caldir-cli 0.7.1

use std::collections::HashMap;

use anyhow::{Context, Result};
use caldir_core::caldir::Caldir;
use caldir_core::calendar::Calendar;
use caldir_core::date_range::DateRange;
use caldir_core::remote::protocol::{
    ConnectResponse, ConnectStepKind, CredentialsData, FieldType, HostedOAuthData, OAuthData,
    SetupData,
};
use caldir_core::remote::provider::Provider;
use dialoguer::MultiSelect;
use std::io::{self, Write};
use tokio::io::{AsyncBufReadExt, AsyncWriteExt, BufReader};
use tokio::net::TcpListener;

fn build_options(hosted: bool, redirect_uri: &str) -> serde_json::Map<String, serde_json::Value> {
    let mut options = serde_json::Map::new();
    options.insert("redirect_uri".into(), redirect_uri.into());
    options.insert("hosted".into(), hosted.into());
    options
}

pub async fn run(provider_name: &str, hosted: bool) -> Result<()> {
    let provider = Provider::from_name(provider_name);

    // Bind to port 0 so the OS picks a free port
    let listener = TcpListener::bind("127.0.0.1:0")
        .await
        .context("Failed to bind OAuth callback listener")?;
    let port = listener.local_addr()?.port();
    let redirect_uri = format!("http://localhost:{}/callback", port);
    let options = build_options(hosted, &redirect_uri);

    println!("Connecting to {provider_name}...\n");

    // Connect loop: keep calling `connect` until the provider says Done.
    let mut data = serde_json::Map::new();
    let account_identifier = loop {
        let response = provider.connect(options.clone(), data.clone()).await?;

        match response {
            ConnectResponse::Done { account_identifier } => {
                break account_identifier;
            }
            ConnectResponse::NeedsInput {
                step,
                data: step_data,
            } => {
                data = match step {
                    ConnectStepKind::NeedsSetup => {
                        let setup_data: SetupData = serde_json::from_value(step_data)
                            .context("Failed to parse setup data from provider")?;

                        println!("{}\n", setup_data.instructions);

                        let mut fields = serde_json::Map::new();
                        for field in &setup_data.fields {
                            if let Some(ref help) = field.help {
                                println!("{}", help);
                            }
                            let value = match field.field_type {
                                FieldType::Password => prompt_password(&field.label)?,
                                _ => prompt_text(&field.label)?,
                            };
                            fields.insert(field.id.clone(), value.into());
                        }

                        println!("\nSetup complete. Continuing with connection...\n");
                        fields
                    }
                    ConnectStepKind::OAuthRedirect => {
                        let oauth: OAuthData = serde_json::from_value(step_data)
                            .context("Failed to parse OAuth data from provider")?;

                        println!("Open this URL in your browser to authenticate:\n");
                        println!("{}\n", oauth.authorization_url);

                        if open::that(&oauth.authorization_url).is_err() {
                            println!(
                                "(Could not open browser automatically, please copy the URL above)"
                            );
                        }

                        let params = wait_for_callback(&listener).await?;

                        let code = params
                            .get("code")
                            .ok_or_else(|| anyhow::anyhow!("No code in callback"))?;
                        let state = params
                            .get("state")
                            .ok_or_else(|| anyhow::anyhow!("No state in callback"))?;

                        if state != &oauth.state {
                            anyhow::bail!("OAuth state mismatch - possible CSRF attack");
                        }

                        println!("\nReceived authorization code, exchanging for tokens...");

                        let mut credentials = serde_json::Map::new();
                        credentials.insert("code".into(), code.clone().into());
                        credentials.insert("state".into(), state.clone().into());
                        credentials.insert("redirect_uri".into(), redirect_uri.clone().into());
                        credentials
                    }
                    ConnectStepKind::HostedOAuth => {
                        let hosted_data: HostedOAuthData = serde_json::from_value(step_data)
                            .context("Failed to parse hosted OAuth data from provider")?;

                        println!("Open this URL in your browser to authenticate:\n");
                        println!("{}\n", hosted_data.url);

                        if open::that(&hosted_data.url).is_err() {
                            println!(
                                "(Could not open browser automatically, please copy the URL above)"
                            );
                        }

                        let params = wait_for_callback(&listener).await?;

                        let access_token = params
                            .get("access_token")
                            .ok_or_else(|| anyhow::anyhow!("No access_token in callback"))?;
                        let refresh_token = params
                            .get("refresh_token")
                            .ok_or_else(|| anyhow::anyhow!("No refresh_token in callback"))?;
                        let expires_in = params
                            .get("expires_in")
                            .ok_or_else(|| anyhow::anyhow!("No expires_in in callback"))?;

                        println!("\nReceived tokens, completing authentication...");

