@acms-subir/core 0.3.53 → 0.3.55

package/src/pages/admin/calendar/events/index.astro

@@ -22,6 +22,7 @@ import { invalidateRedirectCache } from '../../../../middleware';
 import { accessFor, forbiddenUnless } from '../../../../lib/permissions/access';
 import type { Permission } from '../../../../lib/permissions/catalog';
 import { approveEventRequest, declineEventRequest, pendingRequests } from '../../../../lib/calendar/requests';
+import { approveDateRequest, dateRequestClashes, dateRequestTimes, declineDateRequest, type MoveRequestData } from '../../../../lib/calendar/host-requests';
 import { mergeEventDraft } from '../../../../lib/drafts';
 import { ApiError } from '../../../../lib/api';
 
@@ -72,7 +73,7 @@ if (Astro.request.method === 'POST') {
   // create, copy and import make drafts; bulk status changes that touch live events need Publish
   let needs: Permission = 'content.edit';
   // answering members' event requests needs Publish (approving puts them live)
-  if (op === 'approve' || op === 'decline') needs = 'content.publish';
+  if (op === 'approve' || op === 'decline' || op === 'approve-date' || op === 'decline-date') needs = 'content.publish';
   if (op === 'bulk') {
     const to = String(form.get('to'));
     const before = await Promise.all(form.getAll('ids').map(String).filter(Boolean).map((id) => repo.getEvent(id)));
@@ -81,7 +82,7 @@ if (Astro.request.method === 'POST') {
   const denied = await forbiddenUnless(Astro.request, Astro.cookies, repo, needs);
   if (denied) return denied;
 
-  if (op === 'approve' || op === 'decline') {
+  if (op === 'approve' || op === 'decline' || op === 'approve-date' || op === 'decline-date') {
     const access = (await accessFor(Astro.request, Astro.cookies, repo))!;
     const who = { id: access.userId, can: (p: string) => access.can(p as Permission) };
     const hooks = { url: Astro.url, locals: Astro.locals };
@@ -93,6 +94,17 @@ if (Astro.request.method === 'POST') {
       return Astro.redirect(`/admin/calendar/events?${p}`);
     };
     try {
+      // a host's date move (host-requests.ts): `id` is the request's
+      if (op === 'approve-date') {
+        const { moved } = await approveDateRequest(repo, who, id, hooks, Number(form.get('at')) || undefined);
+        const n = moved.clashes.length;
+        const shared = n ? ', and it shares a room with ' + n + ' other booking' + (n === 1 ? '' : 's') + ' at that time' : '';
+        return toRequests('Approved. “' + moved.event.title + '” has the date moved' + shared + '.');
+      }
+      if (op === 'decline-date') {
+        await declineDateRequest(repo, who, id, String(form.get('reply') || ''), hooks, Number(form.get('at')) || undefined);
+        return toRequests('Declined. The date stays as it was.');
+      }
       const before = await repo.getEvent(id);
       if (op === 'approve') {
         const e = await approveEventRequest(repo, who, id, hooks, Number(form.get('at')) || undefined);
@@ -182,8 +194,9 @@ if (Astro.request.method === 'POST') {
   }
 }
 
-const [events, calendars, requests, users, access] = await Promise.all([
+const [events, calendars, requests, users, access, waitingDates] = await Promise.all([
   repo.listEvents(), repo.listCalendars(), pendingRequests(repo), repo.listUsers(), accessFor(Astro.request, Astro.cookies, repo),
+  repo.requests.list({ kinds: ['move', 'from-date'], states: ['pending'], order: 'oldest', limit: -1 }),
 ]);
 const canApprove = access?.can('content.publish') ?? false;
 const calById = new Map(calendars.map((c) => [c.id, c]));
@@ -201,7 +214,7 @@ const counts = {
   upcoming: rows.filter(isUpcoming).length,
   past: rows.filter((r) => !isUpcoming(r)).length,
   drafts: rows.filter((r) => r.e.status === 'draft').length,
-  requests: requests.length,
+  requests: requests.length + waitingDates.length,
   all: rows.length,
 };
 const selected = rows
@@ -278,6 +291,26 @@ const requestRows = scope !== 'requests' ? [] : requests
     };
   });
 
+// hosts' date moves waiting (scope=requests): what moves where, and what
+// else holds its rooms then (C2 clashes; names are fine for staff)
+const eventById = new Map(events.map((e) => [e.id, e]));
+const roomNames = new Map((await repo.listResources()).map((r) => [r.id, r.name]));
+const dateRows = scope !== 'requests' ? [] : await Promise.all(waitingDates
+  .filter((r) => eventById.has(r.eventId))
+  .filter((r) => { const e = eventById.get(r.eventId)!; return (!calFilter || e.calendarIds.includes(calFilter)) && (!q || `${e.title} ${e.slug}`.toLowerCase().includes(q)); })
+  .map(async (r) => {
+    const e = eventById.get(r.eventId)!;
+    const d = r.data as MoveRequestData;
+    const host = nameOf.get(r.userId) ?? 'a host';
+    const clashes = await dateRequestClashes(repo, r);
+    const clash = clashes.length ? `${[...new Set(clashes.map((c) => roomNames.get(c.resourceId) ?? 'A room'))].join(', ')} also held then by ${[...new Set(clashes.map((c) => c.title || 'something else'))].slice(0, 3).join(', ')}` : '';
+    return {
+      id: r.id, href: `/admin/calendar/events/${e.id}`, title: e.title || 'Untitled event', at: r.updatedAt, host,
+      ...(await dateRequestTimes(repo, r)), back: Boolean(d.back),
+      line: `${d.back ? 'Move back' : 'Date move'} from ${host} · ${ago(r.createdAt)}`, note: r.note, publicNote: d.note, clash,
+    };
+  }));
+
 // feed calendars: the next 60 days as read-only rows (upcoming/all scopes)
 const feedErrors: string[] = [];
 if ((scope === 'upcoming' || scope === 'all') && feedCals.length) {
@@ -464,8 +497,51 @@ const subBits = [
               ))}
             </section>
           )}
-          {requestRows.length > 0 && !canApprove && <p class="hint">Someone whose role can publish content approves these.</p>}
-          {requestRows.length === 0 && (
+          {dateRows.length > 0 && (
+            <section class="card bk-group">
+              <div class="bk-dayh"><b>Date changes from hosts</b><span>{dateRows.length}</span></div>
+              {dateRows.map((r) => (
+                <div class="bk-row ev-req">
+                  <a class="bk-when" href={r.href}>{r.from || 'No date'}<small>{r.to ? '→ ' + r.to : ''}</small></a>
+                  <a class="bk-who" href={r.href}>
+                    <b>{r.title}</b>
+                    <small>{r.line}</small>
+                    {r.note && <small class="ev-req-note">“{r.note}”</small>}
+                    {r.publicNote && <small>Note on the date: {r.publicNote}</small>}
+                    {r.clash && <small class="ev-req-clash">{r.clash}</small>}
+                  </a>
+                  <span class="bk-st is-pending">{r.back ? 'Move back' : 'Date move'}</span>
+                  <div class="bk-acts">
+                    <a class="btn sm ghost" href={r.href}>Open</a>
+                    {canApprove && (
+                      <>
+                        <button class="btn sm ghost" type="button" data-modal={`decline-date-${r.id}`}>Decline…</button>
+                        <form method="post">
+                          <input type="hidden" name="op" value="approve-date" /><input type="hidden" name="id" value={r.id} /><input type="hidden" name="at" value={r.at} />
+                          <button class="btn sm" type="submit">Approve</button>
+                        </form>
+                      </>
+                    )}
+                  </div>
+                </div>
+              ))}
+            </section>
+          )}
+          {(requestRows.length > 0 || dateRows.length > 0) && !canApprove && <p class="hint">Someone whose role can publish content approves these.</p>}
+          {canApprove && dateRows.map((r) => (
+            <Modal id={`decline-date-${r.id}`} title="Decline this date change">
+              <form method="post">
+                <input type="hidden" name="op" value="decline-date" /><input type="hidden" name="id" value={r.id} /><input type="hidden" name="at" value={r.at} />
+                <p class="hint">The date stays as it is, and {r.host} hears that it wasn’t approved.</p>
+                <label class="field"><span>Note to {r.host} <em class="hint">optional</em></span><textarea name="reply" rows="3" maxlength="1000" placeholder="That room is booked for the youth night. Could the week after work?"></textarea></label>
