fix(call-logs): use Edge Function API instead of direct Supabase queries

- Add GET /api/call-logs endpoint to list user's call logs
- Add GET /api/call-logs/:id endpoint to get single call log
- Update CallLogsContent to fetch via API
- Update CallLogDetailContent to fetch via API
- Add RLS policies for call_logs table (user can only access their stores' logs)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

shopcall.ai-main/src/components/CallLogDetailContent.tsx

@@ -5,6 +5,7 @@ import { Card } from "@/components/ui/card";
 import { ArrowLeft, Phone, Clock, DollarSign, Calendar, Bot, User, Play, Pause } from "lucide-react";
 import { useTranslation } from "react-i18next";
 import { supabase } from "@/lib/supabase";
+import { API_URL } from "@/lib/config";
 
 interface CallLog {
   id: string;
@@ -88,17 +89,25 @@ export function CallLogDetailContent() {
       setError(null);
 
       try {
-        const { data, error: fetchError } = await supabase
-          .from('call_logs')
-          .select('*')
-          .eq('id', id)
-          .single();
-
-        if (fetchError) {
-          throw fetchError;
+        const { data: { session } } = await supabase.auth.getSession();
+        if (!session) {
+          throw new Error('Not authenticated');
         }
 
-        setCallLog(data);
+        const response = await fetch(`${API_URL}/api/call-logs/${id}`, {
+          headers: {
+            'Authorization': `Bearer ${session.access_token}`,
+            'Content-Type': 'application/json',
+          },
+        });
+
+        if (!response.ok) {
+          const errorData = await response.json();
+          throw new Error(errorData.error || 'Failed to fetch call log');
+        }
+
+        const data = await response.json();
+        setCallLog(data.call_log);
       } catch (err) {
         setError(err instanceof Error ? err.message : 'An error occurred');
       } finally {

shopcall.ai-main/src/components/CallLogsContent.tsx

@@ -8,6 +8,7 @@ import { ExportModal, ExportFormat } from "./ExportModal";
 import { exportCallLogs } from "@/lib/exportUtils";
 import { useTranslation } from "react-i18next";
 import { supabase } from "@/lib/supabase";
+import { API_URL } from "@/lib/config";
 
 interface CallLog {
   id: string;
@@ -57,16 +58,25 @@ export function CallLogsContent() {
     setIsLoading(true);
     setError(null);
     try {
-      const { data, error: fetchError } = await supabase
-        .from('call_logs')
-        .select('*')
-        .order('created_at', { ascending: false });
+      const { data: { session } } = await supabase.auth.getSession();
+      if (!session) {
+        throw new Error('Not authenticated');
+      }
+
+      const response = await fetch(`${API_URL}/api/call-logs`, {
+        headers: {
+          'Authorization': `Bearer ${session.access_token}`,
+          'Content-Type': 'application/json',
+        },
+      });
 
-      if (fetchError) {
-        throw fetchError;
+      if (!response.ok) {
+        const errorData = await response.json();
+        throw new Error(errorData.error || 'Failed to fetch call logs');
       }
 
-      setCallLogs(data || []);
+      const data = await response.json();
+      setCallLogs(data.call_logs || []);
     } catch (err) {
       setError(err instanceof Error ? err.message : 'An error occurred');
     } finally {

supabase/functions/api/index.ts

@@ -2100,6 +2100,94 @@ serve(async (req) => {
       }
     }
 
+    // GET /api/call-logs - List all call logs for the user's stores
+    if (path === 'call-logs' && req.method === 'GET') {
+      // First, get all store IDs that belong to this user
+      const { data: userStores, error: storesError } = await supabase
+        .from('stores')
+        .select('id')
+        .eq('user_id', user.id)
+
+      if (storesError) {
+        console.error('Error fetching user stores:', storesError)
+        return new Response(
+          JSON.stringify({ error: 'Failed to fetch stores' }),
+          { status: 500, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
+        )
+      }
+
+      const storeIds = userStores?.map(s => s.id) || []
+
+      if (storeIds.length === 0) {
+        return new Response(
+          JSON.stringify({ success: true, call_logs: [] }),
+          { status: 200, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
+        )
+      }
+
+      // Fetch call logs for these stores
+      const { data: callLogs, error: logsError } = await supabase
+        .from('call_logs')
+        .select('id, store_id, created_at, started_at, ended_at, duration, caller, cost_total')
+        .in('store_id', storeIds)
+        .order('created_at', { ascending: false })
+
+      if (logsError) {
+        console.error('Error fetching call logs:', logsError)
+        return new Response(
+          JSON.stringify({ error: 'Failed to fetch call logs' }),
+          { status: 500, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
+        )
+      }
+
+      return new Response(
+        JSON.stringify({ success: true, call_logs: callLogs || [] }),
+        { status: 200, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
+      )
+    }
+
+    // GET /api/call-logs/:id - Get a single call log by ID
+    const callLogMatch = path.match(/^call-logs\/([a-f0-9-]+)$/)
+    if (callLogMatch && req.method === 'GET') {
+      const callLogId = callLogMatch[1]
+
+      // First, get all store IDs that belong to this user
+      const { data: userStores, error: storesError } = await supabase
+        .from('stores')
+        .select('id')
+        .eq('user_id', user.id)
+
+      if (storesError) {
+        console.error('Error fetching user stores:', storesError)
+        return new Response(
+          JSON.stringify({ error: 'Failed to fetch stores' }),
+          { status: 500, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
+        )
+      }
+
+      const storeIds = userStores?.map(s => s.id) || []
+
+      // Fetch the specific call log (only if it belongs to user's stores)
+      const { data: callLog, error: logError } = await supabase
+        .from('call_logs')
+        .select('*')
+        .eq('id', callLogId)
+        .in('store_id', storeIds)
+        .single()
+
+      if (logError || !callLog) {
+        return new Response(
+          JSON.stringify({ error: 'Call log not found' }),
+          { status: 404, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
+        )
+      }
+
+      return new Response(
+        JSON.stringify({ success: true, call_log: callLog }),
+        { status: 200, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
+      )
+    }
+
     return new Response(
       JSON.stringify({ error: 'Not found' }),
       { status: 404, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }