cloudflare-domain-manager/apps/api/src/routes/groups.ts

import type { FastifyInstance } from "fastify";
import { z } from "zod";
import { repos } from "@cfdm/db";
import * as groupService from "../services/group-service.js";
import { recordAudit } from "../lib/audit.js";

export async function groupRoutes(app: FastifyInstance) {
  const bodySchema = z.object({
    name: z.string(),
    slug: z.string(),
  });

  app.get("/groups", async (request) => {
    return groupService.listGroups(request.server.db);
  });

  app.post("/groups", async (request) => {
    const body = bodySchema.parse(request.body);
    const group = groupService.createGroup(request.server.db, body.name, body.slug);
    recordAudit(request.server, request, {
      action: "group.create",
      targetType: "app_resource",
      targetId: String(group.id),
      summary: `Создана группа «${group.name}»`,
      details: { name: group.name, slug: group.slug },
    });
    return group;
  });

  app.get("/groups/:id", async (request) => {
    const { id } = request.params as { id: string };
    return groupService.getGroupWithStats(request.server.db, Number(id));
  });

  app.patch("/groups/:id", async (request) => {
    const { id } = request.params as { id: string };
    const body = bodySchema.parse(request.body);
    const group = groupService.updateGroup(
      request.server.db,
      Number(id),
      body.name,
      body.slug,
    );
    recordAudit(request.server, request, {
      action: "group.update",
      targetType: "app_resource",
      targetId: String(group.id),
      summary: `Обновлена группа «${group.name}»`,
      details: { name: group.name, slug: group.slug },
    });
    return group;
  });

  app.delete("/groups/:id", async (request) => {
    const { id } = request.params as { id: string };
    const group = repos.getGroup(request.server.db, Number(id));
    groupService.deleteGroup(request.server.db, Number(id));
    recordAudit(request.server, request, {
      action: "group.delete",
      severity: "warning",
      targetType: "app_resource",
      targetId: String(id),
      summary: `Удалена группа «${group.name}»`,
      details: { name: group.name, slug: group.slug },
    });
    return { deleted: true };
  });
}