From 871054b02e28188a5aa76e5c0d982dd431e0af10 Mon Sep 17 00:00:00 2001
From: Jayprakash <0freerunning@gmail.com>
Date: Thu, 23 Oct 2025 20:35:13 +0530
Subject: [PATCH] Adding maintainer view for task query

---
 .../src/components/Maintainer/EntryQuery.vue  | 347 ++++++++++++++++++
 frontend/src/components/Round/RoundInfo.vue   |  17 +
 frontend/src/i18n/en.json                     |  39 +-
 frontend/src/router/index.js                  |   7 +
 frontend/src/services/adminService.js         |  18 +
 montage/admin_endpoints.py                    |  98 ++++-
 montage/cors.py                               |  25 +-
 7 files changed, 534 insertions(+), 17 deletions(-)
 create mode 100644 frontend/src/components/Maintainer/EntryQuery.vue

diff --git a/frontend/src/components/Maintainer/EntryQuery.vue b/frontend/src/components/Maintainer/EntryQuery.vue
new file mode 100644
index 0000000..5ba0963
--- /dev/null
+++ b/frontend/src/components/Maintainer/EntryQuery.vue
@@ -0,0 +1,347 @@
+<template>
+  <div class="entry-query-page">
+    <div class="page-header">
+      <h1>{{ $t('montage-entry-query') }}</h1>
+      <p v-if="roundInfo">
+        {{ $t('montage-round-name') }}: <strong>{{ roundInfo.name }}</strong> (ID: {{ roundId }})
+      </p>
+      <p v-else>{{ $t('montage-search-and-remove-entries') }}</p>
+    </div>
+
+    <!-- Search Form -->
+    <div class="search-box">
+      <cdx-field :label="$t('montage-image-name-optional')">
+        <cdx-text-input 
+          v-model="searchTerm" 
+          :placeholder="$t('montage-search-by-filename')"
+          @keyup.enter="search"
+        />
+      </cdx-field>
+
+      <cdx-button 
+        action="progressive" 
+        weight="primary" 
+        @click="search"
+        :disabled="!roundId"
+      >
+        <magnify class="icon-small" />
+        {{ $t('montage-search') }}
+      </cdx-button>
+    </div>
+
+    <!-- Loading -->
+    <div v-if="loading" class="loading">
+      <cdx-progress-bar :inline="true" />
+      <p>{{ $t('montage-searching') }}...</p>
+    </div>
+
+    <!-- Results -->
+    <div v-if="results.length > 0 && !loading" class="results">
+      <h2>{{ $t('montage-results') }} ({{ total }})</h2>
+      
+      <table class="results-table">
+        <thead>
+          <tr>
+            <th>{{ $t('montage-thumbnail') }}</th>
+            <th>{{ $t('montage-image-name') }}</th>
+            <th>{{ $t('montage-uploader') }}</th>
+            <th>{{ $t('montage-votes') }}</th>
+            <th>{{ $t('montage-actions') }}</th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr v-for="entry in results" :key="entry.id">
+            <td>
+              <img :src="entry.url_sm" :alt="entry.name" class="thumb" />
+            </td>
+            <td>
+              <a :href="entry.url" target="_blank">{{ truncate(entry.name) }}</a>
+            </td>
+            <td>{{ entry.upload_user_text }}</td>
+            <td>{{ entry.completed_votes || 0 }} / {{ entry.active_votes || 0 }}</td>
+            <td>
+              <cdx-button 
+                action="destructive" 
+                weight="quiet" 
+                @click="confirmRemove(entry)"
+              >
+                <delete-icon class="icon-small" />
+                {{ $t('montage-remove') }}
