/** Platform window chrome + packaging policy, without launching Electron. */
import assert from "node:assert/strict";
import { readFileSync } from "node:fs";
import { createRequire } from "node:module";
import { dirname } from "node:path";
import { fileURLToPath } from "node:url";
import { runInNewContext } from "node:vm";
import { describe, it } from "node:test";

const require = createRequire(import.meta.url);
const mainFile = fileURLToPath(new URL("../electron/main.cjs", import.meta.url));
const mainSource = readFileSync(mainFile, "utf8");
const mainRequire = createRequire(mainFile);

/** Decline the single-instance lock so normal boot never spawns a server.
 * Then call the REAL createWindow with a stub Electron API and inspect its
 * constructor options. No rewritten copy of the production logic. */
function windowOptions(platform: string) {
	class FakeWindow {
		constructor(readonly options: unknown) {}
		webContents = { on() {}, setWindowOpenHandler() {} };
		loadURL() {}
		once() {}
	}
	const electron = {
		app: { setName() {}, requestSingleInstanceLock: () => false, quit() {} },
		BrowserWindow: FakeWindow,
		session: { defaultSession: { setPermissionRequestHandler() {}, setPermissionCheckHandler() {} } },
	};
	const context = {
		require: (id: string) => id === "electron" ? electron : mainRequire(id),
		process: { platform, argv: [], env: {}, on() {} },
		__dirname: dirname(mainFile),
	};
	runInNewContext(mainSource, context, { filename: mainFile });
	const win = runInNewContext('createWindow("http://127.0.0.1:9000")', context) as FakeWindow;
	// The options originate in a VM realm; normalize prototypes for assertions.
	return JSON.parse(JSON.stringify(win.options));
}

describe("desktop window chrome", () => {
	it("macOS keeps the proven traffic lights and does not enable WCO", () => {
		const options = windowOptions("darwin");
		assert.equal(options.titleBarStyle, "hiddenInset");
		assert.deepEqual(options.trafficLightPosition, { x: 16, y: 22.5 });
		assert.equal(options.titleBarOverlay, undefined);
		assert.equal(options.autoHideMenuBar, undefined);
	});

	for (const platform of ["win32", "linux"]) {
		it(`${platform} uses native-height right-side controls with an Alt-accessible menu`, () => {
			const options = windowOptions(platform);
			assert.equal(options.titleBarStyle, "hidden");
			assert.deepEqual(options.titleBarOverlay, { color: "#141414", symbolColor: "#e5e5e5" });
			assert.equal(Object.hasOwn(options.titleBarOverlay, "height"), false, "omit height so the OS selects its native default");
			assert.equal(options.trafficLightPosition, undefined);
			assert.equal(options.autoHideMenuBar, true);
			assert.equal(options.webPreferences.contextIsolation, true);
			assert.equal(options.webPreferences.sandbox, true);
			assert.equal(options.webPreferences.nodeIntegration, false);
		});
	}

	it("preload exposes OS identity without exposing Node/Electron to the renderer", () => {
		let bridge: Record<string, unknown> = {};
		const context = {
			process: { platform: "win32" },
			require: () => ({
				contextBridge: {
					exposeInMainWorld(name: string, api: Record<string, unknown>) {
						assert.equal(name, "lh");
						bridge = api;
					},
				},
				ipcRenderer: {},
			}),
		};
		runInNewContext(readFileSync(new URL("../electron/preload.cjs", import.meta.url), "utf8"), context);
		assert.equal(bridge.platform, "win32");
		assert.deepEqual(Object.keys(bridge).sort(), [
			"chatgpt", "expandWindow", "getZoom", "installUpdate", "onUpdateStatus", "onZoom", "platform", "subscriptions",
		]);
		assert.deepEqual(Object.keys(bridge.subscriptions as object).sort(), ["cancel", "consent", "disconnect", "login", "onChange", "open", "respond", "retry", "status"]);
	});
});

describe("desktop packaging policy", () => {
	const yaml = require("js-yaml") as { load(source: string): Record<string, any> };
	const config = yaml.load(readFileSync(new URL("../electron-builder.yml", import.meta.url), "utf8"));

