@starlove/orbit 1.4.0 → 2.0.0

package/src/core/states.js

@@ -1,167 +0,0 @@
-import { boardById, compactStatePositions, stateById } from "./queries.js";
-import { tx } from "./db.js";
-import { requireBoardAccess, requirePermission } from "./auth.js";
-import { recordEvent } from "./events.js";
-import {
-  httpError,
-  id,
-  normalizeStateRole,
-  now,
-  requiredString
-} from "./util.js";
-
-export function createState(boardId, body, ctx) {
-  const { db, actor } = ctx;
-  const board = boardById(db, boardId);
-  if (!board) throw httpError(404, "board_not_found");
-  requireBoardAccess(actor, board);
-  requirePermission(actor, "write");
-
-  const role = body.role !== undefined ? normalizeStateRole(body.role) : null;
-  // role='ai_ready' implies canonical name; reject mismatches so the AI tab
-  // checkbox always lands a lane named exactly "AI Ready".
-  const name =
-    role === "ai_ready"
-      ? body.name && body.name !== "AI Ready"
-        ? (() => { throw httpError(409, "ai_ready_lane_must_be_named_ai_ready"); })()
-        : "AI Ready"
-      : requiredString(body.name, "name");
-  const stateId = id();
-  return tx(db, () => {
-    if (role) {
-      db.prepare("UPDATE states SET role = NULL WHERE board_id = ? AND role = ?").run(boardId, role);
-    }
-    const maxPosition = db.prepare("SELECT MAX(position) AS value FROM states WHERE board_id = ?").get(boardId).value;
-    db.prepare(
-      `INSERT INTO states
-       (id, board_id, name, position, is_default, role, created_at)
-       VALUES (?, ?, ?, ?, 0, ?, ?)`
-    ).run(stateId, boardId, name, Number(maxPosition || 0) + 1, role, now());
-    recordEvent(db, boardId, "state_created", null, actor.name, {
-      board_id: boardId,
-      state_id: stateId,
-      name,
-      role
-    });
-    return stateById(db, stateId);
-  });
-}
-
-export function updateState(stateId, body, ctx) {
-  const { db, actor } = ctx;
-  const before = stateById(db, stateId);
-  if (!before) throw httpError(404, "state_not_found");
-  const board = boardById(db, before.board_id);
-  requireBoardAccess(actor, board);
-  requirePermission(actor, "write");
-
-  return tx(db, () => {
-  const sets = [];
-  const values = [];
-  if (body.name !== undefined) {
-    const nextName = requiredString(body.name, "name");
-    // The AI Ready lane is the canonical anchor for agent claim-next. Locking
-    // its name removes a whole class of silent breakage; users who want a
-    // different label can disable the AI Ready column from Settings → AI.
-    if (before.role === "ai_ready" && nextName !== "AI Ready") {
-      throw httpError(409, "cannot_rename_ai_ready_lane");
-    }
-    sets.push("name = ?");
-    values.push(nextName);
-  }
-  if (body.is_default !== undefined) {
-    const nextDefault = body.is_default ? 1 : 0;
-    if (nextDefault) db.prepare("UPDATE states SET is_default = 0 WHERE board_id = ?").run(before.board_id);
-    sets.push("is_default = ?");
-    values.push(nextDefault);
-  }
-  if (body.role !== undefined) {
-    const nextRole = normalizeStateRole(body.role);
-    // Roles are unique per board: at most one lane plays each role. If another
-    // lane already holds it, clear that one first so the new assignment wins.
-    if (nextRole) {
-      db.prepare("UPDATE states SET role = NULL WHERE board_id = ? AND role = ? AND id != ?")
-        .run(before.board_id, nextRole, stateId);
-    }
-    // Assigning role='ai_ready' implies the lane name must be "AI Ready" (the
-    // canonical name agents key off). If the caller is also renaming via
-    // body.name above, that took precedence; otherwise force it here.
-    if (nextRole === "ai_ready") {
-      const finalName = body.name !== undefined ? requiredString(body.name, "name") : before.name;
-      if (finalName !== "AI Ready") {
-        if (body.name === undefined) {
-          // Caller didn't ask to rename — silently set the canonical name.
