clash-verge-rev/src-tauri/src/config/profiles.rs

use super::{
    PrfOption,
    prfitem::{PrfItem, PrfSelected, normalize_profile_home_url},
};
use crate::core::notify::{Refresh, announce};
use crate::utils::retry::{RetryError, RetryPolicy, retry, retry_with_state};
use crate::{
    core::{handle, tray::Tray},
    utils::{
        dirs::{self, PathBufExec as _},
        help,
    },
};
use anyhow::{Context as _, Result, bail};
use clash_verge_draft::Draft;
use clash_verge_logging::{Type, logging};
use parking_lot::Mutex;
use serde::{Deserialize, Serialize};
use serde_yaml_ng::Mapping;
use smartstring::alias::String;
use std::num::NonZeroUsize;
use std::{
    collections::{HashMap, HashSet},
    path::{Component, Path},
    sync::{
        LazyLock,
        atomic::{AtomicU64, Ordering},
    },
    time::{Duration, Instant},
};
use tauri_plugin_mihomo::models::{Proxies, ProxyType};
use tokio::{fs, task::JoinHandle};

pub(crate) static PROFILE_WRITE_LOCK: tokio::sync::Mutex<()> = tokio::sync::Mutex::const_new(());

static ACTIVATE_SELECTED_TASK: LazyLock<Mutex<Option<JoinHandle<()>>>> = LazyLock::new(|| Mutex::new(None));
static ACTIVATE_SELECTED_GENERATION: AtomicU64 = AtomicU64::new(0);

// The plugin already limits the request/response phase to 5 seconds. This outer timeout also covers
// lock acquisition, connection-pool waiting, and local-socket connection establishment.
const MIHOMO_OPERATION_TIMEOUT: Duration = Duration::from_secs(10);
const SELECTED_NODES_RECHECK_DELAY: Duration = Duration::from_secs(1);
/// Bounds retries while provider-backed groups finish loading.
const SELECTED_NODES_SETTLE_DEADLINE: Duration = Duration::from_secs(30);
/// How often a restore looks again while waiting for those groups.
const SELECTED_NODES_SETTLE_INTERVAL: Duration = Duration::from_secs(1);
/// Bounds startup waiting; remaining selections continue restoring in the background.
const SELECTED_NODES_FIRST_PASS_BUDGET: Duration = Duration::from_secs(3);

/// Define the `profiles.yaml` schema
#[derive(Default, Debug, Clone, Deserialize, Serialize)]
pub struct IProfiles {
    pub current: Option<String>,

    pub items: Option<Vec<PrfItem>>,
}

pub struct IProfilePreview<'a> {
    pub uid: &'a String,
    pub name: &'a String,
    pub is_current: bool,
}

pub(crate) struct ProfileDeletePlan {
    files: Vec<String>,
}

impl ProfileDeletePlan {
    pub(crate) async fn cleanup(self) {
        let Ok(dir) = dirs::app_profiles_dir() else {
            return;
        };
        for file in self.files {
            let path = dir.join(file.as_str());
            if let Err(error) = path.remove_if_exists().await {
                logging!(
                    warn,
                    Type::Config,
                    "Failed to remove deleted profile file {}: {error:#}",
                    path.display()
                );
            }
        }
    }
}

macro_rules! patch {
    ($lv: expr, $rv: expr, $key: tt) => {
        if ($rv.$key).is_some() {
            $lv.$key = $rv.$key.to_owned();
        }
    };
}

impl IProfiles {
    fn take_item_file_by_uid(items: &mut Vec<PrfItem>, target_uid: Option<&str>) -> Option<String> {
        let index = items.iter().position(|item| item.uid.as_deref() == target_uid)?;
        items.remove(index).file
    }

    pub async fn new() -> Self {
        let path = match dirs::profiles_path() {
            Ok(p) => p,
            Err(err) => {
                logging!(error, Type::Config, "failed to get profiles path: {err:#}");
                return Self::default();
            }
        };

        match help::read_yaml::<Self>(&path).await {
            Ok(mut profiles) => {
                let items = profiles.items.get_or_insert_with(Vec::new);
                let mut home_changed = false;
                for item in items.iter_mut() {
                    if item.uid.is_none() {
                        item.uid = Some(help::get_uid("d").into());
                    }
                    if item.itype.as_deref() == Some("remote") {
                        item.option
                            .get_or_insert_with(PrfOption::default)
                            .allow_auto_update
                            .get_or_insert(true);
                    }

                    if item
                        .home
                        .as_deref()
                        .is_some_and(|home| normalize_profile_home_url(home).is_none())
                    {
                        item.home = None;
                        home_changed = true;
                    }
                }

                if home_changed && let Err(err) = profiles.save_file().await {
                    logging!(error, Type::Config, "无法保存已清理的 profiles.yaml: {err:#}");
                }
                profiles
            }
            Err(err) => {
                logging!(error, Type::Config, "failed to read profiles.yaml: {err:#}");
                Self::default()
            }
        }
    }

    pub async fn save_file(&self) -> Result<()> {
        help::save_yaml(&dirs::profiles_path()?, self, Some("# Profiles Config for Clash Verge")).await
    }

    /// 只修改current，valid和chain
    pub fn patch_config(&mut self, patch: &Self) {
        if self.items.is_none() {
            self.items = Some(vec![]);
        }

        if let Some(current) = &patch.current
            && let Some(items) = self.items.as_ref()
        {
            let some_uid = Some(current);
            if items.iter().any(|e| e.uid.as_ref() == some_uid) {
                self.current = some_uid.cloned();
            }
        }
    }

    pub fn get_item(&self, uid: impl AsRef<str>) -> Result<&PrfItem> {
        let uid_str = uid.as_ref();

        if let Some(items) = self.items.as_ref() {
            for each in items.iter() {
                if let Some(uid_val) = &each.uid
                    && uid_val.as_str() == uid_str
                {
                    return Ok(each);
                }
            }
        }

        bail!("failed to get the profile item \"uid:{}\"", uid_str);
    }

    async fn append_item(&mut self, item: &mut PrfItem) -> Result<()> {
        let uid = &item.uid;
        if uid.is_none() {
            bail!("the uid should not be null");
        }

        if let Some(file_data) = item.file_data.take() {
            if item.file.is_none() {
                bail!("the file should not be null");
            }

            let file = item
                .file
                .clone()
                .ok_or_else(|| anyhow::anyhow!("file field is required when file_data is provided"))?;
            let path = dirs::app_profiles_dir()?.join(file.as_str());

            fs::write(&path, file_data.as_bytes())
                .await
                .with_context(|| format!("failed to write to file \"{file}\""))?;
        }

        if self.current.is_none() && (item.itype == Some("remote".into()) || item.itype == Some("local".into())) {
            self.current = uid.to_owned();
        }

        if self.items.is_none() {
            self.items = Some(vec![]);
        }

        if let Some(items) = self.items.as_mut() {
            items.push(item.to_owned());
        }

