@apart-tech/intelligence-core 1.11.4 → 1.11.6

package/prisma/schema.prisma

@@ -8,12 +8,17 @@ datasource db {
 }
 
 model Organization {
-  id         String   @id @default(uuid()) @db.Uuid
-  name       String   @db.VarChar(200)
-  slug       String   @unique @db.VarChar(200)
-  metadata   Json     @default("{}")
-  createdAt  DateTime @default(now()) @map("created_at") @db.Timestamptz
-  auth0OrgId String?  @unique @map("auth0_org_id") @db.VarChar(100)
+  id                   String    @id @default(uuid()) @db.Uuid
+  name                 String    @db.VarChar(200)
+  slug                 String    @unique @db.VarChar(200)
+  metadata             Json      @default("{}")
+  createdAt            DateTime  @default(now()) @map("created_at") @db.Timestamptz
+  auth0OrgId           String?   @unique @map("auth0_org_id") @db.VarChar(100)
+  authorizationMode    String    @default("internal") @map("authorization_mode") @db.VarChar(30)
+  plan                 String    @default("free") @db.VarChar(20)
+  stripeCustomerId     String?   @unique @map("stripe_customer_id") @db.VarChar(255)
+  stripeSubscriptionId String?   @map("stripe_subscription_id") @db.VarChar(255)
+  currentPeriodEnd     DateTime? @map("current_period_end") @db.Timestamptz
 
   nodes           Node[]
   edges           Edge[]
@@ -29,23 +34,31 @@ model Organization {
   invites         Invite[]
   orgAgentTypes   OrgAgentType[]
   orgMcpServers   OrgMcpServer[]
+  usageRecords    UsageRecord[]
+  tagDefinitions  TagDefinition[]
+  nodeTags        NodeTag[]
+  nodeChunks      NodeChunk[]
+  piiQueryLogs    PiiQueryLog[]
 
   @@map("organizations")
 }
 
 model User {
-  id        String   @id @default(uuid()) @db.Uuid
-  auth0Sub  String   @unique @map("auth0_sub") @db.VarChar(255)
-  email     String   @db.VarChar(320)
-  name      String?  @db.VarChar(200)
-  avatarUrl String?  @map("avatar_url") @db.Text
-  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz
-  updatedAt                 DateTime @default(now()) @map("updated_at") @db.Timestamptz
+  id                         String   @id @default(uuid()) @db.Uuid
+  auth0Sub                   String   @unique @map("auth0_sub") @db.VarChar(255)
+  email                      String   @db.VarChar(320)
+  name                       String?  @db.VarChar(200)
+  avatarUrl                  String?  @map("avatar_url") @db.Text
+  createdAt                  DateTime @default(now()) @map("created_at") @db.Timestamptz
+  updatedAt                  DateTime @default(now()) @map("updated_at") @db.Timestamptz
   claudeOauthTokenEncrypted  String?  @map("claude_oauth_token_encrypted") @db.Text
   apartRefreshTokenEncrypted String?  @map("apart_refresh_token_encrypted") @db.Text
   agentSecretsEncrypted      String?  @map("agent_secrets_encrypted") @db.Text
 
-  memberships Membership[]
+  memberships       Membership[]
+  createdAgentTypes OrgAgentType[]  @relation("OrgAgentTypeCreatedBy")
+  invokedAgentRuns  AgentRun[]      @relation("AgentRunInvokedBy")
+  scheduledAgents   AgentSchedule[] @relation("AgentScheduleScheduledBy")
 
   @@index([email], map: "idx_users_email")
   @@map("users")
@@ -114,6 +127,22 @@ model OrgPiiConfig {
   @@map("org_pii_config")
 }
 
