@uptimizr/db 2.0.0 → 2.1.0

package/dist/duckdb/panelSpecs.js

@@ -0,0 +1,104 @@
+import { randomUUID } from "node:crypto";
+import { METADATA_LIMITS, MetadataLimitError, clampMetadataLimit, parsePanelSpec, } from "../metadata.js";
+const PANEL_SPEC_COLS = `id, project_id, spec, author_kind, author_key_id,
+       epoch_ms(created_at) AS created_at_ms, epoch_ms(updated_at) AS updated_at_ms`;
+/**
+ * Map one row, or `null` when its `spec` column is not a JSON object.
+ *
+ * A row that cannot be parsed cannot be drawn, and a listing that threw on one
+ * would take the whole dashboard grid down with it. Dropping it is the same
+ * choice ADR 0041's remote-panel loader makes for a module that fails to
+ * import: one bad entry never blocks the rest.
+ */
+function rowToPanelSpec(row) {
+    const spec = parsePanelSpec(row.spec);
+    if (spec == null)
+        return null;
+    return {
+        id: row.id,
+        projectId: row.project_id,
+        spec,
+        authorKind: row.author_kind,
+        authorKeyId: row.author_key_id,
+        createdAt: new Date(Number(row.created_at_ms)),
+        updatedAt: new Date(Number(row.updated_at_ms)),
+    };
+}
+/** `SELECT count(*)` as a plain number, whatever width the driver returns. */
+async function countRows(client, sql, params) {
+    const rows = await client.all(sql, params);
+    return Number(rows[0]?.n ?? 0);
+}
+/** Read one row back by id, for the create/update paths. */
+async function readOne(client, id) {
+    const rows = await client.all(`SELECT ${PANEL_SPEC_COLS} FROM panel_specs WHERE id = $id`, { id });
+    // Written on this connection a moment ago, from a document that serialized,
+    // so both the row and its parse are guaranteed here.
+    return rowToPanelSpec(rows[0]);
+}
+/**
+ * Pin one panel and return the stored row.
+ *
+ * Refuses with {@link MetadataLimitError} once the project holds
+ * {@link METADATA_LIMITS.panelSpecs} panels. The cap is lower than the other
+ * metadata tables' on purpose: every spec is a query the dashboard runs on
+ * every load, so the bound is about what a grid can usefully hold.
+ */
+export async function createPanelSpec(client, projectId, input) {
+    const count = await countRows(client, `SELECT count(*) AS n FROM panel_specs WHERE project_id = $projectId`, { projectId });
+    if (count >= METADATA_LIMITS.panelSpecs) {
+        throw new MetadataLimitError("panelSpecs", METADATA_LIMITS.panelSpecs);
+    }
+    const id = randomUUID();
+    await client.run(`INSERT INTO panel_specs
+       (id, project_id, spec, author_kind, author_key_id, created_at, updated_at)
+     VALUES ($id, $projectId, $spec, $authorKind, $authorKeyId, now(), now())`, {
+        id,
+        projectId,
+        spec: JSON.stringify(input.spec),
+        authorKind: input.authorKind,
+        authorKeyId: input.authorKeyId,
+    });
+    return readOne(client, id);
+}
+/**
+ * A project's pinned panels, **oldest first**.
+ *
+ * The opposite order to the other metadata listings, and deliberately so: these
+ * are grid positions, not a feed. Newest-first would move every panel down the
+ * dashboard each time somebody pinned one, which is exactly the instability a
+ * person notices and a saved layout cannot survive.
+ */
+export async function listPanelSpecs(client, projectId, opts = {}) {
+    const limit = clampMetadataLimit(opts.limit, METADATA_LIMITS.panelSpecs, METADATA_LIMITS.panelSpecs);
+    const rows = await client.all(`SELECT ${PANEL_SPEC_COLS}
+       FROM panel_specs WHERE project_id = $projectId
+      ORDER BY created_at ASC, id ASC
+      LIMIT ${limit}`, { projectId });
+    return rows.map(rowToPanelSpec).filter((record) => record !== null);
+}
+/**
+ * Replace one panel's spec, keeping its id, its place in the grid and its
+ * original authorship. Returns `null` when the id is unknown (or belongs to
+ * another project — the two are deliberately indistinguishable).
