feat(dashboards): add social listening sidebar entry for ed persona (LFXV2-1689) (#792)

* feat(dashboards): add social listening sidebar entry for ed persona (LFXV2-1689)

- refactor metrics items into a local array to enable conditional append
- add social listening entry with pcc deep-link url when foundation uid is present
- hide entry when no foundation is selected to avoid broken deep links
- reading selectedFoundation() inside computed auto-wires reactive updates on foundation switch

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* fix(dashboards): normalize pcc base url for social listening link (LFXV2-1689)

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* feat(projects): add bff endpoint for uid to sfid resolution (LFXV2-1689)

- Register GET /api/projects/:uid/sfid route, mounted before documents block to keep the /:uid/<verb> family clustered
- Add ProjectController.getProjectSfid wrapping the existing NATS-backed getProjectSfidByUid helper
- Return { sfid: string | null } with HTTP 200 on lookup failure so callers can hide affordances uniformly

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* fix(review): validate uid param in getProjectSfid (LFXV2-1689)

- Adopt validateUidParameter (canonical helper per server-helpers.md) to bring getProjectSfid in line with every other /:uid endpoint in this controller
- Closes Important finding from post-commit code review on 04c2708 (defense-in-depth consistency gap)

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* feat(projects): add client getProjectSfid method (LFXV2-1689)

- add getProjectSfid(uid) on client ProjectService hitting /api/projects/:uid/sfid
- unwrap { sfid } response to string | null at the rxjs layer
- catchError to of(null) so caller hides cleanly on lookup failure
- import map from rxjs alphabetically alongside catchError

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* fix(review): encode uid and log sfid lookup errors (LFXV2-1689)

- wrap uid in encodeURIComponent on /api/projects/:uid/sfid URL
- console.error before of(null) so silent 401s/5xx surface in console
- aligns with sibling list GETs in project.service.ts that log on failure

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* feat(projects): expose selectedFoundationSfid on context service (LFXV2-1689)

- add selectedFoundationSfid: Signal<string | null> to ProjectContextService
- initializer mirrors initCanWrite shape via toObservable + switchMap
- short-circuits to of(null) when no foundation selected (no http call)
- switchMap cancels in-flight lookups on foundation switch

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* fix(dashboards): use foundation sfid for social listening url (LFXV2-1689)

- swap selectedFoundation()?.uid for selectedFoundationSfid() signal
- compose PCC URL with /project/<sfid>/reports/social-listening
- hide sidebar entry until sfid resolves (no broken UUID-based URL)
- no behaviour change to ED gate or sibling Metrics items

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* fix(project-context): reset sfid while foundation changes (LFXV2-1689)

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

* fix(projects): gate SFID lookup on project access (LFXV2-1689)

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

---------

Signed-off-by: Audi Young <audi.mycloud@gmail.com>

Author: audigregorie

apps/lfx-one/src/app/layouts/main-layout/main-layout.component.ts

@@ -289,24 +289,40 @@ export class MainLayoutComponent {
     }
 
     if (this.personaService.currentPersona() === 'executive-director') {
+      const metricsItems: SidebarMenuItem[] = [
+        {
+          label: 'Health Metrics',
+          icon: 'fa-light fa-chart-line-up',
+          routerLink: '/foundation/health-metrics',
+          testId: 'sidebar-metrics-health-metrics',
+        },
+        {
+          label: 'Marketing Impact',
+          icon: 'fa-light fa-bullhorn',
+          routerLink: '/foundation/marketing-impact',
+          testId: 'sidebar-metrics-marketing-impact',
+        },
+      ];
+
+      const foundationSfid = this.projectContextService.selectedFoundationSfid();
+      if (foundationSfid) {
+        const pccBaseUrl = environment.urls.pcc;
+        const baseUrl = pccBaseUrl.endsWith('/') ? pccBaseUrl.slice(0, -1) : pccBaseUrl;
+        metricsItems.push({
+          label: 'Social Listening',
+          icon: 'fa-light fa-ear-listen',
+          url: `${baseUrl}/project/${foundationSfid}/reports/social-listening`,
+          target: '_blank',
+          rel: 'noopener noreferrer',
+          testId: 'sidebar-metrics-social-listening',
+        });
+      }
+
       items.push({
         label: 'Metrics',
         isSection: true,
         expanded: true,
-        items: [
-          {
-            label: 'Health Metrics',
-            icon: 'fa-light fa-chart-line-up',
-            routerLink: '/foundation/health-metrics',
-            testId: 'sidebar-metrics-health-metrics',
-          },
-          {
-            label: 'Marketing Impact',
-            icon: 'fa-light fa-bullhorn',
-            routerLink: '/foundation/marketing-impact',
-            testId: 'sidebar-metrics-marketing-impact',
-          },
-        ],
+        items: metricsItems,
       });
     }
 

apps/lfx-one/src/app/shared/services/project-context.service.ts

@@ -8,7 +8,7 @@ import { Router } from '@angular/router';
 import { isBoardScopedPersona, ProjectContext } from '@lfx-one/shared/interfaces';
 import { isSameProjectContext } from '@lfx-one/shared/utils';
 import { SsrCookieService } from 'ngx-cookie-service-ssr';
-import { catchError, map, of, switchMap } from 'rxjs';
+import { catchError, map, of, startWith, switchMap } from 'rxjs';
 
 import { LensService } from './lens.service';
 import { PersonaService } from './persona.service';
@@ -41,6 +41,9 @@ export class ProjectContextService {
   /** Writer permission for the current active context — drives CTA visibility across dashboards. */
   public readonly canWrite: Signal<boolean> = this.initCanWrite();
 
