insforge 1.2.10 → 1.4.8

package/backend/src/infra/database/migrations/002_rename-auth-tables.sql

@@ -1,30 +1,30 @@
--- Migration: 002 - Rename authentication tables to better auth naming convention
-
-DO $$
-BEGIN
-    -- Handle _account to _oauth_connections
-    IF EXISTS (SELECT FROM information_schema.tables 
-              WHERE table_name = '_account' AND table_schema = 'public') THEN
-        IF EXISTS (SELECT FROM information_schema.tables 
-                   WHERE table_name = '_oauth_connections' AND table_schema = 'public') THEN
-            -- Both exist, drop the old one
-            DROP TABLE _account CASCADE;
-        ELSE
-            -- Only old exists, rename it
-            ALTER TABLE _account RENAME TO _oauth_connections;
-        END IF;
-    END IF;
-
-    -- Handle _user to _accounts
-    IF EXISTS (SELECT FROM information_schema.tables 
-              WHERE table_name = '_user' AND table_schema = 'public') THEN
-        IF EXISTS (SELECT FROM information_schema.tables 
-                   WHERE table_name = '_accounts' AND table_schema = 'public') THEN
-            -- Both exist, drop the old one
-            DROP TABLE _user CASCADE;
-        ELSE
-            -- Only old exists, rename it
-            ALTER TABLE _user RENAME TO _accounts;
-        END IF;
-    END IF;
+-- Migration: 002 - Rename authentication tables to better auth naming convention
+
+DO $$
+BEGIN
+    -- Handle _account to _oauth_connections
+    IF EXISTS (SELECT FROM information_schema.tables 
+              WHERE table_name = '_account' AND table_schema = 'public') THEN
+        IF EXISTS (SELECT FROM information_schema.tables 
+                   WHERE table_name = '_oauth_connections' AND table_schema = 'public') THEN
+            -- Both exist, drop the old one
+            DROP TABLE _account CASCADE;
+        ELSE
+            -- Only old exists, rename it
+            ALTER TABLE _account RENAME TO _oauth_connections;
+        END IF;
+    END IF;
+
+    -- Handle _user to _accounts
+    IF EXISTS (SELECT FROM information_schema.tables 
+              WHERE table_name = '_user' AND table_schema = 'public') THEN
+        IF EXISTS (SELECT FROM information_schema.tables 
+                   WHERE table_name = '_accounts' AND table_schema = 'public') THEN
+            -- Both exist, drop the old one
+            DROP TABLE _user CASCADE;
+        ELSE
+            -- Only old exists, rename it
+            ALTER TABLE _user RENAME TO _accounts;
+        END IF;
+    END IF;
 END $$;

