// @vitest-environment node
import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';

const files = vi.hoisted(() => new Map<string, string>());
vi.mock('node:fs/promises', async (orig) => ({
  ...(await orig<typeof import('node:fs/promises')>()),
  readFile: vi.fn(async (p: string) => {
    const key = String(p).replace(/\\/g, '/').split('/public/')[1];
    if (key && files.has(key)) return files.get(key)!;
    throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' });
  }),
}));

import { GET as untrusted } from '@/app/(sandbox)/plugin-sandbox/route';
import { GET as privileged } from '@/app/(sandbox)/plugin-sandbox-privileged/route';

const MANIFEST = 'plugin-sandbox-assets/manifest.json';

function request(nonce = 'n0nce'): Request {
  return new Request('http://localhost:3000/plugin-sandbox', { headers: { 'x-nonce': nonce } });
}

beforeEach(() => {
  files.clear();
  files.set(MANIFEST, JSON.stringify({ script: 'runtime-ABC.js', style: 'kit-123.css', preload: ['chunk-ICONS.js'], slotPreload: ['chunk-DOM.js'] }));
  vi.stubEnv('NODE_ENV', 'development'); // re-read the manifest for every test
});

afterEach(() => {
  vi.unstubAllEnvs();
});

// Plugin frames used to load a Next page: its client router and hydration
// in every frame, and a server render per frame.
describe('plugin sandbox document', () => {
  it.each([['/plugin-sandbox', untrusted], ['/plugin-sandbox-privileged', privileged]])(
    '%s is a plain page with the runtime script and the kit stylesheet', async (_path, GET) => {
      const res = await GET(request());
      const html = await res.text();

      expect(res.status).toBe(200);
      expect(res.headers.get('content-type')).toContain('text/html');
      expect(html).toContain('<script type="module" nonce="n0nce" src="/plugin-sandbox-assets/runtime-ABC.js"></script>');
      expect(html).toContain('<link rel="stylesheet" href="/plugin-sandbox-assets/kit-123.css">');
      // Fetched with the script, not after it has been parsed.
      expect(html).toContain('<link rel="modulepreload" nonce="n0nce" href="/plugin-sandbox-assets/chunk-ICONS.js">');
      expect(html).toContain('<div id="plugin-sandbox-root"></div>');
      expect(html).not.toContain('/_next/');
    });

  it('preloads React DOM and the kit for slot frames only', async () => {
    const slot = await (await untrusted(new Request('http://localhost:3000/plugin-sandbox?frame=slot', { headers: { 'x-nonce': 'n' } }))).text();
    const background = await (await untrusted(request())).text();

    expect(slot).toContain('href="/plugin-sandbox-assets/chunk-DOM.js"');
    expect(background).not.toContain('chunk-DOM.js');
  });

  it('serves the assets under the base path', async () => {
    vi.stubEnv('NEXT_PUBLIC_BASE_PATH', '/webmail');
    const html = await (await untrusted(request())).text();

    expect(html).toContain('src="/webmail/plugin-sandbox-assets/runtime-ABC.js"');
    expect(html).toContain('href="/webmail/plugin-sandbox-assets/kit-123.css"');
  });

  it('does not let the nonce header break out of its attribute', async () => {
    const html = await (await untrusted(request('x"><script>alert(1)</script>'))).text();

    expect(html).not.toContain('<script>alert(1)</script>');
    expect(html.match(/<script/g)).toHaveLength(1);
  });

  it('says what to run when the assets were not built', async () => {
    files.clear();
    const res = await untrusted(request());

    expect(res.status).toBe(503);
    expect(await res.text()).toContain('build-plugin-sandbox');
  });
});