Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 | 5x 5x 5x 4x 4x 4x 1x 1x 7x 7x 7x 6x 6x 6x 4x 4x 2x 3x 6x 6x 6x 5x 5x 5x 3x 3x 1x | import { NextRequest, NextResponse } from "next/server";
import { requireAuth } from "@/lib/auth";
import { ItemController } from "@/server/api/items";
import { requireApiItemCapability } from "@/server/dal/collection-access";
import { ItemSoftDeleteService } from "@/server/services/ItemService";
import { getDb } from "@/lib/db";
import { errorResponse } from "@/server/api/http-errors";
export async function GET(
_request: NextRequest,
{ params }: { params: Promise<{ id: string }> }
) {
try {
const { id } = await params;
const user = await requireAuth();
const db = getDb();
// items:read = curator. Default resolution (no includeDeleted) — soft-deleted → 404.
const item = await requireApiItemCapability(db, id, user.id, "items:read");
if (item instanceof NextResponse) return item;
return NextResponse.json(item);
} catch (error) {
return errorResponse(error);
}
}
export async function PATCH(
request: NextRequest,
{ params }: { params: Promise<{ id: string }> }
) {
try {
const { id } = await params;
const user = await requireAuth();
const db = getDb();
// items:write = curator. Default resolution — soft-deleted → 404.
const item = await requireApiItemCapability(db, id, user.id, "items:write");
if (item instanceof NextResponse) return item;
const body = await request.json();
const updated = await ItemController.fromDb(db).updateItem(id, body);
return NextResponse.json(updated);
} catch (error) {
return errorResponse(error);
}
}
export async function DELETE(
_request: NextRequest,
{ params }: { params: Promise<{ id: string }> }
) {
try {
const { id } = await params;
const user = await requireAuth();
const db = getDb();
// items:write = curator. Default resolution — soft-deleted → 404.
const item = await requireApiItemCapability(db, id, user.id, "items:write");
if (item instanceof NextResponse) return item;
// Soft-delete + audit in ONE transaction via ItemSoftDeleteService: a
// committed delete always has exactly one audit row (purses-wfgj).
const deleted = await ItemSoftDeleteService.fromDb(db).softDeleteWithAudit(item, user.id);
return NextResponse.json({ message: "Item deleted", item: deleted });
} catch (error) {
return errorResponse(error);
}
}
|