full status implementation

packages/backend/src/routes/index.ts

@@ -7,6 +7,7 @@ import issueDelete from "./issue/delete";
 import issueUpdate from "./issue/update";
 import issues from "./issues/all";
 import issuesByProject from "./issues/by-project";
+import issuesReplaceStatus from "./issues/replace-status";
 import organisationAddMember from "./organisation/add-member";
 import organisationById from "./organisation/by-id";
 import organisationsByUser from "./organisation/by-user";
@@ -48,6 +49,7 @@ export const routes = {
 
     issuesByProject,
     issues,
+    issuesReplaceStatus,
 
     organisationCreate,
     organisationById,

packages/backend/src/routes/issue/create.ts

@@ -1,9 +1,9 @@
 import type { AuthedRequest } from "../../auth/middleware";
 import { createIssue, getProjectByID, getProjectByKey } from "../../db/queries";
 
-// /issue/create?projectId=1&title=Testing&description=Description
+// /issue/create?projectId=1&title=Testing&description=Description&status=TO%20DO
 // OR
-// /issue/create?projectKey=projectKey&title=Testing&description=Description
+// /issue/create?projectKey=projectKey&title=Testing&description=Description&status=TO%20DO
 export default async function issueCreate(req: AuthedRequest) {
     const url = new URL(req.url);
     const projectId = url.searchParams.get("projectId");
@@ -25,8 +25,9 @@ export default async function issueCreate(req: AuthedRequest) {
     const description = url.searchParams.get("description") || "";
     const assigneeIdParam = url.searchParams.get("assigneeId");
     const assigneeId = assigneeIdParam ? Number(assigneeIdParam) : undefined;
+    const status = url.searchParams.get("status") || undefined;
 
-    const issue = await createIssue(project.id, title, description, req.userId, assigneeId);
+    const issue = await createIssue(project.id, title, description, req.userId, assigneeId, status);
 
     return Response.json(issue);
 }

packages/backend/src/routes/issue/update.ts

@@ -1,7 +1,7 @@
 import type { BunRequest } from "bun";
 import { updateIssue } from "../../db/queries";
 
-// /issue/update?id=1&title=Testing&description=Description&assigneeId=2
+// /issue/update?id=1&title=Testing&description=Description&assigneeId=2&status=IN%20PROGRESS
 // assigneeId can be "null" to unassign
 export default async function issueUpdate(req: BunRequest) {
     const url = new URL(req.url);
@@ -13,6 +13,7 @@ export default async function issueUpdate(req: BunRequest) {
     const title = url.searchParams.get("title") || undefined;
     const description = url.searchParams.get("description") || undefined;
     const assigneeIdParam = url.searchParams.get("assigneeId");
+    const status = url.searchParams.get("status") || undefined;
 
     // Parse assigneeId: "null" means unassign, number means assign, undefined means no change
     let assigneeId: number | null | undefined;
@@ -22,7 +23,7 @@ export default async function issueUpdate(req: BunRequest) {
         assigneeId = Number(assigneeIdParam);
     }
 
-    if (!title && !description && assigneeId === undefined) {
+    if (!title && !description && assigneeId === undefined && !status) {
         return new Response("no updates provided", { status: 400 });
     }
 
@@ -30,6 +31,7 @@ export default async function issueUpdate(req: BunRequest) {
         title,
         description,
         assigneeId,
+        status,
     });
 
     return Response.json(issue);

packages/backend/src/routes/issues/replace-status.ts

@@ -0,0 +1,41 @@
+import type { AuthedRequest } from "../../auth/middleware";
+import { getOrganisationMemberRole, replaceIssueStatus } from "../../db/queries";
+
+// /issues/replace-status?organisationId=1&oldStatus=TO%20DO&newStatus=IN%20PROGRESS
+export default async function issuesReplaceStatus(req: AuthedRequest) {
+    const url = new URL(req.url);
+    const organisationIdParam = url.searchParams.get("organisationId");
+    const oldStatus = url.searchParams.get("oldStatus");
+    const newStatus = url.searchParams.get("newStatus");
+
+    if (!organisationIdParam) {
+        return new Response("missing organisationId", { status: 400 });
+    }
+
+    if (!oldStatus) {
+        return new Response("missing oldStatus", { status: 400 });
+    }
+
+    if (!newStatus) {
+        return new Response("missing newStatus", { status: 400 });
+    }
+
+    const organisationId = Number(organisationIdParam);
+    if (!Number.isInteger(organisationId)) {
+        return new Response("organisationId must be an integer", { status: 400 });
+    }
+
+    // check if user is admin or owner of the organisation
+    const membership = await getOrganisationMemberRole(organisationId, req.userId);
+    if (!membership) {
+        return new Response("not a member of this organisation", { status: 403 });
+    }
+
+    if (membership.role !== "owner" && membership.role !== "admin") {
+        return new Response("only admins and owners can replace statuses", { status: 403 });
+    }
+
+    const result = await replaceIssueStatus(organisationId, oldStatus, newStatus);
+
+    return Response.json(result);
+}

packages/backend/src/routes/organisation/update.ts

@@ -1,13 +1,29 @@
 import type { BunRequest } from "bun";
 import { getOrganisationById, updateOrganisation } from "../../db/queries";
 
-// /organisation/update?id=1&name=New%20Name&description=New%20Description&slug=new-slug
+// /organisation/update?id=1&name=New%20Name&description=New%20Description&slug=new-slug&statuses=["TO DO","IN PROGRESS"]
 export default async function organisationUpdate(req: BunRequest) {
     const url = new URL(req.url);
     const id = url.searchParams.get("id");
     const name = url.searchParams.get("name") || undefined;
     const description = url.searchParams.get("description") || undefined;
     const slug = url.searchParams.get("slug") || undefined;
+    const statusesParam = url.searchParams.get("statuses");
+
+    let statuses: string[] | undefined;
+    if (statusesParam) {
+        try {
+            statuses = JSON.parse(statusesParam);
+            if (!Array.isArray(statuses) || !statuses.every((s) => typeof s === "string")) {
+                return new Response("statuses must be an array of strings", { status: 400 });
+            }
+            if (statuses.length === 0) {
+                return new Response("statuses must have at least one status", { status: 400 });
+            }
+        } catch {
+            return new Response("invalid statuses format (must be JSON array)", { status: 400 });
+        }
+    }
 
     if (!id) {
         return new Response("organisation id is required", { status: 400 });
@@ -23,8 +39,8 @@ export default async function organisationUpdate(req: BunRequest) {
         return new Response(`organisation with id ${id} does not exist`, { status: 404 });
     }
 
-    if (!name && !description && !slug) {
-        return new Response("at least one of name, description, or slug must be provided", {
+    if (!name && !description && !slug && !statuses) {
+        return new Response("at least one of name, description, slug, or statuses must be provided", {
             status: 400,
         });
     }
@@ -33,6 +49,7 @@ export default async function organisationUpdate(req: BunRequest) {
         name,
         description,
         slug,
+        statuses,
     });
 
     return Response.json(organisation);