pitchfork_cli/

template.rs

//! Tera template rendering for pitchfork.toml configuration fields.
//!
//! Allows `run`, `env` values, `hooks.*`, the readiness fields (`ready_cmd`,
//! `ready_http`, `ready_port`, `ready_output`), and the health check fields
//! (`health_cmd`, `health_http`, `health_port`) to use Tera templates like
//! `{{ daemons.redis.ports[0] }}` to reference computed values from other daemons.
//!
//! Templates are resolved level-by-level along the dependency order: each level
//! can reference daemons from previous levels (which have already started and
//! had their ports resolved).

use crate::daemon_id::DaemonId;
use crate::pitchfork_toml::PitchforkTomlDaemon;
use crate::settings::settings;
use indexmap::IndexMap;
use std::collections::HashMap;
use std::path::PathBuf;

// ---------------------------------------------------------------------------
// DaemonTemplateState
// ---------------------------------------------------------------------------

/// Resolved state of a daemon available for template rendering.
#[derive(Debug, Clone)]
pub struct DaemonTemplateState {
    pub ports: Vec<u16>,
    pub id: String,
    pub name: String,
    pub namespace: String,
    pub slug: Option<String>,
    /// Hostname the proxy routes to this daemon, without the TLD.
    pub host: Option<String>,
    pub dir: PathBuf,
}

impl DaemonTemplateState {
    fn port(&self) -> Option<u16> {
        self.ports.first().copied()
    }
}

// ---------------------------------------------------------------------------
// TemplateContext
// ---------------------------------------------------------------------------

/// Context for rendering Tera templates in pitchfork.toml fields.
pub struct TemplateContext {
    self_state: DaemonTemplateState,
    daemon_states: HashMap<String, DaemonTemplateState>,
    /// Rendered environment variables for the current daemon, exposed as `env`
    /// in templates (e.g. `{{ env.GRAM_HOST }}`). Set via [`set_env`] after env
    /// values have been rendered, so it is `None` during env-value rendering
    /// itself (preventing self-reference cycles).
    env: Option<IndexMap<String, String>>,
}

impl TemplateContext {
    /// Build a template context for a daemon.
    ///
    /// - `id`: the daemon being rendered
    /// - `daemon_config`: its pitchfork.toml config
    /// - `resolved_daemons`: map of daemon ID -> resolved ports from previous levels
    /// - `daemon_configs`: the full PitchforkToml.daemons map for looking up dir/slug
    pub fn new(
        id: &DaemonId,
        daemon_config: &PitchforkTomlDaemon,
        resolved_daemons: &HashMap<DaemonId, Vec<u16>>,
        daemon_configs: &IndexMap<DaemonId, PitchforkTomlDaemon>,
    ) -> Self {
        let global_slugs = crate::pitchfork_toml::PitchforkToml::read_global_slugs();
        // Deriving a hostname reads configuration and walks the project's
        // checkouts. With the proxy off there is no URL to render either way,
        // so `{{ host }}` and `{{ url }}` are null and the work is skipped.
        let proxy_enabled = settings().proxy.enable;
        let host_of = |id: &DaemonId, config: &PitchforkTomlDaemon| {
            proxy_enabled
                .then(|| crate::proxy::hostname::host_for_daemon(id, Some(config), &global_slugs))
                .flatten()
        };
        let effective_user = daemon_config.effective_user();
        let dir = crate::ipc::batch::resolve_daemon_dir(
            daemon_config.dir.as_deref(),
            daemon_config.path.as_deref(),
            effective_user.as_deref(),
        );

        let self_state = DaemonTemplateState {
            ports: Vec::new(),
            id: id.qualified(),
            name: id.name().to_string(),
            namespace: id.namespace().to_string(),
            slug: crate::pitchfork_toml::PitchforkToml::find_slug_for_daemon_in_registry(
                id,
                &global_slugs,
            ),
            host: host_of(id, daemon_config),
            dir,
        };