-          sets.push("name = ?");
-          values.push("AI Ready");
-        } else {
-          throw httpError(409, "ai_ready_lane_must_be_named_ai_ready");
-        }
-      }
-    }
-    sets.push("role = ?");
-    values.push(nextRole);
-  }
-  if (sets.length === 0) return before;
-
-  values.push(stateId);
-  db.prepare(`UPDATE states SET ${sets.join(", ")} WHERE id = ?`).run(...values);
-  recordEvent(db, before.board_id, "state_updated", null, actor.name, {
-    board_id: before.board_id,
-    state_id: stateId,
-    fields: Object.keys(body)
-  });
-  return stateById(db, stateId);
-  });
-}
-
-export function reorderStates(boardId, body, ctx) {
-  const { db, actor } = ctx;
-  const board = boardById(db, boardId);
-  if (!board) throw httpError(404, "board_not_found");
-  requireBoardAccess(actor, board);
-  requirePermission(actor, "write");
-
-  const ids = Array.isArray(body.state_ids) ? body.state_ids : [];
-  const existing = db.prepare("SELECT id FROM states WHERE board_id = ?").all(boardId).map((row) => row.id);
-  if (ids.length !== existing.length || !existing.every((stateId) => ids.includes(stateId))) {
-    throw httpError(400, "invalid_state_order");
-  }
-
-  return tx(db, () => {
-    ids.forEach((stateId, position) => {
-      db.prepare("UPDATE states SET position = ? WHERE id = ? AND board_id = ?").run(position, stateId, boardId);
-    });
-    recordEvent(db, boardId, "states_reordered", null, actor.name, { board_id: boardId, state_ids: ids });
-    return db.prepare("SELECT * FROM states WHERE board_id = ? ORDER BY position").all(boardId);
-  });
-}
-
-export function deleteState(stateId, ctx) {
-  const { db, actor } = ctx;
-  const state = stateById(db, stateId);
-  if (!state) throw httpError(404, "state_not_found");
-  const board = boardById(db, state.board_id);
-  requireBoardAccess(actor, board);
-  requirePermission(actor, "write");
-
-  const ticketCount = db.prepare("SELECT COUNT(*) AS count FROM tickets WHERE state_id = ?").get(stateId).count;
-  if (ticketCount > 0) throw httpError(409, "state_has_tickets");
-
-  const stateCount = db.prepare("SELECT COUNT(*) AS count FROM states WHERE board_id = ?").get(state.board_id).count;
-  if (stateCount <= 1) throw httpError(409, "cannot_delete_last_state");
-
-  return tx(db, () => {
-    db.prepare("DELETE FROM states WHERE id = ?").run(stateId);
-    compactStatePositions(db, state.board_id);
-    if (state.is_default) {
-      const first = db.prepare("SELECT id FROM states WHERE board_id = ? ORDER BY position LIMIT 1").get(state.board_id);
-      if (first) db.prepare("UPDATE states SET is_default = 1 WHERE id = ?").run(first.id);
-    }
-    recordEvent(db, state.board_id, "state_deleted", null, actor.name, {
-      board_id: state.board_id,
-      state_id: stateId,
-      name: state.name
-    });
-    return { ok: true, deleted_state_id: stateId };
-  });
-}

package/src/core/system-picker.js

@@ -1,109 +0,0 @@
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-import { normalizePath } from "./util.js";
-
-const execFileAsync = promisify(execFile);
-
-const DEFAULT_TITLE = "Choose repo folder for Orbit board";
-
-const WINDOWS_FOLDER_PICKER_ARGS = (title) => [
-  "-NoProfile",
-  "-STA",
-  "-Command",
-  [
-    "Add-Type -AssemblyName System.Windows.Forms",
-    "$dialog = New-Object System.Windows.Forms.FolderBrowserDialog",
-    `$dialog.Description = ${JSON.stringify(title)}`,
-    "if ($dialog.ShowDialog() -eq [System.Windows.Forms.DialogResult]::OK) {",
-    "  [Console]::OutputEncoding = [System.Text.Encoding]::UTF8",
-    "  Write-Output $dialog.SelectedPath",
-    "}"
-  ].join("; ")
