@storyshelf/core 0.3.2 → 0.5.4

package/dist/models/snapshot.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.mjs","names":[],"sources":["../../src/models/snapshot.ts"],"sourcesContent":["/** Snapshot records for captured stories within a build. */\nimport { eq } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { snapshots } from \"../schema/snapshot.ts\";\nimport type { Snapshot } from \"../schema/snapshot.ts\";\nimport type { SnapshotStatus } from \"../types.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Input for creating a snapshot. */\nexport interface SnapshotCreateInput {\n  storyId: string;\n  storyName: string;\n  storyTitle: string;\n  storyImportPath?: string;\n  viewportName: string;\n  viewportWidth: number;\n  viewportHeight: number;\n  screenshotPath: string;\n}\n\n/** Data operations for snapshot records. */\nexport class SnapshotModel {\n  /**\n   * @param db - Database adapter.\n   */\n  constructor(private readonly db: DatabaseAdapter) {}\n\n  /**\n   * Create a snapshot for a story within a build.\n   *\n   * @param projectId - Project ID.\n   * @param buildId - Build ID.\n   * @param input - Snapshot creation input.\n   * @returns The created snapshot.\n   */\n  async create(projectId: string, buildId: string, input: SnapshotCreateInput): Promise<Snapshot> {\n    const now = new Date().toISOString();\n    return await this.db.insert(snapshots, {\n      id: ulid(),\n      projectId,\n      buildId,\n      storyId: input.storyId,\n      storyName: input.storyName,\n      storyTitle: input.storyTitle,\n      storyImportPath: input.storyImportPath,\n      viewportName: input.viewportName,\n      viewportWidth: input.viewportWidth,\n      viewportHeight: input.viewportHeight,\n      screenshotPath: input.screenshotPath,\n      status: \"pending\",\n      createdAt: now,\n      updatedAt: now,\n    });\n  }\n\n  /** List all snapshots belonging to a build. */\n  async listByBuild(buildId: string): Promise<Snapshot[]> {\n    return await this.db.list(snapshots, { where: eq(snapshots.buildId, buildId) });\n  }\n\n  /** Fetch a snapshot by id, or null if not found. */\n  async get(id: string): Promise<Snapshot | null> {\n    return await this.db.get(snapshots, id);\n  }\n\n  /** Update mutable fields of a snapshot. */\n  async update(id: string, patch: Partial<Snapshot>): Promise<Snapshot> {\n    return await this.db.update(snapshots, id, { ...patch, updatedAt: new Date().toISOString() });\n  }\n\n  /** Set the status of a snapshot. */\n  async setStatus(id: string, status: SnapshotStatus): Promise<Snapshot> {\n    return await this.update(id, { status });\n  }\n\n  /** Record a reviewer's decision on a snapshot. */\n  async review(id: string, status: SnapshotStatus, userId: string): Promise<Snapshot> {\n    return await this.update(id, {\n      status,\n      reviewedBy: userId,\n      reviewedAt: new Date().toISOString(),\n    });\n  }\n}\n"],"mappings":";;;;;;;;;AAqBA,IAAa,gBAAb,MAA2B;CAII;;;;CAA7B,YAAY,IAAsC;EAArB,KAAA,KAAA;CAAsB;;;;;;;;;CAUnD,MAAM,OAAO,WAAmB,SAAiB,OAA+C;EAC9F,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,OAAO,MAAM,KAAK,GAAG,OAAO,WAAW;GACrC,IAAI,KAAK;GACT;GACA;GACA,SAAS,MAAM;GACf,WAAW,MAAM;GACjB,YAAY,MAAM;GAClB,iBAAiB,MAAM;GACvB,cAAc,MAAM;GACpB,eAAe,MAAM;GACrB,gBAAgB,MAAM;GACtB,gBAAgB,MAAM;GACtB,QAAQ;GACR,WAAW;GACX,WAAW;EACb,CAAC;CACH;;CAGA,MAAM,YAAY,SAAsC;EACtD,OAAO,MAAM,KAAK,GAAG,KAAK,WAAW,EAAE,OAAO,GAAG,UAAU,SAAS,OAAO,EAAE,CAAC;CAChF;;CAGA,MAAM,IAAI,IAAsC;EAC9C,OAAO,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE;CACxC;;CAGA,MAAM,OAAO,IAAY,OAA6C;EACpE,OAAO,MAAM,KAAK,GAAG,OAAO,WAAW,IAAI;GAAE,GAAG;GAAO,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE,CAAC;CAC9F;;CAGA,MAAM,UAAU,IAAY,QAA2C;EACrE,OAAO,MAAM,KAAK,OAAO,IAAI,EAAE,OAAO,CAAC;CACzC;;CAGA,MAAM,OAAO,IAAY,QAAwB,QAAmC;EAClF,OAAO,MAAM,KAAK,OAAO,IAAI;GAC3B;GACA,YAAY;GACZ,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EACrC,CAAC;CACH;AACF"}
+{"version":3,"file":"snapshot.mjs","names":[],"sources":["../../src/models/snapshot.ts"],"sourcesContent":["/** Snapshot records for captured stories within a build. */\nimport { eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { Snapshot } from \"../schema/snapshot.ts\";\nimport type { SnapshotStatus } from \"../types.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Tables required by {@link SnapshotModel}. */\nexport interface SnapshotTables {\n  snapshots: Table;\n}\n\n/** Data operations for snapshot records. */\nexport class SnapshotModel {\n  private readonly tables: SnapshotTables;\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles.\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: SnapshotTables,\n  ) {\n    this.tables = tables ?? { snapshots: db.tables.snapshots };\n  }\n\n  /**\n   * Create a snapshot for a story within a build.\n   *\n   * @param projectId - Project ID.\n   * @param buildId - Build ID.\n   * @param input - Snapshot creation input.\n   * @returns The created snapshot.\n   */\n  async create(projectId: string, buildId: string, input: SnapshotCreateInput): Promise<Snapshot> {\n    const now = new Date().toISOString();\n    return (await this.db.insert(this.tables.snapshots, {\n      id: ulid(),\n      projectId,\n      buildId,\n      storyId: input.storyId,\n      storyName: input.storyName,\n      storyTitle: input.storyTitle,\n      storyImportPath: input.storyImportPath,\n      viewportName: input.viewportName,\n      viewportWidth: input.viewportWidth,\n      viewportHeight: input.viewportHeight,\n      screenshotPath: input.screenshotPath,\n      infraHash: input.infraHash ?? null,\n      inherited: input.inherited ?? false,\n      baselineId: input.baselineId ?? null,\n      baselineVersion: input.baselineVersion ?? null,\n      status: \"pending\",\n      createdAt: now,\n      updatedAt: now,\n    })) as unknown as Snapshot;\n  }\n\n  /** List all snapshots belonging to a build. */\n  async listByBuild(buildId: string): Promise<Snapshot[]> {\n    return (await this.db.list(this.tables.snapshots, {\n      where: eq(\n        getTableColumns(this.tables.snapshots)[\"buildId\"] as unknown as SQLWrapper,\n        buildId,\n      ),\n    })) as unknown as Snapshot[];\n  }\n\n  /** Fetch a snapshot by id, or null if not found. */\n  async get(id: string): Promise<Snapshot | null> {\n    return (await this.db.get(this.tables.snapshots, id)) as unknown as Snapshot | null;\n  }\n\n  /** Update mutable fields of a snapshot. */\n  async update(id: string, patch: Partial<Snapshot>): Promise<Snapshot> {\n    return (await this.db.update(this.tables.snapshots, id, {\n      ...patch,\n      updatedAt: new Date().toISOString(),\n    })) as unknown as Snapshot;\n  }\n\n  /** Set the status of a snapshot. */\n  async setStatus(id: string, status: SnapshotStatus): Promise<Snapshot> {\n    return await this.update(id, { status });\n  }\n\n  /** Record a reviewer's decision on a snapshot. */\n  async review(id: string, status: SnapshotStatus, userId: string | null): Promise<Snapshot> {\n    return await this.update(id, {\n      status,\n      reviewedBy: userId,\n      reviewedAt: new Date().toISOString(),\n    });\n  }\n}\n\n/** Input for creating a snapshot. */\nexport interface SnapshotCreateInput {\n  storyId: string;\n  storyName: string;\n  storyTitle: string;\n  storyImportPath?: string;\n  viewportName: string;\n  viewportWidth: number;\n  viewportHeight: number;\n  screenshotPath: string;\n  infraHash?: string | null;\n  inherited?: boolean;\n  baselineId?: string | null;\n  baselineVersion?: string | null;\n}\n"],"mappings":";;;;;;;;AAcA,IAAa,gBAAb,MAA2B;CAON;CANnB;;;;;CAKA,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EAGjB,KAAK,SAAS,UAAU,EAAE,WAAW,GAAG,OAAO,UAAU;CAC3D;;;;;;;;;CAUA,MAAM,OAAO,WAAmB,SAAiB,OAA+C;EAC9F,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,WAAW;GAClD,IAAI,KAAK;GACT;GACA;GACA,SAAS,MAAM;GACf,WAAW,MAAM;GACjB,YAAY,MAAM;GAClB,iBAAiB,MAAM;GACvB,cAAc,MAAM;GACpB,eAAe,MAAM;GACrB,gBAAgB,MAAM;GACtB,gBAAgB,MAAM;GACtB,WAAW,MAAM,aAAa;GAC9B,WAAW,MAAM,aAAa;GAC9B,YAAY,MAAM,cAAc;GAChC,iBAAiB,MAAM,mBAAmB;GAC1C,QAAQ;GACR,WAAW;GACX,WAAW;EACb,CAAC;CACH;;CAGA,MAAM,YAAY,SAAsC;EACtD,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,WAAW,EAChD,OAAO,GACL,gBAAgB,KAAK,OAAO,SAAS,CAAC,CAAC,YACvC,OACF,EACF,CAAC;CACH;;CAGA,MAAM,IAAI,IAAsC;EAC9C,OAAQ,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,WAAW,EAAE;CACrD;;CAGA,MAAM,OAAO,IAAY,OAA6C;EACpE,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,WAAW,IAAI;GACtD,GAAG;GACH,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,UAAU,IAAY,QAA2C;EACrE,OAAO,MAAM,KAAK,OAAO,IAAI,EAAE,OAAO,CAAC;CACzC;;CAGA,MAAM,OAAO,IAAY,QAAwB,QAA0C;EACzF,OAAO,MAAM,KAAK,OAAO,IAAI;GAC3B;GACA,YAAY;GACZ,6BAAY,IAAI,KAAK,EAAA,CAAE,YAAY;EACrC,CAAC;CACH;AACF"}