+              </cdx-button>
+            </td>
+          </tr>
+        </tbody>
+      </table>
+
+      <!-- Pagination -->
+      <div class="pagination" v-if="total > pageSize">
+        <cdx-button @click="prevPage" :disabled="page === 1">
+          {{ $t('montage-previous') }}
+        </cdx-button>
+        <span>{{ $t('montage-page') }} {{ page }} {{ $t('montage-of') }} {{ Math.ceil(total / pageSize) }}</span>
+        <cdx-button @click="nextPage" :disabled="page >= Math.ceil(total / pageSize)">
+          {{ $t('montage-next') }}
+        </cdx-button>
+      </div>
+    </div>
+
+    <!-- No Results -->
+    <div v-if="results.length === 0 && searched && !loading" class="no-results">
+      <p>{{ $t('montage-no-results-found') }}</p>
+    </div>
+
+    <!-- Remove Dialog -->
+    <cdx-dialog
+      v-model:open="showDialog"
+      :title="$t('montage-confirm-removal')"
+      :primary-action="{ label: $t('montage-remove'), actionType: 'destructive' }"
+      :default-action="{ label: $t('montage-cancel') }"
+      @primary="remove"
+      @default="showDialog = false"
+    >
+      <p v-if="selectedEntry">
+        {{ $t('montage-remove-entry-confirm', { name: selectedEntry.name }) }}
+      </p>
+      
+      <cdx-field :label="$t('montage-reason-optional')">
+        <cdx-text-area 
+          v-model="reason" 
+          :placeholder="$t('montage-enter-reason')" 
+          rows="3" 
+        />
+      </cdx-field>
+
+      <cdx-message type="warning" :inline="true">
+        {{ $t('montage-removal-warning') }}
+      </cdx-message>
+    </cdx-dialog>
+  </div>
+</template>
+
+<script setup>
+import { ref, onMounted } from 'vue'
+import { useRoute } from 'vue-router'
+import { useI18n } from 'vue-i18n'
+import { 
+  CdxField, 
+  CdxTextInput, 
+  CdxTextArea, 
+  CdxButton, 
+  CdxDialog, 
+  CdxMessage, 
+  CdxProgressBar 
+} from '@wikimedia/codex'
+import adminService from '@/services/adminService'
+import alertService from '@/services/alertService'
+
+// Icons
+import Magnify from 'vue-material-design-icons/Magnify.vue'
+import Delete from 'vue-material-design-icons/Delete.vue'
+
+const route = useRoute()
+const { t: $t } = useI18n()
+
+const roundId = ref(null)
+const roundInfo = ref(null)
+const searchTerm = ref('')
+const loading = ref(false)
+const searched = ref(false)
+const results = ref([])
+const total = ref(0)
+const page = ref(1)
+const pageSize = ref(50)
+
+const showDialog = ref(false)
+const selectedEntry = ref(null)
+const reason = ref('')
+
+// Get round ID from query parameter
+onMounted(async () => {
+  const queryRoundId = route.query.roundId
+  
+  if (queryRoundId) {
+    roundId.value = parseInt(queryRoundId)
+    
+    // Fetch round info
+    try {
+      const response = await adminService.getRound(roundId.value)
+      roundInfo.value = response.data
+      
+      // Auto-search on mount
+      search()
+    } catch (error) {
+      alertService.error($t('montage-error-loading-round'))
+    }
+  } else {
+    alertService.error($t('montage-no-round-specified'))
+  }
+})
+
+const search = async () => {
+  if (!roundId.value) return
+  
+  loading.value = true
+  searched.value = true
+  page.value = 1
+  
+  try {
+    const params = {
+      search: searchTerm.value,
+      limit: pageSize.value,
+      offset: (page.value - 1) * pageSize.value
+    }
+    
+    const response = await adminService.searchRoundEntries(roundId.value, params)
+    results.value = response.data.entries
+    total.value = response.data.total
+  } catch (error) {
+    alertService.error(error)
+    results.value = []
+    total.value = 0
+  } finally {
+    loading.value = false
+  }
+}
+
+const confirmRemove = (entry) => {
+  selectedEntry.value = entry
+  reason.value = ''
+  showDialog.value = true
+}
+
+const remove = async () => {
+  if (!selectedEntry.value) return
+  
+  try {
+    await adminService.removeEntry(
+      roundId.value,
+      selectedEntry.value.id,
+      { reason: reason.value }
+    )
+    
+    alertService.success($t('montage-entry-removed-successfully'))
+    showDialog.value = false
+    search() // Refresh results
+  } catch (error) {
+    alertService.error(error)
+  }
+}
+
+const truncate = (name) => {
+  return name.length > 50 ? name.substring(0, 47) + '...' : name
+}
+
+const prevPage = () => {
+  if (page.value > 1) {
+    page.value--
+    search()
+  }
+}
+
+const nextPage = () => {
+  if (page.value < Math.ceil(total.value / pageSize.value)) {
+    page.value++
+    search()
+  }
+}
+</script>
+
+<style scoped>
+.entry-query-page {
+  padding: 40px;
+  max-width: 1200px;
+  margin: 0 auto;
+}
+
+.page-header {
+  margin-bottom: 32px;
+}
+
+.page-header h1 {
+  font-size: 28px;
+  margin-bottom: 8px;
+}
+
+.page-header p {
+  color: #666;
+  font-size: 16px;
+}
+
+.search-box {
+  background: #f8f9fa;
+  padding: 24px;
+  border-radius: 8px;
+  margin: 24px 0;
+  display: flex;
+  gap: 16px;
+  align-items: flex-end;
+  max-width: 800px;
+}
+
+.search-box .cdx-field {
+  flex: 1;
+}
+
+.loading {
+  text-align: center;
+  padding: 40px;
+}
+
+.results {
+  margin-top: 32px;
+}
+
+.results h2 {
+  margin-bottom: 16px;
+}
+
+.results-table {
+  width: 100%;
+  border-collapse: collapse;
+  background: white;
+  box-shadow: 0 1px 3px rgba(0,0,0,0.1);
+  border-radius: 8px;
+  overflow: hidden;
+}
+
+.results-table th,
+.results-table td {
+  padding: 12px;
+  text-align: left;
+  border-bottom: 1px solid #eee;
+}
+
+.results-table th {
+  background: #f5f5f5;
+  font-weight: 600;
+}
+
+.results-table tbody tr:hover {
+  background: #f8f9fa;
+}
+
+.thumb {
+  width: 60px;
+  height: 60px;
+  object-fit: cover;
+  border-radius: 4px;
+}
+
+.pagination {
+  display: flex;
+  justify-content: center;
+  align-items: center;
+  gap: 16px;
+  margin-top: 24px;
+}
+
+.no-results {
+  text-align: center;
+  padding: 60px;
+  color: #666;
+}
+
+.icon-small {
+  font-size: 16px;
+}
+</style>
\ No newline at end of file
diff --git a/frontend/src/components/Round/RoundInfo.vue b/frontend/src/components/Round/RoundInfo.vue
index 9002776..0242ca3 100644
--- a/frontend/src/components/Round/RoundInfo.vue
+++ b/frontend/src/components/Round/RoundInfo.vue
@@ -127,6 +127,10 @@
     >
       <check style="font-size: 6px" />{{ $t('montage-round-finalize') }}
     </cdx-button> -->
+    <cdx-button v-if="userStore.user?.is_maintainer" @click="goToEntryQuery">
+      <database-search style="font-size: 6px" />
+      {{ $t('montage-query-entries') }}
+    </cdx-button>
 
