@allbluecn/database 0.6.0 → 0.9.0

package/schema.prisma

@@ -44,6 +44,7 @@ model User {
   aiProvider String? // "openrouter" | "openai"
   aiApiKey   String? // 用户 AI API Key（TODO: 加密存储）
   aiModel    String? // 默认 "openai/gpt-4o-mini"
+  aiSourceMode String? // 模型来源模式：hosted | local-agent | byok；null = 未选择（默认 byok 行为）
   locale     String? // 用户语言偏好（zh / en），null 表示未设置
 
   storyDisplayOptions Json? // Story Display Options 个人偏好（URL 无参数时的默认值，跨设备持久化）
@@ -60,6 +61,8 @@ model User {
   invitationUses                InvitationUse[]
   loginLogs                     LoginLog[]
   passwordResetTokens           PasswordResetToken[]
+  emailVerificationTokens       EmailVerificationToken[]
+  emailPreference               EmailPreference?
   prds                          PRD[]
   tags                          Tag[]
   knowledgeBases                KnowledgeBase[]
@@ -73,48 +76,53 @@ model User {
   articleFavorites              ArticleFavorite[]
   anyhubApps                    AnyHubApp[]
   anyhubMarketApps              AnyHubMarketApp[]
-  reviewedAnyhubRecommendations AnyHubRecommendation[]  @relation("reviewedAnyhubRecommendations")
+  reviewedAnyhubRecommendations AnyHubRecommendation[]   @relation("reviewedAnyhubRecommendations")
   anyhubRecommenders            AnyHubRecommender[]
   prdVersions                   PRDVersion[]
   reviewComments                ReviewComment[]
   comments                      Comment[]
   commentIgnores                CommentIgnore[]
-  reviews                       Review[]                @relation("reviewer")
+  reviews                       Review[]                 @relation("reviewer")
   designProjects                DesignProject[]
-  storiesCreated                Story[]                 @relation("storyCreator")
-  storiesAssigned               Story[]                 @relation("storyAssignee")
-  storiesEdited                 Story[]                 @relation("storyEditor")
-  iterationsCreated             Iteration[]             @relation("iterationCreator")
-  labelsCreated                 Label[]                 @relation("labelCreator")
-  storyActivities               StoryActivity[]         @relation("storyActivityUser")
-  storyComments                 StoryComment[]          @relation("storyCommentUser")
-  storyReactions                StoryReaction[]         @relation("storyReactionUser")
-  commentReactions              CommentReaction[]       @relation("commentReactionUser")
+  storiesCreated                Story[]                  @relation("storyCreator")
+  storiesAssigned               Story[]                  @relation("storyAssignee")
+  storiesEdited                 Story[]                  @relation("storyEditor")
+  iterationsCreated             Iteration[]              @relation("iterationCreator")
+  labelsCreated                 Label[]                  @relation("labelCreator")
+  storyActivities               StoryActivity[]          @relation("storyActivityUser")
+  storyComments                 StoryComment[]           @relation("storyCommentUser")
+  storyReactions                StoryReaction[]          @relation("storyReactionUser")
+  commentReactions              CommentReaction[]        @relation("commentReactionUser")
   storyFilterViews              StoryFilterView[]
   chatThreads                   ChatThread[]
   aiProviderConfigs             AiProviderConfig[]
   agentConversations            AgentConversation[]
-  ownedProjects                 Project[]               @relation("projectOwner")
+  ownedProjects                 Project[]                @relation("projectOwner")
   projectMemberships            ProjectMember[]
   projectActivities             ProjectActivity[]
-  ownedWorkspaces               Workspace[]             @relation("workspaceOwner")
-  workspaceMemberships          TeamMembership[]        @relation("teamOwner")
-  teamJoined                    TeamMembership?         @relation("teamMember")
+  ownedWorkspaces               Workspace[]              @relation("workspaceOwner")
+  workspaceMemberships          TeamMembership[]         @relation("teamOwner")
+  teamJoined                    TeamMembership?          @relation("teamMember")
   workspaceMembers              WorkspaceMember[]
-  sentInvitations               TeamInvitation[]        @relation("invitationOwner")
-  ownedJoinRequests             TeamJoinRequest[]       @relation("joinRequestOwner")
-  applicantJoinRequests         TeamJoinRequest[]       @relation("joinRequestApplicant")
+  sentInvitations               TeamInvitation[]         @relation("invitationOwner")
+  ownedJoinRequests             TeamJoinRequest[]        @relation("joinRequestOwner")
+  applicantJoinRequests         TeamJoinRequest[]        @relation("joinRequestApplicant")
   aiUsageLogs                   AiUsageLog[]
   agents                        UserAgent[]
   skills                        UserSkill[]
   notifications                 Notification[]
   notificationPreference        NotificationPreference?
 
