// Diagnostic page for wallet sign-in failures. Reports what the page can
// actually see, from the member's own device, instead of us guessing.
//
// It captures the one thing we cannot infer from the outside: whether a CSP
// violation is firing when the wallet tries to inject its provider. Our
// script-src is 'self' with no 'unsafe-inline', and wallet browsers that inject
// via a <script> tag would be blocked silently — no error the member could see,
// and identical symptoms to "no wallet installed".
(function () {
  'use strict';
  var violations = [];
  window.addEventListener('securitypolicyviolation', function (e) {
    violations.push(e.violatedDirective + ' blocked ' + (e.blockedURI || '(inline)') +
      (e.sourceFile ? ' from ' + e.sourceFile : ''));
    render();
  });

  function row(k, v, good) {
    return '<div class="row"><div class="k">' + k + '</div><div class="v ' +
      (good === true ? 'yes' : good === false ? 'no' : '') + '">' + v + '</div></div>';
  }
  function esc(s) {
    return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
      return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
    });
  }

  var announced = [];
  window.addEventListener('eip6963:announceProvider', function (e) {
    try { announced.push(e.detail.info.name + ' (' + e.detail.info.rdns + ')'); } catch (x) {}
    render();
  });
  try { window.dispatchEvent(new Event('eip6963:requestProvider')); } catch (x) {}

  function render() {
    var eth = window.ethereum;
    var flags = [];
    if (eth) {
      ['isMetaMask', 'isTrust', 'isTrustWallet', 'isCoinbaseWallet', 'isSafePal', 'isPhantom', 'isRabby']
        .forEach(function (f) { if (eth[f]) flags.push(f); });
      if (eth.providers && eth.providers.length) flags.push('providers[' + eth.providers.length + ']');
    }
    var html = '';
    html += row('window.ethereum present', eth ? 'YES' : 'NO', !!eth);
    html += row('wallet flags', flags.length ? esc(flags.join(', ')) : '(none)');
    html += row('EIP-6963 wallets announced', announced.length ? esc(announced.join(' · ')) : '(none)');
    html += row('CSP violations seen', violations.length ? esc(violations.join(' | ')) : 'none', violations.length ? false : true);
    html += row('page address', esc(location.href));
    document.getElementById('rows').innerHTML = html;

    document.getElementById('dump').textContent =
      'UA: ' + navigator.userAgent + '\n' +
      'ethereum: ' + (eth ? 'yes' : 'no') + '\n' +
      'flags: ' + (flags.join(',') || '-') + '\n' +
      'eip6963: ' + (announced.join(',') || '-') + '\n' +
      'csp: ' + (violations.join(' | ') || 'none') + '\n' +
      'href: ' + location.href;
  }

  document.getElementById('ask').addEventListener('click', async function () {
    var out = document.getElementById('askOut');
    out.innerHTML = '';
    try {
      var eth = await window.RMCWallet.pick();
      if (!eth) { out.innerHTML = row('result', 'No provider found — the page cannot see a wallet', false); return; }
      var accs = await eth.request({ method: 'eth_requestAccounts' });
      var chain = await eth.request({ method: 'eth_chainId' });
      out.innerHTML = row('accounts returned', esc(JSON.stringify(accs))) +
        row('first account', esc(accs && accs[0] || '(none)')) +
        row('selectedAddress', esc(eth.selectedAddress || '(not exposed)')) +
        row('chain id', esc(chain) + (chain === '0x89' ? ' — Polygon ✓' : ' — NOT Polygon'), chain === '0x89');
    } catch (e) {
      out.innerHTML = row('error', esc(e && (e.message || e.code || String(e))), false);
    }
    render();
  });

  setTimeout(render, 400);
  render();
})();