<?php

/*
|--------------------------------------------------------------------------
| Web Routes
|--------------------------------------------------------------------------
|
| Here is where you can register web routes for your application. These
| routes are loaded by the RouteServiceProvider within a group which
| contains the "web" middleware group. Now create something great!
|
*/

use App\Http\Controllers\Admin\AdminAjaxController;
use App\Http\Controllers\Admin\AdminAnidbController;
use App\Http\Controllers\Admin\AdminBlacklistController;
use App\Http\Controllers\Admin\AdminBookController;
use App\Http\Controllers\Admin\AdminCategoryController;
use App\Http\Controllers\Admin\AdminCategoryRegexesController;
use App\Http\Controllers\Admin\AdminCollectionRegexesController;
use App\Http\Controllers\Admin\AdminCommentsController;
use App\Http\Controllers\Admin\AdminConsoleController;
use App\Http\Controllers\Admin\AdminContentController;
use App\Http\Controllers\Admin\AdminFailedReleasesController;
use App\Http\Controllers\Admin\AdminGameController;
use App\Http\Controllers\Admin\AdminGroupController;
use App\Http\Controllers\Admin\AdminInvitationController;
use App\Http\Controllers\Admin\AdminLogViewerController;
use App\Http\Controllers\Admin\AdminMovieController;
use App\Http\Controllers\Admin\AdminMusicController;
use App\Http\Controllers\Admin\AdminPageController;
use App\Http\Controllers\Admin\AdminPaymentController;
use App\Http\Controllers\Admin\AdminPredbController;
use App\Http\Controllers\Admin\AdminPromotionController;
use App\Http\Controllers\Admin\AdminRegistrationController;
use App\Http\Controllers\Admin\AdminReleaseNamingRegexesController;
use App\Http\Controllers\Admin\AdminReleaseReportController;
use App\Http\Controllers\Admin\AdminReleasesController;
use App\Http\Controllers\Admin\AdminRoleController;
use App\Http\Controllers\Admin\AdminShowsController;
use App\Http\Controllers\Admin\AdminSiteController;
use App\Http\Controllers\Admin\AdminStatusController;
use App\Http\Controllers\Admin\AdminTmuxController;
use App\Http\Controllers\Admin\AdminUserController;
use App\Http\Controllers\Admin\AdminUserRoleHistoryController;
use App\Http\Controllers\Admin\DeletedUsersController;
use App\Http\Controllers\Admin\GdprRequestController;
use App\Http\Controllers\AdultController;
use App\Http\Controllers\AjaxController;
use App\Http\Controllers\Api\FileListApiController;
use App\Http\Controllers\ApiHelpController;
use App\Http\Controllers\Auth\EmailVerificationController;
use App\Http\Controllers\Auth\ForgotPasswordController;
use App\Http\Controllers\Auth\LoginController;
use App\Http\Controllers\Auth\PasskeyLoginController;
use App\Http\Controllers\Auth\PasskeyManagementController;
use App\Http\Controllers\Auth\RegisterController;
use App\Http\Controllers\Auth\ResetPasswordController;
use App\Http\Controllers\BooksController;
use App\Http\Controllers\BrowseController;
use App\Http\Controllers\BrowseGroupController;
use App\Http\Controllers\BtcPaymentController;
use App\Http\Controllers\CartController;
use App\Http\Controllers\ConsoleController;
use App\Http\Controllers\ContactUsController;
use App\Http\Controllers\ContentController;
use App\Http\Controllers\CoverController;
use App\Http\Controllers\DetailsController;
use App\Http\Controllers\FailedReleasesController;
use App\Http\Controllers\GamesController;
use App\Http\Controllers\GetNzbController;
use App\Http\Controllers\InvitationController;
use App\Http\Controllers\MovieController;
use App\Http\Controllers\MusicController;
use App\Http\Controllers\MyMoviesController;
use App\Http\Controllers\MyShowsController;
use App\Http\Controllers\NfoController;
use App\Http\Controllers\PasswordSecurityController;
use App\Http\Controllers\PrivacyCenterController;
use App\Http\Controllers\PrivacyPolicyController;
use App\Http\Controllers\ProfileController;
use App\Http\Controllers\ProfileSecurityController;
use App\Http\Controllers\ReleaseReportController;
use App\Http\Controllers\RssController;
use App\Http\Controllers\SearchController;
use App\Http\Controllers\SearchSuggestController;
use App\Http\Controllers\SeriesController;
use App\Http\Controllers\StatusPageController;
use App\Http\Controllers\TermsController;
use Spatie\LaravelPasskeys\Http\Controllers\GeneratePasskeyAuthenticationOptionsController;

