+
+
+
+
+
+
+ Social scheduler — eligible projects
+
+
+
+ + Projects enabled here appear as platform sources in the Social Scheduler. + Only Discord Bot projects with configured social accounts are useful here. +
+ + + Saved +Scan results
diff --git a/views/social.php b/views/social.php new file mode 100644 index 0000000..b8d4e96 --- /dev/null +++ b/views/social.php @@ -0,0 +1,90 @@ + +Social Scheduler
+ +
+
+
+
+
+
diff --git a/web/api/social.php b/web/api/social.php
new file mode 100644
index 0000000..ad05260
--- /dev/null
+++ b/web/api/social.php
@@ -0,0 +1,196 @@
+prepare("SELECT value FROM settings WHERE key = 'social_enabled_projects'");
+ $row->execute();
+ $val = $row->fetchColumn();
+ return $val ? (json_decode($val, true) ?? []) : [];
+}
+
+function social_project_targets(PDO $db): array {
+ $enabled = social_enabled_projects($db);
+ if (!$enabled) return [];
+
+ $placeholders = implode(',', array_fill(0, count($enabled), '?'));
+ $stmt = $db->prepare("SELECT id, name, path FROM projects WHERE id IN ($placeholders) AND is_active = 1");
+ $stmt->execute($enabled);
+ $projects = $stmt->fetchAll();
+
+ $result = [];
+ foreach ($projects as $proj) {
+ $config_path = realpath($proj['path']) . '/data/config.json';
+ if (!file_exists($config_path)) continue;
+ $config = json_decode(file_get_contents($config_path), true);
+ if (!is_array($config)) continue;
+
+ $targets = ['discord' => [], 'mastodon' => [], 'linkedin' => []];
+ foreach ($config['discord_channels'] ?? [] as $key => $ch) {
+ $targets['discord'][] = ['key' => $key, 'label' => $ch['label'] ?? $key];
+ }
+ foreach ($config['mastodon'] ?? [] as $key => $acc) {
+ $targets['mastodon'][] = ['key' => $key, 'label' => $acc['label'] ?? $key];
+ }
+ foreach ($config['linkedin']['pages'] ?? [] as $key => $page) {
+ if (($page['type'] ?? 'organization') === 'personal') {
+ $targets['linkedin'][] = ['key' => $key, 'label' => $page['label'] ?? $key];
+ }
+ }
+ if ($targets['discord'] || $targets['mastodon'] || $targets['linkedin']) {
+ $result[] = ['project_id' => (int)$proj['id'], 'project_name' => $proj['name'], 'targets' => $targets];
+ }
+ }
+ return $result;
+}
+
+// ── GET ───────────────────────────────────────────────────────────────────────
+if ($method === 'GET') {
+ $action = $_GET['action'] ?? 'list';
+
+ if ($action === 'targets') {
+ echo json_encode(['groups' => social_project_targets($db)]);
+ exit;
+ }
+
+ if ($action === 'settings') {
+ $enabled = social_enabled_projects($db);
+ $stmt = $db->query("SELECT id, name, type FROM projects WHERE is_active = 1 AND type = 'discord-bot' ORDER BY name");
+ $projects = $stmt->fetchAll();
+ echo json_encode(['enabled' => $enabled, 'projects' => $projects]);
+ exit;
+ }
+
+ // list posts
+ $status_filter = $_GET['status'] ?? 'pending';
+ if ($status_filter === 'all') {
+ $stmt = $db->prepare("SELECT * FROM social_posts ORDER BY scheduled_at DESC LIMIT 200");
+ $stmt->execute();
+ } else {
+ $stmt = $db->prepare("SELECT * FROM social_posts WHERE status IN ('pending','partial') ORDER BY scheduled_at ASC LIMIT 200");
+ $stmt->execute();
+ }
+ $posts = $stmt->fetchAll();
+ foreach ($posts as &$post) {
+ $tgt = $db->prepare("SELECT t.*, p.name AS project_name FROM social_targets t JOIN projects p ON p.id = t.project_id WHERE t.post_id = ? ORDER BY t.id");
+ $tgt->execute([$post['id']]);
+ $post['targets'] = $tgt->fetchAll();
+ $post['image_url'] = $post['image_path'] ? '/api/social_upload?action=serve&path=' . rawurlencode(basename($post['image_path'])) : null;
+ }
+ echo json_encode(['posts' => $posts]);
+ exit;
+}
+
+if ($method !== 'POST') { http_response_code(405); echo json_encode(['error' => 'Method not allowed']); exit; }
+
+$action = $input['action'] ?? '';
+
+// ── SAVE SETTINGS ─────────────────────────────────────────────────────────────
+if ($action === 'save_settings') {
+ $ids = array_map('intval', $input['project_ids'] ?? []);
+ $db->prepare("INSERT OR REPLACE INTO settings (key, value) VALUES ('social_enabled_projects', ?)")
