wangsli/hyb-oa
1
0
派生 0
代码 工单 合并请求 工作流 8 软件包 项目 发布 百科 活动

feat(P18A-3,P18A-4): 实现资产台账接口与页面入口

浏览代码
这个提交包含在：
wangsli
2026-03-07 22:33:10 +08:00
父节点 2a34e7832a
当前提交 447ffa66d2
共修改 7 个文件，包含 1854 行新增和 0 行删除
下载 Patch 文件 下载 Diff 文件 展开所有文件 折叠所有文件
server/src/app.js
+2
查看文件
@@ -39,6 +39,7 @@ const exportsRoutes = require("./routes/exports");
const dashboardRoutes = require("./routes/dashboard");
const budgetsRoutes = require("./routes/budgets");
const purchaseRequestRoutes = require("./routes/purchaseRequests");
const assetsRoutes = require("./routes/assets");
const integrationsRoutes = require("./routes/integrations");
const travelOrdersRoutes = require("./routes/travelOrders");
const { startJobs } = require("./jobs/jobSystem");
@@ -297,6 +298,7 @@ async function buildApp() {
await app.register(dashboardRoutes, { prefix: "/api" });
await app.register(budgetsRoutes, { prefix: "/api" });
await app.register(purchaseRequestRoutes, { prefix: "/api" });
await app.register(assetsRoutes, { prefix: "/api" });
await app.register(integrationsRoutes, { prefix: "/api" });
await app.register(travelOrdersRoutes, { prefix: "/api" });
await app.register(exportsRoutes, { prefix: "/api" });
server/src/routes/assets.js
+956
查看文件
@@ -0,0 +1,956 @@
const { z } = require("zod");
const { AppError } = require("../utils/AppError");
const { buildAuditLogData } = require("../utils/audit");
const { parseDateOnlyString } = require("../utils/date");
const { issueDocumentNumber } = require("../services/documentSequence");
const { sendData } = require("../utils/reply");
const UUID_SCHEMA = z.string().uuid();
const BOOLEAN_QUERY_SCHEMA = z.enum(["0", "1", "true", "false"]).optional();
const DATE_ONLY_SCHEMA = z.string().regex(/^\d{4}-\d{2}-\d{2}$/);
const ASSET_STATUS_VALUES = ["in_stock", "in_use", "under_repair", "retired", "archived"];
const CATEGORY_LIST_QUERY_SCHEMA = z.object({
includeArchived: BOOLEAN_QUERY_SCHEMA,
enabled: BOOLEAN_QUERY_SCHEMA,
});
const ASSET_LIST_QUERY_SCHEMA = z.object({
status: z.enum(ASSET_STATUS_VALUES).optional(),
categoryId: UUID_SCHEMA.optional(),
assigneeId: UUID_SCHEMA.optional(),
legalEntityId: UUID_SCHEMA.optional(),
costCenterId: UUID_SCHEMA.optional(),
mine: BOOLEAN_QUERY_SCHEMA,
});
const ASSIGNEE_LIST_QUERY_SCHEMA = z.object({
q: z.string().trim().max(100).optional(),
});
const ASSET_CATEGORY_CREATE_SCHEMA = z
.object({
code: z.string().trim().min(2).max(64),
name: z.string().trim().min(1).max(120),
documentCategoryId: UUID_SCHEMA.nullable().optional(),
enabled: z.boolean().optional(),
})
.strict();
const ASSET_CATEGORY_PATCH_SCHEMA = ASSET_CATEGORY_CREATE_SCHEMA.partial();
const ASSET_CREATE_SCHEMA = z
.object({
name: z.string().trim().min(1).max(200),
categoryId: UUID_SCHEMA,
legalEntityId: UUID_SCHEMA,
costCenterId: UUID_SCHEMA,
purchaseRequestId: UUID_SCHEMA.nullable().optional(),
serialNo: z.string().trim().max(120).nullable().optional(),
location: z.string().trim().max(200).nullable().optional(),
status: z.enum(ASSET_STATUS_VALUES).optional(),
assigneeEmployeeId: UUID_SCHEMA.nullable().optional(),
activatedAt: DATE_ONLY_SCHEMA.nullable().optional(),
retiredAt: DATE_ONLY_SCHEMA.nullable().optional(),
})
.strict();
const ASSET_PATCH_SCHEMA = ASSET_CREATE_SCHEMA.omit({ purchaseRequestId: true }).partial();
const ASSET_CATEGORY_SELECT = {
id: true,
code: true,
name: true,
document_category_id: true,
enabled: true,
archived_at: true,
created_at: true,
updated_at: true,
document_category: {
select: {
id: true,
code: true,
name: true,
entity_type: true,
},
},
};
const ASSET_CARD_SELECT = {
id: true,
asset_no: true,
name: true,
category_id: true,
legal_entity_id: true,
cost_center_id: true,
purchase_request_id: true,
serial_no: true,
location: true,
