Release v0.15.0

Release v0.15.0

Author: JustTB

.github/workflows/ci-db.yml

@@ -0,0 +1,116 @@
+name: DB Integrity
+
+on:
+  pull_request:
+
+jobs:
+  db-integrity:
+    name: Migration smoke test + seed freshness
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: postgres:16-alpine
+        env:
+          POSTGRES_USER: power2plant
+          POSTGRES_PASSWORD: power2plant
+          POSTGRES_DB: power2plant
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+          - 5432:5432
+
+    env:
+      DATABASE_URL: postgresql://power2plant:power2plant@localhost:5432/power2plant
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - run: pnpm install --frozen-lockfile
+
+      - run: pnpm exec prisma generate
+
+      - name: Load seed.sql
+        run: psql "$DATABASE_URL" < db/seed.sql
+
+      - name: Apply pending migrations
+        run: |
+          BEFORE_TS=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+          echo "BEFORE_TS=$BEFORE_TS" >> "$GITHUB_ENV"
+          pnpm exec prisma migrate deploy
+
+      - name: Check seed.sql freshness
+        run: |
+          APPLIED=$(psql "$DATABASE_URL" -t -c \
+            "SELECT count(*) FROM \"_prisma_migrations\" WHERE started_at > '$BEFORE_TS' AND finished_at IS NOT NULL AND logs IS NULL;" \
+            | tr -d ' ')
+          echo "Migrations applied on top of seed.sql: $APPLIED"
+          if [ "$APPLIED" -gt 0 ]; then
+            echo "::warning::seed.sql is stale — $APPLIED migration(s) missing. Run \`pnpm db:dump\` and commit db/seed.sql."
+            if [[ "${{ github.head_ref }}" == release/* ]]; then
+              echo "::error::seed.sql must include all migrations on release branches. Run \`pnpm db:dump\` and commit."
+              exit 1
+            fi
+          fi
+
+  upgrade-path:
+    name: Upgrade path from last release
+    runs-on: ubuntu-latest
+
+    services:
+      postgres:
+        image: postgres:16-alpine
+        env:
+          POSTGRES_USER: power2plant
+          POSTGRES_PASSWORD: power2plant
+          POSTGRES_DB: power2plant
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+          - 5432:5432
+
+    env:
+      DATABASE_URL: postgresql://power2plant:power2plant@localhost:5432/power2plant
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - run: pnpm install --frozen-lockfile
+
+      - run: pnpm exec prisma generate
+
+      - name: Load last release seed.sql
+        run: |
+          LAST_TAG=$(git tag --sort=-version:refname | grep -E '^v[0-9]' | head -1)
+          if [ -z "$LAST_TAG" ]; then
+            echo "No release tag found — skipping"
+            exit 0
+          fi
+          echo "Testing upgrade path from $LAST_TAG"
+          echo "LAST_TAG=$LAST_TAG" >> "$GITHUB_ENV"
+          git show "$LAST_TAG:db/seed.sql" | psql "$DATABASE_URL"
+
+      - name: Apply current migrations on top
+        run: pnpm exec prisma migrate deploy

.gitignore

@@ -15,3 +15,4 @@ autodev/orchestrate/orchestrator.pid
 autodev/logs/
 .claude/settings.local.json
 .env.prod
+db/seed-enrichment-attempts.sql

Dockerfile

@@ -38,6 +38,17 @@ RUN if [ -n "$AGENT_PUBKEY" ]; then \
     fi
 RUN passwd -d node && \
     printf '\nPort 2222\nPasswordAuthentication no\nPermitRootLogin prohibit-password\nStrictModes no\n' >> /etc/ssh/sshd_config
+# Align node uid/gid with the host/agent user so shared /app volume files
+# are mutually writable. Pass SHELL_UID/SHELL_GID at build time.
+ARG SHELL_UID=1000
+ARG SHELL_GID=1000
+RUN if [ "$SHELL_UID" != "1000" ] || [ "$SHELL_GID" != "1000" ]; then \
+      apk add --no-cache shadow && \
+      groupmod -g "$SHELL_GID" node && \
+      usermod -u "$SHELL_UID" node && \
+      chown -R node:node /home/node && \
+      apk del shadow; \
+    fi
 
