User

model User {
  id           String  @id @default(cuid())
  name         String?
  email        String  @unique
  passwordHash String?
  role         Role
  phone        String?
  authProvider   String?
  authProviderId String?
  createdAt DateTime @default(now())
  updatedAt DateTime @updatedAt
  jobSeekerProfile JobSeekerProfile?
  employerProfile  EmployerProfile?
  postedJobs   Job[]         @relation("PostedJobs")
  applications Application[] @relation("ApplicantApplications")
  savedJobs    SavedJob[]
  passwordResetToken       String?   @unique
  passwordResetTokenExpiry DateTime?
  @@unique([authProvider, authProviderId])
}

Job

model Job {
  id             String         @id @default(cuid())
  title          String
  location       String
  description    String         @db.Text
  requirements   String?        @db.Text
  employmentType EmploymentType @default(FULLTIME)
  createdAt      DateTime       @default(now())
  updatedAt      DateTime       @updatedAt
  employerId String
  employer   User   @relation("PostedJobs", fields: [employerId], references: [id], onDelete: Cascade)
  companyId String
  company   Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
  applications Application[]
  savedBy      SavedJob[]
}

Company

model Company {
  id        String   @id @default(cuid())
  name      String
  website   String?
  createdAt DateTime @default(now())
  updatedAt DateTime @updatedAt
  jobs      Job[]
  employers EmployerProfile[]
  @@unique([name, website])
}

EmployerProfile

Links a User to a Company. The `userId` is unique, enforcing a one-to-one relationship.

model EmployerProfile {
  id        String @id @default(cuid())
  userId    String @unique
  companyId String
  user      User    @relation(fields: [userId], references: [id], onDelete: Cascade)
  company   Company @relation(fields: [companyId], references: [id], onDelete: Cascade)
}

JobSeekerProfile & Sub-Models

Contains all details for a job seeker's resume.

model JobSeekerProfile {
  id          String       @id @default(cuid())
  userId      String       @unique
  summary     String?
  user        User         @relation(fields: [userId], references: [id], onDelete: Cascade)
  skills      Skill[]
  experiences Experience[]
  educations  Education[]
}

model Skill {
  id        String           @id @default(cuid())
  name      String
  level     String?
  profileId String
  profile   JobSeekerProfile @relation(fields: [profileId], references: [id], onDelete: Cascade)
}
model Experience {
  id        String           @id @default(cuid())
  company   String
  title     String
  startDate DateTime
  endDate   DateTime?
  details   String?          @db.Text
  profileId String
  profile   JobSeekerProfile @relation(fields: [profileId], references: [id], onDelete: Cascade)
}
model Education {
  id        String           @id @default(cuid())
  school    String
  degree    String
  field     String?
  startDate DateTime
  endDate   DateTime?
  profileId String
  profile   JobSeekerProfile @relation(fields: [profileId], references: [id], onDelete: Cascade)
}

POST /api/auth/register

Registers a new user. Body must match `RegisterInput` schema.

POST /api/auth/login

Logs in a user with email/password. Returns a JWT cookie.

POST /api/auth/sso/status

Checks if an SSO user exists. Returns `{ status: 'NEW_USER' | 'COMPLETE' }`.

POST /api/auth/sso-login

Finalizes SSO login/registration after role selection for new users.

POST /api/auth/logout

Clears the user's session cookie.

PUT /api/users/me

Updates the name and phone number for the currently authenticated user. (All Roles)

GET /api/jobs

Fetches a list of all jobs. Supports `search` and `location` query params. (Public)

GET /api/jobs/:id

Fetches details for a single job. (Public)

POST /api/jobs

Creates a new job posting. (Employer only)

PUT /api/jobs/:id

Updates a job posting. (Employer only)

DELETE /api/jobs/:id

Deletes a job posting. (Employer only)

GET /api/companies/search

Searches for companies by name. (Employer only)

POST /api/companies

Creates a new company profile. (Employer only)

POST /api/jobs/:jobId/apply

Submits an application for a job. (Job Seeker only)

GET /api/applications/my-applications

Fetches all applications for the logged-in user. (Job Seeker only)

GET /api/applications/:applicationId/profile

Securely fetches an applicant's profile. (Employer only)

PUT /api/applications/:applicationId/status

Updates the status of an application. (Employer only)

GET /api/profile/my-profile

Fetches the full profile of the logged-in user. (Job Seeker only)

GET /api/employer-profiles/my-profile

Fetches the company profile of the logged-in user. (Employer only)

POST /api/upload/resume

Uploads a resume file. Returns a relative URL. (Job Seeker only)