import {
  APIErrorCode,
  APIException,
  type CreateUrlDumpRequest,
  type Dump,
  type UpdateDumpRequest,
} from "../model/interfaces.ts";
import { db, dumpApiToRow, dumpRowToApi, isDumpRow } from "../model/db.ts";
import { fetchRichContent, isValidHttpUrl } from "./rich-content-service.ts";
import {
  broadcastDumpDeleted,
  broadcastDumpUpdated,
  broadcastNewDump,
} from "./ws-service.ts";
import {
  notifyMentions,
  notifyUserFollowersNewDump,
} from "./notification-service.ts";
import { makeSlug, UUID_RE } from "../lib/slugify.ts";
import { DUMPS_DIR } from "../lib/upload.ts";

const MAX_FILE_SIZE = 50 * 1024 * 1024; // 50 MB

const ALLOWED_MIME_PREFIXES = ["text/", "image/", "video/", "audio/"];
const ALLOWED_MIME_TYPES = new Set([
  "application/pdf",
  "application/json",
  "application/zip",
  "application/x-zip-compressed",
  "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
  "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
  "application/vnd.openxmlformats-officedocument.presentationml.presentation",
  "application/msword",
  "application/vnd.ms-excel",
  "application/vnd.ms-powerpoint",
]);

function isAllowedMime(mime: string): boolean {
  return ALLOWED_MIME_PREFIXES.some((p) => mime.startsWith(p)) ||
    ALLOWED_MIME_TYPES.has(mime);
}

function titleFromUrl(url: string): string {
  try {
    return new URL(url).hostname.replace(/^www\./, "");
  } catch {
    return url;
  }
}

const BASE_COLS =
  "id, kind, title, slug, comment, user_id, created_at, updated_at, url, rich_content, file_name, file_mime, file_size, vote_count, is_private";

const SELECT_COLS = `${BASE_COLS},
  (SELECT COUNT(*) FROM comments WHERE dump_id = dumps.id AND deleted = 0) as comment_count`;

const SELECT_COLS_ALIASED =
  "d.id, d.kind, d.title, d.slug, d.comment, d.user_id, d.created_at, d.updated_at, d.url, d.rich_content, d.file_name, d.file_mime, d.file_size, d.vote_count, d.is_private," +
  " (SELECT COUNT(*) FROM comments WHERE dump_id = d.id AND deleted = 0) as comment_count";

export async function createUrlDump(
  request: CreateUrlDumpRequest,
  userId: string,
): Promise<Dump> {
  if (!isValidHttpUrl(request.url)) {
    throw new APIException(APIErrorCode.BAD_REQUEST, 400, "Invalid URL");
  }

  const dumpId = crypto.randomUUID();
  const createdAt = new Date();
  const richContent = await fetchRichContent(request.url);
  const title = richContent?.title ?? titleFromUrl(request.url);
  const isPrivate = request.isPrivate ?? false;
  const slug = makeSlug(title, dumpId);

  db.prepare(
    `INSERT INTO dumps (id, kind, title, slug, comment, user_id, created_at, url, rich_content, is_private)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?);`,
  ).run(
    dumpId,
    "url",
    title,
    slug,
    request.comment ?? null,
    userId,
    createdAt.toISOString(),
    request.url,
    richContent ? JSON.stringify(richContent) : null,
    isPrivate ? 1 : 0,
  );

  const dump: Dump = {
    id: dumpId,
    kind: "url",
    title,
    slug,
    comment: request.comment,
    userId,
    createdAt,
    url: request.url,
    richContent,
    voteCount: 0,
    commentCount: 0,
    isPrivate,
  };
  if (!isPrivate) {
    broadcastNewDump(dump);
    notifyUserFollowersNewDump(userId, dumpId, title);
  }
  if (request.comment) {
    notifyMentions(userId, request.comment, "dump", dumpId, title);
  }
  return dump;
}

export async function createFileDump(
  file: File,
  comment: string | undefined,
  userId: string,
  isPrivate = false,
): Promise<Dump> {
  if (!isAllowedMime(file.type)) {
    throw new APIException(
      APIErrorCode.BAD_REQUEST,
      400,
      `File type '${file.type}' is not allowed`,
    );
  }
  if (file.size > MAX_FILE_SIZE) {
    throw new APIException(
      APIErrorCode.BAD_REQUEST,
      400,
      "File too large (max 50 MB)",
    );
  }

