frust-native-widgets 0.5.2

//! `ProgressBar` — a real `android.widget.ProgressBar`, built and driven from
//! Rust.
//!
//! Six properties: value, min, max, indeterminate, progress tint,
//! accessibility label — all [`Tier::Cheap`](super::Tier::Cheap), which makes
//! this the one control in the set whose *whole* property surface is safe to
//! drive at frame rate.
//!
//! Display-only: it emits no events, so its
//! [`on_event`](crate::runtime::NativeWidget::on_event) stays the trait's
//! default no-op.
//!
//! The app-space `[min, max]` range is mapped onto the platform's
//! `[0, max - min]` exactly as `slider.rs` describes (same `ProgressBar`
//! setters, same API-26 `setMin` problem, same mandatory max-before-progress
//! ordering).
//!
//! # Why this control does not use the one-argument constructor
//!
//! `new ProgressBar(context)` resolves the framework's default
//! `progressBarStyle`, which is the **circular spinner** — it ships an
//! indeterminate drawable and no progress drawable, so `setIndeterminate(false)`
//! on one draws nothing at all. The control therefore constructs with
//! `android.R.attr.progressBarStyleHorizontal` (the three-argument
//! `ProgressBar(Context, AttributeSet, int)`), the one stock style that
//! carries **both** drawables — so `indeterminate` is a live property here
//! rather than a construction-time fork.
//!
//! That style's own defaults (`indeterminate = false`, `[0, 100]`, at 0) are
//! what [`ProgressProps::platform_default`] describes, and therefore what the
//! create plan diffs against.
//!
//! # `indeterminate` per arm
//!
//! | arm | `Setter::Indeterminate` |
//! |-----|-------------------------|
//! | Android | live: the horizontal style carries both drawables (above) |
//! | macOS | live: `NSProgressIndicator.setIndeterminate:` + `startAnimation:`/`stopAnimation:` on the same bar-style view |
//! | iOS | **unsupported** — warns and no-ops (`UIProgressView` is determinate-only; its `platform` module doc) |
//!
//! The cross-platform route to a spinner is the shared spinner control (a
//! later control), not this property on iOS.

use super::{
    BACKGROUND_COLOR, CONTENT_DESCRIPTION, INDETERMINATE, MAX, MIN, PROGRESS_TINT, Plan, Setter,
    VALUE, color, owned_text, plan_color, slot_of,
};
use crate::NativeWidgetError;
use crate::registry::SlotId;
use crate::runtime::Params;

/// The registered kind string the api layer injects as `__frustControl`.
pub(crate) const KIND: &str = "progress";

/// The marker type registered under [`KIND`]; its
/// [`NativeWidget`](crate::runtime::NativeWidget) impl is the Android half
/// below.
pub(crate) struct Progress;

/// Everything a `ProgressBar` slot can be told, as one Rust-diffed value.
#[derive(Clone, Debug, PartialEq)]
pub(crate) struct ProgressProps {
    /// The differ's slot id — **not a property**. Carried for symmetry with
    /// the interactive controls (and because a future accessibility or
    /// diagnostics path is slot-keyed); no listener is ever attached.
    pub(crate) slot: SlotId,
    /// The position, in the app's own `[min, max]`.
    pub(crate) value: i32,
    /// The app-space range floor. Mapped away — see the module doc.
    pub(crate) min: i32,
    /// The app-space range ceiling.
    pub(crate) max: i32,
    /// Spinner mode: `true` ignores the value entirely.
    pub(crate) indeterminate: bool,
    /// Packed ARGB background fill (theme ladder L2 followup — see
    /// `crate::controls::label::LabelProps::background_color`'s doc for the
    /// full "why explicit" account), matching the page surface this
    /// `ProgressBar` sits on. `None` leaves the platform's own default when
    /// no theme is threaded.
    pub(crate) background_color: Option<i32>,
    /// Packed ARGB bar tint, or `None` to restore the platform's.
    pub(crate) progress_tint: Option<i32>,
    /// The TalkBack label.
    pub(crate) content_description: Option<String>,
}

impl ProgressProps {
    /// The state a horizontal-styled `ProgressBar` is constructed in:
    /// determinate, `[0, 100]`, at 0 (module doc's *why not the one-argument
    /// constructor*).
    pub(crate) fn platform_default(slot: SlotId) -> Self {
        Self {
            slot,
            value: 0,
            min: 0,
            max: super::slider::PLATFORM_DEFAULT_MAX,
            indeterminate: false,
            background_color: None,
            progress_tint: None,
            content_description: None,
        }
    }

