@access-dlsu/leapify 0.260601.1 → 0.260602.1

package/dist/lib/middleware/turnstile-challenge.cjs

@@ -1,29 +1,29 @@
 'use strict';
 
-var chunkX4OB4DZ3_cjs = require('../../chunk-X4OB4DZ3.cjs');
+var chunkZV4TIJXI_cjs = require('../../chunk-ZV4TIJXI.cjs');
 require('../../chunk-Q7SFCCGT.cjs');
 
 
 
 Object.defineProperty(exports, "TURNSTILE_COOKIE_NAME", {
   enumerable: true,
-  get: function () { return chunkX4OB4DZ3_cjs.TURNSTILE_COOKIE_NAME; }
+  get: function () { return chunkZV4TIJXI_cjs.TURNSTILE_COOKIE_NAME; }
 });
 Object.defineProperty(exports, "TURNSTILE_PATH", {
   enumerable: true,
-  get: function () { return chunkX4OB4DZ3_cjs.TURNSTILE_PATH; }
+  get: function () { return chunkZV4TIJXI_cjs.TURNSTILE_PATH; }
 });
 Object.defineProperty(exports, "TURNSTILE_VERIFY_PATH", {
   enumerable: true,
-  get: function () { return chunkX4OB4DZ3_cjs.TURNSTILE_VERIFY_PATH; }
+  get: function () { return chunkZV4TIJXI_cjs.TURNSTILE_VERIFY_PATH; }
 });
 Object.defineProperty(exports, "createTurnstileMiddleware", {
   enumerable: true,
-  get: function () { return chunkX4OB4DZ3_cjs.createTurnstileMiddleware; }
+  get: function () { return chunkZV4TIJXI_cjs.createTurnstileMiddleware; }
 });
 Object.defineProperty(exports, "handleTurnstileVerify", {
   enumerable: true,
-  get: function () { return chunkX4OB4DZ3_cjs.handleTurnstileVerify; }
+  get: function () { return chunkZV4TIJXI_cjs.handleTurnstileVerify; }
 });
 //# sourceMappingURL=turnstile-challenge.cjs.map
 //# sourceMappingURL=turnstile-challenge.cjs.map

package/dist/lib/middleware/turnstile-challenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turnstile-challenge.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/turnstile-challenge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,eAAO,MAAM,cAAc,mCAAmC,CAAA;AAE9D,eAAO,MAAM,qBAAqB,0CAA6B,CAAA;AAE/D,eAAO,MAAM,qBAAqB,sBAAsB,CAAA;AAyHxD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAAC;;;;;;;;;;;;;;;;;;oEA6C1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB;cACH,eAAe;yBA2BpD"}
+{"version":3,"file":"turnstile-challenge.d.ts","sourceRoot":"","sources":["../../../src/lib/middleware/turnstile-challenge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAElD,eAAO,MAAM,cAAc,mCAAmC,CAAA;AAE9D,eAAO,MAAM,qBAAqB,0CAA6B,CAAA;AAE/D,eAAO,MAAM,qBAAqB,sBAAsB,CAAA;AA2HxD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,CAAC,EAAE,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAAC;;;;;;;;;;;;;;;;;;oEA6C1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB;cACH,eAAe;yBA2BpD"}

package/dist/lib/middleware/turnstile-challenge.js

@@ -1,4 +1,4 @@
-export { TURNSTILE_COOKIE_NAME, TURNSTILE_PATH, TURNSTILE_VERIFY_PATH, createTurnstileMiddleware, handleTurnstileVerify } from '../../chunk-2JEY6TSO.js';
+export { TURNSTILE_COOKIE_NAME, TURNSTILE_PATH, TURNSTILE_VERIFY_PATH, createTurnstileMiddleware, handleTurnstileVerify } from '../../chunk-WTA2QGY5.js';
 import '../../chunk-PZ5AY32C.js';
 //# sourceMappingURL=turnstile-challenge.js.map
 //# sourceMappingURL=turnstile-challenge.js.map

package/dist/routes/internal/batch-release.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { LeapifyEnv } from "../../types";
+export declare const batchReleaseRoute: Hono<LeapifyEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=batch-release.d.ts.map

package/dist/routes/internal/batch-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch-release.d.ts","sourceRoot":"","sources":["../../../src/routes/internal/batch-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,eAAO,MAAM,iBAAiB,yDAAyB,CAAC"}

package/dist/routes/internal/reconcile-slots.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { LeapifyEnv } from "../../types";
+export declare const reconcileSlotsRoute: Hono<LeapifyEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=reconcile-slots.d.ts.map

package/dist/routes/internal/reconcile-slots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-slots.d.ts","sourceRoot":"","sources":["../../../src/routes/internal/reconcile-slots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,eAAO,MAAM,mBAAmB,yDAAyB,CAAC"}

package/dist/routes/internal/reminder-emails.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { LeapifyEnv } from "../../types";
+export declare const reminderEmailsRoute: Hono<LeapifyEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=reminder-emails.d.ts.map

package/dist/routes/internal/reminder-emails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reminder-emails.d.ts","sourceRoot":"","sources":["../../../src/routes/internal/reminder-emails.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,eAAO,MAAM,mBAAmB,yDAAyB,CAAC"}

package/dist/routes/internal/renew-watches.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { LeapifyEnv } from "../../types";
+export declare const renewWatchesRoute: Hono<LeapifyEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=renew-watches.d.ts.map

package/dist/routes/internal/renew-watches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renew-watches.d.ts","sourceRoot":"","sources":["../../../src/routes/internal/renew-watches.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,eAAO,MAAM,iBAAiB,yDAAyB,CAAC"}

package/dist/routes/themes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"themes.d.ts","sourceRoot":"","sources":["../../src/routes/themes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAW1C,eAAO,MAAM,WAAW,yDAAyB,CAAA"}
+{"version":3,"file":"themes.d.ts","sourceRoot":"","sources":["../../src/routes/themes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAI3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AA+B1C,eAAO,MAAM,WAAW,yDAAyB,CAAA"}

package/dist/services/gforms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gforms.d.ts","sourceRoot":"","sources":["../../src/services/gforms.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiBH,UAAU,YAAY;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAOD,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;gBAE5C,kBAAkB,EAAE,MAAM;YAQxB,cAAc;YAWd,wBAAwB;YA6BxB,SAAS;IA6CvB;;;OAGG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvD;;;OAGG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IA0B9D;;;OAGG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAO5D;;;OAGG;IACG,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAO5D;;;;;;;OAOG;IACG,WAAW,CACf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAiCnD;;OAEG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CAuBnC"}
+{"version":3,"file":"gforms.d.ts","sourceRoot":"","sources":["../../src/services/gforms.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiBH,UAAU,YAAY;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAOD,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;gBAE5C,kBAAkB,EAAE,MAAM;YAQxB,cAAc;YAWd,wBAAwB;YA6BxB,SAAS;IA6CvB;;;OAGG;IACG,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvD;;;OAGG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IA6B9D;;;OAGG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAO5D;;;OAGG;IACG,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAO5D;;;;;;;OAOG;IACG,WAAW,CACf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAiCnD;;OAEG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CAuBnC"}

