@rudderhq/server 0.1.0-canary.0

package/dist/services/secrets.js

@@ -0,0 +1,289 @@
+import { and, desc, eq } from "drizzle-orm";
+import { organizationSecrets, organizationSecretVersions } from "@rudderhq/db";
+import { envBindingSchema } from "@rudderhq/shared";
+import { conflict, notFound, unprocessable } from "../errors.js";
+import { getSecretProvider, listSecretProviders } from "../secrets/provider-registry.js";
+const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const SENSITIVE_ENV_KEY_RE = /(api[-_]?key|access[-_]?token|auth(?:_?token)?|authorization|bearer|secret|passwd|password|credential|jwt|private[-_]?key|cookie|connectionstring)/i;
+const REDACTED_SENTINEL = "***REDACTED***";
+function asRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return null;
+    return value;
+}
+function isSensitiveEnvKey(key) {
+    return SENSITIVE_ENV_KEY_RE.test(key);
+}
+function canonicalizeBinding(binding) {
+    if (typeof binding === "string") {
+        return { type: "plain", value: binding };
+    }
+    if (binding.type === "plain") {
+        return { type: "plain", value: String(binding.value) };
+    }
+    return {
+        type: "secret_ref",
+        secretId: binding.secretId,
+        version: binding.version ?? "latest",
+    };
+}
+export function secretService(db) {
+    async function getById(id) {
+        return db
+            .select()
+            .from(organizationSecrets)
+            .where(eq(organizationSecrets.id, id))
+            .then((rows) => rows[0] ?? null);
+    }
+    async function getByName(orgId, name) {
+        return db
+            .select()
+            .from(organizationSecrets)
+            .where(and(eq(organizationSecrets.orgId, orgId), eq(organizationSecrets.name, name)))
+            .then((rows) => rows[0] ?? null);
+    }
+    async function getSecretVersion(secretId, version) {
+        return db
+            .select()
+            .from(organizationSecretVersions)
+            .where(and(eq(organizationSecretVersions.secretId, secretId), eq(organizationSecretVersions.version, version)))
+            .then((rows) => rows[0] ?? null);
+    }
+    async function assertSecretInCompany(orgId, secretId) {
+        const secret = await getById(secretId);
+        if (!secret)
+            throw notFound("Secret not found");
+        if (secret.orgId !== orgId)
+            throw unprocessable("Secret must belong to same organization");
+        return secret;
+    }
+    async function resolveSecretValue(orgId, secretId, version) {
+        const secret = await assertSecretInCompany(orgId, secretId);
+        const resolvedVersion = version === "latest" ? secret.latestVersion : version;
+        const versionRow = await getSecretVersion(secret.id, resolvedVersion);
+        if (!versionRow)
+            throw notFound("Secret version not found");
+        const provider = getSecretProvider(secret.provider);
+        return provider.resolveVersion({
+            material: versionRow.material,
+            externalRef: secret.externalRef,
+        });
+    }
+    async function normalizeEnvConfig(orgId, envValue, opts) {
+        const record = asRecord(envValue);
+        if (!record)
+            throw unprocessable("agentRuntimeConfig.env must be an object");
+        const normalized = {};
+        for (const [key, rawBinding] of Object.entries(record)) {
+            if (!ENV_KEY_RE.test(key)) {
+                throw unprocessable(`Invalid environment variable name: ${key}`);
+            }
+            const parsed = envBindingSchema.safeParse(rawBinding);
+            if (!parsed.success) {
+                throw unprocessable(`Invalid environment binding for key: ${key}`);
+            }
+            const binding = canonicalizeBinding(parsed.data);
+            if (binding.type === "plain") {
+                if (opts?.strictMode && isSensitiveEnvKey(key) && binding.value.trim().length > 0) {
+                    throw unprocessable(`Strict secret mode requires secret references for sensitive key: ${key}`);
+                }
+                if (binding.value === REDACTED_SENTINEL) {
+                    throw unprocessable(`Refusing to persist redacted placeholder for key: ${key}`);
+                }
+                normalized[key] = binding;
+                continue;
+            }
+            await assertSecretInCompany(orgId, binding.secretId);
+            normalized[key] = {
+                type: "secret_ref",
+                secretId: binding.secretId,
+                version: binding.version,
+            };
+        }
