Account import & export

app/assets/stylesheets/notifications.css

@@ -95,12 +95,12 @@
     display: none;
 
     .notifications--on & {
-      display: block;
+      display: inline;
     }
   }
 
   .notifications__off-message {
-    display: block;
+    display: inline;
 
     .notifications--on & {
       display: none;

app/assets/stylesheets/settings.css

@@ -13,18 +13,21 @@
     }
   }
 
+  /* Sections & Panels
+  /* -------------------------------------------------------------------------- */
+
   .settings__panel {
     --panel-size: 100%;
     --panel-padding: calc(var(--settings-spacer) / 1);
 
     display: flex;
     flex-direction: column;
-    gap: calc(var(--settings-spacer) / 2);
+    gap: var(--panel-padding);
     min-block-size: 100%;
     min-inline-size: 0;
 
-    @media (min-width: 960px) {
-      --panel-padding: calc(var(--settings-spacer) * 1.5) calc(var(--settings-spacer) * 2);
+    @media (min-width: 640px) {
+      --panel-padding: calc(var(--settings-spacer) * 2);
     }
   }
 
@@ -36,6 +39,20 @@
     }
   }
 
+  .settings__section {
+    h2 {
+      font-size: var(--text-large);
+    }
+
+    > * + * {
+      margin-block-start: calc(var(--panel-padding) / 2);
+    }
+
+    &:is(:first-child):has(h2) {
+      margin-top: -0.33lh; /* Align h2 letters caps with panel padding */
+    }
+  }
+
   /* Users
   /* ------------------------------------------------------------------------ */
 

app/controllers/account/exports_controller.rb

@@ -1,4 +1,5 @@
 class Account::ExportsController < ApplicationController
+  before_action :ensure_admin_or_owner
   before_action :ensure_export_limit_not_exceeded, only: :create
   before_action :set_export, only: :show
 
@@ -13,8 +14,12 @@ def create
   end
 
   private
+    def ensure_admin_or_owner
+      head :forbidden unless Current.user.admin? || Current.user.owner?
+    end
+
     def ensure_export_limit_not_exceeded
-      head :too_many_requests if Current.user.exports.current.count >= CURRENT_EXPORT_LIMIT
+      head :too_many_requests if Current.account.exports.current.count >= CURRENT_EXPORT_LIMIT
     end
 
     def set_export

app/controllers/imports_controller.rb

@@ -0,0 +1,38 @@
+class ImportsController < ApplicationController
+  disallow_account_scope
+
+  layout "public"
+
+  def new
+  end
+
+  def create
+    account = create_account_for_import
+
+    Current.set(account: account) do
+      @import = account.imports.create!(identity: Current.identity, file: params[:file])
+    end
+
+    @import.perform_later
+    redirect_to import_path(@import)
+  end
+
+  def show
+    @import = Current.identity.imports.find(params[:id])
+  end
+
+  private
+    def create_account_for_import
+      Account.create_with_owner(
+        account: { name: account_name_from_zip },
+        owner: { name: Current.identity.email_address.split("@").first, identity: Current.identity }
+      )
+    end
+
+    def account_name_from_zip
+      Zip::File.open(params[:file].tempfile.path) do |zip|
+        entry = zip.find_entry("data/account.json")
+        JSON.parse(entry.get_input_stream.read)["name"]
+      end
+    end
+end

app/controllers/users/data_exports_controller.rb

@@ -0,0 +1,33 @@
+class Users::DataExportsController < ApplicationController
+  before_action :set_user
+  before_action :ensure_current_user
+  before_action :ensure_export_limit_not_exceeded, only: :create
+  before_action :set_export, only: :show
+
+  CURRENT_EXPORT_LIMIT = 10
+
+  def show
+  end
+
+  def create
+    @user.data_exports.create!(account: Current.account).build_later
+    redirect_to @user, notice: "Export started. You'll receive an email when it's ready."
+  end
+
+  private
+    def set_user
+      @user = Current.account.users.find(params[:user_id])
+    end
+
+    def ensure_current_user
+      head :forbidden unless @user == Current.user
+    end
+
+    def ensure_export_limit_not_exceeded
+      head :too_many_requests if @user.data_exports.current.count >= CURRENT_EXPORT_LIMIT
+    end
+
+    def set_export
+      @export = @user.data_exports.completed.find_by(id: params[:id])
+    end
+end

app/jobs/export_account_data_job.rb → app/jobs/export_data_job.rb

@@ -1,4 +1,4 @@
-class ExportAccountDataJob < ApplicationJob
+class ExportDataJob < ApplicationJob
   queue_as :backend
 
