feat(admin): 의뢰 관리 8종 상태 머신 + 견적 연결·추적 링크 표시

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/api/admin/contacts/route.ts

@@ -2,6 +2,7 @@ import { NextResponse } from 'next/server';
 import { createAdminClient } from '@/lib/supabase/admin';
 import { verifyAdminTokenNode } from '@/lib/admin-auth';
 import { cookies } from 'next/headers';
+import { isRequestStatus } from '@/lib/request-status';
 
 export const runtime = 'nodejs';
 
@@ -18,7 +19,7 @@ export async function GET() {
 
   const supabase = createAdminClient();
 
-  const { data, error } = await supabase
+  const { data: contacts, error } = await supabase
     .from('contact_requests')
     .select('*')
     .order('created_at', { ascending: false })
@@ -28,7 +29,35 @@ export async function GET() {
     return NextResponse.json({ error: error.message }, { status: 500 });
   }
 
-  return NextResponse.json({ contacts: data ?? [] });
+  if (!contacts || contacts.length === 0) {
+    return NextResponse.json({ contacts: [] });
+  }
+
+  // 2-쿼리 머지: 연결 견적 부착 (컬럼 부재 등 오류는 빈 배열 폴백)
+  const ids = contacts.map((c) => c.id).filter(Boolean) as string[];
+  let quotesMap: Record<string, { id: string; title: string; status: string }[]> = {};
+  try {
+    const { data: quotesData } = await supabase
+      .from('quotes')
+      .select('id, title, status, contact_request_id')
+      .in('contact_request_id', ids);
+    if (quotesData) {
+      for (const q of quotesData) {
+        if (!q.contact_request_id) continue;
+        if (!quotesMap[q.contact_request_id]) quotesMap[q.contact_request_id] = [];
+        quotesMap[q.contact_request_id].push({ id: q.id, title: q.title, status: q.status });
+      }
+    }
+  } catch {
+    // 컬럼 부재 등 — 빈 배열 폴백
+  }
+
+  const enriched = contacts.map((c) => ({
+    ...c,
+    quotes: quotesMap[c.id] ?? [],
+  }));
+
+  return NextResponse.json({ contacts: enriched });
 }
 
 export async function PATCH(request: Request) {
@@ -37,11 +66,16 @@ export async function PATCH(request: Request) {
   }
 
   const { id, status } = await request.json();
+
+  if (typeof id !== 'string' || !isRequestStatus(status)) {
+    return NextResponse.json({ error: 'invalid request' }, { status: 400 });
+  }
+
   const supabase = createAdminClient();
 
   const { error } = await supabase
     .from('contact_requests')
-    .update({ status })
+    .update({ status, updated_at: new Date().toISOString() })
     .eq('id', id);
 
   if (error) {