chore: plant the seeds for EdgeHog’s journey

Author: koistya

.changeset/config.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@3.0.0/schema.json",
+  "changelog": [
+    "@changesets/changelog-github",
+    {
+      "repo": "kriasoft/edgehog"
+    }
+  ],
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": [],
+  "privatePackages": {
+    "changesetIgnorePatterns": ["@edgehog/internal*"]
+  }
+}

.changeset/initial-release.md

@@ -0,0 +1,5 @@
+---
+"@edgehog/db": patch
+---
+
+Initial public release of @edgehog/db with PostgreSQL + TimescaleDB schema and migrations for market data.

.env

@@ -0,0 +1,13 @@
+# PostgreSQL Database Configuration
+# Requirements: PostgreSQL 17 with TimescaleDB extension
+#
+# Installation:
+# https://docs.tigerdata.com/self-hosted/latest/install/
+# https://docs.tigerdata.com/self-hosted/latest/tooling/install-toolkit/
+#
+# Connection URL format: postgres://username:password@hostname:port/database
+DATABASE_URL=postgres://postgres@localhost:5432/edgehog
+
+# Dedicated PostgreSQL database for EdgeHog automated tests (unit/integration).
+# This database may be reset during test runs (drop/truncate) — never point to production.
+TEST_DATABASE_URL=postgres://postgres@localhost:5432/edgehog_test

.github/copilot-instructions.md

@@ -0,0 +1 @@
+#file:../CLAUDE.md #file:../CLAUDE.local.md

.github/docker/Dockerfile.timescaledb

@@ -0,0 +1,47 @@
+# Lightweight TimescaleDB image with toolkit support for CI/CD
+# Optimized for testing, not production HA workloads
+#
+# Usage:
+#   Local build:
+#     docker build -f .github/docker/Dockerfile.timescaledb -t edgehog-postgres:latest .
+#
+#   For GitHub Actions: Pre-build and push to registry, then reference in workflow
+#   For local development: Build locally and use with docker-compose
+#
+# Size comparison:
+#   - timescale/timescaledb-docker (Alpine, no toolkit):  ~300MB
+#   - timescale/timescaledb-docker-ha (Ubuntu, full HA):  ~2GB
+#   - This image (Ubuntu, toolkit only):                  ~800MB
+
+ARG PG_VERSION=17
+ARG TIMESCALEDB_VERSION=latest-pg17
+
+# Use the HA image as base (already has toolkit compiled)
+# but strip unnecessary HA components after
+FROM timescale/timescaledb-ha:${TIMESCALEDB_VERSION}
+
+ARG PG_VERSION
+
+LABEL maintainer="EdgeHog"
+LABEL description="Lightweight TimescaleDB with toolkit for CI/CD testing"
+
+# Remove HA-specific tools that we don't need for testing
+# This reduces image size from ~2GB to ~800MB
+RUN apt-get remove -y \
+    patroni \
+    pgbackrest \
+    pgbackrest-exporter \
+    pgbouncer-exporter \
+    barman \
+    && apt-get autoremove -y \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/* /var/cache/apt/*
+
+# Ensure TimescaleDB and toolkit are loaded
+RUN sed -i "s/shared_preload_libraries.*/shared_preload_libraries = 'timescaledb,timescaledb_toolkit'/" \
+    /usr/local/share/postgresql/postgresql.conf.sample
+
+EXPOSE 5432
+
+ENTRYPOINT ["/docker-entrypoint.sh"]
+CMD ["postgres"]

