Initial working commit

src/app/api/decks/route.ts

@@ -0,0 +1,34 @@
+import { NextRequest, NextResponse } from "next/server";
+import * as deckService from "@/services/deckService";
+import { flashcardImportSchema } from "@/lib/validation/importSchemas";
+
+export async function POST(request: NextRequest) {
+  const body = await request.json().catch(() => null);
+
+  if (!body) {
+    return NextResponse.json({ error: "Invalid request body" }, { status: 400 });
+  }
+
+  const { classId, data, name } = body;
+
+  if (!classId || typeof classId !== "string") {
+    return NextResponse.json({ error: "classId is required" }, { status: 400 });
+  }
+
+  // Server-side validation — never trust client
+  const parsed = flashcardImportSchema.safeParse(data);
+  if (!parsed.success) {
+    return NextResponse.json(
+      { error: "Validation failed", details: parsed.error.issues },
+      { status: 400 }
+    );
+  }
+
+  const deck = await deckService.createDeckFromImport(
+    classId,
+    parsed.data,
+    name?.trim() || undefined
+  );
+
+  return NextResponse.json(deck, { status: 201 });
+}