Create a new theft case

post

https://{instance}.my.salesforce.com/services/apexrest/ThinkSDK/thinklp/api/v1/theft-cases

Creates a new TheftCase from the supplied TheftDto. POST is create-only — the body MUST NOT include an id field; including one returns 400 BAD_REQUEST. Scaffold defaults (status=Open, incidentDate=today) apply when DTO fields are null; callers must supply investigationType. POST is NOT idempotent in v1 — a retry that sends the same uuid as a previously-persisted case returns 409 DUPLICATE_UUID.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

Data transfer object for a TheftCase aggregate

string | null

Salesforce Investigation record Id

investigationType

string | null

Investigation type picklist value (e.g. External Theft, Internal Theft). Immutable after create.

incidentDate

date | null

Date of the incident (YYYY-MM-DD)

incidentTime

string | null

Time of the incident as string (HH:MM)

primaryLocationId

string | null

Salesforce Id of the primary location record

status

string | null

Case status picklist value (Open, Closed, Pending Assignment, Pending Approval)

incidentType

string | null

Incident type picklist value

methodPrimary

string | null

Primary theft method picklist value

methodSecondary

string | null

Secondary theft method picklist value

narrative

string | null

Free-text narrative description of the incident; required when status is Closed

initialCaseValue

number | null

Initial estimated value of the case. Immutable after create.

currencyIsoCode

string | null

ISO 4217 currency code that all monetary fields are denominated in (multi-currency orgs)

totalCaseValue

number | null

Total calculated value of all stolen items (read-only rollup)

totalItems

number | null

Total number of items involved in the case (read-only rollup)

totalCaseValueRecovered

number | null

Total value recovered (read-only rollup)

uuid

string | null

External UUID for cross-system reference. Immutable after create.

investigatorId

string | null

Salesforce User Id of the assigned investigator

promissoryAmount

number | null

Promissory note amount

damages

string | null

Damages picklist value

damageDescription

string | null

Free-text description of damages

actionsTaken

string | null

Actions taken during the incident

preventativeActions

string | null

Preventative actions recommended

policeNotified

string | null

Yes/No picklist indicating if police were notified

policeNotifiedTime

date-time | null

Datetime when police were notified (ISO 8601)

policeArrivalTime

date-time | null

Datetime when police arrived (ISO 8601)

policeDepartment

string | null

Name of the police department

policeOfficerName

string | null

Name of the responding police officer

policeOfficerBadgeNumber

string | null

Badge number of the responding police officer

policeReportNumber

string | null

Police report number

policeDisposition

string | null

Police disposition picklist value

concealmentLocation

string | null

Location where items were concealed

concealmentMethod

string | null

Method used to conceal items

reportDate

date | null

Date the incident was reported

reportTime

string | null

Time the incident was reported (HH:mm:ss)

closedDateTime

date-time | null

Date/time the case was closed (read-only)

incidentNumber

string | null

Auto-generated incident number (read-only)

involvedPersons

array of objects | null

People associated with this case (suspects, witnesses, employees, law enforcement, etc.). Ordered by Salesforce Id ascending as an insertion-order proxy. Round-trips on GET / PUT / POST; insert / update / delete-orphan cascade applies on PUT. Body-shape semantics: field omitted preserves existing children (no-op); empty array deletes all children; explicit null is rejected as BAD_REQUEST; unknown id in payload (stale client cache) is rejected as BAD_REQUEST. POST entries must omit id. Concurrency is last-write-wins; PATCH for surgical updates is deferred.

involvedPersons

involvedVehicles

array of objects | null

Vehicles associated with this case. Body-shape semantics: field omitted preserves existing junctions (no-op); empty array deletes all junctions; explicit null is rejected as BAD_REQUEST. The POST-only plate-attach sub-route /theft-cases/{caseId}/involved-vehicles is the path for dedup; cascade PUT path requires vehicleId on every entry; vehicleId is immutable post-create (rejected with 400 IMMUTABLE_FIELD).

involvedVehicles

caseItems

array of objects | null

Items associated with this case. Body-shape semantics: field omitted preserves existing junctions (no-op); empty array deletes all junctions; explicit null is treated as omitted (no-op). A non-empty array replaces the set; a caseItems entry carrying itemId and no junction id inserts a new link; itemId is immutable post-create (rejected with 400 IMMUTABLE_FIELD). The POST-only SKU-attach sub-route /theft-cases/{caseId}/case-items is the path for dedup.

caseItems

Responses

200OK — response body is the TheftEnvelope (detail + fieldSpecs); detail carries the persisted TheftDto with its platform-assigned id populated

403Field-level security denial. The running user lacks CRUD or FLS on a required field. Field-level detail is intentionally not surfaced in the response.

409A TheftCase with the supplied uuid already exists. POST is not idempotent in v1.

500Server error — unexpected exception or org configuration problem. The code field disambiguates: RECORD_TYPE_MISSING (Theft record type missing on Investigation__c) or INTERNAL_SERVER_ERROR (catch-all).