import { describe, expect, it } from "@effect/vitest";
import { IntegrationSlug } from "@executor-js/sdk/shared";

import {
  canSubmitOAuthClientForm,
  registrationScopes,
  resolveOriginIntegration,
} from "./oauth-client-form";

const validBase = {
  submitting: false,
  name: "PostHog",
  clientId: "https://example.com/oauth/client-id-metadata.json",
  clientSecret: "secret",
  authorizationUrl: "https://us.posthog.com/oauth/authorize",
  tokenUrl: "https://us.posthog.com/oauth/token",
} as const;

describe("registrationScopes", () => {
  it("sends declared scopes and ignores discovered when declared scopes exist", () => {
    // Declared (template) scopes are authoritative — a discovered set never wins.
    expect(registrationScopes(["a", "b"], ["x"])).toEqual(["a", "b"]);
  });

  it("sends discovered scopes when none are declared", () => {
    expect(registrationScopes([], ["x", "y"])).toEqual(["x", "y"]);
  });

  it("uses the current discovered set so a re-Discover replaces a prefilled probe", () => {
    // Probe of server A seeds the discovered state; a later Discover of server B
    // replaces it. With nothing declared, B's scopes register — not the stale A
    // set that arrived via the DCR fallback prefill.
    const seededFromProbeA = ["a:read"];
    const rediscoveredFromB = ["b:write"];
    expect(registrationScopes([], seededFromProbeA)).toEqual(["a:read"]);
    expect(registrationScopes([], rediscoveredFromB)).toEqual(["b:write"]);
  });

  it("returns empty when nothing is declared or discovered", () => {
    expect(registrationScopes([], [])).toEqual([]);
  });
});

describe("resolveOriginIntegration", () => {
  const INTEG = IntegrationSlug.make("linear_mcp");
  const OTHER = IntegrationSlug.make("github");

  it("stamps the current integration for a fresh registration (no explicit intent)", () => {
    expect(resolveOriginIntegration(undefined, INTEG)).toBe(INTEG);
  });

  it("stamps null for a fresh registration outside any integration context", () => {
    expect(resolveOriginIntegration(undefined, undefined)).toBeNull();
  });

  it("preserves an explicit null intent when editing — does NOT re-stamp the current integration", () => {
    // Regression: editing used to send `fixedSlug ? null : integrationSlug`,
    // which clobbered an app's recorded origin with null on every edit.
    expect(resolveOriginIntegration(null, INTEG)).toBeNull();
  });

  it("preserves an explicit non-null intent when editing, even if it differs from the current integration", () => {
    expect(resolveOriginIntegration(OTHER, INTEG)).toBe(OTHER);
  });
});

describe("canSubmitOAuthClientForm", () => {
  it("allows authorization-code public clients with no client secret", () => {
    expect(
      canSubmitOAuthClientForm({
        ...validBase,
        grant: "authorization_code",
        clientSecret: "",
      }),
    ).toBe(true);
  });

  it("keeps client secret required for client-credentials clients", () => {
    expect(
      canSubmitOAuthClientForm({
        ...validBase,
        grant: "client_credentials",
        clientSecret: "",
      }),
    ).toBe(false);
  });

  it("requires an authorization URL for authorization-code clients", () => {
    expect(
      canSubmitOAuthClientForm({
        ...validBase,
        grant: "authorization_code",
        clientSecret: "",
        authorizationUrl: "",
      }),
    ).toBe(false);
  });
});