@commonpub/layer 0.11.0 → 0.14.0

package/pages/events/[slug]/index.vue

@@ -0,0 +1,249 @@
+<script setup lang="ts">
+import type { EventDetail, AttendeeItem, AttendeeStatus } from '@commonpub/server';
+
+const route = useRoute();
+const slug = route.params.slug as string;
+const toast = useToast();
+const { isAuthenticated, user } = useAuth();
+
+const { data: event, refresh } = await useFetch<EventDetail>(`/api/events/${slug}`);
+const { data: attendees } = await useFetch<{ items: AttendeeItem[]; total: number }>(`/api/events/${slug}/attendees`);
+
+useSeoMeta({ title: event.value ? `${event.value.title} — Events — ${useSiteName()}` : `Event — ${useSiteName()}` });
+
+const rsvpLoading = ref(false);
+
+const myRsvpStatus = computed((): AttendeeStatus | null => {
+  if (!isAuthenticated.value || !attendees.value) return null;
+  const found = attendees.value.items.find((a: AttendeeItem) => a.userId === user.value?.id);
+  return found?.status ?? null;
+});
+
+const isOwner = computed(() => user.value?.id === event.value?.createdById);
+const isAdmin = computed(() => user.value?.role === 'admin');
+const canEdit = computed(() => isOwner.value || isAdmin.value);
+const spotsLeft = computed(() => {
+  if (!event.value?.capacity) return null;
+  return Math.max(0, event.value.capacity - event.value.attendeeCount);
+});
+
+async function rsvp(): Promise<void> {
+  rsvpLoading.value = true;
+  try {
+    await $fetch(`/api/events/${slug}/rsvp`, { method: 'POST' });
+    toast.success('RSVP confirmed');
+    await refresh();
+  } catch (e: unknown) {
+    const msg = (e as { data?: { message?: string } })?.data?.message ?? 'RSVP failed';
+    toast.error(msg);
+  } finally {
+    rsvpLoading.value = false;
+  }
+}
+
+async function cancelRsvp(): Promise<void> {
+  rsvpLoading.value = true;
+  try {
+    await $fetch(`/api/events/${slug}/rsvp`, { method: 'DELETE' });
+    toast.success('RSVP cancelled');
+    await refresh();
+  } catch {
+    toast.error('Failed to cancel RSVP');
+  } finally {
+    rsvpLoading.value = false;
+  }
+}
+
+function formatDate(date: string | Date): string {
+  return new Date(date).toLocaleDateString('en-US', {
+    weekday: 'long',
+    month: 'long',
+    day: 'numeric',
+    year: 'numeric',
+  });
+}
+
+function formatTime(date: string | Date): string {
+  return new Date(date).toLocaleTimeString('en-US', {
+    hour: 'numeric',
+    minute: '2-digit',
+  });
+}
+
+const typeIcon = computed(() => {
+  const map: Record<string, string> = {
+    'in-person': 'fa-solid fa-location-dot',
+    'online': 'fa-solid fa-video',
+    'hybrid': 'fa-solid fa-arrows-split-up-and-left',
+  };
+  return map[event.value?.eventType ?? ''] ?? 'fa-solid fa-calendar';
+});
+</script>
+
+<template>
+  <div v-if="event" class="cpub-event-detail">
+    <div v-if="event.coverImage" class="cpub-event-hero">
+      <img :src="event.coverImage" :alt="event.title" />
+    </div>
+
+    <div class="cpub-event-content">
+      <div class="cpub-event-main">
+        <div class="cpub-event-badges">
+          <span class="cpub-badge" :class="{
+            'cpub-badge-green': event.status === 'active',
+            'cpub-badge-accent': event.status === 'published',
+            'cpub-badge-dim': event.status === 'completed',
+            'cpub-badge-red': event.status === 'cancelled',
+            'cpub-badge-yellow': event.status === 'draft',
+          }">{{ event.status }}</span>
+          <span v-if="event.isFeatured" class="cpub-badge cpub-badge-accent"><i class="fa-solid fa-star"></i> Featured</span>
+          <span class="cpub-badge"><i :class="typeIcon"></i> {{ event.eventType }}</span>
+        </div>
+
+        <h1 class="cpub-event-title">{{ event.title }}</h1>
+
+        <div class="cpub-event-info-grid">
+          <div class="cpub-event-info-item">
+            <i class="fa-solid fa-calendar"></i>
+            <div>
+              <div>{{ formatDate(event.startDate) }}</div>
