@openork/cli 0.1.0 → 0.2.0

package/dist/prisma/migrations/20260401085053_schema_sync/migration.sql

@@ -0,0 +1,178 @@
+-- AlterTable
+ALTER TABLE "AgentRun" ADD COLUMN "cacheReadTokens" INTEGER;
+ALTER TABLE "AgentRun" ADD COLUMN "cacheWriteTokens" INTEGER;
+ALTER TABLE "AgentRun" ADD COLUMN "inputTokens" INTEGER;
+ALTER TABLE "AgentRun" ADD COLUMN "model" TEXT;
+ALTER TABLE "AgentRun" ADD COLUMN "outputTokens" INTEGER;
+ALTER TABLE "AgentRun" ADD COLUMN "summary" TEXT;
+
+-- AlterTable
+ALTER TABLE "WorkflowRun" ADD COLUMN "payload" TEXT;
+
+-- CreateTable
+CREATE TABLE "Credential" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "type" TEXT NOT NULL,
+    "data" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "LogEntry" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "agentRunId" TEXT NOT NULL,
+    "stream" TEXT NOT NULL DEFAULT 'stdout',
+    "text" TEXT NOT NULL,
+    "timestamp" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "LogEntry_agentRunId_fkey" FOREIGN KEY ("agentRunId") REFERENCES "AgentRun" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "TeamSession" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "teamId" TEXT NOT NULL,
+    "teamName" TEXT NOT NULL,
+    "strategy" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "prompt" TEXT NOT NULL,
+    "maxRounds" INTEGER NOT NULL,
+    "totalRounds" INTEGER NOT NULL,
+    "error" TEXT,
+    "inputTokens" INTEGER NOT NULL DEFAULT 0,
+    "outputTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheReadTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheWriteTokens" INTEGER NOT NULL DEFAULT 0,
+    "startedAt" DATETIME NOT NULL,
+    "completedAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- CreateTable
+CREATE TABLE "AgentChatSession" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "agentId" TEXT NOT NULL,
+    "agentName" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "prompt" TEXT NOT NULL,
+    "output" TEXT,
+    "model" TEXT,
+    "cli" TEXT,
+    "error" TEXT,
+    "inputTokens" INTEGER NOT NULL DEFAULT 0,
+    "outputTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheReadTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheWriteTokens" INTEGER NOT NULL DEFAULT 0,
+    "streamId" TEXT,
+    "sessionId" TEXT,
+    "startedAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "completedAt" DATETIME
+);
+
+-- CreateTable
+CREATE TABLE "TeamSessionAgent" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "teamSessionId" TEXT NOT NULL,
+    "agentId" TEXT NOT NULL,
+    "agentName" TEXT NOT NULL,
+    "nodeId" TEXT NOT NULL,
+    "role" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "round" INTEGER NOT NULL,
+    "output" TEXT,
+    "model" TEXT,
+    "inputTokens" INTEGER NOT NULL DEFAULT 0,
+    "outputTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheReadTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheWriteTokens" INTEGER NOT NULL DEFAULT 0,
+    CONSTRAINT "TeamSessionAgent_teamSessionId_fkey" FOREIGN KEY ("teamSessionId") REFERENCES "TeamSession" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_Action" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT,
+    "type" TEXT NOT NULL DEFAULT 'cli-agent',
+    "order" INTEGER NOT NULL,
+    "dependsOn" TEXT,
+    "workflowId" TEXT NOT NULL,
+    "cli" TEXT,
+    "model" TEXT,
+    "prompt" TEXT,
+    "trustMode" BOOLEAN NOT NULL DEFAULT true,
+    "script" TEXT,
+    "httpMethod" TEXT,
+    "httpUrl" TEXT,
+    "httpHeaders" TEXT,
+    "httpBody" TEXT,
+    "credentialId" TEXT,
+    "timeoutMs" INTEGER,
+    "targetWorkflowId" TEXT,
+    "agentId" TEXT,
+    "teamId" TEXT,
+    CONSTRAINT "Action_workflowId_fkey" FOREIGN KEY ("workflowId") REFERENCES "Workflow" ("id") ON DELETE CASCADE ON UPDATE CASCADE,
+    CONSTRAINT "Action_credentialId_fkey" FOREIGN KEY ("credentialId") REFERENCES "Credential" ("id") ON DELETE SET NULL ON UPDATE CASCADE
+);
+INSERT INTO "new_Action" ("cli", "httpBody", "httpHeaders", "httpMethod", "httpUrl", "id", "order", "prompt", "script", "type", "workflowId") SELECT "cli", "httpBody", "httpHeaders", "httpMethod", "httpUrl", "id", "order", "prompt", "script", "type", "workflowId" FROM "Action";
+DROP TABLE "Action";
+ALTER TABLE "new_Action" RENAME TO "Action";
+CREATE INDEX "Action_workflowId_idx" ON "Action"("workflowId");
+CREATE TABLE "new_Workflow" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "description" TEXT,
+    "workspace" TEXT,
+    "cli" TEXT NOT NULL DEFAULT 'cursor',
+    "model" TEXT,
+    "cronExpression" TEXT,
+    "enabled" BOOLEAN NOT NULL DEFAULT true,
+    "summaryEnabled" BOOLEAN NOT NULL DEFAULT false,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+INSERT INTO "new_Workflow" ("cli", "createdAt", "cronExpression", "description", "enabled", "id", "model", "name", "updatedAt", "workspace") SELECT "cli", "createdAt", "cronExpression", "description", "enabled", "id", "model", "name", "updatedAt", "workspace" FROM "Workflow";
+DROP TABLE "Workflow";
+ALTER TABLE "new_Workflow" RENAME TO "Workflow";
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+
+-- CreateIndex
+CREATE INDEX "LogEntry_agentRunId_idx" ON "LogEntry"("agentRunId");
+
+-- CreateIndex
+CREATE INDEX "TeamSession_teamId_idx" ON "TeamSession"("teamId");
+
+-- CreateIndex
+CREATE INDEX "TeamSession_status_idx" ON "TeamSession"("status");
+
+-- CreateIndex
+CREATE INDEX "TeamSession_startedAt_idx" ON "TeamSession"("startedAt");
+
+-- CreateIndex
+CREATE INDEX "TeamSession_completedAt_idx" ON "TeamSession"("completedAt");
+
+-- CreateIndex
+CREATE INDEX "AgentChatSession_agentId_idx" ON "AgentChatSession"("agentId");
+
+-- CreateIndex
+CREATE INDEX "AgentChatSession_status_idx" ON "AgentChatSession"("status");
+
+-- CreateIndex
+CREATE INDEX "AgentChatSession_startedAt_idx" ON "AgentChatSession"("startedAt");
+
+-- CreateIndex
+CREATE INDEX "TeamSessionAgent_teamSessionId_idx" ON "TeamSessionAgent"("teamSessionId");
+
+-- CreateIndex
+CREATE INDEX "TeamSessionAgent_agentId_idx" ON "TeamSessionAgent"("agentId");
+
+-- CreateIndex
+CREATE INDEX "AgentRun_workflowRunId_status_idx" ON "AgentRun"("workflowRunId", "status");
+
+-- CreateIndex
+CREATE INDEX "Trigger_type_eventName_idx" ON "Trigger"("type", "eventName");
+
+-- CreateIndex
+CREATE INDEX "WorkflowRun_status_idx" ON "WorkflowRun"("status");

