import { expect, it } from "@effect/vitest";
import * as DateTime from "effect/DateTime";
import * as Effect from "effect/Effect";
import * as Layer from "effect/Layer";
import * as Option from "effect/Option";

import * as AuthConnectClients from "./AuthConnectClients.ts";
import { SqlitePersistenceMemory } from "./Layers/Sqlite.ts";

const layer = AuthConnectClients.layer.pipe(Layer.provideMerge(SqlitePersistenceMemory));

const client = {
  label: "Client",
  ipAddress: null,
  userAgent: null,
  deviceType: "desktop",
  os: "macOS",
  browser: null,
} satisfies AuthConnectClients.AuthConnectClientMetadataRecord;

it.effect("clears stale last-seen timestamps when a revoked client re-registers", () =>
  Effect.gen(function* () {
    const clients = yield* AuthConnectClients.AuthConnectClientRepository;
    const clientProofKeyThumbprint = "client-thumbprint";

    yield* clients.upsertRequest({
      clientProofKeyThumbprint,
      cloudUserId: "cloud-user",
      deviceId: "device-1",
      client,
      requestedAt: DateTime.makeUnsafe("2026-06-27T12:00:00.000Z"),
    });
    yield* clients.updateStatus({
      clientProofKeyThumbprint,
      status: "approved",
      decidedAt: DateTime.makeUnsafe("2026-06-27T12:01:00.000Z"),
    });
    const seen = yield* clients.markSeen({
      clientProofKeyThumbprint,
      seenAt: DateTime.makeUnsafe("2026-06-27T12:02:00.000Z"),
    });
    expect(Option.isSome(seen) ? seen.value.lastSeenAt : null).not.toBeNull();

    yield* clients.revoke({
      clientProofKeyThumbprint,
      revokedAt: DateTime.makeUnsafe("2026-06-27T12:03:00.000Z"),
    });
    const reregistered = yield* clients.upsertRequest({
      clientProofKeyThumbprint,
      cloudUserId: "cloud-user",
      deviceId: "device-1",
      client,
      requestedAt: DateTime.makeUnsafe("2026-06-27T12:04:00.000Z"),
    });

    expect(reregistered.status).toBe("pending");
    expect(reregistered.lastSeenAt).toBeNull();
  }).pipe(Effect.provide(layer)),
);

it.effect("resets approval when the same proof key is requested by a different cloud user", () =>
  Effect.gen(function* () {
    const clients = yield* AuthConnectClients.AuthConnectClientRepository;
    const clientProofKeyThumbprint = "client-thumbprint-cloud-user-change";

    yield* clients.upsertRequest({
      clientProofKeyThumbprint,
      cloudUserId: "cloud-user-a",
      deviceId: "device-1",
      client,
      requestedAt: DateTime.makeUnsafe("2026-06-27T13:00:00.000Z"),
    });
    yield* clients.updateStatus({
      clientProofKeyThumbprint,
      status: "approved",
      decidedAt: DateTime.makeUnsafe("2026-06-27T13:01:00.000Z"),
    });
    yield* clients.markSeen({
      clientProofKeyThumbprint,
      seenAt: DateTime.makeUnsafe("2026-06-27T13:02:00.000Z"),
    });

    const reregistered = yield* clients.upsertRequest({
      clientProofKeyThumbprint,
      cloudUserId: "cloud-user-b",
      deviceId: "device-1",
      client,
      requestedAt: DateTime.makeUnsafe("2026-06-27T13:03:00.000Z"),
    });

    expect(reregistered.cloudUserId).toBe("cloud-user-b");
    expect(reregistered.status).toBe("pending");
    expect(reregistered.approvedAt).toBeNull();
    expect(reregistered.rejectedAt).toBeNull();
    expect(reregistered.lastSeenAt).toBeNull();
  }).pipe(Effect.provide(layer)),
);

it.effect("clears the opposite decision timestamp when approval status changes", () =>
  Effect.gen(function* () {
    const clients = yield* AuthConnectClients.AuthConnectClientRepository;
    const clientProofKeyThumbprint = "client-thumbprint-status-flip";

    yield* clients.upsertRequest({
      clientProofKeyThumbprint,
      cloudUserId: "cloud-user",
      deviceId: "device-1",
      client,
      requestedAt: DateTime.makeUnsafe("2026-06-27T14:00:00.000Z"),
    });
    const rejected = yield* clients.updateStatus({
      clientProofKeyThumbprint,
      status: "rejected",
      decidedAt: DateTime.makeUnsafe("2026-06-27T14:01:00.000Z"),
    });
    expect(Option.isSome(rejected) ? rejected.value.rejectedAt : null).not.toBeNull();
    expect(Option.isSome(rejected) ? rejected.value.approvedAt : null).toBeNull();

    const approved = yield* clients.updateStatus({
      clientProofKeyThumbprint,
      status: "approved",
      decidedAt: DateTime.makeUnsafe("2026-06-27T14:02:00.000Z"),
    });
    expect(Option.isSome(approved) ? approved.value.approvedAt : null).not.toBeNull();
    expect(Option.isSome(approved) ? approved.value.rejectedAt : null).toBeNull();
  }).pipe(Effect.provide(layer)),
);