@overlordai/server 1.0.52 → 1.0.54

package/dist/common/project-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-validation.d.ts","sourceRoot":"","sources":["../../src/common/project-validation.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,sBAAsB,uRAAwR,CAAC;AAE5T;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2E5F"}

package/dist/common/project-validation.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALLOWED_PROJECT_FIELDS = void 0;
+exports.validateProjectUpdate = validateProjectUpdate;
+const common_1 = require("@nestjs/common");
+const DANGEROUS_ENV_KEYS = new Set(['LD_PRELOAD', 'LD_LIBRARY_PATH', 'PATH', 'HOME', 'SHELL', 'USER', 'LOGNAME']);
+const ENV_KEY_PATTERN = /^[A-Z][A-Z0-9_]*$/;
+exports.ALLOWED_PROJECT_FIELDS = ['name', 'repoUrl', 'sshUrl', 'defaultBranch', 'pipeline', 'setupCommands', 'agentType', 'agentEnv', 'agentCommand', 'workspaceRoot', 'testCommand', 'skillsPath', 'allowedTools', 'maxTurns', 'ptyOutputFilter', 'isDefault', 'aliases', 'gitPlatform', 'defaultReviewers'];
+/**
+ * Validate and sanitize project update fields.
+ * Shared between ProjectController and AdminProjectController.
+ */
+function validateProjectUpdate(body) {
+    if ('agentEnv' in body && body.agentEnv != null) {
+        const env = body.agentEnv;
+        if (typeof env !== 'object' || Array.isArray(env)) {
+            throw new common_1.BadRequestException('agentEnv must be a plain object');
+        }
+        for (const [k, v] of Object.entries(env)) {
+            if (!ENV_KEY_PATTERN.test(k)) {
+                throw new common_1.BadRequestException(`agentEnv key '${k}' must match /^[A-Z][A-Z0-9_]*$/`);
+            }
+            if (typeof v !== 'string') {
+                throw new common_1.BadRequestException(`agentEnv value for '${k}' must be a string`);
+            }
+            if (DANGEROUS_ENV_KEYS.has(k)) {
+                throw new common_1.BadRequestException(`agentEnv key '${k}' is not allowed`);
+            }
+        }
+    }
+    if ('setupCommands' in body && body.setupCommands != null) {
+        if (typeof body.setupCommands !== 'string') {
+            throw new common_1.BadRequestException('setupCommands must be a JSON string');
+        }
+        try {
+            const parsed = JSON.parse(body.setupCommands);
+            if (!Array.isArray(parsed) || !parsed.every((item) => typeof item === 'string')) {
+                throw new common_1.BadRequestException('setupCommands must be a JSON array of strings');
+            }
+        }
+        catch (e) {
+            if (e instanceof common_1.BadRequestException)
+                throw e;
+            throw new common_1.BadRequestException('setupCommands must be a valid JSON string');
+        }
+    }
+    if ('agentCommand' in body && body.agentCommand != null) {
+        if (typeof body.agentCommand !== 'string' || body.agentCommand.trim().length === 0) {
+            throw new common_1.BadRequestException('agentCommand must be a non-empty string');
+        }
+        if (body.agentCommand.length > 500) {
+            throw new common_1.BadRequestException('agentCommand must be at most 500 characters');
+        }
+    }
+    const sanitized = {};
+    for (const field of exports.ALLOWED_PROJECT_FIELDS) {
+        if (field in body)
+            sanitized[field] = body[field];
+    }
+    if ('maxTurns' in sanitized && sanitized.maxTurns != null) {
+        const v = sanitized.maxTurns;
+        if (typeof v !== 'number' || !Number.isInteger(v) || v <= 0) {
+            throw new common_1.BadRequestException('maxTurns must be a positive integer');
+        }
+    }
+    if ('pipeline' in sanitized && sanitized.pipeline != null) {
+        const v = sanitized.pipeline;
+        if (typeof v !== 'string') {
+            throw new common_1.BadRequestException('pipeline must be a JSON string');
+        }
+        try {
+            JSON.parse(v);
+        }
+        catch {
+            throw new common_1.BadRequestException('pipeline must be valid JSON');
+        }
+    }
+    if ('repoUrl' in sanitized && sanitized.repoUrl != null) {
+        const v = sanitized.repoUrl;
+        if (typeof v !== 'string' || !(v.startsWith('http://') || v.startsWith('https://') || v.startsWith('git@'))) {
+            throw new common_1.BadRequestException('repoUrl must start with http://, https://, or git@');
+        }
+    }
+    return sanitized;
+}
+//# sourceMappingURL=project-validation.js.map

