package service

import (
	"context"
	"fmt"
	"strings"
	"time"

	roomv1 "hyapp.local/api/proto/room/v1"
	walletv1 "hyapp.local/api/proto/wallet/v1"
	"hyapp/pkg/appcode"
	"hyapp/pkg/xerr"
	"hyapp/services/room-service/internal/integration"
)

const (
	// tieredPrivilegeVIPProgram 是 P1 权益制 VIP 的稳定策略名。App 选择哪套体系由 wallet 配置决定，
	// room-service 禁止再按 fami/lalu 写死分支，否则后续 App 无法复用同一房间权限实现。
	tieredPrivilegeVIPProgram = "tiered_privilege_v1"

	vipBenefitCustomRoomBackground = "custom_room_background"
	vipBenefitRoomImageMessage     = "room_image_message"
	vipBenefitRoomBorder           = "room_border"
	vipBenefitColoredRoomName      = "colored_room_name"
	vipBenefitAntiKick             = "anti_kick"
	vipBenefitAntiMute             = "anti_mute"
	vipBenefitRoomEntryNotice      = "room_entry_notice"

	// VIP 查询会进入进房展示或低频房管动作，必须给同步依赖设置短上限，避免 wallet 抖动长期占住房间请求。
	roomVIPLookupTimeout = time.Second
)

// effectiveVIPAccess 是 room-service 从 wallet effective state 裁剪出的房间权限快照。
// paid/trial 合并、等级继承和体验卡过滤都已经由 wallet 完成，这里只做精确 benefit_code membership 判断。
type effectiveVIPAccess struct {
	programType                   string
	level                         int32
	name                          string
	benefits                      map[string]struct{}
	roomEntryNoticeSettingEnabled bool
}

func (access effectiveVIPAccess) hasBenefit(code string) bool {
	_, exists := access.benefits[normalizeVIPCode(code)]
	return exists
}

func (access effectiveVIPAccess) roomEntryNoticeEnabled() bool {
	return access.roomEntryNoticeSettingEnabled && access.hasBenefit(vipBenefitRoomEntryNotice)
}

func (access effectiveVIPAccess) roomSnapshot() *roomv1.RoomEffectiveVipSnapshot {
	return &roomv1.RoomEffectiveVipSnapshot{
		ProgramType:            access.programType,
		Level:                  access.level,
		Name:                   access.name,
		RoomEntryNoticeEnabled: access.roomEntryNoticeEnabled(),
	}
}

// loadEffectiveVIPAccess 调 wallet GetMyVip 一次并只接受完整 effective state。
// 空 VIP 是合法结果，但 program_config 不能为空；缺配置时无法判断当前 App 是否应执行 P1 权限，必须按上游失败处理。
func (s *Service) loadEffectiveVIPAccess(ctx context.Context, requestID string, userID int64) (effectiveVIPAccess, error) {
	if s == nil || s.wallet == nil {
		return effectiveVIPAccess{}, xerr.New(xerr.Unavailable, "wallet vip client is unavailable")
	}
	if userID <= 0 {
		return effectiveVIPAccess{}, xerr.New(xerr.InvalidArgument, "vip user_id is required")
	}

	lookupCtx, cancel := context.WithTimeout(ctx, roomVIPLookupTimeout)
	defer cancel()
	response, err := s.wallet.GetMyVip(lookupCtx, &walletv1.GetMyVipRequest{
		RequestId: strings.TrimSpace(requestID),
		AppCode:   appcode.FromContext(ctx),
		UserId:    userID,
	})
	if err != nil {
		return effectiveVIPAccess{}, xerr.New(xerr.Unavailable, fmt.Sprintf("get effective vip failed: %v", err))
	}
	if response == nil || response.GetState() == nil || response.GetState().GetProgramConfig() == nil {
		return effectiveVIPAccess{}, xerr.New(xerr.Unavailable, "wallet vip state is incomplete")
	}

	state := response.GetState()
	access := effectiveVIPAccess{
		programType:                   normalizeVIPCode(state.GetProgramConfig().GetProgramType()),
		benefits:                      make(map[string]struct{}, len(state.GetEffectiveBenefits())),
		roomEntryNoticeSettingEnabled: true,
	}
	// 旧 wallet 在滚动升级期间没有 user_settings tag；nil 必须兼容为产品默认开启。
	if settings := state.GetUserSettings(); settings != nil {
		access.roomEntryNoticeSettingEnabled = settings.GetRoomEntryNoticeEnabled()
	}
	if access.programType == "" {
		return effectiveVIPAccess{}, xerr.New(xerr.Unavailable, "wallet vip program is missing")
	}
	if effective := state.GetEffectiveVip(); effective != nil && effective.GetActive() {
		access.level = effective.GetLevel()
		access.name = strings.TrimSpace(effective.GetName())
	}
	for _, benefit := range state.GetEffectiveBenefits() {
		if benefit == nil {
			continue
		}
		if code := normalizeVIPCode(benefit.GetBenefitCode()); code != "" {
			access.benefits[code] = struct{}{}
		}
	}
	return access, nil
}

