/**
 * Trusted-UI event synthesis for host code standing in for a person's gesture.
 *
 * Writes guarded by a `TrustedActionWrite`/`TrustedActionUiContract` policy
 * require a renderer-trusted event whose UI provenance matches the surface's
 * UI contract. In the shell the html worker reconciler attaches that
 * provenance and marks the event when a real DOM event fires on a trusted
 * surface. Two other hosts stand in for the gesture exactly as the renderer
 * does, and build the equivalent event here: the pattern test runner, for
 * steps that declare a `trustedUi` descriptor, and `cf profile create`, which
 * is a person at their own keyboard acting under their own key.
 *
 * The provenance comes from `reviewedActionProvenance()`, which keeps it the
 * shape the UI-contract matcher reads.
 */

import {
  markRendererTrustedEvent,
  reviewedActionProvenance,
} from "@commonfabric/runner/cfc";
import { isObjectNotArray, isObjectOrArray } from "@commonfabric/utils/types";

export interface TrustedUiDescriptor {
  /** `data-ui-pattern` / `data-ui-event-integrity` of the trusted surface. */
  surface: string;

  /** `data-ui-action` of the control inside the surface. */
  action: string;
}

export const isTrustedUiDescriptor = (
  value: unknown,
): value is TrustedUiDescriptor =>
  isObjectOrArray(value) &&
  typeof (value as { surface?: unknown }).surface === "string" &&
  typeof (value as { action?: unknown }).action === "string";

/**
 * Resolve the event value to send for an action step: the step's literal
 * `event` payload (if any), wrapped with trusted DOM provenance and the
 * renderer-trusted mark when a `trustedUi` descriptor is present.
 *
 * A trusted gesture without a payload sends `{ type: "click" }` (renderer
 * parity). An explicit record payload is sent exactly as authored — handlers
 * may branch on fields like `type`, so none are injected.
 */
export function buildActionEvent(
  event: unknown,
  trustedUi: unknown,
): unknown {
  if (!isTrustedUiDescriptor(trustedUi)) {
    return event;
  }
  const eventValue = {
    type: "click",
    ...(isObjectNotArray(event) ? event : {}),
    provenance: reviewedActionProvenance("dom", trustedUi),
  };
  markRendererTrustedEvent(eventValue);
  return eventValue;
}