balls 0.5.5

//! Tests for the unified op log: the §4 threshold gate, the JSON-lines record
//! shape (op/phase stamping, absent-phase omission), and best-effort I/O.

use super::*;
use tempfile::TempDir;

/// A fixed clock so a record's `ts` is assertable.
fn clock() -> i64 {
    1_700_000_000
}

/// Build a `Log` writing to `<tmp>/log` at `threshold`, plus that path.
fn log_at(tmp: &TempDir, threshold: Level) -> (Log, std::path::PathBuf) {
    let path = tmp.path().join("log");
    (Log::new(path.clone(), threshold, Verb::Claim, clock), path)
}

/// The newline-delimited records written to `path` so far, each parsed as JSON.
fn lines(path: &std::path::Path) -> Vec<serde_json::Value> {
    let body = std::fs::read_to_string(path).unwrap_or_default();
    body.lines().map(|l| serde_json::from_str(l).unwrap()).collect()
}

#[test]
fn a_record_at_threshold_lands_as_one_json_line() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Info);
    log.record(Level::Info, "core", Some(Phase::Pre), "invoke tracker");
    let recs = lines(&path);
    assert_eq!(recs.len(), 1);
    let r = &recs[0];
    assert_eq!(r["ts"], 1_700_000_000_i64);
    assert_eq!(r["lvl"], "info");
    assert_eq!(r["src"], "core");
    assert_eq!(r["op"], "claim");
    assert_eq!(r["phase"], "pre");
    assert_eq!(r["msg"], "invoke tracker");
}

#[test]
fn an_op_level_record_omits_the_phase_key() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Info);
    log.record(Level::Info, "core", None, "begin");
    let recs = lines(&path);
    assert!(recs[0].get("phase").is_none());
}

#[test]
fn a_below_threshold_record_is_emitted_nowhere() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Info);
    log.record(Level::Debug, "core", None, "narration");
    assert!(!path.exists()); // never opened
}

#[test]
fn an_error_record_outranks_a_raised_threshold() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Error);
    log.record(Level::Info, "tracker", Some(Phase::Post), "info chatter"); // dropped
    log.record(Level::Error, "core", Some(Phase::Post), "plugin tracker exited 1");
    let recs = lines(&path);
    assert_eq!(recs.len(), 1);
    assert_eq!(recs[0]["lvl"], "error");
}

#[test]
fn a_plugin_record_keeps_full_json_in_the_file_even_though_the_terminal_shows_msg() {
    // bl-2013: the terminal echo of a plugin record (`src != "core"`) is its bare
    // `msg` text, but the FILE sink stays byte-for-byte JSON — the §6 machine
    // record is unchanged; only the human-facing terminal shape differs.
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Info);
    log.record(Level::Info, "tracker", Some(Phase::Pre), "tracker: store is stealth");
    let recs = lines(&path);
    assert_eq!(recs.len(), 1);
    assert_eq!(recs[0]["src"], "tracker");
    assert_eq!(recs[0]["lvl"], "info");
    assert_eq!(recs[0]["msg"], "tracker: store is stealth");
}

#[test]
fn a_core_record_keeps_full_json_in_the_file_even_though_the_terminal_shows_msg() {
    // bl-b6ef: a `core` record's terminal echo is now its bare `msg` text too
    // (symmetric with the plugin path) — the raw JSON envelope no longer reaches
    // the terminal on error paths. The FILE sink stays byte-for-byte JSON: the §6
    // machine record is unchanged, only the human-facing terminal shape differs.
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Error);
    log.record(Level::Error, "core", None, "prime failed: remote /nonexistent/repo.git");
    let recs = lines(&path);
    assert_eq!(recs.len(), 1);
    assert_eq!(recs[0]["src"], "core");
    assert_eq!(recs[0]["lvl"], "error");
    assert_eq!(recs[0]["msg"], "prime failed: remote /nonexistent/repo.git");
}

#[test]
fn appends_accumulate_in_order() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Debug);
    log.record(Level::Debug, "core", None, "first");
    log.record(Level::Info, "core", None, "second");
    let recs = lines(&path);
    assert_eq!(recs.len(), 2);
    assert_eq!(recs[0]["msg"], "first");
    assert_eq!(recs[1]["msg"], "second");
}

