/**
 * Unit tests: agent-bridge/server route — dynamic import behavior
 *
 * Verifies that start/stop/restart actions resolve MITM manager functions
 * from @/mitm/manager.runtime (bypassing the Turbopack alias to stub.ts)
 * and that restart re-caches the password after stopMitm clears it.
 */
import test from "node:test";
import assert from "node:assert/strict";
import fs from "node:fs";
import os from "node:os";
import path from "node:path";

const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-ab-dynimp-"));
process.env.DATA_DIR = TEST_DATA_DIR;
process.env.DISABLE_SQLITE_AUTO_BACKUP = "true";

const core = await import("../../src/lib/db/core.ts");
const serverRoute = await import("../../src/app/api/tools/agent-bridge/server/route.ts");

function resetDb() {
  core.resetDbInstance();
  fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
  fs.mkdirSync(TEST_DATA_DIR, { recursive: true });
}

test.beforeEach(() => resetDb());
test.after(() => {
  try {
    fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
  } catch {
    /* noop */
  }
});

function makeRequest(action: string, body: Record<string, unknown> = {}) {
  return new Request("http://localhost/api/tools/agent-bridge/server", {
    method: "POST",
    headers: { "content-type": "application/json" },
    body: JSON.stringify({ action, ...body }),
  });
}

// ── start action ────────────────────────────────────────────────────────────

test("start: dynamically imports startMitm (not stub)", async () => {
  // startMitm will fail because there is no real MITM server to spawn,
  // but it should throw a runtime error from the real module, NOT the stub error.
  const res = await serverRoute.POST(makeRequest("start", { sudoPassword: "test" }));
  const body = (await res.json()) as Record<string, unknown>;

  // The real startMitm will fail (no MITM binary), but the error should NOT
  // contain the stub error message.
  const errMsg =
    typeof body.error === "object" && body.error !== null
      ? ((body.error as Record<string, unknown>).message as string)
      : "";
  assert.ok(
    !errMsg.includes("MITM manager stub reached at runtime"),
    `Expected real MITM error, got stub error: ${errMsg}`
  );
});

// ── stop action ─────────────────────────────────────────────────────────────

test("stop: dynamically imports stopMitm (not stub)", async () => {
  const res = await serverRoute.POST(makeRequest("stop", { sudoPassword: "test" }));
  const body = (await res.json()) as Record<string, unknown>;

  // stopMitm on a non-running server should succeed (no-op cleanup) or fail
  // with a real error — never the stub error.
  if (res.status !== 200) {
    const errMsg =
      typeof body.error === "object" && body.error !== null
        ? ((body.error as Record<string, unknown>).message as string)
        : "";
    assert.ok(
      !errMsg.includes("MITM manager stub reached at runtime"),
      `Expected real error, got stub error: ${errMsg}`
    );
  }
});

// ── restart action ──────────────────────────────────────────────────────────

test("restart: dynamically imports getMitmStatus (not stub)", async () => {
  // The real getMitmStatus returns running:false since no server is started.
  // The stub also returns running:false, but we verify the path works end-to-end.
  const res = await serverRoute.POST(makeRequest("restart", { sudoPassword: "test" }));
  const body = (await res.json()) as Record<string, unknown>;

  // Should not contain the stub error
  const errMsg =
    typeof body.error === "object" && body.error !== null
      ? ((body.error as Record<string, unknown>).message as string)
      : "";
  assert.ok(
    !errMsg.includes("MITM manager stub reached at runtime"),
    `Expected real error, got stub error: ${errMsg}`
  );
});

test("restart: re-caches password after stopMitm clears it", async () => {
  // This test verifies the fix for the cached-password loss bug.
  // We can't easily observe the internal cache, but we can verify
  // the restart action completes without a "password required" error
  // when sudoPassword is provided.
  const res = await serverRoute.POST(makeRequest("restart", { sudoPassword: "my-secret-pwd" }));
  // Should not fail with an auth-related error — the password should survive the stop phase
  assert.ok(res.status === 200 || res.status === 500, `Unexpected status: ${res.status}`);
  if (res.status === 500) {
    const body = (await res.json()) as Record<string, unknown>;
    const errMsg =
      typeof body.error === "object" && body.error !== null
        ? ((body.error as Record<string, unknown>).message as string)
        : "";
    // Should NOT be a stub error or password-missing error
    assert.ok(
      !errMsg.includes("MITM manager stub reached at runtime"),
      `Got stub error instead of runtime error: ${errMsg}`
    );
  }
});

// ── existing validation tests (unchanged behavior) ─────────────────────────

test("invalid action returns 400", async () => {
  const res = await serverRoute.POST(makeRequest("bogus"));
  assert.equal(res.status, 400);
});

test("malformed JSON returns 400", async () => {
  const res = await serverRoute.POST(
    new Request("http://localhost/api/tools/agent-bridge/server", {
      method: "POST",
      headers: { "content-type": "application/json" },
      body: "not-json",
    })
  );
  assert.equal(res.status, 400);
});