adminandClaude Sonnet 4.6
8fe036bc1a
- export: add .limit(10000), sanitize filename, write_audit_log on every export - stats: add .limit(10000) to aggregation query - settings POST: reject empty string values to prevent silent key deletion Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CPf5Rc8QPx6V8KLEEgfKEQ
42 lines
1.5 KiB
TypeScript
42 lines
1.5 KiB
TypeScript
export const dynamic = 'force-dynamic'
|
|
|
|
import { NextResponse } from 'next/server'
|
|
import { createClient } from '@/lib/supabase/server'
|
|
|
|
export async function GET() {
|
|
const supabase = await createClient()
|
|
const { data: { user } } = await supabase.auth.getUser()
|
|
if (!user) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
|
|
|
|
const { data: profile } = await supabase.from('users').select('role').eq('id', user.id).single()
|
|
if (!profile || !['hse', 'admin', 'management'].includes(profile.role))
|
|
return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
|
|
|
|
const { data: incidents, error } = await supabase
|
|
.from('incidents')
|
|
.select('id, status, incident_type, sites (name)')
|
|
.limit(10000)
|
|
|
|
if (error) return NextResponse.json({ error: 'Failed to fetch stats' }, { status: 500 })
|
|
|
|
const rows = incidents ?? []
|
|
const total = rows.length
|
|
const closed = rows.filter(r => r.status === 'closed').length
|
|
const open = total - closed
|
|
|
|
const by_type: Record<string, number> = {}
|
|
for (const r of rows) {
|
|
by_type[r.incident_type] = (by_type[r.incident_type] ?? 0) + 1
|
|
}
|
|
|
|
const siteMap: Record<string, number> = {}
|
|
for (const r of rows) {
|
|
const name = (r.sites as unknown as { name: string } | null)?.name ?? 'Unknown'
|
|
siteMap[name] = (siteMap[name] ?? 0) + 1
|
|
}
|
|
const by_site = Object.entries(siteMap).map(([name, count]) => ({ name, count }))
|
|
.sort((a, b) => b.count - a.count)
|
|
|
|
return NextResponse.json({ total, open, closed, by_type, by_site })
|
|
}
|