// Serve cover images from storage - Must be public (no auth required)
Route::get('/covers/{type}/{filename}', [CoverController::class, 'show'])
    ->where('type', 'anime|audio|audiosample|book|console|games|movies|music|preview|sample|tvrage|video|tvshows')
    ->where('filename', '.*')
    ->name('covers.show');

// Auth::routes();

Route::match(['GET', 'POST'], '/', [ContentController::class, 'show'])->name('home');

Route::get('register', [RegisterController::class, 'showRegistrationForm'])->name('register');
Route::post('register', [RegisterController::class, 'register'])->name('register.post');
Route::get('email/verify', [EmailVerificationController::class, 'show'])->middleware('auth')->name('verification.notice');
Route::post('email/verification-notification', [EmailVerificationController::class, 'resend'])->middleware(['auth', 'throttle:6,1'])->name('verification.send');
Route::get('email/verify/{id}/{hash}', [EmailVerificationController::class, 'verify'])->middleware(['signed', 'throttle:6,1'])->name('verification.verify');

Route::get('forgottenpassword', [ForgotPasswordController::class, 'showLinkRequestForm'])->name('forgottenpassword')->withoutMiddleware(['auth']);
Route::post('forgottenpassword', [ForgotPasswordController::class, 'showLinkRequestForm'])->middleware('throttle:6,1')->withoutMiddleware(['auth']);
Route::get('password/reset', [ForgotPasswordController::class, 'showLinkRequestForm'])->name('password.request')->withoutMiddleware(['auth']);
Route::post('password/reset', [ForgotPasswordController::class, 'showLinkRequestForm'])->middleware('throttle:6,1')->withoutMiddleware(['auth']);
Route::get('password/reset/{token}', [ResetPasswordController::class, 'showResetForm'])->name('password.reset')->withoutMiddleware(['auth']);
Route::post('password/update', [ResetPasswordController::class, 'reset'])->middleware('throttle:6,1')->name('password.update')->withoutMiddleware(['auth']);
Route::get('resetpassword', [ResetPasswordController::class, 'showLegacyResetForm'])->middleware('throttle:6,1')->name('resetpassword')->withoutMiddleware(['auth']);
Route::match(['GET', 'POST'], 'terms-and-conditions', [TermsController::class, 'terms'])->name('terms-and-conditions');
Route::match(['GET', 'POST'], 'privacy-policy', [PrivacyPolicyController::class, 'privacyPolicy'])->name('privacy-policy');

Route::get('login', [LoginController::class, 'showLoginForm'])->name('login');
Route::post('login', [LoginController::class, 'login'])->name('login.post');
Route::post('logout', [LoginController::class, 'logout'])->name('logout');
Route::get('passkeys/authentication-options', GeneratePasskeyAuthenticationOptionsController::class)
    ->middleware('throttle:6,1')
    ->name('passkeys.authentication_options');
Route::post('passkeys/authenticate', PasskeyLoginController::class)->middleware('throttle:6,1')->name('passkeys.login');

Route::get('2fa/verify', [PasswordSecurityController::class, 'getVerify2fa'])->middleware('throttle:6,1')->name('2fa.verify');
Route::post('2fa/verify', [PasswordSecurityController::class, 'verify2fa'])->middleware('throttle:6,1')->name('2fa.post');
Route::post('2faVerify', [PasswordSecurityController::class, 'verify2fa'])->middleware('throttle:6,1')->name('2faVerify');

// Search autocomplete and suggest API routes (no auth required for better UX)
Route::get('api/search/autocomplete', [SearchSuggestController::class, 'autocomplete'])->name('api.search.autocomplete');
Route::get('api/search/suggest', [SearchSuggestController::class, 'suggest'])->name('api.search.suggest');
Route::get('api/search/assist', [SearchSuggestController::class, 'searchAssist'])->name('api.search.assist');

