Files

63 lines
2.0 KiB
TypeScript

import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
import { recordAuditLog } from "@/modules/core/server/audit";
import { requirePermission } from "@/modules/core/server/auth";
import { createEmergencyIncident, isEmergencyMutationFailure, listEmergencyIncidentData } from "@/modules/emergency/server/operations";
import { validateEmergencyIncidentCreateInput } from "@/modules/emergency/types";
export async function GET(): Promise<Response> {
const auth = await requirePermission("incident:read", {
action: "emergency.incident.list",
targetType: "incident",
});
if (!auth.success) {
return auth.response;
}
const organizationId = auth.context.organization?.id;
if (!organizationId) {
return jsonFailure("请选择机构后查看应急事件", 400);
}
const data = await listEmergencyIncidentData(organizationId);
return jsonSuccess("应急事件已加载", { data });
}
export async function POST(request: Request): Promise<Response> {
const auth = await requirePermission("incident:manage", {
action: "emergency.incident.create",
targetType: "incident",
});
if (!auth.success) {
return auth.response;
}
const organizationId = auth.context.organization?.id;
if (!organizationId) {
return jsonFailure("请选择机构后创建应急事件", 400);
}
const input = validateEmergencyIncidentCreateInput(await readJsonBody(request));
if (!input.success) {
return jsonFailure(input.reason);
}
const incident = await createEmergencyIncident({ ...input.data, organizationId });
if (isEmergencyMutationFailure(incident)) {
return jsonFailure(incident.reason, incident.status);
}
await recordAuditLog({
actor: auth.context.account,
organizationId,
action: "emergency.incident.create",
targetType: "incident",
targetId: incident.id,
result: "success",
reason: `创建应急事件:${incident.title}`,
});
return jsonSuccess("应急事件已创建", { incident }, 201);
}