import { accounts } from './accounts.ts'
import { getViewer } from './viewer.ts'
import { inferOperationFromPath, oauthConnectUrl, scopeForOperation } from './setup.ts'
import { normalizeAsanaPath } from './client.ts'
import type { AsanaAuthInput } from './types.ts'
import { optionalString, requireRecord } from './types.ts'
import { requireAuthMode } from './auth.ts'

export type SmokeTestInput = AsanaAuthInput & {
	/** When true, skip the live viewer query even if credentials exist. */
	setupOnly?: boolean
}

/**
 * Verify Asana auth without returning account PII. Without credentials this
 * still returns setup URLs so the package is forkable before anyone connects.
 * @example
 * import smokeTest from 'kody:@kody/asana/smoke-test'
 * const result = await smokeTest()
 */
export async function smokeTest(params: SmokeTestInput = {}) {
	const connectUrl = oauthConnectUrl('asana')
	const selfCheck = {
		ok: true as const,
		pathNormalizesApiPrefix: normalizeAsanaPath('/workspaces') === '/api/1.0/workspaces',
		storyWriteScope: scopeForOperation('stories.write') === 'stories:write',
		taskWriteFromPath: inferOperationFromPath('POST', '/api/1.0/tasks') === 'tasks.write',
		connectUrlUsesAppHost: connectUrl.includes('app.asana.com'),
		connectUrlHasWorkspaceScope: connectUrl.includes('workspaces%3Aread'),
	}
	const info = await accounts(params)
	const canLive = Boolean(info.preferredAuth) && params.setupOnly !== true

	if (!canLive) {
		return {
			ok: true,
			live: false,
			selfCheck,
			authMode: info.preferredAuth,
			integrationName: info.integrationName,
			secretName: info.secretName,
			oauthConnected: info.oauthConnected,
			patSaved: info.patSaved,
			hasViewerGid: false,
			setup: {
				connectUrl: info.connectUrl,
				patUrl: info.patUrl,
				callbackUrl: info.callbackUrl,
				requiredHost: info.requiredHost,
			},
		}
	}

	const viewer = await getViewer(params)
	return {
		ok: true,
		live: true,
		selfCheck,
		authMode: info.preferredAuth,
		integrationName: info.integrationName,
		secretName: info.secretName,
		oauthConnected: info.oauthConnected,
		patSaved: info.patSaved,
		hasViewerGid: viewer.gid.length > 0,
		setup: {
			connectUrl: info.connectUrl,
			patUrl: info.patUrl,
			callbackUrl: info.callbackUrl,
			requiredHost: info.requiredHost,
		},
	}
}

/**
 * Verify Asana auth without returning account PII.
 * @example
 * import smokeTest from 'kody:@kody/asana/smoke-test'
 * const result = await smokeTest({ setupOnly: true })
 */
export default async function smokeTestEntrypoint(
	params: SmokeTestInput & Record<string, unknown> = {},
) {
	const input = requireRecord(params, 'smoke-test')
	return smokeTest({
		integrationName: optionalString(input.integrationName, 'integrationName'),
		integration: optionalString(input.integration, 'integration'),
		account: optionalString(input.account, 'account'),
		secretName: optionalString(input.secretName, 'secretName'),
		auth: requireAuthMode(input.auth),
		setupOnly: input.setupOnly === true,
	})
}