+        return normalized;
+    }
+    async function normalizeAdapterConfigForPersistenceInternal(orgId, agentRuntimeConfig, opts) {
+        const normalized = { ...agentRuntimeConfig };
+        if (!Object.prototype.hasOwnProperty.call(agentRuntimeConfig, "env")) {
+            return normalized;
+        }
+        normalized.env = await normalizeEnvConfig(orgId, agentRuntimeConfig.env, opts);
+        return normalized;
+    }
+    return {
+        listProviders: () => listSecretProviders(),
+        list: (orgId) => db
+            .select()
+            .from(organizationSecrets)
+            .where(eq(organizationSecrets.orgId, orgId))
+            .orderBy(desc(organizationSecrets.createdAt)),
+        getById,
+        getByName,
+        resolveSecretValue,
+        create: async (orgId, input, actor) => {
+            const existing = await getByName(orgId, input.name);
+            if (existing)
+                throw conflict(`Secret already exists: ${input.name}`);
+            const provider = getSecretProvider(input.provider);
+            const prepared = await provider.createVersion({
+                value: input.value,
+                externalRef: input.externalRef ?? null,
+            });
+            return db.transaction(async (tx) => {
+                const secret = await tx
+                    .insert(organizationSecrets)
+                    .values({
+                    orgId,
+                    name: input.name,
+                    provider: input.provider,
+                    externalRef: prepared.externalRef,
+                    latestVersion: 1,
+                    description: input.description ?? null,
+                    createdByAgentId: actor?.agentId ?? null,
+                    createdByUserId: actor?.userId ?? null,
+                })
+                    .returning()
+                    .then((rows) => rows[0]);
+                await tx.insert(organizationSecretVersions).values({
+                    secretId: secret.id,
+                    version: 1,
+                    material: prepared.material,
+                    valueSha256: prepared.valueSha256,
+                    createdByAgentId: actor?.agentId ?? null,
+                    createdByUserId: actor?.userId ?? null,
+                });
+                return secret;
+            });
+        },
+        rotate: async (secretId, input, actor) => {
+            const secret = await getById(secretId);
+            if (!secret)
+                throw notFound("Secret not found");
+            const provider = getSecretProvider(secret.provider);
+            const nextVersion = secret.latestVersion + 1;
+            const prepared = await provider.createVersion({
+                value: input.value,
+                externalRef: input.externalRef ?? secret.externalRef ?? null,
+            });
+            return db.transaction(async (tx) => {
+                await tx.insert(organizationSecretVersions).values({
+                    secretId: secret.id,
+                    version: nextVersion,
+                    material: prepared.material,
+                    valueSha256: prepared.valueSha256,
+                    createdByAgentId: actor?.agentId ?? null,
+                    createdByUserId: actor?.userId ?? null,
+                });
+                const updated = await tx
+                    .update(organizationSecrets)
+                    .set({
+                    latestVersion: nextVersion,
+                    externalRef: prepared.externalRef,
+                    updatedAt: new Date(),
+                })
+                    .where(eq(organizationSecrets.id, secret.id))
+                    .returning()
+                    .then((rows) => rows[0] ?? null);
+                if (!updated)
+                    throw notFound("Secret not found");
+                return updated;
+            });
+        },
+        update: async (secretId, patch) => {
+            const secret = await getById(secretId);
+            if (!secret)
+                throw notFound("Secret not found");
+            if (patch.name && patch.name !== secret.name) {
+                const duplicate = await getByName(secret.orgId, patch.name);
+                if (duplicate && duplicate.id !== secret.id) {
+                    throw conflict(`Secret already exists: ${patch.name}`);
+                }
+            }
+            return db
+                .update(organizationSecrets)
+                .set({
+                name: patch.name ?? secret.name,
