package audit

import (
	"context"
	"crypto/sha256"
	"fmt"
	"strconv"

	"gorm.io/gorm"

	"github.com/break/junhong_cmp_fiber/pkg/constants"
	pkgerrors "github.com/break/junhong_cmp_fiber/pkg/errors"
)

// TaskInput 描述导入、批购、失效或导出任务的安全审计事实。
type TaskInput struct {
	EventID          string
	ActionCode       string
	Summary          string
	TaskID           uint
	TaskNo           string
	DisplayName      string
	Actor            ActorInput
	Source           string
	ScopeType        string
	ScopeID          string
	ScopeName        string
	Result           string
	ErrorCode        string
	ErrorSummary     string
	CorrelationID    string
	ParentEventID    string
	BatchTotal       int
	SuccessCount     int
	FailCount        int
	IdentitySnapshot map[string]any
	BeforeData       map[string]any
	AfterData        map[string]any
	Metadata         map[string]any
}

// WriteTask 将任务状态与批量统计写入对应的注册任务资源。
func (w *Writer) WriteTask(ctx context.Context, tx *gorm.DB, input TaskInput) error {
	if w == nil || w.registry == nil {
		return pkgerrors.New(pkgerrors.CodeInvalidStatus, "任务统一审计 Writer 未正确配置")
	}
	action, ok := w.registry.Action(input.ActionCode)
	if !ok {
		return pkgerrors.New(pkgerrors.CodeInvalidParam, "任务审计动作未注册")
	}
	if input.TaskNo == "" {
		return pkgerrors.New(pkgerrors.CodeInvalidParam, "任务审计缺少稳定任务编号")
	}
	var taskID *string
	if input.TaskID != 0 {
		value := strconv.FormatUint(uint64(input.TaskID), 10)
		taskID = &value
	}
	displayName := input.DisplayName
	if displayName == "" {
		displayName = input.TaskNo
	}
	return w.Append(ctx, tx, AppendInput{
		EventID: input.EventID, ActionCode: input.ActionCode, Summary: input.Summary,
		Actor: input.Actor, Source: input.Source,
		ScopeType: input.ScopeType, ScopeID: input.ScopeID, ScopeName: input.ScopeName,
		Result: input.Result, ErrorCode: input.ErrorCode, ErrorSummary: input.ErrorSummary,
		CorrelationID: input.CorrelationID, ParentEventID: input.ParentEventID,
		BatchTotal: input.BatchTotal, SuccessCount: input.SuccessCount, FailCount: input.FailCount,
		Metadata: input.Metadata,
		Resources: []ResourceInput{{
			Type: action.PrimaryResource, ID: taskID, Key: input.TaskNo, DisplayName: displayName,
			Relation: constants.AuditResourceRelationPrimary, Role: constants.AuditResourceRoleBatchTask,
			IdentitySnapshot: input.IdentitySnapshot, BeforeData: input.BeforeData, AfterData: input.AfterData,
			SubjectVisibility: constants.AuditSubjectInternalOnly,
		}},
	})
}

// TaskEventID 返回可重试任务阶段的稳定审计事件 ID。
func TaskEventID(resourceType string, taskID uint, phase string) string {
	if taskID == 0 || phase == "" {
		return ""
	}
	value := fmt.Sprintf("task:%s:%d:%s", resourceType, taskID, phase)
	if len(value) <= 64 {
		return value
	}
	digest := sha256.Sum256([]byte(value))
	return fmt.Sprintf("task:%x", digest[:16])
}