Update app.py

app.py

@@ -1,48 +1,52 @@
 import os
 import json
 import configparser
-from flask import Flask, jsonify
+from flask import Flask, jsonify, request
 from flask_cors import CORS
 from waitress import serve
+import asyncio
 
-# 1. CONFIG PARSER
+# 1. Config laden
 config = configparser.ConfigParser()
 config.read('.codey-lab')
 
-# Pfade aus Config ziehen
 TRESOR_DIR = config['TRESOR']['STORAGE_DIR']
 FILE_EXT = config['TRESOR']['FILE_SYNTAX']
-ORGA_URL = config['REPOSITORY']['URL']
 
 app = Flask(__name__)
-CORS(app) # Sicherheit für GitHub Pages
+# CORS Sicherheit: Nur Anfragen von deiner GitHub-URL erlauben
+CORS(app, resources={r"/api/*": {"origins": "https://codey-lab.github.io"}})
 
-def get_latest_entry(hex_id):
-    # Dynamischer Pfadbau: z.B. authority/2026_database.jsonl
-    year = "2026" # Kann später per datetime.now().year dynamisch gemacht werden
+async def read_jsonl_async(filepath):
+    """Liest die Datei asynchron, um den Server nicht zu blockieren."""
+    if not os.path.exists(filepath):
+        return []
+    # In einem echten asynchronen Kontext würde man hier aiofiles nutzen
+    with open(filepath, 'r', encoding='utf-8') as f:
+        return [json.loads(line) for line in f if line.strip()]
+
+@app.route('/api/v1/ledger/<int:year>/<hex_id>', methods=['GET'])
+async def get_user_data(year, hex_id):
     db_path = f"{TRESOR_DIR}/{year}{FILE_EXT}.jsonl"
+    hex_id = hex_id.upper()
     
-    if not os.path.exists(db_path):
-        return None
+    try:
+        data = await read_jsonl_async(db_path)
+        # Wir filtern die Daten: Nur den letzten Stand für die ID
+        user_history = [d for d in data if d.get('h_uid') == hex_id]
         
-    with open(db_path, 'r', encoding='utf-8') as f:
-        # Wir lesen von hinten (effizient für große Files)
-        lines = f.readlines()
-        for line in reversed(lines):
-            data = json.loads(line)
-            if data.get('h_uid') == hex_id.upper():
-                return data
-    return None
-
-@app.route('/api/auth/<hex_id>')
-def auth_gate(hex_id):
-    result = get_latest_entry(hex_id)
-    if result:
-        return jsonify(result)
-    return jsonify({"error": "UID_NOT_FOUND"}), 404
+        if not user_logs:
+            return jsonify({"status": "error", "msg": "UID_NOT_FOUND"}), 404
+            
+        return jsonify({
+            "status": "success",
+            "data": user_history[-1], # Aktuellster Stand
+            "count": len(user_history) # Wie oft hat der User gesynct?
+        })
+    except Exception as e:
+        return jsonify({"status": "error", "msg": str(e)}), 500
 
 if __name__ == "__main__":
-    print(f"[*] AUTHORITY_SERVER STARTING FOR {ORGA_URL}")
-    print(f"[*] READING FROM TRESOR: {TRESOR_DIR}")
-    # Waitress als stabiler Unterbau
-    serve(app, host='0.0.0.0', port=7860, threads=6)
+    # Waitress als stabiler Worker
+    print(f"[*] API ONLINE // Listening for GitHub Pages requests...")
+    serve(app, host='0.0.0.0', port=7860, threads=8)