import { and, db, desc, eq } from "@openstatus/db";
import {
  integration,
  selectWorkspaceSchema,
  workspace,
} from "@openstatus/db/src/schema";
import type { Workspace } from "@openstatus/db/src/schema/workspaces/validation";

export interface SlackWorkspace {
  workspace: Workspace;
  botToken: string;
  botUserId: string;
}

interface IntegrationCredential {
  botToken: string;
  botUserId: string;
}

export async function resolveWorkspace(
  teamId: string,
): Promise<SlackWorkspace | null> {
  const row = await db
    .select({
      workspaceId: integration.workspaceId,
      credential: integration.credential,
    })
    .from(integration)
    .where(
      and(
        eq(integration.name, "slack-agent"),
        eq(integration.externalId, teamId),
      ),
    )
    // Slack keeps one live token per (app, team); a reinstall invalidates all
    // earlier ones. If the team is linked to several workspaces, the newest row
    // is the only one holding a valid token.
    .orderBy(desc(integration.updatedAt))
    .get();

  if (!row?.workspaceId) return null;

  const credential = row.credential as IntegrationCredential | null;
  if (!credential?.botToken) return null;

  const ws = await db
    .select()
    .from(workspace)
    .where(eq(workspace.id, row.workspaceId))
    .get();

  if (!ws) return null;

  const parsed = selectWorkspaceSchema.safeParse(ws);
  if (!parsed.success) return null;

  return {
    workspace: parsed.data,
    botToken: credential.botToken,
    botUserId: credential.botUserId ?? "",
  };
}