"""Wiki plugin routes — articles CRUD, categories, versioning.""" from __future__ import annotations import uuid from fastapi import APIRouter, Depends, HTTPException, Query, status from sqlalchemy.ext.asyncio import AsyncSession from app.core.audit import log_audit from app.core.db import get_db from app.deps import require_permission, require_workspace_scope from app.plugins.builtins.wiki import services from app.plugins.builtins.wiki.schemas import ( ArticleCreate, ArticleUpdate, CategoryCreate, ) router = APIRouter(prefix="/api/v1/wiki", tags=["wiki"]) @router.get("/articles") async def list_articles( page: int = Query(1, ge=1), page_size: int = Query(20, ge=1, le=100), category_id: str | None = None, status: str | None = None, search: str | None = None, db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:read")), workspace_scope: dict | None = Depends(require_workspace_scope("wiki")), ): """List wiki articles. Phase N4: an active workspace scope (X-Workspace-ID) restricts articles to the category subtree (category_ids incl. children — pure AND). """ scoped_category_ids: set | None = None if workspace_scope: from app.plugins.builtins.wiki.models import WikiCategory from app.services.workspace_scope_service import expand_folder_scope raw_ids = workspace_scope.get("category_ids") if isinstance(raw_ids, list) and raw_ids: scoped_category_ids = await expand_folder_scope(db, WikiCategory, raw_ids) result = await services.list_articles( db, uuid.UUID(current_user["tenant_id"]), page=page, page_size=page_size, category_id=category_id, status=status, search=search, ) # Phase N4: filter to the scoped category subtree (post-fetch AND filter) if scoped_category_ids is not None: items = [ a for a in result["items"] if a.get("category_id") and uuid.UUID(a["category_id"]) in scoped_category_ids ] result["items"] = items result["total"] = len(items) return result @router.post("/articles", status_code=status.HTTP_201_CREATED) async def create_article( body: ArticleCreate, db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:write")), ): tenant_id = uuid.UUID(current_user["tenant_id"]) user_id = uuid.UUID(current_user["user_id"]) result = await services.create_article(db, tenant_id, user_id, body.model_dump()) if result and result.get("id"): await log_audit(db, tenant_id, user_id, "create", "wiki_article", uuid.UUID(result["id"]), changes={"title": body.title}) return result @router.get("/articles/{article_id}") async def get_article( article_id: str, db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:read")), ): result = await services.get_article(db, uuid.UUID(current_user["tenant_id"]), uuid.UUID(article_id)) if result is None: raise HTTPException(status_code=404, detail={"detail": "Article not found", "code": "not_found"}) return result @router.patch("/articles/{article_id}") async def update_article( article_id: str, body: ArticleUpdate, db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:write")), ): result = await services.update_article( db, uuid.UUID(current_user["tenant_id"]), uuid.UUID(current_user["user_id"]), uuid.UUID(article_id), body.model_dump(exclude_unset=True), ) if result is None: raise HTTPException(status_code=404, detail={"detail": "Article not found", "code": "not_found"}) return result @router.delete("/articles/{article_id}", status_code=status.HTTP_204_NO_CONTENT) async def delete_article( article_id: str, db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:delete")), ): tenant_id = uuid.UUID(current_user["tenant_id"]) user_id = uuid.UUID(current_user["user_id"]) ok = await services.delete_article(db, tenant_id, uuid.UUID(article_id)) if not ok: raise HTTPException(status_code=404, detail={"detail": "Article not found", "code": "not_found"}) await log_audit(db, tenant_id, user_id, "delete", "wiki_article", uuid.UUID(article_id)) @router.get("/articles/{article_id}/versions") async def list_versions( article_id: str, db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:read")), ): return {"items": await services.list_versions(db, uuid.UUID(current_user["tenant_id"]), uuid.UUID(article_id))} @router.post("/articles/{article_id}/versions/{version}/restore") async def restore_version( article_id: str, version: int, db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:write")), ): result = await services.restore_version( db, uuid.UUID(current_user["tenant_id"]), uuid.UUID(current_user["user_id"]), uuid.UUID(article_id), version, ) if result is None: raise HTTPException(status_code=404, detail={"detail": "Version not found", "code": "not_found"}) return result @router.get("/categories") async def list_categories( db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:read")), workspace_scope: dict | None = Depends(require_workspace_scope("wiki")), ): """List wiki categories (Phase N4: scope reduces to the category subtree).""" items = await services.list_categories(db, uuid.UUID(current_user["tenant_id"])) if workspace_scope: from app.plugins.builtins.wiki.models import WikiCategory from app.services.workspace_scope_service import expand_folder_scope raw_ids = workspace_scope.get("category_ids") if isinstance(raw_ids, list) and raw_ids: subtree = await expand_folder_scope(db, WikiCategory, raw_ids) allowed = subtree or set() items = [c for c in items if uuid.UUID(c["id"]) in allowed] return {"items": items} @router.post("/categories", status_code=status.HTTP_201_CREATED) async def create_category( body: CategoryCreate, db: AsyncSession = Depends(get_db), current_user: dict = Depends(require_permission("wiki:write")), ): return await services.create_category( db, uuid.UUID(current_user["tenant_id"]), uuid.UUID(current_user["user_id"]), body.model_dump(), )