feat: build collaboration workspaces

app/api/devices/assets/[id]/route.ts

@@ -0,0 +1,74 @@
+import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
+import { recordAuditLog } from "@/modules/core/server/audit";
+import { requirePermission } from "@/modules/core/server/auth";
+import { deleteDeviceAsset, isDeviceMutationFailure, updateDeviceAsset } from "@/modules/devices/server/operations";
+import { validateDeviceAssetInput } from "@/modules/devices/types";
+
+type RouteContext = {
+  params: Promise<{ id: string }>;
+};
+
+export async function PATCH(request: Request, context: RouteContext): Promise<Response> {
+  const { id } = await context.params;
+  const auth = await requirePermission("device:manage", { action: "device.asset.update", targetType: "device_asset", targetId: id });
+  if (!auth.success) {
+    return auth.response;
+  }
+
+  const organizationId = auth.context.organization?.id;
+  if (!organizationId) {
+    return jsonFailure("请选择机构后维护设备", 400);
+  }
+
+  const input = validateDeviceAssetInput(await readJsonBody(request));
+  if (!input.success) {
+    return jsonFailure(input.reason);
+  }
+
+  const device = await updateDeviceAsset({ ...input.data, id, organizationId });
+  if (isDeviceMutationFailure(device)) {
+    return jsonFailure(device.reason, device.status);
+  }
+
+  await recordAuditLog({
+    actor: auth.context.account,
+    organizationId,
+    action: "device.asset.update",
+    targetType: "device_asset",
+    targetId: device.id,
+    result: "success",
+    reason: `更新设备：${device.name}`,
+  });
+
+  return jsonSuccess("设备已更新", { device });
+}
+
+export async function DELETE(_request: Request, context: RouteContext): Promise<Response> {
+  const { id } = await context.params;
+  const auth = await requirePermission("device:manage", { action: "device.asset.delete", targetType: "device_asset", targetId: id });
+  if (!auth.success) {
+    return auth.response;
+  }
+
+  const organizationId = auth.context.organization?.id;
+  if (!organizationId) {
+    return jsonFailure("请选择机构后维护设备", 400);
+  }
+
+  const device = await deleteDeviceAsset({ id, organizationId });
+  if (isDeviceMutationFailure(device)) {
+    return jsonFailure(device.reason, device.status);
+  }
+
+  await recordAuditLog({
+    actor: auth.context.account,
+    organizationId,
+    action: "device.asset.delete",
+    targetType: "device_asset",
+    targetId: device.id,
+    result: "success",
+    reason: `删除设备：${device.name}`,
+  });
+
+  return jsonSuccess("设备已删除", { device });
+}

app/api/devices/assets/route.ts

@@ -0,0 +1,54 @@
+import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
+import { recordAuditLog } from "@/modules/core/server/audit";
+import { requirePermission } from "@/modules/core/server/auth";
+import { createDeviceAsset, isDeviceMutationFailure, listDeviceOperationsData } from "@/modules/devices/server/operations";
+import { validateDeviceAssetInput } from "@/modules/devices/types";
+
+export async function GET(): Promise<Response> {
+  const auth = await requirePermission("device:read", { action: "device.asset.list", targetType: "device_asset" });
+  if (!auth.success) {
+    return auth.response;
+  }
+
+  const organizationId = auth.context.organization?.id;
+  if (!organizationId) {
+    return jsonFailure("请选择机构后查看设备运维", 400);
+  }
+
+  const data = await listDeviceOperationsData(organizationId);
+  return jsonSuccess("设备运维数据已加载", { data });
+}
+
+export async function POST(request: Request): Promise<Response> {
+  const auth = await requirePermission("device:manage", { action: "device.asset.create", targetType: "device_asset" });
+  if (!auth.success) {
+    return auth.response;
+  }
+
+  const organizationId = auth.context.organization?.id;
+  if (!organizationId) {
+    return jsonFailure("请选择机构后维护设备", 400);
+  }
+
+  const input = validateDeviceAssetInput(await readJsonBody(request));
+  if (!input.success) {
+    return jsonFailure(input.reason);
+  }
+
+  const device = await createDeviceAsset({ ...input.data, organizationId });
+  if (isDeviceMutationFailure(device)) {
+    return jsonFailure(device.reason, device.status);
+  }
+
+  await recordAuditLog({
+    actor: auth.context.account,
+    organizationId,
+    action: "device.asset.create",
+    targetType: "device_asset",
+    targetId: device.id,
+    result: "success",
+    reason: `创建设备：${device.name}`,
+  });
+
+  return jsonSuccess("设备已创建", { device }, 201);
+}

