import { describe, expect, mock, test } from "bun:test";
import { Database } from "bun:sqlite";
import { applyCombinedSchema } from "./test-schema.test-helper";

mock.module("cloudflare:workers", () => ({
  env: { PUBLIC_URL: "https://forge.example.com" },
  waitUntil: () => undefined,
}));
const db = new Database(":memory:");
applyCombinedSchema(db);
mock.module("./db", () => ({
  first: async (sql: string, ...params: unknown[]) => db.query(sql).get(...(params as never[])) ?? null,
  all: async (sql: string, ...params: unknown[]) => db.query(sql).all(...(params as never[])),
  run: async (sql: string, ...params: unknown[]) => ({
    meta: { changes: db.query(sql).run(...(params as never[])).changes },
  }),
  batch: async () => [],
  stmt: (sql: string, ...params: unknown[]) => ({ sql, params }),
  placeholders: (count: number) => Array(count).fill("?").join(", "),
  chunks: <T>(items: T[]) => [items],
  MAX_IN_LIST: 90,
}));
const { sharedScopes } = await import("./test-shared-scopes");
mock.module("./scoped-db", () => sharedScopes(db));
mock.module("./user-row", () => ({ userChanged: async () => undefined }));

const { setSiteAdmin } = await import("./site-admins");
const { HttpError } = await import("./errors");

db.exec(`
  INSERT INTO accounts (id, name, kind, created_at) VALUES ('root', 'root', 'user', 0), ('mod', 'mod', 'user', 0), ('bob', 'bob', 'user', 0);
  INSERT INTO users (account_id, email, is_admin, email_verified_at) VALUES ('root', 'r@x', 1, 1), ('mod', 'm@x', 1, 1), ('bob', 'b@x', 0, 1);
  INSERT INTO repos (id, owner_id, name, visibility, default_branch, artifacts_name, artifacts_remote, created_at, updated_at)
    VALUES ('bobs', 'bob', 'app', 'private', 'main', 'a', 'r', 0, 0);
  INSERT INTO deploy_tokens (id, repo_id, name, token_hash, token_prefix, permission, created_by, created_at)
    VALUES ('d', 'bobs', 'ci', 'h', 'p', 'write', 'mod', 0);
`);

describe("site admins", () => {
  test("revoking a site admin also revokes deploy tokens they held only as admin", async () => {
    await setSiteAdmin("mod", false);
    expect(db.query("SELECT is_admin FROM users WHERE account_id = 'mod'").get()).toEqual({ is_admin: 0 });
    expect(db.query("SELECT id FROM deploy_tokens").all()).toEqual([]);
  });

  test("the last admin can't be removed", async () => {
    const error = await setSiteAdmin("root", false).catch((caught: unknown) => caught);
    expect(error).toBeInstanceOf(HttpError);
    expect(db.query("SELECT is_admin FROM users WHERE account_id = 'root'").get()).toEqual({ is_admin: 1 });
  });
});