'use strict';

/**
 * 工单人机验证契约：ticket_create / ticket_reply 两个场景必须在三处对齐
 * （PHP 场景白名单 / 后台「启用场景」勾选列表的 PHP schema / SPA schema），
 * 且旧的 after_sale_* 场景已彻底移除。
 */

const assert = require('node:assert/strict');
const fs = require('node:fs');
const path = require('node:path');
const test = require('node:test');

const root = path.resolve(__dirname, '../..');
const read = (file) => fs.readFileSync(path.join(root, file), 'utf8');

const SCENES = [
  { key: 'ticket_create', label: '提交工单' },
  { key: 'ticket_reply', label: '回复工单' },
];

test('ticket captcha scenes are registered in all three places', () => {
  const captcha = read('inc/modules/captcha.php');
  const permissions = read('src/Admin/Schema/SchemaPermissions.php');
  const adminSchema = read('assets/admin/src/schema/sections/permissions/index.js');

  for (const scene of SCENES) {
    assert.match(captcha, new RegExp(`'${scene.key}'\\s*=> __\\('${scene.label}', 'aksrt'\\)`),
      `captcha scene ${scene.key} missing`);
    assert.ok(permissions.includes(`'label' => '${scene.label}', 'value' => '${scene.key}'`),
      `PHP permissions schema missing ${scene.key}`);
    assert.ok(adminSchema.includes(`{ label: '${scene.label}', value: '${scene.key}' }`),
      `SPA permissions schema missing ${scene.key}`);
  }
});

test('the after-sale captcha scenes are gone', () => {
  for (const file of [
    'inc/modules/captcha.php',
    'src/Admin/Schema/SchemaPermissions.php',
    'assets/admin/src/schema/sections/permissions/index.js',
  ]) {
    const src = read(file);
    assert.ok(!src.includes('after_sale_apply'), `${file} still declares after_sale_apply`);
    assert.ok(!src.includes('after_sale_cancel'), `${file} still declares after_sale_cancel`);
    assert.ok(!src.includes('申请售后'), `${file} still carries the 申请售后 label`);
    assert.ok(!src.includes('撤销售后'), `${file} still carries the 撤销售后 label`);
  }
});

test('the ticket REST layer consumes both scenes exactly once', () => {
  const rest = read('src/Ticket/TicketRest.php');
  assert.match(rest, /const CAPTCHA_SCENE_CREATE = 'ticket_create';/);
  assert.match(rest, /const CAPTCHA_SCENE_REPLY = 'ticket_reply';/);
  assert.equal((rest.match(/require_captcha\(\$request, self::CAPTCHA_SCENE_/g) || []).length, 2,
    'create and reply must each verify captcha exactly once');
  assert.equal((rest.match(/aksrt_require_captcha\(/g) || []).length, 1,
    'captcha verification must funnel through one helper');
});

test('the ticket panel mounts both captcha scenes', () => {
  const renderer = read('inc/helpers/user-center-renderers/profile-tickets.php');
  assert.ok(renderer.includes("aksrt_render_captcha('ticket_create')"), 'create mount missing');
  assert.ok(renderer.includes("aksrt_render_captcha('ticket_reply')"), 'reply mount missing');
  assert.ok(!renderer.includes('after_sale'), 'renderer must not mount after-sale scenes');

  const js = read('assets/js/ticket-center.js');
  assert.match(js, /runCaptcha\('ticket_create'\)/);
  assert.match(js, /runCaptcha\('ticket_reply'\)/);
  // 取消验证时中止提交，不静默放行（runCaptcha 实现位于共享工具层）。
  const core = read('assets/js/ticket-center-core.js');
  assert.match(core, /return payload === null \? Promise\.reject\(\{ cancelled: true \}\)/);
});