manage license app launch policies

prisma/auth.schema.prisma

@@ -71,11 +71,26 @@ model License {
   createdAt           DateTime      @default(now()) @map("created_at") @db.Timestamptz(3)
   updatedAt           DateTime      @updatedAt @map("updated_at") @db.Timestamptz(3)
   userLicenses        UserLicense[]
+  appPermissions      LicenseAppPermission[]
 
   @@index([isActive])
   @@map("licenses")
 }
 
+model LicenseAppPermission {
+  id        String   @id @default(uuid()) @db.Uuid
+  licenseId String   @map("license_id") @db.Uuid
+  appKey    String   @map("app_key")
+  canLaunch Boolean  @default(true) @map("can_launch")
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(3)
+  updatedAt DateTime @updatedAt @map("updated_at") @db.Timestamptz(3)
+  license   License  @relation(fields: [licenseId], references: [id], onDelete: Cascade)
+
+  @@unique([licenseId, appKey])
+  @@index([appKey])
+  @@map("license_app_permissions")
+}
+
 model UserLicense {
   id           String   @id @default(uuid()) @db.Uuid
   userId       String   @map("user_id") @db.Uuid
@@ -97,6 +112,7 @@ model Organization {
   name         String
   type         OrganizationType  @default(OTHER)
   domain       String?
+  defaultLicenseCode String?     @map("default_license_code")
   isActive     Boolean           @default(true) @map("is_active")
   createdAt    DateTime          @default(now()) @map("created_at") @db.Timestamptz(3)
   updatedAt    DateTime          @updatedAt @map("updated_at") @db.Timestamptz(3)

prisma/migrations/20260710104000_add_organization_default_license/migration.sql

@@ -0,0 +1,7 @@
+DO $$
+BEGIN
+  IF to_regclass('public.organizations') IS NOT NULL THEN
+    ALTER TABLE "organizations"
+    ADD COLUMN IF NOT EXISTS "default_license_code" TEXT;
+  END IF;
+END $$;

prisma/migrations/20260710105500_add_license_app_permissions/migration.sql

@@ -0,0 +1,19 @@
+DO $$
+BEGIN
+  IF to_regclass('public.licenses') IS NOT NULL THEN
+    CREATE TABLE IF NOT EXISTS "license_app_permissions" (
+      "id" UUID NOT NULL,
+      "license_id" UUID NOT NULL,
+      "app_key" TEXT NOT NULL,
+      "can_launch" BOOLEAN NOT NULL DEFAULT true,
+      "created_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+      "updated_at" TIMESTAMPTZ(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+      CONSTRAINT "license_app_permissions_pkey" PRIMARY KEY ("id"),
+      CONSTRAINT "license_app_permissions_license_id_fkey" FOREIGN KEY ("license_id") REFERENCES "licenses"("id") ON DELETE CASCADE ON UPDATE CASCADE
+    );
+
+    CREATE UNIQUE INDEX IF NOT EXISTS "license_app_permissions_license_id_app_key_key" ON "license_app_permissions"("license_id", "app_key");
+    CREATE INDEX IF NOT EXISTS "license_app_permissions_app_key_idx" ON "license_app_permissions"("app_key");
+  END IF;
+END $$;