@striae-org/striae 4.0.3 → 4.2.0

package/app/services/audit/audit.service.ts

@@ -9,6 +9,7 @@ import type {
   AuditResult,
   PerformanceMetrics
 } from '~/types';
+import { getCaseData, getUserData } from '~/utils/data';
 import { generateWorkflowId } from '~/utils/common';
 import {
   fetchAuditEntriesForUser,
@@ -26,6 +27,7 @@ import {
   buildAnnotationCreateAuditParams,
   buildAnnotationDeleteAuditParams,
   buildAnnotationEditAuditParams,
+  buildCaseArchiveAuditParams,
   buildCaseCreationAuditParams,
   buildCaseDeletionAuditParams,
   buildCaseExportAuditParams,
@@ -60,6 +62,7 @@ export class AuditService {
   private static instance: AuditService;
   private auditBuffer: ValidationAuditEntry[] = [];
   private workflowId: string | null = null;
+  private userBadgeIdByUserId = new Map<string, string>();
 
   private constructor() {}
 
@@ -97,7 +100,26 @@ export class AuditService {
     const startTime = Date.now();
 
     try {
-      const auditEntry = buildValidationAuditEntry(params);
+      const providedBadgeId = params.userProfileDetails?.badgeId?.trim();
+      if (providedBadgeId && params.userId) {
+        this.userBadgeIdByUserId.set(params.userId, providedBadgeId);
+      }
+
+      const resolvedBadgeId =
+        providedBadgeId ||
+        (params.userId ? this.userBadgeIdByUserId.get(params.userId) : undefined);
+
+      const paramsWithBadgeId: CreateAuditEntryParams = resolvedBadgeId
+        ? {
+            ...params,
+            userProfileDetails: {
+              ...(params.userProfileDetails || {}),
+              badgeId: resolvedBadgeId
+            }
+          }
+        : params;
+
+      const auditEntry = buildValidationAuditEntry(paramsWithBadgeId);
 
       // Add to buffer for batch processing
       this.auditBuffer.push(auditEntry);
@@ -117,6 +139,67 @@ export class AuditService {
     }
   }
 
