import { randomUUID } from "node:crypto";
import { mkdirSync, mkdtempSync, rmSync } from "node:fs";
import { tmpdir } from "node:os";
import { join } from "node:path";

import { afterEach, describe, expect, it } from "vitest";

import { createApp } from "../../apps/api/src/app.js";
import { CreditService } from "../../apps/api/src/credits.js";
import { GenerationSubmissionService, StaticGenerationModelCatalog } from "../../apps/api/src/generation-submission.js";
import { ManagedStorage } from "../../apps/api/src/managed-storage.js";
import { ProjectService } from "../../apps/api/src/projects.js";
import { RegistrationService } from "../../apps/api/src/registration.js";
import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";

const now = Date.parse("2026-08-02T13:00:00.000Z");
const modelId = "gemini-3.1-flash-image-preview";
const roots: string[] = [];
const closeables: Array<{ close(): void }> = [];
const baseHeaders = { host: "127.0.0.1:43121", origin: "http://127.0.0.1:43121" };

async function multipart(fields: Record<string, string>, files: Array<{ bytes: Uint8Array; name: string; type: string }> = []) {
  const form = new FormData();
  for (const [key, value] of Object.entries(fields)) form.append(key, value);
  for (const file of files) form.append("reference_files", new Blob([file.bytes], { type: file.type }), file.name);
  const serialized = new Response(form);
  return { contentType: serialized.headers.get("content-type")!, payload: Buffer.from(await serialized.arrayBuffer()) };
}

afterEach(() => {
  for (const value of closeables.splice(0).reverse()) value.close();
  for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
});

describe("TASK-WP2-05 generation API", () => {
  it("returns 412 without side effects, creates one queued task after reconfirmation, and exposes task truth", async () => {
    const dataRoot = mkdtempSync(join(tmpdir(), "dada-wp2-05-api-"));
    roots.push(dataRoot);
    mkdirSync(join(dataRoot, "db"), { recursive: true });
    const databasePath = join(dataRoot, "db", "dada.sqlite3");
    const registration = new RegistrationService({
      challengePepper: Buffer.alloc(32, 0x21), clock: () => now,
      currentPrivacyNoticeVersion: "p0a-registration-notice-v1", databasePath,
      invitePepper: Buffer.alloc(32, 0x22), resend: new MockResendAdapter(), sessionPepper: Buffer.alloc(32, 0x23),
    });
    const projects = new ProjectService({ clock: () => now, databasePath });
    const credits = new CreditService({ clock: () => now, databasePath });
    const storage = new ManagedStorage({ dataRoot, databasePath });
    const models = new StaticGenerationModelCatalog([{
      configSetVersion: 2, configVersion: 2, contractValidationStatus: "verified", creditCost: 2, enabled: true, modelId,
      promptMaxLength: 1_000, referenceLimits: { maxFileBytes: 1_024, maxFiles: 2, maxTotalBytes: 2_048 },
      runtimeAvailability: { availableForNewJobs: true, reason: null }, supportedRatios: ["3:4", "1:1", "4:3", "9:16"],
    }]);
    const generations = new GenerationSubmissionService({ clock: () => now, credits, models, storage });
    closeables.push(generations, storage, credits, projects, registration);
    const userId = randomUUID();
    registration.database.prepare(`INSERT INTO users (
      user_id, normalized_email, role, status, counts_toward_stage_limit, registration_id, created_at
    ) VALUES (?, 'generation-api@example.invalid', 'user', 'active', 1, ?, ?)`).run(userId, randomUUID(), now);
    registration.database.prepare("INSERT INTO user_profiles (user_id, creator_name, social_id) VALUES (?, 'API User', '@api')").run(userId);
    registration.database.prepare("INSERT INTO credit_accounts (user_id, available_balance, reserved_balance, updated_at) VALUES (?, 10, 0, ?)").run(userId, now);
    const session = registration.issueAuthenticatedSession(userId, "user");
    const csrfToken = registration.issueUserCsrfToken(session.sessionToken);
    const app = await createApp({ browserGate: false, credits, generations, networkBoundary: { allowTestPort: true }, projects, registration });
    const common = {
      client_submission_id: randomUUID(), confirmed_credit_cost: "1", creation_mode: "new_project",
      model_config_version: "1", model_id: modelId, prompt: "提交快照", ratio: "3:4",
    };
    const staleBody = await multipart(common);
    const headers = {
      ...baseHeaders, cookie: `dada_session=${session.sessionToken}`, "content-type": staleBody.contentType,
      "idempotency-key": `generation-${randomUUID()}-${randomUUID()}`, "x-csrf-token": csrfToken,
    };
    const invalidReferenceBody = await multipart({
      ...common,
      client_submission_id: randomUUID(),
      confirmed_credit_cost: "2",
      model_config_version: "2",
      reference_manifest: JSON.stringify([{ file_name: "reference.png", mime_type: "image/png", size: 7 }]),
    }, [{ bytes: new TextEncoder().encode("not-png"), name: "reference.png", type: "image/png" }]);
    const invalidReference = await app.inject({
      headers: { ...headers, "content-type": invalidReferenceBody.contentType, "idempotency-key": `generation-${randomUUID()}-${randomUUID()}` },
      method: "POST", payload: invalidReferenceBody.payload, url: "/api/v1/generations",
    });
    expect(invalidReference.statusCode).toBe(400);
    expect(registration.database.prepare("SELECT COUNT(*) AS count FROM generation_jobs").get()).toEqual({ count: 0 });

