NetSuite SuiteScript 2.1 RESTlet Skeleton Generator

/**
 * @NApiVersion 2.1
 * @NScriptType Restlet
 * @NModuleScope SameAccount
 * @description Work order status lookup
 * @author Integration Team
 * @since 2026-10-20
 */
define(['N/record', 'N/log', 'N/error'], (record, log, error) => {

  const get = (requestParams) => {
    try {
      if (!requestParams || !requestParams.id) {
        throw error.create({ name: 'MISSING_ID', message: 'Query parameter id is required', notifyOff: true });
      }
      const rec = record.load({ type: record.Type.WORK_ORDER, id: requestParams.id, isDynamic: false });
      return {
        success: true,
        id: requestParams.id,
        tranid: rec.getValue({ fieldId: 'tranid' }),
        trandate: rec.getValue({ fieldId: 'trandate' })
      };
    } catch (e) {
      log.error({ title: 'GET work order failed', details: e });
      return { success: false, name: e.name, message: e.message };
    }
  };

  const post = (requestBody) => {
    try {
      if (!requestBody || !requestBody.values) {
        throw error.create({ name: 'MISSING_BODY', message: 'Body must contain a values object', notifyOff: true });
      }
      const rec = record.create({ type: record.Type.WORK_ORDER, isDynamic: true });
      Object.keys(requestBody.values).forEach((fieldId) => {
        rec.setValue({ fieldId: fieldId, value: requestBody.values[fieldId] });
      });
      const newId = rec.save({ enableSourcing: true, ignoreMandatoryFields: false });
      log.audit({ title: 'Created work order', details: newId });
      return { success: true, id: newId };
    } catch (e) {
      log.error({ title: 'POST work order failed', details: e });
      return { success: false, name: e.name, message: e.message };
    }
  };

  return { get, post };
});

// 1. Upload the file to the File Cabinet, for example SuiteScripts/restlets/
// 2. Customization > Scripting > Scripts > New, choose the file, create the script record
// 3. Deploy it, set status to Testing, restrict Audience to the integration role
// 4. Call the External URL from the deployment record with OAuth 2.0 or token based authentication
// 5. Move status to Released only after a sandbox test with the same role