@taodigital/database 0.0.0-stage → 1.2.0

package/prisma/migrations/20260705120000_webhook_delivery/migration.sql

@@ -0,0 +1,32 @@
+-- Webhook dispatch was fire-and-forget with zero persisted history: a failed
+-- delivery left no trace anywhere except a best-effort server log line. This
+-- table records one row per delivery attempt (dispatch retries on failure,
+-- so a single logical event can produce several rows sharing the same
+-- event/payload with increasing `attempt`), and stores the payload so a
+-- failed delivery can be manually redelivered later with the exact original
+-- body rather than an approximation.
+
+CREATE TABLE "WebhookDelivery" (
+  "id"         TEXT NOT NULL,
+  "webhookId"  TEXT NOT NULL,
+  "tenantId"   TEXT NOT NULL,
+  "event"      TEXT NOT NULL,
+  "payload"    JSONB NOT NULL,
+  "attempt"    INTEGER NOT NULL DEFAULT 1,
+  "status"     TEXT NOT NULL,
+  "httpStatus" INTEGER,
+  "error"      TEXT,
+  "createdAt"  TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+  CONSTRAINT "WebhookDelivery_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "WebhookDelivery_webhookId_fkey" FOREIGN KEY ("webhookId") REFERENCES "Webhook"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE INDEX "WebhookDelivery_webhookId_createdAt_idx" ON "WebhookDelivery"("webhookId", "createdAt");
+
+ALTER TABLE "WebhookDelivery" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "WebhookDelivery" FORCE ROW LEVEL SECURITY;
+
+CREATE POLICY tenant_isolation ON "WebhookDelivery"
+  USING ("tenantId" = current_setting('app.current_tenant', true))
+  WITH CHECK ("tenantId" = current_setting('app.current_tenant', true));

package/prisma/migrations/20260705130000_tenant_feature_flags/migration.sql

@@ -0,0 +1,23 @@
+-- Per-tenant feature-flag overrides. Absence of a row for a given
+-- (tenantId, key) means "use the platform default" (FEATURE_FLAG_DEFAULTS in
+-- @detiq/core) — this table only stores explicit deviations from that default.
+
+CREATE TABLE "TenantFeatureFlag" (
+  "id"        TEXT NOT NULL,
+  "tenantId"  TEXT NOT NULL,
+  "key"       TEXT NOT NULL,
+  "enabled"   BOOLEAN NOT NULL,
+  "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+  CONSTRAINT "TenantFeatureFlag_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "TenantFeatureFlag_tenantId_key_key" UNIQUE ("tenantId", "key")
+);
+
+CREATE INDEX "TenantFeatureFlag_tenantId_idx" ON "TenantFeatureFlag"("tenantId");
+
+ALTER TABLE "TenantFeatureFlag" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "TenantFeatureFlag" FORCE ROW LEVEL SECURITY;
+
+CREATE POLICY tenant_isolation ON "TenantFeatureFlag"
+  USING ("tenantId" = current_setting('app.current_tenant', true))
+  WITH CHECK ("tenantId" = current_setting('app.current_tenant', true));

package/prisma/migrations/20260705140000_auth_sessions/migration.sql

@@ -0,0 +1,30 @@
+-- Real, revocable login sessions. Auth was pure stateless JWT with no way to
+-- see who was logged in or kill a compromised/lost-device session short of
+-- rotating JWT_SECRET (which logs out every user on the platform). The row's
+-- id IS the JWT's `jti` claim — resolveContext looks this up (via prismaAdmin,
+-- same reasoning as AgentToken: tenant context isn't established yet at the
+-- point this lookup happens) and rejects the request if it's missing or
+-- revoked.
+
+CREATE TABLE "AuthSession" (
+  "id"         TEXT NOT NULL,
+  "userId"     TEXT NOT NULL,
+  "tenantId"   TEXT NOT NULL,
+  "userAgent"  TEXT,
+  "ipAddress"  TEXT,
+  "createdAt"  TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "lastSeenAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "revokedAt"  TIMESTAMP(3),
+
+  CONSTRAINT "AuthSession_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX "AuthSession_userId_idx" ON "AuthSession"("userId");
+CREATE INDEX "AuthSession_tenantId_idx" ON "AuthSession"("tenantId");
+
+ALTER TABLE "AuthSession" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "AuthSession" FORCE ROW LEVEL SECURITY;
+
+CREATE POLICY tenant_isolation ON "AuthSession"
+  USING ("tenantId" = current_setting('app.current_tenant', true))
+  WITH CHECK ("tenantId" = current_setting('app.current_tenant', true));