+model PiiQueryLog {
+  id               String   @id @default(uuid()) @db.Uuid
+  organizationId   String   @map("organization_id") @db.Uuid
+  queryHash        String   @map("query_hash") @db.Text
+  piiTypesDetected String[] @map("pii_types_detected")
+  matchCount       Int      @map("match_count")
+  source           String   @db.VarChar(20)
+  principalId      String?  @map("principal_id") @db.Text
+  createdAt        DateTime @default(now()) @map("created_at") @db.Timestamptz
+
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  @@index([organizationId, createdAt], map: "idx_pii_query_logs_org_time")
+  @@map("pii_query_logs")
+}
+
 model Domain {
   id             String   @id @default(uuid()) @db.Uuid
   name           String   @db.VarChar(200)
@@ -138,24 +167,27 @@ model Domain {
 }
 
 model Node {
-  id             String                      @id @default(uuid()) @db.Uuid
-  type           String                      @db.VarChar(100)
-  title          String                      @db.VarChar(500)
-  content        String                      @default("") @db.Text
+  id             String                   @id @default(uuid()) @db.Uuid
+  type           String                   @db.VarChar(100)
+  title          String                   @db.VarChar(500)
+  content        String                   @default("") @db.Text
   embedding      Unsupported("vector")?
-  searchVector   Unsupported("tsvector")?    @map("search_vector")
-  metadata       Json                        @default("{}")
-  status         String                      @default("draft") @db.VarChar(20)
-  createdBy      String                      @map("created_by") @db.VarChar(255)
-  createdAt      DateTime                    @default(now()) @map("created_at") @db.Timestamptz
-  updatedAt      DateTime                    @default(now()) @map("updated_at") @db.Timestamptz
-  version        Int                         @default(1)
-  hasPii         Boolean                     @default(false) @map("has_pii")
-  domainId       String?                     @map("domain_id") @db.Uuid
-  organizationId String                      @map("organization_id") @db.Uuid
+  searchVector   Unsupported("tsvector")? @map("search_vector")
+  metadata       Json                     @default("{}")
+  status         String                   @default("draft") @db.VarChar(20)
+  createdBy      String                   @map("created_by") @db.VarChar(255)
+  createdAt      DateTime                 @default(now()) @map("created_at") @db.Timestamptz
+  updatedAt      DateTime                 @default(now()) @map("updated_at") @db.Timestamptz
+  version        Int                      @default(1)
+  hasPii            Boolean                  @default(false) @map("has_pii")
+  embeddingPiiMode  String?                  @map("embedding_pii_mode") @db.VarChar(20)
+  domainId          String?                  @map("domain_id") @db.Uuid
+  organizationId    String                   @map("organization_id") @db.Uuid
 
   sourceEdges  Edge[]       @relation("SourceNode")
   targetEdges  Edge[]       @relation("TargetNode")
+  tags         NodeTag[]
+  chunks       NodeChunk[]
   domain       Domain?      @relation(fields: [domainId], references: [id], onDelete: SetNull)
   organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
 
@@ -168,6 +200,30 @@ model Node {
   @@map("nodes")
 }
 
+model NodeChunk {
+  id               String                   @id @default(uuid()) @db.Uuid
+  nodeId           String                   @map("node_id") @db.Uuid
+  chunkIndex       Int                      @map("chunk_index")
+  content          String                   @db.Text
+  tokenCount       Int                      @map("token_count")
+  headingContext   String?                  @map("heading_context") @db.VarChar(500)
+  startOffset      Int                      @map("start_offset")
+  endOffset        Int                      @map("end_offset")
+  overlapPrev      Int                      @default(0) @map("overlap_prev")
+  embedding        Unsupported("vector")?
+  embeddingPiiMode String?                  @map("embedding_pii_mode") @db.VarChar(20)
+  organizationId   String                   @map("organization_id") @db.Uuid
+  createdAt        DateTime                 @default(now()) @map("created_at") @db.Timestamptz
+
+  node         Node         @relation(fields: [nodeId], references: [id], onDelete: Cascade)
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  @@unique([nodeId, chunkIndex], map: "uq_node_chunks_node_idx")
+  @@index([nodeId], map: "idx_node_chunks_node")
+  @@index([organizationId], map: "idx_node_chunks_org")
+  @@map("node_chunks")
+}
+
 model Edge {
   id               String   @id @default(uuid()) @db.Uuid
   sourceNodeId     String   @map("source_node_id") @db.Uuid
@@ -191,23 +247,23 @@ model Edge {
 }
 
 model Workspace {
-  id             String   @id @default(uuid()) @db.Uuid
-  name           String   @db.VarChar(200)
-  slug           String   @db.VarChar(200)
-  description    String   @default("") @db.Text
+  id          String @id @default(uuid()) @db.Uuid
+  name        String @db.VarChar(200)
+  slug        String @db.VarChar(200)
+  description String @default("") @db.Text
 