        let mut daemon_states = HashMap::new();
        for (dep_id, ports) in resolved_daemons {
            if let Some(config) = daemon_configs.get(dep_id) {
                let dep_effective_user = config.effective_user();
                let dep_dir = crate::ipc::batch::resolve_daemon_dir(
                    config.dir.as_deref(),
                    config.path.as_deref(),
                    dep_effective_user.as_deref(),
                );
                let state = DaemonTemplateState {
                    ports: ports.clone(),
                    id: dep_id.qualified(),
                    name: dep_id.name().to_string(),
                    namespace: dep_id.namespace().to_string(),
                    slug: crate::pitchfork_toml::PitchforkToml::find_slug_for_daemon_in_registry(
                        dep_id,
                        &global_slugs,
                    ),
                    host: host_of(dep_id, config),
                    dir: dep_dir,
                };

                // Short names are only valid within the current namespace.
                if dep_id.namespace() == id.namespace() {
                    daemon_states.insert(dep_id.name().to_string(), state.clone());
                }

                // Register with qualified key (namespace.name) for all namespaces.
                daemon_states.insert(qualified_key(dep_id), state);
            }
        }

        Self {
            self_state,
            daemon_states,
            env: None,
        }
    }

    /// Set the rendered environment variables to expose as `env` in templates.
    ///
    /// Call this **after** rendering env values so that other fields (`run`,
    /// `hooks`, `ready_*`) can reference `{{ env.X }}` with the final value.
    pub fn set_env(&mut self, env: IndexMap<String, String>) {
        self.env = Some(env);
    }

    /// Convert this context into a Tera Context for rendering.
    pub fn to_tera_context(&self) -> tera::Context {
        let mut ctx = tera::Context::new();

        // Self variables
        ctx.insert("name", &self.self_state.name);
        ctx.insert("namespace", &self.self_state.namespace);
        ctx.insert("id", &self.self_state.id);
        ctx.insert("slug", &self.self_state.slug);
        ctx.insert("host", &self.self_state.host);
        ctx.insert("dir", &self.self_state.dir.to_string_lossy().to_string());

        // Daemons
        let mut daemons_map = serde_json::Map::new();
        for (name, state) in &self.daemon_states {
            if daemons_map.contains_key(name) {
                continue;
            }
            daemons_map.insert(name.clone(), daemon_state_to_json(state));
        }
        ctx.insert("daemons", &serde_json::Value::Object(daemons_map));

        // Settings
        let s = settings();
        ctx.insert(
            "settings",
            &serde_json::json!({
                "proxy": {
                    "enable": s.proxy.enable,
                    "tld": s.proxy.tld,
                    "port": s.proxy.port,
                    "https": s.proxy.https,
                }
            }),
        );

        // Always expose proxy_url so templates can distinguish an unroutable daemon
        // via a strict null value instead of an undefined-variable error.
        let proxy_url = crate::proxy::build_proxy_url(self.self_state.host.as_deref(), &s);
        ctx.insert("proxy_url", &proxy_url);
        // `url` is the current spelling; `proxy_url` stays for existing configs.
        ctx.insert("url", &proxy_url);

        // Rendered env for this daemon (set via set_env after env rendering)
        if let Some(ref env) = self.env {
            let map: serde_json::Map<String, serde_json::Value> = env
                .iter()
                .map(|(k, v)| (k.clone(), serde_json::Value::String(v.clone())))
                .collect();
            ctx.insert("env", &serde_json::Value::Object(map));
        }

        ctx
    }
}

fn daemon_state_to_json(state: &DaemonTemplateState) -> serde_json::Value {
    serde_json::json!({
        "port": state.port(),
        "ports": state.ports,
        "id": state.id,
        "name": state.name,
        "namespace": state.namespace,
        "slug": state.slug,
        "host": state.host,
        "url": crate::proxy::build_proxy_url(state.host.as_deref(), &settings()),
        "dir": state.dir.to_string_lossy(),
    })
}

/// Convert a DaemonId into a template key using `namespace.name` format.
/// E.g. `myproj/redis` -> `myproj.redis`
fn qualified_key(id: &DaemonId) -> String {
    format!("{}.{}", id.namespace(), id.name())
}

// ---------------------------------------------------------------------------
// Env merge + render helpers
// ---------------------------------------------------------------------------

