init: M1 scaffolding + M2 organization/clients/services CRUD
- monorepo (npm workspaces): apps/api (Fastify+Prisma+TS), apps/web (Vite+React+TS), packages/shared (zod schemas) - SSO via auth.queo.ru: jose+JWKS plugin, requireDocPermission(viewer|user|admin) - DEV_BYPASS_AUTH for local development (hard-checked off in production) - M2: organization upsert, clients CRUD with search, services catalog with soft-delete - BigInt -> Number serializer for Prisma money columns - Embedded Postgres + npm run dev:demo for one-command local boot - Docker compose for queoserver: postgres + api + web (nginx as ingress proxying /api -> api:3030) - First migration 0_init committed (prisma migrate diff) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
admin
@@ -0,0 +1,12 @@
|
|||||||
|
root = true
|
||||||
|
|
||||||
|
[*]
|
||||||
|
charset = utf-8
|
||||||
|
end_of_line = lf
|
||||||
|
indent_style = space
|
||||||
|
indent_size = 2
|
||||||
|
insert_final_newline = true
|
||||||
|
trim_trailing_whitespace = true
|
||||||
|
|
||||||
|
[*.md]
|
||||||
|
trim_trailing_whitespace = false
|
||||||
+40
@@ -0,0 +1,40 @@
|
|||||||
|
node_modules/
|
||||||
|
dist/
|
||||||
|
build/
|
||||||
|
.next/
|
||||||
|
.cache/
|
||||||
|
.turbo/
|
||||||
|
coverage/
|
||||||
|
|
||||||
|
# env
|
||||||
|
.env
|
||||||
|
.env.local
|
||||||
|
.env.*.local
|
||||||
|
!.env.example
|
||||||
|
|
||||||
|
# logs
|
||||||
|
*.log
|
||||||
|
npm-debug.log*
|
||||||
|
yarn-debug.log*
|
||||||
|
pnpm-debug.log*
|
||||||
|
|
||||||
|
# editors
|
||||||
|
.vscode/
|
||||||
|
.idea/
|
||||||
|
.DS_Store
|
||||||
|
Thumbs.db
|
||||||
|
|
||||||
|
# prisma generated
|
||||||
|
apps/api/prisma/migrations/dev.db*
|
||||||
|
|
||||||
|
# generated PDFs/uploads
|
||||||
|
storage/
|
||||||
|
data/
|
||||||
|
|
||||||
|
|
||||||
|
# OS
|
||||||
|
*.swp
|
||||||
|
*.swo
|
||||||
|
|
||||||
|
# Claude Code local
|
||||||
|
.claude/settings.local.json
|
||||||
@@ -0,0 +1,106 @@
|
|||||||
|
# Doc_manager
|
||||||
|
|
||||||
|
Сервис создания договоров, счетов и актов/УПД с интеграцией банка Точка. Часть экосистемы Queo.
|
||||||
|
|
||||||
|
## Стек
|
||||||
|
|
||||||
|
- **Backend** — Node.js 20+ / Fastify / Prisma / PostgreSQL (TypeScript, ESM).
|
||||||
|
- **Frontend** — React + Vite + TipTap (TypeScript).
|
||||||
|
- **Auth** — SSO через `auth.queo.ru` (RS256 JWT в cookie `q_at`, JWKS-валидация).
|
||||||
|
- **Bank** — Точка API: счета и акты/УПД создаются на стороне банка, договоры — наши.
|
||||||
|
|
||||||
|
## Структура
|
||||||
|
|
||||||
|
```
|
||||||
|
apps/
|
||||||
|
api/ # Fastify + Prisma
|
||||||
|
web/ # React + Vite
|
||||||
|
packages/
|
||||||
|
shared/ # zod-схемы и типы (DocBody, Tochka DTOs)
|
||||||
|
docker/
|
||||||
|
docker-compose.yml
|
||||||
|
Caddyfile
|
||||||
|
```
|
||||||
|
|
||||||
|
## Подготовка перед разработкой
|
||||||
|
|
||||||
|
1. **Node.js ≥ 20** — установлен.
|
||||||
|
2. **PostgreSQL** — локально или через Docker (`docker compose up postgres`).
|
||||||
|
3. **Auth_server** должен принимать редиректы на `doc.queo.ru` — добавить в `C:\project\Auth_server\.env`:
|
||||||
|
```
|
||||||
|
ALLOWED_RETURN_TO_HOSTS=auth.queo.ru,hall.queo.ru,cloud.queo.ru,doc.queo.ru
|
||||||
|
```
|
||||||
|
|
||||||
|
## Быстрый старт «пощупать прямо сейчас»
|
||||||
|
|
||||||
|
Нет Postgres / Docker / доступа к auth.queo.ru — всё равно работает:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
npm install
|
||||||
|
npm run dev:demo
|
||||||
|
```
|
||||||
|
|
||||||
|
Что делает `dev:demo`:
|
||||||
|
- Запускает встроенный Postgres из `node_modules` (первый раз скачает ~80MB binaries в `data/embedded-pg/`).
|
||||||
|
- Накатывает схему через `prisma db push`.
|
||||||
|
- Сидит организацию `DEFAULT_ORGANIZATION_ID`.
|
||||||
|
- Поднимает API на `:3030` и web на `:5173` параллельно.
|
||||||
|
- В API включает `DEV_BYPASS_AUTH=1` — фейковый admin без auth.queo.ru.
|
||||||
|
|
||||||
|
Открыть `http://localhost:5173/` — попадаешь сразу в шелл (без логина), можно ходить:
|
||||||
|
- `/organization` — реквизиты компании,
|
||||||
|
- `/clients` — клиенты,
|
||||||
|
- `/services` — каталог услуг,
|
||||||
|
- остальное — заглушки до M3+.
|
||||||
|
|
||||||
|
Данные между перезапусками **сохраняются** в `data/embedded-pg/`. Чтобы начать с нуля — удалить эту папку.
|
||||||
|
|
||||||
|
⚠️ **Безопасность:** `DEV_BYPASS_AUTH=1` обходит JWT. API hard-checks: при `NODE_ENV=production` с этим флагом процесс отказывается стартовать.
|
||||||
|
|
||||||
|
## Полная установка (с реальным auth.queo.ru)
|
||||||
|
|
||||||
|
```bash
|
||||||
|
npm install
|
||||||
|
cp apps/api/.env.example apps/api/.env
|
||||||
|
# отредактировать DATABASE_URL, оставить DEV_BYPASS_AUTH=0
|
||||||
|
npm run prisma:migrate
|
||||||
|
npm run -w @doc-manager/api prisma:seed
|
||||||
|
npm run dev # api+web с настоящей SSO-авторизацией
|
||||||
|
```
|
||||||
|
|
||||||
|
API на `http://localhost:3030`, web — на `http://localhost:5173`. Перед этим добавить `doc.queo.ru` в `ALLOWED_RETURN_TO_HOSTS` в `C:\project\Auth_server\.env`.
|
||||||
|
|
||||||
|
## Тесты M1 (smoke)
|
||||||
|
|
||||||
|
- `GET http://localhost:3030/health` → `{ ok: true }`
|
||||||
|
- Открыть `http://localhost:5173` без cookie `q_at` → редирект на `https://auth.queo.ru/auth/login?return_to=...`.
|
||||||
|
- С валидной cookie от auth.queo.ru — `/api/me` отдаёт payload JWT.
|
||||||
|
|
||||||
|
## Тесты M2 (организация, клиенты, услуги)
|
||||||
|
|
||||||
|
С Postgres и применённой миграцией:
|
||||||
|
|
||||||
|
1. Поднять БД и применить миграцию:
|
||||||
|
```bash
|
||||||
|
docker compose -f docker/docker-compose.yml up -d postgres
|
||||||
|
npm run prisma:migrate # создаст первую миграцию
|
||||||
|
npm run -w @doc-manager/api prisma:seed # сидит DEFAULT_ORGANIZATION_ID
|
||||||
|
```
|
||||||
|
2. `GET /api/organization` → возвращает запись организации (после сида).
|
||||||
|
3. `GET /api/clients?q=...` — поиск по name/inn/email.
|
||||||
|
4. `GET /api/services?includeArchived=1` — каталог + архив.
|
||||||
|
5. В UI: `/organization` — заполнить реквизиты; `/clients` — добавить клиента; `/services` — добавить услугу с ценой и НДС.
|
||||||
|
|
||||||
|
SQL-предпросмотр миграции без БД: `apps/api/prisma/init.sql.preview` (генерируется через `prisma migrate diff`).
|
||||||
|
|
||||||
|
## План реализации
|
||||||
|
|
||||||
|
См. `C:\Users\VVMedia\.claude\plans\floofy-baking-jellyfish.md`. Этапы M1–M7.
|
||||||
|
|
||||||
|
## Деплой (домашний сервер)
|
||||||
|
|
||||||
|
```
|
||||||
|
ssh -i ~/.ssh/id_sat vmv@192.168.0.158
|
||||||
|
cd ~/Doc-manager
|
||||||
|
git pull && docker compose build && docker compose up -d
|
||||||
|
```
|
||||||
@@ -0,0 +1,36 @@
|
|||||||
|
# --- API server ---
|
||||||
|
NODE_ENV=development
|
||||||
|
PORT=3030
|
||||||
|
HOST=127.0.0.1
|
||||||
|
|
||||||
|
# --- Database ---
|
||||||
|
DATABASE_URL=postgresql://docmanager:docmanager@localhost:5432/docmanager?schema=public
|
||||||
|
|
||||||
|
# --- SSO via auth.queo.ru ---
|
||||||
|
AUTH_ISSUER=https://auth.queo.ru
|
||||||
|
AUTH_AUDIENCE=queo.ru
|
||||||
|
AUTH_JWKS_URL=https://auth.queo.ru/.well-known/jwks.json
|
||||||
|
AUTH_COOKIE_NAME=q_at
|
||||||
|
AUTH_LOGIN_URL=https://auth.queo.ru/auth/login
|
||||||
|
|
||||||
|
# --- CORS ---
|
||||||
|
# Допустимые источники для браузера (запятая). На проде: https://doc.queo.ru
|
||||||
|
CORS_ORIGINS=http://localhost:5173
|
||||||
|
|
||||||
|
# --- Tochka API ---
|
||||||
|
# 32 случайных байта в base64 — ключ AES-256-GCM для шифрования JWT-токенов Точки в БД.
|
||||||
|
# Генерация: node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
|
||||||
|
TOCHKA_JWT_KEY=
|
||||||
|
|
||||||
|
# --- Webhook secret для Точки ---
|
||||||
|
# Случайная строка, попадает в URL: /webhooks/tochka/<TOCHKA_WEBHOOK_SECRET>
|
||||||
|
TOCHKA_WEBHOOK_SECRET=
|
||||||
|
|
||||||
|
# --- Default organization (single-tenant v1) ---
|
||||||
|
# UUID единственной организации — сидится в M2.
|
||||||
|
DEFAULT_ORGANIZATION_ID=00000000-0000-0000-0000-000000000001
|
||||||
|
|
||||||
|
# --- Dev-only ---
|
||||||
|
# Если 1 — пропускает проверку JWT и подсовывает фейкового admin'а.
|
||||||
|
# В production отказывается стартовать с этой переменной.
|
||||||
|
DEV_BYPASS_AUTH=0
|
||||||
@@ -0,0 +1,37 @@
|
|||||||
|
{
|
||||||
|
"name": "@doc-manager/api",
|
||||||
|
"version": "0.0.0",
|
||||||
|
"private": true,
|
||||||
|
"type": "module",
|
||||||
|
"main": "dist/server.js",
|
||||||
|
"scripts": {
|
||||||
|
"dev": "tsx watch src/server.ts",
|
||||||
|
"build": "tsc -p tsconfig.json",
|
||||||
|
"start": "node dist/server.js",
|
||||||
|
"typecheck": "tsc --noEmit",
|
||||||
|
"prisma:generate": "prisma generate",
|
||||||
|
"prisma:migrate": "prisma migrate dev",
|
||||||
|
"prisma:deploy": "prisma migrate deploy",
|
||||||
|
"prisma:seed": "tsx prisma/seed.ts",
|
||||||
|
"dev:demo": "tsx scripts/dev-server.ts"
|
||||||
|
},
|
||||||
|
"dependencies": {
|
||||||
|
"@doc-manager/shared": "*",
|
||||||
|
"@fastify/cookie": "^9.4.0",
|
||||||
|
"@fastify/cors": "^9.0.1",
|
||||||
|
"@fastify/helmet": "^11.1.1",
|
||||||
|
"@prisma/client": "^5.22.0",
|
||||||
|
"fastify": "^4.28.1",
|
||||||
|
"fastify-plugin": "^4.5.1",
|
||||||
|
"jose": "^5.9.6",
|
||||||
|
"zod": "^3.23.8"
|
||||||
|
},
|
||||||
|
"devDependencies": {
|
||||||
|
"@types/node": "^20.16.0",
|
||||||
|
"embedded-postgres": "^18.3.0-beta.17",
|
||||||
|
"pino-pretty": "^11.3.0",
|
||||||
|
"prisma": "^5.22.0",
|
||||||
|
"tsx": "^4.19.0",
|
||||||
|
"typescript": "^5.6.3"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,279 @@
|
|||||||
|
-- CreateEnum
|
||||||
|
CREATE TYPE "DocType" AS ENUM ('contract', 'invoice', 'act', 'upd');
|
||||||
|
|
||||||
|
-- CreateEnum
|
||||||
|
CREATE TYPE "DocStatus" AS ENUM ('draft', 'issued', 'sent', 'partially_paid', 'paid', 'cancelled', 'signed');
|
||||||
|
|
||||||
|
-- CreateEnum
|
||||||
|
CREATE TYPE "VatRate" AS ENUM ('none', '0', '5', '7', '10', '20');
|
||||||
|
|
||||||
|
-- CreateEnum
|
||||||
|
CREATE TYPE "ClientKind" AS ENUM ('ul', 'ip', 'fl');
|
||||||
|
|
||||||
|
-- CreateEnum
|
||||||
|
CREATE TYPE "TochkaEnv" AS ENUM ('sandbox', 'prod');
|
||||||
|
|
||||||
|
-- CreateEnum
|
||||||
|
CREATE TYPE "PaymentKind" AS ENUM ('incoming', 'incoming_sbp', 'incoming_sbp_b2b', 'outgoing');
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "Organization" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"name" TEXT NOT NULL,
|
||||||
|
"inn" TEXT NOT NULL,
|
||||||
|
"kpp" TEXT,
|
||||||
|
"ogrn" TEXT,
|
||||||
|
"legalAddress" TEXT,
|
||||||
|
"bankName" TEXT,
|
||||||
|
"bankBik" TEXT,
|
||||||
|
"bankAccount" TEXT,
|
||||||
|
"signatoryName" TEXT,
|
||||||
|
"signatoryPosition" TEXT,
|
||||||
|
"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
"updatedAt" TIMESTAMP(3) NOT NULL,
|
||||||
|
|
||||||
|
CONSTRAINT "Organization_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "Client" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"organizationId" UUID NOT NULL,
|
||||||
|
"kind" "ClientKind" NOT NULL,
|
||||||
|
"name" TEXT NOT NULL,
|
||||||
|
"inn" TEXT,
|
||||||
|
"kpp" TEXT,
|
||||||
|
"address" TEXT,
|
||||||
|
"email" TEXT,
|
||||||
|
"phone" TEXT,
|
||||||
|
"contactPerson" TEXT,
|
||||||
|
"requisitesJson" JSONB,
|
||||||
|
"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
"updatedAt" TIMESTAMP(3) NOT NULL,
|
||||||
|
|
||||||
|
CONSTRAINT "Client_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "ServiceCatalog" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"organizationId" UUID NOT NULL,
|
||||||
|
"name" TEXT NOT NULL,
|
||||||
|
"unit" TEXT NOT NULL,
|
||||||
|
"defaultPriceCents" BIGINT NOT NULL DEFAULT 0,
|
||||||
|
"defaultVat" "VatRate" NOT NULL DEFAULT 'none',
|
||||||
|
"notes" TEXT,
|
||||||
|
"archivedAt" TIMESTAMP(3),
|
||||||
|
"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
"updatedAt" TIMESTAMP(3) NOT NULL,
|
||||||
|
|
||||||
|
CONSTRAINT "ServiceCatalog_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "DocumentTemplate" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"organizationId" UUID NOT NULL,
|
||||||
|
"docType" "DocType" NOT NULL,
|
||||||
|
"name" TEXT NOT NULL,
|
||||||
|
"body" JSONB NOT NULL,
|
||||||
|
"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
"updatedAt" TIMESTAMP(3) NOT NULL,
|
||||||
|
|
||||||
|
CONSTRAINT "DocumentTemplate_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "Document" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"organizationId" UUID NOT NULL,
|
||||||
|
"docType" "DocType" NOT NULL,
|
||||||
|
"number" TEXT NOT NULL,
|
||||||
|
"issuedAt" TIMESTAMP(3),
|
||||||
|
"status" "DocStatus" NOT NULL DEFAULT 'draft',
|
||||||
|
"clientId" UUID,
|
||||||
|
"parentDocumentId" UUID,
|
||||||
|
"body" JSONB NOT NULL,
|
||||||
|
"totalCents" BIGINT NOT NULL DEFAULT 0,
|
||||||
|
"vatCents" BIGINT NOT NULL DEFAULT 0,
|
||||||
|
"currency" TEXT NOT NULL DEFAULT 'RUB',
|
||||||
|
"tochkaDocumentId" TEXT,
|
||||||
|
"tochkaEnvironment" "TochkaEnv",
|
||||||
|
"pdfPath" TEXT,
|
||||||
|
"createdBy" TEXT,
|
||||||
|
"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
"updatedAt" TIMESTAMP(3) NOT NULL,
|
||||||
|
|
||||||
|
CONSTRAINT "Document_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "DocumentLine" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"documentId" UUID NOT NULL,
|
||||||
|
"position" INTEGER NOT NULL,
|
||||||
|
"serviceId" UUID,
|
||||||
|
"name" TEXT NOT NULL,
|
||||||
|
"qtyMilli" BIGINT NOT NULL DEFAULT 1000,
|
||||||
|
"unit" TEXT NOT NULL,
|
||||||
|
"priceCents" BIGINT NOT NULL,
|
||||||
|
"vat" "VatRate" NOT NULL DEFAULT 'none',
|
||||||
|
"sumCents" BIGINT NOT NULL,
|
||||||
|
|
||||||
|
CONSTRAINT "DocumentLine_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "Payment" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"organizationId" UUID NOT NULL,
|
||||||
|
"documentId" UUID,
|
||||||
|
"tochkaPaymentId" TEXT NOT NULL,
|
||||||
|
"kind" "PaymentKind" NOT NULL,
|
||||||
|
"amountCents" BIGINT NOT NULL,
|
||||||
|
"payerInn" TEXT,
|
||||||
|
"payerName" TEXT,
|
||||||
|
"purpose" TEXT,
|
||||||
|
"paidAt" TIMESTAMP(3),
|
||||||
|
"raw" JSONB NOT NULL,
|
||||||
|
"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
|
||||||
|
CONSTRAINT "Payment_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "TochkaCredential" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"organizationId" UUID NOT NULL,
|
||||||
|
"environment" "TochkaEnv" NOT NULL,
|
||||||
|
"jwtEncrypted" TEXT NOT NULL,
|
||||||
|
"customerCode" TEXT NOT NULL,
|
||||||
|
"accountCode" TEXT,
|
||||||
|
"expiresAt" TIMESTAMP(3),
|
||||||
|
"createdAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
"updatedAt" TIMESTAMP(3) NOT NULL,
|
||||||
|
|
||||||
|
CONSTRAINT "TochkaCredential_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "WebhookEvent" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"receivedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
