app/api/photos.py

"""Photo policy and per-section report photo upload endpoints."""

from __future__ import annotations

import logging
import uuid
from pathlib import Path

from fastapi import APIRouter, Depends, File, HTTPException, Request, UploadFile
from fastapi.responses import FileResponse
from sqlalchemy import delete, func, select
from sqlalchemy.ext.asyncio import AsyncSession

from app.api.rate_limit import check_read
from app.config import settings
from app.db.database import get_db
from app.db.models import Report, ReportSectionPhoto
from app.models.schemas import SectionPhotoAiSelectionRequest
from app.services.photo_policy import get_photo_policy_for_tenant_async, photo_policy_configuration_incomplete
from app.storage.photo_paths import report_photo_relpath, resolve_report_photo_path
from app.templates.registry import ALL_VALID_SECTION_CODES

logger = logging.getLogger(__name__)
router = APIRouter()


def _validate_section_code(code: str) -> str:
    c = (code or "").strip()
    if not c:
        raise HTTPException(status_code=422, detail="section_code is required")
    if c not in ALL_VALID_SECTION_CODES:
        raise HTTPException(status_code=422, detail=f"Unknown section_code '{c}'")
    return c


def _report_photo_dir(tenant_id: str, report_id: str, section_code: str) -> Path:
    return settings.upload_dir / tenant_id / "report_photos" / str(report_id) / str(section_code)


def _photo_item_dict(report_id: str, section_code: str, row: ReportSectionPhoto) -> dict:
    return {
        "photo_id": row.id,
        "original_filename": row.original_filename,
        "content_type": row.content_type,
        "created_at": row.created_at.isoformat() if row.created_at else "",
        "url": f"/reports/{report_id}/sections/{section_code}/photos/{row.id}",
        "selected_for_ai": bool(getattr(row, "selected_for_ai", False)),
    }


def _validate_content_type(ct: str | None) -> str:
    content_type = (ct or "").strip().lower()
    if content_type not in ("image/jpeg", "image/png", "image/webp"):
        raise HTTPException(status_code=415, detail="Only JPEG, PNG, or WEBP images are supported.")
    return content_type


@router.get(
    "/reports/{report_id}/photo-policy",
    summary="Per-section photo policy for this report (requires/optional/none)",
)
async def get_report_photo_policy(
    report_id: str,
    request: Request,
    db: AsyncSession = Depends(get_db),
    _: None = Depends(check_read),
) -> dict:
    tenant_id: str = request.state.tenant_id
    report = await db.get(Report, report_id)
    if report is None or report.tenant_id != tenant_id:
        raise HTTPException(status_code=404, detail="Report not found")

    items, stats = await get_photo_policy_for_tenant_async(db, tenant_id, report.survey_level)
    return {
        "report_id": report_id,
        "survey_level": report.survey_level or 3,
        "indexed_upload_count": stats.files_total,
        "policy_configuration_required": photo_policy_configuration_incomplete(stats, items),
        "photo_limits": {
            "max_photos_per_section": int(settings.max_section_photos_per_section),
            "max_photos_for_ai": int(settings.max_section_photos_for_ai),
        },
        "sections": [
            {"code": x.code, "policy": x.policy.value, "reason": x.reason, "source": x.source}
            for x in items
        ],
    }


@router.post(
    "/reports/{report_id}/sections/{section_code}/photos",
    summary="Upload one or more photos for a report section",
)
async def upload_section_photos(
    report_id: str,
    section_code: str,
    request: Request,
    files: list[UploadFile] = File(...),
    db: AsyncSession = Depends(get_db),
) -> dict:
    tenant_id: str = request.state.tenant_id
    section_code = _validate_section_code(section_code)

    report = await db.get(Report, report_id)
    if report is None or report.tenant_id != tenant_id:
        raise HTTPException(status_code=404, detail="Report not found")

    if not files:
        raise HTTPException(status_code=422, detail="No files uploaded")

