@noodleseed/one 0.17.0 → 0.18.1

package/node_modules/@noodle-borg/service/dist/store/github-runs.js

@@ -0,0 +1,158 @@
+import { validatePositiveInteger, validateSlug } from './validate.js';
+/**
+ * In-memory {@link GithubDeployRunStore} plus the shared pure helpers every backend reuses
+ * (validation, duplicate detection, the pinned state machine, list shaping). Mirrors
+ * `github-connections.ts`: the Map backend is the non-persistent default and the test double; the
+ * exported helpers keep the json-file backend byte-equivalent in semantics.
+ */
+/** Newest-first list cap when the caller doesn't pass one — mirrors the runs-feed page size. */
+export const DEFAULT_DEPLOY_RUN_LIST_LIMIT = 50;
+/**
+ * The pinned state machine as data (see `DeployRunStatus` in `../store.ts`). The
+ * `failed|canceled|superseded → queued` retry edge is deliberately ABSENT — it is reserved for
+ * `runs retry` (GHD-4) and must not be walkable until that slice adds it.
+ */
+export const DEPLOY_RUN_TRANSITIONS = {
+    queued: ['building', 'canceled', 'superseded'],
+    building: ['deploying', 'failed', 'canceled'],
+    deploying: ['deployed', 'failed'],
+    deployed: [],
+    failed: [],
+    canceled: [],
+    superseded: [],
+};
+export function canTransitionDeployRun(from, to) {
+    return DEPLOY_RUN_TRANSITIONS[from].includes(to);
+}
+/** Shared input validation, reused by the json-file backend. */
+export function validateCreateDeployRunInput(input) {
+    if (input.runId.length === 0)
+        throw new Error('runId must not be empty');
+    if (input.deliveryId.length === 0)
+        throw new Error('deliveryId must not be empty');
+    if (input.commitSha.length === 0)
+        throw new Error('commitSha must not be empty');
+    return {
+        runId: input.runId,
+        orgSlug: validateSlug('org', input.orgSlug),
+        appSlug: validateSlug('app', input.appSlug),
+        envName: input.envName,
+        sourceEvent: input.sourceEvent,
+        deliveryId: input.deliveryId,
+        githubRepositoryId: validatePositiveInteger('githubRepositoryId', input.githubRepositoryId),
+        commitSha: input.commitSha,
+        ref: input.ref,
+        ...(input.prNumber !== undefined
+            ? { prNumber: validatePositiveInteger('prNumber', input.prNumber) }
+            : {}),
+        actorLogin: input.actorLogin,
+        ...(input.blockedReason !== undefined ? { blockedReason: input.blockedReason } : {}),
+    };
+}
+/**
+ * Shared duplicate detection over an already-loaded record set (json-file + in-memory; Postgres does
+ * the same checks inside its transaction). The idempotency contract lives on the interface doc:
+ * delivery ids are globally unique, and only a CANCELED run frees its `{repo, sha, env}` slot.
+ */
+export function findCreateDuplicate(records, input) {
+    const sameDelivery = records.find((record) => record.deliveryId === input.deliveryId);
+    if (sameDelivery !== undefined)
+        return { reason: 'duplicate_delivery', existing: sameDelivery };
+    const sameTarget = records.find((record) => record.status !== 'canceled' &&
+        record.githubRepositoryId === input.githubRepositoryId &&
+        record.commitSha === input.commitSha &&
+        record.envName === input.envName);
+    if (sameTarget !== undefined)
+        return { reason: 'duplicate_target', existing: sameTarget };
+    return undefined;
+}
+/**
+ * Every backend refuses an unfiltered cancel: no webhook outcome ever means "cancel everything
+ * queued for the app" — a missing filter is a caller bug, not a mass cancelation.
+ */
+export function validateCancelFilter(filter) {
+    if (filter.envName === undefined && filter.ref === undefined) {
+        throw new Error('cancelQueuedDeployRuns requires envName or ref');
+    }
+    return {
+        orgSlug: validateSlug('org', filter.orgSlug),
+        appSlug: validateSlug('app', filter.appSlug),
+        ...(filter.envName !== undefined ? { envName: filter.envName } : {}),
+        ...(filter.ref !== undefined ? { ref: filter.ref } : {}),
+    };
+}
+/** A queued run for the same `(orgSlug, appSlug, envName)` that a new creation supersedes. */
+export function supersedesQueued(record, input) {
+    return (record.status === 'queued' &&
+        record.orgSlug === input.orgSlug &&
+        record.appSlug === input.appSlug &&
+        record.envName === input.envName);
+}
+/** A queued run the cancel filter targets — org+app always, env and/or ref narrow it further. */
+export function matchesCancelFilter(record, filter) {
+    if (record.status !== 'queued')
+        return false;
+    if (record.orgSlug !== filter.orgSlug || record.appSlug !== filter.appSlug)
+        return false;
+    if (filter.envName !== undefined && record.envName !== filter.envName)
+        return false;
+    if (filter.ref !== undefined && record.ref !== filter.ref)
+        return false;
+    return true;
+}
+/** Newest-first (createdAt desc, runId desc tiebreak for same-millisecond rows), cap + flag. */
+export function shapeDeployRunList(records, limit) {
+    const sorted = [...records].sort((a, b) => b.createdAt.localeCompare(a.createdAt) || b.runId.localeCompare(a.runId));
+    return { runs: sorted.slice(0, limit), truncated: sorted.length > limit };
+}
+export class InMemoryGithubDeployRunStore {
+    #records = new Map();
+    #now;
+    constructor(options = {}) {
+        this.#now = options.now ?? (() => new Date());
+    }
+    // All four methods are `async` so validation failures reject (matching the other backends)
+    // instead of throwing synchronously out of a Promise-returning signature.
+    async createDeployRun(input) {
+        const safe = validateCreateDeployRunInput(input);
+        const all = [...this.#records.values()];
+        const duplicate = findCreateDuplicate(all, safe);
+        if (duplicate !== undefined)
+            return { ok: false, ...duplicate };
+        const nowIso = this.#now().toISOString();
+        const superseded = [];
+        for (const record of all) {
+            if (!supersedesQueued(record, safe))
+                continue;
+            this.#records.set(record.runId, { ...record, status: 'superseded', finishedAt: nowIso });
+            superseded.push(record.runId);
+        }
+        const record = { ...safe, status: 'queued', createdAt: nowIso };
+        this.#records.set(record.runId, record);
+        return { ok: true, record, superseded };
+    }
+    async getDeployRun(org, runId) {
+        const safeOrg = validateSlug('org', org);
+        const record = this.#records.get(runId);
+        return record?.orgSlug === safeOrg ? record : undefined;
+    }
+    async listDeployRuns(org, app, opts = {}) {
+        const safeOrg = validateSlug('org', org);
+        const safeApp = validateSlug('app', app);
+        const matching = [...this.#records.values()].filter((record) => record.orgSlug === safeOrg && record.appSlug === safeApp);
+        return shapeDeployRunList(matching, opts.limit ?? DEFAULT_DEPLOY_RUN_LIST_LIMIT);
+    }
+    async cancelQueuedDeployRuns(filter) {
+        const safe = validateCancelFilter(filter);
+        const nowIso = this.#now().toISOString();
+        const canceled = [];
+        for (const record of this.#records.values()) {
+            if (!matchesCancelFilter(record, safe))
+                continue;
+            this.#records.set(record.runId, { ...record, status: 'canceled', finishedAt: nowIso });
+            canceled.push(record.runId);
+        }
+        return canceled;
+    }
+}
+//# sourceMappingURL=github-runs.js.map

