@acms-subir/core 0.3.9 → 0.3.10

package/src/pages/api/v1/admin/links.ts

@@ -0,0 +1,13 @@
+import { editorRoute, logWrite } from '../../../../lib/editor/http';
+import { LinksPut, getLinksFor, putLinksFor } from '../../../../lib/editor/site-data';
+import { methodNotAllowed } from '../../../../lib/mobile/http';
+import { readJson } from '../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../lib/mobile/http';
+export const GET = editorRoute(async (c) => getLinksFor(c));
+// replaces the whole page (profile + blocks in order)
+export const PUT = editorRoute(async (c) => {
+  const result = await putLinksFor(c, LinksPut.parse(await readJson(c.context.request, 300_000)));
+  await logWrite(c, 'links-update', 'links');
+  return result;
+}, { write: true });
+export const ALL = () => methodNotAllowed('GET, PUT, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/blocks/[blockId].ts

@@ -0,0 +1,10 @@
+import { editorRoute, logWrite } from '../../../../../../../lib/editor/http';
+import { removeBlock } from '../../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../../../lib/mobile/http';
+export const DELETE = editorRoute(async (c) => {
+  const b = await removeBlock(c, c.context.params.id!, c.context.params.blockId!);
+  await logWrite(c, 'block-delete', `booking:${b.id}`);
+  return b;
+}, { write: true });
+export const ALL = () => methodNotAllowed('DELETE, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/blocks/index.ts

@@ -0,0 +1,12 @@
+import { editorRoute, logWrite } from '../../../../../../../lib/editor/http';
+import { BlockInput, addBlock } from '../../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../../lib/mobile/http';
+import { readJson } from '../../../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../../../lib/mobile/http';
+// close a room for a while (no booking can land on it)
+export const POST = editorRoute(async (c) => {
+  const b = await addBlock(c, c.context.params.id!, BlockInput.parse(await readJson(c.context.request, 5_000)));
+  await logWrite(c, 'block-create', `booking:${b.id}`);
+  return b;
+}, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/index.ts

@@ -0,0 +1,17 @@
+import { editorRoute, logWrite } from '../../../../../../lib/editor/http';
+import { ResourcePatch, deleteResourceFor, getResourceFor, updateResourceFor } from '../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../lib/mobile/http';
+import { readJson } from '../../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../../lib/mobile/http';
+export const GET = editorRoute(async (c) => getResourceFor(c, c.context.params.id!));
+export const PATCH = editorRoute(async (c) => {
+  const r = await updateResourceFor(c, c.context.params.id!, ResourcePatch.parse(await readJson(c.context.request, 100_000)));
+  await logWrite(c, 'resource-update', `resource:${r.id}`);
+  return r;
+}, { write: true });
+export const DELETE = editorRoute(async (c) => {
+  const r = await deleteResourceFor(c, c.context.params.id!);
+  await logWrite(c, 'resource-delete', `resource:${r.id}`);
+  return r;
+}, { write: true });
+export const ALL = () => methodNotAllowed('GET, PATCH, DELETE, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/links/[linkId].ts

@@ -0,0 +1,16 @@
+import { editorRoute, logWrite } from '../../../../../../../lib/editor/http';
+import { LinkPatch, deleteLinkFor, updateLinkFor } from '../../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../../lib/mobile/http';
+import { readJson } from '../../../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../../../lib/mobile/http';
+export const PATCH = editorRoute(async (c) => {
+  const l = await updateLinkFor(c, c.context.params.id!, c.context.params.linkId!, LinkPatch.parse(await readJson(c.context.request, 100_000)));
+  await logWrite(c, 'booking-link-update', `booking-link:${l.id}`);
+  return l;
+}, { write: true });
+export const DELETE = editorRoute(async (c) => {
+  const l = await deleteLinkFor(c, c.context.params.id!, c.context.params.linkId!);
+  await logWrite(c, 'booking-link-delete', `booking-link:${l.id}`);
+  return l;
+}, { write: true });
+export const ALL = () => methodNotAllowed('PATCH, DELETE, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/links/index.ts

