diff --git a/services/api/src/repositories/teamWorkspaces/contract.ts b/services/api/src/repositories/teamWorkspaces/contract.ts new file mode 100644 index 0000000..74a3e03 --- /dev/null +++ b/services/api/src/repositories/teamWorkspaces/contract.ts @@ -0,0 +1,447 @@ +import type { TeamWorkspaceAdminMetrics } from '@sg/shared/schemas/adminStats'; +import type { UserProfile } from '@sg/shared/schemas/auth'; +import type { BillingStatus, SubscriptionTier } from '@sg/shared/billing'; +import type { + TeamWorkspaceBilling, + TeamWorkspaceBillingRecoveryActionCode, + TeamWorkspaceBillingEventSeverity, + TeamWorkspaceBillingEventType, + TeamWorkspaceRecoveryOutreachAudience, + TeamWorkspaceRecoveryOutreachChannel, + TeamWorkspaceRecoveryOutreachHandoffChannel, + TeamWorkspaceRecoveryPlaybookRun, + TeamWorkspaceRecoveryPlaybookStepName, + TeamWorkspaceRecoveryPlaybookSteps, + TeamWorkspaceRecoveryOutreachStatus, + TeamWorkspace, + TeamWorkspaceContextResponse, + TeamWorkspaceInvite, + TeamWorkspaceRole, +} from '@sg/shared/schemas/teamWorkspace'; + +export type ManageRole = Exclude; + +export type WorkspaceMembershipRecord = { + workspaceId: string; + role: TeamWorkspaceRole; + joinedAt: string; +}; + +export type WorkspaceRecord = { + id: string; + name: string; + ownerUserId: string; + createdAt: string; +}; + +export type WorkspaceInviteRecord = TeamWorkspaceInvite; +export type WorkspaceInviteRevocationReason = + | 'billing_inactive' + | 'seat_limit_reduced' + | 'accepted_elsewhere'; + +export type WorkspaceSharedSavedViewRecord = { + workspaceId: string; + savedViewId: string; + sharedByUserId: string; + sharedAt: string; +}; + +export type WorkspaceSharedCaseRecord = { + workspaceId: string; + caseId: string; + sharedByUserId: string; + sharedAt: string; +}; + +export type PgWorkspaceMembershipRow = { + workspace_id: string; + role: TeamWorkspaceRole; + joined_at: Date | string; + name: string; + created_at: Date | string; + owner_user_id: string; +}; + +export type PgWorkspaceInviteRow = { + id: string; + workspace_id: string; + workspace_name: string; + email: string; + role: ManageRole; + status: 'pending' | 'accepted' | 'revoked'; + created_at: Date | string; + accepted_at: Date | string | null; + revoked_reason: WorkspaceInviteRevocationReason | null; + revoked_at: Date | string | null; +}; + +export type PgWorkspaceMemberRow = { + user_id: string; + email: string; + display_name: string | null; + role: TeamWorkspaceRole; + joined_at: Date | string; +}; + +export type PgWorkspaceSavedViewRow = { + id: string; + name: string; + filters: string | Record; + query_string: string; + case_count_snapshot: string | number; + created_at: Date | string; + updated_at: Date | string; + source_saved_view_id: string; + shared_by_user_id: string; + shared_by_name: string | null; + shared_at: Date | string; +}; + +export type PgWorkspaceCaseRow = { + id: string; + slug: string; + company_name: string; + industry_key: string; + country_code: string | null; + closed_year: number | null; + summary: string; + business_model_key: string | null; + founded_year: number | null; + total_funding_usd: string | number | null; + primary_failure_reason_key: string | null; + shared_by_user_id: string; + shared_by_name: string | null; + shared_at: Date | string; +}; + +export type WorkspaceBillingOwner = Pick< + UserProfile, + | 'id' + | 'email' + | 'displayName' + | 'subscription' + | 'billingStatus' + | 'currentPeriodEnd' + | 'cancelAtPeriodEnd' +>; + +export type WorkspaceAccessContext = { + workspaceId: string; + workspaceName: string; + role: TeamWorkspaceRole; + owner: WorkspaceBillingOwner; + seatsUsed: number; + pendingInviteCount: number; +}; + +export type WorkspaceCompensationSummary = { + revokedInviteCount: number; +}; + +export type WorkspaceBillingSnapshot = Pick< + TeamWorkspaceBilling, + 'seatLimit' | 'billingStatus' | 'cancelAtPeriodEnd' | 'reservedSeats' | 'fallbackMemberCount' +>; + +export type WorkspaceBillingEventDescriptor = { + type: TeamWorkspaceBillingEventType; + severity: TeamWorkspaceBillingEventSeverity; + title: string; + detail: string; + count: number | null; +}; + +export type WorkspaceRecoveryOutreachDescriptor = { + audience: TeamWorkspaceRecoveryOutreachAudience; + channel: TeamWorkspaceRecoveryOutreachChannel; + title: string; + detail: string; + actionCode: TeamWorkspaceBillingRecoveryActionCode | null; +}; + +export type WorkspaceMemberRecoveryNotificationDescriptor = { + title: string; + detail: string; +}; + +export type AdminBillingEvent = TeamWorkspaceAdminMetrics['recentBillingEvents'][number]; +export type AdminRecoveryAction = TeamWorkspaceAdminMetrics['recoveryActions'][number]; +export type AdminActionableWorkspace = TeamWorkspaceAdminMetrics['actionableWorkspaces'][number]; +export type AdminRecoveryOutreach = TeamWorkspaceAdminMetrics['recoveryOutreach']['recent'][number]; +export type AdminRecoveryPlaybookRun = + TeamWorkspaceAdminMetrics['recoveryPlaybook']['recent'][number]; +export type WorkspaceReconcileResult = { + revokedInviteCount: number; + restoredInviteCount: number; +}; + +export type PgWorkspaceBillingEventRow = { + id: string; + workspace_id: string; + workspace_name: string; + event_type: TeamWorkspaceBillingEventType; + severity: TeamWorkspaceBillingEventSeverity; + title: string; + detail: string; + event_count: string | number | null; + created_at: Date | string; +}; + +export type PgWorkspaceRecoveryOutreachRow = { + id: string; + workspace_id: string; + workspace_name: string; + audience: TeamWorkspaceRecoveryOutreachAudience; + channel: TeamWorkspaceRecoveryOutreachChannel; + status: TeamWorkspaceRecoveryOutreachStatus; + title: string; + detail: string; + action_code: TeamWorkspaceBillingRecoveryActionCode | null; + attempt_count: number; + created_at: Date | string; + last_attempt_at: Date | string; + next_attempt_at: Date | string | null; + email_attempt_count: number; + last_email_attempt_at: Date | string | null; + next_email_attempt_at: Date | string | null; + last_email_delivered_at: Date | string | null; + last_email_message_id: string | null; + last_email_error: string | null; + export_count: number; + last_exported_at: Date | string | null; + crm_sync_count: number; + last_crm_sync_attempt_at: Date | string | null; + next_crm_sync_attempt_at: Date | string | null; + last_crm_synced_at: Date | string | null; + crm_external_record_id: string | null; + last_crm_sync_status_code: number | null; + last_crm_sync_error: string | null; + webhook_attempt_count: number; + last_webhook_attempt_at: Date | string | null; + next_webhook_attempt_at: Date | string | null; + webhook_exhausted_at: Date | string | null; + webhook_delivery_count: number; + last_webhook_delivered_at: Date | string | null; + last_webhook_status_code: number | null; + last_webhook_error: string | null; + slack_alert_count: number; + last_slack_alert_attempt_at: Date | string | null; + last_slack_alerted_at: Date | string | null; + last_slack_alert_status_code: number | null; + last_slack_alert_error: string | null; + handoff_channel: TeamWorkspaceRecoveryOutreachHandoffChannel | null; + handoff_note: string | null; + handoff_at: Date | string | null; + resolved_at: Date | string | null; +}; + +export type PgWorkspaceMemberRecoveryNotificationRow = { + id: string; + workspace_id: string; + user_id: string; + email: string; + display_name: string | null; + status: 'pending' | 'resolved'; + title: string; + detail: string; + email_attempt_count: number; + created_at: Date | string; + last_email_attempt_at: Date | string | null; + next_email_attempt_at: Date | string | null; + last_email_delivered_at: Date | string | null; + last_email_message_id: string | null; + last_email_error: string | null; + resolved_at: Date | string | null; +}; + +export type PgWorkspaceRecoveryPlaybookRunRow = { + id: string; + trigger_type: string; + retry_interval_hours: number; + force_run: boolean; + requested_steps: string[] | null; + rerun_of_run_id: string | null; + ok: boolean; + summary: string; + steps: unknown; + created_at: Date | string; +}; + +export type PendingMemberRecoveryNotificationTarget = { + notificationId: string; + workspaceId: string; + workspaceName: string; + userId: string; + email: string; + displayName: string | null; + ownerDisplayName: string | null; + ownerEmail: string; + subscription: SubscriptionTier; + billingStatus: BillingStatus; + title: string; + detail: string; + emailAttemptCount: number; + lastEmailAttemptAt: string | null; + nextEmailAttemptAt: string | null; + lastEmailDeliveredAt: string | null; + lastEmailMessageId: string | null; + lastEmailError: string | null; +}; + +export type PgWorkspaceBillingStateRow = { + seat_limit: number; + billing_status: BillingStatus; + cancel_at_period_end: boolean; + reserved_seats: number; + fallback_member_count: number; +}; + +export type PgWorkspaceAdminRow = { + workspace_id: string; + workspace_name: string; + owner_user_id: string; + owner_email: string; + owner_display_name: string | null; + subscription: SubscriptionTier; + billing_status: BillingStatus; + cancel_at_period_end: boolean; + member_count: string; + pending_invite_count: string; + revoked_invite_count: string; +}; + +export const COMPENSATION_REASONS: ReadonlySet = new Set([ + 'billing_inactive', + 'seat_limit_reduced', +]); +export const DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS = 24; +export const ALL_RECOVERY_PLAYBOOK_STEP_NAMES: readonly TeamWorkspaceRecoveryPlaybookStepName[] = [ + 'outreach', + 'ownerEmail', + 'memberEmail', + 'crmSync', + 'webhook', + 'slack', +]; + +export interface TeamWorkspacesRepository { + resolveEffectiveUserProfile(user: UserProfile): Promise; + getContextForUser(user: UserProfile): Promise; + getAdminMetrics(): Promise; + listRecentRecoveryPlaybookRuns(limit: number): Promise; + getRecoveryPlaybookRunById(runId: string): Promise; + recordRecoveryPlaybookRun(input: { + triggerType: string; + retryIntervalHours: number; + force: boolean; + requestedSteps: TeamWorkspaceRecoveryPlaybookStepName[]; + rerunOfRunId?: string | null; + ok: boolean; + summary: string; + steps: TeamWorkspaceRecoveryPlaybookSteps; + createdAt?: string; + }): Promise; + handoffAdminRecoveryOutreach(input: { + workspaceId: string; + channel: TeamWorkspaceRecoveryOutreachHandoffChannel; + snoozeHours: number; + note?: string | null; + }): Promise<'workspace_not_found' | 'outreach_not_found' | { ok: true }>; + exportHandedOffAdminRecoveryOutreach(): Promise<{ exportedCount: number }>; + listPendingMemberRecoveryNotifications(): Promise; + recordPendingOwnerRecoveryOutreachEmailDelivery(input: { + workspaceIds: string[]; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + messageIdByWorkspaceId?: Record; + }): Promise<{ deliveredCount: number }>; + recordPendingMemberRecoveryNotificationEmailDelivery(input: { + notificationIds: string[]; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + messageIdByNotificationId?: Record; + }): Promise<{ deliveredCount: number }>; + recordHandedOffAdminRecoveryOutreachCrmSync(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + syncedAt?: string; + retryIntervalHours?: number; + externalRecordIdByWorkspaceId?: Record; + }): Promise<{ syncedCount: number }>; + recordDeadLetteredAdminRecoveryOutreachSlackAlert(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + alertedAt?: string; + }): Promise<{ alertedCount: number }>; + recordHandedOffAdminRecoveryOutreachWebhookDelivery(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + maxAttempts?: number; + }): Promise<{ deliveredCount: number }>; + runRecoveryOutreachAutomation(options?: { retryIntervalHours?: number }): Promise<{ + workspaceCount: number; + ownerOutreachCreated: number; + adminOutreachCreated: number; + retriedOutreachCount: number; + resolvedOutreachCount: number; + }>; + reconcileAllBilling(): Promise<{ + workspaceCount: number; + revokedInviteCount: number; + restoredInviteCount: number; + }>; + reconcileBillingForUser( + userId: string, + ): Promise<{ workspaceIds: string[]; revokedInviteCount: number }>; + createWorkspace( + user: UserProfile, + name: string, + ): Promise; + inviteMember( + actorUserId: string, + email: string, + role: ManageRole, + ): Promise< + | TeamWorkspace + | 'workspace_not_found' + | 'forbidden' + | 'user_already_in_workspace' + | 'seat_limit_reached' + | 'workspace_plan_inactive' + >; + acceptInvite( + user: UserProfile, + inviteId: string, + ): Promise< + TeamWorkspace | 'invite_not_found' | 'already_in_workspace' | 'workspace_plan_inactive' + >; + shareSavedView( + actorUserId: string, + savedViewId: string, + ): Promise< + | { status: 'added' | 'exists'; workspace: TeamWorkspace } + | 'workspace_not_found' + | 'saved_view_not_found' + >; + shareCase( + actorUserId: string, + caseId: string, + ): Promise< + | { status: 'added' | 'exists'; workspace: TeamWorkspace } + | 'workspace_not_found' + | 'case_not_found' + >; +} diff --git a/services/api/src/repositories/teamWorkspaces/helpers.ts b/services/api/src/repositories/teamWorkspaces/helpers.ts new file mode 100644 index 0000000..a47a362 --- /dev/null +++ b/services/api/src/repositories/teamWorkspaces/helpers.ts @@ -0,0 +1,1070 @@ +import { ALL_RECOVERY_PLAYBOOK_STEP_NAMES } from './contract.js'; +import type { + AdminActionableWorkspace, + AdminBillingEvent, + AdminRecoveryAction, + AdminRecoveryOutreach, + AdminRecoveryPlaybookRun, + PgWorkspaceBillingEventRow, + PgWorkspaceCaseRow, + PgWorkspaceInviteRow, + PgWorkspaceMemberRecoveryNotificationRow, + PgWorkspaceMemberRow, + PgWorkspaceRecoveryOutreachRow, + PgWorkspaceRecoveryPlaybookRunRow, + PgWorkspaceSavedViewRow, + WorkspaceAccessContext, + WorkspaceBillingEventDescriptor, + WorkspaceBillingOwner, + WorkspaceBillingSnapshot, + WorkspaceCompensationSummary, + WorkspaceMemberRecoveryNotificationDescriptor, + WorkspaceRecoveryOutreachDescriptor, +} from './contract.js'; +import type { UserProfile, WorkspaceAccess } from '@sg/shared/schemas/auth'; +import { + resolveEntitlements, + resolveTeamWorkspaceSeatLimit, + type BillingStatus, + type SubscriptionTier, +} from '@sg/shared/billing'; +import type { + TeamWorkspaceBilling, + TeamWorkspaceBillingRecoveryAction, + TeamWorkspaceBillingRecoveryActionCode, + TeamWorkspaceBillingEvent, + TeamWorkspaceRecoveryPlaybookStepName, + TeamWorkspaceRecoveryPlaybookSteps, + TeamWorkspaceBillingWarning, + TeamWorkspaceInvite, + TeamWorkspaceMemberRecoveryNotification, + TeamWorkspaceMember, + TeamWorkspaceRole, + TeamWorkspaceSharedCase, + TeamWorkspaceSharedSavedView, +} from '@sg/shared/schemas/teamWorkspace'; +import type { BillingFunnelUserTouch } from '../billingFunnelRepository.js'; + +export function toIso(value: Date | string): string { + return value instanceof Date ? value.toISOString() : new Date(value).toISOString(); +} + +export function numberOrNull(value: string | number | null): number | null { + if (value == null) return null; + if (typeof value === 'number') return Number.isFinite(value) ? value : null; + const parsed = Number(value); + return Number.isFinite(parsed) ? parsed : null; +} + +export function rowToInvite(row: PgWorkspaceInviteRow): TeamWorkspaceInvite { + return { + id: row.id, + workspaceId: row.workspace_id, + workspaceName: row.workspace_name, + email: row.email, + role: row.role, + status: row.status, + createdAt: toIso(row.created_at), + acceptedAt: row.accepted_at ? toIso(row.accepted_at) : null, + }; +} + +export function rowToMember(row: PgWorkspaceMemberRow): TeamWorkspaceMember { + return { + userId: row.user_id, + email: row.email, + displayName: row.display_name, + role: row.role, + joinedAt: toIso(row.joined_at), + }; +} + +export function rowToSharedSavedView(row: PgWorkspaceSavedViewRow): TeamWorkspaceSharedSavedView { + return { + id: row.id, + name: row.name, + filters: typeof row.filters === 'string' ? JSON.parse(row.filters) : row.filters, + queryString: row.query_string, + caseCount: + typeof row.case_count_snapshot === 'number' + ? row.case_count_snapshot + : Number(row.case_count_snapshot), + createdAt: toIso(row.created_at), + updatedAt: toIso(row.updated_at), + sourceSavedViewId: row.source_saved_view_id, + sharedByUserId: row.shared_by_user_id, + sharedByName: row.shared_by_name, + sharedAt: toIso(row.shared_at), + }; +} + +export function rowToSharedCase(row: PgWorkspaceCaseRow): TeamWorkspaceSharedCase { + return { + id: row.id, + slug: row.slug, + companyName: row.company_name, + industry: row.industry_key, + country: row.country_code, + closedYear: row.closed_year, + summary: row.summary, + businessModelKey: row.business_model_key, + foundedYear: row.founded_year, + totalFundingUsd: numberOrNull(row.total_funding_usd), + primaryFailureReasonKey: row.primary_failure_reason_key, + sharedByUserId: row.shared_by_user_id, + sharedByName: row.shared_by_name, + sharedAt: toIso(row.shared_at), + }; +} + +export function buildWorkspaceBilling(input: { + owner: WorkspaceBillingOwner; + seatsUsed: number; + pendingInviteCount: number; + compensation?: WorkspaceCompensationSummary; + viewerRole?: TeamWorkspaceRole; + recentBillingEvents?: Array>; +}): TeamWorkspaceBilling { + const seatLimit = resolveTeamWorkspaceSeatLimit({ + subscription: input.owner.subscription, + billingStatus: input.owner.billingStatus, + }); + const reservedSeats = input.seatsUsed + input.pendingInviteCount; + const seatsRemaining = Math.max(0, seatLimit - reservedSeats); + const fallbackMemberCount = seatLimit === 0 ? Math.max(0, input.seatsUsed - 1) : 0; + const revokedInviteCount = input.compensation?.revokedInviteCount ?? 0; + const warningCodes = buildBillingWarnings({ + ownerBillingStatus: input.owner.billingStatus, + cancelAtPeriodEnd: input.owner.cancelAtPeriodEnd, + seatLimit, + reservedSeats, + }); + const recommendedActions = buildRecoveryActions({ + subscription: input.owner.subscription, + billingStatus: input.owner.billingStatus, + warningCodes, + seatLimit, + seatsRemaining, + fallbackMemberCount, + revokedInviteCount, + }); + + const billing = { + ownerUserId: input.owner.id, + ownerDisplayName: input.owner.displayName, + ownerEmail: input.owner.email, + subscription: input.owner.subscription, + billingStatus: input.owner.billingStatus, + currentPeriodEnd: input.owner.currentPeriodEnd, + cancelAtPeriodEnd: input.owner.cancelAtPeriodEnd, + seatLimit, + seatsUsed: input.seatsUsed, + reservedSeats, + seatsRemaining, + fallbackMemberCount, + revokedInviteCount, + canInviteMore: seatLimit > 0 && reservedSeats < seatLimit, + warningCodes, + recommendedActions, + } satisfies Omit; + + return { + ...billing, + recoveryNotices: buildRecoveryNotices({ + viewerRole: input.viewerRole ?? 'owner', + ownerDisplayName: input.owner.displayName, + ownerEmail: input.owner.email, + billing, + recentBillingEvents: input.recentBillingEvents ?? [], + }), + }; +} + +export function billingSnapshotFromBilling( + billing: TeamWorkspaceBilling, +): WorkspaceBillingSnapshot { + return { + seatLimit: billing.seatLimit, + billingStatus: billing.billingStatus, + cancelAtPeriodEnd: billing.cancelAtPeriodEnd, + reservedSeats: billing.reservedSeats, + fallbackMemberCount: billing.fallbackMemberCount, + }; +} + +export function buildBillingEventDescriptors(input: { + previous: WorkspaceBillingSnapshot | null; + next: WorkspaceBillingSnapshot; + revokedInviteCount: number; + restoredInviteCount: number; +}): WorkspaceBillingEventDescriptor[] { + const events: WorkspaceBillingEventDescriptor[] = []; + const prev = input.previous; + const next = input.next; + + if (!prev) { + if (input.revokedInviteCount > 0) { + events.push({ + type: 'invites_auto_revoked', + severity: 'warning', + title: '工作区邀请已自动撤销', + detail: `账单或席位收紧后，系统自动撤销了 ${input.revokedInviteCount} 条待接受邀请。`, + count: input.revokedInviteCount, + }); + } + if (input.restoredInviteCount > 0) { + events.push({ + type: 'invites_auto_restored', + severity: 'success', + title: '工作区邀请已自动恢复', + detail: `账单或席位恢复后，系统自动恢复了 ${input.restoredInviteCount} 条待接受邀请。`, + count: input.restoredInviteCount, + }); + } + return events; + } + + if (prev.seatLimit > 0 && next.seatLimit === 0) { + events.push({ + type: 'workspace_plan_inactive', + severity: 'critical', + title: 'Team Workspace 已进入降级状态', + detail: '账单所有者当前不再具备有效 Team entitlement，团队权限已暂停继承。', + count: null, + }); + } else if (prev.seatLimit === 0 && next.seatLimit > 0) { + events.push({ + type: 'workspace_plan_restored', + severity: 'success', + title: 'Team Workspace 已恢复可用', + detail: '账单所有者重新恢复了有效 Team entitlement，团队权限可以重新继承。', + count: null, + }); + } else if (next.seatLimit > 0 && prev.seatLimit > next.seatLimit) { + events.push({ + type: 'seat_capacity_reduced', + severity: 'warning', + title: '团队席位上限已收紧', + detail: `工作区席位上限从 ${prev.seatLimit} 收紧到 ${next.seatLimit}。`, + count: next.seatLimit, + }); + } else if (next.seatLimit > prev.seatLimit && prev.seatLimit > 0) { + events.push({ + type: 'seat_capacity_restored', + severity: 'success', + title: '团队席位容量已恢复', + detail: `工作区席位上限从 ${prev.seatLimit} 恢复到 ${next.seatLimit}。`, + count: next.seatLimit, + }); + } + + if (input.revokedInviteCount > 0) { + events.push({ + type: 'invites_auto_revoked', + severity: 'warning', + title: '工作区邀请已自动撤销', + detail: `账单或席位收紧后，系统自动撤销了 ${input.revokedInviteCount} 条待接受邀请。`, + count: input.revokedInviteCount, + }); + } + + if (input.restoredInviteCount > 0) { + events.push({ + type: 'invites_auto_restored', + severity: 'success', + title: '工作区邀请已自动恢复', + detail: `账单或席位恢复后，系统自动恢复了 ${input.restoredInviteCount} 条待接受邀请。`, + count: input.restoredInviteCount, + }); + } + + if (prev.fallbackMemberCount === 0 && next.fallbackMemberCount > 0) { + events.push({ + type: 'members_fallback_started', + severity: 'warning', + title: '成员权限已回退到个人套餐', + detail: `${next.fallbackMemberCount} 名成员当前不再继承 Team 权限，已自动回退到各自个人套餐。`, + count: next.fallbackMemberCount, + }); + } else if (prev.fallbackMemberCount > 0 && next.fallbackMemberCount === 0) { + events.push({ + type: 'members_fallback_cleared', + severity: 'success', + title: '成员 Team 权限已恢复', + detail: '此前回退到个人套餐的成员，现在已经重新继承 Team 权限。', + count: prev.fallbackMemberCount, + }); + } + + return events; +} + +export function rowToBillingEvent(row: PgWorkspaceBillingEventRow): AdminBillingEvent { + return { + id: row.id, + workspaceId: row.workspace_id, + workspaceName: row.workspace_name, + type: row.event_type, + severity: row.severity, + title: row.title, + detail: row.detail, + count: numberOrNull(row.event_count), + createdAt: toIso(row.created_at), + }; +} + +export function rowToRecoveryOutreach(row: PgWorkspaceRecoveryOutreachRow): AdminRecoveryOutreach { + return { + id: row.id, + workspaceId: row.workspace_id, + workspaceName: row.workspace_name, + audience: row.audience, + channel: row.channel, + status: row.status, + title: row.title, + detail: row.detail, + actionCode: row.action_code, + attemptCount: row.attempt_count, + createdAt: toIso(row.created_at), + lastAttemptAt: toIso(row.last_attempt_at), + nextAttemptAt: row.next_attempt_at ? toIso(row.next_attempt_at) : null, + emailAttemptCount: row.email_attempt_count, + lastEmailAttemptAt: row.last_email_attempt_at ? toIso(row.last_email_attempt_at) : null, + nextEmailAttemptAt: row.next_email_attempt_at ? toIso(row.next_email_attempt_at) : null, + lastEmailDeliveredAt: row.last_email_delivered_at ? toIso(row.last_email_delivered_at) : null, + lastEmailMessageId: row.last_email_message_id, + lastEmailError: row.last_email_error, + exportCount: row.export_count, + lastExportedAt: row.last_exported_at ? toIso(row.last_exported_at) : null, + crmSyncCount: row.crm_sync_count, + lastCrmSyncAttemptAt: row.last_crm_sync_attempt_at ? toIso(row.last_crm_sync_attempt_at) : null, + nextCrmSyncAttemptAt: row.next_crm_sync_attempt_at ? toIso(row.next_crm_sync_attempt_at) : null, + lastCrmSyncedAt: row.last_crm_synced_at ? toIso(row.last_crm_synced_at) : null, + crmExternalRecordId: row.crm_external_record_id, + lastCrmSyncStatusCode: row.last_crm_sync_status_code, + lastCrmSyncError: row.last_crm_sync_error, + webhookAttemptCount: row.webhook_attempt_count, + lastWebhookAttemptAt: row.last_webhook_attempt_at ? toIso(row.last_webhook_attempt_at) : null, + nextWebhookAttemptAt: row.next_webhook_attempt_at ? toIso(row.next_webhook_attempt_at) : null, + webhookExhaustedAt: row.webhook_exhausted_at ? toIso(row.webhook_exhausted_at) : null, + webhookDeliveryCount: row.webhook_delivery_count, + lastWebhookDeliveredAt: row.last_webhook_delivered_at + ? toIso(row.last_webhook_delivered_at) + : null, + lastWebhookStatusCode: row.last_webhook_status_code, + lastWebhookError: row.last_webhook_error, + slackAlertCount: row.slack_alert_count, + lastSlackAlertAttemptAt: row.last_slack_alert_attempt_at + ? toIso(row.last_slack_alert_attempt_at) + : null, + lastSlackAlertedAt: row.last_slack_alerted_at ? toIso(row.last_slack_alerted_at) : null, + lastSlackAlertStatusCode: row.last_slack_alert_status_code, + lastSlackAlertError: row.last_slack_alert_error, + handoffChannel: row.handoff_channel, + handoffNote: row.handoff_note, + handoffAt: row.handoff_at ? toIso(row.handoff_at) : null, + resolvedAt: row.resolved_at ? toIso(row.resolved_at) : null, + }; +} + +export function rowToRecoveryPlaybookRun( + row: PgWorkspaceRecoveryPlaybookRunRow, +): AdminRecoveryPlaybookRun { + const asRecord = (input: unknown): Record => + input && typeof input === 'object' ? (input as Record) : {}; + const asStringOrNull = (input: unknown): string | null => + typeof input === 'string' ? input : null; + const asNumberOrZero = (input: unknown): number => + typeof input === 'number' && Number.isFinite(input) ? input : 0; + const asNumberOrNull = (input: unknown): number | null => + typeof input === 'number' && Number.isFinite(input) ? input : null; + const normalizeDeliveryStatus = ( + input: unknown, + ): TeamWorkspaceRecoveryPlaybookSteps['ownerEmail']['status'] => + input === 'completed' || input === 'skipped' || input === 'disabled' || input === 'failed' + ? input + : 'skipped'; + const normalizeOutreachStatus = ( + input: unknown, + ): TeamWorkspaceRecoveryPlaybookSteps['outreach']['status'] => + input === 'completed' || input === 'skipped' || input === 'failed' ? input : 'completed'; + const rawSteps = + typeof row.steps === 'string' ? (JSON.parse(row.steps) as Record) : row.steps; + const stepsRecord = asRecord(rawSteps); + const normalizeDeliveryStep = (input: unknown) => { + const step = asRecord(input); + return { + status: normalizeDeliveryStatus(step.status), + attemptedCount: asNumberOrZero(step.attemptedCount), + successCount: asNumberOrZero(step.successCount), + failedCount: asNumberOrZero(step.failedCount), + skippedReason: asStringOrNull(step.skippedReason), + error: asStringOrNull(step.error), + detail: asStringOrNull(step.detail), + statusCode: asNumberOrNull(step.statusCode), + }; + }; + const outreachStep = asRecord(stepsRecord.outreach); + const normalizedSteps: TeamWorkspaceRecoveryPlaybookSteps = { + outreach: { + status: normalizeOutreachStatus(outreachStep.status), + workspaceCount: asNumberOrZero(outreachStep.workspaceCount), + ownerOutreachCreated: asNumberOrZero(outreachStep.ownerOutreachCreated), + adminOutreachCreated: asNumberOrZero(outreachStep.adminOutreachCreated), + retriedOutreachCount: asNumberOrZero(outreachStep.retriedOutreachCount), + resolvedOutreachCount: asNumberOrZero(outreachStep.resolvedOutreachCount), + skippedReason: asStringOrNull(outreachStep.skippedReason), + detail: asStringOrNull(outreachStep.detail), + }, + ownerEmail: normalizeDeliveryStep(stepsRecord.ownerEmail), + memberEmail: normalizeDeliveryStep(stepsRecord.memberEmail), + crmSync: normalizeDeliveryStep(stepsRecord.crmSync), + webhook: normalizeDeliveryStep(stepsRecord.webhook), + slack: normalizeDeliveryStep(stepsRecord.slack), + }; + const requestedSteps = Array.isArray(row.requested_steps) + ? row.requested_steps.filter((step): step is TeamWorkspaceRecoveryPlaybookStepName => + ALL_RECOVERY_PLAYBOOK_STEP_NAMES.includes(step as TeamWorkspaceRecoveryPlaybookStepName), + ) + : ALL_RECOVERY_PLAYBOOK_STEP_NAMES.slice(); + return { + id: row.id, + triggerType: row.trigger_type, + retryIntervalHours: row.retry_interval_hours, + force: row.force_run, + requestedSteps, + rerunOfRunId: row.rerun_of_run_id, + ok: row.ok, + summary: row.summary, + steps: normalizedSteps, + createdAt: toIso(row.created_at), + }; +} + +export function rowToMemberRecoveryNotification( + row: PgWorkspaceMemberRecoveryNotificationRow, +): TeamWorkspaceMemberRecoveryNotification { + return { + id: row.id, + userId: row.user_id, + email: row.email, + displayName: row.display_name, + status: row.status, + title: row.title, + detail: row.detail, + emailAttemptCount: row.email_attempt_count, + createdAt: toIso(row.created_at), + lastEmailAttemptAt: row.last_email_attempt_at ? toIso(row.last_email_attempt_at) : null, + nextEmailAttemptAt: row.next_email_attempt_at ? toIso(row.next_email_attempt_at) : null, + lastEmailDeliveredAt: row.last_email_delivered_at ? toIso(row.last_email_delivered_at) : null, + lastEmailMessageId: row.last_email_message_id, + lastEmailError: row.last_email_error, + resolvedAt: row.resolved_at ? toIso(row.resolved_at) : null, + }; +} + +export function nextRecoveryOutreachAttemptAt( + lastAttemptAt: string, + retryIntervalHours: number, +): string { + return new Date( + new Date(lastAttemptAt).getTime() + retryIntervalHours * 60 * 60 * 1000, + ).toISOString(); +} + +export function buildBillingWarnings(input: { + ownerBillingStatus: BillingStatus; + cancelAtPeriodEnd: boolean; + seatLimit: number; + reservedSeats: number; +}): TeamWorkspaceBillingWarning[] { + const warningCodes: TeamWorkspaceBillingWarning[] = []; + + if (input.seatLimit === 0) warningCodes.push('workspace_plan_inactive'); + if (input.ownerBillingStatus === 'past_due') warningCodes.push('past_due'); + if (input.cancelAtPeriodEnd) warningCodes.push('cancel_at_period_end'); + if (input.seatLimit > 0 && input.reservedSeats >= input.seatLimit) { + warningCodes.push('seat_limit_reached'); + } + + return warningCodes; +} + +export function buildRecoveryActions(input: { + subscription: SubscriptionTier; + billingStatus: BillingStatus; + warningCodes: TeamWorkspaceBillingWarning[]; + seatLimit: number; + seatsRemaining: number; + fallbackMemberCount: number; + revokedInviteCount: number; +}): TeamWorkspaceBillingRecoveryAction[] { + const actions: TeamWorkspaceBillingRecoveryAction[] = []; + const seenCodes = new Set(); + + const pushAction = (action: TeamWorkspaceBillingRecoveryAction) => { + if (seenCodes.has(action.code)) return; + seenCodes.add(action.code); + actions.push(action); + }; + + if (input.warningCodes.includes('workspace_plan_inactive')) { + if (input.subscription === 'team') { + pushAction({ + code: 'resume_team_subscription', + title: '恢复 Team 订阅', + detail: + input.fallbackMemberCount > 0 + ? `当前已有 ${input.fallbackMemberCount} 名成员回退到个人权限。请尽快通过账单入口恢复 Team 订阅，恢复后成员权限会自动重新继承。` + : '当前工作区已失去 Team entitlement。请通过账单入口恢复 Team 订阅，恢复后工作区席位和邀请能力会自动恢复。', + surface: 'billing_portal', + }); + } else { + pushAction({ + code: 'upgrade_to_team', + title: '重新升级到 Team', + detail: + input.revokedInviteCount > 0 + ? `当前工作区已不再处于 Team 套餐，系统已经撤销 ${input.revokedInviteCount} 条待接受邀请。重新升级到 Team 后可恢复团队协作能力。` + : '当前工作区所有者已不再处于 Team 套餐。重新升级到 Team 后，工作区席位、邀请和共享能力会重新生效。', + surface: 'checkout', + }); + } + } + + if (input.warningCodes.includes('past_due') && input.subscription === 'team') { + pushAction({ + code: 'update_payment_method', + title: '更新支付方式并完成扣款', + detail: + '当前 Team 订阅处于 past due。优先通过 billing portal 更新付款方式并完成补扣，避免工作区继续进入降级补偿流程。', + surface: 'billing_portal', + }); + } + + if (input.warningCodes.includes('cancel_at_period_end') && input.subscription === 'team') { + pushAction({ + code: 'renew_team_subscription', + title: '续订 Team 套餐', + detail: '当前订阅已设置到期取消。若希望团队协作持续生效，请在当前周期结束前恢复自动续费。', + surface: 'billing_portal', + }); + } + + if (input.warningCodes.includes('seat_limit_reached') && input.seatLimit > 0) { + pushAction({ + code: 'free_up_seats', + title: '释放或补充团队席位', + detail: + input.seatsRemaining === 0 + ? '当前席位已经用满。请先处理待接受邀请或减少团队成员，再继续邀请新成员。' + : '当前可用席位已接近耗尽。建议先清理不用的邀请或成员，避免后续团队协作被阻断。', + surface: 'workspace_members', + }); + } + + return actions; +} + +export function buildRecoveryNotices(input: { + viewerRole: TeamWorkspaceRole; + ownerDisplayName: string | null; + ownerEmail: string; + billing: Omit; + recentBillingEvents: Array>; +}): TeamWorkspaceBilling['recoveryNotices'] { + const notices: TeamWorkspaceBilling['recoveryNotices'] = []; + const seenCodes = new Set(); + const ownerLabel = input.ownerDisplayName ?? input.ownerEmail; + + const pushNotice = (notice: TeamWorkspaceBilling['recoveryNotices'][number]) => { + if (seenCodes.has(notice.code)) return; + seenCodes.add(notice.code); + notices.push(notice); + }; + + if (input.billing.warningCodes.includes('workspace_plan_inactive')) { + if (input.viewerRole === 'owner') { + const primaryAction = input.billing.recommendedActions.find( + (action) => action.code === 'resume_team_subscription' || action.code === 'upgrade_to_team', + ); + pushNotice({ + code: 'workspace_plan_inactive', + severity: 'critical', + title: 'Team Workspace 已进入恢复期', + detail: + input.billing.fallbackMemberCount > 0 || input.billing.revokedInviteCount > 0 + ? `当前已有 ${input.billing.fallbackMemberCount} 名成员回退到个人权限，${input.billing.revokedInviteCount} 条邀请被系统撤销。请优先恢复 Team 订阅，恢复后成员权限和邀请会自动补齐。` + : '当前工作区已经失去有效 Team entitlement。请优先恢复 Team 订阅，恢复后席位、邀请和共享能力会自动回到正常状态。', + actionCode: primaryAction?.code ?? null, + }); + } else { + pushNotice({ + code: 'workspace_plan_inactive', + severity: 'warning', + title: '当前团队权限已暂停继承', + detail: `你现在按个人套餐权限继续使用。若需要恢复 Team 能力，请联系账单所有者 ${ownerLabel} 处理订阅恢复。`, + actionCode: null, + }); + } + } + + if (input.billing.warningCodes.includes('past_due')) { + if (input.viewerRole === 'owner') { + pushNotice({ + code: 'past_due', + severity: 'warning', + title: 'Team 订阅付款待处理', + detail: + '请尽快通过 billing portal 更新支付方式并完成补扣，避免工作区继续停留在降级风险中。', + actionCode: + input.billing.recommendedActions.find((action) => action.code === 'update_payment_method') + ?.code ?? null, + }); + } else { + pushNotice({ + code: 'past_due', + severity: 'warning', + title: '团队订阅存在付款风险', + detail: `账单所有者 ${ownerLabel} 需要完成补款或更新支付方式，否则团队权限可能进一步收紧。`, + actionCode: null, + }); + } + } + + if (input.billing.warningCodes.includes('cancel_at_period_end')) { + if (input.viewerRole === 'owner') { + pushNotice({ + code: 'cancel_at_period_end', + severity: 'warning', + title: 'Team 订阅已设置到期取消', + detail: '如果希望团队协作持续生效，请在当前计费周期结束前恢复自动续费。', + actionCode: + input.billing.recommendedActions.find( + (action) => action.code === 'renew_team_subscription', + )?.code ?? null, + }); + } else { + pushNotice({ + code: 'cancel_at_period_end', + severity: 'info', + title: '团队订阅将在当前周期结束后取消', + detail: `如果 ${ownerLabel} 不恢复续费，当前工作区后续会回退到个人套餐权限。`, + actionCode: null, + }); + } + } + + if ( + input.billing.warningCodes.includes('seat_limit_reached') && + (input.viewerRole === 'owner' || input.viewerRole === 'admin') + ) { + pushNotice({ + code: 'seat_limit_reached', + severity: 'warning', + title: '团队席位已满', + detail: + input.billing.revokedInviteCount > 0 + ? `当前席位已满，且系统已经撤销 ${input.billing.revokedInviteCount} 条待接受邀请。请先清理成员或邀请，再继续扩展团队。` + : '当前席位已经用满。请先释放成员或处理待接受邀请，再继续邀请新成员。', + actionCode: + input.billing.recommendedActions.find((action) => action.code === 'free_up_seats')?.code ?? + null, + }); + } + + if (input.recentBillingEvents.some((event) => event.type === 'invites_auto_restored')) { + const restoredCount = + input.recentBillingEvents.find((event) => event.type === 'invites_auto_restored')?.count ?? + null; + pushNotice({ + code: 'invites_restored', + severity: 'success', + title: '已恢复被撤销的待接受邀请', + detail: + restoredCount && restoredCount > 0 + ? `系统已经恢复 ${restoredCount} 条此前因账单或席位风险被撤销的邀请，你现在可以直接继续跟进成员加入。` + : '系统已经恢复此前因账单或席位风险被撤销的待接受邀请，你现在可以直接继续跟进成员加入。', + actionCode: null, + }); + } + + if (input.recentBillingEvents.some((event) => event.type === 'members_fallback_cleared')) { + pushNotice({ + code: 'team_access_restored', + severity: 'success', + title: 'Team 权限已重新恢复', + detail: + input.viewerRole === 'owner' + ? '此前回退到个人套餐的成员已经重新继承 Team 权限。' + : '你现在已经重新继承当前 Team Workspace 的团队权限，可继续使用保存视图、导出和协作能力。', + actionCode: null, + }); + } + + return notices; +} + +export function buildRecoveryOutreachDescriptors(input: { + workspaceName: string; + billing: TeamWorkspaceBilling; +}): WorkspaceRecoveryOutreachDescriptor[] { + if (input.billing.recommendedActions.length === 0) return []; + + const descriptors: WorkspaceRecoveryOutreachDescriptor[] = []; + const primaryAction = input.billing.recommendedActions[0] ?? null; + const primaryNotice = input.billing.recoveryNotices[0] ?? null; + + descriptors.push({ + audience: 'owner', + channel: 'owner_banner', + title: primaryNotice?.title ?? `请尽快处理 ${input.workspaceName} 的 Team Workspace 账单风险`, + detail: + primaryNotice?.detail ?? + primaryAction?.detail ?? + '当前工作区存在待恢复的账单或席位风险，请尽快处理。', + actionCode: primaryAction?.code ?? null, + }); + + if ( + input.billing.fallbackMemberCount > 0 || + input.billing.revokedInviteCount > 0 || + input.billing.warningCodes.includes('past_due') + ) { + descriptors.push({ + audience: 'admin', + channel: 'admin_queue', + title: `${input.workspaceName} 需要运营跟进`, + detail: + input.billing.fallbackMemberCount > 0 + ? `${input.billing.fallbackMemberCount} 名成员已回退到个人权限，请关注 owner 是否及时恢复订阅。` + : input.billing.revokedInviteCount > 0 + ? `${input.billing.revokedInviteCount} 条邀请已被系统撤销，请跟进 owner 恢复 Team 后重新推进成员加入。` + : '当前 Team 订阅存在付款或续费风险，请关注 owner 的恢复动作是否完成。', + actionCode: primaryAction?.code ?? null, + }); + } + + return descriptors; +} + +export function buildMemberRecoveryNotificationDescriptor(input: { + workspaceName: string; + ownerDisplayName: string | null; + ownerEmail: string; + billing: TeamWorkspaceBilling; +}): WorkspaceMemberRecoveryNotificationDescriptor | null { + if (input.billing.fallbackMemberCount === 0) return null; + const ownerLabel = input.ownerDisplayName ?? input.ownerEmail; + const primaryNotice = + input.billing.recoveryNotices.find((notice) => notice.code === 'workspace_plan_inactive') ?? + input.billing.recoveryNotices[0] ?? + null; + + return { + title: `${input.workspaceName} 已暂时回退到个人权限`, + detail: primaryNotice + ? `${primaryNotice.detail} 当前账单所有者是 ${ownerLabel}。系统会在恢复后自动重新授予 Team 权限。` + : `你当前在 Team Workspace「${input.workspaceName}」里的团队权限已暂时回退到个人套餐，请联系账单所有者 ${ownerLabel} 恢复订阅。系统会在恢复后自动重新授予 Team 权限。`, + }; +} + +export function summarizeMemberRecoveryNotifications( + notifications: TeamWorkspaceMemberRecoveryNotification[], +): { + pendingCount: number; + retryingCount: number; + deliveredCount: number; + failedCount: number; + nextEmailAttemptAt: string | null; + lastEmailDeliveredAt: string | null; + lastEmailError: string | null; +} { + let pendingCount = 0; + let retryingCount = 0; + let deliveredCount = 0; + let failedCount = 0; + let nextEmailAttemptAt: string | null = null; + let lastEmailDeliveredAt: string | null = null; + let lastEmailError: string | null = null; + + for (const notification of notifications) { + if (notification.status !== 'pending') continue; + if (notification.lastEmailDeliveredAt) { + deliveredCount += 1; + if ( + lastEmailDeliveredAt == null || + new Date(notification.lastEmailDeliveredAt).getTime() > + new Date(lastEmailDeliveredAt).getTime() + ) { + lastEmailDeliveredAt = notification.lastEmailDeliveredAt; + } + continue; + } + if (notification.lastEmailError) { + if (notification.nextEmailAttemptAt) { + retryingCount += 1; + if ( + nextEmailAttemptAt == null || + new Date(notification.nextEmailAttemptAt).getTime() < + new Date(nextEmailAttemptAt).getTime() + ) { + nextEmailAttemptAt = notification.nextEmailAttemptAt; + } + } else { + failedCount += 1; + } + lastEmailError = notification.lastEmailError; + continue; + } + pendingCount += 1; + if ( + notification.nextEmailAttemptAt && + (nextEmailAttemptAt == null || + new Date(notification.nextEmailAttemptAt).getTime() < + new Date(nextEmailAttemptAt).getTime()) + ) { + nextEmailAttemptAt = notification.nextEmailAttemptAt; + } + } + + return { + pendingCount, + retryingCount, + deliveredCount, + failedCount, + nextEmailAttemptAt, + lastEmailDeliveredAt, + lastEmailError, + }; +} + +export function hasOwnerRecoveryEngagement( + touch: BillingFunnelUserTouch | null | undefined, +): boolean { + if (!touch) return false; + return ( + touch.type === 'checkout_started' || + touch.type === 'checkout_completed' || + touch.type === 'portal_started' || + touch.type === 'subscription_recovered' + ); +} + +export function accumulateRecoveryActions( + actions: TeamWorkspaceBillingRecoveryAction[], + counts: Map, +) { + for (const action of actions) { + const existing = counts.get(action.code); + if (existing) { + existing.count += 1; + continue; + } + counts.set(action.code, { + code: action.code, + title: action.title, + count: 1, + }); + } +} + +export function toAdminActionableWorkspace(input: { + workspaceId: string; + workspaceName: string; + owner: WorkspaceBillingOwner; + billing: TeamWorkspaceBilling; + pendingInvites: number; + lastBillingEvent?: Pick | null; + lastOutreach?: Pick< + AdminRecoveryOutreach, + | 'title' + | 'createdAt' + | 'lastAttemptAt' + | 'audience' + | 'channel' + | 'status' + | 'attemptCount' + | 'nextAttemptAt' + | 'emailAttemptCount' + | 'lastEmailAttemptAt' + | 'nextEmailAttemptAt' + | 'lastEmailDeliveredAt' + | 'lastEmailMessageId' + | 'lastEmailError' + | 'exportCount' + | 'lastExportedAt' + | 'crmSyncCount' + | 'lastCrmSyncAttemptAt' + | 'nextCrmSyncAttemptAt' + | 'lastCrmSyncedAt' + | 'crmExternalRecordId' + | 'lastCrmSyncStatusCode' + | 'lastCrmSyncError' + | 'webhookAttemptCount' + | 'lastWebhookAttemptAt' + | 'nextWebhookAttemptAt' + | 'webhookExhaustedAt' + | 'webhookDeliveryCount' + | 'lastWebhookDeliveredAt' + | 'lastWebhookStatusCode' + | 'lastWebhookError' + | 'slackAlertCount' + | 'lastSlackAlertAttemptAt' + | 'lastSlackAlertedAt' + | 'lastSlackAlertStatusCode' + | 'lastSlackAlertError' + | 'handoffChannel' + | 'handoffAt' + | 'handoffNote' + > | null; + memberRecoveryNotifications?: { + pendingCount: number; + retryingCount: number; + deliveredCount: number; + failedCount: number; + nextEmailAttemptAt: string | null; + lastEmailDeliveredAt: string | null; + lastEmailError: string | null; + } | null; +}): AdminActionableWorkspace { + return { + workspaceId: input.workspaceId, + workspaceName: input.workspaceName, + ownerUserId: input.owner.id, + ownerDisplayName: input.owner.displayName, + ownerEmail: input.owner.email, + subscription: input.owner.subscription, + billingStatus: input.owner.billingStatus, + seatLimit: input.billing.seatLimit, + seatsUsed: input.billing.seatsUsed, + reservedSeats: input.billing.reservedSeats, + pendingInvites: input.pendingInvites, + revokedInvites: input.billing.revokedInviteCount, + fallbackMembers: input.billing.fallbackMemberCount, + warningCodes: input.billing.warningCodes, + recommendedActions: input.billing.recommendedActions, + lastBillingEventAt: input.lastBillingEvent?.createdAt ?? null, + lastBillingEventTitle: input.lastBillingEvent?.title ?? null, + lastCommercialEventAt: null, + lastCommercialEventType: null, + lastCommercialEventSource: null, + recoveryStage: 'needs_outreach', + followUpState: 'needs_initial_touch', + nextFollowUpAt: null, + lastOutreachAt: input.lastOutreach?.lastAttemptAt ?? null, + lastOutreachTitle: input.lastOutreach?.title ?? null, + lastOutreachAudience: input.lastOutreach?.audience ?? null, + lastOutreachChannel: input.lastOutreach?.channel ?? null, + lastOutreachStatus: input.lastOutreach?.status ?? null, + lastOutreachAttemptCount: input.lastOutreach?.attemptCount ?? null, + nextOutreachAttemptAt: input.lastOutreach?.nextAttemptAt ?? null, + lastOutreachEmailAttemptCount: input.lastOutreach?.emailAttemptCount ?? null, + lastOutreachEmailAttemptAt: input.lastOutreach?.lastEmailAttemptAt ?? null, + nextOutreachEmailAttemptAt: input.lastOutreach?.nextEmailAttemptAt ?? null, + lastOutreachEmailDeliveredAt: input.lastOutreach?.lastEmailDeliveredAt ?? null, + lastOutreachEmailMessageId: input.lastOutreach?.lastEmailMessageId ?? null, + lastOutreachEmailError: input.lastOutreach?.lastEmailError ?? null, + lastOutreachExportCount: input.lastOutreach?.exportCount ?? null, + lastOutreachExportedAt: input.lastOutreach?.lastExportedAt ?? null, + lastOutreachCrmSyncCount: input.lastOutreach?.crmSyncCount ?? null, + lastOutreachCrmSyncAttemptAt: input.lastOutreach?.lastCrmSyncAttemptAt ?? null, + nextOutreachCrmSyncAttemptAt: input.lastOutreach?.nextCrmSyncAttemptAt ?? null, + lastOutreachCrmSyncedAt: input.lastOutreach?.lastCrmSyncedAt ?? null, + lastOutreachCrmExternalRecordId: input.lastOutreach?.crmExternalRecordId ?? null, + lastOutreachCrmSyncStatusCode: input.lastOutreach?.lastCrmSyncStatusCode ?? null, + lastOutreachCrmSyncError: input.lastOutreach?.lastCrmSyncError ?? null, + lastOutreachWebhookAttemptCount: input.lastOutreach?.webhookAttemptCount ?? null, + lastOutreachWebhookAttemptAt: input.lastOutreach?.lastWebhookAttemptAt ?? null, + nextOutreachWebhookAttemptAt: input.lastOutreach?.nextWebhookAttemptAt ?? null, + lastOutreachWebhookExhaustedAt: input.lastOutreach?.webhookExhaustedAt ?? null, + lastOutreachWebhookDeliveryCount: input.lastOutreach?.webhookDeliveryCount ?? null, + lastOutreachWebhookDeliveredAt: input.lastOutreach?.lastWebhookDeliveredAt ?? null, + lastOutreachWebhookStatusCode: input.lastOutreach?.lastWebhookStatusCode ?? null, + lastOutreachWebhookError: input.lastOutreach?.lastWebhookError ?? null, + lastOutreachSlackAlertCount: input.lastOutreach?.slackAlertCount ?? null, + lastOutreachSlackAlertAttemptAt: input.lastOutreach?.lastSlackAlertAttemptAt ?? null, + lastOutreachSlackAlertedAt: input.lastOutreach?.lastSlackAlertedAt ?? null, + lastOutreachSlackAlertStatusCode: input.lastOutreach?.lastSlackAlertStatusCode ?? null, + lastOutreachSlackAlertError: input.lastOutreach?.lastSlackAlertError ?? null, + lastOutreachHandoffChannel: input.lastOutreach?.handoffChannel ?? null, + lastOutreachHandoffAt: input.lastOutreach?.handoffAt ?? null, + lastOutreachHandoffNote: input.lastOutreach?.handoffNote ?? null, + memberRecoveryPendingCount: input.memberRecoveryNotifications?.pendingCount ?? 