@noodleseed/one 0.10.0 → 0.11.0

package/node_modules/@noodle-borg/service/dist/store/postgres-rows.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Row shapes + row↔record mapping for the relational store (extracted verbatim from `postgres.ts`
+ * to keep that file under the size gate). Pure mapping/validation — no SQL here.
+ */
+import type { HostedPackagedAsset } from '@noodle-borg/compiler';
+import type { SecretBox } from '@noodle-borg/runtime';
+import type { ConfigScope, ConfigValueMetadata, DeployRecord, ManagedConfigKind, SecretEnvelope } from '../store.js';
+import type { PostgresStoreOptions } from './postgres.js';
+/** The on-disk-equivalent row shape. `created_at` comes back as a `Date`; `secrets` is parsed `jsonb`. */
+export interface DeployRow {
+    readonly deployment_id: string;
+    readonly org_slug: string;
+    readonly app_slug: string;
+    readonly environment: string;
+    readonly server_version: string | null;
+    readonly deployment_version: string | number;
+    readonly active: boolean;
+    readonly server_name: string;
+    readonly created_at: Date;
+    readonly created_by_subject: string | null;
+    readonly created_by_email: string | null;
+    readonly access_mode: string | null;
+    readonly server_auth: unknown | null;
+    readonly caller_key_hash: string | null;
+    readonly manifest: string;
+    readonly connectors: string | null;
+    readonly hosted_assets: readonly HostedPackagedAsset[] | null;
+    readonly secrets: SecretEnvelope;
+    readonly schema_version: number;
+    /** App soft-delete stamp (ADR 0117); `NULL` for live records. */
+    readonly archived_at: Date | null;
+}
+export interface ConfigRow {
+    readonly kind: ManagedConfigKind;
+    readonly scope_level: string;
+    readonly org_slug: string;
+    readonly app_slug: string;
+    readonly environment: string;
+    readonly name: string;
+    readonly secret_value: SecretEnvelope | null;
+    readonly variable_value: string | null;
+    readonly updated_at: Date;
+    readonly updated_by_subject: string | null;
+    readonly updated_by_email: string | null;
+}
+export declare function rowToRecord(row: DeployRow): DeployRecord;
+export declare function configRowToMetadata(row: ConfigRow): ConfigValueMetadata;
+export declare function isTenantAuthConfig(value: unknown): value is NonNullable<DeployRecord['serverAuth']>;
+export declare function validateConfigKind(kind: ManagedConfigKind): ManagedConfigKind;
+export declare function scopeParts(scope: ConfigScope): {
+    readonly level: ConfigScope['level'];
+    readonly org: string;
+    readonly app: string;
+    readonly env: string;
+};
+export declare function rowToScope(row: ConfigRow): ConfigScope;
+export declare function sealConfigSecret(value: string, secretBox: SecretBox | undefined): Promise<SecretEnvelope>;
+export declare function openConfigSecret(envelope: SecretEnvelope | null, secretBox: SecretBox | undefined): Promise<string>;
+export declare function isPostgresStoreOptions(value: SecretBox | PostgresStoreOptions | undefined): value is PostgresStoreOptions;
+//# sourceMappingURL=postgres-rows.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/postgres-rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-rows.d.ts","sourceRoot":"","sources":["../../src/store/postgres-rows.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EACV,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,0GAA0G;AAC1G,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,SAAS,mBAAmB,EAAE,GAAG,IAAI,CAAC;IAC9D,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,iEAAiE;IACjE,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,cAAc,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,GAAG,YAAY,CAiCxD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,mBAAmB,CAYvE;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,WAAW,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAUlD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CAG7E;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG;IAC9C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAIA;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,SAAS,GAAG,WAAW,CAOtD;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,SAAS,GAAG,SAAS,GAC/B,OAAO,CAAC,cAAc,CAAC,CAKzB;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,cAAc,GAAG,IAAI,EAC/B,SAAS,EAAE,SAAS,GAAG,SAAS,GAC/B,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,SAAS,GAClD,KAAK,IAAI,oBAAoB,CAE/B"}

package/node_modules/@noodle-borg/service/dist/store/postgres-rows.js

@@ -0,0 +1,101 @@
+export function rowToRecord(row) {
+    return {
+        schemaVersion: row.schema_version,
+        deploymentId: row.deployment_id,
+        orgSlug: row.org_slug,
+        appSlug: row.app_slug,
+        environment: row.environment,
+        ...(row.server_version !== null ? { serverVersion: row.server_version } : {}),
+        // `Date.now()` ms timestamps fit JS's safe-integer range, so the bigint string coerces losslessly.
