"""Stable read-only public API endpoints."""

from typing import Optional

from fastapi import APIRouter, Depends, Path, Query
from sqlalchemy.orm import Session

from app.api.api_v1.endpoints import domains, tls_reports
from app.core.database import get_db
from app.core.security import require_api_token_scope
from app.services.api_tokens import READ_POSTURE_SCOPE, READ_REPORTS_SCOPE, READ_TLS_SCOPE

router = APIRouter()


@router.get("/domains", response_model=domains.DomainSummaryResponse)
async def public_domain_summary(
    db: Session = Depends(get_db),
    _auth: dict = Depends(require_api_token_scope(READ_REPORTS_SCOPE)),
):
    """List monitored domains with report and DNS posture summary fields."""
    return await domains.get_domains_summary(db=db)


@router.get(
    "/domains/{domain_id}/posture",
    response_model=domains.PostureDashboardResponse,
)
async def public_domain_posture(
    domain_id: str = Path(..., title="The domain ID or name"),
    refresh: bool = Query(False, title="Refresh cached DNS posture"),
    db: Session = Depends(get_db),
    _auth: dict = Depends(require_api_token_scope(READ_POSTURE_SCOPE)),
):
    """Return the stable evidence-first posture payload for one domain."""
    return await domains.get_domain_posture_dashboard(
        domain_id=domain_id,
        refresh=refresh,
        db=db,
    )


@router.get(
    "/domains/{domain_id}/reports",
    response_model=domains.DomainReportsResponse,
)
async def public_domain_reports(
    domain_id: str = Path(..., title="The domain ID or name"),
    limit: int = Query(10, ge=1, le=200),
    db: Session = Depends(get_db),
    _auth: dict = Depends(require_api_token_scope(READ_REPORTS_SCOPE)),
):
    """Return recent DMARC aggregate report summaries for one domain."""
    return await domains.get_domain_reports(domain_id=domain_id, limit=limit, db=db)


@router.get("/tls-reports/summary", response_model=tls_reports.TLSSummaryResponse)
async def public_tls_report_summary(
    domain: Optional[str] = Query(default=None),
    days: int = Query(default=30, ge=1, le=365),
    limit: int = Query(default=10, ge=1, le=50),
    db: Session = Depends(get_db),
    _auth: dict = Depends(require_api_token_scope(READ_TLS_SCOPE)),
):
    """Return aggregate SMTP TLS reporting posture trends."""
    return await tls_reports.tls_report_summary(
        domain=domain,
        days=days,
        limit=limit,
        db=db,
        _auth=_auth,
    )