package/dist/worker.js

@@ -2,7 +2,7 @@ import { Hono } from 'hono';
 import { cors } from 'hono/cors';
 import { drizzle } from 'drizzle-orm/d1';
 import { sqliteTable, integer, text, index, uniqueIndex } from 'drizzle-orm/sqlite-core';
-import { sql, relations, eq, and, count, lte } from 'drizzle-orm';
+import { sql, relations, eq, and, asc, count, isNotNull, lte } from 'drizzle-orm';
 import { createMiddleware } from 'hono/factory';
 import { betterAuth } from 'better-auth';
 import { drizzleAdapter } from 'better-auth/adapters/drizzle';
@@ -24,8 +24,6 @@ var LeapifyError = class extends Error {
     this.code = code;
     this.name = "LeapifyError";
   }
-  statusCode;
-  code;
 };
 var unauthorized = (message = "Unauthorized") => new LeapifyError(401, "UNAUTHORIZED", message);
 var domainRestricted = () => new LeapifyError(
@@ -91,6 +89,10 @@ var themes = sqliteTable("themes", {
   name: text("name").notNull().unique(),
   path: text("path").notNull().unique(),
   // e.g. "/pirates-cove"
+  imageUrl: text("image_url"),
+  descriptionEn: text("description_en"),
+  descriptionFil: text("description_fil"),
+  sortOrder: integer("sort_order").notNull().default(0),
   createdAt: integer("created_at").notNull().$defaultFn(() => Math.floor(Date.now() / 1e3)),
   updatedAt: integer("updated_at").notNull().$defaultFn(() => Math.floor(Date.now() / 1e3))
 });
@@ -405,6 +407,8 @@ var EXEMPT_PATHS = [
   "/api/classes",
   "/api/faqs",
   "/api/config",
+  "/api/themes",
+  "/api/organizations",
   TURNSTILE_VERIFY_PATH
 ];
 function base64urlEncode(bytes) {
@@ -906,7 +910,6 @@ var CacheService = class {
   constructor(kv) {
     this.kv = kv;
   }
-  kv;
   async get(key) {
     return this.kv.get(key, "json");
   }
@@ -952,8 +955,6 @@ var SlotsService = class {
     this.db = db;
     this.cache = cache;
   }
-  db;
-  cache;
   kvKey(slug) {
     return `${SLOT_KV_PREFIX}${slug}`;
   }
@@ -1108,7 +1109,10 @@ var GFormsService = class {
       const response = await fetch(url.toString(), {
         headers: { Authorization: `Bearer ${token}` }
       });
-      if (!response.ok) throw new Error(`Forms API error: ${response.status}`);
+      if (!response.ok) {
+        const err = await response.text();
+        throw new Error(`Forms API error: ${response.status} ${err}`);
+      }
       const data = await response.json();
       allResponses.push(...data.responses ?? []);
       pageToken = data.nextPageToken;
@@ -1382,6 +1386,27 @@ classesRoute.get("/:slug/slots", eventsSlotsRateLimit, async (c) => {
   c.header("Cache-Control", "public, max-age=5, stale-while-revalidate=5");
   return c.json({ data: info });
 });
+classesRoute.post("/:slug/reconcile", authMiddleware, adminMiddleware, async (c) => {
+  const { slug } = c.req.param();
+  const db = createDb(c.env.DB);
+  const cache = new CacheService(c.env.KV);
+  const gforms = new GFormsService(c.env.GFORMS_SERVICE_ACCOUNT_JSON);
+  const slots = new SlotsService(db, cache);
+  const event = await db.query.events.findFirst({
+    where: eq(events.slug, slug),
+    columns: { gformsId: true }
+  });
+  if (!event) throw notFound("Event");
+  if (!event.gformsId) return c.json({ error: "No gformsId set for this event" }, 400);
+  try {
+    const googleCount = await gforms.getExactResponseCount(event.gformsId);
+    await slots.correctCount(slug, googleCount);
+    return c.json({ data: { registeredSlots: googleCount } });
+  } catch (err) {
+    const message = err?.message ?? "Failed to fetch from Google Forms API";
+    return c.json({ error: { code: "GFORMS_API_ERROR", message } }, 502);
+  }
+});
 classesRoute.post(
   "/",
   authMiddleware,
@@ -1587,7 +1612,7 @@ faqsRoute.get("/", async (c) => {
   const data = await cache.getOrSet(
     FAQS_KV_KEY,
     () => db.query.faqs.findMany({
-      orderBy: (t, { asc }) => [asc(t.sortOrder), asc(t.createdAt)]
+      orderBy: (t, { asc: asc2 }) => [asc2(t.sortOrder), asc2(t.createdAt)]
