metis-desk/modules/assets/src/web/shared/api/inventory-request.ts

import { csrfFetch } from "@metis/core/client";
import { z } from "zod/v4";

import { InventoryApiError } from "./inventory-api-error";

export async function inventoryRequest(
  path: string,
  body?: unknown,
  headers?: Record<string, string>
) {
  const response = await csrfFetch(`/api/assets/${path}`, {
    method: body === undefined ? "GET" : "POST",
    credentials: "same-origin",
    headers: { ...(body === undefined ? {} : { "content-type": "application/json" }), ...headers },
    ...(body === undefined ? {} : { body: JSON.stringify(body) }),
  });
  const data: unknown = await response.json();

  if (!response.ok) {
    const error = z.object({ code: z.string() }).safeParse(data);

    throw new InventoryApiError(error.success ? error.data.code : "INTERNAL_ERROR");
  }

  return data;
}