"""Render the analyst-workspace CLAUDE.md prompt.

The template source is admin-editable at /admin/workspace-prompt.  When no
override is set, the default content is the Jinja2 markdown template shipped
at config/claude_md_template.txt.  When an override is saved, it replaces the
default for every call to render_claude_md().

Override content is a Jinja2 template (autoescape=False, StrictUndefined).
Available placeholders: instance.{name,subtitle}, server.{url,hostname},
sync_interval, data_source.type, tables (list), metrics.{count,categories},
marketplaces (RBAC-filtered list), user.{id,email,name,is_admin,groups},
now, today.

See also: surfaced as the "Agent Workspace Prompt" admin editor at
/admin/workspace-prompt.
"""

from __future__ import annotations

import logging
from datetime import datetime, timezone
from pathlib import Path
from typing import Any
from urllib.parse import urlparse

import duckdb
from jinja2 import Environment, StrictUndefined, TemplateError

from app.instance_config import (
    get_data_source_type,
    get_instance_name,
    get_instance_subtitle,
    get_sync_interval,
)
from src.repositories.claude_md_template import ClaudeMdTemplateRepository

logger = logging.getLogger(__name__)

def _load_default_template() -> str:
    """Load the shipped CLAUDE.md default template.

    Resolution order (first hit wins):
      1. importlib.resources lookup in the installed `config` package — works
         in both editable installs and wheel-installed deployments. This is
         the canonical path on container deployments where `/app/config/`
         may be bind-mounted to overlay instance-specific config (instance.yaml)
         and shadow the image-baked template file.
      2. Filesystem path relative to this module — for dev runs from a checkout.
      3. Last-resort embedded fallback so the renderer never fails outright.
    """
    # 1. Package-resource path (preferred — works under wheel installs)
    try:
        from importlib import resources

        ref = resources.files("config").joinpath("claude_md_template.txt")
        if ref.is_file():
            return ref.read_text(encoding="utf-8")
    except (ModuleNotFoundError, FileNotFoundError, OSError):
        pass

    # 2. Filesystem path relative to this module (dev checkout)
    fs_path = Path(__file__).resolve().parent.parent / "config" / "claude_md_template.txt"
    if fs_path.exists():
        return fs_path.read_text(encoding="utf-8")

    # 3. Embedded fallback (image stripped down, partial Docker COPY, etc.)
    return (
        "# {{ instance.name }} — AI Data Analyst\n\n"
        "This workspace is connected to {{ server.url }}.\n"
        "Data refreshes every {{ sync_interval }}.\n"
    )


def _list_tables(conn: duckdb.DuckDBPyConnection, *, user: dict) -> list[dict[str, Any]]:
    """Return registered tables filtered by the calling user's RBAC grants.

    For admins, returns all tables. For non-admins, returns only tables the
    user has explicit ``resource_grants(resource_type='table')`` access to.
    """
    from src.rbac import get_accessible_tables
    try:
        allowed_ids = get_accessible_tables(user, conn)   # None=admin, list=non-admin
        if allowed_ids is None:
            rows = conn.execute(
                "SELECT name, description, query_mode FROM table_registry ORDER BY name"
            ).fetchall()
        elif not allowed_ids:
            return []
        else:
            placeholders = ",".join(["?"] * len(allowed_ids))
            rows = conn.execute(
                f"SELECT name, description, query_mode FROM table_registry "
                f"WHERE id IN ({placeholders}) ORDER BY name",
                allowed_ids,
            ).fetchall()
    except duckdb.CatalogException:
        return []
    return [
        {"name": r[0], "description": r[1] or "", "query_mode": r[2] or "local"}
        for r in rows
    ]


def _metrics_summary(conn: duckdb.DuckDBPyConnection) -> dict[str, Any]:
    try:
        rows = conn.execute(
            "SELECT category, COUNT(*) FROM metric_definitions GROUP BY category"
        ).fetchall()
    except duckdb.CatalogException:
        return {"count": 0, "categories": []}
    return {
        "count": sum(r[1] for r in rows),
        "categories": sorted({r[0] for r in rows if r[0]}),
    }


def _marketplaces_for_user(
    conn: duckdb.DuckDBPyConnection, user: dict[str, Any]
) -> list[dict[str, Any]]:
    """Return marketplaces with the plugins the user is allowed to see.

