module Bundler::Patch
  class AdvisoryConsolidator
    def initialize(options={}, all_ads=nil)
      @options = options
      @all_ads = all_ads || [].tap do |a|
        a << Bundler::Advise::Advisories.new unless options[:skip_bundler_advise]
        a << Bundler::Advise::Advisories.new(dir: options[:advisory_db_path], repo: nil) if options[:advisory_db_path]
      end
    end

    def vulnerable_gems
      @all_ads.map do |ads|
        ads.update if ads.repo
        Bundler::Advise::GemAdviser.new(advisories: ads).scan_lockfile
      end.flatten.map do |advisory|
        patched = advisory.patched_versions.map do |pv|
          # this is a little stupid for compound requirements, but works itself out in consolidate_gemfiles
          pv.requirements.map { |_, v| v.to_s }
        end.flatten
        Gemfile.new(gem_name: advisory.gem, patched_versions: patched)
      end.group_by do |gemfile|
        gemfile.gem_name
      end.map do |_, gemfiles|
        consolidate_gemfiles(gemfiles)
      end.flatten
    end

    def patch_gemfile_and_get_gem_specs_to_patch
      gem_update_specs = vulnerable_gems
      locked = Bundler::LockfileParser.new(Bundler.read_file(Bundler.default_lockfile)).specs

      gem_update_specs.map(&:update) # modify requirements in Gemfile if necessary

      gem_update_specs.map do |up_spec|
        old_version = locked.detect { |s| s.name == up_spec.gem_name }.version.to_s
        new_version = up_spec.calc_new_version(old_version)
        if new_version
          GemPatch.new(gem_name: up_spec.gem_name, old_version: old_version,
                       new_version: new_version, patched_versions: up_spec.patched_versions)
        else
          GemPatch.new(gem_name: up_spec.gem_name, old_version: old_version, patched_versions: up_spec.patched_versions)
        end
      end.partition { |gp| !gp.new_version.nil? }
    end

    private

    def consolidate_gemfiles(gemfiles)
      gemfiles if gemfiles.length == 1
      all_gem_names = gemfiles.map(&:gem_name).uniq
      raise 'Must be all same gem name' unless all_gem_names.length == 1
      highest_minor_patched = gemfiles.map do |g|
        g.patched_versions
      end.flatten.group_by do |v|
        Gem::Version.new(v).segments[0..1].join('.')
      end.map do |_, all|
        all.sort.last
      end
      Gemfile.new(gem_name: all_gem_names.first, patched_versions: highest_minor_patched)
    end
  end

  class GemPatch
    attr_reader :gem_name, :old_version, :new_version, :patched_versions

    def initialize(gem_name:, old_version: nil, new_version: nil, patched_versions: nil)
      @gem_name = gem_name
      @old_version = old_version
      @new_version = new_version
      @patched_versions = patched_versions
    end
  end
end