`;
- }).join('');
-
- // Bride/groom names are entered by the user in Settings (stored locally in their
- // browser only) and passed in from the frontend per-request. The account owner's
- // profile name is intentionally NOT used here anymore.
- const bride = bride_name || 'the Bride';
- const groom = groom_name || 'the Groom';
-
- const mailOptions = {
- from: `"Wedding Planner" <${process.env.EMAIL_USER}>`,
- to: email,
- subject: `You're Invited! 💍 ${bride} & ${groom}'s Wedding`,
- html: `
-
-
-
💍
-
You're Invited!
-
Wedding of ${bride} & ${groom}
-
-
-
Dear ${first_name} ${last_name},
-
- We are delighted to invite you to celebrate the wedding of
- ${bride} & ${groom}
- on ${wedding.date}.
-
-
Please RSVP for each event:
-
- ${eventLinks}
-
-
- We look forward to celebrating with you. If you have any questions, please contact us directly.
-
-
-
-
Wedding Planner App · Sent with love 💌
-
-
`
- };
-
- try {
- await transporter.sendMail(mailOptions);
- console.log(`📧 Invite sent to ${email}`);
- } catch (mailErr) {
- // Don't fail the guest insert if email fails — just log it
- console.warn('⚠️ Email send failed (guest still added):', mailErr.message);
- }
- }
-
- res.status(201).json({ guest, emailSent: !!(email && events.length > 0) });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// PUT /api/guests/:id
-app.put('/api/guests/:id', requireAuth, async (req, res) => {
- const { first_name, last_name, email, role } = req.body;
- try {
- const result = await pool.query(
- 'UPDATE project.guest SET first_name=$1,last_name=$2,email=$3,role=$4 WHERE guest_id=$5 RETURNING *',
- [first_name, last_name, email || null, role || 'Guest', req.params.id]
- );
- if (result.rows.length === 0) return res.status(404).json({ error: 'Guest not found.' });
- res.json(result.rows[0]);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// DELETE /api/guests/:id
-app.delete('/api/guests/:id', requireAuth, async (req, res) => {
- try {
- await pool.query('DELETE FROM project.guest WHERE guest_id=$1', [req.params.id]);
- res.json({ message: 'Guest deleted.' });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// =============================================================
-// RSVP (UC0009)
-// =============================================================
-
-// GET /api/rsvp?guest_id=&event_id= — check existing RSVP
-app.get('/api/rsvp', async (req, res) => {
- const { guest_id, event_id } = req.query;
- try {
- const result = await pool.query(
- 'SELECT * FROM project.event_rsvp WHERE guest_id=$1 AND event_id=$2',
- [guest_id, event_id]
- );
- res.json(result.rows[0] || null);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// POST /api/rsvp — guest submits RSVP (called from rsvp.html, no auth needed)
-app.post('/api/rsvp', async (req, res) => {
- const { guest_id, event_id, status, token } = req.body;
- if (!guest_id || !event_id || !status)
- return res.status(400).json({ error: 'guest_id, event_id and status are required.' });
-
- // Verify token (protects against random submissions)
- const expected = crypto
- .createHmac('sha256', 'wedding_rsvp_secret')
- .update(`${guest_id}-${event_id}`)
- .digest('hex');
- if (token !== expected)
- return res.status(403).json({ error: 'Invalid or expired RSVP link.' });
-
- const validStatuses = ['accepted', 'declined', 'pending', 'invited'];
- if (!validStatuses.includes(status))
- return res.status(400).json({ error: 'Status must be accepted, declined, pending, or invited.' });
-
- try {
- // Upsert: update if exists, insert if not
- const result = await pool.query(
- `INSERT INTO project.event_rsvp(status, response_date, guest_id, event_id)
- VALUES ($1, CURRENT_DATE, $2, $3)
- ON CONFLICT (guest_id, event_id)
- DO UPDATE SET status=$1, response_date=CURRENT_DATE
- RETURNING *`,
- [status, guest_id, event_id]
- );
-
- // Fetch guest + event info for the confirmation response
- const guestInfo = await pool.query(
- `SELECT g.first_name, g.last_name, e.event_type, e.date, e.start_time, e.end_time
- FROM project.guest g, project.event e
- WHERE g.guest_id=$1 AND e.event_id=$2`,
- [guest_id, event_id]
- );
-
- // Sync budget when RSVP affects attendee counts
- const info = guestInfo.rows[0] || null;
- if (info && (status === 'accepted' || status === 'declined')) {
- try {
