@bash-app/bash-common 30.93.1 → 30.94.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bash-app/bash-common",
-  "version": "30.93.1",
+  "version": "30.94.1",
   "description": "Common data and scripts to use on the frontend and backend",
   "type": "module",
   "main": "dist/index.js",

package/prisma/schema.prisma

@@ -218,8 +218,8 @@ model Invitation {
   phone          String?
   name           String?
   message        String?
-  customHeading  String?         // Custom heading text for the email (e.g., "You're on the guestlist" or "Welcome to AI MarCon")
-  customLinkText String?         // Custom link text for the email (e.g., "View your ticket" or "Click here for event details")
+  customHeading  String? // Custom heading text for the email (e.g., "You're on the guestlist" or "Welcome to AI MarCon")
+  customLinkText String? // Custom link text for the email (e.g., "View your ticket" or "Click here for event details")
   inviteDate     DateTime?       @default(now())
   acceptedDate   DateTime?
   rejectedDate   DateTime?
@@ -357,25 +357,54 @@ model Checkout {
 }
 
 model BashCreditTransaction {
-  id              String                @id @default(cuid())
-  userId          String
-  amount          Int
-  transactionType CreditTransactionType
-  source          String
+  id     String @id @default(cuid())
+  userId String
+  user   User   @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  // Transaction Details
+  amount       Int // Credits (can be negative for redemptions)
+  balanceAfter Int // Running balance after this transaction
+  type         CreditTransactionType
+  status       CreditTransactionStatus @default(Pending)
+
+  // Source Tracking (Legacy fields - keeping for backwards compatibility)
+  transactionType CreditTransactionType // Duplicate of 'type' for legacy compatibility
+  source          String // Legacy source field`
   referralCode    String?
   referredUserId  String?
+  referredUser    User?                 @relation("ReferredUser", fields: [referredUserId], references: [id])
   membershipTier  MembershipTier?
   description     String?
-  metadata        String?
-  createdAt       DateTime              @default(now())
-  updatedAt       DateTime              @updatedAt
-  referredUser    User?                 @relation("ReferredUser", fields: [referredUserId], references: [id])
-  user            User                  @relation(fields: [userId], references: [id], onDelete: Cascade)
+  metadata        String? // JSON string for additional context
+
+  // New Source Tracking
+  sourceType     CreditSourceType?
+  sourceId       String? // ID of ticket, booking, membership payment, etc.
+  sourceMetadata Json? // Additional context as proper JSON
+
+  // Expiration
+  earnedAt   DateTime  @default(now())
+  expiresAt  DateTime? // 12 months from earnedAt for earned credits
+  redeemedAt DateTime? // When credits were spent
+  expiredAt  DateTime? // When credits expired unused
+
+  // Tax Reporting
+  taxYear       Int? // Year credits were earned
+  taxReported   Boolean @default(false)
+  tax1099Issued Boolean @default(false)
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
 
+  @@index([userId, status])
+  @@index([userId, expiresAt])
+  @@index([userId, taxYear])
   @@index([userId])
   @@index([referralCode])
   @@index([transactionType])
   @@index([createdAt])
+  @@index([sourceType])
+  @@index([type])
 }
 