-];
-
-export function folderPickerCommands(platform = process.platform, title = DEFAULT_TITLE) {
-  if (platform === "darwin") {
-    return [
-      {
-        command: "osascript",
-        args: ["-e", `POSIX path of (choose folder with prompt ${JSON.stringify(title)})`]
-      }
-    ];
-  }
-
-  if (platform === "win32") {
-    return [
-      {
-        command: "powershell.exe",
-        args: WINDOWS_FOLDER_PICKER_ARGS(title)
-      }
-    ];
-  }
-
-  return [
-    {
-      command: "zenity",
-      args: ["--file-selection", "--directory", "--title", title]
-    },
-    {
-      command: "kdialog",
-      args: ["--getexistingdirectory", ".", title]
-    },
-    {
-      command: "powershell.exe",
-      args: WINDOWS_FOLDER_PICKER_ARGS(title)
-    }
-  ];
-}
-
-function isMissingCommand(error) {
-  return error?.code === "ENOENT";
-}
-
-function isPickerCancel(error) {
-  const stderr = String(error?.stderr || "");
-  return error?.code === 1 && /cancel|user canceled|user cancelled/i.test(stderr);
-}
-
-function windowsPathToWslPath(rawPath) {
-  const path = String(rawPath || "").trim();
-  const drivePath = path.match(/^([a-zA-Z]):[\\/](.*)$/);
-  if (!drivePath) return path;
-  const drive = drivePath[1].toLowerCase();
-  const rest = drivePath[2].replace(/\\/g, "/").replace(/^\/+/, "");
-  return `/mnt/${drive}/${rest}`;
-}
-
-export async function pickFolder(options = {}) {
-  const platform = options.platform || process.platform;
-  const title = options.title || DEFAULT_TITLE;
-  const execFileImpl = options.execFileImpl || execFileAsync;
-  const commands = folderPickerCommands(platform, title);
-  let missingCommands = 0;
-
-  for (const spec of commands) {
-    try {
-      const result = await execFileImpl(spec.command, spec.args, {
-        encoding: "utf8",
-        timeout: 120000,
-        windowsHide: false
-      });
-      const rawPath = String(result.stdout || "").trim();
-      const selectedPath = normalizePath(platform === "linux" && spec.command === "powershell.exe" ? windowsPathToWslPath(rawPath) : rawPath);
-      return selectedPath ? { path: selectedPath } : { canceled: true };
-    } catch (error) {
-      if (isMissingCommand(error)) {
-        missingCommands += 1;
-        continue;
-      }
-      if (isPickerCancel(error)) return { canceled: true };
-      throw error;
-    }
-  }
-
-  if (missingCommands === commands.length) {
-    return { unsupported: true };
-  }
-
-  return { canceled: true };
-}

package/src/core/tickets.js

@@ -1,400 +0,0 @@
-import {
-  addComment,
-  boardById,
-  defaultStateId,
-  ensureLabel,
-  ticketById
-} from "./queries.js";
-import { requireBoardAccess, requirePermission } from "./auth.js";
-import { tx } from "./db.js";
-import { recordEvent } from "./events.js";
-import {
-  httpError,
-  id,
-  now,
-  normalizePriority,
-  normalizeTicketType,
-  requiredString
-} from "./util.js";
-
-/**
- * Bump a ticket's `updated_at` without recording an event or touching other
- * fields. Used to roll child activity up to the parent epic so the column sort
- * (ORDER BY updated_at DESC) keeps the epic group near recent activity even
- * when only its children changed. Pass `null`/undefined to no-op.
- */
-export function bumpTicketUpdatedAt(db, ticketId, time) {
-  if (!ticketId) return;
-  db.prepare("UPDATE tickets SET updated_at = ? WHERE id = ?").run(time, ticketId);
-}
-
-export function createTicket(body, ctx) {
-  const { db, board, actor } = ctx;
-  // The router resolves `ctx.board` from path/body/query before we get here.
-  // If the caller also sent `body.board_id`, it must agree with ctx.board.
