@derwinjs/db 0.7.0 → 0.8.0

package/prisma-client/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "prisma-client-066e8161e24d11a80c9958a72d4d5ce33cf4b1ec59b2112c45a8e8419025acf5",
+  "name": "prisma-client-80d22168424dade7c0d713042f02aefb7e5dd12207a0e4feb91cb2584021f57a",
   "main": "index.js",
   "types": "index.d.ts",
   "browser": "index-browser.js",

package/prisma-client/schema.prisma

@@ -77,6 +77,17 @@ model Project {
   dailyDispatchLimit Int     @default(50)
   testCommand        String? // shell command for Verify-Pre, default 'pnpm test'
 
+  // Sprint 8 Phase 3 (QAP-084) — per-project monthly auto-fix budget cap +
+  // soft-warn percentage. The legacy `monthlyBudgetCents` field above predates
+  // the budget-gate work and is kept for back-compat with policy-derived caps;
+  // the gate added here reads `monthlyBudgetUsd` (Float USD) for explicit
+  // operator-facing budgets and uses `null` to mean NO_CAP. Soft-warn fires
+  // at `utilization >= budgetSoftWarnPct` (default 0.8 = 80%); HARD_STOP fires
+  // at `utilization >= 1.0` and refuses new auto-fix dispatches. See SDK
+  // BudgetGate contract in @derwinjs/sdk for full semantics.
+  monthlyBudgetUsd  Float? // null = no cap
+  budgetSoftWarnPct Float  @default(0.8) // soft warn at 80% by default
+
   // GitHub integration (QAP-019C / Group D-1, 2026-05-04).
   //
   // `repoFullName` is the canonical "<owner>/<repo>" identifier (e.g.,
@@ -96,18 +107,47 @@ model Project {
   webhookSecret String?
   authorModel   String? // override Author LLM model (Sprint 3b — claude-sonnet-4-6 default in adapter)
 
+  // Default risk tier when no PathTierRule matches (QAP-080, Sprint 8). Used
+  // by PathTierResolver.resolveTier() as the fallback. LOW chosen as the
+  // safe-by-default starting point — operators bump it via the policy editor
+  // (Sprint 9 / QAP-088) once the project has trust history.
+  defaultTier RiskTier @default(LOW)
+
+  // Per-tier minimum trustPercent for auto-fix dispatch (QAP-082, Sprint 8
+  // Phase 2). JSON shape: { low: number, medium: number, high: number } —
+  // matches the SDK's TrustThresholdConfig. Null → use DEFAULT_TRUST_THRESHOLDS
+  // ({ low: 60, medium: 80, high: 95 }). NEVER tier always blocks dispatch
+  // and is not represented in the JSON.
+  trustThresholds Json?
+
+  // Per-project kill-switch threshold overrides (QAP-085..087, Sprint 8
+  // Phase 4). JSON shape: {
+  //   successRateDropPct?: number,            // QAP-085 — < ratio trips
+  //   successRateMinSample?: number,          // QAP-085 — min total attempts
+  //   consecutiveFailureN?: number,           // QAP-086 — N in a row trips
+  //   consecutiveFailureWindowHours?: number, // QAP-086 — window
+  //   regressionCascadeN?: number,            // QAP-087 — platform-wide N
+  //   regressionCascadeWindowHours?: number,  // QAP-087 — window
+  // }.
+  // Null → use DEFAULT_THRESHOLDS in createPrismaKillSwitchEvaluator.
+  killSwitchConfig Json?
+
   // Relations
-  profile        ProjectProfile?
-  runs           QARun[]
-  tickets        QATicket[]
-  fixAttempts    QAFixAttempt[]
-  auditArtifacts AuditArtifact[]
-  policies       Policy[]
-  trustScores    ClassificationTrust[]
-  modeLog        ProjectModeLog[]
-  patterns       QAPattern[]
-  reverts        QARevert[]
-  uniformities   QAUniformity[]
+  profile                 ProjectProfile?
+  runs                    QARun[]
+  tickets                 QATicket[]
+  fixAttempts             QAFixAttempt[]
+  auditArtifacts          AuditArtifact[]
+  policies                Policy[]
+  trustScores             ClassificationTrust[]
+  modeLog                 ProjectModeLog[]
+  patterns                QAPattern[]
+  reverts                 QARevert[]
+  uniformities            QAUniformity[]
+  pathTierRules           PathTierRule[]
+  classificationOverrides ClassificationOverride[]
+  freezeWindows           FreezeWindow[]
+  killSwitches            KillSwitchState[]
 