 model UserReferralCode {
@@ -745,19 +774,19 @@ model SocialMediaProfile {
 }
 
 model User {
-  id                             String                     @id @default(cuid())
-  username                       String?                    @unique
-  email                          String                     @unique
-  createdOn                      DateTime                   @default(now())
-  stripeCustomerId               String?                    @unique
-  stripeAccountId                String?                    @unique
-  isSuperUser                    Boolean                    @default(false)
-  isSuspended                    Boolean                    @default(false)
+  id                             String         @id @default(cuid())
+  username                       String?        @unique
+  email                          String         @unique
+  createdOn                      DateTime       @default(now())
+  stripeCustomerId               String?        @unique
+  stripeAccountId                String?        @unique
+  isSuperUser                    Boolean        @default(false)
+  isSuspended                    Boolean        @default(false)
   intent                         UserIntent?
   googleCalendarAccess           String?
   givenName                      String?
   familyName                     String?
-  nameChangeCount                Int                        @default(0)
+  nameChangeCount                Int            @default(0)
   hash                           String?
   emailVerified                  DateTime?
   image                          String?
@@ -767,67 +796,82 @@ model User {
   sex                            Sex?
   organization                   String?
   jobTitle                       String?
-  roles                          UserRole[]                 @default([User])
+  roles                          UserRole[]     @default([User])
   aboutMe                        String?
   levelBadge                     String?
-  temporaryBadges                String[]                   @default([])
+  temporaryBadges                String[]       @default([])
   status                         UserStatus
   hostRating                     Float?
   totalRatings                   Int?
   magicLink                      String?
   magicLinkExpiration            DateTime?
   hostNumber                     Int?
-  foundingHostBadgeAwarded       Boolean                    @default(false)
+  foundingHostBadgeAwarded       Boolean        @default(false)
   firstBashWithAttendeesDate     DateTime?
-  bashesCreatedCount             Int                        @default(0)
-  bashesPublishedCount           Int                        @default(0)
-  bashesApprovedCount            Int                        @default(0)
-  bashesCompletedCount           Int                        @default(0)
+  bashesCreatedCount             Int            @default(0)
+  bashesPublishedCount           Int            @default(0)
+  bashesApprovedCount            Int            @default(0)
+  bashesCompletedCount           Int            @default(0)
   magicLinkUsed                  DateTime?
   idVerified                     DateTime?
   street                         String?
   city                           String?
   state                          String?
   zipCode                        String?
-  country                        String?                    @default("US")
+  country                        String?        @default("US")
   phone                          String?
-  documentIDId                   String?                    @unique
-  accepted                       Boolean?                   @default(false)
-  boughtTicket                   Boolean?                   @default(false)
-  noPay                          Boolean?                   @default(false)
-  supportedEvent                 Boolean?                   @default(false)
+  documentIDId                   String?        @unique
+  accepted                       Boolean?       @default(false)
+  boughtTicket                   Boolean?       @default(false)
+  noPay                          Boolean?       @default(false)
+  supportedEvent                 Boolean?       @default(false)
   suspendedUntil                 DateTime?
   suspendedById                  String?
-  isLightweightAccount           Boolean                    @default(false)
-  notifyForTrendingBashes        Boolean                    @default(false)
-  trendingBashThreshold          Int                        @default(10)
-  artistsToSee                   String[]                   @default([])
+  isLightweightAccount           Boolean        @default(false)
+  notifyForTrendingBashes        Boolean        @default(false)
+  trendingBashThreshold          Int            @default(10)
+  artistsToSee                   String[]       @default([])
   googleCalendarSyncSettings     String?
-  membershipTier                 MembershipTier             @default(Basic)
+  membershipTier                 MembershipTier @default(Basic)
   membershipExpiresAt            DateTime?
-  membershipAutoRenew            Boolean                    @default(false)
+  membershipAutoRenew            Boolean        @default(false)
   membershipBillingInterval      String?
   membershipLastBilledAt         DateTime?
-  membershipFeaturedEventsUsed   Int                        @default(0)
-  membershipStripeSubscriptionId String?                    @unique
-  isVerified                     Boolean                    @default(false)
+  membershipFeaturedEventsUsed   Int            @default(0)
+  membershipStripeSubscriptionId String?        @unique
+  isVerified                     Boolean        @default(false)
   verificationMethod             String?
   verifiedAt                     DateTime?
-  verificationScore              Int                        @default(0)
+  verificationScore              Int            @default(0)
   biometricFingerprint           String?
   venmoUsername                  String?
   venmoQRCodeUrl                 String?
   zelleEmail                     String?
   zellePhone                     String?
   zelleQRCodeUrl                 String?
-  isAmbashador                   Boolean                    @default(false)
+  isAmbashador                   Boolean        @default(false)
   ambashadorAwardedAt            DateTime?
-  isBashInsider                  Boolean                    @default(false)
+  isBashInsider                  Boolean        @default(false)
   insiderAwardedAt               DateTime?
-  scoutTier                      ScoutTier                  @default(None)
+  scoutTier                      ScoutTier      @default(None)
   scoutAwardedAt                 DateTime?
   agentAwardedAt                 DateTime?
-  totalServiceReferrals          Int                        @default(0)
+  totalServiceReferrals          Int            @default(0)
+
+  // BashCash System Fields
+  bashCreditsBalance        Int     @default(0)
+  bashCreditsEarnedLifetime Int     @default(0)
+  bashCreditsSpentLifetime  Int     @default(0)
+  bashCashReferralCode      String? @unique
+  referredById              String?
+  referralPurchaseCredited  Boolean @default(false)
+
+  // Security Fields
+  accountLockedUntil DateTime? // Account lockout timestamp for failed login protection
+  auditLogs          AuditLog[]    @relation("UserAuditLogs")
+  auditLogsPerformed AuditLog[]    @relation("PerformedByUser")
+  consents           UserConsent[]
+
   associatedBashes               AssociatedBash[]
   associatedServices             AssociatedService[]
   comment                        BashComment[]
@@ -921,6 +965,10 @@ model User {
   scoutReferralsMade             ScoutReferral[]            @relation("ScoutReferrer")
   scoutReferralsReceived         ScoutReferral[]            @relation("ScoutReferred")
   bookingCommissionsEarned       BookingCommission[]        @relation("CommissionReferrer")
+
+  // BashCash Referral Relations
+  referredBy User?  @relation("Referrals", fields: [referredById], references: [id])
+  referrals  User[] @relation("Referrals")
 }
 
 model UserPreferences {
@@ -4048,6 +4096,25 @@ enum CreditTransactionType {
   Earned
   Used
   Refund
+  Redeemed // New: for redemptions
+  Expired // New: for expired credits
+  Reversed // New: for refunds/reversals
+}
+
+enum CreditTransactionStatus {
+  Pending
+  Completed
+  Reversed
+  Expired
+}
+
+enum CreditSourceType {
+  MembershipReward // Monthly membership credits
+  TicketPurchase // 5% cashback on ticket
+  ServiceBooking // 3% cashback on service
+  ReferralBonus // 10% of referee's first purchase
+  AdminAdjustment // Manual credit by admin
+  PromotionalBonus // Marketing campaigns
 }
 
