Siteforge/server/routes/questions.js

import { randomUUID } from 'node:crypto'
import { requireAdminAuth } from '../auth.js'
import { MAX_QUESTIONS } from '../config.js'
import { state } from '../state.js'
import { queueQuestionsWrite, queueDraftQuestionsWrite } from '../data.js'

function ensureDraftQuestions() {
  if (state.draftQuestions !== null) return
  state.draftQuestions = state.questions.slice(0, MAX_QUESTIONS)
}

export function register(app) {
  app.get('/api/questions', (_req, res) => {
    const sourceQuestions = state.draftQuestions ?? state.questions
    const publicQuestions = sourceQuestions.filter(q => q.isApproved === true && q.answer && q.answer.trim().length > 0)
    res.json({ questions: publicQuestions })
  })

  app.get('/api/admin-questions', requireAdminAuth, (_req, res) => {
    res.json({ questions: state.draftQuestions ?? state.questions })
  })

  app.post('/api/admin-questions', requireAdminAuth, (req, res) => {
    const firstName = typeof req.body?.firstName === 'string' ? req.body.firstName.trim() : ''
    const email = typeof req.body?.email === 'string' ? req.body.email.trim() : ''
    const questionText = typeof req.body?.question === 'string' ? req.body.question.trim() : ''
    const answerText = typeof req.body?.answer === 'string' ? req.body.answer.trim() : ''
    const approveNow = req.body?.approve === true

    if (!firstName || firstName.length > 100) {
      res.status(400).json({ message: 'First name is required and must be 100 characters or fewer.' }); return
    }
    if (!questionText || questionText.length < 5 || questionText.length > 3000) {
      res.status(400).json({ message: 'Question must be between 5 and 3000 characters.' }); return
    }
    if (email && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
      res.status(400).json({ message: 'If provided, email must be a valid email address.' }); return
    }
    if (answerText.length > 5000) {
      res.status(400).json({ message: 'Answer must be 5000 characters or fewer.' }); return
    }

    ensureDraftQuestions()
    const now = new Date().toISOString()
    const created = {
      id: randomUUID(),
      submittedAt: now,
      firstName,
      email,
      question: questionText,
      answer: answerText,
      answeredAt: answerText ? now : null,
      isApproved: approveNow,
      approvedAt: approveNow ? now : null,
    }

    state.draftQuestions.unshift(created)
    state.draftQuestions = state.draftQuestions.slice(0, MAX_QUESTIONS)
    queueDraftQuestionsWrite()

    res.status(201).json({ ok: true, question: created })
  })

  app.post('/api/admin-questions/:id/answer', requireAdminAuth, (req, res) => {
    const { id } = req.params
    const { answer } = req.body ?? {}

    if (!answer || typeof answer !== 'string' || answer.trim().length < 1 || answer.trim().length > 5000) {
      res.status(400).json({ message: 'Answer must be between 1 and 5000 characters.' }); return
    }

    ensureDraftQuestions()
    const question = state.draftQuestions.find(q => q.id === id)
    if (!question) {
      res.status(404).json({ message: 'Question not found.' }); return
    }

    question.answer = answer.trim()
    question.answeredAt = new Date().toISOString()
    queueDraftQuestionsWrite()

    res.json({ ok: true, question })
  })

  app.post('/api/admin-questions/:id/approve', requireAdminAuth, (req, res) => {
    const { id } = req.params
    const { approved } = req.body ?? {}

    ensureDraftQuestions()
    const question = state.draftQuestions.find(q => q.id === id)
    if (!question) {
      res.status(404).json({ message: 'Question not found.' }); return
    }

    question.isApproved = approved === true
    question.approvedAt = approved === true ? new Date().toISOString() : null
    queueDraftQuestionsWrite()

    res.json({ ok: true, question })
  })

  app.delete('/api/admin-questions/:id', requireAdminAuth, (req, res) => {
    const { id } = req.params
    ensureDraftQuestions()
    const index = state.draftQuestions.findIndex(q => q.id === id)

    if (index === -1) {
      res.status(404).json({ message: 'Question not found.' }); return
    }

    state.draftQuestions.splice(index, 1)
    queueDraftQuestionsWrite()

    res.json({ ok: true })
  })
}