Round 16: Peer Assessment, Emergency Contacts, School Events, School Branding, Email Templates, Performance, Styling Polish, Onboarding 24 Steps

src/app/api/email-templates/[id]/route.ts

@@ -0,0 +1,107 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { db } from '@/lib/db';
+import { getSession } from '@/lib/auth';
+
+export async function GET(
+  _request: Request,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  try {
+    const session = await getSession();
+    if (!session) {
+      return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+    }
+
+    const { id } = await params;
+    const template = await db.emailTemplate.findUnique({
+      where: { id, deletedAt: null },
+    });
+
+    if (!template) {
+      return NextResponse.json({ error: 'Not found' }, { status: 404 });
+    }
+
+    return NextResponse.json(template);
+  } catch (error) {
+    console.error('EmailTemplate GET error:', error);
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+  }
+}
+
+const updateTemplateSchema = z.object({
+  name: z.string().min(1).optional(),
+  subject: z.string().min(1).optional(),
+  body: z.string().min(1).optional(),
+  isDefault: z.boolean().optional(),
+});
+
+export async function PUT(
+  request: Request,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  try {
+    const session = await getSession();
+    if (!session) {
+      return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+    }
+
+    if (
+      session.user?.role !== 'SUPER_ADMIN' &&
+      session.user?.role !== 'SCHOOL_ADMIN'
+    ) {
+      return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
+    }
+
+    const { id } = await params;
+    const body = await request.json();
+    const parsed = updateTemplateSchema.safeParse(body);
+    if (!parsed.success) {
+      return NextResponse.json(
+        { error: 'Validation failed', details: parsed.error.issues },
+        { status: 400 }
+      );
+    }
+
+    const template = await db.emailTemplate.update({
+      where: { id },
+      data: parsed.data,
+    });
+
+    return NextResponse.json(template);
+  } catch (error) {
+    console.error('EmailTemplate PUT error:', error);
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+  }
+}
+
+export async function DELETE(
+  _request: Request,
+  { params }: { params: Promise<{ id: string }> }
+) {
+  try {
+    const session = await getSession();
+    if (!session) {
+      return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+    }
+
+    if (
+      session.user?.role !== 'SUPER_ADMIN' &&
+      session.user?.role !== 'SCHOOL_ADMIN'
+    ) {
+      return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
+    }
+
+    const { id } = await params;
+    // Soft delete
+    await db.emailTemplate.update({
+      where: { id },
+      data: { deletedAt: new Date() },
+    });
+
+    return NextResponse.json({ success: true });
+  } catch (error) {
+    console.error('EmailTemplate DELETE error:', error);
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+  }
+}

src/app/api/email-templates/route.ts

@@ -0,0 +1,75 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { db } from '@/lib/db';
+import { getSession } from '@/lib/auth';
+
+export async function GET(request: Request) {
+  try {
+    const session = await getSession();
+    if (!session) {
+      return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+    }
+
+    const { searchParams } = new URL(request.url);
+    const schoolId = searchParams.get('schoolId') ?? session.user?.schoolId;
+
+    if (!schoolId) {
+      return NextResponse.json({ error: 'School ID required' }, { status: 400 });
+    }
+
+    const templates = await db.emailTemplate.findMany({
+      where: {
+        schoolId,
+        deletedAt: null,
+      },
+      orderBy: { createdAt: 'desc' },
+    });
+
+    return NextResponse.json(templates);
+  } catch (error) {
+    console.error('EmailTemplates GET error:', error);
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+  }
+}
+
+const createTemplateSchema = z.object({
+  schoolId: z.string().min(1),
+  name: z.string().min(1),
+  subject: z.string().min(1),
+  body: z.string().min(1),
+  isDefault: z.boolean().default(false),
+});
+
+export async function POST(request: Request) {
+  try {
+    const session = await getSession();
+    if (!session) {
+      return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+    }
+
+    if (
+      session.user?.role !== 'SUPER_ADMIN' &&
+      session.user?.role !== 'SCHOOL_ADMIN'
+    ) {
+      return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
+    }
+
+    const body = await request.json();
+    const parsed = createTemplateSchema.safeParse(body);
+    if (!parsed.success) {
+      return NextResponse.json(
+        { error: 'Validation failed', details: parsed.error.issues },
+        { status: 400 }
+      );
+    }
+
+    const template = await db.emailTemplate.create({
+      data: parsed.data,
+    });
+
+    return NextResponse.json(template, { status: 201 });
+  } catch (error) {
+    console.error('EmailTemplates POST error:', error);
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+  }
+}

