@adaptware/eagles-db 0.6.1 → 0.6.3

package/client/schema.prisma

@@ -519,6 +519,8 @@ model Assessment {
   /// Attempt Expires At
   attempt_expires_at    DateTime?
   evaluated_at          DateTime?
+  /// When this moves forward, prior INTERVIEW_SESSION grants with reference ASSESSMENT are stale.
+  consent_epoch_at      DateTime                    @default(now())
   /// Audit fields
   created_at            DateTime                    @default(now())
   updated_at            DateTime                    @updatedAt
@@ -1201,6 +1203,8 @@ enum CompetencyCategory {
   AI
   /// FitCheck analysis only — not a dictionary / job-profile catalog category.
   EXPERIENCE_RELEVANCE
+  SOFT_SKILLS
+  CULTURE_FIT
 
   @@schema("public")
 }
@@ -1244,6 +1248,214 @@ model CompetencyDictionary {
   @@schema("public")
 }
 
+/// Candidate consent catalog, audit records, and erasure planning (dry-run v1).
+
+enum ConsentType {
+  PLATFORM_TERMS
+  INTERVIEW_SESSION
+  /// Read-only catalog document; no ConsentRecord submit flow
+  PRIVACY_POLICY
+
+  @@schema("public")
+}
+
+enum ConsentReferenceType {
+  INTERVIEW
+  ASSESSMENT
+
+  @@schema("public")
+}
+
+enum ConsentOutcome {
+  GRANTED
+  DECLINED
+
+  @@schema("public")
+}
+
+enum DataErasureTrigger {
+  ADMIN
+  USER_REQUEST
+  RETENTION_POLICY
+  CONSENT_WITHDRAWAL
+
+  @@schema("public")
+}
+
+enum DataErasureMode {
+  DRY_RUN
+  EXECUTE
+
+  @@schema("public")
+}
+
+enum DataErasureRequestStatus {
+  PLANNED
+  APPROVED
+  EXECUTED
+  REJECTED
+  FAILED
+
+  @@schema("public")
+}
+
+/// Lifecycle for org-managed legal versions (platform seed publishes as PUBLISHED immediately).
+enum ConsentCatalogVersionStatus {
+  DRAFT
+  PUBLISHED
+  ARCHIVED
+  /// Emergency takedown — grants blocked even during manifest grace window
+  REVOKED
+
+  @@schema("public")
+}
+
+model ConsentDocument {
+  id              String                   @id @default(uuid())
+  /// Stable key within scope — platform: `platform_terms`, org interview: `interview_session`
+  slug            String
+  consent_type    ConsentType
+  /// Null = platform-wide catalog row; set = tenant-specific overlay (v1: interview session notice)
+  organisation_id String?
+  organisation    Organisation?            @relation(fields: [organisation_id], references: [id], onDelete: Cascade)
+  display_name    String?
+  is_active       Boolean                  @default(true)
+  created_at      DateTime                 @default(now())
+  updated_at      DateTime                 @updatedAt
+  versions        ConsentDocumentVersion[]
+
+  @@unique([organisation_id, slug])
+  @@index([consent_type, organisation_id, is_active])
+  @@schema("public")
+}
+
+model ConsentDocumentVersion {
+  id                     String                           @id @default(uuid())
+  document_id            String
+  document               ConsentDocument                  @relation(fields: [document_id], references: [id], onDelete: Cascade)
+  version_number         Int
+  content_hash           String
+  locale                 String                           @default("en")
+  /// Legacy inline body; new versions use S3 template fields
+  content                String?                          @db.Text
+  template_version_label String?
+  s3_bucket              String?
+  /// Legacy single key; prefer s3_archive_key + s3_active_key
+  s3_key                 String?
+  s3_region              String?
+  /// Immutable snapshot path (audit binding)
+  s3_archive_key         String?
+  /// Read-optimized current copy under active/
+  s3_active_key          String?
+  /// Decision 6 — immutable archive row in shared Document catalog
+  s3_document_id         String?
+  s3_document            Document?                        @relation(fields: [s3_document_id], references: [id], onDelete: SetNull)
+  status                 ConsentCatalogVersionStatus      @default(PUBLISHED)
+  published_at           DateTime?
+  published_by_id        String?
+  published_by           User?                            @relation("ConsentVersionPublishedBy", fields: [published_by_id], references: [id], onDelete: SetNull)
+  approval_notes         String?                          @db.Text
+  supersedes_version_id  String?
+  supersedes_version     ConsentDocumentVersion?          @relation("ConsentVersionSupersedes", fields: [supersedes_version_id], references: [id], onDelete: SetNull)
+  superseded_by          ConsentDocumentVersion[]         @relation("ConsentVersionSupersedes")
+  created_at             DateTime                         @default(now())
+  checkboxes             ConsentCheckboxDefinition[]