package/dist/models/status-config.d.mts

@@ -0,0 +1,38 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { SecretInput } from "../utils/encrypt.mjs";
+import { ProjectStatusConfig } from "../schema/status-config.mjs";
+import { Table } from "drizzle-orm";
+//#region src/models/status-config.d.ts
+/** Tables required by {@link StatusConfigModel}. */
+interface StatusConfigTables {
+  projectStatusConfigs: Table;
+}
+/** Data operations for per-project status provider configs. */
+declare class StatusConfigModel {
+  private readonly db;
+  private readonly tables;
+  private readonly secret;
+  constructor(db: DatabaseAdapter, tables?: StatusConfigTables, secret?: SecretInput);
+  /** List all status configs for a project. */
+  list(projectId: string): Promise<ProjectStatusConfig[]>;
+  /** Fetch a config by id scoped to a project, or null. */
+  get(projectId: string, id: string): Promise<ProjectStatusConfig | null>;
+  /** Decrypt the token for a stored row. */
+  decryptToken(row: ProjectStatusConfig): string;
+  /** Parse the JSON config column. */
+  static parseConfig(row: ProjectStatusConfig): unknown;
+  create(projectId: string, input: StatusConfigCreateInput): Promise<ProjectStatusConfig>;
+  remove(projectId: string, id: string): Promise<void>;
+  removeByProject(projectId: string): Promise<void>;
+}
+/** Input for creating a git-provider status config. */
+interface StatusConfigCreateInput {
+  provider: string;
+  config: unknown;
+  token: string;
+}
+//#endregion
+export { StatusConfigCreateInput, StatusConfigModel, StatusConfigTables };
+//# sourceMappingURL=status-config.d.mts.map

package/dist/models/status-config.mjs

@@ -1,35 +1,36 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { decryptCredential, encrypt } from "../utils/encrypt.mjs";
 import { ulid } from "../utils/ulid.mjs";
-import { decrypt, encrypt } from "../utils/encrypt.mjs";
-import { projectStatusConfigs } from "../schema/status-config.mjs";
-import { eq } from "drizzle-orm";
+import { eq, getTableColumns } from "drizzle-orm";
 //#region src/models/status-config.ts
 /** Per-project git-provider status check configurations. */
 /** Data operations for per-project status provider configs. */
 var StatusConfigModel = class {
 	db;
+	tables;
 	secret;
-	constructor(db, secret) {
+	constructor(db, tables, secret) {
 		this.db = db;
+		this.tables = tables ?? { projectStatusConfigs: db.tables.projectStatusConfigs };
 		this.secret = secret;
 	}
 	/** List all status configs for a project. */
 	async list(projectId) {
-		return await this.db.list(projectStatusConfigs, { where: eq(projectStatusConfigs.projectId, projectId) });
+		return await this.db.list(this.tables.projectStatusConfigs, { where: eq(getTableColumns(this.tables.projectStatusConfigs)["projectId"], projectId) });
 	}
 	/** Fetch a config by id scoped to a project, or null. */
 	async get(projectId, id) {
-		const found = (await this.db.list(projectStatusConfigs, {
-			where: eq(projectStatusConfigs.id, id),
+		const found = (await this.db.list(this.tables.projectStatusConfigs, {
+			where: eq(getTableColumns(this.tables.projectStatusConfigs)["id"], id),
 			limit: 1
 		}))[0] ?? null;
 		return found?.projectId === projectId ? found : null;
 	}
 	/** Decrypt the token for a stored row. */
 	decryptToken(row) {
-		return decrypt(this.secret, row.tokenEncrypted);
+		return decryptCredential(this.secret, row.tokenEncrypted);
 	}
 	/** Parse the JSON config column. */
 	static parseConfig(row) {
@@ -37,7 +38,7 @@ var StatusConfigModel = class {
 	}
 	async create(projectId, input) {
 		const now = (/* @__PURE__ */ new Date()).toISOString();
-		return await this.db.insert(projectStatusConfigs, {
+		return await this.db.insert(this.tables.projectStatusConfigs, {
 			id: ulid(),
 			projectId,
 			provider: input.provider,
@@ -49,11 +50,11 @@ var StatusConfigModel = class {
 	}
 	async remove(projectId, id) {
 		const existing = await this.get(projectId, id);
-		if (existing) await this.db.remove(projectStatusConfigs, existing.id);
+		if (existing) await this.db.remove(this.tables.projectStatusConfigs, existing.id);
 	}
 	async removeByProject(projectId) {
 		const rows = await this.list(projectId);
-		for (const row of rows) await this.db.remove(projectStatusConfigs, row.id);
+		for (const row of rows) await this.db.remove(this.tables.projectStatusConfigs, row.id);
 	}
 };
 //#endregion

