create-ailk 0.1.0 → 0.1.1

package/templates/database/schema.prisma

@@ -3,19 +3,12 @@
 // MINIMAL BUT EXTENSIBLE - Only stores auth and customer extensions
 // All business data (leads, orders, analytics) lives on the Platform
 //
-// Tables (14 total — 11 auth/config + 3 inbox added in B1):
-//   - Better Auth (4): User, Session, Account, Verification    (post-#587)
-//   - API Auth (2): ApiToken, RefreshToken
-//   - OAuth (2): OAuthClient, OAuthAuthorization
-//   - Push (1): PushToken
-//   - Extensions (2): UserData, SiteSetting
-//   - Inbox (3): Lead, Subscriber, Callback  [namespace: database/inbox/]
-//
-// Aggregation strategy: Namespace-local schema files (e.g. database/inbox/schema.prisma)
-// define models canonically for lint and documentation. Those same models are
-// registered here so Prisma can generate from the single root schema.prisma.
-// Phase 2 (ADR 0009 D4) will migrate to prismaSchemaFolder once multi-file
-// generation is adopted repo-wide.
+// Schema layout: prismaSchemaFolder (ADR 0009 D4 Phase 2, #3607). Prisma reads
+// the whole database/ folder — each model is defined ONCE in its namespace file
+// (database/{auth,config,ops,inbox,content}/schema.prisma). This file holds ONLY
+// the single generator + datasource blocks — it is model-free (#3607 AC-1). The
+// former per-User site-config models (TenantTheme/TenantSiteIdentity/TenantSEO)
+// were re-anchored to the config namespace keyed on workspaceId (#3641).
 
 generator client {
   provider            = "prisma-client"
@@ -27,327 +20,26 @@ datasource db {
   provider = "postgresql"
 }
 
-// ============================================================================
-// Better Auth Models (Web Dashboard Authentication — #587)
-// ============================================================================
-
-/// User - Dashboard users (site owners, admins, end-users)
-///
-/// emailVerified is a Boolean per Better Auth's contract (NextAuth previously
-/// stored the verification timestamp as DateTime?). The five custom relations
-/// — ApiToken, RefreshToken, OAuthAuthorization, PushToken, UserData — keep
-/// their onDelete: Cascade semantics so user removal cleanly tears down all
-/// dependent rows.
-model User {
-  id            String    @id @default(cuid())
-  email         String    @unique
-  name          String?
-  image         String?
-  emailVerified Boolean   @default(false) @map("email_verified")
-
-  // Profile extensions
-  role          String    @default("user") // "user", "admin", "owner"
-
-  // Billing identity — provider-agnostic so Stripe is v1 value, not baked-in name.
-  // Webhook is the only writer (see apps/api/src/routes/webhooks/stripe.ts).
-  // #771 self-serve dashboard reads billingCustomerId for Stripe customer-portal URL.
-  billingProvider   String?  @map("billing_provider")    // "stripe"; future: "lemonsqueezy", "paddle"
-  billingCustomerId String?  @map("billing_customer_id") // cus_xxx (Stripe) or equivalent
-
-  // Subscription tier projection — derived from the Stripe webhook's product-aware
-  // routing (#898). Defaults to "free" until a customer.subscription.created event
-  // fires; flips to "pro" / "pro_plus" / etc. based on the line item's product.
-  // hasCarePlan is true only for pro_plus today; seatCount mirrors the line item
-  // quantity from Stripe's adjustable-quantity widget (1–50).
-  tier         String   @default("free")                  // "free" | "pro" | "pro_plus" | "enterprise" (retired "agency"/"commercial" rows migrated to "enterprise" — #3516)
-  hasCarePlan  Boolean  @default(false) @map("has_care_plan")
-  seatCount    Int      @default(1) @map("seat_count")
-
-  createdAt     DateTime  @default(now()) @map("created_at")
-  updatedAt     DateTime  @updatedAt @map("updated_at")
-
-  // Better Auth relations
-  sessions      Session[]
-  accounts      Account[]
-
-  // API & OAuth
-  apiTokens           ApiToken[]
-  refreshTokens       RefreshToken[]
-  oauthAuthorizations OAuthAuthorization[]
-  pushTokens          PushToken[]
-
-  // Extensions
-  userData      UserData[]
-
-  // Theme Wiring (TWP3-MAT #1359)
-  tenantTheme        TenantTheme?
-  tenantSiteIdentity TenantSiteIdentity?
-  tenantSeo          TenantSEO?
-
-  @@unique([billingProvider, billingCustomerId])
-  @@map("users")
-}
-
-/// Session - Active user sessions (Better Auth schema)
-///
-/// Session.token is the opaque cookie value the dual-mode preHandler reads.
-/// Deleting a row revokes the session; deleting the parent User cascades.
-model Session {
-  id        String   @id
-  expiresAt DateTime @map("expires_at")
-  token     String   @unique
-  createdAt DateTime @default(now()) @map("created_at")
-  updatedAt DateTime @updatedAt @map("updated_at")
-  ipAddress String?  @map("ip_address")
-  userAgent String?  @map("user_agent")
-  userId    String   @map("user_id")
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@index([userId])
-  @@index([token])
-  @@map("sessions")
-}
-
-/// Account - OAuth provider connections (Google, GitHub, etc.)
-///
-/// Better Auth's account shape: one row per (providerId, accountId) pair.
-/// Cascade on User removal keeps OAuth links from orphaning.
-model Account {
-  id                    String    @id
-  accountId             String    @map("account_id")
-  providerId            String    @map("provider_id")
-  userId                String    @map("user_id")
-  accessToken           String?   @map("access_token") @db.Text
-  refreshToken          String?   @map("refresh_token") @db.Text
-  idToken               String?   @map("id_token") @db.Text
-  accessTokenExpiresAt  DateTime? @map("access_token_expires_at")
-  refreshTokenExpiresAt DateTime? @map("refresh_token_expires_at")
-  scope                 String?
-  password              String?
-  createdAt             DateTime  @default(now()) @map("created_at")
-  updatedAt             DateTime  @updatedAt @map("updated_at")
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@unique([providerId, accountId])
-  @@index([userId])
-  @@map("accounts")
-}
-
-/// Verification - Email / magic-link verification tokens (Better Auth schema)
-model Verification {
-  id         String   @id
-  identifier String
-  value      String
-  expiresAt  DateTime @map("expires_at")
-  createdAt  DateTime @default(now()) @map("created_at")
-  updatedAt  DateTime @updatedAt @map("updated_at")
-
-  @@index([identifier])
-  @@map("verifications")
-}
-
 // ============================================================================
 // API Token Authentication (Mobile Apps, CLI, External Clients)
 // ============================================================================
 
-/// ApiToken - Bearer tokens for non-web clients (mobile apps, API integrations)
-model ApiToken {
-  id          String    @id @default(cuid())
-  userId      String    @map("user_id")
-  
-  // Token identification
-  name        String    // "iPhone", "Android App", "API Integration"
-  token       String    @unique // Hashed token
-  tokenPrefix String    @map("token_prefix") // First 8 chars for identification
-  
-  // Client info
-  clientType  String    @default("api") @map("client_type") // "mobile", "api", "cli"
-  deviceInfo  String?   @map("device_info") // "iPhone 15 Pro", "Android 14"
-  
-  // Permissions
-  scopes      String[]  @default([]) // ["read:profile", "write:data"]
-  
-  // Lifecycle
-  expiresAt   DateTime? @map("expires_at")
-  lastUsedAt  DateTime? @map("last_used_at")
-  lastUsedIp  String?   @map("last_used_ip")
-  revokedAt   DateTime? @map("revoked_at")
-  
-  createdAt   DateTime  @default(now()) @map("created_at")
-
-  user          User           @relation(fields: [userId], references: [id], onDelete: Cascade)
-  refreshTokens RefreshToken[]
-
-  @@index([userId])
-  @@index([token])
-  @@index([tokenPrefix])
-  @@map("api_tokens")
-}
-
-/// RefreshToken - Long-lived tokens for mobile session refresh
-model RefreshToken {
-  id          String    @id @default(cuid())
-  userId      String    @map("user_id")
-  apiTokenId  String    @map("api_token_id")
-  
-  token       String    @unique // Hashed
-  
-  // Lifecycle
-  expiresAt   DateTime  @map("expires_at")
-  usedAt      DateTime? @map("used_at")      // Last time used to get new access token
-  revokedAt   DateTime? @map("revoked_at")
-  
-  createdAt   DateTime  @default(now()) @map("created_at")
-
-  user     User     @relation(fields: [userId], references: [id], onDelete: Cascade)
-  apiToken ApiToken @relation(fields: [apiTokenId], references: [id], onDelete: Cascade)
-
-  @@index([userId])
-  @@index([apiTokenId])
-  @@index([token])
-  @@map("refresh_tokens")
-}
-
 // ============================================================================
 // OAuth 2.0 (ChatGPT Plugin, Slack Bot, External Integrations)
 // ============================================================================
 
-/// OAuthClient - Registered OAuth applications (ChatGPT, Slack, etc.)
-model OAuthClient {
-  id           String   @id @default(cuid())
-  
-  // Client identification
-  name         String   // "ChatGPT Plugin", "Slack Bot"
-  description  String?
-  logoUrl      String?  @map("logo_url")
-  
-  // OAuth credentials
-  clientId     String   @unique @map("client_id")   // Public identifier
-  clientSecret String   @map("client_secret")       // Hashed secret
-  
-  // OAuth config
-  redirectUris String[] @map("redirect_uris")       // Allowed callback URLs
-  scopes       String[] @default([])                // Allowed scopes
-  
-  // Settings
-  enabled      Boolean  @default(true)
-  trusted      Boolean  @default(false)             // Skip consent screen
-  
-  createdAt    DateTime @default(now()) @map("created_at")
-  updatedAt    DateTime @updatedAt @map("updated_at")
-
-  authorizations OAuthAuthorization[]
-
-  @@map("oauth_clients")
-}
-
-/// OAuthAuthorization - User grants to OAuth clients
-model OAuthAuthorization {
-  id            String   @id @default(cuid())
-  userId        String   @map("user_id")
-  clientId      String   @map("client_id")
-  
-  // Granted scopes (may be subset of client's allowed scopes)
-  scopes        String[]
-  
-  // Tokens
-  accessToken   String   @unique @map("access_token")   // Hashed
-  refreshToken  String?  @unique @map("refresh_token")  // Hashed
-  
-  // Lifecycle
-  expiresAt     DateTime @map("expires_at")
-  revokedAt     DateTime? @map("revoked_at")
-  
-  createdAt     DateTime @default(now()) @map("created_at")
-  updatedAt     DateTime @updatedAt @map("updated_at")
-
-  user   User        @relation(fields: [userId], references: [id], onDelete: Cascade)
-  client OAuthClient @relation(fields: [clientId], references: [id], onDelete: Cascade)
-
-  @@unique([userId, clientId])
-  @@index([userId])
-  @@index([clientId])
-  @@index([accessToken])
-  @@map("oauth_authorizations")
-}
-
 // ============================================================================
 // Push Notifications (Mobile Apps, Web Push)
 // ============================================================================
 
-/// PushToken - Device tokens for push notifications
-model PushToken {
-  id          String   @id @default(cuid())
-  userId      String   @map("user_id")
-  
-  // Token details
-  token       String   @unique              // FCM or APNs token
-  platform    String                        // "ios", "android", "web"
-  
-  // Device info
-  deviceId    String?  @map("device_id")    // Unique device identifier
-  deviceName  String?  @map("device_name")  // "iPhone 15 Pro"
-  appVersion  String?  @map("app_version")  // "1.2.3"
-  
-  // Status
-  enabled     Boolean  @default(true)
-  failedAt    DateTime? @map("failed_at")   // Last delivery failure
-  failCount   Int      @default(0) @map("fail_count")
-  
-  createdAt   DateTime @default(now()) @map("created_at")
-  updatedAt   DateTime @updatedAt @map("updated_at")
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@index([userId])
-  @@index([platform])
-  @@map("push_tokens")
-}
-
 // ============================================================================
 // User Data Extensions (Customer Customizations)
 // ============================================================================
 
-/// UserData - Flexible key-value storage for customer extensions
-/// Use this for: preferences, saved items, custom fields, feature flags
-model UserData {
-  id        String   @id @default(cuid())
-  userId    String   @map("user_id")
-  
-  // Key-value storage
-  key       String   // "preferences", "saved_products", "notification_settings"
-  value     Json     // Flexible JSON storage
-  
-  createdAt DateTime @default(now()) @map("created_at")
-  updatedAt DateTime @updatedAt @map("updated_at")
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@unique([userId, key])
-  @@index([userId])
-  @@index([key])
-  @@map("user_data")
-}
-
 // ============================================================================
 // Site Settings (Site-wide Configuration)
 // ============================================================================
 
