@storyshelf/core 0.3.2 → 0.5.3

package/dist/models/content-ref.mjs

@@ -0,0 +1,49 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/models/content-ref.ts
+/** Content refs for deduplicated Storybook assets. */
+var ContentRefModel = class {
+	db;
+	tables;
+	constructor(db, tables) {
+		this.db = db;
+		this.tables = tables ?? { contentRefs: db.tables.contentRefs };
+	}
+	async get(hash) {
+		return await this.db.get(this.tables.contentRefs, hash);
+	}
+	async upsert(hash) {
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const existing = await this.get(hash);
+		if (existing) return await this.db.update(this.tables.contentRefs, hash, {
+			refCount: existing.refCount + 1,
+			lastSeenAt: now
+		});
+		return await this.db.insert(this.tables.contentRefs, {
+			hash,
+			refCount: 1,
+			lastSeenAt: now,
+			createdAt: now
+		});
+	}
+	async decrement(hash) {
+		const existing = await this.get(hash);
+		if (!existing) return null;
+		if (existing.refCount <= 1) {
+			await this.db.remove(this.tables.contentRefs, hash);
+			return null;
+		}
+		return await this.db.update(this.tables.contentRefs, hash, {
+			refCount: existing.refCount - 1,
+			lastSeenAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+	}
+	async listStale(cutoff) {
+		return (await this.db.list(this.tables.contentRefs)).filter((r) => r.refCount === 0 && r.lastSeenAt < cutoff);
+	}
+};
+//#endregion
+export { ContentRefModel };
+
+//# sourceMappingURL=content-ref.mjs.map

package/dist/models/content-ref.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-ref.mjs","names":[],"sources":["../../src/models/content-ref.ts"],"sourcesContent":["import type { Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { ContentRef } from \"../schema/content-ref.ts\";\n\n/** Content refs for deduplicated Storybook assets. */\nexport class ContentRefModel {\n  private readonly tables: { contentRefs: Table };\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: { contentRefs: Table },\n  ) {\n    this.tables = tables ?? { contentRefs: db.tables.contentRefs };\n  }\n\n  async get(hash: string): Promise<ContentRef | null> {\n    return (await this.db.get(this.tables.contentRefs, hash)) as unknown as ContentRef | null;\n  }\n\n  async upsert(hash: string): Promise<ContentRef> {\n    const now = new Date().toISOString();\n    const existing = await this.get(hash);\n    if (existing) {\n      return (await this.db.update(this.tables.contentRefs, hash, {\n        refCount: existing.refCount + 1,\n        lastSeenAt: now,\n      })) as unknown as ContentRef;\n    }\n    return (await this.db.insert(this.tables.contentRefs, {\n      hash,\n      refCount: 1,\n      lastSeenAt: now,\n      createdAt: now,\n    })) as unknown as ContentRef;\n  }\n\n  async decrement(hash: string): Promise<ContentRef | null> {\n    const existing = await this.get(hash);\n    if (!existing) return null;\n    if (existing.refCount <= 1) {\n      await this.db.remove(this.tables.contentRefs, hash);\n      return null;\n    }\n    return (await this.db.update(this.tables.contentRefs, hash, {\n      refCount: existing.refCount - 1,\n      lastSeenAt: new Date().toISOString(),\n    })) as unknown as ContentRef;\n  }\n\n  async listStale(cutoff: string): Promise<ContentRef[]> {\n    const all = (await this.db.list(this.tables.contentRefs)) as unknown as ContentRef[];\n    return all.filter((r) => r.refCount === 0 && r.lastSeenAt < cutoff);\n  }\n}\n"],"mappings":";;;;;AAKA,IAAa,kBAAb,MAA6B;CAGR;CAFnB;CACA,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EAGjB,KAAK,SAAS,UAAU,EAAE,aAAa,GAAG,OAAO,YAAY;CAC/D;CAEA,MAAM,IAAI,MAA0C;EAClD,OAAQ,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,aAAa,IAAI;CACzD;CAEA,MAAM,OAAO,MAAmC;EAC9C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAW,MAAM,KAAK,IAAI,IAAI;EACpC,IAAI,UACF,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,aAAa,MAAM;GAC1D,UAAU,SAAS,WAAW;GAC9B,YAAY;EACd,CAAC;EAEH,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,aAAa;GACpD;GACA,UAAU;GACV,YAAY;GACZ,WAAW;EACb,CAAC;CACH;CAEA,MAAM,UAAU,MAA0C;EACxD,MAAM,WAAW,MAAM,KAAK,IAAI,IAAI;EACpC,IAAI,CAAC,UAAU,OAAO;EACtB,IAAI,SAAS,YAAY,GAAG;GAC1B,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,aAAa,IAAI;GAClD,OAAO;EACT;EACA,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,aAAa,MAAM;GAC1D,UAAU,SAAS,WAAW;GAC9B,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EACrC,CAAC;CACH;CAEA,MAAM,UAAU,QAAuC;EAErD,QAAO,MADY,KAAK,GAAG,KAAK,KAAK,OAAO,WAAW,EAAA,CAC5C,QAAQ,MAAM,EAAE,aAAa,KAAK,EAAE,aAAa,MAAM;CACpE;AACF"}

package/dist/models/credentials.d.mts

@@ -0,0 +1,36 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { SecretKeys } from "../utils/encrypt.mjs";
+//#region src/models/credentials.d.ts
+/** A row no configured key can decrypt. */
+interface UnreadableCredential {
+  source: string;
+  id: string;
+}
+/** Which key each stored credential needs. */
+interface CredentialProbe {
+  total: number;
+  /** Rows readable with the current secret. */
+  current: number;
+  /** Rows only readable with `previousSecret`; run re-encryption. */
+  previous: number;
+  unreadable: UnreadableCredential[];
+}
+/** Outcome of {@link reencryptCredentials}. */
+interface ReencryptResult {
+  reencrypted: number;
+  failed: number;
+  unreadable: UnreadableCredential[];
+}
+/** Count stored credentials by the key they need; read-only. */
+declare function probeCredentials(db: DatabaseAdapter, keys: SecretKeys): Promise<CredentialProbe>;
+/**
+ * Re-encrypt every credential still under `keys.previous` with `keys.current`.
+ * Idempotent; unreadable rows are left untouched and reported, and one failed
+ * write does not stop the rest.
+ */
+declare function reencryptCredentials(db: DatabaseAdapter, keys: SecretKeys): Promise<ReencryptResult>;
+//#endregion
+export { CredentialProbe, ReencryptResult, UnreadableCredential, probeCredentials, reencryptCredentials };
+//# sourceMappingURL=credentials.d.mts.map

package/dist/models/credentials.mjs

@@ -0,0 +1,103 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { decryptWithKey, encrypt } from "../utils/encrypt.mjs";
+//#region src/models/credentials.ts
+/** Tables that hold encrypted credentials, with the column to read. */
+const SOURCES = [
+	{
+		name: "webhooks",
+		table: "webhooks",
+		column: "secretEncrypted"
+	},
+	{
+		name: "git status tokens",
+		table: "projectStatusConfigs",
+		column: "tokenEncrypted"
+	},
+	{
+		name: "notification channels",
+		table: "notificationChannels",
+		column: "secretEncrypted"
+	}
+];
+/** Every non-empty encrypted value across the credential tables. */
+async function storedCredentials(db) {
+	return (await Promise.all(SOURCES.map(async (source) => {
+		return (await db.list(db.tables[source.table])).flatMap((row) => {
+			const ciphertext = row[source.column];
+			return typeof ciphertext === "string" && ciphertext !== "" ? [{
+				source,
+				id: row.id,
+				ciphertext
+			}] : [];
+		});
+	}))).flat();
+}
+function classify(keys, ciphertext) {
+	try {
+		return decryptWithKey(keys, ciphertext).keyUsed;
+	} catch {
+		return "unreadable";
+	}
+}
+/** Count stored credentials by the key they need; read-only. */
+async function probeCredentials(db, keys) {
+	const stored = await storedCredentials(db);
+	const probe = {
+		total: stored.length,
+		current: 0,
+		previous: 0,
+		unreadable: []
+	};
+	for (const item of stored) {
+		const state = classify(keys, item.ciphertext);
+		if (state === "unreadable") probe.unreadable.push({
+			source: item.source.name,
+			id: item.id
+		});
+		else probe[state] += 1;
+	}
+	return probe;
+}
+/**
+* Re-encrypt every credential still under `keys.previous` with `keys.current`.
+* Idempotent; unreadable rows are left untouched and reported, and one failed
+* write does not stop the rest.
+*/
+async function reencryptCredentials(db, keys) {
+	const result = {
+		reencrypted: 0,
+		failed: 0,
+		unreadable: []
+	};
+	const outcomes = await Promise.all((await storedCredentials(db)).map(async (item) => await reencryptOne(db, keys, item)));
+	for (const outcome of outcomes) if (outcome.state === "unreadable") result.unreadable.push(outcome.row);
+	else if (outcome.state !== "skipped") result[outcome.state] += 1;
+	return result;
+}
+async function reencryptOne(db, keys, item) {
+	let plain;
+	try {
+		plain = decryptWithKey(keys, item.ciphertext);
+	} catch {
+		return {
+			state: "unreadable",
+			row: {
+				source: item.source.name,
+				id: item.id
+			}
+		};
+	}
+	if (plain.keyUsed === "current") return { state: "skipped" };
+	try {
+		await db.update(db.tables[item.source.table], item.id, { [item.source.column]: encrypt(keys.current, plain.plaintext) });
+		return { state: "reencrypted" };
+	} catch {
+		return { state: "failed" };
+	}
+}
+//#endregion
+export { probeCredentials, reencryptCredentials };
+
+//# sourceMappingURL=credentials.mjs.map

