schema.prisma

generator client {
  provider = "prisma-client-js"
}

datasource db {
  provider = "postgresql"
  url      = env("DATABASE_URL")
}

enum UserRole {
  WORKER
  ISSUER
  ADMIN
  DEVELOPER
}

enum ResourceStatus {
  ACTIVE
  PENDING
  SUSPENDED
  REVOKED
  DELETED
}

enum PaymentClassification {
  INCOME
  REIMBURSEMENT
  PERSONAL_TRANSFER
  UNKNOWN
  EXCLUDED
}

enum ProofStatus {
  ACTIVE
  EXPIRED
  REVOKED
  INVALID
}

enum ProofType {
  MINIMUM_INCOME
  RECURRING_INCOME
  PAYMENT_RECEIPT
  INCOME_RANGE
  EMPLOYER_PAYMENT
  EMPLOYMENT_CONTINUITY
  INVOICE_SETTLEMENT
  AGGREGATE_EARNINGS
}

enum AttestationType {
  PAYMENT
  EMPLOYMENT
  INVOICE
}

enum VerificationResult {
  VALID
  EXPIRED
  REVOKED
  INVALID_SIGNATURE
  UNKNOWN_PROOF
  UNVERIFIED_ISSUER
}

enum VerificationOutcome {
  VALID
  EXPIRED
  REVOKED
  UNKNOWN
  INVALID_SIGNATURE
  ISSUER_WARNING
}

enum AnchoringOperation {
  REGISTER
  REVOKE
}

enum AnchoringStatus {
  PENDING
  PROCESSING
  CONFIRMED
  FAILED
}

enum AuthEventType {
  CHALLENGE_CREATED
  CHALLENGE_VERIFIED
  SIGNATURE_INVALID
  CHALLENGE_EXPIRED
  CHALLENGE_REPLAYED
  RATE_LIMITED
}

enum ApiKeyScope {
  // Proof verification and reading
  PROOF_READ
  PROOF_VERIFY
  
  // Payment management and reading
  PAYMENT_READ
  PAYMENT_WRITE
  
  // Organization management
  ORG_READ
  ORG_ADMIN
}

model User {
  id                 String          @id @default(cuid())
  walletAddress      String          @unique
  walletHash         String          @unique
  role               UserRole        @default(WORKER)
  status             ResourceStatus  @default(ACTIVE)
  createdAt          DateTime        @default(now())
  updatedAt          DateTime        @updatedAt
  lastLoginAt        DateTime?
  organizations      Organization[]
  payments           Payment[]
  trustedSources     TrustedSource[]
  proofs             Proof[]
  createdApiKeys     ApiKey[]
  sessions           AuthSession[]

  @@index([walletHash])
  @@index([status])
}

model WalletChallenge {
  id            String    @id @default(cuid())
  walletAddress String
  nonceHash     String    @unique
  message       String
  expiresAt     DateTime
  usedAt        DateTime?
  createdAt     DateTime  @default(now())

  @@index([walletAddress])
  @@index([expiresAt])
}

/// Persisted, revocable authentication session.
/// Only a SHA-256 hash of the opaque bearer token is stored — the raw token is never
/// written to the database or to any application log.
model AuthSession {
  id          String    @id @default(cuid())
  /// SHA-256 hex digest of the raw opaque session token.
  tokenHash   String    @unique
  userId      String
  user        User      @relation(fields: [userId], references: [id])
  createdAt   DateTime  @default(now())
  expiresAt   DateTime
  lastUsedAt  DateTime?
  /// Set when the session is explicitly revoked (logout or rotation).
  revokedAt   DateTime?
  /// Links to the replacement session produced during rotation.
  rotatedToId String?   @unique
  rotatedTo   AuthSession? @relation("SessionRotation", fields: [rotatedToId], references: [id])
  rotatedFrom AuthSession? @relation("SessionRotation")

  @@index([userId])
  @@index([expiresAt])
  @@index([revokedAt])
}

model Organization {
  id          String          @id @default(cuid())
  name        String
  slug        String          @unique
  website     String?
  status      ResourceStatus  @default(PENDING)
  createdById String
  createdBy   User            @relation(fields: [createdById], references: [id])
  createdAt   DateTime        @default(now())
  updatedAt   DateTime        @updatedAt
  issuers     Issuer[]
  apiKeys     ApiKey[]
  webhooks    Webhook[]