 enum ReferralTier {
@@ -4062,6 +4129,164 @@ enum ScoutTier {
   Agent
 }
 
+// ============================================
+// Security & Audit Models
+// ============================================
+
+model UserConsent {
+  id     String @id @default(cuid())
+  userId String
+  user   User   @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  consentType    ConsentType // Privacy policy, analytics, marketing, etc.
+  consentVersion String // Version of policy accepted (e.g., "2025-01-08")
+
+  consented   Boolean   @default(true)
+  consentedAt DateTime  @default(now())
+  withdrawnAt DateTime? // When consent was withdrawn
+
+  // Context
+  ipAddress String?
+  userAgent String?
+  metadata  Json? // Additional context
+
+  @@index([userId, consentType])
+  @@index([consentType, consented])
+}
+
+enum ConsentType {
+  PrivacyPolicy // Required: User accepts privacy policy
+  TermsOfService // Required: User accepts terms
+  DataCollection // Required: Basic data collection for service
+  Analytics // Optional: Google Analytics, Mixpanel, etc.
+  Marketing // Optional: Promotional emails
+  ThirdPartySharing // Optional: Share data with partners
+}
+
+model AuditLog {
+  id        String   @id @default(cuid())
+  createdAt DateTime @default(now())
+
+  // Who performed the action
+  performedById String?
+  performedBy   User?   @relation("PerformedByUser", fields: [performedById], references: [id], onDelete: SetNull)
+
+  // Who/what was affected
+  userId String?
+  user   User?   @relation("UserAuditLogs", fields: [userId], references: [id], onDelete: SetNull)
+
+  // Action details
+  action   AuditAction // LOGIN_SUCCESS, LOGIN_FAILED, PAYMENT_PROCESSED, etc.
+  category AuditCategory // Authentication, Payment, Admin, DataAccess, etc.
+  severity AuditSeverity // Info, Warning, Critical
+
+  // Context
+  ipAddress    String?
+  userAgent    String?
+  resourceType String? // "BashEvent", "Ticket", "User", etc.
+  resourceId   String? // ID of the affected resource
+
+  // Details (JSON for flexibility)
+  metadata Json? // Additional context, error messages, etc.
+
+  // Result
+  success      Boolean @default(true)
+  errorMessage String?
+
+  @@index([performedById, createdAt])
+  @@index([userId, createdAt])
+  @@index([action, createdAt])
+  @@index([category, severity, createdAt])
+  @@index([resourceType, resourceId])
+  @@index([ipAddress])
+}
+
+enum AuditAction {
+  // Authentication
+  LOGIN_SUCCESS
+  LOGIN_FAILED
+  LOGOUT
+  PASSWORD_CHANGED
+  PASSWORD_RESET_REQUESTED
+  PASSWORD_RESET_COMPLETED
+  EMAIL_VERIFIED
+  ACCOUNT_CREATED
+  ACCOUNT_LOCKED
+  ACCOUNT_UNLOCKED
+
+  // Authorization
+  ROLE_CHANGED
+  PERMISSION_GRANTED
+  PERMISSION_REVOKED
+
+  // User Management
+  USER_SUSPENDED
+  USER_UNSUSPENDED
+  USER_DELETED
+  USER_DATA_EXPORTED
+  PROFILE_UPDATED
+
+  // Payment
+  PAYMENT_INITIATED
+  PAYMENT_COMPLETED
+  PAYMENT_FAILED
+  REFUND_ISSUED
+  REFUND_FAILED
+
+  // BashCash
+  CREDITS_EARNED
+  CREDITS_REDEEMED
+  CREDITS_EXPIRED
+  CREDITS_ADJUSTED
+
+  // Events
+  EVENT_CREATED
+  EVENT_PUBLISHED
+  EVENT_DELETED
+  EVENT_TRANSFERRED
+
+  // Tickets
+  TICKET_PURCHASED
+  TICKET_TRANSFERRED
+  TICKET_REFUNDED
+
+  // Admin Actions
+  ADMIN_USER_IMPERSONATED
+  ADMIN_DATA_MODIFIED
+  ADMIN_SETTINGS_CHANGED
+  ADMIN_REPORT_GENERATED
+
+  // Data Access
+  DATA_EXPORTED
+  DATA_IMPORTED
+  SENSITIVE_DATA_ACCESSED
+
+  // Security
+  SUSPICIOUS_ACTIVITY_DETECTED
+  RATE_LIMIT_EXCEEDED
+  IP_BLOCKED
+  TOKEN_REVOKED
+}
+
+enum AuditCategory {
+  Authentication
+  Authorization
+  UserManagement
+  Payment
+  BashCash
+  Events
+  Tickets
+  AdminAction
+  DataAccess
+  Security
+}
+
+enum AuditSeverity {
+  Info // Normal operations
+  Warning // Potentially suspicious
+  Critical // Security incidents
+}
+
 enum VoucherStatus {
   Active
   Redeemed