MeBox/internal/handler/handler.go

// Package handler wires the HTTP routes to the service container.
//
// All routes are mounted under /api/* (matching the original MediaStation
// surface) so the frontend dev-server can proxy a single prefix.
package handler

import (
	"github.com/gin-gonic/gin"
	"go.uber.org/zap"

	"github.com/ShukeBta/MediaStationGo/internal/config"
	"github.com/ShukeBta/MediaStationGo/internal/middleware"
	"github.com/ShukeBta/MediaStationGo/internal/service"
)

// Register attaches every API route to the engine.
func Register(r *gin.Engine, cfg *config.Config, log *zap.Logger, svc *service.Container) {
	api := r.Group("/api")
	{
		api.GET("/health", healthCheck)
		api.GET("/version", versionInfo)

		// Public auth.
		auth := api.Group("/auth")
		{
			auth.POST("/login", loginHandler(svc))
			auth.POST("/register", registerHandler(svc))
			auth.POST("/refresh", refreshHandler(svc))
		}

		// Authenticated endpoints.
		authed := api.Group("/")
		authed.Use(middleware.AuthRequired(cfg.Secrets.JWTSecret))
		{
			authed.GET("/me", meHandler(svc))
			authed.PATCH("/me", updateProfileHandler(svc))
			authed.POST("/me/password", changePasswordHandler(svc))
			authed.POST("/me/logout", logoutHandler(svc))

			// Permissions.
			authed.GET("/auth/permissions", getMyPermissionsHandler(svc))

			// Libraries.
			authed.GET("/libraries", listLibrariesHandler(svc))
			authed.POST("/libraries", middleware.AdminRequired(), createLibraryHandler(svc))
			authed.DELETE("/libraries/:id", middleware.AdminRequired(), deleteLibraryHandler(svc))
			authed.POST("/libraries/:id/scan", middleware.AdminRequired(), scanLibraryHandler(svc))
			authed.POST("/libraries/:id/scrape", middleware.AdminRequired(), scrapeLibraryHandler(svc))

			authed.GET("/libraries/:id/media", listMediaHandler(svc))
			authed.GET("/libraries/:id/seasons", listSeasonsHandler(svc))

			// Media.
			authed.GET("/media/:id", getMediaHandler(svc))
			authed.GET("/media", searchMediaHandler(svc))
			authed.POST("/media/:id/scrape", middleware.AdminRequired(), scrapeOneHandler(svc))
			authed.POST("/media/:id/probe", middleware.AdminRequired(), reprobeHandler(svc))
			authed.DELETE("/media/:id", middleware.AdminRequired(), deleteMediaHandler(svc))
			authed.POST("/media/:id/restore", middleware.AdminRequired(), restoreMediaHandler(svc))
			authed.DELETE("/media/:id/purge", middleware.AdminRequired(), purgeMediaHandler(svc))
			authed.GET("/media/:id/subtitles", listSubtitlesHandler(svc))
			authed.GET("/subtitles/:id", serveSubtitleHandler(svc))
			authed.POST("/media/:id/nfo", middleware.AdminRequired(), exportNFOHandler(svc))
			authed.POST("/libraries/:id/nfo", middleware.AdminRequired(), exportLibraryNFOHandler(svc))

			// Streaming.
			authed.GET("/stream/:id", streamHandler(svc))
			authed.GET("/hls/:id/index.m3u8", hlsPlaylistHandler(svc))
			authed.GET("/hls/:id/:seg", hlsSegmentHandler(svc))
			authed.DELETE("/hls/:id", stopTranscodeHandler(svc))

			// Image proxy (URL passed as ?url=...).
			authed.GET("/img", imageProxyHandler(svc))

