|
| 1 | +import { db } from '@sim/db' |
| 2 | +import { copilotChats, user, workflow, workspace } from '@sim/db/schema' |
| 3 | +import { createLogger } from '@sim/logger' |
| 4 | +import { eq } from 'drizzle-orm' |
| 5 | +import { NextRequest, NextResponse } from 'next/server' |
| 6 | +import { getSession } from '@/lib/auth' |
| 7 | +import { parseWorkflowJson } from '@/lib/workflows/operations/import-export' |
| 8 | +import { |
| 9 | + loadWorkflowFromNormalizedTables, |
| 10 | + saveWorkflowToNormalizedTables, |
| 11 | +} from '@/lib/workflows/persistence/utils' |
| 12 | +import { sanitizeForExport } from '@/lib/workflows/sanitization/json-sanitizer' |
| 13 | + |
| 14 | +const logger = createLogger('SuperUserImportWorkflow') |
| 15 | + |
| 16 | +interface ImportWorkflowRequest { |
| 17 | + workflowId: string |
| 18 | + targetWorkspaceId: string |
| 19 | +} |
| 20 | + |
| 21 | +/** |
| 22 | + * POST /api/superuser/import-workflow |
| 23 | + * |
| 24 | + * Superuser endpoint to import a workflow by ID along with its copilot chats. |
| 25 | + * This creates a copy of the workflow in the target workspace with new IDs. |
| 26 | + * Only the workflow structure and copilot chats are copied - no deployments, |
| 27 | + * webhooks, triggers, or other sensitive data. |
| 28 | + */ |
| 29 | +export async function POST(request: NextRequest) { |
| 30 | + try { |
| 31 | + const session = await getSession() |
| 32 | + if (!session?.user?.id) { |
| 33 | + return NextResponse.json({ error: 'Unauthorized' }, { status: 401 }) |
| 34 | + } |
| 35 | + |
| 36 | + // Verify the user is a superuser |
| 37 | + const [currentUser] = await db |
| 38 | + .select({ isSuperUser: user.isSuperUser }) |
| 39 | + .from(user) |
| 40 | + .where(eq(user.id, session.user.id)) |
| 41 | + .limit(1) |
| 42 | + |
| 43 | + if (!currentUser?.isSuperUser) { |
| 44 | + logger.warn('Non-superuser attempted to access import-workflow endpoint', { |
| 45 | + userId: session.user.id, |
| 46 | + }) |
| 47 | + return NextResponse.json({ error: 'Forbidden: Superuser access required' }, { status: 403 }) |
| 48 | + } |
| 49 | + |
| 50 | + const body: ImportWorkflowRequest = await request.json() |
| 51 | + const { workflowId, targetWorkspaceId } = body |
| 52 | + |
| 53 | + if (!workflowId) { |
| 54 | + return NextResponse.json({ error: 'workflowId is required' }, { status: 400 }) |
| 55 | + } |
| 56 | + |
| 57 | + if (!targetWorkspaceId) { |
| 58 | + return NextResponse.json({ error: 'targetWorkspaceId is required' }, { status: 400 }) |
| 59 | + } |
| 60 | + |
| 61 | + // Verify target workspace exists |
| 62 | + const [targetWorkspace] = await db |
| 63 | + .select({ id: workspace.id, ownerId: workspace.ownerId }) |
| 64 | + .from(workspace) |
| 65 | + .where(eq(workspace.id, targetWorkspaceId)) |
| 66 | + .limit(1) |
| 67 | + |
| 68 | + if (!targetWorkspace) { |
| 69 | + return NextResponse.json({ error: 'Target workspace not found' }, { status: 404 }) |
| 70 | + } |
| 71 | + |
| 72 | + // Get the source workflow |
| 73 | + const [sourceWorkflow] = await db |
| 74 | + .select() |
| 75 | + .from(workflow) |
| 76 | + .where(eq(workflow.id, workflowId)) |
| 77 | + .limit(1) |
| 78 | + |
| 79 | + if (!sourceWorkflow) { |
| 80 | + return NextResponse.json({ error: 'Source workflow not found' }, { status: 404 }) |
| 81 | + } |
| 82 | + |
| 83 | + // Load the workflow state from normalized tables |
| 84 | + const normalizedData = await loadWorkflowFromNormalizedTables(workflowId) |
| 85 | + |
| 86 | + if (!normalizedData) { |
| 87 | + return NextResponse.json( |
| 88 | + { error: 'Workflow has no normalized data - cannot import' }, |
| 89 | + { status: 400 } |
| 90 | + ) |
| 91 | + } |
| 92 | + |
| 93 | + // Use existing export logic to create export format |
