@noodleseed/one 0.16.0 → 0.18.0

package/node_modules/@noodle-borg/service/dist/store/github-connections.js

@@ -0,0 +1,120 @@
+import { validatePositiveInteger, validateSlug } from './validate.js';
+/**
+ * In-memory {@link GithubConnectionStore}: keeps one record per `githubRepositoryId` in a Map (the
+ * durable key — see the interface doc in `../store.ts`). Used by tests and as the non-persistent
+ * default; mirrors `InMemoryArtifactStore`.
+ */
+export class InMemoryGithubConnectionStore {
+    #records = new Map();
+    #now;
+    constructor(options = {}) {
+        this.#now = options.now ?? (() => new Date());
+    }
+    upsertRepoConnection(input) {
+        const safe = validateUpsertInput(input);
+        const conflict = findUpsertConflict([...this.#records.values()], safe);
+        if (conflict !== undefined)
+            return Promise.resolve({ ok: false, error: conflict });
+        const nowIso = this.#now().toISOString();
+        const existing = this.#records.get(safe.githubRepositoryId);
+        const record = {
+            githubRepositoryId: safe.githubRepositoryId,
+            installationId: safe.installationId,
+            ownerLogin: safe.ownerLogin,
+            repoName: safe.repoName,
+            defaultBranch: safe.defaultBranch,
+            ...(safe.repoRoot !== undefined ? { repoRoot: safe.repoRoot } : {}),
+            orgSlug: safe.orgSlug,
+            appSlug: safe.appSlug,
+            enabled: true,
+            createdBySubject: safe.createdBySubject,
+            createdAt: existing?.createdAt ?? nowIso,
+            updatedAt: nowIso,
+        };
+        this.#records.set(record.githubRepositoryId, record);
+        return Promise.resolve({ ok: true, record });
+    }
+    getRepoConnection(org, app) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        return Promise.resolve([...this.#records.values()].find((record) => record.enabled && record.orgSlug === safeOrg && record.appSlug === safeApp));
+    }
+    getRepoConnectionByRepository(githubRepositoryId) {
+        const id = validatePositiveInteger('githubRepositoryId', githubRepositoryId);
+        const record = this.#records.get(id);
+        return Promise.resolve(record?.enabled ? record : undefined);
+    }
+    listRepoConnectionsByInstallation(installationId) {
+        const id = validatePositiveInteger('installationId', installationId);
+        return Promise.resolve([...this.#records.values()].filter((record) => record.enabled && record.installationId === id));
+    }
+    disableRepoConnection(org, app) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        const found = [...this.#records.values()].find((record) => record.enabled && record.orgSlug === safeOrg && record.appSlug === safeApp);
+        if (found === undefined)
+            return Promise.resolve(false);
+        this.#records.set(found.githubRepositoryId, {
+            ...found,
+            enabled: false,
+            updatedAt: this.#now().toISOString(),
+        });
+        return Promise.resolve(true);
+    }
+    refreshRepoMetadata(githubRepositoryId, updates) {
+        const id = validatePositiveInteger('githubRepositoryId', githubRepositoryId);
+        const existing = this.#records.get(id);
+        if (existing === undefined)
+            return Promise.resolve(undefined);
+        const updated = {
+            ...existing,
+            ...(updates.ownerLogin !== undefined ? { ownerLogin: updates.ownerLogin } : {}),
+            ...(updates.repoName !== undefined ? { repoName: updates.repoName } : {}),
+            ...(updates.defaultBranch !== undefined ? { defaultBranch: updates.defaultBranch } : {}),
+            updatedAt: this.#now().toISOString(),
+        };
+        this.#records.set(id, updated);
+        return Promise.resolve(updated);
+    }
+}
+/** Shared validation for the upsert input, reused by the json-file backend. */
+export function validateUpsertInput(input) {
+    return {
+        githubRepositoryId: validatePositiveInteger('githubRepositoryId', input.githubRepositoryId),
+        installationId: validatePositiveInteger('installationId', input.installationId),
+        ownerLogin: input.ownerLogin,
+        repoName: input.repoName,
+        defaultBranch: input.defaultBranch,
+        ...(input.repoRoot !== undefined ? { repoRoot: input.repoRoot } : {}),
+        orgSlug: validateSlug('org', input.orgSlug),
+        appSlug: validateSlug('app', input.appSlug),
+        createdBySubject: input.createdBySubject,
+    };
+}
+/**
+ * Shared conflict-detection over an already-loaded record set, reused by the json-file backend (which
+ * cannot do a single SQL transaction the way Postgres does, but can still check in-process before
+ * writing). Both uniqueness rules from the interface doc; a DISABLED row never blocks either direction.
