import "server-only";

import { spawn } from "node:child_process";

import {
  buildOpenClawSpawnEnv,
  getOpenClawBundledNodeBinPath,
  getOpenClawLocalPrefixBinPath,
  getOpenClawUserLocalBinPath,
  getOpenClawWindowsNpmBinPath,
  getOpenClawWindowsNpmEntryPath,
  resolveOpenClawSpawnInvocation
} from "@/lib/openclaw/install";
import {
  createDefaultOpenClawBinarySelection,
  readOpenClawBinarySelection,
  resolveOpenClawBinarySelectionPath
} from "@/lib/openclaw/binary-selection";
import { redactSecretText } from "@/lib/security/redaction";
import type { OpenClawCommandDiagnostic } from "@/lib/openclaw/types";

export const OPENCLAW_BIN = process.env.OPENCLAW_BIN || "openclaw";
const initialOpenClawBinEnv = process.env.OPENCLAW_BIN?.trim() || "";
let resolvedOpenClawBin = "";
let resolveOpenClawBinPromise: Promise<string> | null = null;
let resolvedOpenClawVersion: { value: string | null; expiresAt: number } | null = null;
const OPENCLAW_VERSION_CACHE_TTL_MS = 5 * 60_000;
const shellSafeSegmentPattern = /^[A-Za-z0-9_./:@=+%-]+$/;
const commandDiagnosticsLimit = 25;
let commandDiagnosticSequence = 0;
const commandDiagnostics: OpenClawCommandDiagnostic[] = [];

interface CommandOptions {
  timeoutMs?: number;
  signal?: AbortSignal;
}

interface StreamingCommandOptions extends CommandOptions {
  onStdout?: (text: string) => Promise<void> | void;
  onStderr?: (text: string) => Promise<void> | void;
}

export interface CommandResult {
  stdout: string;
  stderr: string;
  metadata?: Record<string, unknown>;
}

export async function runOpenClaw(
  args: string[],
  options: CommandOptions = {}
): Promise<CommandResult> {
  return runOpenClawStream(args, options);
}

export async function runOpenClawJson<T>(
  args: string[],
  options: CommandOptions = {}
): Promise<T> {
  try {
    const result = await runOpenClaw(args, options);
    return parseJsonOutput<T>(result.stdout || result.stderr);
  } catch (error) {
    const failedResult = extractFailedCommandResult(error);

    if (failedResult) {
      try {
        return parseJsonOutput<T>(failedResult.stdout || failedResult.stderr);
      } catch {}
    }

    throw error;
  }
}

export async function runOpenClawStream(
  args: string[],
  options: StreamingCommandOptions = {}
): Promise<CommandResult> {
  const openClawBin = await resolveOpenClawBin();

  return new Promise<CommandResult>((resolve, reject) => {
    const startedAtMs = Date.now();
    const startedAt = new Date(startedAtMs).toISOString();
    const commandDiagnosticId = `openclaw:${startedAtMs}:${commandDiagnosticSequence++}`;
    const invocation = resolveOpenClawSpawnInvocation(openClawBin, args);
    // turbopackIgnore: true
    const child = spawn(invocation.command, invocation.args, {
      detached: true,
      env: buildOpenClawEnv(),
      windowsHide: true
    });

    let stdout = "";
    let stderr = "";
    let finished = false;
    let timedOut = false;
    let aborted = false;
    let callbackChain = Promise.resolve();
    let killTimer: ReturnType<typeof setTimeout> | null = null;

    const queueCallback = (
      callback: ((text: string) => Promise<void> | void) | undefined,
      text: string
    ) => {
      if (!callback || !text) {
        return;
      }

      callbackChain = callbackChain.then(() => callback(text)).catch(() => {});
    };

    const settle = (handler: () => void) => {
      if (finished) {
        return;
      }

      finished = true;
      void callbackChain.finally(handler);
    };

