//! SQLite-backed metadata database for tracking worktrees.
//!
//! Gated behind the `metadata` cargo feature. When disabled, all DB operations
//! compile away to no-ops.

mod queries;
mod schema;

use std::path::{Path, PathBuf};
use std::time::{SystemTime, UNIX_EPOCH};

use anyhow::{Context, Result};
use kigi_sqlite_journal::JournalMode;
use rusqlite::Connection;
use serde::{Deserialize, Serialize};

#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "lowercase")]
pub enum WorktreeKind {
    Session,
    Ab,
    Pool,
    Fork,
    Manual,
    Subagent,
}

impl WorktreeKind {
    pub fn as_str(self) -> &'static str {
        match self {
            Self::Session => "session",
            Self::Ab => "ab",
            Self::Pool => "pool",
            Self::Fork => "fork",
            Self::Manual => "manual",
            Self::Subagent => "subagent",
        }
    }

    pub fn from_str_lossy(s: &str) -> Self {
        match s {
            "session" => Self::Session,
            "ab" => Self::Ab,
            "pool" => Self::Pool,
            "fork" => Self::Fork,
            "manual" => Self::Manual,
            "subagent" => Self::Subagent,
            _ => Self::Manual,
        }
    }
}

#[derive(Clone, Copy, Debug, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "lowercase")]
pub enum WorktreeStatus {
    Alive,
    Dead,
}

impl WorktreeStatus {
    pub fn as_str(self) -> &'static str {
        match self {
            Self::Alive => "alive",
            Self::Dead => "dead",
        }
    }

    pub fn from_str_lossy(s: &str) -> Self {
        match s {
            "alive" => Self::Alive,
            "dead" => Self::Dead,
            _ => Self::Dead,
        }
    }
}

#[derive(Clone, Debug, Serialize, Deserialize)]
pub struct WorktreeRecord {
    pub id: String,
    pub path: PathBuf,
    pub source_repo: PathBuf,
    pub repo_name: String,
    pub kind: WorktreeKind,
    pub creation_mode: String,
    pub git_ref: Option<String>,
    pub head_commit: Option<String>,
    pub session_id: Option<String>,
    pub creator_pid: Option<u32>,
    pub created_at: i64,
    pub last_accessed_at: Option<i64>,
    pub status: WorktreeStatus,
    pub metadata: Option<serde_json::Value>,
}

#[derive(Default)]
pub struct ListFilter {
    pub repo_name: Option<String>,
    pub source_repo: Option<PathBuf>,
    pub kind: Option<WorktreeKind>,
    pub status: Option<WorktreeStatus>,
    pub include_dead: bool,
}

#[derive(Clone, Debug, Default, Serialize, Deserialize)]
pub struct DbStats {
    pub total_records: u64,
    pub alive_count: u64,
    pub dead_count: u64,
    pub db_file_bytes: u64,
}

pub struct WorktreeDb {
    conn: Connection,
}

impl WorktreeDb {
    /// Open (or create) the DB at `kigi_home/worktrees.db`.
    pub fn open(kigi_home: &Path) -> Result<Self> {
        Self::open_at(&kigi_home.join("worktrees.db"))
    }

    /// Open with an explicit path.
    pub fn open_at(path: &Path) -> Result<Self> {
        if let Some(parent) = path.parent() {
            std::fs::create_dir_all(parent)
                .with_context(|| format!("failed to create dir for DB: {}", parent.display()))?;
        }
        // The mode decision statfs's the parent dir created above.
        Self::open_at_with_journal_mode(path, JournalMode::for_db_path(path))
    }

    /// Open with an explicit journal mode — the seam tests use to exercise
    /// the network-filesystem decision on a local disk.
    fn open_at_with_journal_mode(path: &Path, journal_mode: JournalMode) -> Result<Self> {
        // Per-host sibling on network mounts (see JournalMode::effective_db_path).
        let path = journal_mode.effective_db_path(path);
        let conn = Connection::open(&path)
            .with_context(|| format!("failed to open worktree DB: {}", path.display()))?;
        let db = Self { conn };
        db.set_journal_mode(journal_mode)?;
        // Normal statement timeout, because the conversion budget is done.
        db.conn
            .busy_timeout(std::time::Duration::from_millis(5000))?;
        db.init_schema()?;
        Ok(db)
    }

