<?php

namespace App\Service\common\oss;

use App\BaseApp\BaseService;
use App\Models\oss\OssConfigModel;
use App\Service\common\FieldEncryptService;
use App\Service\SystemConfigService;

/**
 * OSS 运行时配置：解析当前启用的存储配置并解密密钥，供上传工厂使用
 */
class OssRuntimeConfigService extends BaseService
{
    public const CFG_ACTIVE_ID = 'oss_active_config_id';

    public function __construct()
    {
        // 上传链路可能在无登录上下文触发，不强制鉴权
        $this->isAuth = false;
        parent::__construct();
    }

    /**
     * 获取当前启用的明文配置
     * 为什么要解密：上传客户端需要明文 access/secret；库内仅存 AES 密文
     *
     * @return array{
     *   id:int,driver:string,name:string,access_key:string,secret_key:string,
     *   endpoint:string,region:string,bucket:string,domain:string,
     *   path_prefix:string,extra_json:mixed
     * }
     */
    public function getActiveConfig(): array
    {
        $sys = SystemConfigService::getInstance();
        $activeId = (int) $sys->getValue(self::CFG_ACTIVE_ID, '0');
        $row = null;
        if ($activeId > 0) {
            $row = OssConfigModel::where('id', $activeId)
                ->where('deleted_at', 0)
                ->where('status', 1)
                ->first();
        }
        if (!$row) {
            // 回落 is_active 标记，避免仅写了表未写 system_config 时上传失败
            $row = OssConfigModel::where('is_active', 1)
                ->where('deleted_at', 0)
                ->where('status', 1)
                ->orderByDesc('id')
                ->first();
        }
        if (!$row) {
            // 最终回落本地默认行或内存默认
            $row = OssConfigModel::where('driver', 'local')
                ->where('deleted_at', 0)
                ->where('status', 1)
                ->orderByDesc('is_active')
                ->orderBy('id')
                ->first();
        }
        if (!$row) {
            return [
                'id' => 0,
                'driver' => 'local',
                'name' => '本地存储',
                'access_key' => '',
                'secret_key' => '',
                'endpoint' => '',
                'region' => '',
                'bucket' => '',
                'domain' => '',
                'path_prefix' => 'uploads',
                'extra_json' => null,
            ];
        }
        $enc = FieldEncryptService::getInstance();
        $extra = $row->extra_json;
        if (is_string($extra) && $extra !== '') {
            $decoded = json_decode($extra, true);
            $extra = is_array($decoded) ? $decoded : $extra;
        }
        return [
            'id' => (int) $row->id,
            'driver' => (string) $row->driver,
            'name' => (string) $row->name,
            'access_key' => $enc->decryptFromStorage((string) ($row->access_key ?? ''), true),
            'secret_key' => $enc->decryptFromStorage((string) ($row->secret_key ?? ''), true),
            'endpoint' => (string) ($row->endpoint ?? ''),
            'region' => (string) ($row->region ?? ''),
            'bucket' => (string) ($row->bucket ?? ''),
            'domain' => (string) ($row->domain ?? ''),
            'path_prefix' => (string) ($row->path_prefix ?? ''),
            'extra_json' => $extra,
        ];
    }
}