package web

import (
	"strings"
	"time"

	"gitea.dooplex.hu/admin/felhom-controller/internal/stacks"
)

// ── Known default logins (v0.279.0, `09` §3 decision 45) ────────────────────────────────────────────
//
// "An app is never published with a login a stranger knows." Where the template's after_install replaces
// the default with a generated password, the default is gone once that command succeeded — the page must
// then NOT show it (it would send the household to a login that no longer works). Where it cannot (no
// after_install) or the command failed, the page and the install dialog say plainly what the default is and
// to change it at once. Pinned by internal/web/known_login_test.go.

// afterInstallWindow is how long after an install an ABSENT after_install record still means "not run yet":
// the deploy-done hook waits up to 10 minutes for the app, then tries 6 × 20 s (after_install.go).
const afterInstallWindow = 30 * time.Minute

// knownLoginNow is the page's clock (a test seam).
var knownLoginNow = time.Now

// defaultLoginInEffect: the template has a default login and nothing has replaced it on this install.
// installed=false is the install dialog, before the install: a declared after_install WILL replace it.
func defaultLoginInEffect(meta *stacks.Metadata, cfg *stacks.AppConfig, installed bool) bool {
	if meta == nil || strings.TrimSpace(meta.AppInfo.DefaultCreds) == "" {
		return false
	}
	// R-710: the household said it changed the login by hand (the app page's "I changed it").
	if installed && cfg != nil && cfg.DefaultLogin != nil {
		return false
	}
	if meta.AfterInstall == nil {
		return true
	}
	if !installed {
		return false
	}
	if cfg == nil {
		return true // the app's record is unreadable: say what the template's default is
	}
	if cfg.AfterInstall != nil {
		return !cfg.AfterInstall.OK
	}
	// R-710 (measured on demo-hp 2026-09-29): an ABSENT record means "not run yet" only inside the command's
	// window after the install. An app installed before its template gained an after_install never runs it —
	// read as "not run yet" for ever, its live default login went unannounced.
	at, err := time.Parse(time.RFC3339, cfg.DeployedAt)
	return err != nil || knownLoginNow().Sub(at) > afterInstallWindow
}

// defaultLoginReplaced: installed, and something replaced the default (after_install, or the household).
func defaultLoginReplaced(meta *stacks.Metadata, cfg *stacks.AppConfig, installed bool) bool {
	if meta == nil || !installed || defaultLoginInEffect(meta, cfg, installed) {
		return false
	}
	return meta.AfterInstall != nil || (cfg != nil && cfg.DefaultLogin != nil)
}

// knownLoginLine is the sentence, in lang, or "" when no default login is in effect.
func (s *Server) knownLoginLine(lang string, meta *stacks.Metadata, cfg *stacks.AppConfig, installed bool) string {
	if !defaultLoginInEffect(meta, cfg, installed) {
		return ""
	}
	creds := strings.ReplaceAll(meta.AppInfo.DefaultCreds, "DOMAIN", s.cfg.Customer.Domain)
	return s.msgLang(lang, "app_info.known_login", creds)
}