import { afterEach, describe, expect, it, vi } from 'vitest'
import {
  getGroupPushSubscriptions,
  getPushCapabilities,
  getPushSystemStatus,
  saveFCMPushSystemConfig,
  savePushSystemConfig,
  setGroupPushSubscription,
} from '@/api/push'
import { clearApiSecurityContext, setApiCsrfToken } from '@/api/client'

afterEach(() => {
  clearApiSecurityContext()
  vi.unstubAllGlobals()
})

describe('push client protocol', () => {
  it('normalizes FCM provider status and protects configuration mutations', async () => {
    const calls: Array<{ path: string; init?: RequestInit }> = []
    vi.stubGlobal('fetch', vi.fn(async (path: string, init?: RequestInit) => {
      calls.push({ path, init })
      return new Response(JSON.stringify({
        configured: false,
        healthy: false,
        registrationCount: 0,
        pendingCount: 0,
        source: 'none',
        editable: true,
        environments: [],
        warnings: [],
        providers: {
          fcm: {
            configured: true,
            healthy: true,
            registration_count: 2,
            pending_count: 1,
            source: 'file',
            editable: true,
            service_account_file: '/srv/secrets/firebase-service-account.json',
            project_id: 'yaoyao-test-project',
            package_name: 'cn.samien.yaoyao.hermes',
            warnings: [{ code: 'fcm_service_account_permissions', message: '建议调整为 0600' }],
          },
        },
      }), { status: 200, headers: { 'content-type': 'application/json' } })
    }))
    setApiCsrfToken('csrf-fcm')

    await expect(getPushSystemStatus()).resolves.toMatchObject({
      providers: { fcm: {
        configured: true,
        registrationCount: 2,
        pendingCount: 1,
        serviceAccountFile: '/srv/secrets/firebase-service-account.json',
        projectId: 'yaoyao-test-project',
        warnings: [{ code: 'fcm_service_account_permissions' }],
      } },
    })
    await expect(saveFCMPushSystemConfig({
      serviceAccountFile: '/srv/secrets/firebase-service-account.json',
      projectId: 'yaoyao-test-project',
      packageName: 'cn.samien.yaoyao.hermes',
    })).resolves.toMatchObject({ providers: { fcm: { configured: true } } })

    expect(calls.map(call => call.path)).toEqual([
      '/api/app/system/push-status',
      '/api/app/system/push-config/fcm',
    ])
    expect(new Headers(calls[1]!.init?.headers).get('X-CSRF-Token')).toBe('csrf-fcm')
    expect(calls[1]!.init?.body).toBe(JSON.stringify({
      serviceAccountFile: '/srv/secrets/firebase-service-account.json',
      projectId: 'yaoyao-test-project',
      packageName: 'cn.samien.yaoyao.hermes',
    }))
  })

  it('uses the versioned push API and protects subscription mutations', async () => {
    const calls: Array<{ path: string; init?: RequestInit }> = []
    vi.stubGlobal('fetch', vi.fn(async (path: string, init?: RequestInit) => {
      calls.push({ path, init })
      const payload = path === '/api/app/push/v1/capabilities'
        ? { protocolVersion: 1, enabled: true, events: [], maximumSummaryCharacters: 180 }
        : path === '/api/app/push/v1/group-subscriptions'
          ? { subscriptions: [{ roomId: 'room-1', enabled: true }] }
          : path === '/api/app/system/push-status'
            ? {
                configured: true,
                healthy: true,
                registration_count: 1,
                pending_count: 0,
                source: 'file',
                editable: true,
                key_file: '/srv/secrets/AuthKey_TEST.p8',
                key_id: 'KEY123',
                team_id: 'TEAM123',
                environments: ['development', 'production'],
                warnings: [{ code: 'apns_key_permissions', message: '建议调整为 0600', actual_mode: '0644', recommended_mode: '0600' }],
              }
            : path === '/api/app/system/push-config'
              ? {
                  configured: true,
                  healthy: true,
                  registrationCount: 1,
                  pendingCount: 0,
                  source: 'file',
                  editable: true,
                  keyFile: '/srv/secrets/AuthKey_TEST.p8',
                  keyId: 'KEY123',
                  teamId: 'TEAM123',
                  topic: 'cn.samien.yaoyao.hermes',
                  environments: ['development', 'production'],
                  warnings: [],
                }
              : { subscription: { roomId: 'room-1', enabled: false } }
      return new Response(JSON.stringify(payload), {
        status: 200,
        headers: { 'content-type': 'application/json' },
      })
    }))
    setApiCsrfToken('csrf-push')

    await expect(getPushCapabilities()).resolves.toMatchObject({ protocolVersion: 1, enabled: true })
    await expect(getGroupPushSubscriptions()).resolves.toEqual(new Set(['room-1']))
    await expect(setGroupPushSubscription('room-1', false)).resolves.toBe(false)
    await expect(getPushSystemStatus()).resolves.toMatchObject({
      configured: true,
      registrationCount: 1,
      source: 'file',
      editable: true,
      managementAvailable: true,
      keyFile: '/srv/secrets/AuthKey_TEST.p8',
      environments: ['development', 'production'],
      warnings: [{ code: 'apns_key_permissions', actualMode: '0644', recommendedMode: '0600' }],
    })
    await expect(savePushSystemConfig({
      keyFile: '/srv/secrets/AuthKey_TEST.p8',
      keyId: 'KEY123',
      teamId: 'TEAM123',
      topic: 'cn.samien.yaoyao.hermes',
      environments: ['development', 'production'],
    })).resolves.toMatchObject({ configured: true, source: 'file', editable: true })

    expect(calls.map(call => call.path)).toEqual([
      '/api/app/push/v1/capabilities',
      '/api/app/push/v1/group-subscriptions',
      '/api/app/push/v1/group-subscriptions/room-1',
      '/api/app/system/push-status',
      '/api/app/system/push-config',
    ])
    expect(new Headers(calls[2]!.init?.headers).get('X-CSRF-Token')).toBe('csrf-push')
    expect(new Headers(calls[4]!.init?.headers).get('X-CSRF-Token')).toBe('csrf-push')
    expect(calls[4]!.init?.body).toBe(JSON.stringify({
      keyFile: '/srv/secrets/AuthKey_TEST.p8',
      keyId: 'KEY123',
      teamId: 'TEAM123',
      topic: 'cn.samien.yaoyao.hermes',
      environments: ['development', 'production'],
    }))
  })

  it('keeps an old status response read-only instead of guessing its configuration source', async () => {
    vi.stubGlobal('fetch', vi.fn(async () => new Response(JSON.stringify({
      configured: true,
      healthy: true,
      registrationCount: 2,
      pendingCount: 0,
      topic: 'cn.samien.yaoyao.hermes',
    }), { status: 200, headers: { 'content-type': 'application/json' } })))

    await expect(getPushSystemStatus()).resolves.toMatchObject({
      configured: true,
      source: 'none',
      editable: false,
      managementAvailable: false,
      environments: [],
      warnings: [],
    })
  })

  it('normalizes startup configuration errors as the visible push error', async () => {
    vi.stubGlobal('fetch', vi.fn(async () => new Response(JSON.stringify({
      configured: false,
      healthy: false,
      source: 'environment',
      editable: false,
      configuration_error: 'APNs key is invalid',
      registration_count: 1,
      pending_count: 0,
    }), { status: 200, headers: { 'content-type': 'application/json' } })))

    await expect(getPushSystemStatus()).resolves.toMatchObject({
      configured: false,
      source: 'environment',
      lastError: 'APNs key is invalid',
    })
  })
})