- // e.wedding_id is not selected above — fetch the event to get wedding_id
- const ev = await pool.query('SELECT wedding_id FROM project.event WHERE event_id=$1', [event_id]);
- if (ev.rows.length > 0) await BudgetService.syncWeddingBudget(ev.rows[0].wedding_id);
- } catch (e) {
- console.warn('Budget sync after RSVP failed:', e.message);
- }
- }
-
- // Ensure there is an attendance record for this guest/event so they appear in Seating (unassigned table)
- try {
- // Map RSVP status to attendance status used in seating
- let attendanceStatus = 'pending';
- if (status === 'accepted') attendanceStatus = 'attending';
- else if (status === 'declined') attendanceStatus = 'not_attending';
-
- // Fetch guest role to store in attendance (fallback to 'Guest')
- const guestRoleRes = await pool.query('SELECT role FROM project.guest WHERE guest_id=$1', [guest_id]);
- const guestRole = guestRoleRes.rows[0]?.role || 'Guest';
-
- // Upsert attendance but DO NOT overwrite table_number if already assigned
- await pool.query(
- `INSERT INTO project.attendance(status, table_number, role, guest_id, event_id)
- VALUES ($1, NULL, $2, $3, $4)
- ON CONFLICT (guest_id, event_id)
- DO UPDATE SET status = $1, role = $2
- `,
- [attendanceStatus, guestRole, guest_id, event_id]
- );
-
- // If attendee accepted, ensure budget sync
- if (attendanceStatus === 'attending') {
- try {
- const ev = await pool.query('SELECT wedding_id FROM project.event WHERE event_id=$1', [event_id]);
- if (ev.rows.length > 0) await BudgetService.syncWeddingBudget(ev.rows[0].wedding_id);
- } catch (e) { console.warn('Budget sync after attendance upsert failed:', e.message); }
- }
- } catch (e) {
- console.warn('Could not ensure attendance record after RSVP:', e.message);
- }
-
- res.json({
- rsvp: result.rows[0],
- guest: info
- });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// GET /api/weddings/:wid/rsvp — all RSVPs for a wedding (for admin view)
-app.get('/api/weddings/:wid/rsvp', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT er.response_id, er.status, er.response_date,
- g.guest_id, g.first_name, g.last_name, g.email,
- e.event_id, e.event_type, e.date AS event_date
- FROM project.event_rsvp er
- JOIN project.guest g ON er.guest_id = g.guest_id
- JOIN project.event e ON er.event_id = e.event_id
- WHERE e.wedding_id = $1
- ORDER BY e.date, g.last_name`,
- [req.params.wid]
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// =============================================================
-// ATTENDANCE / SEATING (UC0011)
-// =============================================================
-
-// GET /api/weddings/:wid/attendance — full seating list for a wedding
-app.get('/api/weddings/:wid/attendance', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT a.attendance_id, a.status, a.table_number, a.role,
- g.guest_id, g.first_name, g.last_name,
- e.event_id, e.event_type
- FROM project.attendance a
- JOIN project.guest g ON a.guest_id = g.guest_id
- JOIN project.event e ON a.event_id = e.event_id
- WHERE e.wedding_id = $1
- ORDER BY a.table_number NULLS LAST, g.last_name`,
- [req.params.wid]
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// GET /api/events/:eid/attendance — seating for a specific event
-app.get('/api/events/:eid/attendance', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT a.attendance_id, a.status, a.table_number, a.role,
- g.guest_id, g.first_name, g.last_name
- FROM project.attendance a
- JOIN project.guest g ON a.guest_id = g.guest_id
- WHERE a.event_id = $1
- ORDER BY a.table_number NULLS LAST, g.last_name`,
- [req.params.eid]
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// POST /api/attendance — assign guest to event with table + role
-app.post('/api/attendance', requireAuth, async (req, res) => {
- const { table_number, role, guest_id, event_id } = req.body;
- if (!guest_id || !event_id || !role)
- return res.status(400).json({ error: 'guest_id, event_id and role are required.' });
- try {
- // Fetch the guest's RSVP status for this event
- const rsvpResult = await pool.query(
- 'SELECT status FROM project.event_rsvp WHERE guest_id=$1 AND event_id=$2',
- [guest_id, event_id]
- );
- const rsvpStatus = rsvpResult.rows[0]?.status || 'pending';
-
- // Enforce table capacity limit (max 10 per table)
- if (table_number) {
