import { createRequire } from "node:module";
import { createHash, randomUUID } from "node:crypto";
import { execFileSync } from "node:child_process";
import { mkdir } from "node:fs/promises";
import { fileURLToPath } from "node:url";

const require = createRequire(process.env.PLAYWRIGHT_REQUIRE_FROM ?? import.meta.url);
const { chromium } = require("playwright");
const outputDirectory = new URL("./screenshots/", import.meta.url);
const webURL = process.env.VISUAL_WEB_URL ?? "http://localhost:3100";
const webHostPattern = new RegExp(new URL(webURL).host.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
const oidcURLPattern = new RegExp(process.env.VISUAL_OIDC_URL_PATTERN ?? "localhost:58180");
const username = process.env.VISUAL_USERNAME ?? "owner";
const password = process.env.VISUAL_PASSWORD ?? "LocalOnly123!";
const marker = randomUUID().slice(0, 8);
const keyID = `visual-recovery-key-${marker}`;
const keyInternalID = randomUUID();
const releaseInternalID = randomUUID();
const releasePublicID = randomUUID();
const releaseVersion = `7.7.${Number.parseInt(marker.slice(0, 2), 16)}`;
const firmwareBytes = Buffer.from(`recoverable-firmware-${marker}`, "utf8");
const firmwareDigest = createHash("sha256").update(firmwareBytes).digest("hex");
const householdPublicID = "10000000-0000-0000-0000-000000000211";
await mkdir(outputDirectory, { recursive: true });

function psql(statement) {
  return execFileSync("docker", ["compose", "exec", "-T", "postgres", "psql", "-v", "ON_ERROR_STOP=1", "-U", "voice", "-d", "voice_platform", "-Atc", statement], {
    cwd: process.cwd(), encoding: "utf8", stdio: ["ignore", "pipe", "pipe"]
  }).trim();
}

psql(`
  INSERT INTO firmware_signing_key(id,tenant_id,key_id,public_key_base64,status,created_by)
  VALUES('${keyInternalID}','10000000-0000-0000-0000-000000000001','${keyID}','AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=','ACTIVE','10000000-0000-0000-0000-000000000101');
  INSERT INTO firmware_release(id,public_id,tenant_id,household_id,model,hardware_revision,version,object_ref,expected_size,expected_digest,signature,signing_key_id,minimum_security_version,release_notes,status,created_by)
  VALUES('${releaseInternalID}','${releasePublicID}','10000000-0000-0000-0000-000000000001','10000000-0000-0000-0000-000000000201','simulated-terminal','sim-rev-a','${releaseVersion}','visual/recovery/${releasePublicID}.bin',${firmwareBytes.length},'${firmwareDigest}','${Buffer.alloc(64).toString("base64")}','${keyID}','1.0.0','页面上传恢复夹具','UPLOADING','10000000-0000-0000-0000-000000000101');
`);

const releaseCountBefore = Number(psql("SELECT count(*) FROM firmware_release;"));
const auditCountBefore = Number(psql("SELECT count(*) FROM audit_event;"));
const browser = await chromium.launch({ headless: true, executablePath: process.env.CHROME_PATH ?? "C:/Program Files/Google/Chrome/Application/chrome.exe" });
const page = await browser.newPage({ viewport: { width: 1440, height: 1150 }, deviceScaleFactor: 1 });
const consoleErrors = [];
const failedRequests = [];
const mutationRequests = [];
page.on("console", (message) => { if (message.type() === "error") consoleErrors.push(message.text()); });
page.on("request", (request) => {
  const pathname = new URL(request.url()).pathname;
  if ((request.method() === "POST" && (/^\/api\/v1\/firmware-releases\/[^/]+\/(upload-session|finalize|retire)$/.test(pathname))) || request.method() === "PUT") mutationRequests.push(`${request.method()} ${pathname}`);
});
page.on("requestfailed", (request) => {
  const failure = request.failure()?.errorText ?? "failed";
  const requestURL = new URL(request.url());
  if (request.method() === "GET" && requestURL.pathname === "/api/v1/events" && failure.includes("ERR_ABORTED")) return;
  failedRequests.push(`${request.method()} ${request.url()} ${failure}`);
});

try {
  await page.goto(webURL, { waitUntil: "networkidle" });
  await page.getByRole("button", { name: "登录研发环境" }).click();
  await page.waitForURL(oidcURLPattern);
  await page.locator("#username").fill(username);
  await page.locator("#password").fill(password);
  await page.locator("#kc-login").click();
  await page.waitForURL(webHostPattern, { timeout: 15000 });
  await page.getByRole("heading", { name: "家庭业务工作台" }).waitFor();
  await page.getByRole("button", { name: "固件发布", exact: true }).click();

