Mattsson
e11f70b347
* refactor: optimize page loading and data fetching * fix: resolve recurring production runtime errors * feat: add MCP company and customer updates * fix: handle year-end tax adjustments * feat: harden annual report compliance * fix: expand invoice logo and font support * fix: sanitize API route error responses * fix: sanitize user-facing error messages * feat: persist onboarding and tax assessment notices * fix: reduce cloud backup audit churn * feat: refine invoice editor layout * fix: show saved tax adjustments in INK2 * fix: complete annual report API mappings * docs: record operational safeguards and decisions * fix: harden annual report review findings * fix: adjust column span for description based on VAT registration * New css class name
43 lines
1.5 KiB
TypeScript
43 lines
1.5 KiB
TypeScript
import { NextResponse } from 'next/server'
|
|
import { withRouteContext } from '@/lib/api/with-route-context'
|
|
import { z } from 'zod'
|
|
import { validateBody } from '@/lib/api/validate'
|
|
import { getErrorMessage as getUserErrorMessage } from '@/lib/errors/get-error-message'
|
|
|
|
const UpdateNotesSchema = z.object({
|
|
notes: z.string().max(2000).nullable(),
|
|
})
|
|
|
|
// Notes are annotation metadata alongside the verifikat (not räkenskaps-
|
|
// information) — the immutability trigger governs what may change on posted
|
|
// entries; this route just scopes and validates.
|
|
export const PATCH = withRouteContext<{ params: Promise<{ id: string }> }>(
|
|
'bookkeeping.journal_entry.notes',
|
|
async (request, { supabase, companyId }, { params }) => {
|
|
const { id } = await params
|
|
|
|
const result = await validateBody(request, UpdateNotesSchema)
|
|
if (!result.success) return result.response
|
|
|
|
const { data, error } = await supabase
|
|
.from('journal_entries')
|
|
.update({ notes: result.data.notes })
|
|
.eq('id', id)
|
|
.eq('company_id', companyId)
|
|
.select('id')
|
|
.maybeSingle()
|
|
|
|
if (error) {
|
|
return NextResponse.json({ error: getUserErrorMessage(error) }, { status: 400 })
|
|
}
|
|
// Zero rows = the entry doesn't exist in this company — report it instead
|
|
// of a phantom success.
|
|
if (!data) {
|
|
return NextResponse.json({ error: 'Verifikationen hittades inte.' }, { status: 404 })
|
|
}
|
|
|
|
return NextResponse.json({ data: { updated: true } })
|
|
},
|
|
{ requireWrite: true },
|
|
)
|