- const cntRes = await pool.query(
- `SELECT COUNT(*) AS cnt FROM project.attendance WHERE event_id=$1 AND table_number=$2`,
- [event_id, table_number]
- );
- const cnt = Number(cntRes.rows[0].cnt || 0);
- if (cnt >= 10) return res.status(400).json({ error: 'Table capacity exceeded (max 10 guests per table).' });
- }
-
- const result = await pool.query(
- `INSERT INTO project.attendance(status, table_number, role, guest_id, event_id)
- VALUES ($1,$2,$3,$4,$5)
- ON CONFLICT (guest_id, event_id)
- DO UPDATE SET status=$1, table_number=$2, role=$3
- RETURNING *`,
- [rsvpStatus, table_number || null, role, guest_id, event_id]
- );
-
- // Sync budget if this guest is accepted (affects venue per-guest cost)
- try {
- if (rsvpStatus === 'accepted') {
- const ev = await pool.query('SELECT wedding_id FROM project.event WHERE event_id=$1', [event_id]);
- if (ev.rows.length > 0) await BudgetService.syncWeddingBudget(ev.rows[0].wedding_id);
- }
- } catch (e) { console.warn('Budget sync after attendance change failed:', e.message); }
-
- res.status(201).json(result.rows[0]);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// PUT /api/attendance/:id — update seating assignment
-app.put('/api/attendance/:id', requireAuth, async (req, res) => {
- const { table_number, role } = req.body;
- try {
- // Fetch the attendance record to get guest_id and event_id
- const attendanceRecord = await pool.query(
- 'SELECT guest_id, event_id FROM project.attendance WHERE attendance_id=$1',
- [req.params.id]
- );
- if (attendanceRecord.rows.length === 0)
- return res.status(404).json({ error: 'Record not found.' });
-
- const { guest_id, event_id } = attendanceRecord.rows[0];
-
- // Fetch the guest's RSVP status for this event
- const rsvpResult = await pool.query(
- 'SELECT status FROM project.event_rsvp WHERE guest_id=$1 AND event_id=$2',
- [guest_id, event_id]
- );
- const rsvpStatus = rsvpResult.rows[0]?.status || 'pending';
-
- // Enforce table capacity (exclude current attendance record from the count)
- if (table_number) {
- const cntRes = await pool.query(
- `SELECT COUNT(*) AS cnt FROM project.attendance WHERE event_id=$1 AND table_number=$2 AND attendance_id != $3`,
- [event_id, table_number, req.params.id]
- );
- const cnt = Number(cntRes.rows[0].cnt || 0);
- if (cnt >= 10) return res.status(400).json({ error: 'Table capacity exceeded (max 10 guests per table).' });
- }
-
- const result = await pool.query(
- `UPDATE project.attendance SET status=$1, table_number=$2, role=$3
- WHERE attendance_id=$4 RETURNING *`,
- [rsvpStatus, table_number || null, role, req.params.id]
- );
- if (result.rows.length === 0) return res.status(404).json({ error: 'Record not found.' });
-
- try {
- if (rsvpStatus === 'accepted') {
- const ev = await pool.query('SELECT wedding_id FROM project.event WHERE event_id=$1', [event_id]);
- if (ev.rows.length > 0) await BudgetService.syncWeddingBudget(ev.rows[0].wedding_id);
- }
- } catch (e) { console.warn('Budget sync after attendance update failed:', e.message); }
-
- res.json(result.rows[0]);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// DELETE /api/attendance/:id
-app.delete('/api/attendance/:id', requireAuth, async (req, res) => {
- try {
- await pool.query('DELETE FROM project.attendance WHERE attendance_id=$1', [req.params.id]);
- res.json({ message: 'Attendance record deleted.' });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// =============================================================
-// VENUES (UC0006)
-// =============================================================
-
-// GET /api/venues — all venues with type name
-app.get('/api/venues', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT v.*, vt.type_name
- FROM project.venue v
- JOIN project.venue_type vt ON v.type_id = vt.type_id
- ORDER BY v.city, v.name`
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// GET /api/weddings/:wid/venue-bookings
-app.get('/api/weddings/:wid/venue-bookings', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT vb.*, v.name AS venue_name, v.location, v.city
- FROM project.venue_booking vb
- JOIN project.venue v ON vb.venue_id = v.venue_id
- WHERE vb.wedding_id = $1
- ORDER BY vb.date`,
- [req.params.wid]
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// POST /api/weddings/:wid/venue-bookings
