/**
 * `createLaunchAnalysisWorker`'s collapsed-index guard — ORDERING, not just status.
 *
 * `backend.init()` is the PUBLISH step (it is `LocalBackend.refreshRepos()`,
 * which swaps the freshly-registered repo into the in-memory map every MCP tool
 * and HTTP route resolves through). The guard added in #2899 read
 * `graphWriteCollapsed` only AFTER that call had already resolved, so a
 * known-incomplete database was live and queryable before the job was ever
 * marked `failed` — the job status was a label on a published index rather than
 * a gate. These tests pin the order, because the order is the defect.
 *
 * `analyze-launch.ts` had ZERO test coverage before this file, which is why a
 * field-name drift against `analyze-worker-ipc.ts`'s wire shape would have made
 * the branch permanently dead and silently restored the pre-guard behaviour.
 * The worker messages below are therefore built by calling the PRODUCTION
 * projection `projectAnalyzeResultForIpc` rather than hand-rolling a literal, so
 * a rename of `graphWriteCollapsed` breaks these tests instead of disabling the
 * branch they cover.
 */
import { afterEach, beforeEach, describe, expect, it, vi, type Mock } from 'vitest';
import { EventEmitter } from 'node:events';

// `vi.mock` factories are hoisted above every top-level `const`, and this file
// imports the module under test statically — so anything a factory closes over
// must be hoisted with it.
const H = vi.hoisted(() => {
  const STORAGE_PATH = '/tmp/gitnexus-test-storage';
  return {
    forkMock: vi.fn(),
    STORAGE_PATH,
    REPO_PATH: '/tmp/gitnexus-test-repo',
    METADATA_FILE: 'gitnexus.json',
    // When false, the finalization gate sees no fresh index (timeout / lock-hold tests).
    settleOk: true,
    requireStoragePath: vi.fn(async () => STORAGE_PATH),
  };
});
const { forkMock, REPO_PATH } = H;

vi.mock('child_process', async () => {
  const actual = await vi.importActual<typeof import('child_process')>('child_process');
  return { ...actual, fork: H.forkMock };
});

// The launcher's finalization gate (`waitForSettledIndex`) probes the
// ownership-validated storage path. Pin the filesystem so the gate settles on
// its FIRST poll — the gate itself is not under test here and its 200ms poll
// would otherwise put a real timer between the worker message and the assertions.
vi.mock('../../src/storage/repo-manager.js', () => ({
  INDEX_METADATA_FILE: H.METADATA_FILE,
}));

vi.mock('../../src/storage/storage-resolver.js', () => ({
  ANALYZE_STORAGE_REQUIREMENTS: { allowedStates: ['missing', 'empty', 'owned'] },
  ANALYZE_FORCE_STORAGE_REQUIREMENTS: {
    allowedStates: ['missing', 'empty', 'owned', 'unowned', 'foreign'],
  },
  requireStoragePath: H.requireStoragePath,
}));

vi.mock('node:fs', async () => {
  const actual = await vi.importActual<typeof import('node:fs')>('node:fs');
  return {
    ...actual,
    statSync: () => {
      if (!H.settleOk) {
        throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' });
      }
      // Both index files were (re)written far in the future relative to jobStartMs.
      return { mtimeMs: Number.MAX_SAFE_INTEGER };
    },
    // No WAL/shadow/checkpoint sidecar remains when the gate is allowed to settle.
    existsSync: () => false,
  };
});

import { createLaunchAnalysisWorker } from '../../src/server/analyze-launch.js';
import { JobManager } from '../../src/server/analyze-job.js';
import { projectAnalyzeResultForIpc } from '../../src/server/analyze-worker-ipc.js';
import type { AnalyzeResult } from '../../src/core/run-analyze.js';
import type { CompleteMessage } from '../../src/server/analyze-worker.js';

const REPO_NAME = 'collapse-fixture';

