/** Authorized source identity and cancellation survive Host rendering. */
import { Context } from '@deepseek-ai/cordis'
import { SessionId } from '@deepseek-ai/dsh-session/types'
import type { WorkspaceFiles } from '@deepseek-ai/dsh-api-workspace-files'
import { OfficeToPdfError, OfficeToPdfGeneration, OfficeToPdfKey, type OfficeToPdf, type OfficeToPdfResult } from '@deepseek-ai/dsh-office-to-pdf'
import { RemoteError } from '@deepseek-ai/dsh-typert-protocol'
import { afterEach, beforeEach, expect, it, vi } from 'vitest'
import DocumentRenderController from '../src/index.ts'

const scope = { sessionId: SessionId('document-test'), workspaceRoot: '/workspace' }
const source = { absolutePath: '/workspace/report.DOCX', version: 'source-v1', offset: 0, eof: true, bytes: 4, data: 'UEsDBA==' }
const generation = OfficeToPdfGeneration('test-generation')
const cacheKey = OfficeToPdfKey('test-result')
const pdf = new Uint8Array([37, 80, 68, 70, 45])
let ctx: Context
let read: ReturnType<typeof vi.fn<WorkspaceFiles['readAllBounded']>>
let authorize: ReturnType<typeof vi.fn<WorkspaceFiles['readBytes']>>
let metadata: ReturnType<typeof vi.fn<WorkspaceFiles['stat']>>
let render: ReturnType<typeof vi.fn<OfficeToPdf['convert']>>

beforeEach(async () => {
  ctx = new Context()
  read = vi.fn<WorkspaceFiles['readAllBounded']>().mockResolvedValue(source)
  authorize = vi.fn<WorkspaceFiles['readBytes']>().mockResolvedValue(source)
  metadata = vi.fn<WorkspaceFiles['stat']>().mockResolvedValue(source)
  render = vi.fn<OfficeToPdf['convert']>().mockImplementation(async (request, signal) => {
    await request.source.read(signal!, 4)
    return { pdf, missingFonts: ['Missing Serif'], generation, cacheKey }
  })
  ctx.provide('workspaceFiles', { stat: metadata, readAllBounded: read, readBytes: authorize } as never)
  ctx.provide('officeToPdf', { convert: render, generation } as never)
  await ctx.plugin(DocumentRenderController)
})
afterEach(async () => { await ctx.fiber.dispose() })

it.each(['doc', 'docx', 'xls', 'xlsx', 'ppt', 'pptx'])('converts authorized %s bytes and returns the PDF under source identity', async (extension) => {
  const path = `report.${extension.toUpperCase()}`
  const result = await ctx.documentRenderController.render(scope, path, 'foreground', new AbortController().signal)
  expect(read).toHaveBeenCalledExactlyOnceWith(scope, path, 4, expect.any(AbortSignal))
  expect(authorize).toHaveBeenCalledExactlyOnceWith(scope, path, { offset: 0, length: 1 }, expect.any(AbortSignal))
  expect(render).toHaveBeenCalledOnce()
  expect(render.mock.calls[0]?.[0]).toMatchObject({ extension, priority: 'foreground', source: { version: source.version, bytes: 4 } })
  expect(result).toEqual({ ...source, data: Buffer.from(pdf).toString('base64'), bytes: pdf.length, missingFonts: ['Missing Serif'], generation })
  expect(ctx.get('agents')).toBeUndefined()
})

it('preserves authorization failures without starting conversion', async () => {
  const failure = new RemoteError('workspace-file/not-found', 'File missing', { path: 'report.DOCX' })
  metadata.mockRejectedValueOnce(failure)
  await expect(ctx.documentRenderController.render(scope, 'report.DOCX', 'foreground', new AbortController().signal)).rejects.toBe(failure)
  expect(render).not.toHaveBeenCalled()
})

it('keeps an unknown source size absent so the provider can reserve its input limit', async () => {
  const { bytes: _bytes, ...unknownSize } = source
  metadata.mockResolvedValue(unknownSize)
  await ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal)
  expect(render.mock.calls[0]![0].source).not.toHaveProperty('bytes')
  expect(read).toHaveBeenCalledExactlyOnceWith(scope, 'report.docx', 4, expect.any(AbortSignal))
})

it('refuses a cached PDF when source metadata remains readable but content access is denied', async () => {
  let cached: OfficeToPdfResult | undefined
  render.mockImplementation(async (request, signal) => {
    if (cached !== undefined) return cached
    await request.source.read(signal!, 4)
    cached = { pdf, missingFonts: [], generation, cacheKey }
    return cached
  })
  await ctx.documentRenderController.render(scope, 'report.DOCX', 'foreground', new AbortController().signal)
  const failure = new Error('read denied')
  authorize.mockRejectedValueOnce(failure)
  await expect(ctx.documentRenderController.render(scope, 'report.DOCX', 'foreground', new AbortController().signal)).rejects.toBe(failure)
  expect(render).toHaveBeenCalledOnce()
  expect(read).toHaveBeenCalledOnce()
})

it('refuses a source replaced while checking read access before cache lookup', async () => {
  metadata.mockResolvedValueOnce({ ...source, version: 'v2' })
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal))
    .rejects.toMatchObject({ code: 'document-render/failed', details: { reason: 'source-changed' } })
  expect(render).not.toHaveBeenCalled()
})

