/**
 * Creates the skeleton-owned side of an external session integration.
 * Credential acquisition and storage stay inside the supplied external owner.
 *
 * @param {{
 *   readState(): import("../../application/ports/auth-session-port.js").SessionState,
 *   attachCredential(request: Request): Promise<Request>,
 *   recoverSession(): Promise<"restored" | "no-session">,
 *   notifyUnauthenticated(): void
 * }} owner
 * @returns {import("../../application/ports/auth-session-port.js").AuthSessionPort}
 */
export function createExternalAuthSessionAdapter(owner) {
  return Object.freeze({
    getState() {
      return owner.readState();
    },
    async attach(request) {
      const attached = await owner.attachCredential(request);
      if (!(attached instanceof Request)) {
        throw new TypeError("Auth owner returned an invalid request");
      }
      return attached;
    },
    async recover() {
      const result = await owner.recoverSession();
      if (result !== "restored" && result !== "no-session") {
        throw new TypeError("Auth owner returned an invalid recovery state");
      }
      return result;
    },
    onUnauthenticated() {
      owner.notifyUnauthenticated();
    },
  });
}

export function createAnonymousSessionAdapter() {
  return createExternalAuthSessionAdapter({
    readState: () => "unauthenticated",
    attachCredential: async (request) => request,
    recoverSession: async () => "no-session",
    notifyUnauthenticated: () => {},
  });
}