+ */
+export async function updatePanelSpec(client, projectId, id, input) {
+    const before = await countRows(client, `SELECT count(*) AS n FROM panel_specs WHERE project_id = $projectId AND id = $id`, { projectId, id });
+    if (before === 0)
+        return null;
+    await client.run(`UPDATE panel_specs SET spec = $spec, updated_at = now()
+      WHERE project_id = $projectId AND id = $id`, { projectId, id, spec: JSON.stringify(input.spec) });
+    return readOne(client, id);
+}
+/** Unpin one panel. Returns whether a row was removed. */
+export async function deletePanelSpec(client, projectId, id) {
+    const before = await countRows(client, `SELECT count(*) AS n FROM panel_specs WHERE project_id = $projectId AND id = $id`, { projectId, id });
+    if (before === 0)
+        return false;
+    await client.run(`DELETE FROM panel_specs WHERE project_id = $projectId AND id = $id`, {
+        projectId,
+        id,
+    });
+    return true;
+}
+//# sourceMappingURL=panelSpecs.js.map

package/dist/duckdb/panelSpecs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"panelSpecs.js","sourceRoot":"","sources":["../../src/duckdb/panelSpecs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,GAMf,MAAM,gBAAgB,CAAC;AA6BxB,MAAM,eAAe,GAAG;oFAC4D,CAAC;AAErF;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,GAAiB;IACvC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,IAAI;QACJ,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9C,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,SAAS,CACtB,MAAoB,EACpB,GAAW,EACX,MAA+B;IAE/B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAyB,GAAG,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,4DAA4D;AAC5D,KAAK,UAAU,OAAO,CAAC,MAAoB,EAAE,EAAU;IACrD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,UAAU,eAAe,kCAAkC,EAC3D,EAAE,EAAE,EAAE,CACP,CAAC;IACF,4EAA4E;IAC5E,qDAAqD;IACrD,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAE,CAAE,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,SAAiB,EACjB,KAA2B;IAE3B,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,MAAM,EACN,qEAAqE,EACrE,EAAE,SAAS,EAAE,CACd,CAAC;IACF,IAAI,KAAK,IAAI,eAAe,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,kBAAkB,CAAC,YAAY,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,GAAG,CACd;;8EAE0E,EAC1E;QACE,EAAE;QACF,SAAS;QACT,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CACF,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAoB,EACpB,SAAiB,EACjB,OAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,kBAAkB,CAC9B,IAAI,CAAC,KAAK,EACV,eAAe,CAAC,UAAU,EAC1B,eAAe,CAAC,UAAU,CAC3B,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,UAAU,eAAe;;;cAGf,KAAK,EAAE,EACjB,EAAE,SAAS,EAAE,CACd,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAA6B,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,SAAiB,EACjB,EAAU,EACV,KAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,MAAM,EACN,kFAAkF,EAClF,EAAE,SAAS,EAAE,EAAE,EAAE,CAClB,CAAC;IACF,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,CAAC,GAAG,CACd;iDAC6C,EAC7C,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACpD,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,SAAiB,EACjB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,MAAM,EACN,kFAAkF,EAClF,EAAE,SAAS,EAAE,EAAE,EAAE,CAClB,CAAC;IACF,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,MAAM,CAAC,GAAG,CAAC,oEAAoE,EAAE;QACrF,SAAS;QACT,EAAE;KACH,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/duckdb/projectMetadata.d.ts

@@ -0,0 +1,43 @@
+import { type AnnotationRecord, type CreateAnnotationInput, type CreateSavedAnalysisInput, type GlossaryEntryRecord, type ListAnnotationsOptions, type MetadataListOptions, type PutGlossaryEntryInput, type SavedAnalysisRecord } from "../metadata.js";
+import type { DuckdbClient } from "./client.js";
+/**
+ * Create one annotation and return the stored row.
+ *
+ * Refuses with {@link MetadataLimitError} once the project holds
+ * {@link METADATA_LIMITS.annotations} rows: metadata is curated notes, not an
+ * unbounded write surface, and refusing is more honest than evicting somebody
+ * else's note.
+ */
+export declare function createAnnotation(client: DuckdbClient, projectId: string, input: CreateAnnotationInput): Promise<AnnotationRecord>;
+/**
+ * A project's annotations, newest first.
+ *
+ * The optional `since`/`until` bounds are an **overlap** filter, not a
+ * containment one: an annotation matches when its period intersects the
+ * requested window, and a standing note (no period at all) always matches
+ * because it is about the project rather than about a moment.
+ */
+export declare function listAnnotations(client: DuckdbClient, projectId: string, opts?: ListAnnotationsOptions): Promise<AnnotationRecord[]>;
+/**
+ * Delete one annotation of this project. Returns whether a row was removed, so
+ * the route can answer 404 for an id that is not there (or belongs to another
+ * project — the two are indistinguishable to the caller, deliberately).
+ */
+export declare function deleteAnnotation(client: DuckdbClient, projectId: string, id: string): Promise<boolean>;
+/**
+ * Upsert one glossary entry and return the stored row. Idempotent: the term is
+ * the identity, so re-defining it replaces the meaning instead of accumulating
+ * duplicates. The per-project cap applies only when a *new* term is added.
