//go:build !android && !ios && !freebsd && !js

package services

import (
	"context"

	log "github.com/sirupsen/logrus"

	"github.com/netbirdio/netbird/client/proto"
)

// Approval forwards the user's decision on a pending inbound-connection
// approval prompt to the daemon. The daemon pushes the prompt as a SystemEvent
// with category APPROVAL; the dialog calls Respond with the same request id to
// unblock whichever subsystem (VNC, SSH, ...) is waiting.
type Approval struct {
	conn DaemonConn
}

func NewApproval(conn DaemonConn) *Approval {
	return &Approval{conn: conn}
}

// Respond delivers the accept/deny decision for requestID. viewOnly is only
// meaningful when accept is true and the subsystem supports a read-only grant.
func (a *Approval) Respond(ctx context.Context, requestID string, accept, viewOnly bool) error {
	cli, err := a.conn.Client()
	if err != nil {
		return err
	}
	resp, err := cli.RespondApproval(ctx, &proto.RespondApprovalRequest{
		RequestId: requestID,
		Accept:    accept,
		ViewOnly:  viewOnly,
	})
	if err != nil {
		return err
	}
	if !resp.GetMatched() {
		// Not an error to the caller: the dialog closes either way, and the
		// connection has already been denied by the broker's timeout. Logged so
		// a report of "I clicked accept and it still disconnected" has a record
		// showing the click landed after the prompt had expired.
		log.Infof("approval %s was no longer pending; the daemon had already answered it", requestID)
	}
	return nil
}