Route::get('contact-us', [ContactUsController::class, 'showContactForm'])->name('contact-us');
Route::post('contact-us', [ContactUsController::class, 'contact']);

Route::get('status', [StatusPageController::class, 'showStatusPage'])->name('status');

Route::middleware(['auth', 'isVerified'])->group(function () {
    Route::post('passkeys/register-options', [PasskeyManagementController::class, 'options'])
        ->name('passkeys.register_options');
    Route::post('passkeys', [PasskeyManagementController::class, 'store'])
        ->name('passkeys.store');
    Route::delete('passkeys/{passkey}', [PasskeyManagementController::class, 'destroy'])
        ->name('passkeys.destroy');

    Route::match(['GET', 'POST'], 'profile', [ProfileController::class, 'show'])->name('profile');

    Route::prefix('browse')->group(function () {
        Route::match(['GET', 'POST'], 'tags', [BrowseController::class, 'tags'])->name('tags');
        Route::match(['GET', 'POST'], 'group', [BrowseController::class, 'group'])->name('group');
        Route::match(['GET', 'POST'], 'All', [BrowseController::class, 'index'])->name('All');
        Route::match(['GET', 'POST'], '{parentCategory}/{id?}', [BrowseController::class, 'show'])->middleware('clearance')->name('browse');
    });

    Route::prefix('cart')->group(function () {
        Route::match(['GET', 'POST'], 'index', [CartController::class, 'index'])->name('cart.index');
        Route::match(['GET', 'POST'], 'add', [CartController::class, 'store'])->name('cart.add');
        Route::match(['GET', 'POST'], 'delete/{id}', [CartController::class, 'destroy'])->name('cart.delete');
    });

    Route::match(['GET', 'POST'], 'details/{guid}', [DetailsController::class, 'show'])->name('details');
    Route::match(['GET', 'POST'], 'getnzb/{guid}', [GetNzbController::class, 'getNzb'])->withoutMiddleware(['auth', 'isVerified'])->name('getnzb.guid');
    Route::match(['GET', 'POST'], 'getnzb', [GetNzbController::class, 'getNzb'])->withoutMiddleware(['auth', 'isVerified'])->name('getnzb');
    Route::match(['GET', 'POST'], 'rsshelp', [RssController::class, 'showRssDesc'])->name('rsshelp');
    Route::match(['GET', 'POST'], 'profile', [ProfileController::class, 'show'])->name('profile');
    Route::match(['GET', 'POST'], 'apihelp', [ApiHelpController::class, 'index'])->name('apihelp');
    Route::match(['GET', 'POST'], 'apiv2help', [ApiHelpController::class, 'apiv2'])->name('apiv2help');
    Route::match(['GET', 'POST'], 'browsegroup', [BrowseGroupController::class, 'show'])->name('browsegroup');
    Route::match(['GET', 'POST'], 'content', [ContentController::class, 'show'])->name('content');
    Route::match(['GET', 'POST'], 'failed', [FailedReleasesController::class, 'failed'])
        ->middleware('throttle:60,1')
        ->withoutMiddleware(['auth', 'isVerified'])
        ->name('failed');

    Route::middleware('clearance')->group(function () {
        Route::match(['GET', 'POST'], 'Games', [GamesController::class, 'show'])->name('Games');
        Route::match(['GET', 'POST'], 'trending-movies', [MovieController::class, 'showTrending'])->name('trending-movies');
        Route::match(['GET', 'POST'], 'movie/{imdbid}', [MovieController::class, 'showMovie'])->name('movie.view');
        Route::match(['GET', 'POST'], 'Movies/{id?}', [MovieController::class, 'showMovies'])->name('Movies');
        Route::match(['GET', 'POST'], 'movie', [MovieController::class, 'showMovies'])->name('movie');
        Route::match(['GET', 'POST'], 'movietrailers', [MovieController::class, 'showTrailer'])->name('movietrailers');
        Route::post('movies/update-layout', [MovieController::class, 'updateLayout'])->name('movies.update-layout');
        Route::match(['GET', 'POST'], 'Audio/{id?}', [MusicController::class, 'show'])->name('Audio');
        Route::match(['GET', 'POST'], 'Console/{id?}', [ConsoleController::class, 'show'])->name('Console');
        Route::match(['GET', 'POST'], 'XXX/{id?}', [AdultController::class, 'show'])->name('XXX');
        Route::match(['GET', 'POST'], 'Books/{id?}', [BooksController::class, 'index'])->name('Books');
        // TV-related routes
        Route::match(['GET', 'POST'], 'series/{id?}', [SeriesController::class, 'index'])->name('series');
        Route::match(['GET', 'POST'], 'trending-tv', [SeriesController::class, 'showTrending'])->name('trending-tv');
        Route::match(['GET', 'POST'], 'myshows', [MyShowsController::class, 'show'])->name('myshows');
        Route::match(['GET', 'POST'], 'myshows/browse', [MyShowsController::class, 'browse'])->name('myshows.browse');
        // Movies-related routes
        Route::match(['GET', 'POST'], 'mymovies', [MyMoviesController::class, 'show'])->name('mymovies');
    });

    Route::match(['GET', 'POST'], 'nfo/{id?}', [NfoController::class, 'showNfo'])->name('nfo');

    Route::match(['GET', 'POST'], 'profileedit', [ProfileController::class, 'edit'])->name('profileedit');
    Route::match(['GET', 'POST'], 'profile_delete', [ProfileController::class, 'destroy'])->name('profile_delete');
    Route::post('profile/update-theme', [ProfileController::class, 'updateTheme'])->name('profile.update-theme');
    Route::get('privacy-center', [PrivacyCenterController::class, 'index'])->name('privacy-center.index');
    Route::post('privacy-center/export', [PrivacyCenterController::class, 'requestExport'])->middleware('throttle:3,1')->name('privacy-center.export');
    Route::post('privacy-center/erasure', [PrivacyCenterController::class, 'requestErasure'])->middleware('throttle:3,1')->name('privacy-center.erasure');
    Route::get('privacy-center/export/{gdprRequest}/download', [PrivacyCenterController::class, 'downloadExport'])->middleware('throttle:10,1')->name('privacy-center.export.download');
    Route::match(['GET', 'POST'], 'search', [SearchController::class, 'search'])->name('search');

    // Release Report routes
    Route::post('release-report', [ReleaseReportController::class, 'store'])->name('release-report.store');
    Route::get('release-report/reasons', [ReleaseReportController::class, 'getReasons'])->name('release-report.reasons');
    Route::get('release-report/check', [ReleaseReportController::class, 'checkReported'])->name('release-report.check');

    Route::get('api/release/{guid}/filelist', [FileListApiController::class, 'getFileList'])->name('api.filelist');
    Route::match(['GET', 'POST'], 'ajax_profile', [AjaxController::class, 'profile'])->name('ajax_profile');
    Route::match(['GET', 'POST'], '2fa', [PasswordSecurityController::class, 'show2faForm'])->name('2fa');
    Route::get('2fa/enable', [PasswordSecurityController::class, 'showEnable2faForm'])->name('2fa.enable');
    Route::get('2fa/disable', [PasswordSecurityController::class, 'showDisable2faForm'])->name('2fa.disable');
    Route::post('generate2faSecret', [PasswordSecurityController::class, 'generate2faSecret'])->name('generate2faSecret');
    Route::post('2fa', [PasswordSecurityController::class, 'enable2fa'])->name('enable2fa');
    Route::post('disable2fa', [PasswordSecurityController::class, 'disable2fa'])->name('disable2fa');
    Route::post('profile-disable2fa', [PasswordSecurityController::class, 'profileDisable2fa'])->name('profile-disable2fa');
    // Custom 2FA routes that redirect to profile page
    Route::post('profileedit/enable2fa', [PasswordSecurityController::class, 'enable2fa'])->name('profileedit.enable2fa');
    Route::post('profileedit/disable2fa', [PasswordSecurityController::class, 'disable2fa'])->name('profileedit.disable2fa');
    Route::post('profileedit/cancel2fa', [PasswordSecurityController::class, 'cancelSetup'])->name('profileedit.cancel2fa');
    Route::post('profile-security/disable-2fa', [ProfileSecurityController::class, 'disable2fa'])->name('profile.security.disable2fa');
});

Route::middleware(['role:Admin', '2fa'])->prefix('admin')->group(function () {
    Route::get('index', [AdminPageController::class, 'index'])->name('admin.index');

    // Aggregated JSON payload consumed by the admin dashboard's deferred widgets
    // (User Statistics, System Resources history, Recent Activity, Site Status).
    Route::get('api/dashboard-data', [AdminPageController::class, 'getDashboardData'])->name('admin.api.dashboard-data');

    // System Metrics API endpoints
    Route::get('api/system-metrics/current', [AdminPageController::class, 'getCurrentMetrics'])->name('admin.api.metrics.current');
    Route::get('api/system-metrics/historical', [AdminPageController::class, 'getHistoricalMetrics'])->name('admin.api.metrics.historical');

    // User Activity API endpoints
    Route::get('api/user-activity/minutes', [AdminPageController::class, 'getUserActivityMinutes'])->name('admin.api.user-activity.minutes');
    Route::get('api/user-activity/recent', [AdminPageController::class, 'getRecentActivity'])->name('admin.api.user-activity.recent');

    Route::post('anidb-delete/{id}', [AdminAnidbController::class, 'destroy'])->name('admin.anidb-delete');
    Route::match(['GET', 'POST'], 'anidb-edit/{id}', [AdminAnidbController::class, 'edit'])->name('admin.anidb-edit');
    Route::get('anidb-list', [AdminAnidbController::class, 'index'])->name('admin.anidb-list');
    Route::get('binaryblacklist-list', [AdminBlacklistController::class, 'index'])->name('admin.binaryblacklist-list');
    Route::match(['GET', 'POST'], 'binaryblacklist-edit', [AdminBlacklistController::class, 'edit'])->name('admin.binaryblacklist-edit');
    Route::get('book-list', [AdminBookController::class, 'index'])->name('admin.book-list');
    Route::match(['GET', 'POST'], 'book-edit', [AdminBookController::class, 'edit'])->name('admin.book-edit');
    Route::get('category-list', [AdminCategoryController::class, 'index'])->name('admin.category-list');
    Route::match(['GET', 'POST'], 'category-add', [AdminCategoryController::class, 'create'])->name('admin.category-add');
    Route::match(['GET', 'POST'], 'category-edit', [AdminCategoryController::class, 'edit'])->name('admin.category-edit');
    Route::get('category-delete', [AdminCategoryController::class, 'destroy'])->name('admin.category-delete');
    Route::get('user-list', [AdminUserController::class, 'index'])->name('admin.user-list');
    Route::post('user-list/bulk', [AdminUserController::class, 'bulkAction'])->name('admin.user-list.bulk');
    Route::match(['GET', 'POST'], 'user-edit', [AdminUserController::class, 'edit'])->name('admin.user-edit');
    Route::delete('user-passkey/{passkey}', [AdminUserController::class, 'destroyPasskey'])->name('admin.user-passkey.destroy');
    Route::post('user-passkeys/wipe', [AdminUserController::class, 'wipePasskeys'])->name('admin.user-passkeys.wipe');
    Route::post('user-delete', [AdminUserController::class, 'destroy'])->name('admin.user-delete');
    Route::post('verify', [AdminUserController::class, 'verify'])->name('admin.verify');
    Route::post('resendverification', [AdminUserController::class, 'resendVerification'])->name('admin.resend-verification');
    Route::get('user-role-history', [AdminUserRoleHistoryController::class, 'index'])->name('admin.user-role-history');