  const dumpId = crypto.randomUUID();
  const createdAt = new Date();
  const slug = makeSlug(file.name, dumpId);

  await Deno.mkdir(DUMPS_DIR, { recursive: true });
  const data = new Uint8Array(await file.arrayBuffer());

  try {
    await Deno.writeFile(`${DUMPS_DIR}/${dumpId}`, data);

    db.prepare(
      `INSERT INTO dumps (id, kind, title, slug, comment, user_id, created_at, file_name, file_mime, file_size, is_private)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?);`,
    ).run(
      dumpId,
      "file",
      file.name,
      slug,
      comment ?? null,
      userId,
      createdAt.toISOString(),
      file.name,
      file.type,
      file.size,
      isPrivate ? 1 : 0,
    );
  } catch (err) {
    // Roll back the file if DB insert fails
    await Deno.remove(`${DUMPS_DIR}/${dumpId}`).catch(() => {});
    throw err;
  }

  const dump: Dump = {
    id: dumpId,
    kind: "file",
    title: file.name,
    slug,
    comment,
    userId,
    createdAt,
    fileName: file.name,
    fileMime: file.type,
    fileSize: file.size,
    voteCount: 0,
    commentCount: 0,
    isPrivate,
  };
  if (!isPrivate) {
    broadcastNewDump(dump);
    notifyUserFollowersNewDump(userId, dumpId, file.name);
  }
  if (comment) notifyMentions(userId, comment, "dump", dumpId, file.name);
  return dump;
}

// Internal fetch — no privacy check. Use only when ownership is already enforced.
function fetchDump(idOrSlug: string): Dump {
  const row = UUID_RE.test(idOrSlug)
    ? db.prepare(`SELECT ${SELECT_COLS} FROM dumps WHERE id = ?;`).get(idOrSlug)
    : db.prepare(`SELECT ${SELECT_COLS} FROM dumps WHERE slug = ?;`).get(
      idOrSlug,
    );
  if (!row || !isDumpRow(row)) {
    throw new APIException(APIErrorCode.NOT_FOUND, 404, "Dump not found");
  }
  return dumpRowToApi(row);
}

// Public fetch — enforces visibility. Returns 404 for private dumps the requester doesn't own.
export function getDump(dumpId: string, requestingUserId?: string): Dump {
  const dump = fetchDump(dumpId);
  if (dump.isPrivate && dump.userId !== requestingUserId) {
    throw new APIException(APIErrorCode.NOT_FOUND, 404, "Dump not found");
  }
  return dump;
}

export function listDumps(
  page: number,
  limit: number,
  requestingUserId?: string,
): { items: Dump[]; total: number } {
  const offset = (page - 1) * limit;
  // Show public dumps + the requesting user's own private dumps
  const rows = requestingUserId
    ? db.prepare(
      `SELECT ${SELECT_COLS} FROM dumps WHERE (is_private = 0 OR user_id = ?) ORDER BY created_at DESC LIMIT ? OFFSET ?;`,
    ).all(requestingUserId, limit, offset)
    : db.prepare(
      `SELECT ${SELECT_COLS} FROM dumps WHERE is_private = 0 ORDER BY created_at DESC LIMIT ? OFFSET ?;`,
    ).all(limit, offset);
  const totalRow = requestingUserId
    ? db.prepare(
      `SELECT COUNT(*) as count FROM dumps WHERE (is_private = 0 OR user_id = ?);`,
    ).get(requestingUserId) as { count: number } | undefined
    : db.prepare(
      `SELECT COUNT(*) as count FROM dumps WHERE is_private = 0;`,
    ).get() as { count: number } | undefined;

  if (!rows || !rows.every(isDumpRow)) {
    throw new APIException(
      APIErrorCode.SERVER_ERROR,
      500,
      "Malformed dump data",
    );
  }

  return { items: rows.map(dumpRowToApi), total: totalRow?.count ?? 0 };
}

export async function updateDump(
  dumpId: string,
  request: UpdateDumpRequest,
): Promise<Dump> {
  const dump = fetchDump(dumpId);

  const now = new Date();

