package web

import (
	"strings"
	"testing"

	"gitea.dooplex.hu/admin/felhom-hub/internal/store"
)

// The RESET control renders on the customer page as its OWN amber card, visually distinct from the
// red Danger-zone Delete, with the typed-id confirm + the separate escrow-custody ack row (ruling 1).
func TestTemplates_CustomerResetCard(t *testing.T) {
	s, st := newTestServer(t)
	if err := st.SaveCustomerConfig(&store.CustomerConfig{
		CustomerID: "acme", CustomerName: "Acme", Domain: "acme.hu",
		RetrievalPassword: "pw", APIKey: "k", Status: "active",
	}); err != nil {
		t.Fatal(err)
	}
	html := renderCustomerPage(t, s, "acme")

	// The RESET form posts to the reset endpoint, and the preview endpoint is fetched by its JS.
	if !strings.Contains(html, `action="/configs/acme/reset"`) {
		t.Error("reset form action missing")
	}
	for _, fn := range []string{"customerResetConfirm", "customerResetSubmit", "/configs/' + encodeURIComponent(cid) + '/reset"} {
		if !strings.Contains(html, fn) {
			t.Errorf("reset JS missing %q", fn)
		}
	}
	// Distinct visual: the reset card is amber (--warn); the delete form (red --crit) still exists
	// separately — the two controls are not merged.
	if !strings.Contains(html, "border-color: var(--warn);") {
		t.Error("reset card is not amber-toned (must be distinct from the red Delete)")
	}
	if !strings.Contains(html, `action="/configs/acme/delete"`) {
		t.Error("the Danger-zone Delete must remain a separate control")
	}
	// The separate escrow-custody ack (ruling 1) + typed-id confirm.
	if !strings.Contains(html, `id="cust-reset-escrow-acme"`) {
		t.Error("escrow-custody ack checkbox missing")
	}
	if !strings.Contains(html, `name="confirm_id"`) || !strings.Contains(html, `name="escrow_ack"`) {
		t.Error("reset confirm inputs (confirm_id / escrow_ack) missing")
	}
}