-  issuedLicenses  LicenseKey[]     @relation("LicenseIssuer")
-  ssoMappings     SsoMapping[]
-  roleAssignments RoleAssignment[]
-  subscription    Subscription?
+  issuedLicenses   LicenseKey[]           @relation("LicenseIssuer")
+  ssoMappings      SsoMapping[]
+  codeSnippets     CodeSnippet[]
+  roleAssignments  RoleAssignment[]
+  subscription     Subscription?
   createdQuickDocs WorkspaceQuickDoc[]
+  plugins          HarnessPlugin[]
+  harnessWorkspaces HarnessWorkspace[]
+  agentBindings    BusinessAgentBinding[]
+  blobs            Blob[]
 
   @@map("users")
 }
@@ -186,22 +194,22 @@ model ProjectMember {
 
 // 工作空间（项目的上一级容器）
 model Workspace {
-  id              String            @id @default(cuid())
-  name            String
-  icon            String            @default("folder")
-  description     String?
-  pinnedToSidebar Boolean           @default(false)
-  ownerId         String
-  owner           User              @relation("workspaceOwner", fields: [ownerId], references: [id])
-  projects        Project[]
-  members         WorkspaceMember[]
-  knowledgeBases        KnowledgeBase[]
-  workspaceKbLinks      WorkspaceKnowledgeBase[]
-  quickDocs             WorkspaceQuickDoc[]
-  usageRecords          UsageRecord[]
-  aiUsageLogs     AiUsageLog[]
-  createdAt       DateTime          @default(now())
-  updatedAt       DateTime          @updatedAt
+  id               String                   @id @default(cuid())
+  name             String
+  icon             String                   @default("folder")
+  description      String?
+  pinnedToSidebar  Boolean                  @default(false)
+  ownerId          String
+  owner            User                     @relation("workspaceOwner", fields: [ownerId], references: [id])
+  projects         Project[]
+  members          WorkspaceMember[]
+  knowledgeBases   KnowledgeBase[]
+  workspaceKbLinks WorkspaceKnowledgeBase[]
+  quickDocs        WorkspaceQuickDoc[]
+  usageRecords     UsageRecord[]
+  aiUsageLogs      AiUsageLog[]
+  createdAt        DateTime                 @default(now())
+  updatedAt        DateTime                 @updatedAt
 
   ssoProviders SsoProvider[]
   customRoles  CustomRole[]
@@ -305,12 +313,13 @@ model ProjectActivity {
 
 // 对话线程（作为 TanStack AI persistence threadId）
 model ChatThread {
-  id         String   @id @default(cuid())
-  userId     String
-  title      String?
-  isArchived Boolean  @default(false)
-  createdAt  DateTime @default(now())
-  updatedAt  DateTime @updatedAt
+  id            String   @id @default(cuid())
+  userId        String
+  title         String?
+  isArchived    Boolean  @default(false)
+  sandboxPolicy String   @default("readonly")
+  createdAt     DateTime @default(now())
+  updatedAt     DateTime @updatedAt
 
   user        User            @relation(fields: [userId], references: [id], onDelete: Cascade)
   messages    ChatMessage[]
@@ -319,6 +328,8 @@ model ChatThread {
   generations GenerationRun[]
   agentId     String?
   agent       UserAgent?      @relation(fields: [agentId], references: [id])
+  workspaceId String?
+  workspace   HarnessWorkspace? @relation(fields: [workspaceId], references: [id], onDelete: SetNull)
 