    Route::get('user-role-history/{userId}', [AdminUserRoleHistoryController::class, 'show'])->name('admin.user-role-history.show');
    Route::get('registrations', [AdminRegistrationController::class, 'index'])->name('admin.registrations.index');
    Route::post('registrations/status', [AdminRegistrationController::class, 'updateStatus'])->name('admin.registrations.update-status');
    Route::post('registrations/periods', [AdminRegistrationController::class, 'storePeriod'])->name('admin.registrations.periods.store');
    Route::put('registrations/periods/{period}', [AdminRegistrationController::class, 'updatePeriod'])->name('admin.registrations.periods.update');
    Route::post('registrations/periods/{period}/toggle', [AdminRegistrationController::class, 'togglePeriod'])->name('admin.registrations.periods.toggle');
    Route::delete('registrations/periods/{period}', [AdminRegistrationController::class, 'destroyPeriod'])->name('admin.registrations.periods.destroy');
    Route::match(['GET', 'POST'], 'site-edit', [AdminSiteController::class, 'edit'])->name('admin.site-edit');
    Route::get('status/create', [AdminStatusController::class, 'create'])->name('admin.status.create');
    Route::post('status', [AdminStatusController::class, 'store'])->name('admin.status.store');
    Route::get('status', [AdminStatusController::class, 'index'])->name('admin.status.index');
    Route::get('status/{incident}/edit', [AdminStatusController::class, 'edit'])->name('admin.status.edit')->whereNumber('incident');
    Route::put('status/{incident}', [AdminStatusController::class, 'update'])->name('admin.status.update')->whereNumber('incident');
    Route::post('status/{incident}/resolve', [AdminStatusController::class, 'resolve'])->name('admin.status.resolve')->whereNumber('incident');
    Route::delete('status/{incident}', [AdminStatusController::class, 'destroy'])->name('admin.status.destroy')->whereNumber('incident');
    Route::post('status/service/{service}/update', [AdminStatusController::class, 'updateService'])->name('admin.status.update-service')->whereNumber('service');
    Route::get('site-stats', [AdminSiteController::class, 'stats'])->name('admin.site-stats');
    Route::get('logs', [AdminLogViewerController::class, 'index'])->name('admin.logs.index');
    Route::get('role-list', [AdminRoleController::class, 'index'])->name('admin.role-list');
    Route::match(['GET', 'POST'], 'role-add', [AdminRoleController::class, 'create'])->name('admin.role-add');
    Route::match(['GET', 'POST'], 'role-edit', [AdminRoleController::class, 'edit'])->name('admin.role-edit');
    Route::post('role-delete', [AdminRoleController::class, 'destroy'])->name('admin.role-delete');
    Route::get('content-list', [AdminContentController::class, 'index'])->name('admin.content-list');
    Route::match(['GET', 'POST'], 'content-add', [AdminContentController::class, 'create'])->name('admin.content-add');
    Route::post('content-reorder', [AdminContentController::class, 'reorder'])->name('admin.content-reorder');
    Route::post('content-toggle-status', [AdminContentController::class, 'toggleStatus'])->name('admin.content-toggle');
    Route::post('content-delete', [AdminContentController::class, 'destroy'])->name('admin.content-delete');