    const terminateChild = (signal: NodeJS.Signals) => {
      if (child.pid) {
        try {
          process.kill(-child.pid, signal);
        } catch {
          child.kill(signal);
        }
      } else {
        child.kill(signal);
      }

      if (signal === "SIGTERM" && !killTimer) {
        killTimer = setTimeout(() => {
          if (!finished) {
            if (child.pid) {
              try {
                process.kill(-child.pid, "SIGKILL");
              } catch {
                child.kill("SIGKILL");
              }
            } else {
              child.kill("SIGKILL");
            }
          }
        }, 2_000);
      }
    };

    const timer = setTimeout(() => {
      timedOut = true;
      terminateChild("SIGTERM");
    }, options.timeoutMs ?? 45000);

    const handleAbort = () => {
      aborted = true;
      terminateChild("SIGTERM");
    };

    if (options.signal) {
      if (options.signal.aborted) {
        handleAbort();
      } else {
        options.signal.addEventListener("abort", handleAbort);
      }
    }

    const cleanup = () => {
      clearTimeout(timer);

      if (killTimer) {
        clearTimeout(killTimer);
        killTimer = null;
      }

      if (options.signal) {
        options.signal.removeEventListener("abort", handleAbort);
      }
    };

    child.stdout.on("data", (chunk: Buffer | string) => {
      const text = chunk.toString();
      stdout += text;
      queueCallback(options.onStdout, text);
    });

    child.stderr.on("data", (chunk: Buffer | string) => {
      const text = chunk.toString();
      stderr += text;
      queueCallback(options.onStderr, text);
    });

    child.on("error", (error) => {
      cleanup();
      settle(() => {
        recordOpenClawCommandDiagnostic({
          id: commandDiagnosticId,
          command: openClawBin,
          args,
          startedAt,
          startedAtMs,
          status: "start-error",
          exitCode: null,
          stdout,
          stderr: stderr ? `${stderr}\n${error.message}` : error.message
        });
        reject(
          createCommandError(
            `OpenClaw command failed to start: ${error.message}`,
            stdout,
            stderr ? `${stderr}\n${error.message}` : error.message,
            null
          )
        );
      });
    });

    child.on("close", (code) => {
      cleanup();
      settle(() => {
        if (aborted) {
          recordOpenClawCommandDiagnostic({
            id: commandDiagnosticId,
            command: openClawBin,
            args,
            startedAt,
            startedAtMs,
            status: "aborted",
            exitCode: code,
            stdout,
            stderr: stderr || "The command was aborted."
          });
          reject(
            createCommandError(
              "OpenClaw command was aborted.",
              stdout,
              stderr || "The command was aborted.",
              code
            )
          );
          return;
        }

        if (timedOut) {
          recordOpenClawCommandDiagnostic({
            id: commandDiagnosticId,
            command: openClawBin,
            args,
            startedAt,
            startedAtMs,
            status: "timeout",
            exitCode: code,
            stdout,
            stderr: stderr || "The command exceeded its timeout window."
          });
          reject(
            createCommandError(
              `OpenClaw command timed out after ${Math.round((options.timeoutMs ?? 45000) / 1000)} seconds.`,
              stdout,
              stderr || "The command exceeded its timeout window.",
              code
            )
          );
          return;
        }

        if (code !== 0) {
          recordOpenClawCommandDiagnostic({
            id: commandDiagnosticId,
            command: openClawBin,
            args,
            startedAt,
            startedAtMs,
            status: "failed",
            exitCode: code,
            stdout,
            stderr
          });
          reject(
            createCommandError(
              `OpenClaw command failed with exit code ${code}.`,
              stdout,
              stderr,
              code
            )
          );
          return;
        }

        recordOpenClawCommandDiagnostic({
          id: commandDiagnosticId,
          command: openClawBin,
          args,
          startedAt,
          startedAtMs,
          status: "ok",
          exitCode: code,
          stdout,
          stderr
        });
        resolve({
          stdout,
          stderr
        });
      });
    });
  });
}

