/**
 * ─────────────────────────────────────────────
 *  SPB Git — Personal Git Platform
 * ─────────────────────────────────────────────
 *  Author  : Simon-Pierre Boucher
 *  Contact : contact@spboucher.ai
 *  File    : cli/commands/token.mjs
 *  Purpose : `spbgit token new|list|revoke` — PAT management
 *  License : MIT © Simon-Pierre Boucher
 * ─────────────────────────────────────────────
 */

import pc from 'picocolors';
import { requireCliConfig } from '../lib/config.mjs';
import { api } from '../lib/api.mjs';
import { printTable } from '../lib/ui.mjs';

export function registerToken(program) {
  const token = program.command('token').description('manage personal access tokens');

  token
    .command('new')
    .description('mint a new PAT (shown exactly once)')
    .option('--label <label>', 'token label', 'cli')
    .action(async (opts) => {
      const config = requireCliConfig();
      const result = await api(config, 'POST', '/api/v1/tokens', { label: opts.label });
      console.log(`${pc.green('✓')} New token (label: ${result.label}) — copy it now, it will never be shown again:\n`);
      console.log(`  ${pc.bold(result.token)}\n`);
      console.log(pc.dim('Store it with `spbgit init` on the machine that will use it.'));
    });

  token
    .command('list')
    .description('list tokens (hashes never leave the server)')
    .option('--json', 'machine-readable output')
    .action(async (opts) => {
      const config = requireCliConfig();
      const { tokens } = await api(config, 'GET', '/api/v1/tokens');
      if (opts.json) {
        console.log(JSON.stringify(tokens, null, 2));
        return;
      }
      printTable([
        [pc.bold('ID'), pc.bold('LABEL'), pc.bold('CREATED'), pc.bold('LAST USED')],
        ...tokens.map((t) => [t.id, t.label, t.created?.slice(0, 10) ?? '', t.lastUsed?.slice(0, 16)?.replace('T', ' ') ?? pc.dim('never')]),
      ]);
    });

  token
    .command('revoke <id>')
    .description('revoke a token by id')
    .action(async (id) => {
      const config = requireCliConfig();
      await api(config, 'DELETE', `/api/v1/tokens/${encodeURIComponent(id)}`);
      console.log(`${pc.green('✓')} Token ${id} revoked.`);
    });
}