-  if (body.board_id && body.board_id !== board.id) {
-    throw httpError(400, "board_id_mismatch");
-  }
-  const boardId = board.id;
-  const innerBoard = boardById(db, boardId);
-  if (!innerBoard) throw httpError(404, "board_not_found");
-  requireBoardAccess(actor, innerBoard);
-  requirePermission(actor, "write");
-
-  const title = requiredString(body.title, "title");
-  const stateId = body.state_id || defaultStateId(db, boardId);
-  const state = db.prepare("SELECT * FROM states WHERE id = ? AND board_id = ?").get(stateId, boardId);
-  if (!state) throw httpError(400, "invalid_state");
-
-  const ticketType = normalizeTicketType(body.type || (body.parent_ticket_id ? "feature" : "task"));
-  const parentTicketId = normalizeParentTicketId(db, body.parent_ticket_id, boardId, ticketType);
-  const ticketId = id();
-  const time = now();
-
-  return tx(db, () => {
-    // MAX(number)+1 must be read and consumed inside the transaction: BEGIN
-    // IMMEDIATE holds the write lock so a concurrent process (e.g. an MCP
-    // agent creating a ticket) can't pick the same number and trip the
-    // UNIQUE(board_id, number) constraint.
-    const nextNumber =
-      (db.prepare("SELECT MAX(number) AS value FROM tickets WHERE board_id = ?").get(boardId).value || 0) + 1;
-
-    db.prepare(
-      `INSERT INTO tickets
-       (id, board_id, number, title, description, type, parent_ticket_id, ai_plan,
-        plan_artifact_path, implementation_summary, implementation_artifact_path,
-        implementation_updates, state_id, priority, created_by, created_at, updated_at)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
-    ).run(
-      ticketId,
-      boardId,
-      nextNumber,
-      title,
-      body.description || "",
-      ticketType,
-      parentTicketId,
-      body.ai_plan || "",
-      body.plan_artifact_path || "",
-      body.implementation_summary || "",
-      body.implementation_artifact_path || "",
-      body.implementation_updates || "",
-      stateId,
-      normalizePriority(body.priority),
-      actor.name,
-      time,
-      time
-    );
-
-    for (const labelName of body.labels || []) {
-      const label = ensureLabel(db, boardId, labelName);
-      db.prepare("INSERT OR IGNORE INTO ticket_labels (ticket_id, label_id) VALUES (?, ?)").run(ticketId, label.id);
-    }
-
-    recordEvent(db, boardId, "ticket_created", ticketId, actor.name, {
-      title,
-      type: ticketType,
-      parent_ticket_id: parentTicketId
-    });
-    reindexTicket(db, ticketId);
-    bumpTicketUpdatedAt(db, parentTicketId, time);
-    return ticketById(db, ticketId);
-  });
-}
-
-export function updateTicket(ticketId, body, ctx) {
-  const { db, board, actor } = ctx;
-  const before = ticketById(db, ticketId);
-  if (!before) throw httpError(404, "ticket_not_found");
-  if (before.board_id !== board.id) throw httpError(404, "ticket_not_found");
-  const innerBoard = boardById(db, before.board_id);
-  requireBoardAccess(actor, innerBoard);
-  requirePermission(actor, "write");
-
-  const allowed = [
-    "title",
-    "description",
-    "type",
-    "parent_ticket_id",
-    "ai_plan",
-    "plan_artifact_path",
-    "implementation_summary",
-    "implementation_artifact_path",
-    "implementation_updates",
-    "state_id",
-    "priority"
-  ];
-
-  const nextType = body.type !== undefined ? normalizeTicketType(body.type) : before.type;
-
-  // Resolve every requested field to the value that will actually be written,
-  // without mutating the caller's request body. The same resolved map drives
-  // both the UPDATE and the audit event, so history reflects what was stored
-  // (normalized priority/type, validated parent) rather than raw input.
-  const applied = {};
-  for (const field of allowed) {
-    if (body[field] === undefined) continue;
-    if (field === "type") applied.type = nextType;
-    else if (field === "priority") applied.priority = normalizePriority(body.priority);
-    else if (field === "parent_ticket_id") {
-      applied.parent_ticket_id = normalizeParentTicketId(db, body.parent_ticket_id, before.board_id, nextType, before.id);
-    } else applied[field] = body[field];
-  }
-  // Promoting a ticket to epic clears any parent, even if the caller didn't
-  // mention parent_ticket_id (epics cannot have parents).
