import { apiGet, apiPost, apiDownloadFetch } from '../api.js';
import { getRole, pageHeaderHTML, showToast } from '../app.js';
import { navigate } from '../router.js';

const ACTIVITY_LABELS = {
    app_sync: 'App sync',
    app_change: 'App change',
    web_change: 'Website change',
    web_export: 'Website export',
};

export function devPage() {
    if (getRole() !== 'admin') {
        navigate('#/');
        return;
    }

    const app = document.getElementById('app');
    const today = new Date().toISOString().slice(0, 10);
    app.innerHTML = `
        ${pageHeaderHTML('Admin Settings')}
        <div class="card" style="max-width:720px;margin-bottom:16px">
            <h2 style="margin:0 0 8px;font-size:1.1rem">Export all response data (ZIP)</h2>
            <p class="field-hint" style="margin:0 0 14px">
                Download one CSV per questionnaire in a single ZIP (full server data).
                <strong>Current data</strong> uses live answers;
                <strong>All versions</strong> includes every upload (one row per submission).
            </p>
            <div style="display:flex;flex-wrap:wrap;gap:10px">
                <button type="button" class="btn btn-primary" id="exportAllCurrentZipBtn">Export all — current data (ZIP)</button>
                <button type="button" class="btn" id="exportAllVersionsZipBtn">Export all — all versions (ZIP)</button>
            </div>
        </div>
        <div class="card" style="max-width:720px">
            <h2 style="margin:0 0 8px;font-size:1.1rem">Dev import</h2>
            <p class="field-hint callout-warn">
                <strong>Local / test only.</strong> Imports prefixed dev users (<code>dev_*</code>),
                clients (<code>DEV-CL-*</code>), and completed questionnaire runs.
                Existing real users are not modified. Conflicts are skipped (usernames, client codes, completions).
                Default password: <code>socialvrlab</code>. Questionnaires must already exist in the database.
            </p>
            <div class="form-group">
                <label for="devFixtureFile">Fixture JSON</label>
                <input type="file" id="devFixtureFile" accept=".json,application/json">
                <span class="field-hint">Use <code>dev-test-fixture.json</code> from the repo root (generate via <code>nat-as-server/scripts/generate_dev_fixture.py</code>; uneven coach load, multi-version uploads, natural timestamps).</span>
            </div>
            <div id="devFixtureSummary" class="field-hint" style="margin:12px 0;display:none"></div>
            <div style="display:flex;gap:8px;flex-wrap:wrap;margin-top:8px">
                <button type="button" class="btn btn-primary" id="devImportBtn" disabled>Import fixture</button>
                <button type="button" class="btn btn-danger" id="devRemoveBtn">Remove test data</button>
            </div>
            <pre id="devImportResult" style="margin-top:16px;font-size:.8rem;max-height:320px;overflow:auto;display:none"></pre>
        </div>
        <div class="card" style="max-width:720px;margin-top:16px">
            <h2 style="margin:0 0 8px;font-size:1.1rem">Reset database</h2>
            <p class="field-hint callout-danger">
                <strong>Destructive.</strong> Deletes every client, completion, coach, and supervisor
                (including non-dev accounts). Admin logins and questionnaire definitions are kept.
            </p>
            <button type="button" class="btn btn-danger" id="devWipeBtn">Remove all data (keep admins)</button>
        </div>
        <div class="card activity-log-card" style="margin-top:16px">
            <h2 style="margin:0 0 8px;font-size:1.1rem">API activity log</h2>
            <p class="field-hint" style="margin:0 0 14px">
                App syncs, website edits (translations, users, questionnaires, …),
                and exports/downloads. Routine page loads (lists, dashboards) are not logged.
            </p>
            <div class="filter-bar" style="margin-bottom:12px">
                <label style="font-size:.85rem;font-weight:500">Date</label>
                <input type="date" id="activityLogDate" value="${today}">
                <label style="font-size:.85rem;font-weight:500">Activity</label>
                <select id="activityLogKind">
                    <option value="">All kinds</option>
                    <option value="app_sync">App sync</option>
                    <option value="app_change">App change</option>
                    <option value="web_change">Website change</option>
                    <option value="web_export">Website export</option>
                </select>
                <button type="button" class="btn btn-sm" id="activityLogRefresh">Refresh</button>
            </div>
            <div id="activityLogStatus" class="field-hint" style="margin:0 0 10px;display:none"></div>
            <p id="activityLogMeta" class="field-hint" style="margin:0 0 10px"></p>
            <div class="table-wrapper">
                <table class="data-table activity-log-table">
                    <thead>
                        <tr>
                            <th>Time (UTC)</th>
                            <th>Kind</th>
                            <th>Subject</th>
                            <th>Method</th>
                            <th>Route</th>
                            <th>Status</th>
                            <th>Duration</th>
                            <th>Values</th>
                            <th>Performed by</th>
                        </tr>
                    </thead>
                    <tbody id="activityLogBody">
                        <tr><td colspan="9" style="text-align:center;color:var(--text-secondary);padding:20px">Loading…</td></tr>
                    </tbody>
                </table>
            </div>
        </div>
    `;