+                <div class="modal-foot">
+                  <button class="btn ghost" type="button" data-close>Cancel</button>
+                  <button class="btn primary" type="submit">Decline</button>
+                </div>
+              </form>
+            </Modal>
+          ))}
+          {requestRows.length === 0 && dateRows.length === 0 && (
             <p class="hint ev-req-empty">{counts.requests ? 'No requests match the current filters.' : 'Nothing waiting. When members ask for events or suggest changes, they show up here.'}</p>
           )}
           {canApprove && requestRows.map((r) => (

package/src/pages/admin/calendar/google/match.astro

@@ -0,0 +1,160 @@
+---
+import Admin from '../../../../layouts/Admin.astro';
+import { getRepo } from '../../../../lib/repo';
+import { ApiError } from '../../../../lib/api';
+import { CALENDAR } from '../../../../lib/calendar/config';
+import { forbiddenUnless } from '../../../../lib/permissions/access';
+import { reviewMatch } from '../../../../lib/calendar/google/service';
+import type { CalEvent } from '../../../../lib/schema';
+import type { MatchGoogle, MatchPair } from '../../../../lib/calendar/google/types';
+
+// Step 2 of linking a Google calendar: what's on both sides, before anything
+// is written. Decisions save at once ("Save and finish later" just leaves);
+// "Start syncing" pairs, copies the rest each way and sends no notifications.
+if (!CALENDAR.enabled) return new Response(null, { status: 404, statusText: 'Not found' });
+const repo = await getRepo(Astro.locals);
+const denied = await forbiddenUnless(Astro.request, Astro.cookies, repo, 'schedule.manage');
+if (denied) return denied;
+const linkId = Astro.url.searchParams.get('link') ?? '';
+let link = await repo.gcal.getLink(linkId);
+if (!link) return Astro.redirect('/admin/calendar/settings#google');
+if (link.state !== 'matching') return Astro.redirect(`/admin/calendar/settings?notice=${encodeURIComponent('That link is already past its first match.')}#google`);
+let error = Astro.url.searchParams.get('error') ?? '';
+if (!link.match && !error) {
+  try { await reviewMatch(repo, link.id, Astro.locals); link = (await repo.gcal.getLink(link.id))!; }
+  catch (e) { error = e instanceof ApiError ? e.message : 'Couldn’t read the Google calendar. Try again.'; }
+}
+const [settings, calendar, events] = await Promise.all([repo.getSettings(), repo.getCalendar(link.calendarId), repo.listEvents()]);
+const byId = new Map(events.map((e) => [e.id, e]));
+const m = link.match;
+const tz = settings.timezone || 'UTC';
+const fmt = (ms: number, allDay: boolean) => new Intl.DateTimeFormat(settings.locale || 'en', allDay ? { weekday: 'short', month: 'short', day: 'numeric', timeZone: tz } : { weekday: 'short', month: 'short', day: 'numeric', hour: 'numeric', minute: '2-digit', timeZone: tz }).format(ms);
+const siteWhen = (e: CalEvent) => `${fmt(e.startAt, e.allDay)}${e.rrule ? ', repeats' : ''}`;
+const googleWhen = (g: MatchGoogle) => `${fmt(g.start, g.allDay)}${g.repeats ? ', repeats' : ''}`;
+const pairs = (m?.pairs ?? []).filter((p) => byId.has(p.eventId) && m?.google[p.googleId]);
+const waiting = pairs.filter((p) => p.state === 'suggested').length;
+const apart = pairs.filter((p) => p.state === 'apart');
+const toGoogle = (m?.siteOnly.length ?? 0) + apart.length;
+const fromGoogle = (m?.googleOnly.length ?? 0) + apart.length;
+const STATE: Record<MatchPair['state'], string> = { linked: 'Linked', suggested: 'Same?', apart: 'Not the same' };
+const WHY: Record<MatchPair['reason'], string> = {
+  'hidden-id': 'Linked before (Google’s copy carries the site’s hidden link)', uid: 'Same Google ID (copied from Google earlier)',
+  'title-time': 'Same title and time', 'time-repeat': 'Same time and repeat, different title',
+};
+const out = link.direction !== 'in', inn = link.direction !== 'out';
+---
+
+<Admin title="Match events" section="calendar:schedule">
+  <div class="page-head">
+    <div>
+      <p class="sub"><a href="/admin/calendar/settings#google">Calendar settings</a> › Synced with Google</p>
+      <h1>Match events: {calendar?.name ?? 'Calendar'} {link.direction === 'both' ? '⇄' : link.direction === 'out' ? '→' : '←'} {link.googleName}</h1>
