@teamscala/service-boot 0.23.481 → 0.23.492

package/src/fn-routers/user-preferences-router.ts

@@ -1,130 +0,0 @@
-/**
- * @system service-boot
- * @status handwritten
- * @edit edit directly
- *
- * ORPC procedures for a GENERIC per-user preference store backed by the
- * `user_preferences` table. The user is resolved from the ORPC session context
- * (`authed` middleware → `context.user.id`); the client supplies the org + key
- * + value. This is the DB-durable, user-scoped key/value surface any feature
- * can use — the AI browser-control focus (key `ai_ui_focus`) is the first
- * consumer; it is NOT scala-projects-bespoke.
- *
- * Why this exists (over the generated `user_preferences` CRUD): the generated
- * create/update do NOT resolve `user_id` server-side (only `organisation_id`
- * from ctx.orgId), so a client cannot correctly write a per-user row through
- * them. This proc stamps `user_id` from the authenticated caller, making the
- * write safe + per-user. It also emits the `data_change` notify so the
- * realtime surface (regions.watchDataChange) pushes updates to subscribed
- * clients — the cross-region channel for the AI focus (the AiChat panel writes
- * a focus here; the project-list-view in a different region subscribes +
- * reacts, no shared React-context ancestor needed).
- *
- * Ownership is user_id: a caller reads/writes ONLY their own preferences. The
- * org is part of the compound key (per-org isolation) but is client-supplied
- * (the session carries the user, not the active org).
- *
- * DECISION — host-scoping of `user_preferences` is RETIRED: the table is a
- * shared `@teamscala/db` model now, so `Context.prisma` is the typed shared
- * PrismaClient and the proc is universally hostable — every host's generated
- * client declares the table. (Previously `Context.prisma` was `any`-typed as a
- * deliberate seam while only scala-projects declared the table.)
- */
-
-import * as v from "valibot";
-import { getAppLogger } from "@teamscala/logger/app-loggers";
-import { executeRawUnsafe } from "@teamscala/db/query-rows";
-import { authed, type Context } from "./auth-router.ts";
-
-interface SessionUser {
-	id: string;
-}
-
-const upsertSchema = v.object({
-	organisationId: v.string(),
-	/** The preference key (e.g. `ai_ui_focus`). Namespaced by feature. */
-	key: v.string(),
-	/** The JSON value. Arbitrary per feature — typed by the caller. */
-	value: v.any(),
-});
-
-const getSchema = v.object({
-	organisationId: v.string(),
-	key: v.string(),
-});
-
-/**
- * Emit a best-effort `data_change` notify so realtime subscribers
- * (regions.watchDataChange filtering on `user_preferences`) re-read + react.
- * Mirrors the notify the generated CRUD emits. Never throws — realtime must
- * never block a write (matches the generated create/update notify guard).
- */
-async function notifyDataChange(
-	organisationId: string,
-	op: string,
-): Promise<void> {
-	if (!organisationId) return;
-	try {
-		await (executeRawUnsafe as Function)(
-			"SELECT pg_notify('data_change', $1)",
-			JSON.stringify({ table: "user_preferences", op, org_id: organisationId }),
-		);
-	} catch {
-		/* best-effort */
-	}
-}
-
-export const userPreferencesRouter = {
-	// upsert — write (create-or-replace) the caller's preference value for
-	// (org, key). Stamps user_id from the session; the client never supplies it.
-	upsert: authed.input(upsertSchema).handler(async ({ input, context }) => {
-		const prisma = (context as Context).prisma;
-		const user = context.user as SessionUser;
-		const log = getAppLogger();
-		const { organisationId, key, value } = input;
-
-		try {
-			await prisma.user_preferences.upsert({
-				where: {
-					user_id_organisation_id_key: {
-						user_id: user.id,
-						organisation_id: organisationId,
-						key,
-					},
-				},
-				create: {
-					user_id: user.id,
-					organisation_id: organisationId,
-					key,
-					value,
-				},
-				update: { value },
-			});
-			await notifyDataChange(organisationId, "upsert");
-			return { success: true };
-		} catch (err) {
-			log.error(
-				`[userPreferences.upsert] failed: ${err instanceof Error ? err.message : String(err)}`,
-			);
-			throw err;
-		}
-	}),
-
-	// get — read the caller's preference value for (org, key), or null. The
-	// initial read for a subscriber (the realtime notify then drives re-reads).
