@friggframework/core 2.0.0--canary.698.b1a2d30.0 → 2.0.0--canary.699.0d57ee8.0

package/generated/prisma-mongodb/edge.js

@@ -407,8 +407,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "// Frigg Framework - Prisma Schema\n// MongoDB database schema for enterprise integration platform\n// Migration from Mongoose ODM to Prisma ORM\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-mongodb\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"mongodb\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId String? @db.ObjectId\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n  @@map(\"User\")\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  String    @db.ObjectId\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n  @@map(\"Token\")\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId      String?  @db.ObjectId\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@map(\"Credential\")\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  credentialId String?     @db.ObjectId\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       String?     @db.ObjectId\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with scalar lists\n  integrations   Integration[] @relation(\"IntegrationEntities\", fields: [integrationIds], references: [id])\n  integrationIds String[]      @db.ObjectId\n\n  syncs   Sync[]   @relation(\"SyncEntities\", fields: [syncIds], references: [id])\n  syncIds String[] @db.ObjectId\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n  @@map(\"Entity\")\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     String            @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId String?           @db.ObjectId\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"IntegrationEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n  @@map(\"Integration\")\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n  @@map(\"IntegrationMapping\")\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  // Core references\n  userId        String      @db.ObjectId\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support\n  childProcesses  String[] @db.ObjectId\n  parentProcessId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@map(\"Process\")\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            String       @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String?      @db.ObjectId\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"SyncEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n  @@map(\"Sync\")\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  syncId   String? @db.ObjectId\n  sync     Sync?   @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId String  @db.ObjectId\n  entity   Entity  @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n  @@map(\"DataIdentifier\")\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            String          @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String          @db.ObjectId\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n  @@map(\"Association\")\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  associationId String      @db.ObjectId\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      String      @db.ObjectId\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n  @@map(\"AssociationObject\")\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  state Json?\n\n  @@map(\"State\")\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  connectionId String?\n\n  @@index([connectionId])\n  @@map(\"WebsocketConnection\")\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support\n  childExecutions   String[] @db.ObjectId\n  parentExecutionId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n  @@map(\"AdminScriptExecution\")\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n  @@map(\"ScriptSchedule\")\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n  @@map(\"UsageCounter\")\n}\n\n// Data-defined integrations (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              String           @id @default(auto()) @map(\"_id\") @db.ObjectId\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n  @@map(\"IntegrationDefinitionVersion\")\n}\n\n// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId     String      @db.ObjectId\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n  @@map(\"WorkflowRun\")\n}\n",
-  "inlineSchemaHash": "859eb4a2e2b603e677e1d05a9788c35035f1c54671dde4c711f4f372e27e1d98",
+  "inlineSchema": "// Frigg Framework - Prisma Schema\n// MongoDB database schema for enterprise integration platform\n// Migration from Mongoose ODM to Prisma ORM\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-mongodb\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"mongodb\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId String? @db.ObjectId\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n  @@map(\"User\")\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  String    @db.ObjectId\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n  @@map(\"Token\")\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId      String?  @db.ObjectId\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@map(\"Credential\")\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  credentialId String?     @db.ObjectId\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       String?     @db.ObjectId\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with scalar lists\n  integrations   Integration[] @relation(\"IntegrationEntities\", fields: [integrationIds], references: [id])\n  integrationIds String[]      @db.ObjectId\n\n  syncs   Sync[]   @relation(\"SyncEntities\", fields: [syncIds], references: [id])\n  syncIds String[] @db.ObjectId\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n  @@map(\"Entity\")\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     String            @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId String?           @db.ObjectId\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"IntegrationEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n  @@map(\"Integration\")\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n  @@map(\"IntegrationMapping\")\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  // Core references\n  userId        String      @db.ObjectId\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support\n  childProcesses  String[] @db.ObjectId\n  parentProcessId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@map(\"Process\")\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            String       @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String?      @db.ObjectId\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"SyncEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n  @@map(\"Sync\")\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  syncId   String? @db.ObjectId\n  sync     Sync?   @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId String  @db.ObjectId\n  entity   Entity  @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n  @@map(\"DataIdentifier\")\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            String          @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String          @db.ObjectId\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n  @@map(\"Association\")\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  associationId String      @db.ObjectId\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      String      @db.ObjectId\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n  @@map(\"AssociationObject\")\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  state Json?\n\n  @@map(\"State\")\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  connectionId String?\n\n  @@index([connectionId])\n  @@map(\"WebsocketConnection\")\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support\n  childExecutions   String[] @db.ObjectId\n  parentExecutionId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n  @@map(\"AdminScriptExecution\")\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n  @@map(\"ScriptSchedule\")\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n  @@map(\"UsageCounter\")\n}\n\n// Integrations published as definitions (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              String           @id @default(auto()) @map(\"_id\") @db.ObjectId\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n  @@map(\"IntegrationDefinitionVersion\")\n}\n\n// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId     String      @db.ObjectId\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n  @@map(\"WorkflowRun\")\n}\n",
+  "inlineSchemaHash": "3fdc5ba18e92cc70e8748797d4dcf146c607305e80cac6475bc8d93c183553f9",
   "copyEngine": true
 }
 config.dirname = '/'

package/generated/prisma-mongodb/index.js

@@ -408,8 +408,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "// Frigg Framework - Prisma Schema\n// MongoDB database schema for enterprise integration platform\n// Migration from Mongoose ODM to Prisma ORM\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-mongodb\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"mongodb\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId String? @db.ObjectId\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n  @@map(\"User\")\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  String    @db.ObjectId\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n  @@map(\"Token\")\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId      String?  @db.ObjectId\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@map(\"Credential\")\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  credentialId String?     @db.ObjectId\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       String?     @db.ObjectId\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with scalar lists\n  integrations   Integration[] @relation(\"IntegrationEntities\", fields: [integrationIds], references: [id])\n  integrationIds String[]      @db.ObjectId\n\n  syncs   Sync[]   @relation(\"SyncEntities\", fields: [syncIds], references: [id])\n  syncIds String[] @db.ObjectId\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n  @@map(\"Entity\")\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     String            @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId String?           @db.ObjectId\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"IntegrationEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n  @@map(\"Integration\")\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n  @@map(\"IntegrationMapping\")\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  // Core references\n  userId        String      @db.ObjectId\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support\n  childProcesses  String[] @db.ObjectId\n  parentProcessId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@map(\"Process\")\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            String       @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String?      @db.ObjectId\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"SyncEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n  @@map(\"Sync\")\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  syncId   String? @db.ObjectId\n  sync     Sync?   @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId String  @db.ObjectId\n  entity   Entity  @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n  @@map(\"DataIdentifier\")\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            String          @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String          @db.ObjectId\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n  @@map(\"Association\")\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  associationId String      @db.ObjectId\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      String      @db.ObjectId\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n  @@map(\"AssociationObject\")\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  state Json?\n\n  @@map(\"State\")\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  connectionId String?\n\n  @@index([connectionId])\n  @@map(\"WebsocketConnection\")\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support\n  childExecutions   String[] @db.ObjectId\n  parentExecutionId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n  @@map(\"AdminScriptExecution\")\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n  @@map(\"ScriptSchedule\")\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n  @@map(\"UsageCounter\")\n}\n\n// Data-defined integrations (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              String           @id @default(auto()) @map(\"_id\") @db.ObjectId\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n  @@map(\"IntegrationDefinitionVersion\")\n}\n\n// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId     String      @db.ObjectId\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n  @@map(\"WorkflowRun\")\n}\n",
-  "inlineSchemaHash": "859eb4a2e2b603e677e1d05a9788c35035f1c54671dde4c711f4f372e27e1d98",
+  "inlineSchema": "// Frigg Framework - Prisma Schema\n// MongoDB database schema for enterprise integration platform\n// Migration from Mongoose ODM to Prisma ORM\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-mongodb\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"mongodb\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId String? @db.ObjectId\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n  @@map(\"User\")\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  String    @db.ObjectId\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n  @@map(\"Token\")\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId      String?  @db.ObjectId\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@map(\"Credential\")\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  credentialId String?     @db.ObjectId\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       String?     @db.ObjectId\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with scalar lists\n  integrations   Integration[] @relation(\"IntegrationEntities\", fields: [integrationIds], references: [id])\n  integrationIds String[]      @db.ObjectId\n\n  syncs   Sync[]   @relation(\"SyncEntities\", fields: [syncIds], references: [id])\n  syncIds String[] @db.ObjectId\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n  @@map(\"Entity\")\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     String            @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId String?           @db.ObjectId\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"IntegrationEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n  @@map(\"Integration\")\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n  @@map(\"IntegrationMapping\")\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  // Core references\n  userId        String      @db.ObjectId\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support\n  childProcesses  String[] @db.ObjectId\n  parentProcessId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@map(\"Process\")\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            String       @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String?      @db.ObjectId\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"SyncEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n  @@map(\"Sync\")\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  syncId   String? @db.ObjectId\n  sync     Sync?   @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId String  @db.ObjectId\n  entity   Entity  @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n  @@map(\"DataIdentifier\")\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            String          @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String          @db.ObjectId\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n  @@map(\"Association\")\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  associationId String      @db.ObjectId\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      String      @db.ObjectId\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n  @@map(\"AssociationObject\")\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  state Json?\n\n  @@map(\"State\")\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  connectionId String?\n\n  @@index([connectionId])\n  @@map(\"WebsocketConnection\")\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support\n  childExecutions   String[] @db.ObjectId\n  parentExecutionId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n  @@map(\"AdminScriptExecution\")\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n  @@map(\"ScriptSchedule\")\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n  @@map(\"UsageCounter\")\n}\n\n// Integrations published as definitions (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              String           @id @default(auto()) @map(\"_id\") @db.ObjectId\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n  @@map(\"IntegrationDefinitionVersion\")\n}\n\n// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId     String      @db.ObjectId\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n  @@map(\"WorkflowRun\")\n}\n",
+  "inlineSchemaHash": "3fdc5ba18e92cc70e8748797d4dcf146c607305e80cac6475bc8d93c183553f9",
   "copyEngine": true
 }
 