+        deploymentVersion: Number(row.deployment_version),
+        active: row.active,
+        serverName: row.server_name,
+        // timestamptz → the canonical ISO-8601 string the rest of the system uses.
+        createdAt: new Date(row.created_at).toISOString(),
+        ...(row.created_by_subject !== null ? { createdBySubject: row.created_by_subject } : {}),
+        ...(row.created_by_email !== null ? { createdByEmail: row.created_by_email } : {}),
+        ...(row.access_mode === 'owner-only' ||
+            row.access_mode === 'org-members' ||
+            row.access_mode === 'public' ||
+            row.access_mode === 'mixed' ||
+            row.access_mode === 'authenticated' ||
+            row.access_mode === 'customers'
+            ? { accessMode: row.access_mode }
+            : {}),
+        ...(isTenantAuthConfig(row.server_auth) ? { serverAuth: row.server_auth } : {}),
+        manifest: row.manifest,
+        ...(row.connectors !== null ? { connectors: row.connectors } : {}),
+        ...(row.hosted_assets !== null ? { hostedAssets: row.hosted_assets } : {}),
+        secrets: row.secrets,
+        ...(row.archived_at !== null && row.archived_at !== undefined
+            ? { archivedAt: new Date(row.archived_at).toISOString() }
+            : {}),
+    };
+}
+export function configRowToMetadata(row) {
+    return {
+        kind: validateConfigKind(row.kind),
+        scope: rowToScope(row),
+        name: row.name,
+        updatedAt: new Date(row.updated_at).toISOString(),
+        ...(row.updated_by_subject !== null ? { updatedBySubject: row.updated_by_subject } : {}),
+        ...(row.updated_by_email !== null ? { updatedByEmail: row.updated_by_email } : {}),
+        ...(row.kind === 'variable' && row.variable_value !== null
+            ? { value: row.variable_value }
+            : {}),
+    };
+}
+export function isTenantAuthConfig(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const auth = value;
+    if (auth.kind === 'bridge')
+        return typeof auth.provider === 'string';
+    return typeof auth.issuer === 'string' && typeof auth.audience === 'string';
+}
+export function validateConfigKind(kind) {
+    if (kind !== 'secret' && kind !== 'variable')
+        throw new Error(`invalid config kind: ${kind}`);
+    return kind;
+}
+export function scopeParts(scope) {
+    if (scope.level === 'org')
+        return { level: 'org', org: scope.org, app: '', env: '' };
+    if (scope.level === 'app')
+        return { level: 'app', org: scope.org, app: scope.app, env: '' };
+    return { level: 'env', org: scope.org, app: scope.app, env: scope.env };
+}
+export function rowToScope(row) {
+    if (row.scope_level === 'org')
+        return { level: 'org', org: row.org_slug };
+    if (row.scope_level === 'app')
+        return { level: 'app', org: row.org_slug, app: row.app_slug };
+    if (row.scope_level === 'env') {
+        return { level: 'env', org: row.org_slug, app: row.app_slug, env: row.environment };
+    }
+    throw new Error(`invalid config scope_level: ${row.scope_level}`);
+}
+export async function sealConfigSecret(value, secretBox) {
+    if (secretBox === undefined) {
+        throw new Error('durable secret config requires a secret master-key custodian');
+    }
+    return { enc: 'aes-256-gcm', sealed: await secretBox.seal(value) };
+}
+export async function openConfigSecret(envelope, secretBox) {
+    if (envelope === null)
+        throw new Error('secret config row has no encrypted value');
+    if (envelope.enc === 'none') {
+        const value = envelope.values.value;
+        if (typeof value !== 'string')
+            throw new Error('legacy secret config row has no value');
+        return value;
+    }
+    if (secretBox === undefined) {
+        throw new Error('cannot resolve encrypted config without a secret master-key custodian');
+    }
+    return secretBox.open(envelope.sealed);
+}
+export function isPostgresStoreOptions(value) {
+    return typeof value === 'object' && value !== null && ('secretBox' in value || 'now' in value);
+}
+//# sourceMappingURL=postgres-rows.js.map

package/node_modules/@noodle-borg/service/dist/store/postgres-rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-rows.js","sourceRoot":"","sources":["../../src/store/postgres-rows.ts"],"names":[],"mappings":"AAuDA,MAAM,UAAU,WAAW,CAAC,GAAc;IACxC,OAAO;QACL,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,mGAAmG;QACnG,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACjD,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,2EAA2E;QAC3E,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,YAAY;YACpC,GAAG,CAAC,WAAW,KAAK,aAAa;YACjC,GAAG,CAAC,WAAW,KAAK,QAAQ;YAC5B,GAAG,CAAC,WAAW,KAAK,OAAO;YAC3B,GAAG,CAAC,WAAW,KAAK,eAAe;YACnC,GAAG,CAAC,WAAW,KAAK,WAAW;YAC7B,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;YACjC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;YAC3D,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAc;IAChD,OAAO;QACL,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;QAClC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI;YACxD,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,cAAc,EAAE;YAC/B,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,KAKZ,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACrE,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAkB;IAM3C,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACrF,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAc;IACvC,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC1E,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7F,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,SAAgC;IAEhC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA+B,EAC/B,SAAgC;IAEhC,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACnF,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAmD;IAEnD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,KAAK,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC;AACjG,CAAC"}

package/node_modules/@noodle-borg/service/dist/store/postgres-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-schema.d.ts","sourceRoot":"","sources":["../../src/store/postgres-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CA0LpE"}
+{"version":3,"file":"postgres-schema.d.ts","sourceRoot":"","sources":["../../src/store/postgres-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAkMpE"}

package/node_modules/@noodle-borg/service/dist/store/postgres-schema.js

@@ -117,6 +117,14 @@ export async function ensureArtifactSchema(pool) {
     // `deployment_version` holds `Date.now()` (a 13-digit ms timestamp), which overflows a 32-bit `int`.
