import { mkdtempSync } from "node:fs";
import { tmpdir } from "node:os";
import { join } from "node:path";

import { afterAll, beforeAll, expect, test } from "@effect/vitest";

// Config reads the environment, so point it at a throwaway data dir before
// importing the app graph.
process.env.EXECUTOR_DATA_DIR = mkdtempSync(join(tmpdir(), "eh-boot-"));

let handler!: (request: Request) => Promise<Response>;
let dispose: () => Promise<void> = async () => {};

beforeAll(async () => {
  const { makeSelfHostTestApp, singleAdminIdentityLayer } = await import("./testing/test-app");
  const app = await makeSelfHostTestApp({
    identity: singleAdminIdentityLayer({
      userId: "admin",
      organizationId: "default-org",
      organizationName: "Default",
    }),
  });
  handler = app.handler;
  dispose = app.dispose;
});
afterAll(() => dispose());

const TINY_SPEC = JSON.stringify({
  openapi: "3.0.0",
  info: { title: "Tiny", version: "1.0.0" },
  servers: [{ url: "https://httpbin.org" }],
  paths: {
    "/get": {
      get: {
        operationId: "httpGet",
        summary: "GET",
        responses: { "200": { description: "ok" } },
      },
    },
  },
});

test("the single-admin binding resolves the org tenant for connection reads", async () => {
  // The connections surface is authenticated and reads the per-request executor's
  // (tenant, subject) binding. Registering an integration + org connection and
  // reading it back proves the single-admin identity resolves to a live executor
  // bound to its org tenant (the v2 successor to the old /api/scope probe).
  const add = await handler(
    new Request("http://localhost/api/openapi/specs", {
      method: "POST",
      headers: { "content-type": "application/json" },
      body: JSON.stringify({
        spec: { kind: "blob", value: TINY_SPEC },
        slug: "tiny",
        baseUrl: "",
      }),
    }),
  );
  expect(add.status).toBe(200);

  const created = await handler(
    new Request("http://localhost/api/connections", {
      method: "POST",
      headers: { "content-type": "application/json" },
      body: JSON.stringify({
        owner: "org",
        name: "main",
        integration: "tiny",
        template: "bearer",
        value: "token",
      }),
    }),
  );
  expect(created.status).toBe(200);

  const list = await handler(new Request("http://localhost/api/connections"));
  expect(list.status).toBe(200);
  const connections = (await list.json()) as ReadonlyArray<{ address: string }>;
  expect(connections.some((c) => c.address === "tools.tiny.org.main")).toBe(true);
});

test("POST /executions runs code in the QuickJS sandbox", async () => {
  const res = await handler(
    new Request("http://localhost/api/executions", {
      method: "POST",
      headers: { "content-type": "application/json" },
      body: JSON.stringify({ code: "export default 6 * 7" }),
    }),
  );
  expect(res.status).toBe(200);
  const body = (await res.json()) as {
    status: string;
    text: string;
    isError: boolean;
  };
  expect(body.status).toBe("completed");
  expect(body.text).toBe("42");
  expect(body.isError).toBe(false);
});