ReadMeABook/src/app/api/admin/requests/[id]/approve/route.ts

/**
 * Component: Admin Request Approval API
 * Documentation: documentation/admin-features/request-approval.md
 */

import { NextRequest, NextResponse } from 'next/server';
import { requireAuth, requireAdmin, AuthenticatedRequest } from '@/lib/middleware/auth';
import { prisma } from '@/lib/db';
import { getJobQueueService } from '@/lib/services/job-queue.service';
import { RMABLogger } from '@/lib/utils/logger';
import { z } from 'zod';

const logger = RMABLogger.create('API.Admin.Requests.Approve');

const ApprovalActionSchema = z.object({
  action: z.enum(['approve', 'deny']),
  selectedTorrent: z.any().optional(),
});

/**
 * POST /api/admin/requests/[id]/approve
 * Approve or deny a request in 'awaiting_approval' status
 */
export async function POST(
  request: NextRequest,
  { params }: { params: Promise<{ id: string }> }
) {
  return requireAuth(request, async (req: AuthenticatedRequest) => {
    return requireAdmin(req, async () => {
      try {
        if (!req.user) {
          return NextResponse.json(
            { error: 'Unauthorized', message: 'User not authenticated' },
            { status: 401 }
          );
        }

        const { id } = await params;
        const body = await request.json();

        // Validate action and optional admin-selected torrent
        const { action, selectedTorrent: adminSelectedTorrent } = ApprovalActionSchema.parse(body);

        // Fetch the request
        const existingRequest = await prisma.request.findUnique({
          where: { id },
          include: {
            audiobook: true,
            user: {
              select: {
                id: true,
                plexUsername: true,
              },
            },
          },
        });

        if (!existingRequest) {
          return NextResponse.json(
            { error: 'NotFound', message: 'Request not found' },
            { status: 404 }
          );
        }

        // Validate request is in 'awaiting_approval' status
        if (existingRequest.status !== 'awaiting_approval') {
          return NextResponse.json(
            {
              error: 'InvalidStatus',
              message: `Request is not awaiting approval (current status: ${existingRequest.status})`,
              currentStatus: existingRequest.status,
            },
            { status: 400 }
          );
        }

        // Update request based on action
        if (action === 'approve') {
          const jobQueue = getJobQueueService();
          const isEbookRequest = existingRequest.type === 'ebook';

          // Use admin-provided torrent (from admin interactive search) or fall back to user's pre-selected torrent
          const effectiveTorrent = adminSelectedTorrent || existingRequest.selectedTorrent;

          if (effectiveTorrent) {
            const selectedTorrent = effectiveTorrent as any;
            const torrentSource = adminSelectedTorrent ? 'admin' : 'user';

            // Download the selected torrent directly
            logger.info(`Request ${id} has ${torrentSource}-selected torrent, starting download`, {
              requestId: id,
              userId: existingRequest.userId,
              adminId: req.user.sub,
              type: existingRequest.type,
              source: selectedTorrent.source,
            });

            // Handle ebook requests with Anna's Archive source differently
            if (isEbookRequest && selectedTorrent.source === 'annas_archive') {
              // Create download history record for Anna's Archive
              const downloadHistory = await prisma.downloadHistory.create({
                data: {
                  requestId: existingRequest.id,
                  indexerName: "Anna's Archive",
                  torrentName: `${existingRequest.audiobook.title} - ${existingRequest.audiobook.author}.${selectedTorrent.format || 'epub'}`,
                  torrentSizeBytes: null,
                  qualityScore: selectedTorrent.score || 100,
                  selected: true,
                  downloadClient: 'direct',
                  downloadStatus: 'queued',
                },
              });

              // Store all download URLs for retry purposes
              if (selectedTorrent.downloadUrls && selectedTorrent.downloadUrls.length > 0) {
                await prisma.downloadHistory.update({
                  where: { id: downloadHistory.id },
                  data: {
                    torrentUrl: JSON.stringify(selectedTorrent.downloadUrls),
                  },
                });
              }

              // Trigger direct download job for Anna's Archive
              await jobQueue.addStartDirectDownloadJob(
                existingRequest.id,
                downloadHistory.id,
                selectedTorrent.downloadUrl,
                `${existingRequest.audiobook.title} - ${existingRequest.audiobook.author}.${selectedTorrent.format || 'epub'}`,
                undefined
              );
            } else {
              // Trigger download job with pre-selected torrent (audiobook or indexer ebook)
              await jobQueue.addDownloadJob(
                existingRequest.id,
                {
                  id: existingRequest.audiobook.id,
                  title: existingRequest.audiobook.title,
                  author: existingRequest.audiobook.author,
                },
                selectedTorrent
              );
            }

