ework-web 0.2.1 → 0.3.0

package/src/schema-mysql.sql

@@ -0,0 +1,178 @@
+-- ework schema (MySQL 8.0+ / MariaDB 10.5+). Applied idempotently on boot:
+-- CREATE TABLE IF NOT EXISTS + CREATE INDEX (no IF NOT EXISTS — MySQL lacks it;
+-- re-runs tolerate ER_DUP_KEYNAME 1061). FK constraint names are {{tokenized}}
+-- so prefixed instances don't collide on constraint-name uniqueness. Date
+-- columns are VARCHAR(40) holding ISO-8601 strings — the app formats dates in
+-- JS, never SQL date arithmetic, so strings avoid Date-vs-string friction
+-- across drivers. FK columns carry their own indexes (MySQL requirement). All
+-- tables InnoDB + utf8mb4 for FK CASCADE + full Unicode (emoji).
+
+CREATE TABLE IF NOT EXISTS {{users}} (
+  login         VARCHAR(255) PRIMARY KEY,
+  kind          VARCHAR(16) NOT NULL DEFAULT 'human'
+                CHECK (kind IN ('human','bot','system')),
+  display_name  VARCHAR(255) DEFAULT NULL,
+  password_hash VARCHAR(255) DEFAULT NULL,
+  email         VARCHAR(255) DEFAULT NULL,
+  is_admin      TINYINT NOT NULL DEFAULT 0,
+  is_active     TINYINT NOT NULL DEFAULT 1,
+  created_at    VARCHAR(40) NOT NULL,
+  updated_at    VARCHAR(40) NOT NULL DEFAULT ''
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+CREATE TABLE IF NOT EXISTS {{projects}} (
+  id            BIGINT AUTO_INCREMENT PRIMARY KEY,
+  owner         VARCHAR(255) NOT NULL,
+  name          VARCHAR(255) NOT NULL,
+  description   VARCHAR(2048) NOT NULL DEFAULT '',
+  upstream_urls VARCHAR(4096) NOT NULL DEFAULT '[]',
+  model         VARCHAR(128) NOT NULL DEFAULT '',
+  created_at    VARCHAR(40) NOT NULL,
+  updated_at    VARCHAR(40) NOT NULL,
+  UNIQUE (owner, name)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+CREATE TABLE IF NOT EXISTS {{model_cache}} (
+  provider_model VARCHAR(128) PRIMARY KEY,
+  label          VARCHAR(255) NOT NULL,
+  refreshed_at   VARCHAR(40) NOT NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+CREATE TABLE IF NOT EXISTS {{issues}} (
+  id         BIGINT AUTO_INCREMENT PRIMARY KEY,
+  project_id BIGINT NOT NULL,
+  number     INT NOT NULL,
+  title      VARCHAR(512) NOT NULL,
+  body       TEXT NOT NULL,
+  state      VARCHAR(16) NOT NULL DEFAULT 'open'
+             CHECK (state IN ('open','closed')),
+  author     VARCHAR(255) NOT NULL,
+  created_at VARCHAR(40) NOT NULL,
+  updated_at VARCHAR(40) NOT NULL,
+  closed_at  VARCHAR(40) DEFAULT NULL,
+  UNIQUE (project_id, number),
+  CONSTRAINT {{fk_issues_project}} FOREIGN KEY (project_id) REFERENCES {{projects}}(id) ON DELETE CASCADE,
+  CONSTRAINT {{fk_issues_author}} FOREIGN KEY (author)     REFERENCES {{users}}(login)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX issues_project_state_updated
+  ON {{issues}} (project_id, state, updated_at DESC);
+CREATE INDEX issues_state_updated
+  ON {{issues}} (state, updated_at DESC);
+CREATE INDEX issues_author ON {{issues}} (author);
+
+CREATE TABLE IF NOT EXISTS {{comments}} (
+  id         BIGINT AUTO_INCREMENT PRIMARY KEY,
+  issue_id   BIGINT NOT NULL,
+  author     VARCHAR(255) NOT NULL,
+  body       TEXT NOT NULL,
+  created_at VARCHAR(40) NOT NULL,
+  updated_at VARCHAR(40) NOT NULL DEFAULT '',
+  CONSTRAINT {{fk_comments_issue}} FOREIGN KEY (issue_id) REFERENCES {{issues}}(id) ON DELETE CASCADE,
+  CONSTRAINT {{fk_comments_author}} FOREIGN KEY (author)  REFERENCES {{users}}(login)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX comments_issue_created ON {{comments}} (issue_id, created_at);
+CREATE INDEX comments_author ON {{comments}} (author);
+
+CREATE TABLE IF NOT EXISTS {{labels}} (
+  id         BIGINT AUTO_INCREMENT PRIMARY KEY,
+  project_id BIGINT NOT NULL,
+  name       VARCHAR(255) NOT NULL,
+  color      VARCHAR(16) NOT NULL DEFAULT '#888888',
+  UNIQUE (project_id, name),
+  CONSTRAINT {{fk_labels_project}} FOREIGN KEY (project_id) REFERENCES {{projects}}(id) ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+CREATE TABLE IF NOT EXISTS {{issue_labels}} (
+  issue_id BIGINT NOT NULL,
+  label_id BIGINT NOT NULL,
+  PRIMARY KEY (issue_id, label_id),
+  CONSTRAINT {{fk_il_issue}} FOREIGN KEY (issue_id) REFERENCES {{issues}}(id) ON DELETE CASCADE,
+  CONSTRAINT {{fk_il_label}} FOREIGN KEY (label_id) REFERENCES {{labels}}(id) ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX issue_labels_label ON {{issue_labels}} (label_id);
