@derwinjs/db 0.9.0 → 0.11.0

package/prisma-client/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "prisma-client-80d22168424dade7c0d713042f02aefb7e5dd12207a0e4feb91cb2584021f57a",
+  "name": "prisma-client-b50acb8ba6a971962b4114ac48cb52ea37c6a0a760ad2278d452f35f9c278c8c",
   "main": "index.js",
   "types": "index.d.ts",
   "browser": "index-browser.js",

package/prisma-client/schema.prisma

@@ -148,6 +148,11 @@ model Project {
   classificationOverrides ClassificationOverride[]
   freezeWindows           FreezeWindow[]
   killSwitches            KillSwitchState[]
+  visualBaselines         VisualBaseline[]
+  contractBaselines       ContractBaseline[]
+  tenantFuzzConfig        TenantFuzzConfig?
+  rumSamples              RumSample[]
+  milestoneEvents         MilestoneEvent[]
 
   @@map("projects")
   @@schema("derwin")
@@ -982,3 +987,187 @@ enum QAUniformityStatus {
 
   @@schema("derwin")
 }
+
+// ═══════════════════════════════════════════════════════════════════════════
+// QAP-105 (Sprint 10 Phase 2) — Visual baselines (pixel-diff regression)
+// ═══════════════════════════════════════════════════════════════════════════
+//
+// Stores the durable baseline screenshot bytes that VisualRegressionScanner
+// pixel-diffs against on subsequent runs. One row per (projectId, scopeKey)
+// — operator approves a new baseline by replacing the bytes via
+// VisualBaselineStore.setBaseline. The Prisma-backed implementation lives
+// at packages/db/src/visual-baseline-store.ts; the SDK contract is in
+// @derwinjs/sdk (VisualBaselineStore in
+// packages/sdk/src/types/visual-regression-scanner.ts).
+//
+// Stored as Postgres BYTEA so a small to mid-sized PNG fits inline. Rows
+// large enough to push past Postgres TOAST threshold get TOAST'd
+// transparently — no special handling required at this layer.
+
+model VisualBaseline {
+  id        String   @id @default(cuid())
+  projectId String
+  scopeKey  String
+  bytes     Bytes
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@unique([projectId, scopeKey])
+  @@map("visual_baselines")
+  @@schema("derwin")
+}
+
+// ═══════════════════════════════════════════════════════════════════════════
+// QAP-103 (Sprint 10 Phase 3) — Contract baselines (API contract diff)
+// ═══════════════════════════════════════════════════════════════════════════
+//
+// Stores the durable baseline OpenAPI / JSON-schema spec text that
+// ContractDiffer diffs candidates against on subsequent runs. One row per
+// (projectId, specKey) — operator approves a new baseline by replacing the
+// spec via ContractBaselineStore.setBaseline. Multiple specKeys are
+// allowed per project ('main-api', 'webhook-payloads', etc.).
+//
+// The Prisma-backed implementation lives at
+// packages/db/src/contract-baseline-store.ts; the SDK contract is in
+// @derwinjs/sdk (ContractBaselineStore in
+// packages/sdk/src/types/contract-baseline-store.ts).
+//
+// `format` is held as a String so adding new formats (proto, GraphQL SDL)
+// later does not require a migration. The factory validates the value
+// against the SDK union ('openapi' | 'json-schema') at runtime.
+
+model ContractBaseline {
+  id         String   @id @default(cuid())
+  projectId  String
+  specKey    String
+  spec       String   @db.Text
+  format     String // 'openapi' | 'json-schema' — runtime-validated
+  capturedAt DateTime @default(now())
+  capturedBy String
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@unique([projectId, specKey])
+  @@index([projectId, capturedAt(sort: Desc)])
+  @@map("contract_baselines")
+  @@schema("derwin")
+}
+
+// ═══════════════════════════════════════════════════════════════════════════
+// QAP-104 (Sprint 10 Phase 4) — Tenant-isolation fuzz config
+// ═══════════════════════════════════════════════════════════════════════════
+//
+// Stores the operator-curated fuzz configuration that drives the
+// cross-tenant probing fuzzer (TenantFuzz). One row per project
+// (@unique projectId) — the fuzzer reads consentToFuzz, tenantSafeRoutes
+// and probePairs at run time. The store-side gate prevents probePairs
+// from being persisted unless consentToFuzz=true; the fuzzer itself
+// re-checks consent for defense-in-depth against stale config objects.
+//
+// The Prisma-backed implementation lives at
+// packages/db/src/tenant-fuzz-config-store.ts; the SDK contract is in
+// @derwinjs/sdk (TenantFuzzConfigStore in
+// packages/sdk/src/types/tenant-fuzz-config.ts).
+//
+// `tenantSafeRoutes` and `probePairs` are JSON columns — the route shape
+// (method/path/body templates) and pair shape (token/resourceId/label)
+// are runtime-validated at the SDK boundary on every read/write rather
+// than carved into the schema. This keeps the schema simple and lets new
+// optional fields land without migrations.
+
+model TenantFuzzConfig {
+  id               String   @id @default(cuid())
+  projectId        String   @unique
+  consentToFuzz    Boolean  @default(false)
+  tenantSafeRoutes Json // TenantFuzzRoute[]
+  probePairs       Json // TenantFuzzPair[]
+  updatedAt        DateTime @updatedAt
+  updatedBy        String
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@map("tenant_fuzz_configs")
+  @@schema("derwin")
+}
+
+// ═══════════════════════════════════════════════════════════════════════════
+// QAP-113 (Sprint 11 Phase 3) — RUM / Web Vitals samples
+// ═══════════════════════════════════════════════════════════════════════════
+//
+// Stores consumer-pushed Real User Monitoring (RUM) samples emitted by the
+// consumer app's web-vitals hooks. Unlike Sprint 10/11 scanner surfaces this
+// is INGESTION — the data is pushed from client devices, not produced by a
+// Derwin-spawned scanner. One row per individual sample; baseline statistics
+// (p50/p75/p95) are derived on demand from this row set rather than
+// maintained as a rolling aggregate.
+//
+// The Prisma-backed implementation lives at
+// packages/db/src/rum-sample-store.ts; the SDK contract is in
+// @derwinjs/sdk (RumSampleStore in
+// packages/sdk/src/types/rum-sample-store.ts) and the ingest contract
+// (WebVitalsIngestor) in packages/sdk/src/types/web-vitals-ingestor.ts.
+//
+// `metric` and `rating` are held as String columns rather than Prisma enums
+// so consumers can emit custom metrics (alongside the canonical
+// CLS / FCP / INP / LCP / TTFB) without requiring a migration. The factory
+// validates the value at runtime where it matters.
+
+model RumSample {
+  id         String   @id @default(cuid())
+  projectId  String
+  metric     String // 'CLS' | 'FCP' | 'INP' | 'LCP' | 'TTFB' or custom
+  value      Float
+  rating     String // 'good' | 'needs-improvement' | 'poor'
+  url        String
+  deviceType String?
+  sessionId  String?
+  capturedAt DateTime @default(now())
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@index([projectId, metric, capturedAt(sort: Desc)])
+  @@map("rum_samples")
+  @@schema("derwin")
+}
+
+// ═══════════════════════════════════════════════════════════════════════════
+// QAP-115 (Sprint 11 Phase 5) — Cross-product tracking timeline (MilestoneEvent)
+// ═══════════════════════════════════════════════════════════════════════════
+//
+// Foundation for the Tracking Timeline Gantt UI shipped in Sprint 11 Phase 6.
+// One row per scheduled or in-progress milestone; ranges (releases, freeze
+// windows) carry both `startsAt` + `endsAt`; point-in-time milestones (demos,
+// launches) carry only `startsAt`. `kind` is intentionally a free-form String
+// rather than a Prisma enum so consumers can emit custom kinds (the conflict-
+// detection helpers in @derwinjs/core treat unknown kinds as "no conflict
+// computed against this kind" rather than throwing).
+//
+// The Prisma-backed implementation lives at
+// packages/db/src/milestone-event-store.ts; the SDK contract is in
+// @derwinjs/sdk (MilestoneEventStore in
+// packages/sdk/src/types/milestone-event-store.ts).
+//
+// Indexes mirror the two read paths: chronological per project (for the
+// Gantt's primary read) and per-kind per project (for swimlane grouping).
+
+model MilestoneEvent {
+  id          String    @id @default(cuid())
+  projectId   String
+  name        String
+  description String?   @db.Text
+  startsAt    DateTime
+  endsAt      DateTime?
+  kind        String // 'release' | 'freeze' | 'demo' | 'launch' | custom
+  createdBy   String
+  createdAt   DateTime  @default(now())
+  updatedAt   DateTime  @updatedAt
+
+  project Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
+
+  @@index([projectId, startsAt(sort: Asc)])
+  @@index([projectId, kind])
+  @@map("milestone_events")
+  @@schema("derwin")
+}

