rmcp_openapi/

http_client.rs

use base64::prelude::*;
use reqwest::header::{self, HeaderMap, HeaderValue};
use reqwest::{Client, Method, RequestBuilder, StatusCode};
use serde_json::Value;
use std::collections::HashMap;
use std::time::Duration;
use tracing::{debug, error, info, info_span};
use url::Url;

use crate::error::{
    Error, NetworkErrorCategory, ToolCallError, ToolCallExecutionError, ToolCallValidationError,
};
use crate::tool::ToolMetadata;
use crate::tool_generator::{ExtractedParameters, QueryParameter, ToolGenerator};

/// Content extracted from a data URI
#[derive(Debug, Clone, PartialEq, Eq)]
pub struct DataUriContent {
    /// The MIME type of the content (e.g., "image/png")
    pub mime_type: String,
    /// The decoded bytes of the content
    pub bytes: Vec<u8>,
}

/// Parse a data URI and extract its content
///
/// Parses data URIs in the format `data:<mime>;base64,<content>`.
/// Only base64 encoding is supported.
///
/// # Arguments
///
/// * `value` - The data URI string to parse
/// * `field_name` - The name of the field (used in error messages)
///
/// # Returns
///
/// Returns `DataUriContent` with the extracted MIME type and decoded bytes.
///
/// # Errors
///
/// Returns an error if:
/// - The data URI format is invalid
/// - The encoding is not base64
/// - The base64 content cannot be decoded
///
/// # Example
///
/// ```
/// use rmcp_openapi::http_client::parse_data_uri;
///
/// let uri = "data:image/png;base64,iVBORw0KGgo=";
/// let content = parse_data_uri(uri, "image_field").unwrap();
/// assert_eq!(content.mime_type, "image/png");
/// ```
pub fn parse_data_uri(value: &str, field_name: &str) -> Result<DataUriContent, Error> {
    let format_error = || {
        Error::Validation(format!(
            "Invalid data URI format for field '{}': expected 'data:<mime>;base64,<content>'",
            field_name
        ))
    };

    // Check for data: prefix
    let remainder = value.strip_prefix("data:").ok_or_else(format_error)?;

    // Find ";base64," to split MIME type (possibly with parameters) from content
    // This handles cases like "text/plain;charset=utf-8;base64,SGVsbG8="
    let base64_marker = ";base64,";
    let marker_pos = remainder.find(base64_marker).ok_or_else(|| {
        // Check if there's a different encoding specified
        if let Some(semicolon_pos) = remainder.find(';')
            && let Some(comma_pos) = remainder[semicolon_pos..].find(',')
        {
            let encoding = &remainder[semicolon_pos + 1..semicolon_pos + comma_pos];
            if !encoding.is_empty() && encoding != "base64" {
                return Error::Validation(format!(
                    "Unsupported encoding '{}' for field '{}': only base64 is supported",
                    encoding, field_name
                ));
            }
        }
        format_error()
    })?;

    let mime_type = &remainder[..marker_pos];
    let content = &remainder[marker_pos + base64_marker.len()..];

    // Validate MIME type is not empty
    if mime_type.is_empty() {
        return Err(Error::Validation(format!(
            "Invalid data URI format for field '{}': MIME type cannot be empty",
            field_name
        )));
    }

    // Decode base64 content
    let bytes = BASE64_STANDARD.decode(content).map_err(|e| {
        Error::Validation(format!(
            "Invalid base64 content for field '{}': {}",
            field_name, e
        ))
    })?;

    Ok(DataUriContent {
        mime_type: mime_type.to_string(),
        bytes,
    })
}

/// Default request timeout in seconds applied to every `HttpClient`
/// constructed without an explicit timeout override.
const DEFAULT_TIMEOUT_SECONDS: u64 = 30;

/// HTTP client for executing `OpenAPI` requests
#[derive(Clone)]
pub struct HttpClient {
    client: Client,
    base_url: Option<Url>,
    default_headers: HeaderMap,
    timeout_seconds: u64,
}

impl HttpClient {
    /// Create the user agent string for HTTP requests
    fn create_user_agent() -> String {
        format!("rmcp-openapi-server/{}", env!("CARGO_PKG_VERSION"))
    }