+ */
+export declare function putGlossaryEntry(client: DuckdbClient, projectId: string, input: PutGlossaryEntryInput): Promise<GlossaryEntryRecord>;
+/** A project's whole glossary, ordered by term (stable for diffs and prompts). */
+export declare function listGlossary(client: DuckdbClient, projectId: string, opts?: MetadataListOptions): Promise<GlossaryEntryRecord[]>;
+/** Delete one term. Returns whether it existed. */
+export declare function deleteGlossaryEntry(client: DuckdbClient, projectId: string, term: string): Promise<boolean>;
+/** Create one saved analysis and return the stored row. */
+export declare function createSavedAnalysis(client: DuckdbClient, projectId: string, input: CreateSavedAnalysisInput): Promise<SavedAnalysisRecord>;
+/** A project's saved analyses, newest first. */
+export declare function listSavedAnalyses(client: DuckdbClient, projectId: string, opts?: MetadataListOptions): Promise<SavedAnalysisRecord[]>;
+/** Delete one saved analysis. Returns whether it existed. */
+export declare function deleteSavedAnalysis(client: DuckdbClient, projectId: string, id: string): Promise<boolean>;
+//# sourceMappingURL=projectMetadata.d.ts.map

package/dist/duckdb/projectMetadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectMetadata.d.ts","sourceRoot":"","sources":["../../src/duckdb/projectMetadata.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,gBAAgB,EAErB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAE3B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiEhD;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CAqC3B;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA6B7B;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,OAAO,CAAC,CAYlB;AAkBD;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CA8B9B;AAED,kFAAkF;AAClF,wBAAsB,YAAY,CAChC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAUhC;AAED,mDAAmD;AACnD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAYlB;AA6BD,2DAA2D;AAC3D,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CA8B9B;AAED,gDAAgD;AAChD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAUhC;AAED,6DAA6D;AAC7D,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,OAAO,CAAC,CAYlB"}

package/dist/duckdb/projectMetadata.js

@@ -0,0 +1,222 @@
+import { randomUUID } from "node:crypto";
+import { METADATA_LIMITS, MetadataLimitError, clampMetadataLimit, parseSavedAnalysisQuery, } from "../metadata.js";
+const ANNOTATION_COLS = `id, project_id, target_kind, target_id,
+       epoch_ms(since) AS since_ms, epoch_ms(until) AS until_ms, text,
+       author_kind, author_key_id,
+       epoch_ms(created_at) AS created_at_ms, epoch_ms(updated_at) AS updated_at_ms`;
+function toDate(ms) {
+    return ms == null ? null : new Date(Number(ms));
+}
+function rowToAnnotation(row) {
+    return {
+        id: row.id,
+        projectId: row.project_id,
+        targetKind: row.target_kind,
+        targetId: row.target_id,
+        since: toDate(row.since_ms),
+        until: toDate(row.until_ms),
+        text: row.text,
+        authorKind: row.author_kind,
+        authorKeyId: row.author_key_id,
+        createdAt: new Date(Number(row.created_at_ms)),
+        updatedAt: new Date(Number(row.updated_at_ms)),
+    };
+}
+/** `SELECT count(*)` as a plain number, whatever width the driver returns. */
+async function countRows(client, sql, params) {
+    const rows = await client.all(sql, params);
+    return Number(rows[0]?.n ?? 0);
+}
+/**
+ * Create one annotation and return the stored row.
+ *
+ * Refuses with {@link MetadataLimitError} once the project holds
+ * {@link METADATA_LIMITS.annotations} rows: metadata is curated notes, not an
+ * unbounded write surface, and refusing is more honest than evicting somebody
+ * else's note.
+ */
+export async function createAnnotation(client, projectId, input) {
+    const count = await countRows(client, `SELECT count(*) AS n FROM annotations WHERE project_id = $projectId`, { projectId });
+    if (count >= METADATA_LIMITS.annotations) {
+        throw new MetadataLimitError("annotations", METADATA_LIMITS.annotations);
+    }
+    const { annotation } = input;
+    const id = randomUUID();
+    await client.run(`INSERT INTO annotations
+       (id, project_id, target_kind, target_id, since, until, text,
+        author_kind, author_key_id, created_at, updated_at)
+     VALUES ($id, $projectId, $targetKind, $targetId,
+             CASE WHEN $sinceUs IS NULL THEN NULL ELSE make_timestamp($sinceUs) END,
+             CASE WHEN $untilUs IS NULL THEN NULL ELSE make_timestamp($untilUs) END,
+             $text, $authorKind, $authorKeyId, now(), now())`, {
+        id,
+        projectId,
+        targetKind: annotation.targetKind,
+        targetId: annotation.targetId ?? null,
+        sinceUs: annotation.since == null ? null : annotation.since * 1000,
+        untilUs: annotation.until == null ? null : annotation.until * 1000,
+        text: annotation.text,
+        authorKind: input.authorKind,
+        authorKeyId: input.authorKeyId,
+    });
+    const rows = await client.all(`SELECT ${ANNOTATION_COLS} FROM annotations WHERE id = $id`, { id });
+    // The row was just inserted on the same connection, so it is always there.
+    return rowToAnnotation(rows[0]);
+}
+/**
+ * A project's annotations, newest first.
+ *
+ * The optional `since`/`until` bounds are an **overlap** filter, not a
+ * containment one: an annotation matches when its period intersects the
+ * requested window, and a standing note (no period at all) always matches
+ * because it is about the project rather than about a moment.
