Kundenansicht: Protokoll-Collection customerViewLog mit Schreiben, Lesen und Loeschen nach 12 Monaten

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

server/services/appwriteAdmin.js

@@ -76,6 +76,7 @@ export const Query = {
   }),
   limit: (n) => ({ method: 'limit', values: [n] }),
   greaterThan: (attribute, value) => ({ method: 'greaterThan', attribute, values: [value] }),
+  lessThan: (attribute, value) => ({ method: 'lessThan', attribute, values: [value] }),
   orderDesc: (attribute) => ({ method: 'orderDesc', attribute }),
   orderAsc: (attribute) => ({ method: 'orderAsc', attribute }),
 }

server/services/customerViewLog.js

@@ -0,0 +1,54 @@
+import { config } from '../config.js'
+import { createDocument, deleteDocument, listDocuments, Query } from './appwriteAdmin.js'
+
+/**
+ * Protokoll der Kundenansicht (Datenschutzerklaerung Abschnitt 6): wer wann das Portal eines Kunden geoeffnet
+ * oder darin etwas geaendert hat. Schreiben nur ueber den Server-Schluessel; Eintraege leben 12 Monate.
+ */
+export const VIEW_ACTIONS = ['geoeffnet', 'beendet', 'abgelaufen', 'news_angelegt', 'news_bild', 'news_geaendert', 'news_geloescht']
+
+const DETAIL_MAX = 300
+const RETENTION_MS = 365 * 24 * 60 * 60 * 1000
+const PAGE = 100
+
+const COLLECTION = () => config.collections.customerViewLog
+
+/** Eintrag schreiben; wirft nie (die protokollierte Aktion selbst bleibt gueltig). */
+export async function logViewAction({ customerId, staffUserId, staffName, action, detail = '' }) {
+  try {
+    await createDocument(COLLECTION(), {
+      customerId: String(customerId || ''),
+      staffUserId: String(staffUserId || ''),
+      staffName: String(staffName || ''),
+      action: String(action || ''),
+      detail: String(detail || '').slice(0, DETAIL_MAX),
+      createdAt: new Date().toISOString(),
+    })
+  } catch (err) {
+    console.warn(`[kundenansicht] Protokoll (${action}, Kunde ${customerId}) nicht geschrieben:`, err.message)
+  }
+}
+
+/** Eintraege eines Kunden, neueste zuerst. */
+export async function listViewLog(customerId, { limit = 200 } = {}) {
+  const docs = await listDocuments(COLLECTION(), [
+    Query.equal('customerId', customerId),
+    Query.orderDesc('createdAt'),
+    Query.limit(limit),
+  ])
+  return docs.map((d) => ({ id: d.$id, at: d.createdAt, staffName: d.staffName || '', action: d.action || '', detail: d.detail || '' }))
+}
+
+/** Eintraege aelter als 12 Monate loeschen (taeglicher Lauf), seitenweise bis keine mehr uebrig sind. */
+export async function purgeViewLog({ now = new Date() } = {}) {
+  const cutoff = new Date(now.getTime() - RETENTION_MS).toISOString()
+  let deleted = 0
+  for (;;) {
+    const docs = await listDocuments(COLLECTION(), [Query.lessThan('createdAt', cutoff), Query.limit(PAGE)])
+    for (const doc of docs) {
+      await deleteDocument(COLLECTION(), doc.$id)
+      deleted += 1
+    }
+    if (docs.length < PAGE) return { deleted }
+  }
+}