feat: fase 5 — botones volver, seguridad APIs, infraestructura

- Botón 'Volver' en todas las sesiones de ejercicios (ExerciseSession)
- Botón 'Cambiar perfil' en las 3 home pages (Isabella/Francesca/Sebastián)
- Páginas inline de Isabella migradas a ExerciseSession (elimina código duplicado)
- APIs con try/catch: curriculum/next, dashboard/summary, fsrs/next, children
- Validación childId en curriculum/next (404 si no existe)
- /api/health endpoint para Docker healthcheck
- .env.example, .dockerignore, README.md creados
- docker-compose.yml con healthcheck en app service
- Test E2E: health endpoint + childId validation
- 62/62 tests pasan, TS exit 0

app/api/children/route.ts

@@ -3,55 +3,65 @@ import { prisma } from "@/lib/db"
 import { auth } from "@/lib/auth"
 
 export async function GET(request: NextRequest) {
-  const session = await auth.api.getSession({ headers: request.headers })
-  if (!session?.user?.id) {
-    return NextResponse.json({ error: "No autorizado" }, { status: 401 })
-  }
+  try {
+    const session = await auth.api.getSession({ headers: request.headers })
+    if (!session?.user?.id) {
+      return NextResponse.json({ error: "No autorizado" }, { status: 401 })
+    }
 
-  const parent = await prisma.parent.findUnique({
-    where: { id: session.user.id },
-    include: {
-      family: {
-        include: { children: true },
+    const parent = await prisma.parent.findUnique({
+      where: { id: session.user.id },
+      include: {
+        family: {
+          include: { children: true },
+        },
       },
-    },
-  })
+    })
 
-  if (!parent || !parent.family) {
-    return NextResponse.json({ error: "Parent or family not found" }, { status: 404 })
+    if (!parent || !parent.family) {
+      return NextResponse.json({ error: "Parent or family not found" }, { status: 404 })
+    }
+
+    return NextResponse.json(parent.family.children)
+  } catch (error) {
+    console.error("[children GET] error:", error)
+    return NextResponse.json({ error: "Internal error" }, { status: 500 })
   }
-
-  return NextResponse.json(parent.family.children)
 }
 
 export async function POST(request: Request) {
-  const session = await auth.api.getSession({ headers: request.headers })
-  if (!session?.user?.id) {
-    return NextResponse.json({ error: "No autorizado" }, { status: 401 })
+  try {
+    const session = await auth.api.getSession({ headers: request.headers })
+    if (!session?.user?.id) {
+      return NextResponse.json({ error: "No autorizado" }, { status: 401 })
+    }
+
+    const { name, birthdate, profileNotes } = await request.json()
+    if (!name) {
+      return NextResponse.json({ error: "name required" }, { status: 400 })
+    }
+
+    const parent = await prisma.parent.findUnique({
+      where: { id: session.user.id },
+      select: { familyId: true },
+    })
+
+    if (!parent || !parent.familyId) {
+      return NextResponse.json({ error: "Parent has no family" }, { status: 400 })
+    }
+
+    const child = await prisma.child.create({
+      data: {
+        name,
+        birthdate: birthdate ? new Date(birthdate) : undefined,
+        profileNotes,
+        familyId: parent.familyId,
+      },
+    })
+
+    return NextResponse.json(child, { status: 201 })
+  } catch (error) {
+    console.error("[children POST] error:", error)
+    return NextResponse.json({ error: "Internal error" }, { status: 500 })
   }
-
-  const { name, birthdate, profileNotes } = await request.json()
-  if (!name) {
-    return NextResponse.json({ error: "name required" }, { status: 400 })
-  }
-
-  const parent = await prisma.parent.findUnique({
-    where: { id: session.user.id },
-    select: { familyId: true },
-  })
-
-  if (!parent || !parent.familyId) {
-    return NextResponse.json({ error: "Parent has no family" }, { status: 400 })
-  }
-
-  const child = await prisma.child.create({
-    data: {
-      name,
-      birthdate: birthdate ? new Date(birthdate) : undefined,
-      profileNotes,
-      familyId: parent.familyId,
-    },
-  })
-
-  return NextResponse.json(child, { status: 201 })
 }

app/api/curriculum/next/route.ts

@@ -3,18 +3,27 @@ import { prisma } from "@/lib/db"
 import { getNextExercise } from "@/lib/curriculum/engine"
 