package/backend/src/infra/database/migrations/003_create-users-table.sql

@@ -1,56 +1,56 @@
--- Migration: 003 - Create users table for user profiles
-
-DO $$
-BEGIN
-    CREATE TABLE IF NOT EXISTS users (
-      id UUID PRIMARY KEY REFERENCES _accounts(id) ON DELETE CASCADE,
-      nickname TEXT,
-      avatar_url TEXT,
-      bio TEXT,
-      birthday DATE,
-      created_at TIMESTAMPTZ DEFAULT NOW(),
-      updated_at TIMESTAMPTZ DEFAULT NOW()
-    );
-    
-    -- Check and create policies only if they don't exist
-    -- Allow everyone to read users table
-    IF NOT EXISTS (
-      SELECT 1 FROM pg_policies 
-      WHERE tablename = 'users' 
-      AND policyname = 'Enable read access for all users'
-    ) THEN
-      CREATE POLICY "Enable read access for all users" ON users
-        FOR SELECT
-        USING (true);  -- Allow all reads
-    END IF;
-    
-    IF NOT EXISTS (
-      SELECT 1 FROM pg_policies 
-      WHERE tablename = 'users' 
-      AND policyname = 'Disable delete for users'
-    ) THEN
-      CREATE POLICY "Disable delete for users" ON users
-        FOR DELETE
-        TO authenticated
-        USING (false);
-    END IF;
-
-    IF NOT EXISTS (
-      SELECT 1 FROM pg_policies 
-      WHERE tablename = 'users' 
-      AND policyname = 'Enable update for users based on user_id'
-    ) THEN
-      CREATE POLICY "Enable update for users based on user_id" ON users
-        FOR UPDATE
-        TO authenticated
-        USING (uid() = id)
-        WITH CHECK (uid() = id);  -- make sure only the owner can update
-    END IF;
-    
-    -- Enable Row Level Security on the users table
-    ALTER TABLE users ENABLE ROW LEVEL SECURITY;
-    
-    -- Grant permissions to anon and authenticated roles
-    GRANT SELECT ON users TO anon;
-    GRANT SELECT, UPDATE ON users TO authenticated;
+-- Migration: 003 - Create users table for user profiles
+
+DO $$
+BEGIN
+    CREATE TABLE IF NOT EXISTS users (
+      id UUID PRIMARY KEY REFERENCES _accounts(id) ON DELETE CASCADE,
+      nickname TEXT,
+      avatar_url TEXT,
+      bio TEXT,
+      birthday DATE,
+      created_at TIMESTAMPTZ DEFAULT NOW(),
+      updated_at TIMESTAMPTZ DEFAULT NOW()
+    );
+    
+    -- Check and create policies only if they don't exist
+    -- Allow everyone to read users table
+    IF NOT EXISTS (
+      SELECT 1 FROM pg_policies 
+      WHERE tablename = 'users' 
+      AND policyname = 'Enable read access for all users'
+    ) THEN
+      CREATE POLICY "Enable read access for all users" ON users
+        FOR SELECT
+        USING (true);  -- Allow all reads
+    END IF;
+    
+    IF NOT EXISTS (
+      SELECT 1 FROM pg_policies 
+      WHERE tablename = 'users' 
+      AND policyname = 'Disable delete for users'
+    ) THEN
+      CREATE POLICY "Disable delete for users" ON users
+        FOR DELETE
+        TO authenticated
+        USING (false);
+    END IF;
+
+    IF NOT EXISTS (
+      SELECT 1 FROM pg_policies 
+      WHERE tablename = 'users' 
+      AND policyname = 'Enable update for users based on user_id'
+    ) THEN
+      CREATE POLICY "Enable update for users based on user_id" ON users
+        FOR UPDATE
+        TO authenticated
+        USING (uid() = id)
+        WITH CHECK (uid() = id);  -- make sure only the owner can update
+    END IF;
+    
+    -- Enable Row Level Security on the users table
+    ALTER TABLE users ENABLE ROW LEVEL SECURITY;
+    
+    -- Grant permissions to anon and authenticated roles
+    GRANT SELECT ON users TO anon;
+    GRANT SELECT, UPDATE ON users TO authenticated;
 END $$;

