@acms-subir/core 0.3.9 → 0.3.11

package/src/pages/api/design/export.ts

@@ -0,0 +1,72 @@
+import type { APIRoute } from 'astro';
+import { userConfig } from 'virtual:acms-config';
+import { getRepo } from '../../../lib/repo';
+import { getMediaStore } from '../../../lib/media/store';
+import { apiError, ApiError } from '../../../lib/api';
+import { designIdentity } from '../../../lib/design-service';
+import { draftNavItems, mergeDesignDraft } from '../../../lib/drafts';
+import { sectionTargets } from '../../../lib/section-targets';
+import { getTheme, isProjectTheme } from '../../../lib/theme';
+import { buildDesignExport, mediaKeysIn, themeFileName, THEME_TRANSFER_FORMAT, type ThemeTransferManifest } from '../../../lib/theme-transfer';
+import { zipStream, type ZipEntry } from '../../../lib/backup/zip';
+import type { Media } from '../../../lib/schema';
+
+// Theme export (acms-theme v1): the design as the Design screen shows it
+// (draft over live) plus the images it uses, as one ZIP for Design → Import
+// theme on another site or machine. ?media=0 skips images, ?nav=1 adds menus.
+export const GET: APIRoute = async ({ request, cookies, locals }) => {
+  try {
+    const repo = await getRepo(locals);
+    const url = new URL(request.url);
+    const includeMedia = url.searchParams.get('media') !== '0', includeNav = url.searchParams.get('nav') === '1';
+    const who = await designIdentity(request, cookies, repo, 'design:read');
+    if ('role' in who && who.role === 'editor') throw new ApiError(403, 'Only an owner can export the theme.');
+    if (includeMedia && !who.scopes.includes('media:read')) throw new ApiError(403, 'Required scope: media:read (or export with media=0).');
+    const live = await repo.getSettings();
+    const settings = mergeDesignDraft(live);
+    const [pages, liveNav, targets] = await Promise.all([repo.listPages(), repo.listNavItems(), sectionTargets(repo, locals)]);
+    const design = buildDesignExport({
+      settings, navItems: draftNavItems(live.draftDesign) ?? liveNav, pages, links: targets.links, origin: url.origin, includeNav,
+    });
+    const now = Date.now();
+    const theme = getTheme(settings.activeTheme);
+    const media = includeMedia
+      ? (await Promise.all([...new Set(mediaKeysIn(design).map((k) => k.split('/')[0]))].map((id) => repo.getMedia(id)))).filter((m) => m !== null)
+      : [];
+    const manifest: ThemeTransferManifest = {
+      format: THEME_TRANSFER_FORMAT, version: 1, exportedAt: now,
+      coreVersion: String((userConfig as { coreVersion?: string }).coreVersion ?? ''),
+      source: { title: live.siteTitle, siteUrl: url.origin },
+      theme: { slug: theme.slug, name: theme.name, version: theme.version, project: isProjectTheme(theme.slug) },
+      includes: ['design', ...(media.length ? ['media' as const] : []), ...(includeNav ? ['nav' as const] : [])],
+    };
+    const store = getMediaStore(locals);
+    async function* entries(): AsyncGenerator<ZipEntry> {
+      const enc = new TextEncoder();
+      yield { name: 'manifest.json', data: enc.encode(JSON.stringify(manifest, null, 1)) };
+      yield { name: 'design.json', data: enc.encode(JSON.stringify(design, null, 1)) };
+      // a missing variant is skipped; the row still imports with what's left
+      const rows: Media[] = [];
+      for (const m of media) {
+        const variants: Media['variants'] = [];
+        let original = false;
+        for (const key of [m.key, ...m.variants.map((v) => v.key)]) {
+          const obj = await store.get(key);
+          if (!obj) continue;
+          if (key === m.key) original = true; else variants.push(m.variants.find((v) => v.key === key)!);
+          yield { name: `media/${key}`, data: new Uint8Array(await new Response(obj.body).arrayBuffer()) };
+        }
+        if (original) rows.push({ ...m, variants });
+      }
+      yield { name: 'media.json', data: enc.encode(JSON.stringify(rows, null, 1)) };
+    }
+    return new Response(zipStream(entries(), now), {
+      headers: {
+        'Content-Type': 'application/zip',
+        'Cache-Control': 'no-store',
+        'X-Content-Type-Options': 'nosniff',
+        'Content-Disposition': `attachment; filename="${themeFileName(theme.slug, now)}"`,
+      },
+    });
+  } catch (e) { return apiError(e); }
+};

