ghagga-db 2.0.0

package/README.md

@@ -0,0 +1,17 @@
+# @ghagga/db
+
+Database layer for [GHAGGA](https://github.com/JNZader/ghagga) — AI-powered multi-agent code reviewer.
+
+Provides schema definitions (Drizzle ORM), encryption utilities (AES-256-GCM), and migration tooling for the GHAGGA platform.
+
+## Installation
+
+```bash
+npm install @ghagga/db
+```
+
+> **Note:** This package is primarily used internally by `@ghagga/core` and `@ghagga/cli`. You probably want [`@ghagga/cli`](https://www.npmjs.com/package/@ghagga/cli) instead.
+
+## License
+
+MIT

package/dist/client.d.ts

@@ -0,0 +1,17 @@
+import * as schema from './schema.js';
+export type Database = ReturnType<typeof createDatabase>;
+/**
+ * Create a Drizzle database client from a connection string.
+ * Uses node-postgres (pg) as the driver.
+ */
+export declare function createDatabase(connectionString: string): import("drizzle-orm/node-postgres").NodePgDatabase<typeof schema> & {
+    $client: import("pg").Pool;
+};
+/**
+ * Create a database client from the DATABASE_URL environment variable.
+ * Throws if DATABASE_URL is not set.
+ */
+export declare function createDatabaseFromEnv(): import("drizzle-orm/node-postgres").NodePgDatabase<typeof schema> & {
+    $client: import("pg").Pool;
+};
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,MAAM,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,gBAAgB,EAAE,MAAM;;EAStD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB;;EAMpC"}

package/dist/client.js

@@ -0,0 +1,28 @@
+import { drizzle } from 'drizzle-orm/node-postgres';
+import pg from 'pg';
+import * as schema from './schema.js';
+/**
+ * Create a Drizzle database client from a connection string.
+ * Uses node-postgres (pg) as the driver.
+ */
+export function createDatabase(connectionString) {
+    const pool = new pg.Pool({
+        connectionString,
+        max: 10,
+        idleTimeoutMillis: 30_000,
+        connectionTimeoutMillis: 5_000,
+    });
+    return drizzle(pool, { schema });
+}
+/**
+ * Create a database client from the DATABASE_URL environment variable.
+ * Throws if DATABASE_URL is not set.
+ */
+export function createDatabaseFromEnv() {
+    const url = process.env.DATABASE_URL;
+    if (!url) {
+        throw new Error('DATABASE_URL environment variable is not set');
+    }
+    return createDatabase(url);
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAItC;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,gBAAwB;IACrD,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC;QACvB,gBAAgB;QAChB,GAAG,EAAE,EAAE;QACP,iBAAiB,EAAE,MAAM;QACzB,uBAAuB,EAAE,KAAK;KAC/B,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,19 @@
+/**
+ * AES-256-GCM encryption/decryption for API keys.
+ *
+ * Uses Node.js crypto module (Web Crypto API compatible).
+ * Format: base64(iv[12] + ciphertext + authTag[16])
+ *
+ * ENCRYPTION_KEY env var: 64 hex characters (32 bytes).
+ * Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+ */
+/**
+ * Encrypt plaintext using AES-256-GCM.
+ * @returns base64(iv[12] + ciphertext + authTag[16])
+ */
+export declare function encrypt(plaintext: string): string;
+/**
+ * Decrypt base64(iv[12] + ciphertext + authTag[16]) back to plaintext.
+ */
+export declare function decrypt(base64str: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmBH;;;GAGG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAWjD;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAiBjD"}

package/dist/crypto.js

@@ -0,0 +1,55 @@
+/**
+ * AES-256-GCM encryption/decryption for API keys.
+ *
+ * Uses Node.js crypto module (Web Crypto API compatible).
+ * Format: base64(iv[12] + ciphertext + authTag[16])
+ *
+ * ENCRYPTION_KEY env var: 64 hex characters (32 bytes).
+ * Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+ */
+import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';
+const IV_LENGTH = 12;
+const AUTH_TAG_LENGTH = 16;
+const ALGORITHM = 'aes-256-gcm';
+function getEncryptionKey() {
+    const key = process.env.ENCRYPTION_KEY;
+    if (!key) {
+        throw new Error('ENCRYPTION_KEY environment variable is not set');
+    }
+    if (key.length !== 64 || !/^[0-9a-fA-F]+$/.test(key)) {
+        throw new Error('ENCRYPTION_KEY must be exactly 64 hex characters (32 bytes)');
+    }
+    return Buffer.from(key, 'hex');
+}
+/**
+ * Encrypt plaintext using AES-256-GCM.
+ * @returns base64(iv[12] + ciphertext + authTag[16])
+ */
+export function encrypt(plaintext) {
+    const key = getEncryptionKey();
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv(ALGORITHM, key, iv);
+    const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    // Combine: iv + ciphertext + authTag
+    const combined = Buffer.concat([iv, encrypted, authTag]);
+    return combined.toString('base64');
+}
+/**
+ * Decrypt base64(iv[12] + ciphertext + authTag[16]) back to plaintext.
+ */
+export function decrypt(base64str) {
+    const key = getEncryptionKey();
+    const combined = Buffer.from(base64str, 'base64');
+    if (combined.length < IV_LENGTH + AUTH_TAG_LENGTH) {
+        throw new Error('Invalid encrypted data: too short');
+    }
+    const iv = combined.subarray(0, IV_LENGTH);
+    const authTag = combined.subarray(combined.length - AUTH_TAG_LENGTH);
+    const ciphertext = combined.subarray(IV_LENGTH, combined.length - AUTH_TAG_LENGTH);
+    const decipher = createDecipheriv(ALGORITHM, key, iv);
+    decipher.setAuthTag(authTag);
+    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return decrypted.toString('utf8');
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,SAAS,GAAG,aAAa,CAAC;AAEhC,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB;IACvC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAElC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEpC,qCAAqC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB;IACvC,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAElD,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;IAEnF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from './schema.js';
+export { createDatabase, createDatabaseFromEnv, type Database } from './client.js';
+export * from './queries.js';
+export { encrypt, decrypt } from './crypto.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAC;AAG5B,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGnF,cAAc,cAAc,CAAC;AAG7B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+// Schema
+export * from './schema.js';
+// Client
+export { createDatabase, createDatabaseFromEnv } from './client.js';
+// Queries
+export * from './queries.js';
+// Crypto
+export { encrypt, decrypt } from './crypto.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,SAAS;AACT,cAAc,aAAa,CAAC;AAE5B,SAAS;AACT,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAiB,MAAM,aAAa,CAAC;AAEnF,UAAU;AACV,cAAc,cAAc,CAAC;AAE7B,SAAS;AACT,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/queries.d.ts

