bopodev-db 0.1.27 → 0.1.29

package/src/migrations/0000_initial.sql

@@ -0,0 +1,389 @@
+CREATE TABLE "companies" (
+  "id" text PRIMARY KEY NOT NULL,
+  "name" text NOT NULL,
+  "mission" text,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "projects" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "name" text NOT NULL,
+  "description" text,
+  "status" text DEFAULT 'planned' NOT NULL,
+  "planned_start_at" timestamp,
+  "monthly_budget_usd" numeric(12, 4) DEFAULT 100 NOT NULL,
+  "used_budget_usd" numeric(12, 4) DEFAULT 0 NOT NULL,
+  "budget_window_start_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "execution_workspace_policy" text,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "project_workspaces" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "project_id" text NOT NULL REFERENCES "projects"("id") ON DELETE CASCADE,
+  "name" text NOT NULL,
+  "cwd" text,
+  "repo_url" text,
+  "repo_ref" text,
+  "is_primary" boolean DEFAULT false NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "goals" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "project_id" text REFERENCES "projects"("id") ON DELETE SET NULL,
+  "parent_goal_id" text,
+  "level" text NOT NULL,
+  "title" text NOT NULL,
+  "description" text,
+  "status" text DEFAULT 'draft' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "agents" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "manager_agent_id" text,
+  "role" text NOT NULL,
+  "role_key" text,
+  "title" text,
+  "name" text NOT NULL,
+  "provider_type" text NOT NULL,
+  "status" text DEFAULT 'idle' NOT NULL,
+  "heartbeat_cron" text NOT NULL,
+  "monthly_budget_usd" numeric(12, 4) DEFAULT 0 NOT NULL,
+  "used_budget_usd" numeric(12, 4) DEFAULT 0 NOT NULL,
+  "token_usage" integer DEFAULT 0 NOT NULL,
+  "can_hire_agents" boolean DEFAULT false NOT NULL,
+  "avatar_seed" text DEFAULT '' NOT NULL,
+  "runtime_command" text,
+  "runtime_args_json" text DEFAULT '[]' NOT NULL,
+  "runtime_cwd" text,
+  "runtime_env_json" text DEFAULT '{}' NOT NULL,
+  "runtime_model" text,
+  "runtime_thinking_effort" text DEFAULT 'auto' NOT NULL,
+  "bootstrap_prompt" text,
+  "runtime_timeout_sec" integer DEFAULT 0 NOT NULL,
+  "interrupt_grace_sec" integer DEFAULT 15 NOT NULL,
+  "run_policy_json" text DEFAULT '{}' NOT NULL,
+  "state_blob" text DEFAULT '{}' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "issues" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "project_id" text NOT NULL REFERENCES "projects"("id") ON DELETE CASCADE,
+  "parent_issue_id" text,
+  "title" text NOT NULL,
+  "body" text,
+  "status" text DEFAULT 'todo' NOT NULL,
+  "priority" text DEFAULT 'none' NOT NULL,
+  "assignee_agent_id" text,
+  "labels_json" text DEFAULT '[]' NOT NULL,
+  "tags_json" text DEFAULT '[]' NOT NULL,
+  "is_claimed" boolean DEFAULT false NOT NULL,
+  "claimed_by_heartbeat_run_id" text,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "issue_comments" (
+  "id" text PRIMARY KEY NOT NULL,
+  "issue_id" text NOT NULL REFERENCES "issues"("id") ON DELETE CASCADE,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "author_type" text NOT NULL,
+  "author_id" text,
+  "recipients_json" text DEFAULT '[]' NOT NULL,
+  "run_id" text,
+  "body" text NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "issue_attachments" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "issue_id" text NOT NULL REFERENCES "issues"("id") ON DELETE CASCADE,
+  "project_id" text NOT NULL REFERENCES "projects"("id") ON DELETE CASCADE,
+  "file_name" text NOT NULL,
+  "mime_type" text,
+  "file_size_bytes" integer NOT NULL,
+  "relative_path" text NOT NULL,
+  "uploaded_by_actor_type" text DEFAULT 'human' NOT NULL,
+  "uploaded_by_actor_id" text,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "activity_logs" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "issue_id" text REFERENCES "issues"("id") ON DELETE SET NULL,
+  "actor_type" text NOT NULL,
+  "actor_id" text,
+  "event_type" text NOT NULL,
+  "payload_json" text DEFAULT '{}' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "heartbeat_runs" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "agent_id" text NOT NULL REFERENCES "agents"("id") ON DELETE CASCADE,
+  "status" text DEFAULT 'started' NOT NULL,
+  "started_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "finished_at" timestamp,
+  "message" text
+);
+--> statement-breakpoint
+CREATE TABLE "heartbeat_run_queue" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "agent_id" text NOT NULL REFERENCES "agents"("id") ON DELETE CASCADE,
