package loopd

import (
	"context"
	"crypto/tls"
	"errors"
	"fmt"
	"maps"
	"net"
	"net/http"
	"strings"
	"sync"
	"sync/atomic"
	"time"

	proxy "github.com/grpc-ecosystem/grpc-gateway/v2/runtime"
	"github.com/lightninglabs/lndclient"
	"github.com/lightninglabs/loop"
	"github.com/lightninglabs/loop/assets"
	"github.com/lightninglabs/loop/instantout"
	"github.com/lightninglabs/loop/instantout/reservation"
	"github.com/lightninglabs/loop/loopdb"
	loop_looprpc "github.com/lightninglabs/loop/looprpc"
	"github.com/lightninglabs/loop/notifications"
	"github.com/lightninglabs/loop/staticaddr/address"
	"github.com/lightninglabs/loop/staticaddr/deposit"
	"github.com/lightninglabs/loop/staticaddr/loopin"
	"github.com/lightninglabs/loop/staticaddr/openchannel"
	"github.com/lightninglabs/loop/staticaddr/withdraw"
	loop_swaprpc "github.com/lightninglabs/loop/swapserverrpc"
	"github.com/lightninglabs/loop/sweepbatcher"
	"github.com/lightninglabs/taproot-assets/taprpc"
	"github.com/lightningnetwork/lnd/clock"
	"github.com/lightningnetwork/lnd/lntypes"
	"github.com/lightningnetwork/lnd/macaroons"
	bbolterrors "go.etcd.io/bbolt/errors"
	"google.golang.org/grpc"
	"google.golang.org/protobuf/encoding/protojson"
	"gopkg.in/macaroon-bakery.v2/bakery"
)

var (
	// maxMsgRecvSize is the largest message our REST proxy will receive. We
	// set this to 200MiB atm.
	maxMsgRecvSize = grpc.MaxCallRecvMsgSize(1 * 1024 * 1024 * 200)

	// errOnlyStartOnce is the error that is returned if the daemon is
	// started more than once.
	errOnlyStartOnce = fmt.Errorf("daemon can only be started once")
)

// shouldReportManagerErr determines whether a manager error should be forwarded
// to the internal error channel. Context cancellations are treated as
// non-fatal.
func shouldReportManagerErr(err error) bool {
	return err != nil && !errors.Is(err, context.Canceled)
}

// ListenerCfg holds closures used to retrieve listeners for the gRPC services.
type ListenerCfg struct {
	// grpcListener returns a TLS listener to use for the gRPC server, based
	// on the passed TLS configuration.
	grpcListener func(*tls.Config) (net.Listener, error)

	// restListener returns a TLS listener to use for the REST proxy, based
	// on the passed TLS configuration.
	restListener func(*tls.Config) (net.Listener, error)

	// getLnd returns a grpc connection to a lnd instance.
	getLnd func(lndclient.Network, *lndConfig) (*lndclient.GrpcLndServices,
		error)
}

// Daemon is the struct that holds one instance of the loop client daemon.
type Daemon struct {
	// swapClientServer is the embedded RPC server that satisfies the client
	// RPC interface. We embed this struct so the Daemon itself can be
	// registered to an existing grpc.Server to run as a subserver in the
	// same process.
	swapClientServer

	started atomic.Bool

	// ErrChan is an error channel that users of the Daemon struct must use
	// to detect runtime errors and also whether a shutdown is fully
	// completed.
	ErrChan chan error

	cfg             *Config
	listenerCfg     *ListenerCfg
	internalErrChan chan error

	lnd           *lndclient.GrpcLndServices
	assetClient   *assets.TapdClient
	clientCleanup func()

	wg       sync.WaitGroup
	quit     chan struct{}
	stopOnce sync.Once

	mainCtx       context.Context
	mainCtxCancel func()

	grpcServer    *grpc.Server
	grpcListener  net.Listener
	restServer    *http.Server
	restListener  net.Listener
	restCtxCancel func()

	macaroonService *lndclient.MacaroonService
}

// New creates a new instance of the loop client daemon.
func New(config *Config, lisCfg *ListenerCfg) *Daemon {
	return &Daemon{
		// We send exactly one error on this channel if something goes
		// wrong at runtime. Or a nil value if the shutdown was
		// successful. But in case nobody's listening, we don't want to
		// block on it, so we buffer it.
		ErrChan: make(chan error, 1),

		quit:        make(chan struct{}),
		cfg:         config,
		listenerCfg: lisCfg,

		// We have 4 goroutines that could potentially send an error.
		// We react on the first error but in case more than one exits
		// with an error we don't want them to block.
		internalErrChan: make(chan error, 4),
	}
}

// Start starts loopd in daemon mode. It will listen for grpc connections,
// execute commands and pass back swap status information.
func (d *Daemon) Start() error {
	// There should be no reason to start the daemon twice. Therefore,
	// return an error if that's tried. This is mostly to guard against
	// Start and StartAsSubserver both being called.
	if !d.started.CompareAndSwap(false, true) {
		return errOnlyStartOnce
	}

	network := lndclient.Network(d.cfg.Network)

	var err error
	d.lnd, err = d.listenerCfg.getLnd(network, d.cfg.Lnd)
	if err != nil {
		return err
	}

	// Initialize the assets client.
	if d.cfg.Tapd.Activate {
		d.assetClient, err = assets.NewTapdClient(d.cfg.Tapd)
		if err != nil {
			return err
		}
	}

	// With lnd connected, initialize everything else, such as the swap
	// server client, the swap client RPC server instance and our main swap
	// and error handlers. If this fails, then nothing has been started yet,
	// and we can just return the error.
	err = d.initialize(true)
	if errors.Is(err, bbolterrors.ErrTimeout) {
		// We're trying to be started as a standalone Loop daemon, most
		// likely LiT is already running and blocking the DB
		return fmt.Errorf("%v: make sure no other loop daemon process "+
			"(standalone or embedded in lightning-terminal) is"+
			"running", err)
	}
	if err != nil {
		return err
	}

	// If we get here, we already have started several goroutines. So if
	// anything goes wrong now, we need to cleanly shut down again.
	startErr := d.startWebServers()
	if startErr != nil {
		errorf("Error while starting daemon: %v", startErr)
		d.Stop()
		stopErr := <-d.ErrChan
		if stopErr != nil {
			errorf("Error while stopping daemon: %v", stopErr)
		}
		return startErr
	}

	return nil
}

// StartAsSubserver is an alternative to Start where the RPC server does not
// create its own gRPC server but registers to an existing one. The same goes
// for REST (if enabled), instead of creating an own mux and HTTP server, we
// register to an existing one.
func (d *Daemon) StartAsSubserver(lndGrpc *lndclient.GrpcLndServices,
	withMacaroonService bool) error {

	// There should be no reason to start the daemon twice. Therefore,
	// return an error if that's tried. This is mostly to guard against
	// Start and StartAsSubserver both being called.
	if !d.started.CompareAndSwap(false, true) {
		return errOnlyStartOnce
	}

	// When starting as a subserver, we get passed in an already established
	// connection to lnd that might be shared among other subservers.
	d.lnd = lndGrpc

	// With lnd already pre-connected, initialize everything else, such as
	// the swap server client, the RPC server instance and our main swap
	// handlers. If this fails, then nothing has been started yet, and we
	// can just return the error.
	err := d.initialize(withMacaroonService)
	if errors.Is(err, bbolterrors.ErrTimeout) {
		// We're trying to be started inside LiT so there most likely is
		// another standalone Loop process blocking the DB.
		return fmt.Errorf("%v: make sure no other loop daemon "+
			"process is running", err)
	}
	return err
}

// ValidateMacaroon extracts the macaroon from the context's gRPC metadata,
// checks its signature, makes sure all specified permissions for the called
// method are contained within and finally ensures all caveat conditions are
// met. A non-nil error is returned if any of the checks fail. This method is
// needed to enable loopd running as an external subserver in the same process
// as lnd but still validate its own macaroons.
func (d *Daemon) ValidateMacaroon(ctx context.Context,
	requiredPermissions []bakery.Op, fullMethod string) error {

	if d.macaroonService == nil {
		return fmt.Errorf("macaroon service has not been initialised")
	}

	// Delegate the call to loop's own macaroon validator service.
	return d.macaroonService.ValidateMacaroon(
		ctx, requiredPermissions, fullMethod,
	)
}

// startWebServers starts the gRPC and REST servers in goroutines.
func (d *Daemon) startWebServers() error {
	var err error

	// With our client created, let's now finish setting up and start our
	// RPC server. First we add the security interceptor to our gRPC server
	// options that checks the macaroons for validity.
	unaryInterceptor, streamInterceptor, err := d.macaroonService.Interceptors()
	if err != nil {
		return fmt.Errorf("error with macaroon interceptor: %v", err)
	}
	d.grpcServer = grpc.NewServer(
		grpc.UnaryInterceptor(unaryInterceptor),
		grpc.StreamInterceptor(streamInterceptor),
	)
	loop_looprpc.RegisterSwapClientServer(d.grpcServer, d)

	// Register our debug server if it is compiled in.
	d.registerDebugServer()

