import { readFileSync } from 'node:fs'
import { resolve } from 'node:path'
import { describe, expect, it } from 'vitest'

const config = readFileSync(resolve(process.cwd(), 'nginx/default.conf.template'), 'utf8')
const testCompose = readFileSync(resolve(process.cwd(), 'docker-compose.test.yml'), 'utf8')
const developmentCompose = readFileSync(resolve(process.cwd(), 'docker-compose.development.yml'), 'utf8')
const productionCompose = readFileSync(resolve(process.cwd(), 'docker-compose.production.yml'), 'utf8')
const jenkinsfile = readFileSync(resolve(process.cwd(), 'Jenkinsfile'), 'utf8')
const dockerfile = readFileSync(resolve(process.cwd(), 'Dockerfile'), 'utf8')

describe('admin nginx deployment config', () => {
  it('allows 50 MiB files plus multipart overhead through both bounded API proxies', () => {
    expect(config.match(/client_max_body_size 55m;/g)).toHaveLength(2)
    expect(config).not.toContain('client_max_body_size 12m;')
    expect(config).not.toContain('client_max_body_size 0;')
  })

  it('prevents the application shell from retaining stale chunk references', () => {
    expect(config).toContain('location = /index.html')
    expect(config).toContain('Cache-Control "no-cache, no-store, must-revalidate"')
  })

  it('serves hashed assets immutably and never falls back missing chunks to HTML', () => {
    expect(config).toContain('location /assets/')
    expect(config).toContain('try_files $uri =404;')
    expect(config).toContain('Cache-Control "public, max-age=31536000, immutable"')
  })

  it('keeps Vue history routes on the application shell without caching them', () => {
    expect(config).toContain('try_files $uri $uri/ /index.html;')
    expect(config).toContain('Cache-Control "no-cache"')
  })

  it('proxies overseas API requests to the gateway API prefix', () => {
    expect(config).toContain('location /overseas-api/')
    expect(config).toContain('rewrite ^/overseas-api/(.*)$ /api/$1 break;')
    expect(config).toContain('proxy_pass ${OVERSEAS_API_UPSTREAM};')
  })

  it('declares an explicit overseas gateway upstream in container deployments', () => {
    expect(testCompose).toContain('API_UPSTREAM: "http://test-api-cn.buggoglobal.com"')
    expect(testCompose).toContain('OVERSEAS_API_UPSTREAM: "http://test-api-global.buggoglobal.com"')
    expect(testCompose).toContain('CLIENT_WEB_URL: "${CLIENT_WEB_URL:-https://test-app.buggoglobal.com/}"')
    expect(testCompose).not.toContain('CLIENT_WEB_URL: "http://8.163.')
    expect(developmentCompose).toContain('CLIENT_WEB_URL: "${CLIENT_WEB_URL:-https://dev-app.buggoglobal.com/}"')
    expect(developmentCompose).toContain('OVERSEAS_API_UPSTREAM: "http://firstleg-development-gateway-overseas:9300"')
    expect(config).toContain('proxy_set_header Host $proxy_host;')
  })

  it('keeps local environments on target nodes and uses credential-managed SSH for production', () => {
    expect(jenkinsfile).toContain("env.JOB_BASE_NAME?.endsWith('-prod') ? 'java-builder'")
    expect(jenkinsfile).toContain("DEVELOPMENT_COMPOSE_PROJECT = 'admin-web'")
    expect(jenkinsfile).toContain('docker compose -p "$DEVELOPMENT_COMPOSE_PROJECT" -f "$DEVELOPMENT_COMPOSE_FILE" up -d')
    expect(jenkinsfile).not.toContain('/var/jenkins_home/.ssh')
    expect(jenkinsfile).not.toContain('docker save')
    expect(jenkinsfile).toContain("credentialsId: 'firstleg-production-ssh'")
    expect(jenkinsfile).toContain('git rev-parse origin/main')
    expect(productionCompose).toContain('127.0.0.1:${HOST_PORT:-9001}:80')
    expect(productionCompose).toContain('API_UPSTREAM: "http://gateway:9000"')
    expect(productionCompose).toContain('name: firstleg-prod-infra-network')
  })

  it('uses authenticated internal base images in CI instead of pulling from Docker Hub', () => {
    expect(dockerfile).toContain('ARG NODE_IMAGE=node:22-alpine')
    expect(dockerfile).toContain('ARG NGINX_IMAGE=nginx:1.27-alpine')
    expect(dockerfile).toContain('FROM ${NODE_IMAGE} AS build')
    expect(dockerfile).toContain('FROM ${NGINX_IMAGE}')
    expect(jenkinsfile).toContain("NODE_BASE_IMAGE = '172.31.198.7:10082/java-project/node:22-alpine'")
    expect(jenkinsfile).toContain("NGINX_BASE_IMAGE = '172.31.198.7:10082/java-project/nginx:1.27-alpine'")
    expect(jenkinsfile).toContain('withCredentials([usernamePassword(')
    expect(jenkinsfile).toContain('export DOCKER_CONFIG="${WORKSPACE}@tmp/docker-auth"')
    expect(jenkinsfile).toContain('--build-arg VITE_CLIENT_WEB_URL="${CLIENT_WEB_URL:-https://dev-app.buggoglobal.com/}"')
  })
})