@knpkv/control-center 0.1.0

package/dist/server/server/persistence/repositories/pluginConfigurationRepository.d.ts

@@ -0,0 +1,179 @@
+import * as Context from "effect/Context";
+import * as Crypto from "effect/Crypto";
+import * as DateTime from "effect/DateTime";
+import * as Effect from "effect/Effect";
+import type { Success } from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Option from "effect/Option";
+import * as Schema from "effect/Schema";
+import { Database } from "../Database.js";
+import { PersistedRecordError, PersistenceOperationError } from "../errors.js";
+import { QuarantineRepository } from "./quarantineRepository.js";
+declare const makePluginConfigurationRepository: Effect.Effect<{
+    get: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">) => Effect.Effect<Option.Option<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly revision: Schema.Int;
+        readonly values: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"url", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"boolean", {
+            readonly value: Schema.Boolean;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"integer", {
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"select", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"secret-reference", {
+            readonly ref: Schema.brand<Schema.String, "SecretRef">;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>]>>;
+        readonly configurationDigest: Schema.brand<Schema.String, "BlobDigest">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">>, string | PersistenceOperationError | PersistedRecordError | import("../errors.js").QuarantineWriteError, never>;
+    update: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">, values: readonly (Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly ref: Schema.brand<Schema.String, "SecretRef">;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type">)[], expectedRevision: number, updatedAt: DateTime.Utc) => Effect.Effect<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly revision: Schema.Int;
+        readonly values: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"url", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"boolean", {
+            readonly value: Schema.Boolean;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"integer", {
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"select", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"secret-reference", {
+            readonly ref: Schema.brand<Schema.String, "SecretRef">;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>]>>;
+        readonly configurationDigest: Schema.brand<Schema.String, "BlobDigest">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">, unknown, never>;
+}, never, Crypto.Crypto | Database | QuarantineRepository>;
+/** Durable plugin-configuration service with CAS updates and opaque secret references. */
+export type PluginConfigurationRepositoryService = Success<typeof makePluginConfigurationRepository>;
+declare const PluginConfigurationRepository_base: Context.ServiceClass<PluginConfigurationRepository, "@knpkv/control-center/PluginConfigurationRepository", {
+    get: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">) => Effect.Effect<Option.Option<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly revision: Schema.Int;
+        readonly values: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"url", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"boolean", {
+            readonly value: Schema.Boolean;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"integer", {
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"select", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"secret-reference", {
+            readonly ref: Schema.brand<Schema.String, "SecretRef">;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>]>>;
+        readonly configurationDigest: Schema.brand<Schema.String, "BlobDigest">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">>, string | PersistenceOperationError | PersistedRecordError | import("../errors.js").QuarantineWriteError, never>;
+    update: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">, values: readonly (Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly ref: Schema.brand<Schema.String, "SecretRef">;
+        readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+    }, "Type">)[], expectedRevision: number, updatedAt: DateTime.Utc) => Effect.Effect<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly revision: Schema.Int;
+        readonly values: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"url", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"boolean", {
+            readonly value: Schema.Boolean;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"integer", {
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"select", {
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>, Schema.TaggedStruct<"secret-reference", {
+            readonly ref: Schema.brand<Schema.String, "SecretRef">;
+            readonly key: Schema.brand<Schema.String, "StoredPluginConfigurationKey">;
+        }>]>>;
+        readonly configurationDigest: Schema.brand<Schema.String, "BlobDigest">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">, unknown, never>;
+}>;
+/** Effect service for revisioned plugin configuration. */
+export declare class PluginConfigurationRepository extends PluginConfigurationRepository_base {
+    static readonly layer: Layer.Layer<PluginConfigurationRepository, never, Crypto.Crypto | Database | QuarantineRepository>;
+}
+export {};
+//# sourceMappingURL=pluginConfigurationRepository.d.ts.map

package/dist/server/server/persistence/repositories/pluginConfigurationRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginConfigurationRepository.d.ts","sourceRoot":"","sources":["../../../../../src/server/persistence/repositories/pluginConfigurationRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAIvC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EAG1B,MAAM,cAAc,CAAA;AAQrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAiBhE,QAAA,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0DAoLrC,CAAA;AAEF,0FAA0F;AAC1F,MAAM,MAAM,oCAAoC,GAAG,OAAO,CAAC,OAAO,iCAAiC,CAAC,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEpG,0DAA0D;AAC1D,qBAAa,6BAA8B,SAAQ,kCAGO;IACxD,MAAM,CAAC,QAAQ,CAAC,KAAK,qGAAiF;CACvG"}

package/dist/server/server/persistence/repositories/pluginConnectionRepository.d.ts

