const test = require('node:test');
const assert = require('node:assert/strict');
const { request, authenticate } = require('../../dist/remote/api/client');

test('API diagnostics preserve resource scope, uncertainty, codes and secret suppression in both languages', async (t) => {
  const previous = process.env.QL_LANG;
  t.after(() => {
    if (previous === undefined) delete process.env.QL_LANG;
    else process.env.QL_LANG = previous;
  });
  let response;
  let calls = 0;
  t.mock.method(global, 'fetch', async () => {
    calls++;
    if (response instanceof Error) throw response;
    return response;
  });
  const config = {
    url: 'https://fixture.invalid',
    clientId: 'secret-id',
    clientSecret: 'secret-value',
    token: 'secret-token',
  };
  for (const language of ['zh', 'en']) {
    process.env.QL_LANG = language;
    for (const [endpoint, resource] of [
      ['crons/run', language === 'en' ? 'task' : '任务'],
      ['subscriptions/run', language === 'en' ? 'subscription' : '订阅'],
    ]) {
      for (const failure of ['permission', 'unavailable', 'network', 'api']) {
        response =
          failure === 'permission'
            ? new Response('secret-value', { status: 403 })
            : failure === 'unavailable'
            ? new Response('secret-value', { status: 503 })
            : failure === 'network'
            ? new Error('secret-value')
            : new Response(
                JSON.stringify({ code: 401, message: 'secret-value' }),
              );
        const before = calls;
        await assert.rejects(
          request(config, endpoint, { method: 'PUT', body: [1] }),
          (error) => {
            assert.equal(
              error.exitCode,
              ['permission', 'api'].includes(failure) ? 3 : 1,
            );
            assert.doesNotMatch(error.message, /secret-|fixture\.invalid/);
            if (failure === 'unavailable' || failure === 'network') {
              assert.ok(error.message.includes(resource));
              assert.match(
                error.message,
                language === 'en' ? /outcome.*unknown/ : /结果.*未知/,
              );
            }
            if (failure === 'permission' || failure === 'api') {
              assert.ok(
                error.message.includes(
                  endpoint.startsWith('subscriptions')
                    ? 'subscriptions'
                    : 'crons',
                ),
              );
              assert.match(
                error.message,
                language === 'en' ? /permission/ : /权限/,
              );
            }
            return true;
          },
        );
        assert.equal(
          calls - before,
          1,
          'diagnostics must not replay the mutation',
        );
      }
    }
    response = new Response(
      JSON.stringify({
        code: 200,
        data: { token: 'secret-token', expiration: 0 },
      }),
    );
    await assert.rejects(
      authenticate(config),
      language === 'en' ? /Invalid authentication response/ : /认证响应无效/,
    );
  }
});

test('HTTP and body errors distinguish conflicts, authentication and server failures without leaking bodies', async (t) => {
  const previous = process.env.QL_LANG;
  t.after(() => {
    if (previous === undefined) delete process.env.QL_LANG;
    else process.env.QL_LANG = previous;
  });
  for (const language of ['en', 'zh']) {
    process.env.QL_LANG = language;
    for (const kind of ['HTTP', 'code'])
      for (const status of [400, 401, 403, 409, 500, 503])
        for (const method of ['GET', 'PUT']) {
          t.mock.method(
            global,
            'fetch',
            async () =>
              new Response(
                JSON.stringify({ code: status, message: 'secret-value' }),
                { status: kind === 'HTTP' ? status : 200 },
              ),
          );
          await assert.rejects(
            request(
              { url: 'https://fixture.invalid', token: 'secret-token' },
              'envs',
              { method },
            ),
            (error) => {
              assert.equal(error.exitCode, [401, 403].includes(status) ? 3 : 1);
              assert.match(error.message, new RegExp(`${kind} ${status}`));
              assert.doesNotMatch(error.message, /secret-|fixture/);
              if ([401, 403].includes(status))
                assert.match(error.message, /credentials|凭据/);
              else
                assert.doesNotMatch(
                  error.message,
                  /credentials|permission|凭据|权限/,
                );
              if (status === 409) assert.match(error.message, /conflict|冲突/);
              if (status >= 500)
                assert.match(error.message, /Server error|服务端错误/);
              if (status >= 500 && method === 'PUT')
                assert.match(error.message, /unknown|未知/);
              else assert.doesNotMatch(error.message, /unknown|未知/);
              return true;
            },
          );
          t.mock.restoreAll();
        }
  }
});