<?php
/**
 * 数据访问层(全部使用预处理语句)
 */
require_once __DIR__ . DIRECTORY_SEPARATOR . 'db.php';

/* ============================================================
 * 通用工具
 * ============================================================ */
function now_iso()
{
    return date('c');
}

function gen_id($prefix)
{
    return $prefix . bin2hex(random_bytes(8));
}

function db_all($sql, $params = array())
{
    $st = db()->prepare($sql);
    $st->execute($params);
    return $st->fetchAll();
}

function db_one($sql, $params = array())
{
    $st = db()->prepare($sql);
    $st->execute($params);
    $row = $st->fetch();
    return $row === false ? null : $row;
}

function db_val($sql, $params = array())
{
    $st = db()->prepare($sql);
    $st->execute($params);
    return $st->fetchColumn();
}

function db_run($sql, $params = array())
{
    $st = db()->prepare($sql);
    $st->execute($params);
    return $st;
}

function like_param($q)
{
    return '%' . $q . '%';
}

/* ============================================================
 * 用户
 * ============================================================ */
function user_find_by_name($username)
{
    return db_one('SELECT * FROM users WHERE username = ?', array($username));
}

function user_find_by_id($id)
{
    return db_one('SELECT * FROM users WHERE id = ?', array($id));
}

function user_name_map()
{
    $map = array();
    foreach (db_all('SELECT id, username FROM users') as $r) {
        $map[$r['id']] = $r['username'];
    }
    return $map;
}

function user_search($q, $limit, $offset)
{
    $limit = (int) $limit;
    $offset = (int) $offset;
    if ($q === '') {
        return db_all('SELECT * FROM users ORDER BY created_at DESC, username ASC LIMIT ' . $limit . ' OFFSET ' . $offset);
    }
    $p = like_param($q);
    return db_all(
        'SELECT * FROM users WHERE username LIKE ? OR role LIKE ? ORDER BY created_at DESC, username ASC LIMIT ' . $limit . ' OFFSET ' . $offset,
        array($p, $p)
    );
}

function user_count($q)
{
    if ($q === '') {
        return (int) db_val('SELECT COUNT(*) FROM users');
    }
    $p = like_param($q);
    return (int) db_val('SELECT COUNT(*) FROM users WHERE username LIKE ? OR role LIKE ?', array($p, $p));
}

function user_insert($data)
{
    db_run(
        'INSERT INTO users (id, username, password_hash, role, disabled, must_change_password, created_at, last_login_at, login_count)
         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)',
        array(
            $data['id'],
            $data['username'],
            $data['password_hash'],
            isset($data['role']) ? $data['role'] : 'user',
            !empty($data['disabled']) ? 1 : 0,
            !empty($data['must_change_password']) ? 1 : 0,
            isset($data['created_at']) ? $data['created_at'] : now_iso(),
            isset($data['last_login_at']) ? $data['last_login_at'] : null,
            isset($data['login_count']) ? (int) $data['login_count'] : 0,
        )
    );
    return $data['id'];
}

function user_update($id, $fields)
{
    $allowed = array('username', 'password_hash', 'role', 'disabled', 'must_change_password');
    $sets = array();
    $params = array();
    foreach ($allowed as $f) {
        if (array_key_exists($f, $fields)) {
            $sets[] = $f . ' = ?';
            $params[] = $fields[$f];
        }
    }
    if (!$sets) {
        return false;
    }
    $params[] = $id;
    db_run('UPDATE users SET ' . implode(', ', $sets) . ' WHERE id = ?', $params);
    return true;
}

function user_delete($id)
{
    db_run('DELETE FROM users WHERE id = ?', array($id));
    db_run('DELETE FROM sessions WHERE user_id = ?', array($id));
}

function user_touch_login($id)
{
    db_run('UPDATE users SET last_login_at = ?, login_count = login_count + 1 WHERE id = ?', array(now_iso(), $id));
}

