/**
 * Descriptor interface for the shared auth manager base pattern.
 *
 * Each OAuth provider supplies a descriptor that parameterizes the
 * generic auth manager logic (wish tags, token field, scope handling, UI).
 */
import type { AuthState } from "./auth-types.ts";

export interface AuthManagerDescriptor {
  /** Internal name, e.g. "google", "airtable" */
  name: string;
  /** Display name, e.g. "Google", "Airtable" */
  displayName: string;
  /** Brand color hex, e.g. "#4285f4", "#18BFFF" */
  brandColor: string;
  /** Primary wish tag, e.g. "#googleAuth", "#airtableAuth" */
  wishTag: string;
  /** Variant wish tags for multi-account support, e.g. { personal: "#googleAuthPersonal" } */
  variantWishTags?: Record<string, string>;
  /** Token field name on the auth object */
  tokenField: "token" | "accessToken";
  /**
   * Unified scope registry. Each key is a short scope identifier (e.g. "gmail",
   * "data.records:read"). `description` is the human-readable label shown in UI.
   * `scopeString` is the value checked against the granted scopes array — for
   * Airtable this equals the key, for Google it's the full URL.
   */
  scopes: Record<string, { description: string; scopeString: string }>;
  /** Whether the provider supports user avatar images (Google: true, Airtable: false) */
  hasAvatarSupport: boolean;
}

/** Status colors shared across all auth managers */
export const STATUS_COLORS: Record<AuthState, string> = {
  loading: "var(--cf-colors-warning, #eab308)",
  "needs-login": "var(--cf-colors-red-500, #ef4444)",
  "missing-scopes": "var(--cf-colors-coral, #f97316)",
  "token-expired": "var(--cf-colors-red-500, #ef4444)",
  ready: "var(--cf-colors-green-500, #22c55e)",
};

/** Status messages shared across all auth managers */
export const STATUS_MESSAGES: Record<AuthState, string> = {
  loading: "Loading auth...",
  "needs-login": "Please sign in",
  "missing-scopes": "Additional permissions needed",
  "token-expired": "Session expired - click Refresh Session",
  ready: "Connected",
};