Update main.py

main.py

@@ -57,9 +57,6 @@ except Exception as e:
     print(f"Error initializing Firebase: {e}")
 
 
-
-
-
 bucket = storage.bucket()
 
 
@@ -233,6 +230,49 @@ def upload_log():
         logging.error(f"❌ ERROR: Failed to upload log file: {e}")
         return None
 
+@app.route('/api/feedback', methods=['POST'])
+def submit_feedback():
+    """
+    Allows a user to submit feedback, bug reports, or feature requests.
+    """
+    try:
+        # --- Authentication ---
+        auth_header = request.headers.get('Authorization', '')
+        if not auth_header.startswith('Bearer '):
+            return jsonify({'error': 'Missing or invalid token'}), 401
+        token = auth_header.split(' ')[1]
+        uid = verify_token(token)
+        if not uid:
+            return jsonify({'error': 'Invalid or expired token'}), 401
+
+        # --- Parse Feedback Data ---
+        data = request.get_json()
+        feedback_type = data.get('type', 'general')  # e.g. "bug", "feature_request", "general"
+        message = data.get('message')
+        if not message:
+            return jsonify({'error': 'message is required'}), 400
+
+        # Optionally, store some user info like email or name
+        user_data = db.reference(f'users/{uid}').get() or {}
+        user_email = user_data.get('email', 'unknown')
+
+        # Create a new feedback entry in "feedback" node
+        feedback_id = str(uuid.uuid4())
+        feedback_ref = db.reference(f'feedback/{feedback_id}')
+        feedback_record = {
+            "user_id": uid,
+            "user_email": user_email,
+            "type": feedback_type,
+            "message": message,
+            "created_at": datetime.utcnow().isoformat(),
+            "status": "open"  # admin can mark "resolved" or "in progress"
+        }
+        feedback_ref.set(feedback_record)
+
+        return jsonify({"success": True, "feedback_id": feedback_id}), 201
+
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
 
 # -----------------------
 # Content
@@ -1368,7 +1408,67 @@ def admin_list_stories():
     except Exception as e:
         return jsonify({'error': str(e)}), 500
 
+@app.route('/api/admin/notifications', methods=['POST'])
+def send_notifications():
+    """
+    Admin sends notifications to one, multiple, or all users.
+    """
+    try:
+        # 1) Verify admin
+        admin_uid = verify_admin(request.headers.get('Authorization', ''))
+        if not admin_uid:
+            return jsonify({'error': 'Unauthorized: Admin access required'}), 401
 
+        # 2) Parse request data
+        data = request.get_json()
+        message = data.get('message')
+        if not message:
+            return jsonify({'error': 'message is required'}), 400
+
+        # 'recipients' can be a single user_id, a list of user_ids, or "all"
+        recipients = data.get('recipients', "all")
+
+        # 3) If recipients == "all", get all user IDs
+        all_users_ref = db.reference('users')
+        all_users_data = all_users_ref.get() or {}
+
+        user_ids_to_notify = []
+
+        if recipients == "all":
+            user_ids_to_notify = list(all_users_data.keys())
+        elif isinstance(recipients, list):
+            # Filter out invalid user IDs
+            user_ids_to_notify = [uid for uid in recipients if uid in all_users_data]
+        elif isinstance(recipients, str):
+            # Could be a single user_id if not "all"
+            if recipients in all_users_data:
+                user_ids_to_notify = [recipients]
+            else:
+                return jsonify({'error': 'Invalid single user_id'}), 400
+        else:
+            return jsonify({'error': 'recipients must be "all", a user_id, or a list of user_ids'}), 400
+
+        # 4) Create a "notifications" node for each user
+        #    E.g., notifications/{user_id}/{notification_id}
+        now_str = datetime.utcnow().isoformat()
+        for user_id in user_ids_to_notify:
+            notif_id = str(uuid.uuid4())
+            notif_ref = db.reference(f'notifications/{user_id}/{notif_id}')
+            notif_data = {
+                "from_admin": admin_uid,
+                "message": message,
+                "created_at": now_str,
+                "read": False
+            }
+            notif_ref.set(notif_data)
+
+        return jsonify({
+            'success': True,
+            'message': f"Notification sent to {len(user_ids_to_notify)} user(s)."
+        }), 200
+
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
 # ---------- Admin Endpoint to Directly Update Credits ----------
 @app.route('/api/admin/users/<string:uid>/credits', methods=['PUT'])
 def admin_update_credits(uid):