immich-folio/app/api/admin/status/route.ts

import { NextResponse } from 'next/server';
import { isAdminAuthenticated, isAdminEnabled } from '@/lib/admin/auth';
import { immich } from '@/lib/immich';
import { getConfig } from '@/lib/config';
import { cache } from '@/lib/cache';
import { listBackups, readGalleryYaml, readSettingsYaml } from '@/lib/admin/yaml-service';
import { getUpdateStatus } from '@/lib/updateCheck';

export async function GET() {
  if (!isAdminEnabled()) {
    return NextResponse.json({ error: 'Admin not enabled' }, { status: 403 });
  }
  if (!(await isAdminAuthenticated())) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
  }

  // 1. Immich Connection Status
  let immichOk = false;
  try {
    immichOk = await immich.ping();
  } catch (err) {
    console.error('[Admin API] Immich ping failed:', err);
  }

  // 2. Config Health Check
  let galleryValid = false;
  let galleryMissing = false;
  // settings.yaml is optional — getConfig() falls back to defaults when it is
  // absent, so a missing file is a valid installation, not a fault. Only a file
  // that exists and cannot be parsed counts as degraded: readSettingsYaml()
  // returns null for ENOENT and rethrows everything else.
  let settingsValid = true;

  try {
    const gallery = await readGalleryYaml();
    galleryValid = !!gallery;
    // A file that was never created is a pending setup step, not a corrupt
    // config. Reporting both as "invalid" told a fresh deployment its config
    // was broken and offered a backup restore as the cure (#507).
    galleryMissing = !gallery;
  } catch (err) {
    console.error('[Admin API] Gallery YAML parse failed:', err);
  }

  try {
    await readSettingsYaml();
  } catch (err) {
    console.error('[Admin API] Settings YAML parse failed:', err);
    settingsValid = false;
  }

  // 3. Backup Info
  const galleryBackups = await listBackups('gallery.yaml');
  const settingsBackups = await listBackups('settings.yaml');
  const backupCount = galleryBackups.length + settingsBackups.length;

  // Find timestamp of the latest backup
  let lastBackup: string | null = null;
  const allBackups = [...galleryBackups, ...settingsBackups].sort().reverse();
  if (allBackups.length > 0) {
    // Filename format: filename.yaml.2026-05-31T17-30-00-000Z.bak
    const match = allBackups[0].match(/\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}/);
    if (match) {
      lastBackup = match[0].replace(/-/g, ':').replace(/(\d{4}):(\d{2}):(\d{2})T/, '$1-$2-$3T');
    } else {
      lastBackup = allBackups[0]; // fallback
    }
  }

  const config = getConfig();

  // Answered from a day-long cache and never throws, so a blocked or offline
  // instance still gets the rest of its status.
  const update = await getUpdateStatus();

  return NextResponse.json({
    immich: {
      status: immichOk ? 'connected' : 'disconnected',
    },
    setup: {
      complete: !config.needsSetup,
      credentials: config.needsCredentials ? 'missing' : 'present',
      gallery: config.needsGallery ? 'missing' : 'present',
    },
    config: {
      status: galleryValid && settingsValid ? 'valid' : galleryMissing ? 'setup' : 'invalid',
      gallery: galleryValid ? 'valid' : galleryMissing ? 'missing' : 'invalid',
      settings: settingsValid ? 'valid' : 'invalid',
    },
    cache: {
      size: cache.size,
    },
    backups: {
      count: backupCount,
      lastBackup,
    },
    update,
  });
}