/*
 * Copyright (C) 2026 Fluxer Contributors
 *
 * This file is part of Fluxer.
 *
 * Fluxer is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Fluxer is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with Fluxer. If not, see <https://www.gnu.org/licenses/>.
 */

import {createTestAccount, setUserACLs, type TestAccount} from '@fluxer/api/src/auth/tests/AuthTestUtils';
import {createGuild, getGuild} from '@fluxer/api/src/guild/tests/GuildTestUtils';
import {type ApiTestHarness, createApiTestHarness} from '@fluxer/api/src/test/ApiTestHarness';
import {HTTP_STATUS, TEST_IDS} from '@fluxer/api/src/test/TestConstants';
import {createBuilder, createBuilderWithoutAuth} from '@fluxer/api/src/test/TestRequestBuilder';
import {APIErrorCodes} from '@fluxer/constants/src/ApiErrorCodes';
import {DiscoveryCategories} from '@fluxer/constants/src/DiscoveryConstants';
import {GuildFeatures} from '@fluxer/constants/src/GuildConstants';
import type {DiscoveryApplicationResponse} from '@fluxer/schema/src/domains/guild/GuildDiscoverySchemas';
import type {GuildResponse} from '@fluxer/schema/src/domains/guild/GuildResponseSchemas';
import {afterEach, beforeEach, describe, expect, test} from 'vitest';

async function setGuildMemberCount(harness: ApiTestHarness, guildId: string, memberCount: number): Promise<void> {
	await createBuilder(harness, '').post(`/test/guilds/${guildId}/member-count`).body({member_count: memberCount}).execute();
}

async function createGuildWithApplication(
	harness: ApiTestHarness,
	name: string,
	description = 'Valid discovery description',
	categoryId = DiscoveryCategories.GAMING,
): Promise<{owner: TestAccount; guild: GuildResponse; application: DiscoveryApplicationResponse}> {
	const owner = await createTestAccount(harness);
	const guild = await createGuild(harness, owner.token, name);
	await setGuildMemberCount(harness, guild.id, 10);

	const application = await createBuilder<DiscoveryApplicationResponse>(harness, owner.token)
		.post(`/guilds/${guild.id}/discovery`)
		.body({description, category_id: categoryId})
		.expect(HTTP_STATUS.OK)
		.execute();

	return {owner, guild, application};
}

async function createAdminWithACLs(harness: ApiTestHarness, acls: Array<string>): Promise<TestAccount> {
	const admin = await createTestAccount(harness);
	return setUserACLs(harness, admin, ['admin:authenticate', ...acls]);
}

describe('Discovery Admin Operations', () => {
	let harness: ApiTestHarness;

	beforeEach(async () => {
		harness = await createApiTestHarness();
	});

	afterEach(async () => {
		await harness?.shutdown();
	});

	describe('approve', () => {
		test('should approve a pending application', async () => {
			const {guild} = await createGuildWithApplication(harness, 'Approve Test Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			const result = await createBuilder<DiscoveryApplicationResponse>(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({reason: 'Meets all requirements'})
				.expect(HTTP_STATUS.OK)
				.execute();

			expect(result.status).toBe('approved');
			expect(result.reviewed_at).toBeTruthy();
			expect(result.review_reason).toBe('Meets all requirements');
		});

		test('should approve without a reason', async () => {
			const {guild} = await createGuildWithApplication(harness, 'No Reason Approve Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			const result = await createBuilder<DiscoveryApplicationResponse>(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.OK)
				.execute();

			expect(result.status).toBe('approved');
			expect(result.review_reason).toBeNull();
		});

		test('should add DISCOVERABLE feature to guild on approval', async () => {
			const {owner, guild} = await createGuildWithApplication(harness, 'Feature Add Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.OK)
				.execute();

			const guildData = await getGuild(harness, owner.token, guild.id);
			expect(guildData.features).toContain(GuildFeatures.DISCOVERABLE);
		});

		test('should not allow approving already approved application', async () => {
			const {guild} = await createGuildWithApplication(harness, 'Double Approve Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.OK)
				.execute();