-app.post('/api/weddings/:wid/venue-bookings', requireAuth, async (req, res) => {
- const { date, start_time, end_time, status, price, venue_id } = req.body;
- if (!date || !start_time || !end_time || !venue_id)
- return res.status(400).json({ error: 'date, start_time, end_time and venue_id are required.' });
-
- // Check availability in a transaction to avoid race conditions
- const client = await pool.connect();
- try {
- console.log('BOOKING REQ venue:', { wedding_id: req.params.wid, date, start_time, end_time, venue_id });
- await client.query('BEGIN');
- const dateOnly = BookingService._fmtDate(date);
- console.log('Normalized dateOnly for venue booking:', dateOnly);
- // validate wedding date matches
- const wRes = await client.query('SELECT 1 FROM project.wedding WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- if (wRes.rows.length === 0) {
- await client.query('ROLLBACK');
- return res.status(400).json({ error: 'Booking is only allowed on the wedding date.' });
- }
-
- // check intra-wedding overlap
- const bookings = await client.query(
- `SELECT start_time, end_time FROM project.venue_booking WHERE wedding_id=$1 AND "date" = $2::date`,
- [req.params.wid, dateOnly]
- );
- for (const b of bookings.rows) {
- if (BookingService.isOverlapping(start_time, end_time, b.start_time, b.end_time)) {
- await client.query('ROLLBACK');
- return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' });
- }
- }
-
- // lock any existing bookings for this venue/date to prevent concurrent inserts
- const conflictLock = await client.query(
- `SELECT booking_id FROM project.venue_booking
- WHERE venue_id=$1 AND "date" = $2::date
- AND NOT (end_time <= $3 OR start_time >= $4)
- FOR UPDATE`,
- [venue_id, dateOnly, start_time, end_time]
- );
- if (conflictLock.rows.length > 0) {
- console.log('CONFLICT detected for venue (locked rows):', conflictLock.rows);
- await client.query('ROLLBACK');
- return res.status(409).json({ error: 'Venue is already booked during this time slot.' });
- }
-
- // insert booking
- const ins = await client.query(
- `INSERT INTO project.venue_booking("date",start_time,end_time,status,price,venue_id,wedding_id)
- VALUES ($1,$2,$3,$4,$5,$6,$7) RETURNING *`,
- [dateOnly, start_time, end_time, status || 'confirmed', price || 0, venue_id, req.params.wid]
- );
-
- await client.query('COMMIT');
- await BudgetService.syncWeddingBudget(req.params.wid);
- const _budget = await BudgetService.getBudgetStatus(req.params.wid);
- res.status(201).json({ ...ins.rows[0], _budget });
- } catch (err) {
- try { await client.query('ROLLBACK'); } catch(e) { /* ignore */ }
- console.error('Venue booking error:', err && err.message ? err.message : err);
- if (err instanceof ApiError) return res.status(err.status).json({ error: err.message });
- if (err && err.code === 'P0001') return res.status(409).json({ error: err.message });
- res.status(500).json({ error: 'Server error.' });
- } finally {
- client.release();
- }
-});
-
-// DELETE /api/venue-bookings/:id
-app.delete('/api/venue-bookings/:id', requireAuth, async (req, res) => {
- try {
- const del = await pool.query(
- 'DELETE FROM project.venue_booking WHERE booking_id=$1 RETURNING wedding_id',
- [req.params.id]
- );
- if (del.rows.length > 0) await BudgetService.syncWeddingBudget(del.rows[0].wedding_id);
- res.json({ message: 'Venue booking cancelled.' });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// =============================================================
-// BANDS (UC0007)
-// =============================================================
-
-// GET /api/bands
-app.get('/api/bands', requireAuth, async (req, res) => {
- try {
- const result = await pool.query('SELECT * FROM project.band ORDER BY band_name');
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// GET /api/weddings/:wid/band-bookings
-app.get('/api/weddings/:wid/band-bookings', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT bb.*, b.band_name, b.genre, b.price_per_hour,
- ROUND((EXTRACT(EPOCH FROM (bb.end_time - bb.start_time)) / 3600)::numeric, 2) AS hours,
- ROUND((EXTRACT(EPOCH FROM (bb.end_time - bb.start_time)) / 3600 * b.price_per_hour)::numeric, 2) AS booking_cost
- FROM project.band_booking bb
- JOIN project.band b ON bb.band_id = b.band_id
- WHERE bb.wedding_id=$1 ORDER BY bb.date`,
