omni-dev 0.46.0

//! Charts and slicers via `spreadsheets.batchUpdate` (issue #1797,
//! [ADR-0081](../../../docs/adrs/adr-0081.md) §3).
//!
//! Extended by issue #1837 with `move-chart`/`move-slicer`
//! (`updateEmbeddedObjectPosition`) and `update-chart-border`
//! (`updateEmbeddedObjectBorder`).
//!
//! One module for both, per the issue's own framing: a slicer is an
//! embedded object exactly like a chart, and both are removed by the same
//! `deleteEmbeddedObject` request, addressed by `objectId` alone with no
//! discriminator naming which kind it is.
//!
//! **Gate.** Every mutating verb here — including both deletes — reaches
//! `DriveOperation::SheetsStructure`. ADR-0081 §3 settles this the same way
//! `unmerge-cells`/`clear-data-validation` were settled in ADR-0078: a
//! chart or slicer is a property of the *sheet*, not the sheet's grid
//! *data*, one level further out than a merge or a validation rule but the
//! same kind of thing. The unrecoverability is real, so `delete-chart`/
//! `delete-slicer` read back and report the object's spec — type, title,
//! anchor position — before ever sending the request, in both `--dry-run`
//! and the real run's `drivemutation` record (the `discarded_cells`
//! treatment applied to an object instead of a value). `list-charts`/
//! `list-slicers` are read-only and ungated, like `list-protections`.
//!
//! **Chart subset (v1).** `basicChart` restricted to `chartType` ∈
//! {COLUMN, BAR, LINE, AREA, SCATTER} and `pieChart` — the issue's own
//! chosen first cut. Every other chart type (bubble, candlestick, org,
//! histogram, waterfall, treemap, scorecard, data-source) is a documented
//! cut, not a silent gap.
//!
//! **`update-chart`'s crux: no field mask.** `updateChartSpec` replaces a
//! chart's entire `ChartSpec`, unlike every other `update*` request in this
//! crate. `merge_chart_spec` fetches the existing spec, refuses it outright
//! if it isn't one of the two supported kinds (rather than silently
//! discarding a histogram's configuration), refuses a basic↔pie switch
//! (the two unions carry domain/series too differently to convert), and
//! otherwise applies only the flags the caller actually set — preserving
//! everything else, including every field this crate doesn't model, via
//! each spec type's `#[serde(flatten)] extra` map. `update-slicer` is the
//! opposite case: `updateSlicerSpec` *does* take a field mask, so it only
//! ever names the fields actually set.
//!
//! **`move-chart`/`move-slicer`'s crux: the field mask is rooted at
//! `overlayPosition`, not `newPosition`.** `updateEmbeddedObjectPosition`'s
//! own rule is that "the root `newPosition.overlayPosition` is implied and
//! should not be specified" — the one request in this file whose mask isn't
//! rooted at the request's own payload field (cf. `update-slicer`'s mask,
//! rooted at `spec`). `overlay_position_update` builds both the position and
//! the mask together so the two can't drift apart; a resize-only move (no
//! `--anchor`) still carries the object's *current* anchor forward on the
//! wire, since `OverlayPosition.anchor_cell` is a required field there, even
//! though the mask never names it. A chart on its own sheet has no overlay
//! position to carry forward, so moving it onto a grid requires `--anchor`;
//! `--new-sheet` sends no `fields` at all.
//!
//! **`update-chart-border` is colour-only.** `EmbeddedObjectBorder` models
//! `colorStyle` alone — no style, no width — so `--clear` sends an empty
//! border (`border: {}`) with the same `"colorStyle"` mask a set does.
//!
//! **Confirmed live (issue #1929).** A chart that never had its border
//! touched reads back with no `border` field at all. But `--clear` does
//! *not* return a chart to that state: it reads back with `border` present
//! and an all-omitted `colorStyle.rgbColor` — proto3 dropping every
//! zero-valued channel. Sending an explicit `--color 000000` (pure black)
//! reads back **byte-for-byte identical** to a clear: `{"colorStyle":
//! {"rgbColor": {}}}` either way. There is no second field to break the
//! tie, so "cleared" and "explicit black" are genuinely indistinguishable
//! from a read alone — [`describe_border_color`] reports that ambiguity
//! rather than guessing. Whether the Sheets UI actually paints a visible
//! black border after `--clear` was not checked (this crate cannot inspect
//! the rendered UI); what's confirmed is only the wire shape.
//!
//! **Documented cuts, matching this feature's general stance:**
//! `COMBO`/`STEPPED_AREA` basic charts (need a per-series `type` this crate
//! doesn't model), and condition-based slicer filter criteria
//! (`FilterCriteria` supports `hiddenValues` only, the same cut `filter.rs`
//! makes).
//!
//! Shape mirrors `filter.rs`: compose/validate, resolve against a
//! freshly-fetched workbook, gate, dry-run, mutate, log.

use std::collections::BTreeMap;
use std::path::PathBuf;
use std::time::{Duration, Instant};

use serde::Serialize;

use crate::cli::drive::format::{write_scalar_jsonl, JsonlSerialize};
use crate::drive::client::DriveClient;
use crate::drive::files_api::FilesApi;
use crate::drive::lease::check::{
    conclude_native_leased_write, gate_optional_leased_write, FromLeaseRefusal, LeaseGateRefusal,
    LeasedWrite,
};
use crate::drive::sheets::a1;
use crate::drive::sheets::api::{
    applied_reply_unreadable_line, BatchUpdateOutcome, RetryHint, SheetsApi,
};
use crate::drive::sheets::client::SheetsClient;
use crate::drive::sheets::format::parse_hex_color;
use crate::drive::sheets::grid_range;
use crate::drive::sheets::target_gate;
use crate::drive::sheets::types::{
    AddChartRequest, AddSlicerRequest, BasicChartAxis, BasicChartDomain, BasicChartSeries,
    BasicChartSpec, BatchUpdateRequestItem, BatchUpdateResponse, ChartData, ChartSourceRange,
    ChartSpec, Color, ColorStyle, DeleteEmbeddedObjectRequest, EmbeddedChart, EmbeddedObjectBorder,
    EmbeddedObjectPosition, FilterCriteria, GridCoordinate, GridRange, OverlayPosition,
    PieChartSpec, Sheet, Slicer, SlicerSpec, Spreadsheet, UpdateChartSpecRequest,
    UpdateEmbeddedObjectBorderRequest, UpdateEmbeddedObjectPositionRequest,
    UpdateSlicerSpecRequest,
};
use crate::drive::types::SheetTargetRefusal;
use crate::drive::write_gate::{self, DecidingRule, DriveOperation, FolderPermissionRule};
use crate::request_log::{self, DriveMutationOutcome};

/// The five `basicChart` `chartType` values this crate builds or accepts an
/// update onto. `COMBO` and `STEPPED_AREA` are valid wire values Sheets
/// itself accepts, but neither is offered — see the module docs.
const SUPPORTED_BASIC_CHART_TYPES: &[&str] = &["COLUMN", "BAR", "LINE", "AREA", "SCATTER"];

/// Which mutation to perform.
#[derive(Debug, Clone, PartialEq)]
pub enum EmbeddedObjectVerb {
    /// Add a chart.
    AddChart {
        /// `column`/`bar`/`line`/`area`/`scatter`/`pie`.
        chart_type: String,
        /// The domain (category/x-axis) range.
        domain: String,
        /// The data series ranges — exactly one for a pie chart, one or
        /// more for a basic chart.
        series: Vec<String>,
        /// Sheet title, supplying the prefix for `domain`/`series`/
        /// `anchor` when they don't carry their own.
        sheet: Option<String>,
        /// The chart's title.
        title: Option<String>,
        /// The chart's subtitle.
        subtitle: Option<String>,
        /// `bottom`/`top`/`left`/`right`/`none`.
        legend: Option<String>,
        /// `none`/`stacked`/`percent` — basic charts only.
        stacked: Option<String>,
        /// Leading rows/columns of the source range that are headers —
        /// basic charts only.
        header_count: Option<i64>,
        /// The horizontal (`BOTTOM_AXIS`) axis title — basic charts only.
        horizontal_axis_title: Option<String>,
        /// The vertical (`LEFT_AXIS`) axis title — basic charts only.
        vertical_axis_title: Option<String>,
        /// `0.0`-`1.0` center-hole radius — pie charts only.
        pie_hole: Option<f64>,
        /// The anchor cell, when not `--new-sheet`.
        anchor: Option<String>,
        /// Additional horizontal offset from the anchor cell, in pixels.
        offset_x: Option<i64>,
        /// Additional vertical offset from the anchor cell, in pixels.
        offset_y: Option<i64>,
        /// The chart's width in pixels.
        width: Option<i64>,
        /// The chart's height in pixels.
        height: Option<i64>,
        /// Put the chart on a brand-new sheet of its own, instead of
        /// anchoring it to an existing one. Mutually exclusive with
        /// `anchor`/`offset_x`/`offset_y`/`width`/`height`.
        new_sheet: bool,
    },
    /// Replace an existing chart's spec.
    UpdateChart {
        /// Which chart to update, discovered via `list-charts`.
        chart_id: i64,
        /// Change the chart's type, when set. Refused if it would switch
        /// between a basic chart and a pie chart.
        chart_type: Option<String>,
        /// Replace the domain range, when set (requires `series` too).
        domain: Option<String>,
        /// Replace every series wholesale, when non-empty.
        series: Vec<String>,
        /// Sheet title, supplying the prefix for `domain`/`series` when
        /// they don't carry their own.
        sheet: Option<String>,
        /// Change the title, when set.
        title: Option<String>,
        /// Change the subtitle, when set.
        subtitle: Option<String>,
        /// Change the legend position, when set.
        legend: Option<String>,
        /// Change the stacking mode, when set — basic charts only.
        stacked: Option<String>,
        /// Change the header row/column count, when set — basic charts
        /// only.
        header_count: Option<i64>,
        /// Change the horizontal axis title, when set — basic charts only.
        horizontal_axis_title: Option<String>,
        /// Change the vertical axis title, when set — basic charts only.
        vertical_axis_title: Option<String>,
        /// Change the pie-hole radius, when set — pie charts only.
        pie_hole: Option<f64>,
    },
    /// Remove a chart.
    DeleteChart {
        /// Which chart to remove, discovered via `list-charts`.
        chart_id: i64,
    },
    /// Add a slicer.
    AddSlicer {
        /// Sheet title, supplying the prefix for `range`/`anchor` when
        /// they don't carry their own.
        sheet: Option<String>,
        /// The range the slicer filters.
        range: String,
        /// The absolute 0-based sheet column (`0` = column A) the filter
        /// criteria apply to — not an offset within `range`. Must fall
        /// inside `range`'s columns.
        column: i64,
        /// Values to hide in `column`.
        hide_values: Vec<String>,
        /// A human-readable name for the slicer.
        title: Option<String>,
        /// Whether the slicer also filters pivot tables built from
        /// `range`.
        apply_to_pivot_tables: Option<bool>,
        /// The anchor cell.
        anchor: String,
        /// Additional horizontal offset from the anchor cell, in pixels.
        offset_x: Option<i64>,
        /// Additional vertical offset from the anchor cell, in pixels.
        offset_y: Option<i64>,
        /// The slicer's width in pixels.
        width: Option<i64>,
        /// The slicer's height in pixels.
        height: Option<i64>,
    },
    /// Change an existing slicer's range, filter column/criteria, title,
    /// or pivot-table linkage.
    UpdateSlicer {
        /// Which slicer to change, discovered via `list-slicers`.
        slicer_id: i64,
        /// Sheet title, supplying the prefix for `range` when it doesn't
        /// carry its own.
        sheet: Option<String>,
        /// Replace the filtered range, when set.
        range: Option<String>,
        /// Replace the filtered column, when set — an absolute 0-based
        /// sheet column (`0` = column A), which must fall inside the
        /// slicer's (new or existing) range.
        column: Option<i64>,
        /// Replace the hidden-value criteria, when non-empty.
        hide_values: Vec<String>,
        /// Reset the filter criteria to empty.
        clear_criteria: bool,
        /// Change the title, when set.
        title: Option<String>,
        /// Change the pivot-table linkage, when set.
        apply_to_pivot_tables: Option<bool>,
    },
    /// Remove a slicer.
    DeleteSlicer {
        /// Which slicer to remove, discovered via `list-slicers`.
        slicer_id: i64,
    },
    /// Move and/or resize an existing chart (issue #1837).
    MoveChart {
        /// Which chart to move, discovered via `list-charts`.
        chart_id: i64,
        /// Sheet title, supplying the prefix for `anchor` when it doesn't
        /// carry its own.
        sheet: Option<String>,
        /// The new anchor cell, when the chart stays (or becomes) an
        /// overlay. Required for a chart on its own sheet, which has no
        /// existing anchor to carry forward.
        anchor: Option<String>,
        /// Additional horizontal offset from the anchor cell, in pixels.
        offset_x: Option<i64>,
        /// Additional vertical offset from the anchor cell, in pixels.
        offset_y: Option<i64>,
        /// The chart's new width in pixels.
        width: Option<i64>,
        /// The chart's new height in pixels.
        height: Option<i64>,
        /// Move the chart onto a brand-new sheet of its own. Mutually
        /// exclusive with every other field but `chart_id`.
        new_sheet: bool,
    },
    /// Move and/or resize an existing slicer (issue #1837). No own-sheet
    /// placement — a slicer can only ever be an overlay.
    MoveSlicer {
        /// Which slicer to move, discovered via `list-slicers`.
        slicer_id: i64,
        /// Sheet title, supplying the prefix for `anchor` when it doesn't
        /// carry its own.
        sheet: Option<String>,
        /// The new anchor cell, when set.
        anchor: Option<String>,
        /// Additional horizontal offset from the anchor cell, in pixels.
        offset_x: Option<i64>,
        /// Additional vertical offset from the anchor cell, in pixels.
        offset_y: Option<i64>,
        /// The slicer's new width in pixels.
        width: Option<i64>,
        /// The slicer's new height in pixels.
        height: Option<i64>,
    },
    /// Set or clear a chart's border colour (issue #1837).
    UpdateChartBorder {
        /// Which chart to update, discovered via `list-charts`.
        chart_id: i64,
        /// The new border colour, as `#RRGGBB`. Mutually exclusive with
        /// `clear`.
        color: Option<String>,
        /// Remove the chart's border entirely. Mutually exclusive with
        /// `color`.
        clear: bool,
    },
}

impl EmbeddedObjectVerb {
    const fn log_operation(&self) -> &'static str {
        match self {
            Self::AddChart { .. } => "sheets-add-chart",
            Self::UpdateChart { .. } => "sheets-update-chart",
            Self::DeleteChart { .. } => "sheets-delete-chart",
            Self::AddSlicer { .. } => "sheets-add-slicer",
            Self::UpdateSlicer { .. } => "sheets-update-slicer",
            Self::DeleteSlicer { .. } => "sheets-delete-slicer",
            Self::MoveChart { .. } => "sheets-move-chart",
            Self::MoveSlicer { .. } => "sheets-move-slicer",
            Self::UpdateChartBorder { .. } => "sheets-update-chart-border",
        }
    }

    const fn label(&self) -> &'static str {
        match self {
            Self::AddChart { .. } => "add-chart",
            Self::UpdateChart { .. } => "update-chart",
            Self::DeleteChart { .. } => "delete-chart",
            Self::AddSlicer { .. } => "add-slicer",
            Self::UpdateSlicer { .. } => "update-slicer",
            Self::DeleteSlicer { .. } => "delete-slicer",
            Self::MoveChart { .. } => "move-chart",
            Self::MoveSlicer { .. } => "move-slicer",
            Self::UpdateChartBorder { .. } => "update-chart-border",
        }
    }
}

/// Per-call options.
#[derive(Debug, Clone)]
pub struct EmbeddedObjectOptions {
    /// Spreadsheet id.
    pub spreadsheet_id: String,
    /// Which mutation to perform.
    pub verb: EmbeddedObjectVerb,
    /// Classify and describe only; never call `batchUpdate`.
    pub dry_run: bool,
    /// The lease token presented via `--lease`. Checked only when the
    /// deciding rule requires one
    /// ([`write_gate::decided_rule_requires_lease`], ADR-0080 §1/§9);
    /// `None` is only ever valid when it does not.
    pub lease_token: Option<String>,
    /// Path to the lease ledger the token is checked against. Production
    /// callers pass `crate::drive::lease::ledger::ledger_path`'s own
    /// result; tests pass a path under a `tempdir`.
    pub ledger_path: PathBuf,
}

/// A chart or slicer's identifying details, as reported in a preview or a
/// completed result — the "type, title or id, anchor position" ADR-0081 §3
/// requires before an unrecoverable delete.
#[derive(Debug, Clone, Serialize, PartialEq, Eq)]
pub struct EmbeddedObjectSummary {
    /// The object's stable id.
    pub object_id: i64,
    /// `"chart"` or `"slicer"`.
    pub kind: String,
    /// The chart type (`"COLUMN"`, `"PIE"`, …). `None` for a slicer.
    #[serde(skip_serializing_if = "Option::is_none")]
    pub chart_type: Option<String>,
    /// The object's title, if it has one.
    #[serde(skip_serializing_if = "Option::is_none")]
    pub title: Option<String>,
    /// A human-readable rendering of where the object is anchored.
    pub position: String,
    /// The chart's existing border colour, as `#RRGGBB`. `None` for a
    /// slicer (no border field on the wire) or a chart with no border set.
    /// Lets `update-chart-border`'s preview report the colour about to be
    /// replaced or cleared (issue #1837).
    #[serde(skip_serializing_if = "Option::is_none")]
    pub border: Option<String>,
}

/// What happened (or, under `--dry-run`, would happen).
#[derive(Debug, Clone, Serialize, PartialEq, Eq)]
#[serde(tag = "status", rename_all = "kebab-case")]
pub enum EmbeddedObjectResult {
    /// `--dry-run`, and the gate would allow it. `object` is populated for
    /// `update-chart`/`update-slicer` (the pre-change state) and for
    /// `delete-chart`/`delete-slicer` (the ADR-0081 §3 preview).
    WouldChange {
        /// A human-readable summary of the effect.
        summary: String,
        /// The object as it stands now, for an update or a delete.
        #[serde(skip_serializing_if = "Option::is_none")]
        object: Option<Box<EmbeddedObjectSummary>>,
    },
    /// The target is not a Google Sheet.
    RefusedNotASpreadsheet {
        /// The target's actual MIME type.
        mime_type: String,
    },
    /// The target is a shortcut, which we do not follow.
    RefusedShortcut,
    /// The target has no parents this account can see.
    RefusedNoVisibleParents,
    /// The named sheet does not exist in this workbook.
    RefusedSheetNotFound {
        /// The title that was not found.
        title: String,
        /// The titles that do exist.
        available: Vec<String>,
    },
    /// The verb's own arguments were invalid — a bad range/anchor, an
    /// unsupported flag combination, or nothing to change.
    RefusedInvalidRange {
        /// What was wrong and why.
        detail: String,
    },
    /// `update-chart`/`delete-chart` named a `--chart-id`, or
    /// `update-slicer`/`delete-slicer` a `--slicer-id`, that does not exist
    /// in this workbook.
    RefusedObjectNotFound {
        /// The id that was not found.
        object_id: i64,
    },
    /// A chart-only verb (`update-chart`/`delete-chart`/`move-chart`/
    /// `update-chart-border`) named an id that exists but belongs to a
    /// slicer, or a slicer-only verb (`update-slicer`/`delete-slicer`/
    /// `move-slicer`) named one that belongs to a chart. Distinct from
    /// [`Self::RefusedObjectNotFound`] — the id is real, just the wrong
    /// kind of object — so the message can point straight at the `list-*`
    /// command that would have shown it.
    RefusedWrongObjectKind {
        /// The id that was named.
        object_id: i64,
        /// `"chart"` or `"slicer"` — what the verb expected.
        expected: String,
        /// `"chart"` or `"slicer"` — what the id actually names.
        found: String,
    },
    /// `update-chart` named a chart whose existing spec is not one of the
    /// two supported kinds (basic or pie), or would switch between them.
    RefusedUnsupportedChart {
        /// The chart in question.
        chart_id: i64,
        /// The existing (or requested) kind that can't be handled, for the
        /// error message.
        detail: String,
    },
    /// The folder write-permission gate refused it.
    Blocked {
        /// The rule that decided the refusal, if any.
        decided_by: Option<DecidingRule>,
    },
    /// No `--lease` was presented, and the deciding rule requires one
    /// (ADR-0080 §9).
    RefusedNoLease,
    /// The presented lease has expired, or was never a token this ledger
    /// knows about.
    RefusedLeaseExpired,
    /// The presented lease is bound to a different file id.
    RefusedLeaseWrongFile,
    /// The file has moved since the lease's recorded `version` — the
    /// staleness check (ADR-0080 §6).
    RefusedLeaseStale,
    /// The mutation succeeded.
    Changed {
        /// Same summary as [`Self::WouldChange`].
        summary: String,
        /// The object's stable id — server-assigned for `add-chart`/
        /// `add-slicer`, otherwise the one resolved against.
        #[serde(skip_serializing_if = "Option::is_none")]
        object_id: Option<i64>,
        /// The object as it stood immediately before this change, for an
        /// update or a delete — same as [`Self::WouldChange`]'s `object`.
        #[serde(skip_serializing_if = "Option::is_none")]
        object: Option<Box<EmbeddedObjectSummary>>,
    },
    /// The API answered 2xx — the mutation **was applied** — but its reply
    /// could not be read (issue #2021). Distinct from [`Self::Failed`]: a
    /// retry here would duplicate the object. The server-assigned id of an
    /// added chart or slicer was in that reply, so it is unknown.
    AppliedReplyUnreadable {
        /// Same summary as [`Self::WouldChange`].
        summary: String,
        /// Why the reply could not be read.
        detail: String,
    },
    /// An API or validation error.
    Failed {
        /// A human-readable summary of what failed.
        detail: String,
    },
}

impl FromLeaseRefusal for EmbeddedObjectResult {
    fn from_no_lease() -> Self {
        Self::RefusedNoLease
    }
    fn from_lease_expired() -> Self {
        Self::RefusedLeaseExpired
    }
    fn from_lease_wrong_file() -> Self {
        Self::RefusedLeaseWrongFile
    }
    fn from_lease_stale() -> Self {
        Self::RefusedLeaseStale
    }
    fn from_lease_failed(detail: String) -> Self {
        Self::Failed { detail }
    }
}

impl EmbeddedObjectResult {
    fn log_status(&self) -> &'static str {
        match self {
            Self::WouldChange { .. } => "would-change",
            Self::RefusedNotASpreadsheet { .. } => "refused-not-a-spreadsheet",
            Self::RefusedShortcut => "refused-shortcut",
            Self::RefusedNoVisibleParents => "refused-no-visible-parents",
            Self::RefusedSheetNotFound { .. } => "refused-sheet-not-found",
            Self::RefusedInvalidRange { .. } => "refused-invalid-range",
            Self::RefusedObjectNotFound { .. } => "refused-object-not-found",
            Self::RefusedWrongObjectKind { .. } => "refused-wrong-object-kind",
            Self::RefusedUnsupportedChart { .. } => "refused-unsupported-chart",
            Self::Blocked { .. } => "blocked",
            Self::RefusedNoLease => LeaseGateRefusal::NoLease.log_status(),
            Self::RefusedLeaseExpired => LeaseGateRefusal::Expired.log_status(),
            Self::RefusedLeaseWrongFile => LeaseGateRefusal::WrongFile.log_status(),
            Self::RefusedLeaseStale => LeaseGateRefusal::Stale.log_status(),
            Self::Changed { .. } => "changed",
            Self::AppliedReplyUnreadable { .. } => "applied-reply-unreadable",
            Self::Failed { .. } => "failed",
        }
    }
}

/// The full outcome of one attempt.
#[derive(Debug, Clone, Serialize, PartialEq)]
pub struct EmbeddedObjectOutcome {
    /// The spreadsheet acted on.
    pub spreadsheet_id: String,
    /// Its Drive file name, when the metadata fetch got that far.
    #[serde(skip_serializing_if = "Option::is_none")]
    pub file_name: Option<String>,
    /// The folder the gate evaluated against.
    #[serde(skip_serializing_if = "Option::is_none")]
    pub resolved_folder_id: Option<String>,
    /// The sheet the object is (or would be) anchored on — `None` for a
    /// chart put on its own new sheet, since that sheet doesn't exist yet.
    #[serde(skip_serializing_if = "Option::is_none")]
    pub sheet_id: Option<i64>,
    /// Which mutation was attempted. Not serialised.
    #[serde(skip)]
    pub verb: EmbeddedObjectVerb,
    /// What happened.
    pub result: EmbeddedObjectResult,
}

impl JsonlSerialize for EmbeddedObjectOutcome {
    fn write_jsonl(&self, out: &mut dyn std::io::Write) -> anyhow::Result<()> {
        write_scalar_jsonl(self, out)
    }
}

/// Runs one embedded-object mutation, logging every attempt that isn't a
/// dry run.
pub async fn embedded_object(
    drive: &DriveClient,
    sheets: &SheetsClient,
    opts: &EmbeddedObjectOptions,
    rules: &[FolderPermissionRule],
) -> EmbeddedObjectOutcome {
    let started = Instant::now();
    let outcome = embedded_object_inner(drive, sheets, opts, rules).await;
    if !opts.dry_run {
        record_attempt(&outcome, opts, started.elapsed());
    }
    outcome
}

async fn embedded_object_inner(
    drive: &DriveClient,
    sheets: &SheetsClient,
    opts: &EmbeddedObjectOptions,
    rules: &[FolderPermissionRule],
) -> EmbeddedObjectOutcome {
    let bare = |result| EmbeddedObjectOutcome {
        spreadsheet_id: opts.spreadsheet_id.clone(),
        file_name: None,
        resolved_folder_id: None,
        sheet_id: None,
        verb: opts.verb.clone(),
        result,
    };

    if let Err(detail) = validate_verb(&opts.verb) {
        return bare(EmbeddedObjectResult::RefusedInvalidRange { detail });
    }

    let (target, decision, resolved_folder_id, requires_lease) = match target_gate::resolve(
        drive,
        &opts.spreadsheet_id,
        DriveOperation::SheetsStructure,
        rules,
    )
    .await
    {
        target_gate::TargetGateOutcome::MetadataFetchFailed { detail } => {
            return bare(EmbeddedObjectResult::Failed { detail })
        }
        target_gate::TargetGateOutcome::Refused { target, refusal } => {
            let result = match refusal {
                SheetTargetRefusal::Shortcut => EmbeddedObjectResult::RefusedShortcut,
                SheetTargetRefusal::NotASpreadsheet { mime_type } => {
                    EmbeddedObjectResult::RefusedNotASpreadsheet { mime_type }
                }
                SheetTargetRefusal::NoVisibleParents => {
                    EmbeddedObjectResult::RefusedNoVisibleParents
                }
            };
            return EmbeddedObjectOutcome {
                spreadsheet_id: opts.spreadsheet_id.clone(),
                file_name: Some(target.name),
                resolved_folder_id: None,
                sheet_id: None,
                verb: opts.verb.clone(),
                result,
            };
        }
        target_gate::TargetGateOutcome::GateFetchFailed { target, detail } => {
            return EmbeddedObjectOutcome {
                spreadsheet_id: opts.spreadsheet_id.clone(),
                file_name: Some(target.name),
                resolved_folder_id: None,
                sheet_id: None,
                verb: opts.verb.clone(),
                result: EmbeddedObjectResult::Failed { detail },
            };
        }
        target_gate::TargetGateOutcome::Gated {
            target,
            decision,
            resolved_folder_id,
            requires_lease,
        } => (target, decision, resolved_folder_id, requires_lease),
    };

    let pre_gated = |sheet_id, result| EmbeddedObjectOutcome {
        spreadsheet_id: opts.spreadsheet_id.clone(),
        file_name: Some(target.name.clone()),
        resolved_folder_id: resolved_folder_id.clone(),
        sheet_id,
        verb: opts.verb.clone(),
        result,
    };

    if decision.verdict == write_gate::Verdict::Deny {
        return pre_gated(
            None,
            EmbeddedObjectResult::Blocked {
                decided_by: decision.decided_by,
            },
        );
    }

    let api = SheetsApi::new(sheets);
    let workbook = match api
        .get_spreadsheet_with_embedded_objects(&opts.spreadsheet_id)
        .await
    {
        Ok(workbook) => workbook,
        Err(err) => {
            return pre_gated(
                None,
                EmbeddedObjectResult::Failed {
                    detail: format!("{err:#}"),
                },
            )
        }
    };

    let plan = match build_plan(&workbook, &opts.verb) {
        Ok(plan) => plan,
        Err(result) => return pre_gated(None, result),
    };

    if opts.dry_run {
        return pre_gated(
            plan.sheet_id,
            EmbeddedObjectResult::WouldChange {
                summary: plan.summary.clone(),
                object: plan.before.clone().map(Box::new),
            },
        );
    }

    let gated = |result| pre_gated(plan.sheet_id, result);

    let files_api = FilesApi::new(drive);
    let leased = LeasedWrite {
        log_prefix: "drive sheets embedded-object",
        operation: opts.verb.log_operation(),
        ledger_path: &opts.ledger_path,
        file_id: &opts.spreadsheet_id,
    };
    let lease_grant = match gate_optional_leased_write(
        leased,
        &files_api,
        requires_lease,
        opts.lease_token.as_deref(),
    )
    .await
    {
        Ok(grant) => grant,
        Err(err) => return gated(err.into_result()),
    };

    let result = match conclude_native_leased_write(
        leased,
        &lease_grant,
        &files_api,
        api.batch_update(&opts.spreadsheet_id, vec![plan.request])
            .await,
        |err| format!("{err:#}"),
    )
    .await
    {
        Ok(BatchUpdateOutcome::Applied(response)) => {
            let object_id = added_object_id(&response).or(plan.existing_id);
            EmbeddedObjectResult::Changed {
                summary: plan.summary,
                object_id,
                object: plan.before.map(Box::new),
            }
        }
        Ok(BatchUpdateOutcome::AppliedReplyUnreadable { detail }) => {
            EmbeddedObjectResult::AppliedReplyUnreadable {
                summary: plan.summary,
                detail,
            }
        }
        Err(err) => EmbeddedObjectResult::Failed {
            detail: format!("{err:#}"),
        },
    };
    drop(lease_grant);
    gated(result)
}

