@actuate-media/cms-core 0.20.0 → 0.22.0

package/prisma/schema.prisma

@@ -1,549 +1,563 @@
-generator client {
-  provider        = "prisma-client"
-  output          = "../generated"
-  previewFeatures = ["fullTextSearchPostgres"]
-}
-
-datasource db {
-  provider = "postgresql"
-}
-
-// ─── Enums ──────────────────────────────────────────────────────────
-
-enum DocumentStatus {
-  DRAFT
-  PUBLISHED
-  ARCHIVED
-  SCHEDULED
-  SCHEDULED_UNPUBLISH
-}
-
-enum UserRole {
-  ADMIN
-  EDITOR
-  AUTHOR
-  CLIENT
-}
-
-enum ChangeType {
-  CREATE
-  UPDATE
-  PUBLISH
-  RESTORE
-  DELETE
-}
-
-enum AuditEvent {
-  login_success
-  login_failed
-  logout
-  password_change
-  password_reset_request
-  password_reset_complete
-  totp_enabled
-  totp_disabled
-  api_key_created
-  api_key_revoked
-  document_created
-  document_updated
-  document_published
-  document_deleted
-  media_uploaded
-  media_deleted
-  user_created
-  user_updated
-  user_deactivated
-  settings_changed
-  version_restored
-  export_requested
-  import_completed
-}
-
-enum NotificationType {
-  DOCUMENT_PUBLISHED
-  DOCUMENT_ASSIGNED
-  REVIEW_REQUESTED
-  REVIEW_APPROVED
-  COMMENT_ADDED
-  SYSTEM_ALERT
-  WORKFLOW_STEP
-}
-
-enum OrderStatus {
-  PENDING
-  CONFIRMED
-  PROCESSING
-  SHIPPED
-  DELIVERED
-  CANCELLED
-  REFUNDED
-}
-
-enum PaymentStatus {
-  PENDING
-  AUTHORIZED
-  CAPTURED
-  FAILED
-  REFUNDED
-  PARTIALLY_REFUNDED
-}
-
-enum WorkflowStage {
-  DRAFT
-  IN_REVIEW
-  APPROVED
-  PUBLISHED
-  ARCHIVED
-}
-
-enum DiscountType {
-  PERCENTAGE
-  FIXED_AMOUNT
-  FREE_SHIPPING
-}
-
-enum ProductType {
-  PHYSICAL
-  DIGITAL
-  SUBSCRIPTION
-  BUNDLE
-}
-
-// ─── Models ─────────────────────────────────────────────────────────
-
-model User {
-  id            String    @id @default(cuid())
-  email         String    @unique
-  name          String
-  avatarUrl     String?
-  role          UserRole  @default(AUTHOR)
-  passwordHash  String?
-  totpSecret    String?
-  totpEnabled   Boolean   @default(false)
-  backupCodes   Json?
-  authProvider  String?
-  isActive      Boolean   @default(true)
-  isApproved    Boolean   @default(false)
-  emailVerified Boolean   @default(false)
-  lastLoginAt   DateTime?
-  createdAt     DateTime  @default(now())
-  updatedAt     DateTime  @updatedAt
-
-  sessions              Session[]
-  oauthAccounts         OAuthAccount[]
-  apiKeys               ApiKey[]
-  documents             Document[]       @relation("CreatedDocuments")
-  updatedDocuments      Document[]       @relation("UpdatedDocuments")
-  versions              Version[]
-  media                 Media[]
-  contentLocks          ContentLock[]
-  notifications         InAppNotification[]
-  contentTemplates      ContentTemplate[]
-  workflowAssigned      WorkflowState[]
-  passwordResetTokens   PasswordResetToken[]
-
-  @@map("actuate_users")
-}
-
-model OAuthAccount {
-  id                String   @id @default(cuid())
-  userId            String
-  provider          String
-  providerAccountId String
-  accessToken       String?
-  refreshToken      String?
-  expiresAt         DateTime?