package/dist/models/credentials.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.mjs","names":[],"sources":["../../src/models/credentials.ts"],"sourcesContent":["/**\n * Stored-credential inventory and re-encryption for secret rotation.\n *\n * Webhook secrets, git-provider tokens, and notification-channel secrets are\n * encrypted under `ShelfConfig.secret`. After a rotation the old secret stays\n * available as `previousSecret` (decrypt-only); {@link probeCredentials} reports\n * which key each row needs and {@link reencryptCredentials} moves rows to the\n * current key. Neither returns or logs credential values.\n */\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { decryptWithKey, encrypt, type SecretKeys } from \"../utils/encrypt.ts\";\n\n/** Tables that hold encrypted credentials, with the column to read. */\nconst SOURCES = [\n  { name: \"webhooks\", table: \"webhooks\", column: \"secretEncrypted\" },\n  { name: \"git status tokens\", table: \"projectStatusConfigs\", column: \"tokenEncrypted\" },\n  { name: \"notification channels\", table: \"notificationChannels\", column: \"secretEncrypted\" },\n] as const;\n\n/** A row no configured key can decrypt. */\nexport interface UnreadableCredential {\n  source: string;\n  id: string;\n}\n\n/** Which key each stored credential needs. */\nexport interface CredentialProbe {\n  total: number;\n  /** Rows readable with the current secret. */\n  current: number;\n  /** Rows only readable with `previousSecret`; run re-encryption. */\n  previous: number;\n  unreadable: UnreadableCredential[];\n}\n\n/** Outcome of {@link reencryptCredentials}. */\nexport interface ReencryptResult {\n  reencrypted: number;\n  failed: number;\n  unreadable: UnreadableCredential[];\n}\n\ninterface StoredCredential {\n  source: (typeof SOURCES)[number];\n  id: string;\n  ciphertext: string;\n}\n\n/** Every non-empty encrypted value across the credential tables. */\nasync function storedCredentials(db: DatabaseAdapter): Promise<StoredCredential[]> {\n  const lists = await Promise.all(\n    SOURCES.map(async (source) => {\n      const rows = (await db.list(db.tables[source.table])) as unknown as (Record<\n        string,\n        unknown\n      > & {\n        id: string;\n      })[];\n      return rows.flatMap((row) => {\n        const ciphertext = row[source.column];\n        return typeof ciphertext === \"string\" && ciphertext !== \"\"\n          ? [{ source, id: row.id, ciphertext }]\n          : [];\n      });\n    }),\n  );\n  return lists.flat();\n}\n\nfunction classify(keys: SecretKeys, ciphertext: string): \"current\" | \"previous\" | \"unreadable\" {\n  try {\n    return decryptWithKey(keys, ciphertext).keyUsed;\n  } catch {\n    return \"unreadable\";\n  }\n}\n\n/** Count stored credentials by the key they need; read-only. */\nexport async function probeCredentials(\n  db: DatabaseAdapter,\n  keys: SecretKeys,\n): Promise<CredentialProbe> {\n  const stored = await storedCredentials(db);\n  const probe: CredentialProbe = { total: stored.length, current: 0, previous: 0, unreadable: [] };\n  for (const item of stored) {\n    const state = classify(keys, item.ciphertext);\n    if (state === \"unreadable\") {\n      probe.unreadable.push({ source: item.source.name, id: item.id });\n    } else {\n      probe[state] += 1;\n    }\n  }\n  return probe;\n}\n\n/**\n * Re-encrypt every credential still under `keys.previous` with `keys.current`.\n * Idempotent; unreadable rows are left untouched and reported, and one failed\n * write does not stop the rest.\n */\nexport async function reencryptCredentials(\n  db: DatabaseAdapter,\n  keys: SecretKeys,\n): Promise<ReencryptResult> {\n  const result: ReencryptResult = { reencrypted: 0, failed: 0, unreadable: [] };\n  const outcomes = await Promise.all(\n    (await storedCredentials(db)).map(async (item) => await reencryptOne(db, keys, item)),\n  );\n  for (const outcome of outcomes) {\n    if (outcome.state === \"unreadable\") {\n      result.unreadable.push(outcome.row);\n    } else if (outcome.state !== \"skipped\") {\n      result[outcome.state] += 1;\n    }\n  }\n  return result;\n}\n\ntype Outcome =\n  | { state: \"reencrypted\" | \"failed\" | \"skipped\" }\n  | { state: \"unreadable\"; row: UnreadableCredential };\n\nasync function reencryptOne(\n  db: DatabaseAdapter,\n  keys: SecretKeys,\n  item: StoredCredential,\n): Promise<Outcome> {\n  let plain: { plaintext: string; keyUsed: string };\n  try {\n    plain = decryptWithKey(keys, item.ciphertext);\n  } catch {\n    return { state: \"unreadable\", row: { source: item.source.name, id: item.id } };\n  }\n  if (plain.keyUsed === \"current\") {\n    return { state: \"skipped\" };\n  }\n  try {\n    await db.update(db.tables[item.source.table], item.id, {\n      [item.source.column]: encrypt(keys.current, plain.plaintext),\n    });\n    return { state: \"reencrypted\" };\n  } catch {\n    return { state: \"failed\" };\n  }\n}\n"],"mappings":";;;;;;AAaA,MAAM,UAAU;CACd;EAAE,MAAM;EAAY,OAAO;EAAY,QAAQ;CAAkB;CACjE;EAAE,MAAM;EAAqB,OAAO;EAAwB,QAAQ;CAAiB;CACrF;EAAE,MAAM;EAAyB,OAAO;EAAwB,QAAQ;CAAkB;AAC5F;;AAgCA,eAAe,kBAAkB,IAAkD;CAiBjF,QAAO,MAhBa,QAAQ,IAC1B,QAAQ,IAAI,OAAO,WAAW;EAO5B,QAAO,MANa,GAAG,KAAK,GAAG,OAAO,OAAO,MAAM,EAAA,CAMvC,SAAS,QAAQ;GAC3B,MAAM,aAAa,IAAI,OAAO;GAC9B,OAAO,OAAO,eAAe,YAAY,eAAe,KACpD,CAAC;IAAE;IAAQ,IAAI,IAAI;IAAI;GAAW,CAAC,IACnC,CAAC;EACP,CAAC;CACH,CAAC,CACH,EAAA,CACa,KAAK;AACpB;AAEA,SAAS,SAAS,MAAkB,YAA2D;CAC7F,IAAI;EACF,OAAO,eAAe,MAAM,UAAU,CAAC,CAAC;CAC1C,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,eAAsB,iBACpB,IACA,MAC0B;CAC1B,MAAM,SAAS,MAAM,kBAAkB,EAAE;CACzC,MAAM,QAAyB;EAAE,OAAO,OAAO;EAAQ,SAAS;EAAG,UAAU;EAAG,YAAY,CAAC;CAAE;CAC/F,KAAK,MAAM,QAAQ,QAAQ;EACzB,MAAM,QAAQ,SAAS,MAAM,KAAK,UAAU;EAC5C,IAAI,UAAU,cACZ,MAAM,WAAW,KAAK;GAAE,QAAQ,KAAK,OAAO;GAAM,IAAI,KAAK;EAAG,CAAC;OAE/D,MAAM,UAAU;CAEpB;CACA,OAAO;AACT;;;;;;AAOA,eAAsB,qBACpB,IACA,MAC0B;CAC1B,MAAM,SAA0B;EAAE,aAAa;EAAG,QAAQ;EAAG,YAAY,CAAC;CAAE;CAC5E,MAAM,WAAW,MAAM,QAAQ,KAC5B,MAAM,kBAAkB,EAAE,EAAA,CAAG,IAAI,OAAO,SAAS,MAAM,aAAa,IAAI,MAAM,IAAI,CAAC,CACtF;CACA,KAAK,MAAM,WAAW,UACpB,IAAI,QAAQ,UAAU,cACpB,OAAO,WAAW,KAAK,QAAQ,GAAG;MAC7B,IAAI,QAAQ,UAAU,WAC3B,OAAO,QAAQ,UAAU;CAG7B,OAAO;AACT;AAMA,eAAe,aACb,IACA,MACA,MACkB;CAClB,IAAI;CACJ,IAAI;EACF,QAAQ,eAAe,MAAM,KAAK,UAAU;CAC9C,QAAQ;EACN,OAAO;GAAE,OAAO;GAAc,KAAK;IAAE,QAAQ,KAAK,OAAO;IAAM,IAAI,KAAK;GAAG;EAAE;CAC/E;CACA,IAAI,MAAM,YAAY,WACpB,OAAO,EAAE,OAAO,UAAU;CAE5B,IAAI;EACF,MAAM,GAAG,OAAO,GAAG,OAAO,KAAK,OAAO,QAAQ,KAAK,IAAI,GACpD,KAAK,OAAO,SAAS,QAAQ,KAAK,SAAS,MAAM,SAAS,EAC7D,CAAC;EACD,OAAO,EAAE,OAAO,cAAc;CAChC,QAAQ;EACN,OAAO,EAAE,OAAO,SAAS;CAC3B;AACF"}

