OXYGENHUB
# f2d2776b2a14 oxygenhub / crates / hub / src / api / projects.rs
22.2 KiB · Rust · last changed Board charts and forecasts from the board's history, and its timeline (closes #357, closes #361) 1 day ago source blame history raw
1
//! Projects over the API (hub spec §8.2, §12.1): the same rules as the
2
//! pages, through the functions they use.
3
4
use super::{caller, forbidden, not_found, ApiError, Caller};
5
use crate::db::projects as pdb;
6
use crate::web::projects as wp;
7
use crate::Shared;
8
use axum::extract::{Path, Query, State};
9
use axum::http::{HeaderMap, StatusCode};
10
use axum::Json;
11
use hub_api::{
12
    Board, CardMove, CardsArchive, CardsArchived, CardsMove, CardsMoved, NewCard, NewProject, Project, ProjectCard, ProjectColumn,
13
    ProjectEdit,
14
};
15
16
fn project_of(app: &Shared, p: &pdb::Project) -> Project {
17
    Project {
18
        owner: p.owner.clone(),
19
        number: p.number,
20
        title: p.title.clone(),
21
        description: p.description.clone(),
22
        public: p.public,
23
        closed: p.closed,
24
        updated_ms: p.updated_ms,
25
        url: format!("{}/projects/{}/{}", app.config.base_url().trim_end_matches('/'), p.owner, p.number),
26
    }
27
}
28
29
fn card_of(v: &wp::CardView) -> ProjectCard {
30
    ProjectCard {
31
        id: v.card.id,
32
        kind: v.card.kind.clone(),
33
        reference: v.reference.clone(),
34
        title: v.title.clone(),
35
        state: v.state.clone(),
36
        labels: v.labels.iter().map(|l| l.name.clone()).collect(),
37
        assignees: v.assignees.clone(),
38
        archived_ms: v.card.archived_ms,
39
    }
40
}
41
42
async fn rights(app: &Shared, c: &Caller, owner: &str) -> Result<wp::Rights, ApiError> {
43
    wp::rights_of(app, c.account.as_ref(), owner).await?.ok_or_else(|| not_found("no such owner"))
44
}
45
46
/// A project the caller may see.
47
async fn visible(app: &Shared, c: &Caller, owner: &str, number: i64) -> Result<(wp::Rights, pdb::Project), ApiError> {
48
    let r = rights(app, c, owner).await?;
49
    let p = pdb::get(&app.db, owner, number).await?.filter(|p| p.public || r.member).ok_or_else(|| not_found("no such project"))?;
50
    Ok((r, p))
51
}
52
53
/// A project the caller may change: a write token, edit rights, and open unless `closed_ok`.
54
async fn changeable(
55
    app: &Shared,
56
    headers: &HeaderMap,
57
    owner: &str,
58
    number: i64,
59
    closed_ok: bool,
60
) -> Result<(Caller, pdb::Project), ApiError> {
61
    let c = caller(app, headers).await?;
62
    c.require("repo:write")?;
63
    let (r, p) = visible(app, &c, owner, number).await?;
64
    if !r.edit {
65
        return Err(forbidden("only the owner (or the organisation's members) may change this project"));
66
    }
67
    if p.closed && !closed_ok {
68
        return Err(ApiError(StatusCode::CONFLICT, "this project is closed; reopen it to change it".into()));
69
    }
70
    Ok((c, p))
71
}
72
73
/// A column by id or by name (case-insensitive); the first when absent.
74
async fn column(app: &Shared, project_id: i64, spec: Option<&str>) -> Result<pdb::Column, ApiError> {
75
    let cols = pdb::columns(&app.db, project_id).await?;
76
    let found = match spec.map(str::trim).filter(|s| !s.is_empty()) {
77
        None => cols.into_iter().next(),
78
        Some(s) => cols.into_iter().find(|c| c.id.to_string() == s || c.name.eq_ignore_ascii_case(s)),
79
    };
80
    found.ok_or_else(|| ApiError(StatusCode::BAD_REQUEST, "no such column".into()))
81
}
82
83
/// `GET /projects/{owner}`.