package/dist/common/project-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-validation.js","sourceRoot":"","sources":["../../src/common/project-validation.ts"],"names":[],"mappings":";;;AAWA,sDA2EC;AAtFD,2CAAqD;AAErD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAClH,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAE/B,QAAA,sBAAsB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,CAAU,CAAC;AAE5T;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,IAA6B;IACjE,IAAI,UAAU,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,4BAAmB,CAAC,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,4BAAmB,CAAC,iBAAiB,CAAC,kCAAkC,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,4BAAmB,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,eAAe,IAAI,IAAI,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QAC1D,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC3C,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAuB,CAAC,CAAC;YACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACzF,MAAM,IAAI,4BAAmB,CAAC,+CAA+C,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,4BAAmB;gBAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,IAAI,4BAAmB,CAAC,2CAA2C,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,IAAI,cAAc,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;QACxD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,4BAAmB,CAAC,yCAAyC,CAAC,CAAC;QAC3E,CAAC;QACD,IAAK,IAAI,CAAC,YAAuB,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,4BAAmB,CAAC,6CAA6C,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,8BAAsB,EAAE,CAAC;QAC3C,IAAI,KAAK,IAAI,IAAI;YAAE,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,4BAAmB,CAAC,gCAAgC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAmB,CAAC,6BAA6B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,SAAS,IAAI,SAAS,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5G,MAAM,IAAI,4BAAmB,CAAC,oDAAoD,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/common/rate-limit.guard.d.ts

@@ -1,4 +1,4 @@
-import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { CanActivate, ExecutionContext, type OnModuleDestroy } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 /**
  * Metadata key for rate limit configuration.
@@ -33,13 +33,14 @@ export declare const RateLimit: (config: RateLimitConfig) => import("@nestjs/com
  * Apply to individual routes with @RateLimit({ limit, windowMs }) decorator,
  * or let the default (100/min) apply.
  */
-export declare class RateLimitGuard implements CanActivate {
+export declare class RateLimitGuard implements CanActivate, OnModuleDestroy {
     private readonly reflector;
     private readonly buckets;
     private readonly CLEANUP_INTERVAL_MS;
+    private readonly MAX_BUCKETS;
     private cleanupTimer;
-    private cleanupCounter;
     constructor(reflector: Reflector);
+    onModuleDestroy(): void;
     canActivate(context: ExecutionContext): boolean;
     private resolveConfig;
     private buildKey;

package/dist/common/rate-limit.guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.guard.d.ts","sourceRoot":"","sources":["../../src/common/rate-limit.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAIjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC;;GAEG;AACH,eAAO,MAAM,cAAc,cAAc,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GAAI,QAAQ,eAAe,qDACZ,CAAC;AAatC;;;;;;;;GAQG;AACH,qBACa,cAAe,YAAW,WAAW;IAMpC,OAAO,CAAC,QAAQ,CAAC,SAAS;IALtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,YAAY,CAAiC;IACrD,OAAO,CAAC,cAAc,CAAK;gBAEE,SAAS,EAAE,SAAS;IASjD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;IAuC/C,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,QAAQ;IA6BhB,OAAO,CAAC,OAAO;CAQhB"}
+{"version":3,"file":"rate-limit.guard.d.ts","sourceRoot":"","sources":["../../src/common/rate-limit.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAIhB,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC;;GAEG;AACH,eAAO,MAAM,cAAc,cAAc,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,SAAS,GAAI,QAAQ,eAAe,qDACZ,CAAC;AAatC;;;;;;;;GAQG;AACH,qBACa,cAAe,YAAW,WAAW,EAAE,eAAe;IAMrD,OAAO,CAAC,QAAQ,CAAC,SAAS;IALtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,YAAY,CAAiC;gBAExB,SAAS,EAAE,SAAS;IASjD,eAAe,IAAI,IAAI;IAIvB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;IAwC/C,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,QAAQ;IA6BhB,OAAO,CAAC,OAAO;CAahB"}