	// Next, start the gRPC server listening for HTTP/2 connections.
	infof("Starting gRPC listener")
	serverTLSCfg, restClientCreds, err := getTLSConfig(d.cfg)
	if err != nil {
		return fmt.Errorf("could not create gRPC server options: %v",
			err)
	}
	d.grpcListener, err = d.listenerCfg.grpcListener(serverTLSCfg)
	if err != nil {
		return fmt.Errorf("RPC server unable to listen on %s: %v",
			d.cfg.RPCListen, err)
	}

	// The default JSON marshaler of the REST proxy only sets OrigName to
	// true, which instructs it to use the same field names as specified in
	// the proto file and not switch to camel case. What we also want is
	// that the marshaler prints all values, even if they are falsey.
	customMarshalerOption := proxy.WithMarshalerOption(
		proxy.MIMEWildcard, &proxy.JSONPb{
			MarshalOptions: protojson.MarshalOptions{
				UseProtoNames:   true,
				EmitUnpopulated: true,
			},
		},
	)

	// We'll also create and start an accompanying proxy to serve clients
	// through REST.
	ctx, cancel := context.WithCancel(context.Background())
	d.restCtxCancel = cancel
	mux := proxy.NewServeMux(customMarshalerOption)
	var restHandler http.Handler = mux
	if d.cfg.CORSOrigin != "" {
		restHandler = allowCORS(restHandler, d.cfg.CORSOrigin)
	}
	proxyOpts := []grpc.DialOption{
		grpc.WithTransportCredentials(*restClientCreds),
		grpc.WithDefaultCallOptions(maxMsgRecvSize),
	}

	// With TLS enabled by default, we cannot call 0.0.0.0 internally from
	// the REST proxy as that IP address isn't in the cert. We need to
	// rewrite it to the loopback address.
	restProxyDest := d.cfg.RPCListen
	switch {
	case strings.Contains(restProxyDest, "0.0.0.0"):
		restProxyDest = strings.Replace(
			restProxyDest, "0.0.0.0", "127.0.0.1", 1,
		)

	case strings.Contains(restProxyDest, "[::]"):
		restProxyDest = strings.Replace(
			restProxyDest, "[::]", "[::1]", 1,
		)
	}
	err = loop_looprpc.RegisterSwapClientHandlerFromEndpoint(
		ctx, mux, restProxyDest, proxyOpts,
	)
	if err != nil {
		return err
	}

	d.restListener, err = d.listenerCfg.restListener(serverTLSCfg)
	if err != nil {
		return fmt.Errorf("REST proxy unable to listen on %s: %v",
			d.cfg.RESTListen, err)
	}

	// A nil listener indicates REST is disabled.
	if d.restListener != nil {
		infof("Starting REST proxy listener")

		d.restServer = &http.Server{
			Handler:           restHandler,
			ReadHeaderTimeout: 5 * time.Second,
		}

		d.wg.Go(func() {
			infof("REST proxy listening on %s",
				d.restListener.Addr())
			err := d.restServer.Serve(d.restListener)
			// ErrServerClosed is always returned when the proxy is
			// shut down, so don't log it.
			if err != nil && !errors.Is(err, http.ErrServerClosed) {
				// Notify the main error handler goroutine that
				// we exited unexpectedly here. We don't have to
				// worry about blocking as the internal error
				// channel is sufficiently buffered.
				d.internalErrChan <- err
			}
		})
	} else {
		infof("REST proxy disabled")
	}

	// Start the grpc server.
	d.wg.Go(func() {
		infof("RPC server listening on %s", d.grpcListener.Addr())
		err = d.grpcServer.Serve(d.grpcListener)
		if err != nil && !errors.Is(err, grpc.ErrServerStopped) {
			// Notify the main error handler goroutine that
			// we exited unexpectedly here. We don't have to
			// worry about blocking as the internal error
			// channel is sufficiently buffered.
			d.internalErrChan <- err
		}
	})

	return nil
}

// initialize creates and initializes an instance of the swap server client,
// the swap client RPC server instance and our main swap and error handlers. If
// this method fails with an error then no goroutine was started yet and no
// cleanup is necessary. If it succeeds, then goroutines have been spawned.
func (d *Daemon) initialize(withMacaroonService bool) error {
	if d.cfg.EnableExperimental {
		loopdb.EnableExperimentalProtocol()
	}

	infof("Protocol version: %v", loopdb.CurrentProtocolVersion())

	// If no swap server is specified, use the default addresses for mainnet
	// and testnet.
	if d.cfg.Server.Host == "" {
		// TODO(wilmer): Use onion service addresses when proxy is
		// active.
		switch d.cfg.Network {
		case "mainnet":
			d.cfg.Server.Host = mainnetServer

		case "testnet":
			d.cfg.Server.Host = testnetServer

		case "signet":
			d.cfg.Server.Host = signetServer

		default:
			return errors.New("no swap server address specified")
		}
	}

	// Both the client RPC server and the swap server client should stop
	// on main context cancel. So we create it early and pass it down.
	d.mainCtx, d.mainCtxCancel = context.WithCancel(context.Background())

	infof("Swap server address: %v", d.cfg.Server.Host)