/// Rejects a `--pie-hole` value outside the API's `0.0`-`1.0` range.
fn validate_pie_hole(pie_hole: Option<f64>) -> Result<(), String> {
    match pie_hole {
        Some(hole) if !(0.0..=1.0).contains(&hole) => Err(format!(
            "--pie-hole must be between 0.0 and 1.0, got {hole}"
        )),
        _ => Ok(()),
    }
}

/// Rejects a verb whose own arguments are internally inconsistent, cheaply,
/// before ever fetching the workbook.
fn validate_verb(verb: &EmbeddedObjectVerb) -> Result<(), String> {
    match verb {
        EmbeddedObjectVerb::AddChart {
            chart_type,
            series,
            pie_hole,
            ..
        } => {
            if series.is_empty() {
                return Err("at least one --series is required".to_string());
            }
            // Checked before `validate_pie_hole`'s range check, not after:
            // `chart_type` is already fully known from user input (unlike
            // `update-chart`, which only learns the existing chart's kind
            // after fetching the workbook), so an inapplicable `--pie-hole`
            // is cheap to catch here rather than letting the range check
            // mask it — a user fixing an out-of-range value would
            // otherwise "fix" it only to learn the flag never applied.
            if pie_hole.is_some() && !matches!(parse_chart_type(chart_type), Ok(ChartKind::Pie)) {
                return Err("--pie-hole only applies to a pie chart".to_string());
            }
            validate_pie_hole(*pie_hole)?;
            Ok(())
        }
        EmbeddedObjectVerb::UpdateChart {
            chart_type,
            domain,
            series,
            title,
            subtitle,
            legend,
            stacked,
            header_count,
            horizontal_axis_title,
            vertical_axis_title,
            pie_hole,
            ..
        } => {
            let nothing_to_change = chart_type.is_none()
                && domain.is_none()
                && series.is_empty()
                && title.is_none()
                && subtitle.is_none()
                && legend.is_none()
                && stacked.is_none()
                && header_count.is_none()
                && horizontal_axis_title.is_none()
                && vertical_axis_title.is_none()
                && pie_hole.is_none();
            if nothing_to_change {
                return Err(
                    "nothing to change: pass --type, --domain, --series, --title, --subtitle, \
                     --legend, --stacked, --header-count, --horizontal-axis-title, \
                     --vertical-axis-title, or --pie-hole"
                        .to_string(),
                );
            }
            // `--domain` and `--series` are deliberately *not* required
            // together: `merge_basic_chart`/`merge_pie_chart` read the
            // existing spec and only overwrite the field a flag actually
            // names, so `--series` alone (e.g. adding a second series to
            // an existing chart) or `--domain` alone (e.g. the range shifted
            // after an insert) each fully work on their own. A prior
            // version of this check required both together on the
            // mistaken premise that `updateChartSpec` itself couples
            // them — it doesn't; only the *whole request* has no field
            // mask (see `UpdateChartSpecRequest`'s doc comment), which is
            // orthogonal to whether this client-side merge treats the two
            // fields independently.
            validate_pie_hole(*pie_hole)?;
            Ok(())
        }
        EmbeddedObjectVerb::UpdateSlicer {
            range,
            column,
            hide_values,
            clear_criteria,
            title,
            apply_to_pivot_tables,
            ..
        } => {
            let nothing_to_change = range.is_none()
                && column.is_none()
                && hide_values.is_empty()
                && !clear_criteria
                && title.is_none()
                && apply_to_pivot_tables.is_none();
            if nothing_to_change {
                return Err(
                    "nothing to change: pass --range/--sheet, --column, --hide-values, \
                     --clear-criteria, --title, or --apply-to-pivot-tables"
                        .to_string(),
                );
            }
            // Checked here *and* via `conflicts_with` on the CLI leaf's two
            // flags: the CLI rejection is what a normal `omni-dev` user
            // sees, but `validate_verb` is the actual gate — every caller,
            // not just the CLI, funnels through `embedded_object()` — so
            // the check belongs here regardless, and duplicating it costs
            // nothing since it's unreachable through the CLI in practice.
            //
            // Unlike `filter.rs`'s `update-filter-view`, where
            // `--clear-sort`/`--clear-criteria` **compose** with
            // `--sort-by`/`--hide-values` (clear resets to empty, then the
            // new entries are layered on top — see `build_update`), a
            // slicer's `FilterCriteria` is a single value, not a per-column
            // map: `--clear-criteria` and `--hide-values` would both just
            // overwrite it wholesale, so "both together" has no sensible
            // combined meaning to compose, unlike the per-column case.
            if *clear_criteria && !hide_values.is_empty() {
                return Err("--clear-criteria and --hide-values are mutually exclusive".to_string());
            }
            Ok(())
        }
        EmbeddedObjectVerb::MoveChart {
            sheet,
            anchor,
            offset_x,
            offset_y,
            width,
            height,
            new_sheet,
            ..
        } => {
            // Checked *before* `nothing_to_change` below: a `--sheet`-only
            // call (no `--anchor`, nothing else set either) would otherwise
            // fall through `nothing_to_change` and report the generic
            // "nothing to change" error instead of naming the actual
            // problem. `--sheet` only supplies the prefix `--anchor`
            // doesn't carry itself; without `--anchor` it has nothing to
            // prefix and would otherwise be silently ignored. The CLI
            // leaf's `requires = "anchor"` on `--sheet` already refuses
            // this, but `validate_verb` is the real gate (see the comment
            // above the slicer arm's equivalent check).
            if sheet.is_some() && anchor.is_none() {
                return Err("--sheet has no effect without --anchor".to_string());
            }
            let nothing_to_change = !new_sheet
                && anchor.is_none()
                && offset_x.is_none()
                && offset_y.is_none()
                && width.is_none()
                && height.is_none();
            if nothing_to_change {
                return Err(
                    "nothing to change: pass --anchor, --offset-x, --offset-y, --width, \
                     --height, or --new-sheet"
                        .to_string(),
                );
            }
            Ok(())
        }
        EmbeddedObjectVerb::MoveSlicer {
            sheet,
            anchor,
            offset_x,
            offset_y,
            width,
            height,
            ..
        } => {
            // Checked *before* `nothing_to_change` below, for the same
            // reason as the chart arm above: a `--sheet`-only call must
            // name `--sheet`'s own problem, not fall through to the
            // generic "nothing to change" error. Checked here *and* via
            // `requires = "anchor"` on the CLI leaf's `--sheet` flag, for
            // the same reason noted throughout this function:
            // `validate_verb` is the actual gate every caller funnels
            // through, not just the CLI.
            if sheet.is_some() && anchor.is_none() {
                return Err("--sheet has no effect without --anchor".to_string());
            }
            let nothing_to_change = anchor.is_none()
                && offset_x.is_none()
                && offset_y.is_none()
                && width.is_none()
                && height.is_none();
            if nothing_to_change {
                return Err(
                    "nothing to change: pass --anchor, --offset-x, --offset-y, --width, or \
                     --height"
                        .to_string(),
                );
            }
            Ok(())
        }
        EmbeddedObjectVerb::UpdateChartBorder { color, clear, .. } => match (color, clear) {
            (None, false) => Err("nothing to change: pass --color or --clear".to_string()),
            (Some(_), true) => Err("--color and --clear are mutually exclusive".to_string()),
            _ => Ok(()),
        },
        EmbeddedObjectVerb::DeleteChart { .. }
        | EmbeddedObjectVerb::DeleteSlicer { .. }
        | EmbeddedObjectVerb::AddSlicer { .. } => Ok(()),
    }
    .map_err(|detail: String| detail)
    .and(match verb {
        EmbeddedObjectVerb::AddChart {
            anchor,
            new_sheet,
            offset_x,
            offset_y,
            width,
            height,
            ..
        } => {
            if *new_sheet {
                if anchor.is_some()
                    || offset_x.is_some()
                    || offset_y.is_some()
                    || width.is_some()
                    || height.is_some()
                {
                    Err(
                        "--new-sheet cannot be combined with --anchor/--offset-x/--offset-y/\
                         --width/--height"
                            .to_string(),
                    )
                } else {
                    Ok(())
                }
            } else if anchor.is_none() {
                Err("either --anchor or --new-sheet is required".to_string())
            } else {
                Ok(())
            }
        }
        // Mirrors `AddChart`'s own `--new-sheet` conflict check above,
        // verbatim except that `move-chart` has no unconditional "an anchor
        // is required" branch: leaving every placement flag unset is
        // already refused above (`nothing_to_change`), and a resize-only
        // move (no `--anchor`, no `--new-sheet`) is valid — the existing
        // anchor is carried forward by `overlay_position_update`.
        EmbeddedObjectVerb::MoveChart {
            anchor,
            offset_x,
            offset_y,
            width,
            height,
            new_sheet,
            ..
        } if *new_sheet => {
            if anchor.is_some()
                || offset_x.is_some()
                || offset_y.is_some()
                || width.is_some()
                || height.is_some()
            {
                Err(
                    "--new-sheet cannot be combined with --anchor/--offset-x/--offset-y/\
                     --width/--height"
                        .to_string(),
                )
            } else {
                Ok(())
            }
        }
        _ => Ok(()),
    })
}

/// A fully-resolved request, computed once and reused for both the
/// `--dry-run` report and the real mutation.
struct Plan {
    request: BatchUpdateRequestItem,
    summary: String,
    sheet_id: Option<i64>,
    before: Option<EmbeddedObjectSummary>,
    existing_id: Option<i64>,
}

fn build_plan(
    workbook: &Spreadsheet,
    verb: &EmbeddedObjectVerb,
) -> Result<Plan, EmbeddedObjectResult> {
    match verb {
        EmbeddedObjectVerb::AddChart { .. } => build_add_chart(workbook, verb),
        EmbeddedObjectVerb::UpdateChart { chart_id, .. } => {
            build_update_chart(workbook, verb, *chart_id)
        }
        EmbeddedObjectVerb::DeleteChart { chart_id } => build_delete_chart(workbook, *chart_id),
        EmbeddedObjectVerb::AddSlicer { .. } => build_add_slicer(workbook, verb),
        EmbeddedObjectVerb::UpdateSlicer { slicer_id, .. } => {
            build_update_slicer(workbook, verb, *slicer_id)
        }
        EmbeddedObjectVerb::DeleteSlicer { slicer_id } => build_delete_slicer(workbook, *slicer_id),
        EmbeddedObjectVerb::MoveChart { chart_id, .. } => {
            build_move_chart(workbook, verb, *chart_id)
        }
        EmbeddedObjectVerb::MoveSlicer { slicer_id, .. } => {
            build_move_slicer(workbook, verb, *slicer_id)
        }
        EmbeddedObjectVerb::UpdateChartBorder { chart_id, .. } => {
            build_update_chart_border(workbook, verb, *chart_id)
        }
    }
}

// ── Shared range/position resolution ────────────────────────────────────

fn invalid(detail: impl Into<String>) -> EmbeddedObjectResult {
    EmbeddedObjectResult::RefusedInvalidRange {
        detail: detail.into(),
    }
}

fn compose_and_resolve(
    workbook: &Spreadsheet,
    sheet: Option<&str>,
    range: &str,
) -> Result<GridRange, EmbeddedObjectResult> {
    let composed = a1::compose(sheet.filter(|s| !s.is_empty()), Some(range))
        .map_err(|err| invalid(err.to_string()))?;
    let (_, grid) =
        grid_range::resolve_grid_range(workbook, &composed, invalid, |title, available| {
            EmbeddedObjectResult::RefusedSheetNotFound { title, available }
        })?;
    Ok(grid)
}

fn resolve_anchor(
    workbook: &Spreadsheet,
    sheet: Option<&str>,
    anchor: &str,
) -> Result<GridCoordinate, EmbeddedObjectResult> {
    let grid = compose_and_resolve(workbook, sheet, anchor)?;
    let (Some(start_row), Some(end_row), Some(start_col), Some(end_col)) = (
        grid.start_row_index,
        grid.end_row_index,
        grid.start_column_index,
        grid.end_column_index,
    ) else {
        return Err(invalid(format!(
            "'{anchor}' must name a single cell, not an open-ended range"
        )));
    };
    if end_row - start_row != 1 || end_col - start_col != 1 {
        return Err(invalid(format!(
            "'{anchor}' must name a single cell, not a range"
        )));
    }
    Ok(GridCoordinate {
        sheet_id: grid.sheet_id,
        row_index: start_row,
        column_index: start_col,
    })
}

fn overlay_position(
    workbook: &Spreadsheet,
    sheet: Option<&str>,
    anchor: &str,
    offset_x: Option<i64>,
    offset_y: Option<i64>,
    width: Option<i64>,
    height: Option<i64>,
) -> Result<(EmbeddedObjectPosition, i64), EmbeddedObjectResult> {
    let anchor_cell = resolve_anchor(workbook, sheet, anchor)?;
    let sheet_id = anchor_cell.sheet_id;
    Ok((
        EmbeddedObjectPosition {
            overlay_position: Some(OverlayPosition {
                anchor_cell,
                offset_x_pixels: offset_x,
                offset_y_pixels: offset_y,
                width_pixels: width,
                height_pixels: height,
            }),
            ..Default::default()
        },
        sheet_id,
    ))
}

fn chart_data(range: GridRange) -> ChartData {
    ChartData {
        source_range: ChartSourceRange {
            sources: vec![range],
        },
        extra: BTreeMap::new(),
    }
}

fn parse_legend(raw: &str) -> Result<String, String> {
    match raw.to_ascii_lowercase().as_str() {
        "bottom" => Ok("BOTTOM_LEGEND".to_string()),
        "top" => Ok("TOP_LEGEND".to_string()),
        "left" => Ok("LEFT_LEGEND".to_string()),
        "right" => Ok("RIGHT_LEGEND".to_string()),
        "none" => Ok("NO_LEGEND".to_string()),
        other => Err(format!(
            "'{other}' is not a supported legend position; expected one of bottom, top, left, \
             right, none"
        )),
    }
}

fn parse_stacked(raw: &str) -> Result<String, String> {
    match raw.to_ascii_lowercase().as_str() {
        "none" => Ok("NOT_STACKED".to_string()),
        "stacked" => Ok("STACKED".to_string()),
        "percent" => Ok("PERCENT_STACKED".to_string()),
        other => Err(format!(
            "'{other}' is not a supported stacking mode; expected one of none, stacked, percent"
        )),
    }
}

/// Which chart family a `--type` value names.
#[derive(Debug)]
enum ChartKind {
    /// A `basicChart`, carrying its wire `chartType` literal.
    Basic(&'static str),
    /// A `pieChart`.
    Pie,
}

fn parse_chart_type(raw: &str) -> Result<ChartKind, String> {
    match raw.to_ascii_lowercase().as_str() {
        "column" => Ok(ChartKind::Basic("COLUMN")),
        "bar" => Ok(ChartKind::Basic("BAR")),
        "line" => Ok(ChartKind::Basic("LINE")),
        "area" => Ok(ChartKind::Basic("AREA")),
        "scatter" => Ok(ChartKind::Basic("SCATTER")),
        "pie" => Ok(ChartKind::Pie),
        other => Err(format!(
            "'{other}' is not a supported chart type; expected one of column, bar, line, area, \
             scatter, pie"
        )),
    }
}

fn axis_list(horizontal: Option<&str>, vertical: Option<&str>) -> Vec<BasicChartAxis> {
    let mut axis = Vec::new();
    if let Some(title) = horizontal {
        axis.push(BasicChartAxis {
            position: "BOTTOM_AXIS".to_string(),
            title: Some(title.to_string()),
            extra: BTreeMap::new(),
        });
    }
    if let Some(title) = vertical {
        axis.push(BasicChartAxis {
            position: "LEFT_AXIS".to_string(),
            title: Some(title.to_string()),
            extra: BTreeMap::new(),
        });
    }
    axis
}

/// Upserts one axis title by physical position, leaving every other axis
/// entry (and every field an axis carries in `extra`) untouched.
fn upsert_axis_title(axis: &mut Vec<BasicChartAxis>, position: &str, title: &str) {
    if let Some(existing) = axis.iter_mut().find(|a| a.position == position) {
        existing.title = Some(title.to_string());
    } else {
        axis.push(BasicChartAxis {
            position: position.to_string(),
            title: Some(title.to_string()),
            extra: BTreeMap::new(),
        });
    }
}

// ── add-chart ────────────────────────────────────────────────────────────

fn build_add_chart(
    workbook: &Spreadsheet,
    verb: &EmbeddedObjectVerb,
) -> Result<Plan, EmbeddedObjectResult> {
    let EmbeddedObjectVerb::AddChart {
        chart_type,
        domain,
        series,
        sheet,
        title,
        subtitle,
        legend,
        stacked,
        header_count,
        horizontal_axis_title,
        vertical_axis_title,
        pie_hole,
        anchor,
        offset_x,
        offset_y,
        width,
        height,
        new_sheet,
    } = verb
    else {
        unreachable!("build_add_chart is only ever called for AddChart") // omni-dev: coverage ignore-line reason="build_plan only calls build_add_chart after matching verb as EmbeddedObjectVerb::AddChart; this else-arm exists only to destructure the already-known variant"
    };

    let kind = parse_chart_type(chart_type).map_err(invalid)?;
    let domain_range = compose_and_resolve(workbook, sheet.as_deref(), domain)?;
    let series_ranges = series
        .iter()
        .map(|s| compose_and_resolve(workbook, sheet.as_deref(), s))
        .collect::<Result<Vec<_>, _>>()?;
    let legend = legend
        .as_deref()
        .map(parse_legend)
        .transpose()
        .map_err(invalid)?;

    let (position, position_sheet_id) = if *new_sheet {
        (
            EmbeddedObjectPosition {
                new_sheet: Some(true),
                ..Default::default()
            },
            None,
        )
    } else {
        let Some(anchor) = anchor.as_deref() else {
            return Err(invalid("either --anchor or --new-sheet is required"));
        };
        let (position, sheet_id) = overlay_position(
            workbook,
            sheet.as_deref(),
            anchor,
            *offset_x,
            *offset_y,
            *width,
            *height,
        )?;
        (position, Some(sheet_id))
    };

    let spec = match kind {
        ChartKind::Basic(chart_type) => {
            if pie_hole.is_some() {
                return Err(invalid("--pie-hole only applies to a pie chart"));
            }
            let stacked = stacked
                .as_deref()
                .map(parse_stacked)
                .transpose()
                .map_err(invalid)?;
            ChartSpec {
                title: title.clone(),
                subtitle: subtitle.clone(),
                basic_chart: Some(BasicChartSpec {
                    chart_type: chart_type.to_string(),
                    legend_position: legend,
                    stacked_type: stacked,
                    header_count: *header_count,
                    axis: axis_list(
                        horizontal_axis_title.as_deref(),
                        vertical_axis_title.as_deref(),
                    ),
                    domains: vec![BasicChartDomain {
                        domain: chart_data(domain_range),
                        extra: BTreeMap::new(),
                    }],
                    series: series_ranges
                        .into_iter()
                        .map(|r| BasicChartSeries {
                            series: chart_data(r),
                            target_axis: None,
                            extra: BTreeMap::new(),
                        })
                        .collect(),
                    extra: BTreeMap::new(),
                }),
                pie_chart: None,
                extra: BTreeMap::new(),
            }
        }
        ChartKind::Pie => {
            if header_count.is_some() {
                return Err(invalid(
                    "--header-count only applies to a column/bar/line/area/\
                    scatter chart",
                ));
            }
            if stacked.is_some() {
                return Err(invalid(
                    "--stacked only applies to a column/bar/line/area/scatter \
                    chart",
                ));
            }
            if horizontal_axis_title.is_some() || vertical_axis_title.is_some() {
                return Err(invalid(
                    "--horizontal-axis-title/--vertical-axis-title only apply \
                    to a column/bar/line/area/scatter chart",
                ));
            }
            if series_ranges.len() != 1 {
                return Err(invalid("a pie chart takes exactly one --series"));
            }
            let mut series_ranges = series_ranges;
            let Some(pie_series_range) = series_ranges.pop() else {
                unreachable!("checked series_ranges.len() == 1 above") // omni-dev: coverage ignore-line reason="the series_ranges.len() != 1 check immediately above has already returned, so the pop always yields Some; this else-arm exists only to unwrap it"
            };
            ChartSpec {
                title: title.clone(),
                subtitle: subtitle.clone(),
                basic_chart: None,
                pie_chart: Some(PieChartSpec {
                    domain: chart_data(domain_range),
                    series: chart_data(pie_series_range),
                    legend_position: legend,
                    pie_hole: *pie_hole,
                    extra: BTreeMap::new(),
                }),
                extra: BTreeMap::new(),
            }
        }
    };

    let summary = format!(
        "add {} chart{}",
        chart_type.to_ascii_lowercase(),
        title
            .as_deref()
            .map_or_else(String::new, |t| format!(" '{t}'"))
    );

    Ok(Plan {
        request: BatchUpdateRequestItem::AddChart(AddChartRequest {
            chart: EmbeddedChart {
                chart_id: None,
                spec: Some(spec),
                position: Some(position),
                border: None,
            },
        }),
        summary,
        sheet_id: position_sheet_id,
        before: None,
        existing_id: None,
    })
}

// ── update-chart ─────────────────────────────────────────────────────────

fn find_chart(workbook: &Spreadsheet, chart_id: i64) -> Option<(&Sheet, &EmbeddedChart)> {
    workbook.sheets.iter().find_map(|sheet| {
        sheet
            .charts
            .iter()
            .find(|c| c.chart_id == Some(chart_id))
            .map(|c| (sheet, c))
    })
}

fn find_slicer(workbook: &Spreadsheet, slicer_id: i64) -> Option<(&Sheet, &Slicer)> {
    workbook.sheets.iter().find_map(|sheet| {
        sheet
            .slicers
            .iter()
            .find(|s| s.slicer_id == Some(slicer_id))
            .map(|s| (sheet, s))
    })
}

/// Resolves `chart_id` against every chart-only verb's id lookup: found as a
/// chart it resolves normally, found instead as a slicer it refuses with
/// [`EmbeddedObjectResult::RefusedWrongObjectKind`] rather than the
/// misleading [`EmbeddedObjectResult::RefusedObjectNotFound`], and found as
/// neither it falls back to that not-found refusal.
fn find_chart_or_refuse(
    workbook: &Spreadsheet,
    chart_id: i64,
) -> Result<(&Sheet, &EmbeddedChart), EmbeddedObjectResult> {
    if let Some(found) = find_chart(workbook, chart_id) {
        return Ok(found);
    }
    if find_slicer(workbook, chart_id).is_some() {
        return Err(EmbeddedObjectResult::RefusedWrongObjectKind {
            object_id: chart_id,
            expected: "chart".to_string(),
            found: "slicer".to_string(),
        });
    }
    Err(EmbeddedObjectResult::RefusedObjectNotFound {
        object_id: chart_id,
    })
}

/// The slicer-only mirror of [`find_chart_or_refuse`].
fn find_slicer_or_refuse(
    workbook: &Spreadsheet,
    slicer_id: i64,
) -> Result<(&Sheet, &Slicer), EmbeddedObjectResult> {
    if let Some(found) = find_slicer(workbook, slicer_id) {
        return Ok(found);
    }
    if find_chart(workbook, slicer_id).is_some() {
        return Err(EmbeddedObjectResult::RefusedWrongObjectKind {
            object_id: slicer_id,
            expected: "slicer".to_string(),
            found: "chart".to_string(),
        });
    }
    Err(EmbeddedObjectResult::RefusedObjectNotFound {
        object_id: slicer_id,
    })
}

fn describe_overlay_position(sheet: &Sheet, overlay: &OverlayPosition) -> String {
    format!(
        "{}!{}{}",
        sheet.title(),
        grid_range::column_index_to_letters(overlay.anchor_cell.column_index),
        overlay.anchor_cell.row_index + 1
    )
}

fn describe_position(sheet: &Sheet, position: Option<&EmbeddedObjectPosition>) -> String {
    match position {
        Some(p) if p.new_sheet == Some(true) || p.sheet_id.is_some() => p.sheet_id.map_or_else(
            || "own sheet".to_string(),
            |id| format!("own sheet (id {id})"),
        ),
        Some(p) => p.overlay_position.as_ref().map_or_else(
            || "unknown position".to_string(),
            |o| describe_overlay_position(sheet, o),
        ),
        None => "unknown position".to_string(),
    }
}

/// Renders a chart border's colour for display.
///
/// Confirmed live against issue #1929: `update-chart-border --clear` and an
/// explicit `--color 000000` (pure black) read back as the **exact same**
/// wire shape — `border: {"colorStyle": {"rgbColor": {}}}`, proto3 omitting
/// every zero-valued channel either way. A chart whose border was never
/// touched at all comes back with no `border` field whatsoever, so that
/// case stays distinguishable (see [`summarise_chart`]) — but once a
/// `border` is present, an all-zero `rgbColor` is genuinely ambiguous
/// between "explicitly cleared" and "explicitly set to black", with no
/// second field to break the tie. Reporting a bare `#000000` here would
/// present a guess as a fact, so black is called out as ambiguous instead.
/// A completely empty `colorStyle` (neither arm set — issue #2020 made this
/// parse instead of failing) is the same ambiguity by construction: a
/// `oneof` with nothing set is indistinguishable, on the wire, from an
/// omitted-by-proto3 all-zero `rgbColor`, so it gets the same message
/// rather than `ColorStyle::describe`'s generic `(unset)`. A `themeColor`
/// border has no such ambiguity — it renders by name via
/// [`ColorStyle::describe`].
fn describe_border_color(color_style: &ColorStyle) -> String {
    let ambiguous = match color_style.rgb_color {
        Some(rgb) => rgb == Color::default(),
        None => color_style.theme_color.is_none(),
    };
    if ambiguous {
        "#000000 (or cleared — indistinguishable on read)".to_string()
    } else {
        color_style.describe()
    }
}

fn summarise_chart(sheet: &Sheet, chart: &EmbeddedChart) -> Option<EmbeddedObjectSummary> {
    let object_id = chart.chart_id?;
    let spec = chart.spec.as_ref();
    let chart_type = spec.and_then(|s| {
        if let Some(basic) = &s.basic_chart {
            Some(basic.chart_type.clone())
        } else if s.pie_chart.is_some() {
            Some("PIE".to_string())
        } else {
            None
        }
    });
    Some(EmbeddedObjectSummary {
        object_id,
        kind: "chart".to_string(),
        chart_type,
        title: spec.and_then(|s| s.title.clone()),
        position: describe_position(sheet, chart.position.as_ref()),
        border: chart
            .border
            .as_ref()
            .and_then(|b| b.color_style.as_ref())
            .map(describe_border_color),
    })
}

fn summarise_slicer(sheet: &Sheet, slicer: &Slicer) -> Option<EmbeddedObjectSummary> {
    let object_id = slicer.slicer_id?;
    Some(EmbeddedObjectSummary {
        object_id,
        kind: "slicer".to_string(),
        chart_type: None,
        title: slicer.spec.as_ref().and_then(|s| s.title.clone()),
        position: describe_position(sheet, slicer.position.as_ref()),
        border: None,
    })
}

