autumn-cli 0.9.0

//! TOML-based generator configuration for `autumn generate scaffold`.
//!
//! Reads `[scaffold.ResourceName]` sections from a project-local TOML file
//! so scaffold metadata can be checked in and reproduced without long CLI
//! invocations.
//!
//! # File format
//!
//! ```toml
//! [scaffold.Bookmark]
//! fields      = ["url:String", "title:String", "tag:String", "alive:bool"]
//! indexes     = ["url", "tag"]
//! validations = ["url=url", "title=length:min=1,max=200"]
//! defaults    = ["alive=true"]
//! queries     = ["find_by_tag:tag", "find_by_alive:alive"]
//! ```
//!
//! # Precedence
//!
//! CLI flags win. If the caller passes any values for a repeated flag (e.g.
//! `--index`), those values completely replace the corresponding TOML list.
//! Fields (positional arguments) follow the same rule: non-empty CLI fields
//! shadow TOML fields.

/// The conventional config file name that `autumn generate` auto-discovers in
/// the project root. Also used as the default path for `--config`.
pub const GENERATE_CONFIG_FILENAME: &str = "autumn.generate.toml";

use std::collections::HashMap;
use std::path::Path;

use serde::Deserialize;

use super::GenerateError;
use super::dsl::IdType;
use super::model::ModelOptions;
use super::naming::pascal;
use super::scaffold::ScaffoldOptions;

/// One resource's scaffold metadata from a TOML config file.
#[derive(Debug, Clone, Default, Deserialize, PartialEq, Eq)]
#[serde(deny_unknown_fields)]
#[allow(clippy::struct_excessive_bools)]
pub struct ScaffoldConfigEntry {
    #[serde(default)]
    pub fields: Vec<String>,
    #[serde(default)]
    pub indexes: Vec<String>,
    #[serde(default)]
    pub uniques: Vec<String>,
    #[serde(default)]
    pub validations: Vec<String>,
    #[serde(default)]
    pub defaults: Vec<String>,
    #[serde(default)]
    pub queries: Vec<String>,
    #[serde(default)]
    pub soft_delete: bool,
    #[serde(default)]
    pub api: bool,
    #[serde(default)]
    pub sharded: bool,
    #[serde(default)]
    pub shard_key: Option<String>,
    #[serde(default)]
    pub live: bool,
    /// Primary-key type for this resource (`"uuid"` or `"bigint"`).
    /// Inherits from `[generate] id` when absent.
    #[serde(default)]
    pub id: Option<String>,
    /// Emit per-field inline validation endpoints and `hx-post` attributes on
    /// form inputs.
    #[serde(default)]
    pub live_validation: bool,
    /// Opt out of generating a record-level authorization `Policy`/`Scope`
    /// (issue #1125).
    #[serde(default)]
    pub no_policy: bool,
    /// Bind this resource to a parent as its child (issue #1323) — the
    /// TOML equivalent of `--belongs-to Post`.
    #[serde(default)]
    pub belongs_to: Option<String>,
    /// Maintain a `{child}_count` column on the parent (issue #1325).
    #[serde(default)]
    pub counter_cache: Option<bool>,
    /// Text field names to make full-text searchable (issue #1319): emits
    /// `#[searchable]` on the model, `searchable` on the repository, the
    /// `search_vector` migration, and a wired search box in the index view.
    #[serde(default)]
    pub searchable: Vec<String>,
    /// Emit i18n-ready views (issue #1349) — the TOML equivalent of `--i18n`.
    #[serde(default)]
    pub i18n: bool,
    /// Emit the CSV import surface (issue #1393) — the TOML equivalent of
    /// `--import`.
    #[serde(default)]
    pub import: bool,
}

/// Project-level generator defaults, read from `[generate]` in the config file.
///
/// `deny_unknown_fields` so a typo inside `[generate]` (e.g. `ide = "uuid"` or
/// `id_type = "uuid"`) is a hard error rather than being silently ignored and
/// falling back to the default key type. This applies to both the strict
/// `--config` path and the lenient defaults-only reads (which validate the
/// `[generate]` table even while ignoring `[scaffold.*]` sections).
#[derive(Debug, Clone, Default, Deserialize)]
#[serde(deny_unknown_fields)]
struct GenerateDefaults {
    /// Default primary-key type (`"uuid"` or `"bigint"`).
    #[serde(default)]
    id: Option<String>,
}