package/node_modules/@noodle-borg/service/dist/store/github-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-runs.js","sourceRoot":"","sources":["../../src/store/github-runs.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEtE;;;;;GAKG;AAEH,gGAAgG;AAChG,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC;IACE,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC;IAC9C,QAAQ,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC7C,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;IACjC,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;CACf,CAAC;AAEJ,MAAM,UAAU,sBAAsB,CAAC,IAAqB,EAAE,EAAmB;IAC/E,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,4BAA4B,CAAC,KAA2B;IACtE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjF,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,uBAAuB,CAAC,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAC;QAC3F,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAmC,EACnC,KAA2B;IAE3B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAC;IACtF,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAChG,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAC7B,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,KAAK,UAAU;QAC5B,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC,kBAAkB;QACtD,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACpC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CACnC,CAAC;IACF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC1F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAoC;IAEpC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAC5C,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,MAAuB,EAAE,KAA2B;IACnF,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CACjC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CACjC,MAAuB,EACvB,MAAoC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAChC,OAAmC,EACnC,KAAa;IAEb,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CACnF,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,OAAO,4BAA4B;IAC9B,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC9C,IAAI,CAAa;IAE1B,YAAY,UAAgC,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,2FAA2F;IAC3F,0EAA0E;IAC1E,KAAK,CAAC,eAAe,CAAC,KAA2B;QAC/C,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACzF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAoB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACjF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,KAAa;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,GAAW,EACX,GAAW,EACX,OAAoC,EAAE;QAEtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACjD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CACrE,CAAC;QACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAoC;QAC/D,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,SAAS;YACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACvF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/pending-installations-postgres.d.ts