 export async function GET(request: NextRequest) {
-  const childId = request.nextUrl.searchParams.get("childId")
-  const topic = request.nextUrl.searchParams.get("topic") || "lectura"
-  if (!childId) {
-    return NextResponse.json({ error: "childId required" }, { status: 400 })
+  try {
+    const childId = request.nextUrl.searchParams.get("childId")
+    const topic = request.nextUrl.searchParams.get("topic") || "lectura"
+    if (!childId) {
+      return NextResponse.json({ error: "childId required" }, { status: 400 })
+    }
+
+    const child = await prisma.child.findUnique({
+      where: { id: childId },
+      select: { profile: true },
+    })
+
+    if (!child) {
+      return NextResponse.json({ error: "child not found" }, { status: 404 })
+    }
+
+    const profile = (request.nextUrl.searchParams.get("profile") || child.profile || "ISABELLA").toUpperCase()
+    const exercise = await getNextExercise(childId, topic, profile)
+    return NextResponse.json(exercise || { id: null, done: true })
+  } catch (error) {
+    console.error("[curriculum/next] error:", error)
+    return NextResponse.json({ error: "Internal error" }, { status: 500 })
   }
-
-  const child = await prisma.child.findUnique({
-    where: { id: childId },
-    select: { profile: true },
-  })
-
-  const profile = (request.nextUrl.searchParams.get("profile") || child?.profile || "ISABELLA").toUpperCase()
-  const exercise = await getNextExercise(childId, topic, profile)
-  return NextResponse.json(exercise || { id: null, done: true })
 }

app/api/dashboard/summary/route.ts

@@ -2,10 +2,11 @@ import { NextRequest, NextResponse } from "next/server"
 import { prisma } from "@/lib/db"
 
 export async function GET(request: NextRequest) {
-  const childId = request.nextUrl.searchParams.get("childId")
-  if (!childId) {
-    return NextResponse.json({ error: "childId required" }, { status: 400 })
-  }
+  try {
+    const childId = request.nextUrl.searchParams.get("childId")
+    if (!childId) {
+      return NextResponse.json({ error: "childId required" }, { status: 400 })
+    }
 
   const today = new Date()
   today.setHours(0, 0, 0, 0)
@@ -118,6 +119,10 @@ export async function GET(request: NextRequest) {
         }
       : null,
   })
+  } catch (error) {
+    console.error("[dashboard/summary] error:", error)
+    return NextResponse.json({ error: "Internal error" }, { status: 500 })
+  }
 }
 
 async function calculateStreak(childId: string): Promise<number> {

app/api/fsrs/next/route.ts

@@ -3,33 +3,38 @@ import { prisma } from "@/lib/db"
 import { buildFsrsCard, getRetrievability } from "@/lib/fsrs"
 
 export async function GET(request: NextRequest) {
-  const childId = request.nextUrl.searchParams.get("childId")
-  if (!childId) {
-    return NextResponse.json({ error: "childId required" }, { status: 400 })
-  }
+  try {
+    const childId = request.nextUrl.searchParams.get("childId")
+    if (!childId) {
+      return NextResponse.json({ error: "childId required" }, { status: 400 })
+    }
 
-  const dueCard = await prisma.fsrsCard.findFirst({
-    where: {
-      childId,
-      dueAt: { lte: new Date() },
-    },
-    orderBy: { dueAt: "asc" },
-  })
-
-  if (dueCard) {
-    const card = buildFsrsCard({
-      stability: dueCard.stability,
-      difficulty: dueCard.difficulty,
-      reps: dueCard.reps,
-      lapses: dueCard.lapses,
-      due: dueCard.dueAt,
+    const dueCard = await prisma.fsrsCard.findFirst({
+      where: {
+        childId,
+        dueAt: { lte: new Date() },
+      },
+      orderBy: { dueAt: "asc" },
     })
-    return NextResponse.json({
-      ...dueCard,
-      cardId: dueCard.id,
-      retrievability: getRetrievability(card),
-    })
-  }
 
-  return NextResponse.json({ skillCode: null })
+    if (dueCard) {
+      const card = buildFsrsCard({
+        stability: dueCard.stability,
+        difficulty: dueCard.difficulty,
+        reps: dueCard.reps,
+        lapses: dueCard.lapses,
+        due: dueCard.dueAt,
+      })
+      return NextResponse.json({
+        ...dueCard,
+        cardId: dueCard.id,
+        retrievability: getRetrievability(card),
+      })
+    }
+
+    return NextResponse.json({ skillCode: null })
+  } catch (error) {
+    console.error("[fsrs/next] error:", error)
+    return NextResponse.json({ error: "Internal error" }, { status: 500 })
+  }
 }

app/api/health/route.ts

@@ -0,0 +1,18 @@
+import { NextResponse } from "next/server"
+import { prisma } from "@/lib/db"
+
+export async function GET() {
+  try {
+    await prisma.$queryRaw`SELECT 1`
+    return NextResponse.json({
+      status: "ok",
+      timestamp: Date.now(),
+      database: "connected",
+    })
+  } catch {
+    return NextResponse.json(
+      { status: "error", timestamp: Date.now(), database: "disconnected" },
+      { status: 503 },
+    )
+  }
+}