// `deny_unknown_fields` so a mistyped top-level table (e.g. `[scafold.Post]`
// instead of `[scaffold.Post]`, or `[genrate]`) is a hard error when the file is
// used as an explicit `--config` scaffold source, rather than being silently
// ignored and producing a fieldless resource. Defaults-only reads use the
// lenient `GenerateDefaultsConfig` view instead.
#[derive(Debug, Clone, Default, Deserialize)]
#[serde(deny_unknown_fields)]
struct GeneratorConfig {
    #[serde(default)]
    scaffold: HashMap<String, ScaffoldConfigEntry>,
    #[serde(default)]
    generate: GenerateDefaults,
}

/// A defaults-only view of the config file. Reads the `[generate]` table and
/// ignores the *contents* of `[scaffold.*]` sections, so a defaults-only read
/// (e.g. `generate model`, or auto-discovered scaffold) does not fail on an
/// unrelated per-resource recipe that has a typo or an unsupported key — those
/// are only validated when the recipe is actually used via `--config`.
///
/// `deny_unknown_fields` still rejects *other* mistyped top-level tables/keys
/// (e.g. `[genrate]` or a stray top-level `id`) so a project-default typo is a
/// hard error rather than being silently dropped (which would fall back to the
/// default key type). The `scaffold` field is declared only so those recipe
/// tables are accepted-but-unvalidated; its contents are intentionally unused.
#[derive(Debug, Default, Deserialize)]
#[serde(deny_unknown_fields)]
struct GenerateDefaultsConfig {
    #[serde(default)]
    generate: GenerateDefaults,
    #[serde(default)]
    #[allow(dead_code)]
    scaffold: HashMap<String, toml::Value>,
}

/// Read and parse the whole generator config file at `config_path`.
///
/// # Errors
///
/// - [`GenerateError::Io`] if the file cannot be read.
/// - [`GenerateError::Config`] if the file is not valid TOML.
fn parse_config(config_path: &Path) -> Result<GeneratorConfig, GenerateError> {
    let content = std::fs::read_to_string(config_path)
        .map_err(|e| std::io::Error::new(e.kind(), format!("{}: {e}", config_path.display())))?;
    toml::from_str(&content).map_err(|e| {
        GenerateError::Config(format!("invalid TOML in {}: {e}", config_path.display()))
    })
}

/// Read the scaffold config entry for `resource_name` from `config_path`.
///
/// Returns `None` when the file is valid TOML but has no
/// `[scaffold.ResourceName]` section for the requested name.
///
/// The `[generate] id` project default is propagated into the returned entry's
/// `id` field so that callers do not need to handle the two-level default
/// separately.
///
/// # Errors
///
/// - [`GenerateError::Io`] if the file cannot be read.
/// - [`GenerateError::Config`] if the file is not valid TOML.
pub fn read_scaffold_config(
    config_path: &Path,
    resource_name: &str,
) -> Result<Option<ScaffoldConfigEntry>, GenerateError> {
    let mut config = parse_config(config_path)?;
    // Normalize to PascalCase so `bookmark` and `Bookmark` both match
    // `[scaffold.Bookmark]`, consistent with how the generator itself handles
    // resource names passed on the CLI.
    let mut entry = config.scaffold.remove(&pascal(resource_name));
    // Propagate [generate] id default when the per-resource section doesn't override it.
    if let Some(e) = entry.as_mut()
        && e.id.is_none()
    {
        e.id = config.generate.id;
    }
    Ok(entry)
}

/// Read ONLY the project-level `[generate]` defaults from `config_path` into a
/// scaffold entry, ignoring any per-resource `[scaffold.*]` sections.
///
/// Used for an **auto-discovered** `autumn.generate.toml` (no explicit
/// `--config`): a checked-in `[scaffold.Post]` recipe must NOT silently apply
/// to an ordinary `autumn generate scaffold Post …` invocation. Only the
/// project-wide defaults (the `id` type) are contributed; the per-resource
/// recipe is honoured solely when the user opts in with `--config`.
///
/// # Errors
///
/// - [`GenerateError::Io`] if the file cannot be read.
/// - [`GenerateError::Config`] if the file is not valid TOML.
pub fn read_generate_defaults_entry(
    config_path: &Path,
) -> Result<ScaffoldConfigEntry, GenerateError> {
    Ok(ScaffoldConfigEntry {
        id: read_generate_id(config_path)?,
        ..ScaffoldConfigEntry::default()
    })
}

