Janady13/missionmatch / db/migrations/0001_foundation.sql

Source identity

Field	Recorded value
Source type	GitHub source
Original record	Janady13/missionmatch / db/migrations/0001_foundation.sql
Date	Not specified in source
Repository	Janady13/missionmatch
Revision	720d47fae476b0d38477ae4401697d372b1ea2bc
Branch	feature/opportunity-to-outcome
Path or archive member	db/migrations/0001_foundation.sql
Original SHA-256	a55b4e777385d3dc443617e44a622efc81fb5016267d06c8812722f16db3a4db
Git blob SHA	cdccf029500ecc11897e7a1a294b5cc110a6f22c
Reading-copy SHA-256	a55b4e777385d3dc443617e44a622efc81fb5016267d06c8812722f16db3a4db

Original source ↗

Every recorded occurrence

These 35 records contain identical original source bytes. Their paths and revisions remain part of the archive.

Original record	Branch or archive	Revision / identifier	Original location
Janady13/missionmatch / db/migrations/0001_foundation.sql	feature/opportunity-to-outcome	720d47fae476b0d38477ae4401697d372b1ea2bc	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	per-tenant-routing	9bde0f9a74b89d01980fa658e5253acda7528d0c	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	collision-deconfliction	4ee5a09972608ed89f8377c6665542d5f450f0a6	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ws6-retrieval	6c56e29231ec05735927fa265c97d517499dfeaf	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-a-shared-core	e0de03ac3a1ec826bd15d0e048e3b02baa23eeff	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	m5-price-to-win	41000ad30fff4129fdaf5ec84e15ba14c27d4890	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-c-slatematch	5cd60c918301b46ecd6ed3e03e20c395da0062e2	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ws1-ontology-sync	b596f449a32a1016fbd403c36505cc00a1ac9ee6	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	master	1e9249840a4302ec82e123b9c9cb6f75badea3e4	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ws8-teaching-loop	c823f0fb6bb2aba0f39001eb6de96f4000d9321f	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	w3-ai-staffing-recommendations	43d56387270ef4da4cabd794d97ca6a49909bc7d	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	mag-substrate	b82c7100a492dec67dfd1eda6b3f53def859be35	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ws3-clearance	4b8e7ce594c068621867f9c9deed0ec64ae6c553	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-d-command-center	255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	phase2-eval-fairness	d361af254701975fe239927656ababb56374655e	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-e-dataflow-deploy	433815a042f9741411e60fa553fe72143e9b10db	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ruthless-debug-sweep	b7d742f8f032984be3817efffa3eb8b13b651c1f	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	time-to-fill-survival	b66e1e505863d4f17741a4b9ede73509e45bd6c6	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ai-intelligence-layer	5d5ddff70393a197c5f54a45280bb5dd42b24755	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	graphrag-foundation	b0ddeb9f633fd138d09309d1a17b7d13bc3a67f7	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-a-opportunity-intelligence	1675031db74316e100782d063e9eda1a597fe3a1	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	deploy-and-ops	bdacd9d0b4d5998d25fc74bf4007f4c3ec538c7a	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ws9-bench-ingestion	f585a9ef32fa554663ce1fba9a414a54b6e49cf0	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ws2-alias-relationship	e4dada4601c6eb101830f9d223a9655dfa120616	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	presentation-readiness	eb574acaa29d71ce4d0f852572e87c275c79fdb7	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	vendor-intelligence	fe9796a19c261951d3f2565206c0c1b5ac294465	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-b-screenmatch	09015496d565a172bcaa15cfe9a8e4b072b13df0	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ws7-federal-signal	6a9f6ce9cfb13345ffb47770d4960e7c2d9c17c2	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-e-commercial-stubs	4437da660539284a400ee380b9b427a300c369ee	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	ai-brain-live	aac32fc49c878cc5bca099459307611562d0bac1	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-d-missionmatch	3be46ba89edb737182075a2b320509b42dc916f8	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	phase2-connectors	e038d4c687aec16f8bd9bc4d907eea14d91f8704	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	workstream-b-sam-contract-awards	d5101cceb98e70000cebb31d3e7ac73d747d3a6d	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	feature/aioe-upgrade	2178e7298d0e5d9af83afa12402fd587f0ba6ed8	Open original
Janady13/missionmatch / db/migrations/0001_foundation.sql	capture-readiness	bae6af7cb2997e819174a9e9cfff5e16067a1975	Open original

Recovered source transcript

Download complete source text ↓111 lines · 5.8 KB

-- +goose Up
-- Foundation: extensions, tenancy root, users, and the append-only audit log.
-- Run as the BYPASSRLS migrator role. See docs/STACK_DECISIONS.md §2/§4.

CREATE EXTENSION IF NOT EXISTS vector;   -- Azure: the binary/extension name is "vector", NOT "pgvector"