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.CONFLICT, APIErrorCodes.DISCOVERY_APPLICATION_ALREADY_REVIEWED)
				.execute();
		});

		test('should not allow approving non-existent application', async () => {
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${TEST_IDS.NONEXISTENT_GUILD}/approve`)
				.body({})
				.expect(HTTP_STATUS.NOT_FOUND, APIErrorCodes.DISCOVERY_APPLICATION_NOT_FOUND)
				.execute();
		});
	});

	describe('reject', () => {
		test('should reject a pending application with reason', async () => {
			const {guild} = await createGuildWithApplication(harness, 'Reject Test Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			const result = await createBuilder<DiscoveryApplicationResponse>(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/reject`)
				.body({reason: 'Description is too vague'})
				.expect(HTTP_STATUS.OK)
				.execute();

			expect(result.status).toBe('rejected');
			expect(result.reviewed_at).toBeTruthy();
			expect(result.review_reason).toBe('Description is too vague');
		});

		test('should require reason for rejection', async () => {
			const {guild} = await createGuildWithApplication(harness, 'No Reason Reject Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/reject`)
				.body({})
				.expect(HTTP_STATUS.BAD_REQUEST)
				.execute();
		});

		test('should not allow rejecting already rejected application', async () => {
			const {guild} = await createGuildWithApplication(harness, 'Double Reject Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/reject`)
				.body({reason: 'First rejection'})
				.expect(HTTP_STATUS.OK)
				.execute();

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/reject`)
				.body({reason: 'Second rejection'})
				.expect(HTTP_STATUS.CONFLICT, APIErrorCodes.DISCOVERY_APPLICATION_ALREADY_REVIEWED)
				.execute();
		});

		test('should not allow rejecting approved application', async () => {
			const {guild} = await createGuildWithApplication(harness, 'Approved Then Reject Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.OK)
				.execute();

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/reject`)
				.body({reason: 'Changed my mind'})
				.expect(HTTP_STATUS.CONFLICT, APIErrorCodes.DISCOVERY_APPLICATION_ALREADY_REVIEWED)
				.execute();
		});

		test('should not allow rejecting non-existent application', async () => {
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${TEST_IDS.NONEXISTENT_GUILD}/reject`)
				.body({reason: 'Does not exist'})
				.expect(HTTP_STATUS.NOT_FOUND, APIErrorCodes.DISCOVERY_APPLICATION_NOT_FOUND)
				.execute();
		});
	});

	describe('remove', () => {
		test('should remove an approved guild from discovery', async () => {
			const {owner, guild} = await createGuildWithApplication(harness, 'Remove Test Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review', 'discovery:remove']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.OK)
				.execute();

			const result = await createBuilder<DiscoveryApplicationResponse>(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/guilds/${guild.id}/remove`)
				.body({reason: 'Violated community guidelines'})
				.expect(HTTP_STATUS.OK)
				.execute();

			expect(result.status).toBe('removed');

			const guildData = await getGuild(harness, owner.token, guild.id);
			expect(guildData.features).not.toContain(GuildFeatures.DISCOVERABLE);
		});

		test('should require reason for removal', async () => {
			const {guild} = await createGuildWithApplication(harness, 'No Reason Remove Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review', 'discovery:remove']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.OK)
				.execute();

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/guilds/${guild.id}/remove`)
				.body({})
				.expect(HTTP_STATUS.BAD_REQUEST)
				.execute();
		});

		test('should not allow removing a pending application', async () => {
			const {guild} = await createGuildWithApplication(harness, 'Remove Pending Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review', 'discovery:remove']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/guilds/${guild.id}/remove`)
				.body({reason: 'Not approved yet'})
				.expect(HTTP_STATUS.BAD_REQUEST, APIErrorCodes.DISCOVERY_NOT_DISCOVERABLE)
				.execute();
		});

		test('should not allow removing non-existent application', async () => {
			const admin = await createAdminWithACLs(harness, ['discovery:remove']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/guilds/${TEST_IDS.NONEXISTENT_GUILD}/remove`)
				.body({reason: 'Does not exist'})
				.expect(HTTP_STATUS.NOT_FOUND, APIErrorCodes.DISCOVERY_APPLICATION_NOT_FOUND)
				.execute();
		});
	});

	describe('list applications', () => {
		test('should list pending applications', async () => {
			await createGuildWithApplication(harness, 'List Test Guild 1');
			await createGuildWithApplication(harness, 'List Test Guild 2');