package/backend/src/infra/database/migrations/004_add-reload-postgrest-func.sql

@@ -1,24 +1,24 @@
--- Migration: 004 - add reload_postgrest_schema function.
-
-DO $$
-BEGIN
-    -- Create a function to reload PostgREST schema
-    CREATE OR REPLACE FUNCTION reload_postgrest_schema()
-    RETURNS void
-    LANGUAGE plpgsql
-    AS $reload_function$
-    BEGIN
-        -- Method 1: Use NOTIFY to signal PostgREST to reload schema
-        -- PostgREST listens to 'pgrst' channel for schema changes
-        NOTIFY pgrst, 'reload schema';
-        
-        RAISE NOTICE 'PostgREST schema reload notification sent';
-    END
-    $reload_function$;
-
-    -- Grant execute permission to project_admin and authenticated users
-    GRANT EXECUTE ON FUNCTION reload_postgrest_schema() TO project_admin;
-    GRANT EXECUTE ON FUNCTION reload_postgrest_schema() TO authenticated;
-    
-    RAISE NOTICE 'PostgREST schema reload function created successfully';
+-- Migration: 004 - add reload_postgrest_schema function.
+
+DO $$
+BEGIN
+    -- Create a function to reload PostgREST schema
+    CREATE OR REPLACE FUNCTION reload_postgrest_schema()
+    RETURNS void
+    LANGUAGE plpgsql
+    AS $reload_function$
+    BEGIN
+        -- Method 1: Use NOTIFY to signal PostgREST to reload schema
+        -- PostgREST listens to 'pgrst' channel for schema changes
+        NOTIFY pgrst, 'reload schema';
+        
+        RAISE NOTICE 'PostgREST schema reload notification sent';
+    END
+    $reload_function$;
+
+    -- Grant execute permission to project_admin and authenticated users
+    GRANT EXECUTE ON FUNCTION reload_postgrest_schema() TO project_admin;
+    GRANT EXECUTE ON FUNCTION reload_postgrest_schema() TO authenticated;
+    
+    RAISE NOTICE 'PostgREST schema reload function created successfully';
 END $$;

package/backend/src/infra/database/migrations/005_enable-project-admin-modify-users.sql

@@ -1,30 +1,30 @@
--- Migration: 005 - Enable project admin modify any users.
-
-DO $$
-BEGIN
-    -- Create policy to allow project_admin to update any user
-    IF NOT EXISTS (
-        SELECT 1 FROM pg_policies 
-        WHERE tablename = 'users' 
-        AND policyname = 'Allow project_admin to update any user'
-    ) THEN
-        CREATE POLICY "Allow project_admin to update any user" ON users
-            FOR UPDATE
-            TO project_admin
-            USING (true)
-            WITH CHECK (true);  -- Ensure project_admin always can update
-    END IF;
-
-    -- Grant necessary permissions
-    GRANT SELECT, UPDATE ON users TO project_admin;
-    
-    -- Notify PostgREST to reload schema after policy changes
-    IF EXISTS (SELECT 1 FROM pg_proc WHERE proname = 'reload_postgrest_schema') THEN
-        PERFORM reload_postgrest_schema();
-        RAISE NOTICE 'PostgREST schema reload requested after migration';
-    ELSE
-        RAISE WARNING 'PostgREST reload function not found - please restart PostgREST manually';
-    END IF;
-    
-    RAISE NOTICE 'Migration project-admin-update-users completed successfully';
+-- Migration: 005 - Enable project admin modify any users.
+
+DO $$
+BEGIN
+    -- Create policy to allow project_admin to update any user
+    IF NOT EXISTS (
+        SELECT 1 FROM pg_policies 
+        WHERE tablename = 'users' 
+        AND policyname = 'Allow project_admin to update any user'
+    ) THEN
+        CREATE POLICY "Allow project_admin to update any user" ON users
+            FOR UPDATE
+            TO project_admin
+            USING (true)
+            WITH CHECK (true);  -- Ensure project_admin always can update
+    END IF;
+
+    -- Grant necessary permissions
+    GRANT SELECT, UPDATE ON users TO project_admin;
+    
+    -- Notify PostgREST to reload schema after policy changes
+    IF EXISTS (SELECT 1 FROM pg_proc WHERE proname = 'reload_postgrest_schema') THEN
+        PERFORM reload_postgrest_schema();
+        RAISE NOTICE 'PostgREST schema reload requested after migration';
+    ELSE
+        RAISE WARNING 'PostgREST reload function not found - please restart PostgREST manually';
+    END IF;
+    
+    RAISE NOTICE 'Migration project-admin-update-users completed successfully';
 END $$;

