from flask import Flask, request, jsonify, Response, render_template
import json

app = Flask(__name__)

# Rule of Ethical Magic #1: Do no harm
def bookcase_is_blacklisted(bookcase_name):
    return bookcase_name in ["destruction","necromancy"]

# Rule of Ethical Magic #2: Stay true to what is expected of you
def action_is_whitelisted(action_name):
    return action_name in ["list","read"]

# Rule of Ethical Magic #3: Disallow all tomfoolery
def filter_blacklisted_chars(value):
    cleaned_input = ""
    blacklisted_chars = "';`$\"/ \r\n\t*><?[]|&\\#()}{-.~^@!"
    for char in value:
        if char not in blacklisted_chars:
            cleaned_input += char
    return cleaned_input

# Rule of Ethical Magic #4: Be transparent about your work
def list_bookcase(bookcase_name):
    path = "./library/" + bookcase_name + "/index.json"
    try:
        with open(path, 'r') as file:
            return True, "Success!", json.load(file)
    except:
        return False, "Could not identify the contents of this bookcase: " + path, None

# Rule of Ethical Magic #5: Share your knowledge to all who will use it ethically
def read_book(bookcase_name, book_name):
    path = "./library/" + bookcase_name + "/" + book_name + ".json"
    try:
        with open(path, 'r') as file:
            return True, "Success!", json.load(file)
    except:
        return False, "Could not identify the contents of this book: " + path, None

# Rule of Ethical Magic #6: Expect the unexpectable
def validate_user_input(user_input):
    if "action" not in user_input:
        return False, "No action specified", None

    user_input["action"] = user_input["action"].lower()

    if not action_is_whitelisted(user_input["action"]):
        return False, "Only actions 'List' or 'Read' are available", None

    if "bookcase" not in user_input or "book" not in user_input:
        return False, "No bookcase or book specified", None

    user_input["bookcase"] = filter_blacklisted_chars(user_input["bookcase"]).lower()

    if bookcase_is_blacklisted(user_input["bookcase"]):
        return False, "You are trying to access a forbidden bookcase", None

    user_input["book"] = filter_blacklisted_chars(user_input["book"]).lower()

    return True, "Success!", user_input

@app.route('/action', methods=['POST'])
def action():
    if not request.is_json:
        return jsonify({"error": "Request must be JSON"}), 400

    user_input = request.get_json()

    is_valid_input, message, content = validate_user_input(user_input)

    if not is_valid_input:
        return jsonify({"error": message}), 400

    if content["action"] == "list":
        is_successful_list_action, message, bookcase_content = list_bookcase(content["bookcase"])
        if not is_successful_list_action:
            return jsonify({"error": message}), 400
        return bookcase_content

    if content["action"] == "read":
        is_successful_read_action, message, book_content = read_book(content["bookcase"], content["book"])
        if not is_successful_read_action:
            return jsonify({"error": message}), 400
        return book_content

@app.route('/')
def books():
    return render_template('books.html')

@app.route('/read')
def read():
    return render_template('read.html')

@app.route('/code', methods=['GET'])
def code():
    try:
        with open("./app.py", 'r') as f:
            source_code = f.read()
            return Response(source_code, mimetype='text/plain')
    except Exception as e:
        return jsonify({"error": str(e)}), 500

if __name__ == '__main__':
    app.run()