Merge branch 'main' into feat/document-file-conversion

Resolved conflicts:
- create-document-data.ts: merged initialData + originalData/originalMimeType
- files.helpers.ts: kept both imports
- envelope-drop-zone-wrapper.tsx: adopted buildDropzoneRejectionDescription
- create-envelope-items.ts: adopted UNSAFE_createEnvelopeItems
- create-envelope.ts: integrated convertToPdfIfNeeded into createEnvelopeRouteCaller

Extended putPdfFileServerSide to accept { initialData, originalData,
originalMimeType } options; updated seal-document.handler call site.

packages/prisma/index.ts

@@ -1,5 +1,6 @@
 /// <reference types="@documenso/prisma/types/types.d.ts" />
 import { PrismaClient } from '@prisma/client';
+import { readReplicas } from '@prisma/extension-read-replicas';
 import { Kysely, PostgresAdapter, PostgresIntrospector, PostgresQueryCompiler } from 'kysely';
 import kyselyExtension from 'prisma-extension-kysely';
 
@@ -7,11 +8,15 @@ import type { DB } from './generated/types';
 import { getDatabaseUrl } from './helper';
 import { remember } from './utils/remember';
 
-export const prisma = remember(
+const prisma = remember(
   'prisma',
   () =>
     new PrismaClient({
       datasourceUrl: getDatabaseUrl(),
+      transactionOptions: {
+        maxWait: 5000,
+        timeout: 10000,
+      },
     }),
 );
 
@@ -65,4 +70,25 @@ export const prismaWithLogging = remember('prismaWithLogging', () => {
   return client;
 });
 
+export const prismaWithReplicas = remember('prismaWithReplicas', () => {
+  if (!process.env.NEXT_PRIVATE_DATABASE_REPLICA_URLS) {
+    return prisma;
+  }
+
+  const replicaUrls = process.env.NEXT_PRIVATE_DATABASE_REPLICA_URLS.split(',').map((url) =>
+    url.trim(),
+  );
+
+  // !: Nasty hack, means we can't do any fancy $primary/$replica queries
+  // !: but it is acceptable since not all setups will have replicas anyway.
+  // eslint-disable-next-line @typescript-eslint/consistent-type-assertions
+  return prisma.$extends(
+    readReplicas({
+      url: replicaUrls,
+    }),
+  ) as unknown as typeof prisma;
+});
+
+export { prismaWithReplicas as prisma };
+
 export { sql } from 'kysely';

packages/prisma/migrations/20251101000330_add_new_webhook_events/migration.sql

@@ -0,0 +1,14 @@
+-- AlterEnum
+-- This migration adds more than one value to an enum.
+-- With PostgreSQL versions 11 and earlier, this is not possible
+-- in a single migration. This can be worked around by creating
+-- multiple migrations, each migration adding only one value to
+-- the enum.
+
+
+ALTER TYPE "WebhookTriggerEvents" ADD VALUE 'DOCUMENT_RECIPIENT_COMPLETED';
+ALTER TYPE "WebhookTriggerEvents" ADD VALUE 'DOCUMENT_REMINDER_SENT';
+ALTER TYPE "WebhookTriggerEvents" ADD VALUE 'TEMPLATE_CREATED';
+ALTER TYPE "WebhookTriggerEvents" ADD VALUE 'TEMPLATE_UPDATED';
+ALTER TYPE "WebhookTriggerEvents" ADD VALUE 'TEMPLATE_DELETED';
+ALTER TYPE "WebhookTriggerEvents" ADD VALUE 'TEMPLATE_USED';

packages/prisma/migrations/20260219091107_add_recipient_expirations/migration.sql