+  "job_type" text NOT NULL,
+  "payload_json" text DEFAULT '{}' NOT NULL,
+  "status" text DEFAULT 'pending' NOT NULL,
+  "priority" integer DEFAULT 100 NOT NULL,
+  "idempotency_key" text,
+  "available_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "attempt_count" integer DEFAULT 0 NOT NULL,
+  "max_attempts" integer DEFAULT 10 NOT NULL,
+  "last_error" text,
+  "started_at" timestamp,
+  "finished_at" timestamp,
+  "heartbeat_run_id" text REFERENCES "heartbeat_runs"("id") ON DELETE SET NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "heartbeat_run_messages" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "run_id" text NOT NULL REFERENCES "heartbeat_runs"("id") ON DELETE CASCADE,
+  "sequence" integer NOT NULL,
+  "kind" text NOT NULL,
+  "label" text,
+  "text" text,
+  "payload_json" text,
+  "signal_level" text,
+  "group_key" text,
+  "source" text,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "approval_requests" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "requested_by_agent_id" text,
+  "action" text NOT NULL,
+  "payload_json" text DEFAULT '{}' NOT NULL,
+  "status" text DEFAULT 'pending' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "resolved_at" timestamp
+);
+--> statement-breakpoint
+CREATE TABLE "approval_inbox_states" (
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "actor_id" text NOT NULL,
+  "approval_id" text NOT NULL REFERENCES "approval_requests"("id") ON DELETE CASCADE,
+  "seen_at" timestamp,
+  "dismissed_at" timestamp,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  PRIMARY KEY ("company_id", "actor_id", "approval_id")
+);
+--> statement-breakpoint
+CREATE TABLE "attention_inbox_states" (
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "actor_id" text NOT NULL,
+  "item_key" text NOT NULL,
+  "seen_at" timestamp,
+  "acknowledged_at" timestamp,
+  "dismissed_at" timestamp,
+  "resolved_at" timestamp,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  PRIMARY KEY ("company_id", "actor_id", "item_key")
+);
+--> statement-breakpoint
+CREATE TABLE "cost_ledger" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "run_id" text REFERENCES "heartbeat_runs"("id") ON DELETE SET NULL,
+  "project_id" text REFERENCES "projects"("id") ON DELETE SET NULL,
+  "issue_id" text REFERENCES "issues"("id") ON DELETE SET NULL,
+  "agent_id" text REFERENCES "agents"("id") ON DELETE SET NULL,
+  "provider_type" text NOT NULL,
+  "runtime_model_id" text,
+  "pricing_provider_type" text,
+  "pricing_model_id" text,
+  "pricing_source" text,
+  "token_input" integer DEFAULT 0 NOT NULL,
+  "token_output" integer DEFAULT 0 NOT NULL,
+  "usd_cost" numeric(12, 6) DEFAULT 0 NOT NULL,
+  "usd_cost_status" text,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+DROP TABLE IF EXISTS "model_pricing";
+--> statement-breakpoint
+CREATE TABLE "audit_events" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "actor_type" text NOT NULL,
+  "actor_id" text,
+  "event_type" text NOT NULL,
+  "entity_type" text NOT NULL,
+  "entity_id" text NOT NULL,
+  "correlation_id" text,
+  "payload_json" text DEFAULT '{}' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "plugins" (
+  "id" text PRIMARY KEY NOT NULL,
+  "name" text NOT NULL,
+  "version" text NOT NULL,
+  "kind" text NOT NULL,
+  "runtime_type" text NOT NULL,
+  "runtime_entrypoint" text NOT NULL,
+  "hooks_json" text DEFAULT '[]' NOT NULL,
+  "capabilities_json" text DEFAULT '[]' NOT NULL,
+  "manifest_json" text DEFAULT '{}' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "templates" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "slug" text NOT NULL,
+  "name" text NOT NULL,
+  "description" text,
+  "current_version" text DEFAULT '1.0.0' NOT NULL,
+  "status" text DEFAULT 'draft' NOT NULL,
+  "visibility" text DEFAULT 'company' NOT NULL,
+  "variables_json" text DEFAULT '[]' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "template_versions" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "template_id" text NOT NULL REFERENCES "templates"("id") ON DELETE CASCADE,
+  "version" text NOT NULL,
+  "manifest_json" text DEFAULT '{}' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "template_installs" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "template_id" text REFERENCES "templates"("id") ON DELETE SET NULL,
+  "template_version_id" text REFERENCES "template_versions"("id") ON DELETE SET NULL,