	it("configuration is accepted by the INSTALLED electron-builder schema", async () => {
		const { validateConfiguration } = require("app-builder-lib/out/util/config/config.js");
		await validateConfiguration(config, { isEnabled: false });
	});

	it("ships Mac arm64, Windows NSIS x64, and both Linux x64 channels", () => {
		assert.deepEqual(config.mac.target, [
			{ target: "dmg", arch: ["arm64"] }, { target: "zip", arch: ["arm64"] },
		]);
		assert.deepEqual(config.win.target, [{ target: "nsis", arch: ["x64"] }]);
		assert.equal(config.win.signExecutable, false);
		assert.equal(config.win.verifyUpdateCodeSignature, false);
		assert.deepEqual(config.linux.target, [
			{ target: "AppImage", arch: ["x64"] }, { target: "deb", arch: ["x64"] },
		]);
		assert.equal(config.linux.syncDesktopName, true);
		assert.equal(config.publish[0].releaseType, "draft");
	});

	it("deb has public maintainer metadata and a matching desktop identity", () => {
		const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
		assert.equal(pkg.author.name, "Amos Blomqvist");
		assert.equal(pkg.author.email, "255718537+amosblomqvist@users.noreply.github.com");
		assert.equal(pkg.homepage, "https://github.com/amosblomqvist/learnharness");
		assert.equal(pkg.desktopName, "learnharness.desktop");
	});
});

describe("workflow action versions", () => {
	type Step = { uses?: string; with?: Record<string, unknown> };
	type Workflow = { jobs: Record<string, { steps: Step[] }> };
	const yaml = require("js-yaml") as { load(source: string): Workflow };

	for (const filename of ["ci.yml", "release.yml"]) {
		it(`${filename} uses supported Action runtimes without changing the app's Node 26`, () => {
			const workflow = yaml.load(readFileSync(new URL(`../.github/workflows/${filename}`, import.meta.url), "utf8"));
			const expected = ["actions/checkout@v7", "actions/setup-node@v7"];
			if (filename === "release.yml") {
				expected.push("actions/github-script@v9", "actions/upload-artifact@v7", "maxim-lobanov/setup-xcode@v1");
			}
			const observed = new Set<string>();
			for (const job of Object.values(workflow.jobs)) {
				for (const step of job.steps) {
					if (!step.uses) continue;
					assert.ok(expected.includes(step.uses), `unexpected Action reference: ${step.uses}`);
					observed.add(step.uses);
					if (step.uses === "actions/setup-node@v7") {
						assert.equal(step.with?.["node-version"], "26");
						assert.equal(step.with?.cache, "npm");
					}
					if (step.uses === "actions/upload-artifact@v7") {
						assert.equal(step.with?.archive ?? true, true, "multi-file installers remain zipped artifacts");
					}
				}
			}
			assert.deepEqual([...observed].sort(), expected.sort());
		});
	}
});

describe("desktop release workflow", () => {
	type Step = {
		if?: string; run?: string; uses?: string; env?: Record<string, string>;
		with?: { script?: string; "xcode-version"?: string };
	};
	type Workflow = {
		concurrency: { group: string; "cancel-in-progress": boolean };
		jobs: Record<string, {
			needs?: string | string[]; steps: Step[]; "runs-on"?: string;
			strategy?: { matrix: { include: { os: string; platform: string; builder_args?: string }[] } };
		}>;
	};
	const yaml = require("js-yaml") as { load(source: string): Workflow };
	const workflow = yaml.load(readFileSync(new URL("../.github/workflows/release.yml", import.meta.url), "utf8"));
	const draft = workflow.jobs.draft;
	const packaging = workflow.jobs.package;
	assert.ok(draft && packaging);
	const prepare = draft.steps[0];
	assert.ok(prepare?.with);
	const script = prepare.with.script;
	assert.ok(script);
	type Release = { id: number; tag_name: string; draft: boolean };

