awa-ui 0.6.2

pub mod cache;
pub mod callback_router;
pub mod error;
pub mod handlers;
pub mod state;

pub use callback_router::{
    callback_router, CallbackAuth, CallbackReceiverConfig, CallbackRouterBuildError,
};

use std::time::Duration;

use axum::http::header;
use axum::response::{Html, IntoResponse, Response};
use axum::routing::{delete, get, patch, post};
use axum::Router;
use rust_embed::Embed;
use sqlx::PgPool;
use tower_http::cors::CorsLayer;

use crate::state::{AppState, ReadOnlyMode};

#[derive(Embed)]
#[folder = "static/"]
struct StaticAssets;

/// Create the awa-ui router with all API routes and static file serving.
///
/// Read-only mode is auto-detected by probing the database connection — see
/// [`router_with`] to force it explicitly.
pub async fn router(pool: PgPool, cache_ttl: Duration) -> Result<Router, sqlx::Error> {
    router_with(pool, cache_ttl, None, ReadOnlyMode::Auto).await
}

/// Create the awa-ui router with optional callback signature verification.
///
/// Read-only mode is auto-detected. Prefer [`router_with`] when you need to
/// force read-only or writable behaviour regardless of DB privilege.
pub async fn router_with_callback_secret(
    pool: PgPool,
    cache_ttl: Duration,
    callback_hmac_secret: Option<[u8; 32]>,
) -> Result<Router, sqlx::Error> {
    router_with(pool, cache_ttl, callback_hmac_secret, ReadOnlyMode::Auto).await
}

/// Create the awa-ui router with full control over callback signing and
/// read-only behaviour.
///
/// `read_only_mode`:
/// - [`ReadOnlyMode::Auto`] — probe the DB (matches legacy behaviour)
/// - [`ReadOnlyMode::ReadOnly`] — force mutation endpoints off even if the
///   DB can write
/// - [`ReadOnlyMode::Writable`] — force mutation endpoints on; the DB still
///   has the final say at query time
pub async fn router_with(
    pool: PgPool,
    cache_ttl: Duration,
    callback_hmac_secret: Option<[u8; 32]>,
    read_only_mode: ReadOnlyMode,
) -> Result<Router, sqlx::Error> {
    let read_only = read_only_mode.resolve(&pool).await?;
    let state = AppState::new(pool, read_only, cache_ttl, callback_hmac_secret);
    let api = Router::new()
        // Jobs
        .route("/jobs", get(handlers::jobs::list_jobs))
        .route("/jobs/{id}", get(handlers::jobs::get_job))
        .route("/jobs/{id}/retry", post(handlers::jobs::retry_job))
        .route("/jobs/{id}/cancel", post(handlers::jobs::cancel_job))
        .route("/jobs/bulk-retry", post(handlers::jobs::bulk_retry))
        .route("/jobs/bulk-cancel", post(handlers::jobs::bulk_cancel))
        // Batch operations
        .route(
            "/batch-ops",
            get(handlers::batch_ops::list_batch_operations),
        )
        .route(
            "/batch-ops",
            post(handlers::batch_ops::submit_batch_operation),
        )
        .route(
            "/batch-ops/preview",
            post(handlers::batch_ops::preview_batch_operation),
        )
        .route(
            "/batch-ops/{id}",
            get(handlers::batch_ops::get_batch_operation),
        )
        .route(
            "/batch-ops/{id}",
            patch(handlers::batch_ops::patch_batch_operation),
        )
        // Queues
        .route("/queues", get(handlers::queues::list_queues))
        .route(
            "/queues/runtime",
            get(handlers::runtime::list_queue_runtime),
        )
        .route("/queues/{queue}", get(handlers::queues::get_queue))
        .route("/queues/{queue}/pause", post(handlers::queues::pause_queue))
        .route(
            "/queues/{queue}/resume",
            post(handlers::queues::resume_queue),
        )
        .route("/queues/{queue}/drain", post(handlers::queues::drain_queue))
        // Kinds
        .route("/kinds", get(handlers::kinds::list_kinds))
        // Cron
        .route("/cron", get(handlers::cron::list_cron_jobs))
        .route(
            "/cron/{name}/trigger",
            post(handlers::cron::trigger_cron_job),
        )
        .route("/cron/{name}/pause", post(handlers::cron::pause_cron_job))
        .route("/cron/{name}/resume", post(handlers::cron::resume_cron_job))
        // Stats
        .route("/stats", get(handlers::stats::get_stats))
        .route("/stats/timeseries", get(handlers::stats::get_timeseries))
        .route("/stats/kinds", get(handlers::stats::get_distinct_kinds))
        .route("/stats/queues", get(handlers::stats::get_distinct_queues))
        .route("/capabilities", get(handlers::stats::get_capabilities))
        // DLQ
        .route("/dlq", get(handlers::dlq::list_dlq))
        .route("/dlq/depth", get(handlers::dlq::dlq_depth))
        .route("/dlq/{id}", get(handlers::dlq::get_dlq_job))
        .route("/dlq/{id}", delete(handlers::dlq::purge_dlq_job))
        .route("/dlq/{id}/retry", post(handlers::dlq::retry_dlq_job))
        .route("/dlq/bulk-retry", post(handlers::dlq::bulk_retry_dlq))
        .route("/dlq/bulk-purge", post(handlers::dlq::bulk_purge_dlq))
        .route("/dlq/bulk-move", post(handlers::dlq::bulk_move_failed))
        // Runtime
        .route("/runtime", get(handlers::runtime::get_runtime))
        .route("/storage", get(handlers::runtime::get_storage))
        // Callbacks (for HTTP workers and external systems)
        .route(
            "/callbacks/{callback_id}/complete",
            post(handlers::callbacks::complete_callback),
        )
        .route(
            "/callbacks/{callback_id}/fail",
            post(handlers::callbacks::fail_callback),
        )
        .route(
            "/callbacks/{callback_id}/heartbeat",
            post(handlers::callbacks::heartbeat_callback),
        );

    Ok(Router::new()
        .nest("/api", api)
        .fallback(static_handler)
        .layer(CorsLayer::permissive())
        .with_state(state))
}

/// Serve embedded static files, falling back to index.html for SPA routing.
async fn static_handler(uri: axum::http::Uri) -> Response {
    let path = uri.path().trim_start_matches('/');

    // Try to serve the exact file
    if let Some(file) = StaticAssets::get(path) {
        let mime = mime_guess::from_path(path).first_or_octet_stream();
        return ([(header::CONTENT_TYPE, mime.as_ref())], file.data.to_vec()).into_response();
    }

    // SPA fallback: serve index.html for non-API routes
    if let Some(index) = StaticAssets::get("index.html") {
        return Html(index.data.to_vec()).into_response();
    }

    // No frontend built — serve placeholder
    Html(PLACEHOLDER_HTML).into_response()
}

const PLACEHOLDER_HTML: &str = r#"<!DOCTYPE html>
<html>
<head><title>AWA</title></head>
<body>
  <h1>AWA Job Queue</h1>
  <p>API available at <a href="/api/stats">/api/stats</a></p>
  <p>Frontend not built. Run <code>cd awa-ui/frontend && npm install && npm run build</code> to build the UI.</p>
</body>
</html>"#;