import {
	CreateRoleMappingRuleDto,
	type ListRoleMappingRuleQueryInput,
	type PatchRoleMappingRuleInput,
} from '@n8n/api-types';
import {
	ProjectRepository,
	RoleMappingRule,
	RoleMappingRuleRepository,
	RoleRepository,
} from '@n8n/db';
import { Service } from '@n8n/di';

import { type EntityManager, type FindOptionsOrder, In } from '@n8n/typeorm';
import type { z } from 'zod';

import { BadRequestError } from '@/errors/response-errors/bad-request.error';
import { ConflictError } from '@/errors/response-errors/conflict.error';
import { NotFoundError } from '@/errors/response-errors/not-found.error';

import {
	assertAndNormalizeProjectIdsForRuleType,
	assertRoleCompatibleWithMappingType,
} from './role-mapping-rule.validation';

type CreateRoleMappingRuleInput = z.infer<(typeof CreateRoleMappingRuleDto)['schema']>;

export type RoleMappingRuleResponse = {
	id: string;
	expression: string;
	role: string;
	type: 'instance' | 'project';
	order: number;
	projectIds: string[];
	createdAt: string;
	updatedAt: string;
};

export type RoleMappingRuleListResponse = {
	count: number;
	items: RoleMappingRuleResponse[];
};

@Service()
export class RoleMappingRuleService {
	constructor(
		private readonly roleMappingRuleRepository: RoleMappingRuleRepository,
		private readonly roleRepository: RoleRepository,
		private readonly projectRepository: ProjectRepository,
	) {}

	async list(query: ListRoleMappingRuleQueryInput): Promise<RoleMappingRuleListResponse> {
		const sortBy = query.sortBy ?? 'order:asc';
		const [sortField, sortDir] = sortBy.split(':') as [
			'order' | 'createdAt' | 'updatedAt',
			'asc' | 'desc',
		];
		const direction: 'ASC' | 'DESC' = sortDir === 'desc' ? 'DESC' : 'ASC';

		const order: FindOptionsOrder<RoleMappingRule> =
			sortField === 'createdAt'
				? { createdAt: direction, id: 'ASC' }
				: sortField === 'updatedAt'
					? { updatedAt: direction, id: 'ASC' }
					: { order: direction, id: 'ASC' };

		const where = query.type ? { type: query.type } : {};

		const [entities, count] = await this.roleMappingRuleRepository.findAndCount({
			where,
			relations: ['projects', 'role'],
			order,
			skip: query.skip,
			take: query.take,
		});

		return {
			count,
			items: entities.map((entity) => this.toResponse(entity)),
		};
	}

	async create(dto: CreateRoleMappingRuleInput): Promise<RoleMappingRuleResponse> {
		const uniqueProjectIds = assertAndNormalizeProjectIdsForRuleType(dto.type, dto.projectIds, []);

		const role = await this.roleRepository.findOne({ where: { slug: dto.role } });
		if (!role) {
			throw new NotFoundError(`Could not find role with slug "${dto.role}"`);
		}

		assertRoleCompatibleWithMappingType(role, dto.type);

		const projects =
			uniqueProjectIds.length > 0
				? await this.projectRepository.findBy({ id: In(uniqueProjectIds) })
				: [];

		if (projects.length !== uniqueProjectIds.length) {
			throw new BadRequestError('One or more projects were not found');
		}

		const existingRules = await this.roleMappingRuleRepository.find({
			where: { type: dto.type },
			select: ['id', 'order'],
			order: { order: 'ASC' },
		});

		// Clamp the requested index into the valid range. Omitted order appends.
		const requestedOrder = dto.order ?? existingRules.length;
		const targetIndex = Math.min(Math.max(requestedOrder, 0), existingRules.length);

		// Save the new rule at a temporary order beyond any currently-used slot,
		// so the unique (type, order) constraint cannot fire on the initial insert.
		const maxOrder = existingRules.length > 0 ? existingRules[existingRules.length - 1].order : -1;
		const tempOrder = Math.max(maxOrder, existingRules.length - 1) + 1;

		const rule = new RoleMappingRule();
		rule.expression = dto.expression;
		rule.role = role;
		rule.type = dto.type;
		rule.order = tempOrder;
		rule.projects = projects;

		const saved = await this.roleMappingRuleRepository.save(rule);

		// Build the final ordering: existing rules in their current order, with the
		// newly saved rule spliced in at targetIndex. applyOrder atomically renumbers
		// everything to [0..n-1] using its two-phase transaction.
		const reorderedIds = existingRules.map((r) => r.id);
		reorderedIds.splice(targetIndex, 0, saved.id);

		await this.applyOrder(reorderedIds);

		const loaded = await this.roleMappingRuleRepository.findOneOrFail({
			where: { id: saved.id },
			relations: ['projects', 'role'],
		});

		return this.toResponse(loaded);
	}

	async patch(id: string, dto: PatchRoleMappingRuleInput): Promise<RoleMappingRuleResponse> {
		if (typeof id !== 'string' || id.length === 0) {
			throw new BadRequestError('Rule id is required');
		}

		if (dto === undefined || dto === null || Object.keys(dto).length === 0) {
			throw new BadRequestError('At least one field is required');
		}

		const rule = await this.roleMappingRuleRepository.findOne({
			where: { id },
			relations: ['projects', 'role'],
		});

		if (!rule) {
			throw new NotFoundError('Could not find role mapping rule');
		}

		const originalType = rule.type as 'instance' | 'project';
		const mergedType = dto.type ?? originalType;
		const mergedOrder = dto.order ?? rule.order;
		const mergedExpression = dto.expression ?? rule.expression;
		const mergedRoleSlug = dto.role ?? rule.role.slug;

