<?php

namespace App\Jobs;

use App\Events\ServerReachabilityChanged;
use App\Helpers\SshMultiplexingHelper;
use App\Models\Server;
use App\Services\ConfigurationRepository;
use App\Services\HetznerService;
use Illuminate\Bus\Queueable;
use Illuminate\Contracts\Queue\ShouldBeEncrypted;
use Illuminate\Contracts\Queue\ShouldQueue;
use Illuminate\Foundation\Bus\Dispatchable;
use Illuminate\Queue\InteractsWithQueue;
use Illuminate\Queue\Middleware\WithoutOverlapping;
use Illuminate\Queue\SerializesModels;
use Illuminate\Queue\TimeoutExceededException;
use Illuminate\Support\Facades\Log;
use Illuminate\Support\Facades\Process;

class ServerConnectionCheckJob implements ShouldBeEncrypted, ShouldQueue
{
    use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;

    public $tries = 1;

    public $timeout = 15;

    public function __construct(
        public Server $server,
        public bool $disableMux = true
    ) {}

    public function middleware(): array
    {
        return [(new WithoutOverlapping('server-connection-check-'.$this->server->uuid))->expireAfter(25)->dontRelease()];
    }

    private function disableSshMux(): void
    {
        $configRepository = app(ConfigurationRepository::class);
        $configRepository->disableSshMux();
    }

    public function handle()
    {
        $wasReachable = (bool) $this->server->settings->is_reachable;
        $wasNotified = (bool) $this->server->unreachable_notification_sent;

        try {
            // Check if server is disabled
            if ($this->server->settings->force_disabled) {
                $this->server->settings->update([
                    'is_reachable' => false,
                    'is_usable' => false,
                ]);
                Log::debug('ServerConnectionCheck: Server is disabled', [
                    'server_id' => $this->server->id,
                    'server_name' => $this->server->name,
                ]);

                return;
            }

            // Check Hetzner server status if applicable
            if ($this->server->hetzner_server_id && $this->server->cloudProviderToken) {
                $this->checkHetznerStatus();
            }

            if ($this->server->vultr_instance_id && $this->server->cloudProviderToken) {
                $this->checkVultrStatus();
            }

            if ($this->server->digitalocean_droplet_id && $this->server->cloudProviderToken) {
                $this->checkDigitalOceanStatus();
            }

            // Temporarily disable mux if requested
            if ($this->disableMux) {
                $this->disableSshMux();
            }

            // Check basic connectivity first
            $isReachable = $this->checkConnection();

            if (! $isReachable) {
                $this->server->settings->update([
                    'is_reachable' => false,
                    'is_usable' => false,
                ]);
                $this->server->increment('unreachable_count');

                Log::warning('ServerConnectionCheck: Server not reachable', [
                    'server_id' => $this->server->id,
                    'server_name' => $this->server->name,
                    'server_ip' => $this->server->ip,
                ]);

                $this->dispatchReachabilityChangedIfNeeded($wasReachable, $wasNotified, false);

                return;
            }

            // Server is reachable, check if Docker is available
            $isUsable = $this->checkDockerAvailability();

            $this->server->settings->update([
                'is_reachable' => true,
                'is_usable' => $isUsable,
            ]);

            if ($this->server->unreachable_count > 0) {
                $this->server->update(['unreachable_count' => 0]);
            }

            $this->dispatchReachabilityChangedIfNeeded($wasReachable, $wasNotified, true);

        } catch (\Throwable $e) {

            Log::error('ServerConnectionCheckJob failed', [
                'error' => $e->getMessage(),
                'server_id' => $this->server->id,
            ]);
            $this->server->settings->update([
                'is_reachable' => false,
                'is_usable' => false,
            ]);
            $this->server->increment('unreachable_count');

            $this->dispatchReachabilityChangedIfNeeded($wasReachable, $wasNotified, false);

            return;
        }
    }

    public function failed(?\Throwable $exception): void
    {
        if ($exception instanceof TimeoutExceededException) {
            $wasReachable = (bool) $this->server->settings->is_reachable;
            $wasNotified = (bool) $this->server->unreachable_notification_sent;

