jayjennings
3f6dff5f24
- Add permissions logic for status options in corrective actions. - Create tests for permissions functionality. - Implement queries for user authentication and actions management. - Develop Actions page to display and manage corrective actions. - Create authentication pages for login, setup, and password reset. - Add IncidentDetail page to view incident details and associated actions. - Implement Settings page for user management and password changes.
48 lines
2.3 KiB
TypeScript
48 lines
2.3 KiB
TypeScript
import { and, eq } from 'drizzle-orm'
|
|
import { Hono } from 'hono'
|
|
import { z } from 'zod'
|
|
import { updateRootCauseSchema } from '../../shared/schemas.ts'
|
|
import { requireRole } from '../auth/middleware.ts'
|
|
import type { SessionUser } from '../auth/sessions.ts'
|
|
import type { Db } from '../db/client.ts'
|
|
import { incidents, investigations, rootCauses } from '../db/schema.ts'
|
|
import { diff } from '../lib/audit.ts'
|
|
import { currentUser, fail, validate, type AppEnv } from '../lib/http.ts'
|
|
import { auditIncident, loadDetail } from '../lib/incidents.ts'
|
|
|
|
const idParam = z.object({ id: z.uuid() })
|
|
|
|
async function findRootCause(db: Db, user: SessionUser, id: string) {
|
|
const [row] = await db
|
|
.select({ cause: rootCauses, incidentId: incidents.id, number: incidents.number })
|
|
.from(rootCauses)
|
|
.innerJoin(investigations, eq(investigations.id, rootCauses.investigationId))
|
|
.innerJoin(incidents, eq(incidents.id, investigations.incidentId))
|
|
.where(and(eq(rootCauses.id, id), eq(incidents.organizationId, user.organizationId)))
|
|
if (!row) throw fail(404, 'Root cause not found')
|
|
return row
|
|
}
|
|
|
|
export const rootCauseRoutes = new Hono<AppEnv>()
|
|
.patch('/:id', requireRole('supervisor'), validate('param', idParam), validate('json', updateRootCauseSchema), async (c) => {
|
|
const me = currentUser(c)
|
|
const db = c.get('db')
|
|
const { cause, incidentId, number } = await findRootCause(db, me, c.req.valid('param').id)
|
|
const input = c.req.valid('json')
|
|
const changes = diff(cause, input)
|
|
if (Object.keys(changes).length > 0) {
|
|
await db.update(rootCauses).set(input).where(eq(rootCauses.id, cause.id))
|
|
await auditIncident(db, me, me.organizationId, incidentId, 'root_cause.update', changes)
|
|
}
|
|
return c.json({ incident: await loadDetail(db, me, number) })
|
|
})
|
|
|
|
.delete('/:id', requireRole('supervisor'), validate('param', idParam), async (c) => {
|
|
const me = currentUser(c)
|
|
const db = c.get('db')
|
|
const { cause, incidentId, number } = await findRootCause(db, me, c.req.valid('param').id)
|
|
await db.delete(rootCauses).where(eq(rootCauses.id, cause.id))
|
|
await auditIncident(db, me, me.organizationId, incidentId, 'root_cause.remove', { category: cause.category, description: cause.description })
|
|
return c.json({ incident: await loadDetail(db, me, number) })
|
|
})
|