"""Sports Permission APIs — Phase 9.0."""
from __future__ import annotations

from uuid import UUID

from fastapi import APIRouter, Depends, status
from sqlalchemy.ext.asyncio import AsyncSession

from app.api.deps import get_db, get_pagination, require_tenant
from app.core.security import get_current_user
from app.schemas.foundation import (
    SportsPermissionCreate,
    SportsPermissionRead,
    SportsPermissionUpdate,
)
from app.services.foundation import SportsPermissionService
from shared.pagination import PaginationParams
from shared.security import CurrentUser

router = APIRouter()


@router.post("", response_model=SportsPermissionRead, status_code=status.HTTP_201_CREATED)
async def create_item(
    body: SportsPermissionCreate,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    user: CurrentUser = Depends(get_current_user),
):
    return await SportsPermissionService(db).create(tenant_id, body, actor=user)


@router.get("", response_model=list[SportsPermissionRead])
async def list_items(
    tenant_id: UUID = Depends(require_tenant),
    pagination: PaginationParams = Depends(get_pagination),
    db: AsyncSession = Depends(get_db),
    _user: CurrentUser = Depends(get_current_user),
):
    return await SportsPermissionService(db).list(tenant_id, offset=pagination.offset, limit=pagination.page_size)


@router.get("/{permission_id}", response_model=SportsPermissionRead)
async def get_item(
    permission_id: UUID,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    _user: CurrentUser = Depends(get_current_user),
):
    return await SportsPermissionService(db).get(tenant_id, permission_id)


@router.patch("/{permission_id}", response_model=SportsPermissionRead)
async def update_item(
    permission_id: UUID,
    body: SportsPermissionUpdate,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    user: CurrentUser = Depends(get_current_user),
):
    return await SportsPermissionService(db).update(tenant_id, permission_id, body, actor=user)


@router.post("/{permission_id}/delete", response_model=SportsPermissionRead)
async def soft_delete_item(
    permission_id: UUID,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    user: CurrentUser = Depends(get_current_user),
):
    return await SportsPermissionService(db).soft_delete(tenant_id, permission_id, actor=user)