-  if (nextType === "epic" && applied.parent_ticket_id === undefined) {
-    applied.parent_ticket_id = null;
-  }
-
-  const labelSync = Array.isArray(body.labels);
-  const fields = Object.keys(applied);
-
-  if (fields.length === 0 && !labelSync) return before;
-
-  if (applied.state_id) {
-    const state = db.prepare("SELECT * FROM states WHERE id = ? AND board_id = ?").get(applied.state_id, before.board_id);
-    if (!state) throw httpError(400, "invalid_state");
-  }
-
-  return tx(db, () => {
-    const time = now();
-    if (fields.length > 0) {
-      const sets = fields.map((field) => `${field} = ?`);
-      const values = fields.map((field) => applied[field]);
-      sets.push("updated_at = ?");
-      values.push(time, ticketId);
-      db.prepare(`UPDATE tickets SET ${sets.join(", ")} WHERE id = ?`).run(...values);
-    }
-
-    // Replace ticket labels when `labels` is sent (array of names). Labels are board-scoped.
-    if (labelSync) {
-      const boardScopeId = before.board_id;
-      db.prepare("DELETE FROM ticket_labels WHERE ticket_id = ?").run(ticketId);
-      for (const labelName of body.labels) {
-        const clean = String(labelName ?? "")
-          .trim()
-          .replace(/\s+/g, " ");
-        if (!clean) continue;
-        const label = ensureLabel(db, boardScopeId, clean);
-        db.prepare("INSERT OR IGNORE INTO ticket_labels (ticket_id, label_id) VALUES (?, ?)").run(ticketId, label.id);
-      }
-      if (fields.length === 0) {
-        db.prepare("UPDATE tickets SET updated_at = ? WHERE id = ?").run(time, ticketId);
-      }
-    }
-
-    const after = ticketById(db, ticketId);
-    if (before.state_id !== after.state_id) {
-      // Done lane is the auto-resolver for blocker relations. When a ticket
-      // lands in a role='done' lane, every relation that names this ticket as a
-      // blocker (`blocks` from this ticket, `blocked_by` toward this ticket)
-      // becomes meaningless — the relation row is the SSOT, so we delete it.
-      if (after.state_role === "done" && before.state_role !== "done") {
-        db.prepare(
-          `DELETE FROM relations
-           WHERE (source_ticket_id = ? AND type = 'blocks')
-              OR (target_ticket_id = ? AND type = 'blocked_by')`
-        ).run(ticketId, ticketId);
-      }
-      recordEvent(db, before.board_id, "state_changed", ticketId, actor.name, {
-        from: before.state_name,
-        to: after.state_name,
-        actor_type: actor.type,
-        actor_id: actor.id
-      });
-    } else {
-      const eventPayload = { ...applied };
-      if (labelSync) eventPayload.labels = body.labels;
-      if (Object.keys(eventPayload).length > 0) {
-        recordEvent(db, before.board_id, "ticket_updated", ticketId, actor.name, eventPayload);
-      }
-    }
-    reindexTicket(db, ticketId);
-    // Roll activity up to the parent epic so the column sort keeps the epic
-    // group near recent child activity. On reparent, bump both old and new
-    // parent — both views changed (one lost a child, the other gained one).
