Janady13/missionmatch / internal/modules/staffing/handler.go

Source identity

Field	Recorded value
Source type	GitHub source
Original record	Janady13/missionmatch / internal/modules/staffing/handler.go
Date	Not specified in source
Repository	Janady13/missionmatch
Revision	720d47fae476b0d38477ae4401697d372b1ea2bc
Branch	feature/opportunity-to-outcome
Path or archive member	internal/modules/staffing/handler.go
Original SHA-256	7c6d5b31fa9275dfd9e6c8df4a89019b5dd6e9c7b765ee788fa0a83bb28d83b1
Git blob SHA	a232af32e3e3443c29d6832cccf0422360e07dff
Reading-copy SHA-256	7c6d5b31fa9275dfd9e6c8df4a89019b5dd6e9c7b765ee788fa0a83bb28d83b1

Original source ↗

Every recorded occurrence

These 24 records contain identical original source bytes. Their paths and revisions remain part of the archive.

Original record	Branch or archive	Revision / identifier	Original location
Janady13/missionmatch / internal/modules/staffing/handler.go	feature/opportunity-to-outcome	720d47fae476b0d38477ae4401697d372b1ea2bc	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	per-tenant-routing	9bde0f9a74b89d01980fa658e5253acda7528d0c	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	collision-deconfliction	4ee5a09972608ed89f8377c6665542d5f450f0a6	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	ws6-retrieval	6c56e29231ec05735927fa265c97d517499dfeaf	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	m5-price-to-win	41000ad30fff4129fdaf5ec84e15ba14c27d4890	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	ws1-ontology-sync	b596f449a32a1016fbd403c36505cc00a1ac9ee6	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	master	1e9249840a4302ec82e123b9c9cb6f75badea3e4	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	ws8-teaching-loop	c823f0fb6bb2aba0f39001eb6de96f4000d9321f	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	w3-ai-staffing-recommendations	43d56387270ef4da4cabd794d97ca6a49909bc7d	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	mag-substrate	b82c7100a492dec67dfd1eda6b3f53def859be35	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	ws3-clearance	4b8e7ce594c068621867f9c9deed0ec64ae6c553	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	phase2-eval-fairness	d361af254701975fe239927656ababb56374655e	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	time-to-fill-survival	b66e1e505863d4f17741a4b9ede73509e45bd6c6	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	graphrag-foundation	b0ddeb9f633fd138d09309d1a17b7d13bc3a67f7	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	deploy-and-ops	bdacd9d0b4d5998d25fc74bf4007f4c3ec538c7a	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	ws9-bench-ingestion	f585a9ef32fa554663ce1fba9a414a54b6e49cf0	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	ws2-alias-relationship	e4dada4601c6eb101830f9d223a9655dfa120616	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	presentation-readiness	eb574acaa29d71ce4d0f852572e87c275c79fdb7	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	vendor-intelligence	fe9796a19c261951d3f2565206c0c1b5ac294465	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	ws7-federal-signal	6a9f6ce9cfb13345ffb47770d4960e7c2d9c17c2	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	ai-brain-live	aac32fc49c878cc5bca099459307611562d0bac1	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	phase2-connectors	e038d4c687aec16f8bd9bc4d907eea14d91f8704	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	feature/aioe-upgrade	2178e7298d0e5d9af83afa12402fd587f0ba6ed8	Open original
Janady13/missionmatch / internal/modules/staffing/handler.go	capture-readiness	bae6af7cb2997e819174a9e9cfff5e16067a1975	Open original

Recovered source transcript

Download complete source text ↓166 lines · 5.5 KB

package staffing

import (
	"encoding/json"
	"errors"
	"io"
	"net/http"
	"strconv"

	"github.com/go-chi/chi/v5"
	"github.com/google/uuid"

	"github.com/missionworkforce/missionmatch/internal/platform/security"
	"github.com/missionworkforce/missionmatch/internal/platform/tenant"
)

// Handler serves the W3 staffing recommendation endpoints under the tenant scoped group, behind the
// session resolver, CSRF, RBAC, and audit (the same chain as every other module).
type Handler struct{ svc *Service }

// NewHandler builds the handler.
func NewHandler(svc *Service) *Handler { return &Handler{svc: svc} }

// Routes mounts the four endpoints with their capabilities. Generating a run WRITES recommendation rows,
// so the two generating endpoints are gated on the write capability staffing.recommend (not a read
// capability). The decision reuses the slate decision authority; reads reuse candidate.read.
func (h *Handler) Routes(r chi.Router) {
	r.With(security.RequireCapability(security.CapStaffingRecommend)).Post("/recommendations/gap/{requirementID}", h.gap)
	r.With(security.RequireCapability(security.CapStaffingRecommend)).Post("/recommendations/portfolio", h.portfolio)
	r.With(security.RequireCapability(security.CapCandidateRead)).Get("/recommendations/proactive", h.proactive)
	r.With(security.RequireCapability(security.CapSlateEdit)).Post("/recommendations/{recommendationID}/decision", h.decide)
}

