@taodigital/database 0.0.0-stage → 1.2.1

package/prisma/migrations/20260626080000_job_name/migration.sql

@@ -0,0 +1,2 @@
+-- Add human-readable name to PlatformJob for tracking (format: EventName_Date_timestamp)
+ALTER TABLE "PlatformJob" ADD COLUMN "name" TEXT;

package/prisma/migrations/20260626090000_rls_missing_tables/migration.sql

@@ -0,0 +1,39 @@
+-- ============================================================================
+--  RLS FOR MISSING TABLES — extends 0001_tenant_isolation
+--
+--  This migration applies Row-Level Security to tables that were added after
+--  the initial tenant isolation migration (0001_tenant_isolation). All tables
+--  listed here follow the same pattern: a "tenantId" column scoped to the
+--  owning tenant, isolated via the app.current_tenant session variable.
+--
+--  Tables covered here (NOT in 0001_tenant_isolation):
+--    PlatformJob, UserSession, LLMCallLog, TokenBudget, OAuthConnection,
+--    ElementFingerprint, TestRun, TestResult, ProjectArtifact, VisualBaseline,
+--    VisualDiff, HumanReviewItem, AgentToken, Webhook, KnowledgeChunk,
+--    TenantSetting
+-- ============================================================================
+
+DO $$
+DECLARE
+  t text;
+  tenant_tables text[] := ARRAY[
+    'PlatformJob','UserSession','LLMCallLog','TokenBudget','OAuthConnection',
+    'ElementFingerprint','TestRun','TestResult','ProjectArtifact','VisualBaseline',
+    'VisualDiff','HumanReviewItem','AgentToken','Webhook','KnowledgeChunk',
+    'TenantSetting'
+  ];
+BEGIN
+  FOREACH t IN ARRAY tenant_tables LOOP
+    EXECUTE format('ALTER TABLE "%s" ENABLE ROW LEVEL SECURITY;', t);
+    EXECUTE format('ALTER TABLE "%s" FORCE ROW LEVEL SECURITY;', t);
+    BEGIN
+      EXECUTE format($f$
+        CREATE POLICY tenant_isolation ON "%s"
+        USING ("tenantId" = current_setting('app.current_tenant', true))
+        WITH CHECK ("tenantId" = current_setting('app.current_tenant', true));
+      $f$, t);
+    EXCEPTION WHEN duplicate_object THEN
+      NULL; -- policy already exists, skip
+    END;
+  END LOOP;
+END $$;

package/prisma/migrations/20260626100000_token_budget/migration.sql

@@ -0,0 +1,21 @@
+-- TokenBudget: per-tenant monthly token and USD spending limits with running counters.
+CREATE TABLE IF NOT EXISTS "TokenBudget" (
+  "id"                 TEXT NOT NULL,
+  "tenantId"           TEXT NOT NULL,
+  "monthlyTokenCap"    INTEGER,
+  "monthlyUsdCap"      DOUBLE PRECISION,
+  "alertAtPercent"     INTEGER NOT NULL DEFAULT 80,
+  "currentMonthTokens" INTEGER NOT NULL DEFAULT 0,
+  "currentMonthUsd"    DOUBLE PRECISION NOT NULL DEFAULT 0,
+  "lastResetAt"        TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "updatedAt"          TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "TokenBudget_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "TokenBudget_tenantId_key" ON "TokenBudget"("tenantId");
+
+DO $$ BEGIN
+  ALTER TABLE "TokenBudget" ADD CONSTRAINT "TokenBudget_tenantId_fkey"
+    FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;

