feat(api): REST-Endpunkte fuer Projekte, Notizen, Verbindungen und Sync

Alles, was die Oberflaeche kann, ist damit auch scriptbar:

  GET  POST           /api/projects
  GET  PATCH DELETE   /api/projects/:id
  POST                /api/projects/:id/sync
  GET  POST           /api/projects/:id/notes
  PATCH DELETE        /api/notes/:id
  GET  POST           /api/connections
  PATCH DELETE        /api/connections/:id
  POST                /api/connections/:id/check
  GET                 /api/connections/:id/repos
  GET                 /api/health

Details:
- Jede Eingabe laeuft durch Zod; Feldfehler kommen als Objekt zurueck, damit
  Formulare sie direkt anzeigen koennen.
- Beim Anlegen werden Owner und Repo-Name aus der URL abgeleitet, falls nicht
  explizit angegeben.
- Ein leeres Token-Feld beim Bearbeiten einer Verbindung laesst das
  gespeicherte Token unveraendert; null entfernt es.
- Verbindungsantworten enthalten nie das Chiffrat, nur einen Hinweis
  wie "ghp_...9f3a".
- /api/health prueft die Datenbank und dient dem Docker-Healthcheck.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Florian Wilde
2026-07-25 19:34:02 +02:00
co-authored by Claude Opus 5
parent 2b657a2638
commit 8f92ec27be
10 changed files with 521 additions and 0 deletions
+54
View File
@@ -0,0 +1,54 @@
import { NextResponse } from "next/server";
import { prisma } from "@/lib/db";
import { formatZodError, noteCreateSchema } from "@/lib/validation";
export const dynamic = "force-dynamic";
type Params = { params: Promise<{ id: string }> };
export async function GET(_request: Request, { params }: Params) {
const { id } = await params;
const notes = await prisma.note.findMany({
where: { projectId: id },
orderBy: [{ pinned: "desc" }, { updatedAt: "desc" }],
});
return NextResponse.json({ notes });
}
export async function POST(request: Request, { params }: Params) {
const { id } = await params;
const project = await prisma.project.findUnique({ where: { id }, select: { id: true } });
if (!project) {
return NextResponse.json({ error: "Projekt nicht gefunden" }, { status: 404 });
}
let body: unknown;
try {
body = await request.json();
} catch {
return NextResponse.json({ error: "Ungueltiger JSON-Body" }, { status: 400 });
}
const parsed = noteCreateSchema.safeParse(body);
if (!parsed.success) {
return NextResponse.json(
{ error: "Validierung fehlgeschlagen", fields: formatZodError(parsed.error) },
{ status: 422 },
);
}
const note = await prisma.note.create({
data: {
projectId: id,
title: parsed.data.title ?? null,
content: parsed.data.content,
pinned: parsed.data.pinned,
},
});
// Projekt "anfassen", damit die Sortierung nach Aktivitaet stimmt.
await prisma.project.update({ where: { id }, data: { updatedAt: new Date() } });
return NextResponse.json({ note }, { status: 201 });
}
+89
View File
@@ -0,0 +1,89 @@
import { NextResponse } from "next/server";
import { prisma } from "@/lib/db";
import { parseRepoUrl } from "@/lib/git";
import { projectDetailInclude, projectListInclude, uniqueSlug } from "@/lib/projects";
import { formatZodError, projectUpdateSchema } from "@/lib/validation";
export const dynamic = "force-dynamic";
type Params = { params: Promise<{ id: string }> };
export async function GET(_request: Request, { params }: Params) {
const { id } = await params;
const project = await prisma.project.findUnique({
where: { id },
include: projectDetailInclude,
});
if (!project) {
return NextResponse.json({ error: "Projekt nicht gefunden" }, { status: 404 });
}
return NextResponse.json({ project });
}
export async function PATCH(request: Request, { params }: Params) {
const { id } = await params;
let body: unknown;
try {
body = await request.json();
} catch {
return NextResponse.json({ error: "Ungueltiger JSON-Body" }, { status: 400 });
}
const parsed = projectUpdateSchema.safeParse(body);
if (!parsed.success) {
return NextResponse.json(
{ error: "Validierung fehlgeschlagen", fields: formatZodError(parsed.error) },
{ status: 422 },
);
}
const existing = await prisma.project.findUnique({ where: { id } });
if (!existing) {
return NextResponse.json({ error: "Projekt nicht gefunden" }, { status: 404 });
}
const data = parsed.data;
