aimeat 1.40.1 → 2.1.0

package/prisma/schema.postgres.prisma

@@ -1,1789 +0,0 @@
-// AIMEAT — PostgreSQL Prisma schema (GENERATED — do not edit by hand).
-// Source of truth: prisma/schema.prisma (MongoDB). Regenerate with:
-//   node scripts/gen-postgres-schema.mjs
-// MIRROR NOTE: models & fields are identical to schema.prisma; only the id
-// strategy (cuid() vs ObjectId) and the generator/datasource blocks differ.
-
-generator client {
-  provider = "prisma-client-js"
-  output   = "../src/generated/prisma-postgres"
-}
-
-datasource db {
-  provider = "postgresql"
-  url      = env("DATABASE_URL")
-}
-
-
-
-model Owner {
-  id          String   @id @default(cuid())
-  name        String   @unique
-  displayName String?
-  publicKey   String
-  roles       String[]
-  createdAt   DateTime @default(now())
-}
-
-model Agent {
-  id            String   @id @default(cuid())
-  name          String
-  owner         String
-  gaii          String   @unique
-  displayName   String?
-  description   String?
-  capabilities  String[]
-  publicKey     String
-  trustScore    Int      @default(50)
-  morselBalance  Int      @default(0)
-  dailySpendLimit Int?
-  allowedOrigins String[]
-  defaultScopes  String[]
-  federate      Boolean  @default(false)
-  technicalCapabilities Json?
-  domainCapabilities    Json?
-  activityStats         Json?
-  modulesLoaded         Json?
-  agentLimitations      Json?
-  languages             Json?
-  webhookUrl        String?
-  webhookSecret     String?
-  webhookEnabled    Boolean  @default(false)
-  webhookLastSuccess DateTime?
-  webhookLastFailure DateTime?
-  webhookFailCount  Int      @default(0)
-  platform          String?
-  platformVersion   String?
-  mode              String?
-  maxConcurrentTasks Int     @default(1)
-  scheduleConstraintDefaults Json?
-  platformDetectedBy String?
-  tags              String[]
-  createdAt     DateTime @default(now())
-  lastSeen      DateTime @default(now())
-
-  @@index([owner])
-}
-
-model Memory {
-  id         String   @id @default(cuid())
-  key        String
-  ownerGaii  String
-  value      Json?
-  visibility String   @default("private")
-  tags       String[]
-  ttlHours   Float?
-  version    Int      @default(1)
-  flagCount  Int      @default(0)
-  allowedOrigins String[]
-  groupId    String?
-  // Workspace-scoped visibility tier: "<org>/<ws>" whose members may read this record when
-  // visibility === 'workspace'. Gated by the shared authorizeRead()/canReadWorkspace() core.
-  workspaceRef String?
-  // Flattened searchable text (key + string leaves of value + tags), maintained on every write.
-  // Tier-1 librarian full-text search queries this with a per-token `contains` (substring/regex)
-  // scan — there is NO MongoDB `$text` index on it (none is created at startup). SQLite indexes the
-  // value directly via FTS5, so this field is MongoDB/Postgres-only. A real `$text` (or Atlas
-  // Search) index is a possible future scalability upgrade. See design-organism-notebook-and-librarian.md §4.
-  searchBlob String?
-  // Opt-in version tracking: when true, the previous value is archived to MemoryVersion on overwrite
-  // (latest stays here, history queried on demand). Default false → no change for existing keys.
-  trackable  Boolean  @default(false)
-  // Organism archive — read-only soft-archive flag. Archived rows are excluded from the bulk read/
-  // search primitives by default (drop out of AI materials) yet stay resolvable by key. archivedRoot
-  // records WHICH container's archival flagged the row, so unarchiving it restores only its cascade.
-  archived     Boolean @default(false)
-  archivedAt   DateTime?
-  archivedBy   String?
-  archivedRoot String?
-  createdAt  DateTime @default(now())
-  updatedAt  DateTime @updatedAt
-
-  @@unique([ownerGaii, key])
-  @@index([ownerGaii])
-  @@index([archived, key])
-  @@index([archivedRoot])
-}
-
-// Archived prior versions of TRACKABLE memory keys. Append-only; the latest value always lives in
-// Memory. Keeps the Memory collection light while history is queried on demand (organism timeline).
-model MemoryVersion {
-  id         String   @id @default(cuid())
-  ownerGaii  String
-  key        String
-  version    Int
-  value      Json?
-  actor      String?
-  event      String?
-  recordedAt DateTime @default(now())
-
-  @@unique([ownerGaii, key, version])
-  @@index([ownerGaii, key])
-}
-
-model Action {
-  id                   String   @id @default(cuid())
-  actionId             String
-  providerGaii         String
-  displayName          String
-  description          String
-  category             String?
-  inputSchema          Json
-  outputSchema         Json
-  pricingBaseMorsels   Int
-  pricingPerUnit       Json?
-  estimatedTimeSeconds Int?
-  maxInputSizeBytes    Int?
-  tags                 String[]
-  webhookUrl           String?
-  semantic             Json?
-  federate             Boolean  @default(false)
-  createdAt            DateTime @default(now())
-  updatedAt            DateTime @updatedAt
-
-  @@unique([actionId, providerGaii])
-  @@index([providerGaii])
-  @@index([category])
-}
-
-model Work {
-  id             String   @id @default(cuid())
-  trackingCode   String   @unique
-  status         String
-  actionId       String
-  providerGaii   String
-  requesterGaii  String
-  input          Json
-  output         Json?
-  costBasePrice  Int
-  costNetworkFee Int
-  costTotal      Int
-  costInEscrow   Int
-  ttlExpiresAt   DateTime
-  callbackUrl    String?
-  ratingScore    Int?
-  ratingComment  String?
-  createdAt      DateTime @default(now())
-  updatedAt      DateTime @updatedAt
-
-  @@index([providerGaii, status])
-  @@index([requesterGaii])
-}
-
-model Transaction {
-  id               String   @id @default(cuid())
-  txId             String
-  gaii             String
-  type             String
-  amount           Int
-  counterpartyGaii String?
-  trackingCode     String?
-  timestamp        DateTime @default(now())
-
-  @@index([gaii])
-}
-
-model Board {
-  id           String   @id @default(cuid())
-  boardId      String   @unique
-  name         String
-  description  String?
-  visibility   String
-  ownerGaii    String
-  allowedGaiis String[]
-  federate     Boolean  @default(false)
-  createdAt    DateTime @default(now())
-
-  @@index([ownerGaii])
-}
-
-model BoardPost {
-  id           String   @id @default(cuid())
-  postId       String   @unique
-  boardId      String
-  authorGaii   String
-  title        String
-  body         String
-  category     String?
-  tags         String[]
-  ttlExpiresAt DateTime?
-  reactions    Json     @default("{}")
-  replyTo      String?
-  createdAt    DateTime @default(now())
-
-  @@index([boardId])
-}
-
-model Otk {
-  id        String    @id @default(cuid())
-  key       String    @unique
-  ownerGaii String
-  action    String
-  params    Json
-  expiresAt DateTime
-  used      Boolean   @default(false)
-  usedAt    DateTime?
-  sessionId String?
-  createdAt DateTime  @default(now())
-
-  @@index([expiresAt])
-  @@index([sessionId])
-}
-
-model Dispute {
-  id           String   @id @default(cuid())
-  disputeId    String   @unique
-  trackingCode String
-  status       String
-  openedBy     String
-  reason       String
-  ruling       Json?
-  createdAt    DateTime @default(now())
-  updatedAt    DateTime @updatedAt
-
-  @@index([trackingCode])
-}
-
-model DisputeAudit {
-  id           String   @id @default(cuid())
-  disputeId    String
-  sequence     Int
-  event        String
-  actor        String
-  timestamp    DateTime
-  data         Json
-  hash         String
-  previousHash String
-
-  @@index([disputeId])
-}
-
-model MicroMemory {
-  id         String   @id @default(cuid())
-  gaii       String
-  setName    String
-  entries    Json
-  visibility String
-  accessCode String?
-  updatedAt  DateTime @updatedAt
-
-  @@unique([gaii, setName])
-}
-
-model StorageFile {
-  id         String   @id @default(cuid())
-  key        String
-  ownerGaii  String
-  visibility String
-  mimeType   String
-  size       Int
-  data       Bytes
-  tags       String[] @default([])
-  federate   Boolean  @default(false)
-  groupId    String?
-  // Workspace-scoped visibility tier (parity with Memory): "<org>/<ws>" whose members may read this
-  // file when visibility === 'workspace'. Gated by the shared authorizeRead()/canReadWorkspace() core.
-  workspaceRef String?
-  createdAt  DateTime @default(now())
-
-  @@unique([ownerGaii, key])
-}
-
-model PeeringRequest {
-  id          String   @id @default(cuid())
-  requestId   String   @unique
-  fromNodeUrl String
-  fromNodeId  String?
-  toNodeId    String?
-  targetUrl   String?
-  publicKey   String?
-  message     String?
-  status      String   @default("pending")
-  createdAt   DateTime @default(now())
-  updatedAt   DateTime @updatedAt
-}
-
-model NodeKey {
-  id         String @id @default(cuid())
-  publicKey  String
-  privateKey String
-}
-
-model SystemSetting {
-  id    String @id @default(cuid())
-  key   String @unique
-  value String
-}
-
-model RealtimeRoom {
-  id             String   @id
-  appType        String
-  name           String
-  createdBy      String
-  maxPeers       Int
-  isPublic       Boolean  @default(true)
-  tags           String[]
-  peerCount      Int      @default(0)
-  createdAt      DateTime @default(now())
-  lastActivityAt DateTime @default(now())
-}
-
-model SiteChangeLog {
-  id        String   @id
-  action    String
-  summary   String
-  changedBy String
-  changedAt DateTime @default(now())
-}
-
-model Ghii {
-  id                         String   @id @default(cuid())
-  username                   String
-  nodeId                     String
-  ghii                       String   @unique
-  displayName                String
-  bio                        String?
-  avatar                     String?
-  locale                     String?
-  passwordHash               String?
-  verificationLevel          Int      @default(0)
-  ownerName                  String
-  totpSecret                 String?
-  totpEnabled                Boolean  @default(false)
-  totpBackupCodes            String[]
-  totpLastUsedAt             String?
-  totpLastUsedCode           String?
-  totpFailedAttempts         Int      @default(0)
-  totpLockedUntil            String?
-  emailHash                  String?
-  emailVerifiedAt            String?
-  notificationEmail          String?
-  verificationMethod         String?
-  magicLinkEnabled           Boolean  @default(false)
-  lastLoginAt                String?
-  loginCount                 Int      @default(0)
-  verifiedAttributes         String[]
-  verificationIssuer         String?
-  verificationCredentialHash String?
-  ftnVerified                Boolean  @default(false)
-  googleSub                  String?
-  externalIdentities         Json?
-  trustScore                 Int?
-  morselBalance              Int?
-  allowedOrigins             String[]
-  createdAt                  DateTime @default(now())
-  updatedAt                  DateTime @updatedAt
-
-  @@index([ownerName])
-  @@index([emailHash])
-  @@index([googleSub])
-}
-
-model Extension {
-  id           String    @id @default(cuid())
-  name         String    @unique
-  version      String
-  description  String
-  author       String
-  status       String    @default("inactive")
-  requiredApis String[]
-  actions      Json
-  config       Json
-  limits       Json
-  federation   Json
-  instances    Json?
-  installedBy  String
-  installedAt  DateTime  @default(now())
-  activatedAt  DateTime?
-  createdAt    DateTime  @default(now())
-  updatedAt    DateTime  @updatedAt
-}
-
-model ExtensionInstance {
-  id            String    @id @default(cuid())
-  instanceId    String
-  extensionName String
-  config        Json      @default("{}")
-  status        String    @default("active")
-  translations  Json?
-  createdBy     String
-  createdByAgent String?
