@nuxt-customer-portal/timesheets 0.3.0

package/server/api/timesheets/entries/index.post.ts

@@ -0,0 +1,22 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { timesheetsFeature } from '@nuxt-customer-portal/timesheets/shared/feature'
+import {
+  createEntry,
+  requireTimesheetWorkspace
+} from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+import { entryCreateSchema } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Timesheets'],
+    operationId: 'timesheetsEntriesPost',
+    summary: 'Create a time entry',
+    description: 'Create a time entry. Scoped to the active organization and the applicable Timesheets permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { session, organizationId } = await requireFeatureAccess(event, timesheetsFeature.policy, 'create')
+  await requireTimesheetWorkspace(organizationId)
+  return createEntry(organizationId, session.user.id, entryCreateSchema.parse(await readBody(event)))
+})

package/server/api/timesheets/internal-approvals/[id].post.ts

@@ -0,0 +1,9 @@
+import { requireActiveOrganizationRole } from '@nuxt-customer-portal/core/server/portal'
+import { reviewSubmission } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+import { reviewSchema } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-validation'
+
+export default defineEventHandler(async (event) => {
+  const { session, organizationId } = await requireActiveOrganizationRole(event)
+  const input = reviewSchema.parse(await readBody(event))
+  return reviewSubmission(organizationId, session.user.id, getRouterParam(event, 'id')!, input.action, input.comment)
+})

package/server/api/timesheets/internal-approvals/index.get.ts

@@ -0,0 +1,37 @@
+import { requireActiveOrganizationRole, listPortalOrganizationMembers } from '@nuxt-customer-portal/core/server/portal'
+import {
+  ensureSettings,
+  listActivities,
+  listInternalApprovalMembers,
+  listApprovalQueue,
+  listClients,
+  listProjects
+} from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+
+export default defineEventHandler(async (event) => {
+  const { session, organizationId, role } = await requireActiveOrganizationRole(event)
+  const [settings, approvals, clients, projects, activities, teamMembers] = await Promise.all([
+    ensureSettings(organizationId),
+    getQuery(event).contextOnly === 'true' ? Promise.resolve([]) : listApprovalQueue(organizationId, session.user.id),
+    listClients(organizationId),
+    listProjects(organizationId),
+    listActivities(organizationId),
+    ['owner', 'admin'].includes(role)
+      ? listPortalOrganizationMembers(organizationId)
+      : listInternalApprovalMembers(organizationId, session.user.id)
+  ])
+  return {
+    settings: {
+      currency: settings.currency,
+      timezone: settings.timezone,
+      timerRoundingMinutes: settings.timerRoundingMinutes,
+      weekStartsOn: settings.weekStartsOn,
+      internalApprovalsEnabled: settings.internalApprovalsEnabled
+    },
+    approvals,
+    teamMembers,
+    clients,
+    projects,
+    activities
+  }
+})

package/server/api/timesheets/internal-approvals/list.get.ts

@@ -0,0 +1,12 @@
+import { requireActiveOrganizationRole } from '@nuxt-customer-portal/core/server/portal'
+import { internalApprovalListQuerySchema } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-validation'
+import { listInternalApprovalsPage } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-admin-listing'
+
+export default defineEventHandler(async (event) => {
+  const { session, organizationId } = await requireActiveOrganizationRole(event)
+  return listInternalApprovalsPage(
+    organizationId,
+    session.user.id,
+    internalApprovalListQuerySchema.parse(getQuery(event))
+  )
+})

package/server/api/timesheets/setup-status.get.ts

@@ -0,0 +1,21 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { timesheetsFeature } from '@nuxt-customer-portal/timesheets/shared/feature'
+import {
+  getTimesheetsSetupStatus,
+  requireTimesheetWorkspace
+} from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Timesheets'],
+    operationId: 'timesheetsSetupStatusGet',
+    summary: 'Get Timesheets setup readiness',
+    description: 'Get the active organization’s Timesheets setup checklist. Requires Timesheets management access.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { organizationId } = await requireFeatureAccess(event, timesheetsFeature.policy, 'manage')
+  await requireTimesheetWorkspace(organizationId)
+  return getTimesheetsSetupStatus(organizationId)
+})

