@odla-ai/chapter 0.47.0 → 0.47.2

package/dist/worker/index.cjs

@@ -6117,7 +6117,7 @@ var handleAdminNetworkPush = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-network-records-follower.ts
-var import_crm9 = require("@odla-ai/crm");
+var import_crm10 = require("@odla-ai/crm");
 var import_db9 = require("@odla-ai/db");
 
 // src/worker-routes-network-records-common.ts
@@ -6125,9 +6125,39 @@ var IDENTIFIER = /^[a-z][a-zA-Z0-9_]*$/;
 var MAX_PAGE = 50;
 var MAX_OFFSET = 1e4;
 var MAX_SEARCH = 200;
+var MAX_STAGE = 100;
 var MAX_BODY = 32768;
 var RECORD_ID = /^[a-zA-Z0-9][a-zA-Z0-9:_-]{0,191}$/;
 var MUTATION_ID2 = /^[a-zA-Z0-9][a-zA-Z0-9:._-]{7,127}$/;
+var NETWORK_RECORD_SORTS = [
+  { id: "updated_desc", label: "Recently updated" },
+  { id: "updated_asc", label: "Least recently updated" },
+  { id: "name_asc", label: "Name A\u2013Z" },
+  { id: "name_desc", label: "Name Z\u2013A" }
+];
+var NETWORK_RECORD_SORT_COLUMNS = {
+  updated_desc: { field: "updatedAt", dir: "desc" },
+  updated_asc: { field: "updatedAt", dir: "asc" },
+  name_asc: { field: "name", dir: "asc" },
+  name_desc: { field: "name", dir: "desc" }
+};
+function networkRecordWindow(params) {
+  const limit = integer(params.get("limit"), 25, 1, MAX_PAGE);
+  const offset = integer(params.get("offset"), 0, 0, MAX_OFFSET);
+  const search = (params.get("search") ?? "").trim();
+  const stage = (params.get("stage") ?? "").trim();
+  const requestedSort = (params.get("sort") ?? "updated_desc").trim();
+  const sortId = NETWORK_RECORD_SORTS.some((candidate) => candidate.id === requestedSort) ? requestedSort : null;
+  if (limit == null || offset == null || search.length > MAX_SEARCH || stage.length > 0 && (stage.length > MAX_STAGE || /[\u0000-\u001f\u007f]/.test(stage)) || !sortId) return null;
+  return {
+    limit,
+    offset,
+    ...search ? { search } : {},
+    ...stage ? { stage } : {},
+    sortId,
+    sort: NETWORK_RECORD_SORT_COLUMNS[sortId]
+  };
+}
 function bodyTooLarge(body) {
   return new TextEncoder().encode(body).byteLength > MAX_BODY;
 }
@@ -6182,6 +6212,45 @@ function restrictedRecord(record4, target) {
   return { ...record4, ...edit ? { edit } : { edit: void 0 } };
 }
 
