Files
pn-new-crm/src/lib/queue/workers/documents.ts
Matt Ciaccio da7ede71d6 fix(audit): H2 audit-view dedupe, M3/M4 honest labels, M10 documenso DLQ alert
H2: audit-page view audit row was firing on every filter change. Now
deduped per-user via Redis SET NX with a 60s TTL, so heavy filter-
tweaking writes one self-reference per minute instead of dozens.

R2-M3: /admin landing card for Onboarding said "Initial-setup wizard
for fresh ports" — the page is a static checklist that even calls
itself "what this page will become". Relabelled to "Onboarding
checklist · Setup checklist for fresh ports (read-only references)."

R2-M4: same for Backup & Restore — landing card promised "on-demand
exports" while the page renders only docs. Relabelled to "Backup
posture + retention policy (read-only)."

R2-M10: documenso-void worker had no DLQ alert hook — a persistent
401/403 from Documenso retried until BullMQ exhausted attempts and
the failure disappeared into audit. Now on final-attempt failure
we notify all super-admins via createNotification with a deduplicating
key per documentId, surfacing the 'void manually in Documenso if
still active' actionable.

1175/1175 vitest passing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-06 22:31:52 +02:00

98 lines
3.8 KiB
TypeScript

import { Worker, type Job } from 'bullmq';
import { env } from '@/lib/env';
import type { ConnectionOptions } from 'bullmq';
import { logger } from '@/lib/logger';
import { attachWorkerAudit } from '@/lib/queue/audit-helpers';
import { QUEUE_CONFIGS } from '@/lib/queue';
export const documentsWorker = new Worker(
'documents',
async (job: Job) => {
logger.info({ jobId: job.id, jobName: job.name }, 'Processing documents job');
switch (job.name) {
case 'signature-poll': {
const { processDocumensoPoll } = await import('@/jobs/processors/documenso-poll');
await processDocumensoPoll();
break;
}
case 'documenso-void': {
// Async cleanup of a Documenso envelope. Producers: smart-archive
// (when the operator opts to void in-flight envelopes during
// client archive). BullMQ retries with exponential backoff per
// QUEUE_CONFIGS; permanently-failed jobs land in the DLQ via
// the failed-job listener.
const { documentId, documensoId, portId } = job.data as {
documentId: string;
documensoId: string;
portId: string;
};
if (!documensoId) {
logger.warn({ documentId }, 'documenso-void: no documensoId, skipping');
return;
}
const { voidDocument } = await import('@/lib/services/documenso-client');
await voidDocument(documensoId, portId);
logger.info({ documentId, documensoId, portId }, 'Documenso envelope voided');
break;
}
default:
logger.warn({ jobName: job.name }, 'Unknown documents job');
}
},
{
connection: { url: env.REDIS_URL } as ConnectionOptions,
concurrency: QUEUE_CONFIGS.documents.concurrency,
},
);
documentsWorker.on('failed', async (job, err) => {
logger.error({ jobId: job?.id, jobName: job?.name, err }, 'Documents job failed');
// Final-attempt failure on documenso-void → notify all super admins
// so they can void the envelope manually in Documenso. Without this
// alert hook, a persistent 401/403 from Documenso retries until
// BullMQ exhausts attempts and the failure disappears into the
// audit log unnoticed.
if (job?.name === 'documenso-void' && job.attemptsMade >= (job.opts.attempts ?? 1)) {
try {
const { documentId, documensoId, portId } = (job.data ?? {}) as {
documentId?: string;
documensoId?: string;
portId?: string;
};
if (!documentId || !documensoId) return;
const { db } = await import('@/lib/db');
const { userProfiles } = await import('@/lib/db/schema/users');
const { createNotification } = await import('@/lib/services/notifications.service');
const { eq, and } = await import('drizzle-orm');
const superAdmins = await db
.select({ userId: userProfiles.userId })
.from(userProfiles)
.where(and(eq(userProfiles.isSuperAdmin, true), eq(userProfiles.isActive, true)));
// createNotification requires a portId; if the job didn't carry
// one we can't tag the notification — bail out cleanly.
if (!portId) return;
for (const admin of superAdmins) {
void createNotification({
portId,
userId: admin.userId,
type: 'system_alert',
title: 'Documenso void failed',
description: `Document ${documentId.slice(0, 8)}… could not be voided in Documenso after ${job.attemptsMade} attempts. Void manually in Documenso if still active.`,
link: `/admin/documents`,
entityType: 'document',
entityId: documentId,
dedupeKey: `doc:void_failed:${documentId}`,
cooldownMs: 0,
});
}
} catch (notifyErr) {
logger.error({ notifyErr }, 'Failed to alert super-admins of documenso-void DLQ');
}
}
});
attachWorkerAudit(documentsWorker, 'documents');