@baruk/core 0.3.1 → 0.4.2

package/dist/documents/repository.js

@@ -0,0 +1,236 @@
+import { ConflictError, NotFoundError, ValidationError, uuidv7 } from '@baruk/shared';
+import { sha256Hex } from '../storage/checksum.js';
+import { buildStorageKey, sanitizeFilename } from '../storage/key.js';
+import { MAX_UPLOAD_BYTES, isAllowedMimeType } from '../storage/types.js';
+function mapDoc(row) {
+    return {
+        id: row.id,
+        clientId: row.client_id,
+        competenceId: row.competence_id,
+        title: row.title,
+        status: row.status,
+        currentVersionId: row.current_version_id,
+        currentVersionNo: row.current_version_no,
+        createdAt: row.created_at.toISOString(),
+    };
+}
+/**
+ * Recebe um arquivo e produz documento + versão.
+ *
+ * Três desfechos possíveis, e a distinção importa para o usuário:
+ *
+ * - **novo documento** — primeiro envio.
+ * - **nova versão** — conteúdo diferente para o mesmo documento. A versão
+ *   anterior permanece intacta e recuperável.
+ * - **inalterado** — o checksum bate com a versão corrente. Não se cria versão
+ *   nova: reenviar o mesmo arquivo por engano não deve poluir o histórico nem
+ *   sugerir que houve substituição.
+ *
+ * O blob é deduplicado por tenant: dois documentos com bytes idênticos
+ * compartilham objeto. Nunca entre tenants — ver `0026`.
+ */
+export async function uploadDocument(tx, storage, input) {
+    if (input.body.byteLength === 0)
+        throw new ValidationError('arquivo vazio');
+    if (input.body.byteLength > MAX_UPLOAD_BYTES) {
+        throw new ValidationError(`arquivo excede o limite de ${Math.floor(MAX_UPLOAD_BYTES / 1024 / 1024)} MB`);
+    }
+    if (!isAllowedMimeType(input.mimeType)) {
+        throw new ValidationError(`tipo de arquivo não permitido: ${input.mimeType}`);
+    }
+    const checksum = sha256Hex(input.body);
+    const filename = sanitizeFilename(input.filename);
+    // 1. Documento: reaproveita o existente quando é uma nova versão.
+    let doc;
+    if (input.documentId) {
+        doc = await getDocument(tx, input.documentId);
+        if (doc.clientId !== input.clientId) {
+            // Defesa extra: a RLS já impediria ver documento de outro cliente, mas
+            // recusar explicitamente evita anexar versão ao documento errado dentro
+            // do mesmo cliente errado.
+            throw new ConflictError('documento pertence a outro cliente');
+        }
+    }
+    else {
+        const rows = await tx `
+      INSERT INTO document (id, tenant_id, client_id, competence_id, category_id, title, created_by)
+      VALUES (
+        ${uuidv7()}, current_setting('app.current_tenant')::uuid,
+        ${input.clientId}, ${input.competenceId ?? null}, ${input.categoryId ?? null},
+        ${input.title}, ${input.uploadedBy}
+      )
+      RETURNING id, client_id, competence_id, title, status, current_version_id,
+                NULL::int AS current_version_no, created_at
+    `;
+        doc = mapDoc(rows[0]);
+    }
+    // 2. Se o conteúdo é idêntico à versão corrente, não há o que versionar.
+    if (doc.currentVersionId) {
+        const same = await tx `
+      SELECT count(*)::int AS n
+        FROM document_version dv JOIN blob b ON b.id = dv.blob_id
+       WHERE dv.id = ${doc.currentVersionId} AND b.checksum_sha256 = ${checksum}
+    `;
+        if ((same[0]?.n ?? 0) > 0) {
+            const current = await getVersion(tx, doc.currentVersionId);
+            return { document: doc, version: current, deduplicated: true, unchanged: true };
+        }
+    }
+    // 3. Blob: reaproveita bytes já presentes no tenant.
+    const existingBlob = await tx `
+    SELECT id FROM blob WHERE checksum_sha256 = ${checksum}
+  `;
+    let blobId;
+    let deduplicated = false;
+    const nextVersionNo = await nextVersion(tx, doc.id);
+    if (existingBlob[0]) {
+        blobId = existingBlob[0].id;
+        deduplicated = true;
+    }
+    else {
+        blobId = uuidv7();
+        // O tenant vem da GUC, nunca do chamador — é a mesma fonte que a RLS usa,
+        // então a chave no bucket não pode divergir da linha no banco.