src/app/api/email-templates/send/route.ts

@@ -0,0 +1,95 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+import { db } from '@/lib/db';
+import { getSession } from '@/lib/auth';
+
+const sendSchema = z.object({
+  templateId: z.string().optional(),
+  schoolId: z.string().min(1),
+  recipientEmail: z.string().email(),
+  recipientName: z.string().optional(),
+  subject: z.string().min(1),
+  body: z.string().min(1),
+  isTest: z.boolean().default(false),
+});
+
+export async function POST(request: Request) {
+  try {
+    const session = await getSession();
+    if (!session) {
+      return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+    }
+
+    if (
+      session.user?.role !== 'SUPER_ADMIN' &&
+      session.user?.role !== 'SCHOOL_ADMIN'
+    ) {
+      return NextResponse.json({ error: 'Forbidden' }, { status: 403 });
+    }
+
+    const body = await request.json();
+    const parsed = sendSchema.safeParse(body);
+    if (!parsed.success) {
+      return NextResponse.json(
+        { error: 'Validation failed', details: parsed.error.issues },
+        { status: 400 }
+      );
+    }
+
+    // Replace template variables with sample data
+    const replaceVariables = (text: string, vars: Record<string, string>) => {
+      let result = text;
+      for (const [key, value] of Object.entries(vars)) {
+        result = result.replace(new RegExp(`\\{\\{${key}\\}\\}`, 'g'), value);
+      }
+      return result;
+    };
+
+    const sampleVars: Record<string, string> = {
+      studentName: parsed.data.recipientName || 'Max Mustermann',
+      className: 'Klasse 5a',
+      teacherName: `${session.user?.firstName || 'Frau'} ${session.user?.lastName || 'Muster'}`,
+      date: new Date().toLocaleDateString('de-DE'),
+      score: '85%',
+      schoolName: 'CompetenceTrack Schule',
+      subjectName: 'Mathematik',
+      behaviorDescription: 'Beschreibung des Vorfalls',
+      behaviorCategory: 'Störung',
+      attendanceStatus: 'Fehlend',
+      email: parsed.data.recipientEmail,
+      competencyProgress: 'Alle Kompetenzen auf dem erwarteten Niveau',
+    };
+
+    const processedSubject = replaceVariables(parsed.data.subject, sampleVars);
+    const processedBody = replaceVariables(parsed.data.body, sampleVars);
+
+    // Create email log entry
+    const emailLog = await db.emailLog.create({
+      data: {
+        schoolId: parsed.data.schoolId,
+        templateId: parsed.data.templateId || null,
+        recipientEmail: parsed.data.recipientEmail,
+        recipientName: parsed.data.recipientName || null,
+        subject: processedSubject,
+        body: processedBody,
+        status: 'sent',
+        sentAt: new Date(),
+      },
+    });
+
+    // In production, this would use an actual email sending service
+    // For now, we log the email as "sent" and return success
+    console.log(`[Email] ${parsed.data.isTest ? '[TEST] ' : ''}To: ${parsed.data.recipientEmail}, Subject: ${processedSubject}`);
+
+    return NextResponse.json({
+      success: true,
+      logId: emailLog.id,
+      message: parsed.data.isTest
+        ? 'Test email logged successfully'
+        : 'Email logged successfully',
+    });
+  } catch (error) {
+    console.error('Email send error:', error);
+    return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+  }
+}