tyrex

defmodule Tyrex do
  @moduledoc """
  Embedded Deno JS/TS runtime for Elixir.

  Tyrex wraps the Deno runtime as a GenServer, allowing you to evaluate JavaScript
  and TypeScript code directly from Elixir. Each runtime is an isolated V8 instance
  with full access to Deno APIs.

  ## Quick Start

      {:ok, pid} = Tyrex.start()
      {:ok, 3} = Tyrex.eval("1 + 2", pid: pid)
      Tyrex.stop(pid: pid)

  ## Named Runtime

      # In your supervision tree
      {Tyrex, name: MyApp.JS, main_module_path: "priv/js/app.js"}

      # Then anywhere
      {:ok, result} = Tyrex.eval("processData()", name: MyApp.JS)

  ## Calling Elixir from JavaScript

  JavaScript code can call Elixir functions via `Tyrex.apply()`:

      Tyrex.eval(~s|(async () => await Tyrex.apply("Enum", "sum", [[1,2,3]]))()|, pid: pid)
      # => {:ok, 6}
  """

  use GenServer

  alias Tyrex.Error
  alias Tyrex.Native
  alias Tyrex.Runtime

  @doc """
  Start a Tyrex process without any main module.

  See `start/1` for more information.

  ## Examples

      iex> {:ok, pid} = Tyrex.start()
      iex> Tyrex.eval("1 + 2", pid: pid)
      {:ok, 3}
  """
  @spec start() :: GenServer.on_start()
  def start do
    start([])
  end

  @doc """
  Start a Tyrex process.

  ## Options

    * `:main_module_path` - Path to the main JavaScript module. The default is
      to start the runtime without a main module.
    * `:permissions` - Runtime permissions. Defaults to `:allow_all`.
      See "Permissions" section below.

  ## Permissions

  Control what the JavaScript runtime can access:

    * `:allow_all` — Full access to everything (default)
    * `:none` — No permissions (JS can only compute, no I/O)
    * Keyword list — Granular control per permission type

  Each permission key accepts `true` (allow all), `false` (deny all),
  or a list of specific allowed values:

    * `:allow_net` / `:deny_net` — Network access (`true`, `false`, or `["host:port", ...]`)
    * `:allow_read` / `:deny_read` — File read access (`true`, `false`, or `["/path", ...]`)
    * `:allow_write` / `:deny_write` — File write access
    * `:allow_env` / `:deny_env` — Environment variables (`true`, `false`, or `["VAR", ...]`)
    * `:allow_run` / `:deny_run` — Subprocess execution
    * `:allow_ffi` / `:deny_ffi` — Foreign function interface
    * `:allow_sys` / `:deny_sys` — System info (hostname, OS, etc.)
    * `:allow_import` — Dynamic imports

  ## Examples

      iex> Tyrex.start(main_module_path: "path/to/main.js")

      # No permissions (pure computation only)
      iex> Tyrex.start(permissions: :none)

      # Only allow network and reading from /tmp
      iex> Tyrex.start(permissions: [allow_net: true, allow_read: ["/tmp"]])
  """
  @spec start(Keyword.t()) :: GenServer.on_start()
  def start(opts) do
    GenServer.start(__MODULE__, opts)
  end

  @doc """
  Same as `stop/1`, but it assumes that there is a process with the name
  `Tyrex` (the default if you don't provide a name to `start_link/1`).
  """
  @spec stop() :: :ok
  def stop do
    stop([])
  end

  @doc """
  Stop a Tyrex process.

  ## Options

    * `:name` - The name of the Tyrex process. The default is `Tyrex`.
      Can't be provided if `:pid` is provided.
    * `:pid` - The pid of the Tyrex process. Can't be provided if `:name` is
      provided.
    * `:reason` - See `GenServer.stop/3`.
    * `:timeout` - See `GenServer.stop/3`.
  """
  @spec stop(Keyword.t()) :: :ok
  def stop(opts) do
    GenServer.stop(
      Keyword.get(opts, :pid) || Keyword.get(opts, :name, __MODULE__),
      Keyword.get(opts, :reason, :normal),
      Keyword.get(opts, :timeout, :infinity)
    )
  end

  @doc """
  Start a Tyrex process linked to the current process.

  ## Options

    * `:name` - The name of the process. The default is `Tyrex`.

  See `start/1` for more options.

  ## Examples

      iex> Tyrex.start_link(name: MyApp.Tyrex)
      iex> Tyrex.eval("1 + 2", name: MyApp.Tyrex)
      {:ok, 3}
  """
  @spec start_link(Keyword.t()) :: GenServer.on_start()
  def start_link(opts) do
    GenServer.start_link(
      __MODULE__,
      Keyword.take(opts, [:main_module_path, :permissions]),
      name: Keyword.get(opts, :name, __MODULE__)
    )
  end

  @doc """
  Same as `eval/2`, but it assumes that there is a process with the name
  `Tyrex` (the default if you don't provide a name to `start_link/1`).

  ## Examples

      iex> Tyrex.eval("1 + 2")
      {:ok, 3}
  """
  @spec eval(binary()) :: {:ok, term()} | {:error, Error.t()}
  def eval(code) do
    eval(code, name: __MODULE__)
  end

  @doc """
  Run the given JavaScript code and return the result. If a promise is returned,
  it will be awaited.

