banyaro/backend/routes/help.py

"""BAN YARO — Hilfe / FAQ Routes"""

from fastapi import APIRouter, Depends, Query
from pydantic import BaseModel
from typing import Optional
from database import db
from auth import get_current_user_optional, require_admin

router = APIRouter()


# ------------------------------------------------------------------
# Schemas
# ------------------------------------------------------------------
class ArticleCreate(BaseModel):
    kategorie:  str
    frage:      str
    antwort:    str
    sort_order: int = 0
    aktiv:      int = 1


class ArticleUpdate(BaseModel):
    kategorie:  Optional[str] = None
    frage:      Optional[str] = None
    antwort:    Optional[str] = None
    sort_order: Optional[int] = None
    aktiv:      Optional[int] = None


# ------------------------------------------------------------------
# GET /api/help   — öffentlich (nur aktive); ?all=1 für Admins
# ------------------------------------------------------------------
@router.get("")
def get_help(
    all: int = Query(0),
    user=Depends(get_current_user_optional),
):
    is_admin = user and user.get("rolle") == "admin"
    show_all = all == 1 and is_admin

    with db() as conn:
        if show_all:
            rows = conn.execute(
                "SELECT id, kategorie, frage, antwort, sort_order, aktiv "
                "FROM help_articles "
                "ORDER BY kategorie, sort_order, id"
            ).fetchall()
        else:
            rows = conn.execute(
                "SELECT id, kategorie, frage, antwort, sort_order, aktiv "
                "FROM help_articles "
                "WHERE aktiv = 1 "
                "ORDER BY kategorie, sort_order, id"
            ).fetchall()

    return [dict(r) for r in rows]


# ------------------------------------------------------------------
# POST /api/help   — Admin: neuen Artikel anlegen
# ------------------------------------------------------------------
@router.post("", status_code=201)
def create_article(body: ArticleCreate, admin=Depends(require_admin)):
    with db() as conn:
        cur = conn.execute(
            "INSERT INTO help_articles (kategorie, frage, antwort, sort_order, aktiv) "
            "VALUES (?, ?, ?, ?, ?)",
            (body.kategorie, body.frage, body.antwort, body.sort_order, body.aktiv),
        )
    return {"ok": True, "id": cur.lastrowid}


# ------------------------------------------------------------------
# PATCH /api/help/{article_id}   — Admin: Artikel bearbeiten
# ------------------------------------------------------------------
@router.patch("/{article_id}")
def update_article(article_id: int, body: ArticleUpdate, admin=Depends(require_admin)):
    updates = {k: v for k, v in body.model_dump(exclude_none=True).items()}
    if not updates:
        return {"ok": True}
    set_clause = ", ".join(f"{k}=?" for k in updates)
    with db() as conn:
        conn.execute(
            f"UPDATE help_articles SET {set_clause} WHERE id=?",
            (*updates.values(), article_id),
        )
    return {"ok": True}


# ------------------------------------------------------------------
# DELETE /api/help/{article_id}   — Admin: Artikel löschen
# ------------------------------------------------------------------
@router.delete("/{article_id}")
def delete_article(article_id: int, admin=Depends(require_admin)):
    with db() as conn:
        conn.execute("DELETE FROM help_articles WHERE id=?", (article_id,))
    return {"ok": True}