package/dist/common/rate-limit.guard.js

@@ -44,8 +44,8 @@ let RateLimitGuard = class RateLimitGuard {
     reflector;
     buckets = new Map();
     CLEANUP_INTERVAL_MS = 60_000;
+    MAX_BUCKETS = 10_000;
     cleanupTimer;
-    cleanupCounter = 0;
     constructor(reflector) {
         this.reflector = reflector;
         // Periodic cleanup of expired entries to prevent memory growth
@@ -55,6 +55,9 @@ let RateLimitGuard = class RateLimitGuard {
             this.cleanupTimer.unref();
         }
     }
+    onModuleDestroy() {
+        clearInterval(this.cleanupTimer);
+    }
     canActivate(context) {
         // Disable rate limiting in test environment
         if (process.env.NODE_ENV === 'test')
@@ -67,6 +70,10 @@ let RateLimitGuard = class RateLimitGuard {
         if (!entry || now >= entry.resetAt) {
             // New window
             this.buckets.set(key, { count: 1, resetAt: now + config.windowMs });
+            // Proactive cleanup at 80% capacity to avoid hitting MAX_BUCKETS
+            if (this.buckets.size > this.MAX_BUCKETS * 0.8) {
+                this.cleanup();
+            }
             return true;
         }
         entry.count++;
@@ -78,10 +85,6 @@ let RateLimitGuard = class RateLimitGuard {
                 retryAfter: retryAfterSec,
             }, common_1.HttpStatus.TOO_MANY_REQUESTS);
         }
-        // Periodic inline cleanup to guard against unbounded memory growth
-        if (++this.cleanupCounter % 100 === 0) {
-            this.cleanup();
-        }
         return true;
     }
     resolveConfig(context) {
@@ -114,8 +117,14 @@ let RateLimitGuard = class RateLimitGuard {
     }
     cleanup() {
         const now = Date.now();
+        const overCapacity = this.buckets.size > this.MAX_BUCKETS * 0.8;
         for (const [key, entry] of this.buckets) {
             if (now >= entry.resetAt) {
+                // Always remove fully expired entries
+                this.buckets.delete(key);
+            }
+            else if (overCapacity && entry.count <= 1) {
+                // When over capacity, also evict low-activity entries to free memory
                 this.buckets.delete(key);
             }
         }

package/dist/common/rate-limit.guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.guard.js","sourceRoot":"","sources":["../../src/common/rate-limit.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAOwB;AACxB,uCAAyC;AAGzC;;GAEG;AACU,QAAA,cAAc,GAAG,WAAW,CAAC;AAc1C;;;;;;;GAOG;AACI,MAAM,SAAS,GAAG,CAAC,MAAuB,EAAE,EAAE,CACnD,IAAA,oBAAW,EAAC,sBAAc,EAAE,MAAM,CAAC,CAAC;AADzB,QAAA,SAAS,aACgB;AAEtC,mDAAmD;AACnD,MAAM,kBAAkB,GAAoB;IAC1C,KAAK,EAAE,GAAG;IACV,QAAQ,EAAE,MAAM;CACjB,CAAC;AAOF;;;;;;;;GAQG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IAMI;IALZ,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,mBAAmB,GAAG,MAAM,CAAC;IACtC,YAAY,CAAiC;IAC7C,cAAc,GAAG,CAAC,CAAC;IAE3B,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;QAC/C,+DAA+D;QAC/D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChF,0EAA0E;QAC1E,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,WAAW,CAAC,OAAyB;QACnC,4CAA4C;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,aAAa;YACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9D,MAAM,IAAI,sBAAa,CACrB;gBACE,UAAU,EAAE,mBAAU,CAAC,iBAAiB;gBACxC,OAAO,EAAE,mBAAmB;gBAC5B,UAAU,EAAE,aAAa;aAC1B,EACD,mBAAU,CAAC,iBAAiB,CAC7B,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,IAAI,EAAE,IAAI,CAAC,cAAc,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,OAAyB;QAC7C,4DAA4D;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACtC,sBAAc,EACd,OAAO,CAAC,UAAU,EAAE,CACrB,CAAC;QACF,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QAExC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,sBAAc,EACd,OAAO,CAAC,QAAQ,EAAE,CACnB,CAAC;QACF,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC;QAEpC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAEO,QAAQ,CACd,OAAyB,EACzB,OAAgB,EAChB,MAAuB;QAEvB,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAEzE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;YACnC,OAAO,SAAS,EAAE,IAAI,KAAK,EAAE,CAAC;QAChC,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,mDAAmD;QACnD,MAAM,IAAI,GAAI,OAA8C,CAAC,IAEhD,CAAC;QAEd,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;YACd,OAAO,WAAW,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QACnC,OAAO,SAAS,EAAE,IAAI,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AA5GY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAO6B,gBAAS;GANtC,cAAc,CA4G1B"}
+{"version":3,"file":"rate-limit.guard.js","sourceRoot":"","sources":["../../src/common/rate-limit.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAQwB;AACxB,uCAAyC;AAGzC;;GAEG;AACU,QAAA,cAAc,GAAG,WAAW,CAAC;AAc1C;;;;;;;GAOG;AACI,MAAM,SAAS,GAAG,CAAC,MAAuB,EAAE,EAAE,CACnD,IAAA,oBAAW,EAAC,sBAAc,EAAE,MAAM,CAAC,CAAC;AADzB,QAAA,SAAS,aACgB;AAEtC,mDAAmD;AACnD,MAAM,kBAAkB,GAAoB;IAC1C,KAAK,EAAE,GAAG;IACV,QAAQ,EAAE,MAAM;CACjB,CAAC;AAOF;;;;;;;;GAQG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IAMI;IALZ,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,mBAAmB,GAAG,MAAM,CAAC;IAC7B,WAAW,GAAG,MAAM,CAAC;IAC9B,YAAY,CAAiC;IAErD,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;QAC/C,+DAA+D;QAC/D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChF,0EAA0E;QAC1E,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,eAAe;QACb,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,WAAW,CAAC,OAAyB;QACnC,4CAA4C;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAEpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,aAAa;YACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEpE,iEAAiE;YACjE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;gBAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9D,MAAM,IAAI,sBAAa,CACrB;gBACE,UAAU,EAAE,mBAAU,CAAC,iBAAiB;gBACxC,OAAO,EAAE,mBAAmB;gBAC5B,UAAU,EAAE,aAAa;aAC1B,EACD,mBAAU,CAAC,iBAAiB,CAC7B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,OAAyB;QAC7C,4DAA4D;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACtC,sBAAc,EACd,OAAO,CAAC,UAAU,EAAE,CACrB,CAAC;QACF,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QAExC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACpC,sBAAc,EACd,OAAO,CAAC,QAAQ,EAAE,CACnB,CAAC;QACF,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC;QAEpC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAEO,QAAQ,CACd,OAAyB,EACzB,OAAgB,EAChB,MAAuB;QAEvB,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAEzE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;YACnC,OAAO,SAAS,EAAE,IAAI,KAAK,EAAE,CAAC;QAChC,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,mDAAmD;QACnD,MAAM,IAAI,GAAI,OAA8C,CAAC,IAEhD,CAAC;QAEd,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;YACd,OAAO,WAAW,IAAI,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QACnC,OAAO,SAAS,EAAE,IAAI,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QAChE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,sCAAsC;gBACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,YAAY,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC5C,qEAAqE;gBACrE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAA;AAtHY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAO6B,gBAAS;GANtC,cAAc,CAsH1B"}

