"""Markdown rendering for News.body.

Club staff author `body` as Markdown (see NewsForm's help text) -- the public
API (news/api.py) renders it to HTML on the way out; the control panel's own
preview shows the raw source as-authored, unrendered.

`nh3` (Rust/ammonia bindings) sanitizes the result: markdown.markdown() will
happily pass through raw HTML embedded in the source, and body is authored by
club staff, who aren't a fully trusted boundary for content served straight
into someone else's public website.
"""

import markdown as _markdown
import nh3
from django.utils.html import strip_tags
from django.utils.text import Truncator
from django.utils.translation import gettext_lazy as _

_EXTENSIONS = [
    "nl2br",  # staff type in a plain textarea -- a single Enter should break the line,
    # not require a blank line like standard Markdown paragraphs do.
    "sane_lists",
    "fenced_code",
]

_ALLOWED_TAGS = {"p", "br", "strong", "em", "b", "i", "u", "a", "ul", "ol", "li", "blockquote", "code", "pre", "h2", "h3", "h4", "img", "hr"}
_ALLOWED_ATTRIBUTES = {"a": {"href", "title"}, "img": {"src", "alt", "title"}}
_ALLOWED_URL_SCHEMES = {"http", "https", "mailto"}


def render_body_html(body: str) -> str:
    """Markdown source -> sanitized HTML."""
    html = _markdown.markdown(body, extensions=_EXTENSIONS)
    return nh3.clean(html, tags=_ALLOWED_TAGS, attributes=_ALLOWED_ATTRIBUTES, url_schemes=_ALLOWED_URL_SCHEMES)


def render_body_excerpt(body: str, *, words: int) -> str:
    """Plain-text excerpt, derived from the rendered HTML rather than the raw
    Markdown source -- otherwise syntax like `**`/`#`/`[text](url)` shows up
    verbatim in what's meant to be a short teaser."""
    plain_text = strip_tags(render_body_html(body))
    return Truncator(plain_text).words(words, truncate=" …")


def notify_editors_of_pending_review(news_item):
    """In-app only (see notifications.services.notify_members's send_email
    param) -- a review queue that emailed every editor/admin on every
    submission would get noisy fast; the topbar bell and the dashboard card
    are enough for this. Called from management.views.NewsSubmitForReviewView,
    not from News.submit_for_review() itself, same as publish()/unpublish()
    never send anything on their own either."""
    from club.models import ClubRole
    from members.models import Member
    from notifications.services import notify_members

    editors = Member.objects.filter(roles__club=news_item.club, roles__role__in=[ClubRole.Roles.ADMIN, ClubRole.Roles.EDITOR]).distinct()
    title = _("“%(news)s” is ready for review") % {"news": news_item.title}
    body = _("%(author)s submitted this news item for review before it can go live.") % {"author": news_item.created_by or _("Someone")}
    return notify_members(editors, club=news_item.club, title=title, body=body, source=news_item, send_email=False)