first commit

backend/src/controllers/contractTask.controller.ts

@@ -0,0 +1,441 @@
+import { Response } from 'express';
+import * as contractTaskService from '../services/contractTask.service.js';
+import * as contractService from '../services/contract.service.js';
+import * as customerService from '../services/customer.service.js';
+import * as appSettingService from '../services/appSetting.service.js';
+import { ApiResponse, AuthRequest } from '../types/index.js';
+
+// ==================== ALL TASKS (Dashboard & Task List) ====================
+
+export async function getAllTasks(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const { status, customerId } = req.query;
+
+    // Für Kundenportal: Filter auf erlaubte Kunden
+    let customerPortalCustomerIds: number[] | undefined;
+    let customerPortalEmails: string[] | undefined;
+
+    if (req.user?.isCustomerPortal && req.user.customerId) {
+      customerPortalCustomerIds = [req.user.customerId, ...(req.user.representedCustomerIds || [])];
+      const customers = await customerService.getCustomersByIds(customerPortalCustomerIds);
+      customerPortalEmails = customers
+        .map((c: { id: number; portalEmail: string | null }) => c.portalEmail)
+        .filter((email: string | null): email is string => !!email);
+    }
+
+    const tasks = await contractTaskService.getAllTasks({
+      status: status as 'OPEN' | 'COMPLETED' | undefined,
+      customerId: customerId ? parseInt(customerId as string) : undefined,
+      customerPortalCustomerIds,
+      customerPortalEmails,
+    });
+
+    res.json({ success: true, data: tasks } as ApiResponse);
+  } catch (error) {
+    res.status(500).json({
+      success: false,
+      error: 'Fehler beim Laden der Aufgaben',
+    } as ApiResponse);
+  }
+}
+
+export async function getTaskStats(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    // Für Kundenportal: Filter auf erlaubte Kunden
+    let customerPortalCustomerIds: number[] | undefined;
+    let customerPortalEmails: string[] | undefined;
+
+    if (req.user?.isCustomerPortal && req.user.customerId) {
+      customerPortalCustomerIds = [req.user.customerId, ...(req.user.representedCustomerIds || [])];
+      const customers = await customerService.getCustomersByIds(customerPortalCustomerIds);
+      customerPortalEmails = customers
+        .map((c: { id: number; portalEmail: string | null }) => c.portalEmail)
+        .filter((email: string | null): email is string => !!email);
+    }
+
+    const stats = await contractTaskService.getTaskStats({
+      customerPortalCustomerIds,
+      customerPortalEmails,
+    });
+
+    res.json({ success: true, data: stats } as ApiResponse);
+  } catch (error) {
+    res.status(500).json({
+      success: false,
+      error: 'Fehler beim Laden der Statistik',
+    } as ApiResponse);
+  }
+}
+
+// ==================== TASKS BY CONTRACT ====================
+
+export async function getTasks(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const contractId = parseInt(req.params.contractId);
+    const { status } = req.query;
+
+    // Prüfe Zugriff auf den Vertrag
+    const contract = await contractService.getContractById(contractId);
+    if (!contract) {
+      res.status(404).json({
+        success: false,
+        error: 'Vertrag nicht gefunden',
+      } as ApiResponse);
+      return;
+    }
+
+    // Für Kundenportal: Zugriffsprüfung
+    if (req.user?.isCustomerPortal && req.user.customerId) {
+      const allowedCustomerIds = [req.user.customerId, ...(req.user.representedCustomerIds || [])];
+      if (!allowedCustomerIds.includes(contract.customerId)) {
+        res.status(403).json({
+          success: false,
+          error: 'Kein Zugriff auf diesen Vertrag',
+        } as ApiResponse);
+        return;
+      }
+    }
+
+    // Für Kundenportal-Benutzer: Lade E-Mails der erlaubten Kunden
+    let customerPortalEmails: string[] | undefined;
+    if (req.user?.isCustomerPortal && req.user.customerId) {
+      const allowedCustomerIds = [req.user.customerId, ...(req.user.representedCustomerIds || [])];
+      const customers = await customerService.getCustomersByIds(allowedCustomerIds);
+      customerPortalEmails = customers
+        .map((c: { id: number; portalEmail: string | null }) => c.portalEmail)
+        .filter((email: string | null): email is string => !!email);
+    }
+
+    const tasks = await contractTaskService.getTasksByContract({
+      contractId,
+      status: status as 'OPEN' | 'COMPLETED' | undefined,
+      customerPortalEmails,
+    });
+
