shinkan-jinkendo/backend/routers/media_assets.py

"""Medien-Archiv (Liste, Datei) und Lifecycle — MEDIA_ASSETS_AND_ARCHIVE_SPEC."""
from __future__ import annotations

from typing import Any, Literal, Optional

from fastapi import APIRouter, Depends, HTTPException, Query, Request

from pydantic import BaseModel, Field

from club_tenancy import is_platform_admin, library_content_visible_to_profile
from db import get_db, get_cursor, r2d
from media_lifecycle import fetch_media_asset_row
from media_storage import get_effective_media_root, path_under_media_root
from tenant_context import TenantContext, get_tenant_context, get_tenant_context_flexible

router = APIRouter(prefix="/api/media-assets", tags=["media-assets"])


class MediaLifecycleBody(BaseModel):
    action: Literal["trash_soft", "trash_hidden", "recover", "purge", "reactivate"]


class MediaAssetPatch(BaseModel):
    copyright_notice: Optional[str] = Field(None, max_length=8000)


_LIFECYCLE_LIST_FILTERS = frozenset({"active", "trash_soft", "trash_hidden", "all"})


def _lifecycle_where_sql(lifecycle: str) -> str:
    lc = (lifecycle or "active").strip().lower()
    if lc not in _LIFECYCLE_LIST_FILTERS:
        raise HTTPException(status_code=400, detail="Ungültiger lifecycle-Filter")
    if lc == "active":
        return "ma.lifecycle_state = 'active'"
    if lc == "trash_soft":
        return "ma.lifecycle_state = 'trash_soft'"
    if lc == "trash_hidden":
        return "ma.lifecycle_state = 'trash_hidden'"
    return "ma.lifecycle_state IN ('active', 'trash_soft', 'trash_hidden')"


def _fetch_asset_file_row(cur: Any, asset_id: int) -> Optional[dict]:
    cur.execute(
        """SELECT id, visibility, club_id, uploaded_by_profile_id, lifecycle_state,
                  storage_key, mime_type, original_filename
           FROM media_assets WHERE id = %s""",
        (asset_id,),
    )
    row = cur.fetchone()
    return r2d(row) if row else None


def _assert_can_view_archive_asset(cur: Any, tenant: TenantContext, asset: dict) -> None:
    if not library_content_visible_to_profile(
        cur,
        tenant.profile_id,
        (asset.get("visibility") or "").strip().lower(),
        asset.get("club_id"),
        asset.get("uploaded_by_profile_id"),
        tenant.global_role,
    ):
        raise HTTPException(status_code=403, detail="Keine Berechtigung für dieses Medium")


@router.get("")
def list_media_assets(
    tenant: TenantContext = Depends(get_tenant_context),
    q: Optional[str] = Query(None, max_length=120),
    lifecycle: str = Query(
        "active",
        description="active | trash_soft | trash_hidden | all (nicht purgierte Zustände)",
    ),
    limit: int = Query(30, ge=1, le=100),
    offset: int = Query(0, ge=0),
):
    """
    Durchsuchbares Medien-Archiv; Sichtbarkeit wie Übungsbibliothek.
    Standard lifecycle=active (Archiv-Picker); Manager-UI kann Papierkorb-Ansicht wählen.
    """
    lc_where = _lifecycle_where_sql(lifecycle)
    role = tenant.global_role or ""
    is_adm = is_platform_admin(role)
    profile_id = tenant.profile_id
    needle = (q or "").strip()
    params: list[Any] = [is_adm, profile_id, profile_id]
    search_sql = ""
    if needle:
        like = f"%{needle}%"
        params.extend([like, like])
        search_sql = " AND (ma.original_filename ILIKE %s OR ma.storage_key ILIKE %s)"
    params.extend([limit, offset])

    with get_db() as conn:
        cur = get_cursor(conn)
        cur.execute(
            f"""SELECT ma.id, ma.mime_type, ma.byte_size, ma.original_filename, ma.visibility, ma.club_id,
                       ma.uploaded_by_profile_id, ma.lifecycle_state, ma.created_at, ma.sha256,
                       ma.copyright_notice
                FROM media_assets ma
                WHERE {lc_where}
                  AND (
                    %s
                    OR lower(trim(ma.visibility)) = 'official'
                    OR (
                      lower(trim(ma.visibility)) = 'private'
                      AND ma.uploaded_by_profile_id = %s
                    )
                    OR (
                      lower(trim(ma.visibility)) = 'club'
                      AND EXISTS (
                        SELECT 1 FROM club_members cm
                        WHERE cm.profile_id = %s
                          AND cm.club_id = ma.club_id
                          AND cm.status = 'active'
                      )
                    )
                  )
                  {search_sql}
                ORDER BY ma.updated_at DESC NULLS LAST, ma.created_at DESC
                LIMIT %s OFFSET %s""",
            params,
        )
        rows = [r2d(r) for r in cur.fetchall()]
    return {"items": rows, "limit": limit, "offset": offset, "lifecycle": lifecycle.strip().lower()}


