<?php

namespace Modules\Platform\User\Helpers;

use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Log;

class ExtensionHelper
{
    const ENDPOINT_CUSTOM = '/etc/asterisk/pjsip.endpoint_custom_post.conf';
    const AUTH_CUSTOM     = '/etc/asterisk/pjsip.auth_custom_post.conf';
    const AOR_CUSTOM      = '/etc/asterisk/pjsip.aor_custom_post.conf';

    /**
     * Create a 99XXXX WebRTC/WSS extension by:
     *   1. Writing PJSIP blocks to the _custom_post.conf files (survive FreePBX reloads)
     *   2. Inserting the matching rows into asterisk.sip (same pattern as 991087)
     *   3. Reloading PJSIP
     *
     * Password = md5($sipSecret) — stored in both the pjsip auth conf and sip table.
     *
     * @param string|int $baseExt    Base extension / user_id (e.g. 1087)
     * @param string     $firstname
     * @param string     $lastname
     * @param string     $sipSecret  Plaintext secret from asterisk.sip WHERE id=$baseExt AND keyword='secret'
     */
    public static function createTlsExtension($baseExt, string $firstname, string $lastname, string $sipSecret): void
    {
        $ext      = '99' . $baseExt;
        $password = md5($sipSecret);
        $name     = trim($firstname . ' ' . $lastname);
        $callerid = 'WebRTC ' . $name . ' <' . $ext . '>';

        Log::info('ExtensionHelper: creating WSS extension', [
            'extension' => $ext,
            'callerid'  => $callerid,
        ]);

        self::appendEndpoint($ext, $callerid);
        self::appendAuth($ext, $password);
        self::appendAor($ext);
        self::writeSipTable($ext, $callerid, $password);
        self::reloadPjsip();

        Log::info('ExtensionHelper: WSS extension ready', ['extension' => $ext]);
    }

    // -------------------------------------------------------------------------
    // PJSIP conf file methods
    // -------------------------------------------------------------------------

    private static function appendEndpoint(string $ext, string $callerid): void
    {
        $content = file_exists(self::ENDPOINT_CUSTOM) ? file_get_contents(self::ENDPOINT_CUSTOM) : '';
        if (strpos($content, "[{$ext}]") !== false) {
            Log::info("ExtensionHelper: endpoint [{$ext}] already exists, skipping.");
            return;
        }

        $block = <<<INI

[{$ext}]
type=endpoint
aors={$ext}
auth={$ext}-auth
tos_audio=ef
tos_video=af41
cos_audio=5
cos_video=4
allow=ulaw,alaw,gsm,g726,g722
context=from-internal
callerid={$callerid}
dtmf_mode=rfc4733
direct_media=yes
mailboxes={$ext}@device
mwi_subscribe_replaces_unsolicited=yes
aggregate_mwi=no
use_avpf=yes
rtcp_mux=yes
max_audio_streams=1
max_video_streams=1
webrtc=yes
bundle=no
ice_support=yes
media_use_received_transport=yes
trust_id_inbound=yes
user_eq_phone=no
send_connected_line=yes
media_encryption=dtls
timers=no
timers_min_se=90
media_encryption_optimistic=no
refer_blind_progress=yes
rtp_timeout=30
rtp_timeout_hold=300
rtp_keepalive=0
send_pai=yes
rtp_symmetric=yes
rewrite_contact=yes
force_rport=yes

INI;

        file_put_contents(self::ENDPOINT_CUSTOM, $block, FILE_APPEND | LOCK_EX);
    }

    private static function appendAuth(string $ext, string $password): void
    {
        $content = file_exists(self::AUTH_CUSTOM) ? file_get_contents(self::AUTH_CUSTOM) : '';
        if (strpos($content, "[{$ext}-auth]") !== false) {
            return;
        }

