// Package canonical implements the stable JSON serialisation ProofedMesh uses
// for hashing attestation envelopes and statements. It MUST stay byte-for-byte
// compatible with services/admin-api/internal/attest/hash.go — the admin-api
// hashes envelopes locally to verify the signing-service's response, and if
// the two canonicalisations diverge every signing call rejects itself.
//
// This is not a full RFC 8785 implementation: all our hashed inputs are
// strings, nulls, maps, and arrays of those, so Go's encoding/json gives
// stable output for the leaves. We only need to force deterministic object
// key ordering, which is what writeSorted does.
package canonical

import (
	"bytes"
	"crypto/sha256"
	"encoding/hex"
	"encoding/json"
	"fmt"
	"sort"
)

// SHA256Hex returns the hex-encoded SHA-256 of b.
func SHA256Hex(b []byte) string {
	sum := sha256.Sum256(b)
	return hex.EncodeToString(sum[:])
}

// Marshal returns the canonical JSON encoding of v (sorted object keys).
func Marshal(v any) ([]byte, error) {
	first, err := json.Marshal(v)
	if err != nil {
		return nil, err
	}
	var any_ any
	if err := json.Unmarshal(first, &any_); err != nil {
		return nil, err
	}
	var buf bytes.Buffer
	if err := writeSorted(&buf, any_); err != nil {
		return nil, err
	}
	return buf.Bytes(), nil
}

func writeSorted(buf *bytes.Buffer, v any) error {
	switch x := v.(type) {
	case nil:
		buf.WriteString("null")
	case bool:
		if x {
			buf.WriteString("true")
		} else {
			buf.WriteString("false")
		}
	case float64:
		b, _ := json.Marshal(x)
		buf.Write(b)
	case string:
		b, _ := json.Marshal(x)
		buf.Write(b)
	case []any:
		buf.WriteByte('[')
		for i, el := range x {
			if i > 0 {
				buf.WriteByte(',')
			}
			if err := writeSorted(buf, el); err != nil {
				return err
			}
		}
		buf.WriteByte(']')
	case map[string]any:
		keys := make([]string, 0, len(x))
		for k := range x {
			keys = append(keys, k)
		}
		sort.Strings(keys)
		buf.WriteByte('{')
		for i, k := range keys {
			if i > 0 {
				buf.WriteByte(',')
			}
			kb, _ := json.Marshal(k)
			buf.Write(kb)
			buf.WriteByte(':')
			if err := writeSorted(buf, x[k]); err != nil {
				return err
			}
		}
		buf.WriteByte('}')
	default:
		return fmt.Errorf("canonical.writeSorted: unsupported type %T", v)
	}
	return nil
}