/*
 *  Copyright (C) 2004-2026 Savoir-faire Linux Inc.
 *
 *  This program is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation, either version 3 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program. If not, see <https://www.gnu.org/licenses/>.
 */
#pragma once

#include "def.h"
#ifdef HAVE_CONFIG_H
#include "config.h"
#endif

#include "sip/sipaccountbase.h"
#include "jami/datatransfer_interface.h"
#include "jamidht/conversation.h"
#include "data_transfer.h"
#include "uri.h"
#include "jamiaccount_config.h"

#include "noncopyable.h"
#include "gitserver.h"
#include "channel_handler.h"
#include "conversation_module.h"
#include "sync_module.h"
#include "conversationrepository.h"
#include "namedirectory.h"

#include <dhtnet/diffie-hellman.h>
#include <dhtnet/tls_session.h>
#include <dhtnet/multiplexed_socket.h>
#include <dhtnet/certstore.h>
#include <dhtnet/connectionmanager.h>
#include <dhtnet/upnp/mapping.h>
#include <dhtnet/ip_utils.h>
#include <dhtnet/fileutils.h>

#include <opendht/dhtrunner.h>
#include <opendht/default_types.h>
#include <opendht/dht_proxy_server.h>

#include <pjsip/sip_types.h>
#include <json/json.h>

#include <chrono>
#include <functional>
#include <future>
#include <list>
#include <map>
#include <optional>
#include <vector>
#include <filesystem>
#include <shared_mutex>

namespace dev {
template<unsigned N>
class FixedHash;
using h160 = FixedHash<20>;
using Address = h160;
} // namespace dev

namespace jami {

class IceTransport;
struct Contact;
struct AccountArchive;
class DhtPeerConnector;
class AccountManager;
struct AccountInfo;
class SipTransport;
class ChanneledOutgoingTransfer;
class SyncModule;
class PresenceManager;

using SipConnectionKey = std::pair<std::string /* uri */, DeviceId>;

static constexpr const char MIME_TYPE_IM_COMPOSING[] {"application/im-iscomposing+xml"};

/**
 * @brief Ring Account is build on top of SIPAccountBase and uses DHT to handle call connectivity.
 */
class JamiAccount : public SIPAccountBase
{
public:
    constexpr static auto ACCOUNT_TYPE = ACCOUNT_TYPE_JAMI;
    constexpr static const std::pair<uint16_t, uint16_t> DHT_PORT_RANGE {4000, 8888};
    constexpr static int ICE_STREAMS_COUNT {1};
    constexpr static int ICE_COMP_COUNT_PER_STREAM {1};

    std::string_view getAccountType() const override { return ACCOUNT_TYPE; }

    std::shared_ptr<JamiAccount> shared() { return std::static_pointer_cast<JamiAccount>(shared_from_this()); }
    std::shared_ptr<JamiAccount const> shared() const
    {
        return std::static_pointer_cast<JamiAccount const>(shared_from_this());
    }
    std::weak_ptr<JamiAccount> weak() { return std::static_pointer_cast<JamiAccount>(shared_from_this()); }
    std::weak_ptr<JamiAccount const> weak() const
    {
        return std::static_pointer_cast<JamiAccount const>(shared_from_this());
    }

    const JamiAccountConfig& config() const { return *static_cast<const JamiAccountConfig*>(&Account::config()); }

    JamiAccountConfig::Credentials consumeConfigCredentials()
    {
        auto* conf = static_cast<JamiAccountConfig*>(config_.get());
        return std::move(conf->credentials);
    }

    void loadConfig() override;

    /**
     * Constructor
     * @param accountID The account identifier
     */
    JamiAccount(const std::string& accountId);

    ~JamiAccount() noexcept;

    /**
     * Retrieve volatile details such as recent registration errors
     * @return std::map< std::string, std::string > The account volatile details
     */
    virtual std::map<std::string, std::string> getVolatileAccountDetails() const override;

    std::unique_ptr<AccountConfig> buildConfig() const override
    {
        return std::make_unique<JamiAccountConfig>(getAccountID(), idPath_);
    }

    /**
     * Adds an account id to the list of accounts to track on the DHT for
     * buddy presence.
     *
     * @param buddy_id  The buddy id.
     */
    void trackBuddyPresence(const std::string& buddy_id, bool track);

    /**
     * Tells for each tracked account id if it has been seen online so far
     * in the last DeviceAnnouncement::TYPE.expiration minutes.
     *
     * @return map of buddy_uri to bool (online or not)
     */
    std::map<std::string, bool> getTrackedBuddyPresence() const;

    void setActiveCodecs(const std::vector<unsigned>& list) override;