/// The two chart kinds `merge_chart_spec` accepts as the *existing* state
/// of a chart being updated.
#[derive(Debug)]
enum ExistingChartKind {
    Basic,
    Pie,
}

fn existing_chart_kind(spec: &ChartSpec) -> Result<ExistingChartKind, String> {
    if let Some(basic) = &spec.basic_chart {
        if SUPPORTED_BASIC_CHART_TYPES.contains(&basic.chart_type.as_str()) {
            Ok(ExistingChartKind::Basic)
        } else {
            Err(basic.chart_type.clone())
        }
    } else if spec.pie_chart.is_some() {
        Ok(ExistingChartKind::Pie)
    } else {
        Err(spec
            .extra
            .keys()
            .next()
            .cloned()
            .unwrap_or_else(|| "unknown".to_string()))
    }
}

fn merge_chart_spec(
    workbook: &Spreadsheet,
    existing: &ChartSpec,
    verb: &EmbeddedObjectVerb,
) -> Result<(ChartSpec, String), EmbeddedObjectResult> {
    let EmbeddedObjectVerb::UpdateChart {
        chart_id,
        chart_type,
        title,
        subtitle,
        legend,
        ..
    } = verb
    else {
        unreachable!("merge_chart_spec is only ever called for UpdateChart") // omni-dev: coverage ignore-line reason="merge_chart_spec is only ever called from build_update_chart, which build_plan reaches only after matching verb as EmbeddedObjectVerb::UpdateChart; this else-arm exists only to destructure the already-known variant"
    };

    let existing_kind = existing_chart_kind(existing).map_err(|detail| {
        EmbeddedObjectResult::RefusedUnsupportedChart {
            chart_id: *chart_id,
            detail: format!("chart's existing spec is {detail}, not a supported basic/pie chart"),
        }
    })?;

    let requested_kind = chart_type
        .as_deref()
        .map(parse_chart_type)
        .transpose()
        .map_err(invalid)?;

    let target_is_pie = match &requested_kind {
        Some(ChartKind::Pie) => true,
        Some(ChartKind::Basic(_)) => false,
        None => matches!(existing_kind, ExistingChartKind::Pie),
    };
    if target_is_pie != matches!(existing_kind, ExistingChartKind::Pie) {
        return Err(EmbeddedObjectResult::RefusedUnsupportedChart {
            chart_id: *chart_id,
            detail: "switching between a basic chart and a pie chart is not supported; delete \
                     and re-add"
                .to_string(),
        });
    }

    let mut changed = Vec::new();
    if title.is_some() {
        changed.push("title");
    }
    if subtitle.is_some() {
        changed.push("subtitle");
    }
    if legend.is_some() {
        changed.push("legend");
    }

    let mut spec = existing.clone();
    if let Some(title) = title {
        spec.title = Some(title.clone());
    }
    if let Some(subtitle) = subtitle {
        spec.subtitle = Some(subtitle.clone());
    }

    if target_is_pie {
        merge_pie_chart(workbook, &mut spec, verb, &mut changed)?;
    } else {
        merge_basic_chart(workbook, &mut spec, verb, requested_kind, &mut changed)?;
    }

    let summary = format!("update chart {chart_id} ({})", changed.join(", "));
    Ok((spec, summary))
}

/// The `target_is_pie` branch of [`merge_chart_spec`]: merges every
/// pie-only flag onto `spec.pie_chart`, refusing any basic-only flag.
fn merge_pie_chart(
    workbook: &Spreadsheet,
    spec: &mut ChartSpec,
    verb: &EmbeddedObjectVerb,
    changed: &mut Vec<&'static str>,
) -> Result<(), EmbeddedObjectResult> {
    let EmbeddedObjectVerb::UpdateChart {
        domain,
        series,
        sheet,
        legend,
        stacked,
        header_count,
        horizontal_axis_title,
        vertical_axis_title,
        pie_hole,
        ..
    } = verb
    else {
        unreachable!("merge_pie_chart is only ever called for UpdateChart") // omni-dev: coverage ignore-line reason="merge_pie_chart is only ever called from merge_chart_spec, which has already destructured the same verb as EmbeddedObjectVerb::UpdateChart; this else-arm exists only to destructure the already-known variant"
    };

    if header_count.is_some() {
        return Err(invalid(
            "--header-count only applies to a column/bar/line/area/scatter chart",
        ));
    }
    if stacked.is_some() {
        return Err(invalid(
            "--stacked only applies to a column/bar/line/area/scatter chart",
        ));
    }
    if horizontal_axis_title.is_some() || vertical_axis_title.is_some() {
        return Err(invalid(
            "--horizontal-axis-title/--vertical-axis-title only apply to a \
             column/bar/line/area/scatter chart",
        ));
    }

    let mut pie = spec.pie_chart.clone().unwrap_or_default();
    if let Some(domain) = domain {
        pie.domain = chart_data(compose_and_resolve(workbook, sheet.as_deref(), domain)?);
        changed.push("domain");
    }
    if !series.is_empty() {
        let [only_series] = series.as_slice() else {
            return Err(invalid("a pie chart takes exactly one --series"));
        };
        let range = compose_and_resolve(workbook, sheet.as_deref(), only_series)?;
        pie.series = chart_data(range);
        changed.push("series");
    }
    if let Some(legend) = legend
        .as_deref()
        .map(parse_legend)
        .transpose()
        .map_err(invalid)?
    {
        pie.legend_position = Some(legend);
    }
    if let Some(pie_hole) = pie_hole {
        pie.pie_hole = Some(*pie_hole);
        changed.push("pie-hole");
    }
    spec.pie_chart = Some(pie);
    spec.basic_chart = None;
    Ok(())
}

/// The `!target_is_pie` branch of [`merge_chart_spec`]: merges every
/// basic-chart flag onto `spec.basic_chart`. `requested_kind` is passed in
/// (rather than re-parsed) since [`merge_chart_spec`] already needed it to
/// decide `target_is_pie`.
fn merge_basic_chart(
    workbook: &Spreadsheet,
    spec: &mut ChartSpec,
    verb: &EmbeddedObjectVerb,
    requested_kind: Option<ChartKind>,
    changed: &mut Vec<&'static str>,
) -> Result<(), EmbeddedObjectResult> {
    let EmbeddedObjectVerb::UpdateChart {
        domain,
        series,
        sheet,
        legend,
        stacked,
        header_count,
        horizontal_axis_title,
        vertical_axis_title,
        pie_hole,
        ..
    } = verb
    else {
        unreachable!("merge_basic_chart is only ever called for UpdateChart") // omni-dev: coverage ignore-line reason="merge_basic_chart is only ever called from merge_chart_spec, which has already destructured the same verb as EmbeddedObjectVerb::UpdateChart; this else-arm exists only to destructure the already-known variant"
    };

    // The mirror image of `merge_pie_chart`'s basic-only rejections below:
    // `--pie-hole` has no meaning on a basic chart, and silently dropping
    // it would report `Changed` while the flag did nothing.
    if pie_hole.is_some() {
        return Err(invalid("--pie-hole only applies to a pie chart"));
    }

    let mut basic = spec.basic_chart.clone().unwrap_or_default();
    if let Some(ChartKind::Basic(chart_type)) = requested_kind {
        basic.chart_type = chart_type.to_string();
        changed.push("type");
    }
    if let Some(domain) = domain {
        basic.domains = vec![BasicChartDomain {
            domain: chart_data(compose_and_resolve(workbook, sheet.as_deref(), domain)?),
            extra: BTreeMap::new(),
        }];
        changed.push("domain");
    }
    if !series.is_empty() {
        basic.series = series
            .iter()
            .map(|s| {
                compose_and_resolve(workbook, sheet.as_deref(), s).map(|range| BasicChartSeries {
                    series: chart_data(range),
                    target_axis: None,
                    extra: BTreeMap::new(),
                })
            })
            .collect::<Result<Vec<_>, _>>()?;
        changed.push("series");
    }
    if let Some(legend) = legend
        .as_deref()
        .map(parse_legend)
        .transpose()
        .map_err(invalid)?
    {
        basic.legend_position = Some(legend);
    }
    if let Some(stacked) = stacked
        .as_deref()
        .map(parse_stacked)
        .transpose()
        .map_err(invalid)?
    {
        basic.stacked_type = Some(stacked);
        changed.push("stacked");
    }
    if let Some(header_count) = header_count {
        basic.header_count = Some(*header_count);
        changed.push("header-count");
    }
    if let Some(title) = horizontal_axis_title {
        upsert_axis_title(&mut basic.axis, "BOTTOM_AXIS", title);
        changed.push("horizontal-axis-title");
    }
    if let Some(title) = vertical_axis_title {
        upsert_axis_title(&mut basic.axis, "LEFT_AXIS", title);
        changed.push("vertical-axis-title");
    }
    spec.basic_chart = Some(basic);
    spec.pie_chart = None;
    Ok(())
}

fn build_update_chart(
    workbook: &Spreadsheet,
    verb: &EmbeddedObjectVerb,
    chart_id: i64,
) -> Result<Plan, EmbeddedObjectResult> {
    let (sheet, chart) = find_chart_or_refuse(workbook, chart_id)?;
    let Some(existing_spec) = chart.spec.as_ref() else {
        return Err(EmbeddedObjectResult::RefusedUnsupportedChart {
            chart_id,
            detail: "chart has no spec to merge onto".to_string(),
        });
    };
    let before = summarise_chart(sheet, chart);
    let sheet_id = sheet.sheet_id();
    let (spec, summary) = merge_chart_spec(workbook, existing_spec, verb)?;

    Ok(Plan {
        request: BatchUpdateRequestItem::UpdateChartSpec(UpdateChartSpecRequest { chart_id, spec }),
        summary,
        sheet_id,
        before,
        existing_id: Some(chart_id),
    })
}

fn build_delete_chart(workbook: &Spreadsheet, chart_id: i64) -> Result<Plan, EmbeddedObjectResult> {
    let (sheet, chart) = find_chart_or_refuse(workbook, chart_id)?;
    let before = summarise_chart(sheet, chart);
    let sheet_id = sheet.sheet_id();
    let summary = format!("delete chart {chart_id}");
    Ok(Plan {
        request: BatchUpdateRequestItem::DeleteEmbeddedObject(DeleteEmbeddedObjectRequest {
            object_id: chart_id,
        }),
        summary,
        sheet_id,
        before,
        existing_id: Some(chart_id),
    })
}

// ── add-slicer / update-slicer / delete-slicer ──────────────────────────

/// Refuses a slicer filter column that falls outside the slicer's data
/// range (issue #1945).
///
/// `SlicerSpec.columnIndex` is an **absolute** sheet column index (`0` =
/// column A), not an offset within the range — so for a range of
/// `B2:F8` the valid columns are `1..=5` (B–F). The live API rejects
/// anything else with a `400`; checking here means `--dry-run` catches it
/// too. An open-ended edge of the range (e.g. a whole-row `2:5`) leaves
/// that side unbounded.
fn check_slicer_column_in_range(
    column: i64,
    range: &GridRange,
) -> Result<(), EmbeddedObjectResult> {
    let grid_range::ColumnOutOfRange { start, end, .. } =
        match grid_range::check_column_in_range(column, range) {
            Ok(()) => return Ok(()),
            Err(err) => err,
        };
    let column_label = if column >= 0 {
        format!(
            "{column} (column {})",
            grid_range::column_index_to_letters(column)
        )
    } else {
        column.to_string()
    };
    let valid = match end {
        Some(end) if end <= start => "none (the range spans no columns)".to_string(),
        Some(end) => format!(
            "{start}..={} ({}–{})",
            end - 1,
            grid_range::column_index_to_letters(start),
            grid_range::column_index_to_letters(end - 1)
        ),
        None => format!(
            "{start} or greater ({} onward)",
            grid_range::column_index_to_letters(start)
        ),
    };
    Err(invalid(format!(
        "slicer column {column_label} is outside the slicer's range; valid columns are \
         {valid} — the column is an absolute sheet column index (0 = A), not an offset \
         within the range"
    )))
}

fn build_add_slicer(
    workbook: &Spreadsheet,
    verb: &EmbeddedObjectVerb,
) -> Result<Plan, EmbeddedObjectResult> {
    let EmbeddedObjectVerb::AddSlicer {
        sheet,
        range,
        column,
        hide_values,
        title,
        apply_to_pivot_tables,
        anchor,
        offset_x,
        offset_y,
        width,
        height,
    } = verb
    else {
        unreachable!("build_add_slicer is only ever called for AddSlicer") // omni-dev: coverage ignore-line reason="build_plan only calls build_add_slicer after matching verb as EmbeddedObjectVerb::AddSlicer; this else-arm exists only to destructure the already-known variant"
    };

    let data_range = compose_and_resolve(workbook, sheet.as_deref(), range)?;
    check_slicer_column_in_range(*column, &data_range)?;
    let (position, position_sheet_id) = overlay_position(
        workbook,
        sheet.as_deref(),
        anchor,
        *offset_x,
        *offset_y,
        *width,
        *height,
    )?;

    let filter_criteria = if hide_values.is_empty() {
        None
    } else {
        Some(FilterCriteria::hiding(hide_values.clone()))
    };

    let summary = format!(
        "add slicer{}",
        title
            .as_deref()
            .map_or_else(String::new, |t| format!(" '{t}'"))
    );

    Ok(Plan {
        request: BatchUpdateRequestItem::AddSlicer(AddSlicerRequest {
            slicer: Slicer {
                slicer_id: None,
                spec: Some(SlicerSpec {
                    data_range: Some(data_range),
                    filter_criteria,
                    column_index: Some(*column),
                    apply_to_pivot_tables: *apply_to_pivot_tables,
                    title: title.clone(),
                    extra: BTreeMap::new(),
                }),
                position: Some(position),
            },
        }),
        summary,
        sheet_id: Some(position_sheet_id),
        before: None,
        existing_id: None,
    })
}

fn build_update_slicer(
    workbook: &Spreadsheet,
    verb: &EmbeddedObjectVerb,
    slicer_id: i64,
) -> Result<Plan, EmbeddedObjectResult> {
    let EmbeddedObjectVerb::UpdateSlicer {
        sheet,
        range,
        column,
        hide_values,
        clear_criteria,
        title,
        apply_to_pivot_tables,
        ..
    } = verb
    else {
        // omni-dev: coverage ignore reason="build_plan only calls build_update_slicer after matching verb as EmbeddedObjectVerb::UpdateSlicer; this else-arm exists only to destructure the already-known variant"
        unreachable!("build_update_slicer is only ever called for UpdateSlicer")
        // omni-dev: coverage end
    };

    let (host_sheet, slicer) = find_slicer_or_refuse(workbook, slicer_id)?;
    let before = summarise_slicer(host_sheet, slicer);
    let sheet_id = host_sheet.sheet_id();

    let mut spec = SlicerSpec::default();
    let mut fields = Vec::new();
    let mut changed = Vec::new();
    if let Some(range) = range {
        spec.data_range = Some(compose_and_resolve(workbook, sheet.as_deref(), range)?);
        fields.push("dataRange");
        changed.push("range");
    }
    if *clear_criteria {
        spec.filter_criteria = Some(FilterCriteria::default());
        fields.push("filterCriteria");
        changed.push("clear criteria");
    } else if !hide_values.is_empty() {
        spec.filter_criteria = Some(FilterCriteria::hiding(hide_values.clone()));
        fields.push("filterCriteria");
        changed.push("criteria");
    }
    if let Some(column) = column {
        spec.column_index = Some(*column);
        fields.push("columnIndex");
        changed.push("column");
    }
    // Only a change to the range or the column can move one outside the
    // other, so a title- or criteria-only update never re-litigates the
    // slicer's existing state. Whichever half isn't being replaced comes
    // from the slicer as it stands.
    if range.is_some() || column.is_some() {
        let existing = slicer.spec.as_ref();
        let effective_range = spec
            .data_range
            .as_ref()
            .or_else(|| existing.and_then(|s| s.data_range.as_ref()));
        // `existing.column_index` reads back `None` for a slicer filtering
        // column 0 (column A) — proto3 omits the zero value on the wire
        // (issue #1929), indistinguishable from "no column was ever set".
        // We only resolve that ambiguity toward 0 when `existing` also
        // carries a `data_range`: every slicer *this crate* creates always
        // sends `dataRange` and `columnIndex` together, so a stored spec
        // that has one but is missing the other is a real Google Sheets
        // slicer whose column just happens to be 0, not a bare/degenerate
        // spec. A spec with neither (predating this validation, or created
        // outside omni-dev — see the `..._refuses_when_an_existing_spec_
        // has_no_range_or_column` test) still falls through to the
        // refusal below rather than guessing.
        let effective_column = spec.column_index.or_else(|| {
            existing.and_then(|s| s.data_range.is_some().then(|| s.column_index.unwrap_or(0)))
        });
        match (effective_range, effective_column) {
            (Some(effective_range), Some(effective_column)) => {
                check_slicer_column_in_range(effective_column, effective_range)?;
            }
            _ => {
                // A stored slicer with no range and/or no column predates
                // this validation (or was created outside omni-dev); refuse
                // rather than silently skip the check this change exists to
                // enforce.
                return Err(EmbeddedObjectResult::RefusedInvalidRange {
                    detail: format!(
                        "slicer {slicer_id} has no {} on record, so its column can't be checked against its range locally — set --range and --column together to establish both"
                        ,
                        match (effective_range.is_some(), effective_column.is_some()) {
                            (false, false) => "range or column",
                            (false, true) => "range",
                            (true, false) => "column",
                            (true, true) => unreachable!(),
                        }
                    ),
                });
            }
        }
    }
    if let Some(title) = title {
        spec.title = Some(title.clone());
        fields.push("title");
        changed.push("title");
    }
    if let Some(apply) = apply_to_pivot_tables {
        spec.apply_to_pivot_tables = Some(*apply);
        fields.push("applyToPivotTables");
        changed.push("apply-to-pivot-tables");
    }

    let summary = format!("update slicer {slicer_id} ({})", changed.join(", "));
    Ok(Plan {
        request: BatchUpdateRequestItem::UpdateSlicerSpec(UpdateSlicerSpecRequest {
            slicer_id,
            spec,
            fields: fields.join(","),
        }),
        summary,
        sheet_id,
        before,
        existing_id: Some(slicer_id),
    })
}

fn build_delete_slicer(
    workbook: &Spreadsheet,
    slicer_id: i64,
) -> Result<Plan, EmbeddedObjectResult> {
    let (sheet, slicer) = find_slicer_or_refuse(workbook, slicer_id)?;
    let before = summarise_slicer(sheet, slicer);
    let sheet_id = sheet.sheet_id();
    let summary = format!("delete slicer {slicer_id}");
    Ok(Plan {
        request: BatchUpdateRequestItem::DeleteEmbeddedObject(DeleteEmbeddedObjectRequest {
            object_id: slicer_id,
        }),
        summary,
        sheet_id,
        before,
        existing_id: Some(slicer_id),
    })
}

// ── move-chart / move-slicer ────────────────────────────────────────────

/// The four independent overlay-resize flags `move-chart`/`move-slicer`
/// share, grouped into one struct rather than passed as four positional
/// `Option<i64>`s — `overlay_position_update`/`build_move` each took eight
/// and twelve positional arguments before this, with no type-level guard
/// against transposing `offset_x`/`offset_y`/`width`/`height` at a call
/// site (issue #1837 review).
#[derive(Debug, Clone, Copy, Default)]
struct PlacementResize {
    offset_x: Option<i64>,
    offset_y: Option<i64>,
    width: Option<i64>,
    height: Option<i64>,
}

/// Merges the caller's overlay overrides onto `existing`, returning the
/// position to send, the `fields` mask (relative to `overlayPosition`, per
/// [`UpdateEmbeddedObjectPositionRequest`]'s doc comment), and the
/// destination sheet id.
///
/// `anchor_cell` is a required field of `OverlayPosition` on the wire, so an
/// unnamed anchor is carried forward from the object's current position
/// rather than left as a zero value — `offset_x`/`offset_y`/`width`/
/// `height` need no such fallback, since they're all optional on the wire
/// and outside the mask when unset. An object with no current overlay
/// position (a chart on its own sheet; a slicer is always an overlay, so
/// this would mean a malformed read-back) requires `--anchor` to be moved
/// onto a grid.
fn overlay_position_update(
    workbook: &Spreadsheet,
    existing: Option<&OverlayPosition>,
    sheet: Option<&str>,
    anchor: Option<&str>,
    resize: PlacementResize,
) -> Result<(EmbeddedObjectPosition, String, i64), EmbeddedObjectResult> {
    let mut fields = Vec::new();
    let anchor_cell = match anchor {
        Some(anchor) => {
            fields.push("anchorCell");
            resolve_anchor(workbook, sheet, anchor)?
        }
        None => existing.map(|overlay| overlay.anchor_cell).ok_or_else(|| {
            invalid(
                "this object has no current overlay position (a chart can be on its own \
                 sheet; a slicer is always an overlay, so this would mean a malformed \
                 read-back); --anchor is required to move it onto a grid",
            )
        })?,
    };
    let sheet_id = anchor_cell.sheet_id;

    if resize.offset_x.is_some() {
        fields.push("offsetXPixels");
    }
    if resize.offset_y.is_some() {
        fields.push("offsetYPixels");
    }
    if resize.width.is_some() {
        fields.push("widthPixels");
    }
    if resize.height.is_some() {
        fields.push("heightPixels");
    }

    let position = EmbeddedObjectPosition {
        overlay_position: Some(OverlayPosition {
            anchor_cell,
            offset_x_pixels: resize.offset_x,
            offset_y_pixels: resize.offset_y,
            width_pixels: resize.width,
            height_pixels: resize.height,
        }),
        ..Default::default()
    };
    Ok((position, fields.join(","), sheet_id))
}

/// The overlay-position tail shared by `build_move_chart`/`build_move_slicer`
/// once each has resolved its own verb-specific fields (and, for a chart,
/// ruled out `--new-sheet`) down to a plain overlay move — the `--sheet`/
/// `--anchor`/id-flag differences live in the two callers, not here.
///
/// The summary leads "move `<noun>` `<id>` to `<destination>`" when the
/// anchor changed, or "resize `<noun>` `<id>`" when it didn't (an
/// offset/width/height-only call) — `anchor_changed` is `true` whenever the
/// caller passed `--anchor`, even if it happens to resolve to the same
/// cell the object was already at.
#[allow(clippy::too_many_arguments)]
fn build_move(
    workbook: &Spreadsheet,
    object_id: i64,
    noun: &str,
    position: EmbeddedObjectPosition,
    fields: String,
    sheet_id: i64,
    anchor_changed: bool,
    resize: PlacementResize,
    before: Option<EmbeddedObjectSummary>,
) -> Plan {
    let mut changed = Vec::new();
    if let Some(offset_x) = resize.offset_x {
        changed.push(format!("offset-x {offset_x}"));
    }
    if let Some(offset_y) = resize.offset_y {
        changed.push(format!("offset-y {offset_y}"));
    }
    if let Some(width) = resize.width {
        changed.push(format!("width {width}"));
    }
    if let Some(height) = resize.height {
        changed.push(format!("height {height}"));
    }
    let suffix = if changed.is_empty() {
        String::new()
    } else {
        format!(" ({})", changed.join(", "))
    };
    let summary = if anchor_changed {
        let destination = position
            .overlay_position
            .as_ref()
            .and_then(|overlay| {
                grid_range::find_sheet_by_id(workbook, sheet_id)
                    .map(|sheet| describe_overlay_position(sheet, overlay))
            })
            .unwrap_or_else(|| format!("sheet {sheet_id}"));
        format!("move {noun} {object_id} to {destination}{suffix}")
    } else {
        format!("resize {noun} {object_id}{suffix}")
    };

    Plan {
        request: BatchUpdateRequestItem::UpdateEmbeddedObjectPosition(
            UpdateEmbeddedObjectPositionRequest {
                object_id,
                new_position: position,
                fields,
            },
        ),
        summary,
        sheet_id: Some(sheet_id),
        before,
        existing_id: Some(object_id),
    }
}

fn build_move_chart(
    workbook: &Spreadsheet,
    verb: &EmbeddedObjectVerb,
    chart_id: i64,
) -> Result<Plan, EmbeddedObjectResult> {
    let EmbeddedObjectVerb::MoveChart {
        sheet,
        anchor,
        offset_x,
        offset_y,
        width,
        height,
        new_sheet,
        ..
    } = verb
    else {
        unreachable!("build_move_chart is only ever called for MoveChart") // omni-dev: coverage ignore-line reason="build_plan only calls build_move_chart after matching verb as EmbeddedObjectVerb::MoveChart; this else-arm exists only to destructure the already-known variant"
    };

    let (host_sheet, chart) = find_chart_or_refuse(workbook, chart_id)?;
    let before = summarise_chart(host_sheet, chart);

    if *new_sheet {
        return Ok(Plan {
            request: BatchUpdateRequestItem::UpdateEmbeddedObjectPosition(
                UpdateEmbeddedObjectPositionRequest {
                    object_id: chart_id,
                    new_position: EmbeddedObjectPosition {
                        new_sheet: Some(true),
                        ..Default::default()
                    },
                    fields: String::new(),
                },
            ),
            summary: format!("move chart {chart_id} to a new sheet"),
            sheet_id: None,
            before,
            existing_id: Some(chart_id),
        });
    }

    let resize = PlacementResize {
        offset_x: *offset_x,
        offset_y: *offset_y,
        width: *width,
        height: *height,
    };
    let existing_overlay = chart
        .position
        .as_ref()
        .and_then(|position| position.overlay_position.as_ref());
    let (position, fields, sheet_id) = overlay_position_update(
        workbook,
        existing_overlay,
        sheet.as_deref(),
        anchor.as_deref(),
        resize,
    )?;

    Ok(build_move(
        workbook,
        chart_id,
        "chart",
        position,
        fields,
        sheet_id,
        anchor.is_some(),
        resize,
        before,
    ))
}

fn build_move_slicer(
    workbook: &Spreadsheet,
    verb: &EmbeddedObjectVerb,
    slicer_id: i64,
) -> Result<Plan, EmbeddedObjectResult> {
    let EmbeddedObjectVerb::MoveSlicer {
        sheet,
        anchor,
        offset_x,
        offset_y,
        width,
        height,
        ..
    } = verb
    else {
        unreachable!("build_move_slicer is only ever called for MoveSlicer") // omni-dev: coverage ignore-line reason="build_plan only calls build_move_slicer after matching verb as EmbeddedObjectVerb::MoveSlicer; this else-arm exists only to destructure the already-known variant"
    };

    let (host_sheet, slicer) = find_slicer_or_refuse(workbook, slicer_id)?;
    let before = summarise_slicer(host_sheet, slicer);

    let resize = PlacementResize {
        offset_x: *offset_x,
        offset_y: *offset_y,
        width: *width,
        height: *height,
    };
    let existing_overlay = slicer
        .position
        .as_ref()
        .and_then(|position| position.overlay_position.as_ref());
    let (position, fields, sheet_id) = overlay_position_update(
        workbook,
        existing_overlay,
        sheet.as_deref(),
        anchor.as_deref(),
        resize,
    )?;

    Ok(build_move(
        workbook,
        slicer_id,
        "slicer",
        position,
        fields,
        sheet_id,
        anchor.is_some(),
        resize,
        before,
    ))
}

