<?php

namespace App\Protocols;

use App\Support\AbstractProtocol;
use App\Models\Server;

class Loon extends AbstractProtocol
{
    public $flags = ['loon'];

    public $allowedProtocols = [
        Server::TYPE_SHADOWSOCKS,
        Server::TYPE_VMESS,
        Server::TYPE_TROJAN,
        Server::TYPE_HYSTERIA,
        Server::TYPE_VLESS,
        Server::TYPE_ANYTLS,
    ];

    protected $protocolRequirements = [
        'loon.hysteria.protocol_settings.version' => [2 => '637'],
        'loon.trojan.protocol_settings.tls' => [0 => '3.2.1', 1 => '3.2.1',2 => '999.9.9'],
    ];

    public function handle()
    {
        $servers = $this->servers;
        $user = $this->user;

        $uri = '';

        foreach ($servers as $item) {
            if (
                $item['type'] === Server::TYPE_SHADOWSOCKS
            ) {
                $uri .= self::buildShadowsocks($item['password'], $item);
            }
            if ($item['type'] === Server::TYPE_VMESS) {
                $uri .= self::buildVmess($item['password'], $item);
            }
            if ($item['type'] === Server::TYPE_TROJAN) {
                $uri .= self::buildTrojan($item['password'], $item);
            }
            if ($item['type'] === Server::TYPE_HYSTERIA) {
                $uri .= self::buildHysteria($item['password'], $item, $user);
            }
            if ($item['type'] === Server::TYPE_VLESS) {
                $uri .= self::buildVless($item['password'], $item);
            }
            if ($item['type'] === Server::TYPE_ANYTLS) {
                $uri .= self::buildAnyTLS($item['password'], $item);
            }
        }
        return response($uri)
            ->header('content-type', 'text/plain')
            ->header('Subscription-Userinfo', "upload={$user['u']}; download={$user['d']}; total={$user['transfer_enable']}; expire={$user['expired_at']}");
    }


    public static function buildShadowsocks($password, $server)
    {
        $protocol_settings = $server['protocol_settings'];
        $cipher = data_get($protocol_settings, 'cipher');

        $config = [
            "{$server['name']}=Shadowsocks",
            "{$server['host']}",
            "{$server['port']}",
            "{$cipher}",
            "{$password}",
            'fast-open=false',
            'udp=true'
        ];

        if (data_get($protocol_settings, 'plugin') && data_get($protocol_settings, 'plugin_opts')) {
            $plugin = data_get($protocol_settings, 'plugin');
            $pluginOpts = data_get($protocol_settings, 'plugin_opts', '');
            // 解析插件选项
            $parsedOpts = collect(explode(';', $pluginOpts))
                ->filter()
                ->mapWithKeys(function ($pair) {
                    if (!str_contains($pair, '=')) {
                        return [];
                    }
                    [$key, $value] = explode('=', $pair, 2);
                    return [trim($key) => trim($value)];
                })
                ->all();
            switch ($plugin) {
                case 'obfs':
                    $config[] = "obfs-name={$parsedOpts['obfs']}";
                    if (isset($parsedOpts['obfs-host'])) {
                        $config[] = "obfs-host={$parsedOpts['obfs-host']}";
                    }
                    if (isset($parsedOpts['path'])) {
                        $config[] = "obfs-uri={$parsedOpts['path']}";
                    }
                    break;
            }
        }

        $config = array_filter($config);
        $uri = implode(',', $config) . "\r\n";
        return $uri;
    }

    public static function buildVmess($uuid, $server)
    {
        $protocol_settings = $server['protocol_settings'];
        $config = [
            "{$server['name']}=vmess",
            "{$server['host']}",
            "{$server['port']}",
            'auto',
            "{$uuid}",
            'fast-open=false',
            'udp=true',
            "alterId=0"
        ];

        if (data_get($protocol_settings, 'tls')) {
            $config[] = 'over-tls=true';
            if (data_get($protocol_settings, 'tls_settings')) {
                $tls_settings = data_get($protocol_settings, 'tls_settings');
                $config[] = 'skip-cert-verify=' . (data_get($tls_settings, 'allow_insecure') ? 'true' : 'false');
                if (data_get($tls_settings, 'server_name'))
                    $config[] = "tls-name={$tls_settings['server_name']}";
            }
        }