+
+CREATE TABLE IF NOT EXISTS {{reactions}} (
+  comment_id BIGINT NOT NULL,
+  user_login VARCHAR(255) NOT NULL,
+  content    VARCHAR(64) NOT NULL,
+  PRIMARY KEY (comment_id, user_login, content),
+  CONSTRAINT {{fk_reactions_comment}} FOREIGN KEY (comment_id)  REFERENCES {{comments}}(id) ON DELETE CASCADE,
+  CONSTRAINT {{fk_reactions_user}} FOREIGN KEY (user_login)  REFERENCES {{users}}(login)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX reactions_comment ON {{reactions}} (comment_id);
+CREATE INDEX reactions_user   ON {{reactions}} (user_login);
+
+CREATE TABLE IF NOT EXISTS {{attachments}} (
+  uuid         VARCHAR(64) PRIMARY KEY,
+  issue_id     BIGINT NOT NULL,
+  filename     VARCHAR(255) NOT NULL,
+  content_type VARCHAR(128) NOT NULL DEFAULT 'application/octet-stream',
+  size         BIGINT NOT NULL,
+  blob_path    VARCHAR(1024) NOT NULL,
+  uploaded_by  VARCHAR(255) NOT NULL,
+  created_at   VARCHAR(40) NOT NULL,
+  CONSTRAINT {{fk_attachments_issue}} FOREIGN KEY (issue_id)    REFERENCES {{issues}}(id) ON DELETE CASCADE,
+  CONSTRAINT {{fk_attachments_user}} FOREIGN KEY (uploaded_by) REFERENCES {{users}}(login)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX attachments_issue ON {{attachments}} (issue_id);
+CREATE INDEX attachments_user  ON {{attachments}} (uploaded_by);
+
+CREATE TABLE IF NOT EXISTS {{webhooks}} (
+  id           BIGINT AUTO_INCREMENT PRIMARY KEY,
+  project_id   BIGINT NOT NULL,
+  url          VARCHAR(1024) NOT NULL,
+  secret       VARCHAR(255) NOT NULL DEFAULT '',
+  content_type VARCHAR(128) NOT NULL DEFAULT 'application/json',
+  events       VARCHAR(2048) NOT NULL DEFAULT '["issues","issue_comment"]',
+  active       TINYINT NOT NULL DEFAULT 1,
+  created_at   VARCHAR(40) NOT NULL,
+  updated_at   VARCHAR(40) NOT NULL,
+  CONSTRAINT {{fk_webhooks_project}} FOREIGN KEY (project_id) REFERENCES {{projects}}(id) ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX webhooks_project ON {{webhooks}} (project_id);
+
+CREATE TABLE IF NOT EXISTS {{webhook_deliveries}} (
+  id              BIGINT AUTO_INCREMENT PRIMARY KEY,
+  webhook_id      BIGINT NOT NULL,
+  event           VARCHAR(64) NOT NULL,
+  delivery_uuid   VARCHAR(64) NOT NULL,
+  payload         LONGTEXT NOT NULL,
+  response_status INT DEFAULT NULL,
+  response_body   LONGTEXT,
+  duration_ms     INT DEFAULT NULL,
+  error           TEXT,
+  created_at      VARCHAR(40) NOT NULL,
+  CONSTRAINT {{fk_deliveries_webhook}} FOREIGN KEY (webhook_id) REFERENCES {{webhooks}}(id) ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX deliveries_webhook ON {{webhook_deliveries}} (webhook_id);
+CREATE INDEX deliveries_created ON {{webhook_deliveries}} (created_at DESC);
+
+CREATE TABLE IF NOT EXISTS {{personal_access_tokens}} (
+  id               BIGINT AUTO_INCREMENT PRIMARY KEY,
+  user_login       VARCHAR(255) NOT NULL,
+  name             VARCHAR(255) NOT NULL,
+  salt             VARCHAR(32) NOT NULL,
+  token_hash       VARCHAR(64) NOT NULL,
+  token_last_eight CHAR(8) NOT NULL,
+  scopes           VARCHAR(2048) NOT NULL DEFAULT '[]',
+  ip_allowlist     VARCHAR(2048) NOT NULL DEFAULT '[]',
+  expires_at       VARCHAR(40) DEFAULT NULL,
+  last_used_at     VARCHAR(40) DEFAULT NULL,
+  created_at       VARCHAR(40) NOT NULL,
+  revoked_at       VARCHAR(40) DEFAULT NULL,
+  CONSTRAINT {{fk_pat_user}} FOREIGN KEY (user_login) REFERENCES {{users}}(login) ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX pat_user         ON {{personal_access_tokens}} (user_login);
+CREATE INDEX pat_last_eight   ON {{personal_access_tokens}} (token_last_eight);
+
+CREATE TABLE IF NOT EXISTS {{project_members}} (
+  project_id BIGINT NOT NULL,
+  user_login VARCHAR(255) NOT NULL,
+  role       VARCHAR(16) NOT NULL DEFAULT 'writer'
+             CHECK (role IN ('reader','writer','admin')),
+  created_at VARCHAR(40) NOT NULL,
+  PRIMARY KEY (project_id, user_login),
+  CONSTRAINT {{fk_pm_project}} FOREIGN KEY (project_id) REFERENCES {{projects}}(id) ON DELETE CASCADE,
+  CONSTRAINT {{fk_pm_user}} FOREIGN KEY (user_login) REFERENCES {{users}}(login) ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+CREATE INDEX project_members_user ON {{project_members}} (user_login);