package/src/pages/api/design/import.ts

@@ -0,0 +1,41 @@
+import type { APIRoute } from 'astro';
+import { z } from 'zod';
+import { getRepo } from '../../../lib/repo';
+import { apiError, ApiError, json, readJson } from '../../../lib/api';
+import { DesignPatch, designIdentity, runDesignOperation } from '../../../lib/design-service';
+import { diffDesign } from '../../../lib/designDiff';
+import { sectionTargets } from '../../../lib/section-targets';
+import { getTheme, listThemes } from '../../../lib/theme';
+import { planDesignImport, ThemeDesignFile } from '../../../lib/theme-transfer';
+
+// Theme import: the design.json of an acms-theme ZIP becomes a staged draft
+// (never live). dryRun returns what would change; the browser uploads the
+// ZIP's images through /api/import/media before the real run.
+const Body = z.object({
+  revision: z.number().int().nonnegative(),
+  design: ThemeDesignFile,
+  nav: z.boolean().default(false),
+  dryRun: z.boolean().default(false),
+}).strict();
+
+export const POST: APIRoute = async ({ request, cookies, locals }) => {
+  try {
+    const repo = await getRepo(locals);
+    const input = Body.parse(await readJson(request, 2_000_000));
+    const who = await designIdentity(request, cookies, repo, 'design:write-draft');
+    if ('role' in who && who.role === 'editor') throw new ApiError(403, 'Only an owner can import a theme.');
+    const current = await repo.getSettings();
+    if (current.designRevision !== input.revision) throw new ApiError(409, 'Design changed. Reload and try again.');
+    const [pages, targets, liveNav] = await Promise.all([repo.listPages(), sectionTargets(repo, locals), repo.listNavItems()]);
+    const { patch, report } = planDesignImport({
+      file: input.design, pages, links: targets.links, installedThemes: listThemes().map((t) => t.slug),
+      stagedPages: (current.draftDesign?.sectionPages ?? current.sectionPages) as typeof current.sectionPages, includeNav: input.nav,
+    });
+    const parsed = DesignPatch.parse(patch);
+    const draft = { ...current.draftDesign, ...parsed };
+    const changes = diffDesign(current, liveNav, draft, (slug) => getTheme(slug).name);
+    if (input.dryRun) return json({ report, changes });
+    const result = await runDesignOperation(repo, who, { operation: 'stage', revision: input.revision, patch: parsed }, new URL(request.url).origin);
+    return json({ report, changes, revision: result.revision });
+  } catch (e) { return apiError(e); }
+};