@@ -0,0 +1,12 @@
+import { editorRoute, logWrite } from '../../../../../../../lib/editor/http';
+import { LinkInput, createLinkFor } from '../../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../../lib/mobile/http';
+import { readJson } from '../../../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../../../lib/mobile/http';
+// a new booking type for this room or service
+export const POST = editorRoute(async (c) => {
+  const l = await createLinkFor(c, c.context.params.id!, LinkInput.parse(await readJson(c.context.request, 100_000)));
+  await logWrite(c, 'booking-link-create', `booking-link:${l.id}`);
+  return l;
+}, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/admin/resources/index.ts

@@ -0,0 +1,12 @@
+import { editorRoute, logWrite } from '../../../../../lib/editor/http';
+import { ResourceInput, createResourceFor, listResourcesFor } from '../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+import { readJson } from '../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = editorRoute(async (c) => listResourcesFor(c));
+export const POST = editorRoute(async (c) => {
+  const r = await createResourceFor(c, ResourceInput.parse(await readJson(c.context.request, 100_000)));
+  await logWrite(c, 'resource-create', `resource:${r.id}`);
+  return r;
+}, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('GET, POST, OPTIONS');

package/src/pages/api/v1/admin/schedule.ts

@@ -0,0 +1,7 @@
+import { editorRoute } from '../../../../lib/editor/http';
+import { ScheduleQuery, schedule } from '../../../../lib/editor/schedule';
+import { methodNotAllowed, queryParams } from '../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../lib/mobile/http';
+// bookings, blocked time, events and subscribed calendars for a date range
+export const GET = editorRoute(async (c) => schedule(c, ScheduleQuery.parse(queryParams(c.context.url))));
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/bookings/manage/availability.ts

@@ -0,0 +1,6 @@
+import { managedAvailability } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = privateRoute(managedAvailability);
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/bookings/manage/cancel.ts

@@ -0,0 +1,6 @@
+import { cancelManaged } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const POST = privateRoute(cancelManaged, { write: true });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/bookings/manage/ics.ts

@@ -0,0 +1,6 @@
+import { managedIcs } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = privateRoute(managedIcs);
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/bookings/manage/index.ts

@@ -0,0 +1,6 @@
+import { getManaged } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = privateRoute(getManaged);
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/bookings/manage/reschedule.ts

@@ -0,0 +1,6 @@
+import { rescheduleManaged } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const POST = privateRoute(rescheduleManaged, { write: true });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/forms/[id]/index.ts

@@ -0,0 +1,7 @@
+import { getForm } from '../../../../../lib/mobile/forms';
+import { readRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = readRoute(getForm, true);
+export const HEAD = GET;
+export const ALL = () => methodNotAllowed();

package/src/pages/api/v1/forms/[id]/responses.ts

@@ -0,0 +1,6 @@
+import { submitFormResponse } from '../../../../../lib/mobile/forms';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const POST = privateRoute(submitFormResponse, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/guest/bookings.ts

@@ -0,0 +1,6 @@
+import { myBookings } from '../../../../lib/mobile/guest';
+import { privateRoute } from '../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../lib/mobile/http';
+export const GET = privateRoute(myBookings);
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/guest/code.ts

@@ -0,0 +1,6 @@
+import { requestCode } from '../../../../lib/mobile/guest';
+import { privateRoute } from '../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../lib/mobile/http';
+export const POST = privateRoute(requestCode, { write: true, status: 202 });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/guest/revoke.ts

@@ -0,0 +1,6 @@
+import { revokeGuest } from '../../../../lib/mobile/guest';
+import { privateRoute } from '../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../lib/mobile/http';
+export const POST = privateRoute(revokeGuest, { write: true });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/guest/token.ts