/// Merge top-level env with per-daemon env. Per-daemon values win on conflicts.
pub(crate) fn merge_env(
    top: Option<&IndexMap<String, String>>,
    daemon: Option<&IndexMap<String, String>>,
) -> Option<IndexMap<String, String>> {
    match (top, daemon) {
        (None, None) => None,
        (Some(t), None) => Some(t.clone()),
        (None, Some(d)) => Some(d.clone()),
        (Some(t), Some(d)) => {
            let mut merged = t.clone();
            for (k, v) in d {
                merged.insert(k.clone(), v.clone());
            }
            Some(merged)
        }
    }
}

/// Merge top-level and per-daemon env, render template values, and return the
/// rendered env. Used by hook rendering where the daemon config is not mutated.
///
/// Env values are rendered with a context that does **not** include `env`
/// itself, preventing self-reference cycles. Callers that want `{{ env.X }}`
/// available in subsequent rendering should set the result on the context via
/// [`TemplateContext::set_env`].
pub fn render_env(
    top_env: Option<&IndexMap<String, String>>,
    daemon_env: Option<&IndexMap<String, String>>,
    context: &TemplateContext,
) -> Result<Option<IndexMap<String, String>>, RenderError> {
    let Some(merged) = merge_env(top_env, daemon_env) else {
        return Ok(None);
    };
    let mut renderer = TemplateRenderer::new(context);
    let rendered: IndexMap<String, String> = merged
        .iter()
        .map(|(k, v)| Ok((k.clone(), renderer.render(v)?)))
        .collect::<Result<_, _>>()?;
    Ok(Some(rendered))
}

// ---------------------------------------------------------------------------
// Rendering
// ---------------------------------------------------------------------------

/// Render a Tera template string with the given context.
///
/// Returns the rendered string, or an error describing what went wrong.
/// Fast path: strings without `{{` or `{%` are returned as-is.
pub fn render_template(template: &str, context: &TemplateContext) -> Result<String, RenderError> {
    TemplateRenderer::new(context).render(template)
}

/// Render all template-enabled fields of a daemon config.
///
/// Top-level `env` (from `[env]` in pitchfork.toml) is merged into the daemon's
/// own `env` as defaults — per-daemon values win on key conflicts. Env values
/// are rendered first (with a context that excludes `env` itself, preventing
/// self-reference cycles), then the rendered env is exposed as `{{ env.X }}`
/// for the remaining fields (`run`, `hooks`, `ready_*`).
///
/// Modifies the config in place. Returns the first error encountered from
/// non-hook fields (`run`, `env`, `ready_*`). Hook template errors are
/// logged as warnings and the hook is set to `None` — hooks are re-rendered
/// at fire time via `fire_hook`, so pre-rendered hook strings are unused.
pub fn render_daemon_templates(
    config: &mut PitchforkTomlDaemon,
    context: &mut TemplateContext,
    top_env: Option<&IndexMap<String, String>>,
) -> Result<(), RenderError> {
    // Phase 1: merge top-level env into the daemon's env (per-daemon wins) and
    // render env values. `env` is NOT yet in the context, so env values cannot
    // reference {{ env.* }} (preventing cycles). render_env builds its own
    // short-lived renderer without env in scope.
    let rendered_env = render_env(top_env, config.env.as_ref(), context)?;
    config.env = rendered_env;

    // Phase 2: expose the rendered env on the context as the authoritative
    // state, so to_tera_context() (used by TemplateRenderer::new) includes it.
    if let Some(ref env) = config.env {
        context.set_env(env.clone());
    }

    let mut renderer = TemplateRenderer::new(context);

    config.run = renderer.render(&config.run)?;

