"""Form submission APIs — Phase 11.6."""
from __future__ import annotations

from uuid import UUID

from fastapi import APIRouter, Depends, Query, status
from sqlalchemy.ext.asyncio import AsyncSession

from app.api.deps import get_db, get_pagination, require_tenant
from app.api.permissions import require_permissions
from app.commands.forms import FormsCommands
from app.permissions.definitions import FORMS_CREATE, FORMS_UPDATE, FORMS_VIEW
from app.queries.forms import FormsQueries
from app.schemas.forms import (
    FormSubmissionCreate,
    FormSubmissionListResponse,
    FormSubmissionRead,
    FormSubmissionUpdate,
)
from app.specifications.forms import SUBMISSION_SORT_FIELDS, FormSubmissionListSpec
from shared.pagination import PaginationParams
from shared.security import CurrentUser

router = APIRouter()
_STATUSES = {"received", "processed", "failed", "archived"}


def _list_spec(
    workspace_id: UUID | None = Query(default=None),
    form_id: UUID | None = Query(default=None),
    status_filter: str | None = Query(default=None, alias="status"),
    q: str | None = Query(default=None, max_length=100),
    sort_by: str = Query(default="created_at"),
    sort_dir: str = Query(default="desc", pattern="^(?i)(asc|desc)$"),
) -> FormSubmissionListSpec:
    if sort_by not in SUBMISSION_SORT_FIELDS:
        sort_by = "created_at"
    return FormSubmissionListSpec(
        workspace_id=workspace_id,
        form_id=form_id,
        status=status_filter if status_filter in _STATUSES else None,
        q=q,
        sort_by=sort_by,
        sort_dir=sort_dir.lower(),
    )


@router.post(
    "", response_model=FormSubmissionRead, status_code=status.HTTP_201_CREATED
)
async def create_submission(
    body: FormSubmissionCreate,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    user: CurrentUser = Depends(require_permissions(FORMS_CREATE)),
):
    return await FormsCommands(db).create_submission(tenant_id, body, actor=user)


@router.get("", response_model=FormSubmissionListResponse)
async def list_submissions(
    tenant_id: UUID = Depends(require_tenant),
    pagination: PaginationParams = Depends(get_pagination),
    spec: FormSubmissionListSpec = Depends(_list_spec),
    db: AsyncSession = Depends(get_db),
    _user: CurrentUser = Depends(require_permissions(FORMS_VIEW)),
):
    items, total = await FormsQueries(db).list_submissions(
        tenant_id, offset=pagination.offset, limit=pagination.page_size, spec=spec
    )
    return FormSubmissionListResponse(
        items=items, total=total, page=pagination.page, page_size=pagination.page_size
    )


@router.get("/{submission_id}", response_model=FormSubmissionRead)
async def get_submission(
    submission_id: UUID,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    _user: CurrentUser = Depends(require_permissions(FORMS_VIEW)),
):
    return await FormsQueries(db).get_submission(tenant_id, submission_id)


@router.patch("/{submission_id}", response_model=FormSubmissionRead)
async def update_submission(
    submission_id: UUID,
    body: FormSubmissionUpdate,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    user: CurrentUser = Depends(require_permissions(FORMS_UPDATE)),
):
    return await FormsCommands(db).update_submission(
        tenant_id, submission_id, body, actor=user
    )