    /**
     * Connect to the DHT.
     */
    void doRegister() override;

    /**
     * Disconnect from the DHT.
     */
    void doUnregister(bool forceShutdownConnections = false) override;

    /**
     * Set the registration state of the specified link
     * @param state The registration state of underlying VoIPLink
     */
    void setRegistrationState(RegistrationState state, int detail_code = 0, const std::string& detail_str = {}) override;

    /**
     * @return pj_str_t "From" uri based on account information.
     * From RFC3261: "The To header field first and foremost specifies the desired
     * logical" recipient of the request, or the address-of-record of the
     * user or resource that is the target of this request. [...]  As such, it is
     * very important that the From URI not contain IP addresses or the FQDN
     * of the host on which the UA is running, since these are not logical
     * names."
     */
    std::string getFromUri() const override;

    /**
     * This method adds the correct scheme, hostname and append
     * the ;transport= parameter at the end of the uri, in accordance with RFC3261.
     * It is expected that "port" is present in the internal hostname_.
     *
     * @return pj_str_t "To" uri based on @param username
     * @param username A string formatted as : "username"
     */
    std::string getToUri(const std::string& username) const override;

    /**
     * In the current version, "srv" uri is obtained in the preformated
     * way: hostname:port. This method adds the correct scheme and append
     * the ;transport= parameter at the end of the uri, in accordance with RFC3261.
     *
     * @return pj_str_t "server" uri based on @param hostPort
     * @param hostPort A string formatted as : "hostname:port"
     */
    std::string getServerUri() const { return ""; };

    void setIsComposing(const std::string& conversationUri, bool isWriting) override;

    bool setMessageDisplayed(const std::string& conversationUri, const std::string& messageId, int status) override;

    /**
     * Get the contact header for
     * @return The contact header based on account information
     */
    std::string getContactHeader(const std::shared_ptr<SipTransport>& sipTransport);

    /* Returns true if the username and/or hostname match this account */
    MatchRank matches(std::string_view username, std::string_view hostname) const override;

    /**
     * Create outgoing SIPCall.
     * @note Accepts several urls:
     *          + jami:uri for calling someone
     *          + swarm:id for calling a group (will host or join if an active call is detected)
     *          + rdv:id/uri/device/confId to join a specific conference hosted on (uri, device)
     * @param[in] toUrl The address to call
     * @param[in] mediaList list of medias
     * @return A shared pointer on the created call.
     */
    std::shared_ptr<Call> newOutgoingCall(std::string_view toUrl,
                                          const std::vector<libjami::MediaMap>& mediaList) override;

    /**
     * Create incoming SIPCall.
     * @param[in] from The origin of the call
     * @param mediaList A list of media
     * @param sipTr: SIP Transport
     * @return A shared pointer on the created call.
     */
    std::shared_ptr<SIPCall> newIncomingCall(const std::string& from,
                                             const std::vector<libjami::MediaMap>& mediaList,
                                             const std::shared_ptr<SipTransport>& sipTr = {}) override;

    void onTextMessage(const std::string& id,
                       const std::string& from,
                       const std::shared_ptr<dht::crypto::Certificate>& peerCert,
                       const std::map<std::string, std::string>& payloads) override;
    void loadConversation(const std::string& convId);

    virtual bool isTlsEnabled() const override { return true; }
    bool isSrtpEnabled() const override { return true; }

    bool setCertificateStatus(const std::string& cert_id, dhtnet::tls::TrustStore::PermissionStatus status);
    bool setCertificateStatus(const std::shared_ptr<crypto::Certificate>& cert,
                              dhtnet::tls::TrustStore::PermissionStatus status,
                              bool local = true);
    std::vector<std::string> getCertificatesByStatus(dhtnet::tls::TrustStore::PermissionStatus status);

    bool findCertificate(const std::string& id);
    bool findCertificate(const dht::InfoHash& h,
                         std::function<void(const std::shared_ptr<dht::crypto::Certificate>&)>&& cb = {});
    bool findCertificate(const dht::PkId& h,
                         std::function<void(const std::shared_ptr<dht::crypto::Certificate>&)>&& cb = {});

    /* contact requests */
    std::vector<std::map<std::string, std::string>> getTrustRequests() const;
    // Note: includeConversation used for compatibility test. Do not change
    bool acceptTrustRequest(const std::string& from, bool includeConversation = true);
    bool discardTrustRequest(const std::string& from);
    void declineConversationRequest(const std::string& conversationId);

