using Distribution.Infra.Authorization;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace Distribution.Features.Route;

[ApiController]
[Route("api/routes")]
public class RouteController(
    RouteService service,
    IScopeAccessService scopeAccess,
    ICurrentUserService currentUser) : ControllerBase
{
    [HttpGet]
    [Authorize("route.view")]
    public async Task<IActionResult> GetAll() =>
        Ok(await service.GetAllAsync());

    [HttpGet("{id:guid}")]
    [Authorize("route.view")]
    public async Task<IActionResult> GetById(Guid id)
    {
        var userId = currentUser.UserId;
        if (userId.HasValue && !await scopeAccess.HasRouteScopeAsync(userId.Value, id))
            return StatusCode(403);
        var result = await service.GetByIdAsync(id);
        return result is null ? NotFound() : Ok(result);
    }

    [HttpPost]
    [Authorize("route.manage")]
    public async Task<IActionResult> Create(CreateRouteRequest request, CancellationToken ct)
    {
        var result = await service.CreateAsync(request, ct);
        return CreatedAtAction(nameof(GetById), new { id = result.Id }, result);
    }

    [HttpPut("{id:guid}")]
    [Authorize("route.manage")]
    public async Task<IActionResult> Update(Guid id, UpdateRouteRequest request, CancellationToken ct)
    {
        var result = await service.UpdateAsync(id, request, ct);
        return result is null ? NotFound() : Ok(result);
    }

    [HttpPut("{id:guid}/region")]
    [Authorize("route.manage")]
    public async Task<IActionResult> AssignToRegion(Guid id, AssignRouteToRegionRequest request, CancellationToken ct)
    {
        var result = await service.AssignToRegionAsync(id, request, ct);
        return result is null ? NotFound() : Ok(result);
    }

    [HttpDelete("{id:guid}")]
    [Authorize("route.manage")]
    public async Task<IActionResult> Delete(Guid id, CancellationToken ct)
    {
        var deleted = await service.DeleteAsync(id, ct);
        return deleted ? NoContent() : NotFound();
    }

    [HttpPost("{id:guid}/stores")]
    [Authorize("route.manage")]
    public async Task<IActionResult> AssignStores(Guid id, AssignStoresToRouteRequest request, CancellationToken ct)
    {
        var result = await service.AssignStoresToRouteAsync(id, request, ct);
        return result is null ? NotFound() : Ok(result);
    }

    [HttpPut("{id:guid}/owner")]
    [Authorize("route.manage")]
    public async Task<IActionResult> AssignOwner(Guid id, AssignRouteOwnerRequest request, CancellationToken ct)
    {
        var result = await service.AssignOwnerAsync(id, request, ct);
        return result is null ? NotFound() : Ok(result);
    }

    [HttpPost("{id:guid}/optimize")]
    [Authorize("route.manage")]
    public IActionResult OptimizeSequence(Guid id) =>
        StatusCode(StatusCodes.Status501NotImplemented);

    [HttpPost("{id:guid}/visits/check-in")]
    [Authorize("route.manage")]
    public async Task<IActionResult> CheckIn(Guid id, RecordCheckInRequest request, CancellationToken ct)
    {
        try
        {
            var result = await service.RecordCheckInAsync(id, request, ct);
            return result is null ? NotFound() : Ok(result);
        }
        catch (InvalidOperationException ex) { return BadRequest(new { error = ex.Message }); }
    }

    [HttpPost("{id:guid}/visits/check-out")]
    [Authorize("route.manage")]
    public async Task<IActionResult> CheckOut(Guid id, RecordCheckOutRequest request, CancellationToken ct)
    {
        var result = await service.RecordCheckOutAsync(id, request, ct);
        return result is null ? NotFound() : Ok(result);
    }
}