  @@index([status])
}

model Issuer {
  id              String          @id @default(cuid())
  organizationId  String
  organization    Organization    @relation(fields: [organizationId], references: [id])
  stellarAddress  String          @unique
  status          ResourceStatus  @default(PENDING)
  metadataHash    String?
  publicMetadata  Json?
  contractSyncState       String          @default("PENDING")
  contractSyncedStatus    ResourceStatus?
  contractTransactionHash String?
  contractSyncedAt         DateTime?
  contractSyncError        String?
  verifiedAt      DateTime?
  suspendedAt     DateTime?
  revokedAt       DateTime?
  createdAt       DateTime        @default(now())
  updatedAt       DateTime        @updatedAt
  trustedSources  TrustedSource[]
  attestations    Attestation[]

  @@index([organizationId])
  @@index([status])
}

model SupportedAsset {
  id          String          @id @default(cuid())
  assetKey    String          @unique
  code        String
  issuer      String?
  network     String
  status      ResourceStatus  @default(ACTIVE)
  createdAt   DateTime        @default(now())
  updatedAt   DateTime        @updatedAt

  @@index([network, status])
}

model Payment {
  id                     String                 @id @default(cuid())
  userId                 String
  user                   User                   @relation(fields: [userId], references: [id])
  stellarTransactionHash String
  operationId            String                 @unique
  sourceAddress          String
  destinationAddress     String
  assetCode              String
  assetIssuer            String?
  amountEncrypted        String?
  occurredAt             DateTime
  memo                   Json?
  classification         PaymentClassification  @default(UNKNOWN)
  isEligible             Boolean                @default(false)
  createdAt              DateTime               @default(now())
  updatedAt              DateTime               @updatedAt

  @@index([userId, occurredAt])
  @@index([sourceAddress])
  @@index([assetCode, assetIssuer])
  @@index([classification])
}

model TrustedSource {
  id            String          @id @default(cuid())
  userId        String
  user          User            @relation(fields: [userId], references: [id])
  sourceAddress String
  displayName   String?
  sourceType    String
  issuerId      String?
  issuer        Issuer?         @relation(fields: [issuerId], references: [id])
  status        ResourceStatus  @default(ACTIVE)
  createdAt     DateTime        @default(now())
  updatedAt     DateTime        @updatedAt

  @@unique([userId, sourceAddress])
  @@index([issuerId])
}

model Proof {
  id                      String              @id @default(cuid())
  userId                  String
  user                    User                @relation(fields: [userId], references: [id])
  proofType               ProofType
  schemaVersion           String
  status                  ProofStatus         @default(ACTIVE)
  network                 String
  assetCode               String
  assetIssuer             String?
  periodStart             DateTime?
  periodEnd               DateTime?
  expiresAt               DateTime
  commitment              String?
  credentialHash          String              @unique
  contractTransactionHash String?
  revokedAt               DateTime?
  createdAt               DateTime            @default(now())
  updatedAt               DateTime            @updatedAt
  claim                   ProofClaim?
  verificationEvents      VerificationEvent[]
  anchoringIntents        AnchoringIntent[]

  @@index([userId, status])
  @@index([userId, createdAt, id])
  @@index([proofType])
  @@index([expiresAt])
}

model ProofClaim {
  id                String   @id @default(cuid())
  proofId           String   @unique
  proof             Proof    @relation(fields: [proofId], references: [id])
  operator          String
  thresholdEncrypted String?
  frequency         String?
  result            Boolean
  disclosurePolicy  Json
  createdAt         DateTime @default(now())
}

model Attestation {
  id                   String          @id @default(cuid())
  issuerId             String
  issuer               Issuer          @relation(fields: [issuerId], references: [id])
  subjectWalletHash    String
  paymentReferenceHash String?
  type                 AttestationType
  status               ResourceStatus  @default(ACTIVE)
  signedPayload        Json
  expiresAt            DateTime?
  revokedAt            DateTime?
  createdAt            DateTime        @default(now())
  updatedAt            DateTime        @updatedAt