package/generated/prisma-mongodb/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "prisma-client-a1c382a03c2f3101a0687b3132ffa6b8d65194d7cc979051b545a6f8defbcf7e",
+  "name": "prisma-client-55f99fd2ec20c6e23de899b2de2b2519a39bcc192e554ea67aa61369c1520277",
   "main": "index.js",
   "types": "index.d.ts",
   "browser": "default.js",

package/generated/prisma-mongodb/schema.prisma

@@ -455,7 +455,7 @@ model UsageCounter {
   @@map("UsageCounter")
 }
 
-// Data-defined integrations (ADR-063): one immutable row per published definition version.
+// Integrations published as definitions (ADR-063): one immutable row per published definition version.
 enum DefinitionStatus {
   DRAFT
   PUBLISHED
@@ -487,7 +487,7 @@ model IntegrationDefinitionVersion {
   @@map("IntegrationDefinitionVersion")
 }
 
-// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or
+// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or
 // response bodies.
 model WorkflowRun {
   id                String      @id @default(auto()) @map("_id") @db.ObjectId

package/generated/prisma-mongodb/wasm.js

@@ -407,8 +407,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "// Frigg Framework - Prisma Schema\n// MongoDB database schema for enterprise integration platform\n// Migration from Mongoose ODM to Prisma ORM\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-mongodb\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"mongodb\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId String? @db.ObjectId\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n  @@map(\"User\")\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  String    @db.ObjectId\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n  @@map(\"Token\")\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId      String?  @db.ObjectId\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@map(\"Credential\")\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  credentialId String?     @db.ObjectId\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       String?     @db.ObjectId\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with scalar lists\n  integrations   Integration[] @relation(\"IntegrationEntities\", fields: [integrationIds], references: [id])\n  integrationIds String[]      @db.ObjectId\n\n  syncs   Sync[]   @relation(\"SyncEntities\", fields: [syncIds], references: [id])\n  syncIds String[] @db.ObjectId\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n  @@map(\"Entity\")\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     String            @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId String?           @db.ObjectId\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"IntegrationEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n  @@map(\"Integration\")\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n  @@map(\"IntegrationMapping\")\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  // Core references\n  userId        String      @db.ObjectId\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support\n  childProcesses  String[] @db.ObjectId\n  parentProcessId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@map(\"Process\")\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            String       @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String?      @db.ObjectId\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"SyncEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n  @@map(\"Sync\")\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  syncId   String? @db.ObjectId\n  sync     Sync?   @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId String  @db.ObjectId\n  entity   Entity  @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n  @@map(\"DataIdentifier\")\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            String          @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String          @db.ObjectId\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n  @@map(\"Association\")\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  associationId String      @db.ObjectId\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      String      @db.ObjectId\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n  @@map(\"AssociationObject\")\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  state Json?\n\n  @@map(\"State\")\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  connectionId String?\n\n  @@index([connectionId])\n  @@map(\"WebsocketConnection\")\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support\n  childExecutions   String[] @db.ObjectId\n  parentExecutionId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n  @@map(\"AdminScriptExecution\")\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n  @@map(\"ScriptSchedule\")\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n  @@map(\"UsageCounter\")\n}\n\n// Data-defined integrations (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              String           @id @default(auto()) @map(\"_id\") @db.ObjectId\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n  @@map(\"IntegrationDefinitionVersion\")\n}\n\n// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId     String      @db.ObjectId\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n  @@map(\"WorkflowRun\")\n}\n",
-  "inlineSchemaHash": "859eb4a2e2b603e677e1d05a9788c35035f1c54671dde4c711f4f372e27e1d98",
+  "inlineSchema": "// Frigg Framework - Prisma Schema\n// MongoDB database schema for enterprise integration platform\n// Migration from Mongoose ODM to Prisma ORM\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-mongodb\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"mongodb\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId String? @db.ObjectId\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n  @@map(\"User\")\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  String    @db.ObjectId\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n  @@map(\"Token\")\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          String   @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId      String?  @db.ObjectId\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@map(\"Credential\")\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  credentialId String?     @db.ObjectId\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       String?     @db.ObjectId\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with scalar lists\n  integrations   Integration[] @relation(\"IntegrationEntities\", fields: [integrationIds], references: [id])\n  integrationIds String[]      @db.ObjectId\n\n  syncs   Sync[]   @relation(\"SyncEntities\", fields: [syncIds], references: [id])\n  syncIds String[] @db.ObjectId\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n  @@map(\"Entity\")\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     String            @id @default(auto()) @map(\"_id\") @db.ObjectId\n  userId String?           @db.ObjectId\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"IntegrationEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n  @@map(\"Integration\")\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n  @@map(\"IntegrationMapping\")\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  // Core references\n  userId        String      @db.ObjectId\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId String      @db.ObjectId\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support\n  childProcesses  String[] @db.ObjectId\n  parentProcessId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@map(\"Process\")\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            String       @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String?      @db.ObjectId\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via explicit scalar list)\n  entities  Entity[] @relation(\"SyncEntities\", fields: [entityIds], references: [id])\n  entityIds String[] @db.ObjectId\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n  @@map(\"Sync\")\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  syncId   String? @db.ObjectId\n  sync     Sync?   @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId String  @db.ObjectId\n  entity   Entity  @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n  @@map(\"DataIdentifier\")\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            String          @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId String          @db.ObjectId\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n  @@map(\"Association\")\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  associationId String      @db.ObjectId\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      String      @db.ObjectId\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n  @@map(\"AssociationObject\")\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  state Json?\n\n  @@map(\"State\")\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           String  @id @default(auto()) @map(\"_id\") @db.ObjectId\n  connectionId String?\n\n  @@index([connectionId])\n  @@map(\"WebsocketConnection\")\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   String @id @default(auto()) @map(\"_id\") @db.ObjectId\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support\n  childExecutions   String[] @db.ObjectId\n  parentExecutionId String?  @db.ObjectId\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n  @@map(\"AdminScriptExecution\")\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              String    @id @default(auto()) @map(\"_id\") @db.ObjectId\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n  @@map(\"ScriptSchedule\")\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id String @id @default(auto()) @map(\"_id\") @db.ObjectId\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n  @@map(\"UsageCounter\")\n}\n\n// Integrations published as definitions (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              String           @id @default(auto()) @map(\"_id\") @db.ObjectId\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n  @@map(\"IntegrationDefinitionVersion\")\n}\n\n// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                String      @id @default(auto()) @map(\"_id\") @db.ObjectId\n  integrationId     String      @db.ObjectId\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n  @@map(\"WorkflowRun\")\n}\n",
+  "inlineSchemaHash": "3fdc5ba18e92cc70e8748797d4dcf146c607305e80cac6475bc8d93c183553f9",
   "copyEngine": true
 }
 config.dirname = '/'

