import test from 'node:test'
import assert from 'node:assert/strict'
import { createFlowContext, requireSuccess } from './prod-release-http.mjs'
const settings = { apiBase: 'https://fixture.invalid/api', credentials: { ADMIN: { loginId: 'fixture', password: 'private' } } }
function harness(fetcher, saveError = false) {
  const state = { requests: [] }, saves = []
  const save = async patch => { if (saveError) throw Error('disk failed'); Object.assign(state,patch); saves.push(structuredClone(state)) }
  return { state, saves, ctx: createFlowContext({ settings, state, save, fetcher }) }
}
test('persists intent before writes and never saves credentials or tokens', async () => {
  let h
  h = harness(async (_url, options) => {
    assert.equal(h.state.requests.at(-1).status, 'INTENT')
    return new Response(JSON.stringify({ code: '200', data: { accessToken: 'access-secret', refreshToken: 'refresh-secret' } }))
  })
  await h.ctx.login('ADMIN')
  await h.ctx.close()
  assert.doesNotMatch(JSON.stringify(h.state), /private|access-secret|refresh-secret/)
  assert.ok(h.state.requests.every(row=>row.status==='DONE'))
})
test('disk failure prevents HTTP and unknown network result is never retried', async () => {
  let calls=0
  const broken=harness(async()=>{calls++;throw Error('network')},true)
  await assert.rejects(broken.ctx.request('POST','/api/platform/v1/example',{}),/disk/)
  assert.equal(calls,0)
  const h=harness(async()=>{calls++;throw Error('network')})
  await assert.rejects(h.ctx.request('POST','/api/platform/v1/example',{}),/结果不确定/)
  assert.equal(calls,1)
  assert.equal(h.state.requests[0].status,'UNKNOWN')
})
test('business errors retain diagnostic IDs and binary responses preserve bytes',async()=>{
  const h=harness(async()=>new Response(JSON.stringify({code:'A0403',requestId:'req-1',traceId:'trace-1',message:'private'})))
  const response=await h.ctx.request('GET','/api/platform/v1/example')
  assert.throws(()=>requireSuccess(response),/A0403.*req-1.*trace-1/)
  assert.doesNotMatch(JSON.stringify(h.state),/private/)
  const binary=harness(async()=>new Response('%PDF-fixture',{headers:{'content-type':'application/pdf'}}))
  const pdf=await binary.ctx.requestBinary('POST','/api/platform/inbounds/1/carton-label-pdf')
  assert.equal(Buffer.from(pdf.bytes).toString(),'%PDF-fixture')
  assert.equal(pdf.contentType,'application/pdf')
})

test('request limit blocks business calls but permits session logout', async () => {
  const h = harness(async () => new Response(JSON.stringify({ code: '200', data: {} })))
  h.ctx.registerSession({ accessToken: 'secret', refreshToken: 'refresh' })
  h.state.requests = Array.from({ length: 2500 }, (_, index) => ({ sequence: index + 1, status: 'DONE' }))
  await assert.rejects(h.ctx.request('GET', '/api/platform/v1/example'), /安全上限/)
  assert.deepEqual(await h.ctx.close(), [])
  assert.equal(h.state.requests.at(-1).path, '/api/auth/logout')
  assert.equal(h.state.requests.at(-1).status, 'DONE')
})