package/dist/prisma/migrations/20260401135027_add_auth_rbac_multitenancy/migration.sql

@@ -0,0 +1,211 @@
+-- CreateTable
+CREATE TABLE "user" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "emailVerified" BOOLEAN NOT NULL DEFAULT false,
+    "image" TEXT,
+    "roleId" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    CONSTRAINT "user_roleId_fkey" FOREIGN KEY ("roleId") REFERENCES "role" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "role" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "description" TEXT,
+    "isSystem" BOOLEAN NOT NULL DEFAULT false,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- CreateTable
+CREATE TABLE "rolePermission" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "roleId" TEXT NOT NULL,
+    "entity" TEXT NOT NULL,
+    "action" TEXT NOT NULL,
+    "scope" TEXT NOT NULL DEFAULT 'all',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    CONSTRAINT "rolePermission_roleId_fkey" FOREIGN KEY ("roleId") REFERENCES "role" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "session" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "expiresAt" DATETIME NOT NULL,
+    "token" TEXT NOT NULL,
+    "ipAddress" TEXT,
+    "userAgent" TEXT,
+    "userId" TEXT NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    CONSTRAINT "session_userId_fkey" FOREIGN KEY ("userId") REFERENCES "user" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "account" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "accountId" TEXT NOT NULL,
+    "providerId" TEXT NOT NULL,
+    "userId" TEXT NOT NULL,
+    "accessToken" TEXT,
+    "refreshToken" TEXT,
+    "idToken" TEXT,
+    "accessTokenExpiresAt" DATETIME,
+    "refreshTokenExpiresAt" DATETIME,
+    "scope" TEXT,
+    "password" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL,
+    CONSTRAINT "account_userId_fkey" FOREIGN KEY ("userId") REFERENCES "user" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+-- CreateTable
+CREATE TABLE "verification" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "identifier" TEXT NOT NULL,
+    "value" TEXT NOT NULL,
+    "expiresAt" DATETIME NOT NULL,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+
+-- RedefineTables
+PRAGMA defer_foreign_keys=ON;
+PRAGMA foreign_keys=OFF;
+CREATE TABLE "new_AgentChatSession" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "agentId" TEXT NOT NULL,
+    "agentName" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "prompt" TEXT NOT NULL,
+    "output" TEXT,
+    "model" TEXT,
+    "cli" TEXT,
+    "error" TEXT,
+    "userId" TEXT NOT NULL DEFAULT '',
+    "inputTokens" INTEGER NOT NULL DEFAULT 0,
+    "outputTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheReadTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheWriteTokens" INTEGER NOT NULL DEFAULT 0,
+    "streamId" TEXT,
+    "sessionId" TEXT,
+    "startedAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "completedAt" DATETIME
+);
+INSERT INTO "new_AgentChatSession" ("agentId", "agentName", "cacheReadTokens", "cacheWriteTokens", "cli", "completedAt", "error", "id", "inputTokens", "model", "output", "outputTokens", "prompt", "sessionId", "startedAt", "status", "streamId") SELECT "agentId", "agentName", "cacheReadTokens", "cacheWriteTokens", "cli", "completedAt", "error", "id", "inputTokens", "model", "output", "outputTokens", "prompt", "sessionId", "startedAt", "status", "streamId" FROM "AgentChatSession";
+DROP TABLE "AgentChatSession";
+ALTER TABLE "new_AgentChatSession" RENAME TO "AgentChatSession";
+CREATE INDEX "AgentChatSession_agentId_idx" ON "AgentChatSession"("agentId");
+CREATE INDEX "AgentChatSession_status_idx" ON "AgentChatSession"("status");
+CREATE INDEX "AgentChatSession_startedAt_idx" ON "AgentChatSession"("startedAt");
+CREATE INDEX "AgentChatSession_userId_idx" ON "AgentChatSession"("userId");
+CREATE TABLE "new_Credential" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "type" TEXT NOT NULL,
+    "data" TEXT NOT NULL,
+    "userId" TEXT NOT NULL DEFAULT '',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+INSERT INTO "new_Credential" ("createdAt", "data", "id", "name", "type", "updatedAt") SELECT "createdAt", "data", "id", "name", "type", "updatedAt" FROM "Credential";
+DROP TABLE "Credential";
+ALTER TABLE "new_Credential" RENAME TO "Credential";