@@ -0,0 +1,19 @@
+import type { Pool } from 'pg';
+import { type PendingGithubInstallationStore } from '../github/pending-installations.js';
+/**
+ * Postgres {@link PendingGithubInstallationStore} (GHD-2): the multi-instance backing for the GitHub
+ * install hand-off — the setup redirect and the CLI poll can land on different instances, so the
+ * correlation must live in the shared store (closes the gap documented in GHD-1 / ADR 0111). A tiny,
+ * self-pruning table: `ON CONFLICT DO NOTHING` IS the first-write-wins rule, expired rows are dropped
+ * opportunistically on every write and treated as absent on read. Mirrors `PostgresStateHandleStore`'s
+ * shape: pool injected, schema ensured by `ensureArtifactSchema`.
+ */
+export declare class PostgresPendingGithubInstallationStore implements PendingGithubInstallationStore {
+    #private;
+    constructor(pool: Pool, options?: {
+        now?: () => Date;
+    });
+    put(state: string, installationId: number): Promise<void>;
+    get(state: string): Promise<number | undefined>;
+}
+//# sourceMappingURL=pending-installations-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/pending-installations-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-installations-postgres.d.ts","sourceRoot":"","sources":["../../src/store/pending-installations-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;GAOG;AACH,qBAAa,sCAAuC,YAAW,8BAA8B;;gBAI/E,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IASpD,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazD,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAqBtD"}

package/node_modules/@noodle-borg/service/dist/store/pending-installations-postgres.js

@@ -0,0 +1,46 @@
+import { PENDING_GITHUB_INSTALLATION_TTL_MS, } from '../github/pending-installations.js';
+/**
+ * Postgres {@link PendingGithubInstallationStore} (GHD-2): the multi-instance backing for the GitHub
+ * install hand-off — the setup redirect and the CLI poll can land on different instances, so the
+ * correlation must live in the shared store (closes the gap documented in GHD-1 / ADR 0111). A tiny,
+ * self-pruning table: `ON CONFLICT DO NOTHING` IS the first-write-wins rule, expired rows are dropped
+ * opportunistically on every write and treated as absent on read. Mirrors `PostgresStateHandleStore`'s
+ * shape: pool injected, schema ensured by `ensureArtifactSchema`.
+ */
+export class PostgresPendingGithubInstallationStore {
+    #pool;
+    #now;
+    constructor(pool, options = {}) {
+        this.#pool = pool;
+        this.#now = options.now ?? (() => new Date());
+    }
+    #expiryCutoff() {
+        return new Date(this.#now().getTime() - PENDING_GITHUB_INSTALLATION_TTL_MS);
+    }
+    async put(state, installationId) {
+        // Opportunistic hygiene first: never let an expired row satisfy the conflict check below.
+        await this.#pool.query('DELETE FROM pending_github_installations WHERE created_at < $1', [
+            this.#expiryCutoff(),
+        ]);
+        await this.#pool.query(`INSERT INTO pending_github_installations (state, installation_id, created_at)
+       VALUES ($1, $2, $3)
+       ON CONFLICT (state) DO NOTHING`, [state, installationId, this.#now()]);
+    }
+    async get(state) {
+        const { rows } = await this.#pool.query('SELECT installation_id, created_at FROM pending_github_installations WHERE state = $1', [
+            state,
+        ]);
+        const row = rows[0];
+        if (row === undefined)
+            return undefined;
+        const cutoff = this.#expiryCutoff();
+        if (new Date(row.created_at).getTime() < cutoff.getTime()) {
+            // Scope the cleanup to the expired row: another instance may have pruned it and landed a
+            // FRESH row for the same state between our SELECT and this DELETE.
+            await this.#pool.query('DELETE FROM pending_github_installations WHERE state = $1 AND created_at < $2', [state, cutoff]);
+            return undefined;
+        }
+        return Number(row.installation_id);
+    }
+}
+//# sourceMappingURL=pending-installations-postgres.js.map

package/node_modules/@noodle-borg/service/dist/store/pending-installations-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-installations-postgres.js","sourceRoot":"","sources":["../../src/store/pending-installations-postgres.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kCAAkC,GAEnC,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,OAAO,sCAAsC;IACxC,KAAK,CAAO;IACZ,IAAI,CAAa;IAE1B,YAAY,IAAU,EAAE,UAAgC,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,aAAa;QACX,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,kCAAkC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,cAAsB;QAC7C,0FAA0F;QAC1F,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gEAAgE,EAAE;YACvF,IAAI,CAAC,aAAa,EAAE;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB;;sCAEgC,EAChC,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAGpC,uFAAuF,EAAE;YAC1F,KAAK;SACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,yFAAyF;YACzF,mEAAmE;YACnE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB,+EAA+E,EAC/E,CAAC,KAAK,EAAE,MAAM,CAAC,CAChB,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/postgres-alerts.d.ts