package/dist/common/sql-utils.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Escape SQL LIKE wildcard characters for safe use in parameterised queries.
+ * Wraps the result in `%…%` so the caller can use it directly as a LIKE pattern.
+ */
+export declare function sanitizeForLike(query: string): string;
+//# sourceMappingURL=sql-utils.d.ts.map

package/dist/common/sql-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-utils.d.ts","sourceRoot":"","sources":["../../src/common/sql-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/common/sql-utils.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeForLike = sanitizeForLike;
+/**
+ * Escape SQL LIKE wildcard characters for safe use in parameterised queries.
+ * Wraps the result in `%…%` so the caller can use it directly as a LIKE pattern.
+ */
+function sanitizeForLike(query) {
+    return `%${query.replace(/\\/g, '\\\\').replace(/%/g, '\\%').replace(/_/g, '\\_')}%`;
+}
+//# sourceMappingURL=sql-utils.js.map

package/dist/common/sql-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-utils.js","sourceRoot":"","sources":["../../src/common/sql-utils.ts"],"names":[],"mappings":";;AAIA,0CAEC;AAND;;;GAGG;AACH,SAAgB,eAAe,CAAC,KAAa;IAC3C,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AACvF,CAAC"}

package/dist/common/string-utils.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Truncate a string to a maximum length, appending '...' if truncated.
+ */
+export declare function truncate(text: string, maxLen: number): string;
+export { maskToken } from '@overlordai/protocol';
+//# sourceMappingURL=string-utils.d.ts.map

package/dist/common/string-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-utils.d.ts","sourceRoot":"","sources":["../../src/common/string-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/common/string-utils.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maskToken = void 0;
+exports.truncate = truncate;
+/**
+ * Truncate a string to a maximum length, appending '...' if truncated.
+ */
+function truncate(text, maxLen) {
+    if (text.length <= maxLen)
+        return text;
+    return text.slice(0, maxLen) + '...';
+}
+var protocol_1 = require("@overlordai/protocol");
+Object.defineProperty(exports, "maskToken", { enumerable: true, get: function () { return protocol_1.maskToken; } });
+//# sourceMappingURL=string-utils.js.map

package/dist/common/string-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-utils.js","sourceRoot":"","sources":["../../src/common/string-utils.ts"],"names":[],"mappings":";;;AAGA,4BAGC;AAND;;GAEG;AACH,SAAgB,QAAQ,CAAC,IAAY,EAAE,MAAc;IACnD,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;AACvC,CAAC;AAED,iDAAiD;AAAxC,qGAAA,SAAS,OAAA"}

package/dist/common/worker-utils.d.ts

@@ -0,0 +1,31 @@
+import type { Worker } from '@overlordai/protocol';
+/**
+ * Strip sensitive fields (e.g. recoverySecretHash) from a Worker object
+ * before returning it in API responses.
+ */
+export declare function stripWorkerSecrets(worker: Worker): {
+    id: string;
+    name: string;
+    host: string;
+    port: number;
+    tokenId: number;
+    os: string | null;
+    cpuModel: string | null;
+    cpuCores: number | null;
+    memoryGb: number | null;
+    maxSlots: number;
+    activeSlots: number;
+    cpuUsage: number;
+    memoryUsage: number;
+    diskUsage: number;
+    loadThreshold: number;
+    tags: string[];
+    capabilities: string[];
+    protocolVersion: string;
+    workerVersion: string | null;
+    lastHeartbeat: string | null;
+    status: import("@overlordai/protocol").WorkerStatus;
+    decommissionedAt: string | null;
+    decommissionedBy: number | null;
+};
+//# sourceMappingURL=worker-utils.d.ts.map