+  "status" text DEFAULT 'applied' NOT NULL,
+  "summary_json" text DEFAULT '{}' NOT NULL,
+  "variables_json" text DEFAULT '{}' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "plugin_configs" (
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "plugin_id" text NOT NULL REFERENCES "plugins"("id") ON DELETE CASCADE,
+  "enabled" boolean DEFAULT false NOT NULL,
+  "priority" integer DEFAULT 100 NOT NULL,
+  "config_json" text DEFAULT '{}' NOT NULL,
+  "granted_capabilities_json" text DEFAULT '[]' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  "updated_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  PRIMARY KEY ("company_id", "plugin_id")
+);
+--> statement-breakpoint
+CREATE TABLE "plugin_runs" (
+  "id" text PRIMARY KEY NOT NULL,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "run_id" text REFERENCES "heartbeat_runs"("id") ON DELETE CASCADE,
+  "plugin_id" text NOT NULL REFERENCES "plugins"("id") ON DELETE CASCADE,
+  "hook" text NOT NULL,
+  "status" text NOT NULL,
+  "duration_ms" integer DEFAULT 0 NOT NULL,
+  "error" text,
+  "diagnostics_json" text DEFAULT '{}' NOT NULL,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "agent_issue_labels" (
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "issue_id" text NOT NULL REFERENCES "issues"("id") ON DELETE CASCADE,
+  "label" text NOT NULL,
+  PRIMARY KEY ("company_id", "issue_id", "label")
+);
+--> statement-breakpoint
+CREATE INDEX "idx_project_workspaces_company_project"
+  ON "project_workspaces" ("company_id", "project_id", "is_primary", "created_at");
+--> statement-breakpoint
+CREATE INDEX "idx_issues_company_status"
+  ON "issues" ("company_id", "status", "updated_at");
+--> statement-breakpoint
+CREATE INDEX "idx_issues_assignee_claim_priority"
+  ON "issues" ("company_id", "assignee_agent_id", "is_claimed", "status", "priority", "updated_at");
+--> statement-breakpoint
+CREATE INDEX "idx_issue_attachments_company_issue"
+  ON "issue_attachments" ("company_id", "issue_id", "created_at");
+--> statement-breakpoint
+CREATE INDEX "idx_issue_attachments_company_project"
+  ON "issue_attachments" ("company_id", "project_id", "created_at");
+--> statement-breakpoint
+CREATE INDEX "idx_audit_events_company_created"
+  ON "audit_events" ("company_id", "created_at");
+--> statement-breakpoint
+CREATE INDEX "idx_cost_ledger_company_created"
+  ON "cost_ledger" ("company_id", "created_at");
+--> statement-breakpoint
+CREATE UNIQUE INDEX "idx_heartbeat_runs_single_started"
+  ON "heartbeat_runs" ("company_id", "agent_id")
+  WHERE "status" = 'started';
+--> statement-breakpoint
+CREATE INDEX "idx_heartbeat_run_queue_status_available_priority"
+  ON "heartbeat_run_queue" ("company_id", "status", "available_at", "priority", "created_at");
+--> statement-breakpoint
+CREATE INDEX "idx_heartbeat_run_queue_agent_status"
+  ON "heartbeat_run_queue" ("company_id", "agent_id", "status", "available_at", "created_at");
+--> statement-breakpoint
+CREATE UNIQUE INDEX "idx_heartbeat_run_queue_idempotency"
+  ON "heartbeat_run_queue" ("company_id", "agent_id", "idempotency_key")
+  WHERE "idempotency_key" IS NOT NULL AND btrim("idempotency_key") <> '';
+--> statement-breakpoint
+CREATE INDEX "idx_heartbeat_run_messages_company_run_sequence"
+  ON "heartbeat_run_messages" ("company_id", "run_id", "sequence");
+--> statement-breakpoint
+CREATE INDEX "idx_heartbeat_run_messages_company_created"
+  ON "heartbeat_run_messages" ("company_id", "created_at");
+--> statement-breakpoint
+CREATE INDEX "idx_approval_inbox_states_company_actor_updated"
+  ON "approval_inbox_states" ("company_id", "actor_id", "updated_at");
+--> statement-breakpoint
+CREATE INDEX "idx_attention_inbox_states_company_actor_updated"
+  ON "attention_inbox_states" ("company_id", "actor_id", "updated_at");
+--> statement-breakpoint
+CREATE INDEX "idx_plugin_configs_company_enabled_priority"
+  ON "plugin_configs" ("company_id", "enabled", "priority", "plugin_id");
+--> statement-breakpoint
+CREATE INDEX "idx_plugin_runs_company_created"
+  ON "plugin_runs" ("company_id", "created_at");
+--> statement-breakpoint
+CREATE UNIQUE INDEX "idx_templates_company_slug"
+  ON "templates" ("company_id", "slug");
+--> statement-breakpoint
+CREATE INDEX "idx_template_versions_company_template_created"
+  ON "template_versions" ("company_id", "template_id", "created_at");
+--> statement-breakpoint
+CREATE INDEX "idx_template_installs_company_created"
+  ON "template_installs" ("company_id", "created_at");