package/src/pages/api/email/settings.ts

@@ -2,8 +2,10 @@ import type { APIRoute } from 'astro';
 import { z } from 'zod';
 import { getRepo } from '../../../lib/repo';
 import { ApiError, apiError, json, readJson, requireSession } from '../../../lib/api';
-import { validateSession, SESSION_COOKIE } from '../../../lib/auth';
+import { validateRequestSession } from '../../../lib/auth/request';
 import { reauthenticate } from '../../../lib/email/accounts';
+import { AUTH } from '../../../lib/auth/config';
+import { getRequestAuth } from '../../../lib/auth/request';
 import { decrypt, encrypt, encryptionAvailable, resolveConfig, runtimeValue } from '../../../lib/email/config';
 import { dispatchEmail } from '../../../lib/email/service';
 import { emailReadiness } from '../../../lib/email/readiness';
@@ -12,13 +14,13 @@ import type { Credentials, PublicEmailSettings } from '../../../lib/email/types'
 const Config = z.object({provider:z.enum(['auto','none','resend','mailgun','ses','cloudflare']),source:z.enum(['env','encrypted']),from:z.string().trim().max(320),replyTo:z.string().trim().max(320),domain:z.string().trim().max(253),region:z.string().trim().max(40),configurationSet:z.string().trim().max(200),snsTopicArn:z.string().trim().max(300),enabled:z.boolean(),reminders:z.boolean(),staffNotifications:z.boolean()}).strict();
 const Secrets = z.object({apiKey:z.string().max(4096).optional(),webhookSecret:z.string().max(4096).optional(),accessKeyId:z.string().max(256).optional(),secretAccessKey:z.string().max(4096).optional(),sessionToken:z.string().max(8192).optional()}).strict();
 const Input = z.discriminatedUnion('action',[
-  z.object({action:z.literal('save'),config:Config,credentials:Secrets.default({}),reauthPassword:z.string().max(1024)}).strict(),
+  z.object({action:z.literal('save'),config:Config,credentials:Secrets.default({}),reauthPassword:z.string().max(1024).default('')}).strict(),
   z.object({action:z.literal('test'),to:z.string().trim().email().max(254)}).strict(),
   z.object({action:z.literal('retry'),id:z.string().max(100)}).strict(),
 ]);
 export async function publicSettings(repo:ContentRepository,locals?:unknown):Promise<PublicEmailSettings> {
   const record=await repo.email.config(),c=resolveConfig(record,locals);
-  return {version:c.version,config:c.config,provider:c.provider,...emailReadiness(c,(await repo.getSettings()).siteUrl,locals),environmentLocked:!!runtimeValue('EMAIL_PROVIDER',locals),credentialFields:Object.entries(c.credentials).filter(([,v])=>!!v).map(([k])=>k),activity:(await repo.email.list()).map(({payload,lease,fingerprint,rendered,...safe})=>safe),heartbeat:await repo.email.heartbeat()};
+  return {authProvider:AUTH.provider,version:c.version,config:c.config,provider:c.provider,...emailReadiness(c,(await repo.getSettings()).siteUrl,locals),environmentLocked:!!runtimeValue('EMAIL_PROVIDER',locals),credentialFields:Object.entries(c.credentials).filter(([,v])=>!!v).map(([k])=>k),activity:(await repo.email.list()).map(({payload,lease,fingerprint,rendered,...safe})=>safe),heartbeat:await repo.email.heartbeat()};
 }
 export const GET:APIRoute=async({request,cookies,locals})=>{
   try{const repo=await getRepo(locals);await requireSession(request,cookies,repo,true);return json(await publicSettings(repo,locals));}catch(e){return apiError(e);}
@@ -26,11 +28,13 @@ export const GET:APIRoute=async({request,cookies,locals})=>{
 export const POST:APIRoute=async({request,cookies,locals})=>{
   try{
     const repo=await getRepo(locals);await requireSession(request,cookies,repo,true);
-    const userId=(await validateSession(cookies.get(SESSION_COOKIE)?.value,repo))!;
+    const userId=(await validateRequestSession(request, cookies, repo))!;
     const input=Input.parse(await readJson(request,20000));
     if(input.action==='save'){
       if(!await repo.email.rateLimit(`reauth:${userId}`,10,10*60000))throw new ApiError(429,'Too many attempts. Try again later.');
-      if(!await reauthenticate(repo,userId,input.reauthPassword))throw new ApiError(403,'Your current password is required to change email settings.');
+      if (AUTH.provider === 'clerk') {
+        if (!(await getRequestAuth(request,cookies,locals)).reverified) throw new ApiError(403,'Sign out and sign in again with Clerk before changing email settings. Recent verification is required.');
+      } else if(!await reauthenticate(repo,userId,input.reauthPassword))throw new ApiError(403,'Your current password is required to change email settings.');
       const current=await repo.email.config();
       if(runtimeValue('EMAIL_PROVIDER',locals)&&(input.config.provider!==runtimeValue('EMAIL_PROVIDER',locals)||input.config.source!=='env'))throw new ApiError(400,'Provider is managed by EMAIL_PROVIDER in the deployment environment.');
       let encrypted='';

package/src/pages/api/health.ts

@@ -0,0 +1,17 @@
+import type { APIRoute } from 'astro';
+import { getRepo } from '../../lib/repo';
+import { healthReport } from '../../lib/monitoring';
+
+// Public health check for uptime monitors (Uptime Kuma): 200 when the site
+// works, 503 when the database or the scheduler is down. Names only which part
+// failed; no settings, versions or secrets. Cached 10 s.
+const headers = { 'Cache-Control': 'no-store', 'X-Content-Type-Options': 'nosniff' };
+export const GET: APIRoute = async ({ locals }) => {
+  try {
+    const report = await healthReport(await getRepo(locals), locals);
+    return Response.json(report, { status: report.status === 'down' ? 503 : 200, headers });
+  } catch {
+    return Response.json({ status: 'down', checks: { database: 'down', scheduler: 'stalled', email: 'off' }, checkedAt: new Date().toISOString() }, { status: 503, headers });
+  }
+};
+export const HEAD: APIRoute = async (c) => { const r = await GET(c); return new Response(null, { status: r.status, headers }); };

