admin-web/src/api/platformIam.ts

import { http, unwrapApiResponse, type ApiEnvelope } from '@/api/http'

export interface PlatformPermissionResource {
  id: number | string
  tenantId: number | string
  appCode: 'PLATFORM'
  permissionType: 'MENU' | 'BUTTON'
  parentId: number | string
  permissionCode: string
  permissionName: string
  routePath: string | null
  httpMethod: string | null
  sortNo: number
  status: 'ACTIVE' | 'DISABLED' | 'INACTIVE'
  builtIn?: boolean
}

export interface EnterpriseReview {
  id: number
  tenantId: number
  status: 'PENDING' | 'APPROVED' | 'REJECTED'
  tenantName?: string | null
  tenantCode?: string | null
  qualificationId?: number | null
  qualificationType?: string | null
  certificateNo?: string | null
  documentUrl?: string | null
  contactName?: string | null
  contactPhone?: string | null
  contactEmail?: string | null
  submittedAt?: string | null
  createdAt?: string | null
  reviewComment?: string | null
  [key: string]: unknown
}

export type PlatformTenantStatus = 'PENDING' | 'ACTIVE' | 'REJECTED' | 'INACTIVE' | string

export interface PlatformTenantResource {
  id: number | string
  tenantCode: string
  tenantName: string
  status: PlatformTenantStatus
  legalName: string | null
  unifiedSocialCreditCode: string | null
  contactName: string | null
  contactPhone: string | null
  contactEmail: string | null
}

export interface PlatformTenantPage {
  records: PlatformTenantResource[]
  page: number
  size: number
  total: number
  pages: number
}

export interface PlatformTenantQuery {
  page: number
  size: number
  keyword?: string
  status?: PlatformTenantStatus
}

export interface PlatformTenantQualification {
  id: number | string
  tenantId: number | string
  qualificationType: 'BUSINESS_LICENSE' | string
  certificateNo: string | null
  documentUrl: string
  status: 'PENDING' | 'APPROVED' | 'REJECTED'
  reviewComment: string | null
}

export interface PlatformRoleResource {
  id: number | string
  tenantId: number | string
  appCode: 'PLATFORM'
  roleCode: string
  roleName: string
  roleType: 'SYSTEM' | 'CUSTOM' | string
  status: 'ACTIVE' | 'INACTIVE' | string
  description: string | null
  permissionIds?: Array<number | string>
}

export interface CreatePlatformRoleRequest {
  roleCode: string
  roleName: string
  description: string
}

export interface UpdatePlatformRoleRequest {
  roleName: string
  description: string
}

export interface CreatePlatformPermissionRequest {
  type: 'MENU' | 'BUTTON'
  code: string
  name: string
  parentId: number | string
  routePath: string | null
  httpMethod: null
  sortNo: number
}

export interface UpdatePlatformPermissionRequest {
  name: string
  parentId: number | string | null
  routePath: string | null
  httpMethod: string | null
  sortNo: number
}

export interface PlatformInternalUser {
  membershipId: number | string
  userId: number | string
  authUserId: number | string
  username: string
  displayName: string
  phone: string | null
  email: string | null
  memberType: string
  memberNo: string | null
  status: 'ACTIVE' | 'DISABLED' | string
  roleIds: Array<number | string>
}

export interface CreatePlatformInternalUserRequest {
  authUserId: number | string
  userType: string
  displayName: string
  phone: string
  email: string
  memberNo?: string
  roleIds?: Array<number | string>
}

export interface UpdatePlatformInternalUserRequest {
  displayName: string
  phone: string
  email: string
  memberNo: string
  roleIds: Array<number | string>
}

async function getData<T>(path: string): Promise<T> {
  const response = await http.get<ApiEnvelope<T>, ApiEnvelope<T>>(path)
  return unwrapApiResponse(response)
}

async function postData<T>(path: string, body: unknown): Promise<T> {
  const response = await http.post<ApiEnvelope<T>, ApiEnvelope<T>>(path, body)
  return unwrapApiResponse(response)
}

async function putData<T>(path: string, body: unknown): Promise<T> {
  const response = await http.put<ApiEnvelope<T>, ApiEnvelope<T>>(path, body)
  return unwrapApiResponse(response)
}

async function deleteData<T>(path: string): Promise<T> {
  const response = await http.delete<ApiEnvelope<T>, ApiEnvelope<T>>(path)
  return unwrapApiResponse(response)
}

export function listPlatformPermissions() {
  return getData<PlatformPermissionResource[]>('/platform/v1/iam/permissions')
}

export function listCurrentPlatformPermissionCodes() {
  return getData<string[]>('/platform/v1/iam/authorization/permissions')
}

export function listEnterpriseReviews() {
  return getData<EnterpriseReview[]>('/platform/v1/iam/reviews')
}

