Ledger

WEB-027

DB foundation migration: schemas, extensions, site_server/job_worker roles, locked-down defaults, private helpers + surface pgTAP

← Ledger

donestatus · web-db

1✓ tests passed / failed

3.74Mtokens · 2 min

0evidence files

Evidence

From logs/evidence/WEB-027/. Click a thumbnail for the full image.

No evidence files in logs/evidence/WEB-027/.

Tests

pass db reset + pgTAP surface rules · 24.6 s · raw log$ node packages/db/scripts/sb.mjs db reset && pnpm db:test

Notes

2026-10-04 14:03 UTC · Migration 20261004140000_foundation: 12 schemas (api public surface; private never exposed; domain schemas), citext/pg_trgm/unaccent, roles site_server + job_worker granted to authenticator, role-wide default revoke of PUBLIC execute (per-schema revoke can't override the global default — caught by the surface test), authenticated/service_role table defaults (RLS decides rows), private helpers jsonb_diff/redact/hash_ip (daily-salted)/hit_rate_limit/fail + secrets table. config.toml exposes the domain schemas. pgTAP 010_surface: 5/5.