package/dist/common/worker-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-utils.d.ts","sourceRoot":"","sources":["../../src/common/worker-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;EAGhD"}

package/dist/common/worker-utils.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripWorkerSecrets = stripWorkerSecrets;
+/**
+ * Strip sensitive fields (e.g. recoverySecretHash) from a Worker object
+ * before returning it in API responses.
+ */
+function stripWorkerSecrets(worker) {
+    const { recoverySecretHash, ...safe } = worker;
+    return safe;
+}
+//# sourceMappingURL=worker-utils.js.map

package/dist/common/worker-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-utils.js","sourceRoot":"","sources":["../../src/common/worker-utils.ts"],"names":[],"mappings":";;AAMA,gDAGC;AAPD;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/database/base.repository.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Shared repository utilities for mapping database rows and building dynamic SQL.
+ *
+ * These are plain functions — NOT a class hierarchy. Each repository defines
+ * its own COLUMN_SCHEMA constant and calls these helpers.
+ */
+export type ColumnType = 'string' | 'number' | 'boolean' | 'json' | 'json_array';
+export interface ColumnDef {
+    /** The snake_case column name in the database. */
+    column: string;
+    /** How to convert the value when reading/writing. */
+    type: ColumnType;
+    /** If true, the value may be null and should be coalesced with ?? null. */
+    nullable?: boolean;
+}
+export type ColumnSchema<T extends string = string> = Record<T, ColumnDef>;
+/**
+ * Maps a raw database row to a camelCase entity using a column schema.
+ *
+ * Each key in `schema` becomes a key on the output object. The value is read
+ * from `row[def.column]` and converted according to `def.type`:
+ *
+ * - `string` / `number`: cast with `as`; if `nullable`, uses `?? null`
+ * - `boolean`: converts SQLite integer (0/1) to boolean
+ * - `json`: `JSON.parse()` with fallback `{}`
+ * - `json_array`: `JSON.parse()` with fallback `[]`
+ */
+export declare function mapRow<T>(row: Record<string, unknown>, schema: ColumnSchema): T;
+export interface UpdateResult {
+    sql: string;
+    params: Record<string, unknown>;
+}
+/**
+ * Options to customize value serialization in buildUpdate.
+ *
+ * `serialize` is called for each key present in `data`. Return `undefined`
+ * to use the default (raw value). Return any other value to override.
+ */
+export interface BuildUpdateOptions {
+    serialize?: (key: string, value: unknown) => unknown;
+}
+/**
+ * Builds a parameterised UPDATE statement from a column map + data object.
+ *
+ * Only keys present in BOTH `data` and `columnMap` produce SET clauses.
+ * Returns `null` when there are no columns to update.
+ *
+ * @param table   - Table name (safe literal, never from user input)
+ * @param idCol   - Column name of the primary key (e.g. 'id', 'key')
+ * @param idValue - Primary key value
+ * @param data    - camelCase key → value pairs to update
+ * @param columnMap - camelCase key → snake_case column name
+ * @param options - Optional serialization overrides
+ */
+export declare function buildUpdate(table: string, idCol: string, idValue: unknown, data: Record<string, unknown>, columnMap: Record<string, string>, options?: BuildUpdateOptions): UpdateResult | null;
+//# sourceMappingURL=base.repository.d.ts.map

package/dist/database/base.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.repository.d.ts","sourceRoot":"","sources":["../../src/database/base.repository.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC;AAEjF,MAAM,WAAW,SAAS;IACxB,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,IAAI,EAAE,UAAU,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAM3E;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,CAAC,EACtB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,MAAM,EAAE,YAAY,GACnB,CAAC,CAwBH;AAMD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACtD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACjC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,YAAY,GAAG,IAAI,CAuBrB"}

