""" Heaps API router """ import os import shutil import logging from typing import Optional, Literal from fastapi import APIRouter, Depends, HTTPException from pydantic import BaseModel from sqlalchemy import select, func, update, insert, delete from sqlalchemy.ext.asyncio import AsyncSession from app.database import get_db from app.models import Heap, Photo, Folder from app.models.folders import SourceRoot from app.models.heaps import heap_photos from app.models.user import User from app.dependencies import get_current_user, get_user_heap, get_user_or_shared_heap logger = logging.getLogger(__name__) router = APIRouter() # ── Schemas ─────────────────────────────────────────────────────────────── class HeapCreate(BaseModel): name: str class HeapUpdate(BaseModel): name: Optional[str] = None is_active: Optional[bool] = None class HeapPhotosBody(BaseModel): photo_ids: list[str] class HeapConvertBody(BaseModel): target_id: str # folder id OR source root id mode: Literal['move', 'copy'] = 'move' delete_heap: bool = False # Optional subfolder name to create inside the target. If provided, the # actual destination is target_dir/subfolder_name (created if missing). # Path separators and dot-segments are rejected. subfolder_name: Optional[str] = None # ── Endpoints ───────────────────────────────────────────────────────────── @router.get("") async def list_heaps( db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """List all heaps with photo counts.""" # LEFT JOIN heap_photos and group so we can return counts in one query. count_subq = ( select( heap_photos.c.heap_id, func.count(heap_photos.c.photo_id).label("photo_count"), ) .group_by(heap_photos.c.heap_id) .subquery() ) stmt = ( select(Heap, count_subq.c.photo_count) .outerjoin(count_subq, Heap.id == count_subq.c.heap_id) .where(Heap.user_id == current_user.id) .order_by(Heap.created_at.asc()) ) result = await db.execute(stmt) rows = result.all() return [ { "id": h.id, "name": h.name, "is_active": bool(h.is_active), "created_at": h.created_at, "updated_at": h.updated_at, "photo_count": int(count or 0), } for h, count in rows ] @router.post("", status_code=201) async def create_heap( body: HeapCreate, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """Create a new heap.""" name = (body.name or "").strip() if not name: raise HTTPException(status_code=400, detail="Heap name is required") heap = Heap(name=name, user_id=current_user.id) db.add(heap) await db.commit() await db.refresh(heap) return { "id": heap.id, "name": heap.name, "is_active": bool(heap.is_active), "created_at": heap.created_at, "updated_at": heap.updated_at, "photo_count": 0, } @router.patch("/{heap_id}") async def update_heap( heap_id: str, body: HeapUpdate, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """Rename a heap and/or toggle active state. Setting is_active=true on one heap deactivates all others (single-active invariant).""" heap = await get_user_heap(heap_id, current_user, db) if body.name is not None: name = body.name.strip() if not name: raise HTTPException(status_code=400, detail="Heap name is required") heap.name = name if body.is_active is not None: if body.is_active: # Clear active flag on all other heaps for this user await db.execute( update(Heap) .where(Heap.user_id == current_user.id) .values(is_active=False) ) heap.is_active = True else: heap.is_active = False await db.commit() await db.refresh(heap) return { "id": heap.id, "name": heap.name, "is_active": bool(heap.is_active), "created_at": heap.created_at, "updated_at": heap.updated_at, } @router.post("/{heap_id}/duplicate", status_code=201) async def duplicate_heap( heap_id: str, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """Create a new heap with the same membership as an existing one. The new heap is named "{original} (copy)" and is never the active target — duplicating shouldn't quietly steal the user's T-key destination. """ source = await get_user_heap(heap_id, current_user, db) new_heap = Heap(name=f"{source.name} (copy)", is_active=False, user_id=current_user.id) db.add(new_heap) await