package/prisma/migrations/20260705150000_fix_rls_wrong_session_var/migration.sql

@@ -0,0 +1,51 @@
+-- ============================================================================
+--  FIX: three earlier migrations (0011_oauth_connections, 20260626110000_
+--  screen_groups, 20260630140000_perf_env_comments) wrote RLS policies that
+--  check current_setting('app.tenant_id', true) — but withTenant() in
+--  @detiq/database has only ever set 'app.current_tenant' (every other policy
+--  in this schema uses that name). 'app.tenant_id' is never set by anything,
+--  so current_setting(...) always returns NULL there, and NULL = "tenantId"
+--  is always NULL (falsy). Net effect since the day each of these tables was
+--  created: every tenant-scoped SELECT/UPDATE/DELETE against them silently
+--  returns/affects zero rows, and every INSERT fails with "new row violates
+--  row-level security policy" (Postgres falls back to the USING expression
+--  as the implicit WITH CHECK when none is given) — found by live-testing
+--  the newly-registered environments.ts routes against a real database,
+--  not by reading the code.
+--
+--  Affected tables: OAuthConnection, ScreenGroup, PerformanceSnapshot,
+--  ProjectEnvironment, Comment.
+--
+--  Idempotent: DROP POLICY IF EXISTS + guarded CREATE, safe to run on a
+--  database where a previous partial attempt already fixed some of these.
+-- ============================================================================
+
+DO $$
+DECLARE
+  fix record;
+BEGIN
+  FOR fix IN
+    SELECT * FROM (VALUES
+      ('OAuthConnection',    'tenant_isolation_oauth_connections'),
+      ('ScreenGroup',        'tenant_isolation'),
+      ('PerformanceSnapshot','tenant_isolation_perf'),
+      ('ProjectEnvironment', 'tenant_isolation_env'),
+      ('Comment',            'tenant_isolation_comment')
+    ) AS t(table_name, policy_name)
+  LOOP
+    IF to_regclass(format('"%s"', fix.table_name)) IS NULL THEN
+      CONTINUE; -- defensive; all five are created by earlier migrations that must have already run
+    END IF;
+
+    EXECUTE format('DROP POLICY IF EXISTS "%s" ON "%s";', fix.policy_name, fix.table_name);
+    EXECUTE format($f$
+      CREATE POLICY "%s" ON "%s"
+        USING ("tenantId" = current_setting('app.current_tenant', true))
+        WITH CHECK ("tenantId" = current_setting('app.current_tenant', true));
+    $f$, fix.policy_name, fix.table_name);
+
+    -- FORCE wasn't set by any of the three original migrations either — add
+    -- it for consistency with every RLS table created later this session.
+    EXECUTE format('ALTER TABLE "%s" FORCE ROW LEVEL SECURITY;', fix.table_name);
+  END LOOP;
+END $$;

package/prisma/migrations/20260705160000_testcase_flaky_quarantine/migration.sql

@@ -0,0 +1,14 @@
+-- Flaky-test rolling score + quarantine (docs/13-TEST-FLAKINESS-DETECTION.md
+-- "Future Work"). Rolling stats are recomputed by
+-- AppBrain.recordFlakinessOutcome() after each TestCaseRun; quarantine blocks
+-- POST /test-cases/:id/run (409) unless force:true is passed, and never
+-- self-clears — lifting it always goes through PATCH /test-cases/:id/quarantine.
+
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "flakyScore" DOUBLE PRECISION NOT NULL DEFAULT 0;
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "consecutiveFlakes" INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "lastFlakyAt" TIMESTAMP(3);
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "quarantined" BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "quarantinedAt" TIMESTAMP(3);
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "quarantineReason" TEXT;
+
+CREATE INDEX IF NOT EXISTS "TestCase_tenantId_projectId_quarantined_idx" ON "TestCase"("tenantId", "projectId", "quarantined");

package/prisma/migrations/20260705170000_testcaserun_browser/migration.sql

@@ -0,0 +1,6 @@
+-- Records which Playwright engine (chromium|firefox|webkit) a TestCaseRun
+-- used. executeTestPlan() has always supported all 3 engines via its
+-- `browser` option; nothing ever threaded a caller-chosen value into it or
+-- persisted the choice — see docs/16-ENTERPRISE-FEATURE-GAPS.md section 9.
+
+ALTER TABLE "TestCaseRun" ADD COLUMN IF NOT EXISTS "browser" TEXT NOT NULL DEFAULT 'chromium';

