feat : big update

app/api/commission/checkouts/route.ts

@@ -0,0 +1,24 @@
+import { getDb } from "@/db";
+import { commissionCheckouts } from "@/db/schema";
+import { validateCommissionCatalog } from "@/lib/commission/catalog";
+import { promptPayConfig } from "@/lib/commission/payment";
+import { commissionPrice, commissionRequestSchema } from "@/lib/commission/request";
+import { requireCommissionUser } from "@/lib/commission/server";
+import { errorResponse, HttpError, readJson, requireSameOrigin } from "@/lib/security/http";
+import { limitRequest } from "@/lib/security/rate-limit";
+
+export async function POST(request: Request) {
+  try {
+    requireSameOrigin(request);
+    const user = await requireCommissionUser();
+    await limitRequest("commission-checkout", user.id, 15);
+    const parsed = commissionRequestSchema.safeParse(await readJson(request, 32 * 1024));
+    if (!parsed.success || !(await validateCommissionCatalog(parsed.data)))
+      throw new HttpError(400, "invalid-commission-request");
+    promptPayConfig();
+    const [checkout] = await getDb().insert(commissionCheckouts).values({
+      userId: user.id, request: parsed.data, amountBaht: commissionPrice(parsed.data),
+    }).returning({ id: commissionCheckouts.id });
+    return Response.json({ checkoutId: checkout.id }, { status: 201, headers: { "Cache-Control": "no-store" } });
+  } catch (cause) { return errorResponse(cause); }
+}