mockforge-registry-server 0.3.130

//! Showcase + Learning Hub handlers (cloud-enablement task #12 / Phase 1).
//!
//! Public read paths for the showcase gallery, learning tracks, and
//! recipes. Like-toggle + lesson-completion are auth-required and live
//! at separate endpoints. Admin authoring of tracks/lessons/recipes is
//! a follow-up slice (uses /api/v1/admin/* paths).
//!
//! Routes (this slice):
//!   GET    /api/v1/showcase/entries[?tag=&limit=]
//!   GET    /api/v1/showcase/entries/{slug}
//!   POST   /api/v1/showcase/entries/{id}/like-toggle
//!
//!   GET    /api/v1/learning/tracks
//!   GET    /api/v1/learning/tracks/{slug}                  (track + ordered lessons)
//!   GET    /api/v1/learning/recipes[?tag=]
//!   GET    /api/v1/learning/recipes/{slug}
//!   POST   /api/v1/learning/lessons/{lesson_id}/complete
//!   GET    /api/v1/learning/progress

use axum::{
    extract::{Path, Query, State},
    Json,
};
use serde::{Deserialize, Serialize};
use uuid::Uuid;

use crate::{
    error::{ApiError, ApiResult},
    middleware::AuthUser,
    models::{LearningLesson, LearningProgress, LearningRecipe, LearningTrack, ShowcaseEntry},
    AppState,
};

const DEFAULT_LIMIT: i64 = 100;
const MAX_LIMIT: i64 = 500;

#[derive(Debug, Deserialize)]
pub struct ListShowcaseQuery {
    #[serde(default)]
    pub tag: Option<String>,
    #[serde(default)]
    pub limit: Option<i64>,
}

/// `GET /api/v1/showcase/entries`
pub async fn list_showcase_entries(
    State(state): State<AppState>,
    Query(query): Query<ListShowcaseQuery>,
) -> ApiResult<Json<Vec<ShowcaseEntry>>> {
    let limit = query.limit.unwrap_or(DEFAULT_LIMIT).clamp(1, MAX_LIMIT);
    let entries = ShowcaseEntry::list_published(state.db.pool(), query.tag.as_deref(), limit)
        .await
        .map_err(ApiError::Database)?;
    Ok(Json(entries))
}

/// `GET /api/v1/showcase/entries/{slug}`
pub async fn get_showcase_entry(
    State(state): State<AppState>,
    Path(slug): Path<String>,
) -> ApiResult<Json<ShowcaseEntry>> {
    let entry = ShowcaseEntry::find_by_slug(state.db.pool(), &slug)
        .await
        .map_err(ApiError::Database)?
        .ok_or_else(|| ApiError::InvalidRequest("Showcase entry not found".into()))?;
    if !entry.is_published {
        return Err(ApiError::InvalidRequest("Showcase entry not found".into()));
    }
    Ok(Json(entry))
}

#[derive(Debug, Serialize)]
pub struct LikeToggleResponse {
    pub liked: bool,
    pub likes_count: i32,
}

/// `POST /api/v1/showcase/entries/{id}/like-toggle`
pub async fn toggle_showcase_like(
    State(state): State<AppState>,
    AuthUser(user_id): AuthUser,
    Path(id): Path<Uuid>,
) -> ApiResult<Json<LikeToggleResponse>> {
    // Verify the entry exists + is published before allowing a like.
    let entry = ShowcaseEntry::find_by_id(state.db.pool(), id)
        .await
        .map_err(ApiError::Database)?
        .ok_or_else(|| ApiError::InvalidRequest("Showcase entry not found".into()))?;
    if !entry.is_published {
        return Err(ApiError::InvalidRequest("Showcase entry not found".into()));
    }

    let (liked, likes_count) = ShowcaseEntry::toggle_like(state.db.pool(), id, user_id)
        .await
        .map_err(ApiError::Database)?;
    Ok(Json(LikeToggleResponse { liked, likes_count }))
}