+      <p class="sub">Step 2 of 2. Nothing has been written to either side yet.</p>
+    </div>
+    <form method="post" action="/admin/calendar/google"><input type="hidden" name="op" value="match-build" /><input type="hidden" name="link" value={link.id} /><button class="btn" type="submit">Read both sides again</button></form>
+  </div>
+  {error && <p class="notice warn" role="alert">{error}</p>}
+  {m && (
+    <>
+      <nav class="gm-tabs" aria-label="Groups">
+        <a href="#both">On both · {pairs.length}</a>
+        <a href="#site">Only on the site · {m.siteOnly.length}</a>
+        <a href="#google">Only in Google · {m.googleOnly.length}</a>
+      </nav>
+
+      <section class="card gm-sect" id="both">
+        <table class="gm-table">
+          <thead><tr><th>On the site</th><th>In Google</th><th>Why they match</th><th><span class="gm-sr">Decision</span></th></tr></thead>
+          <tbody>
+            {pairs.length === 0 && <tr><td colspan="4" class="hint">No events look like they’re on both sides.</td></tr>}
+            {pairs.map((p) => { const e = byId.get(p.eventId)!; const g = m.google[p.googleId]; return (
+              <tr id={p.googleId} class={`is-${p.state}`}>
+                <td><b>{e.title}</b><small>{siteWhen(e)}</small></td>
+                <td><b>{g.title || '(no title)'}</b><small>{googleWhen(g)}</small></td>
+                <td><small>{WHY[p.reason]}</small></td>
+                <td>
+                  <form method="post" action="/admin/calendar/google" class="gm-acts">
+                    <input type="hidden" name="op" value="match-decide" /><input type="hidden" name="link" value={link.id} /><input type="hidden" name="googleId" value={p.googleId} />
+                    {p.state === 'suggested' ? (<>
+                      <button class="btn sm primary" type="submit" name="decision" value="link">Link</button>
+                      <button class="btn sm ghost" type="submit" name="decision" value="apart">Not the same</button>
+                    </>) : (<>
+                      <span class={`gm-state is-${p.state}`}>{STATE[p.state]}</span>
+                      <button class="btn sm ghost" type="submit" name="decision" value={p.state === 'linked' ? 'apart' : 'link'}>{p.state === 'linked' ? 'Undo' : 'Link'}</button>
+                    </>)}
+                  </form>
+                </td>
+              </tr>
+            ); })}
+          </tbody>
+        </table>
+      </section>
+
+      <section class="card gm-sect" id="site">
+        <h2>Only on the site · {m.siteOnly.length}</h2>
+        {m.siteOnly.length === 0 ? <p class="hint">None.</p> : (
+          <ul class="gm-list">{m.siteOnly.map((id) => byId.get(id)).filter(Boolean).slice(0, 200).map((e) => <li><b>{e!.title}</b> <small>{siteWhen(e!)}</small></li>)}</ul>
+        )}
+      </section>
+
+      <section class="card gm-sect" id="google">
+        <h2>Only in Google · {m.googleOnly.length}</h2>
+        {m.googleOnly.length === 0 ? <p class="hint">None.</p> : (
+          <ul class="gm-list">{m.googleOnly.map((id) => m.google[id]).filter(Boolean).slice(0, 200).map((g) => <li><b>{g.booking ? 'Booked' : g.title || '(no title)'}</b> <small>{googleWhen(g)}{g.booking ? ' · a booked appointment' : ''}</small></li>)}</ul>
+        )}
+      </section>
+
+      <div class="card gm-foot">
+        <p>
+          When you start:
+          {out ? ` the ${toGoogle} event${toGoogle === 1 ? '' : 's'} only on the site ${toGoogle === 1 ? 'is' : 'are'} copied to Google.` : ' events only on the site stay on the site.'}
+          {inn ? ` The ${fromGoogle} only in Google come to the site as published events in ${calendar?.name ?? 'this calendar'}${link.roomIds.length ? ', holding its room' : ''}${link.rules.length ? `, and titles starting with ${link.rules.map((r) => `“${r.prefix}”`).join(' or ')} get their tag` : ''}.` : ' Events only in Google stay in Google.'}
+          {' '}Linked pairs keep both titles as they are until someone edits one. Pairs you mark “Not the same” are treated as two events. No member notifications are sent for any of this.
