import test from "node:test";
import assert from "node:assert/strict";
import { readFileSync } from "node:fs";

import {
  buildBossAgentStatus,
  mergeBossAgentNativePermissionOverrides,
  renderBossAgentHtml,
  renderBossAgentHtmlWithQr,
} from "../local-agent/boss-agent-status.mjs";

test("boss-agent status exposes unbound QR binding and local permission states", () => {
  const status = buildBossAgentStatus(
    {
      deviceId: "macbook-air",
      name: "MacBook Air",
      avatar: "A",
      account: "",
      controlPlaneUrl: "https://boss.hyzq.net",
      pairingCode: "482913",
      token: "",
      primaryApiLabel: "DeepSeek V4",
      backupApiLabel: "未启用",
      licenseExpiresAt: "2027-05-12T00:00:00.000Z",
    },
    {
      lastHeartbeatOk: true,
      lastHeartbeatStatus: 200,
      lastHeartbeatAt: "2026-05-12T05:00:00.000Z",
      lastSkills: [
        { name: "bb-browser", category: "MacBook Air", path: "/Users/jas/.codex/skills/bb-browser/SKILL.md" },
        { name: "skill-installer", category: ".system", path: "/Users/jas/.codex/skills/.system/skill-installer/SKILL.md" },
      ],
      lastSkillSyncOk: true,
      lastSkillSyncAt: "2026-05-12T05:30:00.000Z",
    },
    {
      permissions: {
        accessibility: "granted",
        screenRecording: "missing",
        automation: "unknown",
      },
      now: "2026-05-12T06:00:00.000Z",
    },
  );

  assert.equal(status.appName, "boss-agent");
  assert.equal(status.binding.bound, false);
  assert.equal(status.binding.qrPayload.includes("pairingCode=482913"), true);
  assert.equal(status.server.ok, true);
  assert.equal(status.api.primary, "DeepSeek V4");
  assert.equal(status.api.backup, "未启用");
  assert.equal(status.license.status, "pending_binding");
  assert.equal(status.skills.total, 2);
  assert.equal(status.skills.syncOk, true);
  assert.equal(status.permissionReadiness.coreReady, false);
  assert.equal(status.permissionReadiness.fullControlReady, false);
  assert.match(status.permissionReadiness.summary, /基础桌面控制/);
  assert.equal(status.permissionSetup.mode, "minimal_computer_use");
  assert.equal(status.permissionSetup.silentUseReady, false);
  assert.equal(status.permissionSetup.actions.some((action) => action.key === "fullDiskAccess"), true);
  assert.equal(
    status.permissionSetup.actions.every((action) => action.settingsUrl.startsWith("x-apple.systempreferences:")),
    true,
  );
  assert.equal(
    status.permissionSetup.actions.find((action) => action.key === "localNetwork")?.settingsUrl,
    "x-apple.systempreferences:com.apple.settings.PrivacySecurity.extension?privacy-localnetwork",
  );
  assert.equal(
    status.permissionSetup.actions.find((action) => action.key === "inputMonitoring")?.settingsUrl,
    "x-apple.systempreferences:com.apple.settings.PrivacySecurity.extension?Privacy_ListenEvent",
  );
  assert.equal(
    status.permissionSetup.actions.find((action) => action.key === "screenRecording")?.settingsUrl,
    "x-apple.systempreferences:com.apple.settings.PrivacySecurity.extension?Privacy_ScreenCapture",
  );
  assert.deepEqual(
    status.permissions.items.map((item) => [item.key, item.status]),
    [
      ["accessibility", "granted"],
      ["screenRecording", "missing"],
    ],
  );
  assert.deepEqual(
    status.permissions.extendedItems.slice(0, 1).map((item) => [item.key, item.status]),
    [
      ["automation", "unknown"],
    ],
  );
});

