import { rest } from "@/discord";
import {
	type Client,
	type Message,
	type RESTGetAPIGuildMessagesSearchQuery,
	type RESTGetAPIGuildMessagesSearchResult,
	Routes,
	type Snowflake,
} from "discord.js";
import { distance } from "fastest-levenshtein";
import Tesseract from "tesseract.js";

import { hasManagerPermissions } from "@/utils/discord/permissions";
import { loggers } from "@/utils/logging";
const logger = loggers.automod;

const IS_PROD = Bun.env.NODE_ENV === "PROD";

type Pending = {
	channels: Set<Snowflake>;
	reasons: Set<string>;
	timer: NodeJS.Timeout;
};

const pendingReports = new Map<Snowflake, Pending>();
const cooldowns = new Map<Snowflake, NodeJS.Timeout>();

async function getLogChannel(client: Client) {
	return client.channels.fetch(
		IS_PROD ? "1493015326554587146" : "1493015912234881205",
	);
}

type AutomodResult = { delete: true } | null;
type AutomodSignals = {
	messageCount?: number;
	lastMessage?: Message;
};
type AutomodFunction = (
	client: Client,
	message: Message,
) => Promise<AutomodResult>;

async function fetchSignals(
	client: Client,
	message: Message,
): Promise<AutomodSignals> {
	const signals: AutomodSignals = {
		messageCount: undefined,
	};

	const messages = (await rest.get(
		`/guilds/${message.guildId}/messages/search`,
		{
			body: {
				author_id: [message.author.id],
			} as RESTGetAPIGuildMessagesSearchQuery,
		},
	)) as RESTGetAPIGuildMessagesSearchResult;

	if ("total_results" in messages) {
		signals.messageCount = messages.total_results;
		const [lastApiMessage] = messages.messages[1];

		const channel = await client.channels.fetch(lastApiMessage.channel_id);
		if (channel?.isTextBased()) {
			const lastMessage = await channel.messages
				.fetch(lastApiMessage.id)
				.catch(() => null);
			if (lastMessage) {
				signals.lastMessage = lastMessage;
			}
		}
	}

	return signals;
}

export async function handleMessage(client: Client, message: Message) {
	if (message.author.bot || !message.guildId || !message.member) return;
	const automodFunctions: AutomodFunction[] = [
		handleSpamMarker,
		handleCryptoScamOCR,
	];

	if ((await hasManagerPermissions(message.member)) && IS_PROD) return null;
	if (message.channel.isThread()) return null;
	if (message.content.includes("!bypass")) return null;

	for (const func of automodFunctions) {
		logger.info(
			{ messageId: message.id, authorId: message.author.id },
			"checking message with automod function",
		);
		const result = await func(client, message);

		if (result?.delete) {
			await message.delete().catch(() => null);
			break;
		}
	}
}

async function reportToAutomod(
	client: Client,
	message: Message,
	reason: string,
	userReply: string,
) {
	if (cooldowns.has(message.author.id)) return;

	const existing = pendingReports.get(message.author.id);
	if (!existing) {
		if (userReply) await message.reply(userReply).catch(() => null);

		const logChannel = await getLogChannel(client);
		if (logChannel?.isSendable()) {
			await message.forward(logChannel).catch(() => null);
			logChannel
				.send(
					`Deleted a message from <@${message.author.id}> in <#${message.channelId}>.\n> ${reason}`,
				)
				.catch(() => null);
		}

		const timer = setTimeout(
			() => flushReport(client, message.author.id),
			30_000,
		);
		pendingReports.set(message.author.id, {
			channels: new Set([message.channelId]),
			reasons: new Set([reason]),
			timer,
		});
	} else {
		existing.channels.add(message.channelId);
		existing.reasons.add(reason);

		clearTimeout(existing.timer);
		existing.timer = setTimeout(
			() => flushReport(client, message.author.id),
			30_000,
		);
	}
}

async function handleCryptoScamOCR(
	client: Client,
	message: Message,
): Promise<AutomodResult> {
	if (message.attachments.size === 0) return null;

	const scamPatterns = [
		"excited announce launch very own crypto casino",
		"launching my own crypto casino",
		"check out my crypto casino",
		"claim your reward",
		"special promo code",
	];

	for (const attachment of message.attachments.values()) {
		if (!attachment.contentType?.startsWith("image/")) continue;

		try {
			logger.debug(
				{ messageId: message.id, attachmentUrl: attachment.url },
				"Running OCR on image attachment",
			);

			const {
				data: { text },
			} = await Tesseract.recognize(attachment.url, "eng", {
				errorHandler: (err) => logger.warn({ err }, "OCR error"),
			});

			const normalizedText = text
				.toLowerCase()
				.replace(/[^\w\s]/g, " ")
				.replace(/\s+/g, " ")
				.trim();

