feat(yachts): updateYacht + archiveYacht

src/lib/services/yachts.service.ts

@@ -5,9 +5,10 @@ import { companies } from '@/lib/db/schema/companies';
 import { createAuditLog } from '@/lib/audit';
 import { NotFoundError, ValidationError } from '@/lib/errors';
 import { emitToRoom } from '@/lib/socket/server';
+import { diffEntity } from '@/lib/entity-diff';
 import { withTransaction } from '@/lib/db/utils';
 import type { z } from 'zod';
-import type { createYachtSchema } from '@/lib/validators/yachts';
+import type { createYachtSchema, UpdateYachtInput } from '@/lib/validators/yachts';
 
 type CreateYachtInput = z.input<typeof createYachtSchema>;
 
@@ -98,3 +99,88 @@ export async function getYachtById(id: string, portId: string) {
   if (!yacht) throw new NotFoundError('Yacht');
   return yacht;
 }
+
+export async function updateYacht(
+  id: string,
+  portId: string,
+  data: UpdateYachtInput,
+  meta: AuditMeta,
+) {
+  // Defense-in-depth: owner changes must go through /transfer, not PATCH.
+  const dataRecord = data as Record<string, unknown>;
+  if (
+    Object.prototype.hasOwnProperty.call(dataRecord, 'currentOwnerType') ||
+    Object.prototype.hasOwnProperty.call(dataRecord, 'currentOwnerId')
+  ) {
+    throw new ValidationError('use /transfer to change ownership');
+  }
+
+  const existing = await db.query.yachts.findFirst({
+    where: eq(yachts.id, id),
+  });
+
+  if (!existing || existing.portId !== portId) {
+    throw new NotFoundError('Yacht');
+  }
+
+  const { diff } = diffEntity(
+    existing as unknown as Record<string, unknown>,
+    data as Record<string, unknown>,
+  );
+
+  const [updated] = await db
+    .update(yachts)
+    .set({ ...data, updatedAt: new Date() })
+    .where(and(eq(yachts.id, id), eq(yachts.portId, portId)))
+    .returning();
+
+  void createAuditLog({
+    userId: meta.userId,
+    portId,
+    action: 'update',
+    entityType: 'yacht',
+    entityId: id,
+    oldValue: diff as Record<string, unknown>,
+    newValue: data as Record<string, unknown>,
+    ipAddress: meta.ipAddress,
+    userAgent: meta.userAgent,
+  });
+
+  emitToRoom(`port:${portId}`, 'yacht:updated', {
+    yachtId: id,
+    changedFields: Object.keys(diff),
+  });
+
+  return updated!;
+}
+
+export async function archiveYacht(id: string, portId: string, meta: AuditMeta) {
+  const existing = await db.query.yachts.findFirst({
+    where: eq(yachts.id, id),
+  });
+
+  if (!existing || existing.portId !== portId) {
+    throw new NotFoundError('Yacht');
+  }
+
+  // NOTE: bypassing the shared `softDelete(...)` util: it sets the raw
+  // column key `archived_at`, which Drizzle does not recognise (the JS
+  // key is `archivedAt`) and therefore emits an empty SET clause. Until
+  // the utility is fixed, do the update inline.
+  await db
+    .update(yachts)
+    .set({ archivedAt: new Date() })
+    .where(and(eq(yachts.id, id), eq(yachts.portId, portId)));
+
+  void createAuditLog({
+    userId: meta.userId,
+    portId,
+    action: 'archive',
+    entityType: 'yacht',
+    entityId: id,
+    ipAddress: meta.ipAddress,
+    userAgent: meta.userAgent,
+  });
+
+  emitToRoom(`port:${portId}`, 'yacht:archived', { yachtId: id });
+}