added place to telecommunication, added contract documents, added invoice to other contracts

backend/src/routes/contract.routes.ts

@@ -1,9 +1,34 @@
 import { Router } from 'express';
+import multer from 'multer';
+import path from 'path';
+import fs from 'fs';
 import * as contractController from '../controllers/contract.controller.js';
+import * as invoiceController from '../controllers/invoice.controller.js';
 import { authenticate, requirePermission } from '../middleware/auth.js';
 
 const router = Router();
 
+// Multer für Vertragsdokumente
+const docUploadsDir = path.join(process.cwd(), 'uploads', 'contract-documents');
+if (!fs.existsSync(docUploadsDir)) {
+  fs.mkdirSync(docUploadsDir, { recursive: true });
+}
+const docUpload = multer({
+  storage: multer.diskStorage({
+    destination: (_req, _file, cb) => cb(null, docUploadsDir),
+    filename: (_req, file, cb) => {
+      const uniqueSuffix = Date.now() + '-' + Math.round(Math.random() * 1e9);
+      cb(null, `doc-${uniqueSuffix}${path.extname(file.originalname)}`);
+    },
+  }),
+  fileFilter: (_req, file, cb) => {
+    const allowed = ['application/pdf', 'image/jpeg', 'image/png', 'image/jpg'];
+    if (allowed.includes(file.mimetype)) cb(null, true);
+    else cb(new Error('Nur PDF, JPG und PNG Dateien sind erlaubt'));
+  },
+  limits: { fileSize: 10 * 1024 * 1024 },
+});
+
 router.get('/', authenticate, requirePermission('contracts:read'), contractController.getContracts);
 router.post('/', authenticate, requirePermission('contracts:create'), contractController.createContract);
 
@@ -20,6 +45,15 @@ router.post('/:id/follow-up', authenticate, requirePermission('contracts:create'
 // Snooze (Vertrag zurückstellen)
 router.patch('/:id/snooze', authenticate, requirePermission('contracts:update'), contractController.snoozeContract);
 
+// Rechnungen (für alle Vertragstypen)
+router.get('/:id/invoices', authenticate, requirePermission('contracts:read'), invoiceController.getInvoicesByContract);
+router.post('/:id/invoices', authenticate, requirePermission('contracts:update'), invoiceController.addInvoiceByContract);
+
+// Vertragsdokumente
+router.get('/:id/documents', authenticate, requirePermission('contracts:read'), contractController.getContractDocuments);
+router.post('/:id/documents', authenticate, requirePermission('contracts:update'), docUpload.single('file'), contractController.uploadContractDocument);
+router.delete('/:id/documents/:documentId', authenticate, requirePermission('contracts:update'), contractController.deleteContractDocument);
+
 // Folgezähler
 router.post('/:id/successor-meter', authenticate, requirePermission('contracts:update'), contractController.addSuccessorMeter);
 router.delete('/:id/contract-meter/:contractMeterId', authenticate, requirePermission('contracts:update'), contractController.removeContractMeter);