Persist action coach reviews

src/server.ts

@@ -58,6 +58,10 @@ const profileSchema = z.object({
   role: z.enum(profileRoles).nullable(),
 });
 const passwordSchema = z.object({ currentPassword: z.string().max(128).optional(), newPassword: z.string().min(8).max(128) });
+const actionReviewSchema = z.object({
+  coachScore: z.number().int().min(0).max(10).nullable(),
+  feedback: z.array(z.string().trim().min(1).max(2000)).max(30),
+}).strict();
 
 
 async function requireActiveSubscription(req: Request, res: Response) {
@@ -274,6 +278,74 @@ app.get("/api/sessions-overview", async (req, res, next) => {
   } catch (error) { next(error); }
 });
 
+app.get("/api/sessions/:sessionId/reviews", async (req, res, next) => {
+  try {
+    const current = await requireActiveSubscription(req, res);
+    if (!current) return;
+    const sessionId = z.uuid().safeParse(req.params.sessionId);
+    if (!sessionId.success) return res.sendStatus(404);
+
+    const { data: session, error: sessionError } = await supabaseAdmin.from("sessions")
+      .select("session_id").eq("session_id", sessionId.data).eq("user_id", current.user.id).maybeSingle();
+    if (sessionError) throw new Error(`Unable to verify review session: ${sessionError.message}`);
+    if (!session) return res.sendStatus(404);
+
+    const { data: actions, error: actionsError } = await supabaseAdmin.from("actions")
+      .select("action_id").eq("session_id", sessionId.data);
+    if (actionsError) throw new Error(`Unable to load review actions: ${actionsError.message}`);
+    const actionIds = (actions ?? []).map((action) => action.action_id);
+    if (!actionIds.length) return res.json({ reviews: {} });
+
+    const [{ data: annotations, error: annotationsError }, { data: notes, error: notesError }] = await Promise.all([
+      supabaseAdmin.from("annotations").select("action_id,score").in("action_id", actionIds),
+      supabaseAdmin.from("annotations_notes").select("action_id,note").in("action_id", actionIds),
+    ]);
+    if (annotationsError) throw new Error(`Unable to load action reviews: ${annotationsError.message}`);
+    if (notesError) throw new Error(`Unable to load action notes: ${notesError.message}`);
+
+    const reviews: Record<string, { coachScore: number | null; feedback: string[] }> = Object.fromEntries(
+      actionIds.map((actionId) => [actionId, { coachScore: null, feedback: [] }]),
+    );
+    for (const annotation of annotations ?? []) {
+      if (reviews[annotation.action_id]) reviews[annotation.action_id].coachScore = annotation.score == null ? null : Number(annotation.score);
+    }
+    for (const note of notes ?? []) reviews[note.action_id]?.feedback.push(note.note);
+    return res.json({ reviews });
+  } catch (error) { next(error); }
+});
+
+app.put("/api/sessions/:sessionId/actions/:actionId/review", async (req, res, next) => {
+  try {
+    const current = await requireActiveSubscription(req, res);
+    if (!current) return;
+    const sessionId = z.uuid().safeParse(req.params.sessionId);
+    const actionId = z.uuid().safeParse(req.params.actionId);
+    const input = actionReviewSchema.safeParse(req.body);
+    if (!sessionId.success || !actionId.success || !input.success) {
+      return res.status(400).json({ error: "Check the action score and feedback points." });
+    }
+
+    const { data: session, error: sessionError } = await supabaseAdmin.from("sessions")
+      .select("session_id").eq("session_id", sessionId.data).eq("user_id", current.user.id).maybeSingle();
+    if (sessionError) throw new Error(`Unable to verify review session: ${sessionError.message}`);
+    if (!session) return res.sendStatus(404);
+    const { data: action, error: actionError } = await supabaseAdmin.from("actions")
+      .select("action_id").eq("action_id", actionId.data).eq("session_id", sessionId.data).maybeSingle();
+    if (actionError) throw new Error(`Unable to verify review action: ${actionError.message}`);
+    if (!action) return res.sendStatus(404);
+
+    const { error } = await supabaseAdmin.rpc("save_action_review", {
+      p_session_id: sessionId.data,
+      p_action_id: actionId.data,
+      p_user_id: current.user.id,
+      p_score: input.data.coachScore,
+      p_notes: [...new Set(input.data.feedback)],
+    });
+    if (error) throw new Error(`Unable to save action review: ${error.message}`);
+    return res.json({ ok: true });
+  } catch (error) { next(error); }
+});
+
 // Session deletion is handled by the AI service through the proxy below so
 // the session folder and database records are deleted together.