// ── update-chart-border ─────────────────────────────────────────────────

fn build_update_chart_border(
    workbook: &Spreadsheet,
    verb: &EmbeddedObjectVerb,
    chart_id: i64,
) -> Result<Plan, EmbeddedObjectResult> {
    let EmbeddedObjectVerb::UpdateChartBorder { color, clear, .. } = verb else {
        unreachable!("only ever called for UpdateChartBorder") // omni-dev: coverage ignore-line reason="build_plan only calls build_update_chart_border after matching verb as EmbeddedObjectVerb::UpdateChartBorder; this else-arm exists only to destructure the already-known variant"
    };

    let (sheet, chart) = find_chart_or_refuse(workbook, chart_id)?;
    let before = summarise_chart(sheet, chart);
    let sheet_id = sheet.sheet_id();

    let (border, summary) = if *clear {
        (
            EmbeddedObjectBorder::default(),
            format!("clear chart {chart_id} border"),
        )
    } else {
        let Some(color) = color else {
            unreachable!("validate_verb refuses neither --color nor --clear") // omni-dev: coverage ignore-line reason="validate_verb already refuses UpdateChartBorder { color: None, clear: false, .. } before build_plan is ever reached, so this arm can never run"
        };
        let rgb_color = parse_hex_color(color).map_err(invalid)?;
        (
            EmbeddedObjectBorder {
                color_style: Some(ColorStyle::rgb(rgb_color)),
            },
            format!("set chart {chart_id} border to {color}"),
        )
    };

    Ok(Plan {
        request: BatchUpdateRequestItem::UpdateEmbeddedObjectBorder(
            UpdateEmbeddedObjectBorderRequest {
                object_id: chart_id,
                border,
                fields: "colorStyle".to_string(),
            },
        ),
        summary,
        sheet_id,
        before,
        existing_id: Some(chart_id),
    })
}

// ── list-charts / list-slicers ───────────────────────────────────────────

/// Extracts every chart's summary from an already-fetched workbook, for
/// `list-charts`.
///
/// Takes the workbook rather than fetching it itself — the CLI leaf fetches
/// once and reuses the same `Spreadsheet` for `-o json`/`-o yaml`'s raw
/// dump, matching `list-protections`/`list-filter-views`' own shape.
#[must_use]
pub fn charts_from_workbook(workbook: &Spreadsheet) -> Vec<EmbeddedObjectSummary> {
    workbook
        .sheets
        .iter()
        .flat_map(|sheet| {
            sheet
                .charts
                .iter()
                .filter_map(move |chart| summarise_chart(sheet, chart))
        })
        .collect()
}

/// Extracts every slicer's summary from an already-fetched workbook, for
/// `list-slicers`. See [`charts_from_workbook`]'s doc comment.
#[must_use]
pub fn slicers_from_workbook(workbook: &Spreadsheet) -> Vec<EmbeddedObjectSummary> {
    workbook
        .sheets
        .iter()
        .flat_map(|sheet| {
            sheet
                .slicers
                .iter()
                .filter_map(move |slicer| summarise_slicer(sheet, slicer))
        })
        .collect()
}

// ── logging and rendering ────────────────────────────────────────────────

fn added_object_id(response: &BatchUpdateResponse) -> Option<i64> {
    response.replies.iter().find_map(|reply| {
        reply
            .add_chart
            .as_ref()
            .and_then(|r| r.chart.as_ref())
            .and_then(|c| c.chart_id)
            .or_else(|| {
                reply
                    .add_slicer
                    .as_ref()
                    .and_then(|r| r.slicer.as_ref())
                    .and_then(|s| s.slicer_id)
            })
    })
}

fn record_attempt(
    outcome: &EmbeddedObjectOutcome,
    opts: &EmbeddedObjectOptions,
    duration: Duration,
) {
    let error = match &outcome.result {
        EmbeddedObjectResult::Failed { detail }
        | EmbeddedObjectResult::AppliedReplyUnreadable { detail, .. } => Some(detail.clone()),
        _ => None,
    };
    let decided_by = match &outcome.result {
        EmbeddedObjectResult::Blocked { decided_by } => decided_by.as_ref(),
        _ => None,
    };
    let decided_by = write_gate::decided_by_log_fields(decided_by);
    let (embedded_object_id, fields_changed) = match &outcome.result {
        EmbeddedObjectResult::Changed {
            object_id,
            summary,
            object,
        } => {
            // For the two deletes, `object` carries the ADR-0081 §3
            // preview — the spec that is about to become unrecoverable —
            // and it belongs in the audit trail exactly as much as in the
            // `--dry-run` report, so it is appended here rather than left
            // to the summary text alone.
            let fields_changed = object.as_deref().map_or_else(
                || summary.clone(),
                |object| format!("{summary} ({})", object_preview(object)),
            );
            (*object_id, Some(fields_changed))
        }
        EmbeddedObjectResult::AppliedReplyUnreadable { summary, .. } => {
            (None, Some(summary.clone()))
        }
        _ => (None, None),
    };

    request_log::record_drive_mutation(DriveMutationOutcome {
        operation: opts.verb.log_operation(),
        file_id: outcome.spreadsheet_id.clone(),
        file_name: outcome.file_name.clone().unwrap_or_default(),
        status: outcome.result.log_status().to_string(),
        resolved_folder_id: outcome.resolved_folder_id.clone(),
        decided_by_folder_id: decided_by.folder_id,
        decided_by_depth: decided_by.depth,
        decided_by_file_id: decided_by.file_id,
        sheet_id: outcome.sheet_id,
        embedded_object_id,
        fields_changed,
        error,
        duration,
        ..Default::default()
    });
}

/// Renders an object's type/title/anchor — the ADR-0081 §3 preview text,
/// shared by the human-readable CLI rendering ([`describe_object`]) and the
/// `drivemutation` record's `fields_changed` ([`record_attempt`]).
fn object_preview(object: &EmbeddedObjectSummary) -> String {
    let kind_detail = object
        .chart_type
        .as_deref()
        .map_or_else(|| object.kind.clone(), |t| format!("{} ({t})", object.kind));
    let title = object
        .title
        .as_deref()
        .map_or_else(String::new, |t| format!(" '{t}'"));
    let border = object
        .border
        .as_deref()
        .map_or_else(String::new, |b| format!(", border {b}"));
    format!(
        "id {}: {kind_detail}{title}, anchored {}{border}",
        object.object_id, object.position
    )
}

fn describe_object(object: &EmbeddedObjectSummary) -> String {
    format!("  {}", object_preview(object))
}

/// Renders an outcome as human-readable text.
#[must_use]
pub fn describe(outcome: &EmbeddedObjectOutcome) -> String {
    describe_lines(outcome).join("\n")
}

/// Renders an outcome as its individual lines, none of which contains a
/// newline — see `structure.rs::describe_lines` for why this shape exists.
#[must_use]
pub fn describe_lines(outcome: &EmbeddedObjectOutcome) -> Vec<String> {
    let verb = &outcome.verb;
    let book = outcome.file_name.as_deref().map_or_else(
        || format!("'{}'", outcome.spreadsheet_id),
        |n| format!("'{n}'"),
    );
    match &outcome.result {
        EmbeddedObjectResult::WouldChange { summary, object } => {
            let mut lines = vec![format!("Would {summary} in {book}")];
            if let Some(object) = object {
                lines.push(describe_object(object));
            }
            lines
        }
        EmbeddedObjectResult::RefusedNotASpreadsheet { mime_type } => vec![format!(
            "Refused: {book} is not a Google Sheet (mimeType: {mime_type}); \
             `drive sheets {}` only works on spreadsheets",
            verb.label()
        )],
        EmbeddedObjectResult::RefusedShortcut => vec![format!(
            "Refused: {book} is a shortcut; `drive sheets {}` doesn't follow shortcuts",
            verb.label()
        )],
        EmbeddedObjectResult::RefusedNoVisibleParents => vec![format!(
            "Refused: {book} has no parent folder visible to this account, so no folder \
             rule can apply to it. Grant it by id instead: add {{\"file_id\": \"<spreadsheet \
             id>\", \"allow\": [\"sheets-structure\"]}} to write_permissions.rules."
        )],
        EmbeddedObjectResult::RefusedSheetNotFound { title, available } => {
            vec![grid_range::no_sheet_refusal(&book, title, available)]
        }
        EmbeddedObjectResult::RefusedInvalidRange { detail } => vec![format!("Refused: {detail}")],
        EmbeddedObjectResult::RefusedObjectNotFound { object_id } => vec![format!(
            "Refused: {book} has no chart or slicer with id {object_id}; run `drive sheets \
             list-charts`/`list-slicers` to see what exists"
        )],
        EmbeddedObjectResult::RefusedWrongObjectKind {
            object_id,
            expected,
            found,
        } => vec![format!(
            "Refused: id {object_id} in {book} is a {found}, not a {expected}; run `drive \
             sheets list-{found}s` to see what exists"
        )],
        EmbeddedObjectResult::RefusedUnsupportedChart { chart_id, detail } => {
            vec![format!("Refused: chart {chart_id} in {book}: {detail}")]
        }
        EmbeddedObjectResult::Blocked { decided_by } => vec![match decided_by {
            Some(rule) => format!(
                "Blocked: {} on {book} refused by rule on {} {}{}",
                verb.label(),
                rule.kind_label(),
                rule.id(),
                rule.depth_suffix()
            ),
            None => format!(
                "Blocked: {} on {book} refused by default policy (no matching rule for \
                 sheets-structure)",
                verb.label()
            ),
        }],
        EmbeddedObjectResult::RefusedNoLease => LeaseGateRefusal::NoLease
            .describe_line(&outcome.spreadsheet_id, &book)
            .into_iter()
            .collect(),
        EmbeddedObjectResult::RefusedLeaseExpired => LeaseGateRefusal::Expired
            .describe_line(&outcome.spreadsheet_id, &book)
            .into_iter()
            .collect(),
        EmbeddedObjectResult::RefusedLeaseWrongFile => LeaseGateRefusal::WrongFile
            .describe_line(&outcome.spreadsheet_id, &book)
            .into_iter()
            .collect(),
        EmbeddedObjectResult::RefusedLeaseStale => LeaseGateRefusal::Stale
            .describe_line(&outcome.spreadsheet_id, &book)
            .into_iter()
            .collect(),
        EmbeddedObjectResult::Changed {
            summary,
            object_id,
            object,
        } => {
            let id = object_id.map_or_else(String::new, |id| format!(" (id {id})"));
            let mut lines = vec![format!("Applied: {summary}{id} in {book}")];
            if let Some(object) = object {
                lines.push(describe_object(object));
            }
            lines
        }
        EmbeddedObjectResult::AppliedReplyUnreadable { summary, detail } => {
            // Not idempotent: a second `add-*` would add a second object.
            let mut lines = vec![applied_reply_unreadable_line(
                summary,
                &book,
                RetryHint::NotIdempotent,
                detail,
            )];
            if matches!(
                verb,
                EmbeddedObjectVerb::AddChart { .. } | EmbeddedObjectVerb::AddSlicer { .. }
            ) {
                lines.push(
                    "  the new object's id was in the unreadable reply; run `list-charts` / \
                     `list-slicers` to find it"
                        .to_string(),
                );
            }
            lines
        }
        EmbeddedObjectResult::Failed { detail } => vec![format!("Failed: {detail}")],
    }
}

#[cfg(test)]
#[allow(clippy::unwrap_used, clippy::expect_used)]
mod tests {
    use super::*;
    use crate::drive::auth::{DriveCredentials, DriveGrantedScopes};
    use crate::drive::sheets::client::SHEETS_API_URL;
    use crate::drive::sheets::types::Sheet;
    use crate::drive::test_support::seed_lease;
    use crate::test_support::env::MapEnv;
    use crate::utils::secret::Secret;
    use std::collections::HashSet;

    // ── parse_chart_type / parse_legend / parse_stacked ─────────────────

    #[test]
    fn parse_chart_type_accepts_every_basic_type_and_pie() {
        for (raw, expect_basic) in [
            ("column", Some("COLUMN")),
            ("bar", Some("BAR")),
            ("line", Some("LINE")),
            ("area", Some("AREA")),
            ("scatter", Some("SCATTER")),
            ("PIE", None),
        ] {
            let kind = parse_chart_type(raw).unwrap();
            match (&kind, expect_basic) {
                (ChartKind::Basic(t), Some(expected)) => assert_eq!(*t, expected),
                (ChartKind::Pie, None) => {}
                _ => panic!("unexpected parse for {raw:?}: {kind:?}"), // omni-dev: coverage ignore-line reason="every row of the table above pairs its raw value with the kind `parse_chart_type` returns for it, so the mismatch arm only fires if one of the two assertions above would already have failed"
            }
        }
    }

    #[test]
    fn parse_chart_type_rejects_combo_and_unknown() {
        let err = parse_chart_type("combo").unwrap_err();
        assert!(err.contains("not a supported chart type"), "{err}");
        let err = parse_chart_type("bogus").unwrap_err();
        assert!(
            err.contains("column, bar, line, area, scatter, pie"),
            "{err}"
        );
    }

    #[test]
    fn parse_legend_accepts_every_position() {
        assert_eq!(parse_legend("bottom").unwrap(), "BOTTOM_LEGEND");
        assert_eq!(parse_legend("TOP").unwrap(), "TOP_LEGEND");
        assert_eq!(parse_legend("left").unwrap(), "LEFT_LEGEND");
        assert_eq!(parse_legend("right").unwrap(), "RIGHT_LEGEND");
        assert_eq!(parse_legend("none").unwrap(), "NO_LEGEND");
    }

    #[test]
    fn parse_legend_rejects_unknown() {
        let err = parse_legend("middle").unwrap_err();
        assert!(err.contains("not a supported legend position"), "{err}");
    }

    #[test]
    fn parse_stacked_accepts_every_mode() {
        assert_eq!(parse_stacked("none").unwrap(), "NOT_STACKED");
        assert_eq!(parse_stacked("stacked").unwrap(), "STACKED");
        assert_eq!(parse_stacked("PERCENT").unwrap(), "PERCENT_STACKED");
    }

    #[test]
    fn parse_stacked_rejects_unknown() {
        let err = parse_stacked("half").unwrap_err();
        assert!(err.contains("not a supported stacking mode"), "{err}");
    }

    // ── axis_list / upsert_axis_title ────────────────────────────────────

    #[test]
    fn axis_list_builds_only_the_named_axes() {
        assert!(axis_list(None, None).is_empty());
        let axis = axis_list(Some("Quarter"), None);
        assert_eq!(axis.len(), 1);
        assert_eq!(axis[0].position, "BOTTOM_AXIS");
        assert_eq!(axis[0].title.as_deref(), Some("Quarter"));
        let axis = axis_list(Some("Quarter"), Some("Revenue"));
        assert_eq!(axis.len(), 2);
        assert_eq!(axis[1].position, "LEFT_AXIS");
    }

    #[test]
    fn upsert_axis_title_replaces_an_existing_entry_in_place() {
        let mut axis = vec![
            BasicChartAxis {
                position: "BOTTOM_AXIS".to_string(),
                title: Some("Old".to_string()),
                extra: BTreeMap::new(),
            },
            BasicChartAxis {
                position: "LEFT_AXIS".to_string(),
                title: None,
                extra: BTreeMap::new(),
            },
        ];
        upsert_axis_title(&mut axis, "BOTTOM_AXIS", "New");
        assert_eq!(axis.len(), 2);
        assert_eq!(axis[0].title.as_deref(), Some("New"));
        assert_eq!(axis[1].title, None);
    }

    #[test]
    fn upsert_axis_title_appends_when_absent() {
        let mut axis = Vec::new();
        upsert_axis_title(&mut axis, "LEFT_AXIS", "Revenue");
        assert_eq!(axis.len(), 1);
        assert_eq!(axis[0].position, "LEFT_AXIS");
    }

    // ── log_operation / label ────────────────────────────────────────────

    #[test]
    fn every_verb_has_a_distinct_log_operation_and_label() {
        let verbs = [
            EmbeddedObjectVerb::AddChart {
                chart_type: "column".to_string(),
                domain: String::new(),
                series: vec![String::new()],
                sheet: None,
                title: None,
                subtitle: None,
                legend: None,
                stacked: None,
                header_count: None,
                horizontal_axis_title: None,
                vertical_axis_title: None,
                pie_hole: None,
                anchor: Some(String::new()),
                offset_x: None,
                offset_y: None,
                width: None,
                height: None,
                new_sheet: false,
            },
            EmbeddedObjectVerb::UpdateChart {
                chart_id: 1,
                chart_type: None,
                domain: None,
                series: Vec::new(),
                sheet: None,
                title: None,
                subtitle: None,
                legend: None,
                stacked: None,
                header_count: None,
                horizontal_axis_title: None,
                vertical_axis_title: None,
                pie_hole: None,
            },
            EmbeddedObjectVerb::DeleteChart { chart_id: 1 },
            EmbeddedObjectVerb::AddSlicer {
                sheet: None,
                range: String::new(),
                column: 0,
                hide_values: Vec::new(),
                title: None,
                apply_to_pivot_tables: None,
                anchor: String::new(),
                offset_x: None,
                offset_y: None,
                width: None,
                height: None,
            },
            EmbeddedObjectVerb::UpdateSlicer {
                slicer_id: 1,
                sheet: None,
                range: None,
                column: None,
                hide_values: Vec::new(),
                clear_criteria: false,
                title: None,
                apply_to_pivot_tables: None,
            },
            EmbeddedObjectVerb::DeleteSlicer { slicer_id: 1 },
            EmbeddedObjectVerb::MoveChart {
                chart_id: 1,
                sheet: None,
                anchor: Some(String::new()),
                offset_x: None,
                offset_y: None,
                width: None,
                height: None,
                new_sheet: false,
            },
            EmbeddedObjectVerb::MoveSlicer {
                slicer_id: 1,
                sheet: None,
                anchor: Some(String::new()),
                offset_x: None,
                offset_y: None,
                width: None,
                height: None,
            },
            EmbeddedObjectVerb::UpdateChartBorder {
                chart_id: 1,
                color: Some(String::new()),
                clear: false,
            },
        ];
        let ops: HashSet<&str> = verbs
            .iter()
            .map(EmbeddedObjectVerb::log_operation)
            .collect();
        let labels: HashSet<&str> = verbs.iter().map(EmbeddedObjectVerb::label).collect();
        assert_eq!(ops.len(), verbs.len());
        assert_eq!(labels.len(), verbs.len());
    }

    // ── validate_verb ────────────────────────────────────────────────────

    fn add_chart_verb() -> EmbeddedObjectVerb {
        EmbeddedObjectVerb::AddChart {
            chart_type: "column".to_string(),
            domain: "A1:A10".to_string(),
            series: vec!["B1:B10".to_string()],
            sheet: Some("Sheet1".to_string()),
            title: None,
            subtitle: None,
            legend: None,
            stacked: None,
            header_count: None,
            horizontal_axis_title: None,
            vertical_axis_title: None,
            pie_hole: None,
            anchor: Some("E2".to_string()),
            offset_x: None,
            offset_y: None,
            width: None,
            height: None,
            new_sheet: false,
        }
    }

    #[test]
    fn validate_verb_rejects_add_chart_with_no_series() {
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart { series, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        series.clear();
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("at least one --series"), "{err}");
    }

    #[test]
    fn validate_verb_rejects_add_chart_with_neither_anchor_nor_new_sheet() {
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart { anchor, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        *anchor = None;
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("--anchor or --new-sheet"), "{err}");
    }

    #[test]
    fn validate_verb_rejects_new_sheet_combined_with_anchor() {
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart { new_sheet, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        *new_sheet = true;
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("--new-sheet cannot be combined"), "{err}");
    }

    #[test]
    fn validate_verb_accepts_new_sheet_alone() {
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart {
            anchor, new_sheet, ..
        } = &mut verb
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        *anchor = None;
        *new_sheet = true;
        assert!(validate_verb(&verb).is_ok());
    }

    #[test]
    fn validate_verb_rejects_update_chart_with_nothing_to_change() {
        let verb = EmbeddedObjectVerb::UpdateChart {
            chart_id: 1,
            chart_type: None,
            domain: None,
            series: Vec::new(),
            sheet: None,
            title: None,
            subtitle: None,
            legend: None,
            stacked: None,
            header_count: None,
            horizontal_axis_title: None,
            vertical_axis_title: None,
            pie_hole: None,
        };
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("nothing to change"), "{err}");
    }

    #[test]
    fn validate_verb_accepts_update_chart_domain_alone() {
        // `--domain` with no `--series` is a legitimate independent update
        // (e.g. the domain range shifted after an insert) — see
        // `merge_basic_chart`'s doc comment for why the two are not
        // coupled.
        let verb = EmbeddedObjectVerb::UpdateChart {
            chart_id: 1,
            chart_type: None,
            domain: Some("A1:A10".to_string()),
            series: Vec::new(),
            sheet: None,
            title: None,
            subtitle: None,
            legend: None,
            stacked: None,
            header_count: None,
            horizontal_axis_title: None,
            vertical_axis_title: None,
            pie_hole: None,
        };
        assert!(validate_verb(&verb).is_ok());
    }

    #[test]
    fn validate_verb_accepts_update_chart_series_alone() {
        // `--series` with no `--domain` is likewise legitimate (e.g. adding
        // a second series to an existing chart).
        let verb = EmbeddedObjectVerb::UpdateChart {
            chart_id: 1,
            chart_type: None,
            domain: None,
            series: vec!["B1:B10".to_string()],
            sheet: None,
            title: None,
            subtitle: None,
            legend: None,
            stacked: None,
            header_count: None,
            horizontal_axis_title: None,
            vertical_axis_title: None,
            pie_hole: None,
        };
        assert!(validate_verb(&verb).is_ok());
    }

    #[test]
    fn validate_verb_accepts_update_chart_domain_and_series_together() {
        let verb = EmbeddedObjectVerb::UpdateChart {
            chart_id: 1,
            chart_type: None,
            domain: Some("A1:A10".to_string()),
            series: vec!["B1:B10".to_string()],
            sheet: None,
            title: None,
            subtitle: None,
            legend: None,
            stacked: None,
            header_count: None,
            horizontal_axis_title: None,
            vertical_axis_title: None,
            pie_hole: None,
        };
        assert!(validate_verb(&verb).is_ok());
    }

    #[test]
    fn validate_verb_rejects_add_chart_pie_hole_out_of_range() {
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart {
            chart_type,
            pie_hole,
            ..
        } = &mut verb
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        // `chart_type` must be `pie` here, or the applicability check now
        // fires first (see the ordering test below) and this would assert
        // the wrong message.
        *chart_type = "pie".to_string();
        *pie_hole = Some(1.5);
        let err = validate_verb(&verb).unwrap_err();
        assert!(
            err.contains("--pie-hole must be between 0.0 and 1.0"),
            "{err}"
        );
    }

    #[test]
    fn validate_verb_accepts_add_chart_pie_hole_in_range() {
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart {
            chart_type,
            pie_hole,
            ..
        } = &mut verb
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        *chart_type = "pie".to_string();
        *pie_hole = Some(0.5);
        assert!(validate_verb(&verb).is_ok());
    }

    #[test]
    fn validate_verb_accepts_add_chart_pie_hole_at_each_inclusive_boundary() {
        for boundary in [0.0, 1.0] {
            let mut verb = add_chart_verb();
            let EmbeddedObjectVerb::AddChart {
                chart_type,
                pie_hole,
                ..
            } = &mut verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
            };
            *chart_type = "pie".to_string();
            *pie_hole = Some(boundary);
            assert!(
                validate_verb(&verb).is_ok(),
                "{boundary} should be in range"
            );
        }
    }

    #[test]
    fn validate_verb_rejects_add_chart_pie_hole_nan_and_infinite() {
        for bad in [f64::NAN, f64::INFINITY, f64::NEG_INFINITY] {
            let mut verb = add_chart_verb();
            let EmbeddedObjectVerb::AddChart {
                chart_type,
                pie_hole,
                ..
            } = &mut verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
            };
            *chart_type = "pie".to_string();
            *pie_hole = Some(bad);
            let err = validate_verb(&verb).unwrap_err();
            assert!(
                err.contains("--pie-hole must be between 0.0 and 1.0"),
                "{bad}: {err}"
            );
        }
    }

    #[test]
    fn validate_verb_rejects_add_chart_pie_hole_on_a_non_pie_chart_before_the_range_check() {
        // `--type column --pie-hole 1.5` is invalid two ways at once
        // (inapplicable *and* out of range); the applicability error must
        // win, since the range check alone would tell the user to "fix"
        // the value only to learn the flag never applied — see
        // `validate_verb`'s `AddChart` arm doc comment.
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart { pie_hole, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        *pie_hole = Some(1.5);
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("only applies to a pie chart"), "{err}");
        assert!(!err.contains("must be between"), "{err}");
    }

    #[test]
    fn validate_verb_rejects_add_chart_pie_hole_on_a_non_pie_chart_even_in_range() {
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart { pie_hole, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        *pie_hole = Some(0.5);
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("only applies to a pie chart"), "{err}");
    }

    #[test]
    fn validate_verb_rejects_update_chart_pie_hole_out_of_range() {
        let verb = EmbeddedObjectVerb::UpdateChart {
            chart_id: 1,
            chart_type: None,
            domain: None,
            series: Vec::new(),
            sheet: None,
            title: None,
            subtitle: None,
            legend: None,
            stacked: None,
            header_count: None,
            horizontal_axis_title: None,
            vertical_axis_title: None,
            pie_hole: Some(-0.1),
        };
        let err = validate_verb(&verb).unwrap_err();
        assert!(
            err.contains("--pie-hole must be between 0.0 and 1.0"),
            "{err}"
        );
    }

    #[test]
    fn validate_verb_rejects_update_slicer_with_nothing_to_change() {
        let verb = EmbeddedObjectVerb::UpdateSlicer {
            slicer_id: 1,
            sheet: None,
            range: None,
            column: None,
            hide_values: Vec::new(),
            clear_criteria: false,
            title: None,
            apply_to_pivot_tables: None,
        };
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("nothing to change"), "{err}");
    }

    #[test]
    fn validate_verb_accepts_update_slicer_with_only_clear_criteria() {
        let verb = EmbeddedObjectVerb::UpdateSlicer {
            slicer_id: 1,
            sheet: None,
            range: None,
            column: None,
            hide_values: Vec::new(),
            clear_criteria: true,
            title: None,
            apply_to_pivot_tables: None,
        };
        assert!(validate_verb(&verb).is_ok());
    }

    #[test]
    fn validate_verb_rejects_update_slicer_clear_criteria_with_hide_values() {
        let verb = EmbeddedObjectVerb::UpdateSlicer {
            slicer_id: 1,
            sheet: None,
            range: None,
            column: None,
            hide_values: vec!["foo".to_string()],
            clear_criteria: true,
            title: None,
            apply_to_pivot_tables: None,
        };
        let err = validate_verb(&verb).unwrap_err();
        assert!(
            err.contains("--clear-criteria and --hide-values are mutually exclusive"),
            "{err}"
        );
    }

    // ── existing_chart_kind ──────────────────────────────────────────────

    #[test]
    fn existing_chart_kind_accepts_a_supported_basic_type() {
        let spec = ChartSpec {
            basic_chart: Some(BasicChartSpec {
                chart_type: "COLUMN".to_string(),
                ..Default::default()
            }),
            ..Default::default()
        };
        assert!(matches!(
            existing_chart_kind(&spec),
            Ok(ExistingChartKind::Basic)
        ));
    }

    #[test]
    fn existing_chart_kind_accepts_pie() {
        let spec = ChartSpec {
            pie_chart: Some(PieChartSpec::default()),
            ..Default::default()
        };
        assert!(matches!(
            existing_chart_kind(&spec),
            Ok(ExistingChartKind::Pie)
        ));
    }

    #[test]
    fn existing_chart_kind_refuses_an_unsupported_basic_type() {
        let spec = ChartSpec {
            basic_chart: Some(BasicChartSpec {
                chart_type: "COMBO".to_string(),
                ..Default::default()
            }),
            ..Default::default()
        };
        let err = existing_chart_kind(&spec).unwrap_err();
        assert_eq!(err, "COMBO");
    }

    #[test]
    fn existing_chart_kind_refuses_neither_basic_nor_pie() {
        let mut extra = BTreeMap::new();
        extra.insert("histogramChart".to_string(), serde_json::json!({}));
        let spec = ChartSpec {
            extra,
            ..Default::default()
        };
        let err = existing_chart_kind(&spec).unwrap_err();
        assert_eq!(err, "histogramChart");
    }

