teamcopilot 0.4.5 → 0.4.8

package/dist/utils/chat-usage.js

@@ -9,6 +9,7 @@ const client_1 = __importDefault(require("../prisma/client"));
 const assert_1 = require("./assert");
 const opencode_client_1 = require("./opencode-client");
 const model_pricing_1 = require("./model-pricing");
+const USAGE_SYNC_PAGE_LIMIT = 100;
 function assertNonNegativeNumber(value, label) {
     (0, assert_1.assertCondition)(typeof value === "number" && Number.isFinite(value) && value >= 0, `${label} must be a non-negative number`);
 }
@@ -42,29 +43,65 @@ function assertSessionMessages(value) {
         }
     }
 }
-async function syncChatSessionUsage(chatSessionId, opencodeSessionId) {
-    const client = await (0, opencode_client_1.getOpencodeClient)();
+async function fetchUsageSyncPage(client, opencodeSessionId, before) {
     const result = await client.session.messages({
-        path: { id: opencodeSessionId }
+        path: { id: opencodeSessionId },
+        query: {
+            limit: USAGE_SYNC_PAGE_LIMIT,
+            ...(before ? { before } : {}),
+        },
     });
     if (result.error) {
         throw new Error("Failed to load session messages for usage sync");
     }
     assertSessionMessages(result.data);
-    const messages = result.data;
+    return {
+        messages: result.data,
+        nextCursor: result.response.headers.get("x-next-cursor") || null,
+    };
+}
+async function syncChatSessionUsage(chatSessionId, opencodeSessionId) {
+    const client = await (0, opencode_client_1.getOpencodeClient)();
     const existingUsage = await client_1.default.chat_session_usage.findUnique({
         where: {
             chat_session_id: chatSessionId,
         }
     });
-    let startIndex = 0;
-    if (existingUsage) {
-        const lastSyncedIndex = messages.findIndex((message) => (message.info.role === "assistant"
-            && message.info.id === existingUsage.last_synced_message_id));
-        if (lastSyncedIndex === -1) {
-            return;
+    const canResumeFromCursor = existingUsage !== null && existingUsage.last_synced_message_id !== null;
+    const fetchedPages = [];
+    let before;
+    let cursorPageIndex = -1;
+    let cursorMessageIndex = -1;
+    if (canResumeFromCursor) {
+        while (true) {
+            const page = await fetchUsageSyncPage(client, opencodeSessionId, before);
+            const currentPageIndex = fetchedPages.length;
+            fetchedPages.push(page);
+            const lastSyncedIndex = page.messages.findIndex((message) => (message.info.role === "assistant"
+                && message.info.id === existingUsage.last_synced_message_id));
+            if (lastSyncedIndex !== -1) {
+                cursorPageIndex = currentPageIndex;
+                cursorMessageIndex = lastSyncedIndex;
+                break;
+            }
+            if (!page.nextCursor) {
+                return;
+            }
+            before = page.nextCursor;
+        }
+    }
+    else {
+        const result = await client.session.messages({
+            path: { id: opencodeSessionId }
+        });
+        if (result.error) {
+            throw new Error("Failed to load session messages for usage sync");
         }
-        startIndex = lastSyncedIndex + 1;
+        assertSessionMessages(result.data);
+        fetchedPages.push({
+            messages: result.data,
+            nextCursor: null,
+        });
     }
     let deltaInputTokens = 0;
     let deltaOutputTokens = 0;
@@ -72,10 +109,13 @@ async function syncChatSessionUsage(chatSessionId, opencodeSessionId) {
     let latestProcessedAssistantMessageId = null;
     let latestProcessedProviderId = null;
     let latestProcessedModelId = null;
-    for (const message of messages.slice(startIndex)) {
+    const processMessage = (message) => {
         const info = message.info;
         if (info.role !== "assistant") {
-            continue;
+            return;
+        }
+        if (info.time.completed === undefined) {
+            return;
         }
         deltaInputTokens += info.tokens.input;
         deltaOutputTokens += info.tokens.output;
@@ -83,6 +123,27 @@ async function syncChatSessionUsage(chatSessionId, opencodeSessionId) {
         latestProcessedAssistantMessageId = info.id;
         latestProcessedProviderId = info.providerID;
         latestProcessedModelId = info.modelID;
+    };
+    if (canResumeFromCursor) {
+        (0, assert_1.assertCondition)(cursorPageIndex !== -1, "Usage sync cursor page is missing");
+        const pagesInChronologicalOrder = [...fetchedPages].reverse();
+        const cursorPageChronologicalIndex = pagesInChronologicalOrder.length - 1 - cursorPageIndex;
+        const cursorPage = pagesInChronologicalOrder[cursorPageChronologicalIndex];
+        for (const message of cursorPage.messages.slice(cursorMessageIndex + 1)) {
+            processMessage(message);
+        }
+        for (let pageIndex = cursorPageChronologicalIndex + 1; pageIndex < pagesInChronologicalOrder.length; pageIndex += 1) {
+            for (const message of pagesInChronologicalOrder[pageIndex].messages) {
+                processMessage(message);
+            }
+        }
+    }
+    else {
+        for (const page of [...fetchedPages].reverse()) {
+            for (const message of page.messages) {
+                processMessage(message);
+            }
+        }
     }
     if (latestProcessedAssistantMessageId === null
         || latestProcessedProviderId === null

package/dist/utils/session-messages-page.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSessionMessagesPageQuery = parseSessionMessagesPageQuery;
+exports.fetchOpencodeSessionMessagesPage = fetchOpencodeSessionMessagesPage;
+const opencode_client_1 = require("./opencode-client");
+const DEFAULT_MESSAGE_PAGE_LIMIT = 10;
+function getErrorMessage(error) {
+    if (error && typeof error === "object" && "detail" in error) {
+        return String(error.detail);
+    }
+    return "Failed to get messages from opencode";
+}
+function parseSessionMessagesPageQuery(query) {
+    const limit = DEFAULT_MESSAGE_PAGE_LIMIT;
+    const rawBefore = query.before;
+    if (rawBefore === undefined) {
+        return { limit };
+    }
+    if (typeof rawBefore !== "string" || rawBefore.trim().length === 0) {
+        throw {
+            status: 400,
+            message: "before must be a non-empty string",
+        };
+    }
+    return {
+        limit,
+        before: rawBefore,
+    };
+}
+async function fetchOpencodeSessionMessagesPage(opencodeSessionId, pageQuery) {
+    const client = await (0, opencode_client_1.getOpencodeClient)();
+    const result = await client.session.messages({
+        path: { id: opencodeSessionId },
+        query: {
+            limit: pageQuery.limit,
+            ...(pageQuery.before ? { before: pageQuery.before } : {}),
+        },
+    });
+    if (result.error) {
+        throw new Error(getErrorMessage(result.error));
+    }
+    const nextCursor = result.response.headers.get("x-next-cursor");
+    const hasMore = nextCursor !== null && nextCursor.length > 0;
+    return {
+        messages: result.data,
+        nextCursor,
+        hasMore,
+    };
+}

package/dist/workspace_files/.opencode/plugins/secret-proxy.ts

@@ -24,7 +24,9 @@ const SECRET_PLACEHOLDER_PATTERN = /\{\{SECRET:([A-Za-z_][A-Za-z0-9_]*)\}\}/g
 const SECRET_ENV_REFERENCE_PATTERN = /\$\{__TEAMCOPILOT_RUNTIME_SECRET_([A-Z][A-Z0-9_]*)\}/g
 const AGENT_VISIBLE_SECRET_ENV_REFERENCE_PATTERN = /__TEAMCOPILOT_RUNTIME_SECRET_[A-Z][A-Z0-9_]*/
 const SECRET_ENV_PREFIX = "__TEAMCOPILOT_RUNTIME_SECRET_"
-const SHELL_CONTROL_TOKENS = new Set(["&&", "||", ";", "|"])
+const SHELL_CONTROL_TOKENS = new Set(["&&", "||", ";", "|", "\n"])
+const SHELL_REDIRECTION_PATTERN = /^(\d+)?(?:>>?|<<?|<<<)$/
+const SHELL_REDIRECTION_DUPLICATION_PATTERN = /^(\d+)?[<>]&\d+$/
 const CURL_SAFE_VALUE_OPTIONS = new Set([
   "-H",
   "--header",
@@ -160,6 +162,45 @@ type CommandToken = {
   end: number
 }
 
