ClassHelper/packages/server/src/modules/imports/imports.module.ts

import { Router } from 'express';
import { ApiError, sendOk } from '../../lib/http.js';
import { idParamSchema } from '../../lib/schemas.js';
import { authenticate, getAuthUser, requireAnyPermission } from '../../middleware/auth.js';
import { validate, validatedBody, validatedParams, validatedQuery } from '../../middleware/validate.js';
import { defineModule } from '../module.types.js';
import {
  IMPORT_KINDS,
  tableCommitSchema,
  tableFileSchema,
  timeLayoutImportSchema,
  classPlanImportSchema,
  timeLayoutQuerySchema,
  type TableCommitInput,
  type TableFileInput,
  type TimeLayoutImportInput,
  type ClassPlanImportInput,
} from './imports.schemas.js';
import { buildTemplateCsv, buildTemplateXlsx, commitTable, previewTable } from './table-import.service.js';
import { importClassPlan, previewClassPlan } from './class-plan.service.js';
import {
  deleteTimeLayout,
  importTimeLayout,
  listTimeLayouts,
  previewClassIslandTimeLayout,
} from './time-layout.service.js';

const router = Router();
router.use(authenticate());

/** 名单类导入（学生/教师账号）只有管理员能做；成绩类按班级权限判定 */
function assertImportKindAllowed(kind: (typeof IMPORT_KINDS)[number], role: string): void {
  if ((kind === 'students' || kind === 'teachers') && role !== 'ADMIN') {
    throw ApiError.forbidden(
      kind === 'teachers' ? '只有管理员可以录入或导入教师账号' : '只有管理员可以导入学生名单',
    );
  }
}

/** 查询参数里的 kind 收敛为合法值（默认 grades，避免非法值被当成成绩悄悄写入） */
function resolveImportKind(value: unknown): (typeof IMPORT_KINDS)[number] {
  return IMPORT_KINDS.includes(value as (typeof IMPORT_KINDS)[number])
    ? (value as (typeof IMPORT_KINDS)[number])
    : 'grades';
}

/**
 * GET /api/imports/template?kind=grades|students|teachers&format=csv|xlsx - 下载导入模板
 * 成绩模板：管理员或班主任（空白模板，不含任何业务数据）；学生/教师名单模板：仅管理员
 */
router.get('/template', requireAnyPermission('import:students', 'grade:import', 'import:teachers', 'import:schedule', 'import:class-teachers'), (req, res) => {
  const kind = resolveImportKind(req.query.kind);
  assertImportKindAllowed(kind, getAuthUser(req).role);
  const format = req.query.format === 'xlsx' ? 'xlsx' : 'csv';
  if (format === 'xlsx') {
    const base64 = buildTemplateXlsx(kind);
    res.setHeader('content-type', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet');
    res.setHeader('content-disposition', `attachment; filename="template-${kind}.xlsx"`);
    res.send(Buffer.from(base64, 'base64'));
    return;
  }
  sendOk(
    res,
    { kind, format, fileName: `template-${kind}.csv`, content: buildTemplateCsv(kind) },
    '模板生成成功',
  );
});

/**
 * POST /api/imports/table/preview - 上传表格并预览（解析 + 必填列校验 + 建议字段映射）
 * 成绩：管理员或班主任；学生/教师名单：仅管理员（与写入权限保持一致）
 */
router.post(
  '/table/preview',
  requireAnyPermission('import:students', 'grade:import', 'import:teachers', 'import:schedule', 'import:class-teachers'),
  validate({ body: tableFileSchema }),
  (req, res) => {
    const input = validatedBody<TableFileInput>(req);
    assertImportKindAllowed(input.kind, getAuthUser(req).role);
    sendOk(res, previewTable(input), '表格解析成功');
  },
);

