// ---------------------------------------------------------------------------
// GraphQL ↔ generic auth-method converters — a thin oauth adapter over the
// shared codec (`@executor-js/react/lib/shared-auth-method-codec`). The
// apikey/none paths (multi-placement, multi-variable) live in the shared
// codec; GraphQL only contributes its oauth flavor: endpoint-less methods that
// render the connection's access token as a bearer header at invoke time
// (optionally overriding the header name / prefix).
// ---------------------------------------------------------------------------

import { AuthTemplateSlug } from "@executor-js/sdk/shared";
import type { AuthTemplateEditorValue } from "@executor-js/react/components/auth-template-editor";
import type { AuthMethod, Placement } from "@executor-js/react/lib/auth-placements";
import {
  wireAuthInputFromShared,
  authMethodFromSharedTemplate,
  editorValueFromSharedMethod,
  sharedMethodInputFromEditorValue,
  wirePlacementsFromEditor,
} from "@executor-js/react/lib/shared-auth-method-codec";

import type {
  GraphqlAuthMethod,
  GraphqlAuthMethodInput,
  GraphqlCanonicalAuthMethodInput,
} from "../sdk/types";

const oauthAuthMethod = (slug: string): AuthMethod => ({
  id: slug,
  label: "OAuth",
  kind: "oauth",
  source: slug.startsWith("custom_") ? "custom" : "spec",
  template: AuthTemplateSlug.make(slug),
  placements: [],
  oauth: {},
});

/** Convert a generic editor value into one GraphQL auth-method input (no slug
 *  — the backend assigns carrier-derived slugs). An apikey value keeps every
 *  named placement (headers and query params mix freely); one with no usable
 *  placement falls back to `none`. */
export function graphqlAuthMethodInputFromEditorValue(
  value: AuthTemplateEditorValue,
): GraphqlAuthMethodInput {
  if (value.kind === "oauth") return { kind: "oauth2" };
  return (sharedMethodInputFromEditorValue(value) ?? { kind: "none" }) as GraphqlAuthMethodInput;
}

/** Convert one stored GraphQL method into the generic editor value. */
export function editorValueFromGraphqlAuthMethod(
  method: GraphqlAuthMethod,
): AuthTemplateEditorValue {
  if (method.kind === "oauth2") {
    // GraphQL oauth methods store no endpoints — only the bearer rendering.
    return { kind: "oauth", authorizationUrl: "", tokenUrl: "", scopes: [] };
  }
  return editorValueFromSharedMethod(method);
}

/** Project the stored methods into the generic `AuthMethod[]` the hub renders.
 *  Mirrors the server's `describeGraphqlAuthMethods`; `custom_` slugs mark
 *  user-created methods (removable from the hub). */
export function authMethodsFromConfig(methods: readonly GraphqlAuthMethod[]): AuthMethod[] {
  return methods.map((method: GraphqlAuthMethod): AuthMethod => {
    if (method.kind === "oauth2") return oauthAuthMethod(method.slug);
    return authMethodFromSharedTemplate(method);
  });
}

/** Build the GraphQL method input for a custom method from generic placements
 *  — ONE method carrying every named placement (header + query mix in a single
 *  method; each placement renders from its own input variable, or shares one).
 *  Empty when no placement is usable. */
export function graphqlAuthMethodInputsFromPlacements(
  placements: readonly Placement[],
): GraphqlAuthMethodInput[] {
  const wire = wirePlacementsFromEditor(placements);
  if (wire.length === 0) return [];
  return [graphqlWireAuthInput({ kind: "apikey", placements: wire })];
}

/** Serialize a canonical method into the wire input union (apikey → the
 *  request-shaped dialect; none/oauth2 pass through). */
export const graphqlWireAuthInput = (
  method: GraphqlAuthMethod | GraphqlCanonicalAuthMethodInput,
): GraphqlAuthMethodInput => wireAuthInputFromShared(method) as GraphqlAuthMethodInput;