    let parsedFixture = null;

    document.getElementById('devFixtureFile').addEventListener('change', async (e) => {
        const file = e.target.files?.[0];
        const summary = document.getElementById('devFixtureSummary');
        const btn = document.getElementById('devImportBtn');
        parsedFixture = null;
        btn.disabled = true;
        summary.style.display = 'none';

        if (!file) return;

        try {
            const text = await file.text();
            parsedFixture = JSON.parse(text);
            const st = parsedFixture.stats || {};
            summary.innerHTML = `
                <strong>Preview:</strong>
                ${parsedFixture.admins?.length ?? st.admins ?? 0} admins,
                ${parsedFixture.supervisors?.length ?? st.supervisors ?? 0} supervisors,
                ${parsedFixture.coaches?.length ?? st.coaches ?? 0} coaches,
                ${parsedFixture.clients?.length ?? st.clients ?? 0} clients,
                ${parsedFixture.completions?.length ?? st.completionRecords ?? st.completions ?? 0} completions,
                ${st.totalUploads ?? '—'} uploads (${st.multiVersionPairs ?? '—'} re-uploaded)
            `;
            summary.style.display = '';
            btn.disabled = false;
        } catch (err) {
            showToast('Invalid JSON: ' + err.message, 'error');
        }
    });

    document.getElementById('devRemoveBtn').addEventListener('click', async () => {
        if (!confirm(
            'Remove all dev test data?\n\n'
            + 'Deletes users matching dev_*, clients DEV-CL-*, and their answers/completions.\n'
            + 'Real accounts are not affected.'
        )) {
            return;
        }
        const btn = document.getElementById('devRemoveBtn');
        const pre = document.getElementById('devImportResult');
        btn.disabled = true;
        btn.textContent = 'Removing…';
        pre.style.display = 'none';

        try {
            const res = await apiPost('dev', {
                action: 'remove',
                usernamePrefix: 'dev_',
                clientCodePrefix: 'DEV-CL-',
            });
            if (!res.success) {
                showToast(res.error || res.message || 'Remove failed', 'error');
                return;
            }
            pre.textContent = JSON.stringify(res, null, 2);
            pre.style.display = '';
            const d = res.deleted || {};
            showToast(
                `Removed ${d.clients ?? 0} clients, ${d.users ?? 0} users, `
                + `${d.completed_questionnaires ?? 0} completions`,
                'success'
            );
        } catch (e) {
            showToast(e.message, 'error');
        } finally {
            btn.disabled = false;
            btn.textContent = 'Remove test data';
        }
    });