| 94 | + const workflowState = { |
| 95 | + blocks: normalizedData.blocks, |
| 96 | + edges: normalizedData.edges, |
| 97 | + loops: normalizedData.loops, |
| 98 | + parallels: normalizedData.parallels, |
| 99 | + metadata: { |
| 100 | + name: sourceWorkflow.name, |
| 101 | + description: sourceWorkflow.description ?? undefined, |
| 102 | + color: sourceWorkflow.color, |
| 103 | + }, |
| 104 | + } |
| 105 | + |
| 106 | + const exportData = sanitizeForExport(workflowState) |
| 107 | + |
| 108 | + // Use existing import logic (parseWorkflowJson regenerates IDs automatically) |
| 109 | + const { data: importedData, errors } = parseWorkflowJson(JSON.stringify(exportData)) |
| 110 | + |
| 111 | + if (!importedData || errors.length > 0) { |
| 112 | + return NextResponse.json( |
| 113 | + { error: `Failed to parse workflow: ${errors.join(', ')}` }, |
| 114 | + { status: 400 } |
| 115 | + ) |
| 116 | + } |
| 117 | + |
| 118 | + // Create new workflow record |
| 119 | + const newWorkflowId = crypto.randomUUID() |
| 120 | + const now = new Date() |
| 121 | + |
| 122 | + await db.insert(workflow).values({ |
| 123 | + id: newWorkflowId, |
| 124 | + userId: session.user.id, |
| 125 | + workspaceId: targetWorkspaceId, |
| 126 | + folderId: null, // Don't copy folder association |
| 127 | + name: `[Debug Import] ${sourceWorkflow.name}`, |
| 128 | + description: sourceWorkflow.description, |
| 129 | + color: sourceWorkflow.color, |
| 130 | + lastSynced: now, |
| 131 | + createdAt: now, |
| 132 | + updatedAt: now, |
| 133 | + isDeployed: false, // Never copy deployment status |
| 134 | + runCount: 0, |
| 135 | + variables: sourceWorkflow.variables || {}, |
| 136 | + }) |
| 137 | + |
| 138 | + // Save using existing persistence logic |
| 139 | + const saveResult = await saveWorkflowToNormalizedTables(newWorkflowId, importedData) |
| 140 | + |
| 141 | + if (!saveResult.success) { |
| 142 | + // Clean up the workflow record if save failed |
| 143 | + await db.delete(workflow).where(eq(workflow.id, newWorkflowId)) |
| 144 | + return NextResponse.json( |
| 145 | + { error: `Failed to save workflow state: ${saveResult.error}` }, |
| 146 | + { status: 500 } |
| 147 | + ) |
| 148 | + } |
| 149 | + |
| 150 | + // Copy copilot chats associated with the source workflow |
| 151 | + const sourceCopilotChats = await db |
| 152 | + .select() |
| 153 | + .from(copilotChats) |
| 154 | + .where(eq(copilotChats.workflowId, workflowId)) |
| 155 | + |
| 156 | + let copilotChatsImported = 0 |
| 157 | + |
| 158 | + for (const chat of sourceCopilotChats) { |
| 159 | + await db.insert(copilotChats).values({ |
| 160 | + userId: session.user.id, |
| 161 | + workflowId: newWorkflowId, |
| 162 | + title: chat.title ? `[Import] ${chat.title}` : null, |
| 163 | + messages: chat.messages, |
| 164 | + model: chat.model, |
| 165 | + conversationId: null, // Don't copy conversation ID |
| 166 | + previewYaml: chat.previewYaml, |
| 167 | + planArtifact: chat.planArtifact, |
| 168 | + config: chat.config, |
| 169 | + createdAt: new Date(), |
| 170 | + updatedAt: new Date(), |
| 171 | + }) |
| 172 | + copilotChatsImported++ |
| 173 | + } |
| 174 | + |
| 175 | + logger.info('Superuser imported workflow', { |
| 176 | + userId: session.user.id, |
| 177 | + sourceWorkflowId: workflowId, |
| 178 | + newWorkflowId, |
| 179 | + targetWorkspaceId, |
| 180 | + copilotChatsImported, |
| 181 | + }) |
| 182 | + |
| 183 | + return NextResponse.json({ |
| 184 | + success: true, |
| 185 | + newWorkflowId, |
| 186 | + copilotChatsImported, |
| 187 | + }) |
| 188 | + } catch (error) { |
| 189 | + logger.error('Error importing workflow', error) |
| 190 | + return NextResponse.json({ error: 'Internal server error' }, { status: 500 }) |
| 191 | + } |
| 192 | +} |
0 commit comments