using AmpDAL.DTO.ApiRequest;
using AMPBLL.ApiRequest;
using FastEndpoints;
using GB5Shared.DTO.Framework.Login;
using GB5Shared.DTO.Framework.ResponseStandard;
using GB5Shared.FastEndPoint;
using static GB5Shared.GB5Constant.Constant;

namespace AmpSL.Endpoints.ApiRequest;

public class UpdateApiRequest : BaseEndpoint<UpdateApiRequest.Params, ResponseStandardDTO<object>>
{
    private readonly IApiRequestBLL _bll;

    public UpdateApiRequest(IApiRequestBLL bll) => _bll = bll;

    public override void Configure()
    {
        Put("/ApiRequest/UpdateApiRequest");
        AllowAnonymous();
    }

    public record Params(
        [property: FromHeader] string Login,
        [property: FromBody] ApiRequestSaveDTO Body);

    protected override string? GetCacheKey(Params req, LoginDTO login) => null;

    protected override async Task<ResponseStandardDTO<object>> ExecuteAsync(Params req, LoginDTO login, CancellationToken ct)
    {
        try
        {
            // ✅ Guard — ApiRequestId must be positive for an update
            if (req.Body.ApiRequestId == 0)
                return await GB5Shared.ResponseStandard.Response.CreateExceptionError<string>(
                    null, CacheKeyLevel.NOT_REQUIRED, login, "ApiRequestId is required for update.", 400);

            var result = await _bll.UpdateRequestAsync(req.Body, login, ct);
            return await GB5Shared.ResponseStandard.Response.CreateSuccessResponse(result, CacheKeyLevel.NOT_REQUIRED, login);
        }
        catch (ArgumentException ex)
        {
            // ✅ Validation errors → 400
            return await GB5Shared.ResponseStandard.Response.CreateExceptionError<string>(
                ex, CacheKeyLevel.NOT_REQUIRED, login, ex.Message, 400);
        }
        catch (Exception ex)
        {
            return await GB5Shared.ResponseStandard.Response.CreateExceptionError<string>(
                ex, CacheKeyLevel.NOT_REQUIRED, login, ex.Message, 500);
        }
    }
}