@@ -0,0 +1,18 @@
+-- AlterEnum
+ALTER TYPE "WebhookTriggerEvents" ADD VALUE 'RECIPIENT_EXPIRED';
+
+-- AlterTable
+ALTER TABLE "DocumentMeta" ADD COLUMN     "envelopeExpirationPeriod" JSONB;
+
+-- AlterTable
+ALTER TABLE "OrganisationGlobalSettings" ADD COLUMN     "envelopeExpirationPeriod" JSONB;
+
+-- AlterTable
+ALTER TABLE "Recipient" ADD COLUMN     "expirationNotifiedAt" TIMESTAMP(3),
+ADD COLUMN     "expiresAt" TIMESTAMP(3);
+
+-- AlterTable
+ALTER TABLE "TeamGlobalSettings" ADD COLUMN     "envelopeExpirationPeriod" JSONB;
+
+-- CreateIndex
+CREATE INDEX "Recipient_expiresAt_idx" ON "Recipient"("expiresAt");

packages/prisma/migrations/20260219141233_add_rate_limit_table/migration.sql

@@ -0,0 +1,13 @@
+-- CreateTable
+CREATE TABLE "RateLimit" (
+    "key" TEXT NOT NULL,
+    "action" TEXT NOT NULL,
+    "bucket" TIMESTAMP(3) NOT NULL,
+    "count" INTEGER NOT NULL DEFAULT 1,
+    "createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+
+    CONSTRAINT "RateLimit_pkey" PRIMARY KEY ("key","action","bucket")
+);
+
+-- CreateIndex
+CREATE INDEX "RateLimit_createdAt_idx" ON "RateLimit"("createdAt");

packages/prisma/migrations/20260224000000_add_email_domain_last_verified_at/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "EmailDomain" ADD COLUMN "lastVerifiedAt" TIMESTAMP(3);

packages/prisma/migrations/20260302223702_optimize_recipient_indexes/migration.sql

@@ -0,0 +1,17 @@
+-- CreateExtension
+CREATE EXTENSION IF NOT EXISTS pg_trgm;
+
+-- CreateIndex
+CREATE INDEX IF NOT EXISTS "Recipient_email_documentDeletedAt_envelopeId_idx" ON "Recipient"("email", "documentDeletedAt", "envelopeId");
+
+-- CreateIndex
+CREATE INDEX IF NOT EXISTS "Recipient_email_envelopeId_idx" ON "Recipient"("email", "envelopeId");
+
+-- CreateIndex
+CREATE INDEX IF NOT EXISTS "Recipient_email_signingStatus_envelopeId_role_idx" ON "Recipient"("email", "signingStatus", "envelopeId", "role");
+
+-- CreateIndex
+CREATE INDEX IF NOT EXISTS "Recipient_email_trgm_idx" ON "Recipient" USING GIN ("email" gin_trgm_ops);
+
+-- CreateIndex
+CREATE INDEX IF NOT EXISTS "Recipient_name_trgm_idx" ON "Recipient" USING GIN ("name" gin_trgm_ops);

packages/prisma/migrations/20260311000000_add_organisation_template_type/migration.sql

@@ -0,0 +1 @@
+ALTER TYPE "TemplateType" ADD VALUE 'ORGANISATION';

packages/prisma/migrations/20260401000000_add_reminder_settings/migration.sql

@@ -0,0 +1,16 @@
+-- AlterTable
+ALTER TABLE "DocumentMeta" ADD COLUMN     "reminderSettings" JSONB;
+
+-- AlterTable
+ALTER TABLE "OrganisationGlobalSettings" ADD COLUMN     "reminderSettings" JSONB;
+
+-- AlterTable
+ALTER TABLE "TeamGlobalSettings" ADD COLUMN     "reminderSettings" JSONB;
+
+-- AlterTable
+ALTER TABLE "Recipient" ADD COLUMN     "sentAt" TIMESTAMP(3),
+ADD COLUMN     "lastReminderSentAt" TIMESTAMP(3),
+ADD COLUMN     "nextReminderAt" TIMESTAMP(3);
+
+-- CreateIndex
+CREATE INDEX "Recipient_nextReminderAt_idx" ON "Recipient"("nextReminderAt");

packages/prisma/migrations/20260408052212_add_set_null_for_audit_log_foreign_key/migration.sql