        switch (data_get($server['protocol_settings'], 'network')) {
            case 'tcp':
                $config[] = 'transport=tcp';
                $tcpSettings = data_get($protocol_settings, 'network_settings');
                if (data_get($tcpSettings, 'header.type'))
                    $config = str_replace('transport=tcp', "transport={$tcpSettings['header']['type']}", $config);
                if (data_get($tcpSettings, key: 'header.request.path')) {
                    $paths = data_get($tcpSettings, key: 'header.request.path');
                    $path = $paths[array_rand($paths)];
                    $config[] = "path={$path}";
                }
                if (data_get($tcpSettings, key: 'header.request.headers.Host')) {
                    $hosts = data_get($tcpSettings, key: 'header.request.headers.Host');
                    $host = $hosts[array_rand($hosts)];
                    $config[] = "host={$host}";
                }
                break;
            case 'ws':
                $config[] = 'transport=ws';
                $wsSettings = data_get($protocol_settings, 'network_settings');
                if (data_get($wsSettings, key: 'path'))
                    $config[] = "path={$wsSettings['path']}";
                if (data_get($wsSettings, key: 'headers.Host'))
                    $config[] = "host={$wsSettings['headers']['Host']}";
                break;
            case 'grpc':
                $config[] = 'transport=grpc';
                if ($serviceName = data_get($protocol_settings, 'network_settings.serviceName'))
                    $config[] = "grpc-service-name={$serviceName}";
                break;
            case 'h2':
                $config[] = 'transport=h2';
                if ($path = data_get($protocol_settings, 'network_settings.path'))
                    $config[] = "path={$path}";
                if ($host = data_get($protocol_settings, 'network_settings.host'))
                    $config[] = "host=" . (is_array($host) ? $host[0] : $host);
                break;
            case 'httpupgrade':
                $config[] = 'transport=httpupgrade';
                if ($path = data_get($protocol_settings, 'network_settings.path'))
                    $config[] = "path={$path}";
                if ($host = data_get($protocol_settings, 'network_settings.headers.Host'))
                    $config[] = "host={$host}";
                break;
        }

        $uri = implode(',', $config);
        $uri .= "\r\n";
        return $uri;
    }

    public static function buildTrojan($password, $server)
    {
        $protocol_settings = $server['protocol_settings'];
        $config = [
            "{$server['name']}=trojan",
            "{$server['host']}",
            "{$server['port']}",
            "{$password}",
        ];

        $tlsMode = (int) data_get($protocol_settings, 'tls', 1);
        switch ($tlsMode) {
            case 2: // Reality
                if ($serverName = data_get($protocol_settings, 'reality_settings.server_name')) {
                    $config[] = "tls-name={$serverName}";
                }
                if ($pubkey = data_get($protocol_settings, 'reality_settings.public_key')) {
                    $config[] = "public-key={$pubkey}";
                }
                if ($shortid = data_get($protocol_settings, 'reality_settings.short_id')) {
                    $config[] = "short-id={$shortid}";
                }
                $config[] = 'skip-cert-verify=' . (data_get($protocol_settings, 'reality_settings.allow_insecure', false) ? 'true' : 'false');
                break;
            default: // Standard TLS
                if ($serverName = data_get($protocol_settings, 'server_name')) {
                    $config[] = "tls-name={$serverName}";
                }
                $config[] = 'skip-cert-verify=' . (data_get($protocol_settings, 'allow_insecure') ? 'true' : 'false');
                break;
        }

        switch (data_get($protocol_settings, 'network', 'tcp')) {
            case 'ws':
                $config[] = 'transport=ws';
                if ($path = data_get($protocol_settings, 'network_settings.path'))
                    $config[] = "path={$path}";
                if ($host = data_get($protocol_settings, 'network_settings.headers.Host'))
                    $config[] = "host={$host}";
                break;
            case 'grpc':
                $config[] = 'transport=grpc';
                if ($serviceName = data_get($protocol_settings, 'network_settings.serviceName'))
                    $config[] = "grpc-service-name={$serviceName}";
                break;
        }

