siclaw 0.1.0

package/dist/gateway/db/repositories/permission-repo.js

@@ -0,0 +1,74 @@
+/**
+ * Permission Repository — user permission CRUD
+ *
+ * Manages per-user permissions (e.g. "skill_reviewer").
+ * Idempotent grants via insert-first, catch-constraint pattern (works for MySQL + SQLite).
+ */
+import crypto from "node:crypto";
+import { eq, and } from "drizzle-orm";
+import { userPermissions } from "../schema.js";
+import { isUniqueViolation } from "../dialect-helpers.js";
+export class PermissionRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /** Grant a permission to a user. Returns the permission row id. Idempotent. */
+    async grant(userId, permission, grantedBy) {
+        const id = crypto.randomUUID();
+        try {
+            await this.db.insert(userPermissions).values({
+                id, userId, permission, grantedBy, grantedAt: new Date(),
+            });
+            return id;
+        }
+        catch (err) {
+            if (!isUniqueViolation(err))
+                throw err;
+            // Concurrent insert won — return the existing row
+            const existing = await this.db
+                .select({ id: userPermissions.id })
+                .from(userPermissions)
+                .where(and(eq(userPermissions.userId, userId), eq(userPermissions.permission, permission)))
+                .limit(1);
+            return existing[0].id;
+        }
+    }
+    /** Revoke a permission from a user */
+    async revoke(userId, permission) {
+        await this.db
+            .delete(userPermissions)
+            .where(and(eq(userPermissions.userId, userId), eq(userPermissions.permission, permission)));
+    }
+    /** Check if a user has a specific permission */
+    async hasPermission(userId, permission) {
+        const rows = await this.db
+            .select({ id: userPermissions.id })
+            .from(userPermissions)
+            .where(and(eq(userPermissions.userId, userId), eq(userPermissions.permission, permission)))
+            .limit(1);
+        return rows.length > 0;
+    }
+    /** List all users with a specific permission */
+    async listByPermission(permission) {
+        return this.db
+            .select({
+            userId: userPermissions.userId,
+            grantedBy: userPermissions.grantedBy,
+            grantedAt: userPermissions.grantedAt,
+        })
+            .from(userPermissions)
+            .where(eq(userPermissions.permission, permission));
+    }
+    /** List all permissions for a user */
+    async listForUser(userId) {
+        return this.db
+            .select({
+            permission: userPermissions.permission,
+            grantedAt: userPermissions.grantedAt,
+        })
+            .from(userPermissions)
+            .where(eq(userPermissions.userId, userId));
+    }
+}
+//# sourceMappingURL=permission-repo.js.map

package/dist/gateway/db/repositories/permission-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-repo.js","sourceRoot":"","sources":["../../../../src/gateway/db/repositories/permission-repo.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAO,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,OAAO,oBAAoB;IACX;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,+EAA+E;IAC/E,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,UAAkB,EAAE,SAAiB;QAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;gBAC3C,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE;aACzD,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACvC,kDAAkD;YAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE;iBAC3B,MAAM,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,EAAE,CAAC;iBAClC,IAAI,CAAC,eAAe,CAAC;iBACrB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;iBAC1F,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,UAAkB;QAC7C,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,eAAe,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,CAC3C,CACF,CAAC;IACN,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,UAAkB;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,EAAE,CAAC;aAClC,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,CAC3C,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QAKvC,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,CAAC;YACN,MAAM,EAAE,eAAe,CAAC,MAAM;YAC9B,SAAS,EAAE,eAAe,CAAC,SAAS;YACpC,SAAS,EAAE,eAAe,CAAC,SAAS;SACrC,CAAC;aACD,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,WAAW,CAAC,MAAc;QAI9B,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,CAAC;YACN,UAAU,EAAE,eAAe,CAAC,UAAU;YACtC,SAAS,EAAE,eAAe,CAAC,SAAS;SACrC,CAAC;aACD,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/gateway/db/repositories/skill-content-repo.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Skill Content Repository — stores skill file contents (SKILL.md + scripts) in DB
+ *
+ * Replaces filesystem-based storage for team and personal skills.
+ * BuiltIn skills are still read from Docker image.
+ */
+import type { Database } from "../index.js";
+export type SkillContentTag = "working" | "staging" | "published";
+export interface SkillFiles {
+    specs?: string;
+    scripts?: Array<{
+        name: string;
+        content: string;
+    }>;
+}
+export declare class SkillContentRepository {
+    private db;
+    constructor(db: Database);
+    /** Save/update skill content (upsert by skill_id + tag) */
+    save(skillId: string, tag: SkillContentTag, files: SkillFiles): Promise<void>;
+    /** Read skill content by skill_id + tag */
+    read(skillId: string, tag: SkillContentTag): Promise<SkillFiles | null>;
+    /** Delete skill content (specific tag or all tags) */
+    delete(skillId: string, tag?: SkillContentTag): Promise<void>;
+    /** Copy content from one tag to another (snapshot) */
+    copy(skillId: string, fromTag: SkillContentTag, toTag: SkillContentTag): Promise<void>;
+    /** Copy content to another skill (team contribution) */
+    copyToSkill(srcSkillId: string, destSkillId: string, fromTag: SkillContentTag, toTag: SkillContentTag): Promise<void>;
+}

package/dist/gateway/db/repositories/skill-content-repo.js

@@ -0,0 +1,90 @@
+/**
+ * Skill Content Repository — stores skill file contents (SKILL.md + scripts) in DB
+ *
+ * Replaces filesystem-based storage for team and personal skills.
+ * BuiltIn skills are still read from Docker image.
+ */
+import crypto from "node:crypto";
+import { eq, and } from "drizzle-orm";
+import { skillContents } from "../schema.js";
+export class SkillContentRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /** Save/update skill content (upsert by skill_id + tag) */
+    async save(skillId, tag, files) {
+        const id = crypto.randomUUID();
+        const specs = files.specs ?? null;
+        const scriptsJson = files.scripts ?? null;
+        // Try insert, on conflict update
+        try {
+            await this.db.insert(skillContents).values({
+                id,
+                skillId,
+                tag,
+                specs,
+                scriptsJson,
+            });
+        }
+        catch (err) {
+            // Duplicate key — update instead
+            const code = err?.cause?.code || err?.code || "";
+            if (code === "ER_DUP_ENTRY" || code === "SQLITE_CONSTRAINT_UNIQUE" || String(err).includes("UNIQUE constraint")) {
+                await this.db
+                    .update(skillContents)
+                    .set({ specs, scriptsJson, updatedAt: new Date() })
+                    .where(and(eq(skillContents.skillId, skillId), eq(skillContents.tag, tag)));
+            }
+            else {
+                throw err;
+            }
+        }
+    }
+    /** Read skill content by skill_id + tag */
+    async read(skillId, tag) {
+        const rows = await this.db
+            .select()
+            .from(skillContents)
+            .where(and(eq(skillContents.skillId, skillId), eq(skillContents.tag, tag)))
+            .limit(1);
+        const row = rows[0];
+        if (!row)
+            return null;
+        return {
+            specs: row.specs ?? undefined,
+            scripts: row.scriptsJson ?? undefined,
+        };
+    }
+    /** Delete skill content (specific tag or all tags) */
+    async delete(skillId, tag) {
+        if (tag) {
+            await this.db
+                .delete(skillContents)
+                .where(and(eq(skillContents.skillId, skillId), eq(skillContents.tag, tag)));
+        }
+        else {
+            // Delete all tags for this skill
+            await this.db
+                .delete(skillContents)
+                .where(eq(skillContents.skillId, skillId));
+        }
+    }
+    /** Copy content from one tag to another (snapshot) */
+    async copy(skillId, fromTag, toTag) {
+        const source = await this.read(skillId, fromTag);
+        if (!source) {
+            throw new Error(`No ${fromTag} content found for skill ${skillId}`);
+        }
+        await this.save(skillId, toTag, source);
+    }
+    /** Copy content to another skill (team contribution) */
+    async copyToSkill(srcSkillId, destSkillId, fromTag, toTag) {
+        const source = await this.read(srcSkillId, fromTag);
+        if (!source) {
+            throw new Error(`No ${fromTag} content found for skill ${srcSkillId}`);
+        }
+        await this.save(destSkillId, toTag, source);
+    }
+}
+//# sourceMappingURL=skill-content-repo.js.map