/// Resolve a scaffold entry from an **explicit** `--config <path>`.
///
/// This preserves typo protection: when the requested
/// `[scaffold.ResourceName]` section is absent it errors, *unless*
///
/// - the file defines no `[scaffold.*]` sections at all (a pure `[generate]`
///   defaults file — there is nothing to typo), or
/// - the caller supplied fields on the CLI (the scaffold definition comes from
///   the command line, and the config is only consulted for defaults).
///
/// In those two cases it returns a default entry carrying the `[generate] id`
/// project default.
///
/// # Errors
///
/// - [`GenerateError::Io`] if the file cannot be read.
/// - [`GenerateError::Config`] if the file is not valid TOML, or the requested
///   section is missing and neither exception applies.
pub fn read_explicit_scaffold_config(
    config_path: &Path,
    resource_name: &str,
    cli_has_fields: bool,
) -> Result<ScaffoldConfigEntry, GenerateError> {
    // The `[scaffold.X]` section (with `[generate] id` already propagated).
    if let Some(entry) = read_scaffold_config(config_path, resource_name)? {
        return Ok(entry);
    }
    // Section absent: allow the project-default fallback only when there is no
    // scaffold table to have mistyped, or the CLI carries the field list.
    let config = parse_config(config_path)?;
    if config.scaffold.is_empty() || cli_has_fields {
        return Ok(ScaffoldConfigEntry {
            id: config.generate.id,
            ..ScaffoldConfigEntry::default()
        });
    }
    Err(GenerateError::Config(format!(
        "no [scaffold.{}] section found in {}",
        pascal(resource_name),
        config_path.display()
    )))
}

/// Read the raw project-level `[generate] id` string from `config_path`, if set.
///
/// Parses only the `[generate]` table (via [`GenerateDefaultsConfig`]), so an
/// unrelated `[scaffold.*]` recipe with a typo does not break defaults-only
/// reads.
///
/// # Errors
///
/// - [`GenerateError::Io`] if the file cannot be read.
/// - [`GenerateError::Config`] if the file is not valid TOML.
fn read_generate_id(config_path: &Path) -> Result<Option<String>, GenerateError> {
    let content = std::fs::read_to_string(config_path)
        .map_err(|e| std::io::Error::new(e.kind(), format!("{}: {e}", config_path.display())))?;
    let config: GenerateDefaultsConfig = toml::from_str(&content).map_err(|e| {
        GenerateError::Config(format!("invalid TOML in {}: {e}", config_path.display()))
    })?;
    Ok(config.generate.id)
}

/// Read the project-level `[generate]` defaults from `config_path`, returning
/// the `IdType` default if one is set.
///
/// # Errors
///
/// - [`GenerateError::Io`] if the file cannot be read.
/// - [`GenerateError::Config`] if the file is not valid TOML or `id` is invalid.
pub fn read_generate_defaults(config_path: &Path) -> Result<IdType, GenerateError> {
    read_generate_id(config_path)?.map_or_else(|| Ok(IdType::default()), |s| IdType::parse(&s))
}

