package main

import (
	"context"
	"crypto/tls"
	"encoding/json"
	"errors"
	"flag"
	"io"
	"log"
	"net/http"
	"os"
	"runtime"
	"sync"
	"time"

	"github.com/gorilla/websocket"
	"github.com/wjyhk/vps-commander/internal/cluster"
	"github.com/wjyhk/vps-commander/internal/executor"
	"github.com/wjyhk/vps-commander/internal/sysinfo"
)

func main() {
	hub := flag.String("hub", "", "Hub WebSocket URL")
	name := flag.String("name", "", "device name")
	token := flag.String("token", firstNonEmpty(os.Getenv("VPS_COMMANDER_AGENT_TOKEN"), os.Getenv("VPS_COMMANDER_CLUSTER_SECRET")), "agent credential")
	insecure := flag.Bool("insecure", false, "skip TLS verification")
	flag.Parse()
	if *hub == "" || *name == "" || *token == "" {
		log.Fatal("-hub, -name and -token are required")
	}
	backoff := time.Second
	for {
		if err := run(*hub, *name, *token, *insecure); err != nil {
			log.Printf("agent connection: %v", err)
		}
		time.Sleep(backoff)
		if backoff < 30*time.Second {
			backoff *= 2
			if backoff > 30*time.Second {
				backoff = 30 * time.Second
			}
		}
	}
}

func run(hub, name, token string, insecure bool) error {
	u := hub + "?device_name=" + name
	dialer := websocket.DefaultDialer
	if insecure {
		dialer = &websocket.Dialer{TLSClientConfig: &tls.Config{InsecureSkipVerify: true}}
	}
	header := http.Header{}
	header.Set("Authorization", "Bearer "+token)
	c, _, err := dialer.Dial(u, header)
	if err != nil {
		return err
	}
	defer c.Close()
	var writeMu sync.Mutex
	writeJSON := func(msg cluster.Message) error {
		writeMu.Lock()
		defer writeMu.Unlock()
		if err := c.SetWriteDeadline(time.Now().Add(10 * time.Second)); err != nil {
			return err
		}
		return c.WriteJSON(msg)
	}
	if err := c.SetReadDeadline(time.Now().Add(75 * time.Second)); err != nil {
		return err
	}
	exec := executor.Local{MaxOutput: 1024 * 1024}
	mcpRuntime := cluster.NewMCPRuntime()

	// 初始握手附带画像
	initProf := sysinfo.Collect("APPLICATION")
	if err := writeJSON(cluster.Message{Event: "hello", Device: name, Arch: runtime.GOARCH, OS: runtime.GOOS, Profile: &initProf, TS: time.Now().Unix(), ProtocolVersion: "2", AgentVersion: "2.0", Capabilities: []string{"read_file", "read_multiple_files", "list_directory", "get_file_info", "start_search", "get_more_search_results", "list_processes", "list_sessions", "read_process_output", "edit_block", "write_file", "create_directory", "move_file", "exec_command", "start_process", "interact_with_process", "kill_process", "force_terminate", "mcp_call", "mcp_list", "mcp_test"}}); err != nil {
		return err
	}

	stopPing := make(chan struct{})
	defer close(stopPing)
	go func() {
		t := time.NewTicker(15 * time.Second)
		defer t.Stop()
		for {
			select {
			case <-t.C:
				prof := sysinfo.Collect("APPLICATION")
				_ = writeJSON(cluster.Message{Event: "ping", Device: name, Arch: runtime.GOARCH, OS: runtime.GOOS, Profile: &prof, TS: time.Now().Unix()})
			case <-stopPing:
				return
			}
		}
	}()

	sessions := executor.NewSessionManager(16)
	go func() {
		t := time.NewTicker(1 * time.Minute)
		defer t.Stop()
		for {
			select {
			case <-t.C:
				sessions.Cleanup()
			case <-stopPing:
				return
			}
		}
	}()

