peat-mesh 0.8.1

//! PeatMesh facade — unified entry point for the mesh networking library.
//!
//! Provides [`PeatMesh`] as the single entry point that composes transport,
//! topology, routing, hierarchy, and (optionally) the HTTP/WS broker into a
//! cohesive mesh networking stack.
//!
//! # Lock ordering
//!
//! `PeatMesh` contains three sync `RwLock`s:
//!
//! | Lock | Type | Protects |
//! |------|------|----------|
//! | `state` | `std::sync::RwLock<MeshState>` | Lifecycle state machine |
//! | `discovery` | `std::sync::RwLock<Option<Box<dyn DiscoveryStrategy>>>` | Discovery strategy |
//! | `started_at` | `std::sync::RwLock<Option<Instant>>` | Start timestamp |
//! | `cancellation_token` | `std::sync::RwLock<CancellationToken>` | Shutdown signalling |
//!
//! **Required acquisition order (when multiple locks are needed):**
//!
//! 1. `state`
//! 2. `cancellation_token`
//! 3. `discovery`
//! 4. `started_at`
//!
//! In practice, `start()` and `stop()` are the only methods that acquire more
//! than one of these locks, and they follow this order. All other accessors
//! acquire a single lock at a time.
//!
//! **Invariant:** none of these locks should be held while calling into
//! subsystem locks (e.g., `TransportManager` or `SyncChannel`). The facade
//! reads its own state, releases the guard, then delegates to the subsystem.

use crate::config::MeshConfig;
use crate::hierarchy::HierarchyStrategy;
use crate::routing::MeshRouter;
use crate::transport::{MeshTransport, NodeId, TransportError, TransportManager};
use std::fmt;
use std::sync::{Arc, RwLock};
use std::time::Instant;
use tokio::sync::broadcast;
use tokio_util::sync::CancellationToken;

// ─── Lifecycle state ─────────────────────────────────────────────────────────

/// Lifecycle state of the mesh.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum MeshState {
    /// Mesh created but not yet started.
    Created,
    /// Mesh is in the process of starting.
    Starting,
    /// Mesh is running and accepting connections.
    Running,
    /// Mesh is in the process of stopping.
    Stopping,
    /// Mesh has been stopped.
    Stopped,
}

impl fmt::Display for MeshState {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            MeshState::Created => write!(f, "created"),
            MeshState::Starting => write!(f, "starting"),
            MeshState::Running => write!(f, "running"),
            MeshState::Stopping => write!(f, "stopping"),
            MeshState::Stopped => write!(f, "stopped"),
        }
    }
}

// ─── Error type ──────────────────────────────────────────────────────────────

/// Unified error type for mesh operations.
#[derive(Debug)]
pub enum MeshError {
    /// Operation requires the mesh to be running.
    NotRunning,
    /// Mesh is already running or starting.
    AlreadyRunning,
    /// Invalid configuration.
    InvalidConfig(String),
    /// Underlying transport error.
    Transport(TransportError),
    /// Catch-all for other errors.
    Other(String),
}

impl fmt::Display for MeshError {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            MeshError::NotRunning => write!(f, "mesh is not running"),
            MeshError::AlreadyRunning => write!(f, "mesh is already running"),
            MeshError::InvalidConfig(msg) => write!(f, "invalid configuration: {}", msg),
            MeshError::Transport(err) => write!(f, "transport error: {}", err),
            MeshError::Other(msg) => write!(f, "{}", msg),
        }
    }
}

impl std::error::Error for MeshError {
    fn source(&self) -> Option<&(dyn std::error::Error + 'static)> {
        match self {
            MeshError::Transport(err) => Some(err),
            _ => None,
        }
    }
}

impl From<TransportError> for MeshError {
    fn from(err: TransportError) -> Self {
        MeshError::Transport(err)
    }
}

// ─── Events ──────────────────────────────────────────────────────────────────

/// Mesh-wide events broadcast to subscribers.
#[derive(Debug, Clone)]
pub enum PeatMeshEvent {
    /// Mesh lifecycle state changed.
    StateChanged(MeshState),
    /// A new peer joined the mesh.
    PeerJoined(NodeId),
    /// A peer left the mesh.
    PeerLeft(NodeId),
    /// Topology changed.
    TopologyChanged(Box<crate::topology::TopologyEvent>),
}

// ─── Status snapshot ─────────────────────────────────────────────────────────

/// Point-in-time snapshot of mesh status.
#[derive(Debug, Clone)]
pub struct MeshStatus {
    /// Current lifecycle state.
    pub state: MeshState,
    /// Number of connected peers.
    pub peer_count: usize,
    /// This node's identifier.
    pub node_id: String,
    /// Time since the mesh was started.
    pub uptime: std::time::Duration,
}

// ─── PeatMesh facade ────────────────────────────────────────────────────────

const EVENT_CHANNEL_CAPACITY: usize = 256;

/// Unified mesh facade composing all subsystems.
///
/// Create with [`PeatMesh::new`] for simple use or [`PeatMeshBuilder`] for
/// advanced construction with pre-configured subsystems.
pub struct PeatMesh {
    config: MeshConfig,
    node_id: String,
    state: RwLock<MeshState>,
    transport: Option<Arc<dyn MeshTransport>>,
    transport_manager: Option<TransportManager>,
    hierarchy: Option<Arc<dyn HierarchyStrategy>>,
    router: Option<MeshRouter>,
    // ── QoS ──
    bandwidth: Option<crate::qos::BandwidthAllocation>,
    preemption: Option<crate::qos::PreemptionController>,
    // ── Security ──
    device_keypair: Option<crate::security::DeviceKeypair>,
    formation_key: Option<crate::security::FormationKey>,
    // ── Discovery ──
    discovery: RwLock<Option<Box<dyn crate::discovery::DiscoveryStrategy>>>,
    // ── Beacon ──
    beacon_broadcaster: Option<crate::beacon::BeaconBroadcaster>,
    beacon_observer: Option<Arc<crate::beacon::BeaconObserver>>,
    beacon_janitor: Option<crate::beacon::BeaconJanitor>,
    // ── Topology ──
    topology_manager: Option<crate::topology::TopologyManager>,
    event_tx: broadcast::Sender<PeatMeshEvent>,
    #[cfg(feature = "broker")]
    broker_event_tx: broadcast::Sender<crate::broker::state::MeshEvent>,
    started_at: RwLock<Option<Instant>>,
    /// Token for signalling graceful shutdown to background tasks.
    /// Wrapped in `RwLock` so `start()` can replace a cancelled token
    /// when restarting a previously-stopped mesh.
    cancellation_token: RwLock<CancellationToken>,
}

impl PeatMesh {
    /// Create a new PeatMesh with the given configuration.
    ///
    /// If `config.node_id` is `None`, a UUID v4 is generated automatically.
    pub fn new(config: MeshConfig) -> Self {
        let node_id = config
            .node_id
            .clone()
            .unwrap_or_else(|| uuid::Uuid::new_v4().to_string());
        let (event_tx, _) = broadcast::channel(EVENT_CHANNEL_CAPACITY);
        #[cfg(feature = "broker")]
        let (broker_event_tx, _) = broadcast::channel(EVENT_CHANNEL_CAPACITY);
        Self {
            config,
            node_id,
            state: RwLock::new(MeshState::Created),
            transport: None,
            transport_manager: None,
            hierarchy: None,
            router: None,
            bandwidth: None,
            preemption: None,
            device_keypair: None,
            formation_key: None,
            discovery: RwLock::new(None),
            beacon_broadcaster: None,
            beacon_observer: None,
            beacon_janitor: None,
            topology_manager: None,
            event_tx,
            #[cfg(feature = "broker")]
            broker_event_tx,
            started_at: RwLock::new(None),
            cancellation_token: RwLock::new(CancellationToken::new()),
        }
    }