- [req.params.wid]
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// POST /api/weddings/:wid/band-bookings
-app.post('/api/weddings/:wid/band-bookings', requireAuth, async (req, res) => {
- const { date, start_time, end_time, status, band_id } = req.body;
- if (!date || !start_time || !end_time || !band_id)
- return res.status(400).json({ error: 'date, start_time, end_time and band_id are required.' });
- const client = await pool.connect();
- try {
- console.log('BOOKING REQ band:', { wedding_id: req.params.wid, date, start_time, end_time, band_id });
- await client.query('BEGIN');
- const dateOnly = BookingService._fmtDate(date);
- console.log('Normalized dateOnly for band booking:', dateOnly);
- // Validate wedding date
- const wRes = await client.query('SELECT 1 FROM project.wedding WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- if (wRes.rows.length === 0) { await client.query('ROLLBACK'); return res.status(400).json({ error: 'Booking is only allowed on the wedding date.' }); }
-
- // Intra-wedding overlap
- const bookings = await client.query('SELECT start_time,end_time FROM project.band_booking WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- for (const b of bookings.rows) {
- if (BookingService.isOverlapping(start_time, end_time, b.start_time, b.end_time)) {
- await client.query('ROLLBACK');
- return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' });
- }
- }
-
- // Lock overlapping bookings for this band/date across weddings
- const conflict = await client.query(
- `SELECT booking_id FROM project.band_booking
- WHERE band_id=$1 AND "date" = $2::date
- AND NOT (end_time <= $3 OR start_time >= $4)
- FOR UPDATE`,
- [band_id, dateOnly, start_time, end_time]
- );
- if (conflict.rows.length > 0) { console.log('CONFLICT detected for band:', conflict.rows); await client.query('ROLLBACK'); return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' }); }
-
- console.log('No conflict found for band — inserting booking');
- const ins = await client.query(
- `INSERT INTO project.band_booking("date",start_time,end_time,status,band_id,wedding_id)
- VALUES ($1,$2,$3,$4,$5,$6) RETURNING *`,
- [dateOnly, start_time, end_time, status || 'confirmed', band_id, req.params.wid]
- );
- console.log('Inserted band booking id:', ins.rows[0] && ins.rows[0].booking_id);
- await client.query('COMMIT');
- await BudgetService.syncWeddingBudget(req.params.wid);
- const _budget = await BudgetService.getBudgetStatus(req.params.wid);
- res.status(201).json({ ...ins.rows[0], _budget });
- } catch (err) {
- try { await client.query('ROLLBACK'); } catch (e) { /* ignore */ }
- console.error('Band booking error:', err && err.message ? err.message : err);
- if (err instanceof ApiError) return res.status(err.status).json({ error: err.message });
- if (err && err.code === 'P0001') return res.status(409).json({ error: err.message });
- res.status(500).json({ error: 'Server error.' });
- } finally {
- client.release();
- }
-});
-
-// DELETE /api/band-bookings/:id
-app.delete('/api/band-bookings/:id', requireAuth, async (req, res) => {
- try {
- const del = await pool.query(
- 'DELETE FROM project.band_booking WHERE booking_id=$1 RETURNING wedding_id',
- [req.params.id]
- );
- if (del.rows.length > 0) await BudgetService.syncWeddingBudget(del.rows[0].wedding_id);
- res.json({ message: 'Band booking removed.' });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// =============================================================
-// PHOTOGRAPHERS (UC0008)
-// =============================================================
-
-// GET /api/photographers
-app.get('/api/photographers', requireAuth, async (req, res) => {
- try {
- const result = await pool.query('SELECT * FROM project.photographer ORDER BY name');
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// GET /api/weddings/:wid/photographer-bookings
-app.get('/api/weddings/:wid/photographer-bookings', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT pb.*, p.name AS photographer_name, p.email AS photographer_email, p.price_per_hour,
- ROUND((EXTRACT(EPOCH FROM (pb.end_time - pb.start_time)) / 3600)::numeric, 2) AS hours,
- ROUND((EXTRACT(EPOCH FROM (pb.end_time - pb.start_time)) / 3600 * p.price_per_hour)::numeric, 2) AS booking_cost
