fix: Refactor evidence approach

.github/workflows/validation-e2e.yml

@@ -2,7 +2,8 @@ name: Validation E2E
 
 on:
   pull_request:
-    types: [opened]
+    types: [opened, synchronize, reopened]
+  workflow_dispatch:
 
 permissions:
   contents: read
@@ -25,6 +26,9 @@ jobs:
 
       - run: npm ci
 
+      - name: Build OwnerLens
+        run: npm run build
+
       - name: Install Playwright Chromium
         run: npx playwright install --with-deps chromium
 

jest.config.cjs

@@ -5,7 +5,8 @@ module.exports = {
   testPathIgnorePatterns: [
     "/node_modules/",
     "<rootDir>/src/db/migrate.test.ts",
-    "<rootDir>/src/providers/azure/runtime/LocalReportRuntime.duckdb.test.ts"
+    "<rootDir>/src/providers/azure/runtime/LocalReportRuntime.duckdb.test.ts",
+    "<rootDir>/src/providers/azure/runtime/resources/tables.duckdb.test.ts"
   ],
   transform: {
     "^.+\\.tsx?$": [

jest.duckdb.config.cjs

@@ -5,7 +5,8 @@ module.exports = {
   ...baseConfig,
   testMatch: [
     "<rootDir>/src/db/migrate.test.ts",
-    "<rootDir>/src/providers/azure/runtime/LocalReportRuntime.duckdb.test.ts"
+    "<rootDir>/src/providers/azure/runtime/LocalReportRuntime.duckdb.test.ts",
+    "<rootDir>/src/providers/azure/runtime/resources/tables.duckdb.test.ts"
   ],
   testPathIgnorePatterns: ["/node_modules/"]
 };

migrations/002_disabled_resource_group_owner_candidates.sql

@@ -0,0 +1,7 @@
+create table if not exists azure_disabled_resource_group_owner_candidates (
+  subscription_id varchar not null,
+  resource_group varchar not null,
+  owner_candidate varchar not null,
+  disabled_at varchar not null,
+  primary key (subscription_id, resource_group, owner_candidate)
+);

migrations/003_drop_disabled_owner_evidence_keys.sql

@@ -0,0 +1 @@
+drop table if exists azure_disabled_owner_evidence_keys;

migrations/004_disabled_resource_group_owner_candidate_principal_scope.sql

@@ -0,0 +1,28 @@
+create table azure_disabled_resource_group_owner_candidates_v2 (
+  subscription_id varchar not null,
+  resource_group varchar not null,
+  owner_candidate varchar not null,
+  principal_id varchar not null default '',
+  disabled_at varchar not null,
+  primary key (subscription_id, resource_group, owner_candidate, principal_id)
+);
+
+insert into azure_disabled_resource_group_owner_candidates_v2 (
+  subscription_id,
+  resource_group,
+  owner_candidate,
+  principal_id,
+  disabled_at
+)
+select
+  subscription_id,
+  resource_group,
+  owner_candidate,
+  '',
+  disabled_at
+from azure_disabled_resource_group_owner_candidates;
+
+drop table azure_disabled_resource_group_owner_candidates;
+
+alter table azure_disabled_resource_group_owner_candidates_v2
+rename to azure_disabled_resource_group_owner_candidates;

migrations/README.md

@@ -0,0 +1,11 @@
+# Migrations
+
+Migration files are append-only history for the DuckDB runtime schema.
+
+Do not edit, rename, reorder, or delete existing migration files after they have been committed or shared. If the schema needs to change, add a new migration with the next numeric prefix, for example:
+
+```text
+005_short_description.sql
+```
+
+Each migration should contain only the SQL needed for that step and should preserve compatibility with databases that already ran earlier migrations.

package.json

@@ -89,6 +89,7 @@
     "@types/react-dom": "^19.0.0",
     "dependency-cruiser": "^17.4.0",
     "eslint": "^10.4.1",
+    "eslint-plugin-unused-imports": "^4.4.1",
     "globals": "^17.6.0",
     "istanbul-lib-coverage": "^3.2.2",
     "istanbul-lib-report": "^3.0.1",

src/App.tsx

@@ -1,4 +1,5 @@
 import { AzureComponent } from "./components/azure/AzureComponent";
+import { AzureInventoryStats } from "./components/azure/AzureInventoryStats";
 
 export default function App() {
   return (
@@ -9,6 +10,7 @@ export default function App() {
             <h1 className="text-3xl font-semibold tracking-tight">OwnerLens</h1>
             <p className="mt-1 text-sm text-muted-foreground">Azure inventory</p>
           </div>
+          <AzureInventoryStats />
         </header>
 
         <AzureComponent />