        Ok(())
    }

    async fn reorder(&mut self, active_id: &str, over_id: &str) -> Result<()> {
        {
            let Some(items) = self.items.as_mut() else {
                return Ok(());
            };
            let old_index = items.iter().rposition(|item| item.uid.as_deref() == Some(active_id));
            let new_index = items.iter().rposition(|item| item.uid.as_deref() == Some(over_id));
            let (Some(old_idx), Some(new_idx)) = (old_index, new_index) else {
                return Ok(());
            };
            let item = items.remove(old_idx);
            items.insert(new_idx, item);
        }
        self.save_file().await
    }

    async fn patch_item(&mut self, uid: &str, item: &PrfItem) -> Result<()> {
        if let Some(file) = &item.file {
            Self::validate_profile_file(file)?;
        }

        let mut items = self.items.take().unwrap_or_default();

        for each in items.iter_mut() {
            if each.uid.as_deref() == Some(uid) {
                patch!(each, item, itype);
                patch!(each, item, name);
                patch!(each, item, desc);
                patch!(each, item, file);
                patch!(each, item, url);
                patch!(each, item, selected);
                patch!(each, item, latency_test_urls);
                patch!(each, item, extra);
                patch!(each, item, updated);
                patch!(each, item, option);

                self.items = Some(items);
                return self.save_file().await;
            }
        }

        self.items = Some(items);
        bail!("failed to find the profile item \"uid:{uid}\"")
    }

    fn validate_profile_file(file: &str) -> Result<()> {
        let mut components = Path::new(file).components();
        if file.is_empty()
            || file.contains('/')
            || file.contains('\\')
            || !matches!(
                (components.next(), components.next()),
                (Some(Component::Normal(_)), None)
            )
        {
            bail!("profile file must be a single filename");
        }

        Ok(())
    }

    /// Updates fields returned by a remote profile refresh.
    async fn update_item(&mut self, uid: &str, item: &mut PrfItem) -> Result<()> {
        if self.items.is_none() {
            self.items = Some(vec![]);
        }

        let _ = self.get_item(uid)?;

        if let Some(items) = self.items.as_mut() {
            for each in items.iter_mut() {
                if each.uid.as_deref() == Some(uid) {
                    each.extra = item.extra;
                    each.updated = item.updated;
                    each.home = item.home.to_owned();
                    each.option = PrfOption::merge(each.option.as_ref(), item.option.as_ref());
                    if let Some(file_data) = item.file_data.take() {
                        let file = each.file.take();
                        let file =
                            file.unwrap_or_else(|| item.file.take().unwrap_or_else(|| format!("{}.yaml", uid).into()));

                        each.file = Some(file.clone());

                        let path = dirs::app_profiles_dir()?.join(file.as_str());

                        fs::write(&path, file_data.as_bytes())
                            .await
                            .with_context(|| format!("failed to write to file \"{file}\""))?;
                    }

                    break;
                }
            }
        }

        self.save_file().await
    }

    /// Raise intervals below `min_minutes`. `None`/`0` mean "never auto-update", left alone.
    /// Returns how many changed so the caller can skip a pointless write.
    pub fn raise_short_update_intervals(&mut self, min_minutes: u64) -> usize {
        let mut raised = 0;

        for item in self.items.iter_mut().flatten() {
            let Some(option) = item.option.as_mut() else {
                continue;
            };
            if option
                .update_interval
                .is_some_and(|interval| (1..min_minutes).contains(&interval))
            {
                option.update_interval = Some(min_minutes);
                raised += 1;
            }
        }

        raised
    }

    pub(crate) fn plan_delete_item(&mut self, uid: &str) -> Result<(bool, ProfileDeletePlan)> {
        let deleting_current = self.current.as_deref().is_none_or(|current| current == uid);
        let delete_uids = self.get_item(uid)?.option.as_ref().map_or_else(Vec::new, |op| {
            [
                op.merge.clone(),
                op.script.clone(),
                op.rules.clone(),
                op.proxies.clone(),
                op.groups.clone(),
            ]
            .into_iter()
            .collect::<Vec<_>>()
        });
        let mut items = self.items.take().unwrap_or_default();
        let mut files = Vec::new();

        if let Some(file) = Self::take_item_file_by_uid(&mut items, Some(uid)) {
            files.push(file);
        }

        for delete_uid in delete_uids {
            if let Some(file) = Self::take_item_file_by_uid(&mut items, delete_uid.as_deref()) {
                files.push(file);
            }
        }

        if deleting_current {
            self.current = None;
            for item in items.iter() {
                if item.itype == Some("remote".into()) || item.itype == Some("local".into()) {
                    self.current = item.uid.clone();
                    break;
                }
            }
        }

        self.items = Some(items);
        Ok((deleting_current, ProfileDeletePlan { files }))
    }

