first commit

app/api/admin/app-users/[id]/route.ts

@@ -0,0 +1,64 @@
+import { auth } from "@/lib/auth";
+import { updateAdminAppUserStatus } from "@/server/admin/app-users";
+import { NextResponse } from "next/server";
+import { z } from "zod";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+const updateUserSchema = z.object({
+    status: z.enum(["active", "disabled"]),
+});
+
+async function requireAdminSession() {
+    const session = await auth();
+
+    if (!session) {
+        return null;
+    }
+
+    return session;
+}
+
+export async function PATCH(
+    request: Request,
+    { params }: { params: Promise<{ id: string }> },
+) {
+    try {
+        const session = await requireAdminSession();
+
+        if (!session) {
+            return NextResponse.json(
+                { ok: false, error: "Unauthorized." },
+                { status: 401 },
+            );
+        }
+
+        const parsed = updateUserSchema.safeParse(await request.json());
+
+        if (!parsed.success) {
+            return NextResponse.json(
+                { ok: false, error: "Invalid request body." },
+                { status: 400 },
+            );
+        }
+
+        const { id } = await params;
+        const data = await updateAdminAppUserStatus({
+            userId: id,
+            status: parsed.data.status,
+        });
+
+        return NextResponse.json({
+            ok: true,
+            data,
+        });
+    } catch (error) {
+        const message =
+            error instanceof Error ? error.message : "Unknown error.";
+        return NextResponse.json(
+            { ok: false, error: message },
+            { status: 500 },
+        );
+    }
+}

app/api/admin/gallery-photos/route.ts

@@ -0,0 +1,137 @@
+import { auth } from "@/lib/auth";
+import { createSupabaseServiceRoleClient } from "@/lib/supabase/service-role";
+import { updateGalleryPhotoPickStatus } from "@/server/admin/gallery-pick";
+import { NextResponse, type NextRequest } from "next/server";
+import { z } from "zod";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+const galleryPhotoSelect =
+    "id,unsplash_id,slug,description,alt_description,width,height,color,color_family,likes,urls,user_info,photo_created_at,is_picked,picked_at,picked_by,oss_url,oss_object_key,oss_synced_at,oss_sync_error";
+
+const patchSchema = z.object({
+    unsplashId: z.string().min(1),
+    isPicked: z.boolean(),
+});
+
+async function requireAdminSession() {
+    const session = await auth();
+
+    if (!session) {
+        return null;
+    }
+
+    return session;
+}
+
+export async function GET(request: NextRequest) {
+    try {
+        const session = await requireAdminSession();
+
+        if (!session) {
+            return NextResponse.json(
+                { ok: false, error: "Unauthorized." },
+                { status: 401 },
+            );
+        }
+
+        const { searchParams } = new URL(request.url);
+        const page = parseInt(searchParams.get("page") || "1", 10);
+        const perPage = parseInt(searchParams.get("per_page") || "24", 10);
+        const picked = searchParams.get("picked");
+        const colorFamily = searchParams.get("color_family");
+
+        if (page < 1 || perPage < 1 || perPage > 100) {
+            return NextResponse.json(
+                { ok: false, error: "Invalid pagination parameters." },
+                { status: 400 },
+            );
+        }
+
+        const supabase = createSupabaseServiceRoleClient();
+
+        let query = supabase
+            .from("wg_gallery_photos")
+            .select(galleryPhotoSelect, { count: "exact" });
+
+        if (picked === "true") {
+            query = query.eq("is_picked", true);
+        } else if (picked === "false") {
+            query = query.eq("is_picked", false);
+        }
+
+        if (colorFamily && colorFamily !== "all") {
+            query = query.eq("color_family", colorFamily);
+        }
+
+        const { data, error, count } = await query
+            .order("picked_at", { ascending: false, nullsFirst: false })
+            .order("photo_created_at", { ascending: false })
+            .range((page - 1) * perPage, page * perPage - 1);
+
+        if (error) {
+            throw error;
+        }
+
+        return NextResponse.json({
+            ok: true,
+            data: data ?? [],
+            pagination: {
+                page,
+                perPage,
+                total: count ?? 0,
+                hasMore: (count ?? 0) > page * perPage,
+            },
+        });
+    } catch (error) {
+        const message =
+            error instanceof Error ? error.message : "Unknown error.";
+        console.error("[api/admin/gallery-photos] PATCH failed", error);
+        return NextResponse.json(
+            { ok: false, error: message },
+            { status: 500 },
+        );
+    }
+}
+
+export async function PATCH(request: NextRequest) {
+    try {
+        const session = await requireAdminSession();
+
+        if (!session) {
+            return NextResponse.json(
+                { ok: false, error: "Unauthorized." },
+                { status: 401 },
+            );
+        }
+
+        const parsed = patchSchema.safeParse(await request.json());
+
+        if (!parsed.success) {
+            return NextResponse.json(
+                { ok: false, error: "Invalid request body." },
+                { status: 400 },
+            );
+        }
+
+        const data = await updateGalleryPhotoPickStatus({
+            isPicked: parsed.data.isPicked,
+            pickedBy:
+                session.user?.email ?? session.user?.id ?? "wallora-admin",
+            unsplashId: parsed.data.unsplashId,
+        });
+
+        return NextResponse.json({
+            ok: true,
+            data,
+        });
+    } catch (error) {
+        const message =
+            error instanceof Error ? error.message : "Unknown error.";
+        return NextResponse.json(
+            { ok: false, error: message },
+            { status: 500 },
+        );
+    }
+}