    /// Start the mesh (Created/Stopped → Starting → Running).
    pub fn start(&self) -> Result<(), MeshError> {
        let mut state = self.state.write().unwrap_or_else(|e| e.into_inner());
        match *state {
            MeshState::Created | MeshState::Stopped => {}
            MeshState::Running | MeshState::Starting | MeshState::Stopping => {
                return Err(MeshError::AlreadyRunning);
            }
        }

        *state = MeshState::Starting;
        let _ = self
            .event_tx
            .send(PeatMeshEvent::StateChanged(MeshState::Starting));

        // Reset the cancellation token so a previously-stopped mesh can
        // restart with a fresh, uncancelled token.
        *self
            .cancellation_token
            .write()
            .unwrap_or_else(|e| e.into_inner()) = CancellationToken::new();

        *state = MeshState::Running;
        *self.started_at.write().unwrap_or_else(|e| e.into_inner()) = Some(Instant::now());
        let _ = self
            .event_tx
            .send(PeatMeshEvent::StateChanged(MeshState::Running));

        #[cfg(feature = "broker")]
        self.emit_broker_event(crate::broker::state::MeshEvent::TopologyChanged {
            new_role: "standalone".to_string(),
            peer_count: 0,
        });

        Ok(())
    }

    /// Stop the mesh (Running → Stopping → Stopped).
    ///
    /// Cancels the shared [`CancellationToken`] so that background tasks
    /// (topology builder, sync channels, etc.) observe the signal and exit
    /// promptly instead of waiting for their next interval or timeout.
    pub fn stop(&self) -> Result<(), MeshError> {
        let mut state = self.state.write().unwrap_or_else(|e| e.into_inner());
        match *state {
            MeshState::Running => {}
            _ => return Err(MeshError::NotRunning),
        }

        *state = MeshState::Stopping;
        let _ = self
            .event_tx
            .send(PeatMeshEvent::StateChanged(MeshState::Stopping));

        // Signal all background tasks to shut down.
        self.cancellation_token
            .read()
            .unwrap_or_else(|e| e.into_inner())
            .cancel();

        *state = MeshState::Stopped;
        let _ = self
            .event_tx
            .send(PeatMeshEvent::StateChanged(MeshState::Stopped));

        #[cfg(feature = "broker")]
        self.emit_broker_event(crate::broker::state::MeshEvent::TopologyChanged {
            new_role: "stopped".to_string(),
            peer_count: 0,
        });

        Ok(())
    }

    /// Get the current lifecycle state.
    pub fn state(&self) -> MeshState {
        *self.state.read().unwrap_or_else(|e| e.into_inner())
    }

    /// Get a point-in-time status snapshot.
    pub fn status(&self) -> MeshStatus {
        let state = *self.state.read().unwrap_or_else(|e| e.into_inner());
        let uptime = self
            .started_at
            .read()
            .unwrap()
            .map(|t| t.elapsed())
            .unwrap_or_default();
        let peer_count = self.transport.as_ref().map(|t| t.peer_count()).unwrap_or(0);

        MeshStatus {
            state,
            peer_count,
            node_id: self.node_id.clone(),
            uptime,
        }
    }

    /// Get the mesh configuration.
    pub fn config(&self) -> &MeshConfig {
        &self.config
    }

    /// Get the node ID.
    pub fn node_id(&self) -> &str {
        &self.node_id
    }

    /// Subscribe to mesh-wide events.
    pub fn subscribe_events(&self) -> broadcast::Receiver<PeatMeshEvent> {
        self.event_tx.subscribe()
    }

    /// Obtain a child cancellation token for a background task.
    ///
    /// The returned token is cancelled when [`stop()`](Self::stop) is called.
    /// Each call returns a new child so that individual subsystems can also
    /// cancel their own children independently.
    pub fn child_token(&self) -> CancellationToken {
        self.cancellation_token
            .read()
            .unwrap_or_else(|e| e.into_inner())
            .child_token()
    }

    /// Set the transport layer.
    pub fn set_transport(&mut self, transport: Arc<dyn MeshTransport>) {
        self.transport = Some(transport);
    }

    /// Set the multi-transport manager for PACE-based transport selection.
    pub fn set_transport_manager(&mut self, tm: TransportManager) {
        self.transport_manager = Some(tm);
    }

    /// Get a reference to the transport manager, if set.
    pub fn transport_manager(&self) -> Option<&TransportManager> {
        self.transport_manager.as_ref()
    }

    /// Set the hierarchy strategy.
    pub fn set_hierarchy(&mut self, hierarchy: Arc<dyn HierarchyStrategy>) {
        self.hierarchy = Some(hierarchy);
    }

    /// Get a reference to the transport, if set.
    pub fn transport(&self) -> Option<&Arc<dyn MeshTransport>> {
        self.transport.as_ref()
    }

    /// Get a reference to the hierarchy strategy, if set.
    pub fn hierarchy(&self) -> Option<&Arc<dyn HierarchyStrategy>> {
        self.hierarchy.as_ref()
    }

    /// Get a reference to the router, if set.
    pub fn router(&self) -> Option<&MeshRouter> {
        self.router.as_ref()
    }

    // ── QoS policies ────────────────────────────────────────────

    /// Set the bandwidth allocation policy.
    pub fn set_bandwidth(&mut self, bw: crate::qos::BandwidthAllocation) {
        self.bandwidth = Some(bw);
    }

    /// Get a reference to the bandwidth allocation, if set.
    pub fn bandwidth(&self) -> Option<&crate::qos::BandwidthAllocation> {
        self.bandwidth.as_ref()
    }

    /// Set the preemption controller.
    pub fn set_preemption(&mut self, pc: crate::qos::PreemptionController) {
        self.preemption = Some(pc);
    }

    /// Get a reference to the preemption controller, if set.
    pub fn preemption(&self) -> Option<&crate::qos::PreemptionController> {
        self.preemption.as_ref()
    }

    // ── Security primitives ─────────────────────────────────────

    /// Set the device keypair (Ed25519).
    pub fn set_device_keypair(&mut self, kp: crate::security::DeviceKeypair) {
        self.device_keypair = Some(kp);
    }

    /// Get a reference to the device keypair, if set.
    pub fn device_keypair(&self) -> Option<&crate::security::DeviceKeypair> {
        self.device_keypair.as_ref()
    }

    /// Set the formation key (HMAC-SHA256).
    pub fn set_formation_key(&mut self, fk: crate::security::FormationKey) {
        self.formation_key = Some(fk);
    }

