Update main.py

main.py

@@ -538,11 +538,64 @@ def add_member():
     try:
         db.reference(f"members/{member_id}").set(data)
         logger.info(f"Member added successfully with ID: {member_id}")
-        return jsonify({"message": "Member added"}), 200
+        return jsonify({"message": "Member added", "member_id": member_id}), 200
     except Exception as e:
         logger.error(f"Error adding member {member_id}: {e}", exc_info=True)
         return jsonify({"error": "Internal server error"}), 500
 
+@app.route("/update_member/<member_id>", methods=["POST"])
+def update_member(member_id):
+    logger.info(f"Handling /update_member/{member_id} request")
+    user = verify_token(request)
+    if not user:
+        logger.warning(f"Unauthorized access attempt to /update_member/{member_id}")
+        return jsonify({"error": "Unauthorized"}), 401
+
+    data = request.json
+    if not data:
+        logger.warning(f"Update member request for {member_id} has no JSON body.")
+        return jsonify({"error": "Request body cannot be empty"}), 400
+
+    logger.debug(f"Updating member {member_id} with data: {data}")
+    member_ref = db.reference(f"members/{member_id}")
+
+    # Check if member exists before updating
+    if not member_ref.get():
+        logger.warning(f"Attempted to update non-existent member {member_id}")
+        return jsonify({"error": "Member not found"}), 404
+
+    try:
+        member_ref.update(data)
+        logger.info(f"Member {member_id} updated successfully.")
+        updated_data = {**data, "id": member_id}
+        return jsonify({"message": "Member updated", "member": updated_data}), 200
+    except Exception as e:
+        logger.error(f"Error updating member {member_id}: {e}", exc_info=True)
+        return jsonify({"error": "Internal server error"}), 500
+
+@app.route("/delete_member/<member_id>", methods=["DELETE"])
+def delete_member(member_id):
+    logger.info(f"Handling /delete_member/{member_id} request")
+    user = verify_token(request)
+    if not user:
+        logger.warning(f"Unauthorized access attempt to /delete_member/{member_id}")
+        return jsonify({"error": "Unauthorized"}), 401
+
+    member_ref = db.reference(f"members/{member_id}")
+
+    # Check if member exists before deleting
+    if not member_ref.get():
+        logger.warning(f"Attempted to delete non-existent member {member_id}")
+        return jsonify({"error": "Member not found"}), 404
+
+    try:
+        member_ref.delete()
+        logger.info(f"Member {member_id} deleted successfully.")
+        return jsonify({"message": f"Member {member_id} deleted"}), 200
+    except Exception as e:
+        logger.error(f"Error deleting member {member_id}: {e}", exc_info=True)
+        return jsonify({"error": "Internal server error"}), 500
+
 @app.route("/create_job", methods=["POST"])
 def create_job():
     logger.info("Handling /create_job request")
@@ -587,6 +640,40 @@ def create_job():
         logger.error(f"Error creating job {job_id}: {e}", exc_info=True)
         return jsonify({"error": "Internal server error"}), 500
 
+@app.route("/update_job/<job_id>", methods=["POST"])
+def update_job(job_id):
+    logger.info(f"Handling /update_job/{job_id} request")
+    user = verify_token(request)
+    if not user:
+        logger.warning(f"Unauthorized access attempt to /update_job/{job_id}")
+        return jsonify({"error": "Unauthorized"}), 401
+
+    data = request.json
+    if not data:
+        logger.warning(f"Update job request for {job_id} has no JSON body.")
+        return jsonify({"error": "Request body cannot be empty"}), 400
+
+    logger.debug(f"Updating job {job_id} with data: {data}")
+    job_ref = db.reference(f"jobs/{job_id}")
+
+    # Check if job exists
+    if not job_ref.get():
+        logger.warning(f"Attempted to update non-existent job {job_id}")
+        return jsonify({"error": "Job not found"}), 404
+
+    try:
+        # Prevent overwriting critical, managed fields from a general update endpoint
+        data.pop('assignments', None)
+        data.pop('rotation_history', None)
+        data.pop('status', None)
+
+        job_ref.update(data)
+        logger.info(f"Job {job_id} updated successfully.")
+        return jsonify({"message": f"Job {job_id} updated"}), 200
+    except Exception as e:
+        logger.error(f"Error updating job {job_id}: {e}", exc_info=True)
+        return jsonify({"error": "Internal server error"}), 500
+
 @app.route("/schedule_job/<job_id>", methods=["POST"])
 def schedule_job(job_id):
     """Schedule a job to start at a specific time"""
@@ -1063,4 +1150,4 @@ except Exception as e:
 # === Run Server ===
 if __name__ == "__main__":
     logger.info("Starting Flask application...")
-    app.run(debug=True, host="0.0.0.0", port=int(os.getenv("PORT", 7860)))
+    app.run(debug=True, host="0.0.0.0", port=int(os.getenv("PORT", 7860)))