package/src/migrations/0001_issues_external_link.sql

@@ -0,0 +1 @@
+ALTER TABLE "issues" ADD COLUMN "external_link" text;

package/src/migrations/0002_issues_goal_goals_owner_agent.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "goals" ADD COLUMN "owner_agent_id" text REFERENCES "agents"("id") ON DELETE SET NULL;
+ALTER TABLE "issues" ADD COLUMN "goal_id" text REFERENCES "goals"("id") ON DELETE SET NULL;

package/src/migrations/0003_issue_goals_junction.sql

@@ -0,0 +1,12 @@
+CREATE TABLE "issue_goals" (
+  "issue_id" text NOT NULL REFERENCES "issues"("id") ON DELETE CASCADE,
+  "goal_id" text NOT NULL REFERENCES "goals"("id") ON DELETE CASCADE,
+  "company_id" text NOT NULL REFERENCES "companies"("id") ON DELETE CASCADE,
+  "created_at" timestamp DEFAULT CURRENT_TIMESTAMP NOT NULL,
+  PRIMARY KEY ("issue_id", "goal_id")
+);
+
+INSERT INTO "issue_goals" ("issue_id", "goal_id", "company_id")
+SELECT "id", "goal_id", "company_id" FROM "issues" WHERE "goal_id" IS NOT NULL;
+
+ALTER TABLE "issues" DROP COLUMN "goal_id";

package/src/migrations/meta/_journal.json

@@ -0,0 +1,34 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1742500000000,
+      "tag": "0000_initial",
+      "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "7",
+      "when": 1742600000000,
+      "tag": "0001_issues_external_link",
+      "breakpoints": true
+    },
+    {
+      "idx": 2,
+      "version": "7",
+      "when": 1742700000000,
+      "tag": "0002_issues_goal_goals_owner_agent",
+      "breakpoints": true
+    },
+    {
+      "idx": 3,
+      "version": "7",
+      "when": 1742800000000,
+      "tag": "0003_issue_goals_junction",
+      "breakpoints": true
+    }
+  ]
+}

package/src/ping.ts

@@ -0,0 +1,7 @@
+import { sql } from "drizzle-orm";
+import type { BopoDb } from "./client";
+
+/** Cheap connection liveness check (no table scan). Kept as SQL because Drizzle has no relational API for a table-free SELECT. */
+export async function pingDatabase(db: BopoDb): Promise<void> {
+  await db.execute(sql`SELECT 1`);
+}

package/src/repositories/companies.ts

@@ -0,0 +1,41 @@
+import { desc, eq } from "drizzle-orm";
+import { nanoid } from "nanoid";
+import type { BopoDb } from "../client";
+import { companies } from "../schema";
+import { compactUpdate } from "./helpers";
+
+export async function createCompany(db: BopoDb, input: { name: string; mission?: string | null }) {
+  const id = nanoid(12);
+  await db.insert(companies).values({
+    id,
+    name: input.name,
+    mission: input.mission ?? null
+  });
+  return { id, ...input };
+}
+
+export async function listCompanies(db: BopoDb) {
+  return db.select().from(companies).orderBy(desc(companies.createdAt));
+}
+
+export async function getCompany(db: BopoDb, id: string) {
+  const [row] = await db.select().from(companies).where(eq(companies.id, id)).limit(1);
+  return row ?? null;
+}
+
+export async function updateCompany(
+  db: BopoDb,
+  input: { id: string; name?: string; mission?: string | null }
+) {
+  const [company] = await db
+    .update(companies)
+    .set(compactUpdate({ name: input.name, mission: input.mission }))
+    .where(eq(companies.id, input.id))
+    .returning();
+  return company ?? null;
+}
+
+export async function deleteCompany(db: BopoDb, id: string) {
+  const [deletedCompany] = await db.delete(companies).where(eq(companies.id, id)).returning({ id: companies.id });
+  return Boolean(deletedCompany);
+}