package/dist/models/label.d.mts

@@ -0,0 +1,58 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { BuildLabel, LabelType } from "../schema/label.mjs";
+import { Table } from "drizzle-orm";
+//#region src/models/label.d.ts
+/** Tables required by {@link LabelModel}. */
+interface LabelTables {
+  builds: Table;
+  buildLabels: Table;
+  labelTypes: Table;
+}
+/** Data operations for label types and build labels. */
+declare class LabelModel {
+  private readonly db;
+  private readonly tables;
+  /**
+   * @param db - Database adapter.
+   * @param tables - Table handles.
+   */
+  constructor(db: DatabaseAdapter, tables?: LabelTables);
+  /**
+   * Seed the default label types for a project if missing.
+   *
+   * @param projectId - Project ID.
+   */
+  seedFor(projectId: string): Promise<void>;
+  /** List all label types for a project. */
+  listTypes(projectId: string): Promise<LabelType[]>;
+  /** Fetch a label type by key, or null if not found. */
+  getType(projectId: string, key: string): Promise<LabelType | null>;
+  /** Create a custom label type for a project. */
+  createType(projectId: string, input: {
+    key: string;
+    name: string;
+    linkTemplate?: string;
+    color?: string;
+  }): Promise<LabelType>;
+  /** Update a custom label type's name, template or color. */
+  updateType(projectId: string, key: string, input: {
+    name?: string;
+    linkTemplate?: string | null;
+    color?: string | null;
+  }): Promise<LabelType | null>;
+  /** Remove a custom label type, rejecting reserved or persistent types. */
+  removeType(projectId: string, key: string): Promise<void>;
+  /** Attach a label value to a build. */
+  attach(projectId: string, buildId: string, typeKey: string, value: string): Promise<BuildLabel>;
+  /** List all labels attached to a build. */
+  listForBuild(buildId: string): Promise<BuildLabel[]>;
+  /** Return the id of the latest build carrying a given label value, if any. */
+  latestBuildId(projectId: string, typeKey: string, value: string): Promise<string | null>;
+  /** Return whether a build is marked as persistent. */
+  hasPersistent(projectId: string, buildId: string): Promise<boolean>;
+}
+//#endregion
+export { LabelModel, LabelTables };
+//# sourceMappingURL=label.d.mts.map

package/dist/models/label.mjs

@@ -1,31 +1,26 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { builds } from "../schema/build.mjs";
-import { buildLabels, labelTypes } from "../schema/label.mjs";
-import { ulid } from "../utils/ulid.mjs";
 import { PERSISTENT_LABEL_KEY, RESERVED_LABEL_KEYS, SEEDED_LABEL_KEYS } from "../types.mjs";
-import { and, desc, eq } from "drizzle-orm";
+import { ulid } from "../utils/ulid.mjs";
+import { and, desc, eq, getTableColumns } from "drizzle-orm";
 //#region src/models/label.ts
 /** Build labels and project label types. */
-const SEEDED_NAMES = {
-	branch: "Branch",
-	persistent: "Persistent",
-	pr: "Pull request",
-	mr: "Merge request",
-	jira: "Jira issue",
-	linear: "Linear issue",
-	figma: "Figma file",
-	custom: "Custom"
-};
 /** Data operations for label types and build labels. */
 var LabelModel = class {
 	db;
+	tables;
 	/**
 	* @param db - Database adapter.
+	* @param tables - Table handles.
 	*/
-	constructor(db) {
+	constructor(db, tables) {
 		this.db = db;
+		this.tables = tables ?? {
+			builds: db.tables.builds,
+			buildLabels: db.tables.buildLabels,
+			labelTypes: db.tables.labelTypes
+		};
 	}
 	/**
 	* Seed the default label types for a project if missing.
@@ -38,7 +33,7 @@ var LabelModel = class {
 		const existingKeys = new Set(existing.map((t) => t.key));
 		const missing = SEEDED_LABEL_KEYS.filter((key) => !existingKeys.has(key));
 		await Promise.all(missing.map(async (key) => {
-			await this.db.insert(labelTypes, {
+			await this.db.insert(this.tables.labelTypes, {
 				id: ulid(),
 				projectId,
 				key,
@@ -49,18 +44,18 @@ var LabelModel = class {
 	}
 	/** List all label types for a project. */
 	async listTypes(projectId) {
-		return await this.db.list(labelTypes, { where: eq(labelTypes.projectId, projectId) });
+		return await this.db.list(this.tables.labelTypes, { where: eq(getTableColumns(this.tables.labelTypes)["projectId"], projectId) });
 	}
 	/** Fetch a label type by key, or null if not found. */
 	async getType(projectId, key) {
-		return (await this.db.list(labelTypes, {
-			where: and(eq(labelTypes.projectId, projectId), eq(labelTypes.key, key)),
+		return (await this.db.list(this.tables.labelTypes, {
+			where: and(eq(getTableColumns(this.tables.labelTypes)["projectId"], projectId), eq(getTableColumns(this.tables.labelTypes)["key"], key)),
 			limit: 1
 		}))[0] ?? null;
 	}
 	/** Create a custom label type for a project. */
 	async createType(projectId, input) {
-		return await this.db.insert(labelTypes, {
+		return await this.db.insert(this.tables.labelTypes, {
 			id: ulid(),
 			projectId,
 			key: input.key,
@@ -75,7 +70,7 @@ var LabelModel = class {
 		if (key === "persistent" || RESERVED_LABEL_KEYS.includes(key)) throw new Error(`Label type '${key}' cannot be updated.`);
 		const existing = await this.getType(projectId, key);
 		if (!existing) return null;
-		return await this.db.update(labelTypes, existing.id, {
+		return await this.db.update(this.tables.labelTypes, existing.id, {
 			name: input.name ?? existing.name,
 			linkTemplate: input.linkTemplate === void 0 ? existing.linkTemplate : input.linkTemplate,
 			color: input.color === void 0 ? existing.color : input.color
@@ -85,11 +80,11 @@ var LabelModel = class {
 	async removeType(projectId, key) {
 		if (key === "persistent" || RESERVED_LABEL_KEYS.includes(key)) throw new Error(`Label type '${key}' cannot be removed.`);
 		const existing = await this.getType(projectId, key);
-		if (existing) await this.db.remove(labelTypes, existing.id);
+		if (existing) await this.db.remove(this.tables.labelTypes, existing.id);
 	}
 	/** Attach a label value to a build. */
 	async attach(projectId, buildId, typeKey, value) {
-		return await this.db.insert(buildLabels, {
+		return await this.db.insert(this.tables.buildLabels, {
 			id: ulid(),
 			projectId,
 			buildId,
@@ -100,20 +95,30 @@ var LabelModel = class {
 	}
 	/** List all labels attached to a build. */
 	async listForBuild(buildId) {
-		return await this.db.list(buildLabels, { where: eq(buildLabels.buildId, buildId) });
+		return await this.db.list(this.tables.buildLabels, { where: eq(getTableColumns(this.tables.buildLabels)["buildId"], buildId) });
 	}
 	/** Return the id of the latest build carrying a given label value, if any. */
 	async latestBuildId(projectId, typeKey, value) {
-		const labels = await this.db.list(buildLabels, { where: and(eq(buildLabels.projectId, projectId), eq(buildLabels.typeKey, typeKey), eq(buildLabels.value, value)) });
+		const labels = await this.db.list(this.tables.buildLabels, { where: and(eq(getTableColumns(this.tables.buildLabels)["projectId"], projectId), eq(getTableColumns(this.tables.buildLabels)["typeKey"], typeKey), eq(getTableColumns(this.tables.buildLabels)["value"], value)) });
 		if (labels.length === 0) return null;
 		const idSet = new Set(labels.map((l) => l.buildId));
-		return (await this.db.list(builds, { orderBy: desc(builds.createdAt) })).find((b) => idSet.has(b.id))?.id ?? null;
+		return (await this.db.list(this.tables.builds, { orderBy: desc(getTableColumns(this.tables.builds)["createdAt"]) })).find((b) => idSet.has(b.id))?.id ?? null;
 	}
 	/** Return whether a build is marked as persistent. */
 	async hasPersistent(projectId, buildId) {
-		return (await this.db.list(buildLabels, { where: and(eq(buildLabels.projectId, projectId), eq(buildLabels.buildId, buildId), eq(buildLabels.typeKey, PERSISTENT_LABEL_KEY)) })).length > 0;
+		return (await this.db.list(this.tables.buildLabels, { where: and(eq(getTableColumns(this.tables.buildLabels)["projectId"], projectId), eq(getTableColumns(this.tables.buildLabels)["buildId"], buildId), eq(getTableColumns(this.tables.buildLabels)["typeKey"], PERSISTENT_LABEL_KEY)) })).length > 0;
 	}
 };
+const SEEDED_NAMES = {
+	branch: "Branch",
+	persistent: "Persistent",
+	pr: "Pull request",
+	mr: "Merge request",
+	jira: "Jira issue",
+	linear: "Linear issue",
+	figma: "Figma file",
+	custom: "Custom"
+};
 //#endregion
 export { LabelModel };
 