-/// SiteSetting - Key-value settings for the customer site
-/// Use for: feature flags, custom config, cached Platform data
-model SiteSetting {
-  id        String   @id @default(cuid())
-  key       String   @unique // "feature_flags", "cached_config", "custom_theme"
-  value     Json
-
-  createdAt DateTime @default(now()) @map("created_at")
-  updatedAt DateTime @updatedAt @map("updated_at")
-
-  @@map("site_settings")
-}
-
 // ============================================================================
 // Inbox Namespace (database/inbox/schema.prisma — B1)
 //
@@ -356,132 +48,24 @@ model SiteSetting {
 // through apps/api/src/services/ (D3).
 // ============================================================================
 
-/// Lead - anonymous lead submission (Phase B submit_lead tool / B6 route)
-model Lead {
-  id        String   @id @default(cuid())
-  siteId    String   @map("site_id")
-  source    String
-  email     String
-  payload   Json
-  createdAt DateTime @default(now()) @map("created_at")
-
-  @@index([siteId])
-  @@index([createdAt])
-  @@map("leads")
-}
-
-/// Subscriber - newsletter subscription (Phase B subscribe_newsletter tool / B6 route)
-model Subscriber {
-  id        String   @id @default(cuid())
-  siteId    String   @map("site_id")
-  email     String
-  source    String
-  createdAt DateTime @default(now()) @map("created_at")
-
-  @@unique([siteId, email])
-  @@index([siteId])
-  @@map("subscribers")
-}
-
-/// Callback - callback request (Phase B request_callback tool / B6 route)
-model Callback {
-  id            String   @id @default(cuid())
-  siteId        String   @map("site_id")
-  name          String
-  phone         String
-  preferredTime String?  @map("preferred_time")
-  payload       Json
-  createdAt     DateTime @default(now()) @map("created_at")
-
-  @@index([siteId])
-  @@index([createdAt])
-  @@map("callbacks")
-}
-
 // ============================================================================
-// License Telemetry (apps-paid/license-issuer — S2 #1031)
+// Tenancy — multi-tenant module (database/auth/schema.prisma — FEAT-042)
 //
-// Time-series records of opt-in seat-usage telemetry from customer deployments.
-// Written by POST /telemetry on the license-issuer when AILK_TELEMETRY=1.
-// Enables queries computing the distribution of active_user_count / seat_count
-// across the customer base over a time window (S2 trigger condition monitoring).
-//
-// No PII beyond customer_id (Stripe customer ID — pseudo-anonymous).
+// Organization → Workspace → Membership. Same-namespace @relation to User is
+// allowed (auth namespace: identity + tenancy membership per ADR 0009).
+// Organization/Membership/Invitation are managed by the Better Auth
+// organization plugin (apps/workspace auth config); Workspace is AILK's own
+// model (plugin teams feature rejected — per-team membership contradicts
+// org-level membership; see docs/research/ploy-capture/lessons/).
 // ============================================================================
 