package/generated/prisma-postgresql/edge.js

@@ -428,8 +428,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "// Frigg Framework - Prisma Schema (PostgreSQL)\n// PostgreSQL database schema for enterprise integration platform\n// Converted from MongoDB schema for relational database support\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-postgresql\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   Int      @id @default(autoincrement())\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId Int?\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      Int       @id @default(autoincrement())\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  Int\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          Int      @id @default(autoincrement())\n  userId      Int?\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           Int         @id @default(autoincrement())\n  credentialId Int?\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       Int?\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with implicit join tables\n  integrations Integration[]\n  syncs        Sync[]\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     Int               @id @default(autoincrement())\n  userId Int?\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            Int         @id @default(autoincrement())\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            Int          @id @default(autoincrement())\n  integrationId Int?\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       Int    @id @default(autoincrement())\n  syncId   Int?\n  sync     Sync?  @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId Int\n  entity   Entity @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            Int             @id @default(autoincrement())\n  integrationId Int\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            Int         @id @default(autoincrement())\n  associationId Int\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      Int\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id Int @id @default(autoincrement())\n\n  // Core references\n  userId        Int\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support - self-referential relation\n  parentProcessId Int?\n  parentProcess   Process?  @relation(\"ProcessHierarchy\", fields: [parentProcessId], references: [id], onDelete: SetNull)\n  childProcesses  Process[] @relation(\"ProcessHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@index([parentProcessId])\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    Int   @id @default(autoincrement())\n  state Json?\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           Int     @id @default(autoincrement())\n  connectionId String?\n\n  @@index([connectionId])\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   Int    @id @default(autoincrement())\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support - self-referential relation\n  parentExecutionId Int?\n  parentExecution   AdminScriptExecution?  @relation(\"AdminScriptExecutionHierarchy\", fields: [parentExecutionId], references: [id], onDelete: SetNull)\n  childExecutions   AdminScriptExecution[] @relation(\"AdminScriptExecutionHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              Int       @id @default(autoincrement())\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id Int @id @default(autoincrement())\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n}\n\n// Data-defined integrations (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              Int              @id @default(autoincrement())\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n}\n\n// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                Int         @id @default(autoincrement())\n  integrationId     Int\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n}\n",
-  "inlineSchemaHash": "7cbcf3d54afbe39160d69f8b640da30304af16dd1eb4ce3267842820b464be7a",
+  "inlineSchema": "// Frigg Framework - Prisma Schema (PostgreSQL)\n// PostgreSQL database schema for enterprise integration platform\n// Converted from MongoDB schema for relational database support\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-postgresql\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   Int      @id @default(autoincrement())\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId Int?\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      Int       @id @default(autoincrement())\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  Int\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          Int      @id @default(autoincrement())\n  userId      Int?\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           Int         @id @default(autoincrement())\n  credentialId Int?\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       Int?\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with implicit join tables\n  integrations Integration[]\n  syncs        Sync[]\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     Int               @id @default(autoincrement())\n  userId Int?\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            Int         @id @default(autoincrement())\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            Int          @id @default(autoincrement())\n  integrationId Int?\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       Int    @id @default(autoincrement())\n  syncId   Int?\n  sync     Sync?  @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId Int\n  entity   Entity @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            Int             @id @default(autoincrement())\n  integrationId Int\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            Int         @id @default(autoincrement())\n  associationId Int\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      Int\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id Int @id @default(autoincrement())\n\n  // Core references\n  userId        Int\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support - self-referential relation\n  parentProcessId Int?\n  parentProcess   Process?  @relation(\"ProcessHierarchy\", fields: [parentProcessId], references: [id], onDelete: SetNull)\n  childProcesses  Process[] @relation(\"ProcessHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@index([parentProcessId])\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    Int   @id @default(autoincrement())\n  state Json?\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           Int     @id @default(autoincrement())\n  connectionId String?\n\n  @@index([connectionId])\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   Int    @id @default(autoincrement())\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support - self-referential relation\n  parentExecutionId Int?\n  parentExecution   AdminScriptExecution?  @relation(\"AdminScriptExecutionHierarchy\", fields: [parentExecutionId], references: [id], onDelete: SetNull)\n  childExecutions   AdminScriptExecution[] @relation(\"AdminScriptExecutionHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              Int       @id @default(autoincrement())\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id Int @id @default(autoincrement())\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n}\n\n// Integrations published as definitions (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              Int              @id @default(autoincrement())\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n}\n\n// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                Int         @id @default(autoincrement())\n  integrationId     Int\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n}\n",
+  "inlineSchemaHash": "5d11039694b44af001971b7239ab8290b642c385239660aee17e709d4fa0b509",
   "copyEngine": true
 }
 config.dirname = '/'

