LucasSantana-Dev · Apr 22, 2026 · Apr 22, 2026 · Apr 22, 2026 · Apr 22, 2026 · Apr 22, 2026
diff --git a/prisma/migrations/20250101000000_baseline/migration.sql b/prisma/migrations/20250101000000_baseline/migration.sql
diff --git a/prisma/migrations/20250101000001_enable_rls_no_policies/migration.sql b/prisma/migrations/20250101000001_enable_rls_no_policies/migration.sql
@@ -0,0 +1,48 @@
+-- Enable RLS on every public table so PostgREST's anon/authenticated roles
+-- cannot reach them. The bot/backend connects as the postgres role, which
+-- bypasses RLS. No policies needed — default-deny is exactly what we want
+-- until a separate follow-up introduces supabase-js / browser-side clients.
+--
+-- No-op on self-hosted Postgres (non-Supabase): ENABLE RLS without any
+-- policies means only the owning role can read/write, which is how
+-- self-hosted already behaves (single DB user). Safe to apply everywhere.
+
+ALTER TABLE "public"."users" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."user_preferences" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guilds" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guild_feature_toggles" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."twitch_notifications" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guild_settings" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guild_role_grants" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guild_automation_manifests" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guild_automation_runs" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guild_automation_drifts" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guild_sessions" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."track_history" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."command_usage" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."rate_limits" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."downloads" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."user_artist_preferences" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."recommendations" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."reaction_role_messages" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."reaction_role_mappings" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."lastfm_links" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."spotify_links" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."role_exclusions" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."moderation_cases" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."moderation_settings" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."automod_settings" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."embed_templates" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."auto_messages" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."custom_commands" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."server_logs" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."starboard_configs" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."starboard_entries" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."level_configs" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."member_xp" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."level_rewards" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."live_boards" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."auto_roles" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."member_birthdays" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."guild_subscriptions" ENABLE ROW LEVEL SECURITY;
+ALTER TABLE "public"."stripe_webhook_events" ENABLE ROW LEVEL SECURITY;
diff --git a/prisma/migrations/20250128120000_add_twitch_notifications/migration.sql b/prisma/migrations/20250128120000_add_twitch_notifications/migration.sql
diff --git a/prisma/migrations/20250129120000_add_lastfm_links/migration.sql b/prisma/migrations/20250129120000_add_lastfm_links/migration.sql
diff --git a/prisma/migrations/20260307210000_add_moderation_case_fields/migration.sql b/prisma/migrations/20260307210000_add_moderation_case_fields/migration.sql
diff --git a/prisma/migrations/20260307220000_add_missing_service_fields/migration.sql b/prisma/migrations/20260307220000_add_missing_service_fields/migration.sql
diff --git a/prisma/migrations/20260311110000_add_guild_role_grants/migration.sql b/prisma/migrations/20260311110000_add_guild_role_grants/migration.sql
diff --git a/prisma/migrations/20260311193000_add_guild_automation_manifest/migration.sql b/prisma/migrations/20260311193000_add_guild_automation_manifest/migration.sql
diff --git a/prisma/migrations/20260326000000_fix_user_sessions_guild_fkey/migration.sql b/prisma/migrations/20260326000000_fix_user_sessions_guild_fkey/migration.sql
diff --git a/prisma/migrations/20260330000000_add_automod_link_exempt_channels/migration.sql b/prisma/migrations/20260330000000_add_automod_link_exempt_channels/migration.sql
diff --git a/prisma/migrations/20260331000000_add_live_boards/migration.sql b/prisma/migrations/20260331000000_add_live_boards/migration.sql
diff --git a/prisma/migrations/20260407000000_add_moderation_cases_guild_created_at_index/migration.sql b/prisma/migrations/20260407000000_add_moderation_cases_guild_created_at_index/migration.sql
diff --git a/prisma/migrations/20260410000000_add_auto_roles/migration.sql b/prisma/migrations/20260410000000_add_auto_roles/migration.sql
diff --git a/prisma/migrations/20260411000000_add_autoplay_mode/migration.sql b/prisma/migrations/20260411000000_add_autoplay_mode/migration.sql
diff --git a/prisma/migrations/20260412000000_add_autoplay_genres/migration.sql b/prisma/migrations/20260412000000_add_autoplay_genres/migration.sql
diff --git a/prisma/migrations/20260412100000_add_spotify_link/migration.sql b/prisma/migrations/20260412100000_add_spotify_link/migration.sql
diff --git a/prisma/migrations/20260414000000_add_guild_feature_toggles/migration.sql b/prisma/migrations/20260414000000_add_guild_feature_toggles/migration.sql
diff --git a/prisma/migrations/20260414100000_add_user_artist_preferences/migration.sql b/prisma/migrations/20260414100000_add_user_artist_preferences/migration.sql
diff --git a/prisma/migrations/20260420000000_add_member_birthdays/migration.sql b/prisma/migrations/20260420000000_add_member_birthdays/migration.sql
diff --git a/prisma/migrations/20260420030000_add_premium_tier_schema/migration.sql b/prisma/migrations/20260420030000_add_premium_tier_schema/migration.sql