from fastapi import APIRouter, Depends, Query
from sqlalchemy.orm import Session

from app.core.database import get_db
from app.core.security import ApiPrincipal, require_api_key, require_approval_api_key
from app.modules.approvals.schemas import ApprovalCreate, ApprovalDecision, ApprovalRead
from app.modules.approvals.service import ApprovalService

router = APIRouter(dependencies=[Depends(require_api_key)])


@router.post("", response_model=ApprovalRead)
def create_approval(
    payload: ApprovalCreate,
    db: Session = Depends(get_db),
    principal: ApiPrincipal = Depends(require_api_key),
):
    return ApprovalService(db).create(payload, applicant=principal.actor)


@router.get("", response_model=list[ApprovalRead])
def list_approvals(
    status: str | None = None,
    limit: int = Query(default=100, ge=1, le=500),
    db: Session = Depends(get_db),
    principal: ApiPrincipal = Depends(require_approval_api_key),
):
    _ = principal
    return ApprovalService(db).list(status_filter=status, limit=limit)


@router.get("/{ticket_id}", response_model=ApprovalRead)
def get_approval(
    ticket_id: str,
    db: Session = Depends(get_db),
    principal: ApiPrincipal = Depends(require_approval_api_key),
):
    _ = principal
    return ApprovalService(db).get_by_ticket(ticket_id)


@router.post("/{ticket_id}/approve", response_model=ApprovalRead)
def approve(
    ticket_id: str,
    payload: ApprovalDecision,
    db: Session = Depends(get_db),
    principal: ApiPrincipal = Depends(require_approval_api_key),
):
    return ApprovalService(db).decide(ticket_id, principal.actor, True, payload.comment)


@router.post("/{ticket_id}/reject", response_model=ApprovalRead)
def reject(
    ticket_id: str,
    payload: ApprovalDecision,
    db: Session = Depends(get_db),
    principal: ApiPrincipal = Depends(require_approval_api_key),
):
    return ApprovalService(db).decide(ticket_id, principal.actor, False, payload.comment)