module Lib
    ( router
    ) where

import qualified Web.Scotty.Trans as Scotty
import Web.Scotty.Trans as Scotty (middleware, matchAny, request,
    formParam, redirect, formParams, captureParam, queryParams)
import Control.Monad.IO.Class (liftIO)
import qualified Web
import qualified Database.SQLite.Simple as SQL (open, Connection)
import Models
import Crypto.BCrypt
import qualified Data.Text.Encoding as T
import qualified Data.Text as T
import Cookies
import qualified Repos.Users as Users
import qualified Repos.Characters as Characters
import qualified Repos.Prompts as Prompts
import qualified Repos.Stories as Stories
import qualified Repos.Subscriptions as Subscriptions
import Utils
import Control.Monad.Reader (runReaderT, lift)
import Control.Monad (when, unless)
import Types
import Colog (logByteStringStdout, LogAction (..))
import Framework
import Network.Wai (Request(..))
import qualified Data.ByteString as BS
import qualified Data.Vault.Lazy as V
import Control.Exception (SomeException)
import Network.HTTP.Types (unauthorized401)
import Openai
import Stripe
import qualified Data.Text.Lazy as TL
import Control.Concurrent (forkIO)
import Data.Aeson (eitherDecode)
import qualified Data.ByteString.Lazy as BL
import qualified Data.ByteString as B
import Data.Maybe (isJust)
import qualified Domain.Auth as Auth

router :: IO ()
router = do
    dbConn <- SQL.open "osr.db"
    let logger = logByteStringStdout
    let env = Env dbConn 3000 logger
    reqInfoKey <- V.newKey
    let config = Config env reqInfoKey
    let runIO (c :: App r) = runReaderT c.runApp config
    Scotty.scottyT 3000 runIO (server logger reqInfoKey dbConn)

server :: LogAction IO BS.ByteString -> V.Key ReqInfo -> SQL.Connection -> Server
server logger vaultKeys dbConn = do
    middleware limitHttpMethods
    middleware $ prepareRequest vaultKeys dbConn logger
    middleware safetyHeaders
    middleware htmxRedirectMiddleware

    -- Scotty.defaultHandler $ Scotty.Handler $ \(e :: SomeException) -> do
    --     let err = show e
    --     liftIO $ print err
    --     if elem (take 2 err) ["AE"]
    --         then Scotty.next
    --         else do
    --             liftIO $ putStrLn $ show e
    --             Scotty.text "error"

    matchAny (Scotty.regex ".*") $ do
        method <- requestMethod <$> request
        when (elem method ["GET", "HEAD", "OPTIONS", "TRACE"]) Scotty.next

        paths <- pathInfo <$> request
        when (toMaybe paths == Just "stripe") Scotty.next

        mCookieToken <- getCookie "csrf_token"
        case mCookieToken of
            Nothing -> Scotty.text "error"
            Just cookieToken -> do
                -- TODO catch
                formToken :: T.Text <- formParam "csrf_token"
                if (T.length cookieToken > 0)
                    && (T.length formToken > 0)
                    && (cookieToken == formToken)
                then Scotty.next
                else Scotty.text "error"

    Scotty.get "/style.css" $ do
        Scotty.setHeader "Content-Type" "text/css"
        Scotty.file "assets/style.css"

    Scotty.get "/tailwind.css" $ do
        Scotty.setHeader "Content-Type" "text/css"
        Scotty.file "assets/tailwind.css"

    -- Scotty.get "/favicon.png" $ do
    --     Scotty.setHeader "Content-Type" "image/png"
    --     Scotty.file "assets/favicon.png"

    Scotty.get "/favicon.svg" $ do
        Scotty.setHeader "Content-Type" "image/svg+xml"
        Scotty.file "assets/favicon.svg"

    Scotty.get "/logo.svg" $ do
        Scotty.setHeader "Content-Type" "image/svg+xml"
        Scotty.file "assets/logo.svg"

    -- tutorial monady lift Stories.hot >>= render . Web.index
    getA "/" $ do
        render Web.index

    getA "/register" $ do
        render Web.register

    getA "/login" $ do
        render $ Web.login

    getAuth "/account" $ do
        render $ Web.account

    getAuth "/characters" $ do
        chars <- lift Characters.getAll
        render $ Web.characters chars

    getAuth "/pricing" $ do
        failed <- isJust . lookup "no_payment" <$> queryParams
        render $ Web.pricing failed

    postAuth "/checkout" $ do
        userId <- lift getAuthUserId
        checkout <- liftIO $ createCheckout userId
        redirect $ TL.fromStrict checkout.url

    getAuth "/success" $ do
        render Web.success

    getAuth "/failure" $ do
        render Web.failure

    postAuth "/characters" $ do
        name :: T.Text <- formParam "name"
        desc :: T.Text <- formParam "description"

