import { contextBridge, ipcRenderer } from "electron";
import type { DesktopServerConnection, DesktopServerSettings } from "../shared/server-settings";

const api = {
  /** Read the active Executor server connection backing this desktop window. */
  getServerConnection(): Promise<DesktopServerConnection | null> {
    return ipcRenderer.invoke("executor:server:connection");
  },
  /**
   * Read the bearer token for the running sidecar. Only used to build the
   * "Connect an agent" install command, which an external agent runs and so
   * needs the token in plaintext. Returns null when no sidecar is up.
   */
  getServerAuthToken(): Promise<string | null> {
    return ipcRenderer.invoke("executor:server:auth-token");
  },
  /** Read the desktop-persisted server profile payload. */
  getServerProfiles(): Promise<string | null> {
    return ipcRenderer.invoke("executor:server-profiles:get");
  },
  /** Persist the server profile payload in desktop storage. */
  setServerProfiles(value: string): Promise<void> {
    return ipcRenderer.invoke("executor:server-profiles:set", value);
  },
  /** Read the persisted server settings (currently just the port). */
  getSettings(): Promise<DesktopServerSettings> {
    return ipcRenderer.invoke("executor:settings:get");
  },
  /** Patch one or more server settings. Returns the new full settings. */
  updateSettings(patch: Partial<DesktopServerSettings>): Promise<DesktopServerSettings> {
    return ipcRenderer.invoke("executor:settings:update", patch);
  },
  /**
   * Rotate the local bearer token and restart the sidecar so it takes effect.
   * Returns the refreshed connection. AI-client MCP configs must be re-issued
   * with the new token afterwards.
   */
  rotateToken(): Promise<DesktopServerConnection> {
    return ipcRenderer.invoke("executor:server:rotate-token");
  },
  /**
   * Stop + restart the sidecar so settings changes take effect.
   * Main reloads the window and returns the refreshed server connection.
   */
  restartServer(): Promise<DesktopServerConnection> {
    return ipcRenderer.invoke("executor:server:restart");
  },
  /**
   * Open an http(s) URL in the user's default browser. Main-side validates
   * the scheme. Used by the system-browser OAuth flow.
   */
  openExternal(url: string): Promise<void> {
    return ipcRenderer.invoke("executor:shell:open-external", url);
  },
  /**
   * Pack logs + crash dumps + a redacted manifest into a zip in Downloads
   * and reveal it in the file manager. Returns the zip path.
   */
  exportDiagnostics(): Promise<string> {
    return ipcRenderer.invoke("executor:diagnostics:export");
  },
  /**
   * Run an interactive update check (menu-flow semantics: native dialogs
   * for "update ready", "no updates", and failures). Used by the crash
   * screen so a broken release can heal itself.
   */
  checkForUpdates(): Promise<void> {
    return ipcRenderer.invoke("executor:updates:check");
  },
  /**
   * Last-resort recovery for damaged executor state: after a native confirm,
   * back up the data dir (move-aside, never delete), then restart the
   * sidecar fresh. Resolves false when the user cancels the confirm.
   */
  resetState(): Promise<boolean> {
    return ipcRenderer.invoke("executor:state:reset");
  },
  /**
   * Crash-reporting config for the renderer. Null unless this desktop build
   * shipped with a DSN baked in — the shared web UI only initializes its
   * error reporting when this returns a config.
   */
  getCrashReporting(): Promise<{
    readonly dsn: string;
    readonly release: string;
    readonly environment: string;
    readonly runId: string;
  } | null> {
    return ipcRenderer.invoke("executor:crash-reporting:get");
  },
} as const;

contextBridge.exposeInMainWorld("executor", api);

export type ExecutorBridge = typeof api;