0, + memberRecoveryRetryingCount: input.memberRecoveryNotifications?.retryingCount ?? 0, + memberRecoveryDeliveredCount: input.memberRecoveryNotifications?.deliveredCount ?? 0, + memberRecoveryFailedCount: input.memberRecoveryNotifications?.failedCount ?? 0, + memberRecoveryNextEmailAttemptAt: input.memberRecoveryNotifications?.nextEmailAttemptAt ?? null, + memberRecoveryLastEmailDeliveredAt: + input.memberRecoveryNotifications?.lastEmailDeliveredAt ?? null, + memberRecoveryLastEmailError: input.memberRecoveryNotifications?.lastEmailError ?? null, + }; +} + +export function personalWorkspaceAccess(user: UserProfile): WorkspaceAccess { + return { + source: 'personal', + workspaceId: null, + workspaceName: null, + workspaceRole: null, + inheritedFromUserId: null, + inheritedFromName: null, + effectiveSubscription: user.subscription, + effectiveBillingStatus: user.billingStatus, + warningCodes: [], + }; +} + +export function buildWorkspaceAccess(input: { + user: UserProfile; + context: WorkspaceAccessContext; +}): WorkspaceAccess { + const seatLimit = resolveTeamWorkspaceSeatLimit({ + subscription: input.context.owner.subscription, + billingStatus: input.context.owner.billingStatus, + }); + const reservedSeats = input.context.seatsUsed + input.context.pendingInviteCount; + const warningCodes = buildBillingWarnings({ + ownerBillingStatus: input.context.owner.billingStatus, + cancelAtPeriodEnd: input.context.owner.cancelAtPeriodEnd, + seatLimit, + reservedSeats, + }); + const inheritsWorkspaceAccess = + input.context.owner.subscription === 'team' && input.context.owner.billingStatus !== 'inactive' + ? seatLimit > 0 + : false; + + return { + source: inheritsWorkspaceAccess ? 'team_workspace' : 'personal', + workspaceId: input.context.workspaceId, + workspaceName: input.context.workspaceName, + workspaceRole: input.context.role, + inheritedFromUserId: inheritsWorkspaceAccess ? input.context.owner.id : null, + inheritedFromName: inheritsWorkspaceAccess + ? (input.context.owner.displayName ?? input.context.owner.email) + : null, + effectiveSubscription: inheritsWorkspaceAccess ? 'team' : input.user.subscription, + effectiveBillingStatus: inheritsWorkspaceAccess + ? input.context.owner.billingStatus + : input.user.billingStatus, + warningCodes, + }; +} + +export function applyWorkspaceAccess( + user: UserProfile, + access: WorkspaceAccess | null, +): UserProfile { + const resolvedAccess = access ?? personalWorkspaceAccess(user); + return { + ...user, + effectiveSubscription: resolvedAccess.effectiveSubscription, + effectiveBillingStatus: resolvedAccess.effectiveBillingStatus, + entitlements: resolveEntitlements({ + subscription: resolvedAccess.effectiveSubscription, + billingStatus: resolvedAccess.effectiveBillingStatus, + }), + workspaceAccess: resolvedAccess, + }; +} diff --git a/services/api/src/repositories/teamWorkspaces/mockRepository.ts b/services/api/src/repositories/teamWorkspaces/mockRepository.ts new file mode 100644 index 0000000..831d867 --- /dev/null +++ b/services/api/src/repositories/teamWorkspaces/mockRepository.ts @@ -0,0 +1,1614 @@ +import { COMPENSATION_REASONS, DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS } from './contract.js'; +import type { WorkspaceSharedSavedViewRecord, WorkspaceSharedCaseRecord } from './contract.js'; +import type { + AdminActionableWorkspace, + AdminBillingEvent, + AdminRecoveryAction, + AdminRecoveryOutreach, + ManageRole, + PendingMemberRecoveryNotificationTarget, + TeamWorkspacesRepository, + WorkspaceBillingEventDescriptor, + WorkspaceBillingSnapshot, + WorkspaceCompensationSummary, + WorkspaceInviteRecord, + WorkspaceInviteRevocationReason, + WorkspaceMemberRecoveryNotificationDescriptor, + WorkspaceMembershipRecord, + WorkspaceReconcileResult, + WorkspaceRecord, + WorkspaceRecoveryOutreachDescriptor, +} from './contract.js'; +import { + accumulateRecoveryActions, + applyWorkspaceAccess, + billingSnapshotFromBilling, + buildBillingEventDescriptors, + buildMemberRecoveryNotificationDescriptor, + buildRecoveryOutreachDescriptors, + buildWorkspaceAccess, + buildWorkspaceBilling, + hasOwnerRecoveryEngagement, + nextRecoveryOutreachAttemptAt, + summarizeMemberRecoveryNotifications, + toAdminActionableWorkspace, +} from './helpers.js'; +import { randomUUID } from 'node:crypto'; +import type { TeamWorkspaceAdminMetrics } from '@sg/shared/schemas/adminStats'; +import type { UserProfile, WorkspaceAccess } from '@sg/shared/schemas/auth'; +import { resolveTeamWorkspaceSeatLimit } from '@sg/shared/billing'; +import type { + TeamWorkspaceBillingRecoveryActionCode, + TeamWorkspaceBillingEvent, + TeamWorkspaceRecoveryOutreach, + TeamWorkspaceRecoveryOutreachAudience, + TeamWorkspaceRecoveryOutreachHandoffChannel, + TeamWorkspaceRecoveryPlaybookRun, + TeamWorkspaceRecoveryPlaybookStepName, + TeamWorkspaceRecoveryPlaybookSteps, + TeamWorkspace, + TeamWorkspaceContextResponse, + TeamWorkspaceInvite, + TeamWorkspaceMemberRecoveryNotification, + TeamWorkspaceMember, + TeamWorkspaceSharedCase, + TeamWorkspaceSharedSavedView, +} from '@sg/shared/schemas/teamWorkspace'; +import type { CasesRepository } from '../casesRepository.js'; +import type { BillingFunnelRepository } from '../billingFunnelRepository.js'; +import type { SavedViewsRepository } from '../savedViewsRepository.js'; +import type { UsersRepository } from '../usersRepository.js'; +import { config } from '../../config/index.js'; + +export class MockTeamWorkspacesRepository implements TeamWorkspacesRepository { + private readonly workspaces = new Map(); + private readonly membershipByUserId = new Map(); + private readonly invites = new Map< + string, + WorkspaceInviteRecord & { + revokedReason?: WorkspaceInviteRevocationReason | null; + revokedAt?: string | null; + } + >(); + private readonly billingEvents: AdminBillingEvent[] = []; + private readonly recoveryOutreach: AdminRecoveryOutreach[] = []; + private readonly recoveryPlaybookRuns: TeamWorkspaceRecoveryPlaybookRun[] = []; + private readonly memberRecoveryNotifications: Array< + TeamWorkspaceMemberRecoveryNotification & { workspaceId: string; workspaceName: string } + > = []; + private readonly billingStateByWorkspaceId = new Map(); + private readonly sharedSavedViews: WorkspaceSharedSavedViewRecord[] = []; + private readonly sharedCases: WorkspaceSharedCaseRecord[] = []; + + constructor( + private readonly usersRepo: UsersRepository, + private readonly savedViewsRepo: SavedViewsRepository, + private readonly casesRepo: CasesRepository, + private readonly billingFunnelRepo: BillingFunnelRepository, + ) {} + + async resolveEffectiveUserProfile(user: UserProfile): Promise { + return applyWorkspaceAccess(user, await this.buildWorkspaceAccessForUser(user)); + } + + async getContextForUser(user: UserProfile): Promise { + await this.reconcileBillingForUser(user.id); + await this.reconcilePendingInvitesForEmail(user.email); + const workspace = await this.buildWorkspaceForUser(user.id); + return { + canCreateWorkspace: user.entitlements.canUseTeamWorkspace && workspace === null, + hasWorkspace: workspace !== null, + workspace, + pendingInvites: workspace ? [] : this.getPendingInvitesForEmail(user.email), + }; + } + + async reconcileBillingForUser( + userId: string, + ): Promise<{ workspaceIds: string[]; revokedInviteCount: number }> { + const workspaceIds = [...this.workspaces.values()] + .filter((workspace) => workspace.ownerUserId === userId) + .map((workspace) => workspace.id); + let revokedInviteCount = 0; + for (const workspaceId of workspaceIds) { + const result = await this.reconcileWorkspaceBillingState(workspaceId); + revokedInviteCount += result.revokedInviteCount; + } + return { workspaceIds, revokedInviteCount }; + } + + async reconcileAllBilling(): Promise<{ + workspaceCount: number; + revokedInviteCount: number; + restoredInviteCount: number; + }> { + const workspaceIds = [...this.workspaces.values()].map((workspace) => workspace.id); + let revokedInviteCount = 0; + let restoredInviteCount = 0; + for (const workspaceId of workspaceIds) { + const result = await this.reconcileWorkspaceBillingState(workspaceId); + revokedInviteCount += result.revokedInviteCount; + restoredInviteCount += result.restoredInviteCount; + } + return { + workspaceCount: workspaceIds.length, + revokedInviteCount, + restoredInviteCount, + }; + } + + async runRecoveryOutreachAutomation(options?: { retryIntervalHours?: number }): Promise<{ + workspaceCount: number; + ownerOutreachCreated: number; + adminOutreachCreated: number; + retriedOutreachCount: number; + resolvedOutreachCount: number; + }> { + const retryIntervalHours = Math.max( + 0, + options?.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + const workspaces = [...this.workspaces.values()]; + const workspaceIds = workspaces.map((workspace) => workspace.id); + const latestCommercialTouches = await this.billingFunnelRepo.getLatestEventsByUserIds( + workspaces.map((workspace) => workspace.ownerUserId), + ); + const latestCommercialTouchByOwnerId = new Map( + latestCommercialTouches.map((touch) => [touch.userId, touch]), + ); + let ownerOutreachCreated = 0; + let adminOutreachCreated = 0; + let retriedOutreachCount = 0; + let resolvedOutreachCount = 0; + + for (const workspaceId of workspaceIds) { + await this.reconcileWorkspaceBillingState(workspaceId); + const workspace = this.workspaces.get(workspaceId); + if (!workspace) continue; + const owner = await this.usersRepo.getById(workspace.ownerUserId); + if (!owner) continue; + const seatsUsed = [...this.membershipByUserId.values()].filter( + (item) => item.workspaceId === workspaceId, + ).length; + const pendingInviteCount = [...this.invites.values()].filter( + (invite) => invite.workspaceId === workspaceId && invite.status === 'pending', + ).length; + const compensation = this.getCompensationSummary(workspaceId); + const billing = buildWorkspaceBilling({ + owner, + seatsUsed, + pendingInviteCount, + compensation, + viewerRole: 'owner', + recentBillingEvents: this.getRecentBillingEvents(workspaceId), + }); + const descriptors = buildRecoveryOutreachDescriptors({ + workspaceName: workspace.name, + billing, + }); + const memberDescriptor = buildMemberRecoveryNotificationDescriptor({ + workspaceName: workspace.name, + ownerDisplayName: owner.displayName, + ownerEmail: owner.email, + billing, + }); + const fallbackMembers = ( + await Promise.all( + [...this.membershipByUserId.entries()] + .filter( + ([, membership]) => + membership.workspaceId === workspaceId && membership.role !== 'owner', + ) + .map(async ([userId]) => { + const user = await this.usersRepo.getById(userId); + if (!user) return null; + return { + userId, + email: user.email, + displayName: user.displayName, + }; + }), + ) + ).filter( + ( + item, + ): item is { + userId: string; + email: string; + displayName: string | null; + } => item !== null, + ); + const ownerDescriptor = descriptors.find((item) => item.audience === 'owner') ?? null; + const adminDescriptor = descriptors.find((item) => item.audience === 'admin') ?? null; + const ownerTouch = latestCommercialTouchByOwnerId.get(workspace.ownerUserId); + if (hasOwnerRecoveryEngagement(ownerTouch)) { + resolvedOutreachCount += this.resolvePendingRecoveryOutreach(workspaceId, 'owner'); + } else { + ownerOutreachCreated += this.ensurePendingRecoveryOutreach( + workspaceId, + workspace.name, + ownerDescriptor, + retryIntervalHours, + ); + retriedOutreachCount += this.retryPendingRecoveryOutreach( + workspaceId, + ownerDescriptor, + retryIntervalHours, + ); + } + adminOutreachCreated += this.ensurePendingRecoveryOutreach( + workspaceId, + workspace.name, + adminDescriptor, + retryIntervalHours, + ); + retriedOutreachCount += this.retryPendingRecoveryOutreach( + workspaceId, + adminDescriptor, + retryIntervalHours, + ); + if (!ownerDescriptor) { + resolvedOutreachCount += this.resolvePendingRecoveryOutreach(workspaceId, 'owner'); + } + if (!adminDescriptor) { + resolvedOutreachCount += this.resolvePendingRecoveryOutreach(workspaceId, 'admin'); + } + this.syncPendingMemberRecoveryNotifications( + workspaceId, + workspace.name, + fallbackMembers, + memberDescriptor, + ); + } + + return { + workspaceCount: workspaceIds.length, + ownerOutreachCreated, + adminOutreachCreated, + retriedOutreachCount, + resolvedOutreachCount, + }; + } + + async getAdminMetrics(): Promise { + const workspaces = [...this.workspaces.values()]; + let activeWorkspaces = 0; + let atRiskWorkspaces = 0; + let workspacesRequiringAction = 0; + let fullWorkspaces = 0; + let totalSeatCapacity = 0; + let seatsUsed = 0; + let reservedSeats = 0; + let pendingInvites = 0; + let inheritedMembers = 0; + let revokedInvites = 0; + let fallbackMembers = 0; + let pendingOwnerOutreach = 0; + let pendingAdminOutreach = 0; + let pendingEmail = 0; + let retryingEmail = 0; + let deliveredEmail = 0; + let failedEmail = 0; + let pendingMemberEmail = 0; + let retryingMemberEmail = 0; + let deliveredMemberEmail = 0; + let failedMemberEmail = 0; + let multiTouchPending = 0; + let pendingExport = 0; + let pendingCrmSync = 0; + let retryingCrmSync = 0; + let syncedCrm = 0; + let failedCrmSync = 0; + let pendingWebhook = 0; + let retryingWebhook = 0; + let deadLetteredWebhook = 0; + let pendingSlackAlert = 0; + let alertedSlack = 0; + let failedSlackAlert = 0; + let deliveredWebhook = 0; + let failedWebhook = 0; + let handedOffOutreach = 0; + let resolvedOutreach = 0; + const actionableWorkspaces: AdminActionableWorkspace[] = []; + const recoveryActionCounts = new Map< + TeamWorkspaceBillingRecoveryActionCode, + AdminRecoveryAction + >(); + + for (const workspace of workspaces) { + await this.reconcileWorkspaceBillingState(workspace.id); + const owner = await this.usersRepo.getById(workspace.ownerUserId); + if (!owner) continue; + const workspaceSeatsUsed = [...this.membershipByUserId.values()].filter( + (item) => item.workspaceId === workspace.id, + ).length; + const workspacePendingInvites = [...this.invites.values()].filter( + (invite) => invite.workspaceId === workspace.id && invite.status === 'pending', + ).length; + const compensation = this.getCompensationSummary(workspace.id); + const billing = buildWorkspaceBilling({ + owner, + seatsUsed: workspaceSeatsUsed, + pendingInviteCount: workspacePendingInvites, + compensation, + }); + const memberNotificationSummary = summarizeMemberRecoveryNotifications( + this.memberRecoveryNotifications.filter( + (notification) => notification.workspaceId === workspace.id, + ), + ); + + totalSeatCapacity += billing.seatLimit; + seatsUsed += billing.seatsUsed; + reservedSeats += billing.reservedSeats; + pendingInvites += workspacePendingInvites; + revokedInvites += compensation.revokedInviteCount; + fallbackMembers += billing.fallbackMemberCount; + const latestOutreach = + this.recoveryOutreach.find((event) => event.workspaceId === workspace.id) ?? null; + if (billing.recommendedActions.length > 0) { + workspacesRequiringAction += 1; + accumulateRecoveryActions(billing.recommendedActions, recoveryActionCounts); + actionableWorkspaces.push( + toAdminActionableWorkspace({ + workspaceId: workspace.id, + workspaceName: workspace.name, + owner, + billing, + pendingInvites: workspacePendingInvites, + lastBillingEvent: this.getRecentBillingEvents(workspace.id)[0] ?? null, + lastOutreach: latestOutreach, + memberRecoveryNotifications: memberNotificationSummary, + }), + ); + } + if (billing.seatLimit > 0) { + activeWorkspaces += 1; + inheritedMembers += Math.max(0, billing.seatsUsed - 1); + } + if (billing.warningCodes.includes('seat_limit_reached')) fullWorkspaces += 1; + if ( + billing.warningCodes.some( + (code) => + code === 'workspace_plan_inactive' || + code === 'past_due' || + code === 'cancel_at_period_end', + ) + ) { + atRiskWorkspaces += 1; + } + + pendingMemberEmail += memberNotificationSummary.pendingCount; + retryingMemberEmail += memberNotificationSummary.retryingCount; + deliveredMemberEmail += memberNotificationSummary.deliveredCount; + failedMemberEmail += memberNotificationSummary.failedCount; + } + + for (const event of this.recoveryOutreach) { + if (event.status === 'pending') { + if (event.attemptCount > 1) multiTouchPending += 1; + if (event.audience === 'owner') pendingOwnerOutreach += 1; + else pendingAdminOutreach += 1; + if (event.audience === 'owner') { + if (event.lastEmailDeliveredAt) deliveredEmail += 1; + else if (event.lastEmailError) { + if (event.nextEmailAttemptAt) retryingEmail += 1; + else failedEmail += 1; + } else { + pendingEmail += 1; + } + } + } else if (event.status === 'handed_off') { + if (event.exportCount === 0) pendingExport += 1; + if (event.handoffChannel === 'crm') { + if (event.lastCrmSyncedAt) syncedCrm += 1; + else if (event.lastCrmSyncError) { + failedCrmSync += 1; + if (event.nextCrmSyncAttemptAt) retryingCrmSync += 1; + } else { + pendingCrmSync += 1; + } + } + if (event.webhookDeliveryCount > 0) deliveredWebhook += 1; + else if (event.webhookExhaustedAt) deadLetteredWebhook += 1; + else if (event.lastWebhookError) { + failedWebhook += 1; + if (event.nextWebhookAttemptAt) retryingWebhook += 1; + } else pendingWebhook += 1; + if (event.webhookExhaustedAt) { + if (event.lastSlackAlertedAt) alertedSlack += 1; + else if (event.lastSlackAlertError) failedSlackAlert += 1; + else pendingSlackAlert += 1; + } + handedOffOutreach += 1; + } else { + resolvedOutreach += 1; + } + } + + return { + totalWorkspaces: workspaces.length, + activeWorkspaces, + atRiskWorkspaces, + workspacesRequiringAction, + fullWorkspaces, + totalSeatCapacity, + seatsUsed, + reservedSeats, + pendingInvites, + inheritedMembers, + revokedInvites, + fallbackMembers, + seatUtilizationRate: totalSeatCapacity > 0 ? reservedSeats / totalSeatCapacity : null, + recoveryActions: [...recoveryActionCounts.values()].sort((a, b) => b.count - a.count), + recoveryStages: [], + followUpStates: [], + recoveryOutreach: { + pendingOwner: pendingOwnerOutreach, + pendingAdmin: pendingAdminOutreach, + pendingEmail, + retryingEmail, + deliveredEmail, + failedEmail, + pendingMemberEmail, + retryingMemberEmail, + deliveredMemberEmail, + failedMemberEmail, + multiTouchPending, + pendingExport, + pendingCrmSync, + retryingCrmSync, + syncedCrm, + failedCrmSync, + pendingWebhook, + retryingWebhook, + deadLetteredWebhook, + pendingSlackAlert, + alertedSlack, + failedSlackAlert, + deliveredWebhook, + failedWebhook, + handedOff: handedOffOutreach, + resolved: resolvedOutreach, + recent: this.recoveryOutreach.slice(0, 8), + }, + recoveryPlaybook: { + totalRuns: this.recoveryPlaybookRuns.length, + successfulRuns: this.recoveryPlaybookRuns.filter((run) => run.ok).length, + failedRuns: this.recoveryPlaybookRuns.filter((run) => !run.ok).length, + scheduledRuns: this.recoveryPlaybookRuns.filter((run) => run.triggerType === 'scheduled') + .length, + manualRuns: this.recoveryPlaybookRuns.filter((run) => run.triggerType !== 'scheduled') + .length, + lastRunAt: this.recoveryPlaybookRuns[0]?.createdAt ?? null, + lastRunOk: this.recoveryPlaybookRuns[0]?.ok ?? null, + recent: this.recoveryPlaybookRuns.slice(0, 8), + }, + recentBillingEvents: this.billingEvents.slice(0, 8), + actionableWorkspaces: actionableWorkspaces.sort((a, b) => { + const warningDelta = b.warningCodes.length - a.warningCodes.length; + if (warningDelta !== 0) return warningDelta; + return ( + new Date(b.lastBillingEventAt ?? 0).getTime() - + new Date(a.lastBillingEventAt ?? 0).getTime() + ); + }), + }; + } + + async listRecentRecoveryPlaybookRuns(limit: number): Promise { + return this.recoveryPlaybookRuns.slice(0, limit); + } + + async getRecoveryPlaybookRunById( + runId: string, + ): Promise { + return this.recoveryPlaybookRuns.find((run) => run.id === runId) ?? null; + } + + async recordRecoveryPlaybookRun(input: { + triggerType: string; + retryIntervalHours: number; + force: boolean; + requestedSteps: TeamWorkspaceRecoveryPlaybookStepName[]; + rerunOfRunId?: string | null; + ok: boolean; + summary: string; + steps: TeamWorkspaceRecoveryPlaybookSteps; + createdAt?: string; + }): Promise { + const createdAt = input.createdAt ?? new Date().toISOString(); + const run: TeamWorkspaceRecoveryPlaybookRun = { + id: randomUUID(), + triggerType: input.triggerType, + retryIntervalHours: input.retryIntervalHours, + force: input.force, + requestedSteps: [...input.requestedSteps], + rerunOfRunId: input.rerunOfRunId ?? null, + ok: input.ok, + summary: input.summary, + steps: input.steps, + createdAt, + }; + this.recoveryPlaybookRuns.unshift(run); + return run; + } + + async handoffAdminRecoveryOutreach(input: { + workspaceId: string; + channel: TeamWorkspaceRecoveryOutreachHandoffChannel; + snoozeHours: number; + note?: string | null; + }): Promise<'workspace_not_found' | 'outreach_not_found' | { ok: true }> { + const workspace = this.workspaces.get(input.workspaceId); + if (!workspace) return 'workspace_not_found'; + const now = new Date().toISOString(); + const nextAttemptAt = nextRecoveryOutreachAttemptAt(now, input.snoozeHours); + for (let index = 0; index < this.recoveryOutreach.length; index += 1) { + const event = this.recoveryOutreach[index]!; + if (event.workspaceId !== input.workspaceId || event.audience !== 'admin') continue; + if (event.status === 'resolved') continue; + this.recoveryOutreach[index] = { + ...event, + status: 'handed_off', + lastAttemptAt: now, + nextAttemptAt, + emailAttemptCount: 0, + lastEmailAttemptAt: null, + nextEmailAttemptAt: now, + lastEmailDeliveredAt: null, + lastEmailMessageId: null, + lastEmailError: null, + exportCount: 0, + lastExportedAt: null, + crmSyncCount: 0, + lastCrmSyncAttemptAt: null, + nextCrmSyncAttemptAt: now, + lastCrmSyncedAt: null, + crmExternalRecordId: null, + lastCrmSyncStatusCode: null, + lastCrmSyncError: null, + webhookAttemptCount: 0, + lastWebhookAttemptAt: null, + nextWebhookAttemptAt: now, + webhookExhaustedAt: null, + webhookDeliveryCount: 0, + lastWebhookDeliveredAt: null, + lastWebhookStatusCode: null, + lastWebhookError: null, + slackAlertCount: 0, + lastSlackAlertAttemptAt: null, + lastSlackAlertedAt: null, + lastSlackAlertStatusCode: null, + lastSlackAlertError: null, + handoffChannel: input.channel, + handoffNote: input.note?.trim() || null, + handoffAt: now, + }; + return { ok: true }; + } + return 'outreach_not_found'; + } + + async exportHandedOffAdminRecoveryOutreach(): Promise<{ exportedCount: number }> { + const now = new Date().toISOString(); + let exportedCount = 0; + for (let index = 0; index < this.recoveryOutreach.length; index += 1) { + const event = this.recoveryOutreach[index]!; + if (event.audience !== 'admin' || event.status !== 'handed_off') continue; + this.recoveryOutreach[index] = { + ...event, + exportCount: event.exportCount + 1, + lastExportedAt: now, + }; + exportedCount += 1; + } + return { exportedCount }; + } + + async listPendingMemberRecoveryNotifications(): Promise< + PendingMemberRecoveryNotificationTarget[] + > { + const targets = await Promise.all( + this.memberRecoveryNotifications.map(async (notification) => { + if (notification.status !== 'pending') return null; + const workspace = this.workspaces.get(notification.workspaceId); + if (!workspace) return null; + const owner = await this.usersRepo.getById(workspace.ownerUserId); + if (!owner) return null; + return { + notificationId: notification.id, + workspaceId: notification.workspaceId, + workspaceName: notification.workspaceName, + userId: notification.userId, + email: notification.email, + displayName: notification.displayName, + ownerDisplayName: owner.displayName, + ownerEmail: owner.email, + subscription: owner.subscription, + billingStatus: owner.billingStatus, + title: notification.title, + detail: notification.detail, + emailAttemptCount: notification.emailAttemptCount, + lastEmailAttemptAt: notification.lastEmailAttemptAt, + nextEmailAttemptAt: notification.nextEmailAttemptAt, + lastEmailDeliveredAt: notification.lastEmailDeliveredAt, + lastEmailMessageId: notification.lastEmailMessageId, + lastEmailError: notification.lastEmailError, + } satisfies PendingMemberRecoveryNotificationTarget; + }), + ); + return targets.filter((item): item is PendingMemberRecoveryNotificationTarget => item !== null); + } + + async recordPendingOwnerRecoveryOutreachEmailDelivery(input: { + workspaceIds: string[]; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + messageIdByWorkspaceId?: Record; + }): Promise<{ deliveredCount: number }> { + const workspaceIds = new Set(input.workspaceIds); + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const deliveredAt = input.deliveredAt ?? attemptedAt; + const retryIntervalHours = Math.max( + 0, + input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + let deliveredCount = 0; + for (let index = 0; index < this.recoveryOutreach.length; index += 1) { + const event = this.recoveryOutreach[index]!; + if (!workspaceIds.has(event.workspaceId)) continue; + if (event.audience !== 'owner' || event.status !== 'pending') continue; + this.recoveryOutreach[index] = input.error + ? { + ...event, + emailAttemptCount: event.emailAttemptCount + 1, + lastEmailAttemptAt: attemptedAt, + nextEmailAttemptAt: nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), + lastEmailError: input.error, + } + : { + ...event, + emailAttemptCount: event.emailAttemptCount + 1, + lastEmailAttemptAt: attemptedAt, + nextEmailAttemptAt: null, + lastEmailDeliveredAt: deliveredAt, + lastEmailMessageId: + input.messageIdByWorkspaceId?.[event.workspaceId] ?? event.lastEmailMessageId, + lastEmailError: null, + }; + if (!input.error) deliveredCount += 1; + } + return { deliveredCount }; + } + + async recordPendingMemberRecoveryNotificationEmailDelivery(input: { + notificationIds: string[]; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + messageIdByNotificationId?: Record; + }): Promise<{ deliveredCount: number }> { + const notificationIds = new Set(input.notificationIds); + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const deliveredAt = input.deliveredAt ?? attemptedAt; + const retryIntervalHours = Math.max( + 0, + input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + let deliveredCount = 0; + for (let index = 0; index < this.memberRecoveryNotifications.length; index += 1) { + const notification = this.memberRecoveryNotifications[index]!; + if (!notificationIds.has(notification.id) || notification.status !== 'pending') continue; + this.memberRecoveryNotifications[index] = input.error + ? { + ...notification, + emailAttemptCount: notification.emailAttemptCount + 1, + lastEmailAttemptAt: attemptedAt, + nextEmailAttemptAt: nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), + lastEmailError: input.error, + } + : { + ...notification, + emailAttemptCount: notification.emailAttemptCount + 1, + lastEmailAttemptAt: attemptedAt, + nextEmailAttemptAt: null, + lastEmailDeliveredAt: deliveredAt, + lastEmailMessageId: + input.messageIdByNotificationId?.[notification.id] ?? notification.lastEmailMessageId, + lastEmailError: null, + }; + if (!input.error) deliveredCount += 1; + } + return { deliveredCount }; + } + + async recordDeadLetteredAdminRecoveryOutreachSlackAlert(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + alertedAt?: string; + }): Promise<{ alertedCount: number }> { + const workspaceIds = new Set(input.workspaceIds); + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const alertedAt = input.alertedAt ?? attemptedAt; + let alertedCount = 0; + for (let index = 0; index < this.recoveryOutreach.length; index += 1) { + const event = this.recoveryOutreach[index]!; + if (!workspaceIds.has(event.workspaceId)) continue; + if ( + event.audience !== 'admin' || + event.status !== 'handed_off' || + event.webhookExhaustedAt == null + ) { + continue; + } + this.recoveryOutreach[index] = input.error + ? { + ...event, + slackAlertCount: event.slackAlertCount + 1, + lastSlackAlertAttemptAt: attemptedAt, + lastSlackAlertStatusCode: input.statusCode, + lastSlackAlertError: input.error, + } + : { + ...event, + slackAlertCount: event.slackAlertCount + 1, + lastSlackAlertAttemptAt: attemptedAt, + lastSlackAlertedAt: alertedAt, + lastSlackAlertStatusCode: input.statusCode, + lastSlackAlertError: null, + }; + if (!input.error) alertedCount += 1; + } + return { alertedCount }; + } + + async recordHandedOffAdminRecoveryOutreachCrmSync(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + syncedAt?: string; + retryIntervalHours?: number; + externalRecordIdByWorkspaceId?: Record; + }): Promise<{ syncedCount: number }> { + const workspaceIds = new Set(input.workspaceIds); + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const syncedAt = input.syncedAt ?? attemptedAt; + const retryIntervalHours = Math.max( + 0, + input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + let syncedCount = 0; + for (let index = 0; index < this.recoveryOutreach.length; index += 1) { + const event = this.recoveryOutreach[index]!; + if (!workspaceIds.has(event.workspaceId)) continue; + if ( + event.audience !== 'admin' || + event.status !== 'handed_off' || + event.handoffChannel !== 'crm' + ) { + continue; + } + this.recoveryOutreach[index] = input.error + ? { + ...event, + crmSyncCount: event.crmSyncCount + 1, + lastCrmSyncAttemptAt: attemptedAt, + nextCrmSyncAttemptAt: nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), + lastCrmSyncStatusCode: input.statusCode, + lastCrmSyncError: input.error, + } + : { + ...event, + crmSyncCount: event.crmSyncCount + 1, + lastCrmSyncAttemptAt: attemptedAt, + nextCrmSyncAttemptAt: null, + lastCrmSyncedAt: syncedAt, + crmExternalRecordId: + input.externalRecordIdByWorkspaceId?.[event.workspaceId] ?? event.crmExternalRecordId, + lastCrmSyncStatusCode: input.statusCode, + lastCrmSyncError: null, + }; + if (!input.error) syncedCount += 1; + } + return { syncedCount }; + } + + async recordHandedOffAdminRecoveryOutreachWebhookDelivery(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + maxAttempts?: number; + }): Promise<{ deliveredCount: number }> { + const workspaceIds = new Set(input.workspaceIds); + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const deliveredAt = input.deliveredAt ?? new Date().toISOString(); + const retryIntervalHours = Math.max( + 0, + input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + const maxAttempts = Math.max( + 1, + input.maxAttempts ?? config.recoveryOutreach.webhookMaxAttempts, + ); + let deliveredCount = 0; + for (let index = 0; index < this.recoveryOutreach.length; index += 1) { + const event = this.recoveryOutreach[index]!; + if (!workspaceIds.has(event.workspaceId)) continue; + if (event.audience !== 'admin' || event.status !== 'handed_off') continue; + const nextWebhookAttemptCount = event.webhookAttemptCount + 1; + const webhookExhaustedAt = + input.error && nextWebhookAttemptCount >= maxAttempts ? attemptedAt : null; + this.recoveryOutreach[index] = input.error + ? { + ...event, + webhookAttemptCount: nextWebhookAttemptCount, + lastWebhookAttemptAt: attemptedAt, + nextWebhookAttemptAt: webhookExhaustedAt + ? null + : nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), + webhookExhaustedAt, + lastWebhookStatusCode: input.statusCode, + lastWebhookError: input.error, + } + : { + ...event, + webhookAttemptCount: nextWebhookAttemptCount, + lastWebhookAttemptAt: attemptedAt, + nextWebhookAttemptAt: null, + webhookExhaustedAt: null, + webhookDeliveryCount: event.webhookDeliveryCount + 1, + lastWebhookDeliveredAt: deliveredAt, + lastWebhookStatusCode: input.statusCode, + lastWebhookError: null, + slackAlertCount: 0, + lastSlackAlertAttemptAt: null, + lastSlackAlertedAt: null, + lastSlackAlertStatusCode: null, + lastSlackAlertError: null, + }; + if (!input.error) deliveredCount += 1; + } + return { deliveredCount }; + } + + async createWorkspace( + user: UserProfile, + name: string, + ): Promise { + if (!user.entitlements.canUseTeamWorkspace) return 'entitlement_required'; + if (this.membershipByUserId.has(user.id)) return 'already_in_workspace'; + + const workspaceId = randomUUID(); + const createdAt = new Date().toISOString(); + this.workspaces.set(workspaceId, { + id: workspaceId, + name, + ownerUserId: user.id, + createdAt, + }); + this.membershipByUserId.set(user.id, { + workspaceId, + role: 'owner', + joinedAt: createdAt, + }); + return (await this.buildWorkspaceForUser(user.id))!; + } + + async inviteMember( + actorUserId: string, + email: string, + role: ManageRole, + ): Promise< + | TeamWorkspace + | 'workspace_not_found' + | 'forbidden' + | 'user_already_in_workspace' + | 'seat_limit_reached' + | 'workspace_plan_inactive' + > { + const actorMembership = this.membershipByUserId.get(actorUserId); + if (!actorMembership) return 'workspace_not_found'; + if (actorMembership.role === 'member') return 'forbidden'; + + const normalizedEmail = email.trim().toLowerCase(); + const workspaceView = await this.buildWorkspaceForUser(actorUserId); + if (!workspaceView) return 'workspace_not_found'; + + const usersToCheck = await Promise.all( + [...this.membershipByUserId.keys()].map(async (userId) => this.usersRepo.getById(userId)), + ); + if (usersToCheck.some((user) => user?.email === normalizedEmail)) { + return 'user_already_in_workspace'; + } + + if (workspaceView.billing.warningCodes.includes('workspace_plan_inactive')) { + return 'workspace_plan_inactive'; + } + + const workspace = this.workspaces.get(actorMembership.workspaceId)!; + const existing = [...this.invites.values()].find( + (invite) => + invite.workspaceId === workspace.id && + invite.email === normalizedEmail && + invite.status === 'pending', + ); + if (!existing && !workspaceView.billing.canInviteMore) { + return 'seat_limit_reached'; + } + + const invite: WorkspaceInviteRecord = { + id: existing?.id ?? randomUUID(), + workspaceId: workspace.id, + workspaceName: workspace.name, + email: normalizedEmail, + role, + status: 'pending', + createdAt: new Date().toISOString(), + acceptedAt: null, + }; + this.invites.set(invite.id, invite); + return (await this.buildWorkspaceForUser(actorUserId))!; + } + + async acceptInvite( + user: UserProfile, + inviteId: string, + ): Promise< + TeamWorkspace | 'invite_not_found' | 'already_in_workspace' | 'workspace_plan_inactive' + > { + if (this.membershipByUserId.has(user.id)) return 'already_in_workspace'; + const invite = this.invites.get(inviteId); + if (!invite) return 'invite_not_found'; + if (invite.email !== user.email.toLowerCase()) return 'invite_not_found'; + if (invite.status !== 'pending') { + return invite.revokedReason === 'billing_inactive' + ? 'workspace_plan_inactive' + : 'invite_not_found'; + } + const workspace = this.workspaces.get(invite.workspaceId); + if (!workspace) return 'invite_not_found'; + const owner = await this.usersRepo.getById(workspace.ownerUserId); + if (!owner) return 'invite_not_found'; + const seatsUsed = [...this.membershipByUserId.values()].filter( + (item) => item.workspaceId === invite.workspaceId, + ).length; + const pendingInviteCount = [...this.invites.values()].filter( + (item) => item.workspaceId === invite.workspaceId && item.status === 'pending', + ).length; + const billing = buildWorkspaceBilling({ + owner, + seatsUsed, + pendingInviteCount, + }); + if (billing.warningCodes.includes('workspace_plan_inactive')) { + await this.reconcileWorkspaceBillingState(invite.workspaceId); + return 'workspace_plan_inactive'; + } + + const acceptedAt = new Date().toISOString(); + this.membershipByUserId.set(user.id, { + workspaceId: invite.workspaceId, + role: invite.role, + joinedAt: acceptedAt, + }); + + for (const [id, item] of this.invites.entries()) { + if (item.email !== user.email.toLowerCase() || item.status !== 'pending') continue; + this.invites.set(id, { + ...item, + status: id === inviteId ? 'accepted' : 'revoked', + acceptedAt: id === inviteId ? acceptedAt : item.acceptedAt, + revokedReason: id === inviteId ? null : 'accepted_elsewhere', + revokedAt: id === inviteId ? null : acceptedAt, + }); + } + + return (await this.buildWorkspaceForUser(user.id))!; + } + + async shareSavedView( + actorUserId: string, + savedViewId: string, + ): Promise< + | { status: 'added' | 'exists'; workspace: TeamWorkspace } + | 'workspace_not_found' + | 'saved_view_not_found' + > { + const membership = this.membershipByUserId.get(actorUserId); + if (!membership) return 'workspace_not_found'; + const savedView = await this.savedViewsRepo.getById(actorUserId, savedViewId); + if (!savedView) return 'saved_view_not_found'; + + const exists = this.sharedSavedViews.some( + (item) => item.workspaceId === membership.workspaceId && item.savedViewId === savedViewId, + ); + if (!exists) { + this.sharedSavedViews.unshift({ + workspaceId: membership.workspaceId, + savedViewId, + sharedByUserId: actorUserId, + sharedAt: new Date().toISOString(), + }); + } + return { + status: exists ? 'exists' : 'added', + workspace: (await this.buildWorkspaceForUser(actorUserId))!, + }; + } + + async shareCase( + actorUserId: string, + caseId: string, + ): Promise< + | { status: 'added' | 'exists'; workspace: TeamWorkspace } + | 'workspace_not_found' + | 'case_not_found' + > { + const membership = this.membershipByUserId.get(actorUserId); + if (!membership) return 'workspace_not_found'; + if (!(await this.casesRepo.caseExists(caseId))) return 'case_not_found'; + + const exists = this.sharedCases.some( + (item) => item.workspaceId === membership.workspaceId && item.caseId === caseId, + ); + if (!exists) { + this.sharedCases.unshift({ + workspaceId: membership.workspaceId, + caseId, + sharedByUserId: actorUserId, + sharedAt: new Date().toISOString(), + }); + } + return { + status: exists ? 'exists' : 'added', + workspace: (await this.buildWorkspaceForUser(actorUserId))!, + }; + } + + private getPendingInvitesForEmail(email: string): TeamWorkspaceInvite[] { + return [...this.invites.values()] + .filter((invite) => invite.email === email.toLowerCase() && invite.status === 'pending') + .sort((a, b) => b.createdAt.localeCompare(a.createdAt)); + } + + private async reconcilePendingInvitesForEmail(email: string): Promise { + const workspaceIds = new Set( + [...this.invites.values()] + .filter((invite) => invite.email === email.toLowerCase() && invite.status === 'pending') + .map((invite) => invite.workspaceId), + ); + for (const workspaceId of workspaceIds) { + await this.reconcileWorkspaceBillingState(workspaceId); + } + } + + private getCompensationSummary(workspaceId: string): WorkspaceCompensationSummary { + const revokedInviteCount = [...this.invites.values()].filter( + (invite) => + invite.workspaceId === workspaceId && + invite.status === 'revoked' && + invite.revokedReason != null && + COMPENSATION_REASONS.has(invite.revokedReason), + ).length; + return { revokedInviteCount }; + } + + private getRecentBillingEvents(workspaceId: string): TeamWorkspaceBillingEvent[] { + return this.billingEvents + .filter((event) => event.workspaceId === workspaceId) + .slice(0, 6) + .map(({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event); + } + + private getRecentRecoveryOutreach( + workspaceId: string, + audience?: TeamWorkspaceRecoveryOutreachAudience, + ): TeamWorkspaceRecoveryOutreach[] { + return this.recoveryOutreach + .filter( + (event) => + event.workspaceId === workspaceId && (audience == null || event.audience === audience), + ) + .slice(0, 6) + .map(({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event); + } + + private getRecentMemberRecoveryNotifications( + workspaceId: string, + ): TeamWorkspaceMemberRecoveryNotification[] { + return this.memberRecoveryNotifications + .filter((notification) => notification.workspaceId === workspaceId) + .slice(0, 6) + .map( + ({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...notification }) => + notification, + ); + } + + private ensurePendingRecoveryOutreach( + workspaceId: string, + workspaceName: string, + descriptor: WorkspaceRecoveryOutreachDescriptor | null, + retryIntervalHours: number, + ): number { + if (!descriptor) return 0; + const exists = this.recoveryOutreach.some( + (event) => + event.workspaceId === workspaceId && + event.audience === descriptor.audience && + (event.status === 'pending' || + (event.status === 'handed_off' && + event.nextAttemptAt != null && + new Date(event.nextAttemptAt).getTime() > Date.now())), + ); + if (exists) return 0; + this.recoveryOutreach.unshift({ + id: randomUUID(), + workspaceId, + workspaceName, + audience: descriptor.audience, + channel: descriptor.channel, + status: 'pending', + title: descriptor.title, + detail: descriptor.detail, + actionCode: descriptor.actionCode, + attemptCount: 1, + createdAt: new Date().toISOString(), + lastAttemptAt: new Date().toISOString(), + nextAttemptAt: nextRecoveryOutreachAttemptAt(new Date().toISOString(), retryIntervalHours), + emailAttemptCount: 0, + lastEmailAttemptAt: null, + nextEmailAttemptAt: new Date().toISOString(), + lastEmailDeliveredAt: null, + lastEmailMessageId: null, + lastEmailError: null, + exportCount: 0, + lastExportedAt: null, + crmSyncCount: 0, + lastCrmSyncAttemptAt: null, + nextCrmSyncAttemptAt: new Date().toISOString(), + lastCrmSyncedAt: null, + crmExternalRecordId: null, + lastCrmSyncStatusCode: null, + lastCrmSyncError: null, + webhookAttemptCount: 0, + lastWebhookAttemptAt: null, + nextWebhookAttemptAt: new Date().toISOString(), + webhookExhaustedAt: null, + webhookDeliveryCount: 0, + lastWebhookDeliveredAt: null, + lastWebhookStatusCode: null, + lastWebhookError: null, + slackAlertCount: 0, + lastSlackAlertAttemptAt: null, + lastSlackAlertedAt: null, + lastSlackAlertStatusCode: null, + lastSlackAlertError: null, + handoffChannel: null, + handoffNote: null, + handoffAt: null, + resolvedAt: null, + }); + if (this.recoveryOutreach.length > 64) { + this.recoveryOutreach.length = 64; + } + return 1; + } + + private retryPendingRecoveryOutreach( + workspaceId: string, + descriptor: WorkspaceRecoveryOutreachDescriptor | null, + retryIntervalHours: number, + ): number { + if (!descriptor) return 0; + const now = new Date().toISOString(); + for (let index = 0; index < this.recoveryOutreach.length; index += 1) { + const event = this.recoveryOutreach[index]!; + if (event.workspaceId !