Merge pull request #27 from first-fluke/symphony/FIR-29

feat(web/settings): profile, tags, export, account deletion

Author: gracefullight

apps/api/alembic/versions/0004_create_tag.py

@@ -0,0 +1,52 @@
+"""create tag table
+
+Revision ID: 0004
+Revises: 0003
+Create Date: 2026-03-21
+
+"""
+
+from typing import Sequence, Union
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "0004"
+down_revision: Union[str, None] = "0003"
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "tag",
+        sa.Column("id", sa.Integer(), primary_key=True),
+        sa.Column("user_id", sa.Integer(), nullable=False),
+        sa.Column("name", sa.String(100), nullable=False),
+        sa.Column("color", sa.String(7), nullable=False, server_default="'#6366f1'"),
+        sa.Column(
+            "created_at",
+            sa.DateTime(),
+            server_default=sa.func.now(),
+            nullable=False,
+        ),
+        sa.Column(
+            "updated_at",
+            sa.DateTime(),
+            server_default=sa.func.now(),
+            nullable=False,
+        ),
+        sa.ForeignKeyConstraint(
+            ["user_id"],
+            ["user_auth.id"],
+            name="fk_tag_user_id",
+            ondelete="CASCADE",
+        ),
+        sa.UniqueConstraint("user_id", "name", name="uq_tag_user_name"),
+    )
+    op.create_index("ix_tag_user_id", "tag", ["user_id"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_tag_user_id", table_name="tag")
+    op.drop_table("tag")

apps/api/src/auth/repository.py

@@ -41,3 +41,15 @@ async def create(
         await self.session.commit()
         await self.session.refresh(user)
         return user
+
+    async def update(self, user: UserAuth, **kwargs: str | None) -> UserAuth:
+        for key, value in kwargs.items():
+            if value is not None:
+                setattr(user, key, value)
+        await self.session.commit()
+        await self.session.refresh(user)
+        return user
+
+    async def delete(self, user: UserAuth) -> None:
+        await self.session.delete(user)
+        await self.session.commit()

apps/api/src/auth/router.py

@@ -4,6 +4,7 @@
 
 from src.auth.schemas import (
     LogoutRequest,
+    ProfileUpdate,
     RefreshRequest,
     TokenRequest,
     TokenResponse,
@@ -76,3 +77,28 @@ async def me(
     service = AuthService(session, redis)
     user = await service.get_me(user_id)
     return ApiResponse(data=UserOut.model_validate(user))
+
+
+@router.patch("/me")
+async def update_me(
+    body: ProfileUpdate,
+    user_id: int = Depends(get_current_user_id),
+    session: AsyncSession = Depends(get_session),
+    redis: Redis = Depends(get_redis),
+) -> ApiResponse[UserOut]:
+    """Update current user profile."""
+    service = AuthService(session, redis)
+    user = await service.update_me(user_id, body)
+    return ApiResponse(data=UserOut.model_validate(user))
+
+
+@router.delete("/me")
+async def delete_me(
+    user_id: int = Depends(get_current_user_id),
+    session: AsyncSession = Depends(get_session),
+    redis: Redis = Depends(get_redis),
+) -> ApiResponse[dict[str, str]]:
+    """Delete current user account."""
+    service = AuthService(session, redis)
+    await service.delete_me(user_id)
+    return ApiResponse(data={"message": "Account deleted"})

apps/api/src/auth/schemas.py

@@ -1,4 +1,4 @@
-from pydantic import BaseModel
+from pydantic import BaseModel, Field
 
 
 class TokenRequest(BaseModel):
@@ -30,3 +30,7 @@ class UserOut(BaseModel):
     avatar_url: str | None
 
     model_config = {"from_attributes": True}
+
+
+class ProfileUpdate(BaseModel):
+    name: str | None = Field(default=None, min_length=1, max_length=255)

apps/api/src/auth/service.py

@@ -10,6 +10,7 @@
 
 from src.auth.models import UserAuth
 from src.auth.repository import AuthRepository
+from src.auth.schemas import ProfileUpdate
 from src.lib.auth import JWT_ALGORITHM, JWT_SECRET
 from src.lib.exceptions import AppException, UnauthorizedException
 
@@ -85,6 +86,18 @@ async def get_me(self, user_id: int) -> UserAuth:
             raise UnauthorizedException(message="User not found")
         return user
 