@@ -0,0 +1,6 @@
+import { exchangeCode } from '../../../../lib/mobile/guest';
+import { privateRoute } from '../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../lib/mobile/http';
+export const POST = privateRoute(exchangeCode, { write: true });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/links.ts

@@ -0,0 +1,7 @@
+import { getLinks } from '../../../lib/mobile/links';
+import { readRoute } from '../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../lib/mobile/http';
+export const GET = readRoute(getLinks, true);
+export const HEAD = GET;
+export const ALL = () => methodNotAllowed();

package/src/pages/api/v1/search.ts

@@ -0,0 +1,7 @@
+import { search } from '../../../lib/mobile/search';
+import { readRoute } from '../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../lib/mobile/http';
+export const GET = readRoute(search, true);
+export const HEAD = GET;
+export const ALL = () => methodNotAllowed();

package/src/pages/book/[resource]/[link].astro

@@ -3,7 +3,7 @@ import Site from '../../../layouts/Site.astro';
 import BookingFlow from '../../../components/booking/BookingFlow.astro';
 import { getRepo } from '../../../lib/repo';
 import { bookingsEnabled, manageUrl, resourceUrl } from '../../../lib/calendar/config';
-import { availabilityContext, createResourceBooking, rescheduleBooking, BookingError } from '../../../lib/booking/service';
+import { availabilityContext, createResourceBooking, guestMoveLink, guestReschedule, BookingError } from '../../../lib/booking/service';
 import { siteOrigin } from '../../../lib/seo';
 import { waitUntilFrom } from '../../../lib/webhooks';
 
@@ -36,7 +36,7 @@ if (Astro.request.method === 'POST') {
     if (token) {
       const b = await repo.getBookingByToken(token);
       if (!b || b.linkId !== link.id) throw new BookingError(404, 'That booking can’t be found.');
-      await rescheduleBooking(repo, b, start, end, flow);
+      await guestReschedule(repo, b, start, end, flow);
       return Astro.redirect(`${manageUrl(b.manageToken)}?moved=1`);
     }
     const answers: Record<string, string> = {};
@@ -59,7 +59,7 @@ if (Astro.request.method === 'POST') {
     Astro.response.status = err instanceof BookingError ? err.status : 500;
   }
 }
-const ctx = await availabilityContext(repo, resource, link, settings, Date.now(), reschedule?.id);
+const ctx = await availabilityContext(repo, resource, reschedule ? guestMoveLink(link) : link, settings, Date.now(), reschedule?.id);
 ---
 
 <Site title={`${link.name} · ${resource.name}`} description={link.description || `Book ${resource.name}.`} noindex={link.visibility === 'unlisted' || resource.visibility === 'unlisted'}>