/**
 * Build the exact `complete` message the worker puts on the wire, by running the
 * production projection. The `graphWriteCollapsed` key is therefore whatever
 * `analyze-worker-ipc.ts` actually sends — not a literal this test invented.
 */
const completeMessage = (graphWriteCollapsed?: { expected: number; persisted: number }) => {
  const result = {
    repoName: REPO_NAME,
    repoPath: REPO_PATH,
    storagePath: H.STORAGE_PATH,
    stats: { files: 10, nodes: 100, edges: 500 },
    ...(graphWriteCollapsed ? { graphWriteCollapsed } : {}),
  } satisfies Partial<AnalyzeResult> as AnalyzeResult;
  return { type: 'complete', result: projectAnalyzeResultForIpc(result) } satisfies CompleteMessage;
};

interface FakeChild extends EventEmitter {
  stderr: EventEmitter;
  send: Mock<(msg: unknown) => boolean>;
  kill: Mock<(signal?: NodeJS.Signals) => boolean>;
  pid?: number;
}

const makeChild = (): FakeChild => {
  const child = new EventEmitter() as FakeChild;
  child.stderr = new EventEmitter();
  child.send = vi.fn();
  child.kill = vi.fn();
  return child;
};

describe('createLaunchAnalysisWorker — collapsed index is never published', () => {
  let jobManager: JobManager;
  let child: FakeChild;
  let calls: string[];
  let backendInit: Mock<() => Promise<unknown>>;
  let closeDbHandle: Mock<() => Promise<void>>;

  /** Drive one analyze to its terminal state and return the observed call order. */
  const runWorker = async (msg: CompleteMessage) => {
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock: () => {
        calls.push('releaseRepoLock');
      },
      closeDbHandle,
    });

    const job = jobManager.createJob({ repoPath: REPO_PATH });
    await launch(job, REPO_PATH, {});
    child.emit('message', msg);

    await vi.waitFor(() => expect(calls).toContain('updateJob:terminal'));
    return jobManager.getJob(job.id);
  };

  beforeEach(() => {
    calls = [];
    H.settleOk = true;
    H.requireStoragePath.mockClear();
    jobManager = new JobManager();
    child = makeChild();
    forkMock.mockImplementation(() => child);

    backendInit = vi.fn(async () => {
      calls.push('backend.init');
      return true;
    });
    closeDbHandle = vi.fn(async () => {
      calls.push('closeDbHandle');
    });

    const realUpdate = jobManager.updateJob.bind(jobManager);
    vi.spyOn(jobManager, 'updateJob').mockImplementation((id, update) => {
      calls.push(`updateJob:${update.status ?? 'progress'}`);
      realUpdate(id, update);
      // Recorded after the real call so the marker only lands once the status is
      // committed — `updateJob` drops any update to an already-terminal job.
      calls.push(
        ...['complete', 'failed']
          .filter((s) => s === update.status)
          .map(() => 'updateJob:terminal'),
      );
    });
  });

  it('forwards the Spring Actuator snapshot path to the worker', async () => {
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock: () => {},
      closeDbHandle,
    });
    const job = jobManager.createJob({ repoPath: REPO_PATH });

    await launch(job, REPO_PATH, { springActuatorPath: 'runtime/actuator' });

    expect(child.send).toHaveBeenCalledWith(
      expect.objectContaining({
        options: expect.objectContaining({
          springActuatorPath: 'runtime/actuator',
        }),
      }),
    );
  });

  it('uses the force storage set only when launch options request force', async () => {
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock: () => {},
      closeDbHandle,
    });

    const ordinary = jobManager.createJob({ repoPath: REPO_PATH });
    await launch(ordinary, REPO_PATH, {});
    expect(H.requireStoragePath).toHaveBeenLastCalledWith(REPO_PATH, {
      allowedStates: ['missing', 'empty', 'owned'],
    });

    const forced = jobManager.createJob({ repoPath: REPO_PATH });
    await launch(forced, REPO_PATH, { force: true });
    expect(H.requireStoragePath).toHaveBeenLastCalledWith(REPO_PATH, {
      allowedStates: ['missing', 'empty', 'owned', 'unowned', 'foreign'],
    });
  });

  it('forwards the index-branch selector to the worker', async () => {
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock: () => {},
      closeDbHandle,
    });
    const job = jobManager.createJob({ repoPath: REPO_PATH });

    await launch(job, REPO_PATH, { branch: 'development' });