    /// Decode a `ProgressBar` slot's params.
    ///
    /// # Errors
    /// [`NativeWidgetError::Params`] when the reserved identity keys are
    /// missing.
    pub(crate) fn decode(params: &Params<'_>) -> Result<Self, NativeWidgetError> {
        Ok(Self {
            slot: slot_of(params)?,
            value: int_or(params, VALUE, 0),
            min: int_or(params, MIN, 0),
            max: int_or(params, MAX, super::slider::PLATFORM_DEFAULT_MAX),
            indeterminate: params.flag(INDETERMINATE).unwrap_or(false),
            background_color: color(params, BACKGROUND_COLOR),
            progress_tint: color(params, PROGRESS_TINT),
            content_description: owned_text(params, CONTENT_DESCRIPTION),
        })
    }

    /// The platform-space span (`max - min`, never negative).
    pub(crate) fn span(&self) -> i32 {
        self.max.saturating_sub(self.min).max(0)
    }

    /// The platform-space progress (`value - min`, clamped into the range).
    pub(crate) fn progress(&self) -> i32 {
        self.value
            .clamp(self.min, self.max.max(self.min))
            .saturating_sub(self.min)
    }

    /// The setter-call plan for `old` → `new`, max before progress (the
    /// platform clamps — see the module doc).
    ///
    /// The value setters are planned even while `indeterminate` is true: the
    /// platform keeps the determinate state behind the spinner, so a control
    /// that flips back shows the right position immediately instead of a
    /// stale one.
    pub(crate) fn plan<'a>(old: &Self, new: &'a Self) -> Plan<'a> {
        let mut plan = Plan::new();
        if old.span() != new.span() {
            plan.push(Setter::Max(new.span()));
        }
        if old.progress() != new.progress() {
            plan.push(Setter::Progress(new.progress()));
        }
        if old.indeterminate != new.indeterminate {
            plan.push(Setter::Indeterminate(new.indeterminate));
        }
        plan_color(
            &mut plan,
            old.background_color,
            new.background_color,
            Setter::BackgroundColor,
        );
        if old.progress_tint != new.progress_tint {
            plan.push(Setter::ProgressTint(new.progress_tint));
        }
        if old.content_description != new.content_description {
            plan.push(Setter::ContentDescription(
                new.content_description.as_deref(),
            ));
        }
        plan
    }
}

/// An integer field with a documented fallback.
fn int_or(params: &Params<'_>, key: &str, fallback: i32) -> i32 {
    params
        .int(key)
        .and_then(|raw| i32::try_from(raw).ok())
        .unwrap_or(fallback)
}

/// The platform-space `(progress, span)` pair as a `[0.0, 1.0]` fraction —
/// what `UIProgressView.progress` takes.
///
/// UIKit's progress bar has no range at all: it is a fraction, where Android's
/// `ProgressBar` carries a real `max`. So the Apple arm alone has to divide,
/// and it does so from the *same* two planned values Android sets directly
/// ([`Setter::Max`] as the span, [`Setter::Progress`] as the offset value) —
/// no second mapping, no `Props` change.
///
/// Platform-neutral and host-tested on purpose: division by a span that can
/// legitimately be zero (an app asking for `min == max`, which
/// [`ProgressProps::span`] deliberately allows) is exactly the arithmetic
/// worth pinning where a plain `cargo test` can see it. A zero (or negative)
/// span reads as an empty bar rather than a NaN the platform would render as
/// nothing.
pub(crate) fn progress_fraction(progress: i32, span: i32) -> f32 {
    if span <= 0 {
        return 0.0;
    }
    (progress as f32 / span as f32).clamp(0.0, 1.0)
}

#[cfg(target_os = "android")]
pub(crate) mod platform {
    //! The Android half: build the `ProgressBar` and hand its planned setters
    //! to [`crate::controls::platform`].