== workspaceId || event.audience !== descriptor.audience) continue; + if (event.status !== 'pending') return 0; + const dueAt = nextRecoveryOutreachAttemptAt(event.lastAttemptAt, retryIntervalHours); + if (new Date(dueAt).getTime() > Date.now()) return 0; + this.recoveryOutreach[index] = { + ...event, + channel: descriptor.channel, + status: 'pending', + title: descriptor.title, + detail: descriptor.detail, + actionCode: descriptor.actionCode, + attemptCount: event.attemptCount + 1, + lastAttemptAt: now, + nextAttemptAt: nextRecoveryOutreachAttemptAt(now, retryIntervalHours), + emailAttemptCount: 0, + lastEmailAttemptAt: null, + nextEmailAttemptAt: now, + lastEmailDeliveredAt: null, + lastEmailMessageId: null, + lastEmailError: null, + exportCount: 0, + lastExportedAt: null, + crmSyncCount: 0, + lastCrmSyncAttemptAt: null, + nextCrmSyncAttemptAt: now, + lastCrmSyncedAt: null, + crmExternalRecordId: null, + lastCrmSyncStatusCode: null, + lastCrmSyncError: null, + webhookAttemptCount: 0, + lastWebhookAttemptAt: null, + nextWebhookAttemptAt: now, + webhookExhaustedAt: null, + webhookDeliveryCount: 0, + lastWebhookDeliveredAt: null, + lastWebhookStatusCode: null, + lastWebhookError: null, + slackAlertCount: 0, + lastSlackAlertAttemptAt: null, + lastSlackAlertedAt: null, + lastSlackAlertStatusCode: null, + lastSlackAlertError: null, + handoffChannel: null, + handoffNote: null, + handoffAt: null, + }; + return 1; + } + return 0; + } + + private resolvePendingRecoveryOutreach( + workspaceId: string, + audience?: TeamWorkspaceRecoveryOutreachAudience, + ): number { + let resolved = 0; + const resolvedAt = new Date().toISOString(); + for (let index = 0; index < this.recoveryOutreach.length; index += 1) { + const event = this.recoveryOutreach[index]!; + if (event.workspaceId !== workspaceId || event.status === 'resolved') continue; + if (audience != null && event.audience !== audience) continue; + this.recoveryOutreach[index] = { + ...event, + status: 'resolved', + nextAttemptAt: null, + nextEmailAttemptAt: null, + nextWebhookAttemptAt: null, + webhookExhaustedAt: null, + lastSlackAlertError: null, + resolvedAt, + }; + resolved += 1; + } + return resolved; + } + + private syncPendingMemberRecoveryNotifications( + workspaceId: string, + workspaceName: string, + members: Array<{ userId: string; email: string; displayName: string | null }>, + descriptor: WorkspaceMemberRecoveryNotificationDescriptor | null, + ) { + const resolvedAt = new Date().toISOString(); + const activeUserIds = descriptor + ? new Set(members.map((member) => member.userId)) + : new Set(); + for (let index = 0; index < this.memberRecoveryNotifications.length; index += 1) { + const notification = this.memberRecoveryNotifications[index]!; + if (notification.workspaceId !== workspaceId || notification.status !== 'pending') continue; + const member = members.find((item) => item.userId === notification.userId) ?? null; + if (!descriptor || !activeUserIds.has(notification.userId) || !member) { + this.memberRecoveryNotifications[index] = { + ...notification, + status: 'resolved', + nextEmailAttemptAt: null, + resolvedAt, + }; + continue; + } + this.memberRecoveryNotifications[index] = { + ...notification, + workspaceName, + email: member.email, + displayName: member.displayName, + title: descriptor.title, + detail: descriptor.detail, + }; + } + if (!descriptor) return; + for (const member of members) { + const exists = this.memberRecoveryNotifications.some( + (notification) => + notification.workspaceId === workspaceId && + notification.userId === member.userId && + notification.status === 'pending', + ); + if (exists) continue; + this.memberRecoveryNotifications.unshift({ + id: randomUUID(), + workspaceId, + workspaceName, + userId: member.userId, + email: member.email, + displayName: member.displayName, + status: 'pending', + title: descriptor.title, + detail: descriptor.detail, + emailAttemptCount: 0, + createdAt: resolvedAt, + lastEmailAttemptAt: null, + nextEmailAttemptAt: resolvedAt, + lastEmailDeliveredAt: null, + lastEmailMessageId: null, + lastEmailError: null, + resolvedAt: null, + }); + } + if (this.memberRecoveryNotifications.length > 128) { + this.memberRecoveryNotifications.length = 128; + } + } + + private recordBillingEvents( + workspaceId: string, + workspaceName: string, + descriptors: WorkspaceBillingEventDescriptor[], + ) { + const createdAt = new Date().toISOString(); + for (const descriptor of descriptors) { + this.billingEvents.unshift({ + id: randomUUID(), + workspaceId, + workspaceName, + ...descriptor, + createdAt, + }); + } + if (this.billingEvents.length > 64) { + this.billingEvents.length = 64; + } + } + + private async reconcileWorkspaceBillingState( + workspaceId: string, + ): Promise { + const workspace = this.workspaces.get(workspaceId); + if (!workspace) return { revokedInviteCount: 0, restoredInviteCount: 0 }; + const owner = await this.usersRepo.getById(workspace.ownerUserId); + if (!owner) return { revokedInviteCount: 0, restoredInviteCount: 0 }; + + const seatsUsed = [...this.membershipByUserId.values()].filter( + (item) => item.workspaceId === workspaceId, + ).length; + const pendingInvites = [...this.invites.values()] + .filter((invite) => invite.workspaceId === workspaceId && invite.status === 'pending') + .sort((a, b) => a.createdAt.localeCompare(b.createdAt)); + + const seatLimit = resolveTeamWorkspaceSeatLimit({ + subscription: owner.subscription, + billingStatus: owner.billingStatus, + }); + const allowedPendingInvites = Math.max(0, seatLimit - seatsUsed); + const revokeReason: WorkspaceInviteRevocationReason = + seatLimit === 0 ? 'billing_inactive' : 'seat_limit_reduced'; + const invitesToRevoke = pendingInvites.slice(allowedPendingInvites); + const revokedAt = new Date().toISOString(); + if (invitesToRevoke.length > 0) { + for (const invite of invitesToRevoke) { + this.invites.set(invite.id, { + ...invite, + status: 'revoked', + revokedReason: revokeReason, + revokedAt, + acceptedAt: null, + }); + } + } + const remainingPendingInvites = Math.max(0, pendingInvites.length - invitesToRevoke.length); + const recoverableInvites = [...this.invites.values()] + .filter( + (invite) => + invite.workspaceId === workspaceId && + invite.status === 'revoked' && + invite.revokedReason != null && + COMPENSATION_REASONS.has(invite.revokedReason), + ) + .sort((a, b) => { + const revokedAtCompare = (a.revokedAt ?? a.createdAt).localeCompare( + b.revokedAt ?? b.createdAt, + ); + return revokedAtCompare !== 0 ? revokedAtCompare : a.createdAt.localeCompare(b.createdAt); + }); + const invitesToRestore = + seatLimit > 0 + ? recoverableInvites.slice(0, Math.max(0, allowedPendingInvites - remainingPendingInvites)) + : []; + if (invitesToRestore.length > 0) { + for (const invite of invitesToRestore) { + this.invites.set(invite.id, { + ...invite, + status: 'pending', + revokedReason: null, + revokedAt: null, + acceptedAt: null, + }); + } + } + + const compensation = this.getCompensationSummary(workspaceId); + const nextBilling = buildWorkspaceBilling({ + owner, + seatsUsed, + pendingInviteCount: remainingPendingInvites + invitesToRestore.length, + compensation, + }); + const previousSnapshot = this.billingStateByWorkspaceId.get(workspaceId) ?? null; + const nextSnapshot = billingSnapshotFromBilling(nextBilling); + const descriptors = buildBillingEventDescriptors({ + previous: previousSnapshot, + next: nextSnapshot, + revokedInviteCount: invitesToRevoke.length, + restoredInviteCount: invitesToRestore.length, + }); + this.billingStateByWorkspaceId.set(workspaceId, nextSnapshot); + if (descriptors.length > 0) { + this.recordBillingEvents(workspaceId, workspace.name, descriptors); + } + return { + revokedInviteCount: invitesToRevoke.length, + restoredInviteCount: invitesToRestore.length, + }; + } + + private async buildWorkspaceAccessForUser(user: UserProfile): Promise { + const membership = this.membershipByUserId.get(user.id); + if (!membership) return null; + const workspace = this.workspaces.get(membership.workspaceId); + if (!workspace) return null; + await this.reconcileWorkspaceBillingState(workspace.id); + const owner = await this.usersRepo.getById(workspace.ownerUserId); + if (!owner) return null; + const seatsUsed = [...this.membershipByUserId.values()].filter( + (item) => item.workspaceId === workspace.id, + ).length; + const pendingInviteCount = [...this.invites.values()].filter( + (invite) => invite.workspaceId === workspace.id && invite.status === 'pending', + ).length; + + return buildWorkspaceAccess({ + user, + context: { + workspaceId: workspace.id, + workspaceName: workspace.name, + role: membership.role, + owner, + seatsUsed, + pendingInviteCount, + }, + }); + } + + private async buildWorkspaceForUser(userId: string): Promise { + const membership = this.membershipByUserId.get(userId); + if (!membership) return null; + const workspace = this.workspaces.get(membership.workspaceId); + if (!workspace) return null; + await this.reconcileWorkspaceBillingState(workspace.id); + + const memberEntries = [...this.membershipByUserId.entries()].filter( + ([, item]) => item.workspaceId === workspace.id, + ); + const members = ( + await Promise.all( + memberEntries.map(async ([memberUserId, item]) => { + const user = await this.usersRepo.getById(memberUserId); + if (!user) return null; + return { + userId: user.id, + email: user.email, + displayName: user.displayName, + role: item.role, + joinedAt: item.joinedAt, + } satisfies TeamWorkspaceMember; + }), + ) + ).filter((item): item is TeamWorkspaceMember => item !== null); + + const invites = [...this.invites.values()] + .filter((invite) => invite.workspaceId === workspace.id && invite.status === 'pending') + .sort((a, b) => b.createdAt.localeCompare(a.createdAt)); + + const sharedSavedViews = ( + await Promise.all( + this.sharedSavedViews + .filter((item) => item.workspaceId === workspace.id) + .map(async (entry) => { + const [savedView, sharedBy] = await Promise.all([ + this.savedViewsRepo.getById(entry.sharedByUserId, entry.savedViewId), + this.usersRepo.getById(entry.sharedByUserId), + ]); + if (!savedView) return null; + return { + ...savedView, + sourceSavedViewId: entry.savedViewId, + sharedByUserId: entry.sharedByUserId, + sharedByName: sharedBy?.displayName ?? sharedBy?.email ?? null, + sharedAt: entry.sharedAt, + } satisfies TeamWorkspaceSharedSavedView; + }), + ) + ).filter((item): item is TeamWorkspaceSharedSavedView => item !== null); + + const caseEntries = this.sharedCases.filter((item) => item.workspaceId === workspace.id); + const cases = await this.casesRepo.getByIds(caseEntries.map((item) => item.caseId)); + const casesById = new Map(cases.map((item) => [item.id, item])); + const sharedCases = ( + await Promise.all( + caseEntries.map(async (entry) => { + const item = casesById.get(entry.caseId); + if (!item) return null; + const sharedBy = await this.usersRepo.getById(entry.sharedByUserId); + return { + id: item.id, + slug: item.slug, + companyName: item.companyName, + industry: item.industry, + country: item.country, + closedYear: item.closedYear, + summary: item.summary, + businessModelKey: item.businessModelKey, + foundedYear: item.foundedYear, + totalFundingUsd: item.totalFundingUsd, + primaryFailureReasonKey: item.primaryFailureReasonKey, + sharedByUserId: entry.sharedByUserId, + sharedByName: sharedBy?.displayName ?? sharedBy?.email ?? null, + sharedAt: entry.sharedAt, + } satisfies TeamWorkspaceSharedCase; + }), + ) + ).filter((item): item is TeamWorkspaceSharedCase => item !== null); + + const owner = await this.usersRepo.getById(workspace.ownerUserId); + if (!owner) return null; + const compensation = this.getCompensationSummary(workspace.id); + + const recentBillingEvents = this.getRecentBillingEvents(workspace.id); + const recentRecoveryOutreach = + membership.role === 'owner' ? this.getRecentRecoveryOutreach(workspace.id, 'owner') : []; + const recentMemberRecoveryNotifications = + membership.role === 'owner' ? this.getRecentMemberRecoveryNotifications(workspace.id) : []; + + return { + id: workspace.id, + name: workspace.name, + role: membership.role, + canManageMembers: membership.role === 'owner' || membership.role === 'admin', + memberCount: members.length, + sharedSavedViewCount: sharedSavedViews.length, + sharedCaseCount: sharedCases.length, + createdAt: workspace.createdAt, + billing: buildWorkspaceBilling({ + owner, + seatsUsed: members.length, + pendingInviteCount: invites.length, + compensation, + viewerRole: membership.role, + recentBillingEvents, + }), + recentBillingEvents, + recentRecoveryOutreach, + recentMemberRecoveryNotifications, + members, + invites, + sharedSavedViews, + sharedCases, + }; + } +} diff --git a/services/api/src/repositories/teamWorkspaces/pgRepository.ts b/services/api/src/repositories/teamWorkspaces/pgRepository.ts new file mode 100644 index 0000000..519f03b --- /dev/null +++ b/services/api/src/repositories/teamWorkspaces/pgRepository.ts @@ -0,0 +1,2679 @@ +import { DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS } from './contract.js'; +import type { + AdminActionableWorkspace, + AdminBillingEvent, + AdminRecoveryAction, + AdminRecoveryOutreach, + ManageRole, + PendingMemberRecoveryNotificationTarget, + PgWorkspaceAdminRow, + PgWorkspaceBillingEventRow, + PgWorkspaceBillingStateRow, + PgWorkspaceCaseRow, + PgWorkspaceInviteRow, + PgWorkspaceMemberRecoveryNotificationRow, + PgWorkspaceMemberRow, + PgWorkspaceMembershipRow, + PgWorkspaceRecoveryOutreachRow, + PgWorkspaceRecoveryPlaybookRunRow, + PgWorkspaceSavedViewRow, + TeamWorkspacesRepository, + WorkspaceBillingEventDescriptor, + WorkspaceBillingSnapshot, + WorkspaceCompensationSummary, + WorkspaceInviteRevocationReason, + WorkspaceMemberRecoveryNotificationDescriptor, + WorkspaceMembershipRecord, + WorkspaceReconcileResult, + WorkspaceRecoveryOutreachDescriptor, +} from './contract.js'; +import { + accumulateRecoveryActions, + applyWorkspaceAccess, + buildBillingEventDescriptors, + buildBillingWarnings, + buildMemberRecoveryNotificationDescriptor, + buildRecoveryActions, + buildRecoveryOutreachDescriptors, + buildWorkspaceAccess, + buildWorkspaceBilling, + hasOwnerRecoveryEngagement, + nextRecoveryOutreachAttemptAt, + rowToBillingEvent, + rowToInvite, + rowToMember, + rowToMemberRecoveryNotification, + rowToRecoveryOutreach, + rowToRecoveryPlaybookRun, + rowToSharedCase, + rowToSharedSavedView, + toAdminActionableWorkspace, + toIso, +} from './helpers.js'; +import type { Pool } from 'pg'; +import type { TeamWorkspaceAdminMetrics } from '@sg/shared/schemas/adminStats'; +import type { UserProfile, WorkspaceAccess } from '@sg/shared/schemas/auth'; +import { + resolveTeamWorkspaceSeatLimit, + type BillingStatus, + type SubscriptionTier, +} from '@sg/shared/billing'; +import type { + TeamWorkspaceBillingRecoveryActionCode, + TeamWorkspaceRecoveryOutreachAudience, + TeamWorkspaceRecoveryOutreachHandoffChannel, + TeamWorkspaceRecoveryPlaybookRun, + TeamWorkspaceRecoveryPlaybookStepName, + TeamWorkspaceRecoveryPlaybookSteps, + TeamWorkspaceRecoveryOutreachStatus, + TeamWorkspace, + TeamWorkspaceContextResponse, + TeamWorkspaceInvite, + TeamWorkspaceMemberRecoveryNotification, +} from '@sg/shared/schemas/teamWorkspace'; +import type { BillingFunnelRepository } from '../billingFunnelRepository.js'; +import { config } from '../../config/index.js'; + +export class PgTeamWorkspacesRepository implements TeamWorkspacesRepository { + constructor( + private readonly pool: Pool, + private readonly billingFunnelRepo: BillingFunnelRepository, + ) {} + + async resolveEffectiveUserProfile(user: UserProfile): Promise { + return applyWorkspaceAccess(user, await this.buildWorkspaceAccessForUser(user)); + } + + async getContextForUser(user: UserProfile): Promise { + await this.reconcileBillingForUser(user.id); + await this.reconcilePendingInvitesForEmail(user.email); + const workspace = await this.buildWorkspaceForUser(user.id); + return { + canCreateWorkspace: user.entitlements.canUseTeamWorkspace && workspace === null, + hasWorkspace: workspace !== null, + workspace, + pendingInvites: workspace ? [] : await this.getPendingInvitesForEmail(user.email), + }; + } + + async reconcileBillingForUser( + userId: string, + ): Promise<{ workspaceIds: string[]; revokedInviteCount: number }> { + const { rows } = await this.pool.query<{ id: string }>( + `SELECT id + FROM team_workspaces + WHERE owner_user_id = $1`, + [userId], + ); + let revokedInviteCount = 0; + for (const row of rows) { + const result = await this.reconcileWorkspaceBillingState(row.id); + revokedInviteCount += result.revokedInviteCount; + } + return { + workspaceIds: rows.map((row) => row.id), + revokedInviteCount, + }; + } + + async reconcileAllBilling(): Promise<{ + workspaceCount: number; + revokedInviteCount: number; + restoredInviteCount: number; + }> { + const { rows } = await this.pool.query<{ id: string }>( + `SELECT id + FROM team_workspaces`, + ); + let revokedInviteCount = 0; + let restoredInviteCount = 0; + for (const row of rows) { + const result = await this.reconcileWorkspaceBillingState(row.id); + revokedInviteCount += result.revokedInviteCount; + restoredInviteCount += result.restoredInviteCount; + } + return { + workspaceCount: rows.length, + revokedInviteCount, + restoredInviteCount, + }; + } + + async runRecoveryOutreachAutomation(options?: { retryIntervalHours?: number }): Promise<{ + workspaceCount: number; + ownerOutreachCreated: number; + adminOutreachCreated: number; + retriedOutreachCount: number; + resolvedOutreachCount: number; + }> { + const retryIntervalHours = Math.max( + 0, + options?.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + await this.reconcileAllWorkspaces(); + const { rows } = await this.pool.query( + `WITH member_counts AS ( + SELECT workspace_id, COUNT(*)::int AS member_count + FROM team_workspace_members + GROUP BY workspace_id + ), + invite_counts AS ( + SELECT workspace_id, COUNT(*)::int AS pending_invite_count + FROM team_workspace_invites + WHERE status = 'pending' + GROUP BY workspace_id + ), + compensation_counts AS ( + SELECT workspace_id, COUNT(*)::int AS revoked_invite_count + FROM team_workspace_invites + WHERE status = 'revoked' + AND revoked_reason IN ('billing_inactive', 'seat_limit_reduced') + GROUP BY workspace_id + ) + SELECT + w.id AS workspace_id, + w.name AS workspace_name, + owner.id AS owner_user_id, + owner.email AS owner_email, + owner.display_name AS owner_display_name, + owner.subscription, + owner.billing_status, + owner.cancel_at_period_end, + COALESCE(m.member_count, 0)::text AS member_count, + COALESCE(i.pending_invite_count, 0)::text AS pending_invite_count, + COALESCE(c.revoked_invite_count, 0)::text AS revoked_invite_count + FROM team_workspaces w + JOIN users owner ON owner.id = w.owner_user_id + LEFT JOIN member_counts m ON m.workspace_id = w.id + LEFT JOIN invite_counts i ON i.workspace_id = w.id + LEFT JOIN compensation_counts c ON c.workspace_id = w.id`, + ); + const latestCommercialTouches = await this.billingFunnelRepo.getLatestEventsByUserIds( + rows.map((row) => row.owner_user_id), + ); + const latestCommercialTouchByOwnerId = new Map( + latestCommercialTouches.map((touch) => [touch.userId, touch]), + ); + let ownerOutreachCreated = 0; + let adminOutreachCreated = 0; + let retriedOutreachCount = 0; + let resolvedOutreachCount = 0; + + for (const row of rows) { + const recentBillingEvents = (await this.getRecentBillingEvents(row.workspace_id)).map( + ({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event, + ); + const workspaceSeatsUsed = Number(row.member_count); + const workspacePendingInvites = Number(row.pending_invite_count); + const billing = buildWorkspaceBilling({ + owner: { + id: row.owner_user_id, + email: row.owner_email, + displayName: row.owner_display_name, + subscription: row.subscription, + billingStatus: row.billing_status, + currentPeriodEnd: null, + cancelAtPeriodEnd: row.cancel_at_period_end, + }, + seatsUsed: workspaceSeatsUsed, + pendingInviteCount: workspacePendingInvites, + compensation: { + revokedInviteCount: Number(row.revoked_invite_count), + }, + viewerRole: 'owner', + recentBillingEvents, + }); + const descriptors = buildRecoveryOutreachDescriptors({ + workspaceName: row.workspace_name, + billing, + }); + const memberDescriptor = buildMemberRecoveryNotificationDescriptor({ + workspaceName: row.workspace_name, + ownerDisplayName: row.owner_display_name, + ownerEmail: row.owner_email, + billing, + }); + const fallbackMembersRes = + memberDescriptor == null + ? { rows: [] as Array<{ user_id: string; email: string; display_name: string | null }> } + : await this.pool.query<{ + user_id: string; + email: string; + display_name: string | null; + }>( + `SELECT u.id AS user_id, u.email, u.display_name + FROM team_workspace_members m + JOIN users u ON u.id = m.user_id + WHERE m.workspace_id = $1 + AND m.role <> 'owner'`, + [row.workspace_id], + ); + const ownerDescriptor = descriptors.find((item) => item.audience === 'owner') ?? null; + const adminDescriptor = descriptors.find((item) => item.audience === 'admin') ?? null; + const ownerTouch = latestCommercialTouchByOwnerId.get(row.owner_user_id); + if (hasOwnerRecoveryEngagement(ownerTouch)) { + resolvedOutreachCount += await this.resolvePendingRecoveryOutreach( + row.workspace_id, + 'owner', + ); + } else { + ownerOutreachCreated += await this.ensurePendingRecoveryOutreach( + row.workspace_id, + ownerDescriptor, + retryIntervalHours, + ); + retriedOutreachCount += await this.retryPendingRecoveryOutreach( + row.workspace_id, + ownerDescriptor, + retryIntervalHours, + ); + } + adminOutreachCreated += await this.ensurePendingRecoveryOutreach( + row.workspace_id, + adminDescriptor, + retryIntervalHours, + ); + retriedOutreachCount += await this.retryPendingRecoveryOutreach( + row.workspace_id, + adminDescriptor, + retryIntervalHours, + ); + if (!ownerDescriptor) { + resolvedOutreachCount += await this.resolvePendingRecoveryOutreach( + row.workspace_id, + 'owner', + ); + } + if (!adminDescriptor) { + resolvedOutreachCount += await this.resolvePendingRecoveryOutreach( + row.workspace_id, + 'admin', + ); + } + await this.syncPendingMemberRecoveryNotifications( + row.workspace_id, + row.workspace_name, + fallbackMembersRes.rows.map((member) => ({ + userId: member.user_id, + email: member.email, + displayName: member.display_name, + })), + memberDescriptor, + ); + } + + return { + workspaceCount: rows.length, + ownerOutreachCreated, + adminOutreachCreated, + retriedOutreachCount, + resolvedOutreachCount, + }; + } + + async getAdminMetrics(): Promise { + await this.reconcileAllWorkspaces(); + const { rows } = await this.pool.query( + `WITH member_counts AS ( + SELECT workspace_id, COUNT(*)::int AS member_count + FROM team_workspace_members + GROUP BY workspace_id + ), + invite_counts AS ( + SELECT workspace_id, COUNT(*)::int AS pending_invite_count + FROM team_workspace_invites + WHERE status = 'pending' + GROUP BY workspace_id + ), + compensation_counts AS ( + SELECT workspace_id, COUNT(*)::int AS revoked_invite_count + FROM team_workspace_invites + WHERE status = 'revoked' + AND revoked_reason IN ('billing_inactive', 'seat_limit_reduced') + GROUP BY workspace_id + ) + SELECT + w.id AS workspace_id, + w.name AS workspace_name, + owner.id AS owner_user_id, + owner.email AS owner_email, + owner.display_name AS owner_display_name, + owner.subscription, + owner.billing_status, + owner.cancel_at_period_end, + COALESCE(m.member_count, 0)::text AS member_count, + COALESCE(i.pending_invite_count, 0)::text AS pending_invite_count, + COALESCE(c.revoked_invite_count, 0)::text AS revoked_invite_count + FROM team_workspaces w + JOIN users owner ON owner.id = w.owner_user_id + LEFT JOIN member_counts m ON m.workspace_id = w.id + LEFT JOIN invite_counts i ON i.workspace_id = w.id + LEFT JOIN compensation_counts c ON c.workspace_id = w.id`, + ); + const latestBillingEventsRes = + rows.length === 0 + ? { rows: [] as PgWorkspaceBillingEventRow[] } + : await this.pool.query( + `SELECT DISTINCT ON (e.workspace_id) + e.id, + e.workspace_id, + w.name AS workspace_name, + e.event_type, + e.severity, + e.title, + e.detail, + e.event_count, + e.created_at + FROM team_workspace_billing_events e + JOIN team_workspaces w ON w.id = e.workspace_id + WHERE e.workspace_id = ANY($1::uuid[]) + ORDER BY e.workspace_id, e.created_at DESC`, + [rows.map((row) => row.workspace_id)], + ); + const latestBillingEventsByWorkspaceId = new Map( + latestBillingEventsRes.rows.map((row) => [row.workspace_id, rowToBillingEvent(row)]), + ); + const latestRecoveryOutreachByWorkspaceId = await this.getLatestRecoveryOutreachByWorkspaceIds( + rows.map((row) => row.workspace_id), + ); + const recoveryOutreachRecent = await this.getRecentRecoveryOutreach(); + const memberRecoveryNotificationCountsRes = await this.pool.query<{ + email_bucket: + | 'pending_member_email' + | 'retrying_member_email' + | 'delivered_member_email' + | 'failed_member_email' + | 'member_email_na'; + count: string; + }>( + `SELECT + CASE + WHEN status = 'pending' + AND last_email_delivered_at IS NOT NULL THEN 'delivered_member_email' + WHEN status = 'pending' + AND last_email_error IS NOT NULL + AND next_email_attempt_at IS NOT NULL THEN 'retrying_member_email' + WHEN status = 'pending' + AND last_email_error IS NOT NULL THEN 'failed_member_email' + WHEN status = 'pending' THEN 'pending_member_email' + ELSE 'member_email_na' + END AS email_bucket, + COUNT(*)::text AS count + FROM team_workspace_member_recovery_notifications + GROUP BY email_bucket`, + ); + const memberRecoverySummaryRes = + rows.length === 0 + ? { + rows: [] as Array<{ + workspace_id: string; + pending_count: string; + retrying_count: string; + delivered_count: string; + failed_count: string; + next_email_attempt_at: Date | string | null; + last_email_delivered_at: Date | string | null; + last_email_error: string | null; + }>, + } + : await this.pool.query<{ + workspace_id: string; + pending_count: string; + retrying_count: string; + delivered_count: string; + failed_count: string; + next_email_attempt_at: Date | string | null; + last_email_delivered_at: Date | string | null; + last_email_error: string | null; + }>( + `SELECT + workspace_id, + COUNT(*) FILTER ( + WHERE status = 'pending' + AND last_email_delivered_at IS NULL + AND last_email_error IS NULL + )::text AS pending_count, + COUNT(*) FILTER ( + WHERE status = 'pending' + AND last_email_error IS NOT NULL + AND next_email_attempt_at IS NOT NULL + )::text AS retrying_count, + COUNT(*) FILTER ( + WHERE status = 'pending' + AND last_email_delivered_at IS NOT NULL + )::text AS delivered_count, + COUNT(*) FILTER ( + WHERE status = 'pending' + AND last_email_error IS NOT NULL + AND next_email_attempt_at IS NULL + )::text AS failed_count, + MIN(next_email_attempt_at) FILTER ( + WHERE status = 'pending' + AND next_email_attempt_at IS NOT NULL + ) AS next_email_attempt_at, + MAX(last_email_delivered_at) FILTER ( + WHERE last_email_delivered_at IS NOT NULL + ) AS last_email_delivered_at, + ( + ARRAY_AGG(last_email_error ORDER BY COALESCE(last_email_attempt_at, created_at) DESC) + FILTER (WHERE last_email_error IS NOT NULL) + )[1] AS last_email_error + FROM team_workspace_member_recovery_notifications + WHERE workspace_id = ANY($1::uuid[]) + GROUP BY workspace_id`, + [rows.map((row) => row.workspace_id)], + ); + const memberRecoverySummaryByWorkspaceId = new Map( + memberRecoverySummaryRes.rows.map((row) => [ + row.workspace_id, + { + pendingCount: Number(row.pending_count), + retryingCount: Number(row.retrying_count), + deliveredCount: Number(row.delivered_count), + failedCount: Number(row.failed_count), + nextEmailAttemptAt: row.next_email_attempt_at ? toIso(row.next_email_attempt_at) : null, + lastEmailDeliveredAt: row.last_email_delivered_at + ? toIso(row.last_email_delivered_at) + : null, + lastEmailError: row.last_email_error, + }, + ]), + ); + const recoveryOutreachCountsRes = await this.pool.query<{ + audience: TeamWorkspaceRecoveryOutreachAudience; + status: TeamWorkspaceRecoveryOutreachStatus; + attempt_bucket: 'single' | 'multi'; + email_bucket: + | 'pending_email' + | 'retrying_email' + | 'delivered_email' + | 'failed_email' + | 'email_na'; + export_bucket: 'pending_export' | 'exported_or_na'; + crm_bucket: + | 'pending_crm_sync' + | 'retrying_crm_sync' + | 'synced_crm' + | 'failed_crm_sync' + | 'crm_na'; + webhook_bucket: + | 'pending_webhook' + | 'retrying_webhook' + | 'dead_lettered_webhook' + | 'delivered_webhook' + | 'failed_webhook' + | 'webhook_na'; + slack_bucket: 'pending_slack_alert' | 'alerted_slack' | 'failed_slack_alert' | 'slack_na'; + count: string; + }>( + `SELECT + audience, + status, + CASE WHEN attempt_count > 1 THEN 'multi' ELSE 'single' END AS attempt_bucket, + CASE + WHEN audience = 'owner' + AND status = 'pending' + AND last_email_delivered_at IS NOT NULL THEN 'delivered_email' + WHEN audience = 'owner' + AND status = 'pending' + AND last_email_error IS NOT NULL + AND next_email_attempt_at IS NOT NULL THEN 'retrying_email' + WHEN audience = 'owner' + AND status = 'pending' + AND last_email_error IS NOT NULL THEN 'failed_email' + WHEN audience = 'owner' + AND status = 'pending' THEN 'pending_email' + ELSE 'email_na' + END AS email_bucket, + CASE + WHEN status = 'handed_off' AND export_count = 0 THEN 'pending_export' + ELSE 'exported_or_na' + END AS export_bucket, + CASE + WHEN status = 'handed_off' + AND handoff_channel = 'crm' + AND last_crm_synced_at IS NOT NULL THEN 'synced_crm' + WHEN status = 'handed_off' + AND handoff_channel = 'crm' + AND last_crm_sync_error IS NOT NULL + AND next_crm_sync_attempt_at IS NOT NULL THEN 'retrying_crm_sync' + WHEN status = 'handed_off' + AND handoff_channel = 'crm' + AND last_crm_sync_error IS NOT NULL THEN 'failed_crm_sync' + WHEN status = 'handed_off' + AND handoff_channel = 'crm' THEN 'pending_crm_sync' + ELSE 'crm_na' + END AS crm_bucket, + CASE + WHEN status = 'handed_off' AND webhook_delivery_count > 0 THEN 'delivered_webhook' + WHEN status = 'handed_off' AND webhook_exhausted_at IS NOT NULL THEN 'dead_lettered_webhook' + WHEN status = 'handed_off' + AND last_webhook_error IS NOT NULL + AND next_webhook_attempt_at IS NOT NULL THEN 'retrying_webhook' + WHEN status = 'handed_off' AND last_webhook_error IS NOT NULL THEN 'failed_webhook' + WHEN status = 'handed_off' THEN 'pending_webhook' + ELSE 'webhook_na' + END AS webhook_bucket, + CASE + WHEN status = 'handed_off' + AND webhook_exhausted_at IS NOT NULL + AND last_slack_alerted_at IS NOT NULL THEN 'alerted_slack' + WHEN status = 'handed_off' + AND webhook_exhausted_at IS NOT NULL + AND last_slack_alert_error IS NOT NULL THEN 'failed_slack_alert' + WHEN status = 'handed_off' + AND webhook_exhausted_at IS NOT NULL THEN 'pending_slack_alert' + ELSE 'slack_na' + END AS slack_bucket, + COUNT(*)::text AS count + FROM team_workspace_recovery_outreach_events + GROUP BY + audience, + status, + attempt_bucket, + email_bucket, + export_bucket, + crm_bucket, + webhook_bucket, + slack_bucket`, + ); + let pendingOwnerOutreach = 0; + let pendingAdminOutreach = 0; + let pendingEmail = 0; + let retryingEmail = 0; + let deliveredEmail = 0; + let failedEmail = 0; + let pendingMemberEmail = 0; + let retryingMemberEmail = 0; + let deliveredMemberEmail = 0; + let failedMemberEmail = 0; + let multiTouchPending = 0; + let pendingExport = 0; + let pendingCrmSync = 0; + let retryingCrmSync = 0; + let syncedCrm = 0; + let failedCrmSync = 0; + let pendingWebhook = 0; + let retryingWebhook = 0; + let deadLetteredWebhook = 0; + let pendingSlackAlert = 0; + let alertedSlack = 0; + let failedSlackAlert = 0; + let deliveredWebhook = 0; + let failedWebhook = 0; + let handedOffOutreach = 0; + let resolvedOutreach = 0; + for (const row of recoveryOutreachCountsRes.rows) { + const count = Number(row.count); + if (row.status === 'pending') { + if (row.attempt_bucket === 'multi') multiTouchPending += count; + if (row.audience === 'owner') pendingOwnerOutreach += count; + else pendingAdminOutreach += count; + if (row.email_bucket === 'pending_email') pendingEmail += count; + else if (row.email_bucket === 'retrying_email') retryingEmail += count; + else if (row.email_bucket === 'delivered_email') deliveredEmail += count; + else if (row.email_bucket === 'failed_email') failedEmail += count; + } else if (row.status === 'handed_off') { + if (row.export_bucket === 'pending_export') pendingExport += count; + if (row.crm_bucket === 'pending_crm_sync') pendingCrmSync += count; + else if (row.crm_bucket === 'retrying_crm_sync') retryingCrmSync += count; + else if (row.crm_bucket === 'synced_crm') syncedCrm += count; + else if (row.crm_bucket === 'failed_crm_sync') failedCrmSync += count; + if (row.webhook_bucket === 'pending_webhook') pendingWebhook += count; + else if (row.webhook_bucket === 'retrying_webhook') retryingWebhook += count; + else if (row.webhook_bucket === 'dead_lettered_webhook') deadLetteredWebhook += count; + else if (row.webhook_bucket === 'delivered_webhook') deliveredWebhook += count; + else if (row.webhook_bucket === 'failed_webhook') failedWebhook += count; + if (row.slack_bucket === 'pending_slack_alert') pendingSlackAlert += count; + else if (row.slack_bucket === 'alerted_slack') alertedSlack += count; + else if (row.slack_bucket === 'failed_slack_alert') failedSlackAlert += count; + handedOffOutreach += count; + } else { + resolvedOutreach += count; + } + } + for (const row of memberRecoveryNotificationCountsRes.rows) { + const count = Number(row.count); + if (row.email_bucket === 'pending_member_email') pendingMemberEmail += count; + else if (row.email_bucket === 'retrying_member_email') retryingMemberEmail += count; + else if (row.email_bucket === 'delivered_member_email') deliveredMemberEmail += count; + else if (row.email_bucket === 'failed_member_email') failedMemberEmail += count; + } + const recoveryPlaybookSummaryRes = await this.pool.query<{ + total_runs: string; + successful_runs: string; + failed_runs: string; + scheduled_runs: string; + manual_runs: string; + last_run_at: Date | string | null; + last_run_ok: boolean | null; + }>( + `SELECT + COUNT(*)::text AS total_runs, + COUNT(*) FILTER (WHERE ok = TRUE)::text AS successful_runs, + COUNT(*) FILTER (WHERE ok = FALSE)::text AS failed_runs, + COUNT(*) FILTER (WHERE trigger_type = 'scheduled')::text AS scheduled_runs, + COUNT(*) FILTER (WHERE trigger_type <> 'scheduled')::text AS manual_runs, + MAX(created_at) AS last_run_at, + ( + ARRAY_AGG(ok ORDER BY created_at DESC) + )[1] AS last_run_ok + FROM team_workspace_recovery_playbook_runs`, + ); + const recoveryPlaybookRunsRes = await this.pool.query( + `SELECT + id, + trigger_type, + retry_interval_hours, + force_run, + requested_steps, + rerun_of_run_id, + ok, + summary, + steps, + created_at + FROM team_workspace_recovery_playbook_runs + ORDER BY created_at DESC + LIMIT 8`, + ); + const recoveryPlaybookSummary = recoveryPlaybookSummaryRes.rows[0]; + + let activeWorkspaces = 0; + let atRiskWorkspaces = 0; + let workspacesRequiringAction = 0; + let fullWorkspaces = 0; + let totalSeatCapacity = 0; + let seatsUsed = 0; + let reservedSeats = 0; + let pendingInvites = 0; + let inheritedMembers = 0; + let revokedInvites = 0; + let fallbackMembers = 0; + const actionableWorkspaces: AdminActionableWorkspace[] = []; + const recoveryActionCounts = new Map< + TeamWorkspaceBillingRecoveryActionCode, + AdminRecoveryAction + >(); + + for (const row of rows) { + const workspaceSeatsUsed = Number(row.member_count); + const workspacePendingInvites = Number(row.pending_invite_count); + const seatLimit = resolveTeamWorkspaceSeatLimit({ + subscription: row.subscription, + billingStatus: row.billing_status, + }); + const workspaceReservedSeats = workspaceSeatsUsed + workspacePendingInvites; + const warningCodes = buildBillingWarnings({ + ownerBillingStatus: row.billing_status, + cancelAtPeriodEnd: row.cancel_at_period_end, + seatLimit, + reservedSeats: workspaceReservedSeats, + }); + + totalSeatCapacity += seatLimit; + seatsUsed += workspaceSeatsUsed; + reservedSeats += workspaceReservedSeats; + pendingInvites += workspacePendingInvites; + revokedInvites += Number(row.revoked_invite_count); + const workspaceFallbackMembers = seatLimit === 0 ? Math.max(0, workspaceSeatsUsed - 1) : 0; + fallbackMembers += workspaceFallbackMembers; + const latestOutreach = latestRecoveryOutreachByWorkspaceId.get(row.workspace_id) ?? null; + const memberRecoveryNotifications = + memberRecoverySummaryByWorkspaceId.get(row.workspace_id) ?? null; + const recommendedActions = buildRecoveryActions({ + subscription: row.subscription, + billingStatus: row.billing_status, + warningCodes, + seatLimit, + seatsRemaining: Math.max(0, seatLimit - workspaceReservedSeats), + fallbackMemberCount: workspaceFallbackMembers, + revokedInviteCount: Number(row.revoked_invite_count), + }); + if (recommendedActions.length > 0) { + workspacesRequiringAction += 1; + accumulateRecoveryActions(recommendedActions, recoveryActionCounts); + actionableWorkspaces.push( + toAdminActionableWorkspace({ + workspaceId: row.workspace_id, + workspaceName: row.workspace_name, + owner: { + id: row.owner_user_id, + email: row.owner_email, + displayName: row.owner_display_name, + subscription: row.subscription, + billingStatus: row.billing_status, + currentPeriodEnd: null, + cancelAtPeriodEnd: row.cancel_at_period_end, + }, + billing: { + ownerUserId: row.owner_user_id, + ownerDisplayName: row.owner_display_name, + ownerEmail: row.owner_email, + subscription: row.subscription, + billingStatus: row.billing_status, + currentPeriodEnd: null, + cancelAtPeriodEnd: row.cancel_at_period_end, + seatLimit, + seatsUsed: workspaceSeatsUsed, + reservedSeats: workspaceReservedSeats, + seatsRemaining: Math.max(0, seatLimit - workspaceReservedSeats), + fallbackMemberCount: workspaceFallbackMembers, + revokedInviteCount: Number(row.revoked_invite_count), + canInviteMore: seatLimit > 0 && workspaceReservedSeats < seatLimit, + warningCodes, + recommendedActions, + recoveryNotices: [], + }, + pendingInvites: workspacePendingInvites, + lastBillingEvent: latestBillingEventsByWorkspaceId.get(row.workspace_id) ?? null, + lastOutreach: latestOutreach, + memberRecoveryNotifications, + }), + ); + } + if (seatLimit > 0) { + activeWorkspaces += 1; + inheritedMembers += Math.max(0, workspaceSeatsUsed - 1); + } + if (warningCodes.includes('seat_limit_reached')) fullWorkspaces += 1; + if ( + warningCodes.some( + (code) => + code === 'workspace_plan_inactive' || + code === 'past_due' || + code === 'cancel_at_period_end', + ) + ) { + atRiskWorkspaces += 1; + } + } + + return { + totalWorkspaces: rows.length, + activeWorkspaces, + atRiskWorkspaces, + workspacesRequiringAction, + fullWorkspaces, + totalSeatCapacity, + seatsUsed, + reservedSeats, + pendingInvites, + inheritedMembers, + revokedInvites, + fallbackMembers, + seatUtilizationRate: totalSeatCapacity > 0 ? reservedSeats / totalSeatCapacity : null, + recoveryActions: [...recoveryActionCounts.values()].sort((a, b) => b.count - a.count), + recoveryStages: [], + followUpStates: [], + recoveryOutreach: { + pendingOwner: pendingOwnerOutreach, + pendingAdmin: pendingAdminOutreach, + pendingEmail, + retryingEmail, + deliveredEmail, + failedEmail, + pendingMemberEmail, + retryingMemberEmail, + deliveredMemberEmail, + failedMemberEmail, + multiTouchPending, + pendingExport, + pendingCrmSync, + retryingCrmSync, + syncedCrm, + failedCrmSync, + pendingWebhook, + retryingWebhook, + deadLetteredWebhook, + pendingSlackAlert, + alertedSlack, + failedSlackAlert, + deliveredWebhook, + failedWebhook, + handedOff: handedOffOutreach, + resolved: resolvedOutreach, + recent: recoveryOutreachRecent, + }, + recoveryPlaybook: { + totalRuns: Number(recoveryPlaybookSummary?.total_runs ?? 0), + successfulRuns: Number(recoveryPlaybookSummary?.successful_runs ?? 0), + failedRuns: Number(recoveryPlaybookSummary?.failed_runs ?? 0), + scheduledRuns: Number(recoveryPlaybookSummary?.scheduled_runs ?? 0), + manualRuns: Number(recoveryPlaybookSummary?.manual_runs ?? 0), + lastRunAt: recoveryPlaybookSummary?.last_run_at + ? toIso(recoveryPlaybookSummary.last_run_at) + : null, + lastRunOk: recoveryPlaybookSummary?.last_run_ok ?? null, + recent: recoveryPlaybookRunsRes.rows.map(rowToRecoveryPlaybookRun), + }, + recentBillingEvents: await this.getRecentBillingEvents(), + actionableWorkspaces: actionableWorkspaces.sort((a, b) => { + const warningDelta = b.warningCodes.length - a.warningCodes.length; + if (warningDelta !== 0) return warningDelta; + return ( + new Date(b.lastBillingEventAt ?? 0).getTime() - + new Date(a.lastBillingEventAt ?? 0).getTime() + ); + }), + }; + } + + async listRecentRecoveryPlaybookRuns(limit: number): Promise { + const safeLimit = Math.max(1, Math.min(limit, 100)); + const { rows } = await this.pool.query( + `SELECT + id, + trigger_type, + retry_interval_hours, + force_run, + requested_steps, + rerun_of_run_id, + ok, + summary, + steps, + created_at + FROM team_workspace_recovery_playbook_runs + ORDER BY created_at DESC + LIMIT $1`, + [safeLimit], + ); + return rows.map(rowToRecoveryPlaybookRun); + } + + async getRecoveryPlaybookRunById( + runId: string, + ): Promise { + const { rows } = await this.pool.query( + `SELECT + id, + trigger_type, + retry_interval_hours, + force_run, + requested_steps, + rerun_of_run_id, + ok, + summary, + steps, + created_at + FROM team_workspace_recovery_playbook_runs + WHERE id = $1 + LIMIT 1`, + [runId], + ); + return rows[0] ? rowToRecoveryPlaybookRun(rows[0]) : null; + } + + async recordRecoveryPlaybookRun(input: { + triggerType: string; + retryIntervalHours: number; + force: boolean; + requestedSteps: TeamWorkspaceRecoveryPlaybookStepName[]; + rerunOfRunId?: string | null; + ok: boolean; + summary: string; + steps: TeamWorkspaceRecoveryPlaybookSteps; + createdAt?: string; + }): Promise { + const createdAt = input.createdAt ?? new Date().toISOString(); + const { rows } = await this.pool.query( + `INSERT INTO team_workspace_recovery_playbook_runs ( + trigger_type, + retry_interval_hours, + force_run, + requested_steps, + rerun_of_run_id, + ok, + summary, + steps, + created_at + ) + VALUES ($1, $2, $3, $4::text[], $5::uuid, $6, $7, $8::jsonb, $9::timestamptz) + RETURNING + id, + trigger_type, + retry_interval_hours, + force_run, + requested_steps, + rerun_of_run_id, + ok, + summary, + steps, + created_at`, + [ + input.triggerType, + input.retryIntervalHours, + input.force, + input.requestedSteps, + input.rerunOfRunId ?? null, + input.ok, + input.summary, + JSON.stringify(input.steps), + createdAt, + ], + ); + return rowToRecoveryPlaybookRun(rows[0]!); + } + + async handoffAdminRecoveryOutreach(input: { + workspaceId: string; + channel: TeamWorkspaceRecoveryOutreachHandoffChannel; + snoozeHours: number; + note?: string | null; + }): Promise<'workspace_not_found' | 'outreach_not_found' | { ok: true }> { + const { rowCount: workspaceCount } = await this.pool.query( + `SELECT 1 + FROM team_workspaces + WHERE id = $1 + LIMIT 1`, + [input.workspaceId], + ); + if ((workspaceCount ?? 