const test = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');

const rbacPermissionsScript = fs.readFileSync(require.resolve('../src/web/public/js/rbac-permissions.js'), 'utf8');
const rbacFormTemplate = fs.readFileSync(require.resolve('../src/web/views/settings/rbac/form.hbs'), 'utf8');
const rbacFormViewModel = fs.readFileSync(require.resolve('../src/web/routes/settings/rbac/form-view-model.js'), 'utf8');
const rbacSource = fs.readFileSync(require.resolve('../src/rbac.js'), 'utf8');

test('rbac form exposes bulk permission controls', () => {
  assert.match(rbacFormTemplate, /accordion accordion-flush/);
  assert.match(rbacFormTemplate, /card card-outline card-secondary overflow-hidden/);
  assert.match(rbacFormTemplate, /accordion-item overflow-hidden" data-permission-section/);
  assert.match(rbacFormTemplate, /accordion-body p-0/);
  assert.match(rbacFormTemplate, /table-layout: fixed; width: 100%;/);
  assert.match(rbacFormTemplate, /<col style="width: 5\.5rem;" \/>/);
  assert.match(rbacFormTemplate, /class="text-center"/);
  assert.match(rbacFormTemplate, /data-permission-row-toggle/);
  assert.ok(rbacFormTemplate.includes('text-reset'));
  assert.ok(rbacFormTemplate.includes('color: inherit;'));
  assert.ok(rbacFormTemplate.includes('text-decoration-style: dotted'));
  assert.ok(rbacFormTemplate.includes('aria-label="Role actions"'));
  assert.ok(!rbacFormTemplate.includes('aria-label="Permission actions"'));
  assert.ok(!rbacFormTemplate.includes('showSaveAndClose=false'));
  assert.ok(!rbacFormTemplate.includes('showSaveAndNew=false'));
  assert.ok(!rbacFormTemplate.includes('Select none'));
  assert.ok(!rbacFormTemplate.includes('permission categories'));
  assert.ok(!rbacFormTemplate.includes('btn-link'));
  assert.ok(!rbacFormTemplate.includes('rounded-bottom-3 overflow-hidden'));
  assert.ok(!rbacFormTemplate.includes('table-responsive rounded-bottom-3 overflow-hidden'));
  assert.ok(rbacFormViewModel.includes("label: 'Read'"));
  assert.ok(rbacFormViewModel.includes("label: 'Create'"));
  assert.ok(rbacFormViewModel.includes("label: 'Update'"));
  assert.ok(rbacFormViewModel.includes("label: 'Delete'"));
  assert.ok(rbacFormViewModel.includes("label: 'Allow'"));
  assert.ok(rbacFormViewModel.includes('left.resourceOrder'));
  assert.ok(rbacFormViewModel.includes('section.actions = actionDefinitions.map'));
  assert.ok(rbacFormViewModel.includes('data-async-save-new-url="/rbac/new"'));
  assert.ok(rbacFormViewModel.includes('data-async-save-close-url="/rbac" data-async-save-new-url="/rbac/new"'));
  assert.ok(rbacSource.includes("sectionName: 'Main navigation'"));
  assert.ok(rbacSource.includes("permissions: ["));
  assert.ok(rbacSource.includes("resourceOrder: resource.order"));
});

test('rbac permissions script supports bulk permission selection', () => {
  assert.ok(rbacPermissionsScript.includes('function setRowCheckboxes(row, checked)'));
  assert.ok(rbacPermissionsScript.includes('function toggleRowCheckboxes(row)'));
  assert.ok(rbacPermissionsScript.includes('data-permission-row-toggle'));
  assert.ok(rbacPermissionsScript.includes("toggleRowCheckboxes(findPermissionRow(targetId));"));
  assert.ok(!rbacPermissionsScript.includes('data-permission-select-none'));
  assert.ok(!rbacPermissionsScript.includes('data-permission-section-select-none'));
});

test('rbac duplicate route exists', () => {
  const rbacRoutes = fs.readFileSync(require.resolve('../src/web/routes/admin/rbac.js'), 'utf8');
  const duplicateHelpers = fs.readFileSync(require.resolve('../src/web/routes/settings/rbac/duplicate.js'), 'utf8');

  assert.match(rbacRoutes, /\/rbac\/:id\/duplicate/);
  assert.ok(rbacRoutes.includes("requirePermission('rbac.create')"));
  assert.ok(duplicateHelpers.includes('buildDuplicateRoleName'));
  assert.ok(duplicateHelpers.includes('buildDuplicateRole'));
});