base commit

2026-04-29 19:14:34 +05:00
parent c1773e5c57
commit bfc9661d22
25 changed files with 1885 additions and 3 deletions
@@ -60,7 +60,7 @@ export async function registerApiRoutes(fastify) {
    return prisma.category.findMany({ orderBy: { sort: 'asc' } })
  })

-  fastify.get('/api/products', async (request) => {
+  fastify.get('/api/products', async (request, reply) => {
    const { categorySlug } = request.query
    const qRaw = request.query?.q
    const q = typeof qRaw === 'string' ? qRaw.trim() : ''
@@ -141,6 +141,71 @@ export async function registerApiRoutes(fastify) {
    return mapProductForApi(product)
  })

+  // ---- Отзывы к товарам ----
+
+  fastify.get('/api/products/:id/reviews', async (request, reply) => {
+    const { id } = request.params
+
+    const pageRaw = request.query?.page
+    const pageParsed = typeof pageRaw === 'string' ? Number(pageRaw) : Number(pageRaw)
+    const page = Number.isFinite(pageParsed) && pageParsed > 0 ? Math.floor(pageParsed) : 1
+
+    const pageSizeRaw = request.query?.pageSize
+    const pageSizeParsed = typeof pageSizeRaw === 'string' ? Number(pageSizeRaw) : Number(pageSizeRaw)
+    const pageSize = Number.isFinite(pageSizeParsed) && pageSizeParsed > 0 ? Math.floor(pageSizeParsed) : 10
+    if (pageSize > 50) return reply.code(400).send({ error: 'pageSize должен быть ≤ 50' })
+
+    const product = await prisma.product.findFirst({ where: { id, published: true } })
+    if (!product) return reply.code(404).send({ error: 'Товар не найден' })
+
+    const where = { productId: id, status: 'approved' }
+    const total = await prisma.review.count({ where })
+    const items = await prisma.review.findMany({
+      where,
+      include: { user: { select: { id: true, name: true, email: true } } },
+      orderBy: { createdAt: 'desc' },
+      skip: (page - 1) * pageSize,
+      take: pageSize,
+    })
+
+    return { items, total, page, pageSize }
+  })
+
+  fastify.post(
+    '/api/products/:id/reviews',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const { id: productId } = request.params
+
+      const product = await prisma.product.findFirst({ where: { id: productId, published: true } })
+      if (!product) return reply.code(404).send({ error: 'Товар не найден' })
+
+      const rating = Number(request.body?.rating)
+      if (!Number.isFinite(rating) || rating < 1 || rating > 5) {
+        return reply.code(400).send({ error: 'rating должен быть от 1 до 5' })
+      }
+      const textRaw = request.body?.text
+      const text = textRaw === null || textRaw === undefined ? null : String(textRaw).trim()
+      if (text !== null && text.length > 1000) return reply.code(400).send({ error: 'Отзыв слишком длинный' })
+
+      try {
+        const created = await prisma.review.create({
+          data: {
+            productId,
+            userId,
+            rating: Math.floor(rating),
+            text: text && text.length ? text : null,
+            status: 'pending',
+          },
+        })
+        return reply.code(201).send({ item: created })
+      } catch {
+        return reply.code(409).send({ error: 'Вы уже оставляли отзыв на этот товар' })
+      }
+    },
+  )
+
  // ---- Админ (тот же фронт, другой раздел) ----

  fastify.get(
@@ -423,6 +488,186 @@ export async function registerApiRoutes(fastify) {
    },
  )

+  // ---- Админ: заказы ----
+
+  function canTransition(from, to) {
+    if (from === to) return true
+    const allowed = {
+      DRAFT: new Set(['PENDING_PAYMENT', 'CANCELLED']),
+      PENDING_PAYMENT: new Set(['PAID', 'CANCELLED']),
+      PAID: new Set(['IN_PROGRESS', 'CANCELLED']),
+      IN_PROGRESS: new Set(['SHIPPED', 'CANCELLED']),
+      SHIPPED: new Set(['DONE']),
+      DONE: new Set([]),
+      CANCELLED: new Set([]),
+    }
+    return Boolean(allowed[from]?.has(to))
+  }
+
+  fastify.get(
+    '/api/admin/orders',
+    { preHandler: [fastify.verifyAdmin] },
+    async (request, reply) => {
+      const status = typeof request.query?.status === 'string' ? request.query.status.trim() : ''
+      const q = typeof request.query?.q === 'string' ? request.query.q.trim() : ''
+
+      const pageRaw = request.query?.page
+      const pageParsed = typeof pageRaw === 'string' ? Number(pageRaw) : Number(pageRaw)
+      const page = Number.isFinite(pageParsed) && pageParsed > 0 ? Math.floor(pageParsed) : 1
+
+      const pageSizeRaw = request.query?.pageSize
+      const pageSizeParsed = typeof pageSizeRaw === 'string' ? Number(pageSizeRaw) : Number(pageSizeRaw)
