#![doc(html_favicon_url = "https://raw.githubusercontent.com/zng-ui/zng/main/examples/image/res/zng-logo-icon.png")]
#![doc(html_logo_url = "https://raw.githubusercontent.com/zng-ui/zng/main/examples/image/res/zng-logo.png")]
//!
//! Image loading and cache.
//!
//! # Crate
//!
#![doc = include_str!(concat!("../", std::env!("CARGO_PKG_README")))]
#![warn(unused_extern_crates)]
#![warn(missing_docs)]

use std::{
    env,
    future::{Future, IntoFuture},
    mem,
    path::{Path, PathBuf},
    sync::{
        atomic::{AtomicBool, Ordering},
        Arc,
    },
};

use parking_lot::Mutex;
use task::io::AsyncReadExt;
use zng_app::{
    update::EventUpdate,
    view_process::{
        raw_events::{LOW_MEMORY_EVENT, RAW_IMAGE_LOADED_EVENT, RAW_IMAGE_LOAD_ERROR_EVENT, RAW_IMAGE_METADATA_LOADED_EVENT},
        ViewImage, VIEW_PROCESS, VIEW_PROCESS_INITED_EVENT,
    },
    widget::UiTaskWidget,
    AppExtension,
};
use zng_app_context::app_local;
use zng_clone_move::{async_clmv, clmv};
use zng_task as task;

mod types;
pub use types::*;

mod render;
#[doc(inline)]
pub use render::{render_retain, ImageRenderWindowRoot, ImageRenderWindowsService, IMAGES_WINDOW, IMAGE_RENDER};
use zng_layout::unit::{ByteLength, ByteUnits};
use zng_task::UiTask;
use zng_txt::{formatx, ToTxt, Txt};
use zng_unique_id::{IdEntry, IdMap};
use zng_var::{types::WeakArcVar, var, AnyVar, AnyWeakVar, ArcVar, Var, WeakVar};
use zng_view_api::{image::ImageRequest, ipc::IpcBytes, ViewProcessOffline};

/// Application extension that provides an image cache.
///
/// # Services
///
/// Services this extension provides.
///
/// * [`IMAGES`]
#[derive(Default)]
pub struct ImageManager {}
impl AppExtension for ImageManager {
    fn event_preview(&mut self, update: &mut EventUpdate) {
        if let Some(args) = RAW_IMAGE_METADATA_LOADED_EVENT.on(update) {
            let images = IMAGES_SV.read();

            if let Some(var) = images
                .decoding
                .iter()
                .map(|t| &t.image)
                .find(|v| v.with(|img| img.view.get().unwrap() == &args.image))
            {
                var.update();
            }
        } else if let Some(args) = RAW_IMAGE_LOADED_EVENT.on(update) {
            let image = &args.image;

            // image finished decoding, remove from `decoding`
            // and notify image var value update.
            let mut images = IMAGES_SV.write();

            if let Some(i) = images
                .decoding
                .iter()
                .position(|t| t.image.with(|img| img.view.get().unwrap() == image))
            {
                let ImageDecodingTask { image, .. } = images.decoding.swap_remove(i);
                image.update();
                image.with(|img| img.done_signal.set());
            }
        } else if let Some(args) = RAW_IMAGE_LOAD_ERROR_EVENT.on(update) {
            let image = &args.image;

            // image failed to decode, remove from `decoding`
            // and notify image var value update.
            let mut images = IMAGES_SV.write();

            if let Some(i) = images
                .decoding
                .iter()
                .position(|t| t.image.with(|img| img.view.get().unwrap() == image))
            {
                let ImageDecodingTask { image, .. } = images.decoding.swap_remove(i);
                image.update();
                image.with(|img| {
                    img.done_signal.set();

                    if let Some(k) = &img.cache_key {
                        if let Some(e) = images.cache.get(k) {
                            e.error.store(true, Ordering::Relaxed);
                        }
                    }

                    tracing::error!("decode error: {:?}", img.error().unwrap());
                });
            }
        } else if let Some(args) = VIEW_PROCESS_INITED_EVENT.on(update) {
            if !args.is_respawn {
                return;
            }

            let mut images = IMAGES_SV.write();
            let images = &mut *images;
            images.cleanup_not_cached(true);
            images.download_accept.clear();

            let decoding_interrupted = mem::take(&mut images.decoding);
            for (img_var, max_decoded_len, downscale, mask) in images
                .cache
                .values()
                .map(|e| (e.image.clone(), e.max_decoded_len, e.downscale, e.mask))
                .chain(
                    images
                        .not_cached
                        .iter()
                        .filter_map(|e| e.image.upgrade().map(|v| (v, e.max_decoded_len, e.downscale, e.mask))),
                )
            {
                let img = img_var.get();

                if let Some(view) = img.view.get() {
                    if view.generation() == args.generation {
                        continue; // already recovered, can this happen?
                    }
                    if let Some(e) = view.error() {
                        // respawned, but image was an error.
                        img_var.set(Img::dummy(Some(e.to_owned())));
                    } else if let Some(task) = decoding_interrupted.iter().find(|e| e.image.with(|img| img.view() == Some(view))) {
                        // respawned, but image was decoding, need to restart decode.

