import test from 'node:test';
import assert from 'node:assert/strict';
import { buildApp } from '../server/app.js';
import { MockDatabaseConnection } from './helpers/mockDb.js';

// Inject mock DB so tests don't require the native better-sqlite3 binary
const mockDb = new MockDatabaseConnection() as never;

test('App Bootstrap', async (t) => {
  await t.test('builds successfully without logger', async () => {
    const app = await buildApp({ logger: false, db: mockDb });
    assert.ok(app);
    assert.ok(app.server);
  });

  await t.test('health check endpoint returns 200', async () => {
    const app = await buildApp({ logger: false, db: mockDb });
    const response = await app.inject({
      method: 'GET',
      url: '/health',
    });
    assert.equal(response.statusCode, 200);
    const body = JSON.parse(response.body);
    assert.equal(body.status, 'ok');
  });

  await t.test('POST /api/screen requires valid schema', async () => {
    const app = await buildApp({ logger: false, db: mockDb });
    const response = await app.inject({
      method: 'POST',
      url: '/api/screen',
      payload: { tickers: [] }, // Empty array fails minItems: 1
    });
    // Empty array is invalid per schema (minItems: 1)
    assert.equal(response.statusCode, 400);
  });

  await t.test('POST /api/screen rejects invalid payload', async () => {
    const app = await buildApp({ logger: false, db: mockDb });
    const response = await app.inject({
      method: 'POST',
      url: '/api/screen',
      payload: { invalid: 'data' },
    });
    assert.equal(response.statusCode, 400);
  });

  await t.test('GET /api/screen/catalysts returns results', async () => {
    const app = await buildApp({ logger: false, db: mockDb });
    const response = await app.inject({
      method: 'GET',
      url: '/api/screen/catalysts',
    });
    assert.equal(response.statusCode, 200);
    const body = JSON.parse(response.body);
    assert.ok('tickers' in body);
    assert.ok('stories' in body);
  });

  await t.test('CORS is enabled for configured origin', async () => {
    const app = await buildApp({ logger: false, db: mockDb });
    const response = await app.inject({
      method: 'GET',
      url: '/health',
      headers: {
        origin: 'http://localhost:5173',
      },
    });
    assert.ok(response.headers['access-control-allow-origin']);
  });

  await t.test('API key auth is optional (disabled by default)', async () => {
    const app = await buildApp({ logger: false, db: mockDb });
    const response = await app.inject({
      method: 'GET',
      url: '/health',
    });
    // Should work without API key when not configured
    assert.equal(response.statusCode, 200);
  });

  await t.test('OPTIONS requests bypass auth check', async () => {
    const app = await buildApp({ logger: false, db: mockDb });
    const response = await app.inject({
      method: 'OPTIONS',
      url: '/api/screen',
      headers: { origin: 'http://localhost:5173' },
    });
    // OPTIONS preflight should not be blocked by auth (any non-401/403 is fine)
    assert.ok(response.statusCode !== 401 && response.statusCode !== 403);
  });
});