package/prisma/migrations/20260705180000_allow_custom_roles/migration.sql

@@ -0,0 +1,22 @@
+-- Migration: allow_custom_roles
+--
+-- 20260702180000_add_invitation_model added a NOT VALID CHECK constraint
+-- pinning Membership.role and Invitation.role to the 6 built-in role names.
+-- 20260703000000_custom_roles then introduced the CustomRole model and a full
+-- CRUD API + UI for tenant-defined roles, but never revisited these
+-- constraints — so every attempt to assign a custom role (by id or name) has
+-- been rejected at the database layer with a check-constraint violation,
+-- regardless of what the application layer validates. This made the entire
+-- custom-role feature unusable end-to-end since the day it was built: a
+-- tenant could create a custom role and see it in every dropdown, but never
+-- actually assign it to anyone.
+--
+-- Custom role values are per-tenant CustomRole.id/name — arbitrary strings a
+-- CHECK constraint can't express (Postgres CHECK can't reference another
+-- table). Dropping these two constraints brings the database in line with
+-- what schema.prisma already declares (Membership.role / Invitation.role are
+-- plain, unconstrained String columns) and moves role-value validation to
+-- where it can actually see CustomRole rows: the application layer
+-- (isAssignableRole() in packages/api/src/routes/workspace.ts).
+ALTER TABLE "Membership" DROP CONSTRAINT IF EXISTS "Membership_role_check";
+ALTER TABLE "Invitation" DROP CONSTRAINT IF EXISTS "Invitation_role_check";

package/prisma/migrations/20260706050000_screen_markdown_extraction/migration.sql

@@ -0,0 +1,8 @@
+-- Markdown/text extraction from crawled pages (crawl4AI gap-closure #2 of 5).
+-- Mirrors the existing domSnapshotPath pattern: the extracted markdown is
+-- written to a file alongside the DOM snapshot, and this column just points
+-- at it. markdownMethod records whether Readability found an article
+-- ("readability") or the whole-page fallback was used ("full-page").
+ALTER TABLE "Screen" ADD COLUMN "markdownPath" TEXT;
+ALTER TABLE "Screen" ADD COLUMN "markdownMethod" TEXT;
+ALTER TABLE "Screen" ADD COLUMN "markdownWordCount" INTEGER;

package/prisma/migrations/20260706090000_add_lighthouse_to_performance_snapshot/migration.sql

@@ -0,0 +1,4 @@
+-- AlterTable (columns already added in 20260702120000_medium_priority_gaps — no-op)
+ALTER TABLE "PerformanceSnapshot" ADD COLUMN IF NOT EXISTS "lighthouseA11y" DOUBLE PRECISION,
+ADD COLUMN IF NOT EXISTS "lighthousePerf" DOUBLE PRECISION,
+ADD COLUMN IF NOT EXISTS "lighthouseSEO" DOUBLE PRECISION;

package/prisma/migrations/20260706100000_add_lighthouse_bp_and_job_index/migration.sql

@@ -0,0 +1,5 @@
+-- lighthouseBP already added by 20260702120000_medium_priority_gaps — no-op
+ALTER TABLE "PerformanceSnapshot" ADD COLUMN IF NOT EXISTS "lighthouseBP" DOUBLE PRECISION;
+
+-- Add composite index for fast job listing sorted by queuedAt
+CREATE INDEX IF NOT EXISTS "PlatformJob_tenantId_projectId_queuedAt_idx" ON "PlatformJob"("tenantId", "projectId", "queuedAt" DESC);

package/prisma/migrations/20260706110000_add_visual_diff_ai_summary/migration.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "VisualDiff" ADD COLUMN "aiSummary" TEXT;
+ALTER TABLE "Screen" ADD COLUMN "aiSummary" TEXT;

package/prisma/migrations/20260707120000_script_bundles/migration.sql

@@ -0,0 +1,25 @@
+CREATE TABLE IF NOT EXISTS "ScriptBundle" (
+  "id" TEXT NOT NULL,
+  "tenantId" TEXT NOT NULL,
+  "projectId" TEXT NOT NULL,
+  "scopeType" TEXT NOT NULL,
+  "scopeId" TEXT NOT NULL,
+  "language" TEXT NOT NULL DEFAULT 'playwright-ts',
+  "files" JSONB NOT NULL,
+  "basePage" TEXT,
+  "caseCount" INTEGER NOT NULL DEFAULT 0,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL,
+
+  CONSTRAINT "ScriptBundle_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "ScriptBundle_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ScriptBundle_tenantId_projectId_scopeType_scopeId_language_key"
+  ON "ScriptBundle"("tenantId", "projectId", "scopeType", "scopeId", "language");
+
+CREATE INDEX IF NOT EXISTS "ScriptBundle_tenantId_projectId_idx"
+  ON "ScriptBundle"("tenantId", "projectId");
+
+CREATE INDEX IF NOT EXISTS "ScriptBundle_tenantId_projectId_scopeType_scopeId_idx"
+  ON "ScriptBundle"("tenantId", "projectId", "scopeType", "scopeId");

package/prisma/migrations/20260707130000_requirement_source_section/migration.sql

