// Copyright IBM Corp. 2014, 2026
// SPDX-License-Identifier: BUSL-1.1

package terraform

import (
	"context"
	"sync"
	"time"

	"github.com/hashicorp/terraform/internal/actions"
	"github.com/hashicorp/terraform/internal/addrs"
	"github.com/hashicorp/terraform/internal/checks"
	"github.com/hashicorp/terraform/internal/collections"
	"github.com/hashicorp/terraform/internal/configs"
	"github.com/hashicorp/terraform/internal/configs/configschema"
	"github.com/hashicorp/terraform/internal/deprecation"
	"github.com/hashicorp/terraform/internal/depsfile"
	"github.com/hashicorp/terraform/internal/instances"
	"github.com/hashicorp/terraform/internal/lang"
	"github.com/hashicorp/terraform/internal/moduletest/mocking"
	"github.com/hashicorp/terraform/internal/namedvals"
	"github.com/hashicorp/terraform/internal/plans"
	"github.com/hashicorp/terraform/internal/plans/deferring"
	"github.com/hashicorp/terraform/internal/policy"
	"github.com/hashicorp/terraform/internal/providers"
	"github.com/hashicorp/terraform/internal/provisioners"
	"github.com/hashicorp/terraform/internal/refactoring"
	"github.com/hashicorp/terraform/internal/resources/ephemeral"
	"github.com/hashicorp/terraform/internal/states"
	"github.com/hashicorp/terraform/internal/tfdiags"
)

// ContextGraphWalker is the GraphWalker implementation used with the
// Context struct to walk and evaluate the graph.
type ContextGraphWalker struct {
	NullGraphWalker

	// Configurable values
	Context                 *Context
	State                   *states.SyncState    // Used for safe concurrent access to state
	RefreshState            *states.SyncState    // Used for safe concurrent access to state
	PrevRunState            *states.SyncState    // Used for safe concurrent access to state
	Changes                 *plans.ChangesSync   // Used for safe concurrent writes to changes
	Checks                  *checks.State        // Used for safe concurrent writes of checkable objects and their check results
	NamedValues             *namedvals.State     // Tracks evaluation of input variables, local values, and output values
	InstanceExpander        *instances.Expander  // Tracks our gradual expansion of module and resource instances
	Deferrals               *deferring.Deferred  // Tracks any deferred actions
	EphemeralResources      *ephemeral.Resources // Tracks active instances of ephemeral resources
	Imports                 []configs.Import
	MoveResults             refactoring.MoveResults // Read-only record of earlier processing of move statements
	Operation               walkOperation
	StopContext             context.Context
	ExternalProviderConfigs map[addrs.RootProviderConfig]providers.Interface
	Config                  *configs.Config
	PlanTimestamp           time.Time
	Overrides               *mocking.Overrides
	// Forget if set to true will cause the plan to forget all resources. This is
	// only allowed in the context of a destroy plan.
	Forget bool

	Actions      *actions.Actions
	Deprecations *deprecation.Deprecations

	// This is an output. Do not set this, nor read it while a graph walk
	// is in progress.
	NonFatalDiagnostics tfdiags.Diagnostics

	ProviderLocks map[addrs.Provider]*depsfile.ProviderLock

	PolicyClient  policy.Client
	PolicyResults *plans.PolicyResults // Used to store policy evaluation results
	PolicyGraph   *policySubgraph      // Used for writing resource policy evaluation nodes

	once               sync.Once
	contexts           collections.Map[evalContextScope, *BuiltinEvalContext]
	contextLock        sync.Mutex
	providerCache      map[string]providers.Interface
	providerFuncCache  map[string]providers.Interface
	functionResults    *lang.FunctionResults
	providerSchemas    map[string]providers.ProviderSchema
	providerLock       sync.Mutex
	provisionerCache   map[string]provisioners.Interface
	provisionerSchemas map[string]*configschema.Block
	provisionerLock    sync.Mutex
}

var _ GraphWalker = (*ContextGraphWalker)(nil)

// enterScope provides an EvalContext associated with the given scope.
func (w *ContextGraphWalker) enterScope(scope evalContextScope) EvalContext {
	if scope == nil {
		// Just want a global EvalContext then, presumably.
		return w.EvalContext()
	}

	w.contextLock.Lock()
	defer w.contextLock.Unlock()

	// We might already have a context for this scope.
	if ctx, ok := w.contexts.GetOk(scope); ok {
		return ctx
	}

	ctx := w.EvalContext().withScope(scope).(*BuiltinEvalContext)
	w.contexts.Put(scope, ctx)
	return ctx
}

func (w *ContextGraphWalker) EvalContext() EvalContext {
	w.once.Do(w.init)

	// Our evaluator shares some locks with the main context and the walker
	// so that we can safely run multiple evaluations at once across
	// different modules.
	evaluator := &Evaluator{
		Meta:               w.Context.meta,
		Config:             w.Config,
		Operation:          w.Operation,
		State:              w.State,
		Changes:            w.Changes,
		EphemeralResources: w.EphemeralResources,
		Plugins:            w.Context.plugins,
		Instances:          w.InstanceExpander,
		NamedValues:        w.NamedValues,
		Deferrals:          w.Deferrals,
		PlanTimestamp:      w.PlanTimestamp,
		FunctionResults:    w.functionResults,
	}

	ctx := &BuiltinEvalContext{
		StopContext:             w.StopContext,
		Hooks:                   w.Context.hooks,
		InputValue:              w.Context.uiInput,
		EphemeralResourcesValue: w.EphemeralResources,
		InstanceExpanderValue:   w.InstanceExpander,
		Plugins:                 w.Context.plugins,
		ExternalProviderConfigs: w.ExternalProviderConfigs,
		MoveResultsValue:        w.MoveResults,
		ProviderCache:           w.providerCache,
		ProviderFuncCache:       w.providerFuncCache,
		FunctionResults:         w.functionResults,
		ProviderInputConfig:     w.Context.providerInputConfig,
		ProviderLock:            &w.providerLock,
		ProvisionerCache:        w.provisionerCache,
		ProvisionerLock:         &w.provisionerLock,
		ChangesValue:            w.Changes,
		ChecksValue:             w.Checks,
		NamedValuesValue:        w.NamedValues,
		DeferralsValue:          w.Deferrals,
		StateValue:              w.State,
		RefreshStateValue:       w.RefreshState,
		PrevRunStateValue:       w.PrevRunState,
		PolicyGraphValue:        w.PolicyGraph,
		Evaluator:               evaluator,
		OverrideValues:          w.Overrides,
		forget:                  w.Forget,
		ActionsValue:            w.Actions,
		ProviderLocksValue:      w.ProviderLocks,
		PolicyClientValue:       w.PolicyClient,
		PolicyResultsValue:      w.PolicyResults,
		DeprecationsValue:       w.Deprecations,
	}

	return ctx
}

func (w *ContextGraphWalker) init() {
	w.contexts = collections.NewMap[evalContextScope, *BuiltinEvalContext]()
	w.providerCache = make(map[string]providers.Interface)
	w.providerFuncCache = make(map[string]providers.Interface)
	w.providerSchemas = make(map[string]providers.ProviderSchema)
	w.provisionerCache = make(map[string]provisioners.Interface)
	w.provisionerSchemas = make(map[string]*configschema.Block)
}

func (w *ContextGraphWalker) Execute(ctx EvalContext, n GraphNodeExecutable) tfdiags.Diagnostics {
	// Acquire a lock on the semaphore
	w.Context.parallelSem.Acquire()
	defer w.Context.parallelSem.Release()

	return n.Execute(ctx, w.Operation)
}
