zad-cli 0.9.3

//! Discord's plug-in to the generic service lifecycle.
//!
//! Everything in this file is Discord-specific — scope names, prompts
//! for application ID and default guild, the shape of the Discord
//! credential (`DiscordSecrets` = one bot token), and the call that
//! validates the token against the Discord API. The generic plumbing
//! (flag parsing, path resolution, JSON envelopes, human banners,
//! keychain I/O sequencing) lives in `src/cli/lifecycle.rs` and is
//! shared with every other service.
//!
//! See `docs/services.md#adding-a-new-service` for the recipe a new
//! service would follow. This file is the first — and, until
//! Telegram/Slack/etc. land, only — implementation of that recipe.

use crate::cli::DialoguerExt;
use async_trait::async_trait;
use clap::Args;
use dialoguer::{Input, Password, theme::ColorfulTheme};

use crate::cli::lifecycle::{
    BotTokenArgs, CliLifecycle, CreateArgsBase, CreateArgsLike, LifecycleService, ScopesArg,
    SecretRef, resolve_scopes,
};
use zad::config::{DiscordServiceCfg, ProjectConfig};
use zad::error::{Result, ZadError};
use zad::secrets::{self, Scope};
use zad::service::discord::DiscordHttp;

const DEFAULT_SCOPES: &[&str] = &["guilds", "messages.read", "messages.send"];
const ALL_SCOPES: &[&str] = &[
    "guilds",
    "messages.read",
    "messages.send",
    "channels.manage",
    "gateway.listen",
];

// ---------------------------------------------------------------------------
// Discord's credential shape
// ---------------------------------------------------------------------------

/// Discord only uses one secret — the long-lived bot token — so
/// `Secrets` wraps it in a named struct rather than `String` for
/// parity with services that need richer shapes.
pub struct DiscordSecrets {
    pub bot_token: String,
}

// ---------------------------------------------------------------------------
// Discord's `zad service create discord` args
// ---------------------------------------------------------------------------

#[derive(Debug, Args)]
pub struct CreateArgs {
    #[command(flatten)]
    pub base: CreateArgsBase,
    #[command(flatten)]
    pub token: BotTokenArgs,
    #[command(flatten)]
    pub scopes: ScopesArg,
    /// Discord application (bot) ID.
    #[arg(long)]
    pub application_id: Option<String>,
    /// Optional default guild (server) ID.
    #[arg(long)]
    pub default_guild: Option<String>,
    /// Numeric Discord user ID for the human user this bot belongs to.
    /// Resolved from the literal `@me` in later send targets. Obtain
    /// from Discord: Settings → Advanced → enable Developer Mode, then
    /// right-click yourself → "Copy User ID". Leave unset in
    /// non-interactive mode to skip; fill later via `zad discord self
    /// set <id>`.
    #[arg(long)]
    pub self_user: Option<String>,
}

impl CreateArgsLike for CreateArgs {
    fn base(&self) -> &CreateArgsBase {
        &self.base
    }
}

// ---------------------------------------------------------------------------
// The trait impl — this is the entire Discord-specific surface
// ---------------------------------------------------------------------------

pub struct DiscordLifecycle;

#[async_trait]
impl LifecycleService for DiscordLifecycle {
    const NAME: &'static str = "discord";
    const DISPLAY: &'static str = "Discord";
    type Cfg = DiscordServiceCfg;
    type Secrets = DiscordSecrets;

    fn enable_in_project(cfg: &mut ProjectConfig) {
        cfg.enable_discord();
    }

    fn disable_in_project(cfg: &mut ProjectConfig) {
        cfg.disable_discord();
    }

    async fn validate(_cfg: &DiscordServiceCfg, creds: &mut DiscordSecrets) -> Result<String> {
        DiscordHttp::unscoped(&creds.bot_token)
            .validate_token()
            .await
            .map_err(|e| ZadError::Service {
                name: Self::NAME,
                message: format!("token validation failed: {e}"),
            })
    }

    fn store_secrets(creds: &DiscordSecrets, scope: Scope<'_>) -> Result<Vec<SecretRef>> {
        let account = secrets::account(Self::NAME, "bot", scope);
        secrets::store(&account, &creds.bot_token)?;
        Ok(vec![SecretRef {
            label: "token",
            account,
            present: true,
        }])
    }

    fn delete_secrets(scope: Scope<'_>) -> Result<Vec<SecretRef>> {
        let account = secrets::account(Self::NAME, "bot", scope);
        secrets::delete(&account)?;
        Ok(vec![SecretRef {
            label: "token",
            account,
            present: false,
        }])
    }

