using PostFundManagement.Domain;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Api;
using PostFundManagement.Domain.Extensions;
using PostFundManagement.Infrastructure.Database;

namespace PostFundManagement.Api.Endpoints.Execution;

[ApiVersionTarget(1)]
public class CreateRiskEndpoint : IEndpoint
{
    public record CreateRiskRequest(long ProjectId, RiskLikelihood Likelihood, RiskImpact Impact, string Name, string Description);

    public void Map(IEndpointRouteBuilder builder)
    {
        builder.MapPost("api/execution/risks", async (CreateRiskRequest request, ClaimsPrincipal principal, 
            IDbContextFactory<ApplicationDbContext> contextFactory, CancellationToken cancellationToken = default) =>
        {
            var sidClaim = principal.FindFirst("sid")?.Value ?? principal.FindFirst(ClaimTypes.Sid)?.Value;

            if (!Guid.TryParse(sidClaim, out var userId))
                return Results.BadRequest("Missing or invalid 'sid' claim.");

            using var context = await contextFactory.CreateDbContextAsync(cancellationToken);

            if (!await context.Projects.AnyAsync(p => p.Id == request.ProjectId, cancellationToken))
                return Results.BadRequest($"Project with ID {request.ProjectId} does not exist.");

            var risk = new Domain.Entities.Risk
            {
                ProjectId = request.ProjectId,
                Likelihood = request.Likelihood,
                Impact = request.Impact,
                Name = request.Name,
                Description = request.Description,
                CreatedBy = userId,
                CreatedAt = DateTime.UtcNow
            };

            context.Risks.Add(risk);

            return await context.SaveChangesAsync(cancellationToken) > 0
                ? Results.Created($"api/execution/risks/{risk.Id}", risk)
                : Results.BadRequest("Failed to create project risk");
        })
        .RequireAuthorization()
        .WithDescription("Add risk to risk register (M09)")
        .WithName(typeof(CreateRiskEndpoint).ToEndpointName())
        .MapToApiVersion(new ApiVersion(1))
        .Produces<Domain.Entities.Risk>(StatusCodes.Status201Created)
        .Produces(StatusCodes.Status400BadRequest)
        .Produces(StatusCodes.Status401Unauthorized)
        .WithTags(EndpointTags.Execution);
    }
}