package/server/api/timesheets/submissions/[id]/client-reply.post.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod'
+import { requireActiveOrganizationRole } from '@nuxt-customer-portal/core/server/portal'
+import { replyClientTimesheet } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+import { submissionReplySchema } from '@nuxt-customer-portal/timesheets/shared/submission-reply'
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireActiveOrganizationRole(event)
+  const input = submissionReplySchema
+    .extend({ clientOrganizationId: z.string().min(1), expectedVersion: z.number().int().min(0) })
+    .parse(await readBody(event))
+  await replyClientTimesheet(
+    organizationId,
+    session.user.id,
+    getRouterParam(event, 'id')!,
+    input.clientOrganizationId,
+    input.expectedVersion,
+    input.reply
+  )
+  return { success: true }
+})

package/server/api/timesheets/submissions/[id]/request-client-approval.post.ts

@@ -0,0 +1,21 @@
+import { z } from 'zod'
+import { requireActiveOrganizationRole } from '@nuxt-customer-portal/core/server/portal'
+import { requestClientApproval } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, role, session } = await requireActiveOrganizationRole(event)
+  if (!['owner', 'admin'].includes(role)) {
+    throw createError({ statusCode: 403, message: 'Workspace administrator access required' })
+  }
+  const input = z
+    .object({ clientOrganizationId: z.string().min(1), message: z.string().trim().max(5000).optional() })
+    .parse(await readBody(event))
+  await requestClientApproval(
+    organizationId,
+    getRouterParam(event, 'id')!,
+    input.clientOrganizationId,
+    session.user.id,
+    input.message
+  )
+  return { success: true }
+})

package/server/api/timesheets/submissions/[id]/resubmit.post.ts

@@ -0,0 +1,10 @@
+import { submissionReplySchema } from '@nuxt-customer-portal/timesheets/shared/submission-reply'
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { timesheetsFeature } from '@nuxt-customer-portal/timesheets/shared/feature'
+import { resubmitSubmission } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+
+export default defineEventHandler(async (event) => {
+  const { organizationId, session } = await requireFeatureAccess(event, timesheetsFeature.policy, 'submit')
+  const input = submissionReplySchema.parse((await readBody(event)) ?? {})
+  return resubmitSubmission(organizationId, session.user.id, getRouterParam(event, 'id')!, input.reply)
+})

package/server/api/timesheets/timer/index.delete.ts

@@ -0,0 +1,18 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { timesheetsFeature } from '@nuxt-customer-portal/timesheets/shared/feature'
+import { stopTimer } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Timesheets'],
+    operationId: 'timesheetsTimerDelete',
+    summary: 'Stop the time tracking timer',
+    description:
+      'Stop the time tracking timer. Scoped to the active organization and the applicable Timesheets permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { session, organizationId } = await requireFeatureAccess(event, timesheetsFeature.policy, 'update')
+  return stopTimer(organizationId, session.user.id)
+})

package/server/api/timesheets/timer/index.post.ts

@@ -0,0 +1,23 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { timesheetsFeature } from '@nuxt-customer-portal/timesheets/shared/feature'
+import {
+  requireTimesheetWorkspace,
+  startTimer
+} from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+import { timerStartSchema } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Timesheets'],
+    operationId: 'timesheetsTimerPost',
+    summary: 'Start the time tracking timer',
+    description:
+      'Start the time tracking timer. Scoped to the active organization and the applicable Timesheets permission.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { session, organizationId } = await requireFeatureAccess(event, timesheetsFeature.policy, 'create')
+  await requireTimesheetWorkspace(organizationId)
+  return startTimer(organizationId, session.user.id, timerStartSchema.parse(await readBody(event)))
+})

package/server/api/timesheets/weeks/[id]/submissions.post.ts

@@ -0,0 +1,19 @@
+import { requireFeatureAccess } from '@nuxt-customer-portal/core/server/portal'
+import { timesheetsFeature } from '@nuxt-customer-portal/timesheets/shared/feature'
+import { submitWeek } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-repository'
+import { submissionCreateSchema } from '@nuxt-customer-portal/timesheets/server/utils/timesheet-validation'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Timesheets'],
+    operationId: 'timesheetsWeeksByIdSubmissionsPost',
+    summary: 'Create a timesheet submission batch',
+    description: 'Submit eligible entries through a cutoff date as a new approval batch.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  const { session, organizationId } = await requireFeatureAccess(event, timesheetsFeature.policy, 'submit')
+  const input = submissionCreateSchema.parse(await readBody(event))
+  return submitWeek(organizationId, session.user.id, getRouterParam(event, 'id')!, input.cutoffDate, input.comment)
+})