    # Enforce per-section cap (existing + new)
    existing_cnt = await db.execute(
        select(func.count())
        .select_from(ReportSectionPhoto)
        .where(
            ReportSectionPhoto.tenant_id == tenant_id,
            ReportSectionPhoto.report_id == report_id,
            ReportSectionPhoto.section_code == section_code,
        )
    )
    existing = int(existing_cnt.scalar_one() or 0)
    max_per = int(settings.max_section_photos_per_section)
    if max_per >= 0 and existing + len(files) > max_per:
        raise HTTPException(
            status_code=422,
            detail=f"Too many photos for section {section_code}. Max is {max_per}.",
        )

    saved: list[dict] = []
    for uf in files:
        content_type = _validate_content_type(uf.content_type)
        raw = await uf.read()
        if len(raw) > int(settings.max_section_photo_bytes):
            raise HTTPException(status_code=413, detail="Photo exceeds max_section_photo_bytes limit.")

        ext = "jpg" if content_type == "image/jpeg" else "png" if content_type == "image/png" else "webp"
        pid = str(uuid.uuid4())
        rel_path = report_photo_relpath(tenant_id, str(report_id), section_code, pid, ext)
        dest_path = settings.upload_dir / rel_path
        dest_path.parent.mkdir(parents=True, exist_ok=True)
        dest_path.write_bytes(raw)

        row = ReportSectionPhoto(
            id=pid,
            tenant_id=tenant_id,
            report_id=str(report_id),
            section_code=section_code,
            file_path=rel_path,
            original_filename=uf.filename or "upload",
            content_type=content_type,
        )
        db.add(row)
        await db.flush()
        saved.append(_photo_item_dict(str(report_id), section_code, row))

    await db.commit()
    return {"report_id": report_id, "section_code": section_code, "saved": saved}


@router.get(
    "/reports/{report_id}/sections/{section_code}/photos",
    summary="List uploaded photos for a report section",
)
async def list_section_photos(
    report_id: str,
    section_code: str,
    request: Request,
    db: AsyncSession = Depends(get_db),
    _: None = Depends(check_read),
) -> dict:
    tenant_id: str = request.state.tenant_id
    section_code = _validate_section_code(section_code)
    report = await db.get(Report, report_id)
    if report is None or report.tenant_id != tenant_id:
        raise HTTPException(status_code=404, detail="Report not found")

    res = await db.execute(
        select(ReportSectionPhoto)
        .where(
            ReportSectionPhoto.tenant_id == tenant_id,
            ReportSectionPhoto.report_id == report_id,
            ReportSectionPhoto.section_code == section_code,
        )
        .order_by(ReportSectionPhoto.created_at.asc())
    )
    rows = res.scalars().all()
    max_ai = int(settings.max_section_photos_for_ai)
    selected_count = sum(1 for r in rows if getattr(r, "selected_for_ai", False))
    return {
        "report_id": report_id,
        "section_code": section_code,
        "max_photos_per_section": int(settings.max_section_photos_per_section),
        "max_photos_for_ai": max_ai,
        "selected_for_ai_count": selected_count,
        "photos": [_photo_item_dict(str(report_id), section_code, r) for r in rows],
    }


@router.put(
    "/reports/{report_id}/sections/{section_code}/photos/ai-selection",
    summary="Select which section photos are sent to AI vision (max 2)",
)
async def set_section_photo_ai_selection(
    report_id: str,
    section_code: str,
    body: SectionPhotoAiSelectionRequest,
    request: Request,
    db: AsyncSession = Depends(get_db),
) -> dict:
    """Mark up to ``max_section_photos_for_ai`` photos for AI analysis on generation."""
    tenant_id: str = request.state.tenant_id
    section_code = _validate_section_code(section_code)

    report = await db.get(Report, report_id)
    if report is None or report.tenant_id != tenant_id:
        raise HTTPException(status_code=404, detail="Report not found")

    max_ai = int(settings.max_section_photos_for_ai)
    requested = [str(pid).strip() for pid in (body.photo_ids or []) if str(pid).strip()]
    if len(requested) > max_ai:
        raise HTTPException(
            status_code=422,
            detail=f"At most {max_ai} photo(s) may be selected for AI analysis per section.",
        )
    if len(requested) != len(set(requested)):
        raise HTTPException(status_code=422, detail="Duplicate photo_ids in selection.")

