fix production issues

packages/database/prisma/migrations/20260812180000_employee_company_email_unique/migration.sql

@@ -0,0 +1,5 @@
+-- Phase 0: unique employee email per company + normalize existing emails.
+UPDATE "employees" SET "email" = lower("email") WHERE "email" <> lower("email");
+
+-- If duplicate (companyId, email) rows exist, this statement fails intentionally so operators resolve data before enforcing uniqueness.
+CREATE UNIQUE INDEX IF NOT EXISTS "employees_companyId_email_key" ON "employees"("companyId", "email");

packages/database/prisma/migrations/20260812190000_notification_outbox_lease/migration.sql

@@ -0,0 +1,8 @@
+-- Phase 1: outbox leasing for multi-worker safe dispatch
+ALTER TABLE "notification_outbox" ADD COLUMN IF NOT EXISTS "locked_at" TIMESTAMP(3);
+ALTER TABLE "notification_outbox" ADD COLUMN IF NOT EXISTS "locked_by" TEXT;
+ALTER TABLE "notification_outbox" ADD COLUMN IF NOT EXISTS "attempts" INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE "notification_outbox" ADD COLUMN IF NOT EXISTS "available_at" TIMESTAMP(3);
+
+CREATE INDEX IF NOT EXISTS "notification_outbox_status_available_at_idx"
+  ON "notification_outbox"("status", "available_at");

packages/database/prisma/schema.prisma

@@ -1513,7 +1513,9 @@ model Employee {
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
 
+  @@unique([companyId, email])
   @@index([companyId])
+  @@index([email])
   @@map("employees")
 }
 
@@ -2085,10 +2087,15 @@ model NotificationOutbox {
   payload             Json
   publishedAt         DateTime?
   failureReason       String?
+  lockedAt            DateTime?                @map("locked_at")
+  lockedBy            String?                  @map("locked_by")
+  attempts            Int                      @default(0)
+  availableAt         DateTime?                @map("available_at")
   createdAt           DateTime                 @default(now())
   updatedAt           DateTime                 @updatedAt
 
   @@index([status, createdAt])
+  @@index([status, availableAt])
   @@map("notification_outbox")
 }