+ */
+export async function listAnnotations(client, projectId, opts = {}) {
+    const limit = clampMetadataLimit(opts.limit);
+    const params = { projectId };
+    const where = ["project_id = $projectId"];
+    if (opts.targetKind != null) {
+        where.push("target_kind = $targetKind");
+        params.targetKind = opts.targetKind;
+    }
+    if (opts.targetId != null) {
+        where.push("target_id = $targetId");
+        params.targetId = opts.targetId;
+    }
+    if (opts.since != null) {
+        where.push("(until IS NULL OR until >= make_timestamp($since))");
+        params.since = Math.trunc(opts.since) * 1000;
+    }
+    if (opts.until != null) {
+        where.push("(since IS NULL OR since < make_timestamp($until))");
+        params.until = Math.trunc(opts.until) * 1000;
+    }
+    const rows = await client.all(`SELECT ${ANNOTATION_COLS}
+       FROM annotations
+      WHERE ${where.join(" AND ")}
+      ORDER BY created_at DESC, id DESC
+      LIMIT ${limit}`, params);
+    return rows.map(rowToAnnotation);
+}
+/**
+ * Delete one annotation of this project. Returns whether a row was removed, so
+ * the route can answer 404 for an id that is not there (or belongs to another
+ * project — the two are indistinguishable to the caller, deliberately).
+ */
+export async function deleteAnnotation(client, projectId, id) {
+    const before = await countRows(client, `SELECT count(*) AS n FROM annotations WHERE project_id = $projectId AND id = $id`, { projectId, id });
+    if (before === 0)
+        return false;
+    await client.run(`DELETE FROM annotations WHERE project_id = $projectId AND id = $id`, {
+        projectId,
+        id,
+    });
+    return true;
+}
+function rowToGlossaryEntry(row) {
+    return {
+        projectId: row.project_id,
+        term: row.term,
+        meaning: row.meaning,
+        updatedAt: new Date(Number(row.updated_at_ms)),
+    };
+}
+/**
+ * Upsert one glossary entry and return the stored row. Idempotent: the term is
+ * the identity, so re-defining it replaces the meaning instead of accumulating
+ * duplicates. The per-project cap applies only when a *new* term is added.
+ */
+export async function putGlossaryEntry(client, projectId, input) {
+    const { term, meaning } = input.entry;
+    const existing = await countRows(client, `SELECT count(*) AS n FROM glossary WHERE project_id = $projectId AND term = $term`, { projectId, term });
+    if (existing === 0) {
+        const count = await countRows(client, `SELECT count(*) AS n FROM glossary WHERE project_id = $projectId`, { projectId });
+        if (count >= METADATA_LIMITS.glossary) {
+            throw new MetadataLimitError("glossary", METADATA_LIMITS.glossary);
+        }
+    }
+    await client.run(`INSERT INTO glossary (project_id, term, meaning, updated_at)
+     VALUES ($projectId, $term, $meaning, now())
+     ON CONFLICT (project_id, term)
+     DO UPDATE SET meaning = EXCLUDED.meaning, updated_at = now()`, { projectId, term, meaning });
+    const rows = await client.all(`SELECT project_id, term, meaning, epoch_ms(updated_at) AS updated_at_ms
+       FROM glossary WHERE project_id = $projectId AND term = $term`, { projectId, term });
+    return rowToGlossaryEntry(rows[0]);
+}
+/** A project's whole glossary, ordered by term (stable for diffs and prompts). */
+export async function listGlossary(client, projectId, opts = {}) {
+    const limit = clampMetadataLimit(opts.limit, METADATA_LIMITS.glossary, METADATA_LIMITS.glossary);
+    const rows = await client.all(`SELECT project_id, term, meaning, epoch_ms(updated_at) AS updated_at_ms
+       FROM glossary WHERE project_id = $projectId
+      ORDER BY term
+      LIMIT ${limit}`, { projectId });
+    return rows.map(rowToGlossaryEntry);
+}
+/** Delete one term. Returns whether it existed. */
+export async function deleteGlossaryEntry(client, projectId, term) {
+    const before = await countRows(client, `SELECT count(*) AS n FROM glossary WHERE project_id = $projectId AND term = $term`, { projectId, term });
+    if (before === 0)
+        return false;
+    await client.run(`DELETE FROM glossary WHERE project_id = $projectId AND term = $term`, {
+        projectId,
+        term,
+    });
+    return true;
+}
+const ANALYSIS_COLS = `id, project_id, title, query, conclusion, author_kind, author_key_id,
+       epoch_ms(created_at) AS created_at_ms`;
+function rowToSavedAnalysis(row) {
+    return {
+        id: row.id,
+        projectId: row.project_id,
+        title: row.title,
+        query: parseSavedAnalysisQuery(row.query),
+        conclusion: row.conclusion,
+        authorKind: row.author_kind,
+        authorKeyId: row.author_key_id,
+        createdAt: new Date(Number(row.created_at_ms)),
+    };
+}
+/** Create one saved analysis and return the stored row. */
+export async function createSavedAnalysis(client, projectId, input) {
+    const count = await countRows(client, `SELECT count(*) AS n FROM saved_analyses WHERE project_id = $projectId`, { projectId });
+    if (count >= METADATA_LIMITS.savedAnalyses) {
+        throw new MetadataLimitError("savedAnalyses", METADATA_LIMITS.savedAnalyses);
+    }
+    const { analysis } = input;
+    const id = randomUUID();
+    await client.run(`INSERT INTO saved_analyses
+       (id, project_id, title, query, conclusion, author_kind, author_key_id, created_at)