package/prisma/migrations/20260626110000_screen_groups/migration.sql

@@ -0,0 +1,42 @@
+-- ScreenGroup: AI-generated semantic grouping of screens during post-crawl
+
+CREATE TABLE IF NOT EXISTS "ScreenGroup" (
+  "id"          TEXT NOT NULL,
+  "tenantId"    TEXT NOT NULL,
+  "projectId"   TEXT NOT NULL,
+  "name"        TEXT NOT NULL,
+  "slug"        TEXT NOT NULL,
+  "description" TEXT,
+  "color"       TEXT NOT NULL DEFAULT '#6FD0E8',
+  "icon"        TEXT NOT NULL DEFAULT '◈',
+  "order"       INTEGER NOT NULL DEFAULT 0,
+  CONSTRAINT "ScreenGroup_pkey" PRIMARY KEY ("id")
+);
+
+CREATE INDEX IF NOT EXISTS "ScreenGroup_tenantId_projectId_idx" ON "ScreenGroup"("tenantId", "projectId");
+
+-- FK: ScreenGroup → Project
+DO $$ BEGIN
+  ALTER TABLE "ScreenGroup" ADD CONSTRAINT "ScreenGroup_projectId_fkey"
+    FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;
+
+-- Add groupId to Screen
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "groupId" TEXT;
+
+-- FK: Screen → ScreenGroup
+DO $$ BEGIN
+  ALTER TABLE "Screen" ADD CONSTRAINT "Screen_groupId_fkey"
+    FOREIGN KEY ("groupId") REFERENCES "ScreenGroup"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;
+
+-- RLS for ScreenGroup
+ALTER TABLE "ScreenGroup" ENABLE ROW LEVEL SECURITY;
+
+DO $$ BEGIN
+  CREATE POLICY "tenant_isolation" ON "ScreenGroup"
+    USING ("tenantId" = current_setting('app.tenant_id', true));
+EXCEPTION WHEN duplicate_object THEN NULL;
+END $$;

package/prisma/migrations/20260626120000_artifact_intelligence/migration.sql

@@ -0,0 +1,5 @@
+-- Add AI-generated intelligence fields to ProjectArtifact
+ALTER TABLE "ProjectArtifact" ADD COLUMN IF NOT EXISTS "summary" TEXT;
+ALTER TABLE "ProjectArtifact" ADD COLUMN IF NOT EXISTS "keywords" TEXT[] NOT NULL DEFAULT '{}';
+ALTER TABLE "ProjectArtifact" ADD COLUMN IF NOT EXISTS "docType" TEXT;
+ALTER TABLE "ProjectArtifact" ADD COLUMN IF NOT EXISTS "chunkCount" INTEGER NOT NULL DEFAULT 1;

package/prisma/migrations/20260626130000_notifications/migration.sql

@@ -0,0 +1,34 @@
+-- Add Notification and NotificationPreference tables
+
+CREATE TABLE IF NOT EXISTS "Notification" (
+  "id"        TEXT         NOT NULL,
+  "tenantId"  TEXT         NOT NULL,
+  "userId"    TEXT         NOT NULL,
+  "type"      TEXT         NOT NULL,
+  "title"     TEXT         NOT NULL,
+  "body"      TEXT         NOT NULL,
+  "metadata"  JSONB,
+  "read"      BOOLEAN      NOT NULL DEFAULT false,
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "Notification_pkey"      PRIMARY KEY ("id"),
+  CONSTRAINT "Notification_tenantId_fkey" FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE CASCADE,
+  CONSTRAINT "Notification_userId_fkey"   FOREIGN KEY ("userId")   REFERENCES "User"("id")   ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS "Notification_tenantId_userId_read_idx" ON "Notification"("tenantId", "userId", "read");
+CREATE INDEX IF NOT EXISTS "Notification_tenantId_createdAt_idx"   ON "Notification"("tenantId", "createdAt");
+
+CREATE TABLE IF NOT EXISTS "NotificationPreference" (
+  "id"        TEXT    NOT NULL,
+  "tenantId"  TEXT    NOT NULL,
+  "userId"    TEXT    NOT NULL,
+  "eventType" TEXT    NOT NULL,
+  "inApp"     BOOLEAN NOT NULL DEFAULT true,
+  "email"     BOOLEAN NOT NULL DEFAULT true,
+  CONSTRAINT "NotificationPreference_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "NotificationPreference_tenantId_fkey" FOREIGN KEY ("tenantId") REFERENCES "Tenant"("id") ON DELETE CASCADE,
+  CONSTRAINT "NotificationPreference_userId_fkey"   FOREIGN KEY ("userId")   REFERENCES "User"("id")   ON DELETE CASCADE,
+  CONSTRAINT "NotificationPreference_userId_tenantId_eventType_key" UNIQUE ("userId", "tenantId", "eventType")
+);
+
+CREATE INDEX IF NOT EXISTS "NotificationPreference_tenantId_userId_idx" ON "NotificationPreference"("tenantId", "userId");