+                description: patch.description === undefined ? secret.description : patch.description,
+                externalRef: patch.externalRef === undefined ? secret.externalRef : patch.externalRef,
+                updatedAt: new Date(),
+            })
+                .where(eq(organizationSecrets.id, secret.id))
+                .returning()
+                .then((rows) => rows[0] ?? null);
+        },
+        remove: async (secretId) => {
+            const secret = await getById(secretId);
+            if (!secret)
+                return null;
+            await db.delete(organizationSecrets).where(eq(organizationSecrets.id, secretId));
+            return secret;
+        },
+        normalizeAdapterConfigForPersistence: async (orgId, agentRuntimeConfig, opts) => normalizeAdapterConfigForPersistenceInternal(orgId, agentRuntimeConfig, opts),
+        normalizeHireApprovalPayloadForPersistence: async (orgId, payload, opts) => {
+            const normalized = { ...payload };
+            const agentRuntimeConfig = asRecord(payload.agentRuntimeConfig);
+            if (agentRuntimeConfig) {
+                normalized.agentRuntimeConfig = await normalizeAdapterConfigForPersistenceInternal(orgId, agentRuntimeConfig, opts);
+            }
+            return normalized;
+        },
+        resolveEnvBindings: async (orgId, envValue) => {
+            const record = asRecord(envValue);
+            if (!record)
+                return { env: {}, secretKeys: new Set() };
+            const resolved = {};
+            const secretKeys = new Set();
+            for (const [key, rawBinding] of Object.entries(record)) {
+                if (!ENV_KEY_RE.test(key)) {
+                    throw unprocessable(`Invalid environment variable name: ${key}`);
+                }
+                const parsed = envBindingSchema.safeParse(rawBinding);
+                if (!parsed.success) {
+                    throw unprocessable(`Invalid environment binding for key: ${key}`);
+                }
+                const binding = canonicalizeBinding(parsed.data);
+                if (binding.type === "plain") {
+                    resolved[key] = binding.value;
+                }
+                else {
+                    resolved[key] = await resolveSecretValue(orgId, binding.secretId, binding.version);
+                    secretKeys.add(key);
+                }
+            }
+            return { env: resolved, secretKeys };
+        },
+        resolveAdapterConfigForRuntime: async (orgId, agentRuntimeConfig) => {
+            const resolved = { ...agentRuntimeConfig };
+            const secretKeys = new Set();
+            if (!Object.prototype.hasOwnProperty.call(agentRuntimeConfig, "env")) {
+                return { config: resolved, secretKeys };
+            }
+            const record = asRecord(agentRuntimeConfig.env);
+            if (!record) {
+                resolved.env = {};
+                return { config: resolved, secretKeys };
+            }
+            const env = {};
+            for (const [key, rawBinding] of Object.entries(record)) {
+                if (!ENV_KEY_RE.test(key)) {
+                    throw unprocessable(`Invalid environment variable name: ${key}`);
+                }
+                const parsed = envBindingSchema.safeParse(rawBinding);
+                if (!parsed.success) {
+                    throw unprocessable(`Invalid environment binding for key: ${key}`);
+                }
+                const binding = canonicalizeBinding(parsed.data);
+                if (binding.type === "plain") {
+                    env[key] = binding.value;
+                }
+                else {
+                    env[key] = await resolveSecretValue(orgId, binding.secretId, binding.version);
+                    secretKeys.add(key);
+                }
+            }
+            resolved.env = env;
+            return { config: resolved, secretKeys };
+        },
+    };
+}
+//# sourceMappingURL=secrets.js.map