+ */
+export function findUpsertConflict(records, input) {
+    const sameRepo = records.find((record) => record.githubRepositoryId === input.githubRepositoryId);
+    if (sameRepo?.enabled &&
+        (sameRepo.orgSlug !== input.orgSlug || sameRepo.appSlug !== input.appSlug)) {
+        return {
+            reason: 'repository_already_connected',
+            message: `github repository ${input.githubRepositoryId} is already connected to ${sameRepo.orgSlug}/${sameRepo.appSlug}; disconnect it first`,
+        };
+    }
+    const conflictingApp = records.find((record) => record.enabled &&
+        record.orgSlug === input.orgSlug &&
+        record.appSlug === input.appSlug &&
+        record.githubRepositoryId !== input.githubRepositoryId);
+    if (conflictingApp !== undefined) {
+        return {
+            reason: 'app_already_connected',
+            message: `${input.orgSlug}/${input.appSlug} already has a connected repository; disconnect it first`,
+        };
+    }
+    return undefined;
+}
+//# sourceMappingURL=github-connections.js.map

package/node_modules/@noodle-borg/service/dist/store/github-connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-connections.js","sourceRoot":"","sources":["../../src/store/github-connections.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEtE;;;;GAIG;AACH,MAAM,OAAO,6BAA6B;IAC/B,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IACnD,IAAI,CAAa;IAE1B,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,oBAAoB,CAAC,KAAgC;QACnD,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAyB;YACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,MAAM;YACxC,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,iBAAiB,CAAC,GAAW,EAAE,GAAW;QACxC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC9B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CACvF,CACF,CAAC;IACJ,CAAC;IAED,6BAA6B,CAC3B,kBAA0B;QAE1B,MAAM,EAAE,GAAG,uBAAuB,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED,iCAAiC,CAC/B,cAAsB;QAEtB,MAAM,EAAE,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACrE,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAChC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc,KAAK,EAAE,CAC3D,CACF,CAAC;IACJ,CAAC;IAED,qBAAqB,CAAC,GAAW,EAAE,GAAW;QAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC5C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CACvF,CAAC;QACF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE;YAC1C,GAAG,KAAK;YACR,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,mBAAmB,CACjB,kBAA0B,EAC1B,OAIC;QAED,MAAM,EAAE,GAAG,uBAAuB,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAyB;YACpC,GAAG,QAAQ;YACX,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,UAAU,mBAAmB,CAAC,KAAgC;IAClE,OAAO;QACL,kBAAkB,EAAE,uBAAuB,CAAC,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC;QAC3F,cAAc,EAAE,uBAAuB,CAAC,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC;QAC/E,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;KACzC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAwC,EACxC,KAAgC;IAEhC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClG,IACE,QAAQ,EAAE,OAAO;QACjB,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,EAC1E,CAAC;QACD,OAAO;YACL,MAAM,EAAE,8BAA8B;YACtC,OAAO,EAAE,qBAAqB,KAAK,CAAC,kBAAkB,4BAA4B,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,uBAAuB;SAC9I,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CACjC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB,CACzD,CAAC;IACF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,uBAAuB;YAC/B,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,0DAA0D;SACrG,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/node_modules/@noodle-borg/service/dist/store/github-runs-json-file.d.ts

@@ -0,0 +1,22 @@
+import type { CancelQueuedDeployRunsFilter, CreateDeployRunInput, CreateDeployRunResult, DeployRunRecord, GithubDeployRunStore, ListDeployRunsResult } from '../store.js';
+/**
+ * JSON-file {@link GithubDeployRunStore}: one file per run at
+ * `<dataDir>/github-runs/<runId>.json`, written atomically (temp file + `rename`, matching
+ * `JsonFileGithubConnectionStore`). `runId` is service-minted (`run-` + hex), so it is always a safe
+ * filename component. Every read-check-write mutation runs through the same mutation queue the
+ * connections store uses — the json-file analogue of the Postgres transaction, so concurrent webhook
+ * deliveries cannot both pass the idempotency checks.
+ */
+export declare class JsonFileGithubDeployRunStore implements GithubDeployRunStore {
+    #private;
+    constructor(dataDir: string, options?: {
+        now?: () => Date;
+    });
+    createDeployRun(input: CreateDeployRunInput): Promise<CreateDeployRunResult>;
+    getDeployRun(org: string, runId: string): Promise<DeployRunRecord | undefined>;
+    listDeployRuns(org: string, app: string, opts?: {
+        readonly limit?: number;
+    }): Promise<ListDeployRunsResult>;
+    cancelQueuedDeployRuns(filter: CancelQueuedDeployRunsFilter): Promise<readonly string[]>;
+}
+//# sourceMappingURL=github-runs-json-file.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/github-runs-json-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-runs-json-file.d.ts","sourceRoot":"","sources":["../../src/store/github-runs-json-file.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,aAAa,CAAC;AAYrB;;;;;;;GAOG;AACH,qBAAa,4BAA6B,YAAW,oBAAoB;;gBAK3D,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IAc/D,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAmBtE,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAM9E,cAAc,CAClB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GACrC,OAAO,CAAC,oBAAoB,CAAC;IAShC,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;CAqDzF"}

package/node_modules/@noodle-borg/service/dist/store/github-runs-json-file.js

@@ -0,0 +1,116 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, readdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { DEFAULT_DEPLOY_RUN_LIST_LIMIT, findCreateDuplicate, matchesCancelFilter, shapeDeployRunList, supersedesQueued, validateCancelFilter, validateCreateDeployRunInput, } from './github-runs.js';
+import { validateSlug } from './validate.js';
+/**
+ * JSON-file {@link GithubDeployRunStore}: one file per run at
+ * `<dataDir>/github-runs/<runId>.json`, written atomically (temp file + `rename`, matching
+ * `JsonFileGithubConnectionStore`). `runId` is service-minted (`run-` + hex), so it is always a safe
+ * filename component. Every read-check-write mutation runs through the same mutation queue the
+ * connections store uses — the json-file analogue of the Postgres transaction, so concurrent webhook
+ * deliveries cannot both pass the idempotency checks.
+ */
+export class JsonFileGithubDeployRunStore {
+    #dir;
+    #now;
+    #mutationQueue = Promise.resolve();
+    constructor(dataDir, options = {}) {
+        this.#dir = join(dataDir, 'github-runs');
+        this.#now = options.now ?? (() => new Date());
+    }
+    #withMutation(operation) {
+        const run = this.#mutationQueue.then(operation, operation);
+        this.#mutationQueue = run.then(() => undefined, () => undefined);
+        return run;
+    }
+    createDeployRun(input) {
+        return this.#withMutation(async () => {
+            const safe = validateCreateDeployRunInput(input);
+            const all = await this.#loadAll();
+            const duplicate = findCreateDuplicate(all, safe);
+            if (duplicate !== undefined)
+                return { ok: false, ...duplicate };
+            const nowIso = this.#now().toISOString();
+            const superseded = [];
+            for (const record of all) {
+                if (!supersedesQueued(record, safe))
+                    continue;
+                await this.#writeRecord({ ...record, status: 'superseded', finishedAt: nowIso });
+                superseded.push(record.runId);
+            }
+            const record = { ...safe, status: 'queued', createdAt: nowIso };
+            await this.#writeRecord(record);
+            return { ok: true, record, superseded };
+        });
+    }
+    async getDeployRun(org, runId) {
+        const safeOrg = validateSlug('org', org);
+        const record = await this.#readRecord(runId);
+        return record?.orgSlug === safeOrg ? record : undefined;
+    }
+    async listDeployRuns(org, app, opts = {}) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        const matching = (await this.#loadAll()).filter((record) => record.orgSlug === safeOrg && record.appSlug === safeApp);
+        return shapeDeployRunList(matching, opts.limit ?? DEFAULT_DEPLOY_RUN_LIST_LIMIT);
+    }
+    cancelQueuedDeployRuns(filter) {
+        return this.#withMutation(async () => {
+            const safe = validateCancelFilter(filter);
+            const nowIso = this.#now().toISOString();
+            const canceled = [];
+            for (const record of await this.#loadAll()) {
+                if (!matchesCancelFilter(record, safe))
+                    continue;
+                await this.#writeRecord({ ...record, status: 'canceled', finishedAt: nowIso });
+                canceled.push(record.runId);
+            }
+            return canceled;
+        });
+    }
+    async #readRecord(runId) {
+        // runId is service-minted, but never trust it as a path segment anyway.
