101 lines
4.1 KiB
TypeScript
101 lines
4.1 KiB
TypeScript
export const dynamic = 'force-dynamic'
|
|
|
|
import { NextRequest, NextResponse } from 'next/server'
|
|
import { requireAdmin } from '@/lib/auth/require-admin'
|
|
import { asAdmin } from '@/lib/db/with-user'
|
|
import { trucks, incidents } from '@/lib/db/schema'
|
|
import { writeAuditLog } from '@/lib/db/audit'
|
|
import { eq, sql } from 'drizzle-orm'
|
|
|
|
export async function POST(request: NextRequest) {
|
|
const { session } = await requireAdmin()
|
|
if (!session) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
|
|
|
|
const body: { truck_no?: string; carrier?: string } = await request.json().catch(() => ({}))
|
|
const truck_no = (body.truck_no ?? '').trim()
|
|
if (!truck_no) return NextResponse.json({ error: 'truck_no required' }, { status: 422 })
|
|
|
|
try {
|
|
let truckId: string | undefined
|
|
await asAdmin(async db => {
|
|
await db.transaction(async tx => {
|
|
await tx.execute(sql`SELECT set_config('app.user_id', ${session.sub}, true)`)
|
|
const [truck] = await tx.insert(trucks).values({ truckNo: truck_no, carrier: (body.carrier ?? '').trim() || null }).returning({ id: trucks.id })
|
|
if (!truck) throw new Error('Insert failed')
|
|
truckId = truck.id
|
|
await writeAuditLog(tx, 'trucks', truck.id, 'INSERT', { truck_no, carrier: (body.carrier ?? '').trim() || null })
|
|
})
|
|
})
|
|
if (!truckId) return NextResponse.json({ error: 'Insert failed' }, { status: 400 })
|
|
return NextResponse.json({ id: truckId }, { status: 201 })
|
|
} catch (e) {
|
|
const code = (e as { code?: string }).code
|
|
return NextResponse.json(
|
|
{ error: code === '23505' ? 'Truck number already exists' : 'Insert failed' },
|
|
{ status: 400 },
|
|
)
|
|
}
|
|
}
|
|
|
|
export async function PATCH(request: NextRequest) {
|
|
const { session } = await requireAdmin()
|
|
if (!session) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
|
|
|
|
const body: { id?: string; active?: boolean } = await request.json().catch(() => ({}))
|
|
if (!body.id) return NextResponse.json({ error: 'id required' }, { status: 422 })
|
|
|
|
const [before] = await asAdmin(db =>
|
|
db.select().from(trucks).where(eq(trucks.id, body.id!)).limit(1)
|
|
)
|
|
try {
|
|
await asAdmin(async db => {
|
|
await db.transaction(async tx => {
|
|
await tx.execute(sql`SELECT set_config('app.user_id', ${session.sub}, true)`)
|
|
await tx.update(trucks).set({ active: body.active }).where(eq(trucks.id, body.id!))
|
|
await writeAuditLog(tx, 'trucks', body.id!, 'admin_update', { active: body.active }, before ?? null)
|
|
})
|
|
})
|
|
} catch {
|
|
return NextResponse.json({ error: 'Update failed' }, { status: 500 })
|
|
}
|
|
return NextResponse.json({ ok: true })
|
|
}
|
|
|
|
export async function DELETE(request: NextRequest) {
|
|
const { session } = await requireAdmin()
|
|
if (!session) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
|
|
|
|
const body: { id?: string } = await request.json().catch(() => ({}))
|
|
if (!body.id) return NextResponse.json({ error: 'id required' }, { status: 422 })
|
|
|
|
const [countRow] = await asAdmin(db =>
|
|
db.select({ cnt: sql<number>`count(*)` }).from(incidents).where(eq(incidents.truckId, body.id!))
|
|
)
|
|
const incidentCount = Number(countRow?.cnt ?? 0)
|
|
if (incidentCount > 0)
|
|
return NextResponse.json(
|
|
{ error: `Cannot delete — ${incidentCount} incident(s) reference this truck. Deactivate it instead.` },
|
|
{ status: 409 },
|
|
)
|
|
|
|
const [before] = await asAdmin(db =>
|
|
db.select().from(trucks).where(eq(trucks.id, body.id!)).limit(1)
|
|
)
|
|
try {
|
|
await asAdmin(async db => {
|
|
await db.transaction(async tx => {
|
|
await tx.execute(sql`SELECT set_config('app.user_id', ${session.sub}, true)`)
|
|
await tx.delete(trucks).where(eq(trucks.id, body.id!))
|
|
await writeAuditLog(tx, 'trucks', body.id!, 'DELETE', null, before ?? null)
|
|
})
|
|
})
|
|
} catch (e) {
|
|
const code = (e as { code?: string }).code
|
|
return NextResponse.json(
|
|
{ error: code === '23503' ? 'Cannot delete — truck still referenced. Deactivate instead.' : 'Delete failed' },
|
|
{ status: code === '23503' ? 409 : 500 },
|
|
)
|
|
}
|
|
return NextResponse.json({ ok: true })
|
|
}
|