banyaro/backend/routes/friends.py

"""BAN YARO — Freundschaften"""
import logging
from fastapi import APIRouter, Depends, HTTPException
from database import db
from auth import get_current_user

router = APIRouter()
logger = logging.getLogger(__name__)


@router.get("/")
async def list_friends(user=Depends(get_current_user)):
    uid = user["id"]
    with db() as conn:
        friends = conn.execute("""
            SELECT f.id, f.status, f.created_at,
                   CASE WHEN f.requester_id=? THEN f.addressee_id ELSE f.requester_id END AS friend_id,
                   u.name AS friend_name
            FROM friendships f
            JOIN users u ON u.id = CASE WHEN f.requester_id=? THEN f.addressee_id ELSE f.requester_id END
            WHERE (f.requester_id=? OR f.addressee_id=?) AND f.status='accepted'
            ORDER BY u.name
        """, (uid, uid, uid, uid)).fetchall()

        incoming = conn.execute("""
            SELECT f.id, f.created_at, u.name AS requester_name, u.id AS requester_id
            FROM friendships f
            JOIN users u ON u.id=f.requester_id
            WHERE f.addressee_id=? AND f.status='pending'
            ORDER BY f.created_at DESC
        """, (uid,)).fetchall()

        outgoing = conn.execute("""
            SELECT f.id, f.created_at, u.name AS addressee_name, u.id AS addressee_id
            FROM friendships f
            JOIN users u ON u.id=f.addressee_id
            WHERE f.requester_id=? AND f.status='pending'
            ORDER BY f.created_at DESC
        """, (uid,)).fetchall()

    return {
        "friends":  [dict(r) for r in friends],
        "incoming": [dict(r) for r in incoming],
        "outgoing": [dict(r) for r in outgoing],
    }


@router.get("/search")
async def search_users(q: str = "", user=Depends(get_current_user)):
    if len(q.strip()) < 2:
        return []
    uid = user["id"]
    with db() as conn:
        rows = conn.execute("""
            SELECT u.id, u.name
            FROM users u
            WHERE u.id != ?
              AND u.name LIKE ?
              AND NOT EXISTS (
                SELECT 1 FROM friendships f
                WHERE (f.requester_id=? AND f.addressee_id=u.id)
                   OR (f.requester_id=u.id AND f.addressee_id=?)
              )
            LIMIT 20
        """, (uid, f"%{q.strip()}%", uid, uid)).fetchall()
    return [dict(r) for r in rows]


@router.post("/request/{target_id}", status_code=201)
async def send_request(target_id: int, user=Depends(get_current_user)):
    uid = user["id"]
    if uid == target_id:
        raise HTTPException(400, "Du kannst dich nicht selbst als Freund hinzufügen.")

    with db() as conn:
        if not conn.execute("SELECT 1 FROM users WHERE id=?", (target_id,)).fetchone():
            raise HTTPException(404, "Nutzer nicht gefunden.")

        existing = conn.execute("""
            SELECT id, status FROM friendships
            WHERE (requester_id=? AND addressee_id=?) OR (requester_id=? AND addressee_id=?)
        """, (uid, target_id, target_id, uid)).fetchone()

        if existing:
            if existing["status"] == "accepted":
                raise HTTPException(400, "Ihr seid bereits befreundet.")
            raise HTTPException(400, "Anfrage bereits vorhanden.")

        conn.execute(
            "INSERT INTO friendships (requester_id, addressee_id) VALUES (?,?)",
            (uid, target_id)
        )

    try:
        from routes.push import send_push_to_user
        send_push_to_user(target_id, {
            "title": "Neue Freundschaftsanfrage",
            "body":  f"{user['name']} möchte dein Freund sein.",
            "type":  "friend_request",
            "data":  {"page": "friends"},
        })
    except Exception:
        pass

    return {"ok": True}


@router.post("/{friendship_id}/accept")
async def accept_request(friendship_id: int, user=Depends(get_current_user)):
    uid = user["id"]
    with db() as conn:
        f = conn.execute(
            "SELECT * FROM friendships WHERE id=? AND addressee_id=? AND status='pending'",
            (friendship_id, uid)
        ).fetchone()
        if not f:
            raise HTTPException(404, "Anfrage nicht gefunden.")
        conn.execute(
            "UPDATE friendships SET status='accepted', updated_at=datetime('now') WHERE id=?",
            (friendship_id,)
        )
    return {"ok": True}


@router.post("/{friendship_id}/decline")
async def decline_request(friendship_id: int, user=Depends(get_current_user)):
    uid = user["id"]
    with db() as conn:
        f = conn.execute("""
            SELECT id FROM friendships
            WHERE id=? AND (addressee_id=? OR requester_id=?) AND status='pending'
        """, (friendship_id, uid, uid)).fetchone()
        if not f:
            raise HTTPException(404, "Anfrage nicht gefunden.")
        conn.execute("DELETE FROM friendships WHERE id=?", (friendship_id,))
    return {"ok": True}


@router.delete("/{friend_user_id}")
async def remove_friend(friend_user_id: int, user=Depends(get_current_user)):
    uid = user["id"]
    with db() as conn:
        conn.execute("""
            DELETE FROM friendships
            WHERE status='accepted'
              AND ((requester_id=? AND addressee_id=?) OR (requester_id=? AND addressee_id=?))
        """, (uid, friend_user_id, friend_user_id, uid))
    return {"ok": True}