-  createdAt         DateTime @default(now())
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@unique([provider, providerAccountId])
-  @@map("actuate_oauth_accounts")
-}
-
-model Session {
-  id              String    @id @default(cuid())
-  userId          String
-  token           String    @unique
-  expiresAt       DateTime
-  revokedAt       DateTime?
-  ipAddress       String?
-  userAgent       String?
-  fingerprintHash String?
-  createdAt       DateTime  @default(now())
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@index([userId])
-  @@index([expiresAt])
-  @@map("actuate_sessions")
-}
-
-model ApiKey {
-  id             String    @id @default(cuid())
-  name           String
-  keyHash        String    @unique
-  keyPrefix      String
-  userId         String
-  scopes         Json
-  ipRestrictions Json?
-  expiresAt      DateTime?
-  lastUsedAt     DateTime?
-  revokedAt      DateTime?
-  createdAt      DateTime  @default(now())
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@map("actuate_api_keys")
-}
-
-model AuditLog {
-  id        String   @id @default(cuid())
-  event     String
-  userId    String?
-  ipAddress String?
-  userAgent String?
-  details   Json?
-  timestamp DateTime @default(now())
-
-  @@index([event])
-  @@index([userId])
-  @@index([timestamp])
-  @@map("actuate_audit_logs")
-}
-
-model Folder {
-  id        String   @id @default(cuid())
-  name      String
-  scope     String
-  parentId  String?
-  position  Int      @default(0)
-  createdAt DateTime @default(now())
-  updatedAt DateTime @updatedAt
-
-  parent   Folder?  @relation("FolderTree", fields: [parentId], references: [id], onDelete: Cascade)
-  children Folder[] @relation("FolderTree")
-
-  documents Document[]
-  media     Media[]
-
-  @@index([scope])
-  @@index([parentId])
-  @@map("actuate_folders")
-}
-
-model Document {
-  id                    String         @id @default(cuid())
-  collection            String
-  title                 String?
-  slug                  String?
-  data                  Json
-  status                DocumentStatus @default(DRAFT)
-  locale                String?
-  localeGroupId         String?
-  createdById           String
-  updatedById           String
-  publishedAt           DateTime?
-  scheduledAt           DateTime?
-  scheduledUnpublishAt  DateTime?
-  deletedAt             DateTime?
-  searchVector          String?
-  plainText             String?
-  contentHash           String?
-  structuredData        Json?
-  contentGraph          Json?
-  siteId                String?
-  templateId            String?
-  workflowStage         WorkflowStage  @default(DRAFT)
-  reviewerId            String?
-  reviewNote            String?
-  folderId              String?
-  createdAt             DateTime       @default(now())
-  updatedAt             DateTime       @updatedAt
-
-  createdBy    User          @relation("CreatedDocuments", fields: [createdById], references: [id])
-  updatedBy    User          @relation("UpdatedDocuments", fields: [updatedById], references: [id])
-  folder       Folder?       @relation(fields: [folderId], references: [id], onDelete: SetNull)
-  versions     Version[]
-  mediaUsages  MediaUsage[]
-  contentLocks ContentLock[]
-
-  @@unique([collection, slug])
-  @@index([collection])
-  @@index([status])
-  @@index([deletedAt])
-  @@index([publishedAt])
-  @@index([folderId])
-  @@index([scheduledAt])
-  @@index([localeGroupId])
-  @@index([createdById])
-  @@map("actuate_documents")
-}
-
-model Version {
-  id          String     @id @default(cuid())
-  documentId  String
-  data        Json
-  changedById String
-  changeType  ChangeType
-  createdAt   DateTime   @default(now())
-
-  document  Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
-  changedBy User     @relation(fields: [changedById], references: [id])
-
-  @@index([documentId])
-  @@map("actuate_versions")
-}
-
-model Media {
-  id           String   @id @default(cuid())
-  filename     String
-  storageKey   String   @unique
-  mimeType     String
-  fileSize     Int
-  width        Int?
-  height       Int?
-  altText      String?
-  title        String?
-  uploadedById String
-  focalPointX  Float?
-  focalPointY  Float?
-  blurHash     String?
-  aiAltText    String?
-  aiTags       Json?