	// Check if we need to migrate the database.
	if needSqlMigration(d.cfg) {
		infof("Boltdb found, running migration")

		err := migrateBoltdb(d.mainCtx, d.cfg)
		if err != nil {
			return fmt.Errorf("unable to migrate boltdb: %v", err)
		}

		infof("Successfully migrated boltdb")
	}

	// Now that we know where the database will live, we'll go ahead and
	// open up the default implementation of it.
	chainParams, err := lndclient.Network(d.cfg.Network).ChainParams()
	if err != nil {
		return err
	}

	swapDb, baseDb, err := openDatabase(d.cfg, chainParams)
	if err != nil {
		return err
	}

	// Run the cost migration.
	err = loop.MigrateLoopOutCosts(
		d.mainCtx, d.lnd.LndServices, d.cfg.MigrationRPCBatchSize,
		swapDb,
	)
	if err != nil {
		errorf("Cost migration failed: %v", err)

		return err
	}

	sweeperDb := sweepbatcher.NewSQLStore(
		loopdb.NewTypedStore[sweepbatcher.Querier](baseDb),
		chainParams,
	)

	// We need to know the current block height to properly initialize
	// managers.
	getInfo, err := d.lnd.Client.GetInfo(d.mainCtx)
	if err != nil {
		return fmt.Errorf("failed to get current block height: %w", err)
	}
	blockHeight := getInfo.BlockHeight
	if blockHeight <= 0 {
		return fmt.Errorf("invalid block height reported by lnd: %d",
			blockHeight)
	}

	// If we're running an asset client, we'll log something here.
	if d.assetClient != nil {
		getInfo, err := d.assetClient.GetInfo(
			d.mainCtx, &taprpc.GetInfoRequest{},
		)
		if err != nil {
			return fmt.Errorf("unable to get asset client info: %v", err)
		}
		if getInfo.LndIdentityPubkey != d.lnd.NodePubkey.String() {
			return fmt.Errorf("asset client pubkey %v does not match "+
				"lnd pubkey %v", getInfo.LndIdentityPubkey,
				d.lnd.NodePubkey)
		}

		infof("Using asset client with version %v", getInfo.Version)
	}

	// Create an instance of the loop client library.
	swapClient, clientCleanup, err := getClient(
		d.cfg, swapDb, sweeperDb, &d.lnd.LndServices, d.assetClient,
	)
	if err != nil {
		return err
	}
	d.clientCleanup = clientCleanup

	// Create a reservation server client.
	reservationClient := loop_swaprpc.NewReservationServiceClient(
		swapClient.Conn,
	)

	// Create an instantout server client.
	instantOutClient := loop_swaprpc.NewInstantSwapServerClient(
		swapClient.Conn,
	)

	// Create a static address server client.
	staticAddressClient := loop_swaprpc.NewStaticAddressServerClient(
		swapClient.Conn,
	)

	// Both the client RPC server and the swap server client should stop
	// on main context cancel. So we create it early and pass it down.
	d.mainCtx, d.mainCtxCancel = context.WithCancel(context.Background())

	// Add our debug permissions to our main set of required permissions
	// if compiled in.
	maps.Copy(loop_looprpc.RequiredPermissions, debugRequiredPermissions)

	rks, db, err := lndclient.NewBoltMacaroonStore(
		d.cfg.DataDir, "macaroons.db", loopdb.DefaultLoopDBTimeout,
	)
	if err != nil {
		return err
	}

	cleanupMacaroonStore := func() {
		err := db.Close()
		if err != nil {
			errorf("Error closing macaroon store: %v", err)
		}
	}

	if withMacaroonService {
		// Start the macaroon service and let it create its default
		// macaroon in case it doesn't exist yet.
		d.macaroonService, err = lndclient.NewMacaroonService(
			&lndclient.MacaroonServiceConfig{
				RootKeyStore:     rks,
				MacaroonLocation: loopMacaroonLocation,
				MacaroonPath:     d.cfg.MacaroonPath,
				Checkers: []macaroons.Checker{
					macaroons.IPLockChecker,
				},
				RequiredPerms: loop_looprpc.RequiredPermissions,
				DBPassword:    macDbDefaultPw,
				LndClient:     &d.lnd.LndServices,
				EphemeralKey:  lndclient.SharedKeyNUMS,
				KeyLocator:    lndclient.SharedKeyLocator,
			},
		)
		if err != nil {
			cleanupMacaroonStore()
			return err
		}

		if err = d.macaroonService.Start(); err != nil {
			// The client is the only thing we started yet, so if we
			// clean up its connection now, nothing else needs to be
			// shut down at this point.
			cleanupMacaroonStore()
			clientCleanup()
			return err
		}
	}