    #[test]
    fn existing_chart_kind_names_an_empty_spec_unknown() {
        // A spec carrying neither union *and* no unmodelled key to name —
        // the error message still has to say something.
        let err = existing_chart_kind(&ChartSpec::default()).unwrap_err();
        assert_eq!(err, "unknown");
    }

    // ── merge_chart_spec ─────────────────────────────────────────────────

    fn workbook_with_sheet(sheet: Sheet) -> Spreadsheet {
        Spreadsheet {
            sheets: vec![sheet],
            ..Default::default()
        }
    }

    fn basic_chart_sheet(chart_id: i64, chart_type: &str) -> Sheet {
        let mut extra = BTreeMap::new();
        extra.insert("maximized".to_string(), serde_json::json!(true));
        Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            charts: vec![EmbeddedChart {
                chart_id: Some(chart_id),
                spec: Some(ChartSpec {
                    title: Some("Old title".to_string()),
                    basic_chart: Some(BasicChartSpec {
                        chart_type: chart_type.to_string(),
                        domains: vec![BasicChartDomain {
                            domain: chart_data(GridRange {
                                sheet_id: 0,
                                start_row_index: Some(0),
                                end_row_index: Some(10),
                                start_column_index: Some(0),
                                end_column_index: Some(1),
                            }),
                            extra: BTreeMap::new(),
                        }],
                        ..Default::default()
                    }),
                    extra,
                    ..Default::default()
                }),
                position: Some(EmbeddedObjectPosition {
                    overlay_position: Some(OverlayPosition {
                        anchor_cell: GridCoordinate {
                            sheet_id: 0,
                            row_index: 1,
                            column_index: 4,
                        },
                        ..Default::default()
                    }),
                    ..Default::default()
                }),
                border: None,
            }],
            ..Default::default()
        }
    }

    fn update_chart_verb(chart_id: i64) -> EmbeddedObjectVerb {
        EmbeddedObjectVerb::UpdateChart {
            chart_id,
            chart_type: None,
            domain: None,
            series: Vec::new(),
            sheet: None,
            title: Some("New title".to_string()),
            subtitle: None,
            legend: None,
            stacked: None,
            header_count: None,
            horizontal_axis_title: None,
            vertical_axis_title: None,
            pie_hole: None,
        }
    }

    #[test]
    fn merge_chart_spec_preserves_unmodelled_extra_fields() {
        let sheet = basic_chart_sheet(1, "COLUMN");
        let workbook = workbook_with_sheet(sheet);
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let verb = update_chart_verb(1);
        let (spec, summary) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        assert_eq!(spec.extra.get("maximized"), Some(&serde_json::json!(true)));
        assert_eq!(spec.title.as_deref(), Some("New title"));
        assert!(summary.contains("title"));
    }

    #[test]
    fn merge_chart_spec_refuses_an_unsupported_existing_kind() {
        let sheet = basic_chart_sheet(1, "COMBO");
        let workbook = workbook_with_sheet(sheet);
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let verb = update_chart_verb(1);
        let err = merge_chart_spec(&workbook, existing, &verb).unwrap_err();
        assert!(matches!(
            err,
            EmbeddedObjectResult::RefusedUnsupportedChart { chart_id: 1, .. }
        ));
    }

    #[test]
    fn merge_chart_spec_refuses_a_basic_to_pie_switch() {
        let sheet = basic_chart_sheet(1, "COLUMN");
        let workbook = workbook_with_sheet(sheet);
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let mut verb = update_chart_verb(1);
        let EmbeddedObjectVerb::UpdateChart { chart_type, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::UpdateChart above, so this arm can never run"
        };
        *chart_type = Some("pie".to_string());
        let err = merge_chart_spec(&workbook, existing, &verb).unwrap_err();
        assert!(matches!(
            err,
            EmbeddedObjectResult::RefusedUnsupportedChart { chart_id: 1, .. }
        ));
    }

    #[test]
    fn merge_chart_spec_allows_changing_type_within_the_basic_family() {
        let sheet = basic_chart_sheet(1, "COLUMN");
        let workbook = workbook_with_sheet(sheet);
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let mut verb = update_chart_verb(1);
        let EmbeddedObjectVerb::UpdateChart { chart_type, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::UpdateChart above, so this arm can never run"
        };
        *chart_type = Some("bar".to_string());
        let (spec, _) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        assert_eq!(spec.basic_chart.unwrap().chart_type, "BAR");
    }

    #[test]
    fn merge_chart_spec_upserts_an_axis_title_on_a_basic_chart() {
        let sheet = basic_chart_sheet(1, "COLUMN");
        let workbook = workbook_with_sheet(sheet);
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let mut verb = update_chart_verb(1);
        let EmbeddedObjectVerb::UpdateChart {
            horizontal_axis_title,
            ..
        } = &mut verb
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::UpdateChart above, so this arm can never run"
        };
        *horizontal_axis_title = Some("Quarter".to_string());
        let (spec, summary) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        let axis = spec.basic_chart.unwrap().axis;
        assert_eq!(axis.len(), 1);
        assert_eq!(axis[0].position, "BOTTOM_AXIS");
        assert_eq!(axis[0].title.as_deref(), Some("Quarter"));
        assert!(summary.contains("horizontal-axis-title"), "{summary}");
    }

    fn pie_chart_sheet(chart_id: i64) -> Sheet {
        Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            charts: vec![EmbeddedChart {
                chart_id: Some(chart_id),
                spec: Some(ChartSpec {
                    pie_chart: Some(PieChartSpec {
                        domain: chart_data(GridRange {
                            sheet_id: 0,
                            start_row_index: Some(0),
                            end_row_index: Some(10),
                            start_column_index: Some(0),
                            end_column_index: Some(1),
                        }),
                        series: chart_data(GridRange {
                            sheet_id: 0,
                            start_row_index: Some(0),
                            end_row_index: Some(10),
                            start_column_index: Some(1),
                            end_column_index: Some(2),
                        }),
                        ..Default::default()
                    }),
                    ..Default::default()
                }),
                position: None,
                border: None,
            }],
            ..Default::default()
        }
    }

    #[test]
    fn merge_chart_spec_refuses_a_basic_only_flag_on_an_existing_pie_chart() {
        let workbook = workbook_with_sheet(pie_chart_sheet(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let mut verb = update_chart_verb(1);
        let EmbeddedObjectVerb::UpdateChart { header_count, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::UpdateChart above, so this arm can never run"
        };
        *header_count = Some(1);
        let err = merge_chart_spec(&workbook, existing, &verb).unwrap_err();
        assert!(matches!(
            err,
            EmbeddedObjectResult::RefusedInvalidRange { .. }
        ));
    }

    /// A basic chart sheet with both a domain **and** a series already
    /// set, distinct from `basic_chart_sheet` (domain only) — needed to
    /// prove that changing one independently leaves the other untouched.
    fn basic_chart_sheet_with_series(chart_id: i64) -> Sheet {
        let mut sheet = basic_chart_sheet(chart_id, "COLUMN");
        let basic = sheet.charts[0]
            .spec
            .as_mut()
            .unwrap()
            .basic_chart
            .as_mut()
            .unwrap();
        basic.series = vec![BasicChartSeries {
            series: chart_data(GridRange {
                sheet_id: 0,
                start_row_index: Some(0),
                end_row_index: Some(10),
                start_column_index: Some(1),
                end_column_index: Some(2),
            }),
            target_axis: None,
            extra: BTreeMap::new(),
        }];
        sheet
    }

    #[test]
    fn merge_chart_spec_updates_series_alone_leaving_domain_untouched() {
        let workbook = workbook_with_sheet(basic_chart_sheet_with_series(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let original_domains = existing.basic_chart.as_ref().unwrap().domains.clone();
        let mut verb = update_chart_verb(1);
        let EmbeddedObjectVerb::UpdateChart {
            title,
            sheet,
            series,
            ..
        } = &mut verb
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::UpdateChart above, so this arm can never run"
        };
        *title = None;
        *sheet = Some("Q1".to_string());
        *series = vec!["C1:C10".to_string()];
        let (spec, summary) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        let basic = spec.basic_chart.unwrap();
        assert_eq!(
            basic.domains, original_domains,
            "domain must survive a series-only update"
        );
        assert_eq!(basic.series.len(), 1);
        assert!(summary.contains("series"));
        assert!(!summary.contains("domain"));
    }

    #[test]
    fn merge_chart_spec_updates_domain_alone_leaving_series_untouched() {
        let workbook = workbook_with_sheet(basic_chart_sheet_with_series(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let original_series = existing.basic_chart.as_ref().unwrap().series.clone();
        let mut verb = update_chart_verb(1);
        let EmbeddedObjectVerb::UpdateChart {
            title,
            sheet,
            domain,
            ..
        } = &mut verb
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::UpdateChart above, so this arm can never run"
        };
        *title = None;
        *sheet = Some("Q1".to_string());
        *domain = Some("B1:B10".to_string());
        let (spec, summary) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        let basic = spec.basic_chart.unwrap();
        assert_eq!(
            basic.series, original_series,
            "series must survive a domain-only update"
        );
        assert_eq!(basic.domains.len(), 1);
        assert!(summary.contains("domain"));
        assert!(!summary.contains("series"));
    }

    #[test]
    fn merge_chart_spec_refuses_pie_hole_on_an_existing_basic_chart() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let mut verb = update_chart_verb(1);
        let EmbeddedObjectVerb::UpdateChart {
            title, pie_hole, ..
        } = &mut verb
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::UpdateChart above, so this arm can never run"
        };
        *title = None;
        *pie_hole = Some(0.4);
        let err = merge_chart_spec(&workbook, existing, &verb).unwrap_err();
        assert!(
            matches!(err, EmbeddedObjectResult::RefusedInvalidRange { .. }),
            "{err:?}"
        );
    }

    // ── summarise_chart / summarise_slicer / describe_position ──────────

    #[test]
    fn summarise_chart_reports_overlay_position() {
        let sheet = basic_chart_sheet(7, "LINE");
        let summary = summarise_chart(&sheet, &sheet.charts[0]).unwrap();
        assert_eq!(summary.object_id, 7);
        assert_eq!(summary.kind, "chart");
        assert_eq!(summary.chart_type.as_deref(), Some("LINE"));
        assert_eq!(summary.title.as_deref(), Some("Old title"));
        assert_eq!(summary.position, "Q1!E2");
    }

    #[test]
    fn summarise_chart_reports_own_sheet_for_a_new_sheet_chart() {
        let sheet = Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(9),
                title: "Charts".to_string(),
                ..Default::default()
            }),
            charts: vec![EmbeddedChart {
                chart_id: Some(3),
                spec: Some(ChartSpec {
                    pie_chart: Some(PieChartSpec::default()),
                    ..Default::default()
                }),
                position: Some(EmbeddedObjectPosition {
                    sheet_id: Some(9),
                    new_sheet: Some(true),
                    ..Default::default()
                }),
                border: None,
            }],
            ..Default::default()
        };
        let summary = summarise_chart(&sheet, &sheet.charts[0]).unwrap();
        assert_eq!(summary.chart_type.as_deref(), Some("PIE"));
        assert_eq!(summary.position, "own sheet (id 9)");
    }

    #[test]
    fn summarise_chart_reports_a_non_default_border_colour_as_hex() {
        let mut sheet = basic_chart_sheet(7, "LINE");
        sheet.charts[0].border = Some(EmbeddedObjectBorder {
            color_style: Some(ColorStyle::rgb(parse_hex_color("#4A86E8").unwrap())),
        });
        let summary = summarise_chart(&sheet, &sheet.charts[0]).unwrap();
        assert_eq!(summary.border.as_deref(), Some("#4A86E8"));
    }

    #[test]
    fn summarise_chart_reports_a_default_border_colour_as_ambiguous() {
        let mut sheet = basic_chart_sheet(7, "LINE");
        sheet.charts[0].border = Some(EmbeddedObjectBorder {
            color_style: Some(ColorStyle::rgb(Color::default())),
        });
        let summary = summarise_chart(&sheet, &sheet.charts[0]).unwrap();
        assert_eq!(
            summary.border.as_deref(),
            Some("#000000 (or cleared — indistinguishable on read)")
        );
    }

    #[test]
    fn summarise_chart_reports_an_entirely_empty_color_style_as_ambiguous() {
        // Issue #2020: before ColorStyle's rgbColor arm became optional, a
        // colorStyle with neither arm set (`{}`) could not even parse. Now
        // that it can, it must read as the same ambiguous case as an
        // all-zero rgbColor, not as ColorStyle::describe()'s "(unset)".
        let mut sheet = basic_chart_sheet(7, "LINE");
        sheet.charts[0].border = Some(EmbeddedObjectBorder {
            color_style: Some(ColorStyle::default()),
        });
        let summary = summarise_chart(&sheet, &sheet.charts[0]).unwrap();
        assert_eq!(
            summary.border.as_deref(),
            Some("#000000 (or cleared — indistinguishable on read)")
        );
    }

    #[test]
    fn summarise_chart_reports_a_theme_border_colour_by_name() {
        let mut sheet = basic_chart_sheet(7, "LINE");
        sheet.charts[0].border = Some(EmbeddedObjectBorder {
            color_style: Some(ColorStyle::theme("ACCENT1")),
        });
        let summary = summarise_chart(&sheet, &sheet.charts[0]).unwrap();
        assert_eq!(summary.border.as_deref(), Some("theme:ACCENT1"));
    }

    #[test]
    fn summarise_slicer_reports_title_and_position() {
        let sheet = Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            slicers: vec![Slicer {
                slicer_id: Some(4),
                spec: Some(SlicerSpec {
                    title: Some("Region".to_string()),
                    ..Default::default()
                }),
                position: Some(EmbeddedObjectPosition {
                    overlay_position: Some(OverlayPosition {
                        anchor_cell: GridCoordinate {
                            sheet_id: 0,
                            row_index: 0,
                            column_index: 5,
                        },
                        ..Default::default()
                    }),
                    ..Default::default()
                }),
            }],
            ..Default::default()
        };
        let summary = summarise_slicer(&sheet, &sheet.slicers[0]).unwrap();
        assert_eq!(summary.object_id, 4);
        assert_eq!(summary.kind, "slicer");
        assert_eq!(summary.chart_type, None);
        assert_eq!(summary.title.as_deref(), Some("Region"));
        assert_eq!(summary.position, "Q1!F1");
    }

    // ── write_jsonl / log_status ─────────────────────────────────────────

    #[test]
    fn object_preview_names_kind_title_and_position() {
        let object = EmbeddedObjectSummary {
            object_id: 5,
            kind: "chart".to_string(),
            chart_type: Some("PIE".to_string()),
            title: Some("Sales".to_string()),
            position: "Q1!C2".to_string(),
            border: None,
        };
        assert_eq!(
            object_preview(&object),
            "id 5: chart (PIE) 'Sales', anchored Q1!C2"
        );
    }

    #[test]
    fn object_preview_reports_the_chart_border_colour() {
        let object = EmbeddedObjectSummary {
            object_id: 5,
            kind: "chart".to_string(),
            chart_type: Some("PIE".to_string()),
            title: Some("Sales".to_string()),
            position: "Q1!C2".to_string(),
            border: Some("#4A86E8".to_string()),
        };
        assert_eq!(
            object_preview(&object),
            "id 5: chart (PIE) 'Sales', anchored Q1!C2, border #4A86E8"
        );
    }

    #[test]
    fn object_preview_omits_the_chart_type_and_title_a_slicer_lacks() {
        let object = EmbeddedObjectSummary {
            object_id: 9,
            kind: "slicer".to_string(),
            chart_type: None,
            title: None,
            position: "unknown position".to_string(),
            border: None,
        };
        assert_eq!(
            object_preview(&object),
            "id 9: slicer, anchored unknown position"
        );
    }

    #[test]
    fn write_jsonl_emits_one_line_of_json() {
        let outcome = EmbeddedObjectOutcome {
            spreadsheet_id: "sheet-1".to_string(),
            file_name: Some("Budget".to_string()),
            resolved_folder_id: None,
            sheet_id: None,
            verb: EmbeddedObjectVerb::DeleteChart { chart_id: 3 },
            result: EmbeddedObjectResult::Changed {
                summary: "delete chart 3".to_string(),
                object_id: Some(3),
                object: None,
            },
        };
        let mut buf = Vec::new();
        outcome.write_jsonl(&mut buf).unwrap();
        let text = String::from_utf8(buf).unwrap();
        assert_eq!(text.matches('\n').count(), 1);
        let parsed: serde_json::Value = serde_json::from_str(text.trim()).unwrap();
        assert_eq!(parsed["result"]["status"], "changed");
    }

    // ── end-to-end via wiremock ──────────────────────────────────────────

    fn test_credentials() -> DriveCredentials {
        DriveCredentials {
            client_id: "client-1".to_string(),
            client_secret: Secret::new("secret-1"),
            refresh_token: Secret::new("refresh-1"),
            scope: DriveGrantedScopes::READONLY,
        }
    }

    async fn clients(server: &wiremock::MockServer) -> (DriveClient, SheetsClient) {
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path("/token"))
            .respond_with(
                wiremock::ResponseTemplate::new(200).set_body_json(serde_json::json!({
                    "access_token": "test-token", "expires_in": 3600,
                })),
            )
            .mount(server)
            .await;
        let mut drive = DriveClient::new(&server.uri(), &test_credentials()).unwrap();
        crate::drive::client::test_support::replace_session(
            &mut drive,
            &test_credentials(),
            &format!("{}/token", server.uri()),
        );
        let env = MapEnv::new().with(SHEETS_API_URL, &server.uri());
        let sheets = SheetsClient::from_drive_client_with(&env, &drive).unwrap();
        (drive, sheets)
    }

    fn mount_file(id: &str, mime_type: &str, parents: &[&str]) -> wiremock::Mock {
        let parents: Vec<&str> = parents.to_vec();
        wiremock::Mock::given(wiremock::matchers::method("GET"))
            .and(wiremock::matchers::path(format!("/drive/v3/files/{id}")))
            .respond_with(
                wiremock::ResponseTemplate::new(200).set_body_json(serde_json::json!({
                    "id": id, "name": id, "mimeType": mime_type, "parents": parents,
                    "version": "1",
                })),
            )
    }

    fn mount_folder(id: &str) -> wiremock::Mock {
        mount_file(id, "application/vnd.google-apps.folder", &[])
    }

    fn mount_workbook(sheets: serde_json::Value) -> wiremock::Mock {
        wiremock::Mock::given(wiremock::matchers::method("GET"))
            .and(wiremock::matchers::path("/v4/spreadsheets/sheet-1"))
            .respond_with(
                wiremock::ResponseTemplate::new(200).set_body_json(serde_json::json!({
                    "spreadsheetId": "sheet-1",
                    "properties": {"title": "Budget"},
                    "sheets": sheets,
                })),
            )
    }

    fn leased_opts_for(spreadsheet_id: &str) -> (Option<String>, std::path::PathBuf) {
        let ledger_path = tempfile::tempdir()
            .unwrap()
            .keep()
            .join("lease-ledger.jsonl");
        let token = seed_lease(&ledger_path, spreadsheet_id, "1");
        (Some(token), ledger_path)
    }

    fn allow_rule(folder: &str) -> FolderPermissionRule {
        FolderPermissionRule {
            folder_id: Some(folder.to_string()),
            file_id: None,
            recursive: true,
            allow: std::iter::once(DriveOperation::SheetsStructure).collect(),
            deny: HashSet::default(),
            require_lease: true,
        }
    }

    #[tokio::test]
    async fn a_denied_gate_blocks_before_any_read_or_batch_update_call() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        let rules: Vec<FolderPermissionRule> = Vec::new();
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: add_chart_verb(),
            dry_run: false,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(matches!(
            outcome.result,
            EmbeddedObjectResult::Blocked { .. }
        ));
    }

    #[tokio::test]
    async fn add_chart_sends_an_add_chart_request_and_reports_the_server_assigned_id() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Sheet1", "index": 0}},
        ]))
        .mount(&server)
        .await;
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path(
                "/v4/spreadsheets/sheet-1:batchUpdate",
            ))
            .respond_with(
                wiremock::ResponseTemplate::new(200).set_body_json(serde_json::json!({
                    "replies": [{"addChart": {"chart": {"chartId": 42}}}]
                })),
            )
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let (lease_token, ledger_path) = leased_opts_for("sheet-1");
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: add_chart_verb(),
            dry_run: false,
            lease_token,
            ledger_path,
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(
            matches!(
                outcome.result,
                EmbeddedObjectResult::Changed {
                    object_id: Some(42),
                    ..
                }
            ),
            "{:?}",
            outcome.result
        );
    }

    /// Mounts the gate reads and a workbook with one sheet, so an `add-chart`
    /// reaches `batchUpdate`.
    async fn mount_add_chart_reads(server: &wiremock::MockServer) {
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(server)
        .await;
        mount_folder("folder-1").mount(server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Sheet1", "index": 0}},
        ]))
        .mount(server)
        .await;
    }

    #[tokio::test]
    async fn add_chart_with_an_unreadable_reply_reports_applied_reply_unreadable_not_failed() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_add_chart_reads(&server).await;
        // 2xx, so the chart WAS created — but the body is not the reply shape.
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path(
                "/v4/spreadsheets/sheet-1:batchUpdate",
            ))
            .respond_with(wiremock::ResponseTemplate::new(200).set_body_string("not json"))
            .expect(1)
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let (lease_token, ledger_path) = leased_opts_for("sheet-1");
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: add_chart_verb(),
            dry_run: false,
            lease_token,
            ledger_path,
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert_eq!(
            outcome.result.log_status(),
            "applied-reply-unreadable",
            "{:?}",
            outcome.result
        );
        let lines = describe_lines(&outcome);
        assert!(
            lines[0].starts_with("Applied, but the reply could not be read"),
            "{lines:?}"
        );
        assert!(lines[0].contains("do not retry"), "{lines:?}");
        assert!(lines[1].contains("list-charts"), "{lines:?}");
    }

    #[tokio::test]
    async fn an_unreadable_reply_still_refreshes_the_lease_ledger() {
        use std::sync::atomic::{AtomicBool, Ordering};
        use std::sync::Arc;

        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        // `files.get` reports version "1" until the mutation lands and "2"
        // after — the file moved because of our own write.
        let written = Arc::new(AtomicBool::new(false));
        let seen_by_get = Arc::clone(&written);
        wiremock::Mock::given(wiremock::matchers::method("GET"))
            .and(wiremock::matchers::path("/drive/v3/files/sheet-1"))
            .respond_with(move |_: &wiremock::Request| {
                let version = if seen_by_get.load(Ordering::SeqCst) {
                    "2"
                } else {
                    "1"
                };
                wiremock::ResponseTemplate::new(200).set_body_json(serde_json::json!({
                    "id": "sheet-1", "name": "sheet-1",
                    "mimeType": crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
                    "parents": ["folder-1"], "version": version,
                }))
            })
            .mount(&server)
            .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Sheet1", "index": 0}},
        ]))
        .mount(&server)
        .await;
        let marks_written = Arc::clone(&written);
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path(
                "/v4/spreadsheets/sheet-1:batchUpdate",
            ))
            .respond_with(move |_: &wiremock::Request| {
                marks_written.store(true, Ordering::SeqCst);
                wiremock::ResponseTemplate::new(200).set_body_string("not json")
            })
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let (lease_token, ledger_path) = leased_opts_for("sheet-1");
        let token = lease_token.clone().unwrap();
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: add_chart_verb(),
            dry_run: false,
            lease_token,
            ledger_path: ledger_path.clone(),
        };

        let first = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert_eq!(
            first.result.log_status(),
            "applied-reply-unreadable",
            "{:?}",
            first.result
        );
        let ledger = crate::drive::lease::ledger::LeaseLedger::load(&ledger_path).unwrap();
        assert_eq!(
            ledger.get(&token).unwrap().version,
            "2",
            "an applied write must refresh the ledger even when its reply was unreadable"
        );

        // Regression: a stale ledger made the next write under the same lease
        // `refused-lease-stale`.
        let second = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(
            !matches!(second.result, EmbeddedObjectResult::RefusedLeaseStale),
            "{:?}",
            second.result
        );
    }

    #[tokio::test]
    async fn add_chart_pie_refuses_more_than_one_series_before_any_batch_update_call() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Sheet1", "index": 0}},
        ]))
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart {
            chart_type, series, ..
        } = &mut verb
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        *chart_type = "pie".to_string();
        series.push("C1:C10".to_string());
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb,
            dry_run: true,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(
            matches!(
                outcome.result,
                EmbeddedObjectResult::RefusedInvalidRange { .. }
            ),
            "{:?}",
            outcome.result
        );
    }

    #[tokio::test]
    async fn update_chart_refuses_an_unsupported_existing_chart_with_no_batch_update_call() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {
                "properties": {"sheetId": 0, "title": "Q1", "index": 0},
                "charts": [{
                    "chartId": 1,
                    "spec": {"basicChart": {"chartType": "COMBO"}},
                }],
            },
        ]))
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: update_chart_verb(1),
            dry_run: false,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(
            matches!(
                outcome.result,
                EmbeddedObjectResult::RefusedUnsupportedChart { chart_id: 1, .. }
            ),
            "{:?}",
            outcome.result
        );
    }

    #[tokio::test]
    async fn update_chart_refuses_an_unknown_id() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Q1", "index": 0}},
        ]))
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: update_chart_verb(99),
            dry_run: true,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(matches!(
            outcome.result,
            EmbeddedObjectResult::RefusedObjectNotFound { object_id: 99 }
        ));
    }

    #[tokio::test]
    async fn delete_chart_reports_a_preview_under_dry_run_with_no_batch_update_call() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {
                "properties": {"sheetId": 0, "title": "Q1", "index": 0},
                "charts": [{
                    "chartId": 5,
                    "spec": {"title": "Sales", "pieChart": {
                        "domain": {"sourceRange": {"sources": [{"sheetId": 0}]}},
                        "series": {"sourceRange": {"sources": [{"sheetId": 0}]}},
                    }},
                    "position": {"overlayPosition": {"anchorCell": {"sheetId": 0, "rowIndex": 1, "columnIndex": 2}}},
                }],
            },
        ]))
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::DeleteChart { chart_id: 5 },
            dry_run: true,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        match outcome.result {
            EmbeddedObjectResult::WouldChange { object, .. } => {
                let object = object.expect("delete-chart previews the object");
                assert_eq!(object.object_id, 5);
                assert_eq!(object.title.as_deref(), Some("Sales"));
                assert_eq!(object.position, "Q1!C2");
            }
            other => panic!("expected WouldChange, got {other:?}"),
        }
    }

    #[tokio::test]
    async fn add_slicer_sends_an_add_slicer_request_and_reports_the_server_assigned_id() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Q1", "index": 0}},
        ]))
        .mount(&server)
        .await;
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path(
                "/v4/spreadsheets/sheet-1:batchUpdate",
            ))
            .respond_with(
                wiremock::ResponseTemplate::new(200).set_body_json(serde_json::json!({
                    "replies": [{"addSlicer": {"slicer": {"slicerId": 8}}}]
                })),
            )
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let (lease_token, ledger_path) = leased_opts_for("sheet-1");
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::AddSlicer {
                sheet: Some("Q1".to_string()),
                range: "A1:D10".to_string(),
                column: 1,
                hide_values: vec!["Closed".to_string()],
                title: Some("Status".to_string()),
                apply_to_pivot_tables: None,
                anchor: "F2".to_string(),
                offset_x: None,
                offset_y: None,
                width: None,
                height: None,
            },
            dry_run: false,
            lease_token,
            ledger_path,
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(
            matches!(
                outcome.result,
                EmbeddedObjectResult::Changed {
                    object_id: Some(8),
                    ..
                }
            ),
            "{:?}",
            outcome.result
        );
    }

    #[tokio::test]
    async fn update_slicer_names_only_the_changed_fields_in_the_mask() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {
                "properties": {"sheetId": 0, "title": "Q1", "index": 0},
                "slicers": [{
                    "slicerId": 4,
                    "spec": {"title": "Region"},
                    "position": {"overlayPosition": {"anchorCell": {"sheetId": 0, "rowIndex": 0, "columnIndex": 5}}},
                }],
            },
        ]))
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::UpdateSlicer {
                slicer_id: 4,
                sheet: None,
                range: None,
                column: None,
                hide_values: Vec::new(),
                clear_criteria: false,
                title: Some("Territory".to_string()),
                apply_to_pivot_tables: None,
            },
            dry_run: true,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        match outcome.result {
            EmbeddedObjectResult::WouldChange { summary, .. } => {
                assert!(summary.contains("title"), "{summary}");
            }
            other => panic!("expected WouldChange, got {other:?}"),
        }
    }

