ubiquitous-invention/apps/web/server/routers/properties.ts
Randall Stillwell c582d621ce multi-tenancy: promote workspaces to top-level table
Block A of the EchoDo plan. Workspaces used to live as `objects(type='workspace')`,
which made it impossible to put a real RLS-friendly tenant boundary on the schema
or to give each workspace a stable URL slug. This commit:

- Adds a top-level `workspaces` table (slug unique, owner FK, plan_tier hook).
- Migrates the 8 anchor tables (objects, workspace_members, object_type_defs,
  property_definitions, templates, forms, markdown_backlog_items,
  cursor_sync_mappings) to FK into `workspaces.id` instead of `objects.id`,
  with a hand-augmented data-copy migration that preserves IDs and slug-collision-
  proofs on backfill.
- Introduces a `workspaceProcedure` tRPC middleware + `resolveWorkspace` helper
  that take a UUID-or-slug `workspace` handle and expose `ctx.workspace`. All
  tenant-scoped routers (objects, types, properties, templates, forms, search,
  ai, relations, favorites) now flow through it.
- Updates the web app to pass `workspace` slugs from the URL (or store) instead
  of the old `workspaceId`, including a workspace-sync layer that rewrites
  /<UUID>/... links to /<slug>/...
- Updates the MCP tools (list_objects, create_object, search_objects) and the
  workspace://{handle}/tree resource to accept either a slug or UUID so existing
  agents keep working.
- Adds a Create Workspace dialog and a Workspace Settings page (rename + slug
  rename with redirect, owner-only archive).

Verified locally against a fresh Postgres: migration applies cleanly, slug
uniqueness holds, tenant data is isolated by workspace_id, slug↔UUID resolution
works in both directions, and ON DELETE CASCADE cleans up child rows in the
correct workspace only.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-06 23:02:55 -05:00

146 lines
4.1 KiB
TypeScript

import { TRPCError } from "@trpc/server";
import { z } from "zod";
import { and, asc, eq } from "drizzle-orm";
import {
objects,
propertyDefinitions,
propertyValues,
} from "@tasks/database/schema";
import { router, workspaceProcedure } from "@/server/trpc";
export const propertiesRouter = router({
listDefinitions: workspaceProcedure.query(async ({ ctx }) => {
const definitions = await ctx.db
.select()
.from(propertyDefinitions)
.where(eq(propertyDefinitions.workspaceId, ctx.workspace.id))
.orderBy(asc(propertyDefinitions.sortOrder), asc(propertyDefinitions.id));
return { definitions };
}),
createDefinition: workspaceProcedure
.input(
z.object({
name: z.string().min(1).max(255),
fieldType: z.string().min(1).max(50),
config: z.any().optional(),
}),
)
.mutation(async ({ ctx, input }) => {
const [created] = await ctx.db
.insert(propertyDefinitions)
.values({
workspaceId: ctx.workspace.id,
name: input.name,
fieldType: input.fieldType,
config: input.config ?? null,
})
.returning();
if (!created) {
throw new TRPCError({
code: "INTERNAL_SERVER_ERROR",
message: "Failed to create property definition",
});
}
return created;
}),
getValues: workspaceProcedure
.input(z.object({ objectId: z.string().uuid() }))
.query(async ({ ctx, input }) => {
// Confirm the target object lives in this workspace.
const [obj] = await ctx.db
.select({ id: objects.id })
.from(objects)
.where(and(eq(objects.id, input.objectId), eq(objects.workspaceId, ctx.workspace.id)))
.limit(1);
if (!obj) {
throw new TRPCError({ code: "NOT_FOUND", message: "Object not found" });
}
const rows = await ctx.db
.select({
valueRow: propertyValues,
definition: propertyDefinitions,
})
.from(propertyValues)
.innerJoin(
propertyDefinitions,
eq(propertyValues.propertyDefId, propertyDefinitions.id),
)
.where(eq(propertyValues.objectId, input.objectId))
.orderBy(asc(propertyDefinitions.sortOrder), asc(propertyDefinitions.id));
return {
values: rows.map((r) => ({
...r.valueRow,
definition: r.definition,
})),
};
}),
setValue: workspaceProcedure
.input(
z.object({
objectId: z.string().uuid(),
propertyDefId: z.string().uuid(),
value: z.any(),
}),
)
.mutation(async ({ ctx, input }) => {
// Verify both the target object and the property definition belong to
// the resolved workspace before writing.
const [obj] = await ctx.db
.select({ id: objects.id })
.from(objects)
.where(and(eq(objects.id, input.objectId), eq(objects.workspaceId, ctx.workspace.id)))
.limit(1);
if (!obj) {
throw new TRPCError({ code: "NOT_FOUND", message: "Object not found" });
}
const [def] = await ctx.db
.select({ id: propertyDefinitions.id })
.from(propertyDefinitions)
.where(
and(
eq(propertyDefinitions.id, input.propertyDefId),
eq(propertyDefinitions.workspaceId, ctx.workspace.id),
),
)
.limit(1);
if (!def) {
throw new TRPCError({ code: "NOT_FOUND", message: "Property definition not found" });
}
const now = new Date();
const [row] = await ctx.db
.insert(propertyValues)
.values({
objectId: input.objectId,
propertyDefId: input.propertyDefId,
value: input.value,
updatedAt: now,
})
.onConflictDoUpdate({
target: [propertyValues.objectId, propertyValues.propertyDefId],
set: {
value: input.value,
updatedAt: now,
},
})
.returning();
if (!row) {
throw new TRPCError({
code: "INTERNAL_SERVER_ERROR",
message: "Failed to set property value",
});
}
return row;
}),
});