-- ---------------------------------------------------------------------------
-- organizations, the tenant root. RLS scopes a session to its own org row.
-- INSERT (provisioning a new org at signup) is PRIVILEGED (migrator/provisioning
-- path), so the app role gets no INSERT grant. status/slug (org lifecycle) are
-- NOT app-editable, only `name` is (column-level grant below), so a tenant
-- cannot self-un-suspend by flipping status back to 'active' [review RLS-2].
-- ---------------------------------------------------------------------------
CREATE TABLE organizations (
    id          uuid PRIMARY KEY DEFAULT gen_random_uuid(),
    name        text NOT NULL,
    slug        text NOT NULL UNIQUE,
    status      text NOT NULL DEFAULT 'active'
                  CHECK (status IN ('active', 'suspended')),
    created_at  timestamptz NOT NULL DEFAULT now(),
    updated_at  timestamptz NOT NULL DEFAULT now()
);
ALTER TABLE organizations ENABLE ROW LEVEL SECURITY;
ALTER TABLE organizations FORCE  ROW LEVEL SECURITY;
CREATE POLICY org_self_select ON organizations FOR SELECT
    USING (id = NULLIF(current_setting('app.current_org_id', true), '')::uuid);
CREATE POLICY org_self_update ON organizations FOR UPDATE
    USING      (id = NULLIF(current_setting('app.current_org_id', true), '')::uuid)
    WITH CHECK (id = NULLIF(current_setting('app.current_org_id', true), '')::uuid);

-- ---------------------------------------------------------------------------
-- users, tenant-scoped. UNIQUE (organization_id, id) lets other tables form a
-- COMPOSITE FK that pins created_by/decided_by to the same org [review RLS-1/INT-4].
-- ---------------------------------------------------------------------------
CREATE TABLE users (
    id               uuid PRIMARY KEY DEFAULT gen_random_uuid(),
    organization_id  uuid NOT NULL REFERENCES organizations(id),
    email            text NOT NULL,
    full_name        text NOT NULL,
    role             text NOT NULL DEFAULT 'member'
                       CHECK (role IN ('owner', 'admin', 'recruiter', 'member', 'viewer')),
    status           text NOT NULL DEFAULT 'active'
                       CHECK (status IN ('active', 'invited', 'disabled')),
    last_login_at    timestamptz,
    created_at       timestamptz NOT NULL DEFAULT now(),
    updated_at       timestamptz NOT NULL DEFAULT now(),
    CONSTRAINT uq_users_org_id UNIQUE (organization_id, id)
);
CREATE UNIQUE INDEX uq_users_org_email ON users (organization_id, lower(email));
CREATE INDEX idx_users_org ON users (organization_id, created_at DESC);  -- composite leads with org
ALTER TABLE users ENABLE ROW LEVEL SECURITY;
ALTER TABLE users FORCE  ROW LEVEL SECURITY;
CREATE POLICY users_tenant_isolation ON users
    USING      (organization_id = NULLIF(current_setting('app.current_org_id', true), '')::uuid)
    WITH CHECK (organization_id = NULLIF(current_setting('app.current_org_id', true), '')::uuid);

-- ---------------------------------------------------------------------------
-- audit_logs, OUTSIDE RLS, APPEND-ONLY. Defense in depth: (1) app role granted
-- INSERT/SELECT only; (2) a row trigger blocks UPDATE/DELETE; (3) a statement
-- trigger blocks TRUNCATE [review AUDIT-1]; (4) explicit REVOKEs survive default-
-- privilege drift [review AUDIT-5]. Reads MUST filter by org (no RLS here).
-- ---------------------------------------------------------------------------
CREATE TABLE audit_logs (
    id               bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
    organization_id  uuid,            -- nullable: pre-auth events (e.g. failed login) have no org yet
    actor_user_id    uuid,            -- nullable: system/anonymous actor
    action           text NOT NULL,   -- 'candidate.create','slate.generate','export','login','candidate.search',...
    entity_type      text,
    entity_id        text,
    old_values       jsonb,
    new_values       jsonb,
    ip_address       text,
    user_agent       text,
    created_at       timestamptz NOT NULL DEFAULT now()
);
CREATE INDEX idx_audit_org_time ON audit_logs (organization_id, created_at DESC);
CREATE INDEX idx_audit_entity   ON audit_logs (entity_type, entity_id);
-- Privileged read path for NULL-org (platform/security) events so they aren't a black hole [review AUDIT-3].
CREATE INDEX idx_audit_system   ON audit_logs (created_at DESC) WHERE organization_id IS NULL;

-- +goose StatementBegin
CREATE OR REPLACE FUNCTION forbid_mutation() RETURNS trigger AS $$
BEGIN
    RAISE EXCEPTION 'append-only table: % not permitted', TG_OP;
END;
$$ LANGUAGE plpgsql;
-- +goose StatementEnd
CREATE TRIGGER audit_logs_append_only
    BEFORE UPDATE OR DELETE ON audit_logs
    FOR EACH ROW EXECUTE FUNCTION forbid_mutation();
CREATE TRIGGER audit_logs_no_truncate
    BEFORE TRUNCATE ON audit_logs
    FOR EACH STATEMENT EXECUTE FUNCTION forbid_mutation();

-- ---------------------------------------------------------------------------
-- Grants. organizations: SELECT + UPDATE(name) ONLY (no status/slug self-edit).
-- audit_logs: INSERT/SELECT only, with explicit REVOKEs as belt-and-suspenders.
-- ---------------------------------------------------------------------------
GRANT SELECT          ON organizations TO missionmatch_app;
GRANT UPDATE (name)   ON organizations TO missionmatch_app;
GRANT SELECT, INSERT, UPDATE, DELETE ON users TO missionmatch_app;
GRANT SELECT, INSERT  ON audit_logs   TO missionmatch_app;
REVOKE ALL ON audit_logs FROM PUBLIC;
REVOKE UPDATE, DELETE, TRUNCATE, REFERENCES, TRIGGER ON audit_logs FROM missionmatch_app;

-- +goose Down
DROP TABLE IF EXISTS audit_logs;
DROP FUNCTION IF EXISTS forbid_mutation();
DROP TABLE IF EXISTS users;
DROP TABLE IF EXISTS organizations;