export type WorkspaceConnectionCapability =
  | "search"
  | "import"
  | "messages"
  | "meetings"
  | "crm"
  | "code"
  | "docs";

export type WorkspaceConnectionTemplateUse =
  | "analytics"
  | "brain"
  | "calendar"
  | "clips"
  | "content"
  | "crm"
  | "design"
  | "dispatch"
  | "forms"
  | "mail"
  | "slides";

export type WorkspaceConnectionProviderId =
  | "slack"
  | "github"
  | "figma"
  | "notion"
  | "gmail"
  | "google_drive"
  | "hubspot"
  | "salesforce"
  | "jira"
  | "sentry"
  | "granola"
  | "clips"
  | "generic";

export interface WorkspaceConnectionCredentialKey {
  key: string;
  label: string;
  description?: string;
  required?: boolean;
}

export interface WorkspaceConnectionProvider {
  id: WorkspaceConnectionProviderId;
  label: string;
  description: string;
  credentialKeys: readonly WorkspaceConnectionCredentialKey[];
  capabilities: readonly WorkspaceConnectionCapability[];
  recommendedTemplateUses: readonly WorkspaceConnectionTemplateUse[];
  oauth?: {
    provider: string;
    authorizationUrl: string;
    tokenUrl: string;
    refreshUrl?: string;
    scopes: readonly string[];
  };
}

export interface ListWorkspaceConnectionProvidersOptions {
  capability?: WorkspaceConnectionCapability;
  templateUse?: WorkspaceConnectionTemplateUse;
  providerOverrides?: readonly WorkspaceConnectionProvider[];
}

export function defineWorkspaceConnectionProvider<
  const T extends WorkspaceConnectionProvider,
>(provider: T): T {
  return provider;
}