    use jni::objects::{JObject, JValue};
    use jni::refs::Global;
    use jni::{jni_sig, jni_str};

    use super::{Progress, ProgressProps};
    use crate::NativeWidgetError;
    use crate::android::{NativeCtx, NativeView};
    use crate::controls::platform::{FRAME_CAPACITY, apply_all};
    use crate::runtime::{NativeWidget, Params};

    /// `android.widget.ProgressBar` — the framework class.
    const CLASS: &str = "android.widget.ProgressBar";

    /// `android.R$attr` — where the stock style attribute below lives (the
    /// binary name of the nested `R.attr` class, `$`-separated as
    /// `ClassLoader.loadClass` expects).
    const R_ATTR_CLASS: &str = "android.R$attr";

    /// `new ProgressBar(context, null, android.R.attr.progressBarStyleHorizontal)`
    /// — the module doc's *why not the one-argument constructor*.
    ///
    /// The style attribute is read from the framework's own `R.attr` rather
    /// than hardcoded (`0x01010078`): it is public API, and a literal
    /// resource id in Rust is exactly the kind of value that silently rots.
    ///
    /// # Errors
    /// [`NativeWidgetError::Platform`] when a class cannot be loaded, the call
    /// path carries no `Context`, or the constructor throws.
    fn new_horizontal_bar<'local>(
        ctx: &mut NativeCtx<'local, '_>,
    ) -> Result<JObject<'local>, NativeWidgetError> {
        let attrs = ctx.class(R_ATTR_CLASS)?;
        let style = ctx.run_jni("android.R.attr.progressBarStyleHorizontal", |env| {
            env.get_static_field(
                &attrs,
                jni_str!("progressBarStyleHorizontal"),
                jni_sig!("I"),
            )?
            .i()
        })?;
        let class = ctx.class(CLASS)?;
        let context = ctx.context()?;
        ctx.run_jni("new ProgressBar(Context, AttributeSet, int)", |env| {
            env.new_object(
                &class,
                jni_sig!("(Landroid/content/Context;Landroid/util/AttributeSet;I)V"),
                &[
                    JValue::Object(context),
                    JValue::Object(&JObject::null()),
                    JValue::Int(style),
                ],
            )
        })
    }

    /// A live progress bar's retained state.
    pub(crate) struct ProgressState {
        /// The bar's own global reference (the second one — see `button.rs`).
        view: Global<JObject<'static>>,
    }

    impl NativeWidget for Progress {
        type Props = ProgressProps;
        type State = ProgressState;

        fn decode_props(params: &Params<'_>) -> Result<Self::Props, NativeWidgetError> {
            ProgressProps::decode(params)
        }

        fn create(
            ctx: &mut NativeCtx<'_, '_>,
            props: &Self::Props,
        ) -> Result<(NativeView, Self::State), NativeWidgetError> {
            let view = new_horizontal_bar(ctx)?;
            let plan = ProgressProps::plan(&ProgressProps::platform_default(props.slot), props);
            ctx.with_frame(FRAME_CAPACITY, |ctx| apply_all(ctx, &view, &plan))?;
            let handle = ctx.retain(&view)?;
            let retained = ctx.retain(&view)?;
            Ok((NativeView::new(handle), ProgressState { view: retained }))
        }

        fn update(
            ctx: &mut NativeCtx<'_, '_>,
            state: &mut Self::State,
            old: &Self::Props,
            new: &Self::Props,
        ) -> Result<(), NativeWidgetError> {
            let plan = ProgressProps::plan(old, new);
            ctx.with_frame(FRAME_CAPACITY, |ctx| apply_all(ctx, &state.view, &plan))
        }

        fn dispose(
            _ctx: &mut NativeCtx<'_, '_>,
            _state: Self::State,
        ) -> Result<(), NativeWidgetError> {
            // Display-only: nothing attached; dropping the state releases its
            // global reference.
            Ok(())
        }
    }
}