-    bumpTicketUpdatedAt(db, before.parent_ticket_id, time);
-    if (after.parent_ticket_id && after.parent_ticket_id !== before.parent_ticket_id) {
-      bumpTicketUpdatedAt(db, after.parent_ticket_id, time);
-    }
-    return after;
-  });
-}
-
-export function archiveTicket(ticketId, ctx) {
-  const { db, board, actor } = ctx;
-  const ticket = ticketById(db, ticketId);
-  if (!ticket || ticket.board_id !== board.id) throw httpError(404, "ticket_not_found");
-  requireBoardAccess(actor, boardById(db, ticket.board_id));
-  requirePermission(actor, "write");
-
-  if (ticket.archived_at) return ticket;
-
-  return tx(db, () => {
-    const time = now();
-    db.prepare("UPDATE tickets SET archived_at = ?, updated_at = ? WHERE id = ?").run(time, time, ticketId);
-    recordEvent(db, ticket.board_id, "ticket_archived", ticketId, actor.name, { title: ticket.title });
-    bumpTicketUpdatedAt(db, ticket.parent_ticket_id, time);
-    return ticketById(db, ticketId);
-  });
-}
-
-export function restoreTicket(ticketId, ctx) {
-  const { db, board, actor } = ctx;
-  const ticket = ticketById(db, ticketId);
-  if (!ticket || ticket.board_id !== board.id) throw httpError(404, "ticket_not_found");
-  requireBoardAccess(actor, boardById(db, ticket.board_id));
-  requirePermission(actor, "write");
-
-  if (!ticket.archived_at) return ticket;
-
-  return tx(db, () => {
-    const time = now();
-    db.prepare("UPDATE tickets SET archived_at = NULL, updated_at = ? WHERE id = ?").run(time, ticketId);
-    recordEvent(db, ticket.board_id, "ticket_restored", ticketId, actor.name, { title: ticket.title });
-    bumpTicketUpdatedAt(db, ticket.parent_ticket_id, time);
-    return ticketById(db, ticketId);
-  });
-}
-
-export function deleteTicket(ticketId, ctx) {
-  const { db, board, actor } = ctx;
-  const ticket = ticketById(db, ticketId);
-  if (!ticket || ticket.board_id !== board.id) throw httpError(404, "ticket_not_found");
-  requireBoardAccess(actor, boardById(db, ticket.board_id));
-  requirePermission(actor, "write");
-
-  if (!ticket.archived_at) throw httpError(409, "ticket_not_archived");
-
-  return tx(db, () => {
-    recordEvent(db, ticket.board_id, "ticket_deleted", ticketId, actor.name, {
-      title: ticket.title,
-      type: ticket.type,
-      board_id: ticket.board_id
-    });
-    db.prepare("DELETE FROM ticket_fts WHERE ticket_id = ?").run(ticketId);
-    db.prepare("DELETE FROM tickets WHERE id = ?").run(ticketId);
-    bumpTicketUpdatedAt(db, ticket.parent_ticket_id, now());
-    return { ok: true, deleted_id: ticketId };
-  });
-}
-
-export function createComment(ticketId, body, ctx) {
-  const { db, board, actor } = ctx;
-  const ticket = ticketById(db, ticketId);
-  if (!ticket || ticket.board_id !== board.id) throw httpError(404, "ticket_not_found");
-  requireBoardAccess(actor, boardById(db, ticket.board_id));
-  requirePermission(actor, "write");
-
-  const commentBody = requiredString(body.body, "body");
-  const author = body.author || actor.name;
-  const kind = body.kind || (actor.type === "agent" ? "agent_note" : "human_comment");
-
-  return tx(db, () => {
-    const time = now();
-    const comment = addComment(db, ticketId, author, kind, commentBody);
-    db.prepare("UPDATE tickets SET updated_at = ? WHERE id = ?").run(time, ticketId);
-    recordEvent(db, ticket.board_id, "comment_created", ticketId, actor.name, { kind: comment.kind });
-    reindexTicket(db, ticketId);
-    bumpTicketUpdatedAt(db, ticket.parent_ticket_id, time);
-    return comment;
-  });
-}
-
-export function updateCommentAiOmission(ticketId, commentId, body, ctx) {
-  const { db, board, actor } = ctx;
-  const ticket = ticketById(db, ticketId);
-  if (!ticket || ticket.board_id !== board.id) throw httpError(404, "ticket_not_found");
