csm/crates/server/src/api/assets.rs

use axum::{extract::{State, Query}, Json};
use serde::Deserialize;
use sqlx::Row;
use crate::AppState;
use super::{ApiResponse, Pagination};

#[derive(Debug, Deserialize)]
pub struct AssetListParams {
    pub device_uid: Option<String>,
    pub search: Option<String>,
    pub page: Option<u32>,
    pub page_size: Option<u32>,
}

pub async fn list_hardware(
    State(state): State<AppState>,
    Query(params): Query<AssetListParams>,
) -> Json<ApiResponse<serde_json::Value>> {
    let limit = params.page_size.unwrap_or(20).min(100);
    let offset = params.page.unwrap_or(1).saturating_sub(1) * limit;

    // Normalize empty strings to None
    let device_uid = params.device_uid.as_deref().filter(|s| !s.is_empty()).map(String::from);
    let search = params.search.as_deref().filter(|s| !s.is_empty()).map(String::from);

    let rows = sqlx::query(
        "SELECT id, device_uid, cpu_model, cpu_cores, memory_total_mb, disk_model, disk_total_mb,
                gpu_model, motherboard, serial_number, reported_at
         FROM hardware_assets WHERE 1=1
         AND (? IS NULL OR device_uid = ?)
         AND (? IS NULL OR cpu_model LIKE '%' || ? || '%' OR gpu_model LIKE '%' || ? || '%')
         ORDER BY reported_at DESC LIMIT ? OFFSET ?"
    )
    .bind(&device_uid).bind(&device_uid)
    .bind(&search).bind(&search).bind(&search)
    .bind(limit).bind(offset)
    .fetch_all(&state.db)
    .await;

    match rows {
        Ok(records) => {
            let items: Vec<serde_json::Value> = records.iter().map(|r| serde_json::json!({
                "id": r.get::<i64, _>("id"),
                "device_uid": r.get::<String, _>("device_uid"),
                "cpu_model": r.get::<String, _>("cpu_model"),
                "cpu_cores": r.get::<i32, _>("cpu_cores"),
                "memory_total_mb": r.get::<i64, _>("memory_total_mb"),
                "disk_model": r.get::<String, _>("disk_model"),
                "disk_total_mb": r.get::<i64, _>("disk_total_mb"),
                "gpu_model": r.get::<Option<String>, _>("gpu_model"),
                "motherboard": r.get::<Option<String>, _>("motherboard"),
                "serial_number": r.get::<Option<String>, _>("serial_number"),
                "reported_at": r.get::<String, _>("reported_at"),
            })).collect();
            Json(ApiResponse::ok(serde_json::json!({
                "hardware": items,
                "page": params.page.unwrap_or(1),
                "page_size": limit,
            })))
        }
        Err(e) => Json(ApiResponse::internal_error("query hardware assets", e)),
    }
}

pub async fn list_software(
    State(state): State<AppState>,
    Query(params): Query<AssetListParams>,
) -> Json<ApiResponse<serde_json::Value>> {
    let limit = params.page_size.unwrap_or(20).min(100);
    let offset = params.page.unwrap_or(1).saturating_sub(1) * limit;

    // Normalize empty strings to None
    let device_uid = params.device_uid.as_deref().filter(|s| !s.is_empty()).map(String::from);
    let search = params.search.as_deref().filter(|s| !s.is_empty()).map(String::from);

    let rows = sqlx::query(
        "SELECT id, device_uid, name, version, publisher, install_date, install_path
         FROM software_assets WHERE 1=1
         AND (? IS NULL OR device_uid = ?)
         AND (? IS NULL OR name LIKE '%' || ? || '%' OR publisher LIKE '%' || ? || '%')
         ORDER BY name ASC LIMIT ? OFFSET ?"
    )
    .bind(&device_uid).bind(&device_uid)
    .bind(&search).bind(&search).bind(&search)
    .bind(limit).bind(offset)
    .fetch_all(&state.db)
    .await;

    match rows {
        Ok(records) => {
            let items: Vec<serde_json::Value> = records.iter().map(|r| serde_json::json!({
                "id": r.get::<i64, _>("id"),
                "device_uid": r.get::<String, _>("device_uid"),
                "name": r.get::<String, _>("name"),
                "version": r.get::<Option<String>, _>("version"),
                "publisher": r.get::<Option<String>, _>("publisher"),
                "install_date": r.get::<Option<String>, _>("install_date"),
                "install_path": r.get::<Option<String>, _>("install_path"),
            })).collect();
            Json(ApiResponse::ok(serde_json::json!({
                "software": items,
                "page": params.page.unwrap_or(1),
                "page_size": limit,
            })))
        }
        Err(e) => Json(ApiResponse::internal_error("query software assets", e)),
    }
}

pub async fn list_changes(
    State(state): State<AppState>,
    Query(params): Query<AssetListParams>,
) -> Json<ApiResponse<serde_json::Value>> {
    let limit = params.page_size.unwrap_or(20).min(100);
    let offset = params.page.unwrap_or(1).saturating_sub(1) * limit;
    let device_uid = params.device_uid.as_deref().filter(|s| !s.is_empty()).map(String::from);

    let rows = sqlx::query(
        "SELECT id, device_uid, change_type, change_detail, detected_at
         FROM asset_changes WHERE 1=1
         AND (? IS NULL OR device_uid = ?)
         ORDER BY detected_at DESC LIMIT ? OFFSET ?"
    )
    .bind(&device_uid).bind(&device_uid)
    .bind(limit).bind(offset)
    .fetch_all(&state.db)
    .await;

    match rows {
        Ok(records) => {
            let items: Vec<serde_json::Value> = records.iter().map(|r| serde_json::json!({
                "id": r.get::<i64, _>("id"),
                "device_uid": r.get::<String, _>("device_uid"),
                "change_type": r.get::<String, _>("change_type"),
                "change_detail": r.get::<String, _>("change_detail"),
                "detected_at": r.get::<String, _>("detected_at"),
            })).collect();
            Json(ApiResponse::ok(serde_json::json!({
                "changes": items,
                "page": params.page.unwrap_or(1),
                "page_size": limit,
            })))
        }
        Err(e) => Json(ApiResponse::internal_error("query asset changes", e)),
    }
}