   @@map("projects")
   @@schema("derwin")
@@ -633,6 +673,138 @@ enum PolicyType {
   @@schema("derwin")
 }
 
+// ─── Sprint 8 (QAP-080..081) — explicit policy tables ────────────────────
+//
+// `Policy.pathRules` and `Policy.classificationOverrides` were JSON columns
+// historically. Sprint 8 promotes them to first-class tables so the
+// operator-facing policy editor (Sprint 9 / QAP-088) can render, reorder,
+// and audit them as discrete rows. The legacy JSON fields stay on Policy
+// to preserve back-compat with QAP-013's createPrismaFixPolicy until
+// Sprint 9 migrates the read path; new writes go to these tables.
+
+model PathTierRule {
+  id        String   @id @default(cuid())
+  projectId String
+  pattern   String // glob: '*' = single segment, '**' = cross-segment
+  tier      RiskTier
+  // Lower number = higher precedence. Assigned in-order by setRules.
+  priority  Int
+  reason    String?
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@index([projectId, priority])
+  @@map("path_tier_rules")
+  @@schema("derwin")
+}
+
+model ClassificationOverride {
+  id             String       @id @default(cuid())
+  projectId      String
+  classification String // free-form QATicket.classification value (e.g. 'SELECTOR')
+  // Surface filter — null means "applies to ALL surfaces" (wildcard).
+  surface        String?
+  overrideMode   OverrideMode
+  // Non-null ONLY when overrideMode === DOWNGRADE_TIER. Validated at write.
+  downgradeTier  RiskTier?
+  reason         String       @db.Text
+  createdBy      String
+  createdAt      DateTime     @default(now())
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@index([projectId, classification, surface])
+  @@map("classification_overrides")
+  @@schema("derwin")
+}
+
+enum OverrideMode {
+  BLOCK_AUTO_FIX
+  FORCE_ESCALATION
+  DOWNGRADE_TIER
+
+  @@schema("derwin")
+}
+
+// ─── Sprint 8 Phase 2 (QAP-083) — Freeze windows ─────────────────────────
+//
+// Operator-defined recurring time windows during which auto-fix dispatch
+// is partially or fully blocked. Cron-driven (5-field, no seconds): the
+// dispatcher computes the most recent firing time at-or-before `now` and
+// considers the window active if `(now - lastFire) < durationMinutes * 60s`.
+// See FreezeWindowEvaluator contract in @derwinjs/sdk for full semantics.
+
+model FreezeWindow {
+  id              String   @id @default(cuid())
+  projectId       String
+  cronExpression  String
+  durationMinutes Int
+  label           String
+  blocksDispatch  Boolean  @default(true)
+  enabled         Boolean  @default(true)
+  createdAt       DateTime @default(now())
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@index([projectId, enabled])
+  @@map("freeze_windows")
+  @@schema("derwin")
+}
+
+// ─── Sprint 8 Phase 4 (QAP-085..087) — Kill switches ─────────────────────
+//
+// Three independent triggers that halt auto-fix activity when recent
+// telemetry indicates the platform is misbehaving:
+//   - SUCCESS_RATE_DROP   (QAP-085) → scope CLASSIFICATION (per-(class,surface))
+//   - CONSECUTIVE_FAILURE (QAP-086) → scope PROJECT
+//   - REGRESSION_CASCADE  (QAP-087) → scope PLATFORM (projectId IS NULL)
+//
+// History-preserving — a new trip creates a new row rather than mutating
+// an old one — so the audit trail shows every trip across time. The
+// `engaged` flag flips to false on operator unblock; subsequent re-trips
+// of the same tuple insert another row.
+
+model KillSwitchState {
+  id             String          @id @default(cuid())
+  projectId      String?
+  classification String?
+  surface        String?
+  type           KillSwitchType
+  scope          KillSwitchScope
+  engaged        Boolean         @default(true)
+  engagedAt      DateTime        @default(now())
+  unblockedAt    DateTime?
+  unblockedBy    String?
+  reason         String          @db.Text
+  triggerMetrics Json
+  createdAt      DateTime        @default(now())
+
+  project Project? @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@index([projectId, engaged])
+  @@index([type, scope, engaged])
+  @@map("kill_switch_states")
+  @@schema("derwin")
+}
+
+enum KillSwitchType {
+  SUCCESS_RATE_DROP
+  CONSECUTIVE_FAILURE
+  REGRESSION_CASCADE
+
+  @@schema("derwin")
+}
+
+enum KillSwitchScope {
+  CLASSIFICATION
+  PROJECT
+  PLATFORM
+
+  @@schema("derwin")
+}
+
 model ProjectModeLog {
   id        String      @id @default(cuid())
   projectId String