status: true,
assignee_employee_id: true,
activated_at: true,
retired_at: true,
created_at: true,
updated_at: true,
category: {
select: {
id: true,
code: true,
name: true,
document_category_id: true,
enabled: true,
archived_at: true,
document_category: {
select: {
id: true,
code: true,
name: true,
},
},
},
},
legal_entity: {
select: {
id: true,
code: true,
name: true,
},
},
cost_center: {
select: {
id: true,
code: true,
name: true,
legal_entity_id: true,
},
},
purchase_request: {
select: {
id: true,
request_no: true,
title: true,
status: true,
},
},
assignee: {
select: {
id: true,
employee_no: true,
name: true,
department: {
select: {
id: true,
name: true,
},
},
},
},
};
function buildValidationError(details, statusCode = 400) {
return new AppError({
code: "VALID_001",
message: "参数校验失败",
statusCode,
details,
});
}
function parseBooleanQueryValue(rawValue) {
if (rawValue == null) {
return null;
}
return rawValue === "1" || rawValue === "true";
}
function parseUuid(fieldName, value) {
const parsed = UUID_SCHEMA.safeParse(value);
if (!parsed.success) {
throw buildValidationError({ [fieldName]: "invalid_uuid" });
}
return parsed.data;
}
function parseCategoryListQuery(query) {
const parsed = CATEGORY_LIST_QUERY_SCHEMA.safeParse(query ?? {});
if (!parsed.success) {
throw buildValidationError(parsed.error.flatten());
}
return {
includeArchived: parseBooleanQueryValue(parsed.data.includeArchived) ?? false,
enabled: parseBooleanQueryValue(parsed.data.enabled),
};
}
function parseAssetListQuery(query) {
const parsed = ASSET_LIST_QUERY_SCHEMA.safeParse(query ?? {});
if (!parsed.success) {
throw buildValidationError(parsed.error.flatten());
}
return {
status: parsed.data.status,
categoryId: parsed.data.categoryId,
assigneeId: parsed.data.assigneeId,
legalEntityId: parsed.data.legalEntityId,
costCenterId: parsed.data.costCenterId,
mine: parseBooleanQueryValue(parsed.data.mine),
};
}
function parseAssigneeListQuery(query) {
const parsed = ASSIGNEE_LIST_QUERY_SCHEMA.safeParse(query ?? {});
if (!parsed.success) {
throw buildValidationError(parsed.error.flatten());
}
return { q: parsed.data.q?.trim() ?? "" };
}
function parseCreateBody(schema, body) {
const parsed = schema.safeParse(body ?? {});
if (!parsed.success) {
throw buildValidationError(parsed.error.flatten());
}
return parsed.data;
}
function parsePatchBody(schema, body) {
const parsed = schema.safeParse(body ?? {});
if (!parsed.success) {
throw buildValidationError(parsed.error.flatten());
}
if (!Object.keys(parsed.data).length) {
throw buildValidationError({ body: "empty" });
}
return parsed.data;
}
function normalizeAssetCategoryPayload(body) {
return {
code: typeof body.code === "string" ? body.code.trim().toUpperCase() : undefined,
name: typeof body.name === "string" ? body.name.trim() : undefined,
documentCategoryId: Object.prototype.hasOwnProperty.call(body, "documentCategoryId")
? body.documentCategoryId ?? null
: undefined,
enabled: body.enabled,
};
}
function normalizeAssetPayload(body) {
return {
name: typeof body.name === "string" ? body.name.trim() : undefined,
categoryId: body.categoryId,
legalEntityId: body.legalEntityId,
costCenterId: body.costCenterId,
purchaseRequestId: Object.prototype.hasOwnProperty.call(body, "purchaseRequestId")
? body.purchaseRequestId ?? null
: undefined,
serialNo: Object.prototype.hasOwnProperty.call(body, "serialNo")
? body.serialNo?.trim()
? body.serialNo.trim()
: null
: undefined,
location: Object.prototype.hasOwnProperty.call(body, "location")
? body.location?.trim()
? body.location.trim()
: null
: undefined,
status: body.status,
assigneeEmployeeId: Object.prototype.hasOwnProperty.call(body, "assigneeEmployeeId")
? body.assigneeEmployeeId ?? null
