import { quote } from 'shlex';
import upath from 'upath';
import { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';
import { logger } from '../../../logger/index.ts';
import { getEnv } from '../../../util/env.ts';
import { exec } from '../../../util/exec/index.ts';
import {
  deleteLocalFile,
  readLocalFile,
  writeLocalFile,
} from '../../../util/fs/index.ts';
import { getRepoStatus } from '../../../util/git/index.ts';
import { parseUrl } from '../../../util/url.ts';
import { extractPackageFileFlags as extractRequirementsFileFlags } from '../pip_requirements/common.ts';
import type {
  PackageFileContent,
  UpdateArtifact,
  UpdateArtifactsResult,
  Upgrade,
} from '../types.ts';
import {
  extractHeaderCommand,
  extractPythonVersion,
  getExecOptions,
  getRegistryCredVarsFromPackageFiles,
  matchManager,
} from './common.ts';
import type { PipCompileArgs } from './types.ts';
import { inferCommandExecDir } from './utils.ts';

function haveCredentialsInPipEnvironmentVariables(): boolean {
  const env = getEnv();
  if (env.PIP_INDEX_URL) {
    const indexUrl = parseUrl(env.PIP_INDEX_URL);
    if (!indexUrl) {
      // Assume that an invalid URL contains credentials, just in case
      return true;
    }
    if (!!indexUrl.username || !!indexUrl.password) {
      return true;
    }
  }

  if (env.PIP_EXTRA_INDEX_URL) {
    return env.PIP_EXTRA_INDEX_URL.split(' ').some((urlString) => {
      const url = parseUrl(urlString);
      if (!url) {
        // Assume that an invalid URL contains credentials, just in case
        return true;
      }
      return !!url.username || !!url.password;
    });
  }

  return false;
}

export function constructPipCompileCmd(
  compileArgs: PipCompileArgs,
  upgradePackages: Upgrade[] = [],
): string {
  if (compileArgs.commandType === 'custom') {
    throw new Error(
      'Detected custom command, header modified or set by CUSTOM_COMPILE_COMMAND',
    );
  }

  if (!compileArgs.outputFile) {
    logger.debug(`pip-compile: implicit output file`);
  }
  // safeguard against index url leak if not explicitly set by an option
  if (
    compileArgs.commandType === 'pip-compile' &&
    !compileArgs.noEmitIndexUrl &&
    !compileArgs.emitIndexUrl &&
    haveCredentialsInPipEnvironmentVariables()
  ) {
    compileArgs.argv.splice(1, 0, '--no-emit-index-url');
  }
  for (const dep of upgradePackages) {
    compileArgs.argv.push(
      `--upgrade-package=${quote(`${dep.depName}==${dep.newVersion}`)}`,
    );
  }
  return compileArgs.argv.map(quote).join(' ');
}

export async function updateArtifacts({
  packageFileName: inputFileName,
  newPackageFileContent: newInputContent,
  updatedDeps,
  config,
}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {
  if (!config.lockFiles) {
    logger.warn(
      { packageFileName: inputFileName },
      'pip-compile: No lock files associated with a package file',
    );
    return null;
  }
  logger.debug(
    `pipCompile.updateArtifacts(${inputFileName}->${JSON.stringify(
      config.lockFiles,
    )})`,
  );
  const result: UpdateArtifactsResult[] = [];
  for (const outputFileName of config.lockFiles) {
    const existingOutput = await readLocalFile(outputFileName, 'utf8');
    if (!existingOutput) {
      logger.debug('pip-compile: No output file found');
      return null;
    }
    try {
      await writeLocalFile(inputFileName, newInputContent);
      // TODO(not7cd): use --upgrade option instead deleting
      if (config.isLockFileMaintenance) {
        await deleteLocalFile(outputFileName);
      }
      const compileArgs = extractHeaderCommand(existingOutput, outputFileName);
      let pythonVersion: string | undefined;
      if (compileArgs.commandType === 'uv') {
        pythonVersion = compileArgs.pythonVersion;
      } else {
        pythonVersion = extractPythonVersion(existingOutput, outputFileName);
      }
      const cwd = inferCommandExecDir(outputFileName, compileArgs.outputFile);
      const upgradePackages = updatedDeps.filter((dep) => dep.isLockfileUpdate);
      const packageFiles: PackageFileContent[] = [];
      for (const name of compileArgs.sourceFiles) {
        const manager = matchManager(name);
        if (manager === 'pip_requirements') {
          const path = upath.join(cwd, name);
          const content = await readLocalFile(path, 'utf8');
          if (content) {
            const packageFile = extractRequirementsFileFlags(content);
            packageFiles.push(packageFile);
          }
        }
      }
      const cmd = constructPipCompileCmd(compileArgs, upgradePackages);
      const execOptions = await getExecOptions(
        config,
        compileArgs.commandType,
        cwd,
        getRegistryCredVarsFromPackageFiles(packageFiles),
        pythonVersion,
      );
      logger.trace({ cwd, cmd }, 'pip-compile command');
      logger.trace({ env: execOptions.extraEnv }, 'pip-compile extra env vars');
      await exec(cmd, execOptions);
      const status = await getRepoStatus();
      if (status?.modified.includes(outputFileName)) {
        result.push({
          file: {
            type: 'addition',
            path: outputFileName,
            contents: await readLocalFile(outputFileName, 'utf8'),
          },
        });
      }
    } catch (err) {
      // istanbul ignore if
      if (err.message === TEMPORARY_ERROR) {
        throw err;
      }
      logger.debug({ err }, 'pip-compile: Failed to run command');
      result.push({
        artifactError: {
          fileName: outputFileName,
          stderr: err.message,
        },
      });
    }
  }
  logger.debug('pip-compile: Returning updated output file(s)');
  return result.length === 0 ? null : result;
}