Database

Raw client access is forbidden outside src/lib.

Rules (non-negotiable)

Every domain table must have an org_id column + index.
Ownership is modeled with *_member_id columns.
User-facing uniqueness is a composite UNIQUE(org_id, ...) at the DB level.
New tables must be added to the barrel and registered in the reflectiveorgScopedTables() list (used by deletion and export jobs).

Migrations

We follow expand-contract only. Additive change first, backfill via job if needed, then contract in a later deploy. Destructive changes and the code that depends on them are never shipped together.

AEO ExplorerBeta

Database

Raw client access is forbidden outside src/lib.

Rules (non-negotiable)

Every domain table must have an org_id column + index.
Ownership is modeled with *_member_id columns.
User-facing uniqueness is a composite UNIQUE(org_id, ...) at the DB level.
New tables must be added to the barrel and registered in the reflectiveorgScopedTables() list (used by deletion and export jobs).

Migrations

We follow expand-contract only. Additive change first, backfill via job if needed, then contract in a later deploy. Destructive changes and the code that depends on them are never shipped together.