    document.getElementById('devWipeBtn').addEventListener('click', async () => {
        if (!confirm(
            'Remove ALL clients, completions, coaches, and supervisors?\n\n'
            + 'Admin accounts and questionnaires will NOT be deleted.\n'
            + 'This cannot be undone.'
        )) {
            return;
        }
        const btn = document.getElementById('devWipeBtn');
        const pre = document.getElementById('devImportResult');
        btn.disabled = true;
        btn.textContent = 'Removing…';
        pre.style.display = 'none';

        try {
            const res = await apiPost('dev', { action: 'wipeExceptAdmins' });
            if (!res.success) {
                showToast(res.error || res.message || 'Wipe failed', 'error');
                return;
            }
            pre.textContent = JSON.stringify(res, null, 2);
            pre.style.display = '';
            const d = res.deleted || {};
            const kept = res.kept?.admins ?? '?';
            showToast(
                `Wiped ${d.clients ?? 0} clients, ${d.users ?? 0} users, `
                + `${d.completed_questionnaires ?? 0} completions (${kept} admins kept)`,
                'success'
            );
        } catch (e) {
            showToast(e.message, 'error');
        } finally {
            btn.disabled = false;
            btn.textContent = 'Remove all data (keep admins)';
        }
    });

    wireAdminZipExport();
    wireActivityLog();

    document.getElementById('devImportBtn').addEventListener('click', async () => {
        if (!parsedFixture) return;
        const btn = document.getElementById('devImportBtn');
        const pre = document.getElementById('devImportResult');
        btn.disabled = true;
        btn.textContent = 'Importing…';
        pre.style.display = 'none';

        try {
            const res = await apiPost('dev', { fixture: parsedFixture });
            if (!res.success) {
                showToast(res.error || 'Import failed', 'error');
                return;
            }
            pre.textContent = JSON.stringify(res, null, 2);
            pre.style.display = '';
            const imp = res.imported || {};
            const sk = res.skipped || {};
            showToast(
                `Imported: ${imp.completions ?? 0} completions, ${imp.submissions ?? 0} uploads, `
                + `${imp.clients ?? 0} clients, ${imp.coaches ?? 0} coaches `
                + `(skipped ${sk.completions ?? 0} existing)`,
                'success'
            );
            if (res.errors?.length) {
                showToast(`${res.errors.length} warning(s) — see log below`, 'error');
            }
        } catch (e) {
            showToast(e.message, 'error');
        } finally {
            btn.disabled = false;
            btn.textContent = 'Import fixture';
        }
    });
}

function renderActivityLogStatus(status) {
    const el = document.getElementById('activityLogStatus');
    if (!el || !status) {
        if (el) el.style.display = 'none';
        return;
    }
    if (!status.enabled) {
        el.className = 'field-hint callout-warn';
        el.innerHTML = 'Activity logging is disabled (<code>QDB_API_LOG=0</code> in .env).';
        el.style.display = '';
        return;
    }
    if (status.writable) {
        el.className = 'field-hint';
        el.innerHTML = `Logging to <code>${escHtml(status.dir)}</code>`
            + (status.php_user ? ` (PHP user: <code>${escHtml(status.php_user)}</code>)` : '');
        el.style.display = '';
        return;
    }
    el.className = 'field-hint callout-danger';
    el.innerHTML = `<strong>Cannot write activity log.</strong> ${escHtml(status.error || 'Permission problem.')}
        <br>Path: <code>${escHtml(status.dir)}</code>`
        + (status.php_user ? `<br>PHP runs as: <code>${escHtml(status.php_user)}</code>` : '')
        + (status.fix_hint ? `<br>${escHtml(status.fix_hint)}` : '');
    el.style.display = '';
}

function wireActivityLog() {
    const dateEl = document.getElementById('activityLogDate');
    const kindEl = document.getElementById('activityLogKind');
    document.getElementById('activityLogRefresh')?.addEventListener('click', loadActivityLog);
    dateEl?.addEventListener('change', loadActivityLog);
    kindEl?.addEventListener('change', loadActivityLog);
    loadActivityLog();
}

