L5 Berichte & Unterschrift: Server Actions und API v1

Actions mit moduleGuard("reports"); POST daily-report/completion-report, POST approve,
GET pdf sowie Dateiauslieferung für im Bericht referenzierte Dokumente.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/app/api/v1/reports/[id]/approve/route.ts

@@ -0,0 +1,11 @@
+import { approveReport } from "@/server/services/reports/approve";
+import { reportDto, withReportsApi } from "@/server/services/reports/http";
+
+/** POST /api/v1/reports/:id/approve — team lead → team_approved, backoffice → approved (+ PDF job). */
+export async function POST(_req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params;
+  return withReportsApi(["report:read"], async (ctx) => {
+    const report = await approveReport(ctx, { reportId: id });
+    return Response.json({ report: reportDto(report) });
+  });
+}

src/app/api/v1/reports/[id]/files/[documentId]/route.ts

@@ -0,0 +1,9 @@
+import { fileResponse, openReportFile } from "@/server/services/reports/files";
+import { withReportsApi } from "@/server/services/reports/http";
+
+/** GET /api/v1/reports/:id/files/:documentId — photo/signature/logo referenced by the report snapshot. */
+export async function GET(req: Request, { params }: { params: Promise<{ id: string; documentId: string }> }) {
+  const { id, documentId } = await params;
+  const download = new URL(req.url).searchParams.get("download") === "1";
+  return withReportsApi(["report:read"], async (ctx) => fileResponse(await openReportFile(ctx, id, documentId), { download }));
+}

src/app/api/v1/reports/[id]/pdf/route.ts

@@ -0,0 +1,9 @@
+import { fileResponse, openReportFile } from "@/server/services/reports/files";
+import { withReportsApi } from "@/server/services/reports/http";
+
+/** GET /api/v1/reports/:id/pdf — the immutable PDF of an approved report (?download=1 for attachment). */
+export async function GET(req: Request, { params }: { params: Promise<{ id: string }> }) {
+  const { id } = await params;
+  const download = new URL(req.url).searchParams.get("download") === "1";
+  return withReportsApi(["report:read"], async (ctx) => fileResponse(await openReportFile(ctx, id, "pdf"), { download }));
+}