     // Widen in place (idempotent; no data loss) so existing `int` columns become `bigint`.
     await pool.query(`ALTER TABLE deploy_records ALTER COLUMN deployment_version TYPE bigint`);
+    // App soft-delete stamp (ADR 0117): additive + idempotent so existing alpha tables gain the column
+    // on next boot. NULL = live; the partial index keeps sweeper scans cheap.
+    await pool.query(`ALTER TABLE deploy_records ADD COLUMN IF NOT EXISTS archived_at timestamptz`);
+    await pool.query(`
+      CREATE INDEX IF NOT EXISTS deploy_records_archived_sweep
+      ON deploy_records(archived_at)
+      WHERE archived_at IS NOT NULL
+    `);
     await pool.query(`DROP INDEX IF EXISTS deploy_records_one_active_env`);
     await pool.query(`
       CREATE UNIQUE INDEX IF NOT EXISTS deploy_records_one_active_legacy_env

package/node_modules/@noodle-borg/service/dist/store/postgres-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-schema.js","sourceRoot":"","sources":["../../src/store/postgres-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAU;IACnD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;KAMd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;KASd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;KAUd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;KAQd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;KAYd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;KAGd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;KAQd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;KASd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;KAuBd,CAAC,CAAC;IACL,mGAAmG;IACnG,gDAAgD;IAChD,MAAM,IAAI,CAAC,KAAK,CACd,oGAAoG,CACrG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC5F,kGAAkG;IAClG,8FAA8F;IAC9F,MAAM,IAAI,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC5F,MAAM,IAAI,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC1F,qGAAqG;IACrG,uFAAuF;IACvF,MAAM,IAAI,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC3F,MAAM,IAAI,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;KAGd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;KAGd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;KAed,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;KAgBd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAClG,MAAM,IAAI,CAAC,KAAK,CACd,+FAA+F,CAChG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,+FAA+F,CAChG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,kGAAkG,CACnG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;IACjG,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"postgres-schema.js","sourceRoot":"","sources":["../../src/store/postgres-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAU;IACnD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;KAMd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;KASd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;KAUd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;KAQd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;KAYd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;KAGd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;KAQd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;KASd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;KAuBd,CAAC,CAAC;IACL,mGAAmG;IACnG,gDAAgD;IAChD,MAAM,IAAI,CAAC,KAAK,CACd,oGAAoG,CACrG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC5F,kGAAkG;IAClG,8FAA8F;IAC9F,MAAM,IAAI,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC5F,MAAM,IAAI,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC1F,qGAAqG;IACrG,uFAAuF;IACvF,MAAM,IAAI,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC3F,mGAAmG;IACnG,0EAA0E;IAC1E,MAAM,IAAI,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAChG,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;KAGd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;KAGd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;KAed,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;KAgBd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAClG,MAAM,IAAI,CAAC,KAAK,CACd,+FAA+F,CAChG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,+FAA+F,CAChG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CACd,kGAAkG,CACnG,CAAC;IACF,MAAM,IAAI,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;IACjG,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/node_modules/@noodle-borg/service/dist/store/postgres.d.ts

@@ -3,7 +3,7 @@ import type { SecretBox } from '@noodle-borg/runtime';
 import type { AccessMode } from '@noodle-borg/transport-http';
 import type { Pool } from 'pg';
 import type { PolicyAssignment, PolicyAssignmentInput, PolicyAssignmentStore, PolicyDeleteInput, PolicyListFilter } from '../policy.js';
-import type { ArtifactStore, ConfigScope, ConfigStore, ConfigValueMetadata, ControlPlaneStore, DeploymentActivationResult, DeploymentSummary, DeployRecord, ManagedConfigKind, OrgDomainRecord, OrgInvitationRecord, OrgMemberRecord, OrgRecord, OrgRole, SignupAllowlistKind, SignupAllowlistRecord, TenantRef } from '../store.js';
+import type { AppArchiveResult, AppRestoreResult, ArtifactStore, ConfigScope, ConfigStore, ConfigValueMetadata, ControlPlaneStore, DeploymentActivationResult, DeploymentListFilter, DeploymentSummary, DeployRecord, ManagedConfigKind, OrgDomainRecord, OrgInvitationRecord, OrgMemberRecord, OrgRecord, OrgRole, SignupAllowlistKind, SignupAllowlistRecord, TenantRef } from '../store.js';
 /**
  * Relational {@link ArtifactStore} backend ([ADR 0035](../../../../docs/decisions/0035-relational-artifact-store.md)).