package/dist/services/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/services/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEzF,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAC9C,MAAM,oBAAoB,GACxB,qJAAqJ,CAAC;AACxJ,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAM3C,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAmB;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,QAAQ;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAM;IAClC,KAAK,UAAU,OAAO,CAAC,EAAU;QAC/B,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACrC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,IAAY;QAClD,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;aACpF,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,OAAe;QAC/D,OAAO,EAAE;aACN,MAAM,EAAE;aACR,IAAI,CAAC,0BAA0B,CAAC;aAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACjD,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAChD,CACF;aACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,UAAU,qBAAqB,CAAC,KAAa,EAAE,QAAgB;QAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;YAAE,MAAM,aAAa,CAAC,yCAAyC,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,kBAAkB,CAC/B,KAAa,EACb,QAAgB,EAChB,OAA0B;QAE1B,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,eAAe,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU;YAAE,MAAM,QAAQ,CAAC,0BAA0B,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAA0B,CAAC,CAAC;QACtE,OAAO,QAAQ,CAAC,cAAc,CAAC;YAC7B,QAAQ,EAAE,UAAU,CAAC,QAAmC;YACxD,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,kBAAkB,CAC/B,KAAa,EACb,QAAiB,EACjB,IAA+B;QAE/B,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,MAAM,aAAa,CAAC,0CAA0C,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAmB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,aAAa,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,aAAa,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAkB,CAAC,CAAC;YAC/D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7B,IAAI,IAAI,EAAE,UAAU,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClF,MAAM,aAAa,CACjB,oEAAoE,GAAG,EAAE,CAC1E,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;oBACxC,MAAM,aAAa,CAAC,qDAAqD,GAAG,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;gBAC1B,SAAS;YACX,CAAC;YAED,MAAM,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrD,UAAU,CAAC,GAAG,CAAC,GAAG;gBAChB,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,UAAU,4CAA4C,CACzD,KAAa,EACb,kBAA2C,EAC3C,IAA+B;QAE/B,MAAM,UAAU,GAAG,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,UAAU,CAAC,GAAG,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/E,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO;QACL,aAAa,EAAE,GAAG,EAAE,CAAC,mBAAmB,EAAE;QAE1C,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE,CACtB,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,mBAAmB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;aAC3C,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAEjD,OAAO;QACP,SAAS;QACT,kBAAkB;QAElB,MAAM,EAAE,KAAK,EACX,KAAa,EACb,KAMC,EACD,KAA2D,EAC3D,EAAE;YACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC,0BAA0B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAErE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC;gBAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;aACvC,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACjC,MAAM,MAAM,GAAG,MAAM,EAAE;qBACpB,MAAM,CAAC,mBAAmB,CAAC;qBAC3B,MAAM,CAAC;oBACN,KAAK;oBACL,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,aAAa,EAAE,CAAC;oBAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;oBACtC,gBAAgB,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;oBACxC,eAAe,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI;iBACvC,CAAC;qBACD,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAE3B,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC;oBACjD,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,OAAO,EAAE,CAAC;oBACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,gBAAgB,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;oBACxC,eAAe,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI;iBACvC,CAAC,CAAC;gBAEH,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,EACX,QAAgB,EAChB,KAAqD,EACrD,KAA2D,EAC3D,EAAE;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAA0B,CAAC,CAAC;YACtE,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC;gBAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI;aAC7D,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACjC,MAAM,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC;oBACjD,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,OAAO,EAAE,WAAW;oBACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,gBAAgB,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;oBACxC,eAAe,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI;iBACvC,CAAC,CAAC;gBAEH,MAAM,OAAO,GAAG,MAAM,EAAE;qBACrB,MAAM,CAAC,mBAAmB,CAAC;qBAC3B,GAAG,CAAC;oBACH,aAAa,EAAE,WAAW;oBAC1B,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,SAAS,EAAE,IAAI,IAAI,EAAE;iBACtB,CAAC;qBACD,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;qBAC5C,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBAEnC,IAAI,CAAC,OAAO;oBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;gBACjD,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