// Copyright IBM Corp. 2014, 2026
// SPDX-License-Identifier: BUSL-1.1

package terraform

import (
	"fmt"
	"strings"

	"github.com/hashicorp/go-uuid"
	"github.com/hashicorp/terraform/internal/configs/configschema"
	"github.com/hashicorp/terraform/internal/providers"
	"github.com/hashicorp/terraform/internal/tfdiags"
	"github.com/zclconf/go-cty/cty"
	ctyjson "github.com/zclconf/go-cty/cty/json"
)

func dataStoreResourceSchema() providers.Schema {
	return providers.Schema{
		Body: &configschema.Block{
			Attributes: map[string]*configschema.Attribute{
				"input":            {Type: cty.DynamicPseudoType, Optional: true},
				"output":           {Type: cty.DynamicPseudoType, Computed: true},
				"triggers_replace": {Type: cty.DynamicPseudoType, Optional: true},
				"id":               {Type: cty.String, Computed: true},
			},
		},
		Identity: dataStoreResourceIdentitySchema().Body,
	}
}

func dataStoreResourceIdentitySchema() providers.IdentitySchema {
	return providers.IdentitySchema{
		Version: 0,
		Body: &configschema.Object{
			Attributes: map[string]*configschema.Attribute{
				"id": {
					Type:        cty.String,
					Description: "The unique identifier for the data store.",
					Required:    true,
				},
			},
			Nesting: configschema.NestingSingle,
		},
	}
}

func validateDataStoreResourceConfig(req providers.ValidateResourceConfigRequest) (resp providers.ValidateResourceConfigResponse) {
	if req.Config.IsNull() {
		return resp
	}

	// Core does not currently validate computed values are not set in the
	// configuration.
	for _, attr := range []string{"id", "output"} {
		if !req.Config.GetAttr(attr).IsNull() {
			resp.Diagnostics = resp.Diagnostics.Append(fmt.Errorf(`%q attribute is read-only`, attr))
		}
	}
	return resp
}

func upgradeDataStoreResourceState(req providers.UpgradeResourceStateRequest) (resp providers.UpgradeResourceStateResponse) {
	ty := dataStoreResourceSchema().Body.ImpliedType()
	val, err := ctyjson.Unmarshal(req.RawStateJSON, ty)
	if err != nil {
		resp.Diagnostics = resp.Diagnostics.Append(err)
		return resp
	}

	resp.UpgradedState = val
	return resp
}

func upgradeDataStoreResourceIdentity(providers.UpgradeResourceIdentityRequest) (resp providers.UpgradeResourceIdentityResponse) {
	resp.Diagnostics = resp.Diagnostics.Append(fmt.Errorf("The builtin provider does not support provider upgrades since it has not changed the identity schema yet."))
	return resp
}

func readDataStoreResourceState(req providers.ReadResourceRequest) (resp providers.ReadResourceResponse) {
	resp.NewState = req.PriorState
	return resp
}

func planDataStoreResourceChange(req providers.PlanResourceChangeRequest) (resp providers.PlanResourceChangeResponse) {
	if req.ProposedNewState.IsNull() {
		// destroy op
		resp.PlannedState = req.ProposedNewState
		return resp
	}

	planned := req.ProposedNewState.AsValueMap()

	input := req.ProposedNewState.GetAttr("input")
	trigger := req.ProposedNewState.GetAttr("triggers_replace")

	switch {
	case req.PriorState.IsNull():
		// Create
		// Set the id value to unknown.
		planned["id"] = cty.UnknownVal(cty.String).RefineNotNull()

		// Output type must always match the input, even when it's null.
		if input.IsNull() {
			planned["output"] = input
		} else {
			planned["output"] = cty.UnknownVal(input.Type())
		}

		resp.PlannedState = cty.ObjectVal(planned)
		return resp

	case !req.PriorState.GetAttr("triggers_replace").RawEquals(trigger):
		// trigger changed, so we need to replace the entire instance
		resp.RequiresReplace = append(resp.RequiresReplace, cty.GetAttrPath("triggers_replace"))
		planned["id"] = cty.UnknownVal(cty.String).RefineNotNull()

