import { describe, expect, it } from "@effect/vitest";

import { isMarketingPath, marketingProxyRequest } from "./marketing";

// On executor.sh the marketing middleware proxies an allow-list of paths to the
// `executor-marketing` worker; everything else falls through to the auth-gated
// cloud app (the sign-in page). `/blog` and `/llms.txt` are public content, so
// they must be on the allow-list: without it an unauthenticated visit redirects
// to `/login?returnTo=...` and the reader bounces.
describe("isMarketingPath", () => {
  const marketing = [
    "/home",
    "/privacy",
    "/terms",
    "/about-executor",
    "/google-oauth",
    "/google-workspace",
    "/blog",
    "/blog/",
    "/blog/some-post",
    "/llms.txt",
    "/og-image.png",
    "/_astro/app.css",
    // The blog author card loads its avatar from marketing's public/authors;
    // without this the pfp 404s on every post.
    "/authors/rhys-sullivan.png",
  ];
  for (const pathname of marketing) {
    it(`proxies ${pathname} to marketing`, () => {
      expect(isMarketingPath(pathname)).toBe(true);
    });
  }

  // App-owned routes must reach the Effect handler, not marketing. `/blogger`
  // guards against a bare `startsWith("/blog")` swallowing unrelated words.
  const notMarketing = ["/", "/login", "/cloud", "/mcp", "/dashboard", "/blogger"];
  for (const pathname of notMarketing) {
    it(`leaves ${pathname} alone`, () => {
      expect(isMarketingPath(pathname)).toBe(false);
    });
  }
});

describe("marketingProxyRequest", () => {
  it("routes a signed-out homepage request", () => {
    const request = new Request("https://executor.sh/?source=test");

    const proxied = marketingProxyRequest(request);

    expect(proxied?.url).toBe("https://executor.sh/?source=test");
  });

  it("leaves the signed-in homepage with the cloud application", () => {
    const request = new Request("https://executor.sh/", {
      headers: { cookie: "other=value; wos-session=sealed" },
    });

    expect(marketingProxyRequest(request)).toBeNull();
  });

  it("routes public content even when a session cookie is present", () => {
    const request = new Request("https://executor.sh/blog/post", {
      headers: { cookie: "wos-session=sealed" },
    });

    expect(marketingProxyRequest(request)?.url).toBe("https://executor.sh/blog/post");
  });

  it("rewrites the public home alias to the marketing root", () => {
    const request = new Request("https://executor.sh/home?source=test");

    expect(marketingProxyRequest(request)?.url).toBe("https://executor.sh/?source=test");
  });

  it("preserves the request method, headers, and body", async () => {
    const request = new Request("https://executor.sh/_astro/_ph/capture", {
      method: "POST",
      headers: { "content-type": "application/json", "x-request-id": "request-1" },
      body: JSON.stringify({ event: "test" }),
    });

    const proxied = marketingProxyRequest(request);

    expect(proxied?.method).toBe("POST");
    expect(proxied?.headers.get("x-request-id")).toBe("request-1");
    await expect(proxied?.json()).resolves.toEqual({ event: "test" });
  });

  it("does not proxy non-production hosts or app-owned paths", () => {
    expect(marketingProxyRequest(new Request("http://executor-cloud.localhost/"))).toBeNull();
    expect(marketingProxyRequest(new Request("https://executor.sh/login"))).toBeNull();
  });
});