task-p.5

src/app/api/crm/document-templates/[id]/route.ts

@@ -4,7 +4,7 @@ import { auditDelete, auditUpdate } from '@/features/foundation/audit-log/servic
 import {
   getDocumentTemplate,
   softDeleteDocumentTemplate,
-  updateDocumentTemplate
+  updateDocumentTemplate,
 } from '@/features/foundation/document-template/server/service';
 import { PERMISSIONS } from '@/lib/auth/rbac';
 import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
@@ -20,14 +20,14 @@ const documentTemplateSchema = z.object({
   templateName: z.string().min(1).optional(),
   description: z.string().optional().nullable(),
   isDefault: z.boolean().optional(),
-  isActive: z.boolean().optional()
+  isActive: z.boolean().optional(),
 });
 
 export async function GET(_request: NextRequest, { params }: Params) {
   try {
     const { id } = await params;
     const { organization } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmDocumentTemplateRead
+      permission: PERMISSIONS.crmDocumentTemplateRead,
     });
     const template = await getDocumentTemplate(id, organization.id);
 
@@ -35,16 +35,21 @@ export async function GET(_request: NextRequest, { params }: Params) {
       success: true,
       time: new Date().toISOString(),
       message: 'Document template loaded successfully',
-      template
+      template,
     });
   } catch (error) {
     if (error instanceof AuthError) {
       return NextResponse.json({ message: error.message }, { status: error.status });
     }
+
     if (error instanceof Error) {
       return NextResponse.json({ message: error.message }, { status: 400 });
     }
-    return NextResponse.json({ message: 'Unable to load document template' }, { status: 500 });
+
+    return NextResponse.json(
+      { message: 'Unable load document template' },
+      { status: 500 },
+    );
   }
 }
 
@@ -52,11 +57,16 @@ export async function PATCH(request: NextRequest, { params }: Params) {
   try {
     const { id } = await params;
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmDocumentTemplateUpdate
+      permission: PERMISSIONS.crmDocumentTemplateUpdate,
     });
     const payload = documentTemplateSchema.parse(await request.json());
     const before = await getDocumentTemplate(id, organization.id);
-    const updated = await updateDocumentTemplate(id, organization.id, session.user.id, payload);
+    const updated = await updateDocumentTemplate(
+      id,
+      organization.id,
+      session.user.id,
+      payload,
+    );
 
     await auditUpdate({
       organizationId: organization.id,
@@ -64,24 +74,30 @@ export async function PATCH(request: NextRequest, { params }: Params) {
       entityType: 'crm_document_template',
       entityId: id,
       beforeData: before,
-      afterData: updated
+      afterData: updated,
     });
 
     return NextResponse.json({
       success: true,
-      message: 'Document template updated successfully'
+      message: 'Document template updated successfully',
     });
   } catch (error) {
     if (error instanceof AuthError) {
       return NextResponse.json({ message: error.message }, { status: error.status });
     }
+
     if (error instanceof z.ZodError) {
-      return NextResponse.json({ message: error.issues[0]?.message ?? 'Invalid payload' }, { status: 400 });
+      return NextResponse.json({ message: error.flatten() }, { status: 400 });
     }
+
     if (error instanceof Error) {
       return NextResponse.json({ message: error.message }, { status: 400 });
     }
-    return NextResponse.json({ message: 'Unable to update document template' }, { status: 500 });
+
+    return NextResponse.json(
+      { message: 'Unable update document template' },
+      { status: 500 },
+    );
   }
 }
 
@@ -89,10 +105,14 @@ export async function DELETE(_request: NextRequest, { params }: Params) {
   try {
     const { id } = await params;
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmDocumentTemplateDelete
+      permission: PERMISSIONS.crmDocumentTemplateDelete,
     });
     const before = await getDocumentTemplate(id, organization.id);
-    const updated = await softDeleteDocumentTemplate(id, organization.id, session.user.id);
+    const updated = await softDeleteDocumentTemplate(
+      id,
+      organization.id,
+      session.user.id,
+    );
 
     await auditDelete({
       organizationId: organization.id,
@@ -100,20 +120,25 @@ export async function DELETE(_request: NextRequest, { params }: Params) {
       entityType: 'crm_document_template',
       entityId: id,
       beforeData: before,
-      afterData: updated
+      afterData: updated,
     });
 
     return NextResponse.json({
       success: true,
-      message: 'Document template deleted successfully'
+      message: 'Document template deleted successfully',
     });
   } catch (error) {
     if (error instanceof AuthError) {
       return NextResponse.json({ message: error.message }, { status: error.status });
     }
+
     if (error instanceof Error) {
       return NextResponse.json({ message: error.message }, { status: 400 });
     }
-    return NextResponse.json({ message: 'Unable to delete document template' }, { status: 500 });
+
+    return NextResponse.json(
+      { message: 'Unable delete document template' },
+      { status: 500 },
+    );
   }
 }

