feat: let album owners and editors change an album's creation date (#520)

e2e/src/specs/server/api/album.e2e-spec.ts

@@ -631,6 +631,168 @@ describe('/albums', () => {
         }),
       );
     });
+
+    it('should set the album created date as the owner', async () => {
+      const album = await utils.createAlbum(user1.accessToken, { albumName: 'Backdated' });
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user1.accessToken}`)
+        .send({ createdAt: '1996-06-15T14:30:00.000Z' });
+
+      expect(status).toBe(200);
+      expect(body.createdAt).toBe('1996-06-15T14:30:00.000Z');
+      expect(body.updatedAt).not.toBe(album.updatedAt);
+
+      const after = await getAlbumInfo({ id: album.id }, { headers: asBearerAuth(user1.accessToken) });
+      expect(after.createdAt).toBe('1996-06-15T14:30:00.000Z');
+    });
+
+    it('should set the album created date as an editor', async () => {
+      const album = await utils.createAlbum(user1.accessToken, {
+        albumName: 'Editor may re-date',
+        albumUsers: [{ userId: user2.userId, role: AlbumUserRole.Editor }],
+      });
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user2.accessToken}`)
+        .send({ createdAt: '1996-06-15T14:30:00.000Z' });
+
+      expect(status).toBe(200);
+      expect(body.createdAt).toBe('1996-06-15T14:30:00.000Z');
+    });
+
+    it('should apply albumName and createdAt together in one request', async () => {
+      const album = await utils.createAlbum(user1.accessToken, { albumName: 'Combined update' });
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user1.accessToken}`)
+        .send({ albumName: 'Combined update - renamed', createdAt: '1996-06-15T14:30:00.000Z' });
+
+      expect(status).toBe(200);
+      expect(body.albumName).toBe('Combined update - renamed');
+      expect(body.createdAt).toBe('1996-06-15T14:30:00.000Z');
+    });
+
+    it('should not set the album created date as a viewer', async () => {
+      const album = await utils.createAlbum(user1.accessToken, {
+        albumName: 'Viewer may not re-date',
+        albumUsers: [{ userId: user2.userId, role: AlbumUserRole.Viewer }],
+      });
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user2.accessToken}`)
+        .send({ createdAt: '1996-06-15T14:30:00.000Z' });
+
+      expect(status).toBe(400);
+      expect(body).toEqual(errorDto.badRequest('Not found or no album.update access'));
+    });
+
+    it('should not set the album created date as a non-member', async () => {
+      const album = await utils.createAlbum(user2.accessToken, { albumName: 'Not yours' });
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user1.accessToken}`)
+        .send({ createdAt: '1996-06-15T14:30:00.000Z' });
+
+      expect(status).toBe(400);
+      expect(body).toEqual(errorDto.badRequest('Not found or no album.update access'));
+    });
+
+    it('should leave the created date alone when the request omits it', async () => {
+      const album = await utils.createAlbum(user1.accessToken, { albumName: 'Keep my date' });
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user1.accessToken}`)
+        .send({ albumName: 'Renamed' });
+
+      expect(status).toBe(200);
+      expect(body.albumName).toBe('Renamed');
+      expect(body.createdAt).toBe(album.createdAt);
+    });
+
+    it('should accept an empty body without changing anything', async () => {
+      const album = await utils.createAlbum(user1.accessToken, { albumName: 'Untouched' });
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user1.accessToken}`)
+        .send({});
+
+      expect(status).toBe(200);
+      expect(body.albumName).toBe('Untouched');
+      expect(body.createdAt).toBe(album.createdAt);
+      expect(body.updatedAt).not.toBe(album.updatedAt);
+    });
+
+    it.each([
+      ['1996-06-15T14:30:00.000Z', 'UTC with milliseconds', 200, '1996-06-15T14:30:00.000Z'],
+      ['1996-06-15T14:30:00+02:00', 'a numeric offset', 200, '1996-06-15T12:30:00.000Z'],
+      ['1996-06-15T14:30Z', 'omitted seconds', 200, '1996-06-15T14:30:00.000Z'],
+      ['1996-02-29T00:00:00.000Z', 'a real leap day', 200, '1996-02-29T00:00:00.000Z'],
+      // Status only, deliberately. This row exists to pin the *grammar* boundary — the
+      // schema's `\d{4}` year accepts `0001` — not storage fidelity, and year 1 does not
+      // survive the Postgres round trip: it comes back as `2001-01-01T00:00:00.000Z`.
+      // Asserting the returned value here would enshrine that as intended behaviour.
+      // Nobody backdates an album to year 1, so it is not worth a validation floor; the
+      // real lower-bound users reach is covered by the 1996 rows.
+      ['0001-01-01T00:00:00.000Z', 'the earliest four-digit year', 200, undefined],
+      ['1996-06-15T14:30:00', 'no timezone designator', 400, undefined],
+      ['1996-06-15', 'a date with no time', 400, undefined],
+      ['not-a-date', 'a non-date string', 400, undefined],
+      ['', 'an empty string', 400, undefined],
+      [null, 'null', 400, undefined],
+      ['12345-06-15T14:30:00Z', 'a five-digit year', 400, undefined],
+      ['1996-06-31T00:00:00.000Z', 'the 31st of a 30-day month', 400, undefined],
+      ['1997-02-29T00:00:00.000Z', 'a leap day in a non-leap year', 400, undefined],
+      ['1996-06-15T24:00:00.000Z', 'hour 24', 400, undefined],
+      ['1996-06-15t14:30:00z', 'lowercase t and z', 400, undefined],
+    ] as [createdAt: unknown, label: string, expectedStatus: number, expectedStored: string | undefined][])(
+      'createdAt %s (%s) should answer %i',
+      async (createdAt, label, expectedStatus, expectedStored) => {
+        const album = await utils.createAlbum(user1.accessToken, { albumName: `Grammar: ${label}` });
+
+        const { status, body } = await request(app)
+          .patch(`/albums/${album.id}`)
+          .set('Authorization', `Bearer ${user1.accessToken}`)
+          .send({ createdAt });
+
+        expect(status).toBe(expectedStatus);
+        if (expectedStored !== undefined) {
+          expect(body.createdAt).toBe(expectedStored);
+        }
+      },
+    );
+
+    it('should accept a future created date', async () => {
+      const album = await utils.createAlbum(user1.accessToken, { albumName: 'From the future' });
+      const future = new Date(Date.now() + 365 * 24 * 60 * 60 * 1000).toISOString();
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user1.accessToken}`)
+        .send({ createdAt: future });
+
+      expect(status).toBe(200);
+      expect(body.createdAt).toBe(future);
+    });
+
+    it('should truncate sub-millisecond precision', async () => {
+      const album = await utils.createAlbum(user1.accessToken, { albumName: 'Microseconds' });
+
+      const { status, body } = await request(app)
+        .patch(`/albums/${album.id}`)
+        .set('Authorization', `Bearer ${user1.accessToken}`)
+        .send({ createdAt: '1996-06-15T14:30:00.123456Z' });
+
+      expect(status).toBe(200);
+      expect(body.createdAt).toBe('1996-06-15T14:30:00.123Z');
+    });
   });
 
