import assert from 'node:assert/strict';
import test from 'node:test';
import { getKnownHostsLine, mergeEnv, validateEnrollmentResponse } from '../scripts/remote-access-common.mjs';
import { buildSshArgs } from '../scripts/start-remote.mjs';

const enrollment = {
  installation_id: 'dev-123',
  ssh: {
    host: '203.0.113.10',
    port: 22,
    user: 'tunnel',
    certificate: 'ssh-ed25519-cert-v01@openssh.com AAAATEST cert',
    host_key: 'ssh-ed25519 AAAATEST host',
  },
  database: {
    name: 'system_db',
    username: 'client_123',
    password: 'a password with # symbols',
  },
  redis: {
    host: 'redis.example.test',
    port: 6380,
    username: 'cangku_1234567890abcdef',
    password: 'redis secret',
    db: 0,
    tls: true,
    tls_server_name: 'redis.example.test',
  },
  application_admin: {
    username: 'dev_123',
    password: 'one-time-password',
  },
};

test('validates complete enrollment responses', () => {
  assert.equal(validateEnrollmentResponse(enrollment), enrollment);
  assert.throws(
    () => validateEnrollmentResponse({ ...enrollment, database: { ...enrollment.database, password: '' } }),
    /database\.password/u
  );
});

test('builds an SSH tunnel only for the system database', () => {
  const args = buildSshArgs({
    localDatabasePort: 13307,
    ssh: {
      host: 'example.test',
      port: 50232,
      user: 'cangku-tunnel',
      remoteDatabaseHost: '127.0.0.1',
      remoteDatabasePort: 3307,
    },
  });
  assert.ok(args.includes('127.0.0.1:13307:127.0.0.1:3307'));
  assert.equal(args.some((value) => String(value).includes(':6380')), false);
});

test('merges environment values without losing unrelated settings', () => {
  const result = mergeEnv('KEEP=yes\nLOCAL_DB_HOST=old\n', {
    LOCAL_DB_HOST: '127.0.0.1',
    LOCAL_DB_PASSWORD: 'secret # value',
  });
  assert.match(result, /^KEEP=yes$/mu);
  assert.match(result, /^LOCAL_DB_HOST=127\.0\.0\.1$/mu);
  assert.match(result, /^LOCAL_DB_PASSWORD="secret # value"$/mu);
});

test('pins standard and non-standard SSH host targets', () => {
  assert.equal(getKnownHostsLine('example.test', 22, 'ssh-ed25519 KEY'), 'example.test ssh-ed25519 KEY\n');
  assert.equal(getKnownHostsLine('example.test', 2222, 'ssh-ed25519 KEY'), '[example.test]:2222 ssh-ed25519 KEY\n');
});