export const WORKSPACE_CONNECTION_PROVIDERS = [
  defineWorkspaceConnectionProvider({
    id: "slack",
    label: "Slack",
    description:
      "Workspace conversations and channel history for company memory, support workflows, and messaging automations.",
    credentialKeys: [
      {
        key: "SLACK_BOT_TOKEN",
        label: "Slack bot token (legacy)",
        description:
          "Legacy single-workspace fallback. For new messaging automations, connect Slack from Settings → Messaging instead.",
        required: true,
      },
    ],
    capabilities: ["search", "import", "messages"],
    recommendedTemplateUses: ["brain", "dispatch", "analytics"],
  }),
  defineWorkspaceConnectionProvider({
    id: "github",
    label: "GitHub",
    description:
      "Repository, issue, pull request, and code context for product memory, engineering workflows, and analytics.",
    credentialKeys: [
      {
        key: "GITHUB_TOKEN",
        label: "GitHub token (fallback)",
        description:
          "Optional fine-grained token fallback. OAuth is preferred for new connections.",
        required: false,
      },
    ],
    oauth: {
      provider: "github",
      authorizationUrl: "https://github.com/login/oauth/authorize",
      tokenUrl: "https://github.com/login/oauth/access_token",
      scopes: ["repo", "read:org", "read:user", "user:email"],
    },
    capabilities: ["search", "import", "code", "docs"],
    recommendedTemplateUses: ["brain", "analytics", "dispatch"],
  }),
  defineWorkspaceConnectionProvider({
    id: "figma",
    label: "Figma",
    description:
      "Design files, frames, components, rendered previews, and library context for creative workflows.",
    credentialKeys: [
      {
        key: "FIGMA_ACCESS_TOKEN",
        label: "Figma personal access token (fallback)",
        description:
          "Optional fallback for local or individual use. Workspace OAuth is preferred.",
        required: false,
      },
    ],
    oauth: {
      provider: "figma",
      authorizationUrl: "https://www.figma.com/oauth",
      tokenUrl: "https://api.figma.com/v1/oauth/token",
      refreshUrl: "https://api.figma.com/v1/oauth/token",
      scopes: [
        "current_user:read",
        "file_content:read",
        "file_metadata:read",
        "projects:read",
      ],
    },
    capabilities: ["search", "import", "docs"],
    recommendedTemplateUses: ["brain", "design", "slides", "content"],
  }),
  defineWorkspaceConnectionProvider({
    id: "notion",
    label: "Notion",
    description:
      "Workspace docs, wikis, pages, and databases for knowledge capture and search.",
    credentialKeys: [],
    oauth: {
      provider: "notion",
      authorizationUrl: "https://api.notion.com/v1/oauth/authorize",
      tokenUrl: "https://api.notion.com/v1/oauth/token",
      refreshUrl: "https://api.notion.com/v1/oauth/token",
      scopes: [],
    },
    capabilities: ["search", "import", "docs"],
    recommendedTemplateUses: ["brain", "content", "dispatch"],
  }),
  defineWorkspaceConnectionProvider({
    id: "gmail",
    label: "Gmail",
    description:
      "Mailbox messages and threads for search, triage, customer context, and agent replies.",
    credentialKeys: [
      {
        key: "GOOGLE_CLIENT_ID",
        label: "Google OAuth client ID",
        required: true,
      },
      {
        key: "GOOGLE_CLIENT_SECRET",
        label: "Google OAuth client secret",
        required: true,
      },
    ],
    capabilities: ["search", "import", "messages"],
    recommendedTemplateUses: ["mail", "brain", "dispatch"],
  }),
  defineWorkspaceConnectionProvider({
    id: "google_drive",
    label: "Google Drive",
    description:
      "Drive files, Docs, Sheets, and Slides for document search and import workflows.",
    credentialKeys: [
      {
        key: "GOOGLE_CLIENT_ID",
        label: "Google OAuth client ID",
        required: true,
      },
      {
        key: "GOOGLE_CLIENT_SECRET",
        label: "Google OAuth client secret",
        required: true,
      },
    ],
    capabilities: ["search", "import", "docs"],
    recommendedTemplateUses: [
      "brain",
      "content",
      "slides",
      "dispatch",
      "analytics",
    ],
    oauth: {
      provider: "google",
      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
      tokenUrl: "https://oauth2.googleapis.com/token",
      scopes: ["https://www.googleapis.com/auth/drive.file"],
    },
  }),
  defineWorkspaceConnectionProvider({
    id: "hubspot",
    label: "HubSpot",
    description:
      "CRM records, companies, contacts, deals, and engagement history for customer-aware apps.",
    credentialKeys: [
      {
        key: "HUBSPOT_PRIVATE_APP_TOKEN",
        label: "HubSpot private app token (fallback)",
        description:
          "Optional private app token fallback. OAuth is preferred for new connections.",
        required: false,
      },
      {
        key: "HUBSPOT_ACCESS_TOKEN",
        label: "HubSpot access token (fallback)",
        description:
          "Optional legacy access token fallback for existing HubSpot setups.",
        required: false,
      },
    ],
    oauth: {
      provider: "hubspot",
