#!/usr/bin/env python3 from __future__ import annotations import csv import os import shutil from datetime import datetime, timezone from pathlib import Path from flask import ( Flask, flash, redirect, render_template, request, send_file, session, url_for, ) from stats import ( apply_rank_changes, build_leaderboard, build_session_summaries, cents_to_dollars, cumulative_profit_series, player_session_series, safe_date_label, session_breakdown_series, session_events, session_label, session_sort_key, unique_player_names, ) from storage import append_event, ensure_data_file, load_events BASE_DIR = Path(__file__).resolve().parent DATA_PATH = BASE_DIR / "data" / "entries.csv" ENV_PATH = BASE_DIR / ".env" def load_local_env(env_path: Path) -> None: if not env_path.exists(): return for raw_line in env_path.read_text(encoding="utf-8").splitlines(): line = raw_line.strip() if not line or line.startswith("#") or "=" not in line: continue key, value = line.split("=", 1) key = key.strip() value = value.strip().strip('"').strip("'") os.environ.setdefault(key, value) def next_session_id(sessions, session_date: str) -> str: matching = [session for session in sessions if session.session_date == session_date] highest = 0 for s in matching: if s.session_id == session_date: highest = max(highest, 1) continue suffix = s.session_id.replace(f"{session_date}-", "") if suffix.isdigit(): highest = max(highest, int(suffix)) return f"{session_date}-{highest + 1:02d}" load_local_env(ENV_PATH) app = Flask(__name__) app.config["SECRET_KEY"] = os.getenv("SECRET_KEY", "change-this-before-deploying") app.config["ADMIN_USERNAME"] = os.getenv("ADMIN_USERNAME", "admin") app.config["ADMIN_PASSWORD"] = os.getenv("ADMIN_PASSWORD", "change-me") app.config["SESSION_COOKIE_HTTPONLY"] = True app.config["SESSION_COOKIE_SAMESITE"] = "Lax" app.config["SESSION_COOKIE_NAME"] = "poker_portal_session" ensure_data_file(DATA_PATH) app.jinja_env.filters["money"] = cents_to_dollars app.jinja_env.filters["pretty_date"] = safe_date_label def is_admin() -> bool: return bool(session.get("is_admin")) @app.context_processor def inject_globals() -> dict[str, object]: return {"is_admin": is_admin()} @app.get("/") def home() -> str: return redirect(url_for("leaderboard")) @app.get("/leaderboard") def leaderboard() -> str: events = load_events(DATA_PATH) all_sessions = build_session_summaries(events) ordered_sessions = sorted(all_sessions, key=session_sort_key) session_ids = [session.session_id for session in ordered_sessions] selected_session_id = request.args.get("through_session", "").strip() label = "" if session_ids: if selected_session_id in session_ids: cutoff_index = session_ids.index(selected_session_id) label = session_label(ordered_sessions[cutoff_index]) else: cutoff_index = len(session_ids) - 1 selected_session = ordered_sessions[cutoff_index] label = session_label(selected_session) filtered_sessions = ordered_sessions[: cutoff_index + 1] previous_sessions = ordered_sessions[:cutoff_index] else: filtered_sessions = [] previous_sessions = [] board = build_leaderboard(filtered_sessions) previous_board = build_leaderboard(previous_sessions) board = apply_rank_changes(board, previous_board) chart_data = cumulative_profit_series(filtered_sessions) return render_template( "leaderboard.html", leaderboard=board, session_count=len(filtered_sessions), total_session_count=len(all_sessions), chart_data=chart_data, available_sessions=all_sessions, selected_session_id=selected_session_id, selected_session_label=(label if selected_session_id else "Latest session"), selected_session_date=( ordered_sessions[cutoff_index].session_date if selected_session_id and session_ids else "" ), session_label=session_label, ) @app.get("/sessions") def sessions(): events = load_events(DATA_PATH) sessions = build_session_summaries(events) return render_template( "sessions.html", sessions=sessions, session_label=session_label, ) @app.get("/sessions/") def session_detail(session_id: str) -> str: events = load_events(DATA_PATH) sessions = build_session_summaries(events) target_session = next( ( session_summary