@tangen/db 0.0.0-stage → 0.1.54

package/README.md

@@ -1,3 +1,74 @@
-# Temporary Holding Version
+# @tangen/db
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Database client and system schema for the Tangen headless CMS — a typed
+Drizzle ORM client over postgres.js plus the platform's system table
+definitions (workspaces, environments, object types, fields, members, …).
+
+## Install
+
+```sh
+bun add @tangen/db
+```
+
+## Usage
+
+```ts
+import { createDb, objectTypes, environments } from '@tangen/db'
+
+const db = createDb(process.env.DATABASE_URL!, {
+  max: 10,            // pool size (optional)
+  prepare: false,     // opt out of prepared execution (optional; default true)
+})
+
+const types = await db.select().from(objectTypes)
+await db.end()
+```
+
+Pool options may also come from environment variables:
+`TANGEN_DB_POOL_MAX`, `TANGEN_DB_IDLE_TIMEOUT`, `TANGEN_DB_CONNECT_TIMEOUT`,
+`TANGEN_DB_PREPARE`.
+
+### `TANGEN_DB_PREPARE`
+
+**Defaults to `true`.** Tangen owns this contract rather than inheriting the
+driver's, so an unset variable has one documented meaning. Precedence is
+`createDb`'s `prepare` option, then `TANGEN_DB_PREPARE`, then the default; only
+the exact strings `true` and `false` are recognised, and `tangen doctor` prints
+the effective value with its source so a typo is visible.
+
+Prepared execution reuses a named statement per SQL shape per connection, which
+removes one PostgreSQL protocol round trip from every repeated parameterized
+query. On a remote database that is roughly half of each statement.
+
+`resolvePrepare(opts, env)` returns `{ prepare, source }` for anything that
+needs to report the decision.
+
+postgres.js does not honour a pool-level `prepare` for the queries Drizzle
+issues, so `prepare-policy.ts` threads the option through by hand. Read that
+file before changing anything here; it also carries the removal condition for
+when Drizzle fixes this upstream.
+
+Set `TANGEN_DB_PREPARE=false` for a pooler or proxy that cannot carry named
+statements - PgBouncer in transaction mode with `max_prepared_statements = 0`,
+or anything whose support you have not verified. Direct PostgreSQL, session
+pooling, and PgBouncer 1.21+ transaction pooling with prepared statements
+enabled all want the default. `false` is permanent: nothing overrides it.
+
+One thing to know if you write SQL against this client: a named statement is
+cached per distinct SQL string, per connection, until that connection closes.
+Code that inlines a value into the SQL text instead of binding it as a
+parameter mints a new prepared statement on every call. Tangen's own write
+paths bind their values; extension or application code that concatenates would
+accumulate.
+
+## What's included
+
+- `createDb(url, poolOptions?)` — Drizzle client with an `end()` helper
+- All Tangen system table definitions (drizzle `pgTable` objects)
+
+Project-specific generated content tables are **not** part of this package —
+they are generated into your project by `tangen push`.
+
+## License
+
+MIT

package/drizzle/0000_flimsy_shotgun.sql

@@ -0,0 +1,339 @@
+CREATE TABLE IF NOT EXISTS "workspaces" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"slug" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"deleted_at" timestamp with time zone,
+	CONSTRAINT "workspaces_slug_unique" UNIQUE("slug")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "environments" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"slug" text NOT NULL,
+	"label" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "environments_workspace_id_slug_unique" UNIQUE("workspace_id","slug")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "object_types" (
+	"id" text PRIMARY KEY NOT NULL,
+	"env_id" text NOT NULL,
+	"name" text NOT NULL,
+	"label" text NOT NULL,
+	"singleton" boolean DEFAULT false NOT NULL,
+	"previous_names" text[] DEFAULT '{}' NOT NULL,
+	"admin_config" jsonb DEFAULT '{}' NOT NULL,
+	"schema_version" integer DEFAULT 1 NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "object_types_env_id_name_unique" UNIQUE("env_id","name")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "fields" (
+	"id" text PRIMARY KEY NOT NULL,
+	"env_id" text NOT NULL,
+	"type_id" text NOT NULL,
+	"name" text NOT NULL,
+	"label" text NOT NULL,
+	"field_type" text NOT NULL,
+	"config" jsonb DEFAULT '{}' NOT NULL,
+	"previous_names" text[] DEFAULT '{}' NOT NULL,
+	"position" integer DEFAULT 0 NOT NULL,
+	"required" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "fields_type_id_name_unique" UNIQUE("type_id","name")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "_revisions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"type_id" text NOT NULL,
+	"type_name" text NOT NULL,
+	"object_id" text NOT NULL,
+	"version" integer DEFAULT 1 NOT NULL,
+	"version_type" text,
+	"snapshot" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" text
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "members" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"email" text NOT NULL,
+	"name" text,
+	"password_hash" text NOT NULL,
+	"role" text DEFAULT 'editor' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_login_at" timestamp with time zone,
+	CONSTRAINT "members_workspace_id_email_unique" UNIQUE("workspace_id","email")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "refresh_tokens" (
+	"id" text PRIMARY KEY NOT NULL,
+	"member_id" text NOT NULL,
+	"token_hash" text NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"revoked_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "api_keys" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"label" text NOT NULL,
+	"key_prefix" text NOT NULL,
+	"key_hash" text NOT NULL,
+	"permissions" jsonb DEFAULT '{}' NOT NULL,
+	"expires_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" text,
+	"last_used_at" timestamp with time zone,
+	"revoked_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "media_assets" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"folder_id" text,
+	"filename" text NOT NULL,
+	"original_name" text NOT NULL,
+	"mime_type" text NOT NULL,
+	"size_bytes" bigint NOT NULL,
+	"width" integer,
+	"height" integer,
+	"alt_text" text,
+	"tags" text[] DEFAULT '{}' NOT NULL,
+	"metadata" jsonb DEFAULT '{}' NOT NULL,
+	"storage_path" text NOT NULL,
+	"thumbnail_path" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"created_by" text
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "media_folders" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"name" text NOT NULL,
+	"parent_id" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "webhooks" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"label" text NOT NULL,
+	"url" text NOT NULL,
+	"secret" text,
+	"events" text[] DEFAULT '{}' NOT NULL,
+	"type_names" text[] DEFAULT '{}' NOT NULL,
+	"enabled" boolean DEFAULT true NOT NULL,
+	"headers" jsonb DEFAULT '{}' NOT NULL,
+	"consecutive_failures" integer DEFAULT 0 NOT NULL,
+	"paused_reason" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "webhook_deliveries" (
+	"id" text PRIMARY KEY NOT NULL,
+	"webhook_id" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"event" text NOT NULL,
+	"type_name" text NOT NULL,
+	"object_id" text NOT NULL,
+	"payload" jsonb NOT NULL,
+	"status_code" integer,
+	"response_body" text,
+	"duration_ms" integer,
+	"success" boolean NOT NULL,
+	"error" text,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "audit_log" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text,
+	"event_type" text NOT NULL,
+	"event_id" text NOT NULL,
+	"actor_id" text,
+	"actor_type" text,
+	"payload" jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "saved_views" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"type_name" text NOT NULL,
