@adaptware/eagles-db 0.6.1 → 0.6.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adaptware/eagles-db",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "description": "A Prisma client package for Treadspace database operations",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/prisma/schema/consent.prisma

@@ -3,6 +3,8 @@
 enum ConsentType {
   PLATFORM_TERMS
   INTERVIEW_SESSION
+  /// Read-only catalog document; no ConsentRecord submit flow
+  PRIVACY_POLICY
 
   @@schema("public")
 }
@@ -47,34 +49,88 @@ enum DataErasureRequestStatus {
   @@schema("public")
 }
 
-model ConsentDocument {
-  id           String       @id @default(uuid())
-  /// Stable key, e.g. PLATFORM_TERMS, INTERVIEW_SESSION_DEFAULT
-  slug         String       @unique
-  consent_type ConsentType
-  is_active    Boolean      @default(true)
-  created_at   DateTime     @default(now())
-  updated_at   DateTime     @updatedAt
-  versions     ConsentDocumentVersion[]
+/// Lifecycle for org-managed legal versions (platform seed publishes as PUBLISHED immediately).
+enum ConsentCatalogVersionStatus {
+  DRAFT
+  PUBLISHED
+  ARCHIVED
+  /// Emergency takedown — grants blocked even during manifest grace window
+  REVOKED
 
   @@schema("public")
 }
 
+model ConsentDocument {
+  id              String       @id @default(uuid())
+  /// Stable key within scope — platform: `platform_terms`, org interview: `interview_session`
+  slug            String
+  consent_type    ConsentType
+  /// Null = platform-wide catalog row; set = tenant-specific overlay (v1: interview session notice)
+  organisation_id String?
+  organisation    Organisation? @relation(fields: [organisation_id], references: [id], onDelete: Cascade)
+  display_name    String?
+  is_active       Boolean      @default(true)
+  created_at      DateTime     @default(now())
+  updated_at      DateTime     @updatedAt
+  versions        ConsentDocumentVersion[]
+
+  @@unique([organisation_id, slug])
+  @@index([consent_type, organisation_id, is_active])
+  @@schema("public")
+}
+
 model ConsentDocumentVersion {
-  id              String   @id @default(uuid())
-  document_id     String
-  document        ConsentDocument @relation(fields: [document_id], references: [id], onDelete: Cascade)
-  version_number  Int
-  content_hash    String
-  locale          String   @default("en")
-  content         String   @db.Text
-  published_at    DateTime?
-  created_at      DateTime @default(now())
-  checkboxes      ConsentCheckboxDefinition[]
-  consent_records ConsentRecord[]
+  id                     String   @id @default(uuid())
+  document_id            String
+  document               ConsentDocument @relation(fields: [document_id], references: [id], onDelete: Cascade)
+  version_number         Int
+  content_hash           String
+  locale                 String   @default("en")
+  /// Legacy inline body; new versions use S3 template fields
+  content                String?  @db.Text
+  template_version_label String?
+  s3_bucket              String?
+  /// Legacy single key; prefer s3_archive_key + s3_active_key
+  s3_key                 String?
+  s3_region              String?
+  /// Immutable snapshot path (audit binding)
+  s3_archive_key         String?
+  /// Read-optimized current copy under active/
+  s3_active_key          String?
+  /// Decision 6 — immutable archive row in shared Document catalog
+  s3_document_id         String?
+  s3_document            Document? @relation(fields: [s3_document_id], references: [id], onDelete: SetNull)
+  status                 ConsentCatalogVersionStatus @default(PUBLISHED)
+  published_at           DateTime?
+  published_by_id        String?
+  published_by           User?    @relation("ConsentVersionPublishedBy", fields: [published_by_id], references: [id], onDelete: SetNull)
+  approval_notes         String?  @db.Text
+  supersedes_version_id  String?
+  supersedes_version     ConsentDocumentVersion? @relation("ConsentVersionSupersedes", fields: [supersedes_version_id], references: [id], onDelete: SetNull)
+  superseded_by          ConsentDocumentVersion[] @relation("ConsentVersionSupersedes")
+  created_at             DateTime @default(now())
+  checkboxes             ConsentCheckboxDefinition[]
+  consent_records        ConsentRecord[]
+  system_consent_epochs  SystemConsentEpoch[]
+  version_approvals      ConsentDocumentVersionApproval[]
 
   @@unique([document_id, version_number])
   @@index([document_id, published_at(sort: Desc)])
+  @@index([s3_document_id])
+  @@schema("public")
+}
+
+model ConsentDocumentVersionApproval {
+  id                  String               @id @default(uuid())
+  document_version_id String
+  document_version    ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Cascade)
+  action              String
+  actor_user_id       String?
+  actor_user          User?                @relation("ConsentVersionApprovalActor", fields: [actor_user_id], references: [id], onDelete: SetNull)
+  notes               String?              @db.Text
+  created_at          DateTime             @default(now())
+
+  @@index([document_version_id, created_at(sort: Desc)])
   @@schema("public")
 }
 