package/backend/src/infra/database/migrations/006_modify-ai-usage-table.sql

@@ -1,25 +1,25 @@
--- Migration: 006 - Modify AI usage table
--- This migration modifies the _ai_usage table to:
--- 1. Change foreign key constraint on config_id to SET NULL
--- 2. Make config_id nullable
--- 3. Add model_id column
-
--- Drop existing foreign key constraint
-ALTER TABLE _ai_usage 
-DROP CONSTRAINT IF EXISTS _ai_usage_config_id_fkey;
-
--- Make config_id nullable
-ALTER TABLE _ai_usage 
-ALTER COLUMN config_id DROP NOT NULL;
-
--- Add new foreign key constraint with SET NULL on delete
-ALTER TABLE _ai_usage 
-ADD CONSTRAINT _ai_usage_config_id_fkey 
-FOREIGN KEY (config_id) REFERENCES _ai_configs(id) ON DELETE SET NULL;
-
--- Add new columns for model identification
-ALTER TABLE _ai_usage 
-ADD COLUMN IF NOT EXISTS model_id VARCHAR(255);
-
--- Create indexes for the new columns
+-- Migration: 006 - Modify AI usage table
+-- This migration modifies the _ai_usage table to:
+-- 1. Change foreign key constraint on config_id to SET NULL
+-- 2. Make config_id nullable
+-- 3. Add model_id column
+
+-- Drop existing foreign key constraint
+ALTER TABLE _ai_usage 
+DROP CONSTRAINT IF EXISTS _ai_usage_config_id_fkey;
+
+-- Make config_id nullable
+ALTER TABLE _ai_usage 
+ALTER COLUMN config_id DROP NOT NULL;
+
+-- Add new foreign key constraint with SET NULL on delete
+ALTER TABLE _ai_usage 
+ADD CONSTRAINT _ai_usage_config_id_fkey 
+FOREIGN KEY (config_id) REFERENCES _ai_configs(id) ON DELETE SET NULL;
+
+-- Add new columns for model identification
+ALTER TABLE _ai_usage 
+ADD COLUMN IF NOT EXISTS model_id VARCHAR(255);
+
+-- Create indexes for the new columns
 CREATE INDEX IF NOT EXISTS idx_ai_usage_model_id ON _ai_usage(model_id);

package/backend/src/infra/database/migrations/007_drop-metadata-table.sql

@@ -1,2 +1,2 @@
--- Drop the _metadata table if it exists
+-- Drop the _metadata table if it exists
 DROP TABLE IF EXISTS _metadata CASCADE;

