@trycompai/db 1.2.2 → 1.2.4

package/dist/generated/prisma/schema.prisma

@@ -0,0 +1,789 @@
+model Attachment {
+  id         String               @id @default(dbgenerated("generate_prefixed_cuid('att'::text)"))
+  name       String
+  url        String
+  type       AttachmentType
+  entityId   String
+  entityType AttachmentEntityType
+
+  // Dates
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  // Relationships
+  organizationId String
+  organization   Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  comment        Comment?     @relation(fields: [commentId], references: [id])
+  commentId      String?
+
+  @@index([entityId, entityType])
+}
+
+enum AttachmentEntityType {
+  task
+  vendor
+  risk
+  comment
+}
+
+enum AttachmentType {
+  image
+  video
+  audio
+  document
+  other
+}
+
+model User {
+  id            String    @id @default(dbgenerated("generate_prefixed_cuid('usr'::text)"))
+  name          String
+  email         String
+  emailVerified Boolean
+  image         String?
+  createdAt     DateTime  @default(now())
+  updatedAt     DateTime  @updatedAt
+  lastLogin     DateTime?
+
+  accounts           Account[]
+  auditLog           AuditLog[]
+  integrationResults IntegrationResult[]
+  invitations        Invitation[]
+  members            Member[]
+  sessions           Session[]
+
+  @@unique([email])
+}
+
+model EmployeeTrainingVideoCompletion {
+  id          String    @id @default(dbgenerated("generate_prefixed_cuid('evc'::text)"))
+  completedAt DateTime?
+  videoId     String
+
+  memberId String
+  member   Member @relation(fields: [memberId], references: [id], onDelete: Cascade)
+
+  @@unique([memberId, videoId])
+  @@index([memberId])
+}
+
+model Session {
+  id                   String   @id @default(dbgenerated("generate_prefixed_cuid('ses'::text)"))
+  expiresAt            DateTime
+  token                String
+  createdAt            DateTime @default(now())
+  updatedAt            DateTime @updatedAt
+  ipAddress            String?
+  userAgent            String?
+  userId               String
+  activeOrganizationId String?
+  user                 User     @relation(fields: [userId], references: [id], onDelete: Cascade)
+
+  @@unique([token])
+}
+
+model Account {
+  id                    String    @id @default(dbgenerated("generate_prefixed_cuid('acc'::text)"))
+  accountId             String
+  providerId            String
+  userId                String
+  user                  User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  accessToken           String?
+  refreshToken          String?
+  idToken               String?
+  accessTokenExpiresAt  DateTime?
+  refreshTokenExpiresAt DateTime?
+  scope                 String?
+  password              String?
+  createdAt             DateTime
+  updatedAt             DateTime
+}
+
+model Verification {
+  id         String   @id @default(dbgenerated("generate_prefixed_cuid('ver'::text)"))
+  identifier String
+  value      String
+  expiresAt  DateTime
+  createdAt  DateTime @default(now())
+  updatedAt  DateTime @updatedAt
+}
+
+model Member {
+  id             String       @id @default(dbgenerated("generate_prefixed_cuid('mem'::text)"))
+  organizationId String
+  organization   Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  userId         String
+  user           User         @relation(fields: [userId], references: [id], onDelete: Cascade)
+  role           String // Purposefully a string, since BetterAuth doesn't support enums this way
+  createdAt      DateTime     @default(now())
+
+  department                      Departments                       @default(none)
+  isActive                        Boolean                           @default(true)
+  employeeTrainingVideoCompletion EmployeeTrainingVideoCompletion[]
+  fleetDmLabelId                  Int?
