Test/milestone repository queries

docs/webhooks.md

@@ -124,6 +124,25 @@ Response (404):
 { "error": "Dead letter not found or already replayed" }
 ```
 
+#### POST `/api/admin/vaults/:id/replay-events`
+
+Replays all recorded outbox lifecycle events for a single vault to an optional target subscriber. Preserves original event ordering and event IDs/idempotency keys.
+
+Request Body (Optional):
+```json
+{
+  "subscriber_id": "90b1e428-2f19-4b2b-8a71-3cb56667104b"
+}
+```
+
+Response (200):
+```json
+{
+  "replayed": true,
+  "count": 3
+}
+```
+
 ## Test-Ping Endpoint
 
 `POST /api/webhooks/:id/test` lets subscribers self-verify their delivery URL and HMAC wiring before real vault events start flowing.

src/app-bootstrap.ts

@@ -19,7 +19,7 @@ import { orgAnalyticsRouter } from './routes/orgAnalytics.js'
 import { orgMembersRouter } from './routes/orgMembers.js'
 import { adminRouter } from './routes/admin.js'
 import { adminVerifiersRouter } from './routes/adminVerifiers.js'
-import { adminWebhooksRouter } from './routes/adminWebhooks.js'
+import { adminWebhooksRouter, adminVaultReplayRouter } from './routes/adminWebhooks.js'
 import { verificationsRouter } from './routes/verifications.js'
 import { apiKeysRouter } from './routes/apiKeys.js'
 import { notificationsRouter } from './routes/notifications.js'
@@ -74,6 +74,7 @@ export function bootstrapApp(options: BootstrapOptions = {}) {
   app.use('/api/admin', adminRouter)
   app.use('/api/admin/verifiers', adminVerifiersRouter)
   app.use('/api/admin/webhooks', adminWebhooksRouter)
+  app.use('/api/admin/vaults', adminVaultReplayRouter)
   app.use('/api/verifications', verificationsRouter)
   app.use('/api/api-keys', apiKeysRouter)
   app.use('/api/notifications', notificationsRouter)

src/repositories/milestoneRepository.ts

@@ -62,10 +62,10 @@ export class MilestoneRepository {
   async nearestNeighbors(milestoneId: string, k = 5): Promise<NearestNeighborResult[]> {
     // Fetch the query embedding first so we can pass it as a plain literal.
     // This avoids a correlated sub-query that would prevent index use.
-    const row = await this.db('milestone_embeddings')
+    const row = (await this.db('milestone_embeddings')
       .where({ milestone_id: milestoneId })
       .select(this.db.raw('embedding::text AS embedding_text'))
-      .first()
+      .first()) as any
 
     if (!row) return []
 
@@ -148,4 +148,83 @@ export class MilestoneRepository {
 
     return new Map(rows.map((row: { milestone_id: string; model_version: string }) => [row.milestone_id, row.model_version]))
   }
+
+  /**
+   * Find milestones for a specific organization with optional filters,
+   * keyset pagination, and soft-delete exclusion.
+   */
+  async findMany(options: {
+    orgId: string
+    verifierUserId?: string
+    afterId?: string | null
+    limit?: number
+    includeDeleted?: boolean
+  }): Promise<any[]> {
+    const { orgId, verifierUserId, afterId, limit = 10, includeDeleted = false } = options
+
+    let query = this.db('milestones')
+      .join('vaults', 'milestones.vault_id', 'vaults.id')
+      .select(
+        'milestones.id',
+        'milestones.vault_id as vaultId',
+        'milestones.title',
+        'milestones.description',
+        'milestones.target_amount as targetAmount',
+        'milestones.current_amount as currentAmount',
+        'milestones.deadline',
+        'milestones.status',
+        'milestones.verifier_user_id as verifierUserId',
+        'milestones.created_at as createdAt',
+        'milestones.updated_at as updatedAt',
+        'milestones.deleted_at as deletedAt',
+      )
+      .where('vaults.organization_id', orgId)
+      .orderBy('milestones.id', 'asc')
+      .limit(limit)
+
+    if (!includeDeleted) {
+      query = query.whereNull('milestones.deleted_at')
+    }
+
+    if (verifierUserId) {
+      query = query.where('milestones.verifier_user_id', verifierUserId)
+    }
+
+    if (afterId) {
+      query = query.where('milestones.id', '>', afterId)
+    }
+
+    return query
+  }
+
+  /**
+   * Find a milestone by ID, scoped to a specific organization.
+   */
+  async findById(id: string, orgId: string, includeDeleted = false): Promise<any | null> {
+    let query = this.db('milestones')
+      .join('vaults', 'milestones.vault_id', 'vaults.id')
+      .select(
+        'milestones.id',
+        'milestones.vault_id as vaultId',
+        'milestones.title',
+        'milestones.description',
+        'milestones.target_amount as targetAmount',
+        'milestones.current_amount as currentAmount',
+        'milestones.deadline',
+        'milestones.status',
+        'milestones.verifier_user_id as verifierUserId',
+        'milestones.created_at as createdAt',
+        'milestones.updated_at as updatedAt',
+        'milestones.deleted_at as deletedAt',
+      )
+      .where('milestones.id', id)
+      .where('vaults.organization_id', orgId)
+
+    if (!includeDeleted) {
+      query = query.whereNull('milestones.deleted_at')
+    }
+
+    const row = await query.first()
+    return row || null
+  }
 }