package main

import (
	"io"
	"os"
	"path/filepath"
	"strings"
	"testing"
)

func TestDispatcherCommandRejectsOldFlagsAndModesBeforeResources(t *testing.T) {
	for _, tc := range []struct {
		name string
		args []string
		want string
	}{
		{"real", []string{"--mode", "real"}, "Mock"},
		{"mixed", []string{"--mode", "mixed"}, "Mock"},
		{"old config", []string{"--config", "/nonexistent"}, "unknown flag"},
	} {
		t.Run(tc.name, func(t *testing.T) {
			database := filepath.Join(t.TempDir(), "dispatcher.sqlite")
			t.Setenv("DISPATCHER_SQLITE_PATH", database)
			command := newDispatcherCommand()
			command.SetOut(io.Discard)
			command.SetErr(io.Discard)
			command.SetArgs(tc.args)
			if err := command.Execute(); err == nil || !strings.Contains(err.Error(), tc.want) {
				t.Fatalf("unapproved Dispatcher entry was admitted: %v", err)
			}
			if _, err := os.Stat(database); !os.IsNotExist(err) {
				t.Fatalf("rejected entry opened business state: %v", err)
			}
		})
	}
}

func TestDispatcherCommandValidatesDeploymentBeforeOpeningSQLite(t *testing.T) {
	root := t.TempDir()
	endpointFile := filepath.Join(root, "agent-endpoints.json")
	ossFile := filepath.Join(root, "oss.json")
	database := filepath.Join(root, "dispatcher.sqlite")
	for name, value := range map[string]string{
		"DISPATCHER_ID":                   "c046b893-8628-4589-ae50-619d049248a6",
		"DISPATCHER_SECRET_KEY":           "isolated-placeholder",
		"SAAS_BASE_URL":                   "http://127.0.0.1:18770",
		"RABBITMQ_URL":                    "amqp://127.0.0.1:18771",
		"DISPATCHER_SQLITE_PATH":          database,
		"DISPATCHER_GRPC_LISTEN":          "127.0.0.1:0",
		"DISPATCHER_AGENT_ENDPOINTS_FILE": endpointFile,
		"DISPATCHER_OSS_CONFIG_FILE":      ossFile,
		"MTLS_CA_FILE":                    filepath.Join(root, "ca.pem"),
		"MTLS_CERT_FILE":                  filepath.Join(root, "dispatcher.pem"),
		"MTLS_KEY_FILE":                   filepath.Join(root, "dispatcher.key"),
		"MTLS_PEER_CERT_FINGERPRINTS":     strings.Repeat("a", 64),
	} {
		t.Setenv(name, value)
	}
	if err := os.WriteFile(endpointFile, []byte(`[{"agent_id":"agent-mock","cell_id":"cell-mock","address":"saas.example.invalid:443","server_name":"agent.local"}]`), 0600); err != nil {
		t.Fatal(err)
	}
	if err := os.WriteFile(ossFile, []byte(`{"dispatcher_id":"22222222-2222-4222-8222-222222222222","oss":{}}`), 0600); err != nil {
		t.Fatal(err)
	}
	check := func(want string) {
		t.Helper()
		command := newDispatcherCommand()
		command.SetOut(io.Discard)
		command.SetErr(io.Discard)
		command.SetArgs([]string{"--mode", "mock"})
		if err := command.Execute(); err == nil || !strings.Contains(err.Error(), want) || strings.Contains(err.Error(), "saas.example.invalid") {
			t.Fatalf("unapproved Dispatcher deployment was admitted or echoed: %v", err)
		}
		if _, err := os.Stat(database); !os.IsNotExist(err) {
			t.Fatalf("rejected deployment opened SQLite: %v", err)
		}
	}
	check("local")
	if err := os.WriteFile(endpointFile, []byte(`[{"agent_id":"agent-mock","cell_id":"cell-mock","address":"127.0.0.1:19090","server_name":"agent.local"}]`), 0600); err != nil {
		t.Fatal(err)
	}
	check("not assigned")
}