Files
alla-allaos-fullstack/src/app/api/crm/customers/[id]/contacts/route.ts
phaichayon 8148850fda tsk-C
compleate
2026-06-15 13:20:39 +07:00

87 lines
2.6 KiB
TypeScript

import { NextRequest, NextResponse } from 'next/server';
import { z } from 'zod';
import { auditCreate } from '@/features/foundation/audit-log/service';
import {
createCustomerContact,
listCustomerContacts
} from '@/features/crm/customers/server/service';
import { customerContactSchema } from '@/features/crm/customers/schemas/customer.schema';
import { PERMISSIONS } from '@/lib/auth/rbac';
import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
type Params = {
params: Promise<{ id: string }>;
};
export async function GET(_request: NextRequest, { params }: Params) {
try {
const { id } = await params;
const { organization } = await requireOrganizationAccess({
permission: PERMISSIONS.crmContactRead
});
const items = await listCustomerContacts(id, organization.id);
return NextResponse.json({
success: true,
time: new Date().toISOString(),
message: 'Customer contacts loaded successfully',
items
});
} catch (error) {
if (error instanceof AuthError) {
return NextResponse.json({ message: error.message }, { status: error.status });
}
if (error instanceof Error) {
return NextResponse.json({ message: error.message }, { status: 400 });
}
return NextResponse.json({ message: 'Unable to load contacts' }, { status: 500 });
}
}
export async function POST(request: NextRequest, { params }: Params) {
try {
const { id } = await params;
const { organization, session } = await requireOrganizationAccess({
permission: PERMISSIONS.crmContactCreate
});
const payload = customerContactSchema.parse(await request.json());
const created = await createCustomerContact(id, organization.id, session.user.id, payload);
await auditCreate({
organizationId: organization.id,
userId: session.user.id,
entityType: 'crm_customer_contact',
entityId: created.id,
afterData: created
});
return NextResponse.json(
{
success: true,
message: 'Contact created successfully',
contact: created
},
{ status: 201 }
);
} catch (error) {
if (error instanceof AuthError) {
return NextResponse.json({ message: error.message }, { status: error.status });
}
if (error instanceof z.ZodError) {
return NextResponse.json(
{ message: error.issues[0]?.message ?? 'Invalid payload' },
{ status: 400 }
);
}
if (error instanceof Error) {
return NextResponse.json({ message: error.message }, { status: 400 });
}
return NextResponse.json({ message: 'Unable to create contact' }, { status: 500 });
}
}