                        match VIEW_PROCESS.add_image(ImageRequest {
                            format: task.format.clone(),
                            data: task.data.clone(),
                            max_decoded_len: max_decoded_len.0 as u64,
                            downscale,
                            mask,
                        }) {
                            Ok(img) => {
                                img_var.set(Img::new(img));
                            }
                            Err(ViewProcessOffline) => { /*will receive another event.*/ }
                        }
                        images.decoding.push(ImageDecodingTask {
                            format: task.format.clone(),
                            data: task.data.clone(),
                            image: img_var,
                        });
                    } else {
                        // respawned and image was loaded.

                        let img_format = if view.is_mask() {
                            ImageDataFormat::A8 { size: view.size() }
                        } else {
                            ImageDataFormat::Bgra8 {
                                size: view.size(),
                                ppi: view.ppi(),
                            }
                        };

                        let data = view.pixels().unwrap();
                        let img = match VIEW_PROCESS.add_image(ImageRequest {
                            format: img_format.clone(),
                            data: data.clone(),
                            max_decoded_len: max_decoded_len.0 as u64,
                            downscale,
                            mask,
                        }) {
                            Ok(img) => img,
                            Err(ViewProcessOffline) => return, // we will receive another event.
                        };

                        img_var.set(Img::new(img));

                        images.decoding.push(ImageDecodingTask {
                            format: img_format,
                            data,
                            image: img_var,
                        });
                    }
                } // else { *is loading, will continue normally in self.update_preview()* }
            }
        } else if LOW_MEMORY_EVENT.on(update).is_some() {
            IMAGES.clean_all();
        } else {
            self.event_preview_render(update);
        }
    }

    fn update_preview(&mut self) {
        // update loading tasks:

        let mut images = IMAGES_SV.write();
        let mut loading = Vec::with_capacity(images.loading.len());
        let loading_tasks = mem::take(&mut images.loading);
        let mut proxies = mem::take(&mut images.proxies);
        drop(images); // proxies can use IMAGES

        'loading_tasks: for t in loading_tasks {
            t.task.lock().update();
            match t.task.into_inner().into_result() {
                Ok(d) => {
                    match d.r {
                        Ok(data) => {
                            if let Some((key, mode)) = &t.is_data_proxy_source {
                                for proxy in &mut proxies {
                                    if proxy.is_data_proxy() {
                                        if let Some(replaced) = proxy.data(key, &data, &d.format, *mode, t.downscale, t.mask, true) {
                                            replaced.set_bind(&t.image).perm();
                                            t.image.hold(replaced).perm();
                                            continue 'loading_tasks;
                                        }
                                    }
                                }
                            }

                            if VIEW_PROCESS.is_available() {
                                // success and we have a view-process.
                                match VIEW_PROCESS.add_image(ImageRequest {
                                    format: d.format.clone(),
                                    data: data.clone(),
                                    max_decoded_len: t.max_decoded_len.0 as u64,
                                    downscale: t.downscale,
                                    mask: t.mask,
                                }) {
                                    Ok(img) => {
                                        // request sent, add to `decoding` will receive
                                        // `RawImageLoadedEvent` or `RawImageLoadErrorEvent` event
                                        // when done.
                                        t.image.modify(move |v| {
                                            v.to_mut().view.set(img).unwrap();
                                        });
                                    }
                                    Err(ViewProcessOffline) => {
                                        // will recover in ViewProcessInitedEvent
                                    }
                                }
                                IMAGES_SV.write().decoding.push(ImageDecodingTask {
                                    format: d.format,
                                    data,
                                    image: t.image,
                                });
                            } else {
                                // success, but we are only doing `load_in_headless` validation.
                                let img = ViewImage::dummy(None);
                                t.image.modify(move |v| {
                                    let v = v.to_mut();
                                    v.view.set(img).unwrap();
                                    v.done_signal.set();
                                });
                            }
                        }
                        Err(e) => {
                            tracing::error!("load error: {e:?}");
                            // load error.
                            let img = ViewImage::dummy(Some(e));
                            t.image.modify(move |v| {
                                let v = v.to_mut();
                                v.view.set(img).unwrap();
                                v.done_signal.set();
                            });