: undefined,
activatedAt: Object.prototype.hasOwnProperty.call(body, "activatedAt") ? body.activatedAt ?? null : undefined,
retiredAt: Object.prototype.hasOwnProperty.call(body, "retiredAt") ? body.retiredAt ?? null : undefined,
};
}
function canReadAssets(fastify, employee) {
return ["asset.view_own", "asset.view_all", "asset.manage", "asset.transfer", "asset.inventory"].some((permission) =>
fastify.hasPermission(employee, permission),
);
}
function canViewAllAssets(fastify, employee) {
return ["asset.view_all", "asset.manage", "asset.transfer", "asset.inventory"].some((permission) =>
fastify.hasPermission(employee, permission),
);
}
function canManageAssets(fastify, employee) {
return fastify.hasPermission(employee, "asset.manage");
}
function ensureAssetReadPermission(fastify, request) {
if (!canReadAssets(fastify, request.employee)) {
throw new AppError({
code: "PERM_001",
message: "无权限",
statusCode: 403,
details: { permission: "asset.view_own" },
});
}
}
function ensureAssetViewerOwnsRecord(fastify, request, assetRecord) {
if (canViewAllAssets(fastify, request.employee)) {
return;
}
if (assetRecord.assignee_employee_id !== request.employee.id) {
throw new AppError({
code: "PERM_001",
message: "无权限",
statusCode: 403,
details: { permission: "asset.view_own" },
});
}
}
function mapAssetCategory(record) {
return {
id: record.id,
code: record.code,
name: record.name,
documentCategoryId: record.document_category_id ?? null,
enabled: Boolean(record.enabled),
archivedAt: record.archived_at?.toISOString?.() ?? null,
createdAt: record.created_at?.toISOString?.() ?? null,
updatedAt: record.updated_at?.toISOString?.() ?? null,
documentCategory: record.document_category
? {
id: record.document_category.id,
code: record.document_category.code,
name: record.document_category.name,
entityType: record.document_category.entity_type,
}
: null,
};
}
function mapAsset(record, request, fastify) {
return {
id: record.id,
assetNo: record.asset_no,
name: record.name,
categoryId: record.category_id,
legalEntityId: record.legal_entity_id,
costCenterId: record.cost_center_id,
purchaseRequestId: record.purchase_request_id ?? null,
serialNo: record.serial_no ?? null,
location: record.location ?? null,
status: record.status,
assigneeEmployeeId: record.assignee_employee_id ?? null,
activatedAt: record.activated_at?.toISOString?.().slice(0, 10) ?? null,
retiredAt: record.retired_at?.toISOString?.().slice(0, 10) ?? null,
createdAt: record.created_at?.toISOString?.() ?? null,
updatedAt: record.updated_at?.toISOString?.() ?? null,
category: record.category
? {
id: record.category.id,
code: record.category.code,
name: record.category.name,
documentCategoryId: record.category.document_category_id ?? null,
documentCategory: record.category.document_category
? {
id: record.category.document_category.id,
code: record.category.document_category.code,
name: record.category.document_category.name,
}
: null,
}
: null,
legalEntity: record.legal_entity
? {
id: record.legal_entity.id,
code: record.legal_entity.code,
name: record.legal_entity.name,
}
: null,
costCenter: record.cost_center
? {
id: record.cost_center.id,
code: record.cost_center.code,
name: record.cost_center.name,
legalEntityId: record.cost_center.legal_entity_id,
}
: null,
purchaseRequest: record.purchase_request
? {
id: record.purchase_request.id,
requestNo: record.purchase_request.request_no ?? null,
title: record.purchase_request.title,
status: record.purchase_request.status,
}
: null,
assignee: record.assignee
? {
id: record.assignee.id,
employeeNo: record.assignee.employee_no,
name: record.assignee.name,
department: record.assignee.department
? {
id: record.assignee.department.id,
name: record.assignee.department.name,
