const assert = require("node:assert/strict");
const { test } = require("node:test");
const { loadBackground, response } = require("./support/characterization.cjs");
const { loadApplication } = require("./support/application.cjs");
const flush = () => new Promise(resolve => setImmediate(resolve));

for (const family of ["chrome", "firefox"]) {
  test(`${family}: WWB-TS selection, fixed workload header, first-page GET and masked debug`, async () => {
    const calls = [];
    const h = loadBackground({ family, fetch: async (url, options) => {
      calls.push({ url, options });
      if (url.endsWith("consumerTokenService")) return response([
        { tokenService: "ACCP-TS", uiaasHeader: { value: "summary" } },
        { tokenService: "OCICONS-TS", uiaasHeader: { value: "consumption" } },
        { tokenService: "WWB-TS", uiaasHeader: { label: "ignored-label", value: "synthetic-wwb" } }
      ]);
      return response({ actions: [{ id: 1, name: "TEST" }], totalCount: 20, hasNext: true });
    } });
    const auth = await h.dispatch({ type: "opportunitiesExtension.requestConsumerTokenService" });
    assert.equal(auth.authorizations.workloadActions.value, "synthetic-wwb");
    const result = await h.dispatch({ type: "opportunitiesExtension.requestWlActions", revnId: "12345", authorization: auth.authorizations.workloadActions });
    assert.equal(result.ok, true);
    assert.equal(result.hasNext, true);
    assert.equal(result.actions.length, 1);
    assert.equal(calls.length, 2, "no pagination");
    assert.equal(calls[1].url, "https://spa.oracle.com/oalcrm/web/api/provider-proxy/wwb-provider/service/workbench-proxy/wwb/mgmt/actions?parentType=WORKLOAD&parentId=12345");
    assert.equal(calls[1].options.method, "GET");
    assert.equal(calls[1].options.headers["Wwb-Provider-Authorization"], "synthetic-wwb");
    assert.equal(calls[1].options.headers.Authorization, undefined);
    assert.equal(result.debugRequests[0].name, "requestWlActions");
    assert.equal(result.debugRequests[0].requestHeaders["Wwb-Provider-Authorization"], "(present)");
  });
}

test("workload actions reject missing credentials, invalid ids, HTTP/network/JSON failures", async () => {
  for (const fetch of [
    async () => { throw new Error("Synthetic network failure"); },
    async () => new Response("Denied", { status: 401 }),
    async () => new Response("Denied", { status: 403 }),
    async () => new Response("<html>Login</html>"),
    async () => response({ actions: null, hasNext: false })
  ]) {
    const h = loadBackground({ fetch });
    const result = await h.dispatch({ type: "opportunitiesExtension.requestWlActions", revnId: "123", authorization: { value: "synthetic" } });
    assert.equal(result.ok, false);
    assert.equal(result.debugRequests.length, 1);
  }
  const h = loadBackground({ fetch: () => assert.fail("Unexpected network") });
  for (const fields of [{ revnId: "123" }, { revnId: "bad&id=2", authorization: { value: "synthetic" } }]) {
    assert.equal((await h.dispatch({ type: "opportunitiesExtension.requestWlActions", ...fields })).ok, false);
  }
});

function contentFixture(send) {
  const app = loadApplication("content", { document: { createElement: () => ({ attributes: {}, setAttribute(k, v) { this.attributes[k] = v; } }) } });
  app.authContentSession.requestConsumerTokenServiceOnce = async () => ({ workloadActions: { value: "synthetic-wwb" } });
  app.authSessionState.principal = "test@example.invalid";
  app.platformContentMessages.sendRuntimeMessage = send;
  app.debugContentView.renderDebugPanel = () => {};
  app.productsContentJobs.queueProductsTableRender = () => {};
  return app;
}

test("actions aggregate all products, share RevnId queries across Reference changes and restart on reopen", async () => {
  const calls = [];
  const app = contentFixture(async message => {
    calls.push(message);
    return { ok: true, hasNext: false, actions: message.revnId === "1" ? [{ id: 1, owner: "test@example.invalid", name: "<script>safe</script>" }] : [] };
  });
  const products = { items: [{ RevnId: "1" }, { RevnId: 2 }, { RevnId: "1" }] };
  app.productsContentState.opptyProductsByNumber.set("A", products);
  app.opportunityWorkloadActions.loadProducts(products);
  assert.equal(app.opportunityWorkloadActions.createBadge("A").textContent, "Act ...");
  await flush();
  assert.equal(calls.length, 2);
  assert.equal(calls[0].authorization.value, "synthetic-wwb");
  const badge = app.opportunityWorkloadActions.createBadge("A");
  assert.equal(badge.textContent, "\u2705 Act");
  assert.match(badge.title, /<script>safe<\/script>/);
  app.opportunityWorkloadActions.loadProducts(products);
  await flush();
  assert.equal(calls.length, 2);
  app.productsContentState.opptyProductsByNumber.set("B", { items: [{ RevnId: 2 }] });
  assert.equal(app.opportunityWorkloadActions.createBadge("B").textContent, "\u26d4 Act");
  app.opportunityWorkloadActions.reset(false);
  app.opportunityWorkloadActions.loadProducts(products);
  await flush();
  assert.equal(calls.length, 2);
  app.opportunityWorkloadActions.reopen();
  await flush();
  assert.equal(calls.length, 4);
  assert.equal(app.debugContentView.getRequestCategory({ name: "requestWlActions" }), "actions");
});

