@proofhound/db 0.1.6

package/dist/migrations/0001_webhook_token_scope.sql

@@ -0,0 +1,28 @@
+-- Webhook token migration: switch to scope='webhook' + forward link via connector_id
+-- See docs/specs/06-database-schema.md §3.2 / §4.5
+--
+-- Order:
+--   a) Add the connector_id column to api_tokens
+--   b) Backfill api_tokens.connector_id from connectors.webhook_token_id and upgrade scope to 'webhook'
+--   c) Drop the legacy connectors.webhook_token_id FK + column
+--   d) Upgrade api_tokens' scope CHECK and scope_fields CHECK
+--   e) Add the connector_id FK + partial index
+ALTER TABLE "ph_core"."api_tokens" ADD COLUMN "connector_id" uuid;--> statement-breakpoint
+UPDATE "ph_core"."api_tokens" AS t
+SET scope = 'webhook',
+    connector_id = c.id
+FROM "ph_assets"."connectors" AS c
+WHERE c.webhook_token_id = t.id
+  AND c.deleted_at IS NULL;--> statement-breakpoint
+ALTER TABLE "ph_assets"."connectors" DROP CONSTRAINT IF EXISTS "connectors_webhook_token_id_api_tokens_id_fk";--> statement-breakpoint
+ALTER TABLE "ph_assets"."connectors" DROP COLUMN "webhook_token_id";--> statement-breakpoint
+ALTER TABLE "ph_core"."api_tokens" DROP CONSTRAINT IF EXISTS "api_tokens_scope_check";--> statement-breakpoint
+ALTER TABLE "ph_core"."api_tokens" ADD CONSTRAINT "api_tokens_scope_check" CHECK ("ph_core"."api_tokens"."scope" IN ('project_api', 'global_mcp', 'webhook'));--> statement-breakpoint
+ALTER TABLE "ph_core"."api_tokens" DROP CONSTRAINT IF EXISTS "api_tokens_scope_fields_check";--> statement-breakpoint
+ALTER TABLE "ph_core"."api_tokens" ADD CONSTRAINT "api_tokens_scope_fields_check" CHECK ((
+        ("ph_core"."api_tokens"."scope" = 'project_api' AND "ph_core"."api_tokens"."project_id" IS NOT NULL AND "ph_core"."api_tokens"."connector_id" IS NULL) OR
+        ("ph_core"."api_tokens"."scope" = 'global_mcp'  AND "ph_core"."api_tokens"."project_id" IS NULL     AND "ph_core"."api_tokens"."connector_id" IS NULL) OR
+        ("ph_core"."api_tokens"."scope" = 'webhook'     AND "ph_core"."api_tokens"."project_id" IS NOT NULL AND "ph_core"."api_tokens"."connector_id" IS NOT NULL)
+      ));--> statement-breakpoint
+ALTER TABLE "ph_core"."api_tokens" ADD CONSTRAINT "api_tokens_connector_id_fkey" FOREIGN KEY ("connector_id") REFERENCES "ph_assets"."connectors"("id") ON DELETE CASCADE;--> statement-breakpoint
+CREATE INDEX "idx_api_tokens_connector" ON "ph_core"."api_tokens" USING btree ("connector_id") WHERE "ph_core"."api_tokens"."scope" = 'webhook' AND "ph_core"."api_tokens"."revoked_at" IS NULL;