for session_summary in sessions if session_summary.session_id == session_id ), None, ) if target_session is None: flash("That session was not found.", "error") return redirect(url_for("sessions")) target_index = next( ( index for index, session in enumerate(sessions) if session.session_id == session_id ), None, ) if target_index is None: flash("That session was not found.", "error") return redirect(url_for("sessions")) target_session = sessions[target_index] prev_session = ( sessions[target_index + 1] if target_index < len(sessions) - 1 else None ) next_session = sessions[target_index - 1] if target_index > 0 else None return render_template( "session_detail.html", session=target_session, next_session=next_session, prev_session=prev_session, raw_events=session_events(events, session_id), chart_data=session_breakdown_series(target_session), session_label=session_label, ) @app.get("/players/") def player_detail(player_name: str) -> str: events = load_events(DATA_PATH) sessions = build_session_summaries(events) board = build_leaderboard(sessions) player_stats = next( (player for player in board if player.player_name == player_name), None ) if player_stats is None: flash("That player was not found.", "error") return redirect(url_for("leaderboard")) chart_data = player_session_series(sessions, player_name) return render_template( "player_detail.html", player=player_stats, chart_data=chart_data, ) @app.route("/admin/login", methods=["GET", "POST"]) def admin_login() -> str: if request.method == "POST": username = request.form.get("username", "").strip() password = request.form.get("password", "") if ( username == app.config["ADMIN_USERNAME"] and password == app.config["ADMIN_PASSWORD"] ): session["is_admin"] = True flash("Admin login successful.", "success") return redirect(url_for("admin_dashboard")) flash("Invalid admin credentials.", "error") return render_template("admin_login.html") @app.post("/admin/logout") def admin_logout() -> str: session.clear() flash("Logged out.", "success") return redirect(url_for("leaderboard")) @app.post("/admin/session-state") def admin_session_state() -> str: if not is_admin(): flash("Admin login required.", "error") return redirect(url_for("admin_login")) session_id = request.form.get("session_id", "").strip() state = request.form.get("state", "").strip() events = load_events(DATA_PATH) sessions = build_session_summaries(events) by_id = {session.session_id: session for session in sessions} target = by_id.get(session_id) if target is None: flash("Session not found.", "error") return redirect(url_for("admin_dashboard")) if state not in {"open", "closed"}: flash("Invalid session state.", "error") return redirect(url_for("admin_dashboard")) append_event( DATA_PATH, session_id=target.session_id, session_date=target.session_date, amount_cents=0, player_name="", event_type="session_open" if state == "open" else "session_close", note=f"Session marked {state}.", actor=app.config["ADMIN_USERNAME"], ) flash(f"Session marked {state}.", "success") return redirect(url_for("admin_dashboard")) @app.get("/admin/export") def admin_export_csv(): if not is_admin(): flash("Admin login required.", "error") return redirect(url_for("admin_login")) export_name = ( f"entries_export_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv" ) return send_file( DATA_PATH, as_attachment=True, download_name=export_name, mimetype="text/csv", ) @app.post("/admin/import") def admin_import_csv(): if not is_admin(): flash("Admin login required.", "error") return redirect(url_for("admin_login")) uploaded_file = request.files.get("csv_file") if uploaded_file is None or uploaded_file.filename == "": flash("Choose a CSV file to import.", "error") return redirect(url_for("admin_dashboard")) if not uploaded_file.filename.lower().endswith(".csv"): flash("Only CSV files are allowed.", "error") return redirect(url_for("admin_dashboard")) try: uploaded_text = uploaded_file.stream.read().decode("utf-8-sig") except UnicodeDecodeError: flash("CSV file must be valid UTF-8 text.", "error") return redirect(url_for("admin_dashboard")) uploaded_lines = uploaded_text.splitlines() if not uploaded_lines: flash("CSV file is empty.", "error") return redirect(url_for("admin_dashboard")) try: current_header = next( csv.reader(open(DATA_PATH, "r", encoding="utf-8", newline="")) ) except Exception: flash("Could not read the current audit CSV header.", "error") return redirect(url_for("admin_dashboard")) try: uploaded_header = next(csv.reader(uploaded_lines)) except Exception: flash("Could not read the uploaded CSV header.", "error") return redirect(url_for("admin_dashboard")) if uploaded_header != current_header: flash("CSV header does not match the current audit format.", "error") return redirect(url_for("admin_dashboard")) data_dir = os.path.dirname(DATA_PATH) backup_name = ( f"entries_backup_{datetime.now(timezone.utc).strftime('%Y%m%d_%H%M%S')}.csv" ) backup_path = os.path.join(data_dir, backup_name) try: shutil.copy2(DATA_PATH, backup_path) with open(DATA_PATH, "w", encoding="utf-8", newline="") as handle: handle.write(uploaded_text) flash(f"CSV imported successfully. Backup created: {backup_name}", "success") except Exception: flash("Import failed. Existing CSV was not updated.", "error") return redirect(url_for("admin_dashboard")) @app.post("/admin/write-off-front") def admin_write_off_front() -> str: if not is_admin(): flash("Admin login required.", "error") return redirect(url_for("admin_login")) debt_key = request.form.get("debt_key", "").strip() note = request.form.get("note", "").strip() amount_raw = request.form.get("amount", "0").strip() try: amount_cents = int(round(float(amount_raw) * 100)) except ValueError: flash("Amount must be a number.", "error") return redirect(url_for("admin_dashboard")) if amount_cents <= 0: flash("Write-off amount must be greater than zero.", "error") return redirect(url_for("admin_dashboard")) try: session_id, player_name = debt_key.split("||", 1) except ValueError: flash("Select a valid player debt.", "error") return redirect(url_for("admin_dashboard")) events = load_events(DATA_PATH) sessions = build_session_summaries(events) target = next( (session for session in sessions if session.session_id == session_id), None, ) if target is None: flash("Session not found.", "error") return redirect(url_for("admin_dashboard")) entry = next( (entry for entry in target.entries if entry.player_name == player_name), None, ) if entry is None or entry.player_owes_cents <= 0: flash("That player does not have an outstanding front debt.", "error") return redirect(url_for("admin_dashboard")) if amount_cents > entry.player_owes_cents: flash( f"Write-off cannot exceed {cents_to_dollars(entry.player_owes_cents)}.", "error", ) return redirect(url_for("admin_dashboard")) append_event( DATA_PATH, session_id=target.session_id, session_date=target.session_date, player_name=entry.player_name, event_type="front_writeoff", amount_cents=amount_cents, note=note or "Front debt written off.", actor=app.config["ADMIN_USERNAME"], ) flash("Front debt written off.", "success") return redirect(url_for("admin_dashboard")) @app.post("/admin/collect-front") def admin_collect_front() -> str: if not is_admin(): flash("Admin login required.", "error") return redirect(url_for("admin_login")) debt_key = request.form.get("debt_key", "").strip() note = request.form.get("note", "").strip() amount_raw = request.form.get("amount", "0").strip() try: amount_cents = int(round(float(amount_raw) * 100)) except ValueError: flash("Amount must be a number.", "error") return redirect(url_for("admin_dashboard")) if amount_cents <= 0: flash("Collected amount must be greater than zero.", "error") return redirect(url_for("admin_dashboard")) try: session_id, player_name = debt_key.split("||", 1) except ValueError: flash("Select a valid player debt.", "error") return redirect(url_for("admin_dashboard")) events = load_events(DATA_PATH) sessions = build_session_summaries(events) target = next( (session for session in sessions if session.session_id == session_id), None, ) if target is None: flash("Session not found.", "error") return redirect(url_for("admin_dashboard")) entry = next( (entry for entry