"""Widget instance APIs — Phase 11.9."""
from uuid import UUID

from fastapi import APIRouter, Depends, Query, Response, status
from sqlalchemy.ext.asyncio import AsyncSession

from app.api.deps import get_db, get_pagination, require_tenant
from app.api.permissions import require_permissions
from app.commands.integrations import IntegrationsCommands
from app.permissions.definitions import (
    WIDGETS_CREATE,
    WIDGETS_DELETE,
    WIDGETS_UPDATE,
    WIDGETS_VIEW,
)
from app.queries.integrations import IntegrationsQueries
from app.schemas.integrations import (
    WidgetInstanceCreate,
    WidgetInstanceListResponse,
    WidgetInstanceRead,
    WidgetInstanceUpdate,
)
from app.specifications.integrations import WIDGET_INSTANCE_SORT, WidgetInstanceListSpec
from shared.pagination import PaginationParams
from shared.security import CurrentUser

router = APIRouter()


def _spec(
    workspace_id: UUID | None = None,
    site_id: UUID | None = None,
    status_filter: str | None = Query(None, alias="status"),
    widget_kind: str | None = None,
    q: str | None = Query(None, max_length=100),
    sort_by: str = "created_at",
    sort_dir: str = Query("desc", pattern="^(?i)(asc|desc)$"),
):
    return WidgetInstanceListSpec(
        workspace_id=workspace_id,
        site_id=site_id,
        status=status_filter,
        widget_kind=widget_kind,
        q=q,
        sort_by=sort_by if sort_by in WIDGET_INSTANCE_SORT else "created_at",
        sort_dir=sort_dir,
    )


@router.post("", response_model=WidgetInstanceRead, status_code=201)
async def create(
    body: WidgetInstanceCreate,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    user: CurrentUser = Depends(require_permissions(WIDGETS_CREATE)),
):
    return await IntegrationsCommands(db).create_widget_instance(tenant_id, body, actor=user)


@router.get("/by-embed/{embed_ref}", response_model=WidgetInstanceRead)
async def get_by_embed(
    embed_ref: str,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    _user: CurrentUser = Depends(require_permissions(WIDGETS_VIEW)),
):
    return await IntegrationsQueries(db).get_widget_instance_by_embed(tenant_id, embed_ref)


@router.get("", response_model=WidgetInstanceListResponse)
async def list_items(
    tenant_id: UUID = Depends(require_tenant),
    pagination: PaginationParams = Depends(get_pagination),
    spec: WidgetInstanceListSpec = Depends(_spec),
    db: AsyncSession = Depends(get_db),
    _user: CurrentUser = Depends(require_permissions(WIDGETS_VIEW)),
):
    items, total = await IntegrationsQueries(db).list_widget_instances(
        tenant_id, offset=pagination.offset, limit=pagination.page_size, spec=spec
    )
    return WidgetInstanceListResponse(
        items=items, total=total, page=pagination.page, page_size=pagination.page_size
    )


@router.get("/{entity_id}", response_model=WidgetInstanceRead)
async def get(
    entity_id: UUID,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    _user: CurrentUser = Depends(require_permissions(WIDGETS_VIEW)),
):
    return await IntegrationsQueries(db).get_widget_instance(tenant_id, entity_id)


@router.patch("/{entity_id}", response_model=WidgetInstanceRead)
async def update(
    entity_id: UUID,
    body: WidgetInstanceUpdate,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    user: CurrentUser = Depends(require_permissions(WIDGETS_UPDATE)),
):
    return await IntegrationsCommands(db).update_widget_instance(
        tenant_id, entity_id, body, actor=user
    )


@router.delete("/{entity_id}", status_code=status.HTTP_204_NO_CONTENT)
async def delete(
    entity_id: UUID,
    tenant_id: UUID = Depends(require_tenant),
    db: AsyncSession = Depends(get_db),
    user: CurrentUser = Depends(require_permissions(WIDGETS_DELETE)),
):
    await IntegrationsCommands(db).delete_widget_instance(tenant_id, entity_id, actor=user)
    return Response(status_code=204)