"source" TEXT NOT NULL,
|
||||||
|
"eventType" TEXT NOT NULL,
|
||||||
|
"raw" JSONB NOT NULL,
|
||||||
|
"processedAt" TIMESTAMP(3),
|
||||||
|
"error" TEXT,
|
||||||
|
"dedupeKey" TEXT NOT NULL,
|
||||||
|
|
||||||
|
CONSTRAINT "WebhookEvent_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateTable
|
||||||
|
CREATE TABLE "AuditLog" (
|
||||||
|
"id" UUID NOT NULL,
|
||||||
|
"organizationId" UUID NOT NULL,
|
||||||
|
"actorSub" TEXT,
|
||||||
|
"action" TEXT NOT NULL,
|
||||||
|
"entity" TEXT NOT NULL,
|
||||||
|
"entityId" TEXT NOT NULL,
|
||||||
|
"diff" JSONB,
|
||||||
|
"at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||||||
|
|
||||||
|
CONSTRAINT "AuditLog_pkey" PRIMARY KEY ("id")
|
||||||
|
);
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "Client_organizationId_idx" ON "Client"("organizationId");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "Client_organizationId_name_idx" ON "Client"("organizationId", "name");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "ServiceCatalog_organizationId_idx" ON "ServiceCatalog"("organizationId");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "ServiceCatalog_organizationId_archivedAt_idx" ON "ServiceCatalog"("organizationId", "archivedAt");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "DocumentTemplate_organizationId_docType_idx" ON "DocumentTemplate"("organizationId", "docType");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "Document_organizationId_clientId_issuedAt_idx" ON "Document"("organizationId", "clientId", "issuedAt" DESC);
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "Document_organizationId_status_idx" ON "Document"("organizationId", "status");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "Document_tochkaDocumentId_idx" ON "Document"("tochkaDocumentId");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE UNIQUE INDEX "Document_organizationId_docType_number_key" ON "Document"("organizationId", "docType", "number");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "DocumentLine_documentId_idx" ON "DocumentLine"("documentId");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "DocumentLine_serviceId_idx" ON "DocumentLine"("serviceId");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE UNIQUE INDEX "Payment_tochkaPaymentId_key" ON "Payment"("tochkaPaymentId");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "Payment_organizationId_paidAt_idx" ON "Payment"("organizationId", "paidAt" DESC);
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "Payment_documentId_idx" ON "Payment"("documentId");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE UNIQUE INDEX "TochkaCredential_organizationId_environment_key" ON "TochkaCredential"("organizationId", "environment");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE UNIQUE INDEX "WebhookEvent_dedupeKey_key" ON "WebhookEvent"("dedupeKey");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "WebhookEvent_source_eventType_receivedAt_idx" ON "WebhookEvent"("source", "eventType", "receivedAt");
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "AuditLog_organizationId_at_idx" ON "AuditLog"("organizationId", "at" DESC);
|
||||||
|
|
||||||
|
-- CreateIndex
|
||||||
|
CREATE INDEX "AuditLog_entity_entityId_idx" ON "AuditLog"("entity", "entityId");
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "Client" ADD CONSTRAINT "Client_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "ServiceCatalog" ADD CONSTRAINT "ServiceCatalog_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "DocumentTemplate" ADD CONSTRAINT "DocumentTemplate_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "Document" ADD CONSTRAINT "Document_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "Document" ADD CONSTRAINT "Document_clientId_fkey" FOREIGN KEY ("clientId") REFERENCES "Client"("id") ON DELETE SET NULL ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "Document" ADD CONSTRAINT "Document_parentDocumentId_fkey" FOREIGN KEY ("parentDocumentId") REFERENCES "Document"("id") ON DELETE SET NULL ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "DocumentLine" ADD CONSTRAINT "DocumentLine_documentId_fkey" FOREIGN KEY ("documentId") REFERENCES "Document"("id") ON DELETE CASCADE ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "DocumentLine" ADD CONSTRAINT "DocumentLine_serviceId_fkey" FOREIGN KEY ("serviceId") REFERENCES "ServiceCatalog"("id") ON DELETE SET NULL ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "Payment" ADD CONSTRAINT "Payment_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "Payment" ADD CONSTRAINT "Payment_documentId_fkey" FOREIGN KEY ("documentId") REFERENCES "Document"("id") ON DELETE SET NULL ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "TochkaCredential" ADD CONSTRAINT "TochkaCredential_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||||
|
|
||||||
|
-- AddForeignKey
|
||||||
|
ALTER TABLE "AuditLog" ADD CONSTRAINT "AuditLog_organizationId_fkey" FOREIGN KEY ("organizationId") REFERENCES "Organization"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
|
||||||
|
|
||||||
@@ -0,0 +1,3 @@
|
|||||||
|
# Please do not edit this file manually
|
||||||
|
# It should be added in your version-control system (e.g., Git)
|
||||||
|
provider = "postgresql"
|
||||||
@@ -0,0 +1,250 @@
|
|||||||
|
// Doc_manager — модель данных
|
||||||
|
// Полиморфная таблица documents для contract/invoice/act/upd.
|
||||||
|
// organization_id присутствует на всех owner-scoped таблицах (single-tenant v1, готово к multi-tenant).
|
||||||
|
|
||||||
|
generator client {
|
||||||
|
provider = "prisma-client-js"
|
||||||
|
}
|
||||||
|
|
||||||
|
datasource db {
|
||||||
|
provider = "postgresql"
|
||||||
|
url = env("DATABASE_URL")
|
||||||
|
}
|
||||||
|
|
||||||
|
enum DocType {
|
||||||
|
contract
|
||||||
|
invoice
|
||||||
|
act
|
||||||
|
upd
|
||||||
|
}
|
||||||
|
|
||||||
|
enum DocStatus {
|
||||||
|
draft
|
||||||
|
issued
|
||||||
|
sent
|
||||||
|
partially_paid
|
||||||
|
paid
|
||||||
|
cancelled
|
||||||
|
signed
|
||||||
|
}
|
||||||
|
|
||||||
|
enum VatRate {
|
||||||
|
none
|
||||||
|
vat_0 @map("0")
|
||||||
|
vat_5 @map("5")
|
||||||
|
vat_7 @map("7")
|
||||||
|
vat_10 @map("10")
|
||||||
|
vat_20 @map("20")
|
||||||
|
}
|
||||||
|
|
||||||
|
enum ClientKind {
|
||||||
|
ul // юр.лицо
|
||||||
|
ip // ИП
|
||||||
|
fl // физ.лицо
|
||||||
|
}
|
||||||
|
|
||||||
|
enum TochkaEnv {
|
||||||
|
sandbox
|
||||||
|
prod
|
||||||
|
}
|
||||||
|
|
||||||
|
enum PaymentKind {
|
||||||
|
incoming
|
||||||
|
incoming_sbp
|
||||||
|
incoming_sbp_b2b
|
||||||
|
outgoing
|
||||||
|
}
|
||||||
|
|
||||||
|
model Organization {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
name String
|
||||||
|
inn String
|
||||||
|
kpp String?
|
||||||
|
ogrn String?
|
||||||
|
legalAddress String?
|
||||||
|
bankName String?
|
||||||
|
bankBik String?
|
||||||
|
bankAccount String?
|
||||||
|
signatoryName String?
|
||||||
|
signatoryPosition String?
|
||||||
|
createdAt DateTime @default(now())
|
||||||
|
updatedAt DateTime @updatedAt
|
||||||
|
|
||||||
|
clients Client[]
|
||||||
|
servicesCatalog ServiceCatalog[]
|
||||||
|
templates DocumentTemplate[]
|
||||||
|
documents Document[]
|
||||||
|
payments Payment[]
|
||||||
|
tochkaCredentials TochkaCredential[]
|
||||||
|
auditLog AuditLog[]
|
||||||
|
}
|
||||||
|
|
||||||
|
model Client {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
organizationId String @db.Uuid
|
||||||
|
organization Organization @relation(fields: [organizationId], references: [id])
|
||||||
|
kind ClientKind
|
||||||
|
name String
|
||||||
|
inn String?
|
||||||
|
kpp String?
|
||||||
|
address String?
|
||||||
|
email String?
|
||||||
|
phone String?
|
||||||
|
contactPerson String?
|
||||||
|
requisitesJson Json?
|
||||||
|
createdAt DateTime @default(now())
|
||||||
|
updatedAt DateTime @updatedAt
|
||||||
|
|
||||||
|
documents Document[]
|
||||||
|
|
||||||
|
@@index([organizationId])
|
||||||
|
@@index([organizationId, name])
|
||||||
|
}
|
||||||
|
|
||||||
|
model ServiceCatalog {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
organizationId String @db.Uuid
|
||||||
|
organization Organization @relation(fields: [organizationId], references: [id])
|
||||||
|
name String
|
||||||
|
unit String // "шт", "час", "мес"
|
||||||
|
defaultPriceCents BigInt @default(0)
|
||||||
|
defaultVat VatRate @default(none)
|
||||||
|
notes String?
|
||||||
|
archivedAt DateTime?
|
||||||
|
createdAt DateTime @default(now())
|
||||||
|
updatedAt DateTime @updatedAt
|
||||||
|
|
||||||
|
lines DocumentLine[]
|
||||||
|
|
||||||
|
@@index([organizationId])
|
||||||
|
@@index([organizationId, archivedAt])
|
||||||
|
}
|
||||||
|
|
||||||
|
model DocumentTemplate {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
organizationId String @db.Uuid
|
||||||
|
organization Organization @relation(fields: [organizationId], references: [id])
|
||||||
|
docType DocType
|
||||||
|
name String
|
||||||
|
body Json
|
||||||
|
createdAt DateTime @default(now())
|
||||||
|
updatedAt DateTime @updatedAt
|
||||||
|
|
||||||
|
@@index([organizationId, docType])
|
||||||
|
}
|
||||||
|
|
||||||
|
model Document {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
organizationId String @db.Uuid
|
||||||
|
organization Organization @relation(fields: [organizationId], references: [id])
|
||||||
|
docType DocType
|
||||||
|
number String
|
||||||
|
issuedAt DateTime?
|
||||||
|
status DocStatus @default(draft)
|
||||||
|
clientId String? @db.Uuid
|
||||||
|
client Client? @relation(fields: [clientId], references: [id])
|
||||||
|
parentDocumentId String? @db.Uuid
|
||||||
|
parent Document? @relation("DocumentChildren", fields: [parentDocumentId], references: [id])
|
||||||
|
children Document[] @relation("DocumentChildren")
|
||||||
|
body Json
|
||||||
|
totalCents BigInt @default(0)
|
||||||
|
vatCents BigInt @default(0)
|
||||||
|
currency String @default("RUB")
|
||||||
|
tochkaDocumentId String?
|
||||||
|
tochkaEnvironment TochkaEnv?
|
||||||
|
pdfPath String?
|
||||||
|
createdBy String? // sub из JWT auth.queo.ru
|
||||||
|
createdAt DateTime @default(now())
|
||||||
|
updatedAt DateTime @updatedAt
|
||||||
|
|
||||||
|
lines DocumentLine[]
|
||||||
|
payments Payment[]
|
||||||
|
|
||||||
|
@@unique([organizationId, docType, number])
|
||||||
|
@@index([organizationId, clientId, issuedAt(sort: Desc)])
|
||||||
|
@@index([organizationId, status])
|
||||||
|
@@index([tochkaDocumentId])
|
||||||
|
}
|
||||||
|
|
||||||
|
model DocumentLine {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
documentId String @db.Uuid
|
||||||
|
document Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
|
||||||
|
position Int
|
||||||
|
serviceId String? @db.Uuid
|
||||||
|
service ServiceCatalog? @relation(fields: [serviceId], references: [id])
|
||||||
|
name String
|
||||||
|
// Количество хранится как milli-units (тысячные), чтобы поддержать дробные количества без float.
|
||||||
|
qtyMilli BigInt @default(1000)
|
||||||
|
unit String
|
||||||
|
priceCents BigInt
|
||||||
|
vat VatRate @default(none)
|
||||||
|
sumCents BigInt
|
||||||
|
|
||||||
|
@@index([documentId])
|
||||||
|
@@index([serviceId])
|
||||||
|
}
|
||||||
|
|
||||||
|
model Payment {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
organizationId String @db.Uuid
|
||||||
|
organization Organization @relation(fields: [organizationId], references: [id])
|
||||||
|
documentId String? @db.Uuid
|
||||||
|
document Document? @relation(fields: [documentId], references: [id])
|
||||||
|
tochkaPaymentId String @unique
|
||||||
|
kind PaymentKind
|
||||||
|
amountCents BigInt
|
||||||
|
payerInn String?
|
||||||
|
payerName String?
|
||||||
|
purpose String?
|
||||||
|
paidAt DateTime?
|
||||||
|
raw Json
|
||||||
|
createdAt DateTime @default(now())
|
||||||
|
|
||||||
|
@@index([organizationId, paidAt(sort: Desc)])
|
||||||
|
@@index([documentId])
|
||||||
|
}
|
||||||
|
|
||||||
|
model TochkaCredential {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
organizationId String @db.Uuid
|
||||||
|
organization Organization @relation(fields: [organizationId], references: [id])
|
||||||
|
environment TochkaEnv
|
||||||
|
// AES-256-GCM ciphertext (iv|tag|ct), base64
|
||||||
|
jwtEncrypted String
|
||||||
|
customerCode String
|
||||||
|
accountCode String?
|
||||||
|
expiresAt DateTime?
|
||||||
|
createdAt DateTime @default(now())
|
||||||
|
updatedAt DateTime @updatedAt
|
||||||
|
|
||||||
|
@@unique([organizationId, environment])
|
||||||
|
}
|
||||||
|
|
||||||
|
model WebhookEvent {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
receivedAt DateTime @default(now())
|
||||||
|
source String // 'tochka'
|
||||||
|
eventType String
|
||||||
|
raw Json
|
||||||
|
processedAt DateTime?
|
||||||
|
error String?
|
||||||
|
dedupeKey String @unique
|
||||||
|
|
||||||
|
@@index([source, eventType, receivedAt])
|
||||||
|
}
|
||||||
|
|
||||||
|
model AuditLog {
|
||||||
|
id String @id @default(uuid()) @db.Uuid
|
||||||
|
organizationId String @db.Uuid
|
||||||
|
organization Organization @relation(fields: [organizationId], references: [id])
|
||||||
|
actorSub String?
|
||||||
|
action String
|
||||||
|
entity String
|
||||||
|
entityId String
|
||||||
|
diff Json?
|
||||||
|
at DateTime @default(now())
|
||||||
|
|
||||||
|
@@index([organizationId, at(sort: Desc)])
|
||||||
|
@@index([entity, entityId])
|
||||||
|
}
|
||||||
@@ -0,0 +1,32 @@
|
|||||||
|
import { PrismaClient } from '@prisma/client';
|
||||||
|
|
||||||
|
const prisma = new PrismaClient();
|
||||||
|
|
||||||
|
async function main() {
|
||||||
|
const id = process.env.DEFAULT_ORGANIZATION_ID ?? '00000000-0000-0000-0000-000000000001';
|
||||||
|
|
||||||
|
const existing = await prisma.organization.findUnique({ where: { id } });
|
||||||
|
if (existing) {
|
||||||
|
console.log(`organization ${id} already exists — skipping seed`);
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
await prisma.organization.create({
|
||||||
|
data: {
|
||||||
|
id,
|
||||||
|
name: 'ООО «Моя компания»',
|
||||||
|
inn: '0000000000',
|
||||||
|
// Остальные реквизиты пользователь заполнит через UI на странице «Реквизиты».
|
||||||
|
},
|
||||||
|
});
|
||||||
|
console.log(`organization ${id} created (заполните реквизиты в UI: /organization)`);
|
||||||
|
}
|
||||||
|
|
||||||
|
main()
|
||||||
|
.catch((e) => {
|
||||||
|
console.error(e);
|
||||||
|
process.exit(1);
|
||||||
|
})
|
||||||
|
.finally(async () => {
|
||||||
|
await prisma.$disconnect();
|
||||||
|
});
|
||||||
@@ -0,0 +1,129 @@
|
|||||||
|
/**
|
||||||
|
* Dev orchestrator: embedded Postgres → prisma db push → seed → API server.
|
||||||
|
* Запуск: npm run dev:demo (в корне) или tsx scripts/dev-server.ts (в apps/api).
|
||||||
|
*
|
||||||
|
* Использовать ТОЛЬКО для локальной разработки. Защита: процесс выходит,
|
||||||
|
* если NODE_ENV=production или DEV_BYPASS_AUTH не включён (см. ниже).