    res = await db.execute(
        select(ReportSectionPhoto).where(
            ReportSectionPhoto.tenant_id == tenant_id,
            ReportSectionPhoto.report_id == report_id,
            ReportSectionPhoto.section_code == section_code,
        )
    )
    rows = list(res.scalars().all())
    by_id = {r.id: r for r in rows}
    missing = [pid for pid in requested if pid not in by_id]
    if missing:
        raise HTTPException(
            status_code=422,
            detail=f"Unknown photo_id(s) for this section: {', '.join(missing[:5])}",
        )

    selected_set = set(requested)
    for row in rows:
        row.selected_for_ai = row.id in selected_set
    await db.commit()

    return {
        "report_id": report_id,
        "section_code": section_code,
        "selected_photo_ids": requested,
        "selected_for_ai_count": len(requested),
        "max_photos_for_ai": max_ai,
        "photos": [_photo_item_dict(str(report_id), section_code, r) for r in rows],
    }


@router.get(
    "/reports/{report_id}/sections/{section_code}/photos/{photo_id}",
    summary="Download one uploaded photo (bytes)",
)
async def get_section_photo(
    report_id: str,
    section_code: str,
    photo_id: str,
    request: Request,
    db: AsyncSession = Depends(get_db),
    _: None = Depends(check_read),
) -> FileResponse:
    tenant_id: str = request.state.tenant_id
    section_code = _validate_section_code(section_code)
    report = await db.get(Report, report_id)
    if report is None or report.tenant_id != tenant_id:
        raise HTTPException(status_code=404, detail="Report not found")

    row = await db.get(ReportSectionPhoto, photo_id)
    if row is None or row.tenant_id != tenant_id or row.report_id != report_id or row.section_code != section_code:
        raise HTTPException(status_code=404, detail="Photo not found")

    resolved = resolve_report_photo_path(
        row.file_path,
        tenant_id=tenant_id,
        report_id=str(report_id),
        section_code=section_code,
        photo_id=photo_id,
    )
    if resolved is None:
        raise HTTPException(status_code=404, detail="Photo file missing on disk")
    return FileResponse(path=resolved, media_type=row.content_type)


@router.delete(
    "/reports/{report_id}/sections/{section_code}/photos/{photo_id}",
    summary="Delete one uploaded photo for a report section",
)
async def delete_section_photo(
    report_id: str,
    section_code: str,
    photo_id: str,
    request: Request,
    db: AsyncSession = Depends(get_db),
) -> dict:
    tenant_id: str = request.state.tenant_id
    section_code = _validate_section_code(section_code)
    report = await db.get(Report, report_id)
    if report is None or report.tenant_id != tenant_id:
        raise HTTPException(status_code=404, detail="Report not found")

    row = await db.get(ReportSectionPhoto, photo_id)
    if row is None or row.tenant_id != tenant_id or row.report_id != report_id or row.section_code != section_code:
        raise HTTPException(status_code=404, detail="Photo not found")

    resolved = resolve_report_photo_path(
        row.file_path,
        tenant_id=tenant_id,
        report_id=str(report_id),
        section_code=section_code,
        photo_id=photo_id,
    )
    file_removed = False
    if resolved is not None:
        try:
            Path(resolved).unlink(missing_ok=True)
            file_removed = True
        except OSError as exc:
            logger.warning("Could not delete photo file %s: %s", resolved, exc)

    await db.execute(delete(ReportSectionPhoto).where(ReportSectionPhoto.id == photo_id))
    await db.commit()

    return {
        "report_id": report_id,
        "section_code": section_code,
        "photo_id": photo_id,
        "removed": True,
        "file_removed": file_removed,
    }