                        let mut credentials = serde_json::Map::new();
                        credentials.insert("access_token".into(), access_token.clone().into());
                        credentials.insert("refresh_token".into(), refresh_token.clone().into());
                        credentials.insert("expires_in".into(), expires_in.clone().into());
                        credentials
                    }
                    ConnectStepKind::Credentials => {
                        let creds_data: CredentialsData = serde_json::from_value(step_data)
                            .context("Failed to parse credentials data from provider")?;

                        let mut credentials = serde_json::Map::new();
                        for field in &creds_data.fields {
                            if let Some(ref help) = field.help {
                                println!("{}", help);
                            }
                            let value = match field.field_type {
                                FieldType::Password => prompt_password(&field.label)?,
                                _ => prompt_text(&field.label)?,
                            };
                            credentials.insert(field.id.clone(), value.into());
                        }

                        println!("\nValidating credentials...");
                        credentials
                    }
                };
            }
        }
    };

    let provider_account = provider.provider_account(account_identifier.clone());

    println!("Authenticated as: {}\n", account_identifier);
    println!("Fetching calendars...");

    // List all calendars for this account
    let calendar_configs = provider_account.list_calendars().await?;

    if calendar_configs.is_empty() {
        println!("No calendars found.");
        return Ok(());
    }

    println!("Found {} calendar(s).\n", calendar_configs.len());

    // Build selection items with calendar names
    let items: Vec<String> = calendar_configs
        .iter()
        .map(|c| c.name.clone().unwrap_or_else(|| "Unnamed".to_string()))
        .collect();

    // Show multi-select (all selected by default)
    let defaults: Vec<bool> = vec![true; items.len()];
    let selections = MultiSelect::new()
        .with_prompt("Select calendars to import (space to toggle, enter to confirm)")
        .items(&items)
        .defaults(&defaults)
        .interact()?;

    if selections.is_empty() {
        println!("No calendars selected.");
        return Ok(());
    }

    println!();

    // Create only selected calendars
    let mut created_slugs = Vec::new();
    for &idx in &selections {
        let config = &calendar_configs[idx];
        let slug = Calendar::unique_slug_for(config.name.as_deref())?;

        let calendar = Calendar {
            slug: slug.clone(),
            config: config.clone(),
        };

        calendar.save_config()?;
        created_slugs.push(slug.clone());

        println!("  {slug}/ (created)");
    }

    let mut caldir = Caldir::load()?;

    // Set the first writable calendar as default if none is configured yet
    let first_writable = selections.iter().enumerate().find_map(|(i, &idx)| {
        let config = &calendar_configs[idx];
        if config.read_only != Some(true) {
            Some(created_slugs[i].clone())
        } else {
            None
        }
    });
    if let Some(slug) = first_writable {
        caldir.set_default_calendar_if_unset(&slug)?;
    }

    println!("\nCalendars saved to {}\n", caldir.display_path().display());

    // Load the newly created calendars and do an initial pull
    let calendars: Vec<Calendar> = created_slugs
        .iter()
        .filter_map(|slug| Calendar::load(slug).ok())
        .collect();

    if !calendars.is_empty() {
        println!("Pulling events...\n");
        super::pull::run(calendars, DateRange::default(), false).await?;
    }

    Ok(())
}

/// Wait for an HTTP callback on a pre-bound listener and return all query parameters.
async fn wait_for_callback(listener: &TcpListener) -> Result<HashMap<String, String>> {
    let (stream, _) = listener
        .accept()
        .await
        .context("Failed to accept OAuth callback")?;

    let mut reader = BufReader::new(stream);
    let mut request_line = String::new();
    reader
        .read_line(&mut request_line)
        .await
        .context("Failed to read OAuth callback request line")?;

    // Parse the request to extract query parameters
    let url_part = request_line
        .split_whitespace()
        .nth(1)
        .ok_or_else(|| anyhow::anyhow!("Invalid HTTP request"))?;

    let url = url::Url::parse(&format!("http://localhost{}", url_part))?;

    let params: HashMap<String, String> = url.query_pairs().into_owned().collect();

    // Send a response to the browser
    let response = "HTTP/1.1 200 OK\r\n\
        Content-Type: text/html\r\n\
        Connection: close\r\n\
        \r\n\
        <html><body>\
        <h1>Authentication successful!</h1>\
        <p>You can close this window and return to the terminal.</p>\
        </body></html>";

    let mut stream = reader.into_inner();
    stream
        .write_all(response.as_bytes())
        .await
        .context("Failed to write OAuth callback response")?;
    stream.flush().await?;

    Ok(params)
}

/// Prompt the user for text input.
fn prompt_text(label: &str) -> Result<String> {
    print!("{}: ", label);
    io::stdout().flush()?;

    let mut input = String::new();
    io::stdin().read_line(&mut input)?;

    Ok(input.trim().to_string())
}

/// Prompt the user for password input (hidden).
fn prompt_password(label: &str) -> Result<String> {
    let prompt = format!("{}: ", label);
    rpassword::prompt_password(&prompt).context("Failed to read password")
}