import { normalizeGoogleDiscoveryUrl } from "./discovery";

export interface GooglePreset {
  readonly id: string;
  readonly name: string;
  readonly summary: string;
  readonly url?: string;
  readonly icon?: string;
  readonly featured?: boolean;
}

export type GoogleOpenApiOAuthAudience =
  | "standard-user"
  | "advanced-user"
  | "workspace-admin"
  | "unsupported-user";

export type GoogleOpenApiPreset = GooglePreset & {
  readonly oauthAudience: GoogleOpenApiOAuthAudience;
};

const gd = (service: string, version: string) =>
  `https://www.googleapis.com/discovery/v1/apis/${service}/${version}/rest`;

const GOOGLE_G = "https://fonts.gstatic.com/s/i/productlogos/googleg/v6/192px.svg";
export const GOOGLE_BUNDLE_PRESET_ID = "google";
export const GOOGLE_PHOTOS_PRESET_ID = "google-photos";
export const GOOGLE_PHOTOS_ICON =
  "https://www.gstatic.com/images/branding/product/2x/photos_96dp.png";

export const googleOpenApiBundlePreset: GooglePreset = {
  id: GOOGLE_BUNDLE_PRESET_ID,
  name: "Google",
  summary: "Bundle Gmail, Calendar, Drive, Docs, and other Google APIs into one source.",
  icon: GOOGLE_G,
  featured: true,
};

export const googlePhotosOpenApiBundlePreset: GooglePreset = {
  id: GOOGLE_PHOTOS_PRESET_ID,
  name: "Google Photos",
  summary: "Albums, uploads, app-created media, and user-selected picker media.",
  icon: GOOGLE_PHOTOS_ICON,
  featured: true,
};

