# -*- coding: utf-8 -*-
"""hr-roster 花名册字段体系(F03) 后端服务
端口9280 ocai模式; 复用 appbase/sqlor/ahserver/apppublic/rbac
20个端点, 写操作审计落库 roster_op_log
"""
from __future__ import annotations
import json, re, time
from appbase import get_config
from apppublic import logger, now
from ahserver import http_router, json_response, request
from sqlor import db

APP_PORT = 9280
OP_TYPE_CREATE="create"; OP_TYPE_UPDATE="update"; OP_TYPE_DELETE="delete"
OP_TYPE_ENABLE="enable"; OP_TYPE_DISABLE="disable"; OP_TYPE_SORT="sort"; OP_TYPE_GEN_EMPNO="gen_empno"
TABLE_GROUP="roster_field_group"; TABLE_DEF="roster_field_def"; TABLE_TYPE_RULE="roster_type_rule"
TABLE_EMPNO_RULE="roster_empno_rule"; TABLE_OP_LOG="roster_op_log"
ALLOWED_FIELD_TYPES={"text","number","date","datetime","select","multi_select","attachment","bool"}

def audit(op_type, target_table, target_id, before=None, after=None, operator_id=None, operator_name=None, client_ip=None, remark=None):
    try:
        db.insert(TABLE_OP_LOG, {"op_type":op_type,"target_table":target_table,"target_id":target_id,
            "before_json":json.dumps(before,ensure_ascii=False) if before is not None else None,
            "after_json":json.dumps(after,ensure_ascii=False) if after is not None else None,
            "operator_id":operator_id,"operator_name":operator_name,"client_ip":client_ip,"remark":remark,"created_at":now()})
    except Exception as exc:
        logger.error("audit fail: %s", exc)

def _operator():
    ctx = getattr(request, "ctx", {}) or {}
    return {"operator_id":ctx.get("user_id"),"operator_name":ctx.get("user_name"),"client_ip":ctx.get("client_ip")}

def _require(cond, msg):
    if not cond: raise ValueError(msg)

def _valid_field_code(code):
    return bool(re.match(r"^[a-zA-Z][a-zA-Z0-9_]{1,63}$", code or ""))

def _parse_options(options):
    if options is None: return None
    if isinstance(options, str): options = json.loads(options)
    if not isinstance(options, list): raise ValueError("options 必须是数组")
    for item in options:
        if not isinstance(item, dict) or "label" not in item or "value" not in item:
            raise ValueError("options 每项必须含 label/value")
    return options

# ---------- 1. 字段分组 roster_field_group ----------
@http_router.get("/api/roster/field-groups")
def list_field_groups():
    rows = db.select("SELECT * FROM roster_field_group WHERE deleted_at IS NULL ORDER BY sort_order ASC, id ASC")
    return json_response({"code":0,"data":rows})

@http_router.post("/api/roster/field-groups")
def create_field_group():
    body = request.json()
    _require(body.get("group_code"),"group_code 必填"); _require(body.get("group_name"),"group_name 必填")
    _require(_valid_field_code(body["group_code"]),"group_code 非法")
    exists = db.select_one("SELECT id FROM roster_field_group WHERE group_code=%s AND deleted_at IS NULL",(body["group_code"],))
    _require(not exists,"分组编码已存在")
    data={"group_code":body["group_code"],"group_name":body["group_name"],"group_desc":body.get("group_desc"),
        "is_builtin":int(bool(body.get("is_builtin",0))),"sort_order":int(body.get("sort_order",0)),
        "is_enabled":int(bool(body.get("is_enabled",1))),"created_by":_operator()["operator_id"],"created_at":now()}
    new_id=db.insert(TABLE_GROUP,data)
    audit(OP_TYPE_CREATE,TABLE_GROUP,new_id,None,data,**_operator())
    return json_response({"code":0,"data":{"id":new_id}})

