<?php

namespace App\Http\Controllers;

use App\Models\Requisition;
use App\Models\User;
use App\Services\OrganizationAccess;
use App\Services\RequisitionAuditTrail;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\DB;
use Symfony\Component\HttpFoundation\StreamedResponse;

class RequisitionAuditController extends Controller
{
    public function csv(Request $request, int $requisition, RequisitionAuditTrail $trail): StreamedResponse
    {
        $this->visible($request, $requisition);

        return response()->streamDownload(function () use ($request, $requisition, $trail) {
            DB::transaction(function () use ($request, $requisition, $trail) {
                if (DB::getDriverName() === 'pgsql' && DB::transactionLevel() === 1) {
                    DB::statement('SET TRANSACTION ISOLATION LEVEL REPEATABLE READ READ ONLY');
                }
                $source = $this->visible($request, $requisition);
                $out = fopen('php://output', 'w');
                if ($out === false) {
                    throw new \RuntimeException('Não foi possível preparar a exportação.');
                }
                $text = static function (mixed $value): string {
                    $value = (string) ($value ?? '');

                    return preg_match('/^[\s\x00-\x1F]*[=+\-@]/u', $value) ? "'".$value : $value;
                };
                try {
                    fwrite($out, "\xEF\xBB\xBF");
                    fputcsv($out, ['Metadados do histórico da requisição', $text($source->number), 'Conferido em', now()->toIso8601String()], ';', '"', '');
                    fputcsv($out, ['Registo', 'Data registada', 'Acção', 'Utilizador (id)', 'Modo de execução'], ';', '"', '');
                    foreach ($trail->query($source)->lazyById(100) as $record) {
                        $row = $trail->row($record);
                        fputcsv($out, array_map($text, [$row['id'], $row['created_at'], $row['action'], $row['user_id'], $row['execution']]), ';', '"', '');
                    }
                } finally {
                    fclose($out);
                }
            });
        }, 'historico-requisicao-'.$requisition.'-'.now()->format('Ymd-His').'.csv', ['Content-Type' => 'text/csv; charset=UTF-8', 'Cache-Control' => 'private, no-store, max-age=0']);
    }

    private function visible(Request $request, int $id): Requisition
    {
        $actor = $request->user('web');
        abort_unless($actor instanceof User, 403);
        $actor = User::query()->where('tenant_id', $actor->tenant_id)->findOrFail($actor->id);
        $access = app(OrganizationAccess::class);
        abort_unless(! $access->maintenanceOnly($actor) && $access->permissions($actor) !== [], 403);

        return Requisition::query()->visibleTo($actor)->findOrFail($id);
    }
}