import { createClient } from '@/lib/supabase/server' import { NextResponse } from 'next/server' /** * GET /api/import/sie/[id] * Get details of a specific SIE import */ export async function GET( request: Request, { params }: { params: Promise<{ id: string }> } ) { const supabase = await createClient() const { id } = await params const { data: { user }, } = await supabase.auth.getUser() if (!user) { return NextResponse.json({ error: 'Unauthorized' }, { status: 401 }) } const { data, error } = await supabase .from('sie_imports') .select('*') .eq('id', id) .eq('user_id', user.id) .single() if (error) { return NextResponse.json({ error: error.message }, { status: 500 }) } if (!data) { return NextResponse.json({ error: 'Import not found' }, { status: 404 }) } return NextResponse.json({ data }) } /** * DELETE /api/import/sie/[id] * Delete an import record. * * Only failed or pending imports can be deleted. Completed imports have created * journal entries that are part of räkenskapsinformation — deleting the metadata * without reversing entries would leave orphaned bookkeeping data, and deleting * both is prohibited under BFL 7 kap (7-year retention). */ export async function DELETE( request: Request, { params }: { params: Promise<{ id: string }> } ) { const supabase = await createClient() const { id } = await params const { data: { user }, } = await supabase.auth.getUser() if (!user) { return NextResponse.json({ error: 'Unauthorized' }, { status: 401 }) } // Check current status before deleting const { data: importRecord } = await supabase .from('sie_imports') .select('status') .eq('id', id) .eq('user_id', user.id) .single() if (!importRecord) { return NextResponse.json({ error: 'Import not found' }, { status: 404 }) } if (importRecord.status === 'completed') { return NextResponse.json({ error: 'Slutförd import kan inte raderas. Importerade verifikationer ingår i räkenskapsinformationen (BFL 7 kap).', }, { status: 403 }) } const { error } = await supabase .from('sie_imports') .delete() .eq('id', id) .eq('user_id', user.id) if (error) { return NextResponse.json({ error: error.message }, { status: 500 }) } return NextResponse.json({ success: true }) }