   // Filter rules
-  domainSlugs    Json     @default("[]") @map("domain_slugs")
-  nodeTypes      Json     @default("[]") @map("node_types")
-  tags           Json     @default("[]") @map("tags")
+  domainSlugs Json @default("[]") @map("domain_slugs")
+  nodeTypes   Json @default("[]") @map("node_types")
+  tags        Json @default("[]") @map("tags")
 
   // Context assembly overrides
-  maxDepth       Int?     @map("max_depth")
-  maxNodes       Int?     @map("max_nodes")
-  includeDrafts  Boolean  @default(false) @map("include_drafts")
+  maxDepth      Int?    @map("max_depth")
+  maxNodes      Int?    @map("max_nodes")
+  includeDrafts Boolean @default(false) @map("include_drafts")
 
   // Layer 1: map description for AI
-  systemPrompt   String   @default("") @map("system_prompt") @db.Text
+  systemPrompt String @default("") @map("system_prompt") @db.Text
 
   metadata       Json     @default("{}")
   createdBy      String   @map("created_by") @db.VarChar(255)
@@ -251,11 +307,22 @@ model OrgAgentType {
   createdBy             String   @map("created_by") @db.VarChar(255)
   createdAt             DateTime @default(now()) @map("created_at") @db.Timestamptz
   updatedAt             DateTime @default(now()) @map("updated_at") @db.Timestamptz
-
-  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  kind                  String   @default("org_agent") @db.VarChar(30)
+  auth0ClientId         String?  @unique @map("auth0_client_id") @db.VarChar(255)
+  intrinsicPolicy       Json     @default("{}") @map("intrinsic_policy")
+  toolCatalogue         String[] @default([]) @map("tool_catalogue")
+  requiresCiba          Boolean  @default(false) @map("requires_ciba")
+  createdByUserId       String?  @map("created_by_user_id") @db.Uuid
+
+  organization  Organization    @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  createdByUser User?           @relation("OrgAgentTypeCreatedBy", fields: [createdByUserId], references: [id], onDelete: SetNull)
+  agentRuns     AgentRun[]      @relation("AgentRunAgent")
+  schedules     AgentSchedule[] @relation("AgentScheduleAgent")
+  apiKeys       ApiKey[]        @relation("ApiKeyAgent")
 
   @@unique([organizationId, slug], map: "uq_org_agent_type_org_slug")
   @@index([organizationId], map: "idx_org_agent_types_organization")
+  @@index([createdByUserId], map: "idx_org_agent_types_created_by_user_id")
   @@map("org_agent_types")
 }
 