-  aiDescription String?
-  folderId     String?
-  createdAt    DateTime @default(now())
-  updatedAt    DateTime @updatedAt
-
-  uploadedBy  User         @relation(fields: [uploadedById], references: [id])
-  folder      Folder?      @relation(fields: [folderId], references: [id], onDelete: SetNull)
-  mediaUsages MediaUsage[]
-
-  @@index([folderId])
-  @@map("actuate_media")
-}
-
-model MediaUsage {
-  id         String   @id @default(cuid())
-  mediaId    String
-  documentId String
-  fieldName  String
-  createdAt  DateTime @default(now())
-
-  media    Media    @relation(fields: [mediaId], references: [id], onDelete: Cascade)
-  document Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
-
-  @@unique([mediaId, documentId, fieldName])
-  @@index([documentId])
-  @@map("actuate_media_usages")
-}
-
-model ContentLock {
-  id         String   @id @default(cuid())
-  documentId String
-  userId     String
-  lockedAt   DateTime @default(now())
-  expiresAt  DateTime
-
-  document Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
-  user     User     @relation(fields: [userId], references: [id])
-
-  @@map("actuate_content_locks")
-}
-
-model InAppNotification {
-  id        String   @id @default(cuid())
-  userId    String
-  type      String
-  title     String
-  message   String?
-  link      String?
-  read      Boolean  @default(false)
-  createdAt DateTime @default(now())
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@map("actuate_notifications")
-}
-
-model ContentTemplate {
-  id           String   @id @default(cuid())
-  name         String
-  collection   String
-  templateData Json
-  createdById  String
-  createdAt    DateTime @default(now())
-  updatedAt    DateTime @updatedAt
-
-  createdBy User @relation(fields: [createdById], references: [id])
-
-  @@map("actuate_content_templates")
-}
-
-model Site {
-  id              String   @id @default(cuid())
-  domain          String   @unique
-  name            String
-  configOverrides Json?
-  isDefault       Boolean  @default(false)
-  createdAt       DateTime @default(now())
-  updatedAt       DateTime @updatedAt
-
-  @@map("actuate_sites")
-}
-
-model WorkflowState {
-  id           String   @id @default(cuid())
-  documentId   String   @unique
-  currentStep  Int      @default(0)
-  assignedToId String?
-  status       String   @default("pending")
-  definition   Json
-  createdAt    DateTime @default(now())
-  updatedAt    DateTime @updatedAt
-
-  assignedTo User? @relation(fields: [assignedToId], references: [id])
-
-  @@map("actuate_workflow_states")
-}
-
-model Redirect {
-  id          String   @id @default(cuid())
-  source      String
-  destination String
-  statusCode  Int      @default(301)
-  isRegex     Boolean  @default(false)
-  notes       String?
-  createdAt   DateTime @default(now())
-  updatedAt   DateTime @updatedAt
-
-  @@unique([source])
-  @@map("actuate_redirects")
-}
-
-model FormSubmission {
-  id          String   @id @default(cuid())
-  formId      String
-  data        Json
-  attribution Json?
-  status      String   @default("new")
-  submittedAt DateTime @default(now())
-  createdAt   DateTime @default(now())
-
-  @@index([formId])
-  @@index([status])
-  @@map("actuate_form_submissions")
-}
-
-model BackupRecord {
-  id         String   @id @default(cuid())
-  filename   String
-  storageKey String
-  sizeBytes  Int
-  type       String
-  metadata   Json?
-  createdAt  DateTime @default(now())
-
-  @@map("actuate_backup_records")
-}
-
-model WebhookEndpoint {
-  id        String   @id @default(cuid())
-  url       String
-  events    Json
-  secret    String
-  active    Boolean  @default(true)
-  name      String?
-  createdAt DateTime @default(now())
-  updatedAt DateTime @updatedAt
-
-  deliveries WebhookDeliveryLog[]
-
-  @@map("actuate_webhook_endpoints")
-}
-
-model WebhookDeliveryLog {
-  id             String   @id @default(cuid())
-  endpointId     String
-  event          String
-  payload        Json
-  status         String   @default("pending")
-  attempts       Int      @default(0)
-  maxAttempts    Int      @default(3)
-  lastAttemptAt  DateTime?