|
||||||
|
*/
|
||||||
|
import { spawn } from 'node:child_process';
|
||||||
|
import { existsSync, mkdirSync } from 'node:fs';
|
||||||
|
import { dirname, resolve } from 'node:path';
|
||||||
|
import { fileURLToPath } from 'node:url';
|
||||||
|
import EmbeddedPostgres from 'embedded-postgres';
|
||||||
|
|
||||||
|
const __dirname = dirname(fileURLToPath(import.meta.url));
|
||||||
|
const apiRoot = resolve(__dirname, '..');
|
||||||
|
|
||||||
|
const PG_PORT = 5433;
|
||||||
|
const PG_USER = 'postgres';
|
||||||
|
const PG_PASSWORD = 'postgres';
|
||||||
|
const PG_DB = 'docmanager';
|
||||||
|
const PG_DATA = resolve(apiRoot, '../../data/embedded-pg');
|
||||||
|
const DATABASE_URL = `postgresql://${PG_USER}:${PG_PASSWORD}@localhost:${PG_PORT}/${PG_DB}?schema=public`;
|
||||||
|
|
||||||
|
if (process.env.NODE_ENV === 'production') {
|
||||||
|
console.error('FATAL: dev-server.ts запрещён в production');
|
||||||
|
process.exit(1);
|
||||||
|
}
|
||||||
|
|
||||||
|
mkdirSync(dirname(PG_DATA), { recursive: true });
|
||||||
|
|
||||||
|
const pg = new EmbeddedPostgres({
|
||||||
|
databaseDir: PG_DATA,
|
||||||
|
user: PG_USER,
|
||||||
|
password: PG_PASSWORD,
|
||||||
|
port: PG_PORT,
|
||||||
|
persistent: true,
|
||||||
|
});
|
||||||
|
|
||||||
|
async function exec(cmd: string, args: string[], env: NodeJS.ProcessEnv): Promise<void> {
|
||||||
|
return new Promise((res, rej) => {
|
||||||
|
const child = spawn(cmd, args, {
|
||||||
|
stdio: 'inherit',
|
||||||
|
cwd: apiRoot,
|
||||||
|
env: { ...process.env, ...env },
|
||||||
|
shell: process.platform === 'win32',
|
||||||
|
});
|
||||||
|
child.on('exit', (code) => (code === 0 ? res() : rej(new Error(`${cmd} ${args.join(' ')} exited ${code}`))));
|
||||||
|
child.on('error', rej);
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
let serverChild: ReturnType<typeof spawn> | null = null;
|
||||||
|
let stopping = false;
|
||||||
|
|
||||||
|
async function shutdown(reason: string) {
|
||||||
|
if (stopping) return;
|
||||||
|
stopping = true;
|
||||||
|
console.log(`\n[dev-server] shutdown: ${reason}`);
|
||||||
|
try {
|
||||||
|
if (serverChild && !serverChild.killed) {
|
||||||
|
serverChild.kill('SIGTERM');
|
||||||
|
await new Promise((r) => setTimeout(r, 500));
|
||||||
|
}
|
||||||
|
} catch (e) {
|
||||||
|
console.warn('[dev-server] error stopping API:', e);
|
||||||
|
}
|
||||||
|
try {
|
||||||
|
await pg.stop();
|
||||||
|
} catch (e) {
|
||||||
|
console.warn('[dev-server] error stopping pg:', e);
|
||||||
|
}
|
||||||
|
process.exit(0);
|
||||||
|
}
|
||||||
|
|
||||||
|
process.on('SIGINT', () => void shutdown('SIGINT'));
|
||||||
|
process.on('SIGTERM', () => void shutdown('SIGTERM'));
|
||||||
|
|
||||||
|
async function main() {
|
||||||
|
const dataInitialised = existsSync(resolve(PG_DATA, 'PG_VERSION'));
|
||||||
|
|
||||||
|
if (!dataInitialised) {
|
||||||
|
console.log('[dev-server] initialising embedded Postgres (~80MB binaries on first run)…');
|
||||||
|
await pg.initialise();
|
||||||
|
}
|
||||||
|
|
||||||
|
console.log(`[dev-server] starting Postgres on :${PG_PORT}…`);
|
||||||
|
await pg.start();
|
||||||
|
|
||||||
|
if (!dataInitialised) {
|
||||||
|
console.log(`[dev-server] creating database "${PG_DB}"…`);
|
||||||
|
try {
|
||||||
|
await pg.createDatabase(PG_DB);
|
||||||
|
} catch (e) {
|
||||||
|
console.warn('[dev-server] createDatabase warning:', (e as Error).message);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
console.log('[dev-server] applying schema (prisma db push)…');
|
||||||
|
await exec('npx', ['prisma', 'db', 'push', '--skip-generate', '--accept-data-loss'], { DATABASE_URL });
|
||||||
|
|
||||||
|
console.log('[dev-server] seeding default organization…');
|
||||||
|
await exec('npx', ['tsx', 'prisma/seed.ts'], { DATABASE_URL });
|
||||||
|
|
||||||
|
console.log('[dev-server] starting API server…');
|
||||||
|
serverChild = spawn('npx', ['tsx', 'watch', 'src/server.ts'], {
|
||||||
|
stdio: 'inherit',
|
||||||
|
cwd: apiRoot,
|
||||||
|
env: {
|
||||||
|
...process.env,
|
||||||
|
DATABASE_URL,
|
||||||
|
DEV_BYPASS_AUTH: '1',
|
||||||
|
PORT: '3030',
|
||||||
|
HOST: '127.0.0.1',
|
||||||
|
NODE_ENV: 'development',
|
||||||
|
},
|
||||||
|
shell: process.platform === 'win32',
|
||||||
|
});
|
||||||
|
serverChild.on('exit', (code) => {
|
||||||
|
if (!stopping) {
|
||||||
|
console.error(`[dev-server] API exited unexpectedly (${code})`);
|
||||||
|
void shutdown('api-exit');
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
main().catch((err) => {
|
||||||
|
console.error('[dev-server] fatal:', err);
|
||||||
|
void shutdown('fatal');
|
||||||
|
});
|
||||||
@@ -0,0 +1,5 @@
|
|||||||
|
import { PrismaClient } from '@prisma/client';
|
||||||
|
|
||||||
|
export const prisma = new PrismaClient({
|
||||||
|
log: process.env.NODE_ENV === 'development' ? ['warn', 'error'] : ['error'],
|
||||||
|
});
|
||||||
@@ -0,0 +1,41 @@
|
|||||||
|
import { z } from 'zod';
|
||||||
|
|
||||||
|
const EnvSchema = z.object({
|
||||||
|
NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
|
||||||
|
PORT: z.coerce.number().int().positive().default(3030),
|
||||||
|
HOST: z.string().default('127.0.0.1'),
|
||||||
|
|
||||||
|
DATABASE_URL: z.string().url(),
|
||||||
|
|
||||||
|
AUTH_ISSUER: z.string().url().default('https://auth.queo.ru'),
|
||||||
|
AUTH_AUDIENCE: z.string().default('queo.ru'),
|
||||||
|
AUTH_JWKS_URL: z.string().url().default('https://auth.queo.ru/.well-known/jwks.json'),
|
||||||
|
AUTH_COOKIE_NAME: z.string().default('q_at'),
|
||||||
|
AUTH_LOGIN_URL: z.string().url().default('https://auth.queo.ru/auth/login'),
|
||||||
|
|
||||||
|
CORS_ORIGINS: z
|
||||||
|
.string()
|
||||||
|
.default('http://localhost:5173')
|
||||||
|
.transform((v) => v.split(',').map((s) => s.trim()).filter(Boolean)),
|
||||||
|
|
||||||
|
TOCHKA_JWT_KEY: z.string().optional(),
|
||||||
|
TOCHKA_WEBHOOK_SECRET: z.string().optional(),
|
||||||
|
|
||||||
|
DEFAULT_ORGANIZATION_ID: z.string().uuid().default('00000000-0000-0000-0000-000000000001'),
|
||||||
|
|
||||||
|
// Только для локальной разработки. В проде — НИКОГДА. Hard-check ниже.
|
||||||
|
DEV_BYPASS_AUTH: z
|
||||||
|
.string()
|
||||||
|
.optional()
|
||||||
|
.transform((v) => v === '1' || v === 'true'),
|
||||||
|
});
|
||||||
|
|
||||||
|
export type Env = z.infer<typeof EnvSchema>;
|
||||||
|
|
||||||
|
export const env: Env = EnvSchema.parse(process.env);
|
||||||
|
|
||||||
|
if (env.NODE_ENV === 'production' && env.DEV_BYPASS_AUTH) {
|
||||||
|
// eslint-disable-next-line no-console
|
||||||
|
console.error('FATAL: DEV_BYPASS_AUTH=1 в production. Это обход аутентификации, отказываюсь стартовать.');
|
||||||
|
process.exit(1);
|
||||||
|
}
|
||||||
@@ -0,0 +1,18 @@
|
|||||||
|
// Fastify сериализует ответы через JSON.stringify, который ругается на BigInt.
|
||||||
|
// В Doc_manager все денежные/количественные поля копеек/milliQty влезают в JS Number
|
||||||
|
// (2^53-1 ≈ 9 квадриллионов копеек) — конвертируем BigInt → Number один раз глобально.
|
||||||
|
//
|
||||||
|
// Если когда-нибудь понадобится точность выше Number.MAX_SAFE_INTEGER — переключим
|
||||||
|
// на сериализацию в строку и type-marshalling на фронте.
|
||||||
|
|
||||||
|
declare global {
|
||||||
|
interface BigInt {
|
||||||
|
toJSON(): number;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
(BigInt.prototype as { toJSON?: () => number }).toJSON = function () {
|
||||||
|
return Number(this);
|
||||||
|
};
|
||||||
|
|
||||||
|
export {};
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
import type { FastifyRequest } from 'fastify';
|
||||||
|
import { env } from '../env.js';
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Возвращает organization_id, в контексте которого работает запрос.
|
||||||
|
* Single-tenant v1: всегда DEFAULT_ORGANIZATION_ID.
|
||||||
|
* При переходе к multi-tenant заменим на маппинг из req.user.permissions / групп / отдельной таблицы membership.
|
||||||
|
*/
|
||||||
|
export function getOrganizationId(_req: FastifyRequest): string {
|
||||||
|
return env.DEFAULT_ORGANIZATION_ID;
|
||||||
|
}
|
||||||
@@ -0,0 +1,111 @@
|
|||||||
|
import type { FastifyInstance } from 'fastify';
|
||||||
|
import { z } from 'zod';
|
||||||
|
import { prisma } from '../../db.js';
|
||||||
|
import { getOrganizationId } from '../../lib/org.js';
|
||||||
|
|
||||||
|
const ClientUpsert = z.object({
|
||||||
|
kind: z.enum(['ul', 'ip', 'fl']),
|
||||||
|
name: z.string().min(1).max(500),
|
||||||
|
inn: z
|
||||||
|
.string()
|
||||||
|
.regex(/^\d{10}$|^\d{12}$/)
|
||||||
|
.nullable(),
|
||||||
|
kpp: z.string().regex(/^\d{9}$/).nullable(),
|
||||||
|
address: z.string().max(1000).nullable(),
|
||||||
|
email: z.string().email().nullable(),
|
||||||
|
phone: z.string().max(50).nullable(),
|
||||||
|
contactPerson: z.string().max(200).nullable(),
|
||||||
|
});
|
||||||
|
|
||||||
|
const ListQuery = z.object({
|
||||||
|
q: z.string().optional(),
|
||||||
|
limit: z.coerce.number().int().min(1).max(200).default(100),
|
||||||
|
});
|
||||||
|
|
||||||
|
export async function clientsRoutes(app: FastifyInstance) {
|
||||||
|
app.get('/api/clients', { preHandler: app.requireDocPermission('viewer') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const parsed = ListQuery.safeParse(req.query);
|
||||||
|
if (!parsed.success) {
|
||||||
|
reply.code(400).send({ error: 'validation_error', issues: parsed.error.flatten() });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const { q, limit } = parsed.data;
|
||||||
|
const clients = await prisma.client.findMany({
|
||||||
|
where: {
|
||||||
|
organizationId: orgId,
|
||||||
|
...(q
|
||||||
|
? {
|
||||||
|
OR: [
|
||||||
|
{ name: { contains: q, mode: 'insensitive' } },
|
||||||
|
{ inn: { contains: q } },
|
||||||
|
{ email: { contains: q, mode: 'insensitive' } },
|
||||||
|
],
|
||||||
|
}
|
||||||
|
: {}),
|
||||||
|
},
|
||||||
|
orderBy: { name: 'asc' },
|
||||||
|
take: limit,
|
||||||
|
});
|
||||||
|
return { items: clients };
|
||||||
|
});
|
||||||
|
|
||||||
|
app.get('/api/clients/:id', { preHandler: app.requireDocPermission('viewer') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const { id } = req.params as { id: string };
|
||||||
|
const client = await prisma.client.findFirst({ where: { id, organizationId: orgId } });
|
||||||
|
if (!client) {
|
||||||
|
reply.code(404).send({ error: 'not_found' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
return client;
|
||||||
|
});
|
||||||
|
|
||||||
|
app.post('/api/clients', { preHandler: app.requireDocPermission('user') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const parsed = ClientUpsert.safeParse(req.body);
|
||||||
|
if (!parsed.success) {
|
||||||
|
reply.code(400).send({ error: 'validation_error', issues: parsed.error.flatten() });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const created = await prisma.client.create({
|
||||||
|
data: { ...parsed.data, organizationId: orgId },
|
||||||
|
});
|
||||||
|
reply.code(201).send(created);
|
||||||
|
});
|
||||||
|
|
||||||
|
app.put('/api/clients/:id', { preHandler: app.requireDocPermission('user') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const { id } = req.params as { id: string };
|
||||||
|
const parsed = ClientUpsert.safeParse(req.body);
|
||||||
|
if (!parsed.success) {
|
||||||
|
reply.code(400).send({ error: 'validation_error', issues: parsed.error.flatten() });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const existing = await prisma.client.findFirst({ where: { id, organizationId: orgId } });
|
||||||
|
if (!existing) {
|
||||||
|
reply.code(404).send({ error: 'not_found' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const updated = await prisma.client.update({ where: { id }, data: parsed.data });
|
||||||
|
return updated;
|
||||||
|
});
|
||||||
|
|
||||||
|
app.delete('/api/clients/:id', { preHandler: app.requireDocPermission('admin') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const { id } = req.params as { id: string };
|
||||||
|
const existing = await prisma.client.findFirst({ where: { id, organizationId: orgId } });
|
||||||
|
if (!existing) {
|
||||||
|
reply.code(404).send({ error: 'not_found' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
// Не используем onDelete: Cascade на documents.clientId — клиента с документами лучше архивировать.
|
||||||
|
const docCount = await prisma.document.count({ where: { clientId: id } });
|
||||||
|
if (docCount > 0) {
|
||||||
|
reply.code(409).send({ error: 'has_documents', count: docCount });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
await prisma.client.delete({ where: { id } });
|
||||||
|
reply.code(204).send();
|
||||||
|
});
|
||||||
|
}
|
||||||
@@ -0,0 +1,53 @@
|
|||||||
|
import type { FastifyInstance } from 'fastify';
|
||||||
|
import { z } from 'zod';
|
||||||
|
import { prisma } from '../../db.js';
|
||||||
|
import { getOrganizationId } from '../../lib/org.js';
|
||||||
|
|
||||||
|
const OrgUpdate = z.object({
|
||||||
|
name: z.string().min(1).max(500),
|
||||||
|
inn: z.string().regex(/^\d{10}$|^\d{12}$/),
|
||||||
|
kpp: z.string().regex(/^\d{9}$/).nullable(),
|
||||||
|
ogrn: z.string().regex(/^\d{13}$|^\d{15}$/).nullable(),
|
||||||
|
legalAddress: z.string().max(1000).nullable(),
|
||||||
|
bankName: z.string().max(500).nullable(),
|
||||||
|
bankBik: z.string().regex(/^\d{9}$/).nullable(),
|
||||||
|
bankAccount: z.string().regex(/^\d{20}$/).nullable(),
|
||||||
|
signatoryName: z.string().max(500).nullable(),
|
||||||
|
signatoryPosition: z.string().max(500).nullable(),
|
||||||
|
});
|
||||||
|
|
||||||
|
export async function organizationsRoutes(app: FastifyInstance) {
|
||||||
|
app.get(
|
||||||
|
'/api/organization',
|
||||||
|
{ preHandler: app.requireDocPermission('viewer') },
|
||||||
|
async (req, reply) => {
|
||||||
|
const id = getOrganizationId(req);
|
||||||
|
const org = await prisma.organization.findUnique({ where: { id } });
|
||||||
|
if (!org) {
|
||||||
|
reply.code(404).send({ error: 'organization_not_found' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
return org;
|
||||||
|
},
|
||||||
|
);
|
||||||
|
|
||||||
|
app.put(
|
||||||
|
'/api/organization',
|
||||||
|
{ preHandler: app.requireDocPermission('admin') },
|
||||||
|
async (req, reply) => {
|
||||||
|
const id = getOrganizationId(req);
|
||||||
|
const parsed = OrgUpdate.safeParse(req.body);
|
||||||
|
if (!parsed.success) {
|
||||||
|
reply.code(400).send({ error: 'validation_error', issues: parsed.error.flatten() });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
// upsert чтобы первое сохранение из UI создавало строку, если её ещё нет (вместо seed-only)
|
||||||
|
const org = await prisma.organization.upsert({
|
||||||
|
where: { id },
|
||||||
|
update: parsed.data,
|
||||||
|
create: { id, ...parsed.data },
|
||||||
|
});
|
||||||
|
return org;
|
||||||
|
},
|
||||||
|
);
|
||||||
|
}
|
||||||
@@ -0,0 +1,121 @@
|
|||||||
|
import type { FastifyInstance } from 'fastify';
|
||||||
|
import { z } from 'zod';
|
||||||
|
import { prisma } from '../../db.js';
|
||||||
|
import { getOrganizationId } from '../../lib/org.js';
|
||||||
|
|
||||||
|
const VatRate = z.enum(['none', 'vat_0', 'vat_5', 'vat_7', 'vat_10', 'vat_20']);
|
||||||
|
|
||||||
|
const ServiceUpsert = z.object({
|
||||||
|
name: z.string().min(1).max(500),
|
||||||
|
unit: z.string().min(1).max(50),
|
||||||
|
defaultPriceCents: z.coerce.number().int().nonnegative(),
|
||||||
|
defaultVat: VatRate.default('none'),
|
||||||
|
notes: z.string().max(2000).nullable(),
|
||||||
|
});
|
||||||
|
|
||||||
|
const ListQuery = z.object({
|
||||||
|
q: z.string().optional(),
|
||||||
|
includeArchived: z.coerce.boolean().default(false),
|
||||||
|
limit: z.coerce.number().int().min(1).max(500).default(200),
|
||||||
|
});
|
||||||
|
|
||||||
|
export async function servicesRoutes(app: FastifyInstance) {
|
||||||
|
app.get('/api/services', { preHandler: app.requireDocPermission('viewer') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const parsed = ListQuery.safeParse(req.query);
|
||||||
|
if (!parsed.success) {
|
||||||
|
reply.code(400).send({ error: 'validation_error', issues: parsed.error.flatten() });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const { q, includeArchived, limit } = parsed.data;
|
||||||
|
const services = await prisma.serviceCatalog.findMany({
|
||||||
|
where: {
|
||||||
|
organizationId: orgId,
|
||||||
|
...(includeArchived ? {} : { archivedAt: null }),
|
||||||
|
...(q
|
||||||
|
? {
|
||||||
|
OR: [
|
||||||
|
{ name: { contains: q, mode: 'insensitive' } },
|
||||||
|
{ notes: { contains: q, mode: 'insensitive' } },
|
||||||
|
],
|
||||||
|
}
|
||||||
|
: {}),
|
||||||
|
},
|
||||||
|
orderBy: { name: 'asc' },
|
||||||
|
take: limit,
|
||||||
|
});
|
||||||
|
return { items: services };
|
||||||
|
});
|
||||||
|
|
||||||
|
app.post('/api/services', { preHandler: app.requireDocPermission('user') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const parsed = ServiceUpsert.safeParse(req.body);
|
||||||
|
if (!parsed.success) {
|
||||||
|
reply.code(400).send({ error: 'validation_error', issues: parsed.error.flatten() });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const created = await prisma.serviceCatalog.create({
|
||||||
|
data: {
|
||||||
|
organizationId: orgId,
|
||||||
|
name: parsed.data.name,
|
||||||
|
unit: parsed.data.unit,
|
||||||
|
defaultPriceCents: BigInt(parsed.data.defaultPriceCents),
|
||||||
|
defaultVat: parsed.data.defaultVat,
|
||||||
|
notes: parsed.data.notes ?? null,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
reply.code(201).send(created);
|
||||||
|
});
|
||||||
|
|
||||||
|
app.put('/api/services/:id', { preHandler: app.requireDocPermission('user') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const { id } = req.params as { id: string };
|
||||||
|
const parsed = ServiceUpsert.safeParse(req.body);
|
||||||
|
if (!parsed.success) {
|
||||||
|
reply.code(400).send({ error: 'validation_error', issues: parsed.error.flatten() });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const existing = await prisma.serviceCatalog.findFirst({ where: { id, organizationId: orgId } });
|
||||||
|
if (!existing) {
|
||||||
|
reply.code(404).send({ error: 'not_found' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const updated = await prisma.serviceCatalog.update({
|
||||||
|
where: { id },
|
||||||
|
data: {
|
||||||
|
name: parsed.data.name,
|
||||||
|
unit: parsed.data.unit,
|
||||||
|
defaultPriceCents: BigInt(parsed.data.defaultPriceCents),
|
||||||
|
defaultVat: parsed.data.defaultVat,
|
||||||
|
notes: parsed.data.notes ?? null,
|
||||||
|
},
|
||||||
|
});
|
||||||
|
return updated;
|
||||||
|
});
|
||||||
|
|
||||||
|
// Архивация — soft delete. Жёстко удалять нельзя: на услугу могут ссылаться document_lines.