+        </p>
+        <div class="gm-buttons">
+          <a class="btn ghost" href="/admin/calendar/settings#google">Back</a>
+          <a class="btn" href="/admin/calendar/settings#google" title="Your decisions are saved as you make them">Save and finish later</a>
+          <form method="post" action="/admin/calendar/google">
+            <input type="hidden" name="op" value="match-start" /><input type="hidden" name="link" value={link.id} />
+            <button class="btn primary" type="submit" disabled={waiting > 0} title={waiting ? `Decide the ${waiting} suggested pair${waiting === 1 ? '' : 's'} first` : undefined}>Start syncing</button>
+          </form>
+        </div>
+        {waiting > 0 && <p class="hint">Decide the {waiting} suggested pair{waiting === 1 ? '' : 's'} first: Link, or Not the same.</p>}
+      </div>
+    </>
+  )}
+</Admin>
+
+<style>
+  .gm-tabs { display: flex; gap: 6px; flex-wrap: wrap; margin-bottom: 12px; font-size: 13px; }
+  .gm-tabs a { padding: 6px 12px; border: 1px solid var(--line); border-radius: 999px; color: var(--text-2); background: var(--panel); }
+  .gm-sect { margin-bottom: 14px; padding: 0; overflow: hidden; scroll-margin-top: 64px; }
+  .gm-sect h2 { font-size: 14px; margin: 0; padding: 12px 16px; border-bottom: 1px solid var(--line); }
+  .gm-sect .hint { padding: 12px 16px; margin: 0; }
+  .gm-table { width: 100%; border-collapse: collapse; font-size: 13px; }
+  .gm-table th { text-align: left; font-weight: 600; color: var(--muted); padding: 8px 16px; border-bottom: 1px solid var(--line); font-size: 12px; }
+  .gm-table td { padding: 10px 16px; border-bottom: 1px solid var(--line); vertical-align: top; }
+  .gm-table tr:last-child td { border-bottom: 0; }
+  .gm-table td b { display: block; font-weight: 600; }
+  .gm-table td small { color: var(--muted); font-size: 12px; }
+  .gm-table tr.is-apart td:not(:last-child) { opacity: 0.6; }
+  .gm-acts { display: flex; gap: 6px; align-items: center; justify-content: flex-end; flex-wrap: wrap; }
+  .gm-state { font-size: 12px; font-weight: 600; color: var(--text-2); }
+  .gm-state.is-linked { color: var(--green); }
+  .gm-list { list-style: none; margin: 0; padding: 0; }
+  .gm-list li { padding: 8px 16px; border-bottom: 1px solid var(--line); font-size: 13px; }
+  .gm-list li:last-child { border-bottom: 0; }
+  .gm-list small { color: var(--muted); }
+  .gm-foot { padding: 14px 16px; display: flex; flex-direction: column; gap: 10px; font-size: 13px; color: var(--text-2); }
+  .gm-foot p { margin: 0; }
+  .gm-buttons { display: flex; gap: 8px; justify-content: flex-end; flex-wrap: wrap; }
+  .gm-buttons .btn:disabled { opacity: 0.45; cursor: not-allowed; }
+  .gm-sr { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); }
+  @media (max-width: 760px) {
+    .gm-table thead { display: none; }
+    .gm-table tr { display: grid; grid-template-columns: 1fr 1fr; border-bottom: 1px solid var(--line); }
+    .gm-table td { border: 0; }
+    .gm-table td:nth-child(3), .gm-table td:nth-child(4) { grid-column: span 2; padding-top: 0; }
+    .gm-acts { justify-content: flex-start; }
+  }
+</style>

package/src/pages/admin/calendar/google.astro

@@ -0,0 +1,107 @@
+---
+import { getRepo } from '../../../lib/repo';
+import { ApiError } from '../../../lib/api';
+import { CALENDAR } from '../../../lib/calendar/config';
+import { accessFor } from '../../../lib/permissions/access';