    /**
     * Add contact to the account contact list.
     * Set confirmed if we know the contact also added us.
     */
    void addContact(const std::string& uri, bool confirmed = false);
    void removeContact(const std::string& uri, bool banned = true);
    std::vector<std::map<std::string, std::string>> getContacts(bool includeRemoved = false) const;

    ///
    /// Obtain details about one account contact in serializable form.
    ///
    std::map<std::string, std::string> getContactDetails(const std::string& uri) const;
    std::optional<Contact> getContactInfo(const std::string& uri) const;

    void sendTrustRequest(const std::string& to, const std::vector<uint8_t>& payload);
    void sendMessage(const std::string& to,
                     const std::string& deviceId,
                     const std::map<std::string, std::string>& payloads,
                     uint64_t id,
                     bool retryOnTimeout = true,
                     bool onlyConnected = false) override;

    uint64_t sendTextMessage(const std::string& to,
                             const std::string& deviceId,
                             const std::map<std::string, std::string>& payloads,
                             uint64_t refreshToken = 0,
                             bool onlyConnected = false) override;
    void sendInstantMessage(const std::string& convId, const std::map<std::string, std::string>& msg);

    /**
     * Create and return ICE options.
     */
    dhtnet::IceTransportOptions getIceOptions() const override;
    void getIceOptions(std::function<void(dhtnet::IceTransportOptions&&)> cb) const;
    dhtnet::IpAddr getPublishedIpAddress(uint16_t family = PF_UNSPEC) const override;

    /* Devices - existing device */
    /**
     * Initiates the process of adding a new device to this account
     * @param uriProvided The URI provided by the new device to be added
     * @return A positive operation ID if successful, or a negative value indicating an AddDeviceError:
     *         - INVALID_URI (-1): The provided URI is invalid
     *         - ALREADY_LINKING (-2): A device linking operation is already in progress
     *         - GENERIC (-3): A generic error occurred during the process
     */
    int32_t addDevice(const std::string& uriProvided);
    bool cancelAddDevice(uint32_t op_token);
    bool confirmAddDevice(uint32_t op_token);
    /* Devices - new device */
    bool provideAccountAuthentication(const std::string& credentialsFromUser, const std::string& scheme);

    /**
     * Export the archive to a file
     * @param destinationPath
     * @param (optional) password, if not provided, will update the contacts only if the archive
     * doesn't have a password
     * @return if the archive was exported
     */
    bool exportArchive(const std::string& destinationPath,
                       std::string_view scheme = {},
                       const std::string& password = {});
    bool revokeDevice(const std::string& device, std::string_view scheme = {}, const std::string& password = {});
    std::map<std::string, std::string> getKnownDevices() const;

    bool isPasswordValid(const std::string& password);
    std::vector<uint8_t> getPasswordKey(const std::string& password);

    bool changeArchivePassword(const std::string& password_old, const std::string& password_new);

    void connectivityChanged() override;

    // overloaded methods
    void flush() override;

    void lookupName(const std::string& name);
    void lookupAddress(const std::string& address);
    void registerName(const std::string& name, const std::string& scheme, const std::string& password);
    bool searchUser(const std::string& nameQuery);

    /// \return true if the given DHT message identifier has been treated
    /// \note if message has not been treated yet this method store this id and returns true at
    /// further calls
    bool isMessageTreated(dht::Value::Id id);

    std::shared_ptr<dht::DhtRunner> dht() { return dht_; }

    const dht::crypto::Identity& identity() const { return id_; }

    PresenceManager* presenceManager() const { return presenceManager_.get(); }

    void forEachDevice(const dht::InfoHash& to,
                       std::function<void(const std::shared_ptr<dht::crypto::PublicKey>&)>&& op,
                       std::function<void(bool)>&& end = {});

    bool setPushNotificationToken(const std::string& pushDeviceToken = "") override;
    bool setPushNotificationTopic(const std::string& topic) override;
    bool setPushNotificationConfig(const std::map<std::string, std::string>& data) override;

    /**
     * To be called by clients with relevant data when a push notification is received.
     */
    void pushNotificationReceived(const std::string& from, const std::map<std::string, std::string>& data);

    std::string getUserUri() const override;

    /**
     * Get last messages (should be used to retrieve messages when launching the client)
     * @param base_timestamp
     */
    std::vector<libjami::Message> getLastMessages(const uint64_t& base_timestamp) override;

    /**
     * Start Publish the Jami Account onto the Network
     */
    void startAccountPublish();

    /**
     * Start Discovery the Jami Account from the Network
     */
    void startAccountDiscovery();

    void saveConfig() const override;

    inline void editConfig(std::function<void(JamiAccountConfig& conf)>&& edit)
    {
        Account::editConfig([&](AccountConfig& conf) { edit(*static_cast<JamiAccountConfig*>(&conf)); });
    }

