@open-mercato/core 0.6.4-develop.4217.1.c9aa050183 → 0.6.4-develop.4236.1.9fa6806b34

package/src/modules/staff/api/timesheets/time-projects/[id]/employees/route.ts

@@ -0,0 +1,167 @@
+import { z } from 'zod'
+import { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
+import { parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'
+import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
+import { StaffTimeProjectMember } from '../../../../../data/entities'
+import { staffTimeProjectMemberAssignSchema } from '../../../../../data/validators'
+import { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../../../../openapi'
+
+function extractProjectIdFromUrl(request?: Request): string | null {
+  if (!request?.url) return null
+  try {
+    const url = new URL(request.url)
+    const match = url.pathname.match(/\/time-projects\/([^/]+)\/employees/)
+    return match?.[1] ?? null
+  } catch {
+    return null
+  }
+}
+
+const F = {
+  id: 'id',
+  tenant_id: 'tenant_id',
+  organization_id: 'organization_id',
+  time_project_id: 'time_project_id',
+  staff_member_id: 'staff_member_id',
+  role: 'role',
+  status: 'status',
+  assigned_start_date: 'assigned_start_date',
+  assigned_end_date: 'assigned_end_date',
+  created_at: 'created_at',
+  updated_at: 'updated_at',
+  deleted_at: 'deleted_at',
+} as const
+
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.view'] },
+  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },
+  DELETE: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },
+}
+
+export const metadata = routeMetadata
+
+const rawBodySchema = z.object({}).passthrough()
+
+const listSchema = z
+  .object({
+    page: z.coerce.number().min(1).default(1),
+    pageSize: z.coerce.number().min(1).max(100).default(50),
+    timeProjectId: z.string().uuid().optional(),
+    status: z.string().optional(),
+    sortField: z.string().optional(),
+    sortDir: z.enum(['asc', 'desc']).optional(),
+  })
+  .passthrough()
+
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: StaffTimeProjectMember,
+    idField: 'id',
+    orgField: 'organizationId',
+    tenantField: 'tenantId',
+    softDeleteField: 'deletedAt',
+  },
+  indexer: { entityType: 'staff:staff_time_project_member' },
+  list: {
+    schema: listSchema,
+    entityId: 'staff:staff_time_project_member',
+    fields: [
+      F.id,
+      F.organization_id,
+      F.tenant_id,
+      F.time_project_id,
+      F.staff_member_id,
+      F.role,
+      F.status,
+      F.assigned_start_date,
+      F.assigned_end_date,
+      F.created_at,
+      F.updated_at,
+    ],
+    sortFieldMap: {
+      createdAt: F.created_at,
+      updatedAt: F.updated_at,
+      assignedStartDate: F.assigned_start_date,
+    },
+    buildFilters: async (query, ctx) => {
+      const filters: Record<string, unknown> = {}
+      const projectId = query.timeProjectId ?? extractProjectIdFromUrl(ctx?.request) ?? null
+      if (typeof projectId === 'string' && projectId.trim().length > 0) {
+        filters[F.time_project_id] = projectId.trim()
+      }
+      if (typeof query.status === 'string' && query.status.trim().length > 0) {
+        filters[F.status] = query.status.trim()
+      }
+      return filters
+    },
+  },
+  actions: {
+    create: {
+      commandId: 'staff.timesheets.time_project_members.assign',
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations()
+        const projectId = extractProjectIdFromUrl(ctx?.request) ?? null
+        const body = { ...raw, timeProjectId: raw?.timeProjectId ?? projectId }
+        return parseScopedCommandInput(staffTimeProjectMemberAssignSchema, body, ctx, translate)
+      },
+      response: ({ result }) => ({ id: result?.timeProjectMemberId ?? null }),
+      status: 201,
+    },
+    delete: {
+      commandId: 'staff.timesheets.time_project_members.unassign',
+      schema: rawBodySchema,
+      mapInput: async ({ parsed, ctx }) => {
+        const { translate } = await resolveTranslations()
+        const id =
+          parsed?.body?.id ??
+          parsed?.id ??
+          parsed?.query?.id ??
+          (ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null)
+        if (!id) {
+          throw new CrudHttpError(400, {
+            error: translate('staff.timesheets.errors.memberRequired', 'Time project member id is required.'),
+          })
+        }
+        return { id }
+      },
+      response: () => ({ ok: true }),
+    },
+  },
+})
+
+export const GET = crud.GET
+export const POST = crud.POST
+export const DELETE = crud.DELETE
+
+const projectMemberListItemSchema = z.object({
+  id: z.string().uuid().nullable().optional(),
+  organization_id: z.string().uuid().nullable().optional(),
+  tenant_id: z.string().uuid().nullable().optional(),
+  time_project_id: z.string().uuid().nullable().optional(),
+  staff_member_id: z.string().uuid().nullable().optional(),
+  role: z.string().nullable().optional(),
+  status: z.string().nullable().optional(),
+  assigned_start_date: z.string().nullable().optional(),
+  assigned_end_date: z.string().nullable().optional(),
+  created_at: z.string().nullable().optional(),
+  updated_at: z.string().nullable().optional(),
+})
+
+export const openApi = createStaffCrudOpenApi({
+  resourceName: 'TimeProjectMember',
+  pluralName: 'Time Project Members',
+  querySchema: listSchema,
+  listResponseSchema: createPagedListResponseSchema(projectMemberListItemSchema),
+  create: {
+    schema: staffTimeProjectMemberAssignSchema,
+    description: 'Assigns an employee to a time project.',
+  },
+  del: {
+    schema: z.object({ id: z.string().uuid() }),
+    responseSchema: defaultOkResponseSchema,
+    description: 'Unassigns an employee from a time project.',
+  },
+})