package/src/pages/api/live/oauth/youtube/callback.ts

@@ -1,14 +1,15 @@
 import type { APIRoute } from 'astro';
 import { getRepo } from '../../../../../lib/repo';
 import { ApiError } from '../../../../../lib/api';
-import { validateSession, SESSION_COOKIE, OWNER_ENV } from '../../../../../lib/auth';
+import { OWNER_ENV } from '../../../../../lib/auth';
+import { requestSessionBinding, validateRequestSession } from '../../../../../lib/auth/request';
 import { finishOAuth } from '../../../../../lib/live/service';
-export const GET:APIRoute=async({cookies,locals,url})=>{
+export const GET:APIRoute=async({request,cookies,locals,url})=>{
   const headers={'Cache-Control':'no-store','Referrer-Policy':'no-referrer'};
   try{
-    const repo=await getRepo(locals),session=cookies.get(SESSION_COOKIE)?.value;
+    const repo=await getRepo(locals),session=await requestSessionBinding(request,cookies,locals);
     // OAuth is intentionally a cross-site GET. Session-bound, one-use state provides CSRF protection.
-    const user=await validateSession(session,repo);
+    const user=await validateRequestSession(request,cookies,repo);
     if(!session||!user||user!==OWNER_ENV&&(await repo.getUser(user))?.role!=='owner')throw new ApiError(403,'Sign in as the site owner and start authorization again.');
     await finishOAuth(repo,session,url,locals);
     return new Response(null,{status:303,headers:{...headers,Location:'/admin/live?live=connected'}});

package/src/pages/api/live/settings.ts

@@ -2,7 +2,7 @@ import type { APIRoute } from 'astro';
 import { z } from 'zod';
 import { getRepo } from '../../../lib/repo';
 import { ApiError, apiError, json, readJson, requireSession } from '../../../lib/api';
-import { SESSION_COOKIE } from '../../../lib/auth';
+import { requestSessionBinding } from '../../../lib/auth/request';
 import { Provider } from '../../../lib/live/types';
 import { adminState, beginOAuth, disconnect, saveConnection, syncConnection, validateConfig } from '../../../lib/live/service';
 const Input=z.discriminatedUnion('action',[
@@ -26,7 +26,7 @@ export const POST:APIRoute=async({request,cookies,locals,url})=>{
     switch(input.action){
       case 'saveConnection':await saveConnection(repo,input,locals);break;
       case 'test':await syncConnection(repo,input.provider,locals,true);break;
-      case 'authorize':return json({authorizationUrl:await beginOAuth(repo,cookies.get(SESSION_COOKIE)!.value,url,locals)});
+      case 'authorize':return json({authorizationUrl:await beginOAuth(repo,await requestSessionBinding(request,cookies,locals),url,locals)});
       case 'disconnect':await disconnect(repo,input.provider,locals);break;
       case 'saveConfig':await repo.updateSettings({live:validateConfig(input.config)});break;
       case 'selectChannel':{

package/src/pages/api/media/upload.ts

@@ -1,5 +1,5 @@
 import type { APIRoute } from 'astro';
-import { validateSession, SESSION_COOKIE } from '../../../lib/auth';
+import { validateRequestSession } from '../../../lib/auth/request';
 import { getRepo } from '../../../lib/repo';
 import { ApiError } from '../../../lib/api';
 import { storeUpload } from '../../../lib/media/upload';
@@ -7,7 +7,7 @@ import { storeUpload } from '../../../lib/media/upload';
 // Multipart upload from the admin; the rules live in lib/media/upload.ts
 // (shared with editor apps).
 export const POST: APIRoute = async ({ request, cookies, locals }) => {
-  if (!(await validateSession(cookies.get(SESSION_COOKIE)?.value, locals))) {
+  if (!(await validateRequestSession(request, cookies, locals))) {
     return Response.json({ error: 'Unauthorized' }, { status: 401 });
   }
   const form = await request.formData();

package/src/pages/api/mobile/access.ts

@@ -0,0 +1,22 @@
+import type { APIRoute } from 'astro';
+import { getRepo } from '../../../lib/repo';
+import { ApiError, apiError, json, readJson, requireSession } from '../../../lib/api';
+import { AppAccessInput, appAccessAction, appAccessState } from '../../../lib/mobile/access-admin';
+
+// Admin → Mobile app → App access (owner only, this site's admin only).
+export const GET: APIRoute = async ({ request, cookies, locals }) => {
+  try {
+    const repo = await getRepo(locals);
+    await requireSession(request, cookies, repo, true);
+    return json(await appAccessState(repo, locals));
+  } catch (e) { return apiError(e); }
+};
+export const POST: APIRoute = async ({ request, cookies, locals, url }) => {
+  try {
+    const repo = await getRepo(locals);
+    await requireSession(request, cookies, repo, true);
+    if (request.headers.get('origin') !== url.origin) throw new ApiError(403, 'Change this from this site’s admin.');
+    await appAccessAction(repo, AppAccessInput.parse(await readJson(request, 5_000)));
+    return json(await appAccessState(repo, locals));
+  } catch (e) { return apiError(e); }
+};