    /// Put the database in `mode`'s journal mode, retrying on `SQLITE_BUSY`
    /// under one absolute deadline (~10s total).
    ///
    /// Conversion-lock acquisition only partially honors `busy_timeout` (see
    /// `JournalMode::apply`, the single source of truth): a second process
    /// opening the same file at the same instant can still get `SQLITE_BUSY`
    /// immediately. Without a retry that opener's `open_at` fails, and callers
    /// like `register_worktree`/`unregister_worktree` swallow the error
    /// (best-effort) — silently dropping worktree tracking, exactly what this DB
    /// exists to prevent. A bounded retry rides out the concurrent converter
    /// (which finishes in microseconds), while the deadline plus a per-attempt
    /// `busy_timeout` cap keeps a held legacy lock from stalling startup by
    /// `attempts x busy_timeout`. Once converted the setting persists (WAL) or
    /// re-applies as a no-op (TRUNCATE), so later opens are cheap.
    fn set_journal_mode(&self, mode: JournalMode) -> Result<()> {
        use rusqlite::ErrorCode;
        use std::time::{Duration, Instant};
        // Total conversion budget; each attempt waits at most 1s for locks.
        const DEADLINE: Duration = Duration::from_secs(10);
        let start = Instant::now();
        let mut last_err = None;
        loop {
            let remaining = DEADLINE.saturating_sub(start.elapsed());
            if remaining.is_zero() {
                break;
            }
            self.conn
                .busy_timeout(remaining.min(Duration::from_millis(1000)))?;
            match mode.apply(&self.conn) {
                Ok(()) => return Ok(()),
                Err(e) => {
                    let busy = matches!(
                        &e,
                        rusqlite::Error::SqliteFailure(f, _)
                            if matches!(f.code, ErrorCode::DatabaseBusy | ErrorCode::DatabaseLocked)
                    );
                    if !busy {
                        return Err(e).with_context(|| {
                            format!("failed to set journal mode {}", mode.as_str())
                        });
                    }
                    last_err = Some(e);
                    // Brief pause so fail-fast busy errors don't spin hot.
                    std::thread::sleep(Duration::from_millis(20));
                }
            }
        }
        Err(last_err.expect("deadline allows at least one attempt")).with_context(|| {
            format!(
                "failed to set journal mode {} (database busy after {:?})",
                mode.as_str(),
                start.elapsed()
            )
        })
    }

    /// Open the default DB at `~/.kigi/worktrees.db`.
    ///
    /// Discovers kigi home via `$KIGI_SHARE_DIR`, falling back to the canonicalized
    /// `$HOME/.kigi` (matching `kigi_config::kigi_home`).
    /// Path is resolved fresh each call (~1µs env var read) to support
    /// test overrides. Each call opens its own connection — callers in hot
    /// paths should cache the `WorktreeDb` instance.
    pub fn open_default() -> Result<Self> {
        Self::open(&resolve_kigi_home()?)
    }

    /// Open an in-memory DB (for tests).
    pub fn open_in_memory() -> Result<Self> {
        let conn = Connection::open_in_memory().context("failed to open in-memory DB")?;
        let db = Self { conn };
        db.init_schema()?;
        Ok(db)
    }

    fn init_schema(&self) -> Result<()> {
        self.conn
            .execute_batch(schema::INIT_SQL)
            .context("failed to init worktree DB schema")?;

        let stored: Option<String> = self
            .conn
            .query_row(schema::GET_META, ["schema_version"], |row| row.get(0))
            .ok();

        let needs_update = match stored {
            None => true,
            Some(v) => v.parse::<u32>().unwrap_or(0) < schema::SCHEMA_VERSION,
        };
        if needs_update {
            self.conn.execute(
                schema::UPSERT_META,
                rusqlite::params!["schema_version", schema::SCHEMA_VERSION.to_string()],
            )?;
        }

        Ok(())
    }

    pub fn register(&self, record: &WorktreeRecord) -> Result<()> {
        queries::register(&self.conn, record)
    }

    pub fn unregister(&self, id: &str) -> Result<bool> {
        queries::unregister(&self.conn, id)
    }

    pub fn unregister_by_path(&self, path: &Path) -> Result<bool> {
        queries::unregister_by_path(&self.conn, path)
    }

    pub fn mark_dead(&self, id: &str) -> Result<bool> {
        queries::mark_dead(&self.conn, id)
    }

    pub fn touch(&self, id: &str) -> Result<bool> {
        queries::touch(&self.conn, id)
    }

    /// Look up a worktree by its DB ID only (no label or path fallback).
    pub fn get_by_id(&self, id: &str) -> Result<Option<WorktreeRecord>> {
        queries::get_by_id(&self.conn, id)
    }

    /// Look up by ID, label, or path.
    ///
    /// If `id_or_path` contains `/`, it's treated as a path (canonicalized
    /// before lookup). Otherwise it's looked up first as a DB ID, then as a
    /// worktree label (stored in `metadata.label`).
    pub fn get(&self, id_or_path: &str) -> Result<Option<WorktreeRecord>> {
        if id_or_path.contains('/') {
            let canon = PathBuf::from(id_or_path);
            let canon = dunce::canonicalize(&canon).unwrap_or(canon);
            queries::get_by_path(&self.conn, &canon)
        } else {
            let by_id = queries::get_by_id(&self.conn, id_or_path)?;
            if by_id.is_some() {
                return Ok(by_id);
            }
            queries::get_by_label(&self.conn, id_or_path)
        }
    }

