feat: add POST archive and unarchive endpoints for sessions

Made-with: Cursor

tests/api/session-archive.test.js

@@ -93,3 +93,81 @@ describe('GET /api/sessions — filter and limit', () => {
     expect(res.body).toHaveLength(8);
   });
 });
+
+describe('POST /api/sessions/:id/archive', () => {
+  beforeEach(() => {
+    cleanDb();
+  });
+
+  test('archives a closed session', async () => {
+    const session = seedSession({ is_active: 0, notes: null });
+
+    const res = await request(app)
+      .post(`/api/sessions/${session.id}/archive`)
+      .set('Authorization', getAuthHeader());
+
+    expect(res.status).toBe(200);
+    expect(res.body.success).toBe(true);
+
+    const check = await request(app).get(`/api/sessions/${session.id}`);
+    expect(check.body.archived).toBe(1);
+  });
+
+  test('returns 400 for active session', async () => {
+    const session = seedSession({ is_active: 1, notes: null });
+
+    const res = await request(app)
+      .post(`/api/sessions/${session.id}/archive`)
+      .set('Authorization', getAuthHeader());
+
+    expect(res.status).toBe(400);
+  });
+
+  test('returns 404 for non-existent session', async () => {
+    const res = await request(app)
+      .post('/api/sessions/9999/archive')
+      .set('Authorization', getAuthHeader());
+
+    expect(res.status).toBe(404);
+  });
+
+  test('returns 401 without auth', async () => {
+    const session = seedSession({ is_active: 0, notes: null });
+
+    const res = await request(app)
+      .post(`/api/sessions/${session.id}/archive`);
+
+    expect(res.status).toBe(401);
+  });
+});
+
+describe('POST /api/sessions/:id/unarchive', () => {
+  beforeEach(() => {
+    cleanDb();
+  });
+
+  test('unarchives an archived session', async () => {
+    const session = seedSession({ is_active: 0, notes: null });
+    require('../helpers/test-utils').db.prepare(
+      'UPDATE sessions SET archived = 1 WHERE id = ?'
+    ).run(session.id);
+
+    const res = await request(app)
+      .post(`/api/sessions/${session.id}/unarchive`)
+      .set('Authorization', getAuthHeader());
+
+    expect(res.status).toBe(200);
+    expect(res.body.success).toBe(true);
+
+    const check = await request(app).get(`/api/sessions/${session.id}`);
+    expect(check.body.archived).toBe(0);
+  });
+
+  test('returns 404 for non-existent session', async () => {
+    const res = await request(app)
+      .post('/api/sessions/9999/unarchive')
+      .set('Authorization', getAuthHeader());
+
+    expect(res.status).toBe(404);
+  });
+});