package/dist/models/label.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"label.mjs","names":[],"sources":["../../src/models/label.ts"],"sourcesContent":["/** Build labels and project label types. */\nimport { and, desc, eq } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { builds } from \"../schema/build.ts\";\nimport { buildLabels, labelTypes } from \"../schema/label.ts\";\nimport type { BuildLabel, LabelType } from \"../schema/label.ts\";\nimport { PERSISTENT_LABEL_KEY, RESERVED_LABEL_KEYS, SEEDED_LABEL_KEYS } from \"../types.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\nconst SEEDED_NAMES: Record<string, string> = {\n  branch: \"Branch\",\n  persistent: \"Persistent\",\n  pr: \"Pull request\",\n  mr: \"Merge request\",\n  jira: \"Jira issue\",\n  linear: \"Linear issue\",\n  figma: \"Figma file\",\n  custom: \"Custom\",\n};\n\n/** Data operations for label types and build labels. */\nexport class LabelModel {\n  /**\n   * @param db - Database adapter.\n   */\n  constructor(private readonly db: DatabaseAdapter) {}\n\n  /**\n   * Seed the default label types for a project if missing.\n   *\n   * @param projectId - Project ID.\n   */\n  async seedFor(projectId: string): Promise<void> {\n    const now = new Date().toISOString();\n    const existing = await this.listTypes(projectId);\n    const existingKeys = new Set(existing.map((t) => t.key));\n    const missing = SEEDED_LABEL_KEYS.filter((key) => !existingKeys.has(key));\n    await Promise.all(\n      missing.map(async (key) => {\n        await this.db.insert(labelTypes, {\n          id: ulid(),\n          projectId,\n          key,\n          name: SEEDED_NAMES[key] ?? key,\n          createdAt: now,\n        });\n      }),\n    );\n  }\n\n  /** List all label types for a project. */\n  async listTypes(projectId: string): Promise<LabelType[]> {\n    return await this.db.list(labelTypes, { where: eq(labelTypes.projectId, projectId) });\n  }\n\n  /** Fetch a label type by key, or null if not found. */\n  async getType(projectId: string, key: string): Promise<LabelType | null> {\n    const rows = await this.db.list(labelTypes, {\n      where: and(eq(labelTypes.projectId, projectId), eq(labelTypes.key, key)),\n      limit: 1,\n    });\n    return rows[0] ?? null;\n  }\n\n  /** Create a custom label type for a project. */\n  async createType(\n    projectId: string,\n    input: { key: string; name: string; linkTemplate?: string; color?: string },\n  ): Promise<LabelType> {\n    return await this.db.insert(labelTypes, {\n      id: ulid(),\n      projectId,\n      key: input.key,\n      name: input.name,\n      linkTemplate: input.linkTemplate,\n      color: input.color,\n      createdAt: new Date().toISOString(),\n    });\n  }\n\n  /** Update a custom label type's name, template or color. */\n  async updateType(\n    projectId: string,\n    key: string,\n    input: { name?: string; linkTemplate?: string | null; color?: string | null },\n  ): Promise<LabelType | null> {\n    if (key === PERSISTENT_LABEL_KEY || RESERVED_LABEL_KEYS.includes(key as never)) {\n      throw new Error(`Label type '${key}' cannot be updated.`);\n    }\n    const existing = await this.getType(projectId, key);\n    if (!existing) {\n      return null;\n    }\n    return await this.db.update(labelTypes, existing.id, {\n      name: input.name ?? existing.name,\n      linkTemplate: input.linkTemplate === undefined ? existing.linkTemplate : input.linkTemplate,\n      color: input.color === undefined ? existing.color : input.color,\n    });\n  }\n\n  /** Remove a custom label type, rejecting reserved or persistent types. */\n  async removeType(projectId: string, key: string): Promise<void> {\n    if (key === PERSISTENT_LABEL_KEY || RESERVED_LABEL_KEYS.includes(key as never)) {\n      throw new Error(`Label type '${key}' cannot be removed.`);\n    }\n    const existing = await this.getType(projectId, key);\n    if (existing) {\n      await this.db.remove(labelTypes, existing.id);\n    }\n  }\n\n  /** Attach a label value to a build. */\n  async attach(\n    projectId: string,\n    buildId: string,\n    typeKey: string,\n    value: string,\n  ): Promise<BuildLabel> {\n    return await this.db.insert(buildLabels, {\n      id: ulid(),\n      projectId,\n      buildId,\n      typeKey,\n      value,\n      createdAt: new Date().toISOString(),\n    });\n  }\n\n  /** List all labels attached to a build. */\n  async listForBuild(buildId: string): Promise<BuildLabel[]> {\n    return await this.db.list(buildLabels, { where: eq(buildLabels.buildId, buildId) });\n  }\n\n  /** Return the id of the latest build carrying a given label value, if any. */\n  async latestBuildId(projectId: string, typeKey: string, value: string): Promise<string | null> {\n    const labels = await this.db.list(buildLabels, {\n      where: and(\n        eq(buildLabels.projectId, projectId),\n        eq(buildLabels.typeKey, typeKey),\n        eq(buildLabels.value, value),\n      ),\n    });\n    if (labels.length === 0) {\n      return null;\n    }\n    const idSet = new Set(labels.map((l) => l.buildId));\n    const rows = await this.db.list(builds, { orderBy: desc(builds.createdAt) });\n    return rows.find((b) => idSet.has(b.id))?.id ?? null;\n  }\n\n  /** Return whether a build is marked as persistent. */\n  async hasPersistent(projectId: string, buildId: string): Promise<boolean> {\n    const labels = await this.db.list(buildLabels, {\n      where: and(\n        eq(buildLabels.projectId, projectId),\n        eq(buildLabels.buildId, buildId),\n        eq(buildLabels.typeKey, PERSISTENT_LABEL_KEY),\n      ),\n    });\n    return labels.length > 0;\n  }\n}\n"],"mappings":";;;;;;;;;;AASA,MAAM,eAAuC;CAC3C,QAAQ;CACR,YAAY;CACZ,IAAI;CACJ,IAAI;CACJ,MAAM;CACN,QAAQ;CACR,OAAO;CACP,QAAQ;AACV;;AAGA,IAAa,aAAb,MAAwB;CAIO;;;;CAA7B,YAAY,IAAsC;EAArB,KAAA,KAAA;CAAsB;;;;;;CAOnD,MAAM,QAAQ,WAAkC;EAC9C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAW,MAAM,KAAK,UAAU,SAAS;EAC/C,MAAM,eAAe,IAAI,IAAI,SAAS,KAAK,MAAM,EAAE,GAAG,CAAC;EACvD,MAAM,UAAU,kBAAkB,QAAQ,QAAQ,CAAC,aAAa,IAAI,GAAG,CAAC;EACxE,MAAM,QAAQ,IACZ,QAAQ,IAAI,OAAO,QAAQ;GACzB,MAAM,KAAK,GAAG,OAAO,YAAY;IAC/B,IAAI,KAAK;IACT;IACA;IACA,MAAM,aAAa,QAAQ;IAC3B,WAAW;GACb,CAAC;EACH,CAAC,CACH;CACF;;CAGA,MAAM,UAAU,WAAyC;EACvD,OAAO,MAAM,KAAK,GAAG,KAAK,YAAY,EAAE,OAAO,GAAG,WAAW,WAAW,SAAS,EAAE,CAAC;CACtF;;CAGA,MAAM,QAAQ,WAAmB,KAAwC;EAKvE,QAAO,MAJY,KAAK,GAAG,KAAK,YAAY;GAC1C,OAAO,IAAI,GAAG,WAAW,WAAW,SAAS,GAAG,GAAG,WAAW,KAAK,GAAG,CAAC;GACvE,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,WACJ,WACA,OACoB;EACpB,OAAO,MAAM,KAAK,GAAG,OAAO,YAAY;GACtC,IAAI,KAAK;GACT;GACA,KAAK,MAAM;GACX,MAAM,MAAM;GACZ,cAAc,MAAM;GACpB,OAAO,MAAM;GACb,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,WACJ,WACA,KACA,OAC2B;EAC3B,IAAI,QAAA,gBAAgC,oBAAoB,SAAS,GAAY,GAC3E,MAAM,IAAI,MAAM,eAAe,IAAI,qBAAqB;EAE1D,MAAM,WAAW,MAAM,KAAK,QAAQ,WAAW,GAAG;EAClD,IAAI,CAAC,UACH,OAAO;EAET,OAAO,MAAM,KAAK,GAAG,OAAO,YAAY,SAAS,IAAI;GACnD,MAAM,MAAM,QAAQ,SAAS;GAC7B,cAAc,MAAM,iBAAiB,KAAA,IAAY,SAAS,eAAe,MAAM;GAC/E,OAAO,MAAM,UAAU,KAAA,IAAY,SAAS,QAAQ,MAAM;EAC5D,CAAC;CACH;;CAGA,MAAM,WAAW,WAAmB,KAA4B;EAC9D,IAAI,QAAA,gBAAgC,oBAAoB,SAAS,GAAY,GAC3E,MAAM,IAAI,MAAM,eAAe,IAAI,qBAAqB;EAE1D,MAAM,WAAW,MAAM,KAAK,QAAQ,WAAW,GAAG;EAClD,IAAI,UACF,MAAM,KAAK,GAAG,OAAO,YAAY,SAAS,EAAE;CAEhD;;CAGA,MAAM,OACJ,WACA,SACA,SACA,OACqB;EACrB,OAAO,MAAM,KAAK,GAAG,OAAO,aAAa;GACvC,IAAI,KAAK;GACT;GACA;GACA;GACA;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,aAAa,SAAwC;EACzD,OAAO,MAAM,KAAK,GAAG,KAAK,aAAa,EAAE,OAAO,GAAG,YAAY,SAAS,OAAO,EAAE,CAAC;CACpF;;CAGA,MAAM,cAAc,WAAmB,SAAiB,OAAuC;EAC7F,MAAM,SAAS,MAAM,KAAK,GAAG,KAAK,aAAa,EAC7C,OAAO,IACL,GAAG,YAAY,WAAW,SAAS,GACnC,GAAG,YAAY,SAAS,OAAO,GAC/B,GAAG,YAAY,OAAO,KAAK,CAC7B,EACF,CAAC;EACD,IAAI,OAAO,WAAW,GACpB,OAAO;EAET,MAAM,QAAQ,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,OAAO,CAAC;EAElD,QAAO,MADY,KAAK,GAAG,KAAK,QAAQ,EAAE,SAAS,KAAK,OAAO,SAAS,EAAE,CAAC,EAAA,CAC/D,MAAM,MAAM,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM;CAClD;;CAGA,MAAM,cAAc,WAAmB,SAAmC;EAQxE,QAAO,MAPc,KAAK,GAAG,KAAK,aAAa,EAC7C,OAAO,IACL,GAAG,YAAY,WAAW,SAAS,GACnC,GAAG,YAAY,SAAS,OAAO,GAC/B,GAAG,YAAY,SAAS,oBAAoB,CAC9C,EACF,CAAC,EAAA,CACa,SAAS;CACzB;AACF"}
+{"version":3,"file":"label.mjs","names":[],"sources":["../../src/models/label.ts"],"sourcesContent":["/** Build labels and project label types. */\nimport { and, desc, eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { BuildLabel, LabelType } from \"../schema/label.ts\";\nimport { PERSISTENT_LABEL_KEY, RESERVED_LABEL_KEYS, SEEDED_LABEL_KEYS } from \"../types.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Tables required by {@link LabelModel}. */\nexport interface LabelTables {\n  builds: Table;\n  buildLabels: Table;\n  labelTypes: Table;\n}\n\n/** Data operations for label types and build labels. */\nexport class LabelModel {\n  private readonly tables: LabelTables;\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles.\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: LabelTables,\n  ) {\n    this.tables = tables ?? {\n      builds: db.tables.builds,\n      buildLabels: db.tables.buildLabels,\n      labelTypes: db.tables.labelTypes,\n    };\n  }\n\n  /**\n   * Seed the default label types for a project if missing.\n   *\n   * @param projectId - Project ID.\n   */\n  async seedFor(projectId: string): Promise<void> {\n    const now = new Date().toISOString();\n    const existing = await this.listTypes(projectId);\n    const existingKeys = new Set(existing.map((t) => t.key));\n    const missing = SEEDED_LABEL_KEYS.filter((key) => !existingKeys.has(key));\n    await Promise.all(\n      missing.map(async (key) => {\n        await this.db.insert(this.tables.labelTypes, {\n          id: ulid(),\n          projectId,\n          key,\n          name: SEEDED_NAMES[key] ?? key,\n          createdAt: now,\n        });\n      }),\n    );\n  }\n\n  /** List all label types for a project. */\n  async listTypes(projectId: string): Promise<LabelType[]> {\n    return (await this.db.list(this.tables.labelTypes, {\n      where: eq(\n        getTableColumns(this.tables.labelTypes)[\"projectId\"] as unknown as SQLWrapper,\n        projectId,\n      ),\n    })) as unknown as LabelType[];\n  }\n\n  /** Fetch a label type by key, or null if not found. */\n  async getType(projectId: string, key: string): Promise<LabelType | null> {\n    const rows = (await this.db.list(this.tables.labelTypes, {\n      where: and(\n        eq(\n          getTableColumns(this.tables.labelTypes)[\"projectId\"] as unknown as SQLWrapper,\n          projectId,\n        ),\n        eq(getTableColumns(this.tables.labelTypes)[\"key\"] as unknown as SQLWrapper, key),\n      ),\n      limit: 1,\n    })) as unknown as LabelType[];\n    return rows[0] ?? null;\n  }\n\n  /** Create a custom label type for a project. */\n  async createType(\n    projectId: string,\n    input: { key: string; name: string; linkTemplate?: string; color?: string },\n  ): Promise<LabelType> {\n    return (await this.db.insert(this.tables.labelTypes, {\n      id: ulid(),\n      projectId,\n      key: input.key,\n      name: input.name,\n      linkTemplate: input.linkTemplate,\n      color: input.color,\n      createdAt: new Date().toISOString(),\n    })) as unknown as LabelType;\n  }\n\n  /** Update a custom label type's name, template or color. */\n  async updateType(\n    projectId: string,\n    key: string,\n    input: { name?: string; linkTemplate?: string | null; color?: string | null },\n  ): Promise<LabelType | null> {\n    if (key === PERSISTENT_LABEL_KEY || RESERVED_LABEL_KEYS.includes(key as never)) {\n      throw new Error(`Label type '${key}' cannot be updated.`);\n    }\n    const existing = await this.getType(projectId, key);\n    if (!existing) {\n      return null;\n    }\n    return (await this.db.update(this.tables.labelTypes, existing.id, {\n      name: input.name ?? existing.name,\n      linkTemplate: input.linkTemplate === undefined ? existing.linkTemplate : input.linkTemplate,\n      color: input.color === undefined ? existing.color : input.color,\n    })) as unknown as LabelType;\n  }\n\n  /** Remove a custom label type, rejecting reserved or persistent types. */\n  async removeType(projectId: string, key: string): Promise<void> {\n    if (key === PERSISTENT_LABEL_KEY || RESERVED_LABEL_KEYS.includes(key as never)) {\n      throw new Error(`Label type '${key}' cannot be removed.