@adaptware/eagles-db 0.6.2 → 0.6.3

package/client/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "prisma-client-eebffb0499b35f12bacd8d35ebf5cc1c9baa338e0b0022df3ae85f389451d7e6",
+  "name": "prisma-client-db1234d0157131c2946806471e92bfc81687b8c6cdebc98ad1f3994ad413a64b",
   "main": "index.js",
   "types": "index.d.ts",
   "browser": "default.js",

package/client/schema.prisma

@@ -1253,6 +1253,8 @@ model CompetencyDictionary {
 enum ConsentType {
   PLATFORM_TERMS
   INTERVIEW_SESSION
+  /// Read-only catalog document; no ConsentRecord submit flow
+  PRIVACY_POLICY
 
   @@schema("public")
 }
@@ -1297,34 +1299,88 @@ enum DataErasureRequestStatus {
   @@schema("public")
 }
 
+/// Lifecycle for org-managed legal versions (platform seed publishes as PUBLISHED immediately).
+enum ConsentCatalogVersionStatus {
+  DRAFT
+  PUBLISHED
+  ARCHIVED
+  /// Emergency takedown — grants blocked even during manifest grace window
+  REVOKED
+
+  @@schema("public")
+}
+
 model ConsentDocument {
-  id           String                   @id @default(uuid())
-  /// Stable key, e.g. PLATFORM_TERMS, INTERVIEW_SESSION_DEFAULT
-  slug         String                   @unique
-  consent_type ConsentType
-  is_active    Boolean                  @default(true)
-  created_at   DateTime                 @default(now())
-  updated_at   DateTime                 @updatedAt
-  versions     ConsentDocumentVersion[]
+  id              String                   @id @default(uuid())
+  /// Stable key within scope — platform: `platform_terms`, org interview: `interview_session`
+  slug            String
+  consent_type    ConsentType
+  /// Null = platform-wide catalog row; set = tenant-specific overlay (v1: interview session notice)
+  organisation_id String?
+  organisation    Organisation?            @relation(fields: [organisation_id], references: [id], onDelete: Cascade)
+  display_name    String?
+  is_active       Boolean                  @default(true)
+  created_at      DateTime                 @default(now())
+  updated_at      DateTime                 @updatedAt
+  versions        ConsentDocumentVersion[]
 
+  @@unique([organisation_id, slug])
+  @@index([consent_type, organisation_id, is_active])
   @@schema("public")
 }
 
 model ConsentDocumentVersion {
-  id              String                      @id @default(uuid())
-  document_id     String
-  document        ConsentDocument             @relation(fields: [document_id], references: [id], onDelete: Cascade)
-  version_number  Int
-  content_hash    String
-  locale          String                      @default("en")
-  content         String                      @db.Text
-  published_at    DateTime?
-  created_at      DateTime                    @default(now())
-  checkboxes      ConsentCheckboxDefinition[]
-  consent_records ConsentRecord[]
+  id                     String                           @id @default(uuid())
+  document_id            String
+  document               ConsentDocument                  @relation(fields: [document_id], references: [id], onDelete: Cascade)
+  version_number         Int
+  content_hash           String
+  locale                 String                           @default("en")
+  /// Legacy inline body; new versions use S3 template fields
+  content                String?                          @db.Text
+  template_version_label String?
+  s3_bucket              String?
+  /// Legacy single key; prefer s3_archive_key + s3_active_key
+  s3_key                 String?
+  s3_region              String?
+  /// Immutable snapshot path (audit binding)
+  s3_archive_key         String?
+  /// Read-optimized current copy under active/
+  s3_active_key          String?
+  /// Decision 6 — immutable archive row in shared Document catalog
+  s3_document_id         String?
+  s3_document            Document?                        @relation(fields: [s3_document_id], references: [id], onDelete: SetNull)
+  status                 ConsentCatalogVersionStatus      @default(PUBLISHED)
+  published_at           DateTime?
+  published_by_id        String?
+  published_by           User?                            @relation("ConsentVersionPublishedBy", fields: [published_by_id], references: [id], onDelete: SetNull)
+  approval_notes         String?                          @db.Text
+  supersedes_version_id  String?
+  supersedes_version     ConsentDocumentVersion?          @relation("ConsentVersionSupersedes", fields: [supersedes_version_id], references: [id], onDelete: SetNull)
+  superseded_by          ConsentDocumentVersion[]         @relation("ConsentVersionSupersedes")
+  created_at             DateTime                         @default(now())
+  checkboxes             ConsentCheckboxDefinition[]
+  consent_records        ConsentRecord[]
+  system_consent_epochs  SystemConsentEpoch[]
+  version_approvals      ConsentDocumentVersionApproval[]
 