@@ -0,0 +1,4 @@
+ALTER TABLE "Requirement" ADD COLUMN "sourceSection" TEXT;
+
+CREATE INDEX "Requirement_tenantId_projectId_sourceSection_idx"
+  ON "Requirement"("tenantId", "projectId", "sourceSection");

package/prisma/migrations/20260707140000_structured_skill_metadata/migration.sql

@@ -0,0 +1,8 @@
+ALTER TABLE "SkillFile" ADD COLUMN "structuredData" JSONB NOT NULL DEFAULT '{}';
+ALTER TABLE "SkillFile" ADD COLUMN "provenance" JSONB NOT NULL DEFAULT '[]';
+ALTER TABLE "SkillFile" ADD COLUMN "confidence" DOUBLE PRECISION;
+ALTER TABLE "SkillFile" ADD COLUMN "validationStatus" TEXT NOT NULL DEFAULT 'UNKNOWN';
+ALTER TABLE "SkillFile" ADD COLUMN "validationSummary" TEXT;
+ALTER TABLE "SkillFile" ADD COLUMN "staleStatus" TEXT NOT NULL DEFAULT 'CURRENT';
+ALTER TABLE "SkillFile" ADD COLUMN "staleReason" TEXT;
+ALTER TABLE "SkillFile" ADD COLUMN "generatorVersion" TEXT;

package/prisma/migrations/20260707150000_crawler_platform_primitives/migration.sql