@@ -279,56 +346,75 @@ model OrgMcpServer {
 }
 
 model AgentRun {
-  id             String    @id @default(uuid()) @db.Uuid
-  organizationId String    @map("organization_id") @db.Uuid
-  prompt         String    @db.Text
-  type           String    @default("researcher") @db.VarChar(30)
-  status         String    @default("pending") @db.VarChar(20)
-  result         String    @default("") @db.Text
-  error          String?   @db.Text
-  sandboxId      String?   @map("sandbox_id") @db.VarChar(100)
-  model          String    @default("sonnet") @db.VarChar(50)
-  startedAt      DateTime  @default(now()) @map("started_at") @db.Timestamptz
-  completedAt    DateTime? @map("completed_at") @db.Timestamptz
-  createdBy      String    @map("created_by") @db.VarChar(255)
-  scheduleId     String?   @map("schedule_id") @db.Uuid
-
-  organization Organization    @relation(fields: [organizationId], references: [id], onDelete: Cascade)
-  schedule     AgentSchedule?  @relation(fields: [scheduleId], references: [id], onDelete: SetNull)
+  id               String    @id @default(uuid()) @db.Uuid
+  organizationId   String    @map("organization_id") @db.Uuid
+  prompt           String    @db.Text
+  type             String    @default("researcher") @db.VarChar(30)
+  status           String    @default("pending") @db.VarChar(20)
+  result           String    @default("") @db.Text
+  error            String?   @db.Text
+  sandboxId        String?   @map("sandbox_id") @db.VarChar(100)
+  model            String    @default("sonnet") @db.VarChar(50)
+  startedAt        DateTime  @default(now()) @map("started_at") @db.Timestamptz
+  completedAt      DateTime? @map("completed_at") @db.Timestamptz
+  createdBy        String    @map("created_by") @db.VarChar(255)
+  scheduleId       String?   @map("schedule_id") @db.Uuid
+  agentId          String?   @map("agent_id") @db.Uuid
+  invokedByUserId  String?   @map("invoked_by_user_id") @db.Uuid
+  parentAgentRunId String?   @map("parent_agent_run_id") @db.Uuid
+  actClaim         Json?     @map("act_claim")
+  capturedAbility  Json?     @map("captured_ability")
+
+  organization  Organization   @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  schedule      AgentSchedule? @relation(fields: [scheduleId], references: [id], onDelete: SetNull)
+  agent         OrgAgentType?  @relation("AgentRunAgent", fields: [agentId], references: [id], onDelete: SetNull)
+  invokedByUser User?          @relation("AgentRunInvokedBy", fields: [invokedByUserId], references: [id], onDelete: SetNull)
+  parent        AgentRun?      @relation("AgentRunParent", fields: [parentAgentRunId], references: [id], onDelete: SetNull)
+  children      AgentRun[]     @relation("AgentRunParent")
 
   @@index([organizationId], map: "idx_agent_runs_organization")
   @@index([status], map: "idx_agent_runs_status")
   @@index([type], map: "idx_agent_runs_type")
   @@index([scheduleId], map: "idx_agent_runs_schedule")
+  @@index([agentId], map: "idx_agent_runs_agent_id")
+  @@index([invokedByUserId], map: "idx_agent_runs_invoked_by_user_id")
+  @@index([parentAgentRunId], map: "idx_agent_runs_parent_agent_run_id")
   @@map("agent_runs")
 }
 