                            // flag error for user retry
                            if let Some(k) = &t.image.with(|img| img.cache_key) {
                                if let Some(e) = IMAGES_SV.read().cache.get(k) {
                                    e.error.store(true, Ordering::Relaxed);
                                }
                            }
                        }
                    }
                }
                Err(task) => {
                    loading.push(ImageLoadingTask {
                        task: Mutex::new(task),
                        image: t.image,
                        max_decoded_len: t.max_decoded_len,
                        downscale: t.downscale,
                        mask: t.mask,
                        is_data_proxy_source: t.is_data_proxy_source,
                    });
                }
            }
        }
        let mut images = IMAGES_SV.write();
        images.loading = loading;
        images.proxies = proxies;
    }

    fn update(&mut self) {
        self.update_render();
    }
}

app_local! {
    static IMAGES_SV: ImagesService = ImagesService::new();
}

struct ImageLoadingTask {
    task: Mutex<UiTask<ImageData>>,
    image: ArcVar<Img>,
    max_decoded_len: ByteLength,
    downscale: Option<ImageDownscale>,
    mask: Option<ImageMaskMode>,
    is_data_proxy_source: Option<(ImageHash, ImageCacheMode)>,
}

struct ImageDecodingTask {
    format: ImageDataFormat,
    data: IpcBytes,
    image: ArcVar<Img>,
}

struct CacheEntry {
    image: ArcVar<Img>,
    error: AtomicBool,
    max_decoded_len: ByteLength,
    downscale: Option<ImageDownscale>,
    mask: Option<ImageMaskMode>,
}

struct NotCachedEntry {
    image: WeakArcVar<Img>,
    max_decoded_len: ByteLength,
    downscale: Option<ImageDownscale>,
    mask: Option<ImageMaskMode>,
}

struct ImagesService {
    load_in_headless: ArcVar<bool>,
    limits: ArcVar<ImageLimits>,

    download_accept: Txt,
    proxies: Vec<Box<dyn ImageCacheProxy>>,

    loading: Vec<ImageLoadingTask>,
    decoding: Vec<ImageDecodingTask>,
    cache: IdMap<ImageHash, CacheEntry>,
    not_cached: Vec<NotCachedEntry>,

    render: render::ImagesRender,
}
impl ImagesService {
    fn new() -> Self {
        Self {
            load_in_headless: var(false),
            limits: var(ImageLimits::default()),
            proxies: vec![],
            loading: vec![],
            decoding: vec![],
            download_accept: Txt::from_static(""),
            cache: IdMap::new(),
            not_cached: vec![],
            render: render::ImagesRender::default(),
        }
    }

    fn register(
        &mut self,
        key: ImageHash,
        image: ViewImage,
        downscale: Option<ImageDownscale>,
    ) -> std::result::Result<ImageVar, (ViewImage, ImageVar)> {
        let limits = self.limits.get();
        let limits = ImageLimits {
            max_encoded_len: limits.max_encoded_len,
            max_decoded_len: limits.max_decoded_len.max(image.pixels().map(|b| b.len()).unwrap_or(0).bytes()),
            allow_path: PathFilter::BlockAll,
            #[cfg(feature = "http")]
            allow_uri: UriFilter::BlockAll,
        };

        match self.cache.entry(key) {
            IdEntry::Occupied(e) => Err((image, e.get().image.read_only())),
            IdEntry::Vacant(e) => {
                let is_error = image.is_error();
                let is_loading = !is_error && !image.is_loaded();
                let is_mask = image.is_mask();
                let format = if is_mask {
                    ImageDataFormat::A8 { size: image.size() }
                } else {
                    ImageDataFormat::Bgra8 {
                        size: image.size(),
                        ppi: image.ppi(),
                    }
                };
                let img_var = var(Img::new(image));
                if is_loading {
                    self.decoding.push(ImageDecodingTask {
                        format,
                        data: IpcBytes::from_vec(vec![]),
                        image: img_var.clone(),
                    });
                }

                Ok(e.insert(CacheEntry {
                    error: AtomicBool::new(is_error),
                    image: img_var,
                    max_decoded_len: limits.max_decoded_len,
                    downscale,
                    mask: if is_mask { Some(ImageMaskMode::A) } else { None },
                })
                .image
                .read_only())
            }
        }
    }

    fn detach(&mut self, image: ImageVar) -> ImageVar {
        if let Some(key) = &image.with(|i| i.cache_key) {
            let decoded_size = image.with(|img| img.pixels().map(|b| b.len()).unwrap_or(0).bytes());
            let mut max_decoded_len = self.limits.with(|l| l.max_decoded_len.max(decoded_size));
            let mut downscale = None;
            let mut mask = None;

            if let Some(e) = self.cache.get(key) {
                max_decoded_len = e.max_decoded_len;
                downscale = e.downscale;
                mask = e.mask;