package/dist/database/base.repository.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * Shared repository utilities for mapping database rows and building dynamic SQL.
+ *
+ * These are plain functions — NOT a class hierarchy. Each repository defines
+ * its own COLUMN_SCHEMA constant and calls these helpers.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapRow = mapRow;
+exports.buildUpdate = buildUpdate;
+// ---------------------------------------------------------------------------
+// mapRow — generic row mapper
+// ---------------------------------------------------------------------------
+/**
+ * Maps a raw database row to a camelCase entity using a column schema.
+ *
+ * Each key in `schema` becomes a key on the output object. The value is read
+ * from `row[def.column]` and converted according to `def.type`:
+ *
+ * - `string` / `number`: cast with `as`; if `nullable`, uses `?? null`
+ * - `boolean`: converts SQLite integer (0/1) to boolean
+ * - `json`: `JSON.parse()` with fallback `{}`
+ * - `json_array`: `JSON.parse()` with fallback `[]`
+ */
+function mapRow(row, schema) {
+    const result = {};
+    for (const [key, def] of Object.entries(schema)) {
+        const raw = row[def.column];
+        switch (def.type) {
+            case 'json':
+                result[key] = JSON.parse(raw || '{}');
+                break;
+            case 'json_array':
+                result[key] = JSON.parse(raw || '[]');
+                break;
+            case 'boolean':
+                result[key] = raw === 1;
+                break;
+            default:
+                // string | number
+                result[key] = def.nullable ? raw ?? null : raw;
+                break;
+        }
+    }
+    return result;
+}
+/**
+ * Builds a parameterised UPDATE statement from a column map + data object.
+ *
+ * Only keys present in BOTH `data` and `columnMap` produce SET clauses.
+ * Returns `null` when there are no columns to update.
+ *
+ * @param table   - Table name (safe literal, never from user input)
+ * @param idCol   - Column name of the primary key (e.g. 'id', 'key')
+ * @param idValue - Primary key value
+ * @param data    - camelCase key → value pairs to update
+ * @param columnMap - camelCase key → snake_case column name
+ * @param options - Optional serialization overrides
+ */
+function buildUpdate(table, idCol, idValue, data, columnMap, options) {
+    const setClauses = [];
+    const params = { _id: idValue };
+    for (const [key, value] of Object.entries(data)) {
+        const col = columnMap[key];
+        if (!col)
+            continue;
+        const paramKey = `val_${key}`;
+        setClauses.push(`${col} = @${paramKey}`);
+        if (options?.serialize) {
+            const serialized = options.serialize(key, value);
+            params[paramKey] = serialized !== undefined ? serialized : value;
+        }
+        else {
+            params[paramKey] = value;
+        }
+    }
+    if (setClauses.length === 0)
+        return null;
+    const sql = `UPDATE ${table} SET ${setClauses.join(', ')} WHERE ${idCol} = @_id`;
+    return { sql, params };
+}
+//# sourceMappingURL=base.repository.js.map

package/dist/database/base.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.repository.js","sourceRoot":"","sources":["../../src/database/base.repository.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkCH,wBA2BC;AAkCD,kCA8BC;AA1GD,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAgB,MAAM,CACpB,GAA4B,EAC5B,MAAoB;IAEpB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE5B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,MAAM;gBACT,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAE,GAAc,IAAI,IAAI,CAAC,CAAC;gBAClD,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAE,GAAc,IAAI,IAAI,CAAC,CAAC;gBAClD,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,CAAC,GAAG,CAAC,GAAI,GAAc,KAAK,CAAC,CAAC;gBACpC,MAAM;YACR;gBACE,kBAAkB;gBAClB,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,GAAa,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC1D,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC;AAqBD;;;;;;;;;;;;GAYG;AACH,SAAgB,WAAW,CACzB,KAAa,EACb,KAAa,EACb,OAAgB,EAChB,IAA6B,EAC7B,SAAiC,EACjC,OAA4B;IAE5B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,MAAM,GAA4B,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAEzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,MAAM,QAAQ,GAAG,OAAO,GAAG,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,OAAO,QAAQ,EAAE,CAAC,CAAC;QAEzC,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,GAAG,GAAG,UAAU,KAAK,QAAQ,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IACjF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC"}

package/dist/database/database.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.service.d.ts","sourceRoot":"","sources":["../../src/database/database.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,eAAe,EACf,YAAY,EACb,MAAM,gBAAgB,CAAC;AAIxB,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAGtC,qBACa,eAAgB,YAAW,YAAY,EAAE,eAAe;IACnE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,EAAE,CAAqB;IAC/B,OAAO,CAAC,kBAAkB,CAAkC;IAE5D,YAAY,IAAI,IAAI;IA4BpB,KAAK,IAAI,QAAQ,CAAC,QAAQ;IAI1B,aAAa,IAAI,IAAI;IAarB,KAAK,IAAI,IAAI;IAOb,eAAe,IAAI,IAAI;CAKxB"}
+{"version":3,"file":"database.service.d.ts","sourceRoot":"","sources":["../../src/database/database.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,eAAe,EACf,YAAY,EACb,MAAM,gBAAgB,CAAC;AAIxB,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAItC,qBACa,eAAgB,YAAW,YAAY,EAAE,eAAe;IACnE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,EAAE,CAAqB;IAC/B,OAAO,CAAC,kBAAkB,CAAkC;IAE5D,YAAY,IAAI,IAAI;IAkCpB,KAAK,IAAI,QAAQ,CAAC,QAAQ;IAI1B,aAAa,IAAI,IAAI;IAarB,KAAK,IAAI,IAAI;IAOb,eAAe,IAAI,IAAI;CAKxB"}