@@ -0,0 +1,26 @@
+import type { Pool } from 'pg';
+import type { TenantRef } from '../store.js';
+import { type AlertFiringState, type AlertRuleRecord, type AlertRuleStore, type CreateAlertRuleInput } from './alert-rules.js';
+/**
+ * Relational {@link AlertRuleStore} backend (analytics alerting E2), a standalone pool-injected
+ * class mirroring `PostgresRequestEventStore` (the analytics-family precedent) rather than another
+ * facet of `PostgresArtifactStore` — alert rules belong to the analytics surface and this keeps
+ * `postgres.ts` under the size gate. Pure SQL; unit-testable against any local Postgres
+ * (`DATABASE_URL_TEST`).
+ */
+/** Create the `alert_rules` table if absent (idempotent; run once at startup). */
+export declare function ensureAlertRuleSchema(pool: Pool): Promise<void>;
+export declare class PostgresAlertRuleStore implements AlertRuleStore {
+    #private;
+    constructor(pool: Pool, options?: {
+        now?: () => Date;
+    });
+    ensureSchema(): Promise<void>;
+    createAlertRule(input: CreateAlertRuleInput): Promise<AlertRuleRecord>;
+    listAlertRules(ref: TenantRef): Promise<readonly AlertRuleRecord[]>;
+    getAlertRule(ref: TenantRef, id: string): Promise<AlertRuleRecord | undefined>;
+    deleteAlertRule(ref: TenantRef, id: string): Promise<boolean>;
+    listEnabledAlertRules(): Promise<readonly AlertRuleRecord[]>;
+    updateAlertFiringState(id: string, state: AlertFiringState): Promise<AlertRuleRecord | undefined>;
+}
+//# sourceMappingURL=postgres-alerts.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/postgres-alerts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-alerts.d.ts","sourceRoot":"","sources":["../../src/store/postgres-alerts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,eAAe,EACpB,KAAK,cAAc,EAEnB,KAAK,oBAAoB,EAG1B,MAAM,kBAAkB,CAAC;AAG1B;;;;;;GAMG;AAEH,kFAAkF;AAClF,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCrE;AAgDD,qBAAa,sBAAuB,YAAW,cAAc;;gBAI/C,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IAKpD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IA4BtE,cAAc,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAUnE,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAc9E,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc7D,qBAAqB,IAAI,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC;IAO5D,sBAAsB,CAC1B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;CAYxC"}