0) === 0) return 'workspace_not_found'; + + const { rowCount } = await this.pool.query( + `UPDATE team_workspace_recovery_outreach_events + SET status = 'handed_off', + last_attempt_at = NOW(), + next_attempt_at = NOW() + ($2 * INTERVAL '1 hour'), + export_count = 0, + last_exported_at = NULL, + crm_sync_count = 0, + last_crm_sync_attempt_at = NULL, + next_crm_sync_attempt_at = NOW(), + last_crm_synced_at = NULL, + crm_external_record_id = NULL, + last_crm_sync_status_code = NULL, + last_crm_sync_error = NULL, + webhook_attempt_count = 0, + last_webhook_attempt_at = NULL, + next_webhook_attempt_at = NOW(), + webhook_exhausted_at = NULL, + webhook_delivery_count = 0, + last_webhook_delivered_at = NULL, + last_webhook_status_code = NULL, + last_webhook_error = NULL, + slack_alert_count = 0, + last_slack_alert_attempt_at = NULL, + last_slack_alerted_at = NULL, + last_slack_alert_status_code = NULL, + last_slack_alert_error = NULL, + handoff_channel = $3, + handoff_note = $4, + handoff_at = NOW() + WHERE id = ( + SELECT id + FROM team_workspace_recovery_outreach_events + WHERE workspace_id = $1 + AND audience = 'admin' + AND status <> 'resolved' + ORDER BY created_at DESC + LIMIT 1 + )`, + [input.workspaceId, input.snoozeHours, input.channel, input.note?.trim() || null], + ); + if ((rowCount ?? 0) === 0) return 'outreach_not_found'; + return { ok: true }; + } + + async exportHandedOffAdminRecoveryOutreach(): Promise<{ exportedCount: number }> { + const { rowCount } = await this.pool.query( + `UPDATE team_workspace_recovery_outreach_events + SET export_count = export_count + 1, + last_exported_at = NOW() + WHERE audience = 'admin' + AND status = 'handed_off'`, + ); + return { exportedCount: rowCount ?? 0 }; + } + + async listPendingMemberRecoveryNotifications(): Promise< + PendingMemberRecoveryNotificationTarget[] + > { + const { rows } = await this.pool.query<{ + notification_id: string; + workspace_id: string; + workspace_name: string; + user_id: string; + email: string; + display_name: string | null; + owner_display_name: string | null; + owner_email: string; + subscription: SubscriptionTier; + billing_status: BillingStatus; + title: string; + detail: string; + email_attempt_count: number; + last_email_attempt_at: Date | string | null; + next_email_attempt_at: Date | string | null; + last_email_delivered_at: Date | string | null; + last_email_message_id: string | null; + last_email_error: string | null; + }>( + `SELECT + n.id AS notification_id, + n.workspace_id, + w.name AS workspace_name, + n.user_id, + u.email, + u.display_name, + owner.display_name AS owner_display_name, + owner.email AS owner_email, + owner.subscription, + owner.billing_status, + n.title, + n.detail, + n.email_attempt_count, + n.last_email_attempt_at, + n.next_email_attempt_at, + n.last_email_delivered_at, + n.last_email_message_id, + n.last_email_error + FROM team_workspace_member_recovery_notifications n + JOIN team_workspaces w ON w.id = n.workspace_id + JOIN users u ON u.id = n.user_id + JOIN users owner ON owner.id = w.owner_user_id + WHERE n.status = 'pending' + ORDER BY n.created_at DESC`, + ); + return rows.map((row) => ({ + notificationId: row.notification_id, + workspaceId: row.workspace_id, + workspaceName: row.workspace_name, + userId: row.user_id, + email: row.email, + displayName: row.display_name, + ownerDisplayName: row.owner_display_name, + ownerEmail: row.owner_email, + subscription: row.subscription, + billingStatus: row.billing_status, + title: row.title, + detail: row.detail, + emailAttemptCount: row.email_attempt_count, + lastEmailAttemptAt: row.last_email_attempt_at ? toIso(row.last_email_attempt_at) : null, + nextEmailAttemptAt: row.next_email_attempt_at ? toIso(row.next_email_attempt_at) : null, + lastEmailDeliveredAt: row.last_email_delivered_at ? toIso(row.last_email_delivered_at) : null, + lastEmailMessageId: row.last_email_message_id, + lastEmailError: row.last_email_error, + })); + } + + async recordPendingOwnerRecoveryOutreachEmailDelivery(input: { + workspaceIds: string[]; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + messageIdByWorkspaceId?: Record; + }): Promise<{ deliveredCount: number }> { + if (input.workspaceIds.length === 0) return { deliveredCount: 0 }; + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const deliveredAt = input.deliveredAt ?? attemptedAt; + const retryIntervalHours = Math.max( + 0, + input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + const messageIdByWorkspaceId = input.messageIdByWorkspaceId ?? {}; + const messageIds = input.workspaceIds.map( + (workspaceId) => messageIdByWorkspaceId[workspaceId] ?? null, + ); + const { rowCount } = await this.pool.query( + input.error + ? `UPDATE team_workspace_recovery_outreach_events + SET email_attempt_count = email_attempt_count + 1, + last_email_attempt_at = $2, + next_email_attempt_at = $3, + last_email_error = $4 + WHERE id IN ( + SELECT DISTINCT ON (workspace_id) id + FROM team_workspace_recovery_outreach_events + WHERE workspace_id = ANY($1::uuid[]) + AND audience = 'owner' + AND status = 'pending' + ORDER BY workspace_id, created_at DESC + )` + : `UPDATE team_workspace_recovery_outreach_events AS o + SET email_attempt_count = o.email_attempt_count + 1, + last_email_attempt_at = $2, + next_email_attempt_at = NULL, + last_email_delivered_at = $3, + last_email_message_id = mapped.message_id, + last_email_error = NULL + FROM ( + SELECT UNNEST($1::uuid[]) AS workspace_id, UNNEST($4::text[]) AS message_id + ) AS mapped + WHERE o.workspace_id = mapped.workspace_id + AND o.id IN ( + SELECT DISTINCT ON (workspace_id) id + FROM team_workspace_recovery_outreach_events + WHERE workspace_id = ANY($1::uuid[]) + AND audience = 'owner' + AND status = 'pending' + ORDER BY workspace_id, created_at DESC + )`, + input.error + ? [ + input.workspaceIds, + attemptedAt, + nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), + input.error, + ] + : [input.workspaceIds, attemptedAt, deliveredAt, messageIds], + ); + return { deliveredCount: input.error ? 0 : (rowCount ?? 0) }; + } + + async recordPendingMemberRecoveryNotificationEmailDelivery(input: { + notificationIds: string[]; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + messageIdByNotificationId?: Record; + }): Promise<{ deliveredCount: number }> { + if (input.notificationIds.length === 0) return { deliveredCount: 0 }; + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const deliveredAt = input.deliveredAt ?? attemptedAt; + const retryIntervalHours = Math.max( + 0, + input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + const messageIdByNotificationId = input.messageIdByNotificationId ?? {}; + const messageIds = input.notificationIds.map( + (notificationId) => messageIdByNotificationId[notificationId] ?? null, + ); + const { rowCount } = await this.pool.query( + input.error + ? `UPDATE team_workspace_member_recovery_notifications + SET email_attempt_count = email_attempt_count + 1, + last_email_attempt_at = $2, + next_email_attempt_at = $3, + last_email_error = $4 + WHERE id = ANY($1::uuid[]) + AND status = 'pending'` + : `UPDATE team_workspace_member_recovery_notifications AS n + SET email_attempt_count = n.email_attempt_count + 1, + last_email_attempt_at = $2, + next_email_attempt_at = NULL, + last_email_delivered_at = $3, + last_email_message_id = mapped.message_id, + last_email_error = NULL + FROM ( + SELECT UNNEST($1::uuid[]) AS notification_id, UNNEST($4::text[]) AS message_id + ) AS mapped + WHERE n.id = mapped.notification_id + AND n.status = 'pending'`, + input.error + ? [ + input.notificationIds, + attemptedAt, + nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), + input.error, + ] + : [input.notificationIds, attemptedAt, deliveredAt, messageIds], + ); + return { deliveredCount: input.error ? 0 : (rowCount ?? 0) }; + } + + async recordHandedOffAdminRecoveryOutreachCrmSync(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + syncedAt?: string; + retryIntervalHours?: number; + externalRecordIdByWorkspaceId?: Record; + }): Promise<{ syncedCount: number }> { + if (input.workspaceIds.length === 0) return { syncedCount: 0 }; + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const syncedAt = input.syncedAt ?? attemptedAt; + const retryIntervalHours = Math.max( + 0, + input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + const externalRecordIdByWorkspaceId = input.externalRecordIdByWorkspaceId ?? {}; + const externalRecordIds = input.workspaceIds.map( + (workspaceId) => externalRecordIdByWorkspaceId[workspaceId] ?? null, + ); + const { rowCount } = await this.pool.query( + input.error + ? `UPDATE team_workspace_recovery_outreach_events + SET crm_sync_count = crm_sync_count + 1, + last_crm_sync_attempt_at = $2, + next_crm_sync_attempt_at = $3, + last_crm_sync_status_code = $4, + last_crm_sync_error = $5 + WHERE id IN ( + SELECT DISTINCT ON (workspace_id) id + FROM team_workspace_recovery_outreach_events + WHERE workspace_id = ANY($1::uuid[]) + AND audience = 'admin' + AND status = 'handed_off' + AND handoff_channel = 'crm' + ORDER BY workspace_id, created_at DESC + )` + : `UPDATE team_workspace_recovery_outreach_events AS o + SET crm_sync_count = o.crm_sync_count + 1, + last_crm_sync_attempt_at = $2, + next_crm_sync_attempt_at = NULL, + last_crm_synced_at = $3, + crm_external_record_id = mapped.external_record_id, + last_crm_sync_status_code = $4, + last_crm_sync_error = NULL + FROM ( + SELECT UNNEST($1::uuid[]) AS workspace_id, UNNEST($5::text[]) AS external_record_id + ) AS mapped + WHERE o.workspace_id = mapped.workspace_id + AND o.id IN ( + SELECT DISTINCT ON (workspace_id) id + FROM team_workspace_recovery_outreach_events + WHERE workspace_id = ANY($1::uuid[]) + AND audience = 'admin' + AND status = 'handed_off' + AND handoff_channel = 'crm' + ORDER BY workspace_id, created_at DESC + )`, + input.error + ? [ + input.workspaceIds, + attemptedAt, + nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), + input.statusCode, + input.error, + ] + : [input.workspaceIds, attemptedAt, syncedAt, input.statusCode, externalRecordIds], + ); + return { syncedCount: input.error ? 0 : (rowCount ?? 0) }; + } + + async recordDeadLetteredAdminRecoveryOutreachSlackAlert(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + alertedAt?: string; + }): Promise<{ alertedCount: number }> { + if (input.workspaceIds.length === 0) return { alertedCount: 0 }; + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const alertedAt = input.alertedAt ?? attemptedAt; + const { rowCount } = await this.pool.query( + input.error + ? `UPDATE team_workspace_recovery_outreach_events + SET slack_alert_count = slack_alert_count + 1, + last_slack_alert_attempt_at = $2, + last_slack_alert_status_code = $3, + last_slack_alert_error = $4 + WHERE workspace_id = ANY($1::uuid[]) + AND audience = 'admin' + AND status = 'handed_off' + AND webhook_exhausted_at IS NOT NULL` + : `UPDATE team_workspace_recovery_outreach_events + SET slack_alert_count = slack_alert_count + 1, + last_slack_alert_attempt_at = $2, + last_slack_alerted_at = $3, + last_slack_alert_status_code = $4, + last_slack_alert_error = NULL + WHERE workspace_id = ANY($1::uuid[]) + AND audience = 'admin' + AND status = 'handed_off' + AND webhook_exhausted_at IS NOT NULL`, + input.error + ? [input.workspaceIds, attemptedAt, input.statusCode, input.error] + : [input.workspaceIds, attemptedAt, alertedAt, input.statusCode], + ); + return { alertedCount: input.error ? 0 : (rowCount ?? 0) }; + } + + async recordHandedOffAdminRecoveryOutreachWebhookDelivery(input: { + workspaceIds: string[]; + statusCode: number | null; + error: string | null; + attemptedAt?: string; + deliveredAt?: string; + retryIntervalHours?: number; + maxAttempts?: number; + }): Promise<{ deliveredCount: number }> { + if (input.workspaceIds.length === 0) return { deliveredCount: 0 }; + const attemptedAt = input.attemptedAt ?? new Date().toISOString(); + const deliveredAt = input.deliveredAt ?? new Date().toISOString(); + const retryIntervalHours = Math.max( + 0, + input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, + ); + const maxAttempts = Math.max( + 1, + input.maxAttempts ?? config.recoveryOutreach.webhookMaxAttempts, + ); + const { rowCount } = await this.pool.query( + input.error + ? `UPDATE team_workspace_recovery_outreach_events + SET webhook_attempt_count = webhook_attempt_count + 1, + last_webhook_attempt_at = $2, + next_webhook_attempt_at = CASE + WHEN webhook_attempt_count + 1 >= $6 THEN NULL + ELSE $3 + END, + webhook_exhausted_at = CASE + WHEN webhook_attempt_count + 1 >= $6 THEN $2 + ELSE NULL + END, + last_webhook_status_code = $4, + last_webhook_error = $5 + WHERE id IN ( + SELECT DISTINCT ON (workspace_id) id + FROM team_workspace_recovery_outreach_events + WHERE workspace_id = ANY($1::uuid[]) + AND audience = 'admin' + AND status = 'handed_off' + ORDER BY workspace_id, created_at DESC + )` + : `UPDATE team_workspace_recovery_outreach_events + SET webhook_attempt_count = webhook_attempt_count + 1, + last_webhook_attempt_at = $2, + next_webhook_attempt_at = NULL, + webhook_exhausted_at = NULL, + webhook_delivery_count = webhook_delivery_count + 1, + last_webhook_delivered_at = $3, + last_webhook_status_code = $4, + last_webhook_error = NULL, + slack_alert_count = 0, + last_slack_alert_attempt_at = NULL, + last_slack_alerted_at = NULL, + last_slack_alert_status_code = NULL, + last_slack_alert_error = NULL + WHERE id IN ( + SELECT DISTINCT ON (workspace_id) id + FROM team_workspace_recovery_outreach_events + WHERE workspace_id = ANY($1::uuid[]) + AND audience = 'admin' + AND status = 'handed_off' + ORDER BY workspace_id, created_at DESC + )`, + input.error + ? [ + input.workspaceIds, + attemptedAt, + nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), + input.statusCode, + input.error, + maxAttempts, + ] + : [input.workspaceIds, attemptedAt, deliveredAt, input.statusCode], + ); + return { deliveredCount: input.error ? 0 : (rowCount ?? 0) }; + } + + async createWorkspace( + user: UserProfile, + name: string, + ): Promise { + if (!user.entitlements.canUseTeamWorkspace) return 'entitlement_required'; + if (await this.findMembership(user.id)) return 'already_in_workspace'; + + const client = await this.pool.connect(); + try { + await client.query('BEGIN'); + const { rows } = await client.query<{ id: string }>( + `INSERT INTO team_workspaces (name, owner_user_id) + VALUES ($1, $2) + RETURNING id`, + [name, user.id], + ); + await client.query( + `INSERT INTO team_workspace_members (workspace_id, user_id, role) + VALUES ($1, $2, 'owner')`, + [rows[0]!.id, user.id], + ); + await client.query('COMMIT'); + return (await this.buildWorkspaceForUser(user.id))!; + } catch (error) { + await client.query('ROLLBACK').catch(() => undefined); + throw error; + } finally { + client.release(); + } + } + + async inviteMember( + actorUserId: string, + email: string, + role: ManageRole, + ): Promise< + | TeamWorkspace + | 'workspace_not_found' + | 'forbidden' + | 'user_already_in_workspace' + | 'seat_limit_reached' + | 'workspace_plan_inactive' + > { + const membership = await this.findMembership(actorUserId); + if (!membership) return 'workspace_not_found'; + if (membership.role === 'member') return 'forbidden'; + + const workspace = await this.buildWorkspaceForUser(actorUserId); + if (!workspace) return 'workspace_not_found'; + + const { rowCount: memberCount } = await this.pool.query( + `SELECT 1 + FROM team_workspace_members m + JOIN users u ON u.id = m.user_id + WHERE lower(u.email) = lower($1) + LIMIT 1`, + [email], + ); + if ((memberCount ?? 0) > 0) return 'user_already_in_workspace'; + + if (workspace.billing.warningCodes.includes('workspace_plan_inactive')) { + return 'workspace_plan_inactive'; + } + + const normalizedEmail = email.trim().toLowerCase(); + const existingInvite = workspace.invites.find( + (invite) => invite.email.toLowerCase() === normalizedEmail, + ); + if (!existingInvite && !workspace.billing.canInviteMore) { + return 'seat_limit_reached'; + } + + await this.pool.query( + `INSERT INTO team_workspace_invites (workspace_id, email, role, created_by_user_id) + VALUES ($1, $2, $3, $4) + ON CONFLICT (workspace_id, email) + DO UPDATE SET + role = EXCLUDED.role, + status = 'pending', + created_by_user_id = EXCLUDED.created_by_user_id, + accepted_by_user_id = NULL, + accepted_at = NULL, + revoked_reason = NULL, + revoked_at = NULL, + created_at = NOW()`, + [membership.workspaceId, normalizedEmail, role, actorUserId], + ); + return (await this.buildWorkspaceForUser(actorUserId))!; + } + + async acceptInvite( + user: UserProfile, + inviteId: string, + ): Promise< + TeamWorkspace | 'invite_not_found' | 'already_in_workspace' | 'workspace_plan_inactive' + > { + if (await this.findMembership(user.id)) return 'already_in_workspace'; + + const { rows } = await this.pool.query( + `SELECT + i.id, + i.workspace_id, + w.name AS workspace_name, + i.email, + i.role, + i.status, + i.created_at, + i.accepted_at, + i.revoked_reason, + i.revoked_at + FROM team_workspace_invites i + JOIN team_workspaces w ON w.id = i.workspace_id + WHERE i.id = $1 + LIMIT 1`, + [inviteId], + ); + const invite = rows[0]; + if (!invite) return 'invite_not_found'; + if (invite.email.toLowerCase() !== user.email.toLowerCase()) return 'invite_not_found'; + if (invite.status !== 'pending') { + return invite.revoked_reason === 'billing_inactive' + ? 'workspace_plan_inactive' + : 'invite_not_found'; + } + await this.reconcileWorkspaceBillingState(invite.workspace_id); + const refreshedInviteRes = await this.pool.query( + `SELECT + i.id, + i.workspace_id, + w.name AS workspace_name, + i.email, + i.role, + i.status, + i.created_at, + i.accepted_at, + i.revoked_reason, + i.revoked_at + FROM team_workspace_invites i + JOIN team_workspaces w ON w.id = i.workspace_id + WHERE i.id = $1 + LIMIT 1`, + [inviteId], + ); + const refreshedInvite = refreshedInviteRes.rows[0]; + if (!refreshedInvite || refreshedInvite.status !== 'pending') { + return refreshedInvite?.revoked_reason === 'billing_inactive' + ? 'workspace_plan_inactive' + : 'invite_not_found'; + } + + const [ownerRows, memberCountRows, pendingInviteCountRows] = await Promise.all([ + this.pool.query<{ + id: string; + email: string; + display_name: string | null; + subscription: SubscriptionTier; + billing_status: BillingStatus; + current_period_end: Date | string | null; + cancel_at_period_end: boolean; + }>( + `SELECT + u.id, + u.email, + u.display_name, + u.subscription, + u.billing_status, + u.current_period_end, + u.cancel_at_period_end + FROM team_workspaces w + JOIN users u ON u.id = w.owner_user_id + WHERE w.id = $1 + LIMIT 1`, + [invite.workspace_id], + ), + this.pool.query<{ count: string }>( + `SELECT COUNT(*)::text AS count + FROM team_workspace_members + WHERE workspace_id = $1`, + [invite.workspace_id], + ), + this.pool.query<{ count: string }>( + `SELECT COUNT(*)::text AS count + FROM team_workspace_invites + WHERE workspace_id = $1 + AND status = 'pending'`, + [invite.workspace_id], + ), + ]); + const owner = ownerRows.rows[0]; + if (!owner) return 'invite_not_found'; + const billing = buildWorkspaceBilling({ + owner: { + id: owner.id, + email: owner.email, + displayName: owner.display_name, + subscription: owner.subscription, + billingStatus: owner.billing_status, + currentPeriodEnd: owner.current_period_end ? toIso(owner.current_period_end) : null, + cancelAtPeriodEnd: owner.cancel_at_period_end, + }, + seatsUsed: Number(memberCountRows.rows[0]?.count ?? 0), + pendingInviteCount: Number(pendingInviteCountRows.rows[0]?.count ?? 0), + }); + if (billing.warningCodes.includes('workspace_plan_inactive')) { + return 'workspace_plan_inactive'; + } + + const client = await this.pool.connect(); + try { + await client.query('BEGIN'); + await client.query( + `INSERT INTO team_workspace_members (workspace_id, user_id, role) + VALUES ($1, $2, $3)`, + [invite.workspace_id, user.id, refreshedInvite.role], + ); + await client.query( + `UPDATE team_workspace_invites + SET status = CASE WHEN id = $1 THEN 'accepted' ELSE 'revoked' END, + accepted_by_user_id = CASE WHEN id = $1 THEN $2 ELSE accepted_by_user_id END, + accepted_at = CASE WHEN id = $1 THEN NOW() ELSE accepted_at END + , revoked_reason = CASE WHEN id = $1 THEN NULL ELSE 'accepted_elsewhere' END + , revoked_at = CASE WHEN id = $1 THEN NULL ELSE NOW() END + WHERE lower(email) = lower($3) + AND status = 'pending'`, + [inviteId, user.id, user.email], + ); + await client.query('COMMIT'); + return (await this.buildWorkspaceForUser(user.id))!; + } catch (error) { + await client.query('ROLLBACK').catch(() => undefined); + throw error; + } finally { + client.release(); + } + } + + async shareSavedView( + actorUserId: string, + savedViewId: string, + ): Promise< + | { status: 'added' | 'exists'; workspace: TeamWorkspace } + | 'workspace_not_found' + | 'saved_view_not_found' + > { + const membership = await this.findMembership(actorUserId); + if (!membership) return 'workspace_not_found'; + + const { rowCount: savedViewCount } = await this.pool.query( + `SELECT 1 + FROM user_saved_views + WHERE id = $1 AND user_id = $2 + LIMIT 1`, + [savedViewId, actorUserId], + ); + if ((savedViewCount ?? 0) === 0) return 'saved_view_not_found'; + + const { rowCount } = await this.pool.query( + `INSERT INTO team_workspace_saved_views (workspace_id, saved_view_id, shared_by_user_id) + VALUES ($1, $2, $3) + ON CONFLICT (workspace_id, saved_view_id) DO NOTHING`, + [membership.workspaceId, savedViewId, actorUserId], + ); + return { + status: (rowCount ?? 0) > 0 ? 'added' : 'exists', + workspace: (await this.buildWorkspaceForUser(actorUserId))!, + }; + } + + async shareCase( + actorUserId: string, + caseId: string, + ): Promise< + | { status: 'added' | 'exists'; workspace: TeamWorkspace } + | 'workspace_not_found' + | 'case_not_found' + > { + const membership = await this.findMembership(actorUserId); + if (!membership) return 'workspace_not_found'; + + const { rowCount: caseCount } = await this.pool.query( + `SELECT 1 + FROM cases + WHERE id = $1 AND published_at IS NOT NULL + LIMIT 1`, + [caseId], + ); + if ((caseCount ?? 0) === 0) return 'case_not_found'; + + const { rowCount } = await this.pool.query( + `INSERT INTO team_workspace_cases (workspace_id, case_id, shared_by_user_id) + VALUES ($1, $2, $3) + ON CONFLICT (workspace_id, case_id) DO NOTHING`, + [membership.workspaceId, caseId, actorUserId], + ); + return { + status: (rowCount ?? 0) > 0 ? 'added' : 'exists', + workspace: (await this.buildWorkspaceForUser(actorUserId))!, + }; + } + + private async findMembership(userId: string): Promise { + const { rows } = await this.pool.query( + `SELECT m.workspace_id, m.role, m.joined_at, w.name, w.created_at, w.owner_user_id + FROM team_workspace_members m + JOIN team_workspaces w ON w.id = m.workspace_id + WHERE m.user_id = $1 + LIMIT 1`, + [userId], + ); + if (!rows[0]) return null; + return { + workspaceId: rows[0].workspace_id, + role: rows[0].role, + joinedAt: toIso(rows[0].joined_at), + }; + } + + private async getPendingInvitesForEmail(email: string): Promise { + const { rows } = await this.pool.query( + `SELECT + i.id, + i.workspace_id, + w.name AS workspace_name, + i.email, + i.role, + i.status, + i.created_at, + i.accepted_at, + i.revoked_reason, + i.revoked_at + FROM team_workspace_invites i + JOIN team_workspaces w ON w.id = i.workspace_id + WHERE lower(i.email) = lower($1) + AND i.status = 'pending' + ORDER BY i.created_at DESC`, + [email], + ); + return rows.map(rowToInvite); + } + + private async reconcilePendingInvitesForEmail(email: string): Promise { + const { rows } = await this.pool.query<{ workspace_id: string }>( + `SELECT DISTINCT workspace_id + FROM team_workspace_invites + WHERE lower(email) = lower($1) + AND status = 'pending'`, + [email], + ); + for (const row of rows) { + await this.reconcileWorkspaceBillingState(row.workspace_id); + } + } + + private async getRecentBillingEvents(workspaceId?: string): Promise { + const query = workspaceId + ? `SELECT + e.id, + e.workspace_id, + w.name AS workspace_name, + e.event_type, + e.severity, + e.title, + e.detail, + e.event_count, + e.created_at + FROM team_workspace_billing_events e + JOIN team_workspaces w ON w.id = e.workspace_id + WHERE e.workspace_id = $1 + ORDER BY e.created_at DESC + LIMIT 6` + : `SELECT + e.id, + e.workspace_id, + w.name AS workspace_name, + e.event_type, + e.severity, + e.title, + e.detail, + e.event_count, + e.created_at + FROM team_workspace_billing_events e + JOIN team_workspaces w ON w.id = e.workspace_id + ORDER BY e.created_at DESC + LIMIT 8`; + const { rows } = await this.pool.query( + query, + workspaceId ? [workspaceId] : [], + ); + return rows.map(rowToBillingEvent); + } + + private async getStoredBillingState( + workspaceId: string, + ): Promise { + const { rows } = await this.pool.query( + `SELECT + seat_limit, + billing_status, + cancel_at_period_end, + reserved_seats, + fallback_member_count + FROM team_workspace_billing_states + WHERE workspace_id = $1 + LIMIT 1`, + [workspaceId], + ); + const row = rows[0]; + if (!row) return null; + return { + seatLimit: row.seat_limit, + billingStatus: row.billing_status, + cancelAtPeriodEnd: row.cancel_at_period_end, + reservedSeats: row.reserved_seats, + fallbackMemberCount: row.fallback_member_count, + }; + } + + private async persistBillingState(workspaceId: string, snapshot: WorkspaceBillingSnapshot) { + await this.pool.query( + `INSERT INTO team_workspace_billing_states ( + workspace_id, + seat_limit, + billing_status, + cancel_at_period_end, + reserved_seats, + fallback_member_count, + updated_at + ) + VALUES ($1, $2, $3, $4, $5, $6, NOW()) + ON CONFLICT (workspace_id) + DO UPDATE SET + seat_limit = EXCLUDED.seat_limit, + billing_status = EXCLUDED.billing_status, + cancel_at_period_end = EXCLUDED.cancel_at_period_end, + reserved_seats = EXCLUDED.reserved_seats, + fallback_member_count = EXCLUDED.fallback_member_count, + updated_at = NOW()`, + [ + workspaceId, + snapshot.seatLimit, + snapshot.billingStatus, + snapshot.cancelAtPeriodEnd, + snapshot.reservedSeats, + snapshot.fallbackMemberCount, + ], + ); + } + + private async recordBillingEvents( + workspaceId: string, + descriptors: WorkspaceBillingEventDescriptor[], + ) { + for (const descriptor of descriptors) { + await this.pool.query( + `INSERT INTO team_workspace_billing_events ( + workspace_id, + event_type, + severity, + title, + detail, + event_count + ) + VALUES ($1, $2, $3, $4, $5, $6)`, + [ + workspaceId, + descriptor.type, + descriptor.severity, + descriptor.title, + descriptor.detail, + descriptor.count, + ], + ); + } + } + + private async getRecentRecoveryOutreach( + workspaceId?: string, + audience?: TeamWorkspaceRecoveryOutreachAudience, + ): Promise { + const clauses: string[] = []; + const values: Array = []; + if (workspaceId) { + values.push(workspaceId); + clauses.push(`o.workspace_id = $${values.length}`); + } + if (audience) { + values.push(audience); + clauses.push(`o.audience = $${values.length}`); + } + const where = clauses.length > 0 ? `WHERE ${clauses.join(' AND ')}` : ''; + const limit = workspaceId ? 6 : 8; + const { rows } = await this.pool.query( + `SELECT + o.id, + o.workspace_id, + w.name AS workspace_name, + o.audience, + o.channel, + o.status, + o.title, + o.detail, + o.action_code, + o.attempt_count, + o.created_at, + o.last_attempt_at, + o.next_attempt_at, + o.email_attempt_count, + o.last_email_attempt_at, + o.next_email_attempt_at, + o.last_email_delivered_at, + o.last_email_message_id, + o.last_email_error, + o.export_count, + o.last_exported_at, + o.crm_sync_count, + o.last_crm_sync_attempt_at, + o.next_crm_sync_attempt_at, + o.last_crm_synced_at, + o.crm_external_record_id, + o.last_crm_sync_status_code, + o.last_crm_sync_error, + o.webhook_attempt_count, + o.last_webhook_attempt_at, + o.next_webhook_attempt_at, + o.webhook_exhausted_at, + o.webhook_delivery_count, + o.last_webhook_delivered_at, + o.last_webhook_status_code, + o.last_webhook_error, + o.slack_alert_count, + o.last_slack_alert_attempt_at, + o.last_slack_alerted_at, + o.last_slack_alert_status_code, + o.last_slack_alert_error, + o.handoff_channel, + o.handoff_note, + o.handoff_at, + o.resolved_at + FROM team_workspace_recovery_outreach_events o + JOIN team_workspaces w ON w.id = o.workspace_id + ${where} + ORDER BY o.created_at DESC + LIMIT ${limit}`, + values, + ); + return rows.map(rowToRecoveryOutreach); + } + + private async getLatestRecoveryOutreachByWorkspaceIds( + workspaceIds: string[], + ): Promise> { + if (workspaceIds.length === 0) return new Map(); + const { rows } = await this.pool.query( + `SELECT DISTINCT ON (o.workspace_id) + o.id, + o.workspace_id, + w.name AS workspace_name, + o.audience, + o.channel, + o.status, + o.title, + o.detail, + o.action_code, + o.attempt_count, + o.created_at, + o.last_attempt_at, + o.next_attempt_at, + o.email_attempt_count, + o.last_email_attempt_at, + o.next_email_attempt_at, + o.last_email_delivered_at, + o.last_email_message_id, + o.last_email_error, + o.export_count, + o.last_exported_at, + o.crm_sync_count, + o.last_crm_sync_attempt_at, + o.next_crm_sync_attempt_at, + o.last_crm_synced_at, + o.crm_external_record_id, + o.last_crm_sync_status_code, + o.last_crm_sync_error, + o.webhook_attempt_count, + o.last_webhook_attempt_at, + o.next_webhook_attempt_at, + o.webhook_exhausted_at, + o.webhook_delivery_count, + o.last_webhook_delivered_at, + o.last_webhook_status_code, + o.last_webhook_error, + o.slack_alert_count, + o.last_slack_alert_attempt_at, + o.last_slack_alerted_at, + o.last_slack_alert_status_code, + o.last_slack_alert_error, + o.handoff_channel, + o.handoff_note, + o.handoff_at, + o.resolved_at + FROM team_workspace_recovery_outreach_events o + JOIN team_workspaces w ON w.id = o.workspace_id + WHERE o.workspace_id = ANY($1::uuid[]) + ORDER BY o.workspace_id, o.created_at DESC`, + [workspaceIds], + ); + return new Map(rows.map((row) => [row.workspace_id, rowToRecoveryOutreach(row)])); + } + + private async getRecentMemberRecoveryNotifications( + workspaceId: string, + ): Promise { + const { rows } = await this.pool.query( + `SELECT + n.id, + n.workspace_id, + n.user_id, + u.email, + u.display_name, + n.status, + n.title, + n.detail, + n.email_attempt_count, + n.created_at, + n.last_email_attempt_at, + n.next_email_attempt_at, + n.last_email_delivered_at, + n.last_email_message_id, + n.last_email_error, + n.resolved_at + FROM team_workspace_member_recovery_notifications n + JOIN users u ON u.id = n.user_id + WHERE n.workspace_id = $1 + ORDER BY n.created_at DESC + LIMIT 6`, + [workspaceId], + ); + return rows.map(rowToMemberRecoveryNotification); + } + + private async syncPendingMemberRecoveryNotifications( + workspaceId: string, + _workspaceName: string, + members: Array<{ userId: string; email: string; displayName: string | null }>, + descriptor: WorkspaceMemberRecoveryNotificationDescriptor | null, + ): Promise { + if (!descriptor || members.length === 0) { + await this.pool.query( + `UPDATE team_workspace_member_recovery_notifications + SET status = 'resolved', + next_email_attempt_at = NULL, + resolved_at = NOW() + WHERE workspace_id = $1 + AND status = 'pending'`, + [workspaceId], + ); + return; + } + await this.pool.query( + `UPDATE team_workspace_member_recovery_notifications + SET status = 'resolved', + next_email_attempt_at = NULL, + resolved_at = NOW() + WHERE workspace_id = $1 + AND status = 'pending' + AND user_id <> ALL($2::uuid[])`, + [workspaceId, members.map((member) => member.userId)], + ); + for (const member of members) { + const updated = await this.pool.query( + `UPDATE team_workspace_member_recovery_notifications + SET email = $3, + display_name = $4, + title = $5, + detail = $6 + WHERE workspace_id = $1 + AND user_id = $2 + AND status = 'pending'`, + [ + workspaceId, + member.userId, + member.email, + member.displayName, + descriptor.title, + descriptor.detail, + ], + ); + if ((updated.rowCount ?? 0) > 0) continue; + await this.pool.query( + `INSERT INTO team_workspace_member_recovery_notifications ( + workspace_id, + user_id, + email, + display_name, + status, + title, + detail, + email_attempt_count, + next_email_attempt_at + ) + VALUES ($1, $2, $3, $4, 'pending', $5, $6, 0, NOW())`, + [ + workspaceId, + member.userId, + member.email, + member.displayName, + descriptor.title, + descriptor.detail, + ], + ); + } + } + + private async ensurePendingRecoveryOutreach( + workspaceId: string, + descriptor: WorkspaceRecoveryOutreachDescriptor | null, + retryIntervalHours: number, + ): Promise { + if (!descriptor) return 0; + const { rowCount } = await this.pool.query( + `INSERT INTO team_workspace_recovery_outreach_events ( + workspace_id, + audience, + channel, + status, + title, + detail, + action_code, + attempt_count, + last_attempt_at, + next_attempt_at, + email_attempt_count, + last_email_attempt_at, + next_email_attempt_at, + last_email_delivered_at, + last_email_message_id, + last_email_error, + export_count, + last_exported_at, + crm_sync_count, + last_crm_sync_attempt_at, + next_crm_sync_attempt_at, + last_crm_synced_at, + crm_external_record_id, + last_crm_sync_status_code, + last_crm_sync_error, + webhook_attempt_count, + last_webhook_attempt_at, + next_webhook_attempt_at, + webhook_exhausted_at, + webhook_delivery_count, + last_webhook_delivered_at, + last_webhook_status_code, + last_webhook_error, + slack_alert_count, + last_slack_alert_attempt_at, + last_slack_alerted_at, + last_slack_alert_status_code, + last_slack_alert_error + ) + SELECT + $1, $2, $3, 'pending', $4, $5, $6, 1, NOW(), NOW() + ($7 * INTERVAL '1 hour'), 0, NULL, NOW(), NULL, NULL, NULL, 0, NULL, 0, NULL, NOW(), NULL, NULL, NULL, NULL, 0, NULL, NOW(), NULL, 0, NULL, NULL, NULL, 0, NULL, NULL, NULL, NULL + WHERE NOT EXISTS ( + SELECT 1 + FROM team_workspace_recovery_outreach_events + WHERE workspace_id = $1 + AND audience = $2 + AND ( + status = 'pending' + OR ( + status = 'handed_off' + AND next_attempt_at IS NOT NULL + AND next_attempt_at > NOW() + ) + ) + )`, + [ + workspaceId, + descriptor.audience, + descriptor.channel, + descriptor.title, + descriptor.detail, + descriptor.actionCode, + retryIntervalHours, + ], + ); + return rowCount ?? 0; + } + + private async retryPendingRecoveryOutreach( + workspaceId: string, + descriptor: WorkspaceRecoveryOutreachDescriptor | null, + retryIntervalHours: number, + ): Promise { + if (!descriptor) return 0; + const { rowCount } = await this.pool.query( + `UPDATE team_workspace_recovery_outreach_events + SET channel = $3, + status = 'pending', + title = $4, + detail = $5, + action_code = $6, + attempt_count = attempt_count + 1, + last_attempt_at = NOW(), + next_attempt_at = NOW() + ($7 * INTERVAL '1 hour'), + email_attempt_count = 0, + last_email_attempt_at = NULL, + next_email_attempt_at = NOW(), + last_email_delivered_at = NULL, + last_email_message_id = NULL, + last_email_error = NULL, + export_count = 0, + last_exported_at = NULL, + crm_sync_count = 0, + last_crm_sync_attempt_at = NULL, + next_crm_sync_attempt_at = NOW(), + last_crm_synced_at = NULL, + crm_external_record_id = NULL, + last_crm_sync_status_code = NULL, + last_crm_sync_error = NULL, + webhook_attempt_count = 0, + last_webhook_attempt_at = NULL, + next_webhook_attempt_at = NOW(), + webhook_exhausted_at = NULL, + webhook_delivery_count = 0, + last_webhook_delivered_at = NULL, + last_webhook_status_code = NULL, + last_webhook_error = NULL, + slack_alert_count = 0, + last_slack_alert_attempt_at = NULL, + last_slack_alerted_at = NULL, + last_slack_alert_status_code = NULL, + last_slack_alert_error = NULL, + handoff_channel = NULL, + handoff_note = NULL, + handoff_at = NULL + WHERE workspace_id = $1 + AND audience = $2 + AND status = 'pending' + AND (last_attempt_at + ($7 * INTERVAL '1 hour')) <= NOW()`, + [ + workspaceId, + descriptor.audience, + descriptor.channel, + descriptor.title, + descriptor.detail, + descriptor.actionCode, + retryIntervalHours, + ], + ); + return rowCount ?? 0; + } + + private async resolvePendingRecoveryOutreach( + workspaceId: string, + audience?: TeamWorkspaceRecoveryOutreachAudience, + ): Promise { + const values: Array = [workspaceId]; + let audienceClause = ''; + if (audience) { + values.push(audience); + audienceClause = `AND audience = $${values.length}`; + } + const { rowCount } = await this.pool.query( + `UPDATE team_workspace_recovery_outreach_events + SET status = 'resolved', + next_attempt_at = NULL, + next_email_attempt_at = NULL, + next_webhook_attempt_at = NULL, + webhook_exhausted_at = NULL, + last_slack_alert_error = NULL, + resolved_at = NOW() + WHERE workspace_id = $1 + ${audienceClause} + AND status <> 'resolved'`, + values, + ); + return rowCount ?? 0; + } + + private async reconcileAllWorkspaces(): Promise { + await this.reconcileAllBilling(); + } + + private async reconcileWorkspaceBillingState( + workspaceId: string, + ): Promise { + const [ownerRows, memberCountRows, inviteRows, previousSnapshot] = await Promise.all([ + this.pool.query<{ + subscription: SubscriptionTier; + billing_status: BillingStatus; + cancel_at_period_end: boolean; + }>( + `SELECT u.subscription, u.billing_status, u.cancel_at_period_end + FROM team_workspaces w + JOIN users u ON u.id = w.owner_user_id + WHERE w.id = $1 + LIMIT 1`, + [workspaceId], + ), + this.pool.query<{ count: string }>( + `SELECT COUNT(*)::text AS count + FROM team_workspace_members + WHERE workspace_id = $1`, + [workspaceId], + ), + this.pool.query<{ id: string }>( + `SELECT id + FROM team_workspace_invites + WHERE workspace_id = $1 + AND status = 'pending' + ORDER BY created_at ASC`, + [workspaceId], + ), + this.getStoredBillingState(workspaceId), + ]); + + const owner = ownerRows.rows[0]; + if (!owner) return { revokedInviteCount: 0, restoredInviteCount: 0 }; + const seatLimit = resolveTeamWorkspaceSeatLimit({ + subscription: owner.subscription, + billingStatus: owner.billing_status, + }); + const seatsUsed = Number(memberCountRows.rows[0]?.count ?? 0); + const allowedPendingInvites = Math.max(0, seatLimit - seatsUsed); + const inviteIdsToRevoke = inviteRows.rows.slice(allowedPendingInvites).map((row) => row.id); + const revokeReason: WorkspaceInviteRevocationReason = + seatLimit === 0 ? 'billing_inactive' : 'seat_limit_reduced'; + const revokedInviteCount = + inviteIdsToRevoke.length === 0 + ? 0 + : (( + await this.pool.query( + `UPDATE team_workspace_invites + SET status = 'revoked', + revoked_reason = $2, + revoked_at = NOW(), + accepted_by_user_id = NULL, + accepted_at = NULL + WHERE id = ANY($1::uuid[]) + AND status = 'pending'`, + [inviteIdsToRevoke, revokeReason], + ) + ).rowCount ?? 0); + const remainingPendingInvites = Math.max(0, inviteRows.rows.length - revokedInviteCount); + let restoredInviteCount = 0; + if (seatLimit > 0 && remainingPendingInvites < allowedPendingInvites) { + const recoverableInviteIdsRes = await this.pool.query<{ id: string }>( + `SELECT id + FROM team_workspace_invites + WHERE workspace_id = $1 + AND status = 'revoked' + AND revoked_reason IN ('billing_inactive', 'seat_limit_reduced') + ORDER BY revoked_at ASC NULLS LAST, created_at ASC + LIMIT $2`, + [workspaceId, Math.max(0, allowedPendingInvites - remainingPendingInvites)], + ); + const recoverableInviteIds = recoverableInviteIdsRes.rows.map((row) => row.id); + restoredInviteCount = + recoverableInviteIds.length === 0 + ? 0 + : (( + await this.pool.query( + `UPDATE team_workspace_invites + SET status = 'pending', + revoked_reason = NULL, + revoked_at = NULL, + accepted_by_user_id = NULL, + accepted_at = NULL + WHERE id = ANY($1::uuid[]) + AND status = 'revoked'`, + [recoverableInviteIds], + ) + ).rowCount ?? 0); + } + + const nextSnapshot: WorkspaceBillingSnapshot = { + seatLimit, + billingStatus: owner.billing_status, + cancelAtPeriodEnd: owner.cancel_at_period_end, + reservedSeats: seatsUsed + remainingPendingInvites + restoredInviteCount, + fallbackMemberCount: seatLimit === 0 ? Math.max(0, seatsUsed - 1) : 0, + }; + const descriptors = buildBillingEventDescriptors({ + previous: previousSnapshot, + next: nextSnapshot, + revokedInviteCount, + restoredInviteCount, + }); + await this.persistBillingState(workspaceId, nextSnapshot); + if (descriptors.length > 0) { + await this.recordBillingEvents(workspaceId, descriptors); + } + return { + revokedInviteCount, + restoredInviteCount, + }; + } + + private async getCompensationSummary(workspaceId: string): Promise { + const { rows } = await this.pool.query<{ + revoked_invite_count: string; + }>( + `SELECT COUNT(*)::text AS revoked_invite_count + FROM team_workspace_invites + WHERE workspace_id = $1 + AND status = 'revoked' + AND revoked_reason IN ('billing_inactive', 'seat_limit_reduced')`, + [workspaceId], + ); + return { + revokedInviteCount: Number(rows[0]?.revoked_invite_count ?? 0), + }; + } + + private async buildWorkspaceAccessForUser(user: UserProfile): Promise { + const membership = await this.findMembership(user.id); + if (!membership) return null; + await this.reconcileWorkspaceBillingState(membership.workspaceId); + + const [workspaceRows, ownerRows, memberCountRows, inviteCountRows] = await Promise.all([ + this.pool.query<{ id: string; name: string; owner_user_id: string }>( + `SELECT id, name, owner_user_id + FROM team_workspaces + WHERE id = $1 + LIMIT 1`, + [membership.workspaceId], + ), + this.pool.query<{ + id: string; + email: string; + display_name: string | null; + subscription: SubscriptionTier; + billing_status: BillingStatus; + current_period_end: Date | string | null; + cancel_at_period_end: boolean; + }>( + `SELECT + id, + email, + display_name, + subscription, + billing_status, + current_period_end, + cancel_at_period_end + FROM users + WHERE id = ( + SELECT owner_user_id + FROM team_workspaces + WHERE id = $1 + ) + LIMIT 1`, + [membership.workspaceId], + ), + this.pool.query<{ count: string }>( + `SELECT COUNT(*)::text AS count + FROM team_workspace_members + WHERE workspace_id = $1`, + [membership.workspaceId], + ), + this.pool.query<{ count: string }>( + `SELECT COUNT(*)::text AS count + FROM team_workspace_invites + WHERE workspace_id = $1 + AND status = 'pending'`, + [membership.workspaceId], + ), + ]); + + const workspace = workspaceRows.rows[0]; + const owner = ownerRows.rows[0]; + if (!workspace || !owner) return null; + + return buildWorkspaceAccess({ + user, + context: { + workspaceId: workspace.id, + workspaceName: workspace.name, + role: membership.role, + owner: { + id: owner.id, + email: owner.email, + displayName: owner.display_name, + subscription: owner.subscription, + billingStatus: owner.billing_status, + currentPeriodEnd: owner.current_period_end ? toIso(owner.current_period_end) : null, + cancelAtPeriodEnd: owner.cancel_at_period_end, + }, + seatsUsed: Number(memberCountRows.rows[0]?.count ?? 0), + pendingInviteCount: Number(inviteCountRows.rows[0]?.count ?? 