presseportale/app/Http/Controllers/Api/V1/PressReleaseImageController.php

<?php

namespace App\Http\Controllers\Api\V1;

use App\Enums\AiImageDeclaration;
use App\Enums\PressReleaseStatus;
use App\Http\Controllers\Controller;
use App\Http\Requests\Api\V1\StorePressReleaseImageRequest;
use App\Http\Resources\PressReleaseImageResource;
use App\Models\PressRelease;
use App\Models\PressReleaseImage;
use App\Scopes\PortalScope;
use App\Services\Image\ImageService;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;
use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
use Illuminate\Http\Response;
use Illuminate\Http\UploadedFile;
use RuntimeException;

class PressReleaseImageController extends Controller
{
    public function __construct(private readonly ImageService $imageService) {}

    public function index(Request $request, int $pressRelease): AnonymousResourceCollection
    {
        abort_unless($request->user()->tokenCan('press-releases:read'), 403);

        $pressRelease = $this->findOwnedPressRelease($pressRelease, $request);
        abort_unless($pressRelease !== null, 403);

        return PressReleaseImageResource::collection(
            $pressRelease->images()->orderBy('sort_order')->orderBy('id')->get()
        );
    }

    public function store(StorePressReleaseImageRequest $request, int $pressRelease): JsonResponse
    {
        $pressRelease = $this->findOwnedPressRelease($pressRelease, $request);
        abort_unless($pressRelease !== null, 403);

        if (! $this->canChangeImages($pressRelease)) {
            return response()->json([
                'message' => 'Only draft or rejected press releases may be edited.',
            ], 409);
        }

        $validated = $request->validated();
        /** @var UploadedFile $file */
        $file = $request->file('image');

        try {
            $stored = $this->imageService->storePressReleaseImage($file, $pressRelease->id);
        } catch (RuntimeException $exception) {
            return response()->json([
                'message' => $exception->getMessage(),
            ], 422);
        }

        if ((bool) ($validated['is_preview'] ?? false)) {
            $pressRelease->images()->update(['is_preview' => false]);
        }

        $image = $pressRelease->images()->create([
            'disk' => $stored['disk'],
            'path' => $stored['path'],
            'variants' => $stored['variants'],
            // v1 verlangt die KI-Kennzeichnung je Bild (FormRequest);
            // Legacy-/service-Calls ohne Feld gelten als Originalfoto
            // (Kompatibilitäts-Default, Entscheidung 10.07.2026).
            'ai_declaration' => $validated['ai_declaration'] ?? AiImageDeclaration::Original->value,
            'title' => $validated['title'] ?? null,
            'description' => $validated['description'] ?? null,
            'copyright' => $validated['copyright'] ?? null,
            'is_preview' => (bool) ($validated['is_preview'] ?? false),
            'sort_order' => ((int) $pressRelease->images()->max('sort_order')) + 1,
            'width' => $stored['width'],
            'height' => $stored['height'],
            'mime' => $stored['mime'],
        ]);

        return PressReleaseImageResource::make($image)
            ->response()
            ->setStatusCode(201);
    }

    public function destroy(Request $request, int $pressReleaseImage): Response|JsonResponse
    {
        abort_unless($request->user()->tokenCan('press-release-images:write'), 403);

        $image = PressReleaseImage::query()
            ->whereKey($pressReleaseImage)
            ->whereHas('pressRelease', fn ($query) => $query->withoutGlobalScope(PortalScope::class)->where('user_id', $request->user()->id))
            ->with(['pressRelease' => fn ($query) => $query->withoutGlobalScope(PortalScope::class)])
            ->first();

        abort_unless($image !== null, 403);

        if (! $this->canChangeImages($image->pressRelease)) {
            return response()->json([
                'message' => 'Only draft or rejected press releases may be edited.',
            ], 409);
        }

        $this->imageService->deletePressReleaseImage($image->disk, $image->path, $image->variants);
        $image->delete();

        return response()->noContent();
    }

    private function findOwnedPressRelease(int $pressReleaseId, Request $request): ?PressRelease
    {
        return PressRelease::withoutGlobalScope(PortalScope::class)
            ->whereKey($pressReleaseId)
            ->ownedByApiUser($request->user())
            ->first();
    }

    private function canChangeImages(PressRelease $pressRelease): bool
    {
        $status = $pressRelease->status instanceof PressReleaseStatus
            ? $pressRelease->status->value
            : (string) $pressRelease->status;

        return in_array($status, [PressReleaseStatus::Draft->value, PressReleaseStatus::Rejected->value], true);
    }
}