From f4936d640c30544a837c4f49b793e01cdf9e42ca Mon Sep 17 00:00:00 2001
From: Wrongecho <wrongecho@itflow.org>
Date: Tue, 8 Sep 2026 10:04:50 +0000
Subject: [PATCH] API - Add document archive and unarchive

---
 api/v1/documents/archive.php   | 43 ++++++++++++++++++++++++++++++++++
 api/v1/documents/unarchive.php | 43 ++++++++++++++++++++++++++++++++++
 2 files changed, 86 insertions(+)
 create mode 100644 api/v1/documents/archive.php
 create mode 100644 api/v1/documents/unarchive.php

diff --git a/api/v1/documents/archive.php b/api/v1/documents/archive.php
new file mode 100644
index 000000000..053ee9ac6
--- /dev/null
+++ b/api/v1/documents/archive.php
@@ -0,0 +1,43 @@
+<?php
+
+require_once '../validate_api_key.php';
+require_once '../require_post_method.php';
+
+// Parse ID
+$document_id = intval($_POST['document_id'] ?? 0);
+
+// Default
+$update_count = false;
+
+if (!empty($document_id)) {
+
+    // Fetch document info
+    $row = mysqli_fetch_assoc(mysqli_query($mysqli, "
+        SELECT document_name
+        FROM documents
+        WHERE document_id = $document_id AND document_client_id = $client_id AND document_archived_at IS NULL
+        LIMIT 1
+    "));
+
+    if ($row) {
+
+        $document_name = escapeSql($row['document_name']);
+
+        // Archive document
+        $update_sql = mysqli_query($mysqli, "
+            UPDATE documents SET document_archived_at = NOW()
+            WHERE document_id = $document_id AND document_client_id = $client_id
+        ");
+
+        if ($update_sql) {
+            $update_count = mysqli_affected_rows($mysqli);
+
+            // Logging
+            logAudit("Document", "Archive", "$document_name archived via API ($api_key_name)", $client_id, $document_id);
+            logAudit("API", "Success", "Archived document $document_name via API ($api_key_name)", $client_id);
+        }
+    }
+}
+
+// Output
+require_once '../update_output.php';
diff --git a/api/v1/documents/unarchive.php b/api/v1/documents/unarchive.php
new file mode 100644
index 000000000..e8d9645da
--- /dev/null
+++ b/api/v1/documents/unarchive.php
@@ -0,0 +1,43 @@
+<?php
+
+require_once '../validate_api_key.php';
+require_once '../require_post_method.php';
+
+// Parse ID
+$document_id = intval($_POST['document_id'] ?? 0);
+
+// Default
+$update_count = false;
+
+if (!empty($document_id)) {
+
+    // Fetch document info
+    $row = mysqli_fetch_assoc(mysqli_query($mysqli, "
+        SELECT document_name
+        FROM documents
+        WHERE document_id = $document_id AND document_client_id = $client_id AND document_archived_at IS NOT NULL
+        LIMIT 1
+    "));
+
+    if ($row) {
+
+        $document_name = escapeSql($row['document_name']);
+
+        // Unarchive document
+        $update_sql = mysqli_query($mysqli, "
+            UPDATE documents SET document_archived_at = NULL
+            WHERE document_id = $document_id AND document_client_id = $client_id
+        ");
+
+        if ($update_sql) {
+            $update_count = mysqli_affected_rows($mysqli);
+
+            // Logging
+            logAudit("Document", "Unarchive", "$document_name unarchived via API ($api_key_name)", $client_id, $document_id);
+            logAudit("API", "Success", "Unarchived document $document_name via API ($api_key_name)", $client_id);
+        }
+    }
+}
+
+// Output
+require_once '../update_output.php';