package/node_modules/@noodle-borg/service/dist/store/postgres-alerts.js

@@ -0,0 +1,142 @@
+import { newAlertRuleRecord, validateAlertRuleId, } from './alert-rules.js';
+import { validateSlug } from './validate.js';
+/**
+ * Relational {@link AlertRuleStore} backend (analytics alerting E2), a standalone pool-injected
+ * class mirroring `PostgresRequestEventStore` (the analytics-family precedent) rather than another
+ * facet of `PostgresArtifactStore` — alert rules belong to the analytics surface and this keeps
+ * `postgres.ts` under the size gate. Pure SQL; unit-testable against any local Postgres
+ * (`DATABASE_URL_TEST`).
+ */
+/** Create the `alert_rules` table if absent (idempotent; run once at startup). */
+export async function ensureAlertRuleSchema(pool) {
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS alert_rules (
+      id                 uuid PRIMARY KEY,
+      org_slug           text NOT NULL,
+      app_slug           text NOT NULL,
+      environment        text NOT NULL,
+      name               text,
+      metric             text NOT NULL,
+      threshold          double precision NOT NULL,
+      window_minutes     int NOT NULL,
+      comparison         text NOT NULL DEFAULT '>=',
+      webhook_url        text NOT NULL,
+      enabled            boolean NOT NULL DEFAULT true,
+      cooldown_minutes   int NOT NULL,
+      breaching          boolean NOT NULL DEFAULT false,
+      last_observed      double precision,
+      last_fired_at      timestamptz,
+      created_by_subject text,
+      created_at         timestamptz NOT NULL,
+      updated_at         timestamptz NOT NULL
+    )
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS alert_rules_tenant_idx
+      ON alert_rules (org_slug, app_slug, environment)
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS alert_rules_enabled_idx
+      ON alert_rules (enabled)
+      WHERE enabled
+  `);
+}
+function rowToRecord(row) {
+    return {
+        id: row.id,
+        orgSlug: row.org_slug,
+        appSlug: row.app_slug,
+        environment: row.environment,
+        ...(row.name !== null ? { name: row.name } : {}),
+        metric: row.metric,
+        threshold: Number(row.threshold),
+        windowMinutes: Number(row.window_minutes),
+        comparison: '>=',
+        webhookUrl: row.webhook_url,
+        enabled: row.enabled,
+        cooldownMinutes: Number(row.cooldown_minutes),
+        breaching: row.breaching,
+        ...(row.last_observed !== null ? { lastObserved: Number(row.last_observed) } : {}),
+        ...(row.last_fired_at !== null
+            ? { lastFiredAt: new Date(row.last_fired_at).toISOString() }
+            : {}),
+        ...(row.created_by_subject !== null ? { createdBySubject: row.created_by_subject } : {}),
+        createdAt: new Date(row.created_at).toISOString(),
+        updatedAt: new Date(row.updated_at).toISOString(),
+    };
+}
+export class PostgresAlertRuleStore {
+    #pool;
+    #now;
+    constructor(pool, options = {}) {
+        this.#pool = pool;
+        this.#now = options.now ?? (() => new Date());
+    }
+    async ensureSchema() {
+        await ensureAlertRuleSchema(this.#pool);
+    }
+    async createAlertRule(input) {
+        const record = newAlertRuleRecord(input, this.#now);
+        await this.#pool.query(`INSERT INTO alert_rules
+         (id, org_slug, app_slug, environment, name, metric, threshold, window_minutes,
+          comparison, webhook_url, enabled, cooldown_minutes, breaching,
+          created_by_subject, created_at, updated_at)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, false, $13, $14, $14)`, [
+            record.id,
+            record.orgSlug,
+            record.appSlug,
+            record.environment,
+            record.name ?? null,
+            record.metric,
+            record.threshold,
+            record.windowMinutes,
+            record.comparison,
+            record.webhookUrl,
+            record.enabled,
+            record.cooldownMinutes,
+            record.createdBySubject ?? null,
+            record.createdAt,
+        ]);
+        return record;
+    }
+    async listAlertRules(ref) {
+        const { rows } = await this.#pool.query(`SELECT * FROM alert_rules
+       WHERE org_slug = $1 AND app_slug = $2 AND environment = $3
+       ORDER BY created_at ASC, id ASC`, [validateSlug('org', ref.org), validateSlug('app', ref.app), validateSlug('env', ref.env)]);
+        return rows.map(rowToRecord);
+    }
+    async getAlertRule(ref, id) {
+        const { rows } = await this.#pool.query(`SELECT * FROM alert_rules
+       WHERE id = $1 AND org_slug = $2 AND app_slug = $3 AND environment = $4`, [
+            validateAlertRuleId(id),
+            validateSlug('org', ref.org),
+            validateSlug('app', ref.app),
+            validateSlug('env', ref.env),
+        ]);
+        return rows[0] ? rowToRecord(rows[0]) : undefined;
+    }
+    async deleteAlertRule(ref, id) {
+        const { rowCount } = await this.#pool.query(`DELETE FROM alert_rules
+       WHERE id = $1 AND org_slug = $2 AND app_slug = $3 AND environment = $4`, [
+            validateAlertRuleId(id),
+            validateSlug('org', ref.org),
+            validateSlug('app', ref.app),
+            validateSlug('env', ref.env),
+        ]);
+        return (rowCount ?? 0) > 0;
+    }
+    async listEnabledAlertRules() {
+        const { rows } = await this.#pool.query('SELECT * FROM alert_rules WHERE enabled ORDER BY created_at ASC, id ASC');
+        return rows.map(rowToRecord);
+    }
+    async updateAlertFiringState(id, state) {
+        const { rows } = await this.#pool.query(`UPDATE alert_rules
+       SET breaching = $2,
+           last_observed = $3,
+           last_fired_at = COALESCE($4, last_fired_at)
+       WHERE id = $1
+       RETURNING *`, [validateAlertRuleId(id), state.breaching, state.lastObserved, state.lastFiredAt ?? null]);
+        return rows[0] ? rowToRecord(rows[0]) : undefined;
+    }
+}
+//# sourceMappingURL=postgres-alerts.js.map