    /// Build the underlying `reqwest::Client` with the given timeout and
    /// optional bypass of TLS certificate verification.
    ///
    /// # Panics
    ///
    /// Panics if the HTTP client cannot be created.
    fn build_reqwest_client(timeout_seconds: u64, insecure: bool) -> Client {
        let user_agent = Self::create_user_agent();
        let mut builder = Client::builder()
            .user_agent(&user_agent)
            .timeout(Duration::from_secs(timeout_seconds));

        if insecure {
            builder = builder
                .danger_accept_invalid_certs(true)
                .danger_accept_invalid_hostnames(true);
        }

        builder.build().expect("Failed to create HTTP client")
    }

    /// Create a new HTTP client
    ///
    /// # Panics
    ///
    /// Panics if the HTTP client cannot be created
    #[must_use]
    pub fn new() -> Self {
        Self {
            client: Self::build_reqwest_client(DEFAULT_TIMEOUT_SECONDS, false),
            base_url: None,
            default_headers: HeaderMap::new(),
            timeout_seconds: DEFAULT_TIMEOUT_SECONDS,
        }
    }

    /// Create a new HTTP client with custom timeout
    ///
    /// # Panics
    ///
    /// Panics if the HTTP client cannot be created
    #[must_use]
    pub fn with_timeout(timeout_seconds: u64) -> Self {
        Self {
            client: Self::build_reqwest_client(timeout_seconds, false),
            base_url: None,
            default_headers: HeaderMap::new(),
            timeout_seconds,
        }
    }

    /// Rebuild the underlying `reqwest::Client`, optionally disabling TLS
    /// certificate and hostname verification.
    ///
    /// When `insecure` is `true`, both `danger_accept_invalid_certs` and
    /// `danger_accept_invalid_hostnames` are enabled to mirror
    /// `curl --insecure`. The previously configured timeout is preserved.
    /// When `insecure` is `false`, this is a no-op: the existing client
    /// is returned unchanged so callers that pass the flag through
    /// unconditionally do not pay for a second `reqwest::Client`.
    ///
    /// This method is one-way: a client previously built with
    /// `insecure = true` cannot have TLS verification re-enabled by
    /// calling `with_insecure(false)`. To get a strict client, construct
    /// a fresh `HttpClient` with [`HttpClient::new`].
    ///
    /// # Panics
    ///
    /// Panics if the HTTP client cannot be created.
    #[must_use]
    pub fn with_insecure(mut self, insecure: bool) -> Self {
        if insecure {
            self.client = Self::build_reqwest_client(self.timeout_seconds, true);
        }
        self
    }

    /// Set the base URL for all requests
    ///
    /// # Errors
    ///
    /// Returns an error if the base URL is invalid
    pub fn with_base_url(mut self, base_url: Url) -> Result<Self, Error> {
        // Always terminate the path of the base_url with '/'
        let mut base_url = base_url;
        if !base_url.path().ends_with('/') {
            base_url.set_path(&format!("{}/", base_url.path()));
        }
        self.base_url = Some(base_url);
        Ok(self)
    }

    /// Set default headers for all requests
    #[must_use]
    pub fn with_default_headers(mut self, default_headers: HeaderMap) -> Self {
        self.default_headers = default_headers;
        self
    }

    /// Create a new HTTP client with authorization header
    ///
    /// Clones the current client and adds the Authorization header to default headers.
    /// This allows passing authorization through to backend APIs.
    #[must_use]
    pub fn with_authorization(&self, auth_value: &str) -> Self {
        let mut headers = self.default_headers.clone();
        if let Ok(header_value) = HeaderValue::from_str(auth_value) {
            headers.insert(header::AUTHORIZATION, header_value);
        }

        Self {
            client: self.client.clone(),
            base_url: self.base_url.clone(),
            default_headers: headers,
            timeout_seconds: self.timeout_seconds,
        }
    }

    /// Execute an `OpenAPI` tool call
    ///
    /// # Errors
    ///
    /// Returns an error if the HTTP request fails or parameters are invalid
    pub async fn execute_tool_call(
        &self,
        tool_metadata: &ToolMetadata,
        arguments: &Value,
    ) -> Result<HttpResponse, ToolCallError> {
        let span = info_span!(
            "http_request",
            operation_id = %tool_metadata.name,
            method = %tool_metadata.method,
            path = %tool_metadata.path
        );
        let _enter = span.enter();

        debug!(
            "Executing tool call: {} {} with arguments: {}",
            tool_metadata.method,
            tool_metadata.path,
            serde_json::to_string_pretty(arguments).unwrap_or_else(|_| "invalid json".to_string())
        );

        // Extract parameters from arguments
        let extracted_params = ToolGenerator::extract_parameters(tool_metadata, arguments)?;

        debug!(
            "Extracted parameters: path={:?}, query={:?}, headers={:?}, cookies={:?}",
            extracted_params.path,
            extracted_params.query,
            extracted_params.headers,
            extracted_params.cookies
        );

        // Build the URL with path parameters
        let mut url = self
            .build_url(tool_metadata, &extracted_params)
            .map_err(|e| {
                ToolCallError::Validation(ToolCallValidationError::RequestConstructionError {
                    reason: e.to_string(),
                })
            })?;

        // Add query parameters with proper URL encoding
        if !extracted_params.query.is_empty() {
            Self::add_query_parameters(&mut url, &extracted_params.query);
        }

        info!("Final URL: {}", url);

        // Create the HTTP request
        let mut request = self
            .create_request(&tool_metadata.method, &url)
            .map_err(|e| {
                ToolCallError::Validation(ToolCallValidationError::RequestConstructionError {
                    reason: e.to_string(),
                })
            })?;

        // Add headers: first default headers, then request-specific headers (which take precedence)
        if !self.default_headers.is_empty() {
            // Use the HeaderMap directly with reqwest
            request = Self::add_headers_from_map(request, &self.default_headers);
        }

        // Add request-specific headers (these override default headers)
        if !extracted_params.headers.is_empty() {
            request = Self::add_headers(request, &extracted_params.headers);
        }

        // Add cookies
        if !extracted_params.cookies.is_empty() {
            request = Self::add_cookies(request, &extracted_params.cookies);
        }

        // Add request body if present
        if !extracted_params.body.is_empty() {
            request =
                Self::add_request_body(request, &extracted_params.body, &extracted_params.config)
                    .map_err(|e| {
                    ToolCallError::Execution(ToolCallExecutionError::ResponseParsingError {
                        reason: format!("Failed to serialize request body: {e}"),
                        raw_response: None,
                    })
                })?;
        }

        // Apply custom timeout if specified
        if extracted_params.config.timeout_seconds != 30 {
            request = request.timeout(Duration::from_secs(u64::from(
                extracted_params.config.timeout_seconds,
            )));
        }

        // Capture request details for response formatting
        let request_body_string = if extracted_params.body.is_empty() {
            String::new()
        } else if extracted_params.body.len() == 1
            && extracted_params.body.contains_key("request_body")
        {
            serde_json::to_string(&extracted_params.body["request_body"]).unwrap_or_default()
        } else {
            let body_object = Value::Object(
                extracted_params
                    .body
                    .iter()
                    .map(|(k, v)| (k.clone(), v.clone()))
                    .collect(),
            );
            serde_json::to_string(&body_object).unwrap_or_default()
        };

        // Get the final URL for logging
        let final_url = url.to_string();

        // Execute the request
        debug!("Sending HTTP request...");
        let start_time = std::time::Instant::now();
        let response = request.send().await.map_err(|e| {
            error!(
                operation_id = %tool_metadata.name,
                method = %tool_metadata.method,
                url = %final_url,
                error = %e,
                "HTTP request failed"
            );

            // Categorize error based on reqwest's reliable error detection methods
            let (error_msg, category) = if e.is_timeout() {
                (
                    format!(
                        "Request timeout after {} seconds while calling {} {}",
                        extracted_params.config.timeout_seconds,
                        tool_metadata.method.to_uppercase(),
                        final_url
                    ),
                    NetworkErrorCategory::Timeout,
                )
            } else if e.is_connect() {
                (
                    format!(
                        "Connection failed to {final_url} - Error: {e}. Check if the server is running and the URL is correct."
                    ),
                    NetworkErrorCategory::Connect,
                )
            } else if e.is_request() {
                (
                    format!(
                        "Request error while calling {} {} - Error: {}",
                        tool_metadata.method.to_uppercase(),
                        final_url,
                        e
                    ),
                    NetworkErrorCategory::Request,
                )
            } else if e.is_body() {
                (
                    format!(
                        "Body error while calling {} {} - Error: {}",
                        tool_metadata.method.to_uppercase(),
                        final_url,
                        e
                    ),
                    NetworkErrorCategory::Body,
                )
            } else if e.is_decode() {
                (
                    format!(
                        "Response decode error from {} {} - Error: {}",
                        tool_metadata.method.to_uppercase(),
                        final_url,
                        e
                    ),
                    NetworkErrorCategory::Decode,
                )
            } else {
                (
                    format!(
                        "HTTP request failed: {} (URL: {}, Method: {})",
                        e,
                        final_url,
                        tool_metadata.method.to_uppercase()
                    ),
                    NetworkErrorCategory::Other,
                )
            };

            ToolCallError::Execution(ToolCallExecutionError::NetworkError {
                message: error_msg,
                category,
            })
        })?;

        let elapsed = start_time.elapsed();
        info!(
            operation_id = %tool_metadata.name,
            method = %tool_metadata.method,
            url = %final_url,
            status = response.status().as_u16(),
            elapsed_ms = elapsed.as_millis(),
            "HTTP request completed"
        );
        debug!("Response received with status: {}", response.status());

