import { FastifyInstance } from "fastify";
import prisma from "../../config/database";
import { requirePermission } from "../../middleware/auth";
import { parseId, success } from "../../utils/response";
import { localDateCzStr } from "../../utils/date";
import { htmlToPdf } from "../../utils/html-to-pdf";
import { nasOrdersManager } from "../../services/nas-financials-manager";
import createDOMPurify from "dompurify";
import { JSDOM } from "jsdom";

const window = new JSDOM("").window;
const DOMPurify = createDOMPurify(window);

/* ── Helpers (copied from orders-pdf.ts — the shared confirmation template) ── */

function formatDate(date: Date | string | null | undefined): string {
  if (!date) return "";
  const d = new Date(date);
  if (isNaN(d.getTime())) return String(date);
  return localDateCzStr(d);
}

function formatNum(n: number, decimals = 2): string {
  const abs = Math.abs(n);
  const fixed = abs.toFixed(decimals);
  const [intPart, decPart] = fixed.split(".");
  const withSep = intPart.replace(/\B(?=(\d{3})+(?!\d))/g, " ");
  const result = decPart ? `${withSep},${decPart}` : withSep;
  return n < 0 ? `-${result}` : result;
}

function escapeHtml(str: string | null | undefined): string {
  if (!str) return "";
  return str
    .replace(/&/g, "&amp;")
    .replace(/</g, "&lt;")
    .replace(/>/g, "&gt;")
    .replace(/"/g, "&quot;");
}

function cleanQuillHtml(html: string | null | undefined): string {
  if (!html) return "";
  let s = html;
  s = s.replace(
    /<(script|iframe|object|embed|style|link|meta|base|form|input|textarea|button|select|svg|math)[^>]*>[\s\S]*?<\/\1>/gi,
    "",
  );
  s = s.replace(
    /<(script|iframe|object|embed|style|link|meta|base|form|input|textarea|button|select|svg|math)[^>]*\/?>/gi,
    "",
  );
  s = s.replace(/\s+on\w+\s*=\s*("[^"]*"|'[^']*'|[^\s>]*)/gi, "");
  s = s.replace(/\s+on\w+\s*=\s*[^\s>]*/gi, "");
  s = s.replace(/href\s*=\s*["']?\s*javascript\s*:[^"'>\s]*/gi, 'href="#"');
  s = s.replace(/(&nbsp;)/g, " ");
  s = s.replace(/\s+style\s*=\s*("[^"]*"|'[^']*'|[^\s>]*)/gi, "");
  let prev = "";
  while (prev !== s) {
    prev = s;
    s = s.replace(/<span([^>]*)>(.*?)<\/span>\s*<span\1>/gs, "<span$1>$2");
  }
  return s;
}

interface AddressResult {
  name: string;
  lines: string[];
}

function buildAddressLines(
  entity: Record<string, unknown> | null,
  isCompany: boolean,
  tObj: Record<string, string>,
): AddressResult {
  if (!entity) return { name: "", lines: [] };

  const nameKey = isCompany ? "company_name" : "name";
  const name = String(entity[nameKey] || "");

  let cfData: Array<{ name?: string; value?: string; showLabel?: boolean }> =
    [];
  let fieldOrder: string[] | null = null;
  const raw = entity.custom_fields;
  if (raw) {
    let parsed: unknown;
    try {
      parsed = typeof raw === "string" ? JSON.parse(raw) : raw;
    } catch {
      parsed = null;
    }
    if (parsed && typeof parsed === "object") {
      if ((parsed as Record<string, unknown>).fields) {
        cfData =
          ((parsed as Record<string, unknown>).fields as typeof cfData) || [];
        fieldOrder = ((parsed as Record<string, unknown>).field_order ||
          (parsed as Record<string, unknown>).fieldOrder) as string[] | null;
      } else if (Array.isArray(parsed)) {
        cfData = parsed;
      }
    }
  }

  if (Array.isArray(fieldOrder)) {
    const legacyMap: Record<string, string> = {
      Name: "name",
      CompanyName: "company_name",
      Street: "street",
      CityPostal: "city_postal",
      Country: "country",
      CompanyId: "company_id",
      VatId: "vat_id",
    };
    fieldOrder = fieldOrder.map((k) => legacyMap[k] || k);
  }