    /**
     * Get current discovered peers account id and display name
     */
    std::map<std::string, std::string> getNearbyPeers() const override;

    void sendProfileToPeers();

    /**
     * Update the profile vcard and send it to peers
     * @param displayName Current or new display name
     * @param avatar Current or new avatar
     * @param flag  0 for path to avatar, 1 for base64 avatar
     */
    void updateProfile(const std::string& displayName,
                       const std::string& avatar,
                       const std::string& fileType,
                       const std::string& botOwner,
                       int32_t flag) override;

#ifdef LIBJAMI_TEST
    dhtnet::ConnectionManager& connectionManager() { return *connectionManager_; }

    /**
     * Only used for tests, disable sha3sum verification for transfers.
     * @param newValue
     */
    void noSha3sumVerification(bool newValue);

    void publishPresence(bool newValue) { publishPresence_ = newValue; }
#endif

    /**
     * This should be called before flushing the account.
     * ConnectionManager needs the account to exists
     */
    void shutdownConnections();

    std::string_view currentDeviceId() const;

    // Received a new commit notification

    bool handleMessage(const std::shared_ptr<dht::crypto::Certificate>& cert,
                       const std::string& from,
                       const std::pair<std::string, std::string>& message) override;

    void monitor();
    // conversationId optional
    std::vector<std::map<std::string, std::string>> getConnectionList(const std::string& conversationId = "");
    std::vector<std::map<std::string, std::string>> getConversationConnectivity(const std::string& conversationId);
    std::vector<std::map<std::string, std::string>> getConversationTrackedMembers(const std::string& conversationId);
    std::vector<std::map<std::string, std::string>> getChannelList(const std::string& connectionId);

    // File transfer
    void sendFile(const std::string& conversationId,
                  const std::filesystem::path& path,
                  const std::string& name,
                  const std::string& replyTo);

    void transferFile(const std::string& conversationId,
                      const std::string& path,
                      const std::string& deviceId,
                      const std::string& fileId,
                      const std::string& interactionId,
                      size_t start = 0,
                      size_t end = 0,
                      const std::string& sha3Sum = "",
                      uint64_t lastWriteTime = 0,
                      std::function<void()> onFinished = {});

    void askForFileChannel(const std::string& conversationId,
                           const std::string& deviceId,
                           const std::string& interactionId,
                           const std::string& fileId,
                           size_t start = 0,
                           size_t end = 0);

    void askForProfile(const std::string& conversationId, const std::string& deviceId, const std::string& memberUri);

    /**
     * Retrieve linked transfer manager
     * @param id    conversationId or empty for fallback
     * @return linked transfer manager
     */
    std::shared_ptr<TransferManager> dataTransfer(const std::string& id = "");

    /**
     *   Used to get the instance of the ConversationModule class which is
     *  responsible for managing conversations and messages between users.
     * @param noCreate    whether or not to create a new instance
     * @return conversationModule instance
     */
    ConversationModule* convModule(bool noCreation = false);
    SyncModule* syncModule();

    /**
     * Check (via the cache) if we need to send our profile to a specific device
     * @param peerUri       Uri that will receive the profile
     * @param deviceId      Device that will receive the profile
     * @param sha3Sum       SHA3 hash of the profile
     */
    // Note: when swarm will be merged, this can be moved in transferManager
    bool needToSendProfile(const std::string& peerUri, const std::string& deviceId, const std::string& sha3Sum);
    /**
     * Send Profile via cached SIP connection
     * @param convId        Conversation's identifier (can be empty for self profile on sync)
     * @param peerUri       Uri that will receive the profile
     * @param deviceId      Device that will receive the profile
     */
    void sendProfile(const std::string& convId, const std::string& peerUri, const std::string& deviceId);
    /**
     * Send profile via cached SIP connection
     * @param peerUri       Uri that will receive the profile
     * @param deviceId      Device that will receive the profile
     */
    void sendProfile(const std::string& peerUri, const std::string& deviceId);
    /**
     * Clear sent profiles (because of a removed contact or new trust request)
     * @param peerUri       Uri used to clear cache
     */
    void clearProfileCache(const std::string& peerUri);

    std::filesystem::path profilePath() const;

    const std::shared_ptr<AccountManager>& accountManager() { return accountManager_; }

    bool sha3SumVerify() const;