+ ->execute([json_encode($ids)]);
+ Audit::log($db, 'social_settings_save', null, implode(',', $ids));
+ echo json_encode(['ok' => true]);
+ exit;
+}
+
+// ── CREATE ────────────────────────────────────────────────────────────────────
+if ($action === 'create') {
+ $content = trim($input['content'] ?? '');
+ $image_path = trim($input['image_path'] ?? '');
+ $scheduled_at = trim($input['scheduled_at'] ?? '');
+ $targets = $input['targets'] ?? [];
+
+ if (!$content) { echo json_encode(['error' => 'Content required']); exit; }
+ if (!$scheduled_at) { echo json_encode(['error' => 'Scheduled time required']); exit; }
+ if (!$targets) { echo json_encode(['error' => 'Select at least one platform target']); exit; }
+
+ $db->prepare("INSERT INTO social_posts (content, image_path, scheduled_at) VALUES (?, ?, ?)")
+ ->execute([$content, $image_path ?: null, $scheduled_at]);
+ $post_id = (int)$db->lastInsertId();
+
+ $stmt = $db->prepare("INSERT INTO social_targets (post_id, project_id, platform, target_key, include_image) VALUES (?, ?, ?, ?, ?)");
+ foreach ($targets as $t) {
+ $stmt->execute([$post_id, (int)$t['project_id'], $t['platform'], $t['target_key'], (int)($t['include_image'] ?? 0)]);
+ }
+
+ Audit::log($db, 'social_post_create', null, "post_id=$post_id");
+ echo json_encode(['ok' => true, 'id' => $post_id]);
+ exit;
+}
+
+// ── UPDATE ────────────────────────────────────────────────────────────────────
+if ($action === 'update') {
+ $id = (int)($input['id'] ?? 0);
+ $content = trim($input['content'] ?? '');
+ $image_path = trim($input['image_path'] ?? '');
+ $scheduled_at = trim($input['scheduled_at'] ?? '');
+ $targets = $input['targets'] ?? [];
+
+ if (!$id) { echo json_encode(['error' => 'id required']); exit; }
+ if (!$content) { echo json_encode(['error' => 'Content required']); exit; }
+ if (!$scheduled_at) { echo json_encode(['error' => 'Scheduled time required']); exit; }
+ if (!$targets) { echo json_encode(['error' => 'Select at least one platform target']); exit; }
+
+ $db->prepare("UPDATE social_posts SET content=?, image_path=?, scheduled_at=?, status='pending' WHERE id=?")