   @@index([userId, updatedAt])
   @@map("chat_threads")
@@ -326,14 +337,15 @@ model ChatThread {
 
 // 对话消息（TanStack AI messages store）
 model ChatMessage {
-  id        String   @id @default(cuid())
-  threadId  String
-  role      String // "user" | "assistant" | "tool"
-  content   String   @db.Text
-  parts     Json?
-  thinking  String?  @db.Text
-  citations Json?
-  createdAt DateTime @default(now())
+  id         String   @id @default(cuid())
+  threadId   String
+  role       String // "user" | "assistant" | "tool"
+  content    Json? // string | ContentPart[] | null — round-trip 无损
+  parts      Json? // toolCalls（assistant 调用工具时）
+  thinking   String?  @db.Text
+  citations  Json?
+  toolCallId String?
+  createdAt  DateTime @default(now())
 
   thread ChatThread @relation(fields: [threadId], references: [id], onDelete: Cascade)
 
@@ -343,15 +355,18 @@ model ChatMessage {
 
 // 运行记录（TanStack AI runs store）
 model ChatRun {
-  id            String    @id @default(cuid())
-  threadId      String
-  userId        String
-  status        String // running | completed | failed | aborted | interrupted
-  startedAt     DateTime  @default(now())
-  finishedAt    DateTime?
-  detachedSince DateTime?
-  usage         Json?
-  error         String?   @db.Text
+  id              String    @id @default(cuid())
+  threadId        String
+  userId          String
+  status          String // running | completed | failed | aborted | interrupted
+  startedAt       DateTime  @default(now())
+  finishedAt      DateTime?
+  detachedSince   DateTime?
+  usage           Json?
+  error           String?   @db.Text
+  sandboxKey      String?
+  cancelRequested Boolean?
+  driverEpoch     Int?
 
   thread     ChatThread      @relation(fields: [threadId], references: [id], onDelete: Cascade)
   interrupts ChatInterrupt[]
@@ -363,17 +378,18 @@ model ChatRun {
 
 // 中断记录（TanStack AI interrupts store）
 model ChatInterrupt {
-  id         String    @id @default(cuid())
-  runId      String
-  threadId   String
-  userId     String
-  kind       String // tool-approval | generic
-  toolName   String?
-  state      String // pending | resolved | cancelled
-  payload    Json?
-  resolution Json?
-  createdAt  DateTime  @default(now())
-  resolvedAt DateTime?
+  id          String    @id @default(cuid())
+  runId       String
+  threadId    String
+  userId      String
+  kind        String // tool-approval | generic
+  toolName    String?
+  state       String // pending | resolved | cancelled
+  payload     Json?
+  resolution  Json?
+  requestedAt DateTime  @default(now())
+  createdAt   DateTime  @default(now())
+  resolvedAt  DateTime?
 
   run    ChatRun    @relation(fields: [runId], references: [id], onDelete: Cascade)
   thread ChatThread @relation(fields: [threadId], references: [id], onDelete: Cascade)
@@ -383,6 +399,100 @@ model ChatInterrupt {
   @@map("chat_interrupts")
 }
 
