#!/usr/bin/env npx tsx

/**
 * Permit LS Command Tests
 *
 * Tests the permit ls command - listing pending permissions.
 * Since daemon may not be running, we test:
 * - Help and argument parsing
 * - Graceful error handling when daemon not running
 * - JSON output format
 *
 * Tests:
 * - permit --help shows subcommands
 * - permit ls --help shows options
 * - permit ls returns error when no daemon
 * - permit ls --json handles errors
 */

import assert from "node:assert";
import { $ } from "zx";
import { mkdtemp, rm } from "fs/promises";
import { tmpdir } from "os";
import { join } from "path";

$.verbose = false;

console.log("=== Permit LS Command Tests ===\n");

// Get random port that's definitely not in use (never 6767)
const port = 10000 + Math.floor(Math.random() * 50000);
const paseoHome = await mkdtemp(join(tmpdir(), "paseo-test-home-"));

try {
  // Test 1: permit --help shows subcommands
  {
    console.log("Test 1: permit --help shows subcommands");
    const result = await $`npx paseo permit --help`.nothrow();
    assert.strictEqual(result.exitCode, 0, "permit --help should exit 0");
    assert(result.stdout.includes("ls"), "help should mention ls subcommand");
    assert(result.stdout.includes("allow"), "help should mention allow subcommand");
    assert(result.stdout.includes("deny"), "help should mention deny subcommand");
    console.log("✓ permit --help shows subcommands\n");
  }

  // Test 2: permit ls --help shows options
  {
    console.log("Test 2: permit ls --help shows options");
    const result = await $`npx paseo permit ls --help`.nothrow();
    assert.strictEqual(result.exitCode, 0, "permit ls --help should exit 0");
    assert(result.stdout.includes("--host"), "help should mention --host option");
    console.log("✓ permit ls --help shows options\n");
  }

  // Test 3: permit ls returns error when no daemon running
  {
    console.log("Test 3: permit ls handles daemon not running");
    const result =
      await $`PASEO_HOST=localhost:${port} PASEO_HOME=${paseoHome} npx paseo permit ls`.nothrow();
    // Should fail because daemon not running
    assert.notStrictEqual(result.exitCode, 0, "should fail when daemon not running");
    const output = result.stdout + result.stderr;
    const hasError =
      output.toLowerCase().includes("daemon") ||
      output.toLowerCase().includes("connect") ||
      output.toLowerCase().includes("cannot");
    assert(hasError, "error message should mention connection issue");
    console.log("✓ permit ls handles daemon not running\n");
  }

  // Test 4: permit ls --json handles errors
  {
    console.log("Test 4: permit ls --json handles errors");
    const result =
      await $`PASEO_HOST=localhost:${port} PASEO_HOME=${paseoHome} npx paseo permit ls --json`.nothrow();
    // Should still fail (daemon not running)
    assert.notStrictEqual(result.exitCode, 0, "should fail when daemon not running");
    // But output should be valid JSON if present
    const output = result.stdout.trim();
    if (output.length > 0) {
      try {
        JSON.parse(output);
        console.log("✓ permit ls --json outputs valid JSON error\n");
      } catch {
        // Empty or stderr-only output is acceptable
        console.log("✓ permit ls --json handled error (output may be in stderr)\n");
      }
    } else {
      console.log("✓ permit ls --json handled error gracefully\n");
    }
  }

  // Test 5: -q (quiet) flag is accepted globally
  {
    console.log("Test 5: -q (quiet) flag is accepted");
    const result =
      await $`PASEO_HOST=localhost:${port} PASEO_HOME=${paseoHome} npx paseo -q permit ls`.nothrow();
    const output = result.stdout + result.stderr;
    assert(!output.includes("unknown option"), "should accept -q flag");
    assert(!output.includes("error: option"), "should not have option parsing error");
    console.log("✓ -q (quiet) flag is accepted\n");
  }
} finally {
  // Clean up temp directory
  await rm(paseoHome, { recursive: true, force: true });
}

console.log("=== All permit ls tests passed ===");