insforge 1.2.10 → 1.4.8

package/backend/src/infra/database/migrations/010_modify-ai-config-modalities.sql

@@ -1,93 +1,93 @@
--- Migration: 010 - Modify AI configurations table to support input/output modalities
--- This migration modifies the _ai_configs table to:
--- 1. Add new columns: input_modality and output_modality (TEXT arrays)
--- 2. Migrate existing modality data to input_modality
--- 3. Set default output_modality based on existing modality
--- 4. Drop the old modality column
-
-DO $$
-BEGIN
-    -- Add new columns for input and output modalities
-    ALTER TABLE _ai_configs 
-    ADD COLUMN IF NOT EXISTS input_modality TEXT[] DEFAULT '{text}';
-    
-    ALTER TABLE _ai_configs 
-    ADD COLUMN IF NOT EXISTS output_modality TEXT[] DEFAULT '{text}';
-
-    -- Check if modality column exists and migrate data if it does
-    IF EXISTS (
-        SELECT 1
-        FROM information_schema.columns
-        WHERE table_schema = 'public'
-        AND table_name = '_ai_configs'
-        AND column_name = 'modality'
-    ) THEN
-        -- Migrate existing modality data to input_modality
-        -- For most cases, we'll set input_modality to the existing modality
-        -- and output_modality to the same value, only supporting text and image
-        UPDATE _ai_configs
-        SET
-            input_modality = CASE
-                WHEN modality = 'multi' THEN '{text,image}'::TEXT[]
-                WHEN modality = 'image' THEN '{text,image}'::TEXT[]
-                ELSE ARRAY[modality]::TEXT[]
-            END,
-            output_modality = CASE
-                WHEN modality = 'multi' THEN '{text,image}'::TEXT[]
-                WHEN modality = 'text' THEN '{text}'::TEXT[]
-                WHEN modality = 'image' THEN '{text,image}'::TEXT[]
-                ELSE '{text}'::TEXT[]
-            END
-        WHERE input_modality = '{text}' OR input_modality IS NULL;
-    END IF;
-
-    -- Make the new columns NOT NULL after migration
-    ALTER TABLE _ai_configs 
-    ALTER COLUMN input_modality SET NOT NULL;
-    
-    ALTER TABLE _ai_configs 
-    ALTER COLUMN output_modality SET NOT NULL;
-
-    -- Drop the old modality column
-    ALTER TABLE _ai_configs 
-    DROP COLUMN IF EXISTS modality;
-
-    -- Create indexes for the new TEXT array columns for better query performance
-    CREATE INDEX IF NOT EXISTS idx_ai_configs_input_modality ON _ai_configs USING GIN (input_modality);
-    CREATE INDEX IF NOT EXISTS idx_ai_configs_output_modality ON _ai_configs USING GIN (output_modality);
-
-    -- Drop existing constraints if they exist, then add them
-    ALTER TABLE _ai_configs
-    DROP CONSTRAINT IF EXISTS check_input_modality_not_empty;
-
-    ALTER TABLE _ai_configs
-    ADD CONSTRAINT check_input_modality_not_empty
-    CHECK (array_length(input_modality, 1) > 0);
-
-    ALTER TABLE _ai_configs
-    DROP CONSTRAINT IF EXISTS check_output_modality_not_empty;
-
-    ALTER TABLE _ai_configs
-    ADD CONSTRAINT check_output_modality_not_empty
-    CHECK (array_length(output_modality, 1) > 0);
-
-    -- Drop existing constraints if they exist, then add them
-    ALTER TABLE _ai_configs
-    DROP CONSTRAINT IF EXISTS check_input_modality_valid;
-
-    ALTER TABLE _ai_configs
-    ADD CONSTRAINT check_input_modality_valid
-    CHECK (
-        input_modality <@ '{text,image}'::TEXT[]
-    );
-
-    ALTER TABLE _ai_configs
-    DROP CONSTRAINT IF EXISTS check_output_modality_valid;
-
-    ALTER TABLE _ai_configs
-    ADD CONSTRAINT check_output_modality_valid
-    CHECK (