+// TanStack AI persistence metadata store（compaction checkpoint / ChatProjection 等）
+// namespace 由消费方（中间件）自带，如 "compaction"、"projection.todos"
+model ChatPersistenceMeta {
+  namespace String
+  key       String
+  value     Json
+  updatedAt DateTime @updatedAt
+
+  @@unique([namespace, key])
+  @@map("chat_persistence_meta")
+}
+
+// dsh（DeepSeek-Harness）兼容插件（设计 v8 ADR 21：插件定义 DB 持久化，运行态随页面）
+model HarnessPlugin {
+  id         String   @id @default(cuid())
+  userId     String
+  name       String
+  purpose    String   @db.Text
+  codeHost   String?  @db.Text
+  codeClient String?  @db.Text
+  // plugin_define 求值后插件经 harness.defineTool 上报的工具定义（JSON Schema 数组）
+  tools      Json     @default("[]")
+  version    Int      @default(1)
+  // defined | running | stopped | error
+  status     String   @default("defined")
+  lastError  String?  @db.Text
+  createdAt  DateTime @default(now())
+  updatedAt  DateTime @updatedAt
+  isDeleted  Boolean  @default(false)
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([userId, name])
+  @@index([userId])
+  @@map("harness_plugins")
+}
+
+// P2 提示词平台：系统提示词模板（DB 版本化，服务端唯一来源）
+model SystemPromptTemplate {
+  id          String                @id @default(cuid())
+  key         String                @unique
+  name        String
+  description String?
+  sections    Json                  @default("[]")
+  variables   Json                  @default("[]")
+  version     Int                   @default(1)
+  isActive    Boolean               @default(true)
+  isProtected Boolean               @default(false)
+  updatedBy   String?
+  createdAt   DateTime              @default(now())
+  updatedAt   DateTime              @updatedAt
+  versions    SystemPromptVersion[]
+
+  @@map("system_prompt_templates")
+}
+
+// P2 提示词平台：系统提示词模板的历史版本快照。
+// 设计取舍：仅快照 sections（真正发给 LLM 的提示词主体）；variables 作为
+// 元数据随模板演进不纳入版本管理——回滚只还原提示词文本，变量声明由模板表当前值兜底。
+model SystemPromptVersion {
+  id         String               @id @default(cuid())
+  templateId String
+  template   SystemPromptTemplate @relation(fields: [templateId], references: [id], onDelete: Cascade)
+  version    Int
+  sections   Json
+  note       String?
+  createdBy  String?
+  createdAt  DateTime             @default(now())
+
+  @@unique([templateId, version])
+  @@map("system_prompt_versions")
+}
+
+// P2 异构多智能体：板块 agent 绑定（三级链第①级：板块绑定 > 用户默认 > 系统默认）。
+// 设计取舍：① 硬删（无独立业务生命周期，upsert/deleteMany 管理）而非 isDeleted 软删；
+// ② workspaceId 为跨工作区绑定的预留字段，当前不建 relation——bizKey 已表达业务作用域，
+//    工作区级绑定待 P3 启用时再补 relation + 索引。
+model BusinessAgentBinding {
+  id          String   @id @default(cuid())
+  userId      String
+  bizKey      String
+  agentId     String
+  workspaceId String?
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  agent UserAgent @relation(fields: [agentId], references: [id], onDelete: Cascade)
+  user  User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([userId, bizKey])
+  @@index([userId])
+  @@map("business_agent_bindings")
+}
+
 // 媒体生成记录（占位，本轮建表不接入业务）
 model GenerationRun {
   id         String    @id @default(cuid())
@@ -393,9 +503,15 @@ model GenerationRun {
   input      Json?
   result     Json?
   artifactId String?
+  activity   String? // 官方 GenerationRunRecord 视角：chat|image|audio|tts|video|transcription|sandbox
+  provider   String?
+  model      String?
+  artifacts  Json?
+  usage      Json?
   error      String?   @db.Text
   startedAt  DateTime  @default(now())
   finishedAt DateTime?
+  linkedTarget Json? // P4d 回流标记 { kind: story|kb|prd, targetId, at }，最近一次（覆盖）
 
   thread ChatThread @relation(fields: [threadId], references: [id], onDelete: Cascade)
 