export const googleOpenApiPresets: readonly GoogleOpenApiPreset[] = [
  {
    id: "google-calendar",
    name: "Google Calendar",
    summary: "Calendars, events, ACLs, and scheduling.",
    url: gd("calendar", "v3"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/calendar_2020q4/v8/192px.svg",
    featured: true,
    oauthAudience: "standard-user",
  },
  {
    id: "google-gmail",
    name: "Gmail",
    summary: "Messages, threads, labels, and drafts.",
    url: gd("gmail", "v1"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v8/web-96dp/logo_gmail_2020q4_color_2x_web_96dp.png",
    featured: true,
    oauthAudience: "standard-user",
  },
  {
    id: "google-sheets",
    name: "Google Sheets",
    summary: "Spreadsheets, values, ranges, and formatting.",
    url: gd("sheets", "v4"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/sheets_2020q4/v8/192px.svg",
    featured: true,
    oauthAudience: "standard-user",
  },
  {
    id: "google-drive",
    name: "Google Drive",
    summary: "Files, folders, permissions, and shared drives.",
    url: gd("drive", "v3"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v8/192px.svg",
    featured: true,
    oauthAudience: "standard-user",
  },
  {
    id: "google-docs",
    name: "Google Docs",
    summary: "Documents, structural edits, and formatting.",
    url: gd("docs", "v1"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/docs_2020q4/v12/192px.svg",
    featured: true,
    oauthAudience: "standard-user",
  },
  {
    id: "google-slides",
    name: "Google Slides",
    summary: "Presentations, slides, page elements, and deck updates.",
    url: gd("slides", "v1"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/slides_2020q4/v12/192px.svg",
    oauthAudience: "standard-user",
  },
  {
    id: "google-forms",
    name: "Google Forms",
    summary: "Forms, questions, responses, and quizzes.",
    url: "https://forms.googleapis.com/$discovery/rest?version=v1",
    icon: "https://fonts.gstatic.com/s/i/productlogos/forms_2020q4/v6/192px.svg",
    oauthAudience: "standard-user",
  },
  {
    id: "google-tasks",
    name: "Google Tasks",
    summary: "Task lists, task items, notes, and due dates.",
    url: gd("tasks", "v1"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/tasks/v5/192px.svg",
    oauthAudience: "standard-user",
  },
  {
    id: "google-people",
    name: "Google People",
    summary: "Contacts, profiles, directory people, and contact groups.",
    url: gd("people", "v1"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/contacts_2022/v2/192px.svg",
    oauthAudience: "standard-user",
  },
  {
    id: "google-photos-library",
    name: "Google Photos Library",
    summary: "Albums, uploads, and app-created media through Google Photos.",
    url: gd("photoslibrary", "v1"),
    icon: GOOGLE_PHOTOS_ICON,
    oauthAudience: "advanced-user",
  },
  {
    id: "google-photos-picker",
    name: "Google Photos Picker",
    summary: "Picker sessions and user-selected Google Photos media items.",
    url: "https://photospicker.googleapis.com/$discovery/rest?version=v1",
    icon: GOOGLE_PHOTOS_ICON,
    oauthAudience: "advanced-user",
  },
  {
    id: "google-chat",
    name: "Google Chat",
    summary: "Spaces, messages, members, reactions, and chat workflows.",
    url: gd("chat", "v1"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/chat_2020q4/v8/192px.svg",
    oauthAudience: "workspace-admin",
  },
  {
    id: "google-keep",
    name: "Google Keep",
    summary: "Notes, lists, attachments, and annotations.",
    url: "https://keep.googleapis.com/$discovery/rest?version=v1",
    icon: "https://fonts.gstatic.com/s/i/productlogos/keep_2020q4/v8/192px.svg",
    oauthAudience: "unsupported-user",
  },
  {
    id: "google-youtube-data",
    name: "YouTube Data",
    summary: "Channels, playlists, videos, comments, and uploads.",
    url: gd("youtube", "v3"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/youtube/v9/192px.svg",
    oauthAudience: "advanced-user",
  },
  {
    id: "google-search-console",
    name: "Google Search Console",
    summary: "Sites, sitemaps, URL inspection, and search performance.",
    url: gd("searchconsole", "v1"),
    icon: GOOGLE_G,
    oauthAudience: "standard-user",
  },
  {
    id: "google-classroom",
    name: "Google Classroom",
    summary: "Courses, rosters, coursework, and grading.",
    url: gd("classroom", "v1"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/classroom/v7/192px.svg",
    oauthAudience: "advanced-user",
  },
  {
    id: "google-admin-directory",
    name: "Google Admin Directory",
    summary: "Users, groups, org units, roles, and domain resources.",
    url: "https://admin.googleapis.com/$discovery/rest?version=directory_v1",
    icon: "https://fonts.gstatic.com/s/i/productlogos/admin_2020q4/v6/192px.svg",
    oauthAudience: "workspace-admin",
  },
  {
    id: "google-admin-reports",
    name: "Google Admin Reports",
    summary: "Audit events, usage reports, and admin activity logs.",
    url: "https://admin.googleapis.com/$discovery/rest?version=reports_v1",
    icon: "https://fonts.gstatic.com/s/i/productlogos/admin_2020q4/v6/192px.svg",
    oauthAudience: "workspace-admin",
  },
  {
    id: "google-apps-script",
    name: "Google Apps Script",
    summary: "Projects, deployments, and script execution.",
    url: gd("script", "v1"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/apps_script/v10/192px.svg",
    oauthAudience: "advanced-user",
  },
  {
    id: "google-bigquery",
    name: "Google BigQuery",
    summary: "Datasets, tables, jobs, and analytical queries.",
    url: gd("bigquery", "v2"),
    icon: "https://fonts.gstatic.com/s/i/productlogos/google_cloud/v6/192px.svg",
    oauthAudience: "advanced-user",
  },
  {
    id: "google-cloud-resource-manager",
    name: "Google Cloud Resource Manager",
    summary: "Projects, folders, organizations, and IAM hierarchy.",
    url: "https://cloudresourcemanager.googleapis.com/$discovery/rest?version=v3",
    icon: "https://fonts.gstatic.com/s/i/productlogos/google_cloud/v6/192px.svg",
    oauthAudience: "advanced-user",
  },
];

export const googleStandardUserOAuthPresets = googleOpenApiPresets.filter(
  (preset) => preset.oauthAudience === "standard-user",
);

export const googlePhotosPresetIds: readonly string[] = [
  "google-photos-library",
  "google-photos-picker",
];

export const googlePhotosOpenApiPresets: readonly GoogleOpenApiPreset[] =
  googleOpenApiPresets.filter((preset) => googlePhotosPresetIds.includes(preset.id));