-  nextRetryAt    DateTime?
-  responseStatus Int?
-  responseBody   String?
-  createdAt      DateTime @default(now())
-
-  endpoint WebhookEndpoint @relation(fields: [endpointId], references: [id], onDelete: Cascade)
-
-  @@index([endpointId])
-  @@index([status])
-  @@index([nextRetryAt])
-  @@map("actuate_webhook_deliveries")
-}
-
-model PasswordResetToken {
-  id        String    @id @default(cuid())
-  userId    String
-  tokenHash String
-  expiresAt DateTime
-  usedAt    DateTime?
-  createdAt DateTime  @default(now())
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@index([tokenHash])
-  @@index([userId])
-  @@map("actuate_password_reset_tokens")
-}
-
-model ScriptTag {
-  id          String   @id @default(cuid())
-  name        String
-  code        String   @db.Text
-  placement   String
-  scope       String
-  targetPaths String[]
-  priority    Int      @default(100)
-  enabled     Boolean  @default(true)
-  createdAt   DateTime @default(now())
-  updatedAt   DateTime @updatedAt
-
-  @@index([enabled])
-  @@index([placement])
-  @@map("actuate_script_tags")
-}
-
-model PageTemplate {
-  id          String   @id @default(cuid())
-  name        String
-  description String?
-  category    String   @default("content")
-  tree        Json
-  thumbnail   String?
-  builtIn     Boolean  @default(false)
-  createdAt   DateTime @default(now())
-  updatedAt   DateTime @updatedAt
-
-  @@index([category])
-  @@index([builtIn])
-  @@map("actuate_page_templates")
-}
-
-model SavedSection {
-  id          String   @id @default(cuid())
-  name        String
-  description String?
-  category    String   @default("content")
-  tree        Json
-  thumbnail   String?
-  usageCount  Int      @default(0)
-  createdAt   DateTime @default(now())
-  updatedAt   DateTime @updatedAt
-
-  @@index([category])
-  @@map("actuate_saved_sections")
-}
+generator client {
+  provider = "prisma-client"
+  output   = "../generated"
+  // `relationJoins` is the Preview-feature flag that makes
+  // `relationLoadStrategy: 'join'` a recognised argument on
+  // findUnique / findMany / findFirst. Without it the option is
+  // silently rejected as an "Unknown argument" by Prisma — which
+  // is how the optimisation in PR #132 (dashboard recent-docs +
+  // versions list + bench `doc_get`) went unnoticed in production:
+  // `safeFindMany` swallowed the rejection and returned `[]`, the
+  // versions endpoint returned 500, and the bench reported "100/100
+  // errors" with no attached cause. Phase 5.5 #5 surfaced the
+  // failure once the bench harness started recording the first
+  // error message.