/// Merge a TOML config entry with CLI-supplied values.
///
/// For each key, if the caller supplied a non-empty CLI slice that value set
/// replaces the TOML list; otherwise the TOML list is kept.
///
/// The `cli_id` parameter follows the precedence rule:
///   `--id` CLI > `[scaffold.X] id` TOML > `[generate] id` TOML > `BigSerial`.
///
/// # Errors
/// Returns [`GenerateError::Config`] if any `--id` value is unrecognised.
#[allow(clippy::too_many_arguments, clippy::fn_params_excessive_bools)]
pub fn merge_config_with_cli(
    config: ScaffoldConfigEntry,
    cli_fields: &[String],
    cli_indexes: &[String],
    cli_uniques: &[String],
    cli_validations: &[String],
    cli_defaults: &[String],
    cli_queries: &[String],
    cli_soft_delete: bool,
    cli_api: bool,
    cli_sharded: bool,
    cli_shard_key: Option<&str>,
    cli_live: bool,
    cli_id: Option<&str>,
    cli_live_validation: bool,
    cli_no_policy: bool,
    cli_belongs_to: Option<&str>,
    cli_counter_cache: bool,
    cli_searchable: &[String],
    cli_i18n: bool,
    cli_import: bool,
) -> Result<(Vec<String>, ScaffoldOptions), GenerateError> {
    let pick = |cli: &[String], toml: Vec<String>| -> Vec<String> {
        if cli.is_empty() { toml } else { cli.to_vec() }
    };
    let fields = pick(cli_fields, config.fields);
    let indexes = pick(cli_indexes, config.indexes);
    let uniques = pick(cli_uniques, config.uniques);
    let validations = pick(cli_validations, config.validations);
    let defaults = pick(cli_defaults, config.defaults);
    let queries = pick(cli_queries, config.queries);
    let searchable = pick(cli_searchable, config.searchable);
    // CLI flag wins; TOML config enables it when present.
    let soft_delete = cli_soft_delete || config.soft_delete;
    let api = cli_api || config.api;
    let sharded = cli_sharded || config.sharded;
    let shard_key = cli_shard_key.map(str::to_owned).or(config.shard_key);
    let live = cli_live || config.live;
    let live_validation = cli_live_validation || config.live_validation;
    let no_policy = cli_no_policy || config.no_policy;
    let belongs_to = cli_belongs_to.map(str::to_owned).or(config.belongs_to);
    let counter_cache = cli_counter_cache || config.counter_cache.unwrap_or(false);
    let i18n = cli_i18n || config.i18n;
    let import = cli_import || config.import;
    // Precedence: CLI > per-resource TOML > project-default TOML > BigSerial.
    let id_type = if let Some(s) = cli_id {
        IdType::parse(s)?
    } else if let Some(ref s) = config.id {
        IdType::parse(s)?
    } else {
        IdType::default()
    };
    Ok((
        fields,
        ScaffoldOptions {
            model: ModelOptions {
                indexes,
                uniques,
                validations,
                defaults,
                soft_delete,
                sharded,
                shard_key,
                id_type,
                searchable,
            },
            queries,
            api,
            live,
            live_validation,
            no_policy,
            belongs_to,
            counter_cache,
            i18n,
            import,
        },
    ))
}

#[cfg(test)]
mod tests {
    use super::*;
    use std::fs;
    use tempfile::TempDir;

    fn write_config(tmp: &TempDir, content: &str) -> std::path::PathBuf {
        let path = tmp.path().join("autumn.generate.toml");
        fs::write(&path, content).unwrap();
        path
    }

    // ── read_scaffold_config ──────────────────────────────────────────────

    #[test]
    fn parse_valid_scaffold_config() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            r#"
[scaffold.Bookmark]
fields      = ["url:String", "title:String", "tag:String", "alive:bool"]
indexes     = ["url", "tag"]
validations = ["url=url", "title=length:min=1,max=200"]
defaults    = ["alive=true"]
queries     = ["find_by_tag:tag", "find_by_alive:alive"]
"#,
        );

        let entry = read_scaffold_config(&path, "Bookmark")
            .unwrap()
            .expect("Bookmark section must be present");

        assert_eq!(
            entry.fields,
            vec!["url:String", "title:String", "tag:String", "alive:bool"]
        );
        assert_eq!(entry.indexes, vec!["url", "tag"]);
        assert_eq!(
            entry.validations,
            vec!["url=url", "title=length:min=1,max=200"]
        );
        assert_eq!(entry.defaults, vec!["alive=true"]);
        assert_eq!(
            entry.queries,
            vec!["find_by_tag:tag", "find_by_alive:alive"]
        );
    }

    #[test]
    fn parse_minimal_config_with_fields_only() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "[scaffold.Post]\nfields = [\"title:String\"]\n");

        let entry = read_scaffold_config(&path, "Post").unwrap().unwrap();
        assert_eq!(entry.fields, vec!["title:String"]);
        assert!(entry.indexes.is_empty());
        assert!(entry.validations.is_empty());
        assert!(entry.defaults.is_empty());
        assert!(entry.queries.is_empty());
    }

    #[test]
    fn snake_case_name_matches_pascal_case_toml_section() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "[scaffold.Bookmark]\nfields = [\"url:String\"]\n");

        // CLI input `bookmark` (snake_case) must find `[scaffold.Bookmark]`.
        let entry = read_scaffold_config(&path, "bookmark")
            .unwrap()
            .expect("snake_case name should resolve to PascalCase section");
        assert_eq!(entry.fields, vec!["url:String"]);
    }

    #[test]
    fn unknown_key_returns_config_error() {
        let tmp = TempDir::new().unwrap();
        // `index` is the wrong key; the correct key is `indexes`.
        let path = write_config(
            &tmp,
            "[scaffold.Post]\nfields = [\"title:String\"]\nindex = [\"title\"]\n",
        );

        let err = read_scaffold_config(&path, "Post").unwrap_err();
        assert!(
            matches!(err, GenerateError::Config(_)),
            "misspelled key should return Config error, got: {err:?}"
        );
        let msg = err.to_string();
        assert!(
            msg.contains("index"),
            "error should mention the unknown key; got: {msg}"
        );
    }