package/src/schema.sql

@@ -3,7 +3,7 @@
 
 -- login stays PRIMARY KEY intentionally. Renaming users is not supported;
 -- swap to INTEGER user_id + UNIQUE(login) if that ever changes.
-CREATE TABLE IF NOT EXISTS users (
+CREATE TABLE IF NOT EXISTS {{users}} (
   login         TEXT PRIMARY KEY,
   kind          TEXT NOT NULL DEFAULT 'human'
                 CHECK (kind IN ('human','bot','system')),
@@ -16,7 +16,7 @@ CREATE TABLE IF NOT EXISTS users (
   updated_at    TEXT NOT NULL DEFAULT ''
 );
 
-CREATE TABLE IF NOT EXISTS projects (
+CREATE TABLE IF NOT EXISTS {{projects}} (
   id          INTEGER PRIMARY KEY AUTOINCREMENT,
   owner       TEXT NOT NULL,
   name        TEXT NOT NULL,
@@ -39,21 +39,21 @@ CREATE TABLE IF NOT EXISTS projects (
 -- the /settings page (or on first access if empty). Stored as rows rather
 -- than a single JSON blob so the settings UI can render a select without
 -- parsing JSON in SQL.
-CREATE TABLE IF NOT EXISTS model_cache (
+CREATE TABLE IF NOT EXISTS {{model_cache}} (
   provider_model TEXT PRIMARY KEY,
   label          TEXT NOT NULL,
   refreshed_at   TEXT NOT NULL
 );
 
-CREATE TABLE IF NOT EXISTS issues (
+CREATE TABLE IF NOT EXISTS {{issues}} (
   id         INTEGER PRIMARY KEY AUTOINCREMENT,
-  project_id INTEGER NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+  project_id INTEGER NOT NULL REFERENCES {{projects}}(id) ON DELETE CASCADE,
   number     INTEGER NOT NULL,
   title      TEXT NOT NULL,
   body       TEXT NOT NULL DEFAULT '',
   state      TEXT NOT NULL DEFAULT 'open'
              CHECK (state IN ('open','closed')),
-  author     TEXT NOT NULL REFERENCES users(login),
+  author     TEXT NOT NULL REFERENCES {{users}}(login),
   created_at TEXT NOT NULL,
   updated_at TEXT NOT NULL,
   -- NULL when open; stamped on close, cleared on reopen. Backfill-safe because
@@ -62,63 +62,63 @@ CREATE TABLE IF NOT EXISTS issues (
   UNIQUE (project_id, number)
 );
 CREATE INDEX IF NOT EXISTS issues_project_state_updated
-  ON issues (project_id, state, updated_at DESC);
+  ON {{issues}} (project_id, state, updated_at DESC);
 CREATE INDEX IF NOT EXISTS issues_state_updated
-  ON issues (state, updated_at DESC);
+  ON {{issues}} (state, updated_at DESC);
 
