feat: categories + tariffs — migration, API routes, frontend integration

2026-03-23 11:42:29 +03:00
parent b494224af0
commit 5c40b154d0
7 changed files with 459 additions and 64 deletions
--- a/backend/src/routes/categories.ts
+++ b/backend/src/routes/categories.ts
@@ -0,0 +1,105 @@
+import { FastifyPluginAsync } from 'fastify'
+import { db } from '../db'
+
+type SlugParam   = { Params: { slug: string } }
+type SlugIdParam = { Params: { slug: string; id: string } }
+
+const categories: FastifyPluginAsync = async (fastify) => {
+  const getHotelId = async (slug: string): Promise<string | null> => {
+    const { rows } = await db.query('SELECT id FROM hotels WHERE slug = $1', [slug])
+    return rows[0]?.id ?? null
+  }
+
+  const canAccess = (userSlug: string | null, role: string, slug: string) =>
+    role === 'super_admin' || userSlug === slug
+
+  // GET /api/hotels/:slug/categories
+  fastify.get<SlugParam>(
+    '/api/hotels/:slug/categories',
+    { onRequest: [fastify.authenticate] },
+    async (request, reply) => {
+      const { slug } = request.params
+      if (!canAccess(request.user.hotelSlug, request.user.role, slug))
+        return reply.code(403).send({ error: 'Forbidden' })
+      const hotelId = await getHotelId(slug)
+      if (!hotelId) return reply.code(404).send({ error: 'Hotel not found' })
+      const { rows } = await db.query(
+        `SELECT * FROM room_categories WHERE hotel_id = $1 ORDER BY sort_order, created_at`,
+        [hotelId],
+      )
+      return rows
+    },
+  )
+
+  // POST /api/hotels/:slug/categories
+  fastify.post<SlugParam & { Body: {
+    name: string; description?: string; color?: string
+    amenities?: string[]; photos?: string[]; sort_order?: number
+  } }>(
+    '/api/hotels/:slug/categories',
+    { onRequest: [fastify.authenticate] },
+    async (request, reply) => {
+      const { slug } = request.params
+      if (!canAccess(request.user.hotelSlug, request.user.role, slug))
+        return reply.code(403).send({ error: 'Forbidden' })
+      const hotelId = await getHotelId(slug)
+      if (!hotelId) return reply.code(404).send({ error: 'Hotel not found' })
+      const { name, description = '', color = '#4F46E5', amenities = [], photos = [], sort_order = 0 } = request.body
+      const { rows } = await db.query(
+        `INSERT INTO room_categories (hotel_id, name, description, color, amenities, photos, sort_order)
+         VALUES ($1,$2,$3,$4,$5,$6,$7) RETURNING *`,
+        [hotelId, name, description, color, amenities, photos, sort_order],
+      )
+      return reply.code(201).send(rows[0])
+    },
+  )
+
+  // PATCH /api/hotels/:slug/categories/:id
+  fastify.patch<SlugIdParam & { Body: {
+    name?: string; description?: string; color?: string
+    amenities?: string[]; photos?: string[]; sort_order?: number
+  } }>(
+    '/api/hotels/:slug/categories/:id',
+    { onRequest: [fastify.authenticate] },
+    async (request, reply) => {
+      const { slug, id } = request.params
+      if (!canAccess(request.user.hotelSlug, request.user.role, slug))
+        return reply.code(403).send({ error: 'Forbidden' })
+      const hotelId = await getHotelId(slug)
+      if (!hotelId) return reply.code(404).send({ error: 'Hotel not found' })
+      const b = request.body
+      const sets: string[] = ['updated_at = NOW()']
+      const vals: unknown[] = [hotelId, id]
+      let i = 3
+      if (b.name        !== undefined) { sets.push(`name = $${i++}`);        vals.push(b.name) }
+      if (b.description !== undefined) { sets.push(`description = $${i++}`); vals.push(b.description) }
+      if (b.color       !== undefined) { sets.push(`color = $${i++}`);       vals.push(b.color) }
+      if (b.amenities   !== undefined) { sets.push(`amenities = $${i++}`);   vals.push(b.amenities) }
+      if (b.photos      !== undefined) { sets.push(`photos = $${i++}`);      vals.push(b.photos) }
+      if (b.sort_order  !== undefined) { sets.push(`sort_order = $${i++}`);  vals.push(b.sort_order) }
+      const { rows } = await db.query(
+        `UPDATE room_categories SET ${sets.join(', ')} WHERE hotel_id=$1 AND id=$2 RETURNING *`,
+        vals,
+      )
+      if (!rows[0]) return reply.code(404).send({ error: 'Not found' })
+      return rows[0]
+    },
+  )
+
+  // DELETE /api/hotels/:slug/categories/:id
+  fastify.delete<SlugIdParam>(
+    '/api/hotels/:slug/categories/:id',
+    { onRequest: [fastify.authenticate] },
+    async (request, reply) => {
+      const { slug, id } = request.params
+      if (!canAccess(request.user.hotelSlug, request.user.role, slug))
+        return reply.code(403).send({ error: 'Forbidden' })
+      const hotelId = await getHotelId(slug)
+      if (!hotelId) return reply.code(404).send({ error: 'Hotel not found' })
+      await db.query('DELETE FROM room_categories WHERE hotel_id=$1 AND id=$2', [hotelId, id])
+      return reply.code(204).send()
+    },
+  )
+}
+
+export default categories