Add per-user phase navigation with results toggle

Endpoints/StateEndpoints.cs

@@ -1,5 +1,6 @@
 using GameList.Contracts;
 using GameList.Data;
+using GameList.Domain;
 using Microsoft.EntityFrameworkCore;
 using Microsoft.AspNetCore.Mvc;
 
@@ -9,12 +10,16 @@ public static class StateEndpoints
 {
     public static void MapStateEndpoints(this IEndpointRouteBuilder app)
     {
-        app.MapGet("/api/state", async (AppDbContext db) =>
+        app.MapGet("/api/state", async (HttpContext ctx, AppDbContext db) =>
         {
+            var player = await EndpointHelpers.GetAuthenticatedPlayer(ctx, db);
+            if (player is null) return Results.Unauthorized();
+
             var state = await db.AppState.AsNoTracking().FirstAsync();
             var summary = new
             {
-                state.CurrentPhase,
+                CurrentPhase = player.CurrentPhase,
+                state.ResultsOpen,
                 state.UpdatedAt,
                 Players = await db.Players.CountAsync(),
                 Suggestions = await db.Suggestions.CountAsync(),
@@ -27,7 +32,36 @@ public static class StateEndpoints
         {
             var player = await EndpointHelpers.GetAuthenticatedPlayer(ctx, db);
             if (player is null) return Results.Unauthorized();
-            return Results.Ok(new { player.Id, player.DisplayName, player.Username, player.IsAdmin });
+            return Results.Ok(new { player.Id, player.DisplayName, player.Username, player.IsAdmin, player.CurrentPhase });
+        });
+
+        app.MapPost("/api/me/phase/next", async (HttpContext ctx, AppDbContext db) =>
+        {
+            var player = await EndpointHelpers.GetAuthenticatedPlayer(ctx, db);
+            if (player is null) return Results.Unauthorized();
+
+            var next = NextPhase(player.CurrentPhase);
+            var appState = await db.AppState.FirstAsync();
+
+            if (next == Phase.Results && !appState.ResultsOpen)
+            {
+                return Results.BadRequest(new { error = "Results are locked until the admin enables them." });
+            }
+
+            player.CurrentPhase = next;
+            await db.SaveChangesAsync();
+            return Results.Ok(new { player.CurrentPhase, appState.ResultsOpen });
+        });
+
+        app.MapPost("/api/me/phase/prev", async (HttpContext ctx, AppDbContext db) =>
+        {
+            var player = await EndpointHelpers.GetAuthenticatedPlayer(ctx, db);
+            if (player is null) return Results.Unauthorized();
+
+            player.CurrentPhase = PrevPhase(player.CurrentPhase);
+            await db.SaveChangesAsync();
+            var appState = await db.AppState.AsNoTracking().FirstAsync();
+            return Results.Ok(new { player.CurrentPhase, appState.ResultsOpen });
         });
 
         app.MapPost("/api/me/name", async ([FromBody] SetNameRequest request, HttpContext ctx, AppDbContext db) =>
@@ -46,4 +80,20 @@ public static class StateEndpoints
             return Results.Ok(new { player.Id, player.DisplayName });
         });
     }
+
+    private static Phase NextPhase(Phase current) => current switch
+    {
+        Phase.Suggest => Phase.Reveal,
+        Phase.Reveal => Phase.Vote,
+        Phase.Vote => Phase.Results,
+        _ => Phase.Results
+    };
+
+    private static Phase PrevPhase(Phase current) => current switch
+    {
+        Phase.Results => Phase.Vote,
+        Phase.Vote => Phase.Reveal,
+        Phase.Reveal => Phase.Suggest,
+        _ => Phase.Suggest
+    };
 }