+     VALUES ($id, $projectId, $title, $query, $conclusion, $authorKind, $authorKeyId, now())`, {
+        id,
+        projectId,
+        title: analysis.title,
+        query: JSON.stringify(analysis.query),
+        conclusion: analysis.conclusion ?? null,
+        authorKind: input.authorKind,
+        authorKeyId: input.authorKeyId,
+    });
+    const rows = await client.all(`SELECT ${ANALYSIS_COLS} FROM saved_analyses WHERE id = $id`, { id });
+    return rowToSavedAnalysis(rows[0]);
+}
+/** A project's saved analyses, newest first. */
+export async function listSavedAnalyses(client, projectId, opts = {}) {
+    const limit = clampMetadataLimit(opts.limit);
+    const rows = await client.all(`SELECT ${ANALYSIS_COLS}
+       FROM saved_analyses WHERE project_id = $projectId
+      ORDER BY created_at DESC, id DESC
+      LIMIT ${limit}`, { projectId });
+    return rows.map(rowToSavedAnalysis);
+}
+/** Delete one saved analysis. Returns whether it existed. */
+export async function deleteSavedAnalysis(client, projectId, id) {
+    const before = await countRows(client, `SELECT count(*) AS n FROM saved_analyses WHERE project_id = $projectId AND id = $id`, { projectId, id });
+    if (before === 0)
+        return false;
+    await client.run(`DELETE FROM saved_analyses WHERE project_id = $projectId AND id = $id`, {
+        projectId,
+        id,
+    });
+    return true;
+}
+//# sourceMappingURL=projectMetadata.js.map

package/dist/duckdb/projectMetadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectMetadata.js","sourceRoot":"","sources":["../../src/duckdb/projectMetadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,GAWxB,MAAM,gBAAgB,CAAC;AA+BxB,MAAM,eAAe,GAAG;;;oFAG4D,CAAC;AAErF,SAAS,MAAM,CAAC,EAAiB;IAC/B,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,GAAkB;IACzC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,UAAU,EAAE,GAAG,CAAC,WAAmC;QACnD,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9C,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,SAAS,CACtB,MAAoB,EACpB,GAAW,EACX,MAA+B;IAE/B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAyB,GAAG,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAoB,EACpB,SAAiB,EACjB,KAA4B;IAE5B,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,MAAM,EACN,qEAAqE,EACrE,EAAE,SAAS,EAAE,CACd,CAAC;IACF,IAAI,KAAK,IAAI,eAAe,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,IAAI,kBAAkB,CAAC,aAAa,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,GAAG,CACd;;;;;;6DAMyD,EACzD;QACE,EAAE;QACF,SAAS;QACT,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,IAAI;QACrC,OAAO,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI;QAClE,OAAO,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI;QAClE,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CACF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,UAAU,eAAe,kCAAkC,EAC3D,EAAE,EAAE,EAAE,CACP,CAAC;IACF,2EAA2E;IAC3E,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,SAAiB,EACjB,OAA+B,EAAE;IAEjC,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,MAAM,GAA4B,EAAE,SAAS,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,UAAU,eAAe;;cAEf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;;cAEnB,KAAK,EAAE,EACjB,MAAM,CACP,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAoB,EACpB,SAAiB,EACjB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,MAAM,EACN,kFAAkF,EAClF,EAAE,SAAS,EAAE,EAAE,EAAE,CAClB,CAAC;IACF,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,MAAM,CAAC,GAAG,CAAC,oEAAoE,EAAE;QACrF,SAAS;QACT,EAAE;KACH,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AASD,SAAS,kBAAkB,CAAC,GAAgB;IAC1C,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAoB,EACpB,SAAiB,EACjB,KAA4B;IAE5B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,MAAM,EACN,mFAAmF,EACnF,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACF,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,MAAM,EACN,kEAAkE,EAClE,EAAE,SAAS,EAAE,CACd,CAAC;QACF,IAAI,KAAK,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM,MAAM,CAAC,GAAG,CACd;;;kEAG8D,EAC9D,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAC7B,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B;oEACgE,EAChE,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;AACtC,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAoB,EACpB,SAAiB,EACjB,OAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B;;;cAGU,KAAK,EAAE,EACjB,EAAE,SAAS,EAAE,CACd,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,SAAiB,EACjB,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,MAAM,EACN,mFAAmF,EACnF,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACF,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,MAAM,CAAC,GAAG,CAAC,qEAAqE,EAAE;QACtF,SAAS;QACT,IAAI;KACL,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAaD,MAAM,aAAa,GAAG;6CACuB,CAAC;AAE9C,SAAS,kBAAkB,CAAC,GAAqB;IAC/C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC;QACzC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,SAAiB,EACjB,KAA+B;IAE/B,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,MAAM,EACN,wEAAwE,EACxE,EAAE,SAAS,EAAE,CACd,CAAC;IACF,IAAI,KAAK,IAAI,eAAe,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,CAAC,GAAG,CACd;;6FAEyF,EACzF;QACE,EAAE;QACF,SAAS;QACT,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrC,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI;QACvC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CACF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,UAAU,aAAa,qCAAqC,EAC5D,EAAE,EAAE,EAAE,CACP,CAAC;IACF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;AACtC,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,SAAiB,EACjB,OAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAC3B,UAAU,aAAa;;;cAGb,KAAK,EAAE,EACjB,EAAE,SAAS,EAAE,CACd,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,SAAiB,EACjB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,MAAM,EACN,qFAAqF,EACrF,EAAE,SAAS,EAAE,EAAE,EAAE,CAClB,CAAC;IACF,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,MAAM,CAAC,GAAG,CAAC,uEAAuE,EAAE;QACxF,SAAS;QACT,EAAE;KACH,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/duckdb/subscriptions.d.ts