package/prisma-client/wasm.js

@@ -450,6 +450,60 @@ exports.Prisma.QAUniformityScalarFieldEnum = {
   createdAt: 'createdAt'
 };
 
+exports.Prisma.VisualBaselineScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  scopeKey: 'scopeKey',
+  bytes: 'bytes',
+  createdAt: 'createdAt',
+  updatedAt: 'updatedAt'
+};
+
+exports.Prisma.ContractBaselineScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  specKey: 'specKey',
+  spec: 'spec',
+  format: 'format',
+  capturedAt: 'capturedAt',
+  capturedBy: 'capturedBy'
+};
+
+exports.Prisma.TenantFuzzConfigScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  consentToFuzz: 'consentToFuzz',
+  tenantSafeRoutes: 'tenantSafeRoutes',
+  probePairs: 'probePairs',
+  updatedAt: 'updatedAt',
+  updatedBy: 'updatedBy'
+};
+
+exports.Prisma.RumSampleScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  metric: 'metric',
+  value: 'value',
+  rating: 'rating',
+  url: 'url',
+  deviceType: 'deviceType',
+  sessionId: 'sessionId',
+  capturedAt: 'capturedAt'
+};
+
+exports.Prisma.MilestoneEventScalarFieldEnum = {
+  id: 'id',
+  projectId: 'projectId',
+  name: 'name',
+  description: 'description',
+  startsAt: 'startsAt',
+  endsAt: 'endsAt',
+  kind: 'kind',
+  createdBy: 'createdBy',
+  createdAt: 'createdAt',
+  updatedAt: 'updatedAt'
+};
+
 exports.Prisma.SortOrder = {
   asc: 'asc',
   desc: 'desc'
@@ -658,7 +712,12 @@ exports.Prisma.ModelName = {
   SpendLedger: 'SpendLedger',
   QAPattern: 'QAPattern',
   QARevert: 'QARevert',
-  QAUniformity: 'QAUniformity'
+  QAUniformity: 'QAUniformity',
+  VisualBaseline: 'VisualBaseline',
+  ContractBaseline: 'ContractBaseline',
+  TenantFuzzConfig: 'TenantFuzzConfig',
+  RumSample: 'RumSample',
+  MilestoneEvent: 'MilestoneEvent'
 };
 
 /**