export async function listPlatformTenants(query: PlatformTenantQuery) {
  const response = await http.get<ApiEnvelope<PlatformTenantPage>, ApiEnvelope<PlatformTenantPage>>(
    '/platform/v1/iam/tenants',
    {
      params: {
        page: query.page,
        size: query.size,
        ...(query.keyword ? { keyword: query.keyword } : {}),
        ...(query.status ? { status: query.status } : {}),
      },
    },
  )
  return unwrapApiResponse(response)
}

export function listTenantQualifications(tenantId: number | string) {
  return getData<PlatformTenantQualification[]>(`/platform/v1/iam/tenants/${tenantId}/qualifications`)
}

export function qualificationFileName(documentUrl: string) {
  const path = documentUrl.split(/[?#]/, 1)[0]
  const encodedName = path.split('/').filter(Boolean).at(-1)
  if (!encodedName) throw new Error('资质文件地址无效')
  let fileName: string
  try {
    fileName = decodeURIComponent(encodedName)
  } catch {
    throw new Error('资质文件地址无效')
  }
  if (!fileName || fileName === '.' || fileName === '..' || /[\\/]/.test(fileName)) {
    throw new Error('资质文件地址无效')
  }
  return fileName
}

export function downloadTenantQualification(tenantId: number | string, documentUrl: string) {
  const fileName = qualificationFileName(documentUrl)
  return http.get<Blob, Blob>(`/platform/v1/files/qualifications/${tenantId}/${encodeURIComponent(fileName)}`, {
    responseType: 'blob',
  })
}

export function listPlatformRoles() {
  return getData<PlatformRoleResource[]>('/platform/v1/iam/roles')
}

export function createPlatformRole(payload: CreatePlatformRoleRequest) {
  return postData<PlatformRoleResource>('/platform/v1/iam/roles', payload)
}

export function updatePlatformRole(roleId: number | string, payload: UpdatePlatformRoleRequest) {
  return putData<PlatformRoleResource>(`/platform/v1/iam/roles/${roleId}`, payload)
}

export function changePlatformRoleStatus(roleId: number | string, status: 'ACTIVE' | 'DISABLED') {
  return putData<PlatformRoleResource>(`/platform/v1/iam/roles/${roleId}/status`, { status })
}

export function deletePlatformRole(roleId: number | string) {
  return deleteData<void>(`/platform/v1/iam/roles/${roleId}`)
}

export function replacePlatformRolePermissions(roleId: number | string, permissionIds: Array<number | string>) {
  return putData<void>('/platform/v1/iam/roles/permissions', { roleId, permissionIds })
}

export function createPlatformPermission(payload: CreatePlatformPermissionRequest) {
  return postData<PlatformPermissionResource>('/platform/v1/iam/permissions', payload)
}

export function updatePlatformPermission(permissionId: number | string, payload: UpdatePlatformPermissionRequest) {
  return putData<PlatformPermissionResource>(`/platform/v1/iam/permissions/${permissionId}`, payload)
}

export function changePlatformPermissionStatus(permissionId: number | string, status: 'ACTIVE' | 'DISABLED') {
  return putData<PlatformPermissionResource>(`/platform/v1/iam/permissions/${permissionId}/status`, { status })
}

export function deletePlatformPermission(permissionId: number | string) {
  return deleteData<void>(`/platform/v1/iam/permissions/${permissionId}`)
}

export function listPlatformInternalUsers() {
  return getData<PlatformInternalUser[]>('/platform/v1/iam/internal-users')
}

export function createPlatformInternalUser(payload: CreatePlatformInternalUserRequest) {
  return postData<PlatformInternalUser>('/platform/v1/iam/internal-users', payload)
}

export function updatePlatformInternalUser(membershipId: number | string, payload: UpdatePlatformInternalUserRequest) {
  return putData<PlatformInternalUser>(`/platform/v1/iam/internal-users/${membershipId}`, payload)
}

export function changePlatformInternalUserStatus(membershipId: number | string, status: 'ACTIVE' | 'DISABLED') {
  return putData<PlatformInternalUser>(`/platform/v1/iam/internal-users/${membershipId}/status`, { status })
}

export function resetPlatformInternalUserPassword(membershipId: number | string, newPassword: string) {
  return putData<void>(`/platform/v1/iam/internal-users/${membershipId}/password`, { newPassword })
}

export function assignPlatformInternalUserRoles(membershipId: number | string, roleIds: Array<number | string>) {
  return putData<PlatformInternalUser>(`/platform/v1/iam/internal-users/${membershipId}/roles`, { roleIds })
}

export function approveEnterpriseReview(reviewId: number, comment: string) {
  return postData<unknown>(`/platform/v1/iam/reviews/${reviewId}/approve`, { comment })
}

export function rejectEnterpriseReview(reviewId: number, comment: string) {
  return postData<unknown>(`/platform/v1/iam/reviews/${reviewId}/reject`, { comment })
}