+        if (!/^[A-Za-z0-9_-]+$/.test(runId))
+            return undefined;
+        try {
+            const text = await readFile(join(this.#dir, `${runId}.json`), 'utf8');
+            return JSON.parse(text);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    async #loadAll() {
+        let names;
+        try {
+            names = await readdir(this.#dir);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return [];
+            throw error;
+        }
+        const records = [];
+        for (const name of names) {
+            if (!name.endsWith('.json'))
+                continue; // skip in-flight *.tmp files
+            try {
+                const text = await readFile(join(this.#dir, name), 'utf8');
+                records.push(JSON.parse(text));
+            }
+            catch {
+                // Fail-soft: a corrupt/unreadable record must not crash the caller — skip it.
+            }
+        }
+        return records;
+    }
+    async #writeRecord(record) {
+        await mkdir(this.#dir, { recursive: true });
+        const target = join(this.#dir, `${record.runId}.json`);
+        const tmp = `${target}.${randomUUID()}.tmp`;
+        await writeFile(tmp, `${JSON.stringify(record, null, 2)}\n`, 'utf8');
+        await rename(tmp, target);
+    }
+}
+//# sourceMappingURL=github-runs-json-file.js.map

package/node_modules/@noodle-borg/service/dist/store/github-runs-json-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-runs-json-file.js","sourceRoot":"","sources":["../../src/store/github-runs-json-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,OAAO,4BAA4B;IAC9B,IAAI,CAAS;IACb,IAAI,CAAa;IAC1B,cAAc,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAErD,YAAY,OAAe,EAAE,UAAgC,EAAE;QAC7D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,aAAa,CAAI,SAA2B;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,eAAe,CAAC,KAA2B;QACzC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,GAAG,SAAS,EAAE,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;gBACzB,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;oBAAE,SAAS;gBAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,MAAM,GAAoB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACjF,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAa;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,GAAW,EACX,GAAW,EACX,OAAoC,EAAE;QAEtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAC7C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CACrE,CAAC;QACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;IACnF,CAAC;IAED,sBAAsB,CAAC,MAAoC;QACzD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC;oBAAE,SAAS;gBACjD,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/E,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,wEAAwE;QACxE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS,CAAC,6BAA6B;YACpE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,8EAA8E;YAChF,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAuB;QACxC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC;QAC5C,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/github-runs.d.ts

@@ -0,0 +1,51 @@
+import type { CancelQueuedDeployRunsFilter, CreateDeployRunDuplicateReason, CreateDeployRunInput, CreateDeployRunResult, DeployRunRecord, DeployRunStatus, GithubDeployRunStore, ListDeployRunsResult } from '../store.js';
+/**
+ * In-memory {@link GithubDeployRunStore} plus the shared pure helpers every backend reuses
+ * (validation, duplicate detection, the pinned state machine, list shaping). Mirrors
+ * `github-connections.ts`: the Map backend is the non-persistent default and the test double; the
+ * exported helpers keep the json-file backend byte-equivalent in semantics.