  * One row per deployment in a `deploy_records` table; a shared, networked, strongly-consistent store
@@ -42,11 +42,11 @@ export declare class PostgresArtifactStore implements ArtifactStore, ControlPlan
     updateActiveAccess(ref: TenantRef, accessMode: AccessMode, serverVersion?: string): Promise<DeployRecord | undefined>;
     activateDeployment(ref: TenantRef, deploymentId: string): Promise<DeploymentActivationResult | undefined>;
     loadAll(): Promise<readonly DeployRecord[]>;
-    listDeployments(filter: {
-        org: string;
-        app?: string;
-        env?: string;
-    }): Promise<readonly DeploymentSummary[]>;
+    listDeployments(filter: DeploymentListFilter): Promise<readonly DeploymentSummary[]>;
+    getAppArchivedAt(org: string, app: string): Promise<string | undefined>;
+    archiveApp(org: string, app: string, at: string): Promise<AppArchiveResult | undefined>;
+    restoreApp(org: string, app: string): Promise<AppRestoreResult | undefined>;
+    sweepArchived(before: string): Promise<readonly DeployRecord[]>;
     setConfigValue(input: {
         readonly kind: ManagedConfigKind;
         readonly scope: ConfigScope;
@@ -62,6 +62,10 @@ export declare class PostgresArtifactStore implements ArtifactStore, ControlPlan
         slug: string;
         displayName?: string;
     }): Promise<OrgRecord>;
+    updateOrg(input: {
+        slug: string;
+        displayName: string;
+    }): Promise<OrgRecord | undefined>;
     listOrgs(): Promise<readonly OrgRecord[]>;
     listOrgsForSubject(subject: string): Promise<readonly OrgRecord[]>;
     addOrgMember(input: {
@@ -74,6 +78,11 @@ export declare class PostgresArtifactStore implements ArtifactStore, ControlPlan
         org: string;
         subject: string;
     }): Promise<boolean>;
+    updateOrgMemberRole(input: {
+        org: string;
+        subject: string;
+        role: OrgRole;
+    }): Promise<OrgMemberRecord | undefined>;
     getOrgMember(input: {
         org: string;
         subject: string;
@@ -124,5 +133,10 @@ export declare class PostgresArtifactStore implements ArtifactStore, ControlPlan
     consumeOrgInvitation(input: {
         tokenHash: string;
     }): Promise<OrgInvitationRecord | undefined>;
+    listOrgInvitations(org: string): Promise<readonly OrgInvitationRecord[]>;
+    revokeOrgInvitation(input: {
+        org: string;
+        email: string;
+    }): Promise<number>;
 }
 //# sourceMappingURL=postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/postgres.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../src/store/postgres.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,gBAAgB,EAA0B,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EACV,aAAa,EACb,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,SAAS,EACT,OAAO,EAEP,mBAAmB,EACnB,qBAAqB,EACrB,SAAS,EACV,MAAM,aAAa,CAAC;AAuCrB;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,qBAAa,qBACX,YAAW,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,qBAAqB;;gBAMnE,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,SAAS,GAAG,oBAAoB;IAW7E;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5E,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI3E,qBAAqB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;IAItF,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAItE,2BAA2B,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;IAI5F,2BAA2B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;IAIvE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAgG3C,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAS5D,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAYpE,wBAAwB,CAC5B,GAAG,EAAE,SAAS,EACd,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAmB9B,kBAAkB,CACtB,GAAG,EAAE,SAAS,EACd,UAAU,EAAE,UAAU,EACtB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAY9B,kBAAkB,CACtB,GAAG,EAAE,SAAS,EACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IAiE5C,OAAO,IAAI,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAK3C,eAAe,CAAC,MAAM,EAAE;QAC5B,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC;IAwBnC,cAAc,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;KAClC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAsC1B,iBAAiB,CACrB,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC;IAkBb,gBAAgB,CACpB,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAYpC,mBAAmB,CACvB,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAsB5B,SAAS,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5E,QAAQ,IAAI,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC;IAIzC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC;IAIlE,YAAY,CAAC,KAAK,EAAE;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,OAAO,CAAC;KACf,GAAG,OAAO,CAAC,eAAe,CAAC;IAItB,eAAe,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1E,YAAY,CAAC,KAAK,EAAE;