+import { deniedMessage, type Permission } from '../../../lib/permissions/catalog';
+import { requestSessionBinding } from '../../../lib/auth/request';
+import { beginGoogleConnect, disconnectGoogle, finishGoogleConnect, refreshGoogleCalendars, saveGoogleClient } from '../../../lib/calendar/google/connect';
+import { createLink, pauseLink, resumeLink, unlink, updateLink } from '../../../lib/calendar/google/links';
+import { decideMatch } from '../../../lib/calendar/google/match';
+import { reviewMatch, syncLinkNow, useGoogleVersion } from '../../../lib/calendar/google/service';
+
+// The forms of Calendar settings → Synced with Google, the first-match page
+// and the event editor's sync note post here, then go back with a notice.
+// Connecting and disconnecting Google need "Connected services"; linking,
+// pausing and reviewing need "Manage rooms and calendars"; using Google's
+// version of a field changes the live event, so "Publish content" does too.
+if (!CALENDAR.enabled) return new Response(null, { status: 404, statusText: 'Not found' });
+if (Astro.request.method !== 'POST') return Astro.redirect('/admin/calendar/settings#google');
+
+const repo = await getRepo(Astro.locals);
+const access = await accessFor(Astro.request, Astro.cookies, repo);
+const form = await Astro.request.formData();
+const op = String(form.get('op') ?? '');
+const linkId = String(form.get('link') ?? '');
+const NEEDS: Record<string, Permission> = { client: 'services.manage', connect: 'services.manage', finish: 'services.manage', disconnect: 'services.manage' };
+const need = NEEDS[op] ?? (op === 'use' ? (access?.can('content.publish') ? 'content.publish' : 'schedule.manage') : 'schedule.manage');
+if (!access?.can(need)) return new Response(deniedMessage(need), { status: 403, headers: { 'Content-Type': 'text/plain; charset=utf-8', 'Cache-Control': 'no-store' } });
+
+// only back to the admin (an event page or the match page)
+const ret = String(form.get('return') ?? '');
+const home = ret.startsWith('/admin/') && !ret.startsWith('//') ? ret : '/admin/calendar/settings';
+const back = (key: 'notice' | 'error', text: string, hash = home === '/admin/calendar/settings' ? '#google' : '') => {
+  const [path, query = ''] = home.split('?');
+  const params = new URLSearchParams(query);
+  params.set(key, text);
+  return Astro.redirect(`${path}?${params}${hash}`);
+};
+const list = (name: string) => form.getAll(name).map(String).filter(Boolean);
+// rules come as rows of prefix + tag fields; booking titles one per line
+const linkFields = () => ({
+  direction: String(form.get('direction') || 'both'),
+  roomIds: list('roomIds'),
+  noRoom: form.has('noRoom'),
+  rules: form.getAll('rulePrefix').map((p, i) => ({ prefix: String(p).trim(), tag: String(form.getAll('ruleTag')[i] ?? '').trim() })).filter((r) => r.prefix && r.tag),
+  bookingTitles: String(form.get('bookingTitles') ?? '').split(/\n|,/).map((t) => t.trim()).filter(Boolean),
+});
+
+try {
+  switch (op) {
+    case 'client':
+      await saveGoogleClient(repo, { clientId: String(form.get('clientId') ?? ''), clientSecret: String(form.get('clientSecret') ?? '') }, Astro.locals);
+      return back('notice', 'Saved. Next, connect Google.');
+    case 'connect':
+      return Astro.redirect(await beginGoogleConnect(repo, await requestSessionBinding(Astro.request, Astro.cookies, Astro.locals), Astro.url, Astro.locals));
