@flytedesk/app-kit 0.1.3 → 0.3.0

package/dist/profile/plugin.js

@@ -0,0 +1,111 @@
+import fp from "fastify-plugin";
+const DEFAULT_ROUTE_PREFIX = "/profile";
+const PATCHABLE_FIELDS = ["title", "phone", "timezone", "bio"];
+function assertRequiredOptions(options) {
+    if (!options.store) {
+        throw new Error('@flytedesk/app-kit/profile: missing required option "store"');
+    }
+    if (typeof options.store.findByUserId !== "function" ||
+        typeof options.store.upsert !== "function") {
+        throw new Error('@flytedesk/app-kit/profile: options.store must implement findByUserId(userId) and upsert(userId, patch)');
+    }
+}
+function toResponseBody(userId, row) {
+    if (!row) {
+        return { userId, title: null, phone: null, timezone: null, bio: null, updatedAt: null };
+    }
+    return {
+        userId: row.userId,
+        title: row.title,
+        phone: row.phone,
+        timezone: row.timezone,
+        bio: row.bio,
+        updatedAt: row.updatedAt.toISOString(),
+    };
+}
+/**
+ * Parses/validates a PATCH request body into a ProfilePatch, or returns an error
+ * message. Unknown keys are silently ignored (a permissive PATCH — only the four
+ * known fields are ever read or written); every *known* key present in the body
+ * must be a string, or the whole request is rejected with 400 rather than silently
+ * dropping the bad field.
+ */
+function parsePatchBody(body) {
+    if (typeof body !== "object" || body === null || Array.isArray(body)) {
+        return { error: "Request body must be a JSON object" };
+    }
+    const input = body;
+    const patch = {};
+    for (const field of PATCHABLE_FIELDS) {
+        if (!(field in input))
+            continue;
+        const value = input[field];
+        if (typeof value !== "string") {
+            return { error: `"${field}" must be a string` };
+        }
+        patch[field] = value;
+    }
+    return patch;
+}
+/**
+ * Not exported: this plugin's own minimal 401 check on `request.authUser`, kept
+ * local (rather than importing ../auth/guards.js's requireAuth) so this module has
+ * no hard dependency on the auth module's internals beyond the `authUser`
+ * decoration contract it documents (declare module "fastify" in ../auth/plugin.ts)
+ * — any consumer populating request.authUser some other way (not necessarily via
+ * @flytedesk/app-kit/auth) still works. Mirrors requireAuth's shape in
+ * ../auth/guards.ts: returns whether the request may proceed, and the route
+ * handler reads `request.authUser!` afterward, same as that module's own
+ * requirePermission does.
+ */
+function requireAuthUser(request, reply) {
+    if (!request.authUser) {
+        reply.code(401).send({ error: "Authentication required", code: "unauthenticated" });
+        return false;
+    }
+    return true;
+}
+const appKitProfilePlugin = async (fastify, options) => {
+    assertRequiredOptions(options);
+    // request.authUser is decorated by @flytedesk/app-kit/auth's flytedeskAuth plugin
+    // (see ../auth/plugin.ts's `declare module "fastify"` block) or by whatever the
+    // consuming app uses in its place. Both GET and PATCH below resolve "the current
+    // user" from request.authUser.id, so this plugin is unusable without it — rather
+    // than silently reading `undefined` and letting every request 401 in a confusing
+    // way, fail loudly and immediately at registration time if the decorator was never
+    // installed. This means: register @flytedesk/app-kit/auth (or your own equivalent)
+    // BEFORE this plugin.
+    if (!fastify.hasRequestDecorator("authUser")) {
+        throw new Error('@flytedesk/app-kit/profile: request.authUser is not decorated on this Fastify instance yet. ' +
+            "This plugin resolves the caller from request.authUser and must be registered AFTER " +
+            "whatever populates it — @flytedesk/app-kit/auth's flytedeskAuth plugin, or the " +
+            "consuming app's own equivalent decorator.");
+    }
+    const routePrefix = options.routePrefix ?? DEFAULT_ROUTE_PREFIX;
+    const store = options.store;
+    /** GET {routePrefix} — the caller's own profile. Never 404s: a user with no row
+     *  yet still gets a 200 with every field null (see ProfileStore.findByUserId). */
+    fastify.get(routePrefix, async (request, reply) => {
+        if (!requireAuthUser(request, reply))
+            return;
+        const row = await store.findByUserId(request.authUser.id);
+        return toResponseBody(request.authUser.id, row);
+    });
+    /** PATCH {routePrefix} — upserts whatever subset of {title, phone, timezone, bio}
+     *  is present in the body, scoped to the caller's own row (request.authUser.id is
+     *  the only id this handler ever reads or writes — never a caller-supplied one). */
+    fastify.patch(routePrefix, async (request, reply) => {
+        if (!requireAuthUser(request, reply))
+            return;
+        const parsed = parsePatchBody(request.body);
+        if ("error" in parsed) {
+            return reply.code(400).send({ error: parsed.error, code: "invalid_body" });
+        }
+        const row = await store.upsert(request.authUser.id, parsed);
+        return toResponseBody(request.authUser.id, row);
+    });
+};
+export const appKitProfile = fp(appKitProfilePlugin, {
+    name: "@flytedesk/app-kit/profile",
+});
+//# sourceMappingURL=plugin.js.map

package/dist/profile/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/profile/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAShC,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAExC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAE5D,CAAC;AAEF,SAAS,qBAAqB,CAAC,OAA6B;IAC1D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IACE,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU;QAChD,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,GAAsB;IAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,IAAa;IACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,IAA+B,CAAC;IAC9C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,OAAuB,EAAE,KAAmB;IACnE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,mBAAmB,GAA6C,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;IAC/F,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE/B,kFAAkF;IAClF,gFAAgF;IAChF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,mFAAmF;IACnF,mFAAmF;IACnF,sBAAsB;IACtB,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,8FAA8F;YAC5F,qFAAqF;YACrF,iFAAiF;YACjF,2CAA2C,CAC9C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAE5B;sFACkF;IAClF,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,QAAS,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO,cAAc,CAAC,OAAO,CAAC,QAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH;;wFAEoF;IACpF,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO;QAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,cAAc,CAAC,OAAO,CAAC,QAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC,mBAAmB,EAAE;IACnD,IAAI,EAAE,4BAA4B;CACnC,CAAC,CAAC"}

package/dist/profile/types.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Hand-written row/option types for @flytedesk/app-kit/profile.
+ *
+ * Field names here mirror prisma/fragments/profile.prisma's camelCase model fields
+ * (userId/title/phone/timezone/bio/updatedAt) — a consumer's generated PrismaClient,
+ * once they've run `profile-sync init` and their own `prisma generate`, satisfies
+ * ProfileStore directly via `prisma.appKitUserProfile.findUnique` / `.upsert`.
+ */
+export interface ProfileRow {
+    userId: string;
+    title: string | null;
+    phone: string | null;
+    timezone: string | null;
+    bio: string | null;
+    updatedAt: Date;
+}
+/** The self-service fields a caller may write. */
+export type ProfileFields = Pick<ProfileRow, "title" | "phone" | "timezone" | "bio">;
+/** A PATCH body: any subset of ProfileFields, all still required to be strings
+ *  (or absent) once validated — see parsePatchBody in ./plugin.ts. */
+export type ProfilePatch = Partial<ProfileFields>;
+/**
+ * Minimal persistence seam this plugin needs — deliberately NOT a dependency on
+ * `@prisma/client` (this package never builds its own PrismaClient; mirrors why
+ * src/trace/types.ts's TracePrismaClient and src/auth/types.ts's AuthStore are both
+ * ORM-agnostic structural interfaces rather than importing the generated client
+ * type). A consumer's generated PrismaClient trivially satisfies this shape:
+ *
+ *   const store: ProfileStore = {
+ *     findByUserId: (userId) => prisma.appKitUserProfile.findUnique({ where: { userId } }),
+ *     upsert: (userId, patch) =>
+ *       prisma.appKitUserProfile.upsert({
+ *         where: { userId },
+ *         create: { userId, ...patch },
+ *         update: patch,
+ *       }),
+ *   };
+ *
+ * A hand-rolled adapter can back it with anything else (raw SQL, a different ORM,
+ * an in-memory store for tests — see src/profile/plugin.test.ts).
+ */
+export interface ProfileStore {
+    /** Must return `null`, not throw/404, when the user has no row yet — a person
+     *  with no profile row still "has a profile," it's just all-null fields. */
+    findByUserId(userId: string): Promise<ProfileRow | null>;
+    /** Upserts the row for `userId`, writing only the fields present in `patch`
+     *  (fields absent from `patch` are left unchanged on an existing row, and null
+     *  on a newly-created one). */
+    upsert(userId: string, patch: ProfilePatch): Promise<ProfileRow>;
+}
+export interface AppKitProfileOptions {
+    /** The persistence seam — see ProfileStore above. Required. */
+    store: ProfileStore;
+    /**
+     * Base path the GET/PATCH routes are mounted under. Default "/profile".
+     *
+     * Deliberately not "/me": @flytedesk/app-kit/auth's own README/index.ts doc
+     * comment illustrates a consumer wiring up `GET /me` themselves, returning
+     * `request.authUser` (identity/roles/permissions — see src/auth/index.ts). That's
+     * a different resource than this plugin's editable title/phone/timezone/bio
+     * fields, so reusing "/me" here would be conceptually confusing even though nothing
+     * actually collides at registration time (auth doesn't register that route itself,
+     * it's just the example a consumer is expected to write).
+     */
+    routePrefix?: string;
+}
+/** What GET/PATCH `{routePrefix}` return. Always 200 — see ProfileStore.findByUserId. */
+export interface ProfileResponseBody {
+    userId: string;
+    title: string | null;
+    phone: string | null;
+    timezone: string | null;
+    bio: string | null;
+    /** ISO 8601, or `null` if the user has no row yet. */
+    updatedAt: string | null;
+}

