@derwinjs/db 0.9.0 → 0.10.0

package/prisma-client/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "prisma-client-80d22168424dade7c0d713042f02aefb7e5dd12207a0e4feb91cb2584021f57a",
+  "name": "prisma-client-deda071698db4a99242c121e3538d4b7fb3a521480d46d881f9efc884cebfc6f",
   "main": "index.js",
   "types": "index.d.ts",
   "browser": "index-browser.js",

package/prisma-client/schema.prisma

@@ -148,6 +148,9 @@ model Project {
   classificationOverrides ClassificationOverride[]
   freezeWindows           FreezeWindow[]
   killSwitches            KillSwitchState[]
+  visualBaselines         VisualBaseline[]
+  contractBaselines       ContractBaseline[]
+  tenantFuzzConfig        TenantFuzzConfig?
 
   @@map("projects")
   @@schema("derwin")
@@ -982,3 +985,107 @@ enum QAUniformityStatus {
 
   @@schema("derwin")
 }
+
+// ═══════════════════════════════════════════════════════════════════════════
+// QAP-105 (Sprint 10 Phase 2) — Visual baselines (pixel-diff regression)
+// ═══════════════════════════════════════════════════════════════════════════
+//
+// Stores the durable baseline screenshot bytes that VisualRegressionScanner
+// pixel-diffs against on subsequent runs. One row per (projectId, scopeKey)
+// — operator approves a new baseline by replacing the bytes via
+// VisualBaselineStore.setBaseline. The Prisma-backed implementation lives
+// at packages/db/src/visual-baseline-store.ts; the SDK contract is in
+// @derwinjs/sdk (VisualBaselineStore in
+// packages/sdk/src/types/visual-regression-scanner.ts).
+//
+// Stored as Postgres BYTEA so a small to mid-sized PNG fits inline. Rows
+// large enough to push past Postgres TOAST threshold get TOAST'd
+// transparently — no special handling required at this layer.
+
+model VisualBaseline {
+  id        String   @id @default(cuid())
+  projectId String
+  scopeKey  String
+  bytes     Bytes
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@unique([projectId, scopeKey])
+  @@map("visual_baselines")
+  @@schema("derwin")
+}
+
+// ═══════════════════════════════════════════════════════════════════════════
+// QAP-103 (Sprint 10 Phase 3) — Contract baselines (API contract diff)
+// ═══════════════════════════════════════════════════════════════════════════
+//
+// Stores the durable baseline OpenAPI / JSON-schema spec text that
+// ContractDiffer diffs candidates against on subsequent runs. One row per
+// (projectId, specKey) — operator approves a new baseline by replacing the
+// spec via ContractBaselineStore.setBaseline. Multiple specKeys are
+// allowed per project ('main-api', 'webhook-payloads', etc.).
+//
+// The Prisma-backed implementation lives at
+// packages/db/src/contract-baseline-store.ts; the SDK contract is in
+// @derwinjs/sdk (ContractBaselineStore in
+// packages/sdk/src/types/contract-baseline-store.ts).
+//
+// `format` is held as a String so adding new formats (proto, GraphQL SDL)
+// later does not require a migration. The factory validates the value
+// against the SDK union ('openapi' | 'json-schema') at runtime.
+
+model ContractBaseline {
+  id         String   @id @default(cuid())
+  projectId  String
+  specKey    String
+  spec       String   @db.Text
+  format     String // 'openapi' | 'json-schema' — runtime-validated
+  capturedAt DateTime @default(now())
+  capturedBy String
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@unique([projectId, specKey])
+  @@index([projectId, capturedAt(sort: Desc)])
+  @@map("contract_baselines")
+  @@schema("derwin")
+}
+
+// ═══════════════════════════════════════════════════════════════════════════
+// QAP-104 (Sprint 10 Phase 4) — Tenant-isolation fuzz config
+// ═══════════════════════════════════════════════════════════════════════════
+//
+// Stores the operator-curated fuzz configuration that drives the
+// cross-tenant probing fuzzer (TenantFuzz). One row per project
+// (@unique projectId) — the fuzzer reads consentToFuzz, tenantSafeRoutes
+// and probePairs at run time. The store-side gate prevents probePairs
+// from being persisted unless consentToFuzz=true; the fuzzer itself
+// re-checks consent for defense-in-depth against stale config objects.
+//
+// The Prisma-backed implementation lives at
+// packages/db/src/tenant-fuzz-config-store.ts; the SDK contract is in
+// @derwinjs/sdk (TenantFuzzConfigStore in
+// packages/sdk/src/types/tenant-fuzz-config.ts).
+//
+// `tenantSafeRoutes` and `probePairs` are JSON columns — the route shape
+// (method/path/body templates) and pair shape (token/resourceId/label)
+// are runtime-validated at the SDK boundary on every read/write rather
+// than carved into the schema. This keeps the schema simple and lets new
+// optional fields land without migrations.
+
+model TenantFuzzConfig {
+  id               String   @id @default(cuid())
+  projectId        String   @unique
+  consentToFuzz    Boolean  @default(false)
+  tenantSafeRoutes Json // TenantFuzzRoute[]
+  probePairs       Json // TenantFuzzPair[]
+  updatedAt        DateTime @updatedAt
+  updatedBy        String
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@map("tenant_fuzz_configs")
+  @@schema("derwin")
+}

package/prisma-client/wasm.js

@@ -450,6 +450,35 @@ exports.Prisma.QAUniformityScalarFieldEnum = {
   createdAt: 'createdAt'
 };
 
+exports.Prisma.VisualBaselineScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  scopeKey: 'scopeKey',
+  bytes: 'bytes',
+  createdAt: 'createdAt',
+  updatedAt: 'updatedAt'
+};
+
+exports.Prisma.ContractBaselineScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  specKey: 'specKey',
+  spec: 'spec',
+  format: 'format',
+  capturedAt: 'capturedAt',
+  capturedBy: 'capturedBy'
+};
+
+exports.Prisma.TenantFuzzConfigScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  consentToFuzz: 'consentToFuzz',
+  tenantSafeRoutes: 'tenantSafeRoutes',
+  probePairs: 'probePairs',
+  updatedAt: 'updatedAt',
+  updatedBy: 'updatedBy'
+};
+
 exports.Prisma.SortOrder = {
   asc: 'asc',
   desc: 'desc'
@@ -658,7 +687,10 @@ exports.Prisma.ModelName = {
   SpendLedger: 'SpendLedger',
   QAPattern: 'QAPattern',
   QARevert: 'QARevert',
-  QAUniformity: 'QAUniformity'
+  QAUniformity: 'QAUniformity',
+  VisualBaseline: 'VisualBaseline',
+  ContractBaseline: 'ContractBaseline',
+  TenantFuzzConfig: 'TenantFuzzConfig'
 };
 
 /**