nexarch/web/workflow-approvals/lib/api.ts

// Duenner Client fuer die eigenen Backend-for-Frontend-Routen unter
// app/api/approvals — kein direkter Zugriff auf die Workflow-API vom
// Client aus (Rolle: "Alle Daten ausschliesslich ueber die oeffentliche
// Schnittstelle beziehen").

import { apiFetch } from "./http";

export class ApiError extends Error {
  status: number;
  constructor(message: string, status: number) {
    super(message);
    this.status = status;
  }
}

export interface ApprovalTask {
  ID: string;
  InstanceID: string;
  Assignee: string;
  Subject: string;
  Status: string;
  DecidedBy: string;
  Reason: string;
}

export async function listApprovals(userId: string): Promise<ApprovalTask[]> {
  const res = await apiFetch(`/api/approvals?userId=${encodeURIComponent(userId)}`, { cache: "no-store" });
  const body = await res.json().catch(() => null);
  if (!res.ok) {
    throw new ApiError(body?.error ?? `Freigaben konnten nicht geladen werden (${res.status})`, res.status);
  }
  return body ?? [];
}

export type Decision = "approved" | "rejected";

export async function decideApproval(
  userId: string,
  id: string,
  decision: Decision,
  reason: string
): Promise<ApprovalTask> {
  const res = await apiFetch(`/api/approvals/${encodeURIComponent(id)}/decide?userId=${encodeURIComponent(userId)}`, {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({ decision, reason }),
  });
  const body = await res.json().catch(() => null);
  if (!res.ok) {
    throw new ApiError(body?.error ?? `Entscheidung fehlgeschlagen (${res.status})`, res.status);
  }
  return body;
}