HoloPanio
30b408e0db
- Add POST /v1/sales/opportunities/:identifier/products with field-level permission gating - Add CWForecastItemCreate type for forecast item creation - Store product display order locally (productSequence Int[] on Opportunity) - Rewrite resequenceProducts to be local-only (no CW PUT, stable IDs) - Remove reorderProducts CW util (PUT regenerated IDs & broke procurement) - Update fetchProducts to apply local ordering with CW sequenceNumber fallback - Add productSequence to OpportunityController.toJson() - Update API_ROUTES.md, PERMISSIONS.md, PermissionNodes.ts
70 lines
2.7 KiB
TypeScript
70 lines
2.7 KiB
TypeScript
import { createRoute } from "../../../modules/api-utils/createRoute";
|
|
import { opportunities } from "../../../managers/opportunities";
|
|
import { apiResponse } from "../../../modules/api-utils/apiResponse";
|
|
import { ContentfulStatusCode } from "hono/utils/http-status";
|
|
import { authMiddleware } from "../../middleware/authorization";
|
|
import { processObjectValuePerms } from "../../../modules/permission-utils/processObjectPermissions";
|
|
import { z } from "zod";
|
|
|
|
const productItemSchema = z
|
|
.object({
|
|
catalogItem: z.object({ id: z.number().int().positive() }).optional(),
|
|
forecastDescription: z.string().optional(),
|
|
productDescription: z.string().optional(),
|
|
quantity: z.number().positive().optional(),
|
|
status: z.object({ id: z.number().int().positive() }).optional(),
|
|
productClass: z.string().optional(),
|
|
forecastType: z.string().optional(),
|
|
revenue: z.number().optional(),
|
|
cost: z.number().optional(),
|
|
includeFlag: z.boolean().optional(),
|
|
linkFlag: z.boolean().optional(),
|
|
recurringFlag: z.boolean().optional(),
|
|
taxableFlag: z.boolean().optional(),
|
|
recurringRevenue: z.number().optional(),
|
|
recurringCost: z.number().optional(),
|
|
cycles: z.number().int().min(0).optional(),
|
|
sequenceNumber: z.number().int().min(0).optional(),
|
|
})
|
|
.strict();
|
|
|
|
const addProductSchema = z.union([
|
|
productItemSchema,
|
|
z.array(productItemSchema).min(1, "At least one product is required"),
|
|
]);
|
|
|
|
/* POST /v1/sales/opportunities/:identifier/products */
|
|
export default createRoute(
|
|
"post",
|
|
["/opportunities/:identifier/products"],
|
|
async (c) => {
|
|
const identifier = c.req.param("identifier");
|
|
const body = await c.req.json();
|
|
|
|
const validated = addProductSchema.parse(body);
|
|
const inputItems = Array.isArray(validated) ? validated : [validated];
|
|
|
|
// Gate each submitted field against user permissions.
|
|
// Only fields the user has permission for are forwarded to ConnectWise.
|
|
const user = c.get("user");
|
|
const gatedItems = await Promise.all(
|
|
inputItems.map((item) =>
|
|
processObjectValuePerms(item, "sales.opportunity.product.field", user),
|
|
),
|
|
);
|
|
|
|
const item = await opportunities.fetchItem(identifier);
|
|
const created = await item.addProducts(gatedItems);
|
|
|
|
const isBatch = Array.isArray(body);
|
|
const response = apiResponse.created(
|
|
isBatch
|
|
? `${created.length} product(s) added to opportunity successfully!`
|
|
: "Product added to opportunity successfully!",
|
|
isBatch ? created.map((p) => p.toJson()) : created[0]!.toJson(),
|
|
);
|
|
return c.json(response, response.status as ContentfulStatusCode);
|
|
},
|
|
authMiddleware({ permissions: ["sales.opportunity.product.add"] }),
|
|
);
|