//go:build linux && rootrunner

package host

import (
	"errors"
	"os"
	"path/filepath"
	"testing"

	"github.com/carlosframework/platform/internal/rootstate"
	"golang.org/x/sys/unix"
)

// Real rootstate locks, same-bind deletion and metadata collection; claim,
// receipt, tenant-start and completion authorization remain explicit fixtures.
func TestRootServingParkCollection(t *testing.T) {
	servingRootRunner(t)
	root, err := os.MkdirTemp("/var/lib", "carlos-rootrunner-collection-")
	if err != nil {
		t.Fatal(err)
	}
	t.Cleanup(func() {
		if err := os.RemoveAll(root); err != nil {
			t.Error(err)
		}
	})
	t.Setenv("TMPDIR", root)
	for _, lost := range []bool{false, true} {
		t.Run(map[bool]string{false: "ordinary", true: "lost-record-remove-reply"}[lost], func(t *testing.T) {
			f := newServingParkDiskFixture(t)
			servingRunnerMount(t, f.data)
			state, err := rootstate.Open(filepath.Join(t.TempDir(), "authority"), true, false)
			if err != nil {
				t.Fatal(err)
			}
			t.Cleanup(func() {
				if err := state.Close(); err != nil {
					t.Error(err)
				}
			})
			f.fs = newServingParkFS(f.data, state)
			f.ledger.fs, f.ledger.state = f.fs, state
			f.put("", "legacy bytes")
			old, receipts := f.evidence(10, true, "missing")
			if _, err = f.park(old, receipts); err != nil {
				t.Fatal(err)
			}
			f.complete(old)
			f.put("", "latest served bytes")
			f.put(".gen", "G11")
			next, receipts := f.evidence(11, false, "started")
			if _, err = f.park(next, receipts); err != nil {
				t.Fatal(err)
			}
			f.complete(next)
			if err = f.ledger.recoverCompleted(t.Context(), old.ID); err != nil {
				t.Fatal(err)
			}
			r, err := f.ledger.read(old.ID)
			if err != nil || r.CollectAfter.IsZero() {
				t.Fatal("no replay window", err)
			}
			f.now = r.CollectAfter
			prep := "reboot-" + old.ID + "-" + servingOtherBoot + ".json"
			if err := state.Write(prep, []byte("{}")); err != nil {
				t.Fatal(err)
			}
			if lost {
				fault := &servingCollectionFaultStore{Store: state}
				fault.remove = func(name string) error {
					if err := state.Remove(name); err != nil {
						return err
					}
					if name == "retirement-"+old.ID+".json" {
						return unix.EIO
					}
					return nil
				}
				f.ledger.state = fault
			}
			err = f.ledger.recoverCompleted(t.Context(), old.ID)
			if lost && !errors.Is(err, unix.EIO) || !lost && err != nil {
				t.Fatal("collection", err)
			}
			f.ledger.state = state
			if _, err := state.Read(prep); !errors.Is(err, os.ErrNotExist) {
				t.Fatal("preparation survived collection", err)
			}
			binding := "current-retirement-" + old.ID + ".json"
			if err := state.Write(binding, []byte("{}")); err != nil {
				t.Fatal(err)
			}
			if err := f.ledger.maintainParks(t.Context(), func() error { return nil }); err != nil {
				t.Fatal(err)
			}
			if _, err := state.Read(binding); !errors.Is(err, os.ErrNotExist) {
				t.Fatal("binding survived maintenance", err)
			}
			for _, suffix := range []string{".json", ".lock"} {
				if _, err = state.Read("retirement-" + old.ID + suffix); !errors.Is(err, os.ErrNotExist) {
					t.Fatal("collected file survived", suffix, err)
				}
			}
			consumed, err := f.ledger.legacyConsumption(old.Successor)
			if err != nil || consumed == nil || !consumed.Collected {
				t.Fatal("lost permanent legacy consumption", err)
			}
			ids, more, err := f.ledger.recoveryIDs(t.Context(), "", servingParkRecoveryLimit)
			if err != nil || more || len(ids) != 1 || ids[0] != next.ID {
				t.Fatal("restart rediscovered obsolete record", ids, more, err)
			}
			f.retained(next, "latest served bytes", r.ReapAfter)
		})
	}
}