package/prisma-client/wasm.js

@@ -135,9 +135,14 @@ exports.Prisma.ProjectScalarFieldEnum = {
   monthlyBudgetCents: 'monthlyBudgetCents',
   dailyDispatchLimit: 'dailyDispatchLimit',
   testCommand: 'testCommand',
+  monthlyBudgetUsd: 'monthlyBudgetUsd',
+  budgetSoftWarnPct: 'budgetSoftWarnPct',
   repoFullName: 'repoFullName',
   webhookSecret: 'webhookSecret',
-  authorModel: 'authorModel'
+  authorModel: 'authorModel',
+  defaultTier: 'defaultTier',
+  trustThresholds: 'trustThresholds',
+  killSwitchConfig: 'killSwitchConfig'
 };
 
 exports.Prisma.ProjectProfileScalarFieldEnum = {
@@ -323,6 +328,56 @@ exports.Prisma.PolicyScalarFieldEnum = {
   updatedBy: 'updatedBy'
 };
 
+exports.Prisma.PathTierRuleScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  pattern: 'pattern',
+  tier: 'tier',
+  priority: 'priority',
+  reason: 'reason',
+  createdAt: 'createdAt',
+  updatedAt: 'updatedAt'
+};
+
+exports.Prisma.ClassificationOverrideScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  classification: 'classification',
+  surface: 'surface',
+  overrideMode: 'overrideMode',
+  downgradeTier: 'downgradeTier',
+  reason: 'reason',
+  createdBy: 'createdBy',
+  createdAt: 'createdAt'
+};
+
+exports.Prisma.FreezeWindowScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  cronExpression: 'cronExpression',
+  durationMinutes: 'durationMinutes',
+  label: 'label',
+  blocksDispatch: 'blocksDispatch',
+  enabled: 'enabled',
+  createdAt: 'createdAt'
+};
+
+exports.Prisma.KillSwitchStateScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  classification: 'classification',
+  surface: 'surface',
+  type: 'type',
+  scope: 'scope',
+  engaged: 'engaged',
+  engagedAt: 'engagedAt',
+  unblockedAt: 'unblockedAt',
+  unblockedBy: 'unblockedBy',
+  reason: 'reason',
+  triggerMetrics: 'triggerMetrics',
+  createdAt: 'createdAt'
+};
+
 exports.Prisma.ProjectModeLogScalarFieldEnum = {
   id: 'id',
   projectId: 'projectId',
@@ -400,12 +455,12 @@ exports.Prisma.SortOrder = {
   desc: 'desc'
 };
 