/**
 * POST /api/imports/table/commit - 执行导入（字段映射 + 写入模式 + 结果统计）
 *
 * 路由放行 ADMIN|TEACHER，真正的权限在 service 内按 kind + 班级二次校验：
 * 成绩 → 管理员或本班班主任；学生名单 → 仅管理员；科任老师一律 403（需求 7）。
 */
router.post(
  '/table/commit',
  requireAnyPermission('import:students', 'grade:import', 'import:teachers', 'import:schedule', 'import:class-teachers'),
  validate({ body: tableCommitSchema }),
  async (req, res) => {
    const input = validatedBody<TableCommitInput>(req);
    assertImportKindAllowed(input.kind, getAuthUser(req).role);
    // 教师名单与班级无关；成绩/学生名单必须带班级，否则拒绝（避免写到"全局"）
    if (input.kind !== 'teachers' && !input.classId) {
      throw ApiError.badRequest('请先选择要导入的班级');
    }
    const result = await commitTable(getAuthUser(req), input);
    sendOk(
      res,
      result,
      `导入完成：新增 ${result.inserted} / 更新 ${result.updated} / 跳过 ${result.skipped} / 失败 ${result.failed}`,
    );
  },
);

/**
 * POST /api/imports/time-layout/preview - 预览 ClassIsland 课表时间 JSON（只解析不写库）
 * 权限与"课表管理"一致：管理员或本班班主任
 */
router.post('/time-layout/preview', validate({ body: timeLayoutImportSchema }), async (req, res) => {
  const input = validatedBody<TimeLayoutImportInput>(req);
  // 预览也要校验班级权限（与导入一致），避免越权探测
  const { assertCanManageSchedule } = await import('../../lib/access.js');
  await assertCanManageSchedule(getAuthUser(req), input.classId);
  sendOk(res, previewClassIslandTimeLayout(input.payload), '解析完成');
});

/** GET /api/imports/time-layout?classId= - 查看该班已导入的时间配置 */
router.get('/time-layout', validate({ query: timeLayoutQuerySchema }), async (req, res) => {
  const { classId } = validatedQuery<{ classId: string }>(req);
  sendOk(res, await listTimeLayouts(getAuthUser(req), classId), '获取时间配置成功');
});

/**
 * POST /api/imports/time-layout - 导入 ClassIsland 时间配置
 * mode=replace 覆盖 / merge 按开始时间合并；解析失败返回 400 且不修改原配置。
 */
router.post('/time-layout', validate({ body: timeLayoutImportSchema }), async (req, res) => {
  const result = await importTimeLayout(getAuthUser(req), validatedBody<TimeLayoutImportInput>(req));
  sendOk(
    res,
    result,
    result.mode === 'merge'
      ? `合并导入成功：合并 ${result.merged} 节 / 新增 ${result.replaced} 节`
      : `覆盖导入成功：共 ${result.replaced} 节`,
  );
});

/** DELETE /api/imports/time-layout/:id - 删除某份时间配置 */
router.delete('/time-layout/:id', validate({ params: idParamSchema }), async (req, res) => {
  const { id } = validatedParams<{ id: string }>(req);
  await deleteTimeLayout(getAuthUser(req), id);
  sendOk(res, { id }, '时间配置已删除');
});

/**
 * POST /api/imports/class-plan/preview - 预览 ClassIsland 课程表 JSON（只解析不写库）
 * 真实档案里单双周由 ClassPlan.TimeRule.WeekCountDiv / WeekCountDivTotal 表达。
 */
router.post('/class-plan/preview', validate({ body: classPlanImportSchema }), async (req, res) => {
  const result = await previewClassPlan(getAuthUser(req), validatedBody<ClassPlanImportInput>(req));
  sendOk(
    res,
    result,
    `解析出 ${result.entries.length} 节课（${result.subjects.length} 个科目，缺 ${result.missingSubjects.length} 个待建课程）`,
  );
});

/**
 * POST /api/imports/class-plan - 导入 ClassIsland 课程表（支持单双周）
 * replace 清空后写入 / merge 按 星期+开始时间+单双周 去重；解析失败返回 400 且不改动现有课表。
 */
router.post('/class-plan', validate({ body: classPlanImportSchema }), async (req, res) => {
  const result = await importClassPlan(getAuthUser(req), validatedBody<ClassPlanImportInput>(req));
  sendOk(
    res,
    result,
    `导入成功：新增 ${result.created} 节 / 更新 ${result.updated} 节` +
      `${result.createdCourses.length > 0 ? `（自动补建课程：${result.createdCourses.join('、')}）` : ''}`,
  );
});

export const importsModule = defineModule({
  name: 'imports',
  basePath: '/imports',
  router,
});