+	"name" text NOT NULL,
+	"filters" jsonb DEFAULT '{}' NOT NULL,
+	"visibility" text DEFAULT 'private' NOT NULL,
+	"created_by" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "member_env_roles" (
+	"id" text PRIMARY KEY NOT NULL,
+	"member_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"role" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "member_env_roles_member_id_env_id_unique" UNIQUE("member_id","env_id")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "workspace_domains" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"domain" text NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "workspace_domains_domain_unique" UNIQUE("domain")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "release_items" (
+	"id" text PRIMARY KEY NOT NULL,
+	"release_id" text NOT NULL,
+	"object_id" text NOT NULL,
+	"type_name" text NOT NULL,
+	"field_snapshot" jsonb NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "releases" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"source_env_id" text NOT NULL,
+	"target_env_id" text NOT NULL,
+	"status" text DEFAULT 'pending' NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"applied_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "form_submissions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"form_id" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"data" jsonb NOT NULL,
+	"ip_address" text,
+	"metadata" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "form_app_settings" (
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"settings" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "form_app_settings_workspace_id_env_id_pk" PRIMARY KEY("workspace_id","env_id")
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "forms" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"name" text NOT NULL,
+	"slug" text NOT NULL,
+	"is_live" boolean DEFAULT false NOT NULL,
+	"fields" jsonb DEFAULT '[]'::jsonb NOT NULL,
+	"settings" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "workspace_installed_apps" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"app_id" text NOT NULL,
+	"options" jsonb DEFAULT '{}' NOT NULL,
+	"installed_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"installed_by" text
+);
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "environments" ADD CONSTRAINT "environments_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE no action ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "fields" ADD CONSTRAINT "fields_type_id_object_types_id_fk" FOREIGN KEY ("type_id") REFERENCES "public"."object_types"("id") ON DELETE no action ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "refresh_tokens" ADD CONSTRAINT "refresh_tokens_member_id_members_id_fk" FOREIGN KEY ("member_id") REFERENCES "public"."members"("id") ON DELETE no action ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "media_assets" ADD CONSTRAINT "media_assets_folder_id_media_folders_id_fk" FOREIGN KEY ("folder_id") REFERENCES "public"."media_folders"("id") ON DELETE no action ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "member_env_roles" ADD CONSTRAINT "member_env_roles_member_id_members_id_fk" FOREIGN KEY ("member_id") REFERENCES "public"."members"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "member_env_roles" ADD CONSTRAINT "member_env_roles_env_id_environments_id_fk" FOREIGN KEY ("env_id") REFERENCES "public"."environments"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "workspace_domains" ADD CONSTRAINT "workspace_domains_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "release_items" ADD CONSTRAINT "release_items_release_id_releases_id_fk" FOREIGN KEY ("release_id") REFERENCES "public"."releases"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "releases" ADD CONSTRAINT "releases_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "form_submissions" ADD CONSTRAINT "form_submissions_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "form_app_settings" ADD CONSTRAINT "form_app_settings_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "forms" ADD CONSTRAINT "forms_workspace_id_workspaces_id_fk" FOREIGN KEY ("workspace_id") REFERENCES "public"."workspaces"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "revisions_object" ON "_revisions" ("workspace_id","env_id","object_id","created_at");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "audit_log_workspace" ON "audit_log" ("workspace_id","created_at");--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "workspace_installed_apps_ws_app_unique" ON "workspace_installed_apps" ("workspace_id","app_id");

