@dainamite/cpq 0.2.2

package/src/modules/cpq/api/product-offerings/route.ts

@@ -0,0 +1,329 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { resolveCpqRouteContext } from '../context'
+import { CpqProductOffering, CpqProductCharge, CpqProductSpecification, CpqOfferingComponent, CpqBundleSlot } from '../../data/entities'
+import { cpqProductOfferingCreateSchema, cpqProductOfferingUpdateSchema } from '../../data/validators'
+
+export const metadata = {
+  GET: { requireAuth: true, requireFeatures: ['cpq.offerings.view'] },
+  POST: { requireAuth: true, requireFeatures: ['cpq.offerings.manage'] },
+  PUT: { requireAuth: true, requireFeatures: ['cpq.offerings.manage'] },
+  DELETE: { requireAuth: true, requireFeatures: ['cpq.offerings.manage'] },
+}
+
+export async function GET(req: Request) {
+  try {
+    const ctx = await resolveCpqRouteContext(req)
+    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+    const url = new URL(req.url)
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }
+
+    // Detail view — load offering with spec and charges
+    const id = url.searchParams.get('id')
+    if (id) {
+      const offering = await ctx.em.findOne(CpqProductOffering, { id, ...scope })
+      if (!offering) return NextResponse.json({ error: 'Not found' }, { status: 404 })
+
+      const [spec, charges] = await Promise.all([
+        ctx.em.findOne(CpqProductSpecification, { id: offering.specId, ...scope }),
+        ctx.em.find(CpqProductCharge, { offeringId: offering.id, ...scope }, { orderBy: { sortOrder: 'asc' } }),
+      ])
+
+      // Load components for bundle offerings
+      let componentsData: Array<Record<string, unknown>> = []
+      if (offering.offeringType === 'bundle') {
+        const components = await ctx.em.find(CpqOfferingComponent, { offeringId: offering.id, ...scope }, { orderBy: { sortOrder: 'asc' } })
+        if (components.length > 0) {
+          const slotIds = [...new Set(components.map((c) => c.slotId))]
+          const childOfferingIds = [...new Set(components.map((c) => c.childOfferingId))]
+          const [slots, childOfferings] = await Promise.all([
+            ctx.em.find(CpqBundleSlot, { id: { $in: slotIds }, ...scope }),
+            ctx.em.find(CpqProductOffering, { id: { $in: childOfferingIds }, ...scope }),
+          ])
+          const slotMap = new Map(slots.map((s) => [s.id, s]))
+          const offeringMap = new Map(childOfferings.map((o) => [o.id, o]))
+          componentsData = components.map((c) => {
+            const sl = slotMap.get(c.slotId)
+            const ch = offeringMap.get(c.childOfferingId)
+            return {
+              id: c.id,
+              slotId: c.slotId,
+              slot: sl ? { id: sl.id, componentGroup: sl.componentGroup, name: sl.name, cardinalityMin: sl.cardinalityMin, cardinalityMax: sl.cardinalityMax } : null,
+              childOfferingId: c.childOfferingId,
+              childOffering: ch ? { id: ch.id, code: ch.code, name: ch.name, offeringType: ch.offeringType, specId: ch.specId } : null,
+              isDefault: c.isDefault,
+              sortOrder: c.sortOrder,
+              isActive: c.isActive,
+            }
+          })
+        }
+      }
+
+      return NextResponse.json({
+        id: offering.id,
+        specId: offering.specId,
+        catalogOfferId: offering.catalogOfferId,
+        code: offering.code,
+        name: offering.name,
+        description: offering.description,
+        offeringType: offering.offeringType,
+        designTimeValues: offering.designTimeValues,
+        lifecycleStatus: offering.lifecycleStatus,
+        effectiveFrom: offering.effectiveFrom,
+        effectiveTo: offering.effectiveTo,
+        metadata: offering.metadata,
+        isActive: offering.isActive,
+        createdAt: offering.createdAt,
+        updatedAt: offering.updatedAt,
+        specification: spec
+          ? {
+              id: spec.id,
+              code: spec.code,
+              name: spec.name,
+              productId: spec.productId,
+              specType: spec.specType,
+            }
+          : null,
+        charges: charges.map((c) => ({
+          id: c.id,
+          code: c.code,
+          name: c.name,
+          description: c.description,
+          chargeType: c.chargeType,
+          pricingMethod: c.pricingMethod,
+          pricingTableId: c.pricingTableId,
+          priceColumnKey: c.priceColumnKey,
+          fixedPrice: c.fixedPrice,
+          currencyCode: c.currencyCode,
+          quantityAttributeCode: c.quantityAttributeCode,
+          applicabilityCondition: c.applicabilityCondition,
+          sortOrder: c.sortOrder,
+          isActive: c.isActive,