    /// 获取current指向的订阅内容
    pub async fn current_mapping(&self) -> Result<Mapping> {
        match (self.current.as_ref(), self.items.as_ref()) {
            (Some(current), Some(items)) => {
                if let Some(item) = items.iter().find(|e| e.uid.as_ref() == Some(current)) {
                    let file_path = match item.file.as_ref() {
                        Some(file) => dirs::app_profiles_dir()?.join(file.as_str()),
                        None => bail!("failed to get the file field"),
                    };
                    return help::read_mapping(&file_path).await;
                }
                bail!("failed to find the current profile \"uid:{current}\"");
            }
            _ => Ok(Mapping::new()),
        }
    }

    pub fn profiles_preview(&self) -> Option<Vec<IProfilePreview<'_>>> {
        self.items.as_ref().map(|items| {
            items
                .iter()
                .filter_map(|e| {
                    if let (Some(uid), Some(name)) = (e.uid.as_ref(), e.name.as_ref()) {
                        let is_current = self.current.as_ref() == Some(uid);
                        let preview = IProfilePreview { uid, name, is_current };
                        Some(preview)
                    } else {
                        None
                    }
                })
                .collect()
        })
    }
}

// These helpers serialize asynchronous operations against committed profile data.
use crate::config::Config;

pub(crate) async fn profiles_append_item_with_filedata_safe(item: &PrfItem, file_data: Option<String>) -> Result<()> {
    let item = &mut PrfItem::from(item, file_data).await?;
    profiles_append_item_safe(item).await
}

pub(crate) async fn profiles_append_item_safe(item: &mut PrfItem) -> Result<()> {
    let profiles = Config::profiles().await;
    profiles_append_item_to_safe(&profiles, item).await
}

pub(super) async fn profiles_append_item_to_safe(profiles: &Draft<IProfiles>, item: &mut PrfItem) -> Result<()> {
    profiles
        .with_data_modify(|mut profiles| async move {
            profiles.append_item(item).await?;
            Ok((profiles, ()))
        })
        .await
}

pub(crate) async fn profiles_patch_item_safe(index: &str, item: &PrfItem) -> Result<()> {
    Config::profiles()
        .await
        .with_data_modify(|mut profiles| async move {
            profiles.patch_item(index, item).await?;
            Ok((profiles, ()))
        })
        .await
}

pub(crate) async fn profiles_reorder_safe(active_id: &str, over_id: &str) -> Result<()> {
    Config::profiles()
        .await
        .with_data_modify(|mut profiles| async move {
            profiles.reorder(active_id, over_id).await?;
            Ok((profiles, ()))
        })
        .await
}

pub(crate) async fn profiles_save_file_safe() -> Result<()> {
    Config::profiles()
        .await
        .with_data_modify(|profiles| async move {
            profiles.save_file().await?;
            Ok((profiles, ()))
        })
        .await
}

pub(crate) async fn profiles_update_item_safe(index: &str, item: &mut PrfItem) -> Result<()> {
    Config::profiles()
        .await
        .with_data_modify(|mut profiles| async move {
            profiles.update_item(index, item).await?;
            Ok((profiles, ()))
        })
        .await
}

#[derive(Debug, PartialEq, Eq)]
struct SelectedNodesPlan {
    selected: Vec<PrfSelected>,
    activations: Vec<(String, String)>,
    repaired_count: usize,
}

fn node_is_available(available_nodes: &[std::string::String], node: &str) -> bool {
    available_nodes.iter().any(|available| available == node)
}

fn selected_nodes_need_confirmation(selected: &[PrfSelected], proxies: &Proxies) -> bool {
    selected.iter().any(|selected_item| {
        let (Some(group_name), Some(node)) = (&selected_item.name, &selected_item.now) else {
            return false;
        };
        let Some(group) = proxies.proxies.get(group_name.as_str()) else {
            return true;
        };
        let Some(available_nodes) = group.all.as_deref().filter(|nodes| !nodes.is_empty()) else {
            return true;
        };
        !node_is_available(available_nodes, node)
    })
}

fn reconcile_selected_nodes(
    selected: &[PrfSelected],
    previous: Option<&Proxies>,
    proxies: &Proxies,
) -> SelectedNodesPlan {
    let mut plan = SelectedNodesPlan {
        selected: Vec::with_capacity(selected.len()),
        activations: Vec::new(),
        repaired_count: 0,
    };
    let mut seen_groups = HashSet::new();
    let mut unique_selected = selected
        .iter()
        .rev()
        .filter(|item| item.name.as_ref().is_some_and(|name| seen_groups.insert(name.clone())))
        .collect::<Vec<_>>();
    unique_selected.reverse();
    plan.repaired_count += selected.len() - unique_selected.len();

    for selected_item in unique_selected {
        let (Some(group_name), Some(node)) = (&selected_item.name, &selected_item.now) else {
            plan.repaired_count += 1;
            continue;
        };
        let Some(group) = proxies.proxies.get(group_name.as_str()) else {
            if previous.is_some_and(|snapshot| !snapshot.proxies.contains_key(group_name.as_str())) {
                plan.repaired_count += 1;
            } else {
                plan.selected.push(selected_item.clone());
            }
            continue;
        };
        let Some(available_nodes) = group.all.as_deref().filter(|nodes| !nodes.is_empty()) else {
            // Provider-backed groups can be temporarily incomplete immediately after a reload.
            plan.selected.push(selected_item.clone());
            continue;
        };
        let is_selectable_group = matches!(
            &group.proxy_type,
            ProxyType::Selector | ProxyType::URLTest | ProxyType::Fallback | ProxyType::LoadBalance
        );
        if !is_selectable_group {
            let preferred_node = group
                .now
                .as_deref()
                .filter(|current| node_is_available(available_nodes, current))
                .or_else(|| node_is_available(available_nodes, node).then_some(node.as_str()));
            if let Some(preferred_node) = preferred_node {
                if preferred_node != node.as_str() {
                    plan.repaired_count += 1;
                }
                plan.selected.push(PrfSelected {
                    name: Some(group_name.clone()),
                    now: Some(preferred_node.into()),
                });
            } else {
                plan.repaired_count += 1;
            }
            continue;
        }

        if node_is_available(available_nodes, node) {
            plan.selected.push(selected_item.clone());
            if group.now.as_deref() != Some(node.as_str()) {
                plan.activations.push((group_name.clone(), node.clone()));
            }
            continue;
        }