-        output_modality <@ '{text,image}'::TEXT[]
-    );
-
-END $$;
+-- Migration: 010 - Modify AI configurations table to support input/output modalities
+-- This migration modifies the _ai_configs table to:
+-- 1. Add new columns: input_modality and output_modality (TEXT arrays)
+-- 2. Migrate existing modality data to input_modality
+-- 3. Set default output_modality based on existing modality
+-- 4. Drop the old modality column
+
+DO $$
+BEGIN
+    -- Add new columns for input and output modalities
+    ALTER TABLE _ai_configs 
+    ADD COLUMN IF NOT EXISTS input_modality TEXT[] DEFAULT '{text}';
+    
+    ALTER TABLE _ai_configs 
+    ADD COLUMN IF NOT EXISTS output_modality TEXT[] DEFAULT '{text}';
+
+    -- Check if modality column exists and migrate data if it does
+    IF EXISTS (
+        SELECT 1
+        FROM information_schema.columns
+        WHERE table_schema = 'public'
+        AND table_name = '_ai_configs'
+        AND column_name = 'modality'
+    ) THEN
+        -- Migrate existing modality data to input_modality
+        -- For most cases, we'll set input_modality to the existing modality
+        -- and output_modality to the same value, only supporting text and image
+        UPDATE _ai_configs
+        SET
+            input_modality = CASE
+                WHEN modality = 'multi' THEN '{text,image}'::TEXT[]
+                WHEN modality = 'image' THEN '{text,image}'::TEXT[]
+                ELSE ARRAY[modality]::TEXT[]
+            END,
+            output_modality = CASE
+                WHEN modality = 'multi' THEN '{text,image}'::TEXT[]
+                WHEN modality = 'text' THEN '{text}'::TEXT[]
+                WHEN modality = 'image' THEN '{text,image}'::TEXT[]
+                ELSE '{text}'::TEXT[]
+            END
+        WHERE input_modality = '{text}' OR input_modality IS NULL;
+    END IF;
+
+    -- Make the new columns NOT NULL after migration
+    ALTER TABLE _ai_configs 
+    ALTER COLUMN input_modality SET NOT NULL;
+    
+    ALTER TABLE _ai_configs 
+    ALTER COLUMN output_modality SET NOT NULL;
+
+    -- Drop the old modality column
+    ALTER TABLE _ai_configs 
+    DROP COLUMN IF EXISTS modality;
+
+    -- Create indexes for the new TEXT array columns for better query performance
+    CREATE INDEX IF NOT EXISTS idx_ai_configs_input_modality ON _ai_configs USING GIN (input_modality);
+    CREATE INDEX IF NOT EXISTS idx_ai_configs_output_modality ON _ai_configs USING GIN (output_modality);
+
+    -- Drop existing constraints if they exist, then add them
+    ALTER TABLE _ai_configs
+    DROP CONSTRAINT IF EXISTS check_input_modality_not_empty;
+
+    ALTER TABLE _ai_configs
+    ADD CONSTRAINT check_input_modality_not_empty
+    CHECK (array_length(input_modality, 1) > 0);
+
+    ALTER TABLE _ai_configs
+    DROP CONSTRAINT IF EXISTS check_output_modality_not_empty;
+
+    ALTER TABLE _ai_configs
+    ADD CONSTRAINT check_output_modality_not_empty
+    CHECK (array_length(output_modality, 1) > 0);
+
+    -- Drop existing constraints if they exist, then add them
+    ALTER TABLE _ai_configs
+    DROP CONSTRAINT IF EXISTS check_input_modality_valid;
+
+    ALTER TABLE _ai_configs
+    ADD CONSTRAINT check_input_modality_valid
+    CHECK (
+        input_modality <@ '{text,image}'::TEXT[]
+    );
+
+    ALTER TABLE _ai_configs
+    DROP CONSTRAINT IF EXISTS check_output_modality_valid;
+
+    ALTER TABLE _ai_configs
+    ADD CONSTRAINT check_output_modality_valid
+    CHECK (
+        output_modality <@ '{text,image}'::TEXT[]
+    );
+
+END $$;

