// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "@openzeppelin/contracts/access/AccessControl.sol";
import "@openzeppelin/contracts/token/ERC20/IERC20.sol";
import "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
import "@openzeppelin/contracts/utils/ReentrancyGuard.sol";
import "../../interfaces/IChainAdapter.sol";

/**
 * @title TezosAdapter
 * @notice Bridge adapter for Tezos L1 (native Michelson)
 * @dev Lock tokens on this chain; off-chain relayer watches events and performs Tezos-side mint/transfer.
 *      Oracle calls confirmTransaction when Tezos tx is confirmed.
 */
contract TezosAdapter is IChainAdapter, AccessControl, ReentrancyGuard {
    using SafeERC20 for IERC20;

    bytes32 public constant BRIDGE_OPERATOR_ROLE = keccak256("BRIDGE_OPERATOR_ROLE");
    bytes32 public constant ORACLE_ROLE = keccak256("ORACLE_ROLE");

    bool public isActive;

    mapping(bytes32 => BridgeRequest) public bridgeRequests;
    mapping(bytes32 => string) public txHashes;
    mapping(address => uint256) public nonces;

    event TezosBridgeInitiated(
        bytes32 indexed requestId,
        address indexed sender,
        address indexed token,
        uint256 amount,
        string destination
    );

    event TezosBridgeConfirmed(
        bytes32 indexed requestId,
        string indexed txHash
    );

    constructor(address admin) {
        _grantRole(DEFAULT_ADMIN_ROLE, admin);
        _grantRole(BRIDGE_OPERATOR_ROLE, admin);
        _grantRole(ORACLE_ROLE, admin);
        isActive = true;
    }

    function getChainType() external pure override returns (string memory) {
        return "Tezos";
    }

    function getChainIdentifier() external pure override returns (uint256 chainId, string memory identifier) {
        return (0, "Tezos-Mainnet");
    }

    /**
     * @notice Validate Tezos destination (tz1/tz2/tz3/KT1 address format; length 35-64 bytes when UTF-8)
     */
    function validateDestination(bytes calldata destination) external pure override returns (bool) {
        if (destination.length == 0 || destination.length > 64) return false;
        // Tezos addresses: tz1, tz2, tz3 (implicit), KT1 (contract)
        return destination.length >= 35 && destination.length <= 64;
    }

    function bridge(
        address token,
        uint256 amount,
        bytes calldata destination,
        bytes calldata recipient
    ) external payable override nonReentrant returns (bytes32 requestId) {
        require(isActive, "Adapter inactive");
        require(amount > 0, "Zero amount");
        require(this.validateDestination(destination), "Invalid Tezos destination");

        string memory dest = string(destination);

        requestId = keccak256(abi.encodePacked(
            msg.sender,
            token,
            amount,
            dest,
            nonces[msg.sender]++,
            block.timestamp
        ));

        if (token == address(0)) {
            require(msg.value >= amount, "Insufficient ETH");
        } else {
            IERC20(token).safeTransferFrom(msg.sender, address(this), amount);
        }

        bridgeRequests[requestId] = BridgeRequest({
            sender: msg.sender,
            token: token,
            amount: amount,
            destinationData: destination,
            requestId: requestId,
            status: BridgeStatus.Locked,
            createdAt: block.timestamp,
            completedAt: 0
        });

        emit TezosBridgeInitiated(requestId, msg.sender, token, amount, dest);
        return requestId;
    }

    /**
     * @notice Called by oracle/relayer when Tezos tx is confirmed
     */
    function confirmTransaction(
        bytes32 requestId,
        string calldata txHash
    ) external onlyRole(ORACLE_ROLE) {
        BridgeRequest storage request = bridgeRequests[requestId];
        require(request.status == BridgeStatus.Locked, "Invalid status");

        request.status = BridgeStatus.Confirmed;
        request.completedAt = block.timestamp;
        txHashes[requestId] = txHash;

        emit TezosBridgeConfirmed(requestId, txHash);
    }

    function getBridgeStatus(bytes32 requestId)
        external view override returns (BridgeRequest memory) {
        return bridgeRequests[requestId];
    }

    function cancelBridge(bytes32 requestId) external override returns (bool) {
        BridgeRequest storage request = bridgeRequests[requestId];
        require(
            request.status == BridgeStatus.Pending || request.status == BridgeStatus.Locked,
            "Cannot cancel"
        );
        require(msg.sender == request.sender, "Not request sender");

        if (request.token == address(0)) {
            payable(request.sender).transfer(request.amount);
        } else {
            IERC20(request.token).safeTransfer(request.sender, request.amount);
        }

        request.status = BridgeStatus.Cancelled;
        return true;
    }

    function estimateFee(
        address token,
        uint256 amount,
        bytes calldata destination
    ) external view override returns (uint256 fee) {
        return 1000000000000000;
    }

    function setIsActive(bool _isActive) external onlyRole(DEFAULT_ADMIN_ROLE) {
        isActive = _isActive;
    }
}