+
+  assignedPolicies Policy[]   @relation("PolicyAssignee") // Policies where this member is an assignee
+  approvedPolicies Policy[]   @relation("PolicyApprover") // Policies where this member is an approver
+  risks            Risk[]
+  tasks            Task[]
+  vendors          Vendor[]
+  comments         Comment[]
+  auditLogs        AuditLog[]
+}
+
+model Invitation {
+  id             String       @id @default(dbgenerated("generate_prefixed_cuid('inv'::text)"))
+  organizationId String
+  organization   Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  email          String
+  role           String // Purposefully a string, since BetterAuth doesn't support enums this way
+  status         String
+  expiresAt      DateTime
+  inviterId      String
+  user           User         @relation(fields: [inviterId], references: [id], onDelete: Cascade)
+}
+
+// This is only for the app to consume, shouldn't be enforced by DB
+// Otherwise it won't work with Better Auth, as per https://www.better-auth.com/docs/plugins/organization#access-control
+enum Role {
+  owner
+  admin
+  auditor
+  employee
+}
+
+enum PolicyStatus {
+  draft
+  published
+  needs_review
+}
+
+model Comment {
+  id         String            @id @default(dbgenerated("generate_prefixed_cuid('cmt'::text)"))
+  content    String
+  entityId   String
+  entityType CommentEntityType
+
+  // Dates
+  createdAt DateTime @default(now())
+
+  // Relationships
+  authorId       String
+  author         Member       @relation(fields: [authorId], references: [id])
+  organizationId String
+  organization   Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  // Relation to Attachments
+  attachments Attachment[]
+
+  @@index([entityId])
+}
+
+enum CommentEntityType {
+  task
+  vendor
+  risk
+  policy
+}
+
+model Context {
+  id             String       @id @default(dbgenerated("generate_prefixed_cuid('ctx'::text)"))
+  organizationId String
+  organization   Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  question String
+  answer   String
+
+  tags String[]
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  @@index([organizationId])
+  @@index([question])
+  @@index([answer])
+  @@index([tags])
+}
+
+model Control {
+  // Metadata
+  id          String @id @default(dbgenerated("generate_prefixed_cuid('ctl'::text)"))
+  name        String
+  description String
+
+  // Review dates
+  lastReviewDate DateTime?
+  nextReviewDate DateTime?
+
+  // Relationships
+  organization       Organization                    @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  organizationId     String
+  requirementsMapped RequirementMap[]
+  tasks              Task[]
+  policies           Policy[]
+  controlTemplateId  String?
+  controlTemplate    FrameworkEditorControlTemplate? @relation(fields: [controlTemplateId], references: [id])
+
+  @@index([organizationId])
+}
+
+// --- Data for Framework Editor ---
+model FrameworkEditorVideo {
+  id          String @id @default(dbgenerated("generate_prefixed_cuid('frk_vi'::text)"))
+  title       String
+  description String
+  youtubeId   String
+  url         String
+
+  // Dates
+  createdAt DateTime @default(now())
+  updatedAt DateTime @default(now()) @updatedAt
+}
+
+model FrameworkEditorFramework {
+  id          String  @id @default(dbgenerated("generate_prefixed_cuid('frk'::text)"))
+  name        String // e.g., "soc2", "iso27001"
+  version     String
+  description String
+  visible     Boolean @default(false)
+
+  requirements       FrameworkEditorRequirement[]
+  frameworkInstances FrameworkInstance[]
+
+  // Dates
+  createdAt DateTime @default(now())
+  updatedAt DateTime @default(now()) @updatedAt
+}
+
+model FrameworkEditorRequirement {
+  id          String                   @id @default(dbgenerated("generate_prefixed_cuid('frk_rq'::text)"))
+  frameworkId String
+  framework   FrameworkEditorFramework @relation(fields: [frameworkId], references: [id])
+
+  name        String // Original requirement ID within that framework, e.g., "Privacy"
+  identifier  String @default("") // Unique identifier for the requirement, e.g., "cc1-1"
+  description String
+
+  controlTemplates FrameworkEditorControlTemplate[]
+  requirementMaps  RequirementMap[]
+
+  // Dates
+  createdAt DateTime @default(now())
+  updatedAt DateTime @default(now()) @updatedAt
+}
+
+model FrameworkEditorPolicyTemplate {
+  id          String      @id @default(dbgenerated("generate_prefixed_cuid('frk_pt'::text)"))
+  name        String
+  description String
+  frequency   Frequency // Using the enum from shared.prisma
+  department  Departments // Using the enum from shared.prisma
+  content     Json
+
+  controlTemplates FrameworkEditorControlTemplate[]
+
+  // Dates
+  createdAt DateTime @default(now())
+  updatedAt DateTime @default(now()) @updatedAt
+
+  // Instances
+  policies Policy[]
+}
+
+model FrameworkEditorTaskTemplate {
+  id          String      @id @default(dbgenerated("generate_prefixed_cuid('frk_tt'::text)"))
