Shoot sketches templates

app/api/sketch-templates/[id]/route.ts

@@ -0,0 +1,49 @@
+import { NextRequest, NextResponse } from "next/server";
+import { auth } from "@/auth";
+import { db } from "@/lib/db";
+
+function canManage(role: string) {
+  return ["ADMIN", "PRODUCER", "SUPERVISOR"].includes(role);
+}
+
+// DELETE /api/sketch-templates/[id]
+export async function DELETE(
+  _req: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const session = await auth();
+  if (!session?.user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  if (!canManage(session.user.role))
+    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+
+  const { id } = await params;
+  const template = await db.sketchTemplate.findUnique({ where: { id } });
+  if (!template) return NextResponse.json({ error: "Not found" }, { status: 404 });
+
+  await db.sketchTemplate.delete({ where: { id } });
+  return NextResponse.json({ ok: true });
+}
+
+// PATCH /api/sketch-templates/[id] — rename
+export async function PATCH(
+  req: NextRequest,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  const session = await auth();
+  if (!session?.user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  if (!canManage(session.user.role))
+    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+
+  const { id } = await params;
+  const { name } = await req.json();
+  if (!name?.trim()) return NextResponse.json({ error: "Name required" }, { status: 400 });
+
+  const template = await db.sketchTemplate.update({
+    where: { id },
+    data: { name: name.trim() },
+  });
+
+  return NextResponse.json({
+    template: { ...template, fileSize: template.fileSize != null ? Number(template.fileSize) : null },
+  });
+}