    if let Some(ref hooks) = config.hooks {
        let rendered = crate::config_types::PitchforkTomlHooks {
            on_ready: hooks
                .on_ready
                .as_deref()
                .and_then(|t| renderer.render(t).ok()),
            on_fail: hooks
                .on_fail
                .as_deref()
                .and_then(|t| renderer.render(t).ok()),
            on_retry: hooks
                .on_retry
                .as_deref()
                .and_then(|t| renderer.render(t).ok()),
            on_stop: hooks
                .on_stop
                .as_deref()
                .and_then(|t| renderer.render(t).ok()),
            on_exit: hooks
                .on_exit
                .as_deref()
                .and_then(|t| renderer.render(t).ok()),
            on_output: hooks.on_output.as_ref().and_then(|hook| {
                renderer
                    .render(&hook.run)
                    .ok()
                    .map(|run| crate::config_types::OnOutputHook {
                        run,
                        filter: hook.filter.clone(),
                        regex: hook.regex.clone(),
                        debounce: hook.debounce.clone(),
                    })
            }),
        };
        config.hooks = Some(rendered);
    }

    if let Some(ref cmd) = config.ready_cmd {
        config.ready_cmd = Some(crate::pitchfork_toml::ReadyCmd {
            run: renderer.render(&cmd.run)?,
            timeout: cmd.timeout,
        });
    }

    if let Some(ref hc) = config.health_cmd {
        config.health_cmd = Some(crate::pitchfork_toml::HealthCmd {
            run: renderer.render(&hc.run)?,
            interval: hc.interval,
            timeout: hc.timeout,
            retries: hc.retries,
        });
    }

    if let Some(ref http) = config.health_http {
        let mut http = http.clone();
        http.url = renderer.render(&http.url)?;
        config.health_http = Some(http);
    }

    if let Some(ref health_port) = config.health_port
        && let Some(ref template) = health_port.template
    {
        let rendered = renderer.render(template)?;
        let port = rendered
            .trim()
            .parse::<u16>()
            .ok()
            .filter(|&p| p > 0)
            .ok_or_else(|| RenderError::InvalidPort {
                field: "health_port",
                template: template.clone(),
                rendered: rendered.clone(),
            })?;
        config.health_port = Some(crate::config_types::HealthPort {
            port: Some(port),
            template: None,
            interval: health_port.interval,
            retries: health_port.retries,
            timeout: health_port.timeout,
        });
    }

    if let Some(ref output) = config.ready_output {
        let pattern = renderer.render(&output.pattern)?;
        config.ready_output = Some(crate::config_types::ReadyOutput {
            pattern,
            timeout: output.timeout,
        });
    }

    if let Some(ref http) = config.ready_http {
        let mut http = http.clone();
        http.url = renderer.render(&http.url)?;
        config.ready_http = Some(http);
    }

    if let Some(ref ready_port) = config.ready_port
        && let Some(ref template) = ready_port.template
    {
        let rendered = renderer.render(template)?;
        let port = rendered
            .trim()
            .parse::<u16>()
            .ok()
            .filter(|&p| p > 0)
            .ok_or_else(|| RenderError::InvalidPort {
                field: "ready_port",
                template: template.clone(),
                rendered: rendered.clone(),
            })?;
        config.ready_port = Some(crate::config_types::ReadyPort {
            port: Some(port),
            template: None,
            timeout: ready_port.timeout,
        });
    }

    Ok(())
}

fn contains_template_syntax(template: &str) -> bool {
    template.contains("{{") || template.contains("{%") || template.contains("{#")
}

struct TemplateRenderer {
    tera: tera::Tera,
    context: tera::Context,
    next_template_id: usize,
}

impl TemplateRenderer {
    fn new(context: &TemplateContext) -> Self {
        let mut tera = tera::Tera::default();
        tera.register_filter(
            "default",
            |value: &tera::Value,
             kwargs: tera::Kwargs,
             _: &tera::State|
             -> tera::TeraResult<tera::Value> {
                let default_val = kwargs.must_get::<tera::Value>("value")?;
                let boolean = kwargs.get::<bool>("boolean")?.unwrap_or_default();
                if value.is_undefined() || value.is_none() || (boolean && !value.is_truthy()) {
                    Ok(default_val)
                } else {
                    Ok(value.clone())
                }
            },
        );
        Self {
            tera,
            context: context.to_tera_context(),
            next_template_id: 0,
        }
    }

    fn render(&mut self, template: &str) -> Result<String, RenderError> {
        if !contains_template_syntax(template) {
            return Ok(template.to_string());
        }

        let template_name = format!("config_{}", self.next_template_id);
        self.next_template_id += 1;

        self.tera
            .add_raw_template(&template_name, template)
            .map_err(|e| RenderError::TemplateSyntax {
                template: template.to_string(),
                source: e,
            })?;

        self.tera
            .render(&template_name, &self.context)
            .map_err(|e| RenderError::RenderFailed {
                template: template.to_string(),
                source: e,
            })
    }
}