  const fieldMap: Record<string, string> = {};
  if (name) fieldMap[nameKey] = name;
  if (entity.street) fieldMap.street = String(entity.street);
  const cityParts = [entity.city || "", entity.postal_code || ""]
    .filter(Boolean)
    .map(String);
  const cityPostal = cityParts.join(" ").trim();
  if (cityPostal) fieldMap.city_postal = cityPostal;
  if (entity.country) fieldMap.country = String(entity.country);
  if (entity.company_id)
    fieldMap.company_id = `${tObj.ico}${entity.company_id}`;
  if (entity.vat_id) fieldMap.vat_id = `${tObj.dic}${entity.vat_id}`;

  cfData.forEach((cf, i) => {
    const cfName = (cf.name || "").trim();
    const cfValue = (cf.value || "").trim();
    const showLabel = cf.showLabel !== false;
    if (cfValue) {
      fieldMap[`custom_${i}`] =
        showLabel && cfName ? `${cfName}: ${cfValue}` : cfValue;
    }
  });

  const lines: string[] = [];
  if (Array.isArray(fieldOrder) && fieldOrder.length) {
    for (const key of fieldOrder) {
      if (key === nameKey) continue;
      if (fieldMap[key]) lines.push(fieldMap[key]);
    }
    for (const [key, line] of Object.entries(fieldMap)) {
      if (key === nameKey) continue;
      if (!fieldOrder!.includes(key)) lines.push(line);
    }
  } else {
    for (const [key, line] of Object.entries(fieldMap)) {
      if (key === nameKey) continue;
      lines.push(line);
    }
  }

  return { name, lines };
}

/**
 * Address block for the sklad_suppliers counterparty. Unlike customers (which
 * have structured street/city/postal columns), suppliers.address is a single
 * Text blob — split it on newlines into one rendered line each (a blob without
 * newlines renders as one line). IČO/DIČ come from the supplier's ico/dic
 * columns, prefixed with the same translated labels the customer block used.
 */
function buildSupplierLines(
  supplier: Record<string, unknown> | null,
  tObj: Record<string, string>,
): AddressResult {
  if (!supplier) return { name: "", lines: [] };
  const name = String(supplier.name || "");
  const lines: string[] = [];
  if (supplier.address) {
    for (const part of String(supplier.address).split(/\r?\n/)) {
      const line = part.trim();
      if (line) lines.push(line);
    }
  }
  if (supplier.ico) lines.push(`${tObj.ico}${supplier.ico}`);
  if (supplier.dic) lines.push(`${tObj.dic}${supplier.dic}`);
  return { name, lines };
}

/* ── Translations ────────────────────────────────────────────────── */

type Lang = "cs" | "en";

const translations: Record<Lang, Record<string, string>> = {
  cs: {
    title: "OBJEDNÁVKA",
    heading: "OBJEDNÁVKA č.",
    // PO direction: WE (company) are the buyer (Odběratel), the
    // selected sklad_suppliers record is the supplier (Dodavatel).
    supplier: "Dodavatel",
    buyer: "Odběratel",
    issue_date: "Datum vystavení:",
    delivery_date: "Požadované dodání:",
    billing: "Objednáváme u Vás:",
    col_no: "Č.",
    col_desc: "Popis",
    col_qty: "Množství",
    col_unit_price: "Jedn. cena",
    col_price: "Cena",
    col_vat_pct: "%DPH",
    col_vat: "DPH",
    col_total: "Celkem",
    subtotal: "Mezisoučet:",
    vat_label: "DPH",
    total: "Celkem",
    amounts_in: "Částky jsou uvedeny v",
    notes: "Poznámky",
    delivery_terms: "Dodací podmínky:",
    payment_terms: "Platební podmínky:",
    issued_by: "Vystavil:",
    ico: "IČ: ",
    dic: "DIČ: ",
  },
  en: {
    title: "PURCHASE ORDER",
    heading: "PURCHASE ORDER No.",
    supplier: "Supplier",
    buyer: "Buyer",
    issue_date: "Issue date:",
    delivery_date: "Requested delivery:",
    billing: "We order from you:",
    col_no: "No.",
    col_desc: "Description",
    col_qty: "Quantity",
    col_unit_price: "Unit price",
    col_price: "Price",
    col_vat_pct: "VAT%",
    col_vat: "VAT",
    col_total: "Total",
    subtotal: "Subtotal:",
    vat_label: "VAT",
    total: "Total",
    amounts_in: "Amounts are in",
    notes: "Notes",
    delivery_terms: "Delivery terms:",
    payment_terms: "Payment terms:",
    issued_by: "Issued by:",
    ico: "Reg. No.: ",
    dic: "Tax ID: ",
  },
};

interface IssuedOrderPdfData {
  po_number: string | null;
  order_date: Date | null;
  delivery_date: Date | null;
  currency: string | null;
  apply_vat: boolean | null;
  vat_rate: unknown;
  notes: string | null;
  delivery_terms: string | null;
  payment_terms: string | null;
  issued_by: string | null;
}

interface IssuedOrderPdfItem {
  description: string | null;
  item_description: string | null;
  quantity: unknown;
  unit: string | null;
  unit_price: unknown;
  vat_rate: unknown;
}

export function renderIssuedOrderHtml(
  order: IssuedOrderPdfData,
  items: IssuedOrderPdfItem[],
  supplier: Record<string, unknown> | null,
  settings: Record<string, unknown> | null,
  lang: Lang,
  issuer: { name: string },
): string {
  const t = translations[lang];
  const applyVat = order.apply_vat !== false;
  const currency = order.currency || "CZK";
  const docRate = order.vat_rate != null ? Number(order.vat_rate) : 21;
  const poNumber = escapeHtml(order.po_number || "");

  // Logo embedding (same logic as the confirmation template).
  let logoImg = "";
  if (settings?.logo_data) {
    const buf = Buffer.from(settings.logo_data as Buffer);
    let mime = "image/png";
    if (buf[0] === 0xff && buf[1] === 0xd8) mime = "image/jpeg";
    else if (buf[0] === 0x47 && buf[1] === 0x49) mime = "image/gif";
    else if (buf[0] === 0x52 && buf[1] === 0x49) mime = "image/webp";
    const b64 = buf.toString("base64");
    logoImg = `<img src="data:${escapeHtml(mime)};base64,${b64}" class="logo" />`;
  }

  // PO direction: our company (settings) = Odběratel (buyer);
  // the sklad_suppliers record = Dodavatel (supplier).
  const buyer = buildAddressLines(settings, true, t); // company → Odběratel
  const supplierAddr = buildSupplierLines(supplier, t); // supplier → Dodavatel

  const buyerLinesHtml = buyer.lines
    .map((l) => `<div class="address-line">${escapeHtml(l)}</div>`)
    .join("");
  const supplierLinesHtml = supplierAddr.lines
    .map((l) => `<div class="address-line">${escapeHtml(l)}</div>`)
    .join("");

  // Items — NET + per-line VAT-on-top, rounded per line (same math the
  // service computeIssuedOrderTotals uses; mirrors the confirmation loop).
  let subtotal = 0;
  let totalVat = 0;
  const vatSummary: Record<string, { base: number; vat: number }> = {};
  const itemsHtml = items
    .map((it, i) => {
      const qty = Number(it.quantity) || 0;
      const unitPrice = Number(it.unit_price) || 0;
      const rate =
        it.vat_rate != null && it.vat_rate !== ""
          ? Number(it.vat_rate)
          : docRate;
      const lineSubtotal = qty * unitPrice;
      const lineVat = applyVat
        ? Math.round(lineSubtotal * (rate / 100) * 100) / 100
        : 0;
      const lineTotal = lineSubtotal + lineVat;

      subtotal += lineSubtotal;
      totalVat += lineVat;
      const key = String(rate);
      if (!vatSummary[key]) vatSummary[key] = { base: 0, vat: 0 };
      vatSummary[key].base += lineSubtotal;
      vatSummary[key].vat += lineVat;

      const qtyDecimals = Math.floor(qty) === qty ? 0 : 2;
      const descHtml = `${escapeHtml(it.description)}${
        it.item_description
          ? `<div class="item-sub">${escapeHtml(it.item_description)}</div>`
          : ""
      }`;
      return `<tr>
            <td class="row-num">${i + 1}</td>
            <td class="desc">${descHtml}</td>
            <td class="center">${formatNum(qty, qtyDecimals)}${it.unit ? ` / ${escapeHtml(it.unit)}` : ""}</td>
            <td class="right">${formatNum(unitPrice)}</td>
            <td class="right">${formatNum(lineSubtotal)}</td>
            <td class="center">${applyVat ? Math.floor(rate) : 0}%</td>
            <td class="right">${formatNum(lineVat)}</td>
            <td class="right total-cell">${formatNum(lineTotal)}</td>
        </tr>`;
    })
    .join("");