`);\n    }\n    const existing = await this.getType(projectId, key);\n    if (existing) {\n      await this.db.remove(this.tables.labelTypes, existing.id);\n    }\n  }\n\n  /** Attach a label value to a build. */\n  async attach(\n    projectId: string,\n    buildId: string,\n    typeKey: string,\n    value: string,\n  ): Promise<BuildLabel> {\n    return (await this.db.insert(this.tables.buildLabels, {\n      id: ulid(),\n      projectId,\n      buildId,\n      typeKey,\n      value,\n      createdAt: new Date().toISOString(),\n    })) as unknown as BuildLabel;\n  }\n\n  /** List all labels attached to a build. */\n  async listForBuild(buildId: string): Promise<BuildLabel[]> {\n    return (await this.db.list(this.tables.buildLabels, {\n      where: eq(\n        getTableColumns(this.tables.buildLabels)[\"buildId\"] as unknown as SQLWrapper,\n        buildId,\n      ),\n    })) as unknown as BuildLabel[];\n  }\n\n  /** Return the id of the latest build carrying a given label value, if any. */\n  async latestBuildId(projectId: string, typeKey: string, value: string): Promise<string | null> {\n    const labels = (await this.db.list(this.tables.buildLabels, {\n      where: and(\n        eq(\n          getTableColumns(this.tables.buildLabels)[\"projectId\"] as unknown as SQLWrapper,\n          projectId,\n        ),\n        eq(getTableColumns(this.tables.buildLabels)[\"typeKey\"] as unknown as SQLWrapper, typeKey),\n        eq(getTableColumns(this.tables.buildLabels)[\"value\"] as unknown as SQLWrapper, value),\n      ),\n    })) as unknown as BuildLabel[];\n    if (labels.length === 0) {\n      return null;\n    }\n    const idSet = new Set(labels.map((l) => l.buildId));\n    const rows = (await this.db.list(this.tables.builds, {\n      orderBy: desc(getTableColumns(this.tables.builds)[\"createdAt\"] as unknown as SQLWrapper),\n    })) as unknown as { id: string }[];\n    return rows.find((b) => idSet.has(b.id))?.id ?? null;\n  }\n\n  /** Return whether a build is marked as persistent. */\n  async hasPersistent(projectId: string, buildId: string): Promise<boolean> {\n    const labels = (await this.db.list(this.tables.buildLabels, {\n      where: and(\n        eq(\n          getTableColumns(this.tables.buildLabels)[\"projectId\"] as unknown as SQLWrapper,\n          projectId,\n        ),\n        eq(getTableColumns(this.tables.buildLabels)[\"buildId\"] as unknown as SQLWrapper, buildId),\n        eq(\n          getTableColumns(this.tables.buildLabels)[\"typeKey\"] as unknown as SQLWrapper,\n          PERSISTENT_LABEL_KEY,\n        ),\n      ),\n    })) as unknown as BuildLabel[];\n    return labels.length > 0;\n  }\n}\n\nconst SEEDED_NAMES: Record<string, string> = {\n  branch: \"Branch\",\n  persistent: \"Persistent\",\n  pr: \"Pull request\",\n  mr: \"Merge request\",\n  jira: \"Jira issue\",\n  linear: \"Linear issue\",\n  figma: \"Figma file\",\n  custom: \"Custom\",\n};\n"],"mappings":";;;;;;;;;AAgBA,IAAa,aAAb,MAAwB;CAOH;CANnB;;;;;CAKA,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EAGjB,KAAK,SAAS,UAAU;GACtB,QAAQ,GAAG,OAAO;GAClB,aAAa,GAAG,OAAO;GACvB,YAAY,GAAG,OAAO;EACxB;CACF;;;;;;CAOA,MAAM,QAAQ,WAAkC;EAC9C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAW,MAAM,KAAK,UAAU,SAAS;EAC/C,MAAM,eAAe,IAAI,IAAI,SAAS,KAAK,MAAM,EAAE,GAAG,CAAC;EACvD,MAAM,UAAU,kBAAkB,QAAQ,QAAQ,CAAC,aAAa,IAAI,GAAG,CAAC;EACxE,MAAM,QAAQ,IACZ,QAAQ,IAAI,OAAO,QAAQ;GACzB,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,YAAY;IAC3C,IAAI,KAAK;IACT;IACA;IACA,MAAM,aAAa,QAAQ;IAC3B,WAAW;GACb,CAAC;EACH,CAAC,CACH;CACF;;CAGA,MAAM,UAAU,WAAyC;EACvD,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,YAAY,EACjD,OAAO,GACL,gBAAgB,KAAK,OAAO,UAAU,CAAC,CAAC,cACxC,SACF,EACF,CAAC;CACH;;CAGA,MAAM,QAAQ,WAAmB,KAAwC;EAWvE,QAAO,MAVa,KAAK,GAAG,KAAK,KAAK,OAAO,YAAY;GACvD,OAAO,IACL,GACE,gBAAgB,KAAK,OAAO,UAAU,CAAC,CAAC,cACxC,SACF,GACA,GAAG,gBAAgB,KAAK,OAAO,UAAU,CAAC,CAAC,QAAiC,GAAG,CACjF;GACA,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,WACJ,WACA,OACoB;EACpB,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,YAAY;GACnD,IAAI,KAAK;GACT;GACA,KAAK,MAAM;GACX,MAAM,MAAM;GACZ,cAAc,MAAM;GACpB,OAAO,MAAM;GACb,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,WACJ,WACA,KACA,OAC2B;EAC3B,IAAI,QAAA,gBAAgC,oBAAoB,SAAS,GAAY,GAC3E,MAAM,IAAI,MAAM,eAAe,IAAI,qBAAqB;EAE1D,MAAM,WAAW,MAAM,KAAK,QAAQ,WAAW,GAAG;EAClD,IAAI,CAAC,UACH,OAAO;EAET,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,YAAY,SAAS,IAAI;GAChE,MAAM,MAAM,QAAQ,SAAS;GAC7B,cAAc,MAAM,iBAAiB,KAAA,IAAY,SAAS,eAAe,MAAM;GAC/E,OAAO,MAAM,UAAU,KAAA,IAAY,SAAS,QAAQ,MAAM;EAC5D,CAAC;CACH;;CAGA,MAAM,WAAW,WAAmB,KAA4B;EAC9D,IAAI,QAAA,gBAAgC,oBAAoB,SAAS,GAAY,GAC3E,MAAM,IAAI,MAAM,eAAe,IAAI,qBAAqB;EAE1D,MAAM,WAAW,MAAM,KAAK,QAAQ,WAAW,GAAG;EAClD,IAAI,UACF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,YAAY,SAAS,EAAE;CAE5D;;CAGA,MAAM,OACJ,WACA,SACA,SACA,OACqB;EACrB,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,aAAa;GACpD,IAAI,KAAK;GACT;GACA;GACA;GACA;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,aAAa,SAAwC;EACzD,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,aAAa,EAClD,OAAO,GACL,gBAAgB,KAAK,OAAO,WAAW,CAAC,CAAC,YACzC,OACF,EACF,CAAC;CACH;;CAGA,MAAM,cAAc,WAAmB,SAAiB,OAAuC;EAC7F,MAAM,SAAU,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,aAAa,EAC1D,OAAO,IACL,GACE,gBAAgB,KAAK,OAAO,WAAW,CAAC,CAAC,cACzC,SACF,GACA,GAAG,gBAAgB,KAAK,OAAO,WAAW,CAAC,CAAC,YAAqC,OAAO,GACxF,GAAG,gBAAgB,KAAK,OAAO,WAAW,CAAC,CAAC,UAAmC,KAAK,CACtF,EACF,CAAC;EACD,IAAI,OAAO,WAAW,GACpB,OAAO;EAET,MAAM,QAAQ,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,OAAO,CAAC;EAIlD,QAAO,MAHa,KAAK,GAAG,KAAK,KAAK,OAAO,QAAQ,EACnD,SAAS,KAAK,gBAAgB,KAAK,OAAO,MAAM,CAAC,CAAC,YAAqC,EACzF,CAAC,EAAA,CACW,MAAM,MAAM,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM;CAClD;;CAGA,MAAM,cAAc,WAAmB,SAAmC;EAcxE,QAAO,MAbe,KAAK,GAAG,KAAK,KAAK,OAAO,aAAa,EAC1D,OAAO,IACL,GACE,gBAAgB,KAAK,OAAO,WAAW,CAAC,CAAC,cACzC,SACF,GACA,GAAG,gBAAgB,KAAK,OAAO,WAAW,CAAC,CAAC,YAAqC,OAAO,GACxF,GACE,gBAAgB,KAAK,OAAO,WAAW,CAAC,CAAC,YACzC,oBACF,CACF,EACF,CAAC,EAAA,CACa,SAAS;CACzB;AACF;AAEA,MAAM,eAAuC;CAC3C,QAAQ;CACR,YAAY;CACZ,IAAI;CACJ,IAAI;CACJ,MAAM;CACN,QAAQ;CACR,OAAO;CACP,QAAQ;AACV"}

