@naisys/erp 3.0.0-beta.10

package/dist/userService.js

@@ -0,0 +1,118 @@
+import { SUPER_ADMIN_USERNAME } from "@naisys/common";
+import { ensureSuperAdmin } from "@naisys/supervisor-database";
+import bcrypt from "bcryptjs";
+import { randomBytes, randomUUID } from "crypto";
+import readline from "readline/promises";
+import erpDb from "./erpDb.js";
+const SALT_ROUNDS = 10;
+/**
+ * Ensure a superadmin user exists in the local ERP database.
+ * For standalone mode (no supervisor auth).
+ */
+export async function ensureLocalSuperAdmin() {
+    const existing = await erpDb.user.findUnique({
+        where: { username: SUPER_ADMIN_USERNAME },
+    });
+    if (existing) {
+        // Ensure superadmin has erp_admin permission
+        await ensureErpAdminPermission(existing.id);
+    }
+    else {
+        const password = randomUUID().slice(0, 8);
+        const hash = await bcrypt.hash(password, SALT_ROUNDS);
+        const user = await erpDb.user.create({
+            data: {
+                uuid: randomUUID(),
+                username: SUPER_ADMIN_USERNAME,
+                passwordHash: hash,
+                apiKey: randomBytes(32).toString("hex"),
+            },
+        });
+        await ensureErpAdminPermission(user.id);
+        console.log(`\n  ${SUPER_ADMIN_USERNAME} user created. Password: ${password}`);
+        console.log(`  Change it via --reset-password\n`);
+    }
+    // Warn if agent users exist without supervisor auth
+    const agentCount = await erpDb.user.count({ where: { isAgent: true } });
+    if (agentCount > 0) {
+        console.warn(`[ERP] Warning: ${agentCount} agent user(s) found but supervisor auth is disabled. ` +
+            `Agent API key lookups and authentication will not work. ` +
+            `Start with --supervisor-auth to enable.`);
+    }
+}
+/**
+ * Sync superadmin from supervisor into ERP DB and ensure permissions.
+ * For supervisor auth mode.
+ */
+export async function ensureSupervisorSuperAdmin() {
+    const result = await ensureSuperAdmin();
+    await erpDb.user.upsert({
+        where: { uuid: result.user.uuid },
+        create: {
+            uuid: result.user.uuid,
+            username: result.user.username,
+            passwordHash: result.user.passwordHash,
+            apiKey: result.user.apiKey,
+        },
+        update: {
+            username: result.user.username,
+            passwordHash: result.user.passwordHash,
+            apiKey: result.user.apiKey,
+        },
+    });
+    const localSuperAdmin = await erpDb.user.findUnique({
+        where: { uuid: result.user.uuid },
+    });
+    if (localSuperAdmin) {
+        await ensureErpAdminPermission(localSuperAdmin.id);
+    }
+    if (result.created) {
+        console.log(`[ERP] ${SUPER_ADMIN_USERNAME} user created. Password: ${result.generatedPassword}`);
+    }
+}
+/**
+ * Ensure a user has the erp_admin permission.
+ */
+export async function ensureErpAdminPermission(userId) {
+    const existing = await erpDb.userPermission.findUnique({
+        where: { userId_permission: { userId, permission: "erp_admin" } },
+    });
+    if (!existing) {
+        await erpDb.userPermission.create({
+            data: { userId, permission: "erp_admin" },
+        });
+    }
+}
+/**
+ * Interactive CLI to reset a local user's password.
+ * For standalone mode (no supervisor auth).
+ */
+export async function resetLocalPassword() {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    try {
+        const username = await rl.question("Username: ");
+        const user = await erpDb.user.findUnique({ where: { username } });
+        if (!user) {
+            console.error(`User '${username}' not found.`);
+            process.exit(1);
+        }
+        const password = await rl.question("New password: ");
+        if (password.length < 6) {
+            console.error("Password must be at least 6 characters.");
+            process.exit(1);
+        }
+        const hash = await bcrypt.hash(password, SALT_ROUNDS);
+        await erpDb.user.update({
+            where: { id: user.id },
+            data: { passwordHash: hash },
+        });
+        console.log(`Password reset for '${username}'.`);
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=userService.js.map