+CREATE INDEX "Credential_userId_idx" ON "Credential"("userId");
+CREATE TABLE "new_TeamSession" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "teamId" TEXT NOT NULL,
+    "teamName" TEXT NOT NULL,
+    "strategy" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "prompt" TEXT NOT NULL,
+    "maxRounds" INTEGER NOT NULL,
+    "totalRounds" INTEGER NOT NULL,
+    "error" TEXT,
+    "userId" TEXT NOT NULL DEFAULT '',
+    "inputTokens" INTEGER NOT NULL DEFAULT 0,
+    "outputTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheReadTokens" INTEGER NOT NULL DEFAULT 0,
+    "cacheWriteTokens" INTEGER NOT NULL DEFAULT 0,
+    "startedAt" DATETIME NOT NULL,
+    "completedAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+INSERT INTO "new_TeamSession" ("cacheReadTokens", "cacheWriteTokens", "completedAt", "error", "id", "inputTokens", "maxRounds", "outputTokens", "prompt", "startedAt", "status", "strategy", "teamId", "teamName", "totalRounds") SELECT "cacheReadTokens", "cacheWriteTokens", "completedAt", "error", "id", "inputTokens", "maxRounds", "outputTokens", "prompt", "startedAt", "status", "strategy", "teamId", "teamName", "totalRounds" FROM "TeamSession";
+DROP TABLE "TeamSession";
+ALTER TABLE "new_TeamSession" RENAME TO "TeamSession";
+CREATE INDEX "TeamSession_teamId_idx" ON "TeamSession"("teamId");
+CREATE INDEX "TeamSession_status_idx" ON "TeamSession"("status");
+CREATE INDEX "TeamSession_startedAt_idx" ON "TeamSession"("startedAt");
+CREATE INDEX "TeamSession_completedAt_idx" ON "TeamSession"("completedAt");
+CREATE INDEX "TeamSession_userId_idx" ON "TeamSession"("userId");
+CREATE TABLE "new_Workflow" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "description" TEXT,
+    "workspace" TEXT,
+    "cli" TEXT NOT NULL DEFAULT 'cursor',
+    "model" TEXT,
+    "cronExpression" TEXT,
+    "enabled" BOOLEAN NOT NULL DEFAULT true,
+    "summaryEnabled" BOOLEAN NOT NULL DEFAULT false,
+    "userId" TEXT NOT NULL DEFAULT '',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+INSERT INTO "new_Workflow" ("cli", "createdAt", "cronExpression", "description", "enabled", "id", "model", "name", "summaryEnabled", "updatedAt", "workspace") SELECT "cli", "createdAt", "cronExpression", "description", "enabled", "id", "model", "name", "summaryEnabled", "updatedAt", "workspace" FROM "Workflow";
+DROP TABLE "Workflow";
+ALTER TABLE "new_Workflow" RENAME TO "Workflow";
+CREATE INDEX "Workflow_userId_idx" ON "Workflow"("userId");
+CREATE TABLE "new_WorkflowRun" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "workflowId" TEXT NOT NULL,
+    "status" TEXT NOT NULL DEFAULT 'pending',
+    "payload" TEXT,
+    "userId" TEXT NOT NULL DEFAULT '',
+    "startedAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "completedAt" DATETIME,
+    "error" TEXT,
+    CONSTRAINT "WorkflowRun_workflowId_fkey" FOREIGN KEY ("workflowId") REFERENCES "Workflow" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+INSERT INTO "new_WorkflowRun" ("completedAt", "error", "id", "payload", "startedAt", "status", "workflowId") SELECT "completedAt", "error", "id", "payload", "startedAt", "status", "workflowId" FROM "WorkflowRun";
+DROP TABLE "WorkflowRun";
+ALTER TABLE "new_WorkflowRun" RENAME TO "WorkflowRun";
+CREATE INDEX "WorkflowRun_workflowId_idx" ON "WorkflowRun"("workflowId");
+CREATE INDEX "WorkflowRun_status_idx" ON "WorkflowRun"("status");
+CREATE INDEX "WorkflowRun_userId_idx" ON "WorkflowRun"("userId");
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "user_email_key" ON "user"("email");
+
+-- CreateIndex
+CREATE INDEX "user_roleId_idx" ON "user"("roleId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "role_name_key" ON "role"("name");
+
+-- CreateIndex
+CREATE INDEX "rolePermission_roleId_idx" ON "rolePermission"("roleId");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "rolePermission_roleId_entity_action_key" ON "rolePermission"("roleId", "entity", "action");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "session_token_key" ON "session"("token");
+
+-- CreateIndex
+CREATE INDEX "session_userId_idx" ON "session"("userId");
+
+-- CreateIndex
+CREATE INDEX "session_token_idx" ON "session"("token");
+
+-- CreateIndex
+CREATE INDEX "account_userId_idx" ON "account"("userId");
+
+-- CreateIndex
+CREATE INDEX "verification_identifier_idx" ON "verification"("identifier");

