"""
Painel de Clientes — monta os routers de CLIENTE, CLIENTE_CONTATO e o
gerador de chave manual. Ver docs/superpowers/specs/2026-08-13-painel-clientes-web-design.md.
"""
from fastapi import Depends, FastAPI, Request
from fastapi.responses import RedirectResponse
from fastapi.staticfiles import StaticFiles

from .auth import exigir_login
from .csrf import CSRF_COOKIE_NAME, gerar_token
from .routers import chave_manual, clientes, contatos

app = FastAPI(title="Painel de Clientes", docs_url=None, redoc_url=None, openapi_url=None)
app.mount("/static", StaticFiles(directory="app/static"), name="static")
app.include_router(clientes.router)
app.include_router(contatos.router)
app.include_router(chave_manual.router)


@app.middleware("http")
async def csrf_cookie_middleware(request: Request, call_next):
    """
    Garante que todo navegador que acessa o painel tenha um cookie
    csrf_token (gerado uma vez, HttpOnly). Disponibiliza o valor em
    request.state.csrf_token para os templates embutirem em formulários —
    ver app/csrf.py para a validação do lado do POST.
    """
    token_existente = request.cookies.get(CSRF_COOKIE_NAME)
    precisa_definir_cookie = token_existente is None
    request.state.csrf_token = token_existente or gerar_token()

    response = await call_next(request)

    if precisa_definir_cookie:
        response.set_cookie(
            CSRF_COOKIE_NAME, request.state.csrf_token, httponly=True, samesite="strict"
        )
    return response


@app.get("/")
def raiz(usuario: str = Depends(exigir_login)):
    return RedirectResponse(url="/clientes")