generator client { provider = "prisma-client-js" } datasource db { provider = "postgresql" } enum TenantStatus { TRIAL ACTIVE SUSPENDED PAST_DUE CANCELLED @@map("tenant_status") } model Tenant { id String @id @default(uuid()) @db.Uuid code String @unique slug String @unique legalName String @map("legal_name") tradeName String? @map("trade_name") taxId String? @map("tax_id") status TenantStatus @default(TRIAL) timezone String @default("America/Sao_Paulo") locale String @default("pt-BR") billingCurrency String @map("billing_currency") @default("BRL") telephonyDomain String? @map("telephony_domain") createdAt DateTime @default(now()) @map("created_at") updatedAt DateTime @updatedAt @map("updated_at") deletedAt DateTime? @map("deleted_at") memberships TenantMembership[] @@map("tenants") } enum UserStatus { ACTIVE DISABLED @@map("user_status") } // Identidade global do usuário. NUNCA carrega tenant_id diretamente — o tenant // é sempre resolvido via TenantMembership (agente.md secao 31). model User { id String @id @default(uuid()) @db.Uuid email String @unique passwordHash String @map("password_hash") name String status UserStatus @default(ACTIVE) createdAt DateTime @default(now()) @map("created_at") updatedAt DateTime @updatedAt @map("updated_at") deletedAt DateTime? @map("deleted_at") memberships TenantMembership[] @@map("users") } // Tabela tenant-scoped protegida por Row Level Security (ver migration // 'tenant_isolation' e docs/TENANT_ISOLATION.md). model TenantMembership { id String @id @default(uuid()) @db.Uuid tenantId String @map("tenant_id") @db.Uuid userId String @map("user_id") @db.Uuid createdAt DateTime @default(now()) @map("created_at") tenant Tenant @relation(fields: [tenantId], references: [id]) user User @relation(fields: [userId], references: [id]) @@unique([tenantId, userId]) @@index([tenantId]) @@map("tenant_memberships") }