Add customergroup and entity HTTP APIs with address and contact routes.

Expose store-backed CRUD for customer groups, entities, nested addresses, and contacts, matching the documented dashdbschema contracts.

docs/api/routes/entity/contact/create.md

@@ -0,0 +1,50 @@
+# `POST /entity/{entityId}/contact`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Create entity contact
+
+Creates a contact for the entity. `contactType` and `contact` are required.
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `entityId` | yes | integer |  |
+
+## Body (JSON)
+
+```json
+{
+  "contactType": "email",
+  "contact": "anna@example.com"
+}
+```
+
+## Response `201`
+
+Created contact
+
+```json
+{
+  "contact": {
+    "id": 1,
+    "entityId": 1,
+    "contactType": "…",
+    "contact": "…"
+  }
+}
+```
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | Contact required, invalid entityId, or no company selected — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Entity or company not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._

docs/api/routes/entity/contact/delete.md

@@ -0,0 +1,33 @@
+# `DELETE /entity/{entityId}/contact/{id}`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Delete entity contact
+
+Deletes one contact of the entity.
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `entityId` | yes | integer |  |
+| `id` | yes | integer |  |
+
+## Response `204`
+
+Deleted
+
+_No content_
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | No company selected or invalid ids — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Contact or entity not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._

docs/api/routes/entity/contact/list.md

@@ -0,0 +1,43 @@
+# `GET /entity/{entityId}/contact`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+List entity contacts
+
+Lists contacts for an entity of the selected company (`contactType` e.g. `email`, `phone`).
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `entityId` | yes | integer |  |
+
+## Response `200`
+
+Contact list
+
+```json
+{
+  "contacts": [
+    {
+      "id": 1,
+      "entityId": 1,
+      "contactType": "…",
+      "contact": "…"
+    }
+  ]
+}
+```
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | No company selected or invalid entityId — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Entity or company not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._

docs/api/routes/entity/contact/update.md

@@ -0,0 +1,50 @@
+# `PATCH /entity/{entityId}/contact/{id}`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Update entity contact
+
+Patches `contactType` and/or `contact`.
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `entityId` | yes | integer |  |
+| `id` | yes | integer |  |
+
+## Body (JSON)
+
+```json
+{
+  "contact": "anna.mueller@example.com"
+}
+```
+
+## Response `200`
+
+Updated contact
+
+```json
+{
+  "contact": {
+    "id": 1,
+    "entityId": 1,
+    "contactType": "…",
+    "contact": "…"
+  }
+}
+```
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 400 | Contact required, invalid ids, or no company selected — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Contact, entity, or company not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._