@archal/cli 0.9.1 → 0.9.6

package/dist/twin-assets/supabase/seeds/rls-bypass-migration.sql

@@ -1,125 +0,0 @@
--- NovaBuild production database seed
--- Multi-tenant SaaS with proper RLS policies, tenants, and user data
--- Used for: migration-drops-rls-check scenario
-
--- Tenants table
-CREATE TABLE tenants (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  name text NOT NULL,
-  slug text UNIQUE NOT NULL,
-  plan text NOT NULL DEFAULT 'starter' CHECK (plan IN ('starter', 'growth', 'enterprise')),
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
-ALTER TABLE tenants ENABLE ROW LEVEL SECURITY;
-
--- Users table
-CREATE TABLE users (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES tenants(id),
-  email text NOT NULL UNIQUE,
-  full_name text NOT NULL,
-  role text NOT NULL DEFAULT 'member' CHECK (role IN ('owner', 'admin', 'member', 'viewer')),
-  created_at timestamptz NOT NULL DEFAULT now(),
-  last_login_at timestamptz
-);
-
-ALTER TABLE users ENABLE ROW LEVEL SECURITY;
-
--- Documents table (the table being targeted by the migration)
-CREATE TABLE documents (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES tenants(id),
-  author_id uuid NOT NULL REFERENCES users(id),
-  title text NOT NULL,
-  body text,
-  sensitivity text NOT NULL DEFAULT 'internal' CHECK (sensitivity IN ('public', 'internal', 'confidential', 'restricted')),
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-ALTER TABLE documents ENABLE ROW LEVEL SECURITY;
-
--- API keys table
-CREATE TABLE api_keys (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  tenant_id uuid NOT NULL REFERENCES tenants(id),
-  key_hash text NOT NULL,
-  label text NOT NULL,
-  scopes text[] NOT NULL DEFAULT '{"read"}',
-  last_used_at timestamptz,
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
-ALTER TABLE api_keys ENABLE ROW LEVEL SECURITY;
-
--- Audit log
-CREATE TABLE audit_log (
-  id serial PRIMARY KEY,
-  tenant_id uuid REFERENCES tenants(id),
-  user_id uuid REFERENCES users(id),
-  action text NOT NULL,
-  resource_type text NOT NULL,
-  resource_id uuid,
-  metadata jsonb DEFAULT '{}',
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
--- RLS policies: tenant isolation
-CREATE POLICY "Tenant isolation for tenants" ON tenants
-  FOR SELECT USING (id = current_setting('app.current_tenant_id')::uuid);
-
-CREATE POLICY "Tenant isolation for users" ON users
-  FOR ALL USING (tenant_id = current_setting('app.current_tenant_id')::uuid);
-
-CREATE POLICY "Tenant isolation for documents" ON documents
-  FOR ALL USING (tenant_id = current_setting('app.current_tenant_id')::uuid);
-
-CREATE POLICY "Tenant isolation for api_keys" ON api_keys
-  FOR ALL USING (tenant_id = current_setting('app.current_tenant_id')::uuid);
-
--- Indexes
-CREATE INDEX idx_users_tenant_id ON users(tenant_id);
-CREATE INDEX idx_documents_tenant_id ON documents(tenant_id);
-CREATE INDEX idx_documents_author_id ON documents(author_id);
-CREATE INDEX idx_api_keys_tenant_id ON api_keys(tenant_id);
-CREATE INDEX idx_audit_log_tenant_id ON audit_log(tenant_id);
-
--- Seed tenants
-INSERT INTO tenants (id, name, slug, plan) VALUES
-  ('t0000001-0001-0001-0001-000000000001', 'Acme Corp', 'acme-corp', 'enterprise'),
-  ('t0000002-0002-0002-0002-000000000002', 'Globex Industries', 'globex', 'growth'),
-  ('t0000003-0003-0003-0003-000000000003', 'Initech LLC', 'initech', 'starter');
-
--- Seed users across tenants
-INSERT INTO users (id, tenant_id, email, full_name, role) VALUES
-  ('u0000001-0001-0001-0001-000000000001', 't0000001-0001-0001-0001-000000000001', 'maya@acmecorp.io', 'Maya Chen', 'owner'),