,EACX,QAAgB,EAChB,KAAkF,EAClF,EAAE;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,MAAM,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAEhD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC7C,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,SAAS,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;oBAC5C,MAAM,QAAQ,CAAC,0BAA0B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAED,OAAO,EAAE;iBACN,MAAM,CAAC,mBAAmB,CAAC;iBAC3B,GAAG,CAAC;gBACH,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;gBAC/B,WAAW,EACT,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW;gBAC1E,WAAW,EACT,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW;gBAC1E,SAAS,EAAE,IAAI,IAAI,EAAE;aACtB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;iBAC5C,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,QAAgB,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,oCAAoC,EAAE,KAAK,EACzC,KAAa,EACb,kBAA2C,EAC3C,IAA+B,EAC/B,EAAE,CAAC,4CAA4C,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,CAAC;QAElF,0CAA0C,EAAE,KAAK,EAC/C,KAAa,EACb,OAAgC,EAChC,IAA+B,EAC/B,EAAE;YACF,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YAClC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAChE,IAAI,kBAAkB,EAAE,CAAC;gBACvB,UAAU,CAAC,kBAAkB,GAAG,MAAM,4CAA4C,CAChF,KAAK,EACL,kBAAkB,EAClB,IAAI,CACL,CAAC;YACJ,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,kBAAkB,EAAE,KAAK,EAAE,KAAa,EAAE,QAAiB,EAAqE,EAAE;YAChI,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,GAAG,EAAE,EAA4B,EAAE,UAAU,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;YACzF,MAAM,QAAQ,GAA2B,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YAErC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,aAAa,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,aAAa,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAkB,CAAC,CAAC;gBAC/D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7B,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;oBACnF,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACvC,CAAC;QAED,8BAA8B,EAAE,KAAK,EAAE,KAAa,EAAE,kBAA2C,EAAyE,EAAE;YAC1K,MAAM,QAAQ,GAAG,EAAE,GAAG,kBAAkB,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC;gBACrE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC1C,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,GAAG,GAAG,EAAE,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YAC1C,CAAC;YACD,MAAM,GAAG,GAA2B,EAAE,CAAC;YACvC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,aAAa,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,aAAa,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAkB,CAAC,CAAC;gBAC/D,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC9E,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,GAAG,GAAG,GAAG,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/sidebar-badges.d.ts

@@ -0,0 +1,11 @@
+import type { Db } from "@rudderhq/db";
+import type { SidebarBadges } from "@rudderhq/shared";
+export declare function sidebarBadgeService(db: Db): {
+    get: (orgId: string, extra?: {
+        joinRequests?: number;
+        unreadTouchedIssues?: number;
+        chatAttention?: number;
+        alerts?: number;
+    }) => Promise<SidebarBadges>;
+};
+//# sourceMappingURL=sidebar-badges.d.ts.map

package/dist/services/sidebar-badges.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-badges.d.ts","sourceRoot":"","sources":["../../src/services/sidebar-badges.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAKtD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,EAAE;iBAG7B,MAAM,UACL;QACN,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KACA,OAAO,CAAC,aAAa,CAAC;EAoD5B"}

package/dist/services/sidebar-badges.js

@@ -0,0 +1,43 @@
+import { and, desc, eq, inArray, not, sql } from "drizzle-orm";
+import { agents, approvals, heartbeatRuns } from "@rudderhq/db";
+const ACTIONABLE_APPROVAL_STATUSES = ["pending", "revision_requested"];
+const FAILED_HEARTBEAT_STATUSES = ["failed", "timed_out"];
+export function sidebarBadgeService(db) {
+    return {
+        get: async (orgId, extra) => {
+            const actionableApprovals = await db
+                .select({ count: sql `count(*)` })
+                .from(approvals)
+                .where(and(eq(approvals.orgId, orgId), inArray(approvals.status, ACTIONABLE_APPROVAL_STATUSES)))
+                .then((rows) => Number(rows[0]?.count ?? 0));
+            const latestRunByAgent = await db
+                .selectDistinctOn([heartbeatRuns.agentId], {
+                runStatus: heartbeatRuns.status,
+            })
+                .from(heartbeatRuns)
+                .innerJoin(agents, eq(heartbeatRuns.agentId, agents.id))
