import { test } from 'node:test';
import assert from 'node:assert/strict';
import { mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
import { tmpdir } from 'node:os';
import { join } from 'node:path';
import { addDatabricks, databricksHost, databricksNative } from '../src/databricks.ts';
import { readSettings } from '../src/settings.ts';
import { buzzProviderEnvironment } from '../src/buzz-provider.ts';

// Native/browser/network and OS custody are replaced explicitly, not by HOME.
test('verified native login precedes catalog; cancelled late completion and failure never publish',async () => {
  const dir=mkdtempSync(join(tmpdir(),'beehive-db-test-'));
  try {
    const trace:string[]=[];
    const native:typeof databricksNative = async (input,signal) => { assert.equal(input.action,'login'); assert.equal(input.host,'https://fixture.example'); signal.throwIfAborted(); trace.push('auth','store','verify'); assert.equal(readSettings(dir).providers.length,0); return {ok:true}; };
    await addDatabricks(dir,'Fixture','https://fixture.example/',new AbortController().signal,native);
    trace.push('catalog'); assert.deepEqual(trace,['auth','store','verify','catalog']);
    const provider=readSettings(dir).providers[0]!;
    assert.equal(provider.type,'databricks_v2');
    const env=buzzProviderEnvironment({ provider:'databricks_v2',auth:'token',baseUrl:provider.endpoint,credential:provider.key,models:['fixture-model'] },'/synthetic/home','/synthetic/config','fixture-model','synthetic-bearer');
    assert.equal(env.DATABRICKS_TOKEN,'synthetic-bearer'); assert.equal(env.DATABRICKS_HOST,provider.endpoint); assert.equal(env.BUZZ_AGENT_MODEL,'fixture-model');
    const abort=new AbortController();
    await assert.rejects(addDatabricks(dir,'Late','https://fixture.example',abort.signal,async () => {abort.abort();return {ok:true};}));
    await assert.rejects(addDatabricks(dir,'Denied','https://fixture.example',new AbortController().signal,async () => {throw Error('fixture denial');}));
    assert.equal(readSettings(dir).providers.length,1);
    for (const name of readdirSync(dir)) if (name.endsWith('.json')) assert.ok(!readFileSync(join(dir,name),'utf8').includes('synthetic-bearer'));
  } finally {rmSync(dir,{recursive:true,force:true});}
});
test('workspace validation rejects credential and callback confusion',() => {
  for (const value of ['http://fixture.example','https://user:pass@fixture.example','https://fixture.example/a','https://fixture.example?x=y','https://fixture.example#f','https://127.0.0.1','https://fixture.example:8080']) assert.throws(() => databricksHost(value));
});
test('owned native pipe cancellation waits for close; no real native/browser/OS access',async () => {
  const dir=mkdtempSync(join(tmpdir(),'beehive-db-pipe-'));
  try {
    const helper=join(dir,'helper'); writeFileSync(helper,'#!/bin/sh\nexec /bin/sleep 60\n',{mode:0o700});
    const abort=new AbortController(); const promise=databricksNative({action:'login',host:'https://fixture.example',key:{service:'beehive',account:'provider:00000000-0000-0000-0000-000000000000'}},abort.signal,helper);
    abort.abort(); await assert.rejects(promise,/cancelled/);
  } finally {rmSync(dir,{recursive:true,force:true});}
});