	for {
		var msg cluster.Message
		if err := c.ReadJSON(&msg); err != nil {
			return err
		}
		_ = c.SetReadDeadline(time.Now().Add(75 * time.Second))
		if msg.Event == "registered" {
			continue
		}
		if msg.Event == "mcp_sync" {
			var services []cluster.MCPService
			if err := decodePayload(msg.Payload, &services); err != nil {
				log.Printf("mcp sync failed: %v", err)
			} else {
				mcpRuntime.Sync(services)
				log.Printf("MCP services synced: %d", len(services))
			}
			continue
		}
		if msg.Event == "revoked" {
			log.Printf("device revoked by admin: %s", msg.Error)
			return errors.New("revoked by admin")
		}
		if msg.Event == "ping" {
			prof := sysinfo.Collect("APPLICATION")
			if err := writeJSON(cluster.Message{Event: "pong", Device: name, Arch: runtime.GOARCH, OS: runtime.GOOS, Profile: &prof, TS: msg.TS}); err != nil {
				return err
			}
			continue
		}
		if msg.Action == "" || msg.ID == "" {
			continue
		}
		go func(msg cluster.Message) {
			if err := handle(writeJSON, exec, mcpRuntime, sessions, msg); err != nil {
				log.Printf("request %s failed: %v", msg.ID, err)
				_ = sendError(writeJSON, msg.ID, err)
			}
		}(msg)
	}
}

