@tantainnovative/create-ndpr 0.4.0 → 0.5.0

package/templates/nextjs-dsr-route.ts

@@ -1,161 +1,115 @@
 /**
- * Next.js App Router — DSR (Data Subject Rights) Route
- * Generated by create-ndpr for: {{ORG_NAME}}
- *
- * NDPA §34 — rights to access, rectification, erasure, portability, and
- * objection. All requests must be acknowledged promptly and fulfilled
- * within the statutory window (NDPC guidance: 30 days).
- *
- * Endpoints:
- *   GET  /api/dsr               — List DSR requests (optional ?status= filter)
- *   POST /api/dsr               — Submit a new DSR request
+ * Next.js App Router — tenant-scoped data-subject request route for {{ORG_NAME_COMMENT}}.
+ * Submission requires a verified subject; listing requires verified staff.
  */
-
 import { NextRequest, NextResponse } from 'next/server';
+import { getNDPRContextProblem, resolveNDPRRequestContext } from '{{NDPR_CONTEXT_IMPORT}}';
 // {{#if ORM=prisma}}
 import { PrismaClient } from '@prisma/client';
-
 const prisma = new PrismaClient();
 // {{/if}}
 // {{#if ORM=drizzle}}
-import { db } from '@/drizzle';
-import { dsrRequests, complianceAuditLog } from '@/drizzle/ndpr-schema';
-import { eq, desc } from 'drizzle-orm';
+import { db } from '{{NDPR_DB_IMPORT}}';
+import { complianceAuditLog, dsrRequests } from '{{NDPR_SCHEMA_IMPORT}}';
+import { and, desc, eq } from 'drizzle-orm';
 // {{/if}}
 // {{#if ORM=none}}
-// TODO ({{ORG_NAME}}): wire this to your persistent store of choice. The
-// in-memory map below is enough to develop against locally but DOES NOT
-// satisfy NDPA Section 44 (record-keeping) or the auditability NDPC asks
-// about. Replace `dsrStore`/`auditLog` with your DB / KV / API.
-interface DSRRequest {
-  id: string;
-  type: string;
-  subjectName: string;
-  subjectEmail: string;
-  subjectPhone: string | null;
-  identifierType: string;
-  identifierValue: string;
-  description: string | null;
-  status: string;
-  submittedAt: Date;
-  dueAt: Date;
+// DEVELOPMENT ONLY: replace both stores with one durable transactional store.
+interface DSRRow {
+  id: string; tenantId: string; subjectId: string; type: string; status: string;
+  subjectName: string; subjectEmail: string; subjectPhone: string | null;
+  identifierType: string; identifierValue: string; description: string | null;
+  submittedAt: Date; dueAt: Date;
 }
-const dsrStore = new Map<string, DSRRequest>();
-const auditLog: Array<{ id: string; module: string; action: string; entityId: string; at: Date }> = [];
-function newId() { return crypto.randomUUID(); }
+const dsrStore = new Map<string, DSRRow>();
+const auditLog: Array<{ id: string; tenantId: string; action: string; entityId: string; performedBy: string | null; at: Date }> = [];
 // {{/if}}
 
-// GET /api/dsr?status=pending
+const REQUEST_TYPES = new Set(['access', 'rectification', 'erasure', 'portability', 'objection', 'restriction']);
+
 export async function GET(req: NextRequest) {
+  const context = await resolveNDPRRequestContext(req);
+  const problem = getNDPRContextProblem(context, 'staff');
+  if (problem) return NextResponse.json({ error: problem.error }, { status: problem.status });
   const status = req.nextUrl.searchParams.get('status');
 
   // {{#if ORM=prisma}}
   const requests = await prisma.dSRRequest.findMany({
-    where: status ? { status } : undefined,
+    where: { tenantId: context.tenantId, ...(status ? { status } : {}) },
     orderBy: { submittedAt: 'desc' },
   });
   // {{/if}}
   // {{#if ORM=drizzle}}
   const requests = status
-    ? await db.select().from(dsrRequests).where(eq(dsrRequests.status, status)).orderBy(desc(dsrRequests.submittedAt))
-    : await db.select().from(dsrRequests).orderBy(desc(dsrRequests.submittedAt));
+    ? await db.select().from(dsrRequests).where(and(eq(dsrRequests.tenantId, context.tenantId), eq(dsrRequests.status, status))).orderBy(desc(dsrRequests.submittedAt))
+    : await db.select().from(dsrRequests).where(eq(dsrRequests.tenantId, context.tenantId)).orderBy(desc(dsrRequests.submittedAt));
   // {{/if}}
   // {{#if ORM=none}}
   const requests = [...dsrStore.values()]
-    .filter((r) => (status ? r.status === status : true))
+    .filter((row) => row.tenantId === context.tenantId && (!status || row.status === status))
     .sort((a, b) => b.submittedAt.getTime() - a.submittedAt.getTime());
   // {{/if}}
-
   return NextResponse.json(requests);
 }
 
