@trycompai/db 2.0.3 → 2.1.1

package/dist/schema.prisma

@@ -170,6 +170,7 @@ model Member {
   jobTitle                        String?
   isActive                        Boolean                           @default(true)
   deactivated                     Boolean                           @default(false)
+  backgroundCheckExempt           Boolean                           @default(false)
   externalUserId                  String?
   externalUserSource              String?
   employeeTrainingVideoCompletion EmployeeTrainingVideoCompletion[]
@@ -373,8 +374,8 @@ model BackgroundCheckRequest {
   createdAt                 DateTime              @default(now())
   updatedAt                 DateTime              @updatedAt
 
-  organization  Organization                    @relation(fields: [organizationId], references: [id], onDelete: Cascade)
-  member        Member                          @relation(fields: [memberId], references: [id], onDelete: Cascade)
+  organization  Organization                  @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  member        Member                        @relation(fields: [memberId], references: [id], onDelete: Cascade)
   webhookEvents BackgroundCheckWebhookEvent[]
 
   @@unique([organizationId, memberId])
@@ -815,6 +816,21 @@ model EvidenceSubmission {
   @@index([submittedById, status])
 }
 
+model EvidenceFormSetting {
+  id             String           @id @default(dbgenerated("generate_prefixed_cuid('efs'::text)"))
+  organizationId String
+  formType       EvidenceFormType
+  isNotRelevant  Boolean          @default(false)
+  createdAt      DateTime         @default(now())
+  updatedAt      DateTime         @updatedAt
+
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  @@unique([organizationId, formType])
+  @@index([organizationId])
+  @@index([organizationId, isNotRelevant])
+}
+
 // ===== finding.prisma =====
 enum FindingType {
   soc2
@@ -1731,19 +1747,146 @@ model OrganizationChart {
 
 // ===== organization-billing.prisma =====
 model OrganizationBilling {
-  id                                   String    @id @default(dbgenerated("generate_prefixed_cuid('obil'::text)"))
-  organizationId                       String    @unique @map("organization_id")
-  stripeCustomerId                     String    @map("stripe_customer_id")
-  stripeBackgroundCheckPaymentMethodId String?   @map("stripe_background_check_payment_method_id")
-  backgroundCheckPaymentMethodSetupAt  DateTime? @map("background_check_payment_method_setup_at")
-  createdAt                            DateTime  @default(now()) @map("created_at")
-  updatedAt                            DateTime  @updatedAt @map("updated_at")
+  id                     String    @id @default(dbgenerated("generate_prefixed_cuid('obil'::text)"))
+  organizationId         String    @unique @map("organization_id")
+  stripeCustomerId       String    @map("stripe_customer_id")
+  stripePaymentMethodId  String?   @map("stripe_payment_method_id")
+  paymentMethodUpdatedAt DateTime? @map("payment_method_updated_at")
+  createdAt              DateTime  @default(now()) @map("created_at")
+  updatedAt              DateTime  @updatedAt @map("updated_at")
 
   organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
 
   @@map("organization_billing")
 }
 
+model OrganizationBillingSubscription {
+  id                       String    @id @default(dbgenerated("generate_prefixed_cuid('obs'::text)"))
+  organizationId           String    @map("organization_id")
+  skuKey                   String    @map("sku_key")
+  stripeSubscriptionId     String    @map("stripe_subscription_id")
+  stripeSubscriptionItemId String    @map("stripe_subscription_item_id")
+  stripePriceId            String    @map("stripe_price_id")
+  stripeStatus             String    @map("stripe_status")
+  currentPeriodStart       DateTime? @map("current_period_start")
+  currentPeriodEnd         DateTime? @map("current_period_end")
+  includedQuantity         Int       @map("included_quantity")
+  usedQuantity             Int       @default(0) @map("used_quantity")
+  cancelAtPeriodEnd        Boolean   @default(false) @map("cancel_at_period_end")
+  canceledAt               DateTime? @map("canceled_at")
+  createdAt                DateTime  @default(now()) @map("created_at")
+  updatedAt                DateTime  @updatedAt @map("updated_at")
+
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  @@unique([organizationId, skuKey])
+  @@unique([stripeSubscriptionId, stripeSubscriptionItemId], map: "org_billing_subs_stripe_sub_item_key")
+  @@index([organizationId])
+  @@index([stripeSubscriptionId])
+  @@index([skuKey])
+  @@map("organization_billing_subscriptions")
+}
+
+model BillingUsageEvent {
+  id                       String    @id @default(dbgenerated("generate_prefixed_cuid('bue'::text)"))
+  organizationId           String    @map("organization_id")
+  skuKey                   String    @map("sku_key")
+  eventType                String    @map("event_type")
+  quantity                 Int
+  sourceResourceId         String?   @map("source_resource_id")
+  idempotencyKey           String    @unique @map("idempotency_key")
+  stripeEventId            String?   @map("stripe_event_id")
+  stripeInvoiceId          String?   @map("stripe_invoice_id")
+  stripeSubscriptionItemId String?   @map("stripe_subscription_item_id")
+  periodStart              DateTime? @map("period_start")
+  periodEnd                DateTime? @map("period_end")
+  createdAt                DateTime  @default(now()) @map("created_at")
+
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  @@index([organizationId, skuKey])
+  @@index([stripeEventId])
+  @@index([stripeInvoiceId])
+  @@map("billing_usage_events")
+}
+
+model StripeWebhookEvent {
+  id            String   @id @default(dbgenerated("generate_prefixed_cuid('swe'::text)"))
+  stripeEventId String   @unique @map("stripe_event_id")
+  eventType     String   @map("event_type")
+  payload       Json
+  status        String   @default("processed")
+  error         String?
+  processedAt   DateTime @default(now()) @map("processed_at")
+  createdAt     DateTime @default(now()) @map("created_at")
+
+  @@index([eventType])
+  @@index([status])
+  @@map("stripe_webhook_events")
+}
+
+model BillingAuditEvent {
+  id             String   @id @default(dbgenerated("generate_prefixed_cuid('bae'::text)"))
+  organizationId String   @map("organization_id")
+  eventType      String   @map("event_type")
+  skuKey         String?  @map("sku_key")
+  stripeEventId  String?  @map("stripe_event_id")
+  metadata       Json?
+  createdAt      DateTime @default(now()) @map("created_at")
+
+  organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+
+  @@index([organizationId])
+  @@index([stripeEventId])
+  @@index([skuKey])
+  @@map("billing_audit_events")
+}
+
+model BillingCreditBalance {
+  id             String   @id @default(dbgenerated("generate_prefixed_cuid('bcb'::text)"))
+  organizationId String   @map("organization_id")
+  productKey     String   @map("product_key")
+  skuKey         String?  @map("sku_key")
+  balance        Int      @default(0)
+  totalGranted   Int      @default(0) @map("total_granted")
+  totalConsumed  Int      @default(0) @map("total_consumed")
+  totalRefunded  Int      @default(0) @map("total_refunded")
+  lastSource     String   @default("manual") @map("last_source")
+  createdAt      DateTime @default(now()) @map("created_at")
+  updatedAt      DateTime @updatedAt @map("updated_at")
+
+  organization Organization         @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  events       BillingCreditEvent[]
+
+  @@index([organizationId, productKey])
+  @@map("billing_credit_balances")
+}
+
+model BillingCreditEvent {
+  id                String   @id @default(dbgenerated("generate_prefixed_cuid('bce'::text)"))
+  organizationId    String   @map("organization_id")
+  balanceId         String   @map("balance_id")
+  productKey        String   @map("product_key")
+  skuKey            String?  @map("sku_key")
+  eventType         String   @map("event_type")
+  quantity          Int
+  source            String
+  note              String?
+  adminUserId       String?  @map("admin_user_id")
+  sourceResourceId  String?  @map("source_resource_id")
+  linkedEventId     String?  @map("linked_event_id")
+  idempotencyKey    String   @unique @map("idempotency_key")
+  createdAt         DateTime @default(now()) @map("created_at")
+
+  organization Organization         @relation(fields: [organizationId], references: [id], onDelete: Cascade)
+  balance      BillingCreditBalance @relation(fields: [balanceId], references: [id], onDelete: Cascade)
+
+  @@index([organizationId, productKey])
+  @@index([sourceResourceId])
+  @@index([linkedEventId])
+  @@map("billing_credit_events")
+}
+
 // ===== organization.prisma =====
 model Organization {
   id                          String      @id @default(dbgenerated("generate_prefixed_cuid('org'::text)"))
@@ -1760,6 +1903,7 @@ model Organization {
   evidenceApprovalEnabled     Boolean     @default(false)
   deviceAgentStepEnabled      Boolean     @default(true)
   securityTrainingStepEnabled Boolean     @default(true)
+  backgroundCheckStepEnabled  Boolean     @default(true)
   whistleblowerReportEnabled  Boolean     @default(true)
   accessRequestFormEnabled    Boolean     @default(true)
 