    #[test]
    fn missing_section_returns_none() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "[scaffold.Post]\nfields = [\"title:String\"]\n");

        let result = read_scaffold_config(&path, "Bookmark").unwrap();
        assert!(result.is_none(), "unknown resource should return None");
    }

    #[test]
    fn invalid_toml_returns_config_error() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "not valid toml {{{{");

        let err = read_scaffold_config(&path, "Bookmark").unwrap_err();
        assert!(
            matches!(err, GenerateError::Config(_)),
            "expected Config error, got: {err:?}"
        );
    }

    #[test]
    fn missing_file_returns_io_error() {
        let tmp = TempDir::new().unwrap();
        let path = tmp.path().join("nonexistent.toml");

        let err = read_scaffold_config(&path, "Bookmark").unwrap_err();
        assert!(
            matches!(err, GenerateError::Io(_)),
            "expected Io error for missing file, got: {err:?}"
        );
    }

    // ── read_explicit_scaffold_config (typo protection, issue #1400) ───────

    #[test]
    fn explicit_config_uses_matching_section() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "[scaffold.Post]\nfields = [\"title:String\"]\n");
        let entry = read_explicit_scaffold_config(&path, "Post", false).unwrap();
        assert_eq!(entry.fields, vec!["title:String"]);
    }

    #[test]
    fn explicit_config_missing_section_among_others_errors_without_cli_fields() {
        // Typo protection: the file defines a scaffold resource, but not the
        // requested one, and the CLI supplied no fields → likely a typo.
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "[scaffold.Other]\nfields = [\"name:String\"]\n");
        let err = read_explicit_scaffold_config(&path, "Post", false).unwrap_err();
        let msg = err.to_string();
        assert!(
            msg.contains("no [scaffold.Post] section"),
            "missing section with other sections present must error: {msg}"
        );
    }

    #[test]
    fn explicit_config_missing_section_ok_with_cli_fields() {
        // CLI supplies the field list, so the missing section is not fatal; the
        // [generate] id default still applies.
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[generate]\nid = \"uuid\"\n\n[scaffold.Other]\nfields = [\"name:String\"]\n",
        );
        let entry = read_explicit_scaffold_config(&path, "Post", true).unwrap();
        assert_eq!(entry.id.as_deref(), Some("uuid"));
        assert!(entry.fields.is_empty());
    }

    #[test]
    fn unknown_key_inside_generate_table_errors() {
        // A typo under [generate] must not be silently ignored (which would
        // fall back to BigSerial despite the user intending uuid).
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "[generate]\nide = \"uuid\"\n");
        let err = read_generate_defaults(&path).unwrap_err();
        assert!(
            matches!(err, GenerateError::Config(_)),
            "unknown [generate] key must error, got: {err:?}"
        );
        // The same applies to the defaults-only entry reader and the strict path.
        assert!(read_generate_defaults_entry(&path).is_err());
        assert!(read_scaffold_config(&path, "Post").is_err());
    }

    #[test]
    fn defaults_only_read_rejects_misspelled_top_level_table() {
        // A typo'd defaults table ([genrate]) or a stray top-level `id` key must
        // not be silently dropped (which would fall back to BigSerial despite the
        // user intending uuid). [scaffold.*] recipes stay ignored.
        for bad in [
            "[genrate]\nid = \"uuid\"\n",
            "id = \"uuid\"\n",
            "[generate]\nid = \"uuid\"\n\n[scafold.Post]\nfields = [\"x:String\"]\n",
        ] {
            let tmp = TempDir::new().unwrap();
            let path = write_config(&tmp, bad);
            assert!(
                read_generate_defaults(&path).is_err(),
                "defaults-only read must reject misspelled top-level config: {bad:?}"
            );
        }
    }

    #[test]
    fn defaults_only_read_tolerates_malformed_scaffold_recipe() {
        // A checked-in [scaffold.*] recipe with an unsupported/typo'd key must
        // NOT break defaults-only reads (generate model / auto-discovered
        // scaffold), which only consult [generate].
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[generate]\nid = \"uuid\"\n\n\
             [scaffold.Post]\nfields = [\"title:String\"]\nindex = [\"title\"]\n",
        );
        // `index` is an unknown key for ScaffoldConfigEntry (deny_unknown_fields),
        // so a full parse would fail — but the defaults-only readers must not.
        assert_eq!(read_generate_defaults(&path).unwrap(), IdType::Uuid);
        assert_eq!(
            read_generate_defaults_entry(&path).unwrap().id.as_deref(),
            Some("uuid")
        );
        // The strict, recipe-using reader still rejects the malformed section.
        assert!(read_scaffold_config(&path, "Post").is_err());
    }

