everruns-integrations-deno 0.17.16

// Deno Deploy connection provider.
//
// Supports both organization tokens (`ddo_...`) and personal tokens (`ddp_...`).
// Personal tokens require an org slug, stored as provider_metadata.

use crate::client::DenoClient;
use async_trait::async_trait;
use everruns_core::connector::{
    Connector, ConnectorFormSchema, ConnectorType, ConnectorValidation, FormField,
};
use std::collections::HashMap;

pub struct DenoConnector;

#[async_trait]
impl Connector for DenoConnector {
    fn provider_id(&self) -> &str {
        "deno"
    }

    fn display_name(&self) -> &str {
        "Deno Deploy"
    }

    fn description(&self) -> &str {
        "Deno Sandboxes for code execution"
    }

    fn icon(&self) -> &str {
        "server"
    }

    fn connection_type(&self) -> ConnectorType {
        ConnectorType::ApiKey
    }

    fn form_schema(&self) -> Option<ConnectorFormSchema> {
        Some(ConnectorFormSchema {
            fields: vec![
                FormField::password("api_key", "Access Token")
                    .required()
                    .with_placeholder("ddo_... or ddp_...")
                    .with_help(
                        "Organization token (ddo_...) or personal token (ddp_...). Personal tokens require the organization slug below.",
                    ),
                FormField::text("org_slug", "Organization Slug")
                    .with_placeholder("my-org")
                    .with_help(
                        "Required for personal tokens (ddp_...). Find it in your Deno Deploy dashboard URL.",
                    ),
            ],
            instructions_markdown:
                "1. Go to [Deno Deploy Sandbox](https://console.deno.com)\n2. Create an access token (`ddo_...` or `ddp_...`)\n3. Paste the token below"
                    .to_string(),
        })
    }

    async fn validate(&self, credential: &str) -> Result<ConnectorValidation, String> {
        // Single-field validation: only org tokens work without extra fields.
        if credential.starts_with("ddp_") {
            return Err(
                "Personal Deno tokens require an organization slug. Use the full form with the org slug field, or use an organization token (ddo_...).".to_string(),
            );
        }

        let client = DenoClient::new(credential.to_string(), None);
        client
            .list_sandboxes(&std::collections::BTreeMap::new())
            .await?;
        Ok(ConnectorValidation {
            provider_username: None,
            provider_metadata: None,
        })
    }

    async fn validate_fields(
        &self,
        fields: &HashMap<String, String>,
    ) -> Result<ConnectorValidation, String> {
        let api_key = fields.get("api_key").map(|s| s.as_str()).unwrap_or("");
        if api_key.is_empty() {
            return Err("Access token is required.".to_string());
        }

        let org_slug = fields
            .get("org_slug")
            .map(|s| s.trim().to_string())
            .filter(|s| !s.is_empty());

        if api_key.starts_with("ddp_") && org_slug.is_none() {
            return Err("Personal Deno tokens (ddp_...) require an organization slug.".to_string());
        }

        let org_for_client = if api_key.starts_with("ddp_") {
            org_slug.clone()
        } else {
            None
        };

        let client = DenoClient::new(api_key.to_string(), org_for_client);
        client
            .list_sandboxes(&std::collections::BTreeMap::new())
            .await?;

        // Only store metadata for personal tokens; org tokens don't need it.
        let provider_metadata = if api_key.starts_with("ddp_") {
            org_slug.map(|slug| serde_json::json!({ "org": slug }))
        } else {
            None
        };

        Ok(ConnectorValidation {
            provider_username: None,
            provider_metadata,
        })
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_provider_metadata() {
        let provider = DenoConnector;
        assert_eq!(provider.provider_id(), "deno");
        assert_eq!(provider.display_name(), "Deno Deploy");
        assert_eq!(provider.connection_type(), ConnectorType::ApiKey);
        assert_eq!(provider.icon(), "server");
    }

    #[test]
    fn test_form_schema() {
        let provider = DenoConnector;
        let schema = provider.form_schema().expect("schema");
        assert_eq!(schema.fields.len(), 2);
        assert_eq!(schema.fields[0].name, "api_key");
        assert_eq!(schema.fields[1].name, "org_slug");
        assert!(schema.instructions_markdown.contains("console.deno.com"));
    }

    #[tokio::test]
    async fn test_validate_rejects_personal_token_without_org() {
        let provider = DenoConnector;
        let err = provider.validate("ddp_test_token").await.unwrap_err();
        assert!(err.contains("organization slug"));
    }

    #[tokio::test]
    async fn test_validate_fields_rejects_personal_token_without_org() {
        let provider = DenoConnector;
        let mut fields = HashMap::new();
        fields.insert("api_key".to_string(), "ddp_test_token".to_string());
        let err = provider.validate_fields(&fields).await.unwrap_err();
        assert!(err.contains("organization slug"));
    }
}