import { chunkText, resolveTextChunkLimit } from "../auto-reply/chunk.js";
import { formatAgentEnvelope } from "../auto-reply/envelope.js";
import { dispatchReplyFromConfig } from "../auto-reply/reply/dispatch-from-config.js";
import { createReplyDispatcher } from "../auto-reply/reply/reply-dispatcher.js";
import type { ReplyPayload } from "../auto-reply/types.js";
import { loadConfig } from "../config/config.js";
import { resolveStorePath, updateLastRoute } from "../config/sessions.js";
import { danger, logVerbose, shouldLogVerbose } from "../globals.js";
import { mediaKindFromMime } from "../media/constants.js";
import { saveMediaBuffer } from "../media/store.js";
import {
  readProviderAllowFromStore,
  upsertProviderPairingRequest,
} from "../pairing/pairing-store.js";
import { resolveAgentRoute } from "../routing/resolve-route.js";
import type { RuntimeEnv } from "../runtime.js";
import { normalizeE164 } from "../utils.js";
import { signalCheck, signalRpcRequest, streamSignalEvents } from "./client.js";
import { spawnSignalDaemon } from "./daemon.js";
import { sendMessageSignal } from "./send.js";

type SignalEnvelope = {
  sourceNumber?: string | null;
  sourceName?: string | null;
  timestamp?: number | null;
  dataMessage?: SignalDataMessage | null;
  editMessage?: { dataMessage?: SignalDataMessage | null } | null;
  syncMessage?: unknown;
};

type SignalDataMessage = {
  timestamp?: number;
  message?: string | null;
  attachments?: Array<SignalAttachment>;
  groupInfo?: {
    groupId?: string | null;
    groupName?: string | null;
  } | null;
  quote?: { text?: string | null } | null;
};

type SignalAttachment = {
  id?: string | null;
  contentType?: string | null;
  filename?: string | null;
  size?: number | null;
};

export type MonitorSignalOpts = {
  runtime?: RuntimeEnv;
  abortSignal?: AbortSignal;
  account?: string;
  baseUrl?: string;
  autoStart?: boolean;
  cliPath?: string;
  httpHost?: string;
  httpPort?: number;
  receiveMode?: "on-start" | "manual";
  ignoreAttachments?: boolean;
  ignoreStories?: boolean;
  sendReadReceipts?: boolean;
  allowFrom?: Array<string | number>;
  groupAllowFrom?: Array<string | number>;
  mediaMaxMb?: number;
};

type SignalReceivePayload = {
  account?: string;
  envelope?: SignalEnvelope | null;
  exception?: { message?: string } | null;
};

function resolveRuntime(opts: MonitorSignalOpts): RuntimeEnv {
  return (
    opts.runtime ?? {
      log: console.log,
      error: console.error,
      exit: (code: number): never => {
        throw new Error(`exit ${code}`);
      },
    }
  );
}

function resolveBaseUrl(opts: MonitorSignalOpts): string {
  const cfg = loadConfig();
  const signalCfg = cfg.signal;
  if (opts.baseUrl?.trim()) return opts.baseUrl.trim();
  if (signalCfg?.httpUrl?.trim()) return signalCfg.httpUrl.trim();
  const host = opts.httpHost ?? signalCfg?.httpHost ?? "127.0.0.1";
  const port = opts.httpPort ?? signalCfg?.httpPort ?? 8080;
  return `http://${host}:${port}`;
}

function resolveAccount(opts: MonitorSignalOpts): string | undefined {
  const cfg = loadConfig();
  return opts.account?.trim() || cfg.signal?.account?.trim() || undefined;
}

function resolveAllowFrom(opts: MonitorSignalOpts): string[] {
  const cfg = loadConfig();
  const raw = opts.allowFrom ?? cfg.signal?.allowFrom ?? [];
  return raw.map((entry) => String(entry).trim()).filter(Boolean);
}

function resolveGroupAllowFrom(opts: MonitorSignalOpts): string[] {
  const cfg = loadConfig();
  const raw =
    opts.groupAllowFrom ??
    cfg.signal?.groupAllowFrom ??
    (cfg.signal?.allowFrom && cfg.signal.allowFrom.length > 0
      ? cfg.signal.allowFrom
      : []);
  return raw.map((entry) => String(entry).trim()).filter(Boolean);
}

function isAllowedSender(sender: string, allowFrom: string[]): boolean {
  if (allowFrom.length === 0) return false;
  if (allowFrom.includes("*")) return true;
  const normalizedAllow = allowFrom
    .map((entry) => entry.replace(/^signal:/i, ""))
    .map((entry) => normalizeE164(entry));
  const normalizedSender = normalizeE164(sender);
  return normalizedAllow.includes(normalizedSender);
}