test("boss-agent status treats token-backed devices as bound and renders enterprise UI", () => {
  const status = buildBossAgentStatus(
    {
      deviceId: "mac-studio",
      name: "Mac Studio",
      avatar: "M",
      account: "krisolo",
      controlPlaneUrl: "https://boss.hyzq.net",
      token: "boss-secret-token",
      primaryApiLabel: "DeepSeek V4",
      backupApiLabel: "OpenAI 备用",
      license: {
        enterpriseName: "默认公司",
        status: "valid",
        expiresAt: "2027-05-12T00:00:00.000Z",
      },
    },
    {
      lastHeartbeatOk: true,
      lastHeartbeatStatus: 200,
      lastHeartbeatAt: "2026-05-12T05:00:00.000Z",
      lastSkills: [
        { name: "bb-browser", category: "MacBook Air", path: "/Users/jas/.codex/skills/bb-browser/SKILL.md" },
        { name: "skill-installer", category: ".system", path: "/Users/jas/.codex/skills/.system/skill-installer/SKILL.md" },
      ],
      lastSkillSyncOk: true,
    },
    {
      permissions: {
        accessibility: "granted",
        screenRecording: "granted",
        automation: "granted",
        fullDiskAccess: "missing",
        inputMonitoring: "unknown",
      },
      now: "2026-05-12T06:00:00.000Z",
    },
  );

  assert.equal(status.binding.bound, true);
  assert.equal(status.binding.account, "krisolo");
  assert.equal(status.license.status, "valid");
  assert.equal(status.license.enterpriseName, "默认公司");

  const html = renderBossAgentHtml(status);
  assert.match(html, /boss-agent/);
  assert.match(html, /企业电脑接入端/);
  assert.match(html, /本机权限获取/);
  assert.match(html, /href="\/boss-agent\?tab=permissions"><span>本机权限获取<\/span>/);
  assert.match(html, /href="\/boss-agent\?tab=skills"><span>Skill<\/span>/);
  assert.match(html, /class="active" href="\/boss-agent\?tab=overview"/);
  assert.doesNotMatch(html, /<section class="sidebar-card">/);
  assert.doesNotMatch(html, /<div class="sidebar-title">本机权限获取<\/div>/);
  assert.match(html, /Skill/);
  assert.match(html, /DeepSeek V4/);
  assert.match(html, /默认公司/);
  assert.doesNotMatch(html, /boss-secret-token/);
  assert.doesNotMatch(html, /<h2>本机电脑权限状态<\/h2>/);
});

test("boss-agent permission and skill menu entries render as separate tab pages", () => {
  const status = buildBossAgentStatus(
    {
      deviceId: "mac-studio",
      name: "Mac Studio",
      avatar: "M",
      account: "krisolo",
      controlPlaneUrl: "https://boss.hyzq.net",
      token: "boss-secret-token",
      primaryApiLabel: "DeepSeek V4",
      license: {
        enterpriseName: "默认公司",
        status: "valid",
      },
    },
    {
      lastHeartbeatOk: true,
      lastSkills: [
        { name: "bb-browser", category: "MacBook Air", path: "/Users/jas/.codex/skills/bb-browser/SKILL.md" },
      ],
      lastSkillSyncOk: true,
    },
    {
      permissions: {
        accessibility: "granted",
        screenRecording: "granted",
        automation: "granted",
        fullDiskAccess: "missing",
      },
    },
  );

  const permissionsHtml = renderBossAgentHtml(status, { activeTab: "permissions" });
  assert.match(permissionsHtml, /class="active" href="\/boss-agent\?tab=permissions"/);
  assert.match(permissionsHtml, /<h2>基础桌面控制授权<\/h2>/);
  assert.match(permissionsHtml, /基础桌面控制已可用/);
  assert.match(permissionsHtml, /扩展权限不会阻塞接管/);
  assert.match(permissionsHtml, /后续静默使用/);
  assert.match(permissionsHtml, /api\/v1\/boss-agent\/permissions\/open\?target=core&amp;returnTab=permissions/);
  assert.match(permissionsHtml, /api\/v1\/boss-agent\/permissions\/open\?target=fullDiskAccess&amp;returnTab=permissions/);
  assert.doesNotMatch(permissionsHtml, /<h2>Skill 部署情况<\/h2>/);

