Add facilities, contracts, orders, value lists, audit log, and desktop app modules

Extends omsorgCore with full CRUD for Facility/Contract/Order plus
configurable value lists and an audit trail, and wires the omsorgapp
frontend up to the new facilities, settings, and audit-log modules;
includes a sidebar active-nav-item highlight.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

omsorgapp/electron/backend/apiClientHelpers.cjs

@@ -0,0 +1,34 @@
+const { Configuration } = require('omsorgcore-client-ts');
+const { API_BASE } = require('./config.cjs');
+
+// Baut die Configuration für eine generierte *Api-Klasse (omsorgcore-client-ts).
+// Einzige Stelle, die API_BASE mit dem generierten Client verbindet.
+function configFor(accessToken) {
+  return new Configuration({ basePath: API_BASE, accessToken });
+}
+
+// Wandelt den Aufruf einer generierten `...Raw()`-Methode in denselben
+// Vertrag um, den vorher httpClient.request(...) lieferte: { ok, status, data, error? }.
+// Generierte Clients werfen bei Nicht-2xx eine ResponseError-Exception statt ein
+// Ergebnisobjekt zurückzugeben - das fangen wir hier zentral ab.
+async function callApi(rawPromise) {
+  try {
+    const response = await rawPromise;
+    const data = await response.value();
+    return { ok: true, status: response.raw.status, data: data === undefined ? null : data };
+  } catch (err) {
+    if (err && err.name === 'ResponseError') {
+      const status = err.response.status;
+      let data = null;
+      try {
+        data = await err.response.json();
+      } catch {
+        data = null;
+      }
+      return { ok: false, status, data };
+    }
+    return { ok: false, status: 0, data: null, error: err && err.message };
+  }
+}
+
+module.exports = { configFor, callApi };

omsorgapp/electron/backend/auditLogClient.cjs

@@ -0,0 +1,25 @@
+const { AuditLogApi } = require('omsorgcore-client-ts');
+const { configFor, callApi } = require('./apiClientHelpers.cjs');
+
+// Kapselt GET /api/audit-log (AuditLogController) über den generierten Client
+// (omsorgcore-client-ts) - rein lesend, keine weiteren Verben.
+async function listAuditLog(
+  accessToken,
+  { page = 1, pageSize = 50, entityType, entityId, actorUserId, category, fromUtc, toUtc } = {}
+) {
+  const api = new AuditLogApi(configFor(accessToken));
+  return callApi(
+    api.apiAuditLogGetRaw({
+      page,
+      pageSize,
+      entityType: entityType || undefined,
+      entityId: entityId || undefined,
+      actorUserId: actorUserId || undefined,
+      category: category || undefined,
+      fromUtc: fromUtc ? new Date(fromUtc) : undefined,
+      toUtc: toUtc ? new Date(toUtc) : undefined,
+    })
+  );
+}
+
+module.exports = { listAuditLog };

omsorgapp/electron/backend/authClient.cjs

@@ -1,7 +1,9 @@
-const { request } = require('./httpClient.cjs');
+const { AuthApi } = require('omsorgcore-client-ts');
+const { configFor, callApi } = require('./apiClientHelpers.cjs');
 
-// Kapselt /api/auth/* von omsorgCore. Kennt die Feldnamen der LoginResponse
-// (camelCase, da ASP.NET Core standardmäßig camelCase-JSON ausgibt).
+// Kapselt /api/auth/* von omsorgCore über den generierten Client (omsorgcore-client-ts).
+// Kennt die Feldnamen der LoginResponse (camelCase, da ASP.NET Core standardmäßig
+// camelCase-JSON ausgibt).
 function toTokenPair(data) {
   return {
     accessToken: data.accessToken,
@@ -12,7 +14,8 @@ function toTokenPair(data) {
 }
 
 async function login(username, password) {
-  const result = await request('POST', '/api/auth/login', { body: { username, password } });
+  const api = new AuthApi(configFor(undefined));
+  const result = await callApi(api.apiAuthLoginPostRaw({ loginRequest: { username, password } }));
   if (!result.ok) {
     return { ok: false, status: result.status, error: result.error || result.data?.error };
   }
@@ -20,47 +23,58 @@ async function login(username, password) {
 }
 
 async function refresh(refreshToken) {
-  const result = await request('POST', '/api/auth/refresh', { body: { refreshToken } });
+  const api = new AuthApi(configFor(undefined));
+  const result = await callApi(api.apiAuthRefreshPostRaw({ refreshRequest: { refreshToken } }));
   if (!result.ok) return { ok: false, status: result.status };
   return { ok: true, ...toTokenPair(result.data) };
 }
 
