import { describe, expect, it } from "@effect/vitest";
import { ScopeId, SecretId } from "@executor-js/sdk";

import {
  httpCredentialsFromConfiguredCredentialBindings,
  initialCredentialTargetScope,
  secretBackedValuesFromConfiguredCredentialBindings,
} from "./credential-bindings";

describe("credential binding editor helpers", () => {
  it("hydrates configured credentials with binding and secret scopes", () => {
    const personalScope = ScopeId.make("user_1");
    const organizationScope = ScopeId.make("org_1");

    const credentials = httpCredentialsFromConfiguredCredentialBindings({
      headers: {
        Authorization: {
          slot: "header:authorization",
          prefix: "Bearer ",
        },
      },
      queryParams: {
        token: {
          slot: "query_param:token",
        },
      },
      bindings: [
        {
          slot: "header:authorization",
          scopeId: personalScope,
          value: {
            kind: "secret",
            secretId: SecretId.make("personal-api-token"),
            secretScopeId: organizationScope,
          },
        },
        {
          slot: "query_param:token",
          scopeId: organizationScope,
          value: {
            kind: "text",
            text: "literal-token",
          },
        },
      ],
    });

    expect(credentials.headers).toEqual([
      {
        name: "Authorization",
        secretId: "personal-api-token",
        prefix: "Bearer ",
        presetKey: "bearer",
        targetScope: personalScope,
        secretScope: organizationScope,
      },
    ]);
    expect(credentials.queryParams).toEqual([
      {
        name: "token",
        secretId: null,
        literalValue: "literal-token",
      },
    ]);
  });

  it("uses the first binding as the initial target scope", () => {
    const sourceScope = ScopeId.make("org_1");
    const personalScope = ScopeId.make("user_1");

    expect(
      initialCredentialTargetScope(sourceScope, [
        {
          slot: "header:authorization",
          scopeId: personalScope,
          value: {
            kind: "secret",
            secretId: SecretId.make("personal-api-token"),
          },
        },
      ]),
    ).toBe(personalScope);
    expect(initialCredentialTargetScope(sourceScope, [])).toBe(sourceScope);
  });

  it("hydrates configured credentials to secret-backed OAuth payload values", () => {
    expect(
      secretBackedValuesFromConfiguredCredentialBindings(
        {
          Authorization: {
            slot: "header:authorization",
            prefix: "Bearer ",
          },
          "X-Literal": "literal",
        },
        [
          {
            slot: "header:authorization",
            scopeId: ScopeId.make("user_1"),
            value: {
              kind: "secret",
              secretId: SecretId.make("api-token"),
            },
          },
        ],
      ),
    ).toEqual({
      Authorization: {
        secretId: "api-token",
        prefix: "Bearer ",
      },
      "X-Literal": "literal",
    });
  });
});