|
| 1 | +-- Stewardship tables for the OSSPREY Self Serve program (v1). |
| 2 | +-- In v1: only `stewardships` is populated (one unassigned row per critical package). |
| 3 | +-- All other tables are schema-only — empty until v2 write flows land. |
| 4 | + |
| 5 | +CREATE TABLE IF NOT EXISTS stewardships ( |
| 6 | + id BIGSERIAL PRIMARY KEY, |
| 7 | + package_id BIGINT NOT NULL REFERENCES packages(id), |
| 8 | + status TEXT NOT NULL, -- 'unassigned'|'open'|'assessing'|'active'|'needs_attention'|'escalated'|'blocked'|'inactive' |
| 9 | + origin TEXT NOT NULL, -- 'auto_imported'|'self_claimed'|'assigned'|'opened_for_claim' |
| 10 | + version INT NOT NULL DEFAULT 1, |
| 11 | + opened_at TIMESTAMPTZ, |
| 12 | + last_status_at TIMESTAMPTZ, |
| 13 | + inactive_reason TEXT, -- 'quarterly_cadence_missed'|'stepped_down'|'no_longer_critical' |
| 14 | + created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), |
| 15 | + updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), |
| 16 | + UNIQUE (package_id) |
| 17 | +); |
| 18 | + |
| 19 | +CREATE INDEX IF NOT EXISTS stewardships_status_idx |
| 20 | + ON stewardships (status); |
| 21 | +CREATE INDEX IF NOT EXISTS stewardships_last_status_at_active_idx |
| 22 | + ON stewardships (last_status_at) WHERE status = 'active'; |
| 23 | + |
| 24 | +-- Many-to-many stewards. Empty in v1; soft-delete preserves historical membership. |
| 25 | +CREATE TABLE IF NOT EXISTS stewardship_stewards ( |
| 26 | + id BIGSERIAL PRIMARY KEY, |
| 27 | + stewardship_id BIGINT NOT NULL REFERENCES stewardships(id), |
| 28 | + user_id TEXT NOT NULL, |
| 29 | + role TEXT NOT NULL, -- 'lead'|'co_steward' |
| 30 | + assigned_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), |
| 31 | + assigned_by TEXT, |
| 32 | + deleted_at TIMESTAMPTZ |
| 33 | +); |
| 34 | + |
| 35 | +CREATE UNIQUE INDEX IF NOT EXISTS stewardship_stewards_active_unique |
| 36 | + ON stewardship_stewards (stewardship_id, user_id) |
| 37 | + WHERE deleted_at IS NULL; |
| 38 | +CREATE INDEX IF NOT EXISTS stewardship_stewards_user_id_active_idx |
| 39 | + ON stewardship_stewards (user_id) WHERE deleted_at IS NULL; |
| 40 | + |
| 41 | +-- Append-only audit log. Empty in v1. |
| 42 | +CREATE TABLE IF NOT EXISTS stewardship_activity ( |
| 43 | + id BIGSERIAL PRIMARY KEY, |
| 44 | + stewardship_id BIGINT NOT NULL REFERENCES stewardships(id), |
| 45 | + actor_user_id TEXT, -- NULL for system events |
| 46 | + actor_type TEXT NOT NULL, -- 'user'|'system' |
| 47 | + activity_type TEXT NOT NULL, -- 'state_changed'|'assessment_completed'|'assessment_flagged'| |
| 48 | + -- 'remediation_logged'|'status_update'|'escalation'| |
| 49 | + -- 'escalation_resolved'|'blocker_added'|'blocker_resolved'| |
| 50 | + -- 'steward_added'|'steward_removed' |
| 51 | + content TEXT, |
| 52 | + metadata JSONB, |
| 53 | + created_at TIMESTAMPTZ NOT NULL DEFAULT NOW() |
| 54 | +); |
| 55 | + |
| 56 | +CREATE INDEX IF NOT EXISTS stewardship_activity_stewardship_id_created_at_idx |
| 57 | + ON stewardship_activity (stewardship_id, created_at DESC); |
| 58 | + |
| 59 | +-- One current assessment per stewardship; historical ones preserved via superseded_at. |
| 60 | +CREATE TABLE IF NOT EXISTS stewardship_assessments ( |
| 61 | + id BIGSERIAL PRIMARY KEY, |
