import test from 'node:test';
import assert from 'node:assert/strict';
import path from 'node:path';
import {spawn} from 'node:child_process';
import {createRequire} from 'node:module';
import {fileURLToPath} from 'node:url';
import {defaultPolicy} from '../packages/core/policy.mjs';
const {createServiceBrokerSupervisor}=createRequire(import.meta.url)('../apps/browser/broker-service-supervisor.cjs');
const {createFixtureDiagnostics}=createRequire(import.meta.url)('./fixtures/broker-native-diagnostics.cjs');
const {createSyntheticAudit}=createRequire(import.meta.url)('./fixtures/broker-durable-audit.cjs');
const root=path.resolve(fileURLToPath(new URL('../',import.meta.url)));
function setup(extra={}){
 let launched,quarantines=0;const events=[];
 const supervisor=createServiceBrokerSupervisor({installationRoot:root,verifyInstallation:()=>true,verifyPackage:()=>true,persistAudit:event=>{events.push(event);return {persisted:true,eventId:event.eventId};},acceptCertificate:()=>true,onQuarantine:()=>quarantines++,deadlineMs:5000,shutdownMs:5000,
  launch:(executable,args,options)=>{launched={executable,args,options};return spawn(process.execPath,[fileURLToPath(new URL('./fixtures/broker-service-stdio-child.cjs',import.meta.url))],options);},...extra});
 return {supervisor,events,get launched(){return launched;},get quarantines(){return quarantines;}};
}
test('service transport uses fixed native command and real bounded stdio protocol',async()=>{
 const f=setup();try{
  const ready=await f.supervisor.start({policyVersion:3,port:43871,config:{port:43871}});
  assert.equal(ready.port,43871);assert.equal(f.supervisor.status().ready,true);
  assert.equal(f.launched.executable,path.join(root,'safetynet-service-host.exe'));assert.deepEqual(f.launched.args,['--client-stdio']);
  assert.equal(f.launched.options.shell,false);assert.equal(f.launched.options.windowsHide,true);assert.deepEqual(f.launched.options.stdio,['pipe','pipe','ignore']);
  assert.ok(Object.keys(f.launched.options.env).every(key=>['SystemRoot','WINDIR','TEMP','TMP','USERPROFILE','LOCALAPPDATA','APPDATA'].includes(key)));
  assert.equal(f.launched.options.env.SAFETYNET_SERVICE_CLIENT_SID,undefined);assert.equal(f.launched.options.env.NODE_OPTIONS,undefined);
 }finally{await f.supervisor.close();}
 assert.equal(f.quarantines,0);assert.equal(f.supervisor.status().closed,true);
});
test('real stdio audit roundtrip retains event identity and durable receipt',async()=>{
 const f=setup();try{
  await f.supervisor.start({policyVersion:3,port:43871,config:{port:43871,audit:true}});
  const until=Date.now()+3000;while(!f.events.length&&Date.now()<until)await new Promise(resolve=>setTimeout(resolve,10));
  assert.equal(f.events.length,1);assert.equal(f.events[0].eventId,'12345678-1234-4234-8234-123456789abc');
  assert.equal(f.supervisor.status().ready,true);
 }finally{await f.supervisor.close();}
});
test('malformed native stream quarantines and cannot restart',async()=>{
 const f=setup();await assert.rejects(f.supervisor.start({policyVersion:3,port:43871,config:{malformed:true}}),/unavailable/);
 assert.equal(f.quarantines,1);assert.equal(f.supervisor.status().ready,false);
 await assert.rejects(f.supervisor.start({policyVersion:3,port:43871}),/invalid/);await f.supervisor.close();
});
test('unverified installed native client or broker payload never launches',async()=>{
 for(const extra of [{verifyInstallation:()=>false},{verifyPackage:()=>false}]){
  const f=setup(extra);await assert.rejects(f.supervisor.start({policyVersion:3,port:43871,config:{}}),/unavailable/);assert.equal(f.launched,undefined);await f.supervisor.close();
 }
});
test('real service-adapter subprocess exports audit-correlated OTLP timings',async t=>{
 const audit=createSyntheticAudit(t),diagnostics=await createFixtureDiagnostics({enabled:true,policy:defaultPolicy(),audit});
 const f=setup({persistAudit:diagnostics.persist,traceOperation:diagnostics.stage});let proof;
 try{
  await diagnostics.run({bytes:0},async()=>{
   await f.supervisor.start({policyVersion:3,port:43871,config:{port:43871,audit:true}});
   const until=Date.now()+3000;while(!audit.events().length&&Date.now()<until)await new Promise(resolve=>setTimeout(resolve,10));
   assert.equal(audit.events().length,1);assert.equal(f.supervisor.status().ready,true);
   await f.supervisor.close();
  });
 }finally{try{await f.supervisor.close();}finally{proof=await diagnostics.finish();}}
 assert.ok(proof.spanCount>=2);assert.equal(proof.invalid,0);assert.equal(proof.failedExports,0);assert.equal(proof.lifetimeFailedExports,0);
 assert.deepEqual(proof.stages.map(value=>value.name).sort(),['browser.broker.shutdown','browser.broker.start','browser.broker.verify']);
 assert.ok(proof.stages.every(value=>value.parentSpanId===proof.parentSpanId&&value.durationMs>0));
 t.diagnostic(JSON.stringify({kind:'actual-service-adapter-test-child',...proof}));
});