Function unlock_cells

backend/app/main.py:411–462

(
    challenge_id: str,
    payload: UnlockIn,
    response: Response,
    participant=Cookie(default=None, alias=COOKIE_NAME),
)

@app.post("/api/challenges/{challenge_id}/unlock")
def unlock_cells(
    challenge_id: str,
    payload: UnlockIn,
    response: Response,
    participant=Cookie(default=None, alias=COOKIE_NAME),
) -> dict:
    if not manual_unlock_enabled():
        raise HTTPException(status_code=403, detail="Manual unlock is disabled")
    current = get_or_create_participant(response, participant)
    current_time = now_iso()
    inserted = 0
    rejected: list[str] = []
    with connect() as conn:
        challenge = conn.execute(
            "SELECT * FROM challenges WHERE id = ? AND status = 'active'",
            (challenge_id,),
        ).fetchone()
        if not challenge:
            raise HTTPException(status_code=404, detail="Active challenge not found")
        for cell_id in payload.cell_ids:
            exists = conn.execute(
                """
                SELECT 1 FROM challenge_cells
                WHERE challenge_id = ? AND cell_id = ?
                """,
                (challenge_id, cell_id),
            ).fetchone()
            if not exists:
                rejected.append(cell_id)
                continue
            cur = conn.execute(
                """
                INSERT OR IGNORE INTO user_unlocked_cells
                  (challenge_id, participant_id, cell_id, source, accuracy_m, speed_mps, created_at)
                VALUES (?, ?, ?, ?, ?, ?, ?)
                """,
                (
                    challenge_id,
                    current["id"],
                    cell_id,
                    payload.source,
                    payload.accuracy_m,
                    payload.speed_mps,
                    current_time,
                ),
            )
            inserted += cur.rowcount
        return {
            "inserted": inserted,
            "rejected": rejected,
            "stats": challenge_stats(conn, challenge_id),
        }


@app.post("/api/challenges/{challenge_id}/position")