metis-desk/modules/companies/src/web/application-configurations/shared/api/application-api.ts

import { csrfFetch } from "@metis/core/client";
import { z } from "zod/v4";

import type { ApplicationConfigurationInput } from "../../../../common/application-configurations";
import {
  ApplicationConfigurationResponseSchema,
  ApplicationConfigurationsResponseSchema,
} from "../../../../common/application-configurations";

export const applicationKeys = { company: (id: string) => ["application-configurations", id] };

export class ApplicationApiError extends Error {
  constructor(public readonly code: string) {
    super(code);
  }
}

async function request(companyId: string, values?: ApplicationConfigurationInput, id?: string) {
  const response = await csrfFetch(
    `/api/application-configurations/${companyId}${id ? `/${id}/update` : ""}`,
    {
      method: values ? "POST" : "GET",
      credentials: "same-origin",
      headers: {
        "X-Metis-Resources-Contract": "2",
        ...(values ? { "content-type": "application/json" } : {}),
      },
      signal: AbortSignal.timeout(20000),
      ...(values ? { body: JSON.stringify({ values }) } : {}),
    }
  );
  const body: unknown = await response.json();

  if (!response.ok) {
    const error = z.object({ code: z.string() }).safeParse(body);

    throw new ApplicationApiError(error.success ? error.data.code : "INTERNAL_ERROR");
  }

  return body;
}

export const applicationApi = {
  async get(companyId: string) {
    return ApplicationConfigurationsResponseSchema.parse(await request(companyId));
  },
  async save(companyId: string, values: ApplicationConfigurationInput, id?: string) {
    return ApplicationConfigurationResponseSchema.parse(await request(companyId, values, id));
  },
};