package/dist/profile/types.js

@@ -0,0 +1,10 @@
+/**
+ * Hand-written row/option types for @flytedesk/app-kit/profile.
+ *
+ * Field names here mirror prisma/fragments/profile.prisma's camelCase model fields
+ * (userId/title/phone/timezone/bio/updatedAt) — a consumer's generated PrismaClient,
+ * once they've run `profile-sync init` and their own `prisma generate`, satisfies
+ * ProfileStore directly via `prisma.appKitUserProfile.findUnique` / `.upsert`.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/profile/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/profile/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flytedesk/app-kit",
-  "version": "0.1.3",
+  "version": "0.3.0",
   "description": "Shared platform kit for flytedesk apps: flytedesk-id auth (BFF/OIDC client) and a Postgres-native trace/audit layer.",
   "type": "module",
   "license": "UNLICENSED",
@@ -28,7 +28,9 @@
     "scripts"
   ],
   "bin": {
-    "trace-sync": "./dist/cli/trace-sync.js"
+    "trace-sync": "./dist/cli/trace-sync.js",
+    "profile-sync": "./dist/cli/profile-sync.js",
+    "flags-sync": "./dist/cli/flags-sync.js"
   },
   "exports": {
     "./auth": {
@@ -42,6 +44,14 @@
     "./rate-limit": {
       "types": "./dist/rate-limit/index.d.ts",
       "import": "./dist/rate-limit/index.js"
+    },
+    "./profile": {
+      "types": "./dist/profile/index.d.ts",
+      "import": "./dist/profile/index.js"
+    },
+    "./flags": {
+      "types": "./dist/flags/index.d.ts",
+      "import": "./dist/flags/index.js"
     }
   },
   "scripts": {

