package usecase import ( "context" "errors" "fmt" "log" "regexp" "strings" "time" "lune/talentscale/internal/domain" "lune/talentscale/internal/pkg/email" "lune/talentscale/internal/pkg/email/templates" "lune/talentscale/internal/pkg/utils" "github.com/google/uuid" "golang.org/x/crypto/bcrypt" ) type testSessionUsecase struct { sessionRepo domain.TestSessionRepository candidateRepo domain.CandidateRepository userRepo domain.UserRepository roleRepo domain.RoleRepository emailSvc *email.Service } func NewTestSessionUsecase( sessionRepo domain.TestSessionRepository, candidateRepo domain.CandidateRepository, userRepo domain.UserRepository, roleRepo domain.RoleRepository, emailSvc *email.Service, ) domain.TestSessionUsecase { return &testSessionUsecase{ sessionRepo: sessionRepo, candidateRepo: candidateRepo, userRepo: userRepo, roleRepo: roleRepo, emailSvc: emailSvc, } } func (u *testSessionUsecase) CreateSession(ctx context.Context, req *domain.TestSessionCreateRequest) (*domain.TestSessionResponse, error) { // 1. Validation if req.Title == "" { return nil, errors.New("title is required") } if req.Status != string(domain.TestSessionStatusDraft) && req.Status != string(domain.TestSessionStatusScheduled) { return nil, errors.New("invalid status: must be draft or scheduled") } if req.StartsAt != nil && req.EndsAt != nil && req.StartsAt.After(*req.EndsAt) { return nil, errors.New("starts_at must be before ends_at") } // 2. Parse and sanitize emails emails := u.sanitizeEmails(req.InvitationEmails) if len(emails) == 0 { return nil, errors.New("at least one valid invitation email is required") } if len(emails) > 1000 { return nil, errors.New("maximum 1000 emails allowed per session") } // 3. Get Candidate Role ID candRole, err := u.roleRepo.GetByName(ctx, "candidate") if err != nil { return nil, fmt.Errorf("failed to get candidate role: %w", err) } // 4. Process Candidates and Session Items sessionID := uuid.New() var sessionItems []domain.TestSessionItem var inviteData []struct { Email string Password string Name string } for _, emailAddr := range emails { // Check existing candidate candidate, err := u.candidateRepo.GetByEmail(ctx, emailAddr) var password string var candidateID uuid.UUID if err != nil { // Candidate not exists, create it password = utils.GenerateSecurePassword() candidateID = uuid.New() userID := uuid.New() // 1. Create Candidate FIRST candRecord := &domain.Candidate{ ID: candidateID, Code: "C-" + time.Now().Format("2006") + "-" + candidateID.String()[:8], Name: emailAddr, Email: emailAddr, CompanyID: req.CompanyID, Status: "new", CreatedAt: time.Now(), UpdatedAt: time.Now(), } if err := u.candidateRepo.Create(ctx, candRecord); err != nil { log.Printf("Failed to create candidate record for %s: %v", emailAddr, err) continue } // 2. Hash password hashed, _ := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost) // 3. Create User user := &domain.User{ ID: userID, Name: emailAddr, Email: emailAddr, Password: string(hashed), RoleID: candRole.ID, CompanyID: &req.CompanyID, CandidateID: &candRecord.ID, CreatedAt: time.Now(), UpdatedAt: time.Now(), } if err := u.userRepo.Create(ctx, user); err != nil { log.Printf("Failed to create user for %s: %v", emailAddr, err) continue } // 4. Update Candidate.user_id (Circular FK Persistence) log.Printf("[Debug] Circular Link Start: CandidateID=%s, UserID=%s", candidateID, userID) if err := u.candidateRepo.UpdateUserID(ctx, candidateID, userID); err != nil { log.Printf("[Debug] Circular Link FAILED: %v", err) } else { log.Printf("[Debug] Circular Link SUCCESS: candidates.user_id updated") } } else { candidateID = candidate.ID } // Create Session Item item := domain.TestSessionItem{ ID: uuid.New(), TestSessionID: sessionID, CandidateID: candidateID, Email: emailAddr, CreatedAt: time.Now(), } if req.Status == string(domain.TestSessionStatusScheduled) { now := time.Now() item.InvitedAt = &now inviteData = append(inviteData, struct { Email string Password string Name string }{ Email: emailAddr, Password: password, Name: emailAddr, }) } sessionItems = append(sessionItems, item) } // 5. Create Session Object session := &domain.TestSession{ ID: sessionID, CompanyID: req.CompanyID, CreatedBy: req.CreatedBy, Title: req.Title, Description: req.Description, StartsAt: req.StartsAt, EndsAt: req.EndsAt, Status: domain.TestSessionStatus(req.Status), TotalCandidates: len(sessionItems), CreatedAt: time.Now(), UpdatedAt: time.Now(), } // 6. Save Session and Items (Repository handles transaction) if err := u.sessionRepo.Create(ctx, session, sessionItems); err != nil { return nil, err } // 7. Send Emails (after commit) sentCount := 0 failedCount := 0 if req.Status == string(domain.TestSessionStatusScheduled) { for _, data := range inviteData { // In real world, loginURL should point to the frontend loginURL := "https://talent.talentscale.id/login" // Build email content emailContent := fmt.Sprintf(`

Assessment Invitation

Hello,

You have been invited to participate in a recruitment assessment session on TalentScale.

Company %s
Session %s
Start Time %s
End Time %s

Login Credentials

Please use the following credentials to access your assessment:

Portal URL:
%s

Email:
%s

Password:
%s

Please complete the assessment before the session expires.

If you experience any issues, please contact the recruiter.


Best regards,
TalentScale Team

`, "TalentScale", session.Title, session.StartsAt.Format("02 Jan 2006 15:04"), session.EndsAt.Format("02 Jan 2006 15:04"), loginURL, loginURL, data.Email, data.Password, ) body := templates.BaseLayout( "Test Session Invitation — TalentScale", emailContent, ) // Send using centralized service (has retry and logging) u.emailSvc.SendWithRetry(email.Payload{ To: []string{data.Email}, Subject: fmt.Sprintf("Invitation: %s", session.Title), Body: body, }, 3) sentCount++ } } return &domain.TestSessionResponse{ Session: session, TotalCandidates: len(sessionItems), SentEmails: sentCount, FailedEmails: failedCount, }, nil } func (u *testSessionUsecase) GetSession(ctx context.Context, id uuid.UUID, companyID uuid.UUID) (*domain.TestSessionResponse, error) { session, items, err := u.sessionRepo.GetByID(ctx, id, companyID) if err != nil { return nil, err } return &domain.TestSessionResponse{ Session: session, TotalCandidates: len(items), }, nil } func (u *testSessionUsecase) ListSessions(ctx context.Context, companyID uuid.UUID, limit, page int) ([]domain.TestSession, int, error) { offset := (page - 1) * limit return u.sessionRepo.List(ctx, companyID, limit, offset) } func (u *testSessionUsecase) sanitizeEmails(raw string) []string { if raw == "" { return nil } // Split by ; parts := strings.Split(raw, ";") uniqueEmails := make(map[string]bool) var result []string emailRegex := regexp.MustCompile(`^[a-z0-9._%+\-]+@[a-z0-9.\-]+\.[a-z]{2,4}$`) for _, p := range parts { email := strings.TrimSpace(strings.ToLower(p)) if email == "" { continue } if emailRegex.MatchString(email) && !uniqueEmails[email] { uniqueEmails[email] = true result = append(result, email) } } return result }