schema.prisma

generator client {
  provider = "prisma-client-js"
}

datasource db {
  provider = "postgresql"
  url      = env("DATABASE_URL")
}

enum MemberRole {
  VIEWER
  MEMBER
  ADMIN
}

// Access Keys - API authentication for SDK/trace ingestion
model AccessKey {
  id          String    @id @db.VarChar
  projectId   String    @map("project_id") @db.VarChar
  secretHash  String    @unique @map("secret_hash") @db.VarChar
  keyHint     String    @map("key_hint") @db.VarChar
  name        String?   @db.VarChar
  expireTime  DateTime? @map("expire_time") @db.Timestamp(6)
  lastUseTime DateTime? @map("last_use_time") @db.Timestamp(6)
  createTime  DateTime  @default(now()) @map("create_time") @db.Timestamp(6)
  project     Project   @relation(fields: [projectId], references: [id], onDelete: Cascade, onUpdate: NoAction)

  @@index([projectId], map: "ix_access_key_project_id")
  @@map("access_keys")
}

// Invites - Pending workspace invitations
model Invite {
  id              String     @id @db.VarChar
  email           String     @db.VarChar
  workspaceId     String     @map("workspace_id") @db.VarChar
  role            MemberRole
  invitedByUserId String?   @map("invited_by_user_id") @db.VarChar
  createTime      DateTime  @default(now()) @map("create_time") @db.Timestamp(6)
  updateTime      DateTime  @default(now()) @map("update_time") @db.Timestamp(6)
  invitedBy       User?     @relation(fields: [invitedByUserId], references: [id], onUpdate: NoAction)
  workspace       Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade, onUpdate: NoAction)

  @@unique([email, workspaceId], map: "uq_invite_email_workspace")
  @@index([workspaceId], map: "ix_invite_workspace_id")
  @@map("invites")
}

// Workspace Members - User membership in workspaces
model WorkspaceMember {
  id          String     @id @db.VarChar
  workspaceId String     @map("workspace_id") @db.VarChar
  userId      String     @map("user_id") @db.VarChar
  role        MemberRole
  createTime  DateTime  @default(now()) @map("create_time") @db.Timestamp(6)
  updateTime  DateTime  @default(now()) @map("update_time") @db.Timestamp(6)
  workspace   Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade, onUpdate: NoAction)
  user        User      @relation(fields: [userId], references: [id], onDelete: Cascade, onUpdate: NoAction)

  @@unique([workspaceId, userId], map: "uq_workspace_user")
  @@index([workspaceId], map: "ix_workspace_member_workspace_id")
  @@index([userId], map: "ix_workspace_member_user_id")
  @@map("workspace_members")
}

// Workspaces - Top-level container for projects and members
model Workspace {
  id         String            @id @db.VarChar
  name       String            @db.VarChar
  createTime DateTime          @default(now()) @map("create_time") @db.Timestamp(6)
  updateTime DateTime          @default(now()) @map("update_time") @db.Timestamp(6)
  invites    Invite[]
  members    WorkspaceMember[]
  projects   Project[]

  @@map("workspaces")
}

// Projects - Container for traces and access keys
model Project {
  id           String    @id @db.VarChar
  workspaceId  String    @map("workspace_id") @db.VarChar
  name         String    @db.VarChar
  traceTtlDays Int?      @map("trace_ttl_days")
  deleteTime   DateTime? @map("delete_time") @db.Timestamp(6)
  createTime   DateTime  @default(now()) @map("create_time") @db.Timestamp(6)
  updateTime   DateTime  @default(now()) @map("update_time") @db.Timestamp(6)
  accessKeys   AccessKey[]
  workspace    Workspace @relation(fields: [workspaceId], references: [id], onDelete: Cascade, onUpdate: NoAction)

  @@index([workspaceId], map: "ix_project_workspace_id")
  @@map("projects")
}

// Users - Authentication and identity
model User {
  id            String            @id @default(cuid()) @db.VarChar
  email         String?           @unique @db.VarChar
  emailVerified DateTime?         @map("email_verified")
  name          String?           @db.VarChar
  image         String?           @db.VarChar
  password      String?           @db.VarChar
  createTime    DateTime          @default(now()) @map("create_time") @db.Timestamp(6)
  updateTime    DateTime          @default(now()) @map("update_time") @db.Timestamp(6)
  invites       Invite[]
  memberships   WorkspaceMember[]
  accounts      Account[]

  @@map("users")
}

// Accounts - OAuth provider accounts (NextAuth)
model Account {
  id                String   @id @default(cuid())
  userId            String   @map("user_id")
  type              String
  provider          String
  providerAccountId String   @map("provider_account_id")
  refresh_token     String?  @db.Text
  access_token      String?  @db.Text
  expires_at        Int?
  token_type        String?
  scope             String?
  id_token          String?  @db.Text
  session_state     String?
  createTime        DateTime @default(now()) @map("create_time")
  updateTime        DateTime @updatedAt @map("update_time")

  user User @relation(fields: [userId], references: [id], onDelete: Cascade)

  @@unique([provider, providerAccountId])
  @@map("accounts")
}