// @requirements REQ-PRODUCT-CONTRACT-ACTIONS REQ-PRODUCT-DEMO-WORKSPACE REQ-PRODUCT-A11Y REQ-PRODUCT-MOBILE
import {test} from 'node:test';
import assert from 'node:assert/strict';
import {readFile} from 'node:fs/promises';
import {JSDOM} from 'jsdom';
import * as contracts from 'notabenda/contracts';
import {serveHost} from '../host.mjs';
import {DemoWorkspace} from '../worker.mjs';
import {createSyntheticStorage} from '../../packages/notabenda-cf/examples/synthetic.mjs';
import data from '../dist/server-data.json' with {type:'json'};
const request=(path,init={})=>new Request('https://demo.example.test'+path,init);
function environment(){
 const objects=new Map(),env={ADMIN_KEY:'b'.repeat(64),DEMO_PROVISION_LIMITER:{limit:async()=>({success:true})},WORKSPACE:{idFromName(){throw Error('Operational storage selected');}},ASSETS:{async fetch(req){let path=new URL(req.url).pathname;if(!path.endsWith('.json'))path=path.replace(/\/$/u,'')+'/index.html';try{return new Response(await readFile(new URL('../dist/public'+path,import.meta.url)),{headers:{'Content-Type':path.endsWith('.json')?'application/json':'text/html'}});}catch{return new Response('Not found',{status:404});}}}};
 env.DEMO_WORKSPACES={idFromName:name=>name,get(name){if(!objects.has(name)){const storage=createSyntheticStorage([]);storage.setAlarm=async()=>{};storage.deleteAll=async()=>{for(const key of (await storage.list({prefix:'',limit:10000})).keys())await storage.delete(key);};objects.set(name,{storage,workspace:new DemoWorkspace({storage,blockConcurrencyWhile:fn=>fn()},env)});}return {fetch:req=>objects.get(name).workspace.fetch(req)};}};return {env,objects};
}
async function session(env,route='withdrawal'){const response=await serveHost(request('/contract-actions/'+route),env);assert.equal(response.status,200);const dom=new JSDOM(await response.text()),cookie=response.headers.get('Set-Cookie').split(';')[0],generation=dom.window.document.querySelector('meta[name=notabenda-demo-generation]').content,operation=dom.window.document.querySelector('meta[name=notabenda-contract-operation]').content;dom.window.close();return {cookie,generation,operation};}
const headers=s=>({Cookie:s.cookie,'X-Notabenda-Demo-Generation':s.generation});
const body=route=>({schemaVersion:1,definitionId:data.contractActions.definitions[route].definitionId,requestId:crypto.randomUUID(),clientAt:new Date().toISOString(),fields:{name:'Morgan Pine',contract:'Sample order JN-25001',email:'morgan@example.test',...(route==='cancellation'?{cancellation:{kind:'ordinary',reason:'',ending:''}}:{})}});
const post=(env,s,route,value,extra={})=>serveHost(request('/demo/contracts/'+route,{method:'POST',headers:{...headers(s),Origin:'https://demo.example.test','Content-Type':'application/json','X-Notabenda-Demo':'1',...extra},body:JSON.stringify(value)}),env);

test('contract pages use the shared light/midnight design, exact public references and no automatic cookie/terms acceptance',async()=>{
 for(const prefix of ['','dark/'])for(const route of ['withdrawal','cancellation']){const html=await readFile(new URL('../dist/public/'+prefix+'contract-actions/'+route+'/index.html',import.meta.url),'utf8'),dom=new JSDOM(html);assert.match(html,/nb-demo-contracts/);assert.ok(dom.window.document.querySelector('script[src="/assets/contract-actions.mjs"]'));assert.equal(dom.window.document.querySelectorAll('input[type=checkbox]').length,0);assert.match(html,/example.test/);assert.doesNotMatch(html,/href="\/backoffice/);dom.window.close();}
 for(const kind of ['privacy','cookies','terms'])assert.doesNotMatch(await readFile(new URL('../dist/public/contract-actions/'+kind+'/index.html',import.meta.url),'utf8'),/<script/);
});

test('admitted contract declarations stay in their own session DO, retain exact retry receipts and expose readable separate handoff states only in private admin',async()=>{
 const {env,objects}=environment(),a=await session(env),b=await session(env);assert.notEqual(a.operation,b.operation);const command=body('withdrawal'),response=await post(env,a,'withdrawal',command);assert.equal(response.status,200,await response.clone().text());const receipt=await response.json();assert.equal(receipt.operationRef,a.operation);assert.equal(receipt.stage,'received');const retry=await post(env,a,'withdrawal',command);assert.deepEqual(await retry.json(),receipt);
 const details=await serveHost(request('/demo/admin/contracts/record?id='+receipt.id,{headers:headers(a)}),env);assert.equal(details.status,200);const html=await details.text();assert.match(html,/Declaration details/);assert.match(html,/Electronic acknowledgement/);assert.match(html,/Application handoff/);assert.match(html,/Morgan Pine/);assert.match(html,/Pending dispatch/);assert.doesNotMatch(html,/href="\/backoffice/);
 assert.equal((await serveHost(request('/demo/admin/contracts/record?id='+receipt.id,{headers:headers(b)}),env)).status,404);assert.equal((await post(env,{...a,cookie:b.cookie},'withdrawal',command)).status,409);
 const prefix='notabenda/contracts/'+data.contractActions.artifact.manifest.siteId+'/events/',first=[...objects.values()][0],before=await first.storage.list({prefix,limit:100});await serveHost(request('/demo/admin/contracts',{headers:headers(a)}),env);assert.deepEqual(await first.storage.list({prefix,limit:100}),before,'seed resume must not retry uncertain jobs');
 const noRealEmail=body('withdrawal');noRealEmail.fields.email='morgan@example.com';assert.equal((await post(env,a,'withdrawal',noRealEmail)).status,400);assert.equal((await post(env,a,'withdrawal',body('withdrawal'),{Origin:'https://other.example.test'})).status,400);assert.equal((await serveHost(request('/backoffice/contracts',{headers:headers(a)}),env)).status,401);
});

