Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
import { z } from 'zod';
|
|
|
|
|
|
2026-05-06 14:56:59 +02:00
|
|
|
import { baseListQuerySchema } from '@/lib/api/list-query';
|
fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs
Wave through the remaining audit-final-deferred items that aren't blocked
on the back-burnered Documenso work.
Multi-tenant isolation:
- Storage proxy ProxyTokenPayload gains optional `p` (port slug) claim;
verifier asserts `key.startsWith(${p}/)`. Defense-in-depth against a
buggy issuer in some future code path that mixes port scopes — every
storage key generated by generateStorageKey() already prefixes the
slug. document-sends opts in for 24h emailed download links; other
callers continue working unchanged via the optional field.
DB schema reconciliation:
- Migration 0047 rebuilds system_settings unique index with NULLS NOT
DISTINCT (Postgres 15+) so global settings (port_id IS NULL) are
uniquely keyed by `key` alone. Surfaced + dedupe'd 65 duplicate
(storage_backend, NULL) rows that had accumulated from race-prone
delete-then-insert patterns in ocr-config / settings / residential-
stages / ai-budget services. All four services converted to true
onConflictDoUpdate upserts so the race window is closed.
API uniformity:
- Response shape standardization: 16 routes converted from
`{ success: true }` to 204 No Content. CLAUDE.md documents the
convention (`{ data: <T> }` for content, 204 for empty mutations,
portal-auth retains `{ success: true }` for the frontend's auth chain).
- req.json() → parseBody() migration across 9 admin/CRM routes
(custom-fields, expenses/export ×3, currency convert,
search/recently-viewed, admin/duplicates, berths/pdf-{upload-url,
versions, parse-results}). Uniform 400 error shapes for
ZodError-flagged bodies.
Custom-fields merge tokens (shipped end-to-end):
- merge-fields.ts gains CUSTOM_MERGE_TOKEN_RE + helpers for the
`{{custom.<fieldName>}}` shape.
- document-templates validator accepts the dynamic shape alongside
the static catalog tokens.
- document-sends.service mergeCustomFieldValues resolver fetches
per-port custom_field_definitions for client/interest/berth contexts
and substitutes stored values keyed by `{{custom.fieldName}}`.
- custom-fields-manager amber banner updated to reflect that merge
tokens now expand (search index + entity-diff remain documented
design limitations).
/api/v1/files cross-entity filtering:
- Validator + listFiles + uploadFile accept companyId AND yachtId
alongside clientId. file-upload-zone propagates both.
- New CompanyFilesTab component mirrors ClientFilesTab; restored as a
visible Documents tab in company-tabs.tsx (was a hidden stub).
Inline TODOs:
- Reviewed remaining two TODOs (per-user reminder schedule, import
worker handlers). Both are placeholders for future feature surfaces,
not bugs — per-port digest works for every customer; nothing
currently enqueues import jobs (verified). Annotated in BACKLOG.
BACKLOG.md updated to reflect what landed and what's still pending
(Documenso-related items still bundled with the back-burnered phases).
Tests: 1185/1185 vitest, tsc clean.
2026-05-08 02:20:27 +02:00
|
|
|
import { VALID_MERGE_TOKENS, isCustomMergeToken } from '@/lib/templates/merge-fields';
|
|
|
|
|
|
|
|
|
|
// A token is acceptable if it's in the static catalog OR matches the
|
|
|
|
|
// dynamic `{{custom.<fieldName>}}` shape. The resolver checks the actual
|
|
|
|
|
// per-port custom-field definition at expand time and substitutes the
|
|
|
|
|
// stored value (or leaves the token unresolved if no definition matches).
|
|
|
|
|
function isAcceptableMergeToken(token: string): boolean {
|
|
|
|
|
return VALID_MERGE_TOKENS.has(token) || isCustomMergeToken(token);
|
|
|
|
|
}
|
2026-04-26 13:48:06 +02:00
|
|
|
|
|
|
|
|
const mergeFieldsSchema = z
|
|
|
|
|
.array(z.string())
|
|
|
|
|
.optional()
|
|
|
|
|
.default([])
|
|
|
|
|
.refine(
|
fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs
Wave through the remaining audit-final-deferred items that aren't blocked
on the back-burnered Documenso work.