@@ -0,0 +1,229 @@
+import type { Database } from './client.js';
+import { type RepoSettings } from './schema.js';
+export declare function upsertInstallation(db: Database, data: {
+    githubInstallationId: number;
+    accountLogin: string;
+    accountType: string;
+}): Promise<{
+    id: number;
+    githubInstallationId: number;
+    accountLogin: string;
+    accountType: string;
+    isActive: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+}>;
+export declare function deactivateInstallation(db: Database, githubInstallationId: number): Promise<void>;
+export declare function upsertRepository(db: Database, data: {
+    githubRepoId: number;
+    installationId: number;
+    fullName: string;
+}): Promise<{
+    id: number;
+    isActive: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    githubRepoId: number;
+    installationId: number;
+    fullName: string;
+    settings: RepoSettings;
+    encryptedApiKey: string | null;
+    llmProvider: string;
+    llmModel: string | null;
+    reviewMode: string;
+}>;
+export declare function getRepoByFullName(db: Database, fullName: string): Promise<{
+    id: number;
+    githubRepoId: number;
+    installationId: number;
+    fullName: string;
+    isActive: boolean;
+    settings: RepoSettings;
+    encryptedApiKey: string | null;
+    llmProvider: string;
+    llmModel: string | null;
+    reviewMode: string;
+    createdAt: Date;
+    updatedAt: Date;
+}>;
+export declare function getRepoByGithubId(db: Database, githubRepoId: number): Promise<{
+    id: number;
+    githubRepoId: number;
+    installationId: number;
+    fullName: string;
+    isActive: boolean;
+    settings: RepoSettings;
+    encryptedApiKey: string | null;
+    llmProvider: string;
+    llmModel: string | null;
+    reviewMode: string;
+    createdAt: Date;
+    updatedAt: Date;
+}>;
+export declare function updateRepoSettings(db: Database, repoId: number, updates: {
+    settings?: RepoSettings;
+    llmProvider?: string;
+    llmModel?: string;
+    reviewMode?: string;
+}): Promise<void>;
+export declare function saveRepoApiKey(db: Database, repoId: number, encryptedKey: string): Promise<void>;
+export declare function removeRepoApiKey(db: Database, repoId: number): Promise<void>;
+export declare function getReposByInstallationId(db: Database, installationId: number): Promise<{
+    id: number;
+    githubRepoId: number;
+    installationId: number;
+    fullName: string;
+    isActive: boolean;
+    settings: RepoSettings;
+    encryptedApiKey: string | null;
+    llmProvider: string;
+    llmModel: string | null;
+    reviewMode: string;
+    createdAt: Date;
+    updatedAt: Date;
+}[]>;
+export declare function saveReview(db: Database, data: {
+    repositoryId: number;
+    prNumber: number;
+    status: string;
+    mode: string;
+    summary?: string;
+    findings?: unknown[];
+    tokensUsed?: number;
+    executionTimeMs?: number;
+    metadata?: unknown;
+}): Promise<{
+    id: number;
+    mode: string;
+    createdAt: Date;
+    repositoryId: number;
+    prNumber: number;
+    status: string;
+    summary: string | null;
+    findings: unknown[] | null;
+    tokensUsed: number | null;
+    executionTimeMs: number | null;
+    metadata: unknown;
+}>;
+export declare function getReviewsByRepoId(db: Database, repositoryId: number, options?: {
+    limit?: number;
+    offset?: number;
+}): Promise<{
+    id: number;
+    repositoryId: number;
+    prNumber: number;
+    status: string;
+    mode: string;
+    summary: string | null;
+    findings: unknown[] | null;
+    tokensUsed: number | null;
+    executionTimeMs: number | null;
+    metadata: unknown;
+    createdAt: Date;
+}[]>;
+export declare function getReviewStats(db: Database, repositoryId: number): Promise<{
+    total: number;
+    passed: number;
+    failed: number;
+    skipped: number;
+}>;
+export declare function createMemorySession(db: Database, data: {
+    project: string;
+    prNumber?: number;
+}): Promise<{
+    id: number;
+    prNumber: number | null;
+    summary: string | null;
+    project: string;
+    startedAt: Date;
+    endedAt: Date | null;
+}>;
+export declare function endMemorySession(db: Database, sessionId: number, summary: string): Promise<void>;
+export declare function getSessionsByProject(db: Database, project: string, options?: {
+    limit?: number;
+}): Promise<{
+    id: number;
+    project: string;
+    prNumber: number | null;
+    summary: string | null;
+    startedAt: Date;
+    endedAt: Date | null;
+}[]>;
+export declare function saveObservation(db: Database, data: {
+    sessionId?: number;
+    project: string;
+    type: string;
+    title: string;
+    content: string;
+    topicKey?: string;
+    filePaths?: string[];
+}): Promise<{
+    id: number;
+    createdAt: Date;
+    updatedAt: Date;
+    project: string;
+    sessionId: number | null;
+    type: string;
+    title: string;
+    content: string;
+    topicKey: string | null;
+    filePaths: string[] | null;
+    contentHash: string | null;
+    revisionCount: number;
+}>;
+/**
+ * Full-text search observations using PostgreSQL tsvector.
+ * The search_observations SQL column is maintained by a trigger.
+ */
+export declare function searchObservations(db: Database, project: string, query: string, options?: {
+    limit?: number;
+    type?: string;
+}): Promise<{
+    id: number;
+    sessionId: number | null;
+    project: string;
+    type: string;
+    title: string;
+    content: string;
+    topicKey: string | null;
+    filePaths: string[] | null;
+    contentHash: string | null;
+    revisionCount: number;
+    createdAt: Date;
+    updatedAt: Date;
+}[]>;
+export declare function getObservationsBySession(db: Database, sessionId: number): Promise<{
+    id: number;
+    sessionId: number | null;
+    project: string;
+    type: string;
+    title: string;
+    content: string;
+    topicKey: string | null;
+    filePaths: string[] | null;
+    contentHash: string | null;
+    revisionCount: number;
+    createdAt: Date;
+    updatedAt: Date;
+}[]>;
+export declare function upsertUserMapping(db: Database, data: {
+    githubUserId: number;
+    githubLogin: string;
+    installationId: number;
+}): Promise<{
+    id: number;
+    createdAt: Date;
+    installationId: number;
+    githubUserId: number;
+    githubLogin: string;
+}>;
+export declare function getInstallationsByUserId(db: Database, githubUserId: number): Promise<{
+    id: number;
+    githubInstallationId: number;
+    accountLogin: string;
+    accountType: string;
+    isActive: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+}[]>;
+//# sourceMappingURL=queries.d.ts.map