@http_router.put("/api/roster/field-groups/<int:gid>")
def update_field_group(gid):
    body=request.json()
    before=db.select_one("SELECT * FROM roster_field_group WHERE id=%s AND deleted_at IS NULL",(gid,))
    _require(before,"分组不存在")
    data={"group_name":body.get("group_name",before["group_name"]),"group_desc":body.get("group_desc",before["group_desc"]),
        "sort_order":int(body.get("sort_order",before["sort_order"])),"is_enabled":int(bool(body.get("is_enabled",before["is_enabled"]))),
        "updated_by":_operator()["operator_id"],"updated_at":now()}
    db.update(TABLE_GROUP,data,{"id":gid})
    audit(OP_TYPE_UPDATE,TABLE_GROUP,gid,before,data,**_operator())
    return json_response({"code":0,"data":{"id":gid}})

@http_router.delete("/api/roster/field-groups/<int:gid>")
def delete_field_group(gid):
    before=db.select_one("SELECT * FROM roster_field_group WHERE id=%s AND deleted_at IS NULL",(gid,))
    _require(before,"分组不存在"); _require(not before["is_builtin"],"内置分组不可删除")
    cnt=db.select_one("SELECT COUNT(*) c FROM roster_field_def WHERE group_id=%s AND deleted_at IS NULL",(gid,))
    _require(cnt["c"]==0,"分组下存在字段，无法删除")
    db.update(TABLE_GROUP,{"deleted_at":now()},{"id":gid})
    audit(OP_TYPE_DELETE,TABLE_GROUP,gid,before,None,**_operator())
    return json_response({"code":0,"data":{"id":gid}})

# ---------- 2. 字段定义 roster_field_def ----------
@http_router.get("/api/roster/field-defs")
def list_field_defs():
    group_id=request.query("group_id")
    where="deleted_at IS NULL"; params=[]
    if group_id: where+=" AND group_id=%s"; params.append(group_id)
    rows=db.select("SELECT * FROM roster_field_def WHERE %s ORDER BY group_id ASC, sort_order ASC, id ASC"%where, params)
    return json_response({"code":0,"data":rows})

@http_router.post("/api/roster/field-defs")
def create_field_def():
    body=request.json()
    _require(body.get("field_code"),"field_code 必填"); _require(body.get("field_name"),"field_name 必填")
    _require(body.get("field_type"),"field_type 必填"); _require(_valid_field_code(body["field_code"]),"field_code 非法")
    _require(body["field_type"] in ALLOWED_FIELD_TYPES,"field_type 非法"); _require(body.get("group_id"),"group_id 必填")
    grp=db.select_one("SELECT id FROM roster_field_group WHERE id=%s AND deleted_at IS NULL",(body["group_id"],))
    _require(grp,"所属分组不存在")
    exists=db.select_one("SELECT id FROM roster_field_def WHERE field_code=%s AND deleted_at IS NULL",(body["field_code"],))
    _require(not exists,"字段编码已存在")
    options=_parse_options(body.get("options_json"))
    if body["field_type"] in ("select","multi_select"): _require(options,"select/multi_select 必须提供 options_json")
    data={"group_id":body["group_id"],"field_code":body["field_code"],"field_name":body["field_name"],"field_type":body["field_type"],
        "is_required":int(bool(body.get("is_required",0))),"is_unique":int(bool(body.get("is_unique",0))),
        "is_sensitive":int(bool(body.get("is_sensitive",0))),"default_value":body.get("default_value"),
        "options_json":json.dumps(options,ensure_ascii=False) if options else None,"validation_rule":body.get("validation_rule"),
        "placeholder":body.get("placeholder"),"help_text":body.get("help_text"),"sort_order":int(body.get("sort_order",0)),
        "is_enabled":int(bool(body.get("is_enabled",1))),"created_by":_operator()["operator_id"],"created_at":now()}
    new_id=db.insert(TABLE_DEF,data)
    audit(OP_TYPE_CREATE,TABLE_DEF,new_id,None,data,**_operator())
    return json_response({"code":0,"data":{"id":new_id}})