+              <div class="cpub-event-info-sub">{{ formatTime(event.startDate) }} — {{ formatTime(event.endDate) }}</div>
+            </div>
+          </div>
+          <div v-if="event.location" class="cpub-event-info-item">
+            <i class="fa-solid fa-map-pin"></i>
+            <div>
+              <div>{{ event.location }}</div>
+              <a v-if="event.locationUrl" :href="event.locationUrl" target="_blank" rel="noopener" class="cpub-event-info-sub">View map <i class="fa-solid fa-arrow-up-right-from-square" style="font-size: 8px;"></i></a>
+            </div>
+          </div>
+          <div v-if="event.onlineUrl" class="cpub-event-info-item">
+            <i class="fa-solid fa-video"></i>
+            <div>
+              <a :href="event.onlineUrl" target="_blank" rel="noopener">Join online <i class="fa-solid fa-arrow-up-right-from-square" style="font-size: 8px;"></i></a>
+            </div>
+          </div>
+        </div>
+
+        <div v-if="event.description" class="cpub-event-description">
+          {{ event.description }}
+        </div>
+
+        <div class="cpub-event-organizer">
+          <span class="cpub-event-organizer-label">Organized by</span>
+          <NuxtLink :to="`/u/${event.createdByUsername}`" class="cpub-event-organizer-link">
+            <span class="cpub-event-avatar">
+              <img v-if="event.createdByAvatar" :src="event.createdByAvatar" :alt="event.createdByName" />
+              <span v-else>{{ event.createdByName.charAt(0) }}</span>
+            </span>
+            {{ event.createdByName }}
+          </NuxtLink>
+        </div>
+      </div>
+
+      <aside class="cpub-event-sidebar">
+        <div class="cpub-event-rsvp-card">
+          <div class="cpub-event-rsvp-count">
+            <span class="cpub-event-rsvp-num">{{ event.attendeeCount }}</span>
+            <span class="cpub-event-rsvp-label">{{ event.attendeeCount === 1 ? 'attendee' : 'attendees' }}</span>
+          </div>
+          <div v-if="spotsLeft !== null" class="cpub-event-rsvp-spots">
+            {{ spotsLeft > 0 ? `${spotsLeft} spots left` : 'Event is full' }}
+          </div>
+
+          <template v-if="isAuthenticated && event.status !== 'completed' && event.status !== 'cancelled' && event.status !== 'draft'">
+            <button
+              v-if="!myRsvpStatus"
+              class="cpub-btn cpub-btn-primary cpub-btn-block"
+              :disabled="rsvpLoading || (spotsLeft !== null && spotsLeft <= 0)"
+              @click="rsvp"
+            >
+              <i :class="rsvpLoading ? 'fa-solid fa-circle-notch fa-spin' : 'fa-solid fa-check'"></i>
+              {{ spotsLeft !== null && spotsLeft <= 0 ? 'Join Waitlist' : 'RSVP' }}
+            </button>
+            <div v-else class="cpub-event-rsvp-status">
+              <span class="cpub-badge cpub-badge-green" v-if="myRsvpStatus === 'registered'">Registered</span>
+              <span class="cpub-badge cpub-badge-yellow" v-else-if="myRsvpStatus === 'waitlisted'">Waitlisted</span>
+              <button class="cpub-btn cpub-btn-sm cpub-btn-block" :disabled="rsvpLoading" @click="cancelRsvp">
+                Cancel RSVP
+              </button>
+            </div>
+          </template>
+
+          <NuxtLink v-if="canEdit" :to="`/events/${event.slug}/edit`" class="cpub-btn cpub-btn-sm cpub-btn-block" style="margin-top: 8px; text-align: center;">
+            <i class="fa-solid fa-pencil"></i> Edit Event
+          </NuxtLink>
+        </div>
+
+        <div v-if="attendees?.items?.length" class="cpub-event-attendees-preview">
+          <h3 class="cpub-event-sidebar-title">Attendees</h3>
+          <div class="cpub-event-attendees-list">
+            <NuxtLink
+              v-for="att in attendees.items.slice(0, 8)"
+              :key="att.id"
+              :to="`/u/${att.userUsername}`"
+              class="cpub-event-attendee"
+              :title="att.userName"
+            >
+              <span class="cpub-event-avatar cpub-event-avatar-sm">
