import assert from 'node:assert/strict';
import test from 'node:test';
import { getKnownHostsLine, mergeEnv, validateEnrollmentResponse } from '../scripts/remote-access-common.mjs';

const enrollment = {
  installation_id: 'dev-123',
  ssh: {
    host: '203.0.113.10',
    port: 22,
    user: 'tunnel',
    certificate: 'ssh-ed25519-cert-v01@openssh.com AAAATEST cert',
    host_key: 'ssh-ed25519 AAAATEST host',
  },
  database: {
    name: 'system_db',
    username: 'client_123',
    password: 'a password with # symbols',
  },
  application_admin: {
    username: 'dev_123',
    password: 'one-time-password',
  },
};

test('validates complete enrollment responses', () => {
  assert.equal(validateEnrollmentResponse(enrollment), enrollment);
  assert.throws(
    () => validateEnrollmentResponse({ ...enrollment, database: { ...enrollment.database, password: '' } }),
    /database\.password/u
  );
});

test('merges environment values without losing unrelated settings', () => {
  const result = mergeEnv('KEEP=yes\nLOCAL_DB_HOST=old\n', {
    LOCAL_DB_HOST: '127.0.0.1',
    LOCAL_DB_PASSWORD: 'secret # value',
  });
  assert.match(result, /^KEEP=yes$/mu);
  assert.match(result, /^LOCAL_DB_HOST=127\.0\.0\.1$/mu);
  assert.match(result, /^LOCAL_DB_PASSWORD="secret # value"$/mu);
});

test('pins standard and non-standard SSH host targets', () => {
  assert.equal(getKnownHostsLine('example.test', 22, 'ssh-ed25519 KEY'), 'example.test ssh-ed25519 KEY\n');
  assert.equal(getKnownHostsLine('example.test', 2222, 'ssh-ed25519 KEY'), '[example.test]:2222 ssh-ed25519 KEY\n');
});