@danielcok17/prisma-db 1.20.10 → 1.20.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danielcok17/prisma-db",
-  "version": "1.20.10",
+  "version": "1.20.11",
   "description": "Shared Prisma schema for Legal AI applications",
   "repository": {
     "type": "git",

package/prisma/app.prisma

@@ -961,17 +961,85 @@ enum FolderPermission {
 
 // Nový model pre logovanie admin akcií
 model AdminActionLog {
-  id           String   @id @default(cuid())
-  action       String // APPROVE_USER, REJECT_USER, etc.
-  targetUserId String // ID používateľa, na ktorého sa akcia vzťahuje
-  adminEmail   String // E-mail admina, ktorý vykonal akciu
-  details      Json? // Ďalšie detaily akcie (reason, notes, etc.)
-  createdAt    DateTime @default(now())
+  id             String   @id @default(cuid())
+  action         String   // APPROVE_USER, REJECT_USER, etc.
+  targetUserId   String   // ID používateľa, na ktorého sa akcia vzťahuje
+  adminEmail     String   // E-mail admina, ktorý vykonal akciu
+  details        Json?    // Ďalšie detaily akcie (reason, notes, etc.)
+  createdAt      DateTime @default(now())
+  // Correlation + security audit fields
+  requestId      String?  // korelácia s Pino logom (AsyncLocalStorage requestId)
+  ipAddress      String?
+  userAgent      String?
+  brand          String   @default("smartlex")
+  organizationId String?
 
   @@index([action])
   @@index([targetUserId])
   @@index([adminEmail])
   @@index([createdAt])
+  @@index([brand])
+  @@index([organizationId])
+  @@index([requestId])
+}
+
+// GDPR Article 30 — data access audit trail
+// WHO accessed WHAT legal data, WHEN, and from WHERE
+model AuditLog {
+  id         String   @id @default(cuid())
+
+  userId     String?
+  adminEmail String?
+
+  action     String   // READ_CONVERSATION | DELETE_ANSWER | EXPORT_DATA | VIEW_USER | SHARE_FOLDER
+  entityType String   // "Conversation" | "Answer" | "UserFile" | "User" | "Folder"
+  entityId   String
+  brand      String   @default("smartlex")
+
+  requestId  String?
+  ipAddress  String?
+  userAgent  String?
+  metadata   Json?
+
+  createdAt  DateTime @default(now())
+
+  @@index([userId])
+  @@index([action])
+  @@index([entityType, entityId])
+  @@index([brand])
+  @@index([createdAt])
+  @@index([requestId])
+}
+
+// Daily aggregated usage — billing analytics, cost trending
+// Populated by nightly cron job from AnswerMetrics — never write from request path
+model UsageDaily {
+  id             String   @id @default(cuid())
+
+  date           DateTime @db.Date
+  userId         String?
+  organizationId String?
+  brand          String   @default("smartlex")
+  aiProvider     String
+  aiModel        String
+
+  messageCount   Int      @default(0)
+  tokenCount     Int      @default(0)
+  totalCost      Float    @default(0)
+  aiCost         Float    @default(0)
+  ragCost        Float    @default(0)
+  avgDurationMs  Float?
+  errorCount     Int      @default(0)
+
+  createdAt      DateTime @default(now())
+  updatedAt      DateTime @updatedAt
+
+  @@unique([date, userId, organizationId, aiModel])
+  @@index([date])
+  @@index([userId, date])
+  @@index([organizationId, date])
+  @@index([brand, date])
+  @@index([aiProvider, date])
 }
 
 model WorkflowLog {

package/prisma/migrations/20260529215839_add_audit_log_usage_daily_admin_fields/migration.sql

@@ -0,0 +1,91 @@
+-- AlterTable
+ALTER TABLE "AdminActionLog" ADD COLUMN     "brand" TEXT NOT NULL DEFAULT 'smartlex',
+ADD COLUMN     "ipAddress" TEXT,
+ADD COLUMN     "organizationId" TEXT,
+ADD COLUMN     "requestId" TEXT,
+ADD COLUMN     "userAgent" TEXT;
+
+-- CreateTable
+CREATE TABLE "AuditLog" (
+    "id" TEXT NOT NULL,
+    "userId" TEXT,
+    "adminEmail" TEXT,
+    "action" TEXT NOT NULL,
+    "entityType" TEXT NOT NULL,
+    "entityId" TEXT NOT NULL,
+    "brand" TEXT NOT NULL DEFAULT 'smartlex',
+    "requestId" TEXT,
+    "ipAddress" TEXT,
+    "userAgent" TEXT,
+    "metadata" JSONB,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "AuditLog_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "UsageDaily" (
+    "id" TEXT NOT NULL,
+    "date" DATE NOT NULL,
+    "userId" TEXT,
+    "organizationId" TEXT,
+    "brand" TEXT NOT NULL DEFAULT 'smartlex',
+    "aiProvider" TEXT NOT NULL,
+    "aiModel" TEXT NOT NULL,
+    "messageCount" INTEGER NOT NULL DEFAULT 0,
+    "tokenCount" INTEGER NOT NULL DEFAULT 0,
+    "totalCost" DOUBLE PRECISION NOT NULL DEFAULT 0,
+    "aiCost" DOUBLE PRECISION NOT NULL DEFAULT 0,
+    "ragCost" DOUBLE PRECISION NOT NULL DEFAULT 0,
+    "avgDurationMs" DOUBLE PRECISION,
+    "errorCount" INTEGER NOT NULL DEFAULT 0,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "UsageDaily_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "AuditLog_userId_idx" ON "AuditLog"("userId");
+
+-- CreateIndex
+CREATE INDEX "AuditLog_action_idx" ON "AuditLog"("action");
+
+-- CreateIndex
+CREATE INDEX "AuditLog_entityType_entityId_idx" ON "AuditLog"("entityType", "entityId");
+
+-- CreateIndex
+CREATE INDEX "AuditLog_brand_idx" ON "AuditLog"("brand");
+
+-- CreateIndex
+CREATE INDEX "AuditLog_createdAt_idx" ON "AuditLog"("createdAt");
+
+-- CreateIndex
+CREATE INDEX "AuditLog_requestId_idx" ON "AuditLog"("requestId");
+
+-- CreateIndex
+CREATE INDEX "UsageDaily_date_idx" ON "UsageDaily"("date");
+
+-- CreateIndex
+CREATE INDEX "UsageDaily_userId_date_idx" ON "UsageDaily"("userId", "date");
+
+-- CreateIndex
+CREATE INDEX "UsageDaily_organizationId_date_idx" ON "UsageDaily"("organizationId", "date");
+
+-- CreateIndex
+CREATE INDEX "UsageDaily_brand_date_idx" ON "UsageDaily"("brand", "date");
+
+-- CreateIndex
+CREATE INDEX "UsageDaily_aiProvider_date_idx" ON "UsageDaily"("aiProvider", "date");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "UsageDaily_date_userId_organizationId_aiModel_key" ON "UsageDaily"("date", "userId", "organizationId", "aiModel");
+
+-- CreateIndex
+CREATE INDEX "AdminActionLog_brand_idx" ON "AdminActionLog"("brand");
+
+-- CreateIndex
+CREATE INDEX "AdminActionLog_organizationId_idx" ON "AdminActionLog"("organizationId");
+
+-- CreateIndex
+CREATE INDEX "AdminActionLog_requestId_idx" ON "AdminActionLog"("requestId");