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAIlC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAIhE,WAAW,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAItE,wBAAwB,CAAC,KAAK,EAAE;QACpC,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,eAAe,CAAC;IAMtB,yBAAyB,CAAC,KAAK,EAAE;QACrC,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAIlC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAIhE,oBAAoB,CAAC,KAAK,EAAE;QAChC,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAMd,WAAW,CAAC,KAAK,EAAE;QACvB,IAAI,EAAE,mBAAmB,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5B,mBAAmB,IAAI,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IAIhE,eAAe,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5E,mBAAmB,CAAC,KAAK,EAAE;QAC/B,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,OAAO,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,IAAI,CAAC;KACjB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI1B,gBAAgB,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAIxF,oBAAoB,CAAC,KAAK,EAAE;QAChC,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;CAG7C"}
+{"version":3,"file":"postgres.d.ts","sourceRoot":"","sources":["../../src/store/postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAA0B,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,SAAS,EACT,OAAO,EACP,mBAAmB,EACnB,qBAAqB,EACrB,SAAS,EACV,MAAM,aAAa,CAAC;AAuDrB;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,qBAAa,qBACX,YAAW,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,qBAAqB;;gBAMnE,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,SAAS,GAAG,oBAAoB;IAW7E;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5E,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI3E,qBAAqB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;IAItF,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAItE,2BAA2B,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;IAI5F,2BAA2B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;IAIvE,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAkG3C,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAS5D,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAapE,wBAAwB,CAC5B,GAAG,EAAE,SAAS,EACd,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAoB9B,kBAAkB,CACtB,GAAG,EAAE,SAAS,EACd,UAAU,EAAE,UAAU,EACtB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAY9B,kBAAkB,CACtB,GAAG,EAAE,SAAS,EACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IAiE5C,OAAO,IAAI,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAK3C,eAAe,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC;IAuBpF,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAcvE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAoBvF,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAkB3E,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAU/D,cAAc,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;KAClC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAsC1B,iBAAiB,CACrB,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC;IAkBb,gBAAgB,CACpB,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAYpC,mBAAmB,CACvB,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAsB5B,SAAS,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5E,SAAS,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAIvF,QAAQ,IAAI,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC;IAIzC,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC;IAIlE,YAAY,CAAC,KAAK,EAAE;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,OAAO,CAAC;KACf,GAAG,OAAO,CAAC,eAAe,CAAC;IAItB,eAAe,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1E,mBAAmB,CAAC,KAAK,EAAE;QAC/B,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC;KACf,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAIlC,YAAY,CAAC,KAAK,EAAE;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAIlC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAIhE,WAAW,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAItE,wBAAwB,CAAC,KAAK,EAAE;QACpC,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,eAAe,CAAC;IAMtB,yBAAyB,CAAC,KAAK,EAAE;QACrC,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAIlC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAIhE,oBAAoB,CAAC,KAAK,EAAE;QAChC,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,OAAO,CAAC;IAMd,WAAW,CAAC,KAAK,EAAE;QACvB,IAAI,EAAE,mBAAmB,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI5B,mBAAmB,IAAI,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IAIhE,eAAe,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5E,mBAAmB,CAAC,KAAK,EAAE;QAC/B,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,OAAO,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,IAAI,CAAC;KACjB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI1B,gBAAgB,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAIxF,oBAAoB,CAAC,KAAK,EAAE;QAChC,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAItC,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IAIxE,mBAAmB,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAGlF"}