  // File dumps: only comment and isPrivate are editable
  if (dump.kind === "file") {
    const updatedDump: Dump = {
      ...dump,
      comment: "comment" in request
        ? (request.comment ?? undefined)
        : dump.comment,
      isPrivate: "isPrivate" in request
        ? (request.isPrivate ?? false)
        : dump.isPrivate,
      updatedAt: now,
    };
    db.prepare(
      `UPDATE dumps SET comment = ?, is_private = ?, updated_at = ? WHERE id = ?;`,
    ).run(
      updatedDump.comment ?? null,
      updatedDump.isPrivate ? 1 : 0,
      now.toISOString(),
      dumpId,
    );
    if (updatedDump.isPrivate && !dump.isPrivate) broadcastDumpDeleted(dumpId);
    else if (!updatedDump.isPrivate) broadcastDumpUpdated(updatedDump);
    if (updatedDump.comment) {
      notifyMentions(
        dump.userId,
        updatedDump.comment,
        "dump",
        dumpId,
        updatedDump.title,
      );
    }
    return updatedDump;
  }

  // URL dumps
  const newUrl = request.url ?? dump.url!;

  if (!isValidHttpUrl(newUrl)) {
    throw new APIException(APIErrorCode.BAD_REQUEST, 400, "Invalid URL");
  }

  let { richContent, title } = dump;

  if (newUrl !== dump.url) {
    richContent = await fetchRichContent(newUrl);
    title = richContent?.title ?? titleFromUrl(newUrl);
  }

  const newSlug = makeSlug(title, dumpId);
  const updatedDump: Dump = {
    ...dump,
    title,
    slug: newSlug,
    comment: "comment" in request
      ? (request.comment ?? undefined)
      : dump.comment,
    url: newUrl,
    richContent,
    isPrivate: "isPrivate" in request
      ? (request.isPrivate ?? false)
      : dump.isPrivate,
    updatedAt: now,
  };

  const row = dumpApiToRow(updatedDump);
  const result = db.prepare(
    `UPDATE dumps SET title = ?, slug = ?, comment = ?, url = ?, rich_content = ?, is_private = ?, updated_at = ? WHERE id = ?;`,
  ).run(
    row.title,
    row.slug,
    row.comment,
    row.url,
    row.rich_content,
    row.is_private,
    now.toISOString(),
    row.id,
  );

  if (result.changes === 0) {
    throw new APIException(APIErrorCode.NOT_FOUND, 404, "Dump not found");
  }

  if (updatedDump.isPrivate && !dump.isPrivate) broadcastDumpDeleted(dumpId);
  else if (!updatedDump.isPrivate) broadcastDumpUpdated(updatedDump);
  if (updatedDump.comment) {
    notifyMentions(
      dump.userId,
      updatedDump.comment,
      "dump",
      dumpId,
      updatedDump.title,
    );
  }
  return updatedDump;
}

export async function replaceFileDump(
  dumpId: string,
  file: File,
  comment: string | undefined,
): Promise<Dump> {
  if (!isAllowedMime(file.type)) {
    throw new APIException(
      APIErrorCode.BAD_REQUEST,
      400,
      `File type '${file.type}' is not allowed`,
    );
  }
  if (file.size > MAX_FILE_SIZE) {
    throw new APIException(
      APIErrorCode.BAD_REQUEST,
      400,
      "File too large (max 50 MB)",
    );
  }

  const dump = fetchDump(dumpId);
  if (dump.kind !== "file") {
    throw new APIException(APIErrorCode.BAD_REQUEST, 400, "Not a file dump");
  }

  const data = new Uint8Array(await file.arrayBuffer());
  const filePath = `${DUMPS_DIR}/${dumpId}`;
  // Read old file contents so we can restore on DB failure
  const oldData = await Deno.readFile(filePath).catch(() => null);
  await Deno.writeFile(filePath, data);

  const now = new Date();
  const newSlug = makeSlug(file.name, dumpId);
  try {
    db.prepare(
      `UPDATE dumps SET title = ?, slug = ?, file_name = ?, file_mime = ?, file_size = ?, comment = ?, updated_at = ? WHERE id = ?;`,
    ).run(
      file.name,
      newSlug,
      file.name,
      file.type,
      file.size,
      comment ?? null,
      now.toISOString(),
      dumpId,
    );
  } catch (err) {
    // Roll back the file to its previous contents on DB failure
    if (oldData) await Deno.writeFile(filePath, oldData).catch(() => {});
    else await Deno.remove(filePath).catch(() => {});
    throw err;
  }

  if (comment) notifyMentions(dump.userId, comment, "dump", dumpId, file.name);
  return {
    ...dump,
    title: file.name,
    slug: newSlug,
    fileName: file.name,
    fileMime: file.type,
    fileSize: file.size,
    comment,
    updatedAt: now,
  };
}