@@ -0,0 +1,123 @@
+import * as Context from "effect/Context";
+import * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import type { Success } from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Schema from "effect/Schema";
+import { PluginConnectionId } from "../../../domain/identifiers.js";
+import { ProviderId } from "../../../domain/sourceRevision.js";
+import { UtcTimestamp } from "../../../domain/utcTimestamp.js";
+import { Database } from "../Database.js";
+import { PersistedRecordError, PluginConnectionLimitError, RecordNotFoundError } from "../errors.js";
+import { PluginConnectionDisplayName, RecordRevision } from "./models.js";
+import { QuarantineRepository } from "./quarantineRepository.js";
+declare const makePluginConnectionRepository: Effect.Effect<{
+    create: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, input: {
+        readonly pluginConnectionId: PluginConnectionId;
+        readonly providerId: ProviderId;
+        readonly displayName: PluginConnectionDisplayName;
+        readonly isEnabled: boolean;
+        readonly createdAt: UtcTimestamp;
+    }) => Effect.Effect<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>;
+        readonly followedResourceId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.brand<Schema.String, "PluginConnectionDisplayName">;
+        readonly isEnabled: Schema.Boolean;
+        readonly revision: Schema.brand<Schema.Number, "RecordRevision">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">, Schema.SchemaError | RecordNotFoundError | import("../errors.js").RecordAlreadyExistsError | import("../errors.js").PersistenceOperationError | PersistedRecordError | import("../errors.js").QuarantineWriteError, never>;
+    createBounded: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, input: {
+        readonly pluginConnectionId: PluginConnectionId;
+        readonly providerId: ProviderId;
+        readonly displayName: PluginConnectionDisplayName;
+        readonly isEnabled: boolean;
+        readonly createdAt: UtcTimestamp;
+        readonly maximum: number;
+    }) => Effect.Effect<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>;
+        readonly followedResourceId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.brand<Schema.String, "PluginConnectionDisplayName">;
+        readonly isEnabled: Schema.Boolean;
+        readonly revision: Schema.brand<Schema.Number, "RecordRevision">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">, Schema.SchemaError | RecordNotFoundError | import("../errors.js").RecordAlreadyExistsError | PluginConnectionLimitError | import("../errors.js").PersistenceOperationError | PersistedRecordError | import("../errors.js").QuarantineWriteError, never>;
+    get: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">) => Effect.Effect<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>;
+        readonly followedResourceId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.brand<Schema.String, "PluginConnectionDisplayName">;
+        readonly isEnabled: Schema.Boolean;
+        readonly revision: Schema.brand<Schema.Number, "RecordRevision">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">, Schema.SchemaError | RecordNotFoundError | import("../errors.js").PersistenceOperationError | PersistedRecordError | import("../errors.js").QuarantineWriteError, never>;
+    list: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">) => Effect.Effect<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>;
+        readonly followedResourceId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.brand<Schema.String, "PluginConnectionDisplayName">;
+        readonly isEnabled: Schema.Boolean;
+        readonly revision: Schema.brand<Schema.Number, "RecordRevision">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">[], Schema.SchemaError | import("../errors.js").PersistenceOperationError | import("../errors.js").QuarantineWriteError, never>;
+    updateMetadata: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">, input: {
+        readonly displayName: PluginConnectionDisplayName;
+        readonly isEnabled: boolean;
+        readonly expectedRevision: RecordRevision;
+        readonly updatedAt: UtcTimestamp;
+    }) => Effect.Effect<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>;
+        readonly followedResourceId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.brand<Schema.String, "PluginConnectionDisplayName">;
+        readonly isEnabled: Schema.Boolean;
+        readonly revision: Schema.brand<Schema.Number, "RecordRevision">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">, unknown, never>;
+    bindResource: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">, pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">, input: Omit<Schema.Struct.ReadonlySide<{
+        readonly providerAccountId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">;
+        readonly followedResourceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">;
+        readonly expectedRevision: Schema.brand<Schema.Number, "RecordRevision">;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    }, "Type">, "pluginConnectionId" | "workspaceId">) => Effect.Effect<Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>;
+        readonly followedResourceId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.brand<Schema.String, "PluginConnectionDisplayName">;
+        readonly isEnabled: Schema.Boolean;
+        readonly revision: Schema.brand<Schema.Number, "RecordRevision">;
+        readonly createdAt: Schema.DateTimeUtcFromString;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }, "Type">, unknown, never>;
+}, never, Crypto.Crypto | Database | QuarantineRepository>;
+/** Workspace-isolated plugin-connection persistence without secret material. */
+export interface PluginConnectionRepositoryService extends Success<typeof makePluginConnectionRepository> {
+}
+declare const PluginConnectionRepository_base: Context.ServiceClass<PluginConnectionRepository, "@knpkv/control-center/PluginConnectionRepository", PluginConnectionRepositoryService>;
+/** Effect service for plugin-connection metadata. */
+export declare class PluginConnectionRepository extends PluginConnectionRepository_base {
+    /** Layer that binds SQL queries to the shared database at construction. */
+    static readonly layer: Layer.Layer<PluginConnectionRepository, never, Crypto.Crypto | Database | QuarantineRepository>;
+}
+export {};
+//# sourceMappingURL=pluginConnectionRepository.d.ts.map