it('rejects unsupported extensions before reading a source', async () => {
  await expect(ctx.documentRenderController.render(scope, 'report.odt', 'foreground', new AbortController().signal))
    .rejects.toMatchObject({ code: 'document-render/failed', details: { reason: 'unsupported-format' } })
  expect(read).not.toHaveBeenCalled()
})

it.each(['invalid-document', 'output-too-large', 'timeout', 'invalid-output'] as const)('maps %s without returning source or diagnostic bytes', async (code) => {
  render.mockRejectedValueOnce(new OfficeToPdfError(code, 'private engine detail'))
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal))
    .rejects.toMatchObject({ code: 'document-render/failed', message: 'Office conversion failed.', details: { reason: code } })
})

it('cancels before reading and refuses a late authorized read after cancellation', async () => {
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'foreground', AbortSignal.abort())).rejects.toMatchObject({ code: 'gateway/cancelled' })
  expect(read).not.toHaveBeenCalled()
  const entered = Promise.withResolvers<undefined>()
  const release = Promise.withResolvers<typeof source>()
  read.mockImplementationOnce(() => { entered.resolve(undefined); return release.promise })
  const controller = new AbortController()
  const work = ctx.documentRenderController.render(scope, 'report.docx', 'foreground', controller.signal)
  const rejected = expect(work).rejects.toMatchObject({ code: 'gateway/cancelled' })
  await entered.promise
  controller.abort()
  release.resolve(source)
  await rejected
  expect(render).toHaveBeenCalledOnce()
})

it('cancels and joins an outstanding conversion when the controller unloads', async () => {
  const entered = Promise.withResolvers<AbortSignal>()
  const release = Promise.withResolvers<OfficeToPdfResult>()
  render.mockImplementationOnce((_input, signal) => { entered.resolve(signal!); return release.promise })
  const work = ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal)
  const rejected = expect(work).rejects.toMatchObject({ code: 'gateway/cancelled' })
  const signal = await entered.promise
  let disposed = false
  const closing = ctx.fiber.dispose().then(() => { disposed = true })
  try {
    await vi.waitFor(() => { expect(signal.aborted).toBe(true) })
    expect(disposed).toBe(false)
  } finally { release.resolve({ pdf, missingFonts: [], generation, cacheKey }); await rejected; await closing }
})

it('exposes the current renderer generation and refuses busy work before loading source bytes', async () => {
  expect(ctx.documentRenderController.generation(new AbortController().signal)).toBe(generation)
  render.mockRejectedValueOnce(new OfficeToPdfError('busy', 'capacity'))
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'background', new AbortController().signal))
    .rejects.toMatchObject({ code: 'document-render/failed', details: { reason: 'busy' } })
  expect(metadata).toHaveBeenCalledOnce()
  expect(read).not.toHaveBeenCalled()
})

it('refuses bytes when the source changes during the bounded read', async () => {
  metadata.mockResolvedValueOnce(source).mockResolvedValueOnce({ ...source, version: 'v2' })
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal))
    .rejects.toMatchObject({ code: 'document-render/failed', details: { reason: 'source-changed' } })
})

it('classifies a grown queued source as changed without increasing its read reservation', async () => {
  const failure = new RemoteError('workspace-file/too-large', 'File exceeds 4 bytes.', { path: 'report.docx', limit: 4 })
  read.mockRejectedValueOnce(failure)
  metadata.mockResolvedValueOnce(source).mockResolvedValueOnce({ ...source, bytes: 8, version: 'v2' })
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal))
    .rejects.toMatchObject({ code: 'document-render/failed', details: { reason: 'source-changed' } })
  expect(read).toHaveBeenCalledExactlyOnceWith(scope, 'report.docx', 4, expect.any(AbortSignal))
})

it('preserves a genuine bounded-read size failure when source identity is unchanged', async () => {
  const failure = new RemoteError('workspace-file/too-large', 'File exceeds configured size cap.', { path: 'report.docx', limit: 4 })
  read.mockRejectedValueOnce(failure)
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal)).rejects.toBe(failure)
  expect(metadata).toHaveBeenCalledTimes(2)
})

it.each([
  new Error('Source read denied'),
  new RemoteError('workspace-file/not-found', 'Source missing', { path: 'report.docx' }),
])('preserves a non-size bounded-read failure without another metadata query: %s', async (failure) => {
  read.mockRejectedValueOnce(failure)
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal)).rejects.toBe(failure)
  expect(metadata).toHaveBeenCalledOnce()
})

it.each([
  new Error('Current source metadata denied'),
  new RemoteError('workspace-file/not-found', 'Current source missing', { path: 'report.docx' }),
])('preserves a source metadata failure during the size recheck: %s', async (failure) => {
  read.mockRejectedValueOnce(new RemoteError('workspace-file/too-large', 'File exceeds its reservation.', { path: 'report.docx', limit: 4 }))
  metadata.mockResolvedValueOnce(source).mockRejectedValueOnce(failure)
  await expect(ctx.documentRenderController.render(scope, 'report.docx', 'foreground', new AbortController().signal)).rejects.toBe(failure)
  expect(metadata).toHaveBeenCalledTimes(2)
})