+function readShellRedirectionToken(command: string, start: number): string | null {
+  let index = start
+  while (/\d/.test(command[index] ?? "")) {
+    index += 1
+  }
+
+  if (command[index] !== ">" && command[index] !== "<") {
+    if (command[start] !== "&" || command[start + 1] !== ">") {
+      return null
+    }
+    index = start + 2
+  } else {
+    const operator = command[index]
+    index += 1
+    while (command[index] === operator && index - start < 4) {
+      index += 1
+    }
+  }
+
+  if (command[index] === "&") {
+    index += 1
+    while (/\d/.test(command[index] ?? "")) {
+      index += 1
+    }
+  }
+
+  return command.slice(start, index)
+}
+
+function isEscapedLineContinuation(command: string, newlineIndex: number): boolean {
+  let backslashCount = 0
+  let index = newlineIndex - 1
+  while (index >= 0 && command[index] === "\\") {
+    backslashCount += 1
+    index -= 1
+  }
+  return backslashCount % 2 === 1
+}
+
 function tokenizeCommand(command: string): CommandToken[] {
   const tokens: CommandToken[] = []
   const length = command.length
@@ -172,6 +213,9 @@ function tokenizeCommand(command: string): CommandToken[] {
     }
 
     if (/\s/.test(char)) {
+      if (char === "\n" && !isEscapedLineContinuation(command, index)) {
+        tokens.push({ raw: "\n", start: index, end: index + 1 })
+      }
       index += 1
       continue
     }
@@ -195,6 +239,13 @@ function tokenizeCommand(command: string): CommandToken[] {
       continue
     }
 
+    const redirectionToken = readShellRedirectionToken(command, start)
+    if (redirectionToken !== null) {
+      index += redirectionToken.length
+      tokens.push({ raw: redirectionToken, start, end: index })
+      continue
+    }
+
     while (index < length) {
       const current = command[index]
       if (current === undefined) {
@@ -243,6 +294,10 @@ function tokenizeCommand(command: string): CommandToken[] {
         break
       }
 
+      if (current === ">" || current === "<") {
+        break
+      }
+
       index += 1
     }
 
@@ -330,6 +385,16 @@ function isGitExecutableToken(rawToken: string): boolean {
   return base === "git"
 }
 
+function isShellRedirectionToken(rawToken: string): boolean {
+  const { inner } = unwrapToken(rawToken)
+  return SHELL_REDIRECTION_PATTERN.test(inner) || SHELL_REDIRECTION_DUPLICATION_PATTERN.test(inner) || inner === "&>"
+}
+
+function redirectionConsumesNextToken(rawToken: string): boolean {
+  const { inner } = unwrapToken(rawToken)
+  return !SHELL_REDIRECTION_DUPLICATION_PATTERN.test(inner)
+}
+
 function getLongOptionName(inner: string): string | null {
   const eqIndex = inner.indexOf("=")
   const optionName = eqIndex === -1 ? inner : inner.slice(0, eqIndex)
@@ -701,6 +766,13 @@ export const SecretProxyPlugin: Plugin = async ({ client }) => {
           break
         }
 
+        if (isShellRedirectionToken(segmentToken.raw)) {
+          if (redirectionConsumesNextToken(segmentToken.raw)) {
+            j += 1
+          }
+          continue
+        }
+
         const { inner } = unwrapToken(segmentToken.raw)
 
         if (expectedValueKind !== null) {
@@ -834,6 +906,13 @@ export const SecretProxyPlugin: Plugin = async ({ client }) => {
           break
         }
 
+        if (isShellRedirectionToken(segmentToken.raw)) {
+          if (redirectionConsumesNextToken(segmentToken.raw)) {
+            j += 1
+          }
+          continue
+        }
+
         const rewritten = rewriteGitRawToken(segmentToken.raw)
         if (rewritten.rewritten !== segmentToken.raw) {
           replacements.push({
@@ -879,41 +958,25 @@ export const SecretProxyPlugin: Plugin = async ({ client }) => {
       assertNoAgentAuthoredSecretEnvReference(input.arguments)
 
       const commandCache = new Map<string, { rewritten: string; referencedKeys: string[] }>()
-      if (typeof input.command === "string" && input.command.includes("{{SECRET:")) {
-        if ((isCurlExecutableToken(input.command) || isGitExecutableToken(input.command)) && typeof input.arguments === "string") {
-          const fullCommand = input.arguments.trim().length > 0
-            ? `${input.command} ${input.arguments}`
-            : input.command
-          const rewritten = isCurlExecutableToken(input.command)
-            ? substitutePlaceholdersInCurlShellString(fullCommand)
-            : substitutePlaceholdersInGitShellString(fullCommand)
-          const prefix = `${input.command} `
-          if (rewritten.rewritten.startsWith(prefix)) {
-            input.arguments = rewritten.rewritten.slice(prefix.length)
-          } else {
-            input.command = rewritten.rewritten
-            input.arguments = ""
-          }
+      const commandHasPlaceholder = typeof input.command === "string" && input.command.includes("{{SECRET:")
+      const argumentsHasPlaceholder = typeof input.arguments === "string" && input.arguments.includes("{{SECRET:")
+      if (commandHasPlaceholder || argumentsHasPlaceholder) {
+        const originalCommand = typeof input.command === "string" ? input.command : ""
+        const originalArguments = typeof input.arguments === "string" ? input.arguments : ""
+        const fullCommand = originalArguments.trim().length > 0
+          ? `${originalCommand} ${originalArguments}`
+          : originalCommand
+        const rewritten = await maybeRewriteSupportedString(fullCommand, commandCache)
+        const prefix = `${originalCommand} `
+
+        if (rewritten.rewritten === fullCommand) {
+          input.command = originalCommand
+          input.arguments = originalArguments
+        } else if ((isCurlExecutableToken(originalCommand) || isGitExecutableToken(originalCommand)) && rewritten.rewritten.startsWith(prefix)) {
+          input.arguments = rewritten.rewritten.slice(prefix.length)
         } else {
-          const rewritten = await maybeRewriteSupportedString(input.command, commandCache)
           input.command = rewritten.rewritten
-        }
-      }
-      if (typeof input.arguments === "string" && input.arguments.includes("{{SECRET:")) {
-        if (isCurlExecutableToken(input.command) || isGitExecutableToken(input.command)) {
-          const fullCommand = input.arguments.trim().length > 0
-            ? `${input.command} ${input.arguments}`
-            : input.command
-          const rewritten = isCurlExecutableToken(input.command)
-            ? substitutePlaceholdersInCurlShellString(fullCommand)
-            : substitutePlaceholdersInGitShellString(fullCommand)
-          const prefix = `${input.command} `
-          if (rewritten.rewritten.startsWith(prefix)) {
-            input.arguments = rewritten.rewritten.slice(prefix.length)
-          }
-        } else {
-          const rewritten = await maybeRewriteSupportedString(input.arguments, commandCache)
-          input.arguments = rewritten.rewritten
+          input.arguments = ""
         }
       }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "teamcopilot",
-  "version": "0.4.5",
+  "version": "0.4.8",
   "description": "A shared AI Agent for Teams",
   "homepage": "https://teamcopilot.ai",
   "repository": {

