/**
 * markitdown-ts adapter for PDF, DOCX, XLSX conversion.
 * Uses convertBuffer() with bytes for determinism.
 */

import type {
  Converter,
  ConvertInput,
  ConvertResult,
  ConvertWarning,
} from "../../types";

import { MarkItDown } from "../../../../vendor/converters/markitdown-ts";
import {
  adapterError,
  corruptError,
  permissionError,
  timeoutError,
  tooLargeError,
} from "../../errors";
import { ADAPTER_VERSIONS } from "../../versions";
import { hasPrefix, isPasswordProtectedXlsx } from "../shared/ooxml-protection";
import { MARKITDOWN_CONVERTER_ID, markitdownCanHandle } from "./match";

const CONVERTER_ID = MARKITDOWN_CONVERTER_ID;
const CONVERTER_VERSION = ADAPTER_VERSIONS["markitdown-ts"];

const PDF_SIGNATURE = new Uint8Array([0x25, 0x50, 0x44, 0x46, 0x2d]);
const PDF_TRAILER_SCAN_BYTES = 2048;
const MAX_MESSAGE_LENGTH = 200;
const PASSWORD_ERROR_REGEX = /password(?:-protected)?|no password given/i;

/**
 * Create zero-copy Buffer view of Uint8Array.
 * Assumes input.bytes is immutable (contract requirement).
 */
function toBuffer(bytes: Uint8Array): Buffer {
  return Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength);
}

function isPasswordProtectedPdf(bytes: Uint8Array): boolean {
  if (!hasPrefix(bytes, PDF_SIGNATURE)) {
    return false;
  }

  const tailStart = Math.max(0, bytes.length - 64 * 1024);
  const tail = Buffer.from(bytes.subarray(tailStart)).toString("latin1");
  return /\/Encrypt\b/.test(tail);
}

function hasCompletePdfTrailer(bytes: Uint8Array): boolean {
  if (!hasPrefix(bytes, PDF_SIGNATURE)) {
    return false;
  }

  const tailStart = Math.max(0, bytes.length - PDF_TRAILER_SCAN_BYTES);
  const tail = Buffer.from(bytes.subarray(tailStart)).toString("latin1");
  const eofIndex = tail.lastIndexOf("%%EOF");
  const startXrefIndex = tail.lastIndexOf("startxref");

  return startXrefIndex >= 0 && eofIndex > startXrefIndex;
}

function isPasswordProtected(input: ConvertInput): boolean {
  if (input.ext === ".pdf") {
    return isPasswordProtectedPdf(input.bytes);
  }

  if (input.ext === ".xlsx") {
    return isPasswordProtectedXlsx(input.bytes);
  }

  return false;
}

function sanitizeErrorMessage(message: string, input: ConvertInput): string {
  const normalized = message.trim();

  let hasControlChars = false;
  for (const char of normalized) {
    const code = char.charCodeAt(0);
    if (
      (code >= 0 && code <= 8) ||
      code === 11 ||
      code === 12 ||
      (code >= 14 && code <= 31)
    ) {
      hasControlChars = true;
      break;
    }
  }

  if (
    normalized.length === 0 ||
    normalized.length > MAX_MESSAGE_LENGTH ||
    hasControlChars
  ) {
    return `Could not convert ${input.ext} file to markdown`;
  }

  return normalized;
}

export const markitdownAdapter: Converter = {
  id: CONVERTER_ID,
  version: CONVERTER_VERSION,

  canHandle: markitdownCanHandle,

  async convert(input: ConvertInput): Promise<ConvertResult> {
    // 1. Check size limit (defense in depth; EPIC 5 does stat-based pre-check)
    if (input.bytes.length > input.limits.maxBytes) {
      return { ok: false, error: tooLargeError(input, CONVERTER_ID) };
    }

    // 1b. Reject obviously truncated PDFs before markitdown-ts logs a parser
    // stack trace. ISO 32000 requires the final %%EOF marker near the file end.
    if (input.ext === ".pdf" && !hasCompletePdfTrailer(input.bytes)) {
      return {
        ok: false,
        error: corruptError(
          input,
          CONVERTER_ID,
          "Invalid or incomplete PDF structure"
        ),
      };
    }

    // 1c. Detect password-protected documents before calling markitdown-ts.
    // markitdown-ts logs dependency stack traces to stderr for these files.
    if (isPasswordProtected(input)) {
      return {
        ok: false,
        error: permissionError(
          input,
          CONVERTER_ID,
          "File is password-protected",
          undefined,
          { protection: input.ext.slice(1) }
        ),
      };
    }

    // 2. Setup timeout handling
    // Note: markitdown-ts doesn't support AbortSignal, so underlying
    // work may continue after timeout (known limitation; process isolation future work)
    let timeoutId: ReturnType<typeof setTimeout> | undefined;
    let timedOut = false;

    const timeoutPromise = new Promise<never>((_, reject) => {
      timeoutId = setTimeout(() => {
        timedOut = true;
        reject(new Error("TIMEOUT"));
      }, input.limits.timeoutMs);
    });

    const converter = new MarkItDown();

    // IMPORTANT: Use convertBuffer with bytes for determinism
    // Path-based convert() could re-read a modified file
    // Zero-copy Buffer view (input.bytes is immutable by contract)
    const workPromise = converter.convertBuffer(toBuffer(input.bytes), {
      file_extension: input.ext,
    });

    try {
      const result = await Promise.race([workPromise, timeoutPromise]);

      // Clear timeout on success
      if (timeoutId) {
        clearTimeout(timeoutId);
      }

      if (!result?.markdown) {
        return {
          ok: false,
          error: corruptError(input, CONVERTER_ID, "Empty conversion result"),
        };
      }

      // Emit warnings for suspicious output
      const warnings: ConvertWarning[] = [];
      if (result.markdown.length < 10 && input.bytes.length > 1000) {
        warnings.push({ code: "LOSSY", message: "Suspiciously short output" });
      }

      // NOTE: Canonicalization happens in pipeline.ts, not here
      return {
        ok: true,
        value: {
          markdown: result.markdown,
          title: result.title ?? undefined,
          meta: {
            converterId: CONVERTER_ID,
            converterVersion: CONVERTER_VERSION,
            sourceMime: input.mime,
            warnings: warnings.length > 0 ? warnings : undefined,
          },
        },
      };
    } catch (err) {
      // Clear timeout on error
      if (timeoutId) {
        clearTimeout(timeoutId);
      }

      // If we timed out, suppress any later rejection from the work promise
      // to prevent unhandled rejection crashes
      if (timedOut) {
        workPromise.catch(() => {
          // Intentionally swallowed - work continued after timeout
        });
        return { ok: false, error: timeoutError(input, CONVERTER_ID) };
      }

      // Map adapter errors
      const message =
        err instanceof Error
          ? sanitizeErrorMessage(err.message, input)
          : `Could not convert ${input.ext} file to markdown`;

      if (PASSWORD_ERROR_REGEX.test(message)) {
        return {
          ok: false,
          error: permissionError(
            input,
            CONVERTER_ID,
            "File is password-protected",
            err,
            { protection: input.ext.slice(1) }
          ),
        };
      }

      return {
        ok: false,
        error: adapterError(input, CONVERTER_ID, message, err),
      };
    }
  },
};