   discard_on ActiveJob::DeserializationError

app/jobs/import_account_data_job.rb

@@ -0,0 +1,19 @@
+class ImportAccountDataJob < ApplicationJob
+  include ActiveJob::Continuable
+
+  queue_as :backend
+
+  def perform(import)
+    step :validate do
+      import.validate \
+        start: step.cursor,
+        callback: proc { |record_set:, record_id:| step.set! [ record_set, record_id ] }
+    end
+
+    step :process do
+      import.process \
+        start: step.cursor,
+        callback: proc { |record_set:, record_id:| step.set! [ record_set, record_id ] }
+    end
+  end
+end

app/mailers/export_mailer.rb

@@ -1,8 +1,19 @@
 class ExportMailer < ApplicationMailer
+  helper_method :export_download_url
+
   def completed(export)
     @export = export
     @user = export.user
 
     mail to: @user.identity.email_address, subject: "Your Fizzy data export is ready for download"
   end
+
+  private
+    def export_download_url(export)
+      if export.is_a?(User::DataExport)
+        user_data_export_url(export.user, export)
+      else
+        account_export_url(export)
+      end
+    end
 end

app/mailers/import_mailer.rb

@@ -0,0 +1,9 @@
+class ImportMailer < ApplicationMailer
+  def completed(identity)
+    mail to: identity.email_address, subject: "Your Fizzy account import is complete"
+  end
+
+  def failed(identity)
+    mail to: identity.email_address, subject: "Your Fizzy account import failed"
+  end
+end

app/models/account.rb

@@ -9,6 +9,7 @@ class Account < ApplicationRecord
   has_many :tags, dependent: :destroy
   has_many :columns, dependent: :destroy
   has_many :exports, class_name: "Account::Export", dependent: :destroy
+  has_many :imports, class_name: "Account::Import", dependent: :destroy
 
   before_create :assign_external_account_id
   after_create :create_join_code

app/models/account/data_transfer/access_record_set.rb

@@ -0,0 +1,48 @@
+class Account::DataTransfer::AccessRecordSet < Account::DataTransfer::RecordSet
+  ATTRIBUTES = %w[
+    accessed_at
+    account_id
+    board_id
+    created_at
+    id
+    involvement
+    updated_at
+    user_id
+  ].freeze
+
+  private
+    def records
+      Access.where(account: account)
+    end
+
+    def export_record(access)
+      zip.add_file "data/accesses/#{access.id}.json", access.as_json.to_json
+    end
+
+    def files
+      zip.glob("data/accesses/*.json")
+    end
+
+    def import_batch(files)
+      batch_data = files.map do |file|
+        data = load(file)
+        data.slice(*ATTRIBUTES).merge("account_id" => account.id)
+      end
+
+      Access.insert_all!(batch_data)
+    end
+
+    def validate_record(file_path)
+      data = load(file_path)
+      expected_id = File.basename(file_path, ".json")
+
+      unless data["id"].to_s == expected_id
+        raise IntegrityError, "Access record ID mismatch: expected #{expected_id}, got #{data['id']}"
+      end
+
+      missing = ATTRIBUTES - data.keys
+      if missing.any?
+        raise IntegrityError, "#{file_path} is missing required fields: #{missing.join(', ')}"
+      end
+    end
+end

app/models/account/data_transfer/account_record_set.rb

@@ -0,0 +1,54 @@
+class Account::DataTransfer::AccountRecordSet < Account::DataTransfer::RecordSet
+  ACCOUNT_ATTRIBUTES = %w[
+    join_code
+    name
+  ]
+
+  JOIN_CODE_ATTRIBUTES = %w[
+    code
+    usage_count
+    usage_limit
+  ]
+
+  private
+    def records
+      [ account ]
+    end
+
+    def export_record(account)
+      zip.add_file "data/account.json", account.as_json.merge(join_code: account.join_code.as_json).to_json
+    end
+
+    def files
+      [ "data/account.json" ]
+    end
+
+    def import_batch(files)
+      account_data = load(files.first)
+      join_code_data = account_data.delete("join_code")
+
+      account.update!(name: account_data.fetch("name"))
+      account.join_code.update!(join_code_data.slice("usage_count", "usage_limit"))
+      account.join_code.update(code: join_code_data.fetch("code"))
+    end
+
+    def validate_record(file_path)
+      data = load(file_path)
+
+      unless (ACCOUNT_ATTRIBUTES - data.keys).empty?
+        raise IntegrityError, "Account record missing required fields"
+      end
+
+      unless data.key?("join_code")
+        raise IntegrityError, "Account record missing 'join_code' field"
+      end
+
+      unless data["join_code"].is_a?(Hash)
+        raise IntegrityError, "'join_code' field must be a JSON object"
+      end
+
+      unless (JOIN_CODE_ATTRIBUTES - data["join_code"].keys).empty?
+        raise IntegrityError, "'join_code' field missing required keys"
+      end
+    end
+end