package/dist/models/status-config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"status-config.mjs","names":[],"sources":["../../src/models/status-config.ts"],"sourcesContent":["/* oxlint-disable eslint/no-await-in-loop, typescript/promise-function-async, eslint/require-await */\n/** Per-project git-provider status check configurations. */\nimport { eq } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { projectStatusConfigs } from \"../schema/status-config.ts\";\nimport type { ProjectStatusConfig } from \"../schema/status-config.ts\";\nimport { decrypt, encrypt } from \"../utils/encrypt.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Input for creating a git-provider status config. */\nexport interface StatusConfigCreateInput {\n  provider: string;\n  config: unknown;\n  token: string;\n}\n\n/** Data operations for per-project status provider configs. */\nexport class StatusConfigModel {\n  constructor(\n    private readonly db: DatabaseAdapter,\n    private readonly secret: string | undefined,\n  ) {}\n\n  /** List all status configs for a project. */\n  async list(projectId: string): Promise<ProjectStatusConfig[]> {\n    return await this.db.list(projectStatusConfigs, {\n      where: eq(projectStatusConfigs.projectId, projectId),\n    });\n  }\n\n  /** Fetch a config by id scoped to a project, or null. */\n  async get(projectId: string, id: string): Promise<ProjectStatusConfig | null> {\n    const rows = await this.db.list(projectStatusConfigs, {\n      where: eq(projectStatusConfigs.id, id),\n      limit: 1,\n    });\n    const found = rows[0] ?? null;\n    return found?.projectId === projectId ? found : null;\n  }\n\n  /** Decrypt the token for a stored row. */\n  decryptToken(row: ProjectStatusConfig): string {\n    return decrypt(this.secret, row.tokenEncrypted);\n  }\n\n  /** Parse the JSON config column. */\n  static parseConfig(row: ProjectStatusConfig): unknown {\n    return JSON.parse(row.config) as unknown;\n  }\n\n  async create(projectId: string, input: StatusConfigCreateInput): Promise<ProjectStatusConfig> {\n    const now = new Date().toISOString();\n    return await this.db.insert(projectStatusConfigs, {\n      id: ulid(),\n      projectId,\n      provider: input.provider,\n      config: JSON.stringify(input.config),\n      tokenEncrypted: encrypt(this.secret, input.token),\n      createdAt: now,\n      updatedAt: now,\n    });\n  }\n\n  async remove(projectId: string, id: string): Promise<void> {\n    const existing = await this.get(projectId, id);\n    if (existing) {\n      await this.db.remove(projectStatusConfigs, existing.id);\n    }\n  }\n\n  async removeByProject(projectId: string): Promise<void> {\n    const rows = await this.list(projectId);\n    for (const row of rows) {\n      await this.db.remove(projectStatusConfigs, row.id);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAiBA,IAAa,oBAAb,MAA+B;CAEV;CACA;CAFnB,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;;CAGH,MAAM,KAAK,WAAmD;EAC5D,OAAO,MAAM,KAAK,GAAG,KAAK,sBAAsB,EAC9C,OAAO,GAAG,qBAAqB,WAAW,SAAS,EACrD,CAAC;CACH;;CAGA,MAAM,IAAI,WAAmB,IAAiD;EAK5E,MAAM,SAAQ,MAJK,KAAK,GAAG,KAAK,sBAAsB;GACpD,OAAO,GAAG,qBAAqB,IAAI,EAAE;GACrC,OAAO;EACT,CAAC,EAAA,CACkB,MAAM;EACzB,OAAO,OAAO,cAAc,YAAY,QAAQ;CAClD;;CAGA,aAAa,KAAkC;EAC7C,OAAO,QAAQ,KAAK,QAAQ,IAAI,cAAc;CAChD;;CAGA,OAAO,YAAY,KAAmC;EACpD,OAAO,KAAK,MAAM,IAAI,MAAM;CAC9B;CAEA,MAAM,OAAO,WAAmB,OAA8D;EAC5F,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,OAAO,MAAM,KAAK,GAAG,OAAO,sBAAsB;GAChD,IAAI,KAAK;GACT;GACA,UAAU,MAAM;GAChB,QAAQ,KAAK,UAAU,MAAM,MAAM;GACnC,gBAAgB,QAAQ,KAAK,QAAQ,MAAM,KAAK;GAChD,WAAW;GACX,WAAW;EACb,CAAC;CACH;CAEA,MAAM,OAAO,WAAmB,IAA2B;EACzD,MAAM,WAAW,MAAM,KAAK,IAAI,WAAW,EAAE;EAC7C,IAAI,UACF,MAAM,KAAK,GAAG,OAAO,sBAAsB,SAAS,EAAE;CAE1D;CAEA,MAAM,gBAAgB,WAAkC;EACtD,MAAM,OAAO,MAAM,KAAK,KAAK,SAAS;EACtC,KAAK,MAAM,OAAO,MAChB,MAAM,KAAK,GAAG,OAAO,sBAAsB,IAAI,EAAE;CAErD;AACF"}
+{"version":3,"file":"status-config.mjs","names":[],"sources":["../../src/models/status-config.ts"],"sourcesContent":["/* oxlint-disable eslint/no-await-in-loop, typescript/promise-function-async, eslint/require-await */\n/** Per-project git-provider status check configurations. */\nimport { eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { ProjectStatusConfig } from \"../schema/status-config.ts\";\nimport { decryptCredential, encrypt, type SecretInput } from \"../utils/encrypt.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Tables required by {@link StatusConfigModel}. */\nexport interface StatusConfigTables {\n  projectStatusConfigs: Table;\n}\n\n/** Data operations for per-project status provider configs. */\nexport class StatusConfigModel {\n  private readonly tables: StatusConfigTables;\n  private readonly secret: SecretInput;\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: StatusConfigTables,\n    secret?: SecretInput,\n  ) {\n    this.tables = tables ?? { projectStatusConfigs: db.tables.projectStatusConfigs };\n    this.secret = secret;\n  }\n\n  /** List all status configs for a project. */\n  async list(projectId: string): Promise<ProjectStatusConfig[]> {\n    return (await this.db.list(this.tables.projectStatusConfigs, {\n      where: eq(\n        getTableColumns(this.tables.projectStatusConfigs)[\"projectId\"] as unknown as SQLWrapper,\n        projectId,\n      ),\n    })) as unknown as ProjectStatusConfig[];\n  }\n\n  /** Fetch a config by id scoped to a project, or null. */\n  async get(projectId: string, id: string): Promise<ProjectStatusConfig | null> {\n    const rows = (await this.db.list(this.tables.projectStatusConfigs, {\n      where: eq(\n        getTableColumns(this.tables.projectStatusConfigs)[\"id\"] as unknown as SQLWrapper,\n        id,\n      ),\n      limit: 1,\n    })) as unknown as ProjectStatusConfig[];\n    const found = rows[0] ?? null;\n    return found?.projectId === projectId ? found : null;\n  }\n\n  /** Decrypt the token for a stored row. */\n  decryptToken(row: ProjectStatusConfig): string {\n    return decryptCredential(this.secret, row.tokenEncrypted);\n  }\n\n  /** Parse the JSON config column. */\n  static parseConfig(row: ProjectStatusConfig): unknown {\n    return JSON.parse(row.config) as unknown;\n  }\n\n  async create(projectId: string, input: StatusConfigCreateInput): Promise<ProjectStatusConfig> {\n    const now = new Date().toISOString();\n    return (await this.db.insert(this.tables.projectStatusConfigs, {\n      id: ulid(),\n      projectId,\n      provider: input.provider,\n      config: JSON.stringify(input.config),\n      tokenEncrypted: encrypt(this.secret, input.token),\n      createdAt: now,\n      updatedAt: now,\n    })) as unknown as ProjectStatusConfig;\n  }\n\n  async remove(projectId: string, id: string): Promise<void> {\n    const existing = await this.get(projectId, id);\n    if (existing) {\n      await this.db.remove(this.tables.projectStatusConfigs, existing.id);\n    }\n  }\n\n  async removeByProject(projectId: string): Promise<void> {\n    const rows = await this.list(projectId);\n    for (const row of rows) {\n      await this.db.remove(this.tables.projectStatusConfigs, row.id);\n    }\n  }\n}\n\n/** Input for creating a git-provider status config. */\nexport interface StatusConfigCreateInput {\n  provider: string;\n  config: unknown;\n  token: string;\n}\n"],"mappings":";;;;;;;;;AAeA,IAAa,oBAAb,MAA+B;CAIV;CAHnB;CACA;CACA,YACE,IACA,QACA,QACA;EAHiB,KAAA,KAAA;EAIjB,KAAK,SAAS,UAAU,EAAE,sBAAsB,GAAG,OAAO,qBAAqB;EAC/E,KAAK,SAAS;CAChB;;CAGA,MAAM,KAAK,WAAmD;EAC5D,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,sBAAsB,EAC3D,OAAO,GACL,gBAAgB,KAAK,OAAO,oBAAoB,CAAC,CAAC,cAClD,SACF,EACF,CAAC;CACH;;CAGA,MAAM,IAAI,WAAmB,IAAiD;EAQ5E,MAAM,SAAQ,MAPM,KAAK,GAAG,KAAK,KAAK,OAAO,sBAAsB;GACjE,OAAO,GACL,gBAAgB,KAAK,OAAO,oBAAoB,CAAC,CAAC,OAClD,EACF;GACA,OAAO;EACT,CAAC,EAAA,CACkB,MAAM;EACzB,OAAO,OAAO,cAAc,YAAY,QAAQ;CAClD;;CAGA,aAAa,KAAkC;EAC7C,OAAO,kBAAkB,KAAK,QAAQ,IAAI,cAAc;CAC1D;;CAGA,OAAO,YAAY,KAAmC;EACpD,OAAO,KAAK,MAAM,IAAI,MAAM;CAC9B;CAEA,MAAM,OAAO,WAAmB,OAA8D;EAC5F,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,sBAAsB;GAC7D,IAAI,KAAK;GACT;GACA,UAAU,MAAM;GAChB,QAAQ,KAAK,UAAU,MAAM,MAAM;GACnC,gBAAgB,QAAQ,KAAK,QAAQ,MAAM,KAAK;GAChD,WAAW;GACX,WAAW;EACb,CAAC;CACH;CAEA,MAAM,OAAO,WAAmB,IAA2B;EACzD,MAAM,WAAW,MAAM,KAAK,IAAI,WAAW,EAAE;EAC7C,IAAI,UACF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,sBAAsB,SAAS,EAAE;CAEtE;CAEA,MAAM,gBAAgB,WAAkC;EACtD,MAAM,OAAO,MAAM,KAAK,KAAK,SAAS;EACtC,KAAK,MAAM,OAAO,MAChB,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,sBAAsB,IAAI,EAAE;CAEjE;AACF"}

package/dist/models/token.d.mts

@@ -0,0 +1,44 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { Token } from "../schema/token.mjs";
+import { Table } from "drizzle-orm";
+//#region src/models/token.d.ts
+/** Tables required by {@link TokenModel}. */
+interface TokenTables {
+  tokens: Table;
+}
+/** Data operations for CI tokens. */
+declare class TokenModel {
+  private readonly db;
+  private readonly tables;
+  /**
+   * @param db - Database adapter.
+   * @param tables - Table handles.
+   */
+  constructor(db: DatabaseAdapter, tables?: TokenTables);
+  /**
+   * Create a token record storing its hash.
+   *
+   * @param projectId - Project ID.
+   * @param input - Token name, hash, and optional owning user ID (null for
+   * legacy/admin-token minting; such tokens resolve as viewer).
+   * @returns The created token.
+   */
+  create(projectId: string, input: {
+    name: string;
+    hash: string;
+    userId?: string | null;
+  }): Promise<Token>;
+  /** List all tokens for a project. */
+  list(projectId: string): Promise<Token[]>;
+  /** Fetch a token by id within a project, or null if not found. */
+  get(projectId: string, id: string): Promise<Token | null>;
+  /** Fetch a token by its hashed value, or null if not found. */
+  findByHash(hash: string): Promise<Token | null>;
+  /** Delete a token by id. */
+  remove(id: string): Promise<void>;
+}
+//#endregion
+export { TokenModel, TokenTables };
+//# sourceMappingURL=token.d.mts.map

package/dist/models/token.mjs

@@ -2,57 +2,60 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { ulid } from "../utils/ulid.mjs";
-import { tokens } from "../schema/token.mjs";
-import { and, eq } from "drizzle-orm";
+import { and, eq, getTableColumns } from "drizzle-orm";
 //#region src/models/token.ts
 /** CI tokens for project-scoped API access. */
 /** Data operations for CI tokens. */
 var TokenModel = class {
 	db;
+	tables;
 	/**
 	* @param db - Database adapter.
+	* @param tables - Table handles.
 	*/
-	constructor(db) {
+	constructor(db, tables) {
 		this.db = db;
+		this.tables = tables ?? { tokens: db.tables.tokens };
 	}
 	/**
 	* Create a token record storing its hash.
 	*
 	* @param projectId - Project ID.
-	* @param name - Token name.
-	* @param hash - Hashed token value.
+	* @param input - Token name, hash, and optional owning user ID (null for
+	* legacy/admin-token minting; such tokens resolve as viewer).
 	* @returns The created token.
 	*/
-	async create(projectId, name, hash) {
-		return await this.db.insert(tokens, {
+	async create(projectId, input) {
+		return await this.db.insert(this.tables.tokens, {
 			id: ulid(),
 			projectId,
-			name,
-			hash,
+			name: input.name,
+			hash: input.hash,
+			userId: input.userId ?? null,
 			createdAt: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	}
 	/** List all tokens for a project. */
 	async list(projectId) {
-		return await this.db.list(tokens, { where: eq(tokens.projectId, projectId) });
+		return await this.db.list(this.tables.tokens, { where: eq(getTableColumns(this.tables.tokens)["projectId"], projectId) });
 	}
 	/** Fetch a token by id within a project, or null if not found. */
 	async get(projectId, id) {
-		return (await this.db.list(tokens, {
-			where: and(eq(tokens.projectId, projectId), eq(tokens.id, id)),
+		return (await this.db.list(this.tables.tokens, {
+			where: and(eq(getTableColumns(this.tables.tokens)["projectId"], projectId), eq(getTableColumns(this.tables.tokens)["id"], id)),
 			limit: 1
 		}))[0] ?? null;
 	}
 	/** Fetch a token by its hashed value, or null if not found. */
 	async findByHash(hash) {
-		return (await this.db.list(tokens, {
-			where: eq(tokens.hash, hash),
+		return (await this.db.list(this.tables.tokens, {
+			where: eq(getTableColumns(this.tables.tokens)["hash"], hash),
 			limit: 1
 		}))[0] ?? null;
 	}
 	/** Delete a token by id. */
 	async remove(id) {
-		await this.db.remove(tokens, id);
+		await this.db.remove(this.tables.tokens, id);
 	}
 };
 //#endregion