+      const pageSize = Number.isFinite(pageSizeParsed) && pageSizeParsed > 0 ? Math.floor(pageSizeParsed) : 20
+      if (pageSize > 100) return reply.code(400).send({ error: 'pageSize должен быть ≤ 100' })
+
+      const where = {}
+      if (status) where.status = status
+      if (q) {
+        where.OR = [
+          { id: { contains: q } },
+          { user: { email: { contains: q } } },
+        ]
+      }
+
+      const total = await prisma.order.count({ where })
+      const items = await prisma.order.findMany({
+        where,
+        include: { user: { select: { id: true, email: true } }, items: true },
+        orderBy: { createdAt: 'desc' },
+        skip: (page - 1) * pageSize,
+        take: pageSize,
+      })
+
+      return {
+        items: items.map((o) => ({
+          id: o.id,
+          status: o.status,
+          totalCents: o.totalCents,
+          currency: o.currency,
+          createdAt: o.createdAt,
+          updatedAt: o.updatedAt,
+          user: o.user,
+          itemsCount: o.items.reduce((s, i) => s + i.qty, 0),
+        })),
+        total,
+        page,
+        pageSize,
+      }
+    },
+  )
+
+  fastify.get(
+    '/api/admin/orders/:id',
+    { preHandler: [fastify.verifyAdmin] },
+    async (request, reply) => {
+      const { id } = request.params
+      const order = await prisma.order.findUnique({
+        where: { id },
+        include: {
+          user: { select: { id: true, email: true, name: true, phone: true } },
+          items: true,
+          messages: { orderBy: { createdAt: 'asc' } },
+        },
+      })
+      if (!order) return reply.code(404).send({ error: 'Заказ не найден' })
+      return { item: order }
+    },
+  )
+
+  fastify.patch(
+    '/api/admin/orders/:id/status',
+    { preHandler: [fastify.verifyAdmin] },
+    async (request, reply) => {
+      const { id } = request.params
+      const next = String(request.body?.status || '').trim()
+      if (!next) return reply.code(400).send({ error: 'status обязателен' })
+
+      const existing = await prisma.order.findUnique({ where: { id } })
+      if (!existing) return reply.code(404).send({ error: 'Заказ не найден' })
+      if (!canTransition(existing.status, next)) {
+        return reply.code(409).send({ error: `Нельзя сменить статус ${existing.status} → ${next}` })
+      }
+
+      const updated = await prisma.order.update({ where: { id }, data: { status: next } })
+      return { item: updated }
+    },
+  )
+
+  fastify.post(
+    '/api/admin/orders/:id/messages',
+    { preHandler: [fastify.verifyAdmin] },
+    async (request, reply) => {
+      const { id } = request.params
+      const text = String(request.body?.text || '').trim()
+      if (!text) return reply.code(400).send({ error: 'Сообщение пустое' })
+      if (text.length > 2000) return reply.code(400).send({ error: 'Сообщение слишком длинное' })
+
+      const order = await prisma.order.findUnique({ where: { id } })
+      if (!order) return reply.code(404).send({ error: 'Заказ не найден' })
+
+      const msg = await prisma.orderMessage.create({ data: { orderId: id, authorType: 'admin', text } })
+      return reply.code(201).send({ item: msg })
+    },
+  )
+
+  // ---- Админ: отзывы (модерация) ----
+
+  fastify.get(
+    '/api/admin/reviews',
+    { preHandler: [fastify.verifyAdmin] },
+    async (request, reply) => {
+      const status = typeof request.query?.status === 'string' ? request.query.status.trim() : 'pending'
+
+      const pageRaw = request.query?.page
+      const pageParsed = typeof pageRaw === 'string' ? Number(pageRaw) : Number(pageRaw)
+      const page = Number.isFinite(pageParsed) && pageParsed > 0 ? Math.floor(pageParsed) : 1
+
+      const pageSizeRaw = request.query?.pageSize
+      const pageSizeParsed = typeof pageSizeRaw === 'string' ? Number(pageSizeRaw) : Number(pageSizeRaw)
+      const pageSize = Number.isFinite(pageSizeParsed) && pageSizeParsed > 0 ? Math.floor(pageSizeParsed) : 20
+      if (pageSize > 100) return reply.code(400).send({ error: 'pageSize должен быть ≤ 100' })
+
+      const where = status ? { status } : {}
+      const total = await prisma.review.count({ where })
+      const items = await prisma.review.findMany({
+        where,
+        include: {
+          user: { select: { id: true, email: true, name: true } },
+          product: { select: { id: true, title: true } },
+        },
+        orderBy: { createdAt: 'desc' },
+        skip: (page - 1) * pageSize,