     }),
     FAQS_TTL
   );
@@ -1689,6 +1714,196 @@ async function verifyGoogSignature(body, signature, secret) {
     return false;
   }
 }
+var LOCK_KEY = "cron:reconcile-slots:lock";
+var LOCK_TTL = 300;
+async function reconcileSlots(env) {
+  const db = createDb(env.DB);
+  const cache = new CacheService(env.KV);
+  const gforms = new GFormsService(env.GFORMS_SERVICE_ACCOUNT_JSON);
+  const slots = new SlotsService(db, cache);
+  const lock = await cache.get(LOCK_KEY);
+  if (lock) {
+    console.log("[reconcile-slots] Lock held, skipping.");
+    return;
+  }
+  await cache.set(LOCK_KEY, "1", LOCK_TTL);
+  try {
+    const publishedEvents = await db.query.events.findMany({
+      where: isNotNull(events.gformsId),
+      columns: { id: true, slug: true, gformsId: true, registeredSlots: true }
+    });
+    const eventsWithForms = publishedEvents.filter((e) => e.gformsId);
+    let corrected = 0;
+    for (const event of eventsWithForms) {
+      try {
+        const googleCount = await gforms.getExactResponseCount(event.gformsId);
+        const localCount = event.registeredSlots;
+        if (googleCount !== localCount) {
+          console.warn(
+            `[reconcile-slots] Drift on "${event.slug}": local=${localCount}, google=${googleCount}`
+          );
+          await slots.correctCount(event.slug, googleCount);
+          corrected++;
+        }
+      } catch (err) {
+        console.error(`[reconcile-slots] Error checking "${event.slug}":`, err);
+      }
+    }
+    console.log(
+      `[reconcile-slots] Checked ${eventsWithForms.length} events, corrected ${corrected}.`
+    );
+  } finally {
+    await cache.del(LOCK_KEY);
+  }
+}
+
+// src/routes/internal/reconcile-slots.ts
+var reconcileSlotsRoute = new Hono();
+reconcileSlotsRoute.post("/", internalMiddleware, async (c) => {
+  await reconcileSlots(c.env);
+  return c.json({ ok: true });
+});
+async function batchRelease(env) {
+  const db = createDb(env.DB);
+  const cache = new CacheService(env.KV);
+  const now = Math.floor(Date.now() / 1e3);
+  const toPublish = await db.query.events.findMany({
+    where: and(eq(events.status, "queued"), lte(events.releaseAt, now)),
+    columns: { id: true, slug: true }
+  });
+  if (toPublish.length === 0) return;
+  const ids = toPublish.map((e) => e.id);
+  await db.update(events).set({ status: "published", publishedAt: sql`(unixepoch())` }).where(
+    // Drizzle doesn't have inArray for D1; use raw SQL for batch
+    sql`${events.id} IN (${sql.join(
+      ids.map((id) => sql`${id}`),
+      sql`, `
+    )})`
+  );
+  await cache.del("events:list");
+  await cache.del("events:etag");
+  console.log(
+    `[batch-release] Published ${toPublish.length} events:`,
+    toPublish.map((e) => e.slug).join(", ")
+  );
+}
+
+// src/routes/internal/batch-release.ts
+var batchReleaseRoute = new Hono();
+batchReleaseRoute.post("/", internalMiddleware, async (c) => {
+  await batchRelease(c.env);
+  return c.json({ ok: true });
+});
+function parseStartTimestamp(dateTime, startTime) {
+  if (!dateTime) return null;
+  const combined = startTime ? `${dateTime} ${startTime}` : dateTime;
+  const ms = Date.parse(combined);
+  return Number.isNaN(ms) ? null : Math.floor(ms / 1e3);
+}
+async function reminderEmails(env) {
+  if (!env.EMAIL_QUEUE) {
+    console.warn(
+      "[reminder-emails] EMAIL_QUEUE binding not configured, skipping."
+    );
+    return;
+  }
+  const hasSes = !!(env.SES_REGION && env.SES_ACCESS_KEY_ID && env.SES_SECRET_ACCESS_KEY);
+  const hasResend = !!env.RESEND_API_KEY;
+  if (!hasSes && !hasResend) {
+    console.warn(
+      "[reminder-emails] No email providers configured. Skipping reminders."
+    );
+    return;
+  }
+  const db = createDb(env.DB);
+  const now = Math.floor(Date.now() / 1e3);
+  const candidates24h = await db.query.events.findMany({
+    where: and(
+      eq(events.status, "published"),
+      eq(events.reminder24hSent, false)