.github/docker/README.md

@@ -0,0 +1,56 @@
+# EdgeHog TimescaleDB Docker Images
+
+Lightweight, optimized Docker images for EdgeHog's CI/CD pipeline.
+
+## What's Included
+
+- **PostgreSQL 17** (default, fully supported)
+- **TimescaleDB** with pre-compiled **Toolkit**
+- **All extensions**: PostGIS, pgvector, h3, cron, and 20+ others
+- **Optimized size**: ~800MB (60% smaller than official HA)
+
+## Quick Start
+
+**Build locally:**
+
+```bash
+docker build -f .github/docker/Dockerfile.timescaledb -t edgehog-postgres .
+```
+
+**Use in docker-compose:**
+
+```yaml
+services:
+  postgres:
+    image: edgehog-postgres
+    environment:
+      POSTGRES_DB: edgehog_test
+      POSTGRES_HOST_AUTH_METHOD: trust
+    ports:
+      - 5432:5432
+```
+
+**Use in GitHub Actions:**
+
+```yaml
+services:
+  postgres:
+    image: timescale/timescaledb-ha:latest-pg17
+    # OR use custom pre-built image: ghcr.io/username/edgehog-postgres:latest
+```
+
+### Image Comparison
+
+| Feature       | timescaledb | timescaledb-ha | edgehog-postgres | Notes                          |
+| ------------- | ----------- | -------------- | ---------------- | ------------------------------ |
+| Base OS       | Alpine      | Ubuntu         | Ubuntu           | Based on official HA           |
+| Actual Size   | ~1.1GB      | ~2GB           | **~800MB**       | ✅ Smallest production-ready   |
+| PostgreSQL 17 | ✓           | ✓              | ✓                | All support PG17               |
+| TimescaleDB   | ✓           | ✓              | ✓                | Pre-compiled                   |
+| Toolkit       | ✗ Manual    | ✓              | **✓**            | ✅ Pre-compiled                |
+| Extensions    | Most        | All            | **All**          | ✅ PostGIS, pgvector, h3, etc. |
+| Patroni (HA)  | ✗           | ✓              | ✗                | Removed for smaller size       |
+| pgBackRest    | ✗           | ✓              | ✗                | Removed for smaller size       |
+| Purpose       | Minimal     | Prod HA        | **CI/CD**        | ✅ Sweet spot                  |
+
+**Note:** Alpine advertises ~300MB but extracts to ~1.1GB. EdgeHog's approach is more efficient (800MB) because it keeps all extensions + toolkit while removing only unnecessary HA tools.

.github/workflows/release.yml

@@ -0,0 +1,73 @@
+name: Release
+
+on:
+  push:
+    branches: [main]
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      contents: write # to commit changelogs / version bumps
+      pull-requests: write # to open or update the Version PR
+      id-token: write # for npm provenance (recommended)
+
+    steps:
+      - uses: actions/checkout@v5
+        with: { fetch-depth: 0 } # changesets needs tags/history to compute versions
+
+      - uses: actions/setup-node@v6
+        with: { node-version: "lts/*" }
+
+      - uses: oven-sh/setup-bun@v2
+        with: { bun-version: "latest" }
+
+      - run: bun install --frozen-lockfile
+      - run: bun run build
+
+      - run: |
+          npm config set //registry.npmjs.org/:_authToken=${NPM_TOKEN}
+          echo "NPM_CONFIG_PROVENANCE=true" >> $GITHUB_ENV
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Import GPG key
+        run: |
+          mkdir -p ~/.gnupg
+          chmod 700 ~/.gnupg
+          echo "${{ secrets.GPG_PRIVATE_KEY }}" | base64 -d | gpg --batch --pinentry-mode loopback --import
+          echo "allow-loopback-pinentry" >> ~/.gnupg/gpg-agent.conf
+          echo "pinentry-mode loopback" >> ~/.gnupg/gpg.conf
+          cat <<'EOF' > ~/.gnupg/gpg-loopback-wrapper.sh
+          #!/usr/bin/env bash
+          exec gpg --batch --pinentry-mode loopback --passphrase "$GPG_PASSPHRASE" "$@"
+          EOF
+          chmod 700 ~/.gnupg/gpg-loopback-wrapper.sh
+          git config user.signingkey ${{ secrets.GPG_KEY_ID }}
+          git config commit.gpgsign true
+          git config tag.gpgsign true
+          git config gpg.program ~/.gnupg/gpg-loopback-wrapper.sh
+          gpg-connect-agent reloadagent /bye || true
+        env:
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+
+      - uses: changesets/action@v1
+        with:
+          publish: bun changeset publish
+          version: bun changeset version
+          commit: "chore: version and release packages"
+          title: "chore: version and release packages"
+          setupGitUser: false
+          createGithubReleases: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}