102 lines
4.1 KiB
TypeScript
102 lines
4.1 KiB
TypeScript
import { FastifyPluginAsync } from 'fastify'
|
|
import { db } from '../db'
|
|
|
|
type SlugParam = { Params: { slug: string } }
|
|
|
|
const scheduleRoutes: FastifyPluginAsync = async (fastify) => {
|
|
const getHotelId = async (slug: string): Promise<string | null> => {
|
|
const { rows } = await db.query('SELECT id FROM hotels WHERE slug = $1', [slug])
|
|
return rows[0]?.id ?? null
|
|
}
|
|
|
|
const canAccess = (userSlug: string | null, role: string, slug: string) =>
|
|
role === 'super_admin' || userSlug === slug
|
|
|
|
// GET /api/hotels/:slug/schedule?from=YYYY-MM-DD&to=YYYY-MM-DD
|
|
fastify.get<SlugParam & { Querystring: { from?: string; to?: string } }>(
|
|
'/api/hotels/:slug/schedule',
|
|
{ onRequest: [fastify.authenticate] },
|
|
async (request, reply) => {
|
|
const { slug } = request.params
|
|
if (!canAccess(request.user.hotelSlug, request.user.role, slug))
|
|
return reply.code(403).send({ error: 'Forbidden' })
|
|
const hotelId = await getHotelId(slug)
|
|
if (!hotelId) return reply.code(404).send({ error: 'Hotel not found' })
|
|
|
|
const { from, to } = request.query
|
|
let where = 'WHERE ss.hotel_id = $1'
|
|
const params: unknown[] = [hotelId]
|
|
if (from) { params.push(from); where += ` AND ss.date >= $${params.length}` }
|
|
if (to) { params.push(to); where += ` AND ss.date <= $${params.length}` }
|
|
|
|
const { rows } = await db.query(
|
|
`SELECT ss.id, ss.user_id, ss.date, ss.shift_start, ss.shift_end,
|
|
ss.is_day_off, ss.notes,
|
|
u.name AS user_name, u.role AS user_role, u.position AS user_position
|
|
FROM staff_schedules ss
|
|
JOIN users u ON u.id = ss.user_id
|
|
${where}
|
|
ORDER BY ss.date, u.name`,
|
|
params,
|
|
)
|
|
return rows
|
|
},
|
|
)
|
|
|
|
// PUT /api/hotels/:slug/schedule — upsert one entry
|
|
fastify.put<SlugParam & { Body: {
|
|
user_id: string; date: string; shift_start?: string; shift_end?: string;
|
|
is_day_off?: boolean; notes?: string
|
|
} }>(
|
|
'/api/hotels/:slug/schedule',
|
|
{ onRequest: [fastify.authenticate] },
|
|
async (request, reply) => {
|
|
const { slug } = request.params
|
|
if (!['manager', 'hotel_admin', 'super_admin'].includes(request.user.role))
|
|
return reply.code(403).send({ error: 'Forbidden' })
|
|
if (!canAccess(request.user.hotelSlug, request.user.role, slug))
|
|
return reply.code(403).send({ error: 'Forbidden' })
|
|
const hotelId = await getHotelId(slug)
|
|
if (!hotelId) return reply.code(404).send({ error: 'Hotel not found' })
|
|
|
|
const { user_id, date, shift_start, shift_end, is_day_off, notes } = request.body
|
|
const { rows } = await db.query(
|
|
`INSERT INTO staff_schedules (hotel_id, user_id, date, shift_start, shift_end, is_day_off, notes)
|
|
VALUES ($1, $2, $3, $4, $5, $6, $7)
|
|
ON CONFLICT (hotel_id, user_id, date) DO UPDATE SET
|
|
shift_start = EXCLUDED.shift_start,
|
|
shift_end = EXCLUDED.shift_end,
|
|
is_day_off = EXCLUDED.is_day_off,
|
|
notes = COALESCE(EXCLUDED.notes, staff_schedules.notes),
|
|
updated_at = NOW()
|
|
RETURNING *`,
|
|
[hotelId, user_id, date, shift_start ?? null, shift_end ?? null, is_day_off ?? false, notes ?? null],
|
|
)
|
|
return rows[0]
|
|
},
|
|
)
|
|
|
|
// DELETE /api/hotels/:slug/schedule/:userId/:date
|
|
fastify.delete<{ Params: { slug: string; userId: string; date: string } }>(
|
|
'/api/hotels/:slug/schedule/:userId/:date',
|
|
{ onRequest: [fastify.authenticate] },
|
|
async (request, reply) => {
|
|
const { slug, userId, date } = request.params
|
|
if (!['manager', 'hotel_admin', 'super_admin'].includes(request.user.role))
|
|
return reply.code(403).send({ error: 'Forbidden' })
|
|
if (!canAccess(request.user.hotelSlug, request.user.role, slug))
|
|
return reply.code(403).send({ error: 'Forbidden' })
|
|
const hotelId = await getHotelId(slug)
|
|
if (!hotelId) return reply.code(404).send({ error: 'Hotel not found' })
|
|
|
|
await db.query(
|
|
'DELETE FROM staff_schedules WHERE hotel_id = $1 AND user_id = $2 AND date = $3',
|
|
[hotelId, userId, date],
|
|
)
|
|
return reply.code(204).send()
|
|
},
|
|
)
|
|
}
|
|
|
|
export default scheduleRoutes
|