Current state

2026-06-26 14:31:38 +02:00
commit 7a76841309
982 changed files with 451988 additions and 0 deletions
@@ -0,0 +1,86 @@
+import { NextRequest, NextResponse } from "next/server"
+import { getSessionUser } from "@/lib/auth"
+import { query } from "@/lib/db"
+import { avatarSvgUrl } from "@/lib/avatar"
+
+async function checkLeadAccess(leadId: string, userId: string): Promise<boolean> {
+  const result = await query(
+    `SELECT 1 FROM leads WHERE id = $1 AND deleted_at IS NULL
+     AND (assigned_to = $2 OR EXISTS (
+       SELECT 1 FROM user_roles ur JOIN roles r ON r.id = ur.role_id
+       WHERE ur.user_id = $2 AND r.name IN ('ADMIN', 'SUPER_ADMIN')
+     ))`,
+    [leadId, userId]
+  )
+  return result.rows.length > 0
+}
+
+export async function POST(request: NextRequest, { params }: { params: Promise<{ id: string }> }) {
+  try {
+    const user = await getSessionUser()
+    if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
+
+    const { id } = await params
+    if (!await checkLeadAccess(id, user.id)) {
+      return NextResponse.json({ error: "Lead not found" }, { status: 404 })
+    }
+
+    const { content } = await request.json()
+    if (!content?.trim()) {
+      return NextResponse.json({ error: "Content is required" }, { status: 400 })
+    }
+
+    await query(
+      `INSERT INTO customer_notes (customer_id, author_id, content)
+       VALUES ($1, $2, $3)`,
+      [id, user.id, content.trim()]
+    )
+
+    return NextResponse.json({ success: true })
+  } catch (error) {
+    console.error("Create note error:", error)
+    return NextResponse.json({ error: "Failed to create note" }, { status: 500 })
+  }
+}
+
+export async function GET(request: NextRequest, { params }: { params: Promise<{ id: string }> }) {
+  try {
+    const user = await getSessionUser()
+    if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
+
+    const { id } = await params
+    if (!await checkLeadAccess(id, user.id)) {
+      return NextResponse.json({ error: "Lead not found" }, { status: 404 })
+    }
+    const { searchParams } = new URL(request.url)
+    const limit = parseInt(searchParams.get("limit") || "50", 10)
+    const offset = parseInt(searchParams.get("offset") || "0", 10)
+
+    const result = await query(
+      `SELECT cn.id, cn.created_at, cn.updated_at, cn.content,
+              u.id AS user_id, u.first_name, u.last_name, u.avatar_url
+       FROM customer_notes cn
+       JOIN users u ON u.id = cn.author_id
+       WHERE cn.customer_id = $1 AND cn.deleted_at IS NULL
+       ORDER BY cn.created_at DESC
+       LIMIT $2 OFFSET $3`,
+      [id, limit, offset]
+    )
+
+    const notes = result.rows.map((r: any) => ({
+      id: r.id,
+      leadId: id,
+      userId: r.user_id,
+      authorName: `${r.first_name} ${r.last_name}`,
+      authorAvatar: avatarSvgUrl(`${r.first_name} ${r.last_name}`),
+      note: r.content,
+      createdAt: r.created_at,
+      updatedAt: r.updated_at,
+    }))
+
+    return NextResponse.json(notes)
+  } catch (error) {
+    console.error("Lead notes API error:", error)
+    return NextResponse.json({ error: "Failed to load notes" }, { status: 500 })
+  }
+}
@@ -0,0 +1,158 @@
+import { NextRequest, NextResponse } from "next/server"
+import { getSessionUser } from "@/lib/auth"
+import { query } from "@/lib/db"
+import { avatarSvgUrl } from "@/lib/avatar"
+
+function stageToStatus(name: string): string {
+  switch (name) {
+    case "New": return "open"
+    case "Contacted": return "contacted"
+    case "Qualified":
+    case "Interested":
+    case "Demo Scheduled":
+    case "Negotiation": return "pending"
+    case "Closed Won": return "closed"
+    case "Closed Lost": return "ignored"
+    default: return "open"
+  }
+}
+
+export async function GET(request: NextRequest, { params }: { params: Promise<{ id: string }> }) {
+  try {
+    const user = await getSessionUser()
+    if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
+
+    const { id } = await params
+    const isAdmin = user.role === "admin" || user.role === "super_admin"
+
+    const result = await query(
+      `SELECT l.id, l.company_name, l.contact_name, l.email, l.phone, l.score,
+              l.assigned_to, l.created_at, l.updated_at, l.notes, l.source_id,
+              ls.name AS stage_name,
+              u.id AS user_id, u.first_name, u.last_name, u.email AS user_email, u.avatar_url
+       FROM leads l
+       JOIN lead_stages ls ON ls.id = l.stage_id
+       LEFT JOIN users u ON u.id = l.assigned_to
+       WHERE l.id = $1 AND l.deleted_at IS NULL