// --- Learning Hub ----------------------------------------------------------

/// `GET /api/v1/learning/tracks`
pub async fn list_learning_tracks(
    State(state): State<AppState>,
) -> ApiResult<Json<Vec<LearningTrack>>> {
    let tracks = LearningTrack::list_published(state.db.pool())
        .await
        .map_err(ApiError::Database)?;
    Ok(Json(tracks))
}

#[derive(Debug, Serialize)]
pub struct TrackDetail {
    #[serde(flatten)]
    pub track: LearningTrack,
    pub lessons: Vec<LearningLesson>,
}

/// `GET /api/v1/learning/tracks/{slug}`
pub async fn get_learning_track(
    State(state): State<AppState>,
    Path(slug): Path<String>,
) -> ApiResult<Json<TrackDetail>> {
    let track = LearningTrack::find_by_slug(state.db.pool(), &slug)
        .await
        .map_err(ApiError::Database)?
        .ok_or_else(|| ApiError::InvalidRequest("Learning track not found".into()))?;
    if !track.is_published {
        return Err(ApiError::InvalidRequest("Learning track not found".into()));
    }
    let lessons = LearningLesson::list_by_track(state.db.pool(), track.id)
        .await
        .map_err(ApiError::Database)?;
    Ok(Json(TrackDetail { track, lessons }))
}

#[derive(Debug, Deserialize)]
pub struct ListRecipesQuery {
    #[serde(default)]
    pub tag: Option<String>,
}

/// `GET /api/v1/learning/recipes`
pub async fn list_learning_recipes(
    State(state): State<AppState>,
    Query(query): Query<ListRecipesQuery>,
) -> ApiResult<Json<Vec<LearningRecipe>>> {
    let recipes = LearningRecipe::list_published(state.db.pool(), query.tag.as_deref())
        .await
        .map_err(ApiError::Database)?;
    Ok(Json(recipes))
}

/// `GET /api/v1/learning/recipes/{slug}`
pub async fn get_learning_recipe(
    State(state): State<AppState>,
    Path(slug): Path<String>,
) -> ApiResult<Json<LearningRecipe>> {
    let recipe = LearningRecipe::find_by_slug(state.db.pool(), &slug)
        .await
        .map_err(ApiError::Database)?
        .ok_or_else(|| ApiError::InvalidRequest("Recipe not found".into()))?;
    if !recipe.is_published {
        return Err(ApiError::InvalidRequest("Recipe not found".into()));
    }
    Ok(Json(recipe))
}

/// `POST /api/v1/learning/lessons/{lesson_id}/complete`
pub async fn complete_learning_lesson(
    State(state): State<AppState>,
    AuthUser(user_id): AuthUser,
    Path(lesson_id): Path<Uuid>,
) -> ApiResult<Json<serde_json::Value>> {
    // Verify the lesson exists before marking — avoids storing progress
    // rows that point at deleted lessons.
    let lesson = LearningLesson::find_by_id(state.db.pool(), lesson_id)
        .await
        .map_err(ApiError::Database)?
        .ok_or_else(|| ApiError::InvalidRequest("Lesson not found".into()))?;
    LearningProgress::mark_completed(state.db.pool(), user_id, lesson.id)
        .await
        .map_err(ApiError::Database)?;
    Ok(Json(serde_json::json!({ "completed": true, "lesson_id": lesson.id })))
}

// --- admin authoring (#12 Phase 2) -----------------------------------------

/// `GET /api/v1/admin/showcase/entries`
///
/// Admin listing — returns every entry regardless of published status,
/// newest first. The public list_showcase_entries route only returns
/// published rows; admins need to see drafts and submissions awaiting
/// review.
pub async fn admin_list_showcase_entries(
    State(state): State<AppState>,
    AuthUser(_user_id): AuthUser,
) -> ApiResult<Json<Vec<ShowcaseEntry>>> {
    let entries = ShowcaseEntry::list_all(state.db.pool(), MAX_LIMIT)
        .await
        .map_err(ApiError::Database)?;
    Ok(Json(entries))
}