    /// Get a reference to the formation key, if set.
    pub fn formation_key(&self) -> Option<&crate::security::FormationKey> {
        self.formation_key.as_ref()
    }

    // ── Discovery ───────────────────────────────────────────────

    /// Set the discovery strategy.
    ///
    /// Takes `&self` (not `&mut self`) because the field uses interior
    /// mutability (`RwLock`) — `DiscoveryStrategy::start()` requires
    /// `&mut self`.
    pub fn set_discovery(&self, strategy: Box<dyn crate::discovery::DiscoveryStrategy>) {
        *self.discovery.write().unwrap_or_else(|e| e.into_inner()) = Some(strategy);
    }

    /// Get a reference to the discovery RwLock.
    pub fn discovery(&self) -> &RwLock<Option<Box<dyn crate::discovery::DiscoveryStrategy>>> {
        &self.discovery
    }

    // ── Beacon ──────────────────────────────────────────────────

    /// Set the beacon broadcaster.
    pub fn set_beacon_broadcaster(&mut self, bb: crate::beacon::BeaconBroadcaster) {
        self.beacon_broadcaster = Some(bb);
    }

    /// Get a reference to the beacon broadcaster, if set.
    pub fn beacon_broadcaster(&self) -> Option<&crate::beacon::BeaconBroadcaster> {
        self.beacon_broadcaster.as_ref()
    }

    /// Set the beacon observer (Arc-wrapped for sharing with TopologyBuilder).
    pub fn set_beacon_observer(&mut self, bo: Arc<crate::beacon::BeaconObserver>) {
        self.beacon_observer = Some(bo);
    }

    /// Get a reference to the beacon observer, if set.
    pub fn beacon_observer(&self) -> Option<&Arc<crate::beacon::BeaconObserver>> {
        self.beacon_observer.as_ref()
    }

    /// Set the beacon janitor.
    pub fn set_beacon_janitor(&mut self, bj: crate::beacon::BeaconJanitor) {
        self.beacon_janitor = Some(bj);
    }

    /// Get a reference to the beacon janitor, if set.
    pub fn beacon_janitor(&self) -> Option<&crate::beacon::BeaconJanitor> {
        self.beacon_janitor.as_ref()
    }

    // ── Topology ────────────────────────────────────────────────

    /// Set the topology manager.
    pub fn set_topology_manager(&mut self, tm: crate::topology::TopologyManager) {
        self.topology_manager = Some(tm);
    }

    /// Get a reference to the topology manager, if set.
    pub fn topology_manager(&self) -> Option<&crate::topology::TopologyManager> {
        self.topology_manager.as_ref()
    }

    /// Emit a broker event for WebSocket subscribers.
    #[cfg(feature = "broker")]
    pub fn emit_mesh_event(&self, event: crate::broker::state::MeshEvent) {
        let _ = self.broker_event_tx.send(event);
    }

    #[cfg(feature = "broker")]
    fn emit_broker_event(&self, event: crate::broker::state::MeshEvent) {
        let _ = self.broker_event_tx.send(event);
    }
}

// ─── Feature-gated MeshBrokerState impl ──────────────────────────────────────

#[cfg(feature = "broker")]
#[async_trait::async_trait]
impl crate::broker::state::MeshBrokerState for PeatMesh {
    fn node_info(&self) -> crate::broker::state::MeshNodeInfo {
        let uptime = self
            .started_at
            .read()
            .unwrap()
            .map(|t| t.elapsed().as_secs())
            .unwrap_or(0);
        crate::broker::state::MeshNodeInfo {
            node_id: self.node_id.clone(),
            uptime_secs: uptime,
            version: env!("CARGO_PKG_VERSION").to_string(),
        }
    }

    async fn list_peers(&self) -> Vec<crate::broker::state::PeerSummary> {
        let Some(transport) = &self.transport else {
            return vec![];
        };
        transport
            .connected_peers()
            .into_iter()
            .map(|peer_id| {
                let health = transport.get_peer_health(&peer_id);
                crate::broker::state::PeerSummary {
                    id: peer_id.to_string(),
                    connected: true,
                    state: health
                        .as_ref()
                        .map(|h| h.state.to_string())
                        .unwrap_or_else(|| "unknown".to_string()),
                    rtt_ms: health.map(|h| h.rtt_ms as u64),
                }
            })
            .collect()
    }

    async fn get_peer(&self, id: &str) -> Option<crate::broker::state::PeerSummary> {
        let transport = self.transport.as_ref()?;
        let node_id = NodeId::new(id.to_string());
        if transport.is_connected(&node_id) {
            let health = transport.get_peer_health(&node_id);
            Some(crate::broker::state::PeerSummary {
                id: id.to_string(),
                connected: true,
                state: health
                    .as_ref()
                    .map(|h| h.state.to_string())
                    .unwrap_or_else(|| "unknown".to_string()),
                rtt_ms: health.map(|h| h.rtt_ms as u64),
            })
        } else {
            None
        }
    }

    fn topology(&self) -> crate::broker::state::TopologySummary {
        let peer_count = self.transport.as_ref().map(|t| t.peer_count()).unwrap_or(0);
        crate::broker::state::TopologySummary {
            peer_count,
            role: "standalone".to_string(),
            hierarchy_level: 0,
        }
    }

    fn subscribe_events(&self) -> broadcast::Receiver<crate::broker::state::MeshEvent> {
        self.broker_event_tx.subscribe()
    }
}

// ─── Builder ─────────────────────────────────────────────────────────────────

/// Builder for constructing a [`PeatMesh`] with pre-configured subsystems.
pub struct PeatMeshBuilder {
    config: MeshConfig,
    transport: Option<Arc<dyn MeshTransport>>,
    transport_manager: Option<TransportManager>,
    hierarchy: Option<Arc<dyn HierarchyStrategy>>,
    router: Option<MeshRouter>,
    bandwidth: Option<crate::qos::BandwidthAllocation>,
    preemption: Option<crate::qos::PreemptionController>,
    device_keypair: Option<crate::security::DeviceKeypair>,
    formation_key: Option<crate::security::FormationKey>,
    discovery: Option<Box<dyn crate::discovery::DiscoveryStrategy>>,
    beacon_broadcaster: Option<crate::beacon::BeaconBroadcaster>,
    beacon_observer: Option<Arc<crate::beacon::BeaconObserver>>,
    beacon_janitor: Option<crate::beacon::BeaconJanitor>,
    topology_manager: Option<crate::topology::TopologyManager>,
}

impl PeatMeshBuilder {
    /// Create a new builder with the given configuration.
    pub fn new(config: MeshConfig) -> Self {
        Self {
            config,
            transport: None,
            transport_manager: None,
            hierarchy: None,
            router: None,
            bandwidth: None,
            preemption: None,
            device_keypair: None,
            formation_key: None,
            discovery: None,
            beacon_broadcaster: None,
            beacon_observer: None,
            beacon_janitor: None,
            topology_manager: None,
        }
    }

    /// Set a single transport layer.
    pub fn with_transport(mut self, transport: Arc<dyn MeshTransport>) -> Self {
        self.transport = Some(transport);
        self
    }