+        })),
+        ...(offering.offeringType === 'bundle' ? { components: componentsData } : {}),
+      })
+    }
+
+    // List view
+    const page = Math.max(1, Number(url.searchParams.get('page') ?? '1'))
+    const pageSize = Math.min(100, Math.max(1, Number(url.searchParams.get('pageSize') ?? '50')))
+
+    const filters: Record<string, unknown> = { ...scope }
+    const specId = url.searchParams.get('specId')
+    if (specId) filters.specId = specId
+    const lifecycleStatus = url.searchParams.get('lifecycleStatus')
+    if (lifecycleStatus) filters.lifecycleStatus = lifecycleStatus
+    const code = url.searchParams.get('code')
+    if (code) filters.code = code
+    const offeringType = url.searchParams.get('offeringType')
+    if (offeringType) filters.offeringType = offeringType
+    const isActiveParam = url.searchParams.get('isActive')
+    if (isActiveParam === 'true') filters.isActive = true
+    else if (isActiveParam === 'false') filters.isActive = false
+
+    // Free-text search across code, name, description (case-insensitive)
+    const search = url.searchParams.get('search')?.trim()
+    if (search) {
+      filters.$or = [
+        { code: { $ilike: `%${search}%` } },
+        { name: { $ilike: `%${search}%` } },
+        { description: { $ilike: `%${search}%` } },
+      ]
+    }
+
+    // Configurable sort
+    const ALLOWED_SORT_FIELDS = ['createdAt', 'updatedAt', 'code', 'name', 'lifecycleStatus', 'offeringType'] as const
+    const sortFieldParam = url.searchParams.get('sortField') ?? ''
+    const sortField = (ALLOWED_SORT_FIELDS as readonly string[]).includes(sortFieldParam)
+      ? (sortFieldParam as (typeof ALLOWED_SORT_FIELDS)[number])
+      : 'createdAt'
+    const sortDir = url.searchParams.get('sortDir') === 'asc' ? 'asc' : 'desc'
+
+    const [items, total] = await ctx.em.findAndCount(CpqProductOffering, filters, {
+      limit: pageSize,
+      offset: (page - 1) * pageSize,
+      orderBy: { [sortField]: sortDir },
+    })
+
+    // Batch-load charges for all visible offerings in a single query
+    // (replaces an N+1 pattern where the UI fetched each offering's detail separately).
+    const offeringIds = items.map((item) => item.id)
+    const chargesByOffering = new Map<string, Array<Record<string, unknown>>>()
+    if (offeringIds.length > 0) {
+      const allCharges = await ctx.em.find(
+        CpqProductCharge,
+        { offeringId: { $in: offeringIds }, ...scope },
+        { orderBy: { sortOrder: 'asc' } },
+      )
+      for (const c of allCharges) {
+        if (!c.offeringId) continue
+        const list = chargesByOffering.get(c.offeringId) ?? []
+        list.push({
+          id: c.id,
+          code: c.code,
+          name: c.name,
+          description: c.description,
+          chargeType: c.chargeType,
+          pricingMethod: c.pricingMethod,
+          pricingTableId: c.pricingTableId,
+          priceColumnKey: c.priceColumnKey,
+          fixedPrice: c.fixedPrice,
+          currencyCode: c.currencyCode,
+          quantityAttributeCode: c.quantityAttributeCode,
+          applicabilityCondition: c.applicabilityCondition,
+          sortOrder: c.sortOrder,
+          isActive: c.isActive,
+        })
+        chargesByOffering.set(c.offeringId, list)
+      }
+    }
+
+    return NextResponse.json({
+      items: items.map((item) => ({
+        id: item.id,
+        specId: item.specId,
+        catalogOfferId: item.catalogOfferId,
+        code: item.code,
+        name: item.name,
+        description: item.description,
+        offeringType: item.offeringType,
+        designTimeValues: item.designTimeValues,
+        lifecycleStatus: item.lifecycleStatus,
+        effectiveFrom: item.effectiveFrom,
+        effectiveTo: item.effectiveTo,
+        isActive: item.isActive,
+        createdAt: item.createdAt,
+        updatedAt: item.updatedAt,
+        charges: chargesByOffering.get(item.id) ?? [],
+      })),
+      total,
+      page,
+      pageSize,
+      totalPages: Math.ceil(total / pageSize),
+    })
+  } catch (err) {
+    console.error('[cpq/product-offerings.GET]', err)
+    return NextResponse.json({ error: 'Internal error' }, { status: 500 })
+  }
+}
+
+export async function POST(req: Request) {
+  try {
+    const ctx = await resolveCpqRouteContext(req)
+    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+    const body = cpqProductOfferingCreateSchema.parse(await req.json())
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }
+
+    // Validate that the spec exists
+    const spec = await ctx.em.findOne(CpqProductSpecification, {
+      id: body.specId,
+      ...scope,
+      deletedAt: null,