async function loadActivityLog() {
    const tbody = document.getElementById('activityLogBody');
    const meta = document.getElementById('activityLogMeta');
    if (!tbody) return;

    const date = document.getElementById('activityLogDate')?.value || new Date().toISOString().slice(0, 10);
    const activity = document.getElementById('activityLogKind')?.value || '';
    tbody.innerHTML = '<tr><td colspan="9" style="text-align:center;padding:20px">Loading…</td></tr>';

    try {
        const q = new URLSearchParams({ date, limit: '300' });
        if (activity) q.set('activity', activity);
        const data = await apiGet(`activity-log?${q}`);
        if (!data.success) throw new Error(data.error || 'Failed to load activity log');

        renderActivityLogStatus(data.logStatus);

        const entries = data.entries || [];
        const files = (data.files || []).join(', ') || 'none';
        const trunc = data.truncated ? ' (newest 300 shown)' : '';
        if (meta) {
            meta.textContent = entries.length
                ? `${entries.length} entries from ${files}${trunc}`
                : `No entries for this date/filter (files: ${files})`;
        }

        if (!entries.length) {
            tbody.innerHTML = '<tr><td colspan="9" style="text-align:center;color:var(--text-secondary);padding:24px">No activity recorded</td></tr>';
            return;
        }

        tbody.innerHTML = entries.map((e) => {
            const kind = e.activity || '';
            const label = ACTIVITY_LABELS[kind] || kind || '—';
            const badgeClass = kind ? `badge-activity-${kind}` : '';
            const time = formatActivityTime(e.ts);
            const status = e.status != null ? String(e.status) : '—';
            const dur = e.duration_ms != null ? `${e.duration_ms} ms` : '—';
            const subject = formatActivitySubject(e);
            const performedBy = formatActivityPerformer(e);
            const errPart = e.error
                ? `<div class="error-text" style="margin-top:6px;font-size:.8rem">${escHtml(e.error)}</div>`
                : '';
            return `<tr>
                <td>${escHtml(time)}</td>
                <td><span class="badge ${badgeClass}">${escHtml(label)}</span></td>
                <td class="activity-log-subject">${subject}</td>
                <td><code>${escHtml(e.method || '')}</code></td>
                <td><code>${escHtml(e.route || '')}</code></td>
                <td>${escHtml(status)}</td>
                <td>${escHtml(dur)}</td>
                <td class="activity-log-changes-cell">${renderActivityChanges(e.changes)}</td>
                <td class="activity-log-actor">${performedBy}${errPart}</td>
            </tr>`;
        }).join('');
    } catch (err) {
        if (meta) meta.textContent = '';
        tbody.innerHTML = `<tr><td colspan="9" class="error-text" style="padding:16px">${escHtml(err.message)}</td></tr>`;
    }
}

function formatActivitySubject(entry) {
    if (entry.target_username) {
        return `<strong>${escHtml(entry.target_username)}</strong>`;
    }
    const changes = entry.changes || [];
    const userChange = changes.find((c) => (c.field || '').toLowerCase() === 'username');
    if (userChange) {
        const name = userChange.display || formatActivityChangeValue(userChange.value);
        return `<strong>${escHtml(name)}</strong>`;
    }
    const client = changes.find((c) => (c.field || '').toLowerCase().includes('clientcode'));
    if (client) {
        const code = client.display || formatActivityChangeValue(client.value);
        return `client <strong>${escHtml(code)}</strong>`;
    }
    const qClient = changes.find((c) => (c.field || '') === 'query.clientCode');
    if (qClient) {
        return `client <strong>${escHtml(formatActivityChangeValue(qClient.value))}</strong>`;
    }
    return '<span style="color:var(--text-secondary)">—</span>';
}

