import { Router } from "express";
import { z } from "zod";
import { requireAuth } from "../auth/middleware.js";
import { ChatStore } from "./store.js";
import { config } from "../config.js";
import { isPubkeyAllowed } from "../nostr/allowlist.js";
import { forbidden } from "../errors.js";

const chat = new ChatStore(config.chatStorePath);

export const chatRouter = Router();

const MessageBody = z.object({
  content: z.string().trim().min(1).max(12000),
  replyToId: z.string().max(128).optional(),
  replyToPubkey: z.string().max(128).optional(),
});

const ReactionBody = z.object({
  messageId: z.string().min(1).max(128),
  content: z.string().trim().min(1).max(12000),
});

const KeyWrapBody = z.object({
  wraps: z.array(z.object({
    recipientPubkey: z.string().regex(/^[0-9a-f]{64}$/),
    ciphertext: z.string().trim().min(1).max(12000),
  })).min(1).max(10),
});

chatRouter.use(requireAuth);

chatRouter.get("/", (_req, res) => {
  res.json(chat.list());
});

chatRouter.post("/messages", (req, res) => {
  const body = MessageBody.parse(req.body);
  const message = chat.addMessage({
    pubkey: req.session!.pubkey,
    content: body.content,
    ...(body.replyToId ? { replyToId: body.replyToId } : {}),
    ...(body.replyToPubkey ? { replyToPubkey: body.replyToPubkey } : {}),
  });
  res.status(201).json(message);
});

chatRouter.post("/reactions", (req, res) => {
  const body = ReactionBody.parse(req.body);
  const reaction = chat.addReaction({
    pubkey: req.session!.pubkey,
    messageId: body.messageId,
    content: body.content,
  });
  res.status(201).json(reaction);
});

chatRouter.post("/key-wraps", (req, res) => {
  const body = KeyWrapBody.parse(req.body);
  if (body.wraps.some(w => !isPubkeyAllowed(w.recipientPubkey))) throw forbidden();
  if (new Set(body.wraps.map(w => w.recipientPubkey)).size !== body.wraps.length) {
    throw forbidden("duplicate_recipients");
  }
  const wraps = chat.shareKey(req.session!.pubkey, body.wraps);
  res.status(201).json({ wraps });
});