initial commit

2026-06-25 21:39:21 +00:00
commit 26fa6ea6b9
10 changed files with 1110 additions and 0 deletions
@@ -0,0 +1,45 @@
+<?php
+declare(strict_types=1);
+
+require __DIR__ . '/_bootstrap.php';
+require_login();
+
+$max = (int)$config['MAX_JSON_BYTES'];
+$raw = file_get_contents('php://input');
+
+if ($raw === false) {
+  json_response(['ok' => false, 'error' => 'no_body'], 400);
+}
+
+if (strlen($raw) > $max) {
+  json_response(['ok' => false, 'error' => 'payload_too_large'], 413);
+}
+
+$data = json_decode($raw, true);
+if (!is_array($data)) {
+  json_response(['ok' => false, 'error' => 'invalid_json'], 400);
+}
+
+// Minimal sanity enforcement
+$data['meta'] = $data['meta'] ?? [];
+$data['meta']['schema'] = 1;
+$data['meta']['updatedAt'] = gmdate('c');
+
+// Only allow the keys we expect (keeps junk out)
+$allowed = ['meta','trips','shopping','preTripTodos','preTripChecklist','upgrades','fixes'];
+$clean = [];
+foreach ($allowed as $k) {
+  $clean[$k] = $data[$k] ?? ($k === 'meta' ? $data['meta'] : []);
+}
+
+$json = json_encode($clean, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE | JSON_PRETTY_PRINT);
+if ($json === false) {
+  json_response(['ok' => false, 'error' => 'encode_failed'], 500);
+}
+
+$ok = write_json_file_atomic($config['DATA_FILE'], $json . "\n");
+if (!$ok) {
+  json_response(['ok' => false, 'error' => 'write_failed'], 500);
+}
+
+json_response(['ok' => true]);