                // is cached, `clean` if is only external reference.
                if image.strong_count() == 2 {
                    self.cache.remove(key);
                }
            }

            // remove `cache_key` from image, this clones the `Img` only-if is still in cache.
            let mut img = image.into_value();
            img.cache_key = None;
            let img = var(img);
            self.not_cached.push(NotCachedEntry {
                image: img.downgrade(),
                max_decoded_len,
                downscale,
                mask,
            });
            img.read_only()
        } else {
            // already not cached
            image
        }
    }

    fn proxy_then_remove(mut proxies: Vec<Box<dyn ImageCacheProxy>>, key: &ImageHash, purge: bool) -> bool {
        for proxy in &mut proxies {
            let r = proxy.remove(key, purge);
            match r {
                ProxyRemoveResult::None => continue,
                ProxyRemoveResult::Remove(r, p) => return IMAGES_SV.write().proxied_remove(proxies, &r, p),
                ProxyRemoveResult::Removed => {
                    IMAGES_SV.write().proxies.append(&mut proxies);
                    return true;
                }
            }
        }
        IMAGES_SV.write().proxied_remove(proxies, key, purge)
    }
    fn proxied_remove(&mut self, mut proxies: Vec<Box<dyn ImageCacheProxy>>, key: &ImageHash, purge: bool) -> bool {
        self.proxies.append(&mut proxies);
        if purge || self.cache.get(key).map(|v| v.image.strong_count() > 1).unwrap_or(false) {
            self.cache.remove(key).is_some()
        } else {
            false
        }
    }

    fn proxy_then_get(
        mut proxies: Vec<Box<dyn ImageCacheProxy>>,
        source: ImageSource,
        mode: ImageCacheMode,
        limits: ImageLimits,
        downscale: Option<ImageDownscale>,
        mask: Option<ImageMaskMode>,
    ) -> ImageVar {
        let source = match source {
            ImageSource::Read(path) => {
                let path = crate::absolute_path(&path, || env::current_dir().expect("could not access current dir"), true);
                if !limits.allow_path.allows(&path) {
                    let error = formatx!("limits filter blocked `{}`", path.display());
                    tracing::error!("{error}");
                    IMAGES_SV.write().proxies.append(&mut proxies);
                    return var(Img::dummy(Some(error))).read_only();
                }
                ImageSource::Read(path)
            }
            #[cfg(feature = "http")]
            ImageSource::Download(uri, accepts) => {
                if !limits.allow_uri.allows(&uri) {
                    let error = formatx!("limits filter blocked `{uri}`");
                    tracing::error!("{error}");
                    IMAGES_SV.write().proxies.append(&mut proxies);
                    return var(Img::dummy(Some(error))).read_only();
                }
                ImageSource::Download(uri, accepts)
            }
            ImageSource::Image(r) => {
                IMAGES_SV.write().proxies.append(&mut proxies);
                return r;
            }
            source => source,
        };

        let key = source.hash128(downscale, mask).unwrap();
        for proxy in &mut proxies {
            if proxy.is_data_proxy() && !matches!(source, ImageSource::Data(_, _, _) | ImageSource::Static(_, _, _)) {
                continue;
            }

            let r = proxy.get(&key, &source, mode, downscale, mask);
            match r {
                ProxyGetResult::None => continue,
                ProxyGetResult::Cache(source, mode, downscale, mask) => {
                    return IMAGES_SV.write().proxied_get(
                        proxies,
                        source.hash128(downscale, mask).unwrap(),
                        source,
                        mode,
                        limits,
                        downscale,
                        mask,
                    )
                }
                ProxyGetResult::Image(img) => {
                    IMAGES_SV.write().proxies.append(&mut proxies);
                    return img;
                }
            }
        }
        IMAGES_SV.write().proxied_get(proxies, key, source, mode, limits, downscale, mask)
    }
    #[allow(clippy::too_many_arguments)]
    fn proxied_get(
        &mut self,
        mut proxies: Vec<Box<dyn ImageCacheProxy>>,
        key: ImageHash,
        source: ImageSource,
        mode: ImageCacheMode,
        limits: ImageLimits,
        downscale: Option<ImageDownscale>,
        mask: Option<ImageMaskMode>,
    ) -> ImageVar {
        self.proxies.append(&mut proxies);
        match mode {
            ImageCacheMode::Cache => {
                if let Some(v) = self.cache.get(&key) {
                    return v.image.read_only();
                }
            }
            ImageCacheMode::Retry => {
                if let Some(e) = self.cache.get(&key) {
                    if !e.error.load(Ordering::Relaxed) {
                        return e.image.read_only();
                    }
                }
            }
            ImageCacheMode::Ignore | ImageCacheMode::Reload => {}
        }

