feat(desktop): implement workspace foundation + desktop-client skeleton

Plan 0 (workspaces): add workspaces + workspace_memberships schema, extend JWT/Actor/claims with primary_workspace_id, seed default workspace per tenant, thread workspace_id through tenant monitoring quota. Plan A (desktop skeleton): new Electron app (apps/desktop-client) with main/ preload/renderer, shared Vue component package (packages/ui-shared), and server surface — desktop client registration + token rotation + heartbeat, SSE task event stream, desktop accounts/tasks/content handlers, publish job endpoint, and supporting repositories, services, sqlc queries, and migrations. Hard cutover per plan: remove browser-extension monitoring callback endpoints, stub legacy media API in admin-web, and delete monitoring_callback_handler.go.
2026-04-19 14:18:20 +08:00
parent 98f9e95875
commit b16e9f0bd1
141 changed files with 21533 additions and 357 deletions
@@ -0,0 +1,113 @@
+package transport
+
+import (
+	"strconv"
+
+	"github.com/gin-gonic/gin"
+	"github.com/google/uuid"
+
+	"github.com/geo-platform/tenant-api/internal/bootstrap"
+	"github.com/geo-platform/tenant-api/internal/shared/auth"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+	"github.com/geo-platform/tenant-api/internal/tenant/app"
+	"github.com/geo-platform/tenant-api/internal/tenant/repository"
+)
+
+type DesktopAccountHandler struct {
+	svc *app.DesktopAccountService
+}
+
+func NewDesktopAccountHandler(a *bootstrap.App) *DesktopAccountHandler {
+	return &DesktopAccountHandler{
+		svc: app.NewDesktopAccountService(
+			repository.NewDesktopAccountRepository(a.DB),
+		),
+	}
+}
+
+func (h *DesktopAccountHandler) List(c *gin.Context) {
+	if clientQuery := c.Query("client"); clientQuery != "" && clientQuery != "self" {
+		response.Error(c, response.ErrBadRequest(40081, "invalid_client_query", "client query must be self"))
+		return
+	}
+
+	data, err := h.svc.ListByClient(c.Request.Context(), MustDesktopClient(c.Request.Context()))
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *DesktopAccountHandler) Upsert(c *gin.Context) {
+	var req app.UpsertDesktopAccountRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+
+	data, err := h.svc.Upsert(c.Request.Context(), MustDesktopClient(c.Request.Context()), req)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.SuccessWithStatus(c, 201, data)
+}
+
+func (h *DesktopAccountHandler) Patch(c *gin.Context) {
+	desktopID, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Error(c, response.ErrBadRequest(40082, "invalid_desktop_account_id", "desktop account id must be a uuid"))
+		return
+	}
+
+	var req app.PatchDesktopAccountRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+
+	data, err := h.svc.Patch(c.Request.Context(), MustDesktopClient(c.Request.Context()), desktopID, req)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *DesktopAccountHandler) Delete(c *gin.Context) {
+	desktopID, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Error(c, response.ErrBadRequest(40082, "invalid_desktop_account_id", "desktop account id must be a uuid"))
+		return
+	}
+
+	ifSyncVersion, err := strconv.ParseInt(c.Query("if_sync_version"), 10, 64)
+	if err != nil {
+		response.Error(c, response.ErrBadRequest(40083, "invalid_sync_version", "if_sync_version must be an integer"))
+		return
+	}
+
+	data, err := h.svc.Tombstone(c.Request.Context(), MustDesktopClient(c.Request.Context()), desktopID, ifSyncVersion)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *DesktopAccountHandler) RequestDelete(c *gin.Context) {
+	desktopID, err := uuid.Parse(c.Param("id"))
+	if err != nil {
+		response.Error(c, response.ErrBadRequest(40082, "invalid_desktop_account_id", "desktop account id must be a uuid"))
+		return
+	}
+
+	actor := auth.MustActor(c.Request.Context())
+	data, err := h.svc.RequestDelete(c.Request.Context(), actor, desktopID, c.Query("undo") == "true")
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}