+    case 'finish': {
+      const account = await finishGoogleConnect(repo, await requestSessionBinding(Astro.request, Astro.cookies, Astro.locals), Astro.url, access.userId, Astro.locals);
+      return back('notice', `Connected ${account.email || 'Google'}. Link a calendar next.`);
+    }
+    case 'disconnect':
+      await disconnectGoogle(repo, Astro.locals);
+      return back('notice', 'Google is disconnected. Links are paused, and every event stays in both places.');
+    case 'refresh':
+      await refreshGoogleCalendars(repo, Astro.locals);
+      return back('notice', 'Google calendars listed again.');
+    case 'link-new': {
+      const link = await createLink(repo, { ...linkFields(), calendarId: String(form.get('calendarId') ?? ''), googleId: String(form.get('googleId') ?? ''), startDate: String(form.get('startDate') || '') || undefined });
+      return Astro.redirect(`/admin/calendar/google/match?link=${encodeURIComponent(link.id)}`);
+    }
+    case 'link-edit':
+      await updateLink(repo, linkId, linkFields());
+      return back('notice', 'Link saved. Events that now belong to it go out at the next sync, and ones that don’t are removed from Google.');
+    case 'pause':
+      await pauseLink(repo, linkId);
+      return back('notice', 'Paused. Changes on either side wait until you resume.');
+    case 'resume': {
+      const link = await resumeLink(repo, linkId);
+      if (link.state === 'matching') return Astro.redirect(`/admin/calendar/google/match?link=${encodeURIComponent(link.id)}`);
+      return back('notice', 'Resumed. It reads Google again from the start date, quietly, and catches up.');
+    }
+    case 'unlink':
+      await unlink(repo, linkId);
+      return back('notice', 'Unlinked. Every event stays in both places; linking again pairs them up.');
+    case 'sync':
+      await syncLinkNow(repo, linkId, Astro.locals);
+      return back('notice', 'Synced.');
+    case 'match-build':
+      await reviewMatch(repo, linkId, Astro.locals);
+      return Astro.redirect(`/admin/calendar/google/match?link=${encodeURIComponent(linkId)}`);
+    case 'match-decide':
+      await decideMatch({ repo }, linkId, String(form.get('googleId') ?? ''), form.get('decision') === 'link' ? 'link' : 'apart');
+      return Astro.redirect(`/admin/calendar/google/match?link=${encodeURIComponent(linkId)}#${encodeURIComponent(String(form.get('googleId') ?? ''))}`);
+    case 'match-start':
+      await syncLinkNow(repo, linkId, Astro.locals, { start: true });
+      return Astro.redirect(`/admin/calendar/settings?notice=${encodeURIComponent('Syncing. Recent changes lists what was copied each way.')}#google`);
+    case 'use':
+      await useGoogleVersion(repo, Number(form.get('log')), Astro.url, Astro.locals);
+      return back('notice', 'Using Google’s version. The other copies follow at the next sync.');
+  }
+  return back('error', 'Unknown action.');
+} catch (e) {
+  const message = e instanceof ApiError ? e.message : e instanceof Error && e.name === 'ZodError' ? 'Check the link’s settings and try again.' : 'That didn’t work. Try again.';
+  if (!(e instanceof ApiError)) console.error('acms google sync admin:', e);
+  if (op.startsWith('match-')) return Astro.redirect(`/admin/calendar/google/match?link=${encodeURIComponent(linkId)}&error=${encodeURIComponent(message)}`);
+  return back('error', message);
+}
+---