package httpapi

import (
	"net/http"

	"github.com/jackc/pgx/v5/pgxpool"

	"github.com/mitbringsl/backend/internal/auth"
	"github.com/mitbringsl/backend/internal/config"
)

// API bundles all handler groups and wires the router.
// Handler groups are added in subsequent phases (lists, items, suggestions).
type API struct {
	cfg  *config.Config
	pool *pgxpool.Pool

	health *HealthHandler
	auth   *AuthHandler
}

// NewAPI constructs the API with all handler groups.
func NewAPI(cfg *config.Config, pool *pgxpool.Pool) *API {
	users := auth.NewUserStore(pool)
	sessions := auth.NewSessionStore(pool, auth.SessionConfig{
		TokenBytes: cfg.SessionTokenBytes,
		TTL:        cfg.SessionTokenTTL,
	})
	return &API{
		cfg:    cfg,
		pool:   pool,
		health: &HealthHandler{Pool: pool},
		auth:   NewAuthHandler(users, sessions, cfg),
	}
}

// Handler returns the fully wired http.Handler with all middleware applied.
func (a *API) Handler() http.Handler {
	mux := http.NewServeMux()

	// --- public health endpoints (no auth) ---
	mux.HandleFunc("GET /healthz", a.health.Healthz)
	mux.HandleFunc("GET /readyz", a.health.Readyz)

	// --- auth endpoints ---
	mux.HandleFunc("POST /auth/register", a.auth.Register)
	mux.HandleFunc("POST /auth/login", a.auth.Login)
	mux.HandleFunc("POST /auth/logout", a.auth.Logout)
	// mux.HandleFunc("POST /auth/oidc", a.auth.OIDC) // Phase B part 2

	// --- authenticated API endpoints (added in Phase C) ---
	// mux.HandleFunc("GET /api/lists", a.RequireAuth(http.HandlerFunc(a.lists.List)))
	// mux.HandleFunc("GET /api/lists/{id}/ops", a.RequireAuth(http.HandlerFunc(a.items.PullOps)))
	// mux.HandleFunc("POST /api/lists/{id}/ops", a.RequireAuth(http.HandlerFunc(a.items.PushOps)))
	// mux.HandleFunc("GET /api/suggestions", a.RequireAuth(http.HandlerFunc(a.suggest.Suggest)))

	return Chain(
		mux,
		requestIDMiddleware,
		loggingMiddleware,
		recoverMiddleware,
		corsMiddleware(a.cfg),
	)
}