// ---------------------------------------------------------------------------
// RenderError
// ---------------------------------------------------------------------------

#[derive(Debug, thiserror::Error)]
pub enum RenderError {
    #[error("template syntax error in {template:?}: {source}")]
    TemplateSyntax {
        template: String,
        source: tera::Error,
    },
    #[error("template render failed for {template:?}: {source}")]
    RenderFailed {
        template: String,
        source: tera::Error,
    },
    #[error(
        "{field} template {template:?} rendered to {rendered:?}, expected a port number (1-65535)"
    )]
    InvalidPort {
        field: &'static str,
        template: String,
        rendered: String,
    },
}

// ---------------------------------------------------------------------------
// Tests
// ---------------------------------------------------------------------------

#[cfg(test)]
mod tests {
    use super::*;

    fn make_daemon_config(run: &str) -> PitchforkTomlDaemon {
        PitchforkTomlDaemon {
            run: run.to_string(),
            ..Default::default()
        }
    }

    fn make_context_with_daemon(name: &str, ports: Vec<u16>) -> TemplateContext {
        let id = DaemonId::new("myproj", name);
        let config = make_daemon_config("echo");
        let mut resolved = HashMap::new();
        resolved.insert(id.clone(), ports);
        let mut configs = IndexMap::new();
        configs.insert(id.clone(), make_daemon_config("echo"));
        TemplateContext::new(
            &DaemonId::new("myproj", "self"),
            &config,
            &resolved,
            &configs,
        )
    }

    #[test]
    fn test_no_template_passthrough() {
        let ctx = make_context_with_daemon("redis", vec![6379]);
        assert_eq!(render_template("hello world", &ctx).unwrap(), "hello world");
    }

    #[test]
    fn test_self_variables() {
        let id = DaemonId::new("myproj", "api");
        let config = make_daemon_config("echo");
        let ctx = TemplateContext::new(&id, &config, &HashMap::new(), &IndexMap::new());

        assert_eq!(render_template("{{ name }}", &ctx).unwrap(), "api");
        assert_eq!(render_template("{{ namespace }}", &ctx).unwrap(), "myproj");
        assert_eq!(render_template("{{ id }}", &ctx).unwrap(), "myproj/api");
    }

    #[test]
    fn test_daemon_port_reference() {
        let ctx = make_context_with_daemon("redis", vec![6379]);
        assert_eq!(
            render_template("{{ daemons.redis.port }}", &ctx).unwrap(),
            "6379"
        );
    }

    #[test]
    fn test_daemon_ports_array() {
        let ctx = make_context_with_daemon("redis", vec![6379, 6380]);
        assert_eq!(
            render_template("{{ daemons.redis.ports[0] }}", &ctx).unwrap(),
            "6379"
        );
        assert_eq!(
            render_template("{{ daemons.redis.ports[1] }}", &ctx).unwrap(),
            "6380"
        );
    }

    #[test]
    fn test_daemon_qualified_name() {
        let ctx = make_context_with_daemon("redis", vec![6379]);
        assert_eq!(
            render_template("{{ daemons[\"myproj.redis\"].port }}", &ctx).unwrap(),
            "6379"
        );
    }

    #[test]
    fn test_short_name_only_matches_current_namespace() {
        let self_id = DaemonId::new("app", "api");
        let self_config = make_daemon_config("echo");
        let other_id = DaemonId::new("infra", "redis");

        let mut resolved = HashMap::new();
        resolved.insert(other_id.clone(), vec![6379]);

        let mut configs = IndexMap::new();
        configs.insert(other_id.clone(), make_daemon_config("echo"));

        let ctx = TemplateContext::new(&self_id, &self_config, &resolved, &configs);

        assert!(render_template("{{ daemons.redis.port }}", &ctx).is_err());
        assert_eq!(
            render_template("{{ daemons[\"infra.redis\"].port }}", &ctx).unwrap(),
            "6379"
        );
    }

