Initial

server/routes/assets.js

@@ -0,0 +1,83 @@
+const express = require('express');
+const multer = require('multer');
+const { audit, now, one, run } = require('../db');
+const { annualSchedule } = require('../depreciation');
+const { requireRole } = require('../middleware/auth');
+const {
+  createAsset,
+  deleteAsset,
+  hydrateAsset,
+  listAssets,
+  massUpdateAssets,
+  updateAsset
+} = require('../services/assets');
+const { activeRuleSet } = require('../services/reports');
+
+const upload = multer({ storage: multer.memoryStorage(), limits: { fileSize: 16 * 1024 * 1024 } });
+const router = express.Router();
+
+router.get('/assets', (req, res) => {
+  res.json({ assets: listAssets(req.query) });
+});
+
+router.post('/assets', requireRole('admin', 'finance', 'operations'), (req, res) => {
+  res.status(201).json({ asset: createAsset(req.body, req.user.id) });
+});
+
+router.get('/assets/:id', (req, res) => {
+  const asset = hydrateAsset(req.params.id);
+  if (!asset) return res.status(404).json({ error: 'Asset not found' });
+  return res.json({ asset });
+});
+
+router.put('/assets/:id', requireRole('admin', 'finance', 'operations'), (req, res) => {
+  const asset = updateAsset(req.params.id, req.body, req.user.id);
+  if (!asset) return res.status(404).json({ error: 'Asset not found' });
+  return res.json({ asset });
+});
+
+router.delete('/assets/:id', requireRole('admin', 'finance'), (req, res) => {
+  if (!deleteAsset(req.params.id, req.user.id)) return res.status(404).json({ error: 'Asset not found' });
+  return res.status(204).end();
+});
+
+router.post('/assets/mass-update', requireRole('admin', 'finance'), (req, res) => {
+  const ids = Array.isArray(req.body.ids) ? req.body.ids : [];
+  const updated = massUpdateAssets(ids, req.body.changes || {}, req.user.id);
+  if (!updated) return res.status(400).json({ error: 'Choose assets and editable fields' });
+  return res.json({ updated });
+});
+
+router.get('/assets/:id/depreciation', (req, res) => {
+  const asset = hydrateAsset(req.params.id);
+  if (!asset) return res.status(404).json({ error: 'Asset not found' });
+  const rules = activeRuleSet();
+  const startYear = Number(req.query.startYear || new Date().getFullYear());
+  const endYear = Number(req.query.endYear || startYear + 5);
+  const schedules = asset.books
+    .filter((book) => book.active)
+    .flatMap((book) => annualSchedule(asset, book, rules, { startYear, endYear }));
+  res.json({ assetId: asset.asset_id, schedules });
+});
+
+router.post('/assets/:id/files', upload.single('file'), requireRole('admin', 'finance', 'operations'), (req, res) => {
+  if (!req.file) return res.status(400).json({ error: 'File is required' });
+  const result = run(
+    'INSERT INTO asset_files (asset_id, file_name, mime_type, size, content_base64, uploaded_by, uploaded_at) VALUES (?, ?, ?, ?, ?, ?, ?)',
+    [req.params.id, req.file.originalname, req.file.mimetype, req.file.size, req.file.buffer.toString('base64'), req.user.id, now()]
+  );
+  audit(req.user.id, 'upload_file', 'asset', req.params.id, null, { file: req.file.originalname });
+  res.status(201).json({ file: one('SELECT id, file_name, mime_type, size, uploaded_at FROM asset_files WHERE id = ?', [result.lastInsertRowid]) });
+});
+
+router.post('/assets/:id/tasks', requireRole('admin', 'finance', 'operations'), (req, res) => {
+  const created = now();
+  const result = run(
+    'INSERT INTO tasks (asset_id, title, type, status, due_date, assigned_to, notes, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)',
+    [req.params.id, req.body.title, req.body.type || 'maintenance', req.body.status || 'open', req.body.due_date || null, req.body.assigned_to || null, req.body.notes || null, created, created]
+  );
+  audit(req.user.id, 'create', 'task', result.lastInsertRowid, null, req.body);
+  res.status(201).json({ task: one('SELECT * FROM tasks WHERE id = ?', [result.lastInsertRowid]) });
+});
+
+module.exports = router;