+  private normalizeBadgeId(badgeId?: string): string | undefined {
+    const normalized = badgeId?.trim();
+    return normalized ? normalized : undefined;
+  }
+
+  private applyBadgeIdToParams(
+    params: CreateAuditEntryParams,
+    badgeId?: string
+  ): CreateAuditEntryParams {
+    const normalizedBadgeId = this.normalizeBadgeId(badgeId);
+    if (!normalizedBadgeId) {
+      return params;
+    }
+
+    return {
+      ...params,
+      userProfileDetails: {
+        ...(params.userProfileDetails || {}),
+        badgeId: normalizedBadgeId
+      }
+    };
+  }
+
+  private async resolveBadgeIdForUser(user: User): Promise<string | undefined> {
+    const cachedBadgeId = this.userBadgeIdByUserId.get(user.uid);
+    if (cachedBadgeId) {
+      return cachedBadgeId;
+    }
+
+    try {
+      const userData = await getUserData(user);
+      const resolvedBadgeId = this.normalizeBadgeId(userData?.badgeId);
+
+      if (resolvedBadgeId) {
+        this.userBadgeIdByUserId.set(user.uid, resolvedBadgeId);
+      }
+
+      return resolvedBadgeId;
+    } catch (error) {
+      console.error('🚨 Audit: Failed to resolve badge ID for user:', error);
+      return undefined;
+    }
+  }
+
+  private async logEventForUser(user: User, params: CreateAuditEntryParams): Promise<void> {
+    const resolvedBadgeId = await this.resolveBadgeIdForUser(user);
+    await this.logEvent(this.applyBadgeIdToParams(params, resolvedBadgeId));
+  }
+
+  private async logEventForOptionalUser(
+    user: User | null,
+    params: CreateAuditEntryParams
+  ): Promise<void> {
+    if (!user) {
+      await this.logEvent(params);
+      return;
+    }
+
+    await this.logEventForUser(user, params);
+  }
+
   /**
    * Log case export event
    */
@@ -135,7 +218,7 @@ export class AuditService {
       keyId?: string;
     }
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildCaseExportAuditParams({
         user,
         caseNumber,
@@ -168,7 +251,7 @@ export class AuditService {
       keyId?: string;
     }
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildCaseImportAuditParams({
         user,
         caseNumber,
@@ -196,13 +279,15 @@ export class AuditService {
     originalExaminerUid?: string,
     performanceMetrics?: PerformanceMetrics,
     imageFileId?: string,
-    originalImageFileName?: string
+    originalImageFileName?: string,
+    badgeId?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildConfirmationCreationAuditParams({
         user,
         caseNumber,
         confirmationId,
+        badgeId,
         result,
         errors,
         originalExaminerUid,
@@ -231,7 +316,7 @@ export class AuditService {
       keyId?: string;
     }
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildConfirmationExportAuditParams({
         user,
         caseNumber,
@@ -264,9 +349,10 @@ export class AuditService {
       present: boolean;
       valid: boolean;
       keyId?: string;
-    }
+    },
+    reviewerBadgeId?: string // Badge/ID number of the reviewing examiner who exported the file
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildConfirmationImportAuditParams({
         user,
         caseNumber,
@@ -276,6 +362,7 @@ export class AuditService {
         confirmationsImported,
         errors,
         reviewingExaminerUid,
+        reviewerBadgeId,
         performanceMetrics,
         exporterUidValidated,
         totalConfirmationsInFile,
@@ -296,7 +383,7 @@ export class AuditService {
     caseNumber: string,
     caseName: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildCaseCreationAuditParams({
         user,
         caseNumber,
@@ -314,7 +401,7 @@ export class AuditService {
     oldName: string,
     newName: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildCaseRenameAuditParams({
         user,
         caseNumber,
@@ -334,7 +421,7 @@ export class AuditService {
     deleteReason: string,
     backupCreated: boolean = false
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildCaseDeletionAuditParams({
         user,
         caseNumber,
@@ -345,6 +432,35 @@ export class AuditService {
     );
   }
 