/* ============================================================
 * 会话
 * ============================================================ */
function session_create($token, $userId, $expires, $ip, $ua)
{
    db_run(
        'INSERT INTO sessions (token, user_id, created_at, expires_at, ip, user_agent) VALUES (?, ?, ?, ?, ?, ?)',
        array($token, $userId, now_iso(), (int) $expires, $ip, $ua)
    );
}

function session_find($token)
{
    return db_one('SELECT * FROM sessions WHERE token = ?', array($token));
}

function session_delete($token)
{
    db_run('DELETE FROM sessions WHERE token = ?', array($token));
}

function session_delete_by_user($userId)
{
    db_run('DELETE FROM sessions WHERE user_id = ?', array($userId));
}

function session_purge_expired($now)
{
    db_run('DELETE FROM sessions WHERE expires_at < ?', array((int) $now));
}

/* ============================================================
 * 拓扑
 * ============================================================ */
function topo_find($id)
{
    return db_one('SELECT * FROM topologies WHERE id = ?', array($id));
}

function topo_list_for_user($user)
{
    /* 主应用「我的拓扑」仅返回:当前用户创建的 + 公开的。
       全部拓扑(含他人私有)只能在管理后台查看,见 topo_admin_search()。 */
    return db_all(
        'SELECT * FROM topologies WHERE owner_id = ? OR visibility = ? ORDER BY updated_at DESC',
        array($user['id'], 'public')
    );
}

function topo_admin_search($q, $ownerId, $limit, $offset)
{
    $limit = (int) $limit;
    $offset = (int) $offset;
    $where = array();
    $params = array();
    if ($q !== '') {
        $where[] = 'name LIKE ?';
        $params[] = like_param($q);
    }
    if ($ownerId !== '') {
        $where[] = 'owner_id = ?';
        $params[] = $ownerId;
    }
    $sql = 'SELECT * FROM topologies';
    if ($where) {
        $sql .= ' WHERE ' . implode(' AND ', $where);
    }
    $sql .= ' ORDER BY updated_at DESC LIMIT ' . $limit . ' OFFSET ' . $offset;
    return db_all($sql, $params);
}

function topo_admin_count($q, $ownerId)
{
    $where = array();
    $params = array();
    if ($q !== '') {
        $where[] = 'name LIKE ?';
        $params[] = like_param($q);
    }
    if ($ownerId !== '') {
        $where[] = 'owner_id = ?';
        $params[] = $ownerId;
    }
    $sql = 'SELECT COUNT(*) FROM topologies';
    if ($where) {
        $sql .= ' WHERE ' . implode(' AND ', $where);
    }
    return (int) db_val($sql, $params);
}

function topo_recent($limit)
{
    $limit = (int) $limit;
    return db_all('SELECT * FROM topologies ORDER BY updated_at DESC LIMIT ' . $limit);
}

/* 导出用:根据 id 列表返回完整行;ids 为空时返回全部 */
function topo_export_rows($ids)
{
    if (empty($ids)) {
        return db_all('SELECT * FROM topologies ORDER BY updated_at DESC');
    }
    $ph = implode(',', array_fill(0, count($ids), '?'));
    return db_all('SELECT * FROM topologies WHERE id IN (' . $ph . ') ORDER BY updated_at DESC', $ids);
}

function topo_insert($t)
{
    db_run(
        'INSERT INTO topologies (id, name, owner_id, visibility, data, node_count, edge_count, created_at, updated_at)
         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)',
        array(
            $t['id'],
            $t['name'],
            $t['owner_id'],
            isset($t['visibility']) ? $t['visibility'] : 'private',
            isset($t['data']) ? $t['data'] : '{"nodes":[],"edges":[]}',
            isset($t['node_count']) ? (int) $t['node_count'] : 0,
            isset($t['edge_count']) ? (int) $t['edge_count'] : 0,
            isset($t['created_at']) ? $t['created_at'] : now_iso(),
            isset($t['updated_at']) ? $t['updated_at'] : now_iso(),
        )
    );
    return $t['id'];
}

