commit

src/app/api/employees/[id]/route.ts

@@ -0,0 +1,100 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { AuthError, requireOrganizationAccess } from '@/lib/auth/session';
+import { getDatabaseErrorMessage } from '@/lib/db-errors';
+import {
+  getEmployeeByIdForOrganization,
+  softDeleteEmployeeForOrganization,
+  updateEmployeeForOrganization
+} from '@/features/employees/server/employee-data';
+import type { EmployeeMutationPayload } from '@/features/employees/api/types';
+
+export async function GET(
+  _request: NextRequest,
+  context: { params: Promise<{ id: string }> }
+) {
+  try {
+    const { organization } = await requireOrganizationAccess();
+    const params = await context.params;
+    const employee = await getEmployeeByIdForOrganization({
+      id: Number(params.id),
+      organizationId: organization.id
+    });
+
+    if (!employee) {
+      return NextResponse.json({ message: 'Employee not found' }, { status: 404 });
+    }
+
+    return NextResponse.json({
+      success: true,
+      time: new Date().toISOString(),
+      message: 'Employee loaded successfully',
+      employee
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    return NextResponse.json({ message: getDatabaseErrorMessage(error) }, { status: 500 });
+  }
+}
+
+export async function PATCH(
+  request: NextRequest,
+  context: { params: Promise<{ id: string }> }
+) {
+  try {
+    const { organization } = await requireOrganizationAccess();
+    const params = await context.params;
+    const body = (await request.json()) as EmployeeMutationPayload;
+    const employee = await updateEmployeeForOrganization({
+      id: Number(params.id),
+      organizationId: organization.id,
+      payload: body
+    });
+
+    if (!employee) {
+      return NextResponse.json({ message: 'Employee not found' }, { status: 404 });
+    }
+
+    return NextResponse.json({
+      success: true,
+      time: new Date().toISOString(),
+      message: 'Employee updated successfully',
+      employee
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    return NextResponse.json({ message: getDatabaseErrorMessage(error) }, { status: 500 });
+  }
+}
+
+export async function DELETE(
+  _request: NextRequest,
+  context: { params: Promise<{ id: string }> }
+) {
+  try {
+    const { organization } = await requireOrganizationAccess();
+    const params = await context.params;
+
+    await softDeleteEmployeeForOrganization({
+      id: Number(params.id),
+      organizationId: organization.id
+    });
+
+    return NextResponse.json({
+      success: true,
+      time: new Date().toISOString(),
+      message: 'Employee deactivated successfully'
+    });
+  } catch (error) {
+    if (error instanceof AuthError) {
+      return NextResponse.json({ message: error.message }, { status: error.status });
+    }
+
+    return NextResponse.json({ message: getDatabaseErrorMessage(error) }, { status: 500 });
+  }
+}