feat: add temporary API to replace enabled/disabled lists (#1789)

## Changes
- Add `PUT
/configurations/latest/handlers/:handlerType/replace-enabled-disabled`
endpoint
- Add `replaceHandlerEnabledDisabled` controller method
- Update tests to include new method and route
- Update package-lock.json with new dependency

## API Details
**Endpoint:** `PUT
/configurations/latest/handlers/:handlerType/replace-enabled-disabled`

**Request Body:**n
{
  "enabled": {
    "sites": ["site-id-1", "site-id-2"],
    "orgs": ["org-id-1"]
  },
  "disabled": {
    "sites": ["site-id-3"],
    "orgs": ["org-id-2"]
  }
}

Please ensure your pull request adheres to the following guidelines:
- [X] make sure to link the related issues in this description. Or if
there's no issue created, make sure you
  describe here the problem you're solving.
- [X] when merging / squashing, make sure the fixed issue references are
visible in the commits, for easy compilation of release notes

Spacecat-shared PR: adobe/spacecat-shared#1328

If the PR is changing the API specification:
- [ ] make sure you add a "Not implemented yet" note the endpoint
description, if the implementation is not ready
yet. Ideally, return a 501 status code with a message explaining the
feature is not implemented yet.
- [ ] make sure you add at least one example of the request and
response.

If the PR is changing the API implementation or an entity exposed
through the API:
- [ ] make sure you update the API specification and the examples to
reflect the changes.

If the PR is introducing a new audit type:
- [ ] make sure you update the API specification with the type, schema
of the audit result and an example

## Related Issues
https://jira.corp.adobe.com/browse/SITES-40312

Thanks for contributing!

---------

Co-authored-by: Tathagat Sharma <ftathagat+adobe@adobe.com>

Author: tathagat2241

package-lock.json

@@ -88,7 +88,7 @@
     "@adobe/spacecat-shared-brand-client": "1.4.0",
     "@adobe/spacecat-shared-cloudflare-client": "1.2.1",
     "@adobe/spacecat-shared-content-client": "1.8.24",
-    "@adobe/spacecat-shared-data-access": "4.7.0",
+    "@adobe/spacecat-shared-data-access": "4.8.0",
     "@adobe/spacecat-shared-drs-client": "1.13.0",
     "@adobe/spacecat-shared-gpt-client": "1.6.23",
     "@adobe/spacecat-shared-http-utils": "1.34.0",

package.json

@@ -317,6 +317,90 @@ function ConfigurationController(ctx) {
     }
   };
 
+  /**
+   * Replaces enabled/disabled lists for a handler.
+   * This is a temporary API that replaces (not merges) the provided arrays.
+   *
+   * TEMPORARY API: This endpoint was created to clean up enabled and disabled lists
+   * by removing unnecessary site IDs. Unlike the existing updateHandler endpoint
+   * which merges arrays, this endpoint completely replaces the specified arrays.
+   * This API will be removed once the cleanup task is completed.
+   *
+   * @param {UniversalContext} context - Context of the request.
+   * @return {Promise<Response>} Updated configuration response.
+   */
+  const replaceHandlerEnabledDisabled = async (context) => {
+    if (!accessControlUtil.hasAdminAccess()) {
+      return forbidden('Only admins can update handler configuration');
+    }
+
+    const { handlerType } = context.params;
+    const { data } = context;
+
+    if (!hasText(handlerType)) {
+      return badRequest('Handler type is required');
+    }
+
+    if (!isNonEmptyObject(data)) {
+      return badRequest('Request body is required and cannot be empty');
+    }
+
+    // Validate that at least one of enabled or disabled is provided
+    const hasEnabled = data.enabled !== undefined;
+    const hasDisabled = data.disabled !== undefined;
+
+    if (!hasEnabled && !hasDisabled) {
+      return badRequest('At least one of enabled or disabled must be provided');
+    }
+
+    // Validate that at least one array is provided within enabled/disabled
+    // (empty arrays are allowed)
+    if (hasEnabled) {
+      const hasEnabledSites = data.enabled.sites !== undefined;
+      const hasEnabledOrgs = data.enabled.orgs !== undefined;
+      if (!hasEnabledSites && !hasEnabledOrgs) {
+        return badRequest('At least one of enabled.sites or enabled.orgs must be provided');
+      }
+      // Validate that if provided, they must be arrays
+      if (hasEnabledSites && !Array.isArray(data.enabled.sites)) {
+        return badRequest('enabled.sites must be an array');
+      }
+      if (hasEnabledOrgs && !Array.isArray(data.enabled.orgs)) {
+        return badRequest('enabled.orgs must be an array');
+      }
+    }
+
+    if (hasDisabled) {
+      const hasDisabledSites = data.disabled.sites !== undefined;
+      const hasDisabledOrgs = data.disabled.orgs !== undefined;
+      if (!hasDisabledSites && !hasDisabledOrgs) {
+        return badRequest('At least one of disabled.sites or disabled.orgs must be provided');
+      }
+      // Validate that if provided, they must be arrays
+      if (hasDisabledSites && !Array.isArray(data.disabled.sites)) {
+        return badRequest('disabled.sites must be an array');
+      }
+      if (hasDisabledOrgs && !Array.isArray(data.disabled.orgs)) {
+        return badRequest('disabled.orgs must be an array');
+      }
+    }
+
+    try {
+      const configuration = await Configuration.findLatest();
+      if (!configuration) {
+        return notFound('Configuration not found');
+      }
+
+      configuration.replaceHandlerEnabledDisabled(handlerType, data);
+      setUpdatedBy(configuration, context);
+      await configuration.save();
+
+      return ok(ConfigurationDto.toJSON(configuration));
+    } catch (error) {
+      return badRequest(error.message);
+    }
+  };
+
   /**
    * Updates the entire configuration or specific sections.
    * Allows updating handlers, jobs, and/or queues in a single request.
@@ -430,6 +514,7 @@ function ConfigurationController(ctx) {
     updateQueues,
     updateJob,
     updateHandler,
+    replaceHandlerEnabledDisabled,
     updateConfiguration,
     restoreVersion,
   };