package main

import (
	"errors"
	"flag"
	"fmt"
	"log"
	"net/http"
	"os"
	"path/filepath"
	"strings"

	"golang.org/x/crypto/bcrypt"
	"golang.org/x/term"

	"tracker/internal/server"
	"tracker/internal/store"
)

func main() {
	defaultDB := filepath.Join(os.Getenv("HOME"), ".local", "share", "tracker", "tracker.db")
	dbPath := flag.String("db", defaultDB, "sqlite database path")
	addr := flag.String("addr", ":8420", "listen address")
	addUser := flag.String("adduser", "", "create a login user, then exit")
	flag.Parse()

	if err := os.MkdirAll(filepath.Dir(*dbPath), 0o755); err != nil {
		log.Fatal(err)
	}

	if *addUser != "" {
		if err := runAddUser(*dbPath, *addUser); err != nil {
			log.Fatal(err)
		}
		return
	}

	st, err := store.Open(*dbPath)
	if err != nil {
		log.Fatal(err)
	}
	defer st.Close()

	srv, err := server.New(st)
	if err != nil {
		log.Fatal(err)
	}

	log.Printf("tracker online :: listening on %s", *addr)
	if err := http.ListenAndServe(*addr, srv.Routes()); err != nil {
		log.Fatal(err)
	}
}

func runAddUser(dbPath, username string) error {
	username = strings.TrimSpace(username)
	if username == "" {
		return errors.New("username cannot be empty")
	}
	if strings.ContainsAny(username, " \t") {
		return errors.New("username cannot contain whitespace")
	}

	password := os.Getenv("TRACKER_PASSWORD")
	confirm := password
	if password == "" {
		fmt.Print("passphrase: ")
		pw, err := term.ReadPassword(int(os.Stdin.Fd()))
		fmt.Println()
		if err != nil {
			return err
		}
		fmt.Print("confirm: ")
		confirmPw, err := term.ReadPassword(int(os.Stdin.Fd()))
		fmt.Println()
		if err != nil {
			return err
		}
		password, confirm = string(pw), string(confirmPw)
	}

	if len(password) < 8 {
		return errors.New("passphrase must be at least 8 characters")
	}
	if password != confirm {
		return errors.New("passphrases do not match")
	}

	hash, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
	if err != nil {
		return err
	}

	st, err := store.Open(dbPath)
	if err != nil {
		return err
	}
	defer st.Close()

	if _, err := st.CreateUser(username, string(hash)); err != nil {
		if errors.Is(err, store.ErrConflict) {
			return fmt.Errorf("user %q already exists", username)
		}
		return err
	}
	fmt.Printf("user %q created. log in at /login\n", username)
	return nil
}