+    })
+    if (!spec) return NextResponse.json({ error: 'Specification not found' }, { status: 400 })
+
+    // V-OFF-7: offeringType must match spec's specType
+    const offeringType = body.offeringType ?? 'simple'
+    if (offeringType !== spec.specType) {
+      return NextResponse.json(
+        { error: `V-OFF-7: offeringType '${offeringType}' must match specification's specType '${spec.specType}'` },
+        { status: 400 },
+      )
+    }
+
+    const entity = ctx.em.create(CpqProductOffering, { ...body, ...scope })
+    await ctx.em.flush()
+
+    return NextResponse.json(
+      {
+        id: entity.id,
+        specId: entity.specId,
+        catalogOfferId: entity.catalogOfferId,
+        code: entity.code,
+        name: entity.name,
+        description: entity.description,
+        offeringType: entity.offeringType,
+        designTimeValues: entity.designTimeValues,
+        lifecycleStatus: entity.lifecycleStatus,
+        effectiveFrom: entity.effectiveFrom,
+        effectiveTo: entity.effectiveTo,
+        metadata: entity.metadata,
+        isActive: entity.isActive,
+        createdAt: entity.createdAt,
+        updatedAt: entity.updatedAt,
+      },
+      { status: 201 },
+    )
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })
+    }
+    console.error('[cpq/product-offerings.POST]', err)
+    return NextResponse.json({ error: 'Internal error' }, { status: 500 })
+  }
+}
+
+export async function PUT(req: Request) {
+  try {
+    const ctx = await resolveCpqRouteContext(req)
+    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+    const body = cpqProductOfferingUpdateSchema.parse(await req.json())
+    const { id, ...updates } = body
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }
+
+    const entity = await ctx.em.findOne(CpqProductOffering, { id, ...scope })
+    if (!entity) return NextResponse.json({ error: 'Not found' }, { status: 404 })
+
+    ctx.em.assign(entity, updates)
+    await ctx.em.flush()
+
+    return NextResponse.json({
+      id: entity.id,
+      specId: entity.specId,
+      catalogOfferId: entity.catalogOfferId,
+      code: entity.code,
+      name: entity.name,
+      description: entity.description,
+      offeringType: entity.offeringType,
+      designTimeValues: entity.designTimeValues,
+      lifecycleStatus: entity.lifecycleStatus,
+      effectiveFrom: entity.effectiveFrom,
+      effectiveTo: entity.effectiveTo,
+      metadata: entity.metadata,
+      isActive: entity.isActive,
+      createdAt: entity.createdAt,
+      updatedAt: entity.updatedAt,
+    })
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })
+    }
+    console.error('[cpq/product-offerings.PUT]', err)
+    return NextResponse.json({ error: 'Internal error' }, { status: 500 })
+  }
+}
+
+export async function DELETE(req: Request) {
+  try {
+    const ctx = await resolveCpqRouteContext(req)
+    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+    const { id } = (await req.json()) as { id?: string }
+    if (!id) return NextResponse.json({ error: 'Missing id' }, { status: 400 })
+
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }
+    const entity = await ctx.em.findOne(CpqProductOffering, { id, ...scope })
+    if (!entity) return NextResponse.json({ error: 'Not found' }, { status: 404 })
+
+    entity.deletedAt = new Date()
+    await ctx.em.flush()
+
+    return NextResponse.json({ success: true })
+  } catch (err) {
+    console.error('[cpq/product-offerings.DELETE]', err)
+    return NextResponse.json({ error: 'Internal error' }, { status: 500 })
+  }
+}

package/src/modules/cpq/api/product-relationships/route.ts

@@ -0,0 +1,156 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import { resolveCpqRouteContext } from '../context'
+import { CpqProductRelationship } from '../../data/entities'
+import { cpqProductRelationshipCreateSchema, cpqProductRelationshipUpdateSchema } from '../../data/validators'
+
+export const metadata = {
+  GET: { requireAuth: true, requireFeatures: ['cpq.specifications.view'] },
+  POST: { requireAuth: true, requireFeatures: ['cpq.specifications.manage'] },
+  PUT: { requireAuth: true, requireFeatures: ['cpq.specifications.manage'] },
+  DELETE: { requireAuth: true, requireFeatures: ['cpq.specifications.manage'] },
+}
+
+export async function GET(req: Request) {
+  try {
+    const ctx = await resolveCpqRouteContext(req)
+    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+    const url = new URL(req.url)
+    const page = Math.max(1, Number(url.searchParams.get('page') ?? '1'))
+    const pageSize = Math.min(100, Math.max(1, Number(url.searchParams.get('pageSize') ?? '50')))
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }
+
+    const filters: Record<string, unknown> = { ...scope }
+    const sourceSpecId = url.searchParams.get('sourceSpecId')
+    if (sourceSpecId) filters.sourceSpecId = sourceSpecId
+    const targetSpecId = url.searchParams.get('targetSpecId')
+    if (targetSpecId) filters.targetSpecId = targetSpecId
+    const relationshipType = url.searchParams.get('relationshipType')
+    if (relationshipType) filters.relationshipType = relationshipType
+
+    const [items, total] = await ctx.em.findAndCount(CpqProductRelationship, filters, {
+      limit: pageSize,
+      offset: (page - 1) * pageSize,
+      orderBy: { createdAt: 'desc' },
+    })
+
+    return NextResponse.json({
+      items: items.map((item) => ({
+        id: item.id,
+        sourceSpecId: item.sourceSpecId,
+        targetSpecId: item.targetSpecId,
+        relationshipType: item.relationshipType,
+        cardinalityMin: item.cardinalityMin,
+        cardinalityMax: item.cardinalityMax,
+        condition: item.condition,
+        metadata: item.metadata,
+        isActive: item.isActive,
+        createdAt: item.createdAt,
+        updatedAt: item.updatedAt,
+      })),
+      total,
+      page,
+      pageSize,
+      totalPages: Math.ceil(total / pageSize),
+    })
+  } catch (err) {
+    console.error('[cpq/product-relationships.GET]', err)
+    return NextResponse.json({ error: 'Internal error' }, { status: 500 })
+  }
+}
+
+export async function POST(req: Request) {
+  try {
+    const ctx = await resolveCpqRouteContext(req)
+    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+    const body = cpqProductRelationshipCreateSchema.parse(await req.json())
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId }
+
+    const entity = ctx.em.create(CpqProductRelationship, { ...body, ...scope })
+    await ctx.em.flush()
+
+    return NextResponse.json(
+      {
+        id: entity.id,
+        sourceSpecId: entity.sourceSpecId,
+        targetSpecId: entity.targetSpecId,
+        relationshipType: entity.relationshipType,
+        cardinalityMin: entity.cardinalityMin,
+        cardinalityMax: entity.cardinalityMax,
+        condition: entity.condition,
+        metadata: entity.metadata,
+        isActive: entity.isActive,
+        createdAt: entity.createdAt,
+        updatedAt: entity.updatedAt,
+      },
+      { status: 201 },
+    )
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })
+    }
+    console.error('[cpq/product-relationships.POST]', err)
+    return NextResponse.json({ error: 'Internal error' }, { status: 500 })
+  }
+}
+
+export async function PUT(req: Request) {
+  try {
+    const ctx = await resolveCpqRouteContext(req)
+    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+    const body = cpqProductRelationshipUpdateSchema.parse(await req.json())
+    const { id, ...updates } = body
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }
+
+    const entity = await ctx.em.findOne(CpqProductRelationship, { id, ...scope })
+    if (!entity) return NextResponse.json({ error: 'Not found' }, { status: 404 })
+
+    ctx.em.assign(entity, updates)
+    await ctx.em.flush()
+
+    return NextResponse.json({
+      id: entity.id,
+      sourceSpecId: entity.sourceSpecId,
+      targetSpecId: entity.targetSpecId,
+      relationshipType: entity.relationshipType,
+      cardinalityMin: entity.cardinalityMin,
+      cardinalityMax: entity.cardinalityMax,
+      condition: entity.condition,
+      metadata: entity.metadata,
+      isActive: entity.isActive,
+      createdAt: entity.createdAt,
+      updatedAt: entity.updatedAt,
+    })
+  } catch (err) {
+    if (err instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 })
+    }
+    console.error('[cpq/product-relationships.PUT]', err)
+    return NextResponse.json({ error: 'Internal error' }, { status: 500 })
+  }
+}
+
+export async function DELETE(req: Request) {
+  try {
+    const ctx = await resolveCpqRouteContext(req)
+    if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+    const { id } = (await req.json()) as { id?: string }
+    if (!id) return NextResponse.json({ error: 'Missing id' }, { status: 400 })
+
+    const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId, deletedAt: null }
+    const entity = await ctx.em.findOne(CpqProductRelationship, { id, ...scope })
+    if (!entity) return NextResponse.json({ error: 'Not found' }, { status: 404 })
+
+    entity.deletedAt = new Date()
+    await ctx.em.flush()
+
+    return NextResponse.json({ success: true })
+  } catch (err) {
+    console.error('[cpq/product-relationships.DELETE]', err)
+    return NextResponse.json({ error: 'Internal error' }, { status: 500 })
+  }
+}