@trycompai/db 1.0.0

package/prisma/schema/shared.prisma

@@ -0,0 +1,104 @@
+model ApiKey {
+    id         String    @id @default(dbgenerated("generate_prefixed_cuid('apk'::text)"))
+    name       String
+    key        String    @unique
+    salt       String?
+    createdAt  DateTime  @default(now())
+    expiresAt  DateTime?
+    lastUsedAt DateTime?
+    isActive   Boolean   @default(true)
+
+    organization   Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+    organizationId String
+
+    @@index([organizationId])
+    @@index([key])
+}
+
+model AuditLog {
+    id             String              @id @default(dbgenerated("generate_prefixed_cuid('aud'::text)"))
+    timestamp      DateTime            @default(now())
+    organizationId String
+    userId         String
+    memberId       String?
+    data           Json
+    description    String?
+    entityId       String?
+    entityType     AuditLogEntityType?
+
+    organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+    user         User         @relation(fields: [userId], references: [id], onDelete: Cascade)
+    member       Member?      @relation(fields: [memberId], references: [id], onDelete: Cascade)
+
+    @@index([userId])
+    @@index([organizationId])
+    @@index([memberId])
+    @@index([entityType])
+}
+
+enum AuditLogEntityType {
+    organization
+    framework
+    requirement
+    control
+    policy
+    task
+    people
+    risk
+    vendor
+    tests
+    integration
+}
+
+model GlobalVendors {
+    website                     String   @id @unique
+    company_name                String?
+    legal_name                  String?
+    company_description         String?
+    company_hq_address          String?
+    privacy_policy_url          String?
+    terms_of_service_url        String?
+    service_level_agreement_url String?
+    security_page_url           String?
+    trust_page_url              String?
+    security_certifications     String[]
+    subprocessors               String[]
+    type_of_company             String?
+
+    approved  Boolean  @default(false)
+    createdAt DateTime @default(now())
+
+    @@index([website])
+}
+
+enum Departments {
+    none
+    admin
+    gov
+    hr
+    it
+    itsm
+    qms
+}
+
+enum Frequency {
+    monthly
+    quarterly
+    yearly
+}
+
+enum Likelihood {
+    very_unlikely
+    unlikely
+    possible
+    likely
+    very_likely
+}
+
+enum Impact {
+    insignificant
+    minor
+    moderate
+    major
+    severe
+}

package/prisma/schema/task.prisma

@@ -0,0 +1,41 @@
+model Task {
+    // Metadata
+    id          String         @id @default(dbgenerated("generate_prefixed_cuid('tsk'::text)"))
+    title       String
+    description String
+    status      TaskStatus     @default(todo)
+    frequency   TaskFrequency?
+    department  Departments?   @default(none)
+    order       Int            @default(0)
+
+    // Dates
+    createdAt       DateTime  @default(now())
+    updatedAt       DateTime  @updatedAt
+    lastCompletedAt DateTime?
+
+    // Relationships
+    controls       Control[]
+    vendors        Vendor[]
+    risks          Risk[]
+    assigneeId     String?
+    assignee       Member?                      @relation(fields: [assigneeId], references: [id])
+    organizationId String
+    organization   Organization                 @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+    taskTemplateId String?
+    taskTemplate   FrameworkEditorTaskTemplate? @relation(fields: [taskTemplateId], references: [id])
+}
+
+enum TaskStatus {
+    todo
+    in_progress
+    done
+    not_relevant
+}
+
+enum TaskFrequency {
+    daily
+    weekly
+    monthly
+    quarterly
+    yearly
+}

