feat: add admin lookup forms

apps/api/src/app/build-app.js

@@ -4,6 +4,7 @@ import multipart from '@fastify/multipart';
 
 import { registerAuthRoutes } from '../modules/auth/routes/auth-routes.js';
 import { registerAdminInventoryRoutes } from '../modules/inventory/routes/admin-inventory-routes.js';
+import { registerAdminLookupRoutes } from '../modules/inventory/routes/admin-lookup-routes.js';
 import { registerAdminImageRoutes } from '../modules/inventory/routes/admin-image-routes.js';
 import { registerPublicInventoryRoutes } from '../modules/inventory/routes/public-inventory-routes.js';
 import { registerPublicImageRoutes } from '../modules/inventory/routes/public-image-routes.js';
@@ -48,6 +49,10 @@ export function buildApp(dependencies) {
     ...dependencies,
     prefix: '/api/v1/admin',
   });
+  app.register(registerAdminLookupRoutes, {
+    ...dependencies,
+    prefix: '/api/v1/admin',
+  });
   app.register(registerAdminImageRoutes, {
     ...dependencies,
     prefix: '/api/v1/admin',

apps/api/src/app/server.js

@@ -18,6 +18,7 @@ import { createPasswordResetRepository } from '../modules/auth/repositories/pass
 import { createRedisLoginRateLimiter } from '../modules/auth/services/login-rate-limiter.js';
 import { createPasswordRecoveryService } from '../modules/auth/services/password-recovery-service.js';
 import { createInventoryItemRepository } from '../modules/inventory/repositories/inventory-item-repository.js';
+import { createCatalogLookupRepository } from '../modules/inventory/repositories/catalog-lookup-repository.js';
 import { createInventoryItemService } from '../modules/inventory/services/inventory-item-service.js';
 import { createPublicInventoryService } from '../modules/inventory/services/public-inventory-service.js';
 import { createPublicImageService } from '../modules/inventory/services/public-image-service.js';
@@ -51,6 +52,7 @@ async function startServer() {
   const redis = await createRedisConnection();
   const productRepository = createProductRepository(database.db);
   const inventoryItemRepository = createInventoryItemRepository(database.db);
+  const catalogLookupRepository = createCatalogLookupRepository(database.db);
   const inventoryImageRepository = createInventoryImageRepository(database.db);
   const imageDerivativeJobRepository = createImageDerivativeJobRepository(database.db);
   const listingRepository = createListingRepository(database.db);
@@ -102,6 +104,7 @@ async function startServer() {
       inventoryItemRepository,
       productRepository,
     }),
+    catalogLookupRepository,
     publicImageService,
     publicInventoryService: createPublicInventoryService({ inventoryItemRepository, publicImageService }),
     inventoryImageService: createInventoryImageService({

apps/api/src/modules/inventory/repositories/catalog-lookup-repository.js

@@ -0,0 +1,20 @@
+import { asc, eq } from 'drizzle-orm';
+
+import { categories, conditionProfiles, conditions } from '../../../infrastructure/database/schema.js';
+
+export function createCatalogLookupRepository(db) {
+  return {
+    async listCategories() {
+      return db.select({ id: categories.id, name: categories.name }).from(categories).where(eq(categories.active, true)).orderBy(asc(categories.sort), asc(categories.name));
+    },
+
+    async listConditions() {
+      return db
+        .select({ id: conditions.id, name: conditions.name, code: conditions.code, categoryId: conditionProfiles.categoryId })
+        .from(conditions)
+        .innerJoin(conditionProfiles, eq(conditionProfiles.id, conditions.conditionProfileId))
+        .where(eq(conditions.active, true))
+        .orderBy(asc(conditions.qualityRank), asc(conditions.name));
+    },
+  };
+}

apps/api/src/modules/inventory/routes/admin-lookup-routes.js

@@ -0,0 +1,16 @@
+export async function registerAdminLookupRoutes(app, options) {
+  const { authenticateAdmin, catalogLookupRepository } = options;
+
+  app.addHook('preHandler', async (request) => {
+    const admin = await authenticateAdmin(request);
+    if (!admin?.sellerId) {
+      const error = new Error('Authentication is required.');
+      error.code = 'UNAUTHORIZED';
+      error.statusCode = 401;
+      throw error;
+    }
+  });
+
+  app.get('/lookups/categories', async () => ({ data: catalogLookupRepository.listCategories() }));
+  app.get('/lookups/conditions', async () => ({ data: catalogLookupRepository.listConditions() }));
+}