	// Start the notification manager.
	notificationCfg := &notifications.Config{
		Client:       loop_swaprpc.NewSwapServerClient(swapClient.Conn),
		CurrentToken: swapClient.L402Store.CurrentToken,
	}
	notificationManager := notifications.NewManager(notificationCfg)

	d.wg.Go(func() {
		infof("Starting notification manager")
		err := notificationManager.Run(d.mainCtx)
		if err != nil {
			d.internalErrChan <- err
			errorf("Notification manager stopped: %v", err)
		}
	})

	// Start the HTLC recovery worker that handles HTLC-confirmed
	// notifications with a direct sweep attempt.
	htlcConfirmedRecovery := &htlcConfirmedRecoveryManager{
		notificationSource: notificationManager,
		swapStore:          swapDb,
		chainParams:        d.lnd.ChainParams,
		notifier:           d.lnd.ChainNotifier,
		wallet:             d.lnd.WalletKit,
		signer:             d.lnd.Signer,
	}

	d.wg.Go(func() {
		debugf("Starting htlc confirmed recovery worker")
		defer debugf("Htlc confirmed recovery worker stopped")

		err := htlcConfirmedRecovery.run(d.mainCtx)
		if shouldReportManagerErr(err) {
			debugf("htlc confirmed recovery worker failed: %v", err)
		}
	})

	var (
		staticAddressManager *address.Manager
		depositManager       *deposit.Manager
		withdrawalManager    *withdraw.Manager
		openChannelManager   *openchannel.Manager
		staticLoopInManager  *loopin.Manager
	)

	// Static address manager setup.
	staticAddressStore := address.NewSqlStore(baseDb)
	addrCfg := &address.ManagerConfig{
		AddressClient: staticAddressClient,
		FetchL402:     swapClient.Server.FetchL402,
		Store:         staticAddressStore,
		WalletKit:     d.lnd.WalletKit,
		ChainParams:   d.lnd.ChainParams,
		ChainNotifier: d.lnd.ChainNotifier,
	}
	staticAddressManager, err = address.NewManager(
		addrCfg, int32(blockHeight),
	)
	if err != nil {
		return fmt.Errorf("unable to create static address manager: %w",
			err)
	}

	// Static address deposit manager setup.
	depositStore := deposit.NewSqlStore(baseDb)
	depoCfg := &deposit.ManagerConfig{
		AddressManager: staticAddressManager,
		Store:          depositStore,
		WalletKit:      d.lnd.WalletKit,
		ChainNotifier:  d.lnd.ChainNotifier,
		Signer:         d.lnd.Signer,
	}
	depositManager = deposit.NewManager(depoCfg)

	// Static address deposit withdrawal manager setup.
	withdrawalStore := withdraw.NewSqlStore(
		loopdb.NewTypedStore[withdraw.Querier](baseDb),
		depositStore,
	)
	withdrawalCfg := &withdraw.ManagerConfig{
		StaticAddressServerClient: staticAddressClient,
		AddressManager:            staticAddressManager,
		DepositManager:            depositManager,
		WalletKit:                 d.lnd.WalletKit,
		ChainParams:               d.lnd.ChainParams,
		ChainNotifier:             d.lnd.ChainNotifier,
		Signer:                    d.lnd.Signer,
		Store:                     withdrawalStore,
	}
	withdrawalManager, err = withdraw.NewManager(
		withdrawalCfg, blockHeight,
	)
	if err != nil {
		return fmt.Errorf("unable to create withdrawal manager: %w",
			err)
	}

	// Static address deposit open channel manager setup.
	openChannelCfg := &openchannel.Config{
		DepositManager:    depositManager,
		WithdrawalManager: withdrawalManager,
		WalletKit:         d.lnd.WalletKit,
		ChainParams:       d.lnd.ChainParams,
		LightningClient:   d.lnd.Client,
	}
	openChannelManager = openchannel.NewManager(openChannelCfg)

	// Static address loop-in manager setup.
	staticAddressLoopInStore := loopin.NewSqlStore(
		loopdb.NewTypedStore[loopin.Querier](baseDb),
		clock.NewDefaultClock(), d.lnd.ChainParams,
	)