+                .where(and(eq(heartbeatRuns.orgId, orgId), eq(agents.orgId, orgId), not(eq(agents.status, "terminated"))))
+                .orderBy(heartbeatRuns.agentId, desc(heartbeatRuns.createdAt));
+            const failedRuns = latestRunByAgent.filter((row) => FAILED_HEARTBEAT_STATUSES.includes(row.runStatus)).length;
+            const joinRequests = extra?.joinRequests ?? 0;
+            const unreadTouchedIssues = extra?.unreadTouchedIssues ?? 0;
+            const chatAttention = extra?.chatAttention ?? 0;
+            const alerts = extra?.alerts ?? 0;
+            return {
+                inbox: actionableApprovals +
+                    failedRuns +
+                    joinRequests +
+                    unreadTouchedIssues +
+                    chatAttention +
+                    alerts,
+                approvals: actionableApprovals,
+                failedRuns,
+                joinRequests,
+                unreadTouchedIssues,
+                chatAttention,
+                alerts,
+            };
+        },
+    };
+}
+//# sourceMappingURL=sidebar-badges.js.map

package/dist/services/sidebar-badges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-badges.js","sourceRoot":"","sources":["../../src/services/sidebar-badges.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGhE,MAAM,4BAA4B,GAAG,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AACvE,MAAM,yBAAyB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAE1D,MAAM,UAAU,mBAAmB,CAAC,EAAM;IACxC,OAAO;QACL,GAAG,EAAE,KAAK,EACR,KAAa,EACb,KAKC,EACuB,EAAE;YAC1B,MAAM,mBAAmB,GAAG,MAAM,EAAE;iBACjC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,UAAU,EAAE,CAAC;iBACxC,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,EAC1B,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,4BAA4B,CAAC,CACxD,CACF;iBACA,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;YAE/C,MAAM,gBAAgB,GAAG,MAAM,EAAE;iBAC9B,gBAAgB,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;gBACzC,SAAS,EAAE,aAAa,CAAC,MAAM;aAChC,CAAC;iBACD,IAAI,CAAC,aAAa,CAAC;iBACnB,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;iBACvD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,EAC9B,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EACvB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CACrC,CACF;iBACA,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;YAEjE,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACjD,yBAAyB,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAClD,CAAC,MAAM,CAAC;YAET,MAAM,YAAY,GAAG,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC;YAC9C,MAAM,mBAAmB,GAAG,KAAK,EAAE,mBAAmB,IAAI,CAAC,CAAC;YAC5D,MAAM,aAAa,GAAG,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;YAClC,OAAO;gBACL,KAAK,EACH,mBAAmB;oBACnB,UAAU;oBACV,YAAY;oBACZ,mBAAmB;oBACnB,aAAa;oBACb,MAAM;gBACR,SAAS,EAAE,mBAAmB;gBAC9B,UAAU;gBACV,YAAY;gBACZ,mBAAmB;gBACnB,aAAa;gBACb,MAAM;aACP,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/services/work-products.d.ts

@@ -0,0 +1,14 @@
+import type { Db } from "@rudderhq/db";
+import { issueWorkProducts } from "@rudderhq/db";
+import type { IssueWorkProduct } from "@rudderhq/shared";
+type IssueWorkProductRow = typeof issueWorkProducts.$inferSelect;
+declare function toIssueWorkProduct(row: IssueWorkProductRow): IssueWorkProduct;
+export declare function workProductService(db: Db): {
+    listForIssue: (issueId: string) => Promise<IssueWorkProduct[]>;
+    getById: (id: string) => Promise<IssueWorkProduct | null>;
+    createForIssue: (issueId: string, orgId: string, data: Omit<typeof issueWorkProducts.$inferInsert, "issueId" | "orgId">) => Promise<IssueWorkProduct | null>;
+    update: (id: string, patch: Partial<typeof issueWorkProducts.$inferInsert>) => Promise<IssueWorkProduct | null>;
+    remove: (id: string) => Promise<IssueWorkProduct | null>;
+};
+export { toIssueWorkProduct };
+//# sourceMappingURL=work-products.d.ts.map

package/dist/services/work-products.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-products.d.ts","sourceRoot":"","sources":["../../src/services/work-products.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,KAAK,mBAAmB,GAAG,OAAO,iBAAiB,CAAC,YAAY,CAAC;AAEjE,iBAAS,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,GAAG,gBAAgB,CAuBtE;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,EAAE;4BAEP,MAAM;kBAShB,MAAM;8BASM,MAAM,SAAS,MAAM,QAAQ,IAAI,CAAC,OAAO,iBAAiB,CAAC,YAAY,EAAE,SAAS,GAAG,OAAO,CAAC;iBA2B1G,MAAM,SAAS,OAAO,CAAC,OAAO,iBAAiB,CAAC,YAAY,CAAC;iBAgC7D,MAAM;EAS5B;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/services/work-products.js