    /// Set the multi-transport manager for PACE-based transport selection.
    pub fn with_transport_manager(mut self, tm: TransportManager) -> Self {
        self.transport_manager = Some(tm);
        self
    }

    /// Set the hierarchy strategy.
    pub fn with_hierarchy(mut self, hierarchy: Arc<dyn HierarchyStrategy>) -> Self {
        self.hierarchy = Some(hierarchy);
        self
    }

    /// Set the router.
    pub fn with_router(mut self, router: MeshRouter) -> Self {
        self.router = Some(router);
        self
    }

    /// Set the bandwidth allocation policy.
    pub fn with_bandwidth(mut self, bw: crate::qos::BandwidthAllocation) -> Self {
        self.bandwidth = Some(bw);
        self
    }

    /// Set the preemption controller.
    pub fn with_preemption(mut self, pc: crate::qos::PreemptionController) -> Self {
        self.preemption = Some(pc);
        self
    }

    /// Set the device keypair.
    pub fn with_device_keypair(mut self, kp: crate::security::DeviceKeypair) -> Self {
        self.device_keypair = Some(kp);
        self
    }

    /// Derive a deterministic device keypair from a seed and context.
    ///
    /// Convenience wrapper around [`crate::security::DeviceKeypair::from_seed`].
    pub fn with_device_keypair_from_seed(
        mut self,
        seed: &[u8],
        context: &str,
    ) -> Result<Self, MeshError> {
        let kp = crate::security::DeviceKeypair::from_seed(seed, context)
            .map_err(|e| MeshError::InvalidConfig(e.to_string()))?;
        self.device_keypair = Some(kp);
        Ok(self)
    }

    /// Set the formation key.
    pub fn with_formation_key(mut self, fk: crate::security::FormationKey) -> Self {
        self.formation_key = Some(fk);
        self
    }

    /// Set the discovery strategy.
    pub fn with_discovery(
        mut self,
        strategy: Box<dyn crate::discovery::DiscoveryStrategy>,
    ) -> Self {
        self.discovery = Some(strategy);
        self
    }

    /// Set the beacon broadcaster.
    pub fn with_beacon_broadcaster(mut self, bb: crate::beacon::BeaconBroadcaster) -> Self {
        self.beacon_broadcaster = Some(bb);
        self
    }

    /// Set the beacon observer.
    pub fn with_beacon_observer(mut self, bo: Arc<crate::beacon::BeaconObserver>) -> Self {
        self.beacon_observer = Some(bo);
        self
    }

    /// Set the beacon janitor.
    pub fn with_beacon_janitor(mut self, bj: crate::beacon::BeaconJanitor) -> Self {
        self.beacon_janitor = Some(bj);
        self
    }

    /// Set the topology manager.
    pub fn with_topology_manager(mut self, tm: crate::topology::TopologyManager) -> Self {
        self.topology_manager = Some(tm);
        self
    }

    /// Build the [`PeatMesh`] instance.
    pub fn build(self) -> PeatMesh {
        let node_id = self
            .config
            .node_id
            .clone()
            .unwrap_or_else(|| uuid::Uuid::new_v4().to_string());
        let (event_tx, _) = broadcast::channel(EVENT_CHANNEL_CAPACITY);
        #[cfg(feature = "broker")]
        let (broker_event_tx, _) = broadcast::channel(EVENT_CHANNEL_CAPACITY);

        PeatMesh {
            config: self.config,
            node_id,
            state: RwLock::new(MeshState::Created),
            transport: self.transport,
            transport_manager: self.transport_manager,
            hierarchy: self.hierarchy,
            router: self.router,
            bandwidth: self.bandwidth,
            preemption: self.preemption,
            device_keypair: self.device_keypair,
            formation_key: self.formation_key,
            discovery: RwLock::new(self.discovery),
            beacon_broadcaster: self.beacon_broadcaster,
            beacon_observer: self.beacon_observer,
            beacon_janitor: self.beacon_janitor,
            topology_manager: self.topology_manager,
            event_tx,
            #[cfg(feature = "broker")]
            broker_event_tx,
            started_at: RwLock::new(None),
            cancellation_token: RwLock::new(CancellationToken::new()),
        }
    }
}

// ─── Tests ───────────────────────────────────────────────────────────────────

#[cfg(test)]
mod tests {
    use super::*;
    use crate::config::MeshDiscoveryConfig;
    use crate::transport::PeerEventReceiver;
    use async_trait::async_trait;
    use std::time::Duration;

    // ── Mock transport for testing ───────────────────────────────

    struct MockTransport {
        peers: Vec<NodeId>,
    }

    impl MockTransport {
        fn new(peers: Vec<NodeId>) -> Self {
            Self { peers }
        }

        fn empty() -> Self {
            Self { peers: vec![] }
        }
    }

    #[async_trait]
    impl MeshTransport for MockTransport {
        async fn start(&self) -> crate::transport::Result<()> {
            Ok(())
        }
        async fn stop(&self) -> crate::transport::Result<()> {
            Ok(())
        }
        async fn connect(
            &self,
            _peer_id: &NodeId,
        ) -> crate::transport::Result<Box<dyn crate::transport::MeshConnection>> {
            Err(TransportError::NotStarted)
        }
        async fn disconnect(&self, _peer_id: &NodeId) -> crate::transport::Result<()> {
            Ok(())
        }
        fn get_connection(
            &self,
            _peer_id: &NodeId,
        ) -> Option<Box<dyn crate::transport::MeshConnection>> {
            None
        }
        fn peer_count(&self) -> usize {
            self.peers.len()
        }
        fn connected_peers(&self) -> Vec<NodeId> {
            self.peers.clone()
        }
        fn subscribe_peer_events(&self) -> PeerEventReceiver {
            let (_tx, rx) = tokio::sync::mpsc::channel(1);
            rx
        }
    }

    // ── PeatMesh::new ────────────────────────────────────────────

    #[test]
    fn test_new_with_default_config() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert_eq!(mesh.state(), MeshState::Created);
        assert!(!mesh.node_id().is_empty());
    }

    #[test]
    fn test_new_with_explicit_node_id() {
        let cfg = MeshConfig {
            node_id: Some("my-node".to_string()),
            ..Default::default()
        };
        let mesh = PeatMesh::new(cfg);
        assert_eq!(mesh.node_id(), "my-node");
    }

    #[test]
    fn test_new_auto_generates_uuid_node_id() {
        let mesh = PeatMesh::new(MeshConfig::default());
        // UUID v4 format: 8-4-4-4-12 hex digits
        assert_eq!(mesh.node_id().len(), 36);
        assert_eq!(mesh.node_id().chars().filter(|&c| c == '-').count(), 4);
    }

    // ── Lifecycle: start / stop ──────────────────────────────────

    #[test]
    fn test_start_transitions_to_running() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.start().is_ok());
        assert_eq!(mesh.state(), MeshState::Running);
    }

    #[test]
    fn test_start_when_already_running_returns_error() {
        let mesh = PeatMesh::new(MeshConfig::default());
        mesh.start().unwrap();
        let err = mesh.start().unwrap_err();
        assert!(matches!(err, MeshError::AlreadyRunning));
    }