package/prisma/schema/trust.prisma

@@ -0,0 +1,37 @@
+model Trust {
+    organizationId     String
+    organization       Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+    friendlyUrl        String?      @unique
+    domain             String?
+    domainVerified     Boolean      @default(false)
+    isVercelDomain     Boolean      @default(false)
+    vercelVerification String?
+    status             TrustStatus  @default(draft)
+    contactEmail       String?
+
+    email         String?
+    privacyPolicy String?
+    soc2          Boolean @default(false)
+    iso27001      Boolean @default(false)
+    gdpr          Boolean @default(false)
+
+    soc2_status     FrameworkStatus @default(started)
+    iso27001_status FrameworkStatus @default(started)
+    gdpr_status     FrameworkStatus @default(started)
+
+    @@id([status, organizationId])
+    @@unique([organizationId])
+    @@index([organizationId])
+    @@index([friendlyUrl])
+}
+
+enum TrustStatus {
+    draft
+    published
+}
+
+enum FrameworkStatus {
+    started
+    in_progress
+    compliant
+}

package/prisma/schema/vendor.prisma

@@ -0,0 +1,56 @@
+model Vendor {
+  id                  String         @id @default(dbgenerated("generate_prefixed_cuid('vnd'::text)"))
+  name                String
+  description         String
+  category            VendorCategory @default(other)
+  status              VendorStatus   @default(not_assessed)
+  inherentProbability Likelihood     @default(very_unlikely)
+  inherentImpact      Impact         @default(insignificant)
+  residualProbability Likelihood     @default(very_unlikely)
+  residualImpact      Impact         @default(insignificant)
+  website             String?
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  organizationId String
+  organization   Organization    @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  assigneeId     String?
+  assignee       Member?         @relation(fields: [assigneeId], references: [id], onDelete: Cascade)
+  contacts       VendorContact[]
+  tasks          Task[]
+
+  @@index([organizationId])
+  @@index([assigneeId])
+  @@index([category])
+}
+
+model VendorContact {
+  id        String   @id @default(dbgenerated("generate_prefixed_cuid('vct'::text)"))
+  vendorId  String
+  name      String
+  email     String
+  phone     String
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+  Vendor    Vendor   @relation(fields: [vendorId], references: [id], onDelete: Cascade)
+
+  @@index([vendorId])
+}
+
+enum VendorCategory {
+  cloud
+  infrastructure
+  software_as_a_service
+  finance
+  marketing
+  sales
+  hr
+  other
+}
+
+enum VendorStatus {
+  not_assessed
+  in_progress
+  assessed
+}

package/prisma/schema.prisma

@@ -0,0 +1,12 @@
+generator client {
+  provider        = "prisma-client-js"
+  previewFeatures = ["driverAdapters", "postgresqlExtensions", "prismaSchemaFolder"]
+  binaryTargets   = ["native", "debian-openssl-3.0.x", "linux-musl-openssl-3.0.x"]
+}
+
+datasource db {
+  provider   = "postgresql"
+  url        = env("DATABASE_URL")
+  directUrl  = env("DATABASE_URL")
+  extensions = [pgcrypto]
+}

