x0x 0.19.46

//! MLS group encryption CLI commands.

use crate::cli::{print_value, DaemonClient};
use anyhow::Result;
use base64::Engine;

/// `x0x groups [list]` — GET /mls/groups
pub async fn list(client: &DaemonClient) -> Result<()> {
    client.ensure_running().await?;
    let resp = client.get("/mls/groups").await?;
    print_value(client.format(), &resp);
    Ok(())
}

/// `x0x groups create` — POST /mls/groups
pub async fn create(client: &DaemonClient, id: Option<&str>) -> Result<()> {
    client.ensure_running().await?;
    let body = match id {
        Some(group_id) => serde_json::json!({ "group_id": group_id }),
        None => serde_json::json!({}),
    };
    let resp = client.post("/mls/groups", &body).await?;
    print_value(client.format(), &resp);
    Ok(())
}

/// `x0x groups get` — GET /mls/groups/:id
pub async fn get(client: &DaemonClient, group_id: &str) -> Result<()> {
    client.ensure_running().await?;
    let resp = client.get(&format!("/mls/groups/{group_id}")).await?;
    print_value(client.format(), &resp);
    Ok(())
}

/// `x0x groups add-member` — POST /mls/groups/:id/members
pub async fn add_member(client: &DaemonClient, group_id: &str, agent_id: &str) -> Result<()> {
    client.ensure_running().await?;
    let body = serde_json::json!({ "agent_id": agent_id });
    let resp = client
        .post(&format!("/mls/groups/{group_id}/members"), &body)
        .await?;
    print_value(client.format(), &resp);
    Ok(())
}

/// `x0x groups remove-member` — DELETE /mls/groups/:id/members/:agent_id
pub async fn remove_member(client: &DaemonClient, group_id: &str, agent_id: &str) -> Result<()> {
    client.ensure_running().await?;
    let resp = client
        .delete(&format!("/mls/groups/{group_id}/members/{agent_id}"))
        .await?;
    print_value(client.format(), &resp);
    Ok(())
}

/// `x0x groups encrypt` — POST /mls/groups/:id/encrypt
pub async fn encrypt(client: &DaemonClient, group_id: &str, payload: &str) -> Result<()> {
    client.ensure_running().await?;
    let encoded = base64::engine::general_purpose::STANDARD.encode(payload.as_bytes());
    let body = serde_json::json!({ "payload": encoded });
    let resp = client
        .post(&format!("/mls/groups/{group_id}/encrypt"), &body)
        .await?;
    print_value(client.format(), &resp);
    Ok(())
}

/// `x0x groups decrypt` — POST /mls/groups/:id/decrypt
pub async fn decrypt(
    client: &DaemonClient,
    group_id: &str,
    ciphertext: &str,
    epoch: u64,
) -> Result<()> {
    client.ensure_running().await?;
    let body = serde_json::json!({
        "ciphertext": ciphertext,
        "epoch": epoch,
    });
    let resp = client
        .post(&format!("/mls/groups/{group_id}/decrypt"), &body)
        .await?;
    print_value(client.format(), &resp);
    Ok(())
}

/// `x0x groups welcome` — POST /mls/groups/:id/welcome
pub async fn welcome(client: &DaemonClient, group_id: &str, agent_id: &str) -> Result<()> {
    client.ensure_running().await?;
    let body = serde_json::json!({ "agent_id": agent_id });
    let resp = client
        .post(&format!("/mls/groups/{group_id}/welcome"), &body)
        .await?;
    print_value(client.format(), &resp);
    Ok(())
}

#[cfg(test)]
mod tests {
    #![allow(clippy::unwrap_used)]
    use super::*;
    use crate::cli::DaemonClient;