    #[test]
    fn test_settings_reference() {
        let ctx = make_context_with_daemon("redis", vec![6379]);
        let result = render_template("{{ settings.proxy.tld }}", &ctx).unwrap();
        // Default TLD is "localhost"
        assert_eq!(result, "localhost");
    }

    #[test]
    fn test_undefined_variable_error() {
        let ctx = make_context_with_daemon("redis", vec![6379]);
        let result = render_template("{{ nonexistent }}", &ctx);
        assert!(result.is_err());
    }

    #[test]
    fn test_comment_only_template_is_parsed() {
        let ctx = make_context_with_daemon("redis", vec![6379]);
        assert_eq!(
            render_template("before{# hidden #}after", &ctx).unwrap(),
            "beforeafter"
        );
    }

    #[test]
    fn test_proxy_url_is_present_as_null_when_slug_is_missing() {
        let id = DaemonId::new("myproj", "api");
        let config = make_daemon_config("echo");
        let ctx = TemplateContext::new(&id, &config, &HashMap::new(), &IndexMap::new());

        assert_eq!(
            render_template("{{ proxy_url | default(value=\"none\") }}", &ctx).unwrap(),
            "none"
        );
    }

    /// The daemon being rendered and a daemon it references resolve their
    /// hostnames the same way, so `{{ host }}` is never populated while
    /// `{{ daemons.*.host }}` is null — whether or not the proxy is enabled.
    #[test]
    fn test_self_and_referenced_hosts_agree() {
        let id = DaemonId::try_new("myproj", "api").unwrap();
        let config = PitchforkTomlDaemon {
            run: "server".to_string(),
            port: Some(crate::config_types::PortConfig {
                expect: vec![3000],
                ..Default::default()
            }),
            ..PitchforkTomlDaemon::default()
        };
        let mut configs = IndexMap::new();
        configs.insert(id.clone(), config.clone());
        let mut resolved = HashMap::new();
        resolved.insert(id.clone(), vec![3000]);

        let ctx = TemplateContext::new(&id, &config, &resolved, &configs);
        assert_eq!(
            ctx.self_state.host,
            ctx.daemon_states.get("api").unwrap().host
        );
    }

    #[test]
    fn test_mixed_template_and_literal() {
        let ctx = make_context_with_daemon("redis", vec![6379]);
        assert_eq!(
            render_template("redis://localhost:{{ daemons.redis.port }}/0", &ctx).unwrap(),
            "redis://localhost:6379/0"
        );
    }

    #[test]
    fn test_render_daemon_templates_run() {
        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "redis-cli -p {{ daemons.redis.port }}".to_string(),
            ..Default::default()
        };
        render_daemon_templates(&mut config, &mut ctx, None).unwrap();
        assert_eq!(config.run, "redis-cli -p 6379");
    }

    #[test]
    fn test_render_daemon_templates_env() {
        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            env: Some(IndexMap::from([
                (
                    "DATABASE_URL".to_string(),
                    "redis://localhost:{{ daemons.redis.port }}/0".to_string(),
                ),
                ("STATIC_VAR".to_string(), "unchanged".to_string()),
            ])),
            ..Default::default()
        };
        render_daemon_templates(&mut config, &mut ctx, None).unwrap();
        let env = config.env.unwrap();
        assert_eq!(env["DATABASE_URL"], "redis://localhost:6379/0");
        assert_eq!(env["STATIC_VAR"], "unchanged");
    }