    /**
     * Change certificate's validity period
     * @param pwd       Password for the archive
     * @param id        Certificate to update ({} for updating the whole chain)
     * @param validity  New validity
     * @note forceReloadAccount may be necessary to retrigger the migration
     */
    bool setValidity(std::string_view scheme, const std::string& pwd, const dht::InfoHash& id, int64_t validity);
    /**
     * Try to reload the account to force the identity to be updated
     */
    void forceReloadAccount();

    void reloadContacts();

    /**
     * Make sure appdata/contacts.yml contains correct information
     * @param removedConv   The current removed conversations
     */
    void unlinkConversations(const std::set<std::string>& removedConv);

    bool isValidAccountDevice(const dht::crypto::Certificate& cert) const;

    /**
     * Join incoming call to hosted conference
     * @param callId        The call to join
     * @param destination   conversation/uri/device/confId to join
     */
    void handleIncomingConversationCall(const std::string& callId, const std::string& destination);

    /**
     * The DRT component is composed on some special nodes, that are usually present but not
     * connected. This kind of node corresponds to devices with push notifications & proxy and are
     * stored in the mobile nodes
     */
    bool isMobile() const { return config().proxyEnabled and not config().deviceKey.empty(); }

#ifdef LIBJAMI_TEST
    std::map<Uri::Scheme, std::unique_ptr<ChannelHandlerInterface>>& channelHandlers() { return channelHandlers_; };
#endif

    dhtnet::tls::CertificateStore& certStore() const { return *certStore_; }

    /// Returns true if `peerAccountUri` is an active
    /// contact of this account.
    bool isContact(const std::string& peerAccountUri) const;

    class ServiceManager& serviceManager() { return *serviceManager_; }
    const class ServiceManager& serviceManager() const { return *serviceManager_; }
    bool hasServiceManager() const { return serviceManager_ != nullptr; }

    /* Service-exposure high-level API. Implemented in jamiaccount.cpp. */

    /// Send a discovery query to every known device of `peerUri` and return a
    /// monotonically-increasing request id. Responses are delivered through the
    /// `libjami::ServiceSignal::PeerServicesReceived` signal with this id as
    /// first argument.
    uint32_t queryPeerServices(const std::string& peerUri);

    /// Open a TCP-tunnel listener on 127.0.0.1:`localPort` (0 = pick a free
    /// port) that forwards each accepted connection to `serviceId` on
    /// `peerUri`'s `deviceId`. Returns a tunnel id, or an empty string on
    /// failure. `serviceName` is purely informational.
    std::string openServiceTunnel(const std::string& peerUri,
                                  const std::string& deviceId,
                                  const std::string& serviceId,
                                  const std::string& serviceName,
                                  uint16_t localPort);

    /// Close a tunnel previously created with openServiceTunnel.
    bool closeServiceTunnel(const std::string& tunnelId);

    /// Server-side: shutdown every active inbound tunnel currently serving
    /// `serviceId`. Called when a local exposed service is removed or
    /// disabled so that already-established peer connections are torn down.
    void closeServerTunnelsForService(const std::string& serviceId);

    /// Snapshot of currently active client tunnels for this account.
    std::vector<std::map<std::string, std::string>> getActiveServiceTunnels() const;
    /**
     * Check if a Device is connected
     * @param deviceId
     * @return true if connected
     */
    bool isConnectedWith(const DeviceId& deviceId) const;

    /**
     * Send a presence note
     * @param note
     */
    void sendPresenceNote(const std::string& note);

private:
    NON_COPYABLE(JamiAccount);

    using clock = std::chrono::system_clock;
    using time_point = clock::time_point;

    /**
     * Private structures
     */
    struct PendingCall;
    struct PendingMessage;
    struct DiscoveredPeer;
    class SendMessageContext;

    inline std::string getProxyConfigKey() const
    {
        const auto& conf = config();
        return dht::InfoHash::get(conf.proxyServer + conf.proxyListUrl).toString();
    }

    void scheduleAccountReady() const;
    AccountManager::OnChangeCallback setupAccountCallbacks();

    void onContactAdded(const std::string& uri, bool confirmed);
    void onContactRemoved(const std::string& uri, bool banned);
    void onIncomingTrustRequest(const std::string& uri,
                                const std::string& conversationId,
                                const std::vector<uint8_t>& payload,
                                TimePoint received);
    void onKnownDevicesChanged(const std::map<DeviceId, KnownDevice>& devices);
    void onConversationRequestAccepted(const std::string& conversationId, const std::string& deviceId);
    void onContactConfirmed(const std::string& uri, const std::string& convFromReq);