package/dist/gateway/db/repositories/skill-content-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-content-repo.js","sourceRoot":"","sources":["../../../../src/gateway/db/repositories/skill-content-repo.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAS7C,MAAM,OAAO,sBAAsB;IACb;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,2DAA2D;IAC3D,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,GAAoB,EAAE,KAAiB;QACjE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC;QAE1C,iCAAiC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBACzC,EAAE;gBACF,OAAO;gBACP,GAAG;gBACH,KAAK;gBACL,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,iCAAiC;YACjC,MAAM,IAAI,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC;YACjD,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,0BAA0B,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAChH,MAAM,IAAI,CAAC,EAAE;qBACV,MAAM,CAAC,aAAa,CAAC;qBACrB,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBAClD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,GAAoB;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;aAC1E,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;YAC7B,OAAO,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;SACtC,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,GAAqB;QACjD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,IAAI,CAAC,EAAE;iBACV,MAAM,CAAC,aAAa,CAAC;iBACrB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,iCAAiC;YACjC,MAAM,IAAI,CAAC,EAAE;iBACV,MAAM,CAAC,aAAa,CAAC;iBACrB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAwB,EAAE,KAAsB;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,MAAM,OAAO,4BAA4B,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,WAAW,CACf,UAAkB,EAClB,WAAmB,EACnB,OAAwB,EACxB,KAAsB;QAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,MAAM,OAAO,4BAA4B,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/gateway/db/repositories/skill-repo.d.ts

@@ -0,0 +1,170 @@
+/**
+ * Skill Repository — skill metadata CRUD
+ */
+import type { Database } from "../index.js";
+export interface CreateSkillInput {
+    name: string;
+    description?: string;
+    type?: string;
+    scope: "builtin" | "team" | "personal";
+    authorId?: string;
+    dirName: string;
+    forkedFromId?: string;
+    version?: number;
+    labels?: string[];
+}
+export interface UpdateSkillInput {
+    name?: string;
+    description?: string;
+    type?: string;
+    status?: string;
+    contributionStatus?: "none" | "pending" | "approved";
+    reviewStatus?: "draft" | "pending" | "approved";
+    scope?: "builtin" | "team" | "personal";
+    dirName?: string;
+    publishedVersion?: number | null;
+    stagingVersion?: number;
+    teamSourceSkillId?: string | null;
+    teamPinnedVersion?: number | null;
+    forkedFromId?: string | null;
+    labels?: string[] | null;
+}
+export declare class SkillRepository {
+    private db;
+    constructor(db: Database);
+    list(opts?: {
+        scope?: string;
+        authorId?: string;
+    }): Promise<{
+        id: string;
+        name: string;
+        description: string | null;
+        type: string | null;
+        version: number;
+        scope: "team" | "builtin" | "personal";
+        authorId: string | null;
+        status: string | null;
+        contributionStatus: "pending" | "none" | "approved" | null;
+        reviewStatus: "pending" | "approved" | "draft";
+        dirName: string;
+        publishedVersion: number | null;
+        stagingVersion: number;
+        createdAt: Date;
+        updatedAt: Date;
+        s3Key: string | null;
+        teamSourceSkillId: string | null;
+        teamPinnedVersion: number | null;
+        forkedFromId: string | null;
+        labelsJson: string[] | null;
+    }[]>;
+    listForUser(userId: string, opts?: {
+        limit?: number;
+        offset?: number;
+        scope?: "builtin" | "team" | "personal";
+        search?: string;
+    }): Promise<{
+        skills: {
+            id: string;
+            name: string;
+            description: string | null;
+            type: string | null;
+            version: number;
+            scope: "team" | "builtin" | "personal";
+            authorId: string | null;
+            status: string | null;
+            contributionStatus: "pending" | "none" | "approved" | null;
+            reviewStatus: "pending" | "approved" | "draft";
+            dirName: string;
+            publishedVersion: number | null;
+            stagingVersion: number;
+            createdAt: Date;
+            updatedAt: Date;
+            s3Key: string | null;
+            teamSourceSkillId: string | null;
+            teamPinnedVersion: number | null;
+            forkedFromId: string | null;
+            labelsJson: string[] | null;
+        }[];
+        hasMore: boolean;
+    }>;
+    getById(id: string): Promise<{
+        id: string;
+        name: string;
+        description: string | null;
+        type: string | null;
+        version: number;
+        scope: "team" | "builtin" | "personal";
+        authorId: string | null;
+        status: string | null;
+        contributionStatus: "pending" | "none" | "approved" | null;
+        reviewStatus: "pending" | "approved" | "draft";
+        dirName: string;
+        publishedVersion: number | null;
+        stagingVersion: number;
+        createdAt: Date;
+        updatedAt: Date;
+        s3Key: string | null;
+        teamSourceSkillId: string | null;
+        teamPinnedVersion: number | null;
+        forkedFromId: string | null;
+        labelsJson: string[] | null;
+    }>;
+    create(input: CreateSkillInput): Promise<`${string}-${string}-${string}-${string}-${string}`>;
+    update(id: string, updates: UpdateSkillInput): Promise<void>;
+    bumpVersion(id: string): Promise<void>;
+    bumpStagingVersion(id: string): Promise<number>;
+    listPending(opts?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<{
+        skills: {
+            id: string;
+            name: string;
+            description: string | null;
+            type: string | null;
+            version: number;
+            scope: "team" | "builtin" | "personal";
+            authorId: string | null;
+            status: string | null;
+            contributionStatus: "pending" | "none" | "approved" | null;
+            reviewStatus: "pending" | "approved" | "draft";
+            dirName: string;
+            publishedVersion: number | null;
+            stagingVersion: number;
+            createdAt: Date;
+            updatedAt: Date;
+            s3Key: string | null;
+            teamSourceSkillId: string | null;
+            teamPinnedVersion: number | null;
+            forkedFromId: string | null;
+            labelsJson: string[] | null;
+        }[];
+        hasMore: boolean;
+    }>;
+    deleteById(id: string): Promise<void>;
+    getByDirNameAndScope(dirName: string, scope: string): Promise<{
+        id: string;
+        name: string;
+        description: string | null;
+        type: string | null;
+        version: number;
+        scope: "team" | "builtin" | "personal";
+        authorId: string | null;
+        status: string | null;
+        contributionStatus: "pending" | "none" | "approved" | null;
+        reviewStatus: "pending" | "approved" | "draft";
+        dirName: string;
+        publishedVersion: number | null;
+        stagingVersion: number;
+        createdAt: Date;
+        updatedAt: Date;
+        s3Key: string | null;
+        teamSourceSkillId: string | null;
+        teamPinnedVersion: number | null;
+        forkedFromId: string | null;
+        labelsJson: string[] | null;
+    }>;
+    listDisabledSkills(userId: string): Promise<string[]>;
+    disableSkill(userId: string, skillName: string): Promise<void>;
+    enableSkill(userId: string, skillName: string): Promise<void>;
+}

package/dist/gateway/db/repositories/skill-repo.js

@@ -0,0 +1,185 @@
+/**
+ * Skill Repository — skill metadata CRUD
+ */
+import crypto from "node:crypto";
+import { eq, and, or, sql } from "drizzle-orm";
+import { skills, userDisabledSkills } from "../schema.js";
+import { isUniqueViolation } from "../dialect-helpers.js";
+export class SkillRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async list(opts) {
+        let query = this.db.select().from(skills);
+        if (opts?.scope) {
+            query = query.where(eq(skills.scope, opts.scope));
+        }
+        if (opts?.authorId) {
+            query = query.where(eq(skills.authorId, opts.authorId));
+        }
+        return query;
+    }
+    async listForUser(userId, opts) {
+        const limit = opts?.limit ?? 30;
+        const offset = opts?.offset ?? 0;
+        let conditions = or(eq(skills.scope, "team"), and(eq(skills.scope, "personal"), eq(skills.authorId, userId)));
+        // scope filter
+        if (opts?.scope) {
+            if (opts.scope === "personal") {
+                conditions = and(eq(skills.scope, "personal"), eq(skills.authorId, userId));
+            }
+            else {
+                conditions = eq(skills.scope, opts.scope);
+            }
+        }
+        // search filter — name LIKE '%query%' OR description LIKE '%query%'
+        if (opts?.search) {
+            const pattern = `%${opts.search}%`;
+            conditions = and(conditions, or(sql `${skills.name} LIKE ${pattern}`, sql `${skills.description} LIKE ${pattern}`));
+        }
+        const rows = await this.db
+            .select()
+            .from(skills)
+            .where(conditions)
+            .orderBy(skills.name)
+            .limit(limit + 1)
+            .offset(offset);
+        const hasMore = rows.length > limit;
+        return {
+            skills: hasMore ? rows.slice(0, limit) : rows,
+            hasMore,
+        };
+    }
+    async getById(id) {
+        const rows = await this.db
+            .select()
+            .from(skills)
+            .where(eq(skills.id, id))
+            .limit(1);
+        return rows[0] ?? null;
+    }
+    async create(input) {
+        const id = crypto.randomUUID();
+        await this.db.insert(skills).values({
+            id,
+            name: input.name,
+            description: input.description ?? null,
+            type: input.type ?? "Custom",
+            version: input.version ?? 1,
+            scope: input.scope,
+            authorId: input.authorId ?? null,
+            dirName: input.dirName,
+            status: "installed",
+            contributionStatus: "none",
+            forkedFromId: input.forkedFromId ?? null,
+            labelsJson: input.labels ?? null,
+        });
+        return id;
+    }
+    async update(id, updates) {
+        const setFields = { updatedAt: new Date() };
+        if (updates.name !== undefined)
+            setFields.name = updates.name;
+        if (updates.description !== undefined)
+            setFields.description = updates.description;
+        if (updates.type !== undefined)
+            setFields.type = updates.type;
+        if (updates.status !== undefined)
+            setFields.status = updates.status;
+        if (updates.contributionStatus !== undefined)
+            setFields.contributionStatus = updates.contributionStatus;
+        if (updates.reviewStatus !== undefined)
+            setFields.reviewStatus = updates.reviewStatus;
+        if (updates.scope !== undefined)
+            setFields.scope = updates.scope;
+        if (updates.dirName !== undefined)
+            setFields.dirName = updates.dirName;
+        if (updates.publishedVersion !== undefined)
+            setFields.publishedVersion = updates.publishedVersion;
+        if (updates.stagingVersion !== undefined)
+            setFields.stagingVersion = updates.stagingVersion;
+        if (updates.teamSourceSkillId !== undefined)
+            setFields.teamSourceSkillId = updates.teamSourceSkillId;
+        if (updates.teamPinnedVersion !== undefined)
+            setFields.teamPinnedVersion = updates.teamPinnedVersion;
+        if (updates.forkedFromId !== undefined)
+            setFields.forkedFromId = updates.forkedFromId;
+        if (updates.labels !== undefined)
+            setFields.labelsJson = updates.labels;
+        await this.db.update(skills).set(setFields).where(eq(skills.id, id));
+    }
+    async bumpVersion(id) {
+        await this.db
+            .update(skills)
+            .set({
+            version: sql `${skills.version} + 1`,
+            updatedAt: new Date(),
+        })
+            .where(eq(skills.id, id));
+    }
+    async bumpStagingVersion(id) {
+        await this.db
+            .update(skills)
+            .set({
+            stagingVersion: sql `${skills.stagingVersion} + 1`,
+            updatedAt: new Date(),
+        })
+            .where(eq(skills.id, id));
+        const row = await this.getById(id);
+        return row?.stagingVersion ?? 1;
+    }
+    async listPending(opts) {
+        const limit = opts?.limit ?? 30;
+        const offset = opts?.offset ?? 0;
+        const rows = await this.db
+            .select()
+            .from(skills)
+            .where(or(eq(skills.reviewStatus, "pending"), eq(skills.contributionStatus, "pending")))
+            .orderBy(skills.updatedAt)
+            .limit(limit + 1)
+            .offset(offset);
+        const hasMore = rows.length > limit;
+        return {
+            skills: hasMore ? rows.slice(0, limit) : rows,
+            hasMore,
+        };
+    }
+    async deleteById(id) {
+        await this.db.delete(skills).where(eq(skills.id, id));
+    }
+    async getByDirNameAndScope(dirName, scope) {
+        const rows = await this.db
+            .select()
+            .from(skills)
+            .where(and(eq(skills.dirName, dirName), eq(skills.scope, scope)))
+            .limit(1);
+        return rows[0] ?? null;
+    }
+    // ─── Per-user disabled skills ───────────────────
+    async listDisabledSkills(userId) {
+        const rows = await this.db
+            .select({ skillName: userDisabledSkills.skillName })
+            .from(userDisabledSkills)
+            .where(eq(userDisabledSkills.userId, userId));
+        return rows.map((r) => r.skillName);
+    }
+    async disableSkill(userId, skillName) {
+        try {
+            await this.db
+                .insert(userDisabledSkills)
+                .values({ userId, skillName });
+        }
+        catch (err) {
+            if (!isUniqueViolation(err))
+                throw err;
+            // Already disabled — idempotent no-op
+        }
+    }
+    async enableSkill(userId, skillName) {
+        await this.db
+            .delete(userDisabledSkills)
+            .where(and(eq(userDisabledSkills.userId, userId), eq(userDisabledSkills.skillName, skillName)));
+    }
+}
+//# sourceMappingURL=skill-repo.js.map

