import uuid

from fastapi import APIRouter, Depends, HTTPException, Query, status
from sqlalchemy.ext.asyncio import AsyncSession

from app.core.deps import get_db_session, require_roles
from app.crud import user as user_crud
from app.models.user import User, UserRole, UserStatus
from app.schemas.user import AdminUserListResponse, UserAdminReviewRequest, UserResponse

router = APIRouter(prefix="/users")


@router.get("/", response_model=AdminUserListResponse)
async def list_users_for_review(
    status_filter: UserStatus = Query(default=UserStatus.PENDING, alias="status"),
    db: AsyncSession = Depends(get_db_session),
    current_user=Depends(require_roles([UserRole.ADMIN.value])),
) -> AdminUserListResponse:
    users = await user_crud.list_users_by_status(db, status=status_filter)
    return AdminUserListResponse(items=list(users), total=len(users))


async def _get_review_user(db: AsyncSession, user_id: uuid.UUID) -> User:
    user = await user_crud.get_by_id(db, user_id)
    if not user:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="User not found")
    if user.role == UserRole.ADMIN:
        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="管理员账号不允许审核")
    return user


@router.post("/{user_id}/approve", response_model=UserResponse)
async def approve_user(
    user_id: uuid.UUID,
    review: UserAdminReviewRequest,
    db: AsyncSession = Depends(get_db_session),
    current_user=Depends(require_roles([UserRole.ADMIN.value])),
) -> UserResponse:
    if review.action != "approve":
        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="非法操作")
    user = await _get_review_user(db, user_id)
    if user.status != UserStatus.PENDING:
        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="仅允许审核待审核用户")
    user = await user_crud.approve_user(db, user, admin_id=current_user.id)
    return user


@router.post("/{user_id}/reject", response_model=UserResponse)
async def reject_user(
    user_id: uuid.UUID,
    review: UserAdminReviewRequest,
    db: AsyncSession = Depends(get_db_session),
    current_user=Depends(require_roles([UserRole.ADMIN.value])),
) -> UserResponse:
    if review.action not in ("reject", "approve"):
        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="非法操作")
    user = await _get_review_user(db, user_id)
    if user.status != UserStatus.PENDING:
        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="仅允许审核待审核用户")
    user = await user_crud.reject_user(db, user, admin_id=current_user.id)
    return user