@@ -422,12 +538,14 @@ model LoginLog {
 
 // 邀请码
 model InvitationCode {
-  id        String   @id @default(cuid())
-  code      String   @unique
-  maxUses   Int      @default(1)
-  usedCount Int      @default(0)
-  expiresAt DateTime
-  createdAt DateTime @default(now())
+  id          String    @id @default(cuid())
+  code        String    @unique
+  maxUses     Int       @default(1)
+  usedCount   Int       @default(0)
+  expiresAt   DateTime
+  createdAt   DateTime  @default(now())
+  createdById String?
+  disabledAt  DateTime?
 
   uses InvitationUse[]
 
@@ -461,6 +579,82 @@ model PasswordResetToken {
   @@map("password_reset_tokens")
 }
 
+// 邮箱验证令牌
+model EmailVerificationToken {
+  id        String    @id @default(cuid())
+  token     String    @unique
+  userId    String
+  expiresAt DateTime
+  usedAt    DateTime?
+  createdAt DateTime  @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("email_verification_tokens")
+}
+
+// 出站邮件日志
+model EmailLog {
+  id          String    @id @default(cuid())
+  to          String
+  templateKey String
+  category    String
+  status      String
+  provider    String
+  messageId   String?
+  dedupeKey   String?   @unique
+  error       String?
+  userId      String?
+  createdAt   DateTime  @default(now())
+  sentAt      DateTime?
+
+  @@index([to, createdAt])
+  @@index([userId, createdAt])
+  @@index([status])
+  @@map("email_logs")
+}
+
+// 用户邮件偏好
+model EmailPreference {
+  userId                 String  @id
+  unsubscribedAll        Boolean @default(false)
+  unsubscribedCategories Json    @default("[]")
+  suppressed             Boolean @default(false)
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@map("email_preferences")
+}
+
+// 第三方登录配置（admin 后台维护）
+model OAuthProviderConfig {
+  id           String   @id @default(cuid())
+  provider     String   @unique
+  clientId     String
+  clientSecret String // AES-256-GCM 密文
+  enabled      Boolean  @default(false)
+  extra        Json?
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  @@map("oauth_provider_configs")
+}
+
+// 产品更新订阅者（changelog）
+model EmailSubscriber {
+  id             String    @id @default(cuid())
+  email          String    @unique
+  locale         String    @default("zh")
+  confirmToken   String    @unique
+  confirmedAt    DateTime?
+  unsubscribedAt DateTime?
+  source         String    @default("changelog")
+  createdAt      DateTime  @default(now())
+
+  @@index([confirmedAt, unsubscribedAt])
+  @@map("email_subscribers")
+}
+
 enum Role {
   SUPER_ADMIN
   ADMIN
@@ -512,10 +706,10 @@ model KnowledgeBase {
   createdAt       DateTime @default(now())
   updatedAt       DateTime @updatedAt
 
-  user         User                   @relation(fields: [userId], references: [id], onDelete: Cascade)
-  workspace    Workspace?             @relation(fields: [workspaceId], references: [id], onDelete: SetNull)
-  documents    KnowledgeDocument[]
-  projectLinks ProjectKnowledgeBase[]
+  user           User                     @relation(fields: [userId], references: [id], onDelete: Cascade)
+  workspace      Workspace?               @relation(fields: [workspaceId], references: [id], onDelete: SetNull)
+  documents      KnowledgeDocument[]
+  projectLinks   ProjectKnowledgeBase[]
   workspaceLinks WorkspaceKnowledgeBase[]
 
   @@index([userId])
@@ -540,11 +734,11 @@ model KnowledgeDocument {
   createdAt  DateTime @default(now())
   updatedAt  DateTime @updatedAt
 
-  kb            KnowledgeBase       @relation(fields: [kbId], references: [id], onDelete: Cascade)
-  parent        KnowledgeDocument?  @relation("DocumentTree", fields: [parentId], references: [id], onDelete: SetNull)
-  children      KnowledgeDocument[] @relation("DocumentTree")
-  creator       User                @relation(fields: [createdBy], references: [id], onDelete: Cascade)
-  linkedStories StoryDocLink[]      @relation("DocStoryLinks")
+  kb                 KnowledgeBase       @relation(fields: [kbId], references: [id], onDelete: Cascade)
+  parent             KnowledgeDocument?  @relation("DocumentTree", fields: [parentId], references: [id], onDelete: SetNull)
+  children           KnowledgeDocument[] @relation("DocumentTree")
+  creator            User                @relation(fields: [createdBy], references: [id], onDelete: Cascade)
+  linkedStories      StoryDocLink[]      @relation("DocStoryLinks")
   workspaceQuickDocs WorkspaceQuickDoc[]
 