    fn inspect_secrets(scope: Scope<'_>) -> Result<Vec<SecretRef>> {
        let account = secrets::account(Self::NAME, "bot", scope);
        let present = secrets::load(&account)?.is_some();
        Ok(vec![SecretRef {
            label: "token",
            account,
            present,
        }])
    }

    fn load_secrets(scope: Scope<'_>) -> Result<Option<DiscordSecrets>> {
        let account = secrets::account(Self::NAME, "bot", scope);
        Ok(secrets::load(&account)?.map(|bot_token| DiscordSecrets { bot_token }))
    }

    fn cfg_human(cfg: &DiscordServiceCfg) -> Vec<(&'static str, String)> {
        let mut out = vec![("app id", cfg.application_id.clone())];
        if let Some(g) = &cfg.default_guild {
            out.push(("guild", g.clone()));
        }
        if let Some(u) = &cfg.self_user_id {
            out.push(("self", u.clone()));
        }
        out
    }

    fn cfg_json(cfg: &DiscordServiceCfg) -> serde_json::Value {
        serde_json::json!({
            "application_id": cfg.application_id,
            "default_guild": cfg.default_guild,
            "self_user_id": cfg.self_user_id,
        })
    }

    fn scopes_of(cfg: &DiscordServiceCfg) -> &[String] {
        &cfg.scopes
    }

    fn post_create_hint(cfg: &DiscordServiceCfg) -> Option<String> {
        Some(install_url(&cfg.application_id))
    }
}

#[async_trait]
impl CliLifecycle for DiscordLifecycle {
    type CreateArgs = CreateArgs;

    async fn resolve(
        args: &CreateArgs,
        non_interactive: bool,
    ) -> Result<(DiscordServiceCfg, DiscordSecrets)> {
        let open_browser = !args.base.no_browser;
        let application_id = resolve_application_id(
            args.application_id.as_deref(),
            open_browser,
            non_interactive,
        )?;
        let default_guild = resolve_default_guild(args.default_guild.as_deref(), non_interactive)?;
        let scopes = resolve_scopes(
            args.scopes.scopes.as_deref(),
            DEFAULT_SCOPES,
            ALL_SCOPES,
            non_interactive,
        )?;
        let bot_token = resolve_discord_bot_token(
            args.token.bot_token.as_deref(),
            args.token.bot_token_env.as_deref(),
            &application_id,
            open_browser,
            non_interactive,
        )?;
        let self_user_id =
            resolve_self_user_id(args.self_user.as_deref(), &bot_token, non_interactive).await?;
        Ok((
            DiscordServiceCfg {
                application_id,
                scopes,
                default_guild,
                self_user_id,
            },
            DiscordSecrets { bot_token },
        ))
    }
}

// ---------------------------------------------------------------------------
// Discord-specific prompt helpers
// ---------------------------------------------------------------------------

fn theme() -> ColorfulTheme {
    ColorfulTheme::default()
}

fn resolve_application_id(
    flag: Option<&str>,
    open_browser: bool,
    non_interactive: bool,
) -> Result<String> {
    if let Some(v) = flag {
        return validate_numeric(v, "application-id").map(|_| v.to_string());
    }
    if non_interactive {
        return Err(ZadError::MissingRequired("--application-id"));
    }

    let url = PORTAL_APPS_URL;
    println!();
    println!("Your Discord applications live at:");
    println!("  {url}");
    println!("Create one (or open an existing app) and copy its Application ID.");
    if open_browser {
        let _ = open::that(url);
    }

    let v: String = Input::with_theme(&theme())
        .with_prompt("Discord application ID")
        .validate_with(|s: &String| validate_numeric(s, "application-id").map(|_| ()))
        .interact_text()
        .into_zad()?;
    Ok(v)
}

fn resolve_default_guild(flag: Option<&str>, non_interactive: bool) -> Result<Option<String>> {
    if let Some(v) = flag {
        validate_numeric(v, "default-guild")?;
        return Ok(Some(v.to_string()));
    }
    if non_interactive {
        return Ok(None);
    }

    println!();
    println!("To find a guild (server) ID in Discord:");
    println!("  Settings → Advanced → enable Developer Mode, then");
    println!("  right-click the server icon → \"Copy Server ID\".");
    println!("Leave blank to skip — you can set a default guild later.");

    let v: String = Input::with_theme(&theme())
        .with_prompt("Default guild ID (leave blank for none)")
        .allow_empty(true)
        .interact_text()
        .into_zad()?;
    if v.trim().is_empty() {
        Ok(None)
    } else {
        validate_numeric(&v, "default-guild").map(|_| Some(v))
    }
}

fn validate_numeric(v: &str, field: &'static str) -> Result<()> {
    if v.chars().all(|c| c.is_ascii_digit()) && !v.is_empty() {
        Ok(())
    } else {
        Err(ZadError::Invalid(format!(
            "{field} must be a numeric Discord snowflake, got `{v}`"
        )))
    }
}