}
: null,
}
: null,
permissions: {
canEdit: canManageAssets(fastify, request.employee),
},
};
}
function mapAssignee(record) {
return {
id: record.id,
employeeNo: record.employee_no,
name: record.name,
department: record.department
? {
id: record.department.id,
name: record.department.name,
}
: null,
};
}
async function ensureDocumentCategoryAvailable(tx, documentCategoryId) {
if (!documentCategoryId) {
return null;
}
const record = await tx.documentCategory.findUnique({
where: { id: documentCategoryId },
select: {
id: true,
code: true,
name: true,
entity_type: true,
enabled: true,
archived_at: true,
},
});
if (!record) {
throw buildValidationError({ documentCategoryId: "not_found" }, 404);
}
if (record.entity_type !== "asset_card") {
throw buildValidationError({ documentCategoryId: "unsupported_entity_type" }, 409);
}
if (!record.enabled || record.archived_at) {
throw buildValidationError({ documentCategoryId: "inactive" }, 409);
}
return record;
}
async function ensureAssetCategoryExists(tx, categoryId, { requireActive = true } = {}) {
const record = await tx.assetCategory.findUnique({
where: { id: categoryId },
select: {
id: true,
code: true,
name: true,
document_category_id: true,
enabled: true,
archived_at: true,
document_category: {
select: {
id: true,
code: true,
name: true,
entity_type: true,
enabled: true,
archived_at: true,
},
},
},
});
if (!record) {
throw buildValidationError({ categoryId: "not_found" }, 404);
}
if (requireActive && (!record.enabled || record.archived_at)) {
throw buildValidationError({ categoryId: "inactive" }, 409);
}
if (record.document_category && (record.document_category.entity_type !== "asset_card" || !record.document_category.enabled || record.document_category.archived_at)) {
throw buildValidationError({ categoryId: "invalid_document_category" }, 409);
}
return record;
}
async function ensureLegalEntityAvailable(tx, legalEntityId) {
const record = await tx.legalEntity.findUnique({
where: { id: legalEntityId },
select: { id: true, code: true, name: true, enabled: true, archived_at: true },
});
if (!record) {
throw buildValidationError({ legalEntityId: "not_found" }, 404);
}
if (!record.enabled || record.archived_at) {
throw buildValidationError({ legalEntityId: "inactive" }, 409);
}
return record;
}
async function ensureCostCenterAvailable(tx, costCenterId, legalEntityId) {
const record = await tx.costCenter.findUnique({
where: { id: costCenterId },
select: {
id: true,
code: true,
name: true,
legal_entity_id: true,
enabled: true,
archived_at: true,
},
});
if (!record) {
throw buildValidationError({ costCenterId: "not_found" }, 404);
}
if (!record.enabled || record.archived_at) {
throw buildValidationError({ costCenterId: "inactive" }, 409);
}
if (record.legal_entity_id !== legalEntityId) {
throw buildValidationError({ costCenterId: "legal_entity_mismatch" }, 409);
}
return record;
}
async function ensureAssigneeEmployee(tx, assigneeEmployeeId) {
if (!assigneeEmployeeId) {
return null;
}
const record = await tx.employee.findUnique({
where: { id: assigneeEmployeeId },
select: {
id: true,
employee_no: true,
name: true,
status: true,
},
});
if (!record) {
throw buildValidationError({ assigneeEmployeeId: "not_found" }, 404);
}
if (record.status !== "active") {
throw buildValidationError({ assigneeEmployeeId: "inactive" }, 409);
}
return record;
}
async function ensureApprovedPurchaseRequest(tx, purchaseRequestId) {
if (!purchaseRequestId) {
return null;
}
const record = await tx.purchaseRequest.findUnique({
where: { id: purchaseRequestId },
select: {
id: true,
request_no: true,
title: true,
status: true,
},
});
if (!record) {
throw buildValidationError({ purchaseRequestId: "not_found" }, 404);
}