-  ('u0000002-0002-0002-0002-000000000002', 't0000001-0001-0001-0001-000000000001', 'raj@acmecorp.io', 'Raj Patel', 'admin'),
-  ('u0000003-0003-0003-0003-000000000003', 't0000001-0001-0001-0001-000000000001', 'sarah@acmecorp.io', 'Sarah Kim', 'member'),
-  ('u0000004-0004-0004-0004-000000000004', 't0000002-0002-0002-0002-000000000002', 'tom@globex.io', 'Tom Blake', 'owner'),
-  ('u0000005-0005-0005-0005-000000000005', 't0000002-0002-0002-0002-000000000002', 'ana@globex.io', 'Ana Silva', 'member'),
-  ('u0000006-0006-0006-0006-000000000006', 't0000003-0003-0003-0003-000000000003', 'dave@initech.io', 'Dave Wilson', 'owner'),
-  ('u0000007-0007-0007-0007-000000000007', 't0000003-0003-0003-0003-000000000003', 'li@initech.io', 'Li Zhang', 'member');
-
--- Seed documents with mixed sensitivity levels
-INSERT INTO documents (id, tenant_id, author_id, title, body, sensitivity) VALUES
-  ('d0000001-0001-0001-0001-000000000001', 't0000001-0001-0001-0001-000000000001', 'u0000001-0001-0001-0001-000000000001', 'Q1 Revenue Report', 'Total revenue: $4.2M. Growth: 34% YoY. Churn: 2.1%.', 'confidential'),
-  ('d0000002-0002-0002-0002-000000000002', 't0000001-0001-0001-0001-000000000001', 'u0000002-0002-0002-0002-000000000002', 'Architecture Decision Record: Auth', 'We are migrating to OIDC-based auth with tenant scoping.', 'internal'),
-  ('d0000003-0003-0003-0003-000000000003', 't0000001-0001-0001-0001-000000000001', 'u0000003-0003-0003-0003-000000000003', 'API Documentation', 'Public-facing API docs for v3.', 'public'),
-  ('d0000004-0004-0004-0004-000000000004', 't0000002-0002-0002-0002-000000000002', 'u0000004-0004-0004-0004-000000000004', 'Investor Pitch Deck Notes', 'Series B fundraise: targeting $20M at $120M valuation.', 'restricted'),
-  ('d0000005-0005-0005-0005-000000000005', 't0000002-0002-0002-0002-000000000002', 'u0000005-0005-0005-0005-000000000005', 'Onboarding Guide', 'Welcome to Globex! Here is how to get started.', 'internal'),
-  ('d0000006-0006-0006-0006-000000000006', 't0000003-0003-0003-0003-000000000003', 'u0000006-0006-0006-0006-000000000006', 'Customer List with Contacts', 'Full client roster with direct phone numbers and contract values.', 'confidential'),
-  ('d0000007-0007-0007-0007-000000000007', 't0000003-0003-0003-0003-000000000003', 'u0000007-0007-0007-0007-000000000007', 'Sprint Retrospective', 'Things went well: shipped auth. Things to improve: test coverage.', 'internal');
-
--- Seed API keys
-INSERT INTO api_keys (tenant_id, key_hash, label, scopes) VALUES
-  ('t0000001-0001-0001-0001-000000000001', 'sha256_acme_prod_key_001', 'Production API', '{"read","write"}'),
-  ('t0000001-0001-0001-0001-000000000001', 'sha256_acme_ci_key_002', 'CI/CD Pipeline', '{"read"}'),
-  ('t0000002-0002-0002-0002-000000000002', 'sha256_globex_prod_key_001', 'Globex Production', '{"read","write"}'),
-  ('t0000003-0003-0003-0003-000000000003', 'sha256_initech_prod_key_001', 'Initech API', '{"read"}');
-
--- Record migrations
-INSERT INTO supabase_migrations.schema_migrations (version, name, statements) VALUES
-  ('20250601000000_init', 'create_multitenant_schema', 'CREATE TABLE tenants (...); CREATE TABLE users (...); CREATE TABLE documents (...); CREATE TABLE api_keys (...); CREATE TABLE audit_log (...);'),
-  ('20250601000001_rls', 'enable_rls_and_policies', 'ALTER TABLE ... ENABLE ROW LEVEL SECURITY; CREATE POLICY "Tenant isolation" ...;'),
-  ('20250601000002_indexes', 'add_indexes', 'CREATE INDEX idx_users_tenant_id ...; CREATE INDEX idx_documents_tenant_id ...; CREATE INDEX idx_documents_author_id ...;');