package/drizzle/0001_app_data.sql

@@ -0,0 +1,11 @@
+CREATE TABLE IF NOT EXISTS "app_data" (
+	"id" text PRIMARY KEY NOT NULL,
+	"app_id" text NOT NULL,
+	"object_id" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"data" jsonb DEFAULT '{}' NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "app_data_app_object_unique" ON "app_data" ("app_id","object_id","workspace_id","env_id");

package/drizzle/0002_add_indexes.sql

@@ -0,0 +1,36 @@
+CREATE TABLE IF NOT EXISTS "app_data" (
+	"id" text PRIMARY KEY NOT NULL,
+	"app_id" text NOT NULL,
+	"object_id" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"data" jsonb DEFAULT '{}' NOT NULL,
+	"published_data" jsonb,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "globals" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"data" jsonb DEFAULT '{}' NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "app_data_app_object_unique" ON "app_data" ("app_id","object_id","workspace_id","env_id");--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "globals_workspace_env_name_unique" ON "globals" ("workspace_id","env_id","name");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "refresh_tokens_member_idx" ON "refresh_tokens" ("member_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "api_keys_key_hash_idx" ON "api_keys" ("key_hash");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "media_assets_workspace_env_idx" ON "media_assets" ("workspace_id","env_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "media_assets_folder_idx" ON "media_assets" ("folder_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "webhooks_workspace_env_idx" ON "webhooks" ("workspace_id","env_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "webhook_deliveries_workspace_env_idx" ON "webhook_deliveries" ("workspace_id","env_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "webhook_deliveries_webhook_idx" ON "webhook_deliveries" ("webhook_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "saved_views_workspace_env_idx" ON "saved_views" ("workspace_id","env_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "release_items_release_idx" ON "release_items" ("release_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "release_items_object_idx" ON "release_items" ("object_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "releases_workspace_idx" ON "releases" ("workspace_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "form_submissions_workspace_env_idx" ON "form_submissions" ("workspace_id","env_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "form_submissions_form_idx" ON "form_submissions" ("form_id");--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "forms_workspace_env_idx" ON "forms" ("workspace_id","env_id");

package/drizzle/0003_extension_data_rename.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "app_data" RENAME TO "extension_data";--> statement-breakpoint
+ALTER TABLE "extension_data" RENAME COLUMN "app_id" TO "extension_id";--> statement-breakpoint
+ALTER INDEX IF EXISTS "app_data_app_object_unique" RENAME TO "extension_data_ext_object_unique";

package/drizzle/0004_extension_data_published_globals.sql

@@ -0,0 +1,12 @@
+-- Adds published_data column to extension_data (idempotent: previously in 0002_app_data_published.sql but not journalled)
+ALTER TABLE "extension_data" ADD COLUMN IF NOT EXISTS "published_data" jsonb;--> statement-breakpoint
+-- Creates globals table (idempotent: previously in 0003_globals.sql but not journalled)
+CREATE TABLE IF NOT EXISTS "globals" (
+	"id" text PRIMARY KEY NOT NULL,
+	"name" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"data" jsonb DEFAULT '{}' NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "globals_workspace_env_name_unique" ON "globals" ("workspace_id","env_id","name");

package/drizzle/0005_auth.sql

@@ -0,0 +1,51 @@
+CREATE TABLE IF NOT EXISTS "auth_users" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"email" text,
+	"name" text,
+	"password_hash" text,
+	"role" text DEFAULT 'user' NOT NULL,
+	"status" text DEFAULT 'active' NOT NULL,
+	"is_anonymous" boolean DEFAULT false NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_login_at" timestamp with time zone
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "auth_sessions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"refresh_token_hash" text NOT NULL,
+	"expires_at" timestamp with time zone NOT NULL,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"revoked_at" timestamp with time zone,
+	CONSTRAINT "auth_sessions_user_id_auth_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "auth_users"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "auth_sso_accounts" (
+	"id" text PRIMARY KEY NOT NULL,
+	"user_id" text NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"provider" text NOT NULL,
+	"provider_user_id" text NOT NULL,
+	"access_token" text,
+	"refresh_token" text,
+	"expires_at" timestamp with time zone,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "auth_sso_accounts_user_id_auth_users_id_fk" FOREIGN KEY ("user_id") REFERENCES "auth_users"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+);
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "auth_users_workspace_env_idx" ON "auth_users" ("workspace_id","env_id");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "auth_users_anon_idx" ON "auth_users" ("workspace_id","env_id","is_anonymous");
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "auth_users_workspace_env_email_idx" ON "auth_users" ("workspace_id","env_id","email") WHERE email IS NOT NULL;
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "auth_sessions_user_idx" ON "auth_sessions" ("user_id");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "auth_sessions_workspace_env_idx" ON "auth_sessions" ("workspace_id","env_id");
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "auth_sso_accounts_provider_user_idx" ON "auth_sso_accounts" ("workspace_id","env_id","provider","provider_user_id");

