import { InsufficientPermissionError } from "@tailor-platform/erp-kit/core";
import type { CommandContext } from "@tailor-platform/erp-kit/core";
import { createKyselyMock } from "@tailor-platform/sdk/vitest";
import { describe, expect, it } from "vitest";
import type { Namespace } from "../generated/kysely-tailordb";
import {
  PolicyNotFoundError,
  InvalidStateError,
  ConflictingActivePolicyError,
  UnauthorizedError,
} from "../lib/errors.generated";
import { draftPolicy, activePolicy, inactivePolicy } from "../testing/fixtures";
import { run } from "./reactivateAuditPolicy";
import { reactivateAuditPolicy } from "./reactivateAuditPolicy.generated";

const ctx: CommandContext = {
  actorId: "test-actor",
  permissions: ["audit:audit:reactivateAuditPolicy"],
};

describe("reactivateAuditPolicy", () => {
  it("reactivates INACTIVE policy to ACTIVE", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    mock.enqueueResults([inactivePolicy], [], [{ ...inactivePolicy, status: "ACTIVE" }]);

    const result = await mock.withTx((trx) => run(trx, { policyId: inactivePolicy.id }, ctx));

    expect(result.ok).toBe(true);
    if (result.ok) {
      expect(result.value.policy.status).toBe("ACTIVE");
    }
  });

  it("resumes audit capture after reactivation", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    mock.enqueueResults([inactivePolicy], [], [{ ...inactivePolicy, status: "ACTIVE" }]);

    const result = await mock.withTx((trx) => run(trx, { policyId: inactivePolicy.id }, ctx));

    expect(result.ok).toBe(true);
    if (result.ok) {
      expect(result.value.policy.status).toBe("ACTIVE");
    }
    // Verify that the DB update sets status to ACTIVE, which re-enables logAuditEvent capture
    expect(mock.updates[0].updateValues()).toEqual(expect.objectContaining({ status: "ACTIVE" }));
    expect(mock.updates).toHaveLength(1);
  });

  it("rejects reactivation of DRAFT policy", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    mock.enqueueResults([draftPolicy]);

    const result = await mock.withTx((trx) => run(trx, { policyId: draftPolicy.id }, ctx));

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(InvalidStateError);
    }
  });

  it("rejects reactivation of ACTIVE policy", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    mock.enqueueResults([activePolicy]);

    const result = await mock.withTx((trx) => run(trx, { policyId: activePolicy.id }, ctx));

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(InvalidStateError);
    }
  });

  it("rejects reactivation when conflicting ACTIVE policy exists", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    mock.enqueueResults([inactivePolicy], [activePolicy]);

    const result = await mock.withTx((trx) => run(trx, { policyId: inactivePolicy.id }, ctx));

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(ConflictingActivePolicyError);
    }
  });

  it("rejects when policy does not exist", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    mock.enqueueResults([]);

    const result = await mock.withTx((trx) => run(trx, { policyId: "nonexistent" }, ctx));

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(PolicyNotFoundError);
    }
  });

  it("rejects when caller lacks manageAuditPolicies permission", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    const command = reactivateAuditPolicy();
    const noPermCtx: CommandContext = {
      actorId: "test-actor",
      permissions: [],
    };

    const result = await mock.withTx((trx) =>
      command(trx, { policyId: inactivePolicy.id }, noPermCtx),
    );

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(InsufficientPermissionError);
    }
  });

  it("rejects when company-scoped caller reactivates policy for a different company", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    mock.enqueueResults([inactivePolicy]); // policy with companyId: "company-1"
    const scopedCtx = { ...ctx, companyId: "company-2" };

    const result = await mock.withTx((trx) => run(trx, { policyId: inactivePolicy.id }, scopedCtx));

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(UnauthorizedError);
    }
  });

  it("rejects when global-scoped caller reactivates company-scoped policy", async () => {
    const mock = createKyselyMock<Namespace["main-db"]>();
    mock.enqueueResults([inactivePolicy]); // policy with companyId: "company-1"
    const globalCtx = { ...ctx, companyId: null };

    const result = await mock.withTx((trx) => run(trx, { policyId: inactivePolicy.id }, globalCtx));

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(UnauthorizedError);
    }
  });
});