export function getRecentOpenClawCommandDiagnostics() {
  return commandDiagnostics
    .map((diagnostic) => ({
      ...diagnostic,
      args: sanitizeOpenClawCommandArgsForDiagnostics(diagnostic.args),
      stdoutPreview: diagnostic.stdoutPreview ? redactSecretText(diagnostic.stdoutPreview) : null,
      stderrPreview: diagnostic.stderrPreview ? redactSecretText(diagnostic.stderrPreview) : null
    }))
    .reverse();
}

export function clearOpenClawCommandDiagnostics() {
  commandDiagnostics.length = 0;
}

export async function runOpenClawJsonStream<T>(
  args: string[],
  options: StreamingCommandOptions = {}
): Promise<T> {
  try {
    const result = await runOpenClawStream(args, options);
    return parseJsonOutput<T>(result.stdout || result.stderr);
  } catch (error) {
    const failedResult = extractFailedCommandResult(error);

    if (failedResult) {
      try {
        return parseJsonOutput<T>(failedResult.stdout || failedResult.stderr);
      } catch {}
    }

    throw error;
  }
}

export async function resolveOpenClawVersion(): Promise<string | null> {
  const now = Date.now();
  if (resolvedOpenClawVersion && resolvedOpenClawVersion.expiresAt > now) {
    return resolvedOpenClawVersion.value;
  }

  try {
    const result = await runOpenClaw(["--version"], { timeoutMs: 5_000 });
    const value = parseOpenClawVersion(result.stdout || result.stderr);
    resolvedOpenClawVersion = {
      value,
      expiresAt: now + OPENCLAW_VERSION_CACHE_TTL_MS
    };
    return value;
  } catch {
    resolvedOpenClawVersion = {
      value: null,
      expiresAt: now + 30_000
    };
    return null;
  }
}

export async function detectOpenClaw(): Promise<boolean> {
  try {
    await resolveOpenClawBin();
    return true;
  } catch {
    return false;
  }
}

export function formatOpenClawCommand(command: string, args: string[]) {
  return [command, ...args].map(quoteShellSegment).join(" ");
}

export async function resolveOpenClawBin(): Promise<string> {
  if (resolveOpenClawBinPromise) {
    return resolveOpenClawBinPromise;
  }

  resolveOpenClawBinPromise = (async () => {
    if (resolvedOpenClawBin) {
      return resolvedOpenClawBin;
    }

    const selection = await readOpenClawBinarySelection().catch(() => createDefaultOpenClawBinarySelection());
    const selectionPath = resolveOpenClawBinarySelectionPath(selection);
    const explicitEnvBin = initialOpenClawBinEnv || "";
    const candidates = selection.mode === "auto"
      ? getOpenClawBinCandidates()
      : [selectionPath || ""];

    if (selection.mode === "auto" && explicitEnvBin) {
      candidates.unshift(explicitEnvBin);
    }

    for (const candidate of candidates) {
      if (await canExecuteOpenClaw(candidate)) {
        resolvedOpenClawBin = candidate;
        process.env.OPENCLAW_BIN = candidate;
        return candidate;
      }
    }

    throw new Error("OpenClaw CLI is not installed or could not be resolved.");
  })();

  try {
    return await resolveOpenClawBinPromise;
  } finally {
    resolveOpenClawBinPromise = null;
  }
}

export function resetOpenClawBinCache() {
  if (!initialOpenClawBinEnv && process.env.OPENCLAW_BIN === resolvedOpenClawBin) {
    delete process.env.OPENCLAW_BIN;
  }

  resolvedOpenClawBin = "";
  resolveOpenClawBinPromise = null;
  resolvedOpenClawVersion = null;
}