package/node_modules/@noodle-borg/service/dist/store/postgres.js

@@ -1,9 +1,11 @@
 import { normalizeServerVersion } from '@noodle-borg/module';
 import { defaultActiveRecord } from '../deployment-versioning.js';
 import { DEPLOYMENT_ID_PATTERN, scopeChain, validateConfigName, validateConfigScope, validateSlug, validateTenantRef, } from '../store.js';
-import { addOrgMemberRow, allowSignupRow, consumeOrgInvitationRow, createOrgDomainChallengeRow, createOrgInvitationRow, createOrgRow, getOrgInvitationRow, getOrgMemberRow, hasVerifiedOrgDomainMembership, isOrgMemberRow, isSignupAllowedByRows, listOrgDomainRows, listOrgMemberRows, listOrgRows, listOrgRowsForSubject, listSignupAllowlistRows, markOrgDomainVerificationRow, removeOrgMemberRow, } from './postgres-control-plane.js';
+import { addOrgMemberRow, allowSignupRow, consumeOrgInvitationRow, createOrgDomainChallengeRow, createOrgInvitationRow, createOrgRow, getOrgInvitationRow, getOrgMemberRow, hasVerifiedOrgDomainMembership, isOrgMemberRow, isSignupAllowedByRows, listOrgDomainRows, listOrgInvitationRows, listOrgMemberRows, listOrgRows, listOrgRowsForSubject, listSignupAllowlistRows, markOrgDomainVerificationRow, removeOrgMemberRow, revokeOrgInvitationRows, updateOrgMemberRoleRow, updateOrgRow, } from './postgres-control-plane.js';
 import { deletePolicyAssignmentRow, getPolicyAssignmentRow, listActivePolicyAssignmentRows, listPolicyAssignmentHistoryRows, listPolicyAssignmentRows, putPolicyAssignmentRow, } from './postgres-policy.js';
+import { configRowToMetadata, isPostgresStoreOptions, openConfigSecret, rowToRecord, scopeParts, sealConfigSecret, validateConfigKind, } from './postgres-rows.js';
 import { ensureArtifactSchema } from './postgres-schema.js';
+import { deploymentSummary, validateDeploymentListFilter } from './records.js';
 export class PostgresArtifactStore {
     #pool;
     #secretBox;
@@ -73,8 +75,8 @@ export class PostgresArtifactStore {
             await client.query(`INSERT INTO deploy_records
          (deployment_id, org_slug, app_slug, environment, server_version, deployment_version, active, server_name,
           created_at, created_by_subject, created_by_email, access_mode, server_auth, caller_key_hash,
-          manifest, connectors, hosted_assets, secrets, schema_version)
-       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13::jsonb, $14, $15, $16, $17::jsonb, $18::jsonb, $19)
+          manifest, connectors, hosted_assets, secrets, schema_version, archived_at)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13::jsonb, $14, $15, $16, $17::jsonb, $18::jsonb, $19, $20::timestamptz)
        ON CONFLICT (deployment_id) DO UPDATE SET
          org_slug           = EXCLUDED.org_slug,
          app_slug           = EXCLUDED.app_slug,
@@ -93,7 +95,8 @@ export class PostgresArtifactStore {
          connectors         = EXCLUDED.connectors,
          hosted_assets      = EXCLUDED.hosted_assets,
          secrets            = EXCLUDED.secrets,
-         schema_version     = EXCLUDED.schema_version`, [
+         schema_version     = EXCLUDED.schema_version,
+         archived_at        = EXCLUDED.archived_at`, [
                 record.deploymentId,
                 record.orgSlug,
                 record.appSlug,
@@ -116,6 +119,7 @@ export class PostgresArtifactStore {
                     : null,
                 JSON.stringify(record.secrets),
                 record.schemaVersion,
+                record.archivedAt ?? null,
             ]);
             await client.query('COMMIT');
         }
@@ -137,6 +141,7 @@ export class PostgresArtifactStore {
         const { rows } = await this.#pool.query(`SELECT *
        FROM deploy_records
        WHERE org_slug = $1 AND app_slug = $2 AND environment = $3 AND active = true
+         AND archived_at IS NULL
        ORDER BY deployment_version DESC`, [safe.org, safe.app, safe.env]);
         return defaultActiveRecord(rows.map(rowToRecord), safe);
     }
@@ -150,6 +155,7 @@ export class PostgresArtifactStore {
          AND environment = $3
          AND server_version = $4
          AND active = true
+         AND archived_at IS NULL
        ORDER BY deployment_version DESC
        LIMIT 1`, [safe.org, safe.app, safe.env, safeVersion]);
         const row = rows[0];
@@ -229,25 +235,70 @@ export class PostgresArtifactStore {
         return rows.map(rowToRecord);
     }
     async listDeployments(filter) {
-        const org = validateSlug('org', filter.org);
-        const app = filter.app !== undefined ? validateSlug('app', filter.app) : undefined;
-        const env = filter.env !== undefined ? validateSlug('env', filter.env) : undefined;