+  consent_records        ConsentRecord[]
+  system_consent_epochs  SystemConsentEpoch[]
+  version_approvals      ConsentDocumentVersionApproval[]
+
+  @@unique([document_id, version_number])
+  @@index([document_id, published_at(sort: Desc)])
+  @@index([s3_document_id])
+  @@schema("public")
+}
+
+model ConsentDocumentVersionApproval {
+  id                  String                 @id @default(uuid())
+  document_version_id String
+  document_version    ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Cascade)
+  action              String
+  actor_user_id       String?
+  actor_user          User?                  @relation("ConsentVersionApprovalActor", fields: [actor_user_id], references: [id], onDelete: SetNull)
+  notes               String?                @db.Text
+  created_at          DateTime               @default(now())
+
+  @@index([document_version_id, created_at(sort: Desc)])
+  @@schema("public")
+}
+
+model ConsentCheckboxDefinition {
+  id                    String                 @id @default(uuid())
+  document_version_id   String
+  document_version      ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Cascade)
+  /// Stable machine key in ConsentRecord.selections JSON
+  checkbox_key          String
+  label                 String
+  sort_order            Int                    @default(0)
+  default_required_hint Boolean                @default(true)
+
+  @@unique([document_version_id, checkbox_key])
+  @@schema("public")
+}
+
+model ConsentRecord {
+  id                     String                 @id @default(uuid())
+  user_id                String
+  user                   User                   @relation(fields: [user_id], references: [id], onDelete: Cascade)
+  consent_type           ConsentType
+  outcome                ConsentOutcome
+  document_version_id    String
+  document_version       ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Restrict)
+  template_version_label String?
+  context_snapshot       Json?
+  selections             Json                   @default("{}")
+  reference_type         ConsentReferenceType?
+  reference_id           String?
+  ip_address             String?
+  user_agent             String?
+  decline_reason         String?
+  /// Copy of version s3_archive_key (or legacy s3_key) at grant time
+  storage_snapshot_key   String?
+  content_hash_at_grant  String?
+  created_at             DateTime               @default(now())
+
+  @@index([user_id, consent_type, created_at(sort: Desc)])
+  @@index([reference_type, reference_id, consent_type, created_at(sort: Desc)])
+  @@schema("public")
+}
+
+/// Platform-wide re-consent watermark (complements per-interview consent_epoch_at).
+model SystemConsentEpoch {
+  id                  String                  @id @default(uuid())
+  consent_type        ConsentType
+  epoch_at            DateTime                @default(now())
+  document_version_id String?
+  document_version    ConsentDocumentVersion? @relation(fields: [document_version_id], references: [id], onDelete: SetNull)
+  reason              String?
+  created_at          DateTime                @default(now())
+
+  @@index([consent_type, epoch_at(sort: Desc)])
+  @@schema("public")
+}
+
+/// Append-only erasure plan snapshots (v1: DRY_RUN only in application code).
+model DataErasureRequest {
+  id              String                   @id @default(uuid())
+  subject_user_id String
+  subject_user    User                     @relation("ErasureSubjectUser", fields: [subject_user_id], references: [id], onDelete: Cascade)
+  trigger         DataErasureTrigger
+  mode            DataErasureMode          @default(DRY_RUN)
+  status          DataErasureRequestStatus @default(PLANNED)
+  plan            Json                     @default("{}")
+  planner_version String
+  requested_by_id String?
+  requested_by    User?                    @relation("ErasureRequestedByUser", fields: [requested_by_id], references: [id], onDelete: SetNull)
+  created_at      DateTime                 @default(now())
+
+  @@index([subject_user_id, created_at(sort: Desc)])
+  @@schema("public")
+}
+
 model ContactUs {
   id                   String   @id @default(uuid())
   first_name           String
@@ -1408,6 +1620,7 @@ model Document {
   offer_letter_template_snapshots OfferLetter[]            @relation("OfferLetterTemplateSnapshot")
   offer_draft_edited_html         Offer[]                  @relation("OfferDraftEditedHtml")
   application_fit_check_report    Application?             @relation("ApplicationFitCheckReportDocument")
+  consent_document_versions       ConsentDocumentVersion[]
 