export function isSignalGroupAllowed(params: {
  groupPolicy: "open" | "disabled" | "allowlist";
  allowFrom: string[];
  sender: string;
}): boolean {
  const { groupPolicy, allowFrom, sender } = params;
  if (groupPolicy === "disabled") return false;
  if (groupPolicy === "open") return true;
  if (allowFrom.length === 0) return false;
  return isAllowedSender(sender, allowFrom);
}

async function waitForSignalDaemonReady(params: {
  baseUrl: string;
  abortSignal?: AbortSignal;
  timeoutMs: number;
  runtime: RuntimeEnv;
}): Promise<void> {
  const started = Date.now();
  let lastError: string | null = null;

  while (Date.now() - started < params.timeoutMs) {
    if (params.abortSignal?.aborted) return;
    const res = await signalCheck(params.baseUrl, 1000);
    if (res.ok) return;
    lastError =
      res.error ?? (res.status ? `HTTP ${res.status}` : "unreachable");
    await new Promise((r) => setTimeout(r, 150));
  }

  params.runtime.error?.(
    danger(
      `daemon not ready after ${params.timeoutMs}ms (${lastError ?? "unknown error"})`,
    ),
  );
  throw new Error(`signal daemon not ready (${lastError ?? "unknown error"})`);
}

async function fetchAttachment(params: {
  baseUrl: string;
  account?: string;
  attachment: SignalAttachment;
  sender?: string;
  groupId?: string;
  maxBytes: number;
}): Promise<{ path: string; contentType?: string } | null> {
  const { attachment } = params;
  if (!attachment?.id) return null;
  if (attachment.size && attachment.size > params.maxBytes) {
    throw new Error(
      `Signal attachment ${attachment.id} exceeds ${(params.maxBytes / (1024 * 1024)).toFixed(0)}MB limit`,
    );
  }
  const rpcParams: Record<string, unknown> = {
    id: attachment.id,
  };
  if (params.account) rpcParams.account = params.account;
  if (params.groupId) rpcParams.groupId = params.groupId;
  else if (params.sender) rpcParams.recipient = params.sender;
  else return null;

  const result = await signalRpcRequest<{ data?: string }>(
    "getAttachment",
    rpcParams,
    { baseUrl: params.baseUrl },
  );
  if (!result?.data) return null;
  const buffer = Buffer.from(result.data, "base64");
  const saved = await saveMediaBuffer(
    buffer,
    attachment.contentType ?? undefined,
    "inbound",
    params.maxBytes,
  );
  return { path: saved.path, contentType: saved.contentType };
}

async function deliverReplies(params: {
  replies: ReplyPayload[];
  target: string;
  baseUrl: string;
  account?: string;
  runtime: RuntimeEnv;
  maxBytes: number;
  textLimit: number;
}) {
  const { replies, target, baseUrl, account, runtime, maxBytes, textLimit } =
    params;
  for (const payload of replies) {
    const mediaList =
      payload.mediaUrls ?? (payload.mediaUrl ? [payload.mediaUrl] : []);
    const text = payload.text ?? "";
    if (!text && mediaList.length === 0) continue;
    if (mediaList.length === 0) {
      for (const chunk of chunkText(text, textLimit)) {
        await sendMessageSignal(target, chunk, {
          baseUrl,
          account,
          maxBytes,
        });
      }
    } else {
      let first = true;
      for (const url of mediaList) {
        const caption = first ? text : "";
        first = false;
        await sendMessageSignal(target, caption, {
          baseUrl,
          account,
          mediaUrl: url,
          maxBytes,
        });
      }
    }
    runtime.log?.(`delivered reply to ${target}`);
  }
}

export async function monitorSignalProvider(
  opts: MonitorSignalOpts = {},
): Promise<void> {
  const runtime = resolveRuntime(opts);
  const cfg = loadConfig();
  const textLimit = resolveTextChunkLimit(cfg, "signal");
  const baseUrl = resolveBaseUrl(opts);
  const account = resolveAccount(opts);
  const dmPolicy = cfg.signal?.dmPolicy ?? "pairing";
  const allowFrom = resolveAllowFrom(opts);
  const groupAllowFrom = resolveGroupAllowFrom(opts);
  const groupPolicy = cfg.signal?.groupPolicy ?? "open";
  const mediaMaxBytes =
    (opts.mediaMaxMb ?? cfg.signal?.mediaMaxMb ?? 8) * 1024 * 1024;
  const ignoreAttachments =
    opts.ignoreAttachments ?? cfg.signal?.ignoreAttachments ?? false;