package/prisma/fragments/flags.meta.json

@@ -0,0 +1,4 @@
+{
+  "fragmentVersion": "1.0.0",
+  "minCliVersion": "1.0.0"
+}

package/prisma/fragments/flags.prisma

@@ -0,0 +1,52 @@
+// @flytedesk/app-kit/flags — canonical Prisma model fragment (DEC-39, ported to a
+// third fragment for the feature-flags module).
+//
+// This fragment is NOT built into a Prisma Client by this package. It is installed
+// into the *consumer's* own Prisma schema by `flags-sync init` (see
+// src/cli/flags-sync.ts, a thin wrapper around the generalized
+// src/cli/sync-engine.ts, same as trace-sync/profile-sync), and the consumer
+// generates their own client against their own schema + this fragment merged in.
+//
+// What this models: a generic project-scoped feature flag — enabled/disabled, a
+// percentage rollout, role-based targeting, and a per-user override bag. Ported
+// from media-planner's own `FeatureFlag` model (apps/api/prisma/schema.prisma) and
+// its `GET/PATCH /flags` routes (apps/api/src/routes/flags.ts), generalizing the one
+// genuinely app-specific piece: media-planner resolves flag metadata (label,
+// description, owner, project) from its own hardcoded `FLAG_ROADMAP` — this
+// fragment's row has no such columns at all, and @flytedesk/app-kit/flags's plugin
+// (see src/flags/plugin.ts) instead takes a required `describeFlag` callback so any
+// consumer can supply its own metadata source.
+//
+// Design constraints (deliberate, same reasoning as trace.prisma/profile.prisma):
+//   - No `@relation`/FK attributes anywhere. A package that ships models into a
+//     consumer's schema cannot see the consumer's own models to point a relation at.
+//   - No Prisma `enum`. Nothing here needs one today, but the same schema-global-
+//     collision reasoning applies if one ever would: it stays a plain `String`/`Int`
+//     column instead.
+//   - `String @id` on `key`: a flag's key is already a natural, stable, unique
+//     identifier (matches media-planner's own `FeatureFlag.key String @id`) — no
+//     separate surrogate key earns its keep here.
+//   - `roles String[]` and `users Json`: mirrors media-planner's own columns
+//     exactly (role ids are opaque strings from whatever IdP/RBAC system the
+//     consumer uses — this package has no opinion on what they mean; `users` is a
+//     free-form per-user override bag, `Json` because its shape is consumer-defined).
+//
+// Table name is prefixed `app_kit_` via `@@map` so it can't collide with a
+// consumer's own tables (media-planner's own table is unprefixed `FeatureFlag` —
+// this fragment intentionally does NOT reuse that name, since a consumer migrating
+// onto this fragment keeps their own table and migrates data across on their own
+// schedule, same as `/profile` did for flytedesk-id). Column names are snake_case
+// via `@map`, matching the raw SQL in
+// prisma/migrations/0003_app_kit_flags_init/migration.sql exactly.
+
+model AppKitFeatureFlag {
+  key       String   @id
+  project   String
+  enabled   Boolean  @default(true)
+  rollout   Int      @default(100)
+  roles     String[] @default([])
+  users     Json     @default("{}")
+  updatedAt DateTime @default(now()) @updatedAt @map("updated_at")
+
+  @@map("app_kit_feature_flag")
+}

package/prisma/fragments/profile.meta.json

@@ -0,0 +1,4 @@
+{
+  "fragmentVersion": "1.0.0",
+  "minCliVersion": "1.0.0"
+}

package/prisma/fragments/profile.prisma

@@ -0,0 +1,42 @@
+// @flytedesk/app-kit/profile — canonical Prisma model fragment (DEC-39, ported to a
+// second fragment for the profile module).
+//
+// This fragment is NOT built into a Prisma Client by this package. It is copied
+// verbatim into the consumer's own multi-file Prisma schema folder by `profile-sync
+// init` (see src/cli/profile-sync.ts, which — like trace-sync — is a thin wrapper
+// around the generalized src/cli/sync-engine.ts), and the consumer generates their
+// own client against their own schema + this fragment merged in.
+//
+// What this models: title/phone/timezone/bio are cross-app, person-level facts —
+// not specific to any one flytedesk product. The first real consumer is
+// flytedesk-id, replacing its own local per-field storage for these with this
+// shared table so other flytedesk apps don't each hand-roll their own GET/PATCH
+// /me route + migration for the same handful of self-service profile fields.
+//
+// Design constraints (deliberate, see DEC-39 — same reasoning as trace.prisma):
+//   - No `@relation`/FK attributes anywhere. `userId` is a plain scalar matching
+//     the consuming app's own user-id type by convention, not a foreign key — a
+//     package that ships models into a consumer's schema cannot see the
+//     consumer's own User model to point a relation at.
+//   - No Prisma `enum`. None of these fields need one today, but the same
+//     schema-global-collision reasoning as trace.prisma applies if one is ever
+//     added here: it would stay a plain `String` column instead.
+//   - `String @id` (not `BigInt @default(autoincrement())`): unlike trace's
+//     high-write append log, this table has exactly one row per user, keyed
+//     directly on the consumer's own user id — no separate surrogate key earns
+//     its keep here.
+//
+// Table name is prefixed `app_kit_` via `@@map` so it can't collide with a
+// consumer's own tables. Column names are snake_case via `@map`, matching the raw
+// SQL in prisma/migrations/0002_app_kit_profile_init/migration.sql exactly.
+
+model AppKitUserProfile {
+  userId    String   @id @map("user_id")
+  title     String?
+  phone     String?
+  timezone  String?
+  bio       String?
+  updatedAt DateTime @default(now()) @updatedAt @map("updated_at")
+
+  @@map("app_kit_user_profile")
+}

