ProjectE/apps/web-legacy/app/api/domains/[domainId]/dashboard/route.ts

// AGENT INSTRUCTION: After every write (INSERT/UPDATE/DELETE), you MUST:
// 1. Insert activity feed entry
// 2. Call pg.notify('project_e_events', JSON.stringify({ type, action, id, workspace_id }))
// See AGENTS.md for full rules.

import { NextRequest, NextResponse } from 'next/server';
import { withAuth, requireWorkspaceAccess, createErrorResponse, ApiError } from '@/lib/auth';
import { recordActivity } from '@/lib/activity';
import { db, domains } from '@project-e/db';
import { eq } from 'drizzle-orm';
import { z } from 'zod';

type RouteContext = { params: Promise<{ domainId: string }> };

const layoutItemSchema = z.object({
  widgetId: z.string(),
  order: z.number().int(),
  enabled: z.boolean(),
  config: z.record(z.string(), z.unknown()).optional(),
});

const updateLayoutSchema = z.object({
  layout: z.array(layoutItemSchema),
});

// GET /api/domains/[domainId]/dashboard — Returns layout (widget order) + widget data
export const GET = withAuth<RouteContext>(async (request: NextRequest, user, context) => {
  const { domainId } = await context!.params;
  await requireWorkspaceAccess(domainId);

  // Verify domain exists
  const [domain] = await db.select({ id: domains.id, name: domains.name, color: domains.color, customFields: domains.customFields })
    .from(domains)
    .where(eq(domains.id, domainId))
    .limit(1);

  if (!domain) {
    return createErrorResponse('NOT_FOUND', 'Domain not found', 404);
  }

  // Dashboard layout is stored in the domain's custom_fields as jsonb
  // We use a convention: dashboard_layout key in custom_fields
  const storedLayout = (domain.customFields as Record<string, unknown>)?.dashboard_layout as Array<{ widgetId: string; order: number; enabled: boolean; config?: Record<string, unknown> }> | undefined;

  const defaultLayout = [
    { widgetId: 'today-tasks', order: 0, enabled: true },
    { widgetId: 'habit-checklist', order: 1, enabled: true },
    { widgetId: 'weekly-stats', order: 2, enabled: true },
    { widgetId: 'project-progress', order: 3, enabled: true },
    { widgetId: 'upcoming-calendar', order: 4, enabled: true },
    { widgetId: 'recent-notes', order: 5, enabled: true },
    { widgetId: 'activity-feed', order: 6, enabled: true },
    { widgetId: 'quick-capture', order: 7, enabled: true },
  ];

  return NextResponse.json({ layout: storedLayout || defaultLayout });
});

// PUT /api/domains/[domainId]/dashboard/layout — Update dashboard layout
export const PUT = withAuth<RouteContext>(async (request: NextRequest, user, context) => {
  const { domainId } = await context!.params;
  await requireWorkspaceAccess(domainId);

  try {
    const body = await request.json();
    const data = updateLayoutSchema.parse(body);

    const [domain] = await db.select({ id: domains.id, customFields: domains.customFields })
      .from(domains)
      .where(eq(domains.id, domainId))
      .limit(1);

    if (!domain) {
      return createErrorResponse('NOT_FOUND', 'Domain not found', 404);
    }

    // Store layout in domain's custom_fields
    const existingFields = (domain.customFields as Record<string, unknown>) || {};
    await db.update(domains)
      .set({
        customFields: { ...existingFields, dashboard_layout: data.layout },
        updatedAt: new Date(),
      })
      .where(eq(domains.id, domainId));

    await recordActivity({
      actor: user.name,
      action: 'updated',
      entityType: 'domain',
      entityId: domainId,
      changes: { dashboardLayout: data.layout },
      workspaceId: domainId,
    });

    return NextResponse.json({ layout: data.layout });
  } catch (error) {
    if (error instanceof z.ZodError) {
      return createErrorResponse('VALIDATION_ERROR', 'Invalid input', 400, error.issues);
    }
    if (error instanceof ApiError) {
      return createErrorResponse(error.code, error.message, error.status);
    }
    console.error('[dashboard PUT] error:', error);
    return createErrorResponse('INTERNAL_ERROR', 'Failed to update dashboard layout', 500);
  }
});