update: Add Global Search on Header, Add Global Audit log for all actions.

backend/firmware/router.py

@@ -3,11 +3,14 @@ from fastapi.responses import FileResponse, PlainTextResponse
 from pydantic import BaseModel
 from typing import Optional
 import logging
+from sqlalchemy.ext.asyncio import AsyncSession
 
 from auth.models import TokenPayload
 from auth.dependencies import require_permission
 from firmware.models import FirmwareVersion, FirmwareListResponse, FirmwareMetadataResponse, UpdateType
 from firmware import service
+from database.postgres import get_pg_session
+from shared.audit import log_action
 
 logger = logging.getLogger(__name__)
 
@@ -27,9 +30,10 @@ async def upload_firmware(
     bespoke_uid: Optional[str] = Form(None),
     file: UploadFile = File(...),
     _user: TokenPayload = Depends(require_permission("manufacturing", "add")),
+    db: AsyncSession = Depends(get_pg_session),
 ):
     file_bytes = await file.read()
-    return service.upload_firmware(
+    fw = service.upload_firmware(
         hw_type=hw_type,
         channel=channel,
         version=version,
@@ -40,6 +44,9 @@ async def upload_firmware(
         release_note=release_note,
         bespoke_uid=bespoke_uid,
     )
+    await log_action(db, _user.sub, _user.name or _user.email, "CREATE", "firmware",
+                     fw.id, f"{hw_type} v{version} ({channel})")
+    return fw
 
 
 @router.get("", response_model=FirmwareListResponse)
@@ -108,9 +115,10 @@ async def edit_firmware(
     bespoke_uid: Optional[str] = Form(None),
     file: Optional[UploadFile] = File(None),
     _user: TokenPayload = Depends(require_permission("manufacturing", "add")),
+    db: AsyncSession = Depends(get_pg_session),
 ):
     file_bytes = await file.read() if file and file.filename else None
-    return service.edit_firmware(
+    fw = service.edit_firmware(
         doc_id=firmware_id,
         channel=channel,
         version=version,
@@ -121,14 +129,22 @@ async def edit_firmware(
         bespoke_uid=bespoke_uid,
         file_bytes=file_bytes,
     )
+    await log_action(db, _user.sub, _user.name or _user.email, "UPDATE", "firmware",
+                     firmware_id, f"{fw.hw_type} v{fw.version} ({fw.channel})" if fw else firmware_id)
+    return fw
 
 
 @router.delete("/{firmware_id}", status_code=204)
-def delete_firmware(
+async def delete_firmware(
     firmware_id: str,
     _user: TokenPayload = Depends(require_permission("manufacturing", "delete")),
+    db: AsyncSession = Depends(get_pg_session),
 ):
+    fw = service.get_firmware(firmware_id) if hasattr(service, "get_firmware") else None
     service.delete_firmware(firmware_id)
+    label = f"{fw.hw_type} v{fw.version} ({fw.channel})" if fw else firmware_id
+    await log_action(db, _user.sub, _user.name or _user.email, "DELETE", "firmware",
+                     firmware_id, label)
 
 
 # ─────────────────────────────────────────────────────────────────────────────