canic-host 0.111.0

use super::*;
use crate::{
    fleet_ensure::ops::{read_current, write_current},
    test_support::temp_dir,
};
use serde_json::json;
use std::fs;

#[test]
fn retained_selection_ignores_metadata_but_preserves_owned_incomplete_evidence() {
    let root = temp_dir("operation-evidence-selection");
    let paths = EnsurePaths::under(&root, "local", "fleet");
    fs::create_dir_all(paths.plan.parent().unwrap()).unwrap();
    fs::write(&paths.lock, b"").unwrap();
    fs::write(&paths.root_start_authority, b"generation hint").unwrap();
    for name in [
        ".DS_Store",
        "notes.txt",
        "journal.json.bak",
        ".plan.json.tmp",
    ] {
        fs::write(paths.plan.with_file_name(name), b"metadata").unwrap();
    }
    let inspections = paths
        .plan
        .with_file_name("infrastructure-bootstrap-inspections");
    fs::create_dir(&inspections).unwrap();
    assert!(!has_retained_files(&paths).unwrap());
    fs::write(inspections.join("issued.json"), b"unreadable paid evidence").unwrap();
    assert!(has_retained_files(&paths).unwrap());
    fs::remove_dir_all(&inspections).unwrap();
    for path in [&paths.plan, &paths.journal, &paths.state] {
        fs::write(path, b"incomplete operation").unwrap();
        assert!(has_retained_files(&paths).unwrap());
        fs::remove_file(path).unwrap();
    }
    fs::remove_dir_all(root).unwrap();
}

#[test]
fn infrastructure_forecast_distinguishes_unpaid_review_and_checks_its_identity() {
    let paths = retained();
    fs::remove_file(&paths.journal).unwrap();
    let mut plan = read(&paths.plan).unwrap().unwrap();
    plan["scope"] = json!("infrastructure_bootstrap");
    write_current(&paths.plan, &plan).unwrap();
    let before = fs::read(&paths.plan).unwrap();
    assert_eq!(
        infrastructure_funding_unavailable(&paths, "local", "fleet").unwrap(),
        InfrastructureFundingUnavailable::RetainedInfrastructureReview {
            operation_id: "a1".repeat(32),
            plan_sha256: "b2".repeat(32),
        }
    );
    for (field, value) in [
        ("fleet", "other"),
        ("environment", "staging"),
        ("operation_id", "invalid"),
        ("plan_sha256", "invalid"),
    ] {
        let mut invalid = plan.clone();
        invalid[field] = json!(value);
        write_current(&paths.plan, &invalid).unwrap();
        assert!(matches!(
            infrastructure_funding_unavailable(&paths, "local", "fleet"),
            Err(EnsureStateError::InvalidTerminalSource)
        ));
    }
    fs::write(&paths.plan, &before).unwrap();
    write_current(&paths.journal, &json!({"completion": "in_progress"})).unwrap();
    assert_eq!(
        infrastructure_funding_unavailable(&paths, "local", "fleet").unwrap(),
        InfrastructureFundingUnavailable::FleetNotCompleted
    );
    assert_eq!(fs::read(&paths.plan).unwrap(), before);
    assert!(!paths.lock.exists());
    fs::remove_dir_all(paths.workspace).unwrap();
}

#[test]
fn absent_operation_has_explicit_forecast_reason_without_creating_state() {
    let root = temp_dir("readiness-no-operation");
    let paths = EnsurePaths::under(&root, "local", "fleet");
    assert_eq!(
        infrastructure_funding_unavailable(&paths, "local", "fleet").unwrap(),
        InfrastructureFundingUnavailable::FleetNotCompleted
    );
    assert!(!root.exists());
}

