package api

import (
	"bytes"
	"compress/gzip"
	"io/fs"
	"mime"
	"net/http"
	"path"
	"strings"
	"sync"
	"time"
)

// 应用页面的 CSP：CodeMirror 通过 <style> 注入样式，需要 'unsafe-inline'；
// 笔记中可引用外部图片，img-src 放开 http/https
const appCSP = "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; " +
	"img-src 'self' data: blob: https: http:; connect-src 'self'; worker-src 'self' blob:; font-src 'self' data:; " +
	"object-src 'none'; base-uri 'none'; frame-ancestors 'none'"

type staticFile struct {
	data    []byte
	gzipped []byte // 压缩后不变小时为 nil
}

// staticHandler 提供前端构建产物：带哈希的 assets/ 长期缓存，其余每次校验；
// 文本资源首次请求时压缩并缓存在内存（嵌入的文件不会变化）
type staticHandler struct {
	fsys    fs.FS
	started time.Time
	mu      sync.Mutex
	cache   map[string]*staticFile
}

func newStaticHandler(fsys fs.FS) http.Handler {
	return &staticHandler{fsys: fsys, started: time.Now(), cache: map[string]*staticFile{}}
}

func (h *staticHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
	if r.Method != http.MethodGet && r.Method != http.MethodHead {
		writeError(w, 405, "不支持的请求方法")
		return
	}
	name := strings.TrimPrefix(path.Clean("/"+r.URL.Path), "/")
	// 已移除的公开入口不能回退到应用首页。
	if name == "s" || strings.HasPrefix(name, "s/") || name == "share.html" {
		writeError(w, 404, "页面不存在")
		return
	}
	f, err := h.load(name)
	if err != nil {
		// 前端路由：未知路径一律返回入口页面
		name = "index.html"
		if f, err = h.load(name); err != nil {
			writeError(w, 404, "前端资源缺失")
			return
		}
	}
	hd := w.Header()
	if strings.HasPrefix(name, "assets/") {
		hd.Set("Cache-Control", "public, max-age=31536000, immutable")
	} else {
		hd.Set("Cache-Control", "no-cache")
	}
	if strings.HasSuffix(name, ".html") {
		hd.Set("Content-Security-Policy", appCSP)
	}
	if path.Ext(name) == ".webmanifest" {
		// Go 的 MIME 表未必包含此扩展名，不能让 ServeContent 对压缩后的数据嗅探类型。
		hd.Set("Content-Type", "application/manifest+json")
	} else if ct := mime.TypeByExtension(path.Ext(name)); ct != "" {
		hd.Set("Content-Type", ct)
	}
	hd.Add("Vary", "Accept-Encoding")
	body := f.data
	if f.gzipped != nil && strings.Contains(r.Header.Get("Accept-Encoding"), "gzip") {
		hd.Set("Content-Encoding", "gzip")
		body = f.gzipped
	}
	http.ServeContent(w, r, name, h.started, bytes.NewReader(body))
}

func (h *staticHandler) load(name string) (*staticFile, error) {
	h.mu.Lock()
	defer h.mu.Unlock()
	if f, ok := h.cache[name]; ok {
		return f, nil
	}
	data, err := fs.ReadFile(h.fsys, name)
	if err != nil {
		return nil, err
	}
	f := &staticFile{data: data}
	switch path.Ext(name) {
	case ".js", ".css", ".html", ".svg", ".json", ".txt", ".webmanifest":
		var buf bytes.Buffer
		zw, _ := gzip.NewWriterLevel(&buf, gzip.BestCompression)
		zw.Write(data)
		zw.Close()
		if buf.Len() < len(data) {
			f.gzipped = buf.Bytes()
		}
	}
	h.cache[name] = f
	return f, nil
}