    void conversationNeedsSyncing(std::shared_ptr<SyncMsg>&& syncMsg);
    uint64_t conversationSendMessage(const std::string& uri,
                                     const DeviceId& device,
                                     const std::map<std::string, std::string>& msg,
                                     uint64_t token = 0);
    void onConversationNeedSocket(const std::string& convId,
                                  const std::string& deviceId,
                                  ChannelCb&& cb,
                                  const std::string& type,
                                  bool noNewSocket = false);
    void onConversationNeedSwarmSocket(const std::string& convId,
                                       const std::string& deviceId,
                                       ChannelCb&& cb,
                                       const std::string& type,
                                       bool noNewSocket = false);
    void conversationOneToOneReceive(const std::string& convId, const std::string& from);

    std::unique_ptr<AccountManager::AccountCredentials> buildAccountCredentials(
        const JamiAccountConfig& conf,
        const dht::crypto::Identity& id,
        const std::string& archive_password_scheme,
        const std::string& archive_password,
        const std::string& archive_path,
        bool& migrating,
        bool& hasPassword);

    void onAuthenticationSuccess(bool migrating,
                                 bool hasPassword,
                                 const AccountInfo& info,
                                 const std::map<std::string, std::string>& configMap,
                                 std::string&& receipt,
                                 std::vector<uint8_t>&& receiptSignature);

    static void onAuthenticationError(const std::weak_ptr<JamiAccount>& w,
                                      bool hadIdentity,
                                      bool migrating,
                                      std::string accountId,
                                      AccountManager::AuthError error,
                                      const std::string& message);

    void onPeerConnected(const std::string& peerId, bool connected);

    void doRegister_();

    void lookupRegisteredName(const std::string& regName, const NameDirectory::Response& response);
    dht::DhtRunner::Config initDhtConfig(const JamiAccountConfig& conf);
    dht::DhtRunner::Context initDhtContext();
    void onAccountDeviceFound(const std::shared_ptr<dht::crypto::Certificate>& crt);
    void onAccountDeviceAnnounced();

    /**
     * Open a sync connection to one of our account's devices. This wakes the
     * device up, so it must only be called when there is something new to
     * synchronize with it (see SyncModule::needsSync / onSyncListChanged).
     */
    void connectSyncDevice(const DeviceId& deviceId);

    /**
     * React to a contact or conversation-list change (local or learned from a
     * peer): bump the local sync version, then (re)connect to and push the new
     * state to the account's other devices that are not up to date. Offline
     * devices are reached on their next presence announcement.
     */
    void onSyncListChanged();

    bool onICERequest(const DeviceId& deviceId);

    /**
     * Pin (or unpin) the account's organization certificate authority in the
     * trust store according to the allowPeersFromTrusted setting.
     */
    void updateTrustedCa();

    bool onChannelRequest(const std::shared_ptr<dht::crypto::Certificate>& cert, const std::string& name);
    void onNewDeviceConnection(const std::shared_ptr<dht::crypto::Certificate>& cert);
    void onConnectionReady(const DeviceId& deviceId,
                           const std::string& name,
                           std::shared_ptr<dhtnet::ChannelSocket> channel);

    const dht::ValueType USER_PROFILE_TYPE = {9, "User profile", std::chrono::hours(24 * 7)};

    void startOutgoingCall(const std::shared_ptr<SIPCall>& call, const std::string& toUri);

    void onConnectedOutgoingCall(const std::shared_ptr<SIPCall>& call, const std::string& to_id, dhtnet::IpAddr target);

    /**
     * Start a SIP Call
     * @param call  The current call
     * @return true if all is correct
     */
    bool SIPStartCall(SIPCall& call, const dhtnet::IpAddr& target);

    /**
     * Update tracking info when buddy appears offline.
     */
    void onTrackedBuddyOffline(const std::string&);

    /**
     * Update tracking info when buddy appears offline.
     */
    void onTrackedBuddyOnline(const std::string&);

    /**
     * Maps require port via UPnP and other async ops
     */
    void registerAsyncOps();
    /**
     * Add port mapping callback function.
     */
    void onPortMappingAdded(uint16_t port_used, bool success);
    void forEachPendingCall(const DeviceId& deviceId, const std::function<void(const std::shared_ptr<SIPCall>&)>& cb);

    void loadAccount(const std::string& archive_password_scheme = {},
                     const std::string& archive_password = {},
                     const std::string& archive_path = {});

    std::vector<std::string> loadBootstrap() const;

    static std::pair<std::string, std::string> saveIdentity(const dht::crypto::Identity& id,
                                                            const std::filesystem::path& path,
                                                            const std::string& name);

    void replyToIncomingIceMsg(const std::shared_ptr<SIPCall>&,
                               const std::shared_ptr<IceTransport>&,
                               const std::shared_ptr<IceTransport>&,
                               const dht::IceCandidates&,
                               const std::shared_ptr<dht::crypto::Certificate>& from_cert,
                               const dht::InfoHash& from);