   @@index([kbId])
@@ -1214,9 +1408,12 @@ model AiProviderConfig {
   providerId   String // 业务 providerId，软关联 AiProvider.providerId（不设外键 cascade，避免 admin 删除丢失用户配置）
   apiKey       String?  @db.Text // 加密存储 TODO
   baseUrl      String?
+  voiceApiKey  String?  @db.Text // BytePlus Voice 独立 API key（speech/transcription 用，与 Ark apiKey 分开）
+  voiceBaseUrl String?  // BytePlus Voice Base URL（默认 fallback 到 baseUrl）
   enabled      Boolean  @default(false) // 用户级开关：是否在对话模型选择器中暴露
   models       Json? // string[] 用户启用的模型 ID（有序，顺序 = 模型选择器展示顺序）
   customModels Json? // AiModelMeta[] 用户私有的自定义/刷新获取的模型元数据，与 AiProvider.models 取并集按 id 去重
+  agentMeta Json? // 模式2 本地 Agent 元数据：{ binary, resolvedPath, version, auth, workspaceDir, detectedAt }；不存任何密钥
   createdAt    DateTime @default(now())
   updatedAt    DateTime @updatedAt
 
@@ -1838,8 +2035,11 @@ model Plan {
   providerSeatPriceIdUsd String?
   providerSeatPriceIdCny String?
 
-  agentQuota Int?
-  skillQuota Int?
+  agentQuota            Int?
+  skillQuota            Int?
+  sandboxMinutesMonthly Int?
+  mediaGenerationsMonthly Int?
+  galleryStorageMb        Int?
 
   subscriptions Subscription[]
 
@@ -1915,11 +2115,14 @@ enum UsageMetric {
 /// AI 用量明细（按次扣减 + 成本审计）
 model AiUsageLog {
   id           String    @id @default(cuid())
-  workspaceId  String
-  workspace    Workspace @relation(fields: [workspaceId], references: [id])
+  // 可空：配额按 userId 计（见 ResourceRegistry.sandboxMinutesMonthly），工作区只作归属维度。
+  // 不可空会让「尚无工作区的用户」无法落计量行，等于沙箱计费闸可被绕过。
+  workspaceId  String?
+  workspace    Workspace? @relation(fields: [workspaceId], references: [id], onDelete: Restrict)
   userId       String
   user         User      @relation(fields: [userId], references: [id])
   source       String    @default("byok")
+  activity     String? // 区分 chat/sandbox/image...（P3 计费维度；null = 既有 byok 语义）
   provider     String
   model        String
   inputTokens  Int       @default(0)
@@ -2131,9 +2334,12 @@ model UserAgent {
   createdAt        DateTime @default(now())
   updatedAt        DateTime @updatedAt
   isDeleted        Boolean  @default(false)
+  isDefault        Boolean  @default(false)
+  harnessKind      String? // code preset：claude-code | codex | acp | opencode（null = 普通对话 agent）
 
-  user    User         @relation(fields: [userId], references: [id], onDelete: Cascade)
-  threads ChatThread[]
+  user          User                   @relation(fields: [userId], references: [id], onDelete: Cascade)
+  threads       ChatThread[]
+  agentBindings BusinessAgentBinding[]
 
   @@index([userId])
   @@map("user_agents")
@@ -2193,12 +2399,13 @@ model Notification {
 