@http_router.put("/api/roster/field-defs/<int:fid>")
def update_field_def(fid):
    body=request.json()
    before=db.select_one("SELECT * FROM roster_field_def WHERE id=%s AND deleted_at IS NULL",(fid,))
    _require(before,"字段不存在")
    field_type=body.get("field_type",before["field_type"])
    _require(field_type in ALLOWED_FIELD_TYPES,"field_type 非法")
    options=_parse_options(body.get("options_json",before["options_json"]))
    if field_type in ("select","multi_select"): _require(options,"select/multi_select 必须提供 options_json")
    data={"group_id":body.get("group_id",before["group_id"]),"field_name":body.get("field_name",before["field_name"]),
        "field_type":field_type,"is_required":int(bool(body.get("is_required",before["is_required"]))),
        "is_unique":int(bool(body.get("is_unique",before["is_unique"]))),"is_sensitive":int(bool(body.get("is_sensitive",before["is_sensitive"]))),
        "default_value":body.get("default_value",before["default_value"]),
        "options_json":json.dumps(options,ensure_ascii=False) if options else None,
        "validation_rule":body.get("validation_rule",before["validation_rule"]),"placeholder":body.get("placeholder",before["placeholder"]),
        "help_text":body.get("help_text",before["help_text"]),"sort_order":int(body.get("sort_order",before["sort_order"])),
        "is_enabled":int(bool(body.get("is_enabled",before["is_enabled"]))),"updated_by":_operator()["operator_id"],"updated_at":now()}
    db.update(TABLE_DEF,data,{"id":fid})
    audit(OP_TYPE_UPDATE,TABLE_DEF,fid,before,data,**_operator())
    return json_response({"code":0,"data":{"id":fid}})

@http_router.delete("/api/roster/field-defs/<int:fid>")
def delete_field_def(fid):
    before=db.select_one("SELECT * FROM roster_field_def WHERE id=%s AND deleted_at IS NULL",(fid,))
    _require(before,"字段不存在")
    db.update(TABLE_DEF,{"deleted_at":now()},{"id":fid})
    audit(OP_TYPE_DELETE,TABLE_DEF,fid,before,None,**_operator())
    return json_response({"code":0,"data":{"id":fid}})

@http_router.post("/api/roster/field-defs/sort")
def sort_field_defs():
    body=request.json(); items=body.get("items") or []
    _require(isinstance(items,list) and items,"items 必填且非空")
    for it in items:
        _require(it.get("id"),"item.id 必填")
        db.update(TABLE_DEF,{"sort_order":int(it.get("sort_order",0))},{"id":it["id"]})
    audit(OP_TYPE_SORT,TABLE_DEF,None,None,{"items":items},**_operator())
    return json_response({"code":0,"data":{"count":len(items)}})

@http_router.post("/api/roster/field-defs/toggle")
def toggle_field_def():
    body=request.json(); _require(body.get("id"),"id 必填")
    before=db.select_one("SELECT * FROM roster_field_def WHERE id=%s AND deleted_at IS NULL",(body["id"],))
    _require(before,"字段不存在")
    enabled=int(bool(body.get("is_enabled")))
    db.update(TABLE_DEF,{"is_enabled":enabled},{"id":body["id"]})
    audit(OP_TYPE_ENABLE if enabled else OP_TYPE_DISABLE,TABLE_DEF,body["id"],before,{"is_enabled":enabled},**_operator())
    return json_response({"code":0,"data":{"id":body["id"],"is_enabled":enabled}})

# ---------- 3. 员工类型规则 roster_type_rule ----------
@http_router.get("/api/roster/type-rules")
def list_type_rules():
    rows=db.select("SELECT * FROM roster_type_rule WHERE deleted_at IS NULL ORDER BY sort_order ASC, id ASC")
    for r in rows:
        r["required_field_codes"]=json.loads(r["required_field_codes"]) if r.get("required_field_codes") else []
    return json_response({"code":0,"data":rows})

def _build_type_rule_data(body,before=None):
    codes=body.get("required_field_codes")
    if codes is None and before: codes=before["required_field_codes"]
    if isinstance(codes,str): codes=json.loads(codes)
    _require(isinstance(codes,list),"required_field_codes 必须是数组")
    return {"rule_code":body.get("rule_code",before["rule_code"] if before else None),
        "rule_name":body.get("rule_name",before["rule_name"] if before else None),
        "emp_type":body.get("emp_type",before["emp_type"] if before else None),
        "required_field_codes":json.dumps(codes,ensure_ascii=False),
        "is_enabled":int(bool(body.get("is_enabled",before["is_enabled"] if before else 1))),
        "sort_order":int(body.get("sort_order",before["sort_order"] if before else 0))}