package/dist/database/database.service.js

@@ -50,6 +50,7 @@ const os = __importStar(require("node:os"));
 const path = __importStar(require("node:path"));
 const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
 const migration_runner_1 = require("./migration-runner");
+const protocol_1 = require("@overlordai/protocol");
 let DatabaseService = DatabaseService_1 = class DatabaseService {
     logger = new common_1.Logger(DatabaseService_1.name);
     db;
@@ -63,7 +64,14 @@ let DatabaseService = DatabaseService_1 = class DatabaseService {
             fs.mkdirSync(dbDir, { recursive: true });
         }
         this.logger.log(`Opening database at ${dbPath}`);
-        this.db = new better_sqlite3_1.default(dbPath);
+        try {
+            this.db = new better_sqlite3_1.default(dbPath);
+        }
+        catch (err) {
+            const message = (0, protocol_1.getErrorMessage)(err);
+            this.logger.error(`Failed to open database at ${dbPath}: ${message}`);
+            throw new Error(`Failed to open SQLite database at ${dbPath}: ${message}`);
+        }
         this.db.pragma('foreign_keys = ON');
         this.db.pragma('journal_mode = WAL');
         this.db.pragma('busy_timeout = 5000');

package/dist/database/database.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"database.service.js","sourceRoot":"","sources":["../../src/database/database.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAKwB;AACxB,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAClC,oEAAsC;AACtC,yDAAqD;AAG9C,IAAM,eAAe,uBAArB,MAAM,eAAe;IACT,MAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IACnD,EAAE,CAAqB;IACvB,kBAAkB,CAAkC;IAE5D,YAAY;QACV,6FAA6F;QAC7F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,aAAa,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAEjD,IAAI,CAAC,EAAE,GAAG,IAAI,wBAAQ,CAAC,MAAM,CAAC,CAAC;QAE/B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,kCAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAEhD,4BAA4B;QAC5B,IAAI,CAAC,kBAAkB,GAAG,WAAW,CACnC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAC1B,EAAE,GAAG,EAAE,GAAG,IAAI,CACf,CAAC;IACJ,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uBAAuB,EACvB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,eAAe;QACb,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;CACF,CAAA;AA9DY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CA8D3B"}
+{"version":3,"file":"database.service.js","sourceRoot":"","sources":["../../src/database/database.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAKwB;AACxB,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAClC,oEAAsC;AACtC,yDAAqD;AAErD,mDAAuD;AAEhD,IAAM,eAAe,uBAArB,MAAM,eAAe;IACT,MAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IACnD,EAAE,CAAqB;IACvB,kBAAkB,CAAkC;IAE5D,YAAY;QACV,6FAA6F;QAC7F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,aAAa,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,IAAI,wBAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAA,0BAAe,EAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,kCAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAEhD,4BAA4B;QAC5B,IAAI,CAAC,kBAAkB,GAAG,WAAW,CACnC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAC1B,EAAE,GAAG,EAAE,GAAG,IAAI,CACf,CAAC;IACJ,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uBAAuB,EACvB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,eAAe;QACb,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;CACF,CAAA;AApEY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CAoE3B"}

package/dist/database/migration-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migration-runner.d.ts","sourceRoot":"","sources":["../../src/database/migration-runner.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAItC,qBAAa,eAAe;IAC1B,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI;CA2DjC"}
+{"version":3,"file":"migration-runner.d.ts","sourceRoot":"","sources":["../../src/database/migration-runner.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAKtC,qBAAa,eAAe;IAC1B,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI;CA2DjC"}

package/dist/database/migration-runner.js

@@ -36,6 +36,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.MigrationRunner = void 0;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
+const protocol_1 = require("@overlordai/protocol");
 class MigrationRunner {
     run(db) {
         db.exec(`
@@ -77,7 +78,7 @@ class MigrationRunner {
                 runMigration();
             }
             catch (err) {
-                throw new Error(`Migration ${file} failed: ${err instanceof Error ? err.message : String(err)}`);
+                throw new Error(`Migration ${file} failed: ${(0, protocol_1.getErrorMessage)(err)}`);
             }
         }
     }

