import { NextResponse } from 'next/server' import { z } from 'zod' import { resolveCpqRouteContext } from '../../../context' import { cpqOrderStatusTransitionSchema } from '../../../../data/validators' import { OrderError } from '../../../../services/cpqOrderService' import type { DefaultCpqOrderService } from '../../../../services/cpqOrderService' export const metadata = { POST: { requireAuth: true, requireFeatures: ['cpq.orders.manage'] }, } export async function POST(req: Request, { params }: { params: Promise<{ orderId: string }> }) { try { const ctx = await resolveCpqRouteContext(req) if (!ctx.auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 }) const { orderId } = await params const body = cpqOrderStatusTransitionSchema.parse(await req.json()) const scope = { organizationId: ctx.organizationId, tenantId: ctx.tenantId } const service = ctx.container.resolve('cpqOrderService') as DefaultCpqOrderService const result = await service.transitionOrderStatus(orderId, body.targetStatus, scope) return NextResponse.json(result) } catch (err) { if (err instanceof z.ZodError) { return NextResponse.json({ error: 'Validation error', details: err.issues }, { status: 400 }) } if (err instanceof OrderError) { return NextResponse.json({ error: err.message }, { status: err.status }) } const errObj = err as Record if (typeof errObj?.status === 'number' && typeof errObj?.error === 'string') { return NextResponse.json({ error: errObj.error }, { status: errObj.status as number }) } console.error('[cpq/orders/[orderId]/status.POST]', err) return NextResponse.json({ error: 'Internal error' }, { status: 500 }) } }