Multi-tenant isolation:
- Storage proxy ProxyTokenPayload gains optional `p` (port slug) claim;
verifier asserts `key.startsWith(${p}/)`. Defense-in-depth against a
buggy issuer in some future code path that mixes port scopes — every
storage key generated by generateStorageKey() already prefixes the
slug. document-sends opts in for 24h emailed download links; other
callers continue working unchanged via the optional field.
DB schema reconciliation:
- Migration 0047 rebuilds system_settings unique index with NULLS NOT
DISTINCT (Postgres 15+) so global settings (port_id IS NULL) are
uniquely keyed by `key` alone. Surfaced + dedupe'd 65 duplicate
(storage_backend, NULL) rows that had accumulated from race-prone
delete-then-insert patterns in ocr-config / settings / residential-
stages / ai-budget services. All four services converted to true
onConflictDoUpdate upserts so the race window is closed.
API uniformity:
- Response shape standardization: 16 routes converted from
`{ success: true }` to 204 No Content. CLAUDE.md documents the
convention (`{ data: <T> }` for content, 204 for empty mutations,
portal-auth retains `{ success: true }` for the frontend's auth chain).
- req.json() → parseBody() migration across 9 admin/CRM routes
(custom-fields, expenses/export ×3, currency convert,
search/recently-viewed, admin/duplicates, berths/pdf-{upload-url,
versions, parse-results}). Uniform 400 error shapes for
ZodError-flagged bodies.
Custom-fields merge tokens (shipped end-to-end):
- merge-fields.ts gains CUSTOM_MERGE_TOKEN_RE + helpers for the
`{{custom.<fieldName>}}` shape.
- document-templates validator accepts the dynamic shape alongside
the static catalog tokens.
- document-sends.service mergeCustomFieldValues resolver fetches
per-port custom_field_definitions for client/interest/berth contexts
and substitutes stored values keyed by `{{custom.fieldName}}`.
- custom-fields-manager amber banner updated to reflect that merge
tokens now expand (search index + entity-diff remain documented
design limitations).
/api/v1/files cross-entity filtering:
- Validator + listFiles + uploadFile accept companyId AND yachtId
alongside clientId. file-upload-zone propagates both.
- New CompanyFilesTab component mirrors ClientFilesTab; restored as a
visible Documents tab in company-tabs.tsx (was a hidden stub).
Inline TODOs:
- Reviewed remaining two TODOs (per-user reminder schedule, import
worker handlers). Both are placeholders for future feature surfaces,
not bugs — per-port digest works for every customer; nothing
currently enqueues import jobs (verified). Annotated in BACKLOG.
BACKLOG.md updated to reflect what landed and what's still pending
(Documenso-related items still bundled with the back-burnered phases).
Tests: 1185/1185 vitest, tsc clean.
2026-05-08 02:20:27 +02:00
|
|
|
(tokens) => tokens.every(isAcceptableMergeToken),
|
2026-04-26 13:48:06 +02:00
|
|
|
(tokens) => {
|
fix(audit): non-Documenso backlog sweep — port-binding, NULLS NOT DISTINCT, custom merge tokens, company docs
Wave through the remaining audit-final-deferred items that aren't blocked
on the back-burnered Documenso work.
Multi-tenant isolation:
- Storage proxy ProxyTokenPayload gains optional `p` (port slug) claim;
verifier asserts `key.startsWith(${p}/)`. Defense-in-depth against a
buggy issuer in some future code path that mixes port scopes — every
storage key generated by generateStorageKey() already prefixes the
slug. document-sends opts in for 24h emailed download links; other
callers continue working unchanged via the optional field.
DB schema reconciliation:
- Migration 0047 rebuilds system_settings unique index with NULLS NOT
DISTINCT (Postgres 15+) so global settings (port_id IS NULL) are
uniquely keyed by `key` alone. Surfaced + dedupe'd 65 duplicate
(storage_backend, NULL) rows that had accumulated from race-prone
delete-then-insert patterns in ocr-config / settings / residential-
stages / ai-budget services. All four services converted to true
onConflictDoUpdate upserts so the race window is closed.