    // `StartMessage.options` is typed as `AnalyzeOptions`, so this key IS
    // `AnalyzeOptions.branch` — the field `resolveWriteTarget` reads to choose
    // the run's storage slot. (It does not always mean a `branches/<slug>/`
    // sub-slot: `resolveBranchPlacement` keeps the flat slot when that slot has
    // no owner, or when its owner is already this label.) A rename breaks this
    // test.
    expect(child.send).toHaveBeenCalledWith(
      expect.objectContaining({
        options: expect.objectContaining({ branch: 'development' }),
      }),
    );
  });

  it('omits branch entirely when the caller did not select one', async () => {
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock: () => {},
      closeDbHandle,
    });
    const job = jobManager.createJob({ repoPath: REPO_PATH });

    await launch(job, REPO_PATH, {});

    // Not merely undefined: absent. `AnalyzeOptions.branch === undefined` is the
    // documented signal for "target the flat workspace slot", so sending the key
    // with an undefined value must not become the way that default is expressed.
    const sent = child.send.mock.calls.at(0)?.[0] as { options: Record<string, unknown> };
    expect(Object.hasOwn(sent.options, 'branch')).toBe(false);
  });

  afterEach(() => {
    vi.useRealTimers();
    jobManager.dispose();
    vi.restoreAllMocks();
    forkMock.mockReset();
    H.settleOk = true;
  });

  it('does not publish the index — backend.init() is never called for a collapsed run', async () => {
    await runWorker(completeMessage({ expected: 500, persisted: 3 }));

    // The defect: init() resolved FIRST, so the incomplete graph was live and
    // queryable by every MCP/API consumer before the job was marked failed.
    expect(backendInit).not.toHaveBeenCalled();
    expect(calls).not.toContain('backend.init');
    // The cached handle is still evicted — the worker rewrote the DB files on
    // disk, so a pre-rewrite handle is stale whatever the outcome was. Eviction
    // is not publication.
    expect(closeDbHandle).toHaveBeenCalledTimes(1);
    expect(calls.indexOf('closeDbHandle')).toBeLessThan(calls.indexOf('updateJob:failed'));
    // Lock is held through the collapse decision and dropped afterwards, once.
    expect(calls.indexOf('updateJob:failed')).toBeLessThan(calls.indexOf('releaseRepoLock'));
  });

  it('marks the collapsed run failed and still reports repoName', async () => {
    const job = await runWorker(completeMessage({ expected: 500, persisted: 3 }));

    expect(job?.status).toBe('failed');
    // The success path sets repoName; api.ts's repo-resolution wait matches jobs
    // on it first. Dropping it here cost one of three match keys for no reason.
    expect(job?.repoName).toBe(REPO_NAME);
    expect(job?.error).toContain('INCOMPLETELY');
    expect(job?.error).toContain('3 of 500');
    // The failure is explicit about the index being unreachable, not merely stale.
    expect(job?.error).toContain('NOT published');
  });

  it('publishes and completes a healthy run, in that order', async () => {
    const job = await runWorker(completeMessage());

    expect(job?.status).toBe('complete');
    expect(job?.repoName).toBe(REPO_NAME);
    expect(backendInit).toHaveBeenCalledTimes(1);
    // Publish strictly BEFORE the terminal complete, so the repo really is
    // queryable when the client receives the SSE complete event.
    expect(calls).toEqual([
      'updateJob:analyzing',
      'closeDbHandle',
      'backend.init',
      'updateJob:complete',
      'updateJob:terminal',
      'releaseRepoLock',
    ]);
  });

  it('reads the collapse flag under the name analyze-worker-ipc.ts actually sends', async () => {
    const wire = completeMessage({ expected: 500, persisted: 3 });

    // Guards against a silent rename: the branch under test keys off this exact
    // field, and the message was produced by the production projection.
    expect(Object.keys(wire.result)).toContain('graphWriteCollapsed');
    expect(wire.result.graphWriteCollapsed).toEqual({ expected: 500, persisted: 3 });