+// src/worker-routes-network-records-search.ts
+var import_crm9 = require("@odla-ai/crm");
+var MAX_SAFE_LIKE_BYTES = 50;
+function safePrefix(value) {
+  const prefixed = `${value}%`;
+  return value.includes("%") || value.includes("_") || new TextEncoder().encode(prefixed).byteLength > MAX_SAFE_LIKE_BYTES ? value : { $like: prefixed };
+}
+async function listReaderRecords(db, type, allowed2, emailField, window) {
+  const clauses = [
+    { type },
+    { archived: false },
+    ...window.stage ? [{ stage: window.stage }] : []
+  ];
+  if (window.search) {
+    const visible = [{ name: safePrefix(window.search) }];
+    if (emailField && allowed2.includes(emailField)) {
+      visible.push({ primaryEmail: safePrefix(window.search.toLowerCase()) });
+    }
+    clauses.push({ or: visible });
+  }
+  const where = { and: clauses };
+  const crmDb = db;
+  const [result, aggregate] = await Promise.all([
+    crmDb.query({
+      [import_crm9.CRM_NS.record]: { $: {
+        where,
+        order: { [window.sort.field]: window.sort.dir },
+        limit: window.limit,
+        offset: window.offset
+      } }
+    }),
+    crmDb.aggregate(import_crm9.CRM_NS.record, { count: true }, { where })
+  ]);
+  return {
+    records: (result[import_crm9.CRM_NS.record] ?? []).map(import_crm9.rowToRecord),
+    total: aggregate.count ?? 0
+  };
+}
+
 // src/worker-routes-network-records-follower.ts
 var NETWORK_MUTATION_META = "chapterNetworkMutation";
 function mutationFingerprint(input) {
@@ -6201,16 +6270,16 @@ function mutationError(error) {
   if (error?.code === "transact_guard_failed") {
     return json({ error: "record changed since it was reviewed", code: "stale_revision" }, 409);
   }
-  if (error instanceof import_crm9.CrmInputError) {
+  if (error instanceof import_crm10.CrmInputError) {
     return json({ error: error.message, code: "invalid_transition_or_fields", ...error.fields ? { fields: error.fields } : {} }, 422);
   }
   return json({ error: "follower mutation failed", code: "mutation_failed" }, 500);
 }
 async function priorMutation(db, id) {
   const result = await db.query({
-    [import_crm9.CRM_NS.activity]: { $: { where: { id }, limit: 1 } }
+    [import_crm10.CRM_NS.activity]: { $: { where: { id }, limit: 1 } }
   });
-  const row = (result[import_crm9.CRM_NS.activity] ?? [])[0];
+  const row = (result[import_crm10.CRM_NS.activity] ?? [])[0];
   const meta = row?.meta;
   const receipt = meta?.[NETWORK_MUTATION_META];
   return typeof receipt?.fingerprint === "string" ? { fingerprint: receipt.fingerprint } : null;
@@ -6264,7 +6333,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
       if (prior.fingerprint !== fingerprint) {
         return json({ error: "mutationId was already used for different input", code: "mutation_conflict" }, 409);
       }
-      const replayed = await (0, import_crm9.getRecord)({ crm: ctx.chapter.crm, db }, input.recordId);
+      const replayed = await (0, import_crm10.getRecord)({ crm: ctx.chapter.crm, db }, input.recordId);
       if (!replayed || replayed.type !== input.type) return json({ error: "record not found", code: "not_found" }, 404);
       const result = {
         version: 1,
@@ -6274,7 +6343,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
       };
       return json(result);
     }
-    const record4 = await (0, import_crm9.getRecord)({ crm: ctx.chapter.crm, db }, input.recordId);
+    const record4 = await (0, import_crm10.getRecord)({ crm: ctx.chapter.crm, db }, input.recordId);
     if (!record4 || record4.type !== input.type) return json({ error: "record not found", code: "not_found" }, 404);
     if (record4.updatedAt !== input.expectedRevision) {
       return json({ error: "record changed since it was reviewed", code: "stale_revision" }, 409);
@@ -6295,7 +6364,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
     };
     try {
       const deps2 = { crm: ctx.chapter.crm, db };
-      const updated = hasFields ? await (0, import_crm9.updateRecord)(deps2, {
+      const updated = hasFields ? await (0, import_crm10.updateRecord)(deps2, {
         id: record4.id,
         input: fields,
         mutationId: activityId,
@@ -6306,7 +6375,7 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
           authorId: `network:${verified.sender}`,
           meta: auditMeta
         }
-      }) : await (0, import_crm9.setStage)(deps2, {
+      }) : await (0, import_crm10.setStage)(deps2, {
         id: record4.id,
         to: input.stage,
         authorId: `network:${verified.sender}`,
@@ -6330,21 +6399,19 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
   const type = url.searchParams.get("type") ?? "";
   const allowed2 = reader.fields[type];
   if (!IDENTIFIER.test(type) || !allowed2) return json({ error: "record type is not shared with this reader" }, 403);
-  const limit = integer(url.searchParams.get("limit"), 25, 1, MAX_PAGE);
-  const offset = integer(url.searchParams.get("offset"), 0, 0, MAX_OFFSET);
-  const search = (url.searchParams.get("search") ?? "").trim();
-  if (limit == null || offset == null || search.length > MAX_SEARCH) {
-    return json({ error: "invalid pagination or search parameters" }, 400);
-  }
-  const page = await (0, import_crm9.listRecords)(
-    { crm: ctx.chapter.crm, db },
-    {
-      type,
-      limit,
-      offset,
-      ...search ? { search } : {},
-      sort: { field: "updatedAt", dir: "desc" }
-    }
+  const window = networkRecordWindow(url.searchParams);
+  if (!window) return json({ error: "invalid record query parameters" }, 400);
+  const typeDef = ctx.chapter.crm.type(type);
+  const stages = typeDef.pipeline?.stages ?? [];
+  if (window.stage && !stages.some((stage) => stage.id === window.stage)) {
+    return json({ error: "stage is not defined for this record type" }, 400);
+  }
+  const page = await listReaderRecords(
+    db,
+    type,
+    allowed2,
+    typeDef.emailField,
+    window
   );
   const response = {
     version: 1,
@@ -6352,8 +6419,16 @@ var handleNetworkRecords = async (req, url, env, ctx) => {
     type,
     records: page.records.map((record4) => readerRecord(record4, reader, ctx.chapter.crm)),
     total: page.total,
-    limit: page.limit,
-    offset: page.offset
+    limit: window.limit,
+    offset: window.offset,
+    filters: {
+      stages: stages.map((stage) => ({ id: stage.id, label: stage.label ?? stage.id })),
+      sorts: [...NETWORK_RECORD_SORTS]
+    },
+    appliedQuery: {
+      ...window.stage ? { stage: window.stage } : {},
+      sort: window.sortId
+    }
   };
   return json(response);
 };
@@ -6386,7 +6461,8 @@ async function readTargetRecords(db, env, ctx, target, query) {
       const upstream = body && "error" in body && typeof body.error === "string" ? body.error : void 0;
       return {
         ok: false,
-        error: upstream ?? (response.ok ? "invalid follower record response" : `follower returned ${response.status}`)
+        error: upstream ?? (response.ok ? "invalid follower record response" : `follower returned ${response.status}`),
+        ...response.status === 400 ? { status: 400 } : {}
       };
     }
     return {
@@ -6477,16 +6553,22 @@ var handleAdminNetworkRecords = async (req, url, env, ctx) => {
   const type = url.searchParams.get("type") ?? "";
   const target = targetFor2(ctx, targetId);
   if (!target || !IDENTIFIER.test(type)) return json({ error: "configured targetId and record type are required" }, 400);
-  const limit = integer(url.searchParams.get("limit"), 25, 1, MAX_PAGE);
-  const offset = integer(url.searchParams.get("offset"), 0, 0, MAX_OFFSET);
-  const search = (url.searchParams.get("search") ?? "").trim();
-  if (limit == null || offset == null || search.length > MAX_SEARCH) {
-    return json({ error: "invalid pagination or search parameters" }, 400);
-  }
-  const query = new URLSearchParams({ type, limit: String(limit), offset: String(offset) });
-  if (search) query.set("search", search);
+  const window = networkRecordWindow(url.searchParams);
+  if (!window) return json({ error: "invalid record query parameters" }, 400);
+  const query = new URLSearchParams({
+    type,
+    limit: String(window.limit),
+    offset: String(window.offset),
+    sort: window.sortId
+  });
+  if (window.search) query.set("search", window.search);
+  if (window.stage) query.set("stage", window.stage);
   const result = await readTargetRecords(got.db, env, ctx, target, query);
-  return result.ok ? json(result.page) : json({ error: result.error }, 502);
+  if (!result.ok) return json({ error: result.error }, result.status ?? 502);
+  if ((window.stage || url.searchParams.has("sort")) && (!result.page.appliedQuery || result.page.appliedQuery.sort !== window.sortId || result.page.appliedQuery.stage !== window.stage)) {
+    return json({ error: "follower did not apply the requested record query" }, 502);
+  }
+  return json(result.page);
 };
 