    #[test]
    fn generate_defaults_entry_ignores_per_resource_recipe() {
        // Auto-discovery must contribute only [generate] defaults, never a
        // per-resource [scaffold.X] recipe's fields/booleans.
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[generate]\nid = \"uuid\"\n\n\
             [scaffold.Post]\nfields = [\"name:String\"]\napi = true\nsharded = true\n",
        );
        let entry = read_generate_defaults_entry(&path).unwrap();
        assert_eq!(
            entry.id.as_deref(),
            Some("uuid"),
            "[generate] id must carry over"
        );
        assert!(
            entry.fields.is_empty(),
            "per-resource fields must be ignored"
        );
        assert!(!entry.api, "per-resource api must be ignored");
        assert!(!entry.sharded, "per-resource sharded must be ignored");
    }

    #[test]
    fn explicit_config_misspelled_scaffold_table_errors() {
        // A mistyped top-level table name ([scafold.Post]) must not be silently
        // ignored as if the file were a pure [generate] defaults file.
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "[scafold.Post]\nfields = [\"title:String\"]\n");
        let err = read_explicit_scaffold_config(&path, "Post", false).unwrap_err();
        assert!(
            matches!(err, GenerateError::Config(_)),
            "misspelled top-level table must error, got: {err:?}"
        );
        // Defaults-only reads also reject a misspelled top-level table, so a
        // project-default typo is never silently dropped.
        assert!(read_generate_defaults(&path).is_err());
    }

    #[test]
    fn explicit_config_pure_generate_file_is_lenient() {
        // A file with no [scaffold.*] sections is a pure defaults file: there is
        // nothing to mistype, so a missing section is fine even without fields.
        let tmp = TempDir::new().unwrap();
        let path = write_config(&tmp, "[generate]\nid = \"uuid\"\n");
        let entry = read_explicit_scaffold_config(&path, "Post", false).unwrap();
        assert_eq!(entry.id.as_deref(), Some("uuid"));
    }

    // ── merge_config_with_cli ─────────────────────────────────────────────

    fn bookmark_entry() -> ScaffoldConfigEntry {
        ScaffoldConfigEntry {
            fields: vec!["url:String".into(), "tag:String".into()],
            indexes: vec!["url".into()],
            uniques: vec![],
            validations: vec!["url=url".into()],
            defaults: vec![],
            queries: vec!["find_by_url:url".into()],
            soft_delete: false,
            api: false,
            sharded: false,
            shard_key: None,
            live: false,
            id: None,
            live_validation: false,
            no_policy: false,
            belongs_to: None,
            counter_cache: None,
            searchable: vec![],
            i18n: false,
            import: false,
        }
    }

    fn merge(entry: ScaffoldConfigEntry) -> (Vec<String>, ScaffoldOptions) {
        merge_config_with_cli(
            entry,
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap()
    }

    #[test]
    fn merge_uses_toml_when_all_cli_empty() {
        let (fields, opts) = merge(bookmark_entry());
        assert_eq!(fields, vec!["url:String", "tag:String"]);
        assert_eq!(opts.model.indexes, vec!["url"]);
        assert_eq!(opts.model.validations, vec!["url=url"]);
        assert!(opts.model.defaults.is_empty());
        assert_eq!(opts.queries, vec!["find_by_url:url"]);
    }

    #[test]
    fn merge_cli_fields_override_toml_fields() {
        let (fields, _) = merge_config_with_cli(
            bookmark_entry(),
            &["title:String".into(), "body:Text".into()],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert_eq!(fields, vec!["title:String", "body:Text"]);
    }

    #[test]
    fn merge_cli_indexes_override_toml_indexes() {
        let (_, opts) = merge_config_with_cli(
            bookmark_entry(),
            &[],
            &["tag".into()],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert_eq!(opts.model.indexes, vec!["tag"]);
    }

    #[test]
    fn merge_cli_validations_override_toml_validations() {
        let (_, opts) = merge_config_with_cli(
            bookmark_entry(),
            &[],
            &[],
            &[],
            &["url=email".into()],
            &[],
            &[],
            false,
            false,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert_eq!(opts.model.validations, vec!["url=email"]);
    }

