server.py

import os, io
from datetime import datetime
from flask import Flask, render_template, request, jsonify, send_file, session, redirect, url_for, request
from store import (get_catalog, get_settings, save_settings,
                   add_ingredient, delete_ingredient, update_ingredient_price,
                   add_cocktail, delete_cocktail)
from core import calculate, validate_menu, ALCOHOL_LEVELS
from authlib.integrations.flask_client import OAuth
from dotenv import load_dotenv
from functools import wraps

load_dotenv()

app = Flask(__name__)

app.secret_key = os.environ.get("SECRET_KEY", "dev-secret")

oauth = OAuth(app)
google = oauth.register(
    name="google",
    client_id=os.environ.get("GOOGLE_CLIENT_ID"),
    client_secret=os.environ.get("GOOGLE_CLIENT_SECRET"),
    server_metadata_url="https://accounts.google.com/.well-known/openid-configuration",
    client_kwargs={"scope": "openid email profile"},
)


# ── Auth routes ───────────────────────────────────────────────

@app.route("/login")
def login():
    redirect_uri = url_for("auth_callback", _external=True)
    return google.authorize_redirect(redirect_uri)

@app.route("/auth/callback")
def auth_callback():
    token    = google.authorize_access_token()
    userinfo = token["userinfo"]
    session["user_id"] = userinfo["sub"]   # Google's unique user ID
    session["email"]   = userinfo["email"]
    session["name"]    = userinfo.get("name", "")
    session["picture"] = userinfo.get("picture", "")
    return redirect("/")

@app.route("/logout")
def logout():
    session.clear()
    return redirect("/login")

# ── Auth guard — add this before every protected route ────────
def login_required(f):
    """Redirects to /login for page routes."""
    @wraps(f)
    def decorated(*args, **kwargs):
        if "user_id" not in session:
            return redirect(url_for("login"))
        return f(*args, **kwargs)
    return decorated

def api_login_required(f):
    """Returns JSON error for API/CRUD routes."""
    @wraps(f)
    def decorated(*args, **kwargs):
        if "user_id" not in session:
            return jsonify({
                "ok": False,
                "error": "Authentication required",
                "message": "You must be signed in to perform this action.",
                "login_url": "/login"
            }), 401
        return f(*args, **kwargs)
    return decorated

# ── PAGES ────────────────────────────────────────────────────

@app.route("/")
def dashboard():
    user_id  = session.get("user_id")
    settings = get_settings(user_id)
    catalog  = get_catalog(user_id)
    errors   = validate_menu(settings["menu"])
    result   = calculate(settings, catalog) if not errors else None
    return render_template("dashboard.html",
        settings=settings, result=result,
        errors=errors, levels=ALCOHOL_LEVELS)

@app.route("/menu")
def menu():
    user_id  = session.get("user_id")
    settings = get_settings(user_id)
    catalog  = get_catalog(user_id)
    errors   = validate_menu(settings["menu"])
    return render_template("menu.html",
        settings=settings, catalog=catalog, errors=errors)

@app.route("/catalog")
def catalog_page():
    user_id  = session.get("user_id")
    catalog = get_catalog(user_id)
    return render_template("catalog.html", catalog=catalog)

# ── API: global settings ──────────────────────────────────────

@app.route("/api/settings", methods=["POST"])
@api_login_required
def api_settings():
    user_id = session["user_id"]
    s = get_settings(user_id)
    for key in ["guests", "ticket_price", "venue_cost", "equipment_cost",
                "alcohol_ml_per_person", "buffer"]:
        if key in request.json:
            s[key] = request.json[key]
    save_settings(user_id, s)
    return jsonify({"ok": True})

# ── API: save 3-level menu ────────────────────────────────────

@app.route("/api/menu", methods=["POST"])
@api_login_required
def api_menu():
    user_id = session["user_id"]
    s = get_settings(user_id)
    s["menu"] = request.json["menu"]
    # structural=True  -> skip validation (adding/removing spirits or drinks)
    # structural=False -> validate sums (explicit Save Menu button only)
    if not request.json.get("structural", False):
        errors = validate_menu(s["menu"])
        if errors:
            return jsonify({"ok": False, "errors": errors}), 400
    save_settings(user_id, s)
    return jsonify({"ok": True})

# ── API: recalculate (AJAX) ───────────────────────────────────

@app.route("/api/calculate", methods=["POST"])
def api_calculate():
    user_id = session.get("user_id")
    s = get_settings(user_id)
    c = get_catalog(user_id)
    errors = validate_menu(s["menu"])
    if errors:
        return jsonify({"ok": False, "errors": errors}), 400
    return jsonify({"ok": True, "result": calculate(s, c)})