  subtotal = Math.round(subtotal * 100) / 100;
  totalVat = Math.round(totalVat * 100) / 100;
  const totalToPay = Math.round((subtotal + totalVat) * 100) / 100;

  let vatDetailHtml = "";
  if (applyVat) {
    for (const [rate, data] of Object.entries(vatSummary)) {
      if (data.vat > 0) {
        vatDetailHtml += `
        <div class="row">
          <span class="label">${escapeHtml(t.vat_label)} ${Math.floor(Number(rate))}%:</span>
          <span class="value">${formatNum(data.vat)} ${escapeHtml(currency)}</span>
        </div>`;
      }
    }
  }

  const notesRaw = order.notes ?? "";
  const notesStripped = notesRaw.replace(/<[^>]*>/g, "").trim();
  const notesHtml = notesStripped
    ? `
  <div class="invoice-notes">
    <div class="invoice-notes-label">${escapeHtml(t.notes)}</div>
    <div class="invoice-notes-content">${cleanQuillHtml(DOMPurify.sanitize(notesRaw))}</div>
  </div>
  `
    : "";

  const issueDateStr = formatDate(order.order_date);
  const deliveryDateStr = formatDate(order.delivery_date);

  // Order-specific terms (purchase-order addition; not on invoices).
  let termsHtml = "";
  if (order.delivery_terms) {
    termsHtml += `<div class="terms-row"><span class="lbl">${escapeHtml(t.delivery_terms)}</span> ${escapeHtml(order.delivery_terms)}</div>`;
  }
  if (order.payment_terms) {
    termsHtml += `<div class="terms-row"><span class="lbl">${escapeHtml(t.payment_terms)}</span> ${escapeHtml(order.payment_terms)}</div>`;
  }
  const termsBlock = termsHtml ? `<div class="terms">${termsHtml}</div>` : "";

  // Quill indent CSS
  let indentCSS = "";
  for (let n = 1; n <= 9; n++) {
    const pad = n * 3;
    const liPad = n * 3 + 1.5;
    indentCSS += `  .ql-indent-${n} { padding-left: ${pad}em; }\n`;
    indentCSS += `  li.ql-indent-${n} { padding-left: ${liPad}em; }\n`;
  }

  return `<!DOCTYPE html>
<html lang="${escapeHtml(lang)}">
<head>
<meta charset="utf-8" />
<title>${escapeHtml(t.heading)} ${poNumber}</title>
<style>
  @page {
    size: A4;
    margin: 8mm 12mm 10mm 12mm;
  }
  * { margin: 0; padding: 0; box-sizing: border-box; }
  html, body {
    font-family: "Segoe UI", Tahoma, Arial, sans-serif;
    font-size: 10pt;
    color: #1a1a1a;
    width: 186mm;
  }

  .invoice-page {
    display: flex;
    flex-direction: column;
    min-height: calc(297mm - 27mm);
  }
  .invoice-content { flex: 1 1 auto; }
  .invoice-footer {
    flex-shrink: 0;
  }

  .accent { color: #de3a3a; }

  /* ── Hlavicka ── */
  .invoice-header {
    display: flex;
    justify-content: space-between;
    align-items: center;
    margin-bottom: 1mm;
    padding-bottom: 1mm;
    border-bottom: 2pt solid #de3a3a;
  }
  .invoice-header .left {
    display: flex;
    align-items: center;
    gap: 3mm;
  }
  .logo-header { text-align: left; }
  .company-title {
    font-size: 12pt;
    font-weight: 700;
  }
  .invoice-title {
    font-size: 13pt;
    font-weight: 700;
    color: #de3a3a;
    text-align: right;
    letter-spacing: 0.03em;
  }

  .logo {
    max-width: 42mm;
    max-height: 22mm;
    object-fit: contain;
  }

  /* ── Adresy ── */
  .header-grid {
    border: 0.5pt solid #d0d0d0;
    border-collapse: collapse;
    width: 100%;
    margin-bottom: 1mm;
  }
  .header-grid td {
    padding: 2mm 3mm;
    border: 0.5pt solid #d0d0d0;
    vertical-align: top;
    width: 50%;
  }
  .header-grid td.addr-supplier {
    background: #f5f5f5;
  }
  .header-grid td.details-bank {
    background: #f5f5f5;
  }
  .address-label {
    font-size: 8pt;
    font-weight: 700;
    color: #de3a3a;
    text-transform: uppercase;
    letter-spacing: 0.08em;
    margin-bottom: 1mm;
  }
  .address-name {
    font-size: 10pt;
    font-weight: 700;
    color: #1a1a1a;
    line-height: 1.3;
    margin-bottom: 1mm;
  }
  .address-line {
    font-size: 9pt;
    color: #444;
    line-height: 1.5;
  }