if (record.status !== "approved") {
throw buildValidationError({ purchaseRequestId: "not_approved" }, 409);
}
return record;
}
async function assetsRoutes(fastify) {
fastify.get(
"/asset-categories",
{
schema: { tags: ["Assets"], summary: "List Asset Categories" },
preHandler: fastify.authenticate,
},
async (request, reply) => {
ensureAssetReadPermission(fastify, request);
const { includeArchived, enabled } = parseCategoryListQuery(request.query);
const where = {};
if (!includeArchived) {
where.archived_at = null;
}
if (enabled !== null) {
where.enabled = enabled;
}
const items = await fastify.prisma.assetCategory.findMany({
where,
orderBy: [{ enabled: "desc" }, { code: "asc" }],
select: ASSET_CATEGORY_SELECT,
});
return sendData(reply, request, {
includeArchived,
items: items.map(mapAssetCategory),
});
},
);
fastify.post(
"/asset-categories",
{
schema: { tags: ["Assets"], summary: "Create Asset Category" },
preHandler: fastify.requirePermission("asset.manage"),
},
async (request, reply) => {
const payload = normalizeAssetCategoryPayload(parseCreateBody(ASSET_CATEGORY_CREATE_SCHEMA, request.body));
const assetCategory = await fastify.prisma.$transaction(async (tx) => {
if (payload.documentCategoryId) {
await ensureDocumentCategoryAvailable(tx, payload.documentCategoryId);
}
const created = await tx.assetCategory.create({
data: {
code: payload.code,
name: payload.name,
document_category_id: payload.documentCategoryId ?? null,
enabled: payload.enabled ?? true,
created_by: request.employee.id,
updated_by: request.employee.id,
},
select: ASSET_CATEGORY_SELECT,
});
await tx.auditLog.create({
data: buildAuditLogData(request, {
actorId: request.employee.id,
action: "ASSET_CATEGORY_CREATED",
targetType: "asset_category",
targetId: created.id,
extra: {
code: created.code,
documentCategoryId: created.document_category_id ?? null,
},
}),
});
return created;
});
return sendData(reply, request, { assetCategory: mapAssetCategory(assetCategory) });
},
);
fastify.patch(
"/asset-categories/:id",
{
schema: { tags: ["Assets"], summary: "Update Asset Category" },
preHandler: fastify.requirePermission("asset.manage"),
},
async (request, reply) => {
const assetCategoryId = parseUuid("id", request.params?.id);
const payload = normalizeAssetCategoryPayload(parsePatchBody(ASSET_CATEGORY_PATCH_SCHEMA, request.body));
const assetCategory = await fastify.prisma.$transaction(async (tx) => {
const existing = await tx.assetCategory.findUnique({
where: { id: assetCategoryId },
select: { id: true },
});
if (!existing) {
throw buildValidationError({ id: "not_found" }, 404);
}
if (payload.documentCategoryId) {
await ensureDocumentCategoryAvailable(tx, payload.documentCategoryId);
}
const updated = await tx.assetCategory.update({
where: { id: assetCategoryId },
data: {
...(payload.code !== undefined ? { code: payload.code } : {}),
...(payload.name !== undefined ? { name: payload.name } : {}),
...(payload.documentCategoryId !== undefined ? { document_category_id: payload.documentCategoryId } : {}),
...(payload.enabled !== undefined ? { enabled: payload.enabled } : {}),
updated_by: request.employee.id,
},
select: ASSET_CATEGORY_SELECT,
});
await tx.auditLog.create({
data: buildAuditLogData(request, {
actorId: request.employee.id,
action: "ASSET_CATEGORY_UPDATED",
targetType: "asset_category",
targetId: updated.id,
extra: {
code: updated.code,
enabled: updated.enabled,
},
}),
});
return updated;
});
return sendData(reply, request, { assetCategory: mapAssetCategory(assetCategory) });
},
);
fastify.get(
"/assets/assignees",
{
schema: { tags: ["Assets"], summary: "List Asset Assignee Options" },
preHandler: fastify.authenticate,
},
async (request, reply) => {