package/backend/src/infra/database/migrations/011_refactor-secrets-table.sql

@@ -1,15 +1,15 @@
--- Migration: 011 - Drop function secrets table and update main secrets table
--- This migration is part of the refactoring to unify all secrets management
-
--- 1. Drop the _function_secrets table (replaced by main _secrets table)
-DROP TRIGGER IF EXISTS update__function_secrets_updated_at ON _function_secrets;
-DROP INDEX IF EXISTS idx_function_secrets_key;
-DROP TABLE IF EXISTS _function_secrets;
-
--- 2. Add is_reserved column to _secrets table
-ALTER TABLE _secrets 
-ADD COLUMN IF NOT EXISTS is_reserved BOOLEAN DEFAULT FALSE;
-
--- 3. Rename name column to key
-ALTER TABLE _secrets 
-RENAME COLUMN name TO key;
+-- Migration: 011 - Drop function secrets table and update main secrets table
+-- This migration is part of the refactoring to unify all secrets management
+
+-- 1. Drop the _function_secrets table (replaced by main _secrets table)
+DROP TRIGGER IF EXISTS update__function_secrets_updated_at ON _function_secrets;
+DROP INDEX IF EXISTS idx_function_secrets_key;
+DROP TABLE IF EXISTS _function_secrets;
+
+-- 2. Add is_reserved column to _secrets table
+ALTER TABLE _secrets 
+ADD COLUMN IF NOT EXISTS is_reserved BOOLEAN DEFAULT FALSE;
+
+-- 3. Rename name column to key
+ALTER TABLE _secrets 
+RENAME COLUMN name TO key;

package/backend/src/infra/database/migrations/012_add-storage-uploaded-by.sql

@@ -1,8 +1,8 @@
--- Migration: 012 - Add uploaded_by column to _storage table
--- This migration adds a foreign key relationship to track which account uploaded each file
-
-ALTER TABLE _storage
-ADD COLUMN uploaded_by UUID REFERENCES _accounts(id) ON DELETE SET NULL;
-
--- Create an index for better query performance when filtering by uploader
+-- Migration: 012 - Add uploaded_by column to _storage table
+-- This migration adds a foreign key relationship to track which account uploaded each file
+
+ALTER TABLE _storage
+ADD COLUMN uploaded_by UUID REFERENCES _accounts(id) ON DELETE SET NULL;
+
+-- Create an index for better query performance when filtering by uploader
 CREATE INDEX IF NOT EXISTS idx_storage_uploaded_by ON _storage(uploaded_by);

package/backend/src/infra/database/migrations/013_create-auth-schema-functions.sql

@@ -1,44 +1,44 @@
--- Migration: 013 - Create auth schema and copy helper functions
--- Creates auth schema if it doesn't exist and copies JWT helper functions
-
--- Create auth schema if not exists
-CREATE SCHEMA IF NOT EXISTS auth;
-
--- Function to get current user ID from JWT (in auth schema)
-CREATE OR REPLACE FUNCTION auth.uid()
-RETURNS uuid
-LANGUAGE sql STABLE
-AS $$
-  SELECT
-  nullif(
-    coalesce(
-      current_setting('request.jwt.claim.sub', true),
-      (current_setting('request.jwt.claims', true)::jsonb ->> 'sub')
-    ),
-    ''
-  )::uuid
-$$;
-
--- Function to get current user role from JWT (in auth schema)
-CREATE OR REPLACE FUNCTION auth.role()
-RETURNS text
-LANGUAGE sql STABLE
-AS $$
-  SELECT
-  coalesce(
-    current_setting('request.jwt.claim.role', true),
-    (current_setting('request.jwt.claims', true)::jsonb ->> 'role')
-  )::text
-$$;
-
--- Function to get current user email from JWT (in auth schema)
-CREATE OR REPLACE FUNCTION auth.email()
-RETURNS text
-LANGUAGE sql STABLE
-AS $$
-  SELECT
-  coalesce(
-    current_setting('request.jwt.claim.email', true),
-    (current_setting('request.jwt.claims', true)::jsonb ->> 'email')
-  )::text
-$$;
+-- Migration: 013 - Create auth schema and copy helper functions
+-- Creates auth schema if it doesn't exist and copies JWT helper functions
+
+-- Create auth schema if not exists
+CREATE SCHEMA IF NOT EXISTS auth;
+
+-- Function to get current user ID from JWT (in auth schema)
+CREATE OR REPLACE FUNCTION auth.uid()
+RETURNS uuid
+LANGUAGE sql STABLE
+AS $$
+  SELECT
+  nullif(
+    coalesce(
+      current_setting('request.jwt.claim.sub', true),
+      (current_setting('request.jwt.claims', true)::jsonb ->> 'sub')
+    ),
+    ''
+  )::uuid
+$$;
+
+-- Function to get current user role from JWT (in auth schema)
+CREATE OR REPLACE FUNCTION auth.role()
+RETURNS text
+LANGUAGE sql STABLE
+AS $$
+  SELECT
+  coalesce(
+    current_setting('request.jwt.claim.role', true),
+    (current_setting('request.jwt.claims', true)::jsonb ->> 'role')
+  )::text
+$$;
+
+-- Function to get current user email from JWT (in auth schema)
+CREATE OR REPLACE FUNCTION auth.email()
+RETURNS text
+LANGUAGE sql STABLE
+AS $$
+  SELECT
+  coalesce(
+    current_setting('request.jwt.claim.email', true),
+    (current_setting('request.jwt.claims', true)::jsonb ->> 'email')
+  )::text
+$$;