   // Indexes
   @@index([candidate_id])
@@ -1476,6 +1689,7 @@ enum EvaluationType {
   TREADSPACE_FULL_AI
   EXTERNAL_AI_ASSISTED
   NON_AI_ASSISTED
+  IN_PERSON
 
   @@schema("public")
 }
@@ -1580,7 +1794,8 @@ model FitCheck {
   application_id         String?            @unique
   skills_analysis        Json?
   overall_analysis       Json?
-  overall_score          Float
+  /// Optional; new FitChecks from Orion omit a numeric score.
+  overall_score          Float?
   /// Free-text from Overall Analysis agent; preferred over recommendation Json.
   overall_recommendation String?
   /// Why `overall_score` is this value. Distinct from `overall_recommendation`.
@@ -2001,6 +2216,7 @@ model Interview {
   recording_url                 String?
   recording_document_id         String?           @unique
   evaluation_type               EvaluationType?   @default(TREADSPACE_AI_ASSISTED)
+  is_proctored                  Boolean           @default(false) @map("is_proctored")
   ai_assistance_mode            AiAssistanceMode? @default(ASSISTED)
   interview_status              InterviewStatus   @default(SCHEDULED)
   interview_platform            InterviewPlatform @default(TREADSPACE)
@@ -2013,6 +2229,9 @@ model Interview {
   final_feedback                Json?
   interview_analysis_ranges     Json?
   interview_flow_summary        String?
+  transcript_summary            String?
+  body_language_appropriate     Boolean?
+  tone_appropriate              Boolean?
   /// Extra Orion prose for downstream AI input (FitCheck, interview prep).
   /// Not interviewer-facing; omit from evidence GET / snapshots / Zoho.
   ai_context                    String?
@@ -2031,36 +2250,47 @@ model Interview {
   /// When final human feedback was submitted.
   evaluated_at                  DateTime?
 
+  /// Candidate invite response (legal consent in ConsentRecord).
+  candidate_status       String?   @default("INVITED")
+  candidate_responded_at DateTime?
+  decline_reason         String?
+  /// When this timestamp moves forward, prior INTERVIEW_SESSION consent grants are stale.
+  consent_epoch_at       DateTime  @default(now())
+
   /// Self-scheduling
-  reschedule_count          Int                @default(0)
+  reschedule_count          Int       @default(0)
   last_rescheduled_at       DateTime?
   first_assigned_at         DateTime?
   /// True while the candidate is waiting on recruiter action (typically a
   /// reassign) after they submitted alternate slots via "None match" /
   /// "Suggest times". Cleared whenever the recruiter routes a fresh
   /// request via `upsertInterviewRequestRecord`.
-  awaiting_recruiter_action Boolean            @default(false)
+  awaiting_recruiter_action Boolean   @default(false)
   /// Audit fields
-  created_at                DateTime           @default(now())
-  updated_at                DateTime           @updatedAt
+  created_at                DateTime  @default(now())
+  updated_at                DateTime  @updatedAt
   created_by                String
   updated_by                String
-  is_active                 Boolean            @default(true)
+  is_active                 Boolean   @default(true)
+
+  //interview proctoring
+  proctoringSession ProctoringSession?
+
   // Relations
-  candidate                 User?              @relation("CandidateInterviews", fields: [candidate_id], references: [id], onDelete: SetNull)
-  interviewer               User?              @relation("InterviewerInterviews", fields: [interviewer_id], references: [id], onDelete: SetNull)
-  organisation              Organisation?      @relation(fields: [organisation_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  recording_document        Document?          @relation(fields: [recording_document_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  job_description           JobDescription?    @relation(fields: [job_description_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  resume                    Resume             @relation(fields: [resume_id], references: [id], onDelete: Cascade, onUpdate: Cascade)
-  evaluation_plan           EvaluationPlan?    @relation(fields: [evaluation_plan_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  application               Application?       @relation(fields: [application_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  ongoing_evaluation        OngoingEvaluation?
-  transcripts               Transcript[]
-  suggestions               Suggestion[]
-  interviewNotes            InterviewNotes[]
-  liveAnalysis              LiveAnalysis[]
-  zoom_meeting              ZoomMeeting?
+  candidate          User?              @relation("CandidateInterviews", fields: [candidate_id], references: [id], onDelete: SetNull)
+  interviewer        User?              @relation("InterviewerInterviews", fields: [interviewer_id], references: [id], onDelete: SetNull)
+  organisation       Organisation?      @relation(fields: [organisation_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  recording_document Document?          @relation(fields: [recording_document_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  job_description    JobDescription?    @relation(fields: [job_description_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  resume             Resume             @relation(fields: [resume_id], references: [id], onDelete: Cascade, onUpdate: Cascade)
+  evaluation_plan    EvaluationPlan?    @relation(fields: [evaluation_plan_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  application        Application?       @relation(fields: [application_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  ongoing_evaluation OngoingEvaluation?
+  transcripts        Transcript[]
+  suggestions        Suggestion[]
+  interviewNotes     InterviewNotes[]
+  liveAnalysis       LiveAnalysis[]
+  zoom_meeting       ZoomMeeting?
 