export function getOpenClawBinCandidates() {
  const envBin = initialOpenClawBinEnv;
  const bundledNodeBin = getOpenClawBundledNodeBinPath();
  const localPrefixBin = getOpenClawLocalPrefixBinPath();
  const candidates = [
    envBin && envBin !== localPrefixBin ? envBin : "",
    bundledNodeBin,
    localPrefixBin,
    getOpenClawUserLocalBinPath(),
    process.platform === "win32" ? getOpenClawWindowsNpmEntryPath() : "",
    process.platform === "win32" ? getOpenClawWindowsNpmBinPath() : "",
    "openclaw"
  ];

  return Array.from(new Set(candidates.filter((candidate) => Boolean(candidate))));
}

export function getResolvedOpenClawBin() {
  return resolvedOpenClawBin || null;
}

function parseJsonOutput<T>(text: string): T {
  const trimmed = text.trim();

  if (!trimmed) {
    throw new Error("OpenClaw returned no JSON output.");
  }

  try {
    return JSON.parse(trimmed) as T;
  } catch {}

  const lines = trimmed.split(/\r?\n/);

  for (let start = 0; start < lines.length; start += 1) {
    const line = lines[start].trim();

    if (!line.startsWith("{") && !line.startsWith("[")) {
      continue;
    }

    for (let end = lines.length; end > start; end -= 1) {
      const candidate = lines.slice(start, end).join("\n").trim();

      try {
        return JSON.parse(candidate) as T;
      } catch {}
    }
  }

  throw new Error(`Unable to parse OpenClaw JSON output:\n${redactSecretText(trimmed.slice(0, 800))}`);
}

function extractFailedCommandResult(error: unknown): CommandResult | null {
  if (!error || typeof error !== "object") {
    return null;
  }

  const stdout = "stdout" in error ? stringifyStream(error.stdout) : "";
  const stderr = "stderr" in error ? stringifyStream(error.stderr) : "";

  if (!stdout && !stderr) {
    return null;
  }

  return { stdout, stderr };
}

export function parseOpenClawVersion(output: string) {
  const trimmed = output.trim();

  if (!trimmed) {
    return null;
  }

  const versionMatch = trimmed.match(/\b(\d+(?:\.\d+)+)\b/);

  return versionMatch?.[1] ?? null;
}

function createCommandError(message: string, stdout: string, stderr: string, code: number | null) {
  const failureDetail = redactSecretText(summarizeCommandFailure(stderr || stdout));
  const resolvedMessage =
    code !== null && /^OpenClaw command failed with exit code \d+\.$/.test(message) && failureDetail
      ? `${message.slice(0, -1)}: ${failureDetail}.`
      : message;

  const error = new Error(resolvedMessage) as Error & {
    stdout: string;
    stderr: string;
    code: number | null;
  };

  error.stdout = stdout;
  error.stderr = stderr;
  error.code = code;

  return error;
}

function summarizeCommandFailure(output: string) {
  const lines = output
    .split(/\r?\n/)
    .map((line) => line.trim())
    .filter(Boolean);

  if (lines.length === 0) {
    return "";
  }

  const priorityPatterns = [
    /Config path not found/i,
    /cannot find module/i,
    /command not found/i,
    /no such file or directory/i,
    /permission denied/i,
    /not writable/i,
    /failed/i,
    /\berror\b/i
  ];

  for (const pattern of priorityPatterns) {
    const matched = lines.find((line) => pattern.test(line));

    if (matched) {
      return matched;
    }
  }

  return lines.at(-1) ?? "";
}

function stringifyStream(value: unknown) {
  if (typeof value === "string") {
    return value;
  }

  if (value instanceof Uint8Array) {
    return Buffer.from(value).toString();
  }

  return "";
}

function recordOpenClawCommandDiagnostic(input: {
  id: string;
  command: string;
  args: string[];
  startedAt: string;
  startedAtMs: number;
  status: OpenClawCommandDiagnostic["status"];
  exitCode: number | null;
  stdout: string;
  stderr: string;
}) {
  const finishedAtMs = Date.now();
  commandDiagnostics.push({
    id: input.id,
    command: input.command,
    args: sanitizeOpenClawCommandArgsForDiagnostics(input.args),
    startedAt: input.startedAt,
    finishedAt: new Date(finishedAtMs).toISOString(),
    durationMs: Math.max(finishedAtMs - input.startedAtMs, 0),
    status: input.status,
    exitCode: input.exitCode,
    stdoutPreview: previewCommandOutput(input.stdout),
    stderrPreview: previewCommandOutput(input.stderr)
  });