src/app/api/crm/document-templates/[id]/versions/route.ts

@@ -3,7 +3,7 @@ import { z } from 'zod';
 import { auditCreate } from '@/features/foundation/audit-log/service';
 import {
   createDocumentTemplateVersion,
-  listDocumentTemplateVersions
+  listDocumentTemplateVersions,
 } from '@/features/foundation/document-template/server/service';
 import { PERMISSIONS } from '@/lib/auth/rbac';
 import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
@@ -17,14 +17,14 @@ const versionSchema = z.object({
   filePath: z.string().optional().nullable(),
   schemaJson: z.unknown(),
   previewImageUrl: z.string().optional().nullable(),
-  isActive: z.boolean().optional()
+  isActive: z.boolean().optional(),
 });
 
 export async function GET(_request: NextRequest, { params }: Params) {
   try {
     const { id } = await params;
     const { organization } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmDocumentTemplateRead
+      permission: PERMISSIONS.crmDocumentTemplateRead,
     });
     const items = await listDocumentTemplateVersions(id, organization.id);
 
@@ -32,16 +32,21 @@ export async function GET(_request: NextRequest, { params }: Params) {
       success: true,
       time: new Date().toISOString(),
       message: 'Document template versions loaded successfully',
-      items
+      items,
     });
   } catch (error) {
     if (error instanceof AuthError) {
       return NextResponse.json({ message: error.message }, { status: error.status });
     }
+
     if (error instanceof Error) {
       return NextResponse.json({ message: error.message }, { status: 400 });
     }
-    return NextResponse.json({ message: 'Unable to load document template versions' }, { status: 500 });
+
+    return NextResponse.json(
+      { message: 'Unable load document template versions' },
+      { status: 500 },
+    );
   }
 }
 
@@ -49,33 +54,44 @@ export async function POST(request: NextRequest, { params }: Params) {
   try {
     const { id } = await params;
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmDocumentTemplateUpdate
+      permission: PERMISSIONS.crmDocumentTemplateUpdate,
     });
     const payload = versionSchema.parse(await request.json());
-    const created = await createDocumentTemplateVersion(id, organization.id, session.user.id, payload);
+    const created = await createDocumentTemplateVersion(
+      id,
+      organization.id,
+      session.user.id,
+      payload,
+    );
 
     await auditCreate({
       organizationId: organization.id,
       userId: session.user.id,
       entityType: 'crm_document_template_version',
       entityId: created.id,
-      afterData: created
+      afterData: created,
     });
 
     return NextResponse.json({
       success: true,
-      message: 'Document template version created successfully'
+      message: 'Document template version created successfully',
     });
   } catch (error) {
     if (error instanceof AuthError) {
       return NextResponse.json({ message: error.message }, { status: error.status });
     }
+
     if (error instanceof z.ZodError) {
-      return NextResponse.json({ message: error.issues[0]?.message ?? 'Invalid payload' }, { status: 400 });
+      return NextResponse.json({ message: error.flatten() }, { status: 400 });
     }
+
     if (error instanceof Error) {
       return NextResponse.json({ message: error.message }, { status: 400 });
     }
-    return NextResponse.json({ message: 'Unable to create document template version' }, { status: 500 });
+
+    return NextResponse.json(
+      { message: 'Unable create document template version' },
+      { status: 500 },
+    );
   }
 }

src/app/api/crm/document-templates/route.ts

@@ -3,7 +3,7 @@ import { z } from 'zod';
 import { auditCreate } from '@/features/foundation/audit-log/service';
 import {
   createDocumentTemplate,
-  listDocumentTemplates
+  listDocumentTemplates,
 } from '@/features/foundation/document-template/server/service';
 import { PERMISSIONS } from '@/lib/auth/rbac';
 import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
@@ -15,68 +15,87 @@ const documentTemplateSchema = z.object({
   templateName: z.string().min(1),
   description: z.string().optional().nullable(),
   isDefault: z.boolean().optional(),
-  isActive: z.boolean().optional()
+  isActive: z.boolean().optional(),
 });
 