@@ -0,0 +1,45 @@
+import type { Subscription } from "@uptimizr/schema";
+import { type SubscriptionDeliveryOutcome, type SubscriptionEventInput, type SubscriptionEventQueryOptions, type SubscriptionEventRecord, type SubscriptionRecord } from "../subscriptions.js";
+import type { DuckdbClient } from "./client.js";
+/** A project's subscriptions, oldest first. */
+export declare function listSubscriptions(client: DuckdbClient, projectId: string): Promise<SubscriptionRecord[]>;
+/** Every enabled subscription across every project — the scheduler's resume read. */
+export declare function listEnabledSubscriptions(client: DuckdbClient, limit?: number): Promise<SubscriptionRecord[]>;
+/** One subscription, or `null` when it does not exist in this project. */
+export declare function getSubscription(client: DuckdbClient, projectId: string, id: string): Promise<SubscriptionRecord | null>;
+/**
+ * Store a new subscription.
+ *
+ * The per-project cap is checked and the row inserted inside one transaction on
+ * the exclusive connection, so two concurrent creates cannot both read
+ * `count = 99` and both insert.
+ */
+export declare function createSubscription(client: DuckdbClient, projectId: string, sub: Subscription): Promise<SubscriptionRecord>;
+/** Enable or disable one subscription. `null` when it does not exist. */
+export declare function setSubscriptionEnabled(client: DuckdbClient, projectId: string, id: string, enabled: boolean): Promise<SubscriptionRecord | null>;
+/** Delete a subscription and its firings. `false` when it did not exist. */
+export declare function deleteSubscription(client: DuckdbClient, projectId: string, id: string): Promise<boolean>;
+/**
+ * Write back what a delivery attempt learned. Each field is optional, so a
+ * successful delivery (`firedAt`, `failures: 0`, `lastError: null`) and a failed
+ * one (`lastError`, `failures: n`) use the same call.
+ */
+export declare function recordSubscriptionOutcome(client: DuckdbClient, projectId: string, id: string, outcome: SubscriptionDeliveryOutcome): Promise<void>;
+/**
+ * The webhook signing secret for one subscription, or `null`.
+ *
+ * The only path that reads the column. Everything else — the list, the get, the
+ * API responses — selects {@link SELECT_COLS}, which deliberately omits it.
+ */
+export declare function getWebhookSecret(client: DuckdbClient, projectId: string, id: string): Promise<string | null>;
+/**
+ * Append one firing and drop everything past the retained window.
+ *
+ * The trim is a `DELETE … WHERE "at" < (the Nth newest)` rather than a row-number
+ * window, because DuckDB will not delete from a CTE over the same table. Both
+ * statements run in one transaction, so the bound is never observed broken.
+ */
+export declare function recordSubscriptionEvent(client: DuckdbClient, entry: SubscriptionEventInput): Promise<void>;
+/** A subscription's recent firings, newest first. */
+export declare function listSubscriptionEvents(client: DuckdbClient, projectId: string, id: string, opts?: SubscriptionEventQueryOptions): Promise<SubscriptionEventRecord[]>;
+//# sourceMappingURL=subscriptions.d.ts.map

package/dist/duckdb/subscriptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptions.d.ts","sourceRoot":"","sources":["../../src/duckdb/subscriptions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAUL,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,uBAAuB,EAE5B,KAAK,kBAAkB,EAExB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA6BhD,+CAA+C;AAC/C,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQ/B;AAED,qFAAqF;AACrF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,YAAY,EACpB,KAAK,GAAE,MAAkC,GACxC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAS/B;AAED,0EAA0E;AAC1E,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAQpC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,YAAY,GAChB,OAAO,CAAC,kBAAkB,CAAC,CAyC7B;AAED,yEAAyE;AACzE,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAOpC;AAED,4EAA4E;AAC5E,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOxB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,qDAAqD;AACrD,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,6BAAkC,GACvC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAUpC"}

package/dist/duckdb/subscriptions.js

@@ -0,0 +1,202 @@
+import { randomUUID } from "node:crypto";
+import { MAX_ENABLED_SUBSCRIPTIONS, MAX_SUBSCRIPTIONS_PER_PROJECT, MAX_SUBSCRIPTION_EVENTS, SubscriptionLimitError, clampEventLimit, clampSubscriptionError, rowToSubscription, rowToSubscriptionEvent, toSubscriptionColumns, } from "../subscriptions.js";
+/**
+ * **Conditional subscriptions** for the DuckDB single-file store (ADR 0051 §6 /
+ * sketch §F.1–F.2).