@@ -0,0 +1,112 @@
+CREATE TABLE IF NOT EXISTS "ScreenTransition" (
+  "id" TEXT NOT NULL,
+  "tenantId" TEXT NOT NULL,
+  "projectId" TEXT NOT NULL,
+  "fromScreenId" TEXT NOT NULL,
+  "toScreenId" TEXT,
+  "action" JSONB NOT NULL,
+  "confidence" DOUBLE PRECISION NOT NULL DEFAULT 0.5,
+  "jobId" TEXT,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "ScreenTransition_pkey" PRIMARY KEY ("id")
+);
+
+CREATE TABLE IF NOT EXISTS "CrawlEvidence" (
+  "id" TEXT NOT NULL,
+  "tenantId" TEXT NOT NULL,
+  "projectId" TEXT NOT NULL,
+  "screenId" TEXT,
+  "jobId" TEXT,
+  "type" TEXT NOT NULL,
+  "payload" JSONB NOT NULL,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "CrawlEvidence_pkey" PRIMARY KEY ("id")
+);
+
+CREATE TABLE IF NOT EXISTS "ActionRecipe" (
+  "id" TEXT NOT NULL,
+  "tenantId" TEXT NOT NULL,
+  "projectId" TEXT NOT NULL,
+  "domain" TEXT NOT NULL,
+  "purpose" TEXT NOT NULL,
+  "fingerprint" TEXT NOT NULL,
+  "steps" JSONB NOT NULL,
+  "successRate" DOUBLE PRECISION NOT NULL DEFAULT 0,
+  "lastUsedAt" TIMESTAMP(3),
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "ActionRecipe_pkey" PRIMARY KEY ("id")
+);
+
+CREATE TABLE IF NOT EXISTS "ApiEndpointObservation" (
+  "id" TEXT NOT NULL,
+  "tenantId" TEXT NOT NULL,
+  "projectId" TEXT NOT NULL,
+  "screenId" TEXT,
+  "method" TEXT NOT NULL,
+  "urlPattern" TEXT NOT NULL,
+  "statusCode" INTEGER,
+  "requestKind" TEXT,
+  "responseShape" JSONB,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "ApiEndpointObservation_pkey" PRIMARY KEY ("id")
+);
+
+DO $$
+BEGIN
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ScreenTransition_projectId_fkey') THEN
+    ALTER TABLE "ScreenTransition" ADD CONSTRAINT "ScreenTransition_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ScreenTransition_fromScreenId_fkey') THEN
+    ALTER TABLE "ScreenTransition" ADD CONSTRAINT "ScreenTransition_fromScreenId_fkey" FOREIGN KEY ("fromScreenId") REFERENCES "Screen"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ScreenTransition_toScreenId_fkey') THEN
+    ALTER TABLE "ScreenTransition" ADD CONSTRAINT "ScreenTransition_toScreenId_fkey" FOREIGN KEY ("toScreenId") REFERENCES "Screen"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'CrawlEvidence_projectId_fkey') THEN
+    ALTER TABLE "CrawlEvidence" ADD CONSTRAINT "CrawlEvidence_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'CrawlEvidence_screenId_fkey') THEN
+    ALTER TABLE "CrawlEvidence" ADD CONSTRAINT "CrawlEvidence_screenId_fkey" FOREIGN KEY ("screenId") REFERENCES "Screen"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ActionRecipe_projectId_fkey') THEN
+    ALTER TABLE "ActionRecipe" ADD CONSTRAINT "ActionRecipe_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ApiEndpointObservation_projectId_fkey') THEN
+    ALTER TABLE "ApiEndpointObservation" ADD CONSTRAINT "ApiEndpointObservation_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+  END IF;
+  IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ApiEndpointObservation_screenId_fkey') THEN
+    ALTER TABLE "ApiEndpointObservation" ADD CONSTRAINT "ApiEndpointObservation_screenId_fkey" FOREIGN KEY ("screenId") REFERENCES "Screen"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+  END IF;
+END $$;
+
+CREATE UNIQUE INDEX IF NOT EXISTS "ActionRecipe_tenantId_projectId_purpose_fingerprint_key" ON "ActionRecipe"("tenantId", "projectId", "purpose", "fingerprint");
+CREATE INDEX IF NOT EXISTS "ScreenTransition_tenantId_projectId_idx" ON "ScreenTransition"("tenantId", "projectId");
+CREATE INDEX IF NOT EXISTS "ScreenTransition_tenantId_projectId_jobId_idx" ON "ScreenTransition"("tenantId", "projectId", "jobId");
+CREATE INDEX IF NOT EXISTS "ScreenTransition_fromScreenId_idx" ON "ScreenTransition"("fromScreenId");
+CREATE INDEX IF NOT EXISTS "ScreenTransition_toScreenId_idx" ON "ScreenTransition"("toScreenId");
+CREATE INDEX IF NOT EXISTS "CrawlEvidence_tenantId_projectId_idx" ON "CrawlEvidence"("tenantId", "projectId");
+CREATE INDEX IF NOT EXISTS "CrawlEvidence_tenantId_projectId_jobId_idx" ON "CrawlEvidence"("tenantId", "projectId", "jobId");
+CREATE INDEX IF NOT EXISTS "CrawlEvidence_screenId_idx" ON "CrawlEvidence"("screenId");
+CREATE INDEX IF NOT EXISTS "CrawlEvidence_type_idx" ON "CrawlEvidence"("type");
+CREATE INDEX IF NOT EXISTS "ActionRecipe_tenantId_projectId_idx" ON "ActionRecipe"("tenantId", "projectId");
+CREATE INDEX IF NOT EXISTS "ActionRecipe_tenantId_projectId_domain_idx" ON "ActionRecipe"("tenantId", "projectId", "domain");
+CREATE INDEX IF NOT EXISTS "ApiEndpointObservation_tenantId_projectId_idx" ON "ApiEndpointObservation"("tenantId", "projectId");
+CREATE INDEX IF NOT EXISTS "ApiEndpointObservation_tenantId_projectId_method_idx" ON "ApiEndpointObservation"("tenantId", "projectId", "method");
+CREATE INDEX IF NOT EXISTS "ApiEndpointObservation_screenId_idx" ON "ApiEndpointObservation"("screenId");
+
+DO $$
+DECLARE
+  t text;
+BEGIN
+  FOREACH t IN ARRAY ARRAY['ScreenTransition', 'CrawlEvidence', 'ActionRecipe', 'ApiEndpointObservation']
+  LOOP
+    EXECUTE format('ALTER TABLE "%s" ENABLE ROW LEVEL SECURITY;', t);
+    EXECUTE format('ALTER TABLE "%s" FORCE ROW LEVEL SECURITY;', t);
+    EXECUTE format('DROP POLICY IF EXISTS tenant_isolation ON "%s";', t);
+    EXECUTE format(
+      'CREATE POLICY tenant_isolation ON "%s" USING ("tenantId" = current_setting(''app.current_tenant'', true)) WITH CHECK ("tenantId" = current_setting(''app.current_tenant'', true));',
+      t
+    );
+  END LOOP;
+END $$;

package/prisma/migrations/20260707160000_screen_group_versioning/migration.sql

@@ -0,0 +1,9 @@
+-- Add crawlJobId, createdAt, updatedAt to ScreenGroup for version tracking.
+-- This lets the UI show when groups were last regenerated and by which crawl job.
+ALTER TABLE "ScreenGroup"
+  ADD COLUMN IF NOT EXISTS "crawlJobId" TEXT,
+  ADD COLUMN IF NOT EXISTS "createdAt"  TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  ADD COLUMN IF NOT EXISTS "updatedAt"  TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP;
+
+CREATE INDEX IF NOT EXISTS "ScreenGroup_tenantId_projectId_crawlJobId_idx"
+  ON "ScreenGroup"("tenantId", "projectId", "crawlJobId");