package/src/pages/book/manage/[token].astro

@@ -2,7 +2,7 @@
 import Site from '../../../layouts/Site.astro';
 import { getRepo } from '../../../lib/repo';
 import { CALENDAR, bookingLinkUrl, bookingsEnabled, eventUrl, resourceUrl } from '../../../lib/calendar/config';
-import { setBookingStatus, BookingError } from '../../../lib/booking/service';
+import { guestCancel, guestChanges, BookingError } from '../../../lib/booking/service';
 import { bookingIcs, whenText } from '../../../lib/booking/emails';
 import { resourceZone } from '../../../lib/booking/availability';
 import { eventTimeZone, locationLine } from '../../../lib/calendar/events';
@@ -38,7 +38,7 @@ if (Astro.request.method === 'POST') {
   const form = await Astro.request.formData();
   if (form.get('op') === 'cancel' && (booking.status === 'pending' || booking.status === 'confirmed')) {
     try {
-      current = await setBookingStatus(repo, booking, 'cancelled', { origin, locals: Astro.locals, waitUntil: waitUntilFrom(Astro.locals) });
+      current = await guestCancel(repo, booking, { origin, locals: Astro.locals, waitUntil: waitUntilFrom(Astro.locals) });
     } catch (err) {
       error = err instanceof BookingError ? err.message : 'Couldn’t cancel — please try again.';
     }
@@ -48,6 +48,7 @@ const tz = event ? eventTimeZone(event, settings) : resource ? resourceZone(reso
 const when = whenText(current, tz, settings, link?.mode === 'day' || event?.allDay);
 const active = current.status === 'pending' || current.status === 'confirmed';
 const upcoming = current.end > Date.now();
+const can = guestChanges(current, link);
 const isNew = Astro.url.searchParams.has('new');
 const moved = Astro.url.searchParams.has('moved');
 const heading = current.status === 'cancelled' ? 'Booking cancelled'
@@ -91,15 +92,18 @@ const googleUrl = `https://calendar.google.com/calendar/render?${new URLSearchPa
             </div>
           </details>
         )}
-        {resource && link && current.kind === 'booking' && (
+        {resource && link && can.reschedule && (
           <a class="pc-manage-btn" href={`${bookingLinkUrl(resource.slug, link.slug)}?reschedule=${encodeURIComponent(current.manageToken)}`}>Reschedule</a>
         )}
-        <form method="post" onsubmit="return confirm('Cancel this booking?')">
-          <input type="hidden" name="op" value="cancel" />
-          <button class="pc-manage-btn is-danger" type="submit">Cancel {current.kind === 'rsvp' ? 'RSVP' : 'booking'}</button>
-        </form>
+        {can.cancel && (
+          <form method="post" onsubmit="return confirm('Cancel this booking?')">
+            <input type="hidden" name="op" value="cancel" />
+            <button class="pc-manage-btn is-danger" type="submit">Cancel {current.kind === 'rsvp' ? 'RSVP' : 'booking'}</button>
+          </form>
+        )}
       </div>
     )}
+    {can.closed && <p class="pc-manage-note">Changes close {can.cutoffHours} hours before the start. Please contact us to change or cancel.</p>}
     <p class="pc-bk-foot">
       {event ? <a href={eventUrl(event.slug)}>Back to {event.title}</a> : resource ? <a href={resourceUrl(resource.slug)}>Back to {resource.name}</a> : null}
     </p>