    #[test]
    fn merge_cli_defaults_override_toml_defaults() {
        let mut entry = bookmark_entry();
        entry.defaults = vec!["url=example.com".into()];
        let (_, opts) = merge_config_with_cli(
            entry,
            &[],
            &[],
            &[],
            &[],
            &["tag=general".into()],
            &[],
            false,
            false,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert_eq!(opts.model.defaults, vec!["tag=general"]);
    }

    #[test]
    fn merge_cli_queries_override_toml_queries() {
        let (_, opts) = merge_config_with_cli(
            bookmark_entry(),
            &[],
            &[],
            &[],
            &[],
            &[],
            &["find_by_tag:tag".into()],
            false,
            false,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert_eq!(opts.queries, vec!["find_by_tag:tag"]);
    }

    #[test]
    fn merge_empty_cli_keeps_empty_toml() {
        let entry = ScaffoldConfigEntry::default();
        let (fields, opts) = merge_config_with_cli(
            entry,
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert!(fields.is_empty());
        assert!(opts.model.indexes.is_empty());
        assert!(opts.model.validations.is_empty());
        assert!(opts.model.defaults.is_empty());
        assert!(opts.queries.is_empty());
    }

    #[test]
    fn merge_cli_soft_delete_flag_wins() {
        let (_, opts) = merge_config_with_cli(
            bookmark_entry(),
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            true,
            false,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert!(
            opts.model.soft_delete,
            "cli_soft_delete=true must set soft_delete on the merged options"
        );
    }

    #[test]
    fn merge_toml_soft_delete_propagates() {
        let mut entry = bookmark_entry();
        entry.soft_delete = true;
        let (_, opts) = merge(entry);
        assert!(
            opts.model.soft_delete,
            "soft_delete=true in TOML config must propagate when CLI flag is false"
        );
    }

    #[test]
    fn merge_soft_delete_false_when_both_unset() {
        let (_, opts) = merge(bookmark_entry());
        assert!(
            !opts.model.soft_delete,
            "soft_delete must be false when neither CLI nor TOML sets it"
        );
    }

    #[test]
    fn parse_scaffold_config_with_soft_delete() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[scaffold.Article]\nfields = [\"title:String\"]\nsoft_delete = true\n",
        );
        let entry = read_scaffold_config(&path, "Article")
            .unwrap()
            .expect("Article section must be present");
        assert!(
            entry.soft_delete,
            "soft_delete = true in TOML must be parsed into ScaffoldConfigEntry"
        );
    }

    #[test]
    fn merge_cli_api_flag_wins() {
        let (_, opts) = merge_config_with_cli(
            bookmark_entry(),
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            true,
            false,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert!(opts.api);
    }

    #[test]
    fn merge_toml_api_propagates() {
        let mut entry = bookmark_entry();
        entry.api = true;
        let (_, opts) = merge(entry);
        assert!(opts.api);
    }

    #[test]
    fn parse_scaffold_config_with_api() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[scaffold.Article]\nfields = [\"title:String\"]\napi = true\n",
        );
        let entry = read_scaffold_config(&path, "Article")
            .unwrap()
            .expect("Article section must be present");
        assert!(
            entry.api,
            "api = true in TOML must be parsed into ScaffoldConfigEntry"
        );
    }

    #[test]
    fn merge_cli_sharded_flag_wins() {
        let (_, opts) = merge_config_with_cli(
            bookmark_entry(),
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            true,
            None,
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert!(
            opts.model.sharded,
            "cli_sharded=true must set sharded on the merged options"
        );
    }

    #[test]
    fn merge_toml_sharded_propagates() {
        let mut entry = bookmark_entry();
        entry.sharded = true;
        let (_, opts) = merge(entry);
        assert!(
            opts.model.sharded,
            "sharded=true in TOML config must propagate when CLI flag is false"
        );
    }

    #[test]
    fn merge_shard_key_cli_overrides_toml() {
        let mut entry = bookmark_entry();
        entry.shard_key = Some("tenant_id".into());
        let (_, opts) = merge_config_with_cli(
            entry,
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            false,
            Some("user_id"),
            false,
            None,
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert_eq!(
            opts.model.shard_key.as_deref(),
            Some("user_id"),
            "CLI shard_key must override TOML shard_key"
        );
    }