84
pub async fn list(State(app): State<Shared>, headers: HeaderMap, Path(owner): Path<String>) -> Result<Json<Vec<Project>>, ApiError> {
85
    let c = caller(&app, &headers).await?;
86
    let r = rights(&app, &c, &owner).await?;
87
    let list = pdb::of_owner(&app.db, &owner).await?;
88
    Ok(Json(list.iter().filter(|p| p.public || r.member).map(|p| project_of(&app, p)).collect()))
89
}
90
91
/// `POST /projects/{owner}`.
92
pub async fn create(
93
    State(app): State<Shared>,
94
    headers: HeaderMap,
95
    Path(owner): Path<String>,
96
    Json(body): Json<NewProject>,
97
) -> Result<(StatusCode, Json<Project>), ApiError> {
98
    let c = caller(&app, &headers).await?;
99
    c.require("repo:write")?;
100
    if !rights(&app, &c, &owner).await?.edit {
101
        return Err(forbidden("only the owner (or the organisation's members) may create projects"));
102
    }
103
    let title = body.title.trim();
104
    if title.is_empty() || title.chars().count() > 100 {
105
        return Err(ApiError(StatusCode::BAD_REQUEST, "a project needs a title of up to 100 characters".into()));
106
    }
107
    let p = pdb::create(&app.db, &owner, title, body.description.trim(), !body.private).await?;
108
    crate::db::accounts::audit(&app.db, c.account.as_ref(), "project.created", &format!("{owner}/{}", p.number), title).await.ok();
109
    Ok((StatusCode::CREATED, Json(project_of(&app, &p))))
110
}
111
112
/// `GET /projects/{owner}/{n}`'s filter (#361): `q` as the board's filter
113
/// bar takes it, or the `view` saved under that name.
114
#[derive(serde::Deserialize, Default)]
115
pub struct BoardFilter {
116
    #[serde(default)]
117
    q: Option<String>,
118
    #[serde(default)]
119
    view: Option<String>,
120
}
121
122
/// `GET /projects/{owner}/{n}`.
123
pub async fn board(
124
    State(app): State<Shared>,
125
    headers: HeaderMap,
126
    Path((owner, number)): Path<(String, i64)>,
127
    Query(f): Query<BoardFilter>,
128
) -> Result<Json<Board>, ApiError> {
129
    let c = caller(&app, &headers).await?;
130
    let (_, p) = visible(&app, &c, &owner, number).await?;
131
    let q = match (f.q, f.view) {
132
        (Some(q), _) => q,
133
        (None, Some(name)) => pdb::views(&app.db, p.id)
134
            .await?
135
            .into_iter()
136
            .find(|v| v.name == name)
137
            .map(|v| v.q)
138
            .ok_or_else(|| ApiError(StatusCode::NOT_FOUND, format!("no view {name}")))?,
139
        (None, None) => String::new(),
140
    };
141
    let Json(mut b) = board_of(&app, &c, &owner, number).await?;
142
    if !q.trim().is_empty() {
143
        let filter = wp::CardFilter::parse(&q);
144
        let now = crate::db::now_ms();
145
        let (columns, _) = wp::board_columns(&app, c.account.as_ref(), &owner, &p, false).await?;
146
        for (out, col) in b.columns.iter_mut().zip(columns.iter()) {
147
            out.cards = col.cards.iter().filter(|card| filter.keeps(card, now)).map(card_of).collect();
148
        }
149
        b.filter = q.trim().to_string();
150
    }
151
    Ok(Json(b))
152
}
153
154
/// `PATCH /projects/{owner}/{n}`.
155
pub async fn edit(
156
    State(app): State<Shared>,
157
    headers: HeaderMap,
158
    Path((owner, number)): Path<(String, i64)>,
159
    Json(body): Json<ProjectEdit>,
160
) -> Result<Json<Project>, ApiError> {
161
    let (c, p) = changeable(&app, &headers, &owner, number, true).await?;
162
    // A transfer (#125) first: the other fields then apply where it went.