package/dist/server/server/persistence/repositories/pluginConnectionRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginConnectionRepository.d.ts","sourceRoot":"","sources":["../../../../../src/server/persistence/repositories/pluginConnectionRepository.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,OAAO,EAAsB,kBAAkB,EAAkC,MAAM,gCAAgC,CAAA;AACvH,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAA;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAQpG,OAAO,EAAE,2BAA2B,EAA0B,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAyDhE,QAAA,MAAM,8BAA8B;;qCAwFC,kBAAkB;6BAC1B,UAAU;8BACT,2BAA2B;4BAC7B,OAAO;4BACP,YAAY;;;;;;;;;;;;;;qCAgBH,kBAAkB;6BAC1B,UAAU;8BACT,2BAA2B;4BAC7B,OAAO;4BACP,YAAY;0BACd,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BA4CF,2BAA2B;4BAC7B,OAAO;mCACA,cAAc;4BACrB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0DAoCtC,CAAA;AAEF,gFAAgF;AAChF,MAAM,WAAW,iCAAkC,SAAQ,OAAO,CAAC,OAAO,8BAA8B,CAAC;CAAG;;AAE5G,qDAAqD;AACrD,qBAAa,0BAA2B,SAAQ,+BAGO;IACrD,2EAA2E;IAC3E,MAAM,CAAC,QAAQ,CAAC,KAAK,kGAA2E;CACjG"}