+        take: pageSize,
+      })
+
+      return { items, total, page, pageSize }
+    },
+  )
+
+  fastify.patch(
+    '/api/admin/reviews/:id',
+    { preHandler: [fastify.verifyAdmin] },
+    async (request, reply) => {
+      const { id } = request.params
+      const action = String(request.body?.action || '').trim()
+      if (action !== 'approve' && action !== 'reject') {
+        return reply.code(400).send({ error: 'action должен быть approve или reject' })
+      }
+
+      const existing = await prisma.review.findUnique({ where: { id } })
+      if (!existing) return reply.code(404).send({ error: 'Отзыв не найден' })
+
+      const updated = await prisma.review.update({
+        where: { id },
+        data: {
+          status: action === 'approve' ? 'approved' : 'rejected',
+          moderatedAt: new Date(),
+        },
+      })
+      return { item: updated }
+    },
+  )
+
  // ---- Админ: пользователи ----

  fastify.get(
@@ -355,5 +355,239 @@ export async function registerAuthRoutes(fastify) {
      return { item: updated }
    },
  )
+
+  // ---- Корзина ----
+
+  fastify.get(
+    '/api/me/cart',
+    { preHandler: [fastify.authenticate] },
+    async (request) => {
+      const userId = request.user.sub
+      const items = await prisma.cartItem.findMany({
+        where: { userId },
+        include: { product: { include: { category: true, images: { orderBy: { sort: 'asc' } } } } },
+        orderBy: { createdAt: 'asc' },
+      })
+      return {
+        items: items.map((x) => ({
+          id: x.id,
+          qty: x.qty,
+          product: x.product,
+        })),
+      }
+    },
+  )
+
+  fastify.post(
+    '/api/me/cart/items',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const productId = String(request.body?.productId || '').trim()
+      const qtyRaw = request.body?.qty
+      const qty = qtyRaw === undefined || qtyRaw === null || qtyRaw === '' ? 1 : Number(qtyRaw)
+
+      if (!productId) return reply.code(400).send({ error: 'productId обязателен' })
+      if (!Number.isFinite(qty) || qty <= 0) return reply.code(400).send({ error: 'qty должен быть > 0' })
+
+      const product = await prisma.product.findFirst({ where: { id: productId, published: true } })
+      if (!product) return reply.code(404).send({ error: 'Товар не найден' })
+
+      const item = await prisma.cartItem.upsert({
+        where: { userId_productId: { userId, productId } },
+        update: { qty: { increment: Math.floor(qty) } },
+        create: { userId, productId, qty: Math.floor(qty) },
+      })
+      return reply.code(201).send({ item })
+    },
+  )
+
+  fastify.patch(
+    '/api/me/cart/items/:id',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const { id } = request.params
+      const qtyRaw = request.body?.qty
+      const qty = Number(qtyRaw)
+      if (!Number.isFinite(qty) || qty < 0) return reply.code(400).send({ error: 'qty должен быть ≥ 0' })
+
+      const existing = await prisma.cartItem.findFirst({ where: { id, userId } })
+      if (!existing) return reply.code(404).send({ error: 'Позиция корзины не найдена' })
+
+      if (qty === 0) {
+        await prisma.cartItem.delete({ where: { id } })
+        return reply.code(204).send()
+      }
+
+      const updated = await prisma.cartItem.update({ where: { id }, data: { qty: Math.floor(qty) } })
+      return { item: updated }
+    },
+  )
+
+  fastify.delete(
+    '/api/me/cart/items/:id',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const { id } = request.params
+      const existing = await prisma.cartItem.findFirst({ where: { id, userId } })
+      if (!existing) return reply.code(404).send({ error: 'Позиция корзины не найдена' })
+      await prisma.cartItem.delete({ where: { id } })
+      return reply.code(204).send()
+    },
+  )
+
+  // ---- Заказы (checkout) ----
+
+  fastify.post(
+    '/api/me/orders',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const addressId = String(request.body?.addressId || '').trim()
+      const commentRaw = request.body?.comment
+      const comment = commentRaw === null || commentRaw === undefined ? null : String(commentRaw).trim()
+
+      if (!addressId) return reply.code(400).send({ error: 'Выберите адрес доставки' })
+
+      const address = await prisma.shippingAddress.findFirst({ where: { id: addressId, userId } })
+      if (!address) return reply.code(404).send({ error: 'Адрес не найден' })
+
+      const cartItems = await prisma.cartItem.findMany({
+        where: { userId },
+        include: { product: true },
