Janady13/missionmatch / internal/modules/matching/access_handler.go

1package matching 2 3import ( 4 "context" 5 "fmt" 6 "net/http" 7 "time" 8 9 "github.com/go-chi/chi/v5" 10 "github.com/google/uuid" 11 "github.com/jackc/pgx/v5" 12 "github.com/jackc/pgx/v5/pgtype" 13 14 "github.com/missionworkforce/missionmatch/internal/modules/matching/intelligence" 15 "github.com/missionworkforce/missionmatch/internal/platform/audit" 16) 17 18// THE ACCESS HISTORY WRITE, which is the half without which the whole feature is decoration. 19// 20// The posture is derived from three dates, and if there is no way to enter them then every candidate reports 21// "not known" forever and the product has added a column that says nothing. This is the route a recruiter 22// uses after a phone call, which is where these dates actually come from: nobody imports them. 23 24// AccessInput is the write shape. Every field is a pointer to a string so a caller can distinguish leaving a 25// value alone from clearing it, and dates cross the wire as YYYY-MM-DD rather than as a timestamp, because 26// what is being recorded is a day somebody remembers rather than an instant. 27type AccessInput struct { 28 CVEnrolled *bool `json:"cv_enrolled"` 29 CVEnrolledOn *string `json:"cv_enrolled_on"` 30 AccessEndedOn *string `json:"access_ended_on"` 31 LastAdjudicatedOn *string `json:"last_adjudicated_on"` 32} 33 34func (h *Handler) patchCandidateAccess(w http.ResponseWriter, r *http.Request) { 35 id, err := uuid.Parse(chi.URLParam(r, "candidateID")) 36 if err != nil { 37 writeError(w, http.StatusBadRequest, "invalid candidate id") 38 return 39 } 40 var in AccessInput 41 if !decodeJSON(w, r, &in) { 42 return 43 } 44 intel, err := h.svc.SetCandidateAccess(r.Context(), id, in) 45 if err != nil { 46 writeServiceError(w, err) 47 return 48 } 49 // The DERIVED posture comes straight back, so the screen renders the consequence of what was just entered 50 // rather than refetching and hoping it agrees. 51 writeJSON(w, http.StatusOK, intel) 52} 53 54// parseDay accepts YYYY-MM-DD or an empty string meaning clear. 55func parseDay(v *string, field string) (*time.Time, bool, error) { 56 if v == nil { 57 return nil, false, nil // absent: leave alone 58 } 59 if *v == "" { 60 return nil, true, nil // present and empty: clear 61 } 62 t, err := time.Parse("2006-01-02", *v) 63 if err != nil { 64 return nil, false, fmt.Errorf("%s must be a date in the form YYYY-MM-DD", field) 65 } 66 return &t, true, nil 67} 68 69// SetCandidateAccess records the access history and returns the posture it implies. 70func (s *Service) SetCandidateAccess(ctx context.Context, id uuid.UUID, in AccessInput) (intelligence.AccessIntel, error) { 71 var out intelligence.AccessIntel 72 if s.db == nil { 73 return out, ErrNoDatabase 74 } 75 76 ended, endedSet, err := parseDay(in.AccessEndedOn, "access_ended_on") 77 if err != nil { 78 return out, fmt.Errorf("%w: %s", ErrBadRequest, err.Error()) 79 } 80 adj, adjSet, err := parseDay(in.LastAdjudicatedOn, "last_adjudicated_on") 81 if err != nil { 82 return out, fmt.Errorf("%w: %s", ErrBadRequest, err.Error()) 83 } 84 enrolledOn, enrolledOnSet, err := parseDay(in.CVEnrolledOn, "cv_enrolled_on") 85 if err != nil { 86 return out, fmt.Errorf("%w: %s", ErrBadRequest, err.Error()) 87 } 88 89 err = s.db.RunInTenantTx(ctx, func(ctx context.Context, tx pgx.Tx) error { 90 // COALESCE on the unset fields so a partial write leaves the rest alone. The database CHECK refuses 91 // the one combination that cannot be true, somebody enrolled AND separated, so an inconsistent pair 92 // fails loudly here rather than producing a posture nobody can explain. 93 if _, e := tx.Exec(ctx, ` 94 UPDATE candidates SET 95 cv_enrolled = CASE WHEN $2::boolean IS NOT NULL OR $3 THEN $2 ELSE cv_enrolled END, 96 cv_enrolled_on = CASE WHEN $4 THEN $5::date ELSE cv_enrolled_on END, 97 access_ended_on = CASE WHEN $6 THEN $7::date ELSE access_ended_on END, 98 last_adjudicated_on = CASE WHEN $8 THEN $9::date ELSE last_adjudicated_on END, 99 updated_at = now() 100 WHERE id = $1 AND deleted_at IS NULL`, 101 id, in.CVEnrolled, in.CVEnrolled != nil, 102 enrolledOnSet, enrolledOn, 103 endedSet, ended, 104 adjSet, adj); e != nil { 105 return e 106 } 107 var c struct { 108 enrolled *bool 109 ended pgtype.Date 110 adj pgtype.Date 111 level string 112 status string 113 } 114 if e := tx.QueryRow(ctx, 115 `SELECT cv_enrolled, access_ended_on, last_adjudicated_on, clearance_level, clearance_status 116 FROM candidates WHERE id = $1`, id). 117 Scan(&c.enrolled, &c.ended, &c.adj, &c.level, &c.status); e != nil { 118 if e == pgx.ErrNoRows { 119 return ErrNotFound 120 } 121 return e 122 } 123 f := intelligence.AccessFacts{CVEnrolled: c.enrolled, ClearanceLevel: c.level, ClearanceStatus: c.status} 124 if c.ended.Valid { 125 t := c.ended.Time 126 f.AccessEndedOn = &t 127 } 128 if c.adj.Valid { 129 t := c.adj.Time 130 f.LastAdjudicated = &t 131 } 132 out = intelligence.Access(f, s.clock().UTC()) 133 134 // AUDITED, because a change here changes whether a person is presented as placeable, which is a 135 // staffing decision input. No PII in the payload beyond the candidate id the event already names. 136 if s.aud != nil { 137 return s.aud.OnTx(ctx, tx, audit.Event{ 138 Action: "candidate.access.updated", EntityType: "candidate", EntityID: id.String(), 139 ActorUserID: actorID(ctx), 140 }) 141 } 142 return nil 143 }) 144 return out, err 145} 146