#[cfg(target_os = "ios")]
pub(crate) mod platform {
    //! The Apple half: build the `UIProgressView` and apply the same planned
    //! setters the Android half hands JNI.
    //!
    //! # `UIProgressView` is a fraction, so the state carries the range
    //!
    //! Android's `ProgressBar` owns a real `[0, max]` range, so
    //! [`Setter::Max`] and [`Setter::Progress`] each map to one setter there.
    //! `UIProgressView` owns only a `[0.0, 1.0]` `progress` — the range lives
    //! nowhere on the view. So this arm mirrors the planned span/value pair in
    //! its own [`ProgressState`] and re-derives the fraction
    //! ([`super::progress_fraction`]) whenever either changes.
    //!
    //! That mirroring is load-bearing, not bookkeeping: a props change that
    //! moves `max` while leaving the platform-space value alone plans **only**
    //! [`Setter::Max`], yet the *fraction* it represents has changed. Applying
    //! `Max` therefore re-writes `progress` too — which on Android would be
    //! redundant and here is the whole point.
    //!
    //! # `indeterminate` has no `UIProgressView` equivalent
    //!
    //! UIKit splits the two modes across two classes: `UIProgressView` is
    //! determinate-only, and the spinner is `UIActivityIndicatorView` — a
    //! different view, which a live control cannot become. This control
    //! targets `UIProgressView`, so this arm honours every other property
    //! and reports [`Setter::Indeterminate`] as an unsupported request
    //! ([`crate::controls::platform::warn_indeterminate_unsupported`]) rather
    //! than silently pretending. Closing it needs a container hosting both
    //! views and a visibility swap — a design decision with real layout
    //! consequences (the host owns slot geometry,
    //! `crate::apple::ctx`'s *Frame-setting layout only*), deliberately not
    //! made unilaterally here.

    use objc2::MainThreadMarker;
    use objc2::rc::Retained;
    use objc2_ui_kit::UIProgressView;

    use super::{KIND, Progress, ProgressProps, progress_fraction};
    use crate::NativeWidgetError;
    use crate::apple::{NativeCtx, NativeView};
    use crate::controls::platform;
    use crate::controls::{Plan, Setter};
    use crate::runtime::{NativeWidget, Params};

    /// A live progress bar's retained state.
    pub(crate) struct ProgressState {
        view: Retained<UIProgressView>,
        /// The platform-space span the plan last set ([`Setter::Max`]).
        span: i32,
        /// The platform-space value the plan last set ([`Setter::Progress`]).
        progress: i32,
    }

    impl ProgressState {
        /// Push the mirrored `(progress, span)` pair onto the view as the
        /// fraction UIKit actually takes.
        fn refresh(&self) {
            self.view
                .setProgress(progress_fraction(self.progress, self.span));
        }
    }

    impl NativeWidget for Progress {
        type Props = ProgressProps;
        type State = ProgressState;

        fn decode_props(params: &Params<'_>) -> Result<Self::Props, NativeWidgetError> {
            ProgressProps::decode(params)
        }

        fn create(
            ctx: &mut NativeCtx<'_, '_>,
            props: &Self::Props,
        ) -> Result<(NativeView, Self::State), NativeWidgetError> {
            let mtm = ctx.mtm();
            let default = ProgressProps::platform_default(props.slot);
            // Seeded from the shared platform default rather than from
            // UIKit's own: a fresh `UIProgressView` reads 0.0, which IS the
            // fraction `(default.progress(), default.span())` denotes, so the
            // mirror and the view start in agreement with no setter call —
            // unlike `slider.rs`, whose fresh ceiling genuinely differs.
            let mut state = ProgressState {
                view: UIProgressView::new(mtm),
                span: default.span(),
                progress: default.progress(),
            };
            let plan = ProgressProps::plan(&default, props);
            apply_all(mtm, &mut state, &plan);
            let handle = NativeView::new(Retained::clone(&state.view).into_super(), mtm);
            Ok((handle, state))
        }

        fn update(
            ctx: &mut NativeCtx<'_, '_>,
            state: &mut Self::State,
            old: &Self::Props,
            new: &Self::Props,
        ) -> Result<(), NativeWidgetError> {
            let plan = ProgressProps::plan(old, new);
            apply_all(ctx.mtm(), state, &plan);
            Ok(())
        }

        fn dispose(
            _ctx: &mut NativeCtx<'_, '_>,
            _state: Self::State,
        ) -> Result<(), NativeWidgetError> {
            // Display-only: nothing attached, and dropping the state releases
            // its retain.
            Ok(())
        }
    }

    /// Execute a whole [`Plan`], front to back.
    fn apply_all(mtm: MainThreadMarker, state: &mut ProgressState, plan: &Plan<'_>) {
        for setter in plan {
            apply(mtm, state, setter);
        }
    }

