Merge pull request #2 from topcoder-platform/develop

dev to master sync

Author: Gunasekar-K

.env.example

@@ -1,5 +1,9 @@
 DATABASE_URL="postgresql://postgres:postgres@localhost:5432/topcoder-services?schema=billing-accounts"
 
+# Connection string for the Members DB used by import:access
+# Example: postgresql://postgres:postgres@localhost:5432/topcoder-services?schema=members
+MEMBER_DB_URL=""
+
 # Auth (tc-core-library-js)
 AUTH_SECRET=""                  
 AUTH0_URL=""                    # e.g. https://topcoder-dev.auth0.com/ (optional)

.github/workflows/code_reviewer.yml

@@ -0,0 +1,22 @@
+name: AI PR Reviewer
+
+on:
+    pull_request:
+        types:
+            - opened
+            - synchronize
+permissions:
+    pull-requests: write
+jobs:
+    tc-ai-pr-review:
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout Repo
+              uses: actions/checkout@v3
+
+            - name: TC AI PR Reviewer
+              uses: topcoder-platform/tc-ai-pr-reviewer@master
+              with:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # The GITHUB_TOKEN is there by default so you just need to keep it like it is and not necessarily need to add it as secret as it will throw an error. [More Details](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#about-the-github_token-secret)
+                  LAB45_API_KEY: ${{ secrets.LAB45_API_KEY }}
+                  exclude: '**/*.json, **/*.md, **/*.jpg, **/*.png, **/*.jpeg, **/*.bmp, **/*.webp' # Optional: exclude patterns separated by commas

.gitignore

@@ -2,6 +2,7 @@
 /dist
 /node_modules
 /build
+dist
 
 # Logs
 logs
@@ -56,3 +57,4 @@ pids
 report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
 
 /generated/prisma
+node_modules

Dockerfile

@@ -21,11 +21,13 @@ RUN pnpm build
 
 # ---- Production Stage ----
 FROM base AS production
-ENV NODE_ENV production
+ENV NODE_ENV=production
+# Install OpenSSL runtime (provides libssl.so.3 for Prisma musl OpenSSL 3)
+RUN apk add --no-cache openssl
 # Copy built application from the build stage
 COPY --from=build /usr/src/app/dist ./dist
-# Copy production dependencies from the deps stage
-COPY --from=deps /usr/src/app/node_modules ./node_modules
+# Copy production dependencies (including generated Prisma client) from the build stage
+COPY --from=build /usr/src/app/node_modules ./node_modules
 
 # Expose the application port
 EXPOSE 3000

README.md

@@ -3,16 +3,22 @@
 **Project structure:**
 - NestJS project
 - Prisma schema for Clients, Billing Accounts, Locked & Consumed amounts
+  - BillingAccount `id` is a Postgres `INT` auto-increment sequence (numeric, increasing)
 - Endpoints:
   - `GET /billing-accounts` 
   - `POST /billing-accounts` 
   - `GET /billing-accounts/:billingAccountId` (includes locked/consumed arrays + budget totals)
   - `PATCH /billing-accounts/:billingAccountId`
   - `PATCH /billing-accounts/:billingAccountId/lock-amount` (0 amount = unlock)
   - `PATCH /billing-accounts/:billingAccountId/consume-amount` (deletes locks for challenge, then upserts consumed)
+  - `GET /billing-accounts/:billingAccountId/users` (list users with access)
+  - `POST /billing-accounts/:billingAccountId/users` (grant access; accepts `{ param: { userId } }` or `{ userId }`)
+  - `DELETE /billing-accounts/:billingAccountId/users/:userId` (revoke access)
+  - `GET /billing-accounts/:billingAccountId/users/:userId/access` (boolean access check)
   - `GET /clients` (search by name/codeName/status/date range; sort & pagination)
   - `GET /clients/:clientId`
   - `PATCH /clients/:clientId`
+  - `POST /clients`
 