0), + }, + }); + } + + private async buildWorkspaceForUser(userId: string): Promise { + const { rows } = await this.pool.query( + `SELECT m.workspace_id, m.role, m.joined_at, w.name, w.created_at, w.owner_user_id + FROM team_workspace_members m + JOIN team_workspaces w ON w.id = m.workspace_id + WHERE m.user_id = $1 + LIMIT 1`, + [userId], + ); + const membership = rows[0]; + if (!membership) return null; + + const workspaceId = membership.workspace_id; + await this.reconcileWorkspaceBillingState(workspaceId); + const [ + memberRows, + inviteRows, + sharedSavedViewRows, + sharedCaseRows, + ownerRows, + compensation, + recentBillingEvents, + recentRecoveryOutreach, + recentMemberRecoveryNotifications, + ] = await Promise.all([ + this.pool.query( + `SELECT + u.id AS user_id, + u.email, + u.display_name, + m.role, + m.joined_at + FROM team_workspace_members m + JOIN users u ON u.id = m.user_id + WHERE m.workspace_id = $1 + ORDER BY + CASE m.role + WHEN 'owner' THEN 0 + WHEN 'admin' THEN 1 + ELSE 2 + END, + m.joined_at ASC`, + [workspaceId], + ), + this.pool.query( + `SELECT + i.id, + i.workspace_id, + w.name AS workspace_name, + i.email, + i.role, + i.status, + i.created_at, + i.accepted_at, + i.revoked_reason, + i.revoked_at + FROM team_workspace_invites i + JOIN team_workspaces w ON w.id = i.workspace_id + WHERE i.workspace_id = $1 + AND i.status = 'pending' + ORDER BY i.created_at DESC`, + [workspaceId], + ), + this.pool.query( + `SELECT + v.id, + v.name, + v.filters, + v.query_string, + v.case_count_snapshot, + v.created_at, + v.updated_at, + s.saved_view_id AS source_saved_view_id, + s.shared_by_user_id, + u.display_name AS shared_by_name, + s.created_at AS shared_at + FROM team_workspace_saved_views s + JOIN user_saved_views v ON v.id = s.saved_view_id + JOIN users u ON u.id = s.shared_by_user_id + WHERE s.workspace_id = $1 + ORDER BY s.created_at DESC`, + [workspaceId], + ), + this.pool.query( + `SELECT + c.id, + c.slug, + c.company_name, + c.industry_key, + c.country_code, + c.closed_year, + c.summary, + c.business_model_key, + c.founded_year, + c.total_funding_usd, + c.primary_failure_reason_key, + tc.shared_by_user_id, + u.display_name AS shared_by_name, + tc.created_at AS shared_at + FROM team_workspace_cases tc + JOIN cases c + ON c.id = tc.case_id + AND c.published_at IS NOT NULL + JOIN users u ON u.id = tc.shared_by_user_id + WHERE tc.workspace_id = $1 + ORDER BY tc.created_at DESC`, + [workspaceId], + ), + this.pool.query<{ + id: string; + email: string; + display_name: string | null; + subscription: UserProfile['subscription']; + billing_status: UserProfile['billingStatus']; + current_period_end: Date | string | null; + cancel_at_period_end: boolean; + }>( + `SELECT + id, + email, + display_name, + subscription, + billing_status, + current_period_end, + cancel_at_period_end + FROM users + WHERE id = $1 + LIMIT 1`, + [membership.owner_user_id], + ), + this.getCompensationSummary(workspaceId), + this.getRecentBillingEvents(workspaceId), + membership.role === 'owner' ? this.getRecentRecoveryOutreach(workspaceId, 'owner') : [], + membership.role === 'owner' ? this.getRecentMemberRecoveryNotifications(workspaceId) : [], + ]); + + const owner = ownerRows.rows[0]; + if (!owner) return null; + + const mappedRecentBillingEvents = recentBillingEvents.map( + ({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event, + ); + + return { + id: workspaceId, + name: membership.name, + role: membership.role, + canManageMembers: membership.role === 'owner' || membership.role === 'admin', + memberCount: memberRows.rows.length, + sharedSavedViewCount: sharedSavedViewRows.rows.length, + sharedCaseCount: sharedCaseRows.rows.length, + createdAt: toIso(membership.created_at), + billing: buildWorkspaceBilling({ + owner: { + id: owner.id, + email: owner.email, + displayName: owner.display_name, + subscription: owner.subscription, + billingStatus: owner.billing_status, + currentPeriodEnd: owner.current_period_end ? toIso(owner.current_period_end) : null, + cancelAtPeriodEnd: owner.cancel_at_period_end, + }, + seatsUsed: memberRows.rows.length, + pendingInviteCount: inviteRows.rows.length, + compensation, + viewerRole: membership.role, + recentBillingEvents: mappedRecentBillingEvents, + }), + recentBillingEvents: mappedRecentBillingEvents, + recentRecoveryOutreach: + membership.role === 'owner' + ? recentRecoveryOutreach.map( + ({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event, + ) + : [], + recentMemberRecoveryNotifications, + members: memberRows.rows.map(rowToMember), + invites: inviteRows.rows.map(rowToInvite), + sharedSavedViews: sharedSavedViewRows.rows.map(rowToSharedSavedView), + sharedCases: sharedCaseRows.rows.map(rowToSharedCase), + }; + } +} diff --git a/services/api/src/repositories/teamWorkspacesRepository.ts b/services/api/src/repositories/teamWorkspacesRepository.ts index 88d7e27..38bc0b9 100644 --- a/services/api/src/repositories/teamWorkspacesRepository.ts +++ b/services/api/src/repositories/teamWorkspacesRepository.ts @@ -1,5637 +1,7 @@ -import { randomUUID } from 'node:crypto'; -import type { Pool } from 'pg'; -import type { TeamWorkspaceAdminMetrics } from '@sg/shared/schemas/adminStats'; -import type { UserProfile, WorkspaceAccess } from '@sg/shared/schemas/auth'; -import { - resolveEntitlements, - resolveTeamWorkspaceSeatLimit, - type BillingStatus, - type SubscriptionTier, -} from '@sg/shared/billing'; -import type { - TeamWorkspaceBilling, - TeamWorkspaceBillingRecoveryAction, - TeamWorkspaceBillingRecoveryActionCode, - TeamWorkspaceBillingEvent, - TeamWorkspaceBillingEventSeverity, - TeamWorkspaceBillingEventType, - TeamWorkspaceRecoveryOutreach, - TeamWorkspaceRecoveryOutreachAudience, - TeamWorkspaceRecoveryOutreachChannel, - TeamWorkspaceRecoveryOutreachHandoffChannel, - TeamWorkspaceRecoveryPlaybookRun, - TeamWorkspaceRecoveryPlaybookStepName, - TeamWorkspaceRecoveryPlaybookSteps, - TeamWorkspaceRecoveryOutreachStatus, - TeamWorkspaceBillingWarning, - TeamWorkspace, - TeamWorkspaceContextResponse, - TeamWorkspaceInvite, - TeamWorkspaceMemberRecoveryNotification, - TeamWorkspaceMember, - TeamWorkspaceRole, - TeamWorkspaceSharedCase, - TeamWorkspaceSharedSavedView, -} from '@sg/shared/schemas/teamWorkspace'; -import type { CasesRepository } from './casesRepository.js'; -import type { BillingFunnelRepository, BillingFunnelUserTouch } from './billingFunnelRepository.js'; -import type { SavedViewsRepository } from './savedViewsRepository.js'; -import type { UsersRepository } from './usersRepository.js'; -import { config } from '../config/index.js'; - -type ManageRole = Exclude; - -type WorkspaceMembershipRecord = { - workspaceId: string; - role: TeamWorkspaceRole; - joinedAt: string; -}; - -type WorkspaceRecord = { - id: string; - name: string; - ownerUserId: string; - createdAt: string; -}; - -type WorkspaceInviteRecord = TeamWorkspaceInvite; -type WorkspaceInviteRevocationReason = - | 'billing_inactive' - | 'seat_limit_reduced' - | 'accepted_elsewhere'; - -type WorkspaceSharedSavedViewRecord = { - workspaceId: string; - savedViewId: string; - sharedByUserId: string; - sharedAt: string; -}; - -type WorkspaceSharedCaseRecord = { - workspaceId: string; - caseId: string; - sharedByUserId: string; - sharedAt: string; -}; - -type PgWorkspaceMembershipRow = { - workspace_id: string; - role: TeamWorkspaceRole; - joined_at: Date | string; - name: string; - created_at: Date | string; - owner_user_id: string; -}; - -type PgWorkspaceInviteRow = { - id: string; - workspace_id: string; - workspace_name: string; - email: string; - role: ManageRole; - status: 'pending' | 'accepted' | 'revoked'; - created_at: Date | string; - accepted_at: Date | string | null; - revoked_reason: WorkspaceInviteRevocationReason | null; - revoked_at: Date | string | null; -}; - -type PgWorkspaceMemberRow = { - user_id: string; - email: string; - display_name: string | null; - role: TeamWorkspaceRole; - joined_at: Date | string; -}; - -type PgWorkspaceSavedViewRow = { - id: string; - name: string; - filters: string | Record; - query_string: string; - case_count_snapshot: string | number; - created_at: Date | string; - updated_at: Date | string; - source_saved_view_id: string; - shared_by_user_id: string; - shared_by_name: string | null; - shared_at: Date | string; -}; - -type PgWorkspaceCaseRow = { - id: string; - slug: string; - company_name: string; - industry_key: string; - country_code: string | null; - closed_year: number | null; - summary: string; - business_model_key: string | null; - founded_year: number | null; - total_funding_usd: string | number | null; - primary_failure_reason_key: string | null; - shared_by_user_id: string; - shared_by_name: string | null; - shared_at: Date | string; -}; - -type WorkspaceBillingOwner = Pick< - UserProfile, - | 'id' - | 'email' - | 'displayName' - | 'subscription' - | 'billingStatus' - | 'currentPeriodEnd' - | 'cancelAtPeriodEnd' ->; - -type WorkspaceAccessContext = { - workspaceId: string; - workspaceName: string; - role: TeamWorkspaceRole; - owner: WorkspaceBillingOwner; - seatsUsed: number; - pendingInviteCount: number; -}; - -type WorkspaceCompensationSummary = { - revokedInviteCount: number; -}; - -type WorkspaceBillingSnapshot = Pick< - TeamWorkspaceBilling, - 'seatLimit' | 'billingStatus' | 'cancelAtPeriodEnd' | 'reservedSeats' | 'fallbackMemberCount' ->; - -type WorkspaceBillingEventDescriptor = { - type: TeamWorkspaceBillingEventType; - severity: TeamWorkspaceBillingEventSeverity; - title: string; - detail: string; - count: number | null; -}; - -type WorkspaceRecoveryOutreachDescriptor = { - audience: TeamWorkspaceRecoveryOutreachAudience; - channel: TeamWorkspaceRecoveryOutreachChannel; - title: string; - detail: string; - actionCode: TeamWorkspaceBillingRecoveryActionCode | null; -}; - -type WorkspaceMemberRecoveryNotificationDescriptor = { - title: string; - detail: string; -}; - -type AdminBillingEvent = TeamWorkspaceAdminMetrics['recentBillingEvents'][number]; -type AdminRecoveryAction = TeamWorkspaceAdminMetrics['recoveryActions'][number]; -type AdminActionableWorkspace = TeamWorkspaceAdminMetrics['actionableWorkspaces'][number]; -type AdminRecoveryOutreach = TeamWorkspaceAdminMetrics['recoveryOutreach']['recent'][number]; -type AdminRecoveryPlaybookRun = TeamWorkspaceAdminMetrics['recoveryPlaybook']['recent'][number]; -type WorkspaceReconcileResult = { - revokedInviteCount: number; - restoredInviteCount: number; -}; - -type PgWorkspaceBillingEventRow = { - id: string; - workspace_id: string; - workspace_name: string; - event_type: TeamWorkspaceBillingEventType; - severity: TeamWorkspaceBillingEventSeverity; - title: string; - detail: string; - event_count: string | number | null; - created_at: Date | string; -}; - -type PgWorkspaceRecoveryOutreachRow = { - id: string; - workspace_id: string; - workspace_name: string; - audience: TeamWorkspaceRecoveryOutreachAudience; - channel: TeamWorkspaceRecoveryOutreachChannel; - status: TeamWorkspaceRecoveryOutreachStatus; - title: string; - detail: string; - action_code: TeamWorkspaceBillingRecoveryActionCode | null; - attempt_count: number; - created_at: Date | string; - last_attempt_at: Date | string; - next_attempt_at: Date | string | null; - email_attempt_count: number; - last_email_attempt_at: Date | string | null; - next_email_attempt_at: Date | string | null; - last_email_delivered_at: Date | string | null; - last_email_message_id: string | null; - last_email_error: string | null; - export_count: number; - last_exported_at: Date | string | null; - crm_sync_count: number; - last_crm_sync_attempt_at: Date | string | null; - next_crm_sync_attempt_at: Date | string | null; - last_crm_synced_at: Date | string | null; - crm_external_record_id: string | null; - last_crm_sync_status_code: number | null; - last_crm_sync_error: string | null; - webhook_attempt_count: number; - last_webhook_attempt_at: Date | string | null; - next_webhook_attempt_at: Date | string | null; - webhook_exhausted_at: Date | string | null; - webhook_delivery_count: number; - last_webhook_delivered_at: Date | string | null; - last_webhook_status_code: number | null; - last_webhook_error: string | null; - slack_alert_count: number; - last_slack_alert_attempt_at: Date | string | null; - last_slack_alerted_at: Date | string | null; - last_slack_alert_status_code: number | null; - last_slack_alert_error: string | null; - handoff_channel: TeamWorkspaceRecoveryOutreachHandoffChannel | null; - handoff_note: string | null; - handoff_at: Date | string | null; - resolved_at: Date | string | null; -}; - -type PgWorkspaceMemberRecoveryNotificationRow = { - id: string; - workspace_id: string; - user_id: string; - email: string; - display_name: string | null; - status: 'pending' | 'resolved'; - title: string; - detail: string; - email_attempt_count: number; - created_at: Date | string; - last_email_attempt_at: Date | string | null; - next_email_attempt_at: Date | string | null; - last_email_delivered_at: Date | string | null; - last_email_message_id: string | null; - last_email_error: string | null; - resolved_at: Date | string | null; -}; - -type PgWorkspaceRecoveryPlaybookRunRow = { - id: string; - trigger_type: string; - retry_interval_hours: number; - force_run: boolean; - requested_steps: string[] | null; - rerun_of_run_id: string | null; - ok: boolean; - summary: string; - steps: unknown; - created_at: Date | string; -}; - -export type PendingMemberRecoveryNotificationTarget = { - notificationId: string; - workspaceId: string; - workspaceName: string; - userId: string; - email: string; - displayName: string | null; - ownerDisplayName: string | null; - ownerEmail: string; - subscription: SubscriptionTier; - billingStatus: BillingStatus; - title: string; - detail: string; - emailAttemptCount: number; - lastEmailAttemptAt: string | null; - nextEmailAttemptAt: string | null; - lastEmailDeliveredAt: string | null; - lastEmailMessageId: string | null; - lastEmailError: string | null; -}; - -type PgWorkspaceBillingStateRow = { - seat_limit: number; - billing_status: BillingStatus; - cancel_at_period_end: boolean; - reserved_seats: number; - fallback_member_count: number; -}; - -type PgWorkspaceAdminRow = { - workspace_id: string; - workspace_name: string; - owner_user_id: string; - owner_email: string; - owner_display_name: string | null; - subscription: SubscriptionTier; - billing_status: BillingStatus; - cancel_at_period_end: boolean; - member_count: string; - pending_invite_count: string; - revoked_invite_count: string; -}; - -const COMPENSATION_REASONS: ReadonlySet = new Set([ - 'billing_inactive', - 'seat_limit_reduced', -]); -const DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS = 24; -const ALL_RECOVERY_PLAYBOOK_STEP_NAMES: readonly TeamWorkspaceRecoveryPlaybookStepName[] = [ - 'outreach', - 'ownerEmail', - 'memberEmail', - 'crmSync', - 'webhook', - 'slack', -]; - -function toIso(value: Date | string): string { - return value instanceof Date ? value.toISOString() : new Date(value).toISOString(); -} - -function numberOrNull(value: string | number | null): number | null { - if (value == null) return null; - if (typeof value === 'number') return Number.isFinite(value) ? value : null; - const parsed = Number(value); - return Number.isFinite(parsed) ? parsed : null; -} - -function rowToInvite(row: PgWorkspaceInviteRow): TeamWorkspaceInvite { - return { - id: row.id, - workspaceId: row.workspace_id, - workspaceName: row.workspace_name, - email: row.email, - role: row.role, - status: row.status, - createdAt: toIso(row.created_at), - acceptedAt: row.accepted_at ? toIso(row.accepted_at) : null, - }; -} - -function rowToMember(row: PgWorkspaceMemberRow): TeamWorkspaceMember { - return { - userId: row.user_id, - email: row.email, - displayName: row.display_name, - role: row.role, - joinedAt: toIso(row.joined_at), - }; -} - -function rowToSharedSavedView(row: PgWorkspaceSavedViewRow): TeamWorkspaceSharedSavedView { - return { - id: row.id, - name: row.name, - filters: typeof row.filters === 'string' ? JSON.parse(row.filters) : row.filters, - queryString: row.query_string, - caseCount: - typeof row.case_count_snapshot === 'number' - ? row.case_count_snapshot - : Number(row.case_count_snapshot), - createdAt: toIso(row.created_at), - updatedAt: toIso(row.updated_at), - sourceSavedViewId: row.source_saved_view_id, - sharedByUserId: row.shared_by_user_id, - sharedByName: row.shared_by_name, - sharedAt: toIso(row.shared_at), - }; -} - -function rowToSharedCase(row: PgWorkspaceCaseRow): TeamWorkspaceSharedCase { - return { - id: row.id, - slug: row.slug, - companyName: row.company_name, - industry: row.industry_key, - country: row.country_code, - closedYear: row.closed_year, - summary: row.summary, - businessModelKey: row.business_model_key, - foundedYear: row.founded_year, - totalFundingUsd: numberOrNull(row.total_funding_usd), - primaryFailureReasonKey: row.primary_failure_reason_key, - sharedByUserId: row.shared_by_user_id, - sharedByName: row.shared_by_name, - sharedAt: toIso(row.shared_at), - }; -} - -function buildWorkspaceBilling(input: { - owner: WorkspaceBillingOwner; - seatsUsed: number; - pendingInviteCount: number; - compensation?: WorkspaceCompensationSummary; - viewerRole?: TeamWorkspaceRole; - recentBillingEvents?: Array>; -}): TeamWorkspaceBilling { - const seatLimit = resolveTeamWorkspaceSeatLimit({ - subscription: input.owner.subscription, - billingStatus: input.owner.billingStatus, - }); - const reservedSeats = input.seatsUsed + input.pendingInviteCount; - const seatsRemaining = Math.max(0, seatLimit - reservedSeats); - const fallbackMemberCount = seatLimit === 0 ? Math.max(0, input.seatsUsed - 1) : 0; - const revokedInviteCount = input.compensation?.revokedInviteCount ?? 0; - const warningCodes = buildBillingWarnings({ - ownerBillingStatus: input.owner.billingStatus, - cancelAtPeriodEnd: input.owner.cancelAtPeriodEnd, - seatLimit, - reservedSeats, - }); - const recommendedActions = buildRecoveryActions({ - subscription: input.owner.subscription, - billingStatus: input.owner.billingStatus, - warningCodes, - seatLimit, - seatsRemaining, - fallbackMemberCount, - revokedInviteCount, - }); - - const billing = { - ownerUserId: input.owner.id, - ownerDisplayName: input.owner.displayName, - ownerEmail: input.owner.email, - subscription: input.owner.subscription, - billingStatus: input.owner.billingStatus, - currentPeriodEnd: input.owner.currentPeriodEnd, - cancelAtPeriodEnd: input.owner.cancelAtPeriodEnd, - seatLimit, - seatsUsed: input.seatsUsed, - reservedSeats, - seatsRemaining, - fallbackMemberCount, - revokedInviteCount, - canInviteMore: seatLimit > 0 && reservedSeats < seatLimit, - warningCodes, - recommendedActions, - } satisfies Omit; - - return { - ...billing, - recoveryNotices: buildRecoveryNotices({ - viewerRole: input.viewerRole ?? 'owner', - ownerDisplayName: input.owner.displayName, - ownerEmail: input.owner.email, - billing, - recentBillingEvents: input.recentBillingEvents ?? [], - }), - }; -} - -function billingSnapshotFromBilling(billing: TeamWorkspaceBilling): WorkspaceBillingSnapshot { - return { - seatLimit: billing.seatLimit, - billingStatus: billing.billingStatus, - cancelAtPeriodEnd: billing.cancelAtPeriodEnd, - reservedSeats: billing.reservedSeats, - fallbackMemberCount: billing.fallbackMemberCount, - }; -} - -function buildBillingEventDescriptors(input: { - previous: WorkspaceBillingSnapshot | null; - next: WorkspaceBillingSnapshot; - revokedInviteCount: number; - restoredInviteCount: number; -}): WorkspaceBillingEventDescriptor[] { - const events: WorkspaceBillingEventDescriptor[] = []; - const prev = input.previous; - const next = input.next; - - if (!prev) { - if (input.revokedInviteCount > 0) { - events.push({ - type: 'invites_auto_revoked', - severity: 'warning', - title: '工作区邀请已自动撤销', - detail: `账单或席位收紧后，系统自动撤销了 ${input.revokedInviteCount} 条待接受邀请。`, - count: input.revokedInviteCount, - }); - } - if (input.restoredInviteCount > 0) { - events.push({ - type: 'invites_auto_restored', - severity: 'success', - title: '工作区邀请已自动恢复', - detail: `账单或席位恢复后，系统自动恢复了 ${input.restoredInviteCount} 条待接受邀请。`, - count: input.restoredInviteCount, - }); - } - return events; - } - - if (prev.seatLimit > 0 && next.seatLimit === 0) { - events.push({ - type: 'workspace_plan_inactive', - severity: 'critical', - title: 'Team Workspace 已进入降级状态', - detail: '账单所有者当前不再具备有效 Team entitlement，团队权限已暂停继承。', - count: null, - }); - } else if (prev.seatLimit === 0 && next.seatLimit > 0) { - events.push({ - type: 'workspace_plan_restored', - severity: 'success', - title: 'Team Workspace 已恢复可用', - detail: '账单所有者重新恢复了有效 Team entitlement，团队权限可以重新继承。', - count: null, - }); - } else if (next.seatLimit > 0 && prev.seatLimit > next.seatLimit) { - events.push({ - type: 'seat_capacity_reduced', - severity: 'warning', - title: '团队席位上限已收紧', - detail: `工作区席位上限从 ${prev.seatLimit} 收紧到 ${next.seatLimit}。`, - count: next.seatLimit, - }); - } else if (next.seatLimit > prev.seatLimit && prev.seatLimit > 0) { - events.push({ - type: 'seat_capacity_restored', - severity: 'success', - title: '团队席位容量已恢复', - detail: `工作区席位上限从 ${prev.seatLimit} 恢复到 ${next.seatLimit}。`, - count: next.seatLimit, - }); - } - - if (input.revokedInviteCount > 0) { - events.push({ - type: 'invites_auto_revoked', - severity: 'warning', - title: '工作区邀请已自动撤销', - detail: `账单或席位收紧后，系统自动撤销了 ${input.revokedInviteCount} 条待接受邀请。`, - count: input.revokedInviteCount, - }); - } - - if (input.restoredInviteCount > 0) { - events.push({ - type: 'invites_auto_restored', - severity: 'success', - title: '工作区邀请已自动恢复', - detail: `账单或席位恢复后，系统自动恢复了 ${input.restoredInviteCount} 条待接受邀请。`, - count: input.restoredInviteCount, - }); - } - - if (prev.fallbackMemberCount === 0 && next.fallbackMemberCount > 0) { - events.push({ - type: 'members_fallback_started', - severity: 'warning', - title: '成员权限已回退到个人套餐', - detail: `${next.fallbackMemberCount} 名成员当前不再继承 Team 权限，已自动回退到各自个人套餐。`, - count: next.fallbackMemberCount, - }); - } else if (prev.fallbackMemberCount > 0 && next.fallbackMemberCount === 0) { - events.push({ - type: 'members_fallback_cleared', - severity: 'success', - title: '成员 Team 权限已恢复', - detail: '此前回退到个人套餐的成员，现在已经重新继承 Team 权限。', - count: prev.fallbackMemberCount, - }); - } - - return events; -} - -function rowToBillingEvent(row: PgWorkspaceBillingEventRow): AdminBillingEvent { - return { - id: row.id, - workspaceId: row.workspace_id, - workspaceName: row.workspace_name, - type: row.event_type, - severity: row.severity, - title: row.title, - detail: row.detail, - count: numberOrNull(row.event_count), - createdAt: toIso(row.created_at), - }; -} - -function rowToRecoveryOutreach(row: PgWorkspaceRecoveryOutreachRow): AdminRecoveryOutreach { - return { - id: row.id, - workspaceId: row.workspace_id, - workspaceName: row.workspace_name, - audience: row.audience, - channel: row.channel, - status: row.status, - title: row.title, - detail: row.detail, - actionCode: row.action_code, - attemptCount: row.attempt_count, - createdAt: toIso(row.created_at), - lastAttemptAt: toIso(row.last_attempt_at), - nextAttemptAt: row.next_attempt_at ? toIso(row.next_attempt_at) : null, - emailAttemptCount: row.email_attempt_count, - lastEmailAttemptAt: row.last_email_attempt_at ? toIso(row.last_email_attempt_at) : null, - nextEmailAttemptAt: row.next_email_attempt_at ? toIso(row.next_email_attempt_at) : null, - lastEmailDeliveredAt: row.last_email_delivered_at ? toIso(row.last_email_delivered_at) : null, - lastEmailMessageId: row.last_email_message_id, - lastEmailError: row.last_email_error, - exportCount: row.export_count, - lastExportedAt: row.last_exported_at ? toIso(row.last_exported_at) : null, - crmSyncCount: row.crm_sync_count, - lastCrmSyncAttemptAt: row.last_crm_sync_attempt_at ? toIso(row.last_crm_sync_attempt_at) : null, - nextCrmSyncAttemptAt: row.next_crm_sync_attempt_at ? toIso(row.next_crm_sync_attempt_at) : null, - lastCrmSyncedAt: row.last_crm_synced_at ? toIso(row.last_crm_synced_at) : null, - crmExternalRecordId: row.crm_external_record_id, - lastCrmSyncStatusCode: row.last_crm_sync_status_code, - lastCrmSyncError: row.last_crm_sync_error, - webhookAttemptCount: row.webhook_attempt_count, - lastWebhookAttemptAt: row.last_webhook_attempt_at ? toIso(row.last_webhook_attempt_at) : null, - nextWebhookAttemptAt: row.next_webhook_attempt_at ? toIso(row.next_webhook_attempt_at) : null, - webhookExhaustedAt: row.webhook_exhausted_at ? toIso(row.webhook_exhausted_at) : null, - webhookDeliveryCount: row.webhook_delivery_count, - lastWebhookDeliveredAt: row.last_webhook_delivered_at - ? toIso(row.last_webhook_delivered_at) - : null, - lastWebhookStatusCode: row.last_webhook_status_code, - lastWebhookError: row.last_webhook_error, - slackAlertCount: row.slack_alert_count, - lastSlackAlertAttemptAt: row.last_slack_alert_attempt_at - ? toIso(row.last_slack_alert_attempt_at) - : null, - lastSlackAlertedAt: row.last_slack_alerted_at ? toIso(row.last_slack_alerted_at) : null, - lastSlackAlertStatusCode: row.last_slack_alert_status_code, - lastSlackAlertError: row.last_slack_alert_error, - handoffChannel: row.handoff_channel, - handoffNote: row.handoff_note, - handoffAt: row.handoff_at ? toIso(row.handoff_at) : null, - resolvedAt: row.resolved_at ? toIso(row.resolved_at) : null, - }; -} - -function rowToRecoveryPlaybookRun( - row: PgWorkspaceRecoveryPlaybookRunRow, -): AdminRecoveryPlaybookRun { - const asRecord = (input: unknown): Record => - input && typeof input === 'object' ? (input as Record) : {}; - const asStringOrNull = (input: unknown): string | null => - typeof input === 'string' ? input : null; - const asNumberOrZero = (input: unknown): number => - typeof input === 'number' && Number.isFinite(input) ? input : 0; - const asNumberOrNull = (input: unknown): number | null => - typeof input === 'number' && Number.isFinite(input) ? input : null; - const normalizeDeliveryStatus = ( - input: unknown, - ): TeamWorkspaceRecoveryPlaybookSteps['ownerEmail']['status'] => - input === 'completed' || input === 'skipped' || input === 'disabled' || input === 'failed' - ? input - : 'skipped'; - const normalizeOutreachStatus = ( - input: unknown, - ): TeamWorkspaceRecoveryPlaybookSteps['outreach']['status'] => - input === 'completed' || input === 'skipped' || input === 'failed' ? input : 'completed'; - const rawSteps = - typeof row.steps === 'string' ? (JSON.parse(row.steps) as Record) : row.steps; - const stepsRecord = asRecord(rawSteps); - const normalizeDeliveryStep = (input: unknown) => { - const step = asRecord(input); - return { - status: normalizeDeliveryStatus(step.status), - attemptedCount: asNumberOrZero(step.attemptedCount), - successCount: asNumberOrZero(step.successCount), - failedCount: asNumberOrZero(step.failedCount), - skippedReason: asStringOrNull(step.skippedReason), - error: asStringOrNull(step.error), - detail: asStringOrNull(step.detail), - statusCode: asNumberOrNull(step.statusCode), - }; - }; - const outreachStep = asRecord(stepsRecord.outreach); - const normalizedSteps: TeamWorkspaceRecoveryPlaybookSteps = { - outreach: { - status: normalizeOutreachStatus(outreachStep.status), - workspaceCount: asNumberOrZero(outreachStep.workspaceCount), - ownerOutreachCreated: asNumberOrZero(outreachStep.ownerOutreachCreated), - adminOutreachCreated: asNumberOrZero(outreachStep.adminOutreachCreated), - retriedOutreachCount: asNumberOrZero(outreachStep.retriedOutreachCount), - resolvedOutreachCount: asNumberOrZero(outreachStep.resolvedOutreachCount), - skippedReason: asStringOrNull(outreachStep.skippedReason), - detail: asStringOrNull(outreachStep.detail), - }, - ownerEmail: normalizeDeliveryStep(stepsRecord.ownerEmail), - memberEmail: normalizeDeliveryStep(stepsRecord.memberEmail), - crmSync: normalizeDeliveryStep(stepsRecord.crmSync), - webhook: normalizeDeliveryStep(stepsRecord.webhook), - slack: normalizeDeliveryStep(stepsRecord.slack), - }; - const requestedSteps = Array.isArray(row.requested_steps) - ? row.requested_steps.filter((step): step is TeamWorkspaceRecoveryPlaybookStepName => - ALL_RECOVERY_PLAYBOOK_STEP_NAMES.includes(step as TeamWorkspaceRecoveryPlaybookStepName), - ) - : ALL_RECOVERY_PLAYBOOK_STEP_NAMES.slice(); - return { - id: row.id, - triggerType: row.trigger_type, - retryIntervalHours: row.retry_interval_hours, - force: row.force_run, - requestedSteps, - rerunOfRunId: row.rerun_of_run_id, - ok: row.ok, - summary: row.summary, - steps: normalizedSteps, - createdAt: toIso(row.created_at), - }; -} - -function rowToMemberRecoveryNotification( - row: PgWorkspaceMemberRecoveryNotificationRow, -): TeamWorkspaceMemberRecoveryNotification { - return { - id: row.id, - userId: row.user_id, - email: row.email, - displayName: row.display_name, - status: row.status, - title: row.title, - detail: row.detail, - emailAttemptCount: row.email_attempt_count, - createdAt: toIso(row.created_at), - lastEmailAttemptAt: row.last_email_attempt_at ? toIso(row.last_email_attempt_at) : null, - nextEmailAttemptAt: row.next_email_attempt_at ? toIso(row.next_email_attempt_at) : null, - lastEmailDeliveredAt: row.last_email_delivered_at ? toIso(row.last_email_delivered_at) : null, - lastEmailMessageId: row.last_email_message_id, - lastEmailError: row.last_email_error, - resolvedAt: row.resolved_at ? toIso(row.resolved_at) : null, - }; -} - -function nextRecoveryOutreachAttemptAt(lastAttemptAt: string, retryIntervalHours: number): string { - return new Date( - new Date(lastAttemptAt).getTime() + retryIntervalHours * 60 * 60 * 1000, - ).toISOString(); -} - -function buildBillingWarnings(input: { - ownerBillingStatus: BillingStatus; - cancelAtPeriodEnd: boolean; - seatLimit: number; - reservedSeats: number; -}): TeamWorkspaceBillingWarning[] { - const warningCodes: TeamWorkspaceBillingWarning[] = []; - - if (input.seatLimit === 0) warningCodes.push('workspace_plan_inactive'); - if (input.ownerBillingStatus === 'past_due') warningCodes.push('past_due'); - if (input.cancelAtPeriodEnd) warningCodes.push('cancel_at_period_end'); - if (input.seatLimit > 0 && input.reservedSeats >= input.seatLimit) { - warningCodes.push('seat_limit_reached'); - } - - return warningCodes; -} - -function buildRecoveryActions(input: { - subscription: SubscriptionTier; - billingStatus: BillingStatus; - warningCodes: TeamWorkspaceBillingWarning[]; - seatLimit: number; - seatsRemaining: number; - fallbackMemberCount: number; - revokedInviteCount: number; -}): TeamWorkspaceBillingRecoveryAction[] { - const actions: TeamWorkspaceBillingRecoveryAction[] = []; - const seenCodes = new Set(); - - const pushAction = (action: TeamWorkspaceBillingRecoveryAction) => { - if (seenCodes.has(action.code)) return; - seenCodes.add(action.code); - actions.push(action); - }; - - if (input.warningCodes.includes('workspace_plan_inactive')) { - if (input.subscription === 'team') { - pushAction({ - code: 'resume_team_subscription', - title: '恢复 Team 订阅', - detail: - input.fallbackMemberCount > 0 - ? `当前已有 ${input.fallbackMemberCount} 名成员回退到个人权限。请尽快通过账单入口恢复 Team 订阅，恢复后成员权限会自动重新继承。` - : '当前工作区已失去 Team entitlement。请通过账单入口恢复 Team 订阅，恢复后工作区席位和邀请能力会自动恢复。', - surface: 'billing_portal', - }); - } else { - pushAction({ - code: 'upgrade_to_team', - title: '重新升级到 Team', - detail: - input.revokedInviteCount > 0 - ? `当前工作区已不再处于 Team 套餐，系统已经撤销 ${input.revokedInviteCount} 条待接受邀请。重新升级到 Team 后可恢复团队协作能力。` - : '当前工作区所有者已不再处于 Team 套餐。重新升级到 Team 后，工作区席位、邀请和共享能力会重新生效。', - surface: 'checkout', - }); - } - } - - if (input.warningCodes.includes('past_due') && input.subscription === 'team') { - pushAction({ - code: 'update_payment_method', - title: '更新支付方式并完成扣款', - detail: - '当前 Team 订阅处于 past due。优先通过 billing portal 更新付款方式并完成补扣，避免工作区继续进入降级补偿流程。', - surface: 'billing_portal', - }); - } - - if (input.warningCodes.includes('cancel_at_period_end') && input.subscription === 'team') { - pushAction({ - code: 'renew_team_subscription', - title: '续订 Team 套餐', - detail: '当前订阅已设置到期取消。若希望团队协作持续生效，请在当前周期结束前恢复自动续费。', - surface: 'billing_portal', - }); - } - - if (input.warningCodes.includes('seat_limit_reached') && input.seatLimit > 0) { - pushAction({ - code: 'free_up_seats', - title: '释放或补充团队席位', - detail: - input.seatsRemaining === 0 - ? '当前席位已经用满。请先处理待接受邀请或减少团队成员，再继续邀请新成员。' - : '当前可用席位已接近耗尽。建议先清理不用的邀请或成员，避免后续团队协作被阻断。', - surface: 'workspace_members', - }); - } - - return actions; -} - -function buildRecoveryNotices(input: { - viewerRole: TeamWorkspaceRole; - ownerDisplayName: string | null; - ownerEmail: string; - billing: Omit; - recentBillingEvents: Array>; -}): TeamWorkspaceBilling['recoveryNotices'] { - const notices: TeamWorkspaceBilling['recoveryNotices'] = []; - const seenCodes = new Set(); - const ownerLabel = input.ownerDisplayName ?? input.ownerEmail; - - const pushNotice = (notice: TeamWorkspaceBilling['recoveryNotices'][number]) => { - if (seenCodes.has(notice.code)) return; - seenCodes.add(notice.code); - notices.push(notice); - }; - - if (input.billing.warningCodes.includes('workspace_plan_inactive')) { - if (input.viewerRole === 'owner') { - const primaryAction = input.billing.recommendedActions.find( - (action) => action.code === 'resume_team_subscription' || action.code === 'upgrade_to_team', - ); - pushNotice({ - code: 'workspace_plan_inactive', - severity: 'critical', - title: 'Team Workspace 已进入恢复期', - detail: - input.billing.fallbackMemberCount > 0 || input.billing.revokedInviteCount > 0 - ? `当前已有 ${input.billing.fallbackMemberCount} 名成员回退到个人权限，${input.billing.revokedInviteCount} 条邀请被系统撤销。请优先恢复 Team 订阅，恢复后成员权限和邀请会自动补齐。` - : '当前工作区已经失去有效 Team entitlement。请优先恢复 Team 订阅，恢复后席位、邀请和共享能力会自动回到正常状态。', - actionCode: primaryAction?.code ?? null, - }); - } else { - pushNotice({ - code: 'workspace_plan_inactive', - severity: 'warning', - title: '当前团队权限已暂停继承', - detail: `你现在按个人套餐权限继续使用。若需要恢复 Team 能力，请联系账单所有者 ${ownerLabel} 处理订阅恢复。`, - actionCode: null, - }); - } - } - - if (input.billing.warningCodes.includes('past_due')) { - if (input.viewerRole === 'owner') { - pushNotice({ - code: 'past_due', - severity: 'warning', - title: 'Team 订阅付款待处理', - detail: - '请尽快通过 billing portal 更新支付方式并完成补扣，避免工作区继续停留在降级风险中。', - actionCode: - input.billing.recommendedActions.find((action) => action.code === 'update_payment_method') - ?.code ?? null, - }); - } else { - pushNotice({ - code: 'past_due', - severity: 'warning', - title: '团队订阅存在付款风险', - detail: `账单所有者 ${ownerLabel} 需要完成补款或更新支付方式，否则团队权限可能进一步收紧。`, - actionCode: null, - }); - } - } - - if (input.billing.warningCodes.includes('cancel_at_period_end')) { - if (input.viewerRole === 'owner') { - pushNotice({ - code: 'cancel_at_period_end', - severity: 'warning', - title: 'Team 订阅已设置到期取消', - detail: '如果希望团队协作持续生效，请在当前计费周期结束前恢复自动续费。', - actionCode: - input.billing.recommendedActions.find( - (action) => action.code === 'renew_team_subscription', - )?.code ?? null, - }); - } else { - pushNotice({ - code: 'cancel_at_period_end', - severity: 'info', - title: '团队订阅将在当前周期结束后取消', - detail: `如果 ${ownerLabel} 不恢复续费，当前工作区后续会回退到个人套餐权限。`, - actionCode: null, - }); - } - } - - if ( - input.billing.warningCodes.includes('seat_limit_reached') && - (input.viewerRole === 'owner' || input.viewerRole === 'admin') - ) { - pushNotice({ - code: 'seat_limit_reached', - severity: 'warning', - title: '团队席位已满', - detail: - input.billing.revokedInviteCount > 0 - ? `当前席位已满，且系统已经撤销 ${input.billing.revokedInviteCount} 条待接受邀请。请先清理成员或邀请，再继续扩展团队。` - : '当前席位已经用满。请先释放成员或处理待接受邀请，再继续邀请新成员。', - actionCode: - input.billing.recommendedActions.find((action) => action.code === 'free_up_seats')?.code ?? - null, - }); - } - - if (input.recentBillingEvents.some((event) => event.type === 'invites_auto_restored')) { - const restoredCount = - input.recentBillingEvents.find((event) => event.type === 'invites_auto_restored')?.count ?? - null; - pushNotice({ - code: 'invites_restored', - severity: 'success', - title: '已恢复被撤销的待接受邀请', - detail: - restoredCount && restoredCount > 0 - ? `系统已经恢复 ${restoredCount} 条此前因账单或席位风险被撤销的邀请，你现在可以直接继续跟进成员加入。` - : '系统已经恢复此前因账单或席位风险被撤销的待接受邀请，你现在可以直接继续跟进成员加入。', - actionCode: null, - }); - } - - if (input.recentBillingEvents.some((event) => event.type === 'members_fallback_cleared')) { - pushNotice({ - code: 'team_access_restored', - severity: 'success', - title: 'Team 权限已重新恢复', - detail: - input.viewerRole === 'owner' - ? '此前回退到个人套餐的成员已经重新继承 Team 权限。' - : '你现在已经重新继承当前 Team Workspace 的团队权限，可继续使用保存视图、导出和协作能力。', - actionCode: null, - }); - } - - return notices; -} - -function buildRecoveryOutreachDescriptors(input: { - workspaceName: string; - billing: TeamWorkspaceBilling; -}): WorkspaceRecoveryOutreachDescriptor[] { - if (input.billing.recommendedActions.length === 0) return []; - - const descriptors: WorkspaceRecoveryOutreachDescriptor[] = []; - const primaryAction = input.billing.recommendedActions[0] ?? null; - const primaryNotice = input.billing.recoveryNotices[0] ?? null; - - descriptors.push({ - audience: 'owner', - channel: 'owner_banner', - title: primaryNotice?.title ?? `请尽快处理 ${input.workspaceName} 的 Team Workspace 账单风险`, - detail: - primaryNotice?.detail ?? - primaryAction?.detail ?? - '当前工作区存在待恢复的账单或席位风险，请尽快处理。', - actionCode: primaryAction?.code ?? null, - }); - - if ( - input.billing.fallbackMemberCount > 0 || - input.billing.revokedInviteCount > 0 || - input.billing.warningCodes.includes('past_due') - ) { - descriptors.push({ - audience: 'admin', - channel: 'admin_queue', - title: `${input.workspaceName} 需要运营跟进`, - detail: - input.billing.fallbackMemberCount > 0 - ? `${input.billing.fallbackMemberCount} 名成员已回退到个人权限，请关注 owner 是否及时恢复订阅。` - : input.billing.revokedInviteCount > 0 - ? `${input.billing.revokedInviteCount} 条邀请已被系统撤销，请跟进 owner 恢复 Team 后重新推进成员加入。` - : '当前 Team 订阅存在付款或续费风险，请关注 owner 的恢复动作是否完成。', - actionCode: primaryAction?.code ?? null, - }); - } - - return descriptors; -} - -function buildMemberRecoveryNotificationDescriptor(input: { - workspaceName: string; - ownerDisplayName: string | null; - ownerEmail: string; - billing: TeamWorkspaceBilling; -}): WorkspaceMemberRecoveryNotificationDescriptor | null { - if (input.billing.fallbackMemberCount === 0) return null; - const ownerLabel = input.ownerDisplayName ?? input.ownerEmail; - const primaryNotice = - input.billing.recoveryNotices.find((notice) => notice.code === 'workspace_plan_inactive') ?? - input.billing.recoveryNotices[0] ?? - null; - - return { - title: `${input.workspaceName} 已暂时回退到个人权限`, - detail: primaryNotice - ? `${primaryNotice.detail} 当前账单所有者是 ${ownerLabel}。系统会在恢复后自动重新授予 Team 权限。` - : `你当前在 Team Workspace「${input.workspaceName}」里的团队权限已暂时回退到个人套餐，请联系账单所有者 ${ownerLabel} 恢复订阅。系统会在恢复后自动重新授予 Team 权限。`, - }; -} - -function summarizeMemberRecoveryNotifications( - notifications: TeamWorkspaceMemberRecoveryNotification[], -): { - pendingCount: number; - retryingCount: number; - deliveredCount: number; - failedCount: number; - nextEmailAttemptAt: string | null; - lastEmailDeliveredAt: string | null; - lastEmailError: string | null; -} { - let pendingCount = 0; - let retryingCount = 0; - let deliveredCount = 0; - let failedCount = 0; - let nextEmailAttemptAt: string | null = null; - let lastEmailDeliveredAt: string | null = null; - let lastEmailError: string | null = null; - - for (const notification of notifications) { - if (notification.status !== 'pending') continue; - if (notification.lastEmailDeliveredAt) { - deliveredCount += 1; - if ( - lastEmailDeliveredAt == null || - new Date(notification.lastEmailDeliveredAt).getTime() > - new Date(lastEmailDeliveredAt).getTime() - ) { - lastEmailDeliveredAt = notification.lastEmailDeliveredAt; - } - continue; - } - if (notification.lastEmailError) { - if (notification.nextEmailAttemptAt) { - retryingCount += 1; - if ( - nextEmailAttemptAt == null || - new Date(notification.nextEmailAttemptAt).getTime() < - new Date(nextEmailAttemptAt).getTime() - ) { - nextEmailAttemptAt = notification.nextEmailAttemptAt; - } - } else { - failedCount += 1; - } - lastEmailError = notification.lastEmailError; - continue; - } - pendingCount += 1; - if ( - notification.nextEmailAttemptAt && - (nextEmailAttemptAt == null || - new Date(notification.nextEmailAttemptAt).getTime() < - new Date(nextEmailAttemptAt).getTime()) - ) { - nextEmailAttemptAt = notification.nextEmailAttemptAt; - } - } - - return { - pendingCount, - retryingCount, - deliveredCount, - failedCount, - nextEmailAttemptAt, - lastEmailDeliveredAt, - lastEmailError, - }; -} - -function hasOwnerRecoveryEngagement(touch: BillingFunnelUserTouch | null | undefined): boolean { - if (!touch) return false; - return ( - touch.type === 'checkout_started' || - touch.type === 'checkout_completed' || - touch.type === 'portal_started' || - touch.type === 'subscription_recovered' - ); -} - -function accumulateRecoveryActions( - actions: TeamWorkspaceBillingRecoveryAction[], - counts: Map, -) { - for (const action of actions) { - const existing = counts.get(action.code); - if (existing) { - existing.count += 1; - continue; - } - counts.set(action.code, { - code: action.code, - title: action.title, - count: 1, - }); - } -} - -function toAdminActionableWorkspace(input: { - workspaceId: string; - workspaceName: string; - owner: WorkspaceBillingOwner; - billing: TeamWorkspaceBilling; - pendingInvites: number; - lastBillingEvent?: Pick | null; - lastOutreach?: Pick< - AdminRecoveryOutreach, - | 'title' - | 'createdAt' - | 'lastAttemptAt' - | 'audience' - | 'channel' - | 'status' - | 'attemptCount' - | 'nextAttemptAt' - | 'emailAttemptCount' - | 'lastEmailAttemptAt' - | 'nextEmailAttemptAt' - | 'lastEmailDeliveredAt' - | 'lastEmailMessageId' - | 'lastEmailError' - | 'exportCount' - | 'lastExportedAt' - | 'crmSyncCount' - | 'lastCrmSyncAttemptAt' - | 'nextCrmSyncAttemptAt' - | 'lastCrmSyncedAt' - | 'crmExternalRecordId' - | 'lastCrmSyncStatusCode' - | 'lastCrmSyncError' - | 'webhookAttemptCount' - | 'lastWebhookAttemptAt' - | 'nextWebhookAttemptAt' - | 'webhookExhaustedAt' - | 'webhookDeliveryCount' - | 'lastWebhookDeliveredAt' - | 'lastWebhookStatusCode' - | 'lastWebhookError' - | 'slackAlertCount' - | 'lastSlackAlertAttemptAt' - | 'lastSlackAlertedAt' - | 'lastSlackAlertStatusCode' - | 'lastSlackAlertError' - | 'handoffChannel' - | 'handoffAt' - | 'handoffNote' - > | null; - memberRecoveryNotifications?: { - pendingCount: number; - retryingCount: number; - deliveredCount: number; - failedCount: number; - nextEmailAttemptAt: string | null; - lastEmailDeliveredAt: string | null; - lastEmailError: string | null; - } | null; -}): AdminActionableWorkspace { - return { - workspaceId: input.workspaceId, - workspaceName: input.workspaceName, - ownerUserId: input.owner.id, - ownerDisplayName: input.owner.displayName, - ownerEmail: input.owner.email, - subscription: input.owner.subscription, - billingStatus: input.owner.billingStatus, - seatLimit: input.billing.seatLimit, - seatsUsed: input.billing.seatsUsed, - reservedSeats: input.billing.reservedSeats, - pendingInvites: input.pendingInvites, - revokedInvites: input.billing.revokedInviteCount, - fallbackMembers: input.billing.fallbackMemberCount, - warningCodes: input.billing.warningCodes, - recommendedActions: input.billing.recommendedActions, - lastBillingEventAt: input.lastBillingEvent?.createdAt ?? null, - lastBillingEventTitle: input.lastBillingEvent?.title ?? null, - lastCommercialEventAt: null, - lastCommercialEventType: null, - lastCommercialEventSource: null, - recoveryStage: 'needs_outreach', - followUpState: 'needs_initial_touch', - nextFollowUpAt: null, - lastOutreachAt: input.lastOutreach?.lastAttemptAt ?? null, - lastOutreachTitle: input.lastOutreach?.title ?? null, - lastOutreachAudience: input.lastOutreach?.audience ?? null, - lastOutreachChannel: input.lastOutreach?.channel ?? null, - lastOutreachStatus: input.lastOutreach?.status ?? null, - lastOutreachAttemptCount: input.lastOutreach?.attemptCount ?? null, - nextOutreachAttemptAt: input.lastOutreach?.nextAttemptAt ?? null, - lastOutreachEmailAttemptCount: input.lastOutreach?.emailAttemptCount ?? null, - lastOutreachEmailAttemptAt: input.lastOutreach?.lastEmailAttemptAt ?? null, - nextOutreachEmailAttemptAt: input.lastOutreach?.nextEmailAttemptAt ?? null, - lastOutreachEmailDeliveredAt: input.lastOutreach?.lastEmailDeliveredAt ?? null, - lastOutreachEmailMessageId: input.lastOutreach?.lastEmailMessageId ?? null, - lastOutreachEmailError: input.lastOutreach?.lastEmailError ?? null, - lastOutreachExportCount: input.lastOutreach?.exportCount ?? null, - lastOutreachExportedAt: input.lastOutreach?.lastExportedAt ?? null, - lastOutreachCrmSyncCount: input.lastOutreach?.crmSyncCount ?? null, - lastOutreachCrmSyncAttemptAt: input.lastOutreach?.lastCrmSyncAttemptAt ?? null, - nextOutreachCrmSyncAttemptAt: input.lastOutreach?.nextCrmSyncAttemptAt ?? null, - lastOutreachCrmSyncedAt: input.lastOutreach?.lastCrmSyncedAt ?? null, - lastOutreachCrmExternalRecordId: input.lastOutreach?.crmExternalRecordId ?? null, - lastOutreachCrmSyncStatusCode: input.lastOutreach?.lastCrmSyncStatusCode ?? null, - lastOutreachCrmSyncError: input.lastOutreach?.lastCrmSyncError ?? null, - lastOutreachWebhookAttemptCount: input.lastOutreach?.webhookAttemptCount ?? null, - lastOutreachWebhookAttemptAt: input.lastOutreach?.lastWebhookAttemptAt ?? null, - nextOutreachWebhookAttemptAt: input.lastOutreach?.nextWebhookAttemptAt ?? null, - lastOutreachWebhookExhaustedAt: input.lastOutreach?.webhookExhaustedAt ?? null, - lastOutreachWebhookDeliveryCount: input.lastOutreach?.webhookDeliveryCount ?? null, - lastOutreachWebhookDeliveredAt: input.lastOutreach?.lastWebhookDeliveredAt ?? null, - lastOutreachWebhookStatusCode: input.lastOutreach?.lastWebhookStatusCode ?? null, - lastOutreachWebhookError: input.lastOutreach?.lastWebhookError ?? null, - lastOutreachSlackAlertCount: input.lastOutreach?.slackAlertCount ?? null, - lastOutreachSlackAlertAttemptAt: input.lastOutreach?.lastSlackAlertAttemptAt ?? null, - lastOutreachSlackAlertedAt: input.lastOutreach?.lastSlackAlertedAt ?? null, - lastOutreachSlackAlertStatusCode: input.lastOutreach?.lastSlackAlertStatusCode ?? null, - lastOutreachSlackAlertError: input.lastOutreach?.lastSlackAlertError ?? null, - lastOutreachHandoffChannel: input.lastOutreach?.handoffChannel ?? null, - lastOutreachHandoffAt: input.lastOutreach?.handoffAt ?? null, - lastOutreachHandoffNote: input.lastOutreach?.handoffNote ?? null, - memberRecoveryPendingCount: input.memberRecoveryNotifications?.pendingCount ?? 