package web

import (
	"strings"
	"testing"
)

// R-402 (operator ruling 2026-10-12, S33, `09` §3 decision 228): the host page shows ONE line about
// the off-site integrity check — „Last full check: OK/FAILED, depth N, date" — from the fields the
// controller has sent since v0.227.0/v0.228.0. The verdict is never shown without its depth, and an
// absent timestamp means NEVER CHECKED, not FAILED (the R-331 lesson: a card that rendered a verdict
// from fields nothing wrote).
func TestOffsiteIntegrityLine(t *testing.T) {
	cases := []struct{ name, report, want string }{
		{"ok, full depth", `{"offsite":{"last_integrity_check":"2026-10-12T01:14:00Z","last_integrity_ok":true,"last_integrity_depth":"100%"}}`,
			"OK, depth 100%, 2026-10-12 01:14 UTC"},
		{"failed (bool absent), structure", `{"offsite":{"last_integrity_check":"2026-10-11T01:00:00Z","last_integrity_depth":"structure"}}`,
			"FAILED, depth structure, 2026-10-11 01:00 UTC"},
		{"old controller: no depth", `{"offsite":{"last_integrity_check":"2026-10-11T01:00:00Z","last_integrity_ok":true}}`,
			"OK, depth unknown (controller older than v0.228.0), 2026-10-11 01:00 UTC"},
		{"never checked", `{"offsite":{"repo_size_bytes":5}}`, "never checked"},
		{"no off-site object", `{"version":"0.307.0"}`, "not reported (no off-site status in the box's report)"},
		{"no report", ``, "not reported (no off-site status in the box's report)"},
	}
	for _, c := range cases {
		if got := offsiteIntegrityLine(c.report); got != c.want {
			t.Errorf("%s: got %q, want %q", c.name, got, c.want)
		}
	}
}

// The line reaches the host page (both branches of the template gate: a host with a customer renders
// it, with the verdict from the newest controller report). RED-PROOF: delete the "OffsiteIntegrity"
// key from hostDetailData → the id and the verdict are missing.
func TestHostPageShowsOffsiteIntegrityLine(t *testing.T) {
	s, st, _ := newRevealServer(t)
	cookie, _ := newRevealSession(t, s)
	seedNetHost(t, st, "r402-host", "0.150.0", liveReportJSON, "")
	if err := st.SaveReport("c-r402-host", []byte(`{"offsite":{"last_integrity_check":"2026-10-12T01:14:00Z","last_integrity_ok":true,"last_integrity_depth":"100%"}}`)); err != nil {
		t.Fatal(err)
	}
	body := getHostPage(t, s, cookie, "r402-host")
	if !strings.Contains(body, `id="offsite-integrity"`) || !strings.Contains(body, "OK, depth 100%, 2026-10-12 01:14 UTC") {
		t.Fatal("the host page does not show the off-site integrity line")
	}
}