in target.entries if entry.player_name == player_name), None, ) if entry is None or entry.player_owes_cents <= 0: flash("That player does not have an outstanding front debt.", "error") return redirect(url_for("admin_dashboard")) if amount_cents > entry.player_owes_cents: flash( f"Collection cannot exceed {cents_to_dollars(entry.player_owes_cents)}.", "error", ) return redirect(url_for("admin_dashboard")) append_event( DATA_PATH, session_id=target.session_id, session_date=target.session_date, player_name=entry.player_name, event_type="front_collected", amount_cents=amount_cents, note=note or "Front debt collected.", actor=app.config["ADMIN_USERNAME"], ) flash("Front debt collected.", "success") return redirect(url_for("admin_dashboard")) @app.post("/admin/open-session") def admin_open_session() -> str: if not is_admin(): flash("Admin login required.", "error") return redirect(url_for("admin_login")) session_date = request.form.get("session_date", "").strip() if not session_date: flash("Session date is required.", "error") return redirect(url_for("admin_dashboard")) events = load_events(DATA_PATH) sessions = build_session_summaries(events) session_id = next_session_id(sessions, session_date) append_event( DATA_PATH, session_id=session_id, session_date=session_date, amount_cents=0, player_name="", event_type="session_open", note="Session opened.", actor=app.config["ADMIN_USERNAME"], ) flash(f"Opened session {session_id}.", "success") return redirect(url_for("admin_dashboard")) @app.route("/admin", methods=["GET", "POST"]) def admin_dashboard(): if not is_admin(): return redirect(url_for("admin_login")) if request.method == "POST": session_id = request.form.get("session_id", "").strip() player_name = request.form.get("player_name", "").strip() event_type = request.form.get("event_type", "").strip() note = request.form.get("note", "").strip() amount_raw = request.form.get("amount", "0").strip() try: amount_cents = int(round(float(amount_raw) * 100)) except ValueError: flash("Amount must be a number.", "error") return redirect(url_for("admin_dashboard")) events = load_events(DATA_PATH) sessions = build_session_summaries(events) by_id = {session.session_id: session for session in sessions} target = by_id.get(session_id) if target is None: flash("Select a valid open session.", "error") return redirect(url_for("admin_dashboard")) if target.status != "open": flash( "That session is closed. Reopen it first if you need to add events.", "error", ) return redirect(url_for("admin_dashboard")) append_event( DATA_PATH, session_id=target.session_id, session_date=target.session_date, player_name=player_name, event_type=event_type, amount_cents=amount_cents, note=note, actor=app.config["ADMIN_USERNAME"], ) flash("Event added.", "success") return redirect(url_for("admin_dashboard")) events = load_events(DATA_PATH) sessions = build_session_summaries(events) open_sessions = [session for session in sessions if session.status == "open"] recent_sessions = sessions[:8] recent_events = list(reversed(events[-20:])) debt_entries = [ {"session": session, "entry": entry} for session in sessions for entry in session.entries if entry.player_owes_cents > 0 ] admin_totals = { "cash_in_cents": sum(session.total_cash_in_cents for session in sessions), "paid_out_cents": sum(session.total_paid_out_cents for session in sessions), "still_owed_cents": sum( session.total_current_due_cents for session in sessions ), "players_owe_cents": sum( session.total_player_owes_cents for session in sessions ), "collected_cents": sum( session.total_front_collected_cents for session in sessions ), "written_off_cents": sum( session.total_front_writeoff_cents for session in sessions ), "open_balance_cents": sum( session.total_open_balance_cents for session in sessions ), } return render_template( "admin_dashboard.html", open_sessions=open_sessions, recent_sessions=recent_sessions, recent_events=recent_events, debt_entries=debt_entries, player_names=unique_player_names(events), session_label=session_label, admin_totals=admin_totals, ) if __name__ == "__main__": app.run(debug=True)