package/backend/src/infra/database/migrations/014_add-updated-at-trigger-user-table.sql

@@ -1,8 +1,8 @@
--- Migration: 014 - Add updated_at trigger to users table
--- Adds the updated_at trigger to the users table for automatic timestamp management
-
-
-DROP TRIGGER IF EXISTS update_users_updated_at ON users;
-CREATE TRIGGER update_users_updated_at
-BEFORE UPDATE ON users
+-- Migration: 014 - Add updated_at trigger to users table
+-- Adds the updated_at trigger to the users table for automatic timestamp management
+
+
+DROP TRIGGER IF EXISTS update_users_updated_at ON users;
+CREATE TRIGGER update_users_updated_at
+BEFORE UPDATE ON users
 FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();

package/backend/src/infra/database/migrations/015_create-auth-config-and-email-otp-tables.sql

@@ -1,60 +1,60 @@
--- Migration: 015 - Create email OTP verification table and email auth configs
--- This migration creates:
--- 1. _email_otps: Stores one-time tokens for email verification purposes
---    - Supports both short numeric codes (6 digits) for manual entry
---    - Supports long cryptographic tokens (64 chars) for magic links
---    - Uses dual hashing strategy:
---      * NUMERIC_CODE (6 digits): Bcrypt hash (slow, defense against brute force)
---      * LINK_TOKEN (64 hex chars): SHA-256 hash (fast, enables direct O(1) lookup)
--- 2. _auth_configs: Stores email authentication configuration (single-row table)
-
--- 1. Create email OTP verification table
-CREATE TABLE IF NOT EXISTS _email_otps (
-  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
-  email TEXT NOT NULL,
-  purpose TEXT NOT NULL,
-  otp_hash TEXT NOT NULL, -- Hash of OTP: bcrypt for NUMERIC_CODE, SHA-256 for LINK_TOKEN
-  expires_at TIMESTAMPTZ NOT NULL,
-  consumed_at TIMESTAMPTZ,
-  attempts_count INTEGER DEFAULT 0 NOT NULL,
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW(),
-  UNIQUE (email, purpose) -- Only one active token per email/purpose combination
-);
-
--- Create indexes for better query performance
-CREATE INDEX IF NOT EXISTS idx_email_otps_email_purpose ON _email_otps(email, purpose);
-CREATE INDEX IF NOT EXISTS idx_email_otps_expires_at ON _email_otps(expires_at);
-CREATE INDEX IF NOT EXISTS idx_email_otps_otp_hash ON _email_otps(otp_hash); -- For direct LINK_TOKEN lookup
-
--- Add trigger for updated_at
-DROP TRIGGER IF EXISTS update__email_otps_updated_at ON _email_otps;
-CREATE TRIGGER update__email_otps_updated_at
-BEFORE UPDATE ON _email_otps
-FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
-
--- 2. Create email authentication configuration table (single-row design)
--- This table stores global email authentication settings for the project
-CREATE TABLE IF NOT EXISTS _auth_configs (
-  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
-  require_email_verification BOOLEAN DEFAULT FALSE NOT NULL,
-  password_min_length INTEGER DEFAULT 6 NOT NULL CHECK (password_min_length >= 4 AND password_min_length <= 128),
-  require_number BOOLEAN DEFAULT FALSE NOT NULL,
-  require_lowercase BOOLEAN DEFAULT FALSE NOT NULL,
-  require_uppercase BOOLEAN DEFAULT FALSE NOT NULL,
-  require_special_char BOOLEAN DEFAULT FALSE NOT NULL,
-  verify_email_redirect_to TEXT, -- Custom URL to redirect after successful email verification (defaults to no redirect if NULL)
-  reset_password_redirect_to TEXT, -- Custom URL to redirect after successful password reset (defaults to no redirect if NULL)
-  created_at TIMESTAMPTZ DEFAULT NOW(),
-  updated_at TIMESTAMPTZ DEFAULT NOW()
-);
-