163
    let (owner, number) = match body.owner.as_deref().map(str::trim).filter(|to| !to.is_empty() && *to != owner) {
164
        Some(to) => match wp::rights_of(&app, c.account.as_ref(), to).await? {
165
            Some(r) if r.edit => {
166
                let moved = pdb::transfer(&app.db, p.id, to).await?;
167
                let detail = format!("{owner}/{number} to {to}/{}", moved.number);
168
                crate::db::accounts::audit(&app.db, c.account.as_ref(), "project.transferred", &detail, &p.title).await.ok();
169
                (moved.owner, moved.number)
170
            }
171
            _ => return Err(ApiError(StatusCode::FORBIDDEN, format!("you cannot make projects under {to}"))),
172
        },
173
        None => (owner, number),
174
    };
175
    let p = pdb::get(&app.db, &owner, number).await?.unwrap_or(p);
176
    let title = body.title.as_deref().map(str::trim).filter(|t| !t.is_empty()).unwrap_or(&p.title).chars().take(100).collect::<String>();
177
    pdb::set(
178
        &app.db,
179
        p.id,
180
        &title,
181
        body.description.as_deref().map(str::trim).unwrap_or(&p.description),
182
        body.private.map(|x| !x).unwrap_or(p.public),
183
        body.closed.unwrap_or(p.closed),
184
    )
185
    .await?;
186
    let fresh = pdb::get(&app.db, &owner, number).await?.unwrap_or(p);
187
    Ok(Json(project_of(&app, &fresh)))
188
}
189
190
/// A board's columns as `GET /projects/{owner}/{n}` gives them, for the
191
/// column calls to answer with (#366).
192
async fn board_of(app: &Shared, c: &Caller, owner: &str, number: i64) -> Result<Json<Board>, ApiError> {
193
    let (_, p) = visible(app, c, owner, number).await?;
194
    let (columns, _) = wp::board_columns(app, c.account.as_ref(), owner, &p, false).await?;
195
    Ok(Json(Board {
196
        project: project_of(app, &p),
197
        columns: columns
198
            .iter()
199
            .map(|col| ProjectColumn {
200
                id: col.column.id,
201
                name: col.column.name.clone(),
202
                cards: col.cards.iter().map(card_of).collect(),
203
                wip_limit: col.column.wip_limit,
204
            })
205
            .collect(),
206
        views: pdb::views(&app.db, p.id)
207
            .await?
208
            .into_iter()
209
            .map(|v| hub_api::ProjectView { name: v.name, layout: v.layout, q: v.q, lane: v.lane, sort: v.sort })
210
            .collect(),
211
        filter: String::new(),
212
    }))
213
}
214
215
/// `GET /projects/{owner}/{n}/charts` (#357): `?q=` narrows the forecast
216
/// as the board's filter bar does.
