feat: separate prior records behind an owner switch and count last-period questions

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/api/src/auth/auth.controller.ts

@@ -1,4 +1,5 @@
 import {
+  BadRequestException,
   Body,
   Controller,
   Delete,
@@ -92,6 +93,18 @@ export class AuthController {
     return this.authService.updateMe(user.userId, user.organizationId, dto);
   }
 
+  @UseGuards(JwtAuthGuard)
+  @Patch('me/prior-archive')
+  setPriorLens(
+    @CurrentUser() user: AuthActor,
+    @Body() body: { lens?: string },
+  ) {
+    if (body.lens !== 'archive' && body.lens !== 'current') {
+      throw new BadRequestException('حالت بایگانی نامعتبر است');
+    }
+    return this.authService.setPriorLens(user.userId, user.organizationId, body.lens);
+  }
+
   /** عکس پروفایل کاربر جاری */
   @UseGuards(JwtAuthGuard)
   @Get('me/avatar')

apps/api/src/auth/auth.service.ts

@@ -1,6 +1,7 @@
 import {
   BadRequestException,
   ConflictException,
+  ForbiddenException,
   Injectable,
   Logger,
   NotFoundException,
@@ -412,6 +413,29 @@ export class AuthService {
     return this.toAuthUserDto(user, organizationId);
   }
 
+  async setPriorLens(
+    userId: string,
+    organizationId: string,
+    lens: 'current' | 'archive',
+  ): Promise<AuthUserDto> {
+    const membership = await this.prisma.membership.findFirst({
+      where: { userId, organizationId, isActive: true },
+      include: { organization: { select: { enabledModules: true } } },
+    });
+    if (!membership?.priorArchiveEnabled) {
+      throw new ForbiddenException('بایگانی اطلاعات قبل برای شما فعال نیست');
+    }
+    const modules = this.billing.normalizeModules(membership.organization.enabledModules);
+    if (!modules.includes('prior_data_archive')) {
+      throw new ForbiddenException('بایگانی اطلاعات قبل برای این محیط فعال نیست');
+    }
+    await this.prisma.membership.update({
+      where: { id: membership.id },
+      data: { priorArchiveLens: lens },
+    });
+    return this.me(userId, organizationId);
+  }
+
   async updateMe(userId: string, organizationId: string, dto: UpdateProfileDto): Promise<AuthUserDto> {
     const fullName = dto.fullName.trim();
     if (fullName.length < 2) {
@@ -653,9 +677,23 @@ export class AuthService {
       ),
       subscription: sub,
       isOrgOwner: role === 'owner',
+      priorArchive: this.priorArchiveFor(membership),
     });
   }
 
+  private priorArchiveFor(
+    membership: {
+      priorArchiveEnabled?: boolean;
+      priorArchiveLens?: string;
+      organization?: { enabledModules?: string[] };
+    } | null,
+  ): AuthUserDto['priorArchive'] {
+    if (!membership?.priorArchiveEnabled) return undefined;
+    const modules = this.billing.normalizeModules(membership.organization?.enabledModules);
+    if (!modules.includes('prior_data_archive')) return undefined;
+    return { lens: membership.priorArchiveLens === 'archive' ? 'archive' : 'current' };
+  }
+
   private async throttleChallenges(
     kind: string,
     email: string | null | undefined,
@@ -740,6 +778,7 @@ export class AuthService {
     enabledModules?: OrgModuleKey[];
     subscription?: SubscriptionSummaryDto | null;
     isOrgOwner?: boolean;
+    priorArchive?: AuthUserDto['priorArchive'];
   }): AuthUserDto {
     return {
       id: user.id,
@@ -753,6 +792,7 @@ export class AuthService {
       ...(user.enabledModules ? { enabledModules: user.enabledModules } : {}),
       ...(user.subscription ? { subscription: user.subscription } : {}),
       ...(user.isOrgOwner !== undefined ? { isOrgOwner: user.isOrgOwner } : {}),
+      ...(user.priorArchive ? { priorArchive: user.priorArchive } : {}),
     };
   }
 }

apps/api/src/auth/jwt.strategy.ts

@@ -62,6 +62,9 @@ export class JwtStrategy extends PassportStrategy(Strategy) {
         role: true,
         dataVisibility: true,
         dataVisibilityScopes: true,
+        priorArchiveEnabled: true,
+        priorArchiveLens: true,
+        organization: { select: { enabledModules: true } },
       },
     });
     if (!membership) {
@@ -91,6 +94,11 @@ export class JwtStrategy extends PassportStrategy(Strategy) {
       }
     }
 
+    const modules = this.billing.normalizeModules(membership.organization.enabledModules);
+    const priorGranted =
+      modules.includes('prior_data_archive') && membership.priorArchiveEnabled;
+    const priorLens = membership.priorArchiveLens === 'archive' ? 'archive' : 'current';
+
     return {
       userId: user.id,
       organizationId: membership.organizationId,
@@ -98,6 +106,7 @@ export class JwtStrategy extends PassportStrategy(Strategy) {
       dataVisibility,
       visibleUserIds,
       scopes,
+      priorLens: priorGranted ? priorLens : 'off',
     };
   }