    #[test]
    fn test_stop_transitions_to_stopped() {
        let mesh = PeatMesh::new(MeshConfig::default());
        mesh.start().unwrap();
        assert!(mesh.stop().is_ok());
        assert_eq!(mesh.state(), MeshState::Stopped);
    }

    #[test]
    fn test_stop_when_not_running_returns_error() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let err = mesh.stop().unwrap_err();
        assert!(matches!(err, MeshError::NotRunning));
    }

    #[test]
    fn test_restart_after_stop() {
        let mesh = PeatMesh::new(MeshConfig::default());
        mesh.start().unwrap();
        mesh.stop().unwrap();
        assert!(mesh.start().is_ok());
        assert_eq!(mesh.state(), MeshState::Running);
    }

    #[test]
    fn test_stop_when_created_returns_error() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(matches!(mesh.stop().unwrap_err(), MeshError::NotRunning));
    }

    #[test]
    fn test_stop_when_already_stopped_returns_error() {
        let mesh = PeatMesh::new(MeshConfig::default());
        mesh.start().unwrap();
        mesh.stop().unwrap();
        assert!(matches!(mesh.stop().unwrap_err(), MeshError::NotRunning));
    }

    // ── Status ───────────────────────────────────────────────────

    #[test]
    fn test_status_before_start() {
        let cfg = MeshConfig {
            node_id: Some("status-node".to_string()),
            ..Default::default()
        };
        let mesh = PeatMesh::new(cfg);
        let status = mesh.status();
        assert_eq!(status.state, MeshState::Created);
        assert_eq!(status.peer_count, 0);
        assert_eq!(status.node_id, "status-node");
        assert_eq!(status.uptime, Duration::ZERO);
    }

    #[test]
    fn test_status_while_running() {
        let mesh = PeatMesh::new(MeshConfig {
            node_id: Some("running-node".to_string()),
            ..Default::default()
        });
        mesh.start().unwrap();
        let status = mesh.status();
        assert_eq!(status.state, MeshState::Running);
        assert_eq!(status.node_id, "running-node");
        // Uptime should be non-zero (or at least zero on a very fast machine)
        assert!(status.uptime <= Duration::from_secs(1));
    }

    #[test]
    fn test_status_peer_count_with_transport() {
        let peers = vec![NodeId::new("p1".into()), NodeId::new("p2".into())];
        let mut mesh = PeatMesh::new(MeshConfig::default());
        mesh.set_transport(Arc::new(MockTransport::new(peers)));
        let status = mesh.status();
        assert_eq!(status.peer_count, 2);
    }

    // ── Config accessor ──────────────────────────────────────────

    #[test]
    fn test_config_accessor() {
        let cfg = MeshConfig {
            node_id: Some("cfg-test".to_string()),
            discovery: MeshDiscoveryConfig {
                mdns_enabled: false,
                ..Default::default()
            },
            ..Default::default()
        };
        let mesh = PeatMesh::new(cfg);
        assert_eq!(mesh.config().node_id.as_deref(), Some("cfg-test"));
        assert!(!mesh.config().discovery.mdns_enabled);
    }

    // ── Event subscription ───────────────────────────────────────

    #[test]
    fn test_subscribe_events_receives_state_changes() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let mut rx = mesh.subscribe_events();

        mesh.start().unwrap();

        // Should receive Starting then Running
        let evt1 = rx.try_recv().unwrap();
        assert!(matches!(
            evt1,
            PeatMeshEvent::StateChanged(MeshState::Starting)
        ));
        let evt2 = rx.try_recv().unwrap();
        assert!(matches!(
            evt2,
            PeatMeshEvent::StateChanged(MeshState::Running)
        ));
    }

    #[test]
    fn test_subscribe_events_receives_stop_events() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let mut rx = mesh.subscribe_events();

        mesh.start().unwrap();
        // Drain start events
        let _ = rx.try_recv();
        let _ = rx.try_recv();

        mesh.stop().unwrap();

        let evt1 = rx.try_recv().unwrap();
        assert!(matches!(
            evt1,
            PeatMeshEvent::StateChanged(MeshState::Stopping)
        ));
        let evt2 = rx.try_recv().unwrap();
        assert!(matches!(
            evt2,
            PeatMeshEvent::StateChanged(MeshState::Stopped)
        ));
    }

    #[test]
    fn test_multiple_subscribers() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let mut rx1 = mesh.subscribe_events();
        let mut rx2 = mesh.subscribe_events();

        mesh.start().unwrap();

        // Both receivers should get events
        assert!(rx1.try_recv().is_ok());
        assert!(rx2.try_recv().is_ok());
    }

    // ── set_transport / set_hierarchy ────────────────────────────

    #[test]
    fn test_set_transport() {
        let mut mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.transport().is_none());

        mesh.set_transport(Arc::new(MockTransport::empty()));
        assert!(mesh.transport().is_some());
    }

    #[test]
    fn test_set_hierarchy() {
        use crate::beacon::HierarchyLevel;
        use crate::hierarchy::{NodeRole, StaticHierarchyStrategy};

        let mut mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.hierarchy().is_none());

        let strategy = StaticHierarchyStrategy {
            assigned_level: HierarchyLevel::Platoon,
            assigned_role: NodeRole::Leader,
        };
        mesh.set_hierarchy(Arc::new(strategy));
        assert!(mesh.hierarchy().is_some());
    }

    #[test]
    fn test_router_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.router().is_none());
    }

    // ── MeshState ────────────────────────────────────────────────

    #[test]
    fn test_mesh_state_display() {
        assert_eq!(MeshState::Created.to_string(), "created");
        assert_eq!(MeshState::Starting.to_string(), "starting");
        assert_eq!(MeshState::Running.to_string(), "running");
        assert_eq!(MeshState::Stopping.to_string(), "stopping");
        assert_eq!(MeshState::Stopped.to_string(), "stopped");
    }

    #[test]
    fn test_mesh_state_equality() {
        assert_eq!(MeshState::Created, MeshState::Created);
        assert_ne!(MeshState::Created, MeshState::Running);
    }

    #[test]
    fn test_mesh_state_clone_copy() {
        let s = MeshState::Running;
        let copied = s;
        // Verify Copy semantics: original is still usable after copy
        assert_eq!(s, copied);
    }

    #[test]
    fn test_mesh_state_debug() {
        let debug = format!("{:?}", MeshState::Running);
        assert!(debug.contains("Running"));
    }

    // ── MeshError ────────────────────────────────────────────────

    #[test]
    fn test_mesh_error_display_not_running() {
        let err = MeshError::NotRunning;
        assert_eq!(err.to_string(), "mesh is not running");
    }

    #[test]
    fn test_mesh_error_display_already_running() {
        let err = MeshError::AlreadyRunning;
        assert_eq!(err.to_string(), "mesh is already running");
    }

    #[test]
    fn test_mesh_error_display_invalid_config() {
        let err = MeshError::InvalidConfig("bad value".to_string());
        assert_eq!(err.to_string(), "invalid configuration: bad value");
    }

    #[test]
    fn test_mesh_error_display_transport() {
        let terr = TransportError::NotStarted;
        let err = MeshError::Transport(terr);
        assert!(err.to_string().contains("Transport not started"));
    }