			logger.debug(
				{ messageId: message.id, extractedText: normalizedText },
				"OCR completed",
			);

			let isScam = scamPatterns.some((pattern) =>
				normalizedText.includes(pattern),
			);

			if (!isScam) {
				const words = normalizedText.split(" ");

				for (const pattern of scamPatterns) {
					const patternWords = pattern.split(" ");
					const windowSize = patternWords.length;

					for (let i = 0; i <= words.length - windowSize; i++) {
						const window = words.slice(i, i + windowSize).join(" ");
						const similarity =
							1 -
							distance(pattern, window) /
								Math.max(pattern.length, window.length);

						if (similarity > 0.7) {
							logger.info(
								{
									messageId: message.id,
									pattern,
									window,
									similarity,
								},
								"fuzzy match found",
							);
							isScam = true;
							break;
						}
					}

					if (isScam) break;
				}
			}

			const suspiciousKeywords = [
				"crypto",
				"luxgamb",
				"promo code",
				"claim reward",
				"bonus will be deleted",
				"deleted in an hour",
			];

			const hasSuspiciousKeyword = suspiciousKeywords.some((keyword) =>
				normalizedText.includes(keyword),
			);

			if (isScam || hasSuspiciousKeyword) {
				logger.info(
					{
						messageId: message.id,
						authorId: message.author.id,
						isScam,
						hasSuspiciousKeyword,
					},
					"detected probable crypto scam",
				);
			}

			if (isScam) {
				await reportToAutomod(
					client,
					message,
					"OCR detected probable crypto scam",
					"You sent an image indicative of your account being compromised or a phishing attempt, so we removed it.",
				);

				return { delete: true };
			}

			if (hasSuspiciousKeyword) {
				await reportToAutomod(
					client,
					message,
					"OCR detected suspicious keywords",
					"You sent an image that contained suspicious keywords indicative of your account being compromised or a phishing attempt, so we removed it.",
				);

				return { delete: true };
			}
		} catch (err) {
			logger.error(
				{ err, messageId: message.id },
				"failed to process image for ocr",
			);
		}
	}

	return null;
}

async function handleSpamMarker(
	client: Client,
	message: Message,
): Promise<AutomodResult> {
	const { content } = message;

	/*
  	a message will contain either no markers, a link marker or a word maker,
  	likely not two at once.

  	if a messsage contains a link marker, then we delete it.
  	if a message contains a word marker, we first check if the last message
       is older than an hour, if it is, we delete the message.
	*/
	const linkMarkers = [
		"discord.gg/",
		"discordapp.com/invite/",
		"discord.com/invite/",
	];
	const wordMarkers = ["check my bio"];

	const hasLinkMarker = linkMarkers.some((marker) =>
		content.toLowerCase().includes(marker),
	);
	const hasWordMarker = wordMarkers.some((marker) =>
		content.toLowerCase().includes(marker),
	);

	if (!hasLinkMarker && !hasWordMarker) return null;
	const signals = await fetchSignals(client, message);
	const ONE_HOUR = 60 * 60 * 1000;

	logger.debug(
		{
			signals,
			message,
			markers: {
				hasLinkMarker,
				hasWordMarker,
			},
		},
		"evaluating message for potential phishing markers",
	);

	if (
		hasWordMarker &&
		signals.lastMessage &&
		Date.now() - signals.lastMessage.createdTimestamp < ONE_HOUR
	) {
		logger.debug(
			{
				messageId: message.id,
				authorId: message.author.id,
				lastMessageId: signals.lastMessage.id,
				lastMessageAge: Date.now() - signals.lastMessage.createdTimestamp,
			},
			"skipping deletion due to recent message",
		);
		return null;
	}

	await reportToAutomod(
		client,
		message,
		"potential phishing marker",
		`<@${message.author.id}>, your message contained something indicative of a compromised account or phishing attempt, so we removed it. Keep in mind, we don't allow advertising other servers here.`,
	);

	return { delete: true };
}

async function flushReport(client: Client, authorId: Snowflake) {
	const pending = pendingReports.get(authorId);
	if (!pending) return;

	pendingReports.delete(authorId);
	clearTimeout(pending.timer);

	const logChannel = await getLogChannel(client);
	if (!logChannel?.isSendable()) return;

	const channels = Array.from(pending.channels);
	const channelMentions = channels.map((c) => `<#${c}>`).join(", ");
	const reasons = Array.from(pending.reasons).join(" | ");

	logChannel.send(
		`<@${authorId}> posted flagged messages in channels: ${channelMentions}\n> ${reasons}`,
	);

	const cooldownTimer = setTimeout(
		() => cooldowns.delete(authorId),
		5 * 60 * 1000,
	);
	cooldowns.set(authorId, cooldownTimer);
}