import type { APIRoute } from 'astro';
import { buildAuswahlZipName } from '../../../lib/naming';
import { ZipArchive } from 'archiver';
import { query } from '../../../lib/db';
import { getObject } from '../../../lib/storage';

export const prerender = false;

/** Lädt mehrere Ergebnisse als ZIP. Body { itemIds: [...] } */
export const POST: APIRoute = async ({ request, locals }) => {
  if (!locals.user) return new Response('Unauthorized', { status: 401 });
  const b = await request.json().catch(() => ({} as any));
  const ids: string[] = b.itemIds || [];
  if (!ids.length) return new Response('Keine Auswahl.', { status: 400 });

  const rows = await query<{ id: string; result_path: string | null; filename: string | null }>(
    // Nur Bilder, die dieses Konto sehen darf, und keine aus dem Papierkorb.
    // Vorher landete jede Kennung jedes Kontos im Archiv.
    `SELECT i.id, i.result_path, i.filename FROM items i JOIN jobs j ON j.id = i.job_id
      WHERE i.id = ANY($1::uuid[]) AND i.result_path IS NOT NULL AND i.deleted_at IS NULL
        AND ($3::boolean OR j.created_by = $2
             OR (NOT j.private AND (SELECT library_visibility FROM settings WHERE id=1) = 'shared'))`,
    [ids.filter((x) => /^[0-9a-f-]{36}$/i.test(String(x))), locals.user.uid, locals.user.role === 'admin']);
  if (!rows.length) return new Response('Keine Ergebnisse.', { status: 404 });

  const archive = new ZipArchive({ zlib: { level: 6 } });
  const seen: Record<string, number> = {};
  for (const r of rows) {
    try {
      const buf = await getObject(r.result_path!);
      let name = r.filename || `${r.id}.png`;
      if (!/\.[a-z0-9]+$/i.test(name)) name += '.png';
      // Namenskollisionen vermeiden
      if (seen[name] != null) { const n = ++seen[name]; name = name.replace(/(\.[^.]+)$/, `_${n}$1`); }
      else seen[name] = 0;
      archive.append(buf, { name });
    } catch { /* Datei überspringen */ }
  }
  const done = archive.finalize();

  // Archiver-Stream (Node) in einen Web-ReadableStream überführen.
  const stream = new ReadableStream({
    start(controller) {
      archive.on('data', (c: Buffer) => controller.enqueue(new Uint8Array(c)));
      archive.on('end', () => controller.close());
      archive.on('error', (e: any) => controller.error(e));
      done.catch(() => {});
    },
  });
  // Eindeutig statt nur datiert: Zwei Auswahlen desselben Tages hießen gleich.
  const name = buildAuswahlZipName(rows.length);
  return new Response(stream, {
    headers: {
      'Content-Type': 'application/zip',
      'Content-Disposition': `attachment; filename="${name}"`,
    },
  });
};