+ *
+ * Two tables, both plain metadata — no event type is added and
+ * `@uptimizr/schema`'s event union is untouched:
+ *
+ * - `subscriptions` — one row per standing question, keyed by `id` and scoped to
+ *   a project. The declaration itself lives in a JSON `config` column; the
+ *   scalars beside it are exactly what the store must filter, order or update.
+ * - `subscription_events` — the bounded firing log, last
+ *   {@link MAX_SUBSCRIPTION_EVENTS} per subscription. The trim runs inside the
+ *   same transaction as the insert, so the bound holds even if the collector
+ *   dies between the two.
+ *
+ * `at` is a DuckDB keyword, so it is double-quoted here and in the migration —
+ * the column name matches the other three engines, where it needs no quoting.
+ */
+const SELECT_COLS = `id, project_id, name, metric, config, enabled,
+       epoch_ms(created_at) AS created_at_ms,
+       epoch_ms(updated_at) AS updated_at_ms,
+       epoch_ms(last_fired_at) AS last_fired_at_ms,
+       last_error, failures`;
+const EVENT_COLS = `id, subscription_id, project_id, epoch_ms("at") AS at_ms, payload`;
+/** A project's subscriptions, oldest first. */
+export async function listSubscriptions(client, projectId) {
+    const rows = await client.all(`SELECT ${SELECT_COLS} FROM subscriptions
+      WHERE project_id = $projectId
+      ORDER BY created_at, id`, { projectId });
+    return rows.map(rowToSubscription);
+}
+/** Every enabled subscription across every project — the scheduler's resume read. */
+export async function listEnabledSubscriptions(client, limit = MAX_ENABLED_SUBSCRIPTIONS) {
+    const capped = Math.min(Math.max(Math.trunc(limit), 1), MAX_ENABLED_SUBSCRIPTIONS);
+    const rows = await client.all(`SELECT ${SELECT_COLS} FROM subscriptions
+      WHERE enabled
+      ORDER BY created_at, id
+      LIMIT ${capped}`);
+    return rows.map(rowToSubscription);
+}
+/** One subscription, or `null` when it does not exist in this project. */
+export async function getSubscription(client, projectId, id) {
+    const rows = await client.all(`SELECT ${SELECT_COLS} FROM subscriptions
+      WHERE project_id = $projectId AND id = $id`, { projectId, id });
+    const row = rows[0];
+    return row == null ? null : rowToSubscription(row);
+}
+/**
+ * Store a new subscription.
+ *
+ * The per-project cap is checked and the row inserted inside one transaction on
+ * the exclusive connection, so two concurrent creates cannot both read
+ * `count = 99` and both insert.
+ */
+export async function createSubscription(client, projectId, sub) {
+    const id = `sub_${randomUUID().replace(/-/g, "").slice(0, 24)}`;
+    const cols = toSubscriptionColumns(sub);
+    await client.exclusive(async (con) => {
+        await con.run("BEGIN TRANSACTION");
+        try {
+            const reader = await con.runAndReadAll(`SELECT count(*) AS n FROM subscriptions WHERE project_id = $projectId`, { projectId });
+            const counted = reader.getRowObjects()[0]?.n;
+            if (Number(counted ?? 0) >= MAX_SUBSCRIPTIONS_PER_PROJECT) {
+                throw new SubscriptionLimitError();
+            }
+            await con.run(`INSERT INTO subscriptions
+           (id, project_id, name, metric, config, webhook_secret, enabled,
+            created_at, updated_at, last_fired_at, last_error, failures)
+         VALUES ($id, $projectId, $name, $metric, $config, $webhookSecret, $enabled,
+                 now(), now(), NULL, NULL, 0)`, {
+                id,
+                projectId,
+                name: cols.name,
+                metric: cols.metric,
+                config: cols.config,
+                webhookSecret: cols.webhookSecret,
+                enabled: cols.enabled,
+            });
+            await con.run("COMMIT");
+        }
+        catch (err) {
+            await con.run("ROLLBACK");
+            throw err;
+        }
+    });
+    const stored = await getSubscription(client, projectId, id);
+    // The row was just inserted in a committed transaction; a null here would mean
+    // the store lost it, which is a fault, not an empty result.