package/prisma/migrations/20260627100000_element_viewport/migration.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "Element" ADD COLUMN IF NOT EXISTS "viewport" TEXT NOT NULL DEFAULT 'DESKTOP';
+CREATE INDEX IF NOT EXISTS "Element_tenantId_screenId_viewport_idx" ON "Element"("tenantId", "screenId", "viewport");

package/prisma/migrations/20260627100000_screenshot_cloud_url/migration.sql

@@ -0,0 +1,2 @@
+-- Add cloud storage URL to Screenshot for S3/R2 hosted images
+ALTER TABLE "Screenshot" ADD COLUMN "cloudUrl" TEXT;

package/prisma/migrations/20260627110000_screenshot_index/migration.sql

@@ -0,0 +1,2 @@
+-- Index for fast latest-screenshot lookup per screen
+CREATE INDEX IF NOT EXISTS "Screenshot_screenId_version_idx" ON "Screenshot"("screenId", "version" DESC);

package/prisma/migrations/20260627140000_artifact_storage_key/migration.sql

@@ -0,0 +1,3 @@
+-- Add storageKey to ProjectArtifact for original file storage in S3/R2.
+-- Nullable: null means original not stored in cloud (markdown-only artifact).
+ALTER TABLE "ProjectArtifact" ADD COLUMN IF NOT EXISTS "storageKey" TEXT;

package/prisma/migrations/20260627150000_screen_lifecycle/migration.sql

@@ -0,0 +1,5 @@
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "status" TEXT NOT NULL DEFAULT 'ACTIVE';
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "lastCrawlJobId" TEXT;
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "removedAt" TIMESTAMP(3);
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "removalReason" TEXT;
+CREATE INDEX IF NOT EXISTS "Screen_tenantId_projectId_status_idx" ON "Screen"("tenantId", "projectId", "status");

package/prisma/migrations/20260627160000_native_app_support/migration.sql

@@ -0,0 +1,41 @@
+-- Native app build upload support
+
+-- Project.appType: web | android | ios | windows | macos | electron
+ALTER TABLE "Project" ADD COLUMN IF NOT EXISTS "appType" TEXT;
+
+-- PlatformJob device/Appium metadata columns
+ALTER TABLE "PlatformJob" ADD COLUMN IF NOT EXISTS "deviceModel"     TEXT;
+ALTER TABLE "PlatformJob" ADD COLUMN IF NOT EXISTS "osVersion"       TEXT;
+ALTER TABLE "PlatformJob" ADD COLUMN IF NOT EXISTS "deviceFarm"      TEXT;
+ALTER TABLE "PlatformJob" ADD COLUMN IF NOT EXISTS "appiumSessionId" TEXT;
+
+-- NativeAppBuild: stores upload metadata (S3 path, platform, file format, etc.)
+CREATE TABLE IF NOT EXISTS "NativeAppBuild" (
+  "id"          TEXT         NOT NULL,
+  "tenantId"    TEXT         NOT NULL,
+  "projectId"   TEXT         NOT NULL,
+  "platform"    TEXT         NOT NULL,
+  "fileFormat"  TEXT         NOT NULL,
+  "s3Path"      TEXT         NOT NULL,
+  "packageName" TEXT,
+  "version"     TEXT,
+  "uploadedAt"  TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "NativeAppBuild_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "NativeAppBuild_projectId_fkey"
+    FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS "NativeAppBuild_tenantId_projectId_idx" ON "NativeAppBuild"("tenantId", "projectId");
+
+-- RLS: row-level security on NativeAppBuild (same pattern as other tables)
+ALTER TABLE "NativeAppBuild" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "NativeAppBuild" FORCE ROW LEVEL SECURITY;
+
+DO $$
+BEGIN
+  CREATE POLICY tenant_isolation ON "NativeAppBuild"
+    USING ("tenantId" = current_setting('app.current_tenant', true))
+    WITH CHECK ("tenantId" = current_setting('app.current_tenant', true));
+EXCEPTION WHEN duplicate_object THEN
+  NULL;
+END $$;