// ---------------------------------------------------------------------------
// Representative consent scopes per preset.
//
// The picker shows the OAuth consent a user is about to grant BEFORE connecting
// (the "View scopes" panel), but the authoritative scope list only exists in
// each API's live Discovery document, which the add flow fetches lazily at
// `addBundle` time. To preview consent without N network round-trips, each preset
// declares the broad top-level scope(s) a full integration grants. These flow
// through `googleOAuthConsentBatches` (which compacts sub-scopes under their
// broad parent), so the previewed grant matches the unioned scopes the bundle
// converter ultimately stores. Grounded against each API's published Discovery
// `auth.oauth2.scopes`.
// ---------------------------------------------------------------------------

export const googleOAuthConsentScopes: Readonly<Record<string, readonly string[]>> = {
  "google-calendar": ["https://www.googleapis.com/auth/calendar"],
  "google-gmail": ["https://mail.google.com/"],
  "google-sheets": ["https://www.googleapis.com/auth/spreadsheets"],
  "google-drive": ["https://www.googleapis.com/auth/drive"],
  "google-docs": ["https://www.googleapis.com/auth/documents"],
  "google-slides": ["https://www.googleapis.com/auth/presentations"],
  "google-forms": ["https://www.googleapis.com/auth/forms.body"],
  "google-tasks": ["https://www.googleapis.com/auth/tasks"],
  "google-people": ["https://www.googleapis.com/auth/contacts"],
  "google-photos-library": [
    "https://www.googleapis.com/auth/photoslibrary.appendonly",
    "https://www.googleapis.com/auth/photoslibrary.readonly.appcreateddata",
  ],
  "google-photos-picker": ["https://www.googleapis.com/auth/photospicker.mediaitems.readonly"],
  "google-chat": ["https://www.googleapis.com/auth/chat.spaces"],
  "google-keep": ["https://www.googleapis.com/auth/keep"],
  "google-youtube-data": ["https://www.googleapis.com/auth/youtube"],
  "google-search-console": ["https://www.googleapis.com/auth/webmasters"],
  "google-classroom": ["https://www.googleapis.com/auth/classroom.courses"],
  "google-admin-directory": ["https://www.googleapis.com/auth/admin.directory.user"],
  "google-admin-reports": ["https://www.googleapis.com/auth/admin.reports.audit.readonly"],
  "google-apps-script": ["https://www.googleapis.com/auth/script.projects"],
  "google-bigquery": ["https://www.googleapis.com/auth/bigquery"],
  "google-cloud-resource-manager": ["https://www.googleapis.com/auth/cloud-platform"],
};

export const googleOAuthConsentScopesForPreset = (presetId: string): readonly string[] =>
  googleOAuthConsentScopes[presetId] ?? [];

// ---------------------------------------------------------------------------
// Resolve a stored/normalized Discovery URL back to its preset, so a bundled
// `google` integration can surface each selected API's `oauthAudience` (e.g. a
// caution on a connection's auth method when admin-only or unsupported-consent
// APIs are part of the bundle).
// ---------------------------------------------------------------------------

const normalizeGooglePresetUrl = (url: string): string => {
  const discoveryUrl = normalizeGoogleDiscoveryUrl(url);
  if (discoveryUrl) return discoveryUrl;
  const trimmed = url.trim();
  if (!URL.canParse(trimmed)) return trimmed.replace(/\/$/, "");
  const parsed = new URL(trimmed);
  parsed.hash = "";
  parsed.searchParams.sort();
  return parsed.toString().replace(/\/$/, "");
};

const googlePresetsByNormalizedUrl: ReadonlyMap<string, GoogleOpenApiPreset> = new Map(
  googleOpenApiPresets.flatMap((preset) =>
    preset.url ? [[normalizeGooglePresetUrl(preset.url), preset] as const] : [],
  ),
);

export const googlePresetForDiscoveryUrl = (url: string): GoogleOpenApiPreset | undefined =>
  googlePresetsByNormalizedUrl.get(normalizeGooglePresetUrl(url));

/** The distinct caution-tier audiences (`workspace-admin`, `unsupported-user`)
 *  among the supplied Discovery URLs - the ones whose consent the user should be
 *  warned about. Returns `[]` when every URL is a standard/advanced API. */
export const googleAudienceWarningsForUrls = (
  urls: readonly string[],
): readonly GoogleOpenApiOAuthAudience[] => {
  const seen = new Set<GoogleOpenApiOAuthAudience>();
  for (const url of urls) {
    const audience = googlePresetForDiscoveryUrl(url)?.oauthAudience;
    if (audience === "workspace-admin" || audience === "unsupported-user") seen.add(audience);
  }
  return [...seen];
};