    #[test]
    fn test_top_level_env_merged_as_defaults() {
        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let top_env = IndexMap::from([
            ("GRAM_HOST".to_string(), "localhost".to_string()),
            (
                "GRAM_URL".to_string(),
                "redis://{{ daemons.redis.port }}".to_string(),
            ),
        ]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            env: Some(IndexMap::from([(
                "GRAM_HOST".to_string(),
                "0.0.0.0".to_string(),
            )])),
            ..Default::default()
        };
        render_daemon_templates(&mut config, &mut ctx, Some(&top_env)).unwrap();
        let env = config.env.unwrap();
        // per-daemon wins
        assert_eq!(env["GRAM_HOST"], "0.0.0.0");
        // top-level default with template rendered
        assert_eq!(env["GRAM_URL"], "redis://6379");
    }

    #[test]
    fn test_env_exposed_in_context_for_other_fields() {
        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let top_env = IndexMap::from([("GRAM_HOST".to_string(), "localhost".to_string())]);
        let mut config = PitchforkTomlDaemon {
            run: "echo {{ env.GRAM_HOST }}".to_string(),
            ..Default::default()
        };
        render_daemon_templates(&mut config, &mut ctx, Some(&top_env)).unwrap();
        assert_eq!(config.run, "echo localhost");
    }

    #[test]
    fn test_env_values_cannot_self_reference() {
        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let top_env = IndexMap::from([
            ("A".to_string(), "value-a".to_string()),
            // env is not available while env values are rendered
            ("B".to_string(), "{{ env.A }}".to_string()),
        ]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            ..Default::default()
        };
        // Rendering env.B references {{ env.A }} which is undefined during
        // env-value rendering -> error propagates.
        assert!(render_daemon_templates(&mut config, &mut ctx, Some(&top_env)).is_err());
    }

    #[test]
    fn test_render_daemon_templates_on_output_run() {
        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            hooks: Some(crate::config_types::PitchforkTomlHooks {
                on_ready: None,
                on_fail: None,
                on_retry: None,
                on_stop: None,
                on_exit: None,
                on_output: Some(crate::config_types::OnOutputHook {
                    run: "curl http://localhost:{{ daemons.redis.port }}".to_string(),
                    filter: Some("ready".to_string()),
                    regex: None,
                    debounce: None,
                }),
            }),
            ..Default::default()
        };

        render_daemon_templates(&mut config, &mut ctx, None).unwrap();

        let hooks = config.hooks.unwrap();
        let on_output = hooks.on_output.unwrap();
        assert_eq!(on_output.run, "curl http://localhost:6379");
        assert_eq!(on_output.filter.as_deref(), Some("ready"));
    }

    #[test]
    fn test_render_daemon_templates_ready_fields() {
        use crate::config_types::{ReadyCmd, ReadyHttp, ReadyOutput, ReadyPort};

        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            ready_cmd: Some(ReadyCmd::new("redis-cli -p {{ daemons.redis.port }} ping")),
            ready_output: Some(ReadyOutput::new("listening on {{ daemons.redis.port }}")),
            ready_http: Some(ReadyHttp {
                url: "http://localhost:{{ daemons.redis.port }}/health".to_string(),
                status: vec![200, 401],
                timeout: None,
            }),
            ready_port: Some(ReadyPort::from_template("{{ daemons.redis.port }}")),
            ..Default::default()
        };

        render_daemon_templates(&mut config, &mut ctx, None).unwrap();

        assert_eq!(
            config.ready_cmd.as_ref().unwrap().run,
            "redis-cli -p 6379 ping"
        );
        assert_eq!(
            config.ready_output.as_ref().unwrap().pattern,
            "listening on 6379"
        );
        let http = config.ready_http.unwrap();
        assert_eq!(http.url, "http://localhost:6379/health");
        assert_eq!(http.status, vec![200, 401]);
        assert_eq!(config.ready_port, Some(ReadyPort::new(6379)));
    }

    #[test]
    fn test_render_daemon_templates_health_fields() {
        use crate::config_types::{HealthCmd, HealthHttp};
        use std::time::Duration;