func (h *Handler) gap(w http.ResponseWriter, r *http.Request) {
	reqID, err := uuid.Parse(chi.URLParam(r, "requirementID"))
	if err != nil {
		writeErr(w, validationErr("requirement_id", "must be a uuid"))
		return
	}
	var in GapRequest
	if !decodeOptional(w, r, &in) {
		return
	}
	out, err := h.svc.GenerateGap(r.Context(), reqID, in)
	writeOrErr(w, out, err)
}

func (h *Handler) portfolio(w http.ResponseWriter, r *http.Request) {
	var in PortfolioRequest
	if !decodeOptional(w, r, &in) {
		return
	}
	out, err := h.svc.GeneratePortfolio(r.Context(), in)
	writeOrErr(w, out, err)
}

func (h *Handler) proactive(w http.ResponseWriter, r *http.Request) {
	limit := atoiDefault(r.URL.Query().Get("limit"), 0)
	offset := atoiDefault(r.URL.Query().Get("offset"), 0)
	out, err := h.svc.ListProactive(r.Context(), limit, offset)
	writeOrErr(w, out, err)
}

func (h *Handler) decide(w http.ResponseWriter, r *http.Request) {
	recID, err := uuid.Parse(chi.URLParam(r, "recommendationID"))
	if err != nil {
		writeErr(w, validationErr("recommendation_id", "must be a uuid"))
		return
	}
	var in DecisionRequest
	if !decode(w, r, &in) {
		return
	}
	out, err := h.svc.Decide(r.Context(), recID, in)
	writeOrErr(w, out, err)
}

// ---------- the one typed error envelope ----------

type errorBody struct {
	Error errorEnvelope `json:"error"`
}

type errorEnvelope struct {
	Code    string            `json:"code"`
	Message string            `json:"message"`
	Fields  map[string]string `json:"fields,omitempty"`
}

func writeOrErr(w http.ResponseWriter, v any, err error) {
	if err != nil {
		writeErr(w, err)
		return
	}
	writeJSON(w, http.StatusOK, v)
}

func writeErr(w http.ResponseWriter, err error) {
	var verr *ValidationError
	if errors.As(err, &verr) {
		writeJSON(w, http.StatusUnprocessableEntity, errorBody{errorEnvelope{Code: "validation", Message: "invalid request parameters", Fields: verr.Fields}})
		return
	}
	status, code, msg := http.StatusInternalServerError, "internal", "internal error"
	switch {
	case errors.Is(err, ErrNotFound):
		status, code, msg = http.StatusNotFound, "not_found", "requirement not found or not open"
	case errors.Is(err, ErrConflict):
		status, code, msg = http.StatusConflict, "conflict", "recommendation already decided or superseded"
	case errors.Is(err, ErrProblemTooLarge):
		status, code, msg = http.StatusRequestEntityTooLarge, "problem_too_large", "the portfolio problem exceeds the size cap"
	case errors.Is(err, ErrSolveBudget):
		status, code, msg = http.StatusServiceUnavailable, "solve_timeout", "the portfolio solve exceeded its time budget"
	case errors.Is(err, ErrNoDatabase):
		status, code, msg = http.StatusServiceUnavailable, "no_database", "database not configured"
	case errors.Is(err, tenant.ErrNoTenant):
		status, code, msg = http.StatusForbidden, "no_tenant", "no validated tenant"
	}
	writeJSON(w, status, errorBody{errorEnvelope{Code: code, Message: msg}})
}

// decode requires a JSON body (the decision endpoint).
func decode(w http.ResponseWriter, r *http.Request, dst any) bool {
	dec := json.NewDecoder(http.MaxBytesReader(w, r.Body, 1<<20))
	dec.DisallowUnknownFields()
	if err := dec.Decode(dst); err != nil {
		writeJSON(w, http.StatusBadRequest, errorBody{errorEnvelope{Code: "bad_request", Message: "invalid request body"}})
		return false
	}
	return true
}

// decodeOptional accepts an empty body (the generating endpoints take optional overrides).
func decodeOptional(w http.ResponseWriter, r *http.Request, dst any) bool {
	if r.Body == nil || r.ContentLength == 0 {
		return true
	}
	dec := json.NewDecoder(http.MaxBytesReader(w, r.Body, 1<<20))
	dec.DisallowUnknownFields()
	if err := dec.Decode(dst); err != nil {
		if errors.Is(err, io.EOF) {
			return true
		}
		writeJSON(w, http.StatusBadRequest, errorBody{errorEnvelope{Code: "bad_request", Message: "invalid request body"}})
		return false
	}
	return true
}

func writeJSON(w http.ResponseWriter, status int, v any) {
	w.Header().Set("Content-Type", "application/json")
	w.WriteHeader(status)
	_ = json.NewEncoder(w).Encode(v)
}

func atoiDefault(s string, def int) int {
	if s == "" {
		return def
	}
	n, err := strconv.Atoi(s)
	if err != nil {
		return def
	}
	return n
}