	/** Execute the REAL action script with an in-memory GitHub API. */
	async function prepareDraft(releases: Release[]) {
		const created: Record<string, unknown>[] = [];
		const listReleases = () => {};
		await runInNewContext(`(async () => { ${script} })()`, {
			context: { repo: { owner: "test-owner", repo: "test-repo" }, ref: "refs/tags/v0.3.0" },
			core: { info() {} },
			github: {
				paginate: async (method: unknown, options: unknown) => {
					assert.equal(method, listReleases);
					assert.deepEqual(JSON.parse(JSON.stringify(options)), {
						owner: "test-owner", repo: "test-repo", per_page: 100,
					});
					return releases;
				},
				rest: { repos: {
					listReleases,
					createRelease: async (options: Record<string, unknown>) => {
						created.push(JSON.parse(JSON.stringify(options)));
						return { data: { id: 123 } };
					},
				} },
			},
		});
		return created;
	}

	it("prepares once after gates, never on rehearsals, before parallel packaging", () => {
		assert.equal(draft.needs, "quality");
		assert.equal(prepare.if, "github.event_name == 'push'");
		assert.deepEqual(packaging.needs, ["quality", "draft"]);
		assert.equal(workflow.concurrency.group, "release-${{ github.ref }}");
		assert.equal(workflow.concurrency["cancel-in-progress"], false);
		for (const filename of ["ci.yml", "release.yml"]) {
			const config = yaml.load(readFileSync(new URL(`../.github/workflows/${filename}`, import.meta.url), "utf8"));
			const job = config.jobs[filename === "ci.yml" ? "standalone" : "package"];
			assert.ok(job);
			const steps = job.steps;
			const native = steps.find(step => step.run?.includes("pdf-native-render.test.ts"));
			assert.ok(native);
			assert.ok(native.run?.startsWith("npx electron --import tsx --test "));
			assert.equal(native.env?.ELECTRON_RUN_AS_NODE, "1");
			assert.ok(steps.some(step => step.run === "node scripts/smoke-server.mjs --electron"));
		}
	});

	it("pairs Icon Composer packaging with macOS 26 and Xcode selection, retaining macOS 15 CI", () => {
		const mac = packaging.strategy?.matrix.include.find(entry => entry.platform === "mac-arm64");
		assert.equal(mac?.os, "macos-26", "actool's .icon compiler needs macOS 26 host frameworks, not just newer Xcode");
		assert.equal(mac?.builder_args, "--mac --arm64");
		assert.equal(packaging["runs-on"], "${{ matrix.os }}");
		const xcodeIndex = packaging.steps.findIndex(step => step.uses === "maxim-lobanov/setup-xcode@v1");
		assert.ok(xcodeIndex >= 0);
		const xcode = packaging.steps[xcodeIndex];
		assert.equal(xcode?.if, "runner.os == 'macOS'");
		assert.equal(xcode?.with?.["xcode-version"], "latest-stable");
		const buildIndex = packaging.steps.findIndex(step => step.run?.includes("electron-builder"));
		assert.ok(buildIndex > xcodeIndex, "select Xcode before packaging compiles the icon");

		const ci = yaml.load(readFileSync(new URL("../.github/workflows/ci.yml", import.meta.url), "utf8"));
		const ciMac = ci.jobs.standalone?.strategy?.matrix.include.find(entry => entry.platform === "mac-arm64");
		assert.equal(ciMac?.os, "macos-15", "ordinary CI keeps older macOS build/boot coverage");
	});

	it("creates exactly one unpublished draft when none matches", async () => {
		assert.deepEqual(await prepareDraft([{ id: 9, tag_name: "v0.2.0", draft: false }]), [{
			owner: "test-owner", repo: "test-repo", tag_name: "v0.3.0", name: "0.3.0", draft: true,
		}]);
	});

	it("reuses an existing draft without creating another", async () => {
		assert.deepEqual(await prepareDraft([{ id: 10, tag_name: "v0.3.0", draft: true }]), []);
		// Match the publisher's support for legacy unprefixed tags too.
		assert.deepEqual(await prepareDraft([{ id: 10, tag_name: "0.3.0", draft: true }]), []);
	});

	it("refuses to modify an already-published release", async () => {
		await assert.rejects(prepareDraft([{ id: 10, tag_name: "v0.3.0", draft: false }]), /already published/);
	});

	it("refuses an ambiguous set of drafts instead of splitting assets", async () => {
		await assert.rejects(prepareDraft([
			{ id: 10, tag_name: "v0.3.0", draft: true },
			{ id: 11, tag_name: "v0.3.0", draft: true },
		]), /Multiple releases match/);
	});
});