import { expect } from "bun:test";
import { join } from "node:path";
import { forEachDb } from "./helpers";
import { FIXTURES, makeApp } from "./app";
import { extraCourses } from "./courses";

const JPEG = new Uint8Array([0xff, 0xd8, 0xff, 0xe0, 0, 0x10, 0x4a, 0x46, 0x49, 0x46, 0, 1, 0xff, 0xd9]);

forEachDb("the library falls back to the importer's cover candidate, served only to users who can view the course", async (db) => {
  const dir = await extraCourses();
  const { call, signUp, ctx } = await makeApp(db, [FIXTURES, dir]);
  const covers = (id: string) => join(ctx.config.cacheDir, "covers", id);
  await Bun.write(join(covers("sample"), "deck-d1.jpg"), JPEG);
  await Bun.write(join(covers("sample"), "frame-2.jpg"), JPEG);
  await Bun.write(join(covers("sample"), "frame-10.jpg"), new Uint8Array([1]));
  await Bun.write(join(covers("secret"), "frame-1.jpg"), JPEG);
  await Bun.write(join(covers("sample"), "notes.txt"), "not a cover");

  const lib = async (cookie?: string) => ((await (await call("GET", "/api/library", { cookie })).json()) as { courses: { id: string; coverUrl: string | null }[] }).courses;
  const sample = (await lib()).find((c) => c.id === "sample")!;
  expect(sample.coverUrl).toBe("/api/courses/sample/cover");
  const r = await call("GET", "/api/courses/sample/cover");
  expect(r.status).toBe(200);
  expect(r.headers.get("content-type")).toBe("image/jpeg");
  expect(r.headers.get("x-content-type-options")).toBe("nosniff");
  expect(new Uint8Array(await r.arrayBuffer())).toEqual(JPEG); // frame-2 (frames first, numeric order), not frame-10 or the deck
  expect((await (await call("GET", "/api/courses/sample")).json()).coverUrl).toBe("/api/courses/sample/cover");

  // restricted: 404 for anonymous users and learners without access, 200 for the owner
  const owner = await signUp("owner@x.test");
  const learner = await signUp("lea@x.test");
  expect((await call("GET", "/api/courses/secret/cover")).status).toBe(404);
  expect((await call("GET", "/api/courses/secret/cover", { cookie: learner })).status).toBe(404);
  expect((await call("GET", "/api/courses/secret/cover", { cookie: owner })).status).toBe(200);
  expect((await lib(owner)).find((c) => c.id === "secret")!.coverUrl).toBe("/api/courses/secret/cover");
  // no candidate: no cover, and the route is 404
  expect((await lib(owner)).find((c) => c.id === "gated")!.coverUrl).toBeNull();
  expect((await call("GET", "/api/courses/gated/cover", { cookie: owner })).status).toBe(404);
  expect((await call("GET", "/api/courses/..%2Fsample/cover", { cookie: owner })).status).toBe(404);
});