    #[test]
    fn merge_shard_key_toml_used_when_no_cli() {
        let mut entry = bookmark_entry();
        entry.shard_key = Some("org_id".into());
        let (_, opts) = merge(entry);
        assert_eq!(
            opts.model.shard_key.as_deref(),
            Some("org_id"),
            "TOML shard_key must propagate when no CLI shard_key is given"
        );
    }

    #[test]
    fn parse_scaffold_config_with_sharded() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[scaffold.Account]\nfields = [\"tenant_id:i64\"]\nsharded = true\nshard_key = \"tenant_id\"\n",
        );
        let entry = read_scaffold_config(&path, "Account")
            .unwrap()
            .expect("Account section must be present");
        assert!(
            entry.sharded,
            "sharded = true in TOML must be parsed into ScaffoldConfigEntry"
        );
        assert_eq!(
            entry.shard_key.as_deref(),
            Some("tenant_id"),
            "shard_key in TOML must be parsed into ScaffoldConfigEntry"
        );
    }

    // ── id_type (issue #1400) ──────────────────────────────────────────────

    #[test]
    fn merge_cli_id_uuid_sets_uuid_id_type() {
        let (_, opts) = merge_config_with_cli(
            bookmark_entry(),
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            false,
            None,
            false,
            Some("uuid"),
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert_eq!(
            opts.model.id_type,
            IdType::Uuid,
            "cli --id uuid must set Uuid id_type"
        );
    }

    #[test]
    fn merge_toml_id_uuid_propagates() {
        let mut entry = bookmark_entry();
        entry.id = Some("uuid".into());
        let (_, opts) = merge(entry);
        assert_eq!(
            opts.model.id_type,
            IdType::Uuid,
            "[scaffold.X] id = 'uuid' must propagate"
        );
    }

    #[test]
    fn merge_cli_id_overrides_toml_id() {
        let mut entry = bookmark_entry();
        entry.id = Some("uuid".into());
        let (_, opts) = merge_config_with_cli(
            entry,
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            false,
            None,
            false,
            Some("bigint"),
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap();
        assert_eq!(
            opts.model.id_type,
            IdType::BigSerial,
            "CLI --id bigint must override TOML id = 'uuid'"
        );
    }

    #[test]
    fn merge_default_id_type_is_bigserial() {
        let (_, opts) = merge(bookmark_entry());
        assert_eq!(
            opts.model.id_type,
            IdType::BigSerial,
            "default id_type must be BigSerial (AC4)"
        );
    }

    #[test]
    fn merge_cli_bad_id_returns_error() {
        let err = merge_config_with_cli(
            bookmark_entry(),
            &[],
            &[],
            &[],
            &[],
            &[],
            &[],
            false,
            false,
            false,
            None,
            false,
            Some("guid"),
            false,
            false,
            None,
            false,
            &[],
            false,
            false,
        )
        .unwrap_err();
        let msg = err.to_string();
        assert!(
            msg.contains("guid"),
            "error must mention the bad value: {msg}"
        );
        assert!(
            msg.contains("uuid"),
            "error must list accepted values: {msg}"
        );
    }

    #[test]
    fn project_default_id_propagates_via_generate_section() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[generate]\nid = \"uuid\"\n\n[scaffold.Post]\nfields = [\"title:String\"]\n",
        );
        let defaults_id = read_generate_defaults(&path).unwrap();
        assert_eq!(
            defaults_id,
            IdType::Uuid,
            "[generate] id = 'uuid' must be read as Uuid"
        );
    }

    #[test]
    fn project_default_propagates_into_scaffold_entry() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[generate]\nid = \"uuid\"\n\n[scaffold.Post]\nfields = [\"title:String\"]\n",
        );
        let entry = read_scaffold_config(&path, "Post").unwrap().unwrap();
        assert_eq!(
            entry.id.as_deref(),
            Some("uuid"),
            "[generate] id must propagate into scaffold entry id when unset"
        );
    }

    #[test]
    fn per_resource_id_overrides_project_default() {
        let tmp = TempDir::new().unwrap();
        let path = write_config(
            &tmp,
            "[generate]\nid = \"uuid\"\n\n[scaffold.Post]\nfields = [\"title:String\"]\nid = \"bigint\"\n",
        );
        let entry = read_scaffold_config(&path, "Post").unwrap().unwrap();
        assert_eq!(
            entry.id.as_deref(),
            Some("bigint"),
            "per-resource id must not be overridden by [generate] default"
        );
    }
}