Commit Graph

6 Commits

Author SHA1 Message Date
Ho Ngoc Hai
0abf9df84e fix(db): add missing Review.userId index for FK query performance
The Review table was missing an index on userId, causing full table scans
when querying reviews by user. All other FK columns across 22 models were
verified to have proper indexes already (including Listing.sellerId which
was added in a prior migration).

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-08 22:43:59 +07:00
Ho Ngoc Hai
3864f78405 feat(subscriptions): implement subscription quota enforcement
- Apply QuotaGuard + @RequireQuota to listing creation and analytics endpoints
- Add QuotaExceeded domain event emitted when quota is exceeded
- Create ListingCreatedUsageHandler to auto-meter usage on listing creation
- Create QuotaExceededListener to send email notifications on quota exceeded
- Add maxAnalyticsQueries and maxMediaUploads fields to Plan model
- Add quota.exceeded email notification template
- Define quota limits per plan tier in seed data
- Add 15 unit tests covering guard, event handler, listener, and event

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-08 14:16:32 +07:00
Ho Ngoc Hai
47c34f129e fix(db): add LeadStatus enum, Transaction.buyerId FK, Inquiry compound index
- Convert Lead.status from String to LeadStatus enum (NEW, CONTACTED, QUALIFIED, NEGOTIATING, CONVERTED, LOST) with safe data migration
- Add FK constraint Transaction.buyerId -> User.id to prevent orphaned transactions
- Add compound index on Inquiry(listingId, userId) for duplicate inquiry checks

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-08 13:17:24 +07:00
Ho Ngoc Hai
9583d1cb66 fix(payments): harden payment flow with idempotency keys, amount validation, and magic byte file validation
- Add dedicated idempotencyKey column with unique constraint (userId, provider, idempotencyKey) to prevent duplicate payments at DB level
- Add @Min(1) @Max(100B) validators on amountVND in CreatePaymentDto to reject invalid amounts at API boundary
- Replace read-check-write callback handler with atomic updateIfStatus to eliminate race condition on concurrent callbacks
- Add magic byte verification in FileValidationPipe to validate file content matches declared MIME type server-side

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-08 06:18:26 +07:00
Ho Ngoc Hai
f55c8a8788 feat(db): add missing FK indexes on Listing, Payment, Subscription
- Add @@index([sellerId]) and @@index([propertyId]) to Listing model
- Add @@index([transactionId]) to Payment model
- Add @@index([planId]) to Subscription model
- Prevents full table scans on frequently-queried foreign keys

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-08 04:02:13 +07:00
Ho Ngoc Hai
ff358f6148 feat(db): add initial Prisma migration and seed script
- Add init migration with all 23 models including PostGIS
- Add seed script for districts, plans, and sample data

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-08 02:04:30 +07:00