-  createdAt     DateTime  @default(now())
-  updatedAt     DateTime  @updatedAt
-
-  @@unique([extensionName, instanceId])
-  @@index([extensionName])
-}
-
-model EscrowHold {
-  id            String    @id @default(cuid())
-  holdId        String    @unique
-  fromGaii      String
-  amount        Int
-  reason        String
-  status        String    @default("held")
-  extensionName String
-  createdAt     DateTime  @default(now())
-  releasedAt    DateTime?
-  releasedTo    String?
-  updatedAt     DateTime  @updatedAt
-
-  @@index([fromGaii])
-  @@index([status])
-}
-
-model PushSubscription {
-  id         String   @id
-  ownerName  String   @unique
-  endpoint   String
-  keys       Json
-  createdAt  DateTime @default(now())
-  lastUsedAt DateTime @default(now())
-}
-
-model NotificationTemplate {
-  id          String   @id
-  templateId  String
-  locale      String
-  fields      Json
-  placeholders String[]
-  updatedAt   DateTime @default(now())
-  updatedBy   String
-
-  @@unique([templateId, locale])
-}
-
-model BoardSubscription {
-  id          String   @id
-  boardId     String
-  gaii        String
-  callbackUrl String?
-  filters     Json?
-  createdAt   DateTime @default(now())
-
-  @@unique([boardId, gaii])
-  @@index([boardId])
-  @@index([gaii])
-}
-
-model PersonalNode {
-  id                String   @id
-  ownerName         String
-  anchorNodeId      String
-  publicKey         String
-  status            String   @default("offline")
-  agentGaiis        String[]
-  lastSeen          DateTime @default(now())
-  mailboxQuotaBytes Int
-  mailboxUsedBytes  Int      @default(0)
-  visibility        String   @default("private")
-  createdAt         DateTime @default(now())
-  updatedAt         DateTime @updatedAt
-
-  @@index([ownerName])
-}
-
-model MailboxItem {
-  id             String   @id
-  personalNodeId String
-  type           String
-  fromGaii       String
-  toGaii         String
-  payload        String
-  sizeBytes      Int
-  retentionDays  Int
-  expiresAt      DateTime
-  createdAt      DateTime @default(now())
-
-  @@index([personalNodeId])
-  @@index([expiresAt])
-}
-
-model ChatInstance {
-  id          String   @id
-  platform    String
-  appName     String
-  ownerName   String
-  ghii        String
-  nodeId      String
-  isAnonymous Boolean  @default(false)
-  createdAt   DateTime @default(now())
-  lastSeen    DateTime @default(now())
-  agentGaii   String?
-  mcpClientId String?
-
-  @@index([ownerName])
-  @@index([ghii])
-  @@index([agentGaii])
-}
-
-model SchemaLock {
-  id              String   @id @default(cuid())
-  keyPattern      String
-  applyTo         String
-  schemaJson      Json
-  schemaMode      String   @default("open")
-  lockedBy        String
-  setAt           DateTime @default(now())
-  updatedAt       DateTime @updatedAt
-  semanticContext Json?
-
-  @@unique([applyTo, keyPattern])
-}
-
-model Consent {
-  id          String    @id
-  ownerGaii   String
-  dataPattern String
-  recipient   String
-  purpose     String
-  scope       String
-  expires     DateTime?
-  status      String    @default("active")
-  grantedAt   DateTime  @default(now())
-  revokedAt   DateTime?
-  metadata    Json?
-
-  @@index([ownerGaii])
-  @@index([ownerGaii, status])
-}
-
-model ConsentAudit {
-  id           String   @id @default(cuid())
-  consentId    String
-  ownerGaii    String
-  accessorGaii String
-  memoryKey    String
-  action       String
-  timestamp    DateTime @default(now())
-  allowed      Boolean
-
-  @@index([ownerGaii])
-  @@index([consentId])
-}
-
-model Csm {
-  id             String   @id @default(cuid())
-  name           String   @unique
-  definition     Json
-  jsonSchemaKey  String
-  serviceType    String
-  registeredBy   String
-  registeredAt   DateTime @default(now())
-  updatedAt      DateTime @updatedAt
-  semantic       Json?
-  federate       Boolean  @default(false)
-}
-
-model Msm {
-  id           String   @id @default(cuid())
-  name         String   @unique
-  definition   Json
-  category     String
-  authType     String
-  actionsCount Int
-  registeredBy String
-  registeredAt DateTime @default(now())
-  updatedAt    DateTime @updatedAt
-  federate     Boolean  @default(false)
-}
-
-model EmailVerification {
-  id         String    @id
-  ownerName  String
-  emailHash  String
-  code       String
-  purpose    String
-  status     String    @default("pending")
-  attempts   Int       @default(0)
-  expiresAt  DateTime
-  createdAt  DateTime  @default(now())
-  verifiedAt DateTime?
-
-  @@index([ownerName, purpose, status])
-  @@index([expiresAt])
-}
-
-model Flag {
-  id         String    @id
-  targetType String
-  targetId   String
-  flaggedBy  String
-  reason     String
-  description String?
-  status     String    @default("active")
-  reviewedBy String?
-  reviewedAt DateTime?
-  createdAt  DateTime  @default(now())
-
-  @@index([targetType, targetId])
-  @@index([status])
-}
-
-model Match {
-  id          String    @id
-  profileA    String
-  profileB    String
-  score       Float
-  breakdown   Json
-  status      String    @default("suggested")
-  notifiedAt  DateTime?
-  respondedAt DateTime?
-  expiresAt   DateTime
-  createdAt   DateTime  @default(now())
-
-  @@index([profileA])
-  @@index([profileB])
-  @@index([expiresAt])
-}
-
-model Organism {
-  id               String   @id
-  name             String
-  description      String
-  type             String
-  location         Json?
-  interests        String[]
-  creatorGhii      String
-  admins           String[]
-  members          String[]
-  agentGaiis       String[]
-  boardId          String
-  joinPolicy       String   @default("open")
-  maxMembers       Int      @default(100)
-  visibility       String   @default("public")
-  memberVisibility String?
-  moderationConfig Json
-  memoryNamespace  String
-  semantic         Json?
-  archived         Boolean  @default(false)
-  archivedAt       DateTime?
-  archivedBy       String?
-  createdAt        DateTime @default(now())
-  updatedAt        DateTime @updatedAt
-
-  @@index([creatorGhii])
-  @@index([visibility])
-}
-
-model OrganismMembership {
-  id         String   @id
-  organismId String
-  ghii       String
-  role       String
-  status     String   @default("active")
-  joinedAt   DateTime @default(now())
-  invitedBy  String?
-
-  @@unique([organismId, ghii])
-  @@index([organismId])
-  @@index([ghii])
-}
-
-model JoinRequest {
-  id         String    @id
-  organismId String
-  ghii       String
-  message    String?
-  status     String    @default("pending")
-  reviewedBy String?
-  createdAt  DateTime  @default(now())
-  reviewedAt DateTime?
-
-  @@index([organismId])
-  @@index([organismId, status])
-}
-
-model PendingApproval {
-  id             String    @id
-  organismId     String
-  flowGateId     String?
-  stageId        String?
-  actor          String
-  action         String
-  arguments      Json?
-  risk           String    @default("medium")
-  approverRole   String    @default("owner")
-  prompt         String?
-  status         String    @default("pending")
-  decidedBy      String?
-  decidedAt      DateTime?
-  resolutionNote String?
-  deadline       DateTime?
-  createdAt      DateTime  @default(now())
-  updatedAt      DateTime  @default(now())
-
-  @@index([organismId])
-  @@index([organismId, status])
-}
-
-model Appeal {
-  id         String    @id
-  flagId     String
-  appealedBy String
-  reason     String
-  status     String    @default("pending")
-  reviewedBy String?
-  reviewNote String?
-  createdAt  DateTime  @default(now())
-  reviewedAt DateTime?
-
-  @@index([flagId])
-  @@index([status])
-}
-
-model Listing {
-  id          String   @id
-  ownerName   String
-  sellerGhii  String
-  title       String
-  description String
-  category    String
-  priceMorsels Int
-  condition   String?
-  availability String?
-  location    Json?
-  tags        String[]
-  images      String[]
-  status      String   @default("active")
-  memoryKey   String
-  flagCount   Int      @default(0)
-  createdAt   DateTime @default(now())
-  updatedAt   DateTime @updatedAt
-  semantic    Json?
-
-  @@index([category])
-  @@index([ownerName])
-  @@index([status])
-}
-
-model Purchase {
-  id                   String    @id
-  listingId            String
-  buyerOwner           String
-  sellerOwner          String
-  priceMorsels         Int
-  transactionFeeMorsels Int
-  totalCostMorsels     Int
-  status               String    @default("pending_delivery")
-  ratingScore          Int?
-  ratingComment        String?
-  trackingCode         String
-  createdAt            DateTime  @default(now())
-  completedAt          DateTime?
-
-  @@index([buyerOwner])
-  @@index([sellerOwner])
-  @@index([listingId])
-}
-
-model TrustedIssuer {
-  id        String   @id
-  name      String
-  url       String
-  publicKey String
-  type      String
-  trusted   Boolean  @default(true)
-  addedBy   String
-  createdAt DateTime @default(now())
-
-  @@index([url])
-}
-
-model VerificationNonce {
-  id          String   @id
-  owner       String
-  type        String
-  state       String   @unique
-  nonce       String
-  redirectUri String   @default("")
-  createdAt   DateTime @default(now())
-  expiresAt   DateTime
-
-  @@index([expiresAt])
-}
-
-model GenesisPeer {
-  id            String   @id
-  genesisNodeId String
-  genesisUrl    String
-  publicKey     String
-  status        String   @default("pending")
-  lastSyncAt    DateTime @default(now())
-  catalogueHash String
-  createdAt     DateTime @default(now())
-  updatedAt     DateTime @updatedAt
-
-  @@index([genesisNodeId])
-  @@index([status])
-}
-
-model FederationPeer {
-  nodeId               String   @id
-  url                  String
-  publicKey            String   @default("")
-  status               String   @default("pending")
-  addedAt              DateTime @default(now())
-  lastSeen             DateTime @default(now())
-  shareCatalogue       Boolean  @default(true)
-  replicateMemory      Boolean  @default(true)
-  allowRouting         Boolean  @default(true)
-  peerMode             String   @default("federation")
-  allowFederatedAuth   Boolean  @default(false)
-  federationAuthScopes String[] @default([])
-  tier                 String    @default("member")
-  availability         String?
-  expiresAt            DateTime?
-  heartbeatOk          Int       @default(0)
-  heartbeatTotal       Int       @default(0)
-  availabilityWindow   String?
-  availabilityPct      Int?
-  softwareVersion      String?
-  nodeCardHash         String?
-
-  @@index([status])
-}
-
-model OrganismReputation {
-  id           String   @id @default(cuid())
-  organismId   String   @unique
-  score        Float
-  breakdown    Json
-  calculatedAt DateTime @default(now())
-}
-
-model CortexExtension {
-  id                  String    @id @default(cuid())
-  name                String    @unique
-  namespace           String
-  shortName           String
-  apiVersion          String
-  version             String
-  description         String
-  author              String
-  license             String?
-  tags                String[]
-  labels              Json
-  aimeatCompat        String?
-  status              String    @default("inactive")
-  visibility          String    @default("private")
-  installedAt         DateTime  @default(now())
-  activatedAt         DateTime?
-  installedBy         String
-  manifest            String
-  components          Json
-  activationArtifacts Json
-}
-
-model CortexLibFile {
-  id       String @id @default(cuid())
-  extName  String
-  libName  String
-  content  String
-
-  @@unique([extName, libName])
-}
-
-model PersonalPushSubscription {
-  id             String    @id
-  personalNodeId String
-  ownerName      String
-  endpoint       String
-  keys           Json
-  failureCount   Int       @default(0)
-  createdAt      DateTime  @default(now())
-  lastUsedAt     DateTime?
-
-  @@index([personalNodeId])
-}
-
-model NotificationPreference {
-  id              String   @id @default(cuid())
-  personalNodeId  String   @unique
-  enabled         Boolean  @default(true)
-  channels        String[]
-  notifyTypes     String[]
-  cooldownMinutes Int      @default(5)
-  quietHoursUtc   Json?
-  email           String?
-  locale          String?
-}
-
-model Session {
-  id        String   @id @default(cuid())
-  sessionId String   @unique
-  gaii      String
-  owner     String
-  issuedAt  DateTime
-  expiresAt DateTime
-  revoked   Boolean  @default(false)
-
-  // Owner refresh-token fields (null for legacy JWT-tracking sessions).
-  // See docs/plans/2026-06-03-owner-session-refresh-tokens-plan.md
-  refreshTokenHash  String?
-  prevTokenHash     String?
-  prevValidUntil    DateTime?
-  lastUsedAt        DateTime?
-  idleExpiresAt     DateTime?
-  absoluteExpiresAt DateTime?
-  deviceLabel       String?
-  userAgent         String?
-
-  @@index([owner])
-  @@index([expiresAt])
-  @@index([refreshTokenHash])
-  @@index([prevTokenHash])
-}
-
-// Owner-created Personal Access Tokens for agents.
-// See docs/plans/2026-06-03-agent-access-tokens-plan.md
-model PersonalAccessToken {
-  id            String    @id
-  tokenHash     String    @unique
-  label         String
-  owner         String
-  scopes        String[]
-  grantOwner    Boolean   @default(false)
-  grantOperator Boolean   @default(false)
-  readOwnerData Boolean   @default(false)
-  gaii          String
-  createdAt     DateTime
-  expiresAt     DateTime?
-  lastUsedAt    DateTime?
-  revoked       Boolean   @default(false)
-
-  @@index([owner])
-}
-
-model Invitation {
-  id               String    @id
-  tokenHash        String
-  organismId       String
-  orgRole          String    @default("member")
-  type             String    @default("link")
-  workspaces       Json
-  email            String
-  emailHash        String
-  invitedBy        String
-  provisionedOwner String?
-  message          String?
-  status           String    @default("pending")
-  createdAt        DateTime
-  expiresAt        DateTime
-  acceptedAt       DateTime?
-  acceptedBy       String?
-
-  @@index([tokenHash])
-  @@index([organismId])
-  @@index([emailHash])
-  @@index([expiresAt])
-  @@index([invitedBy])
-}
-
-model RevokedToken {
-  id        String @id @default(cuid())
-  tokenHash String @unique
-  expiresAt Int
-
-  @@index([expiresAt])
-}
-
-model App {
-  id            String   @id @default(cuid())
-  ownerGaii     String
-  ownerName     String
-  filename      String
-  versionNumber Int
-  manifest      Json
-  mimeType      String
-  size          Int
-  data          Bytes
-  accessCode    String?
-  parked        Boolean  @default(false)
-  forkable      Boolean  @default(false)
-  operatorHidden     Boolean   @default(false)
-  operatorHiddenBy   String?
-  operatorHiddenAt   DateTime?
-  operatorHideReason String?
-  createdAt     DateTime @default(now())
-
-  @@unique([ownerGaii, filename, versionNumber])
-  @@index([ownerGaii, filename])
-  @@index([ownerName, filename])
-}
-
-model AppDownload {
-  id        String @id @default(cuid())
-  ownerGaii String
-  filename  String
-  count     Int    @default(0)
-
-  @@unique([ownerGaii, filename])
-}
-
-// Unpublished draft (staging slot): at most one per (ownerGaii, filename). The
-// live published versions live in App; this holds a preview-only draft until it
-// is published (promoted into App) and this row is cleared.
-model AppDraft {
-  id        String   @id @default(cuid())
-  ownerGaii String
-  ownerName String
-  filename  String
-  manifest  Json
-  mimeType  String
-  size      Int
-  data      Bytes
-  updatedAt DateTime @default(now())
-
-  @@unique([ownerGaii, filename])
-}
-
-model AppFork {
-  id              String   @id
-  sourceOwnerGaii String
-  sourceOwnerName String
-  sourceFilename  String
-  sourceVersion   Int
-  childOwnerGaii  String
-  childOwnerName  String
-  childFilename   String
-  forkedByGaii    String
-  forkedAt        DateTime @default(now())
-
-  @@index([sourceOwnerGaii, sourceFilename])
-  @@index([childOwnerGaii, childFilename])
-}
-
-model AppPurchase {
-  id                   String   @id @default(cuid())
-  transactionId        String   @unique
-  buyerGaii            String
-  buyerOwner           String
-  sellerGaii           String
-  sellerOwner          String
-  appFilename          String
-  appName              String
-  appVersionNumber     Int
-  licenseType          String
-  priceMorsels         Int
-  transactionFeeMorsels Int
-  purchasedAt          DateTime @default(now())
-  appContent           String
-  appManifest          Json
-  appScreenshot        String?
-  signature            String
-  nodeId               String
-  nodePublicKey        String
-
-  @@index([buyerGaii])
-  @@index([sellerGaii])
-}
-
-model KnowledgeLink {
-  id          String   @id @default(cuid())
-  source      String
-  target      String
-  relation    String
-  description String
-  linkedAt    DateTime @default(now())
-  linkedBy    String
-
-  @@unique([source, target])
-  @@index([source])
-  @@index([target])
-}
-
-model KnowledgeReview {
-  id            String   @id
-  packageId     String
-  operatorGaii  String
-  reason        String
-  customText    String?
-  action        String
-  timestamp     DateTime @default(now())
-
-  @@index([packageId])
-}
-
-model ScheduledJob {
-  id               String    @id
-  name             String
-  type             String
-  extensionName    String?
-  instanceId       String?
-  actionId         String?
-  coreHandler      String?
-  cron             String
-  enabled          Boolean   @default(true)
-  input            Json?
-  lastRunAt        DateTime?
-  lastRunResult    String?
-  lastRunError     String?
-  lastRunDurationMs Int?