 async function logout(refreshToken) {
-  const result = await request('POST', '/api/auth/logout', { body: { refreshToken } });
+  const api = new AuthApi(configFor(undefined));
+  const result = await callApi(api.apiAuthLogoutPostRaw({ logoutRequest: { refreshToken } }));
   return { ok: result.ok, status: result.status };
 }
 
 async function me(accessToken) {
-  const result = await request('GET', '/api/auth/me', { accessToken });
+  const api = new AuthApi(configFor(accessToken));
+  const result = await callApi(api.apiAuthMeGetRaw());
   if (!result.ok) return { ok: false, status: result.status };
   return { ok: true, username: result.data.username, role: result.data.role, permissions: result.data.permissions };
 }
 
 async function requestPasswordReset(username) {
-  const result = await request('POST', '/api/auth/forgot-password/request', { body: { username } });
+  const api = new AuthApi(configFor(undefined));
+  const result = await callApi(api.apiAuthForgotPasswordRequestPostRaw({ forgotPasswordRequestRequest: { username } }));
   if (!result.ok) return { ok: false, status: result.status };
   return { ok: true, status: result.data.status };
 }
 
 async function verifyPasswordResetCode(username, pin) {
-  const result = await request('POST', '/api/auth/forgot-password/verify', { body: { username, pin } });
+  const api = new AuthApi(configFor(undefined));
+  const result = await callApi(api.apiAuthForgotPasswordVerifyPostRaw({ forgotPasswordVerifyRequest: { username, pin } }));
   if (!result.ok) return { ok: false, status: result.status, error: result.data?.error };
   return { ok: true, resetToken: result.data.resetToken };
 }
 
 async function resetPassword(resetToken, newPassword) {
-  const result = await request('POST', '/api/auth/forgot-password/reset', { body: { resetToken, newPassword } });
-  return { ok: result.ok, status: result.status };
+  const api = new AuthApi(configFor(undefined));
+  const result = await callApi(api.apiAuthForgotPasswordResetPostRaw({ forgotPasswordResetRequest: { resetToken, newPassword } }));
+  return { ok: result.ok, status: result.status, data: result.data };
 }
 
 async function changePassword(accessToken, currentPassword, newPassword) {
-  const result = await request('POST', '/api/auth/change-password', {
-    body: { currentPassword, newPassword },
-    accessToken
-  });
+  const api = new AuthApi(configFor(accessToken));
+  const result = await callApi(api.apiAuthChangePasswordPostRaw({ changePasswordRequest: { currentPassword, newPassword } }));
   return { ok: result.ok, status: result.status, data: result.data };
 }
 
+async function getPasswordPolicy() {
+  const api = new AuthApi(configFor(undefined));
+  const result = await callApi(api.apiAuthPasswordPolicyGetRaw());
+  if (!result.ok) return { ok: false, status: result.status };
+  return { ok: true, minLength: result.data.minLength };
+}
+
 module.exports = {
   login,
   refresh,
@@ -69,5 +83,6 @@ module.exports = {
   requestPasswordReset,
   verifyPasswordResetCode,
   resetPassword,
-  changePassword
+  changePassword,
+  getPasswordPolicy
 };

omsorgapp/electron/backend/employeesClient.cjs

@@ -1,28 +1,27 @@
-const { request } = require('./httpClient.cjs');
+const { EmployeesApi } = require('omsorgcore-client-ts');
+const { configFor, callApi } = require('./apiClientHelpers.cjs');
 
-// Kapselt /api/employees von omsorgCore (EmployeesController). Feldnamen sind
-// camelCase, da ASP.NET Core standardmäßig camelCase-JSON ausgibt.
+// Kapselt /api/employees von omsorgCore (EmployeesController) über den generierten
+// Client (omsorgcore-client-ts). Feldnamen sind camelCase, da ASP.NET Core
+// standardmäßig camelCase-JSON ausgibt.
 async function listEmployees(accessToken, { search, status, employmentType, page = 1, pageSize = 20 } = {}) {
-  const params = new URLSearchParams();
-  if (search) params.set('search', search);
-  if (status) params.set('status', status);
-  if (employmentType) params.set('employmentType', employmentType);
-  params.set('page', page);
-  params.set('pageSize', pageSize);
-
-  return request('GET', `/api/employees?${params.toString()}`, { accessToken });
+  const api = new EmployeesApi(configFor(accessToken));
+  return callApi(api.apiEmployeesGetRaw({ search, status, employmentType, page, pageSize }));
 }
 
 async function createEmployee(accessToken, payload) {
-  return request('POST', '/api/employees', { body: payload, accessToken });
+  const api = new EmployeesApi(configFor(accessToken));
+  return callApi(api.apiEmployeesPostRaw({ createEmployeeRequest: payload }));
 }
 
 async function getEmployee(accessToken, id) {
-  return request('GET', `/api/employees/${id}`, { accessToken });
+  const api = new EmployeesApi(configFor(accessToken));
+  return callApi(api.apiEmployeesIdGetRaw({ id }));
 }
 
 async function updateEmployee(accessToken, id, payload) {
-  return request('PUT', `/api/employees/${id}`, { body: payload, accessToken });
+  const api = new EmployeesApi(configFor(accessToken));
+  return callApi(api.apiEmployeesIdPutRaw({ id, updateEmployeeRequest: payload }));
 }
 
 module.exports = { listEmployees, createEmployee, getEmployee, updateEmployee };

omsorgapp/electron/backend/facilitiesClient.cjs

@@ -0,0 +1,27 @@
+const { FacilitiesApi } = require('omsorgcore-client-ts');
+const { configFor, callApi } = require('./apiClientHelpers.cjs');
+
+// Kapselt /api/facilities von omsorgCore (FacilitiesController) über den generierten
+// Client (omsorgcore-client-ts). Feldnamen sind camelCase, da ASP.NET Core
+// standardmäßig camelCase-JSON ausgibt.
+async function listFacilities(accessToken, { search, crmStatus, page = 1, pageSize = 20 } = {}) {
+  const api = new FacilitiesApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesGetRaw({ search, crmStatus, page, pageSize }));
+}
+
+async function createFacility(accessToken, payload) {
+  const api = new FacilitiesApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesPostRaw({ createFacilityRequest: payload }));
+}
+
+async function getFacility(accessToken, id) {
+  const api = new FacilitiesApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesIdGetRaw({ id }));
+}
+
+async function updateFacility(accessToken, id, payload) {
+  const api = new FacilitiesApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesIdPutRaw({ id, updateFacilityRequest: payload }));
+}
+
+module.exports = { listFacilities, createFacility, getFacility, updateFacility };

omsorgapp/electron/backend/facilityContactsClient.cjs

@@ -0,0 +1,22 @@
+const { FacilityContactsApi } = require('omsorgcore-client-ts');
+const { configFor, callApi } = require('./apiClientHelpers.cjs');
+
+// Kapselt /api/facilities/{facilityId}/contacts von omsorgCore (FacilityContactsController)
+// über den generierten Client (omsorgcore-client-ts). Ansprechpartner sind eine
+// 1:n-Unterressource von Facility, kein eigenständiger Endpunkt.
+async function listFacilityContacts(accessToken, facilityId) {
+  const api = new FacilityContactsApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesFacilityIdContactsGetRaw({ facilityId }));
+}
+
+async function createFacilityContact(accessToken, facilityId, payload) {
+  const api = new FacilityContactsApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesFacilityIdContactsPostRaw({ facilityId, createFacilityContactRequest: payload }));
+}
+
+async function updateFacilityContact(accessToken, facilityId, id, payload) {
+  const api = new FacilityContactsApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesFacilityIdContactsIdPutRaw({ facilityId, id, updateFacilityContactRequest: payload }));
+}
+
+module.exports = { listFacilityContacts, createFacilityContact, updateFacilityContact };

omsorgapp/electron/backend/rolesClient.cjs

@@ -0,0 +1,26 @@
+const { RolesApi } = require('omsorgcore-client-ts');
+const { configFor, callApi } = require('./apiClientHelpers.cjs');
+
+// Kapselt /api/roles von omsorgCore (RolesController) über den generierten Client
+// (omsorgcore-client-ts).
+async function listRoles(accessToken) {
+  const api = new RolesApi(configFor(accessToken));
+  return callApi(api.apiRolesGetRaw());
+}
+
+async function getRole(accessToken, roleId) {
+  const api = new RolesApi(configFor(accessToken));
+  return callApi(api.apiRolesIdGetRaw({ id: roleId }));
+}
+
+async function createRole(accessToken, payload) {
+  const api = new RolesApi(configFor(accessToken));
+  return callApi(api.apiRolesPostRaw({ createRoleRequest: payload }));
+}
+
+async function updateRolePermissions(accessToken, roleId, payload) {
+  const api = new RolesApi(configFor(accessToken));
+  return callApi(api.apiRolesIdPermissionsPutRaw({ id: roleId, updateRolePermissionsRequest: payload }));
+}
+
+module.exports = { listRoles, getRole, createRole, updateRolePermissions };

omsorgapp/electron/backend/usersClient.cjs

@@ -1,12 +1,37 @@
-const { request } = require('./httpClient.cjs');
+const { UsersApi } = require('omsorgcore-client-ts');
+const { configFor, callApi } = require('./apiClientHelpers.cjs');
 