 // 通知偏好（免打扰时段、分类开关）
 model NotificationPreference {
-  userId     String  @id
-  categories Json
-  dndEnabled Boolean @default(false)
-  dndStart   String  @default("22:00")
-  dndEnd     String  @default("08:00")
-  user       User    @relation(fields: [userId], references: [id], onDelete: Cascade)
+  userId          String  @id
+  categories      Json
+  emailCategories Json    @default("{}")
+  dndEnabled      Boolean @default(false)
+  dndStart        String  @default("22:00")
+  dndEnd          String  @default("08:00")
+  user            User    @relation(fields: [userId], references: [id], onDelete: Cascade)
 
   @@map("notification_preferences")
 }
@@ -2240,3 +2447,110 @@ model IterationAutoSchedule {
 
   @@map("iteration_auto_schedules")
 }
+
+// 编排模式可复用片段：用户保存的跨请求编排逻辑。运行时经 getSnippetBindings
+// 暴露为 snippet_<name> 绑定，片段函数体在嵌套沙箱内执行并可调用 external_* 工具。
+// 片段本身不豁免归属校验，execute 只在服务端执行，不进客户端 bundle。
+model CodeSnippet {
+  id          String   @id @default(cuid())
+  userId      String
+  name        String
+  title       String
+  description String
+  params      Json     @default("{}")
+  code        String   @db.Text
+  enabled     Boolean  @default(true)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+  isDeleted   Boolean  @default(false)
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([userId, name])
+  @@index([userId, enabled, isDeleted])
+  @@map("code_snippets")
+}
+
+// P3 durable runs：沙箱实例映射（SandboxInstanceStore 的 Prisma 实现，key = computeSandboxKey 复合键）
+model SandboxInstance {
+  key               String   @id
+  provider          String
+  providerSandboxId String
+  latestSnapshotId  String?
+  threadId          String
+  latestRunId       String?
+  updatedAt         BigInt  // epoch ms（契约要求；int4 上限 2.1e9 装不下毫秒，须 int8）
+  createdAt         DateTime @default(now())
+
+  @@index([threadId])
+  @@map("sandbox_instances")
+}
+
+// P3 durable runs：PG StreamDurability 事件日志（每 chunk 一行，id=offset）
+model AiStreamChunk {
+  id        BigInt   @id @default(autoincrement())
+  runId     String
+  chunk     Json
+  createdAt DateTime @default(now())
+
+  @@index([runId, id])
+  @@map("ai_stream_chunks")
+}
+
+model DesktopSetting {
+  key   String @id // "aiSourceMode" | "localAgentConfig"
+  value Json
+
+  @@map("desktop_settings")
+}
+
+/// Harness 工作区（云端持久化文件区 + 业务数据视图入口）
+model HarnessWorkspace {
+  id          String   @id @default(cuid())
+  name        String
+  ownerId     String
+  kind        String   @default("cloud") // "cloud" | "local-meta"（本地挂载只存元数据）
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  owner       User           @relation(fields: [ownerId], references: [id], onDelete: Cascade)
+  files       WorkspaceFile[]
+  threads     ChatThread[]
+
+  @@index([ownerId, updatedAt])
+  @@map("harness_workspaces")
+}
+
+/// 工作区文件（上传文件 + AI 生成物 + 沙箱产出）
+model WorkspaceFile {
+  id          String   @id @default(cuid())
+  workspaceId String
+  path        String   // 相对路径，如 "src/index.ts"
+  mimeType    String   @default("application/octet-stream")
+  size        Int      @default(0)
+  content     String?  @db.Text // 小文件内联（≤256KB）；大文件走 blob 存储（P4c）
+  source      String   @default("upload") // "upload" | "ai-generated" | "sandbox"
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  workspace   HarnessWorkspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade)
+
+  @@unique([workspaceId, path])
+  @@index([workspaceId])
+  @@map("workspace_files")
+}
+
+// AI 附件二进制存储（P5 Wave 2）
+model Blob {
+  id        String   @id @default(cuid())
+  mimeType  String
+  bytes     Bytes
+  size      Int
+  userId    String
+  createdAt DateTime @default(now())
+
+  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@map("blobs")
+}