<?php

use App\Enums\PurchasingRole;
use App\Models\Department;
use App\Models\Tenant;
use App\Models\User;
use App\Services\OrganizationAccess;
use App\Services\OrganizationActivationPreview;
use App\Services\WorkContext;
use Illuminate\Support\Facades\DB;
use Inertia\Testing\AssertableInertia as Assert;

test('synthetic pilot access proposal preserves existing authority while activating only its explicit task additions in a disposable database', function () {
    $connection = DB::connection();
    $isolated = ($connection->getDriverName() === 'sqlite' && $connection->getDatabaseName() === ':memory:')
        || ($connection->getDriverName() === 'pgsql' && preg_match('/^compras_receipts_test_[a-f0-9]{12}$/D', $connection->getDatabaseName()));
    if (! app()->environment('testing') || ! $isolated) {
        throw new LogicException('Proposta proibida fora de ensaio descartável.');
    }
    $proposal = json_decode(file_get_contents(base_path('docs/proofs/pilot-access-proposal.json')), true, 64, JSON_THROW_ON_ERROR);
    expect($proposal['status'])->toBe('pending_owner_authorization')->and($proposal['environment'])->toBe('http://127.0.0.1:8005');
    $company = Tenant::query()->create(['name' => 'Simulação descartável dos acessos do piloto',
        'work_context_policy' => ['revision' => 1, 'enabled' => $proposal['enabled_contexts']]]);
    $department = Department::query()->create(['tenant_id' => $company->id, 'name' => 'Departamento sintético']);
    config(['work_context.entitlements.'.$company->id => $proposal['enabled_contexts']]);
    $users = [];
    $before = [];
    foreach ($proposal['users'] as $person) {
        $user = User::factory()->create(['tenant_id' => $company->id, 'department_id' => $department->id,
            'name' => 'Simulação — '.$person['name'], 'purchasing_role' => PurchasingRole::from($person['current_permissions'][0])]);
        $users[$person['id']] = $user;
        $before[$person['id']] = ['permissions' => app(OrganizationAccess::class)->permissions($user),
            'contexts' => app(WorkContext::class)->available($user), 'requester' => app(OrganizationAccess::class)->canRequest($user),
            'department_scoped' => app(OrganizationAccess::class)->departmentScoped($user)];
        expect($before[$person['id']]['contexts'])->toBe($person['current_contexts']);
    }
    $actor = $users[8];
    $this->actingAs($actor);
    $base = '/administracao/parametrizacao';
    DB::table('organization_access')->insert(['tenant_id' => $company->id, 'active' => false, 'version' => 1, 'created_at' => now(), 'updated_at' => now()]);
    $version = 1;
    $profiles = [];
    foreach ($proposal['profiles'] as $profile) {
        $this->postJson($base.'/profile', ['version' => $version++, 'name' => $profile['name'], 'permissions' => $profile['permissions'], 'work_contexts' => $profile['work_contexts']])->assertSessionHasNoErrors()->assertRedirect();
        $profiles[$profile['key']] = DB::table('organization_profiles')->where('name', $profile['name'])->sole()->id;
    }
    foreach ($proposal['users'] as $person) {
        $ids = array_map(fn ($key) => $profiles[$key], $person['profile_keys']);
        $this->postJson($base.'/assign', ['version' => $version++, 'user_id' => $users[$person['id']]->id, 'profile_ids' => $ids,
            'maintenance' => false, 'expires_at' => null, 'reason' => 'Ensaiar proposta sintética apenas na base descartável.'])->assertSessionHasNoErrors()->assertRedirect();
    }
    $rules = $proposal['proposed_rules'];
    $this->postJson($base.'/rules', ['version' => $version++, 'first_limit' => $rules['first_limit'], 'second_limit' => $rules['second_limit'],
        'includes_tax' => $rules['includes_tax'], 'reason' => 'Conferência sintética das mesmas alçadas, sem alterar os valores.'])->assertSessionHasNoErrors()->assertRedirect();
    $this->postJson($base.'/work_contexts', ['version' => $version++, 'enabled' => $proposal['enabled_contexts'], 'confirm' => true,
        'reason' => 'Preservar as opções existentes apenas na simulação descartável.'])->assertSessionHasNoErrors()->assertRedirect();
    $preview = app(OrganizationActivationPreview::class)->build($actor);
    expect($preview['can_activate'])->toBeTrue()->and($preview['losing_access'])->toBe(0)->and($preview['permanent_administrators'])->toBe(2);
    foreach ($users as $sourceId => $user) {
        expect(app(OrganizationAccess::class)->permissions($user))->toBe($before[$sourceId]['permissions']);
    }
    $this->postJson($base.'/activate', ['version' => $version, 'confirm' => true, 'reason' => 'Activar a proposta exclusivamente no ensaio descartável.'])->assertSessionHasNoErrors()->assertRedirect();
    foreach ($proposal['users'] as $person) {
        $user = $users[$person['id']];
        $permissions = app(OrganizationAccess::class)->permissions($user);
        expect($permissions)->toEqualCanonicalizing($person['planned_permissions'])
            ->and(array_values(array_diff($person['current_permissions'], $permissions)))->toBe([])
            ->and(app(WorkContext::class)->available($user))->toBe($before[$person['id']]['contexts'])
            ->and(app(OrganizationAccess::class)->canRequest($user))->toBe($before[$person['id']]['requester'])
            ->and(app(OrganizationAccess::class)->departmentScoped($user))->toBe($before[$person['id']]['department_scoped']);
    }
    $this->get($base)->assertInertia(fn (Assert $page) => $page->where('activationPreview.active', true)->where('activationPreview.losing_access', 0));
    expect(DB::table('users')->count())->toBe(12)->and(DB::table('requisitions')->count())->toBe(0)
        ->and(DB::table('purchase_orders')->count())->toBe(0)->and(DB::table('invoices')->count())->toBe(0)
        ->and(DB::table('pa_access')->count())->toBe(0);
});