apps/web/src/pages/AdminHomePage.vue

@@ -3,11 +3,13 @@ import { onMounted, ref } from 'vue';
 import { RouterLink } from 'vue-router';
 
 import { useAuth } from '@/composables/useAuth.js';
-import { createAdminInventory, createAdminProduct, listAdminInventory, listAdminProducts } from '@/services/admin-catalog-service.js';
+import { createAdminInventory, createAdminProduct, listAdminCategories, listAdminConditions, listAdminInventory, listAdminProducts } from '@/services/admin-catalog-service.js';
 
 const { principal } = useAuth();
 const products = ref([]);
 const inventory = ref([]);
+const categories = ref([]);
+const conditions = ref([]);
 const isLoading = ref(true);
 const isSaving = ref(false);
 const error = ref(null);
@@ -23,7 +25,7 @@ function csrfToken() {
 async function load() {
   isLoading.value = true;
   try {
-    [products.value, inventory.value] = await Promise.all([listAdminProducts(), listAdminInventory()]);
+    [products.value, inventory.value, categories.value, conditions.value] = await Promise.all([listAdminProducts(), listAdminInventory(), listAdminCategories(), listAdminConditions()]);
   } catch (requestError) { error.value = requestError; }
   finally { isLoading.value = false; }
 }
@@ -63,16 +65,25 @@ onMounted(load);
         <h2>Add product</h2>
         <label class="fixture-label" for="product-name">Name</label>
         <input id="product-name" v-model="productName" class="fixture-input" required />
-        <label class="fixture-label" for="product-category">Category ID</label>
-        <input id="product-category" v-model="categoryId" class="fixture-input" required />
+        <label class="fixture-label" for="product-category">Category</label>
+        <select id="product-category" v-model="categoryId" class="fixture-input" required>
+          <option value="" disabled>Select a category</option>
+          <option v-for="category in categories" :key="category.id" :value="category.id">{{ category.name }}</option>
+        </select>
         <button class="button button--primary" type="submit" :disabled="isSaving">Create product</button>
       </form>
       <form class="showcase-panel" @submit.prevent="createInventory">
         <h2>Add inventory copy</h2>
-        <label class="fixture-label" for="inventory-product">Product ID</label>
-        <input id="inventory-product" v-model="inventoryProductId" class="fixture-input" required />
-        <label class="fixture-label" for="inventory-condition">Condition ID</label>
-        <input id="inventory-condition" v-model="conditionId" class="fixture-input" required />
+        <label class="fixture-label" for="inventory-product">Product</label>
+        <select id="inventory-product" v-model="inventoryProductId" class="fixture-input" required>
+          <option value="" disabled>Select a product</option>
+          <option v-for="product in products" :key="product.id" :value="product.id">{{ product.name }}</option>
+        </select>
+        <label class="fixture-label" for="inventory-condition">Condition</label>
+        <select id="inventory-condition" v-model="conditionId" class="fixture-input" required>
+          <option value="" disabled>Select a condition</option>
+          <option v-for="condition in conditions" :key="condition.id" :value="condition.id">{{ condition.name }} ({{ condition.code }})</option>
+        </select>
         <button class="button button--primary" type="submit" :disabled="isSaving">Create copy</button>
       </form>
     </div>

apps/web/src/services/admin-catalog-service.js

@@ -13,6 +13,8 @@ async function request(path, options = {}) {
 
 export function listAdminProducts() { return request('/admin/products'); }
 export function listAdminInventory() { return request('/admin/inventory'); }
+export function listAdminCategories() { return request('/admin/lookups/categories'); }
+export function listAdminConditions() { return request('/admin/lookups/conditions'); }
 
 export function createAdminProduct(input, csrfToken) {
   return request('/admin/products', { method: 'POST', headers: { 'x-csrf-token': csrfToken }, body: JSON.stringify(input) });