtE,SAAS,MAAM,CAAC,QAAwB;IACtC,OAAO,QAAQ,CAAC,OAAO,CACrB,8FAA8F,CAC/F,CAAC,GAAG,EAAmB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAwB;IAC9D,IAAI,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACtG,IAAK,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAe,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAClH,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAuC,CAAC;IAC3F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAClH,CAAC;AAED,gGAAgG;AAChG,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,QAAwB,EACxB,KAAuB,EACvB,OAAe;IAEf,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,SAAS,CAAC,OAAO,GAAG,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAClC,sFAAsF,CACvF,CAAC,OAAO,EAA0G,CAAC;QACpH,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,mBAAmB,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE;mBACrD,GAAG,CAAC,gBAAgB,KAAK,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IAC1G,wFAAwF;IACxF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI;QACJ,KAAK,EAAG,QAAQ,CAAC,OAAO,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK;KACtG,CAAC,CAAC,CAAC;IACJ,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YACtH,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,EAAE,CAAC;gBACjH,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,oBAAoB,KAAK,CAAC,IAAI,YAAY,IAAI,eAAe,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC3H,MAAM,KAAK,GAAI,GAAyB,CAAC,KAAK,CAAC;oBAC/C,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,QAAQ,CAAC,yBAAyB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,KAAc,EAAE,EAAE;YACvF,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC5E,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,KAAc,EAAE,EAAE;YACnF,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC3E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;YACrC,IAAK,QAAQ,CAAC,OAAO,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC7G,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC"}

package/dist/db/transaction.d.ts

@@ -0,0 +1,9 @@
+import type { SqliteDatabase } from './connection.js';
+/** Shared synchronous transaction boundary; every participant uses this connection. */
+export declare class TransactionRunner {
+    private readonly database;
+    constructor(database: SqliteDatabase);
+    write<T>(operation: () => T): T;
+    read<T>(operation: () => T): T;
+}
+//# sourceMappingURL=transaction.d.ts.map

package/dist/db/transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../src/db/transaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,uFAAuF;AACvF,qBAAa,iBAAiB;IACT,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,cAAc;IAErD,KAAK,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;IAI/B,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;CAGtC"}

package/dist/db/transaction.js

@@ -0,0 +1,14 @@
+/** Shared synchronous transaction boundary; every participant uses this connection. */
+export class TransactionRunner {
+    database;
+    constructor(database) {
+        this.database = database;
+    }
+    write(operation) {
+        return this.database.transaction(operation).immediate();
+    }
+    read(operation) {
+        return this.database.transaction(operation)();
+    }
+}
+//# sourceMappingURL=transaction.js.map

package/dist/db/transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../src/db/transaction.ts"],"names":[],"mappings":"AAEA,uFAAuF;AACvF,MAAM,OAAO,iBAAiB;IACQ;IAApC,YAAoC,QAAwB;QAAxB,aAAQ,GAAR,QAAQ,CAAgB;IAAG,CAAC;IAEzD,KAAK,CAAI,SAAkB;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC;IAC1D,CAAC;IAEM,IAAI,CAAI,SAAkB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;IAChD,CAAC;CACF"}

package/dist/errors/error-handler.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyInstance } from 'fastify';
+export declare function registerErrorHandlers(app: FastifyInstance): void;
+//# sourceMappingURL=error-handler.d.ts.map

package/dist/errors/error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../src/errors/error-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAwC7E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAoChE"}

package/dist/errors/error-handler.js

@@ -0,0 +1,50 @@
+function sendError(reply, request, statusCode, code, message, details) {
+    void reply.code(statusCode).send({
+        error: {
+            code,
+            message,
+            requestId: request.id,
+            ...(details === undefined ? {} : { details }),
+        },
+    });
+}
+function errorDetails(error) {
+    return typeof error === 'object' && error !== null ? error : {};
+}
+function isSqliteBusy(error) {
+    const code = errorDetails(error).code;
+    return code === 'SQLITE_BUSY' || code === 'SQLITE_LOCKED';
+}
+export function registerErrorHandlers(app) {
+    app.setNotFoundHandler((request, reply) => {
+        sendError(reply, request, 404, 'NOT_FOUND', 'Resource not found.');
+    });
+    app.setErrorHandler((error, request, reply) => {
+        const knownError = errorDetails(error);
+        if (knownError.validation !== undefined) {
+            const details = knownError.validation.map((issue) => ({
+                path: issue.instancePath || '/',
+                message: issue.message ?? 'Invalid value.',
+            }));
+            sendError(reply, request, 400, 'VALIDATION_ERROR', 'Invalid request.', details);
+            return;
+        }
+        if (isSqliteBusy(error)) {
+            request.log.warn({ err: error }, 'SQLite is busy');
+            void reply.header('Retry-After', '1');
+            sendError(reply, request, 503, 'SERVICE_BUSY', 'Service is temporarily busy.');
+            return;
+        }
+        if (knownError.code === 'FST_ERR_CTP_BODY_TOO_LARGE') {
+            sendError(reply, request, 413, 'VALIDATION_ERROR', 'Request body is too large.');
+            return;
+        }
+        if (knownError.statusCode === 400) {
+            sendError(reply, request, 400, 'VALIDATION_ERROR', 'Invalid request.');
+            return;
+        }
+        request.log.error({ err: error }, 'Unhandled request error');
+        sendError(reply, request, 500, 'INTERNAL_ERROR', 'Internal server error.');
+    });
+}
+//# sourceMappingURL=error-handler.js.map

package/dist/errors/error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../src/errors/error-handler.ts"],"names":[],"mappings":"AAOA,SAAS,SAAS,CAChB,KAAmB,EACnB,OAAuB,EACvB,UAAkB,EAClB,IAAY,EACZ,OAAe,EACf,OAAuB;IAEvB,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QAC/B,KAAK,EAAE;YACL,IAAI;YACJ,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C;KACF,CAAC,CAAC;AACL,CAAC;AAQD,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;IACtC,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,eAAe,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAoB;IACxD,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACxC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpD,IAAI,EAAE,KAAK,CAAC,YAAY,IAAI,GAAG;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,gBAAgB;aAC3C,CAAC,CAAC,CAAC;YACJ,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACnD,KAAK,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YACtC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,8BAA8B,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACrD,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAClC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAC7D,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC"}