   describe('DELETE /albums/:id/assets', () => {

mobile/lib/domain/services/remote_album.service.dart

@@ -141,6 +141,7 @@ class RemoteAlbumService {
     String? thumbnailAssetId,
     bool? isActivityEnabled,
     AlbumAssetOrder? order,
+    DateTime? createdAt,
   }) async {
     final owner = await _repository.getOwner(albumId);
     final updatedAlbum = await _albumApiRepository.updateAlbum(
@@ -151,6 +152,7 @@ class RemoteAlbumService {
       thumbnailAssetId: thumbnailAssetId,
       isActivityEnabled: isActivityEnabled,
       order: order,
+      createdAt: createdAt,
     );
 
     // Update the local database

mobile/lib/presentation/pages/drift_remote_album.page.dart

@@ -21,8 +21,10 @@ import 'package:immich_mobile/providers/infrastructure/space_album_actions.dart'
 import 'package:immich_mobile/providers/infrastructure/timeline.provider.dart';
 import 'package:immich_mobile/providers/user.provider.dart';
 import 'package:immich_mobile/routing/router.dart';
+import 'package:immich_mobile/widgets/common/date_time_picker.dart';
 import 'package:immich_mobile/widgets/common/immich_toast.dart';
 import 'package:immich_mobile/widgets/common/remote_album_sliver_app_bar.dart';
+import 'package:intl/intl.dart';
 
