268 lines
8.0 KiB
Plaintext
268 lines
8.0 KiB
Plaintext
// One workspace, one team. No multi-tenancy.
|
|
|
|
generator client {
|
|
provider = "prisma-client-js"
|
|
}
|
|
|
|
datasource db {
|
|
provider = "postgresql"
|
|
url = env("DATABASE_URL")
|
|
}
|
|
|
|
// ---------- Auth.js (Prisma adapter) ----------
|
|
|
|
model User {
|
|
id String @id @default(cuid())
|
|
name String?
|
|
email String @unique
|
|
emailVerified DateTime?
|
|
image String?
|
|
role String @default("member") // "admin" | "member"
|
|
createdAt DateTime @default(now())
|
|
|
|
accounts Account[]
|
|
sessions Session[]
|
|
forms Form[] @relation("FormOwner")
|
|
responses Response[]
|
|
viewers FormViewer[]
|
|
tokens AccessToken[]
|
|
uploads UploadedFile[]
|
|
partials PartialResponse[]
|
|
auditLogs AuditLog[]
|
|
formVersions FormVersion[]
|
|
}
|
|
|
|
model Account {
|
|
id String @id @default(cuid())
|
|
userId String
|
|
type String
|
|
provider String
|
|
providerAccountId String
|
|
refresh_token String?
|
|
access_token String?
|
|
expires_at Int?
|
|
token_type String?
|
|
scope String?
|
|
id_token String?
|
|
session_state String?
|
|
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
|
|
|
|
@@unique([provider, providerAccountId])
|
|
}
|
|
|
|
model Session {
|
|
id String @id @default(cuid())
|
|
sessionToken String @unique
|
|
userId String
|
|
expires DateTime
|
|
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
|
|
}
|
|
|
|
model VerificationToken {
|
|
identifier String
|
|
token String @unique
|
|
expires DateTime
|
|
@@unique([identifier, token])
|
|
}
|
|
|
|
// ---------- Forms ----------
|
|
|
|
model Form {
|
|
id String @id @default(cuid())
|
|
slug String @unique
|
|
title String
|
|
description String?
|
|
ownerId String
|
|
owner User @relation("FormOwner", fields: [ownerId], references: [id], onDelete: Cascade)
|
|
|
|
// Field schema stored as JSON: Field[] (see src/lib/types.ts)
|
|
fields String @default("[]")
|
|
// Form-level settings JSON: { visibility, thanksMessage, theme }
|
|
settings String @default("{}")
|
|
published Boolean @default(false)
|
|
|
|
responses Response[]
|
|
viewers FormViewer[]
|
|
uploads UploadedFile[]
|
|
partials PartialResponse[]
|
|
events FormEvent[]
|
|
versions FormVersion[]
|
|
tags FormTag[]
|
|
|
|
createdAt DateTime @default(now())
|
|
updatedAt DateTime @updatedAt
|
|
}
|
|
|
|
// Immutable snapshot of a form's schema for revert/diff. One row per save.
|
|
model FormVersion {
|
|
id String @id @default(cuid())
|
|
formId String
|
|
form Form @relation(fields: [formId], references: [id], onDelete: Cascade)
|
|
// 1-indexed, monotonically increasing per form.
|
|
version Int
|
|
title String
|
|
description String?
|
|
fields String
|
|
settings String
|
|
// The user who saved this version (may be null if author was deleted).
|
|
authorId String?
|
|
author User? @relation(fields: [authorId], references: [id], onDelete: SetNull)
|
|
createdAt DateTime @default(now())
|
|
|
|
@@unique([formId, version])
|
|
@@index([formId, createdAt])
|
|
}
|
|
|
|
// Who, besides owner & admins, can view responses.
|
|
model FormViewer {
|
|
formId String
|
|
userId String
|
|
form Form @relation(fields: [formId], references: [id], onDelete: Cascade)
|
|
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
|
|
@@id([formId, userId])
|
|
}
|
|
|
|
model Response {
|
|
id String @id @default(cuid())
|
|
formId String
|
|
form Form @relation(fields: [formId], references: [id], onDelete: Cascade)
|
|
submitterId String?
|
|
submitter User? @relation(fields: [submitterId], references: [id], onDelete: SetNull)
|
|
// JSON: Record<fieldId, value>
|
|
data String
|
|
createdAt DateTime @default(now())
|
|
}
|
|
|
|
model FormEvent {
|
|
id String @id @default(cuid())
|
|
formId String
|
|
form Form @relation(fields: [formId], references: [id], onDelete: Cascade)
|
|
// "view" | "start" | "submit" | "abandon"
|
|
kind String
|
|
sessionKey String
|
|
durationMs Int?
