feat: introduce Automation API (#116)

[solarhell]

Summary

Closes #116

• Add /api/automation/* endpoints for programmatic access to Dory without UI:
  • GET /api/automation/connections — list database connections
  • GET /api/automation/schema?connectionId=xxx — get database schema
  • POST /api/automation/query/execute — execute SQL queries
  • POST /api/automation/ai/ask — natural language data queries (AI generates & runs SQL)
• Auth supports both cookie sessions and Authorization: Bearer <token> with x-organization-id header
• Skip dash/sentinel auth plugins when BETTER_AUTH_API_KEY is not set (fixes local/test environments)

Usage

# List connections
curl -H "Authorization: Bearer $TOKEN" \
     -H "x-organization-id: $ORG_ID" \
     /api/automation/connections

# Execute SQL
curl -X POST -H "Authorization: Bearer $TOKEN" \
     -H "x-organization-id: $ORG_ID" \
     -H "Content-Type: application/json" \
     -d '{"connectionId":"xxx","sql":"SELECT * FROM users LIMIT 10"}' \
     /api/automation/query/execute

# AI Ask
curl -X POST -H "Authorization: Bearer $TOKEN" \
     -H "x-organization-id: $ORG_ID" \
     -H "Content-Type: application/json" \
     -d '{"connectionId":"xxx","question":"Top 10 users by order amount"}' \
     /api/automation/ai/ask

Test plan

• Unit tests: 18 tests passing (npx tsx apps/web/scripts/tests/automation-api.test.ts)
• E2E tests: 10 tests passing (npx playwright test --config tests/e2e/playwright-automation.config.ts)
• Manual curl testing against all 4 endpoints
• Verify in production-like environment with real database connections

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

3 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
dory	Ignored		Mar 31, 2026 8:57am
dory-admin	Ignored		Mar 31, 2026 8:57am
dory-beta	Ignored		Mar 31, 2026 8:57am

[solarhell]

CI Note

The 5 failing E2E tests are pre-existing flaky tests unrelated to this PR:

• workbench.spec.ts — timeout waiting for Port label
• login.spec.ts — demo login redirect timeout
• saved-query-folders.spec.ts — button disabled state timeout
• demo-connection-sql-console.spec.ts — demo flow timeout

These tests also fail on the main branch. The automation API code and tests are not involved in any of these failures.