"""
CALEA SSI Plan — Audio Bridging / Conferencing variant.

Audio bridging / conferencing is narrowly scoped for CALEA purposes.
To the extent the service qualifies as an information service rather
than as telecommunications (47 USC § 153(24) vs. § 153(53)), the CALEA
covered-entity definition at 47 USC § 1001(8)(B)(ii) may not apply.
For the telecommunications-service portion that does apply, intercept
capability is provisioned at the bridge/softswitch; non-real-time
replay of recordings is treated as a stored-record production under
18 USC § 2703 rather than as a real-time intercept under Title III.
"""
from __future__ import annotations

import logging
from datetime import date
from pathlib import Path
from typing import Optional

LOG = logging.getLogger("document_gen.calea_audio_bridge")

try:
    from docx import Document
    from docx.shared import Pt, Inches, RGBColor
    from docx.enum.text import WD_ALIGN_PARAGRAPH
except ImportError:
    LOG.warning("python-docx not installed — CALEA Audio Bridge unavailable")
    Document = None  # type: ignore[assignment,misc]

NAVY = RGBColor(0x1A, 0x27, 0x44) if Document else None

VARIANT_ID = "audio_bridging"
VARIANT_LABEL = "Audio Bridging / Conferencing"


def _heading(doc, text):
    p = doc.add_paragraph()
    p.paragraph_format.space_before = Pt(12); p.paragraph_format.space_after = Pt(4)
    r = p.add_run(text); r.bold = True; r.font.size = Pt(13); r.font.color.rgb = NAVY


def _body(doc, text, bold=False):
    p = doc.add_paragraph(); p.paragraph_format.space_after = Pt(6)
    r = p.add_run(text); r.font.size = Pt(11); r.bold = bold


def _bullets(doc, items):
    for it in items:
        p = doc.add_paragraph(style="List Bullet")
        p.paragraph_format.left_indent = Inches(0.25)
        p.paragraph_format.space_after = Pt(3)
        p.clear(); r = p.add_run(it); r.font.size = Pt(11)


def generate_calea_audio_bridge(
    output_path: str,
    entity_name: str,
    frn: str = "",
    law_enforcement_contact: Optional[dict] = None,
    cpni_protection_officer: Optional[dict] = None,
    network_infrastructure_summary: str = "",
    interception_support_method: str = "",
    reporting_year: int = 0,
    signatory_name: str = "",
    signatory_title: str = "Chief Executive Officer",
    effective_date: str = "",
    next_review_date: str = "",
    reviewer_name: str = "Justin Hannah",
    reviewer_company: str = "Performance West Inc.",
    **_: dict,
) -> Optional[str]:
    if Document is None:
        LOG.error("python-docx not installed")
        return None

    le = law_enforcement_contact or {}
    cpni = cpni_protection_officer or {}
    today = date.today()
    effective = effective_date or today.strftime("%m/%d/%Y")
    next_review = next_review_date or today.replace(year=today.year + 1).strftime("%m/%d/%Y")

    doc = Document()
    for s in doc.sections:
        s.top_margin = Inches(1); s.bottom_margin = Inches(1)
        s.left_margin = Inches(1.25); s.right_margin = Inches(1.25)

    title = doc.add_paragraph(); title.alignment = WD_ALIGN_PARAGRAPH.CENTER
    tr = title.add_run("System Security and Integrity (SSI) Plan")
    tr.font.size = Pt(15); tr.bold = True; tr.font.color.rgb = NAVY
    sub = doc.add_paragraph(); sub.alignment = WD_ALIGN_PARAGRAPH.CENTER
    sr = sub.add_run(entity_name); sr.font.size = Pt(13); sr.bold = True
    vsub = doc.add_paragraph(); vsub.alignment = WD_ALIGN_PARAGRAPH.CENTER
    vr = vsub.add_run(f"Variant: {VARIANT_LABEL}")
    vr.font.size = Pt(11); vr.italic = True
    cite = doc.add_paragraph(); cite.alignment = WD_ALIGN_PARAGRAPH.CENTER
    cr = cite.add_run("Pursuant to 47 U.S.C. \u00a7 229 and 47 CFR \u00a7 1.20003")
    cr.font.size = Pt(10); cr.italic = True
    cite.paragraph_format.space_after = Pt(18)

    _heading(doc, "1. Purpose and Scope Note")
    _body(doc, (
        f"This SSI Plan governs {entity_name}'s compliance with CALEA to "
        f"the extent {entity_name}'s audio bridging / conferencing "
        f"offerings constitute telecommunications service under 47 USC "
        f"\u00a7 153(53) or are otherwise within the CALEA covered-entity "
        f"definition at 47 USC \u00a7 1001(8). Portions of the service "
        f"that constitute information service under 47 USC \u00a7 153(24) "
        f"are outside the scope of CALEA."
    ))