package/dist/database/migration-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"migration-runner.js","sourceRoot":"","sources":["../../src/database/migration-runner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,4CAA8B;AAC9B,gDAAkC;AAElC,MAAa,eAAe;IAC1B,GAAG,CAAC,EAAqB;QACvB,EAAE,CAAC,IAAI,CAAC;;;;;;KAMP,CAAC,CAAC;QAEH,6FAA6F;QAC7F,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAEhE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,KAAK,GAAG,EAAE;aACb,WAAW,CAAC,aAAa,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,OAAO,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC,CAAC,CAAC;QAEL,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,EAAE;aACC,OAAO,CAAC,oCAAoC,CAAC;aAC7C,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,OAAiB,CAAC,CAC5C,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAEjD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAErE,MAAM,YAAY,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBACvC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACb,EAAE,CAAC,OAAO,CACR,8DAA8D,CAC/D,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,YAAY,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA5DD,0CA4DC"}
+{"version":3,"file":"migration-runner.js","sourceRoot":"","sources":["../../src/database/migration-runner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,4CAA8B;AAC9B,gDAAkC;AAElC,mDAAuD;AACvD,MAAa,eAAe;IAC1B,GAAG,CAAC,EAAqB;QACvB,EAAE,CAAC,IAAI,CAAC;;;;;;KAMP,CAAC,CAAC;QAEH,6FAA6F;QAC7F,MAAM,aAAa,GACjB,OAAO,CAAC,GAAG,CAAC,cAAc;YAC1B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAEhE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,aAAa,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,KAAK,GAAG,EAAE;aACb,WAAW,CAAC,aAAa,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,OAAO,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC,CAAC,CAAC;QAEL,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,EAAE;aACC,OAAO,CAAC,oCAAoC,CAAC;aAC7C,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,OAAiB,CAAC,CAC5C,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAEjD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAErE,MAAM,YAAY,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBACvC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACb,EAAE,CAAC,OAAO,CACR,8DAA8D,CAC/D,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,YAAY,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,YAAY,IAAA,0BAAe,EAAC,GAAG,CAAC,EAAE,CACpD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA5DD,0CA4DC"}

package/dist/database/repositories/audit-log.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-log.repository.d.ts","sourceRoot":"","sources":["../../../src/database/repositories/audit-log.repository.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAwBD,qBACa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,eAAe;IAEtD,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,GAAG,aAAa;IAsBjB,aAAa,CAAC,KAAK,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,eAAe,CAAC,aAAa,CAAC;CA8CnC"}
+{"version":3,"file":"audit-log.repository.d.ts","sourceRoot":"","sources":["../../../src/database/repositories/audit-log.repository.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAItD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAgBD,qBACa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,eAAe;IAEtD,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,GAAG,aAAa;IAsBjB,aAAa,CAAC,KAAK,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,eAAe,CAAC,aAAa,CAAC;CAoCnC"}

package/dist/database/repositories/audit-log.repository.js

@@ -12,16 +12,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuditLogRepository = void 0;
 const common_1 = require("@nestjs/common");
 const database_service_1 = require("../database.service");
-function mapRow(row) {
-    return {
-        id: row.id,
-        userId: row.user_id,
-        action: row.action,
-        resource: row.resource,
-        detail: row.detail,
-        ip: row.ip,
-        createdAt: row.created_at,
-    };
+const pagination_1 = require("../../common/pagination");
+const base_repository_1 = require("../base.repository");
+const COLUMN_SCHEMA = {
+    id: { column: 'id', type: 'number' },
+    userId: { column: 'user_id', type: 'number', nullable: true },
+    action: { column: 'action', type: 'string' },
+    resource: { column: 'resource', type: 'string' },
+    detail: { column: 'detail', type: 'string', nullable: true },
+    ip: { column: 'ip', type: 'string', nullable: true },
+    createdAt: { column: 'created_at', type: 'string' },
+};
+function mapAuditLogRow(row) {
+    return (0, base_repository_1.mapRow)(row, COLUMN_SCHEMA);
 }
 let AuditLogRepository = class AuditLogRepository {
     database;
@@ -38,14 +41,14 @@ let AuditLogRepository = class AuditLogRepository {
             .getDb()
             .prepare('SELECT * FROM audit_logs WHERE id = ?')
             .get(Number(result.lastInsertRowid));
-        return mapRow(row);
+        return mapAuditLogRow(row);
     }
     listPaginated(query) {
         const limit = query.limit ?? 50;
         const conditions = [];
         const params = [];
         if (query.cursor) {
-            const cursorId = parseInt(Buffer.from(query.cursor, 'base64').toString(), 10);
+            const cursorId = (0, pagination_1.decodeCursor)(query.cursor);
             conditions.push('id < ?');
             params.push(cursorId);
         }
@@ -64,12 +67,7 @@ let AuditLogRepository = class AuditLogRepository {
             .getDb()
             .prepare(`SELECT * FROM audit_logs ${where} ORDER BY id DESC LIMIT ?`)
             .all(...params);
-        const hasMore = rows.length > limit;
-        const data = (hasMore ? rows.slice(0, limit) : rows).map(mapRow);
-        const nextCursor = hasMore && data.length > 0
-            ? Buffer.from(String(data[data.length - 1].id)).toString('base64')
-            : null;
-        return { data, nextCursor };
+        return (0, pagination_1.paginate)(rows, limit, mapAuditLogRow, (entry) => entry.id);
     }
 };
 exports.AuditLogRepository = AuditLogRepository;