+    if (stored == null)
+        throw new Error(`subscription ${id} vanished after insert`);
+    return stored;
+}
+/** Enable or disable one subscription. `null` when it does not exist. */
+export async function setSubscriptionEnabled(client, projectId, id, enabled) {
+    await client.run(`UPDATE subscriptions SET enabled = $enabled, updated_at = now()
+      WHERE project_id = $projectId AND id = $id`, { projectId, id, enabled });
+    return getSubscription(client, projectId, id);
+}
+/** Delete a subscription and its firings. `false` when it did not exist. */
+export async function deleteSubscription(client, projectId, id) {
+    const existing = await getSubscription(client, projectId, id);
+    if (existing == null)
+        return false;
+    await client.exclusive(async (con) => {
+        await con.run("BEGIN TRANSACTION");
+        try {
+            await con.run(`DELETE FROM subscription_events WHERE project_id = $projectId AND subscription_id = $id`, { projectId, id });
+            await con.run(`DELETE FROM subscriptions WHERE project_id = $projectId AND id = $id`, {
+                projectId,
+                id,
+            });
+            await con.run("COMMIT");
+        }
+        catch (err) {
+            await con.run("ROLLBACK");
+            throw err;
+        }
+    });
+    return true;
+}
+/**
+ * Write back what a delivery attempt learned. Each field is optional, so a
+ * successful delivery (`firedAt`, `failures: 0`, `lastError: null`) and a failed
+ * one (`lastError`, `failures: n`) use the same call.
+ */
+export async function recordSubscriptionOutcome(client, projectId, id, outcome) {
+    const sets = ["updated_at = now()"];
+    const params = { projectId, id };
+    if (outcome.firedAt != null) {
+        sets.push("last_fired_at = make_timestamp($firedAtUs)");
+        params.firedAtUs = outcome.firedAt.getTime() * 1000;
+    }
+    if (outcome.lastError !== undefined) {
+        sets.push("last_error = $lastError");
+        params.lastError = outcome.lastError == null ? null : clampSubscriptionError(outcome.lastError);
+    }
+    if (outcome.failures !== undefined) {
+        sets.push("failures = CAST($failures AS BIGINT)");
+        params.failures = Math.max(0, Math.trunc(outcome.failures));
+    }
+    await client.run(`UPDATE subscriptions SET ${sets.join(", ")}
+      WHERE project_id = $projectId AND id = $id`, params);
+}
+/**
+ * The webhook signing secret for one subscription, or `null`.
+ *
+ * The only path that reads the column. Everything else — the list, the get, the
+ * API responses — selects {@link SELECT_COLS}, which deliberately omits it.
+ */
+export async function getWebhookSecret(client, projectId, id) {
+    const rows = await client.all(`SELECT webhook_secret FROM subscriptions WHERE project_id = $projectId AND id = $id`, { projectId, id });
+    const secret = rows[0]?.webhook_secret;
+    return secret == null || secret === "" ? null : secret;
+}
+/**
+ * Append one firing and drop everything past the retained window.
+ *
+ * The trim is a `DELETE … WHERE "at" < (the Nth newest)` rather than a row-number
+ * window, because DuckDB will not delete from a CTE over the same table. Both
+ * statements run in one transaction, so the bound is never observed broken.
+ */
+export async function recordSubscriptionEvent(client, entry) {
+    const at = entry.at ?? new Date();
+    await client.exclusive(async (con) => {
+        await con.run("BEGIN TRANSACTION");
+        try {
+            await con.run(`INSERT INTO subscription_events (id, subscription_id, project_id, "at", payload)
+         VALUES ($id, $subscriptionId, $projectId, make_timestamp($atUs), $payload)`, {
+                id: randomUUID(),
+                subscriptionId: entry.subscriptionId,
+                projectId: entry.projectId,
+                atUs: at.getTime() * 1000,
+                payload: JSON.stringify(entry.payload),
+            });
+            await con.run(`DELETE FROM subscription_events
+          WHERE subscription_id = $subscriptionId
+            AND id NOT IN (
+              SELECT id FROM subscription_events
+               WHERE subscription_id = $subscriptionId
+               ORDER BY "at" DESC, id DESC
+               LIMIT ${MAX_SUBSCRIPTION_EVENTS}
+            )`, { subscriptionId: entry.subscriptionId });
+            await con.run("COMMIT");
+        }
+        catch (err) {
+            await con.run("ROLLBACK");
+            throw err;
+        }
+    });
+}
+/** A subscription's recent firings, newest first. */
+export async function listSubscriptionEvents(client, projectId, id, opts = {}) {
+    const limit = clampEventLimit(opts.limit);
+    const rows = await client.all(`SELECT ${EVENT_COLS} FROM subscription_events
+      WHERE project_id = $projectId AND subscription_id = $id
+      ORDER BY "at" DESC, id DESC
+      LIMIT ${limit}`, { projectId, id });
+    return rows.map(rowToSubscriptionEvent);
+}
+//# sourceMappingURL=subscriptions.js.map