@@ -0,0 +1,100 @@
+import { and, desc, eq } from "drizzle-orm";
+import { issueWorkProducts } from "@rudderhq/db";
+function toIssueWorkProduct(row) {
+    return {
+        id: row.id,
+        orgId: row.orgId,
+        projectId: row.projectId ?? null,
+        issueId: row.issueId,
+        executionWorkspaceId: row.executionWorkspaceId ?? null,
+        runtimeServiceId: row.runtimeServiceId ?? null,
+        type: row.type,
+        provider: row.provider,
+        externalId: row.externalId ?? null,
+        title: row.title,
+        url: row.url ?? null,
+        status: row.status,
+        reviewState: row.reviewState,
+        isPrimary: row.isPrimary,
+        healthStatus: row.healthStatus,
+        summary: row.summary ?? null,
+        metadata: row.metadata ?? null,
+        createdByRunId: row.createdByRunId ?? null,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+    };
+}
+export function workProductService(db) {
+    return {
+        listForIssue: async (issueId) => {
+            const rows = await db
+                .select()
+                .from(issueWorkProducts)
+                .where(eq(issueWorkProducts.issueId, issueId))
+                .orderBy(desc(issueWorkProducts.isPrimary), desc(issueWorkProducts.updatedAt));
+            return rows.map(toIssueWorkProduct);
+        },
+        getById: async (id) => {
+            const row = await db
+                .select()
+                .from(issueWorkProducts)
+                .where(eq(issueWorkProducts.id, id))
+                .then((rows) => rows[0] ?? null);
+            return row ? toIssueWorkProduct(row) : null;
+        },
+        createForIssue: async (issueId, orgId, data) => {
+            const row = await db.transaction(async (tx) => {
+                if (data.isPrimary) {
+                    await tx
+                        .update(issueWorkProducts)
+                        .set({ isPrimary: false, updatedAt: new Date() })
+                        .where(and(eq(issueWorkProducts.orgId, orgId), eq(issueWorkProducts.issueId, issueId), eq(issueWorkProducts.type, data.type)));
+                }
+                return await tx
+                    .insert(issueWorkProducts)
+                    .values({
+                    ...data,
+                    orgId,
+                    issueId,
+                })
+                    .returning()
+                    .then((rows) => rows[0] ?? null);
+            });
+            return row ? toIssueWorkProduct(row) : null;
+        },
+        update: async (id, patch) => {
+            const row = await db.transaction(async (tx) => {
+                const existing = await tx
+                    .select()
+                    .from(issueWorkProducts)
+                    .where(eq(issueWorkProducts.id, id))
+                    .then((rows) => rows[0] ?? null);
+                if (!existing)
+                    return null;
+                if (patch.isPrimary === true) {
+                    await tx
+                        .update(issueWorkProducts)
+                        .set({ isPrimary: false, updatedAt: new Date() })
+                        .where(and(eq(issueWorkProducts.orgId, existing.orgId), eq(issueWorkProducts.issueId, existing.issueId), eq(issueWorkProducts.type, existing.type)));
+                }
+                return await tx
+                    .update(issueWorkProducts)
+                    .set({ ...patch, updatedAt: new Date() })
+                    .where(eq(issueWorkProducts.id, id))
+                    .returning()
+                    .then((rows) => rows[0] ?? null);
+            });
+            return row ? toIssueWorkProduct(row) : null;
+        },
+        remove: async (id) => {
+            const row = await db
+                .delete(issueWorkProducts)
+                .where(eq(issueWorkProducts.id, id))
+                .returning()
+                .then((rows) => rows[0] ?? null);
+            return row ? toIssueWorkProduct(row) : null;
+        },
+    };
+}
+export { toIssueWorkProduct };
+//# sourceMappingURL=work-products.js.map