package/src/pages/api/monitoring.ts

@@ -0,0 +1,22 @@
+import type { APIRoute } from 'astro';
+import { getRepo } from '../../lib/repo';
+import { ApiError, apiError, json, readJson, requireSession } from '../../lib/api';
+import { MonitoringInput, monitoringAction, monitoringState } from '../../lib/monitoring';
+
+// Settings → Monitoring (owner only, this site's admin only).
+export const GET: APIRoute = async ({ request, cookies, locals }) => {
+  try {
+    const repo = await getRepo(locals);
+    await requireSession(request, cookies, repo, true);
+    return json(await monitoringState(repo, locals));
+  } catch (e) { return apiError(e); }
+};
+export const POST: APIRoute = async ({ request, cookies, locals, url }) => {
+  try {
+    const repo = await getRepo(locals);
+    await requireSession(request, cookies, repo, true);
+    if (request.headers.get('origin') !== url.origin) throw new ApiError(403, 'Change this from this site’s admin.');
+    await monitoringAction(repo, MonitoringInput.parse(await readJson(request, 5_000)), locals);
+    return json(await monitoringState(repo, locals));
+  } catch (e) { return apiError(e); }
+};

package/src/pages/api/ops/status.ts

@@ -17,7 +17,8 @@ export const GET: APIRoute = async ({ request, locals }) => {
     return Response.json({ ok: canonicalHttps && secretsPresent && schedulerHealthy,
       database: env?.DB ? 'd1' : 'sqlite', media: env?.MEDIA ? 'r2' : 'filesystem',
       canonicalHttps, secretsPresent, schedulerHealthy, scheduler,
-    }, { headers });
+    // 503 when anything is wrong, so a plain HTTP monitor sees it too
+    }, { status: canonicalHttps && secretsPresent && schedulerHealthy ? 200 : 503, headers });
   } catch { return Response.json({ ok: false, error: 'Unable to check deployment.' }, { status: 503, headers }); }
 };
 // Explicit authenticated probe; writes only a random short-lived object.

package/src/pages/api/push/admin.ts

@@ -1,7 +1,8 @@
 import type { APIRoute } from 'astro';
 import { getRepo } from '../../../lib/repo';
 import { ApiError, apiError, json, readJson, requireSession } from '../../../lib/api';
-import { OWNER_ENV, SESSION_COOKIE, validateSession } from '../../../lib/auth';
+import { OWNER_ENV } from '../../../lib/auth';
+import { validateRequestSession } from '../../../lib/auth/request';
 import { AdminPushInput, adminPushAction, adminPushState } from '../../../lib/push/api';
 
 // Admin → Mobile app (owner only; registered only when push is enabled).
@@ -19,7 +20,7 @@ export const POST: APIRoute = async ({ request, cookies, locals, url }) => {
     // sending reaches every installed app: only from this site's admin
     if (request.headers.get('origin') !== url.origin) throw new ApiError(403, 'Send from this site’s admin.');
     const input = AdminPushInput.parse(await readJson(request, 20_000));
-    const id = await validateSession(cookies.get(SESSION_COOKIE)?.value, repo);
+    const id = await validateRequestSession(request, cookies, repo);
     const author = id === OWNER_ENV ? 'Owner' : (await repo.getUser(id ?? ''))?.name ?? '';
     const result = await adminPushAction(repo, input, { url, locals, author });
     return json({ ...result, state: input.action === 'count' ? undefined : await adminPushState(repo, url, locals) });

package/src/pages/api/restore.ts

@@ -1,12 +1,13 @@
 import type { APIRoute } from 'astro';
-import { validateSession, OWNER_ENV, SESSION_COOKIE } from '../../lib/auth';
+import { OWNER_ENV } from '../../lib/auth';
+import { getRequestAuth, validateRequestSession } from '../../lib/auth/request';
 import { getRepo } from '../../lib/repo';
 import { getMediaStore } from '../../lib/media/store';
 import { unzip } from '../../lib/backup/unzip';
 import { BackupContent } from '../../lib/backup/content';
 
 export const POST: APIRoute = async ({ request, cookies, locals, url }) => {
-  const sessionUserId = (await validateSession(cookies.get(SESSION_COOKIE)?.value, locals));
+  const sessionUserId = (await validateRequestSession(request, cookies, locals));
   if (!sessionUserId) return Response.json({ error: 'Unauthorized' }, { status: 401 });
   const repo = await getRepo(locals);
   const sessionUser = sessionUserId !== OWNER_ENV ? await repo.getUser(sessionUserId) : null;
@@ -45,6 +46,8 @@ export const POST: APIRoute = async ({ request, cookies, locals, url }) => {
     return Response.json({ error: 'content.json failed validation — is this from a newer acms?' }, { status: 400 });
   }
   const content = parsed.data;
+  const auth = await getRequestAuth(request, cookies, locals);
+  if (auth.clerk && (!auth.reverified || !content.users.some(u => u.id === sessionUserId && u.role === 'owner' && u.email === sessionUser?.email))) return Response.json({error:'A Clerk restore requires recent verification and a backup containing your current owner account. Sign in again and choose a matching backup.'}, {status:409});
   delete content.settings.ai;
   delete content.settings.agent;
 