 // src/worker-routes-network-notes.ts
@@ -6574,7 +6656,7 @@ var handleAdminNetworkNotes = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-network-shared-notes.ts
-var import_crm10 = require("@odla-ai/crm");
+var import_crm11 = require("@odla-ai/crm");
 var import_db11 = require("@odla-ai/db");
 var IDENTIFIER3 = /^[a-z][a-zA-Z0-9_]*$/;
 var RECORD_ID3 = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,255}$/;
@@ -6604,7 +6686,7 @@ function sharedNote(activity, sourceId) {
 }
 async function listSharedNotes(db, sourceId, recordId) {
   const result = await db.query({
-    [import_crm10.CRM_NS.activity]: {
+    [import_crm11.CRM_NS.activity]: {
       $: {
         where: {
           and: [
@@ -6617,7 +6699,7 @@ async function listSharedNotes(db, sourceId, recordId) {
       }
     }
   });
-  return (result[import_crm10.CRM_NS.activity] ?? []).flatMap((activity) => {
+  return (result[import_crm11.CRM_NS.activity] ?? []).flatMap((activity) => {
     const note = sharedNote(activity, sourceId);
     return note ? [note] : [];
   });
@@ -6645,7 +6727,7 @@ var handleNetworkSharedNotes = async (req, url, env, ctx) => {
   if (!IDENTIFIER3.test(recordType) || !RECORD_ID3.test(recordId) || !reader?.sharedNotes.includes(recordType)) {
     return json({ error: "shared notes are not enabled for this reader and record type" }, 403);
   }
-  const record4 = await (0, import_crm10.getRecord)({ crm: ctx.chapter.crm, db }, recordId);
+  const record4 = await (0, import_crm11.getRecord)({ crm: ctx.chapter.crm, db }, recordId);
   if (!record4 || record4.type !== recordType) return json({ error: "record not found" }, 404);
   if (req.method === "GET") {
     return json({
@@ -6667,7 +6749,7 @@ var handleNetworkSharedNotes = async (req, url, env, ctx) => {
   }
   const createdAt = Date.now();
   const id = `network:${verified.sender}:${mutationId}`;
-  const result = await (0, import_crm10.addActivity)(
+  const result = await (0, import_crm11.addActivity)(
     {
       crm: ctx.chapter.crm,
       db,
@@ -8240,7 +8322,7 @@ var handleAdminNetworkCommercialReadModel = async (req, url, env, ctx) => {
 };
 
 // src/worker-routes-formation.ts
-var import_crm11 = require("@odla-ai/crm");
+var import_crm12 = require("@odla-ai/crm");
 var SUBMISSION = /^[A-Za-z0-9_-]{8,128}$/;
 var handleFormation = async (req, url, env, ctx) => {
   const formation = ctx.chapter.formation;
@@ -8292,7 +8374,7 @@ var handleFormation = async (req, url, env, ctx) => {
   const db = ctx.makeDb(env);
   const id = submissionId ? await applicationIdForSubmission(`formation:${ctx.chapter.id}:${submissionId}`) : crypto.randomUUID();
   try {
-    const created = await (0, import_crm11.createRecord)(
+    const created = await (0, import_crm12.createRecord)(
       {
         crm: ctx.chapter.crm,
         db,