package delivery

import (
	"strings"

	"git.apinb.com/bsm-sdk/core/errcode"
	"git.apinb.com/bsm-sdk/core/infra"
	"git.apinb.com/heqiapp/platforms/backend/api/internal/impl"
	"git.apinb.com/heqiapp/platforms/backend/api/internal/logic/common"
	"git.apinb.com/heqiapp/platforms/backend/api/internal/models"
	"github.com/gin-gonic/gin"
	"gorm.io/gorm"
)

// deliveryAdminRoleCode 是配送点管理后台当前唯一允许的登录角色编码。
const deliveryAdminRoleCode = "admin"

// newDeliveryAccount 构造平台创建的配送点登录账号，并固定其权限身份。
func newDeliveryAccount(deliveryBasicID uint64, request accountRequest, passwordHash string) models.DeliveryAccount {
	return models.DeliveryAccount{
		Entity:          common.NewEntity(common.StatusEnable),
		DeliveryBasicID: deliveryBasicID,
		Username:        request.Username,
		DisplayName:     request.DisplayName,
		PasswordHash:    passwordHash,
		RoleCode:        deliveryAdminRoleCode,
	}
}

type accountRequest struct {
	Username              string `json:"username" binding:"required,max=64"`
	Password              string `json:"password" binding:"required"`
	DisplayName           string `json:"display_name" binding:"max=64"`
	DeliveryBasicIdentity string `json:"delivery_basic_identity"`
}

type accountUpdateRequest struct {
	DisplayName           string `json:"display_name" binding:"max=64"`
	DeliveryBasicIdentity string `json:"delivery_basic_identity"`
}

func ListDeliveryAccount(ctx *gin.Context) {
	identities := strings.Split(strings.TrimSpace(ctx.Query("delivery_basic_identities")), ",")
	if len(identities) == 1 && identities[0] == "" {
		identities = nil
	}
	if len(identities) > 100 {
		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
		return
	}
	common.ListPageFiltered[models.DeliveryAccount](ctx, func(query *gorm.DB) *gorm.DB {
		if len(identities) == 0 {
			return query
		}
		return query.Where("delivery_basic_id IN (SELECT id FROM delivery_basic WHERE identity IN ? AND status <> ?)", identities, common.StatusArchived)
	})
}
func GetDeliveryAccount(ctx *gin.Context) { common.GetByIdentity[models.DeliveryAccount](ctx) }

func CreateDeliveryAccount(ctx *gin.Context) {
	var request accountRequest
	if err := ctx.ShouldBindJSON(&request); err != nil {
		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
		return
	}
	if !common.IsValidAccountPassword(request.Password) {
		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
		return
	}
	deliveryBasicID, err := common.ResolveIdentityID(&models.DeliveryBasic{}, request.DeliveryBasicIdentity, true)
	if err != nil {
		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
		return
	}
	hash, err := common.PasswordHash(request.Password)
	if err != nil {
		infra.Response.Error(ctx, err)
		return
	}
	account := newDeliveryAccount(deliveryBasicID, request, hash)
	if err := impl.DBService.Create(&account).Error; err != nil {
		infra.Response.Error(ctx, err)
		return
	}
	common.RespondCreatedResource(ctx, account)
}

func UpdateDeliveryAccount(ctx *gin.Context) {
	var request accountUpdateRequest
	if err := ctx.ShouldBindJSON(&request); err != nil {
		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
		return
	}
	deliveryBasicID, err := common.ResolveIdentityID(&models.DeliveryBasic{}, request.DeliveryBasicIdentity, true)
	if err != nil {
		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
		return
	}
	common.UpdateAllowedByIdentity(ctx, &models.DeliveryAccount{}, gin.H{"delivery_basic_id": deliveryBasicID, "display_name": request.DisplayName}, []string{"delivery_basic_id", "display_name"})
}