-// Kapselt /api/users von omsorgCore (UsersController).
+// Kapselt /api/users von omsorgCore (UsersController) über den generierten Client
+// (omsorgcore-client-ts).
 async function listUsers(accessToken) {
-  return request('GET', '/api/users', { accessToken });
+  const api = new UsersApi(configFor(accessToken));
+  return callApi(api.apiUsersGetRaw());
 }
 
 async function createUser(accessToken, payload) {
-  return request('POST', '/api/users', { body: payload, accessToken });
+  const api = new UsersApi(configFor(accessToken));
+  return callApi(api.apiUsersPostRaw({ createUserRequest: payload }));
 }
 
-module.exports = { listUsers, createUser };
+async function listPermissionOverrides(accessToken, userId) {
+  const api = new UsersApi(configFor(accessToken));
+  return callApi(api.apiUsersIdPermissionOverridesGetRaw({ id: userId }));
+}
+
+async function addPermissionOverride(accessToken, userId, payload) {
+  const api = new UsersApi(configFor(accessToken));
+  return callApi(api.apiUsersIdPermissionOverridesPostRaw({ id: userId, addUserPermissionOverrideRequest: payload }));
+}
+
+async function deletePermissionOverride(accessToken, userId, overrideId) {
+  const api = new UsersApi(configFor(accessToken));
+  return callApi(api.apiUsersIdPermissionOverridesOverrideIdDeleteRaw({ id: userId, overrideId }));
+}
+
+module.exports = {
+  listUsers,
+  createUser,
+  listPermissionOverrides,
+  addPermissionOverride,
+  deletePermissionOverride
+};

omsorgapp/electron/backend/valueListsClient.cjs

@@ -0,0 +1,56 @@
+const { ValueListsApi } = require('omsorgcore-client-ts');
+const { configFor, callApi } = require('./apiClientHelpers.cjs');
+
+// Kapselt /api/value-lists von omsorgCore (ValueListsController) über den generierten
+// Client (omsorgcore-client-ts) - konfigurierbare Auswahllisten (Mitarbeiterstatus,
+// Beschäftigungsart, CRM-Status, Einrichtungstyp, Vertragstyp/-status, Auftragsstatus).
+async function listValueLists(accessToken) {
+  const api = new ValueListsApi(configFor(accessToken));
+  return callApi(api.apiValueListsGetRaw());
+}
+
+async function listItems(accessToken, key) {
+  const api = new ValueListsApi(configFor(accessToken));
+  return callApi(api.apiValueListsKeyItemsGetRaw({ key }));
+}
+
+async function createItem(accessToken, key, payload) {
+  const api = new ValueListsApi(configFor(accessToken));
+  return callApi(api.apiValueListsKeyItemsPostRaw({ key, createValueListItemRequest: payload }));
+}
+
+async function updateItem(accessToken, key, id, payload) {
+  const api = new ValueListsApi(configFor(accessToken));
+  return callApi(api.apiValueListsKeyItemsIdPutRaw({ key, id, updateValueListItemRequest: payload }));
+}
+
+async function deleteItem(accessToken, key, id) {
+  const api = new ValueListsApi(configFor(accessToken));
+  return callApi(api.apiValueListsKeyItemsIdDeleteRaw({ key, id }));
+}
+
+async function getUsages(accessToken, key, id) {
+  const api = new ValueListsApi(configFor(accessToken));
+  return callApi(api.apiValueListsKeyItemsIdUsagesGetRaw({ key, id }));
+}
+
+async function listTransitions(accessToken, key) {
+  const api = new ValueListsApi(configFor(accessToken));
+  return callApi(api.apiValueListsKeyTransitionsGetRaw({ key }));
+}
+
+async function replaceTransitions(accessToken, key, payload) {
+  const api = new ValueListsApi(configFor(accessToken));
+  return callApi(api.apiValueListsKeyTransitionsPutRaw({ key, valueListTransitionRequest: payload }));
+}
+
+module.exports = {
+  listValueLists,
+  listItems,
+  createItem,
+  updateItem,
+  deleteItem,
+  getUsages,
+  listTransitions,
+  replaceTransitions
+};