ims/app/api/admin/trucks/route.ts

export const dynamic = 'force-dynamic'

import { NextRequest, NextResponse } from 'next/server'
import { requireAdmin } from '@/lib/auth/require-admin'

export async function POST(request: NextRequest) {
  const { supabase, user } = await requireAdmin()
  if (!user) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })

  const body: { truck_no?: string; carrier?: string } = await request.json().catch(() => ({}))
  const truck_no = (body.truck_no ?? '').trim()
  if (!truck_no) return NextResponse.json({ error: 'truck_no required' }, { status: 422 })

  const { data: truck, error } = await supabase
    .from('trucks')
    .insert({ truck_no, carrier: (body.carrier ?? '').trim() || null })
    .select('id')
    .single()

  if (error || !truck)
    return NextResponse.json(
      { error: error?.code === '23505' ? 'Truck number already exists' : 'Insert failed' },
      { status: 400 },
    )

  await supabase.rpc('write_audit_log', {
    p_table_name: 'trucks',
    p_record_id: truck.id,
    p_action: 'INSERT',
    p_new_value: { truck_no, carrier: (body.carrier ?? '').trim() || null },
  })

  return NextResponse.json({ id: truck.id }, { status: 201 })
}