+ */
+/** Newest-first list cap when the caller doesn't pass one — mirrors the runs-feed page size. */
+export declare const DEFAULT_DEPLOY_RUN_LIST_LIMIT = 50;
+/**
+ * The pinned state machine as data (see `DeployRunStatus` in `../store.ts`). The
+ * `failed|canceled|superseded → queued` retry edge is deliberately ABSENT — it is reserved for
+ * `runs retry` (GHD-4) and must not be walkable until that slice adds it.
+ */
+export declare const DEPLOY_RUN_TRANSITIONS: Readonly<Record<DeployRunStatus, readonly DeployRunStatus[]>>;
+export declare function canTransitionDeployRun(from: DeployRunStatus, to: DeployRunStatus): boolean;
+/** Shared input validation, reused by the json-file backend. */
+export declare function validateCreateDeployRunInput(input: CreateDeployRunInput): CreateDeployRunInput;
+/**
+ * Shared duplicate detection over an already-loaded record set (json-file + in-memory; Postgres does
+ * the same checks inside its transaction). The idempotency contract lives on the interface doc:
+ * delivery ids are globally unique, and only a CANCELED run frees its `{repo, sha, env}` slot.
+ */
+export declare function findCreateDuplicate(records: readonly DeployRunRecord[], input: CreateDeployRunInput): {
+    reason: CreateDeployRunDuplicateReason;
+    existing: DeployRunRecord;
+} | undefined;
+/**
+ * Every backend refuses an unfiltered cancel: no webhook outcome ever means "cancel everything
+ * queued for the app" — a missing filter is a caller bug, not a mass cancelation.
+ */
+export declare function validateCancelFilter(filter: CancelQueuedDeployRunsFilter): CancelQueuedDeployRunsFilter;
+/** A queued run for the same `(orgSlug, appSlug, envName)` that a new creation supersedes. */
+export declare function supersedesQueued(record: DeployRunRecord, input: CreateDeployRunInput): boolean;
+/** A queued run the cancel filter targets — org+app always, env and/or ref narrow it further. */
+export declare function matchesCancelFilter(record: DeployRunRecord, filter: CancelQueuedDeployRunsFilter): boolean;
+/** Newest-first (createdAt desc, runId desc tiebreak for same-millisecond rows), cap + flag. */
+export declare function shapeDeployRunList(records: readonly DeployRunRecord[], limit: number): ListDeployRunsResult;
+export declare class InMemoryGithubDeployRunStore implements GithubDeployRunStore {
+    #private;
+    constructor(options?: {
+        now?: () => Date;
+    });
+    createDeployRun(input: CreateDeployRunInput): Promise<CreateDeployRunResult>;
+    getDeployRun(org: string, runId: string): Promise<DeployRunRecord | undefined>;
+    listDeployRuns(org: string, app: string, opts?: {
+        readonly limit?: number;
+    }): Promise<ListDeployRunsResult>;
+    cancelQueuedDeployRuns(filter: CancelQueuedDeployRunsFilter): Promise<readonly string[]>;
+}
+//# sourceMappingURL=github-runs.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/github-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-runs.d.ts","sourceRoot":"","sources":["../../src/store/github-runs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC9B,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,aAAa,CAAC;AAGrB;;;;;GAKG;AAEH,gGAAgG;AAChG,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC,CAS9F,CAAC;AAEJ,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,eAAe,GAAG,OAAO,CAE1F;AAED,gEAAgE;AAChE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAoB9F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,KAAK,EAAE,oBAAoB,GAC1B;IAAE,MAAM,EAAE,8BAA8B,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,GAAG,SAAS,CAYnF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,4BAA4B,GACnC,4BAA4B,CAU9B;AAED,8FAA8F;AAC9F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAO9F;AAED,iGAAiG;AACjG,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,4BAA4B,GACnC,OAAO,CAMT;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,KAAK,EAAE,MAAM,GACZ,oBAAoB,CAKtB;AAED,qBAAa,4BAA6B,YAAW,oBAAoB;;gBAI3D,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IAMxC,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAiB5E,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAM9E,cAAc,CAClB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GACrC,OAAO,CAAC,oBAAoB,CAAC;IAS1B,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;CAW/F"}

package/node_modules/@noodle-borg/service/dist/store/github-runs.js

@@ -0,0 +1,158 @@
+import { validatePositiveInteger, validateSlug } from './validate.js';
+/**
+ * In-memory {@link GithubDeployRunStore} plus the shared pure helpers every backend reuses
+ * (validation, duplicate detection, the pinned state machine, list shaping). Mirrors
+ * `github-connections.ts`: the Map backend is the non-persistent default and the test double; the
+ * exported helpers keep the json-file backend byte-equivalent in semantics.
+ */
+/** Newest-first list cap when the caller doesn't pass one — mirrors the runs-feed page size. */
+export const DEFAULT_DEPLOY_RUN_LIST_LIMIT = 50;
+/**
+ * The pinned state machine as data (see `DeployRunStatus` in `../store.ts`). The
+ * `failed|canceled|superseded → queued` retry edge is deliberately ABSENT — it is reserved for
+ * `runs retry` (GHD-4) and must not be walkable until that slice adds it.
+ */
+export const DEPLOY_RUN_TRANSITIONS = {
+    queued: ['building', 'canceled', 'superseded'],
+    building: ['deploying', 'failed', 'canceled'],
+    deploying: ['deployed', 'failed'],
+    deployed: [],
+    failed: [],
+    canceled: [],
+    superseded: [],
+};
+export function canTransitionDeployRun(from, to) {
+    return DEPLOY_RUN_TRANSITIONS[from].includes(to);
+}
+/** Shared input validation, reused by the json-file backend. */
+export function validateCreateDeployRunInput(input) {
+    if (input.runId.length === 0)
+        throw new Error('runId must not be empty');
+    if (input.deliveryId.length === 0)
+        throw new Error('deliveryId must not be empty');
+    if (input.commitSha.length === 0)
+        throw new Error('commitSha must not be empty');
+    return {
+        runId: input.runId,
+        orgSlug: validateSlug('org', input.orgSlug),
+        appSlug: validateSlug('app', input.appSlug),
+        envName: input.envName,
+        sourceEvent: input.sourceEvent,
+        deliveryId: input.deliveryId,
+        githubRepositoryId: validatePositiveInteger('githubRepositoryId', input.githubRepositoryId),
+        commitSha: input.commitSha,
+        ref: input.ref,
+        ...(input.prNumber !== undefined
+            ? { prNumber: validatePositiveInteger('prNumber', input.prNumber) }
+            : {}),
+        actorLogin: input.actorLogin,
+        ...(input.blockedReason !== undefined ? { blockedReason: input.blockedReason } : {}),
+    };
+}
+/**
+ * Shared duplicate detection over an already-loaded record set (json-file + in-memory; Postgres does
+ * the same checks inside its transaction). The idempotency contract lives on the interface doc:
+ * delivery ids are globally unique, and only a CANCELED run frees its `{repo, sha, env}` slot.
+ */
+export function findCreateDuplicate(records, input) {
+    const sameDelivery = records.find((record) => record.deliveryId === input.deliveryId);
+    if (sameDelivery !== undefined)
+        return { reason: 'duplicate_delivery', existing: sameDelivery };
+    const sameTarget = records.find((record) => record.status !== 'canceled' &&
+        record.githubRepositoryId === input.githubRepositoryId &&
+        record.commitSha === input.commitSha &&
+        record.envName === input.envName);
+    if (sameTarget !== undefined)
+        return { reason: 'duplicate_target', existing: sameTarget };
+    return undefined;
+}
+/**
+ * Every backend refuses an unfiltered cancel: no webhook outcome ever means "cancel everything
+ * queued for the app" — a missing filter is a caller bug, not a mass cancelation.