   @@unique([document_id, version_number])
   @@index([document_id, published_at(sort: Desc)])
+  @@index([s3_document_id])
+  @@schema("public")
+}
+
+model ConsentDocumentVersionApproval {
+  id                  String                 @id @default(uuid())
+  document_version_id String
+  document_version    ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Cascade)
+  action              String
+  actor_user_id       String?
+  actor_user          User?                  @relation("ConsentVersionApprovalActor", fields: [actor_user_id], references: [id], onDelete: SetNull)
+  notes               String?                @db.Text
+  created_at          DateTime               @default(now())
+
+  @@index([document_version_id, created_at(sort: Desc)])
   @@schema("public")
 }
 
@@ -1343,26 +1399,45 @@ model ConsentCheckboxDefinition {
 }
 
 model ConsentRecord {
-  id                  String                 @id @default(uuid())
-  user_id             String
-  user                User                   @relation(fields: [user_id], references: [id], onDelete: Cascade)
-  consent_type        ConsentType
-  outcome             ConsentOutcome
-  document_version_id String
-  document_version    ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Restrict)
-  selections          Json                   @default("{}")
-  reference_type      ConsentReferenceType?
-  reference_id        String?
-  ip_address          String?
-  user_agent          String?
-  decline_reason      String?
-  created_at          DateTime               @default(now())
+  id                     String                 @id @default(uuid())
+  user_id                String
+  user                   User                   @relation(fields: [user_id], references: [id], onDelete: Cascade)
+  consent_type           ConsentType
+  outcome                ConsentOutcome
+  document_version_id    String
+  document_version       ConsentDocumentVersion @relation(fields: [document_version_id], references: [id], onDelete: Restrict)
+  template_version_label String?
+  context_snapshot       Json?
+  selections             Json                   @default("{}")
+  reference_type         ConsentReferenceType?
+  reference_id           String?
+  ip_address             String?
+  user_agent             String?
+  decline_reason         String?
+  /// Copy of version s3_archive_key (or legacy s3_key) at grant time
+  storage_snapshot_key   String?
+  content_hash_at_grant  String?
+  created_at             DateTime               @default(now())
 
   @@index([user_id, consent_type, created_at(sort: Desc)])
   @@index([reference_type, reference_id, consent_type, created_at(sort: Desc)])
   @@schema("public")
 }
 
+/// Platform-wide re-consent watermark (complements per-interview consent_epoch_at).
+model SystemConsentEpoch {
+  id                  String                  @id @default(uuid())
+  consent_type        ConsentType
+  epoch_at            DateTime                @default(now())
+  document_version_id String?
+  document_version    ConsentDocumentVersion? @relation(fields: [document_version_id], references: [id], onDelete: SetNull)
+  reason              String?
+  created_at          DateTime                @default(now())
+
+  @@index([consent_type, epoch_at(sort: Desc)])
+  @@schema("public")
+}
+
 /// Append-only erasure plan snapshots (v1: DRY_RUN only in application code).
 model DataErasureRequest {
   id              String                   @id @default(uuid())
@@ -1545,6 +1620,7 @@ model Document {
   offer_letter_template_snapshots OfferLetter[]            @relation("OfferLetterTemplateSnapshot")
   offer_draft_edited_html         Offer[]                  @relation("OfferDraftEditedHtml")
   application_fit_check_report    Application?             @relation("ApplicationFitCheckReportDocument")
+  consent_document_versions       ConsentDocumentVersion[]
 
   // Indexes
   @@index([candidate_id])
@@ -1982,7 +2058,6 @@ enum IntegrationProvider {
   MICROSOFT
   ZOOM
   CALENDLY
-  RAZORPAY
 
   @@schema("public")
 }
@@ -2664,46 +2739,47 @@ model JobDescription {
   closing_date                  DateTime?
   opened_at                     DateTime?
 
