Extract complianceportal package from trust and probo

Split the compliance portal into an admin-facing management side and a public-facing visitor side under pkg/complianceportal. Trust-center CRUD, domains, custom links, frameworks, files and accesses move out of pkg/probo, and the visitor read logic moves out of pkg/trust. IAM actions migrate onto compliance-portal scopes. Signed-off-by: Bryan Frimin <bryan@probo.com>
2026-07-10 15:12:51 +02:00
parent 55a8e72c17
commit 44ad34561e
41 changed files with 2102 additions and 1544 deletions
--- a/pkg/complianceportal/management/service.go
+++ b/pkg/complianceportal/management/service.go
@@ -0,0 +1,105 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@probo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+// Package management holds the scoped, admin-facing compliance portal services
+// (trust center CRUD, domains, frameworks, external URLs, references, files and
+// accesses). It is the write side of the compliance portal feature.
+package management
+
+import (
+	"io"
+
+	"github.com/aws/aws-sdk-go-v2/service/s3"
+	"go.gearno.de/kit/log"
+	"go.gearno.de/kit/pg"
+	"go.probo.inc/probo/pkg/certmanager"
+	"go.probo.inc/probo/pkg/filemanager"
+	"go.probo.inc/probo/pkg/filevalidation"
+	"go.probo.inc/probo/pkg/slack"
+)
+
+const (
+	NameMaxLength    = 100
+	TitleMaxLength   = 1000
+	ContentMaxLength = 5000
+)
+
+type (
+	// Service is the admin-facing compliance portal service. It exposes the
+	// scoped CRUD operations for the trust center and its related resources as
+	// methods on a single type.
+	Service struct {
+		pg            *pg.Client
+		s3            *s3.Client
+		bucket        string
+		baseURL       string
+		baseDomain    string
+		fileManager   *filemanager.Service
+		certManager   *certmanager.Service
+		logger        *log.Logger
+		SlackMessages *slack.Service
+		fileValidator *filevalidation.FileValidator
+	}
+
+	// FileUpload is an in-memory file supplied by a caller for upload.
+	FileUpload struct {
+		Content     io.Reader
+		Filename    string
+		Size        int64
+		ContentType string
+	}
+
+	// File is an in-memory file supplied by a caller for upload.
+	File struct {
+		Content     io.Reader
+		Filename    string
+		Size        int64
+		ContentType string
+	}
+)
+
+func NewService(
+	pgClient *pg.Client,
+	s3Client *s3.Client,
+	bucket string,
+	baseURL string,
+	baseDomain string,
+	fileManagerService *filemanager.Service,
+	certManagerService *certmanager.Service,
+	slackService *slack.Service,
+	logger *log.Logger,
+) *Service {
+	return &Service{
+		pg:            pgClient,
+		s3:            s3Client,
+		bucket:        bucket,
+		baseURL:       baseURL,
+		baseDomain:    baseDomain,
+		fileManager:   fileManagerService,
+		certManager:   certManagerService,
+		logger:        logger,
+		SlackMessages: slackService,
+		fileValidator: filevalidation.NewValidator(
+			filevalidation.WithCategories(
+				filevalidation.CategoryData,
+				filevalidation.CategoryDocument,
+				filevalidation.CategoryImage,
+				filevalidation.CategoryPresentation,
+				filevalidation.CategorySpreadsheet,
+				filevalidation.CategoryText,
+			),
+			filevalidation.WithMaxFileSize(10*1024*1024), // 10MB
+		),
+	}
+}