API uniformity:
- Response shape standardization: 16 routes converted from
`{ success: true }` to 204 No Content. CLAUDE.md documents the
convention (`{ data: <T> }` for content, 204 for empty mutations,
portal-auth retains `{ success: true }` for the frontend's auth chain).
- req.json() → parseBody() migration across 9 admin/CRM routes
(custom-fields, expenses/export ×3, currency convert,
search/recently-viewed, admin/duplicates, berths/pdf-{upload-url,
versions, parse-results}). Uniform 400 error shapes for
ZodError-flagged bodies.
Custom-fields merge tokens (shipped end-to-end):
- merge-fields.ts gains CUSTOM_MERGE_TOKEN_RE + helpers for the
`{{custom.<fieldName>}}` shape.
- document-templates validator accepts the dynamic shape alongside
the static catalog tokens.
- document-sends.service mergeCustomFieldValues resolver fetches
per-port custom_field_definitions for client/interest/berth contexts
and substitutes stored values keyed by `{{custom.fieldName}}`.
- custom-fields-manager amber banner updated to reflect that merge
tokens now expand (search index + entity-diff remain documented
design limitations).
/api/v1/files cross-entity filtering:
- Validator + listFiles + uploadFile accept companyId AND yachtId
alongside clientId. file-upload-zone propagates both.
- New CompanyFilesTab component mirrors ClientFilesTab; restored as a
visible Documents tab in company-tabs.tsx (was a hidden stub).
Inline TODOs:
- Reviewed remaining two TODOs (per-user reminder schedule, import
worker handlers). Both are placeholders for future feature surfaces,
not bugs — per-port digest works for every customer; nothing
currently enqueues import jobs (verified). Annotated in BACKLOG.
BACKLOG.md updated to reflect what landed and what's still pending
(Documenso-related items still bundled with the back-burnered phases).
Tests: 1185/1185 vitest, tsc clean.
2026-05-08 02:20:27 +02:00
|
|
|
const unknown = tokens?.filter((t) => !isAcceptableMergeToken(t)) ?? [];
|
2026-04-26 13:48:06 +02:00
|
|
|
return { message: `Unknown merge tokens: ${unknown.join(', ')}` };
|
|
|
|
|
},
|
|
|
|
|
);
|
Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
|
2026-04-28 02:12:05 +02:00
|
|
|
export const templateFormats = ['html', 'pdf_form', 'pdf_overlay', 'documenso_render'] as const;
|
|
|
|
|
|
|
|
|
|
const createTemplateBaseSchema = z.object({
|
Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
name: z.string().min(1).max(200),
|
|
|
|
|
description: z.string().max(500).optional(),
|
|
|
|
|
templateType: z.enum([
|
2026-04-26 13:48:06 +02:00
|
|
|
'eoi',
|
Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
'welcome_letter',
|
|
|
|
|
'handover_checklist',
|
|
|
|
|
'acknowledgment',
|
|
|
|
|
'correspondence',
|
|
|
|
|
'custom',
|
|
|
|
|
]),
|
2026-04-28 02:12:05 +02:00
|
|
|
templateFormat: z.enum(templateFormats).default('html'),
|
|
|
|
|
bodyHtml: z.string().min(1).optional(),
|
2026-04-26 13:48:06 +02:00
|
|
|
mergeFields: mergeFieldsSchema,
|
Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
isActive: z.boolean().default(true),
|
|
|
|
|
});
|
|
|
|
|
|
2026-04-28 02:12:05 +02:00
|
|
|
export const createTemplateSchema = createTemplateBaseSchema.refine(
|
|
|
|
|
(data) => data.templateFormat !== 'html' || (data.bodyHtml && data.bodyHtml.length > 0),
|
|
|
|
|
{ path: ['bodyHtml'], message: 'bodyHtml is required when templateFormat is html' },
|
|
|
|
|
);
|
|
|
|
|
|
|
|
|
|
export const updateTemplateSchema = createTemplateBaseSchema.partial();
|
Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
|
|
|
|
|
export const listTemplatesSchema = baseListQuerySchema.extend({
|
|
|
|
|
templateType: z.string().optional(),
|
|
|
|
|
isActive: z
|
|
|
|
|