    // Promotion routes
    Route::get('promotions', [AdminPromotionController::class, 'index'])->name('admin.promotions.index');
    Route::get('promotions/statistics', [AdminPromotionController::class, 'statistics'])->name('admin.promotions.statistics');
    Route::get('promotions/create', [AdminPromotionController::class, 'create'])->name('admin.promotions.create');
    Route::post('promotions', [AdminPromotionController::class, 'store'])->name('admin.promotions.store');
    Route::get('promotions/{id}/edit', [AdminPromotionController::class, 'edit'])->name('admin.promotions.edit');
    Route::get('promotions/{id}/statistics', [AdminPromotionController::class, 'showStatistics'])->name('admin.promotions.show-statistics');
    Route::put('promotions/{id}', [AdminPromotionController::class, 'update'])->name('admin.promotions.update');
    Route::delete('promotions/{id}', [AdminPromotionController::class, 'destroy'])->name('admin.promotions.destroy');
    Route::get('promotions/{id}/toggle', [AdminPromotionController::class, 'toggle'])->name('admin.promotions.toggle');

    Route::post('release_naming_regexes-test', [AdminReleaseNamingRegexesController::class, 'testRegex'])->name('admin.release-naming-regexes-test');
    Route::get('release_naming_regexes-list', [AdminReleaseNamingRegexesController::class, 'index'])->name('admin.release_naming_regexes-list');
    Route::match(['GET', 'POST'], 'release_naming_regexes-edit', [AdminReleaseNamingRegexesController::class, 'edit'])->name('admin.release_naming_regexes-edit');
    Route::get('category_regexes-list', [AdminCategoryRegexesController::class, 'index'])->name('admin.category_regexes-list');
    Route::match(['GET', 'POST'], 'category_regexes-edit', [AdminCategoryRegexesController::class, 'edit'])->name('admin.category_regexes-edit');
    Route::get('collection_regexes-list', [AdminCollectionRegexesController::class, 'index'])->name('admin.collection_regexes-list');
    Route::match(['GET', 'POST'], 'collection_regexes-edit', [AdminCollectionRegexesController::class, 'edit'])->name('admin.collection_regexes-edit');
    Route::post('ajax', [AdminAjaxController::class, 'ajaxAction'])->name('admin.ajax');
    Route::match(['GET', 'POST'], 'tmux-edit', [AdminTmuxController::class, 'edit'])->name('admin.tmux-edit');
    Route::get('release-list', [AdminReleasesController::class, 'index'])->name('admin.release-list');
    Route::post('release-bulk-category', [AdminReleasesController::class, 'bulkCategory'])->name('admin.release-bulk-category');
    Route::post('release-delete/{id}', [AdminReleasesController::class, 'destroy'])->name('admin.release-delete');

    // Release Reports Management
    Route::get('release-reports', [AdminReleaseReportController::class, 'index'])->name('admin.release-reports');
    Route::post('release-reports/{id}/status', [AdminReleaseReportController::class, 'updateStatus'])->name('admin.release-reports.update-status');
    Route::post('release-reports/{id}/response', [AdminReleaseReportController::class, 'updateResponse'])->name('admin.release-reports.update-response');
    Route::post('release-reports/{id}/delete-release', [AdminReleaseReportController::class, 'deleteRelease'])->name('admin.release-reports.delete-release');
    Route::post('release-reports/{id}/dismiss', [AdminReleaseReportController::class, 'dismiss'])->name('admin.release-reports.dismiss');
    Route::post('release-reports/{id}/revert', [AdminReleaseReportController::class, 'revert'])->name('admin.release-reports.revert');
    Route::post('release-reports/bulk', [AdminReleaseReportController::class, 'bulkAction'])->name('admin.release-reports.bulk');

    Route::get('show-list', [AdminShowsController::class, 'index'])->name('admin.show-list');
    Route::match(['GET', 'POST'], 'show-edit', [AdminShowsController::class, 'edit'])->name('admin.show-edit');
    Route::match(['GET', 'POST'], 'show-add', [AdminShowsController::class, 'create'])->name('admin.show-add');
    Route::get('show-add/lookup', [AdminShowsController::class, 'lookup'])->name('admin.show-add.lookup');
    Route::get('show-remove/{id}', [AdminShowsController::class, 'destroy'])->name('admin.show-remove');
    Route::get('comments-list', [AdminCommentsController::class, 'index'])->name('admin.comments-list');
    Route::post('comments-delete/{id}', [AdminCommentsController::class, 'destroy'])->name('admin.comments-delete');
    Route::get('console-list', [AdminConsoleController::class, 'index'])->name('admin.console-list');
    Route::match(['GET', 'POST'], 'console-edit', [AdminConsoleController::class, 'edit'])->name('admin.console-edit');
    Route::get('failrel-list', [AdminFailedReleasesController::class, 'index'])->name('admin.failrel-list');
    Route::get('game-list', [AdminGameController::class, 'index'])->name('admin.game-list');
    Route::match(['GET', 'POST'], 'game-edit', [AdminGameController::class, 'edit'])->name('admin.game-edit');
    Route::get('movie-list', [AdminMovieController::class, 'index'])->name('admin.movie-list');
    Route::match(['GET', 'POST'], 'movie-edit', [AdminMovieController::class, 'edit'])->name('admin.movie-edit');
    Route::match(['GET', 'POST'], 'movie-add', [AdminMovieController::class, 'create'])->name('admin.movie-add');
    Route::get('music-list', [AdminMusicController::class, 'index'])->name('admin.music-list');
    Route::match(['GET', 'POST'], 'music-edit', [AdminMusicController::class, 'edit'])->name('admin.music-edit');
    Route::get('payment-list', [AdminPaymentController::class, 'index'])->name('admin.payment-list');
    Route::get('predb', [AdminPredbController::class, 'index'])->name('admin.predb');
    Route::get('group-list', [AdminGroupController::class, 'index'])->name('admin.group-list');
    Route::match(['GET', 'POST'], 'group-edit', [AdminGroupController::class, 'edit'])->name('admin.group-edit');
    Route::match(['GET', 'POST'], 'group-bulk', [AdminGroupController::class, 'createBulk'])->name('admin.group-bulk');
    Route::get('group-list-active', [AdminGroupController::class, 'active'])->name('admin.group-list-active');
    Route::get('group-list-inactive', [AdminGroupController::class, 'inactive'])->name('admin.group-list-inactive');