+  name        String
+  description String
+  frequency   Frequency // Using the enum from shared.prisma
+  department  Departments // Using the enum from shared.prisma
+
+  controlTemplates FrameworkEditorControlTemplate[]
+
+  // Dates
+  createdAt DateTime @default(now())
+  updatedAt DateTime @default(now()) @updatedAt
+
+  // Instances
+  tasks Task[]
+}
+
+model FrameworkEditorControlTemplate {
+  id          String @id @default(dbgenerated("generate_prefixed_cuid('frk_ct'::text)"))
+  name        String
+  description String
+
+  policyTemplates FrameworkEditorPolicyTemplate[]
+  requirements    FrameworkEditorRequirement[]
+  taskTemplates   FrameworkEditorTaskTemplate[]
+
+  // Dates
+  createdAt DateTime @default(now())
+  updatedAt DateTime @default(now()) @updatedAt
+
+  // Instances
+  controls Control[]
+}
+
+model FrameworkInstance {
+  // Metadata
+  id             String @id @default(dbgenerated("generate_prefixed_cuid('frm'::text)"))
+  organizationId String
+
+  frameworkId String
+  framework   FrameworkEditorFramework @relation(fields: [frameworkId], references: [id], onDelete: Cascade)
+
+  // Relationships
+  organization       Organization     @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  requirementsMapped RequirementMap[]
+
+  @@unique([organizationId, frameworkId])
+}
+
+model Integration {
+  id             String              @id @default(dbgenerated("generate_prefixed_cuid('int'::text)"))
+  name           String
+  integrationId  String
+  settings       Json
+  userSettings   Json
+  organizationId String
+  lastRunAt      DateTime?
+  organization   Organization        @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  results        IntegrationResult[]
+
+  @@index([organizationId])
+}
+
+model IntegrationResult {
+  id             String    @id @default(dbgenerated("generate_prefixed_cuid('itr'::text)"))
+  title          String?
+  description    String?
+  remediation    String?
+  status         String?
+  severity       String?
+  resultDetails  Json?
+  completedAt    DateTime? @default(now())
+  integrationId  String
+  organizationId String
+  assignedUserId String?
+
+  assignedUser User?       @relation(fields: [assignedUserId], references: [id], onDelete: Cascade)
+  integration  Integration @relation(fields: [integrationId], references: [id], onDelete: Cascade)
+
+  @@index([integrationId])
+}
+
+model Onboarding {
+  organizationId        String       @id
+  organization          Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  policies              Boolean      @default(false)
+  employees             Boolean      @default(false)
+  vendors               Boolean      @default(false)
+  integrations          Boolean      @default(false)
+  risk                  Boolean      @default(false)
+  team                  Boolean      @default(false)
+  tasks                 Boolean      @default(false)
+  callBooked            Boolean      @default(false)
+  companyBookingDetails Json?
+  companyDetails        Json?
+  triggerJobId          String?
+  triggerJobCompleted   Boolean      @default(false)
+
+  @@index([organizationId])
+}
+
+model Organization {
+  id                  String      @id @default(dbgenerated("generate_prefixed_cuid('org'::text)"))
+  name                String
+  slug                String      @unique @default(dbgenerated("generate_prefixed_cuid('slug'::text)"))
+  logo                String?
+  createdAt           DateTime    @default(now())
+  metadata            String?
+  onboarding          Onboarding?
+  website             String?
+  onboardingCompleted Boolean     @default(false)
+  hasAccess           Boolean     @default(false)
+
+  // FleetDM
+  fleetDmLabelId        Int?
+  isFleetSetupCompleted Boolean @default(false)
+
+  apiKeys            ApiKey[]
+  auditLog           AuditLog[]
+  controls           Control[]
+  frameworkInstances FrameworkInstance[]
+  integrations       Integration[]
+  invitations        Invitation[]
+  members            Member[]
+  policy             Policy[]
+  risk               Risk[]
+  vendors            Vendor[]
+  tasks              Task[]
+  comments           Comment[]
+  attachments        Attachment[]
+  trust              Trust[]
+  context            Context[]
+
+  @@index([slug])
+}
+
+model Policy {
+  id               String       @id @default(dbgenerated("generate_prefixed_cuid('pol'::text)"))
+  name             String
+  description      String?
+  status           PolicyStatus @default(draft)
+  content          Json[]
+  frequency        Frequency?
+  department       Departments?
+  isRequiredToSign Boolean      @default(false)
+  signedBy         String[]     @default([])
+  reviewDate       DateTime?
+  isArchived       Boolean      @default(false)
+
+  // Dates
+  createdAt       DateTime  @default(now())
+  updatedAt       DateTime  @updatedAt
+  lastArchivedAt  DateTime?
+  lastPublishedAt DateTime?
