monitor/api/src/Application.php

<?php

declare(strict_types=1);

namespace Monitor\Api;

use InvalidArgumentException;
use Monitor\Api\Auth\AdminAuthenticator;
use Monitor\Api\Auth\AgentAuthenticator;
use Monitor\Api\Auth\WebhookAuthenticator;
use Monitor\Api\Controller\AgentController;
use Monitor\Api\Controller\EventController;
use Monitor\Api\Controller\KpiController;
use Monitor\Api\Controller\StreamController;
use Monitor\Api\Controller\SystemController;
use Monitor\Api\Controller\TicketController;
use Monitor\Api\Controller\WebhookController;
use Monitor\Api\Db\Database;
use Monitor\Api\Http\MethodNotAllowedException;
use Monitor\Api\Http\NotFoundException;
use Monitor\Api\Http\Request;
use Monitor\Api\Http\Response;
use Monitor\Api\Http\Router;
use Monitor\Api\Realtime\ChangeFeed;
use Monitor\Api\Repository\AgentRepository;
use Monitor\Api\Repository\EventRepository;
use Monitor\Api\Repository\KpiRepository;
use Monitor\Api\Repository\LegacyStatusFileReader;
use Monitor\Api\Repository\SystemRepository;
use Monitor\Api\Repository\TicketRepository;
use Monitor\Api\Sync\SyncTrigger;
use Throwable;

/**
 * Verdrahtet Router, Controller und Auth fuer alle /api/v1/*-Endpunkte aus
 * Visualization.md Abschnitt 6.1. Bewusst ohne Framework/DI-Container - eine handvoll
 * Objekte reichen fuer den Umfang von Phase 1.
 */
final class Application
{
    private readonly Router $router;
    private readonly AgentAuthenticator $agentAuth;
    private readonly AdminAuthenticator $adminAuth;
    private readonly WebhookAuthenticator $webhookAuth;

    public function __construct(private readonly Database $db, private readonly Config $config)
    {
        $agents = new AgentRepository($db, $config->deskCount());
        $tickets = new TicketRepository($db);
        $events = new EventRepository($db);
        $systems = new SystemRepository($db);
        $kpis = new KpiRepository($db);

        $this->agentAuth = new AgentAuthenticator($agents);
        $this->adminAuth = new AdminAuthenticator($config->adminApiKey());
        $this->webhookAuth = new WebhookAuthenticator($config->codebergWebhookSecret());

        $agentController = new AgentController($agents);
        $ticketController = new TicketController($tickets);
        $eventController = new EventController($events);
        $systemController = new SystemController($systems, new LegacyStatusFileReader(), $config->statusFilePath());
        $kpiController = new KpiController($kpis);
        $webhookController = new WebhookController(new SyncTrigger($config->syncTriggerPath()));
        $streamController = new StreamController(
            new ChangeFeed($tickets, $events, $systems, $kpis, $agents),
            $config->sseMaxIterations(),
            $config->ssePollIntervalSeconds(),
        );

        $this->router = new Router();

        $this->router->add('GET', '/api/v1/tickets', fn (Request $r, array $p) => $ticketController->index($r));
        $this->router->add('POST', '/api/v1/tickets', fn (Request $r, array $p) => $ticketController->create($r), 'agent');
        $this->router->add('PATCH', '/api/v1/tickets/{id}', fn (Request $r, array $p) => $ticketController->update($r, $p), 'agent');

        $this->router->add('GET', '/api/v1/events', fn (Request $r, array $p) => $eventController->index($r));
        $this->router->add('POST', '/api/v1/events', fn (Request $r, array $p) => $eventController->create($r), 'agent');

        $this->router->add('GET', '/api/v1/systems', fn (Request $r, array $p) => $systemController->index($r));
        $this->router->add('POST', '/api/v1/systems/{id}/status', fn (Request $r, array $p) => $systemController->reportStatus($r, $p), 'agent');

        $this->router->add('GET', '/api/v1/kpis', fn (Request $r, array $p) => $kpiController->index($r));
        $this->router->add('POST', '/api/v1/kpis/{key}', fn (Request $r, array $p) => $kpiController->report($r, $p), 'agent');

        $this->router->add('GET', '/api/v1/agents', fn (Request $r, array $p) => $agentController->index($r));
        $this->router->add('POST', '/api/v1/agents', fn (Request $r, array $p) => $agentController->register($r), 'admin');
        $this->router->add(
            'POST',
            '/api/v1/agents/{id}/activity',
            fn (Request $r, array $p, array $agent) => $agentController->activity($r, $p, $agent),
            'agent'
        );

        // SSE-Push (F13): oeffentlich wie die anderen GET-Endpunkte, liefert nur bereits
        // oeffentliche Daten (welche Ressourcen sich geaendert haben, keine Inhalte).
        $this->router->add('GET', '/api/v1/stream', fn (Request $r, array $p) => $streamController->stream($r));

        // Codeberg-Webhook: kein API-Key, sondern HMAC-Signatur - Codeberg kennt unsere
        // Keys nicht, signiert den Body aber mit dem im Webhook hinterlegten Secret.
        $this->router->add(
            'POST',
            '/api/v1/webhooks/codeberg',
            fn (Request $r, array $p) => $webhookController->codeberg($r),
            'webhook'
        );
    }

    public function handle(Request $request): Response
    {
        try {
            $match = $this->router->match($request);
        } catch (MethodNotAllowedException) {
            return Response::error('Methode nicht erlaubt.', 405);
        }

        if ($match === null) {
            return Response::error('Nicht gefunden.', 404);
        }

        $agent = null;
        if ($match->auth === 'agent') {
            $agent = $this->agentAuth->authenticate($request);
            if ($agent === null) {
                return Response::error('Ungueltiger oder fehlender X-Api-Key-Header.', 401);
            }
        } elseif ($match->auth === 'admin') {
            if (!$this->adminAuth->authenticate($request)) {
                return Response::error('Ungueltiger oder fehlender X-Admin-Key-Header.', 401);
            }
        } elseif ($match->auth === 'webhook') {
            if (!$this->webhookAuth->authenticate($request)) {
                return Response::error('Ungueltige oder fehlende Webhook-Signatur.', 401);
            }
        }

        try {
            return ($match->handler)($request, $match->params, $agent);
        } catch (NotFoundException $e) {
            return Response::error($e->getMessage(), 404);
        } catch (InvalidArgumentException $e) {
            return Response::error($e->getMessage(), 422);
        } catch (Throwable $e) {
            // Unerwartete Fehler (z.B. PDOException) duerfen nie als PHP-Fatal-Error mit
            // Stacktrace und Dateipfaden im Response-Body landen - Details nur ins Log.
            error_log(sprintf('[monitor-api] %s: %s in %s:%d', $e::class, $e->getMessage(), $e->getFile(), $e->getLine()));

            return Response::error('Interner Serverfehler.', 500);
        }
    }
}