@peopl-health/nexus 4.3.2 → 4.3.3

package/lib/controllers/bugReportController.js

@@ -4,7 +4,7 @@ const runtimeConfig = require('../config/runtimeConfig');
 const { logger } = require('../utils/logger');
 
 const { Message } = require('../models/messageModel');
-const { getBug, VALID_SEVERITIES } = require('../models/bugModel');
+const { getBug, VALID_SEVERITIES, UPDATABLE_FIELDS } = require('../models/bugModel');
 
 const { addRecord, getRecordByFilter } = require('../services/airtableService');
 
@@ -99,14 +99,27 @@ const updateBugController = async (req, res) => {
       return res.status(400).json({ success: false, error: 'No fields provided for update' });
     }
 
+    const disallowed = Object.keys(fields).filter(k => !UPDATABLE_FIELDS.includes(k));
+    if (disallowed.length > 0) {
+      return res.status(400).json({ success: false, error: `Fields not allowed for update: ${disallowed.join(', ')}` });
+    }
+
+    if (fields.severity != null && !VALID_SEVERITIES.includes(fields.severity)) {
+      return res.status(400).json({ success: false, error: `Severity must be one of: ${VALID_SEVERITIES.join(', ')}` });
+    }
+
+    if (fields.project !== undefined && (typeof fields.project !== 'object' || Array.isArray(fields.project))) {
+      return res.status(400).json({ success: false, error: 'project must be an object' });
+    }
+
     const Bug = getBug();
-    const updatedBug = await Bug.findOneAndUpdate({ recordId }, fields, { new: true });
+    const updatedBug = await Bug.findOneAndUpdate({ recordId }, { $set: fields }, { new: true, runValidators: true });
     if (!updatedBug) return res.status(404).json({ success: false, error: 'Bug not found' });
 
     res.status(200).json({ success: true, bug: updatedBug });
   } catch (error) {
     logger.error('Error updating bug report:', { error: error.message, recordId: req.params?.recordId });
-    res.status(500).json({ success: false, error: error.message });
+    res.status(500).json({ success: false, error: 'Internal server error' });
   }
 };
 

package/lib/models/bugModel.js

@@ -4,6 +4,7 @@ const { getDb, getModelDatabase } = require('../config/mongoConfig');
 const { logger } = require('../utils/logger');
 
 const VALID_SEVERITIES = ['low', 'medium', 'high', 'critical'];
+const UPDATABLE_FIELDS = ['status', 'repository', 'issue', 'assignees', 'pullRequests', 'resolution', 'immediatePatch', 'severity', 'server', 'bugType', 'project'];
 
 const bugSchema = new mongoose.Schema({
   reporter: { type: String, required: true, index: true },
@@ -19,7 +20,7 @@ const bugSchema = new mongoose.Schema({
   assignees: [{ type: String, default: null }],
   pullRequests: [{ type: String, default: null }],
   resolution: { type: String, default: null },
-  inmediatePatch: { type: String, default: null },
+  immediatePatch: { type: String, default: null },
   recordId: { type: String, default: null },
   project: {
     projectId: { type: String, default: null },
@@ -34,4 +35,4 @@ const getBug = () => {
   return db.models.Bug || db.model('Bug', bugSchema);
 };
 
-module.exports = { getBug, bugSchema, VALID_SEVERITIES };
+module.exports = { getBug, bugSchema, VALID_SEVERITIES, UPDATABLE_FIELDS };

package/lib/routes/index.js

@@ -147,6 +147,7 @@ const builtInControllers = {
   markMessagesAsReadController: conversationController.markMessagesAsReadController,
   searchMessagesByNumberController: conversationController.searchMessagesByNumberController,
   reportBugController: bugReportController.reportBugController,
+  updateBugController: bugReportController.updateBugController,
   getBugByWhatsappIdController: bugReportController.getBugByWhatsappIdController,
   caseDocumentationController: caseDocumentationController.caseDocumentationController,
   

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peopl-health/nexus",
-  "version": "4.3.2",
+  "version": "4.3.3",
   "description": "Core messaging and assistant library for WhatsApp communication platforms",
   "keywords": [
     "whatsapp",