-exports.Prisma.JsonNullValueInput = {
+exports.Prisma.NullableJsonNullValueInput = {
+  DbNull: Prisma.DbNull,
   JsonNull: Prisma.JsonNull
 };
 
-exports.Prisma.NullableJsonNullValueInput = {
-  DbNull: Prisma.DbNull,
+exports.Prisma.JsonNullValueInput = {
   JsonNull: Prisma.JsonNull
 };
 
@@ -414,16 +469,16 @@ exports.Prisma.QueryMode = {
   insensitive: 'insensitive'
 };
 
-exports.Prisma.NullsOrder = {
-  first: 'first',
-  last: 'last'
-};
-
 exports.Prisma.JsonNullValueFilter = {
   DbNull: Prisma.DbNull,
   JsonNull: Prisma.JsonNull,
   AnyNull: Prisma.AnyNull
 };
+
+exports.Prisma.NullsOrder = {
+  first: 'first',
+  last: 'last'
+};
 exports.ProjectType = exports.$Enums.ProjectType = {
   SAAS: 'SAAS',
   ECOMMERCE: 'ECOMMERCE',
@@ -441,6 +496,13 @@ exports.ProjectMode = exports.$Enums.ProjectMode = {
   AUTO: 'AUTO'
 };
 
+exports.RiskTier = exports.$Enums.RiskTier = {
+  LOW: 'LOW',
+  MEDIUM: 'MEDIUM',
+  HIGH: 'HIGH',
+  NEVER: 'NEVER'
+};
+
 exports.RunTrigger = exports.$Enums.RunTrigger = {
   CRON: 'CRON',
   OPERATOR_ON_DEMAND: 'OPERATOR_ON_DEMAND',
@@ -474,13 +536,6 @@ exports.Severity = exports.$Enums.Severity = {
   LOW: 'LOW'
 };
 
-exports.RiskTier = exports.$Enums.RiskTier = {
-  LOW: 'LOW',
-  MEDIUM: 'MEDIUM',
-  HIGH: 'HIGH',
-  NEVER: 'NEVER'
-};
-
 exports.TicketStatus = exports.$Enums.TicketStatus = {
   OPEN: 'OPEN',
   INVESTIGATING: 'INVESTIGATING',
@@ -543,6 +598,24 @@ exports.PolicyType = exports.$Enums.PolicyType = {
   ESCALATION: 'ESCALATION'
 };
 
+exports.OverrideMode = exports.$Enums.OverrideMode = {
+  BLOCK_AUTO_FIX: 'BLOCK_AUTO_FIX',
+  FORCE_ESCALATION: 'FORCE_ESCALATION',
+  DOWNGRADE_TIER: 'DOWNGRADE_TIER'
+};
+
+exports.KillSwitchType = exports.$Enums.KillSwitchType = {
+  SUCCESS_RATE_DROP: 'SUCCESS_RATE_DROP',
+  CONSECUTIVE_FAILURE: 'CONSECUTIVE_FAILURE',
+  REGRESSION_CASCADE: 'REGRESSION_CASCADE'
+};
+
+exports.KillSwitchScope = exports.$Enums.KillSwitchScope = {
+  CLASSIFICATION: 'CLASSIFICATION',
+  PROJECT: 'PROJECT',
+  PLATFORM: 'PLATFORM'
+};
+
 exports.QAFailureClass = exports.$Enums.QAFailureClass = {
   SELECTOR: 'SELECTOR',
   TIMING: 'TIMING',
@@ -577,6 +650,10 @@ exports.Prisma.ModelName = {
   RAGCorpus: 'RAGCorpus',
   AuditArtifact: 'AuditArtifact',
   Policy: 'Policy',
+  PathTierRule: 'PathTierRule',
+  ClassificationOverride: 'ClassificationOverride',
+  FreezeWindow: 'FreezeWindow',
+  KillSwitchState: 'KillSwitchState',
   ProjectModeLog: 'ProjectModeLog',
   SpendLedger: 'SpendLedger',
   QAPattern: 'QAPattern',