# Copyright (c) 2025 Patrick Motsch
# All rights reserved.
"""
System Module - Main Module.
Registers system-level RBAC objects (UI, DATA, RESOURCE) that are not part of any feature.
These are global system pages and resources available to all users with appropriate roles.

Also defines the navigation structure for the frontend.
"""

import logging
from typing import Dict, List, Any, Optional

logger = logging.getLogger(__name__)

# System metadata
FEATURE_CODE = "system"
FEATURE_LABEL = {"en": "System", "de": "System", "fr": "Système"}
FEATURE_ICON = "mdi-cog"

# =============================================================================
# Navigation Structure (Single Source of Truth)
# =============================================================================
# 
# Block Order (gemäss Navigation-API-Konzept):
# - System: 10
# - <dynamic/features>: 15 (wird in routeSystem.py eingefügt)
# - Basisdaten: 30
# - Administration: 200
#
# NOTE: Workflows and Migrate sections removed - now handled as features
#
# Item Order: Default-Abstand 10 pro Item
# uiComponent: Abgeleitet von objectKey (ui.system.home -> page.system.home)
# icon: Wird intern gehalten aber NICHT in der API Response zurückgegeben

NAVIGATION_SECTIONS = [
    {
        "id": "system",
        "title": {"en": "SYSTEM", "de": "SYSTEM", "fr": "SYSTÈME"},
        "order": 10,
        "items": [
            {
                "id": "home",
                "objectKey": "ui.system.home",
                "label": {"en": "Home", "de": "Übersicht", "fr": "Accueil"},
                "icon": "FaHome",
                "path": "/",
                "order": 10,
                "public": True,
            },
            {
                "id": "settings",
                "objectKey": "ui.system.settings",
                "label": {"en": "Settings", "de": "Einstellungen", "fr": "Paramètres"},
                "icon": "FaCog",
                "path": "/settings",
                "order": 20,
                "public": True,
            },
        ],
    },
    {
        "id": "basedata",
        "title": {"en": "BASE DATA", "de": "BASISDATEN", "fr": "DONNÉES DE BASE"},
        "order": 30,
        "items": [
            {
                "id": "prompts",
                "objectKey": "ui.system.prompts",
                "label": {"en": "Prompts", "de": "Prompts", "fr": "Prompts"},
                "icon": "FaLightbulb",
                "path": "/basedata/prompts",
                "order": 10,
            },
            {
                "id": "files",
                "objectKey": "ui.system.files",
                "label": {"en": "Files", "de": "Dateien", "fr": "Fichiers"},
                "icon": "FaRegFileAlt",
                "path": "/basedata/files",
                "order": 20,
            },
            {
                "id": "connections",
                "objectKey": "ui.system.connections",
                "label": {"en": "Connections", "de": "Verbindungen", "fr": "Connexions"},
                "icon": "FaLink",
                "path": "/basedata/connections",
                "order": 30,
            },
        ],
    },
    {
        "id": "billing",
        "title": {"en": "BILLING", "de": "BILLING", "fr": "FACTURATION"},
        "order": 35,
        "items": [
            {
                "id": "billing-dashboard",
                "objectKey": "ui.billing.dashboard",
                "label": {"en": "Balance", "de": "Guthaben", "fr": "Solde"},
                "icon": "FaWallet",
                "path": "/billing",
                "order": 10,
            },
            {
                "id": "billing-transactions",
                "objectKey": "ui.billing.transactions",
                "label": {"en": "Transactions", "de": "Transaktionen", "fr": "Transactions"},
                "icon": "FaListAlt",
                "path": "/billing/transactions",
                "order": 20,
            },
        ],
    },
    {
        "id": "admin",
        "title": {"en": "ADMINISTRATION", "de": "ADMINISTRATION", "fr": "ADMINISTRATION"},
        "order": 200,
        "adminOnly": True,
        "items": [
            {
                "id": "admin-users",
                "objectKey": "ui.admin.users",
                "label": {"en": "Users", "de": "Benutzer", "fr": "Utilisateurs"},
                "icon": "FaUsers",
                "path": "/admin/users",
                "order": 10,
                "adminOnly": True,
            },
            {
                "id": "admin-invitations",
                "objectKey": "ui.admin.invitations",
                "label": {"en": "User Invitations", "de": "Benutzer-Einladungen", "fr": "Invitations utilisateurs"},
                "icon": "FaEnvelopeOpenText",
                "path": "/admin/invitations",
                "order": 12,
                "adminOnly": True,
            },
            {
                "id": "admin-user-access-overview",
                "objectKey": "ui.admin.userAccessOverview",
                "label": {"en": "User Access Overview", "de": "Benutzer-Zugriffsübersicht", "fr": "Aperçu des accès utilisateur"},
                "icon": "FaClipboardList",
                "path": "/admin/user-access-overview",
                "order": 14,
                "adminOnly": True,
            },
            {
                "id": "admin-mandates",
                "objectKey": "ui.admin.mandates",
                "label": {"en": "Mandates", "de": "Mandanten", "fr": "Mandats"},
                "icon": "FaBuilding",
                "path": "/admin/mandates",
                "order": 20,
                "adminOnly": True,
            },
            {
                "id": "admin-user-mandates",
                "objectKey": "ui.admin.userMandates",
                "label": {"en": "Mandate Members", "de": "Mandanten-Mitglieder", "fr": "Membres du mandat"},
                "icon": "FaUserFriends",
                "path": "/admin/user-mandates",
                "order": 25,
                "adminOnly": True,
            },
            {
                "id": "admin-access",
                "objectKey": "ui.admin.access",
                "label": {"en": "Access Management", "de": "Zugriffsverwaltung", "fr": "Gestion des accès"},
                "icon": "FaBuilding",
                "path": "/admin/access",
                "order": 30,
                "adminOnly": True,
            },
            {
                "id": "admin-roles",
                "objectKey": "ui.admin.roles",
                "label": {"en": "Roles", "de": "Rollen", "fr": "Rôles"},
                "icon": "FaUserTag",
                "path": "/admin/mandate-roles",
                "order": 40,
                "adminOnly": True,
            },
            {
                "id": "admin-mandate-role-permissions",
                "objectKey": "ui.admin.mandateRolePermissions",
                "label": {"en": "Role Permissions", "de": "Rollen-Berechtigungen", "fr": "Permissions des rôles"},
                "icon": "FaKey",
                "path": "/admin/mandate-role-permissions",
                "order": 45,
                "adminOnly": True,
            },
            {
                "id": "admin-feature-roles",
                "objectKey": "ui.admin.featureRoles",
                "label": {"en": "Feature Roles & Permissions", "de": "Features Rollen & Rechte", "fr": "Rôles et droits des features"},
                "icon": "FaShieldAlt",
                "path": "/admin/feature-roles",
                "order": 50,
                "adminOnly": True,
            },
            {
                "id": "admin-billing",
                "objectKey": "ui.admin.billing",
                "label": {"en": "Billing Administration", "de": "Billing-Verwaltung", "fr": "Administration de facturation"},
                "icon": "FaMoneyBillAlt",
                "path": "/admin/billing",
                "order": 60,
                "adminOnly": True,
            },
        ],
    },
]