package/server/db/schema/timesheets.ts

@@ -0,0 +1,383 @@
+import { boolean, date, index, integer, pgSchema, text, timestamp, uniqueIndex } from 'drizzle-orm/pg-core'
+import { organization, user } from '@nuxt-customer-portal/core/schema'
+
+export const timesheetsSchema = pgSchema('timesheets')
+
+export const timesheetStatus = timesheetsSchema.enum('timesheet_status', ['DRAFT', 'SUBMITTED', 'APPROVED', 'REJECTED'])
+export const projectStatus = timesheetsSchema.enum('project_status', ['ACTIVE', 'ARCHIVED'])
+export const approvalAction = timesheetsSchema.enum('approval_action', [
+  'SUBMITTED',
+  'APPROVED',
+  'REJECTED',
+  'REOPENED'
+])
+export const clientAccessMode = timesheetsSchema.enum('client_access_mode', ['DISABLED', 'VIEW', 'REVIEW'])
+export const clientReviewStatus = timesheetsSchema.enum('client_review_status', ['PENDING', 'APPROVED', 'DISPUTED'])
+export const clientReviewAction = timesheetsSchema.enum('client_review_action', ['APPROVED', 'DISPUTED', 'SUBMITTED'])
+
+const auditColumns = {
+  createdAt: timestamp('created_at', { mode: 'date' }).defaultNow().notNull(),
+  updatedAt: timestamp('updated_at', { mode: 'date' })
+    .defaultNow()
+    .$onUpdate(() => new Date())
+    .notNull()
+}
+
+export const workspaceSettings = timesheetsSchema.table('workspace_settings', {
+  organizationId: text('organization_id')
+    .primaryKey()
+    .references(() => organization.id, { onDelete: 'cascade' }),
+  currency: text('currency').default('EUR').notNull(),
+  timezone: text('timezone').default('Europe/Amsterdam').notNull(),
+  timerRoundingMinutes: integer('timer_rounding_minutes').default(1).notNull(),
+  weekStartsOn: integer('week_starts_on').default(1).notNull(),
+  workspaceEnabled: boolean('workspace_enabled').default(false).notNull(),
+  internalApprovalsEnabled: boolean('internal_approvals_enabled').default(true).notNull(),
+  ...auditColumns
+})
+
+export const workspaceClient = timesheetsSchema.table(
+  'workspace_client',
+  {
+    id: text('id').primaryKey(),
+    workspaceOrganizationId: text('workspace_organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    clientOrganizationId: text('client_organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'restrict' }),
+    accessMode: clientAccessMode('access_mode').default('DISABLED').notNull(),
+    ...auditColumns
+  },
+  (table) => [
+    uniqueIndex('workspace_client_workspace_client_uidx').on(table.workspaceOrganizationId, table.clientOrganizationId),
+    index('workspace_client_workspace_idx').on(table.workspaceOrganizationId)
+  ]
+)
+
+export const workspaceClientReviewer = timesheetsSchema.table(
+  'workspace_client_reviewer',
+  {
+    id: text('id').primaryKey(),
+    workspaceClientId: text('workspace_client_id')
+      .notNull()
+      .references(() => workspaceClient.id, { onDelete: 'cascade' }),
+    userId: text('user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    createdById: text('created_by_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'restrict' }),
+    createdAt: timestamp('created_at', { mode: 'date' }).defaultNow().notNull()
+  },
+  (table) => [
+    uniqueIndex('workspace_client_reviewer_link_user_uidx').on(table.workspaceClientId, table.userId),
+    index('workspace_client_reviewer_user_idx').on(table.userId)
+  ]
+)
+
+export const activityType = timesheetsSchema.table(
+  'activity_type',
+  {
+    id: text('id').primaryKey(),
+    organizationId: text('organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    name: text('name').notNull(),
+    billable: boolean('billable').default(true).notNull(),
+    active: boolean('active').default(true).notNull(),
+    ...auditColumns
+  },
+  (table) => [
+    uniqueIndex('activity_type_org_name_uidx').on(table.organizationId, table.name),
+    index('activity_type_org_idx').on(table.organizationId)
+  ]
+)
+
+export const project = timesheetsSchema.table(
+  'project',
+  {
+    id: text('id').primaryKey(),
