import { Router } from 'express'
import { config } from '../../config.js'
import { requireAppwriteStaff } from '../../middleware/appwriteStaff.js'
import { listDocuments, Query } from '../../services/appwriteAdmin.js'
import { isPreviewProjectReady } from '../../services/previewReadiness.js'
import { createStaffPreviewToken } from '../../services/staffPreviewTokens.js'

const router = Router()

function isStaffAdmin(user) {
  return (user?.labels || []).includes('admin')
}

function safePreviewUrl(url) {
  try {
    const parsed = new URL(String(url || ''))
    if (
      parsed.hostname.endsWith('.project.webklar.com') ||
      parsed.hostname === 'project.webklar.com'
    ) {
      return parsed.toString()
    }
  } catch {
    /* ignore */
  }
  return null
}

function previewUrlForSubdomain(subdomain) {
  const safe = String(subdomain || '')
    .trim()
    .toLowerCase()
    .replace(/[^a-z0-9-]/g, '')
  if (!safe) return null
  return `https://${safe}.${config.preview.baseHost}`
}

/**
 * Einmal-Link fuer die Preview eines Projekts (eingeloest von GET /api/auth/staff-preview). Genutzt von dieser
 * Admin-Route und vom Team-Eingang (/api/team/preview-link, alle Mitarbeiter). Liefert { status, body }.
 */
export async function buildStaffPreviewLink({ userId, email, name, subdomain: rawSubdomain, previewUrl: rawPreviewUrl }) {
  const subdomain = String(rawSubdomain || '')
    .trim()
    .toLowerCase()
  const previewUrl = safePreviewUrl(rawPreviewUrl) || previewUrlForSubdomain(subdomain)

  if (!subdomain || !previewUrl) {
    return { status: 400, body: { error: 'subdomain oder gueltige previewUrl erforderlich' } }
  }

  try {
    const projects = await listDocuments(config.collections.websiteProjects, [
      Query.equal('subdomain', subdomain),
      Query.limit(1),
    ])
    const project = projects[0]
    if (!project) {
      return { status: 404, body: { error: 'Projekt nicht gefunden' } }
    }
    if (!isPreviewProjectReady(project)) {
      return { status: 409, body: { error: 'Projekt-Vorschau ist noch nicht bereit' } }
    }

    const token = createStaffPreviewToken({
      userId,
      email: email || '',
      name: name || email || 'Admin',
      previewUrl,
      customerId: project.customerId || '',
    })

    const portalBase = `https://${config.preview.baseHost}`
    return { status: 200, body: { openUrl: `${portalBase}/api/auth/staff-preview?token=${encodeURIComponent(token)}` } }
  } catch (err) {
    return { status: err.status || 500, body: { error: err.message || 'Preview-Login fehlgeschlagen' } }
  }
}

router.use(requireAppwriteStaff)

router.post('/', async (req, res) => {
  const user = req.appwriteUser
  if (!isStaffAdmin(user)) {
    return res.status(403).json({ error: 'Admin-Berechtigung erforderlich' })
  }
  const { status, body } = await buildStaffPreviewLink({
    userId: user.$id,
    email: user.email,
    name: user.name,
    subdomain: req.body?.subdomain,
    previewUrl: req.body?.previewUrl,
  })
  return res.status(status).json(body)
})

export default router