from typing import Any, Dict

from core.database import get_core_db
from core.security import get_current_user, validate_access_to_resource
from fastapi import APIRouter, Depends, HTTPException, Query
from sqlalchemy.orm import Session

from .dto import ContainerDTO
from .models import Container

router = APIRouter(prefix="/containers")


@router.get("/", response_model=Dict[str, Any])
async def list_containers(
    page: int = Query(1, ge=1, description="Número de página"),
    page_size: int = Query(50, ge=1, le=100, description="Tamaño de página"),
    company_id: int = Query(..., description="ID de la empresa"),
    db: Session = Depends(get_core_db),
    current_user: dict = Depends(get_current_user),
):
    # 🛡️ Permiso de Lectura (Listado)
    validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.view"])
    
    skip = (page - 1) * page_size
    query = db.query(Container)
    items = query.offset(skip).limit(page_size).all()
    total = query.count()
    return {
        "items": [ContainerDTO.model_validate(obj) for obj in items],
        "total": total,
        "page": page,
        "page_size": page_size,
    }


@router.get("/{key}", response_model=ContainerDTO)
async def get_container(
    key: str,
    company_id: int = Query(..., description="ID de la empresa"),
    db: Session = Depends(get_core_db),
    current_user: dict = Depends(get_current_user),
):
    # 🛡️ Permiso de Lectura (Individual)
    validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.view"])
    
    obj = db.query(Container).filter(Container.key == key).first()
    if not obj:
        raise HTTPException(status_code=404, detail="Not found")
    return obj


@router.post("/", response_model=ContainerDTO, status_code=201)
async def create_container(
    data: ContainerDTO,
    company_id: int = Query(..., description="ID de la empresa"),
    db: Session = Depends(get_core_db),
    current_user: dict = Depends(get_current_user),
):
    # 🛡️ Permiso de Creación
    validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.create"])
    
    obj = Container(**data.dict())
    db.add(obj)
    db.commit()
    db.refresh(obj)
    return obj


@router.put("/{key}", response_model=ContainerDTO)
async def update_container(
    key: str,
    data: ContainerDTO,
    company_id: int = Query(..., description="ID de la empresa"),
    db: Session = Depends(get_core_db),
    current_user: dict = Depends(get_current_user),
):
    # 🛡️ Permiso de Edición
    validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.edit"])
    
    obj = db.query(Container).filter(Container.key == key).first()
    if not obj:
        raise HTTPException(status_code=404, detail="Not found")
    for field, value in data.dict().items():
        setattr(obj, field, value)
    db.commit()
    db.refresh(obj)
    return obj


@router.delete("/{key}", status_code=204)
async def delete_container(
    key: str,
    company_id: int = Query(..., description="ID de la empresa"),
    db: Session = Depends(get_core_db),
    current_user: dict = Depends(get_current_user),
):
    # 🛡️ Permiso de Borrado
    validate_access_to_resource(db, company_id, current_user, required_permissions=["ref_containers.delete"])
    
    obj = db.query(Container).filter(Container.key == key).first()
    if not obj:
        raise HTTPException(status_code=404, detail="Not found")
    db.delete(obj)
    db.commit()
    return None