+      })
+      if (cartItems.length === 0) return reply.code(400).send({ error: 'Корзина пуста' })
+
+      const itemsPayload = cartItems.map((ci) => ({
+        productId: ci.productId,
+        qty: ci.qty,
+        titleSnapshot: ci.product.title,
+        priceCentsSnapshot: ci.product.priceCents,
+      }))
+
+      const totalCents = itemsPayload.reduce((sum, i) => sum + i.priceCentsSnapshot * i.qty, 0)
+      const addressSnapshotJson = JSON.stringify({
+        id: address.id,
+        label: address.label,
+        recipientName: address.recipientName,
+        recipientPhone: address.recipientPhone,
+        addressLine: address.addressLine,
+        comment: address.comment,
+        lat: address.lat,
+        lng: address.lng,
+      })
+
+      const created = await prisma.$transaction(async (tx) => {
+        const order = await tx.order.create({
+          data: {
+            userId,
+            status: 'PENDING_PAYMENT',
+            totalCents,
+            currency: 'RUB',
+            addressSnapshotJson,
+            comment: comment && comment.length ? comment : null,
+            items: {
+              create: itemsPayload.map((i) => ({
+                productId: i.productId,
+                qty: i.qty,
+                titleSnapshot: i.titleSnapshot,
+                priceCentsSnapshot: i.priceCentsSnapshot,
+              })),
+            },
+          },
+        })
+        await tx.cartItem.deleteMany({ where: { userId } })
+        return order
+      })
+
+      return reply.code(201).send({ orderId: created.id })
+    },
+  )
+
+  fastify.get(
+    '/api/me/orders',
+    { preHandler: [fastify.authenticate] },
+    async (request) => {
+      const userId = request.user.sub
+      const orders = await prisma.order.findMany({
+        where: { userId },
+        include: { items: true },
+        orderBy: { createdAt: 'desc' },
+      })
+      return {
+        items: orders.map((o) => ({
+          id: o.id,
+          status: o.status,
+          totalCents: o.totalCents,
+          currency: o.currency,
+          createdAt: o.createdAt,
+          updatedAt: o.updatedAt,
+          itemsCount: o.items.reduce((s, i) => s + i.qty, 0),
+        })),
+      }
+    },
+  )
+
+  fastify.get(
+    '/api/me/orders/:id',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const { id } = request.params
+      const order = await prisma.order.findFirst({
+        where: { id, userId },
+        include: { items: true, messages: { orderBy: { createdAt: 'asc' } } },
+      })
+      if (!order) return reply.code(404).send({ error: 'Заказ не найден' })
+      return { item: order }
+    },
+  )
+
+  fastify.get(
+    '/api/me/orders/:id/messages',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const { id } = request.params
+      const order = await prisma.order.findFirst({ where: { id, userId } })
+      if (!order) return reply.code(404).send({ error: 'Заказ не найден' })
+      const items = await prisma.orderMessage.findMany({ where: { orderId: id }, orderBy: { createdAt: 'asc' } })
+      return { items }
+    },
+  )
+
+  fastify.post(
+    '/api/me/orders/:id/messages',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const { id } = request.params
+      const order = await prisma.order.findFirst({ where: { id, userId } })
+      if (!order) return reply.code(404).send({ error: 'Заказ не найден' })
+      const text = String(request.body?.text || '').trim()
+      if (!text) return reply.code(400).send({ error: 'Сообщение пустое' })
+      if (text.length > 2000) return reply.code(400).send({ error: 'Сообщение слишком длинное' })
+      const msg = await prisma.orderMessage.create({ data: { orderId: id, authorType: 'user', text } })
+      return reply.code(201).send({ item: msg })
+    },
+  )
+
+  fastify.post(
+    '/api/me/orders/:id/pay',
+    { preHandler: [fastify.authenticate] },
+    async (request, reply) => {
+      const userId = request.user.sub
+      const { id } = request.params
+      const order = await prisma.order.findFirst({ where: { id, userId } })
+      if (!order) return reply.code(404).send({ error: 'Заказ не найден' })
+      // Заглушка: пока ничего не оплачиваем, просто подтверждаем намерение оплатить
+      if (order.status === 'DRAFT') {
+        await prisma.order.update({ where: { id }, data: { status: 'PENDING_PAYMENT' } })
+      }
+      return { ok: true, status: order.status === 'DRAFT' ? 'PENDING_PAYMENT' : order.status }
+    },
+  )
 }