    // A projection that stopped carrying the field must not read as healthy.
    const healthy = completeMessage();
    expect(healthy.result.graphWriteCollapsed).toBeUndefined();
    const job = await runWorker(healthy);
    expect(job?.status).toBe('complete');
  });

  it('fails and does not publish when index finalization never becomes visible', async () => {
    vi.useFakeTimers();
    H.settleOk = false;
    const releaseRepoLock = vi.fn(() => {
      calls.push('releaseRepoLock');
    });
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock,
      closeDbHandle,
    });
    const job = jobManager.createJob({ repoPath: REPO_PATH });
    await launch(job, REPO_PATH, {});
    child.emit('message', completeMessage());

    expect(releaseRepoLock).not.toHaveBeenCalled();
    expect(backendInit).not.toHaveBeenCalled();
    expect(jobManager.getJob(job.id)?.status).toBe('analyzing');

    // Must match FINALIZE_SETTLE_TIMEOUT_MS + one poll in analyze-launch.ts.
    await vi.advanceTimersByTimeAsync(61_000);

    const done = jobManager.getJob(job.id);
    expect(done?.status).toBe('failed');
    expect(done?.error).toMatch(/finalization not visible after timeout/i);
    expect(backendInit).not.toHaveBeenCalled();
    expect(closeDbHandle).not.toHaveBeenCalled();
    expect(releaseRepoLock).toHaveBeenCalledTimes(1);
  });

  it('holds the write lock until settle resolves, then releases once after publish', async () => {
    vi.useFakeTimers();
    H.settleOk = false;
    const releaseRepoLock = vi.fn(() => {
      calls.push('releaseRepoLock');
    });
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock,
      closeDbHandle,
    });
    const job = jobManager.createJob({ repoPath: REPO_PATH });
    await launch(job, REPO_PATH, {});
    child.emit('message', completeMessage());

    // First poll failed; the gate is sleeping. Lock must still be held.
    expect(releaseRepoLock).not.toHaveBeenCalled();
    expect(backendInit).not.toHaveBeenCalled();
    expect(jobManager.getJob(job.id)?.status).toBe('analyzing');

    H.settleOk = true;
    await vi.advanceTimersByTimeAsync(200);

    expect(jobManager.getJob(job.id)?.status).toBe('complete');
    expect(backendInit).toHaveBeenCalledTimes(1);
    expect(releaseRepoLock).toHaveBeenCalledTimes(1);
    expect(calls.indexOf('backend.init')).toBeLessThan(calls.indexOf('releaseRepoLock'));
  });
});

describe('createLaunchAnalysisWorker — pending cancel', () => {
  let jobManager: JobManager;
  let child: FakeChild;
  let backendInit: Mock<() => Promise<unknown>>;
  let closeDbHandle: Mock<() => Promise<void>>;

  const launchOne = async () => {
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock: () => {},
      closeDbHandle,
    });
    const job = jobManager.createJob({ repoPath: REPO_PATH });
    await launch(job, REPO_PATH, {});
    return job;
  };

  beforeEach(() => {
    H.settleOk = true;
    jobManager = new JobManager();
    child = makeChild();
    forkMock.mockImplementation(() => child);
    backendInit = vi.fn(async () => true);
    closeDbHandle = vi.fn(async () => {});
  });

  afterEach(() => {
    vi.useRealTimers();
    jobManager.dispose();
    vi.restoreAllMocks();
    forkMock.mockReset();
    H.settleOk = true;
  });

  it('keeps the caller cancel reason when the worker reports a generic cancel error', async () => {
    const job = await launchOne();
    expect(jobManager.cancelJob(job.id, 'Analysis timed out (30 minute limit)')).toBe(true);
    child.emit('message', {
      type: 'error',
      message: 'Analysis cancelled (parent requested cancellation)',
    });
    const done = jobManager.getJob(job.id);
    expect(done?.status).toBe('failed');
    expect(done?.error).toBe('Analysis timed out (30 minute limit)');
  });