package/dist/models/token.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"token.mjs","names":[],"sources":["../../src/models/token.ts"],"sourcesContent":["/** CI tokens for project-scoped API access. */\nimport { and, eq } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { tokens } from \"../schema/token.ts\";\nimport type { Token } from \"../schema/token.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Data operations for CI tokens. */\nexport class TokenModel {\n  /**\n   * @param db - Database adapter.\n   */\n  constructor(private readonly db: DatabaseAdapter) {}\n\n  /**\n   * Create a token record storing its hash.\n   *\n   * @param projectId - Project ID.\n   * @param name - Token name.\n   * @param hash - Hashed token value.\n   * @returns The created token.\n   */\n  async create(projectId: string, name: string, hash: string): Promise<Token> {\n    return await this.db.insert(tokens, {\n      id: ulid(),\n      projectId,\n      name,\n      hash,\n      createdAt: new Date().toISOString(),\n    });\n  }\n\n  /** List all tokens for a project. */\n  async list(projectId: string): Promise<Token[]> {\n    return await this.db.list(tokens, { where: eq(tokens.projectId, projectId) });\n  }\n\n  /** Fetch a token by id within a project, or null if not found. */\n  async get(projectId: string, id: string): Promise<Token | null> {\n    const rows = await this.db.list(tokens, {\n      where: and(eq(tokens.projectId, projectId), eq(tokens.id, id)),\n      limit: 1,\n    });\n    return rows[0] ?? null;\n  }\n\n  /** Fetch a token by its hashed value, or null if not found. */\n  async findByHash(hash: string): Promise<Token | null> {\n    const rows = await this.db.list(tokens, { where: eq(tokens.hash, hash), limit: 1 });\n    return rows[0] ?? null;\n  }\n\n  /** Delete a token by id. */\n  async remove(id: string): Promise<void> {\n    await this.db.remove(tokens, id);\n  }\n}\n"],"mappings":";;;;;;;;;AAQA,IAAa,aAAb,MAAwB;CAIO;;;;CAA7B,YAAY,IAAsC;EAArB,KAAA,KAAA;CAAsB;;;;;;;;;CAUnD,MAAM,OAAO,WAAmB,MAAc,MAA8B;EAC1E,OAAO,MAAM,KAAK,GAAG,OAAO,QAAQ;GAClC,IAAI,KAAK;GACT;GACA;GACA;GACA,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,KAAK,WAAqC;EAC9C,OAAO,MAAM,KAAK,GAAG,KAAK,QAAQ,EAAE,OAAO,GAAG,OAAO,WAAW,SAAS,EAAE,CAAC;CAC9E;;CAGA,MAAM,IAAI,WAAmB,IAAmC;EAK9D,QAAO,MAJY,KAAK,GAAG,KAAK,QAAQ;GACtC,OAAO,IAAI,GAAG,OAAO,WAAW,SAAS,GAAG,GAAG,OAAO,IAAI,EAAE,CAAC;GAC7D,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,WAAW,MAAqC;EAEpD,QAAO,MADY,KAAK,GAAG,KAAK,QAAQ;GAAE,OAAO,GAAG,OAAO,MAAM,IAAI;GAAG,OAAO;EAAE,CAAC,EAAA,CACtE,MAAM;CACpB;;CAGA,MAAM,OAAO,IAA2B;EACtC,MAAM,KAAK,GAAG,OAAO,QAAQ,EAAE;CACjC;AACF"}
+{"version":3,"file":"token.mjs","names":[],"sources":["../../src/models/token.ts"],"sourcesContent":["/** CI tokens for project-scoped API access. */\nimport { and, eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { Token } from \"../schema/token.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Tables required by {@link TokenModel}. */\nexport interface TokenTables {\n  tokens: Table;\n}\n\n/** Data operations for CI tokens. */\nexport class TokenModel {\n  private readonly tables: TokenTables;\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles.\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: TokenTables,\n  ) {\n    this.tables = tables ?? { tokens: db.tables.tokens };\n  }\n\n  /**\n   * Create a token record storing its hash.\n   *\n   * @param projectId - Project ID.\n   * @param input - Token name, hash, and optional owning user ID (null for\n   * legacy/admin-token minting; such tokens resolve as viewer).\n   * @returns The created token.\n   */\n  async create(\n    projectId: string,\n    input: { name: string; hash: string; userId?: string | null },\n  ): Promise<Token> {\n    return (await this.db.insert(this.tables.tokens, {\n      id: ulid(),\n      projectId,\n      name: input.name,\n      hash: input.hash,\n      userId: input.userId ?? null,\n      createdAt: new Date().toISOString(),\n    })) as unknown as Token;\n  }\n\n  /** List all tokens for a project. */\n  async list(projectId: string): Promise<Token[]> {\n    return (await this.db.list(this.tables.tokens, {\n      where: eq(\n        getTableColumns(this.tables.tokens)[\"projectId\"] as unknown as SQLWrapper,\n        projectId,\n      ),\n    })) as unknown as Token[];\n  }\n\n  /** Fetch a token by id within a project, or null if not found. */\n  async get(projectId: string, id: string): Promise<Token | null> {\n    const rows = (await this.db.list(this.tables.tokens, {\n      where: and(\n        eq(getTableColumns(this.tables.tokens)[\"projectId\"] as unknown as SQLWrapper, projectId),\n        eq(getTableColumns(this.tables.tokens)[\"id\"] as unknown as SQLWrapper, id),\n      ),\n      limit: 1,\n    })) as unknown as Token[];\n    return rows[0] ?? null;\n  }\n\n  /** Fetch a token by its hashed value, or null if not found. */\n  async findByHash(hash: string): Promise<Token | null> {\n    const rows = (await this.db.list(this.tables.tokens, {\n      where: eq(getTableColumns(this.tables.tokens)[\"hash\"] as unknown as SQLWrapper, hash),\n      limit: 1,\n    })) as unknown as Token[];\n    return rows[0] ?? null;\n  }\n\n  /** Delete a token by id. */\n  async remove(id: string): Promise<void> {\n    await this.db.remove(this.tables.tokens, id);\n  }\n}\n"],"mappings":";;;;;;;;AAaA,IAAa,aAAb,MAAwB;CAOH;CANnB;;;;;CAKA,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EAGjB,KAAK,SAAS,UAAU,EAAE,QAAQ,GAAG,OAAO,OAAO;CACrD;;;;;;;;;CAUA,MAAM,OACJ,WACA,OACgB;EAChB,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,QAAQ;GAC/C,IAAI,KAAK;GACT;GACA,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,QAAQ,MAAM,UAAU;GACxB,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EACpC,CAAC;CACH;;CAGA,MAAM,KAAK,WAAqC;EAC9C,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,QAAQ,EAC7C,OAAO,GACL,gBAAgB,KAAK,OAAO,MAAM,CAAC,CAAC,cACpC,SACF,EACF,CAAC;CACH;;CAGA,MAAM,IAAI,WAAmB,IAAmC;EAQ9D,QAAO,MAPa,KAAK,GAAG,KAAK,KAAK,OAAO,QAAQ;GACnD,OAAO,IACL,GAAG,gBAAgB,KAAK,OAAO,MAAM,CAAC,CAAC,cAAuC,SAAS,GACvF,GAAG,gBAAgB,KAAK,OAAO,MAAM,CAAC,CAAC,OAAgC,EAAE,CAC3E;GACA,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,WAAW,MAAqC;EAKpD,QAAO,MAJa,KAAK,GAAG,KAAK,KAAK,OAAO,QAAQ;GACnD,OAAO,GAAG,gBAAgB,KAAK,OAAO,MAAM,CAAC,CAAC,SAAkC,IAAI;GACpF,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;CAGA,MAAM,OAAO,IAA2B;EACtC,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,QAAQ,EAAE;CAC7C;AACF"}

package/dist/models/user.d.mts

@@ -0,0 +1,42 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { User } from "../schema/user.mjs";
+import { Table } from "drizzle-orm";
+//#region src/models/user.d.ts
+/** Tables required by {@link UserModel}. */
+interface UserTables {
+  users: Table;
+}
+/** Data operations for users. */
+declare class UserModel {
+  private readonly db;
+  private readonly tables;
+  /**
+   * @param db - Database adapter.
+   * @param tables - Table handles.
+   */
+  constructor(db: DatabaseAdapter, tables?: UserTables);
+  /** Fetch a user by id, or null if not found (e.g. deleted after tokens were minted). */
+  get(id: string): Promise<User | null>;
+  /**
+   * Insert or update a user row from an authenticated identity (login sync).
+   * Email, name, avatar, and site role refresh on every login; the row id
+   * (the provider `sub`) is stable. Preserves `displayNameOverride` so a
+   * user-edited name survives IdP refresh; `passwordHash` and `disabled`
+   * are never clobbered by SSO sync.
+   */
+  upsert(input: {
+    id: string;
+    email: string;
+    name: string;
+    avatarUrl?: string | null;
+    role: User["role"];
+    authProvider?: User["authProvider"];
+  }): Promise<User>;
+  /** Update the display name override for a user (profile edit). */
+  setDisplayNameOverride(id: string, displayName: string | null): Promise<User>;
+}
+//#endregion
+export { UserModel, UserTables };
+//# sourceMappingURL=user.d.mts.map

package/dist/models/user.mjs

@@ -0,0 +1,65 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { eq, getTableColumns } from "drizzle-orm";
+//#region src/models/user.ts
+/** User lookups for token and membership resolution. */
+/** Data operations for users. */
+var UserModel = class {
+	db;
+	tables;
+	/**
+	* @param db - Database adapter.
+	* @param tables - Table handles.
+	*/
+	constructor(db, tables) {
+		this.db = db;
+		this.tables = tables ?? { users: db.tables.users };
+	}
+	/** Fetch a user by id, or null if not found (e.g. deleted after tokens were minted). */
+	async get(id) {
+		return (await this.db.list(this.tables.users, {
+			where: eq(getTableColumns(this.tables.users)["id"], id),
+			limit: 1
+		}))[0] ?? null;
+	}
+	/**
+	* Insert or update a user row from an authenticated identity (login sync).
+	* Email, name, avatar, and site role refresh on every login; the row id
+	* (the provider `sub`) is stable. Preserves `displayNameOverride` so a
+	* user-edited name survives IdP refresh; `passwordHash` and `disabled`
+	* are never clobbered by SSO sync.
+	*/
+	async upsert(input) {
+		const now = (/* @__PURE__ */ new Date()).toISOString();
+		const existing = await this.get(input.id);
+		if (!existing) return await this.db.insert(this.tables.users, {
+			id: input.id,
+			email: input.email,
+			name: input.name,
+			avatarUrl: input.avatarUrl ?? null,
+			role: input.role,
+			lastLoginAt: now,
+			createdAt: now,
+			passwordHash: null,
+			displayNameOverride: null,
+			authProvider: input.authProvider ?? "oidc",
+			disabled: false
+		});
+		return await this.db.update(this.tables.users, existing.id, {
+			email: input.email,
+			name: input.name,
+			avatarUrl: input.avatarUrl ?? null,
+			role: input.role,
+			lastLoginAt: now
+		});
+	}
+	/** Update the display name override for a user (profile edit). */
+	async setDisplayNameOverride(id, displayName) {
+		return await this.db.update(this.tables.users, id, { displayNameOverride: displayName?.trim() ? displayName.trim() : null });
+	}
+};
+//#endregion
+export { UserModel };
+
+//# sourceMappingURL=user.mjs.map

