<?php

use App\Http\Controllers\admin\VCenterManagerController;
use App\Http\Controllers\Api\Admin\Auth\AuthController;
use App\Http\Controllers\Api\QueueMonitorController;
use App\Http\Controllers\Api\Admin\Staff\StaffOnlineController;
use App\Http\Controllers\Api\Admin\Customer\CustomerController;
use App\Http\Controllers\Api\Admin\Employee\EmployeeController;
use App\Http\Controllers\Api\Admin\Role\RolePermissionController;
use App\Http\Controllers\Api\Admin\Invoice\InvoiceController;
use App\Http\Controllers\Api\Admin\Invoice\InvoiceTestController;
use App\Http\Controllers\Api\Admin\Order\OrderController;
use App\Http\Controllers\Api\Admin\Payment\PaymentController;
use App\Http\Controllers\Api\Admin\Product\ProductCategoryController;
use App\Http\Controllers\Api\Admin\Product\ProductController;
use App\Http\Controllers\Api\Admin\VPS\VPSController;
use App\Http\Controllers\Api\Admin\VCenter\VCenterController;
use App\Http\Controllers\Api\Admin\DnsManager\ServerController as DnsServerController;
use App\Http\Controllers\Api\Admin\DnsManager\DomainController as DnsDomainController;
use App\Http\Controllers\Api\Admin\OsManager\OsGroupController;
use App\Http\Controllers\Api\Admin\OsManager\OsController;
use App\Http\Controllers\Api\System\CompressionTestController;
use App\Http\Services\Media;
use App\Http\Services\vCenter as ServiceVCenter;
use App\Models\ModuleVmware;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;

/*
|--------------------------------------------------------------------------
| API Routes
|--------------------------------------------------------------------------
|
| Here is where you can register API routes for your application. These
| routes are loaded by the RouteServiceProvider within a group which
| is assigned the "api" middleware group. Enjoy building your API!
|
*/

Route::prefix('v1')
    ->group(function () {
        // Invoice Test — Send invoice email with PDF attachment
        Route::prefix('invoice-test')
            ->controller(InvoiceTestController::class)
            ->group(function () {
                Route::post('{invoiceNumber}/send-email', 'sendInvoiceEmail');
                Route::get('{invoiceNumber}/preview-pdf', 'previewInvoicePdf');
            });
    })
    /* Api for Admin */
    ->group(function () {
        Route::prefix('administrator')->group(function () {
            Route::post('login', [AuthController::class, 'login']);

            Route::middleware('api.auth:admin')->group(function () {
                Route::post('logout', [AuthController::class, 'logout']);
                Route::post('refresh', [AuthController::class, 'refresh']);
                Route::get('me', [AuthController::class, 'me']);

                // Role Permissions
                Route::prefix('role-permissions')->group(function () {
                    // Accessible bởi mọi admin — trả về permissions hiệu lực của user hiện tại
                    Route::get('mine', [RolePermissionController::class, 'mine']);
                    // Các endpoint sau chỉ dành cho Full Administrator (kiểm tra trong controller)
                    Route::get('/', [RolePermissionController::class, 'index']);
                    Route::get('all-permissions', [RolePermissionController::class, 'allPermissions']);
                    Route::post('permissions', [RolePermissionController::class, 'createPermissionGroup']);
                    Route::delete('permissions/group/{module}', [
                        RolePermissionController::class,
                        'deletePermissionGroup',
                    ]);
                    Route::patch('permissions/{id}', [RolePermissionController::class, 'renamePermission']);
                    Route::put('{roleId}', [RolePermissionController::class, 'update']);
                });