    #[tokio::test]
    async fn delete_slicer_reports_a_preview_under_dry_run() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {
                "properties": {"sheetId": 0, "title": "Q1", "index": 0},
                "slicers": [{
                    "slicerId": 9,
                    "spec": {"title": "Region"},
                    "position": {"overlayPosition": {"anchorCell": {"sheetId": 0, "rowIndex": 0, "columnIndex": 5}}},
                }],
            },
        ]))
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::DeleteSlicer { slicer_id: 9 },
            dry_run: true,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        match outcome.result {
            EmbeddedObjectResult::WouldChange { object, .. } => {
                let object = object.expect("delete-slicer previews the object");
                assert_eq!(object.object_id, 9);
                assert_eq!(object.kind, "slicer");
                assert_eq!(object.title.as_deref(), Some("Region"));
            }
            other => panic!("expected WouldChange, got {other:?}"),
        }
    }

    #[tokio::test]
    async fn dry_run_makes_no_batch_update_call() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Sheet1", "index": 0}},
        ]))
        .mount(&server)
        .await;
        // No batchUpdate mock is registered at all — a call would 404 and
        // surface as `Failed`, not `WouldChange`.
        let rules = vec![allow_rule("folder-1")];
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: add_chart_verb(),
            dry_run: true,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(
            matches!(outcome.result, EmbeddedObjectResult::WouldChange { .. }),
            "{:?}",
            outcome.result
        );
    }

    /// Runs `verb` against a one-sheet (`Q1`) workbook carrying slicer 4
    /// over `B2:F8` filtering absolute column 5 (F), with a `batchUpdate`
    /// mock that echoes a new slicer id — so a refusal proves the check
    /// ran before the call, not that the call failed. The real run carries
    /// a valid lease so it reaches the plan builder (issue #1945).
    async fn run_slicer_column_verb(
        verb: EmbeddedObjectVerb,
        dry_run: bool,
    ) -> EmbeddedObjectResult {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {
                "properties": {"sheetId": 0, "title": "Q1", "index": 0},
                "slicers": [{
                    "slicerId": 4,
                    "spec": {
                        "title": "Region",
                        "columnIndex": 5,
                        "dataRange": {
                            "sheetId": 0,
                            "startRowIndex": 1, "endRowIndex": 8,
                            "startColumnIndex": 1, "endColumnIndex": 6,
                        },
                    },
                    "position": {"overlayPosition": {"anchorCell": {"sheetId": 0, "rowIndex": 0, "columnIndex": 7}}},
                }],
            },
        ]))
        .mount(&server)
        .await;
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path(
                "/v4/spreadsheets/sheet-1:batchUpdate",
            ))
            .respond_with(
                wiremock::ResponseTemplate::new(200).set_body_json(serde_json::json!({
                    "replies": [{"addSlicer": {"slicer": {"slicerId": 8}}}]
                })),
            )
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let (lease_token, ledger_path) = if dry_run {
            (None, std::path::PathBuf::new())
        } else {
            leased_opts_for("sheet-1")
        };
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb,
            dry_run,
            lease_token,
            ledger_path,
        };
        embedded_object(&drive, &sheets, &opts, &rules).await.result
    }

    fn add_slicer_over(range: &str, column: i64) -> EmbeddedObjectVerb {
        EmbeddedObjectVerb::AddSlicer {
            sheet: Some("Q1".to_string()),
            range: range.to_string(),
            column,
            hide_values: Vec::new(),
            title: None,
            apply_to_pivot_tables: None,
            anchor: "H2".to_string(),
            offset_x: None,
            offset_y: None,
            width: None,
            height: None,
        }
    }

    fn update_slicer_4(range: Option<&str>, column: Option<i64>) -> EmbeddedObjectVerb {
        EmbeddedObjectVerb::UpdateSlicer {
            slicer_id: 4,
            sheet: Some("Q1".to_string()),
            range: range.map(str::to_string),
            column,
            hide_values: Vec::new(),
            clear_criteria: false,
            title: None,
            apply_to_pivot_tables: None,
        }
    }

    #[tokio::test]
    async fn add_slicer_refuses_a_column_outside_the_range_under_both_dry_run_and_a_real_run() {
        // Column 0 is absolute column A, left of B2:F8 — the live API 400s it.
        for dry_run in [true, false] {
            let result = run_slicer_column_verb(add_slicer_over("B2:F8", 0), dry_run).await;
            assert_invalid(&result, "0 (column A) is outside the slicer's range");
            assert_invalid(&result, "1..=5 (B–F)");
        }
    }

    #[tokio::test]
    async fn add_slicer_accepts_an_absolute_column_inside_a_range_not_starting_at_a() {
        // Column 5 is absolute column F — inside B2:F8, though it would be
        // out of bounds read as an offset within the range.
        let preview = run_slicer_column_verb(add_slicer_over("B2:F8", 5), true).await;
        assert!(
            matches!(preview, EmbeddedObjectResult::WouldChange { .. }),
            "{preview:?}"
        );
        let real = run_slicer_column_verb(add_slicer_over("B2:F8", 5), false).await;
        assert!(
            matches!(
                real,
                EmbeddedObjectResult::Changed {
                    object_id: Some(8),
                    ..
                }
            ),
            "{real:?}"
        );
    }

    #[tokio::test]
    async fn update_slicer_refuses_a_column_outside_the_range_under_both_dry_run_and_a_real_run() {
        let cases = [
            // A new column outside the slicer's existing B2:F8 range.
            (
                update_slicer_4(None, Some(0)),
                "0 (column A)",
                "1..=5 (B–F)",
            ),
            // One column past the right edge (G).
            (
                update_slicer_4(None, Some(6)),
                "6 (column G)",
                "1..=5 (B–F)",
            ),
            // A new range the slicer's existing column 5 (F) falls outside.
            (
                update_slicer_4(Some("H1:J5"), None),
                "5 (column F)",
                "7..=9 (H–J)",
            ),
            // Both replaced, still mismatched.
            (
                update_slicer_4(Some("H1:J5"), Some(1)),
                "1 (column B)",
                "7..=9 (H–J)",
            ),
        ];
        for (verb, column, valid) in cases {
            for dry_run in [true, false] {
                let result = run_slicer_column_verb(verb.clone(), dry_run).await;
                assert_invalid(&result, column);
                assert_invalid(&result, valid);
            }
        }
    }

    #[tokio::test]
    async fn update_slicer_accepts_an_absolute_column_inside_a_range_not_starting_at_a() {
        for verb in [
            update_slicer_4(None, Some(5)),
            update_slicer_4(Some("C2:F8"), None),
            update_slicer_4(Some("H1:J5"), Some(9)),
        ] {
            let result = run_slicer_column_verb(verb, true).await;
            assert!(
                matches!(result, EmbeddedObjectResult::WouldChange { .. }),
                "{result:?}"
            );
        }
    }

    #[test]
    fn check_slicer_column_in_range_leaves_an_open_ended_edge_unbounded() {
        let whole_rows = GridRange {
            sheet_id: 0,
            start_row_index: Some(1),
            end_row_index: Some(5),
            start_column_index: None,
            end_column_index: None,
        };
        assert!(check_slicer_column_in_range(0, &whole_rows).is_ok());
        assert!(check_slicer_column_in_range(700, &whole_rows).is_ok());
        let from_c = GridRange {
            start_column_index: Some(2),
            ..whole_rows
        };
        assert!(check_slicer_column_in_range(2, &from_c).is_ok());
        assert_invalid(
            &check_slicer_column_in_range(1, &from_c).unwrap_err(),
            "valid columns are 2 or greater (C onward)",
        );
        assert_invalid(
            &check_slicer_column_in_range(-1, &from_c).unwrap_err(),
            "slicer column -1 is outside",
        );
        let empty = GridRange {
            start_column_index: Some(2),
            end_column_index: Some(2),
            ..whole_rows
        };
        assert_invalid(
            &check_slicer_column_in_range(2, &empty).unwrap_err(),
            "the range spans no columns",
        );
    }

    #[test]
    fn charts_from_workbook_and_slicers_from_workbook_report_every_object() {
        let mut with_slicer = basic_chart_sheet(1, "COLUMN");
        with_slicer.slicers.push(Slicer {
            slicer_id: Some(2),
            spec: Some(SlicerSpec::default()),
            position: Some(EmbeddedObjectPosition {
                overlay_position: Some(OverlayPosition {
                    anchor_cell: GridCoordinate {
                        sheet_id: 0,
                        row_index: 0,
                        column_index: 0,
                    },
                    ..Default::default()
                }),
                ..Default::default()
            }),
        });
        let workbook = workbook_with_sheet(with_slicer);
        assert_eq!(charts_from_workbook(&workbook).len(), 1);
        assert_eq!(slicers_from_workbook(&workbook).len(), 1);
    }

    // ── shared assertion helpers ─────────────────────────────────────────

    /// [`Plan`] deliberately carries no `Debug`, so `Result::unwrap_err` is
    /// unavailable on a plan builder's result; this is the equivalent.
    #[track_caller]
    fn refusal(plan: Result<Plan, EmbeddedObjectResult>) -> EmbeddedObjectResult {
        plan.err().expect("expected the plan builder to refuse")
    }

    /// Asserts a refusal is [`EmbeddedObjectResult::RefusedInvalidRange`]
    /// and that its detail mentions `needle`.
    ///
    /// Written against the rendered `Debug` rather than a `match` so that
    /// no call site needs an arm that can never run.
    #[track_caller]
    fn assert_invalid(result: &EmbeddedObjectResult, needle: &str) {
        let rendered = format!("{result:?}");
        assert!(
            matches!(result, EmbeddedObjectResult::RefusedInvalidRange { .. }),
            "expected RefusedInvalidRange, got {rendered}"
        );
        assert!(rendered.contains(needle), "{rendered}");
    }

    /// A one-sheet workbook with no charts or slicers on it.
    fn plain_workbook(title: &str) -> Spreadsheet {
        workbook_with_sheet(Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: title.to_string(),
                ..Default::default()
            }),
            ..Default::default()
        })
    }

    // ── resolve_anchor ───────────────────────────────────────────────────

    #[test]
    fn resolve_anchor_refuses_an_open_ended_range() {
        let workbook = plain_workbook("Sheet1");
        let err = resolve_anchor(&workbook, Some("Sheet1"), "A:A")
            .expect_err("an open-ended range is not a single cell");
        assert_invalid(&err, "not an open-ended range");
    }

    #[test]
    fn resolve_anchor_refuses_a_multi_cell_range() {
        let workbook = plain_workbook("Sheet1");
        let err = resolve_anchor(&workbook, Some("Sheet1"), "A1:B2")
            .expect_err("a bounded 2x2 range is not a single cell");
        assert_invalid(&err, "not a range");
    }

    #[test]
    fn resolve_anchor_accepts_a_single_cell() {
        let workbook = plain_workbook("Sheet1");
        let cell = resolve_anchor(&workbook, Some("Sheet1"), "E2").unwrap();
        assert_eq!(cell.sheet_id, 0);
        assert_eq!(cell.row_index, 1);
        assert_eq!(cell.column_index, 4);
    }

    // ── build_add_chart ──────────────────────────────────────────────────

    /// Mutates a freshly-built [`add_chart_verb`] through a closure, so the
    /// many one-flag variations below need no destructuring boilerplate.
    fn add_chart_verb_with(tweak: impl FnOnce(&mut EmbeddedObjectVerb)) -> EmbeddedObjectVerb {
        let mut verb = add_chart_verb();
        tweak(&mut verb);
        verb
    }

    fn set_pie(verb: &mut EmbeddedObjectVerb) {
        let EmbeddedObjectVerb::AddChart { chart_type, .. } = verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
        };
        *chart_type = "pie".to_string();
    }

    #[test]
    fn build_add_chart_puts_the_chart_on_its_own_new_sheet() {
        let workbook = plain_workbook("Sheet1");
        let verb = add_chart_verb_with(|verb| {
            let EmbeddedObjectVerb::AddChart {
                anchor, new_sheet, ..
            } = verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
            };
            *anchor = None;
            *new_sheet = true;
        });
        let plan = build_add_chart(&workbook, &verb).unwrap();
        assert_eq!(plan.sheet_id, None, "a new-sheet chart has no host sheet");
        let request = serde_json::to_value(&plan.request).unwrap();
        assert_eq!(request["addChart"]["chart"]["position"]["newSheet"], true);
        assert!(request["addChart"]["chart"]["position"]["overlayPosition"].is_null());
    }

    #[test]
    fn build_add_chart_refuses_neither_anchor_nor_new_sheet() {
        // `validate_verb` rejects this combination first in the real flow;
        // `build_add_chart` keeps its own check so a non-CLI caller reaching
        // the builder directly still cannot produce a position-less chart.
        let workbook = plain_workbook("Sheet1");
        let verb = add_chart_verb_with(|verb| {
            let EmbeddedObjectVerb::AddChart { anchor, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
            };
            *anchor = None;
        });
        let err = refusal(build_add_chart(&workbook, &verb));
        assert_invalid(&err, "either --anchor or --new-sheet is required");
    }

    #[test]
    fn build_add_chart_propagates_an_unresolvable_anchor() {
        // The `?` on `overlay_position` is the only path out of
        // `build_add_chart` that a *position* can refuse on.
        let workbook = plain_workbook("Sheet1");
        let verb = add_chart_verb_with(|verb| {
            let EmbeddedObjectVerb::AddChart { anchor, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
            };
            *anchor = Some("E2:F3".to_string());
        });
        let err = refusal(build_add_chart(&workbook, &verb));
        assert_invalid(&err, "must name a single cell, not a range");
    }

    #[test]
    fn build_add_chart_refuses_pie_hole_on_a_basic_chart() {
        let workbook = plain_workbook("Sheet1");
        let verb = add_chart_verb_with(|verb| {
            let EmbeddedObjectVerb::AddChart { pie_hole, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
            };
            *pie_hole = Some(0.4);
        });
        let err = refusal(build_add_chart(&workbook, &verb));
        assert_invalid(&err, "--pie-hole only applies to a pie chart");
    }

    #[test]
    fn build_add_chart_refuses_every_basic_only_flag_on_a_pie_chart() {
        let workbook = plain_workbook("Sheet1");
        for (tweak, needle) in [
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::AddChart { header_count, .. } = verb else {
                        unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
                    };
                    *header_count = Some(1);
                }) as Box<dyn FnOnce(&mut EmbeddedObjectVerb)>,
                "--header-count only applies",
            ),
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::AddChart { stacked, .. } = verb else {
                        unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
                    };
                    *stacked = Some("stacked".to_string());
                }),
                "--stacked only applies",
            ),
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::AddChart {
                        horizontal_axis_title,
                        ..
                    } = verb
                    else {
                        unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
                    };
                    *horizontal_axis_title = Some("Quarter".to_string());
                }),
                "--horizontal-axis-title/--vertical-axis-title only apply",
            ),
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::AddChart {
                        vertical_axis_title,
                        ..
                    } = verb
                    else {
                        unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
                    };
                    *vertical_axis_title = Some("Revenue".to_string());
                }),
                "--horizontal-axis-title/--vertical-axis-title only apply",
            ),
        ] {
            let verb = add_chart_verb_with(|verb| {
                set_pie(verb);
                tweak(verb);
            });
            let err = refusal(build_add_chart(&workbook, &verb));
            assert_invalid(&err, needle);
        }
    }

    #[test]
    fn build_add_chart_refuses_a_pie_chart_with_more_than_one_series() {
        let workbook = plain_workbook("Sheet1");
        let verb = add_chart_verb_with(|verb| {
            set_pie(verb);
            let EmbeddedObjectVerb::AddChart { series, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
            };
            series.push("C1:C10".to_string());
        });
        let err = refusal(build_add_chart(&workbook, &verb));
        assert_invalid(&err, "a pie chart takes exactly one --series");
    }

    #[test]
    fn build_add_chart_builds_a_full_pie_chart_spec() {
        let workbook = plain_workbook("Sheet1");
        let verb = add_chart_verb_with(|verb| {
            set_pie(verb);
            let EmbeddedObjectVerb::AddChart {
                title,
                subtitle,
                legend,
                pie_hole,
                ..
            } = verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
            };
            *title = Some("Share".to_string());
            *subtitle = Some("by region".to_string());
            *legend = Some("right".to_string());
            *pie_hole = Some(0.4);
        });
        let plan = build_add_chart(&workbook, &verb).unwrap();
        assert_eq!(plan.sheet_id, Some(0));
        assert_eq!(plan.summary, "add pie chart 'Share'");
        assert!(plan.before.is_none());
        assert_eq!(plan.existing_id, None);
        let spec = &serde_json::to_value(&plan.request).unwrap()["addChart"]["chart"]["spec"];
        assert_eq!(spec["title"], "Share");
        assert_eq!(spec["subtitle"], "by region");
        assert!(
            spec["basicChart"].is_null(),
            "a pie chart has no basicChart"
        );
        assert_eq!(spec["pieChart"]["legendPosition"], "RIGHT_LEGEND");
        assert_eq!(spec["pieChart"]["pieHole"], 0.4);
        assert_eq!(
            spec["pieChart"]["domain"]["sourceRange"]["sources"][0]["startColumnIndex"],
            0
        );
        assert_eq!(
            spec["pieChart"]["series"]["sourceRange"]["sources"][0]["startColumnIndex"],
            1
        );
    }

    // ── describe_position ────────────────────────────────────────────────

    #[test]
    fn summarise_chart_reports_no_type_for_a_spec_that_is_neither_basic_nor_pie() {
        // A histogram (or any chart kind this crate doesn't model) still
        // has to list, even though its type can't be named.
        let sheet = Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            charts: vec![EmbeddedChart {
                chart_id: Some(2),
                spec: Some(ChartSpec::default()),
                position: None,
                border: None,
            }],
            ..Default::default()
        };
        let summary = summarise_chart(&sheet, &sheet.charts[0]).unwrap();
        assert_eq!(summary.chart_type, None);
        assert_eq!(summary.object_id, 2);
    }

    #[test]
    fn describe_position_names_an_own_sheet_chart_with_and_without_an_id() {
        let sheet = plain_workbook("Q1").sheets.remove(0);
        let anonymous = EmbeddedObjectPosition {
            new_sheet: Some(true),
            ..Default::default()
        };
        assert_eq!(describe_position(&sheet, Some(&anonymous)), "own sheet");
        let identified = EmbeddedObjectPosition {
            sheet_id: Some(9),
            ..Default::default()
        };
        assert_eq!(
            describe_position(&sheet, Some(&identified)),
            "own sheet (id 9)"
        );
    }

    #[test]
    fn describe_position_falls_back_to_unknown_without_an_overlay() {
        let sheet = plain_workbook("Q1").sheets.remove(0);
        let empty = EmbeddedObjectPosition::default();
        assert_eq!(
            describe_position(&sheet, Some(&empty)),
            "unknown position",
            "a position carrying neither an overlay nor a sheet is unknown"
        );
        assert_eq!(describe_position(&sheet, None), "unknown position");
    }

    #[test]
    fn summarise_chart_reports_pie_for_a_pie_spec() {
        let sheet = pie_chart_sheet(3);
        let summary = summarise_chart(&sheet, &sheet.charts[0]).unwrap();
        assert_eq!(summary.chart_type.as_deref(), Some("PIE"));
        assert_eq!(
            summary.position, "unknown position",
            "pie_chart_sheet's chart carries no position at all"
        );
    }

    // ── merge_chart_spec: title / subtitle / legend ──────────────────────

    /// Mutates a freshly-built [`update_chart_verb`] through a closure,
    /// mirroring [`add_chart_verb_with`].
    fn update_chart_verb_with(
        chart_id: i64,
        tweak: impl FnOnce(&mut EmbeddedObjectVerb),
    ) -> EmbeddedObjectVerb {
        let mut verb = update_chart_verb(chart_id);
        tweak(&mut verb);
        verb
    }

    #[test]
    fn merge_chart_spec_sets_subtitle_and_legend_alongside_the_title() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let verb = update_chart_verb_with(1, |verb| {
            let EmbeddedObjectVerb::UpdateChart {
                subtitle, legend, ..
            } = verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_verb_with's only callers pass an EmbeddedObjectVerb::UpdateChart, so this arm can never run"
            };
            *subtitle = Some("FY25".to_string());
            *legend = Some("top".to_string());
        });
        let (spec, summary) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        assert_eq!(spec.title.as_deref(), Some("New title"));
        assert_eq!(spec.subtitle.as_deref(), Some("FY25"));
        assert_eq!(
            spec.basic_chart.unwrap().legend_position.as_deref(),
            Some("TOP_LEGEND")
        );
        assert_eq!(summary, "update chart 1 (title, subtitle, legend)");
    }

    // ── merge_pie_chart ──────────────────────────────────────────────────

    #[test]
    fn merge_pie_chart_refuses_stacked_and_axis_titles() {
        let workbook = workbook_with_sheet(pie_chart_sheet(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();

        let stacked = update_chart_verb_with(1, |verb| {
            let EmbeddedObjectVerb::UpdateChart { stacked, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_verb_with's only callers pass an EmbeddedObjectVerb::UpdateChart, so this arm can never run"
            };
            *stacked = Some("stacked".to_string());
        });
        assert_invalid(
            &merge_chart_spec(&workbook, existing, &stacked).unwrap_err(),
            "--stacked only applies",
        );

        let axis = update_chart_verb_with(1, |verb| {
            let EmbeddedObjectVerb::UpdateChart {
                horizontal_axis_title,
                ..
            } = verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_verb_with's only callers pass an EmbeddedObjectVerb::UpdateChart, so this arm can never run"
            };
            *horizontal_axis_title = Some("Quarter".to_string());
        });
        assert_invalid(
            &merge_chart_spec(&workbook, existing, &axis).unwrap_err(),
            "--horizontal-axis-title/--vertical-axis-title only apply",
        );
    }

    #[test]
    fn merge_pie_chart_refuses_more_than_one_series() {
        let workbook = workbook_with_sheet(pie_chart_sheet(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let verb = update_chart_verb_with(1, |verb| {
            let EmbeddedObjectVerb::UpdateChart { sheet, series, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_verb_with's only callers pass an EmbeddedObjectVerb::UpdateChart, so this arm can never run"
            };
            *sheet = Some("Q1".to_string());
            *series = vec!["B1:B10".to_string(), "C1:C10".to_string()];
        });
        assert_invalid(
            &merge_chart_spec(&workbook, existing, &verb).unwrap_err(),
            "a pie chart takes exactly one --series",
        );
    }

    #[test]
    fn merge_pie_chart_leaves_domain_and_series_alone_when_neither_is_named() {
        let workbook = workbook_with_sheet(pie_chart_sheet(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let original = existing.pie_chart.clone().unwrap();
        let verb = update_chart_verb_with(1, |verb| {
            let EmbeddedObjectVerb::UpdateChart { pie_hole, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_verb_with's only callers pass an EmbeddedObjectVerb::UpdateChart, so this arm can never run"
            };
            *pie_hole = Some(0.6);
        });
        let (spec, summary) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        let pie = spec.pie_chart.unwrap();
        assert_eq!(pie.domain, original.domain, "domain must survive untouched");
        assert_eq!(pie.series, original.series, "series must survive untouched");
        assert_eq!(pie.pie_hole, Some(0.6));
        assert_eq!(summary, "update chart 1 (title, pie-hole)");
    }

    #[test]
    fn merge_pie_chart_propagates_an_unresolvable_series_range() {
        let workbook = workbook_with_sheet(pie_chart_sheet(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let verb = update_chart_verb_with(1, |verb| {
            let EmbeddedObjectVerb::UpdateChart { sheet, series, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_verb_with's only callers pass an EmbeddedObjectVerb::UpdateChart, so this arm can never run"
            };
            *sheet = Some("Nope".to_string());
            *series = vec!["B1:B10".to_string()];
        });
        let err = merge_chart_spec(&workbook, existing, &verb).unwrap_err();
        assert!(
            matches!(err, EmbeddedObjectResult::RefusedSheetNotFound { .. }),
            "{err:?}"
        );
    }

    #[test]
    fn merge_pie_chart_merges_domain_series_legend_and_pie_hole() {
        let workbook = workbook_with_sheet(pie_chart_sheet(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let verb = update_chart_verb_with(1, |verb| {
            let EmbeddedObjectVerb::UpdateChart {
                title,
                sheet,
                domain,
                series,
                legend,
                pie_hole,
                ..
            } = verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_verb_with's only callers pass an EmbeddedObjectVerb::UpdateChart, so this arm can never run"
            };
            *title = None;
            *sheet = Some("Q1".to_string());
            *domain = Some("C1:C10".to_string());
            *series = vec!["D1:D10".to_string()];
            *legend = Some("left".to_string());
            *pie_hole = Some(0.25);
        });
        let (spec, summary) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        assert!(spec.basic_chart.is_none(), "the merge stays a pie chart");
        let pie = spec.pie_chart.unwrap();
        assert_eq!(
            pie.domain.source_range.sources[0].start_column_index,
            Some(2)
        );
        assert_eq!(
            pie.series.source_range.sources[0].start_column_index,
            Some(3)
        );
        assert_eq!(pie.legend_position.as_deref(), Some("LEFT_LEGEND"));
        assert_eq!(pie.pie_hole, Some(0.25));
        assert_eq!(summary, "update chart 1 (legend, domain, series, pie-hole)");
    }

    // ── merge_basic_chart ────────────────────────────────────────────────

    #[test]
    fn merge_basic_chart_merges_every_basic_flag_at_once() {
        let workbook = workbook_with_sheet(basic_chart_sheet_with_series(1));
        let existing = workbook.sheets[0].charts[0].spec.as_ref().unwrap();
        let verb = update_chart_verb_with(1, |verb| {
            let EmbeddedObjectVerb::UpdateChart {
                title,
                sheet,
                domain,
                series,
                legend,
                stacked,
                header_count,
                horizontal_axis_title,
                vertical_axis_title,
                ..
            } = verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_verb_with's only callers pass an EmbeddedObjectVerb::UpdateChart, so this arm can never run"
            };
            *title = None;
            *sheet = Some("Q1".to_string());
            *domain = Some("A1:A10".to_string());
            *series = vec!["B1:B10".to_string(), "C1:C10".to_string()];
            *legend = Some("bottom".to_string());
            *stacked = Some("percent".to_string());
            *header_count = Some(1);
            *horizontal_axis_title = Some("Quarter".to_string());
            *vertical_axis_title = Some("Revenue".to_string());
        });
        let (spec, summary) = merge_chart_spec(&workbook, existing, &verb).unwrap();
        assert!(spec.pie_chart.is_none(), "the merge stays a basic chart");
        let basic = spec.basic_chart.unwrap();
        assert_eq!(basic.domains.len(), 1);
        assert_eq!(
            basic.series.len(),
            2,
            "--series replaces the list wholesale"
        );
        assert_eq!(basic.legend_position.as_deref(), Some("BOTTOM_LEGEND"));
        assert_eq!(basic.stacked_type.as_deref(), Some("PERCENT_STACKED"));
        assert_eq!(basic.header_count, Some(1));
        assert_eq!(basic.axis.len(), 2);
        assert_eq!(basic.axis[0].title.as_deref(), Some("Quarter"));
        assert_eq!(basic.axis[1].position, "LEFT_AXIS");
        assert_eq!(basic.axis[1].title.as_deref(), Some("Revenue"));
        assert_eq!(
            summary,
            "update chart 1 (legend, domain, series, stacked, header-count, \
             horizontal-axis-title, vertical-axis-title)"
        );
    }

    // ── build_update_chart / build_delete_chart ──────────────────────────

    #[test]
    fn build_update_chart_refuses_a_chart_with_no_spec() {
        let sheet = Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            charts: vec![EmbeddedChart {
                chart_id: Some(1),
                spec: None,
                position: None,
                border: None,
            }],
            ..Default::default()
        };
        let workbook = workbook_with_sheet(sheet);
        let err = refusal(build_update_chart(&workbook, &update_chart_verb(1), 1));
        let rendered = format!("{err:?}");
        assert!(
            matches!(
                err,
                EmbeddedObjectResult::RefusedUnsupportedChart { chart_id: 1, .. }
            ),
            "{rendered}"
        );
        assert!(rendered.contains("no spec to merge onto"), "{rendered}");
    }

