a3305a94f3
Adds a full GDPR Article 15 (right of access) workflow. Staff trigger an export from the client detail; a BullMQ worker assembles every row keyed to that client (profile, contacts, addresses, notes, tags, yachts, company memberships, interests, reservations, invoices, documents, last 500 audit events) into JSON + a self-contained HTML report, ZIPs them, uploads to MinIO, and optionally emails the client a 7-day signed download link. - New table gdpr_exports tracks lifecycle (pending → building → ready → sent / failed) with a 30-day cleanup target - Bundle builder (gdpr-bundle-builder.ts) — pure read-side, tenant- scoped, with HTML escaping to block injection from rogue field values - Worker hook in export queue dispatches on job name 'gdpr-export' - New audit actions: 'request_gdpr_export', 'send_gdpr_export' - API: POST/GET /api/v1/clients/:id/gdpr-export (admin-gated, exports rate-limit, Article-15 audit on POST); GET /:exportId returns a fresh signed URL - UI: <GdprExportButton> dialog on client detail header — admin-only, shows recent exports, supports email-to-client + override recipient, polls every 5s while open - Validation: refuses email-to-client when no primary email + no override (rather than silently dropping the send) Tests: 778/778 vitest (was 771) — +7 covering builder happy path, HTML escaping, tenant isolation, empty client, request-flow validation, and audit / queue interaction. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
37 lines
1.1 KiB
TypeScript
37 lines
1.1 KiB
TypeScript
import { Worker, type Job } from 'bullmq';
|
|
|
|
import type { ConnectionOptions } from 'bullmq';
|
|
import { logger } from '@/lib/logger';
|
|
import { QUEUE_CONFIGS } from '@/lib/queue';
|
|
|
|
export const exportWorker = new Worker(
|
|
'export',
|
|
async (job: Job) => {
|
|
logger.info({ jobId: job.id, jobName: job.name }, 'Processing export job');
|
|
switch (job.name) {
|
|
case 'gdpr-export': {
|
|
const data = job.data as {
|
|
exportId: string;
|
|
portId: string;
|
|
clientId: string;
|
|
emailToClient: boolean;
|
|
emailOverride: string | null;
|
|
};
|
|
const { processGdprExportJob } = await import('@/lib/services/gdpr-export.service');
|
|
await processGdprExportJob(data);
|
|
break;
|
|
}
|
|
default:
|
|
logger.warn({ jobName: job.name }, 'Unknown export job');
|
|
}
|
|
},
|
|
{
|
|
connection: { url: process.env.REDIS_URL! } as ConnectionOptions,
|
|
concurrency: QUEUE_CONFIGS.export.concurrency,
|
|
},
|
|
);
|
|
|
|
exportWorker.on('failed', (job, err) => {
|
|
logger.error({ jobId: job?.id, jobName: job?.name, err }, 'Export job failed');
|
|
});
|