|
|
createdAt DateTime @default(now())
|
|
|
|
@@index([formId, createdAt])
|
|
@@index([formId, kind])
|
|
}
|
|
|
|
model PartialResponse {
|
|
id String @id @default(cuid())
|
|
formId String
|
|
form Form @relation(fields: [formId], references: [id], onDelete: Cascade)
|
|
submitterId String?
|
|
submitter User? @relation(fields: [submitterId], references: [id], onDelete: SetNull)
|
|
anonKey String?
|
|
data String
|
|
updatedAt DateTime @updatedAt
|
|
createdAt DateTime @default(now())
|
|
|
|
// Nulls are distinct in Postgres, so multiple rows with one side null
|
|
// can coexist — that's intended (one row per (form, identity)).
|
|
@@unique([formId, submitterId])
|
|
@@unique([formId, anonKey])
|
|
}
|
|
|
|
model UploadedFile {
|
|
id String @id @default(cuid())
|
|
formId String
|
|
form Form @relation(fields: [formId], references: [id], onDelete: Cascade)
|
|
responseId String?
|
|
uploaderId String?
|
|
uploader User? @relation(fields: [uploaderId], references: [id], onDelete: SetNull)
|
|
// Storage key — opaque path/key in the configured driver.
|
|
storageKey String
|
|
// Storage driver that wrote this object (so we can read it back later
|
|
// even if the default is later switched).
|
|
driver String @default("local")
|
|
name String
|
|
size Int
|
|
contentType String
|
|
createdAt DateTime @default(now())
|
|
|
|
@@index([formId, createdAt])
|
|
}
|
|
|
|
// Outbound webhook delivery record. One row per attempt-chain; deliveries with
|
|
// remaining retries have status=0 and nextAttemptAt in the future.
|
|
model WebhookDelivery {
|
|
id String @id @default(cuid())
|
|
formId String
|
|
responseId String
|
|
url String @default("")
|
|
status Int @default(0)
|
|
attempts Int @default(0)
|
|
lastError String?
|
|
// Scheduled time of the next retry. When null, no more retries are pending.
|
|
nextAttemptAt DateTime?
|
|
lastAttemptAt DateTime?
|
|
// The signed JSON body, kept so a worker can retry without re-loading state.
|
|
payload String @default("")
|
|
// Secret used for HMAC, kept with the row for retry independence.
|
|
secret String?
|
|
createdAt DateTime @default(now())
|
|
|
|
@@index([formId, createdAt])
|
|
@@index([nextAttemptAt])
|
|
}
|
|
|
|
// Personal access tokens — used for the MCP endpoint.
|
|
model AccessToken {
|
|
id String @id @default(cuid())
|
|
userId String
|
|
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
|
|
name String
|
|
// sha256 of the secret; secret is shown once.
|
|
tokenHash String @unique
|
|
prefix String // first 8 chars of the secret, shown in lists
|
|
lastUsedAt DateTime?
|
|
createdAt DateTime @default(now())
|
|
}
|
|
|
|
// ---------- Tags ----------
|
|
|
|
model Tag {
|
|
id String @id @default(cuid())
|
|
// Lowercase, unique. Display name preserves the casing of the first use.
|
|
slug String @unique
|
|
name String
|
|
// Optional accent color (hex) for the chip; falls back to theme default.
|
|
color String?
|
|
createdAt DateTime @default(now())
|
|
|
|
forms FormTag[]
|
|
}
|
|
|
|
model FormTag {
|
|
formId String
|
|
tagId String
|
|
form Form @relation(fields: [formId], references: [id], onDelete: Cascade)
|
|
tag Tag @relation(fields: [tagId], references: [id], onDelete: Cascade)
|
|
|
|
@@id([formId, tagId])
|
|
@@index([tagId])
|
|
}
|
|
|
|
// ---------- Audit log ----------
|
|
|
|
// Append-only feed of mutations. Visible to admins.
|
|
model AuditLog {
|
|
id String @id @default(cuid())
|
|
// Who did the thing. Null only for system actions (cron, webhook worker, etc).
|
|
actorId String?
|
|
actor User? @relation(fields: [actorId], references: [id], onDelete: SetNull)
|
|
// Verb in past tense: "form.created", "form.deleted", "member.role_changed", etc.
|
|
action String
|
|
// What the action operated on.
|
|
entityType String
|
|
entityId String?
|
|
// Free-form JSON for action-specific details (old/new values, etc.).
|
|
metadata String @default("{}")
|
|
createdAt DateTime @default(now())
|
|
|
|
@@index([createdAt])
|
|
@@index([entityType, entityId])
|
|
@@index([actorId, createdAt])
|
|
}
|