+  /**
+   * Log case archive event
+   */
+  public async logCaseArchive(
+    user: User,
+    caseNumber: string,
+    caseName: string,
+    archiveReason: string,
+    result: AuditResult = 'success',
+    errors: string[] = [],
+    totalFiles?: number,
+    archivedAt?: string,
+    processingTimeMs?: number
+  ): Promise<void> {
+    await this.logEventForUser(user,
+      buildCaseArchiveAuditParams({
+        user,
+        caseNumber,
+        caseName,
+        archiveReason,
+        result,
+        errors,
+        totalFiles,
+        archivedAt,
+        processingTimeMs
+      })
+    );
+  }
+
   /**
    * Log file upload event
    */
@@ -359,7 +475,7 @@ export class AuditService {
     processingTime?: number,
     fileId?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildFileUploadAuditParams({
         user,
         fileName,
@@ -386,7 +502,7 @@ export class AuditService {
     fileId?: string,
     originalFileName?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildFileDeletionAuditParams({
         user,
         fileName,
@@ -413,7 +529,7 @@ export class AuditService {
     accessReason?: string,
     originalFileName?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildFileAccessAuditParams({
         user,
         fileName,
@@ -441,7 +557,7 @@ export class AuditService {
     imageFileId?: string,
     originalImageFileName?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildAnnotationCreateAuditParams({
         user,
         annotationId,
@@ -468,7 +584,7 @@ export class AuditService {
     imageFileId?: string,
     originalImageFileName?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildAnnotationEditAuditParams({
         user,
         annotationId,
@@ -494,7 +610,7 @@ export class AuditService {
     imageFileId?: string,
     originalImageFileName?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildAnnotationDeleteAuditParams({
         user,
         annotationId,
@@ -516,7 +632,7 @@ export class AuditService {
     loginMethod: 'firebase' | 'sso' | 'api-key' | 'manual',
     userAgent?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildUserLoginAuditParams({
         user,
         sessionId,
@@ -535,7 +651,7 @@ export class AuditService {
     sessionDuration: number,
     logoutReason: 'user-initiated' | 'timeout' | 'security' | 'error'
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildUserLogoutAuditParams({
         user,
         sessionId,
@@ -550,14 +666,15 @@ export class AuditService {
    */
   public async logUserProfileUpdate(
     user: User,
-    profileField: 'displayName' | 'email' | 'organization' | 'role' | 'preferences' | 'avatar',
+    profileField: 'displayName' | 'email' | 'organization' | 'role' | 'preferences' | 'avatar' | 'badgeId',
     oldValue: string,
     newValue: string,
     result: AuditResult,
     sessionId?: string,
-    errors: string[] = []
+    errors: string[] = [],
+    badgeId?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildUserProfileUpdateAuditParams({
         user,
         profileField,
@@ -565,7 +682,8 @@ export class AuditService {
         newValue,
         result,
         sessionId,
-        errors
+        errors,
+        badgeId
       })
     );
   }
@@ -677,7 +795,7 @@ export class AuditService {
     userAgent?: string,
     sessionId?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildUserRegistrationAuditParams({
         user,
         firstName,
@@ -703,7 +821,7 @@ export class AuditService {
     userAgent?: string,
     errors: string[] = []
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildMfaEnrollmentAuditParams({
         user,
         phoneNumber,
@@ -729,7 +847,7 @@ export class AuditService {
     userAgent?: string,
     errors: string[] = []
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildMfaAuthenticationAuditParams({
         user,
         mfaMethod,
@@ -754,7 +872,7 @@ export class AuditService {
     userAgent?: string,
     errors: string[] = []
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildEmailVerificationAuditParams({
         user,
         result,
@@ -804,7 +922,7 @@ export class AuditService {
     sessionId?: string,
     userAgent?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildMarkEmailVerificationSuccessfulAuditParams({
         user,
         reason,
@@ -828,7 +946,7 @@ export class AuditService {
     sourceFileId?: string,
     sourceFileName?: string
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForUser(user,
       buildPDFGenerationAuditParams({
         user,
         fileName,
@@ -854,7 +972,7 @@ export class AuditService {
     targetResource?: string,
     blockedBySystem: boolean = true
   ): Promise<void> {
-    await this.logEvent(
+    await this.logEventForOptionalUser(user,
       buildSecurityViolationAuditParams({
         user,
         incidentType,
@@ -874,6 +992,7 @@ export class AuditService {
    * Get audit entries for display (public method for components)
    */
   public async getAuditEntriesForUser(userId: string, params?: {
+    requestingUser?: User;
     startDate?: string;
     endDate?: string;
     caseNumber?: string;
@@ -887,7 +1006,7 @@ export class AuditService {
       userId,
       ...params
     };
-    return await this.getAuditEntries(queryParams);
+    return await this.getAuditEntries(queryParams, params?.requestingUser);
   }
 