+ ->execute([$content, $image_path ?: null, $scheduled_at, $id]);
+ $db->prepare("DELETE FROM social_targets WHERE post_id=?")->execute([$id]);
+
+ $stmt = $db->prepare("INSERT INTO social_targets (post_id, project_id, platform, target_key, include_image) VALUES (?, ?, ?, ?, ?)");
+ foreach ($targets as $t) {
+ $stmt->execute([$id, (int)$t['project_id'], $t['platform'], $t['target_key'], (int)($t['include_image'] ?? 0)]);
+ }
+
+ Audit::log($db, 'social_post_update', null, "post_id=$id");
+ echo json_encode(['ok' => true]);
+ exit;
+}
+
+// ── DUPLICATE ─────────────────────────────────────────────────────────────────
+if ($action === 'duplicate') {
+ $id = (int)($input['id'] ?? 0);
+ if (!$id) { echo json_encode(['error' => 'id required']); exit; }
+
+ $post = $db->prepare("SELECT * FROM social_posts WHERE id=?")->execute([$id]) ? null : null;
+ $stmt = $db->prepare("SELECT * FROM social_posts WHERE id=?");
+ $stmt->execute([$id]);
+ $post = $stmt->fetch();
+ if (!$post) { echo json_encode(['error' => 'Post not found']); exit; }
+
+ $tgt = $db->prepare("SELECT * FROM social_targets WHERE post_id=?");
+ $tgt->execute([$id]);
+ $targets = $tgt->fetchAll();
+
+ echo json_encode([
+ 'ok' => true,
+ 'post' => ['content' => $post['content'], 'image_path' => $post['image_path'], 'image_url' => $post['image_path'] ? '/api/social_upload?action=serve&path=' . rawurlencode(basename($post['image_path'])) : null],
+ 'targets' => $targets,
+ ]);
+ exit;
+}
+
+// ── DELETE ────────────────────────────────────────────────────────────────────
+if ($action === 'delete') {
+ $id = (int)($input['id'] ?? 0);
+ if (!$id) { echo json_encode(['error' => 'id required']); exit; }
+ $db->prepare("DELETE FROM social_posts WHERE id=?")->execute([$id]);
+ Audit::log($db, 'social_post_delete', null, "post_id=$id");
+ echo json_encode(['ok' => true]);
+ exit;
+}
+
+// ── RETRY ─────────────────────────────────────────────────────────────────────
+if ($action === 'retry') {
+ $id = (int)($input['id'] ?? 0);
+ if (!$id) { echo json_encode(['error' => 'id required']); exit; }
+ $db->prepare("UPDATE social_targets SET status='pending', error=NULL WHERE post_id=? AND status='failed'")->execute([$id]);
+ $db->prepare("UPDATE social_posts SET status='pending' WHERE id=?")->execute([$id]);
+ echo json_encode(['ok' => true]);
+ exit;
+}
+
+http_response_code(400);
+echo json_encode(['error' => 'Unknown action']);
diff --git a/web/api/social_upload.php b/web/api/social_upload.php
new file mode 100644
index 0000000..b9c05fc
--- /dev/null
+++ b/web/api/social_upload.php
@@ -0,0 +1,73 @@
+ 'POST required']);
+ exit;
+}
+
+header('Content-Type: application/json');
+
+$file = $_FILES['image'] ?? null;
+if (!$file || $file['error'] !== UPLOAD_ERR_OK) {
+ echo json_encode(['error' => 'Upload failed — error code ' . ($file['error'] ?? 'none')]);
+ exit;
+}
+
+$allowed_types = ['image/jpeg', 'image/png', 'image/gif', 'image/webp'];
+$mime = mime_content_type($file['tmp_name']);
+if (!in_array($mime, $allowed_types, true)) {
+ echo json_encode(['error' => 'Only JPEG, PNG, GIF, and WebP images are allowed']);
+ exit;
+}
+
+if ($file['size'] > 10 * 1024 * 1024) {
+ echo json_encode(['error' => 'Image must be under 10 MB']);
+ exit;
+}
+
+$ext = match ($mime) {
+ 'image/jpeg' => 'jpg',
+ 'image/png' => 'png',
+ 'image/gif' => 'gif',
+ 'image/webp' => 'webp',
+ default => 'jpg',
+};
+
+$filename = time() . '_' . bin2hex(random_bytes(6)) . '.' . $ext;
+$dest = UPLOAD_DIR . '/' . $filename;
+
+if (!move_uploaded_file($file['tmp_name'], $dest)) {
+ echo json_encode(['error' => 'Failed to save image']);
+ exit;
+}
+
+echo json_encode([
+ 'ok' => true,
+ 'path' => $filename,
+ 'url' => '/api/social_upload?action=serve&path=' . rawurlencode($filename),
+]);