        // Convert response to our format with request details
        self.process_response_with_request(
            response,
            &tool_metadata.method,
            &final_url,
            &request_body_string,
        )
        .await
        .map_err(|e| {
            ToolCallError::Execution(ToolCallExecutionError::HttpError {
                status: 0,
                message: e.to_string(),
                details: None,
            })
        })
    }

    /// Build the complete URL with path parameters substituted
    fn build_url(
        &self,
        tool_metadata: &ToolMetadata,
        extracted_params: &ExtractedParameters,
    ) -> Result<Url, Error> {
        let mut path = tool_metadata.path.clone();

        // Substitute path parameters
        for (param_name, param_value) in &extracted_params.path {
            let placeholder = format!("{{{param_name}}}");
            let value_str = match param_value {
                Value::String(s) => s.clone(),
                Value::Number(n) => n.to_string(),
                Value::Bool(b) => b.to_string(),
                _ => param_value.to_string(),
            };
            path = path.replace(&placeholder, &value_str);
        }

        let mut path: &str = path.as_ref();

        // Combine with base URL if available
        if let Some(base_url) = &self.base_url {
            // Strip the starting '/' in path to make sure the call to Url::join will not
            // set the path starting at the root
            if path.starts_with('/') {
                path = &path[1..];
            }
            base_url.join(path).map_err(|e| {
                Error::Http(format!(
                    "Failed to join URL '{base_url}' with path '{path}': {e}"
                ))
            })
        } else {
            // Assume the path is already a complete URL
            if path.starts_with("http") {
                Url::parse(path).map_err(|e| Error::Http(format!("Invalid URL '{path}': {e}")))
            } else {
                Err(Error::Http(
                    "No base URL configured and path is not a complete URL".to_string(),
                ))
            }
        }
    }

    /// Create a new HTTP request with the specified method and URL
    fn create_request(&self, method: &str, url: &Url) -> Result<RequestBuilder, Error> {
        let http_method = method.to_uppercase();
        let method = match http_method.as_str() {
            "GET" => Method::GET,
            "POST" => Method::POST,
            "PUT" => Method::PUT,
            "DELETE" => Method::DELETE,
            "PATCH" => Method::PATCH,
            "HEAD" => Method::HEAD,
            "OPTIONS" => Method::OPTIONS,
            _ => {
                return Err(Error::Http(format!(
                    "Unsupported HTTP method: {http_method}"
                )));
            }
        };

        Ok(self.client.request(method, url.clone()))
    }

    /// Add query parameters to the request using proper URL encoding
    fn add_query_parameters(url: &mut Url, query_params: &HashMap<String, QueryParameter>) {
        // Render a scalar JSON value as its bare query-string form. Strings are
        // used verbatim; everything else falls back to its JSON rendering.
        fn scalar_to_string(value: &Value) -> String {
            match value {
                Value::String(s) => s.clone(),
                Value::Number(n) => n.to_string(),
                Value::Bool(b) => b.to_string(),
                other => other.to_string(),
            }
        }

        {
            let mut query_pairs = url.query_pairs_mut();
            for (key, query_param) in query_params {
                match &query_param.value {
                    Value::Array(arr) => {
                        if query_param.explode {
                            // explode=true: emit one query pair per array item.
                            for item in arr {
                                query_pairs.append_pair(key, &scalar_to_string(item));
                            }
                        } else {
                            // explode=false: join the array items with commas.
                            let comma_separated = arr
                                .iter()
                                .map(scalar_to_string)
                                .collect::<Vec<_>>()
                                .join(",");
                            query_pairs.append_pair(key, &comma_separated);
                        }
                    }
                    Value::Object(map) => {
                        // OpenAPI `style: deepObject`: expand the object to one
                        // `key[property]=value` pair per entry, joining
                        // array-valued properties with commas exactly as the
                        // array case above. Without this an object value would be
                        // serialized as an opaque JSON blob the server cannot read.
                        for (property, property_value) in map {
                            let nested_key = format!("{key}[{property}]");
                            let value_str = match property_value {
                                Value::Array(items) => items
                                    .iter()
                                    .map(scalar_to_string)
                                    .collect::<Vec<_>>()
                                    .join(","),
                                scalar => scalar_to_string(scalar),
                            };
                            query_pairs.append_pair(&nested_key, &value_str);
                        }
                    }
                    scalar => {
                        query_pairs.append_pair(key, &scalar_to_string(scalar));
                    }
                }
            }
        }
    }