--- Ensure only one row exists (singleton pattern)
--- This constraint prevents multiple configuration rows
-CREATE UNIQUE INDEX IF NOT EXISTS idx_auth_configs_singleton ON _auth_configs ((1));
-
--- Add trigger for updated_at
-DROP TRIGGER IF EXISTS update__auth_configs_updated_at ON _auth_configs;
-CREATE TRIGGER update__auth_configs_updated_at
-BEFORE UPDATE ON _auth_configs
+-- Migration: 015 - Create email OTP verification table and email auth configs
+-- This migration creates:
+-- 1. _email_otps: Stores one-time tokens for email verification purposes
+--    - Supports both short numeric codes (6 digits) for manual entry
+--    - Supports long cryptographic tokens (64 chars) for magic links
+--    - Uses dual hashing strategy:
+--      * NUMERIC_CODE (6 digits): Bcrypt hash (slow, defense against brute force)
+--      * LINK_TOKEN (64 hex chars): SHA-256 hash (fast, enables direct O(1) lookup)
+-- 2. _auth_configs: Stores email authentication configuration (single-row table)
+
+-- 1. Create email OTP verification table
+CREATE TABLE IF NOT EXISTS _email_otps (
+  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
+  email TEXT NOT NULL,
+  purpose TEXT NOT NULL,
+  otp_hash TEXT NOT NULL, -- Hash of OTP: bcrypt for NUMERIC_CODE, SHA-256 for LINK_TOKEN
+  expires_at TIMESTAMPTZ NOT NULL,
+  consumed_at TIMESTAMPTZ,
+  attempts_count INTEGER DEFAULT 0 NOT NULL,
+  created_at TIMESTAMPTZ DEFAULT NOW(),
+  updated_at TIMESTAMPTZ DEFAULT NOW(),
+  UNIQUE (email, purpose) -- Only one active token per email/purpose combination
+);
+
+-- Create indexes for better query performance
+CREATE INDEX IF NOT EXISTS idx_email_otps_email_purpose ON _email_otps(email, purpose);
+CREATE INDEX IF NOT EXISTS idx_email_otps_expires_at ON _email_otps(expires_at);
+CREATE INDEX IF NOT EXISTS idx_email_otps_otp_hash ON _email_otps(otp_hash); -- For direct LINK_TOKEN lookup
+
+-- Add trigger for updated_at
+DROP TRIGGER IF EXISTS update__email_otps_updated_at ON _email_otps;
+CREATE TRIGGER update__email_otps_updated_at
+BEFORE UPDATE ON _email_otps
+FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();
+
+-- 2. Create email authentication configuration table (single-row design)
+-- This table stores global email authentication settings for the project
+CREATE TABLE IF NOT EXISTS _auth_configs (
+  id UUID DEFAULT gen_random_uuid() PRIMARY KEY,
+  require_email_verification BOOLEAN DEFAULT FALSE NOT NULL,
+  password_min_length INTEGER DEFAULT 6 NOT NULL CHECK (password_min_length >= 4 AND password_min_length <= 128),
+  require_number BOOLEAN DEFAULT FALSE NOT NULL,
+  require_lowercase BOOLEAN DEFAULT FALSE NOT NULL,
+  require_uppercase BOOLEAN DEFAULT FALSE NOT NULL,
+  require_special_char BOOLEAN DEFAULT FALSE NOT NULL,
+  verify_email_redirect_to TEXT, -- Custom URL to redirect after successful email verification (defaults to no redirect if NULL)
+  reset_password_redirect_to TEXT, -- Custom URL to redirect after successful password reset (defaults to no redirect if NULL)
+  created_at TIMESTAMPTZ DEFAULT NOW(),
+  updated_at TIMESTAMPTZ DEFAULT NOW()
+);
+
+-- Ensure only one row exists (singleton pattern)
+-- This constraint prevents multiple configuration rows
+CREATE UNIQUE INDEX IF NOT EXISTS idx_auth_configs_singleton ON _auth_configs ((1));
+
+-- Add trigger for updated_at
+DROP TRIGGER IF EXISTS update__auth_configs_updated_at ON _auth_configs;
+CREATE TRIGGER update__auth_configs_updated_at
+BEFORE UPDATE ON _auth_configs
 FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();