package/prisma/migrations/20260627200000_rls_missing_tables/migration.sql

@@ -0,0 +1,57 @@
+-- ============================================================================
+--  RLS FOR MISSING TABLES — extends 20260626090000_rls_missing_tables
+--
+--  Applies Row-Level Security to tables that were added after the previous
+--  RLS catch-up migration. All tables follow the same pattern used throughout
+--  this project: a "tenantId" column scoped via the app.current_tenant
+--  session variable.
+--
+--  Tables covered here:
+--    ScreenDiff, ProbeObservation, TestCaseRun, Notification,
+--    NotificationPreference
+--
+--  NOTE (fixed post-hoc): ScreenDiff, ProbeObservation, and TestCaseRun are
+--  actually created by LATER migrations (20260628120000_screen_diff,
+--  20260628130000_probe_observations, 20260630130000_test_case_runs). On any
+--  database that evolved incrementally in dev those tables already existed
+--  by the time this ran, so it never failed there — but on a genuinely fresh
+--  `prisma migrate deploy` this migration fails outright with
+--  "relation does not exist" before those tables are ever created, which
+--  breaks bootstrapping a brand-new environment/region from scratch.
+--  Guarding each statement with a to_regclass() existence check makes this
+--  migration a no-op for tables that don't exist yet without changing its
+--  effect anywhere it already succeeded. RLS for the three later tables is
+--  finished off for real in 20260630160000_rls_catchup_late_tables, once
+--  they're guaranteed to exist.
+--
+--  If this migration's checksum was already recorded by `prisma migrate
+--  deploy` against a database, applying this edited file will fail with a
+--  "migration modified" error. Resolve with:
+--    npx prisma migrate resolve --applied 20260627200000_rls_missing_tables
+-- ============================================================================
+
+DO $$
+DECLARE
+  t text;
+  tenant_tables text[] := ARRAY[
+    'ScreenDiff','ProbeObservation','TestCaseRun','Notification',
+    'NotificationPreference'
+  ];
+BEGIN
+  FOREACH t IN ARRAY tenant_tables LOOP
+    IF to_regclass(format('"%s"', t)) IS NULL THEN
+      CONTINUE; -- table doesn't exist yet on a fresh deploy; caught up later
+    END IF;
+    EXECUTE format('ALTER TABLE "%s" ENABLE ROW LEVEL SECURITY;', t);
+    EXECUTE format('ALTER TABLE "%s" FORCE ROW LEVEL SECURITY;', t);
+    BEGIN
+      EXECUTE format($f$
+        CREATE POLICY tenant_isolation ON "%s"
+        USING ("tenantId" = current_setting('app.current_tenant', true))
+        WITH CHECK ("tenantId" = current_setting('app.current_tenant', true));
+      $f$, t);
+    EXCEPTION WHEN duplicate_object THEN
+      NULL; -- policy already exists, skip
+    END;
+  END LOOP;
+END $$;

package/prisma/migrations/20260627210000_llmcalllog_tasktype/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "LLMCallLog" ADD COLUMN IF NOT EXISTS "taskType" TEXT;

package/prisma/migrations/20260628100000_element_enrichment/migration.sql

@@ -0,0 +1,7 @@
+-- Phase 1: Element model enrichment — bounding rect, aria state, parent landmark
+ALTER TABLE "Element" ADD COLUMN IF NOT EXISTS "boundingRect"   JSONB;
+ALTER TABLE "Element" ADD COLUMN IF NOT EXISTS "ariaState"      JSONB;
+ALTER TABLE "Element" ADD COLUMN IF NOT EXISTS "parentLandmark" TEXT;
+
+CREATE INDEX IF NOT EXISTS "Element_tenantId_screenId_parentLandmark_idx"
+  ON "Element"("tenantId", "screenId", "parentLandmark");

package/prisma/migrations/20260628110000_element_hash/migration.sql

@@ -0,0 +1,6 @@
+-- Phase 2: Element hash for stale-test detection
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "elementHash"          TEXT;
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "elementHashChangedAt" TIMESTAMP(3);
+
+CREATE INDEX IF NOT EXISTS "Screen_tenantId_projectId_elementHashChangedAt_idx"
+  ON "Screen"("tenantId", "projectId", "elementHashChangedAt");