 export async function GET(request: NextRequest) {
   try {
     const { organization } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmDocumentTemplateRead
+      permission: PERMISSIONS.crmDocumentTemplateRead,
     });
     const { searchParams } = request.nextUrl;
+    const isActiveParam = searchParams.get('isActive');
     const items = await listDocumentTemplates(organization.id, {
       documentType: searchParams.get('documentType') ?? undefined,
       fileType: searchParams.get('fileType') ?? undefined,
-      isActive: searchParams.get('isActive') ?? undefined
+      isActive:
+        isActiveParam === 'true' || isActiveParam === 'false'
+          ? isActiveParam
+          : undefined,
     });
 
     return NextResponse.json({
       success: true,
       time: new Date().toISOString(),
       message: 'Document templates loaded successfully',
-      items
+      items,
     });
   } catch (error) {
     if (error instanceof AuthError) {
       return NextResponse.json({ message: error.message }, { status: error.status });
     }
+
     if (error instanceof Error) {
       return NextResponse.json({ message: error.message }, { status: 400 });
     }
-    return NextResponse.json({ message: 'Unable to load document templates' }, { status: 500 });
+
+    return NextResponse.json(
+      { message: 'Unable load document templates' },
+      { status: 500 },
+    );
   }
 }
 
 export async function POST(request: NextRequest) {
   try {
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmDocumentTemplateCreate
+      permission: PERMISSIONS.crmDocumentTemplateCreate,
     });
     const payload = documentTemplateSchema.parse(await request.json());
-    const created = await createDocumentTemplate(organization.id, session.user.id, payload);
+    const created = await createDocumentTemplate(
+      organization.id,
+      session.user.id,
+      payload,
+    );
 
     await auditCreate({
       organizationId: organization.id,
       userId: session.user.id,
       entityType: 'crm_document_template',
       entityId: created.id,
-      afterData: created
+      afterData: created,
     });
 
     return NextResponse.json({
       success: true,
-      message: 'Document template created successfully'
+      message: 'Document template created successfully',
     });
   } catch (error) {
     if (error instanceof AuthError) {
       return NextResponse.json({ message: error.message }, { status: error.status });
     }
+
     if (error instanceof z.ZodError) {
-      return NextResponse.json({ message: error.issues[0]?.message ?? 'Invalid payload' }, { status: 400 });
+      return NextResponse.json({ message: error.flatten() }, { status: 400 });
     }
+
     if (error instanceof Error) {
       return NextResponse.json({ message: error.message }, { status: 400 });
     }
-    return NextResponse.json({ message: 'Unable to create document template' }, { status: 500 });
+
+    return NextResponse.json(
+      { message: 'Unable create document template' },
+      { status: 500 },
+    );
   }
 }

src/app/api/crm/settings/document-templates/[id]/compare/route.ts

@@ -0,0 +1,53 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { z } from 'zod';
+import { compareDocumentTemplateVersions } from '@/features/foundation/document-template/server/management-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+const compareSchema = z.object({
+  leftVersionId: z.string().min(1),
+  rightVersionId: z.string().min(1),
+});
+
+export async function POST(request: NextRequest, { params }: Params) {
+  try {
+    const { id } = await params;
+    const { organization } = await requireOrganizationAccess({
+      permission: PERMISSIONS.crmDocumentTemplateRead,
+    });
+    const payload = compareSchema.parse(await request.json());
+    const comparison = await compareDocumentTemplateVersions({
+      templateId: id,
+      leftVersionId: payload.leftVersionId,
+      rightVersionId: payload.rightVersionId,
+      organizationId: organization.id,
+    });
+
+    return NextResponse.json({
+      success: true,
+      message: 'Document template versions compared successfully',
+      comparison,
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ message: error.flatten() }, { status: 400 });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable compare document template versions' },
+      { status: 500 },
+    );
+  }
+}

src/app/api/crm/settings/document-templates/versions/[id]/activate/route.ts

@@ -0,0 +1,51 @@
+import { NextResponse } from 'next/server';
+import { auditAction } from '@/features/foundation/audit-log/service';
+import { activateDocumentTemplateVersion } from '@/features/foundation/document-template/server/management-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+export async function POST(_request: Request, { params }: Params) {
+  try {
+    const { id } = await params;
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.crmDocumentTemplateActivate,
+    });
+    const version = await activateDocumentTemplateVersion({
+      versionId: id,
+      organizationId: organization.id,
+      userId: session.user.id,
+    });
+
+    await auditAction({
+      organizationId: organization.id,
+      userId: session.user.id,
+      entityType: 'crm_document_template_version',
+      entityId: id,
+      action: 'activate',
+      afterData: version,
+    });
+
+    return NextResponse.json({
+      success: true,
+      message: 'Document template version activated successfully',
+      version,
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable activate document template version' },
+      { status: 500 },
+    );
+  }
+}