package/generated/prisma-postgresql/index.js

@@ -429,8 +429,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "// Frigg Framework - Prisma Schema (PostgreSQL)\n// PostgreSQL database schema for enterprise integration platform\n// Converted from MongoDB schema for relational database support\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-postgresql\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   Int      @id @default(autoincrement())\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId Int?\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      Int       @id @default(autoincrement())\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  Int\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          Int      @id @default(autoincrement())\n  userId      Int?\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           Int         @id @default(autoincrement())\n  credentialId Int?\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       Int?\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with implicit join tables\n  integrations Integration[]\n  syncs        Sync[]\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     Int               @id @default(autoincrement())\n  userId Int?\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            Int         @id @default(autoincrement())\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            Int          @id @default(autoincrement())\n  integrationId Int?\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       Int    @id @default(autoincrement())\n  syncId   Int?\n  sync     Sync?  @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId Int\n  entity   Entity @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            Int             @id @default(autoincrement())\n  integrationId Int\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            Int         @id @default(autoincrement())\n  associationId Int\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      Int\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id Int @id @default(autoincrement())\n\n  // Core references\n  userId        Int\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support - self-referential relation\n  parentProcessId Int?\n  parentProcess   Process?  @relation(\"ProcessHierarchy\", fields: [parentProcessId], references: [id], onDelete: SetNull)\n  childProcesses  Process[] @relation(\"ProcessHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@index([parentProcessId])\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    Int   @id @default(autoincrement())\n  state Json?\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           Int     @id @default(autoincrement())\n  connectionId String?\n\n  @@index([connectionId])\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   Int    @id @default(autoincrement())\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support - self-referential relation\n  parentExecutionId Int?\n  parentExecution   AdminScriptExecution?  @relation(\"AdminScriptExecutionHierarchy\", fields: [parentExecutionId], references: [id], onDelete: SetNull)\n  childExecutions   AdminScriptExecution[] @relation(\"AdminScriptExecutionHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              Int       @id @default(autoincrement())\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id Int @id @default(autoincrement())\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n}\n\n// Data-defined integrations (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              Int              @id @default(autoincrement())\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n}\n\n// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                Int         @id @default(autoincrement())\n  integrationId     Int\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n}\n",
-  "inlineSchemaHash": "7cbcf3d54afbe39160d69f8b640da30304af16dd1eb4ce3267842820b464be7a",
+  "inlineSchema": "// Frigg Framework - Prisma Schema (PostgreSQL)\n// PostgreSQL database schema for enterprise integration platform\n// Converted from MongoDB schema for relational database support\n\ngenerator client {\n  provider      = \"prisma-client-js\"\n  output        = \"../generated/prisma-postgresql\"\n  binaryTargets = [\"native\", \"rhel-openssl-3.0.x\"] // native for local dev, rhel for Lambda deployment\n  // Library engine (default since Prisma 3.x): Rust query engine loads as a\n  // Node-API addon inside the same process. The binary engine forks a child\n  // query-engine subprocess and communicates over a local HTTP/IPC pipe with\n  // NO client-side timeout — a zombied child wedges the Node process until\n  // Lambda's 900s cap. Switching to library eliminates that entire class of\n  // silent hangs. See friggframework/frigg#580 for the investigation.\n  engineType    = \"library\"\n}\n\ndatasource db {\n  provider = \"postgresql\"\n  url      = env(\"DATABASE_URL\")\n}\n\n// ============================================================================\n// USER MODELS\n// ============================================================================\n\n/// User model with discriminator pattern support\n/// Replaces Mongoose discriminators (IndividualUser, OrganizationUser)\nmodel User {\n  id   Int      @id @default(autoincrement())\n  type UserType\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // IndividualUser fields (nullable for organizations)\n  email          String?