 model AgentSchedule {
-  id              String    @id @default(uuid()) @db.Uuid
-  organizationId  String    @map("organization_id") @db.Uuid
-  name            String    @db.VarChar(200)
-  description     String    @default("") @db.Text
-  cronExpression  String    @map("cron_expression") @db.VarChar(100)
-  timezone        String    @default("UTC") @db.VarChar(50)
-  agentType       String    @default("researcher") @map("agent_type") @db.VarChar(30)
-  prompt          String    @db.Text
-  model           String    @default("sonnet") @db.VarChar(50)
-  workspace       String?   @db.VarChar(200)
-  enabled         Boolean   @default(true)
-  apiKeyEncrypted String    @map("api_key_encrypted") @db.Text
-  apiKeyHash      String    @map("api_key_hash") @db.VarChar(64)
-  gcpJobName      String?   @map("gcp_job_name") @db.VarChar(500)
-  lastTriggeredAt DateTime? @map("last_triggered_at") @db.Timestamptz
-  lastRunId       String?   @map("last_run_id") @db.Uuid
-  createdBy       String    @map("created_by") @db.VarChar(255)
-  createdAt       DateTime  @default(now()) @map("created_at") @db.Timestamptz
-  updatedAt       DateTime  @default(now()) @map("updated_at") @db.Timestamptz
-
-  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
-  runs         AgentRun[]
+  id                String    @id @default(uuid()) @db.Uuid
+  organizationId    String    @map("organization_id") @db.Uuid
+  name              String    @db.VarChar(200)
+  description       String    @default("") @db.Text
+  cronExpression    String    @map("cron_expression") @db.VarChar(100)
+  timezone          String    @default("UTC") @db.VarChar(50)
+  agentType         String    @default("researcher") @map("agent_type") @db.VarChar(30)
+  prompt            String    @db.Text
+  model             String    @default("sonnet") @db.VarChar(50)
+  workspace         String?   @db.VarChar(200)
+  enabled           Boolean   @default(true)
+  apiKeyEncrypted   String    @map("api_key_encrypted") @db.Text
+  apiKeyHash        String    @map("api_key_hash") @db.VarChar(64)
+  gcpJobName        String?   @map("gcp_job_name") @db.VarChar(500)
+  lastTriggeredAt   DateTime? @map("last_triggered_at") @db.Timestamptz
+  lastRunId         String?   @map("last_run_id") @db.Uuid
+  createdBy         String    @map("created_by") @db.VarChar(255)
+  createdAt         DateTime  @default(now()) @map("created_at") @db.Timestamptz
+  updatedAt         DateTime  @default(now()) @map("updated_at") @db.Timestamptz
+  agentId           String?   @map("agent_id") @db.Uuid
+  scheduledByUserId String?   @map("scheduled_by_user_id") @db.Uuid
+  capturedAbility   Json?     @map("captured_ability")
+
+  organization    Organization  @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  runs            AgentRun[]
+  agent           OrgAgentType? @relation("AgentScheduleAgent", fields: [agentId], references: [id], onDelete: SetNull)
+  scheduledByUser User?         @relation("AgentScheduleScheduledBy", fields: [scheduledByUserId], references: [id], onDelete: SetNull)
 
   @@index([organizationId], map: "idx_agent_schedules_organization")
   @@index([apiKeyHash], map: "idx_agent_schedules_api_key_hash")
+  @@index([agentId], map: "idx_agent_schedules_agent_id")
+  @@index([scheduledByUserId], map: "idx_agent_schedules_scheduled_by_user_id")
   @@map("agent_schedules")
 }
 
@@ -341,17 +427,184 @@ model ApiKey {
   lastUsedAt     DateTime? @map("last_used_at") @db.Timestamptz
   active         Int       @default(1)
   organizationId String    @map("organization_id") @db.Uuid
+  agentId        String?   @map("agent_id") @db.Uuid
 
-  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  organization Organization  @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  agent        OrgAgentType? @relation("ApiKeyAgent", fields: [agentId], references: [id], onDelete: SetNull)
 
   @@index([organizationId], map: "idx_api_keys_organization")
+  @@index([agentId], map: "idx_api_keys_agent_id")
   @@map("api_keys")
 }
 
 model EmbeddingCache {
-  contentHash String                   @id @map("content_hash") @db.VarChar(64)
+  contentHash String                @id @map("content_hash") @db.VarChar(64)
   embedding   Unsupported("vector")
-  createdAt   DateTime                 @default(now()) @map("created_at") @db.Timestamptz
+  createdAt   DateTime              @default(now()) @map("created_at") @db.Timestamptz
 