     <cdx-button @click="downloadResults">
       <download style="font-size: 6px" /> {{ $t('montage-round-download-results') }}
@@ -141,6 +145,8 @@
 <script setup>
 import { computed, onMounted, ref } from 'vue'
 import { useI18n } from 'vue-i18n'
+import { useRouter } from 'vue-router'
+import { useUserStore } from '@/stores/user'
 import adminService from '@/services/adminService'
 import alertService from '@/services/alertService'
 
@@ -154,6 +160,10 @@ import Pause from 'vue-material-design-icons/Pause.vue'
 import Check from 'vue-material-design-icons/Check.vue'
 import Download from 'vue-material-design-icons/Download.vue'
 import ImageMultiple from 'vue-material-design-icons/ImageMultiple.vue'
+import DatabaseSearch from 'vue-material-design-icons/DatabaseSearch.vue'
+
+const router = useRouter()
+const userStore = useUserStore()
 
 const { t: $t } = useI18n()
 const props = defineProps({
@@ -236,6 +246,13 @@ function getRoundResults(round) {
     .catch(alertService.error)
 }
 
+const goToEntryQuery = () => {
+  router.push({
+    name: 'entry-query',
+    query: { roundId: props.round.id }
+  })
+}
+
 onMounted(() => {
   getRoundDetails(props.round)
   getRoundResults(props.round)
diff --git a/frontend/src/i18n/en.json b/frontend/src/i18n/en.json
index b9369c1..056c5c5 100644
--- a/frontend/src/i18n/en.json
+++ b/frontend/src/i18n/en.json
@@ -185,5 +185,42 @@
   "permission-denied-title": "Permission Denied",
   "permission-denied-message": "You do not have the required permissions to access this page.",
   "permission-denied-home": "Go to Home",
-  "montage-required-voting-deadline": "Choose a valid voting deadline"
+  "montage-entry-query": "Entry Query",
+  "montage-query-entries": "Query Entries",
+  "montage-search-and-remove-entries": "Search and remove entries from rounds",
+  "montage-manage-entries": "Manage Entries",
+  "montage-image-name": "Image Name",
+  "montage-image-name-optional": "Image Name (optional)",
+  "montage-search-by-filename": "Search by filename...",
+  "montage-search-images": "Search Images",
+  "montage-search": "Search",
+  "montage-searching": "Searching",
+  "montage-results": "Results",
+  "montage-results-found": "results found",
+  "montage-no-results-found": "No results found",
+  "montage-no-active-entries": "No active entries found in this round",
+  "montage-showing-active-entries": "Showing all active (non-disqualified) entries in this round",
+  "montage-thumbnail": "Thumbnail",
+  "montage-uploader": "Uploader",
+  "montage-votes": "Votes",
+  "montage-status": "Status",
+  "montage-actions": "Actions",
+  "montage-active": "Active",
+  "montage-disqualified": "Disqualified",
+  "montage-remove": "Remove",
+  "montage-remove-entry": "Remove entry",
+  "montage-confirm-removal": "Confirm Removal",
+  "montage-remove-entry-confirm": "Are you sure you want to remove \"{name}\" from this round?",
+  "montage-reason-optional": "Reason (optional)",
+  "montage-enter-reason": "Enter reason for removal...",
+  "montage-removal-warning": "This action will cancel all votes for this entry and cannot be undone.",
+  "montage-entry-removed-successfully": "Entry removed successfully",
+  "montage-cancel": "Cancel",
+  "montage-close": "Close",
+  "montage-previous": "Previous",
+  "montage-next": "Next",
+  "montage-page": "Page",
+  "montage-of": "of",
+  "montage-no-round-specified": "No round specified",
+  "montage-error-loading-round": "Error loading round information"
 }
diff --git a/frontend/src/router/index.js b/frontend/src/router/index.js
index acd2762..66f1c83 100644
--- a/frontend/src/router/index.js
+++ b/frontend/src/router/index.js
@@ -11,6 +11,7 @@ import VoteView from '@/views/VoteView.vue'
 import VoteEditView from '@/views/VoteEditView.vue'
 import AllCampaignView from '@/views/AllCampaignView.vue'
 import PermissionDenied from '@/views/PermissionDenied.vue'
+import EntryQuery from '@/components/Maintainer/EntryQuery.vue'
 
