mirror of
https://github.com/hanzoai/sign.git
synced 2026-10-21 01:21:51 +00:00
zooqueen
15d742477b
Envelope id allocation now establishes the counter row it reads, so the first document on a database that has never allocated one gets id 1. Nothing inside a transaction reaches the global Prisma client any more. Base SQLite serves one write connection, so a second client waiting on the lock the transaction already holds stalls until the busy timeout and the transaction dies. Webhooks, job triggers and verification emails are side effects of committed state, so they fire after the commit; the organisation link no longer nests a second transaction inside itself; and a recipient lookup in the v1 field API reads on its own transaction. EXISTS subqueries name a column. Postgres accepts an empty select list, SQLite does not, which is what stopped the seal sweep, the unsealed document view and signing volume from running at all. Also: - the profile form saves a name before a signature exists, matching the server schema, instead of failing validation with nothing to show - every upload reads its error from one place, so a failed template upload says template - the documents filter strip scrolls its selected tab into view - the inbox and support headings use the shared page header - one settings nav item, so a click lands on the link and fires once - the command dialog names itself for screen readers, and the mobile search and menu buttons carry labels - documentation links point at docs.hanzo.ai - the organisations row links to the organisation - the app is called Hanzo Sign throughout, the wordmark variables are declared to turbo, and the webhook secret rides a valid header name
115 lines
4.2 KiB
TypeScript
115 lines
4.2 KiB
TypeScript
import { DocumentStatus, EnvelopeType, RecipientRole, SigningStatus } from '@prisma/client';
|
|
import { DateTime } from 'luxon';
|
|
|
|
import { epochMs, kyselyPrisma, sql } from '@hanzo/esign-prisma';
|
|
|
|
import { mapSecondaryIdToDocumentId } from '../../../utils/envelope';
|
|
import { jobs } from '../../client';
|
|
import type { JobRunIO } from '../../client/_internal/job';
|
|
import type { TSealDocumentSweepJobDefinition } from './seal-document-sweep';
|
|
|
|
export const run = async ({ io }: { payload: TSealDocumentSweepJobDefinition; io: JobRunIO }) => {
|
|
const now = DateTime.now();
|
|
const fifteenMinutesAgo = now.minus({ minutes: 15 }).toJSDate();
|
|
const sixHoursAgo = now.minus({ hours: 6 }).toJSDate();
|
|
|
|
// Find all PENDING envelopes that should have been sealed but weren't.
|
|
//
|
|
// A document is ready to seal when either:
|
|
// 1. All recipients are SIGNED or have role CC (normal completion)
|
|
// 2. Any recipient has REJECTED (rejection triggers immediate seal)
|
|
//
|
|
// We only look at documents where the last action was between 15 minutes
|
|
// and 6 hours ago. The lower bound avoids racing with the normal seal-document
|
|
// job that fires on completion. The upper bound stops us from endlessly retrying
|
|
// documents that are stuck due to a deeper issue (e.g. corrupt PDF).
|
|
const unsealedEnvelopes = await kyselyPrisma.$kysely
|
|
.selectFrom('Envelope')
|
|
.select(['Envelope.id', 'Envelope.secondaryId'])
|
|
.where('Envelope.status', '=', sql.lit(DocumentStatus.PENDING))
|
|
.where('Envelope.type', '=', sql.lit(EnvelopeType.DOCUMENT))
|
|
.where('Envelope.deletedAt', 'is', null)
|
|
// Ensure there is at least one recipient.
|
|
.where((eb) =>
|
|
eb.exists(
|
|
eb
|
|
.selectFrom('Recipient')
|
|
.whereRef('Recipient.envelopeId', '=', 'Envelope.id')
|
|
.select(sql.lit(1).as('one')),
|
|
),
|
|
)
|
|
// Document is ready to seal: all recipients are SIGNED/CC, or any recipient REJECTED.
|
|
.where((eb) =>
|
|
eb.or([
|
|
// Case 1: All recipients are either SIGNED or CC.
|
|
eb.not(
|
|
eb.exists(
|
|
eb
|
|
.selectFrom('Recipient')
|
|
.whereRef('Recipient.envelopeId', '=', 'Envelope.id')
|
|
.where('Recipient.signingStatus', '!=', sql.lit(SigningStatus.SIGNED))
|
|
.where('Recipient.role', '!=', sql.lit(RecipientRole.CC))
|
|
.select(sql.lit(1).as('one')),
|
|
),
|
|
),
|
|
// Case 2: Any recipient has rejected.
|
|
eb.exists(
|
|
eb
|
|
.selectFrom('Recipient')
|
|
.whereRef('Recipient.envelopeId', '=', 'Envelope.id')
|
|
.where('Recipient.signingStatus', '=', sql.lit(SigningStatus.REJECTED))
|
|
.select(sql.lit(1).as('one')),
|
|
),
|
|
]),
|
|
)
|
|
// Exclude envelopes where a recipient signed/rejected within the last 15 minutes
|
|
// to avoid racing with the standard completion flow.
|
|
.where((eb) =>
|
|
eb.not(
|
|
eb.exists(
|
|
eb
|
|
.selectFrom('Recipient')
|
|
.whereRef('Recipient.envelopeId', '=', 'Envelope.id')
|
|
.where('Recipient.signedAt', '>', epochMs(fifteenMinutesAgo))
|
|
.select(sql.lit(1).as('one')),
|
|
),
|
|
),
|
|
)
|
|
// Exclude envelopes where all activity is older than 6 hours.
|
|
// These are likely stuck due to a deeper issue and should not be retried.
|
|
.where((eb) =>
|
|
eb.exists(
|
|
eb
|
|
.selectFrom('Recipient')
|
|
.whereRef('Recipient.envelopeId', '=', 'Envelope.id')
|
|
.where('Recipient.signedAt', '>', epochMs(sixHoursAgo))
|
|
.select(sql.lit(1).as('one')),
|
|
),
|
|
)
|
|
.limit(100)
|
|
.execute();
|
|
|
|
if (unsealedEnvelopes.length === 0) {
|
|
io.logger.info('No unsealed documents found');
|
|
return;
|
|
}
|
|
|
|
io.logger.info(`Found ${unsealedEnvelopes.length} unsealed documents`);
|
|
|
|
await Promise.allSettled(
|
|
unsealedEnvelopes.map(async (envelope) => {
|
|
const documentId = mapSecondaryIdToDocumentId(envelope.secondaryId);
|
|
|
|
io.logger.info(`Triggering seal for document ${documentId} (${envelope.id})`);
|
|
|
|
await jobs.triggerJob({
|
|
name: 'internal.seal-document',
|
|
payload: {
|
|
documentId,
|
|
isResealing: true,
|
|
},
|
|
});
|
|
}),
|
|
);
|
|
};
|