import { type McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
import { z } from "zod/v4";
import {
  clearConfig,
  EwsClient,
  loadConfig,
  saveConfig,
} from "../ews_client.ts";

export function registerAuthTools(server: McpServer): void {
  server.registerTool(
    "login",
    {
      description: "Authenticate to Exchange EWS using NTLM credentials",
      inputSchema: z.object({
        serverUrl: z.string().describe(
          "EWS server URL (e.g. https://mail.example.com)",
        ),
        email: z.string().describe("Email address"),
        username: z.string().describe("NTLM username"),
        password: z.string().describe("NTLM password"),
        domain: z.string().optional().describe("NTLM domain (default: corp)"),
      }),
    },
    async ({ serverUrl, email, username, password, domain }) => {
      try {
        const config = {
          serverUrl: serverUrl.replace(/\/+$/, ""),
          email,
          username,
          password,
          domain: domain ?? "corp",
        };

        const client = new EwsClient(config);
        const result = await client.verifyConnection();

        if (!result.ok) {
          return {
            content: [{
              type: "text" as const,
              text: JSON.stringify({
                success: false,
                error: result.error ?? "Connection verification failed",
              }),
            }],
          };
        }

        saveConfig(config);

        return {
          content: [{
            type: "text" as const,
            text: JSON.stringify({
              success: true,
              message: `Logged in as ${email} to ${serverUrl}`,
            }),
          }],
        };
      } catch (error: any) {
        return {
          content: [{
            type: "text" as const,
            text: JSON.stringify({
              success: false,
              error: error.message ?? String(error),
            }),
          }],
        };
      }
    },
  );

  server.registerTool(
    "check_session",
    {
      description: "Check whether the current EWS session is authenticated",
      inputSchema: z.object({}),
    },
    async () => {
      try {
        const config = loadConfig();
        const client = new EwsClient(config);
        const result = await client.verifyConnection();

        return {
          content: [{
            type: "text" as const,
            text: JSON.stringify({
              authenticated: result.ok,
              email: config.email,
              serverUrl: config.serverUrl,
              error: result.error,
            }),
          }],
        };
      } catch (error: any) {
        return {
          content: [{
            type: "text" as const,
            text: JSON.stringify({
              authenticated: false,
              error: error.message ?? String(error),
            }),
          }],
        };
      }
    },
  );

  server.registerTool(
    "logout",
    {
      description: "Clear stored credentials",
      inputSchema: z.object({}),
    },
    async () => {
      clearConfig();
      return {
        content: [{
          type: "text" as const,
          text: JSON.stringify({
            success: true,
            message: "Logged out. Credentials cleared.",
          }),
        }],
      };
    },
  );
}