package/prisma/migrations/20260707170000_add_mfa_fields/migration.sql

@@ -0,0 +1,24 @@
+-- Add MFA fields to User
+ALTER TABLE "User" ADD COLUMN IF NOT EXISTS "mfaEnabled" BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE "User" ADD COLUMN IF NOT EXISTS "mfaSecret_enc" TEXT;
+ALTER TABLE "User" ADD COLUMN IF NOT EXISTS "mfaVerifiedAt" TIMESTAMP(3);
+
+-- Create MfaRecoveryCode table
+CREATE TABLE IF NOT EXISTS "MfaRecoveryCode" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "codeHash" TEXT NOT NULL,
+    "usedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "MfaRecoveryCode_pkey" PRIMARY KEY ("id")
+);
+
+-- Foreign key
+DO $$ BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'MfaRecoveryCode_userId_fkey'
+  ) THEN
+    ALTER TABLE "MfaRecoveryCode" ADD CONSTRAINT "MfaRecoveryCode_userId_fkey"
+      FOREIGN KEY ("userId") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+  END IF;
+END $$;

package/prisma/migrations/20260707180000_add_missing_tables/migration.sql

@@ -0,0 +1,158 @@
+-- ScreenA11yViolation
+CREATE TABLE IF NOT EXISTS "ScreenA11yViolation" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "projectId" TEXT NOT NULL,
+    "screenId" TEXT NOT NULL,
+    "runId" TEXT,
+    "impact" TEXT NOT NULL,
+    "rule" TEXT NOT NULL,
+    "description" TEXT NOT NULL,
+    "nodeHtml" TEXT,
+    "wcagTags" JSONB NOT NULL DEFAULT '[]',
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "ScreenA11yViolation_pkey" PRIMARY KEY ("id")
+);
+CREATE INDEX IF NOT EXISTS "ScreenA11yViolation_tenantId_projectId_idx" ON "ScreenA11yViolation"("tenantId", "projectId");
+CREATE INDEX IF NOT EXISTS "ScreenA11yViolation_screenId_idx" ON "ScreenA11yViolation"("screenId");
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ScreenA11yViolation_projectId_fkey') THEN ALTER TABLE "ScreenA11yViolation" ADD CONSTRAINT "ScreenA11yViolation_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE; END IF; END $$;
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'ScreenA11yViolation_screenId_fkey') THEN ALTER TABLE "ScreenA11yViolation" ADD CONSTRAINT "ScreenA11yViolation_screenId_fkey" FOREIGN KEY ("screenId") REFERENCES "Screen"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- TestRunShard
+CREATE TABLE IF NOT EXISTS "TestRunShard" (
+    "id" TEXT NOT NULL,
+    "runId" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "shardIndex" INTEGER NOT NULL,
+    "browser" TEXT NOT NULL DEFAULT 'chromium',
+    "status" TEXT NOT NULL DEFAULT 'PENDING',
+    "summary" JSONB,
+    "startedAt" TIMESTAMP(3),
+    "finishedAt" TIMESTAMP(3),
+    CONSTRAINT "TestRunShard_pkey" PRIMARY KEY ("id"),
+    CONSTRAINT "TestRunShard_runId_shardIndex_browser_key" UNIQUE ("runId", "shardIndex", "browser")
+);
+CREATE INDEX IF NOT EXISTS "TestRunShard_runId_idx" ON "TestRunShard"("runId");
+CREATE INDEX IF NOT EXISTS "TestRunShard_tenantId_idx" ON "TestRunShard"("tenantId");
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'TestRunShard_runId_fkey') THEN ALTER TABLE "TestRunShard" ADD CONSTRAINT "TestRunShard_runId_fkey" FOREIGN KEY ("runId") REFERENCES "TestRun"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- SsoConfig
+CREATE TABLE IF NOT EXISTS "SsoConfig" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "provider" TEXT NOT NULL,
+    "entryPoint" TEXT,
+    "issuer" TEXT,
+    "cert" TEXT,
+    "clientId" TEXT,
+    "clientSecret_enc" TEXT,
+    "defaultRole" TEXT NOT NULL DEFAULT 'TESTER',
+    "jitProvisioning" BOOLEAN NOT NULL DEFAULT true,
+    "enabled" BOOLEAN NOT NULL DEFAULT false,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "SsoConfig_pkey" PRIMARY KEY ("id"),
+    CONSTRAINT "SsoConfig_tenantId_key" UNIQUE ("tenantId")
+);
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SsoConfig_tenantId_fkey') THEN ALTER TABLE "SsoConfig" ADD CONSTRAINT "SsoConfig_tenantId_fkey" FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- AccessReview
+CREATE TABLE IF NOT EXISTS "AccessReview" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "reviewedBy" TEXT NOT NULL,
+    "memberCount" INTEGER NOT NULL,
+    "removedCount" INTEGER NOT NULL DEFAULT 0,
+    "completedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "AccessReview_pkey" PRIMARY KEY ("id")
+);
+CREATE INDEX IF NOT EXISTS "AccessReview_tenantId_idx" ON "AccessReview"("tenantId");
