const test = require('node:test')
const assert = require('node:assert')
const path = require('node:path')
const p = require('node:util').promisify
const os = require('node:os')
const rimraf = require('rimraf')
const SecretStack = require('secret-stack')
const caps = require('ppppp-caps')
const Keypair = require('ppppp-keypair')

const DIR = path.join(os.tmpdir(), 'ppppp-db-identity-add')
rimraf.sync(DIR)

test('identity.add()', async (t) => {
  const keypair1 = Keypair.generate('ed25519', 'alice')
  const keypair2 = Keypair.generate('ed25519', 'bob')

  const peer = SecretStack({ appKey: caps.shse })
    .use(require('../lib'))
    .use(require('ssb-box'))
    .call(null, { keypair: keypair1, path: DIR })

  await peer.db.loaded()
  const id = await p(peer.db.identity.create)({
    keypair: keypair1,
    domain: 'person',
  })

  assert.equal(peer.db.identity.has({ identity: id, keypair: keypair2 }), false)

  const consent = peer.db.identity.consent({ identity: id, keypair: keypair2 })

  const identityRec1 = await p(peer.db.identity.add)({
    identity: id,
    keypair: keypair2,
    consent,
    powers: ['box'],
  })
  assert.ok(identityRec1, 'identityRec1 exists')
  const { hash, msg } = identityRec1
  assert.ok(hash, 'hash exists')
  assert.deepEqual(
    msg.data,
    {
      action: 'add',
      add: {
        key: {
          purpose: 'sig',
          algorithm: 'ed25519',
          bytes: keypair2.public,
        },
        consent,
        powers: ['box'],
      },
    },
    'msg.data.add NEW KEY'
  )
  assert.equal(msg.metadata.identity, 'self', 'msg.metadata.identity')
  assert.equal(msg.metadata.identityTips, null, 'msg.metadata.identityTips')
  assert.equal(msg.metadata.domain, 'person', 'msg.metadata.domain')
  assert.deepEqual(
    msg.metadata.tangles,
    { [id]: { depth: 1, prev: [id] } },
    'msg.metadata.tangles'
  )
  assert.equal(msg.pubkey, keypair1.public, 'msg.pubkey OLD KEY')

  assert.equal(peer.db.identity.has({ identity: id, keypair: keypair2 }), true)

  await p(peer.close)()
})

test('keypair with no "add" powers cannot identity.add()', async (t) => {
  rimraf.sync(DIR)
  const keypair1 = Keypair.generate('ed25519', 'alice')
  const keypair2 = Keypair.generate('ed25519', 'bob')
  const keypair3 = Keypair.generate('ed25519', 'carol')

  const peer1 = SecretStack({ appKey: caps.shse })
    .use(require('../lib'))
    .use(require('ssb-box'))
    .call(null, { keypair: keypair1, path: DIR })

  await peer1.db.loaded()
  const id = await p(peer1.db.identity.create)({
    keypair: keypair1,
    domain: 'account',
  })
  const msg1 = peer1.db.get(id)

  const { msg: msg2 } = await p(peer1.db.identity.add)({
    identity: id,
    keypair: keypair2,
    powers: [],
  })
  assert.equal(msg2.data.add.key.bytes, keypair2.public)

  assert.equal(peer1.db.identity.has({ identity: id, keypair: keypair2 }), true)

  await p(peer1.close)()
  rimraf.sync(DIR)

  const peer2 = SecretStack({ appKey: caps.shse })
    .use(require('../lib'))
    .use(require('ssb-box'))
    .call(null, { keypair: keypair2, path: DIR })

  await peer2.db.loaded()
  await p(peer2.db.add)(msg1, id)
  await p(peer2.db.add)(msg2, id)

  // Test author-side power validation
  assert.rejects(
    p(peer2.db.identity.add)({
      identity: id,
      keypair: keypair3,
      powers: [],
    }),
    /signing keypair does not have the "add" power/
  )

  // Make the author disobey power validation
  const { msg: msg3 } = await p(peer2.db.identity.add)({
    identity: id,
    keypair: keypair3,
    powers: [],
    _disobey: true,
  })

  assert.equal(msg3.data.add.key.bytes, keypair3.public)

  await p(peer2.close)()
  rimraf.sync(DIR)

  const peer1again = SecretStack({ appKey: caps.shse })
    .use(require('../lib'))
    .use(require('ssb-box'))
    .call(null, { keypair: keypair1, path: DIR })

  await peer1again.db.loaded()
  await p(peer1again.db.add)(msg1, id) // re-add because lost during rimraf
  await p(peer1again.db.add)(msg2, id) // re-add because lost during rimraf

  // Test replicator-side power validation
  assert.rejects(
    p(peer1again.db.add)(msg3, id),
    /msg\.pubkey does not have "add" power/
  )

  await p(peer1again.close)()
})

test('publish with a key in the identity', async (t) => {
  rimraf.sync(DIR)

  const keypair1 = Keypair.generate('ed25519', 'alice')
  const keypair2 = Keypair.generate('ed25519', 'bob')

  let peer = SecretStack({ appKey: caps.shse })
    .use(require('../lib'))
    .use(require('ssb-box'))
    .call(null, { keypair: keypair1, path: DIR })

  await peer.db.loaded()

  const identity = await p(peer.db.identity.create)({
    keypair: keypair1,
    domain: 'person',
  })
  const identityMsg0 = peer.db.get(identity)

  // Consent is implicitly created because keypair2 has .private
  const identityRec1 = await p(peer.db.identity.add)({
    identity,
    keypair: keypair2,
  })

  const postRec = await p(peer.db.feed.publish)({
    identity,
    domain: 'post',
    data: { text: 'hello' },
    keypair: keypair2,
  })
  assert.equal(postRec.msg.data.text, 'hello', 'post text correct')
  const postsId = peer.db.feed.getId(identity, 'post')
  assert.ok(postsId, 'postsId exists')

  const recs = [...peer.db.records()]
  assert.equal(recs.length, 4, '4 records')
  const [_identityRec0, _identityRec1, postsRoot, _post] = recs
  assert.deepEqual(_identityRec0.msg, identityMsg0, 'identityMsg0')
  assert.deepEqual(_identityRec1.msg, identityRec1.msg, 'identityMsg1')
  assert.deepEqual(
    postsRoot.msg.metadata,
    {
      dataHash: null,
      dataSize: 0,
      identity,
      identityTips: null,
      tangles: {},
      domain: 'post',
      v: 3,
    },
    'postsRoot'
  )
  assert.deepEqual(_post.msg, postRec.msg, 'postMsg')

  await p(peer.close)()

  // Re-load as Carol, add the msgs to validate them
  rimraf.sync(DIR)
  const keypair3 = Keypair.generate('ed25519', 'carol')

  const carol = SecretStack({ appKey: caps.shse })
    .use(require('../lib'))
    .use(require('ssb-box'))
    .call(null, { keypair: keypair3, path: DIR })

  await carol.db.loaded()

  await p(carol.db.add)(identityMsg0, identity)
  await p(carol.db.add)(identityRec1.msg, identity)
  await p(carol.db.add)(postsRoot.msg, postsId)
  await p(carol.db.add)(postRec.msg, postsId)
  // t.pass('carol added all messages successfully')

  await p(carol.close)()
})