const db = require('../db/models');
const ValidationError = require('./notifications/errors/validation');

const Sequelize = db.Sequelize;
const Op = Sequelize.Op;

/**
 * @param {string} permission
 * @param {object} currentUser
 */
async function checkPermissions(permission, currentUser) {
  if (!currentUser) {
    throw new ValidationError('auth.unauthorized');
  }

  const userPermission = currentUser.custom_permissions.find(
    (cp) => cp.name === permission,
  );

  if (userPermission) {
    return true;
  }

  try {
    if (!currentUser.app_role) {
      throw new ValidationError('auth.forbidden');
    }

    const permissions = await currentUser.app_role.getPermissions();

    return !!permissions.find((p) => p.name === permission);
  } catch (e) {
    throw e;
  }
}

module.exports = class SearchService {
  static async search(searchQuery, currentUser, organizationId, globalAccess) {
    try {
      if (!searchQuery) {
        throw new ValidationError('iam.errors.searchQueryRequired');
      }
      const tableColumns = {
        users: ['firstName', 'lastName', 'phoneNumber', 'email'],

        approvals: ['object_type'],

        audit_logs: ['actor', 'action', 'object_type', 'diff'],

        benefit_plans: ['carrier', 'country', 'currency'],

        bills: ['invoice_no', 'currency', 'category'],

        candidates: ['name', 'email', 'phone', 'source'],

        cards: ['last4'],

        compensations: ['currency'],

        devices: ['serial', 'asset_tag', 'os_version'],

        documents: ['country'],

        earnings: ['component', 'currency'],

        expense_lines: ['merchant', 'currency', 'category'],

        expense_reports: ['policy_result'],

        goals: ['title', 'metric'],

        identity_accounts: ['idp', 'username'],

        interviews: ['notes'],

        inventory_events: ['metadata'],

        job_requisitions: ['title'],

        learning_courses: ['title', 'provider', 'compliance_tag'],

        offers: ['comp_package'],

        payroll_runs: ['country'],

        policies: ['scope', 'rule_logic'],

        positions: ['title', 'job_family', 'level'],

        review_cycles: ['name'],

        reviews: ['comments'],

        schedule_shifts: ['role'],

        taxes: ['jurisdiction'],

        time_entries: ['job_code'],

        timecards: ['period'],

        travel_bookings: ['provider', 'policy_result'],

        vendors: ['name', 'tax_id', 'country', 'currency'],

        organizations: ['name'],
      };
      const columnsInt = {
        approvals: ['object_id', 'step'],

        audit_logs: ['object_id'],

        bills: ['amount'],

        cards: ['limit'],

        compensations: ['base_pay'],

        deductions: ['amount'],

        earnings: ['units', 'rate', 'amount'],

        employments: ['fte'],

        enrollments: ['premium_employee', 'premium_employer'],

        expense_lines: ['amount'],

        goals: ['target', 'progress'],

        interviews: ['rating'],

        job_requisitions: ['openings'],

        learning_courses: ['hours'],

        leave_requests: ['hours'],

        payments: ['amount'],

        taxes: ['amount'],

        time_entries: ['break_minutes'],

        travel_bookings: ['cost'],
      };

      let allFoundRecords = [];

      for (const tableName in tableColumns) {
        if (tableColumns.hasOwnProperty(tableName)) {
          const attributesToSearch = tableColumns[tableName];
          const attributesIntToSearch = columnsInt[tableName] || [];
          const whereCondition = {
            [Op.or]: [
              ...attributesToSearch.map((attribute) => ({
                [attribute]: {
                  [Op.iLike]: `%${searchQuery}%`,
                },
              })),
              ...attributesIntToSearch.map((attribute) =>
                Sequelize.where(
                  Sequelize.cast(
                    Sequelize.col(`${tableName}.${attribute}`),
                    'varchar',
                  ),
                  { [Op.iLike]: `%${searchQuery}%` },
                ),
              ),
            ],
          };

          if (
            !globalAccess &&
            tableName !== 'organizations' &&
            organizationId
          ) {
            whereCondition.organizationId = organizationId;
          }

          const hasPermission = await checkPermissions(
            `READ_${tableName.toUpperCase()}`,
            currentUser,
          );
          if (!hasPermission) {
            continue;
          }

          const foundRecords = await db[tableName].findAll({
            where: whereCondition,
            attributes: [
              ...tableColumns[tableName],
              'id',
              ...attributesIntToSearch,
            ],
          });

          const modifiedRecords = foundRecords.map((record) => {
            const matchAttribute = [];

            for (const attribute of attributesToSearch) {
              if (
                record[attribute]
                  ?.toLowerCase()
                  ?.includes(searchQuery.toLowerCase())
              ) {
                matchAttribute.push(attribute);
              }
            }

            for (const attribute of attributesIntToSearch) {
              const castedValue = String(record[attribute]);
              if (
                castedValue &&
                castedValue.toLowerCase().includes(searchQuery.toLowerCase())
              ) {
                matchAttribute.push(attribute);
              }
            }

            return {
              ...record.get(),
              matchAttribute,
              tableName,
            };
          });

          allFoundRecords = allFoundRecords.concat(modifiedRecords);
        }
      }

      return allFoundRecords;
    } catch (error) {
      throw error;
    }
  }
};