+        const ctx = await tx `
+      SELECT current_setting('app.current_tenant')::uuid AS tenant_id
+    `;
+        const storageKey = buildStorageKey({
+            tenantId: ctx[0].tenant_id,
+            clientId: input.clientId,
+            documentId: doc.id,
+            versionNo: nextVersionNo,
+            categoryKey: input.categoryKey ?? null,
+            competenceLabel: input.competenceLabel ?? null,
+        });
+        // O put acontece ANTES do insert: se o storage falhar, a transação não
+        // grava metadado de um objeto que não existe. O inverso deixaria linha
+        // apontando para o vazio — e a linha é o que o produto acredita.
+        const put = await storage.put({
+            key: storageKey,
+            body: input.body,
+            contentType: input.mimeType,
+        });
+        await tx `
+      INSERT INTO blob (id, tenant_id, checksum_sha256, size_bytes, mime_type,
+                        storage_provider, storage_key, av_status)
+      VALUES (
+        ${blobId}, current_setting('app.current_tenant')::uuid,
+        ${put.checksumSha256}, ${put.sizeBytes}, ${input.mimeType},
+        ${storage.key}, ${put.key}, 'skipped'
+      )
+    `;
+    }
+    // 4. Versão imutável + ponteiro do documento.
+    const versionId = uuidv7();
+    await tx `
+    INSERT INTO document_version
+      (id, tenant_id, document_id, blob_id, version_no, original_filename, uploaded_by, uploaded_via)
+    VALUES (
+      ${versionId}, current_setting('app.current_tenant')::uuid,
+      ${doc.id}, ${blobId}, ${nextVersionNo}, ${filename},
+      ${input.uploadedBy}, ${input.uploadedVia ?? 'console'}
+    )
+  `;
+    await tx `
+    UPDATE document
+       SET current_version_id = ${versionId}, version = version + 1, updated_at = now()
+     WHERE id = ${doc.id}
+  `;
+    const version = await getVersion(tx, versionId);
+    const refreshed = await getDocument(tx, doc.id);
+    return { document: refreshed, version, deduplicated, unchanged: false };
+}
+async function nextVersion(tx, documentId) {
+    const rows = await tx `
+    SELECT COALESCE(max(version_no), 0) + 1 AS next
+      FROM document_version WHERE document_id = ${documentId}
+  `;
+    return rows[0]?.next ?? 1;
+}
+export async function getDocument(tx, id) {
+    const rows = await tx `
+    SELECT d.id, d.client_id, d.competence_id, d.title, d.status, d.current_version_id,
+           dv.version_no AS current_version_no, d.created_at
+      FROM document d
+      LEFT JOIN document_version dv ON dv.id = d.current_version_id
+     WHERE d.id = ${id} AND d.deleted_at IS NULL
+  `;
+    if (!rows[0])
+        throw new NotFoundError('Documento não encontrado');
+    return mapDoc(rows[0]);
+}
+export async function getVersion(tx, versionId) {
+    const rows = await tx `
+    SELECT dv.id, dv.document_id, dv.blob_id, dv.version_no, dv.original_filename,
+           b.checksum_sha256, b.size_bytes, b.mime_type,
+           dv.uploaded_by, dv.uploaded_via, dv.uploaded_at
+      FROM document_version dv JOIN blob b ON b.id = dv.blob_id
+     WHERE dv.id = ${versionId}
+  `;
+    const r = rows[0];
+    if (!r)
+        throw new NotFoundError('Versão não encontrada');
+    return {
+        id: r.id,
+        documentId: r.document_id,
+        blobId: r.blob_id,
+        versionNo: r.version_no,
+        originalFilename: r.original_filename,
+        checksumSha256: r.checksum_sha256,
+        sizeBytes: Number(r.size_bytes),
+        mimeType: r.mime_type,
+        uploadedBy: r.uploaded_by,
+        uploadedVia: r.uploaded_via,
+        uploadedAt: r.uploaded_at.toISOString(),
+    };
+}
+/** Histórico completo, do mais recente para o mais antigo. Nada é omitido. */
+export async function listVersions(tx, documentId) {
+    const rows = await tx `
+    SELECT id FROM document_version WHERE document_id = ${documentId}
+     ORDER BY version_no DESC
+  `;
+    const out = [];
+    for (const row of rows)
+        out.push(await getVersion(tx, row.id));
+    return out;
+}
+export async function listDocuments(tx, filter = {}) {
+    const limit = Math.min(filter.limit ?? 50, 100);
+    const offset = filter.offset ?? 0;
+    const rows = await tx `
+    SELECT d.id, d.client_id, d.competence_id, d.title, d.status, d.current_version_id,
+           dv.version_no AS current_version_no, d.created_at, count(*) OVER() AS total
+      FROM document d
+      LEFT JOIN document_version dv ON dv.id = d.current_version_id
+     WHERE d.deleted_at IS NULL
+       AND (${filter.clientId ?? null}::uuid IS NULL OR d.client_id = ${filter.clientId ?? null})
+       AND (${filter.competenceId ?? null}::uuid IS NULL OR d.competence_id = ${filter.competenceId ?? null})
+     ORDER BY d.created_at DESC
+     LIMIT ${limit} OFFSET ${offset}
+  `;
+    return { total: rows[0] ? Number(rows[0].total) : 0, items: rows.map(mapDoc) };
+}
+/**
+ * Link temporário de leitura. Nunca devolve URL pública permanente.