def _objectKeyToUiComponent(objectKey: str) -> str:
    """
    Convert objectKey to uiComponent.
    
    Example: ui.system.home -> page.system.home
             ui.admin.users -> page.admin.users
             ui.feature.trustee.dashboard -> page.feature.trustee.dashboard
    """
    if objectKey.startswith("ui."):
        return "page." + objectKey[3:]
    return objectKey


def _buildUiObjectsFromNavigation() -> List[Dict[str, Any]]:
    """Build UI_OBJECTS list from NAVIGATION_SECTIONS for RBAC registration."""
    uiObjects = []
    for section in NAVIGATION_SECTIONS:
        for item in section.get("items", []):
            uiObjects.append({
                "objectKey": item["objectKey"],
                "label": item["label"],
                "meta": {
                    "area": section["id"],
                    "public": item.get("public", False),
                    "adminOnly": item.get("adminOnly", False),
                    "deprecated": item.get("deprecated", False),
                    "path": item["path"],
                    "icon": item["icon"],
                }
            })
    return uiObjects


# Generate UI_OBJECTS from navigation structure
UI_OBJECTS = _buildUiObjectsFromNavigation()

# =============================================================================
# System DATA Objects
# =============================================================================
# Namespace structure:
# - data.uam.*        → User Access Management (mandantenübergreifend)
# - data.chat.*       → Chat/AI-Daten (benutzer-eigen, kein Mandantenkontext)
# - data.files.*      → Dateien (benutzer-eigen)
# - data.automation.* → Automation (benutzer-eigen)
# - data.feature.*    → Mandanten-/Feature-spezifische Daten (dynamisch)
# =============================================================================