0, - memberRecoveryRetryingCount: input.memberRecoveryNotifications?.retryingCount ?? 0, - memberRecoveryDeliveredCount: input.memberRecoveryNotifications?.deliveredCount ?? 0, - memberRecoveryFailedCount: input.memberRecoveryNotifications?.failedCount ?? 0, - memberRecoveryNextEmailAttemptAt: input.memberRecoveryNotifications?.nextEmailAttemptAt ?? null, - memberRecoveryLastEmailDeliveredAt: - input.memberRecoveryNotifications?.lastEmailDeliveredAt ?? null, - memberRecoveryLastEmailError: input.memberRecoveryNotifications?.lastEmailError ?? null, - }; -} - -function personalWorkspaceAccess(user: UserProfile): WorkspaceAccess { - return { - source: 'personal', - workspaceId: null, - workspaceName: null, - workspaceRole: null, - inheritedFromUserId: null, - inheritedFromName: null, - effectiveSubscription: user.subscription, - effectiveBillingStatus: user.billingStatus, - warningCodes: [], - }; -} - -function buildWorkspaceAccess(input: { - user: UserProfile; - context: WorkspaceAccessContext; -}): WorkspaceAccess { - const seatLimit = resolveTeamWorkspaceSeatLimit({ - subscription: input.context.owner.subscription, - billingStatus: input.context.owner.billingStatus, - }); - const reservedSeats = input.context.seatsUsed + input.context.pendingInviteCount; - const warningCodes = buildBillingWarnings({ - ownerBillingStatus: input.context.owner.billingStatus, - cancelAtPeriodEnd: input.context.owner.cancelAtPeriodEnd, - seatLimit, - reservedSeats, - }); - const inheritsWorkspaceAccess = - input.context.owner.subscription === 'team' && input.context.owner.billingStatus !== 'inactive' - ? seatLimit > 0 - : false; - - return { - source: inheritsWorkspaceAccess ? 'team_workspace' : 'personal', - workspaceId: input.context.workspaceId, - workspaceName: input.context.workspaceName, - workspaceRole: input.context.role, - inheritedFromUserId: inheritsWorkspaceAccess ? input.context.owner.id : null, - inheritedFromName: inheritsWorkspaceAccess - ? (input.context.owner.displayName ?? input.context.owner.email) - : null, - effectiveSubscription: inheritsWorkspaceAccess ? 'team' : input.user.subscription, - effectiveBillingStatus: inheritsWorkspaceAccess - ? input.context.owner.billingStatus - : input.user.billingStatus, - warningCodes, - }; -} - -function applyWorkspaceAccess(user: UserProfile, access: WorkspaceAccess | null): UserProfile { - const resolvedAccess = access ?? personalWorkspaceAccess(user); - return { - ...user, - effectiveSubscription: resolvedAccess.effectiveSubscription, - effectiveBillingStatus: resolvedAccess.effectiveBillingStatus, - entitlements: resolveEntitlements({ - subscription: resolvedAccess.effectiveSubscription, - billingStatus: resolvedAccess.effectiveBillingStatus, - }), - workspaceAccess: resolvedAccess, - }; -} - -export interface TeamWorkspacesRepository { - resolveEffectiveUserProfile(user: UserProfile): Promise; - getContextForUser(user: UserProfile): Promise; - getAdminMetrics(): Promise; - listRecentRecoveryPlaybookRuns(limit: number): Promise; - getRecoveryPlaybookRunById(runId: string): Promise; - recordRecoveryPlaybookRun(input: { - triggerType: string; - retryIntervalHours: number; - force: boolean; - requestedSteps: TeamWorkspaceRecoveryPlaybookStepName[]; - rerunOfRunId?: string | null; - ok: boolean; - summary: string; - steps: TeamWorkspaceRecoveryPlaybookSteps; - createdAt?: string; - }): Promise; - handoffAdminRecoveryOutreach(input: { - workspaceId: string; - channel: TeamWorkspaceRecoveryOutreachHandoffChannel; - snoozeHours: number; - note?: string | null; - }): Promise<'workspace_not_found' | 'outreach_not_found' | { ok: true }>; - exportHandedOffAdminRecoveryOutreach(): Promise<{ exportedCount: number }>; - listPendingMemberRecoveryNotifications(): Promise; - recordPendingOwnerRecoveryOutreachEmailDelivery(input: { - workspaceIds: string[]; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - messageIdByWorkspaceId?: Record; - }): Promise<{ deliveredCount: number }>; - recordPendingMemberRecoveryNotificationEmailDelivery(input: { - notificationIds: string[]; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - messageIdByNotificationId?: Record; - }): Promise<{ deliveredCount: number }>; - recordHandedOffAdminRecoveryOutreachCrmSync(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - syncedAt?: string; - retryIntervalHours?: number; - externalRecordIdByWorkspaceId?: Record; - }): Promise<{ syncedCount: number }>; - recordDeadLetteredAdminRecoveryOutreachSlackAlert(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - alertedAt?: string; - }): Promise<{ alertedCount: number }>; - recordHandedOffAdminRecoveryOutreachWebhookDelivery(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - maxAttempts?: number; - }): Promise<{ deliveredCount: number }>; - runRecoveryOutreachAutomation(options?: { retryIntervalHours?: number }): Promise<{ - workspaceCount: number; - ownerOutreachCreated: number; - adminOutreachCreated: number; - retriedOutreachCount: number; - resolvedOutreachCount: number; - }>; - reconcileAllBilling(): Promise<{ - workspaceCount: number; - revokedInviteCount: number; - restoredInviteCount: number; - }>; - reconcileBillingForUser( - userId: string, - ): Promise<{ workspaceIds: string[]; revokedInviteCount: number }>; - createWorkspace( - user: UserProfile, - name: string, - ): Promise; - inviteMember( - actorUserId: string, - email: string, - role: ManageRole, - ): Promise< - | TeamWorkspace - | 'workspace_not_found' - | 'forbidden' - | 'user_already_in_workspace' - | 'seat_limit_reached' - | 'workspace_plan_inactive' - >; - acceptInvite( - user: UserProfile, - inviteId: string, - ): Promise< - TeamWorkspace | 'invite_not_found' | 'already_in_workspace' | 'workspace_plan_inactive' - >; - shareSavedView( - actorUserId: string, - savedViewId: string, - ): Promise< - | { status: 'added' | 'exists'; workspace: TeamWorkspace } - | 'workspace_not_found' - | 'saved_view_not_found' - >; - shareCase( - actorUserId: string, - caseId: string, - ): Promise< - | { status: 'added' | 'exists'; workspace: TeamWorkspace } - | 'workspace_not_found' - | 'case_not_found' - >; -} - -export class MockTeamWorkspacesRepository implements TeamWorkspacesRepository { - private readonly workspaces = new Map(); - private readonly membershipByUserId = new Map(); - private readonly invites = new Map< - string, - WorkspaceInviteRecord & { - revokedReason?: WorkspaceInviteRevocationReason | null; - revokedAt?: string | null; - } - >(); - private readonly billingEvents: AdminBillingEvent[] = []; - private readonly recoveryOutreach: AdminRecoveryOutreach[] = []; - private readonly recoveryPlaybookRuns: TeamWorkspaceRecoveryPlaybookRun[] = []; - private readonly memberRecoveryNotifications: Array< - TeamWorkspaceMemberRecoveryNotification & { workspaceId: string; workspaceName: string } - > = []; - private readonly billingStateByWorkspaceId = new Map(); - private readonly sharedSavedViews: WorkspaceSharedSavedViewRecord[] = []; - private readonly sharedCases: WorkspaceSharedCaseRecord[] = []; - - constructor( - private readonly usersRepo: UsersRepository, - private readonly savedViewsRepo: SavedViewsRepository, - private readonly casesRepo: CasesRepository, - private readonly billingFunnelRepo: BillingFunnelRepository, - ) {} - - async resolveEffectiveUserProfile(user: UserProfile): Promise { - return applyWorkspaceAccess(user, await this.buildWorkspaceAccessForUser(user)); - } - - async getContextForUser(user: UserProfile): Promise { - await this.reconcileBillingForUser(user.id); - await this.reconcilePendingInvitesForEmail(user.email); - const workspace = await this.buildWorkspaceForUser(user.id); - return { - canCreateWorkspace: user.entitlements.canUseTeamWorkspace && workspace === null, - hasWorkspace: workspace !== null, - workspace, - pendingInvites: workspace ? [] : this.getPendingInvitesForEmail(user.email), - }; - } - - async reconcileBillingForUser( - userId: string, - ): Promise<{ workspaceIds: string[]; revokedInviteCount: number }> { - const workspaceIds = [...this.workspaces.values()] - .filter((workspace) => workspace.ownerUserId === userId) - .map((workspace) => workspace.id); - let revokedInviteCount = 0; - for (const workspaceId of workspaceIds) { - const result = await this.reconcileWorkspaceBillingState(workspaceId); - revokedInviteCount += result.revokedInviteCount; - } - return { workspaceIds, revokedInviteCount }; - } - - async reconcileAllBilling(): Promise<{ - workspaceCount: number; - revokedInviteCount: number; - restoredInviteCount: number; - }> { - const workspaceIds = [...this.workspaces.values()].map((workspace) => workspace.id); - let revokedInviteCount = 0; - let restoredInviteCount = 0; - for (const workspaceId of workspaceIds) { - const result = await this.reconcileWorkspaceBillingState(workspaceId); - revokedInviteCount += result.revokedInviteCount; - restoredInviteCount += result.restoredInviteCount; - } - return { - workspaceCount: workspaceIds.length, - revokedInviteCount, - restoredInviteCount, - }; - } - - async runRecoveryOutreachAutomation(options?: { retryIntervalHours?: number }): Promise<{ - workspaceCount: number; - ownerOutreachCreated: number; - adminOutreachCreated: number; - retriedOutreachCount: number; - resolvedOutreachCount: number; - }> { - const retryIntervalHours = Math.max( - 0, - options?.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - const workspaces = [...this.workspaces.values()]; - const workspaceIds = workspaces.map((workspace) => workspace.id); - const latestCommercialTouches = await this.billingFunnelRepo.getLatestEventsByUserIds( - workspaces.map((workspace) => workspace.ownerUserId), - ); - const latestCommercialTouchByOwnerId = new Map( - latestCommercialTouches.map((touch) => [touch.userId, touch]), - ); - let ownerOutreachCreated = 0; - let adminOutreachCreated = 0; - let retriedOutreachCount = 0; - let resolvedOutreachCount = 0; - - for (const workspaceId of workspaceIds) { - await this.reconcileWorkspaceBillingState(workspaceId); - const workspace = this.workspaces.get(workspaceId); - if (!workspace) continue; - const owner = await this.usersRepo.getById(workspace.ownerUserId); - if (!owner) continue; - const seatsUsed = [...this.membershipByUserId.values()].filter( - (item) => item.workspaceId === workspaceId, - ).length; - const pendingInviteCount = [...this.invites.values()].filter( - (invite) => invite.workspaceId === workspaceId && invite.status === 'pending', - ).length; - const compensation = this.getCompensationSummary(workspaceId); - const billing = buildWorkspaceBilling({ - owner, - seatsUsed, - pendingInviteCount, - compensation, - viewerRole: 'owner', - recentBillingEvents: this.getRecentBillingEvents(workspaceId), - }); - const descriptors = buildRecoveryOutreachDescriptors({ - workspaceName: workspace.name, - billing, - }); - const memberDescriptor = buildMemberRecoveryNotificationDescriptor({ - workspaceName: workspace.name, - ownerDisplayName: owner.displayName, - ownerEmail: owner.email, - billing, - }); - const fallbackMembers = ( - await Promise.all( - [...this.membershipByUserId.entries()] - .filter( - ([, membership]) => - membership.workspaceId === workspaceId && membership.role !== 'owner', - ) - .map(async ([userId]) => { - const user = await this.usersRepo.getById(userId); - if (!user) return null; - return { - userId, - email: user.email, - displayName: user.displayName, - }; - }), - ) - ).filter( - ( - item, - ): item is { - userId: string; - email: string; - displayName: string | null; - } => item !== null, - ); - const ownerDescriptor = descriptors.find((item) => item.audience === 'owner') ?? null; - const adminDescriptor = descriptors.find((item) => item.audience === 'admin') ?? null; - const ownerTouch = latestCommercialTouchByOwnerId.get(workspace.ownerUserId); - if (hasOwnerRecoveryEngagement(ownerTouch)) { - resolvedOutreachCount += this.resolvePendingRecoveryOutreach(workspaceId, 'owner'); - } else { - ownerOutreachCreated += this.ensurePendingRecoveryOutreach( - workspaceId, - workspace.name, - ownerDescriptor, - retryIntervalHours, - ); - retriedOutreachCount += this.retryPendingRecoveryOutreach( - workspaceId, - ownerDescriptor, - retryIntervalHours, - ); - } - adminOutreachCreated += this.ensurePendingRecoveryOutreach( - workspaceId, - workspace.name, - adminDescriptor, - retryIntervalHours, - ); - retriedOutreachCount += this.retryPendingRecoveryOutreach( - workspaceId, - adminDescriptor, - retryIntervalHours, - ); - if (!ownerDescriptor) { - resolvedOutreachCount += this.resolvePendingRecoveryOutreach(workspaceId, 'owner'); - } - if (!adminDescriptor) { - resolvedOutreachCount += this.resolvePendingRecoveryOutreach(workspaceId, 'admin'); - } - this.syncPendingMemberRecoveryNotifications( - workspaceId, - workspace.name, - fallbackMembers, - memberDescriptor, - ); - } - - return { - workspaceCount: workspaceIds.length, - ownerOutreachCreated, - adminOutreachCreated, - retriedOutreachCount, - resolvedOutreachCount, - }; - } - - async getAdminMetrics(): Promise { - const workspaces = [...this.workspaces.values()]; - let activeWorkspaces = 0; - let atRiskWorkspaces = 0; - let workspacesRequiringAction = 0; - let fullWorkspaces = 0; - let totalSeatCapacity = 0; - let seatsUsed = 0; - let reservedSeats = 0; - let pendingInvites = 0; - let inheritedMembers = 0; - let revokedInvites = 0; - let fallbackMembers = 0; - let pendingOwnerOutreach = 0; - let pendingAdminOutreach = 0; - let pendingEmail = 0; - let retryingEmail = 0; - let deliveredEmail = 0; - let failedEmail = 0; - let pendingMemberEmail = 0; - let retryingMemberEmail = 0; - let deliveredMemberEmail = 0; - let failedMemberEmail = 0; - let multiTouchPending = 0; - let pendingExport = 0; - let pendingCrmSync = 0; - let retryingCrmSync = 0; - let syncedCrm = 0; - let failedCrmSync = 0; - let pendingWebhook = 0; - let retryingWebhook = 0; - let deadLetteredWebhook = 0; - let pendingSlackAlert = 0; - let alertedSlack = 0; - let failedSlackAlert = 0; - let deliveredWebhook = 0; - let failedWebhook = 0; - let handedOffOutreach = 0; - let resolvedOutreach = 0; - const actionableWorkspaces: AdminActionableWorkspace[] = []; - const recoveryActionCounts = new Map< - TeamWorkspaceBillingRecoveryActionCode, - AdminRecoveryAction - >(); - - for (const workspace of workspaces) { - await this.reconcileWorkspaceBillingState(workspace.id); - const owner = await this.usersRepo.getById(workspace.ownerUserId); - if (!owner) continue; - const workspaceSeatsUsed = [...this.membershipByUserId.values()].filter( - (item) => item.workspaceId === workspace.id, - ).length; - const workspacePendingInvites = [...this.invites.values()].filter( - (invite) => invite.workspaceId === workspace.id && invite.status === 'pending', - ).length; - const compensation = this.getCompensationSummary(workspace.id); - const billing = buildWorkspaceBilling({ - owner, - seatsUsed: workspaceSeatsUsed, - pendingInviteCount: workspacePendingInvites, - compensation, - }); - const memberNotificationSummary = summarizeMemberRecoveryNotifications( - this.memberRecoveryNotifications.filter( - (notification) => notification.workspaceId === workspace.id, - ), - ); - - totalSeatCapacity += billing.seatLimit; - seatsUsed += billing.seatsUsed; - reservedSeats += billing.reservedSeats; - pendingInvites += workspacePendingInvites; - revokedInvites += compensation.revokedInviteCount; - fallbackMembers += billing.fallbackMemberCount; - const latestOutreach = - this.recoveryOutreach.find((event) => event.workspaceId === workspace.id) ?? null; - if (billing.recommendedActions.length > 0) { - workspacesRequiringAction += 1; - accumulateRecoveryActions(billing.recommendedActions, recoveryActionCounts); - actionableWorkspaces.push( - toAdminActionableWorkspace({ - workspaceId: workspace.id, - workspaceName: workspace.name, - owner, - billing, - pendingInvites: workspacePendingInvites, - lastBillingEvent: this.getRecentBillingEvents(workspace.id)[0] ?? null, - lastOutreach: latestOutreach, - memberRecoveryNotifications: memberNotificationSummary, - }), - ); - } - if (billing.seatLimit > 0) { - activeWorkspaces += 1; - inheritedMembers += Math.max(0, billing.seatsUsed - 1); - } - if (billing.warningCodes.includes('seat_limit_reached')) fullWorkspaces += 1; - if ( - billing.warningCodes.some( - (code) => - code === 'workspace_plan_inactive' || - code === 'past_due' || - code === 'cancel_at_period_end', - ) - ) { - atRiskWorkspaces += 1; - } - - pendingMemberEmail += memberNotificationSummary.pendingCount; - retryingMemberEmail += memberNotificationSummary.retryingCount; - deliveredMemberEmail += memberNotificationSummary.deliveredCount; - failedMemberEmail += memberNotificationSummary.failedCount; - } - - for (const event of this.recoveryOutreach) { - if (event.status === 'pending') { - if (event.attemptCount > 1) multiTouchPending += 1; - if (event.audience === 'owner') pendingOwnerOutreach += 1; - else pendingAdminOutreach += 1; - if (event.audience === 'owner') { - if (event.lastEmailDeliveredAt) deliveredEmail += 1; - else if (event.lastEmailError) { - if (event.nextEmailAttemptAt) retryingEmail += 1; - else failedEmail += 1; - } else { - pendingEmail += 1; - } - } - } else if (event.status === 'handed_off') { - if (event.exportCount === 0) pendingExport += 1; - if (event.handoffChannel === 'crm') { - if (event.lastCrmSyncedAt) syncedCrm += 1; - else if (event.lastCrmSyncError) { - failedCrmSync += 1; - if (event.nextCrmSyncAttemptAt) retryingCrmSync += 1; - } else { - pendingCrmSync += 1; - } - } - if (event.webhookDeliveryCount > 0) deliveredWebhook += 1; - else if (event.webhookExhaustedAt) deadLetteredWebhook += 1; - else if (event.lastWebhookError) { - failedWebhook += 1; - if (event.nextWebhookAttemptAt) retryingWebhook += 1; - } else pendingWebhook += 1; - if (event.webhookExhaustedAt) { - if (event.lastSlackAlertedAt) alertedSlack += 1; - else if (event.lastSlackAlertError) failedSlackAlert += 1; - else pendingSlackAlert += 1; - } - handedOffOutreach += 1; - } else { - resolvedOutreach += 1; - } - } - - return { - totalWorkspaces: workspaces.length, - activeWorkspaces, - atRiskWorkspaces, - workspacesRequiringAction, - fullWorkspaces, - totalSeatCapacity, - seatsUsed, - reservedSeats, - pendingInvites, - inheritedMembers, - revokedInvites, - fallbackMembers, - seatUtilizationRate: totalSeatCapacity > 0 ? reservedSeats / totalSeatCapacity : null, - recoveryActions: [...recoveryActionCounts.values()].sort((a, b) => b.count - a.count), - recoveryStages: [], - followUpStates: [], - recoveryOutreach: { - pendingOwner: pendingOwnerOutreach, - pendingAdmin: pendingAdminOutreach, - pendingEmail, - retryingEmail, - deliveredEmail, - failedEmail, - pendingMemberEmail, - retryingMemberEmail, - deliveredMemberEmail, - failedMemberEmail, - multiTouchPending, - pendingExport, - pendingCrmSync, - retryingCrmSync, - syncedCrm, - failedCrmSync, - pendingWebhook, - retryingWebhook, - deadLetteredWebhook, - pendingSlackAlert, - alertedSlack, - failedSlackAlert, - deliveredWebhook, - failedWebhook, - handedOff: handedOffOutreach, - resolved: resolvedOutreach, - recent: this.recoveryOutreach.slice(0, 8), - }, - recoveryPlaybook: { - totalRuns: this.recoveryPlaybookRuns.length, - successfulRuns: this.recoveryPlaybookRuns.filter((run) => run.ok).length, - failedRuns: this.recoveryPlaybookRuns.filter((run) => !run.ok).length, - scheduledRuns: this.recoveryPlaybookRuns.filter((run) => run.triggerType === 'scheduled') - .length, - manualRuns: this.recoveryPlaybookRuns.filter((run) => run.triggerType !== 'scheduled') - .length, - lastRunAt: this.recoveryPlaybookRuns[0]?.createdAt ?? null, - lastRunOk: this.recoveryPlaybookRuns[0]?.ok ?? null, - recent: this.recoveryPlaybookRuns.slice(0, 8), - }, - recentBillingEvents: this.billingEvents.slice(0, 8), - actionableWorkspaces: actionableWorkspaces.sort((a, b) => { - const warningDelta = b.warningCodes.length - a.warningCodes.length; - if (warningDelta !== 0) return warningDelta; - return ( - new Date(b.lastBillingEventAt ?? 0).getTime() - - new Date(a.lastBillingEventAt ?? 0).getTime() - ); - }), - }; - } - - async listRecentRecoveryPlaybookRuns(limit: number): Promise { - return this.recoveryPlaybookRuns.slice(0, limit); - } - - async getRecoveryPlaybookRunById( - runId: string, - ): Promise { - return this.recoveryPlaybookRuns.find((run) => run.id === runId) ?? null; - } - - async recordRecoveryPlaybookRun(input: { - triggerType: string; - retryIntervalHours: number; - force: boolean; - requestedSteps: TeamWorkspaceRecoveryPlaybookStepName[]; - rerunOfRunId?: string | null; - ok: boolean; - summary: string; - steps: TeamWorkspaceRecoveryPlaybookSteps; - createdAt?: string; - }): Promise { - const createdAt = input.createdAt ?? new Date().toISOString(); - const run: TeamWorkspaceRecoveryPlaybookRun = { - id: randomUUID(), - triggerType: input.triggerType, - retryIntervalHours: input.retryIntervalHours, - force: input.force, - requestedSteps: [...input.requestedSteps], - rerunOfRunId: input.rerunOfRunId ?? null, - ok: input.ok, - summary: input.summary, - steps: input.steps, - createdAt, - }; - this.recoveryPlaybookRuns.unshift(run); - return run; - } - - async handoffAdminRecoveryOutreach(input: { - workspaceId: string; - channel: TeamWorkspaceRecoveryOutreachHandoffChannel; - snoozeHours: number; - note?: string | null; - }): Promise<'workspace_not_found' | 'outreach_not_found' | { ok: true }> { - const workspace = this.workspaces.get(input.workspaceId); - if (!workspace) return 'workspace_not_found'; - const now = new Date().toISOString(); - const nextAttemptAt = nextRecoveryOutreachAttemptAt(now, input.snoozeHours); - for (let index = 0; index < this.recoveryOutreach.length; index += 1) { - const event = this.recoveryOutreach[index]!; - if (event.workspaceId !== input.workspaceId || event.audience !== 'admin') continue; - if (event.status === 'resolved') continue; - this.recoveryOutreach[index] = { - ...event, - status: 'handed_off', - lastAttemptAt: now, - nextAttemptAt, - emailAttemptCount: 0, - lastEmailAttemptAt: null, - nextEmailAttemptAt: now, - lastEmailDeliveredAt: null, - lastEmailMessageId: null, - lastEmailError: null, - exportCount: 0, - lastExportedAt: null, - crmSyncCount: 0, - lastCrmSyncAttemptAt: null, - nextCrmSyncAttemptAt: now, - lastCrmSyncedAt: null, - crmExternalRecordId: null, - lastCrmSyncStatusCode: null, - lastCrmSyncError: null, - webhookAttemptCount: 0, - lastWebhookAttemptAt: null, - nextWebhookAttemptAt: now, - webhookExhaustedAt: null, - webhookDeliveryCount: 0, - lastWebhookDeliveredAt: null, - lastWebhookStatusCode: null, - lastWebhookError: null, - slackAlertCount: 0, - lastSlackAlertAttemptAt: null, - lastSlackAlertedAt: null, - lastSlackAlertStatusCode: null, - lastSlackAlertError: null, - handoffChannel: input.channel, - handoffNote: input.note?.trim() || null, - handoffAt: now, - }; - return { ok: true }; - } - return 'outreach_not_found'; - } - - async exportHandedOffAdminRecoveryOutreach(): Promise<{ exportedCount: number }> { - const now = new Date().toISOString(); - let exportedCount = 0; - for (let index = 0; index < this.recoveryOutreach.length; index += 1) { - const event = this.recoveryOutreach[index]!; - if (event.audience !== 'admin' || event.status !== 'handed_off') continue; - this.recoveryOutreach[index] = { - ...event, - exportCount: event.exportCount + 1, - lastExportedAt: now, - }; - exportedCount += 1; - } - return { exportedCount }; - } - - async listPendingMemberRecoveryNotifications(): Promise< - PendingMemberRecoveryNotificationTarget[] - > { - const targets = await Promise.all( - this.memberRecoveryNotifications.map(async (notification) => { - if (notification.status !== 'pending') return null; - const workspace = this.workspaces.get(notification.workspaceId); - if (!workspace) return null; - const owner = await this.usersRepo.getById(workspace.ownerUserId); - if (!owner) return null; - return { - notificationId: notification.id, - workspaceId: notification.workspaceId, - workspaceName: notification.workspaceName, - userId: notification.userId, - email: notification.email, - displayName: notification.displayName, - ownerDisplayName: owner.displayName, - ownerEmail: owner.email, - subscription: owner.subscription, - billingStatus: owner.billingStatus, - title: notification.title, - detail: notification.detail, - emailAttemptCount: notification.emailAttemptCount, - lastEmailAttemptAt: notification.lastEmailAttemptAt, - nextEmailAttemptAt: notification.nextEmailAttemptAt, - lastEmailDeliveredAt: notification.lastEmailDeliveredAt, - lastEmailMessageId: notification.lastEmailMessageId, - lastEmailError: notification.lastEmailError, - } satisfies PendingMemberRecoveryNotificationTarget; - }), - ); - return targets.filter((item): item is PendingMemberRecoveryNotificationTarget => item !== null); - } - - async recordPendingOwnerRecoveryOutreachEmailDelivery(input: { - workspaceIds: string[]; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - messageIdByWorkspaceId?: Record; - }): Promise<{ deliveredCount: number }> { - const workspaceIds = new Set(input.workspaceIds); - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const deliveredAt = input.deliveredAt ?? attemptedAt; - const retryIntervalHours = Math.max( - 0, - input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - let deliveredCount = 0; - for (let index = 0; index < this.recoveryOutreach.length; index += 1) { - const event = this.recoveryOutreach[index]!; - if (!workspaceIds.has(event.workspaceId)) continue; - if (event.audience !== 'owner' || event.status !== 'pending') continue; - this.recoveryOutreach[index] = input.error - ? { - ...event, - emailAttemptCount: event.emailAttemptCount + 1, - lastEmailAttemptAt: attemptedAt, - nextEmailAttemptAt: nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), - lastEmailError: input.error, - } - : { - ...event, - emailAttemptCount: event.emailAttemptCount + 1, - lastEmailAttemptAt: attemptedAt, - nextEmailAttemptAt: null, - lastEmailDeliveredAt: deliveredAt, - lastEmailMessageId: - input.messageIdByWorkspaceId?.[event.workspaceId] ?? event.lastEmailMessageId, - lastEmailError: null, - }; - if (!input.error) deliveredCount += 1; - } - return { deliveredCount }; - } - - async recordPendingMemberRecoveryNotificationEmailDelivery(input: { - notificationIds: string[]; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - messageIdByNotificationId?: Record; - }): Promise<{ deliveredCount: number }> { - const notificationIds = new Set(input.notificationIds); - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const deliveredAt = input.deliveredAt ?? attemptedAt; - const retryIntervalHours = Math.max( - 0, - input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - let deliveredCount = 0; - for (let index = 0; index < this.memberRecoveryNotifications.length; index += 1) { - const notification = this.memberRecoveryNotifications[index]!; - if (!notificationIds.has(notification.id) || notification.status !== 'pending') continue; - this.memberRecoveryNotifications[index] = input.error - ? { - ...notification, - emailAttemptCount: notification.emailAttemptCount + 1, - lastEmailAttemptAt: attemptedAt, - nextEmailAttemptAt: nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), - lastEmailError: input.error, - } - : { - ...notification, - emailAttemptCount: notification.emailAttemptCount + 1, - lastEmailAttemptAt: attemptedAt, - nextEmailAttemptAt: null, - lastEmailDeliveredAt: deliveredAt, - lastEmailMessageId: - input.messageIdByNotificationId?.[notification.id] ?? notification.lastEmailMessageId, - lastEmailError: null, - }; - if (!input.error) deliveredCount += 1; - } - return { deliveredCount }; - } - - async recordDeadLetteredAdminRecoveryOutreachSlackAlert(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - alertedAt?: string; - }): Promise<{ alertedCount: number }> { - const workspaceIds = new Set(input.workspaceIds); - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const alertedAt = input.alertedAt ?? attemptedAt; - let alertedCount = 0; - for (let index = 0; index < this.recoveryOutreach.length; index += 1) { - const event = this.recoveryOutreach[index]!; - if (!workspaceIds.has(event.workspaceId)) continue; - if ( - event.audience !== 'admin' || - event.status !== 'handed_off' || - event.webhookExhaustedAt == null - ) { - continue; - } - this.recoveryOutreach[index] = input.error - ? { - ...event, - slackAlertCount: event.slackAlertCount + 1, - lastSlackAlertAttemptAt: attemptedAt, - lastSlackAlertStatusCode: input.statusCode, - lastSlackAlertError: input.error, - } - : { - ...event, - slackAlertCount: event.slackAlertCount + 1, - lastSlackAlertAttemptAt: attemptedAt, - lastSlackAlertedAt: alertedAt, - lastSlackAlertStatusCode: input.statusCode, - lastSlackAlertError: null, - }; - if (!input.error) alertedCount += 1; - } - return { alertedCount }; - } - - async recordHandedOffAdminRecoveryOutreachCrmSync(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - syncedAt?: string; - retryIntervalHours?: number; - externalRecordIdByWorkspaceId?: Record; - }): Promise<{ syncedCount: number }> { - const workspaceIds = new Set(input.workspaceIds); - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const syncedAt = input.syncedAt ?? attemptedAt; - const retryIntervalHours = Math.max( - 0, - input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - let syncedCount = 0; - for (let index = 0; index < this.recoveryOutreach.length; index += 1) { - const event = this.recoveryOutreach[index]!; - if (!workspaceIds.has(event.workspaceId)) continue; - if ( - event.audience !== 'admin' || - event.status !== 'handed_off' || - event.handoffChannel !== 'crm' - ) { - continue; - } - this.recoveryOutreach[index] = input.error - ? { - ...event, - crmSyncCount: event.crmSyncCount + 1, - lastCrmSyncAttemptAt: attemptedAt, - nextCrmSyncAttemptAt: nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), - lastCrmSyncStatusCode: input.statusCode, - lastCrmSyncError: input.error, - } - : { - ...event, - crmSyncCount: event.crmSyncCount + 1, - lastCrmSyncAttemptAt: attemptedAt, - nextCrmSyncAttemptAt: null, - lastCrmSyncedAt: syncedAt, - crmExternalRecordId: - input.externalRecordIdByWorkspaceId?.[event.workspaceId] ?? event.crmExternalRecordId, - lastCrmSyncStatusCode: input.statusCode, - lastCrmSyncError: null, - }; - if (!input.error) syncedCount += 1; - } - return { syncedCount }; - } - - async recordHandedOffAdminRecoveryOutreachWebhookDelivery(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - maxAttempts?: number; - }): Promise<{ deliveredCount: number }> { - const workspaceIds = new Set(input.workspaceIds); - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const deliveredAt = input.deliveredAt ?? new Date().toISOString(); - const retryIntervalHours = Math.max( - 0, - input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - const maxAttempts = Math.max( - 1, - input.maxAttempts ?? config.recoveryOutreach.webhookMaxAttempts, - ); - let deliveredCount = 0; - for (let index = 0; index < this.recoveryOutreach.length; index += 1) { - const event = this.recoveryOutreach[index]!; - if (!workspaceIds.has(event.workspaceId)) continue; - if (event.audience !== 'admin' || event.status !== 'handed_off') continue; - const nextWebhookAttemptCount = event.webhookAttemptCount + 1; - const webhookExhaustedAt = - input.error && nextWebhookAttemptCount >= maxAttempts ? attemptedAt : null; - this.recoveryOutreach[index] = input.error - ? { - ...event, - webhookAttemptCount: nextWebhookAttemptCount, - lastWebhookAttemptAt: attemptedAt, - nextWebhookAttemptAt: webhookExhaustedAt - ? null - : nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), - webhookExhaustedAt, - lastWebhookStatusCode: input.statusCode, - lastWebhookError: input.error, - } - : { - ...event, - webhookAttemptCount: nextWebhookAttemptCount, - lastWebhookAttemptAt: attemptedAt, - nextWebhookAttemptAt: null, - webhookExhaustedAt: null, - webhookDeliveryCount: event.webhookDeliveryCount + 1, - lastWebhookDeliveredAt: deliveredAt, - lastWebhookStatusCode: input.statusCode, - lastWebhookError: null, - slackAlertCount: 0, - lastSlackAlertAttemptAt: null, - lastSlackAlertedAt: null, - lastSlackAlertStatusCode: null, - lastSlackAlertError: null, - }; - if (!input.error) deliveredCount += 1; - } - return { deliveredCount }; - } - - async createWorkspace( - user: UserProfile, - name: string, - ): Promise { - if (!user.entitlements.canUseTeamWorkspace) return 'entitlement_required'; - if (this.membershipByUserId.has(user.id)) return 'already_in_workspace'; - - const workspaceId = randomUUID(); - const createdAt = new Date().toISOString(); - this.workspaces.set(workspaceId, { - id: workspaceId, - name, - ownerUserId: user.id, - createdAt, - }); - this.membershipByUserId.set(user.id, { - workspaceId, - role: 'owner', - joinedAt: createdAt, - }); - return (await this.buildWorkspaceForUser(user.id))!; - } - - async inviteMember( - actorUserId: string, - email: string, - role: ManageRole, - ): Promise< - | TeamWorkspace - | 'workspace_not_found' - | 'forbidden' - | 'user_already_in_workspace' - | 'seat_limit_reached' - | 'workspace_plan_inactive' - > { - const actorMembership = this.membershipByUserId.get(actorUserId); - if (!actorMembership) return 'workspace_not_found'; - if (actorMembership.role === 'member') return 'forbidden'; - - const normalizedEmail = email.trim().toLowerCase(); - const workspaceView = await this.buildWorkspaceForUser(actorUserId); - if (!workspaceView) return 'workspace_not_found'; - - const usersToCheck = await Promise.all( - [...this.membershipByUserId.keys()].map(async (userId) => this.usersRepo.getById(userId)), - ); - if (usersToCheck.some((user) => user?.email === normalizedEmail)) { - return 'user_already_in_workspace'; - } - - if (workspaceView.billing.warningCodes.includes('workspace_plan_inactive')) { - return 'workspace_plan_inactive'; - } - - const workspace = this.workspaces.get(actorMembership.workspaceId)!; - const existing = [...this.invites.values()].find( - (invite) => - invite.workspaceId === workspace.id && - invite.email === normalizedEmail && - invite.status === 'pending', - ); - if (!existing && !workspaceView.billing.canInviteMore) { - return 'seat_limit_reached'; - } - - const invite: WorkspaceInviteRecord = { - id: existing?.id ?? randomUUID(), - workspaceId: workspace.id, - workspaceName: workspace.name, - email: normalizedEmail, - role, - status: 'pending', - createdAt: new Date().toISOString(), - acceptedAt: null, - }; - this.invites.set(invite.id, invite); - return (await this.buildWorkspaceForUser(actorUserId))!; - } - - async acceptInvite( - user: UserProfile, - inviteId: string, - ): Promise< - TeamWorkspace | 'invite_not_found' | 'already_in_workspace' | 'workspace_plan_inactive' - > { - if (this.membershipByUserId.has(user.id)) return 'already_in_workspace'; - const invite = this.invites.get(inviteId); - if (!invite) return 'invite_not_found'; - if (invite.email !== user.email.toLowerCase()) return 'invite_not_found'; - if (invite.status !== 'pending') { - return invite.revokedReason === 'billing_inactive' - ? 'workspace_plan_inactive' - : 'invite_not_found'; - } - const workspace = this.workspaces.get(invite.workspaceId); - if (!workspace) return 'invite_not_found'; - const owner = await this.usersRepo.getById(workspace.ownerUserId); - if (!owner) return 'invite_not_found'; - const seatsUsed = [...this.membershipByUserId.values()].filter( - (item) => item.workspaceId === invite.workspaceId, - ).length; - const pendingInviteCount = [...this.invites.values()].filter( - (item) => item.workspaceId === invite.workspaceId && item.status === 'pending', - ).length; - const billing = buildWorkspaceBilling({ - owner, - seatsUsed, - pendingInviteCount, - }); - if (billing.warningCodes.includes('workspace_plan_inactive')) { - await this.reconcileWorkspaceBillingState(invite.workspaceId); - return 'workspace_plan_inactive'; - } - - const acceptedAt = new Date().toISOString(); - this.membershipByUserId.set(user.id, { - workspaceId: invite.workspaceId, - role: invite.role, - joinedAt: acceptedAt, - }); - - for (const [id, item] of this.invites.entries()) { - if (item.email !== user.email.toLowerCase() || item.status !== 'pending') continue; - this.invites.set(id, { - ...item, - status: id === inviteId ? 'accepted' : 'revoked', - acceptedAt: id === inviteId ? acceptedAt : item.acceptedAt, - revokedReason: id === inviteId ? null : 'accepted_elsewhere', - revokedAt: id === inviteId ? null : acceptedAt, - }); - } - - return (await this.buildWorkspaceForUser(user.id))!; - } - - async shareSavedView( - actorUserId: string, - savedViewId: string, - ): Promise< - | { status: 'added' | 'exists'; workspace: TeamWorkspace } - | 'workspace_not_found' - | 'saved_view_not_found' - > { - const membership = this.membershipByUserId.get(actorUserId); - if (!membership) return 'workspace_not_found'; - const savedView = await this.savedViewsRepo.getById(actorUserId, savedViewId); - if (!savedView) return 'saved_view_not_found'; - - const exists = this.sharedSavedViews.some( - (item) => item.workspaceId === membership.workspaceId && item.savedViewId === savedViewId, - ); - if (!exists) { - this.sharedSavedViews.unshift({ - workspaceId: membership.workspaceId, - savedViewId, - sharedByUserId: actorUserId, - sharedAt: new Date().toISOString(), - }); - } - return { - status: exists ? 'exists' : 'added', - workspace: (await this.buildWorkspaceForUser(actorUserId))!, - }; - } - - async shareCase( - actorUserId: string, - caseId: string, - ): Promise< - | { status: 'added' | 'exists'; workspace: TeamWorkspace } - | 'workspace_not_found' - | 'case_not_found' - > { - const membership = this.membershipByUserId.get(actorUserId); - if (!membership) return 'workspace_not_found'; - if (!(await this.casesRepo.caseExists(caseId))) return 'case_not_found'; - - const exists = this.sharedCases.some( - (item) => item.workspaceId === membership.workspaceId && item.caseId === caseId, - ); - if (!exists) { - this.sharedCases.unshift({ - workspaceId: membership.workspaceId, - caseId, - sharedByUserId: actorUserId, - sharedAt: new Date().toISOString(), - }); - } - return { - status: exists ? 'exists' : 'added', - workspace: (await this.buildWorkspaceForUser(actorUserId))!, - }; - } - - private getPendingInvitesForEmail(email: string): TeamWorkspaceInvite[] { - return [...this.invites.values()] - .filter((invite) => invite.email === email.toLowerCase() && invite.status === 'pending') - .sort((a, b) => b.createdAt.localeCompare(a.createdAt)); - } - - private async reconcilePendingInvitesForEmail(email: string): Promise { - const workspaceIds = new Set( - [...this.invites.values()] - .filter((invite) => invite.email === email.toLowerCase() && invite.status === 'pending') - .map((invite) => invite.workspaceId), - ); - for (const workspaceId of workspaceIds) { - await this.reconcileWorkspaceBillingState(workspaceId); - } - } - - private getCompensationSummary(workspaceId: string): WorkspaceCompensationSummary { - const revokedInviteCount = [...this.invites.values()].filter( - (invite) => - invite.workspaceId === workspaceId && - invite.status === 'revoked' && - invite.revokedReason != null && - COMPENSATION_REASONS.has(invite.revokedReason), - ).length; - return { revokedInviteCount }; - } - - private getRecentBillingEvents(workspaceId: string): TeamWorkspaceBillingEvent[] { - return this.billingEvents - .filter((event) => event.workspaceId === workspaceId) - .slice(0, 6) - .map(({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event); - } - - private getRecentRecoveryOutreach( - workspaceId: string, - audience?: TeamWorkspaceRecoveryOutreachAudience, - ): TeamWorkspaceRecoveryOutreach[] { - return this.recoveryOutreach - .filter( - (event) => - event.workspaceId === workspaceId && (audience == null || event.audience === audience), - ) - .slice(0, 6) - .map(({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event); - } - - private getRecentMemberRecoveryNotifications( - workspaceId: string, - ): TeamWorkspaceMemberRecoveryNotification[] { - return this.memberRecoveryNotifications - .filter((notification) => notification.workspaceId === workspaceId) - .slice(0, 6) - .map( - ({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...notification }) => - notification, - ); - } - - private ensurePendingRecoveryOutreach( - workspaceId: string, - workspaceName: string, - descriptor: WorkspaceRecoveryOutreachDescriptor | null, - retryIntervalHours: number, - ): number { - if (!descriptor) return 0; - const exists = this.recoveryOutreach.some( - (event) => - event.workspaceId === workspaceId && - event.audience === descriptor.audience && - (event.status === 'pending' || - (event.status === 'handed_off' && - event.nextAttemptAt != null && - new Date(event.nextAttemptAt).getTime() > Date.now())), - ); - if (exists) return 0; - this.recoveryOutreach.unshift({ - id: randomUUID(), - workspaceId, - workspaceName, - audience: descriptor.audience, - channel: descriptor.channel, - status: 'pending', - title: descriptor.title, - detail: descriptor.detail, - actionCode: descriptor.actionCode, - attemptCount: 1, - createdAt: new Date().toISOString(), - lastAttemptAt: new Date().toISOString(), - nextAttemptAt: nextRecoveryOutreachAttemptAt(new Date().toISOString(), retryIntervalHours), - emailAttemptCount: 0, - lastEmailAttemptAt: null, - nextEmailAttemptAt: new Date().toISOString(), - lastEmailDeliveredAt: null, - lastEmailMessageId: null, - lastEmailError: null, - exportCount: 0, - lastExportedAt: null, - crmSyncCount: 0, - lastCrmSyncAttemptAt: null, - nextCrmSyncAttemptAt: new Date().toISOString(), - lastCrmSyncedAt: null, - crmExternalRecordId: null, - lastCrmSyncStatusCode: null, - lastCrmSyncError: null, - webhookAttemptCount: 0, - lastWebhookAttemptAt: null, - nextWebhookAttemptAt: new Date().toISOString(), - webhookExhaustedAt: null, - webhookDeliveryCount: 0, - lastWebhookDeliveredAt: null, - lastWebhookStatusCode: null, - lastWebhookError: null, - slackAlertCount: 0, - lastSlackAlertAttemptAt: null, - lastSlackAlertedAt: null, - lastSlackAlertStatusCode: null, - lastSlackAlertError: null, - handoffChannel: null, - handoffNote: null, - handoffAt: null, - resolvedAt: null, - }); - if (this.recoveryOutreach.length > 64) { - this.recoveryOutreach.length = 64; - } - return 1; - } - - private retryPendingRecoveryOutreach( - workspaceId: string, - descriptor: WorkspaceRecoveryOutreachDescriptor | null, - retryIntervalHours: number, - ): number { - if (!descriptor) return 0; - const now = new Date().toISOString(); - for (let index = 0; index < this.recoveryOutreach.length; index += 1) { - const event = this.recoveryOutreach[index]!; - if (event.workspaceId !== workspaceId || event.audience !== descriptor.audience) continue; - if (event.status !