if (!canManageAssets(fastify, request.employee)) {
throw new AppError({
code: "PERM_001",
message: "无权限",
statusCode: 403,
details: { permission: "asset.manage" },
});
}
const { q } = parseAssigneeListQuery(request.query);
const items = await fastify.prisma.employee.findMany({
where: {
status: "active",
archived_at: null,
...(q
? {
OR: [
{ name: { contains: q, mode: "insensitive" } },
{ employee_no: { contains: q, mode: "insensitive" } },
],
}
: {}),
},
orderBy: [{ name: "asc" }, { employee_no: "asc" }],
take: 200,
select: {
id: true,
employee_no: true,
name: true,
department: {
select: {
id: true,
name: true,
},
},
},
});
return sendData(reply, request, { items: items.map(mapAssignee) });
},
);
fastify.get(
"/assets",
{
schema: { tags: ["Assets"], summary: "List Asset Cards" },
preHandler: fastify.authenticate,
},
async (request, reply) => {
ensureAssetReadPermission(fastify, request);
const query = parseAssetListQuery(request.query);
const mine = !canViewAllAssets(fastify, request.employee) || query.mine === true;
const where = {};
if (query.status) {
where.status = query.status;
}
if (query.categoryId) {
where.category_id = query.categoryId;
}
if (query.legalEntityId) {
where.legal_entity_id = query.legalEntityId;
}
if (query.costCenterId) {
where.cost_center_id = query.costCenterId;
}
if (mine) {
where.assignee_employee_id = request.employee.id;
} else if (query.assigneeId) {
where.assignee_employee_id = query.assigneeId;
}
const items = await fastify.prisma.assetCard.findMany({
where,
orderBy: [{ updated_at: "desc" }, { created_at: "desc" }],
select: ASSET_CARD_SELECT,
});
return sendData(reply, request, {
mine,
items: items.map((item) => mapAsset(item, request, fastify)),
});
},
);
fastify.post(
"/assets",
{
schema: { tags: ["Assets"], summary: "Create Asset Card" },
preHandler: fastify.requirePermission("asset.manage"),
},
async (request, reply) => {
const payload = normalizeAssetPayload(parseCreateBody(ASSET_CREATE_SCHEMA, request.body));
const asset = await fastify.prisma.$transaction(async (tx) => {
const category = await ensureAssetCategoryExists(tx, payload.categoryId, { requireActive: true });
await ensureLegalEntityAvailable(tx, payload.legalEntityId);
await ensureCostCenterAvailable(tx, payload.costCenterId, payload.legalEntityId);
await ensureAssigneeEmployee(tx, payload.assigneeEmployeeId ?? null);
const purchaseRequest = await ensureApprovedPurchaseRequest(tx, payload.purchaseRequestId ?? null);
const issued = await issueDocumentNumber(tx, {
documentType: "asset_card",
documentCategoryCode: category.document_category?.code ?? null,
actorId: request.employee.id,
});
const created = await tx.assetCard.create({
data: {
asset_no: issued.documentNumber,
name: payload.name,
category_id: payload.categoryId,
legal_entity_id: payload.legalEntityId,
cost_center_id: payload.costCenterId,
purchase_request_id: payload.purchaseRequestId ?? null,
serial_no: payload.serialNo ?? null,
location: payload.location ?? null,
status: payload.status ?? "in_stock",
assignee_employee_id: payload.assigneeEmployeeId ?? null,
activated_at: payload.activatedAt ? parseDateOnlyString(payload.activatedAt) : null,
retired_at: payload.retiredAt ? parseDateOnlyString(payload.retiredAt) : null,
created_by: request.employee.id,
updated_by: request.employee.id,
},
select: ASSET_CARD_SELECT,
});
await tx.auditLog.create({
data: buildAuditLogData(request, {
actorId: request.employee.id,
action: "ASSET_CARD_CREATED",
targetType: "asset_card",
targetId: created.id,
extra: {
assetNo: created.asset_no,
purchaseRequestId: purchaseRequest?.id ?? null,
assigneeEmployeeId: created.assignee_employee_id ?? null,
},
}),
});
return created;
});
return sendData(reply, request, { asset: mapAsset(asset, request, fastify) });