@@ -93,26 +149,45 @@ model ConsentCheckboxDefinition {
 }
 
 model ConsentRecord {
-  id                  String                @id @default(uuid())
-  user_id             String
-  user                User                  @relation(fields: [user_id], references: [id], onDelete: Cascade)
-  consent_type        ConsentType
-  outcome             ConsentOutcome
-  document_version_id String
-  document_version    ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Restrict)
-  selections          Json                  @default("{}")
-  reference_type      ConsentReferenceType?
-  reference_id        String?
-  ip_address          String?
-  user_agent          String?
-  decline_reason      String?
-  created_at          DateTime              @default(now())
+  id                     String                @id @default(uuid())
+  user_id                String
+  user                   User                  @relation(fields: [user_id], references: [id], onDelete: Cascade)
+  consent_type           ConsentType
+  outcome                ConsentOutcome
+  document_version_id    String
+  document_version       ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Restrict)
+  template_version_label String?
+  context_snapshot       Json?
+  selections             Json                  @default("{}")
+  reference_type         ConsentReferenceType?
+  reference_id           String?
+  ip_address             String?
+  user_agent             String?
+  decline_reason         String?
+  /// Copy of version s3_archive_key (or legacy s3_key) at grant time
+  storage_snapshot_key   String?
+  content_hash_at_grant  String?
+  created_at             DateTime              @default(now())
 
   @@index([user_id, consent_type, created_at(sort: Desc)])
   @@index([reference_type, reference_id, consent_type, created_at(sort: Desc)])
   @@schema("public")
 }
 
+/// Platform-wide re-consent watermark (complements per-interview consent_epoch_at).
+model SystemConsentEpoch {
+  id                  String                  @id @default(uuid())
+  consent_type        ConsentType
+  epoch_at            DateTime                @default(now())
+  document_version_id String?
+  document_version    ConsentDocumentVersion? @relation(fields: [document_version_id], references: [id], onDelete: SetNull)
+  reason              String?
+  created_at          DateTime                @default(now())
+
+  @@index([consent_type, epoch_at(sort: Desc)])
+  @@schema("public")
+}
+
 /// Append-only erasure plan snapshots (v1: DRY_RUN only in application code).
 model DataErasureRequest {
   id               String                   @id @default(uuid())

package/prisma/schema/document.prisma

@@ -38,6 +38,7 @@ model Document {
     offer_letter_template_snapshots OfferLetter[]            @relation("OfferLetterTemplateSnapshot")
     offer_draft_edited_html         Offer[]                  @relation("OfferDraftEditedHtml")
     application_fit_check_report    Application?             @relation("ApplicationFitCheckReportDocument")
+    consent_document_versions       ConsentDocumentVersion[]
 
     // Indexes
     @@index([candidate_id])

package/prisma/schema/migrations/20261006120000_add_jd_restrict_candidate_upload/migration.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "JobDescription"
+ADD COLUMN IF NOT EXISTS "restrict_candidate_upload_to_assigned_recruiters" BOOLEAN;

package/prisma/schema/organisation.prisma

@@ -85,6 +85,12 @@ model Organisation {
   licensing_ledger_entries       LicensingLedgerEntry[]
   license_package_organisations  LicensePackageOrganisation[]
   ai_cost_ledger_entries         AiCostLedgerEntry[]
+  consent_documents              ConsentDocument[]
+  /// Deprecated — migrate to org-scoped ConsentDocument; kept for legacy S3 fallback until backfill completes
+  has_custom_consent             Boolean @default(false)
+  consent_s3_bucket              String?
+  consent_s3_region              String?
+  custom_interview_consent_s3_key_prefix String?
 
   @@index([name])
   @@schema("public")

package/prisma/schema/user.prisma

@@ -104,6 +104,8 @@ model User {
   department_members     DepartmentMember[]      @relation("DepartmentMemberships")
   assigned_hiring_units  PurchasedHiringUnit[]   @relation("AssignedHiringUnits")
   consent_records        ConsentRecord[]
+  consent_versions_published  ConsentDocumentVersion[] @relation("ConsentVersionPublishedBy")
+  consent_version_approval_actions ConsentDocumentVersionApproval[] @relation("ConsentVersionApprovalActor")
   erasure_requests_as_subject DataErasureRequest[] @relation("ErasureSubjectUser")
   erasure_requests_requested  DataErasureRequest[] @relation("ErasureRequestedByUser")
 

package/prisma/migrations/20260519120000_migrate_shortlisted_to_selected/migration.sql

@@ -1,2 +0,0 @@
--- Migrate legacy terminal-positive status to SELECTED (SHORTLISTED enum value retained but unused).
-UPDATE applications SET status = 'SELECTED' WHERE status = 'SHORTLISTED';