+ * Resolve o blob a partir da versão para que a chave de storage jamais precise
+ * transitar pela borda HTTP.
+ */
+export async function getDownloadUrl(tx, storage, versionId) {
+    const rows = await tx `
+    SELECT b.storage_key, dv.original_filename, b.av_status
+      FROM document_version dv JOIN blob b ON b.id = dv.blob_id
+     WHERE dv.id = ${versionId}
+  `;
+    const r = rows[0];
+    if (!r)
+        throw new NotFoundError('Versão não encontrada');
+    if (r.av_status === 'infected') {
+        throw new ConflictError('arquivo bloqueado pela verificação de segurança');
+    }
+    const url = await storage.getSignedUrl(r.storage_key, {
+        downloadFilename: r.original_filename,
+    });
+    return { url, filename: r.original_filename };
+}
+//# sourceMappingURL=repository.js.map

package/dist/documents/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/documents/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEtF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAwB,MAAM,qBAAqB,CAAC;AAiDhG,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE;KACxC,CAAC;AACJ,CAAC;AA2BD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAM,EACN,OAAwB,EACxB,KAA0B;IAE1B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,eAAe,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;QAC7C,MAAM,IAAI,eAAe,CACvB,8BAA8B,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,eAAe,CAAC,kCAAkC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAElD,kEAAkE;IAClE,IAAI,GAAmB,CAAC;IACxB,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpC,uEAAuE;YACvE,wEAAwE;YACxE,2BAA2B;YAC3B,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,EAAE,CAAU;;;UAGzB,MAAM,EAAE;UACR,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,YAAY,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU,IAAI,IAAI;UAC1E,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU;;;;KAIrC,CAAC;QACF,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACzB,CAAC;IAED,yEAAyE;IACzE,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAiB;;;uBAGnB,GAAG,CAAC,gBAAgB,4BAA4B,QAAQ;KAC1E,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC3D,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,MAAM,YAAY,GAAG,MAAM,EAAE,CAAkB;kDACC,QAAQ;GACvD,CAAC;IACF,IAAI,MAAc,CAAC;IACnB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAEpD,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5B,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,MAAM,EAAE,CAAC;QAClB,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAyB;;KAE5C,CAAC;QACF,MAAM,UAAU,GAAG,eAAe,CAAC;YACjC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAE,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,SAAS,EAAE,aAAa;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;SAC/C,CAAC,CAAC;QAEH,uEAAuE;QACvE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5B,GAAG,EAAE,UAAU;YACf,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,QAAQ;SAC5B,CAAC,CAAC;QAEH,MAAM,EAAE,CAAA;;;;UAIF,MAAM;UACN,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ;UACvD,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;;KAE5B,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,CAAA;;;;QAIF,SAAS;QACT,GAAG,CAAC,EAAE,KAAK,MAAM,KAAK,aAAa,KAAK,QAAQ;QAChD,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,WAAW,IAAI,SAAS;;GAExD,CAAC;IAEF,MAAM,EAAE,CAAA;;kCAEwB,SAAS;kBACzB,GAAG,CAAC,EAAE;GACrB,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,EAAM,EAAE,UAAkB;IACnD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAoB;;kDAEO,UAAU;GACzD,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAM,EAAE,EAAU;IAClD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAU;;;;;oBAKb,EAAE;GACnB,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAM,EAAE,SAAiB;IACxD,MAAM,IAAI,GAAG,MAAM,EAAE,CAcpB;;;;;qBAKkB,SAAS;GAC3B,CAAC;IACF,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,CAAC;IACzD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,MAAM,EAAE,CAAC,CAAC,OAAO;QACjB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,gBAAgB,EAAE,CAAC,CAAC,iBAAiB;QACrC,cAAc,EAAE,CAAC,CAAC,eAAe;QACjC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAM,EAAE,UAAkB;IAC3D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAkB;0DACiB,UAAU;;GAEjE,CAAC;IACF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAM,EACN,SAAwF,EAAE;IAE1F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAgC;;;;;;cAMzC,MAAM,CAAC,QAAQ,IAAI,IAAI,mCAAmC,MAAM,CAAC,QAAQ,IAAI,IAAI;cACjF,MAAM,CAAC,YAAY,IAAI,IAAI,uCAAuC,MAAM,CAAC,YAAY,IAAI,IAAI;;aAE9F,KAAK,WAAW,MAAM;GAChC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAM,EACN,OAAwB,EACxB,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAyE;;;qBAG3E,SAAS;GAC3B,CAAC;IACF,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,iDAAiD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE;QACpD,gBAAgB,EAAE,CAAC,CAAC,iBAAiB;KACtC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;AAChD,CAAC"}

package/dist/documents/requests.d.ts

@@ -0,0 +1,73 @@
+import type { Tx } from '../db/client.js';
+/**
+ * Pedido de documento (ADR 0007).
+ *
+ * Difere de `onboarding_document_requirement` por não exigir um onboarding: o
+ * pedido vive por cliente e competência, que é o eixo do trabalho recorrente.
+ * O onboarding é evento único por cliente; o fechamento é mensal.
+ */
+export type DocumentRequestStatus = 'requested' | 'received' | 'validated' | 'rejected' | 'canceled';
+export interface DocumentRequestRecord {
+    id: string;
+    clientId: string;
+    competenceId: string | null;
+    recurringInstanceId: string | null;
+    title: string;
+    description: string | null;
+    status: DocumentRequestStatus;
+    dueDate: string | null;
+    documentId: string | null;
+    rejectionReason: string | null;
+    requestedAt: string;
+    receivedAt: string | null;
+    validatedAt: string | null;
+}
+export declare function createDocumentRequest(tx: Tx, input: {
+    clientId: string;
+    competenceId?: string | null;
+    recurringInstanceId?: string | null;
+    title: string;
+    description?: string | null;
+    dueDate?: string | null;
+    requestedBy: string;
+}): Promise<DocumentRequestRecord>;
+export declare function getDocumentRequest(tx: Tx, id: string): Promise<DocumentRequestRecord>;
+export declare function listDocumentRequests(tx: Tx, filter?: {
+    clientId?: string;
+    competenceId?: string;
+    status?: DocumentRequestStatus;
+    limit?: number;
+    offset?: number;
+}): Promise<{
+    items: DocumentRequestRecord[];
+    total: number;
+}>;
+/**
+ * Liga o documento enviado ao pedido e move para `received`.
+ *
+ * Quem transiciona para `validated` é o escritório, nunca o envio — o cliente
+ * entrega, o escritório confere. Essa separação é a mesma que o onboarding já
+ * adota e é o que dá valor à trilha.
+ */
+export declare function satisfyDocumentRequest(tx: Tx, input: {
+    id: string;
+    documentId: string;
+}): Promise<DocumentRequestRecord>;
+export declare function validateDocumentRequest(tx: Tx, input: {
+    id: string;
+    validatedBy: string;
+}): Promise<DocumentRequestRecord>;
+/**
+ * Rejeitar mantém o documento enviado — a prova de que o cliente entregou algo
+ * não some porque o conteúdo estava errado. O cliente reenvia e vira nova
+ * versão do mesmo documento.