			// History / favourites / playlists.
			authed.GET("/history", recentHistoryHandler(svc))
			authed.POST("/history", recordProgressHandler(svc))

			authed.GET("/favourites", listFavouritesHandler(svc))
			authed.POST("/favourites/:id", toggleFavouriteHandler(svc))

			authed.GET("/playlists", listPlaylistsHandler(svc))
			authed.POST("/playlists", createPlaylistHandler(svc))
			authed.GET("/playlists/:id", getPlaylistHandler(svc))
			authed.POST("/playlists/:id/items", addPlaylistItemHandler(svc))
			authed.DELETE("/playlists/:id/items/:media_id", removePlaylistItemHandler(svc))
			authed.DELETE("/playlists/:id", deletePlaylistHandler(svc))

			// Downloads.
			authed.GET("/downloads", listDownloadsHandler(svc))
			authed.POST("/downloads", addDownloadHandler(svc))
			authed.DELETE("/downloads/:hash", middleware.AdminRequired(), deleteDownloadHandler(svc))
			authed.POST("/downloads/reload", middleware.AdminRequired(), reloadDownloadConfigHandler(svc))

			// Subscriptions.
			authed.GET("/subscriptions", listSubscriptionsHandler(svc))
			authed.POST("/subscriptions", createSubscriptionHandler(svc))
			authed.DELETE("/subscriptions/:id", deleteSubscriptionHandler(svc))
			authed.POST("/subscriptions/:id/run", runSubscriptionHandler(svc))

			// Stats / dashboard.
			authed.GET("/stats", statsHandler(svc))
			authed.GET("/tasks", tasksHandler(svc))

			// Discover (TMDb trending / popular).
			authed.GET("/discover/trending", trendingHandler(svc))
			authed.GET("/discover/popular", popularHandler(svc))

			// AI.
			authed.GET("/ai/status", aiStatusHandler(svc))
			authed.POST("/ai/search", smartSearchHandler(svc))
			authed.GET("/ai/recommend", aiRecommendHandler(svc))

			// File browser (used by the library-path picker).
			authed.GET("/files", browseFilesHandler(svc))

			// Disk usage breakdown.
			authed.GET("/storage", storageHandler(svc))

			// DLNA discovery + cast.
			authed.GET("/dlna/devices", dlnaListHandler(svc))
			authed.POST("/dlna/cast", dlnaCastHandler(svc))

			// STRM (URL-as-file).
			authed.PUT("/media/:id/strm", middleware.AdminRequired(), setSTRMHandler(svc))
			authed.DELETE("/media/:id/strm", middleware.AdminRequired(), clearSTRMHandler(svc))
			authed.POST("/strm/import", middleware.AdminRequired(), importSTRMHandler(svc))

			// Duplicate finder.
			authed.POST("/duplicates/scan", middleware.AdminRequired(), detectDuplicatesHandler(svc))
			authed.POST("/duplicates/unmark", middleware.AdminRequired(), unmarkDuplicatesHandler(svc))

			// Recycle bin.
			authed.GET("/recycle", middleware.AdminRequired(), listRecycleHandler(svc))

			authed.GET("/ws", wsHandler(svc))

			// SSE event stream.
			authed.GET("/events", sseHandler(svc))

			// Download clients.
			authed.GET("/download-clients", listDownloadClientsHandler(svc))
			authed.POST("/download-clients", middleware.AdminRequired(), createDownloadClientHandler(svc))
			authed.GET("/download-clients/:id", getDownloadClientHandler(svc))
			authed.PUT("/download-clients/:id", middleware.AdminRequired(), updateDownloadClientHandler(svc))
			authed.DELETE("/download-clients/:id", middleware.AdminRequired(), deleteDownloadClientHandler(svc))
			authed.POST("/download-clients/:id/test", middleware.AdminRequired(), testDownloadClientHandler(svc))

