#![cfg_attr(not(feature = "boxed"), feature(type_alias_impl_trait))]
#![cfg_attr(test, feature(exit_status_error))]

#[cfg(not(loom))]
use std::thread::LocalKey;
use std::{future::Future, marker::PhantomData, ops::Deref, ptr::addr_of};

#[cfg(loom)]
use loom::thread::LocalKey;

/// A wrapper around a thread-safe inner type used for creating pointers to thread-locals
/// that are valid for the lifetime of the async runtime and usable within an async context across
/// await points
pub struct Context<T: Sync>(T);

impl<T> Context<T>
where
  T: Sync,
{
  /// Create a new thread-local context
  ///
  /// # Usage
  ///
  /// Either wrap an inner type with Context and assign to a thread-local, or add as an unwrapped field in a struct that implements [AsRef](https://doc.rust-lang.org/std/convert/trait.AsRef.html)<[`Context<T>`]>
  ///
  /// # Example
  ///
  /// ```rust
  /// thread_local! {
  ///   static COUNTER: Context<AtomicUsize> = unsafe { Context::new(|| AtomicUsize::new(0)) };
  /// }
  /// ```
  ///
  /// # Safety
  ///
  /// The **only** safe way to use [`Context`] is within a thread local variable that upholds the [pin drop guarantee](https://doc.rust-lang.org/std/pin/index.html#drop-guarantee): it cannot be wrapped in a pointer type nor cell type; and it must not be invalidated nor repurposed until when [drop](https://doc.rust-lang.org/std/ops/trait.Drop.html#tymethod.drop) happens solely as a consequence of the thread dropping. It does not matter which thread [`Context`] is allocated on, and so it is sound to have publicly visible thread locals using [`Context`] without concern for visibility, but it must be guaranteed that references never exist outside of nor outlive the async runtime by upholding the gaurantees enumerated within [`AsyncLocal`] governing the safe usage of [`LocalRef`] and [`RefGuard`].
  pub unsafe fn new(inner: T) -> Context<T> {
    Context(inner)
  }
}

impl<T> AsRef<Context<T>> for Context<T>
where
  T: Sync,
{
  fn as_ref(&self) -> &Context<T> {
    self
  }
}

impl<T> Deref for Context<T>
where
  T: Sync,
{
  type Target = T;
  fn deref(&self) -> &Self::Target {
    &self.0
  }
}
/// A thread-safe pointer to a thread local [`Context`]
#[derive(PartialEq, Eq, PartialOrd, Ord, Hash, Debug)]
pub struct LocalRef<T: Sync + 'static>(*const Context<T>);

impl<T> LocalRef<T>
where
  T: Sync + 'static,
{
  unsafe fn new(context: &Context<T>) -> Self {
    LocalRef(addr_of!(*context))
  }

  ///
  /// # Safety
  ///
  /// To ensure that it is not possible for [`RefGuard`] to be moved to a thread outside of the
  /// async runtime, this must be constrained to any non-'static lifetime such as 'async_trait
  pub unsafe fn guarded_ref<'a>(&self) -> RefGuard<'a, T> {
    RefGuard {
      inner: self.0,
      _marker: PhantomData,
    }
  }
}

impl<T> Deref for LocalRef<T>
where
  T: Sync,
{
  type Target = T;
  fn deref(&self) -> &Self::Target {
    unsafe { (*self.0).deref() }
  }
}

impl<T> Clone for LocalRef<T>
where
  T: Sync + 'static,
{
  fn clone(&self) -> Self {
    LocalRef(self.0)
  }
}

impl<T> Copy for LocalRef<T> where T: Sync + 'static {}

unsafe impl<T> Send for LocalRef<T> where T: Sync {}
unsafe impl<T> Sync for LocalRef<T> where T: Sync {}