		const fallbackProjectIds = rule.projects.map((p) => p.id);
		const uniqueProjectIds = assertAndNormalizeProjectIdsForRuleType(
			mergedType,
			dto.projectIds,
			fallbackProjectIds,
		);

		const role =
			mergedRoleSlug === rule.role.slug
				? rule.role
				: await this.roleRepository.findOne({ where: { slug: mergedRoleSlug } });

		if (!role) {
			throw new NotFoundError(`Could not find role with slug "${mergedRoleSlug}"`);
		}

		assertRoleCompatibleWithMappingType(role, mergedType);

		await this.assertOrderAvailable(mergedType, mergedOrder, id);

		const projects =
			uniqueProjectIds.length > 0
				? await this.projectRepository.findBy({ id: In(uniqueProjectIds) })
				: [];

		if (projects.length !== uniqueProjectIds.length) {
			throw new BadRequestError('One or more projects were not found');
		}

		rule.expression = mergedExpression;
		rule.role = role;
		rule.type = mergedType;
		rule.order = mergedOrder;
		rule.projects = projects;

		await this.roleMappingRuleRepository.save(rule);

		await this.normalizeOrderForType(mergedType);
		if (originalType !== mergedType) {
			await this.normalizeOrderForType(originalType);
		}

		const loaded = await this.roleMappingRuleRepository.findOneOrFail({
			where: { id: rule.id },
			relations: ['projects', 'role'],
		});

		return this.toResponse(loaded);
	}

	async delete(id: string): Promise<{ ruleType: 'instance' | 'project' }> {
		if (typeof id !== 'string' || id.length === 0) {
			throw new BadRequestError('Rule id is required');
		}

		const rule = await this.roleMappingRuleRepository.findOne({ where: { id } });

		if (!rule) {
			throw new NotFoundError('Could not find role mapping rule');
		}

		const ruleType = rule.type as 'instance' | 'project';
		await this.roleMappingRuleRepository.remove(rule);
		await this.normalizeOrderForType(ruleType);
		return { ruleType };
	}

	async deleteAllOfType(type: 'instance' | 'project', tx?: EntityManager): Promise<number> {
		const repo = tx ? tx.getRepository(RoleMappingRule) : this.roleMappingRuleRepository;
		const result = await repo.delete({ type });
		return result.affected ?? 0;
	}

	async move(id: string, targetIndex: number): Promise<RoleMappingRuleResponse> {
		if (typeof id !== 'string' || id.length === 0) {
			throw new BadRequestError('Rule id is required');
		}

		const rule = await this.roleMappingRuleRepository.findOne({
			where: { id },
			relations: ['projects', 'role'],
		});

		if (!rule) {
			throw new NotFoundError('Could not find role mapping rule');
		}

		const type = rule.type as 'instance' | 'project';

		const all = await this.roleMappingRuleRepository.find({
			where: { type },
			select: ['id', 'order'],
			order: { order: 'ASC' },
		});

		const clampedIndex = Math.min(targetIndex, all.length - 1);
		const currentIndex = all.findIndex((r) => r.id === id);

		const reordered = [...all];
		reordered.splice(currentIndex, 1);
		reordered.splice(clampedIndex, 0, all[currentIndex]);

		await this.applyOrder(reordered.map((r) => r.id));

		const loaded = await this.roleMappingRuleRepository.findOneOrFail({
			where: { id },
			relations: ['projects', 'role'],
		});

		return this.toResponse(loaded);
	}

	private async applyOrder(orderedIds: string[]): Promise<void> {
		if (orderedIds.length === 0) return;

		await this.roleMappingRuleRepository.manager.transaction(async (tx) => {
			const offset = orderedIds.length + 1000;

			// Phase 1: move all rules to high offset values to vacate the target slots.
			// This avoids transient unique constraint violations on (type, order) when
			// shifting rules into positions that are already occupied.
			for (let i = 0; i < orderedIds.length; i++) {
				await tx.update(RoleMappingRule, { id: orderedIds[i] }, { order: offset + i });
			}

			// Phase 2: assign the final sequential order values starting from 0.
			for (let i = 0; i < orderedIds.length; i++) {
				await tx.update(RoleMappingRule, { id: orderedIds[i] }, { order: i });
			}
		});
	}

	private async normalizeOrderForType(type: 'instance' | 'project'): Promise<void> {
		const rules = await this.roleMappingRuleRepository.find({
			where: { type },
			select: ['id', 'order'],
			order: { order: 'ASC' },
		});

		if (rules.length === 0) return;

		// Early exit: already a contiguous sequence starting at 0
		if (rules.every((r, i) => r.order === i)) return;

		await this.applyOrder(rules.map((r) => r.id));
	}

	private async assertOrderAvailable(
		type: 'instance' | 'project',
		order: number,
		excludeRuleId?: string,
	): Promise<void> {
		const existingAtOrder = await this.roleMappingRuleRepository.findOne({
			where: { type, order },
		});

		if (existingAtOrder && existingAtOrder.id !== excludeRuleId) {
			throw new ConflictError(
				`A role mapping rule already exists with type "${type}" and order ${order}. Use a different order value.`,
			);
		}
	}

	private toResponse(loaded: RoleMappingRule): RoleMappingRuleResponse {
		return {
			id: loaded.id,
			expression: loaded.expression,
			role: loaded.role.slug,
			type: loaded.type as 'instance' | 'project',
			order: loaded.order,
			projectIds: loaded.projects.map((p) => p.id),
			createdAt: loaded.createdAt.toISOString(),
			updatedAt: loaded.updatedAt.toISOString(),
		};
	}
}