  @@index([issuerId, status])
  @@index([subjectWalletHash])
}

model VerificationEvent {
  id                  String             @id @default(cuid())
  proofId             String
  proof               Proof              @relation(fields: [proofId], references: [id])
  verifierFingerprint String?
  result              VerificationResult
  ipHash              String?
  userAgentHash       String?
  createdAt           DateTime           @default(now())

  @@index([proofId, createdAt])
  @@index([result])
}

model VerificationEventLog {
  id           String              @id @default(cuid())
  outcome      VerificationOutcome
  proofId      String
  metadataHash String
  saltVersion  Int
  createdAt    DateTime            @default(now())
  retainUntil  DateTime

  @@index([proofId, createdAt])
  @@index([outcome])
  @@index([retainUntil])
}

model ApiKey {
  id             String          @id @default(cuid())
  organizationId String
  organization   Organization    @relation(fields: [organizationId], references: [id])
  createdById    String
  createdBy      User            @relation(fields: [createdById], references: [id])
  name           String
  prefix         String          @db.VarChar(8)
  keyHash        String          @unique
  scopeAssignments ApiKeyScopeAssignment[] @relation("apiKeyScopeAssignments")
  status         ResourceStatus  @default(ACTIVE)
  lastUsedAt     DateTime?
  rotatedAt      DateTime?
  revokedAt      DateTime?
  expiresAt      DateTime?
  createdAt      DateTime        @default(now())

  @@index([organizationId, status])
  @@index([prefix])
}

model ApiKeyScopeAssignment {
  id       String      @id @default(cuid())
  apiKeyId String
  apiKey   ApiKey      @relation("apiKeyScopeAssignments", fields: [apiKeyId], references: [id], onDelete: Cascade)
  scope    ApiKeyScope

  @@unique([apiKeyId, scope])
}

model Webhook {
  id               String            @id @default(cuid())
  organizationId   String
  organization     Organization      @relation(fields: [organizationId], references: [id])
  url              String
  secretEncrypted  String
  events           Json
  status           ResourceStatus    @default(ACTIVE)
  createdAt        DateTime          @default(now())
  updatedAt        DateTime          @updatedAt
  deliveries       WebhookDelivery[]

  @@index([organizationId, status])
}

enum WebhookDeliveryStatus {
  PENDING
  SUCCESS
  FAILED
}

model WebhookDelivery {
  id             String                @id @default(cuid())
  webhookId      String
  webhook        Webhook               @relation(fields: [webhookId], references: [id])
  eventType      String
  eventId        String
  payload        Json
  attempt        Int                   @default(1)
  status         WebhookDeliveryStatus @default(PENDING)
  statusCode     Int?
  responseBody   String?
  durationMs     Int?
  failureReason  String?
  replayOf       String?
  replayedBy     String?
  replayKey      String?               @unique
  deliveredAt    DateTime?
  nextRetryAt    DateTime?
  createdAt      DateTime              @default(now())

  @@index([webhookId, createdAt])
  @@index([eventId])
  @@index([status, nextRetryAt])
}

model AuditLog {
  id           String   @id @default(cuid())
  actorType    String
  actorId      String?
  action       String
  resourceType String
  resourceId   String?
  metadata     Json?
  createdAt    DateTime @default(now())

  @@index([actorType, actorId])
  @@index([resourceType, resourceId])
  @@index([createdAt])
}

model AnchoringIntent {
  id              String             @id @default(cuid())
  proofId         String
  proof           Proof              @relation(fields: [proofId], references: [id])
  operation       AnchoringOperation
  status          AnchoringStatus    @default(PENDING)
  attemptCount    Int                @default(0)
  lastAttemptAt   DateTime?
  nextRetryAt     DateTime?
  transactionHash String?
  ledger          String?
  lastErrorSafe   String?
  permanentError  Boolean            @default(false)
  createdAt       DateTime           @default(now())
  updatedAt       DateTime           @updatedAt

  @@unique([proofId, operation])
  @@index([nextRetryAt])
  @@index([proofId])
}

model AuthAuditEvent {
  id                 String        @id @default(cuid())
  eventType          AuthEventType
  walletHash         String
  clientMetadataHash String?
  challengeId        String?
  success            Boolean
  failureReason      String?
  createdAt          DateTime      @default(now())

  @@index([walletHash, createdAt])
  @@index([eventType, createdAt])
  @@index([createdAt])
}