const MYSQL_CLEAR_TEXT_PARAM_ALIASES = new Set(["allowcleartextpasswords", "enable_cleartext_plugin"]);
const MYSQL_CLEAR_TEXT_PARAM = "enable_cleartext_plugin";

function normalizeKey(key: string): string {
  return key.trim().toLowerCase();
}

function isTruthyUrlParam(value: string): boolean {
  return ["true", "1", "yes", "on"].includes(value.trim().toLowerCase());
}

function isMysqlCleartextPasswordParam(key: string): boolean {
  return MYSQL_CLEAR_TEXT_PARAM_ALIASES.has(normalizeKey(key));
}

export function mysqlCleartextPasswordAuthEnabled(params: string | undefined): boolean {
  const parsed = new URLSearchParams((params || "").trim().replace(/^\?/, ""));
  for (const [key, value] of parsed.entries()) {
    if (isMysqlCleartextPasswordParam(key) && isTruthyUrlParam(value)) return true;
  }
  return false;
}

export function setMysqlCleartextPasswordAuthEnabled(params: string | undefined, enabled: boolean): string {
  const parsed = new URLSearchParams((params || "").trim().replace(/^\?/, ""));
  // Snapshot keys because deleting from URLSearchParams during live iteration can skip duplicates.
  for (const key of Array.from(parsed.keys())) {
    if (isMysqlCleartextPasswordParam(key)) parsed.delete(key);
  }
  if (enabled) parsed.set(MYSQL_CLEAR_TEXT_PARAM, "true");
  return parsed.toString();
}