-  requireBoardAccess(actor, boardById(db, ticket.board_id));
-  requirePermission(actor, "write");
-
-  const comment = db.prepare("SELECT * FROM comments WHERE id = ? AND ticket_id = ?").get(commentId, ticketId);
-  if (!comment) throw httpError(404, "comment_not_found");
-  const omittedForAi = body.omitted_for_ai ?? body.omittedForAi;
-  if (typeof omittedForAi !== "boolean") throw httpError(400, "omitted_for_ai_required");
-
-  return tx(db, () => {
-    const time = now();
-    db.prepare("UPDATE comments SET omitted_for_ai = ? WHERE id = ?").run(omittedForAi ? 1 : 0, commentId);
-    db.prepare("UPDATE tickets SET updated_at = ? WHERE id = ?").run(time, ticketId);
-    recordEvent(db, ticket.board_id, "comment_ai_omission_changed", ticketId, actor.name, {
-      comment_id: commentId,
-      omitted_for_ai: omittedForAi
-    });
-    reindexTicket(db, ticketId);
-    bumpTicketUpdatedAt(db, ticket.parent_ticket_id, time);
-    return db.prepare("SELECT * FROM comments WHERE id = ?").get(commentId);
-  });
-}
-
-export function getTicketStatusHistory(ticketId, ctx) {
-  const { db, board, actor } = ctx;
-  const ticket = ticketById(db, ticketId);
-  if (!ticket || ticket.board_id !== board.id) throw httpError(404, "ticket_not_found");
-  requireBoardAccess(actor, boardById(db, ticket.board_id));
-
-  return db
-    .prepare(
-      `SELECT * FROM events
-       WHERE ticket_id = ? AND type IN ('state_changed', 'checkpoint_requested', 'agent_completed')
-       ORDER BY created_at ASC`
-    )
-    .all(ticketId)
-    .map((e) => ({ ...e, body: JSON.parse(e.body_json) }));
-}
-
-export function normalizeParentTicketId(db, value, boardId, ticketType, currentTicketId = "") {
-  if (value === undefined || value === null || value === "") {
-    return null;
-  }
-  if (ticketType === "epic") throw httpError(400, "epic_cannot_have_parent");
-  if (value === currentTicketId) throw httpError(400, "ticket_cannot_parent_itself");
-
-  const parent = ticketById(db, value);
-  if (!parent || parent.board_id !== boardId) throw httpError(400, "invalid_parent_ticket");
-
-  // Walk the full ancestor chain, not just one hop: parenting onto `parent`
-  // must not make `currentTicketId` its own ancestor (A→B→C→A). The depth cap
-  // also stops a pre-existing corrupt cycle from looping forever here.
-  const seen = new Set();
-  let ancestor = parent;
-  let guard = 0;
-  while (ancestor) {
-    if (currentTicketId && ancestor.id === currentTicketId) {
-      throw httpError(400, "ticket_parent_cycle");
-    }
-    if (!ancestor.parent_ticket_id || seen.has(ancestor.parent_ticket_id) || guard++ > 1000) break;
-    seen.add(ancestor.parent_ticket_id);
-    ancestor = ticketById(db, ancestor.parent_ticket_id);
-  }
-  return parent.id;
-}
-
-export function reindexTicket(db, ticketId) {
-  const ticket = db.prepare("SELECT * FROM tickets WHERE id = ?").get(ticketId);
-  if (!ticket) return;
-  const comments = db
-    .prepare("SELECT body FROM comments WHERE ticket_id = ? AND COALESCE(omitted_for_ai, 0) = 0 ORDER BY created_at ASC")
-    .all(ticketId)
-    .map((comment) => comment.body)
-    .join("\n");
-  const implementationText = [
-    `Type: ${ticket.type}`,
-    ticket.ai_plan,
-    ticket.implementation_summary,
-    ticket.implementation_updates
-  ]
-    .filter(Boolean)
-    .join("\n");
-  db.prepare("DELETE FROM ticket_fts WHERE ticket_id = ?").run(ticketId);
-  db.prepare("INSERT INTO ticket_fts (ticket_id, title, description, comments) VALUES (?, ?, ?, ?)").run(
-    ticketId,
-    ticket.title,
-    ticket.description,
-    [implementationText, comments].filter(Boolean).join("\n")
-  );
-}
-
-export function reindexAllTickets(db) {
-  const rows = db.prepare("SELECT id FROM tickets").all();
-  for (const row of rows) reindexTicket(db, row.id);
-}