package/dist/server/server/persistence/repositories/pluginRuntimeModels.d.ts

@@ -0,0 +1,195 @@
+import * as Schema from "effect/Schema";
+/** Stable logical collection synchronized through one checkpoint. */
+export declare const PluginStreamKey: Schema.brand<Schema.String, "PluginStreamKey">;
+export type PluginStreamKey = typeof PluginStreamKey.Type;
+/** Provider page identity used for idempotent commits. */
+export declare const PluginPageId: Schema.brand<Schema.String, "PluginPageId">;
+export type PluginPageId = typeof PluginPageId.Type;
+/** Stable provider record identity within one stream. */
+export declare const PluginRecordKey: Schema.brand<Schema.String, "PluginRecordKey">;
+export type PluginRecordKey = typeof PluginRecordKey.Type;
+export declare const DescriptorCandidate: Schema.Struct<{
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly schemaVersion: Schema.Int;
+    readonly descriptorJson: Schema.String;
+}>;
+export type DescriptorCandidate = typeof DescriptorCandidate.Type;
+export declare const PluginRuntimeRecord: Schema.Struct<{
+    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly revision: Schema.Int;
+    readonly descriptorGeneration: Schema.Int;
+    readonly descriptorSchemaVersion: Schema.Int;
+    readonly descriptorJson: Schema.String;
+    readonly descriptorDigest: Schema.brand<Schema.String, "BlobDigest">;
+    readonly acceptedAt: Schema.DateTimeUtcFromString;
+    readonly health: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"degraded">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"unavailable">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.TaggedStruct<"disabled", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>]>;
+    readonly consecutiveFailures: Schema.Int;
+}>;
+export type PluginRuntimeRecord = typeof PluginRuntimeRecord.Type;
+export declare const PluginSyncEvent: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"upsert", {
+    readonly payloadJson: Schema.String;
+    readonly eventId: Schema.String;
+    readonly eventJson: Schema.String;
+    readonly recordKey: Schema.brand<Schema.String, "PluginRecordKey">;
+    readonly sourceRevision: Schema.brand<Schema.String, "Revision">;
+    readonly observedAt: Schema.DateTimeUtcFromString;
+}>, Schema.TaggedStruct<"tombstone", {
+    eventId: Schema.String;
+    eventJson: Schema.String;
+    recordKey: Schema.brand<Schema.String, "PluginRecordKey">;
+    sourceRevision: Schema.brand<Schema.String, "Revision">;
+    observedAt: Schema.DateTimeUtcFromString;
+}>]>;
+export type PluginSyncEvent = typeof PluginSyncEvent.Type;
+export declare const PluginSyncPage: Schema.Struct<{
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly streamKey: Schema.brand<Schema.String, "PluginStreamKey">;
+    readonly pageId: Schema.brand<Schema.String, "PluginPageId">;
+    readonly expectedRevision: Schema.Int;
+    readonly checkpointJson: Schema.String;
+    readonly hasMore: Schema.Boolean;
+    readonly successfulHealth: Schema.Union<readonly [Schema.TaggedStruct<"healthy", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"degraded">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"unavailable">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.TaggedStruct<"disabled", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>]>;
+    readonly committedAt: Schema.DateTimeUtcFromString;
+    readonly events: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"upsert", {
+        readonly payloadJson: Schema.String;
+        readonly eventId: Schema.String;
+        readonly eventJson: Schema.String;
+        readonly recordKey: Schema.brand<Schema.String, "PluginRecordKey">;
+        readonly sourceRevision: Schema.brand<Schema.String, "Revision">;
+        readonly observedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.TaggedStruct<"tombstone", {
+        eventId: Schema.String;
+        eventJson: Schema.String;
+        recordKey: Schema.brand<Schema.String, "PluginRecordKey">;
+        sourceRevision: Schema.brand<Schema.String, "Revision">;
+        observedAt: Schema.DateTimeUtcFromString;
+    }>]>>;
+}>;
+export type PluginSyncPage = typeof PluginSyncPage.Type;
+export declare const PluginStreamRecord: Schema.Struct<{
+    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly streamKey: Schema.brand<Schema.String, "PluginStreamKey">;
+    readonly revision: Schema.Int;
+    readonly checkpointJson: Schema.NullOr<Schema.String>;
+    readonly checkpointDigest: Schema.NullOr<Schema.brand<Schema.String, "BlobDigest">>;
+    readonly lastPageId: Schema.NullOr<Schema.brand<Schema.String, "PluginPageId">>;
+    readonly synchronizedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+}>;
+export type PluginStreamRecord = typeof PluginStreamRecord.Type;
+/** Durable terminal classification for one fake-plugin synchronization attempt. */
+export declare const PluginSyncAttemptOutcome: Schema.Literals<readonly ["synchronized", "source-unavailable", "interrupted"]>;
+export type PluginSyncAttemptOutcome = typeof PluginSyncAttemptOutcome.Type;
+/** Terminal outcome that a normal synchronization invocation may record directly. */
+export declare const PluginSyncCompletionOutcome: Schema.Literals<readonly ["synchronized", "source-unavailable"]>;
+export type PluginSyncCompletionOutcome = typeof PluginSyncCompletionOutcome.Type;
+/** Append-only synchronization attempt with its optional immutable completion. */
+export declare const PluginSyncAttemptRecord: Schema.Struct<{
+    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly streamKey: Schema.brand<Schema.String, "PluginStreamKey">;
+    readonly attemptSequence: Schema.Int;
+    readonly startedRevision: Schema.Int;
+    readonly startedAt: Schema.DateTimeUtcFromString;
+    readonly outcome: Schema.NullOr<Schema.Literals<readonly ["synchronized", "source-unavailable", "interrupted"]>>;
+    readonly endingRevision: Schema.NullOr<Schema.Int>;
+    readonly pagesCommitted: Schema.NullOr<Schema.Int>;
+    readonly completedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+}>;
+export type PluginSyncAttemptRecord = typeof PluginSyncAttemptRecord.Type;
+/** Bounded materialization of the attempt records needed for current synchronization state. */
+export declare const PluginSyncAttemptState: Schema.Struct<{
+    readonly latestAttempt: Schema.NullOr<Schema.Struct<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly streamKey: Schema.brand<Schema.String, "PluginStreamKey">;
+        readonly attemptSequence: Schema.Int;
+        readonly startedRevision: Schema.Int;
+        readonly startedAt: Schema.DateTimeUtcFromString;
+        readonly outcome: Schema.NullOr<Schema.Literals<readonly ["synchronized", "source-unavailable", "interrupted"]>>;
+        readonly endingRevision: Schema.NullOr<Schema.Int>;
+        readonly pagesCommitted: Schema.NullOr<Schema.Int>;
+        readonly completedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    }>>;
+    readonly latestSynchronized: Schema.NullOr<Schema.Struct<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly streamKey: Schema.brand<Schema.String, "PluginStreamKey">;
+        readonly attemptSequence: Schema.Int;
+        readonly startedRevision: Schema.Int;
+        readonly startedAt: Schema.DateTimeUtcFromString;
+        readonly outcome: Schema.NullOr<Schema.Literals<readonly ["synchronized", "source-unavailable", "interrupted"]>>;
+        readonly endingRevision: Schema.NullOr<Schema.Int>;
+        readonly pagesCommitted: Schema.NullOr<Schema.Int>;
+        readonly completedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    }>>;
+}>;
+export type PluginSyncAttemptState = typeof PluginSyncAttemptState.Type;
+export declare const PluginCacheRecord: Schema.Struct<{
+    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly streamKey: Schema.brand<Schema.String, "PluginStreamKey">;
+    readonly recordKey: Schema.brand<Schema.String, "PluginRecordKey">;
+    readonly state: Schema.Literals<readonly ["present", "tombstoned"]>;
+    readonly payloadJson: Schema.NullOr<Schema.String>;
+    readonly payloadDigest: Schema.NullOr<Schema.brand<Schema.String, "BlobDigest">>;
+    readonly sourceRevision: Schema.brand<Schema.String, "Revision">;
+    readonly lastPageId: Schema.brand<Schema.String, "PluginPageId">;
+    readonly cachedAt: Schema.DateTimeUtcFromString;
+    readonly tombstonedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+}>;
+export type PluginCacheRecord = typeof PluginCacheRecord.Type;
+export declare const PluginEvidenceRecord: Schema.Struct<{
+    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly streamKey: Schema.brand<Schema.String, "PluginStreamKey">;
+    readonly pageId: Schema.brand<Schema.String, "PluginPageId">;
+    readonly ordinal: Schema.Int;
+    readonly eventId: Schema.String;
+    readonly eventDigest: Schema.brand<Schema.String, "BlobDigest">;
+    readonly eventKind: Schema.Literals<readonly ["upsert", "tombstone"]>;
+    readonly recordKey: Schema.brand<Schema.String, "PluginRecordKey">;
+    readonly sourceRevision: Schema.brand<Schema.String, "Revision">;
+    readonly payloadJson: Schema.String;
+    readonly observedAt: Schema.DateTimeUtcFromString;
+}>;
+export type PluginEvidenceRecord = typeof PluginEvidenceRecord.Type;
+//# sourceMappingURL=pluginRuntimeModels.d.ts.map

