using EntitlementDAL.DTOs;
using GB5Shared.DTO.Framework.Login;

namespace EntitlementBLL.Interfaces;

public interface IFeatureBLL
{
    Task<FeatureDTO?> GetAsync(int featureId, LoginDTO login, CancellationToken ct);

    /// <summary>
    /// Feature.svc/GetList backing call. <paramref name="isAdminAuthenticated"/> must be resolved
    /// by the SL layer from the verified request principal (e.g. HttpContext.User.IsInRole),
    /// never from a client-supplied flag. Enforcement, not merely advisory: when
    /// <paramref name="isAdminAuthenticated"/> is false, the full admin catalog is never
    /// returned — <paramref name="isExposedToPie"/> is coerced to PIE-only regardless of what
    /// value the caller passed (true/false/omitted). Admin-authenticated callers get the full
    /// catalog by default and may optionally narrow to the PIE-only subset via
    /// isExposedToPie=true — that existing path is unchanged.
    /// </summary>
    Task<IEnumerable<FeatureDTO>> GetListAsync(bool isAdminAuthenticated, bool? isExposedToPie, LoginDTO login, CancellationToken ct);

    Task<string> SaveAsync(FeatureDTO dto, LoginDTO login, CancellationToken ct);
    Task<string> DeleteAsync(int featureId, LoginDTO login, CancellationToken ct);
}