test('contract intake bounds full declarations separately, rejects oversize input before recording and keeps exact delivery search states',async()=>{
 const {env,objects}=environment(),s=await session(env,'cancellation'),command=body('cancellation');command.fields.contract='x'.repeat(1800);command.fields.cancellation.kind='extraordinary';command.fields.cancellation.reason='y'.repeat(1800);const response=await post(env,s,'cancellation',command);assert.equal(response.status,200,await response.clone().text());
 const huge=body('cancellation');huge.fields.contract='x'.repeat(17000);const before=await [...objects.values()][0].storage.get('demo/command-count');assert.equal((await post(env,s,'cancellation',huge)).status,400);assert.equal(await [...objects.values()][0].storage.get('demo/command-count'),before);
 const search=await serveHost(request('/demo/admin/contracts?q=contract%3Aconfirmation-uncertain',{headers:headers(s)}),env);assert.equal(search.status,200);const html=await search.text();assert.match(html,/Rowan Ellis/);assert.doesNotMatch(html,/Morgan Pine/);const dom=new JSDOM(html),filters=dom.window.document.querySelector('nav[aria-label="Contract handoff states"]');assert.ok(filters);assert.equal(filters.querySelector('[aria-current=page]').textContent,'Confirmation uncertain');assert.match(filters.textContent,/Both providers accepted/);dom.window.close();
});


test('the example retains one exact tab-scoped recovery command across reload and preserves the mounted view through persisted pagehide',async()=>{
 const {env}=environment(),s=await session(env),source=(await readFile(new URL('../../examples/contract-actions/client.mjs',import.meta.url),'utf8')).replace(/^import .*;$/mu,''),boot=new (Object.getPrototypeOf(async function(){}).constructor)('document','sessionStorage','fetch','addEventListener','createContractAction','mountContractAction','ContractActionError',source),sent=[],shared=new Map(),storage={getItem:key=>shared.get(key)??null,setItem:(key,value)=>shared.set(key,value)};
 let action;
 async function open(){const dom=new JSDOM(`<meta name="notabenda-demo-generation" content="${s.generation}"><meta name="notabenda-contract-operation" content="${s.operation}"><section data-contract-route="withdrawal"><div id="contract-action"></div><a id="contract-record" hidden></a></section>`);await boot(dom.window.document,storage,async(path,options)=>{if(path.endsWith('definition.json'))return Response.json(data.contractActions.definitions.withdrawal);sent.push(JSON.parse(options.body));return post(env,s,'withdrawal',JSON.parse(options.body));},dom.window.addEventListener.bind(dom.window),(definition,options)=>action=contracts.createContractAction(definition,options),contracts.mountContractAction,contracts.ContractActionError);return dom;}
 const first=await open();action.review();const original=await action.submit();assert.equal(sent.length,1);assert.equal(shared.size,1);assert.equal(first.window.document.querySelector('.nb-contract-copy').hidden,false);first.window.dispatchEvent(new first.window.PageTransitionEvent('pagehide',{persisted:true}));assert.ok(first.window.document.querySelector('.nb-contract-action'));assert.equal(action.getSnapshot().status,'received');first.window.dispatchEvent(new first.window.PageTransitionEvent('pagehide',{persisted:false}));assert.equal(first.window.document.querySelector('.nb-contract-action'),null);first.window.close();
 const resumed=await open();assert.equal(action.getSnapshot().status,'uncertain');assert.equal(sent.length,1,'reload must not send any command');assert.equal(resumed.window.document.querySelector('button[type=submit]').textContent,'Retry the same request');assert.match(resumed.window.document.body.textContent,/retained a previous submission/);assert.equal(resumed.window.document.querySelector('#contract-record').hidden,false);assert.deepEqual(await action.submit(),original);assert.deepEqual(sent[1],sent[0]);action.destroy();resumed.window.close();
 shared.clear();let writesAllowed=false;storage.setItem=(key,value)=>{if(!writesAllowed)throw new DOMException('Storage full','QuotaExceededError');shared.set(key,value);};const blocked=await open();action.review();await assert.rejects(action.submit(),error=>error.code==='recording-uncertain');assert.equal(sent.length,2,'failed persistence must not reach POST');const sealed=action.getRecoveryRequest();assert.match(blocked.window.document.body.textContent,/No recording request was sent/);writesAllowed=true;const repaired=await action.submit();assert.equal(repaired.requestId,sealed.requestId);assert.equal(sent.length,3);assert.equal(sent[2].requestId,sealed.requestId);action.destroy();blocked.window.close();
 storage.getItem=()=>{throw new DOMException('Storage disabled','SecurityError');};action=undefined;const unreadable=await open();assert.equal(action,undefined,'unreadable retained state must not start a fresh controller');assert.equal(sent.length,3);assert.equal(unreadable.window.document.querySelector('form'),null);assert.match(unreadable.window.document.body.textContent,/No declaration has been sent from this page/);unreadable.window.close();
});