-	get: authed.input(getSchema).handler(async ({ input, context }) => {
-		const prisma = (context as Context).prisma;
-		const user = context.user as SessionUser;
-		const row = await prisma.user_preferences.findUnique({
-			where: {
-				user_id_organisation_id_key: {
-					user_id: user.id,
-					organisation_id: input.organisationId,
-					key: input.key,
-				},
-			},
-			select: { value: true, updated_at: true },
-		});
-		return { value: row?.value ?? null, updatedAt: row?.updated_at ?? null };
-	}),
-};

package/src/fn-routers/work-items-router.ts

@@ -1,342 +0,0 @@
-/**
- * @system service-boot
- * @status handwritten
- * @edit edit directly
- *
- * ORPC procedure for safely deleting a work_item (initiative/project/task).
- * Refuses the delete when the row still has child rows (parent_id = id), so a
- * delete can NEVER orphan its descendants — the tree must be emptied bottom-up.
- *
- * Initiatives, projects and tasks are all rows of the ONE `work_items` table
- * discriminated by `kind`, and `parent_id` carries no DB-level foreign key, so
- * a plain `work_items.delete` leaves dangling children with no referential
- * integrity to stop it. This one guard covers every level (you may only delete
- * a leaf — a node with no children), which is exactly the "empty it first"
- * behaviour the board wants.
- */
-
-	/**
-	 * Org-scoped member list for the task-comments panel — @mention matching AND
-	 * comment-sender display (name + avatar). ChatPanel.tsx has no
-	 * serverLoader/orgId prop (client-only overlay content), so it can't do the
-	 * SSR raw-SQL org-scope join load-project-list-view.ts uses; this exposes
-	 * the same result via a custom procedure instead of widening service_schema
-	 * to the raw better_auth_member table.
-	 *
-	 * This is the SINGLE source of member display info for the comments panel:
-	 * it coalesces BOTH name/email/avatar families on the user model into one
-	 * shape (the `full_name`/`primary_email`/`avatar_url` family AND the
-	 * better-auth `name`/`email`/`image` family). Returning avatar here lets the
-	 * client resolve sender name+avatar from this one list and drop the separate
-	 * `user.findMany` enrichment fetch it previously ran as a second waterfall
-	 * hop after `comments.findMany` (loading-shape: one wave-parallel hit, not a
-	 * dependent client-side round-trip chain).
-	 */
-
-import { createEmailClient } from "@teamscala/email-client/client";
-import { getAppLogger } from "@teamscala/logger/app-loggers";
-import { authed, type Context } from "./auth-router.ts";
-import { resolveAppBaseUrl } from "../resolve-app-base-url.ts";
-
-const emailClient = createEmailClient();
-
-export const workItemsRouter = {
-	/**
-	 * Fired client-side right after a task's status is set to
-	 * "pending_approval" (RaCI: the task's assignee is Responsible; the
-	 * project's Accountable person is the approver). Walks parent_id up to
-	 * the nearest project-kind ancestor, emails every accountable person on
-	 * it. Never throws to the caller — a notification failure must not block
-	 * the status change that already committed.
