Session 6.3

src/app/api/admin/requests/route.ts

@@ -0,0 +1,21 @@
+import { NextResponse } from "next/server";
+import { requirePlatformRole } from "@/lib/session";
+import { listTenantRequests } from "@/lib/db";
+
+/**
+ * GET /api/admin/requests
+ * List all tenant requests. Optionally filter by ?status=pending
+ */
+export async function GET(request: Request) {
+  try {
+    await requirePlatformRole();
+  } catch {
+    return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+  }
+
+  const { searchParams } = new URL(request.url);
+  const status = searchParams.get("status") as any;
+
+  const requests = await listTenantRequests(status || undefined);
+  return NextResponse.json(requests);
+}