    #[test]
    fn build_update_chart_carries_the_pre_change_object_and_the_existing_id() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let plan = build_update_chart(&workbook, &update_chart_verb(1), 1).unwrap();
        assert_eq!(plan.existing_id, Some(1));
        assert_eq!(plan.sheet_id, Some(0));
        let before = plan
            .before
            .expect("an update previews the pre-change state");
        assert_eq!(before.title.as_deref(), Some("Old title"));
        assert_eq!(before.position, "Q1!E2");
        let request = serde_json::to_value(&plan.request).unwrap();
        assert_eq!(request["updateChartSpec"]["chartId"], 1);
        assert_eq!(request["updateChartSpec"]["spec"]["title"], "New title");
    }

    #[test]
    fn build_delete_chart_refuses_an_unknown_id() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        assert!(matches!(
            refusal(build_delete_chart(&workbook, 99)),
            EmbeddedObjectResult::RefusedObjectNotFound { object_id: 99 }
        ));
    }

    /// A workbook whose one sheet carries both a chart (id 1) and a slicer
    /// (id 4) — every `*_refuses_a_*_id` test below resolves the *other*
    /// kind's id against a chart-only or slicer-only verb.
    fn mixed_object_workbook() -> Spreadsheet {
        let mut sheet = basic_chart_sheet(1, "COLUMN");
        sheet.slicers = slicer_workbook().sheets.remove(0).slicers;
        workbook_with_sheet(sheet)
    }

    #[test]
    fn build_update_chart_refuses_a_slicer_id() {
        let workbook = mixed_object_workbook();
        assert!(matches!(
            refusal(build_update_chart(&workbook, &update_chart_verb(4), 4)),
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 4,
                expected,
                found,
            } if expected == "chart" && found == "slicer"
        ));
    }

    #[test]
    fn build_delete_chart_refuses_a_slicer_id() {
        let workbook = mixed_object_workbook();
        assert!(matches!(
            refusal(build_delete_chart(&workbook, 4)),
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 4,
                expected,
                found,
            } if expected == "chart" && found == "slicer"
        ));
    }

    #[test]
    fn build_update_slicer_refuses_a_chart_id() {
        let workbook = mixed_object_workbook();
        let verb = update_slicer_verb(|verb| {
            let EmbeddedObjectVerb::UpdateSlicer { title, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
            };
            *title = Some("Territory".to_string());
        });
        assert!(matches!(
            refusal(build_update_slicer(&workbook, &verb, 1)),
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 1,
                expected,
                found,
            } if expected == "slicer" && found == "chart"
        ));
    }

    #[test]
    fn build_delete_slicer_refuses_a_chart_id() {
        let workbook = mixed_object_workbook();
        assert!(matches!(
            refusal(build_delete_slicer(&workbook, 1)),
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 1,
                expected,
                found,
            } if expected == "slicer" && found == "chart"
        ));
    }

    // ── build_add_slicer / build_update_slicer / build_delete_slicer ─────

    fn add_slicer_verb() -> EmbeddedObjectVerb {
        EmbeddedObjectVerb::AddSlicer {
            sheet: Some("Q1".to_string()),
            range: "A1:D10".to_string(),
            column: 1,
            hide_values: Vec::new(),
            title: Some("Status".to_string()),
            apply_to_pivot_tables: None,
            anchor: "F2".to_string(),
            offset_x: None,
            offset_y: None,
            width: None,
            height: None,
        }
    }

    #[test]
    fn build_add_slicer_omits_filter_criteria_when_no_values_are_hidden() {
        let workbook = plain_workbook("Q1");
        let plan = build_add_slicer(&workbook, &add_slicer_verb()).unwrap();
        assert_eq!(plan.summary, "add slicer 'Status'");
        assert_eq!(plan.sheet_id, Some(0));
        let spec = &serde_json::to_value(&plan.request).unwrap()["addSlicer"]["slicer"]["spec"];
        assert!(
            spec["filterCriteria"].is_null(),
            "no --hide-values means no filterCriteria at all: {spec}"
        );
        assert_eq!(spec["columnIndex"], 1);
        assert_eq!(spec["title"], "Status");
    }

    #[test]
    fn build_add_slicer_propagates_an_unresolvable_anchor() {
        let workbook = plain_workbook("Q1");
        let EmbeddedObjectVerb::AddSlicer {
            sheet,
            range,
            column,
            hide_values,
            title,
            apply_to_pivot_tables,
            offset_x,
            offset_y,
            width,
            height,
            ..
        } = add_slicer_verb()
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="add_slicer_verb always returns an EmbeddedObjectVerb::AddSlicer, so this arm can never run"
        };
        let verb = EmbeddedObjectVerb::AddSlicer {
            sheet,
            range,
            column,
            hide_values,
            title,
            apply_to_pivot_tables,
            anchor: "F2:G3".to_string(),
            offset_x,
            offset_y,
            width,
            height,
        };
        let err = refusal(build_add_slicer(&workbook, &verb));
        assert_invalid(&err, "must name a single cell, not a range");
    }

    #[test]
    fn build_add_slicer_carries_hidden_values_when_given() {
        let workbook = plain_workbook("Q1");
        let EmbeddedObjectVerb::AddSlicer {
            sheet,
            range,
            column,
            title,
            anchor,
            ..
        } = add_slicer_verb()
        else {
            unreachable!() // omni-dev: coverage ignore-line reason="add_slicer_verb always returns an EmbeddedObjectVerb::AddSlicer, so this arm can never run"
        };
        let verb = EmbeddedObjectVerb::AddSlicer {
            sheet,
            range,
            column,
            hide_values: vec!["Closed".to_string()],
            title,
            apply_to_pivot_tables: Some(true),
            anchor,
            offset_x: Some(3),
            offset_y: Some(4),
            width: Some(300),
            height: Some(200),
        };
        let plan = build_add_slicer(&workbook, &verb).unwrap();
        let slicer = &serde_json::to_value(&plan.request).unwrap()["addSlicer"]["slicer"];
        assert_eq!(
            slicer["spec"]["filterCriteria"]["hiddenValues"][0],
            "Closed"
        );
        assert_eq!(slicer["spec"]["applyToPivotTables"], true);
        let overlay = &slicer["position"]["overlayPosition"];
        assert_eq!(overlay["offsetXPixels"], 3);
        assert_eq!(overlay["offsetYPixels"], 4);
        assert_eq!(overlay["widthPixels"], 300);
        assert_eq!(overlay["heightPixels"], 200);
    }

    fn slicer_workbook() -> Spreadsheet {
        workbook_with_sheet(Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            slicers: vec![Slicer {
                slicer_id: Some(4),
                spec: Some(SlicerSpec {
                    title: Some("Region".to_string()),
                    // A real slicer always carries both, per the API; see
                    // build_update_slicer_refuses_when_an_existing_spec_has_no_range_or_column
                    // for the legacy/corrupted-state case this deliberately excludes.
                    data_range: Some(GridRange {
                        sheet_id: 0,
                        start_row_index: Some(0),
                        end_row_index: Some(10),
                        start_column_index: Some(0),
                        end_column_index: Some(4),
                    }),
                    column_index: Some(1),
                    ..Default::default()
                }),
                position: Some(EmbeddedObjectPosition {
                    overlay_position: Some(OverlayPosition {
                        anchor_cell: GridCoordinate {
                            sheet_id: 0,
                            row_index: 0,
                            column_index: 5,
                        },
                        ..Default::default()
                    }),
                    ..Default::default()
                }),
            }],
            ..Default::default()
        })
    }

    /// A boxed one-shot verb mutation, for the table-driven flag tests.
    type VerbTweak = Box<dyn FnOnce(&mut EmbeddedObjectVerb)>;

    fn update_slicer_verb(tweak: impl FnOnce(&mut EmbeddedObjectVerb)) -> EmbeddedObjectVerb {
        let mut verb = EmbeddedObjectVerb::UpdateSlicer {
            slicer_id: 4,
            sheet: Some("Q1".to_string()),
            range: None,
            column: None,
            hide_values: Vec::new(),
            clear_criteria: false,
            title: None,
            apply_to_pivot_tables: None,
        };
        tweak(&mut verb);
        verb
    }

    #[test]
    fn build_update_slicer_names_exactly_the_field_each_flag_changes() {
        let workbook = slicer_workbook();
        let cases: Vec<(VerbTweak, &str, &str)> = vec![
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::UpdateSlicer { range, .. } = verb else {
                        unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
                    };
                    *range = Some("A1:D20".to_string());
                }),
                "dataRange",
                "range",
            ),
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::UpdateSlicer { clear_criteria, .. } = verb else {
                        unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
                    };
                    *clear_criteria = true;
                }),
                "filterCriteria",
                "clear criteria",
            ),
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::UpdateSlicer { hide_values, .. } = verb else {
                        unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
                    };
                    *hide_values = vec!["Closed".to_string()];
                }),
                "filterCriteria",
                "criteria",
            ),
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::UpdateSlicer { column, .. } = verb else {
                        unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
                    };
                    *column = Some(2);
                }),
                "columnIndex",
                "column",
            ),
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::UpdateSlicer { title, .. } = verb else {
                        unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
                    };
                    *title = Some("Territory".to_string());
                }),
                "title",
                "title",
            ),
            (
                Box::new(|verb: &mut EmbeddedObjectVerb| {
                    let EmbeddedObjectVerb::UpdateSlicer {
                        apply_to_pivot_tables,
                        ..
                    } = verb
                    else {
                        unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
                    };
                    *apply_to_pivot_tables = Some(true);
                }),
                "applyToPivotTables",
                "apply-to-pivot-tables",
            ),
        ];
        for (tweak, field, changed) in cases {
            let verb = update_slicer_verb(tweak);
            let plan = build_update_slicer(&workbook, &verb, 4).unwrap();
            assert_eq!(plan.existing_id, Some(4));
            assert_eq!(plan.sheet_id, Some(0));
            let request = serde_json::to_value(&plan.request).unwrap();
            assert_eq!(
                request["updateSlicerSpec"]["fields"], field,
                "one flag must name exactly one field"
            );
            assert_eq!(plan.summary, format!("update slicer 4 ({changed})"));
        }
    }

    #[test]
    fn build_update_slicer_refuses_when_an_existing_spec_has_no_range_or_column() {
        // A bare spec (no data_range, no column_index) predates this
        // validation, or was created outside omni-dev — see #1945's review.
        let workbook = workbook_with_sheet(Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            slicers: vec![Slicer {
                slicer_id: Some(4),
                spec: Some(SlicerSpec {
                    title: Some("Region".to_string()),
                    ..Default::default()
                }),
                position: Some(EmbeddedObjectPosition {
                    overlay_position: Some(OverlayPosition {
                        anchor_cell: GridCoordinate {
                            sheet_id: 0,
                            row_index: 0,
                            column_index: 5,
                        },
                        ..Default::default()
                    }),
                    ..Default::default()
                }),
            }],
            ..Default::default()
        });

        let verb = update_slicer_verb(|verb| {
            let EmbeddedObjectVerb::UpdateSlicer { range, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
            };
            *range = Some("A1:D20".to_string());
        });
        let err = refusal(build_update_slicer(&workbook, &verb, 4));
        assert_invalid(&err, "has no column on record");

        let verb = update_slicer_verb(|verb| {
            let EmbeddedObjectVerb::UpdateSlicer { column, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
            };
            *column = Some(2);
        });
        let err = refusal(build_update_slicer(&workbook, &verb, 4));
        assert_invalid(&err, "has no range on record");
    }

    #[test]
    fn build_update_slicer_treats_a_stored_column_index_of_none_as_column_zero() {
        // Issue #1929, confirmed live: a slicer filtering column 0 (column
        // A) reads back with `columnIndex` entirely omitted — proto3
        // dropping the zero value — not with an explicit `0`. Before the
        // fix, a `--range`-only `update-slicer` against such a slicer
        // refused with "has no column on record" even though the slicer
        // plainly has one. `data_range` being present (a real slicer
        // always sends `dataRange`) is what tells this apart from the
        // genuinely bare/degenerate spec the sibling refusal test covers.
        let workbook = workbook_with_sheet(Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            slicers: vec![Slicer {
                slicer_id: Some(4),
                spec: Some(SlicerSpec {
                    title: Some("Region".to_string()),
                    data_range: Some(GridRange {
                        sheet_id: 0,
                        start_row_index: Some(0),
                        end_row_index: Some(10),
                        start_column_index: Some(0),
                        end_column_index: Some(4),
                    }),
                    column_index: None, // column 0, proto3-omitted
                    ..Default::default()
                }),
                position: Some(EmbeddedObjectPosition {
                    overlay_position: Some(OverlayPosition {
                        anchor_cell: GridCoordinate {
                            sheet_id: 0,
                            row_index: 0,
                            column_index: 5,
                        },
                        ..Default::default()
                    }),
                    ..Default::default()
                }),
            }],
            ..Default::default()
        });

        let verb = update_slicer_verb(|verb| {
            let EmbeddedObjectVerb::UpdateSlicer { range, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
            };
            *range = Some("A1:D20".to_string());
        });
        let plan = build_update_slicer(&workbook, &verb, 4).unwrap();
        let request = serde_json::to_value(&plan.request).unwrap();
        assert_eq!(request["updateSlicerSpec"]["fields"], "dataRange");
    }

    #[test]
    fn build_update_slicer_refuses_an_unknown_id() {
        let workbook = slicer_workbook();
        let verb = update_slicer_verb(|verb| {
            let EmbeddedObjectVerb::UpdateSlicer { title, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_slicer_verb always builds an EmbeddedObjectVerb::UpdateSlicer, so this arm can never run"
            };
            *title = Some("Territory".to_string());
        });
        assert!(matches!(
            refusal(build_update_slicer(&workbook, &verb, 99)),
            EmbeddedObjectResult::RefusedObjectNotFound { object_id: 99 }
        ));
    }

    #[test]
    fn build_delete_slicer_refuses_an_unknown_id() {
        let workbook = slicer_workbook();
        assert!(matches!(
            refusal(build_delete_slicer(&workbook, 99)),
            EmbeddedObjectResult::RefusedObjectNotFound { object_id: 99 }
        ));
    }

    // ── build_move_chart / build_move_slicer ─────────────────────────────

    fn move_chart_verb(tweak: impl FnOnce(&mut EmbeddedObjectVerb)) -> EmbeddedObjectVerb {
        let mut verb = EmbeddedObjectVerb::MoveChart {
            chart_id: 1,
            sheet: Some("Q1".to_string()),
            anchor: None,
            offset_x: None,
            offset_y: None,
            width: None,
            height: None,
            new_sheet: false,
        };
        tweak(&mut verb);
        verb
    }

    fn move_slicer_verb(tweak: impl FnOnce(&mut EmbeddedObjectVerb)) -> EmbeddedObjectVerb {
        let mut verb = EmbeddedObjectVerb::MoveSlicer {
            slicer_id: 4,
            sheet: Some("Q1".to_string()),
            anchor: None,
            offset_x: None,
            offset_y: None,
            width: None,
            height: None,
        };
        tweak(&mut verb);
        verb
    }

    fn set_move_chart_anchor(verb: &mut EmbeddedObjectVerb, value: &str) {
        let EmbeddedObjectVerb::MoveChart { anchor, .. } = verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="callers always pass a verb built by move_chart_verb, which is always MoveChart"
        };
        *anchor = Some(value.to_string());
    }

    fn set_move_slicer_anchor(verb: &mut EmbeddedObjectVerb, value: &str) {
        let EmbeddedObjectVerb::MoveSlicer { anchor, .. } = verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="callers always pass a verb built by move_slicer_verb, which is always MoveSlicer"
        };
        *anchor = Some(value.to_string());
    }

    #[test]
    fn move_chart_sends_update_embedded_object_position() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = move_chart_verb(|verb| set_move_chart_anchor(verb, "F2"));
        let plan = build_move_chart(&workbook, &verb, 1).unwrap();
        let request = serde_json::to_value(&plan.request).unwrap();
        let overlay = &request["updateEmbeddedObjectPosition"]["newPosition"]["overlayPosition"];
        assert_eq!(overlay["anchorCell"]["rowIndex"], 1);
        assert_eq!(overlay["anchorCell"]["columnIndex"], 5);
        assert_eq!(
            request["updateEmbeddedObjectPosition"]["fields"],
            "anchorCell"
        );
        assert_eq!(plan.sheet_id, Some(0));
        assert_eq!(plan.summary, "move chart 1 to Q1!F2");
    }

    #[test]
    fn position_field_mask_is_relative_to_overlay_position() {
        // THE regression guard: `updateEmbeddedObjectPosition`'s own rule is
        // that the mask is rooted at `newPosition.overlayPosition`, not at
        // `newPosition` — so a move sends `"anchorCell"`, never
        // `"overlayPosition.anchorCell"`. Invisible unless asserted.
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = move_chart_verb(|verb| set_move_chart_anchor(verb, "F2"));
        let plan = build_move_chart(&workbook, &verb, 1).unwrap();
        let request = serde_json::to_value(&plan.request).unwrap();
        let fields = request["updateEmbeddedObjectPosition"]["fields"]
            .as_str()
            .unwrap();
        assert_eq!(fields, "anchorCell");
        assert_ne!(fields, "overlayPosition.anchorCell");
    }

    #[test]
    fn move_chart_resize_only_carries_the_existing_anchor_forward() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = move_chart_verb(|verb| {
            let EmbeddedObjectVerb::MoveChart { width, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_chart_verb always builds an EmbeddedObjectVerb::MoveChart, so this arm can never run"
            };
            *width = Some(480);
        });
        let plan = build_move_chart(&workbook, &verb, 1).unwrap();
        let request = serde_json::to_value(&plan.request).unwrap();
        let overlay = &request["updateEmbeddedObjectPosition"]["newPosition"]["overlayPosition"];
        // `basic_chart_sheet(1, ..)` anchors the chart at row 1, column 4
        // (E2) — carried forward unchanged since `--anchor` wasn't given.
        assert_eq!(overlay["anchorCell"]["rowIndex"], 1);
        assert_eq!(overlay["anchorCell"]["columnIndex"], 4);
        assert_eq!(overlay["widthPixels"], 480);
        assert_eq!(
            request["updateEmbeddedObjectPosition"]["fields"],
            "widthPixels"
        );
        assert_eq!(plan.summary, "resize chart 1 (width 480)");
    }

    #[test]
    fn move_chart_masks_exactly_the_flags_given() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = move_chart_verb(|verb| {
            set_move_chart_anchor(verb, "F2");
            let EmbeddedObjectVerb::MoveChart {
                offset_x,
                offset_y,
                width,
                height,
                ..
            } = verb
            else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_chart_verb always builds an EmbeddedObjectVerb::MoveChart, so this arm can never run"
            };
            *offset_x = Some(3);
            *offset_y = Some(4);
            *width = Some(480);
            *height = Some(300);
        });
        let plan = build_move_chart(&workbook, &verb, 1).unwrap();
        let request = serde_json::to_value(&plan.request).unwrap();
        assert_eq!(
            request["updateEmbeddedObjectPosition"]["fields"],
            "anchorCell,offsetXPixels,offsetYPixels,widthPixels,heightPixels"
        );
        assert_eq!(
            plan.summary,
            "move chart 1 to Q1!F2 (offset-x 3, offset-y 4, width 480, height 300)"
        );
    }

    #[test]
    fn move_chart_new_sheet_sends_new_sheet_true_and_no_mask() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = move_chart_verb(|verb| {
            let EmbeddedObjectVerb::MoveChart { new_sheet, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_chart_verb always builds an EmbeddedObjectVerb::MoveChart, so this arm can never run"
            };
            *new_sheet = true;
        });
        let plan = build_move_chart(&workbook, &verb, 1).unwrap();
        let request = serde_json::to_value(&plan.request).unwrap();
        assert_eq!(
            request["updateEmbeddedObjectPosition"]["newPosition"]["newSheet"],
            true
        );
        assert!(
            request["updateEmbeddedObjectPosition"]
                .get("fields")
                .is_none(),
            "a new-sheet move sends no fields key at all: {request}"
        );
        assert_eq!(plan.sheet_id, None);
        assert_eq!(plan.summary, "move chart 1 to a new sheet");
    }

    #[test]
    fn move_chart_on_its_own_sheet_without_an_anchor_is_refused() {
        let sheet = Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(0),
                title: "Q1".to_string(),
                ..Default::default()
            }),
            charts: vec![EmbeddedChart {
                chart_id: Some(1),
                spec: Some(ChartSpec::default()),
                position: Some(EmbeddedObjectPosition {
                    sheet_id: Some(9),
                    new_sheet: Some(true),
                    ..Default::default()
                }),
                border: None,
            }],
            ..Default::default()
        };
        let workbook = workbook_with_sheet(sheet);
        let verb = move_chart_verb(|verb| {
            let EmbeddedObjectVerb::MoveChart { width, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_chart_verb always builds an EmbeddedObjectVerb::MoveChart, so this arm can never run"
            };
            *width = Some(480);
        });
        let err = refusal(build_move_chart(&workbook, &verb, 1));
        assert_invalid(&err, "has no current overlay position");
    }

    #[test]
    fn move_chart_refuses_an_empty_flag_set() {
        // Clears the fixture's default `sheet` too, so this exercises
        // `nothing_to_change` in isolation rather than tripping the
        // `--sheet`-without-`--anchor` check first (see
        // `move_chart_refuses_a_sheet_flag_with_no_anchor` for that case).
        let verb = move_chart_verb(|verb| {
            let EmbeddedObjectVerb::MoveChart { sheet, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_chart_verb always builds an EmbeddedObjectVerb::MoveChart, so this arm can never run"
            };
            *sheet = None;
        });
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("nothing to change"), "{err}");
    }

    #[test]
    fn move_slicer_refuses_an_empty_flag_set() {
        // Clears the fixture's default `sheet` too, so this exercises
        // `nothing_to_change` in isolation rather than tripping the
        // `--sheet`-without-`--anchor` check first.
        let verb = move_slicer_verb(|verb| {
            let EmbeddedObjectVerb::MoveSlicer { sheet, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_slicer_verb always builds an EmbeddedObjectVerb::MoveSlicer, so this arm can never run"
            };
            *sheet = None;
        });
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("nothing to change"), "{err}");
    }

    #[test]
    fn move_chart_refuses_a_sheet_only_move() {
        // The reordering fix (issue #1837 review): a `--sheet`-only call
        // must report `--sheet has no effect without --anchor`, not fall
        // through to the generic `nothing to change` error the old
        // unordered checks produced for this exact input.
        let verb = move_chart_verb(|_| {});
        let err = validate_verb(&verb).unwrap_err();
        assert!(
            err.contains("--sheet has no effect without --anchor"),
            "{err}"
        );
    }

    #[test]
    fn move_slicer_refuses_a_sheet_only_move() {
        let verb = move_slicer_verb(|_| {});
        let err = validate_verb(&verb).unwrap_err();
        assert!(
            err.contains("--sheet has no effect without --anchor"),
            "{err}"
        );
    }

    #[test]
    fn move_chart_refuses_a_sheet_flag_with_no_anchor() {
        // `--sheet` only supplies the prefix `--anchor` doesn't carry
        // itself; without `--anchor` it would otherwise be silently
        // ignored (issue #1837 review).
        let verb = move_chart_verb(|verb| {
            let EmbeddedObjectVerb::MoveChart { width, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_chart_verb always builds an EmbeddedObjectVerb::MoveChart, so this arm can never run"
            };
            *width = Some(480);
        });
        let err = validate_verb(&verb).unwrap_err();
        assert!(
            err.contains("--sheet has no effect without --anchor"),
            "{err}"
        );
    }

    #[test]
    fn move_slicer_refuses_a_sheet_flag_with_no_anchor() {
        let verb = move_slicer_verb(|verb| {
            let EmbeddedObjectVerb::MoveSlicer { width, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_slicer_verb always builds an EmbeddedObjectVerb::MoveSlicer, so this arm can never run"
            };
            *width = Some(480);
        });
        let err = validate_verb(&verb).unwrap_err();
        assert!(
            err.contains("--sheet has no effect without --anchor"),
            "{err}"
        );
    }

    #[test]
    fn move_chart_refuses_new_sheet_combined_with_anchor() {
        let verb = move_chart_verb(|verb| {
            set_move_chart_anchor(verb, "F2");
            let EmbeddedObjectVerb::MoveChart { new_sheet, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_chart_verb always builds an EmbeddedObjectVerb::MoveChart, so this arm can never run"
            };
            *new_sheet = true;
        });
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("--new-sheet cannot be combined"), "{err}");
    }

    #[test]
    fn move_chart_refuses_an_anchor_that_names_a_range() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = move_chart_verb(|verb| set_move_chart_anchor(verb, "F2:G3"));
        let err = refusal(build_move_chart(&workbook, &verb, 1));
        assert_invalid(&err, "not a range");
    }

    fn two_sheet_slicer_workbook() -> Spreadsheet {
        let mut workbook = slicer_workbook();
        workbook.sheets.push(Sheet {
            properties: Some(crate::drive::sheets::types::SheetProperties {
                sheet_id: Some(1),
                title: "Q2".to_string(),
                ..Default::default()
            }),
            ..Default::default()
        });
        workbook
    }

    #[test]
    fn move_slicer_across_sheets_uses_the_destination_anchor_sheet_id() {
        let workbook = two_sheet_slicer_workbook();
        let verb = move_slicer_verb(|verb| {
            let EmbeddedObjectVerb::MoveSlicer { sheet, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="move_slicer_verb always builds an EmbeddedObjectVerb::MoveSlicer, so this arm can never run"
            };
            *sheet = Some("Q2".to_string());
            set_move_slicer_anchor(verb, "B2");
        });
        let plan = build_move_slicer(&workbook, &verb, 4).unwrap();
        assert_eq!(plan.sheet_id, Some(1));
        assert_eq!(plan.summary, "move slicer 4 to Q2!B2");
    }

    #[test]
    fn move_slicer_refuses_a_chart_id() {
        let workbook = mixed_object_workbook();
        let verb = move_slicer_verb(|verb| set_move_slicer_anchor(verb, "F2"));
        assert!(matches!(
            refusal(build_move_slicer(&workbook, &verb, 1)),
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 1,
                expected,
                found,
            } if expected == "slicer" && found == "chart"
        ));
    }

    #[test]
    fn move_chart_refuses_a_slicer_id() {
        let workbook = mixed_object_workbook();
        let verb = move_chart_verb(|verb| set_move_chart_anchor(verb, "F2"));
        assert!(matches!(
            refusal(build_move_chart(&workbook, &verb, 4)),
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 4,
                expected,
                found,
            } if expected == "chart" && found == "slicer"
        ));
    }

    #[test]
    fn move_chart_refuses_an_unknown_object_id() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = move_chart_verb(|verb| set_move_chart_anchor(verb, "F2"));
        assert!(matches!(
            refusal(build_move_chart(&workbook, &verb, 99)),
            EmbeddedObjectResult::RefusedObjectNotFound { object_id: 99 }
        ));
    }

    // ── build_update_chart_border ────────────────────────────────────────

    fn update_chart_border_verb(tweak: impl FnOnce(&mut EmbeddedObjectVerb)) -> EmbeddedObjectVerb {
        let mut verb = EmbeddedObjectVerb::UpdateChartBorder {
            chart_id: 1,
            color: Some("#4A86E8".to_string()),
            clear: false,
        };
        tweak(&mut verb);
        verb
    }

    #[test]
    fn update_chart_border_sets_color_style() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = update_chart_border_verb(|_| {});
        let plan = build_update_chart_border(&workbook, &verb, 1).unwrap();
        let request = serde_json::to_value(&plan.request).unwrap();
        let body = &request["updateEmbeddedObjectBorder"];
        assert_eq!(body["fields"], "colorStyle");
        let rgb = &body["border"]["colorStyle"]["rgbColor"];
        let red = rgb["red"].as_f64().unwrap();
        assert!((red - f64::from(0x4Au8) / 255.0).abs() < 1e-6, "{rgb}");
        assert_eq!(plan.summary, "set chart 1 border to #4A86E8");
    }

    #[test]
    fn update_chart_border_clear_sends_an_empty_border() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = update_chart_border_verb(|verb| {
            let EmbeddedObjectVerb::UpdateChartBorder { color, clear, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_border_verb always builds an EmbeddedObjectVerb::UpdateChartBorder, so this arm can never run"
            };
            *color = None;
            *clear = true;
        });
        let plan = build_update_chart_border(&workbook, &verb, 1).unwrap();
        let request = serde_json::to_value(&plan.request).unwrap();
        let body = &request["updateEmbeddedObjectBorder"];
        assert_eq!(body["fields"], "colorStyle");
        assert_eq!(body["border"], serde_json::json!({}));
        assert_eq!(plan.summary, "clear chart 1 border");
    }