-	 */
-	requestApproval: authed.handler(async ({ input, context }) => {
-		const { id } = input as { id: string };
-		const log = getAppLogger();
-		const prisma = (context as Context).prisma as {
-			work_items: {
-				findUnique: (a: unknown) => Promise<{
-					id: string;
-					title: string;
-					kind: string;
-					parent_id: string | null;
-					organisation_id: string | null;
-				} | null>;
-			};
-			work_item_roles: {
-				findMany: (a: unknown) => Promise<{ user_id: string }[]>;
-			};
-			user: {
-				findUnique: (a: unknown) => Promise<{ id: string; email: string; name: string | null } | null>;
-			};
-			organisation_profile: {
-				findFirst: (a: unknown) => Promise<{ company_name: string | null } | null>;
-			};
-			notifications: {
-				create: (a: unknown) => Promise<unknown>;
-			};
-		};
-
-		try {
-			const task = await prisma.work_items.findUnique({
-				where: { id },
-				select: { id: true, title: true, kind: true, parent_id: true, organisation_id: true },
-			});
-			if (!task) return { notified: 0 };
-
-			let project = task;
-			while (project.kind !== "project" && project.parent_id) {
-				const parent = await prisma.work_items.findUnique({
-					where: { id: project.parent_id },
-					select: { id: true, title: true, kind: true, parent_id: true, organisation_id: true },
-				});
-				if (!parent) break;
-				project = parent;
-			}
-
-			const accountable = await prisma.work_item_roles.findMany({
-				where: { work_item_id: project.id, role: "accountable" },
-			});
-			if (accountable.length === 0) {
-				log.info("[work-items-router] requestApproval: no accountable person set", { taskId: id, projectId: project.id });
-				return { notified: 0 };
-			}
-
-			const requester = context.user as { id: string; name?: string | null; email?: string | null } | null;
-			const org = await prisma.organisation_profile.findFirst({
-				where: { id: task.organisation_id },
-				select: { company_name: true },
-			});
-			const linkUrl = `${await resolveAppBaseUrl()}/${task.organisation_id}?panel=task-comments&comment=${task.id}`;
-			const requesterName = requester?.name ?? requester?.email ?? "Someone";
-
-			let notified = 0;
-			for (const role of accountable) {
-				const user = await prisma.user.findUnique({ where: { id: role.user_id }, select: { id: true, email: true, name: true } });
-				if (!user?.email) continue;
-				const result = await emailClient.send({
-					to: user.email,
-					template: "task-awaiting-approval",
-					vars: {
-						recipient_name: user.name ?? user.email,
-						requester_name: requesterName,
-						project_title: project.title,
-						task_title: task.title,
-						task_url: linkUrl,
-						org_name: org?.company_name ?? "your organisation",
-					},
-				});
-				if (result.status !== "failed") notified++;
-				try {
-					await prisma.notifications.create({
-						data: {
-							organisation_id: task.organisation_id,
-							user_id: role.user_id,
-							type: "approval_request",
-							title: `${requesterName} requested approval`,
-							body: task.title,
-							work_item_id: task.id,
-							link_url: linkUrl,
-						},
-					});
-				} catch (err) {
-					log.error("[work-items-router] requestApproval: failed to write notification row", {
-						taskId: id,
-						userId: role.user_id,
-						error: err instanceof Error ? err.message : String(err),
-					});
-				}
-			}
-			return { notified };
-		} catch (err) {
-			log.error("[work-items-router] requestApproval failed", { taskId: id, error: err instanceof Error ? err.message : String(err) });
-			return { notified: 0 };
-		}
-	}),
-	/**
-	 * Fired client-side right after a comment is created, when the comment
-	 * text contains an @mention the client already resolved to a team-member
-	 * id (client does the name matching against the people list it already
-	 * has loaded; this handler only sends). Never throws to the caller for
-	 * same reason as requestApproval -- a notification failure must not
-	 * surface as a failed comment post.
-	 */
-	notifyMentions: authed.handler(async ({ input, context }) => {
-		const { workItemId, mentionedUserIds, commentExcerpt } = input as {
-			workItemId: string;
-			mentionedUserIds: string[];
-			commentExcerpt: string;
-		};
-		const log = getAppLogger();
-		const prisma = (context as Context).prisma as {
-			work_items: {
-				findUnique: (a: unknown) => Promise<{ id: string; title: string; organisation_id: string | null } | null>;
-			};
-			user: {
-				findUnique: (a: unknown) => Promise<{ id: string; email: string; name: string | null } | null>;
-			};
-			notifications: {
-				create: (a: unknown) => Promise<unknown>;