package/dist/models/member.d.mts

@@ -0,0 +1,34 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { ProjectRole, SiteRole } from "../types.mjs";
+import { ProjectMember } from "../schema/member.mjs";
+import { Table } from "drizzle-orm";
+//#region src/models/member.d.ts
+/** Tables required by {@link MemberModel}. */
+interface MemberTables {
+  projectMembers: Table;
+}
+/** Data operations for project membership and roles. */
+declare class MemberModel {
+  private readonly db;
+  private readonly tables;
+  /**
+   * @param db - Database adapter.
+   * @param tables - Table handles.
+   */
+  constructor(db: DatabaseAdapter, tables?: MemberTables);
+  /** List all members of a project. */
+  list(projectId: string): Promise<ProjectMember[]>;
+  /** Fetch a project member by project and user id, or null if not found. */
+  get(projectId: string, userId: string): Promise<ProjectMember | null>;
+  /** Set a user's role in a project, creating the membership if needed. */
+  set(projectId: string, userId: string, role: ProjectRole, source?: string): Promise<ProjectMember>;
+  /** Remove a user from a project if they are a member. */
+  remove(projectId: string, userId: string): Promise<void>;
+  /** Resolve a user's effective project role, honoring site-wide admins. */
+  effectiveRole(siteRole: SiteRole, projectId: string, userId: string): Promise<ProjectRole | null>;
+}
+//#endregion
+export { MemberModel, MemberTables };
+//# sourceMappingURL=member.d.mts.map

package/dist/models/member.mjs

@@ -2,51 +2,60 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { ulid } from "../utils/ulid.mjs";
-import { projectMembers } from "../schema/member.mjs";
-import { and, eq } from "drizzle-orm";
+import { and, eq, getTableColumns } from "drizzle-orm";
 //#region src/models/member.ts
 /** Project membership and role resolution. */
 /** Data operations for project membership and roles. */
 var MemberModel = class {
 	db;
+	tables;
 	/**
 	* @param db - Database adapter.
+	* @param tables - Table handles.
 	*/
-	constructor(db) {
+	constructor(db, tables) {
 		this.db = db;
+		this.tables = tables ?? { projectMembers: db.tables.projectMembers };
 	}
 	/** List all members of a project. */
 	async list(projectId) {
-		return await this.db.list(projectMembers, { where: eq(projectMembers.projectId, projectId) });
+		return await this.db.list(this.tables.projectMembers, { where: eq(getTableColumns(this.tables.projectMembers)["projectId"], projectId) });
 	}
 	/** Fetch a project member by project and user id, or null if not found. */
 	async get(projectId, userId) {
-		return (await this.db.list(projectMembers, {
-			where: and(eq(projectMembers.projectId, projectId), eq(projectMembers.userId, userId)),
+		return (await this.db.list(this.tables.projectMembers, {
+			where: and(eq(getTableColumns(this.tables.projectMembers)["projectId"], projectId), eq(getTableColumns(this.tables.projectMembers)["userId"], userId)),
 			limit: 1
 		}))[0] ?? null;
 	}
 	/** Set a user's role in a project, creating the membership if needed. */
-	async set(projectId, userId, role) {
+	async set(projectId, userId, role, source = "manual") {
 		const existing = await this.get(projectId, userId);
-		if (existing) return this.db.update(projectMembers, existing.id, { role });
-		return this.db.insert(projectMembers, {
+		if (existing) return await this.db.update(this.tables.projectMembers, existing.id, {
+			role,
+			source
+		});
+		return await this.db.insert(this.tables.projectMembers, {
 			id: ulid(),
 			projectId,
 			userId,
 			role,
+			source,
 			createdAt: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	}
 	/** Remove a user from a project if they are a member. */
 	async remove(projectId, userId) {
 		const existing = await this.get(projectId, userId);
-		if (existing) await this.db.remove(projectMembers, existing.id);
+		if (existing) await this.db.remove(this.tables.projectMembers, existing.id);
 	}
 	/** Resolve a user's effective project role, honoring site-wide admins. */
 	async effectiveRole(siteRole, projectId, userId) {
 		if (siteRole === "admin") return "admin";
-		return (await this.get(projectId, userId))?.role ?? null;
+		const member = await this.get(projectId, userId);
+		if (member) return member.role;
+		if (siteRole === "viewer") return "viewer";
+		return null;
 	}
 };
 //#endregion