function topo_update($id, $data, $nodeCount, $edgeCount, $updatedAt, $name = null)
{
    if ($name !== null && $name !== '') {
        db_run(
            'UPDATE topologies SET data = ?, node_count = ?, edge_count = ?, updated_at = ?, name = ? WHERE id = ?',
            array($data, (int) $nodeCount, (int) $edgeCount, $updatedAt, $name, $id)
        );
    } else {
        db_run(
            'UPDATE topologies SET data = ?, node_count = ?, edge_count = ?, updated_at = ? WHERE id = ?',
            array($data, (int) $nodeCount, (int) $edgeCount, $updatedAt, $id)
        );
    }
}

function topo_delete($id)
{
    db_run('DELETE FROM topologies WHERE id = ?', array($id));
}

function topo_set_visibility($id, $vis, $updatedAt)
{
    db_run('UPDATE topologies SET visibility = ?, updated_at = ? WHERE id = ?', array($vis, $updatedAt, $id));
}

function topo_set_name($id, $name, $updatedAt)
{
    db_run('UPDATE topologies SET name = ?, updated_at = ? WHERE id = ?', array($name, $updatedAt, $id));
}

/* ============================================================
 * 操作日志
 * ============================================================ */
function log_add($userId, $username, $action, $target, $detail, $ip)
{
    db_run(
        'INSERT INTO activity_logs (user_id, username, action, target, detail, ip, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)',
        array($userId, $username, $action, $target, $detail, $ip, now_iso())
    );
}

function log_search($q, $limit, $offset)
{
    $limit = (int) $limit;
    $offset = (int) $offset;
    if ($q === '') {
        return db_all('SELECT * FROM activity_logs ORDER BY id DESC LIMIT ' . $limit . ' OFFSET ' . $offset);
    }
    $p = like_param($q);
    return db_all(
        'SELECT * FROM activity_logs WHERE username LIKE ? OR action LIKE ? OR target LIKE ? OR detail LIKE ?
         ORDER BY id DESC LIMIT ' . $limit . ' OFFSET ' . $offset,
        array($p, $p, $p, $p)
    );
}

function log_count($q)
{
    if ($q === '') {
        return (int) db_val('SELECT COUNT(*) FROM activity_logs');
    }
    $p = like_param($q);
    return (int) db_val(
        'SELECT COUNT(*) FROM activity_logs WHERE username LIKE ? OR action LIKE ? OR target LIKE ? OR detail LIKE ?',
        array($p, $p, $p, $p)
    );
}

function log_recent($limit)
{
    $limit = (int) $limit;
    return db_all('SELECT * FROM activity_logs ORDER BY id DESC LIMIT ' . $limit);
}

/* ============================================================
 * 统计
 * ============================================================ */
function stats_overview()
{
    $today = date('Y-m-d') . '%';
    return array(
        'userCount' => (int) db_val('SELECT COUNT(*) FROM users'),
        'adminCount' => (int) db_val("SELECT COUNT(*) FROM users WHERE role = 'admin' AND disabled = 0"),
        'disabledCount' => (int) db_val('SELECT COUNT(*) FROM users WHERE disabled = 1'),
        'topoCount' => (int) db_val('SELECT COUNT(*) FROM topologies'),
        'publicCount' => (int) db_val("SELECT COUNT(*) FROM topologies WHERE visibility = 'public'"),
        'todayTopoCount' => (int) db_val('SELECT COUNT(*) FROM topologies WHERE created_at LIKE ?', array($today)),
        'todayLoginCount' => (int) db_val("SELECT COUNT(*) FROM activity_logs WHERE action = 'login' AND created_at LIKE ?", array($today)),
        'todayLogCount' => (int) db_val('SELECT COUNT(*) FROM activity_logs WHERE created_at LIKE ?', array($today)),
    );
}