    /// Add headers to the request from HeaderMap
    fn add_headers_from_map(mut request: RequestBuilder, headers: &HeaderMap) -> RequestBuilder {
        for (key, value) in headers {
            // HeaderName and HeaderValue are already validated, pass them directly to reqwest
            request = request.header(key, value);
        }
        request
    }

    /// Add headers to the request
    fn add_headers(
        mut request: RequestBuilder,
        headers: &HashMap<String, Value>,
    ) -> RequestBuilder {
        for (key, value) in headers {
            let value_str = match value {
                Value::String(s) => s.clone(),
                Value::Number(n) => n.to_string(),
                Value::Bool(b) => b.to_string(),
                _ => value.to_string(),
            };
            request = request.header(key, value_str);
        }
        request
    }

    /// Add cookies to the request
    fn add_cookies(
        mut request: RequestBuilder,
        cookies: &HashMap<String, Value>,
    ) -> RequestBuilder {
        if !cookies.is_empty() {
            let cookie_header = cookies
                .iter()
                .map(|(key, value)| {
                    let value_str = match value {
                        Value::String(s) => s.clone(),
                        Value::Number(n) => n.to_string(),
                        Value::Bool(b) => b.to_string(),
                        _ => value.to_string(),
                    };
                    format!("{key}={value_str}")
                })
                .collect::<Vec<_>>()
                .join("; ");

            request = request.header(header::COOKIE, cookie_header);
        }
        request
    }

    /// Add request body to the request
    fn add_request_body(
        mut request: RequestBuilder,
        body: &HashMap<String, Value>,
        config: &crate::tool_generator::RequestConfig,
    ) -> Result<RequestBuilder, Error> {
        if body.is_empty() {
            return Ok(request);
        }

        // Handle different content types
        match config.content_type.as_str() {
            s if s == mime::APPLICATION_JSON.as_ref() => {
                // Set content type header for JSON
                request = request.header(header::CONTENT_TYPE, &config.content_type);

                // For JSON content type, serialize the body
                if body.len() == 1 && body.contains_key("request_body") {
                    // Use the request_body directly if it's the only parameter
                    let body_value = &body["request_body"];
                    let json_string = serde_json::to_string(body_value).map_err(|e| {
                        Error::Http(format!("Failed to serialize request body: {e}"))
                    })?;
                    request = request.body(json_string);
                } else {
                    // Create JSON object from all body parameters
                    let body_object =
                        Value::Object(body.iter().map(|(k, v)| (k.clone(), v.clone())).collect());
                    let json_string = serde_json::to_string(&body_object).map_err(|e| {
                        Error::Http(format!("Failed to serialize request body: {e}"))
                    })?;
                    request = request.body(json_string);
                }
            }
            s if s == mime::APPLICATION_WWW_FORM_URLENCODED.as_ref() => {
                // Set content type header for form-urlencoded
                request = request.header(header::CONTENT_TYPE, &config.content_type);

                // Handle form data
                let form_data: Vec<(String, String)> = body
                    .iter()
                    .map(|(key, value)| {
                        let value_str = match value {
                            Value::String(s) => s.clone(),
                            Value::Number(n) => n.to_string(),
                            Value::Bool(b) => b.to_string(),
                            _ => value.to_string(),
                        };
                        (key.clone(), value_str)
                    })
                    .collect();
                request = request.form(&form_data);
            }
            s if s == mime::MULTIPART_FORM_DATA.as_ref() => {
                // Build multipart form - reqwest automatically sets Content-Type with boundary
                let mut form = reqwest::multipart::Form::new();

                for (key, value) in body {
                    // Check if this is a file field (object with "content" key containing data URI)
                    if let Some(obj) = value.as_object()
                        && let Some(content_value) = obj.get("content")
                        && let Some(content_str) = content_value.as_str()
                        && content_str.starts_with("data:")
                    {
                        // Parse the data URI
                        let data_uri = parse_data_uri(content_str, key)?;

                        // Get optional filename
                        let filename = obj
                            .get("filename")
                            .and_then(|v| v.as_str())
                            .unwrap_or("file")
                            .to_string();

                        // Build the file part
                        let part = reqwest::multipart::Part::bytes(data_uri.bytes)
                            .file_name(filename)
                            .mime_str(&data_uri.mime_type)
                            .map_err(|e| Error::Http(format!("Invalid MIME type: {e}")))?;

                        form = form.part(key.clone(), part);
                        continue;
                    }