 @RoutePage()
 class RemoteAlbumPage extends ConsumerStatefulWidget {
@@ -151,7 +153,7 @@ class _RemoteAlbumPageState extends ConsumerState<RemoteAlbumPage> {
     }
   }
 
-  Future<void> showEditTitleAndDescription(BuildContext context) async {
+  Future<void> showEditAlbum(BuildContext context) async {
     final result = await showDialog<_EditAlbumData?>(
       context: context,
       barrierDismissible: true,
@@ -160,7 +162,7 @@ class _RemoteAlbumPageState extends ConsumerState<RemoteAlbumPage> {
 
     if (result != null && context.mounted) {
       setState(() {
-        _album = _album.copyWith(name: result.name, description: result.description ?? '');
+        _album = _album.copyWith(name: result.name, description: result.description ?? '', createdAt: result.createdAt);
       });
       unawaited(HapticFeedback.mediumImpact());
     }
@@ -218,12 +220,12 @@ class _RemoteAlbumPageState extends ConsumerState<RemoteAlbumPage> {
             onAddUsers: () => addUsers(context),
             onAddPhotos: () => addAssets(context),
             onToggleAlbumOrder: () => toggleAlbumOrder(),
-            onEditAlbum: () => showEditTitleAndDescription(context),
+            onEditAlbum: () => showEditAlbum(context),
             onCreateSharedLink: () => unawaited(context.pushRoute(SharedLinkEditRoute(albumId: _album.id))),
             onShowOptions: () => context.pushRoute(DriftAlbumOptionsRoute(album: _album)),
             onLinkToSpace: () => unawaited(linkToSpace(context)),
           ),
-          onEditTitle: isOwner ? () => showEditTitleAndDescription(context) : null,
+          onEditTitle: isOwner ? () => showEditAlbum(context) : null,
           onActivity: () => showActivity(context),
         ),
         bottomSheet: RemoteAlbumBottomSheet(album: _album),
@@ -235,8 +237,9 @@ class _RemoteAlbumPageState extends ConsumerState<RemoteAlbumPage> {
 class _EditAlbumData {
   final String name;
   final String? description;
+  final DateTime createdAt;
 
-  const _EditAlbumData({required this.name, this.description});
+  const _EditAlbumData({required this.name, this.description, required this.createdAt});
 }
 
 class _EditAlbumDialog extends ConsumerStatefulWidget {
@@ -252,6 +255,7 @@ class _EditAlbumDialogState extends ConsumerState<_EditAlbumDialog> {
   late final TextEditingController titleController;
   late final TextEditingController descriptionController;
   final formKey = GlobalKey<FormState>();
+  late DateTime createdAt;
 
   @override
   void initState() {
@@ -260,6 +264,7 @@ class _EditAlbumDialogState extends ConsumerState<_EditAlbumDialog> {
     descriptionController = TextEditingController(
       text: widget.album.description.isEmpty ? '' : widget.album.description,
     );
+    createdAt = widget.album.createdAt;
   }
 
   @override
@@ -269,6 +274,16 @@ class _EditAlbumDialogState extends ConsumerState<_EditAlbumDialog> {
     super.dispose();
   }
 
+  Future<void> _pickCreatedAt() async {
+    // Returns an ISO string with a +HH:MM offset, or null when dismissed —
+    // same contract action.service.dart:202-219 consumes for asset dates.
+    final picked = await showDateTimePicker(context: context, initialDateTime: createdAt);
+    if (picked == null) {
+      return;
+    }
+    setState(() => createdAt = DateTime.parse(picked).toLocal());
+  }
+
   Future<void> _handleSave() async {
     if (formKey.currentState?.validate() != true) {
       return;
@@ -280,12 +295,16 @@ class _EditAlbumDialogState extends ConsumerState<_EditAlbumDialog> {
 
       await ref
           .read(remoteAlbumProvider.notifier)
-          .updateAlbum(widget.album.id, name: newTitle, description: newDescription);
+          .updateAlbum(widget.album.id, name: newTitle, description: newDescription, createdAt: createdAt);
 