+        const safe = validateDeploymentListFilter(filter);
         const clauses = ['org_slug = $1'];
-        const values = [org];
-        if (app !== undefined) {
-            values.push(app);
+        const values = [safe.org];
+        if (safe.app !== undefined) {
+            values.push(safe.app);
             clauses.push(`app_slug = $${values.length}`);
         }
-        if (env !== undefined) {
-            values.push(env);
+        if (safe.env !== undefined) {
+            values.push(safe.env);
             clauses.push(`environment = $${values.length}`);
         }
+        if (safe.includeArchived !== true)
+            clauses.push('archived_at IS NULL');
         const { rows } = await this.#pool.query(`SELECT *
        FROM deploy_records
        WHERE ${clauses.join(' AND ')}
        ORDER BY deployment_version DESC`, values);
         return rows.map((row) => deploymentSummary(rowToRecord(row)));
     }
+    async getAppArchivedAt(org, app) {
+        const { rows } = await this.#pool.query(`SELECT count(*)::int AS total, count(archived_at)::int AS archived, max(archived_at) AS latest
+       FROM deploy_records
+       WHERE org_slug = $1 AND app_slug = $2`, [validateSlug('org', org), validateSlug('app', app)]);
+        const row = rows[0];
+        if (row === undefined || row.total === 0 || row.archived !== row.total || row.latest === null) {
+            return undefined;
+        }
+        return new Date(row.latest).toISOString();
+    }
+    async archiveApp(org, app, at) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        const { rowCount } = await this.#pool.query(`UPDATE deploy_records
+       SET archived_at = $3::timestamptz
+       WHERE org_slug = $1 AND app_slug = $2 AND archived_at IS NULL`, [safeOrg, safeApp, at]);
+        const archivedDeployments = rowCount ?? 0;
+        if (archivedDeployments > 0) {
+            return { archivedAt: at, archivedDeployments, alreadyArchived: false };
+        }
+        // Nothing stamped: either the app is already fully archived (no-op, original stamp preserved so
+        // the retention clock never resets — ADR 0117 §5) or it has no records at all.
+        const existing = await this.getAppArchivedAt(safeOrg, safeApp);
+        if (existing === undefined)
+            return undefined;
+        return { archivedAt: existing, archivedDeployments: 0, alreadyArchived: true };
+    }
+    async restoreApp(org, app) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        const { rowCount } = await this.#pool.query(`UPDATE deploy_records
+       SET archived_at = NULL
+       WHERE org_slug = $1 AND app_slug = $2 AND archived_at IS NOT NULL`, [safeOrg, safeApp]);
+        const restoredDeployments = rowCount ?? 0;
+        if (restoredDeployments > 0)
+            return { restoredDeployments };
+        const { rows } = await this.#pool.query(`SELECT count(*)::int AS total FROM deploy_records WHERE org_slug = $1 AND app_slug = $2`, [safeOrg, safeApp]);
+        return (rows[0]?.total ?? 0) > 0 ? { restoredDeployments: 0 } : undefined;
+    }
+    async sweepArchived(before) {
+        const { rows } = await this.#pool.query(`DELETE FROM deploy_records
+       WHERE archived_at IS NOT NULL AND archived_at < $1::timestamptz
+       RETURNING *`, [before]);
+        return rows.map(rowToRecord);
+    }
     async setConfigValue(input) {
         const kind = validateConfigKind(input.kind);
         const scope = validateConfigScope(input.scope);
@@ -324,6 +375,9 @@ export class PostgresArtifactStore {
     async createOrg(input) {
         return createOrgRow(this.#pool, input);
     }
+    async updateOrg(input) {
+        return updateOrgRow(this.#pool, input);
+    }
     async listOrgs() {
         return listOrgRows(this.#pool);
     }
@@ -336,6 +390,9 @@ export class PostgresArtifactStore {
     async removeOrgMember(input) {
         return removeOrgMemberRow(this.#pool, input);
     }
+    async updateOrgMemberRole(input) {
+        return updateOrgMemberRoleRow(this.#pool, input);
+    }
     async getOrgMember(input) {
         return getOrgMemberRow(this.#pool, input);
     }
@@ -381,116 +438,11 @@ export class PostgresArtifactStore {
     async consumeOrgInvitation(input) {
         return consumeOrgInvitationRow(this.#pool, this.#now, input);
     }
-}
-function rowToRecord(row) {
-    return {
-        schemaVersion: row.schema_version,
-        deploymentId: row.deployment_id,
-        orgSlug: row.org_slug,
-        appSlug: row.app_slug,
-        environment: row.environment,
-        ...(row.server_version !== null ? { serverVersion: row.server_version } : {}),
-        // `Date.now()` ms timestamps fit JS's safe-integer range, so the bigint string coerces losslessly.
