hensei-api/app/controllers/api/v1/collection_weapons_controller.rb

module Api
  module V1
    class CollectionWeaponsController < ApiController
      # Read actions: look up user from params, check privacy
      before_action :set_target_user, only: %i[index show]
      before_action :check_collection_access, only: %i[index show]
      before_action :set_collection_weapon_for_read, only: %i[show]

      # Write actions: require auth, use current_user
      before_action :restrict_access, only: %i[create update destroy batch batch_destroy import]
      before_action :set_collection_weapon_for_write, only: %i[update destroy]

      def index
        @collection_weapons = @target_user.collection_weapons
                                          .includes(:weapon, :awakening,
                                                   :weapon_key1, :weapon_key2,
                                                   :weapon_key3, :weapon_key4)

        # Apply filters (array_param splits comma-separated values for OR logic)
        @collection_weapons = @collection_weapons.by_weapon(params[:weapon_id]) if params[:weapon_id]
        @collection_weapons = @collection_weapons.by_element(array_param(:element)) if params[:element]
        @collection_weapons = @collection_weapons.by_rarity(array_param(:rarity)) if params[:rarity]
        @collection_weapons = @collection_weapons.by_proficiency(array_param(:proficiency)) if params[:proficiency]
        @collection_weapons = @collection_weapons.by_series(array_param(:series)) if params[:series]

        @collection_weapons = @collection_weapons.sorted_by(params[:sort])

        @collection_weapons = @collection_weapons.paginate(page: params[:page], per_page: params[:limit] || 50)

        render json: Api::V1::CollectionWeaponBlueprint.render(
          @collection_weapons,
          root: :weapons,
          meta: pagination_meta(@collection_weapons)
        )
      end

      def show
        render json: Api::V1::CollectionWeaponBlueprint.render(
          @collection_weapon,
          view: :full
        )
      end

      def create
        @collection_weapon = current_user.collection_weapons.build(collection_weapon_params)

        if @collection_weapon.save
          render json: Api::V1::CollectionWeaponBlueprint.render(
            @collection_weapon,
            view: :full
          ), status: :created
        else
          render_validation_error_response(@collection_weapon)
        end
      end

      def update
        if @collection_weapon.update(collection_weapon_params)
          render json: Api::V1::CollectionWeaponBlueprint.render(
            @collection_weapon,
            view: :full
          )
        else
          render_validation_error_response(@collection_weapon)
        end
      end

      def destroy
        @collection_weapon.destroy
        head :no_content
      end

      # POST /collection/weapons/batch
      # Creates multiple collection weapons in a single request
      # Unlike characters, weapons can have duplicates (user can own multiple copies)
      def batch
        items = batch_weapon_params[:collection_weapons] || []
        created = []
        errors = []

        ActiveRecord::Base.transaction do
          items.each_with_index do |item_params, index|
            collection_weapon = current_user.collection_weapons.build(item_params)

            if collection_weapon.save
              created << collection_weapon
            else
              errors << {
                index: index,
                weapon_id: item_params[:weapon_id],
                error: collection_weapon.errors.full_messages.join(', ')
              }
            end
          end
        end

        status = errors.any? ? :multi_status : :created

        render json: Api::V1::CollectionWeaponBlueprint.render(
          created,
          root: :weapons,
          meta: { created: created.size, errors: errors }
        ), status: status
      end

      # DELETE /collection/weapons/batch_destroy
      # Deletes multiple collection weapons in a single request
      def batch_destroy
        ids = batch_destroy_params[:ids] || []
        deleted_count = current_user.collection_weapons.where(id: ids).destroy_all.count

        render json: {
          meta: { deleted: deleted_count }
        }, status: :ok
      end

      # POST /collection/weapons/import
      # Imports weapons from game JSON data
      #
      # @param data [Hash] Game data containing weapon list
      # @param update_existing [Boolean] Whether to update existing weapons (default: false)
      def import
        game_data = import_params[:data]

        unless game_data.present?
          return render json: { error: 'No data provided' }, status: :bad_request
        end

        service = WeaponImportService.new(
          current_user,
          game_data,
          update_existing: import_params[:update_existing] == true
        )

        result = service.import

        status = result.success? ? :created : :multi_status

        render json: {
          success: result.success?,
          created: result.created.size,
          updated: result.updated.size,
          skipped: result.skipped.size,
          errors: result.errors
        }, status: status
      end

      private

      def set_target_user
        @target_user = User.find(params[:user_id])
      rescue ActiveRecord::RecordNotFound
        render json: { error: "User not found" }, status: :not_found
      end

      def check_collection_access
        return if @target_user.nil? # Already handled by set_target_user
        unless @target_user.collection_viewable_by?(current_user)
          render json: { error: "You do not have permission to view this collection" }, status: :forbidden
        end
      end

      def set_collection_weapon_for_read
        @collection_weapon = @target_user.collection_weapons.find(params[:id])
      rescue ActiveRecord::RecordNotFound
        raise CollectionErrors::CollectionItemNotFound.new('weapon', params[:id])
      end

      def set_collection_weapon_for_write
        @collection_weapon = current_user.collection_weapons.find(params[:id])
      rescue ActiveRecord::RecordNotFound
        raise CollectionErrors::CollectionItemNotFound.new('weapon', params[:id])
      end

      def collection_weapon_params
        params.require(:collection_weapon).permit(
          :weapon_id, :uncap_level, :transcendence_step,
          :weapon_key1_id, :weapon_key2_id, :weapon_key3_id, :weapon_key4_id,
          :awakening_id, :awakening_level,
          :ax_modifier1_id, :ax_strength1, :ax_modifier2_id, :ax_strength2,
          :befoulment_modifier_id, :befoulment_strength, :exorcism_level,
          :element
        )
      end

      def batch_weapon_params
        params.permit(collection_weapons: [
          :weapon_id, :uncap_level, :transcendence_step,
          :weapon_key1_id, :weapon_key2_id, :weapon_key3_id, :weapon_key4_id,
          :awakening_id, :awakening_level,
          :ax_modifier1_id, :ax_strength1, :ax_modifier2_id, :ax_strength2,
          :befoulment_modifier_id, :befoulment_strength, :exorcism_level,
          :element
        ])
      end

      def import_params
        {
          update_existing: params[:update_existing],
          data: params[:data]&.to_unsafe_h
        }
      end

      def batch_destroy_params
        params.permit(ids: [])
      end

      def array_param(key)
        params[key]&.to_s&.split(',')
      end
    end
  end
end