Rename vendors to third parties

Renames the user-facing 'vendor' concept to 'third party' across the entire codebase. The shared common_third_parties reference table is unchanged. Migration. Renames the vendor_category enum, the vendors and vendor_<entity> tables (contacts, services, compliance_reports, business_associate_agreements, data_privacy_agreements, risk_assessments) and their vendor_id columns, the asset_vendors / data_vendors / processing_activity_vendors junction tables, generated_documents.vendors_document_id, the webhook_event_type 'vendor:<verb>' values, and the snapshots_type 'VENDORS' value. Backend. Renames coredata models and SQL queries, probo services, GraphQL / MCP API surface, console / trust / webhook resolvers and types, the CLI (prb vendor* -> prb third-party*; pkg/cmd/vendormgmt -> pkg/cmd/thirdpartymgmt), the document generator, vetting agent prompts, and the common-third-parties-import command. Frontend, packages, n8n, e2e. Renames apps/console pages, components, hooks, routes, dialogs, and tabs; the shared @probo/vendors package (now @probo/third-parties); the @probo/ui Vendors atoms (now ThirdParties, VendorLogo -> ThirdPartyLogo); the n8n community node actions/vendor folder (now actions/thirdParty); and the e2e Go test suite (console and MCP). Filesystem and URL paths use kebab-case (third-parties), GraphQL fields and TypeScript identifiers use camelCase (thirdParty / thirdParties), Go types use PascalCase (ThirdParty), and human-facing text uses 'third party' with a space. Co-authored-by: Bryan Frimin <bryan@getprobo.com> Signed-off-by: Bryan Frimin <bryan@getprobo.com> Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-05-13 16:15:33 +02:00
parent 9eed0d71c8
commit eecbe4c46c
281 changed files with 8491 additions and 8425 deletions
--- a/pkg/coredata/processing_activity_third_party.go
+++ b/pkg/coredata/processing_activity_third_party.go
@@ -0,0 +1,121 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package coredata
+
+import (
+	"context"
+	"fmt"
+	"time"
+
+	"github.com/jackc/pgx/v5"
+	"go.gearno.de/kit/pg"
+	"go.probo.inc/probo/pkg/gid"
+)
+
+type (
+	ProcessingActivityThirdParty struct {
+		ProcessingActivityID gid.GID      `db:"processing_activity_id"`
+		ThirdPartyID         gid.GID      `db:"third_party_id"`
+		TenantID             gid.TenantID `db:"tenant_id"`
+		SnapshotID           *gid.GID     `db:"snapshot_id"`
+		CreatedAt            time.Time    `db:"created_at"`
+	}
+
+	ProcessingActivityThirdParties []*ProcessingActivityThirdParty
+)
+
+func (pav ProcessingActivityThirdParties) Merge(
+	ctx context.Context,
+	conn pg.Querier,
+	scope Scoper,
+	processingActivityID gid.GID,
+	organizationID gid.GID,
+	thirdPartyIDs []gid.GID,
+) error {
+	q := `
+WITH third_party_ids AS (
+	SELECT
+		unnest(@third_party_ids::text[]) AS third_party_id,
+		@tenant_id AS tenant_id,
+		@processing_activity_id AS processing_activity_id,
+		@organization_id AS organization_id,
+		@created_at::timestamptz AS created_at
+)
+MERGE INTO processing_activity_third_parties AS tgt
+USING third_party_ids AS src
+ON tgt.tenant_id = src.tenant_id
+	AND tgt.processing_activity_id = src.processing_activity_id
+	AND tgt.third_party_id = src.third_party_id
+WHEN NOT MATCHED
+	THEN INSERT (tenant_id, processing_activity_id, third_party_id, organization_id, created_at)
+		VALUES (src.tenant_id, src.processing_activity_id, src.third_party_id, src.organization_id, src.created_at)
+	WHEN NOT MATCHED BY SOURCE
+		AND tgt.tenant_id = @tenant_id AND tgt.processing_activity_id = @processing_activity_id
+		THEN DELETE
+	`
+
+	args := pgx.StrictNamedArgs{
+		"tenant_id":              scope.GetTenantID(),
+		"processing_activity_id": processingActivityID,
+		"organization_id":        organizationID,
+		"created_at":             time.Now(),
+		"third_party_ids":        thirdPartyIDs,
+	}
+
+	_, err := conn.Exec(ctx, q, args)
+	if err != nil {
+		return fmt.Errorf("cannot merge processing activity thirdParties: %w", err)
+	}
+
+	return nil
+}
+
+func (pav ProcessingActivityThirdParties) Insert(
+	ctx context.Context,
+	conn pg.Tx,
+	scope Scoper,
+	processingActivityID gid.GID,
+	organizationID gid.GID,
+	thirdPartyIDs []gid.GID,
+) error {
+	q := `
+WITH third_party_ids AS (
+	SELECT unnest(@third_party_ids::text[]) AS third_party_id
+)
+INSERT INTO processing_activity_third_parties (tenant_id, processing_activity_id, third_party_id, organization_id, created_at)
+SELECT
+	@tenant_id AS tenant_id,
+	@processing_activity_id AS processing_activity_id,
+	third_party_id,
+	@organization_id AS organization_id,
+	@created_at AS created_at
+FROM third_party_ids
+`
+
+	args := pgx.StrictNamedArgs{
+		"tenant_id":              scope.GetTenantID(),
+		"processing_activity_id": processingActivityID,
+		"organization_id":        organizationID,
+		"created_at":             time.Now(),
+		"third_party_ids":        thirdPartyIDs,
+	}
+
+	_, err := conn.Exec(ctx, q, args)
+	if err != nil {
+		return fmt.Errorf("cannot insert processing activity thirdParties: %w", err)
+	}
+
+	return nil
+}