feat: import F95 covers using personal encrypted sessions

backend/app/routers/games.py

@@ -6,7 +6,7 @@ from PIL import Image, UnidentifiedImageError
 from sqlalchemy import and_, exists, func, or_, select, true
 from starlette.concurrency import run_in_threadpool
 
-from app.blobs import put_bytes
+from app.blobs import blob_path, put_bytes
 from app.deps import DB, CurrentUser, has_perm, require
 from app.models import Game, GameVersion, User
 from app.schemas import GameDetailOut, GameIn, GameOut, GameUpdateIn, VersionOut
@@ -87,11 +87,14 @@ async def list_games(user: Player, db: DB, q: str = "", tag: str = "") -> list[d
 
 @router.post("", response_model=GameOut, status_code=201)
 async def create_game(body: GameIn, user: Uploader, db: DB) -> Game:
+    if body.cover_hash and not blob_path(body.cover_hash).is_file():
+        raise HTTPException(status.HTTP_422_UNPROCESSABLE_ENTITY, "Обложка не найдена, загрузите превью снова")
     game = Game(
         title=body.title.strip(),
         description=body.description,
         tags=sorted({t.strip().lower() for t in body.tags if t.strip()}),
         created_by_id=user.id,
+        cover_hash=body.cover_hash,
     )
     db.add(game)
     await db.commit()
@@ -118,6 +121,10 @@ async def update_game(game_id: int, body: GameUpdateIn, user: CurrentUser, db: D
     game = await get_game(db, game_id)
     if not can_edit_game(user, game):
         raise HTTPException(status.HTTP_403_FORBIDDEN, "Нет прав на редактирование")
+    if body.cover_hash:
+        if not blob_path(body.cover_hash).is_file():
+            raise HTTPException(status.HTTP_422_UNPROCESSABLE_ENTITY, "Обложка не найдена, загрузите превью снова")
+        game.cover_hash = body.cover_hash
     if body.title is not None:
         game.title = body.title.strip()
     if body.description is not None: