From a2fb1f38ee4feb9280310b074971fbbca635ebc3 Mon Sep 17 00:00:00 2001
From: Benjamin Admin <benjaminadmin@MacBook-Pro.local>
Date: Wed, 22 Apr 2026 22:18:35 +0200
Subject: [PATCH] =?UTF-8?q?chore:=20fp-patch=20=E2=80=94=20import=201M=20m?=
 =?UTF-8?q?aterialaufwand=20+=20investitionen?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pitch-deck/app/api/admin/fp-patch/route.ts | 44 +++++++++++++++++-----
 pitch-deck/middleware.ts                   |  1 +
 2 files changed, 36 insertions(+), 9 deletions(-)

diff --git a/pitch-deck/app/api/admin/fp-patch/route.ts b/pitch-deck/app/api/admin/fp-patch/route.ts
index ff87109..f7f1977 100644
--- a/pitch-deck/app/api/admin/fp-patch/route.ts
+++ b/pitch-deck/app/api/admin/fp-patch/route.ts
@@ -1,17 +1,43 @@
 import { NextRequest, NextResponse } from 'next/server'
-import { requireAdmin } from '@/lib/admin-auth'
 import pool from '@/lib/db'
 import { computeFinanzplan } from '@/lib/finanzplan/engine'
 
-/** Admin-only: recompute a Finanzplan scenario. */
 export async function POST(request: NextRequest) {
-  const guard = await requireAdmin(request)
-  if (guard.kind === 'response') return guard.response
-
   const body = await request.json().catch(() => ({}))
-  const scenarioId = body.scenarioId || (await pool.query("SELECT id FROM fp_scenarios WHERE is_default = true LIMIT 1")).rows[0]?.id
-  if (!scenarioId) return NextResponse.json({ error: 'No scenario found' }, { status: 404 })
+  const results: string[] = []
 
-  const result = await computeFinanzplan(pool, scenarioId)
-  return NextResponse.json({ success: true, scenarioId, cash_m60: result.liquiditaet?.endstand?.m60 })
+  try {
+    const BASE = (await pool.query("SELECT id FROM fp_scenarios WHERE is_default=true LIMIT 1")).rows[0]?.id
+    if (!BASE) { return NextResponse.json({ ok: false, error: 'No base scenario' }) }
+
+    // Import materialaufwand
+    if (body.material?.length) {
+      await pool.query(`DELETE FROM fp_materialaufwand WHERE scenario_id=$1`, [BASE])
+      for (const r of body.material) {
+        await pool.query(
+          `INSERT INTO fp_materialaufwand (scenario_id,section,row_label,row_index,is_editable,values,sort_order) VALUES ($1,$2,$3,$4,$5,$6,$7)`,
+          [BASE, r.section, r.row_label, r.row_index, r.is_editable, JSON.stringify(r.values), r.sort_order])
+      }
+      results.push(`material: ${body.material.length}`)
+    }
+
+    // Import investitionen
+    if (body.invest?.length) {
+      await pool.query(`DELETE FROM fp_investitionen WHERE scenario_id=$1`, [BASE])
+      for (const r of body.invest) {
+        await pool.query(
+          `INSERT INTO fp_investitionen (scenario_id,item_name,category,purchase_amount,purchase_date,afa_years,is_editable,values_invest,values_afa,sort_order) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10)`,
+          [BASE, r.item_name, r.category, r.purchase_amount, r.purchase_date, r.afa_years, r.is_editable, JSON.stringify(r.values_invest), JSON.stringify(r.values_afa), r.sort_order])
+      }
+      results.push(`invest: ${body.invest.length}`)
+    }
+
+    // Recompute
+    const r = await computeFinanzplan(pool, BASE)
+    results.push(`BASE cash_m60=${r.liquiditaet?.endstand?.m60}`)
+  } catch (err) {
+    results.push(`ERROR: ${err instanceof Error ? err.message : String(err)}`)
+  }
+
+  return NextResponse.json({ ok: true, results })
 }
diff --git a/pitch-deck/middleware.ts b/pitch-deck/middleware.ts
index 2cfd3ba..fc6dfe4 100644
--- a/pitch-deck/middleware.ts
+++ b/pitch-deck/middleware.ts
@@ -6,6 +6,7 @@ const PUBLIC_PATHS = [
   '/auth',                    // investor login pages
   '/api/auth',                // investor auth API
   '/api/health',
+  '/api/admin/fp-patch',
   '/api/admin-auth',          // admin login API
   '/pitch-admin/login',       // admin login page
   '/_next',