+    ),
+    columns: {
+      id: true,
+      dateTime: true,
+      startTime: true
+    }
+  });
+  for (const event of candidates24h) {
+    const startsAt = parseStartTimestamp(event.dateTime, event.startTime);
+    if (!startsAt) continue;
+    const hoursUntil = (startsAt - now) / 3600;
+    if (hoursUntil <= 25 && hoursUntil >= 23) {
+      await env.EMAIL_QUEUE.send({
+        type: "send_reminder_email",
+        payload: { eventId: event.id, hoursBeforeEvent: 24 }
+      });
+    }
+  }
+  const candidates1h = await db.query.events.findMany({
+    where: and(
+      eq(events.status, "published"),
+      eq(events.reminder1hSent, false)
+    ),
+    columns: {
+      id: true,
+      dateTime: true,
+      startTime: true
+    }
+  });
+  for (const event of candidates1h) {
+    const startsAt = parseStartTimestamp(event.dateTime, event.startTime);
+    if (!startsAt) continue;
+    const hoursUntil = (startsAt - now) / 3600;
+    if (hoursUntil <= 1.5 && hoursUntil >= 0) {
+      await env.EMAIL_QUEUE.send({
+        type: "send_reminder_email",
+        payload: { eventId: event.id, hoursBeforeEvent: 1 }
+      });
+    }
+  }
+}
+
+// src/routes/internal/reminder-emails.ts
+var reminderEmailsRoute = new Hono();
+reminderEmailsRoute.post("/", internalMiddleware, async (c) => {
+  await reminderEmails(c.env);
+  return c.json({ ok: true });
+});
+var RENEWAL_WINDOW = 86400;
+async function renewWatches(env) {
+  const db = createDb(env.DB);
+  const gforms = new GFormsService(env.GFORMS_SERVICE_ACCOUNT_JSON);
+  const now = Math.floor(Date.now() / 1e3);
+  const threshold = now + RENEWAL_WINDOW;
+  const expiring = await db.query.events.findMany({
+    where: and(
+      eq(events.status, "published"),
+      lte(events.watchExpiresAt, threshold)
+    ),
+    columns: { id: true, slug: true, gformsId: true, watchId: true, watchExpiresAt: true }
+  });
+  const watchEvents = expiring.filter((e) => e.gformsId && e.watchId);
+  let renewed = 0;
+  for (const event of watchEvents) {
+    try {
+      const result = await gforms.renewWatch(event.gformsId, event.watchId);
+      const newExpiry = Math.floor(new Date(result.expireTime).getTime() / 1e3);
+      await db.update(events).set({ watchExpiresAt: newExpiry }).where(eq(events.id, event.id));
+      renewed++;
+      console.log(`[renew-watches] Renewed Watch for "${event.slug}", expires ${result.expireTime}`);
+    } catch (err) {
+      console.error(`[renew-watches] Failed to renew Watch for "${event.slug}":`, err);
+    }
+  }
+  console.log(`[renew-watches] Renewed ${renewed}/${watchEvents.length} watches.`);
+}
+
+// src/routes/internal/renew-watches.ts
+var renewWatchesRoute = new Hono();
+renewWatchesRoute.post("/", internalMiddleware, async (c) => {
+  await renewWatches(c.env);
+  return c.json({ ok: true });
+});
 var ALLOWED_MIME_TYPES = /* @__PURE__ */ new Set([
   "image/jpeg",
   "image/png",
@@ -1788,14 +2003,27 @@ function extensionFromMime(mime) {
   };
   return map[mime] ?? "bin";
 }
+function generatePath(name) {
+  return name.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
+}
 var createThemeSchema = z.object({
   name: z.string().min(1),
-  path: z.string().min(1)
+  imageUrl: z.string().url().nullable().optional(),
+  descriptionEn: z.string().nullable().optional(),
+  descriptionFil: z.string().nullable().optional(),
+  sortOrder: z.number().int().default(0)
+});
+z.object({
+  name: z.string().min(1).optional(),
+  imageUrl: z.string().url().nullable().optional(),
+  descriptionEn: z.string().nullable().optional(),
+  descriptionFil: z.string().nullable().optional(),
+  sortOrder: z.number().int().optional()
 });
 var themesRoute = new Hono();
 themesRoute.get("/", async (c) => {
   const db = createDb(c.env.DB);
-  const data = await db.select().from(themes);
+  const data = await db.select().from(themes).orderBy(asc(themes.sortOrder), asc(themes.createdAt));
   return c.json({ data });