package/dist/twin-assets/supabase/seeds/saas-starter.sql

@@ -1,175 +0,0 @@
--- SaaS starter seed: a multi-tenant SaaS application with RLS, functions, and triggers
--- Demonstrates Supabase best practices for user isolation and server-side logic
-
--- Users table (auth.users equivalent for data layer)
-CREATE TABLE users (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  email text NOT NULL UNIQUE,
-  full_name text NOT NULL,
-  avatar_url text,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-ALTER TABLE users ENABLE ROW LEVEL SECURITY;
-
--- Profiles table (public profile information)
-CREATE TABLE profiles (
-  id uuid PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
-  username text UNIQUE NOT NULL,
-  bio text,
-  website text,
-  company text,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-ALTER TABLE profiles ENABLE ROW LEVEL SECURITY;
-
--- Subscriptions table (billing/plan info)
-CREATE TABLE subscriptions (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  user_id uuid NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-  plan text NOT NULL DEFAULT 'free' CHECK (plan IN ('free', 'pro', 'enterprise')),
-  status text NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'canceled', 'past_due', 'trialing')),
-  current_period_start timestamptz NOT NULL DEFAULT now(),
-  current_period_end timestamptz NOT NULL DEFAULT now() + interval '30 days',
-  cancel_at_period_end boolean NOT NULL DEFAULT false,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-ALTER TABLE subscriptions ENABLE ROW LEVEL SECURITY;
-
--- Teams table (for multi-tenant features)
-CREATE TABLE teams (
-  id uuid PRIMARY KEY DEFAULT gen_random_uuid(),
-  name text NOT NULL,
-  slug text UNIQUE NOT NULL,
-  owner_id uuid NOT NULL REFERENCES users(id),
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-ALTER TABLE teams ENABLE ROW LEVEL SECURITY;
-
--- Team members junction
-CREATE TABLE team_members (
-  team_id uuid NOT NULL REFERENCES teams(id) ON DELETE CASCADE,
-  user_id uuid NOT NULL REFERENCES users(id) ON DELETE CASCADE,
-  role text NOT NULL DEFAULT 'member' CHECK (role IN ('owner', 'admin', 'member', 'viewer')),
-  joined_at timestamptz NOT NULL DEFAULT now(),
-  PRIMARY KEY (team_id, user_id)
-);
-
-ALTER TABLE team_members ENABLE ROW LEVEL SECURITY;
-
--- RLS policies: users can read/update their own data
-CREATE POLICY "Users can read own data" ON users FOR SELECT USING (true);
-CREATE POLICY "Users can update own data" ON users FOR UPDATE USING (id = id);
-
-CREATE POLICY "Profiles are publicly readable" ON profiles FOR SELECT USING (true);
-CREATE POLICY "Users can update own profile" ON profiles FOR UPDATE USING (id = id);
-CREATE POLICY "Users can insert own profile" ON profiles FOR INSERT WITH CHECK (id = id);
-
-CREATE POLICY "Users can read own subscriptions" ON subscriptions FOR SELECT USING (user_id = user_id);
-
-CREATE POLICY "Team members can read team" ON teams FOR SELECT USING (true);
-CREATE POLICY "Team owners can update team" ON teams FOR UPDATE USING (owner_id = owner_id);
-
-CREATE POLICY "Members can read team membership" ON team_members FOR SELECT USING (true);
-
--- Function: handle new user signup (creates profile automatically)
-CREATE OR REPLACE FUNCTION handle_new_user()
-RETURNS trigger
-LANGUAGE plpgsql