 const routes = [
   {
@@ -48,6 +49,12 @@ const routes = [
     component: VoteEditView,
     meta: { requiresAuth: true }
   },
+  {
+    path: '/entry-query',
+    name: 'entry-query',
+    component: EntryQuery,
+    meta: { requiresAuth: true }
+  },
   {
     path: '/permission-denied',
     name: 'permission-denied',
diff --git a/frontend/src/services/adminService.js b/frontend/src/services/adminService.js
index f1f70e6..0894a92 100644
--- a/frontend/src/services/adminService.js
+++ b/frontend/src/services/adminService.js
@@ -49,6 +49,24 @@ const adminService = {
 
   advanceRound: (id, data) => apiBackend.post(`admin/round/${id}/advance`, data),
 
+  searchRoundEntries: (roundId, params) => {
+    const queryParams = new URLSearchParams()
+    if (params.search) queryParams.append('search', params.search)
+    if (params.limit) queryParams.append('limit', params.limit)
+    if (params.offset) queryParams.append('offset', params.offset)
+
+    return apiBackend.get(
+      `admin/maintainer/round/${roundId}/entries/search?${queryParams.toString()}`
+    )
+  },
+
+  removeEntry: (roundId, entryId, data) => {
+    return apiBackend.post(
+      `admin/maintainer/round/${roundId}/entry/${entryId}/remove`,
+      data
+    )
+  },
+
   // Direct download URLs (manual baseURL needed)
   downloadRound: (id) => `${apiBackend.defaults.baseURL}admin/round/${id}/results/download`,
   downloadEntries: (id) => `${apiBackend.defaults.baseURL}admin/round/${id}/entries/download`,
diff --git a/montage/admin_endpoints.py b/montage/admin_endpoints.py
index 9e4d7eb..b5800d9 100644
--- a/montage/admin_endpoints.py
+++ b/montage/admin_endpoints.py
@@ -3,23 +3,25 @@
 import io
 import datetime
 
-from collections import defaultdict
-
 from clastic import GET, POST, Response
-from clastic.errors import Forbidden
+from clastic.errors import Forbidden, NotFound
 from boltons.strutils import slugify
-from boltons.timeutils import isoparse
+from sqlalchemy.orm import joinedload
 
 from .utils import (format_date,
                    get_threshold_map,
                    InvalidAction,
-                   DoesNotExist,
                    NotImplementedResponse,
                    js_isoparse)
 
 from .rdb import (CoordinatorDAO,
                  MaintainerDAO,
-                 OrganizerDAO)
+                 OrganizerDAO,
+                 Entry,
+                 Round,
+                 RoundEntry,
+                 CANCELLED_STATUS)
+
 
 CATEGORY_METHOD = 'category'
 ROUND_METHOD = 'round'
@@ -39,6 +41,8 @@ def get_admin_routes():
            POST('/admin/series/<series_id:int>/edit', edit_series),
            POST('/admin/add_organizer', add_organizer),
            POST('/admin/remove_organizer', remove_organizer),
+           GET('/admin/maintainer/round/<round_id:int>/entries/search', search_round_entries),
+           POST('/admin/maintainer/round/<round_id:int>/entry/<entry_id:int>/remove', remove_entry),
            POST('/admin/add_campaign', create_campaign),
            GET('/admin/users', get_users),
            GET('/admin/user', get_user),
@@ -953,6 +957,88 @@ def remove_organizer(user_dao, request_dict):
     return {'data': data}
 