            // Update status to 'downloading' and clear selectedTorrent
            const updatedRequest = await prisma.request.update({
              where: { id },
              data: {
                status: 'downloading',
                selectedTorrent: null as any, // Clear after use
              },
              include: {
                audiobook: true,
                user: {
                  select: {
                    id: true,
                    plexUsername: true,
                  },
                },
              },
            });

            // Send notification for manual approval
            await jobQueue.addNotificationJob(
              'request_approved',
              updatedRequest.id,
              isEbookRequest ? `${existingRequest.audiobook.title} (Ebook)` : existingRequest.audiobook.title,
              existingRequest.audiobook.author,
              existingRequest.user.plexUsername || 'Unknown User'
            ).catch((error) => {
              logger.error('Failed to queue notification', { error: error instanceof Error ? error.message : String(error) });
            });

            logger.info(`Request ${id} approved by admin ${req.user.sub}, downloading ${torrentSource}-selected torrent`, {
              requestId: id,
              userId: updatedRequest.userId,
              audiobookTitle: existingRequest.audiobook.title,
              adminId: req.user.sub,
              type: existingRequest.type,
              torrentSource,
            });

            return NextResponse.json({
              success: true,
              message: adminSelectedTorrent
                ? 'Request approved and download started with admin-selected torrent'
                : 'Request approved and download started with pre-selected torrent',
              request: updatedRequest,
            });
          } else {
            // No pre-selected torrent - use automatic search
            logger.info(`Request ${id} using automatic search`, {
              requestId: id,
              userId: existingRequest.userId,
              adminId: req.user.sub,
              type: existingRequest.type,
            });

            const updatedRequest = await prisma.request.update({
              where: { id },
              data: { status: 'pending' },
              include: {
                audiobook: true,
                user: {
                  select: {
                    id: true,
                    plexUsername: true,
                  },
                },
              },
            });

            // Trigger appropriate search job based on request type
            if (isEbookRequest) {
              await jobQueue.addSearchEbookJob(updatedRequest.id, {
                id: updatedRequest.audiobook.id,
                title: updatedRequest.audiobook.title,
                author: updatedRequest.audiobook.author,
                asin: updatedRequest.audiobook.audibleAsin || undefined,
              });
            } else {
              await jobQueue.addSearchJob(updatedRequest.id, {
                id: updatedRequest.audiobook.id,
                title: updatedRequest.audiobook.title,
                author: updatedRequest.audiobook.author,
                asin: updatedRequest.audiobook.audibleAsin || undefined,
              });
            }

            // Send notification for manual approval
            await jobQueue.addNotificationJob(
              'request_approved',
              updatedRequest.id,
              isEbookRequest ? `${updatedRequest.audiobook.title} (Ebook)` : updatedRequest.audiobook.title,
              updatedRequest.audiobook.author,
              updatedRequest.user.plexUsername || 'Unknown User'
            ).catch((error) => {
              logger.error('Failed to queue notification', { error: error instanceof Error ? error.message : String(error) });
            });

            logger.info(`Request ${id} approved by admin ${req.user.sub}`, {
              requestId: id,
              userId: updatedRequest.userId,
              audiobookTitle: updatedRequest.audiobook.title,
              adminId: req.user.sub,
              type: existingRequest.type,
            });

            return NextResponse.json({
              success: true,
              message: isEbookRequest
                ? 'Ebook request approved and ebook search job triggered'
                : 'Request approved and search job triggered',
              request: updatedRequest,
            });
          }
        } else {
          // Deny: Change status to 'denied'
          const updatedRequest = await prisma.request.update({
            where: { id },
            data: { status: 'denied' },
            include: {
              audiobook: true,
              user: {
                select: {
                  id: true,
                  plexUsername: true,
                },
              },
            },
          });

          logger.info(`Request ${id} denied by admin ${req.user.sub}`, {
            requestId: id,
            userId: updatedRequest.userId,
            audiobookTitle: updatedRequest.audiobook.title,
            adminId: req.user.sub,
          });

          return NextResponse.json({
            success: true,
            message: 'Request denied',
            request: updatedRequest,
          });
        }
      } catch (error) {
        logger.error('Failed to process approval action', {
          error: error instanceof Error ? error.message : String(error)
        });

        if (error instanceof z.ZodError) {
          return NextResponse.json(
            {
              error: 'ValidationError',
              message: 'Invalid action. Must be "approve" or "deny"',
              details: error.errors,
            },
            { status: 400 }
          );
        }

        return NextResponse.json(
          {
            error: 'ApprovalError',
            message: 'Failed to process approval action',
          },
          { status: 500 }
        );
      }
    });
  });
}