package/prisma/seed/frameworkEditorSchemas.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.frameworkEditorModelSchemas = exports.FrameworkEditorControlTemplateSchema = exports.FrameworkEditorTaskTemplateSchema = exports.FrameworkEditorPolicyTemplateSchema = exports.FrameworkEditorRequirementSchema = exports.FrameworkEditorFrameworkSchema = exports.FrameworkEditorVideoSchema = void 0;
+const zod_1 = require("zod");
+// Assuming Frequency and Departments enums are defined elsewhere and imported
+// For now, we'll use z.string() as a placeholder if their definitions aren't available.
+// import { Frequency, Departments } from './path-to-shared-enums'; // Example import
+const datePreprocess = (arg) => {
+    if (typeof arg === 'string' && /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d{3}$/.test(arg)) {
+        return arg.replace(' ', 'T') + 'Z';
+    }
+    return arg;
+};
+exports.FrameworkEditorVideoSchema = zod_1.z.object({
+    id: zod_1.z.string().optional(), // @id @default
+    title: zod_1.z.string(),
+    description: zod_1.z.string(),
+    youtubeId: zod_1.z.string(),
+    url: zod_1.z.string(),
+    createdAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now())
+    updatedAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now()) @updatedAt
+});
+exports.FrameworkEditorFrameworkSchema = zod_1.z.object({
+    id: zod_1.z.string().optional(), // @id @default
+    name: zod_1.z.string(),
+    version: zod_1.z.string(),
+    description: zod_1.z.string(),
+    visible: zod_1.z.boolean().optional(), // @default(true)
+    // requirements: FrameworkEditorRequirement[] - relational, omitted
+    // frameworkInstances: FrameworkInstance[] - relational, omitted
+    createdAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now())
+    updatedAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now()) @updatedAt
+});
+exports.FrameworkEditorRequirementSchema = zod_1.z.object({
+    id: zod_1.z.string().optional(), // @id @default
+    frameworkId: zod_1.z.string(),
+    // framework: FrameworkEditorFramework - relational, omitted
+    name: zod_1.z.string(),
+    identifier: zod_1.z.string().optional(), // @default("")
+    description: zod_1.z.string(),
+    // controlTemplates: FrameworkEditorControlTemplate[] - relational, omitted
+    // requirementMaps: RequirementMap[] - relational, omitted
+    createdAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now())
+    updatedAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now()) @updatedAt
+});
+exports.FrameworkEditorPolicyTemplateSchema = zod_1.z.object({
+    id: zod_1.z.string().optional(), // @id @default
+    name: zod_1.z.string(),
+    description: zod_1.z.string(),
+    frequency: zod_1.z.string(), // Placeholder for Frequency enum
+    department: zod_1.z.string(), // Placeholder for Departments enum
+    content: zod_1.z.any(), // Json
+    // controlTemplates: FrameworkEditorControlTemplate[] - relational, omitted
+    createdAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now())
+    updatedAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now()) @updatedAt
+    // policies: Policy[] - relational, omitted
+});
+exports.FrameworkEditorTaskTemplateSchema = zod_1.z.object({
+    id: zod_1.z.string().optional(), // @id @default
+    name: zod_1.z.string(),
+    description: zod_1.z.string(),
+    frequency: zod_1.z.string(), // Placeholder for Frequency enum
+    department: zod_1.z.string(), // Placeholder for Departments enum
+    // controlTemplates: FrameworkEditorControlTemplate[] - relational, omitted
+    createdAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now())
+    updatedAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now()) @updatedAt
+    // tasks: Task[] - relational, omitted
+});
+exports.FrameworkEditorControlTemplateSchema = zod_1.z.object({
+    id: zod_1.z.string().optional(), // @id @default
+    name: zod_1.z.string(),
+    description: zod_1.z.string(),
+    // policyTemplates: FrameworkEditorPolicyTemplate[] - relational, omitted
+    // requirements: FrameworkEditorRequirement[] - relational, omitted
+    // taskTemplates: FrameworkEditorTaskTemplate[] - relational, omitted
+    createdAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now())
+    updatedAt: zod_1.z
+        .preprocess(datePreprocess, zod_1.z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+    }))
+        .optional(), // @default(now()) @updatedAt
+    // controls: Control[] - relational, omitted
+});
+// For use in seed script validation
+exports.frameworkEditorModelSchemas = {
+    FrameworkEditorVideo: exports.FrameworkEditorVideoSchema,
+    FrameworkEditorFramework: exports.FrameworkEditorFrameworkSchema,
+    FrameworkEditorRequirement: exports.FrameworkEditorRequirementSchema,
+    FrameworkEditorPolicyTemplate: exports.FrameworkEditorPolicyTemplateSchema,
+    FrameworkEditorTaskTemplate: exports.FrameworkEditorTaskTemplateSchema,
+    FrameworkEditorControlTemplate: exports.FrameworkEditorControlTemplateSchema,
+};

