jason.woltjeandClaude Opus 4.6 864c23dc94 feat(#355): Create UserCredential model with RLS and encryption support ...

Implements secure user credential storage with comprehensive RLS policies
and encryption-ready architecture for Phase 3 of M9-CredentialSecurity.

**Features:**
- UserCredential Prisma model with 19 fields
- CredentialType enum (6 values: API_KEY, OAUTH_TOKEN, etc.)
- CredentialScope enum (USER, WORKSPACE, SYSTEM)
- FORCE ROW LEVEL SECURITY with 3 policies
- Encrypted value storage (OpenBao Transit ready)
- Cascade delete on user/workspace deletion
- Activity logging integration (CREDENTIAL_* actions)
- 28 comprehensive test cases

**Security:**
- RLS owner bypass, user access, workspace admin policies
- SQL injection hardening for is_workspace_admin()
- Encryption version tracking ready
- Full down migration for reversibility

**Testing:**
- 100% enum coverage (all CredentialType + CredentialScope values)
- Unique constraint enforcement
- Foreign key cascade deletes
- Timestamp behavior validation
- JSONB metadata storage

**Files:**
- Migration: 20260207_add_user_credentials (184 lines + 76 line down.sql)
- Security: 20260207163740_fix_sql_injection_is_workspace_admin
- Tests: user-credential.model.spec.ts (28 tests, 544 lines)
- Docs: README.md (228 lines), scratchpad

Fixes #355

Co-Authored-By: Claude Opus 4.6 <[email protected]>

2026-02-07 16:39:15 -06:00

..

20260202_add_runner_job_version_for_concurrency

fix(#196): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

20260203_add_federation_event_subscriptions

feat(#90): implement EVENT subscriptions for federation

2026-02-03 13:45:00 -06:00

20260207_add_auth_rls_policies

feat(#350): Add RLS policies to auth tables with FORCE enforcement

2026-02-07 12:49:14 -06:00

20260207_add_user_credentials

feat(#355): Create UserCredential model with RLS and encryption support

2026-02-07 16:39:15 -06:00

20260207_encrypt_account_tokens

feat(#352): Encrypt existing plaintext Account tokens

2026-02-07 13:16:43 -06:00

20260128212935_init

feat(#2): Implement PostgreSQL 17 + pgvector database schema

2026-01-28 16:06:34 -06:00

20260128213002_add_vector_index

feat(#2): Implement PostgreSQL 17 + pgvector database schema

2026-01-28 16:06:34 -06:00

20260128235617_add_activity_log_fields

feat(#37-41): Add domains, ideas, relationships, agents, widgets schema

2026-01-29 12:29:21 -06:00

20260129182803_add_domains_ideas_agents_widgets

feat(#37-41): Add domains, ideas, relationships, agents, widgets schema

2026-01-29 12:29:21 -06:00

20260129220645_add_knowledge_module

feat(knowledge): add database schema for Knowledge Module

2026-01-29 16:07:58 -06:00

20260129220941_add_team_model

feat(multi-tenant): add Team model and RLS policies

2026-01-29 16:13:09 -06:00

20260129221004_add_rls_policies

feat(multi-tenant): add Team model and RLS policies

2026-01-29 16:13:09 -06:00

20260129225813_add_user_preferences

feat(web): add workspace management UI (M2 #12)

2026-01-29 16:59:26 -06:00

20260129232349_add_agent_task_model

feat: add agent task schema and CRUD API (closes #96, closes #97)

2026-01-29 23:26:22 -06:00

20260129234950_add_personality_model

feat(#82): implement Personality Module

2026-01-29 17:58:09 -06:00

20260129235248_add_link_storage_fields

feat(#82): implement Personality Module

2026-01-29 17:58:09 -06:00

20260130002000_add_knowledge_embeddings_vector_index

feat: add semantic search with pgvector (closes #68, #69, #70)

2026-01-30 15:19:13 -06:00

20260131115600_add_llm_provider_instance

feat(#128): add LlmProviderInstance Prisma schema

2026-01-31 11:57:40 -06:00

20260201205935_add_job_tracking

feat(#164): Add database schema for job tracking

2026-02-01 21:01:57 -06:00

20260202122655_add_job_events_composite_index

fix(#189): add composite database index for job_events table

2026-02-02 12:30:19 -06:00

20260202142100_add_fulltext_search_to_knowledge_entries

feat(#65): implement full-text search with tsvector and GIN index

2026-02-02 14:25:45 -06:00

20260207163740_fix_sql_injection_is_workspace_admin

feat(#355): Create UserCredential model with RLS and encryption support

2026-02-07 16:39:15 -06:00

migration_lock.toml

feat(#2): Implement PostgreSQL 17 + pgvector database schema

2026-01-28 16:06:34 -06:00