package/dist/migrations/0002_tokens_table_unify_scope.sql

@@ -0,0 +1,50 @@
+-- 0002 token model refactor: rename api_tokens → tokens, merge project_api + global_mcp into user, drop the global MCP singleton constraint
+-- See docs/specs/06-database-schema.md §3.2 / docs/specs/08-saas-adapter-boundary.md §3.5
+--
+-- Order:
+--   a) drop constraints / indexes tightly bound to the legacy scope (CHECK, uniq_active_global_mcp_token)
+--   b) data backfill: move project_api / global_mcp rows uniformly to scope='user', set project_id to NULL
+--   c) rename the table + rename the indexes / FKs / unique constraints that still exist
+--   d) rebuild CHECK; the new value set = ('user', 'webhook'); user allows any project_id; webhook unchanged
+--
+-- Not handled in this migration:
+--   - scope='webhook' row constraints / FKs inherit the shape built in 0001; this migration only renames them
+--   - column shapes for token_hash UNIQUE / token_encrypted / prefix remain unchanged
+
+-- a) Drop the global-MCP singleton constraint tied to the legacy scope
+DROP INDEX IF EXISTS "ph_core"."uniq_active_global_mcp_token";--> statement-breakpoint
+
+-- a) Drop CHECK first (before backfill), to avoid new values failing the old constraint
+ALTER TABLE "ph_core"."api_tokens" DROP CONSTRAINT IF EXISTS "api_tokens_scope_fields_check";--> statement-breakpoint
+ALTER TABLE "ph_core"."api_tokens" DROP CONSTRAINT IF EXISTS "api_tokens_scope_check";--> statement-breakpoint
+
+-- b) Data backfill: move project_api / global_mcp uniformly to user; user is not bound to project_id
+UPDATE "ph_core"."api_tokens"
+SET scope = 'user',
+    project_id = NULL
+WHERE scope IN ('project_api', 'global_mcp');--> statement-breakpoint
+
+-- c) rename table
+ALTER TABLE "ph_core"."api_tokens" RENAME TO "tokens";--> statement-breakpoint
+
+-- c) Rename indexes (the partial index WHERE clause is preserved unchanged)
+ALTER INDEX "ph_core"."idx_api_tokens_project" RENAME TO "idx_tokens_project";--> statement-breakpoint
+ALTER INDEX "ph_core"."idx_api_tokens_active" RENAME TO "idx_tokens_active";--> statement-breakpoint
+ALTER INDEX "ph_core"."idx_api_tokens_connector" RENAME TO "idx_tokens_connector";--> statement-breakpoint
+
+-- c) Rename FK / unique constraints (referring to 0000 / 0001 drizzle auto-naming)
+ALTER TABLE "ph_core"."tokens" RENAME CONSTRAINT "api_tokens_project_id_projects_id_fk" TO "tokens_project_id_projects_id_fk";--> statement-breakpoint
+ALTER TABLE "ph_core"."tokens" RENAME CONSTRAINT "api_tokens_connector_id_fkey" TO "tokens_connector_id_fkey";--> statement-breakpoint
+ALTER TABLE "ph_core"."tokens" RENAME CONSTRAINT "api_tokens_token_hash_unique" TO "tokens_token_hash_unique";--> statement-breakpoint
+
+-- d) Rebuild CHECK: scope ∈ {user, webhook}
+ALTER TABLE "ph_core"."tokens" ADD CONSTRAINT "tokens_scope_check"
+  CHECK ("ph_core"."tokens"."scope" IN ('user', 'webhook'));--> statement-breakpoint
+
+-- d) Rebuild scope_fields CHECK:
+--    - user only enforces connector_id IS NULL; project_id can be anything (OSS defaults to NULL; the SaaS form may attach a project)
+--    - webhook keeps the original constraint (project_id + connector_id required)
+ALTER TABLE "ph_core"."tokens" ADD CONSTRAINT "tokens_scope_fields_check" CHECK ((
+  ("ph_core"."tokens"."scope" = 'user'    AND "ph_core"."tokens"."connector_id" IS NULL) OR
+  ("ph_core"."tokens"."scope" = 'webhook' AND "ph_core"."tokens"."project_id" IS NOT NULL AND "ph_core"."tokens"."connector_id" IS NOT NULL)
+));

package/dist/migrations/0003_models_auto_concurrency.sql

@@ -0,0 +1,4 @@
+-- Add auto_concurrency flag to models: when TRUE (default), concurrency_limit is the ceiling and
+-- effective concurrency is auto-tuned by the limiter; when FALSE, concurrency_limit is the hard limit.
+-- See docs/specs/21-models.md §6.1
+ALTER TABLE "ph_assets"."models" ADD COLUMN "auto_concurrency" boolean DEFAULT true NOT NULL;

package/dist/migrations/0004_webhook_token_attribution.sql

@@ -0,0 +1,4 @@
+ALTER TABLE "ph_runs"."run_results" ADD COLUMN "webhook_token_id" uuid;--> statement-breakpoint
+ALTER TABLE "ph_runs"."run_results" ADD CONSTRAINT "run_results_webhook_token_id_tokens_id_fk" FOREIGN KEY ("webhook_token_id") REFERENCES "ph_core"."tokens"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_run_results_webhook_token" ON "ph_runs"."run_results" USING btree ("webhook_token_id","created_at") WHERE "ph_runs"."run_results"."webhook_token_id" IS NOT NULL;--> statement-breakpoint
+ALTER TABLE "ph_core"."tokens" ADD CONSTRAINT "tokens_name_length_check" CHECK (char_length("ph_core"."tokens"."name") <= 64);

