package web

import (
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"
)

// offerShapeC puts the harness box in the recovery offer, shape (c): the hub holds a package for a DIFFERENT repository
// key than the one the box uses — the old off-site copy opens only with the household's EXISTING recovery code.
func offerShapeC(t *testing.T, h *escrowWizardHarness) {
	t.Helper()
	h.configureOffbox(t, "pending")
	if err := h.sett.SetHubEscrowIdentityPresent(true); err != nil {
		t.Fatal(err)
	}
	if err := h.sett.SetHubEscrowKeySHA256("0000000000000000000000000000000000000000000000000000000000000000", "2026-10-26T20:00:00Z"); err != nil {
		t.Fatal(err)
	}
	if !h.m.OffsiteRecoveryOffer() {
		t.Fatal("setup: the box should be in the recovery offer")
	}
}

// R-1219: during a recovery offer a NEW recovery code would replace the key that opens the old off-site copy (R-199).
// The backups page already hid the ceremony; the global top bar still linked to it and the start handler ran it. Now
// the bar is not shown and the start handler answers 409 with a sentence in the household's language, BEFORE anything
// is staged or started. COMPANION RED-PROOF: before the fix the bar was visible and the start answered 200
// („preflight,stage,start").
func TestR1219_NoCeremonyDuringARecoveryOffer(t *testing.T) {
	h := newEscrowWizardHarness(t)
	offerShapeC(t, h)
	if !h.s.escrowPaused() {
		t.Fatal("setup: the tier should read as paused (pending) — the bar would otherwise be hidden for another reason")
	}
	r := httptest.NewRequest("GET", "/", nil)
	r.AddCookie(&http.Cookie{Name: sessionCookieName, Value: newTestSession(h.s)})
	if h.s.escrowBannerVisible(r) {
		t.Error("the top bar urges the recovery-code ceremony during a recovery offer")
	}
	w := postStart(t, h.s, wizardPassword)
	if w.Code != http.StatusConflict {
		t.Fatalf("start during an offer = %d (%s), want 409", w.Code, w.Body.String())
	}
	if !strings.Contains(w.Body.String(), "helyre") { // ASCII fragment of the Hungarian sentence (ui-hungarian rule)
		t.Errorf("the refusal does not say why in Hungarian: %s", w.Body.String())
	}
	for _, step := range h.order {
		if step == "stage" || step == "start" {
			t.Fatalf("the agent was reached during an offer: %v", h.order)
		}
	}
}

// The control for the bar half: the SAME paused box with no recovery offer, the same logged-in request — the bar IS
// shown. Without this, a bar hidden for any other reason (no session, readiness) would pass the test above.
func TestR1219_TheBarStillShowsWithoutAnOffer(t *testing.T) {
	h := newEscrowWizardHarness(t)
	h.configureOffbox(t, "pending")
	if h.m.OffsiteRecoveryOffer() {
		t.Fatal("setup: no offer expected")
	}
	r := httptest.NewRequest("GET", "/", nil)
	r.AddCookie(&http.Cookie{Name: sessionCookieName, Value: newTestSession(h.s)})
	if !h.s.escrowBannerVisible(r) {
		t.Fatal("the bar is hidden on a paused box with no offer — the offer test above would prove nothing")
	}
}