import { describe, expect, it } from "@effect/vitest";
import { ScopeId } from "@executor-js/sdk/shared";

import {
  secretsForCredentialTarget,
  secretScopeOptionsForCredentialTarget,
} from "./secret-credential-scope";
import { secretValueInputType } from "./secret-input";

describe("secretsForCredentialTarget", () => {
  it("only exposes secrets owned by the target credential scope", () => {
    expect(
      secretsForCredentialTarget(
        [
          { id: "shared-token", scopeId: "org", name: "Shared token" },
          { id: "personal-token", scopeId: "user", name: "Personal token" },
        ],
        ScopeId.make("org"),
      ).map((secret) => secret.id),
    ).toEqual(["shared-token"]);
  });

  it("exposes outer-scope secrets for personal credential overrides", () => {
    expect(
      secretsForCredentialTarget(
        [
          { id: "shared-token", scopeId: "org", name: "Shared token" },
          { id: "personal-token", scopeId: "user", name: "Personal token" },
        ],
        ScopeId.make("user"),
        [{ id: ScopeId.make("user") }, { id: ScopeId.make("org") }],
      ).map((secret) => secret.id),
    ).toEqual(["shared-token", "personal-token"]);
  });

  it("does not expose inner-scope secrets for organization default credentials", () => {
    expect(
      secretsForCredentialTarget(
        [
          { id: "shared-token", scopeId: "org", name: "Shared token" },
          { id: "personal-token", scopeId: "user", name: "Personal token" },
        ],
        ScopeId.make("org"),
        [{ id: ScopeId.make("user") }, { id: ScopeId.make("org") }],
      ).map((secret) => secret.id),
    ).toEqual(["shared-token"]);
  });
});

describe("secretScopeOptionsForCredentialTarget", () => {
  const userScope = ScopeId.make("user");
  const orgScope = ScopeId.make("org");
  const options = [
    {
      scopeId: userScope,
      label: "Personal",
      description: "Saved only for your account.",
    },
    {
      scopeId: orgScope,
      label: "Organization",
      description: "Shared with everyone who can use this source.",
    },
  ];
  const scopeStack = [{ id: userScope }, { id: orgScope }];

  it("lets personal credential creation target personal or outer scopes", () => {
    expect(
      secretScopeOptionsForCredentialTarget(options, userScope, scopeStack).map(
        (option) => option.label,
      ),
    ).toEqual(["Personal", "Organization"]);
  });

  it("does not let organization credential creation target inner scopes", () => {
    expect(
      secretScopeOptionsForCredentialTarget(options, orgScope, scopeStack).map(
        (option) => option.label,
      ),
    ).toEqual(["Organization"]);
  });
});

describe("secretValueInputType", () => {
  it("uses password inputs until a value is revealed", () => {
    expect(secretValueInputType({ revealable: true, revealed: false })).toBe("password");
    expect(secretValueInputType({ revealable: false, revealed: false })).toBe("password");
    expect(secretValueInputType({ revealable: true, revealed: true })).toBe("text");
  });
});