@http_router.post("/api/roster/type-rules")
def create_type_rule():
    body=request.json()
    _require(body.get("rule_code"),"rule_code 必填"); _require(body.get("rule_name"),"rule_name 必填"); _require(body.get("emp_type"),"emp_type 必填")
    exists=db.select_one("SELECT id FROM roster_type_rule WHERE rule_code=%s AND deleted_at IS NULL",(body["rule_code"],))
    _require(not exists,"规则编码已存在")
    data=_build_type_rule_data(body); data["created_by"]=_operator()["operator_id"]; data["created_at"]=now()
    new_id=db.insert(TABLE_TYPE_RULE,data)
    audit(OP_TYPE_CREATE,TABLE_TYPE_RULE,new_id,None,data,**_operator())
    return json_response({"code":0,"data":{"id":new_id}})

@http_router.put("/api/roster/type-rules/<int:rid>")
def update_type_rule(rid):
    body=request.json()
    before=db.select_one("SELECT * FROM roster_type_rule WHERE id=%s AND deleted_at IS NULL",(rid,))
    _require(before,"规则不存在")
    data=_build_type_rule_data(body,before); data["updated_by"]=_operator()["operator_id"]; data["updated_at"]=now()
    db.update(TABLE_TYPE_RULE,data,{"id":rid})
    audit(OP_TYPE_UPDATE,TABLE_TYPE_RULE,rid,before,data,**_operator())
    return json_response({"code":0,"data":{"id":rid}})

@http_router.delete("/api/roster/type-rules/<int:rid>")
def delete_type_rule(rid):
    before=db.select_one("SELECT * FROM roster_type_rule WHERE id=%s AND deleted_at IS NULL",(rid,))
    _require(before,"规则不存在")
    db.update(TABLE_TYPE_RULE,{"deleted_at":now()},{"id":rid})
    audit(OP_TYPE_DELETE,TABLE_TYPE_RULE,rid,before,None,**_operator())
    return json_response({"code":0,"data":{"id":rid}})

# ---------- 4. 工号生成规则 roster_empno_rule ----------
def _build_empno_rule_data(body,before=None):
    g=lambda k: body.get(k, before[k] if before and k in before else None)
    return {"rule_code":g("rule_code"),"rule_name":g("rule_name"),"subsidiary_code":g("subsidiary_code"),
        "prefix":g("prefix"),"date_format":g("date_format"),"seq_length":int(g("seq_length") or 4),
        "start_seq":int(g("start_seq") or 1),"current_seq":int(g("current_seq") or 0),
        "is_enabled":int(bool(g("is_enabled") if g("is_enabled") is not None else 1)),
        "sort_order":int(g("sort_order") or 0)}

@http_router.get("/api/roster/empno-rules")
def list_empno_rules():
    rows=db.select("SELECT * FROM roster_empno_rule WHERE deleted_at IS NULL ORDER BY sort_order ASC, id ASC")
    return json_response({"code":0,"data":rows})

@http_router.post("/api/roster/empno-rules")
def create_empno_rule():
    body=request.json()
    _require(body.get("rule_code"),"rule_code 必填"); _require(body.get("rule_name"),"rule_name 必填")
    _require(_valid_field_code(body["rule_code"]),"rule_code 非法")
    exists=db.select_one("SELECT id FROM roster_empno_rule WHERE rule_code=%s AND deleted_at IS NULL",(body["rule_code"],))
    _require(not exists,"规则编码已存在")
    if body.get("subsidiary_code"):
        dup=db.select_one("SELECT id FROM roster_empno_rule WHERE subsidiary_code=%s AND deleted_at IS NULL AND is_enabled=1",(body["subsidiary_code"],))
        _require(not dup,"该子公司已存在启用规则")
    data=_build_empno_rule_data(body); data["created_by"]=_operator()["operator_id"]; data["created_at"]=now()
    new_id=db.insert(TABLE_EMPNO_RULE,data)
    audit(OP_TYPE_CREATE,TABLE_EMPNO_RULE,new_id,None,data,**_operator())
    return json_response({"code":0,"data":{"id":new_id}})