    // Deleted Users Management Routes
    Route::get('deleted-users', [DeletedUsersController::class, 'index'])->name('admin.deleted.users.index');
    Route::post('deleted-users/bulk', [DeletedUsersController::class, 'bulkAction'])->name('admin.deleted.users.bulk');
    Route::post('deleted-users/restore/{id}', [DeletedUsersController::class, 'restore'])->name('admin.deleted.users.restore');
    Route::post('deleted-users/permanent-delete/{id}', [DeletedUsersController::class, 'permanentDelete'])->name('admin.deleted.users.permanent-delete');

    // GDPR / privacy request management
    Route::get('gdpr-requests', [GdprRequestController::class, 'index'])->name('admin.gdpr-requests.index');
    Route::get('gdpr-requests/{gdprRequest}', [GdprRequestController::class, 'show'])->name('admin.gdpr-requests.show');
    Route::post('gdpr-requests/{gdprRequest}/generate-export', [GdprRequestController::class, 'generateExport'])->name('admin.gdpr-requests.generate-export');
    Route::post('gdpr-requests/{gdprRequest}/complete-erasure', [GdprRequestController::class, 'completeErasure'])->name('admin.gdpr-requests.complete-erasure');
    Route::post('gdpr-requests/{gdprRequest}/reject', [GdprRequestController::class, 'reject'])->name('admin.gdpr-requests.reject');
});

Route::middleware('role_or_permission:Admin|Moderator|edit release')->prefix('admin')->group(function () {
    Route::match(['GET', 'POST'], 'release-edit', [AdminReleasesController::class, 'edit'])->name('admin.release-edit');
});

// Redirect btcpay route to btc payment server
Route::get('btcpay', function () {
    return redirect()->to('https://example.com');
})->name('btcpay');
// Invitation management routes
Route::prefix('invitations')->name('invitations.')->group(function () {
    Route::get('/', [InvitationController::class, 'index'])->name('index');
    Route::get('/create', [InvitationController::class, 'create'])->name('create');
    Route::post('/store', [InvitationController::class, 'store'])->name('store');
    Route::post('/{id}/resend', [InvitationController::class, 'resend'])->name('resend');
    Route::delete('/{id}', [InvitationController::class, 'destroy'])->name('destroy');
    Route::get('/stats', [InvitationController::class, 'stats'])->name('stats');
});

// Public invitation view (no auth required)
Route::get('/invitation/{token}', [InvitationController::class, 'show'])->name('invitation.show');

// Admin invitation management routes
Route::middleware(['role:Admin', '2fa'])->prefix('admin/invitations')->name('admin.invitations.')->group(function () {
    Route::get('/', [AdminInvitationController::class, 'index'])->name('index');
    Route::get('/{id}', [AdminInvitationController::class, 'show'])->name('show');
    Route::post('/{id}/resend', [AdminInvitationController::class, 'resend'])->name('resend');
    Route::post('/{id}/cancel', [AdminInvitationController::class, 'cancel'])->name('cancel');
    Route::post('/bulk', [AdminInvitationController::class, 'bulkAction'])->name('bulk');
    Route::post('/cleanup', [AdminInvitationController::class, 'cleanup'])->name('cleanup');
});

Route::post('btcpay/webhook', [BtcPaymentController::class, 'btcPayCallback'])->name('btcpay.webhook');