  /* ── Detaily (banka + datumy) — inside header-grid ── */

  .info-row {
    display: flex;
    align-items: baseline;
    font-size: 9pt;
    padding: 1mm 0;
    border-bottom: 0.5pt solid #f0f0f0;
  }
  .info-row:last-child { border-bottom: none; }
  .info-row .lbl {
    color: #666;
    font-weight: 400;
    flex-shrink: 0;
    white-space: nowrap;
    margin-right: 3mm;
  }
  .info-row .val {
    font-weight: 600;
    color: #1a1a1a;
    text-align: right;
    margin-left: auto;
  }

  /* VS/KS blok */
  .vs-block {
    font-size: 9pt;
    line-height: 1.4;
    padding-top: 2mm;
  }

  /* ── Polozky ── */
  .billing-label {
    font-weight: 700;
    color: #1a1a1a;
    font-size: 10pt;
    padding: 2mm 0 1mm 0;
    border-bottom: 1.5pt solid #de3a3a;
    margin-bottom: 0;
    text-transform: uppercase;
    letter-spacing: 0.03em;
  }

  table.items {
    width: 100%;
    table-layout: fixed;
    border-collapse: collapse;
    font-size: 9pt;
    margin-bottom: 2mm;
  }
  table.items thead th {
    font-size: 8.5pt;
    font-weight: 600;
    color: #646464;
    padding: 4px 4px;
    text-align: left;
    border-bottom: 0.5pt solid #d0d0d0;
    white-space: nowrap;
  }
  table.items thead th.center { text-align: center; }
  table.items thead th.right { text-align: right; }
  table.items tbody td {
    padding: 4px 4px;
    border-bottom: 0.5pt solid #e0e0e0;
    vertical-align: middle;
    color: #1a1a1a;
  }
  table.items tbody tr:nth-child(even) { background: #f8f9fa; }
  table.items tbody td.center { text-align: center; white-space: nowrap; }
  table.items tbody td.right { text-align: right; }
  table.items tbody td.row-num {
    text-align: center;
    color: #969696;
    font-size: 9pt;
  }
  table.items tbody td.desc {
    font-size: 9pt;
    font-weight: 600;
    color: #1a1a1a;
  }
  table.items tbody td.desc .item-sub {
    font-weight: 400;
    font-size: 8.5pt;
    color: #666;
    margin-top: 0.5mm;
  }
  table.items tbody td.total-cell { font-weight: 700; }

  /* Soucet + total - styl z nabidek */
  .totals-wrapper {
    display: flex;
    justify-content: flex-end;
    margin-top: 2mm;
  }
  .totals {
    width: 80mm;
  }
  .totals .detail-rows {
    margin-bottom: 3mm;
  }
  .totals .row {
    display: flex;
    justify-content: space-between;
    align-items: baseline;
    font-size: 9.5pt;
    color: #1a1a1a;
    margin-bottom: 2mm;
  }
  .totals .grand {
    border-top: 0.5pt solid #e0e0e0;
    padding-top: 4mm;
    display: flex;
    justify-content: space-between;
    align-items: baseline;
  }
  .totals .grand .label {
    font-size: 10.5pt;
    font-weight: 400;
    color: #1a1a1a;
    align-self: center;
  }
  .totals .grand .value {
    font-size: 14pt;
    font-weight: 600;
    color: #1a1a1a;
    border-bottom: 2.5pt solid #de3a3a;
    padding-bottom: 1mm;
  }
  .totals .currency-note {
    text-align: right;
    font-size: 8pt;
    color: #1a1a1a;
    margin-top: 2mm;
  }

  /* Dodaci / platebni podminky (PO-specificke) */
  .terms {
    margin-top: 4mm;
    font-size: 9pt;
    line-height: 1.5;
    color: #1a1a1a;
  }
  .terms-row { margin-bottom: 1mm; }
  .terms-row .lbl {
    font-weight: 600;
    color: #555;
  }

