metatrondelivery/app/routes/checkout.scheduling.hold.tsx

import type { ActionFunctionArgs } from "@remix-run/node";
import type { Method } from "@prisma/client";
import { authenticate } from "../shopify.server";
import { resolveHoldRequest } from "../services/hold-request.server";

// Checkout UI Extension endpoint — see checkout.scheduling.availability.tsx
// for the session-token/CORS rationale. Calls the exact same
// resolveHoldRequest() as the storefront and POS routes, so a Plus
// checkout booking competes for the same Redis-backed capacity as every
// other surface (IMPLEMENTATION_PLAN.md Phase 7 accept criteria).

const VALID_METHODS = new Set<Method>(["SHIPPING", "LOCAL_DELIVERY", "PICKUP"]);

export const action = async ({ request }: ActionFunctionArgs) => {
  const { sessionToken, cors } = await authenticate.public.checkout(request);
  const shopDomain = sessionToken.dest.replace(/^https?:\/\//, "");

  const body = await request.json();
  const { intent, locationId, method, date, startMin, cartToken } = body as {
    intent?: "create" | "release";
    locationId?: string;
    method?: string;
    date?: string;
    startMin?: number;
    cartToken?: string;
  };

  if (!locationId || !method || !VALID_METHODS.has(method as Method) || !date || typeof startMin !== "number" || !cartToken) {
    return cors(Response.json({ error: "Missing or invalid parameters" }, { status: 400 }));
  }

  const result = await resolveHoldRequest(shopDomain, {
    intent: intent === "release" ? "release" : "create",
    locationId,
    method: method as Method,
    date,
    startMin,
    cartToken,
  });

  return cors(Response.json(result.body, { status: result.status }));
};