function formatActivityPerformer(entry) {
    if (entry.actor_username) {
        const role = entry.role ? ` <span class="activity-log-role">(${escHtml(entry.role)})</span>` : '';
        return `<strong>${escHtml(entry.actor_username)}</strong>${role}`;
    }
    if (entry.role) {
        return escHtml(entry.role);
    }
    return '—';
}

function renderActivityChanges(changes) {
    const list = Array.isArray(changes) ? changes : [];
    if (!list.length) {
        return '<span style="color:var(--text-secondary)">—</span>';
    }
    const rows = list.map((c) => {
        const field = c.field ?? '';
        const raw = formatActivityChangeValue(c.value);
        const display = (c.display != null && String(c.display) !== '')
            ? String(c.display)
            : raw;
        const showRaw = display !== raw
            && !raw.startsWith('[REDACTED]')
            && !raw.startsWith('[ENCRYPTED');
        return `<tr>
            <th scope="row">${escHtml(field)}</th>
            <td>
                <strong>${escHtml(display)}</strong>
                ${showRaw ? `<div class="activity-change-raw">${escHtml(raw)}</div>` : ''}
            </td>
        </tr>`;
    }).join('');
    return `<table class="activity-changes-table"><tbody>${rows}</tbody></table>`;
}

function formatActivityChangeValue(value) {
    if (value === null || value === undefined) return 'null';
    if (typeof value === 'boolean') return value ? 'true' : 'false';
    return String(value);
}

function formatActivityTime(iso) {
    if (!iso) return '—';
    try {
        const d = new Date(iso);
        if (Number.isNaN(d.getTime())) return iso;
        return d.toISOString().replace('T', ' ').slice(0, 19);
    } catch {
        return iso;
    }
}

function escHtml(s) {
    const d = document.createElement('div');
    d.textContent = s ?? '';
    return d.innerHTML;
}

function filenameFromContentDisposition(res, fallback) {
    const disp = res.headers.get('Content-Disposition');
    if (!disp) return fallback;
    const m = /filename="([^"]+)"/i.exec(disp);
    return m ? m[1] : fallback;
}

async function downloadExportZip(url, defaultFilename) {
    const res = await apiDownloadFetch(url);
    if (!res.ok) {
        const err = await res.json().catch(() => ({ error: 'Download failed' }));
        throw new Error(err.error?.message || err.error || 'Download failed');
    }
    const blob = await res.blob();
    const blobUrl = URL.createObjectURL(blob);
    const a = document.createElement('a');
    a.href = blobUrl;
    a.download = filenameFromContentDisposition(res, defaultFilename);
    a.click();
    URL.revokeObjectURL(blobUrl);
}

function wireAdminZipExport() {
    document.getElementById('exportAllCurrentZipBtn')?.addEventListener('click', async () => {
        const btn = document.getElementById('exportAllCurrentZipBtn');
        btn.disabled = true;
        const prev = btn.textContent;
        btn.textContent = 'Preparing ZIP…';
        try {
            await downloadExportZip('../api/export?exportAll=1', 'responses_export_current.zip');
            showToast('ZIP download started (current data)', 'success');
        } catch (e) {
            showToast(e.message, 'error');
        } finally {
            btn.disabled = false;
            btn.textContent = prev;
        }
    });

    document.getElementById('exportAllVersionsZipBtn')?.addEventListener('click', async () => {
        const btn = document.getElementById('exportAllVersionsZipBtn');
        btn.disabled = true;
        const prev = btn.textContent;
        btn.textContent = 'Preparing ZIP…';
        try {
            await downloadExportZip('../api/export?exportAll=1&allVersions=1', 'responses_export_all_versions.zip');
            showToast('ZIP download started (all versions)', 'success');
        } catch (e) {
            showToast(e.message, 'error');
        } finally {
            btn.disabled = false;
            btn.textContent = prev;
        }
    });
}