banyaro/backend/routes/expenses.py

"""BAN YARO — Ausgaben-Tracker Routes"""

import logging
from datetime import date
from fastapi import APIRouter, Depends, HTTPException, Query
from pydantic import BaseModel
from typing import Optional
from database import db
from auth import get_current_user

router = APIRouter()
logger = logging.getLogger(__name__)

KATEGORIEN = {"tierarzt", "futter", "zubehoer", "versicherung", "sitter", "sonstiges"}


# ------------------------------------------------------------------
# Schemas
# ------------------------------------------------------------------
class ExpenseCreate(BaseModel):
    dog_id:    Optional[int]  = None
    kategorie: str
    betrag:    float
    datum:     str
    notiz:     Optional[str]  = None


class ExpenseUpdate(BaseModel):
    dog_id:    Optional[int]   = None
    kategorie: Optional[str]   = None
    betrag:    Optional[float] = None
    datum:     Optional[str]   = None
    notiz:     Optional[str]   = None


def _serialize(row) -> dict:
    return dict(row)


# ------------------------------------------------------------------
# GET /api/expenses/summary — Monats- und Jahressummen
# WICHTIG: Diese Route muss VOR /{id} stehen!
# ------------------------------------------------------------------
@router.get("/summary")
async def get_summary(
    dog_id: Optional[int] = Query(default=None),
    user=Depends(get_current_user),
):
    today = date.today()
    monat_prefix = today.strftime("%Y-%m")
    jahr_prefix  = today.strftime("%Y")

    extra_cond = ""
    extra_params: list = []
    if dog_id is not None:
        extra_cond = " AND dog_id=?"
        extra_params = [dog_id]

    with db() as conn:
        # Monats-Summen pro Kategorie
        rows_monat = conn.execute(
            f"""SELECT kategorie, COALESCE(SUM(betrag),0) AS summe
                FROM expenses
                WHERE user_id=? AND datum LIKE ?{extra_cond}
                GROUP BY kategorie""",
            [user["id"], f"{monat_prefix}%"] + extra_params,
        ).fetchall()

        # Jahres-Summen pro Kategorie
        rows_jahr = conn.execute(
            f"""SELECT kategorie, COALESCE(SUM(betrag),0) AS summe
                FROM expenses
                WHERE user_id=? AND datum LIKE ?{extra_cond}
                GROUP BY kategorie""",
            [user["id"], f"{jahr_prefix}%"] + extra_params,
        ).fetchall()

    monat = {r["kategorie"]: round(r["summe"], 2) for r in rows_monat}
    jahr  = {r["kategorie"]: round(r["summe"], 2) for r in rows_jahr}

    gesamt_monat = round(sum(monat.values()), 2)
    gesamt_jahr  = round(sum(jahr.values()), 2)

    return {
        "monat":        monat,
        "jahr":         jahr,
        "gesamt_monat": gesamt_monat,
        "gesamt_jahr":  gesamt_jahr,
    }


# ------------------------------------------------------------------
# GET /api/expenses — Liste mit optionalen Filtern
# ------------------------------------------------------------------
@router.get("")
async def list_expenses(
    dog_id:  Optional[int] = Query(default=None),
    von:     Optional[str] = Query(default=None),
    bis:     Optional[str] = Query(default=None),
    limit:   int           = Query(default=100, le=500),
    offset:  int           = Query(default=0),
    user=Depends(get_current_user),
):
    conditions = ["e.user_id=?"]
    params: list = [user["id"]]

    if dog_id is not None:
        conditions.append("e.dog_id=?")
        params.append(dog_id)
    if von:
        conditions.append("e.datum >= ?")
        params.append(von)
    if bis:
        conditions.append("e.datum <= ?")
        params.append(bis)

    where = " AND ".join(conditions)
    params += [limit, offset]

    with db() as conn:
        rows = conn.execute(
            f"""SELECT e.*, d.name AS dog_name
                FROM expenses e
                LEFT JOIN dogs d ON d.id = e.dog_id
                WHERE {where}
                ORDER BY e.datum DESC, e.id DESC
                LIMIT ? OFFSET ?""",
            params,
        ).fetchall()

    return [_serialize(r) for r in rows]