        let missing_was_confirmed = previous
            .and_then(|snapshot| snapshot.proxies.get(group_name.as_str()))
            .and_then(|group| group.all.as_deref())
            .filter(|nodes| !nodes.is_empty())
            .is_some_and(|nodes| !node_is_available(nodes, node));
        if !missing_was_confirmed {
            plan.selected.push(selected_item.clone());
            continue;
        }

        plan.repaired_count += 1;
        if let Some(current_node) = group
            .now
            .as_deref()
            .filter(|current| node_is_available(available_nodes, current))
        {
            plan.selected.push(PrfSelected {
                name: Some(group_name.clone()),
                now: Some(current_node.into()),
            });
        }
    }

    plan
}

/// Cancels restoration so it cannot overwrite a newer selection or profile snapshot.
pub(crate) fn supersede_selected_activation() {
    ACTIVATE_SELECTED_GENERATION.fetch_add(1, Ordering::AcqRel);
}

fn is_activation_current(generation: u64) -> bool {
    ACTIVATE_SELECTED_GENERATION.load(Ordering::Acquire) == generation
}

async fn fetch_proxies_with_timeout() -> Result<Proxies> {
    let interval = Duration::from_millis(500);
    let attempts =
        NonZeroUsize::MIN.saturating_add((MIHOMO_OPERATION_TIMEOUT.as_millis() / interval.as_millis()) as usize + 1);
    tokio::time::timeout(
        MIHOMO_OPERATION_TIMEOUT,
        retry(RetryPolicy::fixed(attempts, interval), |_| async {
            handle::Handle::mihomo().get_proxies().await.map_err(|error| {
                logging!(debug, Type::Config, "mihomo proxies are not ready yet: {error:#}");
                RetryError::Retry(error)
            })
        }),
    )
    .await
    .context("timed out while waiting for mihomo proxies")?
    .map_err(Into::into)
}

async fn select_node_with_timeout(group_name: &String, node: &String) -> Result<()> {
    tokio::time::timeout(MIHOMO_OPERATION_TIMEOUT, async {
        handle::Handle::mihomo().select_node_for_group(group_name, node).await
    })
    .await
    .with_context(|| format!("timed out while selecting node [{node}] for group [{group_name}]"))?
    .with_context(|| format!("failed to select node [{node}] for group [{group_name}]"))
}

fn remaining_activations(
    activations: &[(String, String)],
    completed: &HashMap<String, String>,
) -> Vec<(String, String)> {
    activations
        .iter()
        .filter(|(group_name, node)| completed.get(group_name) != Some(node))
        .cloned()
        .collect()
}

async fn apply_activations(
    activations: &[(String, String)],
    completed: &mut HashMap<String, String>,
    generation: u64,
) -> Option<usize> {
    let mut activated_count = 0;
    for (group_name, node) in remaining_activations(activations, completed) {
        if !is_activation_current(generation) {
            return None;
        }
        match select_node_with_timeout(&group_name, &node).await {
            Ok(()) => {
                if !is_activation_current(generation) {
                    return None;
                }
                logging!(
                    info,
                    Type::Config,
                    "Selected node for proxy: {group_name}, node: {node}"
                );
                completed.insert(group_name, node);
                activated_count += 1;
            }
            Err(err) => logging!(error, Type::Config, "{err:#}"),
        }
        if !is_activation_current(generation) {
            return None;
        }
    }
    Some(activated_count)
}

async fn update_tray_after_activation(generation: u64) {
    if !is_activation_current(generation) {
        return;
    }
    if let Err(err) = Tray::global().update_tooltip().await {
        logging!(
            warn,
            Type::Config,
            "failed to update tray tooltip after profile switch: {err:#}"
        );
    }

    if !is_activation_current(generation) {
        return;
    }
    if let Err(err) = Tray::global().update_menu().await {
        logging!(
            warn,
            Type::Config,
            "failed to update tray menu after profile switch: {err:#}"
        );
    }
}

async fn persist_selected_update<F, Fut>(supersede: bool, edit: F) -> Result<()>
where
    F: FnOnce(IProfiles) -> Fut + Send,
    Fut: std::future::Future<Output = Result<(IProfiles, bool)>> + Send,
{
    let changed = Config::profiles().await.with_data_modify(edit).await?;
    if changed {
        if supersede {
            supersede_selected_activation();
        }
        announce(Refresh::Profiles);
    }
    Ok(())
}

/// Records a backend-made selection so the next core start restores it.
pub(crate) async fn record_selected_node(group_name: &str, node: &str) -> Result<()> {
    let group_name = String::from(group_name);
    let node = String::from(node);
    persist_selected_update(true, move |mut profiles| async move {
        let Some(current) = profiles.current.clone() else {
            return Ok((profiles, false));
        };
        let Some(item) = profiles
            .items
            .as_mut()
            .and_then(|items| items.iter_mut().find(|item| item.uid.as_ref() == Some(&current)))
        else {
            return Ok((profiles, false));
        };

        let mut selected = item.selected.clone().unwrap_or_default();
        match selected
            .iter_mut()
            .find(|entry| entry.name.as_ref() == Some(&group_name))
        {
            Some(entry) => {
                if entry.now.as_ref() == Some(&node) {
                    return Ok((profiles, false));
                }
                entry.now = Some(node);
            }
            None => selected.push(PrfSelected {
                name: Some(group_name),
                now: Some(node),
            }),
        }
        item.selected = Some(selected);
        profiles.save_file().await?;
        Ok((profiles, true))
    })
    .await
}

fn remove_selected_node(selected: &mut Vec<PrfSelected>, group_name: &str) -> bool {
    let original_len = selected.len();
    selected.retain(|entry| entry.name.as_deref() != Some(group_name));
    selected.len() != original_len
}

pub(crate) async fn forget_selected_node(group_name: &str) -> Result<()> {
    persist_selected_update(true, move |mut profiles| async move {
        let Some(current) = profiles.current.clone() else {
            return Ok((profiles, false));
        };
        let Some(item) = profiles
            .items
            .as_mut()
            .and_then(|items| items.iter_mut().find(|item| item.uid.as_ref() == Some(&current)))
        else {
            return Ok((profiles, false));
        };