        $block = <<<INI

[{$ext}-auth]
type=auth
auth_type=userpass
password={$password}
username={$ext}

INI;

        file_put_contents(self::AUTH_CUSTOM, $block, FILE_APPEND | LOCK_EX);
    }

    private static function appendAor(string $ext): void
    {
        $content = file_exists(self::AOR_CUSTOM) ? file_get_contents(self::AOR_CUSTOM) : '';
        if (strpos($content, "[{$ext}]") !== false) {
            return;
        }

        $block = <<<INI

[{$ext}]
type=aor
mailboxes={$ext}@device
max_contacts=1
remove_existing=yes
maximum_expiration=7200
minimum_expiration=60
qualify_frequency=60

INI;

        file_put_contents(self::AOR_CUSTOM, $block, FILE_APPEND | LOCK_EX);
    }

    // -------------------------------------------------------------------------
    // sip table method
    // -------------------------------------------------------------------------

    /**
     * Insert/update all rows in asterisk.sip for the 99XXXX extension,
     * mirroring the exact pattern of a FreePBX-generated 99XXXX entry.
     */
    private static function writeSipTable(string $ext, string $callerid, string $password): void
    {
        $rows = [
            'account'                      => $ext,
            'accountcode'                  => '',
            'aggregate_mwi'                => 'no',
            'allow'                        => '',
            'avpf'                         => 'yes',
            'bundle'                       => 'no',
            'callerid'                     => $callerid,
            'context'                      => 'from-internal',
            'defaultuser'                  => '',
            'device_state_busy_at'         => '0',
            'dial'                         => 'PJSIP/' . $ext,
            'direct_media'                 => 'yes',
            'disallow'                     => '',
            'dtmfmode'                     => 'rfc4733',
            'force_callerid'               => 'no',
            'force_rport'                  => 'yes',
            'icesupport'                   => 'yes',
            'mailbox'                      => $ext . '@device',
            'match'                        => '',
            'max_audio_streams'            => '1',
            'max_contacts'                 => '1',
            'max_video_streams'            => '1',
            'maximum_expiration'           => '7200',
            'md5_cred'                     => '',
            'media_address'                => '',
            'media_encryption'             => 'dtls',
            'media_encryption_optimistic'  => 'no',
            'media_use_received_transport' => 'yes',
            'message_context'              => '',
            'minimum_expiration'           => '60',
            'mwi_subscription'             => 'auto',
            'namedcallgroup'               => '',
            'namedpickupgroup'             => '',
            'outbound_auth'                => 'no',
            'outbound_proxy'               => '',
            'qualifyfreq'                  => '60',
            'refer_blind_progress'         => 'yes',
            'remove_existing'              => 'yes',
            'rewrite_contact'              => 'yes',
            'rtcp_mux'                     => 'yes',
            'rtp_symmetric'                => 'yes',
            'rtp_timeout'                  => '0',
            'rtp_timeout_hold'             => '0',
            'secret'                       => $password,
            'send_connected_line'          => 'yes',
            'sendrpid'                     => 'pai',
            'sipdriver'                    => 'chan_pjsip',
            'timers'                       => 'no',
            'timers_min_se'                => '90',
            'transport'                    => '',
            'trustrpid'                    => 'yes',
            'user_eq_phone'                => 'no',
            'vmexten'                      => '',
            'webrtc'                       => 'yes',
        ];

        foreach ($rows as $keyword => $data) {
            DB::table('asterisk.sip')->updateOrInsert(
                ['id' => $ext, 'keyword' => $keyword],
                ['data' => $data]
            );
        }

        Log::info('ExtensionHelper: sip table rows written', ['extension' => $ext, 'rows' => count($rows)]);
    }

    // -------------------------------------------------------------------------

    private static function reloadPjsip(): void
    {
        exec('asterisk -rx "pjsip reload" 2>&1', $output, $code);
        Log::info('ExtensionHelper: pjsip reload', ['exit_code' => $code, 'output' => implode(' ', $output)]);
    }
}