|
||||||
|
app.post('/api/services/:id/archive', { preHandler: app.requireDocPermission('user') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const { id } = req.params as { id: string };
|
||||||
|
const existing = await prisma.serviceCatalog.findFirst({ where: { id, organizationId: orgId } });
|
||||||
|
if (!existing) {
|
||||||
|
reply.code(404).send({ error: 'not_found' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
return prisma.serviceCatalog.update({
|
||||||
|
where: { id },
|
||||||
|
data: { archivedAt: existing.archivedAt ?? new Date() },
|
||||||
|
});
|
||||||
|
});
|
||||||
|
|
||||||
|
app.post('/api/services/:id/unarchive', { preHandler: app.requireDocPermission('user') }, async (req, reply) => {
|
||||||
|
const orgId = getOrganizationId(req);
|
||||||
|
const { id } = req.params as { id: string };
|
||||||
|
const existing = await prisma.serviceCatalog.findFirst({ where: { id, organizationId: orgId } });
|
||||||
|
if (!existing) {
|
||||||
|
reply.code(404).send({ error: 'not_found' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
return prisma.serviceCatalog.update({ where: { id }, data: { archivedAt: null } });
|
||||||
|
});
|
||||||
|
}
|
||||||
@@ -0,0 +1,84 @@
|
|||||||
|
import fp from 'fastify-plugin';
|
||||||
|
import { createRemoteJWKSet, jwtVerify, type JWTPayload } from 'jose';
|
||||||
|
import {
|
||||||
|
AuthPayload,
|
||||||
|
hasDocPermission,
|
||||||
|
type AuthPayload as AuthPayloadT,
|
||||||
|
type PermissionRole,
|
||||||
|
} from '@doc-manager/shared';
|
||||||
|
import { env } from '../env.js';
|
||||||
|
|
||||||
|
declare module 'fastify' {
|
||||||
|
interface FastifyRequest {
|
||||||
|
user: AuthPayloadT | null;
|
||||||
|
}
|
||||||
|
interface FastifyInstance {
|
||||||
|
requireAuth: (req: import('fastify').FastifyRequest, reply: import('fastify').FastifyReply) => Promise<void>;
|
||||||
|
requireDocPermission: (
|
||||||
|
level: PermissionRole,
|
||||||
|
) => (req: import('fastify').FastifyRequest, reply: import('fastify').FastifyReply) => Promise<void>;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Один JWKS-резолвер на процесс, jose сам кэширует ключи.
|
||||||
|
// Не создаём, если включён dev-bypass — лишний DNS на boot.
|
||||||
|
const jwks = env.DEV_BYPASS_AUTH ? null : createRemoteJWKSet(new URL(env.AUTH_JWKS_URL));
|
||||||
|
|
||||||
|
const DEV_FAKE_USER: AuthPayloadT = {
|
||||||
|
sub: '11111111-1111-1111-1111-111111111111',
|
||||||
|
email: 'dev@local',
|
||||||
|
groups: ['dev'],
|
||||||
|
permissions: { doc_manager: 'admin' },
|
||||||
|
isSuperuser: true,
|
||||||
|
};
|
||||||
|
|
||||||
|
export default fp(async function authPlugin(app) {
|
||||||
|
app.decorateRequest('user', null);
|
||||||
|
|
||||||
|
if (env.DEV_BYPASS_AUTH) {
|
||||||
|
app.log.warn('!!! DEV_BYPASS_AUTH ON — auth fully bypassed, fake admin injected !!!');
|
||||||
|
}
|
||||||
|
|
||||||
|
app.decorate('requireAuth', async function requireAuth(req, reply) {
|
||||||
|
if (env.DEV_BYPASS_AUTH) {
|
||||||
|
req.user = DEV_FAKE_USER;
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const token = req.cookies?.[env.AUTH_COOKIE_NAME];
|
||||||
|
if (!token) {
|
||||||
|
reply.code(401).send({ error: 'no_token' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
try {
|
||||||
|
const { payload } = await jwtVerify<JWTPayload>(token, jwks!, {
|
||||||
|
issuer: env.AUTH_ISSUER,
|
||||||
|
audience: env.AUTH_AUDIENCE,
|
||||||
|
});
|
||||||
|
const parsed = AuthPayload.safeParse(payload);
|
||||||
|
if (!parsed.success) {
|
||||||
|
app.log.warn({ err: parsed.error.flatten() }, 'auth: payload schema mismatch');
|
||||||
|
reply.code(401).send({ error: 'invalid_payload' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
req.user = parsed.data;
|
||||||
|
} catch (e) {
|
||||||
|
const code =
|
||||||
|
(e as { code?: string } | null)?.code === 'ERR_JWT_EXPIRED'
|
||||||
|
? 'token_expired'
|
||||||
|
: 'invalid_token';
|
||||||
|
reply.code(401).send({ error: code });
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
app.decorate('requireDocPermission', function requireDocPermission(level: PermissionRole) {
|
||||||
|
return async (req, reply) => {
|
||||||
|
if (!req.user) {
|
||||||
|
await app.requireAuth(req, reply);
|
||||||
|
if (reply.sent) return;
|
||||||
|
}
|
||||||
|
if (!req.user || !hasDocPermission(req.user, level)) {
|
||||||
|
reply.code(403).send({ error: 'forbidden' });
|
||||||
|
}
|
||||||
|
};
|
||||||
|
});
|
||||||
|
});
|
||||||
@@ -0,0 +1,16 @@
|
|||||||
|
import type { FastifyInstance } from 'fastify';
|
||||||
|
import { prisma } from '../db.js';
|
||||||
|
|
||||||
|
export async function healthRoutes(app: FastifyInstance) {
|
||||||
|
app.get('/health', async () => ({ ok: true, ts: new Date().toISOString() }));
|
||||||
|
|
||||||
|
app.get('/health/db', async (_req, reply) => {
|
||||||
|
try {
|
||||||
|
await prisma.$queryRaw`SELECT 1`;
|
||||||
|
return { ok: true };
|
||||||
|
} catch (e) {
|
||||||
|
app.log.error({ err: e }, 'db health check failed');
|
||||||
|
reply.code(503).send({ ok: false, error: 'db_unavailable' });
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
@@ -0,0 +1,15 @@
|
|||||||
|
import type { FastifyInstance } from 'fastify';
|
||||||
|
import { DOC_MANAGER_RESOURCE } from '@doc-manager/shared';
|
||||||
|
|
||||||
|
export async function meRoutes(app: FastifyInstance) {
|
||||||
|
app.get('/api/me', { preHandler: app.requireAuth }, async (req) => {
|
||||||
|
const u = req.user!;
|
||||||
|
return {
|
||||||
|
sub: u.sub,
|
||||||
|
email: u.email,
|
||||||
|
groups: u.groups,
|
||||||
|
isSuperuser: u.isSuperuser,
|
||||||
|
docPermission: u.permissions[DOC_MANAGER_RESOURCE] ?? null,
|
||||||
|
};
|
||||||
|
});
|
||||||
|
}
|
||||||
@@ -0,0 +1,55 @@
|
|||||||
|
import './lib/bigint.js'; // глобальный BigInt → number в JSON.stringify
|
||||||
|
import Fastify from 'fastify';
|
||||||
|
import cookie from '@fastify/cookie';
|
||||||
|
import cors from '@fastify/cors';
|
||||||
|
import helmet from '@fastify/helmet';
|
||||||
|
import { env } from './env.js';
|
||||||
|
import authPlugin from './plugins/auth.js';
|
||||||
|
import { healthRoutes } from './routes/health.js';
|
||||||
|
import { meRoutes } from './routes/me.js';
|
||||||
|
import { organizationsRoutes } from './modules/organizations/routes.js';
|
||||||
|
import { clientsRoutes } from './modules/clients/routes.js';
|
||||||
|
import { servicesRoutes } from './modules/services/routes.js';
|
||||||
|
|
||||||
|
async function main() {
|
||||||
|
const loggerOptions =
|
||||||
|
env.NODE_ENV === 'development'
|
||||||
|
? {
|
||||||
|
level: 'debug',
|
||||||
|
transport: {
|
||||||
|
target: 'pino-pretty',
|
||||||
|
options: { translateTime: 'HH:MM:ss', ignore: 'pid,hostname' },
|
||||||
|
},
|
||||||
|
}
|
||||||
|
: { level: 'info' };
|
||||||
|
|
||||||
|
const app = Fastify({ logger: loggerOptions, trustProxy: true });
|
||||||
|
|
||||||
|
await app.register(helmet, { contentSecurityPolicy: false });
|
||||||
|
await app.register(cors, {
|
||||||
|
origin: env.CORS_ORIGINS,
|
||||||
|
credentials: true,
|
||||||
|
});
|
||||||
|
await app.register(cookie);
|
||||||
|
await app.register(authPlugin);
|
||||||
|
|
||||||
|
await app.register(healthRoutes);
|
||||||
|
await app.register(meRoutes);
|
||||||
|
await app.register(organizationsRoutes);
|
||||||
|
await app.register(clientsRoutes);
|
||||||
|
await app.register(servicesRoutes);
|
||||||
|
|
||||||
|
app.setErrorHandler((err, _req, reply) => {
|
||||||
|
app.log.error({ err }, 'unhandled error');
|
||||||
|
if (reply.sent) return;
|
||||||
|
reply.code(err.statusCode ?? 500).send({ error: err.code ?? 'internal_error' });
|
||||||
|
});
|
||||||
|
|
||||||
|
await app.listen({ port: env.PORT, host: env.HOST });
|
||||||
|
}
|
||||||
|
|
||||||
|
main().catch((err) => {
|
||||||
|
// eslint-disable-next-line no-console
|
||||||
|
console.error('fatal:', err);
|
||||||
|
process.exit(1);
|
||||||
|
});
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
{
|
||||||
|
"extends": "../../tsconfig.base.json",
|
||||||
|
"compilerOptions": {
|
||||||
|
"rootDir": "./src",
|
||||||
|
"outDir": "./dist",
|
||||||
|
"module": "NodeNext",
|
||||||
|
"moduleResolution": "NodeNext",
|
||||||
|
"target": "ES2022",
|
||||||
|
"types": ["node"],
|
||||||
|
"declaration": false,
|
||||||
|
"sourceMap": true
|
||||||
|
},
|
||||||
|
"include": ["src/**/*"]
|
||||||
|
}
|
||||||
@@ -0,0 +1,2 @@
|
|||||||
|
# URL центра аутентификации Queo
|
||||||
|
VITE_AUTH_LOGIN_URL=https://auth.queo.ru/auth/login
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
<!doctype html>
|
||||||
|
<html lang="ru">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8" />
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||||
|
<title>Doc_manager — Queo</title>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div id="root"></div>
|
||||||
|
<script type="module" src="/src/main.tsx"></script>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
@@ -0,0 +1,25 @@
|
|||||||
|
{
|
||||||
|
"name": "@doc-manager/web",
|
||||||
|
"version": "0.0.0",
|
||||||
|
"private": true,
|
||||||
|
"type": "module",
|
||||||
|
"scripts": {
|
||||||
|
"dev": "vite",
|
||||||
|
"build": "tsc -b && vite build",
|
||||||
|
"preview": "vite preview",
|
||||||
|
"typecheck": "tsc --noEmit"
|
||||||
|
},
|
||||||
|
"dependencies": {
|
||||||
|
"@doc-manager/shared": "*",
|
||||||
|
"react": "^18.3.1",
|
||||||
|
"react-dom": "^18.3.1",
|
||||||
|
"react-router-dom": "^6.27.0"
|
||||||
|
},
|
||||||
|
"devDependencies": {
|
||||||
|
"@types/react": "^18.3.12",
|
||||||
|
"@types/react-dom": "^18.3.1",
|
||||||
|
"@vitejs/plugin-react": "^4.3.4",
|
||||||
|
"typescript": "^5.6.3",
|
||||||
|
"vite": "^5.4.10"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,72 @@
|
|||||||
|
import { useEffect } from 'react';
|
||||||
|
import { Link, Route, Routes } from 'react-router-dom';
|
||||||
|
import { redirectToLogin, useAuth } from './auth.js';
|
||||||
|
import { ClientsPage } from './pages/Clients.js';
|
||||||
|
import { ServicesPage } from './pages/Services.js';
|
||||||
|
import { OrganizationPage } from './pages/Organization.js';
|
||||||
|
|
||||||
|
function Layout({ email }: { email: string }) {
|
||||||
|
return (
|
||||||
|
<header className="topbar">
|
||||||
|
<h1>Doc_manager</h1>
|
||||||
|
<nav>
|
||||||
|
<Link to="/">Документы</Link>
|
||||||
|
<Link to="/clients">Клиенты</Link>
|
||||||
|
<Link to="/services">Услуги</Link>
|
||||||
|
<Link to="/templates">Шаблоны</Link>
|
||||||
|
<Link to="/bank">Банк</Link>
|
||||||
|
<Link to="/organization">Реквизиты</Link>
|
||||||
|
</nav>
|
||||||
|
<span className="user">{email}</span>
|
||||||
|
</header>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
function Placeholder({ title }: { title: string }) {
|
||||||
|
return (
|
||||||
|
<main className="content">
|
||||||
|
<h2>{title}</h2>
|
||||||
|
<p>В разработке. См. план: M2–M7.</p>
|
||||||
|
</main>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
function Forbidden({ email }: { email: string }) {
|
||||||
|
return (
|
||||||
|
<main className="content">
|
||||||
|
<h2>Нет доступа</h2>
|
||||||
|
<p>
|
||||||
|
Аккаунт <b>{email}</b> авторизован в Queo, но не имеет роли в Doc_manager. Попросите
|
||||||
|
администратора выдать <code>doc_manager</code> permission в auth.queo.ru.