    /// Start a mock axum server that returns the given JSON for any request.
    #[allow(dead_code)]
    async fn start_mock_server(
        response_json: serde_json::Value,
    ) -> (String, tokio::sync::oneshot::Sender<()>) {
        use std::sync::Arc;

        let json = Arc::new(response_json);
        let app = axum::Router::new().fallback(move |_req: axum::extract::Request| {
            let json = Arc::clone(&json);
            async move {
                let body = serde_json::to_vec(&*json).unwrap();
                axum::response::Response::builder()
                    .status(200)
                    .header("content-type", "application/json")
                    .body(axum::body::Body::from(body))
                    .unwrap()
            }
        });

        let listener = tokio::net::TcpListener::bind("127.0.0.1:0").await.unwrap();
        let addr = listener.local_addr().unwrap();
        let (tx, rx) = tokio::sync::oneshot::channel::<()>();

        tokio::spawn(async move {
            axum::serve(listener, app.into_make_service())
                .with_graceful_shutdown(async {
                    rx.await.ok();
                })
                .await
                .ok();
        });

        tokio::time::sleep(std::time::Duration::from_millis(50)).await;

        (format!("http://{}", addr), tx)
    }

    #[tokio::test]
    async fn list_returns_mock_response() {
        let mock_resp = serde_json::json!({"status": "ok"});
        let (url, _shutdown) = start_mock_server(mock_resp).await;
        let client = DaemonClient::new(None, Some(&url), crate::cli::OutputFormat::Json).unwrap();
        let result = list(&client).await;
        assert!(result.is_ok(), "list should succeed: {:?}", result);
    }
    #[tokio::test]
    async fn get_returns_mock_response() {
        let mock_resp = serde_json::json!({"status": "ok"});
        let (url, _shutdown) = start_mock_server(mock_resp).await;
        let client = DaemonClient::new(None, Some(&url), crate::cli::OutputFormat::Json).unwrap();
        let result = get(&client, "group-123").await;
        assert!(result.is_ok(), "get should succeed: {:?}", result);
    }

    #[tokio::test]
    async fn create_returns_mock_response() {
        let mock_resp = serde_json::json!({"status": "ok"});
        let (url, _shutdown) = start_mock_server(mock_resp).await;
        let client = DaemonClient::new(None, Some(&url), crate::cli::OutputFormat::Json).unwrap();
        let result = create(&client, Some("group-id")).await;
        assert!(result.is_ok(), "create should succeed: {:?}", result);
    }
    #[tokio::test]
    async fn add_member_returns_mock_response() {
        let mock_resp = serde_json::json!({"status": "ok"});
        let (url, _shutdown) = start_mock_server(mock_resp).await;
        let client = DaemonClient::new(None, Some(&url), crate::cli::OutputFormat::Json).unwrap();
        let result = add_member(&client, "group-1", "agent-1").await;
        assert!(result.is_ok(), "add_member should succeed: {:?}", result);
    }
    #[tokio::test]
    async fn remove_member_returns_mock_response() {
        let mock_resp = serde_json::json!({"status": "ok"});
        let (url, _shutdown) = start_mock_server(mock_resp).await;
        let client = DaemonClient::new(None, Some(&url), crate::cli::OutputFormat::Json).unwrap();
        let result = remove_member(&client, "group-1", "agent-1").await;
        assert!(result.is_ok(), "remove_member should succeed: {:?}", result);
    }
    #[tokio::test]
    async fn encrypt_returns_mock_response() {
        let mock_resp = serde_json::json!({"status": "ok"});
        let (url, _shutdown) = start_mock_server(mock_resp).await;
        let client = DaemonClient::new(None, Some(&url), crate::cli::OutputFormat::Json).unwrap();
        let result = encrypt(&client, "group-1", "hello").await;
        assert!(result.is_ok(), "encrypt should succeed: {:?}", result);
    }
    #[tokio::test]
    async fn welcome_returns_mock_response() {
        let mock_resp = serde_json::json!({"status": "ok"});
        let (url, _shutdown) = start_mock_server(mock_resp).await;
        let client = DaemonClient::new(None, Some(&url), crate::cli::OutputFormat::Json).unwrap();
        let result = welcome(&client, "group-1", "agent-1").await;
        assert!(result.is_ok(), "welcome should succeed: {:?}", result);
    }
}