-CREATE TABLE IF NOT EXISTS comments (
+CREATE TABLE IF NOT EXISTS {{comments}} (
   id         INTEGER PRIMARY KEY AUTOINCREMENT,
-  issue_id   INTEGER NOT NULL REFERENCES issues(id) ON DELETE CASCADE,
-  author     TEXT NOT NULL REFERENCES users(login),
+  issue_id   INTEGER NOT NULL REFERENCES {{issues}}(id) ON DELETE CASCADE,
+  author     TEXT NOT NULL REFERENCES {{users}}(login),
   body       TEXT NOT NULL,
   created_at TEXT NOT NULL,
   updated_at TEXT NOT NULL DEFAULT ''
 );
 CREATE INDEX IF NOT EXISTS comments_issue_created
-  ON comments (issue_id, created_at);
+  ON {{comments}} (issue_id, created_at);
 
-CREATE TABLE IF NOT EXISTS labels (
+CREATE TABLE IF NOT EXISTS {{labels}} (
   id         INTEGER PRIMARY KEY AUTOINCREMENT,
-  project_id INTEGER NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+  project_id INTEGER NOT NULL REFERENCES {{projects}}(id) ON DELETE CASCADE,
   name       TEXT NOT NULL,
   color      TEXT NOT NULL DEFAULT '#888888',
   UNIQUE (project_id, name)
 );
 
-CREATE TABLE IF NOT EXISTS issue_labels (
-  issue_id  INTEGER NOT NULL REFERENCES issues(id) ON DELETE CASCADE,
-  label_id  INTEGER NOT NULL REFERENCES labels(id) ON DELETE CASCADE,
+CREATE TABLE IF NOT EXISTS {{issue_labels}} (
+  issue_id  INTEGER NOT NULL REFERENCES {{issues}}(id) ON DELETE CASCADE,
+  label_id  INTEGER NOT NULL REFERENCES {{labels}}(id) ON DELETE CASCADE,
   PRIMARY KEY (issue_id, label_id)
 );
 
-CREATE TABLE IF NOT EXISTS reactions (
-  comment_id INTEGER NOT NULL REFERENCES comments(id) ON DELETE CASCADE,
-  user_login TEXT NOT NULL REFERENCES users(login),
+CREATE TABLE IF NOT EXISTS {{reactions}} (
+  comment_id INTEGER NOT NULL REFERENCES {{comments}}(id) ON DELETE CASCADE,
+  user_login TEXT NOT NULL REFERENCES {{users}}(login),
   content    TEXT NOT NULL,
   PRIMARY KEY (comment_id, user_login, content)
 );
 CREATE INDEX IF NOT EXISTS reactions_comment
-  ON reactions (comment_id);
+  ON {{reactions}} (comment_id);
 
-CREATE TABLE IF NOT EXISTS attachments (
+CREATE TABLE IF NOT EXISTS {{attachments}} (
   uuid        TEXT PRIMARY KEY,
-  issue_id    INTEGER NOT NULL REFERENCES issues(id) ON DELETE CASCADE,
+  issue_id    INTEGER NOT NULL REFERENCES {{issues}}(id) ON DELETE CASCADE,
   filename    TEXT NOT NULL,
   content_type TEXT NOT NULL DEFAULT 'application/octet-stream',
   size        INTEGER NOT NULL,
   blob_path   TEXT NOT NULL,
-  uploaded_by TEXT NOT NULL REFERENCES users(login),
+  uploaded_by TEXT NOT NULL REFERENCES {{users}}(login),
   created_at  TEXT NOT NULL
 );
 CREATE INDEX IF NOT EXISTS attachments_issue
-  ON attachments (issue_id);
+  ON {{attachments}} (issue_id);
 