        if !VIEW_PROCESS.is_available() && !self.load_in_headless.get() {
            tracing::warn!("loading dummy image, set `load_in_headless=true` to actually load without renderer");

            let dummy = var(Img::new(ViewImage::dummy(None)));
            self.cache.insert(
                key,
                CacheEntry {
                    image: dummy.clone(),
                    error: AtomicBool::new(false),
                    max_decoded_len: limits.max_decoded_len,
                    downscale,
                    mask,
                },
            );
            return dummy.read_only();
        }

        let max_encoded_size = limits.max_encoded_len;

        match source {
            ImageSource::Read(path) => self.load_task(
                key,
                mode,
                limits.max_decoded_len,
                downscale,
                mask,
                true,
                task::run(async move {
                    let mut r = ImageData {
                        format: path
                            .extension()
                            .and_then(|e| e.to_str())
                            .map(|s| ImageDataFormat::FileExtension(Txt::from_str(s)))
                            .unwrap_or(ImageDataFormat::Unknown),
                        r: Err(Txt::from_static("")),
                    };

                    let mut file = match task::fs::File::open(path).await {
                        Ok(f) => f,
                        Err(e) => {
                            r.r = Err(e.to_txt());
                            return r;
                        }
                    };

                    let len = match file.metadata().await {
                        Ok(m) => m.len() as usize,
                        Err(e) => {
                            r.r = Err(e.to_txt());
                            return r;
                        }
                    };

                    if len > max_encoded_size.0 {
                        r.r = Err(formatx!("file size `{}` exceeds the limit of `{max_encoded_size}`", len.bytes()));
                        return r;
                    }

                    let mut data = Vec::with_capacity(len);
                    r.r = match file.read_to_end(&mut data).await {
                        Ok(_) => Ok(IpcBytes::from_vec(data)),
                        Err(e) => Err(e.to_txt()),
                    };

                    r
                }),
            ),
            #[cfg(feature = "http")]
            ImageSource::Download(uri, accept) => {
                let accept = accept.unwrap_or_else(|| self.download_accept());

                self.load_task(
                    key,
                    mode,
                    limits.max_decoded_len,
                    downscale,
                    mask,
                    true,
                    task::run(async move {
                        let mut r = ImageData {
                            format: ImageDataFormat::Unknown,
                            r: Err(Txt::from_static("")),
                        };

                        let request = task::http::Request::get(uri)
                            .unwrap()
                            .header(task::http::header::ACCEPT, accept.as_str())
                            .unwrap()
                            .max_length(max_encoded_size)
                            .build();

                        match task::http::send(request).await {
                            Ok(mut rsp) => {
                                if let Some(m) = rsp.headers().get(&task::http::header::CONTENT_TYPE).and_then(|v| v.to_str().ok()) {
                                    let m = m.to_lowercase();
                                    if m.starts_with("image/") {
                                        r.format = ImageDataFormat::MimeType(Txt::from_str(&m));
                                    }
                                }

                                match rsp.bytes().await {
                                    Ok(d) => r.r = Ok(IpcBytes::from_vec(d)),
                                    Err(e) => {
                                        r.r = Err(formatx!("download error: {e}"));
                                    }
                                }

                                let _ = rsp.consume().await;
                            }
                            Err(e) => {
                                r.r = Err(formatx!("request error: {e}"));
                            }
                        }

                        r
                    }),
                )
            }
            ImageSource::Static(_, bytes, fmt) => {
                let r = ImageData {
                    format: fmt,
                    r: Ok(IpcBytes::from_slice(bytes)),
                };
                self.load_task(key, mode, limits.max_decoded_len, downscale, mask, false, async { r })
            }
            ImageSource::Data(_, bytes, fmt) => {
                let r = ImageData {
                    format: fmt,
                    r: Ok(IpcBytes::from_slice(&bytes)),
                };
                self.load_task(key, mode, limits.max_decoded_len, downscale, mask, false, async { r })
            }
            ImageSource::Render(rfn, args) => {
                let img = self.new_cache_image(key, mode, limits.max_decoded_len, downscale, mask);
                self.render_img(mask, clmv!(rfn, || rfn(&args.unwrap_or_default())), &img);
                img.read_only()
            }
            ImageSource::Image(_) => unreachable!(),
        }
    }