                    // Not a file field - add as text part
                    let text_value = match value {
                        Value::String(s) => s.clone(),
                        Value::Number(n) => n.to_string(),
                        Value::Bool(b) => b.to_string(),
                        _ => value.to_string(),
                    };
                    form = form.text(key.clone(), text_value);
                }

                request = request.multipart(form);
            }
            _ => {
                // Set content type header for other content types
                request = request.header(header::CONTENT_TYPE, &config.content_type);

                // For other content types, try to serialize as JSON
                let body_object =
                    Value::Object(body.iter().map(|(k, v)| (k.clone(), v.clone())).collect());
                let json_string = serde_json::to_string(&body_object)
                    .map_err(|e| Error::Http(format!("Failed to serialize request body: {e}")))?;
                request = request.body(json_string);
            }
        }

        Ok(request)
    }

    /// Process the HTTP response with request details for better formatting
    async fn process_response_with_request(
        &self,
        response: reqwest::Response,
        method: &str,
        url: &str,
        request_body: &str,
    ) -> Result<HttpResponse, Error> {
        let status = response.status();

        // Extract Content-Type header before consuming headers
        let content_type = response
            .headers()
            .get(header::CONTENT_TYPE)
            .and_then(|v| v.to_str().ok())
            .map(|s| s.to_string());

        // Check if response is binary based on content type
        let is_binary_content = content_type
            .as_ref()
            .and_then(|ct| ct.parse::<mime::Mime>().ok())
            .map(|mime_type| matches!(mime_type.type_(), mime::IMAGE | mime::AUDIO | mime::VIDEO))
            .unwrap_or(false);

        let headers = response
            .headers()
            .iter()
            .map(|(name, value)| {
                (
                    name.to_string(),
                    value.to_str().unwrap_or("<invalid>").to_string(),
                )
            })
            .collect();

        // Read response body based on content type
        let (body, body_bytes) = if is_binary_content {
            // For binary content, read as bytes
            let bytes = response
                .bytes()
                .await
                .map_err(|e| Error::Http(format!("Failed to read response body: {e}")))?;

            // Store bytes and provide a descriptive text body
            let body_text = format!(
                "[Binary content: {} bytes, Content-Type: {}]",
                bytes.len(),
                content_type.as_ref().unwrap_or(&"unknown".to_string())
            );

            (body_text, Some(bytes.to_vec()))
        } else {
            // For text content, read as text
            let text = response
                .text()
                .await
                .map_err(|e| Error::Http(format!("Failed to read response body: {e}")))?;

            (text, None)
        };

        let is_success = status.is_success();
        let status_code = status.as_u16();
        let status_text = status.canonical_reason().unwrap_or("Unknown").to_string();

        // Add additional context for common error status codes
        let enhanced_status_text = match status {
            StatusCode::BAD_REQUEST => {
                format!("{status_text} - Bad Request: Check request parameters")
            }
            StatusCode::UNAUTHORIZED => {
                format!("{status_text} - Unauthorized: Authentication required")
            }
            StatusCode::FORBIDDEN => format!("{status_text} - Forbidden: Access denied"),
            StatusCode::NOT_FOUND => {
                format!("{status_text} - Not Found: Endpoint or resource does not exist")
            }
            StatusCode::METHOD_NOT_ALLOWED => format!(
                "{} - Method Not Allowed: {} method not supported",
                status_text,
                method.to_uppercase()
            ),
            StatusCode::UNPROCESSABLE_ENTITY => {
                format!("{status_text} - Unprocessable Entity: Request validation failed")
            }
            StatusCode::TOO_MANY_REQUESTS => {
                format!("{status_text} - Too Many Requests: Rate limit exceeded")
            }
            StatusCode::INTERNAL_SERVER_ERROR => {
                format!("{status_text} - Internal Server Error: Server encountered an error")
            }
            StatusCode::BAD_GATEWAY => {
                format!("{status_text} - Bad Gateway: Upstream server error")
            }
            StatusCode::SERVICE_UNAVAILABLE => {
                format!("{status_text} - Service Unavailable: Server temporarily unavailable")
            }
            StatusCode::GATEWAY_TIMEOUT => {
                format!("{status_text} - Gateway Timeout: Upstream server timeout")
            }
            _ => status_text,
        };

        Ok(HttpResponse {
            status_code,
            status_text: enhanced_status_text,
            headers,
            content_type,
            body,
            body_bytes,
            is_success,
            request_method: method.to_string(),
            request_url: url.to_string(),
            request_body: request_body.to_string(),
        })
    }
}

impl Default for HttpClient {
    fn default() -> Self {
        Self::new()
    }
}