package/node_modules/@noodle-borg/service/dist/store/postgres-alerts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-alerts.js","sourceRoot":"","sources":["../../src/store/postgres-alerts.ts"],"names":[],"mappings":"AAEA,OAAO,EAOL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;;;GAMG;AAEH,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAU;IACpD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;GAqBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;AACL,CAAC;AAuBD,SAAS,WAAW,CAAC,GAAiB;IACpC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,EAAE,GAAG,CAAC,MAAqB;QACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAuB;QAC/D,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC7C,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI;YAC5B,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,sBAAsB;IACxB,KAAK,CAAO;IACZ,IAAI,CAAa;IAE1B,YAAY,IAAU,EAAE,UAAgC,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAA2B;QAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB;;;;wFAIkF,EAClF;YACE,MAAM,CAAC,EAAE;YACT,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,IAAI,IAAI,IAAI;YACnB,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,aAAa;YACpB,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,OAAO;YACd,MAAM,CAAC,eAAe;YACtB,MAAM,CAAC,gBAAgB,IAAI,IAAI;YAC/B,MAAM,CAAC,SAAS;SACjB,CACF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAc;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;;uCAEiC,EACjC,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAC3F,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAc,EAAE,EAAU;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;8EACwE,EACxE;YACE,mBAAmB,CAAC,EAAE,CAAC;YACvB,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAC5B,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAC5B,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;SAC7B,CACF,CAAC;QACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAc,EAAE,EAAU;QAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACzC;8EACwE,EACxE;YACE,mBAAmB,CAAC,EAAE,CAAC;YACvB,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAC5B,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAC5B,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;SAC7B,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC,yEAAyE,CAC1E,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,EAAU,EACV,KAAuB;QAEvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;;;;;mBAKa,EACb,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAC1F,CAAC;QACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/postgres-github-runs.d.ts

@@ -0,0 +1,9 @@
+import type { Pool } from 'pg';
+import type { CancelQueuedDeployRunsFilter, CreateDeployRunInput, CreateDeployRunResult, DeployRunRecord, ListDeployRunsResult } from '../store.js';
+export declare function createDeployRunRow(pool: Pool, now: () => Date, input: CreateDeployRunInput): Promise<CreateDeployRunResult>;
+export declare function getDeployRunRow(pool: Pool, org: string, runId: string): Promise<DeployRunRecord | undefined>;
+export declare function listDeployRunRows(pool: Pool, org: string, app: string, opts?: {
+    readonly limit?: number;
+}): Promise<ListDeployRunsResult>;
+export declare function cancelQueuedDeployRunRows(pool: Pool, now: () => Date, filter: CancelQueuedDeployRunsFilter): Promise<readonly string[]>;
+//# sourceMappingURL=postgres-github-runs.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/postgres-github-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-github-runs.d.ts","sourceRoot":"","sources":["../../src/store/postgres-github-runs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EACV,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACrB,MAAM,aAAa,CAAC;AA6DrB,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CAkEhC;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAMtC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAW/B;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,MAAM,EAAE,4BAA4B,GACnC,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAoB5B"}