package/prisma/migrations/20260628120000_screen_diff/migration.sql

@@ -0,0 +1,20 @@
+-- Phase 3: Perceptual screenshot diff
+CREATE TABLE IF NOT EXISTS "ScreenDiff" (
+  "id"            TEXT             NOT NULL,
+  "tenantId"      TEXT             NOT NULL,
+  "projectId"     TEXT             NOT NULL,
+  "screenId"      TEXT             NOT NULL,
+  "fromVersion"   INTEGER          NOT NULL,
+  "toVersion"     INTEGER          NOT NULL,
+  "pHashDistance" DOUBLE PRECISION NOT NULL,
+  "changeLevel"   TEXT             NOT NULL,
+  "createdAt"     TIMESTAMP(3)     NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "ScreenDiff_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "ScreenDiff_screenId_fkey"
+    FOREIGN KEY ("screenId") REFERENCES "Screen"("id") ON DELETE CASCADE ON UPDATE CASCADE,
+  CONSTRAINT "ScreenDiff_screenId_fromVersion_toVersion_key"
+    UNIQUE ("screenId", "fromVersion", "toVersion")
+);
+
+CREATE INDEX IF NOT EXISTS "ScreenDiff_tenantId_projectId_idx" ON "ScreenDiff"("tenantId", "projectId");
+CREATE INDEX IF NOT EXISTS "ScreenDiff_tenantId_screenId_idx"  ON "ScreenDiff"("tenantId", "screenId");

package/prisma/migrations/20260628130000_probe_observations/migration.sql

@@ -0,0 +1,19 @@
+-- Phase 5: Structured probe observations
+CREATE TABLE IF NOT EXISTS "ProbeObservation" (
+  "id"              TEXT         NOT NULL,
+  "tenantId"        TEXT         NOT NULL,
+  "projectId"       TEXT         NOT NULL,
+  "screenId"        TEXT         NOT NULL,
+  "elementMeaning"  TEXT         NOT NULL,
+  "observationType" TEXT         NOT NULL,
+  "observedText"    TEXT         NOT NULL,
+  "triggeredBy"     TEXT         NOT NULL,
+  "observedAt"      TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "ProbeObservation_pkey" PRIMARY KEY ("id"),
+  CONSTRAINT "ProbeObservation_screenId_fkey"
+    FOREIGN KEY ("screenId") REFERENCES "Screen"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS "ProbeObservation_tenantId_projectId_idx"             ON "ProbeObservation"("tenantId", "projectId");
+CREATE INDEX IF NOT EXISTS "ProbeObservation_tenantId_screenId_idx"              ON "ProbeObservation"("tenantId", "screenId");
+CREATE INDEX IF NOT EXISTS "ProbeObservation_tenantId_screenId_observationType_idx" ON "ProbeObservation"("tenantId", "screenId", "observationType");

package/prisma/migrations/20260629100000_visual_baseline_masking/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "VisualBaseline" ADD COLUMN IF NOT EXISTS "ignoredRegions" JSONB NOT NULL DEFAULT '[]';

package/prisma/migrations/20260629110000_testcase_viewports/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "viewports" JSONB NOT NULL DEFAULT '[]';

package/prisma/migrations/20260630100000_visual_baseline_element_snapshot/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "VisualBaseline" ADD COLUMN "elementSnapshot" JSONB;

package/prisma/migrations/20260630110000_git_branched_baselines/migration.sql

@@ -0,0 +1,11 @@
+-- Add git branch/commit tracking to visual baselines
+ALTER TABLE "VisualBaseline" ADD COLUMN "gitBranch" TEXT NOT NULL DEFAULT 'main';
+ALTER TABLE "VisualBaseline" ADD COLUMN "gitCommit" TEXT;
+ALTER TABLE "VisualBaseline" ADD COLUMN "domSnapshotPath" TEXT;
+
+-- Add DOM snapshot path to Screen
+ALTER TABLE "Screen" ADD COLUMN "domSnapshotPath" TEXT;
+
+-- Drop old unique constraint and replace with branch-aware one
+DROP INDEX IF EXISTS "VisualBaseline_screenId_viewport_key";
+CREATE UNIQUE INDEX "VisualBaseline_screenId_viewport_gitBranch_key" ON "VisualBaseline"("screenId", "viewport", "gitBranch");

package/prisma/migrations/20260630120000_testcase_viewport_constraint/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "TestCase" ADD COLUMN "viewportConstraint" TEXT NOT NULL DEFAULT 'ALL';