+                <img v-if="att.userAvatar" :src="att.userAvatar" :alt="att.userName" />
+                <span v-else>{{ att.userName.charAt(0) }}</span>
+              </span>
+            </NuxtLink>
+            <span v-if="attendees.total > 8" class="cpub-event-attendee-more">+{{ attendees.total - 8 }}</span>
+          </div>
+        </div>
+      </aside>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.cpub-event-detail { max-width: 960px; margin: 0 auto; padding: 32px; }
+.cpub-event-hero { height: 240px; overflow: hidden; border: var(--border-width-default) solid var(--border); margin-bottom: 24px; }
+.cpub-event-hero img { width: 100%; height: 100%; object-fit: cover; }
+
+.cpub-event-content { display: grid; grid-template-columns: 1fr 280px; gap: 32px; }
+.cpub-event-main { min-width: 0; }
+
+.cpub-event-badges { display: flex; gap: 6px; flex-wrap: wrap; margin-bottom: 12px; }
+.cpub-event-title { font-size: 24px; font-weight: 700; margin: 0 0 20px; }
+
+.cpub-event-info-grid { display: flex; flex-direction: column; gap: 12px; margin-bottom: 24px; }
+.cpub-event-info-item { display: flex; gap: 10px; align-items: flex-start; font-size: 13px; }
+.cpub-event-info-item > i { width: 16px; text-align: center; margin-top: 3px; color: var(--accent); }
+.cpub-event-info-sub { font-size: 11px; color: var(--text-dim); margin-top: 2px; }
+.cpub-event-info-sub a { color: var(--accent); text-decoration: none; }
+
+.cpub-event-description { font-size: 14px; line-height: 1.7; color: var(--text-dim); white-space: pre-wrap; margin-bottom: 24px; }
+
+.cpub-event-organizer { padding-top: 16px; border-top: var(--border-width-default) solid var(--border2); }
+.cpub-event-organizer-label { font-family: var(--font-mono); font-size: 10px; text-transform: uppercase; letter-spacing: 0.1em; color: var(--text-faint); display: block; margin-bottom: 8px; }
+.cpub-event-organizer-link { display: flex; align-items: center; gap: 8px; text-decoration: none; color: var(--text); font-size: 13px; font-weight: 600; }
+
+.cpub-event-avatar { width: 28px; height: 28px; border-radius: 50%; background: var(--surface2); border: var(--border-width-default) solid var(--border); display: flex; align-items: center; justify-content: center; font-size: 11px; font-weight: 700; overflow: hidden; flex-shrink: 0; }
+.cpub-event-avatar img { width: 100%; height: 100%; object-fit: cover; }
+.cpub-event-avatar-sm { width: 24px; height: 24px; font-size: 9px; }
+
+.cpub-event-sidebar { display: flex; flex-direction: column; gap: 16px; }
+.cpub-event-rsvp-card { padding: 16px; border: var(--border-width-default) solid var(--border); background: var(--surface); display: flex; flex-direction: column; gap: 12px; }
+.cpub-event-rsvp-count { display: flex; align-items: baseline; gap: 6px; }
+.cpub-event-rsvp-num { font-size: 24px; font-weight: 700; font-family: var(--font-mono); }
+.cpub-event-rsvp-label { font-size: 12px; color: var(--text-dim); }
+.cpub-event-rsvp-spots { font-family: var(--font-mono); font-size: 11px; color: var(--text-faint); }
+.cpub-event-rsvp-status { display: flex; flex-direction: column; gap: 8px; }
+.cpub-btn-block { width: 100%; justify-content: center; }
+
+.cpub-event-attendees-preview { padding: 16px; border: var(--border-width-default) solid var(--border); background: var(--surface); }
+.cpub-event-sidebar-title { font-family: var(--font-mono); font-size: 10px; font-weight: 700; text-transform: uppercase; letter-spacing: 0.1em; color: var(--text-faint); margin: 0 0 12px; }
+.cpub-event-attendees-list { display: flex; flex-wrap: wrap; gap: 4px; align-items: center; }
+.cpub-event-attendee { text-decoration: none; }
+.cpub-event-attendee-more { font-family: var(--font-mono); font-size: 10px; color: var(--text-faint); margin-left: 4px; }
+
+@media (max-width: 768px) {
+  .cpub-event-detail { padding: 16px; }
+  .cpub-event-content { grid-template-columns: 1fr; gap: 20px; }
+  .cpub-event-hero { height: 180px; }
+  .cpub-event-title { font-size: 20px; }
+}
+</style>