        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            health_cmd: Some(HealthCmd {
                run: "redis-cli -p {{ daemons.redis.port }} ping".to_string(),
                interval: Some(Duration::from_secs(10)),
                timeout: None,
                retries: Some(3),
            }),
            health_http: Some(HealthHttp {
                url: "http://localhost:{{ daemons.redis.port }}/health".to_string(),
                status: vec![200],
                interval: None,
                timeout: Some(Duration::from_secs(5)),
                retries: None,
            }),
            ..Default::default()
        };

        render_daemon_templates(&mut config, &mut ctx, None).unwrap();

        let hc = config.health_cmd.unwrap();
        assert_eq!(hc.run, "redis-cli -p 6379 ping");
        assert_eq!(hc.interval, Some(Duration::from_secs(10)));
        assert_eq!(hc.retries, Some(3));
        let hh = config.health_http.unwrap();
        assert_eq!(hh.url, "http://localhost:6379/health");
        assert_eq!(hh.status, vec![200]);
        assert_eq!(hh.timeout, Some(Duration::from_secs(5)));
    }

    #[test]
    fn test_render_daemon_templates_ready_port_invalid() {
        use crate::config_types::ReadyPort;

        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            ready_port: Some(ReadyPort::from_template("{{ name }}")),
            ..Default::default()
        };

        let err = render_daemon_templates(&mut config, &mut ctx, None).unwrap_err();
        assert!(matches!(err, RenderError::InvalidPort { .. }));
    }

    #[test]
    fn test_render_daemon_templates_ready_port_literal_untouched() {
        use crate::config_types::ReadyPort;

        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            ready_port: Some(ReadyPort::new(8080)),
            ..Default::default()
        };

        render_daemon_templates(&mut config, &mut ctx, None).unwrap();
        assert_eq!(config.ready_port, Some(ReadyPort::new(8080)));
    }

    #[test]
    fn test_render_daemon_templates_health_port() {
        use crate::config_types::HealthPort;
        use std::time::Duration;

        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            health_port: Some(HealthPort {
                port: None,
                template: Some("{{ daemons.redis.port }}".to_string()),
                interval: Some(Duration::from_secs(10)),
                retries: Some(3),
                timeout: Some(Duration::from_secs(5)),
            }),
            ..Default::default()
        };

        render_daemon_templates(&mut config, &mut ctx, None).unwrap();
        let hp = config.health_port.unwrap();
        assert_eq!(hp.port, Some(6379));
        assert!(hp.template.is_none());
        assert_eq!(hp.interval, Some(Duration::from_secs(10)));
        assert_eq!(hp.retries, Some(3));
        assert_eq!(hp.timeout, Some(Duration::from_secs(5)));
    }

    #[test]
    fn test_render_daemon_templates_health_port_invalid() {
        use crate::config_types::HealthPort;

        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            health_port: Some(HealthPort::from_template("{{ name }}")),
            ..Default::default()
        };

        let err = render_daemon_templates(&mut config, &mut ctx, None).unwrap_err();
        assert!(matches!(err, RenderError::InvalidPort { .. }));
    }

    #[test]
    fn test_render_daemon_templates_health_port_literal_untouched() {
        use crate::config_types::HealthPort;

        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            health_port: Some(HealthPort::new(8080)),
            ..Default::default()
        };

        render_daemon_templates(&mut config, &mut ctx, None).unwrap();
        assert_eq!(config.health_port, Some(HealthPort::new(8080)));
    }

    #[test]
    fn test_render_daemon_templates_hook_error_does_not_fail() {
        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "echo".to_string(),
            hooks: Some(crate::config_types::PitchforkTomlHooks {
                on_ready: Some("{{ nonexistent }}".to_string()),
                on_fail: None,
                on_retry: None,
                on_stop: None,
                on_exit: None,
                on_output: None,
            }),
            ..Default::default()
        };

        // Hook template errors are silently converted to None — daemon still starts
        render_daemon_templates(&mut config, &mut ctx, None).unwrap();
        let hooks = config.hooks.unwrap();
        assert!(hooks.on_ready.is_none());
    }

    #[test]
    fn test_render_daemon_templates_run_error_still_fails() {
        let mut ctx = make_context_with_daemon("redis", vec![6379]);
        let mut config = PitchforkTomlDaemon {
            run: "{{ nonexistent }}".to_string(),
            ..Default::default()
        };

        // Non-hook template errors still propagate as Err
        assert!(render_daemon_templates(&mut config, &mut ctx, None).is_err());
    }
}