package cmd

import (
	"encoding/json"
	"os"
	"runtime"
	"strings"
	"testing"

	crud "github.com/danieljustus/symaira-vault/cmd/crud"
	cli "github.com/danieljustus/symaira-vault/internal/cli"
	"github.com/danieljustus/symaira-vault/internal/config"
	vaultpkg "github.com/danieljustus/symaira-vault/internal/vault"
)

func TestCmdDelete_Cancel(t *testing.T) {
	vaultDir, passphrase := initVault(t)
	identity, _ := vaultpkg.OpenWithPassphrase(vaultDir, passphrase)
	entry := &vaultpkg.Entry{Data: map[string]any{"password": "keep"}}
	_ = vaultpkg.WriteEntry(vaultDir, "keep-me", entry, identity.Identity)
	setPassEnv(t, string(passphrase))
	defer setupVaultFlag(t, vaultDir)()
	oldStdin := os.Stdin
	r, w, _ := os.Pipe()
	os.Stdin = r
	_, _ = w.WriteString("n\n")
	_ = w.Close()
	stderr := captureStderr(func() {
		rootCmd.SetArgs([]string{"--vault", vaultDir, "delete", "keep-me"})
		_ = rootCmd.Execute()
		rootCmd.SetArgs(nil)
	})
	os.Stdin = oldStdin
	_ = r.Close()
	if !strings.Contains(stderr, "Canceled") {
		t.Errorf("expected Canceled, got: %s", stderr)
	}
}

func TestCmdDelete_StdinError(t *testing.T) {
	vaultDir, passphrase := initVault(t)
	identity, _ := vaultpkg.OpenWithPassphrase(vaultDir, passphrase)
	entry := &vaultpkg.Entry{Data: map[string]any{"password": "keep"}}
	_ = vaultpkg.WriteEntry(vaultDir, "keep-me", entry, identity.Identity)
	setPassEnv(t, string(passphrase))
	defer setupVaultFlag(t, vaultDir)()
	restore := pipeStdin(t, "")
	defer restore()
	stderr := captureStderr(func() {
		rootCmd.SetArgs([]string{"--vault", vaultDir, "delete", "keep-me"})
		_ = rootCmd.Execute()
		rootCmd.SetArgs(nil)
	})
	if !strings.Contains(stderr, "read confirmation") {
		t.Errorf("expected read confirmation error, got: %s", stderr)
	}
}

func TestCmdDelete_NotFound(t *testing.T) {
	vaultDir, passphrase := initVault(t)
	setPassEnv(t, string(passphrase))
	defer setupVaultFlag(t, vaultDir)()
	oldStdin := os.Stdin
	r, w, _ := os.Pipe()
	os.Stdin = r
	_, _ = w.WriteString("y\n")
	_ = w.Close()
	stderr := captureStderr(func() {
		rootCmd.SetArgs([]string{"--vault", vaultDir, "delete", "ghost"})
		_ = rootCmd.Execute()
		rootCmd.SetArgs(nil)
	})
	os.Stdin = oldStdin
	_ = r.Close()
	if !strings.Contains(stderr, "Error") && !strings.Contains(stderr, "cannot delete") {
		t.Errorf("expected delete error, got: %s", stderr)
	}
}

func TestCmdDelete_YesJSON(t *testing.T) {
	vaultDir, passphrase := initVault(t)
	identity, _ := vaultpkg.OpenWithPassphrase(vaultDir, passphrase)
	entry := &vaultpkg.Entry{Data: map[string]any{"password": "secret"}}
	_ = vaultpkg.WriteEntry(vaultDir, "delete-json", entry, identity.Identity)
	setPassEnv(t, string(passphrase))
	defer setupVaultFlag(t, vaultDir)()
	t.Cleanup(func() {
		crud.DeleteYes = false
		cli.OutputFormat = "text"
	})

	output := captureStdout(func() {
		rootCmd.SetArgs([]string{"--vault", vaultDir, "delete", "delete-json", "--yes", "--output", "json"})
		_ = rootCmd.Execute()
		rootCmd.SetArgs(nil)
	})

	var result map[string]any
	if err := json.Unmarshal([]byte(output), &result); err != nil {
		t.Fatalf("delete --json output is not valid JSON: %q: %v", output, err)
	}
	if result["deleted"] != true || result["path"] != "delete-json" {
		t.Fatalf("unexpected delete JSON result: %#v", result)
	}
}