package/dist/server/server/persistence/repositories/pluginRuntimeModels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginRuntimeModels.d.ts","sourceRoot":"","sources":["../../../../../src/server/persistence/repositories/pluginRuntimeModels.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAoBvC,qEAAqE;AACrE,eAAO,MAAM,eAAe,gDAAqD,CAAA;AACjF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,0DAA0D;AAC1D,eAAO,MAAM,YAAY,6CAAkD,CAAA;AAC3E,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAA;AAEnD,yDAAyD;AACzD,eAAO,MAAM,eAAe,gDAAqD,CAAA;AACjF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,eAAO,MAAM,mBAAmB;;;;EAI9B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;AAEjE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY9B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;AAUjE,eAAO,MAAM,eAAe;;;;;;;;;;;;;IAMS,CAAA;AACrC,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBzB,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAA;AAEvD,eAAO,MAAM,kBAAkB;;;;;;;;;;EAkB9B,CAAA;AACD,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAA;AAE/D,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,iFAAyE,CAAA;AAC9G,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,qFAAqF;AACrF,eAAO,MAAM,2BAA2B,kEAA0D,CAAA;AAClG,MAAM,MAAM,2BAA2B,GAAG,OAAO,2BAA2B,CAAC,IAAI,CAAA;AAEjF,kFAAkF;AAClF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;EAsBnC,CAAA;AACD,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,+FAA+F;AAC/F,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGjC,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAqB7B,CAAA;AACD,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAA;AAE7D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;EAa/B,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAA"}