	// Run the deposit swap hash migration.
	err = loopin.MigrateDepositSwapHash(
		d.mainCtx, swapDb, depositStore, staticAddressLoopInStore,
	)
	if err != nil {
		errorf("Deposit swap hash migration failed: %v", err)

		return err
	}

	// Run the selected amount migration.
	err = loopin.MigrateSelectedSwapAmount(
		d.mainCtx, swapDb, depositStore, staticAddressLoopInStore,
	)
	if err != nil {
		errorf("Selected amount migration failed: %v", err)

		return err
	}

	staticLoopInManager, err = loopin.NewManager(&loopin.Config{
		Server:                               staticAddressClient,
		QuoteGetter:                          swapClient.Server,
		LndClient:                            d.lnd.Client,
		TxOutChecker:                         loopin.NewLndTxOutChecker(d.lnd.Client),
		InvoicesClient:                       d.lnd.Invoices,
		NodePubkey:                           d.lnd.NodePubkey,
		AddressManager:                       staticAddressManager,
		DepositManager:                       depositManager,
		Store:                                staticAddressLoopInStore,
		WalletKit:                            d.lnd.WalletKit,
		ChainNotifier:                        d.lnd.ChainNotifier,
		NotificationManager:                  notificationManager,
		ChainParams:                          d.lnd.ChainParams,
		Signer:                               d.lnd.Signer,
		ValidateLoopInContract:               loop.ValidateLoopInContract,
		MaxStaticAddrHtlcFeePercentage:       d.cfg.MaxStaticAddrHtlcFeePercentage,
		MaxStaticAddrHtlcBackupFeePercentage: d.cfg.MaxStaticAddrHtlcBackupFeePercentage,
	}, blockHeight)
	if err != nil {
		return fmt.Errorf("unable to create loop-in manager: %w", err)
	}

	var (
		reservationManager *reservation.Manager
		instantOutManager  *instantout.Manager
	)

	// Create the reservation and instantout managers.
	if d.cfg.EnableExperimental {
		reservationStore := reservation.NewSQLStore(
			loopdb.NewTypedStore[reservation.Querier](baseDb),
		)
		reservationConfig := &reservation.Config{
			Store:               reservationStore,
			Wallet:              d.lnd.WalletKit,
			ChainNotifier:       d.lnd.ChainNotifier,
			ReservationClient:   reservationClient,
			NotificationManager: notificationManager,
		}

		reservationManager = reservation.NewManager(
			reservationConfig,
		)

		// Create the instantout services.
		instantOutStore := instantout.NewSQLStore(
			loopdb.NewTypedStore[instantout.Querier](baseDb),
			clock.NewDefaultClock(), reservationStore,
			d.lnd.ChainParams,
		)
		instantOutConfig := &instantout.Config{
			Store:              instantOutStore,
			LndClient:          d.lnd.Client,
			RouterClient:       d.lnd.Router,
			ChainNotifier:      d.lnd.ChainNotifier,
			Signer:             d.lnd.Signer,
			Wallet:             d.lnd.WalletKit,
			ReservationManager: reservationManager,
			InstantOutClient:   instantOutClient,
			Network:            d.lnd.ChainParams,
		}

		instantOutManager = instantout.NewInstantOutManager(
			instantOutConfig, int32(blockHeight),
		)
	}

	liquidityMgr := getLiquidityManager(
		swapClient, staticLoopInManager, d.cfg.EnableExperimental,
	)

	// Now finally fully initialize the swap client RPC server instance.
	d.swapClientServer = swapClientServer{
		config:               d.cfg,
		network:              lndclient.Network(d.cfg.Network),
		impl:                 swapClient,
		liquidityMgr:         liquidityMgr,
		lnd:                  &d.lnd.LndServices,
		swaps:                make(map[lntypes.Hash]loop.SwapInfo),
		subscribers:          make(map[int]chan<- any),
		statusChan:           make(chan loop.SwapInfo),
		mainCtx:              d.mainCtx,
		reservationManager:   reservationManager,
		instantOutManager:    instantOutManager,
		staticAddressManager: staticAddressManager,
		depositManager:       depositManager,
		withdrawalManager:    withdrawalManager,
		staticLoopInManager:  staticLoopInManager,
		openChannelManager:   openChannelManager,
		assetClient:          d.assetClient,
		stopDaemon:           d.Stop,
	}

	// Retrieve all currently existing swaps from the database.
	swapsList, err := d.impl.FetchSwaps(d.mainCtx)
	if err != nil {
		if d.macaroonService == nil {
			cleanupMacaroonStore()
			clientCleanup()
			return err
		}