217
pub async fn charts(
218
    State(app): State<Shared>,
219
    headers: HeaderMap,
220
    Path((owner, number)): Path<(String, i64)>,
221
    Query(f): Query<BoardFilter>,
222
) -> Result<Json<hub_api::BoardCharts>, ApiError> {
223
    use crate::web::board_charts as bc;
224
    let c = caller(&app, &headers).await?;
225
    let (_, p) = visible(&app, &c, &owner, number).await?;
226
    let now = crate::db::now_ms();
227
    let ch = bc::compute(&app, c.account.as_ref(), &p, f.q.as_deref().unwrap_or(""), now).await?;
228
    let day = |ms: i64| {
229
        let t = time::OffsetDateTime::from_unix_timestamp(ms.div_euclid(1000)).unwrap_or(time::OffsetDateTime::UNIX_EPOCH);
230
        format!("{:04}-{:02}-{:02}", t.year(), u8::from(t.month()), t.day())
231
    };
232
    use crate::board_stats::{DAY_MS, WEEK_MS};
233
    Ok(Json(hub_api::BoardCharts {
234
        cumulative_flow: ch
235
            .flow
236
            .iter()
237
            .enumerate()
238
            .map(|(d, counts)| hub_api::FlowDay { day: day(ch.flow_first + d as i64 * DAY_MS), counts: counts.clone() })
239
            .collect(),
240
        cycle_time_median_days: ch.cycle_median_days,
241
        cycle_time_p85_days: ch.cycle_p85_days,
242
        finished: ch.cycle_finished,
243
        throughput: ch
244
            .throughput
245
            .iter()
246
            .enumerate()
247
            .map(|(i, n)| hub_api::WeekCount { week: day(ch.throughput_from + i as i64 * WEEK_MS), done: *n })
248
            .collect(),
249
        burn_down: ch.burn.as_ref().map(|(name, start, days)| hub_api::BurnDown {
250
            iteration: name.clone(),
251
            first_day: day(*start),
252
            left: days.iter().map(|(l, _)| *l).collect(),
253
            scope: days.iter().map(|(_, s)| *s).collect(),
254
        }),
255
        forecasts: ch
256
            .forecasts
257
            .into_iter()
258
            .map(|f| hub_api::BoardForecast {
259
                scope: f.scope,
260
                remaining: f.remaining,
261
                weeks_of_history: f.weeks_of_history,
262
                p50: f.p50,
263
                p85: f.p85,
264
            })
265
            .collect(),
266
        columns: ch.columns,
267
    }))
268
}
269
270
/// A column's name: trimmed, 1 to 40 characters, as the board page has it.
271
fn column_name(name: &str) -> Result<&str, ApiError> {
272
    let name = name.trim();
273
    if name.is_empty() || name.chars().count() > 40 {
274
        return Err(ApiError(StatusCode::BAD_REQUEST, "a column has a name of 1 to 40 characters".into()));
275
    }
276
    Ok(name)
277
}
278
279
/// `POST /projects/{owner}/{n}/columns` (#366): add a column at the right;
280
/// answers the board.
281
pub async fn add_column(
282
    State(app): State<Shared>,
283
    headers: HeaderMap,
284
    Path((owner, number)): Path<(String, i64)>,
285
    Json(body): Json<hub_api::NewColumn>,
286
) -> Result<Json<Board>, ApiError> {
287
    let (c, p) = changeable(&app, &headers, &owner, number, false).await?;
288
    let name = column_name(&body.name)?;
289
    if pdb::columns(&app.db, p.id).await?.iter().any(|col| col.name.eq_ignore_ascii_case(name)) {
290
        return Err(ApiError(StatusCode::CONFLICT, format!("the board has a column {name} already")));
291
    }
292
    pdb::add_column(&app.db, p.id, name).await?;
293
    board_of(&app, &c, &owner, number).await
294
}
295
296
/// `PATCH /projects/{owner}/{n}/columns/{column}` (#366): rename or move a
297
/// column named by id or name; answers the board.
298
pub async fn edit_column(
299
    State(app): State<Shared>,
300
    headers: HeaderMap,
301
    Path((owner, number, spec)): Path<(String, i64, String)>,
302
    Json(body): Json<hub_api::ColumnEdit>,
303
) -> Result<Json<Board>, ApiError> {
304
    let (c, p) = changeable(&app, &headers, &owner, number, false).await?;
305
    let col = named_column(&app, p.id, &spec).await?;
306
    if body.name.is_none() && body.position.is_none() {
307
        return Err(ApiError(StatusCode::BAD_REQUEST, "say what to change: name or position".into()));
308
    }
309
    if let Some(name) = body.name.as_deref() {
310
        let name = column_name(name)?;
311
        let others = pdb::columns(&app.db, p.id).await?;
312
        if others.iter().any(|o| o.id != col.id && o.name.eq_ignore_ascii_case(name)) {
313
            return Err(ApiError(StatusCode::CONFLICT, format!("the board has a column {name} already")));
314
        }
315
        pdb::rename_column(&app.db, p.id, col.id, name).await?;
316
    }
317
    if let Some(pos) = body.position {
318
        pdb::place_column(&app.db, p.id, col.id, pos).await?;
319
    }
320
    board_of(&app, &c, &owner, number).await
321
}
322
323
/// `DELETE /projects/{owner}/{n}/columns/{column}` (#366): its cards go to
324
/// the first remaining column; a board keeps at least one. Answers the board.