package/prisma/migrations/20260630130000_test_case_runs/migration.sql

@@ -0,0 +1,22 @@
+-- CreateTable: per-test-case execution run (distinct from suite-level TestRun)
+CREATE TABLE "TestCaseRun" (
+  "id" TEXT NOT NULL,
+  "testCaseId" TEXT NOT NULL,
+  "tenantId" TEXT NOT NULL,
+  "status" TEXT NOT NULL DEFAULT 'PENDING',
+  "executionPlan" JSONB,
+  "stepResults" JSONB,
+  "totalDuration" INTEGER,
+  "errorStep" INTEGER,
+  "errorMessage" TEXT,
+  "screenshotPath" TEXT,
+  "viewport" TEXT NOT NULL DEFAULT 'DESKTOP',
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "completedAt" TIMESTAMP(3),
+  CONSTRAINT "TestCaseRun_pkey" PRIMARY KEY ("id")
+);
+
+ALTER TABLE "TestCaseRun" ADD CONSTRAINT "TestCaseRun_testCaseId_fkey"
+  FOREIGN KEY ("testCaseId") REFERENCES "TestCase"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+CREATE INDEX "TestCaseRun_tenantId_testCaseId_idx" ON "TestCaseRun"("tenantId", "testCaseId");

package/prisma/migrations/20260630140000_perf_env_comments/migration.sql

@@ -0,0 +1,68 @@
+-- CreateTable PerformanceSnapshot
+CREATE TABLE "PerformanceSnapshot" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "screenId" TEXT NOT NULL,
+    "crawlJobId" TEXT NOT NULL,
+    "lcp" DOUBLE PRECISION,
+    "fcp" DOUBLE PRECISION,
+    "cls" DOUBLE PRECISION,
+    "ttfb" DOUBLE PRECISION,
+    "viewport" TEXT NOT NULL DEFAULT 'DESKTOP',
+    "capturedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "PerformanceSnapshot_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable ProjectEnvironment
+CREATE TABLE "ProjectEnvironment" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "projectId" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "baseUrl" TEXT NOT NULL,
+    "credentials_enc" TEXT,
+    "isDefault" BOOLEAN NOT NULL DEFAULT false,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "ProjectEnvironment_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable Comment
+CREATE TABLE "Comment" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "parentType" TEXT NOT NULL,
+    "parentId" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "body" TEXT NOT NULL,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Comment_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "PerformanceSnapshot_tenantId_screenId_idx" ON "PerformanceSnapshot"("tenantId", "screenId");
+CREATE INDEX "PerformanceSnapshot_tenantId_crawlJobId_idx" ON "PerformanceSnapshot"("tenantId", "crawlJobId");
+
+-- CreateIndex
+CREATE INDEX "ProjectEnvironment_tenantId_projectId_idx" ON "ProjectEnvironment"("tenantId", "projectId");
+
+-- CreateIndex
+CREATE INDEX "Comment_tenantId_parentType_parentId_idx" ON "Comment"("tenantId", "parentType", "parentId");
+
+-- Enable RLS
+ALTER TABLE "PerformanceSnapshot" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "ProjectEnvironment" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "Comment" ENABLE ROW LEVEL SECURITY;
+
+CREATE POLICY "tenant_isolation_perf" ON "PerformanceSnapshot"
+  USING (current_setting('app.tenant_id', true) = "tenantId");
+
+CREATE POLICY "tenant_isolation_env" ON "ProjectEnvironment"
+  USING (current_setting('app.tenant_id', true) = "tenantId");
+
+CREATE POLICY "tenant_isolation_comment" ON "Comment"
+  USING (current_setting('app.tenant_id', true) = "tenantId");

package/prisma/migrations/20260630150000_testcase_gen_at/migration.sql

@@ -0,0 +1,2 @@
+-- Add genAt (AI generation timestamp) to TestCase
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "genAt" TIMESTAMP(3);