   /**
@@ -919,8 +1038,59 @@ export class AuditService {
   /**
    * Get audit entries based on query parameters
    */
-  private async getAuditEntries(params: AuditQueryParams): Promise<ValidationAuditEntry[]> {
+  private applyDateRangeFilter(
+    entries: ValidationAuditEntry[],
+    startDate?: string,
+    endDate?: string
+  ): ValidationAuditEntry[] {
+    const startMs = startDate ? new Date(startDate).getTime() : Number.NEGATIVE_INFINITY;
+    const endMs = endDate ? new Date(endDate).getTime() : Number.POSITIVE_INFINITY;
+
+    return entries.filter((entry) => {
+      const timestampMs = new Date(entry.timestamp).getTime();
+      return timestampMs >= startMs && timestampMs <= endMs;
+    });
+  }
+
+  private async getBundledArchivedCaseAuditEntries(
+    params: AuditQueryParams,
+    requestingUser?: User
+  ): Promise<ValidationAuditEntry[] | null> {
+    if (!requestingUser || !params.caseNumber) {
+      return null;
+    }
+
+    const caseData = await getCaseData(requestingUser, params.caseNumber);
+    if (!caseData?.isReadOnly || caseData.archived !== true) {
+      return null;
+    }
+
+    const bundledEntries = caseData.bundledAuditTrail?.entries;
+    if (!Array.isArray(bundledEntries)) {
+      return [];
+    }
+
+    const sortedEntries = sortAuditEntriesNewestFirst(bundledEntries);
+    const dateFilteredEntries = this.applyDateRangeFilter(
+      sortedEntries,
+      params.startDate,
+      params.endDate
+    );
+    const filteredEntries = applyAuditEntryFilters(dateFilteredEntries, {
+      ...params,
+      userId: undefined
+    });
+
+    return applyAuditPagination(filteredEntries, params);
+  }
+
+  private async getAuditEntries(params: AuditQueryParams, requestingUser?: User): Promise<ValidationAuditEntry[]> {
     try {
+      const bundledArchivedEntries = await this.getBundledArchivedCaseAuditEntries(params, requestingUser);
+      if (bundledArchivedEntries) {
+        return bundledArchivedEntries;
+      }
+
       // If userId is provided, fetch from server
       if (params.userId) {
         const serverEntries = await fetchAuditEntriesForUser({

package/app/services/audit/builders/audit-entry-builder.ts

@@ -26,7 +26,8 @@ export const buildValidationAuditEntry = (
       fileDetails: params.fileDetails,
       annotationDetails: params.annotationDetails,
       sessionDetails: params.sessionDetails,
-      securityDetails: params.securityDetails
+      securityDetails: params.securityDetails,
+      userProfileDetails: params.userProfileDetails
     }
   };
 };

package/app/services/audit/builders/audit-event-builders-case-file.ts

@@ -88,6 +88,49 @@ export const buildCaseDeletionAuditParams = (
   };
 };
 
+interface BuildCaseArchiveAuditParamsInput {
+  user: User;
+  caseNumber: string;
+  caseName: string;
+  archiveReason: string;
+  result?: AuditResult;
+  errors?: string[];
+  totalFiles?: number;
+  archivedAt?: string;
+  processingTimeMs?: number;
+}
+
+export const buildCaseArchiveAuditParams = (
+  input: BuildCaseArchiveAuditParamsInput
+): CreateAuditEntryParams => {
+  const result = input.result || 'success';
+  const archivedAt = input.archivedAt || new Date().toISOString();
+
+  return {
+    userId: input.user.uid,
+    userEmail: input.user.email || '',
+    action: 'case-archive',
+    result,
+    fileName: `${input.caseNumber}.case`,
+    fileType: 'case-package',
+    validationErrors: input.errors || [],
+    caseNumber: input.caseNumber,
+    workflowPhase: 'casework',
+    caseDetails: {
+      newCaseName: input.caseName,
+      deleteReason: input.archiveReason,
+      totalFiles: input.totalFiles,
+      lastModified: archivedAt,
+    },
+    performanceMetrics: input.processingTimeMs
+      ? {
+          processingTimeMs: input.processingTimeMs,
+          fileSizeBytes: 0,
+        }
+      : undefined,
+  };
+};
+
 interface BuildFileUploadAuditParamsInput {
   user: User;
   fileName: string;

package/app/services/audit/builders/audit-event-builders-user-security.ts

@@ -57,9 +57,10 @@ export const buildUserLogoutAuditParams = (
 
 interface BuildUserProfileUpdateAuditParamsInput {
   user: User;
-  profileField: 'displayName' | 'email' | 'organization' | 'role' | 'preferences' | 'avatar';
+  profileField: 'displayName' | 'email' | 'organization' | 'role' | 'preferences' | 'avatar' | 'badgeId';
   oldValue: string;
   newValue: string;
+  badgeId?: string;
   result: AuditResult;
   sessionId?: string;
   errors?: string[];
@@ -85,7 +86,8 @@ export const buildUserProfileUpdateAuditParams = (
     userProfileDetails: {
       profileField: input.profileField,
       oldValue: input.oldValue,
-      newValue: input.newValue
+      newValue: input.newValue,
+      badgeId: input.badgeId
     }
   };
 };

