msgexchange-v2/src/main/kotlin/com/gzzn/omms/msgexchange/processing/Pump.kt

package com.gzzn.omms.msgexchange.processing

import com.gzzn.omms.msgexchange.codec.FlopPayload
import com.gzzn.omms.msgexchange.codec.ScheduleBody
import com.gzzn.omms.msgexchange.codec.XmlCodec
import com.gzzn.omms.msgexchange.config.PipelineProps
import com.gzzn.omms.msgexchange.domain.DecodedMessage
import com.gzzn.omms.msgexchange.domain.ErrorClass
import com.gzzn.omms.msgexchange.domain.MsgKind
import com.gzzn.omms.msgexchange.domain.ProcState
import com.gzzn.omms.msgexchange.domain.ProcStatus
import com.gzzn.omms.msgexchange.infra.log.TraceLog
import com.gzzn.omms.msgexchange.infra.persistence.CminmsgInboxRepository
import com.gzzn.omms.msgexchange.infra.persistence.ProcStateRepository
import com.gzzn.omms.msgexchange.infra.retry.ProcFailure
import jakarta.inject.Singleton
import java.time.Clock
import java.time.Duration
import java.time.Instant

/**
 * 处理主泵（docs/flight-state.md §1 严格有序 + §4 处理事务与失败规则）：
 * 单活动主泵严格 FIFO + HOL 阻塞 + 队头滞留转 DEAD。
 *
 * 终态与业务写入在处理器事务内原子提交；本泵只负责调度、边界化失败迁移与
 * 提交后的最佳努力回填（message-lifecycle §3/§4）。
 */
@Singleton
class Pump(
    private val procState: ProcStateRepository,
    private val processor: MessageProcessor,
    private val backfill: BackfillService,
    private val props: PipelineProps,
    private val clock: Clock,
) {
    private val log = org.slf4j.LoggerFactory.getLogger(Pump::class.java)

    @Volatile
    private var running = true

    /** 优雅停机：loop 在当前 tick 收尾后退出；线程中断由 PipelineLifecycle 负责。 */
    fun stop() {
        running = false
    }

    fun loop() {
        while (running) {
            try {
                tick()
            } catch (e: InterruptedException) {
                Thread.currentThread().interrupt()
                return
            } catch (e: Exception) {
                // 最后防线：失败状态迁移已在 processOne 边界内完成；致命 Error 不捕获
                sleepQuietly(props.pipeline.pollInterval)
            }
        }
    }

    internal fun tick() {
        val head = procState.headUnfinished()
        when {
            head == null -> sleepQuietly(props.pipeline.pollInterval)
            head.state == ProcStatus.FAILED && (head.nextAttemptAt ?: Instant.EPOCH) > clock.instant() ->
                if (poisoned(head)) {
                    log.error("poison -> DEAD msgId={} attempts={} lastError={}", head.msgId, head.attempts, head.lastError)
                    procState.markTerminal(
                        head.msgId, ProcStatus.DEAD,
                        errorClass = ErrorClass.EXHAUSTED,
                        lastError = head.lastError ?: "head-deadline-exceeded",
                        attempts = head.attempts,
                    )
                    backfill.attempt(head.msgId)
                } else {
                    sleepQuietly(Duration.between(clock.instant(), head.nextAttemptAt))
                }
            // PENDING、或 FAILED 退避已到期：交处理入口（内部有边界化失败迁移与 attempts 守卫）
            else -> processor.processOne(head)
        }
    }

    private fun poisoned(head: ProcState): Boolean =
        head.attempts >= props.pipeline.maxAttempts ||
            Duration.between(head.updatedAt, clock.instant()) > props.pipeline.headDeadline

    private fun sleepQuietly(d: Duration) {
        if (!d.isNegative && !d.isZero) Thread.sleep(d.toMillis().coerceAtLeast(1))
    }
}

/**
 * processOne：解码 → 绑定 → 处理器（事务内决策 + 落库 + 终态 + 回填意图）→ 提交后最佳努力回填。
 * 边界化失败迁移（ProcFailure）：任何意外异常归于本条 head，FAILED(INFRA)+退避，不穿出杀泵；
 * MALFORMED / PROTOCOL 直接 DEAD 不重试（docs/design.md §2.3 错误分类）。
 */
@Singleton
class MessageProcessor(
    private val inbox: CminmsgInboxRepository,
    private val procState: ProcStateRepository,
    private val codec: XmlCodec,
    private val scheduleProcessor: ScheduleProcessor,
    private val flopProcessor: FlopProcessor,
    private val fdelProcessor: FdelProcessor,
    private val adftProcessor: AdftProcessor,
    private val procFailure: ProcFailure,
    private val backfill: BackfillService,
    private val props: PipelineProps,
) {
    private val log = org.slf4j.LoggerFactory.getLogger(MessageProcessor::class.java)

    fun processOne(head: ProcState) {
        TraceLog.withTrace(head.msgId) {
            val terminal = try {
                processInternal(head)
            } catch (e: InterruptedException) {
                Thread.currentThread().interrupt()
                throw e
            } catch (e: Exception) {
                // 边界化：异常归于本条 head，写 FAILED(INFRA)/DEAD，而不是穿出杀 pump
                log.warn("processOne unexpected failure msgId={} ec=INFRA msg={}", head.msgId, e.message ?: e.javaClass.simpleName)
                procFailure.fail(head, ErrorClass.INFRA, e.message ?: e.javaClass.simpleName)
            }
            // 终态已提交：立即尝试一次回填；失败留待回填扫描按退避重试（意图已在终态事务内登记）。
            // 中间态（PENDING/FAILED）不适用（message-lifecycle §5.2）。
            if (terminal) backfill.attempt(head.msgId)
        }
    }