 # ---- prod-deps ----
 # Flat (hoisted) layout so .bin shims have no absolute paths baked in —
@@ -88,3 +99,11 @@ ENV PORT=3000
 ENV HOSTNAME="0.0.0.0"
 
 CMD ["sh", "-c", "prisma migrate deploy && node server.js"]
+
+# ---- scripts ----
+# On-demand admin/research container. Not started by default.
+# Usage: docker compose --profile scripts run --rm scripts pnpm research:import
+FROM deps AS scripts
+WORKDIR /app
+COPY . .
+RUN pnpm exec prisma generate

db/dump.sh

@@ -1,24 +1,25 @@
 #!/bin/sh
 set -e
 
-# Produces db/seed.sql — a spin-up snapshot for new contributors. Schema for
-# every table is included, but data is dumped only for the canonical plant
-# datasets (Crop / CropRelationship / their sources). Auth and per-user
-# garden tables stay empty so we never commit personal data.
+# Produces two seed files:
+#   db/seed.sql                          — schema + canonical plant data
+#   db/seed-enrichment-attempts.sql.gz   — CropEnrichmentAttempt rows (gzipped; never diffed)
+# Auth and per-user garden tables are schema-only so no personal data is committed.
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 ROOT_DIR="$(dirname "$SCRIPT_DIR")"
 [ -f "$ROOT_DIR/.env" ] && . "$ROOT_DIR/.env"
 
 DB_URL="${DATABASE_URL:-postgresql://power2plant:power2plant@localhost:5432/power2plant}"
-OUT="$(dirname "$0")/seed.sql"
+OUT="$SCRIPT_DIR/seed.sql"
+OUT_ENRICHMENT="$SCRIPT_DIR/seed-enrichment-attempts.sql.gz"
 
 if ! pg_isready -d "$DB_URL" -q; then
   echo "ERROR: Database not reachable at $DB_URL" >&2
   exit 1
 fi
 
-echo "Dumping plant data to $OUT (user-generated tables: schema only) ..."
+echo "Dumping canonical plant data to $OUT ..."
 
 pg_dump "$DB_URL" \
   --format=plain \
@@ -31,8 +32,19 @@ pg_dump "$DB_URL" \
   --exclude-table-data='public."UserGarden"' \
   --exclude-table-data='public."Bed"' \
   --exclude-table-data='public."Planting"' \
+  --exclude-table-data='public."CropEnrichmentAttempt"' \
   --file="$OUT"
 
-LINES=$(wc -l < "$OUT")
-SIZE=$(du -sh "$OUT" | cut -f1)
-echo "Done — $SIZE, $LINES lines"
+echo "Done — $(du -sh "$OUT" | cut -f1), $(wc -l < "$OUT") lines"
+
+echo "Dumping CropEnrichmentAttempt to $OUT_ENRICHMENT ..."
+
+pg_dump "$DB_URL" \
+  --format=plain \
+  --no-owner \
+  --no-acl \
+  --table='public."CropEnrichmentAttempt"' \
+  --data-only \
+  | gzip > "$OUT_ENRICHMENT"
+
+echo "Done — $(du -sh "$OUT_ENRICHMENT" | cut -f1)"

db/restore.sh

@@ -6,7 +6,8 @@ ROOT_DIR="$(dirname "$SCRIPT_DIR")"
 [ -f "$ROOT_DIR/.env" ] && . "$ROOT_DIR/.env"
 
 DB_URL="${DATABASE_URL:-postgresql://power2plant:power2plant@localhost:5432/power2plant}"
-DUMP="$(dirname "$0")/seed.sql"
+DUMP="$SCRIPT_DIR/seed.sql"
+DUMP_ENRICHMENT="$SCRIPT_DIR/seed-enrichment-attempts.sql.gz"
 
 if [ ! -f "$DUMP" ]; then
   echo "ERROR: No dump found at $DUMP" >&2
@@ -21,3 +22,9 @@ fi
 echo "Restoring from $DUMP ..."
 psql "$DB_URL" --file="$DUMP" --quiet
 echo "Done"
+
+if [ -f "$DUMP_ENRICHMENT" ]; then
+  echo "Restoring enrichment attempts from $DUMP_ENRICHMENT ..."
+  gunzip -c "$DUMP_ENRICHMENT" | psql "$DB_URL" --quiet
+  echo "Done"
+fi