package/src/repositories/helpers.ts

@@ -0,0 +1,104 @@
+import { and, eq } from "drizzle-orm";
+import type { BopoDb } from "../client";
+import { agents, goals, issues, projects, templates } from "../schema";
+
+export class RepositoryValidationError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "RepositoryValidationError";
+  }
+}
+
+export async function assertProjectBelongsToCompany(db: BopoDb, companyId: string, projectId: string) {
+  const [project] = await db
+    .select({ id: projects.id })
+    .from(projects)
+    .where(and(eq(projects.companyId, companyId), eq(projects.id, projectId)))
+    .limit(1);
+  if (!project) {
+    throw new RepositoryValidationError("Project not found for company.");
+  }
+}
+
+export async function assertIssueBelongsToCompany(db: BopoDb, companyId: string, issueId: string) {
+  const [issue] = await db
+    .select({ id: issues.id })
+    .from(issues)
+    .where(and(eq(issues.companyId, companyId), eq(issues.id, issueId)))
+    .limit(1);
+  if (!issue) {
+    throw new RepositoryValidationError("Issue not found for company.");
+  }
+}
+
+export async function assertGoalBelongsToCompany(db: BopoDb, companyId: string, goalId: string) {
+  const [goal] = await db
+    .select({ id: goals.id })
+    .from(goals)
+    .where(and(eq(goals.companyId, companyId), eq(goals.id, goalId)))
+    .limit(1);
+  if (!goal) {
+    throw new RepositoryValidationError("Parent goal not found for company.");
+  }
+}
+
+/** Ensures a goal can be linked to an issue: same company; project-scoped goals must match the issue's project. */
+export async function assertIssueGoalAssignable(
+  db: BopoDb,
+  companyId: string,
+  issueProjectId: string,
+  goalId: string | null | undefined
+) {
+  if (!goalId) {
+    return;
+  }
+  const [goal] = await db
+    .select({ id: goals.id, projectId: goals.projectId })
+    .from(goals)
+    .where(and(eq(goals.companyId, companyId), eq(goals.id, goalId)))
+    .limit(1);
+  if (!goal) {
+    throw new RepositoryValidationError("Goal not found for company.");
+  }
+  if (goal.projectId && goal.projectId !== issueProjectId) {
+    throw new RepositoryValidationError("Goal is scoped to a different project than this issue.");
+  }
+}
+
+/** Validates each goal can be linked to an issue (same company; project goals must match issue project). */
+export async function assertIssueGoalsAssignable(
+  db: BopoDb,
+  companyId: string,
+  issueProjectId: string,
+  goalIds: string[]
+) {
+  for (const goalId of goalIds) {
+    await assertIssueGoalAssignable(db, companyId, issueProjectId, goalId);
+  }
+}
+
+export async function assertAgentBelongsToCompany(db: BopoDb, companyId: string, agentId: string) {
+  const [agent] = await db
+    .select({ id: agents.id })
+    .from(agents)
+    .where(and(eq(agents.companyId, companyId), eq(agents.id, agentId)))
+    .limit(1);
+  if (!agent) {
+    throw new RepositoryValidationError("Agent not found for company.");
+  }
+}
+
+export async function assertTemplateBelongsToCompany(db: BopoDb, companyId: string, templateId: string) {
+  const [template] = await db
+    .select({ id: templates.id })
+    .from(templates)
+    .where(and(eq(templates.companyId, companyId), eq(templates.id, templateId)))
+    .limit(1);
+  if (!template) {
+    throw new RepositoryValidationError("Template not found for company.");
+  }
+}
+
+export function compactUpdate<T extends Record<string, unknown>>(input: T) {
+  return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== undefined));
+}

package/src/repositories/index.ts

@@ -0,0 +1,3 @@
+export * from "./helpers";
+export * from "./companies";
+export * from "./legacy";