+    res.json({ success: true, data: tasks } as ApiResponse);
+  } catch (error) {
+    res.status(500).json({
+      success: false,
+      error: 'Fehler beim Laden der Aufgaben',
+    } as ApiResponse);
+  }
+}
+
+export async function createTask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const contractId = parseInt(req.params.contractId);
+    const { title, description, visibleInPortal } = req.body;
+
+    if (!title) {
+      res.status(400).json({
+        success: false,
+        error: 'Titel ist erforderlich',
+      } as ApiResponse);
+      return;
+    }
+
+    const createdBy = req.user?.email;
+
+    // Für Kundenportal-Benutzer: visibleInPortal wird automatisch auf true gesetzt
+    const finalVisibleInPortal = req.user?.isCustomerPortal ? true : visibleInPortal;
+
+    const task = await contractTaskService.createTask({
+      contractId,
+      title,
+      description,
+      visibleInPortal: finalVisibleInPortal,
+      createdBy,
+    });
+
+    res.status(201).json({ success: true, data: task } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Erstellen der Aufgabe',
+    } as ApiResponse);
+  }
+}
+
+// Für Kundenportal-Benutzer: Support-Anfrage erstellen (ohne contracts:update Permission)
+export async function createSupportTicket(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    // Prüfe ob Support-Tickets aktiviert sind
+    const supportEnabled = await appSettingService.getSettingBool('customerSupportTicketsEnabled');
+    if (!supportEnabled) {
+      res.status(403).json({
+        success: false,
+        error: 'Support-Anfragen sind nicht aktiviert',
+      } as ApiResponse);
+      return;
+    }
+
+    const contractId = parseInt(req.params.contractId);
+    const { title, description } = req.body;
+
+    if (!title) {
+      res.status(400).json({
+        success: false,
+        error: 'Titel ist erforderlich',
+      } as ApiResponse);
+      return;
+    }
+
+    // Prüfe Zugriff auf den Vertrag
+    const contract = await contractService.getContractById(contractId);
+    if (!contract) {
+      res.status(404).json({
+        success: false,
+        error: 'Vertrag nicht gefunden',
+      } as ApiResponse);
+      return;
+    }
+
+    // Zugriffsprüfung für Kundenportal
+    if (req.user?.customerId) {
+      const allowedCustomerIds = [req.user.customerId, ...(req.user.representedCustomerIds || [])];
+      if (!allowedCustomerIds.includes(contract.customerId)) {
+        res.status(403).json({
+          success: false,
+          error: 'Kein Zugriff auf diesen Vertrag',
+        } as ApiResponse);
+        return;
+      }
+    }
+
+    const createdBy = req.user?.email;
+
+    const task = await contractTaskService.createTask({
+      contractId,
+      title,
+      description,
+      visibleInPortal: true, // Immer sichtbar im Portal
+      createdBy,
+    });
+
+    res.status(201).json({ success: true, data: task } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Erstellen der Support-Anfrage',
+    } as ApiResponse);
+  }
+}
+
+export async function updateTask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const taskId = parseInt(req.params.taskId);
+    const { title, description, visibleInPortal } = req.body;
+
+    const task = await contractTaskService.updateTask(taskId, {
+      title,
+      description,
+      visibleInPortal,
+    });
+
+    res.json({ success: true, data: task } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Aktualisieren der Aufgabe',
+    } as ApiResponse);
+  }
+}
+
+export async function completeTask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const taskId = parseInt(req.params.taskId);
+    const task = await contractTaskService.completeTask(taskId);
+    res.json({ success: true, data: task } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Abschließen der Aufgabe',
+    } as ApiResponse);
+  }
+}
+
+export async function reopenTask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const taskId = parseInt(req.params.taskId);
+    const task = await contractTaskService.reopenTask(taskId);
+    res.json({ success: true, data: task } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Wiedereröffnen der Aufgabe',
+    } as ApiResponse);
+  }
+}
+
+export async function deleteTask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const taskId = parseInt(req.params.taskId);
+    await contractTaskService.deleteTask(taskId);
+    res.json({ success: true, message: 'Aufgabe gelöscht' } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Löschen der Aufgabe',
+    } as ApiResponse);
+  }
+}
+