package/app/services/audit/builders/audit-event-builders-workflow.ts

@@ -125,6 +125,7 @@ interface BuildConfirmationCreationAuditParamsInput {
   user: User;
   caseNumber: string;
   confirmationId: string;
+  badgeId?: string;
   result: AuditResult;
   errors?: string[];
   originalExaminerUid?: string;
@@ -156,6 +157,11 @@ export const buildConfirmationCreationAuditParams = (
     performanceMetrics: input.performanceMetrics,
     originalExaminerUid: input.originalExaminerUid,
     reviewingExaminerUid: input.user.uid,
+    userProfileDetails: input.badgeId
+      ? {
+          badgeId: input.badgeId
+        }
+      : undefined,
     fileDetails: input.imageFileId && input.originalImageFileName
       ? {
           fileId: input.imageFileId,
@@ -214,6 +220,7 @@ interface BuildConfirmationImportAuditParamsInput {
   confirmationsImported: number;
   errors?: string[];
   reviewingExaminerUid?: string;
+  reviewerBadgeId?: string;
   performanceMetrics?: PerformanceMetrics;
   exporterUidValidated?: boolean;
   totalConfirmationsInFile?: number;
@@ -263,6 +270,7 @@ export const buildConfirmationImportAuditParams = (
         },
     originalExaminerUid: input.user.uid,
     reviewingExaminerUid: input.reviewingExaminerUid,
+    reviewerBadgeId: input.reviewerBadgeId,
     caseDetails: input.totalConfirmationsInFile !== undefined
       ? {
           totalAnnotations: input.totalConfirmationsInFile

package/app/services/audit/builders/index.ts

@@ -9,6 +9,7 @@ export {
 } from './audit-event-builders-workflow';
 
 export {
+  buildCaseArchiveAuditParams,
   buildCaseCreationAuditParams,
   buildCaseDeletionAuditParams,
   buildCaseRenameAuditParams,

package/app/types/audit.ts

@@ -3,7 +3,7 @@
 
 export type AuditAction = 
   // Case Management Actions
-  | 'case-create' | 'case-rename' | 'case-delete'
+  | 'case-create' | 'case-rename' | 'case-delete' | 'case-archive'
   // Confirmation Workflow Actions  
   | 'case-export' | 'case-import' | 'confirmation-create' | 'confirmation-export' | 'confirmation-import'
   // File Operations
@@ -59,6 +59,7 @@ export interface AuditDetails {
   // Context & Workflow
   originalExaminerUid?: string;
   reviewingExaminerUid?: string;
+  reviewerBadgeId?: string;
   workflowPhase?: WorkflowPhase;
   
   // Performance & Metrics
@@ -160,6 +161,7 @@ export interface CreateAuditEntryParams {
   performanceMetrics?: PerformanceMetrics;
   originalExaminerUid?: string;
   reviewingExaminerUid?: string;
+  reviewerBadgeId?: string;
   // Extended detail fields
   caseDetails?: CaseAuditDetails;
   fileDetails?: FileAuditDetails;
@@ -269,9 +271,10 @@ export interface SecurityAuditDetails {
  * User profile and authentication specific audit details
  */
 export interface UserProfileAuditDetails {
-  profileField?: 'displayName' | 'email' | 'organization' | 'role' | 'preferences' | 'avatar';
+  profileField?: 'displayName' | 'email' | 'organization' | 'role' | 'preferences' | 'avatar' | 'badgeId';
   oldValue?: string;
   newValue?: string;
+  badgeId?: string;
   resetMethod?: 'email' | 'sms' | 'security-questions' | 'admin-reset';
   resetToken?: string; // Partial token for tracking (last 4 chars)
   verificationMethod?: 'email-link' | 'sms-code' | 'totp' | 'backup-codes' | 'admin-verification';