src/app/api/crm/settings/document-templates/versions/[id]/archive/route.ts

@@ -0,0 +1,51 @@
+import { NextResponse } from 'next/server';
+import { auditAction } from '@/features/foundation/audit-log/service';
+import { archiveDocumentTemplateVersion } from '@/features/foundation/document-template/server/management-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+export async function POST(_request: Request, { params }: Params) {
+  try {
+    const { id } = await params;
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.crmDocumentTemplateArchive,
+    });
+    const version = await archiveDocumentTemplateVersion({
+      versionId: id,
+      organizationId: organization.id,
+      userId: session.user.id,
+    });
+
+    await auditAction({
+      organizationId: organization.id,
+      userId: session.user.id,
+      entityType: 'crm_document_template_version',
+      entityId: id,
+      action: 'archive',
+      afterData: version,
+    });
+
+    return NextResponse.json({
+      success: true,
+      message: 'Document template version archived successfully',
+      version,
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable archive document template version' },
+      { status: 500 },
+    );
+  }
+}

src/app/api/crm/settings/document-templates/versions/[id]/management/route.ts

@@ -0,0 +1,37 @@
+import { NextResponse } from 'next/server';
+import { getManagedDocumentTemplateVersion } from '@/features/foundation/document-template/server/management-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+export async function GET(_request: Request, { params }: Params) {
+  try {
+    const { id } = await params;
+    const { organization } = await requireOrganizationAccess({
+      permission: PERMISSIONS.crmDocumentTemplateRead,
+    });
+    const version = await getManagedDocumentTemplateVersion(id, organization.id);
+
+    return NextResponse.json({
+      success: true,
+      message: 'Document template version management data loaded successfully',
+      version,
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable load document template version management data' },
+      { status: 500 },
+    );
+  }
+}

src/app/api/crm/settings/document-templates/versions/[id]/preview/route.ts

@@ -0,0 +1,40 @@
+import { NextResponse } from 'next/server';
+import { previewDocumentTemplateVersion } from '@/features/foundation/document-template/server/management-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+export async function GET(_request: Request, { params }: Params) {
+  try {
+    const { id } = await params;
+    const { organization } = await requireOrganizationAccess({
+      permission: PERMISSIONS.crmDocumentTemplateRead,
+    });
+    const preview = await previewDocumentTemplateVersion({
+      versionId: id,
+      organizationId: organization.id,
+    });
+
+    return NextResponse.json({
+      success: true,
+      message: 'Document template preview generated successfully',
+      preview,
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable generate document template preview' },
+      { status: 500 },
+    );
+  }
+}

src/app/api/crm/settings/document-templates/versions/[id]/publish/route.ts

@@ -0,0 +1,51 @@
+import { NextResponse } from 'next/server';
+import { auditAction } from '@/features/foundation/audit-log/service';
+import { publishDocumentTemplateVersion } from '@/features/foundation/document-template/server/management-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+export async function POST(_request: Request, { params }: Params) {
+  try {
+    const { id } = await params;
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.crmDocumentTemplatePublish,
+    });
+    const version = await publishDocumentTemplateVersion({
+      versionId: id,
+      organizationId: organization.id,
+      userId: session.user.id,
+    });
+
+    await auditAction({
+      organizationId: organization.id,
+      userId: session.user.id,
+      entityType: 'crm_document_template_version',
+      entityId: id,
+      action: 'publish',
+      afterData: version,
+    });
+
+    return NextResponse.json({
+      success: true,
+      message: 'Document template version published successfully',
+      version,
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable publish document template version' },
+      { status: 500 },
+    );
+  }
+}

src/app/api/crm/settings/document-templates/versions/[id]/rollback/route.ts

@@ -0,0 +1,51 @@
+import { NextResponse } from 'next/server';
+import { auditAction } from '@/features/foundation/audit-log/service';
+import { rollbackDocumentTemplateVersion } from '@/features/foundation/document-template/server/management-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+export async function POST(_request: Request, { params }: Params) {
+  try {
+    const { id } = await params;
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.crmDocumentTemplateRollback,
+    });
+    const version = await rollbackDocumentTemplateVersion({
+      versionId: id,
+      organizationId: organization.id,
+      userId: session.user.id,
+    });
+
+    await auditAction({
+      organizationId: organization.id,
+      userId: session.user.id,
+      entityType: 'crm_document_template_version',
+      entityId: id,
+      action: 'rollback',
+      afterData: version,
+    });
+
+    return NextResponse.json({
+      success: true,
+      message: 'Document template version rolled back successfully',
+      version,
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable rollback document template version' },
+      { status: 500 },
+    );
+  }
+}

