feat: Prisma schema, migrations en seed voor auth en audit-log

- Models: User, Session, FlowRun, FlowStep met FlowStatus enum
- prisma.config.ts met DATABASE_URL via @prisma/adapter-pg (Prisma 7 API)
- Initiële migratie applied op ops_dashboard database
- Seed-script voor 1 user via SEED_USER_EMAIL/SEED_USER_PASSWORD env-vars
- lib/prisma.ts als gedeelde singleton client voor Next.js

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

prisma/migrations/20260513150226_init/migration.sql

@@ -0,0 +1,67 @@
+-- CreateEnum
+CREATE TYPE "FlowStatus" AS ENUM ('pending', 'running', 'success', 'failed', 'cancelled');
+
+-- CreateTable
+CREATE TABLE "User" (
+    "id" TEXT NOT NULL,
+    "email" TEXT NOT NULL,
+    "pwd_hash" TEXT NOT NULL,
+    "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "User_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "Session" (
+    "id" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "token_hash" TEXT NOT NULL,
+    "expires_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "Session_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "FlowRun" (
+    "id" TEXT NOT NULL,
+    "user_id" TEXT NOT NULL,
+    "flow_key" TEXT NOT NULL,
+    "status" "FlowStatus" NOT NULL DEFAULT 'pending',
+    "dry_run" BOOLEAN NOT NULL DEFAULT false,
+    "started_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "ended_at" TIMESTAMP(3),
+    "exit_code" INTEGER,
+
+    CONSTRAINT "FlowRun_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "FlowStep" (
+    "id" TEXT NOT NULL,
+    "flow_run_id" TEXT NOT NULL,
+    "step_index" INTEGER NOT NULL,
+    "command_key" TEXT NOT NULL,
+    "args_json" TEXT,
+    "stdout" TEXT,
+    "stderr" TEXT,
+    "exit_code" INTEGER,
+    "started_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "ended_at" TIMESTAMP(3),
+
+    CONSTRAINT "FlowStep_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "User_email_key" ON "User"("email");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "Session_token_hash_key" ON "Session"("token_hash");
+
+-- AddForeignKey
+ALTER TABLE "Session" ADD CONSTRAINT "Session_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FlowRun" ADD CONSTRAINT "FlowRun_user_id_fkey" FOREIGN KEY ("user_id") REFERENCES "User"("id") ON DELETE CASCADE ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "FlowStep" ADD CONSTRAINT "FlowStep_flow_run_id_fkey" FOREIGN KEY ("flow_run_id") REFERENCES "FlowRun"("id") ON DELETE CASCADE ON UPDATE CASCADE;

prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"

prisma/schema.prisma

@@ -0,0 +1,59 @@
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+}
+
+enum FlowStatus {
+  pending
+  running
+  success
+  failed
+  cancelled
+}
+
+model User {
+  id         String    @id @default(cuid())
+  email      String    @unique
+  pwd_hash   String
+  created_at DateTime  @default(now())
+  sessions   Session[]
+  flow_runs  FlowRun[]
+}
+
+model Session {
+  id         String   @id @default(cuid())
+  user_id    String
+  token_hash String   @unique
+  expires_at DateTime
+  user       User     @relation(fields: [user_id], references: [id], onDelete: Cascade)
+}
+
+model FlowRun {
+  id         String     @id @default(cuid())
+  user_id    String
+  flow_key   String
+  status     FlowStatus @default(pending)
+  dry_run    Boolean    @default(false)
+  started_at DateTime   @default(now())
+  ended_at   DateTime?
+  exit_code  Int?
+  user       User       @relation(fields: [user_id], references: [id], onDelete: Cascade)
+  steps      FlowStep[]
+}
+
+model FlowStep {
+  id           String    @id @default(cuid())
+  flow_run_id  String
+  step_index   Int
+  command_key  String
+  args_json    String?
+  stdout       String?
+  stderr       String?
+  exit_code    Int?
+  started_at   DateTime  @default(now())
+  ended_at     DateTime?
+  flow_run     FlowRun   @relation(fields: [flow_run_id], references: [id], onDelete: Cascade)
+}

prisma/seed.ts

@@ -0,0 +1,35 @@
+import { PrismaClient } from '@prisma/client'
+import { PrismaPg } from '@prisma/adapter-pg'
+import bcrypt from 'bcryptjs'
+
+const connectionString = process.env.DATABASE_URL
+if (!connectionString) throw new Error('DATABASE_URL is required')
+
+const adapter = new PrismaPg({ connectionString })
+const prisma = new PrismaClient({ adapter })
+
+async function main() {
+  const email = process.env.SEED_USER_EMAIL
+  const password = process.env.SEED_USER_PASSWORD
+
+  if (!email || !password) {
+    throw new Error('SEED_USER_EMAIL and SEED_USER_PASSWORD env vars are required')
+  }
+
+  const pwd_hash = await bcrypt.hash(password, 12)
+
+  const user = await prisma.user.upsert({
+    where: { email },
+    update: { pwd_hash },
+    create: { email, pwd_hash },
+  })
+
+  console.log(`Seeded user: ${user.email} (id: ${user.id})`)
+}
+
+main()
+  .catch((e) => {
+    console.error(e)
+    process.exit(1)
+  })
+  .finally(() => prisma.$disconnect())