    #[cfg(feature = "http")]
    fn download_accept(&mut self) -> Txt {
        if self.download_accept.is_empty() {
            if VIEW_PROCESS.is_available() {
                let mut r = String::new();
                let mut sep = "";
                for fmt in VIEW_PROCESS.image_decoders().unwrap_or_default() {
                    r.push_str(sep);
                    r.push_str("image/");
                    r.push_str(&fmt);
                    sep = ",";
                }
            }
            if self.download_accept.is_empty() {
                self.download_accept = "image/*".into();
            }
        }
        self.download_accept.clone()
    }

    fn cleanup_not_cached(&mut self, force: bool) {
        if force || self.not_cached.len() > 1000 {
            self.not_cached.retain(|c| c.image.strong_count() > 0);
        }
    }

    fn new_cache_image(
        &mut self,
        key: ImageHash,
        mode: ImageCacheMode,
        max_decoded_len: ByteLength,
        downscale: Option<ImageDownscale>,
        mask: Option<ImageMaskMode>,
    ) -> ArcVar<Img> {
        self.cleanup_not_cached(false);

        if let ImageCacheMode::Reload = mode {
            self.cache
                .entry(key)
                .or_insert_with(|| CacheEntry {
                    image: var(Img::new_none(Some(key))),
                    error: AtomicBool::new(false),
                    max_decoded_len,
                    downscale,
                    mask,
                })
                .image
                .clone()
        } else if let ImageCacheMode::Ignore = mode {
            let img = var(Img::new_none(None));
            self.not_cached.push(NotCachedEntry {
                image: img.downgrade(),
                max_decoded_len,
                downscale,
                mask,
            });
            img
        } else {
            let img = var(Img::new_none(Some(key)));
            self.cache.insert(
                key,
                CacheEntry {
                    image: img.clone(),
                    error: AtomicBool::new(false),
                    max_decoded_len,
                    downscale,
                    mask,
                },
            );
            img
        }
    }

    /// The `fetch_bytes` future is polled in the UI thread, use `task::run` for futures that poll a lot.
    #[allow(clippy::too_many_arguments)]
    fn load_task(
        &mut self,
        key: ImageHash,
        mode: ImageCacheMode,
        max_decoded_len: ByteLength,
        downscale: Option<ImageDownscale>,
        mask: Option<ImageMaskMode>,
        is_data_proxy_source: bool,
        fetch_bytes: impl Future<Output = ImageData> + Send + 'static,
    ) -> ImageVar {
        let img = self.new_cache_image(key, mode, max_decoded_len, downscale, mask);
        let r = img.read_only();

        self.loading.push(ImageLoadingTask {
            task: Mutex::new(UiTask::new(None, fetch_bytes)),
            image: img,
            max_decoded_len,
            downscale,
            mask,
            is_data_proxy_source: if is_data_proxy_source { Some((key, mode)) } else { None },
        });
        zng_app::update::UPDATES.update(None);

        r
    }
}

/// Image loading, cache and render service.
///
/// If the app is running without a [`VIEW_PROCESS`] all images are dummy, see [`load_in_headless`] for
/// details.
///
/// [`load_in_headless`]: IMAGES::load_in_headless
/// [`VIEW_PROCESS`]: zng_app::view_process::VIEW_PROCESS
pub struct IMAGES;
impl IMAGES {
    /// If should still download/read image bytes in headless/renderless mode.
    ///
    /// When an app is in headless mode without renderer no [`VIEW_PROCESS`] is available, so
    /// images cannot be decoded, in this case all images are the [`dummy`] image and no attempt
    /// to download/read the image files is made. You can enable loading in headless tests to detect
    /// IO errors, in this case if there is an error acquiring the image file the image will be a
    /// [`dummy`] with error.
    ///
    /// [`dummy`]: IMAGES::dummy
    /// [`VIEW_PROCESS`]: zng_app::view_process::VIEW_PROCESS
    pub fn load_in_headless(&self) -> ArcVar<bool> {
        IMAGES_SV.read().load_in_headless.clone()
    }

    /// Default loading and decoding limits for each image.
    pub fn limits(&self) -> ArcVar<ImageLimits> {
        IMAGES_SV.read().limits.clone()
    }

    /// Returns a dummy image that reports it is loaded or an error.
    pub fn dummy(&self, error: Option<Txt>) -> ImageVar {
        var(Img::dummy(error)).read_only()
    }

    /// Cache or load an image file from a file system `path`.
    pub fn read(&self, path: impl Into<PathBuf>) -> ImageVar {
        self.cache(path.into())
    }

    /// Get a cached `uri` or download it.
    ///
    /// Optionally define the HTTP ACCEPT header, if not set all image formats supported by the view-process
    /// backend are accepted.
    #[cfg(feature = "http")]
    pub fn download(&self, uri: impl task::http::TryUri, accept: Option<Txt>) -> ImageVar {
        match uri.try_uri() {
            Ok(uri) => self.cache(ImageSource::Download(uri, accept)),
            Err(e) => self.dummy(Some(e.to_txt())),
        }
    }