    /// Look up a worktree by its label (stored in metadata JSON).
    pub fn get_by_label(&self, label: &str) -> Result<Option<WorktreeRecord>> {
        queries::get_by_label(&self.conn, label)
    }

    pub fn list(&self, filter: &ListFilter) -> Result<Vec<WorktreeRecord>> {
        queries::list(&self.conn, filter)
    }

    pub fn stats(&self) -> Result<DbStats> {
        queries::stats(&self.conn)
    }

    /// Mark all records whose paths no longer exist on disk as dead.
    /// Returns the number of records marked.
    pub fn sweep_dead(&self) -> Result<u64> {
        queries::sweep_dead(&self.conn)
    }
}

/// Derive a worktree ID from its destination path: `<basename>-<hash of full path>`
/// (the last component, minus any `worktree-` prefix, plus a full-path hash).
///
/// The basename alone collides across repos, and `INSERT OR REPLACE` would then evict
/// the other repo's record; hashing the full path keeps distinct worktrees distinct.
pub fn id_from_path(path: &Path) -> String {
    let name = path
        .file_name()
        .map(|n| n.to_string_lossy())
        .unwrap_or_default();
    let base = name.strip_prefix("worktree-").unwrap_or(&name);
    format!("{base}-{}", crate::copy::shard::short_path_hash(path))
}

/// Extract the repo name (last component) from a source repo path.
pub fn repo_name_from_path(source: &Path) -> String {
    source
        .file_name()
        .map(|n| n.to_string_lossy().into_owned())
        .unwrap_or_else(|| "repo".to_string())
}

pub fn now_epoch_secs() -> i64 {
    SystemTime::now()
        .duration_since(UNIX_EPOCH)
        .unwrap_or_default()
        .as_secs() as i64
}

pub fn resolve_kigi_home() -> Result<PathBuf> {
    if let Ok(v) = std::env::var("KIGI_SHARE_DIR") {
        return Ok(PathBuf::from(v));
    }
    // Standard home-dir lookup (`USERPROFILE`/Known Folders on Windows, where
    // `HOME` is usually unset outside Git Bash) — the same resolution as
    // kigi_config::default_kigi_home(), so worktree paths land in the same
    // physical .kigi tree as trust/hooks.
    let home = std::env::home_dir()
        .context("neither $KIGI_SHARE_DIR nor a home directory could be resolved")?;
    // Canonicalize so a symlinked home still maps to one physical tree; the
    // dunce canonicalization must stay in sync with default_kigi_home().
    Ok(dunce::canonicalize(&home).unwrap_or(home).join(".kigi"))
}

/// Serializes tests that mutate the process-global `KIGI_SHARE_DIR` env var so they
/// don't clobber each other under `cargo test`, where tests share one process
/// (nextest isolates per-process, but the suite must also pass under `cargo test`).
#[cfg(test)]
static KIGI_SHARE_DIR_ENV_LOCK: std::sync::Mutex<()> = std::sync::Mutex::new(());

/// Test-only isolation for code that resolves the DB via `open_default()`.
///
/// Holds [`KIGI_SHARE_DIR_ENV_LOCK`] (serializing concurrent setters), points
/// `KIGI_SHARE_DIR` at a fresh private tmp dir, and restores the prior value on drop.
/// Use instead of hand-rolling the lock + restore guard + tmp dir per test.
///
/// `Drop` restores `KIGI_SHARE_DIR` before `_lock` releases, so the env is correct
/// before another waiting setter proceeds.
#[cfg(test)]
pub(crate) struct KigiHomeFixture {
    _lock: std::sync::MutexGuard<'static, ()>,
    prev: Option<std::ffi::OsString>,
    /// The isolated kigi home; pass to `WorktreeDb::open` to read the same DB
    /// `open_default()` writes to.
    pub home: PathBuf,
    _tmp: tempfile::TempDir,
}

#[cfg(test)]
impl KigiHomeFixture {
    pub(crate) fn new() -> Self {
        let lock = KIGI_SHARE_DIR_ENV_LOCK
            .lock()
            .unwrap_or_else(|e| e.into_inner());
        let tmp = tempfile::TempDir::new().unwrap();
        let home = tmp.path().join("kigi-home");
        std::fs::create_dir_all(&home).unwrap();
        // Warm up the DB (journal-mode conversion + schema) before exposing it
        // via KIGI_SHARE_DIR, sparing the test hot loop set_journal_mode's retry
        // sleeps. This open has exclusive access (nothing reaches the path
        // until KIGI_SHARE_DIR points here); set_journal_mode's retry is the actual
        // race fix.
        let _ = WorktreeDb::open(&home);
        let prev = std::env::var_os("KIGI_SHARE_DIR");
        unsafe { std::env::set_var("KIGI_SHARE_DIR", &home) };
        Self {
            _lock: lock,
            prev,
            home,
            _tmp: tmp,
        }
    }
}

#[cfg(test)]
impl Drop for KigiHomeFixture {
    fn drop(&mut self) {
        unsafe {
            match self.prev.take() {
                Some(p) => std::env::set_var("KIGI_SHARE_DIR", p),
                None => std::env::remove_var("KIGI_SHARE_DIR"),
            }
        }
    }
}

#[cfg(test)]
mod tests;