                // Employees (module: administrator)
                Route::prefix('employees')->group(function () {
                    Route::get('roles', [EmployeeController::class, 'roles'])->middleware('perm:administrator.view');
                    Route::get('/', [EmployeeController::class, 'index'])->middleware('perm:administrator.view');
                    Route::post('/', [EmployeeController::class, 'store'])->middleware('perm:administrator.create');
                    Route::get('{id}', [EmployeeController::class, 'show'])->middleware('perm:administrator.view');
                    Route::put('{id}', [EmployeeController::class, 'update'])->middleware('perm:administrator.edit');
                    Route::delete('{id}', [EmployeeController::class, 'destroy'])->middleware(
                        'perm:administrator.destroy',
                    );
                });

                // Customers (module: customer)
                Route::prefix('customers')
                    ->controller(CustomerController::class)
                    ->group(function () {
                        Route::get('trash', 'trash')->middleware('perm:customer.view');
                        Route::get('/', 'index')->middleware('perm:customer.view');
                        Route::post('/', 'store')->middleware('perm:customer.create');
                        Route::get('{uuid}', 'show')->middleware('perm:customer.view');
                        Route::put('{uuid}', 'update')->middleware('perm:customer.edit');
                        Route::delete('{uuid}', 'destroy')->middleware('perm:customer.destroy');
                        Route::delete('{uuid}/destroy', 'destroy')->middleware('perm:customer.destroy');
                        Route::post('{uuid}/reset-password', 'resetPassword')->middleware('perm:customer.edit');
                        Route::post('{uuid}/add-credit', 'addCredit')->middleware('perm:customer.edit');
                        Route::get('{uuid}/services', 'getServices')->middleware('perm:customer.view');
                        Route::get('{uuid}/orders', 'getOrders')->middleware('perm:customer.view');
                        Route::get('{uuid}/invoices', 'getInvoices')->middleware('perm:customer.view');
                        Route::get('{uuid}/transactions', 'getTransactions')->middleware('perm:customer.view');
                        Route::get('{uuid}/domains', 'getDomains')->middleware('perm:customer.view');
                        Route::post('{uuid}/restore', 'restore')->middleware('perm:customer.edit');
                        Route::delete('{uuid}/force', 'forceDelete')->middleware('perm:customer.destroy');
                    });

                // Products (module: product-service)
                Route::prefix('products')
                    ->controller(ProductController::class)
                    ->group(function () {
                        Route::get('export', 'export')->middleware('perm:product-service.manager');
                        Route::get('/', 'index')->middleware('perm:product-service.view');
                        Route::post('/', 'store')->middleware('perm:product-service.create');
                        Route::post('import', 'import')->middleware('perm:product-service.create');
                        Route::post('bulk-update-status', 'bulkUpdateStatus')->middleware('perm:product-service.edit');
                        Route::post('bulk-destroy', 'bulkDestroy')->middleware('perm:product-service.destroy');

                        Route::controller(ProductController::class)->group(function () {
                            Route::get('os', 'getOsList')->middleware('perm:product-service.view');

                            Route::get('{id}', 'show')->middleware('perm:product-service.view');
                            Route::get('{id}/os', 'getOs')->middleware('perm:product-service.view');
                            Route::get('{id}/operating-systems', 'getOperatingSystems')->middleware(
                                'perm:product-service.view',
                            );
                            Route::put('{id}', 'update')->middleware('perm:product-service.edit');
                            Route::delete('{id}', 'destroy')->middleware('perm:product-service.destroy');
                            Route::post('{id}/duplicate', 'duplicate')->middleware('perm:product-service.create');
                        });
                    });