@@ -0,0 +1,8 @@
+-- DropForeignKey
+ALTER TABLE "DocumentAuditLog" DROP CONSTRAINT "DocumentAuditLog_envelopeId_fkey";
+
+-- AlterTable
+ALTER TABLE "DocumentAuditLog" ALTER COLUMN "envelopeId" DROP NOT NULL;
+
+-- AddForeignKey
+ALTER TABLE "DocumentAuditLog" ADD CONSTRAINT "DocumentAuditLog_envelopeId_fkey" FOREIGN KEY ("envelopeId") REFERENCES "Envelope"("id") ON DELETE SET NULL ON UPDATE CASCADE;

packages/prisma/package.json

@@ -26,7 +26,7 @@
     "nanoid": "^5.1.6",
     "prisma": "^6.19.0",
     "prisma-extension-kysely": "^3.0.0",
-    "prisma-kysely": "^2.2.1",
+    "prisma-kysely": "^2.3.0",
     "prisma-json-types-generator": "^3.6.2",
     "ts-pattern": "^5.9.0",
     "zod": "^3.25.76",
@@ -38,4 +38,4 @@
     "tsx": "^4.20.6",
     "typescript": "5.6.2"
   }
-}
+}

packages/prisma/schema.prisma

@@ -172,6 +172,13 @@ enum WebhookTriggerEvents {
   DOCUMENT_COMPLETED
   DOCUMENT_REJECTED
   DOCUMENT_CANCELLED
+  RECIPIENT_EXPIRED
+  DOCUMENT_RECIPIENT_COMPLETED
+  DOCUMENT_REMINDER_SENT
+  TEMPLATE_CREATED
+  TEMPLATE_UPDATED
+  TEMPLATE_DELETED
+  TEMPLATE_USED
 }
 
 model Webhook {
@@ -459,7 +466,7 @@ model EnvelopeItem {
 
 model DocumentAuditLog {
   id         String   @id @default(cuid())
-  envelopeId String
+  envelopeId String?
   createdAt  DateTime @default(now())
   type       String
   data       Json
@@ -471,7 +478,7 @@ model DocumentAuditLog {
   userAgent String?
   ipAddress String?
 
-  envelope Envelope @relation(fields: [envelopeId], references: [id], onDelete: Cascade)
+  envelope Envelope? @relation(fields: [envelopeId], references: [id], onDelete: SetNull)
 
   @@index([envelopeId])
 }
@@ -502,7 +509,7 @@ enum DocumentDistributionMethod {
   NONE
 }
 
-/// @zod.import(["import { ZDocumentEmailSettingsSchema } from '@documenso/lib/types/document-email';"])
+/// @zod.import(["import { ZDocumentEmailSettingsSchema } from '@documenso/lib/types/document-email';", "import { ZEnvelopeExpirationPeriod as ZEnvelopeExpirationPeriodSchema } from '@documenso/lib/constants/envelope-expiration';", "import { ZEnvelopeReminderSettings as ZEnvelopeReminderSettingsSchema } from '@documenso/lib/constants/envelope-reminder';"])
 model DocumentMeta {
   id                     String               @id @default(cuid())
   subject                String?
@@ -524,6 +531,10 @@ model DocumentMeta {
   emailReplyTo  String?
   emailId       String?
 
+  envelopeExpirationPeriod Json? /// [EnvelopeExpirationPeriod] @zod.custom.use(ZEnvelopeExpirationPeriodSchema)
+
+  reminderSettings Json? /// [EnvelopeReminderSettings] @zod.custom.use(ZEnvelopeReminderSettingsSchema)
+
   envelope Envelope?
 }
 