 
+def search_round_entries(user_dao, round_id, request_dict):
+    """Search entries in a round (maintainer access)"""
+    maint_dao = MaintainerDAO(user_dao)
+
+    search = request_dict.get('search', '').strip()
+    limit = min(int(request_dict.get('limit', 100)), 500)
+    offset = int(request_dict.get('offset', 0))
+
+    query = (
+        maint_dao.query(RoundEntry)
+            .filter_by(round_id=round_id)
+            .join(Entry)
+            .options(joinedload('entry'))
+            .options(joinedload('votes'))
+    )
+
+    # Always filter out disqualified entries
+    query = query.filter(RoundEntry.dq_reason.is_(None))
+
+    if search:
+        query = query.filter(Entry.name.like(f'%{search}%'))
+
+    total = query.count()
+    results = query.order_by(Entry.name).limit(limit).offset(offset).all()
+
+    entries = []
+    for re in results:
+        entry_dict = re.entry.to_details_dict(with_uploader=True)
+        entry_dict['is_disqualified'] = re.dq_reason is not None
+        entry_dict['dq_reason'] = re.dq_reason
+        entry_dict['active_votes'] = len([v for v in re.votes if v.status == 'active'])
+        entry_dict['completed_votes'] = len([v for v in re.votes if v.status == 'complete'])
+        entries.append(entry_dict)
+
+    return {'data': {'entries': entries, 'total': total, 'limit': limit, 'offset': offset}}
+
+
+def remove_entry(user_dao, round_id, entry_id, request_dict):
+    """Remove entry from round (maintainer access)"""
+    
+    maint_dao = MaintainerDAO(user_dao)
+    
+    rnd = maint_dao.query(Round).filter_by(id=round_id).first()
+    if not rnd:
+        print("rount not found")
+        raise NotFound('round not found')
+
+    entry = maint_dao.query(Entry).get(entry_id)
+    if not entry:
+        raise NotFound('entry not found')
+    
+    round_entry = (maint_dao.query(RoundEntry)
+                  .filter_by(round_id=round_id)
+                  .join(Entry)
+                  .filter(Entry.id == entry_id)
+                  .first())
+    
+    if not round_entry:
+        raise NotFound('entry not in this round')
+    
+    reason = request_dict.get('reason', '').strip() or 'removed by maintainer'
+    cancel_date = datetime.datetime.utcnow()
+    cancelled_votes = 0
+    
+    for vote in round_entry.votes:
+        if vote.status != CANCELLED_STATUS:
+            vote.status = CANCELLED_STATUS
+            vote.modified_date = cancel_date
+            cancelled_votes += 1
+    
+    round_entry.dq_reason = f'MAINTAINER: {reason}'
+    round_entry.dq_user_id = maint_dao.user.id
+    
+    msg = f'{maint_dao.user.username} removed "{entry.name}" from round {rnd.name}. Reason: {reason}'
+    maint_dao.log_action('remove_entry', round=rnd, message=msg)
+    
+    return {'data': {
+        'entry_id': entry_id,
+        'entry_name': entry.name,
+        'cancelled_votes': cancelled_votes
+    }}
+
 # Endpoints restricted to organizers
 
 
diff --git a/montage/cors.py b/montage/cors.py
index d574874..3fb60a8 100644
--- a/montage/cors.py
+++ b/montage/cors.py
@@ -79,16 +79,21 @@ def _handle_preflight(self, request):
         return resp
     
     def _add_cors_headers(self, response, origin):
-        if origin:
-            if self.allow_all_origins or origin in self.allow_origins:
-                response.headers['Access-Control-Allow-Origin'] = origin
-                response.vary.add('Origin')
-            
-        if self.allow_credentials:
-            response.headers['Access-Control-Allow-Credentials'] = 'true'
-            
-        if self.expose_headers:
-            response.headers['Access-Control-Expose-Headers'] = ', '.join(self.expose_headers)
+        try:
+            if origin:
+                if self.allow_all_origins or origin in self.allow_origins:
+                    response.headers['Access-Control-Allow-Origin'] = origin
+                    if hasattr(response, 'vary'):
+                        response.vary.add('Origin')
+                
+            if self.allow_credentials:
+                response.headers['Access-Control-Allow-Credentials'] = 'true'
+                
+            if self.expose_headers:
+                response.headers['Access-Control-Expose-Headers'] = ', '.join(self.expose_headers)
+        except (AttributeError, TypeError):
+            # Response object doesn't support CORS headers (e.g., exceptions)
+            pass
             
     def __repr__(self):
         cn = self.__class__.__name__