			// Notify channels.
			authed.GET("/notify-channels", listNotifyChannelsHandler(svc))
			authed.GET("/notify-channels/types", getNotifyChannelTypesHandler(svc))
			authed.POST("/notify-channels", middleware.AdminRequired(), createNotifyChannelHandler(svc))
			authed.GET("/notify-channels/:id", getNotifyChannelHandler(svc))
			authed.PUT("/notify-channels/:id", middleware.AdminRequired(), updateNotifyChannelHandler(svc))
			authed.DELETE("/notify-channels/:id", middleware.AdminRequired(), deleteNotifyChannelHandler(svc))
			authed.POST("/notify-channels/:id/test", middleware.AdminRequired(), testNotifyChannelHandler(svc))

			// Scheduler.
			authed.GET("/scheduler/tasks", schedulerListTasksHandler(svc))
			authed.POST("/scheduler/tasks/:id/run", middleware.AdminRequired(), schedulerRunTaskHandler(svc))
			authed.GET("/scheduler/status", schedulerGetStatusHandler(svc))

			// Sites (PT 站点管理).
			siteHandler := NewSiteHandler(svc)
			authed.GET("/sites", siteHandler.ListSites)
			authed.GET("/sites/types", siteHandler.GetSiteTypes)
			authed.GET("/sites/auth-types", siteHandler.GetAuthTypes)
			authed.POST("/sites", middleware.AdminRequired(), siteHandler.CreateSite)
			authed.GET("/sites/:id", siteHandler.GetSite)
			authed.PUT("/sites/:id", middleware.AdminRequired(), siteHandler.UpdateSite)
			authed.DELETE("/sites/:id", middleware.AdminRequired(), siteHandler.DeleteSite)
			authed.POST("/sites/:id/test", middleware.AdminRequired(), siteHandler.TestSite)
		}

		// Admin-only endpoints.
		admin := api.Group("/admin")
		admin.Use(middleware.AuthRequired(cfg.Secrets.JWTSecret), middleware.AdminRequired())
		{
			admin.GET("/users", listUsersHandler(svc))
			admin.PATCH("/users/:id/role", adminUpdateRoleHandler(svc))
			admin.DELETE("/users/:id", deleteUserHandler(svc))
			admin.GET("/settings", listSettingsHandler(svc))
			admin.PUT("/settings", updateSettingHandler(svc))
			admin.GET("/logs", recentLogsHandler(svc))

			// Database backup.
			admin.GET("/backups", listBackupsHandler(svc))
			admin.POST("/backups", createBackupHandler(svc))
			admin.DELETE("/backups", deleteBackupHandler(svc))
			admin.POST("/backups/restore", restoreBackupHandler(svc))

			// Notifications (test endpoint).
			admin.POST("/notify/test", notifyTestHandler(svc))

			// File organizer.
			admin.POST("/media/:id/organize", organizeMediaHandler(svc))
			admin.POST("/libraries/:id/organize", organizeLibraryHandler(svc))

			// API key management (encrypted at rest).
			admin.GET("/api-configs", listAPIConfigsHandler(svc))
			admin.GET("/api-configs/:provider", getAPIConfigHandler(svc))
			admin.PUT("/api-configs/:provider", updateAPIConfigHandler(svc))
			admin.DELETE("/api-configs/:provider", deleteAPIConfigHandler(svc))

			// Scheduled jobs.
			admin.GET("/scheduler", schedulerStatusHandler(svc))
			admin.POST("/scheduler/:name/run", schedulerRunHandler(svc))

			// User permissions management.
			admin.GET("/users/:id/permissions", getUserPermissionsHandler(svc))
			admin.PUT("/users/:id/permissions", updateUserPermissionsHandler(svc))
			admin.POST("/users/:id/permissions/reset", resetUserPermissionsHandler(svc))
		}