package/src/modules/staff/api/timesheets/time-projects/route.ts

@@ -0,0 +1,244 @@
+import { z } from 'zod'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'
+import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
+import { resolveCrudRecordId, parseScopedCommandInput } from '@open-mercato/shared/lib/api/scoped'
+import { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'
+import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { StaffTimeProject, StaffTimeProjectMember, StaffTeamMember } from '../../../data/entities'
+import { staffTimeProjectCreateSchema, staffTimeProjectUpdateSchema } from '../../../data/validators'
+import { sanitizeSearchTerm, parseBooleanFlag } from '../../helpers'
+import { createStaffCrudOpenApi, createPagedListResponseSchema, defaultOkResponseSchema } from '../../openapi'
+
+const F = {
+  id: 'id',
+  tenant_id: 'tenant_id',
+  organization_id: 'organization_id',
+  name: 'name',
+  code: 'code',
+  description: 'description',
+  project_type: 'project_type',
+  color: 'color',
+  status: 'status',
+  customer_id: 'customer_id',
+  owner_user_id: 'owner_user_id',
+  cost_center: 'cost_center',
+  start_date: 'start_date',
+  created_at: 'created_at',
+  updated_at: 'updated_at',
+  deleted_at: 'deleted_at',
+} as const
+
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.view'] },
+  POST: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },
+  PUT: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },
+  DELETE: { requireAuth: true, requireFeatures: ['staff.timesheets.projects.manage'] },
+}
+
+export const metadata = routeMetadata
+
+const rawBodySchema = z.object({}).passthrough()
+
+const listSchema = z
+  .object({
+    page: z.coerce.number().min(1).default(1),
+    pageSize: z.coerce.number().min(1).max(100).default(50),
+    q: z.string().optional(),
+    ids: z.string().optional(),
+    projectType: z.string().optional(),
+    status: z.string().optional(),
+    customerId: z.string().uuid().optional(),
+    mine: z.string().optional(),
+    include: z.string().optional(),
+    sortField: z.string().optional(),
+    sortDir: z.enum(['asc', 'desc']).optional(),
+  })
+  .passthrough()
+
+async function resolveCallerAssignedProjectIds(
+  em: EntityManager,
+  userId: string,
+  tenantId: string,
+  organizationId: string,
+): Promise<string[]> {
+  const scopeCtx = { tenantId, organizationId }
+  const staffMember = await findOneWithDecryption(
+    em.fork(),
+    StaffTeamMember,
+    { userId, tenantId, organizationId, deletedAt: null },
+    {},
+    scopeCtx,
+  )
+  if (!staffMember) return []
+  const memberships = await em.fork().find(StaffTimeProjectMember, {
+    staffMemberId: staffMember.id,
+    tenantId,
+    organizationId,
+    status: 'active',
+    deletedAt: null,
+  })
+  return Array.from(new Set(memberships.map((m) => m.timeProjectId)))
+}
+
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: StaffTimeProject,
+    idField: 'id',
+    orgField: 'organizationId',
+    tenantField: 'tenantId',
+    softDeleteField: 'deletedAt',
+  },
+  indexer: { entityType: 'staff:staff_time_project' },
+  enrichers: { entityId: 'staff:staff_time_project' },
+  list: {
+    schema: listSchema,
+    entityId: 'staff:staff_time_project',
+    fields: [
+      F.id,
+      F.organization_id,
+      F.tenant_id,
+      F.name,
+      F.code,
+      F.description,
+      F.project_type,
+      F.color,
+      F.status,
+      F.customer_id,
+      F.owner_user_id,
+      F.cost_center,
+      F.start_date,
+      F.created_at,
+      F.updated_at,
+    ],
+    sortFieldMap: {
+      name: F.name,
+      code: F.code,
+      status: F.status,
+      createdAt: F.created_at,
+      updatedAt: F.updated_at,
+      startDate: F.start_date,
+    },
+    buildFilters: async (query, ctx) => {
+      const filters: Record<string, unknown> = {}
+      let narrowIds: string[] | null = null
+      if (typeof query.ids === 'string' && query.ids.trim().length > 0) {
+        narrowIds = query.ids
+          .split(',')
+          .map((value) => value.trim())
+          .filter((value) => value.length > 0)
+      }
+      if (parseBooleanFlag(query.mine) && ctx.auth) {
+        const em = ctx.container.resolve('em') as EntityManager
+        const tenantId = ctx.auth.tenantId ?? ''
+        const organizationId = ctx.selectedOrganizationId ?? ctx.auth.orgId ?? ''
+        const assigned = await resolveCallerAssignedProjectIds(