   // Indexes
   @@index([candidate_id])
@@ -2509,46 +2739,47 @@ model JobDescription {
   closing_date                  DateTime?
   opened_at                     DateTime?
 
-  job_number               Int?
-  job_code                 String?                 @unique
+  job_number                                       Int?
+  job_code                                         String?                 @unique
   // Audit fields
-  created_at               DateTime                @default(now())
-  updated_at               DateTime                @updatedAt
-  created_by               String
-  updated_by               String
-  is_active                Boolean                 @default(true)
-  openings                 Int                     @default(1)
-  job_profile_id           String?
-  job_profile              JobProfile?             @relation(fields: [job_profile_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  organisation             Organisation            @relation(fields: [organisation_id], references: [id], onDelete: Cascade, onUpdate: Cascade)
-  department               Department?             @relation(fields: [department_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  source_document          Document?               @relation("SourceDocument", fields: [source_document_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  applications             Application[]
-  interviews               Interview[]
-  assignments              Assignment[]
-  fit_check                FitCheck[] //  one-to-many link
-  job_description_data     JobDescriptionData[] // one-to-many link
-  evaluationPlan           EvaluationPlan[] // relation to evaluation methods
-  ongoing_evaluations      OngoingEvaluation[] // optional one-to-many
-  assignment_library       AssignmentLibrary[]
-  approvals                Approval[] // one-to-many relation
-  resumes                  Resume[] // one-to-many link
-  budget                   Budget?
-  hiring_manager           User?                   @relation("HiringManager", fields: [hiring_manager_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  recruiters               User[]
-  transcripts              Transcript[]
-  integration_job_syncs    IntegrationJobSync[]
-  job_application_template JobApplicationTemplate?
-  offer_letter_templates   OfferLetterTemplate[]
-  offers                   Offer[]
-  conversations            Conversation[]
-  communication_messages   CommunicationMessage[]
+  created_at                                       DateTime                @default(now())
+  updated_at                                       DateTime                @updatedAt
+  created_by                                       String
+  updated_by                                       String
+  is_active                                        Boolean                 @default(true)
+  openings                                         Int                     @default(1)
+  restrict_candidate_upload_to_assigned_recruiters Boolean?
+  job_profile_id                                   String?
+  job_profile                                      JobProfile?             @relation(fields: [job_profile_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  organisation                                     Organisation            @relation(fields: [organisation_id], references: [id], onDelete: Cascade, onUpdate: Cascade)
+  department                                       Department?             @relation(fields: [department_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  source_document                                  Document?               @relation("SourceDocument", fields: [source_document_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  applications                                     Application[]
+  interviews                                       Interview[]
+  assignments                                      Assignment[]
+  fit_check                                        FitCheck[] //  one-to-many link
+  job_description_data                             JobDescriptionData[] // one-to-many link
+  evaluationPlan                                   EvaluationPlan[] // relation to evaluation methods
+  ongoing_evaluations                              OngoingEvaluation[] // optional one-to-many
+  assignment_library                               AssignmentLibrary[]
+  approvals                                        Approval[] // one-to-many relation
+  resumes                                          Resume[] // one-to-many link
+  budget                                           Budget?
+  hiring_manager                                   User?                   @relation("HiringManager", fields: [hiring_manager_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  recruiters                                       User[]
+  transcripts                                      Transcript[]
+  integration_job_syncs                            IntegrationJobSync[]
+  job_application_template                         JobApplicationTemplate?
+  offer_letter_templates                           OfferLetterTemplate[]
+  offers                                           Offer[]
+  conversations                                    Conversation[]
+  communication_messages                           CommunicationMessage[]
   /// Plan line this opening is committed against (requisition → plan).
-  hiring_plan_line_id      String?
-  hiring_plan_line         HiringPlanLine?         @relation("PlanLineRequisitions", fields: [hiring_plan_line_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  hiring_plan_line_id                              String?
+  hiring_plan_line                                 HiringPlanLine?         @relation("PlanLineRequisitions", fields: [hiring_plan_line_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
   /// Plan lines that use this JD as the role template/reference.
-  referenced_by_plan_lines HiringPlanLine[]        @relation("PlanLineTemplateJd")
-  linked_hiring_units      PurchasedHiringUnit[]
+  referenced_by_plan_lines                         HiringPlanLine[]        @relation("PlanLineTemplateJd")
+  linked_hiring_units                              PurchasedHiringUnit[]
 