-  job_number               Int?
-  job_code                 String?                 @unique
+  job_number                                       Int?
+  job_code                                         String?                 @unique
   // Audit fields
-  created_at               DateTime                @default(now())
-  updated_at               DateTime                @updatedAt
-  created_by               String
-  updated_by               String
-  is_active                Boolean                 @default(true)
-  openings                 Int                     @default(1)
-  job_profile_id           String?
-  job_profile              JobProfile?             @relation(fields: [job_profile_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  organisation             Organisation            @relation(fields: [organisation_id], references: [id], onDelete: Cascade, onUpdate: Cascade)
-  department               Department?             @relation(fields: [department_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  source_document          Document?               @relation("SourceDocument", fields: [source_document_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  applications             Application[]
-  interviews               Interview[]
-  assignments              Assignment[]
-  fit_check                FitCheck[] //  one-to-many link
-  job_description_data     JobDescriptionData[] // one-to-many link
-  evaluationPlan           EvaluationPlan[] // relation to evaluation methods
-  ongoing_evaluations      OngoingEvaluation[] // optional one-to-many
-  assignment_library       AssignmentLibrary[]
-  approvals                Approval[] // one-to-many relation
-  resumes                  Resume[] // one-to-many link
-  budget                   Budget?
-  hiring_manager           User?                   @relation("HiringManager", fields: [hiring_manager_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
-  recruiters               User[]
-  transcripts              Transcript[]
-  integration_job_syncs    IntegrationJobSync[]
-  job_application_template JobApplicationTemplate?
-  offer_letter_templates   OfferLetterTemplate[]
-  offers                   Offer[]
-  conversations            Conversation[]
-  communication_messages   CommunicationMessage[]
+  created_at                                       DateTime                @default(now())
+  updated_at                                       DateTime                @updatedAt
+  created_by                                       String
+  updated_by                                       String
+  is_active                                        Boolean                 @default(true)
+  openings                                         Int                     @default(1)
+  restrict_candidate_upload_to_assigned_recruiters Boolean?
+  job_profile_id                                   String?
+  job_profile                                      JobProfile?             @relation(fields: [job_profile_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  organisation                                     Organisation            @relation(fields: [organisation_id], references: [id], onDelete: Cascade, onUpdate: Cascade)
+  department                                       Department?             @relation(fields: [department_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  source_document                                  Document?               @relation("SourceDocument", fields: [source_document_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  applications                                     Application[]
+  interviews                                       Interview[]
+  assignments                                      Assignment[]
+  fit_check                                        FitCheck[] //  one-to-many link
+  job_description_data                             JobDescriptionData[] // one-to-many link
+  evaluationPlan                                   EvaluationPlan[] // relation to evaluation methods
+  ongoing_evaluations                              OngoingEvaluation[] // optional one-to-many
+  assignment_library                               AssignmentLibrary[]
+  approvals                                        Approval[] // one-to-many relation
+  resumes                                          Resume[] // one-to-many link
+  budget                                           Budget?
+  hiring_manager                                   User?                   @relation("HiringManager", fields: [hiring_manager_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  recruiters                                       User[]
+  transcripts                                      Transcript[]
+  integration_job_syncs                            IntegrationJobSync[]
+  job_application_template                         JobApplicationTemplate?
+  offer_letter_templates                           OfferLetterTemplate[]
+  offers                                           Offer[]
+  conversations                                    Conversation[]
+  communication_messages                           CommunicationMessage[]
   /// Plan line this opening is committed against (requisition → plan).
-  hiring_plan_line_id      String?
-  hiring_plan_line         HiringPlanLine?         @relation("PlanLineRequisitions", fields: [hiring_plan_line_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  hiring_plan_line_id                              String?
+  hiring_plan_line                                 HiringPlanLine?         @relation("PlanLineRequisitions", fields: [hiring_plan_line_id], references: [id], onDelete: SetNull, onUpdate: Cascade)
   /// Plan lines that use this JD as the role template/reference.
-  referenced_by_plan_lines HiringPlanLine[]        @relation("PlanLineTemplateJd")
-  linked_hiring_units      PurchasedHiringUnit[]
+  referenced_by_plan_lines                         HiringPlanLine[]        @relation("PlanLineTemplateJd")
+  linked_hiring_units                              PurchasedHiringUnit[]
 
   @@index([organisation_id])
   @@index([hiring_manager_id])
@@ -3685,75 +3761,79 @@ enum HiringUnitAssignmentScope {
 }
 
 model Organisation {
-  id                            String                       @id @default(uuid())
-  name                          String                       @unique
-  industry                      String
-  about                         String
-  website                       String
-  size                          OrganisationSize             @default(ONE_TO_TEN)
-  phone                         String
-  address                       String
-  company_values                Json[]
-  allowed_email_domains         String[]
-  send_email                    Boolean                      @default(true)
-  interviewers                  User[]
-  created_at                    DateTime                     @default(now())
-  updated_at                    DateTime                     @updatedAt
-  created_by                    String
-  updated_by                    String
-  is_active                     Boolean                      @default(true)
-  alias                         String?                      @unique
-  logo                          String?
-  job_sequence                  Int                          @default(1)
-  employee_sequence             Int                          @default(1)
-  applications                  Application[]
-  user_roles                    UserRole[]
-  job_descriptions              JobDescription[]
-  job_profiles                  JobProfile[]
-  assessment_library            AssessmentLibrary[]
-  assignment_library            AssignmentLibrary[]
-  interviews                    Interview[]
-  assignments                   Assignment[]
-  fit_check                     FitCheck[] //  one-to-many link
-  resumes                       Resume[] // one-to-many link
-  approvals                     Approval[] // one-to-many link
-  suggestions                   Suggestion[]
-  ongoing_evaluations           OngoingEvaluation[] // optional one-to-many
-  actions                       Action[]
-  integration_credentials       IntegrationCredential[]
-  zoho_sync_mappings            ZohoSyncMapping[]
-  assessments                   Assessment[]
-  timezone                      String                       @default("Asia/Kolkata")
+  id                                     String                       @id @default(uuid())
+  name                                   String                       @unique
+  industry                               String
+  about                                  String
+  website                                String
+  size                                   OrganisationSize             @default(ONE_TO_TEN)
+  phone                                  String
+  address                                String
+  company_values                         Json[]
+  allowed_email_domains                  String[]
+  send_email                             Boolean                      @default(true)
+  interviewers                           User[]
+  created_at                             DateTime                     @default(now())
+  updated_at                             DateTime                     @updatedAt
+  created_by                             String
+  updated_by                             String
+  is_active                              Boolean                      @default(true)
+  alias                                  String?                      @unique
+  logo                                   String?
+  job_sequence                           Int                          @default(1)
+  employee_sequence                      Int                          @default(1)
+  applications                           Application[]
+  user_roles                             UserRole[]
+  job_descriptions                       JobDescription[]
+  job_profiles                           JobProfile[]
+  assessment_library                     AssessmentLibrary[]
+  assignment_library                     AssignmentLibrary[]
+  interviews                             Interview[]
+  assignments                            Assignment[]
+  fit_check                              FitCheck[] //  one-to-many link
