/*
 * SPDX-FileCopyrightText: 2020 Stalwart Labs LLC <hello@stalw.art>
 *
 * SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-SEL
 *
 * Modified by Coffey Labs in 2026 for INBUXA.
 */

use crate::{
    api::query::QueryResponseBuilder,
    registry::{
        mapping::{RegistryGetResponse, RegistryQueryResponse, RegistrySetResponse},
        query::RegistryQueryFilters,
    },
};
use common::Server;
use jmap_proto::{
    error::set::{SetError, SetErrorType},
    object::registry::RegistryComparator,
    types::state::State,
};
use jmap_tools::{JsonPointer, JsonPointerItem, Key};
use registry::{
    jmap::{IntoValue, JsonPointerPatch, RegistryJsonPatch},
    schema::{
        enums::{TaskStatusType, TaskType},
        prelude::Property,
        structs::Task,
    },
    types::{
        EnumImpl, ObjectImpl,
        datetime::UTCDateTime,
        index::{IndexBuilder, IndexKey},
    },
};
use services::task_manager::lock::TaskLockManager;
use std::str::FromStr;
use store::{
    IterateParams, SerializeInfallible, U64_LEN, ValueKey,
    registry::RegistryFilterOp,
    write::{BatchBuilder, RegistryClass, TaskQueueClass, ValueClass, key::DeserializeBigEndian},
};
use trc::AddContext;
use types::id::Id;

pub(crate) async fn task_set(
    mut set: RegistrySetResponse<'_>,
) -> trc::Result<RegistrySetResponse<'_>> {
    let mut batch = BatchBuilder::new();
    let mut locked_tasks = Vec::new();

    // Process creations
    'outer: for (id, value) in set.create.drain() {
        let mut task = Task::default();
        if let Err(err) = task.patch(
            JsonPointerPatch::new(&JsonPointer::new(vec![]))
                .with_create(true)
                .with_can_set_account(true),
            value,
        ) {
            set.response.not_created.append(id, err.into());
            continue 'outer;
        }

        let mut validation_errors = Vec::new();
        if !task.validate(&mut validation_errors) {
            set.response.not_created.append(
                id,
                SetError::new(SetErrorType::ValidationFailed)
                    .with_validation_errors(validation_errors),
            );
            continue 'outer;
        }

        if !set.access_token.has_permission(task.permission()) {
            set.response.not_created.append(
                id,
                SetError::forbidden().with_description(format!(
                    "Insufficient permissions to create task of type {}",
                    task.object_type().as_str()
                )),
            );
            continue 'outer;
        }

        let task_type = task.object_type();
        match task_type {
            TaskType::IndexDocument
            | TaskType::UnindexDocument
            | TaskType::IndexTrace
            | TaskType::AccountMaintenance
            | TaskType::TenantMaintenance
            | TaskType::StoreMaintenance
            | TaskType::SpamFilterMaintenance
            | TaskType::AcmeRenewal
            | TaskType::DkimManagement
            | TaskType::DnsManagement => {
                let mut index = IndexBuilder::default();
                task.index(&mut index);

                // Validate foreign keys
                for key in index.keys {
                    if let IndexKey::ForeignKey {
                        object_id: foreign_id,
                        ..
                    } = key
                        && !set
                            .server
                            .store()
                            .key_exists(ValueKey::from(ValueClass::Registry(
                                RegistryClass::IndexId {
                                    object_id: foreign_id.object().to_id(),
                                    item_id: foreign_id.id().id(),
                                },
                            )))
                            .await
                            .caused_by(trc::location!())?
                    {
                        set.response.not_created.append(
                            id,
                            SetError::new(SetErrorType::InvalidForeignKey)
                                .with_object_id(foreign_id),
                        );
                        continue 'outer;
                    }
                }

                let task_id = set.server.registry().assign_id();
                batch.schedule_task_with_id(task_id, task).commit_point();
                set.response.created(id, task_id);
            }
            TaskType::CalendarAlarmEmail
            | TaskType::CalendarAlarmNotification
            | TaskType::CalendarItipMessage
            | TaskType::MergeThreads
            | TaskType::DmarcReport
            | TaskType::TlsReport
            | TaskType::DestroyAccount
            | TaskType::RestoreArchivedItem => {
                set.response.not_created.append(
                    id,
                    SetError::forbidden().with_description(format!(
                        "{} is an internal task type that cannot be created by clients",
                        task_type.as_str()
                    )),
                );
            }
        }
    }