/* ============================================================
 * 站点设置(key-value)
 * ============================================================ */
function setting_get($key, $default = null)
{
    $row = db_one('SELECT sval FROM settings WHERE skey = ?', array($key));
    return $row === null ? $default : $row['sval'];
}

function setting_set($key, $val)
{
    $now = now_iso();
    if (db_one('SELECT skey FROM settings WHERE skey = ?', array($key)) !== null) {
        db_run('UPDATE settings SET sval = ?, updated_at = ? WHERE skey = ?', array($val, $now, $key));
    } else {
        db_run('INSERT INTO settings (skey, sval, updated_at) VALUES (?, ?, ?)', array($key, $val, $now));
    }
}

function settings_all()
{
    $out = array();
    foreach (db_all('SELECT skey, sval FROM settings') as $r) {
        $out[$r['skey']] = $r['sval'];
    }
    return $out;
}

/* ============================================================
 * 旧 JSON 数据迁移
 * ============================================================ */
function migrate_legacy_json()
{
    $dir = data_dir();
    $usersFile = $dir . DIRECTORY_SEPARATOR . 'users.json';
    $topoIndexFile = $dir . DIRECTORY_SEPARATOR . 'topologies.json';
    $topoDir = $dir . DIRECTORY_SEPARATOR . 'topologies';

    if (is_file($usersFile) && (int) db_val('SELECT COUNT(*) FROM users') === 0) {
        $data = json_decode(@file_get_contents($usersFile), true);
        if (isset($data['users']) && is_array($data['users'])) {
            foreach ($data['users'] as $u) {
                if (empty($u['id']) || empty($u['username'])) {
                    continue;
                }
                user_insert(array(
                    'id' => $u['id'],
                    'username' => $u['username'],
                    'password_hash' => isset($u['passwordHash']) ? $u['passwordHash'] : '',
                    'role' => isset($u['role']) ? $u['role'] : 'user',
                    'disabled' => !empty($u['disabled']) ? 1 : 0,
                    'must_change_password' => !empty($u['mustChangePassword']) ? 1 : 0,
                    'created_at' => isset($u['createdAt']) ? $u['createdAt'] : now_iso(),
                ));
            }
        }
        @rename($usersFile, $usersFile . '.bak');
    }

    if (is_file($topoIndexFile)) {
        $idx = json_decode(@file_get_contents($topoIndexFile), true);
        if (isset($idx['topologies']) && is_array($idx['topologies'])) {
            foreach ($idx['topologies'] as $t) {
                if (empty($t['id']) || topo_find($t['id'])) {
                    continue;
                }
                $content = array('nodes' => array(), 'edges' => array());
                $cf = $topoDir . DIRECTORY_SEPARATOR . $t['id'] . '.json';
                if (is_file($cf)) {
                    $c = json_decode(@file_get_contents($cf), true);
                    if (is_array($c)) {
                        $content = $c;
                    }
                }
                topo_insert(array(
                    'id' => $t['id'],
                    'name' => isset($t['name']) ? $t['name'] : '未命名',
                    'owner_id' => isset($t['ownerId']) ? $t['ownerId'] : '',
                    'visibility' => isset($t['visibility']) ? $t['visibility'] : 'private',
                    'data' => json_encode($content, JSON_UNESCAPED_UNICODE),
                    'node_count' => isset($content['nodes']) ? count($content['nodes']) : 0,
                    'edge_count' => isset($content['edges']) ? count($content['edges']) : 0,
                    'created_at' => isset($t['createdAt']) ? $t['createdAt'] : now_iso(),
                    'updated_at' => isset($t['updatedAt']) ? $t['updatedAt'] : now_iso(),
                ));
            }
        }
        @rename($topoIndexFile, $topoIndexFile . '.bak');
    }
}

/**
 * 首次初始化:迁移旧数据 + 创建默认管理员
 */
function ensure_seed()
{
    migrate_legacy_json();

    if ((int) db_val('SELECT COUNT(*) FROM users') > 0) {
        return;
    }
    $cfg = app_config();
    $admin = isset($cfg['default_admin']) ? $cfg['default_admin'] : array('username' => 'admin', 'password' => 'admin123');
    user_insert(array(
        'id' => gen_id('u'),
        'username' => $admin['username'],
        'password_hash' => password_hash($admin['password'], PASSWORD_DEFAULT),
        'role' => 'admin',
        'disabled' => 0,
        'must_change_password' => 1,
        'created_at' => now_iso(),
    ));
}