← back to Freddy

app/api/contacts/route.ts

130 lines

import { NextRequest, NextResponse } from 'next/server';
import { query } from '@/lib/db';
import { verifyAuth } from '@/lib/auth';
import { auditLog } from '@/lib/audit';

export async function GET(request: NextRequest) {
  const user = verifyAuth(request);
  if (!user) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  try {
    const contactType = request.nextUrl.searchParams.get('type');

    let sql = `
      SELECT id, contact_type, name, title, organization, email, phone,
             linkedin_url, city, state, source, relevance_score,
             ai_pitch, solicited, solicited_at, response, notes,
             created_at, updated_at
      FROM contacts
    `;
    const params: unknown[] = [];

    if (contactType) {
      params.push(contactType);
      sql += ` WHERE contact_type = $${params.length}`;
    }

    sql += ' ORDER BY relevance_score DESC, created_at DESC LIMIT 100';

    const result = await query(sql, params);
    return NextResponse.json({ contacts: result.rows });
  } catch (err) {
    console.error('[contacts] GET error:', (err as Error).message);
    return NextResponse.json({ error: 'Failed to fetch contacts' }, { status: 500 });
  }
}

export async function POST(request: NextRequest) {
  const user = verifyAuth(request);
  if (!user) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  try {
    const body = await request.json();
    const { contact_type, name, title, organization, email, phone, linkedin_url, city, state, relevance_score, ai_pitch } = body;

    if (!name || !contact_type) {
      return NextResponse.json({ error: 'name and contact_type are required' }, { status: 400 });
    }

    const result = await query(
      `INSERT INTO contacts (contact_type, name, title, organization, email, phone, linkedin_url, city, state, relevance_score, ai_pitch)
       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
       RETURNING *`,
      [contact_type, name, title || null, organization || null, email || null, phone || null, linkedin_url || null, city || null, state || null, relevance_score || 0.5, ai_pitch || null],
    );

    await auditLog('contact.created', 'contact', result.rows[0].id, { name, contact_type, user });

    return NextResponse.json({ contact: result.rows[0] }, { status: 201 });
  } catch (err) {
    console.error('[contacts] POST error:', (err as Error).message);
    return NextResponse.json({ error: 'Failed to create contact' }, { status: 500 });
  }
}

export async function PATCH(request: NextRequest) {
  const user = verifyAuth(request);
  if (!user) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  try {
    const body = await request.json();
    const { id, response, solicited, notes } = body;

    if (!id) {
      return NextResponse.json({ error: 'id is required' }, { status: 400 });
    }

    const updates: string[] = [];
    const params: unknown[] = [];
    let idx = 0;

    if (response !== undefined) {
      idx++;
      updates.push(`response = $${idx}`);
      params.push(response);
    }
    if (solicited !== undefined) {
      idx++;
      updates.push(`solicited = $${idx}`);
      params.push(solicited);
      if (solicited) {
        updates.push(`solicited_at = NOW()`);
      }
    }
    if (notes !== undefined) {
      idx++;
      updates.push(`notes = $${idx}`);
      params.push(notes);
    }

    if (updates.length === 0) {
      return NextResponse.json({ error: 'No updates provided' }, { status: 400 });
    }

    idx++;
    params.push(id);

    const result = await query(
      `UPDATE contacts SET ${updates.join(', ')} WHERE id = $${idx} RETURNING *`,
      params,
    );

    if (result.rows.length === 0) {
      return NextResponse.json({ error: 'Contact not found' }, { status: 404 });
    }

    await auditLog('contact.updated', 'contact', id, { response, solicited, user });

    return NextResponse.json({ contact: result.rows[0] });
  } catch (err) {
    console.error('[contacts] PATCH error:', (err as Error).message);
    return NextResponse.json({ error: 'Failed to update contact' }, { status: 500 });
  }
}