@@ -1786,6 +1930,7 @@ model Organization {
   comments                           Comment[]
   attachments                        Attachment[]
   evidenceSubmissions                EvidenceSubmission[]
+  evidenceFormSettings               EvidenceFormSetting[]
   trust                              Trust[]
   context                            Context[]
   secrets                            Secret[]
@@ -1810,8 +1955,13 @@ model Organization {
   // Pentest credits — wallet of run-credits an org can spend.
   // Source of credits (trial / future Stripe subscription / top-up)
   // is metadata on the row; balance is unified.
-  pentestCredits PentestCredits?
-  billing        OrganizationBilling?
+  pentestCredits       PentestCredits?
+  billing              OrganizationBilling?
+  billingSubscriptions OrganizationBillingSubscription[]
+  billingUsageEvents   BillingUsageEvent[]
+  billingAuditEvents   BillingAuditEvent[]
+  billingCreditBalances BillingCreditBalance[]
+  billingCreditEvents   BillingCreditEvent[]
 
   // Browser Automation
   browserbaseContext BrowserbaseContext?
@@ -1880,7 +2030,7 @@ model PentestCredits {
   lastGrantSource String @default("trial") @map("last_grant_source")
 
   createdAt DateTime @default(now()) @map("created_at")
-  updatedAt DateTime @updatedAt        @map("updated_at")
+  updatedAt DateTime @updatedAt @map("updated_at")
 
   organization Organization @relation(fields: [organizationId], references: [id], onDelete: Cascade)
 
@@ -2135,6 +2285,20 @@ model Risk {
   residualImpact               Impact            @default(insignificant)
   treatmentStrategyDescription String?
   treatmentStrategy            RiskTreatmentType @default(accept)
+  // Per-strategy text store. When the user switches strategies, the current
+  // `treatmentStrategyDescription` is moved into this map under the OLD
+  // strategy key, and the NEW strategy's saved value is loaded back into the
+  // active field. Lets users keep an independent Mitigate plan + Accept
+  // rationale + Transfer rationale on the same risk.
+  // Shape: { mitigate?: string, accept?: string, transfer?: string, avoid?: string }
+  strategyDescriptions         Json?
+
+  // Active auto-link suggestion run (trigger.dev). Set when the user kicks
+  // off an AI suggest scan; cleared when the user applies or discards. Lets
+  // the UI resume an in-flight or completed-but-unreviewed scan after a
+  // page reload so progress isn't lost.
+  autoLinkRunId        String?
+  autoLinkRunStartedAt DateTime?
 
   // Dates
   createdAt DateTime @default(now())
@@ -2201,11 +2365,12 @@ model Secret {
 
 // ===== security-penetration-test-run.prisma =====
 model SecurityPenetrationTestRun {
-  id             String   @id @default(dbgenerated("generate_prefixed_cuid('ptr'::text)"))
-  organizationId String   @map("organization_id")
-  providerRunId  String   @map("provider_run_id")
-  createdAt      DateTime @default(now()) @map("created_at")
-  updatedAt      DateTime @updatedAt @map("updated_at")
+  id                   String   @id @default(dbgenerated("generate_prefixed_cuid('ptr'::text)"))
+  organizationId       String   @map("organization_id")
+  providerRunId        String   @map("provider_run_id")
+  billingUsageSourceId String?  @map("billing_usage_source_id")
+  createdAt            DateTime @default(now()) @map("created_at")
+  updatedAt            DateTime @updatedAt @map("updated_at")
 
   /// Set the first time we refund this run's credit (e.g. on
   /// `pentest.failed` / `pentest.cancelled` webhooks). Used to make the
@@ -3044,6 +3209,10 @@ model Vendor {
   inherentImpact      Impact         @default(insignificant)
   residualProbability Likelihood     @default(very_unlikely)
   residualImpact      Impact         @default(insignificant)
+  treatmentStrategy            RiskTreatmentType @default(accept)
+  treatmentStrategyDescription String?
+  // See `Risk.strategyDescriptions`.
+  strategyDescriptions         Json?
   website             String?
   isSubProcessor      Boolean        @default(false)
 
@@ -3053,6 +3222,11 @@ model Vendor {
   trustPortalOrder  Int?
   complianceBadges  Json? // Array of { type: 'soc2' | 'iso27001' | etc, verified: boolean }
 
+  // Active auto-link suggestion run (trigger.dev). Same semantics as
+  // Risk.autoLinkRunId — lets the UI resume an in-flight scan on reload.
+  autoLinkRunId        String?
+  autoLinkRunStartedAt DateTime?
+
   createdAt DateTime @default(now())
   updatedAt DateTime @updatedAt
 

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@trycompai/db",
     "description": "Database package with Prisma client and schema for Comp AI",
-    "version": "2.0.3",
+    "version": "2.1.1",
     "dependencies": {
         "@prisma/adapter-pg": "7.6.0",
         "@prisma/client": "7.6.0",