package/dist/models/user.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.mjs","names":[],"sources":["../../src/models/user.ts"],"sourcesContent":["/** User lookups for token and membership resolution. */\nimport { eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { User } from \"../schema/user.ts\";\n\n/** Tables required by {@link UserModel}. */\nexport interface UserTables {\n  users: Table;\n}\n\n/** Data operations for users. */\nexport class UserModel {\n  private readonly tables: UserTables;\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles.\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: UserTables,\n  ) {\n    this.tables = tables ?? { users: db.tables.users };\n  }\n\n  /** Fetch a user by id, or null if not found (e.g. deleted after tokens were minted). */\n  async get(id: string): Promise<User | null> {\n    const rows = (await this.db.list(this.tables.users, {\n      where: eq(getTableColumns(this.tables.users)[\"id\"] as unknown as SQLWrapper, id),\n      limit: 1,\n    })) as unknown as User[];\n    return rows[0] ?? null;\n  }\n\n  /**\n   * Insert or update a user row from an authenticated identity (login sync).\n   * Email, name, avatar, and site role refresh on every login; the row id\n   * (the provider `sub`) is stable. Preserves `displayNameOverride` so a\n   * user-edited name survives IdP refresh; `passwordHash` and `disabled`\n   * are never clobbered by SSO sync.\n   */\n  async upsert(input: {\n    id: string;\n    email: string;\n    name: string;\n    avatarUrl?: string | null;\n    role: User[\"role\"];\n    authProvider?: User[\"authProvider\"];\n  }): Promise<User> {\n    const now = new Date().toISOString();\n    const existing = await this.get(input.id);\n    if (!existing) {\n      return (await this.db.insert(this.tables.users, {\n        id: input.id,\n        email: input.email,\n        name: input.name,\n        avatarUrl: input.avatarUrl ?? null,\n        role: input.role,\n        lastLoginAt: now,\n        createdAt: now,\n        passwordHash: null,\n        displayNameOverride: null,\n        authProvider: input.authProvider ?? \"oidc\",\n        disabled: false,\n      })) as unknown as User;\n    }\n    return (await this.db.update(this.tables.users, existing.id, {\n      email: input.email,\n      // Keep a user-edited display name: `name` stays the IdP value,\n      // `displayNameOverride` is the source of truth for rendering.\n      name: input.name,\n      avatarUrl: input.avatarUrl ?? null,\n      role: input.role,\n      lastLoginAt: now,\n    })) as unknown as User;\n  }\n\n  /** Update the display name override for a user (profile edit). */\n  async setDisplayNameOverride(id: string, displayName: string | null): Promise<User> {\n    return (await this.db.update(this.tables.users, id, {\n      displayNameOverride: displayName?.trim() ? displayName.trim() : null,\n    })) as unknown as User;\n  }\n}\n"],"mappings":";;;;;;;AAYA,IAAa,YAAb,MAAuB;CAOF;CANnB;;;;;CAKA,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EAGjB,KAAK,SAAS,UAAU,EAAE,OAAO,GAAG,OAAO,MAAM;CACnD;;CAGA,MAAM,IAAI,IAAkC;EAK1C,QAAO,MAJa,KAAK,GAAG,KAAK,KAAK,OAAO,OAAO;GAClD,OAAO,GAAG,gBAAgB,KAAK,OAAO,KAAK,CAAC,CAAC,OAAgC,EAAE;GAC/E,OAAO;EACT,CAAC,EAAA,CACW,MAAM;CACpB;;;;;;;;CASA,MAAM,OAAO,OAOK;EAChB,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,MAAM,WAAW,MAAM,KAAK,IAAI,MAAM,EAAE;EACxC,IAAI,CAAC,UACH,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,OAAO;GAC9C,IAAI,MAAM;GACV,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,WAAW,MAAM,aAAa;GAC9B,MAAM,MAAM;GACZ,aAAa;GACb,WAAW;GACX,cAAc;GACd,qBAAqB;GACrB,cAAc,MAAM,gBAAgB;GACpC,UAAU;EACZ,CAAC;EAEH,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,OAAO,SAAS,IAAI;GAC3D,OAAO,MAAM;GAGb,MAAM,MAAM;GACZ,WAAW,MAAM,aAAa;GAC9B,MAAM,MAAM;GACZ,aAAa;EACf,CAAC;CACH;;CAGA,MAAM,uBAAuB,IAAY,aAA2C;EAClF,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,OAAO,IAAI,EAClD,qBAAqB,aAAa,KAAK,IAAI,YAAY,KAAK,IAAI,KAClE,CAAC;CACH;AACF"}

package/dist/models/webhook.d.mts

@@ -0,0 +1,50 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { DatabaseAdapter } from "../adapter/database.mjs";
+import { Webhook } from "../schema/webhook.mjs";
+import { SecretInput } from "../utils/encrypt.mjs";
+import { Table } from "drizzle-orm";
+//#region src/models/webhook.d.ts
+/** Tables required by {@link WebhookModel}. */
+interface WebhookTables {
+  webhooks: Table;
+}
+/** Data operations for webhook subscriptions. */
+declare class WebhookModel {
+  private readonly db;
+  private readonly tables;
+  private readonly secret?;
+  /**
+   * @param db - Database adapter.
+   * @param tables - Table handles.
+   * @param secret - Server secret for webhook-secret encryption (throws on write/decrypt when unset).
+   */
+  constructor(db: DatabaseAdapter, tables?: WebhookTables, secret?: SecretInput);
+  /** List all webhooks for a project. */
+  list(projectId: string): Promise<Webhook[]>;
+  /**
+   * Create a webhook subscription for a project.
+   *
+   * @param projectId - Project ID.
+   * @param input - Webhook creation input.
+   * @returns The created webhook.
+   */
+  create(projectId: string, input: WebhookCreateInput): Promise<Webhook>;
+  /** Decrypt the secret for a stored row (in memory only, at send time). */
+  decryptSecret(row: Webhook): string;
+  /** Fetch a webhook by id scoped to a project, or null if not found. */
+  get(projectId: string, id: string): Promise<Webhook | null>;
+  /** Remove a webhook if it belongs to the given project. */
+  remove(projectId: string, id: string): Promise<void>;
+  /** Decode the JSON-serialized event list of a webhook. */
+  static eventsOf(webhook: Webhook): string[];
+}
+/** Input for creating a webhook subscription. */
+interface WebhookCreateInput {
+  url: string;
+  events?: string[];
+  secret: string;
+}
+//#endregion
+export { WebhookCreateInput, WebhookModel, WebhookTables };
+//# sourceMappingURL=webhook.d.mts.map

package/dist/models/webhook.mjs

@@ -1,27 +1,29 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { decryptCredential, encrypt } from "../utils/encrypt.mjs";
 import { ulid } from "../utils/ulid.mjs";
-import { webhooks } from "../schema/webhook.mjs";
-import { decrypt, encrypt } from "../utils/encrypt.mjs";
-import { eq } from "drizzle-orm";
+import { eq, getTableColumns } from "drizzle-orm";
 //#region src/models/webhook.ts
 /** Webhook subscriptions for project events. */
 /** Data operations for webhook subscriptions. */
 var WebhookModel = class {
 	db;
+	tables;
 	secret;
 	/**
 	* @param db - Database adapter.
+	* @param tables - Table handles.
 	* @param secret - Server secret for webhook-secret encryption (throws on write/decrypt when unset).
 	*/
-	constructor(db, secret) {
+	constructor(db, tables, secret) {
 		this.db = db;
+		this.tables = tables ?? { webhooks: db.tables.webhooks };
 		this.secret = secret;
 	}
 	/** List all webhooks for a project. */
 	async list(projectId) {
-		return await this.db.list(webhooks, { where: eq(webhooks.projectId, projectId) });
+		return await this.db.list(this.tables.webhooks, { where: eq(getTableColumns(this.tables.webhooks)["projectId"], projectId) });
 	}
 	/**
 	* Create a webhook subscription for a project.
@@ -32,7 +34,7 @@ var WebhookModel = class {
 	*/
 	async create(projectId, input) {
 		const now = (/* @__PURE__ */ new Date()).toISOString();
-		return await this.db.insert(webhooks, {
+		return await this.db.insert(this.tables.webhooks, {
 			id: ulid(),
 			projectId,
 			url: input.url,
@@ -44,12 +46,12 @@ var WebhookModel = class {
 	}
 	/** Decrypt the secret for a stored row (in memory only, at send time). */
 	decryptSecret(row) {
-		return decrypt(this.secret, row.secretEncrypted);
+		return decryptCredential(this.secret, row.secretEncrypted);
 	}
 	/** Fetch a webhook by id scoped to a project, or null if not found. */
 	async get(projectId, id) {
-		const found = (await this.db.list(webhooks, {
-			where: eq(webhooks.id, id),
+		const found = (await this.db.list(this.tables.webhooks, {
+			where: eq(getTableColumns(this.tables.webhooks)["id"], id),
 			limit: 1
 		}))[0] ?? null;
 		return found?.projectId === projectId ? found : null;
@@ -57,7 +59,7 @@ var WebhookModel = class {
 	/** Remove a webhook if it belongs to the given project. */
 	async remove(projectId, id) {
 		const existing = await this.get(projectId, id);
-		if (existing) await this.db.remove(webhooks, existing.id);
+		if (existing) await this.db.remove(this.tables.webhooks, existing.id);
 	}
 	/** Decode the JSON-serialized event list of a webhook. */
 	static eventsOf(webhook) {