    /// Get a cached image from `&'static [u8]` data.
    ///
    /// The data can be any of the formats described in [`ImageDataFormat`].
    ///
    /// The image key is a [`ImageHash`] of the image data.
    ///
    /// # Examples
    ///
    /// Get an image from a PNG file embedded in the app executable using [`include_bytes!`].
    ///
    /// ```
    /// # use zng_ext_image::*;
    /// # macro_rules! include_bytes { ($tt:tt) => { &[] } }
    /// # fn demo() {
    /// let image_var = IMAGES.from_static(include_bytes!("ico.png"), "png");
    /// # }
    pub fn from_static(&self, data: &'static [u8], format: impl Into<ImageDataFormat>) -> ImageVar {
        self.cache((data, format.into()))
    }

    /// Get a cached image from shared data.
    ///
    /// The image key is a [`ImageHash`] of the image data. The data reference is held only until the image is decoded.
    ///
    /// The data can be any of the formats described in [`ImageDataFormat`].
    pub fn from_data(&self, data: Arc<Vec<u8>>, format: impl Into<ImageDataFormat>) -> ImageVar {
        self.cache((data, format.into()))
    }

    /// Get a cached image or add it to the cache.
    pub fn cache(&self, source: impl Into<ImageSource>) -> ImageVar {
        self.image(source, ImageCacheMode::Cache, None, None, None)
    }

    /// Get a cached image or add it to the cache or retry if the cached image is an error.
    pub fn retry(&self, source: impl Into<ImageSource>) -> ImageVar {
        self.image(source, ImageCacheMode::Retry, None, None, None)
    }

    /// Load an image, if it was already cached update the cached image with the reloaded data.
    pub fn reload(&self, source: impl Into<ImageSource>) -> ImageVar {
        self.image(source, ImageCacheMode::Reload, None, None, None)
    }

    /// Get or load an image.
    ///
    /// If `limits` is `None` the [`IMAGES.limits`] is used.
    ///
    /// [`IMAGES.limits`]: IMAGES::limits
    pub fn image(
        &self,
        source: impl Into<ImageSource>,
        cache_mode: impl Into<ImageCacheMode>,
        limits: Option<ImageLimits>,
        downscale: Option<ImageDownscale>,
        mask: Option<ImageMaskMode>,
    ) -> ImageVar {
        let limits = limits.unwrap_or_else(|| IMAGES_SV.read().limits.get());
        let proxies = mem::take(&mut IMAGES_SV.write().proxies);
        ImagesService::proxy_then_get(proxies, source.into(), cache_mode.into(), limits, downscale, mask)
    }

    /// Await for an image source, then get or load the image.
    ///
    /// If `limits` is `None` the [`IMAGES.limits`] is used.
    ///
    /// This method returns immediately with a loading [`ImageVar`], when `source` is ready it
    /// is used to get the actual [`ImageVar`] and binds it to the returned image.
    ///
    /// Note that the `cache_mode` always applies to the inner image, and only to the return image if `cache_key` is set.
    ///
    /// [`IMAGES.limits`]: IMAGES::limits
    pub fn image_task<F>(
        &self,
        source: impl IntoFuture<IntoFuture = F>,
        cache_mode: impl Into<ImageCacheMode>,
        cache_key: Option<ImageHash>,
        limits: Option<ImageLimits>,
        downscale: Option<ImageDownscale>,
        mask: Option<ImageMaskMode>,
    ) -> ImageVar
    where
        F: Future<Output = ImageSource> + Send + 'static,
    {
        let cache_mode = cache_mode.into();

        if let Some(key) = cache_key {
            match cache_mode {
                ImageCacheMode::Cache => {
                    if let Some(v) = IMAGES_SV.read().cache.get(&key) {
                        return v.image.read_only();
                    }
                }
                ImageCacheMode::Retry => {
                    if let Some(e) = IMAGES_SV.read().cache.get(&key) {
                        if !e.error.load(Ordering::Relaxed) {
                            return e.image.read_only();
                        }
                    }
                }
                ImageCacheMode::Ignore | ImageCacheMode::Reload => {}
            }
        }

        let source = source.into_future();
        let img = var(Img::new_none(cache_key));

        task::spawn(async_clmv!(img, {
            let source = source.await;
            let actual_img = IMAGES.image(source, cache_mode, limits, downscale, mask);
            actual_img.set_bind(&img).perm();
            img.hold(actual_img).perm();
        }));
        img.read_only()
    }

