`app/api/granters/route.ts`

59 lines
import { NextRequest, NextResponse } from 'next/server';
import { query } from '@/lib/db';
import { verifyAuth } from '@/lib/auth';
import { auditLog } from '@/lib/audit';

export async function GET(request: NextRequest) {
  const user = verifyAuth(request);
  if (!user) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  try {
    const result = await query(`
      SELECT id, name, description, website_url, logo_url, city, state,
             funding_areas, annual_budget, min_grant, max_grant, grants_per_year,
             preference_tags, status, created_at, updated_at
      FROM granters
      WHERE status = 'active'
      ORDER BY annual_budget DESC NULLS LAST
      LIMIT 100
    `);

    return NextResponse.json({ granters: result.rows });
  } catch (err) {
    console.error('[granters] GET error:', (err as Error).message);
    return NextResponse.json({ error: 'Failed to fetch granters' }, { status: 500 });
  }
}

export async function POST(request: NextRequest) {
  const user = verifyAuth(request);
  if (!user) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  try {
    const body = await request.json();
    const { name, description, website_url, city, state, funding_areas, annual_budget, min_grant, max_grant, grants_per_year, preference_tags } = body;

    if (!name) {
      return NextResponse.json({ error: 'Granter name is required' }, { status: 400 });
    }

    const result = await query(
      `INSERT INTO granters (name, description, website_url, city, state, funding_areas, annual_budget, min_grant, max_grant, grants_per_year, preference_tags)
       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
       RETURNING *`,
      [name, description || null, website_url || null, city || null, state || null, funding_areas || [], annual_budget || null, min_grant || null, max_grant || null, grants_per_year || null, preference_tags || []],
    );

    await auditLog('granter.created', 'granter', result.rows[0].id, { name, user });

    return NextResponse.json({ granter: result.rows[0] }, { status: 201 });
  } catch (err) {
    console.error('[granters] POST error:', (err as Error).message);
    return NextResponse.json({ error: 'Failed to create granter' }, { status: 500 });
  }
}