   @@index([organisation_id])
   @@index([hiring_manager_id])
@@ -3530,73 +3761,79 @@ enum HiringUnitAssignmentScope {
 }
 
 model Organisation {
-  id                            String                       @id @default(uuid())
-  name                          String                       @unique
-  industry                      String
-  about                         String
-  website                       String
-  size                          OrganisationSize             @default(ONE_TO_TEN)
-  phone                         String
-  address                       String
-  company_values                Json[]
-  allowed_email_domains         String[]
-  send_email                    Boolean                      @default(true)
-  interviewers                  User[]
-  created_at                    DateTime                     @default(now())
-  updated_at                    DateTime                     @updatedAt
-  created_by                    String
-  updated_by                    String
-  is_active                     Boolean                      @default(true)
-  alias                         String?                      @unique
-  logo                          String?
-  job_sequence                  Int                          @default(1)
-  employee_sequence             Int                          @default(1)
-  applications                  Application[]
-  user_roles                    UserRole[]
-  job_descriptions              JobDescription[]
-  job_profiles                  JobProfile[]
-  assessment_library            AssessmentLibrary[]
-  assignment_library            AssignmentLibrary[]
-  interviews                    Interview[]
-  assignments                   Assignment[]
-  fit_check                     FitCheck[] //  one-to-many link
-  resumes                       Resume[] // one-to-many link
-  approvals                     Approval[] // one-to-many link
-  suggestions                   Suggestion[]
-  ongoing_evaluations           OngoingEvaluation[] // optional one-to-many
-  actions                       Action[]
-  integration_credentials       IntegrationCredential[]
-  zoho_sync_mappings            ZohoSyncMapping[]
-  assessments                   Assessment[]
-  timezone                      String                       @default("Asia/Kolkata")
+  id                                     String                       @id @default(uuid())
+  name                                   String                       @unique
+  industry                               String
+  about                                  String
+  website                                String
+  size                                   OrganisationSize             @default(ONE_TO_TEN)
+  phone                                  String
+  address                                String
+  company_values                         Json[]
+  allowed_email_domains                  String[]
+  send_email                             Boolean                      @default(true)
+  interviewers                           User[]
+  created_at                             DateTime                     @default(now())
+  updated_at                             DateTime                     @updatedAt
+  created_by                             String
+  updated_by                             String
+  is_active                              Boolean                      @default(true)
+  alias                                  String?                      @unique
+  logo                                   String?
+  job_sequence                           Int                          @default(1)
+  employee_sequence                      Int                          @default(1)
+  applications                           Application[]
+  user_roles                             UserRole[]
+  job_descriptions                       JobDescription[]
+  job_profiles                           JobProfile[]
+  assessment_library                     AssessmentLibrary[]
+  assignment_library                     AssignmentLibrary[]
+  interviews                             Interview[]
+  assignments                            Assignment[]
+  fit_check                              FitCheck[] //  one-to-many link
+  resumes                                Resume[] // one-to-many link