package/pages/events/create.vue

@@ -0,0 +1,140 @@
+<script setup lang="ts">
+definePageMeta({ middleware: 'auth' });
+useSeoMeta({ title: `Create Event — ${useSiteName()}` });
+
+const toast = useToast();
+const router = useRouter();
+const saving = ref(false);
+
+const form = reactive({
+  title: '',
+  description: '',
+  eventType: 'in-person' as 'in-person' | 'online' | 'hybrid',
+  startDate: '',
+  endDate: '',
+  timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+  location: '',
+  locationUrl: '',
+  onlineUrl: '',
+  capacity: undefined as number | undefined,
+});
+
+async function submit(): Promise<void> {
+  if (!form.title || !form.startDate || !form.endDate) {
+    toast.error('Title, start date, and end date are required');
+    return;
+  }
+
+  saving.value = true;
+  try {
+    const body: Record<string, unknown> = {
+      title: form.title,
+      startDate: new Date(form.startDate).toISOString(),
+      endDate: new Date(form.endDate).toISOString(),
+      eventType: form.eventType,
+      timezone: form.timezone,
+    };
+    if (form.description) body.description = form.description;
+    if (form.location) body.location = form.location;
+    if (form.locationUrl) body.locationUrl = form.locationUrl;
+    if (form.onlineUrl) body.onlineUrl = form.onlineUrl;
+    if (form.capacity) body.capacity = form.capacity;
+
+    const result = await $fetch<{ slug: string }>('/api/events', {
+      method: 'POST',
+      body,
+    });
+    toast.success('Event created');
+    router.push(`/events/${result.slug}`);
+  } catch {
+    toast.error('Failed to create event');
+  } finally {
+    saving.value = false;
+  }
+}
+</script>
+
+<template>
+  <div class="cpub-create-event">
+    <SectionHeader title="Create Event" large />
+
+    <form class="cpub-form" @submit.prevent="submit">
+      <div class="cpub-form-field">
+        <label class="cpub-form-label">Title *</label>
+        <input v-model="form.title" class="cpub-form-input" placeholder="Event title" required />
+      </div>
+
+      <div class="cpub-form-field">
+        <label class="cpub-form-label">Description</label>
+        <textarea v-model="form.description" class="cpub-form-textarea" rows="4" placeholder="Describe the event..." />
+      </div>
+
+      <div class="cpub-form-row">
+        <div class="cpub-form-field">
+          <label class="cpub-form-label">Type</label>
+          <select v-model="form.eventType" class="cpub-form-input">
+            <option value="in-person">In-Person</option>
+            <option value="online">Online</option>
+            <option value="hybrid">Hybrid</option>
+          </select>
+        </div>
+        <div class="cpub-form-field">
+          <label class="cpub-form-label">Capacity</label>
+          <input v-model.number="form.capacity" type="number" min="1" class="cpub-form-input" placeholder="Unlimited" />
+        </div>
+      </div>
+
+      <div class="cpub-form-row">
+        <div class="cpub-form-field">
+          <label class="cpub-form-label">Start Date *</label>
+          <input v-model="form.startDate" type="datetime-local" class="cpub-form-input" required />
+        </div>
+        <div class="cpub-form-field">
+          <label class="cpub-form-label">End Date *</label>
+          <input v-model="form.endDate" type="datetime-local" class="cpub-form-input" required />
+        </div>
+      </div>
+
+      <div v-if="form.eventType !== 'online'" class="cpub-form-row">
+        <div class="cpub-form-field">
+          <label class="cpub-form-label">Location</label>
+          <input v-model="form.location" class="cpub-form-input" placeholder="Venue name / address" />
+        </div>
+        <div class="cpub-form-field">
+          <label class="cpub-form-label">Location URL</label>
+          <input v-model="form.locationUrl" type="url" class="cpub-form-input" placeholder="Map link" />
+        </div>
+      </div>
+
+      <div v-if="form.eventType !== 'in-person'" class="cpub-form-field">
+        <label class="cpub-form-label">Online URL</label>
+        <input v-model="form.onlineUrl" type="url" class="cpub-form-input" placeholder="Meeting link" />
+      </div>
+
+      <div class="cpub-form-actions">
+        <NuxtLink to="/events" class="cpub-btn cpub-btn-sm">Cancel</NuxtLink>
+        <button type="submit" class="cpub-btn cpub-btn-primary cpub-btn-sm" :disabled="saving">
+          <i :class="saving ? 'fa-solid fa-circle-notch fa-spin' : 'fa-solid fa-check'"></i>
+          Create Event
+        </button>
+      </div>
+    </form>
+  </div>
+</template>
+
+<style scoped>
+.cpub-create-event { max-width: 640px; margin: 0 auto; padding: 32px; }
+.cpub-form { display: flex; flex-direction: column; gap: var(--space-4); margin-top: 24px; }
+.cpub-form-field { display: flex; flex-direction: column; gap: 4px; }
+.cpub-form-label { font-family: var(--font-mono); font-size: 10px; font-weight: 600; text-transform: uppercase; letter-spacing: 0.06em; color: var(--text-dim); }
+.cpub-form-input { font-size: 13px; padding: 8px 12px; border: var(--border-width-default) solid var(--border); background: var(--surface); color: var(--text); outline: none; }
+.cpub-form-input:focus { border-color: var(--accent); }
+.cpub-form-textarea { font-size: 13px; padding: 8px 12px; border: var(--border-width-default) solid var(--border); background: var(--surface); color: var(--text); outline: none; resize: vertical; font-family: inherit; }
+.cpub-form-row { display: grid; grid-template-columns: 1fr 1fr; gap: var(--space-4); }
+.cpub-form-actions { display: flex; gap: var(--space-3); justify-content: flex-end; padding-top: var(--space-4); border-top: var(--border-width-default) solid var(--border2); }
+
+@media (max-width: 768px) {
+  .cpub-create-event { padding: 16px; }
+  .cpub-form-row { grid-template-columns: 1fr; }
+}
+</style>

