import { NextResponse } from "next/server" import { and, eq } from "drizzle-orm" import { db } from "@/lib/db" import { tenants, units } from "@/lib/db/schema" import { getSessionUser } from "@/lib/session" import { tenantSchema } from "@/lib/validations" import { ownsProperty, ownsUnit } from "@/lib/db/ownership" export async function GET(_: Request, { params }: { params: Promise<{ id: string }> }) { const user = await getSessionUser() if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 }) const { id } = await params const data = await db.query.tenants.findFirst({ where: and(eq(tenants.id, id), eq(tenants.user_id, user.id)), with: { unit: {}, property: {}, leases: {}, rent_payments: {}, }, }) if (!data) return NextResponse.json({ error: "Not found" }, { status: 404 }) return NextResponse.json(data) } export async function PATCH(request: Request, { params }: { params: Promise<{ id: string }> }) { const user = await getSessionUser() if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 }) const { id } = await params const body = await request.json() const parsed = tenantSchema.partial().safeParse(body) if (!parsed.success) return NextResponse.json({ error: parsed.error.flatten() }, { status: 400 }) if ( !(await ownsProperty(user.id, parsed.data.property_id)) || !(await ownsUnit(user.id, parsed.data.unit_id)) ) { return NextResponse.json({ error: "Invalid reference" }, { status: 403 }) } try { const [data] = await db .update(tenants) .set(parsed.data) .where(and(eq(tenants.id, id), eq(tenants.user_id, user.id))) .returning() return NextResponse.json(data) } catch (e) { return NextResponse.json({ error: (e as Error).message }, { status: 500 }) } } export async function DELETE(_: Request, { params }: { params: Promise<{ id: string }> }) { const user = await getSessionUser() if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 }) const { id } = await params try { // Get tenant to free unit const tenant = await db.query.tenants.findFirst({ where: and(eq(tenants.id, id), eq(tenants.user_id, user.id)), columns: { unit_id: true }, }) await db.delete(tenants).where(and(eq(tenants.id, id), eq(tenants.user_id, user.id))) // Free unit if (tenant?.unit_id) { await db .update(units) .set({ status: "vacant", current_tenant_id: null }) .where(and(eq(units.id, tenant.unit_id), eq(units.user_id, user.id))) } return NextResponse.json({ success: true }) } catch (e) { return NextResponse.json({ error: (e as Error).message }, { status: 500 }) } }