== 'pending') return 0; - const dueAt = nextRecoveryOutreachAttemptAt(event.lastAttemptAt, retryIntervalHours); - if (new Date(dueAt).getTime() > Date.now()) return 0; - this.recoveryOutreach[index] = { - ...event, - channel: descriptor.channel, - status: 'pending', - title: descriptor.title, - detail: descriptor.detail, - actionCode: descriptor.actionCode, - attemptCount: event.attemptCount + 1, - lastAttemptAt: now, - nextAttemptAt: nextRecoveryOutreachAttemptAt(now, retryIntervalHours), - emailAttemptCount: 0, - lastEmailAttemptAt: null, - nextEmailAttemptAt: now, - lastEmailDeliveredAt: null, - lastEmailMessageId: null, - lastEmailError: null, - exportCount: 0, - lastExportedAt: null, - crmSyncCount: 0, - lastCrmSyncAttemptAt: null, - nextCrmSyncAttemptAt: now, - lastCrmSyncedAt: null, - crmExternalRecordId: null, - lastCrmSyncStatusCode: null, - lastCrmSyncError: null, - webhookAttemptCount: 0, - lastWebhookAttemptAt: null, - nextWebhookAttemptAt: now, - webhookExhaustedAt: null, - webhookDeliveryCount: 0, - lastWebhookDeliveredAt: null, - lastWebhookStatusCode: null, - lastWebhookError: null, - slackAlertCount: 0, - lastSlackAlertAttemptAt: null, - lastSlackAlertedAt: null, - lastSlackAlertStatusCode: null, - lastSlackAlertError: null, - handoffChannel: null, - handoffNote: null, - handoffAt: null, - }; - return 1; - } - return 0; - } - - private resolvePendingRecoveryOutreach( - workspaceId: string, - audience?: TeamWorkspaceRecoveryOutreachAudience, - ): number { - let resolved = 0; - const resolvedAt = new Date().toISOString(); - for (let index = 0; index < this.recoveryOutreach.length; index += 1) { - const event = this.recoveryOutreach[index]!; - if (event.workspaceId !== workspaceId || event.status === 'resolved') continue; - if (audience != null && event.audience !== audience) continue; - this.recoveryOutreach[index] = { - ...event, - status: 'resolved', - nextAttemptAt: null, - nextEmailAttemptAt: null, - nextWebhookAttemptAt: null, - webhookExhaustedAt: null, - lastSlackAlertError: null, - resolvedAt, - }; - resolved += 1; - } - return resolved; - } - - private syncPendingMemberRecoveryNotifications( - workspaceId: string, - workspaceName: string, - members: Array<{ userId: string; email: string; displayName: string | null }>, - descriptor: WorkspaceMemberRecoveryNotificationDescriptor | null, - ) { - const resolvedAt = new Date().toISOString(); - const activeUserIds = descriptor - ? new Set(members.map((member) => member.userId)) - : new Set(); - for (let index = 0; index < this.memberRecoveryNotifications.length; index += 1) { - const notification = this.memberRecoveryNotifications[index]!; - if (notification.workspaceId !== workspaceId || notification.status !== 'pending') continue; - const member = members.find((item) => item.userId === notification.userId) ?? null; - if (!descriptor || !activeUserIds.has(notification.userId) || !member) { - this.memberRecoveryNotifications[index] = { - ...notification, - status: 'resolved', - nextEmailAttemptAt: null, - resolvedAt, - }; - continue; - } - this.memberRecoveryNotifications[index] = { - ...notification, - workspaceName, - email: member.email, - displayName: member.displayName, - title: descriptor.title, - detail: descriptor.detail, - }; - } - if (!descriptor) return; - for (const member of members) { - const exists = this.memberRecoveryNotifications.some( - (notification) => - notification.workspaceId === workspaceId && - notification.userId === member.userId && - notification.status === 'pending', - ); - if (exists) continue; - this.memberRecoveryNotifications.unshift({ - id: randomUUID(), - workspaceId, - workspaceName, - userId: member.userId, - email: member.email, - displayName: member.displayName, - status: 'pending', - title: descriptor.title, - detail: descriptor.detail, - emailAttemptCount: 0, - createdAt: resolvedAt, - lastEmailAttemptAt: null, - nextEmailAttemptAt: resolvedAt, - lastEmailDeliveredAt: null, - lastEmailMessageId: null, - lastEmailError: null, - resolvedAt: null, - }); - } - if (this.memberRecoveryNotifications.length > 128) { - this.memberRecoveryNotifications.length = 128; - } - } - - private recordBillingEvents( - workspaceId: string, - workspaceName: string, - descriptors: WorkspaceBillingEventDescriptor[], - ) { - const createdAt = new Date().toISOString(); - for (const descriptor of descriptors) { - this.billingEvents.unshift({ - id: randomUUID(), - workspaceId, - workspaceName, - ...descriptor, - createdAt, - }); - } - if (this.billingEvents.length > 64) { - this.billingEvents.length = 64; - } - } - - private async reconcileWorkspaceBillingState( - workspaceId: string, - ): Promise { - const workspace = this.workspaces.get(workspaceId); - if (!workspace) return { revokedInviteCount: 0, restoredInviteCount: 0 }; - const owner = await this.usersRepo.getById(workspace.ownerUserId); - if (!owner) return { revokedInviteCount: 0, restoredInviteCount: 0 }; - - const seatsUsed = [...this.membershipByUserId.values()].filter( - (item) => item.workspaceId === workspaceId, - ).length; - const pendingInvites = [...this.invites.values()] - .filter((invite) => invite.workspaceId === workspaceId && invite.status === 'pending') - .sort((a, b) => a.createdAt.localeCompare(b.createdAt)); - - const seatLimit = resolveTeamWorkspaceSeatLimit({ - subscription: owner.subscription, - billingStatus: owner.billingStatus, - }); - const allowedPendingInvites = Math.max(0, seatLimit - seatsUsed); - const revokeReason: WorkspaceInviteRevocationReason = - seatLimit === 0 ? 'billing_inactive' : 'seat_limit_reduced'; - const invitesToRevoke = pendingInvites.slice(allowedPendingInvites); - const revokedAt = new Date().toISOString(); - if (invitesToRevoke.length > 0) { - for (const invite of invitesToRevoke) { - this.invites.set(invite.id, { - ...invite, - status: 'revoked', - revokedReason: revokeReason, - revokedAt, - acceptedAt: null, - }); - } - } - const remainingPendingInvites = Math.max(0, pendingInvites.length - invitesToRevoke.length); - const recoverableInvites = [...this.invites.values()] - .filter( - (invite) => - invite.workspaceId === workspaceId && - invite.status === 'revoked' && - invite.revokedReason != null && - COMPENSATION_REASONS.has(invite.revokedReason), - ) - .sort((a, b) => { - const revokedAtCompare = (a.revokedAt ?? a.createdAt).localeCompare( - b.revokedAt ?? b.createdAt, - ); - return revokedAtCompare !== 0 ? revokedAtCompare : a.createdAt.localeCompare(b.createdAt); - }); - const invitesToRestore = - seatLimit > 0 - ? recoverableInvites.slice(0, Math.max(0, allowedPendingInvites - remainingPendingInvites)) - : []; - if (invitesToRestore.length > 0) { - for (const invite of invitesToRestore) { - this.invites.set(invite.id, { - ...invite, - status: 'pending', - revokedReason: null, - revokedAt: null, - acceptedAt: null, - }); - } - } - - const compensation = this.getCompensationSummary(workspaceId); - const nextBilling = buildWorkspaceBilling({ - owner, - seatsUsed, - pendingInviteCount: remainingPendingInvites + invitesToRestore.length, - compensation, - }); - const previousSnapshot = this.billingStateByWorkspaceId.get(workspaceId) ?? null; - const nextSnapshot = billingSnapshotFromBilling(nextBilling); - const descriptors = buildBillingEventDescriptors({ - previous: previousSnapshot, - next: nextSnapshot, - revokedInviteCount: invitesToRevoke.length, - restoredInviteCount: invitesToRestore.length, - }); - this.billingStateByWorkspaceId.set(workspaceId, nextSnapshot); - if (descriptors.length > 0) { - this.recordBillingEvents(workspaceId, workspace.name, descriptors); - } - return { - revokedInviteCount: invitesToRevoke.length, - restoredInviteCount: invitesToRestore.length, - }; - } - - private async buildWorkspaceAccessForUser(user: UserProfile): Promise { - const membership = this.membershipByUserId.get(user.id); - if (!membership) return null; - const workspace = this.workspaces.get(membership.workspaceId); - if (!workspace) return null; - await this.reconcileWorkspaceBillingState(workspace.id); - const owner = await this.usersRepo.getById(workspace.ownerUserId); - if (!owner) return null; - const seatsUsed = [...this.membershipByUserId.values()].filter( - (item) => item.workspaceId === workspace.id, - ).length; - const pendingInviteCount = [...this.invites.values()].filter( - (invite) => invite.workspaceId === workspace.id && invite.status === 'pending', - ).length; - - return buildWorkspaceAccess({ - user, - context: { - workspaceId: workspace.id, - workspaceName: workspace.name, - role: membership.role, - owner, - seatsUsed, - pendingInviteCount, - }, - }); - } - - private async buildWorkspaceForUser(userId: string): Promise { - const membership = this.membershipByUserId.get(userId); - if (!membership) return null; - const workspace = this.workspaces.get(membership.workspaceId); - if (!workspace) return null; - await this.reconcileWorkspaceBillingState(workspace.id); - - const memberEntries = [...this.membershipByUserId.entries()].filter( - ([, item]) => item.workspaceId === workspace.id, - ); - const members = ( - await Promise.all( - memberEntries.map(async ([memberUserId, item]) => { - const user = await this.usersRepo.getById(memberUserId); - if (!user) return null; - return { - userId: user.id, - email: user.email, - displayName: user.displayName, - role: item.role, - joinedAt: item.joinedAt, - } satisfies TeamWorkspaceMember; - }), - ) - ).filter((item): item is TeamWorkspaceMember => item !== null); - - const invites = [...this.invites.values()] - .filter((invite) => invite.workspaceId === workspace.id && invite.status === 'pending') - .sort((a, b) => b.createdAt.localeCompare(a.createdAt)); - - const sharedSavedViews = ( - await Promise.all( - this.sharedSavedViews - .filter((item) => item.workspaceId === workspace.id) - .map(async (entry) => { - const [savedView, sharedBy] = await Promise.all([ - this.savedViewsRepo.getById(entry.sharedByUserId, entry.savedViewId), - this.usersRepo.getById(entry.sharedByUserId), - ]); - if (!savedView) return null; - return { - ...savedView, - sourceSavedViewId: entry.savedViewId, - sharedByUserId: entry.sharedByUserId, - sharedByName: sharedBy?.displayName ?? sharedBy?.email ?? null, - sharedAt: entry.sharedAt, - } satisfies TeamWorkspaceSharedSavedView; - }), - ) - ).filter((item): item is TeamWorkspaceSharedSavedView => item !== null); - - const caseEntries = this.sharedCases.filter((item) => item.workspaceId === workspace.id); - const cases = await this.casesRepo.getByIds(caseEntries.map((item) => item.caseId)); - const casesById = new Map(cases.map((item) => [item.id, item])); - const sharedCases = ( - await Promise.all( - caseEntries.map(async (entry) => { - const item = casesById.get(entry.caseId); - if (!item) return null; - const sharedBy = await this.usersRepo.getById(entry.sharedByUserId); - return { - id: item.id, - slug: item.slug, - companyName: item.companyName, - industry: item.industry, - country: item.country, - closedYear: item.closedYear, - summary: item.summary, - businessModelKey: item.businessModelKey, - foundedYear: item.foundedYear, - totalFundingUsd: item.totalFundingUsd, - primaryFailureReasonKey: item.primaryFailureReasonKey, - sharedByUserId: entry.sharedByUserId, - sharedByName: sharedBy?.displayName ?? sharedBy?.email ?? null, - sharedAt: entry.sharedAt, - } satisfies TeamWorkspaceSharedCase; - }), - ) - ).filter((item): item is TeamWorkspaceSharedCase => item !== null); - - const owner = await this.usersRepo.getById(workspace.ownerUserId); - if (!owner) return null; - const compensation = this.getCompensationSummary(workspace.id); - - const recentBillingEvents = this.getRecentBillingEvents(workspace.id); - const recentRecoveryOutreach = - membership.role === 'owner' ? this.getRecentRecoveryOutreach(workspace.id, 'owner') : []; - const recentMemberRecoveryNotifications = - membership.role === 'owner' ? this.getRecentMemberRecoveryNotifications(workspace.id) : []; - - return { - id: workspace.id, - name: workspace.name, - role: membership.role, - canManageMembers: membership.role === 'owner' || membership.role === 'admin', - memberCount: members.length, - sharedSavedViewCount: sharedSavedViews.length, - sharedCaseCount: sharedCases.length, - createdAt: workspace.createdAt, - billing: buildWorkspaceBilling({ - owner, - seatsUsed: members.length, - pendingInviteCount: invites.length, - compensation, - viewerRole: membership.role, - recentBillingEvents, - }), - recentBillingEvents, - recentRecoveryOutreach, - recentMemberRecoveryNotifications, - members, - invites, - sharedSavedViews, - sharedCases, - }; - } -} - -export class PgTeamWorkspacesRepository implements TeamWorkspacesRepository { - constructor( - private readonly pool: Pool, - private readonly billingFunnelRepo: BillingFunnelRepository, - ) {} - - async resolveEffectiveUserProfile(user: UserProfile): Promise { - return applyWorkspaceAccess(user, await this.buildWorkspaceAccessForUser(user)); - } - - async getContextForUser(user: UserProfile): Promise { - await this.reconcileBillingForUser(user.id); - await this.reconcilePendingInvitesForEmail(user.email); - const workspace = await this.buildWorkspaceForUser(user.id); - return { - canCreateWorkspace: user.entitlements.canUseTeamWorkspace && workspace === null, - hasWorkspace: workspace !== null, - workspace, - pendingInvites: workspace ? [] : await this.getPendingInvitesForEmail(user.email), - }; - } - - async reconcileBillingForUser( - userId: string, - ): Promise<{ workspaceIds: string[]; revokedInviteCount: number }> { - const { rows } = await this.pool.query<{ id: string }>( - `SELECT id - FROM team_workspaces - WHERE owner_user_id = $1`, - [userId], - ); - let revokedInviteCount = 0; - for (const row of rows) { - const result = await this.reconcileWorkspaceBillingState(row.id); - revokedInviteCount += result.revokedInviteCount; - } - return { - workspaceIds: rows.map((row) => row.id), - revokedInviteCount, - }; - } - - async reconcileAllBilling(): Promise<{ - workspaceCount: number; - revokedInviteCount: number; - restoredInviteCount: number; - }> { - const { rows } = await this.pool.query<{ id: string }>( - `SELECT id - FROM team_workspaces`, - ); - let revokedInviteCount = 0; - let restoredInviteCount = 0; - for (const row of rows) { - const result = await this.reconcileWorkspaceBillingState(row.id); - revokedInviteCount += result.revokedInviteCount; - restoredInviteCount += result.restoredInviteCount; - } - return { - workspaceCount: rows.length, - revokedInviteCount, - restoredInviteCount, - }; - } - - async runRecoveryOutreachAutomation(options?: { retryIntervalHours?: number }): Promise<{ - workspaceCount: number; - ownerOutreachCreated: number; - adminOutreachCreated: number; - retriedOutreachCount: number; - resolvedOutreachCount: number; - }> { - const retryIntervalHours = Math.max( - 0, - options?.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - await this.reconcileAllWorkspaces(); - const { rows } = await this.pool.query( - `WITH member_counts AS ( - SELECT workspace_id, COUNT(*)::int AS member_count - FROM team_workspace_members - GROUP BY workspace_id - ), - invite_counts AS ( - SELECT workspace_id, COUNT(*)::int AS pending_invite_count - FROM team_workspace_invites - WHERE status = 'pending' - GROUP BY workspace_id - ), - compensation_counts AS ( - SELECT workspace_id, COUNT(*)::int AS revoked_invite_count - FROM team_workspace_invites - WHERE status = 'revoked' - AND revoked_reason IN ('billing_inactive', 'seat_limit_reduced') - GROUP BY workspace_id - ) - SELECT - w.id AS workspace_id, - w.name AS workspace_name, - owner.id AS owner_user_id, - owner.email AS owner_email, - owner.display_name AS owner_display_name, - owner.subscription, - owner.billing_status, - owner.cancel_at_period_end, - COALESCE(m.member_count, 0)::text AS member_count, - COALESCE(i.pending_invite_count, 0)::text AS pending_invite_count, - COALESCE(c.revoked_invite_count, 0)::text AS revoked_invite_count - FROM team_workspaces w - JOIN users owner ON owner.id = w.owner_user_id - LEFT JOIN member_counts m ON m.workspace_id = w.id - LEFT JOIN invite_counts i ON i.workspace_id = w.id - LEFT JOIN compensation_counts c ON c.workspace_id = w.id`, - ); - const latestCommercialTouches = await this.billingFunnelRepo.getLatestEventsByUserIds( - rows.map((row) => row.owner_user_id), - ); - const latestCommercialTouchByOwnerId = new Map( - latestCommercialTouches.map((touch) => [touch.userId, touch]), - ); - let ownerOutreachCreated = 0; - let adminOutreachCreated = 0; - let retriedOutreachCount = 0; - let resolvedOutreachCount = 0; - - for (const row of rows) { - const recentBillingEvents = (await this.getRecentBillingEvents(row.workspace_id)).map( - ({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event, - ); - const workspaceSeatsUsed = Number(row.member_count); - const workspacePendingInvites = Number(row.pending_invite_count); - const billing = buildWorkspaceBilling({ - owner: { - id: row.owner_user_id, - email: row.owner_email, - displayName: row.owner_display_name, - subscription: row.subscription, - billingStatus: row.billing_status, - currentPeriodEnd: null, - cancelAtPeriodEnd: row.cancel_at_period_end, - }, - seatsUsed: workspaceSeatsUsed, - pendingInviteCount: workspacePendingInvites, - compensation: { - revokedInviteCount: Number(row.revoked_invite_count), - }, - viewerRole: 'owner', - recentBillingEvents, - }); - const descriptors = buildRecoveryOutreachDescriptors({ - workspaceName: row.workspace_name, - billing, - }); - const memberDescriptor = buildMemberRecoveryNotificationDescriptor({ - workspaceName: row.workspace_name, - ownerDisplayName: row.owner_display_name, - ownerEmail: row.owner_email, - billing, - }); - const fallbackMembersRes = - memberDescriptor == null - ? { rows: [] as Array<{ user_id: string; email: string; display_name: string | null }> } - : await this.pool.query<{ - user_id: string; - email: string; - display_name: string | null; - }>( - `SELECT u.id AS user_id, u.email, u.display_name - FROM team_workspace_members m - JOIN users u ON u.id = m.user_id - WHERE m.workspace_id = $1 - AND m.role <> 'owner'`, - [row.workspace_id], - ); - const ownerDescriptor = descriptors.find((item) => item.audience === 'owner') ?? null; - const adminDescriptor = descriptors.find((item) => item.audience === 'admin') ?? null; - const ownerTouch = latestCommercialTouchByOwnerId.get(row.owner_user_id); - if (hasOwnerRecoveryEngagement(ownerTouch)) { - resolvedOutreachCount += await this.resolvePendingRecoveryOutreach( - row.workspace_id, - 'owner', - ); - } else { - ownerOutreachCreated += await this.ensurePendingRecoveryOutreach( - row.workspace_id, - ownerDescriptor, - retryIntervalHours, - ); - retriedOutreachCount += await this.retryPendingRecoveryOutreach( - row.workspace_id, - ownerDescriptor, - retryIntervalHours, - ); - } - adminOutreachCreated += await this.ensurePendingRecoveryOutreach( - row.workspace_id, - adminDescriptor, - retryIntervalHours, - ); - retriedOutreachCount += await this.retryPendingRecoveryOutreach( - row.workspace_id, - adminDescriptor, - retryIntervalHours, - ); - if (!ownerDescriptor) { - resolvedOutreachCount += await this.resolvePendingRecoveryOutreach( - row.workspace_id, - 'owner', - ); - } - if (!adminDescriptor) { - resolvedOutreachCount += await this.resolvePendingRecoveryOutreach( - row.workspace_id, - 'admin', - ); - } - await this.syncPendingMemberRecoveryNotifications( - row.workspace_id, - row.workspace_name, - fallbackMembersRes.rows.map((member) => ({ - userId: member.user_id, - email: member.email, - displayName: member.display_name, - })), - memberDescriptor, - ); - } - - return { - workspaceCount: rows.length, - ownerOutreachCreated, - adminOutreachCreated, - retriedOutreachCount, - resolvedOutreachCount, - }; - } - - async getAdminMetrics(): Promise { - await this.reconcileAllWorkspaces(); - const { rows } = await this.pool.query( - `WITH member_counts AS ( - SELECT workspace_id, COUNT(*)::int AS member_count - FROM team_workspace_members - GROUP BY workspace_id - ), - invite_counts AS ( - SELECT workspace_id, COUNT(*)::int AS pending_invite_count - FROM team_workspace_invites - WHERE status = 'pending' - GROUP BY workspace_id - ), - compensation_counts AS ( - SELECT workspace_id, COUNT(*)::int AS revoked_invite_count - FROM team_workspace_invites - WHERE status = 'revoked' - AND revoked_reason IN ('billing_inactive', 'seat_limit_reduced') - GROUP BY workspace_id - ) - SELECT - w.id AS workspace_id, - w.name AS workspace_name, - owner.id AS owner_user_id, - owner.email AS owner_email, - owner.display_name AS owner_display_name, - owner.subscription, - owner.billing_status, - owner.cancel_at_period_end, - COALESCE(m.member_count, 0)::text AS member_count, - COALESCE(i.pending_invite_count, 0)::text AS pending_invite_count, - COALESCE(c.revoked_invite_count, 0)::text AS revoked_invite_count - FROM team_workspaces w - JOIN users owner ON owner.id = w.owner_user_id - LEFT JOIN member_counts m ON m.workspace_id = w.id - LEFT JOIN invite_counts i ON i.workspace_id = w.id - LEFT JOIN compensation_counts c ON c.workspace_id = w.id`, - ); - const latestBillingEventsRes = - rows.length === 0 - ? { rows: [] as PgWorkspaceBillingEventRow[] } - : await this.pool.query( - `SELECT DISTINCT ON (e.workspace_id) - e.id, - e.workspace_id, - w.name AS workspace_name, - e.event_type, - e.severity, - e.title, - e.detail, - e.event_count, - e.created_at - FROM team_workspace_billing_events e - JOIN team_workspaces w ON w.id = e.workspace_id - WHERE e.workspace_id = ANY($1::uuid[]) - ORDER BY e.workspace_id, e.created_at DESC`, - [rows.map((row) => row.workspace_id)], - ); - const latestBillingEventsByWorkspaceId = new Map( - latestBillingEventsRes.rows.map((row) => [row.workspace_id, rowToBillingEvent(row)]), - ); - const latestRecoveryOutreachByWorkspaceId = await this.getLatestRecoveryOutreachByWorkspaceIds( - rows.map((row) => row.workspace_id), - ); - const recoveryOutreachRecent = await this.getRecentRecoveryOutreach(); - const memberRecoveryNotificationCountsRes = await this.pool.query<{ - email_bucket: - | 'pending_member_email' - | 'retrying_member_email' - | 'delivered_member_email' - | 'failed_member_email' - | 'member_email_na'; - count: string; - }>( - `SELECT - CASE - WHEN status = 'pending' - AND last_email_delivered_at IS NOT NULL THEN 'delivered_member_email' - WHEN status = 'pending' - AND last_email_error IS NOT NULL - AND next_email_attempt_at IS NOT NULL THEN 'retrying_member_email' - WHEN status = 'pending' - AND last_email_error IS NOT NULL THEN 'failed_member_email' - WHEN status = 'pending' THEN 'pending_member_email' - ELSE 'member_email_na' - END AS email_bucket, - COUNT(*)::text AS count - FROM team_workspace_member_recovery_notifications - GROUP BY email_bucket`, - ); - const memberRecoverySummaryRes = - rows.length === 0 - ? { - rows: [] as Array<{ - workspace_id: string; - pending_count: string; - retrying_count: string; - delivered_count: string; - failed_count: string; - next_email_attempt_at: Date | string | null; - last_email_delivered_at: Date | string | null; - last_email_error: string | null; - }>, - } - : await this.pool.query<{ - workspace_id: string; - pending_count: string; - retrying_count: string; - delivered_count: string; - failed_count: string; - next_email_attempt_at: Date | string | null; - last_email_delivered_at: Date | string | null; - last_email_error: string | null; - }>( - `SELECT - workspace_id, - COUNT(*) FILTER ( - WHERE status = 'pending' - AND last_email_delivered_at IS NULL - AND last_email_error IS NULL - )::text AS pending_count, - COUNT(*) FILTER ( - WHERE status = 'pending' - AND last_email_error IS NOT NULL - AND next_email_attempt_at IS NOT NULL - )::text AS retrying_count, - COUNT(*) FILTER ( - WHERE status = 'pending' - AND last_email_delivered_at IS NOT NULL - )::text AS delivered_count, - COUNT(*) FILTER ( - WHERE status = 'pending' - AND last_email_error IS NOT NULL - AND next_email_attempt_at IS NULL - )::text AS failed_count, - MIN(next_email_attempt_at) FILTER ( - WHERE status = 'pending' - AND next_email_attempt_at IS NOT NULL - ) AS next_email_attempt_at, - MAX(last_email_delivered_at) FILTER ( - WHERE last_email_delivered_at IS NOT NULL - ) AS last_email_delivered_at, - ( - ARRAY_AGG(last_email_error ORDER BY COALESCE(last_email_attempt_at, created_at) DESC) - FILTER (WHERE last_email_error IS NOT NULL) - )[1] AS last_email_error - FROM team_workspace_member_recovery_notifications - WHERE workspace_id = ANY($1::uuid[]) - GROUP BY workspace_id`, - [rows.map((row) => row.workspace_id)], - ); - const memberRecoverySummaryByWorkspaceId = new Map( - memberRecoverySummaryRes.rows.map((row) => [ - row.workspace_id, - { - pendingCount: Number(row.pending_count), - retryingCount: Number(row.retrying_count), - deliveredCount: Number(row.delivered_count), - failedCount: Number(row.failed_count), - nextEmailAttemptAt: row.next_email_attempt_at ? toIso(row.next_email_attempt_at) : null, - lastEmailDeliveredAt: row.last_email_delivered_at - ? toIso(row.last_email_delivered_at) - : null, - lastEmailError: row.last_email_error, - }, - ]), - ); - const recoveryOutreachCountsRes = await this.pool.query<{ - audience: TeamWorkspaceRecoveryOutreachAudience; - status: TeamWorkspaceRecoveryOutreachStatus; - attempt_bucket: 'single' | 'multi'; - email_bucket: - | 'pending_email' - | 'retrying_email' - | 'delivered_email' - | 'failed_email' - | 'email_na'; - export_bucket: 'pending_export' | 'exported_or_na'; - crm_bucket: - | 'pending_crm_sync' - | 'retrying_crm_sync' - | 'synced_crm' - | 'failed_crm_sync' - | 'crm_na'; - webhook_bucket: - | 'pending_webhook' - | 'retrying_webhook' - | 'dead_lettered_webhook' - | 'delivered_webhook' - | 'failed_webhook' - | 'webhook_na'; - slack_bucket: 'pending_slack_alert' | 'alerted_slack' | 'failed_slack_alert' | 'slack_na'; - count: string; - }>( - `SELECT - audience, - status, - CASE WHEN attempt_count > 1 THEN 'multi' ELSE 'single' END AS attempt_bucket, - CASE - WHEN audience = 'owner' - AND status = 'pending' - AND last_email_delivered_at IS NOT NULL THEN 'delivered_email' - WHEN audience = 'owner' - AND status = 'pending' - AND last_email_error IS NOT NULL - AND next_email_attempt_at IS NOT NULL THEN 'retrying_email' - WHEN audience = 'owner' - AND status = 'pending' - AND last_email_error IS NOT NULL THEN 'failed_email' - WHEN audience = 'owner' - AND status = 'pending' THEN 'pending_email' - ELSE 'email_na' - END AS email_bucket, - CASE - WHEN status = 'handed_off' AND export_count = 0 THEN 'pending_export' - ELSE 'exported_or_na' - END AS export_bucket, - CASE - WHEN status = 'handed_off' - AND handoff_channel = 'crm' - AND last_crm_synced_at IS NOT NULL THEN 'synced_crm' - WHEN status = 'handed_off' - AND handoff_channel = 'crm' - AND last_crm_sync_error IS NOT NULL - AND next_crm_sync_attempt_at IS NOT NULL THEN 'retrying_crm_sync' - WHEN status = 'handed_off' - AND handoff_channel = 'crm' - AND last_crm_sync_error IS NOT NULL THEN 'failed_crm_sync' - WHEN status = 'handed_off' - AND handoff_channel = 'crm' THEN 'pending_crm_sync' - ELSE 'crm_na' - END AS crm_bucket, - CASE - WHEN status = 'handed_off' AND webhook_delivery_count > 0 THEN 'delivered_webhook' - WHEN status = 'handed_off' AND webhook_exhausted_at IS NOT NULL THEN 'dead_lettered_webhook' - WHEN status = 'handed_off' - AND last_webhook_error IS NOT NULL - AND next_webhook_attempt_at IS NOT NULL THEN 'retrying_webhook' - WHEN status = 'handed_off' AND last_webhook_error IS NOT NULL THEN 'failed_webhook' - WHEN status = 'handed_off' THEN 'pending_webhook' - ELSE 'webhook_na' - END AS webhook_bucket, - CASE - WHEN status = 'handed_off' - AND webhook_exhausted_at IS NOT NULL - AND last_slack_alerted_at IS NOT NULL THEN 'alerted_slack' - WHEN status = 'handed_off' - AND webhook_exhausted_at IS NOT NULL - AND last_slack_alert_error IS NOT NULL THEN 'failed_slack_alert' - WHEN status = 'handed_off' - AND webhook_exhausted_at IS NOT NULL THEN 'pending_slack_alert' - ELSE 'slack_na' - END AS slack_bucket, - COUNT(*)::text AS count - FROM team_workspace_recovery_outreach_events - GROUP BY - audience, - status, - attempt_bucket, - email_bucket, - export_bucket, - crm_bucket, - webhook_bucket, - slack_bucket`, - ); - let pendingOwnerOutreach = 0; - let pendingAdminOutreach = 0; - let pendingEmail = 0; - let retryingEmail = 0; - let deliveredEmail = 0; - let failedEmail = 0; - let pendingMemberEmail = 0; - let retryingMemberEmail = 0; - let deliveredMemberEmail = 0; - let failedMemberEmail = 0; - let multiTouchPending = 0; - let pendingExport = 0; - let pendingCrmSync = 0; - let retryingCrmSync = 0; - let syncedCrm = 0; - let failedCrmSync = 0; - let pendingWebhook = 0; - let retryingWebhook = 0; - let deadLetteredWebhook = 0; - let pendingSlackAlert = 0; - let alertedSlack = 0; - let failedSlackAlert = 0; - let deliveredWebhook = 0; - let failedWebhook = 0; - let handedOffOutreach = 0; - let resolvedOutreach = 0; - for (const row of recoveryOutreachCountsRes.rows) { - const count = Number(row.count); - if (row.status === 'pending') { - if (row.attempt_bucket === 'multi') multiTouchPending += count; - if (row.audience === 'owner') pendingOwnerOutreach += count; - else pendingAdminOutreach += count; - if (row.email_bucket === 'pending_email') pendingEmail += count; - else if (row.email_bucket === 'retrying_email') retryingEmail += count; - else if (row.email_bucket === 'delivered_email') deliveredEmail += count; - else if (row.email_bucket === 'failed_email') failedEmail += count; - } else if (row.status === 'handed_off') { - if (row.export_bucket === 'pending_export') pendingExport += count; - if (row.crm_bucket === 'pending_crm_sync') pendingCrmSync += count; - else if (row.crm_bucket === 'retrying_crm_sync') retryingCrmSync += count; - else if (row.crm_bucket === 'synced_crm') syncedCrm += count; - else if (row.crm_bucket === 'failed_crm_sync') failedCrmSync += count; - if (row.webhook_bucket === 'pending_webhook') pendingWebhook += count; - else if (row.webhook_bucket === 'retrying_webhook') retryingWebhook += count; - else if (row.webhook_bucket === 'dead_lettered_webhook') deadLetteredWebhook += count; - else if (row.webhook_bucket === 'delivered_webhook') deliveredWebhook += count; - else if (row.webhook_bucket === 'failed_webhook') failedWebhook += count; - if (row.slack_bucket === 'pending_slack_alert') pendingSlackAlert += count; - else if (row.slack_bucket === 'alerted_slack') alertedSlack += count; - else if (row.slack_bucket === 'failed_slack_alert') failedSlackAlert += count; - handedOffOutreach += count; - } else { - resolvedOutreach += count; - } - } - for (const row of memberRecoveryNotificationCountsRes.rows) { - const count = Number(row.count); - if (row.email_bucket === 'pending_member_email') pendingMemberEmail += count; - else if (row.email_bucket === 'retrying_member_email') retryingMemberEmail += count; - else if (row.email_bucket === 'delivered_member_email') deliveredMemberEmail += count; - else if (row.email_bucket === 'failed_member_email') failedMemberEmail += count; - } - const recoveryPlaybookSummaryRes = await this.pool.query<{ - total_runs: string; - successful_runs: string; - failed_runs: string; - scheduled_runs: string; - manual_runs: string; - last_run_at: Date | string | null; - last_run_ok: boolean | null; - }>( - `SELECT - COUNT(*)::text AS total_runs, - COUNT(*) FILTER (WHERE ok = TRUE)::text AS successful_runs, - COUNT(*) FILTER (WHERE ok = FALSE)::text AS failed_runs, - COUNT(*) FILTER (WHERE trigger_type = 'scheduled')::text AS scheduled_runs, - COUNT(*) FILTER (WHERE trigger_type <> 'scheduled')::text AS manual_runs, - MAX(created_at) AS last_run_at, - ( - ARRAY_AGG(ok ORDER BY created_at DESC) - )[1] AS last_run_ok - FROM team_workspace_recovery_playbook_runs`, - ); - const recoveryPlaybookRunsRes = await this.pool.query( - `SELECT - id, - trigger_type, - retry_interval_hours, - force_run, - requested_steps, - rerun_of_run_id, - ok, - summary, - steps, - created_at - FROM team_workspace_recovery_playbook_runs - ORDER BY created_at DESC - LIMIT 8`, - ); - const recoveryPlaybookSummary = recoveryPlaybookSummaryRes.rows[0]; - - let activeWorkspaces = 0; - let atRiskWorkspaces = 0; - let workspacesRequiringAction = 0; - let fullWorkspaces = 0; - let totalSeatCapacity = 0; - let seatsUsed = 0; - let reservedSeats = 0; - let pendingInvites = 0; - let inheritedMembers = 0; - let revokedInvites = 0; - let fallbackMembers = 0; - const actionableWorkspaces: AdminActionableWorkspace[] = []; - const recoveryActionCounts = new Map< - TeamWorkspaceBillingRecoveryActionCode, - AdminRecoveryAction - >(); - - for (const row of rows) { - const workspaceSeatsUsed = Number(row.member_count); - const workspacePendingInvites = Number(row.pending_invite_count); - const seatLimit = resolveTeamWorkspaceSeatLimit({ - subscription: row.subscription, - billingStatus: row.billing_status, - }); - const workspaceReservedSeats = workspaceSeatsUsed + workspacePendingInvites; - const warningCodes = buildBillingWarnings({ - ownerBillingStatus: row.billing_status, - cancelAtPeriodEnd: row.cancel_at_period_end, - seatLimit, - reservedSeats: workspaceReservedSeats, - }); - - totalSeatCapacity += seatLimit; - seatsUsed += workspaceSeatsUsed; - reservedSeats += workspaceReservedSeats; - pendingInvites += workspacePendingInvites; - revokedInvites += Number(row.revoked_invite_count); - const workspaceFallbackMembers = seatLimit === 0 ? Math.max(0, workspaceSeatsUsed - 1) : 0; - fallbackMembers += workspaceFallbackMembers; - const latestOutreach = latestRecoveryOutreachByWorkspaceId.get(row.workspace_id) ?? null; - const memberRecoveryNotifications = - memberRecoverySummaryByWorkspaceId.get(row.workspace_id) ?? null; - const recommendedActions = buildRecoveryActions({ - subscription: row.subscription, - billingStatus: row.billing_status, - warningCodes, - seatLimit, - seatsRemaining: Math.max(0, seatLimit - workspaceReservedSeats), - fallbackMemberCount: workspaceFallbackMembers, - revokedInviteCount: Number(row.revoked_invite_count), - }); - if (recommendedActions.length > 0) { - workspacesRequiringAction += 1; - accumulateRecoveryActions(recommendedActions, recoveryActionCounts); - actionableWorkspaces.push( - toAdminActionableWorkspace({ - workspaceId: row.workspace_id, - workspaceName: row.workspace_name, - owner: { - id: row.owner_user_id, - email: row.owner_email, - displayName: row.owner_display_name, - subscription: row.subscription, - billingStatus: row.billing_status, - currentPeriodEnd: null, - cancelAtPeriodEnd: row.cancel_at_period_end, - }, - billing: { - ownerUserId: row.owner_user_id, - ownerDisplayName: row.owner_display_name, - ownerEmail: row.owner_email, - subscription: row.subscription, - billingStatus: row.billing_status, - currentPeriodEnd: null, - cancelAtPeriodEnd: row.cancel_at_period_end, - seatLimit, - seatsUsed: workspaceSeatsUsed, - reservedSeats: workspaceReservedSeats, - seatsRemaining: Math.max(0, seatLimit - workspaceReservedSeats), - fallbackMemberCount: workspaceFallbackMembers, - revokedInviteCount: Number(row.revoked_invite_count), - canInviteMore: seatLimit > 0 && workspaceReservedSeats < seatLimit, - warningCodes, - recommendedActions, - recoveryNotices: [], - }, - pendingInvites: workspacePendingInvites, - lastBillingEvent: latestBillingEventsByWorkspaceId.get(row.workspace_id) ?? null, - lastOutreach: latestOutreach, - memberRecoveryNotifications, - }), - ); - } - if (seatLimit > 0) { - activeWorkspaces += 1; - inheritedMembers += Math.max(0, workspaceSeatsUsed - 1); - } - if (warningCodes.includes('seat_limit_reached')) fullWorkspaces += 1; - if ( - warningCodes.some( - (code) => - code === 'workspace_plan_inactive' || - code === 'past_due' || - code === 'cancel_at_period_end', - ) - ) { - atRiskWorkspaces += 1; - } - } - - return { - totalWorkspaces: rows.length, - activeWorkspaces, - atRiskWorkspaces, - workspacesRequiringAction, - fullWorkspaces, - totalSeatCapacity, - seatsUsed, - reservedSeats, - pendingInvites, - inheritedMembers, - revokedInvites, - fallbackMembers, - seatUtilizationRate: totalSeatCapacity > 0 ? reservedSeats / totalSeatCapacity : null, - recoveryActions: [...recoveryActionCounts.values()].sort((a, b) => b.count - a.count), - recoveryStages: [], - followUpStates: [], - recoveryOutreach: { - pendingOwner: pendingOwnerOutreach, - pendingAdmin: pendingAdminOutreach, - pendingEmail, - retryingEmail, - deliveredEmail, - failedEmail, - pendingMemberEmail, - retryingMemberEmail, - deliveredMemberEmail, - failedMemberEmail, - multiTouchPending, - pendingExport, - pendingCrmSync, - retryingCrmSync, - syncedCrm, - failedCrmSync, - pendingWebhook, - retryingWebhook, - deadLetteredWebhook, - pendingSlackAlert, - alertedSlack, - failedSlackAlert, - deliveredWebhook, - failedWebhook, - handedOff: handedOffOutreach, - resolved: resolvedOutreach, - recent: recoveryOutreachRecent, - }, - recoveryPlaybook: { - totalRuns: Number(recoveryPlaybookSummary?.total_runs ?? 0), - successfulRuns: Number(recoveryPlaybookSummary?.successful_runs ?? 0), - failedRuns: Number(recoveryPlaybookSummary?.failed_runs ?? 0), - scheduledRuns: Number(recoveryPlaybookSummary?.scheduled_runs ?? 0), - manualRuns: Number(recoveryPlaybookSummary?.manual_runs ?? 0), - lastRunAt: recoveryPlaybookSummary?.last_run_at - ? toIso(recoveryPlaybookSummary.last_run_at) - : null, - lastRunOk: recoveryPlaybookSummary?.last_run_ok ?? null, - recent: recoveryPlaybookRunsRes.rows.map(rowToRecoveryPlaybookRun), - }, - recentBillingEvents: await this.getRecentBillingEvents(), - actionableWorkspaces: actionableWorkspaces.sort((a, b) => { - const warningDelta = b.warningCodes.length - a.warningCodes.length; - if (warningDelta !== 0) return warningDelta; - return ( - new Date(b.lastBillingEventAt ?? 0).getTime() - - new Date(a.lastBillingEventAt ?? 0).getTime() - ); - }), - }; - } - - async listRecentRecoveryPlaybookRuns(limit: number): Promise { - const safeLimit = Math.max(1, Math.min(limit, 100)); - const { rows } = await this.pool.query( - `SELECT - id, - trigger_type, - retry_interval_hours, - force_run, - requested_steps, - rerun_of_run_id, - ok, - summary, - steps, - created_at - FROM team_workspace_recovery_playbook_runs - ORDER BY created_at DESC - LIMIT $1`, - [safeLimit], - ); - return rows.map(rowToRecoveryPlaybookRun); - } - - async getRecoveryPlaybookRunById( - runId: string, - ): Promise { - const { rows } = await this.pool.query( - `SELECT - id, - trigger_type, - retry_interval_hours, - force_run, - requested_steps, - rerun_of_run_id, - ok, - summary, - steps, - created_at - FROM team_workspace_recovery_playbook_runs - WHERE id = $1 - LIMIT 1`, - [runId], - ); - return rows[0] ? rowToRecoveryPlaybookRun(rows[0]) : null; - } - - async recordRecoveryPlaybookRun(input: { - triggerType: string; - retryIntervalHours: number; - force: boolean; - requestedSteps: TeamWorkspaceRecoveryPlaybookStepName[]; - rerunOfRunId?: string | null; - ok: boolean; - summary: string; - steps: TeamWorkspaceRecoveryPlaybookSteps; - createdAt?: string; - }): Promise { - const createdAt = input.createdAt ?? new Date().toISOString(); - const { rows } = await this.pool.query( - `INSERT INTO team_workspace_recovery_playbook_runs ( - trigger_type, - retry_interval_hours, - force_run, - requested_steps, - rerun_of_run_id, - ok, - summary, - steps, - created_at - ) - VALUES ($1, $2, $3, $4::text[], $5::uuid, $6, $7, $8::jsonb, $9::timestamptz) - RETURNING - id, - trigger_type, - retry_interval_hours, - force_run, - requested_steps, - rerun_of_run_id, - ok, - summary, - steps, - created_at`, - [ - input.triggerType, - input.retryIntervalHours, - input.force, - input.requestedSteps, - input.rerunOfRunId ?? null, - input.ok, - input.summary, - JSON.stringify(input.steps), - createdAt, - ], - ); - return rowToRecoveryPlaybookRun(rows[0]!); - } - - async handoffAdminRecoveryOutreach(input: { - workspaceId: string; - channel: TeamWorkspaceRecoveryOutreachHandoffChannel; - snoozeHours: number; - note?: string | null; - }): Promise<'workspace_not_found' | 'outreach_not_found' | { ok: true }> { - const { rowCount: workspaceCount } = await this.pool.query( - `SELECT 1 - FROM team_workspaces - WHERE id = $1 - LIMIT 1`, - [input.workspaceId], - ); - if ((workspaceCount ?? 0) === 0) return 'workspace_not_found'; - - const { rowCount } = await this.pool.query( - `UPDATE team_workspace_recovery_outreach_events - SET status = 'handed_off', - last_attempt_at = NOW(), - next_attempt_at = NOW() + ($2 * INTERVAL '1 hour'), - export_count = 0, - last_exported_at = NULL, - crm_sync_count = 0, - last_crm_sync_attempt_at = NULL, - next_crm_sync_attempt_at = NOW(), - last_crm_synced_at = NULL, - crm_external_record_id = NULL, - last_crm_sync_status_code = NULL, - last_crm_sync_error = NULL, - webhook_attempt_count = 0, - last_webhook_attempt_at = NULL, - next_webhook_attempt_at = NOW(), - webhook_exhausted_at = NULL, - webhook_delivery_count = 0, - last_webhook_delivered_at = NULL, - last_webhook_status_code = NULL, - last_webhook_error = NULL, - slack_alert_count = 0, - last_slack_alert_attempt_at = NULL, - last_slack_alerted_at = NULL, - last_slack_alert_status_code = NULL, - last_slack_alert_error = NULL, - handoff_channel = $3, - handoff_note = $4, - handoff_at = NOW() - WHERE id = ( - SELECT id - FROM team_workspace_recovery_outreach_events - WHERE workspace_id = $1 - AND audience = 'admin' - AND status <> 'resolved' - ORDER BY created_at DESC - LIMIT 1 - )`, - [input.workspaceId, input.snoozeHours, input.channel, input.note?.trim() || null], - ); - if ((rowCount ?? 0) === 0) return 'outreach_not_found'; - return { ok: true }; - } - - async exportHandedOffAdminRecoveryOutreach(): Promise<{ exportedCount: number }> { - const { rowCount } = await this.pool.query( - `UPDATE team_workspace_recovery_outreach_events - SET export_count = export_count + 1, - last_exported_at = NOW() - WHERE audience = 'admin' - AND status = 'handed_off'`, - ); - return { exportedCount: rowCount ?? 0 }; - } - - async listPendingMemberRecoveryNotifications(): Promise< - PendingMemberRecoveryNotificationTarget[] - > { - const { rows } = await this.pool.query<{ - notification_id: string; - workspace_id: string; - workspace_name: string; - user_id: string; - email: string; - display_name: string | null; - owner_display_name: string | null; - owner_email: string; - subscription: SubscriptionTier; - billing_status: BillingStatus; - title: string; - detail: string; - email_attempt_count: number; - last_email_attempt_at: Date | string | null; - next_email_attempt_at: Date | string | null; - last_email_delivered_at: Date | string | null; - last_email_message_id: string | null; - last_email_error: string | null; - }>( - `SELECT - n.id AS notification_id, - n.workspace_id, - w.name AS workspace_name, - n.user_id, - u.email, - u.display_name, - owner.display_name AS owner_display_name, - owner.email AS owner_email, - owner.subscription, - owner.billing_status, - n.title, - n.detail, - n.email_attempt_count, - n.last_email_attempt_at, - n.next_email_attempt_at, - n.last_email_delivered_at, - n.last_email_message_id, - n.last_email_error - FROM team_workspace_member_recovery_notifications n - JOIN team_workspaces w ON w.id = n.workspace_id - JOIN users u ON u.id = n.user_id - JOIN users owner ON owner.id = w.owner_user_id - WHERE n.status = 'pending' - ORDER BY n.created_at DESC`, - ); - return rows.map((row) => ({ - notificationId: row.notification_id, - workspaceId: row.workspace_id, - workspaceName: row.workspace_name, - userId: row.user_id, - email: row.email, - displayName: row.display_name, - ownerDisplayName: row.owner_display_name, - ownerEmail: row.owner_email, - subscription: row.subscription, - billingStatus: row.billing_status, - title: row.title, - detail: row.detail, - emailAttemptCount: row.email_attempt_count, - lastEmailAttemptAt: row.last_email_attempt_at ? toIso(row.last_email_attempt_at) : null, - nextEmailAttemptAt: row.next_email_attempt_at ? toIso(row.next_email_attempt_at) : null, - lastEmailDeliveredAt: row.last_email_delivered_at ? toIso(row.last_email_delivered_at) : null, - lastEmailMessageId: row.last_email_message_id, - lastEmailError: row.last_email_error, - })); - } - - async recordPendingOwnerRecoveryOutreachEmailDelivery(input: { - workspaceIds: string[]; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - messageIdByWorkspaceId?: Record; - }): Promise<{ deliveredCount: number }> { - if (input.workspaceIds.length === 0) return { deliveredCount: 0 }; - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const deliveredAt = input.deliveredAt ?? attemptedAt; - const retryIntervalHours = Math.max( - 0, - input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - const messageIdByWorkspaceId = input.messageIdByWorkspaceId ?? {}; - const messageIds = input.workspaceIds.map( - (workspaceId) => messageIdByWorkspaceId[workspaceId] ?? null, - ); - const { rowCount } = await this.pool.query( - input.error - ? `UPDATE team_workspace_recovery_outreach_events - SET email_attempt_count = email_attempt_count + 1, - last_email_attempt_at = $2, - next_email_attempt_at = $3, - last_email_error = $4 - WHERE id IN ( - SELECT DISTINCT ON (workspace_id) id - FROM team_workspace_recovery_outreach_events - WHERE workspace_id = ANY($1::uuid[]) - AND audience = 'owner' - AND status = 'pending' - ORDER BY workspace_id, created_at DESC - )` - : `UPDATE team_workspace_recovery_outreach_events AS o - SET email_attempt_count = o.email_attempt_count + 1, - last_email_attempt_at = $2, - next_email_attempt_at = NULL, - last_email_delivered_at = $3, - last_email_message_id = mapped.message_id, - last_email_error = NULL - FROM ( - SELECT UNNEST($1::uuid[]) AS workspace_id, UNNEST($4::text[]) AS message_id - ) AS mapped - WHERE o.workspace_id = mapped.workspace_id - AND o.id IN ( - SELECT DISTINCT ON (workspace_id) id - FROM team_workspace_recovery_outreach_events - WHERE workspace_id = ANY($1::uuid[]) - AND audience = 'owner' - AND status = 'pending' - ORDER BY workspace_id, created_at DESC - )`, - input.error - ? [ - input.workspaceIds, - attemptedAt, - nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), - input.error, - ] - : [input.workspaceIds, attemptedAt, deliveredAt, messageIds], - ); - return { deliveredCount: input.error ? 