/**
 * Unit Tests — user-db.js
 */
import { describe, it, expect, beforeAll, afterAll } from 'vitest';
import fs from 'fs';
import path from 'path';
import crypto from 'crypto';

describe('user-db', () => {
  let userDb;
  const uid = crypto.randomUUID().substring(0, 8);
  const uniqueEmail = `test-${uid}@example.com`;
  const oauthEmail = `gh-${uid}@example.com`;
  // 这个库跑完就删。以前没有覆盖口，这里写的是**共享的生产用户库**
  // （~lemonAI/data/users.sqlite，跨兄弟仓库共用，里面有真实 GitHub 用户），
  // 每跑一次留两行、从不清理，攒到 356 行夹具。
  const TEST_DB_PATH = `/tmp/test-users-${uid}.sqlite`;
  const DB_FILES = [TEST_DB_PATH, `${TEST_DB_PATH}-shm`, `${TEST_DB_PATH}-wal`];

  beforeAll(() => {
    for (const f of DB_FILES) { try { fs.unlinkSync(f); } catch {} }
    // 先设 env 再清 require.cache 再 require：DB_PATH 是模块加载时求值的常量，
    // 顺序错了就还是打到共享库上（而且测试照样全绿，看不出来）
    process.env.USERS_DB_PATH = TEST_DB_PATH;
    Object.keys(require.cache).filter(k => k.includes('user-db')).forEach(k => delete require.cache[k]);
    userDb = require(path.resolve(__dirname, '../../services/user-db'));
  });

  afterAll(() => {
    for (const f of DB_FILES) { try { fs.unlinkSync(f); } catch {} }
    delete process.env.USERS_DB_PATH;
    Object.keys(require.cache).filter(k => k.includes('user-db')).forEach(k => delete require.cache[k]);
  });

  it('写的是隔离库，不是共享的生产用户库', () => {
    // 这条是这个文件里唯一防止「隔离静默失效」的东西：DB_PATH 不导出，
    // 所以从「文件有没有被创建出来」这一侧验 —— 打到共享库时这个文件不会存在。
    // 先做一次读操作把 getDb() 触发起来：库是懒创建的，光 require 还没落文件。
    userDb.findByEmail('force-getdb@example.com');
    expect(fs.existsSync(TEST_DB_PATH)).toBe(true);
  });

  describe('createUser + findByEmail', () => {
    it('should create a user', () => {
      const user = userDb.createUser({
        email: uniqueEmail, passwordHash: 'hashed_pw',
        displayName: 'Test User', provider: 'local',
      });
      expect(user).toBeDefined();
      expect(user.id).toBeDefined();
      expect(user.email).toBe(uniqueEmail);
    });

    it('should find user by email', () => {
      const user = userDb.findByEmail(uniqueEmail);
      expect(user).toBeDefined();
      expect(user.email).toBe(uniqueEmail);
    });

    it('should return falsy for non-existent email', () => {
      expect(userDb.findByEmail('nope-nonexist@no.com')).toBeFalsy();
    });
  });

  describe('updateLastLogin', () => {
    it('should not throw', () => {
      const user = userDb.findByEmail(uniqueEmail);
      expect(() => userDb.updateLastLogin(user.id)).not.toThrow();
    });
  });

  describe('toPublicUser', () => {
    it('should strip sensitive fields', () => {
      const user = userDb.findByEmail(uniqueEmail);
      const pub = userDb.toPublicUser(user);
      expect(pub).toHaveProperty('id');
      expect(pub).toHaveProperty('email');
      expect(pub).not.toHaveProperty('password_hash');
    });
  });

  describe('findOrCreateOAuthUser', () => {
    const oauthProviderId = `test-provider-${uid}`;

    it('should create OAuth user', () => {
      const user = userDb.findOrCreateOAuthUser({
        provider: 'github', providerId: oauthProviderId,
        email: oauthEmail, displayName: 'GitHub User',
        avatarUrl: 'https://example.com/avatar.png',
      });
      expect(user).toBeDefined();
      expect(user.email).toBe(oauthEmail);
    });

    it('should find existing OAuth user on re-call', () => {
      const user = userDb.findOrCreateOAuthUser({
        provider: 'github', providerId: oauthProviderId,
        email: oauthEmail, displayName: 'GitHub User',
      });
      expect(user).toBeDefined();
      expect(user.email).toBe(oauthEmail);
    });
  });
});