  const skillsHtml = renderBossAgentHtml(status, { activeTab: "skills" });
  assert.match(skillsHtml, /class="active" href="\/boss-agent\?tab=skills"/);
  assert.match(skillsHtml, /<h2>Skill 部署情况<\/h2>/);
  assert.match(skillsHtml, /bb-browser/);
  assert.doesNotMatch(skillsHtml, /<h2>基础桌面控制授权<\/h2>/);
});

test("boss-agent treats accessibility and screen recording as the minimal computer-use permission set", () => {
  const status = buildBossAgentStatus(
    {
      deviceId: "macbook-air",
      name: "MacBook Air",
      account: "krisolo",
      token: "boss-secret-token",
    },
    {
      lastHeartbeatOk: true,
    },
    {
      permissions: {
        accessibility: "granted",
        screenRecording: "granted",
        automation: "missing",
        fullDiskAccess: "missing",
        inputMonitoring: "missing",
        microphone: "missing",
        camera: "missing",
        localNetwork: "missing",
      },
    },
  );

  assert.equal(status.permissionReadiness.coreReady, true);
  assert.equal(status.permissionSetup.silentUseReady, true);
  assert.equal(status.permissionSetup.primaryAction.href, "/api/v1/boss-agent/permissions/open?target=core&returnTab=permissions");
  assert.match(status.permissionReadiness.summary, /基础桌面控制已可用/);
  assert.equal(status.permissionSetup.actions.find((action) => action.key === "automation")?.requiredForSilentControl, false);
  assert.equal(status.permissionSetup.actions.find((action) => action.key === "fullDiskAccess")?.requiredForSilentControl, false);
  assert.deepEqual(status.permissionSetup.missingRequiredKeys, []);
  assert.deepEqual(
    status.permissions.items.map((item) => item.key),
    ["accessibility", "screenRecording"],
  );
});

test("boss-agent native permission overrides update app-owned camera and microphone state", () => {
  const merged = mergeBossAgentNativePermissionOverrides(
    {
      accessibility: "missing",
      screenRecording: "missing",
      automation: "granted",
      camera: "unknown",
      microphone: "unknown",
    },
    new URLSearchParams({
      nativeAccessibility: "granted",
      nativeCamera: "granted",
      nativeMicrophone: "missing",
      nativeScreenRecording: "granted",
      nativeInputMonitoring: "granted",
    }),
  );

  assert.deepEqual(merged, {
    accessibility: "granted",
    screenRecording: "granted",
    automation: "granted",
    camera: "granted",
    microphone: "missing",
    inputMonitoring: "granted",
  });
});

test("boss-agent unbound HTML renders a real scannable QR image when qrcode is available", async () => {
  const status = buildBossAgentStatus(
    {
      deviceId: "macbook-air",
      name: "MacBook Air",
      controlPlaneUrl: "https://boss.hyzq.net",
      pairingCode: "482913",
    },
    {
      lastHeartbeatOk: true,
      lastHeartbeatStatus: 200,
    },
    {
      permissions: {},
    },
  );

  const html = await renderBossAgentHtmlWithQr(status);
  assert.match(html, /data:image\/png;base64/);
  assert.match(html, /Boss APP 绑定二维码/);
});

test("boss-agent mac app intercepts permission links and triggers native app permission requests", () => {
  const swiftSource = readFileSync("apps/boss-agent-mac/Sources/BossAgentApp.swift", "utf8");
  const buildScript = readFileSync("scripts/build-boss-agent-mac-app.sh", "utf8");