		// API Config management (admin only).
		apiConfig := api.Group("/api-config")
		apiConfig.Use(middleware.AuthRequired(cfg.Secrets.JWTSecret), middleware.AdminRequired())
		{
			apiConfig.GET("", listApiConfigsHandler(svc))
			apiConfig.GET("/providers/list", listProvidersHandler(svc))
			apiConfig.GET("/:provider", getApiConfigHandler(svc))
			apiConfig.GET("/:provider/effective", getEffectiveConfigHandler(svc))
			apiConfig.POST("/:provider", upsertApiConfigHandler(svc))
			apiConfig.DELETE("/:provider", deleteApiConfigHandler(svc))
			apiConfig.POST("/:provider/test", testApiConfigHandler(svc))
		}

		// Emby/Jellyfin compatibility shim (read-only).
		// Mounted at /emby/* (NOT /api/*) to mirror the upstream surface.
	}

	emby := r.Group("/emby")
	emby.Use(middleware.AuthRequired(cfg.Secrets.JWTSecret))
	{
		emby.GET("/System/Info", embySystemInfoHandler(svc))
		emby.GET("/Users", embyListUsersHandler(svc))
		emby.GET("/Users/:userId/Views", embyViewsHandler(svc))
		emby.GET("/Users/:userId/Items", embyItemsHandler(svc))
		emby.GET("/Items/:id/PlaybackInfo", embyPlaybackInfoHandler(svc))
	}
}

func healthCheck(c *gin.Context) {
	c.JSON(200, gin.H{"status": "ok"})
}

func versionInfo(c *gin.Context) {
	c.JSON(200, gin.H{"name": "MediaStationGo", "version": "0.1.0"})
}

// ─── 权限 Handler 包装 ────────────────────────────────────────────────────────

func getUserPermissionsHandler(svc *service.Container) gin.HandlerFunc {
	h := NewPermissionHandler(svc, svc.Log)
	return h.GetUserPermissions
}

func updateUserPermissionsHandler(svc *service.Container) gin.HandlerFunc {
	h := NewPermissionHandler(svc, svc.Log)
	return h.UpdateUserPermissions
}

func resetUserPermissionsHandler(svc *service.Container) gin.HandlerFunc {
	h := NewPermissionHandler(svc, svc.Log)
	return h.ResetUserPermissions
}

func getMyPermissionsHandler(svc *service.Container) gin.HandlerFunc {
	h := NewPermissionHandler(svc, svc.Log)
	return h.GetMyPermissions
}

// ─── 刷新 Handler 包装 ────────────────────────────────────────────────────────

func refreshHandler(svc *service.Container) gin.HandlerFunc {
	h := NewRefreshHandler(svc, svc.Log)
	return h.RefreshToken
}

func logoutHandler(svc *service.Container) gin.HandlerFunc {
	h := NewRefreshHandler(svc, svc.Log)
	return h.Logout
}

// ─── API Config Handler 包装 ───────────────────────────────────────────────────

func listApiConfigsHandler(svc *service.Container) gin.HandlerFunc {
	h := NewApiConfigHandler(svc, svc.Log)
	return h.ListApiConfigs
}

func listProvidersHandler(svc *service.Container) gin.HandlerFunc {
	h := NewApiConfigHandler(svc, svc.Log)
	return h.ListProviders
}

func getApiConfigHandler(svc *service.Container) gin.HandlerFunc {
	h := NewApiConfigHandler(svc, svc.Log)
	return h.GetApiConfig
}

func getEffectiveConfigHandler(svc *service.Container) gin.HandlerFunc {
	h := NewApiConfigHandler(svc, svc.Log)
	return h.GetEffectiveConfig
}

func upsertApiConfigHandler(svc *service.Container) gin.HandlerFunc {
	h := NewApiConfigHandler(svc, svc.Log)
	return h.UpsertApiConfig
}

func deleteApiConfigHandler(svc *service.Container) gin.HandlerFunc {
	h := NewApiConfigHandler(svc, svc.Log)
	return h.DeleteApiConfig
}

func testApiConfigHandler(svc *service.Container) gin.HandlerFunc {
	h := NewApiConfigHandler(svc, svc.Log)
	return h.TestApiConfig
}