  /* Vystavil */
  .issued-by {
    font-size: 9pt;
    margin: 2mm 0;
    line-height: 1.4;
  }
  .issued-by .lbl { font-weight: 600; }

  /* Upozorneni */
  .notice {
    font-size: 8pt;
    color: #1a1a1a;
    margin: 2mm 0;
    line-height: 1.3;
  }

  /* Poznamky */
  .invoice-notes {
    margin-top: 4mm;
    font-size: 10pt;
    line-height: 1.5;
    color: #1a1a1a;
  }
  .invoice-notes-label {
    font-weight: 600;
    font-size: 9pt;
    text-transform: uppercase;
    color: #555;
    margin-bottom: 1mm;
  }
  .invoice-notes-content p { margin: 0 0 0.4em 0; }
  .invoice-notes-content ul, .invoice-notes-content ol { margin: 0 0 0.4em 1.5em; }
  .invoice-notes-content li { margin-bottom: 0.2em; }
  .invoice-notes-content,
  .invoice-notes-content * {
    font-family: Tahoma, sans-serif !important;
  }
  .invoice-notes-content { font-size: 14px; }
  .invoice-notes-content h1 { font-size: 20px; }
  .invoice-notes-content h2 { font-size: 18px; }
  .invoice-notes-content h3 { font-size: 16px; }
  .invoice-notes-content h4 { font-size: 15px; }

  /* Quill fonty – v PDF vynuceno Tahoma */
  [class*="ql-font-"] { font-family: Tahoma, sans-serif !important; }
  .ql-align-center  { text-align: center; }
  .ql-align-right   { text-align: right; }
  .ql-align-justify { text-align: justify; }
${indentCSS}

  @media print {
    body { -webkit-print-color-adjust: exact; print-color-adjust: exact; }
  }
  @media screen {
    html { background: #525659; }
    body {
      width: 100vw !important;
      margin: 0;
      padding: 30px 0;
      background: transparent;
      display: flex;
      flex-direction: column;
      align-items: center;
      min-height: 100vh;
      overflow-x: hidden;
    }
    .invoice-page {
      width: 210mm;
      min-height: 297mm;
      padding: 15mm;
      background: white;
      box-shadow: 0 4px 20px rgba(0,0,0,0.3);
      box-sizing: border-box;
      border-radius: 2px;
    }
  }
</style>
</head>
<body>
<div class="invoice-page">
<div class="invoice-content">

  <!-- Hlavicka -->
  <div class="invoice-header">
    <div class="left">
      ${logoImg ? `<div class="logo-header">${logoImg}</div>` : ""}
    </div>
    <div class="invoice-title">${escapeHtml(t.heading)} ${poNumber}</div>
  </div>

  <!-- Odberatel (nase firma) / Dodavatel (sklad_suppliers) + Detaily -->
  <table class="header-grid" cellspacing="0">
    <tr>
      <td>
        <div class="address-label">${escapeHtml(t.buyer)}</div>
        <div class="address-name">${escapeHtml(buyer.name)}</div>
        ${buyerLinesHtml}
      </td>
      <td class="addr-supplier">
        <div class="address-label">${escapeHtml(t.supplier)}</div>
        <div class="address-name">${escapeHtml(supplierAddr.name)}</div>
        ${supplierLinesHtml}
      </td>
    </tr>
    <tr>
      <td class="details-bank">
        <div class="info-row"><span class="lbl">${escapeHtml(t.issue_date)}</span> <span class="val">${escapeHtml(issueDateStr) || "—"}</span></div>
        ${deliveryDateStr ? `<div class="info-row"><span class="lbl">${escapeHtml(t.delivery_date)}</span> <span class="val">${escapeHtml(deliveryDateStr)}</span></div>` : ""}
      </td>
      <td></td>
    </tr>
  </table>

  <!-- Polozky -->
  <div class="billing-label">${escapeHtml(t.billing)}</div>
  <table class="items">
    <thead>
      <tr>
        <th class="center" style="width:3%">${escapeHtml(t.col_no)}</th>
        <th style="width:36%">${escapeHtml(t.col_desc)}</th>
        <th class="center" style="width:10%">${escapeHtml(t.col_qty)}</th>
        <th class="right" style="width:10%">${escapeHtml(t.col_unit_price)}</th>
        <th class="right" style="width:10%">${escapeHtml(t.col_price)}</th>
        <th class="center" style="width:5%">${escapeHtml(t.col_vat_pct)}</th>
        <th class="right" style="width:10%">${escapeHtml(t.col_vat)}</th>
        <th class="right" style="width:16%">${escapeHtml(t.col_total)}</th>
      </tr>
    </thead>
    <tbody>
      ${itemsHtml}
    </tbody>
  </table>

