feat(dose-tracking): implement dose tracking functionality with API routes for marking and unmarking doses

2025-12-26 21:40:53 +01:00
parent b0f26b1e66
commit 473ffde4fe
6 changed files with 362 additions and 48 deletions
@@ -0,0 +1,237 @@
+import { FastifyInstance } from "fastify";
+import { z } from "zod";
+import { db } from "../db/client.js";
+import { doseTracking, shareTokens } from "../db/schema.js";
+import { eq, and, gte } from "drizzle-orm";
+import { requireAuth } from "../plugins/auth.js";
+import type { AuthUser } from "../types/fastify.js";
+
+// =============================================================================
+// Validation Schemas
+// =============================================================================
+const markDoseSchema = z.object({
+  doseId: z.string().min(1, "doseId is required"),
+});
+
+const shareDoseSchema = z.object({
+  doseId: z.string().min(1, "doseId is required"),
+});
+
+// =============================================================================
+// Dose Tracking Routes
+// =============================================================================
+export async function doseRoutes(app: FastifyInstance) {
+  // ---------------------------------------------------------------------------
+  // GET /doses/taken - PROTECTED: Get all taken doses for the user
+  // ---------------------------------------------------------------------------
+  app.get(
+    "/doses/taken",
+    { preHandler: requireAuth },
+    async (request, reply) => {
+      const authUser = request.user as unknown as AuthUser | null;
+      if (!authUser) {
+        return reply.status(401).send({ error: "Not authenticated" });
+      }
+
+      // Get doses from last 30 days (to avoid loading too much data)
+      const thirtyDaysAgo = new Date(Date.now() - 30 * 24 * 60 * 60 * 1000);
+      
+      const doses = await db.select()
+        .from(doseTracking)
+        .where(
+          and(
+            eq(doseTracking.userId, authUser.id),
+            gte(doseTracking.takenAt, thirtyDaysAgo)
+          )
+        );
+
+      return {
+        doses: doses.map((d) => ({
+          doseId: d.doseId,
+          takenAt: d.takenAt?.getTime() ?? Date.now(),
+          markedBy: d.markedBy,
+        })),
+      };
+    }
+  );
+
+  // ---------------------------------------------------------------------------
+  // POST /doses/taken - PROTECTED: Mark a dose as taken
+  // ---------------------------------------------------------------------------
+  app.post<{ Body: z.infer<typeof markDoseSchema> }>(
+    "/doses/taken",
+    { preHandler: requireAuth },
+    async (request, reply) => {
+      const authUser = request.user as unknown as AuthUser | null;
+      if (!authUser) {
+        return reply.status(401).send({ error: "Not authenticated" });
+      }
+
+      const parsed = markDoseSchema.safeParse(request.body);
+      if (!parsed.success) {
+        return reply.status(400).send({
+          error: parsed.error.errors[0]?.message ?? "Invalid input",
+        });
+      }
+
+      const { doseId } = parsed.data;
+
+      // Check if already marked
+      const [existing] = await db.select()
+        .from(doseTracking)
+        .where(
+          and(
+            eq(doseTracking.userId, authUser.id),
+            eq(doseTracking.doseId, doseId)
+          )
+        );
+
+      if (existing) {
+        return { success: true, message: "Already marked" };
+      }
+
+      // Insert new record
+      await db.insert(doseTracking).values({
+        userId: authUser.id,
+        doseId,
+        markedBy: null, // Marked by the user themselves
+      });
+
+      return { success: true };
+    }
+  );
+
+  // ---------------------------------------------------------------------------
+  // DELETE /doses/taken/:doseId - PROTECTED: Unmark a dose
+  // ---------------------------------------------------------------------------
+  app.delete<{ Params: { doseId: string } }>(
+    "/doses/taken/:doseId",
+    { preHandler: requireAuth },
+    async (request, reply) => {
+      const authUser = request.user as unknown as AuthUser | null;
+      if (!authUser) {
+        return reply.status(401).send({ error: "Not authenticated" });
+      }
+
+      const { doseId } = request.params;
+
+      await db.delete(doseTracking).where(
+        and(
+          eq(doseTracking.userId, authUser.id),
+          eq(doseTracking.doseId, doseId)
+        )
+      );
+
+      return { success: true };
+    }
+  );
+
+  // ---------------------------------------------------------------------------
+  // GET /share/:token/doses - PUBLIC: Get taken doses for a share link
+  // ---------------------------------------------------------------------------
+  app.get<{ Params: { token: string } }>(
+    "/share/:token/doses",
+    async (request, reply) => {
+      const { token } = request.params;
+
+      // Find share token
+      const [share] = await db.select().from(shareTokens).where(eq(shareTokens.token, token));
+      if (!share) {
+        return reply.notFound("Share link not found");
+      }
+
+      // Get doses from last 30 days
+      const thirtyDaysAgo = new Date(Date.now() - 30 * 24 * 60 * 60 * 1000);
+      
+      const doses = await db.select()
+        .from(doseTracking)
+        .where(
+          and(
+            eq(doseTracking.userId, share.userId),
+            gte(doseTracking.takenAt, thirtyDaysAgo)
+          )
+        );
+
+      return {
+        doses: doses.map((d) => ({
+          doseId: d.doseId,
+          takenAt: d.takenAt?.getTime() ?? Date.now(),
+          markedBy: d.markedBy,
+        })),
+      };
+    }
+  );
+
+  // ---------------------------------------------------------------------------
+  // POST /share/:token/doses - PUBLIC: Mark a dose as taken via share link
+  // ---------------------------------------------------------------------------
+  app.post<{ Params: { token: string }; Body: z.infer<typeof shareDoseSchema> }>(
+    "/share/:token/doses",
+    async (request, reply) => {
+      const { token } = request.params;
+
+      const parsed = shareDoseSchema.safeParse(request.body);
+      if (!parsed.success) {
+        return reply.status(400).send({
+          error: parsed.error.errors[0]?.message ?? "Invalid input",
+        });
+      }
+
+      const { doseId } = parsed.data;
+
+      // Find share token
+      const [share] = await db.select().from(shareTokens).where(eq(shareTokens.token, token));
+      if (!share) {
+        return reply.notFound("Share link not found");
+      }
+
+      // Check if already marked
+      const [existing] = await db.select()
+        .from(doseTracking)
+        .where(
+          and(
+            eq(doseTracking.userId, share.userId),
+            eq(doseTracking.doseId, doseId)
+          )
+        );
+
+      if (existing) {
+        return { success: true, message: "Already marked" };
+      }
+
+      // Insert new record - marked by the takenBy person
+      await db.insert(doseTracking).values({
+        userId: share.userId,
+        doseId,
+        markedBy: share.takenBy, // e.g. "Daniel"
+      });
+
+      return { success: true };
+    }
+  );
+
+  // ---------------------------------------------------------------------------
+  // DELETE /share/:token/doses/:doseId - PUBLIC: Unmark a dose via share link
+  // ---------------------------------------------------------------------------
+  app.delete<{ Params: { token: string; doseId: string } }>(
+    "/share/:token/doses/:doseId",
+    async (request, reply) => {
+      const { token, doseId } = request.params;
+
+      // Find share token
+      const [share] = await db.select().from(shareTokens).where(eq(shareTokens.token, token));
+      if (!share) {
+        return reply.notFound("Share link not found");
+      }
+
+      await db.delete(doseTracking).where(
+        and(
+          eq(doseTracking.userId, share.userId),
+          eq(doseTracking.doseId, doseId)
+        )
+      );
+
+      return { success: true };
+    }
+  );
+}