    _heading(doc, "2. Scope and Applicability")
    _body(doc, (
        f"{entity_name} operates conference-bridge / softswitch elements "
        f"and ingress / egress SIP trunks connecting to the PSTN.  For "
        f"the telecommunications-service portion of the offering, CALEA "
        f"obligations attach; for any information-service portion "
        f"(non-real-time recorded replay, data-only collaboration "
        f"features), CALEA does not apply."
    ))

    _heading(doc, "3. Designated Law Enforcement Contact (24-hour)")
    _body(doc, (
        f"Per 47 CFR \u00a7 1.20003(a)(1), {entity_name} designates the "
        f"following senior officer as 24-hour contact for law enforcement "
        f"service of process (court orders, pen register / trap-and-trace, "
        f"Title III)."
    ))
    _bullets(doc, [
        f"Name: {le.get('name') or '[TO BE POPULATED]'}",
        f"Title: {le.get('title') or ''}",
        f"Phone (24-hour): {le.get('phone') or ''}",
        f"Email (24-hour): {le.get('email_24h') or ''}",
        f"Backup contact: {le.get('backup_name') or '[TO BE POPULATED]'}",
    ])

    _heading(doc, "4. Network Architecture and Interception Capability")
    _body(doc, network_infrastructure_summary or (
        f"{entity_name} operates a conference-bridge softswitch with SIP "
        "trunks for inbound / outbound PSTN connectivity. Participant "
        "identities are captured via caller-ID plus dial-in PIN."
    ))
    _body(doc, interception_support_method or (
        f"For real-time intercept orders directed at an identified "
        f"participant or conference, {entity_name} provisions LI at the "
        f"conference-bridge softswitch, mirroring content and "
        f"call-identifying information to the requesting law-enforcement "
        f"agency in a CALEA-safe-harbor-compliant format.  Non-real-time "
        f"productions (recorded conferences lawfully requested under "
        f"18 USC \u00a7 2703) are handled as stored-record productions "
        f"under the separate subpoena-response procedure and are not "
        f"treated as real-time intercepts."
    ))

    _heading(doc, "5. CPNI Safeguards")
    _body(doc, (
        f"{entity_name} maintains a separate CPNI procedure statement. "
        f"The CPNI Protection Officer is:"
    ))
    _bullets(doc, [
        f"Name: {cpni.get('name') or '[TO BE POPULATED]'}",
        f"Title: {cpni.get('title') or 'CPNI Protection Officer'}",
    ])

    _heading(doc, "6. Personnel Vetting and Training")
    _bullets(doc, [
        "Annual CALEA + CPNI training for personnel with bridge-admin or "
        "subpoena-response duties.",
        "Background checks performed prior to grant of access.",
        "Access revoked within 24 hours of termination.",
        "Bridge-admin and LI actions attributed to authenticated named "
        "users.",
    ])

    _heading(doc, "7. Supervisory Review")
    _body(doc, (
        f"The {le.get('title') or 'Designated Senior Officer'} reviews LI "
        f"and subpoena-response activity at least quarterly."
    ))

    _heading(doc, "8. Records Retention")
    _body(doc, (
        "LI provisioning and service-of-process records retained ten (10) "
        "years per 47 CFR \u00a7 1.20003(b); CPNI access logs retained at "
        "least two (2) years per 47 CFR \u00a7 64.2009."
    ))

    _heading(doc, "9. Annual Review")
    _body(doc, (
        f"Reviewed at least annually. Next scheduled review: {next_review}."
    ))

    _heading(doc, "10. Certification")
    _body(doc, (
        f"I, {signatory_name or '[Authorized Officer]'}, as "
        f"{signatory_title} of {entity_name}, certify that I have "
        f"reviewed this SSI Plan and that {entity_name} complies with 47 "
        f"U.S.C. \u00a7 229 and 47 CFR \u00a7 1.20003 with respect to "
        f"the telecommunications-service portion of its offerings."
    ))
    _body(doc, "")
    doc.add_paragraph("_" * 45)
    _body(doc, signatory_name or "[Authorized Officer]", bold=True)
    _body(doc, f"{signatory_title}, {entity_name}")
    _body(doc, f"Effective Date: {effective}")
    if frn: _body(doc, f"FRN: {frn}")
    _body(doc, f"Reviewed By: {reviewer_name}, {reviewer_company}")
    _body(doc, f"Next Review Date: {next_review}")

    out = Path(output_path)
    out.parent.mkdir(parents=True, exist_ok=True)
    doc.save(str(out))
    LOG.info("CALEA Audio Bridge SSI plan generated: %s", out)
    return str(out)