feat(auth): complete sqlite auth and client invitations

app/api/portal-clients/[clientId]/route.ts

@@ -0,0 +1,39 @@
+import { NextResponse } from "next/server";
+import {
+  PortalInvitationError,
+  setClientPortalAccess,
+} from "@/server/auth/invitations";
+import { getSessionContextFromHeaders } from "@/server/auth/session";
+
+export async function PATCH(
+  request: Request,
+  { params }: { params: Promise<{ clientId: string }> },
+) {
+  const actor = await getSessionContextFromHeaders(new Headers(request.headers));
+
+  if (!actor) {
+    return NextResponse.json({ error: "Oturum gerekli." }, { status: 401 });
+  }
+
+  try {
+    const { enabled } = await request.json();
+
+    if (typeof enabled !== "boolean") {
+      return NextResponse.json({ error: "enabled boolean olmalıdır." }, { status: 400 });
+    }
+
+    setClientPortalAccess(actor, (await params).clientId, enabled);
+    return NextResponse.json({ success: true });
+  } catch (error) {
+    if (error instanceof SyntaxError) {
+      return NextResponse.json({ error: "Geçersiz JSON gövdesi." }, { status: 400 });
+    }
+    if (error instanceof PortalInvitationError) {
+      const status = error.code === "FORBIDDEN" ? 403 : 404;
+      return NextResponse.json({ error: error.message, code: error.code }, { status });
+    }
+
+    console.error("Client portal access update failed", error);
+    return NextResponse.json({ error: "Portal erişimi güncellenemedi." }, { status: 500 });
+  }
+}