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "@naisys/erp",
+  "version": "3.0.0-beta.10",
+  "description": "NAISYS ERP - Web UI for AI-driven order and work management",
+  "type": "module",
+  "main": "dist/erpServer.js",
+  "bin": {
+    "naisys-erp": "bin/naisys-erp"
+  },
+  "exports": {
+    ".": "./dist/erpServer.js"
+  },
+  "scripts": {
+    "clean": "rimraf dist client-dist .test-naisys",
+    "dev": "tsx watch src/erpServer.ts",
+    "build": "prisma generate && tsc",
+    "bundle": "npx shx rm -rf client-dist && npx shx cp -r ../client/dist client-dist",
+    "start": "node dist/erpServer.js",
+    "start:reset-password": "node dist/erpServer.js --reset-password",
+    "type-check": "tsc --noEmit",
+    "npm:publish:dryrun": "npm publish --dry-run",
+    "npm:publish": "npm publish --access public",
+    "db:generate": "prisma generate",
+    "db:migrate": "prisma migrate dev",
+    "db:push": "prisma db push",
+    "test": "vitest run && npx playwright test"
+  },
+  "files": [
+    "dist",
+    "client-dist",
+    "bin",
+    "prisma.config.ts",
+    "prisma/schema.prisma",
+    "prisma/migrations",
+    "!dist/**/*.map",
+    "!dist/**/*.d.ts",
+    "!dist/**/*.d.ts.map",
+    "!dist/**/tests",
+    "!dist/**/*.test.*"
+  ],
+  "dependencies": {
+    "@fastify/cookie": "^11.0.2",
+    "@fastify/cors": "^11.2.0",
+    "@fastify/multipart": "^9.4.0",
+    "@fastify/rate-limit": "^10.3.0",
+    "@fastify/static": "^9.0.0",
+    "@fastify/swagger": "^9.7.0",
+    "@naisys/erp-shared": "3.0.0-beta.10",
+    "@naisys/common": "3.0.0-beta.10",
+    "@naisys/common-node": "3.0.0-beta.10",
+    "@naisys/hub-database": "3.0.0-beta.10",
+    "@naisys/supervisor-database": "3.0.0-beta.10",
+    "@prisma/adapter-better-sqlite3": "^7.5.0",
+    "@prisma/client": "^7.5.0",
+    "@scalar/fastify-api-reference": "^1.48.7",
+    "bcryptjs": "^3.0.2",
+    "dotenv": "^17.3.1",
+    "fastify": "^5.8.2",
+    "fastify-plugin": "^5.1.0",
+    "fastify-type-provider-zod": "^6.1.0",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.58.2",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^25.5.0",
+    "prisma": "^7.5.0",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  }
+}