package/dist/migrations/0005_same_thor_girl.sql

@@ -0,0 +1,34 @@
+CREATE TABLE "ph_assets"."dataset_import_samples" (
+	"import_id" uuid NOT NULL,
+	"row_index" integer NOT NULL,
+	"data" jsonb NOT NULL,
+	"external_id" text,
+	CONSTRAINT "dataset_import_samples_import_id_row_index_pk" PRIMARY KEY("import_id","row_index")
+);
+--> statement-breakpoint
+CREATE TABLE "ph_assets"."dataset_imports" (
+	"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+	"project_id" uuid NOT NULL,
+	"dataset_id" uuid,
+	"name" text NOT NULL,
+	"description" text,
+	"field_mappings" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"file_name" text NOT NULL,
+	"file_size_bytes" bigint NOT NULL,
+	"content_type" text,
+	"source_format" text NOT NULL,
+	"declared_total_rows" integer,
+	"received_rows" integer DEFAULT 0 NOT NULL,
+	"status" text DEFAULT 'importing' NOT NULL,
+	"created_by" uuid NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "dataset_imports_source_format_check" CHECK ("ph_assets"."dataset_imports"."source_format" IN ('jsonl', 'csv', 'tsv')),
+	CONSTRAINT "dataset_imports_status_check" CHECK ("ph_assets"."dataset_imports"."status" IN ('importing', 'ready'))
+);
+--> statement-breakpoint
+ALTER TABLE "ph_assets"."dataset_import_samples" ADD CONSTRAINT "dataset_import_samples_import_id_dataset_imports_id_fk" FOREIGN KEY ("import_id") REFERENCES "ph_assets"."dataset_imports"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "ph_assets"."dataset_imports" ADD CONSTRAINT "dataset_imports_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "ph_core"."projects"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "ph_assets"."dataset_imports" ADD CONSTRAINT "dataset_imports_dataset_id_datasets_id_fk" FOREIGN KEY ("dataset_id") REFERENCES "ph_assets"."datasets"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "idx_dataset_imports_project_status" ON "ph_assets"."dataset_imports" USING btree ("project_id","status");--> statement-breakpoint
+CREATE INDEX "idx_dataset_imports_stale" ON "ph_assets"."dataset_imports" USING btree ("status","updated_at") WHERE "ph_assets"."dataset_imports"."status" = 'importing';

package/dist/reset.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=reset.d.ts.map

package/dist/reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.d.ts","sourceRoot":"","sources":["../src/reset.ts"],"names":[],"mappings":""}

