package postgres

import (
	"context"
	"database/sql"

	"switchboard-core/models"
)

// GitCredentialStore implements store.GitCredentialStore for PostgreSQL.
type GitCredentialStore struct{}

func (s *GitCredentialStore) Create(ctx context.Context, cred *models.GitCredential) error {
	if cred.ID != "" {
		return DB.QueryRowContext(ctx, `
			INSERT INTO git_credentials (id, user_id, name, auth_type, encrypted_data, nonce, public_key, fingerprint, persona_id)
			VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)
			RETURNING created_at`,
			cred.ID, cred.UserID, cred.Name, cred.AuthType,
			cred.EncryptedData, cred.Nonce,
			cred.PublicKey, cred.Fingerprint, cred.PersonaID,
		).Scan(&cred.CreatedAt)
	}
	return DB.QueryRowContext(ctx, `
		INSERT INTO git_credentials (user_id, name, auth_type, encrypted_data, nonce, public_key, fingerprint, persona_id)
		VALUES ($1, $2, $3, $4, $5, $6, $7, $8)
		RETURNING id, created_at`,
		cred.UserID, cred.Name, cred.AuthType,
		cred.EncryptedData, cred.Nonce,
		cred.PublicKey, cred.Fingerprint, cred.PersonaID,
	).Scan(&cred.ID, &cred.CreatedAt)
}

func (s *GitCredentialStore) GetByID(ctx context.Context, id string) (*models.GitCredential, error) {
	var c models.GitCredential
	err := DB.QueryRowContext(ctx, `
		SELECT id, user_id, name, auth_type, encrypted_data, nonce, public_key, fingerprint, persona_id, created_at
		FROM git_credentials WHERE id = $1`, id,
	).Scan(&c.ID, &c.UserID, &c.Name, &c.AuthType,
		&c.EncryptedData, &c.Nonce,
		&c.PublicKey, &c.Fingerprint, &c.PersonaID, &c.CreatedAt)
	if err != nil {
		return nil, err
	}
	return &c, nil
}

func (s *GitCredentialStore) ListByUser(ctx context.Context, userID string) ([]models.GitCredential, error) {
	rows, err := DB.QueryContext(ctx, `
		SELECT id, user_id, name, auth_type, encrypted_data, nonce, public_key, fingerprint, persona_id, created_at
		FROM git_credentials WHERE user_id = $1 ORDER BY created_at DESC`, userID)
	if err != nil {
		return nil, err
	}
	defer rows.Close()

	var creds []models.GitCredential
	for rows.Next() {
		var c models.GitCredential
		if err := rows.Scan(&c.ID, &c.UserID, &c.Name, &c.AuthType,
			&c.EncryptedData, &c.Nonce,
			&c.PublicKey, &c.Fingerprint, &c.PersonaID, &c.CreatedAt); err != nil {
			return nil, err
		}
		creds = append(creds, c)
	}
	return creds, rows.Err()
}

func (s *GitCredentialStore) Delete(ctx context.Context, id, userID string) error {
	res, err := DB.ExecContext(ctx, `DELETE FROM git_credentials WHERE id = $1 AND user_id = $2`, id, userID)
	if err != nil {
		return err
	}
	n, _ := res.RowsAffected()
	if n == 0 {
		return sql.ErrNoRows
	}
	return nil
}