import { NextResponse } from 'next/server'; import { withAuth, withPermission } from '@/lib/api/helpers'; import { parseBody } from '@/lib/api/route-helpers'; import { errorResponse } from '@/lib/errors'; import { createFolderSchema } from '@/lib/validators/document-folders'; import { listTree, createFolder } from '@/lib/services/document-folders.service'; /** * GET /api/v1/document-folders * * Returns the entire folder tree for the caller's port. Roots come * back at the top level with `children` nested. Cached on the client * via TanStack - folders change rarely; the manager mutations * invalidate the query. * * Permission: documents.view (read-only; everyone in the port can * browse the tree even if they can't manage it). */ export const GET = withAuth( withPermission('documents', 'view', async (_req, ctx) => { try { const tree = await listTree(ctx.portId); return NextResponse.json({ data: tree }); } catch (error) { return errorResponse(error); } }), ); /** * POST /api/v1/document-folders * Body: { name, parentId } * * Permission: documents.manage_folders. */ export const POST = withAuth( withPermission('documents', 'manage_folders', async (req, ctx) => { try { const body = await parseBody(req, createFolderSchema); const folder = await createFolder(ctx.portId, ctx.userId, body); return NextResponse.json({ data: folder }, { status: 201 }); } catch (error) { return errorResponse(error); } }), );