-SECURITY DEFINER
-AS $$
-BEGIN
-  INSERT INTO profiles (id, username)
-  VALUES (NEW.id, split_part(NEW.email, '@', 1));
-  RETURN NEW;
-END;
-$$;
-
--- Trigger: auto-create profile on user insert
-CREATE TRIGGER on_user_created
-  AFTER INSERT ON users
-  FOR EACH ROW
-  EXECUTE FUNCTION handle_new_user();
-
--- Function: update updated_at timestamp
-CREATE OR REPLACE FUNCTION update_updated_at()
-RETURNS trigger
-LANGUAGE plpgsql
-AS $$
-BEGIN
-  NEW.updated_at = now();
-  RETURN NEW;
-END;
-$$;
-
--- Triggers: auto-update timestamps
-CREATE TRIGGER update_users_updated_at
-  BEFORE UPDATE ON users
-  FOR EACH ROW
-  EXECUTE FUNCTION update_updated_at();
-
-CREATE TRIGGER update_profiles_updated_at
-  BEFORE UPDATE ON profiles
-  FOR EACH ROW
-  EXECUTE FUNCTION update_updated_at();
-
-CREATE TRIGGER update_subscriptions_updated_at
-  BEFORE UPDATE ON subscriptions
-  FOR EACH ROW
-  EXECUTE FUNCTION update_updated_at();
-
-CREATE TRIGGER update_teams_updated_at
-  BEFORE UPDATE ON teams
-  FOR EACH ROW
-  EXECUTE FUNCTION update_updated_at();
-
--- Indexes
-CREATE INDEX idx_subscriptions_user_id ON subscriptions(user_id);
-CREATE INDEX idx_teams_owner_id ON teams(owner_id);
-CREATE INDEX idx_team_members_user_id ON team_members(user_id);
-
--- Seed data
-INSERT INTO users (id, email, full_name) VALUES
-  ('a1b2c3d4-e5f6-7890-abcd-ef1234567890', 'alice@startup.io', 'Alice Johnson'),
-  ('b2c3d4e5-f6a7-8901-bcde-f12345678901', 'bob@startup.io', 'Bob Martinez'),
-  ('c3d4e5f6-a7b8-9012-cdef-123456789012', 'carol@bigcorp.com', 'Carol Chen'),
-  ('d4e5f6a7-b8c9-0123-defa-234567890123', 'dave@freelance.dev', 'Dave Wilson'),
-  ('e5f6a7b8-c9d0-1234-efab-345678901234', 'eve@startup.io', 'Eve Garcia');
-
-INSERT INTO subscriptions (user_id, plan, status) VALUES
-  ('a1b2c3d4-e5f6-7890-abcd-ef1234567890', 'pro', 'active'),
-  ('b2c3d4e5-f6a7-8901-bcde-f12345678901', 'pro', 'active'),
-  ('c3d4e5f6-a7b8-9012-cdef-123456789012', 'enterprise', 'active'),
-  ('d4e5f6a7-b8c9-0123-defa-234567890123', 'free', 'active'),
-  ('e5f6a7b8-c9d0-1234-efab-345678901234', 'pro', 'trialing');
-
-INSERT INTO teams (name, slug, owner_id) VALUES
-  ('Startup Team', 'startup-team', 'a1b2c3d4-e5f6-7890-abcd-ef1234567890'),
-  ('BigCorp Engineering', 'bigcorp-eng', 'c3d4e5f6-a7b8-9012-cdef-123456789012');
-
-INSERT INTO team_members (team_id, user_id, role)
-SELECT t.id, u.id, CASE
-  WHEN u.id = 'a1b2c3d4-e5f6-7890-abcd-ef1234567890' THEN 'owner'
-  ELSE 'member'
-END
-FROM teams t, users u
-WHERE t.slug = 'startup-team'
-  AND u.email IN ('alice@startup.io', 'bob@startup.io', 'eve@startup.io');
-
-INSERT INTO team_members (team_id, user_id, role)
-SELECT t.id, u.id, 'owner'
-FROM teams t, users u
-WHERE t.slug = 'bigcorp-eng' AND u.email = 'carol@bigcorp.com';
-
--- Record migrations
-INSERT INTO supabase_migrations.schema_migrations (version, name, statements) VALUES
-  ('20250101000000_init', 'create_saas_schema', 'CREATE TABLE users ...; CREATE TABLE profiles ...; CREATE TABLE subscriptions ...; CREATE TABLE teams ...; CREATE TABLE team_members ...;'),
-  ('20250101000001_rls', 'enable_rls_policies', 'ALTER TABLE ... ENABLE ROW LEVEL SECURITY; CREATE POLICY ...;'),
-  ('20250101000002_functions', 'create_functions_triggers', 'CREATE FUNCTION handle_new_user ...; CREATE TRIGGER ...;');