package/backend/src/infra/database/migrations/016_update-auth-config-and-email-otp.sql

@@ -1,24 +1,24 @@
--- Migration 016: Update _email_otps and _auth_configs tables
---
--- Changes:
--- 1. _email_otps table:
---    - Remove attempts_count column (brute force protection moved to API rate limiter)
--- 2. _auth_configs table:
---    - Remove verify_email_redirect_to and reset_password_redirect_to columns
---    - Add verify_email_method and reset_password_method columns (code or link)
---    - Add sign_in_redirect_to column
-
--- Update _email_otps: Remove attempts_count column
-ALTER TABLE _email_otps DROP COLUMN IF EXISTS attempts_count;
-
--- Update _auth_configs: Remove old redirect columns
-ALTER TABLE _auth_configs
-  DROP COLUMN IF EXISTS verify_email_redirect_to,
-  DROP COLUMN IF EXISTS reset_password_redirect_to;
-
--- Add new columns to _auth_configs
--- Note: DEFAULT 'code' NOT NULL ensures existing rows automatically get 'code' value
-ALTER TABLE _auth_configs
-  ADD COLUMN IF NOT EXISTS verify_email_method TEXT DEFAULT 'code' NOT NULL CHECK (verify_email_method IN ('code', 'link')),
-  ADD COLUMN IF NOT EXISTS reset_password_method TEXT DEFAULT 'code' NOT NULL CHECK (reset_password_method IN ('code', 'link')),
-  ADD COLUMN IF NOT EXISTS sign_in_redirect_to TEXT;
+-- Migration 016: Update _email_otps and _auth_configs tables
+--
+-- Changes:
+-- 1. _email_otps table:
+--    - Remove attempts_count column (brute force protection moved to API rate limiter)
+-- 2. _auth_configs table:
+--    - Remove verify_email_redirect_to and reset_password_redirect_to columns
+--    - Add verify_email_method and reset_password_method columns (code or link)
+--    - Add sign_in_redirect_to column
+
+-- Update _email_otps: Remove attempts_count column
+ALTER TABLE _email_otps DROP COLUMN IF EXISTS attempts_count;
+
+-- Update _auth_configs: Remove old redirect columns
+ALTER TABLE _auth_configs
+  DROP COLUMN IF EXISTS verify_email_redirect_to,
+  DROP COLUMN IF EXISTS reset_password_redirect_to;
+
+-- Add new columns to _auth_configs
+-- Note: DEFAULT 'code' NOT NULL ensures existing rows automatically get 'code' value
+ALTER TABLE _auth_configs
+  ADD COLUMN IF NOT EXISTS verify_email_method TEXT DEFAULT 'code' NOT NULL CHECK (verify_email_method IN ('code', 'link')),
+  ADD COLUMN IF NOT EXISTS reset_password_method TEXT DEFAULT 'code' NOT NULL CHECK (reset_password_method IN ('code', 'link')),
+  ADD COLUMN IF NOT EXISTS sign_in_redirect_to TEXT;