package/prisma/migrations/20260212170352_init/migration.sql

@@ -0,0 +1,125 @@
+-- CreateTable
+CREATE TABLE "plan_orders" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "key" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "description" TEXT NOT NULL DEFAULT '',
+    "status" TEXT NOT NULL DEFAULT 'active',
+    "created_by" INTEGER NOT NULL,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    CONSTRAINT "plan_orders_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "plan_orders_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "plan_order_revs" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "plan_order_id" INTEGER NOT NULL,
+    "rev_no" INTEGER NOT NULL,
+    "status" TEXT NOT NULL DEFAULT 'draft',
+    "notes" TEXT,
+    "change_summary" TEXT,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "plan_order_revs_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "plan_order_revs_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "plan_order_revs_plan_order_id_fkey" FOREIGN KEY ("plan_order_id") REFERENCES "plan_orders" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "exec_orders" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "order_no" INTEGER NOT NULL,
+    "plan_order_id" INTEGER NOT NULL,
+    "plan_order_rev_id" INTEGER NOT NULL,
+    "status" TEXT NOT NULL DEFAULT 'released',
+    "priority" TEXT NOT NULL DEFAULT 'medium',
+    "scheduled_start_at" DATETIME,
+    "due_at" DATETIME,
+    "released_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "assigned_to" TEXT,
+    "notes" TEXT,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "exec_orders_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "exec_orders_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "exec_orders_plan_order_id_fkey" FOREIGN KEY ("plan_order_id") REFERENCES "plan_orders" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "exec_orders_plan_order_rev_id_fkey" FOREIGN KEY ("plan_order_rev_id") REFERENCES "plan_order_revs" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "users" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "uuid" TEXT NOT NULL,
+    "username" TEXT NOT NULL,
+    "password_hash" TEXT NOT NULL,
+    "is_agent" INTEGER NOT NULL DEFAULT 0,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updated_at" DATETIME NOT NULL,
+    "deleted_at" DATETIME,
+    "session_token_hash" TEXT,
+    "session_expires_at" DATETIME
+);
+
+-- CreateTable
+CREATE TABLE "schema_version" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT DEFAULT 1,
+    "version" INTEGER NOT NULL,
+    "updated" TEXT NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "audit_log" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "entity_type" TEXT NOT NULL,
+    "entity_id" INTEGER NOT NULL,
+    "action" TEXT NOT NULL,
+    "field" TEXT NOT NULL,
+    "old_value" TEXT,
+    "new_value" TEXT,
+    "user_id" INTEGER NOT NULL,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "audit_log_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "plan_orders_key_key" ON "plan_orders"("key");
+
+-- CreateIndex
+CREATE INDEX "plan_orders_status_idx" ON "plan_orders"("status");
+
+-- CreateIndex
+CREATE INDEX "plan_orders_created_at_idx" ON "plan_orders"("created_at");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "plan_order_revs_plan_order_id_rev_no_key" ON "plan_order_revs"("plan_order_id", "rev_no");
+
+-- CreateIndex
+CREATE INDEX "exec_orders_status_idx" ON "exec_orders"("status");
+
+-- CreateIndex
+CREATE INDEX "exec_orders_priority_idx" ON "exec_orders"("priority");
+
+-- CreateIndex
+CREATE INDEX "exec_orders_created_at_idx" ON "exec_orders"("created_at");
+
+-- CreateIndex
+CREATE INDEX "exec_orders_plan_order_rev_id_idx" ON "exec_orders"("plan_order_rev_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "exec_orders_plan_order_id_order_no_key" ON "exec_orders"("plan_order_id", "order_no");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_uuid_key" ON "users"("uuid");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_username_key" ON "users"("username");
+
+-- CreateIndex
+CREATE INDEX "audit_log_entity_type_entity_id_idx" ON "audit_log"("entity_type", "entity_id");

package/prisma/migrations/20260308000000_multi_session/migration.sql

@@ -0,0 +1,23 @@
+-- CreateTable
+CREATE TABLE "sessions" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "user_id" INTEGER NOT NULL,
+    "token_hash" TEXT NOT NULL,
+    "expires_at" DATETIME NOT NULL,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "sessions_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "sessions_token_hash_key" ON "sessions"("token_hash");
+
+-- Migrate existing sessions
+INSERT INTO "sessions" ("user_id", "token_hash", "expires_at", "created_at")
+SELECT "id", "session_token_hash", "session_expires_at", CURRENT_TIMESTAMP
+FROM "users"
+WHERE "session_token_hash" IS NOT NULL AND "session_expires_at" IS NOT NULL
+  AND "session_token_hash" != '!sso';
+
+-- DropColumns
+ALTER TABLE "users" DROP COLUMN "session_token_hash";
+ALTER TABLE "users" DROP COLUMN "session_expires_at";

package/prisma/migrations/20260309000000_add_user_api_key/migration.sql

@@ -0,0 +1,5 @@
+-- AlterTable
+ALTER TABLE "users" ADD COLUMN "api_key" TEXT;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_api_key_key" ON "users"("api_key");

package/prisma/migrations/20260309010000_add_plan_operations/migration.sql

@@ -0,0 +1,21 @@
+-- CreateTable
+CREATE TABLE "plan_operations" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "plan_order_rev_id" INTEGER NOT NULL,
+    "seq_no" INTEGER NOT NULL,
+    "title" TEXT NOT NULL,
+    "description" TEXT NOT NULL DEFAULT '',
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "plan_operations_plan_order_rev_id_fkey" FOREIGN KEY ("plan_order_rev_id") REFERENCES "plan_order_revs" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "plan_operations_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "plan_operations_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "plan_operations_plan_order_rev_id_seq_no_key" ON "plan_operations"("plan_order_rev_id", "seq_no");
+
+-- UpdateVersion
+UPDATE "schema_version" SET "version" = 5, "updated" = datetime('now');

package/prisma/migrations/20260309020000_rename_exec_orders_to_order_runs/migration.sql

@@ -0,0 +1,13 @@
+ALTER TABLE "exec_orders" RENAME TO "order_runs";
+DROP INDEX "exec_orders_status_idx";
+DROP INDEX "exec_orders_priority_idx";
+DROP INDEX "exec_orders_created_at_idx";
+DROP INDEX "exec_orders_plan_order_rev_id_idx";
+DROP INDEX "exec_orders_plan_order_id_order_no_key";
+CREATE INDEX "order_runs_status_idx" ON "order_runs"("status");
+CREATE INDEX "order_runs_priority_idx" ON "order_runs"("priority");
+CREATE INDEX "order_runs_created_at_idx" ON "order_runs"("created_at");
+CREATE INDEX "order_runs_plan_order_rev_id_idx" ON "order_runs"("plan_order_rev_id");
+CREATE UNIQUE INDEX "order_runs_plan_order_id_order_no_key" ON "order_runs"("plan_order_id", "order_no");
+UPDATE "audit_log" SET "entity_type" = 'OrderRun' WHERE "entity_type" = 'ExecOrder';
+UPDATE "schema_version" SET "version" = 6, "updated" = datetime('now');

package/prisma/migrations/20260310000000_rename_plan_order_revs_to_order_revisions/migration.sql

@@ -0,0 +1,22 @@
+-- Rename table
+ALTER TABLE "plan_order_revs" RENAME TO "order_revisions";
+
+-- Recreate unique index with new table name
+DROP INDEX "plan_order_revs_plan_order_id_rev_no_key";
+CREATE UNIQUE INDEX "order_revisions_plan_order_id_rev_no_key" ON "order_revisions"("plan_order_id", "rev_no");
+
+-- Rename FK column on order_runs
+ALTER TABLE "order_runs" RENAME COLUMN "plan_order_rev_id" TO "order_rev_id";
+DROP INDEX "order_runs_plan_order_rev_id_idx";
+CREATE INDEX "order_runs_order_rev_id_idx" ON "order_runs"("order_rev_id");
+
+-- Rename FK column on plan_operations
+ALTER TABLE "plan_operations" RENAME COLUMN "plan_order_rev_id" TO "order_rev_id";
+DROP INDEX "plan_operations_plan_order_rev_id_seq_no_key";
+CREATE UNIQUE INDEX "plan_operations_order_rev_id_seq_no_key" ON "plan_operations"("order_rev_id", "seq_no");
+
+-- Update audit entity type
+UPDATE "audit_log" SET "entity_type" = 'OrderRevision' WHERE "entity_type" = 'PlanningOrderRevision';
+
+-- Bump schema version
+UPDATE "schema_version" SET "version" = 7, "updated" = datetime('now');

package/prisma/migrations/20260310100000_rename_plan_orders_to_orders/migration.sql

@@ -0,0 +1,23 @@
+-- Rename plan_orders table
+ALTER TABLE "plan_orders" RENAME TO "orders";
+
+-- Recreate indexes with new table name
+DROP INDEX "plan_orders_key_key";
+CREATE UNIQUE INDEX "orders_key_key" ON "orders"("key");
+DROP INDEX "plan_orders_status_idx";
+CREATE INDEX "orders_status_idx" ON "orders"("status");
+DROP INDEX "plan_orders_created_at_idx";
+CREATE INDEX "orders_created_at_idx" ON "orders"("created_at");
+
+-- Rename FK column on order_revisions
+ALTER TABLE "order_revisions" RENAME COLUMN "plan_order_id" TO "order_id";
+DROP INDEX "order_revisions_plan_order_id_rev_no_key";
+CREATE UNIQUE INDEX "order_revisions_order_id_rev_no_key" ON "order_revisions"("order_id", "rev_no");
+
+-- Rename FK column on order_runs
+ALTER TABLE "order_runs" RENAME COLUMN "plan_order_id" TO "order_id";
+DROP INDEX "order_runs_plan_order_id_order_no_key";
+CREATE UNIQUE INDEX "order_runs_order_id_order_no_key" ON "order_runs"("order_id", "order_no");
+
+-- Bump schema version
+UPDATE "schema_version" SET "version" = 8, "updated" = datetime('now');

package/prisma/migrations/20260310200000_rename_order_no_to_run_no/migration.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "order_runs" RENAME COLUMN "order_no" TO "run_no";
+DROP INDEX "order_runs_order_id_order_no_key";
+CREATE UNIQUE INDEX "order_runs_order_id_run_no_key" ON "order_runs"("order_id", "run_no");

