package api_test

import (
	"context"
	"database/sql"
	"encoding/json"
	"net/http"
	"net/http/httptest"
	"testing"
	"time"

	"github.com/go-chi/chi/v5"
	"github.com/owncord/server/api"
)

// buildMetricsRouter creates a chi router with the metrics endpoint behind AdminIPRestrict.
func buildMetricsRouter(allowedCIDRs []string) http.Handler {
	r := chi.NewRouter()
	r.With(api.AdminIPRestrict(allowedCIDRs, nil)).
		Get("/api/v1/metrics", api.HandleMetricsForTest(api.MetricsSources{
			ConnectedUsers: func() int { return 5 },
			VoiceSessions:  func() int { return 2 },
			BroadcastDrops: func() uint64 { return 0 },
			LiveKitHealth:  func(_ context.Context) (bool, error) { return true, nil },
			ReconnectTiers: func() (uint64, uint64, uint64) { return 7, 3, 1 },
			Backpressure:   func() (uint64, uint64, uint64) { return 4, 9, 11 },
			PersisterStats: func() (uint64, uint64, uint64, uint64, bool) { return 100, 2, 10, 1, true },
			DBStats:        func() sql.DBStats { return sql.DBStats{WaitCount: 6, WaitDuration: 1500 * time.Millisecond} },
			PermCache:      func() (uint64, uint64) { return 42, 8 },
		}))
	return r
}

func TestHandleMetrics_ReturnsExpectedFields(t *testing.T) {
	router := buildMetricsRouter(nil) // no IP restriction

	req := httptest.NewRequest(http.MethodGet, "/api/v1/metrics", nil)
	req.RemoteAddr = "127.0.0.1:9999"
	rr := httptest.NewRecorder()
	router.ServeHTTP(rr, req)

	if rr.Code != http.StatusOK {
		t.Fatalf("status = %d, want 200; body: %s", rr.Code, rr.Body.String())
	}

	var resp map[string]any
	if err := json.NewDecoder(rr.Body).Decode(&resp); err != nil {
		t.Fatalf("decode: %v", err)
	}

	requiredFields := []string{
		"uptime", "uptime_seconds", "goroutines",
		"heap_alloc_mb", "heap_sys_mb", "num_gc",
		"connected_users", "voice_sessions", "broadcast_drops", "livekit_healthy",
		"reconnect_tier_buffer", "reconnect_tier_db", "reconnect_tier_full",
		"backpressure_queue_disconnects", "backpressure_high_fallbacks", "backpressure_low_drops",
		"db_writer_wait_count", "db_writer_wait_seconds",
		"perm_cache_hits", "perm_cache_misses",
		"event_persister",
	}
	for _, f := range requiredFields {
		if _, ok := resp[f]; !ok {
			t.Errorf("missing field %q in metrics response", f)
		}
	}

	// Verify the callback values are reflected.
	if int(resp["connected_users"].(float64)) != 5 {
		t.Errorf("connected_users = %v, want 5", resp["connected_users"])
	}
	if int(resp["voice_sessions"].(float64)) != 2 {
		t.Errorf("voice_sessions = %v, want 2", resp["voice_sessions"])
	}
	if resp["livekit_healthy"] != true {
		t.Errorf("livekit_healthy = %v, want true", resp["livekit_healthy"])
	}
	if int(resp["reconnect_tier_buffer"].(float64)) != 7 {
		t.Errorf("reconnect_tier_buffer = %v, want 7", resp["reconnect_tier_buffer"])
	}
	if int(resp["backpressure_low_drops"].(float64)) != 11 {
		t.Errorf("backpressure_low_drops = %v, want 11", resp["backpressure_low_drops"])
	}
	if got := resp["db_writer_wait_seconds"].(float64); got != 1.5 {
		t.Errorf("db_writer_wait_seconds = %v, want 1.5", got)
	}
	if int(resp["perm_cache_hits"].(float64)) != 42 {
		t.Errorf("perm_cache_hits = %v, want 42", resp["perm_cache_hits"])
	}
	ep, ok := resp["event_persister"].(map[string]any)
	if !ok {
		t.Fatalf("event_persister = %v, want object", resp["event_persister"])
	}
	if int(ep["persisted"].(float64)) != 100 {
		t.Errorf("event_persister.persisted = %v, want 100", ep["persisted"])
	}
}

func TestHandleMetrics_AdminIPRestrict_BlocksNonAdmin(t *testing.T) {
	router := buildMetricsRouter([]string{"10.0.0.0/8"}) // only 10.x allowed

	req := httptest.NewRequest(http.MethodGet, "/api/v1/metrics", nil)
	req.RemoteAddr = "192.168.1.1:9999" // not in allowed CIDR
	rr := httptest.NewRecorder()
	router.ServeHTTP(rr, req)

	if rr.Code != http.StatusForbidden {
		t.Errorf("status = %d, want 403; body: %s", rr.Code, rr.Body.String())
	}
}

func TestHandleMetrics_AdminIPRestrict_AllowsAdmin(t *testing.T) {
	router := buildMetricsRouter([]string{"127.0.0.0/8"})

	req := httptest.NewRequest(http.MethodGet, "/api/v1/metrics", nil)
	req.RemoteAddr = "127.0.0.1:9999"
	rr := httptest.NewRecorder()
	router.ServeHTTP(rr, req)

	if rr.Code != http.StatusOK {
		t.Errorf("status = %d, want 200; body: %s", rr.Code, rr.Body.String())
	}
}

func TestHandleMetrics_WithoutLiveKitHealthCheck(t *testing.T) {
	r := chi.NewRouter()
	r.Get("/api/v1/metrics", api.HandleMetricsForTest(api.MetricsSources{
		ConnectedUsers: func() int { return 0 },
		VoiceSessions:  func() int { return 0 },
		BroadcastDrops: func() uint64 { return 0 },
		// LiveKitHealth nil — no livekit wired.
		// PersisterStats returning ok=false must omit event_persister.
		PersisterStats: func() (uint64, uint64, uint64, uint64, bool) { return 0, 0, 0, 0, false },
	}))

	req := httptest.NewRequest(http.MethodGet, "/api/v1/metrics", nil)
	req.RemoteAddr = "127.0.0.1:9999"
	rr := httptest.NewRecorder()
	r.ServeHTTP(rr, req)

	if rr.Code != http.StatusOK {
		t.Fatalf("status = %d, want 200; body: %s", rr.Code, rr.Body.String())
	}

	var resp map[string]any
	_ = json.NewDecoder(rr.Body).Decode(&resp)

	// livekit_healthy should be absent when no health check is provided.
	if _, ok := resp["livekit_healthy"]; ok {
		t.Errorf("livekit_healthy should be omitted when health check is nil, got %v", resp["livekit_healthy"])
	}
	// event_persister should be absent when the persister reports ok=false.
	if _, ok := resp["event_persister"]; ok {
		t.Errorf("event_persister should be omitted when persistence is disabled, got %v", resp["event_persister"])
	}
}