package hub

import (
	"context"
	"crypto/sha256"
	"encoding/hex"
	"encoding/json"
	"os"
	"path/filepath"
	"strings"
	"testing"
)

// R-349: the report carries the sha256 of the binary that is RUNNING, so the hub can tell a
// hand-built proof binary from the vouched artifact of the same version string. The consequence
// asserted: the wire field equals the hash of this very test binary's bytes (read independently via
// os.Executable, a different channel from /proc/self/exe), and it is on the wire as agent_sha256.
func TestCollect_AgentSHA256IsTheRunningBinary(t *testing.T) {
	exe, err := os.Executable()
	if err != nil {
		t.Skipf("os.Executable: %v", err)
	}
	raw, err := os.ReadFile(exe)
	if err != nil {
		t.Fatalf("read own binary: %v", err)
	}
	sum := sha256.Sum256(raw)
	want := hex.EncodeToString(sum[:])

	px := &fakePx{node: "n", ns: newTestNodeStatus()}
	c := NewCollector(px, fakeProber{status: "running"}, nil, nil, nil, nil, "h", "0.3.0", quietLogger())
	r, err := c.Collect(context.Background())
	if err != nil {
		t.Fatalf("Collect: %v", err)
	}
	if r.AgentSHA256 != want {
		t.Fatalf("agent_sha256 = %q, want the running binary's %q", r.AgentSHA256, want)
	}
	b, err := json.Marshal(r)
	if err != nil {
		t.Fatal(err)
	}
	if !strings.Contains(string(b), `"agent_sha256":"`+want+`"`) {
		t.Fatalf("agent_sha256 not on the wire: %s", b)
	}
}

// An unreadable binary is UNKNOWN (empty, omitted) — never a made-up hash, never a failed report.
func TestFileSHA256_UnreadableIsEmpty(t *testing.T) {
	if got := fileSHA256(filepath.Join(t.TempDir(), "absent")); got != "" {
		t.Fatalf("absent file hashed to %q, want empty", got)
	}
	px := &fakePx{node: "n", ns: newTestNodeStatus()}
	c := NewCollector(px, fakeProber{status: "running"}, nil, nil, nil, nil, "h", "0.3.0", quietLogger())
	c.selfSHA = func() string { return "" }
	r, err := c.Collect(context.Background())
	if err != nil {
		t.Fatalf("Collect must not fail on an unreadable binary: %v", err)
	}
	b, _ := json.Marshal(r)
	if strings.Contains(string(b), "agent_sha256") {
		t.Fatalf("empty agent_sha256 must be omitted: %s", b)
	}
}