package/prisma/seed/frameworkEditorSchemas.ts

@@ -0,0 +1,178 @@
+import { z } from 'zod';
+
+// Assuming Frequency and Departments enums are defined elsewhere and imported
+// For now, we'll use z.string() as a placeholder if their definitions aren't available.
+// import { Frequency, Departments } from './path-to-shared-enums'; // Example import
+
+const datePreprocess = (arg: unknown) => {
+  if (typeof arg === 'string' && /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d{3}$/.test(arg)) {
+    return arg.replace(' ', 'T') + 'Z';
+  }
+  return arg;
+};
+
+export const FrameworkEditorVideoSchema = z.object({
+  id: z.string().optional(), // @id @default
+  title: z.string(),
+  description: z.string(),
+  youtubeId: z.string(),
+  url: z.string(),
+  createdAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now())
+  updatedAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now()) @updatedAt
+});
+
+export const FrameworkEditorFrameworkSchema = z.object({
+  id: z.string().optional(), // @id @default
+  name: z.string(),
+  version: z.string(),
+  description: z.string(),
+  visible: z.boolean().optional(), // @default(true)
+  // requirements: FrameworkEditorRequirement[] - relational, omitted
+  // frameworkInstances: FrameworkInstance[] - relational, omitted
+  createdAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now())
+  updatedAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now()) @updatedAt
+});
+
+export const FrameworkEditorRequirementSchema = z.object({
+  id: z.string().optional(), // @id @default
+  frameworkId: z.string(),
+  // framework: FrameworkEditorFramework - relational, omitted
+  name: z.string(),
+  identifier: z.string().optional(), // @default("")
+  description: z.string(),
+  // controlTemplates: FrameworkEditorControlTemplate[] - relational, omitted
+  // requirementMaps: RequirementMap[] - relational, omitted
+  createdAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now())
+  updatedAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now()) @updatedAt
+});
+
+export const FrameworkEditorPolicyTemplateSchema = z.object({
+  id: z.string().optional(), // @id @default
+  name: z.string(),
+  description: z.string(),
+  frequency: z.string(), // Placeholder for Frequency enum
+  department: z.string(), // Placeholder for Departments enum
+  content: z.any(), // Json
+  // controlTemplates: FrameworkEditorControlTemplate[] - relational, omitted
+  createdAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now())
+  updatedAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now()) @updatedAt
+  // policies: Policy[] - relational, omitted
+});
+
+export const FrameworkEditorTaskTemplateSchema = z.object({
+  id: z.string().optional(), // @id @default
+  name: z.string(),
+  description: z.string(),
+  frequency: z.string(), // Placeholder for Frequency enum
+  department: z.string(), // Placeholder for Departments enum
+  // controlTemplates: FrameworkEditorControlTemplate[] - relational, omitted
+  createdAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now())
+  updatedAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now()) @updatedAt
+  // tasks: Task[] - relational, omitted
+});
+
+export const FrameworkEditorControlTemplateSchema = z.object({
+  id: z.string().optional(), // @id @default
+  name: z.string(),
+  description: z.string(),
+  // policyTemplates: FrameworkEditorPolicyTemplate[] - relational, omitted
+  // requirements: FrameworkEditorRequirement[] - relational, omitted
+  // taskTemplates: FrameworkEditorTaskTemplate[] - relational, omitted
+  createdAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for createdAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now())
+  updatedAt: z
+    .preprocess(
+      datePreprocess,
+      z.string().datetime({
+        message: 'Invalid datetime string for updatedAt. Expected ISO 8601 format.',
+      }),
+    )
+    .optional(), // @default(now()) @updatedAt
+  // controls: Control[] - relational, omitted
+});
+
+// For use in seed script validation
+export const frameworkEditorModelSchemas = {
+  FrameworkEditorVideo: FrameworkEditorVideoSchema,
+  FrameworkEditorFramework: FrameworkEditorFrameworkSchema,
+  FrameworkEditorRequirement: FrameworkEditorRequirementSchema,
+  FrameworkEditorPolicyTemplate: FrameworkEditorPolicyTemplateSchema,
+  FrameworkEditorTaskTemplate: FrameworkEditorTaskTemplateSchema,
+  FrameworkEditorControlTemplate: FrameworkEditorControlTemplateSchema,
+};