# ------------------------------------------------------------------
# POST /api/expenses — neuer Eintrag
# ------------------------------------------------------------------
@router.post("", status_code=201)
async def create_expense(data: ExpenseCreate, user=Depends(get_current_user)):
    if data.kategorie not in KATEGORIEN:
        raise HTTPException(400, f"Ungültige Kategorie: {data.kategorie}")
    if data.betrag <= 0:
        raise HTTPException(400, "Betrag muss größer als 0 sein.")

    with db() as conn:
        # dog_id prüfen — muss dem User gehören
        if data.dog_id is not None:
            dog = conn.execute(
                "SELECT id FROM dogs WHERE id=? AND user_id=?",
                (data.dog_id, user["id"]),
            ).fetchone()
            if not dog:
                raise HTTPException(404, "Hund nicht gefunden.")

        conn.execute(
            """INSERT INTO expenses (user_id, dog_id, kategorie, betrag, datum, notiz)
               VALUES (?, ?, ?, ?, ?, ?)""",
            (user["id"], data.dog_id, data.kategorie, data.betrag, data.datum, data.notiz),
        )
        row = conn.execute(
            "SELECT * FROM expenses WHERE user_id=? ORDER BY id DESC LIMIT 1",
            (user["id"],),
        ).fetchone()

    return _serialize(row)


# ------------------------------------------------------------------
# PATCH /api/expenses/{id} — bearbeiten
# ------------------------------------------------------------------
@router.patch("/{expense_id}")
async def update_expense(
    expense_id: int, data: ExpenseUpdate, user=Depends(get_current_user)
):
    with db() as conn:
        row = conn.execute(
            "SELECT * FROM expenses WHERE id=? AND user_id=?",
            (expense_id, user["id"]),
        ).fetchone()
        if not row:
            raise HTTPException(404, "Eintrag nicht gefunden.")

        updates = {}
        if data.kategorie is not None:
            if data.kategorie not in KATEGORIEN:
                raise HTTPException(400, f"Ungültige Kategorie: {data.kategorie}")
            updates["kategorie"] = data.kategorie
        if data.betrag is not None:
            if data.betrag <= 0:
                raise HTTPException(400, "Betrag muss größer als 0 sein.")
            updates["betrag"] = data.betrag
        if data.datum is not None:
            updates["datum"] = data.datum
        if data.notiz is not None:
            updates["notiz"] = data.notiz
        if data.dog_id is not None:
            dog = conn.execute(
                "SELECT id FROM dogs WHERE id=? AND user_id=?",
                (data.dog_id, user["id"]),
            ).fetchone()
            if not dog:
                raise HTTPException(404, "Hund nicht gefunden.")
            updates["dog_id"] = data.dog_id

        if not updates:
            return _serialize(row)

        set_clause = ", ".join(f"{k}=?" for k in updates)
        values = list(updates.values()) + [expense_id]
        conn.execute(f"UPDATE expenses SET {set_clause} WHERE id=?", values)
        row = conn.execute("SELECT * FROM expenses WHERE id=?", (expense_id,)).fetchone()

    return _serialize(row)


# ------------------------------------------------------------------
# DELETE /api/expenses/{id} — löschen
# ------------------------------------------------------------------
@router.delete("/{expense_id}", status_code=204)
async def delete_expense(expense_id: int, user=Depends(get_current_user)):
    with db() as conn:
        row = conn.execute(
            "SELECT id FROM expenses WHERE id=? AND user_id=?",
            (expense_id, user["id"]),
        ).fetchone()
        if not row:
            raise HTTPException(404, "Eintrag nicht gefunden.")
        conn.execute("DELETE FROM expenses WHERE id=?", (expense_id,))
    return None