    // Process updates
    'outer: for (id, value) in set.update.drain(..) {
        let task_id = id.id();
        let Some(mut task) = set
            .server
            .store()
            .get_value::<Task>(ValueKey::from(ValueClass::TaskQueue(
                TaskQueueClass::Task { id: task_id },
            )))
            .await?
        else {
            set.response.not_updated.append(id, SetError::not_found());
            continue;
        };

        if !set.access_token.has_permission(task.permission()) {
            set.response.not_updated.append(
                id,
                SetError::forbidden().with_description(format!(
                    "Insufficient permissions to update task of type {}",
                    task.object_type().as_str()
                )),
            );
            continue 'outer;
        }

        if !set.server.try_lock_task(task_id).await {
            set.response.not_updated.append(
                id,
                SetError::forbidden().with_description(
                    "Task is currently being processed and cannot be updated".to_string(),
                ),
            );
            continue;
        }
        locked_tasks.push(task_id);

        let old_timestamp = task.due_timestamp();
        let old_status = task.status().clone();
        for (key, value) in value.into_expanded_object() {
            let ptr = match key {
                Key::Property(prop) => {
                    JsonPointer::new(vec![JsonPointerItem::Key(Key::Property(prop))])
                }
                Key::Borrowed(other) => JsonPointer::parse(other),
                Key::Owned(other) => JsonPointer::parse(&other),
            };

            if let Err(err) = task.patch(
                JsonPointerPatch::new(&ptr)
                    .with_create(false)
                    .with_can_set_account(true),
                value,
            ) {
                set.response.not_updated.append(id, err.into());
                continue 'outer;
            }
        }

        if task.status() != &old_status {
            let timestamp = task.due_timestamp();
            if timestamp != old_timestamp {
                batch
                    .clear(ValueClass::TaskQueue(TaskQueueClass::Due {
                        id: task_id,
                        due: old_timestamp,
                    }))
                    .set(
                        ValueClass::TaskQueue(TaskQueueClass::Due {
                            id: task_id,
                            due: timestamp,
                        }),
                        task.object_type().to_id().serialize(),
                    );
            }

            batch
                .set(
                    ValueClass::TaskQueue(TaskQueueClass::Task { id: task_id }),
                    task.to_pickled_vec(),
                )
                .commit_point();
        }

        set.response.updated.append(id, None);
    }

    // Process destructions
    for id in set.destroy.drain(..) {
        let task_id = id.id();
        let Some(task) = set
            .server
            .store()
            .get_value::<Task>(ValueKey::from(ValueClass::TaskQueue(
                TaskQueueClass::Task { id: task_id },
            )))
            .await?
        else {
            set.response.not_destroyed.append(id, SetError::not_found());
            continue;
        };

        if !set.access_token.has_permission(task.permission()) {
            set.response.not_destroyed.append(
                id,
                SetError::forbidden().with_description(format!(
                    "Insufficient permissions to destroy task of type {}",
                    task.object_type().as_str()
                )),
            );
            continue;
        }

        locked_tasks.push(task_id);

        let due = task.due_timestamp();


        if let Task::DestroyAccount(_) = task {
            set.response.not_destroyed.append(
                id,
                SetError::forbidden().with_description(
                    "Account recovery is not supported in this deployment".to_string(),
                ),
            );
            continue;
        }

        batch
            .clear(ValueClass::TaskQueue(TaskQueueClass::Task { id: task_id }))
            .clear(ValueClass::TaskQueue(TaskQueueClass::Due {
                id: task_id,
                due,
            }))
            .commit_point();

        set.response.destroyed.push(id);
    }

    let has_changes = !batch.is_empty();
    if has_changes {
        set.server
            .store()
            .write(batch.build_all())
            .await
            .caused_by(trc::location!())?;
    }

    for task_id in locked_tasks {
        set.server.remove_index_lock(task_id).await;
    }

    if has_changes {
        set.server.notify_task_queue();
    }

    Ok(set)
}

pub(crate) async fn task_get(
    mut get: RegistryGetResponse<'_>,
) -> trc::Result<RegistryGetResponse<'_>> {
    let ids = if let Some(ids) = get.ids.take() {
        ids
    } else {
        task_ids(get.server, get.server.core.jmap.get_max_objects).await?
    };
    let has_due_field = get.properties.is_empty() || get.properties.contains(&Property::Due);

    for id in ids {
        if let Some(task) = get
            .server
            .store()
            .get_value::<Task>(ValueKey::from(ValueClass::TaskQueue(
                TaskQueueClass::Task { id: id.id() },
            )))
            .await?
        {
            let due = task.due_timestamp();
            let mut task = task.into_value();
            if has_due_field && due != u64::MAX {
                task.as_object_mut().unwrap().insert_unchecked(
                    Property::Due,
                    UTCDateTime::from_timestamp(due as i64).into_value(),
                );
            }

            get.insert(id, task);
        } else {
            get.not_found(id);
        }
    }