 -- Webhooks (Gitea-compatible). Scoped per-project so different repos can fan out
 -- to different downstream consumers. `events` is a JSON array of event types
 -- ('issues', 'issue_comment', 'push', ...). ework v1 emits only the first two.
-CREATE TABLE IF NOT EXISTS webhooks (
+CREATE TABLE IF NOT EXISTS {{webhooks}} (
   id          INTEGER PRIMARY KEY AUTOINCREMENT,
-  project_id  INTEGER NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+  project_id  INTEGER NOT NULL REFERENCES {{projects}}(id) ON DELETE CASCADE,
   url         TEXT NOT NULL,
   secret      TEXT NOT NULL DEFAULT '',
   content_type TEXT NOT NULL DEFAULT 'application/json',
@@ -129,13 +129,13 @@ CREATE TABLE IF NOT EXISTS webhooks (
   updated_at  TEXT NOT NULL
 );
 CREATE INDEX IF NOT EXISTS webhooks_project
-  ON webhooks (project_id);
+  ON {{webhooks}} (project_id);
 
 -- Delivery history. One row per attempt. Retries append new rows (don't overwrite),
 -- so a failed webhook shows the full retry trail.
-CREATE TABLE IF NOT EXISTS webhook_deliveries (
+CREATE TABLE IF NOT EXISTS {{webhook_deliveries}} (
   id            INTEGER PRIMARY KEY AUTOINCREMENT,
-  webhook_id    INTEGER NOT NULL REFERENCES webhooks(id) ON DELETE CASCADE,
+  webhook_id    INTEGER NOT NULL REFERENCES {{webhooks}}(id) ON DELETE CASCADE,
   event         TEXT NOT NULL,
   delivery_uuid TEXT NOT NULL,
   payload       TEXT NOT NULL,
@@ -146,17 +146,17 @@ CREATE TABLE IF NOT EXISTS webhook_deliveries (
   created_at    TEXT NOT NULL
 );
 CREATE INDEX IF NOT EXISTS deliveries_webhook
-  ON webhook_deliveries (webhook_id);
+  ON {{webhook_deliveries}} (webhook_id);
 CREATE INDEX IF NOT EXISTS deliveries_created
-  ON webhook_deliveries (created_at DESC);
+  ON {{webhook_deliveries}} (created_at DESC);
 
 -- Personal Access Tokens (Gitea-aligned). Hashed with per-token salt so the
 -- DB leak doesn't reveal tokens; last_eight enables indexed lookup without
 -- storing the plaintext. `scopes` is stored but not yet enforced — every PAT
 -- inherits the user's full perms in v1; granularity lands with project_members.
-CREATE TABLE IF NOT EXISTS personal_access_tokens (
+CREATE TABLE IF NOT EXISTS {{personal_access_tokens}} (
   id               INTEGER PRIMARY KEY AUTOINCREMENT,
-  user_login       TEXT NOT NULL REFERENCES users(login) ON DELETE CASCADE,
+  user_login       TEXT NOT NULL REFERENCES {{users}}(login) ON DELETE CASCADE,
   name             TEXT NOT NULL,
   salt             TEXT NOT NULL,
   token_hash       TEXT NOT NULL,
@@ -171,9 +171,9 @@ CREATE TABLE IF NOT EXISTS personal_access_tokens (
   revoked_at       TEXT
 );
 CREATE INDEX IF NOT EXISTS pat_user
-  ON personal_access_tokens (user_login);
+  ON {{personal_access_tokens}} (user_login);
 CREATE INDEX IF NOT EXISTS pat_last_eight
-  ON personal_access_tokens (token_last_eight);
+  ON {{personal_access_tokens}} (token_last_eight);
 
 -- Per-project RBAC. Roles follow Gitea semantics:
 --   reader: can read issues + comments (currently no-op since all authed users
@@ -183,13 +183,13 @@ CREATE INDEX IF NOT EXISTS pat_last_eight
 -- Site-admins (users.is_admin=1) bypass all checks. PAT scope enforcement also
 -- routes through here: a write-scoped PAT can only write where the owning user
 -- has writer+ role on the target project.
-CREATE TABLE IF NOT EXISTS project_members (
-  project_id INTEGER NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
-  user_login TEXT NOT NULL REFERENCES users(login) ON DELETE CASCADE,
+CREATE TABLE IF NOT EXISTS {{project_members}} (
+  project_id INTEGER NOT NULL REFERENCES {{projects}}(id) ON DELETE CASCADE,
+  user_login TEXT NOT NULL REFERENCES {{users}}(login) ON DELETE CASCADE,
   role       TEXT NOT NULL DEFAULT 'writer'
              CHECK (role IN ('reader','writer','admin')),
   created_at TEXT NOT NULL,
   PRIMARY KEY (project_id, user_login)
 );
 CREATE INDEX IF NOT EXISTS project_members_user
-  ON project_members (user_login);
+  ON {{project_members}} (user_login);