package/prisma/migrations/20260630160000_rls_catchup_late_tables/migration.sql

@@ -0,0 +1,41 @@
+-- ============================================================================
+--  RLS CATCH-UP FOR LATE TABLES — finishes what 20260627200000_rls_missing_tables
+--  couldn't, for ScreenDiff, ProbeObservation, and TestCaseRun.
+--
+--  Those three tables are created by migrations that run AFTER
+--  20260627200000_rls_missing_tables (20260628120000_screen_diff,
+--  20260628130000_probe_observations, 20260630130000_test_case_runs), so the
+--  earlier migration's attempt to enable RLS on them is now a guarded no-op
+--  on a fresh database (see the note added there). This migration runs after
+--  all three tables definitely exist and applies the same tenant-isolation
+--  pattern used throughout the project.
+--
+--  Idempotent: safe to run even where 20260627200000 already succeeded in
+--  applying RLS to these tables (e.g. a database that evolved incrementally
+--  in dev, where the tables pre-existed) — ENABLE/FORCE ROW LEVEL SECURITY
+--  are no-ops when already set, and policy creation is guarded against
+--  duplicate_object.
+-- ============================================================================
+
+DO $$
+DECLARE
+  t text;
+  tenant_tables text[] := ARRAY['ScreenDiff','ProbeObservation','TestCaseRun'];
+BEGIN
+  FOREACH t IN ARRAY tenant_tables LOOP
+    IF to_regclass(format('"%s"', t)) IS NULL THEN
+      CONTINUE; -- defensive; should always exist by this point
+    END IF;
+    EXECUTE format('ALTER TABLE "%s" ENABLE ROW LEVEL SECURITY;', t);
+    EXECUTE format('ALTER TABLE "%s" FORCE ROW LEVEL SECURITY;', t);
+    BEGIN
+      EXECUTE format($f$
+        CREATE POLICY tenant_isolation ON "%s"
+        USING ("tenantId" = current_setting('app.current_tenant', true))
+        WITH CHECK ("tenantId" = current_setting('app.current_tenant', true));
+      $f$, t);
+    EXCEPTION WHEN duplicate_object THEN
+      NULL; -- policy already exists, skip
+    END;
+  END LOOP;
+END $$;

package/prisma/migrations/20260701100000_skill_file_diff_approval/migration.sql

@@ -0,0 +1,9 @@
+-- Add diff tracking and approval status fields to SkillFile
+ALTER TABLE "SkillFile" ADD COLUMN "priorContent" TEXT;
+ALTER TABLE "SkillFile" ADD COLUMN "priorVersion" INTEGER;
+ALTER TABLE "SkillFile" ADD COLUMN "priorGeneratedAt" TIMESTAMP(3);
+ALTER TABLE "SkillFile" ADD COLUMN "changesSummary" TEXT;
+ALTER TABLE "SkillFile" ADD COLUMN "approvalStatus" TEXT NOT NULL DEFAULT 'PENDING';
+
+-- Backfill: existing approved files
+UPDATE "SkillFile" SET "approvalStatus" = 'APPROVED' WHERE "approvedBy" IS NOT NULL;

package/prisma/migrations/20260701200000_workspace_connector/migration.sql

@@ -0,0 +1,20 @@
+-- CreateTable
+CREATE TABLE "WorkspaceConnector" (
+    "id" TEXT NOT NULL,
+    "tenantId" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "secretRef" TEXT NOT NULL DEFAULT 'local-aes256',
+    "config" JSONB,
+    "testOk" BOOLEAN NOT NULL DEFAULT false,
+    "testedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "WorkspaceConnector_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "WorkspaceConnector_tenantId_kind_key" ON "WorkspaceConnector"("tenantId", "kind");
+
+-- CreateIndex
+CREATE INDEX "WorkspaceConnector_tenantId_idx" ON "WorkspaceConnector"("tenantId");

package/prisma/migrations/20260701220000_screen_a11y_security/migration.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "a11yViolations" JSONB;
+ALTER TABLE "Screen" ADD COLUMN IF NOT EXISTS "securityHeaders" JSONB;

package/prisma/migrations/20260702100000_ci_threshold_root_cause/migration.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "Project" ADD COLUMN IF NOT EXISTS "ciFailureThreshold" INTEGER;
+ALTER TABLE "TestResult" ADD COLUMN IF NOT EXISTS "rootCauseSummary" TEXT;

