06 · API Route (app/(api)/<entity>/route.ts)

• API routes are borders for external consumers (integrations, scripts, webhooks).
• They adapt HTTP to entity actions; they do not own data or rules.

import { getProjects } from "@/app/(index)/projects/actions/getProjects";


export async function GET(req: Request) {

  assertAuthorized(req);

  const projects = await getProjects();

  return Response.json({ projects });

}


import { createProject } from "@/app/(index)/projects/actions/createProject";

import { revalidatePath } from "next/cache";


export async function POST(req: Request) {

  assertAuthorized(req);

  const body = await req.json();

  await createProject(body);

  revalidatePath("/projects");

  return new Response(null, { status: 201 });

}

• Serve internal UI → use server pages/actions instead.
• Prisma directly → keep in entity actions.
• Business rules duplication → centralize in entity actions.