-        deploymentVersion: Number(row.deployment_version),
-        active: row.active,
-        serverName: row.server_name,
-        // timestamptz → the canonical ISO-8601 string the rest of the system uses.
-        createdAt: new Date(row.created_at).toISOString(),
-        ...(row.created_by_subject !== null ? { createdBySubject: row.created_by_subject } : {}),
-        ...(row.created_by_email !== null ? { createdByEmail: row.created_by_email } : {}),
-        ...(row.access_mode === 'owner-only' ||
-            row.access_mode === 'org-members' ||
-            row.access_mode === 'public' ||
-            row.access_mode === 'mixed' ||
-            row.access_mode === 'authenticated' ||
-            row.access_mode === 'customers'
-            ? { accessMode: row.access_mode }
-            : {}),
-        ...(isTenantAuthConfig(row.server_auth) ? { serverAuth: row.server_auth } : {}),
-        manifest: row.manifest,
-        ...(row.connectors !== null ? { connectors: row.connectors } : {}),
-        ...(row.hosted_assets !== null ? { hostedAssets: row.hosted_assets } : {}),
-        secrets: row.secrets,
-    };
-}
-function configRowToMetadata(row) {
-    return {
-        kind: validateConfigKind(row.kind),
-        scope: rowToScope(row),
-        name: row.name,
-        updatedAt: new Date(row.updated_at).toISOString(),
-        ...(row.updated_by_subject !== null ? { updatedBySubject: row.updated_by_subject } : {}),
-        ...(row.updated_by_email !== null ? { updatedByEmail: row.updated_by_email } : {}),
-        ...(row.kind === 'variable' && row.variable_value !== null
-            ? { value: row.variable_value }
-            : {}),
-    };
-}
-function isTenantAuthConfig(value) {
-    if (typeof value !== 'object' || value === null)
-        return false;
-    const auth = value;
-    if (auth.kind === 'bridge')
-        return typeof auth.provider === 'string';
-    return typeof auth.issuer === 'string' && typeof auth.audience === 'string';
-}
-function validateConfigKind(kind) {
-    if (kind !== 'secret' && kind !== 'variable')
-        throw new Error(`invalid config kind: ${kind}`);
-    return kind;
-}
-function scopeParts(scope) {
-    if (scope.level === 'org')
-        return { level: 'org', org: scope.org, app: '', env: '' };
-    if (scope.level === 'app')
-        return { level: 'app', org: scope.org, app: scope.app, env: '' };
-    return { level: 'env', org: scope.org, app: scope.app, env: scope.env };
-}
-function rowToScope(row) {
-    if (row.scope_level === 'org')
-        return { level: 'org', org: row.org_slug };
-    if (row.scope_level === 'app')
-        return { level: 'app', org: row.org_slug, app: row.app_slug };
-    if (row.scope_level === 'env') {
-        return { level: 'env', org: row.org_slug, app: row.app_slug, env: row.environment };
-    }
-    throw new Error(`invalid config scope_level: ${row.scope_level}`);
-}
-async function sealConfigSecret(value, secretBox) {
-    if (secretBox === undefined) {
-        throw new Error('durable secret config requires a secret master-key custodian');
+    async listOrgInvitations(org) {
+        return listOrgInvitationRows(this.#pool, org);
+    }
+    async revokeOrgInvitation(input) {
+        return revokeOrgInvitationRows(this.#pool, input);
     }
-    return { enc: 'aes-256-gcm', sealed: await secretBox.seal(value) };
-}
-async function openConfigSecret(envelope, secretBox) {
-    if (envelope === null)
-        throw new Error('secret config row has no encrypted value');
-    if (envelope.enc === 'none') {
-        const value = envelope.values.value;
-        if (typeof value !== 'string')
-            throw new Error('legacy secret config row has no value');
-        return value;
-    }
-    if (secretBox === undefined) {
-        throw new Error('cannot resolve encrypted config without a secret master-key custodian');
-    }
-    return secretBox.open(envelope.sealed);
-}
-function isPostgresStoreOptions(value) {
-    return typeof value === 'object' && value !== null && ('secretBox' in value || 'now' in value);
-}
-function deploymentSummary(record) {
-    return {
-        deploymentId: record.deploymentId,
-        orgSlug: record.orgSlug,
-        appSlug: record.appSlug,
-        environment: record.environment,
-        ...(record.serverVersion !== undefined ? { serverVersion: record.serverVersion } : {}),
-        active: record.active,
-        serverName: record.serverName,
-        createdAt: record.createdAt,
-        ...(record.createdByEmail !== undefined ? { createdByEmail: record.createdByEmail } : {}),
-        accessMode: record.accessMode ?? 'owner-only',
-    };
 }
 //# sourceMappingURL=postgres.js.map