"""平台/服务商业务逻辑"""

from typing import List, Optional

from fastapi import HTTPException, status
from sqlmodel import Session, select

from app.core import crypto
from app.models.asset import Asset
from app.models.provider import Provider, ProviderCategory
from app.schemas.provider import ProviderCreate, ProviderRead, ProviderUpdate


def _to_read(provider: Provider) -> ProviderRead:
    read = ProviderRead.model_validate(provider)
    read.has_api_config = bool(provider.api_config_encrypted)
    return read


def list_providers(
    session: Session,
    category: Optional[ProviderCategory] = None,
    enabled: Optional[bool] = None,
) -> List[ProviderRead]:
    stmt = select(Provider)
    if category is not None:
        stmt = stmt.where(Provider.category == category)
    if enabled is not None:
        stmt = stmt.where(Provider.enabled == enabled)
    stmt = stmt.order_by(Provider.category.asc(), Provider.slug.asc())
    return [_to_read(p) for p in session.exec(stmt).all()]


def get_provider(session: Session, provider_id: int) -> ProviderRead:
    provider = session.get(Provider, provider_id)
    if not provider:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="平台不存在")
    return _to_read(provider)


def create_provider(session: Session, data: ProviderCreate) -> ProviderRead:
    exists = session.exec(select(Provider).where(Provider.slug == data.slug)).first()
    if exists:
        raise HTTPException(
            status_code=status.HTTP_400_BAD_REQUEST, detail=f"slug 已存在：{data.slug}"
        )
    provider_data = data.model_dump(exclude={"api_config"})
    provider = Provider(**provider_data)
    provider.api_config_encrypted = crypto.encrypt(data.api_config)
    session.add(provider)
    session.commit()
    session.refresh(provider)
    return _to_read(provider)


def update_provider(
    session: Session, provider_id: int, data: ProviderUpdate
) -> ProviderRead:
    provider = session.get(Provider, provider_id)
    if not provider:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="平台不存在")
    fields = data.model_dump(exclude_unset=True, exclude={"api_config"})
    for key, value in fields.items():
        setattr(provider, key, value)
    if data.api_config is not None:
        provider.api_config_encrypted = crypto.encrypt(data.api_config)
    session.add(provider)
    session.commit()
    session.refresh(provider)
    return _to_read(provider)


def delete_provider(session: Session, provider_id: int) -> None:
    provider = session.get(Provider, provider_id)
    if not provider:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="平台不存在")
    # 数据完整性：存在关联资产时禁止删除，避免 provider_id 悬空引用
    linked = session.exec(
        select(Asset.id).where(Asset.provider_id == provider_id).limit(1)
    ).first()
    if linked is not None:
        raise HTTPException(
            status_code=status.HTTP_409_CONFLICT,
            detail="该平台下仍有关联资产，请先迁移或删除相关资产",
        )
    session.delete(provider)
    session.commit()


def get_api_config_plain(session: Session, provider_id: int) -> Optional[str]:
    """获取平台 API 配置明文（受保护接口使用）"""
    provider = session.get(Provider, provider_id)
    if not provider:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="平台不存在")
    return crypto.decrypt(provider.api_config_encrypted)