+    organizationId: text('organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    clientOrganizationId: text('client_organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'restrict' }),
+    name: text('name').notNull(),
+    code: text('code'),
+    status: projectStatus('status').default('ACTIVE').notNull(),
+    startsOn: date('starts_on', { mode: 'string' }),
+    endsOn: date('ends_on', { mode: 'string' }),
+    budgetMinutes: integer('budget_minutes'),
+    budgetMinor: integer('budget_minor'),
+    ...auditColumns
+  },
+  (table) => [
+    uniqueIndex('project_org_name_uidx').on(table.organizationId, table.name),
+    index('project_org_status_idx').on(table.organizationId, table.status),
+    index('project_client_idx').on(table.clientOrganizationId)
+  ]
+)
+
+export const projectActivity = timesheetsSchema.table(
+  'project_activity',
+  {
+    id: text('id').primaryKey(),
+    projectId: text('project_id')
+      .notNull()
+      .references(() => project.id, { onDelete: 'cascade' }),
+    activityTypeId: text('activity_type_id')
+      .notNull()
+      .references(() => activityType.id, { onDelete: 'cascade' })
+  },
+  (table) => [uniqueIndex('project_activity_project_activity_uidx').on(table.projectId, table.activityTypeId)]
+)
+
+export const teamTariff = timesheetsSchema.table(
+  'team_tariff',
+  {
+    id: text('id').primaryKey(),
+    organizationId: text('organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    userId: text('user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    hourlyRateMinor: integer('hourly_rate_minor').notNull(),
+    ...auditColumns
+  },
+  (table) => [uniqueIndex('team_tariff_org_user_uidx').on(table.organizationId, table.userId)]
+)
+
+export const teamMemberSettings = timesheetsSchema.table(
+  'team_member_settings',
+  {
+    id: text('id').primaryKey(),
+    organizationId: text('organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    userId: text('user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    canEnterTime: boolean('can_enter_time').default(true).notNull(),
+    internalApprovalRequired: boolean('internal_approval_required').default(true).notNull(),
+    ...auditColumns
+  },
+  (table) => [uniqueIndex('team_member_settings_org_user_uidx').on(table.organizationId, table.userId)]
+)
+
+export const internalApproverAssignment = timesheetsSchema.table(
+  'internal_approver_assignment',
+  {
+    id: text('id').primaryKey(),
+    organizationId: text('organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    submitterUserId: text('submitter_user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    approverUserId: text('approver_user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    createdById: text('created_by_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'restrict' }),
+    createdAt: timestamp('created_at', { mode: 'date' }).defaultNow().notNull()
+  },
+  (table) => [
+    uniqueIndex('internal_approver_assignment_org_submitter_approver_uidx').on(
+      table.organizationId,
+      table.submitterUserId,
+      table.approverUserId
+    ),
+    index('internal_approver_assignment_approver_idx').on(table.organizationId, table.approverUserId),
+    index('internal_approver_assignment_submitter_idx').on(table.organizationId, table.submitterUserId)
+  ]
+)
+
+export const projectPersonTariff = timesheetsSchema.table(
+  'project_person_tariff',
+  {
+    id: text('id').primaryKey(),
+    projectId: text('project_id')
+      .notNull()
+      .references(() => project.id, { onDelete: 'cascade' }),
+    userId: text('user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    hourlyRateMinor: integer('hourly_rate_minor').notNull(),
+    ...auditColumns
+  },
+  (table) => [uniqueIndex('project_person_tariff_project_user_uidx').on(table.projectId, table.userId)]
+)
+
+export const weeklyTimesheet = timesheetsSchema.table(
+  'weekly_timesheet',
+  {
+    id: text('id').primaryKey(),