/// A thread-safe pointer to a thread-local [`Context`] constrained by a phantom lifetime
#[derive(PartialEq, Eq, PartialOrd, Ord, Hash, Debug)]
pub struct RefGuard<'a, T: Sync + 'static> {
  inner: *const Context<T>,
  _marker: PhantomData<fn(&'a ()) -> &'a ()>,
}

impl<'a, T> RefGuard<'a, T>
where
  T: Sync + 'static,
{
  unsafe fn new(context: &Context<T>) -> Self {
    RefGuard {
      inner: addr_of!(*context),
      _marker: PhantomData,
    }
  }
}

impl<'a, T> Deref for RefGuard<'a, T>
where
  T: Sync,
{
  type Target = T;
  fn deref(&self) -> &Self::Target {
    unsafe { (*self.inner).deref() }
  }
}

impl<'a, T> Clone for RefGuard<'a, T>
where
  T: Sync + 'static,
{
  fn clone(&self) -> Self {
    RefGuard {
      inner: self.inner,
      _marker: PhantomData,
    }
  }
}

impl<'a, T> Copy for RefGuard<'a, T> where T: Sync + 'static {}

unsafe impl<'a, T> Send for RefGuard<'a, T> where T: Sync {}
unsafe impl<'a, T> Sync for RefGuard<'a, T> where T: Sync {}

/// LocalKey extension for creating stable thread-safe pointers to thread-local [`Context`]s that
/// are valid for the lifetime of the async runtime and usable within an async context across await
/// points

#[async_t::async_trait]
pub trait AsyncLocal<T, Ref>
where
  T: 'static + AsRef<Context<Ref>>,
  Ref: Sync + 'static,
{
  /// Create a thread-safe pointer to a thread local [`Context`]
  ///
  /// # Safety
  ///
  /// The **only** safe way to use [`LocalRef`] is as created from and used within the context of
  /// the async runtime or a thread scoped therein. All behavior must ensure that it is not possible
  /// for [`LocalRef`] to be created within nor dereferenced on a thread outside of the async
  /// runtime.
  ///
  /// The well-known way of safely accomplishing these guarantees is to:
  ///
  /// 1) ensure that [`LocalRef`] can only refer to a thread local within the context of the runtime
  /// by creating and using only within an async context such as [`tokio::spawn`],
  /// [`std::future::Future::poll`], async fn, async block or within the drop of a pinned
  /// [`std::future::Future`] that created [`LocalRef`] prior while pinned and polling.
  ///
  /// 2) limit public usage and ensure that [`LocalRef`] cannot be dereferenced outside of the async
  /// runtime context
  ///
  /// 3) use [`pin_project::pinned_drop`](https://docs.rs/pin-project/latest/pin_project/attr.pinned_drop.html) to ensure the safety of dereferencing [`LocalRef`] on drop impl of a pinned future that created [`LocalRef`] while polling.
  ///
  /// 4) ensure that a move into [`std::thread`] cannot occur or otherwise that [`LocalRef`] cannot
  /// be created nor derefenced outside of an async context by constraining use exclusively to
  /// within a pinned [`std::future::Future`] being polled or dropped and otherwise using
  /// [`RefGuard`] explicitly over any non-`static lifetime such as 'async_trait to allow more
  /// flexible usage combined with async traits
  ///
  /// 5) only use [`std::thread::scope`] with validly created [`LocalRef`]
  unsafe fn local_ref(&'static self) -> LocalRef<Ref>;

  /// Create a lifetime-constrained thread-safe pointer to a thread local [`Context`]
  ///
  /// # Safety
  ///
  /// The **only** safe way to use [`RefGuard`] is as created from and used within the context of
  /// the async runtime or a thread scoped therein. All behavior must ensure that it is not possible
  /// for [`RefGuard`] to be created within nor dereferenced on a thread outside of the async
  /// runtime.
  ///
  /// The well-known way of safely accomplishing these guarantees is to:
  ///
  /// 1) ensure that [`RefGuard`] can only refer to a thread local within the context of the async
  /// runtime by creating within an async context such as [`tokio::spawn`],
  /// [`std::future::Future::poll`], or an async fn
  ///
  /// 2) explicitly constrain the lifetime to any non-'static lifetime such as `async_trait
  unsafe fn guarded_ref<'a>(&'static self) -> RefGuard<'a, Ref>;

  async fn with_async<F, R, Fut>(&'static self, f: F) -> R
  where
    F: FnOnce(RefGuard<'async_trait, Ref>) -> Fut + Send,
    Fut: Future<Output = R> + Send;
}