\n  username       String?\n  hashword       String? // Bcrypt hashed password (handled in application layer)\n  appUserId      String?\n  organizationId Int?\n\n  // Self-referential relation for organization membership\n  organization User?  @relation(\"OrgMembers\", fields: [organizationId], references: [id], onDelete: NoAction, onUpdate: NoAction)\n  members      User[] @relation(\"OrgMembers\")\n\n  // OrganizationUser fields (nullable for individuals)\n  appOrgId String?\n  name     String?\n\n  // Relations\n  tokens       Token[]\n  credentials  Credential[]\n  entities     Entity[]\n  integrations Integration[]\n  processes    Process[]\n\n  @@unique([username, appUserId])\n  @@index([type])\n  @@index([appUserId])\n  @@index([organizationId])\n}\n\nenum UserType {\n  INDIVIDUAL\n  ORGANIZATION\n}\n\n// ============================================================================\n// AUTHENTICATION MODELS\n// ============================================================================\n\n/// Authentication tokens with expiration\n/// Bcrypt hashed tokens stored (handled in application layer)\nmodel Token {\n  id      Int       @id @default(autoincrement())\n  token   String // Bcrypt hashed\n  created DateTime  @default(now())\n  expires DateTime?\n  userId  Int\n  user    User      @relation(fields: [userId], references: [id], onDelete: Cascade)\n\n  @@index([userId])\n  @@index([expires])\n}\n\n// ============================================================================\n// CREDENTIAL & ENTITY MODELS\n// ============================================================================\n\n/// OAuth credentials and API tokens\n/// All sensitive data encrypted with KMS at rest\nmodel Credential {\n  id          Int      @id @default(autoincrement())\n  userId      Int?\n  user        User?    @relation(fields: [userId], references: [id], onDelete: Cascade)\n  authIsValid Boolean?\n  externalId  String?\n\n  // Dynamic OAuth fields stored as JSON (encrypted via Prisma middleware)\n  // Contains: access_token, refresh_token, domain, expires_in, token_type, etc.\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  entities Entity[]\n\n  @@index([userId])\n  @@index([externalId])\n}\n\n/// External service entities (API connections)\nmodel Entity {\n  id           Int         @id @default(autoincrement())\n  credentialId Int?\n  credential   Credential? @relation(fields: [credentialId], references: [id], onDelete: SetNull)\n  userId       Int?\n  user         User?       @relation(fields: [userId], references: [id], onDelete: Cascade)\n  name         String?\n  moduleName   String?\n  externalId   String?\n\n  data Json @default(\"{}\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations - many-to-many with implicit join tables\n  integrations Integration[]\n  syncs        Sync[]\n\n  dataIdentifiers    DataIdentifier[]\n  associationObjects AssociationObject[]\n\n  @@index([userId])\n  @@index([externalId])\n  @@index([moduleName])\n  @@index([credentialId])\n}\n\n// ============================================================================\n// INTEGRATION MODELS\n// ============================================================================\n\n/// Main integration configuration and state\nmodel Integration {\n  id     Int               @id @default(autoincrement())\n  userId Int?\n  user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)\n  status IntegrationStatus @default(IN_CREATION)\n\n  // Configuration and version\n  config  Json? // Integration configuration object\n  version String?\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  // Message arrays (stored as JSON)\n  errors   Json @default(\"[]\")\n  warnings Json @default(\"[]\")\n  info     Json @default(\"[]\")\n  logs     Json @default(\"[]\")\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  // Relations\n  associations Association[]\n  syncs        Sync[]\n  mappings     IntegrationMapping[]\n  processes    Process[]\n  workflowRuns WorkflowRun[]\n\n  @@index([userId])\n  @@index([status])\n}\n\nenum IntegrationStatus {\n  ENABLED\n  NEEDS_CONFIG\n  PROCESSING\n  DISABLED\n  ERROR\n  IN_CREATION\n  IN_DELETION\n}\n\n/// Integration-specific data mappings\n/// All mapping data encrypted with KMS\nmodel IntegrationMapping {\n  id            Int         @id @default(autoincrement())\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  sourceId      String?\n\n  // Encrypted mapping data (handled via Prisma middleware)\n  mapping Json?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, sourceId])\n  @@index([integrationId])\n  @@index([sourceId])\n}\n\n// ============================================================================\n// SYNC MODELS\n// ============================================================================\n\n/// Bidirectional data synchronization tracking\nmodel Sync {\n  id            Int          @id @default(autoincrement())\n  integrationId Int?