    /// Execute one planned property write against `state`'s view.
    ///
    /// Takes the whole state, not just the view, because the range half of
    /// this control lives there (module doc).
    fn apply(mtm: MainThreadMarker, state: &mut ProgressState, setter: &Setter<'_>) {
        match *setter {
            Setter::Max(span) => {
                state.span = span;
                state.refresh();
            }
            Setter::Progress(progress) => {
                state.progress = progress;
                state.refresh();
            }
            Setter::Indeterminate(indeterminate) => {
                platform::warn_indeterminate_unsupported(indeterminate);
            }
            Setter::BackgroundColor(argb) => platform::set_background_color(&state.view, argb),
            Setter::ProgressTint(argb) => {
                state
                    .view
                    .setProgressTintColor(platform::optional_ui_color(argb).as_deref());
            }
            Setter::ContentDescription(label) => {
                platform::set_accessibility_label(&state.view, label, mtm);
            }
            ref other => platform::warn_unexpected_setter(KIND, other),
        }
    }
}

#[cfg(target_os = "macos")]
pub(crate) mod platform {
    //! The macOS half: build an `NSProgressIndicator` and apply the same
    //! planned setters the Android and iOS halves do. Display-only, like both
    //! of them: no target, no events.
    //!
    //! # A real range, like Android — no fraction mirror
    //!
    //! Unlike `UIProgressView` (a bare `[0.0, 1.0]` fraction, which is why the
    //! iOS arm mirrors the range in its state), `NSProgressIndicator` owns
    //! `minValue`/`maxValue`/`doubleValue`. So [`Setter::Max`] and
    //! [`Setter::Progress`] each map to one setter, exactly as on Android:
    //! `maxValue = span`, `doubleValue = offset`, with `minValue` pinned at 0
    //! (the shared platform-space mapping — `slider.rs`' module doc).
    //!
    //! # Construction-time normalization
    //!
    //! A fresh `NSProgressIndicator` is a bar, `[0, 100]` at 0 — but
    //! **indeterminate** (AppKit's documented default), where
    //! [`ProgressProps::platform_default`] is determinate. `create` therefore
    //! pins the style, clears `indeterminate` and restates the range before the
    //! diffed create plan runs, so a plan that sets no [`Setter::Indeterminate`]
    //! really does leave a determinate bar (`label.rs`' module doc names this
    //! shape).
    //!
    //! # `indeterminate` is implemented here
    //!
    //! Unlike the iOS arm (warn + no-op), `NSProgressIndicator` does both modes
    //! on one view: [`Setter::Indeterminate`]`(true)` sets `indeterminate` and
    //! starts its animation (an indeterminate bar that is not animating draws
    //! as a static empty track); `(false)` stops the animation first, then
    //! clears the flag. The value setters keep landing while the bar is
    //! indeterminate — the shared plan's "the value is kept current behind a
    //! spinner" contract — so flipping back shows the right position at once.
    //! `dispose` stops a running animation before the view is released.
    //!
    //! # Tint and background
    //!
    //! Background routes through `crate::controls::platform::
    //! set_background_color` (theme ladder L2: `wantsLayer` + a real
    //! `CALayer.backgroundColor` write). Tint has no AppKit counterpart:
    //! `NSProgressIndicator` exposes no tint property at all — it always
    //! draws its fill in the system accent colour, and the one historical
    //! knob, `controlTint`, is deprecated and deliberately never called —
    //! so `platform::set_tint` logs the no-op at debug rather than failing.
    //! Both still follow the app's brightness through L1.

    use objc2::rc::Retained;
    use objc2_app_kit::{NSProgressIndicator, NSProgressIndicatorStyle};

    use super::{KIND, Progress, ProgressProps};
    use crate::NativeWidgetError;
    use crate::appkit::{NativeCtx, NativeView};
    use crate::controls::platform;
    use crate::controls::{Plan, Setter};
    use crate::runtime::{NativeWidget, Params};

    /// A live progress bar's retained state.
    pub(crate) struct ProgressState {
        /// The indicator, kept typed for its own range/animation setters.
        view: Retained<NSProgressIndicator>,
    }

    impl NativeWidget for Progress {
        type Props = ProgressProps;
        type State = ProgressState;

        fn decode_props(params: &Params<'_>) -> Result<Self::Props, NativeWidgetError> {
            ProgressProps::decode(params)
        }

        fn create(
            ctx: &mut NativeCtx<'_, '_>,
            props: &Self::Props,
        ) -> Result<(NativeView, Self::State), NativeWidgetError> {
            let mtm = ctx.mtm();
            let view = NSProgressIndicator::new(mtm);
            let default = ProgressProps::platform_default(props.slot);
            // Module doc's *Construction-time normalization*: land exactly on
            // the shared default before the diffed plan runs.
            view.setStyle(NSProgressIndicatorStyle::Bar);
            view.setIndeterminate(default.indeterminate);
            view.setMinValue(0.0);
            view.setMaxValue(f64::from(default.span()));
            view.setDoubleValue(f64::from(default.progress()));
            let plan = ProgressProps::plan(&default, props);
            apply_all(&view, &plan);
            let handle = NativeView::new(Retained::clone(&view).into_super(), mtm);
            Ok((handle, ProgressState { view }))
        }

        fn update(
            _ctx: &mut NativeCtx<'_, '_>,
            state: &mut Self::State,
            old: &Self::Props,
            new: &Self::Props,
        ) -> Result<(), NativeWidgetError> {
            apply_all(&state.view, &ProgressProps::plan(old, new));
            Ok(())
        }

        fn dispose(
            _ctx: &mut NativeCtx<'_, '_>,
            state: Self::State,
        ) -> Result<(), NativeWidgetError> {
            // Display-only: nothing attached. A running indeterminate
            // animation is stopped before dropping `state` releases the view.
            if state.view.isIndeterminate() {
                set_indeterminate(&state.view, false);
            }
            Ok(())
        }
    }

    /// Execute a whole [`Plan`], front to back — max before progress.
    fn apply_all(view: &NSProgressIndicator, plan: &Plan<'_>) {
        for setter in plan {
            apply(view, setter);
        }
    }

    /// Execute one planned property write against `view`.
    fn apply(view: &NSProgressIndicator, setter: &Setter<'_>) {
        match *setter {
            Setter::Max(span) => view.setMaxValue(f64::from(span)),
            Setter::Progress(progress) => view.setDoubleValue(f64::from(progress)),
            Setter::Indeterminate(indeterminate) => set_indeterminate(view, indeterminate),
            Setter::BackgroundColor(argb) => platform::set_background_color(view, argb),
            Setter::ProgressTint(argb) => platform::set_tint(view, "ProgressTint", argb),
            Setter::ContentDescription(label) => platform::set_accessibility_label(view, label),
            ref other => platform::warn_unexpected_setter(KIND, other),
        }
    }

    /// Switch `view` between determinate and an animating indeterminate bar
    /// (module doc's *`indeterminate` is implemented here*).
    fn set_indeterminate(view: &NSProgressIndicator, indeterminate: bool) {
        if indeterminate {
            view.setIndeterminate(true);
            // SAFETY: `startAnimation:` takes an unused `sender` (`id`), for
            // which nil is the documented argument; objc2 marks it `unsafe`
            // only because an `AnyObject` parameter is untyped.
            unsafe { view.startAnimation(None) };
        } else {
            // SAFETY: as `startAnimation:` above — nil `sender`, unused.
            unsafe { view.stopAnimation(None) };
            view.setIndeterminate(false);
        }
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::runtime::with_identity;

    fn decode(body: &str) -> ProgressProps {
        let raw = with_identity(KIND, 2, body);
        ProgressProps::decode(&Params::new(&raw)).expect("decodes")
    }

    #[test]
    fn a_bare_payload_matches_the_constructed_bar_and_plans_nothing() {
        let props = decode("");
        assert_eq!(props, ProgressProps::platform_default(2));
        assert!(ProgressProps::plan(&ProgressProps::platform_default(2), &props).is_empty());
    }

    #[test]
    fn asking_for_a_spinner_plans_exactly_one_setter() {
        let props = decode("\"indeterminate\":true");
        assert_eq!(
            ProgressProps::plan(&ProgressProps::platform_default(2), &props),
            vec![Setter::Indeterminate(true)]
        );
    }