+  approvals                              Approval[] // one-to-many link
+  suggestions                            Suggestion[]
+  ongoing_evaluations                    OngoingEvaluation[] // optional one-to-many
+  actions                                Action[]
+  integration_credentials                IntegrationCredential[]
+  zoho_sync_mappings                     ZohoSyncMapping[]
+  assessments                            Assessment[]
+  timezone                               String                       @default("Asia/Kolkata")
   /// ISO 3166-1 alpha-2 (e.g. IN).
-  country_code                  String                       @default("IN")
+  country_code                           String                       @default("IN")
   /// Who may consume unused hiring units. Does not rewrite unit rows when changed.
-  hiring_unit_assignment_scope  HiringUnitAssignmentScope    @default(DEPARTMENT)
-  organisation_configs          OrganisationConfig[]
-  activity_events               ActivityEvent[]
-  usage_ledger_entries          UsageLedgerEntry[]
-  usage_aggregates              UsageAggregate[]
-  channel_provider_configs      ChannelProviderConfig[]
-  conversations                 Conversation[]
-  communication_messages        CommunicationMessage[]
-  job_application_fields        JobApplicationField[]
-  documents                     Document[]
-  job_application_templates     JobApplicationTemplate[]
-  offer_letter_templates        OfferLetterTemplate[]
-  offers                        Offer[]
-  sources                       Source[]
-  evaluation_criteria           EvaluationCriteria[]
-  departments                   Department[]
-  hiring_plans                  HiringPlan[]
-  employees                     Employee[]
-  competency_dictionaries       CompetencyDictionary[]
-  purchased_license_packages    PurchasedLicensePackage[]
-  purchased_hiring_units        PurchasedHiringUnit[]
-  purchased_top_ups             PurchasedTopUp[]
-  licensing_ledger_entries      LicensingLedgerEntry[]
-  license_package_organisations LicensePackageOrganisation[]
-  ai_cost_ledger_entries        AiCostLedgerEntry[]
+  hiring_unit_assignment_scope           HiringUnitAssignmentScope    @default(DEPARTMENT)
+  organisation_configs                   OrganisationConfig[]
+  activity_events                        ActivityEvent[]
+  usage_ledger_entries                   UsageLedgerEntry[]
+  usage_aggregates                       UsageAggregate[]
+  channel_provider_configs               ChannelProviderConfig[]
+  conversations                          Conversation[]
+  communication_messages                 CommunicationMessage[]
+  job_application_fields                 JobApplicationField[]
+  documents                              Document[]
+  job_application_templates              JobApplicationTemplate[]
+  offer_letter_templates                 OfferLetterTemplate[]
+  offers                                 Offer[]
+  sources                                Source[]
+  evaluation_criteria                    EvaluationCriteria[]
+  departments                            Department[]
+  hiring_plans                           HiringPlan[]
+  employees                              Employee[]
+  competency_dictionaries                CompetencyDictionary[]
+  purchased_license_packages             PurchasedLicensePackage[]
+  purchased_hiring_units                 PurchasedHiringUnit[]
+  purchased_top_ups                      PurchasedTopUp[]
+  licensing_ledger_entries               LicensingLedgerEntry[]
+  license_package_organisations          LicensePackageOrganisation[]
+  ai_cost_ledger_entries                 AiCostLedgerEntry[]
+  consent_documents                      ConsentDocument[]
+  /// Deprecated — migrate to org-scoped ConsentDocument; kept for legacy S3 fallback until backfill completes
+  has_custom_consent                     Boolean                      @default(false)
+  consent_s3_bucket                      String?
+  consent_s3_region                      String?
+  custom_interview_consent_s3_key_prefix String?
 
   @@index([name])
   @@schema("public")
@@ -3702,6 +3939,125 @@ model PipelineDistributionAnalyticsDaily {
   @@schema("analytics")
 }
 