\n  integration   Integration? @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Entity references (many-to-many via implicit join table)\n  entities Entity[]\n\n  hash String\n  name String\n\n  // Data identifiers (extracted to separate model)\n  dataIdentifiers DataIdentifier[]\n\n  @@index([integrationId])\n  @@index([hash])\n  @@index([name])\n}\n\n/// Data identifier for sync operations\n/// Replaces nested array structure in Mongoose\nmodel DataIdentifier {\n  id       Int    @id @default(autoincrement())\n  syncId   Int?\n  sync     Sync?  @relation(fields: [syncId], references: [id], onDelete: Cascade)\n  entityId Int\n  entity   Entity @relation(fields: [entityId], references: [id], onDelete: Cascade)\n\n  // Identifier data (can be any structure)\n  idData Json\n\n  hash String\n\n  @@index([syncId])\n  @@index([entityId])\n  @@index([hash])\n}\n\n// ============================================================================\n// ASSOCIATION MODELS\n// ============================================================================\n\n/// Entity associations with cardinality tracking\nmodel Association {\n  id            Int             @id @default(autoincrement())\n  integrationId Int\n  integration   Integration     @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  name          String\n  type          AssociationType\n  primaryObject String\n\n  // Associated objects (extracted to separate model)\n  objects AssociationObject[]\n\n  @@index([integrationId])\n  @@index([name])\n}\n\n/// Association object entry\n/// Replaces nested array structure in Mongoose\nmodel AssociationObject {\n  id            Int         @id @default(autoincrement())\n  associationId Int\n  association   Association @relation(fields: [associationId], references: [id], onDelete: Cascade)\n  entityId      Int\n  entity        Entity      @relation(fields: [entityId], references: [id], onDelete: Cascade)\n  objectType    String\n  objId         String\n  metadata      Json? // Optional metadata\n\n  @@index([associationId])\n  @@index([entityId])\n}\n\nenum AssociationType {\n  ONE_TO_MANY\n  ONE_TO_ONE\n  MANY_TO_ONE\n}\n\n// ============================================================================\n// PROCESS MODELS\n// ============================================================================\n\n/// Generic Process Model - tracks any long-running operation\n/// Used for: CRM syncs, data migrations, bulk operations, etc.\nmodel Process {\n  id Int @id @default(autoincrement())\n\n  // Core references\n  userId        Int\n  user          User        @relation(fields: [userId], references: [id], onDelete: Cascade)\n  integrationId Int\n  integration   Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n\n  // Process identification\n  name String // e.g., \"zoho-crm-contact-sync\", \"pipedrive-lead-sync\"\n  type String // e.g., \"CRM_SYNC\", \"DATA_MIGRATION\", \"BULK_OPERATION\"\n\n  // State machine\n  state String // Current state (integration-defined states)\n\n  // Flexible storage\n  context Json @default(\"{}\") // Process-specific data (pagination, metadata, etc.)\n  results Json @default(\"{}\") // Process results and metrics\n\n  // Hierarchy support - self-referential relation\n  parentProcessId Int?\n  parentProcess   Process?  @relation(\"ProcessHierarchy\", fields: [parentProcessId], references: [id], onDelete: SetNull)\n  childProcesses  Process[] @relation(\"ProcessHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([userId])\n  @@index([integrationId])\n  @@index([type])\n  @@index([state])\n  @@index([name])\n  @@index([parentProcessId])\n}\n\n// ============================================================================\n// UTILITY MODELS\n// ============================================================================\n\n/// Generic state storage\nmodel State {\n  id    Int   @id @default(autoincrement())\n  state Json?\n}\n\n/// AWS API Gateway WebSocket connection tracking\nmodel WebsocketConnection {\n  id           Int     @id @default(autoincrement())\n  connectionId String?\n\n  @@index([connectionId])\n}\n\n// ============================================================================\n// ADMIN PROCESS MODELS\n// ============================================================================\n\n/// Admin process state machine\nenum AdminScriptExecutionState {\n  PENDING\n  RUNNING\n  COMPLETED\n  FAILED\n}\n\n/// Admin process tracking (like Process but without user/integration FK)\n/// Used for: admin scripts, db migrations, system maintenance tasks\nmodel AdminScriptExecution {\n  id   Int    @id @default(autoincrement())\n  name String // e.g., \"oauth-token-refresh\", \"db-migration-xyz\"\n  type String // e.g., \"ADMIN_SCRIPT\", \"DB_MIGRATION\"\n\n  // State machine\n  state AdminScriptExecutionState @default(PENDING)\n\n  // Flexible storage (mirrors Process model pattern)\n  context Json @default(\"{}\") // input, trigger, audit info, script version\n  results Json @default(\"{}\") // output, logs, metrics, errors\n\n  // Hierarchy support - self-referential relation\n  parentExecutionId Int?\n  parentExecution   AdminScriptExecution?  @relation(\"AdminScriptExecutionHierarchy\", fields: [parentExecutionId], references: [id], onDelete: SetNull)\n  childExecutions   AdminScriptExecution[] @relation(\"AdminScriptExecutionHierarchy\")\n\n  // Timestamps\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([name, createdAt(sort: Desc)])\n  @@index([state])\n  @@index([type])\n}\n\n/// Script scheduling configuration for hybrid scheduling (SQS + EventBridge)\nmodel ScriptSchedule {\n  id              Int       @id @default(autoincrement())\n  scriptName      String    @unique\n  enabled         Boolean   @default(false)\n  cronExpression  String?\n  timezone        String    @default(\"UTC\")\n  lastTriggeredAt DateTime?\n  nextTriggerAt   DateTime?\n\n  // External Scheduler (e.g., AWS EventBridge Scheduler)\n  externalScheduleId   String?\n  externalScheduleName String?\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@index([enabled])\n}\n\n/// Durable usage counters, deliberately isolated: no userId and no foreign key\n/// to Integration, so a user-scoped query can never return a usage row and usage\n/// history survives integration deletion.\nmodel UsageCounter {\n  id Int @id @default(autoincrement())\n\n  integrationId   String\n  integrationType String\n  metric          String\n  window          String // e.g. \"day:2026-07-05\" or \"hour:2026-07-05T14\"\n  value           BigInt @default(0) // BigInt: a busy day/hour counter can exceed 32-bit\n\n  createdAt DateTime @default(now())\n  updatedAt DateTime @updatedAt\n\n  @@unique([integrationId, integrationType, metric, window])\n  // Covers totals() (metric + window prefix/range, no integrationType filter).\n  @@index([metric, window])\n  // Covers series() (metric + integrationType + window range).\n  @@index([metric, integrationType, window])\n}\n\n// Integrations published as definitions (ADR-063): one immutable row per published definition version.\nenum DefinitionStatus {\n  DRAFT\n  PUBLISHED\n  DEPRECATED\n  RETIRED\n}\n\nmodel IntegrationDefinitionVersion {\n  id              Int              @id @default(autoincrement())\n  definitionId    String\n  version         String\n  schemaVersion   String\n  status          DefinitionStatus @default(DRAFT)\n  checksum        String\n  document        Json\n  changeLevel     String?\n  previousVersion String?\n  notes           String?\n  createdBy       String?\n  // The workspace an integration a user built belongs to (null: the app's own catalogue, offered to everyone).\n  workspaceId     String?\n  publishedAt     DateTime?\n  createdAt       DateTime         @default(now())\n  updatedAt       DateTime         @updatedAt\n\n  @@unique([definitionId, version])\n  @@index([definitionId, status])\n  @@index([workspaceId, status])\n}\n\n// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or\n// response bodies.\nmodel WorkflowRun {\n  id                Int         @id @default(autoincrement())\n  integrationId     Int\n  integration       Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)\n  definitionId      String\n  definitionVersion String\n  workflowId        String\n  triggerType       String\n  eventId           String?\n  status            String\n  reason            String?\n  error             String?\n  retryable         Boolean     @default(false)\n  trace             Json        @default(\"[]\")\n  /// The runtime's run id (run_...): how routes and resume jobs address a run\n  runKey            String?\n  /// A paused run (status waiting): which step, and what it waits for. Never request or response bodies.\n  waitingFor        Json?\n  resumeAt          DateTime?\n  startedAt         DateTime\n  endedAt           DateTime?\n  createdAt         DateTime    @default(now())\n\n  @@index([integrationId, runKey])\n  @@index([integrationId, startedAt])\n  @@index([integrationId, workflowId, startedAt])\n  @@index([integrationId, status])\n}\n",
+  "inlineSchemaHash": "5d11039694b44af001971b7239ab8290b642c385239660aee17e709d4fa0b509",
   "copyEngine": true
 }
 

package/generated/prisma-postgresql/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "prisma-client-760e990f518469cdc89cf25efad3bdbf1091a5119d6c59391b1c78420e983858",
+  "name": "prisma-client-b0bdf96a319606cd312332ff7520ff5e3bb58f1f4352747d36059c903ebda35d",
   "main": "index.js",
   "types": "index.d.ts",
   "browser": "default.js",

package/generated/prisma-postgresql/schema.prisma

@@ -436,7 +436,7 @@ model UsageCounter {
   @@index([metric, integrationType, window])
 }
 
-// Data-defined integrations (ADR-063): one immutable row per published definition version.
+// Integrations published as definitions (ADR-063): one immutable row per published definition version.
 enum DefinitionStatus {
   DRAFT
   PUBLISHED
@@ -467,7 +467,7 @@ model IntegrationDefinitionVersion {
   @@index([workspaceId, status])
 }
 
-// One row per data-defined workflow run. trace holds step ids, statuses, timings and error messages, never request or
+// One row per workflow run. trace holds step ids, statuses, timings and error messages, never request or
 // response bodies.
 model WorkflowRun {
   id                Int         @id @default(autoincrement())