package/dist/models/webhook.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"webhook.mjs","names":[],"sources":["../../src/models/webhook.ts"],"sourcesContent":["/** Webhook subscriptions for project events. */\nimport { eq } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport { webhooks } from \"../schema/webhook.ts\";\nimport type { Webhook } from \"../schema/webhook.ts\";\nimport { decrypt, encrypt } from \"../utils/encrypt.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Input for creating a webhook subscription. */\nexport interface WebhookCreateInput {\n  url: string;\n  events?: string[];\n  secret: string;\n}\n\n/** Data operations for webhook subscriptions. */\nexport class WebhookModel {\n  /**\n   * @param db - Database adapter.\n   * @param secret - Server secret for webhook-secret encryption (throws on write/decrypt when unset).\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    private readonly secret?: string,\n  ) {}\n\n  /** List all webhooks for a project. */\n  async list(projectId: string): Promise<Webhook[]> {\n    return await this.db.list(webhooks, { where: eq(webhooks.projectId, projectId) });\n  }\n\n  /**\n   * Create a webhook subscription for a project.\n   *\n   * @param projectId - Project ID.\n   * @param input - Webhook creation input.\n   * @returns The created webhook.\n   */\n  async create(projectId: string, input: WebhookCreateInput): Promise<Webhook> {\n    const now = new Date().toISOString();\n    return await this.db.insert(webhooks, {\n      id: ulid(),\n      projectId,\n      url: input.url,\n      secretEncrypted: encrypt(this.secret, input.secret),\n      events: input.events && input.events.length > 0 ? JSON.stringify(input.events) : null,\n      createdAt: now,\n      updatedAt: now,\n    });\n  }\n\n  /** Decrypt the secret for a stored row (in memory only, at send time). */\n  decryptSecret(row: Webhook): string {\n    return decrypt(this.secret, row.secretEncrypted);\n  }\n\n  /** Fetch a webhook by id scoped to a project, or null if not found. */\n  async get(projectId: string, id: string): Promise<Webhook | null> {\n    const rows = await this.db.list(webhooks, { where: eq(webhooks.id, id), limit: 1 });\n    const found = rows[0] ?? null;\n    return found?.projectId === projectId ? found : null;\n  }\n\n  /** Remove a webhook if it belongs to the given project. */\n  async remove(projectId: string, id: string): Promise<void> {\n    const existing = await this.get(projectId, id);\n    if (existing) {\n      await this.db.remove(webhooks, existing.id);\n    }\n  }\n\n  /** Decode the JSON-serialized event list of a webhook. */\n  static eventsOf(webhook: Webhook): string[] {\n    if (!webhook.events) {\n      return [];\n    }\n    try {\n      const parsed: unknown = JSON.parse(webhook.events);\n      return Array.isArray(parsed)\n        ? parsed.filter((event): event is string => typeof event === \"string\")\n        : [];\n    } catch {\n      return [];\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAgBA,IAAa,eAAb,MAA0B;CAML;CACA;;;;;CAFnB,YACE,IACA,QACA;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;;CAGH,MAAM,KAAK,WAAuC;EAChD,OAAO,MAAM,KAAK,GAAG,KAAK,UAAU,EAAE,OAAO,GAAG,SAAS,WAAW,SAAS,EAAE,CAAC;CAClF;;;;;;;;CASA,MAAM,OAAO,WAAmB,OAA6C;EAC3E,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,OAAO,MAAM,KAAK,GAAG,OAAO,UAAU;GACpC,IAAI,KAAK;GACT;GACA,KAAK,MAAM;GACX,iBAAiB,QAAQ,KAAK,QAAQ,MAAM,MAAM;GAClD,QAAQ,MAAM,UAAU,MAAM,OAAO,SAAS,IAAI,KAAK,UAAU,MAAM,MAAM,IAAI;GACjF,WAAW;GACX,WAAW;EACb,CAAC;CACH;;CAGA,cAAc,KAAsB;EAClC,OAAO,QAAQ,KAAK,QAAQ,IAAI,eAAe;CACjD;;CAGA,MAAM,IAAI,WAAmB,IAAqC;EAEhE,MAAM,SAAQ,MADK,KAAK,GAAG,KAAK,UAAU;GAAE,OAAO,GAAG,SAAS,IAAI,EAAE;GAAG,OAAO;EAAE,CAAC,EAAA,CAC/D,MAAM;EACzB,OAAO,OAAO,cAAc,YAAY,QAAQ;CAClD;;CAGA,MAAM,OAAO,WAAmB,IAA2B;EACzD,MAAM,WAAW,MAAM,KAAK,IAAI,WAAW,EAAE;EAC7C,IAAI,UACF,MAAM,KAAK,GAAG,OAAO,UAAU,SAAS,EAAE;CAE9C;;CAGA,OAAO,SAAS,SAA4B;EAC1C,IAAI,CAAC,QAAQ,QACX,OAAO,CAAC;EAEV,IAAI;GACF,MAAM,SAAkB,KAAK,MAAM,QAAQ,MAAM;GACjD,OAAO,MAAM,QAAQ,MAAM,IACvB,OAAO,QAAQ,UAA2B,OAAO,UAAU,QAAQ,IACnE,CAAC;EACP,QAAQ;GACN,OAAO,CAAC;EACV;CACF;AACF"}
+{"version":3,"file":"webhook.mjs","names":[],"sources":["../../src/models/webhook.ts"],"sourcesContent":["/** Webhook subscriptions for project events. */\nimport { eq, getTableColumns } from \"drizzle-orm\";\nimport type { SQLWrapper, Table } from \"drizzle-orm\";\nimport type { DatabaseAdapter } from \"../adapters/database.ts\";\nimport type { Webhook } from \"../schema/webhook.ts\";\nimport { decryptCredential, encrypt, type SecretInput } from \"../utils/encrypt.ts\";\nimport { ulid } from \"../utils/ulid.ts\";\n\n/** Tables required by {@link WebhookModel}. */\nexport interface WebhookTables {\n  webhooks: Table;\n}\n\n/** Data operations for webhook subscriptions. */\nexport class WebhookModel {\n  private readonly tables: WebhookTables;\n  private readonly secret?: SecretInput;\n  /**\n   * @param db - Database adapter.\n   * @param tables - Table handles.\n   * @param secret - Server secret for webhook-secret encryption (throws on write/decrypt when unset).\n   */\n  constructor(\n    private readonly db: DatabaseAdapter,\n    tables?: WebhookTables,\n    secret?: SecretInput,\n  ) {\n    this.tables = tables ?? { webhooks: db.tables.webhooks };\n    this.secret = secret;\n  }\n\n  /** List all webhooks for a project. */\n  async list(projectId: string): Promise<Webhook[]> {\n    return (await this.db.list(this.tables.webhooks, {\n      where: eq(\n        getTableColumns(this.tables.webhooks)[\"projectId\"] as unknown as SQLWrapper,\n        projectId,\n      ),\n    })) as unknown as Webhook[];\n  }\n\n  /**\n   * Create a webhook subscription for a project.\n   *\n   * @param projectId - Project ID.\n   * @param input - Webhook creation input.\n   * @returns The created webhook.\n   */\n  async create(projectId: string, input: WebhookCreateInput): Promise<Webhook> {\n    const now = new Date().toISOString();\n    return (await this.db.insert(this.tables.webhooks, {\n      id: ulid(),\n      projectId,\n      url: input.url,\n      secretEncrypted: encrypt(this.secret, input.secret),\n      events: input.events && input.events.length > 0 ? JSON.stringify(input.events) : null,\n      createdAt: now,\n      updatedAt: now,\n    })) as unknown as Webhook;\n  }\n\n  /** Decrypt the secret for a stored row (in memory only, at send time). */\n  decryptSecret(row: Webhook): string {\n    return decryptCredential(this.secret, row.secretEncrypted);\n  }\n\n  /** Fetch a webhook by id scoped to a project, or null if not found. */\n  async get(projectId: string, id: string): Promise<Webhook | null> {\n    const rows = (await this.db.list(this.tables.webhooks, {\n      where: eq(getTableColumns(this.tables.webhooks)[\"id\"] as unknown as SQLWrapper, id),\n      limit: 1,\n    })) as unknown as Webhook[];\n    const found = rows[0] ?? null;\n    return found?.projectId === projectId ? found : null;\n  }\n\n  /** Remove a webhook if it belongs to the given project. */\n  async remove(projectId: string, id: string): Promise<void> {\n    const existing = await this.get(projectId, id);\n    if (existing) {\n      await this.db.remove(this.tables.webhooks, existing.id);\n    }\n  }\n\n  /** Decode the JSON-serialized event list of a webhook. */\n  static eventsOf(webhook: Webhook): string[] {\n    if (!webhook.events) {\n      return [];\n    }\n    try {\n      const parsed: unknown = JSON.parse(webhook.events);\n      return Array.isArray(parsed)\n        ? parsed.filter((event): event is string => typeof event === \"string\")\n        : [];\n    } catch {\n      return [];\n    }\n  }\n}\n\n/** Input for creating a webhook subscription. */\nexport interface WebhookCreateInput {\n  url: string;\n  events?: string[];\n  secret: string;\n}\n"],"mappings":";;;;;;;;;AAcA,IAAa,eAAb,MAA0B;CASL;CARnB;CACA;;;;;;CAMA,YACE,IACA,QACA,QACA;EAHiB,KAAA,KAAA;EAIjB,KAAK,SAAS,UAAU,EAAE,UAAU,GAAG,OAAO,SAAS;EACvD,KAAK,SAAS;CAChB;;CAGA,MAAM,KAAK,WAAuC;EAChD,OAAQ,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,UAAU,EAC/C,OAAO,GACL,gBAAgB,KAAK,OAAO,QAAQ,CAAC,CAAC,cACtC,SACF,EACF,CAAC;CACH;;;;;;;;CASA,MAAM,OAAO,WAAmB,OAA6C;EAC3E,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,OAAQ,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,UAAU;GACjD,IAAI,KAAK;GACT;GACA,KAAK,MAAM;GACX,iBAAiB,QAAQ,KAAK,QAAQ,MAAM,MAAM;GAClD,QAAQ,MAAM,UAAU,MAAM,OAAO,SAAS,IAAI,KAAK,UAAU,MAAM,MAAM,IAAI;GACjF,WAAW;GACX,WAAW;EACb,CAAC;CACH;;CAGA,cAAc,KAAsB;EAClC,OAAO,kBAAkB,KAAK,QAAQ,IAAI,eAAe;CAC3D;;CAGA,MAAM,IAAI,WAAmB,IAAqC;EAKhE,MAAM,SAAQ,MAJM,KAAK,GAAG,KAAK,KAAK,OAAO,UAAU;GACrD,OAAO,GAAG,gBAAgB,KAAK,OAAO,QAAQ,CAAC,CAAC,OAAgC,EAAE;GAClF,OAAO;EACT,CAAC,EAAA,CACkB,MAAM;EACzB,OAAO,OAAO,cAAc,YAAY,QAAQ;CAClD;;CAGA,MAAM,OAAO,WAAmB,IAA2B;EACzD,MAAM,WAAW,MAAM,KAAK,IAAI,WAAW,EAAE;EAC7C,IAAI,UACF,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,UAAU,SAAS,EAAE;CAE1D;;CAGA,OAAO,SAAS,SAA4B;EAC1C,IAAI,CAAC,QAAQ,QACX,OAAO,CAAC;EAEV,IAAI;GACF,MAAM,SAAkB,KAAK,MAAM,QAAQ,MAAM;GACjD,OAAO,MAAM,QAAQ,MAAM,IACvB,OAAO,QAAQ,UAA2B,OAAO,UAAU,QAAQ,IACnE,CAAC;EACP,QAAQ;GACN,OAAO,CAAC;EACV;CACF;AACF"}

