// ────────── Static GraphQL queries
private enum GraphQLQuery {
    static let me: [String: String] = [
        "query":
        """
        {
          me {
            projects {
              edges { node { id name } }
            }
          }
        }
        """
    ]

    static let validate: [String: String] = [
        "query":
        """
        { me { id } }
        """
    ]
}

[ACTION] Token saved ✓
[TEST] Validating token (36 chars)...
[TEST] Trying validation with header 'Authorization'
[ERROR] Validation with header 'Authorization' failed: Error Domain=NSCocoaErrorDomain Code=3840 "JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0." UserInfo={NSDebugDescription=JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0., NSJSONSerializationErrorIndex=0}
[TEST] Trying validation with header 'Team-Access-Token'
[ERROR] Validation with header 'Team-Access-Token' failed: Error Domain=NSCocoaErrorDomain Code=3840 "JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0." UserInfo={NSDebugDescription=JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0., NSJSONSerializationErrorIndex=0}
[TEST] Token is NOT valid for either token type.
[ACTION] Token saved ✓
[TEST] Validating token (36 chars)...
[TEST] Trying validation with header 'Authorization'
[ERROR] Validation with header 'Authorization' failed: Error Domain=NSCocoaErrorDomain Code=3840 "JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0." UserInfo={NSDebugDescription=JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0., NSJSONSerializationErrorIndex=0}
[TEST] Trying validation with header 'Team-Access-Token'
[ERROR] Validation with header 'Team-Access-Token' failed: Error Domain=NSCocoaErrorDomain Code=3840 "JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0." UserInfo={NSDebugDescription=JSON text did not start with array or object and option to allow fragments not set. around line 1, column 0., NSJSONSerializationErrorIndex=0}
[TEST] Token is NOT valid for either token type.

<title>Access denied | backboard.railway.com used Cloudflare to restrict acces
[ERROR] Received HTML response from Cloudflare. Probably rate limited or blocked.
[RAW] HTTP 429: &lt;!DOCTYPE html&gt;
&lt;!--[if lt IE 7]&gt; &lt;html class="no-js ie6 oldie" lang="en-US"&gt; &lt;![endif]--&gt;
&lt;!--[if IE 7]&gt;    &lt;html class="no-js ie7 oldie" lang="en-US"&gt; &lt;![endif]--&gt;
&lt;!--[if IE 8]&gt;    &lt;html class="no-js ie8 oldie" lang="en-US"&gt; &lt;![endif]--&gt;
&lt;!--[if gt IE 8]&gt;&lt;!--&gt; &lt;html class="no-js" lang="en-US"&gt; &lt;!--&lt;![endif]--&gt;
&lt;head&gt;
&lt;title&gt;Access denied | backboard.railway.com used Cloudflare to restrict acces
[ERROR] Received HTML response from Cloudflare. Probably rate limited or blocked.

// Possibly wrong endpoint
request.httpBody = try JSONSerialization.data(withJSONObject: [
    "query": "{ me { projects { edges { node { id name } } } } }"
])

@MainActor
func validateToken(_ token: String) async {
    let trimmed = token.trimmingCharacters(in: .whitespacesAndNewlines)
    Logger.debug("[DEBUG] Raw token: '\(token)'")
    Logger.debug("[DEBUG] Trimmed token: '\(trimmed)'")

    guard !trimmed.isEmpty else {
        Logger.error("[ERROR] Token is empty after trimming.")
        tokenIsValid = false
        errorMessage = "Token is empty."
        return
    }

    guard let url = URL(string: endpoint) else {
        Logger.error("[ERROR] Invalid endpoint URL")
        tokenIsValid = false
        errorMessage = "Internal error: bad endpoint."
        return
    }

    var request = URLRequest(url: url)
    request.httpMethod = "POST"
    request.setValue("Bearer \(trimmed)", forHTTPHeaderField: "Authorization")
    request.setValue("application/json", forHTTPHeaderField: "Content-Type")
    request.setValue("VisionCode/1.0 (iPhone; iOS 17.0; Scale/3.00)", forHTTPHeaderField: "User-Agent")

    do {
        // Use minimal GraphQL query for token validation!
        request.httpBody = try JSONSerialization.data(withJSONObject: [
            "query": "{ me { id } }"
        ])
    } catch {
        Logger.error("[ERROR] Failed to encode GraphQL query: \(error)")
        tokenIsValid = false
        errorMessage = "Internal error (query encode fail)."
        return
    }

    do {
        let (data, response) = try await URLSession.shared.data(for: request)
        let raw = String(data: data, encoding: .utf8) ?? ""
        Logger.success("[RAW] HTTP Response: \(raw.prefix(400))")

        guard let http = response as? HTTPURLResponse else {
            Logger.error("[ERROR] No HTTP response received.")
            tokenIsValid = false
            errorMessage = "No HTTP response received."
            return
        }

        if http.statusCode == 200 {
            if let json = try? JSONSerialization.jsonObject(with: data) as? [String: Any],
               let dataField = json["data"] as? [String: Any],
               let me = dataField["me"] as? [String: Any],
               let id = me["id"] as? String {
                Logger.success("[TEST] ✅ Token is valid (Account token, user id \(id))")
                tokenIsValid = true
                errorMessage = nil
                usedHeaderKey = "Authorization"
                return
            } else if let errors = (try? JSONSerialization.jsonObject(with: data) as? [String: Any])?["errors"] as? [[String: Any]],
                      let errorMsg = errors.first?["message"] as? String {
                Logger.error("[TEST] ❌ Token invalid: \(errorMsg)")
                tokenIsValid = false
                errorMessage = errorMsg
                return
            } else {
                Logger.error("[ERROR] No user data returned.")
                tokenIsValid = false
                errorMessage = "No user data returned."
                return
            }
        } else {
            Logger.error("[ERROR] HTTP \(http.statusCode): \(raw.prefix(120))")
            tokenIsValid = false
            errorMessage = "HTTP error \(http.statusCode)."
            return
        }
    } catch {
        Logger.error("[ERROR] Validation failed with error: \(error)")
        tokenIsValid = false
        errorMessage = "Network error: \(error.localizedDescription)"
        return
    }
}