+
+  // Relationships
+  organizationId   String
+  organization     Organization                   @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  assigneeId       String?
+  assignee         Member?                        @relation("PolicyAssignee", fields: [assigneeId], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  approverId       String?
+  approver         Member?                        @relation("PolicyApprover", fields: [approverId], references: [id], onDelete: SetNull, onUpdate: Cascade)
+  policyTemplateId String?
+  policyTemplate   FrameworkEditorPolicyTemplate? @relation(fields: [policyTemplateId], references: [id])
+  controls         Control[]
+
+  @@index([organizationId])
+}
+
+model RequirementMap {
+  id String @id @default(dbgenerated("generate_prefixed_cuid('req'::text)"))
+
+  requirementId String
+  requirement   FrameworkEditorRequirement @relation(fields: [requirementId], references: [id], onDelete: Cascade)
+
+  controlId String
+  control   Control @relation(fields: [controlId], references: [id], onDelete: Cascade)
+
+  frameworkInstanceId String
+  frameworkInstance   FrameworkInstance @relation(fields: [frameworkInstanceId], references: [id], onDelete: Cascade)
+
+  @@unique([controlId, frameworkInstanceId, requirementId])
+  @@index([requirementId, frameworkInstanceId])
+}
+
+model Risk {
+  // Metadata
+  id                           String            @id @default(dbgenerated("generate_prefixed_cuid('rsk'::text)"))
+  title                        String
+  description                  String
+  category                     RiskCategory
+  department                   Departments?
+  status                       RiskStatus        @default(open)
+  likelihood                   Likelihood        @default(very_unlikely)
+  impact                       Impact            @default(insignificant)
+  residualLikelihood           Likelihood        @default(very_unlikely)
+  residualImpact               Impact            @default(insignificant)
+  treatmentStrategyDescription String?
+  treatmentStrategy            RiskTreatmentType @default(accept)
+
+  // Dates
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  // Relationships
+  organizationId String
+  organization   Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  assigneeId     String?
+  assignee       Member?      @relation(fields: [assigneeId], references: [id])
+  tasks          Task[]
+
+  @@index([organizationId])
+  @@index([category])
+  @@index([status])
+}
+
+enum RiskTreatmentType {
+  accept
+  avoid
+  mitigate
+  transfer
+}
+
+enum RiskCategory {
+  customer
+  governance
+  operations
+  other
+  people
+  regulatory
+  reporting
+  resilience
+  technology
+  vendor_management
+}
+
+enum RiskStatus {
+  open
+  pending
+  closed
+  archived
+}
+
+model ApiKey {
+  id         String    @id @default(dbgenerated("generate_prefixed_cuid('apk'::text)"))
+  name       String
+  key        String    @unique
+  salt       String?
+  createdAt  DateTime  @default(now())
+  expiresAt  DateTime?
+  lastUsedAt DateTime?
+  isActive   Boolean   @default(true)
+
+  organization   Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  organizationId String
+
+  @@index([organizationId])
+  @@index([key])
+}
+
+model AuditLog {
+  id             String              @id @default(dbgenerated("generate_prefixed_cuid('aud'::text)"))
+  timestamp      DateTime            @default(now())
+  organizationId String
+  userId         String
+  memberId       String?
+  data           Json
+  description    String?
+  entityId       String?
+  entityType     AuditLogEntityType?
+
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  user         User         @relation(fields: [userId], references: [id], onDelete: Cascade)
+  member       Member?      @relation(fields: [memberId], references: [id], onDelete: Cascade)
+
+  @@index([userId])
+  @@index([organizationId])
+  @@index([memberId])
+  @@index([entityType])
+}
+
+enum AuditLogEntityType {
+  organization
+  framework
+  requirement
+  control
+  policy
+  task
+  people
+  risk
+  vendor
+  tests
+  integration
+}
+
+model GlobalVendors {
+  website                     String   @id @unique
+  company_name                String?
+  legal_name                  String?
+  company_description         String?
+  company_hq_address          String?
+  privacy_policy_url          String?
+  terms_of_service_url        String?
+  service_level_agreement_url String?
+  security_page_url           String?
+  trust_page_url              String?
+  security_certifications     String[]
+  subprocessors               String[]
+  type_of_company             String?
