653fff6ce2
Company table gains address and logo_file_id columns. New store settings API: GET/PATCH /store for company info, full CRUD for /locations. Settings page shows store name, phone, email, address, timezone with inline edit. Location cards with add/edit/delete. Settings link in admin sidebar. Fixes leftover company_id on location table and seed files.
77 lines
3.9 KiB
TypeScript
77 lines
3.9 KiB
TypeScript
import type { FastifyPluginAsync } from 'fastify'
|
|
import { eq } from 'drizzle-orm'
|
|
import { companies, locations } from '../../db/schema/stores.js'
|
|
import { ValidationError } from '../../lib/errors.js'
|
|
|
|
export const storeRoutes: FastifyPluginAsync = async (app) => {
|
|
// --- Company / Store Settings ---
|
|
|
|
app.get('/store', { preHandler: [app.authenticate, app.requirePermission('settings.view')] }, async (request, reply) => {
|
|
const [store] = await app.db.select().from(companies).limit(1)
|
|
if (!store) return reply.status(404).send({ error: { message: 'No store configured', statusCode: 404 } })
|
|
return reply.send(store)
|
|
})
|
|
|
|
app.patch('/store', { preHandler: [app.authenticate, app.requirePermission('settings.edit')] }, async (request, reply) => {
|
|
const input = request.body as Record<string, unknown>
|
|
const [store] = await app.db.select({ id: companies.id }).from(companies).limit(1)
|
|
if (!store) return reply.status(404).send({ error: { message: 'No store configured', statusCode: 404 } })
|
|
|
|
const updates: Record<string, unknown> = { updatedAt: new Date() }
|
|
if (input.name !== undefined) updates.name = input.name
|
|
if (input.phone !== undefined) updates.phone = input.phone
|
|
if (input.email !== undefined) updates.email = input.email
|
|
if (input.address !== undefined) updates.address = input.address
|
|
if (input.timezone !== undefined) updates.timezone = input.timezone
|
|
if (input.logoFileId !== undefined) updates.logoFileId = input.logoFileId
|
|
if (input.notes !== undefined) updates.notes = input.notes
|
|
|
|
const [updated] = await app.db.update(companies).set(updates).where(eq(companies.id, store.id)).returning()
|
|
return reply.send(updated)
|
|
})
|
|
|
|
// --- Locations (Stores) ---
|
|
|
|
app.get('/locations', { preHandler: [app.authenticate, app.requirePermission('settings.view')] }, async (request, reply) => {
|
|
const data = await app.db.select().from(locations).where(eq(locations.isActive, true)).orderBy(locations.name)
|
|
return reply.send({ data })
|
|
})
|
|
|
|
app.post('/locations', { preHandler: [app.authenticate, app.requirePermission('settings.edit')] }, async (request, reply) => {
|
|
const input = request.body as { name?: string; address?: Record<string, string>; phone?: string; email?: string; timezone?: string }
|
|
if (!input.name?.trim()) throw new ValidationError('Location name is required')
|
|
|
|
const [location] = await app.db.insert(locations).values({
|
|
name: input.name.trim(),
|
|
address: input.address,
|
|
phone: input.phone,
|
|
email: input.email,
|
|
timezone: input.timezone,
|
|
}).returning()
|
|
return reply.status(201).send(location)
|
|
})
|
|
|
|
app.patch('/locations/:id', { preHandler: [app.authenticate, app.requirePermission('settings.edit')] }, async (request, reply) => {
|
|
const { id } = request.params as { id: string }
|
|
const input = request.body as Record<string, unknown>
|
|
|
|
const updates: Record<string, unknown> = { updatedAt: new Date() }
|
|
if (input.name !== undefined) updates.name = input.name
|
|
if (input.phone !== undefined) updates.phone = input.phone
|
|
if (input.email !== undefined) updates.email = input.email
|
|
if (input.address !== undefined) updates.address = input.address
|
|
if (input.timezone !== undefined) updates.timezone = input.timezone
|
|
|
|
const [location] = await app.db.update(locations).set(updates).where(eq(locations.id, id)).returning()
|
|
if (!location) return reply.status(404).send({ error: { message: 'Location not found', statusCode: 404 } })
|
|
return reply.send(location)
|
|
})
|
|
|
|
app.delete('/locations/:id', { preHandler: [app.authenticate, app.requirePermission('settings.edit')] }, async (request, reply) => {
|
|
const { id } = request.params as { id: string }
|
|
const [location] = await app.db.update(locations).set({ isActive: false, updatedAt: new Date() }).where(eq(locations.id, id)).returning()
|
|
if (!location) return reply.status(404).send({ error: { message: 'Location not found', statusCode: 404 } })
|
|
return reply.send(location)
|
|
})
|
|
}
|