-  nextRunAt        DateTime?
-  createdBy        String
-  createdAt        DateTime  @default(now())
-  updatedAt        DateTime  @updatedAt
-  ownerScope       String?
-  agentName        String?
-  agentGaii        String?
-  createdByAgent   Boolean   @default(false)
-  displayName      String?
-  description      String?
-  purpose          String?
-  timezone         String?
-  constraints      Json?
-  runCount         Int       @default(0)
-
-  @@index([type])
-  @@index([extensionName])
-  @@index([enabled])
-  @@index([ownerScope])
-  @@index([agentGaii])
-}
-
-model ExecutionLog {
-  id              String   @id
-  jobId           String
-  jobName         String
-  type            String
-  extensionName   String?
-  actionId        String?
-  trigger         String
-  result          String
-  errorMessage    String?
-  durationMs      Int      @default(0)
-  memoryReads     Json     @default("[]")
-  memoryWrites    Json     @default("[]")
-  taskId          String?
-  createdAt       DateTime @default(now())
-
-  @@index([jobId])
-  @@index([extensionName])
-  @@index([createdAt])
-  @@index([trigger])
-}
-
-model DeviceAuth {
-  id               String   @id @default(cuid())
-  deviceCode       String   @unique
-  userCode         String   @unique
-  ownerName        String
-  agentName        String
-  displayName      String?
-  description      String?
-  status           String   @default("pending")
-  scopes           String[]
-  createdAt        DateTime @default(now())
-  expiresAt        DateTime
-  lastPolledAt     DateTime?
-  pollInterval     Int      @default(5)
-  approvedBy       String?
-  agentCredentials Json?
-  mode             String?
-}
-
-// Ecosystem application (GEAI) principal — mirror of Agent, minus task/agent-only fields,
-// plus the ecosystem binding fields (app, boundRef, dataAreas, status).
-model EcosystemApp {
-  id            String   @id @default(cuid())
-  geai          String   @unique
-  app           String
-  owner         String
-  displayName   String?
-  description   String?
-  publicKey     String
-  scopes        String[]
-  dataAreas     Json?
-  boundRef      String?
-  status        String   @default("pending")
-  morselBalance Int      @default(0)
-  capabilities  Json?
-  automation    Json?
-  setup         Json?
-  createdAt     DateTime @default(now())
-  lastSeen      DateTime @default(now())
-
-  @@index([owner])
-}
-
-// Ecosystem "hello integration" handshake — mirror of DeviceAuth.
-model EcoAuth {
-  id             String    @id @default(cuid())
-  deviceCode     String    @unique
-  userCode       String    @unique
-  ownerName      String
-  app            String
-  displayName    String?
-  description    String?
-  status         String    @default("pending")
-  publicKey      String?
-  scopes         String[]
-  dataAreas      Json?
-  boundRef       String?
-  createdAt      DateTime  @default(now())
-  expiresAt      DateTime
-  lastPolledAt   DateTime?
-  pollInterval   Int       @default(5)
-  approvedBy     String?
-  validationResult Json?
-  capabilities   Json?
-  automation     Json?
-  setup          Json?
-  appCredentials Json?
-}
-
-// Ecosystem-app automation recipe (feature B4) — one per (owner, app).
-model EcoAutomationRecipe {
-  id              String   @id @default(cuid())
-  owner           String
-  app             String
-  trigger         Json
-  agents          Json
-  organism        String?
-  email           Boolean  @default(false)
-  requireApproval Boolean  @default(false)
-  enabled         Boolean  @default(true)
-  createdAt       DateTime @default(now())
-  updatedAt       DateTime @default(now())
-
-  @@unique([owner, app])
-  @@index([owner])
-}
-
-model OAuthClient {
-  id           String   @id @default(cuid())
-  clientId     String   @unique
-  clientSecret String
-  clientName   String
-  redirectUris String[]
-  createdAt    DateTime @default(now())
-}
-
-model OAuthRefreshToken {
-  id        String   @id @default(cuid())
-  tokenHash String   @unique
-  clientId  String
-  gaii      String
-  owner     String
-  roles     String[]
-  createdAt DateTime @default(now())
-}
-
-model OAuthApproval {
-  id         String   @id @default(cuid())
-  clientId   String
-  gaii       String
-  owner      String
-  scope      String   @default("aimeat:full")
-  approvedAt DateTime @default(now())
-
-  @@unique([clientId, gaii])
-}
-
-model SystemPrompt {
-  id          String   @id
-  group       String
-  name        String
-  description String   @default("")
-  content     String
-  locales     Json?
-  active      Boolean  @default(true)
-  variables   String[]
-  usedIn      String[]
-  version     Int      @default(1)
-  updatedAt   DateTime @default(now())
-  updatedBy   String
-}
-
-model SystemPromptVersion {
-  id         String   @id @default(cuid())
-  promptId   String
-  version    Int
-  content    String
-  locales    Json?
-  changedBy  String
-  changedAt  DateTime @default(now())
-  changeNote String?
-
-  @@unique([promptId, version])
-}
-
-model Package {
-  id              String   @id @default(cuid())
-  packageGroupId  String
-  name            String
-  author          String
-  authorGhii      String
-  version         String
-  changelog       String   @default("")
-  description     String   @default("")
-  category        String   @default("other")
-  tags            String[]
-  visibility      String   @default("private")
-  status          String   @default("draft")
-  components      Json     // PackageComponent[]
-  manifest        String   @default("")
-  createdAt       DateTime @default(now())
-  updatedAt       DateTime @updatedAt
-
-  @@unique([packageGroupId, version])
-  @@index([packageGroupId])
-  @@index([author])
-  @@index([status])
-}
-
-model TemplateListing {
-  id              String   @id @default(cuid())
-  packageGroupId  String   @unique
-  packageName     String
-  packageAuthor   String
-  publishedBy     String
-  publishedByGhii String
-  title           String
-  description     String   @default("")
-  screenshots     String[]
-  category        String   @default("other")
-  tags            String[]
-  featured        Boolean  @default(false)
-  installCount    Int      @default(0)
-  rating          Float    @default(0)
-  reviewCount     Int      @default(0)
-  status          String   @default("listed")
-  createdAt       DateTime @default(now())
-  updatedAt       DateTime @updatedAt
-  rejectionReason String?