+  //
+  // The feature has been Preview since Prisma 5.7 and is documented
+  // at https://www.prisma.io/docs/orm/prisma-client/queries/relation-queries#relation-load-strategies
+  previewFeatures = ["fullTextSearchPostgres", "relationJoins"]
+}
+
+datasource db {
+  provider = "postgresql"
+}
+
+// ─── Enums ──────────────────────────────────────────────────────────
+
+enum DocumentStatus {
+  DRAFT
+  PUBLISHED
+  ARCHIVED
+  SCHEDULED
+  SCHEDULED_UNPUBLISH
+}
+
+enum UserRole {
+  ADMIN
+  EDITOR
+  AUTHOR
+  CLIENT
+}
+
+enum ChangeType {
+  CREATE
+  UPDATE
+  PUBLISH
+  RESTORE
+  DELETE
+}
+
+enum AuditEvent {
+  login_success
+  login_failed
+  logout
+  password_change
+  password_reset_request
+  password_reset_complete
+  totp_enabled
+  totp_disabled
+  api_key_created
+  api_key_revoked
+  document_created
+  document_updated
+  document_published
+  document_deleted
+  media_uploaded
+  media_deleted
+  user_created
+  user_updated
+  user_deactivated
+  settings_changed
+  version_restored
+  export_requested
+  import_completed
+}
+
+enum NotificationType {
+  DOCUMENT_PUBLISHED
+  DOCUMENT_ASSIGNED
+  REVIEW_REQUESTED
+  REVIEW_APPROVED
+  COMMENT_ADDED
+  SYSTEM_ALERT
+  WORKFLOW_STEP
+}
+
+enum OrderStatus {
+  PENDING
+  CONFIRMED
+  PROCESSING
+  SHIPPED
+  DELIVERED
+  CANCELLED
+  REFUNDED
+}
+
+enum PaymentStatus {
+  PENDING
+  AUTHORIZED
+  CAPTURED
+  FAILED
+  REFUNDED
+  PARTIALLY_REFUNDED
+}
+
+enum WorkflowStage {
+  DRAFT
+  IN_REVIEW
+  APPROVED
+  PUBLISHED
+  ARCHIVED
+}
+
+enum DiscountType {
+  PERCENTAGE
+  FIXED_AMOUNT
+  FREE_SHIPPING
+}
+
+enum ProductType {
+  PHYSICAL
+  DIGITAL
+  SUBSCRIPTION
+  BUNDLE
+}
+
+// ─── Models ─────────────────────────────────────────────────────────
+
+model User {
+  id            String    @id @default(cuid())
+  email         String    @unique
+  name          String
+  avatarUrl     String?
+  role          UserRole  @default(AUTHOR)
+  passwordHash  String?
+  totpSecret    String?
+  totpEnabled   Boolean   @default(false)
+  backupCodes   Json?
+  authProvider  String?
+  isActive      Boolean   @default(true)
+  isApproved    Boolean   @default(false)
+  emailVerified Boolean   @default(false)
+  lastLoginAt   DateTime?
+  createdAt     DateTime  @default(now())
+  updatedAt     DateTime  @updatedAt
+
+  sessions              Session[]
+  oauthAccounts         OAuthAccount[]
+  apiKeys               ApiKey[]
+  documents             Document[]       @relation("CreatedDocuments")
+  updatedDocuments      Document[]       @relation("UpdatedDocuments")
+  versions              Version[]
+  media                 Media[]
+  contentLocks          ContentLock[]
+  notifications         InAppNotification[]
+  contentTemplates      ContentTemplate[]
+  workflowAssigned      WorkflowState[]
+  passwordResetTokens   PasswordResetToken[]
+
+  @@map("actuate_users")
+}
+
+model OAuthAccount {
+  id                String   @id @default(cuid())
+  userId            String
+  provider          String
+  providerAccountId String
+  accessToken       String?
+  refreshToken      String?
+  expiresAt         DateTime?
+  createdAt         DateTime @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([provider, providerAccountId])
+  @@map("actuate_oauth_accounts")
+}
+
+model Session {
+  id              String    @id @default(cuid())
+  userId          String
+  token           String    @unique
+  expiresAt       DateTime
+  revokedAt       DateTime?
+  ipAddress       String?
+  userAgent       String?
+  fingerprintHash String?
+  createdAt       DateTime  @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([expiresAt])
+  @@map("actuate_sessions")
+}
+
+model ApiKey {
+  id             String    @id @default(cuid())
+  name           String
+  keyHash        String    @unique
+  keyPrefix      String
+  userId         String
+  scopes         Json
+  ipRestrictions Json?
+  expiresAt      DateTime?
+  lastUsedAt     DateTime?
+  revokedAt      DateTime?
+  createdAt      DateTime  @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("actuate_api_keys")
+}
+
+model AuditLog {
+  id        String   @id @default(cuid())
+  event     String
+  userId    String?
+  ipAddress String?
+  userAgent String?
+  details   Json?
+  timestamp DateTime @default(now())
+
+  @@index([event])
+  @@index([userId])
+  @@index([timestamp])
+  @@map("actuate_audit_logs")
+}
+
+model Folder {
+  id        String   @id @default(cuid())
+  name      String
+  scope     String
+  parentId  String?
