semillero-special-hotel/src/app/api/plans/route.ts

70 lines
2.2 KiB
TypeScript

import { NextRequest, NextResponse } from 'next/server';
import { withAuth } from '@/lib/api-guards';
import { createAuditLog } from '@/lib/audit-logger';
// GET: Fetch all plans (accessible to all authenticated roles)
export const GET = withAuth(async (req, { prisma }) => {
const { searchParams } = req.nextUrl;
const status = searchParams.get('status');
const code = searchParams.get('code');
const whereClause: any = {};
if (status) whereClause.status = status;
if (code) whereClause.code = code;
const plans = await prisma.compensationPlan.findMany({
where: whereClause,
include: {
rules: true
},
orderBy: { createdAt: 'desc' }
});
return NextResponse.json({ plans });
});
// POST: Create a new plan (restricted to admin and director)
export const POST = withAuth(async (req, { session, prisma }) => {
const body = await req.json();
const { name, code, validityStart, validityEnd, type, formula, metaAmount, percentageRate, maxCap, status } = body;
// Validate mandatory fields
if (!name || !code || !validityStart || !type) {
return NextResponse.json(
{ error: 'El nombre, código, fecha de inicio de vigencia y tipo son campos obligatorios.' },
{ status: 400 }
);
}
const plan = await prisma.$transaction(async (tx: any) => {
const p = await tx.compensationPlan.create({
data: {
name,
code,
validityStart: new Date(validityStart),
validityEnd: validityEnd ? new Date(validityEnd) : null,
type,
formula: formula || null,
metaAmount: metaAmount !== undefined ? parseFloat(metaAmount) : null,
percentageRate: percentageRate !== undefined ? parseFloat(percentageRate) : null,
maxCap: maxCap !== undefined ? parseFloat(maxCap) : null,
status: status || 'DRAFT',
version: 1,
createdBy: session.userId
}
});
await createAuditLog(tx, {
userId: session.userId,
action: 'CREATE',
targetTable: 'compensation_plans',
targetId: p.id,
newValue: p,
ipAddress: req.headers.get('x-forwarded-for') || '127.0.0.1'
});
return p;
});
return NextResponse.json({ plan }, { status: 201 });
}, ['admin', 'director']);