<?php

use App\Http\Controllers\Api\AuditController;
use App\Http\Controllers\Api\ClusterController;
use App\Http\Controllers\Api\DemoController;
use App\Http\Controllers\Api\HealthController;
use App\Http\Controllers\Api\MergeController;
use App\Http\Controllers\Api\SyncController;
use App\Http\Controllers\Api\WorkspaceController;
use Illuminate\Support\Facades\Route;

Route::prefix('v1')->group(function () {
    Route::get('healthz', HealthController::class)->name('v1.healthz');

    // Public live demo (no auth, per-IP rate-limited).
    Route::middleware('demo.rate-limit')->group(function () {
        Route::get('demo/status', [DemoController::class, 'status'])->name('v1.demo.status');
        Route::post('demo/reseed', [DemoController::class, 'reseed'])->name('v1.demo.reseed');
        Route::post('demo/run-pipeline', [DemoController::class, 'runPipeline'])->name('v1.demo.run-pipeline');
        Route::get('demo/clusters', [DemoController::class, 'clusters'])->name('v1.demo.clusters');
        Route::post('demo/clusters/{id}/merge', [DemoController::class, 'mergeLocally'])->name('v1.demo.merge');
    });

    Route::middleware(['api.key', 'workspace.rate-limit'])->group(function () {
        // Workspace context
        Route::get('workspaces/current', [WorkspaceController::class, 'current'])->name('v1.workspaces.current');

        // Sync (admin_read)
        Route::middleware(['api.key:admin_read'])->group(function () {
            Route::get('sync/status', [SyncController::class, 'status'])->name('v1.sync.status');
            Route::get('clusters', [ClusterController::class, 'index'])->name('v1.clusters.index');
            Route::get('clusters/{id}', [ClusterController::class, 'show'])->name('v1.clusters.show');
            Route::get('merges', [MergeController::class, 'index'])->name('v1.merges.index');
            Route::get('audit-log', AuditController::class)->name('v1.audit-log');
        });

        // Mutations (admin_write)
        Route::middleware(['api.key:admin_write'])->group(function () {
            Route::post('sync/start', [SyncController::class, 'start'])->name('v1.sync.start');
            Route::post('cluster/run', [ClusterController::class, 'run'])->name('v1.cluster.run');
            Route::post('clusters/{id}/merge', [ClusterController::class, 'merge'])->name('v1.clusters.merge');
            Route::post('clusters/{id}/reject', [ClusterController::class, 'reject'])->name('v1.clusters.reject');
            Route::post('merges/{id}/undo', [MergeController::class, 'undo'])->name('v1.merges.undo');
        });
    });
});