pub(super) fn retained() -> EnsurePaths {
    let root = temp_dir("completed-operation-selection");
    let paths = EnsurePaths::under(&root, "local", "fleet");
    // Historical executable payloads are deliberately opaque. Only the terminal
    // envelope participates in selection; no omitted field gets a default.
    write_current(
        &paths.plan,
        &json!({
            "environment": "local", "fleet": "fleet", "scope": "full",
            "operation_id": "a1".repeat(32), "plan_sha256": "b2".repeat(32),
            "reviewed_desired": {"release": "0.110.38"},
            "reinstall": {"retired_contract": true}
        }),
    )
    .unwrap();
    write_current(
        &paths.journal,
        &json!({
            "fleet": "fleet", "operation_id": "a1".repeat(32),
            "plan_sha256": "b2".repeat(32), "completion": "converged",
            "effects": [{"state": "applied", "receipt": "opaque completed receipt"}],
            "successor_phases": [{"retired_contract": true}]
        }),
    )
    .unwrap();
    fs::write(&paths.state, b"opaque historical application state").unwrap();
    paths
}

#[test]
fn completed_contracts_are_not_decoded_as_recovery_work() {
    let paths = retained();
    let originals = [&paths.plan, &paths.journal, &paths.state].map(|path| fs::read(path).unwrap());
    let selected = completed(&paths, "local", "fleet").unwrap().unwrap();
    assert_eq!(selected.operation_id, "a1".repeat(32));
    assert_eq!(selected.completion, FleetEnsureCompletion::Converged);
    assert!(!paths.lock.exists());
    assert!(
        crate::fleet_ensure::workflow::retained_in_progress_plan::<std::io::Error>(
            &paths.workspace,
            "local",
            "fleet"
        )
        .unwrap()
        .is_none()
    );
    assert!(
        crate::fleet_ensure::workflow::retained_reinstall_apply_plan::<std::io::Error>(
            &paths.workspace,
            "local",
            "fleet",
            &"c3".repeat(32)
        )
        .unwrap()
        .is_none()
    );
    assert_eq!(
        originals,
        [&paths.plan, &paths.journal, &paths.state].map(|path| fs::read(path).unwrap())
    );
    fs::remove_dir_all(paths.workspace).unwrap();
}

#[test]
fn unfinished_paid_work_is_never_selected_as_history() {
    let paths = retained();
    let mut journal: Value = read_current(&paths.journal).unwrap().unwrap();
    journal["completion"] = json!("in_progress");
    journal["effects"][0]["state"] = json!("issued");
    write_current(&paths.journal, &journal).unwrap();
    assert!(completed(&paths, "local", "fleet").unwrap().is_none());
    assert!(
        crate::fleet_ensure::workflow::retained_in_progress_plan::<std::io::Error>(
            &paths.workspace,
            "local",
            "fleet"
        )
        .is_err()
    );
    journal["completion"] = json!("converged");
    write_current(&paths.journal, &journal).unwrap();
    assert!(matches!(
        completed(&paths, "local", "fleet"),
        Err(EnsureStateError::InvalidTerminalSource)
    ));
    fs::remove_dir_all(paths.workspace).unwrap();
}

#[test]
fn changed_identity_and_new_pending_plan_cannot_be_retired() {
    let paths = retained();
    for (environment, fleet) in [("staging", "fleet"), ("local", "other")] {
        assert!(matches!(
            completed(&paths, environment, fleet),
            Err(EnsureStateError::InvalidTerminalSource)
        ));
    }
    let mut plan: Value = read_current(&paths.plan).unwrap().unwrap();
    plan["plan_sha256"] = json!("c3".repeat(32));
    write_current(&paths.plan, &plan).unwrap();
    assert!(completed(&paths, "local", "fleet").unwrap().is_none());
    fs::remove_dir_all(paths.workspace).unwrap();
}