    #[test]
    fn the_create_plan_sets_exactly_the_non_default_fields_in_order() {
        let props = decode(
            "\"value\":30,\"min\":10,\"max\":110,\"progressTint\":9,\
             \"contentDescription\":\"upload\"",
        );
        assert_eq!(
            ProgressProps::plan(&ProgressProps::platform_default(2), &props),
            vec![
                Setter::Progress(20),
                Setter::ProgressTint(Some(9)),
                Setter::ContentDescription(Some("upload")),
            ],
            "span is already 100, so only the offset progress is planned"
        );
    }

    #[test]
    fn a_streaming_value_change_is_one_cheap_setter_per_update() {
        let old = decode("\"value\":1,\"max\":1000");
        let new = decode("\"value\":2,\"max\":1000");
        let plan = ProgressProps::plan(&old, &new);
        assert_eq!(plan, vec![Setter::Progress(2)]);
        assert!(
            plan.iter()
                .all(|setter| setter.tier() == super::super::Tier::Cheap),
            "the whole ProgressBar surface is frame-rate safe"
        );
    }

    #[test]
    fn the_value_is_kept_current_behind_a_spinner() {
        let bar = decode("\"value\":5,\"max\":10");
        let spinner = decode("\"value\":6,\"max\":10,\"indeterminate\":true");
        assert_eq!(
            ProgressProps::plan(&bar, &spinner),
            vec![Setter::Progress(6), Setter::Indeterminate(true)]
        );
    }

    // --- theme ladder L2 followup: the explicit background setter ----------

    #[test]
    fn a_background_color_alone_plans_exactly_one_setter() {
        let old = decode("\"backgroundColor\":1");
        let new = decode("\"backgroundColor\":2");
        assert_eq!(
            ProgressProps::plan(&old, &new),
            vec![Setter::BackgroundColor(2)]
        );
        assert_eq!(
            ProgressProps::plan(&new, &new),
            vec![],
            "an unchanged background plans nothing — the zero-FFI property"
        );
    }

    #[test]
    fn clearing_a_background_plans_nothing_unlike_a_tint() {
        let with_bg = decode("\"backgroundColor\":5");
        let without = decode("");
        assert_eq!(ProgressProps::plan(&with_bg, &without), vec![]);
        assert_eq!(
            ProgressProps::plan(&without, &with_bg),
            vec![Setter::BackgroundColor(5)]
        );
    }

    // --- the Apple arm's fraction mapping -----------------------------------

    #[test]
    fn the_planned_span_and_value_become_a_unit_fraction() {
        let props = decode("\"value\":30,\"min\":10,\"max\":110");
        // Exactly the two numbers the plan carries — read back through the
        // same accessors the Apple `apply` mirrors into its own state.
        assert_eq!((props.progress(), props.span()), (20, 100));
        assert_eq!(progress_fraction(props.progress(), props.span()), 0.2);
    }

    #[test]
    fn the_fraction_spans_the_whole_range_including_both_ends() {
        assert_eq!(progress_fraction(0, 100), 0.0);
        assert_eq!(progress_fraction(50, 100), 0.5);
        assert_eq!(progress_fraction(100, 100), 1.0);
    }

    #[test]
    fn an_empty_range_reads_as_an_empty_bar_rather_than_nan() {
        // `ProgressProps::span` deliberately allows a zero span (an app asking
        // for min == max, or an inverted range) — the divisor guard is what
        // keeps that from reaching UIKit as a NaN.
        let inverted = decode("\"value\":3,\"min\":10,\"max\":2");
        assert_eq!(inverted.span(), 0);
        let fraction = progress_fraction(inverted.progress(), inverted.span());
        assert_eq!(fraction, 0.0);
        assert!(!fraction.is_nan());
        assert_eq!(progress_fraction(7, 0), 0.0);
        assert_eq!(progress_fraction(7, -5), 0.0);
    }

    #[test]
    fn a_value_beyond_the_span_is_clamped_into_the_unit_interval() {
        // `plan` already clamps in app space, so this is belt-and-braces
        // against a span that shrank without the value being replanned — the
        // Max-only diff the Apple arm re-derives its fraction for.
        assert_eq!(progress_fraction(150, 100), 1.0);
        assert_eq!(progress_fraction(-10, 100), 0.0);
    }
}