feat: configure audit log embedding per document

packages/lib/server-only/envelope/get-envelope-for-recipient-signing.ts

@@ -40,6 +40,7 @@ export const ZEnvelopeForSigningResponse = z.object({
     documentMeta: DocumentMetaSchema.pick({
       signingOrder: true,
       distributionMethod: true,
+      includeAuditLog: true,
       timezone: true,
       dateFormat: true,
       redirectUrl: true,

packages/lib/server-only/envelope/update-envelope.ts

@@ -4,7 +4,14 @@ import type { CreateDocumentAuditLogDataResponse } from '@documenso/lib/utils/do
 import { createDocumentAuditLogData } from '@documenso/lib/utils/document-audit-logs';
 import { prisma } from '@documenso/prisma';
 import type { DocumentMeta, DocumentVisibility, Prisma, TemplateType } from '@prisma/client';
-import { DocumentStatus, EnvelopeType, FolderType, WebhookTriggerEvents } from '@prisma/client';
+import {
+  DocumentStatus,
+  EnvelopeType,
+  FolderType,
+  RecipientRole,
+  SendStatus,
+  WebhookTriggerEvents,
+} from '@prisma/client';
 import { isDeepEqual } from 'remeda';
 
 import { TEAM_DOCUMENT_VISIBILITY_MAP } from '../../constants/teams';
@@ -137,6 +144,28 @@ export const updateEnvelope = async ({
     }
   }
 
+  if (
+    envelope.type === EnvelopeType.DOCUMENT &&
+    meta.includeAuditLog !== undefined &&
+    meta.includeAuditLog !== envelope.documentMeta.includeAuditLog
+  ) {
+    const sentRecipientCount = await prisma.recipient.count({
+      where: {
+        envelopeId: envelope.id,
+        role: {
+          not: RecipientRole.CC,
+        },
+        sendStatus: SendStatus.SENT,
+      },
+    });
+
+    if (sentRecipientCount > 0) {
+      throw new AppError(AppErrorCode.INVALID_BODY, {
+        message: 'Audit log embedding can only be changed before the document is sent',
+      });
+    }
+  }
+
   let folderUpdateQuery: Prisma.FolderUpdateOneWithoutEnvelopesNestedInput | undefined;
 
   // Validate folder ID.
@@ -182,11 +211,6 @@ export const updateEnvelope = async ({
   const isGlobalActionSame =
     documentGlobalActionAuth === undefined || isDeepEqual(documentGlobalActionAuth, newGlobalActionAuth);
   const isDocumentVisibilitySame = data.visibility === undefined || data.visibility === envelope.visibility;
-  const isFolderSame = data.folderId === undefined || data.folderId === envelope.folderId;
-  const isTemplateTypeSame = data.templateType === undefined || data.templateType === envelope.templateType;
-  const isPublicDescriptionSame =
-    data.publicDescription === undefined || data.publicDescription === envelope.publicDescription;
-  const isPublicTitleSame = data.publicTitle === undefined || data.publicTitle === envelope.publicTitle;
 
   const auditLogs: CreateDocumentAuditLogDataResponse[] = [];
 
@@ -266,36 +290,6 @@ export const updateEnvelope = async ({
     );
   }
 
-  // Todo: Decide if we want to log moving the document around.
-  // if (!isFolderSame) {
-  //   auditLogs.push(
-  //     createDocumentAuditLogData({
-  //       type: DOCUMENT_AUDIT_LOG_TYPE.DOCUMENT_FOLDER_UPDATED,
-  //       envelopeId: envelope.id,
-  //       metadata: requestMetadata,
-  //       data: {
-  //         from: envelope.folderId,
-  //         to: data.folderId || '',
-  //       },
-  //     }),
-  //   );
-  // }
-
-  // Todo: Determine if changes are made
-  // Commented out since we didn't detect the changes to sequence.
-  // const isMetaSame = isDeepEqual(envelope.documentMeta, meta);
-  // Early return if nothing is required.
-  // if (
-  //   auditLogs.length === 0 &&
-  //   data.useLegacyFieldInsertion === undefined &&
-  //   isFolderSame &&
-  //   isTemplateTypeSame &&
-  //   isPublicDescriptionSame &&
-  //   isPublicTitleSame
-  // ) {
-  //   return envelope;
-  // }
-
   const updatedEnvelope = await prisma.$transaction(async (tx) => {
     const result = await tx.envelope.update({
       where: {