Backend enhancements: auth, channels, restaurants, daemon improvements

- Add admin auth dependency and role checks
- Expand channel and restaurant API routes
- Improve YouTube transcript fetching
- Enhance daemon worker with better error handling and scheduling

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend/api/routes/restaurants.py

@@ -2,9 +2,10 @@
 
 from __future__ import annotations
 
-from fastapi import APIRouter, HTTPException, Query
+from fastapi import APIRouter, Depends, HTTPException, Query
 
-from core import restaurant
+from api.deps import get_admin_user
+from core import restaurant, cache
 
 router = APIRouter()
 
@@ -17,19 +18,30 @@ def list_restaurants(
     region: str | None = None,
     channel: str | None = None,
 ):
-    return restaurant.get_all(limit=limit, offset=offset, cuisine=cuisine, region=region, channel=channel)
+    key = cache.make_key("restaurants", f"l={limit}", f"o={offset}", f"c={cuisine}", f"r={region}", f"ch={channel}")
+    cached = cache.get(key)
+    if cached is not None:
+        return cached
+    result = restaurant.get_all(limit=limit, offset=offset, cuisine=cuisine, region=region, channel=channel)
+    cache.set(key, result)
+    return result
 
 
 @router.get("/{restaurant_id}")
 def get_restaurant(restaurant_id: str):
+    key = cache.make_key("restaurant", restaurant_id)
+    cached = cache.get(key)
+    if cached is not None:
+        return cached
     r = restaurant.get_by_id(restaurant_id)
     if not r:
         raise HTTPException(404, "Restaurant not found")
+    cache.set(key, r)
     return r
 
 
 @router.put("/{restaurant_id}")
-def update_restaurant(restaurant_id: str, body: dict):
+def update_restaurant(restaurant_id: str, body: dict, _admin: dict = Depends(get_admin_user)):
     from core.db import conn
     r = restaurant.get_by_id(restaurant_id)
     if not r:
@@ -49,11 +61,12 @@ def update_restaurant(restaurant_id: str, body: dict):
     sql = f"UPDATE restaurants SET {', '.join(sets)} WHERE id = :rid"
     with conn() as c:
         c.cursor().execute(sql, params)
+    cache.flush()
     return {"ok": True}
 
 
 @router.delete("/{restaurant_id}")
-def delete_restaurant(restaurant_id: str):
+def delete_restaurant(restaurant_id: str, _admin: dict = Depends(get_admin_user)):
     from core.db import conn
     r = restaurant.get_by_id(restaurant_id)
     if not r:
@@ -64,12 +77,19 @@ def delete_restaurant(restaurant_id: str):
         cur.execute("DELETE FROM user_reviews WHERE restaurant_id = :rid", {"rid": restaurant_id})
         cur.execute("DELETE FROM video_restaurants WHERE restaurant_id = :rid", {"rid": restaurant_id})
         cur.execute("DELETE FROM restaurants WHERE id = :rid", {"rid": restaurant_id})
+    cache.flush()
     return {"ok": True}
 
 
 @router.get("/{restaurant_id}/videos")
 def get_restaurant_videos(restaurant_id: str):
+    key = cache.make_key("restaurant_videos", restaurant_id)
+    cached = cache.get(key)
+    if cached is not None:
+        return cached
     r = restaurant.get_by_id(restaurant_id)
     if not r:
         raise HTTPException(404, "Restaurant not found")
-    return restaurant.get_video_links(restaurant_id)
+    result = restaurant.get_video_links(restaurant_id)
+    cache.set(key, result)
+    return result