package/prisma/migrations/20260312000000_add_user_permissions/migration.sql

@@ -0,0 +1,16 @@
+-- CreateTable
+CREATE TABLE "user_permissions" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "user_id" INTEGER NOT NULL,
+    "permission" TEXT NOT NULL,
+    "granted_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "granted_by" INTEGER,
+    CONSTRAINT "user_permissions_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "users" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "user_permissions_granted_by_fkey" FOREIGN KEY ("granted_by") REFERENCES "users" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "user_permissions_user_id_permission_key" ON "user_permissions"("user_id", "permission");
+
+-- UpdateSchemaVersion
+UPDATE "schema_version" SET "version" = 10, "updated" = datetime('now');

package/prisma/migrations/20260313000000_rename_plan_operations_to_operations/migration.sql

@@ -0,0 +1,2 @@
+-- Rename plan_operations table to operations
+ALTER TABLE "plan_operations" RENAME TO "operations";

package/prisma/migrations/20260313100000_add_steps/migration.sql

@@ -0,0 +1,20 @@
+-- CreateTable
+CREATE TABLE "steps" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "operation_id" INTEGER NOT NULL,
+    "seq_no" INTEGER NOT NULL,
+    "instructions" TEXT NOT NULL DEFAULT '',
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "steps_operation_id_fkey" FOREIGN KEY ("operation_id") REFERENCES "operations" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "steps_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "steps_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "steps_operation_id_seq_no_key" ON "steps"("operation_id", "seq_no");
+
+-- UpdateSchemaVersion
+UPDATE "schema_version" SET "version" = 12, "updated" = datetime('now');

package/prisma/migrations/20260314000000_add_step_fields/migration.sql

@@ -0,0 +1,22 @@
+-- CreateTable
+CREATE TABLE "step_fields" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "step_id" INTEGER NOT NULL,
+    "seq_no" INTEGER NOT NULL,
+    "label" TEXT NOT NULL,
+    "type" TEXT NOT NULL DEFAULT 'string',
+    "required" BOOLEAN NOT NULL DEFAULT 0,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "step_fields_step_id_fkey" FOREIGN KEY ("step_id") REFERENCES "steps" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "step_fields_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "step_fields_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "step_fields_step_id_seq_no_key" ON "step_fields"("step_id", "seq_no");
+
+-- UpdateSchemaVersion
+UPDATE "schema_version" SET "version" = 13, "updated" = datetime('now');

package/prisma/migrations/20260315000000_add_operation_runs/migration.sql

@@ -0,0 +1,24 @@
+-- CreateTable
+CREATE TABLE "operation_runs" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "order_run_id" INTEGER NOT NULL,
+    "operation_id" INTEGER NOT NULL,
+    "status" TEXT NOT NULL DEFAULT 'pending',
+    "completed_at" DATETIME,
+    "notes" TEXT,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "operation_runs_order_run_id_fkey" FOREIGN KEY ("order_run_id") REFERENCES "order_runs" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "operation_runs_operation_id_fkey" FOREIGN KEY ("operation_id") REFERENCES "operations" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "operation_runs_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "operation_runs_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "operation_runs_order_run_id_operation_id_key" ON "operation_runs"("order_run_id", "operation_id");
+CREATE INDEX "operation_runs_status_idx" ON "operation_runs"("status");
+
+-- UpdateSchemaVersion
+UPDATE "schema_version" SET "version" = 14, "updated" = datetime('now');

package/prisma/migrations/20260315100000_add_step_runs/migration.sql

@@ -0,0 +1,40 @@
+-- CreateTable
+CREATE TABLE "step_runs" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "operation_run_id" INTEGER NOT NULL,
+    "step_id" INTEGER NOT NULL,
+    "completed" BOOLEAN NOT NULL DEFAULT 0,
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "step_runs_operation_run_id_fkey" FOREIGN KEY ("operation_run_id") REFERENCES "operation_runs" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "step_runs_step_id_fkey" FOREIGN KEY ("step_id") REFERENCES "steps" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "step_runs_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "step_runs_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "step_runs_operation_run_id_step_id_key" ON "step_runs"("operation_run_id", "step_id");
+
+-- CreateTable
+CREATE TABLE "step_field_values" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "step_run_id" INTEGER NOT NULL,
+    "step_field_id" INTEGER NOT NULL,
+    "value" TEXT NOT NULL DEFAULT '',
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "step_field_values_step_run_id_fkey" FOREIGN KEY ("step_run_id") REFERENCES "step_runs" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "step_field_values_step_field_id_fkey" FOREIGN KEY ("step_field_id") REFERENCES "step_fields" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "step_field_values_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "step_field_values_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "step_field_values_step_run_id_step_field_id_key" ON "step_field_values"("step_run_id", "step_field_id");
+
+-- UpdateSchemaVersion
+UPDATE "schema_version" SET "version" = 15, "updated" = datetime('now');