    registration.database.prepare("UPDATE credit_accounts SET available_balance = 0 WHERE user_id = ?").run(userId);
    const insufficientBody = await multipart({
      ...common, client_submission_id: randomUUID(), confirmed_credit_cost: "2", model_config_version: "2",
    });
    const insufficient = await app.inject({
      headers: { ...headers, "content-type": insufficientBody.contentType, "idempotency-key": `generation-${randomUUID()}-${randomUUID()}` },
      method: "POST", payload: insufficientBody.payload, url: "/api/v1/generations",
    });
    expect(insufficient.statusCode).toBe(409);
    expect(registration.database.prepare("SELECT COUNT(*) AS count FROM generation_jobs").get()).toEqual({ count: 0 });
    expect(registration.database.prepare("SELECT COUNT(*) AS count FROM projects").get()).toEqual({ count: 0 });
    registration.database.prepare("UPDATE credit_accounts SET available_balance = 10 WHERE user_id = ?").run(userId);

    const stale = await app.inject({ headers, method: "POST", payload: staleBody.payload, url: "/api/v1/generations" });
    expect(stale.statusCode).toBe(412);
    expect(stale.json()).toMatchObject({ error: { code: "MODEL_CONFIG_VERSION_CONFLICT", details: { latest_version: 2 } } });
    expect(registration.database.prepare("SELECT COUNT(*) AS count FROM generation_jobs").get()).toEqual({ count: 0 });

    const confirmedBody = await multipart({ ...common, client_submission_id: randomUUID(), confirmed_credit_cost: "2", model_config_version: "2" });
    const created = await app.inject({
      headers: { ...headers, "content-type": confirmedBody.contentType, "idempotency-key": `generation-${randomUUID()}-${randomUUID()}` },
      method: "POST", payload: confirmedBody.payload, url: "/api/v1/generations",
    });
    expect(created.statusCode).toBe(201);
    expect(created.json()).toMatchObject({ created: true, task: { confirmed_credit_cost: 2, model_config_version: 2, status: "queued" } });
    const current = await app.inject({ headers: { ...baseHeaders, cookie: `dada_session=${session.sessionToken}` }, method: "GET", url: "/api/v1/generations/current" });
    const detail = await app.inject({ headers: { ...baseHeaders, cookie: `dada_session=${session.sessionToken}` }, method: "GET", url: `/api/v1/generations/${created.json().task.generation_id}` });
    expect(current.json()).toEqual(created.json().task);
    expect(detail.json()).toEqual(created.json().task);
    await app.close();
  });
});