    #[test]
    fn test_mesh_error_display_other() {
        let err = MeshError::Other("something went wrong".to_string());
        assert_eq!(err.to_string(), "something went wrong");
    }

    #[test]
    fn test_mesh_error_source_transport() {
        use std::error::Error;
        let terr = TransportError::ConnectionFailed("timeout".into());
        let err = MeshError::Transport(terr);
        assert!(err.source().is_some());
    }

    #[test]
    fn test_mesh_error_source_none_for_others() {
        use std::error::Error;
        assert!(MeshError::NotRunning.source().is_none());
        assert!(MeshError::AlreadyRunning.source().is_none());
        assert!(MeshError::InvalidConfig("x".into()).source().is_none());
        assert!(MeshError::Other("x".into()).source().is_none());
    }

    #[test]
    fn test_mesh_error_from_transport_error() {
        let terr = TransportError::NotStarted;
        let err: MeshError = terr.into();
        assert!(matches!(err, MeshError::Transport(_)));
    }

    #[test]
    fn test_mesh_error_debug() {
        let err = MeshError::NotRunning;
        let debug = format!("{:?}", err);
        assert!(debug.contains("NotRunning"));
    }

    // ── PeatMeshEvent ────────────────────────────────────────────

    #[test]
    fn test_event_state_changed() {
        let evt = PeatMeshEvent::StateChanged(MeshState::Running);
        let debug = format!("{:?}", evt);
        assert!(debug.contains("Running"));
    }

    #[test]
    fn test_event_peer_joined() {
        let evt = PeatMeshEvent::PeerJoined(NodeId::new("peer-1".into()));
        let cloned = evt.clone();
        let debug = format!("{:?}", cloned);
        assert!(debug.contains("peer-1"));
    }

    #[test]
    fn test_event_peer_left() {
        let evt = PeatMeshEvent::PeerLeft(NodeId::new("peer-2".into()));
        let cloned = evt.clone();
        let debug = format!("{:?}", cloned);
        assert!(debug.contains("peer-2"));
    }

    #[test]
    fn test_event_topology_changed() {
        let topo_evt = crate::topology::TopologyEvent::PeerLost {
            lost_peer_id: "gone".to_string(),
        };
        let evt = PeatMeshEvent::TopologyChanged(Box::new(topo_evt));
        let cloned = evt.clone();
        let debug = format!("{:?}", cloned);
        assert!(debug.contains("gone"));
    }

    // ── MeshStatus ───────────────────────────────────────────────

    #[test]
    fn test_mesh_status_debug() {
        let status = MeshStatus {
            state: MeshState::Running,
            peer_count: 5,
            node_id: "n1".to_string(),
            uptime: Duration::from_secs(120),
        };
        let debug = format!("{:?}", status);
        assert!(debug.contains("Running"));
        assert!(debug.contains("n1"));
    }

    #[test]
    fn test_mesh_status_clone() {
        let status = MeshStatus {
            state: MeshState::Stopped,
            peer_count: 0,
            node_id: "n2".to_string(),
            uptime: Duration::ZERO,
        };
        let cloned = status.clone();
        assert_eq!(cloned.state, MeshState::Stopped);
        assert_eq!(cloned.node_id, "n2");
    }

    // ── PeatMeshBuilder ──────────────────────────────────────────

    #[test]
    fn test_builder_minimal() {
        let mesh = PeatMeshBuilder::new(MeshConfig::default()).build();
        assert_eq!(mesh.state(), MeshState::Created);
        assert!(mesh.transport().is_none());
        assert!(mesh.hierarchy().is_none());
        assert!(mesh.router().is_none());
    }

    #[test]
    fn test_builder_with_node_id() {
        let cfg = MeshConfig {
            node_id: Some("builder-node".to_string()),
            ..Default::default()
        };
        let mesh = PeatMeshBuilder::new(cfg).build();
        assert_eq!(mesh.node_id(), "builder-node");
    }

    #[test]
    fn test_builder_with_transport() {
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_transport(Arc::new(MockTransport::empty()))
            .build();
        assert!(mesh.transport().is_some());
    }

    #[test]
    fn test_builder_with_hierarchy() {
        use crate::beacon::HierarchyLevel;
        use crate::hierarchy::{NodeRole, StaticHierarchyStrategy};

        let strategy = StaticHierarchyStrategy {
            assigned_level: HierarchyLevel::Squad,
            assigned_role: NodeRole::Member,
        };
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_hierarchy(Arc::new(strategy))
            .build();
        assert!(mesh.hierarchy().is_some());
    }

    #[test]
    fn test_builder_with_router() {
        let router = MeshRouter::with_node_id("test");
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_router(router)
            .build();
        assert!(mesh.router().is_some());
    }

    #[test]
    fn test_builder_all_subsystems() {
        use crate::beacon::HierarchyLevel;
        use crate::hierarchy::{NodeRole, StaticHierarchyStrategy};

        let strategy = StaticHierarchyStrategy {
            assigned_level: HierarchyLevel::Platoon,
            assigned_role: NodeRole::Leader,
        };
        let peers = vec![NodeId::new("p1".into())];
        let router = MeshRouter::with_node_id("full");

        let mesh = PeatMeshBuilder::new(MeshConfig {
            node_id: Some("full-node".to_string()),
            ..Default::default()
        })
        .with_transport(Arc::new(MockTransport::new(peers)))
        .with_hierarchy(Arc::new(strategy))
        .with_router(router)
        .build();

        assert_eq!(mesh.node_id(), "full-node");
        assert!(mesh.transport().is_some());
        assert!(mesh.hierarchy().is_some());
        assert!(mesh.router().is_some());
        assert_eq!(mesh.status().peer_count, 1);
    }

    #[test]
    fn test_builder_lifecycle() {
        let mesh = PeatMeshBuilder::new(MeshConfig::default()).build();
        assert!(mesh.start().is_ok());
        assert_eq!(mesh.state(), MeshState::Running);
        assert!(mesh.stop().is_ok());
        assert_eq!(mesh.state(), MeshState::Stopped);
    }

    // ── TransportManager integration ──────────────────────────────

    #[test]
    fn test_transport_manager_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.transport_manager().is_none());
    }

    #[test]
    fn test_set_transport_manager() {
        use crate::transport::TransportManagerConfig;
        let mut mesh = PeatMesh::new(MeshConfig::default());
        let tm = TransportManager::new(TransportManagerConfig::default());
        mesh.set_transport_manager(tm);
        assert!(mesh.transport_manager().is_some());
    }

    #[test]
    fn test_builder_with_transport_manager() {
        use crate::transport::TransportManagerConfig;
        let tm = TransportManager::new(TransportManagerConfig::default());
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_transport_manager(tm)
            .build();
        assert!(mesh.transport_manager().is_some());
    }