package/drizzle/0006_auth_identities.sql

@@ -0,0 +1,13 @@
+CREATE TABLE IF NOT EXISTS "auth_identities" (
+  "id" text PRIMARY KEY NOT NULL,
+  "user_id" text NOT NULL REFERENCES "auth_users"("id") ON DELETE CASCADE,
+  "workspace_id" text NOT NULL,
+  "env_id" text NOT NULL,
+  "provider" text NOT NULL,
+  "provider_user_id" text NOT NULL,
+  "created_at" timestamptz NOT NULL DEFAULT now()
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "auth_identities_user_provider_idx" ON "auth_identities"("user_id","provider");
+CREATE UNIQUE INDEX IF NOT EXISTS "auth_identities_provider_uid_idx" ON "auth_identities"("workspace_id","env_id","provider","provider_user_id");
+CREATE INDEX IF NOT EXISTS "auth_identities_user_idx" ON "auth_identities"("user_id");

package/drizzle/0007_ai.sql

@@ -0,0 +1,18 @@
+CREATE TABLE IF NOT EXISTS "ai_settings" (
+	"workspace_id" text PRIMARY KEY NOT NULL,
+	"data" jsonb DEFAULT '{}' NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "ai_chats" (
+	"id" text PRIMARY KEY NOT NULL,
+	"workspace_id" text NOT NULL,
+	"env_id" text NOT NULL,
+	"object_type" text NOT NULL,
+	"object_id" text NOT NULL,
+	"member_id" text NOT NULL,
+	"messages" jsonb DEFAULT '[]' NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "ai_chats_scope_unique" ON "ai_chats" ("workspace_id","env_id","object_type","object_id","member_id");

package/drizzle/0008_ai_chat_threads.sql

@@ -0,0 +1,5 @@
+ALTER TABLE "ai_chats" ADD COLUMN IF NOT EXISTS "title" text;
+--> statement-breakpoint
+DROP INDEX IF EXISTS "ai_chats_scope_unique";
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "ai_chats_scope_idx" ON "ai_chats" ("workspace_id","env_id","object_type","object_id","member_id");

package/drizzle/0009_forms_source_slug.sql

@@ -0,0 +1,11 @@
+-- Forms v2: code-first forms need an origin marker and a slug identity.
+-- Pre-dedupe: suffix any duplicate slugs before the unique index lands.
+WITH d AS (
+  SELECT id, ROW_NUMBER() OVER (PARTITION BY workspace_id, env_id, slug ORDER BY created_at) AS rn
+  FROM forms
+)
+UPDATE forms f SET slug = f.slug || '-' || d.rn
+FROM d WHERE f.id = d.id AND d.rn > 1;
+
+ALTER TABLE forms ADD COLUMN IF NOT EXISTS source text NOT NULL DEFAULT 'admin';
+CREATE UNIQUE INDEX IF NOT EXISTS forms_workspace_env_slug_unique ON forms (workspace_id, env_id, slug);

package/drizzle/0010_rbac_roles_status.sql

@@ -0,0 +1,14 @@
+-- RBAC: workspace-defined custom roles + member suspension status.
+CREATE TABLE IF NOT EXISTS roles (
+  id text PRIMARY KEY,
+  workspace_id text NOT NULL,
+  slug text NOT NULL,
+  name text NOT NULL,
+  description text,
+  permissions jsonb NOT NULL DEFAULT '{}'::jsonb,
+  created_at timestamptz NOT NULL DEFAULT now(),
+  updated_at timestamptz NOT NULL DEFAULT now(),
+  CONSTRAINT roles_workspace_slug_unique UNIQUE (workspace_id, slug)
+);
+
+ALTER TABLE members ADD COLUMN IF NOT EXISTS status text NOT NULL DEFAULT 'active';