condukt

defmodule Condukt.Workflows.Resolver do
  @moduledoc """
  PubGrub-backed dependency resolver for workflow packages.
  """

  alias Condukt.Workflows.Fetcher.Git
  alias Condukt.Workflows.{Lockfile, NIF, Project, Store}
  alias Condukt.Workflows.Resolver.Requirement

  @doc false
  def collect_requirements(%Project{workflows: workflows}) do
    workflows
    |> Map.values()
    |> Enum.flat_map(&collect_workflow_requirements/1)
    |> Enum.uniq_by(&{&1.url, &1.version_spec})
    |> Enum.sort_by(&{&1.url, &1.version_spec})
  end

  def collect_requirements(loads) when is_list(loads) do
    loads
    |> Enum.flat_map(fn
      load when is_binary(load) ->
        case parse_requirement(load) do
          {:ok, requirement} -> [requirement]
          :relative -> []
          {:error, _reason} -> []
        end

      _ ->
        []
    end)
  end

  @doc false
  def resolve(requirements, opts \\ []) when is_list(requirements) do
    requirements = Enum.sort_by(requirements, &{&1.url, &1.version_spec})
    lockfile = opts[:lockfile] || opts[:lock]

    cond do
      opts[:offline] && match?(%Lockfile{}, lockfile) && Lockfile.satisfies?(lockfile, requirements) ->
        {:ok, lockfile}

      opts[:offline] ->
        {:error, :lockfile_not_satisfied}

      true ->
        do_resolve(requirements, opts)
    end
  end

  @doc false
  def parse_requirement("./" <> _), do: :relative
  def parse_requirement("../" <> _), do: :relative

  def parse_requirement(load) when is_binary(load) do
    case String.split(load, "@", parts: 2) do
      [url_path, version] when url_path != "" and version != "" ->
        with {:ok, version} <- normalize_version(version, load),
             {:ok, package_url} <- package_url_from_load_path(url_path) do
          {:ok, %Requirement{url: package_url, version_spec: version}}
        end

      _ ->
        {:error, {:missing_version, load}}
    end
  end

  defp do_resolve(requirements, opts) do
    with {:ok, index} <- build_index(requirements, opts),
         {:ok, selected} <- NIF.resolve("__root__", Enum.map(requirements, &requirement_map/1), index_for_nif(index)) do
      {:ok, selected_to_lock_packages(selected, index)}
    end
  end

  defp collect_workflow_requirements(%{source_path: source_path}) when is_binary(source_path) do
    with {:ok, source} <- File.read(source_path),
         {:ok, %{"loads" => loads}} <- NIF.parse_only(source, source_path) do
      collect_requirements(loads)
    else
      _ -> []
    end
  end

  defp collect_workflow_requirements(_), do: []

  defp build_index(requirements, opts) do
    case Keyword.get(opts, :index) do
      index when is_map(index) ->
        {:ok, index}

      _ ->
        fetcher = Keyword.get(opts, :fetcher, Git)
        store = Keyword.get_lazy(opts, :store, &Store.default/0)

        Enum.reduce_while(requirements, {:ok, %{}}, &build_package_index(&1, &2, fetcher, store))
    end
  end

  defp build_package_index(requirement, {:ok, index}, fetcher, store) do
    case index_requirement(requirement, fetcher, store) do
      {:ok, package_index} -> {:cont, {:ok, Map.put(index, requirement.url, package_index)}}
      {:error, reason} -> {:halt, {:error, reason}}
    end
  end

  defp index_requirement(%Requirement{url: url}, fetcher, store) do
    with {:ok, versions} <- fetcher.list_versions(url) do
      Enum.reduce_while(versions, {:ok, %{}}, &fetch_index_version(&1, &2, url, fetcher, store))
    end
  end

  defp fetch_index_version(version, {:ok, acc}, url, fetcher, store) do
    version_string = Version.to_string(version)

    case fetcher.fetch(url, version_string) do
      {:ok, fetched} -> store_fetched_version(acc, store, fetched, version_string)
      {:error, reason} -> {:halt, {:error, reason}}
    end
  end