package/prisma/generated/client/edge.js

@@ -370,8 +370,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "generator client {\n  provider = \"prisma-client-js\"\n  output   = \"./generated/client\"\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel users {\n  id                       String                      @id @default(uuid())\n  email                    String                      @unique\n  name                     String\n  role                     String // \"User\" or \"Engineer\"\n  created_at               BigInt\n  password_hash            String\n  must_change_password     Boolean                     @default(false)\n  reset_token              String?\n  reset_token_expires_at   BigInt?\n  workflowRuns             workflow_runs[]\n  chatSessions             chat_sessions[]\n  cronjobs                 cronjobs[]\n  resourcePermissionUsers  resource_permission_users[]\n  createdResourceMetadata  resource_metadata[]         @relation(\"ResourceCreatedBy\")\n  approvedResourceMetadata resource_metadata[]         @relation(\"ResourceApprovedBy\")\n  userSecrets              user_secrets[]\n}\n\nmodel workflow_runs {\n  id                  String             @id @default(uuid())\n  ran_by_user_id      String?\n  status              String // \"running\" | \"success\" | \"failed\"\n  started_at          BigInt\n  completed_at        BigInt?\n  args                String? // JSON string of input arguments passed to the workflow\n  error_message       String?\n  output              String? // Captured stdout/stderr from the workflow run\n  workflow_slug       String\n  session_id          String?\n  message_id          String?\n  run_source          String // \"user\" | \"api\" | \"cronjob\"\n  workflow_api_key_id String?\n  user                users?             @relation(fields: [ran_by_user_id], references: [id], onDelete: SetNull)\n  workflowApiKey      workflow_api_keys? @relation(fields: [workflow_api_key_id], references: [id], onDelete: SetNull)\n  cronjobRuns         cronjob_runs[]\n\n  @@index([started_at])\n  @@index([session_id, message_id])\n  @@index([workflow_api_key_id])\n}\n\nmodel workflow_api_keys {\n  id                 String          @id @default(uuid())\n  workflow_slug      String\n  api_key            String          @unique\n  created_by_user_id String\n  created_at         BigInt\n  workflowRuns       workflow_runs[]\n\n  @@index([workflow_slug])\n  @@index([created_by_user_id])\n}\n\nmodel workflow_aborted_sessions {\n  session_id String @id\n  created_at BigInt\n}\n\nmodel key_value {\n  key   String @id\n  value String\n}\n\nmodel user_secrets {\n  id         String @id @default(uuid())\n  user_id    String\n  key        String\n  value      String\n  created_at BigInt\n  updated_at BigInt\n  user       users  @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([user_id, key])\n  @@index([user_id])\n}\n\nmodel global_secrets {\n  id                 String @id @default(uuid())\n  key                String @unique\n  value              String\n  created_by_user_id String\n  updated_by_user_id String\n  created_at         BigInt\n  updated_at         BigInt\n\n  @@index([created_by_user_id])\n  @@index([updated_by_user_id])\n}\n\nmodel chat_sessions {\n  id                             String                       @id @default(uuid())\n  user_id                        String\n  opencode_session_id            String                       @unique\n  title                          String\n  last_seen_assistant_message_id String?\n  visible_to_user                Boolean                      @default(true)\n  created_at                     BigInt\n  updated_at                     BigInt\n  trackedFiles                   chat_session_tracked_files[]\n  usage                          chat_session_usage?\n  cronjobRuns                    cronjob_runs[]\n  user                           users                        @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@index([visible_to_user])\n}\n\nmodel cronjobs {\n  id                                            String         @id @default(uuid())\n  user_id                                       String\n  name                                          String\n  enabled                                       Boolean\n  target_type                                   String // \"prompt\" | \"workflow\"\n  prompt                                        String?\n  prompt_allow_workflow_runs_without_permission Boolean?\n  workflow_slug                                 String?\n  workflow_input_json                           String?\n  cron_expression                               String\n  timezone                                      String\n  monitor_timeout_value                         Float          @default(2)\n  monitor_timeout_unit                          String         @default(\"hours\") // \"minutes\" | \"hours\" | \"days\"\n  created_at                                    BigInt\n  updated_at                                    BigInt\n  user                                          users          @relation(fields: [user_id], references: [id], onDelete: Cascade)\n  runs                                          cronjob_runs[]\n\n  @@unique([user_id, name])\n  @@index([user_id])\n  @@index([enabled])\n  @@index([target_type])\n  @@index([workflow_slug])\n}\n\nmodel cronjob_runs {\n  id                  String              @id @default(uuid())\n  cronjob_id          String\n  status              String // prompt: \"running\" | \"paused\" | \"success\" | \"failed\" | \"skipped\" | \"terminated\"; workflow: \"running\" | \"success\" | \"failed\" | \"skipped\"\n  started_at          BigInt\n  completed_at        BigInt?\n  workflow_run_id     String?\n  summary             String?\n  session_id          String?\n  opencode_session_id String?\n  error_message       String?\n  todo_list_version   Int                 @default(0)\n  cronjob             cronjobs            @relation(fields: [cronjob_id], references: [id], onDelete: Cascade)\n  session             chat_sessions?      @relation(fields: [session_id], references: [id], onDelete: Cascade)\n  workflowRun         workflow_runs?      @relation(fields: [workflow_run_id], references: [id], onDelete: Cascade)\n  todos               cronjob_run_todos[]\n\n  @@index([cronjob_id, started_at])\n  @@index([cronjob_id, status])\n  @@index([workflow_run_id])\n  @@index([session_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel cronjob_run_todos {\n  id           String       @id @default(uuid())\n  run_id       String\n  content      String\n  status       String // \"pending\" = not started yet; \"in_progress\" = current todo; \"completed\" = finished\n  position     Int\n  summary      String?\n  created_at   BigInt\n  completed_at BigInt?\n  run          cronjob_runs @relation(fields: [run_id], references: [id], onDelete: Cascade)\n\n  @@index([run_id, status, position])\n  @@index([run_id, position])\n}\n\nmodel chat_session_usage {\n  chat_session_id        String        @id\n  last_synced_message_id String\n  provider_id            String\n  input_tokens           Int\n  output_tokens          Int\n  cached_tokens          Int\n  cost_usd               Float\n  model_id               String\n  updated_at             BigInt\n  session                chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n}\n\nmodel chat_session_tracked_files {\n  id                  String        @id @default(uuid())\n  chat_session_id     String\n  relative_path       String\n  existed_at_baseline Boolean\n  content_kind        String // \"text\" | \"binary\" | \"missing\"\n  text_content        String?\n  binary_content      Bytes?\n  size_bytes          Int?\n  content_sha256      String?\n  created_at          BigInt\n  updated_at          BigInt\n  session             chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n\n  @@unique([chat_session_id, relative_path])\n  @@index([chat_session_id])\n}\n\nmodel tool_execution_permissions {\n  id                  String  @id @default(uuid())\n  opencode_session_id String\n  message_id          String\n  call_id             String\n  status              String // \"pending\" | \"approved\" | \"rejected\"\n  created_at          BigInt\n  responded_at        BigInt?\n\n  @@unique([opencode_session_id, message_id, call_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel resource_metadata {\n  resource_kind       String\n  resource_slug       String\n  created_by_user_id  String?\n  approved_by_user_id String?\n  created_at          BigInt\n  updated_at          BigInt\n  approvedSnapshot    resource_approved_snapshots?\n  createdByUser       users?                       @relation(\"ResourceCreatedBy\", fields: [created_by_user_id], references: [id], onDelete: SetNull)\n  approvedByUser      users?                       @relation(\"ResourceApprovedBy\", fields: [approved_by_user_id], references: [id], onDelete: SetNull)\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n  @@index([created_by_user_id])\n  @@index([approved_by_user_id])\n}\n\nmodel resource_permissions {\n  resource_kind   String\n  resource_slug   String\n  permission_mode String // \"restricted\" | \"everyone\"\n  created_at      BigInt\n  updated_at      BigInt\n  allowedUsers    resource_permission_users[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_permission_users {\n  id            String               @id @default(uuid())\n  resource_kind String\n  resource_slug String\n  user_id       String\n  created_at    BigInt\n  permission    resource_permissions @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  user          users                @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, user_id])\n  @@index([resource_kind, resource_slug])\n}\n\nmodel resource_approved_snapshots {\n  resource_kind String\n  resource_slug String\n  file_count    Int\n  created_at    BigInt\n  updated_at    BigInt\n  resource      resource_metadata                  @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  files         resource_approved_snapshot_files[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_approved_snapshot_files {\n  id             String                      @id @default(uuid())\n  resource_kind  String\n  resource_slug  String\n  relative_path  String\n  content_kind   String // \"text\" | \"binary\"\n  text_content   String?\n  binary_content Bytes?\n  size_bytes     Int\n  content_sha256 String\n  snapshot       resource_approved_snapshots @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, relative_path])\n  @@index([resource_kind, resource_slug])\n}\n",
-  "inlineSchemaHash": "365f7a66ef1a3911b2564a1f1cd26b622414e1a42ad30215b6494a54bdb53b89",