    #[test]
    fn update_chart_border_refuses_a_bad_hex() {
        let workbook = workbook_with_sheet(basic_chart_sheet(1, "COLUMN"));
        let verb = update_chart_border_verb(|verb| {
            let EmbeddedObjectVerb::UpdateChartBorder { color, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_border_verb always builds an EmbeddedObjectVerb::UpdateChartBorder, so this arm can never run"
            };
            *color = Some("not-a-color".to_string());
        });
        let err = refusal(build_update_chart_border(&workbook, &verb, 1));
        assert_invalid(&err, "is not a color");
    }

    #[test]
    fn update_chart_border_refuses_an_empty_flag_set() {
        let verb = update_chart_border_verb(|verb| {
            let EmbeddedObjectVerb::UpdateChartBorder { color, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_border_verb always builds an EmbeddedObjectVerb::UpdateChartBorder, so this arm can never run"
            };
            *color = None;
        });
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("nothing to change"), "{err}");
    }

    #[test]
    fn update_chart_border_refuses_color_and_clear_together() {
        let verb = update_chart_border_verb(|verb| {
            let EmbeddedObjectVerb::UpdateChartBorder { clear, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="update_chart_border_verb always builds an EmbeddedObjectVerb::UpdateChartBorder, so this arm can never run"
            };
            *clear = true;
        });
        let err = validate_verb(&verb).unwrap_err();
        assert!(err.contains("mutually exclusive"), "{err}");
    }

    #[test]
    fn update_chart_border_refuses_a_slicer_id() {
        let workbook = mixed_object_workbook();
        let verb = update_chart_border_verb(|_| {});
        assert!(matches!(
            refusal(build_update_chart_border(&workbook, &verb, 4)),
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 4,
                expected,
                found,
            } if expected == "chart" && found == "slicer"
        ));
    }

    #[tokio::test]
    async fn move_chart_dry_run_reports_the_object_before_the_move() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {
                "properties": {"sheetId": 0, "title": "Q1", "index": 0},
                "charts": [{
                    "chartId": 5,
                    "spec": {"title": "Sales", "pieChart": {
                        "domain": {"sourceRange": {"sources": [{"sheetId": 0}]}},
                        "series": {"sourceRange": {"sources": [{"sheetId": 0}]}},
                    }},
                    "position": {"overlayPosition": {"anchorCell": {"sheetId": 0, "rowIndex": 1, "columnIndex": 2}}},
                }],
            },
        ]))
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::MoveChart {
                chart_id: 5,
                sheet: Some("Q1".to_string()),
                anchor: Some("F2".to_string()),
                offset_x: None,
                offset_y: None,
                width: None,
                height: None,
                new_sheet: false,
            },
            dry_run: true,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        match outcome.result {
            EmbeddedObjectResult::WouldChange { object, summary } => {
                let object = object.expect("move-chart previews the object before the move");
                assert_eq!(object.object_id, 5);
                assert_eq!(object.title.as_deref(), Some("Sales"));
                assert_eq!(object.position, "Q1!C2", "previews the position pre-move");
                assert_eq!(summary, "move chart 5 to Q1!F2");
            }
            other => panic!("expected WouldChange, got {other:?}"),
        }
    }

    // ── describe / describe_lines ────────────────────────────────────────

    fn outcome_with(
        verb: EmbeddedObjectVerb,
        file_name: Option<&str>,
        result: EmbeddedObjectResult,
    ) -> EmbeddedObjectOutcome {
        EmbeddedObjectOutcome {
            spreadsheet_id: "sheet-1".to_string(),
            file_name: file_name.map(str::to_string),
            resolved_folder_id: None,
            sheet_id: None,
            verb,
            result,
        }
    }

    fn sample_object() -> EmbeddedObjectSummary {
        EmbeddedObjectSummary {
            object_id: 5,
            kind: "chart".to_string(),
            chart_type: Some("PIE".to_string()),
            title: Some("Sales".to_string()),
            position: "Q1!C2".to_string(),
            border: None,
        }
    }

    #[test]
    fn describe_lines_renders_would_change_with_and_without_an_object() {
        let bare = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::WouldChange {
                summary: "add column chart".to_string(),
                object: None,
            },
        );
        assert_eq!(
            describe_lines(&bare),
            vec!["Would add column chart in 'Budget'"]
        );

        let previewed = outcome_with(
            EmbeddedObjectVerb::DeleteChart { chart_id: 5 },
            Some("Budget"),
            EmbeddedObjectResult::WouldChange {
                summary: "delete chart 5".to_string(),
                object: Some(Box::new(sample_object())),
            },
        );
        let lines = describe_lines(&previewed);
        assert_eq!(lines.len(), 2);
        assert_eq!(lines[1], "  id 5: chart (PIE) 'Sales', anchored Q1!C2");
    }

    #[test]
    fn describe_lines_falls_back_to_the_spreadsheet_id_without_a_file_name() {
        let out = outcome_with(
            add_chart_verb(),
            None,
            EmbeddedObjectResult::RefusedNotASpreadsheet {
                mime_type: "application/vnd.google-apps.document".to_string(),
            },
        );
        let text = describe(&out);
        assert!(text.contains("'sheet-1' is not a Google Sheet"), "{text}");
        assert!(text.contains("drive sheets add-chart"), "{text}");
    }

    #[test]
    fn describe_lines_renders_shortcut_and_no_visible_parents() {
        let shortcut = outcome_with(
            EmbeddedObjectVerb::DeleteSlicer { slicer_id: 9 },
            Some("Budget"),
            EmbeddedObjectResult::RefusedShortcut,
        );
        let text = describe(&shortcut);
        assert!(text.contains("is a shortcut"), "{text}");
        assert!(text.contains("delete-slicer"), "{text}");

        let orphan = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::RefusedNoVisibleParents,
        );
        assert!(describe(&orphan).contains("sheets-structure"));
    }

    #[test]
    fn describe_lines_renders_sheet_not_found_with_and_without_available_titles() {
        let none = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::RefusedSheetNotFound {
                title: "Q9".to_string(),
                available: Vec::new(),
            },
        );
        assert!(
            describe(&none).contains("Available: none"),
            "{}",
            describe(&none)
        );

        let some = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::RefusedSheetNotFound {
                title: "Q9".to_string(),
                available: vec!["Q1".to_string(), "Q3".to_string()],
            },
        );
        assert!(
            describe(&some).contains("'Q1', 'Q3'"),
            "{}",
            describe(&some)
        );
    }

    #[test]
    fn describe_lines_renders_invalid_range_object_not_found_and_unsupported_chart() {
        let invalid = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::RefusedInvalidRange {
                detail: "bad anchor".to_string(),
            },
        );
        assert_eq!(describe(&invalid), "Refused: bad anchor");

        let missing = outcome_with(
            EmbeddedObjectVerb::DeleteChart { chart_id: 7 },
            Some("Budget"),
            EmbeddedObjectResult::RefusedObjectNotFound { object_id: 7 },
        );
        let text = describe(&missing);
        assert!(text.contains("no chart or slicer with id 7"), "{text}");
        assert!(text.contains("list-charts"), "{text}");

        let unsupported = outcome_with(
            update_chart_verb(7),
            Some("Budget"),
            EmbeddedObjectResult::RefusedUnsupportedChart {
                chart_id: 7,
                detail: "chart has no spec to merge onto".to_string(),
            },
        );
        assert_eq!(
            describe(&unsupported),
            "Refused: chart 7 in 'Budget': chart has no spec to merge onto"
        );
    }

    #[test]
    fn describe_lines_renders_wrong_object_kind() {
        let out = outcome_with(
            update_chart_verb(4),
            Some("Budget"),
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 4,
                expected: "chart".to_string(),
                found: "slicer".to_string(),
            },
        );
        assert_eq!(
            describe(&out),
            "Refused: id 4 in 'Budget' is a slicer, not a chart; run `drive sheets \
             list-slicers` to see what exists"
        );
    }

    #[test]
    fn describe_lines_renders_blocked_with_and_without_a_deciding_rule() {
        let by_rule = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::Blocked {
                decided_by: Some(DecidingRule::Folder {
                    folder_id: "folder-1".to_string(),
                    depth: 2,
                }),
            },
        );
        let text = describe(&by_rule);
        assert!(text.contains("add-chart on 'Budget'"), "{text}");
        assert!(text.contains("folder-1"), "{text}");

        let by_default = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::Blocked { decided_by: None },
        );
        let text = describe(&by_default);
        assert!(text.contains("default policy"), "{text}");
        assert!(text.contains("sheets-structure"), "{text}");
    }

    #[test]
    fn describe_lines_renders_every_lease_refusal_with_the_lease_acquire_hint() {
        for (result, phrase) in [
            (
                EmbeddedObjectResult::RefusedNoLease,
                "requires a Drive write lease",
            ),
            (
                EmbeddedObjectResult::RefusedLeaseExpired,
                "expired, released, or unknown",
            ),
            (
                EmbeddedObjectResult::RefusedLeaseWrongFile,
                "acquired for a different file",
            ),
            (
                EmbeddedObjectResult::RefusedLeaseStale,
                "changed since the lease was acquired",
            ),
        ] {
            let out = outcome_with(add_chart_verb(), Some("Budget"), result);
            let text = describe(&out);
            assert!(text.contains(phrase), "{text}");
            assert!(text.contains("drive lease acquire sheet-1"), "{text}");
        }
    }

    #[test]
    fn describe_lines_renders_changed_with_and_without_an_id_and_an_object() {
        let added = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::Changed {
                summary: "add column chart".to_string(),
                object_id: Some(42),
                object: None,
            },
        );
        assert_eq!(
            describe(&added),
            "Applied: add column chart (id 42) in 'Budget'"
        );

        let deleted = outcome_with(
            EmbeddedObjectVerb::DeleteChart { chart_id: 5 },
            Some("Budget"),
            EmbeddedObjectResult::Changed {
                summary: "delete chart 5".to_string(),
                object_id: None,
                object: Some(Box::new(sample_object())),
            },
        );
        assert_eq!(
            describe_lines(&deleted),
            vec![
                "Applied: delete chart 5 in 'Budget'".to_string(),
                "  id 5: chart (PIE) 'Sales', anchored Q1!C2".to_string(),
            ]
        );
    }

    #[test]
    fn describe_lines_renders_applied_reply_unreadable_with_an_id_hint_only_for_adds() {
        let added = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::AppliedReplyUnreadable {
                summary: "add column chart".to_string(),
                detail: "bad reply".to_string(),
            },
        );
        let lines = describe_lines(&added);
        assert_eq!(
            lines[0],
            "Applied, but the reply could not be read: add column chart in 'Budget' — \
             do not retry; check the spreadsheet first (bad reply)"
        );
        assert_eq!(lines.len(), 2, "{lines:?}");

        let deleted = outcome_with(
            EmbeddedObjectVerb::DeleteChart { chart_id: 5 },
            Some("Budget"),
            EmbeddedObjectResult::AppliedReplyUnreadable {
                summary: "delete chart 5".to_string(),
                detail: "bad reply".to_string(),
            },
        );
        assert_eq!(describe_lines(&deleted).len(), 1);
    }

    #[test]
    fn describe_lines_renders_failed() {
        let out = outcome_with(
            add_chart_verb(),
            Some("Budget"),
            EmbeddedObjectResult::Failed {
                detail: "boom".to_string(),
            },
        );
        assert_eq!(describe(&out), "Failed: boom");
    }

    #[test]
    fn every_result_variant_has_a_distinct_log_status() {
        let statuses: Vec<&str> = [
            EmbeddedObjectResult::WouldChange {
                summary: String::new(),
                object: None,
            },
            EmbeddedObjectResult::RefusedNotASpreadsheet {
                mime_type: String::new(),
            },
            EmbeddedObjectResult::RefusedShortcut,
            EmbeddedObjectResult::RefusedNoVisibleParents,
            EmbeddedObjectResult::RefusedSheetNotFound {
                title: String::new(),
                available: Vec::new(),
            },
            EmbeddedObjectResult::RefusedInvalidRange {
                detail: String::new(),
            },
            EmbeddedObjectResult::RefusedObjectNotFound { object_id: 1 },
            EmbeddedObjectResult::RefusedWrongObjectKind {
                object_id: 1,
                expected: String::new(),
                found: String::new(),
            },
            EmbeddedObjectResult::RefusedUnsupportedChart {
                chart_id: 1,
                detail: String::new(),
            },
            EmbeddedObjectResult::Blocked { decided_by: None },
            EmbeddedObjectResult::RefusedNoLease,
            EmbeddedObjectResult::RefusedLeaseExpired,
            EmbeddedObjectResult::RefusedLeaseWrongFile,
            EmbeddedObjectResult::RefusedLeaseStale,
            EmbeddedObjectResult::Changed {
                summary: String::new(),
                object_id: None,
                object: None,
            },
            EmbeddedObjectResult::AppliedReplyUnreadable {
                summary: String::new(),
                detail: String::new(),
            },
            EmbeddedObjectResult::Failed {
                detail: String::new(),
            },
        ]
        .iter()
        .map(EmbeddedObjectResult::log_status)
        .collect();
        let distinct: HashSet<&str> = statuses.iter().copied().collect();
        assert_eq!(distinct.len(), statuses.len(), "{statuses:?}");
    }

    #[test]
    fn from_lease_refusal_maps_each_refusal_onto_its_own_variant() {
        assert!(matches!(
            EmbeddedObjectResult::from_no_lease(),
            EmbeddedObjectResult::RefusedNoLease
        ));
        assert!(matches!(
            EmbeddedObjectResult::from_lease_expired(),
            EmbeddedObjectResult::RefusedLeaseExpired
        ));
        assert!(matches!(
            EmbeddedObjectResult::from_lease_wrong_file(),
            EmbeddedObjectResult::RefusedLeaseWrongFile
        ));
        assert!(matches!(
            EmbeddedObjectResult::from_lease_stale(),
            EmbeddedObjectResult::RefusedLeaseStale
        ));
        assert_eq!(
            EmbeddedObjectResult::from_lease_failed("boom".to_string()),
            EmbeddedObjectResult::Failed {
                detail: "boom".to_string()
            }
        );
    }

    // ── the target gate, end to end ──────────────────────────────────────

    fn unleased_opts(verb: EmbeddedObjectVerb) -> EmbeddedObjectOptions {
        EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb,
            dry_run: false,
            lease_token: None,
            ledger_path: std::path::PathBuf::new(),
        }
    }

    #[tokio::test]
    async fn an_invalid_verb_is_refused_before_any_call() {
        // Nothing is mounted at all: a refusal decided from the flags alone
        // must make no HTTP request, so any call would surface as `Failed`.
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        let verb = add_chart_verb_with(|verb| {
            let EmbeddedObjectVerb::AddChart { series, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
            };
            series.clear();
        });
        let rules = vec![allow_rule("folder-1")];
        let outcome = embedded_object(&drive, &sheets, &unleased_opts(verb), &rules).await;
        assert_eq!(outcome.file_name, None);
        assert_invalid(&outcome.result, "at least one --series");
    }

    #[tokio::test]
    async fn a_metadata_fetch_failure_surfaces_as_failed() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        wiremock::Mock::given(wiremock::matchers::method("GET"))
            .and(wiremock::matchers::path("/drive/v3/files/sheet-1"))
            .respond_with(wiremock::ResponseTemplate::new(404).set_body_string("not found"))
            .mount(&server)
            .await;
        let rules: Vec<FolderPermissionRule> = Vec::new();
        let outcome =
            embedded_object(&drive, &sheets, &unleased_opts(add_chart_verb()), &rules).await;
        assert!(
            matches!(outcome.result, EmbeddedObjectResult::Failed { .. }),
            "{:?}",
            outcome.result
        );
        assert_eq!(outcome.file_name, None);
    }

    #[tokio::test]
    async fn a_shortcut_target_is_refused() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            "application/vnd.google-apps.shortcut",
            &["folder-1"],
        )
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let outcome =
            embedded_object(&drive, &sheets, &unleased_opts(add_chart_verb()), &rules).await;
        assert!(matches!(
            outcome.result,
            EmbeddedObjectResult::RefusedShortcut
        ));
        assert_eq!(outcome.file_name.as_deref(), Some("sheet-1"));
    }

    #[tokio::test]
    async fn a_non_spreadsheet_target_is_refused() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            "application/vnd.google-apps.document",
            &["folder-1"],
        )
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let outcome = embedded_object(
            &drive,
            &sheets,
            &unleased_opts(EmbeddedObjectVerb::DeleteChart { chart_id: 5 }),
            &rules,
        )
        .await;
        let rendered = format!("{:?}", outcome.result);
        assert!(
            matches!(
                outcome.result,
                EmbeddedObjectResult::RefusedNotASpreadsheet { .. }
            ),
            "{rendered}"
        );
        assert!(
            rendered.contains("application/vnd.google-apps.document"),
            "{rendered}"
        );
    }

    #[tokio::test]
    async fn a_target_with_no_visible_parents_is_refused() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file("sheet-1", crate::drive::types::GOOGLE_SHEET_MIME_TYPE, &[])
            .mount(&server)
            .await;
        let rules: Vec<FolderPermissionRule> = Vec::new();
        let outcome =
            embedded_object(&drive, &sheets, &unleased_opts(add_chart_verb()), &rules).await;
        assert!(matches!(
            outcome.result,
            EmbeddedObjectResult::RefusedNoVisibleParents
        ));
    }

    #[tokio::test]
    async fn a_gate_ancestor_fetch_failure_surfaces_as_failed() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        wiremock::Mock::given(wiremock::matchers::method("GET"))
            .and(wiremock::matchers::path("/drive/v3/files/folder-1"))
            .respond_with(wiremock::ResponseTemplate::new(500).set_body_string("boom"))
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let outcome =
            embedded_object(&drive, &sheets, &unleased_opts(add_chart_verb()), &rules).await;
        assert!(
            matches!(outcome.result, EmbeddedObjectResult::Failed { .. }),
            "{:?}",
            outcome.result
        );
        assert_eq!(outcome.file_name.as_deref(), Some("sheet-1"));
    }

    #[tokio::test]
    async fn a_workbook_fetch_failure_after_a_granted_gate_surfaces_as_failed() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        wiremock::Mock::given(wiremock::matchers::method("GET"))
            .and(wiremock::matchers::path("/v4/spreadsheets/sheet-1"))
            .respond_with(wiremock::ResponseTemplate::new(500).set_body_string("boom"))
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let outcome =
            embedded_object(&drive, &sheets, &unleased_opts(add_chart_verb()), &rules).await;
        assert!(
            matches!(outcome.result, EmbeddedObjectResult::Failed { .. }),
            "{:?}",
            outcome.result
        );
        assert_eq!(outcome.sheet_id, None);
    }

    #[tokio::test]
    async fn add_chart_refuses_an_unknown_sheet() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Q2", "index": 0}},
        ]))
        .mount(&server)
        .await;
        let rules = vec![allow_rule("folder-1")];
        let verb = add_chart_verb_with(|verb| {
            let EmbeddedObjectVerb::AddChart { sheet, .. } = verb else {
                unreachable!() // omni-dev: coverage ignore-line reason="add_chart_verb_with's only callers pass an EmbeddedObjectVerb::AddChart, so this arm can never run"
            };
            *sheet = Some("Nope".to_string());
        });
        let outcome = embedded_object(&drive, &sheets, &unleased_opts(verb), &rules).await;
        let rendered = format!("{:?}", outcome.result);
        assert!(
            matches!(
                outcome.result,
                EmbeddedObjectResult::RefusedSheetNotFound { .. }
            ),
            "{rendered}"
        );
        assert!(rendered.contains("Nope"), "{rendered}");
        assert!(rendered.contains("Q2"), "{rendered}");
    }

    // ── the Drive write lease (ADR-0080 §9) and batchUpdate failure ──────

    /// A workbook holding both a chart (id 5) and a slicer (id 9), so the
    /// plan always builds and the only thing left to decide the outcome is
    /// the lease — or the `batchUpdate` call itself.
    fn mount_workbook_with_chart_and_slicer() -> wiremock::Mock {
        mount_workbook(serde_json::json!([
            {
                "properties": {"sheetId": 0, "title": "Q1", "index": 0},
                "charts": [{
                    "chartId": 5,
                    "spec": {"title": "Sales", "basicChart": {"chartType": "COLUMN"}},
                    "position": {"overlayPosition": {"anchorCell": {"sheetId": 0, "rowIndex": 1, "columnIndex": 2}}},
                }],
                "slicers": [{
                    "slicerId": 9,
                    "spec": {"title": "Region"},
                    "position": {"overlayPosition": {"anchorCell": {"sheetId": 0, "rowIndex": 0, "columnIndex": 5}}},
                }],
            },
        ]))
    }

    async fn mount_granted_gate_with_objects(server: &wiremock::MockServer) {
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(server)
        .await;
        mount_folder("folder-1").mount(server).await;
        mount_workbook_with_chart_and_slicer().mount(server).await;
    }

    fn fresh_ledger_path() -> std::path::PathBuf {
        tempfile::tempdir()
            .unwrap()
            .keep()
            .join("lease-ledger.jsonl")
    }

    #[tokio::test]
    async fn refuses_without_a_lease_when_the_rule_requires_one() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_granted_gate_with_objects(&server).await;
        // No batchUpdate mock mounted — a refusal must make zero mutating
        // calls.
        let rules = vec![allow_rule("folder-1")];
        let opts = unleased_opts(EmbeddedObjectVerb::DeleteChart { chart_id: 5 });
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(matches!(
            outcome.result,
            EmbeddedObjectResult::RefusedNoLease
        ));
        assert_eq!(outcome.result.log_status(), "refused-no-lease");
    }

    #[tokio::test]
    async fn refuses_an_unknown_lease_token() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_granted_gate_with_objects(&server).await;
        let rules = vec![allow_rule("folder-1")];
        // Never seeded — the ledger knows nothing of this token.
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::DeleteSlicer { slicer_id: 9 },
            dry_run: false,
            lease_token: Some("bogus-token".to_string()),
            ledger_path: fresh_ledger_path(),
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(matches!(
            outcome.result,
            EmbeddedObjectResult::RefusedLeaseExpired
        ));
        assert_eq!(outcome.result.log_status(), "refused-lease-expired");
    }

    #[tokio::test]
    async fn refuses_a_lease_bound_to_a_different_file() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_granted_gate_with_objects(&server).await;
        let rules = vec![allow_rule("folder-1")];
        let ledger_path = fresh_ledger_path();
        // Seeded for a *different* spreadsheet id.
        let token = seed_lease(&ledger_path, "some-other-sheet", "1");
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::DeleteSlicer { slicer_id: 9 },
            dry_run: false,
            lease_token: Some(token),
            ledger_path,
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(matches!(
            outcome.result,
            EmbeddedObjectResult::RefusedLeaseWrongFile
        ));
        assert_eq!(outcome.result.log_status(), "refused-lease-wrong-file");
    }

    #[tokio::test]
    async fn refuses_a_stale_lease_when_the_file_has_moved() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        // `mount_file` always returns version "1"; the lease below was
        // acquired against version "0" — a foreign edit landed since.
        mount_granted_gate_with_objects(&server).await;
        let rules = vec![allow_rule("folder-1")];
        let ledger_path = fresh_ledger_path();
        let token = seed_lease(&ledger_path, "sheet-1", "0");
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::DeleteSlicer { slicer_id: 9 },
            dry_run: false,
            lease_token: Some(token),
            ledger_path,
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        assert!(matches!(
            outcome.result,
            EmbeddedObjectResult::RefusedLeaseStale
        ));
        assert_eq!(outcome.result.log_status(), "refused-lease-stale");
    }

    #[tokio::test]
    async fn a_batch_update_failure_surfaces_as_failed() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_granted_gate_with_objects(&server).await;
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path(
                "/v4/spreadsheets/sheet-1:batchUpdate",
            ))
            .respond_with(wiremock::ResponseTemplate::new(500).set_body_string("boom"))
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let (lease_token, ledger_path) = leased_opts_for("sheet-1");
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: update_chart_verb(5),
            dry_run: false,
            lease_token,
            ledger_path,
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        let rendered = format!("{:?}", outcome.result);
        assert!(
            matches!(outcome.result, EmbeddedObjectResult::Failed { .. }),
            "{rendered}"
        );
        assert!(rendered.contains("500"), "{rendered}");
    }

    #[tokio::test]
    async fn a_real_delete_chart_reports_the_object_it_discarded() {
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_granted_gate_with_objects(&server).await;
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path(
                "/v4/spreadsheets/sheet-1:batchUpdate",
            ))
            .respond_with(
                wiremock::ResponseTemplate::new(200)
                    .set_body_json(serde_json::json!({"replies": [{}]})),
            )
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let (lease_token, ledger_path) = leased_opts_for("sheet-1");
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb: EmbeddedObjectVerb::DeleteChart { chart_id: 5 },
            dry_run: false,
            lease_token,
            ledger_path,
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        let rendered = format!("{:?}", outcome.result);
        // `deleteEmbeddedObject` has no reply body, so the id comes from
        // the plan's `existing_id`, and the discarded object rides along
        // for the audit trail (ADR-0081 §3).
        assert!(
            matches!(
                outcome.result,
                EmbeddedObjectResult::Changed {
                    object_id: Some(5),
                    object: Some(_),
                    ..
                }
            ),
            "{rendered}"
        );
        assert!(rendered.contains("Sales"), "{rendered}");
        assert_eq!(describe_lines(&outcome).len(), 2);
    }

    #[tokio::test]
    async fn a_real_add_chart_parses_a_reply_anchored_at_a1_on_sheet_0() {
        // Issue #1929, confirmed live: `add-chart --anchor A1` on the first
        // sheet creates the chart server-side, but the batchUpdate reply's
        // echoed `EmbeddedChart` anchors at row 1 / column A on sheet 0
        // with every `GridCoordinate` field proto3-omitted
        // (`anchorCell: {}`) — not the explicit-zero shape a hand-written
        // fixture would guess. Before this issue's fix, that made the
        // whole reply fail to parse and the verb report `Failed` even
        // though the chart existed.
        let server = wiremock::MockServer::start().await;
        let (drive, sheets) = clients(&server).await;
        mount_file(
            "sheet-1",
            crate::drive::types::GOOGLE_SHEET_MIME_TYPE,
            &["folder-1"],
        )
        .mount(&server)
        .await;
        mount_folder("folder-1").mount(&server).await;
        mount_workbook(serde_json::json!([
            {"properties": {"sheetId": 0, "title": "Sheet1", "index": 0}},
        ]))
        .mount(&server)
        .await;
        wiremock::Mock::given(wiremock::matchers::method("POST"))
            .and(wiremock::matchers::path(
                "/v4/spreadsheets/sheet-1:batchUpdate",
            ))
            .respond_with(
                wiremock::ResponseTemplate::new(200).set_body_json(serde_json::json!({
                    "replies": [{
                        "addChart": {
                            "chart": {
                                "chartId": 7,
                                "spec": {"basicChart": {"chartType": "COLUMN"}},
                                "position": {"overlayPosition": {"anchorCell": {}}},
                            },
                        },
                    }],
                })),
            )
            .mount(&server)
            .await;
        let rules = vec![allow_rule("folder-1")];
        let (lease_token, ledger_path) = leased_opts_for("sheet-1");
        let mut verb = add_chart_verb();
        let EmbeddedObjectVerb::AddChart { anchor, .. } = &mut verb else {
            unreachable!() // omni-dev: coverage ignore-line reason="this test always constructs `verb` as EmbeddedObjectVerb::AddChart above, so this arm can never run"
        };
        *anchor = Some("A1".to_string());
        let opts = EmbeddedObjectOptions {
            spreadsheet_id: "sheet-1".to_string(),
            verb,
            dry_run: false,
            lease_token,
            ledger_path,
        };
        let outcome = embedded_object(&drive, &sheets, &opts, &rules).await;
        let rendered = format!("{:?}", outcome.result);
        assert!(
            matches!(
                outcome.result,
                EmbeddedObjectResult::Changed {
                    object_id: Some(7),
                    ..
                }
            ),
            "{rendered}"
        );
    }
}