feat: schema-change actionability (migration SQL) + annotations, connection test, coverage

[seonghobae]

Goal

Move the product up the value ladder visualize → diff → act → govern, grounded in a full code-knowledge-graph pass. See docs/valuation-gap-analysis.md for the codegraph-informed roadmap.

Highlights (P0 delivered: actionability)

• Migration SQL from a schema diff (ddl/migration.py) — GET /api/snapshots/{uuid}/migration.sql?against=…&dialect=… turns a read-only diff into the CREATE/ALTER/DROP + FK statements to apply. Bridges the previously test-only-connected diff and ddl modules. Name-matched (oid-independent); destructive/PK changes emitted with review comments; PG-precise + Snowflake SET DATA TYPE.

Also in this branch (features shipped this cycle, backend + frontend)

• Schema Diff + Saved Views
• Table annotations (per-project notes keyed by table name; IDOR-guarded CRUD + modal UI)
• Connection health test (SSRF-safe probe reusing the introspectors' guard; button + status UI)
• fix(alembic): repaired the broken multi-head revision graph (verified against Postgres)
• Security/logic coverage → 100% on the SSRF guard, sanitize, schema_diff

Verification

• backend pytest 258 passed; frontend vitest 136 passed; tsc --noEmit clean
• migrations 0004→0006 applied against real Postgres
• SSRF pinning, IDOR uniform-404, DSN-redacted errors preserved

🤖 Generated with Claude Code

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[opencode-agent]

OpenCode Review Overview

• Head SHA: 31f47ead5e74ecb19fefdc07b45e2213d9647f63
• Workflow run: 28742819565
• Workflow attempt: 1
• Gate result: APPROVE (exit 0)

Changed-File Evidence Map

flowchart LR
  PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
  Evidence --> S1["Backend (25 files)"]
  S1 --> I1["API and service runtime"]
  I1 --> R1["Review risk: Backend (25 files)"]
  R1 --> V1["backend tests"]
  Evidence --> S2["Docs: valuation-gap-analysis.md"]
  S2 --> I2["operator or user guidance"]
  I2 --> R2["Review risk: Docs: valuation-gap-analysis.md"]
  R2 --> V2["docs review"]
  Evidence --> S3["Frontend (15 files)"]
  S3 --> I3["browser runtime and bundle"]
  I3 --> R3["Review risk: Frontend (15 files)"]
  R3 --> V3["frontend tests"]

Loading