package pluginhost

import (
	"context"
	"net/http"
	"strings"
	"testing"

	"github.com/router-for-me/CLIProxyAPI/v7/internal/config"
	coreauth "github.com/router-for-me/CLIProxyAPI/v7/sdk/cliproxy/auth"
	cliproxyexecutor "github.com/router-for-me/CLIProxyAPI/v7/sdk/cliproxy/executor"
	"github.com/router-for-me/CLIProxyAPI/v7/sdk/pluginapi"
)

type stubCompatExecutor struct {
	id           string
	executeCalls int
	refreshCalls int
}

func (e *stubCompatExecutor) Identifier() string { return e.id }

func (e *stubCompatExecutor) Execute(context.Context, *coreauth.Auth, cliproxyexecutor.Request, cliproxyexecutor.Options) (cliproxyexecutor.Response, error) {
	e.executeCalls++
	return cliproxyexecutor.Response{Payload: []byte(`{"ok":true}`)}, nil
}

func (e *stubCompatExecutor) ExecuteStream(context.Context, *coreauth.Auth, cliproxyexecutor.Request, cliproxyexecutor.Options) (*cliproxyexecutor.StreamResult, error) {
	return &cliproxyexecutor.StreamResult{}, nil
}

func (e *stubCompatExecutor) Refresh(_ context.Context, auth *coreauth.Auth) (*coreauth.Auth, error) {
	e.refreshCalls++
	return auth, nil
}

func (e *stubCompatExecutor) CountTokens(context.Context, *coreauth.Auth, cliproxyexecutor.Request, cliproxyexecutor.Options) (cliproxyexecutor.Response, error) {
	return cliproxyexecutor.Response{}, nil
}

func (e *stubCompatExecutor) HttpRequest(context.Context, *coreauth.Auth, *http.Request) (*http.Response, error) {
	return nil, nil
}

func (e *stubCompatExecutor) PrepareRequest(*http.Request, *coreauth.Auth) error {
	return nil
}

func TestPluginRefreshCompatExecutorDelegatesExecuteAndRefresh(t *testing.T) {
	refreshCalls := 0
	host := newHostWithRecords(capabilityRecord{
		id: "auth-plugin",
		plugin: pluginapi.Plugin{
			Capabilities: pluginapi.Capabilities{
				AuthProvider: fakeAuthProvider{
					identifier: "plugin-provider",
					refreshAuth: func(ctx context.Context, req pluginapi.AuthRefreshRequest) (pluginapi.AuthRefreshResponse, error) {
						refreshCalls++
						if req.AuthID != "auth-1" || req.AuthProvider != "plugin-provider" {
							t.Fatalf("RefreshAuth request = %#v", req)
						}
						return pluginapi.AuthRefreshResponse{
							Auth: pluginapi.AuthData{
								ID:       "auth-1",
								Provider: "plugin-provider",
								Metadata: map[string]any{
									"access_token":  "new-token",
									"refresh_token": "refresh-1",
								},
								Attributes: map[string]string{
									"base_url": "https://compat.example.com/v1",
								},
							},
						}, nil
					},
				},
			},
		},
	})

	inner := &stubCompatExecutor{id: "plugin-provider"}
	wrapped := NewPluginRefreshCompatExecutor(inner, host, &config.Config{})
	if wrapped == nil {
		t.Fatal("NewPluginRefreshCompatExecutor() = nil")
	}
	if !IsPluginRefreshCompatExecutor(wrapped) {
		t.Fatal("IsPluginRefreshCompatExecutor() = false, want true")
	}
	if got, ok := UnwrapPluginRefreshCompatExecutor(wrapped); !ok || got != inner {
		t.Fatalf("UnwrapPluginRefreshCompatExecutor() = (%T, %v), want inner", got, ok)
	}
	if wrapped.Identifier() != "plugin-provider" {
		t.Fatalf("Identifier() = %q, want plugin-provider", wrapped.Identifier())
	}

	auth := &coreauth.Auth{
		ID:       "auth-1",
		Provider: "plugin-provider",
		Metadata: map[string]any{
			"access_token":  "old-token",
			"refresh_token": "refresh-1",
		},
		Attributes: map[string]string{
			"base_url": "https://compat.example.com/v1",
		},
	}

	if _, errExecute := wrapped.Execute(context.Background(), auth, cliproxyexecutor.Request{}, cliproxyexecutor.Options{}); errExecute != nil {
		t.Fatalf("Execute() error = %v", errExecute)
	}
	if inner.executeCalls != 1 {
		t.Fatalf("inner Execute calls = %d, want 1", inner.executeCalls)
	}

	refreshed, errRefresh := wrapped.Refresh(context.Background(), auth)
	if errRefresh != nil {
		t.Fatalf("Refresh() error = %v", errRefresh)
	}
	if refreshCalls != 1 {
		t.Fatalf("plugin RefreshAuth calls = %d, want 1", refreshCalls)
	}
	if inner.refreshCalls != 0 {
		t.Fatalf("inner Refresh calls = %d, want 0", inner.refreshCalls)
	}
	if refreshed == nil || refreshed.Metadata["access_token"] != "new-token" {
		t.Fatalf("Refresh() auth = %#v, want updated access_token", refreshed)
	}
	if refreshed.Attributes["base_url"] != "https://compat.example.com/v1" {
		t.Fatalf("Refresh() base_url = %q, want preserved", refreshed.Attributes["base_url"])
	}
}

func TestPluginRefreshCompatExecutorErrorsWhenRefreshUnavailable(t *testing.T) {
	inner := &stubCompatExecutor{id: "plugin-provider"}
	wrapped := NewPluginRefreshCompatExecutor(inner, New(), &config.Config{})
	auth := &coreauth.Auth{
		ID:       "auth-1",
		Provider: "plugin-provider",
		Metadata: map[string]any{
			"access_token":  "old-token",
			"refresh_token": "refresh-1",
		},
	}

	_, errRefresh := wrapped.Refresh(context.Background(), auth)
	if errRefresh == nil {
		t.Fatal("Refresh() error = nil, want unavailable plugin refresh error")
	}
	if !strings.Contains(errRefresh.Error(), "plugin auth provider refresh is unavailable") {
		t.Fatalf("Refresh() error = %v, want unavailable message", errRefresh)
	}
	if inner.refreshCalls != 0 {
		t.Fatalf("inner Refresh calls = %d, want 0", inner.refreshCalls)
	}
}

func TestPluginRefreshCompatExecutorNoOpForAPIKeyAuth(t *testing.T) {
	inner := &stubCompatExecutor{id: "plugin-provider"}
	wrapped := NewPluginRefreshCompatExecutor(inner, New(), &config.Config{})
	auth := &coreauth.Auth{
		ID:       "auth-1",
		Provider: "plugin-provider",
		Attributes: map[string]string{
			"api_key":  "sk-test",
			"base_url": "https://compat.example.com/v1",
		},
	}

	refreshed, errRefresh := wrapped.Refresh(context.Background(), auth)
	if errRefresh != nil {
		t.Fatalf("Refresh() error = %v", errRefresh)
	}
	if refreshed == nil || refreshed.Attributes["api_key"] != "sk-test" {
		t.Fatalf("Refresh() auth = %#v, want unchanged api key auth", refreshed)
	}
}