nx9-url-shortener/src/services/slug_transfer.rs

//! Cross-tenant slug transfer business logic.
//!
//! Copies URL/page content between tenant content DBs, then updates v0.8 slug
//! databases ownership. Handlers own admin auth and HTTP mapping.

use crate::db::tenant::TenantOpenMode;
use crate::identity::TenantId;
use crate::state::{AppState, UserDbs};
use crate::utils::lock_db;
use chrono::Utc;

#[derive(Debug)]
pub enum TransferError {
    NotFound(&'static str),
    BadRequest(String),
    Internal(String),
}

impl TransferError {
    pub fn message(&self) -> String {
        match self {
            Self::NotFound(m) => (*m).to_string(),
            Self::BadRequest(m) | Self::Internal(m) => m.clone(),
        }
    }
}

#[derive(Debug, Clone)]
pub struct SlugTransferRequest {
    pub slug: String,
    pub new_owner_user_id: i64,
}

#[derive(Debug)]
pub struct SlugTransferResult {
    pub old_owner_user_id: i64,
    pub new_owner_user_id: i64,
    pub old_owner_tenant_id: TenantId,
    pub new_owner_tenant_id: TenantId,
    pub target_type: String,
    pub new_target_id: String,
}

/// Look up slug ownership in v0.8 slug databases (`global_urls.db` / `global_landing_pages.db`).
pub fn lookup_slug(
    state: &AppState,
    slug: &str,
) -> Result<crate::db::slugs::ResolvedSlugInfo, TransferError> {
    match state.lookup_slug(slug) {
        Ok(Some(info)) => Ok(info),
        Ok(None) => Err(TransferError::NotFound("Slug not found")),
        Err(e) => Err(TransferError::Internal(e.to_string())),
    }
}

/// Copy content row between tenants and return the new target id.
fn copy_content(
    state: &AppState,
    old_dbs: &UserDbs,
    new_dbs: &UserDbs,
    slug: &str,
    target_type: &str,
    new_owner_user_id: i64,
) -> Result<String, TransferError> {
    let old_conn = lock_db(&old_dbs.content, "old_content_db")
        .map_err(|e| TransferError::Internal(e.to_string()))?;
    let new_conn = lock_db(&new_dbs.content, "new_content_db")
        .map_err(|e| TransferError::Internal(e.to_string()))?;

    if target_type == "url" {
        let url = match crate::db::content::get_url_by_code(&old_conn, slug) {
            Ok(Some(u)) => u,
            Ok(None) => {
                return Err(TransferError::NotFound(
                    "Content not found in owner database",
                ))
            }
            Err(e) => return Err(TransferError::Internal(e.to_string())),
        };

        {
            let new_users_conn = lock_db(&state.users_db, "users_db")
                .map_err(|e| TransferError::Internal(e.to_string()))?;
            if let Ok(Some(quota)) =
                crate::db::users::get_user_quotas(&new_users_conn, new_owner_user_id)
            {
                if quota.current_urls >= quota.max_urls {
                    return Err(TransferError::BadRequest(
                        "New owner has exceeded URL quota limit".into(),
                    ));
                }
            }
        }

        let new_url = crate::db::content::create_url_extended(
            &new_conn,
            &url.code,
            &url.destination,
            url.title.as_deref(),
            url.description.as_deref(),
            &url.tags,
            url.expires_at.as_deref(),
            url.password_hash.as_deref(),
            url.max_access_count,
        )
        .map_err(|e| TransferError::Internal(format!("Failed to copy URL to new owner: {e}")))?;
        let _ = crate::db::content::delete_url(&old_conn, &url.id);
        Ok(new_url.id)
    } else if target_type == "page" {
        let page = match crate::db::content::get_landing_page_by_code(&old_conn, slug) {
            Ok(Some(p)) => p,
            Ok(None) => {
                return Err(TransferError::NotFound(
                    "Content not found in owner database",
                ))
            }
            Err(e) => return Err(TransferError::Internal(e.to_string())),
        };

        {
            let new_users_conn = lock_db(&state.users_db, "users_db")
                .map_err(|e| TransferError::Internal(e.to_string()))?;
            if let Ok(Some(quota)) =
                crate::db::users::get_user_quotas(&new_users_conn, new_owner_user_id)
            {
                if quota.current_landings >= quota.max_landings {
                    return Err(TransferError::BadRequest(
                        "New owner has exceeded landing page quota limit".into(),
                    ));
                }
            }
        }

        let new_page = crate::db::content::create_landing_page(
            &new_conn,
            &page.code,
            &page.slug,
            &page.title,
            &page.html_content,
            &page.state,
        )
        .map_err(|e| TransferError::Internal(format!("Failed to copy Page to new owner: {e}")))?;
        let _ = crate::db::content::delete_landing_page(&old_conn, &page.id);
        Ok(new_page.id)
    } else {
        Err(TransferError::NotFound(
            "Content not found in owner database",
        ))
    }
}

