daat-locus 0.4.0

use std::{
    collections::{BTreeMap, HashSet},
    path::PathBuf,
    sync::Arc,
};

use miette::{Result, miette};
use parking_lot::Mutex;
use serde::{Deserialize, Serialize};

use crate::persistence::{PersistenceFileMode, PersistenceStore, write_json_pretty_atomic_sync};

const TELEGRAM_ACL_FILE_NAME: &str = "telegram_acl.json";

#[derive(Clone)]
pub struct TelegramAclHandle {
    inner: Arc<Mutex<TelegramAclInner>>,
}

struct TelegramAclInner {
    path: PathBuf,
    state: TelegramAclState,
}

#[derive(Default, Serialize, Deserialize)]
struct TelegramAclState {
    approved: HashSet<i64>,
    #[serde(default)]
    approved_meta: BTreeMap<i64, ApprovedChat>,
    blocked: HashSet<i64>,
    pending: BTreeMap<i64, PendingAccessRequest>,
}

#[derive(Clone, Serialize, Deserialize)]
pub struct ApprovedChat {
    pub chat_id: i64,
    pub title: String,
    pub sender: String,
    pub last_message_preview: String,
    pub approved_at_ms: i64,
    pub last_seen_at_ms: i64,
}

#[derive(Clone, Serialize, Deserialize)]
pub struct PendingAccessRequest {
    pub chat_id: i64,
    pub title: String,
    pub sender: String,
    pub last_message_preview: String,
    pub first_seen_at_ms: i64,
    pub last_seen_at_ms: i64,
}

#[derive(Clone, Copy, PartialEq, Eq)]
pub enum AccessDecision {
    Approved,
    Blocked,
    Unknown,
}

impl TelegramAclHandle {
    pub async fn load() -> Self {
        let persistence = PersistenceStore::runtime().await;
        let path = persistence.config_file(TELEGRAM_ACL_FILE_NAME);
        let state = persistence
            .read_json_config_or_default(TELEGRAM_ACL_FILE_NAME, "telegram acl")
            .await;
        Self {
            inner: Arc::new(Mutex::new(TelegramAclInner { path, state })),
        }
    }

    pub fn classify(&self, chat_id: i64) -> AccessDecision {
        let inner = self.inner.lock();
        if inner.state.approved.contains(&chat_id) {
            AccessDecision::Approved
        } else if inner.state.blocked.contains(&chat_id) {
            AccessDecision::Blocked
        } else {
            AccessDecision::Unknown
        }
    }

    pub fn register_pending(
        &self,
        chat_id: i64,
        title: impl Into<String>,
        sender: impl Into<String>,
        last_message_preview: impl Into<String>,
        seen_at_ms: i64,
    ) -> Result<()> {
        let mut inner = self.inner.lock();
        if inner.state.approved.contains(&chat_id) || inner.state.blocked.contains(&chat_id) {
            return Ok(());
        }

        let title = title.into();
        let sender = sender.into();
        let last_message_preview = last_message_preview.into();
        inner
            .state
            .pending
            .entry(chat_id)
            .and_modify(|request| {
                request.title.clone_from(&title);
                request.sender.clone_from(&sender);
                request
                    .last_message_preview
                    .clone_from(&last_message_preview);
                request.last_seen_at_ms = seen_at_ms;
            })
            .or_insert_with(|| PendingAccessRequest {
                chat_id,
                title,
                sender,
                last_message_preview,
                first_seen_at_ms: seen_at_ms,
                last_seen_at_ms: seen_at_ms,
            });
        let persisted = persist_locked(&inner);
        drop(inner);
        persisted
    }

    pub fn pending_requests(&self) -> Vec<PendingAccessRequest> {
        let inner = self.inner.lock();
        let mut requests = inner.state.pending.values().cloned().collect::<Vec<_>>();
        drop(inner);
        requests.sort_by(|left, right| {
            right
                .last_seen_at_ms
                .cmp(&left.last_seen_at_ms)
                .then_with(|| left.chat_id.cmp(&right.chat_id))
        });
        requests
    }

    pub fn approved_chats(&self) -> Vec<ApprovedChat> {
        let inner = self.inner.lock();
        let mut chats = inner
            .state
            .approved_meta
            .values()
            .cloned()
            .collect::<Vec<_>>();
        drop(inner);
        chats.sort_by(|left, right| {
            right
                .last_seen_at_ms
                .cmp(&left.last_seen_at_ms)
                .then_with(|| left.chat_id.cmp(&right.chat_id))
        });
        chats
    }

    pub fn approve_verified(
        &self,
        chat_id: i64,
        title: impl Into<String>,
        sender: impl Into<String>,
        last_message_preview: impl Into<String>,
        seen_at_ms: i64,
    ) -> Result<()> {
        let mut inner = self.inner.lock();
        inner.state.pending.remove(&chat_id);
        inner.state.blocked.remove(&chat_id);
        inner.state.approved.insert(chat_id);
        inner.state.approved_meta.insert(
            chat_id,
            ApprovedChat {
                chat_id,
                title: title.into(),
                sender: sender.into(),
                last_message_preview: last_message_preview.into(),
                approved_at_ms: seen_at_ms,
                last_seen_at_ms: seen_at_ms,
            },
        );
        let persisted = persist_locked(&inner);
        drop(inner);
        persisted
    }

    pub fn observe_approved(
        &self,
        chat_id: i64,
        title: impl Into<String>,
        sender: impl Into<String>,
        last_message_preview: impl Into<String>,
        seen_at_ms: i64,
    ) -> Result<()> {
        let mut inner = self.inner.lock();
        if !inner.state.approved.contains(&chat_id) {
            return Ok(());
        }
        let title = title.into();
        let sender = sender.into();
        let last_message_preview = last_message_preview.into();
        inner
            .state
            .approved_meta
            .entry(chat_id)
            .and_modify(|chat| {
                chat.title.clone_from(&title);
                chat.sender.clone_from(&sender);
                chat.last_message_preview.clone_from(&last_message_preview);
                chat.last_seen_at_ms = seen_at_ms;
            })
            .or_insert(ApprovedChat {
                chat_id,
                title,
                sender,
                last_message_preview,
                approved_at_ms: seen_at_ms,
                last_seen_at_ms: seen_at_ms,
            });
        let persisted = persist_locked(&inner);
        drop(inner);
        persisted
    }
}

fn persist_locked(inner: &TelegramAclInner) -> Result<()> {
    write_json_pretty_atomic_sync(&inner.path, &inner.state, PersistenceFileMode::Private)
        .map_err(|err| miette!("write telegram acl file failed: {err}"))
}