feat(backend): complete AI and business migration

2026-07-17 09:12:45 +03:00
parent 42f165b27e
commit 64a5f96872
23 changed files with 1286 additions and 409 deletions
@@ -0,0 +1,89 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import path from "node:path";
+
+const runtimeRoots = [
+  "app/(dashboard)/chat",
+  "app/(dashboard)/business",
+  "app/api/chat",
+  "app/api/finance-analysis",
+  "app/api/project-risk",
+];
+const files = runtimeRoots
+  .flatMap(walk)
+  .filter((file) => /\.(ts|tsx)$/.test(file));
+const violations = [];
+
+for (const file of files) {
+  const content = fs.readFileSync(path.join(process.cwd(), file), "utf8");
+  if (/[@/]lib\/supabase|createServiceRoleClient|\bsupabase\b/i.test(content)) {
+    violations.push(`${file}: Supabase runtime reference`);
+  }
+  if (/NEXT_PUBLIC_SUPABASE|SUPABASE_SERVICE_ROLE/.test(content)) {
+    violations.push(`${file}: Supabase environment dependency`);
+  }
+  if (/\blocalStorage\b/.test(content)) {
+    violations.push(`${file}: browser localStorage dependency`);
+  }
+}
+
+for (const route of [
+  "app/api/chat/route.ts",
+  "app/api/finance-analysis/route.ts",
+  "app/api/project-risk/route.ts",
+]) {
+  const content = fs.readFileSync(path.join(process.cwd(), route), "utf8");
+  if (/body\.(apiKey|provider)|create(OpenAI|Groq|GoogleGenerativeAI)/.test(content)) {
+    violations.push(`${route}: provider or secret is selected from the route/browser boundary`);
+  }
+}
+
+const chatPage = fs.readFileSync(
+  path.join(process.cwd(), "app/(dashboard)/chat/page.tsx"),
+  "utf8",
+);
+if (/\bapiKey\b|\bprovider\b/.test(chatPage)) {
+  violations.push("app/(dashboard)/chat/page.tsx: AI secret/provider leaked to browser code");
+}
+
+assert.deepEqual(
+  violations,
+  [],
+  `Phase 7 backend boundary violations:\n${violations.join("\n")}`,
+);
+
+for (const required of [
+  "server/ai/context.ts",
+  "server/ai/provider.ts",
+  "server/ai/responses.ts",
+  "app/(dashboard)/chat/actions.ts",
+  "scripts/phase7-domain-smoke.ts",
+]) {
+  assert.ok(fs.existsSync(path.join(process.cwd(), required)), `Missing Phase 7 artifact: ${required}`);
+}
+
+const allRuntimeSources = [
+  ...walk("app"),
+  ...walk("server"),
+].filter((file) => /\.(ts|tsx)$/.test(file));
+for (const file of allRuntimeSources) {
+  const content = fs.readFileSync(path.join(process.cwd(), file), "utf8");
+  assert.doesNotMatch(
+    content,
+    /from\s+["'][^"']*lib\/ai\/embeddings["']/,
+    `Legacy Supabase embeddings helper is imported at runtime by ${file}`,
+  );
+}
+
+console.log(`Phase 7 backend boundary passed (${files.length} files scanned).`);
+
+function walk(relativePath) {
+  const absolutePath = path.join(process.cwd(), relativePath);
+  if (!fs.existsSync(absolutePath)) return [];
+  const stat = fs.statSync(absolutePath);
+  if (stat.isFile()) return [relativePath];
+  return fs.readdirSync(absolutePath, { withFileTypes: true }).flatMap((entry) => {
+    const child = path.join(relativePath, entry.name);
+    return entry.isDirectory() ? walk(child) : [child];
+  });
+}