diff --git a/web/assets/js/app.js b/web/assets/js/app.js
index 54545d4..64809a7 100644
--- a/web/assets/js/app.js
+++ b/web/assets/js/app.js
@@ -3819,3 +3819,352 @@ window.addEventListener('DOMContentLoaded', () => {
loadLogs();
})();
+
+// ── Social Scheduler ─────────────────────────────────────────────────────────
+(function () {
+ const page = document.getElementById('socialPage');
+ if (!page) return;
+
+ let _targets = [];
+ let _filter = 'pending';
+ let _hasImage = false;
+
+ const esc = s => String(s).replace(/&/g,'&').replace(//g,'>').replace(/"/g,'"');
+
+ // ── Targets ──────────────────────────────────────────────────────────────────
+ async function loadTargets() {
+ const r = await fetch('/api/social?action=targets');
+ const d = await r.json();
+ _targets = d.groups || [];
+ renderTargets(null);
+ }
+
+ function renderTargets(prefill) {
+ const el = document.getElementById('socialTargets');
+ if (!_targets.length) {
+ el.innerHTML = '
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Image (optional)
+
+
+
+
+
+
+
+
+ ![]()
+
+ Toggle per-platform below
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Posts
+
+
+
+
+
+ No eligible projects configured. Go to Settings to enable projects.
';
+ return;
+ }
+ const platformIcon = { discord: 'bi-discord', mastodon: 'bi-mastodon', linkedin: 'bi-linkedin' };
+ const platformLabel = { discord: 'Discord', mastodon: 'Mastodon', linkedin: 'LinkedIn' };
+
+ el.innerHTML = _targets.map(group => {
+ const platforms = ['discord', 'mastodon', 'linkedin'].filter(p => group.targets[p]?.length);
+ if (!platforms.length) return '';
+ return `
+
`;
+ }).join('');
+ }
+
+ function toggleImageCols(show) {
+ _hasImage = show;
+ page.querySelectorAll('.social-img-cb, .social-img-cb + label').forEach(el => {
+ el.classList.toggle('d-none', !show);
+ });
+ }
+
+ function collectTargets() {
+ const targets = [];
+ page.querySelectorAll('.social-target-cb:checked').forEach(cb => {
+ const imgCb = page.querySelector(`.social-img-cb[data-for="${cb.id}"]`);
+ targets.push({
+ project_id: +cb.dataset.pid,
+ platform: cb.dataset.platform,
+ target_key: cb.dataset.key,
+ include_image: imgCb?.checked ? 1 : 0,
+ });
+ });
+ return targets;
+ }
+
+ // ── Image upload ─────────────────────────────────────────────────────────────
+ document.getElementById('socialUploadBtn').addEventListener('click', () => {
+ document.getElementById('socialImageInput').click();
+ });
+
+ document.getElementById('socialImageInput').addEventListener('change', async function () {
+ const file = this.files[0];
+ if (!file) return;
+ const fd = new FormData();
+ fd.append('image', file);
+ const r = await fetch('/api/social_upload', { method: 'POST', body: fd });
+ const d = await r.json();
+ if (d.error) { showSocialError(d.error); return; }
+ document.getElementById('socialImagePath').value = d.path;
+ document.getElementById('socialImageThumb').src = d.url;
+ document.getElementById('socialImagePreview').classList.remove('d-none');
+ document.getElementById('socialRemoveImageBtn').classList.remove('d-none');
+ toggleImageCols(true);
+ this.value = '';
+ });
+
+ document.getElementById('socialRemoveImageBtn').addEventListener('click', () => {
+ document.getElementById('socialImagePath').value = '';
+ document.getElementById('socialImageThumb').src = '';
+ document.getElementById('socialImagePreview').classList.add('d-none');
+ document.getElementById('socialRemoveImageBtn').classList.add('d-none');
+ toggleImageCols(false);
+ });
+
+ // ── Form submit ───────────────────────────────────────────────────────────────
+ document.getElementById('socialSubmitBtn').addEventListener('click', async () => {
+ const editId = document.getElementById('socialEditId').value;
