package release

import (
	"errors"
	"testing"
	"time"
)

func TestTemporaryNamespaceAndCooloff(t *testing.T) {
	for name, want := range map[string]bool{
		"tmp-docs":   true,
		"tmp-a1b2c3": true,
		"tmp":        false,
		"tmpdocs":    false,
		"docs-tmp-":  false,
		"":           false,
	} {
		if got := IsTemporaryName(name); got != want {
			t.Errorf("IsTemporaryName(%q) = %v, want %v", name, got, want)
		}
	}
	if TemporaryCooloff != 72*time.Hour {
		t.Fatalf("TemporaryCooloff = %v, want 72h (spec ruling 2)", TemporaryCooloff)
	}
}

// The row stores whole seconds and the marker stores nanoseconds. The purge
// decision is bound to the second (spec §5), so the two still match.
func TestPurgeAppIfTrashedAtPurgesOnTheSameSecond(t *testing.T) {
	s := NewDirStore(t.TempDir())
	_, pub := testKeys(t)
	seedApp(t, s, "bab", "tmp-docs")
	trashedAt := time.Date(2026, 9, 26, 10, 0, 0, 750_000_000, time.UTC)
	if err := TrashApp(ctx, s, "bab", "tmp-docs", "expiry", trashedAt); err != nil {
		t.Fatal(err)
	}
	want := time.Unix(trashedAt.Unix(), 0)
	if err := PurgeAppIfTrashedAt(ctx, s, pub, "bab", "tmp-docs", want, trashedAt.Add(TemporaryCooloff)); err != nil {
		t.Fatalf("PurgeAppIfTrashedAt on the matching clock: %v", err)
	}
	if got := listUnder(t, s, "apps/bab/tmp-docs/"); len(got) != 0 {
		t.Fatalf("purge left objects behind: %v", got)
	}
}

// A restore, a keep and a fresh trash write a marker with a new clock. The old
// decision must not fire against it (spec §5, astra 4).
func TestPurgeAppIfTrashedAtRefusesAnotherTrash(t *testing.T) {
	s := NewDirStore(t.TempDir())
	_, pub := testKeys(t)
	keys := seedApp(t, s, "bab", "tmp-docs")
	decided := time.Date(2026, 9, 26, 10, 0, 0, 0, time.UTC)
	if err := TrashApp(ctx, s, "bab", "tmp-docs", "paul@keymail.dev", decided.Add(time.Hour)); err != nil {
		t.Fatal(err)
	}
	err := PurgeAppIfTrashedAt(ctx, s, pub, "bab", "tmp-docs", decided, decided.Add(TemporaryCooloff))
	if !errors.Is(err, ErrTrashClockMismatch) {
		t.Fatalf("PurgeAppIfTrashedAt against a newer trash = %v, want ErrTrashClockMismatch", err)
	}
	if got := listUnder(t, s, "apps/bab/tmp-docs/"); len(got) != len(keys)+1 {
		t.Fatalf("a refused purge destroyed objects: %v", got)
	}
}

// Everything PurgeApp refuses, this refuses too.
func TestPurgeAppIfTrashedAtKeepsPurgeAppsGuards(t *testing.T) {
	priv, pub := testKeys(t)
	s := NewDirStore(t.TempDir())
	seedApp(t, s, "bab", "tmp-docs")
	at := time.Date(2026, 9, 26, 10, 0, 0, 0, time.UTC)
	if err := PurgeAppIfTrashedAt(ctx, s, pub, "bab", "tmp-docs", at, at); !errors.Is(err, ErrNotTrashed) {
		t.Fatalf("untrashed app = %v, want ErrNotTrashed", err)
	}
	if err := SetProduction(ctx, s, priv, "bab", "tmp-docs", true, "paul@keymail.dev"); err != nil {
		t.Fatal(err)
	}
	if err := TrashApp(ctx, s, "bab", "tmp-docs", "expiry", at); err != nil {
		t.Fatal(err)
	}
	if err := PurgeAppIfTrashedAt(ctx, s, pub, "bab", "tmp-docs", at, at); err == nil {
		t.Fatal("purged a production-flagged app")
	}
	if got := listUnder(t, s, "apps/bab/tmp-docs/"); len(got) == 0 {
		t.Fatal("a refused purge destroyed objects")
	}
}