+// ==================== SUBTASKS ====================
+
+export async function createSubtask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const taskId = parseInt(req.params.taskId);
+    const { title } = req.body;
+
+    if (!title) {
+      res.status(400).json({
+        success: false,
+        error: 'Titel ist erforderlich',
+      } as ApiResponse);
+      return;
+    }
+
+    const createdBy = req.user?.email;
+
+    const subtask = await contractTaskService.createSubtask({
+      taskId,
+      title,
+      createdBy,
+    });
+
+    res.status(201).json({ success: true, data: subtask } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Erstellen der Unteraufgabe',
+    } as ApiResponse);
+  }
+}
+
+// Kundenportal: Antwort auf eigenes Ticket erstellen
+export async function createCustomerReply(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const taskId = parseInt(req.params.taskId);
+    const { title } = req.body;
+
+    if (!title) {
+      res.status(400).json({
+        success: false,
+        error: 'Antwort ist erforderlich',
+      } as ApiResponse);
+      return;
+    }
+
+    // Hole den Task
+    const task = await contractTaskService.getTaskById(taskId);
+    if (!task) {
+      res.status(404).json({
+        success: false,
+        error: 'Anfrage nicht gefunden',
+      } as ApiResponse);
+      return;
+    }
+
+    // Prüfe ob der Kunde berechtigt ist (eigenes Ticket oder freigegebener Kunde)
+    if (req.user?.isCustomerPortal && req.user.customerId) {
+      const allowedCustomerIds = [req.user.customerId, ...(req.user.representedCustomerIds || [])];
+      const customers = await customerService.getCustomersByIds(allowedCustomerIds);
+      const allowedEmails = customers
+        .map((c: { id: number; portalEmail: string | null }) => c.portalEmail)
+        .filter((email: string | null): email is string => !!email);
+
+      // Task muss entweder visibleInPortal sein ODER vom Kunden erstellt worden sein
+      const isOwnTask = task.createdBy && allowedEmails.includes(task.createdBy);
+      if (!task.visibleInPortal && !isOwnTask) {
+        res.status(403).json({
+          success: false,
+          error: 'Kein Zugriff auf diese Anfrage',
+        } as ApiResponse);
+        return;
+      }
+    } else {
+      res.status(403).json({
+        success: false,
+        error: 'Nur für Kundenportal-Benutzer',
+      } as ApiResponse);
+      return;
+    }
+
+    const createdBy = req.user?.email;
+
+    const subtask = await contractTaskService.createSubtask({
+      taskId,
+      title,
+      createdBy,
+    });
+
+    res.status(201).json({ success: true, data: subtask } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Erstellen der Antwort',
+    } as ApiResponse);
+  }
+}
+
+export async function updateSubtask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const subtaskId = parseInt(req.params.subtaskId);
+    const { title } = req.body;
+
+    if (!title) {
+      res.status(400).json({
+        success: false,
+        error: 'Titel ist erforderlich',
+      } as ApiResponse);
+      return;
+    }
+
+    const subtask = await contractTaskService.updateSubtask(subtaskId, { title });
+    res.json({ success: true, data: subtask } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Aktualisieren der Unteraufgabe',
+    } as ApiResponse);
+  }
+}
+
+export async function completeSubtask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const subtaskId = parseInt(req.params.subtaskId);
+    const subtask = await contractTaskService.completeSubtask(subtaskId);
+    res.json({ success: true, data: subtask } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Abschließen der Unteraufgabe',
+    } as ApiResponse);
+  }
+}
+
+export async function reopenSubtask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const subtaskId = parseInt(req.params.subtaskId);
+    const subtask = await contractTaskService.reopenSubtask(subtaskId);
+    res.json({ success: true, data: subtask } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Wiedereröffnen der Unteraufgabe',
+    } as ApiResponse);
+  }
+}
+
+export async function deleteSubtask(req: AuthRequest, res: Response): Promise<void> {
+  try {
+    const subtaskId = parseInt(req.params.subtaskId);
+    await contractTaskService.deleteSubtask(subtaskId);
+    res.json({ success: true, message: 'Unteraufgabe gelöscht' } as ApiResponse);
+  } catch (error) {
+    res.status(400).json({
+      success: false,
+      error: error instanceof Error ? error.message : 'Fehler beim Löschen der Unteraufgabe',
+    } as ApiResponse);
+  }
+}