import { describe, expect, it } from "@effect/vitest";

import {
  cmdSetValue,
  generateLaunchdPlist,
  generateSystemdUnit,
  generateWindowsDaemonWrapper,
  generateWindowsRegisterScript,
  getServiceBackend,
} from "./service";

describe("service unit generation", () => {
  const launchdInput = {
    label: "sh.executor.daemon",
    programArguments: [
      "/Applications/Executor.app/Contents/Resources/sidecar/executor-sidecar",
      "daemon",
      "run",
      "--foreground",
      "--port",
      "4789",
    ],
    environment: {
      EXECUTOR_SUPERVISED: "1",
      EXECUTOR_DATA_DIR: "/Users/x/.executor",
      EXECUTOR_SERVICE_VERSION: "1.5.10",
      PATH: "/opt/homebrew/bin:/usr/bin",
    },
    stdoutPath: "/Users/x/.executor/logs/daemon.log",
    stderrPath: "/Users/x/.executor/logs/daemon.error.log",
    workingDirectory: "/Users/x/.executor",
  };

  it("renders a launchd plist that restarts on crash but not clean stop", () => {
    const plist = generateLaunchdPlist(launchdInput);
    expect(plist).toContain('<plist version="1.0">');
    expect(plist).toContain("<key>Label</key>");
    expect(plist).toContain("<string>sh.executor.daemon</string>");
    expect(plist).toMatch(/<key>RunAtLoad<\/key>\s*<true\/>/);
    // KeepAlive => restart only on non-zero/crash exit, not on a clean bootout.
    expect(plist).toContain("<key>KeepAlive</key>");
    expect(plist).toContain("<key>SuccessfulExit</key>");
    expect(plist).toMatch(/<key>SuccessfulExit<\/key>\s*<false\/>/);
    expect(plist).toContain("<key>ProcessType</key>");
    expect(plist).toContain("<string>Background</string>");
    expect(plist).toContain("--foreground");
    expect(plist).toContain("EXECUTOR_SUPERVISED");
    expect(plist).toContain("/Users/x/.executor/logs/daemon.error.log");
  });

  it("never leaks the auth password into the unit", () => {
    const plist = generateLaunchdPlist(launchdInput);
    // The secret lives in the 0600 service.key, never in the plist env.
    expect(plist).not.toContain("EXECUTOR_AUTH_PASSWORD");
  });

  it("xml-escapes environment values", () => {
    const plist = generateLaunchdPlist({
      ...launchdInput,
      environment: { PATH: "a&b<c>\"d'" },
    });
    expect(plist).toContain("a&amp;b&lt;c&gt;&quot;d&apos;");
    expect(plist).not.toMatch(/a&b<c>/);
  });

  it("renders a systemd --user unit with crash-only restart", () => {
    const unit = generateSystemdUnit({
      execStart: ["/usr/local/bin/executor", "daemon", "run", "--foreground", "--port", "4789"],
      environment: { EXECUTOR_SUPERVISED: "1", EXECUTOR_DATA_DIR: "/home/x/.executor" },
      workingDirectory: "/home/x/.executor",
      stdoutPath: "/home/x/.executor/logs/daemon.log",
      stderrPath: "/home/x/.executor/logs/daemon.error.log",
    });
    expect(unit).toContain("ExecStart=/usr/local/bin/executor daemon run --foreground --port 4789");
    expect(unit).toContain("Restart=on-failure");
    expect(unit).toContain("WantedBy=default.target");
    expect(unit).toContain("Environment=EXECUTOR_SUPERVISED=1");
    expect(unit).not.toContain("EXECUTOR_AUTH_PASSWORD");
  });

  it("bakes the supervised env into the Windows wrapper .cmd", () => {
    const wrapper = generateWindowsDaemonWrapper(
      {
        executablePath: "C:\\Program Files\\Executor\\executor.exe",
        port: 4789,
        version: "1.5.10",
      },
      "C:\\Users\\x\\.executor",
      "C:\\Users\\x\\.executor\\logs",
    );
    // Task Scheduler can't set env, so it rides as `set` lines in the wrapper.
    expect(wrapper).toContain('set "EXECUTOR_SUPERVISED=1"');
    expect(wrapper).toContain('set "EXECUTOR_DATA_DIR=C:\\Users\\x\\.executor"');
    expect(wrapper).toContain(
      '"C:\\Program Files\\Executor\\executor.exe" daemon run --foreground --port 4789',
    );
    expect(wrapper).toContain('1>> "C:\\Users\\x\\.executor\\logs\\daemon.log"');
    // The secret is never baked into the wrapper — the daemon reads service.key.
    expect(wrapper).not.toContain("EXECUTOR_AUTH_PASSWORD");
  });

  it("sanitizes cmd.exe metacharacters in baked env values (cmdSetValue)", () => {
    // A `"` in PATH would close the `set "PATH=..."` quote early and let a
    // `& cmd &` fragment run at boot as the user; strip it (illegal in a path
    // anyway). A `%` would re-expand against the boot environment; double it.
    expect(cmdSetValue('C:\\a" & evil & "C:\\b')).toBe("C:\\a & evil & C:\\b");
    expect(cmdSetValue("C:\\tools\\%LOCALAPPDATA%\\bin")).toBe("C:\\tools\\%%LOCALAPPDATA%%\\bin");
    expect(cmdSetValue("C:\\Program Files\\node")).toBe("C:\\Program Files\\node");
    // The sanitized value, embedded in a `set` line, can't break out of quotes.
    expect(`set "PATH=${cmdSetValue('a"&b')}"`).not.toMatch(/"\s*&/);
  });

  it("registers a boot-triggered S4U task (the reboot-survival contract)", () => {
    const script = generateWindowsRegisterScript({
      taskName: "ExecutorDaemon",
      wrapperPath: "C:\\Users\\x\\.executor\\server-control\\run-daemon.cmd",
      userId: "x",
    });
    // S4U + AtStartup = run as the user, at boot, no stored password, no logon.
    expect(script).toContain("-LogonType S4U");
    expect(script).toContain("New-ScheduledTaskTrigger -AtStartup");
    expect(script).toContain("-RestartCount 3");
    expect(script).toContain("Register-ScheduledTask -TaskName 'ExecutorDaemon'");
    expect(script).toContain("Start-ScheduledTask -TaskName 'ExecutorDaemon'");
  });
});

describe("service backend dispatch", () => {
  it("selects launchd on macOS (automated)", () => {
    const backend = getServiceBackend("darwin");
    expect(backend.platform).toBe("darwin");
    expect(backend.automated).toBe(true);
  });

  it("selects systemd on linux (automated)", () => {
    expect(getServiceBackend("linux").platform).toBe("linux");
  });

  it("selects Task Scheduler on windows (automated)", () => {
    const backend = getServiceBackend("win32");
    expect(backend.platform).toBe("win32");
    expect(backend.automated).toBe(true);
  });

  it("falls back to unsupported on other platforms", () => {
    expect(getServiceBackend("freebsd").platform).toBe("unsupported");
  });
});