-			};
-		};
-		if (!mentionedUserIds || mentionedUserIds.length === 0) return { notified: 0 };
-		try {
-			const task = await prisma.work_items.findUnique({
-				where: { id: workItemId },
-				select: { id: true, title: true, organisation_id: true },
-			});
-			if (!task) return { notified: 0 };
-			const author = context.user as { id: string; name?: string | null; email?: string | null } | null;
-			const commentUrl = `${await resolveAppBaseUrl()}/${task.organisation_id}?panel=task-comments&comment=${task.id}`;
-			const authorName = author?.name ?? author?.email ?? "Someone";
-			const excerpt = commentExcerpt.slice(0, 280);
-
-			let notified = 0;
-			for (const userId of new Set(mentionedUserIds)) {
-				if (userId === author?.id) continue;
-				let user: { id: string; email: string; name: string | null } | null = null;
-				try {
-					user = await prisma.user.findUnique({ where: { id: userId }, select: { id: true, email: true, name: true } });
-				} catch (err) {
-					log.error("[work-items-router] notifyMentions: user lookup failed", { userId, error: err instanceof Error ? err.message : String(err) });
-					continue;
-				}
-				if (!user?.email) continue;
-				let result: { status: string };
-				try {
-					result = await emailClient.send({
-						to: user.email,
-						template: "comment-mention",
-						vars: {
-							recipient_name: user.name ?? user.email,
-							author_name: authorName,
-							task_title: task.title,
-							comment_excerpt: excerpt,
-							comment_url: commentUrl,
-						},
-					});
-				} catch (err) {
-					log.error("[work-items-router] notifyMentions: emailClient.send threw", { userId, error: err instanceof Error ? err.message : String(err) });
-					result = { status: "failed" };
-				}
-				if (result.status !== "failed") notified++;
-				try {
-					await prisma.notifications.create({
-						data: {
-							organisation_id: task.organisation_id,
-							user_id: userId,
-							type: "mention",
-							title: `${authorName} mentioned you`,
-							body: excerpt,
-							work_item_id: task.id,
-							link_url: commentUrl,
-						},
-					});
-				} catch (err) {
-					log.error("[work-items-router] notifyMentions: failed to write notification row", {
-						workItemId,
-						userId,
-						error: err instanceof Error ? err.message : String(err),
-					});
-				}
-			}
-			return { notified };
-		} catch (err) {
-			log.error("[work-items-router] notifyMentions failed", { workItemId, error: err instanceof Error ? err.message : String(err) });
-			return { notified: 0 };
-		}
-	}),
-	orgMembers: authed.handler(async ({ input, context }) => {
-		const { orgId } = input as { orgId: string };
-		const prisma = (context as Context).prisma as {
-			$queryRawUnsafe: <T>(sql: string, ...params: unknown[]) => Promise<T>;
-			user: {
-				findMany: (a: unknown) => Promise<{
-					id: string;
-					name: string | null;
-					email: string | null;
-					image: string | null;
-					full_name: string | null;
-					primary_email: string | null;
-					avatar_url: string | null;
-					avatar_thumb_url: string | null;
-				}[]>;
-			};
-		};
-		if (!orgId) return [];
-		const memberIds = (
-			await prisma.$queryRawUnsafe<{ user_id: string }[]>(
-				"SELECT user_id FROM better_auth_member WHERE organization_id = $1",
-				orgId,
-			)
-		).map((m) => m.user_id);
-		if (memberIds.length === 0) return [];
-		const users = await prisma.user.findMany({
-			where: { id: { in: memberIds } },
-			select: {
-				id: true,
-				name: true,
-				email: true,
-				image: true,
-				full_name: true,
-				primary_email: true,
-				avatar_url: true,
-				avatar_thumb_url: true,
-			},
-		});
-		return users.map((u) => ({
-			id: u.id,
-			name: u.full_name || u.name || "",
-			email: u.primary_email || u.email || "",
-			avatar: u.avatar_url || u.image || u.avatar_thumb_url || null,
-		}));
-	}),
-	deleteEmpty: authed.handler(async ({ input, context }) => {
-		const { id } = input as { id: string };
-		if (!id) throw new Error("id is required");
-		const prisma = (context as Context).prisma as {
-			work_items: {
-				findUnique: (a: unknown) => Promise<{
-					id: string;
-					kind: string;
-					organisation_id: string | null;
-				} | null>;
-				count: (a: unknown) => Promise<number>;
-				delete: (a: unknown) => Promise<unknown>;
-			};
-		};
-
-		const item = await prisma.work_items.findUnique({
-			where: { id },
-			select: { id: true, kind: true, organisation_id: true },
-		});
-		if (!item) throw new Error("Work item not found");
-
-		// Org-scope parity with the generated CRUD: a non-super-admin may only
-		// delete within their active organisation.
