Initial commit

2026-05-19 22:20:29 +02:00
commit 0fbe856dce
173 changed files with 38316 additions and 0 deletions
@@ -0,0 +1,104 @@
+import { NextRequest, NextResponse } from "next/server";
+import { db } from "@/lib/db";
+import { ApprovalStatus } from "@prisma/client";
+import { recalcShotStatus } from "@/lib/shot-status";
+
+async function getOrCreateClientUser(email: string, label?: string | null) {
+  const existing = await db.user.findUnique({ where: { email } });
+  if (existing) return existing;
+  return db.user.create({
+    data: {
+      email,
+      name: label ?? email.split("@")[0],
+      role: "CLIENT",
+      isActive: true,
+    },
+  });
+}
+
+async function validateToken(token: string) {
+  const session = await db.reviewSession.findUnique({ where: { token } });
+  if (!session || !session.isActive) return null;
+  if (session.expiresAt && session.expiresAt < new Date()) return null;
+  return session;
+}
+
+export async function POST(
+  req: NextRequest,
+  { params }: { params: Promise<{ token: string }> }
+) {
+  const { token } = await params;
+  const session = await validateToken(token);
+  if (!session) {
+    return NextResponse.json({ error: "Invalid or expired review link" }, { status: 403 });
+  }
+
+  const body = await req.json();
+  const { versionId, status, notes } = body;
+
+  const validStatuses: ApprovalStatus[] = ["APPROVED", "REJECTED", "NEEDS_CHANGES"];
+  if (!versionId || !validStatuses.includes(status)) {
+    return NextResponse.json({ error: "versionId and valid status required" }, { status: 400 });
+  }
+
+  // Ensure the version belongs to this project via its task
+  const version = await db.version.findUnique({
+    where: { id: versionId },
+    include: {
+      task: {
+        include: { shot: true, project: true },
+      },
+    },
+  });
+
+  const projectId = version?.task?.projectId;
+  if (!version || projectId !== session.projectId) {
+    return NextResponse.json({ error: "Version not found" }, { status: 404 });
+  }
+
+  const email = session.email ?? `client+${token.slice(0, 8)}@review.external`;
+  const user = await getOrCreateClientUser(email, session.label);
+
+  // Record approval
+  await db.approval.create({
+    data: { versionId, userId: user.id, status, notes },
+  });
+
+  // Update version approval status
+  await db.version.update({
+    where: { id: versionId },
+    data: { approvalStatus: status },
+  });
+
+  // Update task status based on approval decision
+  if (version.task) {
+    if (status === "APPROVED") {
+      await db.task.update({ where: { id: version.task.id }, data: { status: "DONE" } });
+    } else {
+      await db.task.update({ where: { id: version.task.id }, data: { status: "CHANGES" } });
+    }
+
+    // Recalculate derived shot status
+    if (version.task.shot) {
+      await recalcShotStatus(version.task.shot.id).catch(() => {});
+    }
+  }
+
+  // Slack notification
+  if (version.task?.project?.slackWebhook) {
+    const { slackNotifyApproval } = await import("@/lib/slack");
+    const appUrl = process.env.NEXT_PUBLIC_APP_URL ?? "";
+    const contextCode = version.task.shot?.shotCode ?? version.task.title;
+    await slackNotifyApproval(version.task.project.slackWebhook, {
+      shotCode: contextCode,
+      versionLabel: `v${String(version.versionNumber).padStart(3, "0")}`,
+      reviewerName: user.name ?? "Client",
+      status,
+      projectName: version.task.project.name,
+      reviewUrl: `${appUrl}/client/${token}/review/${versionId}`,
+    });
+  }
+
+  return NextResponse.json({ success: true });
+}
+