  const releaseCard = page.locator("article.stack-card").filter({ hasText: releaseVersion });
  await releaseCard.waitFor();
  const uploadingVisible = (await releaseCard.textContent())?.includes("等待校验") === true;
  await releaseCard.getByRole("button", { name: "恢复上传" }).click();
  const recoveryForm = page.getByRole("form", { name: "恢复未完成固件上传" });
  await recoveryForm.waitFor();
  const recoveryTargetShown = (await recoveryForm.textContent())?.includes(releasePublicID) === true && (await recoveryForm.textContent())?.includes(firmwareDigest) === true;
  await recoveryForm.getByLabel("重新选择原始固件文件").setInputFiles({ name: "wrong.bin", mimeType: "application/octet-stream", buffer: Buffer.from("wrong-firmware", "utf8") });
  await recoveryForm.getByText("本地文件与原版本的大小或SHA-256不一致，禁止恢复上传。").waitFor();
  const mismatchBlocked = await recoveryForm.getByRole("button", { name: "核对并恢复上传" }).isDisabled();
  await recoveryForm.getByLabel("重新选择原始固件文件").setInputFiles({ name: `firmware-${marker}.bin`, mimeType: "application/octet-stream", buffer: firmwareBytes });
  await recoveryForm.getByText("文件大小和摘要与未完成版本完全一致，可以继续上传。").waitFor();
  const exactFileEnabled = await recoveryForm.getByRole("button", { name: "核对并恢复上传" }).isEnabled();
  await recoveryForm.getByRole("button", { name: "核对并恢复上传" }).click();
  let control = page.getByRole("form", { name: "家庭业务受控操作" });
  await control.waitFor();
  let text = await control.textContent();
  const resumeTargetBound = text?.includes(householdPublicID) === true && text?.includes(releasePublicID) === true && text?.includes(releaseVersion) === true && text?.includes(firmwareDigest) === true && text?.includes(`firmware-${marker}.bin`) === true && text?.includes("15分钟私有PUT地址") === true;
  let action = control.getByRole("button", { name: "确认续传并重新校验" });
  const resumeNeedsAcknowledgement = await action.isDisabled();
  await control.getByLabel(/我确认重新选择的本地文件与版本/).check();
  const resumeActionEnabled = await action.isEnabled();
  await control.screenshot({ path: fileURLToPath(new URL("family-firmware-upload-resume-control.png", outputDirectory)) });
  await control.getByRole("button", { name: "取消" }).click();
  const resumeCancelClosed = await control.count() === 0;

  await releaseCard.getByRole("button", { name: "退役未完成版本" }).click();
  control = page.getByRole("form", { name: "家庭业务受控操作" });
  await control.waitFor();
  text = await control.textContent();
  const retireTargetBound = text?.includes(householdPublicID) === true && text?.includes(releasePublicID) === true && text?.includes(releaseVersion) === true && text?.includes(firmwareDigest) === true && text?.includes(keyID) === true && text?.includes("只有仍处于上传中的版本才能转为退役") === true;
  action = control.getByRole("button", { name: "确认退役未完成版本" });
  const retireNeedsAcknowledgement = await action.isDisabled();
  await control.getByLabel(/我确认版本.*的上传或签名校验无法继续/).check();
  const retireActionEnabled = await action.isEnabled();
  await control.screenshot({ path: fileURLToPath(new URL("family-firmware-upload-retire-control.png", outputDirectory)) });
  await control.getByRole("button", { name: "取消" }).click();
  const retireCancelClosed = await control.count() === 0;

  const releaseUnchanged = psql(`SELECT status FROM firmware_release WHERE public_id='${releasePublicID}'::uuid;`) === "UPLOADING" && Number(psql("SELECT count(*) FROM firmware_release;")) === releaseCountBefore;
  const auditUnchanged = Number(psql("SELECT count(*) FROM audit_event;")) === auditCountBefore;
  const overflow = await page.evaluate(() => [...document.querySelectorAll("body *")]
    .filter((element) => element instanceof HTMLElement && element.scrollWidth > element.clientWidth + 2 && getComputedStyle(element).overflowX === "visible")
    .slice(0, 20)
    .map((element) => `${element.tagName}.${element.className}: ${element.clientWidth}/${element.scrollWidth}`));
  const result = { uploadingVisible, recoveryTargetShown, mismatchBlocked, exactFileEnabled, resumeTargetBound, resumeNeedsAcknowledgement, resumeActionEnabled, resumeCancelClosed, retireTargetBound, retireNeedsAcknowledgement, retireActionEnabled, retireCancelClosed, releaseUnchanged, auditUnchanged, mutationRequests, overflow, consoleErrors, failedRequests };
  console.log(JSON.stringify(result, null, 2));
  if (Object.entries(result).some(([key, value]) => !["mutationRequests", "overflow", "consoleErrors", "failedRequests"].includes(key) && value !== true) || mutationRequests.length || overflow.length || consoleErrors.length || failedRequests.length) throw new Error("Firmware upload recovery controls visual smoke failed");
} finally {
  await browser.close();
  psql(`DELETE FROM firmware_release WHERE id='${releaseInternalID}'; DELETE FROM firmware_signing_key WHERE id='${keyInternalID}';`);
}