package/prisma/migrations/0002_app_kit_profile_init/migration.sql

@@ -0,0 +1,15 @@
+-- @flytedesk/app-kit/profile :: 0002_app_kit_profile_init
+--
+-- Hand-written raw SQL (this package does not run `prisma migrate dev` against its
+-- own schema — see DEC-39, and 0001_app_kit_trace_init's migration.sql for the same
+-- note on the trace fragment). Column names, types, and defaults match
+-- prisma/fragments/profile.prisma exactly: TEXT for the String @id and the nullable
+-- String columns, TIMESTAMPTZ for DateTime.
+CREATE TABLE app_kit_user_profile (
+  user_id    TEXT PRIMARY KEY,
+  title      TEXT,
+  phone      TEXT,
+  timezone   TEXT,
+  bio        TEXT,
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);

package/prisma/migrations/0003_app_kit_flags_init/migration.sql

@@ -0,0 +1,16 @@
+-- @flytedesk/app-kit/flags :: 0003_app_kit_flags_init
+--
+-- Hand-written raw SQL (this package does not run `prisma migrate dev` against its
+-- own schema — see DEC-39, and 0001_app_kit_trace_init's migration.sql for the same
+-- note). Column names, types, and defaults match prisma/fragments/flags.prisma
+-- exactly: TEXT for the String @id/String columns, BOOLEAN/INTEGER for their Prisma
+-- counterparts, TEXT[] for String[], JSONB for Json, TIMESTAMPTZ for DateTime.
+CREATE TABLE app_kit_feature_flag (
+  key        TEXT PRIMARY KEY,
+  project    TEXT NOT NULL,
+  enabled    BOOLEAN NOT NULL DEFAULT true,
+  rollout    INTEGER NOT NULL DEFAULT 100,
+  roles      TEXT[] NOT NULL DEFAULT '{}',
+  users      JSONB NOT NULL DEFAULT '{}',
+  updated_at TIMESTAMPTZ NOT NULL DEFAULT now()
+);

package/prisma/migrations/manifest.json

@@ -1,8 +1,23 @@
 [
   {
     "id": "0001_app_kit_trace_init",
+    "fragment": "trace",
     "file": "0001_app_kit_trace_init/migration.sql",
     "checksum": "sha256:413918649af395583a2647f415ae4c8249477a922f1f5e25916742c535253915",
     "introducedInFragmentVersion": "1.0.0"
+  },
+  {
+    "id": "0002_app_kit_profile_init",
+    "fragment": "profile",
+    "file": "0002_app_kit_profile_init/migration.sql",
+    "checksum": "sha256:62d688a2db89c77f12c61a3c98be5cfe84a6e06f8a4dda9d24b0f9acd5511b32",
+    "introducedInFragmentVersion": "1.0.0"
+  },
+  {
+    "id": "0003_app_kit_flags_init",
+    "fragment": "flags",
+    "file": "0003_app_kit_flags_init/migration.sql",
+    "checksum": "sha256:55a781c3118fdaf7c4aa9405a8867cecfd8c4b9de0a6e14ef90fc364c63f7d39",
+    "introducedInFragmentVersion": "1.0.0"
   }
 ]