package/dist/queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../src/queries.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAQL,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAKrB,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE;IACJ,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;;;;;;;;GAuBF;AAED,wBAAsB,sBAAsB,CAAC,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,iBAKtF;AAID,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;;;;;;;;;;;;;GAqBF;AAED,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;;;;;GAOrE;AAED,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM;;;;;;;;;;;;;GAOzE;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,QAAQ,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IACP,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,iBAMF;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,iBAKtF;AAED,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iBAKlE;AAED,wBAAsB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM;;;;;;;;;;;;;KAKlF;AAID,wBAAsB,UAAU,CAC9B,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;;;;;;;;;;;;GAIF;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,QAAQ,EACZ,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO;;;;;;;;;;;;KAUlD;AAED,wBAAsB,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM;;;;;GAWtE;AAID,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;GAI7C;AAED,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAKtF;AAED,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO;;;;;;;KASjC;AAUD,wBAAsB,eAAe,CACnC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;;;;;;;;;;;;;GA8DF;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO;;;;;;;;;;;;;KA6BhD;AAED,wBAAsB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;;;;;;;;;;;;;KAM7E;AAID,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,QAAQ,EACZ,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;;;;;;GAkBF;AAED,wBAAsB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM;;;;;;;;KAkBhF"}

package/dist/queries.js

@@ -0,0 +1,256 @@
+import { eq, and, desc, sql } from 'drizzle-orm';
+import { installations, repositories, reviews, memorySessions, memoryObservations, githubUserMappings, DEFAULT_REPO_SETTINGS, } from './schema.js';
+import { createHash } from 'node:crypto';
+// ─── Installations ──────────────────────────────────────────────
+export async function upsertInstallation(db, data) {
+    const existing = await db
+        .select()
+        .from(installations)
+        .where(eq(installations.githubInstallationId, data.githubInstallationId))
+        .limit(1);
+    if (existing.length > 0) {
+        await db
+            .update(installations)
+            .set({
+            accountLogin: data.accountLogin,
+            accountType: data.accountType,
+            isActive: true,
+            updatedAt: new Date(),
+        })
+            .where(eq(installations.githubInstallationId, data.githubInstallationId));
+        return existing[0];
+    }
+    const [result] = await db.insert(installations).values(data).returning();
+    return result;
+}
+export async function deactivateInstallation(db, githubInstallationId) {
+    await db
+        .update(installations)
+        .set({ isActive: false, updatedAt: new Date() })
+        .where(eq(installations.githubInstallationId, githubInstallationId));
+}
+// ─── Repositories ───────────────────────────────────────────────
+export async function upsertRepository(db, data) {
+    const existing = await db
+        .select()
+        .from(repositories)
+        .where(eq(repositories.githubRepoId, data.githubRepoId))
+        .limit(1);
+    if (existing.length > 0) {
+        await db
+            .update(repositories)
+            .set({ fullName: data.fullName, isActive: true, updatedAt: new Date() })
+            .where(eq(repositories.githubRepoId, data.githubRepoId));
+        return existing[0];
+    }
+    const [result] = await db