app/api/admin/photo-collections/[id]/route.ts

@@ -0,0 +1,138 @@
+import { auth } from "@/lib/auth";
+import {
+    deletePhotoCollection,
+    getAdminPhotoCollection,
+    updatePhotoCollection,
+} from "@/server/admin/photo-collections";
+import { NextResponse } from "next/server";
+import { z } from "zod";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+const collectionInputSchema = z.object({
+    title: z.string().min(1),
+    slug: z.string().optional().nullable(),
+    description: z.string().optional().nullable(),
+    coverPhotoId: z.string().uuid().optional().nullable(),
+    isPublished: z.boolean().default(false),
+    photoIds: z.array(z.string().uuid()).default([]),
+});
+
+async function requireAdminSession() {
+    const session = await auth();
+
+    if (!session) {
+        return null;
+    }
+
+    return session;
+}
+
+export async function GET(
+    _request: Request,
+    { params }: { params: Promise<{ id: string }> },
+) {
+    try {
+        const session = await requireAdminSession();
+
+        if (!session) {
+            return NextResponse.json(
+                { ok: false, error: "Unauthorized." },
+                { status: 401 },
+            );
+        }
+
+        const { id } = await params;
+        const data = await getAdminPhotoCollection(id);
+
+        if (!data) {
+            return NextResponse.json(
+                { ok: false, error: "Collection was not found." },
+                { status: 404 },
+            );
+        }
+
+        return NextResponse.json({
+            ok: true,
+            data,
+        });
+    } catch (error) {
+        const message =
+            error instanceof Error ? error.message : "Unknown error.";
+        return NextResponse.json(
+            { ok: false, error: message },
+            { status: 500 },
+        );
+    }
+}
+
+export async function PATCH(
+    request: Request,
+    { params }: { params: Promise<{ id: string }> },
+) {
+    try {
+        const session = await requireAdminSession();
+
+        if (!session) {
+            return NextResponse.json(
+                { ok: false, error: "Unauthorized." },
+                { status: 401 },
+            );
+        }
+
+        const parsed = collectionInputSchema.safeParse(await request.json());
+
+        if (!parsed.success) {
+            return NextResponse.json(
+                { ok: false, error: "Invalid request body." },
+                { status: 400 },
+            );
+        }
+
+        const { id } = await params;
+        const data = await updatePhotoCollection(id, parsed.data);
+
+        return NextResponse.json({
+            ok: true,
+            data,
+        });
+    } catch (error) {
+        const message =
+            error instanceof Error ? error.message : "Unknown error.";
+        return NextResponse.json(
+            { ok: false, error: message },
+            { status: 500 },
+        );
+    }
+}
+
+export async function DELETE(
+    _request: Request,
+    { params }: { params: Promise<{ id: string }> },
+) {
+    try {
+        const session = await requireAdminSession();
+
+        if (!session) {
+            return NextResponse.json(
+                { ok: false, error: "Unauthorized." },
+                { status: 401 },
+            );
+        }
+
+        const { id } = await params;
+        await deletePhotoCollection(id);
+
+        return NextResponse.json({
+            ok: true,
+        });
+    } catch (error) {
+        const message =
+            error instanceof Error ? error.message : "Unknown error.";
+        return NextResponse.json(
+            { ok: false, error: message },
+            { status: 500 },
+        );
+    }
+}

app/api/admin/photo-collections/route.ts

@@ -0,0 +1,92 @@
+import { auth } from "@/lib/auth";
+import {
+    createPhotoCollection,
+    listAdminPhotoCollections,
+} from "@/server/admin/photo-collections";
+import { NextResponse } from "next/server";
+import { z } from "zod";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+const collectionInputSchema = z.object({
+    title: z.string().min(1),
+    slug: z.string().optional().nullable(),
+    description: z.string().optional().nullable(),
+    coverPhotoId: z.string().uuid().optional().nullable(),
+    isPublished: z.boolean().default(false),
+    photoIds: z.array(z.string().uuid()).default([]),
+});
+
+async function requireAdminSession() {
+    const session = await auth();
+
+    if (!session) {
+        return null;
+    }
+
+    return session;
+}
+
+export async function GET() {
+    try {
+        const session = await requireAdminSession();
+
+        if (!session) {
+            return NextResponse.json(
+                { ok: false, error: "Unauthorized." },
+                { status: 401 },
+            );
+        }
+
+        const data = await listAdminPhotoCollections();
+
+        return NextResponse.json({
+            ok: true,
+            data,
+        });
+    } catch (error) {
+        const message =
+            error instanceof Error ? error.message : "Unknown error.";
+        return NextResponse.json(
+            { ok: false, error: message },
+            { status: 500 },
+        );
+    }
+}
+
+export async function POST(request: Request) {
+    try {
+        const session = await requireAdminSession();
+
+        if (!session) {
+            return NextResponse.json(
+                { ok: false, error: "Unauthorized." },
+                { status: 401 },
+            );
+        }
+
+        const parsed = collectionInputSchema.safeParse(await request.json());
+
+        if (!parsed.success) {
+            return NextResponse.json(
+                { ok: false, error: "Invalid request body." },
+                { status: 400 },
+            );
+        }
+
+        const data = await createPhotoCollection(parsed.data);
+
+        return NextResponse.json({
+            ok: true,
+            data,
+        });
+    } catch (error) {
+        const message =
+            error instanceof Error ? error.message : "Unknown error.";
+        return NextResponse.json(
+            { ok: false, error: message },
+            { status: 500 },
+        );
+    }
+}