package/dist/models/member.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"member.mjs","names":[],"sources":["../../src/models/member.ts"],"sourcesContent":["/** Project membership and role resolution. */\nimport { and, eq } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { projectMembers } from \"../schema/member.ts\";\nimport type { ProjectMember } from \"../schema/member.ts\";\nimport type { ProjectRole, SiteRole } from \"../types.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Data operations for project membership and roles. */\nexport class MemberModel {\n  /**\n   * @param db - Database adapter.\n   */\n  constructor(private readonly db: DatabaseAdapter) {}\n\n  /** List all members of a project. */\n  async list(projectId: string): Promise<ProjectMember[]> {\n    return await this.db.list(projectMembers, { where: eq(projectMembers.projectId, projectId) });\n  }\n\n  /** Fetch a project member by project and user id, or null if not found. */\n  async get(projectId: string, userId: string): Promise<ProjectMember | null> {\n    const rows = await this.db.list(projectMembers, {\n      where: and(eq(projectMembers.projectId, projectId), eq(projectMembers.userId, userId)),\n      limit: 1,\n    });\n    return rows[0] ?? null;\n  }\n\n  /** Set a user's role in a project, creating the membership if needed. */\n  async set(projectId: string, userId: string, role: ProjectRole): Promise<ProjectMember> {\n    const existing = await this.get(projectId, userId);\n    if (existing) {\n      return this.db.update(projectMembers, existing.id, { role });\n    }\n    return this.db.insert(projectMembers, {\n      id: ulid(),\n      projectId,\n      userId,\n      role,\n      createdAt: new Date().toISOString(),\n    });\n  }\n\n  /** Remove a user from a project if they are a member. */\n  async remove(projectId: string, userId: string): Promise<void> {\n    const existing = await this.get(projectId, userId);\n    if (existing) {\n      await this.db.remove(projectMembers, existing.id);\n    }\n  }\n\n  /** Resolve a user's effective project role, honoring site-wide admins. */\n  async effectiveRole(\n    siteRole: SiteRole,\n    projectId: string,\n    userId: string,\n  ): Promise<ProjectRole | null> {\n    if (siteRole === \"admin\") {\n      return \"admin\";\n    }\n    const member = await this.get(projectId, userId);\n    return member?.role ?? null;\n  }\n}\n"],"mappings":";;;;;;;;;AASA,IAAa,cAAb,MAAyB;CAIM;;;;CAA7B,YAAY,IAAsC;EAArB,KAAA,KAAA;CAAsB;;CAGnD,MAAM,KAAK,WAA6C;EACtD,OAAO,MAAM,KAAK,GAAG,KAAK,gBAAgB,EAAE,OAAO,GAAG,eAAe,WAAW,SAAS,EAAE,CAAC;CAC9F;;CAGA,MAAM,IAAI,WAAmB,QAA+C;EAK1E,QAAO,MAJY,KAAK,GAAG,KAAK,gBAAgB;GAC9C,OAAO,IAAI,GAAG,eAAe,WAAW,SAAS,GAAG,GAAG,eAAe,QAAQ,MAAM,CAAC;GACrF,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,IAAI,WAAmB,QAAgB,MAA2C;EACtF,MAAM,WAAW,MAAM,KAAK,IAAI,WAAW,MAAM;EACjD,IAAI,UACF,OAAO,KAAK,GAAG,OAAO,gBAAgB,SAAS,IAAI,EAAE,KAAK,CAAC;EAE7D,OAAO,KAAK,GAAG,OAAO,gBAAgB;GACpC,IAAI,KAAK;GACT;GACA;GACA;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,OAAO,WAAmB,QAA+B;EAC7D,MAAM,WAAW,MAAM,KAAK,IAAI,WAAW,MAAM;EACjD,IAAI,UACF,MAAM,KAAK,GAAG,OAAO,gBAAgB,SAAS,EAAE;CAEpD;;CAGA,MAAM,cACJ,UACA,WACA,QAC6B;EAC7B,IAAI,aAAa,SACf,OAAO;EAGT,QAAO,MADc,KAAK,IAAI,WAAW,MAAM,EAAA,EAChC,QAAQ;CACzB;AACF"}
+{"version":3,"file":"member.mjs","names":[],"sources":["../../src/models/member.ts"],"sourcesContent":["/** Project membership and role resolution. */\nimport { and, eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { ProjectMember } from \"../schema/member.ts\";\nimport type { ProjectRole, SiteRole } from \"../types.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Tables required by {@link MemberModel}. */\nexport interface MemberTables {\n  projectMembers: Table;\n}\n\n/** Data operations for project membership and roles. */\nexport class MemberModel {\n  private readonly tables: MemberTables;\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles.\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: MemberTables,\n  ) {\n    this.tables = tables ?? { projectMembers: db.tables.projectMembers };\n  }\n\n  /** List all members of a project. */\n  async list(projectId: string): Promise<ProjectMember[]> {\n    return (await this.db.list(this.tables.projectMembers, {\n      where: eq(\n        getTableColumns(this.tables.projectMembers)[\"projectId\"] as unknown as SQLWrapper,\n        projectId,\n      ),\n    })) as unknown as ProjectMember[];\n  }\n\n  /** Fetch a project member by project and user id, or null if not found. */\n  async get(projectId: string, userId: string): Promise<ProjectMember | null> {\n    const rows = (await this.db.list(this.tables.projectMembers, {\n      where: and(\n        eq(\n          getTableColumns(this.tables.projectMembers)[\"projectId\"] as unknown as SQLWrapper,\n          projectId,\n        ),\n        eq(getTableColumns(this.tables.projectMembers)[\"userId\"] as unknown as SQLWrapper, userId),\n      ),\n      limit: 1,\n    })) as unknown as ProjectMember[];\n    return rows[0] ?? null;\n  }\n\n  /** Set a user's role in a project, creating the membership if needed. */\n  async set(\n    projectId: string,\n    userId: string,\n    role: ProjectRole,\n    source = \"manual\",\n  ): Promise<ProjectMember> {\n    const existing = await this.get(projectId, userId);\n    if (existing) {\n      return (await this.db.update(this.tables.projectMembers, existing.id, {\n        role,\n        source,\n      })) as unknown as ProjectMember;\n    }\n    return (await this.db.insert(this.tables.projectMembers, {\n      id: ulid(),\n      projectId,\n      userId,\n      role,\n      source,\n      createdAt: new Date().toISOString(),\n    })) as unknown as ProjectMember;\n  }\n\n  /** Remove a user from a project if they are a member. */\n  async remove(projectId: string, userId: string): Promise<void> {\n    const existing = await this.get(projectId, userId);\n    if (existing) {\n      await this.db.remove(this.tables.projectMembers, existing.id);\n    }\n  }\n\n  /** Resolve a user's effective project role, honoring site-wide admins. */\n  async effectiveRole(\n    siteRole: SiteRole,\n    projectId: string,\n    userId: string,\n  ): Promise<ProjectRole | null> {\n    if (siteRole === \"admin\") {\n      return \"admin\";\n    }\n    const member = await this.get(projectId, userId);\n    if (member) {\n      return member.role;\n    }\n    // Site viewers read every project; explicit membership always wins.\n    if (siteRole === \"viewer\") {\n      return \"viewer\";\n    }\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;AAcA,IAAa,cAAb,MAAyB;CAOJ;CANnB;;;;;CAKA,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EAGjB,KAAK,SAAS,UAAU,EAAE,gBAAgB,GAAG,OAAO,eAAe;CACrE;;CAGA,MAAM,KAAK,WAA6C;EACtD,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,gBAAgB,EACrD,OAAO,GACL,gBAAgB,KAAK,OAAO,cAAc,CAAC,CAAC,cAC5C,SACF,EACF,CAAC;CACH;;CAGA,MAAM,IAAI,WAAmB,QAA+C;EAW1E,QAAO,MAVa,KAAK,GAAG,KAAK,KAAK,OAAO,gBAAgB;GAC3D,OAAO,IACL,GACE,gBAAgB,KAAK,OAAO,cAAc,CAAC,CAAC,cAC5C,SACF,GACA,GAAG,gBAAgB,KAAK,OAAO,cAAc,CAAC,CAAC,WAAoC,MAAM,CAC3F;GACA,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,IACJ,WACA,QACA,MACA,SAAS,UACe;EACxB,MAAM,WAAW,MAAM,KAAK,IAAI,WAAW,MAAM;EACjD,IAAI,UACF,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,gBAAgB,SAAS,IAAI;GACpE;GACA;EACF,CAAC;EAEH,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,gBAAgB;GACvD,IAAI,KAAK;GACT;GACA;GACA;GACA;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,OAAO,WAAmB,QAA+B;EAC7D,MAAM,WAAW,MAAM,KAAK,IAAI,WAAW,MAAM;EACjD,IAAI,UACF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,gBAAgB,SAAS,EAAE;CAEhE;;CAGA,MAAM,cACJ,UACA,WACA,QAC6B;EAC7B,IAAI,aAAa,SACf,OAAO;EAET,MAAM,SAAS,MAAM,KAAK,IAAI,WAAW,MAAM;EAC/C,IAAI,QACF,OAAO,OAAO;EAGhB,IAAI,aAAa,UACf,OAAO;EAET,OAAO;CACT;AACF"}

package/dist/models/notification-channel.d.mts

@@ -0,0 +1,52 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { SecretInput } from "../utils/encrypt.mjs";
+import { NotificationChannelRow } from "../schema/notification.mjs";
+import { Table } from "drizzle-orm";
+//#region src/models/notification-channel.d.ts
+/** Tables required by {@link NotificationChannelModel}. */
+interface NotificationChannelTables {
+  notificationChannels: Table;
+}
+/** Input for creating a notification channel. */
+interface NotificationChannelCreateInput {
+  projectId: string | null;
+  provider: string;
+  config: Record<string, unknown>;
+  secret?: string;
+  events?: string[];
+  enabled?: boolean;
+}
+/** Data operations for notification channels. */
+declare class NotificationChannelModel {
+  private readonly db;
+  private readonly tables;
+  private readonly secret?;
+  /**
+   * @param db - Database adapter.
+   * @param tables - Table handles (defaults to the adapter's tables).
+   * @param secret - Server secret for channel-secret encryption.
+   */
+  constructor(db: DatabaseAdapter, tables?: NotificationChannelTables, secret?: SecretInput);
+  /** List channels for a project. */
+  list(projectId: string): Promise<NotificationChannelRow[]>;
+  /** List site-wide admin channels (`project_id IS NULL`). */
+  listSystem(): Promise<NotificationChannelRow[]>;
+  /** Create a channel (secret encrypted at rest when provided). */
+  create(input: NotificationChannelCreateInput): Promise<NotificationChannelRow>;
+  /** Fetch a channel by id, or null. */
+  get(id: string): Promise<NotificationChannelRow | null>;
+  /** Remove a channel by id. */
+  remove(id: string): Promise<void>;
+  /** Decrypt the secret for a stored row (in memory only, at send time). */
+  decryptSecret(row: NotificationChannelRow): string;
+  /** Decode the JSON-serialized event list of a channel. */
+  static eventsOf(row: NotificationChannelRow): string[];
+  /** Decode the JSON-serialized config of a channel. */
+  static configOf(row: NotificationChannelRow): Record<string, unknown>;
+  private column;
+}
+//#endregion
+export { NotificationChannelCreateInput, NotificationChannelModel, NotificationChannelTables };
+//# sourceMappingURL=notification-channel.d.mts.map