| 62 | + stewardship_id BIGINT NOT NULL REFERENCES stewardships(id), |
| 63 | + posture TEXT, |
| 64 | + summary TEXT, |
| 65 | + security_contact TEXT, |
| 66 | + disclosure_preference TEXT, |
| 67 | + tier_0_ready BOOL NOT NULL DEFAULT FALSE, |
| 68 | + monitoring_plan TEXT, |
| 69 | + draft BOOL NOT NULL DEFAULT TRUE, |
| 70 | + completed_at TIMESTAMPTZ, |
| 71 | + completed_by TEXT, |
| 72 | + reviewed BOOL NOT NULL DEFAULT FALSE, |
| 73 | + reviewed_at TIMESTAMPTZ, |
| 74 | + reviewed_by TEXT, |
| 75 | + flagged BOOL NOT NULL DEFAULT FALSE, |
| 76 | + flag_note TEXT, |
| 77 | + superseded_at TIMESTAMPTZ, |
| 78 | + superseded_by_id BIGINT REFERENCES stewardship_assessments(id), |
| 79 | + created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), |
| 80 | + updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW() -- tracks mutations: reviewed, flagged, superseded_at |
| 81 | +); |
| 82 | + |
| 83 | +CREATE INDEX IF NOT EXISTS stewardship_assessments_stewardship_id_superseded_at_idx |
| 84 | + ON stewardship_assessments (stewardship_id, superseded_at); |
| 85 | +CREATE UNIQUE INDEX IF NOT EXISTS stewardship_assessments_one_current |
| 86 | + ON stewardship_assessments (stewardship_id) |
| 87 | + WHERE superseded_at IS NULL; |
| 88 | + |
| 89 | +-- Per-dimension findings. assessment_id links a finding to the assessment that produced it. |
| 90 | +CREATE TABLE IF NOT EXISTS stewardship_findings ( |
| 91 | + id BIGSERIAL PRIMARY KEY, |
| 92 | + stewardship_id BIGINT NOT NULL REFERENCES stewardships(id), |
| 93 | + assessment_id BIGINT REFERENCES stewardship_assessments(id), -- NULL until assessment flow lands in v2 |
| 94 | + dimension TEXT NOT NULL, -- 'maintainer_health'|'security_posture'|'vulnerability_exposure'| |
| 95 | + -- 'dependency_risk'|'supply_chain_integrity'|'release_health' |
| 96 | + severity TEXT NOT NULL, -- 'critical'|'high'|'medium'|'low'|'informational' |
| 97 | + finding TEXT NOT NULL, |
| 98 | + evidence TEXT, |
| 99 | + created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), |
| 100 | + updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW() |
| 101 | +); |
| 102 | + |
| 103 | +CREATE INDEX IF NOT EXISTS stewardship_findings_stewardship_id_idx |
| 104 | + ON stewardship_findings (stewardship_id); |
| 105 | +CREATE INDEX IF NOT EXISTS stewardship_findings_dimension_severity_idx |
| 106 | + ON stewardship_findings (dimension, severity); |
| 107 | + |
| 108 | +-- Concrete remediation actions. Empty in v1. |
| 109 | +CREATE TABLE IF NOT EXISTS stewardship_remediation_actions ( |
| 110 | + id BIGSERIAL PRIMARY KEY, |
| 111 | + stewardship_id BIGINT NOT NULL REFERENCES stewardships(id), |
| 112 | + finding_id BIGINT REFERENCES stewardship_findings(id), |
| 113 | + action TEXT NOT NULL, |
| 114 | + status TEXT NOT NULL, -- 'pending'|'in_progress'|'done'|'blocked'|'abandoned' |
| 115 | + url TEXT, |
| 116 | + notes TEXT, |
| 117 | + created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), |
| 118 | + updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(), |
| 119 | + completed_at TIMESTAMPTZ |
| 120 | +); |
| 121 | + |
| 122 | +CREATE INDEX IF NOT EXISTS stewardship_remediation_actions_stewardship_id_status_idx |
| 123 | + ON stewardship_remediation_actions (stewardship_id, status); |
0 commit comments