325
pub async fn remove_column(
326
    State(app): State<Shared>,
327
    headers: HeaderMap,
328
    Path((owner, number, spec)): Path<(String, i64, String)>,
329
) -> Result<Json<Board>, ApiError> {
330
    let (c, p) = changeable(&app, &headers, &owner, number, false).await?;
331
    let col = named_column(&app, p.id, &spec).await?;
332
    if !pdb::remove_column(&app.db, p.id, col.id).await? {
333
        return Err(ApiError(StatusCode::CONFLICT, "a board keeps at least one column".into()));
334
    }
335
    board_of(&app, &c, &owner, number).await
336
}
337
338
/// A column named by id or name, or 404.
339
async fn named_column(app: &Shared, project_id: i64, spec: &str) -> Result<pdb::Column, ApiError> {
340
    let cols = pdb::columns(&app.db, project_id).await?;
341
    cols.into_iter()
342
        .find(|c| c.id.to_string() == spec.trim() || c.name.eq_ignore_ascii_case(spec.trim()))
343
        .ok_or_else(|| ApiError(StatusCode::NOT_FOUND, format!("no column {spec}")))
344
}
345
346
/// `GET /projects/{owner}/{n}/cards`: the cards by column, as the board
347
/// has them.
348
#[derive(serde::Deserialize, Default)]
349
pub struct CardsQuery {
350
    /// The archived cards instead (#293).
351
    #[serde(default)]
352
    archived: bool,
353
}
354
355
/// `GET /projects/{owner}/{n}/cards`, `?archived=true` for the archived ones.
356
pub async fn cards(
357
    State(app): State<Shared>,
358
    headers: HeaderMap,
359
    Path((owner, number)): Path<(String, i64)>,
360
    Query(q): Query<CardsQuery>,
361
) -> Result<Json<Vec<ProjectColumn>>, ApiError> {
362
    if !q.archived {
363
        return Ok(Json(board(State(app), headers, Path((owner, number)), Query(BoardFilter::default())).await?.0.columns));
364
    }
365
    let c = caller(&app, &headers).await?;
366
    let (_, p) = visible(&app, &c, &owner, number).await?;
367
    let (columns, _) = wp::board_columns(&app, c.account.as_ref(), &owner, &p, true).await?;
368
    Ok(Json(
369
        columns
370
            .iter()
371
            .map(|col| ProjectColumn {
372
                id: col.column.id,
373
                name: col.column.name.clone(),
374
                cards: col.cards.iter().map(card_of).collect(),
375
                wip_limit: col.column.wip_limit,
376
            })
377
            .collect(),
378
    ))
379
}
380
381
/// `POST /projects/{owner}/{n}/cards`.
382
pub async fn add_card(
383
    State(app): State<Shared>,
384
    headers: HeaderMap,
385
    Path((owner, number)): Path<(String, i64)>,
386
    Json(body): Json<NewCard>,
387
) -> Result<(StatusCode, Json<ProjectCard>), ApiError> {
388
    let (c, p) = changeable(&app, &headers, &owner, number, false).await?;
389
    let col = column(&app, p.id, body.column.as_deref()).await?;
390
    let actor = c.account.as_ref().map(|a| a.username.clone()).unwrap_or_default();
391
    let card = match wp::add_card(&app, c.account.as_ref(), &owner, p.id, col.id, &body.reference, "", &body.note, &actor).await? {
392
        Ok(card) => card,
393
        Err(why) => return Err(ApiError(StatusCode::BAD_REQUEST, why)),
394
    };
395
    // Answer with the card as the board shows it.