package/dist/models.d.mts

@@ -0,0 +1,22 @@
+import __tsdown_shims_path from 'node:path';
+import __tsdown_shims_url from 'node:url';
+import { WebhookCreateInput, WebhookModel } from "./models/webhook.mjs";
+import { BuildCreateInput, BuildListFilter, BuildModel, isPublicBuild } from "./models/build.mjs";
+import { AttemptLogRecorder, CaptureAttemptModel, CaptureAttemptTables, emitAttemptLog } from "./models/capture-attempt.mjs";
+import { CaptureLogModel, CaptureLogTables } from "./models/capture-log.mjs";
+import { ProjectCreateInput, ProjectModel } from "./models/project.mjs";
+import { BaselineModel } from "./models/baseline.mjs";
+import { SnapshotCreateInput, SnapshotModel } from "./models/snapshot.mjs";
+import { StatusConfigCreateInput, StatusConfigModel } from "./models/status-config.mjs";
+import { BaselineStatus, NO_BASELINE, baselineStatus, isBaselineDrifted } from "./models/baseline-status.mjs";
+import { CommentCreateInput, CommentModel } from "./models/comment.mjs";
+import { LabelModel } from "./models/label.mjs";
+import { MemberModel } from "./models/member.mjs";
+import { NotificationChannelCreateInput, NotificationChannelModel, NotificationChannelTables } from "./models/notification-channel.mjs";
+import { NotificationSubscriptionInput, NotificationSubscriptionModel, NotificationSubscriptionTables } from "./models/notification-subscription.mjs";
+import { ProjectGroupMappingModel } from "./models/project-group-mapping.mjs";
+import { TokenModel } from "./models/token.mjs";
+import { UserModel } from "./models/user.mjs";
+import { ContentRefModel } from "./models/content-ref.mjs";
+import { CredentialProbe, ReencryptResult, UnreadableCredential, probeCredentials, reencryptCredentials } from "./models/credentials.mjs";
+export { type AttemptLogRecorder, BaselineModel, type BaselineStatus, type BuildCreateInput, type BuildListFilter, BuildModel, CaptureAttemptModel, type CaptureAttemptTables, CaptureLogModel, type CaptureLogTables, type CommentCreateInput, CommentModel, ContentRefModel, type CredentialProbe, LabelModel, MemberModel, NO_BASELINE, type NotificationChannelCreateInput, NotificationChannelModel, type NotificationChannelTables, type NotificationSubscriptionInput, NotificationSubscriptionModel, type NotificationSubscriptionTables, type ProjectCreateInput, ProjectGroupMappingModel, ProjectModel, type ReencryptResult, type SnapshotCreateInput, SnapshotModel, type StatusConfigCreateInput, StatusConfigModel, TokenModel, type UnreadableCredential, UserModel, type WebhookCreateInput, WebhookModel, baselineStatus, emitAttemptLog, isBaselineDrifted, isPublicBuild, probeCredentials, reencryptCredentials };

package/dist/models.mjs

@@ -0,0 +1,23 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { WebhookModel } from "./models/webhook.mjs";
+import { BuildModel, isPublicBuild } from "./models/build.mjs";
+import { CaptureAttemptModel, emitAttemptLog } from "./models/capture-attempt.mjs";
+import { ProjectModel } from "./models/project.mjs";
+import { BaselineModel } from "./models/baseline.mjs";
+import { NO_BASELINE, baselineStatus, isBaselineDrifted } from "./models/baseline-status.mjs";
+import { SnapshotModel } from "./models/snapshot.mjs";
+import { StatusConfigModel } from "./models/status-config.mjs";
+import { CaptureLogModel } from "./models/capture-log.mjs";
+import { CommentModel } from "./models/comment.mjs";
+import { LabelModel } from "./models/label.mjs";
+import { MemberModel } from "./models/member.mjs";
+import { NotificationChannelModel } from "./models/notification-channel.mjs";
+import { NotificationSubscriptionModel } from "./models/notification-subscription.mjs";
+import { ProjectGroupMappingModel } from "./models/project-group-mapping.mjs";
+import { TokenModel } from "./models/token.mjs";
+import { UserModel } from "./models/user.mjs";
+import { ContentRefModel } from "./models/content-ref.mjs";
+import { probeCredentials, reencryptCredentials } from "./models/credentials.mjs";
+export { BaselineModel, BuildModel, CaptureAttemptModel, CaptureLogModel, CommentModel, ContentRefModel, LabelModel, MemberModel, NO_BASELINE, NotificationChannelModel, NotificationSubscriptionModel, ProjectGroupMappingModel, ProjectModel, SnapshotModel, StatusConfigModel, TokenModel, UserModel, WebhookModel, baselineStatus, emitAttemptLog, isBaselineDrifted, isPublicBuild, probeCredentials, reencryptCredentials };