+  position  Int      @default(0)
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  parent   Folder?  @relation("FolderTree", fields: [parentId], references: [id], onDelete: Cascade)
+  children Folder[] @relation("FolderTree")
+
+  documents Document[]
+  media     Media[]
+
+  @@index([scope])
+  @@index([parentId])
+  @@map("actuate_folders")
+}
+
+model Document {
+  id                    String         @id @default(cuid())
+  collection            String
+  title                 String?
+  slug                  String?
+  data                  Json
+  status                DocumentStatus @default(DRAFT)
+  locale                String?
+  localeGroupId         String?
+  createdById           String
+  updatedById           String
+  publishedAt           DateTime?
+  scheduledAt           DateTime?
+  scheduledUnpublishAt  DateTime?
+  deletedAt             DateTime?
+  searchVector          String?
+  plainText             String?
+  contentHash           String?
+  structuredData        Json?
+  contentGraph          Json?
+  siteId                String?
+  templateId            String?
+  workflowStage         WorkflowStage  @default(DRAFT)
+  reviewerId            String?
+  reviewNote            String?
+  folderId              String?
+  createdAt             DateTime       @default(now())
+  updatedAt             DateTime       @updatedAt
+
+  createdBy    User          @relation("CreatedDocuments", fields: [createdById], references: [id])
+  updatedBy    User          @relation("UpdatedDocuments", fields: [updatedById], references: [id])
+  folder       Folder?       @relation(fields: [folderId], references: [id], onDelete: SetNull)
+  versions     Version[]
+  mediaUsages  MediaUsage[]
+  contentLocks ContentLock[]
+
+  @@unique([collection, slug])
+  @@index([collection])
+  @@index([status])
+  @@index([deletedAt])
+  @@index([publishedAt])
+  @@index([folderId])
+  @@index([scheduledAt])
+  @@index([localeGroupId])
+  @@index([createdById])
+  @@map("actuate_documents")
+}
+
+model Version {
+  id          String     @id @default(cuid())
+  documentId  String
+  data        Json
+  changedById String
+  changeType  ChangeType
+  createdAt   DateTime   @default(now())
+
+  document  Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
+  changedBy User     @relation(fields: [changedById], references: [id])
+
+  @@index([documentId])
+  @@map("actuate_versions")
+}
+
+model Media {
+  id           String   @id @default(cuid())
+  filename     String
+  storageKey   String   @unique
+  mimeType     String
+  fileSize     Int
+  width        Int?
+  height       Int?
+  altText      String?
+  title        String?
+  uploadedById String
+  focalPointX  Float?
+  focalPointY  Float?
+  blurHash     String?
+  aiAltText    String?
+  aiTags       Json?
+  aiDescription String?
+  folderId     String?
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  uploadedBy  User         @relation(fields: [uploadedById], references: [id])
+  folder      Folder?      @relation(fields: [folderId], references: [id], onDelete: SetNull)
+  mediaUsages MediaUsage[]
+
+  @@index([folderId])
+  @@map("actuate_media")
+}
+
+model MediaUsage {
+  id         String   @id @default(cuid())
+  mediaId    String
+  documentId String
+  fieldName  String
+  createdAt  DateTime @default(now())
+
+  media    Media    @relation(fields: [mediaId], references: [id], onDelete: Cascade)
+  document Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
+
+  @@unique([mediaId, documentId, fieldName])
+  @@index([documentId])
+  @@map("actuate_media_usages")
+}
+
+model ContentLock {
+  id         String   @id @default(cuid())
+  documentId String
+  userId     String
+  lockedAt   DateTime @default(now())
+  expiresAt  DateTime
+
+  document Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
+  user     User     @relation(fields: [userId], references: [id])
+
+  @@map("actuate_content_locks")
+}
+
+model InAppNotification {
+  id        String   @id @default(cuid())
+  userId    String
+  type      String
+  title     String
+  message   String?
+  link      String?