    #[test]
    fn test_builder_full_with_transport_manager() {
        use crate::beacon::HierarchyLevel;
        use crate::hierarchy::{NodeRole, StaticHierarchyStrategy};
        use crate::transport::TransportManagerConfig;

        let strategy = StaticHierarchyStrategy {
            assigned_level: HierarchyLevel::Platoon,
            assigned_role: NodeRole::Leader,
        };
        let peers = vec![NodeId::new("p1".into())];
        let router = MeshRouter::with_node_id("full");
        let tm = TransportManager::new(TransportManagerConfig::default());

        let mesh = PeatMeshBuilder::new(MeshConfig {
            node_id: Some("full-tm-node".to_string()),
            ..Default::default()
        })
        .with_transport(Arc::new(MockTransport::new(peers)))
        .with_transport_manager(tm)
        .with_hierarchy(Arc::new(strategy))
        .with_router(router)
        .build();

        assert_eq!(mesh.node_id(), "full-tm-node");
        assert!(mesh.transport().is_some());
        assert!(mesh.transport_manager().is_some());
        assert!(mesh.hierarchy().is_some());
        assert!(mesh.router().is_some());
    }

    // ── Gap 5: QoS policies ────────────────────────────────────────

    #[test]
    fn test_bandwidth_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.bandwidth().is_none());
    }

    #[test]
    fn test_set_bandwidth() {
        let mut mesh = PeatMesh::new(MeshConfig::default());
        mesh.set_bandwidth(crate::qos::BandwidthAllocation::new(1_000_000));
        assert!(mesh.bandwidth().is_some());
    }

    #[test]
    fn test_preemption_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.preemption().is_none());
    }

    #[test]
    fn test_set_preemption() {
        let mut mesh = PeatMesh::new(MeshConfig::default());
        mesh.set_preemption(crate::qos::PreemptionController::new());
        assert!(mesh.preemption().is_some());
    }

    #[test]
    fn test_builder_with_bandwidth() {
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_bandwidth(crate::qos::BandwidthAllocation::default_tactical())
            .build();
        assert!(mesh.bandwidth().is_some());
    }

    #[test]
    fn test_builder_with_preemption() {
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_preemption(crate::qos::PreemptionController::new())
            .build();
        assert!(mesh.preemption().is_some());
    }

    // ── Gap 6: Security primitives ─────────────────────────────────

    #[test]
    fn test_device_keypair_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.device_keypair().is_none());
    }

    #[test]
    fn test_set_device_keypair() {
        let mut mesh = PeatMesh::new(MeshConfig::default());
        mesh.set_device_keypair(crate::security::DeviceKeypair::generate());
        assert!(mesh.device_keypair().is_some());
    }

    #[test]
    fn test_formation_key_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.formation_key().is_none());
    }

    #[test]
    fn test_set_formation_key() {
        let mut mesh = PeatMesh::new(MeshConfig::default());
        mesh.set_formation_key(crate::security::FormationKey::new(
            "test-formation",
            &[0u8; 32],
        ));
        assert!(mesh.formation_key().is_some());
    }

    #[test]
    fn test_builder_with_device_keypair() {
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_device_keypair(crate::security::DeviceKeypair::generate())
            .build();
        assert!(mesh.device_keypair().is_some());
    }

    #[test]
    fn test_builder_with_device_keypair_from_seed() {
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_device_keypair_from_seed(b"k8s-secret", "pod-1")
            .unwrap()
            .build();
        assert!(mesh.device_keypair().is_some());

        // Same seed+context should produce the same device ID
        let mesh2 = PeatMeshBuilder::new(MeshConfig::default())
            .with_device_keypair_from_seed(b"k8s-secret", "pod-1")
            .unwrap()
            .build();
        assert_eq!(
            mesh.device_keypair().unwrap().device_id(),
            mesh2.device_keypair().unwrap().device_id()
        );
    }

    #[test]
    fn test_builder_with_formation_key() {
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_formation_key(crate::security::FormationKey::new("f1", &[1u8; 32]))
            .build();
        assert!(mesh.formation_key().is_some());
    }

    // ── Gap 3: Discovery strategy ──────────────────────────────────

    #[test]
    fn test_discovery_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh
            .discovery()
            .read()
            .unwrap_or_else(|e| e.into_inner())
            .is_none());
    }

    #[test]
    fn test_set_discovery() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let strategy = crate::discovery::HybridDiscovery::new();
        mesh.set_discovery(Box::new(strategy));
        assert!(mesh
            .discovery()
            .read()
            .unwrap_or_else(|e| e.into_inner())
            .is_some());
    }

    #[test]
    fn test_builder_with_discovery() {
        let strategy = crate::discovery::HybridDiscovery::new();
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_discovery(Box::new(strategy))
            .build();
        assert!(mesh
            .discovery()
            .read()
            .unwrap_or_else(|e| e.into_inner())
            .is_some());
    }

    // ── Gap 2: Beacon system ───────────────────────────────────────

    fn mock_storage() -> Arc<dyn crate::beacon::BeaconStorage> {
        Arc::new(crate::beacon::MockBeaconStorage::new())
    }

    #[test]
    fn test_beacon_broadcaster_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.beacon_broadcaster().is_none());
    }

    #[test]
    fn test_set_beacon_broadcaster() {
        use crate::beacon::{BeaconBroadcaster, GeoPosition, HierarchyLevel};

        let mut mesh = PeatMesh::new(MeshConfig::default());
        let bb = BeaconBroadcaster::new(
            mock_storage(),
            "test-node".to_string(),
            GeoPosition {
                lat: 0.0,
                lon: 0.0,
                alt: None,
            },
            HierarchyLevel::Squad,
            None,
            Duration::from_secs(5),
        );
        mesh.set_beacon_broadcaster(bb);
        assert!(mesh.beacon_broadcaster().is_some());
    }

    #[test]
    fn test_beacon_observer_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.beacon_observer().is_none());
    }

    #[test]
    fn test_set_beacon_observer() {
        use crate::beacon::BeaconObserver;

        let mut mesh = PeatMesh::new(MeshConfig::default());
        let bo = Arc::new(BeaconObserver::new(mock_storage(), "s00000".to_string()));
        mesh.set_beacon_observer(bo);
        assert!(mesh.beacon_observer().is_some());
    }

    #[test]
    fn test_beacon_janitor_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.beacon_janitor().is_none());
    }

    #[test]
    fn test_set_beacon_janitor() {
        use crate::beacon::BeaconJanitor;
        use std::collections::HashMap;

        let mut mesh = PeatMesh::new(MeshConfig::default());
        let nearby = Arc::new(tokio::sync::RwLock::new(HashMap::new()));
        let bj = BeaconJanitor::new(nearby, Duration::from_secs(60), Duration::from_secs(10));
        mesh.set_beacon_janitor(bj);
        assert!(mesh.beacon_janitor().is_some());
    }

    #[test]
    fn test_builder_with_beacon_broadcaster() {
        use crate::beacon::{BeaconBroadcaster, GeoPosition, HierarchyLevel};

        let bb = BeaconBroadcaster::new(
            mock_storage(),
            "builder-node".to_string(),
            GeoPosition {
                lat: 1.0,
                lon: 2.0,
                alt: None,
            },
            HierarchyLevel::Platoon,
            None,
            Duration::from_secs(5),
        );
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_beacon_broadcaster(bb)
            .build();
        assert!(mesh.beacon_broadcaster().is_some());
    }

    #[test]
    fn test_builder_with_beacon_observer() {
        use crate::beacon::BeaconObserver;

        let bo = Arc::new(BeaconObserver::new(mock_storage(), "s00000".to_string()));
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_beacon_observer(bo)
            .build();
        assert!(mesh.beacon_observer().is_some());
    }