  if (commandDiagnostics.length > commandDiagnosticsLimit) {
    commandDiagnostics.splice(0, commandDiagnostics.length - commandDiagnosticsLimit);
  }
}

export function sanitizeOpenClawCommandArgsForDiagnostics(args: string[]) {
  const redactedValueFlags = new Set([
    "--message",
    "--api-key",
    "--bot-token",
    "--hook-token",
    "--push-token",
    "--token",
    "--password",
    "--secret",
    "--webhook-url",
    "--key"
  ]);
  const sanitized: string[] = [];
  let redactNext = false;
  let redactConfigValue = false;

  for (let index = 0; index < args.length; index += 1) {
    const arg = args[index];

    if (redactNext || redactConfigValue) {
      sanitized.push("[redacted]");
      redactNext = false;
      redactConfigValue = false;
      continue;
    }

    if (isOpenClawConfigSetPath(args, index)) {
      const assignment = splitConfigPathAssignment(arg);
      if (assignment && isSensitiveConfigPath(assignment.path)) {
        sanitized.push(`${assignment.path}=[redacted]`);
        continue;
      }

      if (isSensitiveConfigPath(arg)) {
        sanitized.push(arg);
        redactConfigValue = true;
        continue;
      }
    }

    const [flagName] = arg.split("=", 1);

    if (redactedValueFlags.has(flagName)) {
      sanitized.push(arg.includes("=") ? `${flagName}=[redacted]` : arg);
      redactNext = !arg.includes("=");
      continue;
    }

    sanitized.push(arg.length > 160 ? `${arg.slice(0, 157)}...` : arg);
  }

  return sanitized;
}

function isOpenClawConfigSetPath(args: string[], index: number) {
  return args[index - 2] === "config" && args[index - 1] === "set";
}

function splitConfigPathAssignment(value: string) {
  const separatorIndex = value.indexOf("=");
  if (separatorIndex <= 0) {
    return null;
  }

  return {
    path: value.slice(0, separatorIndex),
    value: value.slice(separatorIndex + 1)
  };
}

function isSensitiveConfigPath(value: string) {
  return /(^|[._-])(?:api[-_]?key|token|password|secret|private[-_]?key|credential|client[-_]?secret|webhook[-_]?token)s?($|[._-])/i
    .test(value);
}

function previewCommandOutput(output: string) {
  const normalized = output
    .split(/\r?\n/)
    .map((line) => line.trim())
    .filter(Boolean)
    .join("\n")
    .trim();

  if (!normalized) {
    return null;
  }

  const redacted = redactSecretText(normalized);
  return redacted.length > 800 ? `${redacted.slice(0, 797)}...` : redacted;
}

function quoteShellSegment(value: string) {
  if (shellSafeSegmentPattern.test(value)) {
    return value;
  }

  return `'${value.replace(/'/g, "'\\''")}'`;
}

function buildOpenClawEnv() {
  return buildOpenClawSpawnEnv();
}

async function canExecuteOpenClaw(command: string) {
  return await new Promise<boolean>((resolve) => {
    const invocation = resolveOpenClawSpawnInvocation(command, ["--version"]);
    let child;

    try {
      // turbopackIgnore: true
      child = spawn(invocation.command, invocation.args, {
        stdio: "ignore",
        windowsHide: true
      });
    } catch {
      resolve(false);
      return;
    }

    child.once("error", () => {
      resolve(false);
    });

    child.once("exit", (code) => {
      resolve(code === 0);
    });
  });
}