# ── API: ingredients CRUD ─────────────────────────────────────

@app.route("/api/catalog/ingredient", methods=["POST"])
@api_login_required
def add_ingredient_route():
    user_id = session["user_id"]
    data    = request.json
    name    = data.get("name", "").strip()
    catalog = get_catalog(user_id)
    if not name or name in catalog["ingredients"]:
        return jsonify({"ok": False, "error": "Name missing or already exists"}), 400
    vol = data.get("volume_ml")
    add_ingredient(user_id, name, {
        "type":      data.get("type", "extra"),
        "abv":       float(data.get("abv", 0)),
        "volume_ml": int(vol) if vol else None,
        "unit":      data.get("unit", "pcs"),
        "price_min": float(data.get("price_min", 0)),
        "price_max": float(data.get("price_max", 0)),
    })
    return jsonify({"ok": True})

@app.route("/api/catalog/ingredient/price", methods=["POST"])
@api_login_required
def update_ingredient_price_route():
    user_id   = session["user_id"]
    data      = request.json
    name      = data.get("name", "").strip()
    catalog   = get_catalog(user_id)
    if not name or name not in catalog["ingredients"]:
        return jsonify({"ok": False, "error": "Ingredient not found"}), 404
    price_min = float(data.get("price_min", 0))
    price_max = float(data.get("price_max", 0))
    if price_min > price_max:
        return jsonify({"ok": False, "error": "Min price cannot exceed max price"}), 400
    update_ingredient_price(user_id, name, price_min, price_max)
    return jsonify({"ok": True})

@app.route("/api/catalog/ingredient/<name>", methods=["DELETE"])
@api_login_required
def delete_ingredient_route(name):
    user_id = session["user_id"]
    delete_ingredient(user_id, name)
    return jsonify({"ok": True})


# ── API: cocktails CRUD ───────────────────────────────────────

@app.route("/api/catalog/cocktail", methods=["POST"])
@api_login_required
def add_cocktail_route():
    user_id = session["user_id"]
    data    = request.json
    name    = data.get("name", "").strip()
    catalog = get_catalog(user_id)
    if not name or name in catalog["cocktails"]:
        return jsonify({"ok": False, "error": "Name missing or already exists"}), 400
    add_cocktail(user_id, name, {
        "main_spirit": data["main_spirit"],
        "category":    data["category"],
        "recipe":      data["recipe"],
    })
    return jsonify({"ok": True})

@app.route("/api/catalog/cocktail/<name>", methods=["DELETE"])
@api_login_required
def delete_cocktail_route(name):
    user_id = session["user_id"]
    delete_cocktail(user_id, name)
    return jsonify({"ok": True})

# ── API: export shopping list as TXT ─────────────────────────

@app.route("/api/export")
def export_txt():
    user_id = session.get("user_id")
    s = get_settings(user_id)
    c = get_catalog(user_id)
    r = calculate(s, c)
    lines = [
        "=" * 62,
        f"  PARTY BUDGET - {s['guests']} GUESTS",
        "=" * 62,
        f"  Ticket price : E{s['ticket_price']}",
        f"  Venue cost   : E{s['venue_cost']}",
        f"  Equipment    : E{s['equipment_cost']}",
        f"  Revenue      : E{r['revenue']}",
        f"  Profit       : E{r['profit_min']} - E{r['profit_max']}",
        f"  Break-even   : {r['break_even']} guests",
        "",
        "=" * 62,
        "  SHOPPING LIST",
        "=" * 62,
        f"  {'Type':<8} {'Item':<26} {'Qty':>5} {'Unit':<6} {'Min E':>7} {'Max E':>7}",
        "  " + "-" * 60,
    ]
    for item in r["shopping_list"]:
        lines.append(
            f"  {item['type']:<8} {item['name']:<26} {item['quantity']:>5} "
            f"{item['unit']:<6} {item['cost_min']:>7.2f} {item['cost_max']:>7.2f}"
        )
    lines += [
        "  " + "-" * 60,
        f"  TOTAL SPEND  : E{r['total_min']} - E{r['total_max']}",
        f"  TOTAL (incl. fixed): E{r['total_min'] + r['fixed_costs']} - E{r['total_max'] + r['fixed_costs']}",
        f"\n  Generated on {datetime.now().strftime('%d/%m/%Y %H:%M')}",
    ]
    buf = io.BytesIO("\n".join(lines).encode("utf-8"))
    buf.seek(0)
    filename = f"shopping_list_{datetime.now().strftime('%Y%m%d')}.txt"
    return send_file(buf, as_attachment=True, download_name=filename, mimetype="text/plain")


if __name__ == "__main__":
    port = int(os.environ.get("PORT", 5000))
    app.run(host="0.0.0.0", port=port, debug=False)