 });
 themesRoute.post(
@@ -1806,8 +2034,9 @@ themesRoute.post(
   async (c) => {
     const body = c.req.valid("json");
     const db = createDb(c.env.DB);
+    const path = generatePath(body.name);
     try {
-      const [created] = await db.insert(themes).values(body).returning();
+      const [created] = await db.insert(themes).values({ ...body, path }).returning();
       return c.json({ data: created }, 201);
     } catch (err) {
       if (err.message && err.message.includes("UNIQUE constraint failed")) {
@@ -1825,8 +2054,12 @@ themesRoute.patch(
     const { id } = c.req.param();
     const body = await c.req.json();
     const db = createDb(c.env.DB);
+    const update = { ...body };
+    if (body.name) {
+      update.path = generatePath(body.name);
+    }
     try {
-      const [updated] = await db.update(themes).set(body).where(eq(themes.id, id)).returning();
+      const [updated] = await db.update(themes).set(update).where(eq(themes.id, id)).returning();
       if (!updated) throw notFound("Theme");
       return c.json({ data: updated });
     } catch (err) {
@@ -1955,6 +2188,10 @@ function createApp(options = {}) {
   app2.route("/api/faqs", faqsRoute);
   app2.route("/api/uploads", uploadsRoute);
   app2.route("/internal/gforms-webhook", gformsWebhookRoute);
+  app2.route("/internal/reconcile-slots", reconcileSlotsRoute);
+  app2.route("/internal/batch-release", batchReleaseRoute);
+  app2.route("/internal/reminder-emails", reminderEmailsRoute);
+  app2.route("/internal/renew-watches", renewWatchesRoute);
   app2.onError(errorHandler);
   app2.notFound(
     (c) => c.json({ error: { code: "NOT_FOUND", message: "Route not found" } }, 404)
@@ -2060,7 +2297,6 @@ var SesError = class extends Error {
     this.status = status;
     this.name = "SesError";
   }
-  status;
   /**
    * True for errors that are permanent (not worth retrying via SES again).
    * 400 BadRequest, 403 Forbidden, 404 NotFound → non-retryable.
@@ -2385,168 +2621,6 @@ async function processJob(job, services) {
     }
   }
 }
-async function batchRelease(env) {
-  const db = createDb(env.DB);
-  const cache = new CacheService(env.KV);
-  const now = Math.floor(Date.now() / 1e3);
-  const toPublish = await db.query.events.findMany({
-    where: and(eq(events.status, "queued"), lte(events.releaseAt, now)),
-    columns: { id: true, slug: true }
-  });
-  if (toPublish.length === 0) return;
-  const ids = toPublish.map((e) => e.id);
-  await db.update(events).set({ status: "published", publishedAt: sql`(unixepoch())` }).where(
-    // Drizzle doesn't have inArray for D1; use raw SQL for batch
-    sql`${events.id} IN (${sql.join(
-      ids.map((id) => sql`${id}`),
-      sql`, `
-    )})`
-  );
-  await cache.del("events:list");
-  await cache.del("events:etag");
-  console.log(
-    `[batch-release] Published ${toPublish.length} events:`,
-    toPublish.map((e) => e.slug).join(", ")
-  );
-}
-var LOCK_KEY = "cron:reconcile-slots:lock";
-var LOCK_TTL = 300;
-async function reconcileSlots(env) {
-  const db = createDb(env.DB);
-  const cache = new CacheService(env.KV);
-  const gforms = new GFormsService(env.GFORMS_SERVICE_ACCOUNT_JSON);
-  const slots = new SlotsService(db, cache);
-  const lock = await cache.get(LOCK_KEY);
-  if (lock) {
-    console.log("[reconcile-slots] Lock held, skipping.");
-    return;
-  }
-  await cache.set(LOCK_KEY, "1", LOCK_TTL);
-  try {
-    const publishedEvents = await db.query.events.findMany({
-      where: eq(events.status, "published"),
-      columns: { id: true, slug: true, gformsId: true, registeredSlots: true }
-    });
-    const eventsWithForms = publishedEvents.filter((e) => e.gformsId);
-    let corrected = 0;
-    for (const event of eventsWithForms) {
-      try {
-        const googleCount = await gforms.getExactResponseCount(event.gformsId);
-        const localCount = event.registeredSlots;
-        if (googleCount !== localCount) {