func TestCmdDelete_Uninitialized(t *testing.T) {
	resetCmdFlags()
	t.Cleanup(resetCmdFlags)
	vaultDir := t.TempDir()
	defer setupVaultFlag(t, vaultDir)()
	restore := pipeStdin(t, "y\n")
	defer restore()
	stderr := captureStderr(func() {
		rootCmd.SetArgs([]string{"--vault", vaultDir, "delete", "x"})
		_ = rootCmd.Execute()
		rootCmd.SetArgs(nil)
	})
	if !strings.Contains(stderr, "vault not initialized") && !strings.Contains(stderr, "Error") {
		t.Errorf("expected vault not initialized, got: %s", stderr)
	}
}

func TestCmdDelete_EmptyConfirm(t *testing.T) {
	vaultDir, passphrase := initVault(t)
	identity, _ := vaultpkg.OpenWithPassphrase(vaultDir, passphrase)
	entry := &vaultpkg.Entry{Data: map[string]any{"password": "x"}}
	_ = vaultpkg.WriteEntry(vaultDir, "del-empty", entry, identity.Identity)
	setPassEnv(t, string(passphrase))
	defer setupVaultFlag(t, vaultDir)()
	oldStdin := os.Stdin
	r, w, _ := os.Pipe()
	os.Stdin = r
	_ = w.Close()
	captureStderr(func() {
		rootCmd.SetArgs([]string{"--vault", vaultDir, "delete", "del-empty"})
		_ = rootCmd.Execute()
		rootCmd.SetArgs(nil)
	})
	os.Stdin = oldStdin
	_ = r.Close()
}

func TestCmdDelete_AutoCommitError(t *testing.T) {
	if runtime.GOOS == "windows" {
		t.Skip("skipping on windows: stderr capture not reliable")
	}
	// Test skipped: delete command uses slog for auto-commit failure warnings
	// instead of writing to stderr.
	t.Skip("skipped: auto-commit warning is logged, not written to stderr")
	vaultDir, passphrase := initVault(t)
	identity, _ := vaultpkg.OpenWithPassphrase(vaultDir, passphrase)
	entry := &vaultpkg.Entry{Data: map[string]any{"password": "del"}}
	_ = vaultpkg.WriteEntry(vaultDir, "autocommit-del", entry, identity.Identity)
	setupGitWithBrokenObjects(t, vaultDir)
	setPassEnv(t, string(passphrase))
	defer setupVaultFlag(t, vaultDir)()

	oldStdin := os.Stdin
	r, w, _ := os.Pipe()
	os.Stdin = r
	_, _ = w.WriteString("y\n")
	_ = w.Close()

	stderr := captureStderr(func() {
		rootCmd.SetArgs([]string{"--vault", vaultDir, "delete", "autocommit-del"})
		_ = rootCmd.Execute()
		rootCmd.SetArgs(nil)
	})
	os.Stdin = oldStdin
	_ = r.Close()

	if !strings.Contains(stderr, "auto-commit failed") {
		t.Errorf("expected auto-commit warning in stderr: %s", stderr)
	}
}

func TestDelete_ErrorPaths(t *testing.T) {
	resetVaultState(t)
	t.Run("uninitialized vault", func(t *testing.T) {
		tmpDir := t.TempDir()
		_ = os.Setenv("OPENPASS_VAULT", tmpDir)
		defer func() { _ = os.Unsetenv("OPENPASS_VAULT") }()

		rootCmd.SetArgs([]string{"--vault", tmpDir, "delete", "test"})
		defer rootCmd.SetArgs(nil)

		err := rootCmd.Execute()
		if err == nil || !strings.Contains(err.Error(), "not initialized") {
			t.Errorf("expected 'not initialized' error, got: %v", err)
		}
	})

	t.Run("delete canceled", func(t *testing.T) {
		tmpDir := t.TempDir()
		_ = os.Setenv("OPENPASS_VAULT", tmpDir)
		defer func() { _ = os.Unsetenv("OPENPASS_VAULT") }()

		cfg := config.Default()
		_, _ = vaultpkg.InitWithPassphrase(tmpDir, []byte("test"), cfg)
		_ = os.Setenv("OPENPASS_PASSPHRASE", "test")
		defer func() { _ = os.Unsetenv("OPENPASS_PASSPHRASE") }()

		oldStdin := os.Stdin
		r, w, _ := os.Pipe()
		os.Stdin = r
		_, _ = w.WriteString("n\n")
		_ = w.Close()

		rootCmd.SetArgs([]string{"--vault", tmpDir, "delete", "nonexistent"})
		defer rootCmd.SetArgs(nil)

		_ = rootCmd.Execute()
		os.Stdin = oldStdin
		_ = r.Close()
	})
}