+ */
+export function validateCancelFilter(filter) {
+    if (filter.envName === undefined && filter.ref === undefined) {
+        throw new Error('cancelQueuedDeployRuns requires envName or ref');
+    }
+    return {
+        orgSlug: validateSlug('org', filter.orgSlug),
+        appSlug: validateSlug('app', filter.appSlug),
+        ...(filter.envName !== undefined ? { envName: filter.envName } : {}),
+        ...(filter.ref !== undefined ? { ref: filter.ref } : {}),
+    };
+}
+/** A queued run for the same `(orgSlug, appSlug, envName)` that a new creation supersedes. */
+export function supersedesQueued(record, input) {
+    return (record.status === 'queued' &&
+        record.orgSlug === input.orgSlug &&
+        record.appSlug === input.appSlug &&
+        record.envName === input.envName);
+}
+/** A queued run the cancel filter targets — org+app always, env and/or ref narrow it further. */
+export function matchesCancelFilter(record, filter) {
+    if (record.status !== 'queued')
+        return false;
+    if (record.orgSlug !== filter.orgSlug || record.appSlug !== filter.appSlug)
+        return false;
+    if (filter.envName !== undefined && record.envName !== filter.envName)
+        return false;
+    if (filter.ref !== undefined && record.ref !== filter.ref)
+        return false;
+    return true;
+}
+/** Newest-first (createdAt desc, runId desc tiebreak for same-millisecond rows), cap + flag. */
+export function shapeDeployRunList(records, limit) {
+    const sorted = [...records].sort((a, b) => b.createdAt.localeCompare(a.createdAt) || b.runId.localeCompare(a.runId));
+    return { runs: sorted.slice(0, limit), truncated: sorted.length > limit };
+}
+export class InMemoryGithubDeployRunStore {
+    #records = new Map();
+    #now;
+    constructor(options = {}) {
+        this.#now = options.now ?? (() => new Date());
+    }
+    // All four methods are `async` so validation failures reject (matching the other backends)
+    // instead of throwing synchronously out of a Promise-returning signature.
+    async createDeployRun(input) {
+        const safe = validateCreateDeployRunInput(input);
+        const all = [...this.#records.values()];
+        const duplicate = findCreateDuplicate(all, safe);
+        if (duplicate !== undefined)
+            return { ok: false, ...duplicate };
+        const nowIso = this.#now().toISOString();
+        const superseded = [];
+        for (const record of all) {
+            if (!supersedesQueued(record, safe))
+                continue;
+            this.#records.set(record.runId, { ...record, status: 'superseded', finishedAt: nowIso });
+            superseded.push(record.runId);
+        }
+        const record = { ...safe, status: 'queued', createdAt: nowIso };
+        this.#records.set(record.runId, record);
+        return { ok: true, record, superseded };
+    }
+    async getDeployRun(org, runId) {
+        const safeOrg = validateSlug('org', org);
+        const record = this.#records.get(runId);
+        return record?.orgSlug === safeOrg ? record : undefined;
+    }
+    async listDeployRuns(org, app, opts = {}) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        const matching = [...this.#records.values()].filter((record) => record.orgSlug === safeOrg && record.appSlug === safeApp);
+        return shapeDeployRunList(matching, opts.limit ?? DEFAULT_DEPLOY_RUN_LIST_LIMIT);
+    }
+    async cancelQueuedDeployRuns(filter) {
+        const safe = validateCancelFilter(filter);
+        const nowIso = this.#now().toISOString();
+        const canceled = [];
+        for (const record of this.#records.values()) {
+            if (!matchesCancelFilter(record, safe))
+                continue;
+            this.#records.set(record.runId, { ...record, status: 'canceled', finishedAt: nowIso });
+            canceled.push(record.runId);
+        }
+        return canceled;
+    }
+}
+//# sourceMappingURL=github-runs.js.map

package/node_modules/@noodle-borg/service/dist/store/github-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-runs.js","sourceRoot":"","sources":["../../src/store/github-runs.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEtE;;;;;GAKG;AAEH,gGAAgG;AAChG,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC;IACE,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC;IAC9C,QAAQ,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC7C,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;IACjC,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;CACf,CAAC;AAEJ,MAAM,UAAU,sBAAsB,CAAC,IAAqB,EAAE,EAAmB;IAC/E,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,4BAA4B,CAAC,KAA2B;IACtE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjF,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,uBAAuB,CAAC,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC;QAC3F,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAmC,EACnC,KAA2B;IAE3B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IACtF,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAChG,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAC7B,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,KAAK,UAAU;QAC5B,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB;QACtD,