stage 4

2026-04-21 09:29:44 -05:00
parent 41b06f89c0
commit fc5bce4868
19 changed files with 1469 additions and 190 deletions
@@ -0,0 +1,101 @@
+import { redirect } from "next/navigation";
+import Link from "next/link";
+import { prisma } from "@/lib/prisma";
+import { getCurrentUser } from "@/lib/auth";
+import ScanClient, { type ScanOp } from "./ScanClient";
+
+/**
+ * Entry point for a QR scan. Resolves the token server-side so we can:
+ *   1. Redirect unauthenticated visitors to /login/operator with ?next=<here>,
+ *      so they land back on this same page after PIN entry.
+ *   2. Show a clean "unknown token" page for bad scans (old card, typo) instead
+ *      of the generic 404.
+ *   3. Render the interactive ScanClient with everything the operator needs
+ *      to read the work card and claim / pause / complete.
+ *
+ * Admins who scan get a read-only preview — we don't let them claim because
+ * the claim holder is supposed to be the one running the machine.
+ */
+export default async function ScanPage({ params }: { params: Promise<{ token: string }> }) {
+  const { token } = await params;
+  const user = await getCurrentUser();
+
+  if (!user) {
+    redirect(`/login/operator?next=${encodeURIComponent(`/op/scan/${token}`)}`);
+  }
+
+  const op = await prisma.operation.findUnique({
+    where: { qrToken: token },
+    include: {
+      machine: { select: { id: true, name: true, kind: true } },
+      part: {
+        select: {
+          id: true,
+          code: true,
+          name: true,
+          material: true,
+          qty: true,
+          assembly: {
+            select: {
+              id: true,
+              code: true,
+              name: true,
+              project: { select: { id: true, code: true, name: true } },
+            },
+          },
+        },
+      },
+      claimedBy: { select: { id: true, name: true } },
+    },
+  });
+
+  if (!op) {
+    return (
+      <div className="mx-auto max-w-xl px-4 py-10">
+        <div className="rounded-xl bg-white border border-slate-200 p-6 text-center">
+          <h1 className="text-xl font-semibold">QR code not recognised</h1>
+          <p className="text-slate-600 mt-2 text-sm">
+            This card might be from an older print, or the operation was deleted. Ask your supervisor
+            to reprint the traveler.
+          </p>
+          <Link
+            href="/op"
+            className="inline-block mt-4 rounded-md bg-slate-900 text-white px-4 py-2 text-sm"
+          >
+            Back to dashboard
+          </Link>
+        </div>
+      </div>
+    );
+  }
+
+  if (user.role !== "operator") {
+    // Admin preview: render a read-only summary, no action buttons.
+    return (
+      <div className="mx-auto max-w-xl px-4 py-8">
+        <p className="text-xs uppercase tracking-wide text-slate-500 mb-2">Admin preview</p>
+        <ScanClient
+          initialOp={serialise(op)}
+          viewer={{ id: user.id, role: "admin", claimedByMe: false }}
+        />
+      </div>
+    );
+  }
+
+  const claimedByMe = op.claimedByUserId === user.id;
+  return (
+    <div className="mx-auto max-w-xl px-4 py-6">
+      <ScanClient
+        initialOp={serialise(op)}
+        viewer={{ id: user.id, role: "operator", claimedByMe }}
+      />
+    </div>
+  );
+}
+
+// Date fields come back as JS Date objects from Prisma; convert for the client
+// component payload so it can be serialised into the RSC stream without tripping
+// on non-plain objects. We widen to `ScanOp` which types the dates as strings.
+function serialise(obj: unknown): ScanOp {
+  return JSON.parse(JSON.stringify(obj)) as ScanOp;
+}