perf: cache Polar API calls, add DB indexes, fix workflow data isolation, tune React Query staleTime

[Copilot]

Several compounding inefficiencies: unindexed FK columns causing table scans, a live Polar API call on every premium procedure invocation, getWorkflows returning all users' data with no field projection, and a 30s staleTime triggering unnecessary refetches on every navigation.

Database

• Added @@index([userId]) to Session and Account — these FK columns were completely unindexed
• Expanded Workflow model: userId FK → User (cascade delete), createdAt/updatedAt, @@index([userId]), @@map("workflow")
• Migration adds userId as nullable to safely handle pre-existing rows; back-fills updatedAt from createdAt

tRPC / API

• premiumProcedure: wrapped polarClient.customers.getStateExternal in cache() — previously fired a network round-trip to Polar on every request, including batched ones

  const getCustomerState = cache(async (userId: string) => {
    return polarClient.customers.getStateExternal({ externalId: userId });
  });

• getWorkflows: added where: { userId: ctx.auth.user.id }, explicit select (avoids fetching unused columns), and orderBy: { createdAt: 'desc' } — previously returned all workflows across all users with no projection

React Query

• Global staleTime: 30s → 5min — was re-fetching on every tab switch and route change
• useSubscription hook: added matching staleTime: 5 * 60 * 1000 — sidebar re-renders were hitting the Polar API on every navigation

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• cli.inngest.com
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node postinstall.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.