    void loadCachedUrl(const std::string& url,
                       const std::filesystem::path& cachePath,
                       const std::chrono::seconds& cacheDuration,
                       const std::function<void(const dht::http::Response& response)>& cb);

    std::string getDhtProxyServer(const std::string& serverList);
    void loadCachedProxyServer(std::function<void(const std::string&)> cb);

    void newOutgoingCallHelper(const std::shared_ptr<SIPCall>& call, const Uri& uri);
    std::shared_ptr<SIPCall> newSwarmOutgoingCallHelper(const Uri& uri, const std::vector<libjami::MediaMap>& mediaList);
    std::shared_ptr<SIPCall> createSubCall(const std::shared_ptr<SIPCall>& mainCall);

    std::filesystem::path cachePath_ {};
    std::filesystem::path dataPath_ {};

    mutable std::mutex registeredNameMutex_;
    std::string registeredName_;

    bool setRegisteredName(const std::string& name)
    {
        std::lock_guard<std::mutex> lock(registeredNameMutex_);
        if (registeredName_ != name) {
            registeredName_ = name;
            return true;
        }
        return false;
    }
    std::string getRegisteredName() const
    {
        std::lock_guard<std::mutex> lock(registeredNameMutex_);
        return registeredName_;
    }

    std::shared_ptr<dht::Logger> logger_;
    std::shared_ptr<dhtnet::tls::CertificateStore> certStore_;

    std::unique_ptr<class ServiceManager> serviceManager_;

    /// Per-request state for an in-flight queryPeerServices() call. Defined
    /// out-of-line in jamiaccount.cpp so callers don't need to pull in asio
    /// just to compile this header.
    struct PendingSvcQuery;

    /// Emit the terminal `PeerServicesReceived` signal for `requestId` with
    /// the given status (matching `libjami::ServiceSignal::PeerServicesStatus`)
    /// and JSON payload, then drop the request from the pending tables.
    void finalizeSvcQuery(uint32_t requestId, int status, const std::string& servicesJson);

    /// Build the JSON array describing `peerUri`'s cached services, tagging each
    /// entry's "available" flag from the presence system (a device is available
    /// when it is currently announced online). `forceAvailableDevice`, when
    /// non-null, is always flagged available -- used right after a device
    /// answers a discovery query, before its DHT presence announcement has been
    /// observed. Returns an empty string when the peer has no cached services.
    std::string buildPeerServicesJson(const std::string& peerUri, const DeviceId* forceAvailableDevice = nullptr);

    mutable std::mutex pendingSvcQueriesMtx_;
    std::map<uint32_t, std::shared_ptr<PendingSvcQuery>> pendingSvcQueries_;

    std::shared_ptr<dht::DhtRunner> dht_ {};
    std::shared_ptr<AccountManager> accountManager_;
    dht::crypto::Identity id_ {};

    std::shared_ptr<dht::DhtProxyServer> dhtProxyServer_;

    mutable std::mutex messageMutex_ {};
    std::map<dht::Value::Id, PendingMessage> sentMessages_;
    dhtnet::fileutils::IdList treatedMessages_;

    /* tracked buddies presence */
    std::unique_ptr<PresenceManager> presenceManager_;
    uint64_t presenceListenerToken_ {0};
    uint64_t svcPresenceListenerToken_ {0};

    std::atomic_int syncCnt_ {0};

    /**
     * DHT port actually used.
     * This holds the actual DHT port, which might different from the port
     * set in the configuration. This can be the case if UPnP is used.
     */
    in_port_t dhtPortUsed()
    {
        return (upnpCtrl_ and dhtUpnpMapping_.isValid()) ? dhtUpnpMapping_.getExternalPort() : config().dhtPort;
    }

    /* Current UPNP mapping */
    dhtnet::upnp::Mapping dhtUpnpMapping_ {dhtnet::upnp::PortType::UDP};

    /**
     * Proxy
     */
    std::string proxyServerCached_ {};

    /**
     * Optional: via_addr construct from received parameters
     */
    pjsip_host_port via_addr_ {};

    pjsip_transport* via_tp_ {nullptr};

