familienarchiv/frontend/src/routes/documents/[id]/edit/+page.server.ts

import { error, fail, redirect } from '@sveltejs/kit';
import { env } from '$env/dynamic/private';
import { createApiClient } from '$lib/api.server';
import { parseBackendError, getErrorMessage } from '$lib/errors';

export async function load({
	params,
	fetch,
	locals,
	depends
}: {
	params: { id: string };
	fetch: typeof globalThis.fetch;
	locals: App.Locals;
	depends: (dep: string) => void;
}) {
	depends('app:document');
	const canWrite =
		locals.user?.groups?.some((g: { permissions: string[] }) =>
			g.permissions.includes('WRITE_ALL')
		) ?? false;
	if (!canWrite) throw error(403, 'Forbidden');

	const { id } = params;
	const api = createApiClient(fetch);

	const [docResult, personsResult] = await Promise.all([
		api.GET('/api/documents/{id}', { params: { path: { id } } }),
		api.GET('/api/persons')
	]);

	if (!docResult.response.ok) {
		const code = (docResult.error as unknown as { code?: string })?.code;
		throw error(docResult.response.status, getErrorMessage(code));
	}
	if (!personsResult.response.ok) {
		throw error(personsResult.response.status, getErrorMessage('INTERNAL_ERROR'));
	}

	return {
		document: docResult.data!,
		persons: personsResult.data
	};
}

export const actions = {
	update: async ({ request, params, fetch }) => {
		// Raw fetch is used here because FormData multipart bodies are passed through
		// directly from the browser without transformation.
		const baseUrl = env.API_INTERNAL_URL || 'http://localhost:8080';
		const formData = await request.formData();

		const res = await fetch(`${baseUrl}/api/documents/${params.id}`, {
			method: 'PUT',
			body: formData
		});

		if (!res.ok) {
			const backendError = await parseBackendError(res);
			return fail(res.status, { error: getErrorMessage(backendError?.code) });
		}

		throw redirect(303, `/documents/${params.id}`);
	},

	markForReview: async ({
		params,
		fetch
	}: {
		params: { id: string };
		fetch: typeof globalThis.fetch;
	}) => {
		const baseUrl = env.API_INTERNAL_URL || 'http://localhost:8080';
		const api = createApiClient(fetch);

		// Fetch current document to preserve all existing fields
		const docResult = await api.GET('/api/documents/{id}', { params: { path: { id: params.id } } });
		if (!docResult.response.ok) {
			const code = (docResult.error as unknown as { code?: string })?.code;
			return fail(docResult.response.status, { error: getErrorMessage(code) });
		}

		const doc = docResult.data!;
		const formData = new FormData();
		if (doc.title) formData.set('title', doc.title);
		if (doc.documentDate) formData.set('documentDate', doc.documentDate);
		if (doc.location) formData.set('location', doc.location);
		if (doc.documentLocation) formData.set('documentLocation', doc.documentLocation);
		if (doc.transcription) formData.set('transcription', doc.transcription);
		if (doc.summary) formData.set('summary', doc.summary);
		if (doc.sender?.id) formData.set('senderId', doc.sender.id);
		if (doc.receivers?.length) {
			doc.receivers.forEach((r: { id: string }) => formData.append('receiverIds', r.id));
		}
		if (doc.tags?.length) {
			formData.set('tags', doc.tags.map((t: { name: string }) => t.name).join(','));
		}
		formData.set('metadataComplete', 'false');

		const res = await fetch(`${baseUrl}/api/documents/${params.id}`, {
			method: 'PUT',
			body: formData
		});

		if (!res.ok) {
			const backendError = await parseBackendError(res);
			return fail(res.status, { error: getErrorMessage(backendError?.code) });
		}

		throw redirect(303, `/documents/${params.id}`);
	},

	delete: async ({ params, fetch }) => {
		const baseUrl = env.API_INTERNAL_URL || 'http://localhost:8080';

		const res = await fetch(`${baseUrl}/api/documents/${params.id}`, {
			method: 'DELETE'
		});

		if (!res.ok) {
			const backendError = await parseBackendError(res);
			return fail(res.status, { error: getErrorMessage(backendError?.code) });
		}

		throw redirect(303, '/');
	}
};