  <!-- Soucty -->
  <div class="totals-wrapper">
    <div class="totals">
      <div class="detail-rows">
        <div class="row">
          <span class="label">${escapeHtml(t.subtotal)}</span>
          <span class="value">${formatNum(subtotal)} ${escapeHtml(currency)}</span>
        </div>${vatDetailHtml}
      </div>
      <div class="grand">
        <span class="label">${escapeHtml(t.total)}</span>
        <span class="value">${formatNum(totalToPay)} ${escapeHtml(currency)}</span>
      </div>
      <div class="currency-note">${escapeHtml(t.amounts_in)} ${escapeHtml(currency)}</div>
    </div>
  </div>

  ${notesHtml}

  ${termsBlock}

</div><!-- /.invoice-content -->
<div class="invoice-footer">

  <!-- Vystavil (jmeno prihlaseneho uzivatele) -->
  <div class="issued-by"><span class="lbl">${escapeHtml(t.issued_by)}</span> ${escapeHtml(issuer.name)}</div>

</div><!-- /.invoice-footer -->
</div><!-- /.invoice-page -->

</body>
</html>`;
}

export default async function issuedOrdersPdfRoutes(fastify: FastifyInstance) {
  fastify.get<{ Params: { id: string } }>(
    "/:id",
    // Mirror invoices-pdf (invoices.view): view-level access serves BOTH the
    // user-facing Export PDF and the ?save=1 NAS archive. There is no separate
    // orders.export permission (it was dead — gated nothing — and was removed);
    // orders.view is the single gate for both paths.
    { preHandler: requirePermission("orders.view") },
    async (request, reply) => {
      const id = parseId(request.params.id, reply);
      if (id === null) return;
      const query = request.query as Record<string, string>;
      const lang: Lang = query.lang === "en" ? "en" : "cs";

      try {
        const order = await prisma.issued_orders.findUnique({ where: { id } });
        if (!order) {
          return reply
            .status(404)
            .type("text/html")
            .send("<html><body><h1>Objednávka nenalezena</h1></body></html>");
        }
        const items = await prisma.issued_order_items.findMany({
          where: { issued_order_id: id },
          orderBy: { position: "asc" },
        });
        const supplier = order.supplier_id
          ? ((await prisma.sklad_suppliers.findUnique({
              where: { id: order.supplier_id },
            })) as Record<string, unknown> | null)
          : null;
        const settings = (await prisma.company_settings.findFirst()) as Record<
          string,
          unknown
        > | null;

        // Footer issuer = the logged-in user (there is no user FK on the
        // order). The route runs under requirePermission("orders.view") so
        // authData is always present here. Mirrors orders-pdf.ts userName.
        const issuer = {
          name: `${request.authData?.firstName ?? ""} ${request.authData?.lastName ?? ""}`.trim(),
        };

        const html = renderIssuedOrderHtml(
          order,
          items,
          supplier,
          settings,
          lang,
          issuer,
        );

        // ?save=1 → archive the PDF to NAS instead of returning it (mirrors
        // invoices-pdf). A draft has no po_number → the guard skips it.
        const saveMode = query.save === "1";
        if (saveMode && nasOrdersManager.isConfigured() && order.po_number) {
          const baseDate = order.order_date
            ? new Date(order.order_date)
            : new Date();
          nasOrdersManager.cleanIssued(order.po_number);
          const pdfBuffer = await htmlToPdf(html);
          nasOrdersManager.saveIssuedPdf(
            order.po_number,
            baseDate.getFullYear(),
            baseDate.getMonth() + 1,
            pdfBuffer,
          );
          return success(reply, null, 200, "PDF uloženo");
        }

        const pdf = await htmlToPdf(html);
        const filename = `Objednavka-${order.po_number || String(id)}.pdf`;
        return reply
          .type("application/pdf")
          .header("Content-Disposition", `attachment; filename="${filename}"`)
          .send(pdf);
      } catch (err) {
        request.log.error(err, "Issued order PDF generation failed");
        return reply
          .status(500)
          .type("text/html")
          .send("<html><body><h1>Chyba při generování PDF</h1></body></html>");
      }
    },
  );
}