Harden scheduled Meta publish and auto-link Drive for pipeline creatives.

Schedule save auto-approves and publishes when due; cron recovers stale jobs every 5m. Drive sync auto-matches client folders under Clientes when not linked.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/app/api/cron/pipeline-publish/route.ts

@@ -1,185 +1,37 @@
 /**
- * Cron: pick creative_pipeline rows that are aprobado + scheduled_at due,
- * publish to Meta IG+FB via Content Publishing API.
+ * Cron: publish due creative_pipeline rows to Meta IG+FB.
  *
  * Auth: Authorization: Bearer $CRON_SECRET
  *   curl -sS -H "Authorization: Bearer $CRON_SECRET" \
  *     "https://app.4ventures.es/api/cron/pipeline-publish"
  */
 import { NextRequest, NextResponse } from 'next/server';
-import { serviceHeaders, supabaseUrl } from '@/lib/agency';
-import {
-  mergePermalinkNotes,
-  publishPipelineItem,
-  type PipelinePublishRow,
-} from '@/lib/meta-publish';
+import { assertCronAuth } from '@/lib/cron-auth';
+import { processDuePipelinePublishes } from '@/lib/pipeline-publish-worker';
 
 export const dynamic = 'force-dynamic';
 export const runtime = 'nodejs';
 export const maxDuration = 120;
 
-const SELECT =
-  'id,tenant_id,title,format,status,scheduled_at,channels,publish_status,publish_attempts,cover_path,cover_mime,slide_paths,caption,notes,meta_ig_media_id,meta_fb_post_id';
-
-function authorize(req: NextRequest): boolean {
-  const secret = process.env.CRON_SECRET?.trim();
-  if (!secret) return false;
-  const auth = req.headers.get('authorization') || '';
-  if (auth === `Bearer ${secret}`) return true;
-  const q = req.nextUrl.searchParams.get('secret');
-  return q === secret;
-}
-
-async function patchItem(
-  base: string,
-  headers: Record<string, string>,
-  id: string,
-  body: Record<string, unknown>
-) {
-  return fetch(`${base}/rest/v1/creative_pipeline?id=eq.${id}`, {
-    method: 'PATCH',
-    headers: {
-      ...headers,
-      'Content-Type': 'application/json',
-      Prefer: 'return=minimal',
-    },
-    body: JSON.stringify({ ...body, updated_at: new Date().toISOString() }),
-  });
-}
-
 export async function GET(req: NextRequest) {
-  if (!authorize(req)) {
-    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
-  }
+  const denied = assertCronAuth(req);
+  if (denied) return denied;
 
-  const headers = serviceHeaders();
-  const base = supabaseUrl();
-  if (!headers || !base) {
-    return NextResponse.json({ error: 'Service role required' }, { status: 503 });
-  }
-
-  const now = new Date().toISOString();
-  const limit = Math.min(
-    50,
-    Math.max(1, Number(req.nextUrl.searchParams.get('limit') || 10))
-  );
+  const limit = Number(req.nextUrl.searchParams.get('limit') || 10);
   const dryRun = req.nextUrl.searchParams.get('dry') === '1';
+  const tenantId =
+    req.nextUrl.searchParams.get('tenantId')?.trim() || undefined;
 
-  const url =
-    `${base}/rest/v1/creative_pipeline?status=eq.aprobado` +
-    `&scheduled_at=lte.${encodeURIComponent(now)}` +
-    `&publish_status=in.(idle,queued,failed)` +
-    `&select=${SELECT}&order=scheduled_at.asc&limit=${limit}`;
-
-  const list = await fetch(url, { headers, cache: 'no-store' });
-  if (!list.ok) {
+  const out = await processDuePipelinePublishes({ limit, dryRun, tenantId });
+  if (!out.ok && out.error) {
     return NextResponse.json(
-      { error: (await list.text()).slice(0, 400) },
+      { error: out.error },
       { status: 500 }
     );
   }
-  const due = (await list.json()) as (PipelinePublishRow & {
-    title: string;
-    publish_status: string;
-    notes?: string | null;
-  })[];
-
-  if (dryRun) {
-    return NextResponse.json({
-      ok: true,
-      dry: true,
-      due: due.length,
-      items: due.map((d) => ({
-        id: d.id,
-        title: d.title,
-        scheduled_at: (d as { scheduled_at?: string }).scheduled_at,
-        channels: d.channels,
-        attempts: d.publish_attempts,
-      })),
-    });
-  }
-
-  const results: {
-    id: string;
-    title: string;
-    ok: boolean;
-    detail: string;
-  }[] = [];
-
-  for (const item of due) {
-    if (!item.cover_path) {
-      await patchItem(base, headers, item.id, {
-        publish_status: 'failed',
-        publish_error: 'Sin portada — no se puede publicar',
-        publish_attempts: (item.publish_attempts || 0) + 1,
-      });
-      results.push({
-        id: item.id,
-        title: item.title,
-        ok: false,
-        detail: 'missing cover',
-      });
-      continue;
-    }
-
-    const attempts = (item.publish_attempts || 0) + 1;
-    const lock = await patchItem(base, headers, item.id, {
-      publish_status: 'publishing',
-      publish_attempts: attempts,
-      publish_error: null,
-    });
-    if (!lock.ok) {
-      results.push({
-        id: item.id,
-        title: item.title,
-        ok: false,
-        detail: 'lock failed',
-      });
-      continue;
-    }
-
-    const result = await publishPipelineItem(item);
-    if (!result.ok) {
-      await patchItem(base, headers, item.id, {
-        publish_status: 'failed',
-        publish_error: result.error || 'Error Meta',
-        meta_ig_media_id: result.igMediaId || item.meta_ig_media_id || null,
-        meta_fb_post_id: result.fbPostId || item.meta_fb_post_id || null,
-      });
-      results.push({
-        id: item.id,
-        title: item.title,
-        ok: false,
-        detail: result.error || 'publish failed',
-      });
-      continue;
-    }
-
-    const notes = mergePermalinkNotes(
-      item.notes,
-      result.igPermalink,
-      result.fbPermalink
-    );
-    await patchItem(base, headers, item.id, {
-      publish_status: 'published',
-      publish_error: null,
-      published_at: new Date().toISOString(),
-      status: 'publicado',
-      meta_ig_media_id: result.igMediaId || null,
-      meta_fb_post_id: result.fbPostId || null,
-      notes,
-    });
-    results.push({
-      id: item.id,
-      title: item.title,
-      ok: true,
-      detail: `published ig=${result.igMediaId || '-'} fb=${result.fbPostId || '-'}`,
-    });
-  }
-
-  return NextResponse.json({
-    ok: true,
-    processed: results.length,
-    results,
-  });
+  return NextResponse.json(out);
+}
+
+export async function POST(req: NextRequest) {
+  return GET(req);
 }