                Route::prefix('product-categories')
                    ->controller(ProductCategoryController::class)
                    ->as('product-categories.')
                    ->group(function () {
                        Route::get('/', 'index')->middleware('perm:product-service.view')->name('index');
                        Route::post('/', 'store')->middleware('perm:product-service.create')->name('store');
                        Route::get('trashed', 'trashed')->middleware('perm:product-service.view')->name('trashed');
                        Route::post('bulk-update-status', 'bulkUpdateStatus')
                            ->middleware('perm:product-service.edit')
                            ->name('bulk-update-status');
                        Route::post('bulk-destroy', 'bulkDestroy')
                            ->middleware('perm:product-service.destroy')
                            ->name('bulk-destroy');
                        Route::post('bulk-restore', 'bulkRestore')
                            ->middleware('perm:product-service.edit')
                            ->name('bulk-restore');
                        Route::post('bulk-force-delete', 'bulkForceDelete')
                            ->middleware('perm:product-service.destroy')
                            ->name('bulk-force-delete');
                        Route::get('{id}', 'show')->middleware('perm:product-service.view')->name('show');
                        Route::put('{id}', 'update')->middleware('perm:product-service.edit')->name('update');
                        Route::delete('{id}', 'destroy')->middleware('perm:product-service.destroy')->name('destroy');
                        Route::post('{id}/restore', 'restore')
                            ->middleware('perm:product-service.edit')
                            ->name('restore');
                        Route::delete('{id}/force', 'forceDelete')
                            ->middleware('perm:product-service.destroy')
                            ->name('force-delete');
                    });

                // Orders (module: order)
                Route::prefix('orders')
                    ->controller(OrderController::class)
                    ->group(function () {
                        Route::get('/', 'index')->middleware('perm:order.view');
                        Route::post('/upload-proof', 'uploadProof')->middleware('perm:order.create');
                        Route::post('/', 'store')->middleware('perm:order.create');
                        Route::get('{id}', 'show')->middleware('perm:order.view');
                        Route::put('{id}', 'update')->middleware('perm:order.edit');
                        Route::delete('{id}', 'destroy')->middleware('perm:order.destroy');
                        Route::post('{id}/accept', 'accept')->middleware('perm:order.edit');
                        Route::post('{id}/cancel', 'cancel')->middleware('perm:order.edit');
                    });

                // Invoices (module: invoice)
                Route::prefix('invoices')
                    ->controller(InvoiceController::class)
                    ->group(function () {
                        Route::get('/', 'index')->middleware('perm:invoice.view');
                        Route::get('/datatable', 'datatable')->middleware('perm:invoice.view');
                        Route::post('/', 'store')->middleware('perm:invoice.create');
                        Route::get('{id}', 'show')->middleware('perm:invoice.view');
                        Route::put('{id}', 'update')->middleware('perm:invoice.edit');
                        Route::delete('{id}', 'destroy')->middleware('perm:invoice.destroy');
                        Route::post('{id}/paid', 'markAsPaid')->middleware('perm:invoice.edit');
                        Route::post('{id}/cancel', 'cancel')->middleware('perm:invoice.edit');
                        // Attachments
                        Route::get('{id}/attachments', 'listAttachments')->middleware('perm:invoice.view');
                        Route::post('{id}/attachments', 'uploadAttachment')->middleware('perm:invoice.edit');
                        Route::delete('{id}/attachments/{attachmentId}', 'deleteAttachment')->middleware(
                            'perm:invoice.edit',
                        );
                        // Send mail notification
                        Route::post('{id}/send-mail', 'sendMail')->middleware('perm:invoice.edit');
                    });

                // Payments (module: payment)
                Route::prefix('payments')
                    ->controller(PaymentController::class)
                    ->group(function () {
                        Route::get('for-select', 'forSelect');
                        Route::get('/', 'index')->middleware('perm:payment.view');
                        Route::post('/', 'store')->middleware('perm:payment.create');
                        Route::get('{id}', 'show')->middleware('perm:payment.view');
                        Route::put('{id}', 'update')->middleware('perm:payment.edit');
                        Route::delete('{id}', 'destroy')->middleware('perm:payment.destroy');
                    });

                // OS Groups & OS Entries (module: module-vcenter)
                Route::prefix('os-groups')
                    ->controller(OsGroupController::class)
                    ->as('os-groups.')
                    ->group(function () {
                        Route::get('/', 'index')->middleware('perm:module-vcenter.manager')->name('index');
                        Route::post('/', 'store')->middleware('perm:module-vcenter.manager')->name('store');
                        Route::get('{id}', 'show')->middleware('perm:module-vcenter.manager')->name('show');
                        Route::put('{id}', 'update')->middleware('perm:module-vcenter.manager')->name('update');
                        Route::delete('{id}', 'destroy')->middleware('perm:module-vcenter.manager')->name('destroy');
                    });