0 : (rowCount ?? 0) }; - } - - async recordPendingMemberRecoveryNotificationEmailDelivery(input: { - notificationIds: string[]; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - messageIdByNotificationId?: Record; - }): Promise<{ deliveredCount: number }> { - if (input.notificationIds.length === 0) return { deliveredCount: 0 }; - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const deliveredAt = input.deliveredAt ?? attemptedAt; - const retryIntervalHours = Math.max( - 0, - input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - const messageIdByNotificationId = input.messageIdByNotificationId ?? {}; - const messageIds = input.notificationIds.map( - (notificationId) => messageIdByNotificationId[notificationId] ?? null, - ); - const { rowCount } = await this.pool.query( - input.error - ? `UPDATE team_workspace_member_recovery_notifications - SET email_attempt_count = email_attempt_count + 1, - last_email_attempt_at = $2, - next_email_attempt_at = $3, - last_email_error = $4 - WHERE id = ANY($1::uuid[]) - AND status = 'pending'` - : `UPDATE team_workspace_member_recovery_notifications AS n - SET email_attempt_count = n.email_attempt_count + 1, - last_email_attempt_at = $2, - next_email_attempt_at = NULL, - last_email_delivered_at = $3, - last_email_message_id = mapped.message_id, - last_email_error = NULL - FROM ( - SELECT UNNEST($1::uuid[]) AS notification_id, UNNEST($4::text[]) AS message_id - ) AS mapped - WHERE n.id = mapped.notification_id - AND n.status = 'pending'`, - input.error - ? [ - input.notificationIds, - attemptedAt, - nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), - input.error, - ] - : [input.notificationIds, attemptedAt, deliveredAt, messageIds], - ); - return { deliveredCount: input.error ? 0 : (rowCount ?? 0) }; - } - - async recordHandedOffAdminRecoveryOutreachCrmSync(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - syncedAt?: string; - retryIntervalHours?: number; - externalRecordIdByWorkspaceId?: Record; - }): Promise<{ syncedCount: number }> { - if (input.workspaceIds.length === 0) return { syncedCount: 0 }; - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const syncedAt = input.syncedAt ?? attemptedAt; - const retryIntervalHours = Math.max( - 0, - input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - const externalRecordIdByWorkspaceId = input.externalRecordIdByWorkspaceId ?? {}; - const externalRecordIds = input.workspaceIds.map( - (workspaceId) => externalRecordIdByWorkspaceId[workspaceId] ?? null, - ); - const { rowCount } = await this.pool.query( - input.error - ? `UPDATE team_workspace_recovery_outreach_events - SET crm_sync_count = crm_sync_count + 1, - last_crm_sync_attempt_at = $2, - next_crm_sync_attempt_at = $3, - last_crm_sync_status_code = $4, - last_crm_sync_error = $5 - WHERE id IN ( - SELECT DISTINCT ON (workspace_id) id - FROM team_workspace_recovery_outreach_events - WHERE workspace_id = ANY($1::uuid[]) - AND audience = 'admin' - AND status = 'handed_off' - AND handoff_channel = 'crm' - ORDER BY workspace_id, created_at DESC - )` - : `UPDATE team_workspace_recovery_outreach_events AS o - SET crm_sync_count = o.crm_sync_count + 1, - last_crm_sync_attempt_at = $2, - next_crm_sync_attempt_at = NULL, - last_crm_synced_at = $3, - crm_external_record_id = mapped.external_record_id, - last_crm_sync_status_code = $4, - last_crm_sync_error = NULL - FROM ( - SELECT UNNEST($1::uuid[]) AS workspace_id, UNNEST($5::text[]) AS external_record_id - ) AS mapped - WHERE o.workspace_id = mapped.workspace_id - AND o.id IN ( - SELECT DISTINCT ON (workspace_id) id - FROM team_workspace_recovery_outreach_events - WHERE workspace_id = ANY($1::uuid[]) - AND audience = 'admin' - AND status = 'handed_off' - AND handoff_channel = 'crm' - ORDER BY workspace_id, created_at DESC - )`, - input.error - ? [ - input.workspaceIds, - attemptedAt, - nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), - input.statusCode, - input.error, - ] - : [input.workspaceIds, attemptedAt, syncedAt, input.statusCode, externalRecordIds], - ); - return { syncedCount: input.error ? 0 : (rowCount ?? 0) }; - } - - async recordDeadLetteredAdminRecoveryOutreachSlackAlert(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - alertedAt?: string; - }): Promise<{ alertedCount: number }> { - if (input.workspaceIds.length === 0) return { alertedCount: 0 }; - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const alertedAt = input.alertedAt ?? attemptedAt; - const { rowCount } = await this.pool.query( - input.error - ? `UPDATE team_workspace_recovery_outreach_events - SET slack_alert_count = slack_alert_count + 1, - last_slack_alert_attempt_at = $2, - last_slack_alert_status_code = $3, - last_slack_alert_error = $4 - WHERE workspace_id = ANY($1::uuid[]) - AND audience = 'admin' - AND status = 'handed_off' - AND webhook_exhausted_at IS NOT NULL` - : `UPDATE team_workspace_recovery_outreach_events - SET slack_alert_count = slack_alert_count + 1, - last_slack_alert_attempt_at = $2, - last_slack_alerted_at = $3, - last_slack_alert_status_code = $4, - last_slack_alert_error = NULL - WHERE workspace_id = ANY($1::uuid[]) - AND audience = 'admin' - AND status = 'handed_off' - AND webhook_exhausted_at IS NOT NULL`, - input.error - ? [input.workspaceIds, attemptedAt, input.statusCode, input.error] - : [input.workspaceIds, attemptedAt, alertedAt, input.statusCode], - ); - return { alertedCount: input.error ? 0 : (rowCount ?? 0) }; - } - - async recordHandedOffAdminRecoveryOutreachWebhookDelivery(input: { - workspaceIds: string[]; - statusCode: number | null; - error: string | null; - attemptedAt?: string; - deliveredAt?: string; - retryIntervalHours?: number; - maxAttempts?: number; - }): Promise<{ deliveredCount: number }> { - if (input.workspaceIds.length === 0) return { deliveredCount: 0 }; - const attemptedAt = input.attemptedAt ?? new Date().toISOString(); - const deliveredAt = input.deliveredAt ?? new Date().toISOString(); - const retryIntervalHours = Math.max( - 0, - input.retryIntervalHours ?? DEFAULT_RECOVERY_OUTREACH_RETRY_HOURS, - ); - const maxAttempts = Math.max( - 1, - input.maxAttempts ?? config.recoveryOutreach.webhookMaxAttempts, - ); - const { rowCount } = await this.pool.query( - input.error - ? `UPDATE team_workspace_recovery_outreach_events - SET webhook_attempt_count = webhook_attempt_count + 1, - last_webhook_attempt_at = $2, - next_webhook_attempt_at = CASE - WHEN webhook_attempt_count + 1 >= $6 THEN NULL - ELSE $3 - END, - webhook_exhausted_at = CASE - WHEN webhook_attempt_count + 1 >= $6 THEN $2 - ELSE NULL - END, - last_webhook_status_code = $4, - last_webhook_error = $5 - WHERE id IN ( - SELECT DISTINCT ON (workspace_id) id - FROM team_workspace_recovery_outreach_events - WHERE workspace_id = ANY($1::uuid[]) - AND audience = 'admin' - AND status = 'handed_off' - ORDER BY workspace_id, created_at DESC - )` - : `UPDATE team_workspace_recovery_outreach_events - SET webhook_attempt_count = webhook_attempt_count + 1, - last_webhook_attempt_at = $2, - next_webhook_attempt_at = NULL, - webhook_exhausted_at = NULL, - webhook_delivery_count = webhook_delivery_count + 1, - last_webhook_delivered_at = $3, - last_webhook_status_code = $4, - last_webhook_error = NULL, - slack_alert_count = 0, - last_slack_alert_attempt_at = NULL, - last_slack_alerted_at = NULL, - last_slack_alert_status_code = NULL, - last_slack_alert_error = NULL - WHERE id IN ( - SELECT DISTINCT ON (workspace_id) id - FROM team_workspace_recovery_outreach_events - WHERE workspace_id = ANY($1::uuid[]) - AND audience = 'admin' - AND status = 'handed_off' - ORDER BY workspace_id, created_at DESC - )`, - input.error - ? [ - input.workspaceIds, - attemptedAt, - nextRecoveryOutreachAttemptAt(attemptedAt, retryIntervalHours), - input.statusCode, - input.error, - maxAttempts, - ] - : [input.workspaceIds, attemptedAt, deliveredAt, input.statusCode], - ); - return { deliveredCount: input.error ? 0 : (rowCount ?? 0) }; - } - - async createWorkspace( - user: UserProfile, - name: string, - ): Promise { - if (!user.entitlements.canUseTeamWorkspace) return 'entitlement_required'; - if (await this.findMembership(user.id)) return 'already_in_workspace'; - - const client = await this.pool.connect(); - try { - await client.query('BEGIN'); - const { rows } = await client.query<{ id: string }>( - `INSERT INTO team_workspaces (name, owner_user_id) - VALUES ($1, $2) - RETURNING id`, - [name, user.id], - ); - await client.query( - `INSERT INTO team_workspace_members (workspace_id, user_id, role) - VALUES ($1, $2, 'owner')`, - [rows[0]!.id, user.id], - ); - await client.query('COMMIT'); - return (await this.buildWorkspaceForUser(user.id))!; - } catch (error) { - await client.query('ROLLBACK').catch(() => undefined); - throw error; - } finally { - client.release(); - } - } - - async inviteMember( - actorUserId: string, - email: string, - role: ManageRole, - ): Promise< - | TeamWorkspace - | 'workspace_not_found' - | 'forbidden' - | 'user_already_in_workspace' - | 'seat_limit_reached' - | 'workspace_plan_inactive' - > { - const membership = await this.findMembership(actorUserId); - if (!membership) return 'workspace_not_found'; - if (membership.role === 'member') return 'forbidden'; - - const workspace = await this.buildWorkspaceForUser(actorUserId); - if (!workspace) return 'workspace_not_found'; - - const { rowCount: memberCount } = await this.pool.query( - `SELECT 1 - FROM team_workspace_members m - JOIN users u ON u.id = m.user_id - WHERE lower(u.email) = lower($1) - LIMIT 1`, - [email], - ); - if ((memberCount ?? 0) > 0) return 'user_already_in_workspace'; - - if (workspace.billing.warningCodes.includes('workspace_plan_inactive')) { - return 'workspace_plan_inactive'; - } - - const normalizedEmail = email.trim().toLowerCase(); - const existingInvite = workspace.invites.find( - (invite) => invite.email.toLowerCase() === normalizedEmail, - ); - if (!existingInvite && !workspace.billing.canInviteMore) { - return 'seat_limit_reached'; - } - - await this.pool.query( - `INSERT INTO team_workspace_invites (workspace_id, email, role, created_by_user_id) - VALUES ($1, $2, $3, $4) - ON CONFLICT (workspace_id, email) - DO UPDATE SET - role = EXCLUDED.role, - status = 'pending', - created_by_user_id = EXCLUDED.created_by_user_id, - accepted_by_user_id = NULL, - accepted_at = NULL, - revoked_reason = NULL, - revoked_at = NULL, - created_at = NOW()`, - [membership.workspaceId, normalizedEmail, role, actorUserId], - ); - return (await this.buildWorkspaceForUser(actorUserId))!; - } - - async acceptInvite( - user: UserProfile, - inviteId: string, - ): Promise< - TeamWorkspace | 'invite_not_found' | 'already_in_workspace' | 'workspace_plan_inactive' - > { - if (await this.findMembership(user.id)) return 'already_in_workspace'; - - const { rows } = await this.pool.query( - `SELECT - i.id, - i.workspace_id, - w.name AS workspace_name, - i.email, - i.role, - i.status, - i.created_at, - i.accepted_at, - i.revoked_reason, - i.revoked_at - FROM team_workspace_invites i - JOIN team_workspaces w ON w.id = i.workspace_id - WHERE i.id = $1 - LIMIT 1`, - [inviteId], - ); - const invite = rows[0]; - if (!invite) return 'invite_not_found'; - if (invite.email.toLowerCase() !== user.email.toLowerCase()) return 'invite_not_found'; - if (invite.status !== 'pending') { - return invite.revoked_reason === 'billing_inactive' - ? 'workspace_plan_inactive' - : 'invite_not_found'; - } - await this.reconcileWorkspaceBillingState(invite.workspace_id); - const refreshedInviteRes = await this.pool.query( - `SELECT - i.id, - i.workspace_id, - w.name AS workspace_name, - i.email, - i.role, - i.status, - i.created_at, - i.accepted_at, - i.revoked_reason, - i.revoked_at - FROM team_workspace_invites i - JOIN team_workspaces w ON w.id = i.workspace_id - WHERE i.id = $1 - LIMIT 1`, - [inviteId], - ); - const refreshedInvite = refreshedInviteRes.rows[0]; - if (!refreshedInvite || refreshedInvite.status !== 'pending') { - return refreshedInvite?.revoked_reason === 'billing_inactive' - ? 'workspace_plan_inactive' - : 'invite_not_found'; - } - - const [ownerRows, memberCountRows, pendingInviteCountRows] = await Promise.all([ - this.pool.query<{ - id: string; - email: string; - display_name: string | null; - subscription: SubscriptionTier; - billing_status: BillingStatus; - current_period_end: Date | string | null; - cancel_at_period_end: boolean; - }>( - `SELECT - u.id, - u.email, - u.display_name, - u.subscription, - u.billing_status, - u.current_period_end, - u.cancel_at_period_end - FROM team_workspaces w - JOIN users u ON u.id = w.owner_user_id - WHERE w.id = $1 - LIMIT 1`, - [invite.workspace_id], - ), - this.pool.query<{ count: string }>( - `SELECT COUNT(*)::text AS count - FROM team_workspace_members - WHERE workspace_id = $1`, - [invite.workspace_id], - ), - this.pool.query<{ count: string }>( - `SELECT COUNT(*)::text AS count - FROM team_workspace_invites - WHERE workspace_id = $1 - AND status = 'pending'`, - [invite.workspace_id], - ), - ]); - const owner = ownerRows.rows[0]; - if (!owner) return 'invite_not_found'; - const billing = buildWorkspaceBilling({ - owner: { - id: owner.id, - email: owner.email, - displayName: owner.display_name, - subscription: owner.subscription, - billingStatus: owner.billing_status, - currentPeriodEnd: owner.current_period_end ? toIso(owner.current_period_end) : null, - cancelAtPeriodEnd: owner.cancel_at_period_end, - }, - seatsUsed: Number(memberCountRows.rows[0]?.count ?? 0), - pendingInviteCount: Number(pendingInviteCountRows.rows[0]?.count ?? 0), - }); - if (billing.warningCodes.includes('workspace_plan_inactive')) { - return 'workspace_plan_inactive'; - } - - const client = await this.pool.connect(); - try { - await client.query('BEGIN'); - await client.query( - `INSERT INTO team_workspace_members (workspace_id, user_id, role) - VALUES ($1, $2, $3)`, - [invite.workspace_id, user.id, refreshedInvite.role], - ); - await client.query( - `UPDATE team_workspace_invites - SET status = CASE WHEN id = $1 THEN 'accepted' ELSE 'revoked' END, - accepted_by_user_id = CASE WHEN id = $1 THEN $2 ELSE accepted_by_user_id END, - accepted_at = CASE WHEN id = $1 THEN NOW() ELSE accepted_at END - , revoked_reason = CASE WHEN id = $1 THEN NULL ELSE 'accepted_elsewhere' END - , revoked_at = CASE WHEN id = $1 THEN NULL ELSE NOW() END - WHERE lower(email) = lower($3) - AND status = 'pending'`, - [inviteId, user.id, user.email], - ); - await client.query('COMMIT'); - return (await this.buildWorkspaceForUser(user.id))!; - } catch (error) { - await client.query('ROLLBACK').catch(() => undefined); - throw error; - } finally { - client.release(); - } - } - - async shareSavedView( - actorUserId: string, - savedViewId: string, - ): Promise< - | { status: 'added' | 'exists'; workspace: TeamWorkspace } - | 'workspace_not_found' - | 'saved_view_not_found' - > { - const membership = await this.findMembership(actorUserId); - if (!membership) return 'workspace_not_found'; - - const { rowCount: savedViewCount } = await this.pool.query( - `SELECT 1 - FROM user_saved_views - WHERE id = $1 AND user_id = $2 - LIMIT 1`, - [savedViewId, actorUserId], - ); - if ((savedViewCount ?? 0) === 0) return 'saved_view_not_found'; - - const { rowCount } = await this.pool.query( - `INSERT INTO team_workspace_saved_views (workspace_id, saved_view_id, shared_by_user_id) - VALUES ($1, $2, $3) - ON CONFLICT (workspace_id, saved_view_id) DO NOTHING`, - [membership.workspaceId, savedViewId, actorUserId], - ); - return { - status: (rowCount ?? 0) > 0 ? 'added' : 'exists', - workspace: (await this.buildWorkspaceForUser(actorUserId))!, - }; - } - - async shareCase( - actorUserId: string, - caseId: string, - ): Promise< - | { status: 'added' | 'exists'; workspace: TeamWorkspace } - | 'workspace_not_found' - | 'case_not_found' - > { - const membership = await this.findMembership(actorUserId); - if (!membership) return 'workspace_not_found'; - - const { rowCount: caseCount } = await this.pool.query( - `SELECT 1 - FROM cases - WHERE id = $1 AND published_at IS NOT NULL - LIMIT 1`, - [caseId], - ); - if ((caseCount ?? 0) === 0) return 'case_not_found'; - - const { rowCount } = await this.pool.query( - `INSERT INTO team_workspace_cases (workspace_id, case_id, shared_by_user_id) - VALUES ($1, $2, $3) - ON CONFLICT (workspace_id, case_id) DO NOTHING`, - [membership.workspaceId, caseId, actorUserId], - ); - return { - status: (rowCount ?? 0) > 0 ? 'added' : 'exists', - workspace: (await this.buildWorkspaceForUser(actorUserId))!, - }; - } - - private async findMembership(userId: string): Promise { - const { rows } = await this.pool.query( - `SELECT m.workspace_id, m.role, m.joined_at, w.name, w.created_at, w.owner_user_id - FROM team_workspace_members m - JOIN team_workspaces w ON w.id = m.workspace_id - WHERE m.user_id = $1 - LIMIT 1`, - [userId], - ); - if (!rows[0]) return null; - return { - workspaceId: rows[0].workspace_id, - role: rows[0].role, - joinedAt: toIso(rows[0].joined_at), - }; - } - - private async getPendingInvitesForEmail(email: string): Promise { - const { rows } = await this.pool.query( - `SELECT - i.id, - i.workspace_id, - w.name AS workspace_name, - i.email, - i.role, - i.status, - i.created_at, - i.accepted_at, - i.revoked_reason, - i.revoked_at - FROM team_workspace_invites i - JOIN team_workspaces w ON w.id = i.workspace_id - WHERE lower(i.email) = lower($1) - AND i.status = 'pending' - ORDER BY i.created_at DESC`, - [email], - ); - return rows.map(rowToInvite); - } - - private async reconcilePendingInvitesForEmail(email: string): Promise { - const { rows } = await this.pool.query<{ workspace_id: string }>( - `SELECT DISTINCT workspace_id - FROM team_workspace_invites - WHERE lower(email) = lower($1) - AND status = 'pending'`, - [email], - ); - for (const row of rows) { - await this.reconcileWorkspaceBillingState(row.workspace_id); - } - } - - private async getRecentBillingEvents(workspaceId?: string): Promise { - const query = workspaceId - ? `SELECT - e.id, - e.workspace_id, - w.name AS workspace_name, - e.event_type, - e.severity, - e.title, - e.detail, - e.event_count, - e.created_at - FROM team_workspace_billing_events e - JOIN team_workspaces w ON w.id = e.workspace_id - WHERE e.workspace_id = $1 - ORDER BY e.created_at DESC - LIMIT 6` - : `SELECT - e.id, - e.workspace_id, - w.name AS workspace_name, - e.event_type, - e.severity, - e.title, - e.detail, - e.event_count, - e.created_at - FROM team_workspace_billing_events e - JOIN team_workspaces w ON w.id = e.workspace_id - ORDER BY e.created_at DESC - LIMIT 8`; - const { rows } = await this.pool.query( - query, - workspaceId ? [workspaceId] : [], - ); - return rows.map(rowToBillingEvent); - } - - private async getStoredBillingState( - workspaceId: string, - ): Promise { - const { rows } = await this.pool.query( - `SELECT - seat_limit, - billing_status, - cancel_at_period_end, - reserved_seats, - fallback_member_count - FROM team_workspace_billing_states - WHERE workspace_id = $1 - LIMIT 1`, - [workspaceId], - ); - const row = rows[0]; - if (!row) return null; - return { - seatLimit: row.seat_limit, - billingStatus: row.billing_status, - cancelAtPeriodEnd: row.cancel_at_period_end, - reservedSeats: row.reserved_seats, - fallbackMemberCount: row.fallback_member_count, - }; - } - - private async persistBillingState(workspaceId: string, snapshot: WorkspaceBillingSnapshot) { - await this.pool.query( - `INSERT INTO team_workspace_billing_states ( - workspace_id, - seat_limit, - billing_status, - cancel_at_period_end, - reserved_seats, - fallback_member_count, - updated_at - ) - VALUES ($1, $2, $3, $4, $5, $6, NOW()) - ON CONFLICT (workspace_id) - DO UPDATE SET - seat_limit = EXCLUDED.seat_limit, - billing_status = EXCLUDED.billing_status, - cancel_at_period_end = EXCLUDED.cancel_at_period_end, - reserved_seats = EXCLUDED.reserved_seats, - fallback_member_count = EXCLUDED.fallback_member_count, - updated_at = NOW()`, - [ - workspaceId, - snapshot.seatLimit, - snapshot.billingStatus, - snapshot.cancelAtPeriodEnd, - snapshot.reservedSeats, - snapshot.fallbackMemberCount, - ], - ); - } - - private async recordBillingEvents( - workspaceId: string, - descriptors: WorkspaceBillingEventDescriptor[], - ) { - for (const descriptor of descriptors) { - await this.pool.query( - `INSERT INTO team_workspace_billing_events ( - workspace_id, - event_type, - severity, - title, - detail, - event_count - ) - VALUES ($1, $2, $3, $4, $5, $6)`, - [ - workspaceId, - descriptor.type, - descriptor.severity, - descriptor.title, - descriptor.detail, - descriptor.count, - ], - ); - } - } - - private async getRecentRecoveryOutreach( - workspaceId?: string, - audience?: TeamWorkspaceRecoveryOutreachAudience, - ): Promise { - const clauses: string[] = []; - const values: Array = []; - if (workspaceId) { - values.push(workspaceId); - clauses.push(`o.workspace_id = $${values.length}`); - } - if (audience) { - values.push(audience); - clauses.push(`o.audience = $${values.length}`); - } - const where = clauses.length > 0 ? `WHERE ${clauses.join(' AND ')}` : ''; - const limit = workspaceId ? 6 : 8; - const { rows } = await this.pool.query( - `SELECT - o.id, - o.workspace_id, - w.name AS workspace_name, - o.audience, - o.channel, - o.status, - o.title, - o.detail, - o.action_code, - o.attempt_count, - o.created_at, - o.last_attempt_at, - o.next_attempt_at, - o.email_attempt_count, - o.last_email_attempt_at, - o.next_email_attempt_at, - o.last_email_delivered_at, - o.last_email_message_id, - o.last_email_error, - o.export_count, - o.last_exported_at, - o.crm_sync_count, - o.last_crm_sync_attempt_at, - o.next_crm_sync_attempt_at, - o.last_crm_synced_at, - o.crm_external_record_id, - o.last_crm_sync_status_code, - o.last_crm_sync_error, - o.webhook_attempt_count, - o.last_webhook_attempt_at, - o.next_webhook_attempt_at, - o.webhook_exhausted_at, - o.webhook_delivery_count, - o.last_webhook_delivered_at, - o.last_webhook_status_code, - o.last_webhook_error, - o.slack_alert_count, - o.last_slack_alert_attempt_at, - o.last_slack_alerted_at, - o.last_slack_alert_status_code, - o.last_slack_alert_error, - o.handoff_channel, - o.handoff_note, - o.handoff_at, - o.resolved_at - FROM team_workspace_recovery_outreach_events o - JOIN team_workspaces w ON w.id = o.workspace_id - ${where} - ORDER BY o.created_at DESC - LIMIT ${limit}`, - values, - ); - return rows.map(rowToRecoveryOutreach); - } - - private async getLatestRecoveryOutreachByWorkspaceIds( - workspaceIds: string[], - ): Promise> { - if (workspaceIds.length === 0) return new Map(); - const { rows } = await this.pool.query( - `SELECT DISTINCT ON (o.workspace_id) - o.id, - o.workspace_id, - w.name AS workspace_name, - o.audience, - o.channel, - o.status, - o.title, - o.detail, - o.action_code, - o.attempt_count, - o.created_at, - o.last_attempt_at, - o.next_attempt_at, - o.email_attempt_count, - o.last_email_attempt_at, - o.next_email_attempt_at, - o.last_email_delivered_at, - o.last_email_message_id, - o.last_email_error, - o.export_count, - o.last_exported_at, - o.crm_sync_count, - o.last_crm_sync_attempt_at, - o.next_crm_sync_attempt_at, - o.last_crm_synced_at, - o.crm_external_record_id, - o.last_crm_sync_status_code, - o.last_crm_sync_error, - o.webhook_attempt_count, - o.last_webhook_attempt_at, - o.next_webhook_attempt_at, - o.webhook_exhausted_at, - o.webhook_delivery_count, - o.last_webhook_delivered_at, - o.last_webhook_status_code, - o.last_webhook_error, - o.slack_alert_count, - o.last_slack_alert_attempt_at, - o.last_slack_alerted_at, - o.last_slack_alert_status_code, - o.last_slack_alert_error, - o.handoff_channel, - o.handoff_note, - o.handoff_at, - o.resolved_at - FROM team_workspace_recovery_outreach_events o - JOIN team_workspaces w ON w.id = o.workspace_id - WHERE o.workspace_id = ANY($1::uuid[]) - ORDER BY o.workspace_id, o.created_at DESC`, - [workspaceIds], - ); - return new Map(rows.map((row) => [row.workspace_id, rowToRecoveryOutreach(row)])); - } - - private async getRecentMemberRecoveryNotifications( - workspaceId: string, - ): Promise { - const { rows } = await this.pool.query( - `SELECT - n.id, - n.workspace_id, - n.user_id, - u.email, - u.display_name, - n.status, - n.title, - n.detail, - n.email_attempt_count, - n.created_at, - n.last_email_attempt_at, - n.next_email_attempt_at, - n.last_email_delivered_at, - n.last_email_message_id, - n.last_email_error, - n.resolved_at - FROM team_workspace_member_recovery_notifications n - JOIN users u ON u.id = n.user_id - WHERE n.workspace_id = $1 - ORDER BY n.created_at DESC - LIMIT 6`, - [workspaceId], - ); - return rows.map(rowToMemberRecoveryNotification); - } - - private async syncPendingMemberRecoveryNotifications( - workspaceId: string, - _workspaceName: string, - members: Array<{ userId: string; email: string; displayName: string | null }>, - descriptor: WorkspaceMemberRecoveryNotificationDescriptor | null, - ): Promise { - if (!descriptor || members.length === 0) { - await this.pool.query( - `UPDATE team_workspace_member_recovery_notifications - SET status = 'resolved', - next_email_attempt_at = NULL, - resolved_at = NOW() - WHERE workspace_id = $1 - AND status = 'pending'`, - [workspaceId], - ); - return; - } - await this.pool.query( - `UPDATE team_workspace_member_recovery_notifications - SET status = 'resolved', - next_email_attempt_at = NULL, - resolved_at = NOW() - WHERE workspace_id = $1 - AND status = 'pending' - AND user_id <> ALL($2::uuid[])`, - [workspaceId, members.map((member) => member.userId)], - ); - for (const member of members) { - const updated = await this.pool.query( - `UPDATE team_workspace_member_recovery_notifications - SET email = $3, - display_name = $4, - title = $5, - detail = $6 - WHERE workspace_id = $1 - AND user_id = $2 - AND status = 'pending'`, - [ - workspaceId, - member.userId, - member.email, - member.displayName, - descriptor.title, - descriptor.detail, - ], - ); - if ((updated.rowCount ?? 0) > 0) continue; - await this.pool.query( - `INSERT INTO team_workspace_member_recovery_notifications ( - workspace_id, - user_id, - email, - display_name, - status, - title, - detail, - email_attempt_count, - next_email_attempt_at - ) - VALUES ($1, $2, $3, $4, 'pending', $5, $6, 0, NOW())`, - [ - workspaceId, - member.userId, - member.email, - member.displayName, - descriptor.title, - descriptor.detail, - ], - ); - } - } - - private async ensurePendingRecoveryOutreach( - workspaceId: string, - descriptor: WorkspaceRecoveryOutreachDescriptor | null, - retryIntervalHours: number, - ): Promise { - if (!descriptor) return 0; - const { rowCount } = await this.pool.query( - `INSERT INTO team_workspace_recovery_outreach_events ( - workspace_id, - audience, - channel, - status, - title, - detail, - action_code, - attempt_count, - last_attempt_at, - next_attempt_at, - email_attempt_count, - last_email_attempt_at, - next_email_attempt_at, - last_email_delivered_at, - last_email_message_id, - last_email_error, - export_count, - last_exported_at, - crm_sync_count, - last_crm_sync_attempt_at, - next_crm_sync_attempt_at, - last_crm_synced_at, - crm_external_record_id, - last_crm_sync_status_code, - last_crm_sync_error, - webhook_attempt_count, - last_webhook_attempt_at, - next_webhook_attempt_at, - webhook_exhausted_at, - webhook_delivery_count, - last_webhook_delivered_at, - last_webhook_status_code, - last_webhook_error, - slack_alert_count, - last_slack_alert_attempt_at, - last_slack_alerted_at, - last_slack_alert_status_code, - last_slack_alert_error - ) - SELECT - $1, $2, $3, 'pending', $4, $5, $6, 1, NOW(), NOW() + ($7 * INTERVAL '1 hour'), 0, NULL, NOW(), NULL, NULL, NULL, 0, NULL, 0, NULL, NOW(), NULL, NULL, NULL, NULL, 0, NULL, NOW(), NULL, 0, NULL, NULL, NULL, 0, NULL, NULL, NULL, NULL - WHERE NOT EXISTS ( - SELECT 1 - FROM team_workspace_recovery_outreach_events - WHERE workspace_id = $1 - AND audience = $2 - AND ( - status = 'pending' - OR ( - status = 'handed_off' - AND next_attempt_at IS NOT NULL - AND next_attempt_at > NOW() - ) - ) - )`, - [ - workspaceId, - descriptor.audience, - descriptor.channel, - descriptor.title, - descriptor.detail, - descriptor.actionCode, - retryIntervalHours, - ], - ); - return rowCount ?? 0; - } - - private async retryPendingRecoveryOutreach( - workspaceId: string, - descriptor: WorkspaceRecoveryOutreachDescriptor | null, - retryIntervalHours: number, - ): Promise { - if (!descriptor) return 0; - const { rowCount } = await this.pool.query( - `UPDATE team_workspace_recovery_outreach_events - SET channel = $3, - status = 'pending', - title = $4, - detail = $5, - action_code = $6, - attempt_count = attempt_count + 1, - last_attempt_at = NOW(), - next_attempt_at = NOW() + ($7 * INTERVAL '1 hour'), - email_attempt_count = 0, - last_email_attempt_at = NULL, - next_email_attempt_at = NOW(), - last_email_delivered_at = NULL, - last_email_message_id = NULL, - last_email_error = NULL, - export_count = 0, - last_exported_at = NULL, - crm_sync_count = 0, - last_crm_sync_attempt_at = NULL, - next_crm_sync_attempt_at = NOW(), - last_crm_synced_at = NULL, - crm_external_record_id = NULL, - last_crm_sync_status_code = NULL, - last_crm_sync_error = NULL, - webhook_attempt_count = 0, - last_webhook_attempt_at = NULL, - next_webhook_attempt_at = NOW(), - webhook_exhausted_at = NULL, - webhook_delivery_count = 0, - last_webhook_delivered_at = NULL, - last_webhook_status_code = NULL, - last_webhook_error = NULL, - slack_alert_count = 0, - last_slack_alert_attempt_at = NULL, - last_slack_alerted_at = NULL, - last_slack_alert_status_code = NULL, - last_slack_alert_error = NULL, - handoff_channel = NULL, - handoff_note = NULL, - handoff_at = NULL - WHERE workspace_id = $1 - AND audience = $2 - AND status = 'pending' - AND (last_attempt_at + ($7 * INTERVAL '1 hour')) <= NOW()`, - [ - workspaceId, - descriptor.audience, - descriptor.channel, - descriptor.title, - descriptor.detail, - descriptor.actionCode, - retryIntervalHours, - ], - ); - return rowCount ?? 0; - } - - private async resolvePendingRecoveryOutreach( - workspaceId: string, - audience?: TeamWorkspaceRecoveryOutreachAudience, - ): Promise { - const values: Array = [workspaceId]; - let audienceClause = ''; - if (audience) { - values.push(audience); - audienceClause = `AND audience = $${values.length}`; - } - const { rowCount } = await this.pool.query( - `UPDATE team_workspace_recovery_outreach_events - SET status = 'resolved', - next_attempt_at = NULL, - next_email_attempt_at = NULL, - next_webhook_attempt_at = NULL, - webhook_exhausted_at = NULL, - last_slack_alert_error = NULL, - resolved_at = NOW() - WHERE workspace_id = $1 - ${audienceClause} - AND status <> 'resolved'`, - values, - ); - return rowCount ?? 0; - } - - private async reconcileAllWorkspaces(): Promise { - await this.reconcileAllBilling(); - } - - private async reconcileWorkspaceBillingState( - workspaceId: string, - ): Promise { - const [ownerRows, memberCountRows, inviteRows, previousSnapshot] = await Promise.all([ - this.pool.query<{ - subscription: SubscriptionTier; - billing_status: BillingStatus; - cancel_at_period_end: boolean; - }>( - `SELECT u.subscription, u.billing_status, u.cancel_at_period_end - FROM team_workspaces w - JOIN users u ON u.id = w.owner_user_id - WHERE w.id = $1 - LIMIT 1`, - [workspaceId], - ), - this.pool.query<{ count: string }>( - `SELECT COUNT(*)::text AS count - FROM team_workspace_members - WHERE workspace_id = $1`, - [workspaceId], - ), - this.pool.query<{ id: string }>( - `SELECT id - FROM team_workspace_invites - WHERE workspace_id = $1 - AND status = 'pending' - ORDER BY created_at ASC`, - [workspaceId], - ), - this.getStoredBillingState(workspaceId), - ]); - - const owner = ownerRows.rows[0]; - if (!owner) return { revokedInviteCount: 0, restoredInviteCount: 0 }; - const seatLimit = resolveTeamWorkspaceSeatLimit({ - subscription: owner.subscription, - billingStatus: owner.billing_status, - }); - const seatsUsed = Number(memberCountRows.rows[0]?.count ?? 0); - const allowedPendingInvites = Math.max(0, seatLimit - seatsUsed); - const inviteIdsToRevoke = inviteRows.rows.slice(allowedPendingInvites).map((row) => row.id); - const revokeReason: WorkspaceInviteRevocationReason = - seatLimit === 0 ? 'billing_inactive' : 'seat_limit_reduced'; - const revokedInviteCount = - inviteIdsToRevoke.length === 0 - ? 0 - : (( - await this.pool.query( - `UPDATE team_workspace_invites - SET status = 'revoked', - revoked_reason = $2, - revoked_at = NOW(), - accepted_by_user_id = NULL, - accepted_at = NULL - WHERE id = ANY($1::uuid[]) - AND status = 'pending'`, - [inviteIdsToRevoke, revokeReason], - ) - ).rowCount ?? 0); - const remainingPendingInvites = Math.max(0, inviteRows.rows.length - revokedInviteCount); - let restoredInviteCount = 0; - if (seatLimit > 0 && remainingPendingInvites < allowedPendingInvites) { - const recoverableInviteIdsRes = await this.pool.query<{ id: string }>( - `SELECT id - FROM team_workspace_invites - WHERE workspace_id = $1 - AND status = 'revoked' - AND revoked_reason IN ('billing_inactive', 'seat_limit_reduced') - ORDER BY revoked_at ASC NULLS LAST, created_at ASC - LIMIT $2`, - [workspaceId, Math.max(0, allowedPendingInvites - remainingPendingInvites)], - ); - const recoverableInviteIds = recoverableInviteIdsRes.rows.map((row) => row.id); - restoredInviteCount = - recoverableInviteIds.length === 0 - ? 0 - : (( - await this.pool.query( - `UPDATE team_workspace_invites - SET status = 'pending', - revoked_reason = NULL, - revoked_at = NULL, - accepted_by_user_id = NULL, - accepted_at = NULL - WHERE id = ANY($1::uuid[]) - AND status = 'revoked'`, - [recoverableInviteIds], - ) - ).rowCount ?? 0); - } - - const nextSnapshot: WorkspaceBillingSnapshot = { - seatLimit, - billingStatus: owner.billing_status, - cancelAtPeriodEnd: owner.cancel_at_period_end, - reservedSeats: seatsUsed + remainingPendingInvites + restoredInviteCount, - fallbackMemberCount: seatLimit === 0 ? Math.max(0, seatsUsed - 1) : 0, - }; - const descriptors = buildBillingEventDescriptors({ - previous: previousSnapshot, - next: nextSnapshot, - revokedInviteCount, - restoredInviteCount, - }); - await this.persistBillingState(workspaceId, nextSnapshot); - if (descriptors.length > 0) { - await this.recordBillingEvents(workspaceId, descriptors); - } - return { - revokedInviteCount, - restoredInviteCount, - }; - } - - private async getCompensationSummary(workspaceId: string): Promise { - const { rows } = await this.pool.query<{ - revoked_invite_count: string; - }>( - `SELECT COUNT(*)::text AS revoked_invite_count - FROM team_workspace_invites - WHERE workspace_id = $1 - AND status = 'revoked' - AND revoked_reason IN ('billing_inactive', 'seat_limit_reduced')`, - [workspaceId], - ); - return { - revokedInviteCount: Number(rows[0]?.revoked_invite_count ?? 0), - }; - } - - private async buildWorkspaceAccessForUser(user: UserProfile): Promise { - const membership = await this.findMembership(user.id); - if (!membership) return null; - await this.reconcileWorkspaceBillingState(membership.workspaceId); - - const [workspaceRows, ownerRows, memberCountRows, inviteCountRows] = await Promise.all([ - this.pool.query<{ id: string; name: string; owner_user_id: string }>( - `SELECT id, name, owner_user_id - FROM team_workspaces - WHERE id = $1 - LIMIT 1`, - [membership.workspaceId], - ), - this.pool.query<{ - id: string; - email: string; - display_name: string | null; - subscription: SubscriptionTier; - billing_status: BillingStatus; - current_period_end: Date | string | null; - cancel_at_period_end: boolean; - }>( - `SELECT - id, - email, - display_name, - subscription, - billing_status, - current_period_end, - cancel_at_period_end - FROM users - WHERE id = ( - SELECT owner_user_id - FROM team_workspaces - WHERE id = $1 - ) - LIMIT 1`, - [membership.workspaceId], - ), - this.pool.query<{ count: string }>( - `SELECT COUNT(*)::text AS count - FROM team_workspace_members - WHERE workspace_id = $1`, - [membership.workspaceId], - ), - this.pool.query<{ count: string }>( - `SELECT COUNT(*)::text AS count - FROM team_workspace_invites - WHERE workspace_id = $1 - AND status = 'pending'`, - [membership.workspaceId], - ), - ]); - - const workspace = workspaceRows.rows[0]; - const owner = ownerRows.rows[0]; - if (!workspace || !owner) return null; - - return buildWorkspaceAccess({ - user, - context: { - workspaceId: workspace.id, - workspaceName: workspace.name, - role: membership.role, - owner: { - id: owner.id, - email: owner.email, - displayName: owner.display_name, - subscription: owner.subscription, - billingStatus: owner.billing_status, - currentPeriodEnd: owner.current_period_end ? toIso(owner.current_period_end) : null, - cancelAtPeriodEnd: owner.cancel_at_period_end, - }, - seatsUsed: Number(memberCountRows.rows[0]?.count ?? 0), - pendingInviteCount: Number(inviteCountRows.rows[0]?.count ?? 0), - }, - }); - } - - private async buildWorkspaceForUser(userId: string): Promise { - const { rows } = await this.pool.query( - `SELECT m.workspace_id, m.role, m.joined_at, w.name, w.created_at, w.owner_user_id - FROM team_workspace_members m - JOIN team_workspaces w ON w.id = m.workspace_id - WHERE m.user_id = $1 - LIMIT 1`, - [userId], - ); - const membership = rows[0]; - if (!membership) return null; - - const workspaceId = membership.workspace_id; - await this.reconcileWorkspaceBillingState(workspaceId); - const [ - memberRows, - inviteRows, - sharedSavedViewRows, - sharedCaseRows, - ownerRows, - compensation, - recentBillingEvents, - recentRecoveryOutreach, - recentMemberRecoveryNotifications, - ] = await Promise.all([ - this.pool.query( - `SELECT - u.id AS user_id, - u.email, - u.display_name, - m.role, - m.joined_at - FROM team_workspace_members m - JOIN users u ON u.id = m.user_id - WHERE m.workspace_id = $1 - ORDER BY - CASE m.role - WHEN 'owner' THEN 0 - WHEN 'admin' THEN 1 - ELSE 2 - END, - m.joined_at ASC`, - [workspaceId], - ), - this.pool.query( - `SELECT - i.id, - i.workspace_id, - w.name AS workspace_name, - i.email, - i.role, - i.status, - i.created_at, - i.accepted_at, - i.revoked_reason, - i.revoked_at - FROM team_workspace_invites i - JOIN team_workspaces w ON w.id = i.workspace_id - WHERE i.workspace_id = $1 - AND i.status = 'pending' - ORDER BY i.created_at DESC`, - [workspaceId], - ), - this.pool.query( - `SELECT - v.id, - v.name, - v.filters, - v.query_string, - v.case_count_snapshot, - v.created_at, - v.updated_at, - s.saved_view_id AS source_saved_view_id, - s.shared_by_user_id, - u.display_name AS shared_by_name, - s.created_at AS shared_at - FROM team_workspace_saved_views s - JOIN user_saved_views v ON v.id = s.saved_view_id - JOIN users u ON u.id = s.shared_by_user_id - WHERE s.workspace_id = $1 - ORDER BY s.created_at DESC`, - [workspaceId], - ), - this.pool.query( - `SELECT - c.id, - c.slug, - c.company_name, - c.industry_key, - c.country_code, - c.closed_year, - c.summary, - c.business_model_key, - c.founded_year, - c.total_funding_usd, - c.primary_failure_reason_key, - tc.shared_by_user_id, - u.display_name AS shared_by_name, - tc.created_at AS shared_at - FROM team_workspace_cases tc - JOIN cases c - ON c.id = tc.case_id - AND c.published_at IS NOT NULL - JOIN users u ON u.id = tc.shared_by_user_id - WHERE tc.workspace_id = $1 - ORDER BY tc.created_at DESC`, - [workspaceId], - ), - this.pool.query<{ - id: string; - email: string; - display_name: string | null; - subscription: UserProfile['subscription']; - billing_status: UserProfile['billingStatus']; - current_period_end: Date | string | null; - cancel_at_period_end: boolean; - }>( - `SELECT - id, - email, - display_name, - subscription, - billing_status, - current_period_end, - cancel_at_period_end - FROM users - WHERE id = $1 - LIMIT 1`, - [membership.owner_user_id], - ), - this.getCompensationSummary(workspaceId), - this.getRecentBillingEvents(workspaceId), - membership.role === 'owner' ? this.getRecentRecoveryOutreach(workspaceId, 'owner') : [], - membership.role === 'owner' ? this.getRecentMemberRecoveryNotifications(workspaceId) : [], - ]); - - const owner = ownerRows.rows[0]; - if (!owner) return null; - - const mappedRecentBillingEvents = recentBillingEvents.map( - ({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event, - ); - - return { - id: workspaceId, - name: membership.name, - role: membership.role, - canManageMembers: membership.role === 'owner' || membership.role === 'admin', - memberCount: memberRows.rows.length, - sharedSavedViewCount: sharedSavedViewRows.rows.length, - sharedCaseCount: sharedCaseRows.rows.length, - createdAt: toIso(membership.created_at), - billing: buildWorkspaceBilling({ - owner: { - id: owner.id, - email: owner.email, - displayName: owner.display_name, - subscription: owner.subscription, - billingStatus: owner.billing_status, - currentPeriodEnd: owner.current_period_end ? toIso(owner.current_period_end) : null, - cancelAtPeriodEnd: owner.cancel_at_period_end, - }, - seatsUsed: memberRows.rows.length, - pendingInviteCount: inviteRows.rows.length, - compensation, - viewerRole: membership.role, - recentBillingEvents: mappedRecentBillingEvents, - }), - recentBillingEvents: mappedRecentBillingEvents, - recentRecoveryOutreach: - membership.role === 'owner' - ? recentRecoveryOutreach.map( - ({ workspaceId: _workspaceId, workspaceName: _workspaceName, ...event }) => event, - ) - : [], - recentMemberRecoveryNotifications, - members: memberRows.rows.map(rowToMember), - invites: inviteRows.rows.map(rowToInvite), - sharedSavedViews: sharedSavedViewRows.rows.map(rowToSharedSavedView), - sharedCases: sharedCaseRows.rows.map(rowToSharedCase), - }; - } -} +/** + * Facade for the team workspaces repository modules. + * Domain code lives in ./teamWorkspaces/*; existing import paths stay stable. + */ +export * from './teamWorkspaces/contract.js'; +export { MockTeamWorkspacesRepository } from './teamWorkspaces/mockRepository.js'; +export { PgTeamWorkspacesRepository } from './teamWorkspaces/pgRepository.js';