refactor: complete v2 refactoring plan (Phases 1-5)

Phase 1 — Quick Wins: centralize formatMoney/formatCents, extract
findUniqueOrThrow helper (19 routers), shared Prisma select constants,
useInvalidatePlanningViews hook, status badge consolidation, composite
DB indexes.

Phase 2 — Timeline Split: extract TimelineContext, TimelineResourcePanel,
TimelineProjectPanel; split 28-dep useMemo into 3 focused memos.
TimelineView.tsx reduced from 1,903 to 538 lines.

Phase 3 — Query Performance: server-side filtering for getEntriesView,
remove availability from timeline resource select, SSE event debouncing
(50ms batch window).

Phase 4 — Estimate Workspace: extract 7 tab components and 3 editor
components. EstimateWorkspaceClient 1,298→306 lines,
EstimateWorkspaceDraftEditor 1,205→581 lines.

Phase 5 — Package Cleanup: split commit-dispo-import-batch (1,112→573
lines), extract shared pagination helper with 11 tests.

All tests pass: 209 API, 254 engine, 67 application.

Co-Authored-By: claude-flow <ruv@ruv.net>

packages/api/src/router/vacation.ts

@@ -2,13 +2,31 @@ import { UpdateVacationStatusSchema, getPublicHolidays } from "@planarchy/shared
 import { VacationStatus, VacationType } from "@planarchy/db";
 import { TRPCError } from "@trpc/server";
 import { z } from "zod";
+import { findUniqueOrThrow } from "../db/helpers.js";
 import { emitVacationCreated, emitVacationUpdated, emitNotificationCreated } from "../sse/event-bus.js";
 import { createTRPCRouter, adminProcedure, managerProcedure, protectedProcedure } from "../trpc.js";
 import { sendEmail } from "../lib/email.js";
+import { anonymizeResource, anonymizeUser, getAnonymizationDirectory } from "../lib/anonymization.js";
 
 /** Types that consume from annual leave balance */
 const BALANCE_TYPES = [VacationType.ANNUAL, VacationType.OTHER];
 
+function anonymizeVacationRecord<T extends {
+  resource?: { id: string } | null;
+  requestedBy?: { id?: string | null; name?: string | null; email?: string | null } | null;
+  approvedBy?: { id?: string | null; name?: string | null; email?: string | null } | null;
+}>(
+  vacation: T,
+  directory: Awaited<ReturnType<typeof getAnonymizationDirectory>>,
+): T {
+  return {
+    ...vacation,
+    ...(vacation.resource ? { resource: anonymizeResource(vacation.resource, directory) } : {}),
+    ...(vacation.requestedBy ? { requestedBy: anonymizeUser(vacation.requestedBy, directory) } : {}),
+    ...(vacation.approvedBy ? { approvedBy: anonymizeUser(vacation.approvedBy, directory) } : {}),
+  };
+}
+
 /** Send in-app notification + optional email when vacation status changes */
 async function notifyVacationStatus(
   db: Parameters<Parameters<typeof protectedProcedure["query"]>[0]>[0]["ctx"]["db"],
@@ -72,7 +90,7 @@ export const vacationRouter = createTRPCRouter({
       }),
     )
     .query(async ({ ctx, input }) => {
-      return ctx.db.vacation.findMany({
+      const vacations = await ctx.db.vacation.findMany({
         where: {
           ...(input.resourceId ? { resourceId: input.resourceId } : {}),
           ...(input.status ? { status: input.status } : {}),
@@ -88,6 +106,8 @@ export const vacationRouter = createTRPCRouter({
         orderBy: { startDate: "asc" },
         take: input.limit,
       });
+      const directory = await getAnonymizationDirectory(ctx.db);
+      return vacations.map((vacation) => anonymizeVacationRecord(vacation, directory));
     }),
 
   /**
@@ -96,18 +116,19 @@ export const vacationRouter = createTRPCRouter({
   getById: protectedProcedure
     .input(z.object({ id: z.string() }))
     .query(async ({ ctx, input }) => {
-      const vacation = await ctx.db.vacation.findUnique({
-        where: { id: input.id },
-        include: {
-          resource: { select: { id: true, displayName: true, eid: true } },
-          requestedBy: { select: { id: true, name: true, email: true } },
-          approvedBy: { select: { id: true, name: true, email: true } },
-        },
-      });
-      if (!vacation) {
-        throw new TRPCError({ code: "NOT_FOUND", message: "Vacation not found" });
-      }
-      return vacation;
+      const vacation = await findUniqueOrThrow(
+        ctx.db.vacation.findUnique({
+          where: { id: input.id },
+          include: {
+            resource: { select: { id: true, displayName: true, eid: true } },
+            requestedBy: { select: { id: true, name: true, email: true } },
+            approvedBy: { select: { id: true, name: true, email: true } },
+          },
+        }),
+        "Vacation",
+      );
+      const directory = await getAnonymizationDirectory(ctx.db);
+      return anonymizeVacationRecord(vacation, directory);
     }),
 
   /**
@@ -182,7 +203,8 @@ export const vacationRouter = createTRPCRouter({
 
       emitVacationCreated({ id: vacation.id, resourceId: vacation.resourceId, status: vacation.status });
 
-      return vacation;
+      const directory = await getAnonymizationDirectory(ctx.db);
+      return anonymizeVacationRecord(vacation, directory);
     }),
 
   /**
@@ -191,10 +213,10 @@ export const vacationRouter = createTRPCRouter({
   approve: managerProcedure
     .input(z.object({ id: z.string() }))
     .mutation(async ({ ctx, input }) => {
-      const existing = await ctx.db.vacation.findUnique({ where: { id: input.id } });
-      if (!existing) {
-        throw new TRPCError({ code: "NOT_FOUND", message: "Vacation not found" });
-      }
+      const existing = await findUniqueOrThrow(
+        ctx.db.vacation.findUnique({ where: { id: input.id } }),
+        "Vacation",
+      );
       const approvableStatuses: string[] = [VacationStatus.PENDING, VacationStatus.CANCELLED, VacationStatus.REJECTED];
       if (!approvableStatuses.includes(existing.status)) {
         throw new TRPCError({ code: "BAD_REQUEST", message: "Only PENDING, CANCELLED, or REJECTED vacations can be approved" });
@@ -230,10 +252,10 @@ export const vacationRouter = createTRPCRouter({
   reject: managerProcedure
     .input(z.object({ id: z.string(), rejectionReason: z.string().max(500).optional() }))
     .mutation(async ({ ctx, input }) => {
-      const existing = await ctx.db.vacation.findUnique({ where: { id: input.id } });
-      if (!existing) {
-        throw new TRPCError({ code: "NOT_FOUND", message: "Vacation not found" });
-      }
+      const existing = await findUniqueOrThrow(
+        ctx.db.vacation.findUnique({ where: { id: input.id } }),
+        "Vacation",
+      );
       if (existing.status !== VacationStatus.PENDING) {
         throw new TRPCError({ code: "BAD_REQUEST", message: "Only PENDING vacations can be rejected" });
       }
@@ -324,10 +346,10 @@ export const vacationRouter = createTRPCRouter({
   cancel: protectedProcedure
     .input(z.object({ id: z.string() }))
     .mutation(async ({ ctx, input }) => {
-      const existing = await ctx.db.vacation.findUnique({ where: { id: input.id } });
-      if (!existing) {
-        throw new TRPCError({ code: "NOT_FOUND", message: "Vacation not found" });
-      }
+      const existing = await findUniqueOrThrow(
+        ctx.db.vacation.findUnique({ where: { id: input.id } }),
+        "Vacation",
+      );
       if (existing.status === VacationStatus.CANCELLED) {
         throw new TRPCError({ code: "BAD_REQUEST", message: "Already cancelled" });
       }
@@ -511,10 +533,10 @@ export const vacationRouter = createTRPCRouter({
   updateStatus: protectedProcedure
     .input(UpdateVacationStatusSchema)
     .mutation(async ({ ctx, input }) => {
-      const existing = await ctx.db.vacation.findUnique({ where: { id: input.id } });
-      if (!existing) {
-        throw new TRPCError({ code: "NOT_FOUND", message: "Vacation not found" });
-      }
+      const existing = await findUniqueOrThrow(
+        ctx.db.vacation.findUnique({ where: { id: input.id } }),
+        "Vacation",
+      );
 
       const userRecord = await ctx.db.user.findUnique({
         where: { email: ctx.session.user?.email ?? "" },