+  "inlineSchema": "generator client {\n  provider = \"prisma-client-js\"\n  output   = \"./generated/client\"\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel users {\n  id                       String                      @id @default(uuid())\n  email                    String                      @unique\n  name                     String\n  role                     String // \"User\" or \"Engineer\"\n  created_at               BigInt\n  password_hash            String\n  must_change_password     Boolean                     @default(false)\n  reset_token              String?\n  reset_token_expires_at   BigInt?\n  workflowRuns             workflow_runs[]\n  chatSessions             chat_sessions[]\n  cronjobs                 cronjobs[]\n  resourcePermissionUsers  resource_permission_users[]\n  createdResourceMetadata  resource_metadata[]         @relation(\"ResourceCreatedBy\")\n  approvedResourceMetadata resource_metadata[]         @relation(\"ResourceApprovedBy\")\n  userSecrets              user_secrets[]\n}\n\nmodel workflow_runs {\n  id                  String             @id @default(uuid())\n  ran_by_user_id      String?\n  status              String // \"running\" | \"success\" | \"failed\"\n  started_at          BigInt\n  completed_at        BigInt?\n  args                String? // JSON string of input arguments passed to the workflow\n  error_message       String?\n  output              String? // Captured stdout/stderr from the workflow run\n  workflow_slug       String\n  session_id          String?\n  message_id          String?\n  run_source          String // \"user\" | \"api\" | \"cronjob\"\n  workflow_api_key_id String?\n  user                users?             @relation(fields: [ran_by_user_id], references: [id], onDelete: SetNull)\n  workflowApiKey      workflow_api_keys? @relation(fields: [workflow_api_key_id], references: [id], onDelete: SetNull)\n  cronjobRuns         cronjob_runs[]\n\n  @@index([started_at])\n  @@index([session_id, message_id])\n  @@index([workflow_api_key_id])\n}\n\nmodel workflow_api_keys {\n  id                 String          @id @default(uuid())\n  workflow_slug      String\n  api_key            String          @unique\n  created_by_user_id String\n  created_at         BigInt\n  workflowRuns       workflow_runs[]\n\n  @@index([workflow_slug])\n  @@index([created_by_user_id])\n}\n\nmodel workflow_aborted_sessions {\n  session_id String @id\n  created_at BigInt\n}\n\nmodel key_value {\n  key   String @id\n  value String\n}\n\nmodel user_secrets {\n  id         String @id @default(uuid())\n  user_id    String\n  key        String\n  value      String\n  created_at BigInt\n  updated_at BigInt\n  user       users  @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([user_id, key])\n  @@index([user_id])\n}\n\nmodel global_secrets {\n  id                 String @id @default(uuid())\n  key                String @unique\n  value              String\n  created_by_user_id String\n  updated_by_user_id String\n  created_at         BigInt\n  updated_at         BigInt\n\n  @@index([created_by_user_id])\n  @@index([updated_by_user_id])\n}\n\nmodel chat_sessions {\n  id                             String                       @id @default(uuid())\n  user_id                        String\n  opencode_session_id            String                       @unique\n  title                          String\n  last_seen_assistant_message_id String?\n  visible_to_user                Boolean                      @default(true)\n  created_at                     BigInt\n  updated_at                     BigInt\n  trackedFiles                   chat_session_tracked_files[]\n  usage                          chat_session_usage?\n  cronjobRuns                    cronjob_runs[]\n  user                           users                        @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@index([visible_to_user])\n  @@index([user_id, visible_to_user, updated_at])\n}\n\nmodel cronjobs {\n  id                                            String         @id @default(uuid())\n  user_id                                       String\n  name                                          String\n  enabled                                       Boolean\n  target_type                                   String // \"prompt\" | \"workflow\"\n  prompt                                        String?\n  prompt_allow_workflow_runs_without_permission Boolean?\n  workflow_slug                                 String?\n  workflow_input_json                           String?\n  cron_expression                               String\n  timezone                                      String\n  monitor_timeout_value                         Float          @default(2)\n  monitor_timeout_unit                          String         @default(\"hours\") // \"minutes\" | \"hours\" | \"days\"\n  created_at                                    BigInt\n  updated_at                                    BigInt\n  user                                          users          @relation(fields: [user_id], references: [id], onDelete: Cascade)\n  runs                                          cronjob_runs[]\n\n  @@unique([user_id, name])\n  @@index([user_id])\n  @@index([enabled])\n  @@index([target_type])\n  @@index([workflow_slug])\n}\n\nmodel cronjob_runs {\n  id                  String              @id @default(uuid())\n  cronjob_id          String\n  status              String // prompt: \"running\" | \"paused\" | \"success\" | \"failed\" | \"skipped\" | \"terminated\"; workflow: \"running\" | \"success\" | \"failed\" | \"skipped\"\n  started_at          BigInt\n  completed_at        BigInt?\n  workflow_run_id     String?\n  summary             String?\n  session_id          String?\n  opencode_session_id String?\n  error_message       String?\n  todo_list_version   Int                 @default(0)\n  cronjob             cronjobs            @relation(fields: [cronjob_id], references: [id], onDelete: Cascade)\n  session             chat_sessions?      @relation(fields: [session_id], references: [id], onDelete: Cascade)\n  workflowRun         workflow_runs?      @relation(fields: [workflow_run_id], references: [id], onDelete: Cascade)\n  todos               cronjob_run_todos[]\n\n  @@index([cronjob_id, started_at])\n  @@index([cronjob_id, status])\n  @@index([workflow_run_id])\n  @@index([session_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel cronjob_run_todos {\n  id           String       @id @default(uuid())\n  run_id       String\n  content      String\n  status       String // \"pending\" = not started yet; \"in_progress\" = current todo; \"completed\" = finished\n  position     Int\n  summary      String?\n  created_at   BigInt\n  completed_at BigInt?\n  run          cronjob_runs @relation(fields: [run_id], references: [id], onDelete: Cascade)\n\n  @@index([run_id, status, position])\n  @@index([run_id, position])\n}\n\nmodel chat_session_usage {\n  chat_session_id        String        @id\n  last_synced_message_id String\n  provider_id            String\n  input_tokens           Int\n  output_tokens          Int\n  cached_tokens          Int\n  cost_usd               Float\n  model_id               String\n  updated_at             BigInt\n  session                chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n}\n\nmodel chat_session_tracked_files {\n  id                  String        @id @default(uuid())\n  chat_session_id     String\n  relative_path       String\n  existed_at_baseline Boolean\n  content_kind        String // \"text\" | \"binary\" | \"missing\"\n  text_content        String?\n  binary_content      Bytes?\n  size_bytes          Int?\n  content_sha256      String?\n  created_at          BigInt\n  updated_at          BigInt\n  session             chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n\n  @@unique([chat_session_id, relative_path])\n  @@index([chat_session_id])\n}\n\nmodel tool_execution_permissions {\n  id                  String  @id @default(uuid())\n  opencode_session_id String\n  message_id          String\n  call_id             String\n  status              String // \"pending\" | \"approved\" | \"rejected\"\n  created_at          BigInt\n  responded_at        BigInt?\n\n  @@unique([opencode_session_id, message_id, call_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel resource_metadata {\n  resource_kind       String\n  resource_slug       String\n  created_by_user_id  String?\n  approved_by_user_id String?\n  created_at          BigInt\n  updated_at          BigInt\n  approvedSnapshot    resource_approved_snapshots?\n  createdByUser       users?                       @relation(\"ResourceCreatedBy\", fields: [created_by_user_id], references: [id], onDelete: SetNull)\n  approvedByUser      users?                       @relation(\"ResourceApprovedBy\", fields: [approved_by_user_id], references: [id], onDelete: SetNull)\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n  @@index([created_by_user_id])\n  @@index([approved_by_user_id])\n}\n\nmodel resource_permissions {\n  resource_kind   String\n  resource_slug   String\n  permission_mode String // \"restricted\" | \"everyone\"\n  created_at      BigInt\n  updated_at      BigInt\n  allowedUsers    resource_permission_users[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_permission_users {\n  id            String               @id @default(uuid())\n  resource_kind String\n  resource_slug String\n  user_id       String\n  created_at    BigInt\n  permission    resource_permissions @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  user          users                @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, user_id])\n  @@index([resource_kind, resource_slug])\n}\n\nmodel resource_approved_snapshots {\n  resource_kind String\n  resource_slug String\n  file_count    Int\n  created_at    BigInt\n  updated_at    BigInt\n  resource      resource_metadata                  @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  files         resource_approved_snapshot_files[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_approved_snapshot_files {\n  id             String                      @id @default(uuid())\n  resource_kind  String\n  resource_slug  String\n  relative_path  String\n  content_kind   String // \"text\" | \"binary\"\n  text_content   String?\n  binary_content Bytes?\n  size_bytes     Int\n  content_sha256 String\n  snapshot       resource_approved_snapshots @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, relative_path])\n  @@index([resource_kind, resource_slug])\n}\n",
+  "inlineSchemaHash": "fc99ad355c76b3380556a915c46b51834e01f3fa7a8ca3ba7f16338c41037be5",
   "copyEngine": true
 }
 config.dirname = '/'

