86 lines
2.7 KiB
TypeScript
86 lines
2.7 KiB
TypeScript
import { and, eq } from "drizzle-orm";
|
|
|
|
import { jsonFailure, jsonSuccess, readJsonBody } from "@/modules/core/server/api";
|
|
import { recordAuditLog } from "@/modules/core/server/audit";
|
|
import { requirePermission } from "@/modules/core/server/auth";
|
|
import { getDatabase } from "@/modules/core/server/db";
|
|
import { systemIncidents } from "@/modules/core/server/schema";
|
|
import type { IncidentStatus } from "@/modules/core/types";
|
|
|
|
type RouteContext = {
|
|
params: Promise<{
|
|
id: string;
|
|
}>;
|
|
};
|
|
|
|
const INCIDENT_STATUSES: IncidentStatus[] = ["open", "acknowledged", "resolved", "closed"];
|
|
|
|
function isRecord(value: unknown): value is Record<string, unknown> {
|
|
return typeof value === "object" && value !== null && !Array.isArray(value);
|
|
}
|
|
|
|
function readStatus(value: unknown): IncidentStatus | null {
|
|
if (typeof value !== "string") {
|
|
return null;
|
|
}
|
|
|
|
return INCIDENT_STATUSES.find((status) => status === value) ?? null;
|
|
}
|
|
|
|
export async function PATCH(request: Request, context: RouteContext): Promise<Response> {
|
|
const { id } = await context.params;
|
|
const auth = await requirePermission("incident:manage", {
|
|
action: "incident.update",
|
|
targetType: "incident",
|
|
targetId: id,
|
|
});
|
|
|
|
if (!auth.success) {
|
|
return auth.response;
|
|
}
|
|
|
|
const body = await readJsonBody(request);
|
|
if (!isRecord(body)) {
|
|
return jsonFailure("请求数据格式无效");
|
|
}
|
|
|
|
const status = readStatus(body.status);
|
|
if (!status) {
|
|
return jsonFailure("故障状态无效");
|
|
}
|
|
|
|
const database = getDatabase();
|
|
const organizationId = auth.context.organization?.id;
|
|
const updateValues = {
|
|
status,
|
|
updatedAt: new Date(),
|
|
acknowledgedByAccountId: status === "acknowledged" ? auth.context.account.id : undefined,
|
|
acknowledgedAt: status === "acknowledged" ? new Date() : undefined,
|
|
resolvedByAccountId: status === "resolved" || status === "closed" ? auth.context.account.id : undefined,
|
|
resolvedAt: status === "resolved" || status === "closed" ? new Date() : undefined,
|
|
};
|
|
const rows = organizationId
|
|
? await database
|
|
.update(systemIncidents)
|
|
.set(updateValues)
|
|
.where(and(eq(systemIncidents.id, id), eq(systemIncidents.organizationId, organizationId)))
|
|
.returning()
|
|
: await database.update(systemIncidents).set(updateValues).where(eq(systemIncidents.id, id)).returning();
|
|
const incident = rows[0];
|
|
if (!incident) {
|
|
return jsonFailure("故障事件不存在", 404);
|
|
}
|
|
|
|
await recordAuditLog({
|
|
actor: auth.context.account,
|
|
organizationId: incident.organizationId ?? undefined,
|
|
action: "incident.update",
|
|
targetType: "incident",
|
|
targetId: incident.id,
|
|
result: "success",
|
|
reason: `故障状态更新为：${status}`,
|
|
});
|
|
|
|
return jsonSuccess("故障事件已更新", { incident });
|
|
}
|