-// POST /api/dsr
 export async function POST(req: NextRequest) {
-  const body = await req.json();
-  const {
-    type,
-    subjectName,
-    subjectEmail,
-    subjectPhone,
-    identifierType,
-    identifierValue,
-    description,
-  } = body;
-
-  if (!type || !subjectName || !subjectEmail || !identifierType || !identifierValue) {
-    return NextResponse.json(
-      { error: 'type, subjectName, subjectEmail, identifierType, and identifierValue are required' },
-      { status: 400 },
-    );
+  const context = await resolveNDPRRequestContext(req);
+  const problem = getNDPRContextProblem(context, 'subject');
+  if (problem) return NextResponse.json({ error: problem.error }, { status: problem.status });
+  const subjectId = context.subjectId as string;
+  const body: unknown = await req.json().catch(() => null);
+  if (!body || typeof body !== 'object') return NextResponse.json({ error: 'A JSON object is required' }, { status: 400 });
+  const input = body as Record<string, unknown>;
+  const required = ['type', 'subjectName', 'subjectEmail', 'identifierType', 'identifierValue'] as const;
+  if (required.some((field) => typeof input[field] !== 'string' || !(input[field] as string).trim())) {
+    return NextResponse.json({ error: `${required.join(', ')} are required strings` }, { status: 400 });
   }
-
-  // NDPA mandates a 30-day response window from date of submission.
-  const dueAt = new Date();
-  dueAt.setDate(dueAt.getDate() + 30);
+  if (!REQUEST_TYPES.has(input.type as string)) {
+    return NextResponse.json({ error: `type must be one of: ${[...REQUEST_TYPES].join(', ')}` }, { status: 400 });
+  }
+  const submittedAt = new Date();
+  // Operational target; confirm and configure this deadline for your applicable obligations.
+  const dueAt = new Date(submittedAt.getTime() + 30 * 24 * 60 * 60 * 1000);
+  const data = {
+    tenantId: context.tenantId,
+    subjectId,
+    type: input.type as string,
+    subjectName: input.subjectName as string,
+    subjectEmail: input.subjectEmail as string,
+    subjectPhone: typeof input.subjectPhone === 'string' ? input.subjectPhone : null,
+    identifierType: input.identifierType as string,
+    identifierValue: input.identifierValue as string,
+    description: typeof input.description === 'string' ? input.description : null,
+    status: 'pending',
+    dueAt,
+  };
 
   // {{#if ORM=prisma}}
-  const request = await prisma.dSRRequest.create({
-    data: {
-      type,
-      subjectName,
-      subjectEmail,
-      subjectPhone: subjectPhone ?? null,
-      identifierType,
-      identifierValue,
-      description: description ?? null,
-      status: 'pending',
-      dueAt,
-    },
-  });
-
-  await prisma.complianceAuditLog.create({
-    data: {
-      module: 'dsr',
-      action: 'submitted',
-      entityId: request.id,
-      entityType: 'DSRRequest',
-      changes: { type, subjectEmail, status: 'pending' },
-    },
+  const request = await prisma.$transaction(async (tx) => {
+    const created = await tx.dSRRequest.create({ data });
+    await tx.complianceAuditLog.create({ data: {
+      tenantId: context.tenantId, module: 'dsr', action: 'submitted',
+      entityId: created.id, entityType: 'DSRRequest', performedBy: context.actorId,
+      changes: { type: data.type, subjectId, status: 'pending' },
+    } });
+    return created;
   });
   // {{/if}}
   // {{#if ORM=drizzle}}
-  const [request] = await db.insert(dsrRequests).values({
-    type,
-    subjectName,
-    subjectEmail,
-    subjectPhone: subjectPhone ?? null,
-    identifierType,
-    identifierValue,
-    description: description ?? null,
-    status: 'pending',
-    dueAt,
-  }).returning();
-
-  await db.insert(complianceAuditLog).values({
-    module: 'dsr',
-    action: 'submitted',
-    entityId: request.id,
-    entityType: 'DSRRequest',
-    changes: { type, subjectEmail, status: 'pending' },
+  const request = await db.transaction(async (tx) => {
+    const [created] = await tx.insert(dsrRequests).values(data).returning();
+    await tx.insert(complianceAuditLog).values({
+      tenantId: context.tenantId, module: 'dsr', action: 'submitted',
+      entityId: created.id, entityType: 'DSRRequest', performedBy: context.actorId,
+      changes: { type: data.type, subjectId, status: 'pending' },
+    });
+    return created;
   });
   // {{/if}}
   // {{#if ORM=none}}
-  const request: DSRRequest = {
-    id: newId(),
-    type,
-    subjectName,
-    subjectEmail,
-    subjectPhone: subjectPhone ?? null,
-    identifierType,
-    identifierValue,
-    description: description ?? null,
-    status: 'pending',
-    submittedAt: new Date(),
-    dueAt,
-  };
+  const request: DSRRow = { id: crypto.randomUUID(), ...data, submittedAt };
   dsrStore.set(request.id, request);
-  auditLog.push({ id: newId(), module: 'dsr', action: 'submitted', entityId: request.id, at: new Date() });
+  auditLog.push({ id: crypto.randomUUID(), tenantId: context.tenantId, action: 'submitted', entityId: request.id, performedBy: context.actorId, at: submittedAt });
   // {{/if}}
-
   return NextResponse.json(request, { status: 201 });
 }