- FROM project.photographer_booking pb
- JOIN project.photographer p ON pb.photographer_id = p.photographer_id
- WHERE pb.wedding_id=$1 ORDER BY pb.date`,
- [req.params.wid]
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// POST /api/weddings/:wid/photographer-bookings
-app.post('/api/weddings/:wid/photographer-bookings', requireAuth, async (req, res) => {
- const { date, start_time, end_time, status, photographer_id } = req.body;
- if (!date || !start_time || !end_time || !photographer_id)
- return res.status(400).json({ error: 'date, start_time, end_time and photographer_id are required.' });
- const client = await pool.connect();
- try {
- console.log('BOOKING REQ photographer:', { wedding_id: req.params.wid, date, start_time, end_time, photographer_id });
- await client.query('BEGIN');
- const dateOnly = BookingService._fmtDate(date);
- console.log('Normalized dateOnly for photographer booking:', dateOnly);
- const wRes = await client.query('SELECT 1 FROM project.wedding WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- if (wRes.rows.length === 0) { await client.query('ROLLBACK'); return res.status(400).json({ error: 'Booking is only allowed on the wedding date.' }); }
-
- const bookings = await client.query('SELECT start_time,end_time FROM project.photographer_booking WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- for (const b of bookings.rows) {
- if (BookingService.isOverlapping(start_time, end_time, b.start_time, b.end_time)) {
- await client.query('ROLLBACK');
- return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' });
- }
- }
-
- const conflict = await client.query(
- `SELECT booking_id FROM project.photographer_booking
- WHERE photographer_id=$1 AND "date" = $2::date
- AND NOT (end_time <= $3 OR start_time >= $4)
- FOR UPDATE`,
- [photographer_id, dateOnly, start_time, end_time]
- );
-
- if (conflict.rows.length > 0) { console.log('CONFLICT detected for photographer:', conflict.rows); await client.query('ROLLBACK'); return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' }); }
-
- console.log('No conflict found for photographer — inserting booking');
- const ins = await client.query(
- `INSERT INTO project.photographer_booking("date",start_time,end_time,status,photographer_id,wedding_id)
- VALUES ($1,$2,$3,$4,$5,$6) RETURNING *`,
- [dateOnly, start_time, end_time, status || 'confirmed', photographer_id, req.params.wid]
- );
- console.log('Inserted photographer booking id:', ins.rows[0] && ins.rows[0].booking_id);
- await client.query('COMMIT');
- await BudgetService.syncWeddingBudget(req.params.wid);
- const _budget = await BudgetService.getBudgetStatus(req.params.wid);
- res.status(201).json({ ...ins.rows[0], _budget });
- } catch (err) {
- try { await client.query('ROLLBACK'); } catch (e) { /* ignore */ }
- console.error('Photographer booking error:', err && err.message ? err.message : err);
- if (err instanceof ApiError) return res.status(err.status).json({ error: err.message });
- if (err && err.code === 'P0001') return res.status(409).json({ error: err.message });
- res.status(500).json({ error: 'Server error.' });
- } finally {
- client.release();
- }
-});
-
-// DELETE /api/photographer-bookings/:id
-app.delete('/api/photographer-bookings/:id', requireAuth, async (req, res) => {
- try {
- const del = await pool.query(
- 'DELETE FROM project.photographer_booking WHERE booking_id=$1 RETURNING wedding_id',
- [req.params.id]
- );
- if (del.rows.length > 0) await BudgetService.syncWeddingBudget(del.rows[0].wedding_id);
- res.json({ message: 'Photographer booking removed.' });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// =============================================================
-// CHURCHES + PRIESTS
-// =============================================================
-
-// GET /api/churches — all churches with their linked priest
-app.get('/api/churches', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT c.*, p.name AS priest_name, p.contact AS priest_contact
- FROM project.church c
- LEFT JOIN project.priest p ON p.church_id = c.church_id
- ORDER BY c.name`
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// GET /api/weddings/:wid/church-bookings
-app.get('/api/weddings/:wid/church-bookings', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT cb.*, c.name AS church_name, c.location, c.contact,