+ */
+export declare function rejectDocumentRequest(tx: Tx, input: {
+    id: string;
+    reason: string;
+    rejectedBy: string;
+}): Promise<DocumentRequestRecord>;
+export declare function cancelDocumentRequest(tx: Tx, input: {
+    id: string;
+}): Promise<DocumentRequestRecord>;
+//# sourceMappingURL=requests.d.ts.map

package/dist/documents/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../src/documents/requests.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAE1C;;;;;;GAMG;AAEH,MAAM,MAAM,qBAAqB,GAC/B,WAAW,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;AAEnE,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAuCD,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IACL,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,GACA,OAAO,CAAC,qBAAqB,CAAC,CAahC;AAED,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAO3F;AAED,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,EAAE,EACN,MAAM,GAAE;IACN,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACZ,GACL,OAAO,CAAC;IAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgB5D;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC,qBAAqB,CAAC,CAkBhC;AAED,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAYhC;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,qBAAqB,CAAC,CAYhC;AAED,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GACpB,OAAO,CAAC,qBAAqB,CAAC,CAShC"}

package/dist/documents/requests.js

@@ -0,0 +1,127 @@
+import { ConflictError, NotFoundError, uuidv7 } from '@baruk/shared';
+const COLUMNS = 'id, client_id, competence_id, recurring_instance_id, title, description, status, due_date, document_id, rejection_reason, requested_at, received_at, validated_at';
+function map(row) {
+    return {
+        id: row.id,
+        clientId: row.client_id,
+        competenceId: row.competence_id,
+        recurringInstanceId: row.recurring_instance_id,
+        title: row.title,
+        description: row.description,
+        status: row.status,
+        dueDate: row.due_date,
+        documentId: row.document_id,
+        rejectionReason: row.rejection_reason,
+        requestedAt: row.requested_at.toISOString(),
+        receivedAt: row.received_at ? row.received_at.toISOString() : null,
+        validatedAt: row.validated_at ? row.validated_at.toISOString() : null,
+    };
+}
+export async function createDocumentRequest(tx, input) {
+    const rows = await tx `
+    INSERT INTO document_request
+      (id, tenant_id, client_id, competence_id, recurring_instance_id, title,
+       description, due_date, requested_by)
+    VALUES (
+      ${uuidv7()}, current_setting('app.current_tenant')::uuid,
+      ${input.clientId}, ${input.competenceId ?? null}, ${input.recurringInstanceId ?? null},
+      ${input.title}, ${input.description ?? null}, ${input.dueDate ?? null}, ${input.requestedBy}
+    )
+    RETURNING ${tx.unsafe(COLUMNS)}
+  `;
+    return map(rows[0]);
+}
+export async function getDocumentRequest(tx, id) {
+    const rows = await tx `
+    SELECT ${tx.unsafe(COLUMNS)} FROM document_request
+     WHERE id = ${id} AND deleted_at IS NULL
+  `;
+    if (!rows[0])
+        throw new NotFoundError('Pedido de documento não encontrado');
+    return map(rows[0]);
+}
+export async function listDocumentRequests(tx, filter = {}) {
+    const limit = Math.min(filter.limit ?? 50, 100);
+    const offset = filter.offset ?? 0;
+    const rows = await tx `
+    SELECT ${tx.unsafe(COLUMNS)}, count(*) OVER() AS total
+      FROM document_request
+     WHERE deleted_at IS NULL
+       AND (${filter.clientId ?? null}::uuid IS NULL OR client_id = ${filter.clientId ?? null})
+       AND (${filter.competenceId ?? null}::uuid IS NULL OR competence_id = ${filter.competenceId ?? null})
+       AND (${filter.status ?? null}::text IS NULL OR status = ${filter.status ?? null})
+     ORDER BY
+       CASE status WHEN 'requested' THEN 0 WHEN 'rejected' THEN 1 WHEN 'received' THEN 2 ELSE 3 END,
+       due_date NULLS LAST, requested_at DESC
+     LIMIT ${limit} OFFSET ${offset}
+  `;
+    return { total: rows[0] ? Number(rows[0].total) : 0, items: rows.map(map) };
+}
+/**
+ * Liga o documento enviado ao pedido e move para `received`.
+ *
+ * Quem transiciona para `validated` é o escritório, nunca o envio — o cliente
+ * entrega, o escritório confere. Essa separação é a mesma que o onboarding já
+ * adota e é o que dá valor à trilha.