                Route::prefix('os')
                    ->controller(OsController::class)
                    ->as('os.')
                    ->group(function () {
                        Route::post('/', 'store')->middleware('perm:module-vcenter.manager')->name('store');
                        Route::put('{id}', 'update')->middleware('perm:module-vcenter.manager')->name('update');
                        Route::delete('{id}', 'destroy')->middleware('perm:module-vcenter.manager')->name('destroy');
                    });

                // VPS (module: module-vcenter)
                Route::prefix('vps')
                    ->controller(VPSController::class)
                    ->group(function () {
                        Route::get('/', 'index')->middleware('perm:module-vcenter.view');
                        Route::get('{id}', 'show')->middleware('perm:module-vcenter.view');
                        Route::put('{id}', 'update')->middleware('perm:module-vcenter.edit');
                        Route::post('{id}/power-on', 'powerOn')->middleware('perm:module-vcenter.edit');
                        Route::post('{id}/power-off', 'powerOff')->middleware('perm:module-vcenter.edit');
                        Route::post('{id}/restart', 'restart')->middleware('perm:module-vcenter.edit');
                        Route::get('{id}/console-ticket', 'getConsoleTicket')->middleware('perm:module-vcenter.view');
                    });

                // vCenter (module: module-vcenter)
                Route::prefix('vcenter')
                    ->controller(VCenterController::class)
                    ->group(function () {
                        Route::get('tree', 'tree')->middleware('perm:module-vcenter.view');
                        Route::get('console-ticket', 'consoleTicket')->middleware('perm:module-vcenter.view');
                        Route::post('/', 'store')->middleware('perm:module-vcenter.create');
                        Route::post('sync', 'sync')->middleware('perm:module-vcenter.edit');
                        Route::put('node/{type}/{id}', 'updateNode')->middleware('perm:module-vcenter.edit');
                        Route::delete('node/{type}/{id}', 'destroyNode')->middleware('perm:module-vcenter.destroy');
                    });

                // DNS Manager — Domains (module: domain.manager)
                Route::prefix('domains')
                    ->controller(DnsDomainController::class)
                    ->group(function () {
                        Route::get('/', 'index')->middleware('perm:domain.manager');
                        Route::post('/', 'store')->middleware('perm:domain.manager');
                        Route::get('{id}', 'show')->middleware('perm:domain.manager');
                        Route::put('{id}', 'update')->middleware('perm:domain.manager');
                        Route::delete('{id}', 'destroy')->middleware('perm:domain.manager');
                        // DNS Records
                        Route::get('{id}/dns', 'dnsIndex')->middleware('perm:domain.manager');
                        Route::post('{id}/dns', 'dnsStore')->middleware('perm:domain.manager');
                        Route::put('{id}/dns/{recordId}', 'dnsUpdate')->middleware('perm:domain.manager');
                        Route::delete('{id}/dns/{recordId}', 'dnsDestroy')->middleware('perm:domain.manager');
                    });

                // DNS Manager — Servers (module: domain.manager)
                Route::prefix('dns-servers')
                    ->controller(DnsServerController::class)
                    ->group(function () {
                        Route::get('/', 'index')->middleware('perm:domain.manager');
                        Route::post('/', 'store')->middleware('perm:domain.manager');
                        Route::get('{id}', 'show')->middleware('perm:domain.manager');
                        Route::put('{id}', 'update')->middleware('perm:domain.manager');
                        Route::delete('{id}', 'destroy')->middleware('perm:domain.manager');
                    });

                // Staff Online
                Route::prefix('staff-online')
                    ->controller(StaffOnlineController::class)
                    ->group(function () {
                        Route::get('/', 'index');
                        Route::post('ping', 'ping');
                    });

