banyaro/backend/routes/help.py

"""BAN YARO — Hilfe / FAQ Routes"""

from fastapi import APIRouter, Depends, Query
from pydantic import BaseModel, Field
from typing import Optional
from database import db
from auth import get_current_user_optional, require_admin
from cache import ttl_cache

router = APIRouter()


# ------------------------------------------------------------------
# Öffentliche, aktive FAQ-Liste – statisch, 1h TTL-Cache.
# Admin-Pfad (?all=1) wird NICHT gecached.
# Wird bei jedem schreibenden Admin-Endpoint unten invalidiert.
# ------------------------------------------------------------------
@ttl_cache(ttl=3600)
def _load_active_help_articles() -> list[dict]:
    with db() as conn:
        rows = conn.execute(
            "SELECT id, kategorie, frage, antwort, sort_order, aktiv "
            "FROM help_articles "
            "WHERE aktiv = 1 "
            "ORDER BY kategorie, sort_order, id"
        ).fetchall()
    return [dict(r) for r in rows]


# ------------------------------------------------------------------
# Schemas
# ------------------------------------------------------------------
class ArticleCreate(BaseModel):
    kategorie:  str           = Field(..., max_length=100)
    frage:      str           = Field(..., min_length=3, max_length=500)
    antwort:    str           = Field(..., min_length=3, max_length=10000)
    sort_order: int           = 0
    aktiv:      int           = 1


class ArticleUpdate(BaseModel):
    kategorie:  Optional[str] = Field(None, max_length=100)
    frage:      Optional[str] = Field(None, max_length=500)
    antwort:    Optional[str] = Field(None, max_length=10000)
    sort_order: Optional[int] = None
    aktiv:      Optional[int] = None


# ------------------------------------------------------------------
# GET /api/help   — öffentlich (nur aktive); ?all=1 für Admins
# ------------------------------------------------------------------
@router.get("")
def get_help(
    all: int = Query(0),
    user=Depends(get_current_user_optional),
):
    is_admin = user and user.get("rolle") == "admin"
    show_all = all == 1 and is_admin

    if show_all:
        with db() as conn:
            rows = conn.execute(
                "SELECT id, kategorie, frage, antwort, sort_order, aktiv "
                "FROM help_articles "
                "ORDER BY kategorie, sort_order, id"
            ).fetchall()
        return [dict(r) for r in rows]

    # Öffentliche, aktive Artikel kommen aus dem Cache
    return _load_active_help_articles()


# ------------------------------------------------------------------
# POST /api/help   — Admin: neuen Artikel anlegen
# ------------------------------------------------------------------
@router.post("", status_code=201)
def create_article(body: ArticleCreate, admin=Depends(require_admin)):
    with db() as conn:
        cur = conn.execute(
            "INSERT INTO help_articles (kategorie, frage, antwort, sort_order, aktiv) "
            "VALUES (?, ?, ?, ?, ?)",
            (body.kategorie, body.frage, body.antwort, body.sort_order, body.aktiv),
        )
    _load_active_help_articles.cache_clear()
    return {"ok": True, "id": cur.lastrowid}


# ------------------------------------------------------------------
# PATCH /api/help/{article_id}   — Admin: Artikel bearbeiten
# ------------------------------------------------------------------
@router.patch("/{article_id}")
def update_article(article_id: int, body: ArticleUpdate, admin=Depends(require_admin)):
    updates = {k: v for k, v in body.model_dump(exclude_none=True).items()}
    if not updates:
        return {"ok": True}
    set_clause = ", ".join(f"{k}=?" for k in updates)
    with db() as conn:
        conn.execute(
            f"UPDATE help_articles SET {set_clause} WHERE id=?",
            (*updates.values(), article_id),
        )
    _load_active_help_articles.cache_clear()
    return {"ok": True}


# ------------------------------------------------------------------
# DELETE /api/help/{article_id}   — Admin: Artikel löschen
# ------------------------------------------------------------------
@router.delete("/{article_id}")
def delete_article(article_id: int, admin=Depends(require_admin)):
    with db() as conn:
        conn.execute("DELETE FROM help_articles WHERE id=?", (article_id,))
    _load_active_help_articles.cache_clear()
    return {"ok": True}