+ const content = document.getElementById('socialContent').value.trim();
+ const scheduledAt = document.getElementById('socialScheduledAt').value;
+ const imagePath = document.getElementById('socialImagePath').value;
+ const targets = collectTargets();
+
+ hideSocialError();
+ if (!content) { showSocialError('Content is required'); return; }
+ if (!scheduledAt) { showSocialError('Scheduled time is required'); return; }
+ if (!targets.length) { showSocialError('Select at least one platform target'); return; }
+
+ const body = { action: editId ? 'update' : 'create', content, scheduled_at: scheduledAt, image_path: imagePath, targets };
+ if (editId) body.id = +editId;
+
+ const r = await fetch('/api/social', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body) });
+ const d = await r.json();
+ if (d.error) { showSocialError(d.error); return; }
+ resetForm();
+ loadPosts();
+ });
+
+ // ── Edit ─────────────────────────────────────────────────────────────────────
+ function startEdit(post) {
+ document.getElementById('socialEditId').value = post.id;
+ document.getElementById('socialContent').value = post.content;
+ document.getElementById('socialScheduledAt').value = post.scheduled_at.replace(' ', 'T').substring(0, 16);
+ document.getElementById('socialFormTitle').textContent = 'Edit post';
+ document.getElementById('socialCancelEditBtn').classList.remove('d-none');
+ document.getElementById('socialSubmitBtn').innerHTML = 'Update';
+
+ if (post.image_url) {
+ document.getElementById('socialImagePath').value = post.image_path || '';
+ document.getElementById('socialImageThumb').src = post.image_url;
+ document.getElementById('socialImagePreview').classList.remove('d-none');
+ document.getElementById('socialRemoveImageBtn').classList.remove('d-none');
+ toggleImageCols(true);
+ } else {
+ toggleImageCols(false);
+ }
+
+ renderTargets(post.targets || []);
+ document.getElementById('socialFormCard').scrollIntoView({ behavior: 'smooth', block: 'start' });
+ hideSocialError();
+ }
+
+ document.getElementById('socialCancelEditBtn').addEventListener('click', resetForm);
+
+ // ── Duplicate ─────────────────────────────────────────────────────────────────
+ async function duplicatePost(id) {
+ const r = await fetch('/api/social', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ action: 'duplicate', id }) });
+ const d = await r.json();
+ if (d.error) { alert(d.error); return; }
+
+ document.getElementById('socialEditId').value = '';
+ document.getElementById('socialContent').value = d.post.content;
+ document.getElementById('socialScheduledAt').value = '';
+ document.getElementById('socialFormTitle').textContent = 'Schedule a post';
+ document.getElementById('socialCancelEditBtn').classList.add('d-none');
+ document.getElementById('socialSubmitBtn').innerHTML = 'Schedule';
+
+ if (d.post.image_url) {
+ document.getElementById('socialImagePath').value = d.post.image_path || '';
+ document.getElementById('socialImageThumb').src = d.post.image_url;
+ document.getElementById('socialImagePreview').classList.remove('d-none');
+ document.getElementById('socialRemoveImageBtn').classList.remove('d-none');
+ toggleImageCols(true);
+ } else {
+ document.getElementById('socialImagePath').value = '';
+ document.getElementById('socialImagePreview').classList.add('d-none');
+ document.getElementById('socialRemoveImageBtn').classList.add('d-none');
+ toggleImageCols(false);
+ }
+
+ renderTargets(d.targets || []);
+ document.getElementById('socialFormCard').scrollIntoView({ behavior: 'smooth', block: 'start' });
+ hideSocialError();
+ }
+
+ function resetForm() {
+ document.getElementById('socialEditId').value = '';
+ document.getElementById('socialContent').value = '';
+ document.getElementById('socialScheduledAt').value = '';