+          em,
+          ctx.auth.sub,
+          tenantId,
+          organizationId,
+        )
+        narrowIds = narrowIds
+          ? narrowIds.filter((id) => assigned.includes(id))
+          : assigned
+        if (narrowIds.length === 0) {
+          filters[F.id] = { $in: ['00000000-0000-0000-0000-000000000000'] }
+          return filters
+        }
+      }
+      if (narrowIds && narrowIds.length > 0) {
+        filters[F.id] = { $in: narrowIds }
+      }
+      const term = sanitizeSearchTerm(query.q)
+      if (term) {
+        filters[F.name] = { $ilike: `%${escapeLikePattern(term)}%` }
+      }
+      if (typeof query.projectType === 'string' && query.projectType.trim().length > 0) {
+        filters[F.project_type] = query.projectType.trim()
+      }
+      if (typeof query.status === 'string' && query.status.trim().length > 0) {
+        filters[F.status] = query.status.trim()
+      }
+      if (typeof query.customerId === 'string' && query.customerId.trim().length > 0) {
+        filters[F.customer_id] = query.customerId.trim()
+      }
+      return filters
+    },
+  },
+  actions: {
+    create: {
+      commandId: 'staff.timesheets.time_projects.create',
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations()
+        return parseScopedCommandInput(staffTimeProjectCreateSchema, raw ?? {}, ctx, translate)
+      },
+      response: ({ result }) => ({ id: result?.timeProjectId ?? null }),
+      status: 201,
+    },
+    update: {
+      commandId: 'staff.timesheets.time_projects.update',
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations()
+        return parseScopedCommandInput(staffTimeProjectUpdateSchema, raw ?? {}, ctx, translate)
+      },
+      response: () => ({ ok: true }),
+    },
+    delete: {
+      commandId: 'staff.timesheets.time_projects.delete',
+      schema: rawBodySchema,
+      mapInput: async ({ parsed, ctx }) => {
+        const { translate } = await resolveTranslations()
+        const id = resolveCrudRecordId(parsed, ctx, translate)
+        return { id }
+      },
+      response: () => ({ ok: true }),
+    },
+  },
+})
+
+export const GET = crud.GET
+export const POST = crud.POST
+export const PUT = crud.PUT
+export const DELETE = crud.DELETE
+
+const timeProjectListItemSchema = z.object({
+  id: z.string().uuid().nullable().optional(),
+  organization_id: z.string().uuid().nullable().optional(),
+  tenant_id: z.string().uuid().nullable().optional(),
+  name: z.string().nullable().optional(),
+  code: z.string().nullable().optional(),
+  description: z.string().nullable().optional(),
+  project_type: z.string().nullable().optional(),
+  color: z.string().nullable().optional(),
+  status: z.string().nullable().optional(),
+  customer_id: z.string().uuid().nullable().optional(),
+  owner_user_id: z.string().uuid().nullable().optional(),
+  cost_center: z.string().nullable().optional(),
+  start_date: z.string().nullable().optional(),
+  created_at: z.string().nullable().optional(),
+  updated_at: z.string().nullable().optional(),
+})
+
+export const openApi = createStaffCrudOpenApi({
+  resourceName: 'TimeProject',
+  pluralName: 'Time Projects',
+  querySchema: listSchema,
+  listResponseSchema: createPagedListResponseSchema(timeProjectListItemSchema),
+  create: {
+    schema: staffTimeProjectCreateSchema,
+    description: 'Creates a time project.',
+  },
+  update: {
+    schema: staffTimeProjectUpdateSchema,
+    responseSchema: defaultOkResponseSchema,
+    description: 'Updates a time project by id.',
+  },
+  del: {
+    schema: z.object({ id: z.string().uuid() }),
+    responseSchema: defaultOkResponseSchema,
+    description: 'Soft-deletes a time project by id.',
+  },
+})

package/src/modules/staff/backend/staff/timesheets/page.meta.ts

@@ -0,0 +1,20 @@
+import React from 'react'
+
+const clockIcon = React.createElement(
+  'svg',
+  { width: 16, height: 16, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2 },
+  React.createElement('circle', { cx: 12, cy: 12, r: 10 }),
+  React.createElement('path', { d: 'M12 6v6l4 2' }),
+)
+
+export const metadata = {
+  requireAuth: true,
+  requireFeatures: ['staff.timesheets.view'],
+  pageTitle: 'My Timesheets',
+  pageTitleKey: 'staff.timesheets.nav.my_timesheets',
+  pageGroup: 'Employees',
+  pageGroupKey: 'staff.nav.group',
+  pageOrder: 85,
+  icon: clockIcon,
+  breadcrumb: [{ label: 'My Timesheets', labelKey: 'staff.timesheets.nav.my_timesheets' }],
+}