import { NextRequest } from 'next/server'; import { db } from '@/lib/db'; import { auth, checkProjectAccess } from '@/lib/auth'; import { apiErrors, successResponse } from '@/lib/api-response'; import { rateLimit } from '@/lib/rate-limit'; type RouteParams = { params: Promise<{ videoId: string }> }; // GET /api/watch/[videoId]/progress - Get watch progress for the current user export async function GET(request: NextRequest, { params }: RouteParams) { try { const session = await auth(); if (!session?.user?.id) { return apiErrors.unauthorized('Authentication required'); } const { videoId } = await params; // Get the video and its active version const video = await db.video.findUnique({ where: { id: videoId }, include: { project: true, versions: { where: { isActive: true }, take: 1, }, }, }); if (!video) { return apiErrors.notFound('Video'); } // Check access including workspace membership const access = await checkProjectAccess(video.project, session?.user?.id); if (!access.hasAccess) { return apiErrors.forbidden('Access denied'); } const activeVersion = video.versions[0]; if (!activeVersion) { return apiErrors.notFound('Video version'); } // Get watch progress for this user and version const progress = await db.watchProgress.findUnique({ where: { userId_versionId: { userId: session.user.id, versionId: activeVersion.id, }, }, }); return successResponse({ progress: progress ? progress.progress : 0, duration: progress?.duration || activeVersion.duration || 0, percentage: progress?.percentage || 0, updatedAt: progress?.updatedAt || null, }); } catch (error) { console.error('Error fetching watch progress:', error); return apiErrors.internalError('Failed to fetch watch progress'); } } // POST /api/watch/[videoId]/progress - Save watch progress for the current user export async function POST(request: NextRequest, { params }: RouteParams) { try { // Rate limit watch progress updates (30 per minute to allow pause + periodic + visibility changes) const limited = await rateLimit(request, 'watch-progress'); if (limited) return limited; const session = await auth(); if (!session?.user?.id) { return apiErrors.unauthorized('Authentication required'); } const { videoId } = await params; const body = await request.json(); const { progress, duration, versionId } = body; if (typeof progress !== 'number' || progress < 0) { return apiErrors.badRequest('Invalid progress value'); } // Get the video version let targetVersionId = versionId; if (!targetVersionId) { const video = await db.video.findUnique({ where: { id: videoId }, include: { project: true, versions: { where: { isActive: true }, take: 1, }, }, }); if (!video) { return apiErrors.notFound('Video'); } // Check access including workspace membership const access = await checkProjectAccess(video.project, session?.user?.id); if (!access.hasAccess) { return apiErrors.forbidden('Access denied'); } const activeVersion = video.versions[0]; if (!activeVersion) { return apiErrors.notFound('Video version'); } targetVersionId = activeVersion.id; } // Calculate percentage const safeDuration = duration || 0; const percentage = safeDuration > 0 ? Math.min(100, (progress / safeDuration) * 100) : 0; // Upsert watch progress const watchProgress = await db.watchProgress.upsert({ where: { userId_versionId: { userId: session.user.id, versionId: targetVersionId, }, }, update: { progress, duration: safeDuration, percentage, }, create: { userId: session.user.id, versionId: targetVersionId, progress, duration: safeDuration, percentage, }, }); return successResponse({ success: true, progress: watchProgress.progress, percentage: watchProgress.percentage, }); } catch (error) { console.error('Error saving watch progress:', error); return apiErrors.internalError('Failed to save watch progress'); } }