API Update

app/api/ext/projects/route.ts

@@ -0,0 +1,60 @@
+import { NextRequest, NextResponse } from "next/server";
+import { db } from "@/lib/db";
+
+// ── Auth ─────────────────────────────────────────────────────────────────────
+
+function isAuthorized(req: NextRequest): boolean {
+  const apiKey = process.env.API_SECRET_KEY;
+  if (!apiKey) return false;
+  const authHeader = req.headers.get("authorization") ?? "";
+  if (authHeader.startsWith("Bearer ")) return authHeader.slice(7) === apiKey;
+  return (req.headers.get("x-api-key") ?? "") === apiKey;
+}
+
+// ── GET /api/ext/projects ─────────────────────────────────────────────────────
+//
+// Returns all projects with their showIds. Useful for pipeline tools that need
+// to enumerate available projects and resolve a showId → projectCode mapping.
+//
+// Query params (all optional):
+//   status   Filter by project status: ACTIVE (default) | ARCHIVED | ALL
+//
+// Example:
+//   GET /api/ext/projects
+//   GET /api/ext/projects?status=ALL
+
+export async function GET(req: NextRequest) {
+  if (!isAuthorized(req)) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+
+  const { searchParams } = new URL(req.url);
+  const statusParam = searchParams.get("status")?.toUpperCase() ?? "ACTIVE";
+
+  const whereStatus =
+    statusParam === "ALL"
+      ? undefined
+      : statusParam === "ARCHIVED"
+      ? { status: "ARCHIVED" as const }
+      : { status: "ACTIVE" as const };
+
+  const projects = await db.project.findMany({
+    where: whereStatus,
+    orderBy: [{ showId: "asc" }, { code: "asc" }],
+    select: {
+      id:          true,
+      name:        true,
+      code:        true,
+      showId:      true,
+      projectType: true,
+      status:      true,
+      startDate:   true,
+      dueDate:     true,
+      _count: {
+        select: { shots: true },
+      },
+    },
+  });
+
+  return NextResponse.json({ projects, total: projects.length });
+}