Refactor transit_api into a repo/routes module split

Split the 5,441-line index.js into an 86-line bootstrap, thin domain
route modules, shared lib/ helpers, and a repo/ layer that isolates the
DEV_MOCK branches (repo/*.mock.js). Repo methods return {statusCode, body};
routes are one-line wrappers. Pin search_path to "transit.bus" and
document the /bus/ prefix with legacy root aliases (Deprecation header).

Parity verified: 57/57 byte-identical on the stub differential harness
plus 24/24 live read-only responses vs the original against real
PostgreSQL. The only intentional behavior change: mock reorder/delete
bus-line endpoints no longer require a live DB (previously 500 in
DEV_MOCK=1 without PG). DEV_MOCK gate and node --check clean.

transit_api/routes/adminSchedules.js

@@ -0,0 +1,76 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware, adminMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.get(
+  "/admin/schedules",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.listAdminSchedules(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/schedules",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.createAdminSchedule(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.put(
+  "/admin/schedules/:scheduleId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.updateAdminSchedule(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/schedules/bulk",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.bulkCreateAdminSchedules(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.delete(
+  "/admin/schedules/:scheduleId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.deleteAdminSchedule(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/check-driver-conflicts",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.checkDriverConflicts(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/assign-schedules",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.assignSchedules(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+module.exports = router;

transit_api/routes/daily.js

@@ -0,0 +1,16 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.get("/schedule/daily", authMiddleware, async (req, res) => {
+  const out = await repo.listDailySchedules(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.get("/driver/schedules/daily", authMiddleware, async (req, res) => {
+  const out = await repo.listDriverDailySchedules(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+module.exports = router;

transit_api/routes/drivers.js

@@ -0,0 +1,21 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware, adminMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.get("/admin/drivers", authMiddleware, adminMiddleware, async (req, res) => {
+  const out = await repo.listDrivers(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.get(
+  "/admin/shift-drivers",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.listShiftDrivers(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+module.exports = router;

transit_api/routes/fleet.js

@@ -0,0 +1,46 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware, adminMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.get(
+  "/admin/fleet/buses",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.listFleetBuses(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/fleet/buses",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.createFleetBus(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.patch(
+  "/admin/fleet/buses/:busId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.updateFleetBus(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.delete(
+  "/admin/fleet/buses/:busId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.deleteFleetBus(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+module.exports = router;

transit_api/routes/gps.js

@@ -0,0 +1,16 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.post("/gps/track", authMiddleware, async (req, res) => {
+  const out = await repo.saveGpsTrack(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.get("/gps/route/:routeId", authMiddleware, async (req, res) => {
+  const out = await repo.listRouteGpsPoints(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+module.exports = router;

transit_api/routes/health.js

@@ -0,0 +1,18 @@
+const express = require("express");
+const router = express.Router();
+const db = require("../db");
+const { log } = require("../lib/log");
+const { reportError } = require("../lib/report-error");
+
+router.get("/", async (_req, res) => {
+  try {
+    await db.query("SELECT 1");
+    res.json({ status: "ok", service: "transit_api", database: "ok" });
+  } catch (err) {
+    log("error", "GET /health error", { error: err.message, stack: err.stack });
+    reportError({ partofservice: "GET /health", error: err.stack || err.message });
+    res.status(503).json({ status: "unavailable", service: "transit_api" });
+  }
+});
+
+module.exports = router;

transit_api/routes/lines.js

@@ -0,0 +1,91 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware, adminMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.get("/bus-lines/:busLineId/stops", authMiddleware, async (req, res) => {
+  const out = await repo.listLineStops(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.get(
+  "/admin/bus-lines",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.listLines(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/bus-lines",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.createLine(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.patch(
+  "/admin/bus-lines/:busLineId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.updateLine(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.get(
+  "/admin/bus-lines/:busLineId/stops",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.listLineStopsDetailed(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/bus-lines/:busLineId/stops",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.addLineStop(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/bus-lines/:busLineId/stops/reorder",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.reorderLineStops(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.delete(
+  "/admin/bus-lines/:busLineId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.deleteLine(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.delete(
+  "/admin/bus-lines/:busLineId/stops/:routeStopId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.deleteLineStop(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+module.exports = router;

transit_api/routes/navigation.js

@@ -0,0 +1,11 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.post("/navigation/route", authMiddleware, async (req, res) => {
+  const out = await repo.saveNavigationRoute(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+module.exports = router;

transit_api/routes/routes.js

@@ -0,0 +1,16 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.get("/routes/:routeId", authMiddleware, async (req, res) => {
+  const out = await repo.getRoute(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.patch("/routes/:routeId/status", authMiddleware, async (req, res) => {
+  const out = await repo.updateRouteStatus(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+module.exports = router;

transit_api/routes/schedules.js

@@ -0,0 +1,54 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.patch(
+  "/driver/schedules/:scheduleId/status",
+  authMiddleware,
+  async (req, res) => {
+    const out = await repo.updateDriverScheduleStatus(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.get("/schedules", async (req, res) => {
+  const out = await repo.listSchedules(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.get("/schedules/overview", async (req, res) => {
+  const out = await repo.getSchedulesOverview(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.get("/schedules/recurring", async (req, res) => {
+  const out = await repo.listRecurringSchedules(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.get("/schedules/:scheduleId", async (req, res) => {
+  const out = await repo.getScheduleById(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.get("/schedules/:scheduleId/stops", async (req, res) => {
+  const out = await repo.getScheduleStops(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.post(
+  "/driver/schedules/:scheduleId/stops/:stopOrder/passed",
+  authMiddleware,
+  async (req, res) => {
+    const out = await repo.markStopPassed(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.get("/public/schedules/:scheduleId/progress", async (req, res) => {
+  const out = await repo.getPublicScheduleProgress(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+module.exports = router;

transit_api/routes/stops.js

@@ -0,0 +1,36 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware, adminMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.get("/admin/stops", authMiddleware, adminMiddleware, async (req, res) => {
+  const out = await repo.listStops(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.post("/admin/stops", authMiddleware, adminMiddleware, async (req, res) => {
+  const out = await repo.createStop(req);
+  return res.status(out.statusCode).json(out.body);
+});
+
+router.delete(
+  "/admin/stops/:stopId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.deleteStop(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.patch(
+  "/admin/stops/:stopId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.updateStop(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+module.exports = router;

transit_api/routes/weekly.js

@@ -0,0 +1,75 @@
+const express = require("express");
+const router = express.Router();
+const { authMiddleware, adminMiddleware } = require("../middleware");
+const repo = require("../repo");
+
+router.patch(
+  "/driver/weekly-schedules/:scheduleId/status",
+  authMiddleware,
+  async (req, res) => {
+    const out = await repo.updateWeeklyScheduleStatus(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.get(
+  "/admin/weekly-schedules",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.listWeeklySchedules(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/weekly-schedules",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.createWeeklySchedule(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.post(
+  "/admin/weekly-schedules/bulk",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.bulkCreateWeeklySchedules(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.put(
+  "/admin/weekly-schedules/:scheduleId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.updateWeeklySchedule(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.put(
+  "/admin/weekly-schedules/:scheduleId/shift",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.updateWeeklyScheduleShift(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+router.delete(
+  "/admin/weekly-schedules/:scheduleId",
+  authMiddleware,
+  adminMiddleware,
+  async (req, res) => {
+    const out = await repo.deleteWeeklySchedule(req);
+    return res.status(out.statusCode).json(out.body);
+  },
+);
+
+module.exports = router;