    Delegates RBAC filtering entirely to resolve_allowed_plugins, which
    returns List[dict] with marketplace_slug, original_name, etc.
    Results are grouped by marketplace slug; display names are fetched
    from marketplace_registry in a single query.
    """
    try:
        from src.marketplace_filter import resolve_allowed_plugins
        allowed = resolve_allowed_plugins(conn, user)
    except Exception:
        logger.exception("_marketplaces_for_user: marketplace plugin resolution failed")
        return []
    if not allowed:
        return []

    # Build slug → display name lookup from registry
    slugs = list({p["marketplace_slug"] for p in allowed})
    placeholders = ",".join(["?"] * len(slugs))
    try:
        name_rows = conn.execute(
            f"SELECT id, name FROM marketplace_registry WHERE id IN ({placeholders})",
            slugs,
        ).fetchall()
    except duckdb.CatalogException:
        name_rows = []
    slug_to_name: dict[str, str] = {r[0]: r[1] for r in name_rows}

    grouped: dict[str, dict[str, Any]] = {}
    for plugin in allowed:
        slug = plugin["marketplace_slug"]
        bucket = grouped.setdefault(
            slug,
            {
                "slug": slug,
                "name": slug_to_name.get(slug, slug),
                "plugins": [],
            },
        )
        bucket["plugins"].append({"name": plugin["original_name"]})

    return list(grouped.values())


def build_claude_md_context(
    conn: duckdb.DuckDBPyConnection,
    *,
    user: dict[str, Any],
    server_url: str,
) -> dict[str, Any]:
    """Compose the Jinja2 render context for the CLAUDE.md template. Pure, no side effects."""
    now = datetime.now(timezone.utc)
    parsed = urlparse(server_url)
    return {
        "instance": {
            "name": get_instance_name(),
            "subtitle": get_instance_subtitle(),
        },
        "server": {
            "url": server_url,
            "hostname": parsed.hostname or "",
        },
        "sync_interval": get_sync_interval(),
        "data_source": {"type": get_data_source_type()},
        "tables": _list_tables(conn, user=user),
        "metrics": _metrics_summary(conn),
        "marketplaces": _marketplaces_for_user(conn, user),
        "user": {
            "id": user.get("id", ""),
            "email": user.get("email", ""),
            "name": user.get("name") or "",
            "is_admin": bool(user.get("is_admin")),
            "groups": user.get("groups") or [],
        },
        "now": now,
        "today": now.date().isoformat(),
    }


def compute_default_claude_md(
    conn: duckdb.DuckDBPyConnection,
    *,
    user: dict[str, Any],
    server_url: str,
) -> str:
    """Return the rendered default CLAUDE.md from config/claude_md_template.txt.

    Renders the shipped Jinja2 template with the given user's RBAC context.
    On TemplateError, raises — callers that want graceful fallback should catch.
    """
    source = _load_default_template()
    env = Environment(undefined=StrictUndefined, autoescape=False)
    template = env.from_string(source)
    return template.render(**build_claude_md_context(conn, user=user, server_url=server_url))


def render_claude_md(
    conn: duckdb.DuckDBPyConnection,
    *,
    user: dict[str, Any],
    server_url: str,
) -> str:
    """Resolve the active template (override or default) and render it for the given user.

    When an admin override is set, renders it via Jinja2 (StrictUndefined, autoescape=False).
    When no override is set, renders the shipped default template.

    On TemplateError, raises — the API layer catches this and returns 400/500.
    """
    row = ClaudeMdTemplateRepository(conn).get()
    source = row["content"] if row.get("content") else _load_default_template()
    env = Environment(undefined=StrictUndefined, autoescape=False)
    template = env.from_string(source)
    return template.render(**build_claude_md_context(conn, user=user, server_url=server_url))