  assert.match(swiftSource, /decidePolicyFor navigationAction/);
  assert.match(swiftSource, /api\/v1\/boss-agent\/permissions\/open/);
  assert.match(swiftSource, /NSApp\.activate\(ignoringOtherApps: true\)/);
  assert.match(swiftSource, /NSAppleEventManager\.shared\(\)\.setEventHandler/);
  assert.match(swiftSource, /kAEGetURL/);
  assert.match(swiftSource, /handleGetUrlEvent/);
  assert.match(swiftSource, /--request-permission/);
  assert.match(swiftSource, /--return-tab/);
  assert.match(swiftSource, /target == "core"/);
  assert.match(swiftSource, /lastPermissionRequestTarget/);
  assert.match(swiftSource, /AXIsProcessTrustedWithOptions/);
  assert.match(swiftSource, /CGRequestScreenCaptureAccess/);
  assert.match(swiftSource, /AVCaptureDevice\.requestAccess\(for: \.audio/);
  assert.match(swiftSource, /AVCaptureDevice\.requestAccess\(for: \.video/);
  assert.match(swiftSource, /UNUserNotificationCenter\.current\(\)\.requestAuthorization/);
  assert.match(swiftSource, /import IOKit\.hid/);
  assert.match(swiftSource, /CGRequestListenEventAccess\(\)/);
  assert.match(swiftSource, /CGPreflightListenEventAccess\(\)/);
  assert.match(swiftSource, /NSEvent\.addGlobalMonitorForEvents\(matching: \[\.keyDown\]\)/);
  assert.match(swiftSource, /CGEventSource\.keyState\(\.combinedSessionState/);
  assert.match(swiftSource, /IOHIDManagerOpen\(manager/);
  assert.match(swiftSource, /kHIDUsage_GD_Keyboard/);
  assert.match(swiftSource, /IOHIDRequestAccess\(kIOHIDRequestTypeListenEvent\)/);
  assert.match(swiftSource, /IOHIDCheckAccess\(kIOHIDRequestTypeListenEvent\)/);
  assert.match(swiftSource, /CGEvent\.tapCreate/);
  assert.match(swiftSource, /NSWorkspace\.shared\.open/);
  assert.match(swiftSource, /deadline: \.now\(\) \+ 0\.45/);
  assert.match(swiftSource, /loadAgentPanel\(tab:/);
  assert.match(swiftSource, /returnTab/);
  assert.match(swiftSource, /nativePermissionQueryItems/);
  assert.match(swiftSource, /nativeCamera/);
  assert.match(swiftSource, /nativeMicrophone/);
  assert.match(swiftSource, /nativeInputMonitoring/);
  assert.match(swiftSource, /privacy-localnetwork/);
  assert.match(swiftSource, /com\.apple\.settings\.PrivacySecurity\.extension\?Privacy_ListenEvent/);
  assert.doesNotMatch(swiftSource, /com\.apple\.preference\.security\?Privacy_ListenEvent/);
  assert.match(swiftSource, /func application\(_ application: NSApplication, open urls: \[URL\]\)/);
  assert.match(swiftSource, /isBossAgentDeepLink/);
  assert.match(swiftSource, /AVCaptureDevice\.authorizationStatus\(for: \.video/);
  assert.match(swiftSource, /AVCaptureDevice\.authorizationStatus\(for: \.audio/);
  assert.match(swiftSource, /NSApplication\.didBecomeActiveNotification/);
  assert.match(buildScript, /NSMicrophoneUsageDescription/);
  assert.match(buildScript, /NSCameraUsageDescription/);
  assert.match(buildScript, /NSAppleEventsUsageDescription/);
  assert.match(buildScript, /NSLocalNetworkUsageDescription/);
  assert.match(buildScript, /NSInputMonitoringUsageDescription/);
  assert.match(buildScript, /framework IOKit/);
  assert.match(buildScript, /CFBundleURLTypes/);
  assert.match(buildScript, /boss-agent/);
  assert.match(buildScript, /CFBundleIconFile/);
  assert.match(buildScript, /BossAgent\.icns/);
  assert.match(buildScript, /iconutil -c icns/);
  assert.match(buildScript, /BOSS_AGENT_CODESIGN_IDENTITY/);
  assert.match(buildScript, /security find-identity -v -p codesigning/);
  assert.match(buildScript, /falling back to ad-hoc signing/);
  assert.match(buildScript, /codesign --force --deep --timestamp=none --sign "\$SIGNING_IDENTITY" "\$APP_DIR"/);

  const statusSource = readFileSync("local-agent/boss-agent-status.mjs", "utf8");
  assert.match(statusSource, /boss-agent:\/\/permissions\/open/);
  assert.match(statusSource, /com\.hyzq\.boss\.agent/);
  assert.match(statusSource, /"-na"/);
  assert.match(statusSource, /--request-permission/);
  assert.match(statusSource, /\/Applications\/boss-agent\.app/);
  assert.match(statusSource, /nativeRequest/);
});