+  read      Boolean  @default(false)
+  createdAt DateTime @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("actuate_notifications")
+}
+
+model ContentTemplate {
+  id           String   @id @default(cuid())
+  name         String
+  collection   String
+  templateData Json
+  createdById  String
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  createdBy User @relation(fields: [createdById], references: [id])
+
+  @@map("actuate_content_templates")
+}
+
+model Site {
+  id              String   @id @default(cuid())
+  domain          String   @unique
+  name            String
+  configOverrides Json?
+  isDefault       Boolean  @default(false)
+  createdAt       DateTime @default(now())
+  updatedAt       DateTime @updatedAt
+
+  @@map("actuate_sites")
+}
+
+model WorkflowState {
+  id           String   @id @default(cuid())
+  documentId   String   @unique
+  currentStep  Int      @default(0)
+  assignedToId String?
+  status       String   @default("pending")
+  definition   Json
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  assignedTo User? @relation(fields: [assignedToId], references: [id])
+
+  @@map("actuate_workflow_states")
+}
+
+model Redirect {
+  id          String   @id @default(cuid())
+  source      String
+  destination String
+  statusCode  Int      @default(301)
+  isRegex     Boolean  @default(false)
+  notes       String?
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@unique([source])
+  @@map("actuate_redirects")
+}
+
+model FormSubmission {
+  id          String   @id @default(cuid())
+  formId      String
+  data        Json
+  attribution Json?
+  status      String   @default("new")
+  submittedAt DateTime @default(now())
+  createdAt   DateTime @default(now())
+
+  @@index([formId])
+  @@index([status])
+  @@map("actuate_form_submissions")
+}
+
+model BackupRecord {
+  id         String   @id @default(cuid())
+  filename   String
+  storageKey String
+  sizeBytes  Int
+  type       String
+  metadata   Json?
+  createdAt  DateTime @default(now())
+
+  @@map("actuate_backup_records")
+}
+
+model WebhookEndpoint {
+  id        String   @id @default(cuid())
+  url       String
+  events    Json
+  secret    String
+  active    Boolean  @default(true)
+  name      String?
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  deliveries WebhookDeliveryLog[]
+
+  @@map("actuate_webhook_endpoints")
+}
+
+model WebhookDeliveryLog {
+  id             String   @id @default(cuid())
+  endpointId     String
+  event          String
+  payload        Json
+  status         String   @default("pending")
+  attempts       Int      @default(0)
+  maxAttempts    Int      @default(3)
+  lastAttemptAt  DateTime?
+  nextRetryAt    DateTime?
+  responseStatus Int?
+  responseBody   String?
+  createdAt      DateTime @default(now())
+
+  endpoint WebhookEndpoint @relation(fields: [endpointId], references: [id], onDelete: Cascade)
+
+  @@index([endpointId])
+  @@index([status])
+  @@index([nextRetryAt])
+  @@map("actuate_webhook_deliveries")
+}
+
+model PasswordResetToken {
+  id        String    @id @default(cuid())
+  userId    String
+  tokenHash String
+  expiresAt DateTime
+  usedAt    DateTime?
+  createdAt DateTime  @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([tokenHash])
+  @@index([userId])
+  @@map("actuate_password_reset_tokens")
+}
+
+model ScriptTag {
+  id          String   @id @default(cuid())
+  name        String
+  code        String   @db.Text
+  placement   String
+  scope       String
+  targetPaths String[]
+  priority    Int      @default(100)
+  enabled     Boolean  @default(true)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([enabled])
+  @@index([placement])
+  @@map("actuate_script_tags")
+}
+
+model PageTemplate {
+  id          String   @id @default(cuid())
+  name        String
+  description String?
+  category    String   @default("content")
+  tree        Json
+  thumbnail   String?
+  builtIn     Boolean  @default(false)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([category])
+  @@index([builtIn])
+  @@map("actuate_page_templates")
+}
+
+model SavedSection {
+  id          String   @id @default(cuid())
+  name        String
+  description String?
+  category    String   @default("content")
+  tree        Json
+  thumbnail   String?
+  usageCount  Int      @default(0)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([category])
+  @@map("actuate_saved_sections")
+}