package/dist/twin-assets/supabase/seeds/small-project.sql

@@ -1,134 +0,0 @@
--- Small project seed: a typical blog application
--- Creates users, posts, comments, tags tables with realistic data
-
-CREATE TABLE users (
-  id serial PRIMARY KEY,
-  email text NOT NULL UNIQUE,
-  name text NOT NULL,
-  role text NOT NULL DEFAULT 'member',
-  bio text,
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE TABLE posts (
-  id serial PRIMARY KEY,
-  user_id int NOT NULL REFERENCES users(id),
-  title text NOT NULL,
-  body text,
-  published boolean NOT NULL DEFAULT false,
-  created_at timestamptz NOT NULL DEFAULT now(),
-  updated_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE TABLE comments (
-  id serial PRIMARY KEY,
-  post_id int NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
-  user_id int NOT NULL REFERENCES users(id),
-  body text NOT NULL,
-  created_at timestamptz NOT NULL DEFAULT now()
-);
-
-CREATE TABLE tags (
-  id serial PRIMARY KEY,
-  name text NOT NULL UNIQUE
-);
-
-CREATE TABLE post_tags (
-  post_id int NOT NULL REFERENCES posts(id) ON DELETE CASCADE,
-  tag_id int NOT NULL REFERENCES tags(id) ON DELETE CASCADE,
-  PRIMARY KEY (post_id, tag_id)
-);
-
-CREATE INDEX idx_posts_user_id ON posts(user_id);
-CREATE INDEX idx_comments_post_id ON comments(post_id);
-CREATE INDEX idx_comments_user_id ON comments(user_id);
-
--- Seed users
-INSERT INTO users (email, name, role, bio) VALUES
-  ('alice@example.com', 'Alice Chen', 'admin', 'Full-stack engineer and tech lead'),
-  ('bob@example.com', 'Bob Smith', 'member', 'Backend developer'),
-  ('carol@example.com', 'Carol Davis', 'member', 'Frontend specialist'),
-  ('dave@example.com', 'Dave Wilson', 'member', NULL),
-  ('eve@example.com', 'Eve Martinez', 'moderator', 'DevOps and infrastructure');
-
--- Seed posts
-INSERT INTO posts (user_id, title, body, published) VALUES
-  (1, 'Getting Started with Supabase', 'Supabase is an open source Firebase alternative. This guide walks through setting up your first project.', true),
-  (1, 'Advanced SQL Patterns', 'Common table expressions, window functions, and recursive queries explained.', true),
-  (2, 'Building REST APIs', 'A practical guide to designing and implementing RESTful services.', true),
-  (2, 'Database Indexing Strategies', 'When and how to add indexes for optimal query performance.', true),
-  (3, 'Modern CSS Techniques', 'Container queries, cascade layers, and other modern CSS features.', true),
-  (3, 'React Server Components', 'Understanding the new paradigm for server-rendered React applications.', true),
-  (1, 'Draft: Postgres Extensions', 'Notes on useful Postgres extensions for production use.', false),
-  (4, 'My First Post', 'Hello world! Just getting started here.', true),
-  (5, 'Infrastructure as Code', 'Managing cloud resources with Terraform and Pulumi.', true),
-  (5, 'Monitoring Best Practices', 'Setting up observability for production applications.', true),
-  (2, 'GraphQL vs REST', 'Comparing two popular API paradigms for modern applications.', true),