package/pages/events/index.vue

@@ -0,0 +1,47 @@
+<script setup lang="ts">
+import type { EventListItem } from '@commonpub/server';
+
+useSeoMeta({ title: `Events — ${useSiteName()}` });
+
+const { isAuthenticated } = useAuth();
+const { data } = await useFetch<{ items: EventListItem[]; total: number }>('/api/events');
+</script>
+
+<template>
+  <div class="cpub-events-page">
+    <div class="cpub-events-header">
+      <SectionHeader title="Events" large />
+      <NuxtLink v-if="isAuthenticated" to="/events/create" class="cpub-btn-create">
+        <i class="fa-solid fa-plus"></i> Create Event
+      </NuxtLink>
+    </div>
+
+    <div v-if="data?.items?.length" class="cpub-events-grid">
+      <EventCard v-for="event in data.items" :key="event.id" :event="event" />
+    </div>
+    <div v-else class="cpub-empty-state">
+      <div class="cpub-empty-state-icon"><i class="fa-solid fa-calendar-days"></i></div>
+      <p class="cpub-empty-state-title">No events yet</p>
+      <p class="cpub-empty-state-desc">Check back soon for upcoming events.</p>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.cpub-events-page { max-width: 960px; margin: 0 auto; padding: 32px; }
+.cpub-events-header { display: flex; align-items: center; justify-content: space-between; margin-bottom: 24px; }
+.cpub-btn-create {
+  font-size: 12px; padding: 6px 14px; background: var(--accent); color: var(--color-text-inverse);
+  border: var(--border-width-default) solid var(--border); text-decoration: none;
+  display: inline-flex; align-items: center; gap: 6px; box-shadow: var(--shadow-sm);
+  transition: all 0.15s;
+}
+.cpub-btn-create:hover { box-shadow: var(--shadow-md); transform: translate(-1px, -1px); }
+
+.cpub-events-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(280px, 1fr)); gap: 16px; }
+
+@media (max-width: 768px) {
+  .cpub-events-page { padding: 16px; }
+  .cpub-events-grid { grid-template-columns: 1fr; }
+}
+</style>

package/pages/federated-hubs/[id]/index.vue

@@ -74,6 +74,7 @@ const postsVM = computed<HubPostViewModel[]>(() => {
       },
       createdAt: String(p.publishedAt ?? p.receivedAt),
       likeCount: (p.localLikeCount ?? 0) + (p.remoteLikeCount ?? 0),
+      voteScore: 0,
       replyCount: (p.localReplyCount ?? 0) + (p.remoteReplyCount ?? 0),
       isPinned: p.isPinned ?? false,
       isLocked: false,

