108 lines
3.2 KiB
TypeScript
108 lines
3.2 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { z } from 'zod';
|
|
import { auditCreate } from '@/features/foundation/audit-log/service';
|
|
import {
|
|
createEnquiryFollowup,
|
|
listEnquiryFollowups
|
|
} from '@/features/crm/enquiries/server/service';
|
|
import { enquiryFollowupSchema } from '@/features/crm/enquiries/schemas/enquiry.schema';
|
|
import { PERMISSIONS } from '@/lib/auth/rbac';
|
|
import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
|
|
|
|
type Params = {
|
|
params: Promise<{ id: string }>;
|
|
};
|
|
|
|
const followupRequestSchema = enquiryFollowupSchema.extend({
|
|
contactId: z.string().nullable().optional(),
|
|
nextFollowupDate: z.string().nullable().optional()
|
|
});
|
|
|
|
export async function GET(_request: NextRequest, { params }: Params) {
|
|
try {
|
|
const { id } = await params;
|
|
const { organization, session, membership } = await requireOrganizationAccess({
|
|
permission: PERMISSIONS.crmEnquiryFollowupRead
|
|
});
|
|
const items = await listEnquiryFollowups(id, organization.id, {
|
|
organizationId: organization.id,
|
|
userId: session.user.id,
|
|
membershipRole: membership.role,
|
|
businessRole: membership.businessRole
|
|
});
|
|
|
|
return NextResponse.json({
|
|
success: true,
|
|
time: new Date().toISOString(),
|
|
message: 'Enquiry follow-ups loaded successfully',
|
|
items
|
|
});
|
|
} catch (error) {
|
|
if (error instanceof AuthError) {
|
|
return NextResponse.json({ message: error.message }, { status: error.status });
|
|
}
|
|
|
|
if (error instanceof Error) {
|
|
return NextResponse.json({ message: error.message }, { status: 400 });
|
|
}
|
|
|
|
return NextResponse.json({ message: 'Unable to load enquiry follow-ups' }, { status: 500 });
|
|
}
|
|
}
|
|
|
|
export async function POST(request: NextRequest, { params }: Params) {
|
|
try {
|
|
const { id } = await params;
|
|
const { organization, session, membership } = await requireOrganizationAccess({
|
|
permission: PERMISSIONS.crmEnquiryFollowupCreate
|
|
});
|
|
const payload = followupRequestSchema.parse(await request.json());
|
|
const created = await createEnquiryFollowup(
|
|
id,
|
|
organization.id,
|
|
session.user.id,
|
|
payload,
|
|
{
|
|
organizationId: organization.id,
|
|
userId: session.user.id,
|
|
membershipRole: membership.role,
|
|
businessRole: membership.businessRole
|
|
}
|
|
);
|
|
|
|
await auditCreate({
|
|
organizationId: organization.id,
|
|
userId: session.user.id,
|
|
entityType: 'crm_enquiry_followup',
|
|
entityId: created.id,
|
|
afterData: created
|
|
});
|
|
|
|
return NextResponse.json(
|
|
{
|
|
success: true,
|
|
message: 'Enquiry follow-up created successfully',
|
|
followup: created
|
|
},
|
|
{ status: 201 }
|
|
);
|
|
} catch (error) {
|
|
if (error instanceof AuthError) {
|
|
return NextResponse.json({ message: error.message }, { status: error.status });
|
|
}
|
|
|
|
if (error instanceof z.ZodError) {
|
|
return NextResponse.json(
|
|
{ message: error.issues[0]?.message ?? 'Invalid payload' },
|
|
{ status: 400 }
|
|
);
|
|
}
|
|
|
|
if (error instanceof Error) {
|
|
return NextResponse.json({ message: error.message }, { status: 400 });
|
|
}
|
|
|
|
return NextResponse.json({ message: 'Unable to create enquiry follow-up' }, { status: 500 });
|
|
}
|
|
}
|