package/prisma/generated/client/index.js

@@ -371,8 +371,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "generator client {\n  provider = \"prisma-client-js\"\n  output   = \"./generated/client\"\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel users {\n  id                       String                      @id @default(uuid())\n  email                    String                      @unique\n  name                     String\n  role                     String // \"User\" or \"Engineer\"\n  created_at               BigInt\n  password_hash            String\n  must_change_password     Boolean                     @default(false)\n  reset_token              String?\n  reset_token_expires_at   BigInt?\n  workflowRuns             workflow_runs[]\n  chatSessions             chat_sessions[]\n  cronjobs                 cronjobs[]\n  resourcePermissionUsers  resource_permission_users[]\n  createdResourceMetadata  resource_metadata[]         @relation(\"ResourceCreatedBy\")\n  approvedResourceMetadata resource_metadata[]         @relation(\"ResourceApprovedBy\")\n  userSecrets              user_secrets[]\n}\n\nmodel workflow_runs {\n  id                  String             @id @default(uuid())\n  ran_by_user_id      String?\n  status              String // \"running\" | \"success\" | \"failed\"\n  started_at          BigInt\n  completed_at        BigInt?\n  args                String? // JSON string of input arguments passed to the workflow\n  error_message       String?\n  output              String? // Captured stdout/stderr from the workflow run\n  workflow_slug       String\n  session_id          String?\n  message_id          String?\n  run_source          String // \"user\" | \"api\" | \"cronjob\"\n  workflow_api_key_id String?\n  user                users?             @relation(fields: [ran_by_user_id], references: [id], onDelete: SetNull)\n  workflowApiKey      workflow_api_keys? @relation(fields: [workflow_api_key_id], references: [id], onDelete: SetNull)\n  cronjobRuns         cronjob_runs[]\n\n  @@index([started_at])\n  @@index([session_id, message_id])\n  @@index([workflow_api_key_id])\n}\n\nmodel workflow_api_keys {\n  id                 String          @id @default(uuid())\n  workflow_slug      String\n  api_key            String          @unique\n  created_by_user_id String\n  created_at         BigInt\n  workflowRuns       workflow_runs[]\n\n  @@index([workflow_slug])\n  @@index([created_by_user_id])\n}\n\nmodel workflow_aborted_sessions {\n  session_id String @id\n  created_at BigInt\n}\n\nmodel key_value {\n  key   String @id\n  value String\n}\n\nmodel user_secrets {\n  id         String @id @default(uuid())\n  user_id    String\n  key        String\n  value      String\n  created_at BigInt\n  updated_at BigInt\n  user       users  @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([user_id, key])\n  @@index([user_id])\n}\n\nmodel global_secrets {\n  id                 String @id @default(uuid())\n  key                String @unique\n  value              String\n  created_by_user_id String\n  updated_by_user_id String\n  created_at         BigInt\n  updated_at         BigInt\n\n  @@index([created_by_user_id])\n  @@index([updated_by_user_id])\n}\n\nmodel chat_sessions {\n  id                             String                       @id @default(uuid())\n  user_id                        String\n  opencode_session_id            String                       @unique\n  title                          String\n  last_seen_assistant_message_id String?\n  visible_to_user                Boolean                      @default(true)\n  created_at                     BigInt\n  updated_at                     BigInt\n  trackedFiles                   chat_session_tracked_files[]\n  usage                          chat_session_usage?\n  cronjobRuns                    cronjob_runs[]\n  user                           users                        @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@index([visible_to_user])\n}\n\nmodel cronjobs {\n  id                                            String         @id @default(uuid())\n  user_id                                       String\n  name                                          String\n  enabled                                       Boolean\n  target_type                                   String // \"prompt\" | \"workflow\"\n  prompt                                        String?\n  prompt_allow_workflow_runs_without_permission Boolean?\n  workflow_slug                                 String?\n  workflow_input_json                           String?\n  cron_expression                               String\n  timezone                                      String\n  monitor_timeout_value                         Float          @default(2)\n  monitor_timeout_unit                          String         @default(\"hours\") // \"minutes\" | \"hours\" | \"days\"\n  created_at                                    BigInt\n  updated_at                                    BigInt\n  user                                          users          @relation(fields: [user_id], references: [id], onDelete: Cascade)\n  runs                                          cronjob_runs[]\n\n  @@unique([user_id, name])\n  @@index([user_id])\n  @@index([enabled])\n  @@index([target_type])\n  @@index([workflow_slug])\n}\n\nmodel cronjob_runs {\n  id                  String              @id @default(uuid())\n  cronjob_id          String\n  status              String // prompt: \"running\" | \"paused\" | \"success\" | \"failed\" | \"skipped\" | \"terminated\"; workflow: \"running\" | \"success\" | \"failed\" | \"skipped\"\n  started_at          BigInt\n  completed_at        BigInt?\n  workflow_run_id     String?\n  summary             String?\n  session_id          String?\n  opencode_session_id String?\n  error_message       String?\n  todo_list_version   Int                 @default(0)\n  cronjob             cronjobs            @relation(fields: [cronjob_id], references: [id], onDelete: Cascade)\n  session             chat_sessions?      @relation(fields: [session_id], references: [id], onDelete: Cascade)\n  workflowRun         workflow_runs?      @relation(fields: [workflow_run_id], references: [id], onDelete: Cascade)\n  todos               cronjob_run_todos[]\n\n  @@index([cronjob_id, started_at])\n  @@index([cronjob_id, status])\n  @@index([workflow_run_id])\n  @@index([session_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel cronjob_run_todos {\n  id           String       @id @default(uuid())\n  run_id       String\n  content      String\n  status       String // \"pending\" = not started yet; \"in_progress\" = current todo; \"completed\" = finished\n  position     Int\n  summary      String?\n  created_at   BigInt\n  completed_at BigInt?\n  run          cronjob_runs @relation(fields: [run_id], references: [id], onDelete: Cascade)\n\n  @@index([run_id, status, position])\n  @@index([run_id, position])\n}\n\nmodel chat_session_usage {\n  chat_session_id        String        @id\n  last_synced_message_id String\n  provider_id            String\n  input_tokens           Int\n  output_tokens          Int\n  cached_tokens          Int\n  cost_usd               Float\n  model_id               String\n  updated_at             BigInt\n  session                chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n}\n\nmodel chat_session_tracked_files {\n  id                  String        @id @default(uuid())\n  chat_session_id     String\n  relative_path       String\n  existed_at_baseline Boolean\n  content_kind        String // \"text\" | \"binary\" | \"missing\"\n  text_content        String?\n  binary_content      Bytes?\n  size_bytes          Int?\n  content_sha256      String?\n  created_at          BigInt\n  updated_at          BigInt\n  session             chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n\n  @@unique([chat_session_id, relative_path])\n  @@index([chat_session_id])\n}\n\nmodel tool_execution_permissions {\n  id                  String  @id @default(uuid())\n  opencode_session_id String\n  message_id          String\n  call_id             String\n  status              String // \"pending\" | \"approved\" | \"rejected\"\n  created_at          BigInt\n  responded_at        BigInt?\n\n  @@unique([opencode_session_id, message_id, call_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel resource_metadata {\n  resource_kind       String\n  resource_slug       String\n  created_by_user_id  String?\n  approved_by_user_id String?\n  created_at          BigInt\n  updated_at          BigInt\n  approvedSnapshot    resource_approved_snapshots?\n  createdByUser       users?                       @relation(\"ResourceCreatedBy\", fields: [created_by_user_id], references: [id], onDelete: SetNull)\n  approvedByUser      users?                       @relation(\"ResourceApprovedBy\", fields: [approved_by_user_id], references: [id], onDelete: SetNull)\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n  @@index([created_by_user_id])\n  @@index([approved_by_user_id])\n}\n\nmodel resource_permissions {\n  resource_kind   String\n  resource_slug   String\n  permission_mode String // \"restricted\" | \"everyone\"\n  created_at      BigInt\n  updated_at      BigInt\n  allowedUsers    resource_permission_users[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_permission_users {\n  id            String               @id @default(uuid())\n  resource_kind String\n  resource_slug String\n  user_id       String\n  created_at    BigInt\n  permission    resource_permissions @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  user          users                @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, user_id])\n  @@index([resource_kind, resource_slug])\n}\n\nmodel resource_approved_snapshots {\n  resource_kind String\n  resource_slug String\n  file_count    Int\n  created_at    BigInt\n  updated_at    BigInt\n  resource      resource_metadata                  @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  files         resource_approved_snapshot_files[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_approved_snapshot_files {\n  id             String                      @id @default(uuid())\n  resource_kind  String\n  resource_slug  String\n  relative_path  String\n  content_kind   String // \"text\" | \"binary\"\n  text_content   String?\n  binary_content Bytes?\n  size_bytes     Int\n  content_sha256 String\n  snapshot       resource_approved_snapshots @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, relative_path])\n  @@index([resource_kind, resource_slug])\n}\n",
-  "inlineSchemaHash": "365f7a66ef1a3911b2564a1f1cd26b622414e1a42ad30215b6494a54bdb53b89",