-          console.warn(
-            `[reconcile-slots] Drift on "${event.slug}": local=${localCount}, google=${googleCount}`
-          );
-          await slots.correctCount(event.slug, googleCount);
-          corrected++;
-        }
-      } catch (err) {
-        console.error(`[reconcile-slots] Error checking "${event.slug}":`, err);
-      }
-    }
-    console.log(
-      `[reconcile-slots] Checked ${eventsWithForms.length} events, corrected ${corrected}.`
-    );
-  } finally {
-    await cache.del(LOCK_KEY);
-  }
-}
-function parseStartTimestamp(dateTime, startTime) {
-  if (!dateTime) return null;
-  const combined = startTime ? `${dateTime} ${startTime}` : dateTime;
-  const ms = Date.parse(combined);
-  return Number.isNaN(ms) ? null : Math.floor(ms / 1e3);
-}
-async function reminderEmails(env) {
-  if (!env.EMAIL_QUEUE) {
-    console.warn(
-      "[reminder-emails] EMAIL_QUEUE binding not configured, skipping."
-    );
-    return;
-  }
-  const hasSes = !!(env.SES_REGION && env.SES_ACCESS_KEY_ID && env.SES_SECRET_ACCESS_KEY);
-  const hasResend = !!env.RESEND_API_KEY;
-  if (!hasSes && !hasResend) {
-    console.warn(
-      "[reminder-emails] No email providers configured. Skipping reminders."
-    );
-    return;
-  }
-  const db = createDb(env.DB);
-  const now = Math.floor(Date.now() / 1e3);
-  const candidates24h = await db.query.events.findMany({
-    where: and(
-      eq(events.status, "published"),
-      eq(events.reminder24hSent, false)
-    ),
-    columns: {
-      id: true,
-      dateTime: true,
-      startTime: true
-    }
-  });
-  for (const event of candidates24h) {
-    const startsAt = parseStartTimestamp(event.dateTime, event.startTime);
-    if (!startsAt) continue;
-    const hoursUntil = (startsAt - now) / 3600;
-    if (hoursUntil <= 25 && hoursUntil >= 23) {
-      await env.EMAIL_QUEUE.send({
-        type: "send_reminder_email",
-        payload: { eventId: event.id, hoursBeforeEvent: 24 }
-      });
-    }
-  }
-  const candidates1h = await db.query.events.findMany({
-    where: and(
-      eq(events.status, "published"),
-      eq(events.reminder1hSent, false)
-    ),
-    columns: {
-      id: true,
-      dateTime: true,
-      startTime: true
-    }
-  });
-  for (const event of candidates1h) {
-    const startsAt = parseStartTimestamp(event.dateTime, event.startTime);
-    if (!startsAt) continue;
-    const hoursUntil = (startsAt - now) / 3600;
-    if (hoursUntil <= 1.5 && hoursUntil >= 0) {
-      await env.EMAIL_QUEUE.send({
-        type: "send_reminder_email",
-        payload: { eventId: event.id, hoursBeforeEvent: 1 }
-      });
-    }
-  }
-}
-var RENEWAL_WINDOW = 86400;
-async function renewWatches(env) {
-  const db = createDb(env.DB);
-  const gforms = new GFormsService(env.GFORMS_SERVICE_ACCOUNT_JSON);
-  const now = Math.floor(Date.now() / 1e3);
-  const threshold = now + RENEWAL_WINDOW;
-  const expiring = await db.query.events.findMany({
-    where: and(
-      eq(events.status, "published"),
-      lte(events.watchExpiresAt, threshold)
-    ),
-    columns: { id: true, slug: true, gformsId: true, watchId: true, watchExpiresAt: true }
-  });
-  const watchEvents = expiring.filter((e) => e.gformsId && e.watchId);
-  let renewed = 0;
-  for (const event of watchEvents) {
-    try {
-      const result = await gforms.renewWatch(event.gformsId, event.watchId);
-      const newExpiry = Math.floor(new Date(result.expireTime).getTime() / 1e3);
-      await db.update(events).set({ watchExpiresAt: newExpiry }).where(eq(events.id, event.id));
-      renewed++;
-      console.log(`[renew-watches] Renewed Watch for "${event.slug}", expires ${result.expireTime}`);
-    } catch (err) {
-      console.error(`[renew-watches] Failed to renew Watch for "${event.slug}":`, err);
-    }
-  }
-  console.log(`[renew-watches] Renewed ${renewed}/${watchEvents.length} watches.`);
-}
 
 // src/db/migrate.ts
 var PATCH_STATEMENTS = [