+  resumes                                Resume[] // one-to-many link
+  approvals                              Approval[] // one-to-many link
+  suggestions                            Suggestion[]
+  ongoing_evaluations                    OngoingEvaluation[] // optional one-to-many
+  actions                                Action[]
+  integration_credentials                IntegrationCredential[]
+  zoho_sync_mappings                     ZohoSyncMapping[]
+  assessments                            Assessment[]
+  timezone                               String                       @default("Asia/Kolkata")
   /// ISO 3166-1 alpha-2 (e.g. IN).
-  country_code                  String                       @default("IN")
+  country_code                           String                       @default("IN")
   /// Who may consume unused hiring units. Does not rewrite unit rows when changed.
-  hiring_unit_assignment_scope  HiringUnitAssignmentScope    @default(DEPARTMENT)
-  organisation_configs          OrganisationConfig[]
-  activity_events               ActivityEvent[]
-  usage_ledger_entries          UsageLedgerEntry[]
-  usage_aggregates              UsageAggregate[]
-  channel_provider_configs      ChannelProviderConfig[]
-  conversations                 Conversation[]
-  communication_messages        CommunicationMessage[]
-  job_application_fields        JobApplicationField[]
-  documents                     Document[]
-  job_application_templates     JobApplicationTemplate[]
-  offer_letter_templates        OfferLetterTemplate[]
-  offers                        Offer[]
-  sources                       Source[]
-  evaluation_criteria           EvaluationCriteria[]
-  departments                   Department[]
-  hiring_plans                  HiringPlan[]
-  employees                     Employee[]
-  competency_dictionaries       CompetencyDictionary[]
-  purchased_license_packages    PurchasedLicensePackage[]
-  purchased_hiring_units        PurchasedHiringUnit[]
-  purchased_top_ups             PurchasedTopUp[]
-  licensing_ledger_entries      LicensingLedgerEntry[]
-  license_package_organisations LicensePackageOrganisation[]
-  ai_cost_ledger_entries        AiCostLedgerEntry[]
-  billing_transactions          BillingTransaction[]
-  payment_webhook_events        PaymentWebhookEvent[]
+  hiring_unit_assignment_scope           HiringUnitAssignmentScope    @default(DEPARTMENT)
+  organisation_configs                   OrganisationConfig[]
+  activity_events                        ActivityEvent[]
+  usage_ledger_entries                   UsageLedgerEntry[]
+  usage_aggregates                       UsageAggregate[]
+  channel_provider_configs               ChannelProviderConfig[]
+  conversations                          Conversation[]
+  communication_messages                 CommunicationMessage[]
+  job_application_fields                 JobApplicationField[]
+  documents                              Document[]
+  job_application_templates              JobApplicationTemplate[]
+  offer_letter_templates                 OfferLetterTemplate[]
+  offers                                 Offer[]
+  sources                                Source[]
+  evaluation_criteria                    EvaluationCriteria[]
+  departments                            Department[]
+  hiring_plans                           HiringPlan[]
+  employees                              Employee[]
+  competency_dictionaries                CompetencyDictionary[]
+  purchased_license_packages             PurchasedLicensePackage[]
+  purchased_hiring_units                 PurchasedHiringUnit[]
+  purchased_top_ups                      PurchasedTopUp[]
+  licensing_ledger_entries               LicensingLedgerEntry[]
+  license_package_organisations          LicensePackageOrganisation[]
+  ai_cost_ledger_entries                 AiCostLedgerEntry[]
+  consent_documents                      ConsentDocument[]
+  /// Deprecated — migrate to org-scoped ConsentDocument; kept for legacy S3 fallback until backfill completes
+  has_custom_consent                     Boolean                      @default(false)
+  consent_s3_bucket                      String?
+  consent_s3_region                      String?
+  custom_interview_consent_s3_key_prefix String?
 