},
);
fastify.get(
"/assets/:id",
{
schema: { tags: ["Assets"], summary: "Get Asset Card Detail" },
preHandler: fastify.authenticate,
},
async (request, reply) => {
ensureAssetReadPermission(fastify, request);
const assetId = parseUuid("id", request.params?.id);
const asset = await fastify.prisma.assetCard.findUnique({
where: { id: assetId },
select: ASSET_CARD_SELECT,
});
if (!asset) {
throw buildValidationError({ id: "not_found" }, 404);
}
ensureAssetViewerOwnsRecord(fastify, request, asset);
return sendData(reply, request, { asset: mapAsset(asset, request, fastify) });
},
);
fastify.patch(
"/assets/:id",
{
schema: { tags: ["Assets"], summary: "Update Asset Card" },
preHandler: fastify.requirePermission("asset.manage"),
},
async (request, reply) => {
const assetId = parseUuid("id", request.params?.id);
const payload = normalizeAssetPayload(parsePatchBody(ASSET_PATCH_SCHEMA, request.body));
const asset = await fastify.prisma.$transaction(async (tx) => {
const current = await tx.assetCard.findUnique({
where: { id: assetId },
select: {
id: true,
asset_no: true,
name: true,
category_id: true,
legal_entity_id: true,
cost_center_id: true,
purchase_request_id: true,
serial_no: true,
location: true,
status: true,
assignee_employee_id: true,
activated_at: true,
retired_at: true,
},
});
if (!current) {
throw buildValidationError({ id: "not_found" }, 404);
}
const nextCategoryId = payload.categoryId ?? current.category_id;
const nextLegalEntityId = payload.legalEntityId ?? current.legal_entity_id;
const nextCostCenterId = payload.costCenterId ?? current.cost_center_id;
const nextAssigneeId = payload.assigneeEmployeeId === undefined ? current.assignee_employee_id : payload.assigneeEmployeeId;
if (payload.categoryId !== undefined) {
await ensureAssetCategoryExists(tx, nextCategoryId, { requireActive: true });
}
if (payload.legalEntityId !== undefined) {
await ensureLegalEntityAvailable(tx, nextLegalEntityId);
}
if (payload.costCenterId !== undefined || payload.legalEntityId !== undefined) {
await ensureCostCenterAvailable(tx, nextCostCenterId, nextLegalEntityId);
}
if (payload.assigneeEmployeeId !== undefined) {
await ensureAssigneeEmployee(tx, nextAssigneeId);
}
const updated = await tx.assetCard.update({
where: { id: assetId },
data: {
...(payload.name !== undefined ? { name: payload.name } : {}),
...(payload.categoryId !== undefined ? { category_id: payload.categoryId } : {}),
...(payload.legalEntityId !== undefined ? { legal_entity_id: payload.legalEntityId } : {}),
...(payload.costCenterId !== undefined ? { cost_center_id: payload.costCenterId } : {}),
...(payload.serialNo !== undefined ? { serial_no: payload.serialNo } : {}),
...(payload.location !== undefined ? { location: payload.location } : {}),
...(payload.status !== undefined ? { status: payload.status } : {}),
...(payload.assigneeEmployeeId !== undefined ? { assignee_employee_id: payload.assigneeEmployeeId } : {}),
...(payload.activatedAt !== undefined
? { activated_at: payload.activatedAt ? parseDateOnlyString(payload.activatedAt) : null }
: {}),
...(payload.retiredAt !== undefined
? { retired_at: payload.retiredAt ? parseDateOnlyString(payload.retiredAt) : null }
: {}),
updated_by: request.employee.id,
},
select: ASSET_CARD_SELECT,
});
await tx.auditLog.create({
data: buildAuditLogData(request, {
actorId: request.employee.id,
action: "ASSET_CARD_UPDATED",
targetType: "asset_card",
targetId: updated.id,
extra: {
assetNo: current.asset_no,
status: updated.status,
assigneeEmployeeId: updated.assignee_employee_id ?? null,
},
}),
});
return updated;
});
return sendData(reply, request, { asset: mapAsset(asset, request, fastify) });
},
);
}
module.exports = assetsRoutes;