// ─── Download Client Handler 包装 ─────────────────────────────────────────────

func listDownloadClientsHandler(svc *service.Container) gin.HandlerFunc {
	h := NewDownloadClientHandler(svc, svc.Log)
	return h.List
}

func createDownloadClientHandler(svc *service.Container) gin.HandlerFunc {
	h := NewDownloadClientHandler(svc, svc.Log)
	return h.Create
}

func getDownloadClientHandler(svc *service.Container) gin.HandlerFunc {
	h := NewDownloadClientHandler(svc, svc.Log)
	return h.Get
}

func updateDownloadClientHandler(svc *service.Container) gin.HandlerFunc {
	h := NewDownloadClientHandler(svc, svc.Log)
	return h.Update
}

func deleteDownloadClientHandler(svc *service.Container) gin.HandlerFunc {
	h := NewDownloadClientHandler(svc, svc.Log)
	return h.Delete
}

func testDownloadClientHandler(svc *service.Container) gin.HandlerFunc {
	h := NewDownloadClientHandler(svc, svc.Log)
	return h.Test
}

// ─── Notify Channel Handler 包装 ──────────────────────────────────────────────

func listNotifyChannelsHandler(svc *service.Container) gin.HandlerFunc {
	h := NewNotifyHandler(svc, svc.Log)
	return h.List
}

func getNotifyChannelTypesHandler(svc *service.Container) gin.HandlerFunc {
	h := NewNotifyHandler(svc, svc.Log)
	return h.GetTypes
}

func createNotifyChannelHandler(svc *service.Container) gin.HandlerFunc {
	h := NewNotifyHandler(svc, svc.Log)
	return h.Create
}

func getNotifyChannelHandler(svc *service.Container) gin.HandlerFunc {
	h := NewNotifyHandler(svc, svc.Log)
	return h.Get
}

func updateNotifyChannelHandler(svc *service.Container) gin.HandlerFunc {
	h := NewNotifyHandler(svc, svc.Log)
	return h.Update
}

func deleteNotifyChannelHandler(svc *service.Container) gin.HandlerFunc {
	h := NewNotifyHandler(svc, svc.Log)
	return h.Delete
}

func testNotifyChannelHandler(svc *service.Container) gin.HandlerFunc {
	h := NewNotifyHandler(svc, svc.Log)
	return h.Test
}

// ─── Scheduler Handler 包装 ──────────────────────────────────────────────────

func schedulerListTasksHandler(svc *service.Container) gin.HandlerFunc {
	h := NewSchedulerHandler(svc, svc.Log)
	return h.ListTasks
}

func schedulerRunTaskHandler(svc *service.Container) gin.HandlerFunc {
	h := NewSchedulerHandler(svc, svc.Log)
	return h.RunTask
}

func schedulerGetStatusHandler(svc *service.Container) gin.HandlerFunc {
	h := NewSchedulerHandler(svc, svc.Log)
	return h.GetStatus
}

// ─── SSE Handler ──────────────────────────────────────────────────────────────

func sseHandler(svc *service.Container) gin.HandlerFunc {
	return func(c *gin.Context) {
		// 获取 SSE Hub
		hub := svc.SSEHub

		// 设置 SSE 响应头
		c.Header("Content-Type", "text/event-stream")
		c.Header("Cache-Control", "no-cache")
		c.Header("Connection", "keep-alive")
		c.Header("X-Accel-Buffering", "no")

		// 订阅事件流
		client := hub.Subscribe()
		defer hub.Unsubscribe(client)

		// 发送初始连接成功事件
		c.SSEvent("connected", gin.H{"status": "ok"})
		c.Writer.Flush()

		// 持续发送事件直到客户端断开连接
		clientGone := c.Request.Context().Done()
		for {
			select {
			case <-clientGone:
				return
			case event, ok := <-client.Ch:
				if !ok {
					return
				}
				c.SSEvent(event.Type, event.Payload)
				c.Writer.Flush()
			}
		}
	}
}