/// `POST /api/v1/admin/showcase/entries`
///
/// Submit a showcase entry. Lands in is_published=false; an admin
/// flips publish via PATCH. Body matches CreateShowcaseEntry shape.
#[derive(Debug, Deserialize)]
pub struct AdminCreateShowcaseRequest {
    pub slug: String,
    pub title: String,
    pub description: String,
    #[serde(default)]
    pub body: Option<String>,
    #[serde(default)]
    pub screenshots: Vec<String>,
    #[serde(default)]
    pub demo_url: Option<String>,
    #[serde(default)]
    pub source_url: Option<String>,
    #[serde(default)]
    pub tags: Vec<String>,
}

pub async fn admin_create_showcase_entry(
    State(state): State<AppState>,
    AuthUser(user_id): AuthUser,
    Json(body): Json<AdminCreateShowcaseRequest>,
) -> ApiResult<Json<ShowcaseEntry>> {
    use mockforge_registry_core::models::showcase::CreateShowcaseEntry;
    if body.slug.trim().is_empty() || body.title.trim().is_empty() {
        return Err(ApiError::InvalidRequest("slug and title are required".into()));
    }
    let row = ShowcaseEntry::create(
        state.db.pool(),
        CreateShowcaseEntry {
            slug: &body.slug,
            org_id: None,
            submitted_by: Some(user_id),
            title: &body.title,
            description: &body.description,
            body: body.body.as_deref(),
            screenshots: &body.screenshots,
            demo_url: body.demo_url.as_deref(),
            source_url: body.source_url.as_deref(),
            tags: &body.tags,
        },
    )
    .await
    .map_err(ApiError::Database)?;
    Ok(Json(row))
}

/// `PATCH /api/v1/admin/showcase/entries/{id}`
///
/// Toggle is_published / is_featured. Body has both as optional bool;
/// fields the caller doesn't send stay untouched. Site-admin scope —
/// per-org submission auth is a separate flow.
#[derive(Debug, Deserialize)]
pub struct AdminUpdateShowcaseRequest {
    #[serde(default)]
    pub is_published: Option<bool>,
    #[serde(default)]
    pub is_featured: Option<bool>,
}

pub async fn admin_update_showcase_entry(
    State(state): State<AppState>,
    AuthUser(_user_id): AuthUser,
    Path(id): Path<Uuid>,
    Json(body): Json<AdminUpdateShowcaseRequest>,
) -> ApiResult<Json<ShowcaseEntry>> {
    let pool = state.db.pool();
    let mut current = ShowcaseEntry::find_by_id(pool, id)
        .await
        .map_err(ApiError::Database)?
        .ok_or_else(|| ApiError::InvalidRequest("Showcase entry not found".into()))?;

    if let Some(p) = body.is_published {
        current = ShowcaseEntry::set_published(pool, id, p)
            .await
            .map_err(ApiError::Database)?
            .unwrap_or(current);
    }
    if let Some(f) = body.is_featured {
        current = ShowcaseEntry::set_featured(pool, id, f)
            .await
            .map_err(ApiError::Database)?
            .unwrap_or(current);
    }
    Ok(Json(current))
}

pub async fn admin_delete_showcase_entry(
    State(state): State<AppState>,
    AuthUser(_user_id): AuthUser,
    Path(id): Path<Uuid>,
) -> ApiResult<Json<serde_json::Value>> {
    let deleted = ShowcaseEntry::delete(state.db.pool(), id).await.map_err(ApiError::Database)?;
    if !deleted {
        return Err(ApiError::InvalidRequest("Showcase entry not found".into()));
    }
    Ok(Json(serde_json::json!({ "deleted": true })))
}

/// `GET /api/v1/learning/progress`
pub async fn list_learning_progress(
    State(state): State<AppState>,
    AuthUser(user_id): AuthUser,
) -> ApiResult<Json<Vec<LearningProgress>>> {
    let rows = LearningProgress::list_for_user(state.db.pool(), user_id)
        .await
        .map_err(ApiError::Database)?;
    Ok(Json(rows))
}