@@ -86,7 +89,7 @@ export const POST: APIRoute = async ({ request, cookies, locals, url }) => {
       await store.put(key, buf, m.mime);
     }
   }
-  await repo.restoreAll(content);
+  await repo.restoreAll(content, auth.clerk ? { issuer: auth.clerk.issuer, subject: auth.clerk.subject, userId: sessionUserId } : undefined);
 
   return Response.json({ ok: true, restored: { posts: content.posts.length, pages: content.pages.length, media: content.media.length, events: content.events.length, bookings: content.bookings.length, bookingRequests: content.bookingRequests?.length ?? 0 } }, { headers: { 'Cache-Control': 'no-store' } });
 };

package/src/pages/api/v1/admin/bookings/[id]/[action].ts

@@ -1,11 +1,17 @@
 import { editorRoute, logWrite } from '../../../../../../lib/editor/http';
 import { BookingActionInput, bookingAction } from '../../../../../../lib/editor/bookings';
+import { RescheduleInput, staffReschedule } from '../../../../../../lib/editor/schedule';
 import { methodNotAllowed } from '../../../../../../lib/mobile/http';
 import { readJson } from '../../../../../../lib/api';
 export { preflight as OPTIONS } from '../../../../../../lib/mobile/http';
-// approve | decline | cancel — the guest is emailed, as from Admin → Bookings
+// approve | decline | cancel | reschedule — the guest is emailed, as from Admin → Bookings
 export const POST = editorRoute(async (c) => {
   const { id, action } = c.context.params;
+  if (action === 'reschedule') {
+    const result = await staffReschedule(c, id!, RescheduleInput.parse(await readJson(c.context.request, 5_000)));
+    await logWrite(c, 'booking-reschedule', `booking:${id}`);
+    return result;
+  }
   const body = c.context.request.headers.get('content-type') ? BookingActionInput.parse(await readJson(c.context.request, 5_000)) : {};
   const result = await bookingAction(c.repo, id!, action!, body, { url: c.context.url, locals: c.context.locals });
   await logWrite(c, `booking-${action}`, `booking:${id}`);

package/src/pages/api/v1/admin/bookings/index.ts

@@ -1,6 +1,14 @@
-import { editorRoute } from '../../../../../lib/editor/http';
+import { editorRoute, logWrite } from '../../../../../lib/editor/http';
 import { InboxQuery, inbox } from '../../../../../lib/editor/bookings';
+import { StaffBookingInput, staffBook } from '../../../../../lib/editor/schedule';
 import { methodNotAllowed, queryParams } from '../../../../../lib/mobile/http';
+import { readJson } from '../../../../../lib/api';
 export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
 export const GET = editorRoute(async ({ repo, context }) => inbox(repo, InboxQuery.parse(queryParams(context.url))));
-export const ALL = () => methodNotAllowed('GET, OPTIONS');
+// book on someone's behalf (the guest gets the usual emails)
+export const POST = editorRoute(async (c) => {
+  const b = await staffBook(c, StaffBookingInput.parse(await readJson(c.context.request, 50_000)));
+  await logWrite(c, 'booking-create', `booking:${b.id}`);
+  return b;
+}, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('GET, POST, OPTIONS');

package/src/pages/api/v1/admin/calendars/[id].ts

@@ -0,0 +1,16 @@
+import { editorRoute, logWrite } from '../../../../../lib/editor/http';
+import { CalendarPatch, deleteCalendarFor, updateCalendarFor } from '../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+import { readJson } from '../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const PATCH = editorRoute(async (c) => {
+  const cal = await updateCalendarFor(c, c.context.params.id!, CalendarPatch.parse(await readJson(c.context.request, 10_000)));
+  await logWrite(c, 'calendar-update', `calendar:${cal.id}`);
+  return cal;
+}, { write: true });
+export const DELETE = editorRoute(async (c) => {
+  const cal = await deleteCalendarFor(c, c.context.params.id!);
+  await logWrite(c, 'calendar-delete', `calendar:${cal.id}`);
+  return cal;
+}, { write: true });
+export const ALL = () => methodNotAllowed('PATCH, DELETE, OPTIONS');