    /** ConnectionManager is thread-safe.
     * The shared mutex protects the pointer while allowing
     * multiple threads to access the ConnectionManager concurrently  */
    mutable std::shared_mutex connManagerMtx_ {};
    std::unique_ptr<dhtnet::ConnectionManager> connectionManager_;

    virtual void updateUpnpController() override;

    std::mutex discoveryMapMtx_;
    std::shared_ptr<dht::PeerDiscovery> peerDiscovery_;
    std::map<dht::InfoHash, DiscoveredPeer> discoveredPeers_;
    std::map<std::string, std::string> discoveredPeerMap_;

    std::set<std::shared_ptr<dht::http::Request>> requests_;

    mutable std::mutex sipConnsMtx_ {};
    struct SipConnection
    {
        std::shared_ptr<SipTransport> transport;
        // Needs to keep track of that channel to access underlying ICE
        // information, as the SipTransport use a generic transport
        std::shared_ptr<dhtnet::ChannelSocket> channel;
    };
    // NOTE: here we use a vector to avoid race conditions. In fact the contact
    // can ask for a SIP channel when we are creating a new SIP Channel with this
    // peer too.
    std::map<SipConnectionKey, std::vector<SipConnection>> sipConns_;

    std::mutex pendingCallsMutex_;
    std::map<DeviceId, std::vector<std::shared_ptr<SIPCall>>> pendingCalls_;

    std::mutex onConnectionClosedMtx_ {};
    std::map<DeviceId, std::function<void(const DeviceId&, bool)>> onConnectionClosed_ {};
    /**
     * onConnectionClosed contains callbacks that need to be called if a sub call is failing
     * @param deviceId      The device we are calling
     * @param eraseDummy    Erase the dummy call (a temporary subcall that must be stop when we will
     * not create new subcalls)
     */
    void callConnectionClosed(const DeviceId& deviceId, bool eraseDummy);

    /**
     * Ask a device to open a channeled SIP socket
     * @param peerId             The contact who owns the device
     * @param deviceId           The device to ask
     * @param forceNewConnection If we want a new SIP connection
     * @param pc                 A pending call to stop if the request fails
     * @note triggers cacheSIPConnection
     */
    void requestSIPConnection(const std::string& peerId,
                              const DeviceId& deviceId,
                              const std::string& connectionType,
                              bool forceNewConnection = false,
                              const std::shared_ptr<SIPCall>& pc = {});
    /**
     * Store a new SIP connection into sipConnections_
     * @param channel   The new sip channel
     * @param peerId    The contact who owns the device
     * @param deviceId  Device linked to that transport
     */
    void cacheSIPConnection(std::shared_ptr<dhtnet::ChannelSocket>&& channel,
                            const std::string& peerId,
                            const DeviceId& deviceId);
    /**
     * Shutdown a SIP connection
     * @param channel   The channel to close
     * @param peerId    The contact who owns the device
     * @param deviceId  Device linked to that transport
     */
    void shutdownSIPConnection(const std::shared_ptr<dhtnet::ChannelSocket>& channel,
                               const std::string& peerId,
                               const DeviceId& deviceId);

    void requestMessageConnection(const std::string& peerId,
                                  const DeviceId& deviceId,
                                  const std::string& connectionType);

    // File transfers
    std::mutex transfersMtx_ {};
    std::set<std::string> incomingFileTransfers_ {};

    void onMessageSent(
        const std::string& to, uint64_t id, const std::string& deviceId, bool success, bool onlyConnected, bool retry);

    std::mutex gitServersMtx_ {};
    std::map<dht::Value::Id, std::unique_ptr<GitServer>> gitServers_ {};

    //// File transfer (for profiles)
    std::shared_ptr<TransferManager> nonSwarmTransferManager_;

    std::atomic_bool deviceAnnounced_ {false};

    // Debounce timer coalescing bursts of contact/conversation-list changes
    // (e.g. during initial sync) into a single sync-propagation pass.
    std::mutex syncListChangedMtx_;
    std::shared_ptr<asio::steady_timer> syncListChangedTimer_;
    std::atomic_bool noSha3sumVerification_ {false};

    bool publishPresence_ {true};

    std::map<Uri::Scheme, std::unique_ptr<ChannelHandlerInterface>> channelHandlers_ {};

    std::unique_ptr<ConversationModule> convModule_;
    std::mutex moduleMtx_;
    std::unique_ptr<SyncModule> syncModule_;

    std::mutex rdvMtx_;

    int dhtBoundPort_ {0};

    void initConnectionManager();

    enum class PresenceState : int { DISCONNECTED = 0, AVAILABLE, CONNECTED };
    std::map<std::string, PresenceState> presenceState_;
    mutable std::mutex presenceStateMtx_;
    std::string presenceNote_;
};

static inline std::ostream&
operator<<(std::ostream& os, const JamiAccount& acc)
{
    os << "[Account " << acc.getAccountID() << "] ";
    return os;
}

} // namespace jami