+
+  approved  Boolean  @default(false)
+  createdAt DateTime @default(now())
+
+  @@index([website])
+}
+
+enum Departments {
+  none
+  admin
+  gov
+  hr
+  it
+  itsm
+  qms
+}
+
+enum Frequency {
+  monthly
+  quarterly
+  yearly
+}
+
+enum Likelihood {
+  very_unlikely
+  unlikely
+  possible
+  likely
+  very_likely
+}
+
+enum Impact {
+  insignificant
+  minor
+  moderate
+  major
+  severe
+}
+
+model Task {
+  // Metadata
+  id          String         @id @default(dbgenerated("generate_prefixed_cuid('tsk'::text)"))
+  title       String
+  description String
+  status      TaskStatus     @default(todo)
+  frequency   TaskFrequency?
+  department  Departments?   @default(none)
+  order       Int            @default(0)
+
+  // Dates
+  createdAt       DateTime  @default(now())
+  updatedAt       DateTime  @updatedAt
+  lastCompletedAt DateTime?
+
+  // Relationships
+  controls       Control[]
+  vendors        Vendor[]
+  risks          Risk[]
+  assigneeId     String?
+  assignee       Member?                      @relation(fields: [assigneeId], references: [id])
+  organizationId String
+  organization   Organization                 @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  taskTemplateId String?
+  taskTemplate   FrameworkEditorTaskTemplate? @relation(fields: [taskTemplateId], references: [id])
+}
+
+enum TaskStatus {
+  todo
+  in_progress
+  done
+  not_relevant
+}
+
+enum TaskFrequency {
+  daily
+  weekly
+  monthly
+  quarterly
+  yearly
+}
+
+model Trust {
+  organizationId     String
+  organization       Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  friendlyUrl        String?      @unique
+  domain             String?
+  domainVerified     Boolean      @default(false)
+  isVercelDomain     Boolean      @default(false)
+  vercelVerification String?
+  status             TrustStatus  @default(draft)
+  contactEmail       String?
+
+  email         String?
+  privacyPolicy String?
+  soc2          Boolean @default(false)
+  iso27001      Boolean @default(false)
+  gdpr          Boolean @default(false)
+
+  soc2_status     FrameworkStatus @default(started)
+  iso27001_status FrameworkStatus @default(started)
+  gdpr_status     FrameworkStatus @default(started)
+
+  @@id([status, organizationId])
+  @@unique([organizationId])
+  @@index([organizationId])
+  @@index([friendlyUrl])
+}
+
+enum TrustStatus {
+  draft
+  published
+}
+
+enum FrameworkStatus {
+  started
+  in_progress
+  compliant
+}
+
+model Vendor {
+  id                  String         @id @default(dbgenerated("generate_prefixed_cuid('vnd'::text)"))
+  name                String
+  description         String
+  category            VendorCategory @default(other)
+  status              VendorStatus   @default(not_assessed)
+  inherentProbability Likelihood     @default(very_unlikely)
+  inherentImpact      Impact         @default(insignificant)
+  residualProbability Likelihood     @default(very_unlikely)
+  residualImpact      Impact         @default(insignificant)
+  website             String?
+
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+
+  organizationId String
+  organization   Organization    @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  assigneeId     String?
+  assignee       Member?         @relation(fields: [assigneeId], references: [id], onDelete: Cascade)
+  contacts       VendorContact[]
+  tasks          Task[]
+
+  @@index([organizationId])
+  @@index([assigneeId])
+  @@index([category])
+}
+
+model VendorContact {
+  id        String   @id @default(dbgenerated("generate_prefixed_cuid('vct'::text)"))
+  vendorId  String
+  name      String
+  email     String
+  phone     String
+  createdAt DateTime @default(now())
+  updatedAt DateTime @updatedAt
+  Vendor    Vendor   @relation(fields: [vendorId], references: [id], onDelete: Cascade)
+
+  @@index([vendorId])
+}
+
+enum VendorCategory {
+  cloud
+  infrastructure
+  software_as_a_service
+  finance
+  marketing
+  sales
+  hr
+  other
+}
+
+enum VendorStatus {
+  not_assessed
+  in_progress
+  assessed
+}
+
+generator client {
+  provider        = "prisma-client-js"
+  previewFeatures = ["postgresqlExtensions"]
+  binaryTargets   = ["native", "darwin-arm64", "debian-openssl-3.0.x", "linux-musl-openssl-3.0.x"]
+  output          = "./generated/prisma"
+}
+
+datasource db {
+  provider   = "postgresql"
+  url        = env("DATABASE_URL")
+  directUrl  = env("DATABASE_URL")
+  extensions = [pgcrypto]
+}