|
||||||
|
</p>
|
||||||
|
</main>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function App() {
|
||||||
|
const auth = useAuth();
|
||||||
|
|
||||||
|
useEffect(() => {
|
||||||
|
if (auth.status === 'unauthenticated') redirectToLogin();
|
||||||
|
}, [auth.status]);
|
||||||
|
|
||||||
|
if (auth.status === 'loading' || auth.status === 'unauthenticated') {
|
||||||
|
return <div className="loading">Проверка доступа…</div>;
|
||||||
|
}
|
||||||
|
if (auth.status === 'forbidden') return <Forbidden email={auth.me.email} />;
|
||||||
|
|
||||||
|
return (
|
||||||
|
<>
|
||||||
|
<Layout email={auth.me.email} />
|
||||||
|
<Routes>
|
||||||
|
<Route path="/" element={<Placeholder title="Документы" />} />
|
||||||
|
<Route path="/clients" element={<ClientsPage />} />
|
||||||
|
<Route path="/services" element={<ServicesPage />} />
|
||||||
|
<Route path="/templates" element={<Placeholder title="Шаблоны договоров" />} />
|
||||||
|
<Route path="/bank" element={<Placeholder title="Банк" />} />
|
||||||
|
<Route path="/organization" element={<OrganizationPage />} />
|
||||||
|
<Route path="*" element={<Placeholder title="Не найдено" />} />
|
||||||
|
</Routes>
|
||||||
|
</>
|
||||||
|
);
|
||||||
|
}
|
||||||
@@ -0,0 +1,74 @@
|
|||||||
|
import { redirectToLogin } from './auth.js';
|
||||||
|
|
||||||
|
export class ApiError extends Error {
|
||||||
|
constructor(public status: number, public code: string, public details?: unknown) {
|
||||||
|
super(`${status} ${code}`);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async function request<T>(method: string, path: string, body?: unknown): Promise<T> {
|
||||||
|
const init: RequestInit = { method, credentials: 'include' };
|
||||||
|
if (body !== undefined) {
|
||||||
|
init.headers = { 'Content-Type': 'application/json' };
|
||||||
|
init.body = JSON.stringify(body);
|
||||||
|
}
|
||||||
|
const res = await fetch(path, init);
|
||||||
|
if (res.status === 401) {
|
||||||
|
redirectToLogin();
|
||||||
|
}
|
||||||
|
if (res.status === 204) return undefined as T;
|
||||||
|
const text = await res.text();
|
||||||
|
const data = text ? JSON.parse(text) : undefined;
|
||||||
|
if (!res.ok) {
|
||||||
|
throw new ApiError(res.status, (data as { error?: string })?.error ?? 'http_error', data);
|
||||||
|
}
|
||||||
|
return data as T;
|
||||||
|
}
|
||||||
|
|
||||||
|
export const api = {
|
||||||
|
get: <T>(p: string) => request<T>('GET', p),
|
||||||
|
post: <T>(p: string, body: unknown) => request<T>('POST', p, body),
|
||||||
|
put: <T>(p: string, body: unknown) => request<T>('PUT', p, body),
|
||||||
|
del: <T = void>(p: string) => request<T>('DELETE', p),
|
||||||
|
};
|
||||||
|
|
||||||
|
export type Organization = {
|
||||||
|
id: string;
|
||||||
|
name: string;
|
||||||
|
inn: string;
|
||||||
|
kpp: string | null;
|
||||||
|
ogrn: string | null;
|
||||||
|
legalAddress: string | null;
|
||||||
|
bankName: string | null;
|
||||||
|
bankBik: string | null;
|
||||||
|
bankAccount: string | null;
|
||||||
|
signatoryName: string | null;
|
||||||
|
signatoryPosition: string | null;
|
||||||
|
};
|
||||||
|
|
||||||
|
export type Client = {
|
||||||
|
id: string;
|
||||||
|
organizationId: string;
|
||||||
|
kind: 'ul' | 'ip' | 'fl';
|
||||||
|
name: string;
|
||||||
|
inn: string | null;
|
||||||
|
kpp: string | null;
|
||||||
|
address: string | null;
|
||||||
|
email: string | null;
|
||||||
|
phone: string | null;
|
||||||
|
contactPerson: string | null;
|
||||||
|
requisitesJson: Record<string, unknown> | null;
|
||||||
|
createdAt: string;
|
||||||
|
updatedAt: string;
|
||||||
|
};
|
||||||
|
|
||||||
|
export type Service = {
|
||||||
|
id: string;
|
||||||
|
organizationId: string;
|
||||||
|
name: string;
|
||||||
|
unit: string;
|
||||||
|
defaultPriceCents: number; // BigInt сериализуется в number (см. apps/api/src/lib/bigint.ts)
|
||||||
|
defaultVat: 'none' | 'vat_0' | 'vat_5' | 'vat_7' | 'vat_10' | 'vat_20';
|
||||||
|
notes: string | null;
|
||||||
|
archivedAt: string | null;
|
||||||
|
};
|
||||||
@@ -0,0 +1,58 @@
|
|||||||
|
import { useEffect, useState } from 'react';
|
||||||
|
import type { PermissionRole } from '@doc-manager/shared';
|
||||||
|
|
||||||
|
export type Me = {
|
||||||
|
sub: string;
|
||||||
|
email: string;
|
||||||
|
groups: string[];
|
||||||
|
isSuperuser: boolean;
|
||||||
|
docPermission: PermissionRole | null;
|
||||||
|
};
|
||||||
|
|
||||||
|
const AUTH_LOGIN_URL = import.meta.env.VITE_AUTH_LOGIN_URL ?? 'https://auth.queo.ru/auth/login';
|
||||||
|
|
||||||
|
export function redirectToLogin(): never {
|
||||||
|
const returnTo = encodeURIComponent(window.location.href);
|
||||||
|
window.location.href = `${AUTH_LOGIN_URL}?return_to=${returnTo}`;
|
||||||
|
throw new Error('redirecting');
|
||||||
|
}
|
||||||
|
|
||||||
|
export type AuthState =
|
||||||
|
| { status: 'loading' }
|
||||||
|
| { status: 'authenticated'; me: Me }
|
||||||
|
| { status: 'unauthenticated' }
|
||||||
|
| { status: 'forbidden'; me: Me };
|
||||||
|
|
||||||
|
export function useAuth(): AuthState {
|
||||||
|
const [state, setState] = useState<AuthState>({ status: 'loading' });
|
||||||
|
|
||||||
|
useEffect(() => {
|
||||||
|
let cancelled = false;
|
||||||
|
fetch('/api/me', { credentials: 'include' })
|
||||||
|
.then(async (r) => {
|
||||||
|
if (cancelled) return;
|
||||||
|
if (r.status === 401) {
|
||||||
|
setState({ status: 'unauthenticated' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
if (!r.ok) throw new Error(`HTTP ${r.status}`);
|
||||||
|
const me = (await r.json()) as Me;
|
||||||
|
// Для M1 любой залогиненный пользователь видит шелл; запрет отдельных страниц — позже.
|
||||||
|
if (me.docPermission == null && !me.isSuperuser) {
|
||||||
|
setState({ status: 'forbidden', me });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
setState({ status: 'authenticated', me });
|
||||||
|
})
|
||||||
|
.catch((e) => {
|
||||||
|
if (cancelled) return;
|
||||||
|
console.error('auth fetch failed', e);
|
||||||
|
setState({ status: 'unauthenticated' });
|
||||||
|
});
|
||||||
|
return () => {
|
||||||
|
cancelled = true;
|
||||||
|
};
|
||||||
|
}, []);
|
||||||
|
|
||||||
|
return state;
|
||||||
|
}
|
||||||
@@ -0,0 +1,109 @@
|
|||||||
|
import { type ButtonHTMLAttributes, type InputHTMLAttributes, type ReactNode, type SelectHTMLAttributes, type TextareaHTMLAttributes, useEffect } from 'react';
|
||||||
|
|
||||||
|
export function Button({
|
||||||
|
variant = 'default',
|
||||||
|
...props
|
||||||
|
}: ButtonHTMLAttributes<HTMLButtonElement> & { variant?: 'default' | 'primary' | 'danger' | 'ghost' }) {
|
||||||
|
return <button {...props} className={`btn btn--${variant} ${props.className ?? ''}`} />;
|
||||||
|
}
|
||||||
|
|
||||||
|
export function Field(
|
||||||
|
props: InputHTMLAttributes<HTMLInputElement> & { label: string; error?: string },
|
||||||
|
) {
|
||||||
|
const { label, error, ...input } = props;
|
||||||
|
return (
|
||||||
|
<label className="field">
|
||||||
|
<span className="field__label">{label}</span>
|
||||||
|
<input {...input} className={`field__input ${error ? 'field__input--err' : ''}`} />
|
||||||
|
{error ? <span className="field__error">{error}</span> : null}
|
||||||
|
</label>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function Textarea(props: TextareaHTMLAttributes<HTMLTextAreaElement> & { label: string }) {
|
||||||
|
const { label, ...textarea } = props;
|
||||||
|
return (
|
||||||
|
<label className="field">
|
||||||
|
<span className="field__label">{label}</span>
|
||||||
|
<textarea {...textarea} className="field__input field__input--area" />
|
||||||
|
</label>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function Select<T extends string>(
|
||||||
|
props: Omit<SelectHTMLAttributes<HTMLSelectElement>, 'value' | 'onChange'> & {
|
||||||
|
label: string;
|
||||||
|
value: T;
|
||||||
|
onChange: (v: T) => void;
|
||||||
|
options: ReadonlyArray<{ value: T; label: string }>;
|
||||||
|
},
|
||||||
|
) {
|
||||||
|
const { label, value, onChange, options, ...sel } = props;
|
||||||
|
return (
|
||||||
|
<label className="field">
|
||||||
|
<span className="field__label">{label}</span>
|
||||||
|
<select
|
||||||
|
{...sel}
|
||||||
|
className="field__input"
|
||||||
|
value={value}
|
||||||
|
onChange={(e) => onChange(e.target.value as T)}
|
||||||
|
>
|
||||||
|
{options.map((o) => (
|
||||||
|
<option key={o.value} value={o.value}>
|
||||||
|
{o.label}
|
||||||
|
</option>
|
||||||
|
))}
|
||||||
|
</select>
|
||||||
|
</label>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function Modal({
|
||||||
|
open,
|
||||||
|
title,
|
||||||
|
onClose,
|
||||||
|
children,
|
||||||
|
footer,
|
||||||
|
}: {
|
||||||
|
open: boolean;
|
||||||
|
title: string;
|
||||||
|
onClose: () => void;
|
||||||
|
children: ReactNode;
|
||||||
|
footer?: ReactNode;
|
||||||
|
}) {
|
||||||
|
useEffect(() => {
|
||||||
|
if (!open) return;
|
||||||
|
const onKey = (e: KeyboardEvent) => {
|
||||||
|
if (e.key === 'Escape') onClose();
|
||||||
|
};
|
||||||
|
window.addEventListener('keydown', onKey);
|
||||||
|
return () => window.removeEventListener('keydown', onKey);
|
||||||
|
}, [open, onClose]);
|
||||||
|
if (!open) return null;
|
||||||
|
return (
|
||||||
|
<div className="modal__backdrop" onClick={onClose}>
|
||||||
|
<div className="modal" onClick={(e) => e.stopPropagation()}>
|
||||||
|
<header className="modal__header">
|
||||||
|
<h3>{title}</h3>
|
||||||
|
<button className="modal__close" onClick={onClose} aria-label="Закрыть">
|
||||||
|
×
|
||||||
|
</button>
|
||||||
|
</header>
|
||||||
|
<div className="modal__body">{children}</div>
|
||||||
|
{footer ? <footer className="modal__footer">{footer}</footer> : null}
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
export function EmptyState({ children }: { children: ReactNode }) {
|
||||||
|
return <div className="empty">{children}</div>;
|
||||||
|
}
|
||||||
|
|
||||||
|
export function formatRub(cents: number): string {
|
||||||
|
return (cents / 100).toLocaleString('ru-RU', {
|
||||||
|
style: 'currency',
|
||||||
|
currency: 'RUB',
|
||||||
|
minimumFractionDigits: 2,
|
||||||
|
});
|
||||||
|
}
|
||||||
@@ -0,0 +1,13 @@
|
|||||||
|
import React from 'react';
|
||||||
|
import ReactDOM from 'react-dom/client';
|
||||||
|
import { BrowserRouter } from 'react-router-dom';
|
||||||
|
import { App } from './App.js';
|
||||||
|
import './styles.css';
|
||||||
|
|
||||||
|
ReactDOM.createRoot(document.getElementById('root')!).render(
|
||||||
|
<React.StrictMode>
|
||||||
|
<BrowserRouter>
|
||||||
|
<App />
|
||||||
|
</BrowserRouter>
|
||||||
|
</React.StrictMode>,
|
||||||
|
);
|
||||||
@@ -0,0 +1,189 @@
|
|||||||
|
import { useEffect, useState } from 'react';
|
||||||
|
import { api, ApiError, type Client } from '../api.js';
|
||||||
|
import { Button, EmptyState, Field, Modal, Select } from '../components/ui.js';
|
||||||
|
|
||||||
|
const KIND_LABEL: Record<Client['kind'], string> = {
|
||||||
|
ul: 'Юр. лицо',
|
||||||
|
ip: 'ИП',
|
||||||
|
fl: 'Физ. лицо',
|
||||||
|
};
|
||||||
|
|
||||||
|
const emptyDraft = (): Partial<Client> => ({
|
||||||
|
kind: 'ul',
|
||||||
|
name: '',
|
||||||
|
inn: '',
|
||||||
|
kpp: '',
|
||||||
|
address: '',
|
||||||
|
email: '',
|
||||||
|
phone: '',
|
||||||
|
contactPerson: '',
|
||||||
|
});
|
||||||
|
|
||||||
|
export function ClientsPage() {
|
||||||
|
const [items, setItems] = useState<Client[] | null>(null);
|
||||||
|
const [q, setQ] = useState('');
|
||||||
|
const [editing, setEditing] = useState<Partial<Client> | null>(null);
|
||||||
|
const [error, setError] = useState<string | null>(null);
|
||||||
|
|
||||||
|
async function load() {
|
||||||
|
setError(null);
|
||||||
|
try {
|
||||||
|
const r = await api.get<{ items: Client[] }>(
|
||||||
|
`/api/clients${q ? `?q=${encodeURIComponent(q)}` : ''}`,
|
||||||
|
);
|
||||||
|
setItems(r.items);
|
||||||
|
} catch (e) {
|
||||||
|
setError(String(e));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
useEffect(() => {
|
||||||
|
void load();
|
||||||
|
// eslint-disable-next-line react-hooks/exhaustive-deps
|
||||||
|
}, [q]);
|
||||||
|
|
||||||
|
async function save() {
|
||||||
|
if (!editing) return;
|
||||||
|
setError(null);
|
||||||
|
try {
|
||||||
|
const payload = {
|
||||||
|
kind: editing.kind ?? 'ul',
|
||||||
|
name: editing.name ?? '',
|
||||||
|
inn: editing.inn || null,
|
||||||
|
kpp: editing.kpp || null,
|
||||||
|
address: editing.address || null,
|
||||||
|
email: editing.email || null,
|
||||||
|
phone: editing.phone || null,
|
||||||
|
contactPerson: editing.contactPerson || null,
|
||||||
|
};
|
||||||
|
if (editing.id) {
|
||||||
|
await api.put<Client>(`/api/clients/${editing.id}`, payload);
|
||||||
|
} else {
|
||||||
|
await api.post<Client>('/api/clients', payload);
|
||||||
|
}
|
||||||
|
setEditing(null);
|
||||||
|
await load();
|
||||||
|
} catch (e) {
|
||||||
|
setError(e instanceof ApiError ? `${e.code} (${e.status})` : String(e));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async function remove(id: string) {
|
||||||
|
if (!confirm('Удалить клиента?')) return;
|
||||||
|
try {
|
||||||
|
await api.del(`/api/clients/${id}`);
|
||||||
|
await load();
|
||||||
|
} catch (e) {
|
||||||
|
if (e instanceof ApiError && e.code === 'has_documents') {
|
||||||
|
alert(`Нельзя удалить — есть ${(e.details as { count?: number })?.count ?? 0} документов. Архивацию добавим позже.`);
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
setError(String(e));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
const set = <K extends keyof Client>(k: K, v: Client[K] | string) =>
|
||||||
|
setEditing((d) => (d ? { ...d, [k]: v as Client[K] } : d));
|
||||||
|
|
||||||
|
return (
|
||||||
|
<main className="content">
|
||||||
|
<header className="page-head">
|
||||||
|
<h2>Клиенты</h2>
|
||||||
|
<Button variant="primary" onClick={() => setEditing(emptyDraft())}>
|
||||||
|
+ Добавить
|
||||||
|
</Button>
|
||||||
|
</header>
|
||||||
|
|
||||||
|
<div className="toolbar">
|
||||||
|
<input
|
||||||
|
className="search"
|
||||||
|
placeholder="Поиск по названию, ИНН, email…"
|
||||||
|
value={q}
|
||||||
|
onChange={(e) => setQ(e.target.value)}
|
||||||
|
/>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
{error ? <div className="error-text">{error}</div> : null}
|
||||||
|
|
||||||
|
{items === null ? (
|
||||||
|
<p className="hint">Загрузка…</p>
|
||||||
|
) : items.length === 0 ? (
|
||||||
|
<EmptyState>
|
||||||
|
{q ? 'Ничего не найдено.' : 'Пока нет клиентов. Добавьте первого, чтобы выставлять документы.'}
|
||||||
|
</EmptyState>
|
||||||
|
) : (
|
||||||
|
<table className="table">
|
||||||
|
<thead>
|
||||||
|
<tr>
|
||||||
|
<th>Тип</th>
|
||||||
|
<th>Название</th>
|
||||||
|
<th>ИНН</th>
|
||||||
|
<th>Email</th>
|
||||||
|
<th>Телефон</th>
|
||||||
|
<th aria-label="actions" />
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
<tbody>
|
||||||
|
{items.map((c) => (
|
||||||
|
<tr key={c.id}>
|
||||||
|
<td>{KIND_LABEL[c.kind]}</td>
|
||||||
|
<td>{c.name}</td>
|
||||||
|
<td>{c.inn ?? '—'}</td>
|
||||||
|
<td>{c.email ?? '—'}</td>
|
||||||
|
<td>{c.phone ?? '—'}</td>
|
||||||
|
<td className="row-actions">
|
||||||
|
<Button variant="ghost" onClick={() => setEditing(c)}>
|
||||||
|
Изменить
|
||||||
|
</Button>
|
||||||
|
<Button variant="danger" onClick={() => remove(c.id)}>
|
||||||
|
Удалить
|
||||||
|
</Button>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
))}
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
|
)}
|
||||||
|
|
||||||
|
<Modal
|
||||||
|
open={editing !== null}
|
||||||
|
title={editing?.id ? 'Изменить клиента' : 'Новый клиент'}
|
||||||
|
onClose={() => setEditing(null)}
|
||||||
|
footer={
|
||||||
|
<>
|
||||||
|
<Button variant="ghost" onClick={() => setEditing(null)}>
|
||||||
|
Отмена
|
||||||
|
</Button>
|
||||||
|
<Button variant="primary" onClick={save}>
|
||||||
|
Сохранить
|
||||||
|
</Button>
|
||||||
|
</>
|
||||||
|
}
|
||||||
|
>
|
||||||
|
<div className="form-grid">
|
||||||
|
<Select
|
||||||
|
label="Тип"
|
||||||
|
value={(editing?.kind ?? 'ul') as Client['kind']}
|
||||||
|
onChange={(v) => set('kind', v)}
|
||||||
|
options={[
|
||||||
|
{ value: 'ul' as const, label: 'Юр. лицо' },
|
||||||
|
{ value: 'ip' as const, label: 'ИП' },
|
||||||
|
{ value: 'fl' as const, label: 'Физ. лицо' },
|
||||||
|
]}
|
||||||
|
/>
|
||||||
|
<Field label="Название" value={editing?.name ?? ''} onChange={(e) => set('name', e.target.value)} />
|
||||||
|
<Field label="ИНН" value={editing?.inn ?? ''} onChange={(e) => set('inn', e.target.value)} />
|
||||||
|
<Field label="КПП" value={editing?.kpp ?? ''} onChange={(e) => set('kpp', e.target.value)} />
|
||||||
|
<Field label="Адрес" value={editing?.address ?? ''} onChange={(e) => set('address', e.target.value)} />
|
||||||
|
<Field label="Email" type="email" value={editing?.email ?? ''} onChange={(e) => set('email', e.target.value)} />
|
||||||
|
<Field label="Телефон" value={editing?.phone ?? ''} onChange={(e) => set('phone', e.target.value)} />
|
||||||
|
<Field
|
||||||
|
label="Контактное лицо"
|
||||||
|
value={editing?.contactPerson ?? ''}
|
||||||
|
onChange={(e) => set('contactPerson', e.target.value)}
|
||||||
|
/>
|
||||||
|
</div>
|
||||||
|
</Modal>
|
||||||
|
</main>
|
||||||
|
);
|
||||||
|
}
|
||||||
@@ -0,0 +1,134 @@
|
|||||||
|
import { useEffect, useState } from 'react';
|
||||||
|
import { api, ApiError, type Organization } from '../api.js';
|
||||||
|
import { Button, Field } from '../components/ui.js';
|
||||||
|
|
||||||
|
export function OrganizationPage() {
|
||||||
|
const [org, setOrg] = useState<Organization | null>(null);
|
||||||
|
const [draft, setDraft] = useState<Partial<Organization>>({});
|
||||||
|
const [saving, setSaving] = useState(false);
|
||||||
|
const [error, setError] = useState<string | null>(null);
|
||||||
|
const [savedAt, setSavedAt] = useState<Date | null>(null);
|
||||||
|
|
||||||
|
useEffect(() => {
|
||||||
|
api
|
||||||
|
.get<Organization>('/api/organization')
|
||||||
|
.then((o) => {
|
||||||
|
setOrg(o);
|
||||||
|
setDraft(o);
|
||||||
|
})
|
||||||
|
.catch((e) => {
|
||||||
|
if (e instanceof ApiError && e.status === 404) {
|
||||||
|
// Первый запуск — БД сидится пустой записью; пользователь заполняет с нуля.