#[test]
fn completed_import_is_history_without_decoding_its_receipts() {
    let paths = retained();
    let path = paths.plan.with_file_name("capacity-import.json");
    let mut record = json!({
        "approved": true,
        "plan": {"sources": [{"binding": {"canister_id": "opaque recorded ID"}}]},
        "handoffs": [{"canister_id": "opaque recorded ID", "effect": {"state": "applied"}}],
        "operation": {"publication_started": true, "publication_complete": true,
            "settled_status_candid_hex": "aa", "released_status_candid_hex": "bb"}
    });
    write_current(&path, &record).unwrap();
    let original = fs::read(&path).unwrap();
    assert!(!capacity_import_in_progress(&paths).unwrap());
    assert_eq!(fs::read(&path).unwrap(), original);
    record["operation"]["publication_complete"] = json!(false);
    write_current(&path, &record).unwrap();
    assert!(capacity_import_in_progress(&paths).unwrap());
    record["operation"]["publication_complete"] = json!(true);
    record["handoffs"][0]["effect"]["state"] = json!("issued");
    write_current(&path, &record).unwrap();
    assert!(matches!(
        capacity_import_in_progress(&paths),
        Err(EnsureStateError::InvalidTerminalSource)
    ));
    record["approved"] = json!(false);
    record["handoffs"][0]["effect"] = Value::Null;
    write_current(&path, &record).unwrap();
    assert!(matches!(
        capacity_import_in_progress(&paths),
        Err(EnsureStateError::InvalidTerminalSource)
    ));
    record["operation"] = Value::Null;
    write_current(&path, &record).unwrap();
    assert!(!capacity_import_in_progress(&paths).unwrap());
    fs::remove_dir_all(paths.workspace).unwrap();
}

#[test]
fn completed_historical_shape_selects_current_reset_without_desired_decoding() {
    let paths = retained();
    let select = crate::fleet_ensure::workflow::clean_reinstall::selected;
    assert!(select(&paths.workspace, "local", "fleet", true, false).unwrap());
    assert!(!select(&paths.workspace, "local", "fleet", false, false).unwrap());
    crate::fleet_ensure::ops::retained_contract::check(&paths.workspace, "local", "fleet").unwrap();
    fs::remove_dir_all(paths.workspace).unwrap();
}

#[test]
fn completed_reset_selection_does_not_capture_a_later_ordinary_review() {
    let paths = retained();
    let selected = crate::fleet_ensure::workflow::clean_reinstall::selected;
    write_current(
        &paths.plan.with_file_name("clean-reinstall.json"),
        &json!({"opaque_completed_selection": true}),
    )
    .unwrap();
    let mut setup = read(&paths.plan).unwrap().unwrap();
    setup["scope"] = json!("infrastructure_bootstrap");
    let archive = paths
        .plan
        .with_file_name("infrastructure-bootstrap-completed");
    write_current(&archive.join("b2".repeat(32)).join("plan.json"), &setup).unwrap();
    assert!(selected(&paths.workspace, "local", "fleet", false, true).unwrap());
    assert!(!selected(&paths.workspace, "local", "fleet", false, false).unwrap());

    let mut later = read(&paths.plan).unwrap().unwrap();
    later["operation_id"] = json!("c3".repeat(32));
    later["plan_sha256"] = json!("d4".repeat(32));
    write_current(&paths.plan, &later).unwrap();
    for reinstall in [false, true] {
        for applying in [false, true] {
            assert_eq!(
                selected(&paths.workspace, "local", "fleet", reinstall, applying).unwrap(),
                reinstall
            );
        }
    }
    assert!(
        crate::fleet_ensure::workflow::clean_reinstall::retained_selection(
            &paths.workspace,
            "local",
            "fleet",
            false,
        )
        .unwrap()
        .is_none()
    );
    // Restore the owned operation without claiming completion: interrupted reset
    // convergence must continue to select its exact recovery owner.
    later["operation_id"] = setup["operation_id"].clone();
    write_current(&paths.plan, &later).unwrap();
    assert!(selected(&paths.workspace, "local", "fleet", false, true).unwrap());
    fs::remove_dir_all(paths.workspace).unwrap();
}