package/pages/hubs/[slug]/index.vue

@@ -72,6 +72,7 @@ const postsVM = computed<HubPostViewModel[]>(() => {
     },
     createdAt: p.createdAt,
     likeCount: p.likeCount ?? 0,
+    voteScore: p.voteScore ?? 0,
     replyCount: p.replyCount ?? 0,
     isPinned: p.isPinned ?? false,
     isLocked: p.isLocked ?? false,

package/server/api/admin/navigation/items.get.ts

@@ -0,0 +1,11 @@
+import { getNavItems } from '@commonpub/server';
+
+/**
+ * GET /api/admin/navigation/items
+ * Returns navigation items for admin editing.
+ */
+export default defineEventHandler(async (event) => {
+  requireAdmin(event);
+  const db = useDB();
+  return getNavItems(db);
+});

package/server/api/admin/navigation/items.put.ts

@@ -0,0 +1,51 @@
+import type { NavItem } from '@commonpub/server';
+import { setNavItems } from '@commonpub/server';
+import { z } from 'zod';
+
+const navItemSchema: z.ZodType<NavItem> = z.lazy(() =>
+  z.object({
+    id: z.string().min(1).max(64),
+    type: z.enum(['link', 'dropdown', 'external']),
+    label: z.string().min(1).max(128),
+    icon: z.string().max(128).optional(),
+    route: z.string().max(255).optional(),
+    href: z.string().url().max(1024).optional(),
+    featureGate: z.string().max(64).optional(),
+    children: z.array(navItemSchema).max(20).optional(),
+    visibleTo: z.enum(['all', 'authenticated', 'admin']).optional(),
+    disabled: z.boolean().optional(),
+  }),
+) as z.ZodType<NavItem>;
+
+const updateNavSchema = z.object({
+  items: z.array(navItemSchema).min(1).max(30),
+});
+
+/**
+ * PUT /api/admin/navigation/items
+ * Save navigation item configuration.
+ */
+export default defineEventHandler(async (event) => {
+  const user = requireAdmin(event);
+  const db = useDB();
+  const body = await parseBody(event, updateNavSchema);
+
+  // Validate unique IDs (flatten to check children too)
+  const ids = new Set<string>();
+  function collectIds(items: NavItem[]): void {
+    for (const item of items) {
+      if (ids.has(item.id)) {
+        throw createError({ statusCode: 400, statusMessage: `Duplicate nav item ID: ${item.id}` });
+      }
+      ids.add(item.id);
+      if (item.children) {
+        collectIds(item.children);
+      }
+    }
+  }
+  collectIds(body.items);
+
+  await setNavItems(db, body.items, user.id, getRequestIP(event) ?? undefined);
+
+  return { items: body.items, message: 'Navigation updated' };
+});

package/server/api/contests/[slug]/entries/[entryId]/vote.delete.ts

@@ -0,0 +1,20 @@
+import { removeContestEntryVote } from '@commonpub/server';
+
+/**
+ * DELETE /api/contests/:slug/entries/:entryId/vote
+ * Remove community vote from a contest entry.
+ */
+export default defineEventHandler(async (event) => {
+  requireFeature('contests');
+  const user = requireAuth(event);
+  const db = useDB();
+  const entryId = getRouterParam(event, 'entryId');
+  if (!entryId) throw createError({ statusCode: 400, statusMessage: 'Missing entryId' });
+
+  const removed = await removeContestEntryVote(db, entryId, user.id);
+  if (!removed) {
+    throw createError({ statusCode: 400, statusMessage: 'No vote found' });
+  }
+
+  return { removed: true };
+});

package/server/api/contests/[slug]/entries/[entryId]/vote.post.ts

@@ -0,0 +1,20 @@
+import { voteOnContestEntry } from '@commonpub/server';
+
+/**
+ * POST /api/contests/:slug/entries/:entryId/vote
+ * Vote on a contest entry (community voting).
+ */
+export default defineEventHandler(async (event) => {
+  requireFeature('contests');
+  const user = requireAuth(event);
+  const db = useDB();
+  const entryId = getRouterParam(event, 'entryId');
+  if (!entryId) throw createError({ statusCode: 400, statusMessage: 'Missing entryId' });
+
+  const result = await voteOnContestEntry(db, entryId, user.id);
+  if (!result.voted) {
+    throw createError({ statusCode: 400, statusMessage: result.error ?? 'Vote failed' });
+  }
+
+  return { voted: true };
+});

package/server/api/contests/[slug]/judge.post.ts

@@ -1,18 +1,16 @@
-import { judgeContestEntry, getContestBySlug } from '@commonpub/server';
+import { judgeContestEntry } from '@commonpub/server';
 import { judgeEntrySchema } from '@commonpub/schema';
 
 export default defineEventHandler(async (event): Promise<{ success: boolean }> => {
   requireFeature('contests');
   const user = requireAuth(event);
   const db = useDB();
-  const { slug } = parseParams(event, { slug: 'string' });
   const input = await parseBody(event, judgeEntrySchema);
 
-  const contest = await getContestBySlug(db, slug);
-  if (!contest) throw createError({ statusCode: 404, message: 'Contest not found' });
-  const judges = (contest.judges ?? []) as string[];
-  if (!judges.includes(user.id)) throw createError({ statusCode: 403, message: 'Not a judge for this contest' });
+  const result = await judgeContestEntry(db, input.entryId, input.score, user.id, input.feedback);
+  if (!result.judged) {
+    throw createError({ statusCode: 403, statusMessage: result.error ?? 'Judging failed' });
+  }
 
-  await judgeContestEntry(db, input.entryId, input.score, user.id, input.feedback);
   return { success: true };
 });

package/server/api/contests/[slug]/judges/[userId].delete.ts

@@ -0,0 +1,26 @@
+import { getContestBySlug, removeContestJudge } from '@commonpub/server';
+
+/**
+ * DELETE /api/contests/:slug/judges/:userId
+ * Remove a judge from a contest (contest owner or admin only).
+ */
+export default defineEventHandler(async (event) => {
+  requireFeature('contests');
+  const user = requireAuth(event);
+  const db = useDB();
+  const slug = getRouterParam(event, 'slug');
+  const targetUserId = getRouterParam(event, 'userId');
+  if (!slug || !targetUserId) throw createError({ statusCode: 400, statusMessage: 'Missing parameters' });
+
+  const contest = await getContestBySlug(db, slug);
+  if (!contest) throw createError({ statusCode: 404, statusMessage: 'Contest not found' });
+
+  if (contest.createdById !== user.id && user.role !== 'admin') {
+    throw createError({ statusCode: 403, statusMessage: 'Only contest owner or admin can manage judges' });
+  }
+
+  const removed = await removeContestJudge(db, contest.id, targetUserId);
+  if (!removed) throw createError({ statusCode: 404, statusMessage: 'Judge not found' });
+
+  return { removed: true };
+});

package/server/api/contests/[slug]/judges/accept.post.ts

@@ -0,0 +1,21 @@
+import { getContestBySlug, acceptJudgeInvite } from '@commonpub/server';
+
+/**
+ * POST /api/contests/:slug/judges/accept
+ * Accept a judge invitation (authenticated user).
+ */
+export default defineEventHandler(async (event) => {
+  requireFeature('contests');
+  const user = requireAuth(event);
+  const db = useDB();
+  const slug = getRouterParam(event, 'slug');
+  if (!slug) throw createError({ statusCode: 400, statusMessage: 'Missing slug' });
+
+  const contest = await getContestBySlug(db, slug);
+  if (!contest) throw createError({ statusCode: 404, statusMessage: 'Contest not found' });
+
+  const accepted = await acceptJudgeInvite(db, contest.id, user.id);
+  if (!accepted) throw createError({ statusCode: 400, statusMessage: 'No pending invitation found' });
+
+  return { accepted: true };
+});

package/server/api/contests/[slug]/judges/index.get.ts

@@ -0,0 +1,17 @@
+import { getContestBySlug, listContestJudges } from '@commonpub/server';
+
+/**
+ * GET /api/contests/:slug/judges
+ * List judges for a contest.
+ */
+export default defineEventHandler(async (event) => {
+  requireFeature('contests');
+  const db = useDB();
+  const slug = getRouterParam(event, 'slug');
+  if (!slug) throw createError({ statusCode: 400, statusMessage: 'Missing slug' });
+
+  const contest = await getContestBySlug(db, slug);
+  if (!contest) throw createError({ statusCode: 404, statusMessage: 'Contest not found' });
+
+  return listContestJudges(db, contest.id);
+});