|
||||||
|
setDraft({ name: '', inn: '' });
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
setError(String(e));
|
||||||
|
});
|
||||||
|
}, []);
|
||||||
|
|
||||||
|
async function save() {
|
||||||
|
setSaving(true);
|
||||||
|
setError(null);
|
||||||
|
try {
|
||||||
|
const saved = await api.put<Organization>('/api/organization', {
|
||||||
|
name: draft.name ?? '',
|
||||||
|
inn: draft.inn ?? '',
|
||||||
|
kpp: draft.kpp || null,
|
||||||
|
ogrn: draft.ogrn || null,
|
||||||
|
legalAddress: draft.legalAddress || null,
|
||||||
|
bankName: draft.bankName || null,
|
||||||
|
bankBik: draft.bankBik || null,
|
||||||
|
bankAccount: draft.bankAccount || null,
|
||||||
|
signatoryName: draft.signatoryName || null,
|
||||||
|
signatoryPosition: draft.signatoryPosition || null,
|
||||||
|
});
|
||||||
|
setOrg(saved);
|
||||||
|
setDraft(saved);
|
||||||
|
setSavedAt(new Date());
|
||||||
|
} catch (e) {
|
||||||
|
setError(e instanceof ApiError ? `${e.code} (${e.status})` : String(e));
|
||||||
|
} finally {
|
||||||
|
setSaving(false);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
const set = <K extends keyof Organization>(k: K, v: Organization[K] | string) =>
|
||||||
|
setDraft((d) => ({ ...d, [k]: v as Organization[K] }));
|
||||||
|
|
||||||
|
return (
|
||||||
|
<main className="content">
|
||||||
|
<h2>Реквизиты организации</h2>
|
||||||
|
<p className="hint">Будут подставляться в договоры и счета как сторона-исполнитель.</p>
|
||||||
|
|
||||||
|
<section className="form-grid">
|
||||||
|
<Field
|
||||||
|
label="Название"
|
||||||
|
value={draft.name ?? ''}
|
||||||
|
onChange={(e) => set('name', e.target.value)}
|
||||||
|
placeholder="ООО «Моя компания»"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="ИНН"
|
||||||
|
value={draft.inn ?? ''}
|
||||||
|
onChange={(e) => set('inn', e.target.value)}
|
||||||
|
placeholder="10 или 12 цифр"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="КПП"
|
||||||
|
value={draft.kpp ?? ''}
|
||||||
|
onChange={(e) => set('kpp', e.target.value)}
|
||||||
|
placeholder="9 цифр"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="ОГРН/ОГРНИП"
|
||||||
|
value={draft.ogrn ?? ''}
|
||||||
|
onChange={(e) => set('ogrn', e.target.value)}
|
||||||
|
placeholder="13 или 15 цифр"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="Юр. адрес"
|
||||||
|
value={draft.legalAddress ?? ''}
|
||||||
|
onChange={(e) => set('legalAddress', e.target.value)}
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="Банк"
|
||||||
|
value={draft.bankName ?? ''}
|
||||||
|
onChange={(e) => set('bankName', e.target.value)}
|
||||||
|
placeholder="Точка ПАО Банка ФК Открытие"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="БИК"
|
||||||
|
value={draft.bankBik ?? ''}
|
||||||
|
onChange={(e) => set('bankBik', e.target.value)}
|
||||||
|
placeholder="9 цифр"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="Расчётный счёт"
|
||||||
|
value={draft.bankAccount ?? ''}
|
||||||
|
onChange={(e) => set('bankAccount', e.target.value)}
|
||||||
|
placeholder="20 цифр"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="Подписант ФИО"
|
||||||
|
value={draft.signatoryName ?? ''}
|
||||||
|
onChange={(e) => set('signatoryName', e.target.value)}
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="Должность подписанта"
|
||||||
|
value={draft.signatoryPosition ?? ''}
|
||||||
|
onChange={(e) => set('signatoryPosition', e.target.value)}
|
||||||
|
placeholder="Генеральный директор"
|
||||||
|
/>
|
||||||
|
</section>
|
||||||
|
|
||||||
|
<div className="form-actions">
|
||||||
|
<Button variant="primary" onClick={save} disabled={saving}>
|
||||||
|
{saving ? 'Сохраняю…' : 'Сохранить'}
|
||||||
|
</Button>
|
||||||
|
{savedAt ? <span className="hint">Сохранено в {savedAt.toLocaleTimeString('ru-RU')}</span> : null}
|
||||||
|
{error ? <span className="error-text">{error}</span> : null}
|
||||||
|
{org === null && !error ? null : null}
|
||||||
|
</div>
|
||||||
|
</main>
|
||||||
|
);
|
||||||
|
}
|
||||||
@@ -0,0 +1,250 @@
|
|||||||
|
import { useEffect, useState } from 'react';
|
||||||
|
import { api, ApiError, type Service } from '../api.js';
|
||||||
|
import { Button, EmptyState, Field, Modal, Select, Textarea, formatRub } from '../components/ui.js';
|
||||||
|
|
||||||
|
const VAT_OPTIONS = [
|
||||||
|
{ value: 'none' as const, label: 'Без НДС' },
|
||||||
|
{ value: 'vat_0' as const, label: '0%' },
|
||||||
|
{ value: 'vat_5' as const, label: '5%' },
|
||||||
|
{ value: 'vat_7' as const, label: '7%' },
|
||||||
|
{ value: 'vat_10' as const, label: '10%' },
|
||||||
|
{ value: 'vat_20' as const, label: '20%' },
|
||||||
|
];
|
||||||
|
|
||||||
|
const VAT_LABEL: Record<Service['defaultVat'], string> = {
|
||||||
|
none: 'Без НДС',
|
||||||
|
vat_0: '0%',
|
||||||
|
vat_5: '5%',
|
||||||
|
vat_7: '7%',
|
||||||
|
vat_10: '10%',
|
||||||
|
vat_20: '20%',
|
||||||
|
};
|
||||||
|
|
||||||
|
type Draft = {
|
||||||
|
id?: string;
|
||||||
|
name: string;
|
||||||
|
unit: string;
|
||||||
|
priceRub: string; // строка для контрол-инпута, конвертим в копейки при отправке
|
||||||
|
defaultVat: Service['defaultVat'];
|
||||||
|
notes: string;
|
||||||
|
};
|
||||||
|
|
||||||
|
const emptyDraft = (): Draft => ({
|
||||||
|
name: '',
|
||||||
|
unit: 'шт',
|
||||||
|
priceRub: '',
|
||||||
|
defaultVat: 'none',
|
||||||
|
notes: '',
|
||||||
|
});
|
||||||
|
|
||||||
|
const toDraft = (s: Service): Draft => ({
|
||||||
|
id: s.id,
|
||||||
|
name: s.name,
|
||||||
|
unit: s.unit,
|
||||||
|
priceRub: (s.defaultPriceCents / 100).toFixed(2),
|
||||||
|
defaultVat: s.defaultVat,
|
||||||
|
notes: s.notes ?? '',
|
||||||
|
});
|
||||||
|
|
||||||
|
export function ServicesPage() {
|
||||||
|
const [items, setItems] = useState<Service[] | null>(null);
|
||||||
|
const [q, setQ] = useState('');
|
||||||
|
const [includeArchived, setIncludeArchived] = useState(false);
|
||||||
|
const [editing, setEditing] = useState<Draft | null>(null);
|
||||||
|
const [error, setError] = useState<string | null>(null);
|
||||||
|
|
||||||
|
async function load() {
|
||||||
|
setError(null);
|
||||||
|
try {
|
||||||
|
const params = new URLSearchParams();
|
||||||
|
if (q) params.set('q', q);
|
||||||
|
if (includeArchived) params.set('includeArchived', '1');
|
||||||
|
const r = await api.get<{ items: Service[] }>(`/api/services?${params.toString()}`);
|
||||||
|
setItems(r.items);
|
||||||
|
} catch (e) {
|
||||||
|
setError(String(e));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
useEffect(() => {
|
||||||
|
void load();
|
||||||
|
// eslint-disable-next-line react-hooks/exhaustive-deps
|
||||||
|
}, [q, includeArchived]);
|
||||||
|
|
||||||
|
async function save() {
|
||||||
|
if (!editing) return;
|
||||||
|
setError(null);
|
||||||
|
const priceCents = Math.round(parseFloat(editing.priceRub.replace(',', '.') || '0') * 100);
|
||||||
|
if (Number.isNaN(priceCents) || priceCents < 0) {
|
||||||
|
setError('Некорректная цена');
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
const payload = {
|
||||||
|
name: editing.name,
|
||||||
|
unit: editing.unit,
|
||||||
|
defaultPriceCents: priceCents,
|
||||||
|
defaultVat: editing.defaultVat,
|
||||||
|
notes: editing.notes || null,
|
||||||
|
};
|
||||||
|
try {
|
||||||
|
if (editing.id) {
|
||||||
|
await api.put<Service>(`/api/services/${editing.id}`, payload);
|
||||||
|
} else {
|
||||||
|
await api.post<Service>('/api/services', payload);
|
||||||
|
}
|
||||||
|
setEditing(null);
|
||||||
|
await load();
|
||||||
|
} catch (e) {
|
||||||
|
setError(e instanceof ApiError ? `${e.code} (${e.status})` : String(e));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
async function archive(s: Service) {
|
||||||
|
try {
|
||||||
|
await api.post(`/api/services/${s.id}/archive`, {});
|
||||||
|
await load();
|
||||||
|
} catch (e) {
|
||||||
|
setError(String(e));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
async function unarchive(s: Service) {
|
||||||
|
try {
|
||||||
|
await api.post(`/api/services/${s.id}/unarchive`, {});
|
||||||
|
await load();
|
||||||
|
} catch (e) {
|
||||||
|
setError(String(e));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
const set = <K extends keyof Draft>(k: K, v: Draft[K]) => setEditing((d) => (d ? { ...d, [k]: v } : d));
|
||||||
|
|
||||||
|
return (
|
||||||
|
<main className="content">
|
||||||
|
<header className="page-head">
|
||||||
|
<h2>Каталог услуг</h2>
|
||||||
|
<Button variant="primary" onClick={() => setEditing(emptyDraft())}>
|
||||||
|
+ Добавить
|
||||||
|
</Button>
|
||||||
|
</header>
|
||||||
|
|
||||||
|
<div className="toolbar">
|
||||||
|
<input
|
||||||
|
className="search"
|
||||||
|
placeholder="Поиск по названию или примечаниям…"
|
||||||
|
value={q}
|
||||||
|
onChange={(e) => setQ(e.target.value)}
|
||||||
|
/>
|
||||||
|
<label className="checkbox">
|
||||||
|
<input
|
||||||
|
type="checkbox"
|
||||||
|
checked={includeArchived}
|
||||||
|
onChange={(e) => setIncludeArchived(e.target.checked)}
|
||||||
|
/>
|
||||||
|
Показать архив
|
||||||
|
</label>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
{error ? <div className="error-text">{error}</div> : null}
|
||||||
|
|
||||||
|
{items === null ? (
|
||||||
|
<p className="hint">Загрузка…</p>
|
||||||
|
) : items.length === 0 ? (
|
||||||
|
<EmptyState>
|
||||||
|
{q ? 'Ничего не найдено.' : 'Каталог пуст. Добавьте услугу — её можно будет вставить в счёт или договор.'}
|
||||||
|
</EmptyState>
|
||||||
|
) : (
|
||||||
|
<table className="table">
|
||||||
|
<thead>
|
||||||
|
<tr>
|
||||||
|
<th>Услуга</th>
|
||||||
|
<th>Ед.</th>
|
||||||
|
<th>Цена</th>
|
||||||
|
<th>НДС</th>
|
||||||
|
<th>Статус</th>
|
||||||
|
<th aria-label="actions" />
|
||||||
|
</tr>
|
||||||
|
</thead>
|
||||||
|
<tbody>
|
||||||
|
{items.map((s) => (
|
||||||
|
<tr key={s.id} className={s.archivedAt ? 'row--archived' : ''}>
|
||||||
|
<td>
|
||||||
|
<div>{s.name}</div>
|
||||||
|
{s.notes ? <div className="hint">{s.notes}</div> : null}
|
||||||
|
</td>
|
||||||
|
<td>{s.unit}</td>
|
||||||
|
<td>{formatRub(s.defaultPriceCents)}</td>
|
||||||
|
<td>{VAT_LABEL[s.defaultVat]}</td>
|
||||||
|
<td>{s.archivedAt ? 'архив' : 'активна'}</td>
|
||||||
|
<td className="row-actions">
|
||||||
|
<Button variant="ghost" onClick={() => setEditing(toDraft(s))}>
|
||||||
|
Изменить
|
||||||
|
</Button>
|
||||||
|
{s.archivedAt ? (
|
||||||
|
<Button variant="ghost" onClick={() => unarchive(s)}>
|
||||||
|
Восстановить
|
||||||
|
</Button>
|
||||||
|
) : (
|
||||||
|
<Button variant="danger" onClick={() => archive(s)}>
|
||||||
|
В архив
|
||||||
|
</Button>
|
||||||
|
)}
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
))}
|
||||||
|
</tbody>
|
||||||
|
</table>
|
||||||
|
)}
|
||||||
|
|
||||||
|
<Modal
|
||||||
|
open={editing !== null}
|
||||||
|
title={editing?.id ? 'Изменить услугу' : 'Новая услуга'}
|
||||||
|
onClose={() => setEditing(null)}
|
||||||
|
footer={
|
||||||
|
<>
|
||||||
|
<Button variant="ghost" onClick={() => setEditing(null)}>
|
||||||
|
Отмена
|
||||||
|
</Button>
|
||||||
|
<Button variant="primary" onClick={save}>
|
||||||
|
Сохранить
|
||||||
|
</Button>
|
||||||
|
</>
|
||||||
|
}
|
||||||
|
>
|
||||||
|
<div className="form-grid">
|
||||||
|
<Field
|
||||||
|
label="Название"
|
||||||
|
value={editing?.name ?? ''}
|
||||||
|
onChange={(e) => set('name', e.target.value)}
|
||||||
|
placeholder="Монтаж видеостены"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="Единица"
|
||||||
|
value={editing?.unit ?? ''}
|
||||||
|
onChange={(e) => set('unit', e.target.value)}
|
||||||
|
placeholder="шт / час / м²"
|
||||||
|
/>
|
||||||
|
<Field
|
||||||
|
label="Цена ₽"
|
||||||
|
type="number"
|
||||||
|
inputMode="decimal"
|
||||||
|
step="0.01"
|
||||||
|
value={editing?.priceRub ?? ''}
|
||||||
|
onChange={(e) => set('priceRub', e.target.value)}
|
||||||
|
/>
|
||||||
|
<Select
|
||||||
|
label="НДС по умолчанию"
|
||||||
|
value={(editing?.defaultVat ?? 'none') as Service['defaultVat']}
|
||||||
|
onChange={(v) => set('defaultVat', v)}
|
||||||
|
options={VAT_OPTIONS}
|
||||||
|
/>
|
||||||
|
<Textarea
|
||||||
|
label="Примечания"
|
||||||
|
value={editing?.notes ?? ''}
|
||||||
|
onChange={(e) => set('notes', e.target.value)}
|
||||||
|
rows={3}
|
||||||
|
/>
|
||||||
|
</div>
|
||||||
|
</Modal>
|
||||||
|
</main>
|
||||||
|
);
|
||||||
|
}
|
||||||
@@ -0,0 +1,166 @@
|
|||||||
|
:root {
|
||||||
|
font-family: system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif;
|
||||||
|
font-size: 15px;
|
||||||
|
line-height: 1.45;
|
||||||
|
color-scheme: light dark;
|
||||||
|
}
|
||||||
|
|
||||||
|
body {
|
||||||
|
margin: 0;
|
||||||
|
background: #f6f7f9;
|
||||||
|
color: #1c1f24;
|
||||||
|
}
|
||||||
|
|
||||||
|
@media (prefers-color-scheme: dark) {
|
||||||
|
body { background: #14161a; color: #e7e8eb; }
|
||||||
|
}
|
||||||
|
|
||||||
|
.topbar {
|
||||||
|
display: flex;
|
||||||
|
align-items: center;
|
||||||
|
gap: 24px;
|
||||||
|
padding: 12px 24px;
|
||||||
|
background: #1c1f24;
|
||||||
|
color: #f6f7f9;
|
||||||
|
border-bottom: 1px solid #2a2e35;
|
||||||
|
}
|
||||||
|
.topbar h1 { margin: 0; font-size: 18px; font-weight: 600; }
|
||||||
|
.topbar nav { display: flex; gap: 16px; flex: 1; }
|
||||||
|
.topbar nav a { color: #c9cbcf; text-decoration: none; }
|
||||||
|
.topbar nav a:hover { color: #fff; }