package/dist/reset.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Local reset: DROP all user schemas in the current database.
+ *
+ * **Local and staging only — strictly forbidden in production.**
+ *
+ * Call chain: `pnpm db:reset` = `tsx src/reset.ts && pnpm migrate && pnpm seed`
+ *   - This script only clears the database; structure rebuild and seed are done by the subsequent commands
+ *
+ * Safeguards:
+ *   - By default, DATABASE_URL must point to localhost / 127.0.0.1 / ::1
+ *   - Remote databases (staging, etc.) must explicitly set ALLOW_DB_RESET=1
+ */
+const node_path_1 = require("node:path");
+const drizzle_orm_1 = require("drizzle-orm");
+const client_1 = require("./client");
+const LOCAL_HOSTNAMES = new Set(['localhost', '127.0.0.1', '::1']);
+function writeLine(message = '') {
+    process.stdout.write(`${message}\n`);
+}
+function unwrapRows(rawRows) {
+    return Array.isArray(rawRows) ? rawRows : (rawRows.rows ?? []);
+}
+function isLocalDatabaseUrl(databaseUrl) {
+    try {
+        const url = new URL(databaseUrl.trim().replace(/^(['"])(.*)\1$/, '$2'));
+        return LOCAL_HOSTNAMES.has(url.hostname);
+    }
+    catch {
+        return false;
+    }
+}
+async function main() {
+    try {
+        process.loadEnvFile((0, node_path_1.resolve)(process.cwd(), '../../.env'));
+    }
+    catch {
+        // CI / other environments that already have env injected
+    }
+    const databaseUrl = process.env['DATABASE_URL'];
+    if (!databaseUrl) {
+        console.error('❌  DATABASE_URL is not configured');
+        process.exit(1);
+    }
+    const local = isLocalDatabaseUrl(databaseUrl);
+    const allowReset = process.env['ALLOW_DB_RESET'] === '1';
+    if (!local && !allowReset) {
+        console.error('❌  DATABASE_URL points to a remote database; refusing to run reset');
+        console.error('    Use localhost for local development; to run against a remote (staging) database, set explicitly:');
+        console.error('    ALLOW_DB_RESET=1 pnpm db:reset');
+        process.exit(1);
+    }
+    const db = (0, client_1.createDbClient)(databaseUrl);
+    const rawRows = await db.execute((0, drizzle_orm_1.sql) `
+    SELECT schema_name
+    FROM information_schema.schemata
+    WHERE schema_name <> 'information_schema'
+      AND schema_name NOT LIKE 'pg_%'
+    ORDER BY schema_name
+  `);
+    const rows = unwrapRows(rawRows);
+    writeLine(`🗑   DROP all user schemas (${rows.length})`);
+    for (const { schema_name: schemaName } of rows) {
+        await db.execute((0, drizzle_orm_1.sql) `DROP SCHEMA IF EXISTS ${drizzle_orm_1.sql.identifier(schemaName)} CASCADE`);
+        writeLine(`   ✓ ${schemaName}`);
+    }
+    await db.execute((0, drizzle_orm_1.sql) `CREATE SCHEMA IF NOT EXISTS "public"`);
+    await db.execute((0, drizzle_orm_1.sql) `GRANT USAGE ON SCHEMA "public" TO PUBLIC`);
+    writeLine('   ✓ public (recreated)');
+    writeLine('\n✅  Reset complete; pnpm migrate + pnpm seed will now rebuild the structure and the default local project');
+    process.exit(0);
+}
+main().catch((err) => {
+    console.error('❌  Reset failed:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=reset.js.map

package/dist/reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.js","sourceRoot":"","sources":["../src/reset.ts"],"names":[],"mappings":";;AAAA;;;;;;;;;;;GAWG;AACH,yCAAoC;AACpC,6CAAkC;AAClC,qCAA0C;AAE1C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnE,SAAS,SAAS,CAAC,OAAO,GAAG,EAAE;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,UAAU,CAAI,OAAgB;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAe,CAAC,CAAC,CAAC,CAAE,OAA0B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC;QACxE,OAAO,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,OAAO,CAAC,WAAW,CAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,CAAC;IACzD,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACpF,OAAO,CAAC,KAAK,CAAC,sGAAsG,CAAC,CAAC;QACtH,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,uBAAc,EAAC,WAAW,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA;;;;;;GAMnC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,CAA0B,OAAO,CAAC,CAAC;IAE1D,SAAS,CAAC,+BAA+B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,KAAK,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC;QAC/C,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA,yBAAyB,iBAAG,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACnF,SAAS,CAAC,QAAQ,UAAU,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA,sCAAsC,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,OAAO,CAAC,IAAA,iBAAG,EAAA,0CAA0C,CAAC,CAAC;IAChE,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAErC,SAAS,CAAC,4GAA4G,CAAC,CAAC;IACxH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/schema/index.d.ts

@@ -0,0 +1,5 @@
+export * from './ph_core/index';
+export * from './ph_assets/index';
+export * from './ph_runs/index';
+export * from './ph_releases/index';
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAEA,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC"}

package/dist/schema/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// Aggregates Drizzle table exports for each schema namespace
+// Actual table definitions live in the corresponding subdirectory per docs/specs/06-database-schema.md
+__exportStar(require("./ph_core/index"), exports);
+__exportStar(require("./ph_assets/index"), exports);
+__exportStar(require("./ph_runs/index"), exports);
+__exportStar(require("./ph_releases/index"), exports);
+//# sourceMappingURL=index.js.map

package/dist/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6DAA6D;AAC7D,uGAAuG;AACvG,kDAAgC;AAChC,oDAAkC;AAClC,kDAAgC;AAChC,sDAAoC"}