-/// TelemetryRecord - opt-in seat-usage telemetry from customer deployments.
-///
-/// timestamp is the client-side observation time (from the telemetry payload).
-/// recordedAt is the server-side receipt time (default now()).
-/// The (customerId, recordedAt DESC) index supports "latest record per customer"
-/// queries; the recordedAt DESC index supports time-window aggregate queries.
-model TelemetryRecord {
-  id              String   @id @default(cuid())
-  customerId      String   @map("customer_id")
-  activeUserCount Int      @map("active_user_count")
-  seatCount       Int      @map("seat_count")
-  timestamp       DateTime
-  recordedAt      DateTime @default(now()) @map("recorded_at")
-
-  @@index([customerId, recordedAt(sort: Desc)])
-  @@index([recordedAt(sort: Desc)])
-  @@map("telemetry_records")
-}
-
 // ============================================================================
-// Theme Wiring — Per-tenant design system persistence (TWP3-MAT #1359)
-//
-// Three tables, one per @working-theory/site-config schema. Each row stores the
-// Zod-validated JSON blob for a single tenant (identified by userId from the
-// Better Auth session). Validation is enforced at the API layer; the DB stores
-// the already-validated blob in a Json column.
+// Chat/Artifact substrate (database/content/schema.prisma)
 //
-// Design decisions (spec §3):
-//   - One table per schema (not a polymorphic config table) — different update
-//     cadences + consumer access patterns.
-//   - Json column for the blob — schema evolves without DB migration on change;
-//     Zod validates at API boundary.
-//   - userId is the Better Auth User id — plain String FK; onDelete Cascade
-//     ensures rows are removed when the user account is deleted.
-//   - @@unique([userId]) enforces one active record per tenant per config type
-//     (upsert semantics at the API layer).
+// Event-sourced conversation transport + artifact persistence per
+// docs/research/ploy-capture/BACKEND-REQUIREMENTS.md. Every table carries a
+// non-null workspaceId tenant scope as a plain String — no cross-namespace
+// FK into auth (ADR 0009 invariant 1). Cross-namespace assembly (tenant
+// guard, unread counts per user) routes through apps/api/src/services/.
 // ============================================================================
 
-/// TenantTheme — per-tenant ThemeSchema blob (TWP3-MAT #1359)
-model TenantTheme {
-  id        String   @id @default(cuid())
-  userId    String   @unique @map("user_id")
-  data      Json
-  createdAt DateTime @default(now()) @map("created_at")
-  updatedAt DateTime @updatedAt @map("updated_at")
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@map("tenant_themes")
-}
-
-/// TenantSiteIdentity — per-tenant SiteIdentitySchema blob (TWP3-MAT #1359)
-model TenantSiteIdentity {
-  id        String   @id @default(cuid())
-  userId    String   @unique @map("user_id")
-  data      Json
-  createdAt DateTime @default(now()) @map("created_at")
-  updatedAt DateTime @updatedAt @map("updated_at")
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@map("tenant_site_identities")
-}
-
-/// TenantSEO — per-tenant SEOSchema blob (TWP3-MAT #1359)
-model TenantSEO {
-  id        String   @id @default(cuid())
-  userId    String   @unique @map("user_id")
-  data      Json
-  createdAt DateTime @default(now()) @map("created_at")
-  updatedAt DateTime @updatedAt @map("updated_at")
-
-  user User @relation(fields: [userId], references: [id], onDelete: Cascade)
-
-  @@map("tenant_seos")
-}

package/templates/database/seed-test.ts

@@ -25,23 +25,30 @@
  */
 import "dotenv/config";
 
+import { PrismaPg } from "@prisma/adapter-pg";
+
 import { PrismaClient } from "./generated/client/client.js";
 
+// Fixed, well-known ids from the ADR-0031 reserved sentinel range (zero
+// timestamp + version 7 + variant 8 + counter) — valid-shaped ids the
+// users_id_format CHECK admits, stable so the e2e harness can put them in
+// AILK_TEST_AUTH_USER_ALLOWLIST, and impossible to collide with a generated
+// v7 id.
 const TEST_USERS = [
   {
-    id: "test-e2e-user",
+    id: "user_00000000-0000-7000-8000-0000000000e1",
     email: "test:e2e-user@ailaunchkit.test",
     name: "E2E Test User",
     role: "user",
   },
   {
-    id: "test-e2e-admin",
+    id: "user_00000000-0000-7000-8000-0000000000e2",
     email: "test:e2e-admin@ailaunchkit.test",
     name: "E2E Test Admin",
     role: "admin",
   },
   {
-    id: "test-e2e-owner",
+    id: "user_00000000-0000-7000-8000-0000000000e3",
     email: "test:e2e-owner@ailaunchkit.test",
     name: "E2E Test Owner",
     role: "owner",
@@ -57,7 +64,10 @@ async function main(): Promise<void> {
     process.exit(1);
   }
 
-  const prisma = new PrismaClient();
+  // Prisma 7 requires an explicit driver adapter (mirrors seed.ts) —
+  // `new PrismaClient()` with no adapter throws at construction.
+  const adapter = new PrismaPg({ connectionString: process.env.DATABASE_URL });
+  const prisma = new PrismaClient({ adapter });
   try {
     for (const user of TEST_USERS) {
       await prisma.user.upsert({