task-f.4

src/app/api/notifications/[id]/archive/route.ts

@@ -0,0 +1,36 @@
+import { NextResponse } from 'next/server';
+import { archiveNotification } from '@/features/foundation/notifications/server/inbox-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+export async function POST(
+  _request: Request,
+  context: { params: Promise<{ id: string }> }
+) {
+  try {
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.notificationsUpdate
+    });
+    const { id } = await context.params;
+    const notification = await archiveNotification(organization.id, session.user.id, id);
+
+    if (!notification) {
+      return NextResponse.json({ message: 'Notification not found' }, { status: 404 });
+    }
+
+    return NextResponse.json({
+      success: true,
+      message: 'Notification archived'
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json({ message: 'Unable to archive notification' }, { status: 500 });
+  }
+}

src/app/api/notifications/[id]/read/route.ts

@@ -0,0 +1,36 @@
+import { NextResponse } from 'next/server';
+import { markNotificationAsRead } from '@/features/foundation/notifications/server/inbox-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+export async function POST(
+  _request: Request,
+  context: { params: Promise<{ id: string }> }
+) {
+  try {
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.notificationsUpdate
+    });
+    const { id } = await context.params;
+    const notification = await markNotificationAsRead(organization.id, session.user.id, id);
+
+    if (!notification) {
+      return NextResponse.json({ message: 'Notification not found' }, { status: 404 });
+    }
+
+    return NextResponse.json({
+      success: true,
+      message: 'Notification marked as read'
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json({ message: 'Unable to update notification' }, { status: 500 });
+  }
+}

src/app/api/notifications/read-all/route.ts

@@ -0,0 +1,28 @@
+import { NextResponse } from 'next/server';
+import { markAllNotificationsAsRead } from '@/features/foundation/notifications/server/inbox-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+export async function POST() {
+  try {
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.notificationsUpdate
+    });
+    const affectedCount = await markAllNotificationsAsRead(organization.id, session.user.id);
+
+    return NextResponse.json({
+      success: true,
+      message: affectedCount > 0 ? 'Notifications marked as read' : 'No unread notifications'
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json({ message: 'Unable to update notifications' }, { status: 500 });
+  }
+}

src/app/api/notifications/route.ts

@@ -0,0 +1,39 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { listNotifications } from '@/features/foundation/notifications/server/inbox-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+export async function GET(request: NextRequest) {
+  try {
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.notificationsRead
+    });
+    const { searchParams } = request.nextUrl;
+    const page = Number(searchParams.get('page') ?? 1);
+    const limit = Number(searchParams.get('limit') ?? 20);
+    const status = (searchParams.get('status') ?? 'all') as 'all' | 'unread' | 'read' | 'archived';
+
+    const result = await listNotifications(organization.id, session.user.id, {
+      page,
+      limit,
+      status
+    });
+
+    return NextResponse.json({
+      success: true,
+      time: new Date().toISOString(),
+      message: 'Notifications loaded successfully',
+      ...result
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json({ message: 'Unable to load notifications' }, { status: 500 });
+  }
+}

src/app/api/notifications/unread-count/route.ts

@@ -0,0 +1,33 @@
+import { NextResponse } from 'next/server';
+import { getUnreadNotificationCount } from '@/features/foundation/notifications/server/inbox-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+export async function GET() {
+  try {
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.notificationsRead
+    });
+    const unreadCount = await getUnreadNotificationCount(organization.id, session.user.id);
+
+    return NextResponse.json({
+      success: true,
+      time: new Date().toISOString(),
+      message: 'Unread notification count loaded successfully',
+      unreadCount
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable to load unread notification count' },
+      { status: 500 }
+    );
+  }
+}