Database

operator

Marketplace Postgres (Neon) + Drizzle: schema overview, migrations, rollback notes, and the no-DB degradation path.

Operator documentation. This page is for HISS operators and is excluded from the public docs navigation and search indexing.

Provider

Production uses Postgres provisioned through the Vercel Marketplace Neon integration, connected to the hiss-web project. Vercel's first-party Postgres is no longer available for new projects (existing databases were migrated to Neon) — Marketplace integrations such as Neon, Prisma Postgres, or Supabase are the supported path, and they inject connection env vars automatically.

bash

vercel integration add neon      # provision + connect to the linked project
vercel env pull .env.local       # local dev credentials (gitignored)

ORM and migrations

The schema lives in apps/web/lib/db/schema.ts (Drizzle ORM, postgres-js driver, pooler-safe settings). Migration SQL is generated and committed under apps/web/drizzle/.

bash

pnpm --filter @hiss/web db:generate   # schema → SQL migration
pnpm --filter @hiss/web db:migrate    # apply (reads DATABASE_URL)
pnpm --filter @hiss/web db:studio     # inspect locally

What the schema holds

Table	Holds
`users`	Normalized wallet address, chain ID, first/last seen. No keys, no balances.
`wallet_sessions`	SIWE-style session nonces with issue/expiry/revocation timestamps.
`coils / coil_versions`	User-authored Coils and immutable manifest/fuse/allocation snapshots.
`autonomy_receipts`	Deterministic autonomy receipts. live_order_sent is CHECK-pinned to false.
`live_readiness_acks`	Live-autonomy acknowledgment hashes and boolean flags — never credentials.
`bankrbot_command_packs`	Compiled Bankrbot command packs, keyed to receipts.
`robinhood_mcp_instruction_packs`	Compiled Robinhood MCP instruction packs, keyed to receipts.
`x402_call_receipts`	Request/response hashes for paid x402 calls.
`post_run_audits`	Post-run audit reports with ok/violations status.
`audit_events / rate_limit_events`	Operational audit trail. No secrets, redacted by construction.

Nothing in this schema stores Robinhood credentials, brokerage account data, balances, API keys, or private keys — there are no columns for them, and requests carrying credential-looking fields are rejected before any handler runs.

Degradation without a database

Every persistence adapter returns { persisted: false, reason: "database not configured" }when DATABASE_URL is absent. Compilation, validation, receipts, and audits all still work — they are deterministic pure computations — and the response says plainly that nothing was stored. See Environment variables for the gating flags.