package/backend/src/infra/database/migrations/008_add-system-tables.sql

@@ -1,77 +1,77 @@
--- Migration: 008 - Create new system tables and rename OAuth connections table
-
--- 1. Create _secrets table for storing application secrets
-CREATE TABLE IF NOT EXISTS _secrets (
-  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
-  name TEXT UNIQUE NOT NULL,
-  value_ciphertext TEXT NOT NULL,
-  is_active BOOLEAN DEFAULT TRUE,
-  last_used_at TIMESTAMPTZ,
-  expires_at TIMESTAMPTZ,
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW()
-);
-
--- 2. Create _oauth_configs table for OAuth provider configurations
-CREATE TABLE IF NOT EXISTS _oauth_configs (
-  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
-  provider TEXT UNIQUE NOT NULL,
-  client_id TEXT,
-  secret_id UUID REFERENCES _secrets(id) ON DELETE RESTRICT,
-  scopes TEXT[],
-  redirect_uri TEXT,
-  use_shared_key BOOLEAN DEFAULT FALSE,
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW()
-);
-
--- 3. Create _audit_logs table for storing admin operation logs
-CREATE TABLE IF NOT EXISTS _audit_logs (
-  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
-  actor TEXT NOT NULL,
-  action TEXT NOT NULL,
-  module TEXT NOT NULL,
-  details JSONB,
-  ip_address INET,
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW()
-);
-
--- 4. Rename _oauth_connections to _account_providers
-DO $$
-BEGIN
-    IF EXISTS (SELECT FROM information_schema.tables
-              WHERE table_name = '_oauth_connections' AND table_schema = 'public') THEN
-        IF EXISTS (SELECT FROM information_schema.tables
-                  WHERE table_name = '_account_providers' AND table_schema = 'public') THEN
-            -- _account_providers already exists, just drop _oauth_connections
-            DROP TABLE _oauth_connections CASCADE;
-        ELSE
-            -- _account_providers doesn't exist, rename _oauth_connections to _account_providers
-            ALTER TABLE _oauth_connections RENAME TO _account_providers;
-        END IF;
-    END IF;
-END $$;
-
--- 5. Drop the old _config system table
-DROP TABLE IF EXISTS _config CASCADE;
-
--- Create indexes for better query performance
-CREATE INDEX IF NOT EXISTS idx_secrets_name ON _secrets(name);
-CREATE INDEX IF NOT EXISTS idx_oauth_configs_provider ON _oauth_configs(provider);
-CREATE INDEX IF NOT EXISTS idx_audit_logs_actor ON _audit_logs(actor);
-CREATE INDEX IF NOT EXISTS idx_audit_logs_module ON _audit_logs(module);
-CREATE INDEX IF NOT EXISTS idx_audit_logs_created_at ON _audit_logs(created_at DESC);
-
--- Add triggers for updated_at
-DROP TRIGGER IF EXISTS update__secrets_updated_at ON _secrets;
-CREATE TRIGGER update__secrets_updated_at BEFORE UPDATE ON _secrets
-FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
-
-DROP TRIGGER IF EXISTS update__oauth_configs_updated_at ON _oauth_configs;
-CREATE TRIGGER update__oauth_configs_updated_at BEFORE UPDATE ON _oauth_configs
-FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
-
-DROP TRIGGER IF EXISTS update__audit_logs_updated_at ON _audit_logs;
-CREATE TRIGGER update__audit_logs_updated_at BEFORE UPDATE ON _audit_logs
+-- Migration: 008 - Create new system tables and rename OAuth connections table
+
+-- 1. Create _secrets table for storing application secrets
+CREATE TABLE IF NOT EXISTS _secrets (
+  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
+  name TEXT UNIQUE NOT NULL,
+  value_ciphertext TEXT NOT NULL,
+  is_active BOOLEAN DEFAULT TRUE,
+  last_used_at TIMESTAMPTZ,
+  expires_at TIMESTAMPTZ,
+  created_at TIMESTAMPTZ DEFAULT NOW(),
+  updated_at TIMESTAMPTZ DEFAULT NOW()
+);
+
+-- 2. Create _oauth_configs table for OAuth provider configurations
+CREATE TABLE IF NOT EXISTS _oauth_configs (
+  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
+  provider TEXT UNIQUE NOT NULL,
+  client_id TEXT,
+  secret_id UUID REFERENCES _secrets(id) ON DELETE RESTRICT,
+  scopes TEXT[],
+  redirect_uri TEXT,
+  use_shared_key BOOLEAN DEFAULT FALSE,
+  created_at TIMESTAMPTZ DEFAULT NOW(),
+  updated_at TIMESTAMPTZ DEFAULT NOW()
+);
+
+-- 3. Create _audit_logs table for storing admin operation logs
+CREATE TABLE IF NOT EXISTS _audit_logs (
+  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
+  actor TEXT NOT NULL,
+  action TEXT NOT NULL,
+  module TEXT NOT NULL,
+  details JSONB,
+  ip_address INET,
+  created_at TIMESTAMPTZ DEFAULT NOW(),
+  updated_at TIMESTAMPTZ DEFAULT NOW()
+);
+
+-- 4. Rename _oauth_connections to _account_providers
+DO $$
+BEGIN
+    IF EXISTS (SELECT FROM information_schema.tables
+              WHERE table_name = '_oauth_connections' AND table_schema = 'public') THEN
+        IF EXISTS (SELECT FROM information_schema.tables
+                  WHERE table_name = '_account_providers' AND table_schema = 'public') THEN
+            -- _account_providers already exists, just drop _oauth_connections
+            DROP TABLE _oauth_connections CASCADE;
+        ELSE
+            -- _account_providers doesn't exist, rename _oauth_connections to _account_providers
+            ALTER TABLE _oauth_connections RENAME TO _account_providers;
+        END IF;
+    END IF;
+END $$;
+
+-- 5. Drop the old _config system table
+DROP TABLE IF EXISTS _config CASCADE;
+
+-- Create indexes for better query performance
+CREATE INDEX IF NOT EXISTS idx_secrets_name ON _secrets(name);
+CREATE INDEX IF NOT EXISTS idx_oauth_configs_provider ON _oauth_configs(provider);
+CREATE INDEX IF NOT EXISTS idx_audit_logs_actor ON _audit_logs(actor);
+CREATE INDEX IF NOT EXISTS idx_audit_logs_module ON _audit_logs(module);
+CREATE INDEX IF NOT EXISTS idx_audit_logs_created_at ON _audit_logs(created_at DESC);
+
+-- Add triggers for updated_at
+DROP TRIGGER IF EXISTS update__secrets_updated_at ON _secrets;
+CREATE TRIGGER update__secrets_updated_at BEFORE UPDATE ON _secrets
+FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
+
+DROP TRIGGER IF EXISTS update__oauth_configs_updated_at ON _oauth_configs;
+CREATE TRIGGER update__oauth_configs_updated_at BEFORE UPDATE ON _oauth_configs
+FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
+
+DROP TRIGGER IF EXISTS update__audit_logs_updated_at ON _audit_logs;
+CREATE TRIGGER update__audit_logs_updated_at BEFORE UPDATE ON _audit_logs
 FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();