package/dist/prisma/schema.prisma

@@ -7,6 +7,95 @@ datasource db {
   provider = "sqlite"
 }
 
+// ── Auth & RBAC ──
+
+model user {
+  id            String    @id
+  name          String
+  email         String    @unique
+  emailVerified Boolean   @default(false)
+  image         String?
+  roleId        String
+  role          role      @relation(fields: [roleId], references: [id])
+  createdAt     DateTime  @default(now())
+  updatedAt     DateTime  @updatedAt
+  sessions      session[]
+  accounts      account[]
+
+  @@index([roleId])
+}
+
+model role {
+  id          String   @id @default(cuid())
+  name        String   @unique
+  description String?
+  isSystem    Boolean  @default(false)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+  users       user[]
+  permissions rolePermission[]
+}
+
+model rolePermission {
+  id       String   @id @default(cuid())
+  roleId   String
+  role     role     @relation(fields: [roleId], references: [id], onDelete: Cascade)
+  entity   String   // "workflow" | "credential" | "agent" | "team" | "user" | "settings" | "analytics" | "memory" | "command" | "mcp"
+  action   String   // "read" | "create" | "update" | "delete" | "execute"
+  scope    String   @default("all") // "all" | "own"
+  createdAt DateTime @default(now())
+
+  @@unique([roleId, entity, action])
+  @@index([roleId])
+}
+
+model session {
+  id        String   @id
+  expiresAt DateTime
+  token     String   @unique
+  ipAddress String?
+  userAgent String?
+  userId    String
+  user      user     @relation(fields: [userId], references: [id], onDelete: Cascade)
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  @@index([userId])
+  @@index([token])
+}
+
+model account {
+  id                    String    @id
+  accountId             String
+  providerId            String
+  userId                String
+  user                  user      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  accessToken           String?
+  refreshToken          String?
+  idToken               String?
+  accessTokenExpiresAt  DateTime?
+  refreshTokenExpiresAt DateTime?
+  scope                 String?
+  password              String?
+  createdAt             DateTime  @default(now())
+  updatedAt             DateTime  @updatedAt
+
+  @@index([userId])
+}
+
+model verification {
+  id         String   @id
+  identifier String
+  value      String
+  expiresAt  DateTime
+  createdAt  DateTime @default(now())
+  updatedAt  DateTime @updatedAt
+
+  @@index([identifier])
+}
+
+// ── Business Models ──
+
 model Credential {
   id          String   @id @default(cuid())
   name        String
@@ -16,10 +105,13 @@ model Credential {
   // api-key: data = { key, value, addTo } (addTo = "header" | "query")
   // custom-header: data = { headers: [{ key, value }] }
   data        String   // JSON-encrypted credential data
+  userId      String   @default("")
   createdAt   DateTime @default(now())
   updatedAt   DateTime @updatedAt
 
   actions Action[]
+
+  @@index([userId])
 }
 
 model Workflow {
@@ -32,12 +124,15 @@ model Workflow {
   cronExpression String?
   enabled        Boolean  @default(true)
   summaryEnabled Boolean  @default(false)
+  userId         String   @default("")
   createdAt      DateTime @default(now())
   updatedAt      DateTime @updatedAt
 
   triggers Trigger[]
   actions  Action[]
   runs     WorkflowRun[]
+
+  @@index([userId])
 }
 
 model Trigger {
@@ -100,6 +195,7 @@ model WorkflowRun {
   workflow    Workflow   @relation(fields: [workflowId], references: [id], onDelete: Cascade)
   status      String    @default("pending")
   payload     String?   // JSON-serialized trigger payload
+  userId      String    @default("")
   startedAt   DateTime  @default(now())
   completedAt DateTime?
   error       String?
@@ -108,6 +204,7 @@ model WorkflowRun {
 
   @@index([workflowId])
   @@index([status])
+  @@index([userId])
 }
 
 model AgentRun {
@@ -162,6 +259,7 @@ model TeamSession {
   maxRounds   Int
   totalRounds Int
   error       String?
+  userId      String    @default("")
 
   // Aggregated token usage
   inputTokens      Int @default(0)
@@ -178,6 +276,7 @@ model TeamSession {
   @@index([status])
   @@index([startedAt])
   @@index([completedAt])
+  @@index([userId])
 }
 
 // ── Agent Session Persistence (single-agent runs) ──
@@ -192,6 +291,7 @@ model AgentChatSession {
   model       String?   // LLM model used
   cli         String?   // CLI runtime used (cursor, claude, codex, etc.)
   error       String?
+  userId      String    @default("")
 
   // Token usage
   inputTokens      Int @default(0)
@@ -209,6 +309,7 @@ model AgentChatSession {
   @@index([agentId])
   @@index([status])
   @@index([startedAt])
+  @@index([userId])
 }
 
 model TeamSessionAgent {