/// HTTP response from an API call
#[derive(Debug, Clone)]
pub struct HttpResponse {
    pub status_code: u16,
    pub status_text: String,
    pub headers: HashMap<String, String>,
    pub content_type: Option<String>,
    pub body: String,
    pub body_bytes: Option<Vec<u8>>,
    pub is_success: bool,
    pub request_method: String,
    pub request_url: String,
    pub request_body: String,
}

impl HttpResponse {
    /// Try to parse the response body as JSON
    ///
    /// # Errors
    ///
    /// Returns an error if the body is not valid JSON
    pub fn json(&self) -> Result<Value, Error> {
        serde_json::from_str(&self.body)
            .map_err(|e| Error::Http(format!("Failed to parse response as JSON: {e}")))
    }

    /// Check if the response contains image content
    ///
    /// Uses the mime crate to properly parse and validate image content types.
    #[must_use]
    pub fn is_image(&self) -> bool {
        self.content_type
            .as_ref()
            .and_then(|ct| ct.parse::<mime::Mime>().ok())
            .map(|mime_type| mime_type.type_() == mime::IMAGE)
            .unwrap_or(false)
    }

    /// Check if the response contains binary content (image, audio, or video)
    ///
    /// Uses the mime crate to properly parse and validate binary content types.
    #[must_use]
    pub fn is_binary(&self) -> bool {
        self.content_type
            .as_ref()
            .and_then(|ct| ct.parse::<mime::Mime>().ok())
            .map(|mime_type| matches!(mime_type.type_(), mime::IMAGE | mime::AUDIO | mime::VIDEO))
            .unwrap_or(false)
    }

    /// Get a formatted response summary for MCP
    #[must_use]
    pub fn to_mcp_content(&self) -> String {
        let method = if self.request_method.is_empty() {
            None
        } else {
            Some(self.request_method.as_str())
        };
        let url = if self.request_url.is_empty() {
            None
        } else {
            Some(self.request_url.as_str())
        };
        let body = if self.request_body.is_empty() {
            None
        } else {
            Some(self.request_body.as_str())
        };
        self.to_mcp_content_with_request(method, url, body)
    }

    /// Get a formatted response summary for MCP with request details
    pub fn to_mcp_content_with_request(
        &self,
        method: Option<&str>,
        url: Option<&str>,
        request_body: Option<&str>,
    ) -> String {
        let mut result = format!(
            "HTTP {} {}\n\nStatus: {} {}\n",
            if self.is_success { "✅" } else { "❌" },
            if self.is_success { "Success" } else { "Error" },
            self.status_code,
            self.status_text
        );

        // Add request details if provided
        if let (Some(method), Some(url)) = (method, url) {
            result.push_str("\nRequest: ");
            result.push_str(&method.to_uppercase());
            result.push(' ');
            result.push_str(url);
            result.push('\n');

            if let Some(body) = request_body
                && !body.is_empty()
                && body != "{}"
            {
                result.push_str("\nRequest Body:\n");
                if let Ok(parsed) = serde_json::from_str::<Value>(body) {
                    if let Ok(pretty) = serde_json::to_string_pretty(&parsed) {
                        result.push_str(&pretty);
                    } else {
                        result.push_str(body);
                    }
                } else {
                    result.push_str(body);
                }
                result.push('\n');
            }
        }

        // Add important headers
        if !self.headers.is_empty() {
            result.push_str("\nHeaders:\n");
            for (key, value) in &self.headers {
                // Only show commonly useful headers
                if [
                    header::CONTENT_TYPE.as_str(),
                    header::CONTENT_LENGTH.as_str(),
                    header::LOCATION.as_str(),
                    header::SET_COOKIE.as_str(),
                ]
                .iter()
                .any(|&h| key.to_lowercase().contains(h))
                {
                    result.push_str("  ");
                    result.push_str(key);
                    result.push_str(": ");
                    result.push_str(value);
                    result.push('\n');
                }
            }
        }

        // Add body content
        result.push_str("\nResponse Body:\n");
        if self.body.is_empty() {
            result.push_str("(empty)");
        } else if let Ok(json_value) = self.json() {
            // Pretty print JSON if possible
            match serde_json::to_string_pretty(&json_value) {
                Ok(pretty) => result.push_str(&pretty),
                Err(_) => result.push_str(&self.body),
            }
        } else {
            // Truncate very long responses
            if self.body.len() > 2000 {
                result.push_str(&self.body[..2000]);
                result.push_str("\n... (");
                result.push_str(&(self.body.len() - 2000).to_string());
                result.push_str(" more characters)");
            } else {
                result.push_str(&self.body);
            }
        }

        result
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::tool_generator::ExtractedParameters;
    use serde_json::json;
    use std::collections::HashMap;