package/node_modules/@noodle-borg/service/dist/store/postgres-github-runs.js

@@ -0,0 +1,113 @@
+import { DEFAULT_DEPLOY_RUN_LIST_LIMIT, validateCancelFilter, validateCreateDeployRunInput, } from './github-runs.js';
+import { validateSlug } from './validate.js';
+function rowToRecord(row) {
+    return {
+        runId: row.run_id,
+        orgSlug: row.org_slug,
+        appSlug: row.app_slug,
+        envName: row.env_name,
+        sourceEvent: row.source_event,
+        deliveryId: row.delivery_id,
+        githubRepositoryId: Number(row.github_repository_id),
+        commitSha: row.commit_sha,
+        ref: row.ref,
+        ...(row.pr_number !== null ? { prNumber: Number(row.pr_number) } : {}),
+        status: row.status,
+        ...(row.blocked_reason !== null ? { blockedReason: row.blocked_reason } : {}),
+        ...(row.deployment_id !== null ? { deploymentId: row.deployment_id } : {}),
+        actorLogin: row.actor_login,
+        ...(row.error_summary !== null ? { errorSummary: row.error_summary } : {}),
+        createdAt: new Date(row.created_at).toISOString(),
+        ...(row.started_at !== null ? { startedAt: new Date(row.started_at).toISOString() } : {}),
+        ...(row.finished_at !== null ? { finishedAt: new Date(row.finished_at).toISOString() } : {}),
+    };
+}
+export async function createDeployRunRow(pool, now, input) {
+    const safe = validateCreateDeployRunInput(input);
+    const client = await pool.connect();
+    try {
+        // BEGIN inside the try: a transient failure here must still release the checked-out client.
+        await client.query('BEGIN');
+        await client.query('LOCK TABLE deploy_runs IN SHARE ROW EXCLUSIVE MODE');
+        const { rows: sameDelivery } = await client.query('SELECT * FROM deploy_runs WHERE delivery_id = $1', [safe.deliveryId]);
+        if (sameDelivery[0] !== undefined) {
+            await client.query('ROLLBACK');
+            return { ok: false, reason: 'duplicate_delivery', existing: rowToRecord(sameDelivery[0]) };
+        }
+        const { rows: sameTarget } = await client.query(`SELECT * FROM deploy_runs
+       WHERE github_repository_id = $1 AND commit_sha = $2 AND env_name = $3
+         AND status != 'canceled'`, [safe.githubRepositoryId, safe.commitSha, safe.envName]);
+        if (sameTarget[0] !== undefined) {
+            await client.query('ROLLBACK');
+            return { ok: false, reason: 'duplicate_target', existing: rowToRecord(sameTarget[0]) };
+        }
+        const nowTs = now();
+        const { rows: supersededRows } = await client.query(`UPDATE deploy_runs SET status = 'superseded', finished_at = $4
+       WHERE org_slug = $1 AND app_slug = $2 AND env_name = $3 AND status = 'queued'
+       RETURNING run_id`, [safe.orgSlug, safe.appSlug, safe.envName, nowTs]);
+        const { rows } = await client.query(`INSERT INTO deploy_runs
+         (run_id, org_slug, app_slug, env_name, source_event, delivery_id, github_repository_id,
+          commit_sha, ref, pr_number, status, blocked_reason, actor_login, created_at)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, 'queued', $11, $12, $13)
+       RETURNING *`, [
+            safe.runId,
+            safe.orgSlug,
+            safe.appSlug,
+            safe.envName,
+            safe.sourceEvent,
+            safe.deliveryId,
+            safe.githubRepositoryId,
+            safe.commitSha,
+            safe.ref,
+            safe.prNumber ?? null,
+            safe.blockedReason ?? null,
+            safe.actorLogin,
+            nowTs,
+        ]);
+        await client.query('COMMIT');
+        return {
+            ok: true,
+            record: rowToRecord(rows[0]),
+            superseded: supersededRows.map((row) => row.run_id),
+        };
+    }
+    catch (error) {
+        await client.query('ROLLBACK').catch(() => undefined); // best-effort — preserve the original error
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+export async function getDeployRunRow(pool, org, runId) {
+    const { rows } = await pool.query('SELECT * FROM deploy_runs WHERE org_slug = $1 AND run_id = $2', [validateSlug('org', org), runId]);
+    return rows[0] ? rowToRecord(rows[0]) : undefined;
+}
+export async function listDeployRunRows(pool, org, app, opts = {}) {
+    const limit = opts.limit ?? DEFAULT_DEPLOY_RUN_LIST_LIMIT;
+    // Fetch limit+1 so `truncated` is exact without a second count query.
+    const { rows } = await pool.query(`SELECT * FROM deploy_runs
+     WHERE org_slug = $1 AND app_slug = $2
+     ORDER BY created_at DESC, run_id DESC
+     LIMIT $3`, [validateSlug('org', org), validateSlug('app', app), limit + 1]);
+    return { runs: rows.slice(0, limit).map(rowToRecord), truncated: rows.length > limit };
+}
+export async function cancelQueuedDeployRunRows(pool, now, filter) {
+    const safe = validateCancelFilter(filter);
+    const conditions = ['org_slug = $1', 'app_slug = $2', "status = 'queued'"];
+    const params = [safe.orgSlug, safe.appSlug];
+    if (safe.envName !== undefined) {
+        params.push(safe.envName);
+        conditions.push(`env_name = $${params.length}`);
+    }
+    if (safe.ref !== undefined) {
+        params.push(safe.ref);
+        conditions.push(`ref = $${params.length}`);
+    }
+    params.push(now());
+    const { rows } = await pool.query(`UPDATE deploy_runs SET status = 'canceled', finished_at = $${params.length}
+     WHERE ${conditions.join(' AND ')}
+     RETURNING run_id`, params);
+    return rows.map((row) => row.run_id);
+}
+//# sourceMappingURL=postgres-github-runs.js.map

package/node_modules/@noodle-borg/service/dist/store/postgres-github-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-github-runs.js","sourceRoot":"","sources":["../../src/store/postgres-github-runs.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAgC7C,SAAS,WAAW,CAAC,GAAiB;IACpC,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,YAA8C;QAC/D,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACpD,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,EAAE,GAAG,CAAC,MAAmC;QAC/C,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,GAAe,EACf,KAA2B;IAE3B,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,MAAM,GAAe,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,4FAA4F;QAC5F,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/C,kDAAkD,EAClD,CAAC,IAAI,CAAC,UAAU,CAAC,CAClB,CAAC;QACF,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC7C;;kCAE4B,EAC5B,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CACxD,CAAC;QACF,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;QACpB,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjD;;wBAEkB,EAClB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAClD,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;mBAIa,EACb;YACE,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,OAAO;YACZ,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,UAAU;YACf,IAAI,CAAC,kBAAkB;YACvB,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,GAAG;YACR,IAAI,CAAC,QAAQ,IAAI,IAAI;YACrB,IAAI,CAAC,aAAa,IAAI,IAAI;YAC1B,IAAI,CAAC,UAAU;YACf,KAAK;SACN,CACF,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAiB,CAAC;YAC5C,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;SACpD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,4CAA4C;QACnG,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAU,EACV,GAAW,EACX,KAAa;IAEb,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,+DAA+D,EAC/D,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAClC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,GAAW,EACX,GAAW,EACX,OAAoC,EAAE;IAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC;IAC1D,sEAAsE;IACtE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;cAGU,EACV,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAChE,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAU,EACV,GAAe,EACf,MAAoC;IAEpC,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,8DAA8D,MAAM,CAAC,MAAM;aAClE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;sBACf,EAClB,MAAM,CACP,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/node_modules/@noodle-borg/service/dist/store/postgres-github.d.ts