+ */
+export async function satisfyDocumentRequest(tx, input) {
+    const current = await getDocumentRequest(tx, input.id);
+    if (current.status === 'validated') {
+        throw new ConflictError('Pedido já validado; solicite um novo documento se necessário');
+    }
+    if (current.status === 'canceled') {
+        throw new ConflictError('Pedido cancelado não aceita envio');
+    }
+    const rows = await tx `
+    UPDATE document_request
+       SET document_id = ${input.documentId}, status = 'received', received_at = now(),
+           rejection_reason = NULL, rejected_at = NULL, rejected_by = NULL,
+           version = version + 1, updated_at = now()
+     WHERE id = ${input.id} AND deleted_at IS NULL
+    RETURNING ${tx.unsafe(COLUMNS)}
+  `;
+    return map(rows[0]);
+}
+export async function validateDocumentRequest(tx, input) {
+    const rows = await tx `
+    UPDATE document_request
+       SET status = 'validated', validated_at = now(), validated_by = ${input.validatedBy},
+           version = version + 1, updated_at = now()
+     WHERE id = ${input.id} AND status = 'received' AND deleted_at IS NULL
+    RETURNING ${tx.unsafe(COLUMNS)}
+  `;
+    if (!rows[0]) {
+        throw new ConflictError('Só é possível validar um pedido com documento recebido');
+    }
+    return map(rows[0]);
+}
+/**
+ * Rejeitar mantém o documento enviado — a prova de que o cliente entregou algo
+ * não some porque o conteúdo estava errado. O cliente reenvia e vira nova
+ * versão do mesmo documento.
+ */
+export async function rejectDocumentRequest(tx, input) {
+    const rows = await tx `
+    UPDATE document_request
+       SET status = 'rejected', rejected_at = now(), rejected_by = ${input.rejectedBy},
+           rejection_reason = ${input.reason}, version = version + 1, updated_at = now()
+     WHERE id = ${input.id} AND status IN ('received', 'validated') AND deleted_at IS NULL
+    RETURNING ${tx.unsafe(COLUMNS)}
+  `;
+    if (!rows[0]) {
+        throw new ConflictError('Só é possível rejeitar um pedido que já recebeu documento');
+    }
+    return map(rows[0]);
+}
+export async function cancelDocumentRequest(tx, input) {
+    const rows = await tx `
+    UPDATE document_request
+       SET status = 'canceled', version = version + 1, updated_at = now()
+     WHERE id = ${input.id} AND status NOT IN ('validated', 'canceled') AND deleted_at IS NULL
+    RETURNING ${tx.unsafe(COLUMNS)}
+  `;
+    if (!rows[0])
+        throw new ConflictError('Pedido não pode ser cancelado neste estado');
+    return map(rows[0]);
+}
+//# sourceMappingURL=requests.js.map

package/dist/documents/requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../src/documents/requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AA8CrE,MAAM,OAAO,GACX,mKAAmK,CAAC;AAEtK,SAAS,GAAG,CAAC,GAAQ;IACnB,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAC9C,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE;QAC3C,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAClE,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAM,EACN,KAQC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAO;;;;;QAKtB,MAAM,EAAE;QACR,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,YAAY,IAAI,IAAI,KAAK,KAAK,CAAC,mBAAmB,IAAI,IAAI;QACnF,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,IAAI,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC,WAAW;;gBAEjF,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;GAC/B,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,EAAU;IACzD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAO;aACjB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;kBACb,EAAE;GACjB,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;IAC5E,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAM,EACN,SAMI,EAAE;IAEN,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,EAAE,CAA6B;aACvC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;;;cAGjB,MAAM,CAAC,QAAQ,IAAI,IAAI,iCAAiC,MAAM,CAAC,QAAQ,IAAI,IAAI;cAC/E,MAAM,CAAC,YAAY,IAAI,IAAI,qCAAqC,MAAM,CAAC,YAAY,IAAI,IAAI;cAC3F,MAAM,CAAC,MAAM,IAAI,IAAI,8BAA8B,MAAM,CAAC,MAAM,IAAI,IAAI;;;;aAIzE,KAAK,WAAW,MAAM;GAChC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAM,EACN,KAAyC;IAEzC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,8DAA8D,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,aAAa,CAAC,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAO;;2BAEH,KAAK,CAAC,UAAU;;;kBAGzB,KAAK,CAAC,EAAE;gBACV,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;GAC/B,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAM,EACN,KAA0C;IAE1C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAO;;wEAE0C,KAAK,CAAC,WAAW;;kBAEvE,KAAK,CAAC,EAAE;gBACV,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;GAC/B,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,wDAAwD,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAM,EACN,KAAyD;IAEzD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAO;;qEAEuC,KAAK,CAAC,UAAU;gCACrD,KAAK,CAAC,MAAM;kBAC1B,KAAK,CAAC,EAAE;gBACV,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;GAC/B,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,2DAA2D,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAM,EACN,KAAqB;IAErB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAO;;;kBAGZ,KAAK,CAAC,EAAE;gBACV,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;GAC/B,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC"}