package api

import (
	"strings"

	"git.julianfamily.org/keepassgo/internal/apiaudit"
	"git.julianfamily.org/keepassgo/internal/apitokens"
)

type AuditQuickFilter struct {
	Label string
	Query string
}

func Operations() []apitokens.Operation {
	return []apitokens.Operation{
		apitokens.OperationListEntries,
		apitokens.OperationListGroups,
		apitokens.OperationListTemplates,
		apitokens.OperationReadEntry,
		apitokens.OperationCopyPassword,
		apitokens.OperationCopyUsername,
		apitokens.OperationCopyURL,
		apitokens.OperationMutateEntry,
		apitokens.OperationMutateGroup,
		apitokens.OperationMutateTemplate,
		apitokens.OperationGeneratePassword,
		apitokens.OperationManageVault,
	}
}

func AuditDecisionLabel(eventType apiaudit.EventType) string {
	switch eventType {
	case apiaudit.EventApprovalRequested:
		return "Requested"
	case apiaudit.EventApprovalAllowed:
		return "Allowed"
	case apiaudit.EventApprovalDenied:
		return "Denied"
	case apiaudit.EventApprovalCanceled:
		return "Canceled"
	case apiaudit.EventApprovalTimedOut:
		return "Timed Out"
	case apiaudit.EventAuthRejected:
		return "Auth Rejected"
	default:
		return strings.ReplaceAll(string(eventType), "_", " ")
	}
}

func AuditOperationLabel(operation apitokens.Operation) string {
	if strings.TrimSpace(string(operation)) == "" {
		return "Other"
	}
	return strings.ReplaceAll(string(operation), "_", " ")
}

func CompactAuditFilterLabel(label string) string {
	label = strings.TrimSpace(label)
	if len(label) <= 22 {
		return label
	}
	return label[:19] + "..."
}

func AuditEventSearchTerms(event apiaudit.Event) string {
	parts := []string{
		string(event.Type),
		AuditDecisionLabel(event.Type),
		event.TokenName,
		event.ClientName,
		string(event.Operation),
		AuditOperationLabel(event.Operation),
		strings.Join(event.Resource.Path, " / "),
		event.Resource.EntryID,
		event.Message,
	}
	switch event.Type {
	case apiaudit.EventApprovalAllowed:
		parts = append(parts, "allow approved")
	case apiaudit.EventApprovalDenied:
		parts = append(parts, "deny denied")
	case apiaudit.EventApprovalRequested:
		parts = append(parts, "prompt requested")
	case apiaudit.EventApprovalCanceled:
		parts = append(parts, "cancel canceled")
	case apiaudit.EventApprovalTimedOut:
		parts = append(parts, "timeout timed out")
	case apiaudit.EventAuthRejected:
		parts = append(parts, "rejected unauthorized")
	}
	return strings.ToLower(strings.Join(parts, " "))
}