@@ -571,29 +582,41 @@ enum RecipientRole {
 
 /// @zod.import(["import { ZRecipientAuthOptionsSchema } from '@documenso/lib/types/document-auth';"])
 model Recipient {
-  id                Int           @id @default(autoincrement())
-  envelopeId        String
-  email             String        @db.VarChar(255)
-  name              String        @default("") @db.VarChar(255)
-  token             String
-  documentDeletedAt DateTime?
-  expired           DateTime?
-  signedAt          DateTime?
-  authOptions       Json? /// [RecipientAuthOptions] @zod.custom.use(ZRecipientAuthOptionsSchema)
-  signingOrder      Int? /// @zod.number.describe("The order in which the recipient should sign the document. Only works if the document is set to sequential signing.")
-  rejectionReason   String?
-  role              RecipientRole @default(SIGNER)
-  readStatus        ReadStatus    @default(NOT_OPENED)
-  signingStatus     SigningStatus @default(NOT_SIGNED)
-  sendStatus        SendStatus    @default(NOT_SENT)
-  envelope          Envelope      @relation(fields: [envelopeId], references: [id], onDelete: Cascade)
-  fields            Field[]
-  signatures        Signature[]
+  id                   Int           @id @default(autoincrement())
+  envelopeId           String
+  email                String        @db.VarChar(255)
+  name                 String        @default("") @db.VarChar(255)
+  token                String
+  documentDeletedAt    DateTime?
+  expired              DateTime? // deprecated Not in use. To be removed in a future migration.
+  expiresAt            DateTime?
+  expirationNotifiedAt DateTime?
+  sentAt               DateTime?
+  signedAt             DateTime?
+  lastReminderSentAt   DateTime?
+  nextReminderAt       DateTime?
+  authOptions          Json? /// [RecipientAuthOptions] @zod.custom.use(ZRecipientAuthOptionsSchema)
+  signingOrder         Int? /// @zod.number.describe("The order in which the recipient should sign the document. Only works if the document is set to sequential signing.")
+  rejectionReason      String?
+  role                 RecipientRole @default(SIGNER)
+  readStatus           ReadStatus    @default(NOT_OPENED)
+  signingStatus        SigningStatus @default(NOT_SIGNED)
+  sendStatus           SendStatus    @default(NOT_SENT)
+  envelope             Envelope      @relation(fields: [envelopeId], references: [id], onDelete: Cascade)
+  fields               Field[]
+  signatures           Signature[]
 
   @@index([token])
   @@index([email])
   @@index([envelopeId])
   @@index([signedAt])
+  @@index([expiresAt])
+  @@index([email, documentDeletedAt, envelopeId], map: "Recipient_email_documentDeletedAt_envelopeId_idx")
+  @@index([email, envelopeId], map: "Recipient_email_envelopeId_idx")
+  @@index([email, signingStatus, envelopeId, role], map: "Recipient_email_signingStatus_envelopeId_role_idx")
+  @@index([nextReminderAt])
+  @@index([email(ops: raw("gin_trgm_ops"))], map: "Recipient_email_trgm_idx", type: Gin)
+  @@index([name(ops: raw("gin_trgm_ops"))], map: "Recipient_name_trgm_idx", type: Gin)
 }
 
 enum FieldType {
@@ -810,7 +833,7 @@ enum OrganisationMemberInviteStatus {
   DECLINED
 }
 
-/// @zod.import(["import { ZDocumentEmailSettingsSchema } from '@documenso/lib/types/document-email';", "import { ZDefaultRecipientsSchema } from '@documenso/lib/types/default-recipients';"])
+/// @zod.import(["import { ZDocumentEmailSettingsSchema } from '@documenso/lib/types/document-email';", "import { ZDefaultRecipientsSchema } from '@documenso/lib/types/default-recipients';", "import { ZEnvelopeExpirationPeriod as ZEnvelopeExpirationPeriodSchema } from '@documenso/lib/constants/envelope-expiration';", "import { ZEnvelopeReminderSettings as ZEnvelopeReminderSettingsSchema } from '@documenso/lib/constants/envelope-reminder';"])
 model OrganisationGlobalSettings {
   id           String        @id
   organisation Organisation?
@@ -842,11 +865,15 @@ model OrganisationGlobalSettings {
   brandingUrl            String  @default("")
   brandingCompanyDetails String  @default("")
 
+  envelopeExpirationPeriod Json? /// [EnvelopeExpirationPeriod] @zod.custom.use(ZEnvelopeExpirationPeriodSchema)
+
+  reminderSettings Json? /// [EnvelopeReminderSettings] @zod.custom.use(ZEnvelopeReminderSettingsSchema)
+
   // AI features settings.
   aiFeaturesEnabled Boolean @default(false)
 }
 
-/// @zod.import(["import { ZDocumentEmailSettingsSchema } from '@documenso/lib/types/document-email';", "import { ZDefaultRecipientsSchema } from '@documenso/lib/types/default-recipients';"])
+/// @zod.import(["import { ZDocumentEmailSettingsSchema } from '@documenso/lib/types/document-email';", "import { ZDefaultRecipientsSchema } from '@documenso/lib/types/default-recipients';", "import { ZEnvelopeExpirationPeriod as ZEnvelopeExpirationPeriodSchema } from '@documenso/lib/constants/envelope-expiration';", "import { ZEnvelopeReminderSettings as ZEnvelopeReminderSettingsSchema } from '@documenso/lib/constants/envelope-reminder';"])
 model TeamGlobalSettings {
   id   String @id
   team Team?
@@ -879,6 +906,10 @@ model TeamGlobalSettings {
   brandingUrl            String?
   brandingCompanyDetails String?
 
+  envelopeExpirationPeriod Json? /// [EnvelopeExpirationPeriod] @zod.custom.use(ZEnvelopeExpirationPeriodSchema)
+
+  reminderSettings Json? /// [EnvelopeReminderSettings] @zod.custom.use(ZEnvelopeReminderSettingsSchema)
+
   // AI features settings.
   aiFeaturesEnabled Boolean?
 }
@@ -935,6 +966,7 @@ model TeamEmailVerification {
 enum TemplateType {
   PUBLIC
   PRIVATE
+  ORGANISATION
 }
 
 model TemplateDirectLink {
@@ -1029,10 +1061,11 @@ model EmailDomain {
 
   status EmailDomainStatus @default(PENDING)
 
-  selector   String @unique
-  domain     String @unique
-  publicKey  String
-  privateKey String
+  selector       String    @unique
+  domain         String    @unique
+  publicKey      String
+  privateKey     String
+  lastVerifiedAt DateTime?
 
   organisationId String
   organisation   Organisation @relation(fields: [organisationId], references: [id], onDelete: Cascade)
@@ -1078,3 +1111,15 @@ model Counter {
   id    String @id
   value Int
 }
+
+model RateLimit {
+  key    String
+  action String
+  bucket DateTime
+  count  Int      @default(1)
+
+  createdAt DateTime @default(now())
+
+  @@id([key, action, bucket])
+  @@index([createdAt])
+}

packages/prisma/seed/documents.ts

@@ -6,6 +6,18 @@ import { match } from 'ts-pattern';
 
 import { createEnvelope } from '@documenso/lib/server-only/envelope/create-envelope';
 import { incrementDocumentId } from '@documenso/lib/server-only/envelope/increment-id';
+import {
+  FIELD_CHECKBOX_META_DEFAULT_VALUES,
+  FIELD_DATE_META_DEFAULT_VALUES,
+  FIELD_DROPDOWN_META_DEFAULT_VALUES,
+  FIELD_EMAIL_META_DEFAULT_VALUES,
+  FIELD_INITIALS_META_DEFAULT_VALUES,
+  FIELD_NAME_META_DEFAULT_VALUES,
+  FIELD_NUMBER_META_DEFAULT_VALUES,
+  FIELD_RADIO_META_DEFAULT_VALUES,
+  FIELD_SIGNATURE_META_DEFAULT_VALUES,
+  FIELD_TEXT_META_DEFAULT_VALUES,
+} from '@documenso/lib/types/field-meta';
 import { prefixedId } from '@documenso/lib/universal/id';
 