+        .insert(repositories)
+        .values({ ...data, settings: DEFAULT_REPO_SETTINGS })
+        .returning();
+    return result;
+}
+export async function getRepoByFullName(db, fullName) {
+    const [repo] = await db
+        .select()
+        .from(repositories)
+        .where(eq(repositories.fullName, fullName))
+        .limit(1);
+    return repo ?? null;
+}
+export async function getRepoByGithubId(db, githubRepoId) {
+    const [repo] = await db
+        .select()
+        .from(repositories)
+        .where(eq(repositories.githubRepoId, githubRepoId))
+        .limit(1);
+    return repo ?? null;
+}
+export async function updateRepoSettings(db, repoId, updates) {
+    await db
+        .update(repositories)
+        .set({ ...updates, updatedAt: new Date() })
+        .where(eq(repositories.id, repoId));
+}
+export async function saveRepoApiKey(db, repoId, encryptedKey) {
+    await db
+        .update(repositories)
+        .set({ encryptedApiKey: encryptedKey, updatedAt: new Date() })
+        .where(eq(repositories.id, repoId));
+}
+export async function removeRepoApiKey(db, repoId) {
+    await db
+        .update(repositories)
+        .set({ encryptedApiKey: null, updatedAt: new Date() })
+        .where(eq(repositories.id, repoId));
+}
+export async function getReposByInstallationId(db, installationId) {
+    return db
+        .select()
+        .from(repositories)
+        .where(and(eq(repositories.installationId, installationId), eq(repositories.isActive, true)));
+}
+// ─── Reviews ────────────────────────────────────────────────────
+export async function saveReview(db, data) {
+    const [result] = await db.insert(reviews).values(data).returning();
+    return result;
+}
+export async function getReviewsByRepoId(db, repositoryId, options = {}) {
+    const { limit = 50, offset = 0 } = options;
+    return db
+        .select()
+        .from(reviews)
+        .where(eq(reviews.repositoryId, repositoryId))
+        .orderBy(desc(reviews.createdAt))
+        .limit(limit)
+        .offset(offset);
+}
+export async function getReviewStats(db, repositoryId) {
+    const result = await db
+        .select({
+        total: sql `count(*)::int`,
+        passed: sql `count(*) filter (where ${reviews.status} = 'PASSED')::int`,
+        failed: sql `count(*) filter (where ${reviews.status} = 'FAILED')::int`,
+        skipped: sql `count(*) filter (where ${reviews.status} = 'SKIPPED')::int`,
+    })
+        .from(reviews)
+        .where(eq(reviews.repositoryId, repositoryId));
+    return result[0];
+}
+// ─── Memory: Sessions ───────────────────────────────────────────
+export async function createMemorySession(db, data) {
+    const [session] = await db.insert(memorySessions).values(data).returning();
+    return session;
+}
+export async function endMemorySession(db, sessionId, summary) {
+    await db
+        .update(memorySessions)
+        .set({ endedAt: new Date(), summary })
+        .where(eq(memorySessions.id, sessionId));
+}
+export async function getSessionsByProject(db, project, options = {}) {
+    const { limit = 20 } = options;
+    return db
+        .select()
+        .from(memorySessions)
+        .where(eq(memorySessions.project, project))
+        .orderBy(desc(memorySessions.startedAt))
+        .limit(limit);
+}
+// ─── Memory: Observations ───────────────────────────────────────
+function computeContentHash(content, type, title) {
+    return createHash('sha256').update(`${type}:${title}:${content}`).digest('hex');
+}
+const DEDUP_WINDOW_MS = 15 * 60 * 1000; // 15 minutes
+export async function saveObservation(db, data) {
+    const contentHash = computeContentHash(data.content, data.type, data.title);
+    const windowStart = new Date(Date.now() - DEDUP_WINDOW_MS);
+    // Deduplication: check for same content hash within rolling window
+    const [existing] = await db
+        .select()
+        .from(memoryObservations)