    Ok(get)
}

pub(crate) async fn task_query(
    mut req: RegistryQueryResponse<'_>,
) -> trc::Result<QueryResponseBuilder> {
    let mut due_from = 1u64;
    let mut due_to = u64::MAX;
    let mut typ = None;

    req.request
        .extract_filters(|property, op, value| match property {
            Property::Due => {
                if let Some(due) = value.as_str().and_then(|s| UTCDateTime::from_str(s).ok()) {
                    let due = due.timestamp() as u64;
                    let (from, to) = match op {
                        RegistryFilterOp::Equal => (due, due),
                        RegistryFilterOp::GreaterThan => (due + 1, u64::MAX),
                        RegistryFilterOp::GreaterEqualThan => (due, u64::MAX),
                        RegistryFilterOp::LowerThan => (0, due - 1),
                        RegistryFilterOp::LowerEqualThan => (0, due),
                        _ => return false,
                    };

                    // Intersect with existing range
                    due_from = due_from.max(from);
                    due_to = due_to.min(to);

                    due_from <= due_to
                } else {
                    false
                }
            }
            Property::Status => {
                if let Some(typ) = value.as_str().and_then(TaskStatusType::parse) {
                    if typ == TaskStatusType::Failed {
                        due_from = u64::MAX;
                        due_to = u64::MAX;
                    }
                    true
                } else {
                    false
                }
            }
            Property::Type => {
                if let Some(typ_) = value.as_str().and_then(TaskType::parse) {
                    typ = Some(typ_);
                    true
                } else {
                    false
                }
            }
            _ => false,
        })?;

    let anchor_id = req.request.anchor.map(|anchor| anchor.id());
    if req
        .request
        .sort
        .as_ref()
        .and_then(|sort| sort.first())
        .is_some_and(|comp| !matches!(comp.property, RegistryComparator::Property(Property::Due)))
    {
        return Err(trc::JmapEvent::UnsupportedSort
            .into_err()
            .details("Only sorting by 'due' is supported for tasks".to_string()));
    }

    let params = req
        .request
        .extract_parameters(req.server.core.jmap.query_max_results, None)?;

    let mut from_id = 0u64;
    let mut to_id = u64::MAX;
    if let Some(anchor_id) = anchor_id
        && let Some(anchor_task) = req
            .server
            .store()
            .get_value::<Task>(ValueKey::from(ValueClass::TaskQueue(
                TaskQueueClass::Task { id: anchor_id },
            )))
            .await
            .caused_by(trc::location!())?
    {
        let anchor_due = anchor_task.due_timestamp();
        if anchor_due >= due_from && anchor_due <= due_to {
            if params.sort_ascending {
                due_from = anchor_due;
                from_id = anchor_id;
            } else {
                due_to = anchor_due;
                to_id = anchor_id;
            }
        }
    }

    // Build response
    let mut response = QueryResponseBuilder::new(
        req.server.core.jmap.query_max_results + 1,
        req.server.core.jmap.query_max_results,
        State::Initial,
        &req.request,
    );

    let mut total = 0;
    let from_key = ValueKey::from(ValueClass::TaskQueue(TaskQueueClass::Due {
        id: from_id,
        due: due_from,
    }));
    let to_key = ValueKey::from(ValueClass::TaskQueue(TaskQueueClass::Due {
        id: to_id,
        due: due_to,
    }));

    req.server
        .store()
        .iterate(
            IterateParams::new(from_key, to_key)
                .set_ascending(params.sort_ascending)
                .set_values(typ.is_some()),
            |key, value| {
                if let Some(typ) = typ {
                    // inbuxa: a row whose type can't be read matches no type
                    // filter; the task manager logs and repairs it
                    let task_type = value.deserialize_be_u16(0).ok().and_then(TaskType::from_id);
                    if task_type != Some(typ) {
                        return Ok(true);
                    }
                }

                let id = key.deserialize_be_u64(U64_LEN)?;
                total += 1;
                if response.response.total.is_some() {
                    if !response.is_full() {
                        response.add_id(id.into());
                    }
                    Ok(true)
                } else {
                    Ok(response.add_id(id.into()))
                }
            },
        )
        .await
        .caused_by(trc::location!())?;

    if response.response.total.is_some() {
        response.response.total = Some(total);
    }

    if let Some(limit) = response.response.limit
        && total < limit
    {
        response.response.limit = None;
    }

    Ok(response)
}

async fn task_ids(server: &Server, max_results: usize) -> trc::Result<Vec<Id>> {
    let mut tasks = Vec::with_capacity(8);
    let from_key = ValueKey::from(ValueClass::TaskQueue(TaskQueueClass::Due { id: 0, due: 1 }));
    let to_key = ValueKey::from(ValueClass::TaskQueue(TaskQueueClass::Due {
        id: u64::MAX,
        due: u64::MAX,
    }));

    server
        .store()
        .iterate(
            IterateParams::new(from_key, to_key).ascending().no_values(),
            |key, _| {
                tasks.push(key.deserialize_be_u64(U64_LEN)?.into());

                Ok(tasks.len() < max_results)
            },
        )
        .await
        .caused_by(trc::location!())
        .map(|_| tasks)
}