#[test]
fn an_unwritable_path_is_swallowed_not_panicked() {
    let tmp = TempDir::new().unwrap();
    // Parent dir does not exist ⇒ open fails; record must not panic.
    let path = tmp.path().join("missing").join("log");
    let log = Log::new(path.clone(), Level::Info, Verb::Close, clock);
    log.record(Level::Info, "core", None, "begin");
    assert!(!path.exists());
}

#[test]
fn level_parses_each_rung_strictly() {
    assert_eq!(Level::parse("debug").unwrap(), Level::Debug);
    assert_eq!(Level::parse("info").unwrap(), Level::Info);
    assert_eq!(Level::parse("error").unwrap(), Level::Error);
}

#[test]
fn an_unrecognised_level_is_an_error_naming_the_ladder() {
    // No `warn` rung (§4): a typo must fail loud, not silently run at `info`.
    let err = Level::parse("warn").unwrap_err().to_string();
    assert!(err.contains("'warn'"));
    assert!(err.contains("debug|info|error"));
}

#[test]
fn level_tokens_round_trip_and_order() {
    assert_eq!(Level::Debug.token(), "debug");
    assert_eq!(Level::Info.token(), "info");
    assert_eq!(Level::Error.token(), "error");
    assert!(Level::Debug < Level::Info && Level::Info < Level::Error);
}

#[test]
fn the_wall_clock_reads_a_recent_unix_time() {
    assert!(wall() >= 1_700_000_000); // well after 2023-11
}

#[test]
fn a_short_line_is_not_truncated() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Info);
    log.record(Level::Info, "core", None, "a normal message");
    let recs = lines(&path);
    assert_eq!(recs[0]["msg"], "a normal message");
    assert!(std::fs::read(&path).unwrap().len() <= LINE_MAX);
}

#[test]
fn an_oversized_msg_is_truncated_to_a_marked_line_under_pipe_buf() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Info);
    let huge = "x".repeat(10_000); // a long enveloped plugin-stderr line
    log.record(Level::Info, "tracker", Some(Phase::Post), &huge);
    // The whole line (incl. newline) stays atomic-appendable.
    assert!(std::fs::read(&path).unwrap().len() <= LINE_MAX);
    // Still one valid JSON object, envelope intact, msg marked lossy.
    let recs = lines(&path);
    assert_eq!(recs.len(), 1);
    assert_eq!(recs[0]["src"], "tracker");
    assert_eq!(recs[0]["phase"], "post");
    let msg = recs[0]["msg"].as_str().unwrap();
    assert!(msg.ends_with(TRUNC_MARKER));
    assert!(msg.starts_with('x'));
}

#[test]
fn a_heavily_escaped_oversized_msg_still_fits_pipe_buf() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Info);
    // Every byte serializes to `\u00XX` (6×) — the worst-case escaping expansion;
    // measuring the real serialized length is what keeps the line bounded.
    let nasty = "\u{1}".repeat(10_000);
    log.record(Level::Info, "core", None, &nasty);
    assert!(std::fs::read(&path).unwrap().len() <= LINE_MAX);
    let recs = lines(&path); // parses ⇒ valid JSON despite truncation
    assert!(recs[0]["msg"].as_str().unwrap().ends_with(TRUNC_MARKER));
}

#[test]
fn truncation_lands_on_a_char_boundary_keeping_valid_utf8() {
    let tmp = TempDir::new().unwrap();
    let (log, path) = log_at(&tmp, Level::Info);
    // 3-byte chars: the shrink target falls mid-char, so the backoff must walk
    // back to a boundary or the JSON string corrupts.
    let wide = "€".repeat(4_000);
    log.record(Level::Info, "core", None, &wide);
    assert!(std::fs::read(&path).unwrap().len() <= LINE_MAX);
    let recs = lines(&path); // from_str would error on invalid UTF-8/JSON
    let msg = recs[0]["msg"].as_str().unwrap();
    assert!(msg.strip_suffix(TRUNC_MARKER).unwrap().chars().all(|c| c == '€'));
}