/// Perform a full slug transfer (content + v0.8 slug registry + quotas + history).
pub fn transfer_slug(
    state: &AppState,
    req: &SlugTransferRequest,
    admin_username: &str,
) -> Result<SlugTransferResult, TransferError> {
    let slug_info = lookup_slug(state, &req.slug)?;
    let target_type = slug_info.target_type.as_str().to_string();

    let old_owner_tenant_id = TenantId::parse(&slug_info.owner_tenant_id).map_err(|_| {
        TransferError::Internal(format!(
            "Invalid owner tenant ID '{}' on slug '{}'",
            slug_info.owner_tenant_id, req.slug
        ))
    })?;

    // Look up old owner user row in users.db
    let (old_owner_user_id, new_owner_tenant_id) = {
        let users_conn = lock_db(&state.users_db, "users_db")
            .map_err(|e| TransferError::Internal(e.to_string()))?;

        let old_user = crate::db::users::get_user_by_tenant_id(&users_conn, old_owner_tenant_id)
            .map_err(|e| TransferError::Internal(e.to_string()))?
            .ok_or_else(|| {
                TransferError::Internal(format!(
                    "Current owner user for tenant {old_owner_tenant_id} not found"
                ))
            })?;

        let new_user = crate::db::users::get_user_by_id(&users_conn, req.new_owner_user_id)
            .map_err(|e| TransferError::Internal(e.to_string()))?
            .ok_or_else(|| {
                TransferError::BadRequest(format!(
                    "Target user ID {} not found",
                    req.new_owner_user_id
                ))
            })?;

        if new_user.account_type == "admin" {
            return Err(TransferError::BadRequest(
                "Target user cannot be an Admin account (must be a tenant account)".into(),
            ));
        }

        let new_tid = new_user.tenant_id.ok_or_else(|| {
            TransferError::BadRequest("Target user has no TenantId allocated".into())
        })?;

        (old_user.id, new_tid)
    };

    if old_owner_tenant_id == new_owner_tenant_id {
        return Err(TransferError::BadRequest(
            "New owner must be different from the current owner".into(),
        ));
    }

    let old_dbs = state
        .open_tenant(old_owner_tenant_id, TenantOpenMode::CoreJob)
        .map_err(|_| TransferError::Internal("Failed to load current owner's database".into()))?;
    let new_dbs = state
        .open_tenant(new_owner_tenant_id, TenantOpenMode::Provision)
        .map_err(|_| TransferError::Internal("Failed to load new owner's database".into()))?;

    let new_target_id = copy_content(
        state,
        &old_dbs,
        &new_dbs,
        &req.slug,
        &target_type,
        req.new_owner_user_id,
    )?;

    // Update authoritative v0.8 slug databases
    {
        let urls_conn = lock_db(&state.db.global_urls, "global_urls")
            .map_err(|e| TransferError::Internal(e.to_string()))?;
        let pages_conn = lock_db(&state.db.global_landing_pages, "global_landing_pages")
            .map_err(|e| TransferError::Internal(e.to_string()))?;

        crate::db::slugs::transfer_slug_owner(
            &urls_conn,
            &pages_conn,
            &req.slug,
            &new_owner_tenant_id,
            &new_target_id,
        )
        .map_err(|e| TransferError::Internal(format!("Failed to update slug registry: {e}")))?;
    }

    // Write audit event and history
    {
        let system_conn = lock_db(&state.system_db, "system_db")
            .map_err(|e| TransferError::Internal(e.to_string()))?;
        let now = Utc::now().to_rfc3339();

        let _ = system_conn.execute(
            "INSERT INTO slug_history (slug, old_owner_user_id, new_owner_user_id, action, timestamp, admin_username)
             VALUES (?1, ?2, ?3, 'transferred', ?4, ?5);",
            rusqlite::params![
                req.slug,
                old_owner_user_id,
                req.new_owner_user_id,
                now,
                admin_username
            ],
        );

        let users_conn = lock_db(&state.users_db, "users_db")
            .map_err(|e| TransferError::Internal(e.to_string()))?;
        let field = if target_type == "url" {
            "urls"
        } else {
            "landings"
        };
        let _ = crate::db::users::decrement_quota_counter(&users_conn, old_owner_user_id, field);
        let _ =
            crate::db::users::increment_quota_counter(&users_conn, req.new_owner_user_id, field);

        let _ = crate::db::audit_events::write_audit_event(
            &system_conn,
            admin_username,
            "SLUG_TRANSFER",
            "slug",
            &req.slug,
            Some(&format!(
                "From tenant {} (user {}) to tenant {} (user {})",
                old_owner_tenant_id, old_owner_user_id, new_owner_tenant_id, req.new_owner_user_id
            )),
        );
    }

    Ok(SlugTransferResult {
        old_owner_user_id,
        new_owner_user_id: req.new_owner_user_id,
        old_owner_tenant_id,
        new_owner_tenant_id,
        target_type,
        new_target_id,
    })
}