|
||||||
|
.topbar .user { opacity: 0.7; font-size: 13px; }
|
||||||
|
|
||||||
|
.content { padding: 24px; max-width: 1200px; margin: 0 auto; }
|
||||||
|
|
||||||
|
.loading {
|
||||||
|
display: flex; align-items: center; justify-content: center;
|
||||||
|
height: 100vh; opacity: 0.6;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* === page primitives === */
|
||||||
|
.page-head {
|
||||||
|
display: flex; align-items: center; justify-content: space-between;
|
||||||
|
margin-bottom: 16px;
|
||||||
|
}
|
||||||
|
.page-head h2 { margin: 0; }
|
||||||
|
.toolbar {
|
||||||
|
display: flex; align-items: center; gap: 12px;
|
||||||
|
margin-bottom: 16px;
|
||||||
|
}
|
||||||
|
.search {
|
||||||
|
flex: 1; max-width: 360px;
|
||||||
|
padding: 8px 12px; border: 1px solid #d6d8dd; border-radius: 6px;
|
||||||
|
background: #fff; color: inherit; font-size: 14px;
|
||||||
|
}
|
||||||
|
@media (prefers-color-scheme: dark) {
|
||||||
|
.search { background: #1c1f24; border-color: #2a2e35; }
|
||||||
|
}
|
||||||
|
.checkbox {
|
||||||
|
display: inline-flex; align-items: center; gap: 6px;
|
||||||
|
font-size: 13px; cursor: pointer;
|
||||||
|
}
|
||||||
|
.hint { opacity: 0.65; font-size: 13px; margin: 4px 0; }
|
||||||
|
.error-text { color: #c0392b; font-size: 13px; margin: 8px 0; }
|
||||||
|
.empty {
|
||||||
|
padding: 48px 24px; text-align: center; opacity: 0.6;
|
||||||
|
border: 1px dashed #d6d8dd; border-radius: 8px;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* === buttons === */
|
||||||
|
.btn {
|
||||||
|
appearance: none; cursor: pointer;
|
||||||
|
padding: 6px 14px; border: 1px solid transparent; border-radius: 6px;
|
||||||
|
font-size: 14px; line-height: 1.4;
|
||||||
|
transition: background-color 0.1s, border-color 0.1s;
|
||||||
|
}
|
||||||
|
.btn:disabled { opacity: 0.5; cursor: not-allowed; }
|
||||||
|
.btn--default { background: #fff; border-color: #d6d8dd; color: inherit; }
|
||||||
|
.btn--default:hover:not(:disabled) { background: #f1f2f5; }
|
||||||
|
.btn--primary { background: #2563eb; color: #fff; }
|
||||||
|
.btn--primary:hover:not(:disabled) { background: #1d4ed8; }
|
||||||
|
.btn--danger { background: transparent; border-color: #c0392b; color: #c0392b; }
|
||||||
|
.btn--danger:hover:not(:disabled) { background: #c0392b; color: #fff; }
|
||||||
|
.btn--ghost { background: transparent; color: inherit; }
|
||||||
|
.btn--ghost:hover:not(:disabled) { background: rgba(127,127,127,0.1); }
|
||||||
|
|
||||||
|
@media (prefers-color-scheme: dark) {
|
||||||
|
.btn--default { background: #1c1f24; border-color: #2a2e35; }
|
||||||
|
.btn--default:hover:not(:disabled) { background: #25282e; }
|
||||||
|
}
|
||||||
|
|
||||||
|
/* === tables === */
|
||||||
|
.table {
|
||||||
|
width: 100%; border-collapse: collapse;
|
||||||
|
background: #fff; border-radius: 8px; overflow: hidden;
|
||||||
|
box-shadow: 0 1px 2px rgba(0,0,0,0.05);
|
||||||
|
}
|
||||||
|
.table th, .table td {
|
||||||
|
text-align: left; padding: 10px 14px; vertical-align: top;
|
||||||
|
border-bottom: 1px solid #eef0f3;
|
||||||
|
font-size: 14px;
|
||||||
|
}
|
||||||
|
.table th { font-weight: 600; opacity: 0.7; font-size: 12px; text-transform: uppercase; letter-spacing: 0.04em; }
|
||||||
|
.table tr:last-child td { border-bottom: none; }
|
||||||
|
.row-actions { white-space: nowrap; text-align: right; }
|
||||||
|
.row-actions .btn { margin-left: 6px; }
|
||||||
|
.row--archived { opacity: 0.55; }
|
||||||
|
|
||||||
|
@media (prefers-color-scheme: dark) {
|
||||||
|
.table { background: #1c1f24; box-shadow: none; }
|
||||||
|
.table th, .table td { border-bottom-color: #2a2e35; }
|
||||||
|
}
|
||||||
|
|
||||||
|
/* === fields === */
|
||||||
|
.field { display: flex; flex-direction: column; gap: 4px; }
|
||||||
|
.field__label { font-size: 12px; opacity: 0.7; }
|
||||||
|
.field__input {
|
||||||
|
padding: 8px 10px; border: 1px solid #d6d8dd; border-radius: 6px;
|
||||||
|
background: #fff; color: inherit; font-size: 14px;
|
||||||
|
font-family: inherit;
|
||||||
|
}
|
||||||
|
.field__input--area { min-height: 64px; resize: vertical; }
|
||||||
|
.field__input--err { border-color: #c0392b; }
|
||||||
|
.field__error { color: #c0392b; font-size: 12px; }
|
||||||
|
|
||||||
|
@media (prefers-color-scheme: dark) {
|
||||||
|
.field__input { background: #1c1f24; border-color: #2a2e35; }
|
||||||
|
}
|
||||||
|
|
||||||
|
.form-grid {
|
||||||
|
display: grid; grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); gap: 12px;
|
||||||
|
}
|
||||||
|
.form-actions { display: flex; align-items: center; gap: 12px; margin-top: 16px; }
|
||||||
|
|
||||||
|
/* === modal === */
|
||||||
|
.modal__backdrop {
|
||||||
|
position: fixed; inset: 0; background: rgba(0,0,0,0.5);
|
||||||
|
display: flex; align-items: center; justify-content: center;
|
||||||
|
z-index: 100; padding: 24px;
|
||||||
|
}
|
||||||
|
.modal {
|
||||||
|
background: #fff; color: inherit;
|
||||||
|
border-radius: 8px; width: min(720px, 100%);
|
||||||
|
max-height: calc(100vh - 48px); overflow: hidden;
|
||||||
|
display: flex; flex-direction: column;
|
||||||
|
box-shadow: 0 10px 40px rgba(0,0,0,0.2);
|
||||||
|
}
|
||||||
|
.modal__header {
|
||||||
|
display: flex; align-items: center; justify-content: space-between;
|
||||||
|
padding: 14px 20px; border-bottom: 1px solid #eef0f3;
|
||||||
|
}
|
||||||
|
.modal__header h3 { margin: 0; font-size: 16px; }
|
||||||
|
.modal__close {
|
||||||
|
background: none; border: none; color: inherit; cursor: pointer;
|
||||||
|
font-size: 22px; line-height: 1; padding: 4px 8px; border-radius: 4px;
|
||||||
|
}
|
||||||
|
.modal__close:hover { background: rgba(127,127,127,0.1); }
|
||||||
|
.modal__body { padding: 20px; overflow: auto; }
|
||||||
|
.modal__footer {
|
||||||
|
display: flex; justify-content: flex-end; gap: 8px;
|
||||||
|
padding: 12px 20px; border-top: 1px solid #eef0f3;
|
||||||
|
}
|
||||||
|
|
||||||
|
@media (prefers-color-scheme: dark) {
|
||||||
|
.modal { background: #1c1f24; }
|
||||||
|
.modal__header, .modal__footer { border-color: #2a2e35; }
|
||||||
|
}
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
{
|
||||||
|
"extends": "../../tsconfig.base.json",
|
||||||
|
"compilerOptions": {
|
||||||
|
"target": "ES2022",
|
||||||
|
"lib": ["ES2022", "DOM", "DOM.Iterable"],
|
||||||
|
"jsx": "react-jsx",
|
||||||
|
"module": "ESNext",
|
||||||
|
"moduleResolution": "Bundler",
|
||||||
|
"allowImportingTsExtensions": true,
|
||||||
|
"noEmit": true,
|
||||||
|
"types": ["vite/client"]
|
||||||
|
},
|
||||||
|
"include": ["src/**/*"]
|
||||||
|
}
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
{"root":["./src/app.tsx","./src/api.ts","./src/auth.ts","./src/main.tsx","./src/components/ui.tsx","./src/pages/clients.tsx","./src/pages/organization.tsx","./src/pages/services.tsx"],"version":"5.9.3"}
|
||||||
@@ -0,0 +1,16 @@
|
|||||||
|
import { defineConfig } from 'vite';
|
||||||
|
import react from '@vitejs/plugin-react';
|
||||||
|
|
||||||
|
export default defineConfig({
|
||||||
|
plugins: [react()],
|
||||||
|
server: {
|
||||||
|
host: true, // 0.0.0.0 — доступно с других устройств в LAN
|
||||||
|
port: 5173,
|
||||||
|
proxy: {
|
||||||
|
// В dev фронт ходит на API через /api и /webhooks. CORS+credentials уже настроены, но прокси убирает cross-origin.
|
||||||
|
'/api': { target: 'http://localhost:3030', changeOrigin: true },
|
||||||
|
'/webhooks': { target: 'http://localhost:3030', changeOrigin: true },
|
||||||
|
'/health': { target: 'http://localhost:3030', changeOrigin: true },
|
||||||
|
},
|
||||||
|
},
|
||||||
|
});
|
||||||
@@ -0,0 +1,19 @@
|
|||||||
|
# Заполнить и переименовать в .env (рядом с docker-compose.yml)
|
||||||
|
|
||||||
|
POSTGRES_DB=docmanager
|
||||||
|
POSTGRES_USER=docmanager
|
||||||
|
POSTGRES_PASSWORD=change-me-strong-password
|
||||||
|
|
||||||
|
# AES-256-GCM ключ для шифрования JWT-токенов Точки в БД (32 байта в base64).
|
||||||
|
# node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
|
||||||
|
TOCHKA_JWT_KEY=
|
||||||
|
|
||||||
|
# Случайная строка в URL-пути приёмника webhook (длинная, например 32+ символов).
|
||||||
|
# node -e "console.log(require('crypto').randomBytes(24).toString('hex'))"
|
||||||
|
TOCHKA_WEBHOOK_SECRET=
|
||||||
|
|
||||||
|
# UUID единственной организации в v1.
|
||||||
|
DEFAULT_ORGANIZATION_ID=00000000-0000-0000-0000-000000000001
|
||||||
|
|
||||||
|
# Токен для browserless/chromium контейнера.
|
||||||
|
CHROMIUM_TOKEN=
|
||||||
@@ -0,0 +1,24 @@
|
|||||||
|
# Caddy для Doc_manager
|
||||||
|
# Public host: doc.queo.ru (cookie-домен .queo.ru — общий с auth.queo.ru/hall.queo.ru)
|
||||||
|
|
||||||
|
doc.queo.ru {
|
||||||
|
encode zstd gzip
|
||||||
|
|
||||||
|
# API + webhooks + health → Fastify
|
||||||
|
@api path /api/* /webhooks/* /health /health/*
|
||||||
|
handle @api {
|
||||||
|
reverse_proxy api:3030
|
||||||
|
}
|
||||||
|
|
||||||
|
# Всё остальное — статика SPA
|
||||||
|
handle {
|
||||||
|
reverse_proxy web:80
|
||||||
|
}
|
||||||
|
|
||||||
|
log {
|
||||||
|
output file /data/access.log {
|
||||||
|
roll_size 10mb
|
||||||
|
roll_keep 5
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,31 @@
|
|||||||
|
FROM node:20-alpine
|
||||||
|
WORKDIR /app
|
||||||
|
RUN apk add --no-cache openssl tini
|
||||||
|
|
||||||
|
# Корневой манифест для npm workspaces
|
||||||
|
COPY package.json package-lock.json* tsconfig.base.json ./
|
||||||
|
|
||||||
|
# Манифесты воркспейсов
|
||||||
|
COPY apps/api/package.json apps/api/
|
||||||
|
COPY packages/shared/package.json packages/shared/
|
||||||
|
|
||||||
|
# Все зависимости (включая dev — нужен tsx и prisma CLI). Образ на api ~250MB,
|
||||||
|
# приемлемо для small-scale деплоя; оптимизируем многоэтапной сборкой когда понадобится.
|
||||||
|
RUN npm install --include=dev
|
||||||
|
|
||||||
|
# Исходники
|
||||||
|
COPY apps/api ./apps/api
|
||||||
|
COPY packages/shared ./packages/shared
|
||||||
|
|
||||||
|
# Prisma client (без коннекта к БД)
|
||||||
|
RUN cd apps/api && npx prisma generate
|
||||||
|
|
||||||
|
ENV NODE_ENV=production
|
||||||
|
WORKDIR /app/apps/api
|
||||||
|
EXPOSE 3030
|
||||||
|
|
||||||
|
ENTRYPOINT ["/sbin/tini", "--"]
|
||||||
|
# `prisma migrate deploy` накатывает все миграции из prisma/migrations.
|
||||||
|
# При первом деплое (миграций ещё нет) выполнит `db push` — но db push в проде
|
||||||
|
# опасен; на продакшен-этапе всегда коммитим миграции в репо через `prisma migrate dev`.
|
||||||
|
CMD ["sh", "-c", "npx prisma migrate deploy && npx tsx src/server.ts"]
|
||||||
@@ -0,0 +1,14 @@
|
|||||||
|
FROM node:20-alpine AS build
|
||||||
|
WORKDIR /app
|
||||||
|
COPY package.json package-lock.json* tsconfig.base.json ./
|
||||||
|
COPY apps/web/package.json apps/web/
|
||||||
|
COPY packages/shared/package.json packages/shared/
|
||||||
|
RUN npm install
|
||||||
|
COPY apps/web ./apps/web
|
||||||
|
COPY packages/shared ./packages/shared
|
||||||
|
RUN npm run build --workspace apps/web
|
||||||
|
|
||||||
|
FROM nginx:1.27-alpine AS runtime
|
||||||
|
COPY docker/nginx-spa.conf /etc/nginx/conf.d/default.conf
|
||||||
|
COPY --from=build /app/apps/web/dist /usr/share/nginx/html
|
||||||
|
EXPOSE 80
|
||||||
@@ -0,0 +1,61 @@
|
|||||||
|
name: doc-manager
|
||||||
|
|
||||||
|
# Деплой на queoserver (192.168.0.158): хостовый Caddy в /etc/caddy/Caddyfile
|
||||||
|
# проксирует doc.queo.ru → localhost:3031 (web с внутренним прокси /api/* → api).
|
||||||
|
# Локально для разработки используем npm run dev:demo, не этот compose.
|
||||||
|
|
||||||
|
services:
|
||||||
|
postgres:
|
||||||
|
image: postgres:16-alpine
|
||||||
|
restart: unless-stopped
|
||||||
|
environment:
|
||||||
|
POSTGRES_DB: ${POSTGRES_DB:-docmanager}
|
||||||
|
POSTGRES_USER: ${POSTGRES_USER:-docmanager}
|
||||||
|
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-docmanager}
|
||||||
|
volumes:
|
||||||
|
- pg_data:/var/lib/postgresql/data
|
||||||
|
healthcheck:
|
||||||
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-docmanager} -d ${POSTGRES_DB:-docmanager}"]
|
||||||
|
interval: 10s
|
||||||
|
timeout: 5s
|
||||||
|
retries: 5
|
||||||
|
|
||||||
|
api:
|
||||||
|
build:
|
||||||
|
context: ..
|
||||||
|
dockerfile: docker/Dockerfile.api
|
||||||
|
restart: unless-stopped
|
||||||
|
depends_on:
|
||||||
|
postgres:
|
||||||
|
condition: service_healthy
|
||||||
|
environment:
|
||||||
|
NODE_ENV: production
|
||||||
|
PORT: 3030
|
||||||
|
HOST: 0.0.0.0
|
||||||
|
DATABASE_URL: postgresql://${POSTGRES_USER:-docmanager}:${POSTGRES_PASSWORD:-docmanager}@postgres:5432/${POSTGRES_DB:-docmanager}?schema=public
|
||||||
|
AUTH_ISSUER: ${AUTH_ISSUER:-https://auth.queo.ru}
|
||||||
|
AUTH_AUDIENCE: ${AUTH_AUDIENCE:-queo.ru}
|
||||||
|
AUTH_JWKS_URL: ${AUTH_JWKS_URL:-https://auth.queo.ru/.well-known/jwks.json}
|
||||||
|
AUTH_COOKIE_NAME: q_at
|
||||||
|
AUTH_LOGIN_URL: ${AUTH_LOGIN_URL:-https://auth.queo.ru/auth/login}
|
||||||
|
CORS_ORIGINS: ${CORS_ORIGINS:-https://doc.queo.ru}
|
||||||
|
TOCHKA_JWT_KEY: ${TOCHKA_JWT_KEY:-}
|
||||||
|
TOCHKA_WEBHOOK_SECRET: ${TOCHKA_WEBHOOK_SECRET:-}
|
||||||
|
DEFAULT_ORGANIZATION_ID: ${DEFAULT_ORGANIZATION_ID:-00000000-0000-0000-0000-000000000001}
|
||||||
|
DEV_BYPASS_AUTH: "0"
|
||||||
|
expose:
|
||||||
|
- "3030"
|
||||||
|
|
||||||
|
web:
|
||||||
|
build:
|
||||||
|
context: ..