   @@map("embedding_cache")
 }
+
+model AuditEvent {
+  id               String   @id @default(uuid()) @db.Uuid
+  agentRunId       String?  @map("agent_run_id") @db.Uuid
+  principalType    String   @map("principal_type") @db.VarChar(30)
+  principalId      String   @map("principal_id") @db.VarChar(255)
+  organizationId   String   @map("organization_id") @db.Uuid
+  action           String   @db.VarChar(100)
+  subjectType      String?  @map("subject_type") @db.VarChar(100)
+  subjectId        String?  @map("subject_id") @db.VarChar(255)
+  effectiveAbility Json     @default("{}") @map("effective_ability")
+  result           String   @db.VarChar(20)
+  createdAt        DateTime @default(now()) @map("created_at") @db.Timestamptz
+
+  @@index([organizationId], map: "idx_audit_events_organization_id")
+  @@index([agentRunId], map: "idx_audit_events_agent_run_id")
+  @@index([createdAt], map: "idx_audit_events_created_at")
+  @@map("audit_events")
+}
+
+model UsageRecord {
+  id             String   @id @default(uuid()) @db.Uuid
+  organizationId String   @map("organization_id") @db.Uuid
+  metric         String   @db.VarChar(50)
+  periodStart    DateTime @map("period_start") @db.Date
+  count          Int      @default(0)
+  updatedAt      DateTime @default(now()) @map("updated_at") @db.Timestamptz
+
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  @@unique([organizationId, metric, periodStart], map: "uq_usage_org_metric_period")
+  @@index([organizationId], map: "idx_usage_records_organization")
+  @@map("usage_records")
+}
+
+// ── Tag System ──────────────────────────────────────────────────────────────
+
+model TagDefinition {
+  id                  String    @id @default(uuid()) @db.Uuid
+  organizationId      String?   @map("organization_id") @db.Uuid
+  tagName             String    @map("tag_name") @db.VarChar(100)
+  tagType             String    @map("tag_type") @db.VarChar(20)
+  cardinality         String    @default("singleton") @db.VarChar(10)
+  source              String    @default("extracted") @db.VarChar(20)
+  status              String    @default("active") @map("status") @db.VarChar(20)
+  description         String    @default("") @db.Text
+  category            String?   @map("category") @db.VarChar(50)
+  labels              Json?     @map("labels") @db.JsonB
+  applicableNodeTypes Json      @default("[]") @map("applicable_node_types")
+  requiredForNodeTypes Json     @default("[]") @map("required_for_node_types")
+  enumValues          Json?     @map("enum_values")
+  enumVersion         Int       @default(1) @map("enum_version")
+  dependsOn           Json      @default("[]") @map("depends_on")
+  autoAcceptThreshold Float?    @map("auto_accept_threshold") @db.Real
+  parentDefinitionId  String?   @map("parent_definition_id") @db.Uuid
+  replacedBy          String?   @map("replaced_by") @db.Uuid
+  deprecatedAt        DateTime? @map("deprecated_at") @db.Timestamptz
+  createdAt           DateTime  @default(now()) @map("created_at") @db.Timestamptz
+  createdBy           String    @map("created_by") @db.VarChar(255)
+
+  organization   Organization?  @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  parentDef      TagDefinition? @relation("TagDefHierarchy", fields: [parentDefinitionId], references: [id])
+  childDefs      TagDefinition[] @relation("TagDefHierarchy")
+  replacementDef TagDefinition? @relation("TagDefReplacement", fields: [replacedBy], references: [id])
+  replacedDefs   TagDefinition[] @relation("TagDefReplacement")
+  tags           NodeTag[]
+
+  @@unique([organizationId, tagName], map: "uq_tag_def_org_name")
+  @@index([organizationId], map: "idx_tag_defs_org")
+  @@index([parentDefinitionId], map: "idx_tag_defs_parent")
+  @@map("tag_definitions")
+}
+
+model NodeTag {
+  id                 String    @id @default(uuid()) @db.Uuid
+  nodeId             String    @map("node_id") @db.Uuid
+  organizationId     String    @map("organization_id") @db.Uuid
+  tagDefinitionId    String    @map("tag_definition_id") @db.Uuid
+  tagName            String    @map("tag_name") @db.VarChar(100)
+  isSingleton        Boolean   @default(false) @map("is_singleton")
+