-		const user = context.user as { id: string; isSuperAdmin?: boolean } | null;
-		const orgId = (context as Context).orgId ?? null;
-		if (
-			!user?.isSuperAdmin &&
-			item.organisation_id &&
-			item.organisation_id !== orgId
-		) {
-			const { ORPCError } = await import("@orpc/server");
-			throw new ORPCError("FORBIDDEN", {
-				message: "You can only delete items in your own organisation.",
-			});
-		}
-
-		const childCount = await prisma.work_items.count({
-			where: { parent_id: id },
-		});
-		if (childCount > 0) {
-			const { ORPCError } = await import("@orpc/server");
-			throw new ORPCError("CONFLICT", {
-				message: `Can't delete this ${item.kind}: it still has ${childCount} item${childCount === 1 ? "" : "s"} inside it. Empty it first, then delete.`,
-			});
-		}
-
-		await prisma.work_items.delete({ where: { id } });
-		return { success: true };
-	}),
-};

package/src/page-server-orpc/audit-revert-router.ts

@@ -1,102 +0,0 @@
-/**
- * @system page-server
- * @status handwritten
- * @edit edit directly
- *
- * Audit revert procedure — re-applies an audit_trail row's changes_before to
- * the entity via the canonical generated Prisma procedure for the entity's
- * table: INSERT→delete the created row, UPDATE→restore the old values,
- * DELETE→recreate from the deleted snapshot. The revert write itself fires the
- * audit extension + DB trigger, recording a NEW forward audit_trail row —
- * history is never edited (audit-trail-permanent; the undo is itself audited).
- *
- * Gated to super-admin (reverting business data is privileged). The caller
- * must pass the audit_trail row id; the procedure resolves table + action +
- * before-snapshot from that row.
- */
-
-import { os } from "@orpc/server";
-import type { PrismaClient } from "@teamscala/db/client";
-import * as v from "valibot";
-import { getAppLogger } from "@teamscala/logger/app-loggers";
-
-const procedure = os;
-
-type C = {
-	prisma?: unknown;
-	user?: { id?: string; isSuperAdmin?: boolean } | null;
-};
-
-function getPrisma(context: unknown) {
-	const db = (context as C).prisma;
-	if (!db) throw new Error("auditRevert: context.prisma is required");
-	return db as PrismaClient;
-}
-
-const revertInput = v.object({
-	auditTrailId: v.string(),
-});
-
-export const auditRevertRouter = {
-	/**
-	 * Revert a single audited change by re-applying changes_before through the
-	 * generated Prisma model for the entity's table. Returns the action taken.
-	 */
-	revert: procedure.input(revertInput).handler(async ({ context, input }) => {
-		const user = (context as C).user;
-		if (!user?.isSuperAdmin) {
-			throw new Error("auditRevert: requires super-admin");
-		}
-		const prisma = getPrisma(context) as unknown as Record<string, unknown>;
-		const log = getAppLogger();
-		const { auditTrailId } = input;
-
-		const row = await prisma.audit_trail.findUnique({
-			where: { id: auditTrailId },
-			select: {
-				entity_type: true,
-				entity_id: true,
-				action: true,
-				changes_before: true,
-				changes_after: true,
-			},
-		});
-		if (!row) {
-			throw new Error(`auditRevert: audit_trail ${auditTrailId} not found`);
-		}
-
-		const table = String(row.entity_type);
-		const model = prisma[table];
-		if (!model || typeof model.delete !== "function") {
-			throw new Error(`auditRevert: table ${table} has no generated Prisma model`);
-		}
-		const entityId = String(row.entity_id ?? "");
-		const act = String(row.action ?? "").toUpperCase();
-		// changes_before is Json? — Prisma returns it parsed.
-		const before = (row.changes_before ?? null) as Record<string, unknown> | null;
-
-		let result: unknown;
-		if (act === "INSERT" || act === "CREATE") {
-			// Entity was created → revert = delete it.
-			if (!entityId) throw new Error("auditRevert INSERT: no entity_id");
-			result = await model.delete({ where: { id: entityId } });
-		} else if (act === "UPDATE") {
-			// Entity was updated → revert = restore changes_before (old values).
-			if (!before) throw new Error("auditRevert UPDATE: no changes_before to restore");
-			result = await model.update({ where: { id: entityId }, data: before });
-		} else if (act === "DELETE") {
-			// Entity was deleted → revert = recreate from changes_before.
-			if (!before) throw new Error("auditRevert DELETE: no changes_before to recreate");
-			result = await model.create({ data: before });
-		} else {
-			throw new Error(`auditRevert: unsupported action ${act}`);
-		}
-
-		log.info(
-			`[auditRevert] ${act} ${table} ${entityId} reverted by ${user.id}`,
-		);
-		return { success: true as const, action: act, table, entityId };
-	}),
-};
-
-export type AuditRevertRouter = typeof auditRevertRouter;