test("errors, missing ids and partial empty pages never appear as confirmed absence", async () => {
  for (const result of [{ ok: false, error: "Synthetic" }, { ok: true, actions: [], hasNext: true }]) {
    const app = contentFixture(async () => result);
    const products = { items: [{ RevnId: "1" }] };
    app.productsContentState.opptyProductsByNumber.set("A", products);
    app.opportunityWorkloadActions.loadProducts(products);
    await flush();
    assert.equal(app.opportunityWorkloadActions.createBadge("A").textContent, "Act ?");
    app.productsContentState.opptyProductsByNumber.set("A", { items: [{}] });
    assert.equal(app.opportunityWorkloadActions.createBadge("A").textContent, "Act ?");
  }
});

test("Act requires an owner matching tokenrelay principal while tooltip retains every action", async () => {
  const actions = [
    { id: 1, name: "Other action", owner: "other@example.invalid", ownerEmail: "test@example.invalid" },
    { id: 2, name: "My action", owner: "test@example.invalid", ownerEmail: "different@example.invalid" }
  ];
  const app = contentFixture(async () => ({ ok: true, actions, hasNext: false }));
  const products = { items: [{ RevnId: "1" }] };
  app.productsContentState.opptyProductsByNumber.set("A", products);
  app.opportunityWorkloadActions.loadProducts(products);
  await flush();
  const badge = () => app.opportunityWorkloadActions.createBadge("A");
  assert.equal(badge().textContent, "\u2705 Act");
  assert.match(badge().title, /Other action/);
  assert.match(badge().title, /My action/);
  app.authSessionState.principal = "different@example.invalid";
  assert.equal(badge().textContent, "\u26d4 Act", "ownerEmail must not determine ownership");
  assert.match(badge().title, /Other action/);
  assert.match(badge().title, /My action/);
  app.authSessionState.principal = "";
  assert.equal(badge().textContent, "Act ?");
});

test("general tokenrelay retains principal without changing access-token return or accepting sales-common identity", async () => {
  let payload = { access_token: "synthetic-token", principal: "test@example.invalid" };
  const app = loadApplication("content", { fetch: async () => response(payload) });
  app.authXsrfContent.getXsrfToken = async () => ({ token: "synthetic-xsrf" });
  app.debugContentView.renderDebugPanel = () => {};
  assert.equal(await app.authTokenRelay.requestTokenRelay(), "synthetic-token");
  assert.equal(app.authSessionState.principal, "test@example.invalid");
  payload = { access_token: "scoped-token", principal: "other@example.invalid", expires_in: 3600 };
  await app.authTokenRelay.requestTokenRelay({ url: `${app.contracts.TOKEN_RELAY_URL}?scopesfq=synthetic`, includeExpiry: true });
  assert.equal(app.authSessionState.principal, "test@example.invalid");
  payload = { access_token: "synthetic-token" };
  await app.authTokenRelay.requestTokenRelay();
  assert.equal(app.authSessionState.principal, "");
});

test("actions queue caps concurrency and discards results/queued jobs from closed modals", async () => {
  const pending = [];
  const app = contentFixture(() => new Promise(resolve => pending.push(resolve)));
  const products = { items: Array.from({ length: 8 }, (_, i) => ({ RevnId: String(i + 1) })) };
  app.productsContentState.opptyProductsByNumber.set("A", products);
  app.opportunityWorkloadActions.loadProducts(products);
  await flush();
  assert.equal(pending.length, 4);
  app.opportunityWorkloadActions.reset(false);
  pending.forEach(resolve => resolve({ ok: true, hasNext: false, actions: [{ id: 1 }] }));
  await flush();
  assert.equal(pending.length, 4);
  assert.equal(app.opportunityWorkloadActions.createBadge("A"), null);
});

test("product progress triggers Actions for cached products and ignores stale product jobs", async () => {
  let listener;
  const calls = [];
  const app = loadApplication("content", {
    document: { getElementById: () => null },
    window: { requestAnimationFrame() {} },
    chrome: { runtime: { onMessage: { addListener(fn) { listener = fn; } } } }
  });
  app.authContentSession.requestConsumerTokenServiceOnce = async () => ({ workloadActions: { value: "synthetic" } });
  app.platformContentMessages.sendRuntimeMessage = async message => {
    calls.push(message);
    return { ok: true, actions: [], hasNext: false };
  };
  app.productsContentState.currentProductsRequestId = "current";
  app.productsContentJobs.ensureProductsBackgroundMessageHandler();
  const message = { type: app.messageTypes?.opptyProductsProgress || "opportunitiesExtension.opptyProductsProgress",
    requestId: "current", optyNumber: "A", items: [{ RevnId: "123" }], fromCache: true };
  listener({ ...message, requestId: "old" });
  await flush();
  assert.equal(calls.length, 0);
  listener(message);
  await flush();
  assert.equal(calls.length, 1);
  assert.equal(calls[0].type, "opportunitiesExtension.requestWlActions");
  assert.equal(calls[0].revnId, "123");
});