396
    let (columns, _) = wp::board_columns(&app, c.account.as_ref(), &owner, &p, false).await?;
397
    let view = columns
398
        .iter()
399
        .flat_map(|col| col.cards.iter())
400
        .find(|v| v.card.id == card.id)
401
        .map(card_of)
402
        .ok_or_else(|| not_found("no such card"))?;
403
    Ok((StatusCode::CREATED, Json(view)))
404
}
405
406
/// `PATCH /projects/{owner}/{n}/cards/{id}`: move to another column.
407
pub async fn move_card(
408
    State(app): State<Shared>,
409
    headers: HeaderMap,
410
    Path((owner, number, id)): Path<(String, i64, i64)>,
411
    Json(body): Json<CardMove>,
412
) -> Result<StatusCode, ApiError> {
413
    let (_, p) = changeable(&app, &headers, &owner, number, false).await?;
414
    let col = column(&app, p.id, Some(&body.column)).await?;
415
    if !pdb::cards(&app.db, p.id).await?.iter().any(|c| c.id == id) {
416
        return Err(not_found("no such card"));
417
    }
418
    pdb::move_card(&app.db, p.id, id, col.id).await?;
419
    Ok(StatusCode::NO_CONTENT)
420
}
421
422
/// Whether `card` is the one `name` names: its id, or its issue or
423
/// proposal as `12`, `#12`, `name#12` or `owner/name#12`.
424
fn names_card(name: &str, card: &ProjectCard) -> bool {
425
    let name = name.trim();
426
    if name.is_empty() {
427
        return false;
428
    }
429
    if name.parse::<i64>().is_ok_and(|id| id == card.id) {
430
        return true;
431
    }
432
    let Some((_, number)) = card.reference.rsplit_once('#') else { return false };
433
    match name.rsplit_once('#') {
434
        None => name == number,
435
        Some(("", n)) => n == number,
436
        Some((repo, n)) => n == number && (card.reference == format!("{repo}#{n}") || card.reference.ends_with(&format!("/{repo}#{n}"))),
437
    }
438
}
439
440
/// `POST /projects/{owner}/{n}/cards/move` (#289): a column's cards to
441
/// another at once, with exceptions and a state filter; one audit entry.
442
pub async fn move_cards(
443
    State(app): State<Shared>,
444
    headers: HeaderMap,
445
    Path((owner, number)): Path<(String, i64)>,
446
    Json(body): Json<CardsMove>,
447
) -> Result<Json<CardsMoved>, ApiError> {
448
    let (c, p) = changeable(&app, &headers, &owner, number, false).await?;
449
    let from = column(&app, p.id, Some(&body.from)).await?;
450
    let to = column(&app, p.id, Some(&body.column)).await?;
451
    if from.id == to.id {
452
        return Err(ApiError(StatusCode::BAD_REQUEST, "the cards are in that column already".into()));
453
    }
454
    let (columns, _) = wp::board_columns(&app, c.account.as_ref(), &owner, &p, false).await?;
455
    let cards: Vec<ProjectCard> =
456
        columns.iter().filter(|col| col.column.id == from.id).flat_map(|col| col.cards.iter().map(card_of)).collect();
457
    let states: Vec<String> = body.state.iter().map(|s| s.trim().to_ascii_lowercase()).filter(|s| !s.is_empty()).collect();
458
    let (moved, kept): (Vec<ProjectCard>, Vec<ProjectCard>) = cards.into_iter().partition(|card| {
459
        !body.except.iter().any(|e| names_card(e, card)) && (states.is_empty() || states.iter().any(|s| card.state.eq_ignore_ascii_case(s)))
460
    });
461
    if !body.dry_run && !moved.is_empty() {
462
        let ids: Vec<i64> = moved.iter().map(|c| c.id).collect();
463
        pdb::move_cards(&app.db, p.id, &ids, to.id).await?;
464
        let detail = format!("{} card(s) from {} to {}", moved.len(), from.name, to.name);
465
        crate::db::accounts::audit(&app.db, c.account.as_ref(), "project.cards_moved", &format!("{owner}/{number}"), &detail).await.ok();
466
    }
467
    Ok(Json(CardsMoved { moved, kept, dry_run: body.dry_run }))
468
}
469
470
/// `POST /projects/{owner}/{n}/cards/archive` (#293): a column's cards off
471
/// the board at once, kept, with #289's exceptions and state filter and an
472
/// age; one audit entry.