		// The client and the macaroon service are the only things we
		// started yet, so if we clean that up now, nothing else needs
		// to be shut down at this point.
		if err := d.macaroonService.Stop(); err != nil {
			errorf("Error shutting down macaroon service: %v",
				err)
		}
		cleanupMacaroonStore()
		clientCleanup()
		return err
	}

	for _, s := range swapsList {
		d.swaps[s.SwapHash] = *s
	}

	// Start the swap client itself.
	d.wg.Go(func() {
		infof("Starting swap client")
		err := d.impl.Run(d.mainCtx, d.statusChan)
		if err != nil {
			// Notify the main error handler goroutine that
			// we exited unexpectedly here. We don't have to
			// worry about blocking as the internal error
			// channel is sufficiently buffered.
			d.internalErrChan <- err
		}
		infof("Swap client stopped")
	})

	// Start a goroutine that broadcasts swap updates to clients.
	d.wg.Go(func() {
		infof("Waiting for updates")
		d.processStatusUpdates(d.mainCtx)
	})

	d.wg.Go(func() {
		infof("Starting liquidity manager")
		err := d.liquidityMgr.Run(d.mainCtx)
		if err != nil && !errors.Is(err, context.Canceled) {
			d.internalErrChan <- err
		}

		infof("Liquidity manager stopped")
	})

	initManagerTimeout := 10 * time.Second

	// Start the reservation manager.
	if d.reservationManager != nil {
		initChan := make(chan struct{})
		d.wg.Go(func() {
			infof("Starting reservation manager")
			defer infof("Reservation manager stopped")

			err := d.reservationManager.Run(
				d.mainCtx, int32(blockHeight), initChan,
			)
			if err != nil && !errors.Is(err, context.Canceled) {
				d.internalErrChan <- err
			}
		})

		// Wait for the reservation server to be ready before starting
		// the grpc server.
		timeOutCtx, cancel := context.WithTimeout(
			d.mainCtx, initManagerTimeout,
		)
		select {
		case <-timeOutCtx.Done():
			cancel()
			return fmt.Errorf("reservation server not ready: %v",
				timeOutCtx.Err())

		case <-initChan:
			cancel()
		}
	}

	// Start the instant out manager.
	if d.instantOutManager != nil {
		initChan := make(chan struct{})
		d.wg.Go(func() {
			infof("Starting instantout manager")
			defer infof("Instantout manager stopped")

			err := d.instantOutManager.Run(d.mainCtx, initChan)
			if err != nil && !errors.Is(err, context.Canceled) {
				d.internalErrChan <- err
			}
		})

		// Wait for the instantout server to be ready before starting
		// the grpc server.
		timeOutCtx, cancel := context.WithTimeout(
			d.mainCtx, initManagerTimeout,
		)
		select {
		case <-timeOutCtx.Done():
			cancel()
			return fmt.Errorf("instantout server not ready: %v",
				timeOutCtx.Err())

		case <-initChan:
			cancel()
		}
	}

	// Start the static address manager.
	if staticAddressManager != nil {
		initChan := make(chan struct{})
		d.wg.Go(func() {
			infof("Starting static address manager...")
			defer infof("Static address manager stopped")

			err := staticAddressManager.Run(d.mainCtx, initChan)
			if shouldReportManagerErr(err) {
				d.internalErrChan <- err
			}
		})

		// Wait for the static address manager to be ready before
		// starting the grpc server.
		timeOutCtx, cancel := context.WithTimeout(
			d.mainCtx, initManagerTimeout,
		)
		select {
		case <-timeOutCtx.Done():
			cancel()
			return fmt.Errorf("static address manager not "+
				"ready: %v", timeOutCtx.Err())

		case <-initChan:
			cancel()
		}
	}

	// Start the static address deposit manager.
	if depositManager != nil {
		initChan := make(chan struct{})
		d.wg.Go(func() {
			infof("Starting static address deposit manager...")
			defer infof("Static address deposit manager stopped")

			err := depositManager.Run(d.mainCtx, initChan)
			if shouldReportManagerErr(err) {
				d.internalErrChan <- err
			}
		})

		// Wait for the static address manager to be ready before
		// starting the grpc server.
		timeOutCtx, cancel := context.WithTimeout(
			d.mainCtx, initManagerTimeout,
		)
		select {
		case <-timeOutCtx.Done():
			cancel()
			return fmt.Errorf("static address deposit manager "+
				"not ready: %v", timeOutCtx.Err())

		case <-initChan:
			cancel()
		}
	}

	// Start the static address deposit withdrawal manager.
	if withdrawalManager != nil {
		initChan := make(chan struct{})
		d.wg.Go(func() {
			infof("Starting static address withdrawal manager...")
			defer infof("Static address withdrawal manager stopped")

			err := withdrawalManager.Run(d.mainCtx, initChan)
			if shouldReportManagerErr(err) {
				d.internalErrChan <- err
			}
		})

		// We need a higher timeout here, because withdrawalManager
		// publishes transactions and each PublishTransaction call can
		// wait for getting inv messages from a peer (neutrino).
		const withdrawalManagerTimeout = time.Minute