func handle(writeJSON func(cluster.Message) error, exec executor.Local, mcpRuntime *cluster.MCPRuntime, sessions *executor.SessionManager, msg cluster.Message) error {
	switch msg.Action {
	case "mcp_list":
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: mcpRuntime.List()})
	case "mcp_test":
		var p cluster.MCPService
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		ctx, cancel := context.WithTimeout(context.Background(), 60*time.Second)
		defer cancel()
		start := time.Now()
		tools, err := cluster.ProbeMCP(ctx, p)
		duration := time.Since(start).Milliseconds()
		if err != nil {
			return writeJSON(cluster.Message{ID: msg.ID, Status: "error", Error: err.Error(), Payload: map[string]any{"duration_ms": duration}})
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: tools})
	case "mcp_call":
		var p struct {
			Server string `json:"server"`
			Tool   string `json:"tool"`
			Args   any    `json:"args"`
		}
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		if p.Server == "" || p.Tool == "" {
			return sendError(writeJSON, msg.ID, errors.New("server and tool required"))
		}
		ctx, cancel := context.WithTimeout(context.Background(), 300*time.Second)
		defer cancel()
		start := time.Now()
		result, err := mcpRuntime.Call(ctx, p.Server, p.Tool, p.Args)
		duration := time.Since(start).Milliseconds()
		if err != nil {
			_ = writeJSON(cluster.Message{ID: msg.ID, Status: "error", Error: err.Error(), Payload: map[string]any{"server": p.Server, "tool": p.Tool, "duration_ms": duration}})
			return nil
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: map[string]any{"server": p.Server, "tool": p.Tool, "result": result, "duration_ms": duration}})
	case "start_process":
		var p cluster.StartProcessPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		if p.SessionID == "" || p.Command == "" {
			return sendError(writeJSON, msg.ID, errors.New("session_id and command required"))
		}
		s, err := sessions.Start(context.Background(), p.SessionID, p.Command, p.Workdir, p.Owner, p.RingCapacity)
		if err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: map[string]any{"session_id": s.ID, "started_at": s.StartedAt.Unix()}})
	case "read_process_output":
		var p struct {
			SessionID string `json:"session_id"`
			Owner     string `json:"owner"`
		}
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		s, ok := sessions.Get(p.SessionID)
		if !ok {
			return sendError(writeJSON, msg.ID, errors.New("session not found"))
		}
		if !s.Authorized(p.Owner) {
			return sendError(writeJSON, msg.ID, errors.New("session ownership denied"))
		}
		code, done, _ := s.Status()
		out, errout := s.Output()
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: cluster.ProcessOutputPayload{SessionID: p.SessionID, Stdout: out, Stderr: errout, ExitCode: code, Running: !done}})
	case "interact_with_process":
		var p cluster.ProcessInputPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		s, ok := sessions.Get(p.SessionID)
		if !ok {
			return sendError(writeJSON, msg.ID, errors.New("session not found"))
		}
		if !s.Authorized(p.Owner) {
			return sendError(writeJSON, msg.ID, errors.New("session ownership denied"))
		}
		if err := s.Stdin([]byte(p.Data)); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success"})
	case "force_terminate":
		var p struct {
			SessionID string `json:"session_id"`
			Owner     string `json:"owner"`
		}
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		ss, ok := sessions.Get(p.SessionID)
		if !ok {
			return sendError(writeJSON, msg.ID, errors.New("session not found"))
		}
		if !ss.Authorized(p.Owner) {
			return sendError(writeJSON, msg.ID, errors.New("session ownership denied"))
		}
		if err := sessions.Stop(p.SessionID, true); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success"})
	case "list_sessions":
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: sessions.List()})
	case "read_multiple_files":
		var p cluster.ReadMultipleFilesPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: executor.ReadMultipleFiles(p.Paths, p.Limit)})
	case "create_directory":
		var p cluster.CreateDirectoryPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		if err := executor.CreateDirectory(p.Path); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success"})
	case "move_file":
		var p cluster.MoveFilePayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		if err := executor.MoveFile(p.Source, p.Destination); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success"})
	case "list_processes":
		v, err := executor.ListProcesses()
		if err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: v})
	case "list_directory":
		var p cluster.ListDirectoryPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		v, err := executor.ListDirectory(p.Path, p.Recursive, p.MaxEntries)
		if err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: v})
	case "get_file_info":
		var p cluster.FileInfoPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		v, err := executor.GetFileInfo(p.Path)
		if err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: v})
	case "start_search":
		var p cluster.SearchPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		v, err := executor.Search(context.Background(), p.Root, p.Query, p.MaxResults)
		if err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: v})
	case "exec":
		var p cluster.ExecPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		timeout := p.Timeout
		if timeout <= 0 {
			timeout = 30
		}
		if timeout > 300 {
			timeout = 300
		}
		ctx, cancel := context.WithTimeout(context.Background(), time.Duration(timeout)*time.Second)
		res := exec.Run(ctx, p.Command, p.Workdir)
		cancel()
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", ExitCode: res.ExitCode, Stdout: res.Stdout, Stderr: res.Stderr, DurationMS: res.DurationMS})
	case "file_read":
		var p cluster.FileReadPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		if p.Offset < 0 {
			return sendError(writeJSON, msg.ID, errors.New("negative offset"))
		}
		f, err := os.Open(p.Path)
		if err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		defer f.Close()
		info, err := f.Stat()
		if err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		if _, err = f.Seek(p.Offset, io.SeekStart); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		limit := p.Limit
		if limit <= 0 || limit > 1024*1024 {
			limit = 256 * 1024
		}
		buf := make([]byte, limit)
		n, err := io.ReadFull(f, buf)
		eof := err == io.EOF || err == io.ErrUnexpectedEOF
		if err != nil && !eof {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: map[string]any{"content": string(buf[:n]), "bytes": n, "total_size": info.Size(), "has_more": p.Offset+int64(n) < info.Size(), "eof": eof}})
	case "edit_block":
		var p cluster.EditBlockPayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		res, err := executor.EditBlock(p.Path, p.OldText, p.NewText)
		if err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: res})
	case "file_write":
		var p cluster.FileWritePayload
		if err := decodePayload(msg.Payload, &p); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		if len(p.Content) > 1024*1024 {
			return sendError(writeJSON, msg.ID, errors.New("content too large"))
		}
		if err := os.WriteFile(p.Path, []byte(p.Content), 0644); err != nil {
			return sendError(writeJSON, msg.ID, err)
		}
		return writeJSON(cluster.Message{ID: msg.ID, Status: "success", Payload: map[string]any{"bytes": len(p.Content)}})
	default:
		return sendError(writeJSON, msg.ID, errors.New("unsupported action"))
	}
}

func decodePayload(v any, out any) error {
	b, err := json.Marshal(v)
	if err != nil {
		return err
	}
	return json.Unmarshal(b, out)
}

func sendError(writeJSON func(cluster.Message) error, id string, err error) error {
	return writeJSON(cluster.Message{ID: id, Status: "error", Error: err.Error()})
}

func firstNonEmpty(vs ...string) string {
	for _, v := range vs {
		if v != "" {
			return v
		}
	}
	return ""
}