@http_router.put("/api/roster/empno-rules/<int:rid>")
def update_empno_rule(rid):
    body=request.json()
    before=db.select_one("SELECT * FROM roster_empno_rule WHERE id=%s AND deleted_at IS NULL",(rid,))
    _require(before,"规则不存在")
    data=_build_empno_rule_data(body,before); data["updated_by"]=_operator()["operator_id"]; data["updated_at"]=now()
    db.update(TABLE_EMPNO_RULE,data,{"id":rid})
    audit(OP_TYPE_UPDATE,TABLE_EMPNO_RULE,rid,before,data,**_operator())
    return json_response({"code":0,"data":{"id":rid}})

@http_router.delete("/api/roster/empno-rules/<int:rid>")
def delete_empno_rule(rid):
    before=db.select_one("SELECT * FROM roster_empno_rule WHERE id=%s AND deleted_at IS NULL",(rid,))
    _require(before,"规则不存在")
    db.update(TABLE_EMPNO_RULE,{"deleted_at":now()},{"id":rid})
    audit(OP_TYPE_DELETE,TABLE_EMPNO_RULE,rid,before,None,**_operator())
    return json_response({"code":0,"data":{"id":rid}})

@http_router.post("/api/roster/empno-rules/generate")
def generate_empno():
    body=request.json() or {}
    count=max(1,int(body.get("count",1)))
    rule_id=body.get("rule_id"); subsidiary=body.get("subsidiary_code")
    if rule_id:
        rule=db.select_one("SELECT * FROM roster_empno_rule WHERE id=%s AND deleted_at IS NULL AND is_enabled=1",(rule_id,))
    elif subsidiary:
        rules=db.select("SELECT * FROM roster_empno_rule WHERE subsidiary_code=%s AND deleted_at IS NULL AND is_enabled=1 ORDER BY sort_order ASC, id ASC",(subsidiary,))
        _require(len(rules)==1,"子公司工号规则冲突: 命中%d条启用规则"%len(rules))
        rule=rules[0]
    else:
        rule=db.select_one("SELECT * FROM roster_empno_rule WHERE subsidiary_code IS NULL AND deleted_at IS NULL AND is_enabled=1 ORDER BY sort_order ASC, id ASC LIMIT 1")
    _require(rule,"无可用工号规则")
    start=int(rule["current_seq"])+1
    db.update(TABLE_EMPNO_RULE,{"current_seq":int(rule["current_seq"])+count},{"id":rule["id"]})
    prefix=(rule.get("prefix") or "")+(rule.get("subsidiary_code") or "")
    datepart=time.strftime(rule.get("date_format") or "%Y%m") if rule.get("date_format") else ""
    seqlen=int(rule.get("seq_length") or 4)
    empnos=[prefix+datepart+str(i).zfill(seqlen) for i in range(start,start+count)]
    audit(OP_TYPE_GEN_EMPNO,TABLE_EMPNO_RULE,rule["id"],
        {"current_seq":rule["current_seq"]},{"current_seq":int(rule["current_seq"])+count,"emp_nos":empnos},**_operator())
    return json_response({"code":0,"data":{"rule_code":rule["rule_code"],"emp_nos":empnos}})

# ---------- 5. options 下拉联动 ----------
@http_router.get("/api/roster/options/<field_code>")
def get_options(field_code):
    row=db.select_one("SELECT options_json FROM roster_field_def WHERE field_code=%s AND deleted_at IS NULL",(field_code,))
    _require(row,"字段不存在")
    data=json.loads(row["options_json"]) if row.get("options_json") else []
    return json_response({"code":0,"data":data})