+ document.getElementById('socialImagePath').value = '';
+ document.getElementById('socialImageThumb').src = '';
+ document.getElementById('socialImagePreview').classList.add('d-none');
+ document.getElementById('socialRemoveImageBtn').classList.add('d-none');
+ document.getElementById('socialFormTitle').textContent = 'Schedule a post';
+ document.getElementById('socialCancelEditBtn').classList.add('d-none');
+ document.getElementById('socialSubmitBtn').innerHTML = 'Schedule';
+ toggleImageCols(false);
+ renderTargets(null);
+ hideSocialError();
+ }
+
+ // ── Post list ─────────────────────────────────────────────────────────────────
+ async function loadPosts() {
+ const r = await fetch('/api/social?status=' + _filter);
+ const d = await r.json();
+ const el = document.getElementById('socialPostsList');
+ if (d.error) { el.innerHTML = `${esc(group.project_name)}
+ ${platforms.map(platform => `
+
+
`).join('')}
+ ${platformLabel[platform]}
+ ${group.targets[platform].map(t => {
+ const cbId = `st_${group.project_id}_${platform}_${t.key}`;
+ const imgId = `si_${group.project_id}_${platform}_${t.key}`;
+ const checked = prefill?.some(x => x.project_id == group.project_id && x.platform === platform && x.target_key === t.key) ? 'checked' : '';
+ const imgChecked = prefill?.some(x => x.project_id == group.project_id && x.platform === platform && x.target_key === t.key && x.include_image) ? 'checked' : '';
+ return `
+
+
+
+
+
`;
+ }).join('')}
+ ${esc(d.error)}
`; return; }
+ if (!d.posts.length) { el.innerHTML = 'No posts yet.
'; return; }
+
+ const statusBadge = s => {
+ const cls = { pending: 'bg-warning text-dark', sent: 'bg-success', failed: 'bg-danger', done: 'bg-success', partial: 'bg-warning text-dark', processing: 'bg-info text-dark' };
+ return `${esc(s)}`;
+ };
+ const platformIcon = { discord: 'bi-discord', mastodon: 'bi-mastodon', linkedin: 'bi-linkedin' };
+ const relTime = ts => {
+ const diff = (new Date(ts.replace(' ', 'T') + 'Z') - Date.now()) / 1000;
+ if (Math.abs(diff) < 60) return 'just now';
+ if (Math.abs(diff) < 3600) return Math.round(Math.abs(diff)/60) + (diff>0?' min':' min ago');
+ if (Math.abs(diff) < 86400) return Math.round(Math.abs(diff)/3600) + (diff>0?' h':' h ago');
+ return Math.round(Math.abs(diff)/86400) + (diff>0?' d':' d ago');
+ };
+
+ el.innerHTML = d.posts.map(post => {
+ const preview = post.content.length > 160 ? post.content.substring(0, 160) + '…' : post.content;
+ const targBadges = (post.targets || []).map(t =>
+ `
+ ${esc(t.target_key)}
+ ${statusBadge(t.status)}
+ ${t.error ? `` : ''}
+ `).join(' ');
+ const imgHtml = post.image_url
+ ? `No Discord Bot projects found. Add one via project scan first.
';
+ return;
+ }
+ list.innerHTML = d.projects.map(p => `
+
+
+
+
`).join('');
+ }
+
+ document.getElementById('saveSocialProjectsBtn').addEventListener('click', async () => {
+ const ids = [...list.querySelectorAll('.social-proj-cb:checked')].map(cb => +cb.value);
+ const r = await fetch('/api/social', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ action: 'save_settings', project_ids: ids }) });
+ const d = await r.json();
+ if (d.ok) {
+ const saved = document.getElementById('socialProjectsSaved');
+ saved.classList.remove('d-none');
+ setTimeout(() => saved.classList.add('d-none'), 2000);
+ }
+ });
+
+ loadSocialSettings();
+})();
diff --git a/web/index.php b/web/index.php
index 05235e0..5356fc3 100644
--- a/web/index.php
+++ b/web/index.php
@@ -35,6 +35,9 @@ if ($uri === '/' || $uri === '/dashboard') {
} elseif ($uri === '/audit') {
include ROOT . '/views/audit.php';
+} elseif ($uri === '/social') {
+ include ROOT . '/views/social.php';
+
} elseif (preg_match('#^/project/(\d+)$#', $uri, $m)) {
$project_id = (int)$m[1];
include ROOT . '/views/project/view.php';