.enum(['true', 'false'])
|
|
|
|
|
.transform((v) => v === 'true')
|
|
|
|
|
.optional(),
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export const generateSchema = z.object({
|
|
|
|
|
clientId: z.string().optional(),
|
|
|
|
|
interestId: z.string().optional(),
|
|
|
|
|
berthId: z.string().optional(),
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export const generateAndSendSchema = generateSchema.extend({
|
|
|
|
|
recipientEmail: z.string().email(),
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export const generateAndSignSchema = generateSchema.extend({
|
2026-04-24 18:43:41 +02:00
|
|
|
pathway: z.enum(['inapp', 'documenso-template']).default('inapp'),
|
Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
signers: z
|
|
|
|
|
.array(
|
|
|
|
|
z.object({
|
|
|
|
|
name: z.string().min(1),
|
|
|
|
|
email: z.string().email(),
|
|
|
|
|
role: z.string().min(1),
|
|
|
|
|
signingOrder: z.number().int().min(1),
|
|
|
|
|
}),
|
|
|
|
|
)
|
2026-04-24 18:43:41 +02:00
|
|
|
.optional()
|
|
|
|
|
.default([]),
|
Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export type CreateTemplateInput = z.infer<typeof createTemplateSchema>;
|
|
|
|
|
export type UpdateTemplateInput = z.infer<typeof updateTemplateSchema>;
|
|
|
|
|
export type ListTemplatesInput = z.infer<typeof listTemplatesSchema>;
|
|
|
|
|
export type GenerateInput = z.infer<typeof generateSchema>;
|
|
|
|
|
export type GenerateAndSendInput = z.infer<typeof generateAndSendSchema>;
|
|
|
|
|
export type GenerateAndSignInput = z.infer<typeof generateAndSignSchema>;
|
|
|
|
|
|
|
|
|
|
// ─── TipTap-based Admin Template Schemas ─────────────────────────────────────
|
2026-05-04 22:57:01 +02:00
|
|
|
// Used by /api/v1/admin/templates - the TipTap JSON document store.
|
Initial commit: Port Nimara CRM (Layers 0-4)
Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 11:52:51 +01:00
|
|
|
|
|
|
|
|
export const tiptapDocumentTypes = [
|
|
|
|
|
'eoi',
|
|
|
|
|
'contract',
|
|
|
|
|
'nda',
|
|
|
|
|
'reservation_agreement',
|
|
|
|
|
'letter',
|
|
|
|
|
'other',
|
|
|
|
|
] as const;
|
|
|
|
|
|
|
|
|
|
export const createAdminTemplateSchema = z.object({
|
|
|
|
|
name: z.string().min(1).max(200),
|
|
|
|
|
type: z.enum(tiptapDocumentTypes),
|
|
|
|
|
content: z.record(z.unknown()), // TipTap JSON document
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export const updateAdminTemplateSchema = z.object({
|
|
|
|
|
name: z.string().min(1).max(200).optional(),
|
|
|
|
|
content: z.record(z.unknown()).optional(),
|
|
|
|
|
isActive: z.boolean().optional(),
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export const previewAdminTemplateSchema = z.object({
|
|
|
|
|
content: z.record(z.unknown()),
|
|
|
|
|
sampleData: z.record(z.string()).optional(),
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export const rollbackAdminTemplateSchema = z.object({
|
|
|
|
|
version: z.number().int().min(1),
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export const listAdminTemplatesSchema = baseListQuerySchema.extend({
|
|
|
|
|
type: z.enum(tiptapDocumentTypes).optional(),
|
|
|
|
|
isActive: z
|
|
|
|
|
.enum(['true', 'false'])
|
|
|
|
|
.transform((v) => v === 'true')
|
|
|
|
|
.optional(),
|
|
|
|
|
});
|
|
|
|
|
|
|
|
|
|
export type CreateAdminTemplateInput = z.infer<typeof createAdminTemplateSchema>;
|
|
|
|
|
export type UpdateAdminTemplateInput = z.infer<typeof updateAdminTemplateSchema>;
|
|
|
|
|
export type PreviewAdminTemplateInput = z.infer<typeof previewAdminTemplateSchema>;
|
|
|
|
|
export type RollbackAdminTemplateInput = z.infer<typeof rollbackAdminTemplateSchema>;
|
|
|
|
|
export type ListAdminTemplatesInput = z.infer<typeof listAdminTemplatesSchema>;
|