package/dist/gateway/db/repositories/skill-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-repo.js","sourceRoot":"","sources":["../../../../src/gateway/db/repositories/skill-repo.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AA+B1D,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,KAAK,CAAC,IAAI,CAAC,IAA4C;QACrD,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,KAAY,CAAC,CAAQ,CAAC;QAClE,CAAC;QACD,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;YACnB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAQ,CAAC;QACjE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,IAKjC;QACC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC;QAEjC,IAAI,UAAU,GAAG,EAAE,CACjB,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EACxB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAC/D,CAAC;QAEF,eAAe;QACf,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC9B,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YACnC,UAAU,GAAG,GAAG,CACd,UAAU,EACV,EAAE,CACA,GAAG,CAAA,GAAG,MAAM,CAAC,IAAI,SAAS,OAAO,EAAE,EACnC,GAAG,CAAA,GAAG,MAAM,CAAC,WAAW,SAAS,OAAO,EAAE,CAC3C,CACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,UAAU,CAAC;aACjB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;aACpB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;aAChB,MAAM,CAAC,MAAM,CAAC,CAAC;QAElB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7C,OAAO;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACxB,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YAClC,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,WAAW;YACnB,kBAAkB,EAAE,MAAM;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,UAAU,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;SACjC,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,OAAyB;QAChD,MAAM,SAAS,GAA4B,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACrE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC9D,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YACnC,SAAS,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACpE,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,SAAS,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAC5D,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YACpC,SAAS,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QAChD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACjE,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;YAAE,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QACvE,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS;YAAE,SAAS,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QAClG,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,SAAS,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC5F,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS;YAAE,SAAS,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACrG,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS;YAAE,SAAS,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACrG,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,SAAS,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACtF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;QAExE,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC;YACH,OAAO,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,OAAO,MAAM;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,EAAU;QACjC,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC;YACH,cAAc,EAAE,GAAG,CAAA,GAAG,MAAM,CAAC,cAAc,MAAM;YACjD,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,OAAQ,GAAW,EAAE,cAAc,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAA0C;QAC1D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC;QAEjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CACJ,EAAE,CACA,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,EAClC,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,SAAS,CAAC,CACzC,CACF;aACA,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;aACzB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;aAChB,MAAM,CAAC,MAAM,CAAC,CAAC;QAElB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7C,OAAO;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAe,EAAE,KAAa;QACvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,KAAY,CAAC,CAAC,CAAC;aACvE,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,mDAAmD;IAEnD,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAC;aACnD,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,SAAiB;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,EAAE;iBACV,MAAM,CAAC,kBAAkB,CAAC;iBAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACvC,sCAAsC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,SAAiB;QACjD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,kBAAkB,CAAC;aAC1B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAC5C,CACF,CAAC;IACN,CAAC;CACF"}