+    organizationId: text('organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    userId: text('user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    weekStartsOn: date('week_starts_on', { mode: 'string' }).notNull(),
+    status: timesheetStatus('status').default('DRAFT').notNull(),
+    submittedAt: timestamp('submitted_at', { mode: 'date' }),
+    reviewedAt: timestamp('reviewed_at', { mode: 'date' }),
+    reviewedById: text('reviewed_by_id').references(() => user.id, { onDelete: 'set null' }),
+    rejectionComment: text('rejection_comment'),
+    ...auditColumns
+  },
+  (table) => [
+    uniqueIndex('weekly_timesheet_org_user_week_uidx').on(table.organizationId, table.userId, table.weekStartsOn),
+    index('weekly_timesheet_org_status_idx').on(table.organizationId, table.status)
+  ]
+)
+
+export const timesheetSubmission = timesheetsSchema.table(
+  'submission',
+  {
+    id: text('id').primaryKey(),
+    weeklyTimesheetId: text('weekly_timesheet_id')
+      .notNull()
+      .references(() => weeklyTimesheet.id, { onDelete: 'cascade' }),
+    organizationId: text('organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    userId: text('user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    periodStartsOn: date('period_starts_on', { mode: 'string' }).notNull(),
+    periodEndsOn: date('period_ends_on', { mode: 'string' }).notNull(),
+    status: timesheetStatus('status').default('DRAFT').notNull(),
+    submittedAt: timestamp('submitted_at', { mode: 'date' }),
+    reviewedAt: timestamp('reviewed_at', { mode: 'date' }),
+    reviewedById: text('reviewed_by_id').references(() => user.id, { onDelete: 'set null' }),
+    rejectionComment: text('rejection_comment'),
+    version: integer('version').default(1).notNull(),
+    ...auditColumns
+  },
+  (table) => [
+    index('submission_week_idx').on(table.weeklyTimesheetId),
+    index('submission_org_status_idx').on(table.organizationId, table.status),
+    index('submission_user_period_idx').on(table.userId, table.periodStartsOn, table.periodEndsOn)
+  ]
+)
+
+export const timeEntry = timesheetsSchema.table(
+  'time_entry',
+  {
+    id: text('id').primaryKey(),
+    organizationId: text('organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'cascade' }),
+    weeklyTimesheetId: text('weekly_timesheet_id')
+      .notNull()
+      .references(() => weeklyTimesheet.id, { onDelete: 'cascade' }),
+    submissionId: text('submission_id').references(() => timesheetSubmission.id, { onDelete: 'restrict' }),
+    userId: text('user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'cascade' }),
+    projectId: text('project_id')
+      .notNull()
+      .references(() => project.id, { onDelete: 'restrict' }),
+    clientOrganizationId: text('client_organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'restrict' }),
+    activityTypeId: text('activity_type_id')
+      .notNull()
+      .references(() => activityType.id, { onDelete: 'restrict' }),
+    entryDate: date('entry_date', { mode: 'string' }).notNull(),
+    durationMinutes: integer('duration_minutes').default(0).notNull(),
+    note: text('note'),
+    billableSnapshot: boolean('billable_snapshot').notNull(),
+    hourlyRateMinorSnapshot: integer('hourly_rate_minor_snapshot').notNull(),
+    currencySnapshot: text('currency_snapshot').notNull(),
+    timerStartedAt: timestamp('timer_started_at', { mode: 'date' }),
+    ...auditColumns
+  },
+  (table) => [
+    index('time_entry_org_user_date_idx').on(table.organizationId, table.userId, table.entryDate),
+    index('time_entry_week_idx').on(table.weeklyTimesheetId),
+    index('time_entry_submission_idx').on(table.submissionId),
+    index('time_entry_project_idx').on(table.projectId),
+    index('time_entry_client_idx').on(table.clientOrganizationId)
+  ]
+)
+
+export const timesheetClientReview = timesheetsSchema.table(
+  'client_review',
+  {
+    id: text('id').primaryKey(),
+    weeklyTimesheetId: text('weekly_timesheet_id')
+      .notNull()
+      .references(() => weeklyTimesheet.id, { onDelete: 'cascade' }),
+    submissionId: text('submission_id').references(() => timesheetSubmission.id, { onDelete: 'cascade' }),
+    clientOrganizationId: text('client_organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'restrict' }),
+    status: clientReviewStatus('status').default('PENDING').notNull(),
+    reviewerUserId: text('reviewer_user_id').references(() => user.id, { onDelete: 'set null' }),
+    comment: text('comment'),
+    version: integer('version').default(1).notNull(),
+    reviewedAt: timestamp('reviewed_at', { mode: 'date' }),
+    ...auditColumns
+  },
+  (table) => [
+    uniqueIndex('client_review_submission_client_uidx').on(table.submissionId, table.clientOrganizationId),
+    index('client_review_client_status_idx').on(table.clientOrganizationId, table.status)
+  ]
+)
+
+export const timesheetClientReviewHistory = timesheetsSchema.table(
+  'client_review_history',
+  {
+    id: text('id').primaryKey(),
+    weeklyTimesheetId: text('weekly_timesheet_id')
+      .notNull()
+      .references(() => weeklyTimesheet.id, { onDelete: 'cascade' }),
+    submissionId: text('submission_id').references(() => timesheetSubmission.id, { onDelete: 'cascade' }),
+    clientOrganizationId: text('client_organization_id')
+      .notNull()
+      .references(() => organization.id, { onDelete: 'restrict' }),
+    action: clientReviewAction('action').notNull(),
+    actorUserId: text('actor_user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'restrict' }),
+    comment: text('comment'),
+    createdAt: timestamp('created_at', { mode: 'date' }).defaultNow().notNull()
+  },
+  (table) => [
+    index('client_review_history_week_client_idx').on(
+      table.weeklyTimesheetId,
+      table.clientOrganizationId,
+      table.createdAt
+    )
+  ]
+)
+
+export const timesheetApprovalHistory = timesheetsSchema.table(
+  'approval_history',
+  {
+    id: text('id').primaryKey(),
+    weeklyTimesheetId: text('weekly_timesheet_id')
+      .notNull()
+      .references(() => weeklyTimesheet.id, { onDelete: 'cascade' }),
+    submissionId: text('submission_id').references(() => timesheetSubmission.id, { onDelete: 'cascade' }),
+    action: approvalAction('action').notNull(),
+    actorUserId: text('actor_user_id')
+      .notNull()
+      .references(() => user.id, { onDelete: 'restrict' }),
+    comment: text('comment'),
+    createdAt: timestamp('created_at', { mode: 'date' }).defaultNow().notNull()
+  },
+  (table) => [index('approval_history_week_idx').on(table.weeklyTimesheetId)]
+)
+
+export type ProjectRecord = typeof project.$inferSelect
+export type ActivityTypeRecord = typeof activityType.$inferSelect
+export type TimeEntryRecord = typeof timeEntry.$inferSelect
+export type WeeklyTimesheetRecord = typeof weeklyTimesheet.$inferSelect
+export type TimesheetSubmissionRecord = typeof timesheetSubmission.$inferSelect

package/server/plugins/client-sync.ts

@@ -0,0 +1,30 @@
+import { eq } from 'drizzle-orm'
+import { nanoid } from 'nanoid'
+import { organization } from '@nuxt-customer-portal/core/schema'
+import { registerClientCreatedHook } from '@nuxt-customer-portal/core/server/utils/business-hooks'
+import { workspaceClient } from '@nuxt-customer-portal/timesheets/server/db/schema/timesheets'
+
+type PortalTransaction = typeof import('@nuxt-customer-portal/core/server/portal').db
+
+export default defineNitroPlugin(() =>
+  registerClientCreatedHook(async (transaction, clientOrganizationId) => {
+    const tx = transaction as PortalTransaction
+    const providers = await tx
+      .select({ id: organization.id })
+      .from(organization)
+      .where(eq(organization.organizationType, 'PROVIDER'))
+    if (!providers.length) {
+      return
+    }
+    await tx
+      .insert(workspaceClient)
+      .values(
+        providers.map((provider) => ({
+          id: nanoid(),
+          workspaceOrganizationId: provider.id,
+          clientOrganizationId
+        }))
+      )
+      .onConflictDoNothing()
+  })
+)