Void-Homelab/lib/api/routes/resources.js

import { Router } from 'express';
import { z } from 'zod';
import * as repo from '../../db/repos/resources.js';
import * as sourceDocs from '../../db/repos/source_docs.js';
import * as audit from '../../db/repos/audit.js';
import { validate } from '../validate.js';
import { NotFoundError, ValidationError, ConflictError, asyncWrap } from '../errors.js';
import { requireWrite, requireOwner, divertToPending } from '../cap.js';

const RUNTIME = ['lxc', 'vm', 'docker', 'bare-metal'];
const STATUSES = ['running', 'stopped', 'down', 'unknown'];

const baseFields = {
  slug: z.string().min(1).max(64).regex(/^[a-z0-9-]+$/),
  name: z.string().min(1).max(200),
  runtime_type: z.enum(RUNTIME),
  host: z.string().nullable().optional(),
  url: z.string().nullable().optional(),
  version: z.string().nullable().optional(),
  status: z.enum(STATUSES).optional(),
  monitoring: z.record(z.string(), z.any()).nullable().optional(),
  metadata: z.record(z.string(), z.any()).nullable().optional(),
  last_check: z.string().datetime().nullable().optional(),
  maintenance_until: z.string().datetime().nullable().optional()
};

const createSchema = z.object(baseFields);
const patchSchema = z.object(Object.fromEntries(
  Object.entries(baseFields).map(([k, v]) => [k, v.optional()])
));

const idParams = z.object({ id: z.string().uuid() });
const spaceParams = z.object({ space_id: z.string().uuid() });
const depParams = z.object({ id: z.string().uuid(), dep_id: z.string().uuid() });
const depBody = z.object({
  depends_on: z.string().uuid(),
  kind: z.string().nullable().optional()
});

export const router = Router();
export const spacesScopedRouter = Router({ mergeParams: true });

spacesScopedRouter.get('/',
  validate({ params: spaceParams }),
  asyncWrap(async (req, res) => { res.json(await repo.listBySpace(req.params.space_id)); })
);

spacesScopedRouter.post('/',
  requireWrite('resource'),
  validate({ params: spaceParams, body: createSchema }),
  asyncWrap(async (req, res) => {
    const payload = { ...req.body, space_id: req.params.space_id };
    if (req.capTier === 'suggest') {
      return divertToPending(req, res, { entity_type: 'resource', action: 'create', payload });
    }
    try {
      const row = await repo.create(payload, req.actor);
      res.status(201).json(row);
    } catch (e) {
      if (e.code === '23503') throw new ValidationError('invalid space', { space_id: req.params.space_id });
      throw e;
    }
  })
);

router.get('/:id',
  validate({ params: idParams }),
  asyncWrap(async (req, res) => {
    const row = await repo.getById(req.params.id);
    if (!row) throw new NotFoundError('resource not found');
    res.json(row);
  })
);

router.patch('/:id',
  requireWrite('resource'),
  validate({ params: idParams, body: patchSchema }),
  asyncWrap(async (req, res) => {
    const existing = await repo.getById(req.params.id);
    if (!existing) throw new NotFoundError('resource not found');
    if (req.capTier === 'suggest') {
      return divertToPending(req, res, {
        entity_type: 'resource', entity_id: req.params.id, action: 'update', payload: req.body
      });
    }
    res.json(await repo.update(req.params.id, req.body, req.actor));
  })
);

router.delete('/:id',
  requireWrite('resource'),
  validate({ params: idParams }),
  asyncWrap(async (req, res) => {
    const existing = await repo.getById(req.params.id);
    if (!existing) throw new NotFoundError('resource not found');
    if (req.capTier === 'suggest') {
      return divertToPending(req, res, {
        entity_type: 'resource', entity_id: req.params.id, action: 'delete', payload: {}
      });
    }
    await repo.del(req.params.id, req.actor);
    res.status(204).end();
  })
);

// Dependency wiring is infra-level: owner-only, never diverted to pending_changes.
router.post('/:id/dependencies',
  requireOwner,
  validate({ params: idParams, body: depBody }),
  asyncWrap(async (req, res) => {
    if (req.params.id === req.body.depends_on) {
      throw new ValidationError('resource cannot depend on itself');
    }
    try {
      await repo.addDependency(req.params.id, req.body.depends_on, req.body.kind);
      res.status(201).json({ resource_id: req.params.id, depends_on: req.body.depends_on });
    } catch (e) {
      if (e.code === '23503') throw new ConflictError('cross-space or unknown resource', {
        resource_id: req.params.id, depends_on: req.body.depends_on, hint: 'dependencies must share a space_id'
      });
      throw e;
    }
  })
);

router.get('/:id/dependencies',
  validate({ params: idParams }),
  asyncWrap(async (req, res) => {
    res.json(await repo.listDependencies(req.params.id));
  })
);

router.delete('/:id/dependencies/:dep_id',
  requireOwner,
  validate({ params: depParams }),
  asyncWrap(async (req, res) => {
    await repo.removeDependency(req.params.id, req.params.dep_id);
    res.status(204).end();
  })
);

router.get('/:id/source-docs',
  validate({ params: idParams }),
  asyncWrap(async (req, res) => {
    res.json(await sourceDocs.listByResource(req.params.id));
  })
);

router.get('/:id/changes',
  validate({ params: idParams }),
  asyncWrap(async (req, res) => {
    res.json(await audit.listForEntity('resource', req.params.id));
  })
);