 **Authorization**
 - JWT middleware via `tc-core-library-js` attaches `req.authUser`
@@ -33,3 +39,65 @@ pnpm run dev
 # or
 pnpm run build && pnpm start
 ```
+
+## Import scripts
+
+- Legacy import (clients, billing accounts, challenge budgets):
+  - `pnpm run import:legacy -- <file1.json> [file2.json ...] [--defaultClientId=<id>]`
+
+- BillingAccountAccess import (from time_oltp exports):
+  - Requires `MEMBER_DB_URL` in `.env` pointing to the Members DB.
+  - Usage:
+    - `pnpm run import:access -- /mnt/export/billing_accounts/time_oltp:project_manager_1.json /mnt/export/billing_accounts/time_oltp:user_account_1.json`
+  - The script will:
+    - Read `time_oltp:project_manager` and `time_oltp:user_account` records
+    - For each project manager row, map `project_id` to `BillingAccountAccess.billingAccountId`
+    - Lookup the matching `user_account` by `user_account_id`, then query the Members DB by `user_name` (handle)
+    - Upsert `BillingAccountAccess` for the resolved `userId`
+
+## Downstream Usage
+
+- This service is consumed (directly or indirectly) by multiple Topcoder apps. The pointers below help with debugging.
+
+**platform-ui**
+
+- Admin pages use v6 endpoints to manage Clients, Billing Accounts, and Billing Account resources (users):
+  - Search billing accounts: `GET /v6/billing-accounts?{filters}&page&perPage&sortBy&sortOrder`.
+  - Get billing account detail: `GET /v6/billing-accounts/{id}`.
+  - Create billing account: `POST /v6/billing-accounts`.
+  - Update billing account: `PATCH /v6/billing-accounts/{id}`.
+  - List billing account users: `GET /v6/billing-accounts/{id}/users`.
+  - Add billing account user: `POST /v6/billing-accounts/{id}/users` with `{ param: { userId } }`.
+  - Remove billing account user: `DELETE /v6/billing-accounts/{id}/users/{userId}`.
+  - Search clients: `GET /v6/clients?{filters}&page&perPage&sortBy&sortOrder`.
+  - Get client detail: `GET /v6/clients/{id}`.
+  - Create client: `POST /v6/clients`.
+  - Update client: `PATCH /v6/clients/{id}`.
+- Key references in the UI codebase:
+  - `platform-ui/src/apps/admin/src/lib/services/billing-accounts.service.ts`
+  - `platform-ui/src/apps/admin/src/lib/services/client.service.ts`
+  - `platform-ui/src/apps/admin/src/lib/hooks/useManageBillingAccounts.ts`
+  - `platform-ui/src/apps/admin/src/lib/hooks/useManageBillingAccountDetail.ts`
+  - `platform-ui/src/apps/admin/src/lib/hooks/useManageBillingAccountResources.ts`
+  - `platform-ui/src/apps/admin/src/lib/hooks/useManageAddBillingAccount.ts`
+  - `platform-ui/src/apps/admin/src/lib/hooks/useManageAddBillingAccountResource.ts`
+- Local dev proxy maps the Billing Accounts & Clients routes to this service:
+  - See `platform-ui/src/config/environments/local.env.ts` for entries routing `/v6/billing-accounts` and `/v6/clients` (and `/v5/billing-accounts`) to `http://localhost:3010`.
+  - Swagger is available at `http://localhost:<PORT>/v6/billing-accounts/api-docs` (default `<PORT>` is `3000` per `.env.example`). Adjust the proxy or service port as needed.
+
+**community-app**
+
+- Doesn't use
+
+**work-manager**
+
+- Work Manager does not call this API directly. It loads billing account options and selections through the Projects API, e.g.:
+  - `GET {PROJECTS_API_URL}/{projectId}/billingAccounts`
+  - `GET {PROJECTS_API_URL}/{projectId}/billingAccount`
+- Key references in the Work Manager codebase:
+  - `work-manager/src/services/projects.js`
+  - UI wiring in containers/components under `work-manager/src/containers/Challenges` and `work-manager/src/components/`
+- If/when Work Manager migrates to call this service directly, equivalent v6 endpoints include:
+  - Search/list: `GET /v6/billing-accounts?{filters}` (supports `userId`, `clientId`, `status`, and date range filters)
+  - Detail: `GET /v6/billing-accounts/{id}`
+  - Access check: `GET /v6/billing-accounts/{id}/users/{userId}/access`