fix architecture and write new tests

packages/database/prisma/migrations/20260609194000_company_api_keys/migration.sql

@@ -0,0 +1,15 @@
+-- Company API keys are stored hash-only. Raw keys are shown once at creation.
+CREATE TABLE IF NOT EXISTS "company_api_keys" (
+  "id" TEXT PRIMARY KEY,
+  "companyId" TEXT NOT NULL,
+  "name" TEXT NOT NULL,
+  "prefix" TEXT NOT NULL UNIQUE,
+  "keyHash" TEXT NOT NULL,
+  "lastUsedAt" TIMESTAMP(3),
+  "revokedAt" TIMESTAMP(3),
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "company_api_keys_companyId_fkey"
+    FOREIGN KEY ("companyId") REFERENCES "companies"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS "company_api_keys_companyId_idx" ON "company_api_keys"("companyId");

packages/database/prisma/migrations/20260609194500_reservation_public_access/migration.sql

@@ -0,0 +1,13 @@
+CREATE TABLE IF NOT EXISTS "reservation_public_access" (
+  "id" TEXT PRIMARY KEY,
+  "reservationId" TEXT NOT NULL,
+  "tokenHash" TEXT NOT NULL UNIQUE,
+  "expiresAt" TIMESTAMP(3) NOT NULL,
+  "usedAt" TIMESTAMP(3),
+  "revokedAt" TIMESTAMP(3),
+  "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "reservation_public_access_reservationId_fkey"
+    FOREIGN KEY ("reservationId") REFERENCES "reservations"("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS "reservation_public_access_reservationId_idx" ON "reservation_public_access"("reservationId");

packages/database/prisma/migrations/20260609201000_add_webhook_events/migration.sql

@@ -0,0 +1,18 @@
+CREATE TABLE IF NOT EXISTS "webhook_events" (
+  "id" TEXT NOT NULL,
+  "provider" TEXT NOT NULL,
+  "providerEventId" TEXT NOT NULL,
+  "eventType" TEXT NOT NULL,
+  "status" TEXT NOT NULL,
+  "payloadHash" TEXT NOT NULL,
+  "errorMessage" TEXT,
+  "receivedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "processedAt" TIMESTAMP(3),
+  CONSTRAINT "webhook_events_pkey" PRIMARY KEY ("id")
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "webhook_events_provider_providerEventId_key"
+  ON "webhook_events"("provider", "providerEventId");
+
+CREATE INDEX IF NOT EXISTS "webhook_events_provider_status_idx"
+  ON "webhook_events"("provider", "status");

packages/database/prisma/migrations/20260609233000_drop_legacy_company_api_key/migration.sql

@@ -0,0 +1,4 @@
+-- Remove legacy plaintext company API key storage.
+-- Company integrations must use company_api_keys, which stores only key hashes and prefixes.
+DROP INDEX IF EXISTS "companies_apiKey_key";
+ALTER TABLE "companies" DROP COLUMN IF EXISTS "apiKey";

packages/database/prisma/migrations/20260610001500_add_admin_recovery_codes/migration.sql

@@ -0,0 +1,16 @@
+-- CreateTable
+CREATE TABLE "admin_recovery_codes" (
+    "id" TEXT NOT NULL,
+    "adminUserId" TEXT NOT NULL,
+    "codeHash" TEXT NOT NULL,
+    "usedAt" TIMESTAMP(3),
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "admin_recovery_codes_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "admin_recovery_codes_adminUserId_usedAt_idx" ON "admin_recovery_codes"("adminUserId", "usedAt");
+
+-- AddForeignKey
+ALTER TABLE "admin_recovery_codes" ADD CONSTRAINT "admin_recovery_codes_adminUserId_fkey" FOREIGN KEY ("adminUserId") REFERENCES "admin_users"("id") ON DELETE CASCADE ON UPDATE CASCADE;