+enum RiskLevel {
+  LOW
+  MEDIUM
+  HIGH
+  CRITICAL
+
+  @@schema("public")
+}
+
+enum AnalysisStatus {
+  QUEUED
+  RUNNING
+  COMPLETED
+  FAILED
+
+  @@schema("public")
+}
+
+enum ProctoringEventType {
+  GAZE_DISRUPTION
+  OBJECT_DETECTED
+  FACE_MISSING
+  MULTIPLE_FACES
+  BROWSER_TAB_SWITCH
+  BROWSER_BLUR
+  FULLSCREEN_EXIT
+
+  @@schema("public")
+}
+
+enum ProctoringSessionStatus {
+  NOT_STARTED
+  CALIBRATING
+  CALIBRATED
+  PROCESSING
+  COMPLETED
+  FAILED
+
+  @@schema("public")
+}
+
+model ProctoringSession {
+  id          String    @id @default(uuid()) @map("id")
+  interviewId String    @unique @map("interview_id")
+  interview   Interview @relation(fields: [interviewId], references: [id], onDelete: Cascade)
+
+  // Proctoring Lifecycle & Media
+  status              ProctoringSessionStatus @default(NOT_STARTED) @map("status")
+  calibrationFeatures Json?                   @map("calibration_features")
+  chunkCount          Int                     @default(0) @map("chunk_count")
+  completedChunks     Int                     @default(0) @map("completed_chunks")
+
+  // High-Level Aggregated Metrics for Downstream AI Evaluation
+  overallRisk    RiskLevel @default(LOW) @map("overall_risk")
+  integrityScore Float     @default(100.0) @map("integrity_score")
+
+  totalDurationSec Float  @default(0.0) @map("total_duration_sec")
+  faceDetectedPct  Float? @map("face_detected_pct")
+  onScreenGazePct  Float? @map("on_screen_gaze_pct")
+
+  // Event Counters
+  totalGazeEvents    Int @default(0) @map("total_gaze_events")
+  totalObjectEvents  Int @default(0) @map("total_object_events")
+  totalFaceEvents    Int @default(0) @map("total_face_events")
+  totalBrowserEvents Int @default(0) @map("total_browser_events")
+
+  createdAt DateTime @default(now()) @map("created_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
+
+  analyses ProctoringAnalysis[]
+  events   ProctoringEvent[]
+
+  @@map("proctoring_sessions")
+  @@schema("public")
+}
+
+model ProctoringAnalysis {
+  id        String            @id @default(uuid()) @map("id")
+  sessionId String            @map("session_id")
+  session   ProctoringSession @relation(fields: [sessionId], references: [id], onDelete: Cascade)
+
+  status AnalysisStatus @default(QUEUED)
+
+  chunkIndex   Int   @default(0) @map("chunk_index")
+  startTimeSec Float @default(0.0) @map("start_time_sec")
+  endTimeSec   Float @default(0.0) @map("end_time_sec")
+
+  videoKey     String? @map("video_key")
+  annotatedKey String? @map("annotated_key")
+
+  error     String?
+  createdAt DateTime @default(now()) @map("created_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
+
+  @@unique([sessionId, chunkIndex])
+  @@map("proctoring_analyses")
+  @@schema("public")
+}
+
+model ProctoringEvent {
+  id        String            @id @default(uuid()) @map("id")
+  sessionId String            @map("session_id")
+  session   ProctoringSession @relation(fields: [sessionId], references: [id], onDelete: Cascade)
+
+  eventType    ProctoringEventType @map("event_type")
+  timestampSec Float               @map("timestamp_sec")
+  timestampStr String              @map("timestamp_str")
+
+  risk     RiskLevel @default(LOW)
+  metadata Json?
+
+  createdAt DateTime @default(now()) @map("created_at")
+
+  @@index([sessionId, timestampSec])
+  @@index([sessionId, eventType])
+  @@map("proctoring_events")
+  @@schema("public")
+}
+
 enum AsyncOperationStatus {
   PENDING
   IN_PROGRESS
@@ -4510,8 +4866,13 @@ model User {
   employee_number Int?
   employee_code   String? @unique
 
-  department_members    DepartmentMember[]    @relation("DepartmentMemberships")
-  assigned_hiring_units PurchasedHiringUnit[] @relation("AssignedHiringUnits")
+  department_members               DepartmentMember[]               @relation("DepartmentMemberships")
+  assigned_hiring_units            PurchasedHiringUnit[]            @relation("AssignedHiringUnits")
+  consent_records                  ConsentRecord[]
+  consent_versions_published       ConsentDocumentVersion[]         @relation("ConsentVersionPublishedBy")
+  consent_version_approval_actions ConsentDocumentVersionApproval[] @relation("ConsentVersionApprovalActor")
+  erasure_requests_as_subject      DataErasureRequest[]             @relation("ErasureSubjectUser")
+  erasure_requests_requested       DataErasureRequest[]             @relation("ErasureRequestedByUser")
 
   @@index([role_id])
   @@index([permission_id])