/// Discord-specific bot-token prompt: same flag/env contract as
/// the generic `resolve_bot_token`, but the interactive path also
/// surfaces (and optionally opens) the developer-portal URL where
/// the token is actually generated. Discord doesn't issue bot
/// tokens via OAuth — the portal is the only source — so the best
/// "easy setup" we can offer is dropping the user on the right
/// page and asking them to paste once.
fn resolve_discord_bot_token(
    flag: Option<&str>,
    env_flag: Option<&str>,
    application_id: &str,
    open_browser: bool,
    non_interactive: bool,
) -> Result<String> {
    if let Some(env) = env_flag {
        return std::env::var(env).map_err(|_| ZadError::MissingEnv(env.to_string()));
    }
    if let Some(v) = flag {
        return Ok(v.to_string());
    }
    if non_interactive {
        return Err(ZadError::MissingRequired("--bot-token or --bot-token-env"));
    }

    let url = portal_bot_url(application_id);
    println!();
    println!("Your Discord bot token lives at:");
    println!("  {url}");
    println!("Click \"Reset Token\" → \"Copy\", then paste it below.");
    if open_browser {
        let _ = open::that(&url);
    }

    let v = Password::with_theme(&theme())
        .with_prompt("Discord bot token")
        .interact()
        .into_zad()?;
    Ok(v)
}

const PORTAL_APPS_URL: &str = "https://discord.com/developers/applications";

fn portal_bot_url(application_id: &str) -> String {
    format!("https://discord.com/developers/applications/{application_id}/bot")
}

fn install_url(application_id: &str) -> String {
    format!(
        "https://discord.com/api/oauth2/authorize?client_id={application_id}&scope=bot&permissions=0"
    )
}

// ---------------------------------------------------------------------------
// Self-user capture
// ---------------------------------------------------------------------------

/// Resolve `self_user_id` for `zad service create discord`. The flag
/// path is non-interactive: validate numeric, validate against the
/// Discord API, persist. The interactive path prints the Developer
/// Mode recipe, prompts, and validates.
async fn resolve_self_user_id(
    flag: Option<&str>,
    bot_token: &str,
    non_interactive: bool,
) -> Result<Option<String>> {
    if let Some(raw) = flag {
        return validate_self_user(bot_token, raw).await.map(Some);
    }
    if non_interactive {
        return Ok(None);
    }

    println!();
    println!("Optional: configure `@me` so commands like");
    println!("  zad discord send --user @me \"hello\"");
    println!("resolve to your own Discord user.");
    println!("Find your user ID: Settings → Advanced → enable Developer Mode,");
    println!("then right-click yourself → \"Copy User ID\".");

    let raw: String = Input::with_theme(&theme())
        .with_prompt("Your Discord user ID (leave blank to skip)")
        .allow_empty(true)
        .interact_text()
        .into_zad()?;
    if raw.trim().is_empty() {
        return Ok(None);
    }
    validate_self_user(bot_token, raw.trim()).await.map(Some)
}

/// Validate a Discord user-ID string: numeric snowflake that resolves
/// via `GET /users/{id}`. Shared between the create-time path and
/// `zad discord self set`. Returns the canonical string form (not the
/// parsed `u64`) because the config field is already a `String`.
pub async fn validate_self_user(bot_token: &str, raw: &str) -> Result<String> {
    validate_numeric(raw, "self-user")?;
    let id: u64 = raw.parse().map_err(|_| {
        ZadError::Invalid(format!(
            "self-user `{raw}` doesn't fit in a 64-bit unsigned integer"
        ))
    })?;
    let name = DiscordHttp::unscoped(bot_token)
        .get_user(id)
        .await
        .map_err(|e| ZadError::Service {
            name: "discord",
            message: format!("user-id validation failed: {e}"),
        })?;
    println!("  ✓ resolved `{raw}` as `{name}`");
    Ok(raw.to_string())
}