+  "inlineSchema": "generator client {\n  provider = \"prisma-client-js\"\n  output   = \"./generated/client\"\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel users {\n  id                       String                      @id @default(uuid())\n  email                    String                      @unique\n  name                     String\n  role                     String // \"User\" or \"Engineer\"\n  created_at               BigInt\n  password_hash            String\n  must_change_password     Boolean                     @default(false)\n  reset_token              String?\n  reset_token_expires_at   BigInt?\n  workflowRuns             workflow_runs[]\n  chatSessions             chat_sessions[]\n  cronjobs                 cronjobs[]\n  resourcePermissionUsers  resource_permission_users[]\n  createdResourceMetadata  resource_metadata[]         @relation(\"ResourceCreatedBy\")\n  approvedResourceMetadata resource_metadata[]         @relation(\"ResourceApprovedBy\")\n  userSecrets              user_secrets[]\n}\n\nmodel workflow_runs {\n  id                  String             @id @default(uuid())\n  ran_by_user_id      String?\n  status              String // \"running\" | \"success\" | \"failed\"\n  started_at          BigInt\n  completed_at        BigInt?\n  args                String? // JSON string of input arguments passed to the workflow\n  error_message       String?\n  output              String? // Captured stdout/stderr from the workflow run\n  workflow_slug       String\n  session_id          String?\n  message_id          String?\n  run_source          String // \"user\" | \"api\" | \"cronjob\"\n  workflow_api_key_id String?\n  user                users?             @relation(fields: [ran_by_user_id], references: [id], onDelete: SetNull)\n  workflowApiKey      workflow_api_keys? @relation(fields: [workflow_api_key_id], references: [id], onDelete: SetNull)\n  cronjobRuns         cronjob_runs[]\n\n  @@index([started_at])\n  @@index([session_id, message_id])\n  @@index([workflow_api_key_id])\n}\n\nmodel workflow_api_keys {\n  id                 String          @id @default(uuid())\n  workflow_slug      String\n  api_key            String          @unique\n  created_by_user_id String\n  created_at         BigInt\n  workflowRuns       workflow_runs[]\n\n  @@index([workflow_slug])\n  @@index([created_by_user_id])\n}\n\nmodel workflow_aborted_sessions {\n  session_id String @id\n  created_at BigInt\n}\n\nmodel key_value {\n  key   String @id\n  value String\n}\n\nmodel user_secrets {\n  id         String @id @default(uuid())\n  user_id    String\n  key        String\n  value      String\n  created_at BigInt\n  updated_at BigInt\n  user       users  @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([user_id, key])\n  @@index([user_id])\n}\n\nmodel global_secrets {\n  id                 String @id @default(uuid())\n  key                String @unique\n  value              String\n  created_by_user_id String\n  updated_by_user_id String\n  created_at         BigInt\n  updated_at         BigInt\n\n  @@index([created_by_user_id])\n  @@index([updated_by_user_id])\n}\n\nmodel chat_sessions {\n  id                             String                       @id @default(uuid())\n  user_id                        String\n  opencode_session_id            String                       @unique\n  title                          String\n  last_seen_assistant_message_id String?\n  visible_to_user                Boolean                      @default(true)\n  created_at                     BigInt\n  updated_at                     BigInt\n  trackedFiles                   chat_session_tracked_files[]\n  usage                          chat_session_usage?\n  cronjobRuns                    cronjob_runs[]\n  user                           users                        @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@index([visible_to_user])\n  @@index([user_id, visible_to_user, updated_at])\n}\n\nmodel cronjobs {\n  id                                            String         @id @default(uuid())\n  user_id                                       String\n  name                                          String\n  enabled                                       Boolean\n  target_type                                   String // \"prompt\" | \"workflow\"\n  prompt                                        String?\n  prompt_allow_workflow_runs_without_permission Boolean?\n  workflow_slug                                 String?\n  workflow_input_json                           String?\n  cron_expression                               String\n  timezone                                      String\n  monitor_timeout_value                         Float          @default(2)\n  monitor_timeout_unit                          String         @default(\"hours\") // \"minutes\" | \"hours\" | \"days\"\n  created_at                                    BigInt\n  updated_at                                    BigInt\n  user                                          users          @relation(fields: [user_id], references: [id], onDelete: Cascade)\n  runs                                          cronjob_runs[]\n\n  @@unique([user_id, name])\n  @@index([user_id])\n  @@index([enabled])\n  @@index([target_type])\n  @@index([workflow_slug])\n}\n\nmodel cronjob_runs {\n  id                  String              @id @default(uuid())\n  cronjob_id          String\n  status              String // prompt: \"running\" | \"paused\" | \"success\" | \"failed\" | \"skipped\" | \"terminated\"; workflow: \"running\" | \"success\" | \"failed\" | \"skipped\"\n  started_at          BigInt\n  completed_at        BigInt?\n  workflow_run_id     String?\n  summary             String?\n  session_id          String?\n  opencode_session_id String?\n  error_message       String?\n  todo_list_version   Int                 @default(0)\n  cronjob             cronjobs            @relation(fields: [cronjob_id], references: [id], onDelete: Cascade)\n  session             chat_sessions?      @relation(fields: [session_id], references: [id], onDelete: Cascade)\n  workflowRun         workflow_runs?      @relation(fields: [workflow_run_id], references: [id], onDelete: Cascade)\n  todos               cronjob_run_todos[]\n\n  @@index([cronjob_id, started_at])\n  @@index([cronjob_id, status])\n  @@index([workflow_run_id])\n  @@index([session_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel cronjob_run_todos {\n  id           String       @id @default(uuid())\n  run_id       String\n  content      String\n  status       String // \"pending\" = not started yet; \"in_progress\" = current todo; \"completed\" = finished\n  position     Int\n  summary      String?\n  created_at   BigInt\n  completed_at BigInt?\n  run          cronjob_runs @relation(fields: [run_id], references: [id], onDelete: Cascade)\n\n  @@index([run_id, status, position])\n  @@index([run_id, position])\n}\n\nmodel chat_session_usage {\n  chat_session_id        String        @id\n  last_synced_message_id String\n  provider_id            String\n  input_tokens           Int\n  output_tokens          Int\n  cached_tokens          Int\n  cost_usd               Float\n  model_id               String\n  updated_at             BigInt\n  session                chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n}\n\nmodel chat_session_tracked_files {\n  id                  String        @id @default(uuid())\n  chat_session_id     String\n  relative_path       String\n  existed_at_baseline Boolean\n  content_kind        String // \"text\" | \"binary\" | \"missing\"\n  text_content        String?\n  binary_content      Bytes?\n  size_bytes          Int?\n  content_sha256      String?\n  created_at          BigInt\n  updated_at          BigInt\n  session             chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n\n  @@unique([chat_session_id, relative_path])\n  @@index([chat_session_id])\n}\n\nmodel tool_execution_permissions {\n  id                  String  @id @default(uuid())\n  opencode_session_id String\n  message_id          String\n  call_id             String\n  status              String // \"pending\" | \"approved\" | \"rejected\"\n  created_at          BigInt\n  responded_at        BigInt?\n\n  @@unique([opencode_session_id, message_id, call_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel resource_metadata {\n  resource_kind       String\n  resource_slug       String\n  created_by_user_id  String?\n  approved_by_user_id String?\n  created_at          BigInt\n  updated_at          BigInt\n  approvedSnapshot    resource_approved_snapshots?\n  createdByUser       users?                       @relation(\"ResourceCreatedBy\", fields: [created_by_user_id], references: [id], onDelete: SetNull)\n  approvedByUser      users?                       @relation(\"ResourceApprovedBy\", fields: [approved_by_user_id], references: [id], onDelete: SetNull)\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n  @@index([created_by_user_id])\n  @@index([approved_by_user_id])\n}\n\nmodel resource_permissions {\n  resource_kind   String\n  resource_slug   String\n  permission_mode String // \"restricted\" | \"everyone\"\n  created_at      BigInt\n  updated_at      BigInt\n  allowedUsers    resource_permission_users[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_permission_users {\n  id            String               @id @default(uuid())\n  resource_kind String\n  resource_slug String\n  user_id       String\n  created_at    BigInt\n  permission    resource_permissions @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  user          users                @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, user_id])\n  @@index([resource_kind, resource_slug])\n}\n\nmodel resource_approved_snapshots {\n  resource_kind String\n  resource_slug String\n  file_count    Int\n  created_at    BigInt\n  updated_at    BigInt\n  resource      resource_metadata                  @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  files         resource_approved_snapshot_files[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_approved_snapshot_files {\n  id             String                      @id @default(uuid())\n  resource_kind  String\n  resource_slug  String\n  relative_path  String\n  content_kind   String // \"text\" | \"binary\"\n  text_content   String?\n  binary_content Bytes?\n  size_bytes     Int\n  content_sha256 String\n  snapshot       resource_approved_snapshots @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, relative_path])\n  @@index([resource_kind, resource_slug])\n}\n",
+  "inlineSchemaHash": "fc99ad355c76b3380556a915c46b51834e01f3fa7a8ca3ba7f16338c41037be5",
   "copyEngine": true
 }
 

package/prisma/generated/client/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "prisma-client-248a3191403f072633618b7c6c6b22ffb24a422cb2b9f8c74d014961520f8560",
+  "name": "prisma-client-9f15e381b7f0b91889a215b6e1f1c0c09a6790702f6b793962363f4b3b558143",
   "main": "index.js",
   "types": "index.d.ts",
   "browser": "default.js",

package/prisma/generated/client/schema.prisma

@@ -113,6 +113,7 @@ model chat_sessions {
   user                           users                        @relation(fields: [user_id], references: [id], onDelete: Cascade)
 
   @@index([visible_to_user])
+  @@index([user_id, visible_to_user, updated_at])
 }
 
 model cronjobs {

package/prisma/generated/client/wasm.js

@@ -370,8 +370,8 @@ const config = {
       }
     }
   },
-  "inlineSchema": "generator client {\n  provider = \"prisma-client-js\"\n  output   = \"./generated/client\"\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel users {\n  id                       String                      @id @default(uuid())\n  email                    String                      @unique\n  name                     String\n  role                     String // \"User\" or \"Engineer\"\n  created_at               BigInt\n  password_hash            String\n  must_change_password     Boolean                     @default(false)\n  reset_token              String?\n  reset_token_expires_at   BigInt?\n  workflowRuns             workflow_runs[]\n  chatSessions             chat_sessions[]\n  cronjobs                 cronjobs[]\n  resourcePermissionUsers  resource_permission_users[]\n  createdResourceMetadata  resource_metadata[]         @relation(\"ResourceCreatedBy\")\n  approvedResourceMetadata resource_metadata[]         @relation(\"ResourceApprovedBy\")\n  userSecrets              user_secrets[]\n}\n\nmodel workflow_runs {\n  id                  String             @id @default(uuid())\n  ran_by_user_id      String?\n  status              String // \"running\" | \"success\" | \"failed\"\n  started_at          BigInt\n  completed_at        BigInt?\n  args                String? // JSON string of input arguments passed to the workflow\n  error_message       String?\n  output              String? // Captured stdout/stderr from the workflow run\n  workflow_slug       String\n  session_id          String?\n  message_id          String?\n  run_source          String // \"user\" | \"api\" | \"cronjob\"\n  workflow_api_key_id String?\n  user                users?             @relation(fields: [ran_by_user_id], references: [id], onDelete: SetNull)\n  workflowApiKey      workflow_api_keys? @relation(fields: [workflow_api_key_id], references: [id], onDelete: SetNull)\n  cronjobRuns         cronjob_runs[]\n\n  @@index([started_at])\n  @@index([session_id, message_id])\n  @@index([workflow_api_key_id])\n}\n\nmodel workflow_api_keys {\n  id                 String          @id @default(uuid())\n  workflow_slug      String\n  api_key            String          @unique\n  created_by_user_id String\n  created_at         BigInt\n  workflowRuns       workflow_runs[]\n\n  @@index([workflow_slug])\n  @@index([created_by_user_id])\n}\n\nmodel workflow_aborted_sessions {\n  session_id String @id\n  created_at BigInt\n}\n\nmodel key_value {\n  key   String @id\n  value String\n}\n\nmodel user_secrets {\n  id         String @id @default(uuid())\n  user_id    String\n  key        String\n  value      String\n  created_at BigInt\n  updated_at BigInt\n  user       users  @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([user_id, key])\n  @@index([user_id])\n}\n\nmodel global_secrets {\n  id                 String @id @default(uuid())\n  key                String @unique\n  value              String\n  created_by_user_id String\n  updated_by_user_id String\n  created_at         BigInt\n  updated_at         BigInt\n\n  @@index([created_by_user_id])\n  @@index([updated_by_user_id])\n}\n\nmodel chat_sessions {\n  id                             String                       @id @default(uuid())\n  user_id                        String\n  opencode_session_id            String                       @unique\n  title                          String\n  last_seen_assistant_message_id String?\n  visible_to_user                Boolean                      @default(true)\n  created_at                     BigInt\n  updated_at                     BigInt\n  trackedFiles                   chat_session_tracked_files[]\n  usage                          chat_session_usage?\n  cronjobRuns                    cronjob_runs[]\n  user                           users                        @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@index([visible_to_user])\n}\n\nmodel cronjobs {\n  id                                            String         @id @default(uuid())\n  user_id                                       String\n  name                                          String\n  enabled                                       Boolean\n  target_type                                   String // \"prompt\" | \"workflow\"\n  prompt                                        String?\n  prompt_allow_workflow_runs_without_permission Boolean?\n  workflow_slug                                 String?\n  workflow_input_json                           String?\n  cron_expression                               String\n  timezone                                      String\n  monitor_timeout_value                         Float          @default(2)\n  monitor_timeout_unit                          String         @default(\"hours\") // \"minutes\" | \"hours\" | \"days\"\n  created_at                                    BigInt\n  updated_at                                    BigInt\n  user                                          users          @relation(fields: [user_id], references: [id], onDelete: Cascade)\n  runs                                          cronjob_runs[]\n\n  @@unique([user_id, name])\n  @@index([user_id])\n  @@index([enabled])\n  @@index([target_type])\n  @@index([workflow_slug])\n}\n\nmodel cronjob_runs {\n  id                  String              @id @default(uuid())\n  cronjob_id          String\n  status              String // prompt: \"running\" | \"paused\" | \"success\" | \"failed\" | \"skipped\" | \"terminated\"; workflow: \"running\" | \"success\" | \"failed\" | \"skipped\"\n  started_at          BigInt\n  completed_at        BigInt?\n  workflow_run_id     String?\n  summary             String?\n  session_id          String?\n  opencode_session_id String?\n  error_message       String?\n  todo_list_version   Int                 @default(0)\n  cronjob             cronjobs            @relation(fields: [cronjob_id], references: [id], onDelete: Cascade)\n  session             chat_sessions?      @relation(fields: [session_id], references: [id], onDelete: Cascade)\n  workflowRun         workflow_runs?      @relation(fields: [workflow_run_id], references: [id], onDelete: Cascade)\n  todos               cronjob_run_todos[]\n\n  @@index([cronjob_id, started_at])\n  @@index([cronjob_id, status])\n  @@index([workflow_run_id])\n  @@index([session_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel cronjob_run_todos {\n  id           String       @id @default(uuid())\n  run_id       String\n  content      String\n  status       String // \"pending\" = not started yet; \"in_progress\" = current todo; \"completed\" = finished\n  position     Int\n  summary      String?\n  created_at   BigInt\n  completed_at BigInt?\n  run          cronjob_runs @relation(fields: [run_id], references: [id], onDelete: Cascade)\n\n  @@index([run_id, status, position])\n  @@index([run_id, position])\n}\n\nmodel chat_session_usage {\n  chat_session_id        String        @id\n  last_synced_message_id String\n  provider_id            String\n  input_tokens           Int\n  output_tokens          Int\n  cached_tokens          Int\n  cost_usd               Float\n  model_id               String\n  updated_at             BigInt\n  session                chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n}\n\nmodel chat_session_tracked_files {\n  id                  String        @id @default(uuid())\n  chat_session_id     String\n  relative_path       String\n  existed_at_baseline Boolean\n  content_kind        String // \"text\" | \"binary\" | \"missing\"\n  text_content        String?\n  binary_content      Bytes?\n  size_bytes          Int?\n  content_sha256      String?\n  created_at          BigInt\n  updated_at          BigInt\n  session             chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n\n  @@unique([chat_session_id, relative_path])\n  @@index([chat_session_id])\n}\n\nmodel tool_execution_permissions {\n  id                  String  @id @default(uuid())\n  opencode_session_id String\n  message_id          String\n  call_id             String\n  status              String // \"pending\" | \"approved\" | \"rejected\"\n  created_at          BigInt\n  responded_at        BigInt?\n\n  @@unique([opencode_session_id, message_id, call_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel resource_metadata {\n  resource_kind       String\n  resource_slug       String\n  created_by_user_id  String?\n  approved_by_user_id String?\n  created_at          BigInt\n  updated_at          BigInt\n  approvedSnapshot    resource_approved_snapshots?\n  createdByUser       users?                       @relation(\"ResourceCreatedBy\", fields: [created_by_user_id], references: [id], onDelete: SetNull)\n  approvedByUser      users?                       @relation(\"ResourceApprovedBy\", fields: [approved_by_user_id], references: [id], onDelete: SetNull)\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n  @@index([created_by_user_id])\n  @@index([approved_by_user_id])\n}\n\nmodel resource_permissions {\n  resource_kind   String\n  resource_slug   String\n  permission_mode String // \"restricted\" | \"everyone\"\n  created_at      BigInt\n  updated_at      BigInt\n  allowedUsers    resource_permission_users[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_permission_users {\n  id            String               @id @default(uuid())\n  resource_kind String\n  resource_slug String\n  user_id       String\n  created_at    BigInt\n  permission    resource_permissions @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  user          users                @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, user_id])\n  @@index([resource_kind, resource_slug])\n}\n\nmodel resource_approved_snapshots {\n  resource_kind String\n  resource_slug String\n  file_count    Int\n  created_at    BigInt\n  updated_at    BigInt\n  resource      resource_metadata                  @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  files         resource_approved_snapshot_files[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_approved_snapshot_files {\n  id             String                      @id @default(uuid())\n  resource_kind  String\n  resource_slug  String\n  relative_path  String\n  content_kind   String // \"text\" | \"binary\"\n  text_content   String?\n  binary_content Bytes?\n  size_bytes     Int\n  content_sha256 String\n  snapshot       resource_approved_snapshots @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, relative_path])\n  @@index([resource_kind, resource_slug])\n}\n",
-  "inlineSchemaHash": "365f7a66ef1a3911b2564a1f1cd26b622414e1a42ad30215b6494a54bdb53b89",
+  "inlineSchema": "generator client {\n  provider = \"prisma-client-js\"\n  output   = \"./generated/client\"\n}\n\ndatasource db {\n  provider = \"sqlite\"\n  url      = env(\"DATABASE_URL\")\n}\n\nmodel users {\n  id                       String                      @id @default(uuid())\n  email                    String                      @unique\n  name                     String\n  role                     String // \"User\" or \"Engineer\"\n  created_at               BigInt\n  password_hash            String\n  must_change_password     Boolean                     @default(false)\n  reset_token              String?\n  reset_token_expires_at   BigInt?\n  workflowRuns             workflow_runs[]\n  chatSessions             chat_sessions[]\n  cronjobs                 cronjobs[]\n  resourcePermissionUsers  resource_permission_users[]\n  createdResourceMetadata  resource_metadata[]         @relation(\"ResourceCreatedBy\")\n  approvedResourceMetadata resource_metadata[]         @relation(\"ResourceApprovedBy\")\n  userSecrets              user_secrets[]\n}\n\nmodel workflow_runs {\n  id                  String             @id @default(uuid())\n  ran_by_user_id      String?\n  status              String // \"running\" | \"success\" | \"failed\"\n  started_at          BigInt\n  completed_at        BigInt?\n  args                String? // JSON string of input arguments passed to the workflow\n  error_message       String?\n  output              String? // Captured stdout/stderr from the workflow run\n  workflow_slug       String\n  session_id          String?\n  message_id          String?\n  run_source          String // \"user\" | \"api\" | \"cronjob\"\n  workflow_api_key_id String?\n  user                users?             @relation(fields: [ran_by_user_id], references: [id], onDelete: SetNull)\n  workflowApiKey      workflow_api_keys? @relation(fields: [workflow_api_key_id], references: [id], onDelete: SetNull)\n  cronjobRuns         cronjob_runs[]\n\n  @@index([started_at])\n  @@index([session_id, message_id])\n  @@index([workflow_api_key_id])\n}\n\nmodel workflow_api_keys {\n  id                 String          @id @default(uuid())\n  workflow_slug      String\n  api_key            String          @unique\n  created_by_user_id String\n  created_at         BigInt\n  workflowRuns       workflow_runs[]\n\n  @@index([workflow_slug])\n  @@index([created_by_user_id])\n}\n\nmodel workflow_aborted_sessions {\n  session_id String @id\n  created_at BigInt\n}\n\nmodel key_value {\n  key   String @id\n  value String\n}\n\nmodel user_secrets {\n  id         String @id @default(uuid())\n  user_id    String\n  key        String\n  value      String\n  created_at BigInt\n  updated_at BigInt\n  user       users  @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([user_id, key])\n  @@index([user_id])\n}\n\nmodel global_secrets {\n  id                 String @id @default(uuid())\n  key                String @unique\n  value              String\n  created_by_user_id String\n  updated_by_user_id String\n  created_at         BigInt\n  updated_at         BigInt\n\n  @@index([created_by_user_id])\n  @@index([updated_by_user_id])\n}\n\nmodel chat_sessions {\n  id                             String                       @id @default(uuid())\n  user_id                        String\n  opencode_session_id            String                       @unique\n  title                          String\n  last_seen_assistant_message_id String?\n  visible_to_user                Boolean                      @default(true)\n  created_at                     BigInt\n  updated_at                     BigInt\n  trackedFiles                   chat_session_tracked_files[]\n  usage                          chat_session_usage?\n  cronjobRuns                    cronjob_runs[]\n  user                           users                        @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@index([visible_to_user])\n  @@index([user_id, visible_to_user, updated_at])\n}\n\nmodel cronjobs {\n  id                                            String         @id @default(uuid())\n  user_id                                       String\n  name                                          String\n  enabled                                       Boolean\n  target_type                                   String // \"prompt\" | \"workflow\"\n  prompt                                        String?\n  prompt_allow_workflow_runs_without_permission Boolean?\n  workflow_slug                                 String?\n  workflow_input_json                           String?\n  cron_expression                               String\n  timezone                                      String\n  monitor_timeout_value                         Float          @default(2)\n  monitor_timeout_unit                          String         @default(\"hours\") // \"minutes\" | \"hours\" | \"days\"\n  created_at                                    BigInt\n  updated_at                                    BigInt\n  user                                          users          @relation(fields: [user_id], references: [id], onDelete: Cascade)\n  runs                                          cronjob_runs[]\n\n  @@unique([user_id, name])\n  @@index([user_id])\n  @@index([enabled])\n  @@index([target_type])\n  @@index([workflow_slug])\n}\n\nmodel cronjob_runs {\n  id                  String              @id @default(uuid())\n  cronjob_id          String\n  status              String // prompt: \"running\" | \"paused\" | \"success\" | \"failed\" | \"skipped\" | \"terminated\"; workflow: \"running\" | \"success\" | \"failed\" | \"skipped\"\n  started_at          BigInt\n  completed_at        BigInt?\n  workflow_run_id     String?\n  summary             String?\n  session_id          String?\n  opencode_session_id String?\n  error_message       String?\n  todo_list_version   Int                 @default(0)\n  cronjob             cronjobs            @relation(fields: [cronjob_id], references: [id], onDelete: Cascade)\n  session             chat_sessions?      @relation(fields: [session_id], references: [id], onDelete: Cascade)\n  workflowRun         workflow_runs?      @relation(fields: [workflow_run_id], references: [id], onDelete: Cascade)\n  todos               cronjob_run_todos[]\n\n  @@index([cronjob_id, started_at])\n  @@index([cronjob_id, status])\n  @@index([workflow_run_id])\n  @@index([session_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel cronjob_run_todos {\n  id           String       @id @default(uuid())\n  run_id       String\n  content      String\n  status       String // \"pending\" = not started yet; \"in_progress\" = current todo; \"completed\" = finished\n  position     Int\n  summary      String?\n  created_at   BigInt\n  completed_at BigInt?\n  run          cronjob_runs @relation(fields: [run_id], references: [id], onDelete: Cascade)\n\n  @@index([run_id, status, position])\n  @@index([run_id, position])\n}\n\nmodel chat_session_usage {\n  chat_session_id        String        @id\n  last_synced_message_id String\n  provider_id            String\n  input_tokens           Int\n  output_tokens          Int\n  cached_tokens          Int\n  cost_usd               Float\n  model_id               String\n  updated_at             BigInt\n  session                chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n}\n\nmodel chat_session_tracked_files {\n  id                  String        @id @default(uuid())\n  chat_session_id     String\n  relative_path       String\n  existed_at_baseline Boolean\n  content_kind        String // \"text\" | \"binary\" | \"missing\"\n  text_content        String?\n  binary_content      Bytes?\n  size_bytes          Int?\n  content_sha256      String?\n  created_at          BigInt\n  updated_at          BigInt\n  session             chat_sessions @relation(fields: [chat_session_id], references: [id], onDelete: Cascade)\n\n  @@unique([chat_session_id, relative_path])\n  @@index([chat_session_id])\n}\n\nmodel tool_execution_permissions {\n  id                  String  @id @default(uuid())\n  opencode_session_id String\n  message_id          String\n  call_id             String\n  status              String // \"pending\" | \"approved\" | \"rejected\"\n  created_at          BigInt\n  responded_at        BigInt?\n\n  @@unique([opencode_session_id, message_id, call_id])\n  @@index([opencode_session_id, status])\n}\n\nmodel resource_metadata {\n  resource_kind       String\n  resource_slug       String\n  created_by_user_id  String?\n  approved_by_user_id String?\n  created_at          BigInt\n  updated_at          BigInt\n  approvedSnapshot    resource_approved_snapshots?\n  createdByUser       users?                       @relation(\"ResourceCreatedBy\", fields: [created_by_user_id], references: [id], onDelete: SetNull)\n  approvedByUser      users?                       @relation(\"ResourceApprovedBy\", fields: [approved_by_user_id], references: [id], onDelete: SetNull)\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n  @@index([created_by_user_id])\n  @@index([approved_by_user_id])\n}\n\nmodel resource_permissions {\n  resource_kind   String\n  resource_slug   String\n  permission_mode String // \"restricted\" | \"everyone\"\n  created_at      BigInt\n  updated_at      BigInt\n  allowedUsers    resource_permission_users[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_permission_users {\n  id            String               @id @default(uuid())\n  resource_kind String\n  resource_slug String\n  user_id       String\n  created_at    BigInt\n  permission    resource_permissions @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  user          users                @relation(fields: [user_id], references: [id], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, user_id])\n  @@index([resource_kind, resource_slug])\n}\n\nmodel resource_approved_snapshots {\n  resource_kind String\n  resource_slug String\n  file_count    Int\n  created_at    BigInt\n  updated_at    BigInt\n  resource      resource_metadata                  @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n  files         resource_approved_snapshot_files[]\n\n  @@id([resource_kind, resource_slug])\n  @@index([resource_slug])\n}\n\nmodel resource_approved_snapshot_files {\n  id             String                      @id @default(uuid())\n  resource_kind  String\n  resource_slug  String\n  relative_path  String\n  content_kind   String // \"text\" | \"binary\"\n  text_content   String?\n  binary_content Bytes?\n  size_bytes     Int\n  content_sha256 String\n  snapshot       resource_approved_snapshots @relation(fields: [resource_kind, resource_slug], references: [resource_kind, resource_slug], onDelete: Cascade)\n\n  @@unique([resource_kind, resource_slug, relative_path])\n  @@index([resource_kind, resource_slug])\n}\n",
+  "inlineSchemaHash": "fc99ad355c76b3380556a915c46b51834e01f3fa7a8ca3ba7f16338c41037be5",
   "copyEngine": true
 }
 config.dirname = '/'

package/prisma/migrations/20260519172913_add_chat_sessions_recent_poll_index/migration.sql

@@ -0,0 +1,2 @@
+-- CreateIndex
+CREATE INDEX "chat_sessions_user_id_visible_to_user_updated_at_idx" ON "chat_sessions"("user_id", "visible_to_user", "updated_at");

package/prisma/schema.prisma

@@ -112,6 +112,7 @@ model chat_sessions {
   cronjobRuns         cronjob_runs[]
   user                users                      @relation(fields: [user_id], references: [id], onDelete: Cascade)
   @@index([visible_to_user])
+  @@index([user_id, visible_to_user, updated_at])
 }
 
 model cronjobs {