// Order CRUD test
import { describe, it, before, after } from "node:test";
import assert from "node:assert/strict";
import { buildApp } from "../index.js";
import type { FastifyInstance } from "fastify";

let app: FastifyInstance;
let token: string;
let createdId: string;
let payload: Record<string, unknown>;

before(async () => {
  process.env.JWT_SECRET = "test-secret";
  process.env.DATABASE_URL = ":memory:";
  app = await buildApp();
  await app.ready();

  // Register and login to get a token
  const regRes = await app.inject({
    method: "POST",
    url: "/api/auth/register",
    payload: { username: `test_${Date.now()}`, password: "password123" },
  });
  token = regRes.json().token;

  // Resolve user FK references with the registered user's real ID
  payload = {
          "userId": regRes.json().user.id,
          "status": "sample-status",
          "totalAmount": 1,
          "addressId": "sample-addressid"
      };
});

after(async () => {
  await app.close();
});

describe("GET /api/orders", () => {
  it("returns empty list", async () => {
    const res = await app.inject({
      method: "GET",
      url: "/api/orders",
      headers: { authorization: `Bearer ${token}` },
    });
    assert.equal(res.statusCode, 200);
    const body = res.json();
    assert.ok(Array.isArray(body.data));
  });
});

describe("POST /api/orders", () => {
  it("creates a order", async () => {
    const res = await app.inject({
      method: "POST",
      url: "/api/orders",
      headers: { authorization: `Bearer ${token}` },
      payload,
    });
    assert.equal(res.statusCode, 201);
    const body = res.json();
    assert.ok(body.data.id);
    createdId = body.data.id;
  });
});

describe("GET /api/orders/:id", () => {
  it("returns the created order", async () => {
    const res = await app.inject({
      method: "GET",
      url: `/api/orders/${createdId}`,
      headers: { authorization: `Bearer ${token}` },
    });
    assert.equal(res.statusCode, 200);
    const body = res.json();
    assert.equal(body.data.id, createdId);
  });

  it("returns 404 for nonexistent id", async () => {
    const res = await app.inject({
      method: "GET",
      url: `/api/orders/nonexistent`,
      headers: { authorization: `Bearer ${token}` },
    });
    assert.equal(res.statusCode, 404);
  });
});

describe("PUT /api/orders/:id", () => {
  it("updates the order", async () => {
    const res = await app.inject({
      method: "PUT",
      url: `/api/orders/${createdId}`,
      headers: { authorization: `Bearer ${token}` },
      payload,
    });
    assert.equal(res.statusCode, 200);
  });
});

describe("DELETE /api/orders/:id", () => {
  it("deletes the order", async () => {
    const res = await app.inject({
      method: "DELETE",
      url: `/api/orders/${createdId}`,
      headers: { authorization: `Bearer ${token}` },
    });
    assert.equal(res.statusCode, 204);
  });

  it("returns 404 after delete", async () => {
    const res = await app.inject({
      method: "GET",
      url: `/api/orders/${createdId}`,
      headers: { authorization: `Bearer ${token}` },
    });
    assert.equal(res.statusCode, 404);
  });
});
