import type { Application, RequestHandler, Response } from "express"; import { Router } from "express"; import { z } from "zod/v4"; import { InventoryParamsSchema, ResourceParamsSchema, SaveResourceRequestSchema, } from "../../../common/inventory"; import type { ResourceUseCases } from "../../application/resource.use-cases"; import { buildResourceResponse } from "../../application/resource-response.builder"; function fail(response: Response, code: string) { response .status(code === "INVALID_REQUEST" ? 400 : code.endsWith("NOT_FOUND") ? 404 : 409) .json({ code, requestId: response.getHeader("x-request-id") }); } export function registerResourceRoutes( app: Application, useCases: ResourceUseCases, authenticate: RequestHandler ) { const router = Router(); router.get("/:companyId", (request, response, next) => { const params = InventoryParamsSchema.safeParse(request.params); if (!(params.success && z.strictObject({}).safeParse(request.query).success)) { fail(response, "INVALID_REQUEST"); return; } useCases .get(params.data.companyId) .then((result) => { if (!result.isSuccess) { fail(response, result.error.code); return; } response.json({ resources: result.data.resources.map((resource) => buildResourceResponse(resource, result.data.actorNames) ), }); }) .catch(next); }); for (const path of ["/:companyId", "/:companyId/:id/update"]) { router.post(path, (request, response, next) => { const params = ( path.endsWith("update") ? ResourceParamsSchema : InventoryParamsSchema ).safeParse(request.params); const body = SaveResourceRequestSchema.safeParse(request.body); const actor = z .object({ userId: z.uuid() }) .safeParse("session" in request ? request.session : undefined); if (!(params.success && body.success && actor.success)) { fail(response, "INVALID_REQUEST"); return; } const id = "id" in params.data && typeof params.data.id === "string" ? params.data.id : undefined; useCases .save(params.data.companyId, id, body.data.values, actor.data.userId) .then((result) => { if (!result.isSuccess) { fail(response, result.error.code); return; } response.status(id ? 200 : 201).json({ resource: buildResourceResponse(result.data.resource, result.data.actorNames), }); }) .catch(next); }); } app.use("/api/resources", authenticate, router); }