Fix bugs, convert thumbnail to png, add context menu

backend/app/api/v1/documents.py

@@ -0,0 +1,221 @@
+"""Document management endpoints."""
+
+from fastapi import APIRouter, Depends, HTTPException, UploadFile, File, Query
+from fastapi.responses import FileResponse
+from sqlalchemy.orm import Session
+from sqlalchemy import desc
+from datetime import datetime, timezone
+
+from app.auth.dependencies import get_current_user, verify_csrf
+from app.db import get_db
+from app.models.document import Document
+from app.models.annotation_state import AnnotationState
+from app.models.version import Version
+from app.schemas.document import (
+    DocumentListResponse, DocumentMeta, BulkDeleteRequest, 
+    BulkRestoreRequest, DocumentUpdateRequest
+)
+from app.services.storage import save_upload_file, delete_pdf_file
+from app.services.thumbnails import generate_thumbnail, delete_thumbnail
+from app.config import settings
+
+router = APIRouter(
+    prefix="/documents", 
+    tags=["documents"],
+    dependencies=[Depends(get_current_user)]
+)
+
+
+@router.get("", response_model=DocumentListResponse)
+def list_documents(
+    query: str = "",
+    skip: int = Query(0, ge=0),
+    limit: int = Query(50, ge=1, le=100),
+    db: Session = Depends(get_db)
+):
+    """List non-trashed documents."""
+    q = db.query(Document).filter(Document.deleted_at.is_(None))
+    if query:
+        q = q.filter(Document.title.ilike(f"%{query}%"))
+        
+    total = q.count()
+    items = q.order_by(desc(Document.updated_at)).offset(skip).limit(limit).all()
+    
+    return DocumentListResponse(items=items, total=total)
+
+
+@router.get("/trash", response_model=DocumentListResponse)
+def list_trash(
+    skip: int = Query(0, ge=0),
+    limit: int = Query(50, ge=1, le=100),
+    db: Session = Depends(get_db)
+):
+    """List trashed documents."""
+    q = db.query(Document).filter(Document.deleted_at.is_not(None))
+    total = q.count()
+    items = q.order_by(desc(Document.deleted_at)).offset(skip).limit(limit).all()
+    return DocumentListResponse(items=items, total=total)
+
+
+@router.post("", dependencies=[Depends(verify_csrf)], response_model=DocumentMeta)
+async def upload_document(
+    file: UploadFile = File(...),
+    db: Session = Depends(get_db)
+):
+    """Upload a new PDF document."""
+    # Note: Starlette/FastAPI loads file into memory/spooled file.
+    # To truly enforce max size before reading we rely on Nginx and logic in storage.py.
+    # But checking size if available:
+    if file.size and file.size > settings.MAX_UPLOAD_MB * 1024 * 1024:
+        raise HTTPException(status_code=413, detail="File too large")
+        
+    file_id, size_bytes, page_count = await save_upload_file(file)
+    
+    # Generate thumbnail synchronously
+    generate_thumbnail(file_id)
+    
+    now = datetime.now(timezone.utc).isoformat()
+    doc = Document(
+        id=file_id,
+        title=file.filename or "Untitled",
+        original_filename=file.filename or "Untitled.pdf",
+        file_path=str(settings.PDF_STORAGE_PATH / f"{file_id}.pdf"),
+        page_count=page_count,
+        size_bytes=size_bytes,
+        created_at=now,
+        updated_at=now
+    )
+    db.add(doc)
+    db.commit()
+    db.refresh(doc)
+    return doc
+
+
+@router.get("/{id}", response_model=DocumentMeta)
+def get_document(id: str, db: Session = Depends(get_db)):
+    doc = db.query(Document).filter(Document.id == id).first()
+    if not doc:
+        raise HTTPException(status_code=404, detail="Document not found")
+    return doc
+
+
+@router.patch("/{id}", dependencies=[Depends(verify_csrf)], response_model=DocumentMeta)
+def update_document(id: str, update: DocumentUpdateRequest, db: Session = Depends(get_db)):
+    doc = db.query(Document).filter(Document.id == id).first()
+    if not doc:
+        raise HTTPException(status_code=404, detail="Document not found")
+        
+    if update.title is not None:
+        doc.title = update.title
+        
+    if update.in_trash is not None:
+        if update.in_trash:
+            doc.deleted_at = datetime.now(timezone.utc).isoformat()
+        else:
+            doc.deleted_at = None
+            
+    doc.updated_at = datetime.now(timezone.utc).isoformat()
+    db.commit()
+    db.refresh(doc)
+    return doc
+
+
+@router.delete("/{id}", dependencies=[Depends(verify_csrf)])
+def delete_document(id: str, permanent: bool = False, db: Session = Depends(get_db)):
+    """Soft delete by default. Hard delete if permanent=True AND already in trash."""
