FM / evidence

/home/techb158/cosmic-risk.abdallabala.com/src/app/api/mitigations/[mitigationId]/evidence/

/home/techb158/cosmic-risk.abdallabala.com/src/app/api/mitigations/[mitigationId]/evidence

Name	Size	Mode	Actions
route.js	1212	0644	edit dl rm

Edit: /home/techb158/cosmic-risk.abdallabala.com/src/app/api/mitigations/[mitigationId]/evidence/route.js (1212B)

const { prisma } = require("../../../../../lib/prisma");
const { getActorFromRequest } = require("../../../../../lib/request-context");
const { requireProjectAccess } = require("../../../../../lib/tenant-guard");
const { addEvidenceToMitigation } = require("../../../../../services/risk-service");
const { jsonResponse, errorResponse, parseJson } = require("../../../../../lib/http");

export async function POST(request, { params }) {
  try {
    const { mitigationId } = await params;
    const mitigation = await prisma.mitigation.findUnique({
      where: { id: mitigationId },
      include: { risk: { select: { projectId: true } } }
    });
    if (!mitigation) {
      const error = new Error(`Mitigation not found: ${mitigationId}`);
      error.status = 404;
      throw error;
    }
    const actor = await getActorFromRequest(request);
    const projectScope = await requireProjectAccess(actor, mitigation.risk.projectId, "mitigation:write");
    const payload = await parseJson(request);
    const evidence = await addEvidenceToMitigation({ projectScope, mitigationId, actor, payload, request });
    return jsonResponse({ evidence }, 201);
  } catch (error) {
    return errorResponse(error);
  }
}

cmd: