From 7e4bbabcaeca6240fe737447cbf4fa29c366e70a Mon Sep 17 00:00:00 2001
From: Claude Agent <claude-agent@romfast.ro>
Date: Fri, 27 Mar 2026 13:16:20 +0000
Subject: [PATCH] =?UTF-8?q?fix(qa):=20ISSUE-001=20=E2=80=94=20SKU=20prices?=
 =?UTF-8?q?=20404=20for=20SKUs=20containing=20slashes?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

SKUs with forward slashes (e.g. 0V2071/250159/250158) caused a 404
on /api/mappings/{sku}/prices because path separators in the SKU
were interpreted as URL path segments. Changed to query parameter.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 api/app/routers/mappings.py     | 4 ++--
 api/app/static/js/mappings.js   | 2 +-
 api/app/templates/mappings.html | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/api/app/routers/mappings.py b/api/app/routers/mappings.py
index 3fba185..be37943 100644
--- a/api/app/routers/mappings.py
+++ b/api/app/routers/mappings.py
@@ -146,8 +146,8 @@ async def create_batch_mapping(data: MappingBatchCreate):
         return {"success": False, "error": str(e)}
 
 
-@router.get("/api/mappings/{sku}/prices")
-async def get_mapping_prices(sku: str):
+@router.get("/api/mappings/prices")
+async def get_mapping_prices(sku: str = Query(...)):
     """Get component prices from crm_politici_pret_art for a kit SKU."""
     app_settings = await sqlite_service.get_app_settings()
     id_pol = int(app_settings.get("id_pol") or 0) or None
diff --git a/api/app/static/js/mappings.js b/api/app/static/js/mappings.js
index 7c6bbde..366d3a3 100644
--- a/api/app/static/js/mappings.js
+++ b/api/app/static/js/mappings.js
@@ -176,7 +176,7 @@ async function loadKitPrices(sku, container) {
     if (spinner) spinner.style.display = '';
 
     try {
-        const res = await fetch(`/api/mappings/${encodeURIComponent(sku)}/prices`);
+        const res = await fetch(`/api/mappings/prices?sku=${encodeURIComponent(sku)}`);
         const data = await res.json();
         if (data.error) {
             if (spinner) spinner.innerHTML = `<small class="text-danger">${esc(data.error)}</small>`;
diff --git a/api/app/templates/mappings.html b/api/app/templates/mappings.html
index 72aecfb..3c6c8b7 100644
--- a/api/app/templates/mappings.html
+++ b/api/app/templates/mappings.html
@@ -159,5 +159,5 @@
 {% endblock %}
 
 {% block scripts %}
-<script src="{{ request.scope.get('root_path', '') }}/static/js/mappings.js?v=13"></script>
+<script src="{{ request.scope.get('root_path', '') }}/static/js/mappings.js?v=14"></script>
 {% endblock %}