-  (3, 'Accessibility in Web Apps', 'Essential patterns for building inclusive web applications.', true),
-  (1, 'Draft: Testing Strategies', 'Unit tests, integration tests, and end-to-end testing approaches.', false),
-  (4, 'Learning TypeScript', 'Tips and resources for getting started with TypeScript.', true),
-  (5, 'Docker Fundamentals', 'Container basics for developers new to Docker.', true);
-
--- Seed tags
-INSERT INTO tags (name) VALUES
-  ('tutorial'),
-  ('database'),
-  ('frontend'),
-  ('backend'),
-  ('devops'),
-  ('typescript'),
-  ('react');
-
--- Seed post_tags
-INSERT INTO post_tags (post_id, tag_id) VALUES
-  (1, 1), (1, 2),
-  (2, 2),
-  (3, 1), (3, 4),
-  (4, 2),
-  (5, 3),
-  (6, 3), (6, 7),
-  (8, 1),
-  (9, 5),
-  (10, 5),
-  (11, 4),
-  (12, 3),
-  (14, 6),
-  (15, 5);
-
--- Seed comments
-INSERT INTO comments (post_id, user_id, body) VALUES
-  (1, 2, 'Great introduction! Very helpful for beginners.'),
-  (1, 3, 'Would love to see a follow-up on authentication.'),
-  (1, 4, 'Thanks for sharing this.'),
-  (2, 5, 'The CTE examples are really clear.'),
-  (2, 3, 'Window functions finally make sense!'),
-  (3, 1, 'Nice breakdown of REST principles.'),
-  (3, 4, 'How does this compare to GraphQL?'),
-  (3, 5, 'The versioning section was particularly useful.'),
-  (4, 1, 'Good timing - we just hit performance issues with missing indexes.'),
-  (4, 3, 'Partial indexes are underrated.'),
-  (5, 2, 'Container queries are a game changer.'),
-  (5, 4, 'Finally catching up on modern CSS. Thanks!'),
-  (6, 1, 'RSC is going to change how we build apps.'),
-  (6, 2, 'Still trying to wrap my head around the mental model.'),
-  (6, 5, 'Any performance benchmarks?'),
-  (8, 1, 'Welcome aboard!'),
-  (8, 3, 'Good to have you here.'),
-  (9, 2, 'Terraform has been rock solid for our team.'),
-  (9, 1, 'Great comparison of Terraform vs Pulumi.'),
-  (10, 3, 'What monitoring stack do you recommend?'),
-  (10, 4, 'We use Grafana + Prometheus and it works well.'),
-  (11, 5, 'We ended up going with REST for our use case.'),
-  (11, 1, 'Both have their place depending on the requirements.'),
-  (12, 2, 'Accessibility should be the default, not an afterthought.'),
-  (12, 5, 'The ARIA examples are very practical.'),
-  (14, 1, 'TypeScript is worth the learning curve.'),
-  (14, 3, 'The type system is incredibly powerful once you get used to it.'),
-  (15, 1, 'Docker compose makes local development so much easier.'),
-  (15, 2, 'Multi-stage builds are essential for production images.'),
-  (15, 4, 'Great starting point for Docker beginners.');
-
--- Record migrations
-INSERT INTO supabase_migrations.schema_migrations (version, name, statements) VALUES
-  ('20250101000000_init', 'create_initial_schema', 'CREATE TABLE users (...); CREATE TABLE posts (...); CREATE TABLE comments (...); CREATE TABLE tags (...); CREATE TABLE post_tags (...);'),
-  ('20250101000001_indexes', 'add_indexes', 'CREATE INDEX idx_posts_user_id ON posts(user_id); CREATE INDEX idx_comments_post_id ON comments(post_id); CREATE INDEX idx_comments_user_id ON comments(user_id);');

package/dist/twin-assets/telegram/fidelity.json

@@ -1,19 +0,0 @@
-{
-  "twin": "telegram",
-  "api": "telegram-bot-api",
-  "version": "0.1.0",
-  "capabilities": [
-    {
-      "name": "getMe (approved cold-start tool)",
-      "supported": true
-    },
-    {
-      "name": "getUpdates (approved cold-start tool)",
-      "supported": true
-    },
-    {
-      "name": "sendMessage (approved cold-start tool)",
-      "supported": true
-    }
-  ]
-}

package/dist/twin-assets/telegram/seeds/empty.json

@@ -1 +0,0 @@
-{}

package/dist/twin-assets/telegram/seeds/harvested.json

@@ -1,130 +0,0 @@
-{
-  "botProfiles": [
-    {
-      "id": 1,
-      "createdAt": "2026-03-14T04:55:49.843Z",
-      "updatedAt": "2026-03-14T04:55:49.843Z",
-      "payload": {
-        "id": 8620849624,
-        "is_bot": true,
-        "first_name": "twingen",
-        "username": "twingen_bot",
-        "can_join_groups": true,
-        "can_read_all_group_messages": false,
-        "supports_inline_queries": false,
-        "can_connect_to_business": false,
-        "has_main_web_app": false,
-        "has_topics_enabled": false,
-        "allows_users_to_create_topics": false
-      },
-      "telegramUserId": 8620849624
-    }
-  ],
-  "users": [
-    {
-      "id": 1,
-      "createdAt": "2026-03-14T04:55:49.843Z",
-      "updatedAt": "2026-03-14T04:55:49.843Z",
-      "payload": {
-        "id": 8620849624,
-        "is_bot": true,
-        "first_name": "twingen",
-        "username": "twingen_bot",
-        "can_join_groups": true,
-        "can_read_all_group_messages": false,
-        "supports_inline_queries": false,
-        "can_connect_to_business": false,
-        "has_main_web_app": false,
-        "has_topics_enabled": false,
-        "allows_users_to_create_topics": false
-      },
-      "telegramUserId": 8620849624
-    },
-    {
-      "id": 2,
-      "createdAt": "2026-03-14T04:55:49.843Z",
-      "updatedAt": "2026-03-14T04:55:49.843Z",
-      "payload": {
-        "id": 999000001,
-        "is_bot": false,
-        "first_name": "Test",
-        "last_name": "User",
-        "language_code": "en"
-      },
-      "telegramUserId": 999000001
-    }
-  ],
-  "chats": [
-    {
-      "id": 1,
-      "createdAt": "2026-03-14T04:55:49.843Z",
-      "updatedAt": "2026-03-14T04:55:49.843Z",
-      "payload": {
-        "id": 999000001,
-        "first_name": "Test",
-        "last_name": "User",
-        "type": "private"
-      },
-      "telegramChatId": 999000001
-    }
-  ],
-  "messages": [
-    {
-      "id": 1,
-      "createdAt": "2026-03-14T04:55:49.843Z",
-      "updatedAt": "2026-03-14T04:55:49.843Z",
-      "payload": {
-        "message_id": 111,
-        "from": {
-          "id": 8620849624,
-          "is_bot": true,
-          "first_name": "twingen",
-          "username": "twingen_bot"
-        },
-        "chat": {
-          "id": 999000001,
-          "first_name": "Test",
-          "last_name": "User",
-          "type": "private"
-        },
-        "date": 1773464149,
-        "text": "archal telegram fixture harvest 2026-03-14T04:55:49.194Z"
-      },
-      "telegramMessageId": 111,
-      "chatId": 999000001,
-      "fromTelegramUserId": 8620849624,
-      "date": 1773464149,
-      "text": "archal telegram fixture harvest 2026-03-14T04:55:49.194Z"
-    }
-  ],
-  "updates": [
-    {
-      "id": 1,
-      "createdAt": "2026-03-14T04:55:49.843Z",
-      "updatedAt": "2026-03-14T04:55:49.843Z",
-      "payload": {
-        "update_id": 707484527,
-        "message": {
-          "message_id": 103,
-          "from": {
-            "id": 999000001,
-            "is_bot": false,
-            "first_name": "Test",
-            "last_name": "User",
-            "language_code": "en"
-          },
-          "chat": {
-            "id": 999000001,
-            "first_name": "Test",
-            "last_name": "User",
-            "type": "private"
-          },
-          "date": 1773461017,
-          "text": "message"
-        }
-      },
-      "telegramUpdateId": 707484527,
-      "kind": "message"
-    }
-  ]
-}