+    doc = db.query(Document).filter(Document.id == id).first()
+    if not doc:
+        raise HTTPException(status_code=404, detail="Document not found")
+        
+    if permanent:
+        if doc.deleted_at is None:
+            raise HTTPException(status_code=400, detail="Must be in trash to delete permanently")
+        
+        # Hard delete
+        delete_pdf_file(doc.id)
+        delete_thumbnail(doc.id)
+        db.query(AnnotationState).filter(AnnotationState.document_id == doc.id).delete()
+        db.query(Version).filter(Version.document_id == doc.id).delete()
+        db.delete(doc)
+        db.commit()
+        return {"status": "deleted"}
+    else:
+        # Soft delete
+        doc.deleted_at = datetime.now(timezone.utc).isoformat()
+        db.commit()
+        return {"status": "trashed"}
+
+
+@router.post("/{id}/restore", dependencies=[Depends(verify_csrf)], response_model=DocumentMeta)
+def restore_document(id: str, db: Session = Depends(get_db)):
+    doc = db.query(Document).filter(Document.id == id).first()
+    if not doc:
+        raise HTTPException(status_code=404, detail="Document not found")
+        
+    doc.deleted_at = None
+    doc.updated_at = datetime.now(timezone.utc).isoformat()
+    db.commit()
+    db.refresh(doc)
+    return doc
+
+
+@router.post("/bulk-delete", dependencies=[Depends(verify_csrf)])
+def bulk_delete(data: BulkDeleteRequest, db: Session = Depends(get_db)):
+    now = datetime.now(timezone.utc).isoformat()
+    db.query(Document).filter(Document.id.in_(data.ids)).update({
+        Document.deleted_at: now
+    }, synchronize_session=False)
+    db.commit()
+    return {"status": "ok", "count": len(data.ids)}
+
+
+@router.post("/bulk-restore", dependencies=[Depends(verify_csrf)])
+def bulk_restore(data: BulkRestoreRequest, db: Session = Depends(get_db)):
+    now = datetime.now(timezone.utc).isoformat()
+    db.query(Document).filter(Document.id.in_(data.ids)).update({
+        Document.deleted_at: None,
+        Document.updated_at: now
+    }, synchronize_session=False)
+    db.commit()
+    return {"status": "ok", "count": len(data.ids)}
+
+
+@router.post("/trash/empty", dependencies=[Depends(verify_csrf)])
+def empty_trash(db: Session = Depends(get_db)):
+    docs = db.query(Document).filter(Document.deleted_at.is_not(None)).all()
+    count = 0
+    for doc in docs:
+        delete_pdf_file(doc.id)
+        delete_thumbnail(doc.id)
+        db.query(AnnotationState).filter(AnnotationState.document_id == doc.id).delete()
+        db.query(Version).filter(Version.document_id == doc.id).delete()
+        db.delete(doc)
+        count += 1
+    db.commit()
+    return {"status": "ok", "deleted": count}
+
+
+@router.get("/{id}/file")
+def get_document_file(id: str, db: Session = Depends(get_db)):
+    doc = db.query(Document).filter(Document.id == id).first()
+    if not doc:
+        raise HTTPException(status_code=404, detail="Document not found")
+        
+    path = settings.PDF_STORAGE_PATH / f"{doc.id}.pdf"
+    if not path.exists():
+        raise HTTPException(status_code=404, detail="File missing")
+        
+    return FileResponse(path, media_type="application/pdf", filename=doc.filename)
+
+
+@router.get("/{id}/thumbnail")
+def get_document_thumbnail(id: str, db: Session = Depends(get_db)):
+    doc = db.query(Document).filter(Document.id == id).first()
+    if not doc:
+        raise HTTPException(status_code=404, detail="Document not found")
+        
+    path = settings.THUMBNAILS_PATH / f"{doc.id}.png"
+    if not path.exists():
+        raise HTTPException(status_code=404, detail="Thumbnail missing")
+        
+    return FileResponse(path, media_type="image/png")