import { describe, expect, it } from "vitest";
import { createMockDb } from "../../../testing/index";
import type { Transaction } from "../generated/kysely-tailordb";
import {
  PolicyNotFoundError,
  InvalidStateError,
  IncompletePolicyError,
  ConflictingActivePolicyError,
  EntityTypeNotRegisteredError,
  UnauthorizedError,
} from "../lib/errors.generated";
import { draftPolicy, activePolicy, inactivePolicy, companyBoundEntity } from "../testing/fixtures";
import { run } from "./activateAuditPolicy";
import { activateAuditPolicy } from "./activateAuditPolicy.generated";
import { type CommandContext, InsufficientPermissionError } from "@tailor-platform/erp-kit/module";

const ctx: CommandContext = {
  actorId: "test-actor",
  permissions: ["audit:activateAuditPolicy"],
};

describe("activateAuditPolicy", () => {
  it("activates DRAFT policy to ACTIVE", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(draftPolicy); // policy lookup
    spies.select.mockReturnValueOnce(companyBoundEntity); // entity registration check
    spies.select.mockReturnValueOnce(undefined); // no conflicting policy
    spies.update.mockReturnValue({ ...draftPolicy, status: "ACTIVE" });

    const result = await run(db, { policyId: "policy-1" }, ctx);

    expect(result.ok).toBe(true);
    if (result.ok) {
      expect(result.value.policy.status).toBe("ACTIVE");
    }
  });

  it("begins audit capture after activation", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(draftPolicy);
    spies.select.mockReturnValueOnce(companyBoundEntity); // entity registration check
    spies.select.mockReturnValueOnce(undefined);
    spies.update.mockReturnValue({ ...draftPolicy, status: "ACTIVE" });

    const result = await run(db, { policyId: "policy-1" }, ctx);

    expect(result.ok).toBe(true);
    if (result.ok) {
      expect(result.value.policy.status).toBe("ACTIVE");
    }
    // Verify that the DB update sets status to ACTIVE, which is the gate for logAuditEvent to capture events
    expect(spies.set).toHaveBeenCalledWith(expect.objectContaining({ status: "ACTIVE" }));
    expect(spies.update).toHaveBeenCalledTimes(1);
  });

  it("rejects activation of ACTIVE policy", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(activePolicy);

    const result = await run(db, { policyId: activePolicy.id }, ctx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(InvalidStateError);
    }
  });

  it("rejects activation of INACTIVE policy", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(inactivePolicy);

    const result = await run(db, { policyId: inactivePolicy.id }, ctx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(InvalidStateError);
    }
  });

  it("rejects activation when conflicting ACTIVE policy exists", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(draftPolicy); // policy lookup
    spies.select.mockReturnValueOnce(companyBoundEntity); // entity registration check
    spies.select.mockReturnValueOnce(activePolicy); // conflicting policy

    const result = await run(db, { policyId: "policy-1" }, ctx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(ConflictingActivePolicyError);
    }
  });

  it("rejects activation when entity name is missing", async () => {
    const { db, spies } = createMockDb<Transaction>();
    const policyNoEntity = { ...draftPolicy, entityName: "" };
    spies.select.mockReturnValueOnce(policyNoEntity);

    const result = await run(db, { policyId: "policy-1" }, ctx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(IncompletePolicyError);
    }
  });

  it("rejects activation when operation type is missing", async () => {
    const { db, spies } = createMockDb<Transaction>();
    const policyNoOp = { ...draftPolicy, operationType: "" };
    spies.select.mockReturnValueOnce(policyNoOp);

    const result = await run(db, { policyId: "policy-1" }, ctx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(IncompletePolicyError);
    }
  });

  it("rejects when policy does not exist", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(undefined);

    const result = await run(db, { policyId: "nonexistent" }, ctx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(PolicyNotFoundError);
    }
  });

  it("rejects when caller lacks manageAuditPolicies permission", async () => {
    const { db } = createMockDb<Transaction>();
    const command = activateAuditPolicy();
    const noPermCtx: CommandContext = {
      actorId: "test-actor",
      permissions: [],
    };

    const result = await command(db, { policyId: "policy-1" }, noPermCtx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(InsufficientPermissionError);
    }
  });

  it("rejects when company-scoped caller activates policy for a different company", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(draftPolicy); // policy with companyId: "company-1"
    const scopedCtx = { ...ctx, companyId: "company-2" };

    const result = await run(db, { policyId: "policy-1" }, scopedCtx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(UnauthorizedError);
    }
  });

  it("rejects when global-scoped caller activates company-scoped policy", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(draftPolicy); // policy with companyId: "company-1"
    const globalCtx = { ...ctx, companyId: null };

    const result = await run(db, { policyId: "policy-1" }, globalCtx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(UnauthorizedError);
    }
  });

  it("rejects when target entity is no longer registered", async () => {
    const { db, spies } = createMockDb<Transaction>();
    spies.select.mockReturnValueOnce(draftPolicy); // policy lookup
    spies.select.mockReturnValueOnce(undefined); // entity not found

    const result = await run(db, { policyId: "policy-1" }, ctx);

    expect(result.ok).toBe(false);
    if (!result.ok) {
      expect(result.error).toBeInstanceOf(EntityTypeNotRegisteredError);
    }
  });
});