src/app/api/crm/settings/document-templates/versions/[id]/route.ts

@@ -3,7 +3,7 @@ import { z } from 'zod';
 import { auditUpdate } from '@/features/foundation/audit-log/service';
 import {
   setDocumentTemplateVersionActive,
-  updateDocumentTemplateVersion
+  updateDocumentTemplateVersion,
 } from '@/features/foundation/document-template/server/service';
 import { PERMISSIONS } from '@/lib/auth/rbac';
 import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
@@ -17,19 +17,27 @@ const versionSchema = z.object({
   filePath: z.string().optional().nullable(),
   schemaJson: z.unknown().optional(),
   previewImageUrl: z.string().optional().nullable(),
-  isActive: z.boolean().optional()
+  isActive: z.boolean().optional(),
+  runtimeVersion: z.string().optional().nullable(),
+  templateVariant: z.string().optional().nullable(),
+  brand: z.string().optional().nullable(),
+  cloneFromVersionId: z.string().optional().nullable(),
 });
 
 export async function PATCH(request: NextRequest, { params }: Params) {
   try {
     const { id } = await params;
     const { organization, session } = await requireOrganizationAccess({
-      permission: PERMISSIONS.crmDocumentTemplateUpdate
+      permission: PERMISSIONS.crmDocumentTemplateUpdate,
     });
     const payload = versionSchema.parse(await request.json());
 
     if (Object.keys(payload).length === 1 && typeof payload.isActive === 'boolean') {
-      const result = await setDocumentTemplateVersionActive(id, organization.id, payload.isActive);
+      const result = await setDocumentTemplateVersionActive(
+        id,
+        organization.id,
+        payload.isActive,
+      );
 
       await auditUpdate({
         organizationId: organization.id,
@@ -37,12 +45,12 @@ export async function PATCH(request: NextRequest, { params }: Params) {
         entityType: 'crm_document_template_version',
         entityId: id,
         beforeData: result.before,
-        afterData: result.after
+        afterData: result.after,
       });
 
       return NextResponse.json({
         success: true,
-        message: 'Document template version status updated successfully'
+        message: 'Document template version status updated successfully',
       });
     }
 
@@ -53,29 +61,29 @@ export async function PATCH(request: NextRequest, { params }: Params) {
       userId: session.user.id,
       entityType: 'crm_document_template_version',
       entityId: id,
-      afterData: updated
+      afterData: updated,
     });
 
     return NextResponse.json({
       success: true,
-      message: 'Document template version updated successfully'
+      message: 'Document template version updated successfully',
     });
   } catch (error) {
     if (error instanceof AuthError) {
       return NextResponse.json({ message: error.message }, { status: error.status });
     }
+
     if (error instanceof z.ZodError) {
-      return NextResponse.json(
-        { message: error.issues[0]?.message ?? 'Invalid payload' },
-        { status: 400 }
-      );
+      return NextResponse.json({ message: error.flatten() }, { status: 400 });
     }
+
     if (error instanceof Error) {
       return NextResponse.json({ message: error.message }, { status: 400 });
     }
+
     return NextResponse.json(
-      { message: 'Unable to update document template version' },
-      { status: 500 }
+      { message: 'Unable update document template version' },
+      { status: 500 },
     );
   }
 }

src/app/api/crm/settings/document-templates/versions/[id]/validate/route.ts

@@ -0,0 +1,50 @@
+import { NextResponse } from 'next/server';
+import { auditAction } from '@/features/foundation/audit-log/service';
+import { validateAndPersistDocumentTemplateVersion } from '@/features/foundation/document-template/server/management-service';
+import { PERMISSIONS } from '@/lib/auth/rbac';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+
+type Params = {
+  params: Promise<{ id: string }>;
+};
+
+export async function POST(_request: Request, { params }: Params) {
+  try {
+    const { id } = await params;
+    const { organization, session } = await requireOrganizationAccess({
+      permission: PERMISSIONS.crmDocumentTemplateUpdate,
+    });
+    const validation = await validateAndPersistDocumentTemplateVersion({
+      versionId: id,
+      organizationId: organization.id,
+    });
+
+    await auditAction({
+      organizationId: organization.id,
+      userId: session.user.id,
+      entityType: 'crm_document_template_version',
+      entityId: id,
+      action: 'validate',
+      afterData: validation,
+    });
+
+    return NextResponse.json({
+      success: true,
+      message: 'Document template version validated successfully',
+      validation,
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    if (error instanceof Error) {
+      return NextResponse.json({ message: error.message }, { status: 400 });
+    }
+
+    return NextResponse.json(
+      { message: 'Unable validate document template version' },
+      { status: 500 },
+    );
+  }
+}