TTTOP TECH MAPPUBLIC DOCUMENTATION

02 · Integration surface

API
Route Map

Single PHP router, 59 current method/route records: 57 active and 2 deliberately disabled with HTTP 410

57 ACTIVE2 DISABLED3 unreachable legacy blocks

MAP/CODE CONFLICT: metadata เดิมระบุ 74 APIs แต่ array รายการเดิมว่าง Current code inspection พบ 59 method/route records ตามที่สรุปที่นี่

Route groups

ตารางนี้เป็น human-readable overview; route-by-route read/write/caller/handler ครบทุก record อยู่ใน Markdown

Open full API_MAP.md
DomainRepresentative routesReads / writesStatus
AuthPOST /auth/staff/login
POST /auth/customer/login
POST /auth/customer/register
POST /auth/customer/change-password		employees/roles or customers; auth metadataACTIVE
CustomersGET/POST /customers
GET/PUT/DELETE /customers/:id
POST /customers/:id/reset-password		customer profile and service summariesACTIVE
SavingsGET/POST /savings/accounts
POST .../transactions
POST .../verify
POST .../convert		accounts, transactions, periods, allocations, contractsACTIVE
ContractsGET/POST /contracts
PUT /contracts/:id
POST .../activate
POST .../cancel		contracts, KYC, schedules, promotions, auditACTIVE
Direct payoffPOST /contracts/:id/payoffNo writes; use PAYOFF payment intentDISABLED 410
Contract deletionDELETE /contracts/:idNo writes; use cancellation workflowDISABLED 410
PaymentsPOST /payment-slips
GET /payment-intents
POST /contracts/:id/payment-intents
POST /payment-intents/:id/verify		managed files, intents, payments, schedules, contractsACTIVE
Cash salesGET/POST /cash-sales
POST .../void
POST .../refund		cash sales/refunds/promotions/auditACTIVE
Promotions/promotions, /promotions/:id/packages, /promotion-events, eligible/claim/validatecampaign/package/benefit/rule/event tablesACTIVE
Products & employeesGET/POST /products
GET/POST /employees
PATCH /employees/:id/toggle		products; employees/rolesACTIVE
Service & dashboardGET /dashboard/summary
GET /follow-ups/today
GET /follow-ups/satisfaction
POST /follow-ups
POST /support/payment-pause-requests		financial aggregates and follow_up_logsACTIVE

Enforcement model

PUBLIC

3 unauthenticated entries

Staff login, customer login, customer registration.

AUTH

Deny by default

Other routes require authenticated scope; customer routes apply ownership checks.

ADMIN

Privileged mutations

Employee changes, selected promotion changes, customer deletion, cash void/refund.

FINANCE

Idempotency & audit

Payment intents and financial actions use transaction locking, idempotency, and audit helpers.