#[async_t::async_trait]
impl<T, Ref> AsyncLocal<T, Ref> for LocalKey<T>
where
  T: 'static + AsRef<Context<Ref>>,
  Ref: Sync + 'static,
{
  unsafe fn local_ref(&'static self) -> LocalRef<Ref> {
    self.with(|value| LocalRef::new(value.as_ref()))
  }

  unsafe fn guarded_ref<'a>(&'static self) -> RefGuard<'a, Ref> {
    self.with(|value| RefGuard::new(value.as_ref()))
  }

  async fn with_async<F, R, Fut>(&'static self, f: F) -> R
  where
    F: FnOnce(RefGuard<'async_trait, Ref>) -> Fut + Send,
    Fut: Future<Output = R> + Send,
  {
    let local_ref = unsafe { self.guarded_ref() };

    f(local_ref).await
  }
}

#[cfg(all(test, not(loom)))]
mod tests {
  use std::{
    io,
    process::{Command, Stdio},
    sync::atomic::{AtomicUsize, Ordering},
  };

  use tokio::task::yield_now;

  use super::*;

  thread_local! {
      static COUNTER: Context<AtomicUsize> = unsafe { Context::new(AtomicUsize::new(0)) };
  }

  #[tokio::test(flavor = "multi_thread")]
  async fn ref_spans_await() {
    let counter = unsafe { COUNTER.local_ref() };
    yield_now().await;
    counter.deref().fetch_add(1, Ordering::Relaxed);
  }

  #[tokio::test(flavor = "multi_thread")]
  async fn with_async() {
    COUNTER
      .with_async(|counter| async move {
        yield_now().await;
        counter.deref().fetch_add(1, Ordering::Release);
      })
      .await;
  }

  #[tokio::test(flavor = "multi_thread")]
  async fn bound_to_async_trait_lifetime() {
    struct Counter;
    #[async_t::async_trait]
    trait Countable {
      async fn add_one(ref_guard: RefGuard<'async_trait, AtomicUsize>) -> usize;
    }

    #[async_t::async_trait]
    impl Countable for Counter {
      // Within this context, RefGuard cannot be moved into a blocking thread because of the
      // 'async_trait lifetime
      async fn add_one(counter: RefGuard<'async_trait, AtomicUsize>) -> usize {
        yield_now().await;
        counter.deref().fetch_add(1, Ordering::Release)
      }
    }

    // here outside of add_one the caller can arbitrarily make this of a 'static lifetime and hence
    // caution is needed
    let counter = unsafe { COUNTER.guarded_ref() };

    Counter::add_one(counter).await;
  }

  #[test]
  fn tokio_safely_shuts_down() -> io::Result<()> {
    Command::new("cargo")
      .args(["run", "-p", "doomsday-clock"])
      .stdout(Stdio::null())
      .spawn()?
      .wait()?
      .exit_ok()
      .expect("tokio failed to shutdown doomsday-clock");

    Ok(())
  }

  #[test]
  fn async_std_safely_shuts_down() -> io::Result<()> {
    Command::new("cargo")
      .args([
        "run",
        "-p",
        "doomsday-clock",
        "--no-default-features",
        "--features",
        "async-std-runtime",
      ])
      .stdout(Stdio::null())
      .spawn()?
      .wait()?
      .exit_ok()
      .expect("async-std failed to shutdown doomsday-clock");

    Ok(())
  }

  #[ignore]
  #[test]
  fn smol_safely_shuts_down() -> io::Result<()> {
    Command::new("cargo")
      .args([
        "run",
        "-p",
        "doomsday-clock",
        "--no-default-features",
        "--features",
        "smol-runtime",
      ])
      .stdout(Stdio::null())
      .stderr(Stdio::null())
      .spawn()?
      .wait()?
      .exit_ok()
      .expect("smol to failed to shutdown doomsday-clock");

    Ok(())
  }
}