- p.name AS priest_name, p.contact AS priest_contact
- FROM project.church_booking cb
- JOIN project.church c ON cb.church_id = c.church_id
- LEFT JOIN project.priest p ON p.church_id = c.church_id
- WHERE cb.wedding_id=$1 ORDER BY cb.date`,
- [req.params.wid]
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// POST /api/weddings/:wid/church-bookings
-app.post('/api/weddings/:wid/church-bookings', requireAuth, async (req, res) => {
- const { date, start_time, end_time, status, church_id } = req.body;
- if (!date || !start_time || !end_time || !church_id)
- return res.status(400).json({ error: 'date, start_time, end_time and church_id are required.' });
- const client = await pool.connect();
- try {
- console.log('BOOKING REQ church:', { wedding_id: req.params.wid, date, start_time, end_time, church_id });
- await client.query('BEGIN');
- const dateOnly = BookingService._fmtDate(date);
- console.log('Normalized dateOnly for church booking:', dateOnly);
- const wRes = await client.query('SELECT 1 FROM project.wedding WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- if (wRes.rows.length === 0) { await client.query('ROLLBACK'); return res.status(400).json({ error: 'Booking is only allowed on the wedding date.' }); }
-
- const bookings = await client.query('SELECT start_time,end_time FROM project.church_booking WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- for (const b of bookings.rows) {
- if (BookingService.isOverlapping(start_time, end_time, b.start_time, b.end_time)) {
- await client.query('ROLLBACK');
- return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' });
- }
- }
-
- const conflict = await client.query(
- `SELECT booking_id FROM project.church_booking
- WHERE church_id=$1 AND "date" = $2::date
- AND NOT (end_time <= $3 OR start_time >= $4)
- FOR UPDATE`,
- [church_id, dateOnly, start_time, end_time]
- );
-
- if (conflict.rows.length > 0) { console.log('CONFLICT detected for church:', conflict.rows); await client.query('ROLLBACK'); return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' }); }
-
- console.log('No conflict found for church — inserting booking');
- const ins = await client.query(
- `INSERT INTO project.church_booking("date",start_time,end_time,status,church_id,wedding_id)
- VALUES ($1,$2,$3,$4,$5,$6) RETURNING *`,
- [dateOnly, start_time, end_time, status || 'confirmed', church_id, req.params.wid]
- );
- console.log('Inserted church booking id:', ins.rows[0] && ins.rows[0].booking_id);
- await client.query('COMMIT');
- res.status(201).json(ins.rows[0]);
- } catch (err) {
- try { await client.query('ROLLBACK'); } catch (e) { /* ignore */ }
- console.error('Church booking error:', err && err.message ? err.message : err);
- if (err instanceof ApiError) return res.status(err.status).json({ error: err.message });
- if (err && err.code === 'P0001') return res.status(409).json({ error: err.message });
- res.status(500).json({ error: 'Server error.' });
- } finally {
- client.release();
- }
-});
-
-// DELETE /api/church-bookings/:id
-app.delete('/api/church-bookings/:id', requireAuth, async (req, res) => {
- try {
- await pool.query('DELETE FROM project.church_booking WHERE booking_id=$1', [req.params.id]);
- res.json({ message: 'Church booking removed.' });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// =============================================================
-// REGISTRARS
-// =============================================================
-
-// GET /api/registrars
-app.get('/api/registrars', requireAuth, async (req, res) => {
- try {
- const result = await pool.query('SELECT * FROM project.registrar ORDER BY name');
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// GET /api/weddings/:wid/registrar-bookings
-app.get('/api/weddings/:wid/registrar-bookings', requireAuth, async (req, res) => {
- try {
- const result = await pool.query(
- `SELECT rb.*, r.name AS registrar_name, r.location
- FROM project.registrar_booking rb
- JOIN project.registrar r ON rb.registrar_id = r.registrar_id
- WHERE rb.wedding_id=$1 ORDER BY rb.date`,
- [req.params.wid]
- );
- res.json(result.rows);
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// POST /api/weddings/:wid/registrar-bookings
-app.post('/api/weddings/:wid/registrar-bookings', requireAuth, async (req, res) => {