+  valueText          String?   @map("value_text") @db.Text
+  valueNum           Float?    @map("value_num") @db.DoublePrecision
+  valueCurrency      String?   @map("value_currency") @db.Char(3)
+  valueUnit          String?   @map("value_unit") @db.VarChar(20)
+  valueDate          DateTime? @map("value_date") @db.Timestamptz
+  valueRef           String?   @map("value_ref") @db.Uuid
+
+  textSpan           String?   @map("text_span") @db.Text
+  offsetStart        Int?      @map("offset_start")
+  offsetEnd          Int?      @map("offset_end")
+  contentVersion     Int?      @map("content_version")
+  attrs              Json      @default("{}") @db.JsonB
+
+  taggedBy           String    @map("tagged_by") @db.VarChar(255)
+  modelId            String?   @map("model_id") @db.VarChar(100)
+  modelVersion       String?   @map("model_version") @db.VarChar(50)
+  confidence         Float?    @db.Real
+  verificationStatus String    @default("unverified") @map("verification_status") @db.VarChar(20)
+  verifiedBy         String?   @map("verified_by") @db.VarChar(255)
+  verifiedAt         DateTime? @map("verified_at") @db.Timestamptz
+  supersededBy       String?   @map("superseded_by") @db.Uuid
+  batchId            String?   @map("batch_id") @db.Uuid
+
+  createdAt          DateTime  @default(now()) @map("created_at") @db.Timestamptz
+  updatedAt          DateTime  @default(now()) @map("updated_at") @db.Timestamptz
+
+  node          Node          @relation(fields: [nodeId], references: [id], onDelete: Cascade)
+  organization  Organization  @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  tagDefinition TagDefinition @relation(fields: [tagDefinitionId], references: [id])
+  supersedes    NodeTag?      @relation("TagSupersession", fields: [supersededBy], references: [id])
+  supersededTags NodeTag[]    @relation("TagSupersession")
+
+  @@index([nodeId], map: "idx_node_tags_node")
+  @@index([organizationId, tagName], map: "idx_node_tags_org_name")
+  @@index([valueRef], map: "idx_node_tags_ref")
+  @@index([batchId], map: "idx_node_tags_batch")
+  @@map("node_tags")
+}
+
+model NodeTagHistory {
+  id                 String    @id @default(uuid()) @db.Uuid
+  tagId              String    @map("tag_id") @db.Uuid
+  nodeId             String    @map("node_id") @db.Uuid
+  organizationId     String    @map("organization_id") @db.Uuid
+  tagName            String    @map("tag_name") @db.VarChar(100)
+
+  valueText          String?   @map("value_text") @db.Text
+  valueNum           Float?    @map("value_num") @db.DoublePrecision
+  valueCurrency      String?   @map("value_currency") @db.Char(3)
+  valueUnit          String?   @map("value_unit") @db.VarChar(20)
+  valueDate          DateTime? @map("value_date") @db.Timestamptz
+  valueRef           String?   @map("value_ref") @db.Uuid
+
+  validFrom          DateTime  @map("valid_from") @db.Timestamptz
+  validUntil         DateTime  @map("valid_until") @db.Timestamptz
+  systemFrom         DateTime  @map("system_from") @db.Timestamptz
+  systemTo           DateTime? @map("system_to") @db.Timestamptz
+
+  replacedBy         String    @map("replaced_by") @db.VarChar(255)
+
+  @@index([nodeId, tagName, validFrom], map: "idx_tag_history_node_name_time")
+  @@index([organizationId, tagName, validFrom], map: "idx_tag_history_org_name_time")
+  @@index([nodeId, tagName, systemFrom], map: "idx_tag_history_node_name_system_time")
+  @@map("node_tag_history")
+}
+
+model NodeTagAudit {
+  id          String   @id @default(uuid()) @db.Uuid
+  tagId       String   @map("tag_id") @db.Uuid
+  nodeId      String   @map("node_id") @db.Uuid
+  orgId       String   @map("organization_id") @db.Uuid
+  action      String   @map("action") @db.VarChar(20)
+  oldValue    Json?    @map("old_value") @db.JsonB
+  newValue    Json?    @map("new_value") @db.JsonB
+  actorId     String   @map("actor_id") @db.Uuid
+  reason      String?  @db.Text
+  createdAt   DateTime @default(now()) @map("created_at") @db.Timestamptz
+
+  @@index([tagId], map: "idx_tag_audit_tag")
+  @@index([nodeId], map: "idx_tag_audit_node")
+  @@index([orgId, createdAt], map: "idx_tag_audit_org_time")
+  @@map("node_tag_audit")
+}