+         AND ($2 = true OR l.assigned_to = $3)`,
+      [id, isAdmin, user.id]
+    )
+
+    if (result.rows.length === 0) {
+      return NextResponse.json({ error: "Lead not found" }, { status: 404 })
+    }
+
+    const r = result.rows[0]
+    const lead = {
+      id: r.id,
+      companyName: r.company_name || "",
+      contactName: r.contact_name,
+      email: r.email || "",
+      phone: r.phone || "",
+      source: "",
+      description: r.notes || "",
+      status: stageToStatus(r.stage_name),
+      assignedUserId: r.assigned_to,
+      assignedUser: r.assigned_to ? {
+        id: r.user_id,
+        name: `${r.first_name} ${r.last_name}`,
+        email: r.user_email,
+        avatar: avatarSvgUrl(`${r.first_name} ${r.last_name}`),
+      } : null,
+      createdAt: r.created_at,
+      updatedAt: r.updated_at,
+    }
+
+    return NextResponse.json(lead)
+  } catch (error) {
+    console.error("Lead detail API error:", error)
+    return NextResponse.json({ error: "Failed to load lead" }, { status: 500 })
+  }
+}
+
+function statusToStageName(status: string): string {
+  switch (status) {
+    case "open": return "New"
+    case "contacted": return "Contacted"
+    case "pending": return "Qualified"
+    case "closed": return "Closed Won"
+    case "ignored": return "Closed Lost"
+    default: return "New"
+  }
+}
+
+export async function PATCH(request: NextRequest, { params }: { params: Promise<{ id: string }> }) {
+  try {
+    const user = await getSessionUser()
+    if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
+
+    const { id } = await params
+    const isAdmin = user.role === "admin" || user.role === "super_admin"
+
+    // Verify access
+    const accessCheck = await query(
+      `SELECT id FROM leads WHERE id = $1 AND deleted_at IS NULL
+       AND ($2 = true OR assigned_to = $3)`,
+      [id, isAdmin, user.id]
+    )
+    if (accessCheck.rows.length === 0) {
+      return NextResponse.json({ error: "Lead not found" }, { status: 404 })
+    }
+
+    const body = await request.json()
+    const fields: string[] = []
+    const values: any[] = []
+    let idx = 1
+
+    if (body.companyName !== undefined) { fields.push(`company_name = $${idx++}`); values.push(body.companyName) }
+    if (body.contactName !== undefined) { fields.push(`contact_name = $${idx++}`); values.push(body.contactName) }
+    if (body.email !== undefined) { fields.push(`email = $${idx++}`); values.push(body.email) }
+    if (body.phone !== undefined) { fields.push(`phone = $${idx++}`); values.push(body.phone) }
+    if (body.description !== undefined) { fields.push(`notes = $${idx++}`); values.push(body.description) }
+    if (body.source !== undefined) { fields.push(`source_id = $${idx++}`); values.push(body.source) }
+    if (body.assignedUserId !== undefined) {
+      const isAdmin = user.role === "admin" || user.role === "super_admin"
+      if (!isAdmin) {
+        // non-admin cannot reassign
+        return NextResponse.json({ error: "Only admins can reassign leads" }, { status: 403 })
+      }
+      fields.push(`assigned_to = $${idx++}`)
+      values.push(body.assignedUserId === "none" ? null : body.assignedUserId)
+    }
+    if (body.status !== undefined) {
+      const stageName = statusToStageName(body.status)
+      const stageResult = await query("SELECT id FROM lead_stages WHERE name = $1", [stageName])
+      if (stageResult.rows.length > 0) {
+        fields.push(`stage_id = $${idx++}`)
+        values.push(stageResult.rows[0].id)
+      }
+    }
+    if (body.score !== undefined) {
+      const score = Number(body.score)
+      if (!isFinite(score) || score < 0 || score > 100) {
+        return NextResponse.json({ error: "Score must be a number between 0 and 100" }, { status: 400 })
+      }
+      fields.push(`score = $${idx++}`)
+      values.push(score)
+    }
+
+    if (fields.length === 0) {
+      return NextResponse.json({ error: "No fields to update" }, { status: 400 })
+    }
+
+    fields.push(`updated_at = NOW()`)
+    values.push(id)
+
+    const sql = `UPDATE leads SET ${fields.join(", ")} WHERE id = $${idx} AND deleted_at IS NULL RETURNING id`
+    const result = await query(sql, values)
+
+    if (result.rows.length === 0) {
+      return NextResponse.json({ error: "Lead not found" }, { status: 404 })
+    }
+
+    return NextResponse.json({ success: true, id: result.rows[0].id })
+  } catch (error) {
+    console.error("Lead PATCH error:", error)
+    return NextResponse.json({ error: "Failed to update lead" }, { status: 500 })
+  }
+}