        let mut selected = item.selected.clone().unwrap_or_default();
        if !remove_selected_node(&mut selected, group_name) {
            return Ok((profiles, false));
        }

        item.selected = (!selected.is_empty()).then_some(selected);
        profiles.save_file().await?;
        Ok((profiles, true))
    })
    .await
}

async fn persist_reconciled_selected(
    profile_uid: &String,
    original_selected: &[PrfSelected],
    selected: Vec<PrfSelected>,
    generation: u64,
) -> Result<()> {
    if !is_activation_current(generation) {
        return Ok(());
    }

    let profile_uid = profile_uid.clone();
    let original_selected = original_selected.to_vec();
    persist_selected_update(false, move |mut profiles| async move {
        if !is_activation_current(generation) || profiles.current.as_ref() != Some(&profile_uid) {
            return Ok((profiles, false));
        }

        let profile = profiles
            .items
            .as_mut()
            .and_then(|items| items.iter_mut().find(|item| item.uid.as_ref() == Some(&profile_uid)))
            .with_context(|| format!("failed to find the profile item \"uid:{profile_uid}\""))?;
        if profile.selected.as_deref().unwrap_or(&[]) != original_selected.as_slice() {
            return Ok((profiles, false));
        }

        profile.selected = (!selected.is_empty()).then_some(selected);
        profiles.save_file().await?;
        Ok((profiles, true))
    })
    .await
}

/// Returns recorded selections whose groups have not reached the requested node.
fn unsettled_selections(selected: &[PrfSelected], proxies: &Proxies) -> Vec<String> {
    selected
        .iter()
        .filter_map(|item| {
            let (Some(group_name), Some(node)) = (&item.name, &item.now) else {
                return None;
            };
            match proxies.proxies.get(group_name.as_str()) {
                Some(group) if group.now.as_deref() == Some(node.as_str()) => None,
                _ => Some(group_name.clone()),
            }
        })
        .collect()
}

/// Retries selections while provider-backed groups finish loading.
async fn settle_pending_selections(selected: &[PrfSelected], completed: &mut HashMap<String, String>, generation: u64) {
    let deadline = Instant::now() + SELECTED_NODES_SETTLE_DEADLINE;
    let attempts = NonZeroUsize::MIN.saturating_add(
        (SELECTED_NODES_SETTLE_DEADLINE.as_millis() / SELECTED_NODES_SETTLE_INTERVAL.as_millis()) as usize,
    );
    tokio::time::sleep(SELECTED_NODES_SETTLE_INTERVAL).await;
    let _ = retry_with_state(
        RetryPolicy::fixed(attempts, SELECTED_NODES_SETTLE_INTERVAL),
        (selected, completed, generation, deadline),
        |state, _| {
            Box::pin(async move {
                let (selected, completed, generation, deadline) = state;
                if !is_activation_current(*generation) {
                    return Ok(());
                }
                let Ok(snapshot) = fetch_proxies_with_timeout().await else {
                    return if Instant::now() >= *deadline {
                        Ok(())
                    } else {
                        Err(RetryError::Retry(()))
                    };
                };
                if !is_activation_current(*generation) {
                    return Ok(());
                }
                let pending = unsettled_selections(selected, &snapshot);
                if pending.is_empty() {
                    return Ok(());
                }
                if Instant::now() >= *deadline {
                    logging!(
                        warn,
                        Type::Config,
                        "gave up putting back {} selected node(s) the core never loaded: {}",
                        pending.len(),
                        pending.iter().map(String::as_str).collect::<Vec<_>>().join(", ")
                    );
                    return Ok(());
                }
                let plan = reconcile_selected_nodes(selected, None, &snapshot);
                if apply_activations(&plan.activations, completed, *generation)
                    .await
                    .is_none()
                {
                    return Ok(());
                }
                if is_activation_current(*generation) {
                    announce(Refresh::Clash);
                }
                Err(RetryError::Retry(()))
            })
        },
    )
    .await;
}

/// Releases the first-pass waiter even when restoration exits early.
struct FirstPassSignal(Option<tokio::sync::oneshot::Sender<()>>);

impl FirstPassSignal {
    fn notify(&mut self) {
        if let Some(sender) = self.0.take() {
            let _ = sender.send(());
        }
    }
}

async fn activate_selected_nodes_worker(
    profile_uid: String,
    selected: Vec<PrfSelected>,
    generation: u64,
    repair: SelectionRepair,
    mut first_pass_done: FirstPassSignal,
) -> Result<()> {
    let first_snapshot = fetch_proxies_with_timeout().await?;
    if !is_activation_current(generation) {
        return Ok(());
    }

    let needs_confirmation = selected_nodes_need_confirmation(&selected, &first_snapshot);
    let immediate_plan = reconcile_selected_nodes(&selected, None, &first_snapshot);
    logging!(
        debug,
        Type::Config,
        "immediate selected nodes activation plan: {immediate_plan:?}"
    );

    let mut completed_activations = HashMap::new();
    if apply_activations(&immediate_plan.activations, &mut completed_activations, generation)
        .await
        .is_none()
    {
        return Ok(());
    }

    if is_activation_current(generation) {
        announce(Refresh::Clash);
    }

    let plan = if needs_confirmation {
        tokio::time::sleep(SELECTED_NODES_RECHECK_DELAY).await;
        if !is_activation_current(generation) {
            return Ok(());
        }
        let second_snapshot = fetch_proxies_with_timeout().await?;
        if !is_activation_current(generation) {
            return Ok(());
        }
        let confirmed_plan = reconcile_selected_nodes(&selected, Some(&first_snapshot), &second_snapshot);
        logging!(
            debug,
            Type::Config,
            "confirmed selected nodes activation plan: {confirmed_plan:?}"
        );
        let Some(confirmed_activated_count) =
            apply_activations(&confirmed_plan.activations, &mut completed_activations, generation).await
        else {
            return Ok(());
        };
        if confirmed_activated_count > 0 && is_activation_current(generation) {
            announce(Refresh::Clash);
        }
        confirmed_plan
    } else {
        immediate_plan
    };
    if !is_activation_current(generation) {
        return Ok(());
    }

    if repair == SelectionRepair::KeepRecords {
        // Remaining selections depend on provider loading and continue in the background.
        first_pass_done.notify();
        settle_pending_selections(&selected, &mut completed_activations, generation).await;
        return Ok(());
    }

    if plan.repaired_count > 0 && is_activation_current(generation) {
        logging!(
            info,
            Type::Config,
            "repairing {} invalid selected node record(s) for profile {profile_uid}",
            plan.repaired_count
        );
        persist_reconciled_selected(&profile_uid, &selected, plan.selected, generation).await?;
    }

    Ok(())
}

/// Whether an activation may also prune the records it cannot match.
#[derive(Clone, Copy, PartialEq, Eq, Debug)]
enum SelectionRepair {
    /// Prune records after a fully loaded profile switch.
    Prune,
    /// Preserve records during startup while provider-backed groups may still be absent.
    KeepRecords,
}

pub(crate) fn activate_selected_nodes() {
    // The first-pass signal is for callers that wait; a profile switch does not, and dropping
    // the receiver simply makes the send a no-op.
    drop(activate_selected_nodes_with(SelectionRepair::Prune));
}

/// Restores available selections before the system proxy points at the core, then retries the rest.
pub(crate) async fn restore_selected_nodes() {
    let first_pass = activate_selected_nodes_with(SelectionRepair::KeepRecords);
    if tokio::time::timeout(SELECTED_NODES_FIRST_PASS_BUDGET, first_pass)
        .await
        .is_err()
    {
        logging!(
            warn,
            Type::Config,
            "starting without having put the selected nodes back yet; still trying"
        );
    }
}

fn activate_selected_nodes_with(repair: SelectionRepair) -> tokio::sync::oneshot::Receiver<()> {
    logging!(debug, Type::Config, "starting activating selected nodes");
    let mut active_task = ACTIVATE_SELECTED_TASK.lock();
    let generation = ACTIVATE_SELECTED_GENERATION.fetch_add(1, Ordering::AcqRel) + 1;
    let previous_task = active_task.take();
    let (first_pass_sender, first_pass_done) = tokio::sync::oneshot::channel();

    let handle = tokio::spawn(async move {
        // Dropping this releases the startup waiter on every early exit.
        let first_pass = FirstPassSignal(Some(first_pass_sender));
        if let Some(previous_task) = previous_task {
            let _ = previous_task.await;
        }
        if !is_activation_current(generation) {
            return;
        }

        let result = async {
            // A draft may be a profile switch that has not passed validation yet.
            let profiles = Config::profiles().await.data_arc();
            let current = profiles.current.clone().context("no current profile running")?;
            let selected = profiles
                .get_item(&current)
                .context("failed to get current profile")?
                .selected
                .clone()
                .unwrap_or_default();

            if selected.is_empty() {
                if is_activation_current(generation) {
                    announce(Refresh::Clash);
                }
                return Ok(());
            }
            activate_selected_nodes_worker(current, selected, generation, repair, first_pass).await
        }
        .await;

        if is_activation_current(generation) {
            if let Err(err) = result {
                logging!(error, Type::Config, "failed to activate selected nodes: {err:#}");
                // The profile itself is already active even if node restoration failed.
                announce(Refresh::Clash);
            }
            update_tray_after_activation(generation).await;
            logging!(debug, Type::Config, "activating selected nodes done!");
        }
    });
    *active_task = Some(handle);
    drop(active_task);
    first_pass_done
}

#[cfg(test)]
mod tests {
    use super::*;
    use tauri_plugin_mihomo::models::Proxy;

    fn deletion_item(uid: &str, kind: &str, file: &str, merge: Option<&str>) -> PrfItem {
        PrfItem {
            uid: Some(uid.into()),
            itype: Some(kind.into()),
            file: Some(file.into()),
            option: merge.map(|uid| PrfOption {
                merge: Some(uid.into()),
                ..PrfOption::default()
            }),
            ..PrfItem::default()
        }
    }

    fn interval_item(uid: &str, update_interval: Option<u64>) -> PrfItem {
        PrfItem {
            uid: Some(uid.into()),
            itype: Some("remote".into()),
            option: Some(PrfOption {
                update_interval,
                ..PrfOption::default()
            }),
            ..PrfItem::default()
        }
    }

    #[tokio::test]
    async fn missing_reorder_ids_preserve_ordered_items() -> Result<()> {
        let mut profiles = IProfiles {
            current: Some("a".into()),
            items: Some(vec![
                PrfItem {
                    uid: Some("a".into()),
                    ..PrfItem::default()
                },
                PrfItem {
                    uid: Some("b".into()),
                    ..PrfItem::default()
                },
                PrfItem {
                    uid: Some("c".into()),
                    ..PrfItem::default()
                },
            ]),
        };
        let expected = Some(vec![Some("a"), Some("b"), Some("c")]);

        profiles.reorder("missing", "b").await?;
        let ordered_uids = profiles
            .items
            .as_ref()
            .map(|items| items.iter().map(|item| item.uid.as_deref()).collect::<Vec<_>>());
        assert_eq!(ordered_uids, expected);

        profiles.reorder("a", "missing").await?;
        let ordered_uids = profiles
            .items
            .as_ref()
            .map(|items| items.iter().map(|item| item.uid.as_deref()).collect::<Vec<_>>());
        assert_eq!(ordered_uids, expected);
        Ok(())
    }

    #[test]
    fn raising_intervals_only_touches_those_scheduled_too_often() {
        let mut profiles = IProfiles {
            current: None,
            items: Some(vec![
                interval_item("too-often", Some(60)),
                interval_item("just-under", Some(1439)),
                interval_item("at-floor", Some(1440)),
                interval_item("relaxed", Some(4320)),
                // raising these would switch auto-update on
                interval_item("disabled-by-zero", Some(0)),
                interval_item("disabled-by-absence", None),
                PrfItem {
                    uid: Some("no-option".into()),
                    option: None,
                    ..PrfItem::default()
                },
            ]),
        };

        assert_eq!(profiles.raise_short_update_intervals(1440), 2);

        let intervals: Vec<Option<u64>> = profiles
            .items
            .iter()
            .flatten()
            .map(|item| item.option.as_ref().and_then(|o| o.update_interval))
            .collect();
        assert_eq!(
            intervals,
            vec![Some(1440), Some(1440), Some(1440), Some(4320), Some(0), None, None]
        );

        assert_eq!(
            profiles.raise_short_update_intervals(1440),
            0,
            "a second pass must be a no-op, so re-running the migration cannot churn the file"
        );
    }