package/src/pages/api/v1/admin/calendars/index.ts

@@ -0,0 +1,12 @@
+import { editorRoute, logWrite } from '../../../../../lib/editor/http';
+import { CalendarBody, createCalendarFor, listCalendarsFor } from '../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+import { readJson } from '../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = editorRoute(async (c) => listCalendarsFor(c));
+export const POST = editorRoute(async (c) => {
+  const cal = await createCalendarFor(c, CalendarBody.parse(await readJson(c.context.request, 10_000)));
+  await logWrite(c, 'calendar-create', `calendar:${cal.id}`);
+  return cal;
+}, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('GET, POST, OPTIONS');

package/src/pages/api/v1/admin/forms/[id]/responses.ts

@@ -0,0 +1,7 @@
+import { editorRoute } from '../../../../../../lib/editor/http';
+import { ResponsesQuery, formResponsesFor } from '../../../../../../lib/editor/site-data';
+import { methodNotAllowed, queryParams } from '../../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../../lib/mobile/http';
+// administrators and owners only: responses hold personal details
+export const GET = editorRoute(async (c) => formResponsesFor(c, c.context.params.id!, ResponsesQuery.parse(queryParams(c.context.url))));
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/admin/forms/index.ts

@@ -0,0 +1,6 @@
+import { editorRoute } from '../../../../../lib/editor/http';
+import { listFormsFor } from '../../../../../lib/editor/site-data';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = editorRoute(async (c) => listFormsFor(c));
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/admin/links.ts

@@ -0,0 +1,13 @@
+import { editorRoute, logWrite } from '../../../../lib/editor/http';
+import { LinksPut, getLinksFor, putLinksFor } from '../../../../lib/editor/site-data';
+import { methodNotAllowed } from '../../../../lib/mobile/http';
+import { readJson } from '../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../lib/mobile/http';
+export const GET = editorRoute(async (c) => getLinksFor(c));
+// replaces the whole page (profile + blocks in order)
+export const PUT = editorRoute(async (c) => {
+  const result = await putLinksFor(c, LinksPut.parse(await readJson(c.context.request, 300_000)));
+  await logWrite(c, 'links-update', 'links');
+  return result;
+}, { write: true });
+export const ALL = () => methodNotAllowed('GET, PUT, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/blocks/[blockId].ts

@@ -0,0 +1,10 @@
+import { editorRoute, logWrite } from '../../../../../../../lib/editor/http';
+import { removeBlock } from '../../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../../../lib/mobile/http';
+export const DELETE = editorRoute(async (c) => {
+  const b = await removeBlock(c, c.context.params.id!, c.context.params.blockId!);
+  await logWrite(c, 'block-delete', `booking:${b.id}`);
+  return b;
+}, { write: true });
+export const ALL = () => methodNotAllowed('DELETE, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/blocks/index.ts

@@ -0,0 +1,12 @@
+import { editorRoute, logWrite } from '../../../../../../../lib/editor/http';
+import { BlockInput, addBlock } from '../../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../../lib/mobile/http';
+import { readJson } from '../../../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../../../lib/mobile/http';
+// close a room for a while (no booking can land on it)
+export const POST = editorRoute(async (c) => {
+  const b = await addBlock(c, c.context.params.id!, BlockInput.parse(await readJson(c.context.request, 5_000)));
+  await logWrite(c, 'block-create', `booking:${b.id}`);
+  return b;
+}, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/index.ts

@@ -0,0 +1,17 @@
+import { editorRoute, logWrite } from '../../../../../../lib/editor/http';
+import { ResourcePatch, deleteResourceFor, getResourceFor, updateResourceFor } from '../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../lib/mobile/http';
+import { readJson } from '../../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../../lib/mobile/http';
+export const GET = editorRoute(async (c) => getResourceFor(c, c.context.params.id!));
+export const PATCH = editorRoute(async (c) => {
+  const r = await updateResourceFor(c, c.context.params.id!, ResourcePatch.parse(await readJson(c.context.request, 100_000)));
+  await logWrite(c, 'resource-update', `resource:${r.id}`);
+  return r;
+}, { write: true });
+export const DELETE = editorRoute(async (c) => {
+  const r = await deleteResourceFor(c, c.context.params.id!);
+  await logWrite(c, 'resource-delete', `resource:${r.id}`);
+  return r;
+}, { write: true });
+export const ALL = () => methodNotAllowed('GET, PATCH, DELETE, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/links/[linkId].ts