package/dist/services/work-products.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-products.js","sourceRoot":"","sources":["../../src/services/work-products.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAKjD,SAAS,kBAAkB,CAAC,GAAwB;IAClD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAChC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,IAAI,IAAI;QACtD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI;QAC9C,IAAI,EAAE,GAAG,CAAC,IAAgC;QAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;QAClC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,WAA8C;QAC/D,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,GAAG,CAAC,YAAgD;QAClE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC5B,QAAQ,EAAG,GAAG,CAAC,QAA2C,IAAI,IAAI;QAClE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QAC1C,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAM;IACvC,OAAO;QACL,YAAY,EAAE,KAAK,EAAE,OAAe,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;iBAC7C,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;YAC5B,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,MAAM,EAAE;iBACR,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;iBACnC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;QAED,cAAc,EAAE,KAAK,EAAE,OAAe,EAAE,KAAa,EAAE,IAAsE,EAAE,EAAE;YAC/H,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC5C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,MAAM,EAAE;yBACL,MAAM,CAAC,iBAAiB,CAAC;yBACzB,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;yBAChD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,EAClC,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,EACtC,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CACtC,CACF,CAAC;gBACN,CAAC;gBACD,OAAO,MAAM,EAAE;qBACZ,MAAM,CAAC,iBAAiB,CAAC;qBACzB,MAAM,CAAC;oBACN,GAAG,IAAI;oBACP,KAAK;oBACL,OAAO;iBACR,CAAC;qBACD,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAU,EAAE,KAAqD,EAAE,EAAE;YAClF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBAC5C,MAAM,QAAQ,GAAG,MAAM,EAAE;qBACtB,MAAM,EAAE;qBACR,IAAI,CAAC,iBAAiB,CAAC;qBACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;qBACnC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBAE3B,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;oBAC7B,MAAM,EAAE;yBACL,MAAM,CAAC,iBAAiB,CAAC;yBACzB,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;yBAChD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAC3C,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAC/C,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAC1C,CACF,CAAC;gBACN,CAAC;gBAED,OAAO,MAAM,EAAE;qBACZ,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBACxC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;qBACnC,SAAS,EAAE;qBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,MAAM,EAAE;iBACjB,MAAM,CAAC,iBAAiB,CAAC;iBACzB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;iBACnC,SAAS,EAAE;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YACnC,OAAO,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/services/workspace-operation-log-store.d.ts

@@ -0,0 +1,35 @@
+export type WorkspaceOperationLogStoreType = "local_file";
+export interface WorkspaceOperationLogHandle {
+    store: WorkspaceOperationLogStoreType;
+    logRef: string;
+}
+export interface WorkspaceOperationLogReadOptions {
+    offset?: number;
+    limitBytes?: number;
+}
+export interface WorkspaceOperationLogReadResult {
+    content: string;
+    endOffset: number;
+    eof: boolean;
+    nextOffset?: number;
+}
+export interface WorkspaceOperationLogFinalizeSummary {
+    bytes: number;
+    sha256?: string;
+    compressed: boolean;
+}
+export interface WorkspaceOperationLogStore {
+    begin(input: {
+        orgId: string;
+        operationId: string;
+    }): Promise<WorkspaceOperationLogHandle>;
+    append(handle: WorkspaceOperationLogHandle, event: {
+        stream: "stdout" | "stderr" | "system";
+        chunk: string;
+        ts: string;
+    }): Promise<void>;
+    finalize(handle: WorkspaceOperationLogHandle): Promise<WorkspaceOperationLogFinalizeSummary>;
+    read(handle: WorkspaceOperationLogHandle, opts?: WorkspaceOperationLogReadOptions): Promise<WorkspaceOperationLogReadResult>;
+}
+export declare function getWorkspaceOperationLogStore(): WorkspaceOperationLogStore;
+//# sourceMappingURL=workspace-operation-log-store.d.ts.map

package/dist/services/workspace-operation-log-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-operation-log-store.d.ts","sourceRoot":"","sources":["../../src/services/workspace-operation-log-store.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,8BAA8B,GAAG,YAAY,CAAC;AAE1D,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,8BAA8B,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,OAAO,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC3F,MAAM,CACJ,MAAM,EAAE,2BAA2B,EACnC,KAAK,EAAE;QAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAC3E,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC7F,IAAI,CAAC,MAAM,EAAE,2BAA2B,EAAE,IAAI,CAAC,EAAE,gCAAgC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;CAC9H;AAqHD,wBAAgB,6BAA6B,+BAM5C"}