    #[test]
    fn delete_plan_defers_files_and_selects_replacement() -> Result<()> {
        let mut profiles = IProfiles {
            current: Some("a".into()),
            items: Some(vec![
                deletion_item("a", "remote", "a.yaml", Some("owned")),
                deletion_item("owned", "merge", "owned.yaml", None),
                deletion_item("b", "local", "b.yaml", None),
            ]),
        };

        let (should_update, plan) = profiles.plan_delete_item("a")?;

        assert!(should_update);
        assert_eq!(profiles.current.as_deref(), Some("b"));
        assert_eq!(plan.files, vec![String::from("a.yaml"), String::from("owned.yaml")]);
        assert!(profiles.get_item("owned").is_err());
        Ok(())
    }

    fn selected(group: &str, node: &str) -> PrfSelected {
        PrfSelected {
            name: Some(group.into()),
            now: Some(node.into()),
        }
    }

    #[test]
    fn removes_only_the_requested_group_selection() {
        let mut selections = vec![selected("Proxy", "Node A"), selected("Fallback", "Node B")];

        assert!(remove_selected_node(&mut selections, "Proxy"));
        assert_eq!(selections, vec![selected("Fallback", "Node B")]);
    }

    #[test]
    fn removing_a_missing_group_is_idempotent() {
        let mut selections = vec![selected("Proxy", "Node A")];

        assert!(!remove_selected_node(&mut selections, "Missing"));
        assert_eq!(selections, vec![selected("Proxy", "Node A")]);
    }

    fn proxies(groups: Vec<(&str, &[&str], Option<&str>)>) -> Proxies {
        Proxies {
            proxies: groups
                .into_iter()
                .map(|(name, all, now)| {
                    (
                        name.to_owned(),
                        Proxy {
                            name: name.to_owned(),
                            all: Some(all.iter().map(|node| (*node).to_owned()).collect()),
                            now: now.map(str::to_owned),
                            proxy_type: ProxyType::Selector,
                            ..Proxy::default()
                        },
                    )
                })
                .collect::<HashMap<_, _>>(),
        }
    }

    #[test]
    fn a_group_the_core_has_not_loaded_is_still_unsettled() {
        // The regression this pins. A provider-backed group is present but empty until its
        // provider loads, which on a cold start is exactly when restoring runs. Reconciling
        // produces no activation for it, so a restore that stopped after one re-check reported
        // success having left the group on the first entry of its `proxies:` list.
        let saved = vec![selected("provider-group", "saved")];
        let unloaded = proxies(vec![("provider-group", &[], None)]);

        assert!(
            reconcile_selected_nodes(&saved, Some(&unloaded), &unloaded)
                .activations
                .is_empty(),
            "nothing can be activated while the group is empty"
        );
        assert_eq!(
            unsettled_selections(&saved, &unloaded),
            vec![String::from("provider-group")],
            "so the restore must keep looking rather than call it done"
        );
    }

    #[test]
    fn a_group_the_core_is_already_on_is_settled() {
        let saved = vec![selected("Proxy", "Node A")];
        let loaded = proxies(vec![("Proxy", &["Node A", "Node B"], Some("Node A"))]);

        assert!(
            unsettled_selections(&saved, &loaded).is_empty(),
            "a group already on its node needs nothing, even though it produces no activation"
        );
    }

    #[test]
    fn a_group_on_the_wrong_node_is_unsettled() {
        // Covers a `select` that failed transiently: the group is loaded, the node exists, and
        // the core is simply not on it. Retrying is the only thing that fixes that.
        let saved = vec![selected("Proxy", "Node A")];
        let wrong = proxies(vec![("Proxy", &["Node A", "Node B"], Some("Node B"))]);

        assert_eq!(unsettled_selections(&saved, &wrong), vec![String::from("Proxy")]);
    }

    #[test]
    fn a_record_without_a_group_or_node_is_not_waited_on() {
        // A malformed record cannot be satisfied by waiting, and holding the settle loop open
        // for it would delay giving up on everything else.
        let malformed = vec![
            PrfSelected {
                name: Some("Proxy".into()),
                now: None,
            },
            PrfSelected {
                name: None,
                now: Some("Node A".into()),
            },
        ];

        assert!(unsettled_selections(&malformed, &proxies(vec![])).is_empty());
    }

    #[test]
    fn a_group_missing_from_both_snapshots_is_dropped_from_the_records() {
        // This is the pruning a profile switch wants and a core start must not do: the record is
        // gone from the plan, and `persist_reconciled_selected` writes the plan back. Pinned here
        // because it is why `SelectionRepair` exists — the predicate is right, the question is
        // only who is entitled to act on it.
        let saved = vec![selected("provider-group", "saved")];
        let empty = proxies(vec![]);

        let plan = reconcile_selected_nodes(&saved, Some(&empty), &empty);

        assert!(
            plan.selected.is_empty(),
            "a group absent from both looks invalid, so the record is dropped"
        );
        assert_eq!(plan.repaired_count, 1, "and dropping it counts as a repair");
    }

    #[test]
    fn a_group_missing_from_only_the_second_snapshot_is_kept() {
        // Absent once is not evidence: only a group that was already absent when the first
        // snapshot was taken is treated as gone.
        let saved = vec![selected("provider-group", "saved")];
        let had_it = proxies(vec![("provider-group", &["saved"], Some("saved"))]);
        let lost_it = proxies(vec![]);

        let plan = reconcile_selected_nodes(&saved, Some(&had_it), &lost_it);

        assert_eq!(plan.selected, saved);
        assert_eq!(plan.repaired_count, 0);
    }