    #[test]
    fn test_builder_with_beacon_janitor() {
        use crate::beacon::BeaconJanitor;
        use std::collections::HashMap;

        let nearby = Arc::new(tokio::sync::RwLock::new(HashMap::new()));
        let bj = BeaconJanitor::new(nearby, Duration::from_secs(60), Duration::from_secs(10));
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_beacon_janitor(bj)
            .build();
        assert!(mesh.beacon_janitor().is_some());
    }

    // ── Gap 1: Topology manager ────────────────────────────────────

    #[test]
    fn test_topology_manager_initially_none() {
        let mesh = PeatMesh::new(MeshConfig::default());
        assert!(mesh.topology_manager().is_none());
    }

    #[test]
    fn test_set_topology_manager() {
        use crate::beacon::{BeaconObserver, GeoPosition, HierarchyLevel};
        use crate::topology::{TopologyBuilder, TopologyConfig, TopologyManager};

        let mut mesh = PeatMesh::new(MeshConfig::default());
        let observer = Arc::new(BeaconObserver::new(mock_storage(), "s00000".to_string()));
        let builder = TopologyBuilder::new(
            TopologyConfig::default(),
            "topo-node".to_string(),
            GeoPosition {
                lat: 0.0,
                lon: 0.0,
                alt: None,
            },
            HierarchyLevel::Squad,
            None,
            observer,
        );
        let transport: Arc<dyn MeshTransport> = Arc::new(MockTransport::empty());
        let tm = TopologyManager::new(builder, transport);
        mesh.set_topology_manager(tm);
        assert!(mesh.topology_manager().is_some());
    }

    #[test]
    fn test_builder_with_topology_manager() {
        use crate::beacon::{BeaconObserver, GeoPosition, HierarchyLevel};
        use crate::topology::{TopologyBuilder, TopologyConfig, TopologyManager};

        let observer = Arc::new(BeaconObserver::new(mock_storage(), "s00000".to_string()));
        let builder = TopologyBuilder::new(
            TopologyConfig::default(),
            "topo-builder-node".to_string(),
            GeoPosition {
                lat: 0.0,
                lon: 0.0,
                alt: None,
            },
            HierarchyLevel::Squad,
            None,
            observer,
        );
        let transport: Arc<dyn MeshTransport> = Arc::new(MockTransport::empty());
        let tm = TopologyManager::new(builder, transport);
        let mesh = PeatMeshBuilder::new(MeshConfig::default())
            .with_topology_manager(tm)
            .build();
        assert!(mesh.topology_manager().is_some());
    }

    // ── Cancellation token ──────────────────────────────────────────

    #[test]
    fn test_child_token_not_cancelled_while_running() {
        let mesh = PeatMesh::new(MeshConfig::default());
        mesh.start().unwrap();
        let token = mesh.child_token();
        assert!(!token.is_cancelled());
    }

    #[test]
    fn test_child_token_cancelled_after_stop() {
        let mesh = PeatMesh::new(MeshConfig::default());
        mesh.start().unwrap();
        let token = mesh.child_token();
        mesh.stop().unwrap();
        assert!(token.is_cancelled());
    }

    #[test]
    fn test_child_token_reset_on_restart() {
        let mesh = PeatMesh::new(MeshConfig::default());
        mesh.start().unwrap();
        let first_token = mesh.child_token();
        mesh.stop().unwrap();
        assert!(first_token.is_cancelled());

        // Re-start: new token should be fresh (uncancelled)
        mesh.start().unwrap();
        let second_token = mesh.child_token();
        assert!(!second_token.is_cancelled());

        // First token remains cancelled (it belonged to the old lifecycle)
        assert!(first_token.is_cancelled());
    }
}

// ─── Broker feature tests ────────────────────────────────────────────────────

#[cfg(all(test, feature = "broker"))]
mod broker_tests {
    use super::*;
    use crate::broker::state::MeshBrokerState;
    use crate::config::MeshConfig;

    #[test]
    fn test_broker_node_info() {
        let mesh = PeatMesh::new(MeshConfig {
            node_id: Some("broker-node".to_string()),
            ..Default::default()
        });
        let info = mesh.node_info();
        assert_eq!(info.node_id, "broker-node");
        assert_eq!(info.uptime_secs, 0);
        assert!(!info.version.is_empty());
    }

    #[test]
    fn test_broker_node_info_with_uptime() {
        let mesh = PeatMesh::new(MeshConfig {
            node_id: Some("uptime-node".to_string()),
            ..Default::default()
        });
        mesh.start().unwrap();
        let info = mesh.node_info();
        assert_eq!(info.node_id, "uptime-node");
        // uptime_secs might be 0 on a fast machine, that's OK
    }

    #[tokio::test]
    async fn test_broker_list_peers_no_transport() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let peers = mesh.list_peers().await;
        assert!(peers.is_empty());
    }

    #[tokio::test]
    async fn test_broker_get_peer_no_transport() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let peer = mesh.get_peer("unknown").await;
        assert!(peer.is_none());
    }

    #[test]
    fn test_broker_topology() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let topo = mesh.topology();
        assert_eq!(topo.peer_count, 0);
        assert_eq!(topo.role, "standalone");
        assert_eq!(topo.hierarchy_level, 0);
    }

    #[test]
    fn test_broker_subscribe_events() {
        let mesh = PeatMesh::new(MeshConfig::default());
        let _rx = MeshBrokerState::subscribe_events(&mesh);
        // Receiver is valid (won't panic)
    }

    #[test]
    fn test_broker_event_bridge() {
        use crate::broker::state::MeshEvent;

        let mesh = PeatMesh::new(MeshConfig::default());
        let mut rx = MeshBrokerState::subscribe_events(&mesh);

        // Emit a broker event via the public API
        mesh.emit_mesh_event(MeshEvent::PeerConnected {
            peer_id: "test-peer".into(),
        });

        // Receiver should get it
        let event = rx.try_recv().unwrap();
        assert!(matches!(
            event,
            MeshEvent::PeerConnected { ref peer_id } if peer_id == "test-peer"
        ));
    }

    #[test]
    fn test_broker_event_bridge_start_emits_topology() {
        use crate::broker::state::MeshEvent;

        let mesh = PeatMesh::new(MeshConfig::default());
        let mut rx = MeshBrokerState::subscribe_events(&mesh);

        mesh.start().unwrap();

        let event = rx.try_recv().unwrap();
        assert!(matches!(
            event,
            MeshEvent::TopologyChanged { ref new_role, peer_count: 0 } if new_role == "standalone"
        ));
    }

    #[test]
    fn test_broker_event_bridge_stop_emits_topology() {
        use crate::broker::state::MeshEvent;

        let mesh = PeatMesh::new(MeshConfig::default());
        mesh.start().unwrap();

        let mut rx = MeshBrokerState::subscribe_events(&mesh);
        mesh.stop().unwrap();

        let event = rx.try_recv().unwrap();
        assert!(matches!(
            event,
            MeshEvent::TopologyChanged { ref new_role, peer_count: 0 } if new_role == "stopped"
        ));
    }
}