    /** @return 是否已达终态（终态才允许回填信箱标记） */
    private fun processInternal(head: ProcState): Boolean {
        // 守卫：手工/遗留 FAILED 行若 attempts 已达上限，直接终态（防止退避到期后无限重试）
        if (head.state == ProcStatus.FAILED && procFailure.scheduler.exhausted(head.attempts)) {
            log.error("head exhausted at entry -> DEAD msgId={} attempts={}", head.msgId, head.attempts)
            procState.markTerminal(
                head.msgId, ProcStatus.DEAD,
                errorClass = ErrorClass.EXHAUSTED,
                lastError = head.lastError ?: "max-attempts",
                attempts = head.attempts,
            )
            return true
        }

        val raw = inbox.rawOf(head.msgId)
        if (raw == null) {
            log.error("raw missing -> DEAD(MALFORMED) msgId={}", head.msgId)
            return deadMalformed(head, "raw-missing")
        }
        val decoded = when (val r = codec.decode(raw)) {
            is com.gzzn.omms.msgexchange.codec.DecodeResult.Ok -> r.message
            is com.gzzn.omms.msgexchange.codec.DecodeResult.Err -> {
                // MALFORMED（报文非法）→ DEAD 不重试；CODEC_ERROR（可随 codec 修复重放）→ FAILED 退避
                if (r.failure.errorClass == ErrorClass.MALFORMED) {
                    log.error("decode MALFORMED -> DEAD msgId={} detail={}", head.msgId, r.failure.detail)
                    return deadMalformed(head, r.failure.detail)
                }
                log.warn("decode {} -> FAILED msgId={} detail={}", r.failure.errorClass, head.msgId, r.failure.detail)
                return procFailure.fail(head, r.failure.errorClass, r.failure.detail)
            }
        }

        // I3：identity 仅首次绑定（head.identityKey == null）；FAILED 重试不重绑
        if (head.identityKey == null) {
            val identity = Identity.of(decoded, props.identity)
            if (!procState.tryBindIdentity(head.msgId, identity)) {
                val owner = procState.ownerOfIdentity(identity) ?: -1L
                log.info("duplicate-of:{} -> SKIPPED msgId={}", owner, head.msgId)
                procState.markTerminal(head.msgId, ProcStatus.SKIPPED, lastError = "duplicate-of:$owner")
                return true
            }
        }

        // 处理器分派：SCHD 日计划主链路（§3.1）/ FLOP / FDEL / ADFT；缺载荷按 MALFORMED 终态
        val result: ApplyResult = when (val kind = decoded.kind) {
            is MsgKind.Schd -> {
                val body = decoded.body as? ScheduleBody
                if (body == null) return deadMalformed(head, "missing-schd-body")
                when (kind.subtype) {
                    MsgKind.SchdSubtype.DNLD, MsgKind.SchdSubtype.RESP ->
                        scheduleProcessor.applyScheduleRecords(head, decoded)
                    MsgKind.SchdSubtype.ADFT -> {
                        val record = body.records.singleOrNull()
                        if (record == null) return deadMalformed(head, "adft-needs-single-fltr")
                        adftProcessor.apply(head, decoded, record)
                    }
                }
            }
            MsgKind.Fdel -> {
                val payload = decoded.body as? FlopPayload
                if (payload == null) return deadMalformed(head, "missing-fdel-flid")
                fdelProcessor.apply(head, decoded, payload)
            }
            is MsgKind.Flop -> {
                val payload = decoded.body as? FlopPayload
                if (payload == null) return deadMalformed(head, "missing-flop-body")
                flopProcessor.apply(head, decoded, payload)
            }
            is MsgKind.Unsupported -> {
                // design.md §2.3：未支持类型 → FAILED(UNSUPPORTED) 退避重试，达阈值转 DEAD；绝不写终态
                log.warn("unsupported type -> FAILED(UNSUPPORTED) msgId={} tag={}", head.msgId, kind.tag)
                return procFailure.fail(head, ErrorClass.UNSUPPORTED, "no-handler:${kind.tag}")
            }
        }

        if (result is ApplyResult.DeadProtocol) {
            // design.md §2.3：整包拒绝 DEAD(PROTOCOL)，立即释放队头，交人工确认
            log.error("DEAD(PROTOCOL) msgId={} reason={} flags={}", head.msgId, result.reason, result.flags)
            procState.markTerminal(
                head.msgId, ProcStatus.DEAD,
                errorClass = ErrorClass.PROTOCOL,
                lastError = result.reason.take(1000),
            )
            return true
        }

        // Succeeded / ReplaySkipped：SUCCEEDED 终态与回填意图已由处理器在自己的事务内落库
        log.info("SUCCEEDED msgId={} kind={}", head.msgId, decoded.typeTag)
        return true
    }

    private fun deadMalformed(head: ProcState, detail: String): Boolean {
        procState.markTerminal(head.msgId, ProcStatus.DEAD, errorClass = ErrorClass.MALFORMED, lastError = detail)
        return true
    }
}