 import { prisma } from '..';
@@ -576,6 +588,19 @@ export const seedPendingDocumentWithFullFields = async ({
               height: new Prisma.Decimal(5),
               envelopeId: document.id,
               envelopeItemId: firstItem.id,
+              fieldMeta: match(fieldType)
+                .with(FieldType.DATE, () => FIELD_DATE_META_DEFAULT_VALUES)
+                .with(FieldType.EMAIL, () => FIELD_EMAIL_META_DEFAULT_VALUES)
+                .with(FieldType.NAME, () => FIELD_NAME_META_DEFAULT_VALUES)
+                .with(FieldType.SIGNATURE, () => FIELD_SIGNATURE_META_DEFAULT_VALUES)
+                .with(FieldType.TEXT, () => FIELD_TEXT_META_DEFAULT_VALUES)
+                .with(FieldType.NUMBER, () => FIELD_NUMBER_META_DEFAULT_VALUES)
+                .with(FieldType.CHECKBOX, () => FIELD_CHECKBOX_META_DEFAULT_VALUES)
+                .with(FieldType.RADIO, () => FIELD_RADIO_META_DEFAULT_VALUES)
+                .with(FieldType.DROPDOWN, () => FIELD_DROPDOWN_META_DEFAULT_VALUES)
+                .with(FieldType.INITIALS, () => FIELD_INITIALS_META_DEFAULT_VALUES)
+                .with(FieldType.FREE_SIGNATURE, () => undefined)
+                .exhaustive(),
             })),
           },
         },

packages/prisma/seed/medium-account-seed.ts

@@ -0,0 +1,77 @@
+import { nanoid } from 'nanoid';
+
+import { prisma } from '..';
+import { DocumentStatus } from '../client';
+import { seedBlankDocument } from './documents';
+import { seedUser } from './users';
+
+const MEDIUM_ACCOUNT_EMAIL = 'medium-account@documenso.com';
+const DOCUMENT_COUNT = 1000;
+
+const STATUSES = [DocumentStatus.DRAFT, DocumentStatus.PENDING, DocumentStatus.COMPLETED];
+
+export const seedDatabase = async () => {
+  const existingUser = await prisma.user.findFirst({
+    where: {
+      email: MEDIUM_ACCOUNT_EMAIL,
+    },
+  });
+
+  if (existingUser) {
+    return;
+  }
+
+  console.log(`[SEEDING]: Creating medium account with ${DOCUMENT_COUNT} documents...`);
+
+  const { user, team } = await seedUser({
+    name: 'Medium Account',
+    email: MEDIUM_ACCOUNT_EMAIL,
+  });
+
+  const recipientEmails = Array.from({ length: 20 }, (_, i) => `recipient-${i}@test.documenso.com`);
+
+  for (let i = 0; i < DOCUMENT_COUNT; i++) {
+    const status = STATUSES[i % STATUSES.length];
+
+    const document = await seedBlankDocument(user, team.id, {
+      key: `medium-${i}`,
+      createDocumentOptions: {
+        title: `[MEDIUM] Document ${i} - ${status}`,
+        status,
+      },
+    });
+
+    // Add 1-3 recipients per document.
+    const recipientCount = (i % 3) + 1;
+
+    for (let r = 0; r < recipientCount; r++) {
+      await prisma.recipient.create({
+        data: {
+          email: recipientEmails[(i + r) % recipientEmails.length],
+          name: `Recipient ${r}`,
+          token: nanoid(),
+          envelopeId: document.id,
+        },
+      });
+    }
+
+    // Also create some documents where the medium user is a recipient (not owner).
+    // Every 5th document, create an extra doc owned by a "ghost" sender with medium user as recipient.
+    if (i % 5 === 0) {
+      await prisma.recipient.create({
+        data: {
+          email: MEDIUM_ACCOUNT_EMAIL,
+          name: 'Medium Account',
+          token: nanoid(),
+          envelopeId: document.id,
+        },
+      });
+    }
+
+    if (i % 100 === 0) {
+      console.log(`[SEEDING]: Created ${i}/${DOCUMENT_COUNT} documents...`);
+    }
+  }
+
+  console.log(`[SEEDING]: Medium account seeded with ${DOCUMENT_COUNT} documents.`);
+};