package/dist/gateway/db/repositories/skill-review-repo.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Skill Review Repository — script security review records
+ */
+import type { Database } from "../index.js";
+import { type ReviewFinding } from "../schema.js";
+export interface CreateReviewInput {
+    skillId: string;
+    version: number;
+    reviewerType: "ai" | "admin";
+    reviewerId?: string;
+    riskLevel: "low" | "medium" | "high" | "critical";
+    summary: string;
+    findings: ReviewFinding[];
+    decision: "approve" | "reject" | "info";
+}
+export declare class SkillReviewRepository {
+    private db;
+    constructor(db: Database);
+    create(input: CreateReviewInput): Promise<string>;
+    getLatestForSkill(skillId: string): Promise<{
+        id: string;
+        skillId: string;
+        version: number;
+        reviewerType: "ai" | "admin";
+        reviewerId: string | null;
+        riskLevel: "low" | "medium" | "high" | "critical";
+        summary: string;
+        findings: ReviewFinding[] | null;
+        decision: "info" | "approve" | "reject";
+        createdAt: Date;
+    }>;
+    listForSkill(skillId: string): Promise<{
+        id: string;
+        skillId: string;
+        version: number;
+        reviewerType: "ai" | "admin";
+        reviewerId: string | null;
+        riskLevel: "low" | "medium" | "high" | "critical";
+        summary: string;
+        findings: ReviewFinding[] | null;
+        decision: "info" | "approve" | "reject";
+        createdAt: Date;
+    }[]>;
+}

package/dist/gateway/db/repositories/skill-review-repo.js

@@ -0,0 +1,44 @@
+/**
+ * Skill Review Repository — script security review records
+ */
+import crypto from "node:crypto";
+import { eq, desc } from "drizzle-orm";
+import { skillReviews } from "../schema.js";
+export class SkillReviewRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async create(input) {
+        const id = crypto.randomUUID();
+        await this.db.insert(skillReviews).values({
+            id,
+            skillId: input.skillId,
+            version: input.version,
+            reviewerType: input.reviewerType,
+            reviewerId: input.reviewerId ?? null,
+            riskLevel: input.riskLevel,
+            summary: input.summary,
+            findings: input.findings,
+            decision: input.decision,
+        });
+        return id;
+    }
+    async getLatestForSkill(skillId) {
+        const rows = await this.db
+            .select()
+            .from(skillReviews)
+            .where(eq(skillReviews.skillId, skillId))
+            .orderBy(desc(skillReviews.createdAt))
+            .limit(1);
+        return rows[0] ?? null;
+    }
+    async listForSkill(skillId) {
+        return this.db
+            .select()
+            .from(skillReviews)
+            .where(eq(skillReviews.skillId, skillId))
+            .orderBy(desc(skillReviews.createdAt));
+    }
+}
+//# sourceMappingURL=skill-review-repo.js.map

package/dist/gateway/db/repositories/skill-review-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-review-repo.js","sourceRoot":"","sources":["../../../../src/gateway/db/repositories/skill-review-repo.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAahE,MAAM,OAAO,qBAAqB;IACZ;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,KAAK,CAAC,MAAM,CAAC,KAAwB;QACnC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YACxC,EAAE;YACF,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;aACxC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;aACrC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;aACxC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF"}