473
pub async fn archive_cards(
474
    State(app): State<Shared>,
475
    headers: HeaderMap,
476
    Path((owner, number)): Path<(String, i64)>,
477
    Json(body): Json<CardsArchive>,
478
) -> Result<Json<CardsArchived>, ApiError> {
479
    let (c, p) = changeable(&app, &headers, &owner, number, false).await?;
480
    let from = column(&app, p.id, Some(&body.from)).await?;
481
    if body.older_days.is_some_and(|d| !(0..=3650).contains(&d)) {
482
        return Err(ApiError(StatusCode::BAD_REQUEST, "older_days is 0 to 3650".into()));
483
    }
484
    let (columns, _) = wp::board_columns(&app, c.account.as_ref(), &owner, &p, false).await?;
485
    let now = crate::db::now_ms();
486
    let states: Vec<String> = body.state.iter().map(|s| s.trim().to_ascii_lowercase()).filter(|s| !s.is_empty()).collect();
487
    let (archived, kept): (Vec<&wp::CardView>, Vec<&wp::CardView>) =
488
        columns.iter().filter(|col| col.column.id == from.id).flat_map(|col| col.cards.iter()).partition(|v| {
489
            let card = card_of(v);
490
            !body.except.iter().any(|e| names_card(e, &card))
491
                && (states.is_empty() || states.iter().any(|s| card.state.eq_ignore_ascii_case(s)))
492
                && body.older_days.is_none_or(|d| pdb::older_than(&v.card, d, now))
493
        });
494
    if !body.dry_run && !archived.is_empty() {
495
        let ids: Vec<i64> = archived.iter().map(|v| v.card.id).collect();
496
        pdb::archive_cards(&app.db, p.id, &ids).await?;
497
        let detail = format!("{} card(s) of {}", ids.len(), from.name);
498
        crate::db::accounts::audit(&app.db, c.account.as_ref(), "project.cards_archived", &format!("{owner}/{number}"), &detail).await.ok();
499
    }
500
    let stamp = |v: &wp::CardView| ProjectCard { archived_ms: (!body.dry_run).then_some(now), ..card_of(v) };
501
    Ok(Json(CardsArchived {
502
        archived: archived.into_iter().map(stamp).collect(),
503
        kept: kept.into_iter().map(card_of).collect(),
504
        dry_run: body.dry_run,
505
    }))
506
}
507
508
/// `POST /projects/{owner}/{n}/cards/{id}/restore` (#293): an archived
509
/// card back on the board, at the end of its column.
510
pub async fn restore_card(
511
    State(app): State<Shared>,
512
    headers: HeaderMap,
513
    Path((owner, number, id)): Path<(String, i64, i64)>,
514
) -> Result<StatusCode, ApiError> {
515
    let (_, p) = changeable(&app, &headers, &owner, number, false).await?;
516
    if !pdb::cards(&app.db, p.id).await?.iter().any(|c| c.id == id && c.archived_ms.is_some()) {
517
        return Err(not_found("no such archived card"));
518
    }
519
    pdb::restore_card(&app.db, p.id, id).await?;
520
    Ok(StatusCode::NO_CONTENT)
521
}
522
523
/// `DELETE /projects/{owner}/{n}/cards/{id}`.
524
pub async fn remove_card(
525
    State(app): State<Shared>,
526
    headers: HeaderMap,
527
    Path((owner, number, id)): Path<(String, i64, i64)>,
528
) -> Result<StatusCode, ApiError> {
529
    let (_, p) = changeable(&app, &headers, &owner, number, false).await?;
530
    if !pdb::cards(&app.db, p.id).await?.iter().any(|c| c.id == id) {
531
        return Err(not_found("no such card"));
532
    }
533
    pdb::remove_card(&app.db, p.id, id).await?;
534
    Ok(StatusCode::NO_CONTENT)
535
}