            $this->server->settings->update([
                'is_reachable' => false,
                'is_usable' => false,
            ]);
            $this->server->increment('unreachable_count');

            $this->dispatchReachabilityChangedIfNeeded($wasReachable, $wasNotified, false);

            // Delete the queue job so it doesn't appear in Horizon's failed list.
            $this->job?->delete();
        }
    }

    /**
     * Fire ServerReachabilityChanged when state crosses the unreachable threshold (count >= 2)
     * or when a previously-notified server recovers. Skips noise from single transient flaps.
     */
    private function dispatchReachabilityChangedIfNeeded(bool $wasReachable, bool $wasNotified, bool $isReachable): void
    {
        if ($isReachable) {
            if (! $wasReachable || $wasNotified) {
                ServerReachabilityChanged::dispatch($this->server);
            }

            return;
        }

        if ($this->server->unreachable_count >= 2 && ! $wasNotified) {
            ServerReachabilityChanged::dispatch($this->server);
        }
    }

    private function checkHetznerStatus(): void
    {
        $status = null;

        try {
            $hetznerService = new HetznerService($this->server->cloudProviderToken->token);
            $serverData = $hetznerService->getServer($this->server->hetzner_server_id);
            $status = $serverData['status'] ?? null;

        } catch (\Throwable) {
            // Silently ignore — server may have been deleted from Hetzner.
        }
        if ($this->server->hetzner_server_status !== $status) {
            $this->server->update(['hetzner_server_status' => $status]);
            $this->server->hetzner_server_status = $status;
            if ($status === 'off') {
                throw new \Exception('Server is powered off');
            }
        }

    }

    private function checkVultrStatus(): void
    {
        try {
            $status = $this->server->refreshVultrState();
        } catch (\Throwable) {
            // Silently ignore transient Vultr API errors.

            return;
        }

        if (in_array($status, ['stopped', 'suspended', 'deleted'], true)) {
            throw new \Exception('Vultr instance is not running');
        }
    }

    private function checkDigitalOceanStatus(): void
    {
        try {
            $status = $this->server->refreshDigitalOceanState();
        } catch (\Throwable $e) {
            Log::debug('ServerConnectionCheck: DigitalOcean status check failed', [
                'server_id' => $this->server->id,
                'error' => $e->getMessage(),
            ]);

            return;
        }

        $this->server->digitalocean_droplet_status = $status;

        if (in_array($status, ['off', 'archive', 'deleted'], true)) {
            throw new \Exception('DigitalOcean droplet is not running');
        }
    }

    private function checkConnection(): bool
    {
        try {
            // Single SSH attempt without SshRetryHandler — retries waste time for connectivity checks.
            // Backoff is managed at the dispatch level via unreachable_count.
            $commands = ['ls -la /'];
            if ($this->server->isNonRoot()) {
                $commands = parseCommandsByLineForSudo(collect($commands), $this->server);
            }
            $commandString = implode("\n", $commands);

            $sshCommand = SshMultiplexingHelper::generateSshCommand($this->server, $commandString, true);
            $process = Process::timeout(10)->run($sshCommand);

            return $process->exitCode() === 0;
        } catch (\Throwable $e) {
            Log::debug('ServerConnectionCheck: Connection check failed', [
                'server_id' => $this->server->id,
                'error' => $e->getMessage(),
            ]);

            return false;
        }
    }

    private function checkDockerAvailability(): bool
    {
        try {
            // Use instant_remote_process to check Docker
            // The function will automatically handle sudo for non-root users
            $output = instant_remote_process_with_timeout(
                ['docker version --format json'],
                $this->server,
                false // don't throw error
            );

            if ($output === null) {
                return false;
            }

            // Try to parse the JSON output to ensure Docker is really working
            $output = trim($output);
            if (! empty($output)) {
                $dockerInfo = json_decode($output, true);

                return isset($dockerInfo['Server']['Version']);
            }

            return false;
        } catch (\Throwable $e) {
            Log::debug('ServerConnectionCheck: Docker check failed', [
                'server_id' => $this->server->id,
                'error' => $e->getMessage(),
            ]);

            return false;
        }
    }
}
