WordPress REST API: praktyczne przypadki użycia dla custom post types

// functions.php lub własny plugin
add_action('init', function () {
    register_post_type('projekt', [
        'labels' => [
            'name' => 'Projekty',
            'singular_name' => 'Projekt',
        ],
        'public' => true,
        'show_in_rest' => true,        // KLUCZ: eksponuje w REST API
        'rest_base' => 'projekty',     // /wp/v2/projekty
        'rest_controller_class' => 'WP_REST_Posts_Controller',
        'supports' => ['title', 'editor', 'thumbnail', 'excerpt', 'custom-fields'],
        'has_archive' => true,
        'menu_icon' => 'dashicons-portfolio',
        'rewrite' => ['slug' => 'projekty'],
    ]);
});

// Rejestracja meta box + REST exposure
add_action('init', function () {
    register_post_meta('projekt', 'klient', [
        'type' => 'string',
        'single' => true,
        'show_in_rest' => true,
        'sanitize_callback' => 'sanitize_text_field',
        'auth_callback' => function () {
            return current_user_can('edit_posts');
        },
    ]);

    register_post_meta('projekt', 'budzet', [
        'type' => 'number',
        'single' => true,
        'show_in_rest' => true,
        'sanitize_callback' => 'absint',
    ]);

    register_post_meta('projekt', 'data_realizacji', [
        'type' => 'string',
        'single' => true,
        'show_in_rest' => true,
        'sanitize_callback' => function ($value) {
            // ISO 8601 date validation
            $d = DateTime::createFromFormat('Y-m-d', $value);
            return $d && $d->format('Y-m-d') === $value ? $value : '';
        },
    ]);
});

add_action('rest_api_init', function () {
    register_rest_route('custom/v1', '/projekt/(?P<id>\d+)/stats', [
        'methods' => 'GET',
        'callback' => 'get_projekt_stats',
        'permission_callback' => function () {
            return current_user_can('read');
        },
        'args' => [
            'id' => [
                'validate_callback' => function ($param) {
                    return is_numeric($param);
                },
            ],
        ],
    ]);
});

function get_projekt_stats(WP_REST_Request $request) {
    $projekt_id = absint($request['id']);

    $projekt = get_post($projekt_id);
    if (!$projekt || $projekt->post_type !== 'projekt') {
        return new WP_Error('not_found', 'Projekt nie istnieje', ['status' => 404]);
    }

    // Cache'owanie na 1h
    $cache_key = "projekt_stats_{$projekt_id}";
    $stats = wp_cache_get($cache_key);
    if ($stats === false) {
        $stats = [
            'views' => (int) get_post_meta($projekt_id, 'views', true),
            'leads' => (int) get_post_meta($projekt_id, 'leads', true),
            'conversion_rate' => $this->calc_conversion($projekt_id),
            'tasks_total' => $this->count_tasks($projekt_id),
            'tasks_done' => $this->count_tasks($projekt_id, 'done'),
        ];
        wp_cache_set($cache_key, $stats, '', HOUR_IN_SECONDS);
    }

    return new WP_REST_Response($stats, 200);
}

add_action('rest_api_init', function () {
    register_rest_field('projekt', 'related_projects', [
        'get_callback' => 'get_related_projects',
        'update_callback' => null,    // read-only
        'schema' => [
            'description' => 'Lista 3 powiązanych projektów',
            'type' => 'array',
            'items' => ['type' => 'object'],
        ],
    ]);
});

function get_related_projects($post) {
    $tags = wp_get_post_tags($post['id'], ['fields' => 'ids']);
    if (empty($tags)) return [];

    $related = get_posts([
        'post_type' => 'projekt',
        'post__not_in' => [$post['id']],
        'posts_per_page' => 3,
        'tag__in' => $tags,
        'fields' => 'ids',
    ]);

    return array_map(function ($id) {
        $p = get_post($id);
        return [
            'id' => $id,
            'title' => $p->post_title,
            'permalink' => get_permalink($id),
            'klient' => get_post_meta($id, 'klient', true),
        ];
    }, $related);
}

const username = process.env.WP_USERNAME!;
const appPassword = process.env.WP_APP_PASSWORD!;
const baseUrl = process.env.WP_BASE_URL!;

const auth = Buffer.from(`${username}:${appPassword}`).toString('base64');

async function fetchProjects() {
  const res = await fetch(`${baseUrl}/wp-json/wp/v2/projekty?per_page=100`, {
    headers: { Authorization: `Basic ${auth}` },
    next: { revalidate: 60 }, // ISR w Next.js
  });
  return res.json();
}

add_action('rest_api_init', function () {
    register_rest_route('custom/v1', '/projekt/(?P<id>\d+)/ai-description', [
        'methods' => 'POST',
        'callback' => 'generate_ai_description',
        'permission_callback' => function () {
            return current_user_can('edit_posts');
        },
    ]);
});

function generate_ai_description(WP_REST_Request $request) {
    $projekt_id = absint($request['id']);
    $projekt = get_post($projekt_id);
    if (!$projekt) {
        return new WP_Error('not_found', 'Projekt nie istnieje', ['status' => 404]);
    }

    $klient = get_post_meta($projekt_id, 'klient', true);
    $budzet = get_post_meta($projekt_id, 'budzet', true);

    $prompt = "Napisz 3-zdaniowy opis projektu IT w języku polskim.\n";
    $prompt .= "Klient: $klient\n";
    $prompt .= "Budżet: $budzet PLN\n";
    $prompt .= "Tytuł: {$projekt->post_title}\n";
    $prompt .= "Bieżący opis: {$projekt->post_excerpt}\n";

    $response = openai_chat_completion([
        'model' => 'gpt-4o-mini',
        'messages' => [
            ['role' => 'system', 'content' => 'Jesteś redaktorem opisu projektów IT.'],
            ['role' => 'user', 'content' => $prompt],
        ],
        'temperature' => 0.7,
    ]);

    if (is_wp_error($response)) {
        return $response;
    }

    // Zapisz do custom field, NIE nadpisuj post_content
    update_post_meta($projekt_id, 'ai_description_draft', $response['content']);

    return new WP_REST_Response([
        'draft' => $response['content'],
        'cost_usd' => $response['cost'],
    ], 200);
}

add_action('rest_api_init', function () {
    register_rest_route('mobile/v1', '/projekty', [
        'methods' => 'GET',
        'callback' => 'mobile_get_projekty',
        'permission_callback' => 'mobile_check_token',
    ]);

    register_rest_route('mobile/v1', '/projekty/(?P<id>\d+)/tasks', [
        'methods' => 'POST',
        'callback' => 'mobile_create_task',
        'permission_callback' => 'mobile_check_token',
    ]);
});

function mobile_check_token(WP_REST_Request $request) {
    $token = $request->get_header('X-Mobile-Token');
    if (!$token) return new WP_Error('no_token', 'Brak tokenu', ['status' => 401]);

    // HMAC: token = HMAC(secret, timestamp)
    $timestamp = $request->get_header('X-Mobile-Timestamp');
    $expected = hash_hmac('sha256', $timestamp, MOBILE_SECRET);
    if (!hash_equals($expected, $token)) {
        return new WP_Error('invalid_token', 'Nieprawidłowy token', ['status' => 401]);
    }
    return true;
}