export function getDumpsByUser(
  userId: string,
  page: number,
  limit: number,
  includePrivate: boolean,
): { items: Dump[]; total: number } {
  const offset = (page - 1) * limit;
  const privacyFilter = includePrivate ? "" : " AND is_private = 0";
  const rows = db.prepare(
    `SELECT ${SELECT_COLS} FROM dumps WHERE user_id = ?${privacyFilter} ORDER BY created_at DESC LIMIT ? OFFSET ?;`,
  ).all(userId, limit, offset);
  const totalRow = db.prepare(
    `SELECT COUNT(*) as count FROM dumps WHERE user_id = ?${privacyFilter};`,
  ).get(userId) as { count: number } | undefined;
  if (!rows.every(isDumpRow)) {
    throw new APIException(
      APIErrorCode.SERVER_ERROR,
      500,
      "Malformed dump data",
    );
  }
  return { items: rows.map(dumpRowToApi), total: totalRow?.count ?? 0 };
}

export function getVotedDumpsByUser(
  userId: string,
  page: number,
  limit: number,
  requestingUserId: string | null,
): { items: Dump[]; total: number } {
  const offset = (page - 1) * limit;
  const dumpCols = SELECT_COLS_ALIASED;

  let totalRow: { count: number } | undefined;
  let rows: unknown[];

  if (requestingUserId === userId) {
    // Own profile: include private dumps the user themselves voted on and owns.
    rows = db.prepare(
      `SELECT ${dumpCols}
       FROM dumps d
       INNER JOIN votes v ON d.id = v.dump_id
       WHERE v.user_id = ? AND (d.is_private = 0 OR d.user_id = ?)
       ORDER BY v.created_at DESC LIMIT ? OFFSET ?;`,
    ).all(userId, userId, limit, offset);
    totalRow = db.prepare(
      `SELECT COUNT(*) as count FROM dumps d
       INNER JOIN votes v ON d.id = v.dump_id
       WHERE v.user_id = ? AND (d.is_private = 0 OR d.user_id = ?);`,
    ).get(userId, userId) as { count: number } | undefined;
  } else {
    rows = db.prepare(
      `SELECT ${dumpCols}
       FROM dumps d
       INNER JOIN votes v ON d.id = v.dump_id
       WHERE v.user_id = ? AND d.is_private = 0
       ORDER BY v.created_at DESC LIMIT ? OFFSET ?;`,
    ).all(userId, limit, offset);
    totalRow = db.prepare(
      `SELECT COUNT(*) as count FROM dumps d
       INNER JOIN votes v ON d.id = v.dump_id
       WHERE v.user_id = ? AND d.is_private = 0;`,
    ).get(userId) as { count: number } | undefined;
  }

  if (!rows.every(isDumpRow)) {
    throw new APIException(
      APIErrorCode.SERVER_ERROR,
      500,
      "Malformed dump data",
    );
  }
  return { items: rows.map(dumpRowToApi), total: totalRow?.count ?? 0 };
}

export async function refreshDumpMetadata(dumpId: string): Promise<Dump> {
  const dump = fetchDump(dumpId);

  if (dump.kind !== "url" || !dump.url) {
    throw new APIException(
      APIErrorCode.BAD_REQUEST,
      400,
      "Only URL dumps support metadata refresh",
    );
  }

  const richContent = await fetchRichContent(dump.url);
  const title = richContent?.title ?? titleFromUrl(dump.url);

  const updatedDump: Dump = { ...dump, title, richContent };
  const row = dumpApiToRow(updatedDump);
  db.prepare(
    `UPDATE dumps SET title = ?, rich_content = ? WHERE id = ?;`,
  ).run(row.title, row.rich_content, row.id);

  return updatedDump;
}

export async function deleteDump(dumpId: string): Promise<void> {
  const dump = fetchDump(dumpId);

  const result = db.prepare(`DELETE FROM dumps WHERE id = ?;`).run(dumpId);

  if (result.changes === 0) {
    throw new APIException(APIErrorCode.NOT_FOUND, 404, "Dump not found");
  }

  if (dump.kind === "file") {
    await Deno.remove(`${DUMPS_DIR}/${dumpId}`).catch(() => {});
  }

  broadcastDumpDeleted(dumpId);
}