flowdeck/app/routers/notifications.py

"""FlowDeck — Notifications API (v4.9.0 collaboration)."""
from __future__ import annotations

import logging

from fastapi import APIRouter, Body, HTTPException, Request

from app.auth.session import SessionManager
from app.db import get_conn

logger = logging.getLogger(__name__)
router = APIRouter(tags=["notifications"], prefix="/api/notifications")


def _current_user(request: Request) -> dict:
    user = SessionManager.decode_session(request.cookies.get("flowdeck_session", ""))
    if not user or not user.get("id"):
        raise HTTPException(status_code=401, detail="Authentication required")
    return user


@router.get("")
def list_notifications(request: Request, limit: int = 50):
    """List the current user's notifications, newest first."""
    user = _current_user(request)
    with get_conn() as conn:
        rows = conn.execute(
            """SELECT n.*, a.login AS actor_login, a.full_name AS actor_name,
                      a.avatar_url AS actor_avatar, a.avatar_color AS actor_color
               FROM notifications n
               LEFT JOIN users a ON n.actor_id = a.id
               WHERE n.user_id=?
               ORDER BY n.created_at DESC, n.id DESC LIMIT ?""",
            (user["id"], limit),
        ).fetchall()
        unread = conn.execute(
            "SELECT COUNT(*) AS c FROM notifications WHERE user_id=? AND is_read=0",
            (user["id"],),
        ).fetchone()["c"]
    return {
        "notifications": [dict(r) for r in rows],
        "unread": unread,
    }


@router.get("/unread-count")
def unread_count(request: Request):
    """Unread count for the topbar badge."""
    user = _current_user(request)
    with get_conn() as conn:
        c = conn.execute(
            "SELECT COUNT(*) AS c FROM notifications WHERE user_id=? AND is_read=0",
            (user["id"],),
        ).fetchone()["c"]
    return {"unread": c}


@router.post("/read")
def mark_read(request: Request, body: dict = Body(default={})):
    """Mark one notification as read (id) or all (id omitted)."""
    user = _current_user(request)
    nid = body.get("id")
    with get_conn() as conn:
        if nid:
            conn.execute(
                "UPDATE notifications SET is_read=1 WHERE id=? AND user_id=?",
                (nid, user["id"]),
            )
        else:
            conn.execute(
                "UPDATE notifications SET is_read=1 WHERE user_id=?",
                (user["id"],),
            )
        conn.commit()
    return {"status": "ok"}


@router.post("/read-all")
async def mark_all_read(request: Request):
    """Mark all notifications as read."""
    return await mark_read(request)


@router.get("/prefs")
def get_prefs(request: Request):
    """Return the current user's notification email preferences."""
    user = _current_user(request)
    from app.services import notifications as notif
    return {"prefs": notif.get_user_prefs(user["id"])}


@router.post("/prefs")
def set_prefs(request: Request, body: dict = Body(default={})):
    """Update the current user's notification email preferences."""
    user = _current_user(request)
    from app.services import notifications as notif
    prefs = notif.get_user_prefs(user["id"])
    for key in ("comments", "mentions", "reminders", "assignments"):
        if key in body:
            prefs[key] = bool(body[key])
    notif.set_user_prefs(user["id"], prefs)
    return {"status": "ok", "prefs": prefs}


@router.get("/timezone")
def get_timezone(request: Request):
    """Return the current user's IANA timezone ('' = UTC)."""
    user = _current_user(request)
    with get_conn() as conn:
        row = conn.execute("SELECT timezone FROM users WHERE id=?", (user["id"],)).fetchone()
    tz = (row["timezone"] if row and "timezone" in row.keys() else "") or ""
    from app.services.recurrence import common_timezones
    return {"timezone": tz, "zones": common_timezones()}


@router.post("/timezone")
def set_timezone(request: Request, body: dict = Body(default={})):
    """Update the current user's IANA timezone (empty string = UTC)."""
    user = _current_user(request)
    tz = (body.get("timezone") or "").strip()
    from app.services.recurrence import is_valid_timezone
    if tz and not is_valid_timezone(tz):
        raise HTTPException(status_code=400, detail=f"Unknown timezone '{tz}'")
    with get_conn() as conn:
        conn.execute("UPDATE users SET timezone=? WHERE id=?", (tz, user["id"]))
        conn.commit()
    return {"status": "ok", "timezone": tz}


@router.get("/users/search")
def search_users(request: Request, q: str = ""):
    """User autocomplete for @mentions."""
    _current_user(request)
    q = (q or "").strip()
    with get_conn() as conn:
        if q:
            like = f"%{q}%"
            rows = conn.execute(
                """SELECT id, login, full_name, avatar_url, avatar_color
                   FROM users WHERE login LIKE ? OR full_name LIKE ?
                   ORDER BY (login=? OR full_name=?) DESC, login LIMIT 20""",
                (like, like, q, q),
            ).fetchall()
        else:
            rows = conn.execute(
                """SELECT id, login, full_name, avatar_url, avatar_color
                   FROM users ORDER BY login LIMIT 20"""
            ).fetchall()
    return {"users": [dict(r) for r in rows]}