db.flush() # populate new_heap.id without committing yet # Bulk-copy the membership rows. SELECT photo_id FROM heap_photos WHERE # heap_id = :src — INSERT each into the new heap. Done as a single # INSERT...SELECT to avoid round-tripping ids through Python. member_rows = await db.execute( select(heap_photos.c.photo_id).where(heap_photos.c.heap_id == heap_id) ) photo_ids = [row[0] for row in member_rows.all()] if photo_ids: await db.execute( insert(heap_photos), [{"heap_id": new_heap.id, "photo_id": pid} for pid in photo_ids], ) await db.commit() await db.refresh(new_heap) return { "id": new_heap.id, "name": new_heap.name, "is_active": False, "photo_count": len(photo_ids), "created_at": new_heap.created_at, "updated_at": new_heap.updated_at, } @router.delete("/{heap_id}", status_code=204) async def delete_heap( heap_id: str, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """Delete a heap. Photos themselves are unaffected — only the membership rows in heap_photos cascade-delete.""" heap = await get_user_heap(heap_id, current_user, db) await db.delete(heap) await db.commit() return None @router.get("/{heap_id}/photo_ids") async def get_heap_photo_ids( heap_id: str, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """Return just the photo ids belonging to a heap. Used by the frontend to maintain a fast client-side membership lookup for the active heap (for the basket affordance on thumbnails) without fetching full photo records.""" await get_user_or_shared_heap(heap_id, current_user, db) result = await db.execute( select(heap_photos.c.photo_id).where(heap_photos.c.heap_id == heap_id) ) return [row[0] for row in result.all()] @router.post("/{heap_id}/photos") async def add_photos_to_heap( heap_id: str, body: HeapPhotosBody, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """Add photos to a heap. Idempotent: re-adding existing members is a no-op (handled by an INSERT OR IGNORE-style filter on duplicates). Shared users with write permission can add their own photos.""" _heap, permission = await get_user_or_shared_heap(heap_id, current_user, db) if permission == "read": raise HTTPException(status_code=403, detail="Read-only access to this heap") if not body.photo_ids: return {"status": "success", "added": 0} # Find which ids are already members so we don't violate the PK. existing = await db.execute( select(heap_photos.c.photo_id).where( heap_photos.c.heap_id == heap_id, heap_photos.c.photo_id.in_(body.photo_ids), ) ) existing_ids = {row[0] for row in existing.all()} new_ids = [pid for pid in body.photo_ids if pid not in existing_ids] if new_ids: await db.execute( insert(heap_photos), [{"heap_id": heap_id, "photo_id": pid} for pid in new_ids], ) await db.commit() return {"status": "success", "added": len(new_ids), "already_present": len(existing_ids)} @router.post("/{heap_id}/convert") async def convert_heap_to_folder( heap_id: str, body: HeapConvertBody, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """Convert a heap into a folder by moving (or copying) every member photo into the target directory. Optionally deletes the heap row at the end. target_id may be a Folder id or a SourceRoot id (matches the /photos/move convention so the same dropdown can populate it). """ heap = await get_user_heap(heap_id, current_user, db) # Resolve target_id → (target_dir, target_folder) sr_check = await db.execute( select(SourceRoot).where(SourceRoot.id == body.target_id) ) source_root = sr_check.scalar_one_or_none() if source_root is not None: parent_dir = source_root.path parent_source_root_id = source_root.id else: folder_check = await db.execute( select(Folder).where(Folder.id == body.target_id) ) parent_folder = folder_check.scalar_one_or_none() if parent_folder is None: raise HTTPException(status_code=404, detail="Target folder not found") parent_dir = parent_folder.path parent_source_root_id = parent_folder.source_root_id if not os.path.isdir(parent_dir): raise HTTPException( status_code=400, detail=f"Target parent does not exist: {parent_dir}", ) # Resolve target_dir, creating an optional subfolder if requested. if body.subfolder_name is not None: sub = body.subfolder_name.strip() if not sub: raise HTTPException(status_code=400, detail="Subfolder name cannot be empty") if '/' in sub or '\\' in sub or sub in ('.', '..'): raise HTTPException(status_code=400, detail="Invalid subfolder name") target_dir = os.path.join(parent_dir, sub) if not os.path.exists(target_dir): try: os.makedirs(target_dir) except OSError as e: raise HTTPException( status_code=500, detail=f"Failed to create subfolder: {e}", ) elif not os.path.isdir(target_dir): raise HTTPException( status_code=400, detail=f"{target_dir} exists but is not a directory", ) else: target_dir = parent_dir # Ensure a Folder row for the target, reusing the scanner helper so # path normalization + dedupe stay consistent. from app.tasks.scan import get_or_create_folder target_folder = await get_or_create_folder(db, target_dir, parent_source_root_id) # Fetch the heap's photos via the join table. photo_result = await db.execute( select(Photo) .join(heap_photos, Photo.id == heap_photos.c.photo_id) .where(heap_photos.c.heap_id == heap_id) ) photos = photo_result.scalars().all() moved = 0 copied = 0 errors: list[dict] = [] def _unique_target_name(directory: str, filename: str) -> Optional[str]: if not os.path.exists(os.path.join(directory, filename)): return filename stem, ext = os.path.splitext(filename) for i in range(1, 100): suffix = '' if i == 1 else f' {i}' candidate = f"{stem} (copy{suffix}){ext}" if not os.path.exists(os.path.join(directory, candidate)): return candidate return None for photo in photos: if not os.path.exists(photo.filepath): errors.append({"id": photo.id, "error": "source file missing"}) continue if body.mode == 'move': if photo.folder_id == target_folder.id: continue # already there new_path = os.path.join(target_dir, photo.filename) if os.path.exists(new_path): errors.append({"id": photo.id, "error": f"name collision: {photo.filename}"}) continue try: shutil.move(photo.filepath, new_path) except OSError as e: errors.append({"id": photo.id, "error": str(e)}) continue photo.filepath = new_path photo.folder_id = target_folder.id moved += 1 else: # copy new_name = _unique_target_name(target_dir, photo.filename) if new_name is None: errors.append({"id": photo.id, "error": "too many name collisions"}) continue new_path = os.path.join(target_dir, new_name) try: shutil.copy2(photo.filepath, new_path) except OSError as e: errors.append({"id": photo.id, "error": str(e)}) continue new_photo = Photo( filepath=new_path, filename=new_name, folder_id=target_folder.id, file_hash=photo.file_hash, media_type=photo.media_type, original_format=photo.original_format, width=photo.width, height=photo.height, file_size=photo.file_size, taken_at=photo.taken_at, taken_at_source=photo.taken_at_source, user_title=photo.user_title, user_notes=photo.user_notes, rating=photo.rating, color_label=photo.color_label, exif_json=photo.exif_json, is_duplicate=True, processing_status='pending', ) db.add(new_photo) copied += 1 if body.delete_heap: await db.delete(heap) await db.commit() return { "status": "success", "mode": body.mode, "moved": moved, "copied": copied, "errors": errors, "heap_deleted": body.delete_heap, } @router.delete("/{heap_id}/photos") async def remove_photos_from_heap( heap_id: str, body: HeapPhotosBody, db: AsyncSession = Depends(get_db), current_user: User = Depends(get_current_user), ): """Remove photos from a heap. Removing a non-member is a no-op. Shared users with write permission can remove photos.""" _heap, permission = await get_user_or_shared_heap(heap_id, current_user, db) if permission == "read": raise HTTPException(status_code=403, detail="Read-only access to this heap") if not body.photo_ids: return {"status": "success", "removed": 0} res = await db.execute( delete(heap_photos).where( heap_photos.c.heap_id == heap_id, heap_photos.c.photo_id.in_(body.photo_ids), ) ) await db.commit() return {"status": "success", "removed": res.rowcount or 0}