  const autoStart =
    opts.autoStart ?? cfg.signal?.autoStart ?? !cfg.signal?.httpUrl;
  let daemonHandle: ReturnType<typeof spawnSignalDaemon> | null = null;

  if (autoStart) {
    const cliPath = opts.cliPath ?? cfg.signal?.cliPath ?? "signal-cli";
    const httpHost = opts.httpHost ?? cfg.signal?.httpHost ?? "127.0.0.1";
    const httpPort = opts.httpPort ?? cfg.signal?.httpPort ?? 8080;
    daemonHandle = spawnSignalDaemon({
      cliPath,
      account,
      httpHost,
      httpPort,
      receiveMode: opts.receiveMode ?? cfg.signal?.receiveMode,
      ignoreAttachments:
        opts.ignoreAttachments ?? cfg.signal?.ignoreAttachments,
      ignoreStories: opts.ignoreStories ?? cfg.signal?.ignoreStories,
      sendReadReceipts: opts.sendReadReceipts ?? cfg.signal?.sendReadReceipts,
      runtime,
    });
  }

  const onAbort = () => {
    daemonHandle?.stop();
  };
  opts.abortSignal?.addEventListener("abort", onAbort, { once: true });

  try {
    if (daemonHandle) {
      await waitForSignalDaemonReady({
        baseUrl,
        abortSignal: opts.abortSignal,
        timeoutMs: 10_000,
        runtime,
      });
    }

    const handleEvent = async (event: { event?: string; data?: string }) => {
      if (event.event !== "receive" || !event.data) return;
      let payload: SignalReceivePayload | null = null;
      try {
        payload = JSON.parse(event.data) as SignalReceivePayload;
      } catch (err) {
        runtime.error?.(`failed to parse event: ${String(err)}`);
        return;
      }
      if (payload?.exception?.message) {
        runtime.error?.(`receive exception: ${payload.exception.message}`);
      }
      const envelope = payload?.envelope;
      if (!envelope) return;
      if (envelope.syncMessage) return;
      const dataMessage =
        envelope.dataMessage ?? envelope.editMessage?.dataMessage;
      if (!dataMessage) return;

      const sender = envelope.sourceNumber?.trim();
      if (!sender) return;
      if (account && normalizeE164(sender) === normalizeE164(account)) {
        return;
      }
      const groupId = dataMessage.groupInfo?.groupId ?? undefined;
      const groupName = dataMessage.groupInfo?.groupName ?? undefined;
      const isGroup = Boolean(groupId);
      const storeAllowFrom = await readProviderAllowFromStore("signal").catch(
        () => [],
      );
      const effectiveDmAllow = [...allowFrom, ...storeAllowFrom];
      const effectiveGroupAllow = [...groupAllowFrom, ...storeAllowFrom];
      const dmAllowed =
        dmPolicy === "open" ? true : isAllowedSender(sender, effectiveDmAllow);

      if (!isGroup) {
        if (dmPolicy === "disabled") return;
        if (!dmAllowed) {
          if (dmPolicy === "pairing") {
            const senderId = normalizeE164(sender);
            const { code, created } = await upsertProviderPairingRequest({
              provider: "signal",
              id: senderId,
              meta: {
                name: envelope.sourceName ?? undefined,
              },
            });
            if (created) {
              logVerbose(`signal pairing request sender=${senderId}`);
              try {
                await sendMessageSignal(
                  senderId,
                  [
                    "Clawdbot: access not configured.",
                    "",
                    `Pairing code: ${code}`,
                    "",
                    "Ask the bot owner to approve with:",
                    "clawdbot pairing approve --provider signal <code>",
                  ].join("\n"),
                  { baseUrl, account, maxBytes: mediaMaxBytes },
                );
              } catch (err) {
                logVerbose(
                  `signal pairing reply failed for ${senderId}: ${String(err)}`,
                );
              }
            }
          } else {
            logVerbose(
              `Blocked signal sender ${sender} (dmPolicy=${dmPolicy})`,
            );
          }
          return;
        }
      }
      if (isGroup && groupPolicy === "disabled") {
        logVerbose("Blocked signal group message (groupPolicy: disabled)");
        return;
      }
      if (isGroup && groupPolicy === "allowlist") {
        if (effectiveGroupAllow.length === 0) {
          logVerbose(
            "Blocked signal group message (groupPolicy: allowlist, no groupAllowFrom)",
          );
          return;
        }
        if (!isAllowedSender(sender, effectiveGroupAllow)) {
          logVerbose(
            `Blocked signal group sender ${sender} (not in groupAllowFrom)`,
          );
          return;
        }
      }