      authorizationUrl: "https://app.hubspot.com/oauth/authorize",
      tokenUrl: "https://api.hubapi.com/oauth/v3/token",
      refreshUrl: "https://api.hubapi.com/oauth/v3/token",
      scopes: [
        "oauth",
        "crm.objects.contacts.read",
        "crm.objects.companies.read",
        "crm.objects.deals.read",
        "crm.objects.tickets.read",
        "crm.schemas.contacts.read",
        "crm.schemas.companies.read",
        "crm.schemas.deals.read",
        "crm.schemas.tickets.read",
      ],
    },
    capabilities: ["search", "import", "crm"],
    recommendedTemplateUses: ["analytics", "brain", "crm", "mail", "dispatch"],
  }),
  defineWorkspaceConnectionProvider({
    id: "salesforce",
    label: "Salesforce",
    description:
      "CRM accounts, contacts, opportunities, custom objects, and activity history for customer-aware apps.",
    credentialKeys: [],
    oauth: {
      provider: "salesforce",
      authorizationUrl:
        "https://login.salesforce.com/services/oauth2/authorize",
      tokenUrl: "https://login.salesforce.com/services/oauth2/token",
      refreshUrl: "https://login.salesforce.com/services/oauth2/token",
      scopes: ["api", "refresh_token", "id"],
    },
    capabilities: ["search", "import", "crm"],
    recommendedTemplateUses: ["analytics", "brain", "crm", "dispatch"],
  }),
  defineWorkspaceConnectionProvider({
    id: "jira",
    label: "Jira Cloud",
    description:
      "Projects, issues, sprints, and delivery context for engineering analytics and product workflows.",
    credentialKeys: [
      {
        key: "JIRA_BASE_URL",
        label: "Jira base URL (fallback)",
        description:
          "Optional site URL for API-token fallback connections. OAuth connections discover their site automatically.",
        required: false,
      },
      {
        key: "JIRA_USER_EMAIL",
        label: "Jira email (fallback)",
        description:
          "Optional Atlassian account email for API-token fallback connections.",
        required: false,
      },
      {
        key: "JIRA_API_TOKEN",
        label: "Jira API token (fallback)",
        description:
          "Optional API token fallback for existing Jira Cloud setups. OAuth is preferred for new connections.",
        required: false,
      },
    ],
    oauth: {
      provider: "jira",
      authorizationUrl: "https://auth.atlassian.com/authorize",
      tokenUrl: "https://auth.atlassian.com/oauth/token",
      refreshUrl: "https://auth.atlassian.com/oauth/token",
      scopes: ["read:jira-work", "read:jira-user", "offline_access"],
    },
    capabilities: ["search", "import", "code", "docs"],
    recommendedTemplateUses: ["analytics", "brain", "dispatch"],
  }),
  defineWorkspaceConnectionProvider({
    id: "sentry",
    label: "Sentry",
    description:
      "Error tracking, performance issues, projects, and release context for engineering analytics.",
    credentialKeys: [
      {
        key: "SENTRY_AUTH_TOKEN",
        label: "Sentry auth token (fallback)",
        description:
          "Optional auth token fallback for self-hosted or local Sentry setups. OAuth is preferred for sentry.io.",
        required: false,
      },
      {
        key: "SENTRY_SERVER_TOKEN",
        label: "Sentry server token (fallback)",
        description:
          "Optional server token fallback for existing Sentry deployments.",
        required: false,
      },
    ],
    oauth: {
      provider: "sentry",
      authorizationUrl: "https://sentry.io/oauth/authorize/",
      tokenUrl: "https://sentry.io/oauth/token/",
      refreshUrl: "https://sentry.io/oauth/token/",
      scopes: ["org:read", "project:read", "event:read", "team:read"],
    },
    capabilities: ["search", "import", "docs"],
    recommendedTemplateUses: ["analytics", "brain", "dispatch"],
  }),
  defineWorkspaceConnectionProvider({
    id: "granola",
    label: "Granola",
    description:
      "Meeting notes and transcripts for company memory and follow-up workflows.",
    credentialKeys: [
      {
        key: "GRANOLA_API_KEY",
        label: "Granola API key",
        description:
          "API key for accessible team notes; templates should respect Granola's workspace visibility.",
        required: true,
      },
    ],
    capabilities: ["search", "import", "meetings", "docs"],
    recommendedTemplateUses: ["brain", "calendar", "dispatch"],
  }),
  defineWorkspaceConnectionProvider({
    id: "clips",
    label: "Clips",
    description:
      "Agent-native Clips exports and recordings for transcript import and searchable meeting context.",
    credentialKeys: [],
    capabilities: ["search", "import", "meetings"],
    recommendedTemplateUses: ["brain", "clips"],
  }),
  defineWorkspaceConnectionProvider({
    id: "generic",
    label: "Generic",
    description:
      "Custom webhooks, CSV exports, transcript drops, and one-off sources that do not need a first-class provider yet.",
    credentialKeys: [],
    capabilities: ["search", "import", "docs"],
    recommendedTemplateUses: [
      "brain",
      "analytics",
      "content",
      "dispatch",
      "forms",
    ],
  }),
] as const satisfies readonly WorkspaceConnectionProvider[];

const PROVIDERS_BY_ID = new Map<
  WorkspaceConnectionProviderId,
  WorkspaceConnectionProvider
>(WORKSPACE_CONNECTION_PROVIDERS.map((provider) => [provider.id, provider]));

export function listWorkspaceConnectionProviders(
  options: ListWorkspaceConnectionProvidersOptions = {},
): WorkspaceConnectionProvider[] {
  return mergeWorkspaceConnectionProviders(options.providerOverrides)
    .filter((provider) => {
      if (
        options.capability &&
        !includesWorkspaceConnectionCapability(
          provider.capabilities,
          options.capability,
        )
      ) {
        return false;
      }
      if (
        options.templateUse &&
        !includesWorkspaceConnectionTemplateUse(
          provider.recommendedTemplateUses,
          options.templateUse,
        )
      ) {
        return false;
      }
      return true;
    })
    .map((provider) => ({ ...provider }));
}

export function mergeWorkspaceConnectionProviders(
  overrides: readonly WorkspaceConnectionProvider[] = [],
): WorkspaceConnectionProvider[] {
  return mergeDefinitionsById(WORKSPACE_CONNECTION_PROVIDERS, overrides);
}

export function getWorkspaceConnectionProvider(
  id: string,
  overrides: readonly WorkspaceConnectionProvider[] = [],
): WorkspaceConnectionProvider | undefined {
  const provider = overrides.length
    ? mergeWorkspaceConnectionProviders(overrides).find(
        (candidate) => candidate.id === id,
      )
    : PROVIDERS_BY_ID.get(id as WorkspaceConnectionProviderId);
  return provider ? { ...provider } : undefined;
}

export function isWorkspaceConnectionProviderId(
  id: string,
): id is WorkspaceConnectionProviderId {
  return PROVIDERS_BY_ID.has(id as WorkspaceConnectionProviderId);
}

export function listWorkspaceConnectionProvidersForTemplate(
  templateUse: WorkspaceConnectionTemplateUse,
  providerOverrides: readonly WorkspaceConnectionProvider[] = [],
): WorkspaceConnectionProvider[] {
  return listWorkspaceConnectionProviders({ templateUse, providerOverrides });
}

export function listWorkspaceConnectionProvidersForCapability(
  capability: WorkspaceConnectionCapability,
  providerOverrides: readonly WorkspaceConnectionProvider[] = [],
): WorkspaceConnectionProvider[] {
  return listWorkspaceConnectionProviders({ capability, providerOverrides });
}

export function workspaceConnectionProviderSupports(
  providerOrId: WorkspaceConnectionProvider | string,
  capability: WorkspaceConnectionCapability,
): boolean {
  const provider =
    typeof providerOrId === "string"
      ? getWorkspaceConnectionProvider(providerOrId)
      : providerOrId;
  return provider?.capabilities.includes(capability) ?? false;
}

function includesWorkspaceConnectionCapability(
  capabilities: readonly WorkspaceConnectionCapability[],
  capability: WorkspaceConnectionCapability,
): boolean {
  return capabilities.includes(capability);
}

function includesWorkspaceConnectionTemplateUse(
  templateUses: readonly WorkspaceConnectionTemplateUse[],
  templateUse: WorkspaceConnectionTemplateUse,
): boolean {
  return templateUses.includes(templateUse);
}
import { mergeDefinitionsById } from "../shared/merge-by-id.js";