+        .where(and(eq(memoryObservations.contentHash, contentHash), eq(memoryObservations.project, data.project), sql `${memoryObservations.createdAt} > ${windowStart}`))
+        .limit(1);
+    if (existing) {
+        return existing; // Skip duplicate
+    }
+    // Topic-key upsert: update existing observation with same topic_key
+    if (data.topicKey) {
+        const [existingByTopic] = await db
+            .select()
+            .from(memoryObservations)
+            .where(and(eq(memoryObservations.topicKey, data.topicKey), eq(memoryObservations.project, data.project)))
+            .limit(1);
+        if (existingByTopic) {
+            const [updated] = await db
+                .update(memoryObservations)
+                .set({
+                content: data.content,
+                title: data.title,
+                contentHash,
+                filePaths: data.filePaths ?? [],
+                revisionCount: sql `${memoryObservations.revisionCount} + 1`,
+                updatedAt: new Date(),
+            })
+                .where(eq(memoryObservations.id, existingByTopic.id))
+                .returning();
+            return updated;
+        }
+    }
+    // New observation
+    const [result] = await db
+        .insert(memoryObservations)
+        .values({
+        ...data,
+        contentHash,
+        filePaths: data.filePaths ?? [],
+    })
+        .returning();
+    return result;
+}
+/**
+ * Full-text search observations using PostgreSQL tsvector.
+ * The search_observations SQL column is maintained by a trigger.
+ */
+export async function searchObservations(db, project, query, options = {}) {
+    const { limit = 10, type } = options;
+    // Sanitize query: wrap each word in quotes for tsquery
+    const sanitizedQuery = query
+        .trim()
+        .split(/\s+/)
+        .filter((w) => w.length > 0)
+        .map((w) => `'${w.replace(/'/g, "''")}'`)
+        .join(' & ');
+    if (!sanitizedQuery)
+        return [];
+    const conditions = [
+        eq(memoryObservations.project, project),
+        sql `search_observations @@ to_tsquery('english', ${sanitizedQuery})`,
+    ];
+    if (type) {
+        conditions.push(eq(memoryObservations.type, type));
+    }
+    return db
+        .select()
+        .from(memoryObservations)
+        .where(and(...conditions))
+        .orderBy(sql `ts_rank(search_observations, to_tsquery('english', ${sanitizedQuery})) DESC`)
+        .limit(limit);
+}
+export async function getObservationsBySession(db, sessionId) {
+    return db
+        .select()
+        .from(memoryObservations)
+        .where(eq(memoryObservations.sessionId, sessionId))
+        .orderBy(desc(memoryObservations.createdAt));
+}
+// ─── User Mappings ──────────────────────────────────────────────
+export async function upsertUserMapping(db, data) {
+    const existing = await db
+        .select()
+        .from(githubUserMappings)
+        .where(eq(githubUserMappings.githubUserId, data.githubUserId))
+        .limit(1);
+    if (existing.length > 0) {
+        await db
+            .update(githubUserMappings)
+            .set({ githubLogin: data.githubLogin, installationId: data.installationId })
+            .where(eq(githubUserMappings.githubUserId, data.githubUserId));
+        return existing[0];
+    }
+    const [result] = await db.insert(githubUserMappings).values(data).returning();
+    return result;
+}
+export async function getInstallationsByUserId(db, githubUserId) {
+    const mappings = await db
+        .select()
+        .from(githubUserMappings)
+        .where(eq(githubUserMappings.githubUserId, githubUserId));
+    if (mappings.length === 0)
+        return [];
+    const installationIds = mappings.map((m) => m.installationId);
+    return db
+        .select()
+        .from(installations)
+        .where(and(sql `${installations.id} = ANY(${installationIds})`, eq(installations.isActive, true)));
+}
+//# sourceMappingURL=queries.js.map