"""FastAPI 主入口"""
from contextlib import asynccontextmanager
from pathlib import Path
from fastapi import FastAPI, WebSocket, WebSocketDisconnect, Request, status
from fastapi.middleware.cors import CORSMiddleware
from fastapi.middleware.trustedhost import TrustedHostMiddleware
from fastapi.staticfiles import StaticFiles
from fastapi.responses import FileResponse

from .database import init_db
from .routers import config, apps, tasks, auth, users
from .services.log_streamer import log_streamer
from .config import BACKEND_PORT, CORS_ALLOWED_ORIGINS, TRUSTED_HOSTS, validate_production_security
from .deps import decode_current_user

STATIC_DIR = Path(__file__).parent / "static"


@asynccontextmanager
async def lifespan(app: FastAPI):
    """应用生命周期"""
    validate_production_security()
    init_db()
    yield


app = FastAPI(
    title="iOS 自动打包服务",
    version="1.0.0",
    lifespan=lifespan,
)

# 仅接受显式允许的跨域前端；同域部署不需要 CORS 配置。
if CORS_ALLOWED_ORIGINS:
    app.add_middleware(
        CORSMiddleware,
        allow_origins=CORS_ALLOWED_ORIGINS,
        allow_credentials=False,
        allow_methods=["GET", "POST", "PUT", "DELETE", "OPTIONS"],
        allow_headers=["Authorization", "Content-Type"],
    )

app.add_middleware(TrustedHostMiddleware, allowed_hosts=TRUSTED_HOSTS)

# 路由
app.include_router(auth.router)
app.include_router(users.router)
app.include_router(config.router)
app.include_router(apps.router)
app.include_router(tasks.router)


@app.websocket("/ws/tasks/{task_id}")
async def websocket_logs(websocket: WebSocket, task_id: str):
    """经 JWT 鉴权的 WebSocket 实时日志。"""
    protocol = websocket.headers.get("sec-websocket-protocol", "")
    token_protocol = next((item.strip() for item in protocol.split(",") if item.strip().startswith("jwt.")), "")
    if not token_protocol:
        await websocket.close(code=status.WS_1008_POLICY_VIOLATION)
        return
    try:
        decode_current_user(token_protocol.removeprefix("jwt."))
    except Exception:
        await websocket.close(code=status.WS_1008_POLICY_VIOLATION)
        return

    await websocket.accept(subprotocol=token_protocol)
    try:
        async for msg in log_streamer.subscribe(task_id):
            await websocket.send_json(msg)
    except WebSocketDisconnect:
        pass
    except Exception:
        pass


@app.get("/api/health")
async def health():
    """健康检查"""
    return {"status": "ok", "port": BACKEND_PORT}


# 静态文件服务（生产模式：前端 build 产物由 FastAPI 直接 serving）
if STATIC_DIR.exists():
    app.mount("/assets", StaticFiles(directory=str(STATIC_DIR / "assets")), name="assets")

    @app.get("/{full_path:path}")
    async def serve_spa(request: Request, full_path: str):
        """SPA catch-all：非 API 路由统一返回 index.html"""
        file_path = STATIC_DIR / full_path
        if file_path.is_file():
            return FileResponse(str(file_path))
        return FileResponse(str(STATIC_DIR / "index.html"))