- const { date, start_time, end_time, status, registrar_id } = req.body;
- if (!date || !start_time || !end_time || !registrar_id)
- return res.status(400).json({ error: 'date, start_time, end_time and registrar_id are required.' });
- const client = await pool.connect();
- try {
- console.log('BOOKING REQ registrar:', { wedding_id: req.params.wid, date, start_time, end_time, registrar_id });
- await client.query('BEGIN');
- const dateOnly = BookingService._fmtDate(date);
- console.log('Normalized dateOnly for registrar booking:', dateOnly);
- const wRes = await client.query('SELECT 1 FROM project.wedding WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- if (wRes.rows.length === 0) { await client.query('ROLLBACK'); return res.status(400).json({ error: 'Booking is only allowed on the wedding date.' }); }
-
- const bookings = await client.query('SELECT start_time,end_time FROM project.registrar_booking WHERE wedding_id=$1 AND "date" = $2::date', [req.params.wid, dateOnly]);
- for (const b of bookings.rows) {
- if (BookingService.isOverlapping(start_time, end_time, b.start_time, b.end_time)) {
- await client.query('ROLLBACK');
- return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' });
- }
- }
-
- const conflict = await client.query(
- `SELECT booking_id FROM project.registrar_booking
- WHERE registrar_id=$1 AND "date" = $2::date
- AND NOT (end_time <= $3 OR start_time >= $4)
- FOR UPDATE`,
- [registrar_id, dateOnly, start_time, end_time]
- );
- if (conflict.rows.length > 0) { console.log('CONFLICT detected for registrar:', conflict.rows); await client.query('ROLLBACK'); return res.status(409).json({ error: 'This has been already booked, please change date or time to rebook' }); }
-
- await BookingService.validateRegistrarLocation(req.params.wid, dateOnly, registrar_id);
-
- console.log('No conflict found for registrar — inserting booking');
- const ins = await client.query(
- `INSERT INTO project.registrar_booking("date",start_time,end_time,status,registrar_id,wedding_id)
- VALUES ($1,$2,$3,$4,$5,$6) RETURNING *`,
- [dateOnly, start_time, end_time, status || 'confirmed', registrar_id, req.params.wid]
- );
- console.log('Inserted registrar booking id:', ins.rows[0] && ins.rows[0].booking_id);
- await client.query('COMMIT');
- res.status(201).json(ins.rows[0]);
- } catch (err) {
- try { await client.query('ROLLBACK'); } catch (e) { /* ignore */ }
- console.error('Registrar booking error:', err && err.message ? err.message : err);
- if (err instanceof ApiError) return res.status(err.status).json({ error: err.message });
- if (err && err.code === 'P0001') return res.status(409).json({ error: err.message });
- res.status(500).json({ error: 'Server error.' });
- } finally {
- client.release();
- }
-});
-
-// DELETE /api/registrar-bookings/:id
-app.delete('/api/registrar-bookings/:id', requireAuth, async (req, res) => {
- try {
- await pool.query('DELETE FROM project.registrar_booking WHERE booking_id=$1', [req.params.id]);
- res.json({ message: 'Registrar booking removed.' });
- } catch (err) {
- console.error(err.message);
- res.status(500).json({ error: 'Server error.' });
- }
-});
-
-// =============================================================
-// START SERVER
-// =============================================================
-app.listen(PORT, () => {
- console.log(`\n🌸 Wedding Planner server running at http://localhost:${PORT}`);
- console.log(` Dashboard → http://localhost:${PORT}/Wedding_Planner.html`);
- console.log(` Login → http://localhost:${PORT}/login.html`);
- console.log(` RSVP page → http://localhost:${PORT}/rsvp.html\n`);
-});
-
-// Global error handler — convert ApiError and DB trigger errors into structured JSON responses
-app.use((err, req, res, next) => {
- console.error('Unhandled error:', err && err.stack ? err.stack : err);
- if (!err) return res.status(500).json({ error: 'Server error.' });
- if (err instanceof ApiError) return res.status(err.status).json({ error: err.message });
- if (err.code === 'P0001' || String(err.message || '').toLowerCase().includes('already booked') || String(err.message || '').toLowerCase().includes('conflict')) {
- return res.status(409).json({ error: err.message });
- }
- return res.status(500).json({ error: 'Server error.' });
-});