import type { Database } from "bun:sqlite";
import { afterAll, beforeAll, describe, expect, setSystemTime, test } from "bun:test";
import { mkdtemp } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import type { Hono } from "hono";
import { openBucket } from "../src/bucket/reader.ts";
import { syncAll } from "../src/bucket/sync.ts";
import {
	addEntry,
	blockReporter,
	fileIssue,
	filingsSince,
	findIssue,
	hashToken,
	issueCounts,
	listIssues,
	type NewIssue,
	threadEntries,
	unblockReporter,
} from "../src/issues/store.ts";
import { createApp } from "../src/server/app.ts";
import { openKeprDb } from "../src/server/db.ts";
import { makeRepos, writeRelease } from "./fixture.ts";

const newIssue = (repo: string, title: string, filedAt = 1000): NewIssue => ({
	repo,
	title,
	body: "It broke.",
	type: "bug",
	version: "1.0.0",
	reporterName: "",
	contactEmail: "me@example.com",
	ipHash: "ip-a",
	filedAt,
});

describe("issue data layer", async () => {
	const db = openKeprDb(await mkdtemp(join(tmpdir(), "kepr-issues-")));

	test("numbers are per repo and continue after an imported number", () => {
		expect(fileIssue(db, newIssue("app", "one")).number).toBe(1);
		expect(fileIssue(db, newIssue("app", "two")).number).toBe(2);
		expect(fileIssue(db, newIssue("lib", "first")).number).toBe(1);
		db.run(
			"INSERT INTO issues (repo, number, title, body, type, filed_at) VALUES ('lib', 41, 'from kepr 2', 'x', 'idea', 5)",
		);
		expect(fileIssue(db, newIssue("lib", "next")).number).toBe(42);
	});

	test("only the token's hash is stored, and public reads leave out contact and IP", () => {
		const { number, token } = fileIssue(db, newIssue("app", "secret"));
		expect(token).toMatch(/^[0-9a-f]{64}$/);
		const issue = findIssue(db, "app", number);
		expect(issue?.token_hash).toBe(hashToken(token));
		expect(JSON.stringify(issue)).not.toContain(token);
		expect(Object.keys(issue ?? {})).not.toContain("contact_email");
		expect(Object.keys(issue ?? {})).not.toContain("ip_hash");
	});

	test("hidden issues vanish from lists, counts and lookups but still count against the IP", () => {
		const before = filingsSince(db, "ip-a", 0);
		const { number } = fileIssue(db, newIssue("app", "spam"));
		db.run("UPDATE issues SET hidden = 1 WHERE repo = 'app' AND number = ?", [number]);
		expect(findIssue(db, "app", number)).toBeNull();
		expect(listIssues(db, "app", "open").map((i) => i.title)).not.toContain("spam");
		expect(issueCounts(db, "app")).toEqual({ open: 3, closed: 0 });
		expect(filingsSince(db, "ip-a", 0)).toBe(before + 1);
		expect(filingsSince(db, "ip-a", 1000)).toBe(0);
	});

	test("the thread keeps entries in order with their author kind", () => {
		const issue = findIssue(db, "app", 1);
		if (!issue) throw new Error("issue 1 missing");
		addEntry(db, issue.id, "reporter", "More detail.", 2000);
		addEntry(db, issue.id, "operator", "Thanks.", 3000);
		expect(threadEntries(db, issue.id).map((e) => [e.author, e.body])).toEqual([
			["reporter", "More detail."],
			["operator", "Thanks."],
		]);
	});
});

describe("issues end to end over HTTP", () => {
	let app: Hono;
	let kepr: Database;
	let save: string;
	let clock = Date.parse("2026-09-26T12:00:00Z");
	const tick = (seconds: number) => {
		clock += seconds * 1000;
		setSystemTime(new Date(clock));
	};
	// A browser session: the form cookie from GET /new, and the form's stamp.
	type Session = { cookie: string; stamp: string };
	const openForm = async (path = "/app/issues/new", cookie = ""): Promise<Session> => {
		const response = await app.request(path, { headers: cookie ? { cookie } : {} });
		const set = response.headers.get("set-cookie")?.split(";")[0] ?? cookie;
		const stamp = /name="stamp" value="([^"]+)"/.exec(await response.text())?.[1] ?? "";
		return { cookie: set, stamp };
	};
	const post = (
		path: string,
		session: Session,
		fields: Record<string, string>,
		peer = "203.0.113.9",
		forwardedFor = "",
	) =>
		app.request(
			path,
			{
				method: "POST",
				headers: {
					cookie: session.cookie,
					...(forwardedFor && { "x-forwarded-for": forwardedFor }),
				},
				body: new URLSearchParams({ stamp: session.stamp, website: "", ...fields }),
			},
			// The env Bun.serve passes: the server, whose requestIP gives the socket peer.
			{ requestIP: () => ({ address: peer }) },
		);
	const issue = {
		title: "Crash on <start>",
		body: "It <b>crashed</b>.",
		type: "bug",
		version: "1.2.0",
	};
	const page = async (path: string) => (await app.request(path)).text();

	beforeAll(async () => {
		setSystemTime(new Date(clock));
		const repos = await makeRepos(["app", "secret"]);
		save = repos.saves.app as string;
		await writeRelease(repos.bucketDir, "app", {
			version: "1.2.0",
			save,
			files: [{ platform: "linux-x86_64", name: "app", bytes: new Uint8Array([1]) }],
		});
		const dataDir = await mkdtemp(join(tmpdir(), "kepr-issues-e2e-"));
		kepr = openKeprDb(dataDir);
		const bucket = { kind: "folder" as const, path: repos.bucketDir };
		await syncAll({
			bucket: openBucket(bucket),
			kepr,
			mirrorDir: join(dataDir, "mirror"),
		});
		kepr.run("UPDATE repos SET public = 1 WHERE name = 'app'");
		app = createApp(
			{ domain: "kepr.example", dataDir, adminPasswordHash: "$argon2id$x", bucket },
			kepr,
		);
	});
	afterAll(() => setSystemTime());

	let token = "";

	test("the form prefills the newest release, sets a strict same-site cookie and is never cached", async () => {
		const response = await app.request("/app/issues/new");
		expect(response.status).toBe(200);
		expect(response.headers.get("cache-control")).toBe("no-store");
		expect(response.headers.get("set-cookie")).toContain("SameSite=Strict");
		const text = await response.text();
		expect(text).toContain('name="version" maxlength="200" value="1.2.0"');
		expect(text).toContain('name="website"');
	});

	test("refuses a too-fast, honeypot or cross-site submission", async () => {
		const session = await openForm();
		expect((await post("/app/issues/new", session, issue)).status).toBe(400);
		tick(3);
		expect((await post("/app/issues/new", session, { ...issue, website: "x" })).status).toBe(400);
		expect((await post("/app/issues/new", { ...session, cookie: "" }, issue)).status).toBe(403);
		const other = await openForm();
		expect(
			(await post("/app/issues/new", { ...session, cookie: other.cookie }, issue)).status,
		).toBe(403);
		expect((await page("/app/issues")).includes("Crash")).toBe(false);
	});

	test("refuses a field over 20,000 characters and keeps what was typed", async () => {
		const session = await openForm();
		tick(5);
		const response = await post("/app/issues/new", session, { ...issue, body: "x".repeat(20_001) });
		expect(response.status).toBe(400);
		expect(await response.text()).toContain("x".repeat(100));
	});

	test("files an issue and shows the follow-up link once, carrying a token", async () => {
		const session = await openForm();
		tick(4);
		const response = await post("/app/issues/new", session, {
			...issue,
			name: "Ada",
			email: "ada@private.example",
		});
		expect(response.status).toBe(200);
		expect(response.headers.get("cache-control")).toBe("no-store");
		const text = await response.text();
		token = /\/app\/issues\/1\?token=([0-9a-f]{64})/.exec(text)?.[1] ?? "";
		expect(token).not.toBe("");
		expect(text).toContain("https://kepr.example/app/issues/1?token=");
		expect(await page("/app/issues/1")).not.toContain(token);
	});

	test("the list and thread show the issue escaped, with its name and never its email", async () => {
		const list = await page("/app/issues");
		expect(list).toContain("Crash on &lt;start&gt;");
		expect(list).toContain("#1 · bug · v1.2.0");
		expect(list).toContain('name="q"');
		expect(list).toContain('name="type"');
		expect(list).toContain("Ada");
		expect(await page("/app/issues?q=missing")).not.toContain('href="/app/issues/1"');
		expect(await page("/app/issues?type=question")).not.toContain('href="/app/issues/1"');
		expect(await page("/app/issues?q=CRASH&type=bug")).toContain('href="/app/issues/1"');
		expect(list).not.toContain("ada@private.example");
		const thread = await page("/app/issues/1");
		expect(thread).toContain("It &lt;b&gt;crashed&lt;/b&gt;.");
		expect(thread).toContain('<span class="issue-author">Ada</span>');
		expect(thread).not.toContain("ada@private.example");
		expect(thread).not.toContain('name="token"');
	});

	test("the token opens the follow-up form, without a referrer or cache; a wrong one does not", async () => {
		const response = await app.request(`/app/issues/1?token=${token}`);
		expect(response.headers.get("referrer-policy")).toBe("no-referrer");
		expect(response.headers.get("cache-control")).toBe("no-store");
		expect(await response.text()).toContain('name="token"');
		const wrong = await page(`/app/issues/1?token=${"0".repeat(64)}`);
		expect(wrong).not.toContain('name="token"');
		expect(wrong).toContain("does not match");
	});

	test("a reporter follow-up posts with the token; a wrong token is refused", async () => {
		const session = await openForm(`/app/issues/1?token=${token}`);
		tick(3);
		const wrong = await post("/app/issues/1", session, { token: "f".repeat(64), body: "Sneaky." });
		expect(wrong.status).toBe(403);
		const response = await post("/app/issues/1", session, { token, body: "Still <broken>." });
		expect(response.status).toBe(303);
		expect(response.headers.get("location")).toMatch(
			new RegExp(`^/app/issues/1\\?token=${token}#entry-\\d+$`),
		);
		const thread = await page("/app/issues/1");
		expect(thread).toContain("Still &lt;broken&gt;.");
		expect(thread).not.toContain("Sneaky.");
		expect(thread.match(/<span class="issue-author">Ada<\/span>/g)?.length).toBe(2);
	});