		// We need to check the input for the replacement instance to compute a
		// new output.
		if input.IsNull() {
			planned["output"] = input
		} else {
			planned["output"] = cty.UnknownVal(input.Type())
		}

	case !req.PriorState.GetAttr("input").RawEquals(input):
		// only input changed, so we only need to re-compute output
		planned["output"] = cty.UnknownVal(input.Type())
	}

	resp.PlannedState = cty.ObjectVal(planned)
	return resp
}

var testUUIDHook func() string

func applyDataStoreResourceChange(req providers.ApplyResourceChangeRequest) (resp providers.ApplyResourceChangeResponse) {
	if req.PlannedState.IsNull() {
		resp.NewState = req.PlannedState
		return resp
	}

	newState := req.PlannedState.AsValueMap()

	if !req.PlannedState.GetAttr("output").IsKnown() {
		newState["output"] = req.PlannedState.GetAttr("input")
	}

	if !req.PlannedState.GetAttr("id").IsKnown() {
		idString, err := uuid.GenerateUUID()
		// Terraform would probably never get this far without a good random
		// source, but catch the error anyway.
		if err != nil {
			diag := tfdiags.AttributeValue(
				tfdiags.Error,
				"Error generating id",
				err.Error(),
				cty.GetAttrPath("id"),
			)

			resp.Diagnostics = resp.Diagnostics.Append(diag)
		}

		if testUUIDHook != nil {
			idString = testUUIDHook()
		}

		newState["id"] = cty.StringVal(idString)
	}

	resp.NewState = cty.ObjectVal(newState)

	return resp
}

// TODO: This isn't very useful even for examples, because terraform_data has
// no way to refresh the full resource value from only the import ID. This
// minimal implementation allows the import to succeed, and can be extended
// once the configuration is available during import.
func importDataStore(req providers.ImportResourceStateRequest) (resp providers.ImportResourceStateResponse) {
	schema := dataStoreResourceSchema()
	v := cty.ObjectVal(map[string]cty.Value{
		"id": cty.StringVal(req.ID),
	})
	state, err := schema.Body.CoerceValue(v)
	resp.Diagnostics = resp.Diagnostics.Append(err)

	resp.ImportedResources = []providers.ImportedResource{
		{
			TypeName: req.TypeName,
			State:    state,
		},
	}
	return resp
}

// moveDataStoreResourceState enables moving from the official null_resource
// managed resource to the terraform_data managed resource.
func moveDataStoreResourceState(req providers.MoveResourceStateRequest) (resp providers.MoveResourceStateResponse) {
	// Verify that the source provider is an official hashicorp/null provider,
	// but ignore the hostname for mirrors.
	if !strings.HasSuffix(req.SourceProviderAddress, "hashicorp/null") {
		diag := tfdiags.Sourceless(
			tfdiags.Error,
			"Unsupported source provider for move operation",
			"Only moving from the official hashicorp/null provider to terraform_data is supported.",
		)
		resp.Diagnostics = resp.Diagnostics.Append(diag)

		return resp
	}

	// Verify that the source resource type name is null_resource.
	if req.SourceTypeName != "null_resource" {
		diag := tfdiags.Sourceless(
			tfdiags.Error,
			"Unsupported source resource type for move operation",
			"Only moving from the null_resource managed resource to terraform_data is supported.",
		)
		resp.Diagnostics = resp.Diagnostics.Append(diag)

		return resp
	}

	nullResourceSchemaType := nullResourceSchema().Body.ImpliedType()
	nullResourceValue, err := ctyjson.Unmarshal(req.SourceStateJSON, nullResourceSchemaType)

	if err != nil {
		resp.Diagnostics = resp.Diagnostics.Append(err)

		return resp
	}

	triggersReplace := nullResourceValue.GetAttr("triggers")

	// PlanResourceChange uses RawEquals comparison, which will show a
	// difference between cty.NullVal(cty.Map(cty.String)) and
	// cty.NullVal(cty.DynamicPseudoType).
	if triggersReplace.IsNull() {
		triggersReplace = cty.NullVal(cty.DynamicPseudoType)
	} else {
		// PlanResourceChange uses RawEquals comparison, which will show a
		// difference between cty.MapVal(...) and cty.ObjectVal(...). Given that
		// triggers is typically configured using direct configuration syntax of
		// {...}, which is a cty.ObjectVal, over a map typed variable or
		// explicitly type converted map, this pragmatically chooses to convert
		// the triggers value to cty.ObjectVal to prevent an immediate plan
		// difference for the more typical case.
		triggersReplace = cty.ObjectVal(triggersReplace.AsValueMap())
	}

	schema := dataStoreResourceSchema()
	v := cty.ObjectVal(map[string]cty.Value{
		"id":               nullResourceValue.GetAttr("id"),
		"triggers_replace": triggersReplace,
	})

	state, err := schema.Body.CoerceValue(v)

	// null_resource did not use private state, so it is unnecessary to move.
	resp.Diagnostics = resp.Diagnostics.Append(err)
	resp.TargetState = state

	return resp
}

func nullResourceSchema() providers.Schema {
	return providers.Schema{
		Body: &configschema.Block{
			Attributes: map[string]*configschema.Attribute{
				"id":       {Type: cty.String, Computed: true},
				"triggers": {Type: cty.Map(cty.String), Optional: true},
			},
		},
	}
}
