crm2

server/src/modules/crm/router.ts

@@ -1,11 +1,14 @@
-import { crmRecordStatuses, permissions } from "@mrp/shared";
+import { permissions } from "@mrp/shared";
+import { crmContactEntryTypes, crmRecordStatuses } from "@mrp/shared/dist/crm/types.js";
 import { Router } from "express";
 import { z } from "zod";
 
 import { fail, ok } from "../../lib/http.js";
 import { requirePermissions } from "../../lib/rbac.js";
 import {
+  createCustomerContactEntry,
   createCustomer,
+  createVendorContactEntry,
   createVendor,
   getCustomerById,
   getVendorById,
@@ -35,6 +38,13 @@ const crmListQuerySchema = z.object({
   status: z.enum(crmRecordStatuses).optional(),
 });
 
+const crmContactEntrySchema = z.object({
+  type: z.enum(crmContactEntryTypes),
+  summary: z.string().trim().min(1).max(160),
+  body: z.string().trim().min(1).max(4000),
+  contactAt: z.string().datetime(),
+});
+
 function getRouteParam(value: string | string[] | undefined) {
   return typeof value === "string" ? value : null;
 }
@@ -99,6 +109,25 @@ crmRouter.put("/customers/:customerId", requirePermissions([permissions.crmWrite
   return ok(response, customer);
 });
 
+crmRouter.post("/customers/:customerId/contact-history", requirePermissions([permissions.crmWrite]), async (request, response) => {
+  const customerId = getRouteParam(request.params.customerId);
+  if (!customerId) {
+    return fail(response, 400, "INVALID_INPUT", "Customer id is invalid.");
+  }
+
+  const parsed = crmContactEntrySchema.safeParse(request.body);
+  if (!parsed.success) {
+    return fail(response, 400, "INVALID_INPUT", "Contact history entry is invalid.");
+  }
+
+  const entry = await createCustomerContactEntry(customerId, parsed.data, request.authUser?.id);
+  if (!entry) {
+    return fail(response, 404, "CRM_CUSTOMER_NOT_FOUND", "Customer record was not found.");
+  }
+
+  return ok(response, entry, 201);
+});
+
 crmRouter.get("/vendors", requirePermissions([permissions.crmRead]), async (_request, response) => {
   const parsed = crmListQuerySchema.safeParse(_request.query);
   if (!parsed.success) {
@@ -156,3 +185,22 @@ crmRouter.put("/vendors/:vendorId", requirePermissions([permissions.crmWrite]),
 
   return ok(response, vendor);
 });
+
+crmRouter.post("/vendors/:vendorId/contact-history", requirePermissions([permissions.crmWrite]), async (request, response) => {
+  const vendorId = getRouteParam(request.params.vendorId);
+  if (!vendorId) {
+    return fail(response, 400, "INVALID_INPUT", "Vendor id is invalid.");
+  }
+
+  const parsed = crmContactEntrySchema.safeParse(request.body);
+  if (!parsed.success) {
+    return fail(response, 400, "INVALID_INPUT", "Contact history entry is invalid.");
+  }
+
+  const entry = await createVendorContactEntry(vendorId, parsed.data, request.authUser?.id);
+  if (!entry) {
+    return fail(response, 404, "CRM_VENDOR_NOT_FOUND", "Vendor record was not found.");
+  }
+
+  return ok(response, entry, 201);
+});