        u <- liftIO uuid
        _ <- lift $ Characters.create u name desc
        redirect "/characters"

    postA "/stripe/webhooks" $ do
        stripeHeader <- Scotty.header "Stripe-Signature"
        jsonText <- Scotty.body
        let valid = validateWebhook (TL.toStrict <$> stripeHeader) (T.decodeUtf8 . B.concat . BL.toChunks $ jsonText)
        case valid of
            False -> do
                Scotty.status unauthorized401
                lift $ logXd "not ok"
                Scotty.text "not ok"
            True -> do
                event :: StripeEvent <- Scotty.jsonData
                case event.eventType of
                    "checkout.session.completed" -> do
                        u <- liftIO uuid
                        case event.eventData.object.client_reference_id of
                            Nothing -> do
                                lift $ logXd $ "subscription with empty user " <> event.id
                                return ()
                            Just userId -> do
                                _ <- lift $ Subscriptions.update True userId
                                _ <- lift $ Subscriptions.create u userId event.eventData.object.customer
                                return ()
                    "customer.subscription.deleted" -> do
                        _ <- lift $ Subscriptions.update False event.eventData.object.customer
                        return ()
                    eventName -> do
                        lift $ logXd $ "received event " <> eventName
                        return ()

                Scotty.text "ok"

    getAuth "/new" $ do
        chars <- lift Characters.getAll
        render $ Web.newStory chars

    getAuth "/stories" $ do
        stories <- lift Stories.getAll
        render $ Web.stories stories

    getAuth "/stories/:id" $ do
        storyId :: T.Text <- captureParam "id"
        story <- lift $ Stories.get storyId
        htmx <- isHtmx
        case story of
            Nothing -> if htmx
                then partialRender $ Web.waitForStory storyId
                else render $ Web.waitForStory storyId
            Just s -> if htmx
                then partialRender $ Web.story s
                else render $ Web.story s

    postAuth "/stories" $ do
        desc :: T.Text <- formParam "description"
        params <- formParams
        let charsIds = map (TL.toStrict . snd) $ filter (\(x, _) -> x == "characters") params
        chars <- lift $ filter (\c -> elem c.id charsIds) <$> Characters.getAll

        let charPrompt = map (\c -> c.name <> ": " <> c.description) chars

        let prompt =  "Create a short story for kids. This is the plot: "
                <> desc <> ". It should include those characters:\n" <> T.intercalate "\n" charPrompt
                <> "\n Don't repeat characters descriptions from the prompt in a story."


        limit <- lift Stories.lastMonth
        case limit.count > 327 of
            True -> do
                lift $ logXd "crossed stories limit"
                redirectBack
            False -> do
                liftIO $ putStr $ T.unpack prompt
                lift $ logXd prompt
                u <- liftIO uuid
                _ <- lift $ Prompts.create u desc
                su <- liftIO uuid

                userId <- lift getAuthUserId

                _ <- liftIO $ forkIO $ do
                    result <- chatCall prompt
                    let story = eitherDecode (BL.fromChunks . return . T.encodeUtf8 $ (head result.choices).message.content) :: Either String StoryResp
                    case story of
                        Left e -> print e
                        Right s -> Stories.createIO su u userId s.title s.summary s.story dbConn
                    return ()

                redirect $ TL.fromStrict $  "/stories/" <> su

    postA "/register" $ do
        username :: T.Text <- formParam "username"
        password :: T.Text <- formParam "password"
        unless (validParam username && validParam password) $ redirectAndFinish "/register"
        hash_pass <- liftIO $ fmap T.decodeUtf8 <$>
            hashPasswordUsingPolicy slowerBcryptHashingPolicy (T.encodeUtf8 password)
        u <- liftIO uuid
        n <- liftIO now
        case hash_pass of
            Nothing ->
                partialRender $ Web.registerHTMX $ Just "Something went wrong, please try again."
            Just hp -> do
                let user = User u username hp False n
                r <- lift $ Users.register user
                case r of
                    Nothing -> do
                        setSession user.id
                        lift $ logXd $ "new user registered: " <> username
                        redirect "/"
                    Just _ -> do
                        partialRender $ Web.registerHTMX $ Just "user already registered"

    postA "/login" $ do
        username :: T.Text <- formParam "username"
        password :: T.Text <- formParam "password"
        unless (validParam username && validParam password) $ redirectAndFinish "/login"
        mUser <- lift $ Users.byUsername username
        case Auth.login mUser password of
            Nothing -> do
                htmx <- isHtmx
                if htmx
                    then partialRender $ Web.loginWithError username password
                    else redirect "/login"
            Just userId -> do
                setSession userId
                redirect "/"

    postA "/logout" $ do
        deleteSession
        redirect "/"

validParam :: T.Text -> Bool
validParam p = (T.length p >= 4) && (T.length p <= 25)

redirectAndFinish url = do
    redirect url
    Scotty.finish