app/api/devices/tickets/[id]/route.ts

@@ -0,0 +1,74 @@
+import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
+import { recordAuditLog } from "@/modules/core/server/audit";
+import { requirePermission } from "@/modules/core/server/auth";
+import { deleteMaintenanceTicket, isDeviceMutationFailure, updateMaintenanceTicket } from "@/modules/devices/server/operations";
+import { validateMaintenanceTicketInput } from "@/modules/devices/types";
+
+type RouteContext = {
+  params: Promise<{ id: string }>;
+};
+
+export async function PATCH(request: Request, context: RouteContext): Promise<Response> {
+  const { id } = await context.params;
+  const auth = await requirePermission("device:manage", { action: "device.ticket.update", targetType: "maintenance_ticket", targetId: id });
+  if (!auth.success) {
+    return auth.response;
+  }
+
+  const organizationId = auth.context.organization?.id;
+  if (!organizationId) {
+    return jsonFailure("请选择机构后维护工单", 400);
+  }
+
+  const input = validateMaintenanceTicketInput(await readJsonBody(request));
+  if (!input.success) {
+    return jsonFailure(input.reason);
+  }
+
+  const ticket = await updateMaintenanceTicket({ ...input.data, id, organizationId });
+  if (isDeviceMutationFailure(ticket)) {
+    return jsonFailure(ticket.reason, ticket.status);
+  }
+
+  await recordAuditLog({
+    actor: auth.context.account,
+    organizationId,
+    action: "device.ticket.update",
+    targetType: "maintenance_ticket",
+    targetId: ticket.id,
+    result: "success",
+    reason: `更新维修工单：${ticket.title}`,
+  });
+
+  return jsonSuccess("维修工单已更新", { ticket });
+}
+
+export async function DELETE(_request: Request, context: RouteContext): Promise<Response> {
+  const { id } = await context.params;
+  const auth = await requirePermission("device:manage", { action: "device.ticket.delete", targetType: "maintenance_ticket", targetId: id });
+  if (!auth.success) {
+    return auth.response;
+  }
+
+  const organizationId = auth.context.organization?.id;
+  if (!organizationId) {
+    return jsonFailure("请选择机构后维护工单", 400);
+  }
+
+  const ticket = await deleteMaintenanceTicket({ id, organizationId });
+  if (isDeviceMutationFailure(ticket)) {
+    return jsonFailure(ticket.reason, ticket.status);
+  }
+
+  await recordAuditLog({
+    actor: auth.context.account,
+    organizationId,
+    action: "device.ticket.delete",
+    targetType: "maintenance_ticket",
+    targetId: ticket.id,
+    result: "success",
+    reason: `删除维修工单：${ticket.title}`,
+  });
+
+  return jsonSuccess("维修工单已删除", { ticket });
+}

app/api/devices/tickets/route.ts

@@ -0,0 +1,39 @@
+import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
+import { recordAuditLog } from "@/modules/core/server/audit";
+import { requirePermission } from "@/modules/core/server/auth";
+import { createMaintenanceTicket, isDeviceMutationFailure } from "@/modules/devices/server/operations";
+import { validateMaintenanceTicketInput } from "@/modules/devices/types";
+
+export async function POST(request: Request): Promise<Response> {
+  const auth = await requirePermission("device:manage", { action: "device.ticket.create", targetType: "maintenance_ticket" });
+  if (!auth.success) {
+    return auth.response;
+  }
+
+  const organizationId = auth.context.organization?.id;
+  if (!organizationId) {
+    return jsonFailure("请选择机构后维护工单", 400);
+  }
+
+  const input = validateMaintenanceTicketInput(await readJsonBody(request));
+  if (!input.success) {
+    return jsonFailure(input.reason);
+  }
+
+  const ticket = await createMaintenanceTicket({ ...input.data, organizationId });
+  if (isDeviceMutationFailure(ticket)) {
+    return jsonFailure(ticket.reason, ticket.status);
+  }
+
+  await recordAuditLog({
+    actor: auth.context.account,
+    organizationId,
+    action: "device.ticket.create",
+    targetType: "maintenance_ticket",
+    targetId: ticket.id,
+    result: "success",
+    reason: `创建维修工单：${ticket.title}`,
+  });
+
+  return jsonSuccess("维修工单已创建", { ticket }, 201);
+}