<?php

namespace App\Http\Controllers\Api\V1\Admin\Integration;

use App\Models\AdminSite;
use App\Support\ApiMessage;
use App\Support\ApiResponse;
use App\Lottery\ErrorCode;
use Illuminate\Http\Request;
use Illuminate\Http\JsonResponse;
use App\Http\Controllers\Controller;
use App\Services\AuditLogger;
use App\Services\Integration\IntegrationSiteService;
use App\Support\AdminIntegrationSiteAccess;
use App\Support\AdminIntegrationSitePresenter;
use App\Http\Requests\Admin\AdminIntegrationSiteUpdateRequest;
use App\Http\Middleware\RecordAdminApiAudit;

final class AdminIntegrationSiteUpdateController extends Controller
{
    public function __invoke(
        AdminIntegrationSiteUpdateRequest $request,
        AdminSite $admin_site,
        IntegrationSiteService $service,
    ): JsonResponse {
        $admin = $request->lotteryAdmin();
        abort_if($admin === null, 401);

        if (! AdminIntegrationSiteAccess::canAccess($admin, $admin_site)) {
            return ApiMessage::errorResponse($request, 'admin.site_update_denied', ErrorCode::AdminForbidden->value, null, 403);
        }

        $before = AdminIntegrationSitePresenter::detail($admin_site);
        $site = $service->update($admin_site, $request->validated());
        $after = AdminIntegrationSitePresenter::detail($site);

        AuditLogger::recordForAdmin(
            $admin,
            $request,
            moduleCode: 'integration',
            actionCode: 'update',
            targetType: 'admin_site',
            targetId: (string) $site->id,
            beforeJson: $before,
            afterJson: $after,
        );
        $request->attributes->set(RecordAdminApiAudit::ATTRIBUTE_AUDIT_RECORDED, true);

        return ApiResponse::success($after);
    }
}