@@ -3,6 +3,7 @@ import type { RepoConnectionRecord, UpsertRepoConnectionInput, UpsertRepoConnect
 export declare function upsertRepoConnectionRow(pool: Pool, now: () => Date, input: UpsertRepoConnectionInput): Promise<UpsertRepoConnectionResult>;
 export declare function getRepoConnectionRow(pool: Pool, org: string, app: string): Promise<RepoConnectionRecord | undefined>;
 export declare function getRepoConnectionByRepositoryRow(pool: Pool, githubRepositoryId: number): Promise<RepoConnectionRecord | undefined>;
+export declare function listRepoConnectionsByInstallationRow(pool: Pool, installationId: number): Promise<readonly RepoConnectionRecord[]>;
 export declare function disableRepoConnectionRow(pool: Pool, now: () => Date, org: string, app: string): Promise<boolean>;
 export declare function refreshRepoMetadataRow(pool: Pool, now: () => Date, githubRepositoryId: number, updates: {
     readonly ownerLogin?: string;

package/node_modules/@noodle-borg/service/dist/store/postgres-github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-github.d.ts","sourceRoot":"","sources":["../../src/store/postgres-github.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EACV,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,aAAa,CAAC;AA4CrB,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAsFrC;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAM3C;AAED,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,IAAI,EACV,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAM3C;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE;IACP,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC,GACA,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAmB3C"}
+{"version":3,"file":"postgres-github.d.ts","sourceRoot":"","sources":["../../src/store/postgres-github.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EACV,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,aAAa,CAAC;AA4CrB,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAuFrC;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAM3C;AAED,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,IAAI,EACV,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAM3C;AAED,wBAAsB,oCAAoC,CACxD,IAAI,EAAE,IAAI,EACV,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAM1C;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE;IACP,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC,GACA,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAmB3C"}

package/node_modules/@noodle-borg/service/dist/store/postgres-github.js

@@ -21,8 +21,9 @@ export async function upsertRepoConnectionRow(pool, now, input) {
     const orgSlug = validateSlug('org', input.orgSlug);
     const appSlug = validateSlug('app', input.appSlug);
     const client = await pool.connect();
-    await client.query('BEGIN');
     try {
+        // BEGIN inside the try: a transient failure here must still release the checked-out client.
+        await client.query('BEGIN');
         // FOR UPDATE only locks rows that exist, so two concurrent FIRST-TIME connects would both pass
         // the conflict checks and race the insert (second one either rewrites the enabled row via
         // ON CONFLICT or surfaces a raw partial-index violation). Connects are rare, owner-gated admin
@@ -85,7 +86,7 @@ export async function upsertRepoConnectionRow(pool, now, input) {
         return { ok: true, record: rowToRecord(rows[0]) };
     }
     catch (error) {
-        await client.query('ROLLBACK');
+        await client.query('ROLLBACK').catch(() => undefined); // best-effort — preserve the original error
         throw error;
     }
     finally {
@@ -100,6 +101,10 @@ export async function getRepoConnectionByRepositoryRow(pool, githubRepositoryId)
     const { rows } = await pool.query('SELECT * FROM repo_connections WHERE github_repository_id = $1 AND enabled = true', [validatePositiveInteger('githubRepositoryId', githubRepositoryId)]);
     return rows[0] ? rowToRecord(rows[0]) : undefined;
 }
+export async function listRepoConnectionsByInstallationRow(pool, installationId) {
+    const { rows } = await pool.query('SELECT * FROM repo_connections WHERE installation_id = $1 AND enabled = true', [validatePositiveInteger('installationId', installationId)]);
+    return rows.map(rowToRecord);
+}
 export async function disableRepoConnectionRow(pool, now, org, app) {
     const { rowCount } = await pool.query(`UPDATE repo_connections SET enabled = false, updated_at = $3
      WHERE org_slug = $1 AND app_slug = $2 AND enabled = true`, [validateSlug('org', org), validateSlug('app', app), now()]);