package/src/styles/admin.css

@@ -1590,3 +1590,69 @@ a.bk-row:hover, .bk-row.is-sel { background: var(--hover); }
 /* Bookings → Day view: a room held by an event (tinted, dashed; links to the event) */
 .bk-blk.is-hold { background: color-mix(in srgb, var(--accent) 10%, var(--panel)); border: 1px dashed var(--accent-ring); z-index: 0; }
 .bk-blk:not(.is-hold) { z-index: 1; }
+/* Admin → Mobile app → App access: plain rows, square switches (no pills) */
+.acc { display: grid; gap: 16px; margin-bottom: 24px; }
+.acc .card { margin: 0; }
+.acc-row { display: flex; align-items: center; justify-content: space-between; gap: 16px; padding: 12px 0; border-top: 1px solid var(--line); }
+.acc .card-head + .acc-row { border-top: 0; }
+.acc-row > div:first-child { min-width: 0; }
+.acc-row b { display: block; font-size: 14px; }
+.acc-row small { display: block; color: var(--muted); font-size: 12.5px; margin-top: 2px; }
+.acc-row small.acc-warn { color: var(--amber); }
+.acc-actions { display: flex; align-items: center; gap: 10px; flex: none; }
+.acc-switch { width: 38px; height: 22px; border-radius: 7px; border: 0; padding: 0; background: var(--line-strong); position: relative; flex: none; cursor: pointer; }
+.acc-switch i { position: absolute; top: 3px; left: 3px; width: 16px; height: 16px; border-radius: 5px; background: #fff; box-shadow: 0 1px 2px rgb(0 0 0 / 25%); transition: left 0.15s; }
+.acc-switch.on { background: var(--accent); }
+.acc-switch.on i { left: 19px; }
+.acc-switch:focus-visible { outline: 2px solid var(--accent-ring); outline-offset: 2px; }
+.acc-switch:disabled { opacity: 0.5; cursor: not-allowed; }
+.acc-row input.acc-num { width: 96px; flex: none; text-align: right; }
+@media (max-width: 640px) {
+  /* switches and numbers stay beside their label; the role picker takes its own line */
+  .acc-row { flex-wrap: wrap; }
+  .acc-row > div:first-child { flex: 1 1 180px; }
+  .acc-row .seg { width: 100%; }
+  .acc-row .seg > * { flex: 1; }
+}
+
+/* Settings → Monitoring (Uptime Kuma) */
+.mon { display: grid; gap: 16px; }
+.mon .flash { margin: 0; }
+.mon-dot { display: inline-block; width: 9px; height: 9px; border-radius: 3px; margin-right: 8px; vertical-align: 1px; background: var(--faint); }
+.mon-dot.up { background: var(--green); }
+.mon-dot.down { background: var(--red); }
+.mon-dot.pending, .mon-dot.maintenance { background: var(--amber); }
+.mon-self { display: flex; flex-wrap: wrap; align-items: center; gap: 6px 18px; font-size: 13px; color: var(--text-2); padding: 12px 14px; background: var(--panel-2); border-radius: var(--r-md); }
+.mon-self b { color: var(--text); }
+.mon-self a { margin-left: auto; color: var(--muted); font-size: 12.5px; }
+.mon-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(200px, 1fr)); gap: 10px; }
+.mon-tile { background: var(--panel); border: 1px solid var(--line); border-radius: var(--r-md); padding: 12px 14px; min-width: 0; }
+.mon-tile.is-down { background: var(--red-soft); border-color: rgb(192 59 59 / 25%); }
+.mon-name { font-weight: 600; font-size: 14px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.mon-sub { color: var(--muted); font-size: 12.5px; margin-top: 2px; }
+.mon-sub .nw { white-space: nowrap; }
+.mon-msg { color: var(--red); font-size: 12.5px; margin-top: 4px; overflow-wrap: anywhere; }
+.mon-beats { display: flex; gap: 2px; margin-top: 10px; height: 14px; }
+.mon-beats i { flex: 1; max-width: 8px; border-radius: 2px; background: var(--green); opacity: 0.75; }
+.mon-beats i.down { background: var(--red); opacity: 1; }
+.mon-beats i.pending, .mon-beats i.maintenance { background: var(--amber); }
+.mon-empty { border: 1px dashed var(--line-strong); border-radius: var(--r-md); padding: 14px 16px; }
+.mon-empty p { margin: 4px 0 0; color: var(--text-2); font-size: 13px; }
+.mon-cmd { display: block; margin: 8px 0; padding: 8px 10px; overflow-x: auto; white-space: nowrap; font-size: 12.5px; }
+.mon-fields { display: grid; gap: 14px; }
+.mon-field { display: grid; gap: 6px; font-size: 13px; }
+.mon-field > span { font-weight: 600; color: var(--text); }
+.mon-field > span small { font-weight: 400; color: var(--muted); margin-left: 6px; }
+.mon-field > small { color: var(--muted); }
+.mon-field input { width: 100%; min-width: 0; }
+.mon-inline { display: flex; gap: 8px; }
+.mon-inline input { flex: 1; }
+.mon-inline .btn { flex: none; }
+.mon-actions { display: flex; justify-content: flex-end; gap: 8px; }
+@media (max-width: 640px) {
+  .mon-self a { margin-left: 0; }
+  .mon-field > span small { display: block; margin: 2px 0 0; }
+  .mon-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 8px; }
+  .mon-tile { padding: 10px 12px; }
+  .mon-sub { font-size: 12px; }
+}