   @@index([name])
   @@schema("public")
@@ -3773,119 +3853,6 @@ model OrganisationConfig {
   @@schema("public")
 }
 
-// PAYMENT SERVICE boundary — portable payment microservice owns these enums/columns.
-
-enum BillingTransactionStatus {
-  INITIATED
-  ORDER_CREATED
-  PAYMENT_PENDING
-  SUCCESS
-  FAILED
-  CANCELLED
-  REFUND_PENDING
-  REFUND_FAILED
-  REFUNDED
-
-  @@schema("public")
-}
-
-enum BillingTransactionType {
-  PURCHASE
-  TOP_UP
-  REFUND
-
-  @@schema("public")
-}
-
-enum BillingTransactionFailureCategory {
-  RAZORPAY_ORDER
-  RAZORPAY_PAYMENT
-  REFUND
-  INTERNAL
-
-  @@schema("public")
-}
-
-/// Payment reconciliation state when Treadspace status is FAILED but Razorpay captured payment.
-enum BillingPaymentMismatchStatus {
-  DETECTED
-  UNFULFILLED
-
-  @@schema("public")
-}
-
-/// Financial transaction lifecycle for organisation billing purchases.
-model BillingTransaction {
-  id                               String                             @id @default(uuid())
-  organisation_id                  String
-  /// Opaque plan/product identity supplied at checkout. Not a catalog FK.
-  purchase_reference               String
-  /// Human-readable snapshot captured at checkout for invoices and receipts.
-  purchase_display_name            String?
-  transaction_type                 BillingTransactionType
-  status                           BillingTransactionStatus           @default(INITIATED)
-  failure_category                 BillingTransactionFailureCategory?
-  /// Human-readable or provider detail (e.g. Razorpay error_description).
-  failure_reason                   String?
-  amount                           Int
-  currency                         String                             @default("INR")
-  razorpay_order_id                String?
-  razorpay_payment_id              String?                            @unique
-  /// Razorpay payment method at capture (card, netbanking, upi, wallet, etc.).
-  payment_method                   String?
-  razorpay_subscription_id         String?
-  razorpay_refund_id               String?
-  refund_reason                    String?
-  refund_amount                    Int?
-  idempotency_key                  String                             @unique
-  invoice_number                   String?                            @unique
-  /// Email of the org Admin who initiated checkout (bill-to).
-  purchaser_email                  String?
-  /// Set when FAILED but Razorpay order/payment is captured (reconciliation path).
-  payment_mismatch_status          BillingPaymentMismatchStatus?
-  /// Strict same-intent SUCCESS transaction that fulfilled the purchase (UNFULFILLED only).
-  payment_mismatch_fulfilled_by_id String?
-  created_at                       DateTime                           @default(now())
-  updated_at                       DateTime                           @updatedAt
-
-  organisation Organisation @relation(fields: [organisation_id], references: [id])
-
-  @@index([organisation_id, status])
-  @@index([purchase_reference])
-  @@index([razorpay_order_id])
-  @@map("billing_transactions")
-  @@schema("public")
-}
-
-enum PaymentWebhookEventStatus {
-  RECEIVED
-  PROCESSED
-  FAILED
-
-  @@schema("public")
-}
-
-/// Idempotent record of payment provider webhook deliveries.
-model PaymentWebhookEvent {
-  id                     String                    @id @default(uuid())
-  organisation_id        String?
-  provider               String
-  provider_event_id      String
-  event_type             String
-  status                 PaymentWebhookEventStatus @default(RECEIVED)
-  billing_transaction_id String?
-  error_message          String?
-  processed_at           DateTime?
-  created_at             DateTime                  @default(now())
-
-  organisation Organisation? @relation(fields: [organisation_id], references: [id])
-
-  @@unique([provider, provider_event_id])
-  @@index([status, created_at])
-  @@map("payment_webhook_events")
-  @@schema("public")
-}
-
 model Permission {
   id          String    @id @default(uuid())
   permissions String[]  @default([])
@@ -4899,11 +4866,13 @@ model User {
   employee_number Int?
   employee_code   String? @unique
 
-  department_members          DepartmentMember[]    @relation("DepartmentMemberships")
-  assigned_hiring_units       PurchasedHiringUnit[] @relation("AssignedHiringUnits")
-  consent_records             ConsentRecord[]
-  erasure_requests_as_subject DataErasureRequest[]  @relation("ErasureSubjectUser")
-  erasure_requests_requested  DataErasureRequest[]  @relation("ErasureRequestedByUser")
+  department_members               DepartmentMember[]               @relation("DepartmentMemberships")
+  assigned_hiring_units            PurchasedHiringUnit[]            @relation("AssignedHiringUnits")
+  consent_records                  ConsentRecord[]
+  consent_versions_published       ConsentDocumentVersion[]         @relation("ConsentVersionPublishedBy")
+  consent_version_approval_actions ConsentDocumentVersionApproval[] @relation("ConsentVersionApprovalActor")
+  erasure_requests_as_subject      DataErasureRequest[]             @relation("ErasureSubjectUser")
+  erasure_requests_requested       DataErasureRequest[]             @relation("ErasureRequestedByUser")
 
   @@index([role_id])
   @@index([permission_id])