package/prisma/migrations/20260702120000_medium_priority_gaps/migration.sql

@@ -0,0 +1,28 @@
+-- TestSuite: owner assignment
+ALTER TABLE "TestSuite" ADD COLUMN IF NOT EXISTS "ownerUserId" TEXT;
+
+-- TestResult: network timings + data-driven row
+ALTER TABLE "TestResult" ADD COLUMN IF NOT EXISTS "networkTimings" JSONB;
+ALTER TABLE "TestResult" ADD COLUMN IF NOT EXISTS "dataRow" JSONB;
+
+-- Project: SLA threshold
+ALTER TABLE "Project" ADD COLUMN IF NOT EXISTS "slaThreshold" INTEGER;
+
+-- PerformanceSnapshot: Lighthouse scores
+ALTER TABLE "PerformanceSnapshot" ADD COLUMN IF NOT EXISTS "lighthousePerf" INTEGER;
+ALTER TABLE "PerformanceSnapshot" ADD COLUMN IF NOT EXISTS "lighthouseA11y" INTEGER;
+ALTER TABLE "PerformanceSnapshot" ADD COLUMN IF NOT EXISTS "lighthouseSEO" INTEGER;
+ALTER TABLE "PerformanceSnapshot" ADD COLUMN IF NOT EXISTS "lighthouseBP" INTEGER;
+ALTER TABLE "PerformanceSnapshot" ADD COLUMN IF NOT EXISTS "lighthouseReport" JSONB;
+
+-- SharedRunToken: shareable signed links
+CREATE TABLE IF NOT EXISTS "SharedRunToken" (
+  "id"        TEXT NOT NULL PRIMARY KEY,
+  "tenantId"  TEXT NOT NULL,
+  "runId"     TEXT NOT NULL,
+  "token"     TEXT NOT NULL UNIQUE,
+  "expiresAt" TIMESTAMPTZ NOT NULL,
+  "createdAt" TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+CREATE INDEX IF NOT EXISTS "SharedRunToken_tenantId_idx" ON "SharedRunToken"("tenantId");
+CREATE INDEX IF NOT EXISTS "SharedRunToken_token_idx" ON "SharedRunToken"("token");

package/prisma/migrations/20260702140000_testcase_v2_technique/migration.sql

@@ -0,0 +1,7 @@
+-- TestCase: v2 technique-of-record field
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "techniqueOfRecord" TEXT;
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "traceTo" TEXT;
+ALTER TABLE "TestCase" ADD COLUMN IF NOT EXISTS "testDataInline" JSONB;
+
+-- TestSuite: coverage reporting
+ALTER TABLE "TestSuite" ADD COLUMN IF NOT EXISTS "coverageReport" JSONB;

package/prisma/migrations/20260702150000_add_app_field/migration.sql

@@ -0,0 +1,40 @@
+-- CreateTable
+CREATE TABLE "AppField" (
+    "id"            TEXT NOT NULL,
+    "tenantId"      TEXT NOT NULL,
+    "projectId"     TEXT NOT NULL,
+    "fieldKey"      TEXT NOT NULL,
+    "label"         TEXT NOT NULL,
+    "elementRole"   TEXT NOT NULL,
+    "dataBearing"   BOOLEAN NOT NULL DEFAULT true,
+    "dataType"      TEXT NOT NULL,
+    "required"      BOOLEAN NOT NULL DEFAULT false,
+    "minLength"     INTEGER,
+    "maxLength"     INTEGER,
+    "minValue"      DOUBLE PRECISION,
+    "maxValue"      DOUBLE PRECISION,
+    "precision"     INTEGER,
+    "regex"         TEXT,
+    "enumValues"    JSONB,
+    "piiClass"      TEXT NOT NULL DEFAULT 'none',
+    "exampleValue"  TEXT,
+    "relationGroup" TEXT,
+    "notes"         TEXT,
+    "status"        TEXT NOT NULL DEFAULT 'unconfirmed',
+    "createdAt"     TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt"     TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "AppField_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "AppField_tenantId_projectId_fieldKey_key" ON "AppField"("tenantId", "projectId", "fieldKey");
+
+-- CreateIndex
+CREATE INDEX "AppField_tenantId_projectId_idx" ON "AppField"("tenantId", "projectId");
+
+-- AddForeignKey
+ALTER TABLE "AppField" ADD CONSTRAINT "AppField_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- RowLevelSecurity (matches tenant isolation pattern used by all other tables)
+ALTER TABLE "AppField" ENABLE ROW LEVEL SECURITY;