refractor server.js

server/routes/questions.js

@@ -0,0 +1,116 @@
+import { randomUUID } from 'node:crypto'
+import { requireAdminAuth } from '../auth.js'
+import { MAX_QUESTIONS } from '../config.js'
+import { state } from '../state.js'
+import { queueQuestionsWrite, queueDraftQuestionsWrite } from '../data.js'
+
+function ensureDraftQuestions() {
+  if (state.draftQuestions !== null) return
+  state.draftQuestions = state.questions.slice(0, MAX_QUESTIONS)
+}
+
+export function register(app) {
+  app.get('/api/questions', (_req, res) => {
+    const sourceQuestions = state.draftQuestions ?? state.questions
+    const publicQuestions = sourceQuestions.filter(q => q.isApproved === true && q.answer && q.answer.trim().length > 0)
+    res.json({ questions: publicQuestions })
+  })
+
+  app.get('/api/admin-questions', requireAdminAuth, (_req, res) => {
+    res.json({ questions: state.draftQuestions ?? state.questions })
+  })
+
+  app.post('/api/admin-questions', requireAdminAuth, (req, res) => {
+    const firstName = typeof req.body?.firstName === 'string' ? req.body.firstName.trim() : ''
+    const email = typeof req.body?.email === 'string' ? req.body.email.trim() : ''
+    const questionText = typeof req.body?.question === 'string' ? req.body.question.trim() : ''
+    const answerText = typeof req.body?.answer === 'string' ? req.body.answer.trim() : ''
+    const approveNow = req.body?.approve === true
+
+    if (!firstName || firstName.length > 100) {
+      res.status(400).json({ message: 'First name is required and must be 100 characters or fewer.' }); return
+    }
+    if (!questionText || questionText.length < 5 || questionText.length > 3000) {
+      res.status(400).json({ message: 'Question must be between 5 and 3000 characters.' }); return
+    }
+    if (email && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+      res.status(400).json({ message: 'If provided, email must be a valid email address.' }); return
+    }
+    if (answerText.length > 5000) {
+      res.status(400).json({ message: 'Answer must be 5000 characters or fewer.' }); return
+    }
+
+    ensureDraftQuestions()
+    const now = new Date().toISOString()
+    const created = {
+      id: randomUUID(),
+      submittedAt: now,
+      firstName,
+      email,
+      question: questionText,
+      answer: answerText,
+      answeredAt: answerText ? now : null,
+      isApproved: approveNow,
+      approvedAt: approveNow ? now : null,
+    }
+
+    state.draftQuestions.unshift(created)
+    state.draftQuestions = state.draftQuestions.slice(0, MAX_QUESTIONS)
+    queueDraftQuestionsWrite()
+
+    res.status(201).json({ ok: true, question: created })
+  })
+
+  app.post('/api/admin-questions/:id/answer', requireAdminAuth, (req, res) => {
+    const { id } = req.params
+    const { answer } = req.body ?? {}
+
+    if (!answer || typeof answer !== 'string' || answer.trim().length < 1 || answer.trim().length > 5000) {
+      res.status(400).json({ message: 'Answer must be between 1 and 5000 characters.' }); return
+    }
+
+    ensureDraftQuestions()
+    const question = state.draftQuestions.find(q => q.id === id)
+    if (!question) {
+      res.status(404).json({ message: 'Question not found.' }); return
+    }
+
+    question.answer = answer.trim()
+    question.answeredAt = new Date().toISOString()
+    queueDraftQuestionsWrite()
+
+    res.json({ ok: true, question })
+  })
+
+  app.post('/api/admin-questions/:id/approve', requireAdminAuth, (req, res) => {
+    const { id } = req.params
+    const { approved } = req.body ?? {}
+
+    ensureDraftQuestions()
+    const question = state.draftQuestions.find(q => q.id === id)
+    if (!question) {
+      res.status(404).json({ message: 'Question not found.' }); return
+    }
+
+    question.isApproved = approved === true
+    question.approvedAt = approved === true ? new Date().toISOString() : null
+    queueDraftQuestionsWrite()
+
+    res.json({ ok: true, question })
+  })
+
+  app.delete('/api/admin-questions/:id', requireAdminAuth, (req, res) => {
+    const { id } = req.params
+    ensureDraftQuestions()
+    const index = state.draftQuestions.findIndex(q => q.id === id)
+
+    if (index === -1) {
+      res.status(404).json({ message: 'Question not found.' }); return
+    }
+
+    state.draftQuestions.splice(index, 1)
+    queueDraftQuestionsWrite()
+
+    res.json({ ok: true })
+  })
+}