  it('does not publish after complete IPC if cancel is already pending', async () => {
    const job = await launchOne();
    expect(jobManager.cancelJob(job.id, 'Cancelled by user')).toBe(true);
    child.emit('message', completeMessage());
    await vi.waitFor(() => expect(jobManager.getJob(job.id)?.status).toBe('failed'));
    expect(backendInit).not.toHaveBeenCalled();
    expect(jobManager.getJob(job.id)?.error).toBe('Cancelled by user');
  });

  it('does not publish if cancel arrives while settle is in flight', async () => {
    vi.useFakeTimers();
    H.settleOk = false;
    const job = await launchOne();
    child.emit('message', completeMessage());
    expect(jobManager.getJob(job.id)?.status).toBe('analyzing');
    expect(jobManager.cancelJob(job.id, 'Cancelled by user')).toBe(true);
    H.settleOk = true;
    await vi.advanceTimersByTimeAsync(200);
    expect(backendInit).not.toHaveBeenCalled();
    expect(jobManager.getJob(job.id)?.status).toBe('failed');
    expect(jobManager.getJob(job.id)?.error).toBe('Cancelled by user');
  });

  it('releases the analyze slot when the worker emits error without exit', async () => {
    const job = await launchOne();
    child.emit('error', new Error('spawn ENOENT'));
    expect(jobManager.getJob(job.id)?.status).toBe('failed');
    expect(jobManager.createJob({ repoPath: '/tmp/other' }).status).toBe('queued');
  });

  it('holds the repo lock until exit after complete IPC when cancel is already pending', async () => {
    const releaseRepoLock = vi.fn();
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock,
      closeDbHandle,
    });
    const job = jobManager.createJob({ repoPath: REPO_PATH });
    await launch(job, REPO_PATH, {});

    expect(jobManager.cancelJob(job.id, 'Cancelled by user')).toBe(true);
    child.emit('message', completeMessage());

    expect(jobManager.getJob(job.id)?.status).toBe('failed');
    expect(jobManager.getJob(job.id)?.error).toBe('Cancelled by user');
    expect(backendInit).not.toHaveBeenCalled();
    expect(releaseRepoLock).not.toHaveBeenCalled();
    expect(() => jobManager.createJob({ repoPath: '/tmp/other' })).toThrow(/already in progress/);

    child.emit('exit', 0);

    expect(releaseRepoLock).toHaveBeenCalledTimes(1);
    expect(jobManager.createJob({ repoPath: '/tmp/other' }).status).toBe('queued');
  });

  it('holds the repo lock until exit after cancel error IPC', async () => {
    const releaseRepoLock = vi.fn();
    const launch = createLaunchAnalysisWorker({
      jobManager,
      backend: { init: backendInit },
      acquireRepoLock: () => null,
      releaseRepoLock,
      closeDbHandle,
    });
    const job = jobManager.createJob({ repoPath: REPO_PATH });
    await launch(job, REPO_PATH, {});

    expect(jobManager.cancelJob(job.id, 'Cancelled by user')).toBe(true);
    child.emit('message', {
      type: 'error',
      message: 'Analysis cancelled (parent requested cancellation)',
    });

    expect(jobManager.getJob(job.id)?.status).toBe('failed');
    expect(jobManager.getJob(job.id)?.error).toBe('Cancelled by user');
    expect(releaseRepoLock).not.toHaveBeenCalled();
    expect(() => jobManager.createJob({ repoPath: '/tmp/other' })).toThrow(/already in progress/);

    child.emit('exit', 0);

    expect(releaseRepoLock).toHaveBeenCalledTimes(1);
    expect(jobManager.createJob({ repoPath: '/tmp/other' }).status).toBe('queued');
  });

  it('does not release the analyze slot on post-spawn child error until exit', async () => {
    const job = await launchOne();
    child.pid = 123;
    child.emit('error', new Error('write EPIPE'));

    expect(jobManager.getJob(job.id)?.status).toBe('failed');
    expect(jobManager.getJob(job.id)?.error).toMatch(/write EPIPE/);
    expect(() => jobManager.createJob({ repoPath: '/tmp/other' })).toThrow(/already in progress/);

    child.emit('exit', 1);

    expect(jobManager.createJob({ repoPath: '/tmp/other' }).status).toBe('queued');
  });
});