        $config = array_filter($config);
        $uri = implode(',', $config);
        $uri .= "\r\n";
        return $uri;
    }

    public static function buildVless($password, $server)
	{
		$protocol_settings = data_get($server, 'protocol_settings', []);

		$config = [
			"{$server['name']}=VLESS",
			"{$server['host']}",
			"{$server['port']}",
			"{$password}",
			"alterId=0",
			"udp=true"
		];

		// flow
		if ($flow = data_get($protocol_settings, 'flow')) {
			$config[] = "flow={$flow}";
		}

		// TLS/Reality
		switch (data_get($protocol_settings, 'tls')) {
			case 1:
				$config[] = "over-tls=true";
				$config[] = "skip-cert-verify=" . (data_get($protocol_settings, 'tls_settings.allow_insecure', false) ? "true" : "false");
				if ($serverName = data_get($protocol_settings, 'tls_settings.server_name')) {
					$config[] = "sni={$serverName}";
				}
				break;
			case 2:
				$config[] = "over-tls=true";
				$config[] = "skip-cert-verify=" . (data_get($protocol_settings, 'reality_settings.allow_insecure', false) ? "true" : "false");
				if ($serverName = data_get($protocol_settings, 'reality_settings.server_name')) {
					$config[] = "sni={$serverName}";
				}
				if ($pubkey = data_get($protocol_settings, 'reality_settings.public_key')) {
					$config[] = "public-key={$pubkey}";
				}
				if ($shortid = data_get($protocol_settings, 'reality_settings.short_id')) {
					$config[] = "short-id={$shortid}";
				}
				break;
			default:
				$config[] = "over-tls=false";
				break;
		}

		// network
		switch (data_get($protocol_settings, 'network')) {
			case 'ws':
				$config[] = "transport=ws";
				if ($path = data_get($protocol_settings, 'network_settings.path')) {
					$config[] = "path={$path}";
				}
				if ($host = data_get($protocol_settings, 'network_settings.headers.Host')) {
					$config[] = "host={$host}";
				}
				break;
			case 'grpc':
				$config[] = "transport=grpc";
				if ($serviceName = data_get($protocol_settings, 'network_settings.serviceName')) {
					$config[] = "grpc-service-name={$serviceName}";
				}
				break;
			default:
				$config[] = "transport=tcp";
				break;
		}

		$config = array_filter($config);
		$uri = implode(',', $config) . "\r\n";
		return $uri;
	}

    public static function buildHysteria($password, $server, $user)
    {
        $protocol_settings = $server['protocol_settings'];
        if ($protocol_settings['version'] != 2) {
            return;
        }
        $config = [
            "{$server['name']}=Hysteria2",
            $server['host'],
            $server['port'],
            $password,
            $protocol_settings['tls']['server_name'] ? "sni={$protocol_settings['tls']['server_name']}" : "(null)"
        ];
        if (data_get($protocol_settings, 'tls.allow_insecure'))
            $config[] = "skip-cert-verify=true";
        if ($down = data_get($protocol_settings, 'bandwidth.down')) {
            $config[] = "download-bandwidth={$down}";
        }
        $config[] = "udp=true";
        $config = array_filter($config);
        $uri = implode(',', $config);
        $uri .= "\r\n";
        return $uri;
    }
    
    public static function buildAnyTLS($password, $server)
    {
        $protocol_settings = data_get($server, 'protocol_settings', []);
    
        $config = [
            "{$server['name']}=anytls",
            "{$server['host']}",
            "{$server['port']}",
            "{$password}",
            "udp=true"
        ];
    
        if ($serverName = data_get($protocol_settings, 'tls.server_name')) {
            $config[] = "sni={$serverName}";
        }
         // ✅ 跳过证书校验
         if (data_get($protocol_settings, 'tls.allow_insecure')) {
            $config[] = 'skip-cert-verify=true';
        }
 
        $config = array_filter($config);
    
        return implode(',', $config) . "\r\n";
    }
}