// Package identity validates stable, evidence-anchored location identity.
package identity

import (
	"context"
	"fmt"

	"gitea.maximumdirect.net/eric/notarius/internal/framework/contracts"
	"gitea.maximumdirect.net/eric/notarius/internal/framework/pipeline"
	"gitea.maximumdirect.net/eric/notarius/internal/modules/dnd"
	domainidentity "gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/locations/identity"
	"gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/shared/diagnostics"
	locationshape "gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/validate/locationregistry/shape"
)

const (
	Key              = "normalize/dnd/location-registry/identity"
	ReasonCode       = "invalid_location_identity"
	policy           = domainidentity.Policy
	correctionPolicy = "dnd.location_registry.validator.identity.v2"
)

type Options struct{}
type Validator struct{}

var _ contracts.TypedValidator[dnd.LocationRegistry] = (*Validator)(nil)
var _ pipeline.CheckpointFingerprintProvider = (*Validator)(nil)

func New(Options) *Validator      { return &Validator{} }
func (v *Validator) Name() string { return Key }
func (v *Validator) ExecutionClass() contracts.ExecutionClass {
	return contracts.ExecutionClassDeterministic
}
func (v *Validator) CheckpointFingerprints() []pipeline.CheckpointFingerprint {
	return []pipeline.CheckpointFingerprint{{Name: "policy", Value: policy}, {Name: "correction_policy", Value: correctionPolicy}}
}

func (v *Validator) Validate(_ context.Context, req contracts.TypedValidationRequest[dnd.LocationRegistry]) (contracts.ValidationResult, error) {
	if err := locationshape.Validate(req.Value); err != nil {
		return contracts.ValidationResult{Approved: true}, nil
	}
	identityIssues := domainidentity.ValidateList(req.Value)
	if len(identityIssues) == 0 {
		return contracts.ValidationResult{Approved: true}, nil
	}
	issues := make([]string, len(identityIssues))
	var corrections diagnostics.Corrections
	for index, issue := range identityIssues {
		issues[index] = fmt.Sprintf("locations[%d] %s: %s", issue.RecordIndex, issue.Code, diagnostics.Quote(issue.Value))
		if issue.RecordIndex < 0 || issue.RecordIndex >= len(req.Value.Locations) {
			continue
		}
		location := req.Value.Locations[issue.RecordIndex]
		corrections.Add(string(issue.Code), locationIdentityCorrection(issue.Code), fmt.Sprintf("Affected location %s %s.", diagnostics.Quote(location.Name), diagnostics.SourceRange(location.SourceRefs)))
	}
	return contracts.ValidationResult{
		Approved:           false,
		ReasonCode:         ReasonCode,
		Message:            diagnostics.Aggregate("invalid location identity", issues),
		CorrectionGuidance: corrections.Guidance("Correct the duplicate-group proposals and return the complete replacement proposal response"),
	}, nil
}

func locationIdentityCorrection(code domainidentity.IssueCode) string {
	switch code {
	case domainidentity.IssueEmptyCanonicalName:
		return "Select a canonical proposal member with a nonblank, transcript-supported proper location name."
	case domainidentity.IssueMissingEvidence:
		return "Select a canonical proposal member that has direct transcript evidence; do not discard all supported evidence for a location."
	case domainidentity.IssueInvalidID, domainidentity.IssueIDMismatch:
		return "Revise the proposal so its canonical location member has a valid name and evidence anchor; Notarius derives durable identity without model input."
	case domainidentity.IssueDuplicateID:
		return "Do not use proposals that collapse distinct locations or evidence anchors into one canonical identity; group only records that describe the same location."
	default:
		return "Revise the duplicate-group proposal so every canonical location is transcript-supported and distinct."
	}
}

func Spec() pipeline.ValidatorSpec {
	return pipeline.ValidatorSpec{Key: Key, ExecutionClass: contracts.ExecutionClassDeterministic}
}

func Register(registry *pipeline.ValidatorRegistry) error {
	return pipeline.RegisterTypedValidatorBuilder(registry, dnd.LocationRegistryKind, Spec(), validateOptions, func(request pipeline.BuildRequest) (contracts.TypedValidator[dnd.LocationRegistry], error) {
		options, err := DecodeOptions(request.Options)
		if err != nil {
			return nil, err
		}
		return New(options), nil
	})
}

func DecodeOptions(options map[string]any) (Options, error) {
	if err := pipeline.RejectUnknownOptions(options); err != nil {
		return Options{}, err
	}
	return Options{}, nil
}

func validateOptions(options map[string]any) error { _, err := DecodeOptions(options); return err }