Siteforge/server/routes/nuggets-workflow.js

import { createHash } from 'node:crypto'
import { readFile } from 'node:fs/promises'
import { Readable } from 'node:stream'
import path from 'node:path'
import { writeFile } from '../atomic-write.js'
import { requireAdminAuth } from '../auth.js'
import { loadHistory } from './nuggets-host-upload.js'
import {
  DATA_DIR,
  SEAFILE_URL,
  SEAFILE_TOKEN,
  SEAFILE_NUGGETS_REPO_ID,
  SEAFILE_EPISODE_UPLOAD_DIR,
} from '../config.js'

const WORKFLOW_FILE = path.join(DATA_DIR, 'nuggets-workflow.json')

const AUDIO_TYPES = {
  '.mp3': 'audio/mpeg',
  '.wav': 'audio/wav',
  '.m4a': 'audio/mp4',
  '.aac': 'audio/aac',
  '.ogg': 'audio/ogg',
  '.flac': 'audio/flac',
}

export const WORKFLOW_STEPS = ['listen', 'coldOpen', 'recordColdOpen', 'edit', 'spotify']

export async function loadWorkflow() {
  try {
    return JSON.parse(await readFile(WORKFLOW_FILE, 'utf8'))
  } catch {
    return { items: {} }
  }
}

export function entryId(entry) {
  return createHash('sha1').update(`${entry.uploadedAt}|${entry.filename}`).digest('hex').slice(0, 16)
}

function emptyState() {
  return {
    steps: Object.fromEntries(WORKFLOW_STEPS.map(s => [s, null])), // step → ISO completion time
    coldOpenText: '',
    notes: '',
    spotifyUrl: '',
  }
}

function seafileConfigured() {
  return Boolean(SEAFILE_URL && SEAFILE_TOKEN && SEAFILE_NUGGETS_REPO_ID)
}

// Portal uploads whose workflow still has steps left to do (any age, so an old one keeps showing).
export async function countPendingUploads() {
  const [history, wf] = await Promise.all([loadHistory(), loadWorkflow()])
  return history.entries.filter(entry => {
    const steps = wf.items[entryId(entry)]?.steps ?? {}
    return !WORKFLOW_STEPS.every(step => steps[step])
  }).length
}

export function register(app) {
  app.get('/api/admin/nuggets-workflow', requireAdminAuth, async (_req, res) => {
    const [history, wf] = await Promise.all([loadHistory(), loadWorkflow()])
    const items = history.entries.map(entry => {
      const id = entryId(entry)
      return { id, entry, state: { ...emptyState(), ...(wf.items[id] ?? {}) } }
    })
    res.json({ items })
  })

  app.put('/api/admin/nuggets-workflow/:id', requireAdminAuth, async (req, res) => {
    const { id } = req.params
    const history = await loadHistory()
    if (!history.entries.some(e => entryId(e) === id)) {
      res.status(404).json({ message: 'Upload not found.' })
      return
    }
    const wf = await loadWorkflow()
    const prev = { ...emptyState(), ...(wf.items[id] ?? {}) }
    const body = req.body ?? {}
    const next = { ...prev, steps: { ...prev.steps } }

    if (body.steps && typeof body.steps === 'object') {
      for (const s of WORKFLOW_STEPS) {
        if (typeof body.steps[s] === 'boolean') {
          // Keep the original completion time if the step was already done
          next.steps[s] = body.steps[s] ? (prev.steps[s] ?? new Date().toISOString()) : null
        }
      }
    }
    if (typeof body.coldOpenText === 'string') next.coldOpenText = body.coldOpenText.slice(0, 5000)
    if (typeof body.notes === 'string') next.notes = body.notes.slice(0, 5000)
    if (typeof body.spotifyUrl === 'string') next.spotifyUrl = body.spotifyUrl.trim().slice(0, 500)

    wf.items[id] = next
    await writeFile(WORKFLOW_FILE, JSON.stringify(wf, null, 2), 'utf8')
    res.json({ ok: true, state: next })
  })

  // Stream the uploaded audio from Seafile so it can be auditioned in the admin.
  app.get('/api/admin/nuggets-workflow/:id/audio', requireAdminAuth, async (req, res) => {
    if (!seafileConfigured()) {
      res.status(503).json({ message: 'Seafile is not configured.' })
      return
    }
    const history = await loadHistory()
    const entry = history.entries.find(e => entryId(e) === req.params.id)
    if (!entry) {
      res.status(404).json({ message: 'Upload not found.' })
      return
    }
    try {
      const filePath = `${SEAFILE_EPISODE_UPLOAD_DIR.replace(/\/$/, '')}/${entry.filename}`
      const linkRes = await fetch(
        `${SEAFILE_URL}/api2/repos/${SEAFILE_NUGGETS_REPO_ID}/file/?p=${encodeURIComponent(filePath)}&reuse=1`,
        { headers: { Authorization: `Token ${SEAFILE_TOKEN}` }, signal: AbortSignal.timeout(10_000) },
      )
      if (!linkRes.ok) {
        console.error(`[nuggets-workflow] Seafile link lookup for "${filePath}" failed: ${linkRes.status}`)
        res.status(404).json({ message: 'Audio file not found in Seafile.' })
        return
      }
      const downloadUrl = (await linkRes.text()).replace(/^"|"$/g, '')

      const headers = {}
      if (req.headers.range) headers.Range = req.headers.range
      const upstream = await fetch(downloadUrl, { headers })
      if (!upstream.ok && upstream.status !== 206) {
        console.error(`[nuggets-workflow] Seafile download failed: ${upstream.status}`)
        res.status(502).json({ message: 'Could not fetch audio from Seafile.' })
        return
      }
      res.status(upstream.status)
      for (const h of ['content-length', 'content-range', 'accept-ranges']) {
        const v = upstream.headers.get(h)
        if (v) res.setHeader(h, v)
      }
      // Seafile serves downloads as application/octet-stream, which browsers refuse to play
      // (the site sends nosniff), so set the audio type from the file extension.
      const ext = path.extname(entry.filename).toLowerCase()
      res.setHeader('content-type', AUDIO_TYPES[ext] ?? 'audio/mpeg')
      if (!res.getHeader('accept-ranges')) res.setHeader('accept-ranges', 'bytes')
      const stream = Readable.fromWeb(upstream.body)
      req.on('close', () => stream.destroy())
      stream.on('error', () => res.end())
      stream.pipe(res)
    } catch (err) {
      console.error('[nuggets-workflow] audio error:', err.message, err.cause?.message ?? '')
      // Admin-only route, so the reason is safe to show and saves a trip to the server logs.
      const reason = [err.message, err.cause?.message].filter(Boolean).join(': ')
      if (!res.headersSent) res.status(500).json({ message: `Audio stream failed${reason ? ` (${reason})` : ''}.` })
    }
  })
}