marcogll/AnchorOS
1
0
Fork 0
mirror of https://github.com/marcogll/AnchorOS.git synced 2026-03-15 18:24:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: Add kiosk management, artist selection, and schedule management

Browse Source 
- Add KiosksManagement component with full CRUD for kiosks
- Add ScheduleManagement for staff schedules with break reminders
- Update booking flow to allow artist selection by customers
- Add staff_services API for assigning services to artists
- Update staff management UI with service assignment dialog
- Add auto-break reminder when schedule >= 8 hours
- Update availability API to filter artists by service
- Add kiosk management to Aperture dashboard
- Clean up ralphy artifacts and logs
This commit is contained in:
Marco Gallegos
2026-01-21 13:02:06 -06:00
parent 24e5af3860
commit d27354fd5a
71 changed files with 3353 additions and 2701 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
app/api/availability/staff-unavailable/route.ts
View File

@@ -1,6 +1,14 @@
import { NextRequest, NextResponse } from 'next/server'
import { supabaseAdmin } from '@/lib/supabase/admin'
/**
* @description Validates that the request contains a valid ADMIN_ENROLLMENT_KEY authorization header
* @param {NextRequest} request - HTTP request to validate
* @returns {Promise<boolean|null>} Returns true if authorized, null if unauthorized, or throws error on invalid format
* @example validateAdminOrStaff(request)
* @audit SECURITY: Simple API key validation for administrative operations
* @audit Validate: Ensures authorization header follows 'Bearer <token>' format
*/
async function validateAdminOrStaff(request: NextRequest) {
const authHeader = request.headers.get('authorization')
@@ -18,7 +26,15 @@ async function validateAdminOrStaff(request: NextRequest) {
}
/**
* @description Marks staff as unavailable for a time period
* @description Creates a new staff unavailability record to block a staff member for a specific time period
* @param {NextRequest} request - HTTP request containing staff_id, date, start_time, end_time, optional reason and location_id
* @returns {NextResponse} JSON with success status and created availability record
* @example POST /api/availability/staff-unavailable { staff_id: "...", date: "2026-01-21", start_time: "10:00", end_time: "14:00", reason: "Lunch meeting" }
* @audit BUSINESS RULE: Prevents double-booking by blocking staff during unavailable times
* @audit SECURITY: Requires ADMIN_ENROLLMENT_KEY authorization header
* @audit Validate: Ensures staff exists and no existing availability record for the same date/time
* @audit Validate: Checks that start_time is before end_time and date is valid
* @audit AUDIT: All unavailability records are logged for staffing management
*/
export async function POST(request: NextRequest) {
try {
@@ -123,7 +139,14 @@ export async function POST(request: NextRequest) {
}
/**
* @description Retrieves staff unavailability records
* @description Retrieves staff unavailability records filtered by staff ID and optional date range
* @param {NextRequest} request - HTTP request with query parameters staff_id, optional start_date and end_date
* @returns {NextResponse} JSON with array of availability records sorted by date
* @example GET /api/availability/staff-unavailable?staff_id=...&start_date=2026-01-01&end_date=2026-01-31
* @audit BUSINESS RULE: Returns only unavailability records (is_available = false)
* @audit SECURITY: Requires ADMIN_ENROLLMENT_KEY authorization header
* @audit Validate: Ensures staff_id is provided as required parameter
* @audit PERFORMANCE: Supports optional date range filtering for efficient queries
*/
export async function GET(request: NextRequest) {
try {