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'AccessReview_tenantId_fkey') THEN ALTER TABLE "AccessReview" ADD CONSTRAINT "AccessReview_tenantId_fkey" FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- TenantPlan
+CREATE TABLE IF NOT EXISTS "TenantPlan" (
+    "tenantId" TEXT NOT NULL,
+    "tier" TEXT NOT NULL DEFAULT 'TRIAL',
+    "stripeCustomerId" TEXT,
+    "stripeSubscriptionId" TEXT,
+    "trialEndsAt" TIMESTAMP(3),
+    "maxProjects" INTEGER NOT NULL DEFAULT 3,
+    "maxMembers" INTEGER NOT NULL DEFAULT 5,
+    "maxCrawlsPerMonth" INTEGER NOT NULL DEFAULT 10,
+    "maxRunsPerMonth" INTEGER NOT NULL DEFAULT 50,
+    "maxShards" INTEGER NOT NULL DEFAULT 1,
+    "maxTokensPerMonth" INTEGER NOT NULL DEFAULT 500000,
+    "currentCrawls" INTEGER NOT NULL DEFAULT 0,
+    "currentRuns" INTEGER NOT NULL DEFAULT 0,
+    "lastResetAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "TenantPlan_pkey" PRIMARY KEY ("tenantId")
+);
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'TenantPlan_tenantId_fkey') THEN ALTER TABLE "TenantPlan" ADD CONSTRAINT "TenantPlan_tenantId_fkey" FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- SlackConnection
+CREATE TABLE IF NOT EXISTS "SlackConnection" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "teamId" TEXT NOT NULL,
+    "teamName" TEXT NOT NULL,
+    "channelId" TEXT NOT NULL,
+    "channelName" TEXT NOT NULL,
+    "accessToken_enc" TEXT NOT NULL,
+    "installedBy" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "SlackConnection_pkey" PRIMARY KEY ("id"),
+    CONSTRAINT "SlackConnection_tenantId_key" UNIQUE ("tenantId")
+);
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'SlackConnection_tenantId_fkey') THEN ALTER TABLE "SlackConnection" ADD CONSTRAINT "SlackConnection_tenantId_fkey" FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- TeamsConnection
+CREATE TABLE IF NOT EXISTS "TeamsConnection" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "webhookUrl" TEXT NOT NULL,
+    "channelName" TEXT,
+    "installedBy" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "TeamsConnection_pkey" PRIMARY KEY ("id"),
+    CONSTRAINT "TeamsConnection_tenantId_key" UNIQUE ("tenantId")
+);
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'TeamsConnection_tenantId_fkey') THEN ALTER TABLE "TeamsConnection" ADD CONSTRAINT "TeamsConnection_tenantId_fkey" FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- TenantSiloConfig
+CREATE TABLE IF NOT EXISTS "TenantSiloConfig" (
+    "tenantId" TEXT NOT NULL,
+    "connectionString_enc" TEXT NOT NULL,
+    "encryptionKeyRef" TEXT NOT NULL DEFAULT 'default',
+    "provisionedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "TenantSiloConfig_pkey" PRIMARY KEY ("tenantId")
+);
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'TenantSiloConfig_tenantId_fkey') THEN ALTER TABLE "TenantSiloConfig" ADD CONSTRAINT "TenantSiloConfig_tenantId_fkey" FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- TestDataSet
+CREATE TABLE IF NOT EXISTS "TestDataSet" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "projectId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "TestDataSet_pkey" PRIMARY KEY ("id")
+);
+CREATE INDEX IF NOT EXISTS "TestDataSet_tenantId_projectId_idx" ON "TestDataSet"("tenantId", "projectId");
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'TestDataSet_projectId_fkey') THEN ALTER TABLE "TestDataSet" ADD CONSTRAINT "TestDataSet_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- TestDataRow
+CREATE TABLE IF NOT EXISTS "TestDataRow" (
+    "id" TEXT NOT NULL,
+    "dataSetId" TEXT NOT NULL,
+    "rowIndex" INTEGER NOT NULL,
+    "data" JSONB NOT NULL,
+    CONSTRAINT "TestDataRow_pkey" PRIMARY KEY ("id"),
+    CONSTRAINT "TestDataRow_dataSetId_rowIndex_key" UNIQUE ("dataSetId", "rowIndex")
+);
+DO $$ BEGIN IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'TestDataRow_dataSetId_fkey') THEN ALTER TABLE "TestDataRow" ADD CONSTRAINT "TestDataRow_dataSetId_fkey" FOREIGN KEY ("dataSetId") REFERENCES "TestDataSet"("id") ON DELETE CASCADE; END IF; END $$;
+
+-- TestCase → TestDataSet FK (if column exists but FK missing)
+DO $$ BEGIN IF EXISTS (SELECT 1 FROM information_schema.columns WHERE table_name='TestCase' AND column_name='dataSetId') AND NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'TestCase_dataSetId_fkey') THEN ALTER TABLE "TestCase" ADD CONSTRAINT "TestCase_dataSetId_fkey" FOREIGN KEY ("dataSetId") REFERENCES "TestDataSet"("id") ON DELETE SET NULL; END IF; END $$;