-  reviewedBy      String?
-  reviewedAt      DateTime?
-  reviewComment   String?
-  proposedAt      DateTime?
-  proposedBy      String?
-
-  @@index([category])
-  @@index([featured])
-  @@index([status])
-}
-
-model TemplateReview {
-  id          String   @id @default(cuid())
-  listingId   String
-  authorGhii  String
-  authorName  String
-  rating      Int
-  comment     String   @default("")
-  createdAt   DateTime @default(now())
-
-  @@unique([listingId, authorGhii])
-  @@index([listingId])
-}
-
-model TemplateDiscussion {
-  id          String   @id @default(cuid())
-  listingId   String
-  authorGhii  String
-  authorName  String
-  message     String
-  parentId    String?
-  createdAt   DateTime @default(now())
-
-  @@index([listingId])
-}
-
-model PackageInstance {
-  id                  String   @id @default(cuid())
-  packageGroupId      String
-  packageVersion      String
-  packageRecordId     String
-  owner               String
-  ownerGhii           String
-  label               String   @default("")
-  installedComponents Json     // InstalledComponent[]
-  status              String   @default("installed")
-  installedAt         DateTime @default(now())
-  updatedAt           DateTime @updatedAt
-
-  @@index([owner])
-  @@index([packageGroupId])
-}
-
-model Capability {
-  id                 String   @id
-  name               String
-  summary            String   @default("")
-  ownerGhii          String
-  visibility         String   @default("private")
-  scope              String   @default("local")
-  status             String   @default("draft")
-  rejectionReason    String?
-  deprecationMessage String?
-  replacedBy         String?
-  sourceType         String
-  sourceRef          String
-  sourceVersion      String   @default("")
-  authRequired       String   @default("registered")
-  callable           Boolean  @default(false)
-  inputSchema        Json?
-  outputSchema       Json?
-  exports            Json?    // CapabilityExport[]
-  usage              String   @default("")
-  whenToUse          String   @default("")
-  whenNotToUse       String   @default("")
-  examples           Json     @default("[]")   // Array<{ description, input, output }>
-  dependencies       Json     @default("[]")   // CapabilityDependency[]
-  schemaHash         String   @default("")
-  webhookUrl         String?
-  cost               Json?    // { morsels, perUnit? }
-  trustRequired      Float?
-  trust              Json     // CapabilityTrust
-  redactedFields     Json     @default("[]")   // string[]
-  operatorOverride   Json?    // CapabilityOverride
-  stats              Json     // CapabilityStats
-  tags               Json     @default("[]")   // string[]
-  createdAt          DateTime @default(now())
-  updatedAt          DateTime @updatedAt
-
-  logs               CapabilityLog[]
-  vouches            CapabilityVouch[]
-
-  @@index([ownerGhii])
-  @@index([sourceType, sourceRef])
-  @@index([status])
-  @@index([visibility])
-}
-
-model CapabilityLog {
-  id           String   @id @default(cuid())
-  capabilityId String
-  callerGhii   String
-  input        Json     @default("{}")
-  status       String
-  durationMs   Int      @default(0)
-  error        String?
-  timestamp    DateTime @default(now())
-
-  capability   Capability @relation(fields: [capabilityId], references: [id], onDelete: Cascade)
-
-  @@index([capabilityId, timestamp])
-  @@index([capabilityId, status])
-}
-
-model CapabilityVouch {
-  id           String   @id @default(cuid())
-  capabilityId String
-  userGhii     String
-  comment      String?
-  createdAt    DateTime @default(now())
-
-  capability   Capability @relation(fields: [capabilityId], references: [id], onDelete: Cascade)
-
-  @@unique([capabilityId, userGhii])
-}
-
-model ReplicationQueue {
-  id            String   @id
-  type          String
-  targetPeers   String[]
-  payload       String?
-  createdAt     DateTime @default(now())
-  attempts      Int      @default(0)
-  lastAttemptAt DateTime?
-  status        String   @default("pending")
-
-  @@index([status])
-  @@index([createdAt])
-}
-
-model StatsCounter {
-  id    String @id
-  value Int    @default(0)
-}
-
-model StatsDailyHistory {
-  id    String @id @default(cuid())
-  date  String
-  key   String
-  value Int    @default(0)
-
-  @@unique([date, key])
-}
-
-model AgentTask {
-  id               String    @id
-  agentGaii        String
-  ownerGaii        String
-  title            String
-  description      String    @default("")
-  scope            Json      @default("[]")
-  rules            Json      @default("[]")
-  verification     Json      @default("{}")
-  resources        Json?
-  todos            Json      @default("[]")
-  status           String    @default("draft")
-  parentTaskId     String?
-  workTrackingCode String?
-  telemetry        Json?
-  lastEventAt      DateTime?
-  createdAt        DateTime  @default(now())
-  updatedAt        DateTime  @updatedAt
-  completedAt      DateTime?
-  deliverableKey   String?
-  rating           Json?
-  triage           String?
-  automation       Json?
-
-  @@index([agentGaii, status])
-  @@index([ownerGaii])
-}
-
-model AgentTaskEvent {
-  id        String   @id @default(cuid())
-  taskId    String
-  type      String
-  message   String
-  details   Json?
-  timestamp DateTime @default(now())
-
-  @@index([taskId, timestamp])
-}
-
-model AgentDirective {
-  id           String   @id
-  agentGaii    String   @unique
-  purpose      String   @default("")
-  rules        Json     @default("[]")
-  memoryAreas  Json     @default("[]")
-  resources    Json     @default("[]")
-  budgetLimits Json?
-  updatedAt    DateTime @updatedAt
-}
-
-model OwnerAgentDefault {
-  id                 String   @id
-  ownerGaii          String   @unique
-  rules              Json     @default("[]")
-  defaultTokenBudget Int?
-  defaultMemoryAreas Json     @default("[]")
-  updatedAt          DateTime @updatedAt
-}
-
-model SharingGroup {
-  id                 String   @id
-  name               String
-  description        String?
-  ownerGaii          String
-  members            Json     @default("[]")
-  defaultPermissions Json     @default("{\"read\":true,\"write\":false}")
-  createdAt          DateTime @default(now())
-  updatedAt          DateTime @updatedAt
-
-  @@index([ownerGaii])
-}
-
-model AgentActivity {
-  id        String @id @default(cuid())
-  agentGaii String
-  date      String
-  hour      Int
-  metric    String
-  value     Int    @default(0)
-
-  @@unique([agentGaii, date, hour, metric])
-  @@index([agentGaii, date])
-}
-
-// ── Agent LLM Usage Ledger (LEDGER / TARGET-016) ──
-
-model AgentUsageEvent {
-  id               String  @id
-  ts               String
-  agentGaii        String
-  ownerGhii        String
-  runId            String?
-  model            String
-  provider         String
-  promptTokens     Int     @default(0)
-  completionTokens Int     @default(0)
-  costUsd          Float?
-  priceRef         String?
-  source           String
-  apiKeyScope      String  @default("own")
-  organismId       String?
-  workspaceId      String?
-  capabilityId     String?
-  consumerGhii     String?
-
-  @@index([ownerGhii, ts])
-  @@index([agentGaii, ts])
-  @@index([runId])
-}
-
-model AgentUsageDaily {
-  id               String @id @default(cuid())
-  date             String
-  agentGaii        String
-  ownerGhii        String
-  apiKeyScope      String @default("own")
-  model            String
-  provider         String
-  organismId       String @default("")
-  workspaceId      String @default("")
-  promptTokens     Int    @default(0)
-  completionTokens Int    @default(0)
-  costUsd          Float  @default(0)
-  calls            Int    @default(0)
-  unpricedCalls    Int    @default(0)
-
-  @@unique([date, agentGaii, ownerGhii, apiKeyScope, model, provider, organismId, workspaceId])
-  @@index([ownerGhii, date])
-  @@index([organismId, date])
-}
-
-model TelemetryEvent {
-  id        String   @id
-  agentGaii String
-  type      String
-  data      Json
-  sessionId String?
-  taskId    String?
-  createdAt DateTime @default(now())
-
-  @@index([agentGaii, createdAt])
-}
-
-model WebhookDeliveryLog {
-  id           String   @id
-  agentGaii    String
-  event        String
-  payload      Json
-  status       String
-  httpStatus   Int?
-  errorMessage String?
-  attemptCount Int
-  latencyMs    Int
-  createdAt    DateTime @default(now())
-
-  @@index([agentGaii, createdAt])
-}
-
-model AgentOnboarding {
-  id                   String   @id @default(cuid())
-  agentGaii            String   @unique
-  status               String   @default("pending")
-  startedAt            DateTime @default(now())
-  completedAt          DateTime?
-  steps                Json     @default("[]")
-  readinessScore       Int?
-  readinessLevel       String?
-  detectedPlatform     String?
-  installedRuntime     String?
-  onboardingBaseline   Int?
-  operationalHealth    Float?
-  healthComponents     Json?
-  healthRecalculatedAt DateTime?
-  readinessOverride    Json?
-
-  @@index([status])
-}
-
-model SubdomainSite {
-  id        String   @id @default(cuid())
-  subdomain String   @unique
-  kind      String
-  target    String
-  enabled   Boolean  @default(true)
-  createdBy String
-  createdAt DateTime @default(now())
-  updatedAt DateTime @default(now())
-}
-
-model AppGrant {
-  id               String    @id @default(cuid())
-  grantId          String    @unique
-  app              String
-  appName          String
-  appOrigin        String
-  owner            String
-  gaii             String
-  scopes           String[]
-  refreshTokenHash String?
-  createdAt        DateTime  @default(now())
-  lastUsedAt       DateTime?
-  revoked          Boolean   @default(false)
-
-  @@index([owner])
-  @@index([refreshTokenHash])
-}
-
-model AgentMessage {
-  id           String    @id
-  agentGaii    String
-  threadId     String
-  direction    String
-  senderGaii   String
-  content      String
-  status       String    @default("pending")
-  linkedTaskId String?
-  metadata     Json?
-  createdAt    DateTime  @default(now())
-  processedAt  DateTime?
-
-  @@index([agentGaii, threadId, createdAt])
-  @@index([agentGaii, status])
-}
-
-model DirectMessage {
-  id             String    @id // composite "<mid>::<ownerGhii>" (one mailbox copy)
-  mid            String // the shared message id (same on sender + recipient copies)
-  ownerGhii      String
-  conversationId String
-  subject        String?
-  senderGhii     String
-  recipientGhii  String
-  body           String    @default("")
-  attachments    Json?
-  interactive    Json?
-  broadcastId    String?
-  respondable    Boolean?
-  status         String    @default("queued")
-  direction      String
-  replyToId      String?
-  origin         String    @default("local")
-  originNodeId   String
-  error          String?
-  createdAt      DateTime  @default(now())
-  deliveredAt    DateTime?
-  readAt         DateTime?
-
-  @@index([ownerGhii, direction, createdAt])
-  @@index([ownerGhii, conversationId, createdAt])
-  @@index([mid])
-  @@index([status, origin])
-  @@index([broadcastId])
-}
-
-model ContactConsent {
-  id             String   @id // composite "<ownerGhii>::<contactId>"
-  ownerGhii      String
-  contactId      String
-  state          String   @default("pending")
-  firstMessageId String?
-  createdAt      DateTime @default(now())
-  updatedAt      DateTime @default(now())
-
-  @@index([ownerGhii, state])
-}
-
-model MessageDeliveryLog {
-  id           String   @id
-  messageId    String
-  origin       String
-  targetNodeId String
-  status       String
-  httpStatus   Int?
-  errorMessage String?
-  latencyMs    Int      @default(0)
-  createdAt    DateTime @default(now())
-
-  @@index([createdAt])
-  @@index([status])
-}