  ## Options

    * `:blocking` - Indicates whether the NIF call should block until the
      JavaScript execution finishes or not. Blocking is more performant, but it
      can also cause problems if the call takes too long. The default is `false`.
    * `:name` - The name of the Tyrex process. The default is `Tyrex`.
      Can't be provided if `:pid` is provided.
    * `:pid` - The pid of the Tyrex process. Can't be provided if `:name` is
      provided.
    * `:timeout` - See `GenServer.call/3`.

  ## Examples

      iex> Tyrex.eval("1 + 2")
      {:ok, 3}

      iex> Tyrex.eval("1 + 2", blocking: true)
      {:ok, 3}

      iex> {:ok, pid} = Tyrex.start()
      iex> Tyrex.eval("1 + 2", pid: pid)
      {:ok, 3}
  """
  @spec eval(binary(), Keyword.t()) :: {:ok, term()} | {:error, Error.t()}
  def eval(code, opts) do
    GenServer.call(
      Keyword.get(opts, :pid) || Keyword.get(opts, :name, __MODULE__),
      {:eval, code, opts},
      Keyword.get(opts, :timeout, 5000)
    )
  end

  @doc """
  Same as `eval/1`, but raises if the result isn't successful.
  """
  @spec eval!(binary()) :: term()
  def eval!(code) do
    {:ok, result} = eval(code)
    result
  end

  @doc """
  Same as `eval/2`, but raises if the result isn't successful.
  """
  @spec eval!(binary(), Keyword.t()) :: term()
  def eval!(code, opts) do
    {:ok, result} = eval(code, opts)
    result
  end

  @impl GenServer
  def init(opts) do
    pid = self()

    result =
      Task.async(fn ->
        :ok =
          Native.start_runtime(
            pid,
            Keyword.get(
              opts,
              :main_module_path,
              "#{Application.app_dir(:tyrex)}/priv/main.js"
            ),
            encode_permissions(Keyword.get(opts, :permissions, :allow_all))
          )

        receive do
          {:ok, reference} ->
            {:ok, %Runtime{reference: reference}}

          error ->
            error
        end
      end)
      |> Task.await()

    case result do
      {:ok, _} = result ->
        result

      {:error, error} ->
        {:stop, error}
    end
  end

  @impl GenServer
  def handle_call({:eval, code, opts}, from, state) do
    if Keyword.get(opts, :blocking, false) do
      case Native.eval_blocking(state.reference, code) do
        {:ok, json} ->
          {:reply, {:ok, Jason.decode!(json)}, state}

        {:error, %Error{name: :dead_runtime_error}} ->
          {:stop, {:shutdown, :dead_runtime_error}, state}

        error ->
          {:reply, decode_promise_rejection(error), state}
      end
    else
      :ok = Native.eval(from, state.reference, code)
      {:noreply, state}
    end
  end

  @impl GenServer
  def handle_info({:apply, application_id, module, function_name, args}, state) do
    decoded_args = Jason.decode!(args)

    result =
      with {:ok, decoded_module} <- to_module(module),
           {:ok, decoded_function_name} <- to_atom(function_name),
           :ok <-
             function_exists?(decoded_module, decoded_function_name, Enum.count(decoded_args)),
           result <- apply(decoded_module, decoded_function_name, decoded_args),
           {:ok, encoded_result} <- encode_json(result) do
        {:ok, encoded_result}
      else
        {:error, error} ->
          {:error, Jason.encode!(error)}
      end

    {:ok, {}} =
      Native.apply_reply(
        state.reference,
        application_id,
        result
      )

    {:noreply, state}
  end

  @impl GenServer
  def handle_info({:eval_reply, from, result}, state) do
    case result do
      {:ok, json} ->
        GenServer.reply(from, {:ok, Jason.decode!(json)})
        {:noreply, state}

      {:error, %Error{name: :dead_runtime_error}} ->
        {:stop, {:shutdown, :dead_runtime_error}, state}

      error ->
        GenServer.reply(from, decode_promise_rejection(error))
        {:noreply, state}
    end
  end

  @impl GenServer
  def terminate(_, state) do
    :ok = Native.stop_runtime(state.reference)
  end

  defp decode_promise_rejection(error) do
    case error do
      {:error, %Error{name: :promise_rejection} = e} ->
        {:error, %{e | value: Jason.decode!(e.value)}}

      _ ->
        error
    end
  end

  defp encode_json(value) do
    case Jason.encode(value) do
      {:ok, _} = result ->
        result

      {:error, error} ->
        {:error, "Could not convert to JSON: #{inspect(error.value)}"}
    end
  end

  defp function_exists?(module, function_name, arity) do
    if function_exported?(module, function_name, arity) do
      :ok
    else
      {:error, "No such function: #{module}.#{function_name}/#{arity}"}
    end
  end

  defp to_module(string) do
    case string do
      ":" <> name ->
        to_atom(name)

      _ ->
        to_atom("Elixir.#{string}")
    end
  end

  defp to_atom(string) do
    {:ok, String.to_existing_atom(string)}
  rescue
    ArgumentError ->
      {:error, "No existing atom: #{string}"}
  end

  defp encode_permissions(:allow_all), do: ~s("allow_all")

  defp encode_permissions(:none) do
    Jason.encode!(%{})
  end

  defp encode_permissions(opts) when is_list(opts) do
    opts
    |> Map.new(fn
      {key, true} -> {key, true}
      {key, false} -> {key, false}
      {key, list} when is_list(list) -> {key, Enum.map(list, &to_string/1)}
    end)
    |> Jason.encode!()
  end

  defp encode_permissions(opts) when is_map(opts) do
    Jason.encode!(opts)
  end
end