+  /** Salesforce 18-char ID for the active foundation — resolves PCC deep-link targets. `null` while resolving or unavailable. */
+  public readonly selectedFoundationSfid: Signal<string | null> = this.initSelectedFoundationSfid();
+
   public constructor() {
     // Clean up legacy cookies from the previous cookie-hydrated design.
     this.cookieService.delete(this.foundationStorageKey, '/');
@@ -144,4 +147,18 @@ export class ProjectContextService {
       { initialValue: false }
     );
   }
+
+  private initSelectedFoundationSfid(): Signal<string | null> {
+    return toSignal(
+      toObservable(this.selectedFoundation).pipe(
+        switchMap((foundation) => {
+          if (!foundation?.uid) {
+            return of(null);
+          }
+          return this.projectService.getProjectSfid(foundation.uid).pipe(startWith(null));
+        })
+      ),
+      { initialValue: null }
+    );
+  }
 }

apps/lfx-one/src/app/shared/services/project.service.ts

@@ -4,7 +4,7 @@
 import { HttpClient, HttpHeaders, HttpParams } from '@angular/common/http';
 import { inject, Injectable, signal, WritableSignal } from '@angular/core';
 import { CreateProjectDocumentRequest, PendingActionItem, Project, ProjectDocument } from '@lfx-one/shared/interfaces';
-import { BehaviorSubject, catchError, Observable, of, shareReplay, take, tap } from 'rxjs';
+import { BehaviorSubject, catchError, map, Observable, of, shareReplay, take, tap } from 'rxjs';
 
 @Injectable({
   providedIn: 'root',
@@ -47,6 +47,16 @@ export class ProjectService {
     return this.projectCache.get(cacheKey)!;
   }
 
+  public getProjectSfid(uid: string): Observable<string | null> {
+    return this.http.get<{ sfid: string | null }>(`/api/projects/${encodeURIComponent(uid)}/sfid`).pipe(
+      map((res) => res.sfid ?? null),
+      catchError((error) => {
+        console.error('Failed to fetch project sfid:', error);
+        return of(null);
+      })
+    );
+  }
+
   public searchProjects(query: string): Observable<Project[]> {
     const params = new HttpParams().set('q', query);
 

apps/lfx-one/src/server/controllers/project.controller.ts

@@ -13,7 +13,7 @@ import { ReadableStream as NodeReadableStream } from 'node:stream/web';
 import { ServiceValidationError } from '../errors';
 import { contentDispositionAttachment } from '../helpers/content-disposition.helper';
 import { buildVCalendar, fetchAllMeetingPages, meetingsToVEvents } from '../helpers/ics.helper';
-import { getStringQueryParam } from '../helpers/validation.helper';
+import { getStringQueryParam, validateUidParameter } from '../helpers/validation.helper';
 import { logger } from '../services/logger.service';
 import { MeetingService } from '../services/meeting.service';
 import { ProjectService } from '../services/project.service';
@@ -135,6 +135,39 @@ export class ProjectController {
     }
   }
 
+  /**
+   * GET /projects/:uid/sfid — UUID → Salesforce 18-char ID translation via NATS.
+   * Returns `{ sfid: string | null }`; null on lookup failure so callers can hide cleanly.
+   * Project access is enforced via getProjectById before the NATS mapping (FGA on upstream).
+   */
+  public async getProjectSfid(req: Request, res: Response, next: NextFunction): Promise<void> {
+    const { uid } = req.params;
+    const startTime = logger.startOperation(req, 'get_project_sfid', { project_uid: uid });
+
+    try {
+      if (
+        !validateUidParameter(uid, req, next, {
+          operation: 'get_project_sfid',
+          service: 'project_controller',
+        })
+      ) {
+        return;
+      }
+
+      await this.projectService.getProjectById(req, uid, false);
+      const sfid = await this.projectService.getProjectSfidByUid(req, uid);
+
+      logger.success(req, 'get_project_sfid', startTime, {
+        project_uid: uid,
+        resolved: sfid != null,
+      });
+
+      res.json({ sfid });
+    } catch (error) {
+      next(error);
+    }
+  }
+
   /**
    * GET /projects/:uid/permissions
    */

apps/lfx-one/src/server/routes/projects.route.ts

@@ -26,6 +26,8 @@ router.put('/:uid/permissions/:username', (req, res, next) => projectController.
 
 router.delete('/:uid/permissions/:username', (req, res, next) => projectController.removeUserFromProjectPermissions(req, res, next));
 
+router.get('/:uid/sfid', (req, res, next) => projectController.getProjectSfid(req, res, next));
+
 // ── Document routes (folders + links + file uploads) ─────────────────────
 router.get('/:uid/documents', (req, res, next) => projectController.getProjectDocuments(req, res, next));
 router.post('/:uid/documents', (req, res, next) => projectController.createProjectDocument(req, res, next));