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACpC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CACnC,CAAC;IACF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC1F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAoC;IAEpC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAC5C,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,MAAuB,EAAE,KAA2B;IACnF,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CACjC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CACjC,MAAuB,EACvB,MAAoC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAChC,OAAmC,EACnC,KAAa;IAEb,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CACnF,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,OAAO,4BAA4B;IAC9B,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC9C,IAAI,CAAa;IAE1B,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,2FAA2F;IAC3F,0EAA0E;IAC1E,KAAK,CAAC,eAAe,CAAC,KAA2B;QAC/C,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACzF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAoB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACjF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAa;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,GAAW,EACX,GAAW,EACX,OAAoC,EAAE;QAEtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACjD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CACrE,CAAC;QACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAoC;QAC/D,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/in-memory.d.ts

@@ -0,0 +1,32 @@
+import type { AccessMode } from '@noodle-borg/transport-http';
+import type { AppArchiveResult, AppRestoreResult, AppSummary, ArtifactStore, DeploymentActivationResult, DeploymentListFilter, DeploymentSummary, DeployRecord, EnvSummary, TenantRef } from '../store.js';
+/** In-memory store: keeps records in a Map. Used by tests and as an explicit, non-persistent option. */
+export declare class InMemoryArtifactStore implements ArtifactStore {
+    #private;
+    append(record: DeployRecord): Promise<void>;
+    loadAll(): Promise<readonly DeployRecord[]>;
+    get(deploymentId: string): Promise<DeployRecord | undefined>;
+    getActiveByTenant(ref: TenantRef): Promise<DeployRecord | undefined>;
+    getActiveByTenantVersion(ref: TenantRef, serverVersion: string): Promise<DeployRecord | undefined>;
+    activateDeployment(ref: TenantRef, deploymentId: string): Promise<DeploymentActivationResult | undefined>;
+    updateActiveAccess(ref: TenantRef, accessMode: AccessMode, serverVersion?: string): Promise<DeployRecord | undefined>;
+    listDeployments(filter: DeploymentListFilter): Promise<readonly DeploymentSummary[]>;
+    getAppArchivedAt(org: string, app: string): Promise<string | undefined>;
+    archiveApp(org: string, app: string, at: string): Promise<AppArchiveResult | undefined>;
+    restoreApp(org: string, app: string): Promise<AppRestoreResult | undefined>;
+    sweepArchived(before: string): Promise<readonly DeployRecord[]>;
+    listApps(org: string, opts?: {
+        readonly includeArchived?: boolean;
+        readonly limit?: number;
+    }): Promise<{
+        readonly apps: readonly AppSummary[];
+        readonly truncated: boolean;
+    }>;
+    getApp(org: string, app: string): Promise<AppSummary | undefined>;
+    listEnvironments(org: string, app: string, opts?: {
+        readonly includeArchived?: boolean;
+    }): Promise<readonly EnvSummary[]>;
+    getEnvironment(org: string, app: string, env: string): Promise<EnvSummary | undefined>;
+    getDeployment(org: string, deploymentId: string): Promise<DeploymentSummary | undefined>;
+}
+//# sourceMappingURL=in-memory.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/in-memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory.d.ts","sourceRoot":"","sources":["../../src/store/in-memory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAM9D,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,SAAS,EACV,MAAM,aAAa,CAAC;AAerB,wGAAwG;AACxG,qBAAa,qBAAsB,YAAW,aAAa;;IAGzD,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3C,OAAO,IAAI,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAI3C,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAI5D,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAMpE,wBAAwB,CACtB,GAAG,EAAE,SAAS,EACd,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAgBpC,kBAAkB,CAChB,GAAG,EAAE,SAAS,EACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC;IA2BlD,kBAAkB,CAChB,GAAG,EAAE,SAAS,EACd,UAAU,EAAE,UAAU,EACtB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAapC,eAAe,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC;IAUpF,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAIvE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IASvF,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAS3E,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAWzD,QAAQ,CACZ,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GACzE,OAAO,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAS3E,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAYjE,gBAAgB,CACpB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAO,GAChD,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC;IAa3B,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IActF,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;CAc/F"}