import { Controller, ForbiddenException, Get, Query } from "@nestjs/common";
import { ApiOperation, ApiQuery, ApiResponse, ApiTags } from "@nestjs/swagger";
import { Role } from "../auth/roles/role.enum";
import { Secured } from "../auth/secure.decorator";
import { Token, TokenPayload } from "../auth/token.decorator";
import { AuditLogService } from "./audit-log.service";
import { AuditLogResponseDto } from "./dto/audit-log-response.dto";

@ApiTags("Audit Log")
@Secured([Role.Clients])
@Controller("admin/audit-logs")
export class AuditLogController {
    constructor(private readonly auditLogService: AuditLogService) {}

    /**
     * Get recent audit log entries for the current tenant.
     */
    @Get()
    @ApiOperation({
        summary: "Get recent audit log entries for the current tenant",
    })
    @ApiQuery({
        name: "limit",
        required: false,
        type: Number,
        description: "Maximum number of entries to return (1–500)",
    })
    @ApiResponse({ status: 200, type: [AuditLogResponseDto] })
    getAuditLogs(
        @Token() user: TokenPayload,
        @Query("limit") limit?: string,
    ): Promise<AuditLogResponseDto[]> {
        if (!user.entity?.id) {
            throw new ForbiddenException(
                "This endpoint requires a tenant context.",
            );
        }
        const parsedLimit = limit ? Number.parseInt(limit, 10) : undefined;
        return this.auditLogService.listByTenant(user.entity.id, parsedLimit);
    }
}