tiennm99 0a08f80450 feat(phase-1): db schema init (bsk_init migration + roles) ...

- supabase/migrations/20260525163300_bsk_init.sql: bsk schema, app_role
  enum, app_users enrollment table, current_role() SECURITY DEFINER
  STABLE helper, RLS enabled with two SELECT policies (own row + admin)
- types/supabase-bsk.ts: hand-written placeholder mirroring canonical
  supabase gen output; regenerate via pnpm db:gen-types after migration
  applied
- lib/db/roles.ts: appRoles tuple + AppRole union + satisfies guard
  against generated enum + isAppRole type guard
- package.json: db:gen-types script
- README: one-line note on regenerating types after db:push
- plans/: include phase 02/04/06 detail files alongside the existing
  01/03/05 (planner output that wasn't committed with the trim)

2026-05-25 17:23:08 +07:00

..

check-no-secret-leak.mjs

feat(phase-1): db schema init (bsk_init migration + roles)

2026-05-25 17:23:08 +07:00

preflight-supabase.ts

docs(infra): add shared-supabase config, restore runbook, threat model, db preflight

2026-05-25 15:57:10 +07:00