    #[test]
    fn superseding_an_activation_makes_the_one_in_flight_stand_down() {
        // What a selection made during a start relies on: the restore that is still polling the
        // core has to notice it has been overtaken, or it will push the older node back.
        let generation = ACTIVATE_SELECTED_GENERATION.load(Ordering::Acquire) + 1;
        ACTIVATE_SELECTED_GENERATION.store(generation, Ordering::Release);
        assert!(is_activation_current(generation));

        supersede_selected_activation();

        assert!(
            !is_activation_current(generation),
            "an activation that has been overtaken must stop before it puts anything"
        );
    }

    #[test]
    fn keeps_valid_selection_and_activates_when_needed() {
        let saved = vec![selected("group", "saved")];
        let plan = reconcile_selected_nodes(
            &saved,
            None,
            &proxies(vec![("group", &["current", "saved"], Some("current"))]),
        );

        assert_eq!(plan.selected, saved);
        assert_eq!(plan.activations, vec![("group".into(), "saved".into())]);
        assert_eq!(plan.repaired_count, 0);
    }

    #[test]
    fn replaces_missing_node_with_valid_current_node() {
        let snapshot = proxies(vec![("group", &["current"], Some("current"))]);
        let plan = reconcile_selected_nodes(&[selected("group", "renamed-node")], Some(&snapshot), &snapshot);

        assert_eq!(plan.selected, vec![selected("group", "current")]);
        assert!(plan.activations.is_empty());
        assert_eq!(plan.repaired_count, 1);
    }

    #[test]
    fn validates_membership_in_group_not_global_existence() {
        let snapshot = proxies(vec![
            ("group", &["current"], Some("current")),
            ("other-node", &[], None),
        ]);
        let plan = reconcile_selected_nodes(&[selected("group", "other-node")], Some(&snapshot), &snapshot);

        assert_eq!(plan.selected, vec![selected("group", "current")]);
        assert!(plan.activations.is_empty());
        assert_eq!(plan.repaired_count, 1);
    }

    #[test]
    fn does_not_activate_non_selectable_groups() {
        let snapshot = Proxies {
            proxies: HashMap::from([(
                "group".to_owned(),
                Proxy {
                    name: "group".to_owned(),
                    all: Some(vec!["current".to_owned(), "saved".to_owned()]),
                    now: Some("current".to_owned()),
                    proxy_type: ProxyType::Direct,
                    ..Proxy::default()
                },
            )]),
        };

        let plan = reconcile_selected_nodes(&[selected("group", "saved")], None, &snapshot);

        assert_eq!(plan.selected, vec![selected("group", "current")]);
        assert!(plan.activations.is_empty());
        assert_eq!(plan.repaired_count, 1);
    }

    #[test]
    fn removes_selection_when_group_or_fallback_is_invalid() {
        let snapshot = proxies(vec![("group", &["valid"], Some("invalid-current"))]);
        let plan = reconcile_selected_nodes(
            &[
                selected("missing-group", "node"),
                selected("group", "missing-node"),
                PrfSelected::default(),
            ],
            Some(&snapshot),
            &snapshot,
        );

        assert!(plan.selected.is_empty());
        assert!(plan.activations.is_empty());
        assert_eq!(plan.repaired_count, 3);
    }

    #[test]
    fn preserves_selection_until_missing_node_is_confirmed() {
        let saved = vec![selected("group", "saved")];
        let incomplete = proxies(vec![("group", &[], None)]);
        let complete = proxies(vec![("group", &["current"], Some("current"))]);

        let incomplete_plan = reconcile_selected_nodes(&saved, None, &incomplete);
        let one_snapshot_plan = reconcile_selected_nodes(&saved, None, &complete);

        assert_eq!(incomplete_plan.selected, saved);
        assert_eq!(incomplete_plan.repaired_count, 0);
        assert_eq!(one_snapshot_plan.selected, saved);
        assert_eq!(one_snapshot_plan.repaired_count, 0);
    }

    #[test]
    fn recovers_when_group_appears_in_second_snapshot() {
        let saved = vec![selected("group", "saved")];
        let incomplete = Proxies::default();
        let complete = proxies(vec![("group", &["current", "saved"], Some("current"))]);

        let plan = reconcile_selected_nodes(&saved, Some(&incomplete), &complete);

        assert_eq!(plan.selected, saved);
        assert_eq!(plan.activations, vec![("group".into(), "saved".into())]);
        assert_eq!(plan.repaired_count, 0);
    }

    #[test]
    fn keeps_last_selection_for_duplicate_group_entries() {
        let saved = vec![selected("group", "old"), selected("group", "new")];
        let snapshot = proxies(vec![("group", &["old", "new"], Some("old"))]);

        let plan = reconcile_selected_nodes(&saved, None, &snapshot);

        assert_eq!(plan.selected, vec![selected("group", "new")]);
        assert_eq!(plan.activations, vec![("group".into(), "new".into())]);
        assert_eq!(plan.repaired_count, 1);
    }

    #[test]
    fn activates_valid_nodes_before_confirming_invalid_records() {
        let saved = vec![selected("valid-group", "saved"), selected("stale-group", "missing")];
        let first_snapshot = proxies(vec![
            ("valid-group", &["current", "saved"], Some("current")),
            ("stale-group", &["fallback"], Some("fallback")),
        ]);

        assert!(selected_nodes_need_confirmation(&saved, &first_snapshot));
        let immediate_plan = reconcile_selected_nodes(&saved, None, &first_snapshot);

        assert_eq!(immediate_plan.selected, saved);
        assert_eq!(immediate_plan.activations, vec![("valid-group".into(), "saved".into())]);
        assert_eq!(immediate_plan.repaired_count, 0);
    }

    #[test]
    fn skips_only_activations_that_already_succeeded() {
        let activations = vec![
            ("first-group".into(), "saved".into()),
            ("second-group".into(), "new".into()),
            ("first-group".into(), "replacement".into()),
        ];
        let completed = HashMap::from([("first-group".into(), "saved".into())]);

        assert_eq!(
            remaining_activations(&activations, &completed),
            vec![
                ("second-group".into(), "new".into()),
                ("first-group".into(), "replacement".into()),
            ]
        );
    }
}