  defp store_fetched_version(acc, store, fetched, version_string) do
    maybe_store(store, fetched)
    {:cont, {:ok, Map.put(acc, version_string, fetch_to_index_info(fetched))}}
  end

  defp maybe_store(store, %{source_dir: source_dir, sha256: sha256}) do
    _ = Store.put(store, source_dir, sha256)
    File.rm_rf(source_dir)
    :ok
  end

  defp maybe_store(_store, _fetched), do: :ok

  defp fetch_to_index_info(fetched) do
    %{
      sha256: fetched.sha256,
      integrity: integrity(fetched.sha256),
      dependencies: Map.get(fetched, :dependencies, [])
    }
  end

  defp index_for_nif(index) do
    Map.new(index, fn {url, versions} ->
      {url,
       Map.new(versions, fn {version, info} ->
         {version, %{dependencies: Enum.map(Map.get(info, :dependencies, []), &requirement_map/1)}}
       end)}
    end)
  end

  defp selected_to_lock_packages(selected, index) do
    selected
    |> Map.new(fn {url, version} ->
      info = get_in(index, [url, version]) || %{}

      {url,
       %{
         version: version,
         sha256: Map.get(info, :sha256, ""),
         integrity: Map.get(info, :integrity, integrity(Map.get(info, :sha256, ""))),
         dependencies: dependency_urls(Map.get(info, :dependencies, []))
       }}
    end)
  end

  defp dependency_urls(dependencies) do
    dependencies
    |> Enum.map(fn
      %Requirement{url: url} -> url
      %{url: url} -> url
    end)
    |> Enum.sort()
  end

  defp requirement_map(%Requirement{} = requirement) do
    %{url: requirement.url, version_spec: requirement.version_spec}
  end

  defp requirement_map(%{url: url, version_spec: version_spec}) do
    %{url: url, version_spec: version_spec}
  end

  defp package_url_from_load_path(url_path) do
    with :ok <- validate_external_load_path(url_path),
         {:ok, package_url, relative_path} <- split_package_url(url_path),
         :ok <- validate_load_relative_path(relative_path, url_path) do
      {:ok, package_url}
    end
  end

  defp validate_external_load_path(url_path) do
    cond do
      String.starts_with?(url_path, ["./", "../", "/", "http://", "https://"]) ->
        {:error, {:invalid_requirement, url_path}}

      String.contains?(url_path, [" ", "\n", "\t"]) ->
        {:error, {:invalid_requirement, url_path}}

      String.contains?(url_path, "//") ->
        {:error, {:invalid_requirement, url_path}}

      true ->
        :ok
    end
  end

  defp split_package_url(url_path) do
    case String.split(url_path, ".git/", parts: 2) do
      [package_url, relative_path] when package_url != "" and relative_path != "" ->
        {:ok, package_url <> ".git", relative_path}

      [_] ->
        infer_package_url(url_path)

      _ ->
        {:error, {:invalid_requirement, url_path}}
    end
  end

  defp infer_package_url(url_path) do
    case String.split(url_path, "/", trim: true) do
      [host, owner, repo, first_path | rest] ->
        {:ok, Enum.join([host, owner, repo], "/"), Enum.join([first_path | rest], "/")}

      _ ->
        {:error, {:missing_load_path, url_path}}
    end
  end

  defp validate_load_relative_path(relative_path, url_path) do
    path_parts = Path.split(relative_path)

    if Path.type(relative_path) == :relative and Path.extname(relative_path) == ".star" and
         not Enum.any?(path_parts, &(&1 in [".", ".."])) do
      :ok
    else
      {:error, {:invalid_requirement, url_path}}
    end
  end

  defp normalize_version(version, load) do
    version = String.trim_leading(version, "v")

    case Version.parse(version) do
      {:ok, _version} -> {:ok, version}
      :error -> {:error, {:invalid_version, load}}
    end
  end

  defp integrity(""), do: ""

  defp integrity(sha256) do
    case Base.decode16(sha256, case: :mixed) do
      {:ok, decoded} -> "sha256-" <> Base.encode64(decoded)
      :error -> ""
    end
  end
end