package/backend/src/infra/database/migrations/009_add-function-secrets.sql

@@ -1,24 +1,24 @@
--- Migration: 009 - Create function secrets table for edge functions environment variables
--- This table stores encrypted secrets that are injected into edge functions as Deno.env variables
-
-CREATE TABLE IF NOT EXISTS _function_secrets (
-  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
-  key VARCHAR(255) UNIQUE NOT NULL,
-  value_ciphertext TEXT NOT NULL,      -- Encrypted value using AES-256-GCM
-  is_reserved BOOLEAN DEFAULT FALSE,   -- System-reserved keys that can't be modified/deleted
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW()
-);
-
--- Create index for faster key lookups
-CREATE INDEX IF NOT EXISTS idx_function_secrets_key ON _function_secrets(key);
-
--- Add trigger for updated_at
-DROP TRIGGER IF EXISTS update__function_secrets_updated_at ON _function_secrets;
-CREATE TRIGGER update__function_secrets_updated_at BEFORE UPDATE ON _function_secrets
-FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
-
--- Note: Reserved system secrets will be initialized by the application on startup
-
--- Rename _edge_functions table to functions
+-- Migration: 009 - Create function secrets table for edge functions environment variables
+-- This table stores encrypted secrets that are injected into edge functions as Deno.env variables
+
+CREATE TABLE IF NOT EXISTS _function_secrets (
+  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
+  key VARCHAR(255) UNIQUE NOT NULL,
+  value_ciphertext TEXT NOT NULL,      -- Encrypted value using AES-256-GCM
+  is_reserved BOOLEAN DEFAULT FALSE,   -- System-reserved keys that can't be modified/deleted
+  created_at TIMESTAMPTZ DEFAULT NOW(),
+  updated_at TIMESTAMPTZ DEFAULT NOW()
+);
+
+-- Create index for faster key lookups
+CREATE INDEX IF NOT EXISTS idx_function_secrets_key ON _function_secrets(key);
+
+-- Add trigger for updated_at
+DROP TRIGGER IF EXISTS update__function_secrets_updated_at ON _function_secrets;
+CREATE TRIGGER update__function_secrets_updated_at BEFORE UPDATE ON _function_secrets
+FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
+
+-- Note: Reserved system secrets will be initialized by the application on startup
+
+-- Rename _edge_functions table to functions
 ALTER TABLE IF EXISTS _edge_functions RENAME TO _functions;