package/prisma/migrations/20260316000000_drop_order_name/migration.sql

@@ -0,0 +1,12 @@
+-- Drop the "name" column from the orders table.
+ALTER TABLE "orders" DROP COLUMN "name";
+
+-- Rename "notes" to "description" in order_revisions and make it non-nullable.
+ALTER TABLE "order_revisions" RENAME COLUMN "notes" TO "description";
+UPDATE "order_revisions" SET "description" = '' WHERE "description" IS NULL;
+
+-- Drop the "released_at" column from the order_runs table.
+ALTER TABLE "order_runs" DROP COLUMN "released_at";
+
+-- Rename "notes" to "feedback" on operation_runs.
+ALTER TABLE "operation_runs" RENAME COLUMN "notes" TO "feedback";

package/prisma/migrations/20260317000000_add_attachments/migration.sql

@@ -0,0 +1,28 @@
+-- Create attachments table
+CREATE TABLE "attachments" (
+  "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+  "filepath" TEXT NOT NULL,
+  "filename" TEXT NOT NULL,
+  "file_size" INTEGER NOT NULL,
+  "file_hash" TEXT NOT NULL,
+  "uploaded_by" INTEGER NOT NULL,
+  "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "attachments_uploaded_by_fkey" FOREIGN KEY ("uploaded_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+CREATE INDEX "attachments_file_hash_idx" ON "attachments" ("file_hash");
+
+-- Create step_field_attachments junction table
+CREATE TABLE "step_field_attachments" (
+  "step_field_value_id" INTEGER NOT NULL,
+  "attachment_id" INTEGER NOT NULL,
+  "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "step_field_attachments_step_field_value_id_fkey" FOREIGN KEY ("step_field_value_id") REFERENCES "step_field_values" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+  CONSTRAINT "step_field_attachments_attachment_id_fkey" FOREIGN KEY ("attachment_id") REFERENCES "attachments" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+  PRIMARY KEY ("step_field_value_id", "attachment_id")
+);
+
+-- No DDL needed for new StepFieldType value 'attachment': SQLite stores enums as TEXT.
+
+-- Bump schema version
+UPDATE "schema_version" SET "version" = 26, "updated" = datetime('now');

package/prisma/migrations/20260317000000_add_items/migration.sql

@@ -0,0 +1,21 @@
+-- CreateTable
+CREATE TABLE "items" (
+    "id" INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
+    "key" TEXT NOT NULL,
+    "description" TEXT NOT NULL DEFAULT '',
+    "created_at" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "created_by" INTEGER NOT NULL,
+    "updated_at" DATETIME NOT NULL,
+    "updated_by" INTEGER NOT NULL,
+    CONSTRAINT "items_created_by_fkey" FOREIGN KEY ("created_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE,
+    CONSTRAINT "items_updated_by_fkey" FOREIGN KEY ("updated_by") REFERENCES "users" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "items_key_key" ON "items"("key");
+
+-- CreateIndex
+CREATE INDEX "items_created_at_idx" ON "items"("created_at");
+
+-- UpdateSchemaVersion
+UPDATE "schema_version" SET "version" = 17, "updated" = datetime('now');

package/prisma/migrations/20260317100000_add_order_item_id/migration.sql

@@ -0,0 +1,8 @@
+-- Add item_id column to orders
+ALTER TABLE "orders" ADD COLUMN "item_id" INTEGER REFERENCES "items"("id") ON DELETE RESTRICT;
+
+-- CreateIndex
+CREATE INDEX "orders_item_id_idx" ON "orders"("item_id");
+
+-- UpdateSchemaVersion
+UPDATE "schema_version" SET "version" = 18, "updated" = datetime('now');