package builtin

import (
	"bytes"
	"context"
	"os"
	"os/exec"
	"path/filepath"
	"strings"
	"testing"
	"time"

	"reasonix/internal/sandbox"
)

func TestGrepTimeoutClamp(t *testing.T) {
	cases := []struct {
		sec  int
		want time.Duration
	}{
		{0, grepDefaultTimeout},
		{-5, grepDefaultTimeout},
		{5, 5 * time.Second},
		{99999, grepMaxTimeout},
	}
	for _, c := range cases {
		if got := grepTimeout(c.sec); got != c.want {
			t.Errorf("grepTimeout(%d) = %v, want %v", c.sec, got, c.want)
		}
	}
}

func TestGrepTimeoutPreservesPartialResults(t *testing.T) {
	ctx, cancel := context.WithTimeout(context.Background(), time.Nanosecond)
	defer cancel()
	<-ctx.Done()

	hit := []string{"a.go:1:match"}
	got := formatGrep(ctx, hit, false, 30*time.Second)
	if !strings.HasPrefix(got, "a.go:1:match") {
		t.Errorf("timeout must keep the matches found so far, got %q", got)
	}
	if !strings.Contains(got, "timed out") || !strings.Contains(got, "timeout_seconds") {
		t.Errorf("timeout result must flag the cutoff and point at timeout_seconds, got %q", got)
	}

	if got := formatGrep(ctx, nil, false, 30*time.Second); !strings.Contains(got, "timed out") {
		t.Errorf("a zero-match timeout must report the timeout, not (no matches), got %q", got)
	}

	done := context.Background()
	if got := formatGrep(done, nil, false, 30*time.Second); got != "(no matches)" {
		t.Errorf("a completed zero-match search = %q, want (no matches)", got)
	}
}

func TestResolveSearch(t *testing.T) {
	rgFile := filepath.Join(t.TempDir(), "rg")
	if err := os.WriteFile(rgFile, []byte("x"), 0o755); err != nil {
		t.Fatal(err)
	}
	missing := filepath.Join(t.TempDir(), "absent")

	if got := ResolveSearch("native", rgFile, nil); got.RgPath != "" {
		t.Fatalf("native must ignore ripgrep, got %q", got.RgPath)
	}
	if got := ResolveSearch("rg", rgFile, nil); got.RgPath != rgFile {
		t.Fatalf(`engine "rg" with an explicit path = %q, want %q`, got.RgPath, rgFile)
	}
	if got := ResolveSearch("auto", rgFile, nil); got.RgPath != rgFile {
		t.Fatalf(`engine "auto" with an explicit path = %q, want %q`, got.RgPath, rgFile)
	}

	var warn bytes.Buffer
	if got := ResolveSearch("rg", missing, &warn); got.RgPath != "" {
		t.Fatalf(`engine "rg" with a missing binary must fall back to native, got %q`, got.RgPath)
	}
	if !strings.Contains(warn.String(), "ripgrep") {
		t.Fatalf("expected a fall-back warning mentioning ripgrep, got %q", warn.String())
	}
}

func TestConfineSearch(t *testing.T) {
	g, ok := ConfineSearch(SearchSpec{RgPath: "/path/to/rg"}, sandbox.Spec{}, nil).(grepTool)
	if !ok || g.rg != "/path/to/rg" {
		t.Fatalf("ConfineSearch must bind the rg path, got %+v ok=%v", g, ok)
	}
}

func TestGrepRipgrepEngine(t *testing.T) {
	rg, err := exec.LookPath("rg")
	if err != nil {
		t.Skip("ripgrep not installed")
	}
	dir := t.TempDir()
	if err := os.WriteFile(filepath.Join(dir, "a.txt"), []byte("alpha\nBETA needle here\ngamma\n"), 0o644); err != nil {
		t.Fatal(err)
	}
	g := grepTool{rg: rg}

	out := runTool(t, g, map[string]any{"pattern": "needle", "path": dir})
	if !strings.Contains(out, "a.txt:2:BETA needle here") {
		t.Fatalf("ripgrep output = %q, want path:line:text with the match", out)
	}

	if out := runTool(t, g, map[string]any{"pattern": "zzz_absent_token", "path": dir}); out != "(no matches)" {
		t.Fatalf("no-match search = %q, want (no matches)", out)
	}

	if _, err := g.Execute(context.Background(), argsJSON(t, map[string]any{"pattern": "(unclosed", "path": dir})); err == nil {
		t.Fatal("an invalid regex must surface ripgrep's error")
	}
}

func TestGrepRipgrepFallsBackWhenForbidReadIsNotSandboxed(t *testing.T) {
	rg, err := exec.LookPath("rg")
	if err != nil {
		t.Skip("ripgrep not installed")
	}
	root := t.TempDir()
	forbidDir := filepath.Join(root, "secret")
	if err := os.MkdirAll(forbidDir, 0o755); err != nil {
		t.Fatal(err)
	}
	if err := os.WriteFile(filepath.Join(root, "allowed.txt"), []byte("needle allowed\n"), 0o644); err != nil {
		t.Fatal(err)
	}
	if err := os.WriteFile(filepath.Join(forbidDir, "secret.txt"), []byte("needle secret\n"), 0o644); err != nil {
		t.Fatal(err)
	}

	g := grepTool{workDir: root, rg: rg, forbidRoots: realRoots([]string{forbidDir}), sb: sandbox.Spec{Mode: "off"}}
	out := runTool(t, g, map[string]any{"pattern": "needle", "path": "."})
	if !strings.Contains(out, "allowed.txt") {
		t.Fatalf("fallback grep should still find allowed matches, got:\n%s", out)
	}
	if strings.Contains(out, "secret") {
		t.Fatalf("fallback grep leaked forbidden matches:\n%s", out)
	}
}