import { describe, expect, it } from "@effect/vitest";

import { migrateMcpAuthConfig } from "./migrate-config";
import { parseMcpIntegrationConfig } from "./types";

// ---------------------------------------------------------------------------
// The one-off config migration rewrites every pre-canonical MCP blob family
// into the canonical placements model. Two invariants are load-bearing:
// slugs are preserved verbatim (connections bind by `connection.template`)
// and variable names are preserved verbatim (they key stored `item_ids`).
// ---------------------------------------------------------------------------

const REMOTE = { transport: "remote", endpoint: "https://x.example/mcp" } as const;

describe("migrateMcpAuthConfig", () => {
  it("lifts a singular `auth: {kind:'header'}` into a one-method template, slug = kind", () => {
    const migrated = migrateMcpAuthConfig({
      ...REMOTE,
      auth: { kind: "header", headerName: "Authorization", prefix: "Bearer " },
    });
    expect(migrated).toEqual({
      ...REMOTE,
      authenticationTemplate: [
        {
          slug: "header",
          kind: "apikey",
          placements: [{ carrier: "header", name: "Authorization", prefix: "Bearer " }],
        },
      ],
    });
    expect(parseMcpIntegrationConfig(migrated)).not.toBeNull();
  });

  it("lifts a singular `auth: {kind:'oauth2'}` (the v1→v2 migration's output)", () => {
    expect(migrateMcpAuthConfig({ ...REMOTE, auth: { kind: "oauth2" } })).toEqual({
      ...REMOTE,
      authenticationTemplate: [{ slug: "oauth2", kind: "oauth2" }],
    });
  });

  it("treats a remote config with no auth field as an open server", () => {
    expect(migrateMcpAuthConfig({ ...REMOTE })).toEqual({
      ...REMOTE,
      authenticationTemplate: [{ slug: "none", kind: "none" }],
    });
  });

  it("rewrites retired single-placement `header` / `query` methods, slugs preserved", () => {
    const migrated = migrateMcpAuthConfig({
      ...REMOTE,
      authenticationTemplate: [
        { slug: "header", kind: "header", headerName: "X-Api-Key", prefix: "Bearer " },
        { slug: "custom_q1", kind: "query", paramName: "token" },
        { slug: "none", kind: "none" },
      ],
    });
    expect(migrated).toEqual({
      ...REMOTE,
      authenticationTemplate: [
        {
          slug: "header",
          kind: "apikey",
          placements: [{ carrier: "header", name: "X-Api-Key", prefix: "Bearer " }],
        },
        {
          slug: "custom_q1",
          kind: "apikey",
          placements: [{ carrier: "query", name: "token" }],
        },
        { slug: "none", kind: "none" },
      ],
    });
  });

  it("rewrites openapi-shaped entries the v1→v2 migration wrote, variables preserved", () => {
    // Exactly what `migrateOpenApiAuthTemplate` emits for a two-input source.
    const migrated = migrateMcpAuthConfig({
      ...REMOTE,
      authenticationTemplate: [
        {
          slug: "apiKey",
          type: "apiKey",
          headers: {
            "DD-API-KEY": [{ type: "variable", name: "dd_api_key" }],
            Authorization: ["Bearer ", { type: "variable", name: "dd_application_key" }],
          },
          queryParams: { team: [{ type: "variable", name: "team" }] },
        },
      ],
    });
    expect(migrated).toEqual({
      ...REMOTE,
      authenticationTemplate: [
        {
          slug: "apiKey",
          kind: "apikey",
          placements: [
            { carrier: "header", name: "DD-API-KEY", variable: "dd_api_key" },
            {
              carrier: "header",
              name: "Authorization",
              prefix: "Bearer ",
              variable: "dd_application_key",
            },
            { carrier: "query", name: "team", variable: "team" },
          ],
        },
      ],
    });
  });

  it("stores the canonical `token` variable as absent and literal-only values as literals", () => {
    const migrated = migrateMcpAuthConfig({
      ...REMOTE,
      authenticationTemplate: [
        {
          slug: "apiKey",
          type: "apiKey",
          headers: {
            Authorization: ["Bearer ", { type: "variable", name: "token" }],
            "X-Api-Version": "2023-01-01",
          },
        },
      ],
    }) as { authenticationTemplate: readonly unknown[] };
    expect(migrated.authenticationTemplate[0]).toEqual({
      slug: "apiKey",
      kind: "apikey",
      placements: [
        { carrier: "header", name: "Authorization", prefix: "Bearer " },
        { carrier: "header", name: "X-Api-Version", literal: "2023-01-01" },
      ],
    });
  });

  it("is idempotent — a canonical config returns null (no rewrite)", () => {
    const canonical = {
      ...REMOTE,
      authenticationTemplate: [
        { slug: "oauth2", kind: "oauth2" },
        {
          slug: "header",
          kind: "apikey",
          placements: [{ carrier: "header", name: "Authorization", prefix: "Bearer " }],
        },
      ],
    };
    expect(migrateMcpAuthConfig(canonical)).toBeNull();
    // And the lifted output of every family is itself canonical.
    const lifted = migrateMcpAuthConfig({ ...REMOTE, auth: { kind: "oauth2" } });
    expect(migrateMcpAuthConfig(lifted)).toBeNull();
  });

  it("leaves stdio, foreign, and unmigratable blobs untouched", () => {
    expect(migrateMcpAuthConfig({ transport: "stdio", command: "run" })).toBeNull();
    expect(migrateMcpAuthConfig({ not: "mcp" })).toBeNull();
    expect(migrateMcpAuthConfig(null)).toBeNull();
    expect(
      migrateMcpAuthConfig({
        ...REMOTE,
        authenticationTemplate: [{ slug: "x", kind: "mystery" }],
      }),
    ).toBeNull();
  });
});