@@ -0,0 +1,16 @@
+import { editorRoute, logWrite } from '../../../../../../../lib/editor/http';
+import { LinkPatch, deleteLinkFor, updateLinkFor } from '../../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../../lib/mobile/http';
+import { readJson } from '../../../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../../../lib/mobile/http';
+export const PATCH = editorRoute(async (c) => {
+  const l = await updateLinkFor(c, c.context.params.id!, c.context.params.linkId!, LinkPatch.parse(await readJson(c.context.request, 100_000)));
+  await logWrite(c, 'booking-link-update', `booking-link:${l.id}`);
+  return l;
+}, { write: true });
+export const DELETE = editorRoute(async (c) => {
+  const l = await deleteLinkFor(c, c.context.params.id!, c.context.params.linkId!);
+  await logWrite(c, 'booking-link-delete', `booking-link:${l.id}`);
+  return l;
+}, { write: true });
+export const ALL = () => methodNotAllowed('PATCH, DELETE, OPTIONS');

package/src/pages/api/v1/admin/resources/[id]/links/index.ts

@@ -0,0 +1,12 @@
+import { editorRoute, logWrite } from '../../../../../../../lib/editor/http';
+import { LinkInput, createLinkFor } from '../../../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../../../lib/mobile/http';
+import { readJson } from '../../../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../../../lib/mobile/http';
+// a new booking type for this room or service
+export const POST = editorRoute(async (c) => {
+  const l = await createLinkFor(c, c.context.params.id!, LinkInput.parse(await readJson(c.context.request, 100_000)));
+  await logWrite(c, 'booking-link-create', `booking-link:${l.id}`);
+  return l;
+}, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/admin/resources/index.ts

@@ -0,0 +1,12 @@
+import { editorRoute, logWrite } from '../../../../../lib/editor/http';
+import { ResourceInput, createResourceFor, listResourcesFor } from '../../../../../lib/editor/schedule';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+import { readJson } from '../../../../../lib/api';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = editorRoute(async (c) => listResourcesFor(c));
+export const POST = editorRoute(async (c) => {
+  const r = await createResourceFor(c, ResourceInput.parse(await readJson(c.context.request, 100_000)));
+  await logWrite(c, 'resource-create', `resource:${r.id}`);
+  return r;
+}, { write: true, status: 201 });
+export const ALL = () => methodNotAllowed('GET, POST, OPTIONS');

package/src/pages/api/v1/admin/schedule.ts

@@ -0,0 +1,7 @@
+import { editorRoute } from '../../../../lib/editor/http';
+import { ScheduleQuery, schedule } from '../../../../lib/editor/schedule';
+import { methodNotAllowed, queryParams } from '../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../lib/mobile/http';
+// bookings, blocked time, events and subscribed calendars for a date range
+export const GET = editorRoute(async (c) => schedule(c, ScheduleQuery.parse(queryParams(c.context.url))));
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/bookings/manage/availability.ts

@@ -0,0 +1,6 @@
+import { managedAvailability } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = privateRoute(managedAvailability);
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/bookings/manage/cancel.ts

@@ -0,0 +1,6 @@
+import { cancelManaged } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const POST = privateRoute(cancelManaged, { write: true });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/bookings/manage/ics.ts

@@ -0,0 +1,6 @@
+import { managedIcs } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = privateRoute(managedIcs);
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/bookings/manage/index.ts

@@ -0,0 +1,6 @@
+import { getManaged } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const GET = privateRoute(getManaged);
+export const ALL = () => methodNotAllowed('GET, OPTIONS');

package/src/pages/api/v1/bookings/manage/reschedule.ts

@@ -0,0 +1,6 @@
+import { rescheduleManaged } from '../../../../../lib/mobile/manage';
+import { privateRoute } from '../../../../../lib/mobile/route';
+import { methodNotAllowed } from '../../../../../lib/mobile/http';
+export { preflight as OPTIONS } from '../../../../../lib/mobile/http';
+export const POST = privateRoute(rescheduleManaged, { write: true });
+export const ALL = () => methodNotAllowed('POST, OPTIONS');

package/src/pages/api/v1/calendars.ts

@@ -2,6 +2,6 @@ import { listCalendars } from '../../../lib/mobile/calendar';
 import { readRoute } from '../../../lib/mobile/route';
 import { methodNotAllowed } from '../../../lib/mobile/http';
 export { preflight as OPTIONS } from '../../../lib/mobile/http';
-export const GET = readRoute(listCalendars, true);
+export const GET = readRoute(listCalendars, true, false, { timeless: true });
 export const HEAD = GET;
 export const ALL = () => methodNotAllowed();