Add stage 3: todo list and item CRUD API

Two migrations add todo_lists (owner_id FK to users, title, description) and todo_items (list_id FK, text, complete, position), both with ON DELETE CASCADE. New endpoints under /api/lists, all behind AuthMiddleware: - lists: index / store / show / update (PATCH) / destroy - items: nested under a list, same five verbs Lists are owner-scoped — another user's or a missing list responds 404, never 403. New items append after the highest position unless one is given; the list carries item_count / completed_count. Item PATCH is partial and never renumbers siblings. Adds App\Support\Validator for request-body checks, TodoList/TodoItem repositories, and body()/user() helpers on the Controller base. Feature tests move their shared harness into tests/ApiTestCase; TodoTest covers CRUD, ownership isolation, ordering, completion counts, validation and cascade delete. Full suite: 15 passing. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-03 18:30:52 +01:00
parent 5e3b8dbd7e
commit 5a0d29a308
12 changed files with 1093 additions and 4 deletions
@@ -0,0 +1,133 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Repository;
+
+use PDO;
+
+/**
+ * Data access for the `todo_items` table.
+ *
+ * @phpstan-type TodoItemRow array{
+ *     id: int, list_id: int, text: string, complete: bool, position: int,
+ *     created_at: string, updated_at: string
+ * }
+ */
+final class TodoItemRepository
+{
+    public function __construct(private readonly PDO $pdo)
+    {
+    }
+
+    /**
+     * @return TodoItemRow[]
+     */
+    public function allForList(int $listId): array
+    {
+        $stmt = $this->pdo->prepare(
+            'SELECT * FROM todo_items WHERE list_id = :list ORDER BY position ASC, id ASC'
+        );
+        $stmt->execute(['list' => $listId]);
+
+        return array_map($this->cast(...), $stmt->fetchAll());
+    }
+
+    /**
+     * @return TodoItemRow|null
+     */
+    public function findInList(int $id, int $listId): ?array
+    {
+        $stmt = $this->pdo->prepare('SELECT * FROM todo_items WHERE id = :id AND list_id = :list');
+        $stmt->execute(['id' => $id, 'list' => $listId]);
+
+        $row = $stmt->fetch();
+
+        return $row === false ? null : $this->cast($row);
+    }
+
+    /**
+     * @return TodoItemRow
+     */
+    public function create(int $listId, string $text, bool $complete, ?int $position): array
+    {
+        $position ??= $this->nextPosition($listId);
+
+        $stmt = $this->pdo->prepare(
+            'INSERT INTO todo_items (list_id, text, complete, position)
+             VALUES (:list, :text, :complete, :position)'
+        );
+        $stmt->execute([
+            'list' => $listId,
+            'text' => $text,
+            'complete' => $complete ? 1 : 0,
+            'position' => $position,
+        ]);
+
+        /** @var TodoItemRow $item */
+        $item = $this->findInList((int) $this->pdo->lastInsertId(), $listId);
+
+        return $item;
+    }
+
+    /**
+     * @param array{text?: string, complete?: bool, position?: int} $fields
+     * @return TodoItemRow
+     */
+    public function update(int $id, int $listId, array $fields): array
+    {
+        $sets = ['updated_at = ' . "strftime('%Y-%m-%dT%H:%M:%SZ', 'now')"];
+        $params = ['id' => $id];
+
+        if (array_key_exists('text', $fields)) {
+            $sets[] = 'text = :text';
+            $params['text'] = $fields['text'];
+        }
+        if (array_key_exists('complete', $fields)) {
+            $sets[] = 'complete = :complete';
+            $params['complete'] = $fields['complete'] ? 1 : 0;
+        }
+        if (array_key_exists('position', $fields)) {
+            $sets[] = 'position = :position';
+            $params['position'] = $fields['position'];
+        }
+
+        $stmt = $this->pdo->prepare('UPDATE todo_items SET ' . implode(', ', $sets) . ' WHERE id = :id');
+        $stmt->execute($params);
+
+        /** @var TodoItemRow $item */
+        $item = $this->findInList($id, $listId);
+
+        return $item;
+    }
+
+    public function delete(int $id): void
+    {
+        $this->pdo->prepare('DELETE FROM todo_items WHERE id = :id')->execute(['id' => $id]);
+    }
+
+    private function nextPosition(int $listId): int
+    {
+        $stmt = $this->pdo->prepare(
+            'SELECT COALESCE(MAX(position), -1) + 1 FROM todo_items WHERE list_id = :list'
+        );
+        $stmt->execute(['list' => $listId]);
+
+        return (int) $stmt->fetchColumn();
+    }
+
+    /**
+     * @param array<string, mixed> $row
+     * @return TodoItemRow
+     */
+    private function cast(array $row): array
+    {
+        $row['id'] = (int) $row['id'];
+        $row['list_id'] = (int) $row['list_id'];
+        $row['complete'] = (bool) $row['complete'];
+        $row['position'] = (int) $row['position'];
+
+        /** @var TodoItemRow $row */
+        return $row;
+    }
+}