       if (mounted) {
-        Navigator.of(
-          context,
-        ).pop(_EditAlbumData(name: newTitle, description: newDescription.isEmpty ? null : newDescription));
+        Navigator.of(context).pop(
+          _EditAlbumData(
+            name: newTitle,
+            description: newDescription.isEmpty ? null : newDescription,
+            createdAt: createdAt,
+          ),
+        );
       }
     } catch (e) {
       if (mounted) {
@@ -363,6 +382,22 @@ class _EditAlbumDialogState extends ConsumerState<_EditAlbumDialog> {
                     fillColor: context.colorScheme.surface,
                   ),
                 ),
+                const SizedBox(height: 18),
+
+                // Created date
+                Text(
+                  'date_created'.t(context: context).toUpperCase(),
+                  style: context.textTheme.labelSmall?.copyWith(fontWeight: FontWeight.w600),
+                ),
+                const SizedBox(height: 4),
+                ListTile(
+                  key: const Key('album-edit-created-at'),
+                  tileColor: context.colorScheme.surface,
+                  shape: const RoundedRectangleBorder(borderRadius: BorderRadius.all(Radius.circular(12))),
+                  title: Text(DateFormat.yMMMd().format(createdAt), style: context.textTheme.bodyMedium),
+                  trailing: Icon(Icons.edit_outlined, size: 18, color: context.colorScheme.primary),
+                  onTap: _pickCreatedAt,
+                ),
                 const SizedBox(height: 24),
 
                 // Action Buttons
@@ -375,6 +410,7 @@ class _EditAlbumDialogState extends ConsumerState<_EditAlbumDialog> {
                     ),
                     const SizedBox(width: 12),
                     FilledButton(
+                      key: const Key('album-edit-save'),
                       onPressed: _handleSave,
                       child: Text('save'.t(context: context)),
                     ),
@@ -456,7 +492,7 @@ class _AlbumKebabMenu extends ConsumerWidget {
           onAddUsers: isOwner ? onAddUsers : null,
           onAddPhotos: isOwner || canAddPhotos ? onAddPhotos : null,
           onToggleAlbumOrder: isOwner ? onToggleAlbumOrder : null,
-          onEditAlbum: isOwner ? onEditAlbum : null,
+          onEditAlbum: isOwner || canAddPhotos ? onEditAlbum : null,
           onCreateSharedLink: isOwner ? onCreateSharedLink : null,
           onShowOptions: onShowOptions,
           // L15: gated to owned albums (mirrors web's isOwned gate on the same affordance).

mobile/lib/providers/infrastructure/remote_album.provider.dart

@@ -158,6 +158,7 @@ class RemoteAlbumNotifier extends Notifier<RemoteAlbumState> {
     String? thumbnailAssetId,
     bool? isActivityEnabled,
     AlbumAssetOrder? order,
+    DateTime? createdAt,
   }) async {
     try {
       final updatedAlbum = await _remoteAlbumService.updateAlbum(
@@ -167,6 +168,7 @@ class RemoteAlbumNotifier extends Notifier<RemoteAlbumState> {
         thumbnailAssetId: thumbnailAssetId,
         isActivityEnabled: isActivityEnabled,
         order: order,
+        createdAt: createdAt,
       );
 
       final updatedAlbums = state.albums.map((album) {

mobile/lib/repositories/drift_album_api_repository.dart

@@ -76,6 +76,7 @@ class DriftAlbumApiRepository extends ApiRepository {
     String? thumbnailAssetId,
     bool? isActivityEnabled,
     AlbumAssetOrder? order,
+    DateTime? createdAt,
   }) async {
     AssetOrder? apiOrder;
     if (order != null) {
@@ -88,6 +89,7 @@ class DriftAlbumApiRepository extends ApiRepository {
         UpdateAlbumDto(
           albumName: name == null ? const Optional.absent() : Optional.present(name),
           description: description == null ? const Optional.absent() : Optional.present(description),
+          createdAt: createdAt == null ? const Optional.absent() : Optional.present(createdAt),
           albumThumbnailAssetId: thumbnailAssetId == null
               ? const Optional.absent()
               : Optional.present(thumbnailAssetId),