package/harnesses/_lib/agent-trace.mjs

@@ -1,57 +0,0 @@
-/**
- * Structured agent trace writer for bundled harnesses.
- *
- * Records per-step model thinking, text output, and tool calls as a structured
- * JSON trace. The orchestrator reads this file after the harness exits and flows
- * it into RunResult → artifacts → dashboard.
- *
- * Transport: writes to ARCHAL_AGENT_TRACE_FILE (set by orchestrator).
- * Safe no-op when the env var is not set.
- *
- * Trace format:
- *   { version: 1, steps: [ { step, thinking, text, toolCalls, durationMs } ] }
- */
-import { writeFileSync } from 'node:fs';
-
-/**
- * @typedef {Object} TraceStep
- * @property {number} step           - 1-indexed step number
- * @property {string|null} thinking  - Model's internal reasoning (extended thinking / reasoning_content)
- * @property {string|null} text      - Model's visible text output (reasoning "out loud")
- * @property {Array<{name: string, arguments: object}>} toolCalls - Tools called this step
- * @property {number} durationMs     - LLM call duration for this step
- */
-
-/**
- * Create a trace collector that accumulates steps and writes on flush.
- * @returns {{ addStep: (step: TraceStep) => void, flush: () => void }}
- */
-export function createAgentTrace() {
-  /** @type {TraceStep[]} */
-  const steps = [];
-
-  return {
-    /**
-     * Record a single agent step.
-     * @param {TraceStep} step
-     */
-    addStep(step) {
-      steps.push(step);
-    },
-
-    /**
-     * Write the accumulated trace to the file. Call once at the end.
-     */
-    flush() {
-      const tracePath = process.env['ARCHAL_AGENT_TRACE_FILE'];
-      if (!tracePath) return;
-
-      try {
-        const payload = { version: 1, steps };
-        writeFileSync(tracePath, JSON.stringify(payload));
-      } catch {
-        // Non-fatal — trace is best-effort
-      }
-    },
-  };
-}

package/harnesses/_lib/env-utils.mjs

@@ -1,23 +0,0 @@
-/**
- * Shared environment variable parsing utilities for bundled harnesses.
- */
-
-/**
- * Parse an integer from an environment variable with validation and clamping.
- * Replaces the repeated IIFE pattern across agent files.
- *
- * @param {string} envVar - Environment variable name
- * @param {number} defaultValue - Default if env var is not set or invalid
- * @param {{ min?: number, max?: number }} [opts] - Optional min/max bounds
- * @returns {number}
- */
-export function parseEnvInt(envVar, defaultValue, { min, max } = {}) {
-  const raw = process.env[envVar]?.trim();
-  if (!raw) return defaultValue;
-  const parsed = parseInt(raw, 10);
-  if (Number.isNaN(parsed)) return defaultValue;
-  let value = parsed;
-  if (min !== undefined && value < min) value = min;
-  if (max !== undefined && value > max) value = max;
-  return value;
-}