package app

import (
	"errors"
	"os"
	"os/exec"
	"path/filepath"
	"strconv"
	"strings"

	tea "charm.land/bubbletea/v2"

	"git.kebcloud.no/keb/lazysecrets/internal/browser"
	"git.kebcloud.no/keb/lazysecrets/internal/provider"
)

// Opening a repo's file (e): SOPS files with sops edit, which decrypts
// them for the editor and encrypts them again after. Other files, inside
// nvim: in that nvim, once lazysecrets has quit; else in $VISUAL or
// $EDITOR, coming back after; else in the system's default app. On a
// secret, editors that can open at a line start on its key.

type editDoneMsg struct {
	c    provider.Container
	name string
	err  error
}

// sopsUnchanged is sops edit's exit code when the file wasn't changed.
const sopsUnchanged = 200

// edit opens the selected file, or the file of the selected secret.
func (m *Model) edit() tea.Cmd {
	var c provider.Container
	var o *provider.Object
	switch m.focus {
	case paneSources:
		m.flash = warning("select a file to open it")
		return nil
	case paneContainers:
		sel, ok := m.containers.Selected()
		if !ok {
			return nil
		}
		c = sel
	default:
		sel, ok := m.detail.Secret()
		if !ok {
			return nil
		}
		c, o = sel.Container, &sel
	}
	files, ok := m.providerFor(c.Source).(provider.Files)
	if !ok {
		m.flash = warning("only SOPS and .env files in repos can be opened")
		return nil
	}
	f, err := files.File(c, o)
	if err != nil {
		m.flash = flash{text: "open: " + err.Error(), isErr: true}
		return nil
	}
	if o != nil {
		m.usedObject(*o)
	} else {
		m.usedContainer(c)
	}
	name := filepath.Base(f.Path)
	finished := func(err error) tea.Msg { return editDoneMsg{c: c, name: name, err: err} }

	if f.Sops != "" {
		cmd := exec.Command(f.Sops, "edit", f.Path)
		cmd.Dir = filepath.Dir(f.Path) // sops looks for .sops.yaml from here
		m.flash = flash{}
		return tea.ExecProcess(cmd, finished)
	}
	if server := m.getenv("NVIM"); server != "" {
		open := m.nvimOpen
		return func() tea.Msg {
			if err := open(server, f.Path, f.Line); err != nil {
				return finished(err)
			}
			return tea.QuitMsg{}
		}
	}
	if editor := cmpOr(m.getenv("VISUAL"), m.getenv("EDITOR")); editor != "" {
		// Through the shell, so EDITOR can carry arguments ("code -w").
		args := append([]string{"-c", editor + ` "$@"`, "lazysecrets"}, editorArgs(editor, f)...)
		m.flash = flash{}
		return tea.ExecProcess(exec.Command("/bin/sh", args...), finished)
	}
	switch err := m.openURL(f.Path); {
	case errors.Is(err, browser.ErrRemote):
		m.flash = warning("set $EDITOR to open files over SSH")
	case err != nil:
		m.flash = flash{text: "open: " + err.Error(), isErr: true}
	default:
		m.flash = done("opened " + name)
	}
	return nil
}

// editorArgs opens f at its line, for editors known to take one.
func editorArgs(editor string, f provider.File) []string {
	fields := strings.Fields(editor)
	if f.Line == 0 || len(fields) == 0 {
		return []string{f.Path}
	}
	at := f.Path + ":" + strconv.Itoa(f.Line)
	switch filepath.Base(fields[0]) {
	case "vi", "vim", "nvim", "nano", "emacs", "emacsclient", "micro", "kak", "mg", "ne", "joe", "vis":
		return []string{"+" + strconv.Itoa(f.Line), f.Path}
	case "hx", "helix", "subl", "zed":
		return []string{at}
	case "code", "codium", "cursor", "windsurf":
		return []string{"-g", at}
	}
	return []string{f.Path}
}

// handleEditDone reports how editing went and reloads the file's secrets:
// their names, lines or values may have changed.
func (m *Model) handleEditDone(msg editDoneMsg) tea.Cmd {
	var exit *exec.ExitError
	switch {
	case errors.As(msg.err, &exit) && exit.ExitCode() == sopsUnchanged:
		m.flash = flash{text: msg.name + " unchanged"}
		return nil
	case errors.Is(msg.err, exec.ErrNotFound):
		m.flash = flash{text: "open " + msg.name + ": " + msg.err.Error() + " (is sops installed?)", isErr: true}
		return nil
	case msg.err != nil:
		m.flash = flash{text: "open " + msg.name + ": " + msg.err.Error(), isErr: true}
		return nil
	}
	m.flash = done("closed " + msg.name)
	if c, ok := m.containers.Selected(); ok && containerKey(c) == containerKey(msg.c) {
		m.hideValue()
		m.secrets.Refresh()
		return m.loadObjects(c, m.objType, m.selContainer)
	}
	return nil
}

// nvimLua opens a file in the nvim lazysecrets runs in. If lazysecrets is
// that terminal's own process (the nvim plugin, or :terminal lazysecrets),
// it waits for the terminal to close, so the file opens in the window
// below rather than in one about to close. Otherwise (a shell in a
// terminal) it opens it in the previous window now.
const nvimLua = `local path, line, pid = ...
local function open()
  local ok, err = pcall(vim.cmd, "edit " .. vim.fn.fnameescape(path))
  if not ok then vim.notify("lazysecrets: " .. err, vim.log.levels.ERROR) return end
  if line > 0 then pcall(vim.api.nvim_win_set_cursor, 0, { line, 0 }) vim.cmd("normal! zz") end
end
for _, b in ipairs(vim.api.nvim_list_bufs()) do
  if vim.bo[b].buftype == "terminal" and vim.b[b].terminal_job_pid == pid then
    vim.api.nvim_create_autocmd("TermClose", { buffer = b, once = true, callback = function() vim.defer_fn(open, 50) end })
    return
  end
end
pcall(vim.cmd, "wincmd p")
open()`

// nvimOpen asks the nvim at server to open path at line.
func nvimOpen(server, path string, line int) error {
	q := func(s string) string { return "'" + strings.ReplaceAll(s, "'", "''") + "'" }
	lua := strings.ReplaceAll(nvimLua, "\n", " ")
	expr := "luaeval('load(_A[1])(_A[2], _A[3], _A[4])', [" + q(lua) + ", " + q(path) + ", " +
		strconv.Itoa(line) + ", " + strconv.Itoa(os.Getpid()) + "])"
	out, err := exec.Command("nvim", "--server", server, "--remote-expr", expr).CombinedOutput()
	if err != nil {
		if msg := strings.TrimSpace(string(out)); msg != "" {
			return errors.New(msg)
		}
		return err
	}
	return nil
}