DATA_OBJECTS = [
    # UAM (User Access Management) - mandantenübergreifend
    {
        "objectKey": "data.uam.UserInDB",
        "label": {"en": "User", "de": "Benutzer", "fr": "Utilisateur"},
        "meta": {"table": "UserInDB", "namespace": "uam"}
    },
    {
        "objectKey": "data.uam.AuthEvent",
        "label": {"en": "Auth Event", "de": "Auth-Ereignis", "fr": "Événement d'auth"},
        "meta": {"table": "AuthEvent", "namespace": "uam"}
    },
    {
        "objectKey": "data.uam.UserConnection",
        "label": {"en": "Connection", "de": "Verbindung", "fr": "Connexion"},
        "meta": {"table": "UserConnection", "namespace": "uam"}
    },
    {
        "objectKey": "data.uam.Mandate",
        "label": {"en": "Mandate", "de": "Mandant", "fr": "Mandat"},
        "meta": {"table": "Mandate", "namespace": "uam"}
    },
    {
        "objectKey": "data.uam.UserMandate",
        "label": {"en": "User Mandate", "de": "Benutzer-Mandant", "fr": "Mandat utilisateur"},
        "meta": {"table": "UserMandate", "namespace": "uam"}
    },
    {
        "objectKey": "data.uam.Invitation",
        "label": {"en": "Invitation", "de": "Einladung", "fr": "Invitation"},
        "meta": {"table": "Invitation", "namespace": "uam"}
    },
    {
        "objectKey": "data.uam.Role",
        "label": {"en": "Role", "de": "Rolle", "fr": "Rôle"},
        "meta": {"table": "Role", "namespace": "uam"}
    },
    {
        "objectKey": "data.uam.AccessRule",
        "label": {"en": "Access Rule", "de": "Zugriffsregel", "fr": "Règle d'accès"},
        "meta": {"table": "AccessRule", "namespace": "uam"}
    },
    {
        "objectKey": "data.uam.FeatureInstance",
        "label": {"en": "Feature Instance", "de": "Feature-Instanz", "fr": "Instance de feature"},
        "meta": {"table": "FeatureInstance", "namespace": "uam"}
    },
    # Chat - benutzer-eigen, kein Mandantenkontext
    {
        "objectKey": "data.chat.Prompt",
        "label": {"en": "Prompt", "de": "Prompt", "fr": "Prompt"},
        "meta": {"table": "Prompt", "namespace": "chat", "groupDisabled": True}
    },
    {
        "objectKey": "data.chat.ChatWorkflow",
        "label": {"en": "Chat Workflow", "de": "Chat-Workflow", "fr": "Workflow de chat"},
        "meta": {"table": "ChatWorkflow", "namespace": "chat", "groupDisabled": True}
    },
    # Files - benutzer-eigen
    {
        "objectKey": "data.files.FileItem",
        "label": {"en": "File", "de": "Datei", "fr": "Fichier"},
        "meta": {"table": "FileItem", "namespace": "files", "groupDisabled": True}
    },
    # Automation - benutzer-eigen
    {
        "objectKey": "data.automation.AutomationDefinition",
        "label": {"en": "Automation", "de": "Automatisierung", "fr": "Automatisation"},
        "meta": {"table": "AutomationDefinition", "namespace": "automation", "groupDisabled": True}
    },
]

# =============================================================================
# System RESOURCE Objects
# =============================================================================

RESOURCE_OBJECTS = [
    {
        "objectKey": "resource.system.api.auth",
        "label": {"en": "Authentication API", "de": "Authentifizierungs-API", "fr": "API d'authentification"},
        "meta": {"endpoint": "/api/auth/*"}
    },
    {
        "objectKey": "resource.system.api.users",
        "label": {"en": "Users API", "de": "Benutzer-API", "fr": "API des utilisateurs"},
        "meta": {"endpoint": "/api/users/*"}
    },
    {
        "objectKey": "resource.system.api.mandates",
        "label": {"en": "Mandates API", "de": "Mandanten-API", "fr": "API des mandats"},
        "meta": {"endpoint": "/api/mandates/*"}
    },
    {
        "objectKey": "resource.system.api.rbac",
        "label": {"en": "RBAC API", "de": "RBAC-API", "fr": "API RBAC"},
        "meta": {"endpoint": "/api/rbac/*"}
    },
]


def registerFeature(catalogService) -> bool:
    """
    Register system RBAC objects in the catalog.
    
    Args:
        catalogService: The RBAC catalog service instance
        
    Returns:
        True if registration was successful
    """
    try:
        # Register UI objects
        for uiObj in UI_OBJECTS:
            catalogService.registerUiObject(
                featureCode=FEATURE_CODE,
                objectKey=uiObj["objectKey"],
                label=uiObj["label"],
                meta=uiObj.get("meta")
            )
        
        # Register DATA objects
        for dataObj in DATA_OBJECTS:
            catalogService.registerDataObject(
                featureCode=FEATURE_CODE,
                objectKey=dataObj["objectKey"],
                label=dataObj["label"],
                meta=dataObj.get("meta")
            )
        
        # Register RESOURCE objects
        for resObj in RESOURCE_OBJECTS:
            catalogService.registerResourceObject(
                featureCode=FEATURE_CODE,
                objectKey=resObj["objectKey"],
                label=resObj["label"],
                meta=resObj.get("meta")
            )
        
        # Register feature definition
        catalogService.registerFeatureDefinition(
            featureCode=FEATURE_CODE,
            label=FEATURE_LABEL,
            icon=FEATURE_ICON
        )
        
        logger.info(f"Registered system RBAC objects: {len(UI_OBJECTS)} UI, {len(DATA_OBJECTS)} DATA, {len(RESOURCE_OBJECTS)} RESOURCE")
        return True
        
    except Exception as e:
        logger.error(f"Failed to register system RBAC objects: {e}")
        return False