package/prisma/migrations/20260707190000_add_missing_columns/migration.sql

@@ -0,0 +1,15 @@
+-- TenantSetting: add missing columns
+ALTER TABLE "TenantSetting" ADD COLUMN IF NOT EXISTS "dataRetentionDays" INTEGER NOT NULL DEFAULT 365;
+ALTER TABLE "TenantSetting" ADD COLUMN IF NOT EXISTS "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP;
+
+-- TenantFeatureFlag: create if missing
+CREATE TABLE IF NOT EXISTS "TenantFeatureFlag" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "key" TEXT NOT NULL,
+    "enabled" BOOLEAN NOT NULL,
+    "updatedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "TenantFeatureFlag_pkey" PRIMARY KEY ("id"),
+    CONSTRAINT "TenantFeatureFlag_tenantId_key_key" UNIQUE ("tenantId", "key")
+);
+CREATE INDEX IF NOT EXISTS "TenantFeatureFlag_tenantId_idx" ON "TenantFeatureFlag"("tenantId");

package/prisma/migrations/20260707200000_add_plan_sessions/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "TenantPlan" ADD COLUMN IF NOT EXISTS "maxSessions" INTEGER NOT NULL DEFAULT 2;

package/prisma/migrations/20260708100000_missing_columns_comprehensive/migration.sql

@@ -0,0 +1,15 @@
+-- Comprehensive fix: add all columns present in schema.prisma but missing from DB.
+-- All statements use IF NOT EXISTS / idempotent patterns — safe to re-run.
+
+-- ── TestRun: parallel shard + CI/CD fields ────────────────────────────────────
+ALTER TABLE "TestRun" ADD COLUMN IF NOT EXISTS "totalShards"  INTEGER;
+ALTER TABLE "TestRun" ADD COLUMN IF NOT EXISTS "githubRepo"   TEXT;
+ALTER TABLE "TestRun" ADD COLUMN IF NOT EXISTS "githubSha"    TEXT;
+ALTER TABLE "TestRun" ADD COLUMN IF NOT EXISTS "githubRef"    TEXT;
+ALTER TABLE "TestRun" ADD COLUMN IF NOT EXISTS "triggeredBy"  TEXT;
+
+-- ── TestResult: failure analysis + data-driven row tracking ──────────────────
+ALTER TABLE "TestResult" ADD COLUMN IF NOT EXISTS "failureAnalysis"   TEXT;
+ALTER TABLE "TestResult" ADD COLUMN IF NOT EXISTS "failureAnalysisAt" TIMESTAMP(3);
+ALTER TABLE "TestResult" ADD COLUMN IF NOT EXISTS "dataRowId"         TEXT;
+ALTER TABLE "TestResult" ADD COLUMN IF NOT EXISTS "dataRowIndex"      INTEGER;

package/prisma/migrations/20260708200000_testcase_dataset_column/migration.sql

@@ -0,0 +1,16 @@
+-- Add dataSetId column to TestCase (data-driven execution link).
+-- Was missing from previous migrations despite being in schema.prisma.
+
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "dataSetId" TEXT;
+
+CREATE INDEX IF NOT EXISTS "TestCase_dataSetId_idx" ON "TestCase"("dataSetId");
+
+DO $$ BEGIN
+  IF NOT EXISTS (
+    SELECT 1 FROM pg_constraint WHERE conname = 'TestCase_dataSetId_fkey'
+  ) THEN
+    ALTER TABLE "TestCase"
+      ADD CONSTRAINT "TestCase_dataSetId_fkey"
+      FOREIGN KEY ("dataSetId") REFERENCES "TestDataSet"("id") ON DELETE SET NULL;
+  END IF;
+END $$;

package/prisma/migrations/20260709100000_add_filename_to_native_app_build/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "NativeAppBuild" ADD COLUMN IF NOT EXISTS "fileName" TEXT;

package/prisma/migrations/20260709200000_cloud_url_visual_artifacts/migration.sql

@@ -0,0 +1,6 @@
+-- Add cloud storage URL fields to visual artifacts
+-- VisualBaseline: cloudUrl stores public URL or S3 key for presigned URL generation
+ALTER TABLE "VisualBaseline" ADD COLUMN IF NOT EXISTS "cloudUrl" TEXT;
+
+-- VisualDiff: newScreenshotCloudUrl for the comparison screenshot
+ALTER TABLE "VisualDiff" ADD COLUMN IF NOT EXISTS "newScreenshotCloudUrl" TEXT;