// requireCustomRoomBackgroundBenefit 只对配置为 P1 权益制的 App 执行自定义背景门禁。
// action 由调用点传入精确动作，Flutter 才能区分上传、保存和切换失败并保留对应本地状态。
// legacy_timed 保持 Lalu 原行为；新 App 只需在 wallet 切换 program_type，无需再修改 room-service。
func (s *Service) requireCustomRoomBackgroundBenefit(ctx context.Context, requestID string, ownerUserID int64, action string) error {
	return s.requireVIPBenefit(ctx, requestID, ownerUserID, vipBenefitCustomRoomBackground, action)
}

// requireVIPBenefit 优先调用 wallet 的单项权益判定，并把升级页需要的等级事实放进错误 metadata。
// legacy_timed App 沿用旧行为；P1 App 在 wallet 不可用或没有权益时都失败关闭，避免故障窗口越权。
func (s *Service) requireVIPBenefit(ctx context.Context, requestID string, userID int64, benefitCode string, action string) error {
	if checker, ok := s.wallet.(integration.WalletVIPBenefitClient); ok {
		lookupCtx, cancel := context.WithTimeout(ctx, roomVIPLookupTimeout)
		defer cancel()
		response, err := checker.CheckVipBenefit(lookupCtx, &walletv1.CheckVipBenefitRequest{
			RequestId:   strings.TrimSpace(requestID),
			AppCode:     appcode.FromContext(ctx),
			UserId:      userID,
			BenefitCode: normalizeVIPCode(benefitCode),
		})
		if err != nil {
			// 对外错误只暴露稳定的业务语义，底层 gRPC 状态和地址不能进入 HTTP envelope。
			return xerr.New(xerr.Unavailable, "check vip benefit failed")
		}
		if response == nil || response.GetState() == nil || response.GetState().GetProgramConfig() == nil {
			return xerr.New(xerr.Unavailable, "wallet vip benefit state is incomplete")
		}
		if normalizeVIPCode(response.GetState().GetProgramConfig().GetProgramType()) != tieredPrivilegeVIPProgram {
			return nil
		}
		if response.GetAllowed() {
			return nil
		}
		return xerr.NewWithMetadata(xerr.VIPBenefitRequired, "vip benefit is required", map[string]string{
			"benefit_code":            normalizeVIPCode(benefitCode),
			"required_level":          fmt.Sprintf("%d", response.GetRequiredLevel()),
			"current_effective_level": fmt.Sprintf("%d", response.GetCurrentEffectiveLevel()),
			"action":                  strings.TrimSpace(action),
		})
	}

	// 兼容滚动升级和现有测试 fake：旧 client 仍可从 effective_benefits 得到同一授权事实。
	access, err := s.loadEffectiveVIPAccess(ctx, requestID, userID)
	if err != nil {
		// 权限事实不可用时必须失败关闭；放行会让无权益用户在 wallet 故障窗口获得可持久化背景权限。
		return err
	}
	if access.programType != tieredPrivilegeVIPProgram {
		return nil
	}
	if !access.hasBenefit(benefitCode) {
		return xerr.NewWithMetadata(xerr.VIPBenefitRequired, "vip benefit is required", map[string]string{
			"benefit_code":            normalizeVIPCode(benefitCode),
			"required_level":          "0",
			"current_effective_level": fmt.Sprintf("%d", access.level),
			"action":                  strings.TrimSpace(action),
		})
	}
	return nil
}

// requireTargetWithoutVIPBenefit 保护普通房主/管理员治理入口；平台治理必须继续走 SystemEvictUser，不能复用该守卫。
func (s *Service) requireTargetWithoutVIPBenefit(ctx context.Context, requestID string, targetUserID int64, benefitCode string) error {
	access, err := s.loadEffectiveVIPAccess(ctx, requestID, targetUserID)
	if err != nil {
		// anti_kick/anti_mute 属于付费保护，wallet 不可判定时宁可拒绝普通房管动作，也不能错误剥夺已生效权益。
		return err
	}
	if access.hasBenefit(benefitCode) {
		switch normalizeVIPCode(benefitCode) {
		case vipBenefitAntiKick:
			return xerr.New(xerr.VIPAntiKick, "target vip benefit prevents kick")
		case vipBenefitAntiMute:
			return xerr.New(xerr.VIPAntiMute, "target vip benefit prevents mute")
		default:
			return xerr.New(xerr.VIPBenefitRequired, "target vip benefit prevents this room moderation action")
		}
	}
	return nil
}

func normalizeVIPCode(value string) string {
	return strings.ToLower(strings.TrimSpace(value))
}