import { NextResponse } from "next/server" import { and, eq } from "drizzle-orm" import { db } from "@/lib/db" import { properties } from "@/lib/db/schema" import { getSessionUser } from "@/lib/session" import { propertySchema } from "@/lib/validations" import { getEffectiveOwnerId, getAccountContext } from "@/lib/account" import { geocodeAddress } from "@/lib/geocoding" export async function GET(_: Request, { params }: { params: Promise<{ id: string }> }) { const user = await getSessionUser() if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 }) const ownerId = await getEffectiveOwnerId(user.id) const { id } = await params const data = await db.query.properties.findFirst({ where: and(eq(properties.id, id), eq(properties.user_id, ownerId)), with: { units: {} }, }) if (!data) return NextResponse.json({ error: "Not found" }, { status: 404 }) return NextResponse.json(data) } export async function PATCH(request: Request, { params }: { params: Promise<{ id: string }> }) { const user = await getSessionUser() if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 }) const ctx = await getAccountContext(user.id) const ownerId = ctx.ownerId if (!ctx.canWrite) return NextResponse.json({ error: "Forbidden" }, { status: 403 }) const { id } = await params const body = await request.json() const parsed = propertySchema.partial().safeParse(body) if (!parsed.success) return NextResponse.json({ error: parsed.error.flatten() }, { status: 400 }) // Re-geocode only when an address field actually changed. Merge with the // existing row so a partial update still geocodes the complete address. Keep // the old coordinates if geocoding fails (never overwrite good data with null). const addressKeys = ["address_line1", "address_line2", "city", "state", "postal_code", "country"] as const let coords: { latitude: number; longitude: number } | undefined if (addressKeys.some((k) => k in parsed.data)) { const existing = await db.query.properties.findFirst({ where: and(eq(properties.id, id), eq(properties.user_id, ownerId)), columns: { address_line1: true, address_line2: true, city: true, state: true, postal_code: true, country: true }, }) if (existing) { const geo = await geocodeAddress({ ...existing, ...parsed.data }) if (geo) coords = geo } } try { const [data] = await db .update(properties) .set({ ...parsed.data, ...(coords ?? {}) }) .where(and(eq(properties.id, id), eq(properties.user_id, ownerId))) .returning() return NextResponse.json(data) } catch (e) { return NextResponse.json({ error: (e as Error).message }, { status: 500 }) } } export async function DELETE(_: Request, { params }: { params: Promise<{ id: string }> }) { const user = await getSessionUser() if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 }) const ctx = await getAccountContext(user.id) const ownerId = ctx.ownerId if (!ctx.canWrite) return NextResponse.json({ error: "Forbidden" }, { status: 403 }) const { id } = await params try { await db.delete(properties).where(and(eq(properties.id, id), eq(properties.user_id, ownerId))) return NextResponse.json({ success: true }) } catch (e) { return NextResponse.json({ error: (e as Error).message }, { status: 500 }) } }