		// Wait for the static address withdrawal manager to be ready
		// before starting the grpc server.
		timeOutCtx, cancel := context.WithTimeout(
			d.mainCtx, withdrawalManagerTimeout,
		)
		select {
		case <-timeOutCtx.Done():
			cancel()
			return fmt.Errorf("static address withdrawal manager "+
				"server not ready: %v", timeOutCtx.Err())

		case <-initChan:
			cancel()
		}
	}
	// Start the static address open channel manager.
	if openChannelManager != nil {
		d.wg.Go(func() {
			infof("Starting static address open channel manager")
			err := openChannelManager.Run(d.mainCtx)
			if err != nil && !errors.Is(err, context.Canceled) {
				d.internalErrChan <- err
			}
			infof("Static address open channel manager stopped")
		})
	}

	// Start the static address loop-in manager.
	if staticLoopInManager != nil {
		initChan := make(chan struct{})
		d.wg.Go(func() {
			infof("Starting static address loop-in manager...")
			defer infof("Static address loop-in manager stopped")
			err := staticLoopInManager.Run(d.mainCtx, initChan)
			if shouldReportManagerErr(err) {
				d.internalErrChan <- err
			}
		})

		// Wait for the static address loop-in manager to be ready before
		// starting the grpc server.
		timeOutCtx, cancel := context.WithTimeout(
			d.mainCtx, initManagerTimeout,
		)
		select {
		case <-timeOutCtx.Done():
			cancel()
			return fmt.Errorf("static address loop-in manager "+
				"not ready: %v", timeOutCtx.Err())

		case <-initChan:
			cancel()
		}
	}

	loop.Resume(
		d.mainCtx, notificationManager, swapClient.Store,
		d.impl.Conn, d.lnd, clock.NewDefaultClock(),
	)

	// Last, start our internal error handler. This will return exactly one
	// error or nil on the main error channel to inform the caller that
	// something went wrong or that shutdown is complete. We don't add to
	// the wait group here because this goroutine will itself wait for the
	// stop to complete and signal its completion through the main error
	// channel.
	go func() {
		var runtimeErr error

		// There are only two ways this goroutine can exit. Either there
		// is an internal error or the caller requests a shutdown.
		// In both cases we wait for the stop to complete before we
		// signal the caller that we're done.
		select {
		case runtimeErr = <-d.internalErrChan:
			errorf("Runtime error in daemon, shutting down: "+
				"%v", runtimeErr)

		case <-d.quit:
		}

		// We need to shut down before sending the error on the channel,
		// otherwise a caller might exit the process too early.
		d.stop()
		cleanupMacaroonStore()
		infof("Daemon exited")

		// The caller expects exactly one message. So we send the error
		// even if it's nil because we cleanly shut down.
		d.ErrChan <- runtimeErr
	}()

	return nil
}

// Stop tries to gracefully shut down the daemon. A caller needs to wait for a
// message on the main error channel indicating that the shutdown is completed.
func (d *Daemon) Stop() {
	d.stopOnce.Do(func() {
		close(d.quit)
	})
}

// stop does the actual shutdown and blocks until all goroutines have exit.
func (d *Daemon) stop() {
	// First of all, we can cancel the main context that all event handlers
	// are using. This should stop all swap activity and all event handlers
	// should exit.
	if d.mainCtxCancel != nil {
		d.mainCtxCancel()
	}

	// As there is no swap activity anymore, we can forcefully shut down the
	// gRPC and HTTP servers now.
	infof("Stopping gRPC server")
	if d.grpcServer != nil {
		d.grpcServer.Stop()
	}
	infof("Stopping REST server")
	if d.restServer != nil {
		// Don't return the error here, we first want to give everything
		// else a chance to shut down cleanly.
		err := d.restServer.Close()
		if err != nil {
			errorf("Error stopping REST server: %v", err)
		}
	}
	if d.restCtxCancel != nil {
		d.restCtxCancel()
	}

	if d.macaroonService != nil {
		err := d.macaroonService.Stop()
		if err != nil {
			errorf("Error stopping macaroon service: %v", err)
		}
	}

	// Next, shut down the connections to lnd and the swap server.
	if d.lnd != nil {
		d.lnd.Close()
	}
	if d.clientCleanup != nil {
		d.clientCleanup()
	}

	// Everything should be shutting down now, wait for completion.
	d.wg.Wait()
}

// allowCORS wraps the given http.Handler with a function that adds the
// Access-Control-Allow-Origin header to the response.
func allowCORS(handler http.Handler, origin string) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		w.Header().Set("Access-Control-Allow-Origin", origin)
		handler.ServeHTTP(w, r)
	})
}