      const commandAuthorized = isGroup
        ? effectiveGroupAllow.length > 0
          ? isAllowedSender(sender, effectiveGroupAllow)
          : true
        : dmAllowed;
      const messageText = (dataMessage.message ?? "").trim();

      let mediaPath: string | undefined;
      let mediaType: string | undefined;
      let placeholder = "";
      const firstAttachment = dataMessage.attachments?.[0];
      if (firstAttachment?.id && !ignoreAttachments) {
        try {
          const fetched = await fetchAttachment({
            baseUrl,
            account,
            attachment: firstAttachment,
            sender,
            groupId,
            maxBytes: mediaMaxBytes,
          });
          if (fetched) {
            mediaPath = fetched.path;
            mediaType =
              fetched.contentType ?? firstAttachment.contentType ?? undefined;
          }
        } catch (err) {
          runtime.error?.(danger(`attachment fetch failed: ${String(err)}`));
        }
      }

      const kind = mediaKindFromMime(mediaType ?? undefined);
      if (kind) {
        placeholder = `<media:${kind}>`;
      } else if (dataMessage.attachments?.length) {
        placeholder = "<media:attachment>";
      }

      const bodyText =
        messageText || placeholder || dataMessage.quote?.text?.trim() || "";
      if (!bodyText) return;

      const fromLabel = isGroup
        ? `${groupName ?? "Signal Group"} id:${groupId}`
        : `${envelope.sourceName ?? sender} id:${sender}`;
      const body = formatAgentEnvelope({
        provider: "Signal",
        from: fromLabel,
        timestamp: envelope.timestamp ?? undefined,
        body: bodyText,
      });

      const route = resolveAgentRoute({
        cfg,
        provider: "signal",
        peer: {
          kind: isGroup ? "group" : "dm",
          id: isGroup ? (groupId ?? "unknown") : normalizeE164(sender),
        },
      });
      const ctxPayload = {
        Body: body,
        From: isGroup ? `group:${groupId ?? "unknown"}` : `signal:${sender}`,
        To: isGroup ? `group:${groupId ?? "unknown"}` : `signal:${sender}`,
        SessionKey: route.sessionKey,
        AccountId: route.accountId,
        ChatType: isGroup ? "group" : "direct",
        GroupSubject: isGroup ? (groupName ?? undefined) : undefined,
        SenderName: envelope.sourceName ?? sender,
        SenderId: sender,
        Provider: "signal" as const,
        MessageSid: envelope.timestamp ? String(envelope.timestamp) : undefined,
        Timestamp: envelope.timestamp ?? undefined,
        MediaPath: mediaPath,
        MediaType: mediaType,
        MediaUrl: mediaPath,
        CommandAuthorized: commandAuthorized,
      };

      if (!isGroup) {
        const sessionCfg = cfg.session;
        const storePath = resolveStorePath(sessionCfg?.store, {
          agentId: route.agentId,
        });
        await updateLastRoute({
          storePath,
          sessionKey: route.mainSessionKey,
          provider: "signal",
          to: normalizeE164(sender),
          accountId: route.accountId,
        });
      }

      if (shouldLogVerbose()) {
        const preview = body.slice(0, 200).replace(/\n/g, "\\n");
        logVerbose(
          `signal inbound: from=${ctxPayload.From} len=${body.length} preview="${preview}"`,
        );
      }

      const dispatcher = createReplyDispatcher({
        responsePrefix: cfg.messages?.responsePrefix,
        deliver: async (payload) => {
          await deliverReplies({
            replies: [payload],
            target: ctxPayload.To,
            baseUrl,
            account,
            runtime,
            maxBytes: mediaMaxBytes,
            textLimit,
          });
        },
        onError: (err, info) => {
          runtime.error?.(
            danger(`signal ${info.kind} reply failed: ${String(err)}`),
          );
        },
      });

      const { queuedFinal } = await dispatchReplyFromConfig({
        ctx: ctxPayload,
        cfg,
        dispatcher,
      });
      if (!queuedFinal) return;
    };

    await streamSignalEvents({
      baseUrl,
      account,
      abortSignal: opts.abortSignal,
      onEvent: (event) => {
        void handleEvent(event).catch((err) => {
          runtime.error?.(`event handler failed: ${String(err)}`);
        });
      },
    });
  } catch (err) {
    if (opts.abortSignal?.aborted) return;
    throw err;
  } finally {
    opts.abortSignal?.removeEventListener("abort", onAbort);
    daemonHandle?.stop();
  }
}