                // Queue Monitor (Horizon)
                Route::prefix('queue')
                    ->controller(QueueMonitorController::class)
                    ->group(function () {
                        Route::get('jobs/recent', 'recent');
                        Route::get('jobs/pending', 'pending');
                        Route::get('jobs/failed', 'failed');
                        Route::get('jobs/metrics', 'metrics');
                    });

                // vCenter Manager Power Operations (module: module-vcenter)
                Route::prefix('vcenter-manager')
                    ->controller(VCenterManagerController::class)
                    ->group(function () {
                        Route::post('vm/power-on', 'powerOn')->middleware('perm:module-vcenter.edit');
                        Route::post('vm/power-off', 'powerOff')->middleware('perm:module-vcenter.edit');
                        Route::get('vms/powered-off', 'getPoweredOffVms')->middleware('perm:module-vcenter.view');
                    });
            });
        });

        Route::prefix('system')
            ->middleware(['api.auth'])
            ->group(function () {
                Route::post('get-all-image', function (Media $media) {
                    $files = $media->getAllMedia();
                    return response()->json(['data' => $files]);
                })->name('api.GetAllImage');

                Route::get('get-ticket-console', function (Request $request, ServiceVCenter $serviceVCenter) {
                    $product_id = $request->get('product');
                    if (!$product_id) {
                        return response()->json(['error' => true, 'message' => 'Please choose product']);
                    }
                    $product = ModuleVmware::with('ipAddress.host.datacenter.vCenter')->find($product_id);
                    if (!$product) {
                        return response()->json(['error' => true, 'message' => "Can't find product"]);
                    }

                    $vcenter = null;
                    if (
                        $product->ipAddress &&
                        $product->ipAddress->host &&
                        $product->ipAddress->host->datacenter &&
                        $product->ipAddress->host->datacenter->vCenter
                    ) {
                        $vcenter = $product->ipAddress->host->datacenter->vCenter;
                    }

                    if (!$vcenter) {
                        return response()->json(['error' => true, 'message' => "Can't find vCenter information"]);
                    }

                    // Đăng nhập vCenter trước khi lấy ticket
                    if (!$serviceVCenter->loginServer($vcenter)) {
                        return response()->json([
                            'error' => true,
                            'message' => 'Không thể đăng nhập vào vCenter',
                        ]);
                    }

                    $ConsoleTicket = $serviceVCenter->GetConsoleTickets($product->vmware_id);

                    // Nếu login hết hạn, thử login lại 1 lần nữa
                    if ($ConsoleTicket === 'Login_Again') {
                        if ($serviceVCenter->loginServer($vcenter)) {
                            $ConsoleTicket = $serviceVCenter->GetConsoleTickets($product->vmware_id);
                        } else {
                            return response()->json([
                                'error' => true,
                                'message' => 'Không thể đăng nhập lại vào vCenter',
                            ]);
                        }
                    }

                    // Nếu vẫn lỗi, trả về lỗi rõ ràng
                    if (is_string($ConsoleTicket)) {
                        return response()->json([
                            'error' => true,
                            'message' => "Failed to get console ticket: $ConsoleTicket",
                        ]);
                    }

                    if ($ConsoleTicket['error']) {
                        return response()->json([
                            'error' => true,
                            'message' => $ConsoleTicket['data'],
                        ]);
                    }

                    return response()
                        ->json([
                            'error' => false,
                            'data' => $ConsoleTicket['data'],
                            'host' => $vcenter->host,
                            'vmware-api-session-id' => $serviceVCenter->token,
                        ])
                        ->cookie('vmware-api-session-id', $serviceVCenter->token, 60, '/', null, false, false);
                })->name('api.GetConsoleTicket');
            });

        Route::prefix('hello')->group(function () {
            return 'heloo world';
        });
    });

Route::any('{any}', function () {
    return response()->json(
        [
            'error' => true,
            'message' => 'API Route not found',
        ],
        404,
    );
})->where('any', '.*');