			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			const results = await createBuilder<Array<DiscoveryApplicationResponse>>(harness, `Bearer ${admin.token}`)
				.get('/admin/discovery/applications?status=pending')
				.expect(HTTP_STATUS.OK)
				.execute();

			expect(results.length).toBeGreaterThanOrEqual(2);
			for (const app of results) {
				expect(app.status).toBe('pending');
			}
		});

		test('should list approved applications', async () => {
			const {guild} = await createGuildWithApplication(harness, 'Approved List Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.OK)
				.execute();

			const results = await createBuilder<Array<DiscoveryApplicationResponse>>(harness, `Bearer ${admin.token}`)
				.get('/admin/discovery/applications?status=approved')
				.expect(HTTP_STATUS.OK)
				.execute();

			expect(results.length).toBeGreaterThanOrEqual(1);
			for (const app of results) {
				expect(app.status).toBe('approved');
			}
		});

		test('should default to pending status', async () => {
			await createGuildWithApplication(harness, 'Default Status Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			const results = await createBuilder<Array<DiscoveryApplicationResponse>>(harness, `Bearer ${admin.token}`)
				.get('/admin/discovery/applications')
				.expect(HTTP_STATUS.OK)
				.execute();

			for (const app of results) {
				expect(app.status).toBe('pending');
			}
		});

		test('should respect limit parameter', async () => {
			for (let i = 0; i < 3; i++) {
				await createGuildWithApplication(harness, `Limit Admin Guild ${i}`);
			}

			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			const results = await createBuilder<Array<DiscoveryApplicationResponse>>(harness, `Bearer ${admin.token}`)
				.get('/admin/discovery/applications?limit=2')
				.expect(HTTP_STATUS.OK)
				.execute();

			expect(results.length).toBeLessThanOrEqual(2);
		});

		test('should return empty list for status with no applications', async () => {
			await harness.reset();
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			const results = await createBuilder<Array<DiscoveryApplicationResponse>>(harness, `Bearer ${admin.token}`)
				.get('/admin/discovery/applications?status=rejected')
				.expect(HTTP_STATUS.OK)
				.execute();

			expect(results).toHaveLength(0);
		});
	});

	describe('ACL requirements', () => {
		test('should require DISCOVERY_REVIEW ACL to list applications', async () => {
			const admin = await createAdminWithACLs(harness, ['user:lookup']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.get('/admin/discovery/applications')
				.expect(HTTP_STATUS.FORBIDDEN)
				.execute();
		});

		test('should require DISCOVERY_REVIEW ACL to approve', async () => {
			const {guild} = await createGuildWithApplication(harness, 'ACL Approve Guild');
			const admin = await createAdminWithACLs(harness, ['user:lookup']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.FORBIDDEN)
				.execute();
		});

		test('should require DISCOVERY_REVIEW ACL to reject', async () => {
			const {guild} = await createGuildWithApplication(harness, 'ACL Reject Guild');
			const admin = await createAdminWithACLs(harness, ['user:lookup']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/reject`)
				.body({reason: 'Not allowed'})
				.expect(HTTP_STATUS.FORBIDDEN)
				.execute();
		});

		test('should require DISCOVERY_REMOVE ACL to remove', async () => {
			const {guild} = await createGuildWithApplication(harness, 'ACL Remove Guild');
			const admin = await createAdminWithACLs(harness, ['discovery:review']);

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/applications/${guild.id}/approve`)
				.body({})
				.expect(HTTP_STATUS.OK)
				.execute();

			await createBuilder(harness, `Bearer ${admin.token}`)
				.post(`/admin/discovery/guilds/${guild.id}/remove`)
				.body({reason: 'Not allowed to remove'})
				.expect(HTTP_STATUS.FORBIDDEN)
				.execute();
		});

		test('should require authentication for admin endpoints', async () => {
			await createBuilderWithoutAuth(harness)
				.get('/admin/discovery/applications')
				.expect(HTTP_STATUS.UNAUTHORIZED)
				.execute();

			await createBuilderWithoutAuth(harness)
				.post(`/admin/discovery/applications/${TEST_IDS.NONEXISTENT_GUILD}/approve`)
				.body({})
				.expect(HTTP_STATUS.UNAUTHORIZED)
				.execute();

			await createBuilderWithoutAuth(harness)
				.post(`/admin/discovery/applications/${TEST_IDS.NONEXISTENT_GUILD}/reject`)
				.body({reason: 'test'})
				.expect(HTTP_STATUS.UNAUTHORIZED)
				.execute();

			await createBuilderWithoutAuth(harness)
				.post(`/admin/discovery/guilds/${TEST_IDS.NONEXISTENT_GUILD}/remove`)
				.body({reason: 'test'})
				.expect(HTTP_STATUS.UNAUTHORIZED)
				.execute();
		});
	});
});