|
||||||
|
dockerfile: docker/Dockerfile.web
|
||||||
|
restart: unless-stopped
|
||||||
|
depends_on:
|
||||||
|
- api
|
||||||
|
ports:
|
||||||
|
# Хостовый Caddy на queoserver: doc.queo.ru → localhost:3031
|
||||||
|
- "127.0.0.1:3031:80"
|
||||||
|
|
||||||
|
volumes:
|
||||||
|
pg_data:
|
||||||
@@ -0,0 +1,48 @@
|
|||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name _;
|
||||||
|
root /usr/share/nginx/html;
|
||||||
|
index index.html;
|
||||||
|
|
||||||
|
# SPA fallback
|
||||||
|
location / {
|
||||||
|
try_files $uri $uri/ /index.html;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Долгий кэш для хэшированных ассетов Vite
|
||||||
|
location /assets/ {
|
||||||
|
access_log off;
|
||||||
|
expires 1y;
|
||||||
|
add_header Cache-Control "public, immutable";
|
||||||
|
}
|
||||||
|
|
||||||
|
# Прокси на API. Web и api живут в одной compose-сети, dns "api" резолвится.
|
||||||
|
# Браузер видит всё как один origin (https://doc.queo.ru), куки auth.queo.ru
|
||||||
|
# отправляются автоматически на запросы к /api/me.
|
||||||
|
location /api/ {
|
||||||
|
proxy_pass http://api:3030;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
proxy_set_header Cookie $http_cookie;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Webhook'и от Точки приходят на этот же origin.
|
||||||
|
location /webhooks/ {
|
||||||
|
proxy_pass http://api:3030;
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Host $host;
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
# Webhook payload может быть большим (тело документа PDF в base64) — не ограничиваем.
|
||||||
|
client_max_body_size 10m;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Health для мониторинга (не для пользователей).
|
||||||
|
location = /health {
|
||||||
|
proxy_pass http://api:3030;
|
||||||
|
}
|
||||||
|
}
|
||||||
Generated
+4011
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,27 @@
|
|||||||
|
{
|
||||||
|
"name": "doc-manager",
|
||||||
|
"private": true,
|
||||||
|
"version": "0.0.0",
|
||||||
|
"description": "Контракты, счета и акты с интеграцией банка Точка. Часть экосистемы Queo.",
|
||||||
|
"workspaces": [
|
||||||
|
"apps/*",
|
||||||
|
"packages/*"
|
||||||
|
],
|
||||||
|
"scripts": {
|
||||||
|
"dev": "npm run dev --workspaces --if-present",
|
||||||
|
"dev:api": "npm run dev -w @doc-manager/api",
|
||||||
|
"dev:web": "npm run dev -w @doc-manager/web",
|
||||||
|
"dev:demo": "concurrently --names api,web --prefix-colors blue,green \"npm:dev:demo:api\" \"npm:dev:web\"",
|
||||||
|
"dev:demo:api": "npm run dev:demo -w @doc-manager/api",
|
||||||
|
"build": "npm run build --workspaces --if-present",
|
||||||
|
"typecheck": "npm run typecheck --workspaces --if-present",
|
||||||
|
"prisma:generate": "npm run prisma:generate -w @doc-manager/api",
|
||||||
|
"prisma:migrate": "npm run prisma:migrate -w @doc-manager/api"
|
||||||
|
},
|
||||||
|
"engines": {
|
||||||
|
"node": ">=20"
|
||||||
|
},
|
||||||
|
"devDependencies": {
|
||||||
|
"concurrently": "^9.2.1"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,23 @@
|
|||||||
|
{
|
||||||
|
"name": "@doc-manager/shared",
|
||||||
|
"version": "0.0.0",
|
||||||
|
"private": true,
|
||||||
|
"type": "module",
|
||||||
|
"main": "./src/index.ts",
|
||||||
|
"types": "./src/index.ts",
|
||||||
|
"exports": {
|
||||||
|
".": "./src/index.ts",
|
||||||
|
"./blocks": "./src/blocks/schema.ts",
|
||||||
|
"./tochka": "./src/tochka/dto.ts",
|
||||||
|
"./auth": "./src/auth/types.ts"
|
||||||
|
},
|
||||||
|
"scripts": {
|
||||||
|
"typecheck": "tsc --noEmit"
|
||||||
|
},
|
||||||
|
"dependencies": {
|
||||||
|
"zod": "^3.23.8"
|
||||||
|
},
|
||||||
|
"devDependencies": {
|
||||||
|
"typescript": "^5.6.3"
|
||||||
|
}
|
||||||
|
}
|
||||||
@@ -0,0 +1,30 @@
|
|||||||
|
import { z } from 'zod';
|
||||||
|
|
||||||
|
// Контракт JWT-payload, выдаваемого auth.queo.ru.
|
||||||
|
// Источник: C:\project\Auth_server\backend\src\services\tokens.js
|
||||||
|
export const PermissionRole = z.enum(['viewer', 'user', 'admin']);
|
||||||
|
export type PermissionRole = z.infer<typeof PermissionRole>;
|
||||||
|
|
||||||
|
export const AuthPayload = z.object({
|
||||||
|
sub: z.string().uuid(),
|
||||||
|
email: z.string().email(),
|
||||||
|
groups: z.array(z.string()).default([]),
|
||||||
|
permissions: z.record(PermissionRole).default({}),
|
||||||
|
isSuperuser: z.boolean().default(false),
|
||||||
|
iat: z.number().optional(),
|
||||||
|
exp: z.number().optional(),
|
||||||
|
iss: z.literal('https://auth.queo.ru').optional(),
|
||||||
|
aud: z.union([z.literal('queo.ru'), z.array(z.string())]).optional(),
|
||||||
|
});
|
||||||
|
export type AuthPayload = z.infer<typeof AuthPayload>;
|
||||||
|
|
||||||
|
export const DOC_MANAGER_RESOURCE = 'doc_manager' as const;
|
||||||
|
|
||||||
|
// Иерархия ролей: admin ⊃ user ⊃ viewer
|
||||||
|
export function hasDocPermission(payload: AuthPayload, required: PermissionRole): boolean {
|
||||||
|
if (payload.isSuperuser) return true;
|
||||||
|
const role = payload.permissions[DOC_MANAGER_RESOURCE];
|
||||||
|
if (!role) return false;
|
||||||
|
const order: PermissionRole[] = ['viewer', 'user', 'admin'];
|
||||||
|
return order.indexOf(role) >= order.indexOf(required);
|
||||||
|
}
|
||||||
@@ -0,0 +1,115 @@
|
|||||||
|
import { z } from 'zod';
|
||||||
|
|
||||||
|
// TipTap-совместимое JSON-дерево rich-текста.
|
||||||
|
// Не валидируем глубоко — TipTap отдаёт собственный формат, нам важно только сохранить и доставить.
|
||||||
|
export const RichTextSchema: z.ZodType<unknown> = z.object({
|
||||||
|
type: z.string(),
|
||||||
|
content: z.array(z.lazy((): z.ZodType<unknown> => RichTextSchema)).optional(),
|
||||||
|
text: z.string().optional(),
|
||||||
|
marks: z.array(z.object({ type: z.string(), attrs: z.record(z.unknown()).optional() })).optional(),
|
||||||
|
attrs: z.record(z.unknown()).optional(),
|
||||||
|
});
|
||||||
|
|
||||||
|
export type RichText = z.infer<typeof RichTextSchema>;
|
||||||
|
|
||||||
|
// VAT-ставки актуальные на 2026-04 (включая 5% и 7% для УСН-плательщиков).
|
||||||
|
// Имена совпадают с TS-клиентом Prisma (в БД хранится как '0','5',... через @map).
|
||||||
|
// При отправке в Tochka API используется отдельный маппер (см. packages/shared/src/tochka/dto.ts).
|
||||||
|
export const VatRate = z.enum(['none', 'vat_0', 'vat_5', 'vat_7', 'vat_10', 'vat_20']);
|
||||||
|
export type VatRate = z.infer<typeof VatRate>;
|
||||||
|
|
||||||
|
export const VAT_LABEL: Record<VatRate, string> = {
|
||||||
|
none: 'Без НДС',
|
||||||
|
vat_0: '0%',
|
||||||
|
vat_5: '5%',
|
||||||
|
vat_7: '7%',
|
||||||
|
vat_10: '10%',
|
||||||
|
vat_20: '20%',
|
||||||
|
};
|
||||||
|
|
||||||
|
export const VAT_PERCENT: Record<VatRate, number> = {
|
||||||
|
none: 0,
|
||||||
|
vat_0: 0,
|
||||||
|
vat_5: 5,
|
||||||
|
vat_7: 7,
|
||||||
|
vat_10: 10,
|
||||||
|
vat_20: 20,
|
||||||
|
};
|
||||||
|
|
||||||
|
const blockBase = z.object({ id: z.string().min(1) });
|
||||||
|
|
||||||
|
export const HeadingBlock = blockBase.extend({
|
||||||
|
type: z.literal('heading'),
|
||||||
|
level: z.union([z.literal(1), z.literal(2), z.literal(3)]),
|
||||||
|
text: RichTextSchema,
|
||||||
|
});
|
||||||
|
|
||||||
|
export const ParagraphBlock = blockBase.extend({
|
||||||
|
type: z.literal('paragraph'),
|
||||||
|
text: RichTextSchema,
|
||||||
|
});
|
||||||
|
|
||||||
|
export const PartyBind = z.discriminatedUnion('kind', [
|
||||||
|
z.object({ kind: z.literal('client'), clientId: z.string().uuid().optional() }),
|
||||||
|
z.object({ kind: z.literal('self') }),
|
||||||
|
]);
|
||||||
|
|
||||||
|
export const PartyBlock = blockBase.extend({
|
||||||
|
type: z.literal('party'),
|
||||||
|
role: z.enum(['executor', 'customer']),
|
||||||
|
bind: PartyBind,
|
||||||
|
});
|
||||||
|
|
||||||
|
export const ServicesTableBlock = blockBase.extend({
|
||||||
|
type: z.literal('services_table'),
|
||||||
|
columns: z.array(z.enum(['name', 'qty', 'unit', 'price', 'vat', 'sum'])).min(1),
|
||||||
|
// строки услуг живут в таблице document_lines; здесь только ссылки на строки этого документа
|
||||||
|
lines: z.array(z.object({ lineId: z.string().uuid() })),
|
||||||
|
});
|
||||||
|
|
||||||
|
export const TotalsBlock = blockBase.extend({
|
||||||
|
type: z.literal('totals'),
|
||||||
|
showVat: z.boolean(),
|
||||||
|
showInWords: z.boolean(),
|
||||||
|
});
|
||||||
|
|
||||||
|
export const TermsBlock = blockBase.extend({
|
||||||
|
type: z.literal('terms'),
|
||||||
|
text: RichTextSchema,
|
||||||
|
});
|
||||||
|
|
||||||
|
export const SignaturesBlock = blockBase.extend({
|
||||||
|
type: z.literal('signatures'),
|
||||||
|
sides: z.array(z.enum(['executor', 'customer'])).min(1),
|
||||||
|
});
|
||||||
|
|
||||||
|
export const CustomTextBlock = blockBase.extend({
|
||||||
|
type: z.literal('custom_text'),
|
||||||
|
text: RichTextSchema,
|
||||||
|
});
|
||||||
|
|
||||||
|
export const PageBreakBlock = blockBase.extend({
|
||||||
|
type: z.literal('page_break'),
|
||||||
|
});
|
||||||
|
|
||||||
|
export const Block = z.discriminatedUnion('type', [
|
||||||
|
HeadingBlock,
|
||||||
|
ParagraphBlock,
|
||||||
|
PartyBlock,
|
||||||
|
ServicesTableBlock,
|
||||||
|
TotalsBlock,
|
||||||
|
TermsBlock,
|
||||||
|
SignaturesBlock,
|
||||||
|
CustomTextBlock,
|
||||||
|
PageBreakBlock,
|
||||||
|
]);
|
||||||
|
export type Block = z.infer<typeof Block>;
|
||||||
|
|
||||||
|
export const DocBody = z.object({
|
||||||
|
version: z.literal(1),
|
||||||
|
blocks: z.array(Block),
|
||||||
|
vars: z.record(z.unknown()).default({}),
|
||||||
|
});
|
||||||
|
export type DocBody = z.infer<typeof DocBody>;
|
||||||
|
|
||||||
|
export const emptyDocBody = (): DocBody => ({ version: 1, blocks: [], vars: {} });
|
||||||
@@ -0,0 +1,3 @@
|
|||||||
|
export * from './blocks/schema.js';
|
||||||
|
export * from './tochka/dto.js';
|
||||||
|
export * from './auth/types.js';
|
||||||
@@ -0,0 +1,74 @@
|
|||||||
|
import { z } from 'zod';
|
||||||
|
|
||||||
|
export const TochkaEnv = z.enum(['sandbox', 'prod']);
|
||||||
|
export type TochkaEnv = z.infer<typeof TochkaEnv>;
|
||||||
|
|
||||||
|
export const TochkaBaseUrl: Record<TochkaEnv, string> = {
|
||||||
|
sandbox: 'https://enter.tochka.com/sandbox/v2',
|
||||||
|
prod: 'https://enter.tochka.com/uapi',
|
||||||
|
};
|
||||||
|
|
||||||
|
// Минимальный набор полей для M4. Расширим, когда возьмёмся за акты/УПД.
|
||||||
|
export const TochkaSecondSide = z.object({
|
||||||
|
inn: z.string().min(10).max(12),
|
||||||
|
kpp: z.string().length(9).optional(),
|
||||||
|
legalAddress: z.string().optional(),
|
||||||
|
contactName: z.string().optional(),
|
||||||
|
contactEmail: z.string().email().optional(),
|
||||||
|
contactPhone: z.string().optional(),
|
||||||
|
});
|
||||||
|
export type TochkaSecondSide = z.infer<typeof TochkaSecondSide>;
|
||||||
|
|
||||||
|
export const TochkaInvoiceLine = z.object({
|
||||||
|
name: z.string(),
|
||||||
|
measure: z.string(), // ед. измерения, напр. "шт", "час"
|
||||||
|
amount: z.number().positive(), // количество
|
||||||
|
price: z.number().nonnegative(), // цена за единицу в рублях (Точка ждёт число, не копейки)
|
||||||
|
vatRate: z.enum(['none', '0', '5', '7', '10', '20']),
|
||||||
|
});
|
||||||
|
export type TochkaInvoiceLine = z.infer<typeof TochkaInvoiceLine>;
|
||||||
|
|
||||||
|
export const TochkaCreateInvoiceRequest = z.object({
|
||||||
|
Data: z.object({
|
||||||
|
accountId: z.string(),
|
||||||
|
customerCode: z.string(),
|
||||||
|
documentNumber: z.string().optional(),
|
||||||
|
documentDate: z.string().optional(), // YYYY-MM-DD
|
||||||
|
secondSide: TochkaSecondSide,
|
||||||
|
items: z.array(TochkaInvoiceLine).min(1),
|
||||||
|
paymentExpiryDate: z.string().optional(),
|
||||||
|
}),
|
||||||
|
});
|
||||||
|
export type TochkaCreateInvoiceRequest = z.infer<typeof TochkaCreateInvoiceRequest>;
|
||||||
|
|
||||||
|
export const TochkaCreateInvoiceResponse = z.object({
|
||||||
|
Data: z.object({
|
||||||
|
documentId: z.string(),
|
||||||
|
}),
|
||||||
|
});
|
||||||
|
|
||||||
|
// Webhook payloads (минимум, что мы используем для статуса оплаты).
|
||||||
|
export const TochkaWebhookEvent = z.object({
|
||||||
|
webhookType: z.enum([
|
||||||
|
'incomingPayment',
|
||||||
|
'incomingSbpPayment',
|
||||||
|
'outgoingPayment',
|
||||||
|
'incomingSbpB2BPayment',
|
||||||
|
]),
|
||||||
|
paymentId: z.string(),
|
||||||
|
amount: z.number().optional(),
|
||||||
|
payerInn: z.string().optional(),
|
||||||
|
payerName: z.string().optional(),
|
||||||
|
purpose: z.string().optional(),
|
||||||
|
paidAt: z.string().optional(),
|
||||||
|
});
|
||||||
|
export type TochkaWebhookEvent = z.infer<typeof TochkaWebhookEvent>;
|
||||||
|
|
||||||
|
export const TochkaPaymentStatus = z.enum([
|
||||||
|
'awaiting_payment',
|
||||||
|
'partially_paid',
|
||||||
|
'paid',
|
||||||
|
'overdue',
|
||||||
|
'cancelled',
|
||||||
|
]);
|
||||||
|
export type TochkaPaymentStatus = z.infer<typeof TochkaPaymentStatus>;
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
{
|
||||||
|
"extends": "../../tsconfig.base.json",
|
||||||
|
"compilerOptions": {
|
||||||
|
"rootDir": "./src",
|
||||||
|
"outDir": "./dist",
|
||||||
|
"declaration": true,
|
||||||
|
"noEmit": true
|
||||||
|
},
|
||||||
|
"include": ["src/**/*"]
|
||||||
|
}
|
||||||
@@ -0,0 +1,17 @@
|
|||||||
|
{
|
||||||
|
"compilerOptions": {
|
||||||
|
"target": "ES2022",
|
||||||
|
"module": "ESNext",
|
||||||
|
"moduleResolution": "Bundler",
|
||||||
|
"lib": ["ES2022"],
|
||||||
|
"strict": true,
|
||||||
|
"noUncheckedIndexedAccess": true,
|
||||||
|
"exactOptionalPropertyTypes": true,
|
||||||
|
"esModuleInterop": true,
|
||||||
|
"resolveJsonModule": true,
|
||||||
|
"skipLibCheck": true,
|
||||||
|
"forceConsistentCasingInFileNames": true,
|
||||||
|
"isolatedModules": true,
|
||||||
|
"verbatimModuleSyntax": true
|
||||||
|
}
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user