import { TokenCrypto } from "@fluxy-chat/sdk";

// Initialize with your master encryption key (store in Worker secrets)
const crypto = new TokenCrypto(process.env.OAUTH_ENCRYPTION_KEY);

// Encrypt an OAuth token before storing it
const encrypted = await crypto.encrypt("xoxb-slack-bot-token-...");
// { ciphertext: "base64...", iv: "base64...", tag: "base64..." }

// Store `encrypted` in D1
await db.prepare(
  "INSERT INTO oauth_tokens (adapter, user_id, ciphertext, iv, tag) VALUES (?, ?, ?, ?, ?)"
).bind("slack", "U123", encrypted.ciphertext, encrypted.iv, encrypted.tag);

// Decrypt when you need to use the token
const row = await db.prepare("SELECT * FROM oauth_tokens WHERE user_id = ?").bind("U123").first();
const plaintext = await crypto.decrypt({
  ciphertext: row.ciphertext,
  iv: row.iv,
  tag: row.tag,
});
// "xoxb-slack-bot-token-..."

import { deriveKey, encryptToken, decryptToken } from "@fluxy-chat/sdk";

const key = await deriveKey(process.env.OAUTH_ENCRYPTION_KEY);

const encrypted = await encryptToken("my-secret-token", key);
// { ciphertext, iv, tag }

const plaintext = await decryptToken(encrypted, key);
// "my-secret-token"

import { isEncryptedTokenData } from "@fluxy-chat/sdk";

const value = JSON.parse(row.data);
if (isEncryptedTokenData(value)) {
  const token = await crypto.decrypt(value);
}

class SlackAdapter extends BaseAdapter {
  constructor(env) {
    this.tokenCrypto = new TokenCrypto(env.OAUTH_ENCRYPTION_KEY);
  }

  async storeUserToken(userId, token) {
    const encrypted = await this.tokenCrypto.encrypt(token);
    await this.db.prepare(
      "INSERT INTO slack_oauth (user_id, ciphertext, iv, tag) VALUES (?, ?, ?, ?)"
    ).bind(userId, encrypted.ciphertext, encrypted.iv, encrypted.tag).run();
  }

  async getUserToken(userId) {
    const row = await this.db.prepare(
      "SELECT ciphertext, iv, tag FROM slack_oauth WHERE user_id = ?"
    ).bind(userId).first();
    if (!row) return null;
    return this.tokenCrypto.decrypt({
      ciphertext: row.ciphertext,
      iv: row.iv,
      tag: row.tag,
    });
  }
}