	test("five filings an hour per peer address, and a forged X-Forwarded-For does not help", async () => {
		const session = await openForm();
		tick(3);
		const from = (peer: string, forwardedFor = "") =>
			post("/app/issues/new", session, issue, peer, forwardedFor);
		for (let i = 0; i < 5; i++) {
			expect((await from("198.51.100.7", `192.0.2.${i}`)).status).toBe(200);
		}
		expect((await from("198.51.100.7", "192.0.2.99")).status).toBe(429);
		expect((await from("198.51.100.8")).status).toBe(200);
		tick(3601);
		expect((await from("198.51.100.7")).status).toBe(200);
		// Keyed hashes only: no address, and not the plain SHA-256 Kepr 2 stored.
		const plain = new Bun.CryptoHasher("sha256").update("198.51.100.7").digest("hex");
		const stored = kepr
			.query<{ ip_hash: string }, []>("SELECT ip_hash FROM issues WHERE ip_hash != ''")
			.all()
			.map((row) => row.ip_hash);
		expect(stored.every((hash) => /^[0-9a-f]{64}$/.test(hash) && hash !== plain)).toBe(true);
	});

	test("behind a proxy on loopback, the rightmost X-Forwarded-For entry is the client", async () => {
		const session = await openForm();
		tick(3);
		const via = (peer: string, forwardedFor: string) =>
			post("/app/issues/new", session, issue, peer, forwardedFor);
		// The client forges the left entries; the proxy appended the real address last.
		for (let i = 0; i < 5; i++) {
			expect((await via("127.0.0.1", `10.9.9.${i}, 198.51.100.20`)).status).toBe(200);
		}
		expect((await via("::1", "198.51.100.20")).status).toBe(429);
		expect((await via("::ffff:127.0.0.1", "10.9.9.9, 198.51.100.20")).status).toBe(429);
		expect((await via("127.0.0.1", "198.51.100.20, 198.51.100.21")).status).toBe(200);
	});

	test("an operator reply and a close show on the thread, marked", async () => {
		const found = findIssue(kepr, "app", 1);
		if (!found) throw new Error("issue 1 missing");
		addEntry(kepr, found.id, "operator", "Fixed, thanks.", Math.floor(clock / 1000));
		kepr.run("UPDATE issues SET status = 'closed', closed_at = 1, fixed_in = ? WHERE id = ?", [
			save,
			found.id,
		]);
		const thread = await page("/app/issues/1");
		expect(thread).toContain('<article class="issue-post issue-post--operator"');
		expect(thread).toContain('<span class="issue-badge">operator</span>');
		expect(thread).toContain("Fixed, thanks.");
		expect(thread).toContain("◈ closed");
		expect(thread).toContain(` · fixed in <a class="history-id" href="/app/saves/${save}">`);
		expect(await page("/app/issues")).not.toContain('href="/app/issues/1"');
		expect(await page("/app/issues?status=closed")).toContain('href="/app/issues/1"');
	});

	test("hidden issues and every issue route of a private repo are 404", async () => {
		kepr.run("UPDATE issues SET hidden = 1 WHERE repo = 'app' AND number = 2");
		expect((await app.request("/app/issues/2")).status).toBe(404);
		expect((await app.request("/app/issues/999")).status).toBe(404);
		kepr.run(
			"INSERT INTO issues (repo, number, title, body, type, filed_at) VALUES ('secret', 1, 't', 'b', 'bug', 1)",
		);
		for (const path of ["/secret/issues", "/secret/issues/new", "/secret/issues/1"]) {
			expect((await app.request(path)).status).toBe(404);
		}
		const session = await openForm();
		for (const path of ["/secret/issues/new", "/secret/issues/1"]) {
			expect((await post(path, session, { ...issue, token, body: "x" })).status).toBe(404);
		}
	});

	test("a blocked address can neither file nor follow up, until it is unblocked", async () => {
		const first = findIssue(kepr, "app", 1);
		if (!first) throw new Error("issue 1 missing");
		const block = blockReporter(kepr, first.id, 1) as number;
		const filing = await openForm();
		const thread = await openForm(`/app/issues/1?token=${token}`, filing.cookie);
		tick(4);
		const refused = await post("/app/issues/new", filing, issue);
		expect(refused.status).toBe(403);
		expect(await refused.text()).toContain("This address can&#39;t post here.");
		const followUp = { token, body: "Blocked words." };
		expect((await post("/app/issues/1", thread, followUp)).status).toBe(403);
		expect((await post("/app/issues/new", filing, issue, "198.51.100.8")).status).toBe(200);
		unblockReporter(kepr, block);
		expect((await post("/app/issues/1", thread, followUp)).status).toBe(303);
	});
});