@router.api_route("/{asset_id}/file", methods=["GET", "HEAD"])
def download_media_asset_file(
    request: Request,
    asset_id: int,
    tenant: TenantContext = Depends(get_tenant_context_flexible),
):
    """Direktzugriff auf Archiv-Datei (Thumbnail/Vorschau); Auth wie Übungs-Medien (?ssetoken)."""
    from routers.exercises import _binary_media_response

    with get_db() as conn:
        cur = get_cursor(conn)
        asset = _fetch_asset_file_row(cur, asset_id)
        if not asset:
            raise HTTPException(status_code=404, detail="Medium nicht gefunden")
        lc = (asset.get("lifecycle_state") or "").strip().lower()
        if lc == "active":
            _assert_can_view_archive_asset(cur, tenant, asset)
        elif lc in ("trash_soft", "trash_hidden"):
            from media_lifecycle import assert_can_manage_media_asset_lifecycle

            assert_can_manage_media_asset_lifecycle(cur, tenant, asset)
        else:
            raise HTTPException(status_code=404, detail="Medium nicht verfügbar")

        sk = asset.get("storage_key")
        if not sk:
            raise HTTPException(status_code=404, detail="Keine Datei hinterlegt")

        media_root = get_effective_media_root(cur)
        abs_p = path_under_media_root(media_root, str(sk))
        if not abs_p or not abs_p.is_file():
            raise HTTPException(status_code=404, detail="Datei nicht gefunden")

        mime = asset.get("mime_type") or "application/octet-stream"
        fname = asset.get("original_filename") or abs_p.name
        return _binary_media_response(abs_p, mime, str(fname) if fname else None, request)


@router.post("/{asset_id}/lifecycle")
def post_media_asset_lifecycle(
    asset_id: int,
    body: MediaLifecycleBody,
    tenant: TenantContext = Depends(get_tenant_context),
):
    """Papierkorb-Übergänge — media_lifecycle."""
    from media_lifecycle import (
        assert_can_manage_media_asset_lifecycle,
        purge_media_asset,
        transition_recover_from_hidden,
        transition_to_trash_hidden,
        transition_to_trash_soft,
    )

    with get_db() as conn:
        cur = get_cursor(conn)
        asset = fetch_media_asset_row(cur, asset_id)
        if not asset:
            raise HTTPException(status_code=404, detail="Medium nicht gefunden")
        assert_can_manage_media_asset_lifecycle(cur, tenant, asset)

        action = body.action
        if action == "trash_soft":
            return transition_to_trash_soft(cur, conn, asset_id)
        if action == "trash_hidden":
            return transition_to_trash_hidden(cur, conn, asset_id)
        if action == "recover":
            return transition_recover_from_hidden(cur, conn, asset_id)
        if action == "purge":
            state = (asset.get("lifecycle_state") or "").strip().lower()
            if state != "trash_hidden":
                raise HTTPException(
                    status_code=400,
                    detail="Nur ausgeblendete Medien (Stufe 2) dürfen endgültig gelöscht werden",
                )
            ok = purge_media_asset(cur, conn, asset_id)
            if not ok:
                raise HTTPException(status_code=400, detail="Löschen nicht möglich")
            return {"ok": True, "purged": asset_id}
        if action == "reactivate":
            from media_lifecycle import reactivate_media_asset_from_trash

            return reactivate_media_asset_from_trash(cur, conn, asset_id)

        raise HTTPException(status_code=500, detail="Interner Fehler: lifecycle action")


@router.patch("/{asset_id}")
def patch_media_asset(
    asset_id: int,
    body: MediaAssetPatch,
    tenant: TenantContext = Depends(get_tenant_context),
):
    """Metadaten (z. B. Copyright) — gleiche Berechtigung wie Lifecycle-Verwaltung."""
    from media_lifecycle import assert_can_manage_media_asset_lifecycle

    data = body.dict(exclude_unset=True)
    if not data:
        raise HTTPException(status_code=400, detail="Keine Felder zum Aktualisieren")

    with get_db() as conn:
        cur = get_cursor(conn)
        cur.execute(
            """SELECT id, visibility, club_id, uploaded_by_profile_id, lifecycle_state,
                      copyright_notice, original_filename
               FROM media_assets WHERE id = %s""",
            (asset_id,),
        )
        row = cur.fetchone()
        if not row:
            raise HTTPException(status_code=404, detail="Medium nicht gefunden")
        asset = r2d(row)
        assert_can_manage_media_asset_lifecycle(cur, tenant, asset)

        if "copyright_notice" in data:
            cn = data["copyright_notice"]
            cur.execute(
                "UPDATE media_assets SET copyright_notice = %s, updated_at = NOW() WHERE id = %s",
                (cn, asset_id),
            )
        conn.commit()
        cur.execute(
            """SELECT id, mime_type, byte_size, original_filename, visibility, club_id,
                      uploaded_by_profile_id, lifecycle_state, created_at, sha256, copyright_notice
               FROM media_assets WHERE id = %s""",
            (asset_id,),
        )
        out = r2d(cur.fetchone())
    return out