+    async def update_me(self, user_id: int, data: ProfileUpdate) -> UserAuth:
+        user = await self.repo.find_by_id(user_id)
+        if not user:
+            raise UnauthorizedException(message="User not found")
+        return await self.repo.update(user, name=data.name)
+
+    async def delete_me(self, user_id: int) -> None:
+        user = await self.repo.find_by_id(user_id)
+        if not user:
+            raise UnauthorizedException(message="User not found")
+        await self.repo.delete(user)
+
     def _create_access_token(self, user: UserAuth) -> str:
         now = datetime.datetime.now(datetime.UTC)
         payload = {

apps/api/src/export/__init__.py

@@ -0,0 +1,25 @@
+from fastapi import APIRouter, Depends
+from fastapi.responses import StreamingResponse
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from src.export.service import ExportService
+from src.lib.auth import get_current_user_id
+from src.lib.database import get_session
+
+router = APIRouter(prefix="/export", tags=["export"])
+
+
+@router.get("/contacts")
+async def export_contacts(
+    user_id: int = Depends(get_current_user_id),
+    session: AsyncSession = Depends(get_session),
+) -> StreamingResponse:
+    """Export contacts with experiences as CSV."""
+    service = ExportService(session)
+    csv_content = await service.export_contacts_csv(user_id)
+
+    return StreamingResponse(
+        content=iter([csv_content]),
+        media_type="text/csv",
+        headers={"Content-Disposition": "attachment; filename=contacts.csv"},
+    )

apps/api/src/export/router.py

@@ -0,0 +1,52 @@
+import csv
+import io
+
+from sqlalchemy import select
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy.orm import aliased
+
+from src.contacts.models import Contact
+from src.experiences.models import Experience
+from src.organizations.models import Organization
+
+
+class ExportService:
+    def __init__(self, session: AsyncSession) -> None:
+        self.session = session
+
+    async def export_contacts_csv(self, user_id: int) -> str:
+        org = aliased(Organization)
+
+        stmt = (
+            select(
+                Contact.name,
+                Contact.email,
+                Contact.phone,
+                org.name.label("organization"),
+                Experience.role,
+                Experience.major,
+            )
+            .outerjoin(Experience, Experience.contact_id == Contact.id)
+            .outerjoin(org, org.id == Experience.organization_id)
+            .where(Contact.user_id == user_id)
+            .order_by(Contact.name)
+        )
+
+        result = await self.session.execute(stmt)
+        rows = result.all()
+
+        output = io.StringIO()
+        writer = csv.writer(output)
+        writer.writerow(["name", "email", "phone", "organization", "role", "major"])
+
+        for row in rows:
+            writer.writerow([
+                row.name or "",
+                row.email or "",
+                row.phone or "",
+                row.organization or "",
+                row.role or "",
+                row.major or "",
+            ])
+
+        return output.getvalue()

apps/api/src/export/service.py

@@ -7,6 +7,7 @@
 from src.auth.router import router as auth_router
 from src.contacts.router import router as contacts_router
 from src.experiences.router import router as experiences_router
+from src.export.router import router as export_router
 from src.globe.router import router as globe_router
 from src.contacts.router import router as contacts_router
 from src.lib.database import engine
@@ -17,6 +18,7 @@
 from src.lib.redis import redis
 from src.meetings.router import router as meetings_router
 from src.organizations.router import router as organizations_router
+from src.tags.router import router as tags_router
 from src.upload.router import router as upload_router
 
 
@@ -42,8 +44,10 @@ async def app_exception_handler(request: Request, exc: AppException) -> JSONResp
 app.include_router(auth_router)
 app.include_router(contacts_router)
 app.include_router(experiences_router)
+app.include_router(export_router)
 app.include_router(globe_router)
 app.include_router(organizations_router)
+app.include_router(tags_router)
 app.include_router(upload_router)
 app.include_router(meetings_router)
 app.include_router(contacts_router)

apps/api/src/main.py

@@ -1,22 +1,32 @@
-from datetime import datetime
+import datetime
 
 from sqlalchemy import ForeignKey, String, UniqueConstraint, func
+from sqlalchemy.orm import Mapped, mapped_column
+from datetime import datetime
 from sqlalchemy.orm import Mapped, mapped_column, relationship
 
 from src.lib.database import Base
 
 
 class Tag(Base):
-    __tablename__ = "tags"
+    __tablename__ = "tag"
+    __table_args__ = (
+        UniqueConstraint("user_id", "name", name="uq_tag_user_name"),
+    )
 
     id: Mapped[int] = mapped_column(primary_key=True)
-    user_id: Mapped[int] = mapped_column(ForeignKey("users.id", ondelete="CASCADE"))
+    user_id: Mapped[int] = mapped_column(ForeignKey("user_auth.id", ondelete="CASCADE"))
     name: Mapped[str] = mapped_column(String(100))
+    color: Mapped[str] = mapped_column(String(7), server_default="'#6366f1'")
+    created_at: Mapped[datetime.datetime] = mapped_column(server_default=func.now())
+    updated_at: Mapped[datetime.datetime] = mapped_column(
+        server_default=func.now(),
+        onupdate=func.now(),
+    )
+    __tablename__ = "tags"
+    user_id: Mapped[int] = mapped_column(ForeignKey("users.id", ondelete="CASCADE"))
     created_at: Mapped[datetime] = mapped_column(server_default=func.now())
     updated_at: Mapped[datetime] = mapped_column(server_default=func.now(), onupdate=func.now())
-
     contacts: Mapped[list["Contact"]] = relationship(  # noqa: F821
         secondary="contact_tags", back_populates="tags"
-    )
-
     __table_args__ = (UniqueConstraint("user_id", "name", name="uq_tag_user_name"),)