package router

import (
	"affiliate_dash/internal/handler"
	"affiliate_dash/internal/middleware"
	"affiliate_dash/internal/model"
	"affiliate_dash/internal/pkg/jwt"
	"affiliate_dash/internal/service"

	"github.com/gin-contrib/cors"
	"github.com/gin-gonic/gin"
	"gorm.io/gorm"
)

type Handlers struct {
	Auth          *handler.AuthHandler
	Dashboard     *handler.DashboardHandler
	User          *handler.UserHandler
	Open          *handler.OpenV1Handler
	SourceOpen    *handler.OpenHandler
	Merchant      *handler.MerchantHandler
	JWT           *jwt.Manager
	Tenant        *service.TenantService
	OpenDB        *gorm.DB
	SecretCodec   *service.SecretCodec
	OpenAPIKey    string
	OpenAPISecret string
	OpenSignSkew  int64
	OpenAPIDebug  bool
}

func Setup(h *Handlers) *gin.Engine {
	r := gin.Default()

	r.Use(cors.New(cors.Config{
		AllowOrigins:     []string{"*"},
		AllowMethods:     []string{"GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"},
		AllowHeaders:     []string{"Origin", "Content-Type", "Authorization", "X-Merchant-ID", "X-App-Key", "X-Api-Key", "X-Timestamp", "X-Nonce", "X-Sign", "Idempotency-Key", "X-Request-ID"},
		ExposeHeaders:    []string{"Content-Length", "X-Request-ID"},
		AllowCredentials: true,
	}))

	r.GET("/health", func(c *gin.Context) {
		c.JSON(200, gin.H{"status": "ok"})
	})

	api := r.Group("/api")
	{
		api.POST("/auth/login", h.Auth.Login)
		api.POST("/auth/register", h.Auth.Register)

		// 源头侧接口：上游发货平台查询订单并回传发货结果。
		sourceOpen := api.Group("/open/v1")
		sourceOpen.Use(middleware.SourceOpenAuth(middleware.SourceOpenAuthConfig{
			DB:          h.OpenDB,
			APIKey:      h.OpenAPIKey,
			APISecret:   h.OpenAPISecret,
			SkewSeconds: h.OpenSignSkew,
			Debug:       h.OpenAPIDebug,
		}))
		{
			sourceOpen.GET("/orders/:order_no", h.SourceOpen.QueryOrder)
			sourceOpen.POST("/orders/ship-notify", h.SourceOpen.ShipNotify)
		}

		// 商户侧接口：每个商户独立 API 客户端 + HMAC 签名。
		clientOpen := api.Group("/client/v1")
		clientOpen.Use(middleware.OpenAuth(middleware.OpenAuthConfig{
			DB:          h.OpenDB,
			Codec:       h.SecretCodec,
			SkewSeconds: h.OpenSignSkew,
			Debug:       h.OpenAPIDebug,
		}))
		{
			clientOpen.GET("/products", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureProducts), middleware.RequireAPIScope("products:read"), h.Open.ListProducts)
			clientOpen.POST("/orders", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureOrders), middleware.RequireAPIScope("orders:write"), h.Open.CreateOrder)
			clientOpen.GET("/orders/:order_no", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureOrders), middleware.RequireAPIScope("orders:read", "fulfillment:read"), h.Open.QueryOrder)
			clientOpen.POST("/orders/:order_no/cancel", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureOrders), middleware.RequireAPIScope("orders:write"), h.Open.CancelOrder)
			clientOpen.GET("/wallet", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureWallet), middleware.RequireAPIScope("wallet:read"), h.Open.GetWallet)
		}

		auth := api.Group("")
		auth.Use(middleware.Auth(h.JWT))
		auth.Use(middleware.Tenant(h.Tenant))
		{
			auth.GET("/auth/profile", h.Auth.Profile)
			auth.GET("/dashboard", h.Dashboard.Dashboard)

			// 商户后台：商户就是平台下游客户，成员只代表该商户内部员工。
			merchant := auth.Group("/merchant")
			{
				merchant.GET("", h.Merchant.Current)
				merchant.GET("/products", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureProducts), h.Merchant.ListProducts)
				merchant.POST("/products", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureProducts), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.CreateProduct)
				merchant.PATCH("/products/:id", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureProducts), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.UpdateProduct)
				merchant.GET("/orders", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureOrders), h.Merchant.ListOrders)
				merchant.POST("/orders/test", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureOrders), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.CreateTestOrder)
				merchant.GET("/wallet", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureWallet), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator, model.MemberRoleFinance), h.Merchant.GetWallet)
				merchant.GET("/wallet/ledger", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureWallet), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleFinance), h.Merchant.ListWalletLedger)
				merchant.POST("/wallet/adjust", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureWallet), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleFinance), h.Merchant.AdjustWallet)
				merchant.GET("/api-clients", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureAPI), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.ListAPIClients)
				merchant.POST("/api-clients", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureAPI), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.CreateAPIClient)
				merchant.PATCH("/api-clients/:id/status", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureAPI), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.UpdateAPIClientStatus)
				merchant.GET("/callbacks", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureCallbacks), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.ListCallbacks)
				merchant.POST("/callbacks", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureCallbacks), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.CreateCallback)
				merchant.PATCH("/callbacks/:id/status", middleware.RequireMerchantFeature(h.OpenDB, model.MerchantFeatureCallbacks), middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.UpdateCallbackStatus)
				merchant.GET("/members", middleware.RequireMerchantRole(model.MemberRoleOwner, model.MemberRoleOperator), h.Merchant.ListMembers)
				merchant.POST("/members", middleware.RequireMerchantRole(model.MemberRoleOwner), h.Merchant.AddCurrentMerchantMember)
			}

			// 用户 / 发货记录 / 平台商户（仅管理员）
			admin := auth.Group("")
			admin.Use(middleware.RequireRole(model.RoleAdmin))
			{
				admin.GET("/users", h.User.List)
				admin.POST("/users", h.User.Create)
				admin.PATCH("/users/:id/status", h.User.UpdateStatus)
				admin.GET("/platform/merchants", h.Merchant.ListPlatformMerchants)
				admin.POST("/platform/merchants", h.Merchant.CreateMerchant)
				admin.PATCH("/platform/merchants/:id", h.Merchant.UpdateMerchantSettings)
				admin.POST("/platform/merchants/:id/members", h.Merchant.AddPlatformMerchantMember)
				admin.GET("/platform/product-catalog", h.Merchant.ListProductCatalog)
				admin.GET("/platform/merchants/:id/products", h.Merchant.ListMerchantProductsByAdmin)
				admin.POST("/platform/merchants/:id/products/assign", h.Merchant.AssignProducts)
			}
		}
	}

	return r
}