const update: Record<string, unknown> = {};
if (data.name !== undefined && data.name !== existing.name) {
update.name = data.name;
update.slug = await uniqueSlug(data.name, id);
}
for (const key of ["summary", "description", "status", "priority", "progress", "accent", "tags", "favorite", "connectionId"] as const) {
if (data[key] !== undefined) update[key] = data[key];
}
if (data.repoUrl !== undefined) {
update.repoUrl = data.repoUrl;
const parsedUrl = data.repoUrl ? parseRepoUrl(data.repoUrl) : null;
if (parsedUrl) {
update.repoOwner = data.repoOwner ?? parsedUrl.owner;
update.repoName = data.repoName ?? parsedUrl.name;
} else if (!data.repoUrl) {
update.repoOwner = null;
update.repoName = null;
}
}
if (data.repoOwner !== undefined) update.repoOwner = data.repoOwner;
if (data.repoName !== undefined) update.repoName = data.repoName;
const project = await prisma.project.update({
where: { id },
data: update,
include: projectListInclude,
});
return NextResponse.json({ project });
}
export async function DELETE(_request: Request, { params }: Params) {
const { id } = await params;
try {
await prisma.project.delete({ where: { id } });
return NextResponse.json({ ok: true });
} catch {
return NextResponse.json({ error: "Projekt nicht gefunden" }, { status: 404 });
}
}
+21
View File
@@ -0,0 +1,21 @@
import { NextResponse } from "next/server";
import { prisma } from "@/lib/db";
import { projectDetailInclude } from "@/lib/projects";
import { syncProject } from "@/lib/sync";
export const dynamic = "force-dynamic";
type Params = { params: Promise<{ id: string }> };
/** Holt Branches, Tags, Commits und Releases beim Git-System ab. */
export async function POST(_request: Request, { params }: Params) {
const { id } = await params;
const result = await syncProject(id);
const project = await prisma.project.findUnique({
where: { id },
include: projectDetailInclude,
});
return NextResponse.json({ ...result, project }, { status: result.ok ? 200 : 502 });
}
+84
View File
@@ -0,0 +1,84 @@
import { NextResponse } from "next/server";
import { prisma } from "@/lib/db";
import { parseRepoUrl } from "@/lib/git";
import { projectListInclude, uniqueSlug } from "@/lib/projects";
import { formatZodError, projectCreateSchema } from "@/lib/validation";
export const dynamic = "force-dynamic";
export async function GET(request: Request) {
const { searchParams } = new URL(request.url);
const status = searchParams.get("status");
const query = searchParams.get("q");
const projects = await prisma.project.findMany({
where: {
...(status ? { status: status as never } : {}),
...(query
? {
OR: [
{ name: { contains: query, mode: "insensitive" as const } },
{ summary: { contains: query, mode: "insensitive" as const } },
{ tags: { has: query.toLowerCase() } },
],
}
: {}),
},
include: projectListInclude,
orderBy: [{ favorite: "desc" }, { updatedAt: "desc" }],
});
return NextResponse.json({ projects });
}
export async function POST(request: Request) {
let body: unknown;
try {
body = await request.json();
} catch {
return NextResponse.json({ error: "Ungueltiger JSON-Body" }, { status: 400 });
}
const parsed = projectCreateSchema.safeParse(body);
if (!parsed.success) {
return NextResponse.json(
{ error: "Validierung fehlgeschlagen", fields: formatZodError(parsed.error) },
{ status: 422 },
);
}
const data = parsed.data;
// Owner/Name aus der URL ableiten, falls nicht explizit angegeben.
let repoOwner = data.repoOwner ?? null;
let repoName = data.repoName ?? null;
if (data.repoUrl && (!repoOwner || !repoName)) {
const parsedUrl = parseRepoUrl(data.repoUrl);
if (parsedUrl) {
repoOwner = repoOwner ?? parsedUrl.owner;
repoName = repoName ?? parsedUrl.name;
}
}
const project = await prisma.project.create({
data: {
name: data.name,
slug: await uniqueSlug(data.name),
summary: data.summary ?? null,
description: data.description ?? null,
status: data.status,
priority: data.priority,
progress: data.progress,
accent: data.accent,
tags: data.tags,
favorite: data.favorite,
repoUrl: data.repoUrl ?? null,
repoOwner,
repoName,
connectionId: data.connectionId ?? null,
},
include: projectListInclude,
});
return NextResponse.json({ project }, { status: 201 });
}