    /// Associate the `image` with the `key` in the cache.
    ///
    /// Returns `Ok(ImageVar)` with the new image var that tracks `image`, or `Err(ViewImage, ImageVar)`
    /// that returns the `image` and a clone of the var already associated with the `key`.
    pub fn register(&self, key: ImageHash, image: ViewImage) -> std::result::Result<ImageVar, (ViewImage, ImageVar)> {
        IMAGES_SV.write().register(key, image, None)
    }

    /// Remove the image from the cache, if it is only held by the cache.
    ///
    /// You can use [`ImageSource::hash128_read`] and [`ImageSource::hash128_download`] to get the `key`
    /// for files or downloads.
    ///
    /// Returns `true` if the image was removed.
    pub fn clean(&self, key: ImageHash) -> bool {
        ImagesService::proxy_then_remove(mem::take(&mut IMAGES_SV.write().proxies), &key, false)
    }

    /// Remove the image from the cache, even if it is still referenced outside of the cache.
    ///
    /// You can use [`ImageSource::hash128_read`] and [`ImageSource::hash128_download`] to get the `key`
    /// for files or downloads.
    ///
    /// Returns `true` if the image was cached.
    pub fn purge(&self, key: &ImageHash) -> bool {
        ImagesService::proxy_then_remove(mem::take(&mut IMAGES_SV.write().proxies), key, true)
    }

    /// Gets the cache key of an image.
    pub fn cache_key(&self, image: &Img) -> Option<ImageHash> {
        if let Some(key) = &image.cache_key {
            if IMAGES_SV.read().cache.contains_key(key) {
                return Some(*key);
            }
        }
        None
    }

    /// If the image is cached.
    pub fn is_cached(&self, image: &Img) -> bool {
        image
            .cache_key
            .as_ref()
            .map(|k| IMAGES_SV.read().cache.contains_key(k))
            .unwrap_or(false)
    }

    /// Returns an image that is not cached.
    ///
    /// If the `image` is the only reference returns it and removes it from the cache. If there are other
    /// references a new [`ImageVar`] is generated from a clone of the image.
    pub fn detach(&self, image: ImageVar) -> ImageVar {
        IMAGES_SV.write().detach(image)
    }

    /// Clear cached images that are not referenced outside of the cache.
    pub fn clean_all(&self) {
        let mut img = IMAGES_SV.write();
        img.proxies.iter_mut().for_each(|p| p.clear(false));
        img.cache.retain(|_, v| v.image.strong_count() > 1);
    }

    /// Clear all cached images, including images that are still referenced outside of the cache.
    ///
    /// Image memory only drops when all strong references are removed, so if an image is referenced
    /// outside of the cache it will merely be disconnected from the cache by this method.
    pub fn purge_all(&self) {
        let mut img = IMAGES_SV.write();
        img.cache.clear();
        img.proxies.iter_mut().for_each(|p| p.clear(true));
    }

    /// Add a cache proxy.
    ///
    /// Proxies can intercept cache requests and map to a different request or return an image directly.
    pub fn install_proxy(&self, proxy: Box<dyn ImageCacheProxy>) {
        IMAGES_SV.write().proxies.push(proxy);
    }

    /// Image format decoders implemented by the current view-process.
    pub fn available_decoders(&self) -> Vec<Txt> {
        VIEW_PROCESS.image_decoders().unwrap_or_default()
    }

    /// Image format encoders implemented by the current view-process.
    pub fn available_encoders(&self) -> Vec<Txt> {
        VIEW_PROCESS.image_encoders().unwrap_or_default()
    }
}
struct ImageData {
    format: ImageDataFormat,
    r: std::result::Result<IpcBytes, Txt>,
}

fn absolute_path(path: &Path, base: impl FnOnce() -> PathBuf, allow_escape: bool) -> PathBuf {
    if path.is_absolute() {
        normalize_path(path)
    } else {
        let mut dir = base();
        if allow_escape {
            dir.push(path);
            normalize_path(&dir)
        } else {
            dir.push(normalize_path(path));
            dir
        }
    }
}
/// Resolves `..` components, without any system request.
///
/// Source: https://github.com/rust-lang/cargo/blob/fede83ccf973457de319ba6fa0e36ead454d2e20/src/cargo/util/paths.rs#L61
fn normalize_path(path: &Path) -> PathBuf {
    use std::path::Component;

    let mut components = path.components().peekable();
    let mut ret = if let Some(c @ Component::Prefix(..)) = components.peek().cloned() {
        components.next();
        PathBuf::from(c.as_os_str())
    } else {
        PathBuf::new()
    };

    for component in components {
        match component {
            Component::Prefix(..) => unreachable!(),
            Component::RootDir => {
                ret.push(component.as_os_str());
            }
            Component::CurDir => {}
            Component::ParentDir => {
                ret.pop();
            }
            Component::Normal(c) => {
                ret.push(c);
            }
        }
    }
    ret
}