// apps/hq/test/db-resolve.test.ts — pre-ship audit FIX A: server.ts and the deploy scripts
// (apps/hq/scripts/apply-onboarding-pipeline.ts, apps/hq/scripts/migrate-onboarding-templates.ts)
// must all resolve the DB engine + target through the ONE shared function. Before this fix
// the scripts computed it as `DATABASE_URL ?? ''` (no production fallback), so on the
// production box — where DATABASE_URL is unset — each script silently opened a brand-new
// empty SQLite file instead of the real Postgres.
import { describe, it, expect } from 'vitest'
import { pgTargetDescription, requireDbUrlForEnv, resolveDbUrl } from '../src/db-pg'

const HARDCODED = 'postgres://u:p@h:5432/db'

describe('resolveDbUrl (D19 engine selection, the one shared resolver)', () => {
  it('DATABASE_URL wins regardless of NODE_ENV', () => {
    expect(resolveDbUrl({ DATABASE_URL: 'postgres://x/y', NODE_ENV: 'production' })).toBe('postgres://x/y')
    expect(resolveDbUrl({ DATABASE_URL: 'postgres://x/y' })).toBe('postgres://x/y')
  })

  it('falls back to the hardcoded production URL only when NODE_ENV=production and DATABASE_URL is unset', () => {
    expect(resolveDbUrl({ NODE_ENV: 'production' }, HARDCODED)).toBe(HARDCODED)
  })

  it('resolves to SQLite (empty string) outside production with no DATABASE_URL — dev/tests stay green', () => {
    expect(resolveDbUrl({})).toBe('')
    expect(resolveDbUrl({ NODE_ENV: 'development' })).toBe('')
    expect(resolveDbUrl({ NODE_ENV: 'test' })).toBe('')
  })
})

describe('requireDbUrlForEnv (deploy-script guard — hard-fail instead of a throwaway SQLite write)', () => {
  it('behaves exactly like resolveDbUrl when a Postgres target is available', () => {
    expect(requireDbUrlForEnv({ DATABASE_URL: 'postgres://x/y' })).toBe('postgres://x/y')
    expect(requireDbUrlForEnv({ NODE_ENV: 'production' }, HARDCODED)).toBe(HARDCODED)
    expect(requireDbUrlForEnv({})).toBe('') // dev with no env: SQLite is fine, no hard-fail
  })

  it('hard-fails instead of silently returning SQLite when NODE_ENV=production resolves nothing', () => {
    // Simulates the hardcoded URL having been accidentally emptied out.
    expect(() => requireDbUrlForEnv({ NODE_ENV: 'production' }, '')).toThrow(/refusing to run/i)
  })
})

describe('pgTargetDescription (never leaks the password into logs)', () => {
  it('extracts host:port/dbname', () => {
    expect(pgTargetDescription('postgres://user:secret@db.example.com:5432/hq'))
      .toBe('db.example.com:5432/hq')
  })

  it('omits the port when absent', () => {
    expect(pgTargetDescription('postgres://user:secret@db.example.com/hq')).toBe('db.example.com/hq')
  })

  it('never includes the credentials', () => {
    expect(pgTargetDescription('postgres://user:hunter2@host/db')).not.toContain('hunter2')
  })

  it('degrades gracefully on an unparsable string', () => {
    expect(pgTargetDescription('not-a-url')).toMatch(/unparsable/i)
  })
})