    #[test]
    fn test_with_base_url_validation() {
        // Test valid URLs
        let url = Url::parse("https://api.example.com").unwrap();
        let client = HttpClient::new().with_base_url(url);
        assert!(client.is_ok());

        let url = Url::parse("http://localhost:8080").unwrap();
        let client = HttpClient::new().with_base_url(url);
        assert!(client.is_ok());

        // Test invalid URLs - these will fail at parse time now
        assert!(Url::parse("not-a-url").is_err());
        assert!(Url::parse("").is_err());

        // Test schemes that parse successfully
        let url = Url::parse("ftp://invalid-scheme.com").unwrap();
        let client = HttpClient::new().with_base_url(url);
        assert!(client.is_ok()); // url crate accepts ftp, our HttpClient should too
    }

    #[test]
    fn test_build_url_with_base_url() {
        let base_url = Url::parse("https://api.example.com").unwrap();
        let client = HttpClient::new().with_base_url(base_url).unwrap();

        let tool_metadata = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "/pets/{id}".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        let mut path_params = HashMap::new();
        path_params.insert("id".to_string(), json!(123));

        let extracted_params = ExtractedParameters {
            path: path_params,
            query: HashMap::new(),
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let url = client.build_url(&tool_metadata, &extracted_params).unwrap();
        assert_eq!(url.to_string(), "https://api.example.com/pets/123");
    }

    #[test]
    fn test_build_url_with_base_url_containing_path() {
        let test_cases = vec![
            "https://api.example.com/api/v4",
            "https://api.example.com/api/v4/",
        ];

        for base_url in test_cases {
            let base_url = Url::parse(base_url).unwrap();
            let client = HttpClient::new().with_base_url(base_url).unwrap();

            let tool_metadata = crate::ToolMetadata {
                name: "test".to_string(),
                title: None,
                description: Some("test".to_string()),
                parameters: json!({}),
                output_schema: None,
                method: "GET".to_string(),
                path: "/pets/{id}".to_string(),
                security: None,
                parameter_mappings: std::collections::HashMap::new(),
            };

            let mut path_params = HashMap::new();
            path_params.insert("id".to_string(), json!(123));

            let extracted_params = ExtractedParameters {
                path: path_params,
                query: HashMap::new(),
                headers: HashMap::new(),
                cookies: HashMap::new(),
                body: HashMap::new(),
                config: crate::tool_generator::RequestConfig::default(),
            };

            let url = client.build_url(&tool_metadata, &extracted_params).unwrap();
            assert_eq!(url.to_string(), "https://api.example.com/api/v4/pets/123");
        }
    }

    #[test]
    fn test_build_url_without_base_url() {
        let client = HttpClient::new();

        let tool_metadata = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "https://api.example.com/pets/123".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        let extracted_params = ExtractedParameters {
            path: HashMap::new(),
            query: HashMap::new(),
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let url = client.build_url(&tool_metadata, &extracted_params).unwrap();
        assert_eq!(url.to_string(), "https://api.example.com/pets/123");

        // Test error case: relative path without base URL
        let tool_metadata_relative = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "/pets/123".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        let result = client.build_url(&tool_metadata_relative, &extracted_params);
        assert!(result.is_err());
        assert!(
            result
                .unwrap_err()
                .to_string()
                .contains("No base URL configured")
        );
    }

    #[test]
    fn test_query_parameter_encoding_integration() {
        let base_url = Url::parse("https://api.example.com").unwrap();
        let client = HttpClient::new().with_base_url(base_url).unwrap();

        let tool_metadata = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "/search".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        // Test various query parameter values that need encoding
        let mut query_params = HashMap::new();
        query_params.insert(
            "q".to_string(),
            QueryParameter::new(json!("hello world"), true),
        ); // space
        query_params.insert(
            "category".to_string(),
            QueryParameter::new(json!("pets&dogs"), true),
        ); // ampersand
        query_params.insert(
            "special".to_string(),
            QueryParameter::new(json!("foo=bar"), true),
        ); // equals
        query_params.insert(
            "unicode".to_string(),
            QueryParameter::new(json!("café"), true),
        ); // unicode
        query_params.insert(
            "percent".to_string(),
            QueryParameter::new(json!("100%"), true),
        ); // percent

        let extracted_params = ExtractedParameters {
            path: HashMap::new(),
            query: query_params,
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let mut url = client.build_url(&tool_metadata, &extracted_params).unwrap();
        HttpClient::add_query_parameters(&mut url, &extracted_params.query);

        let url_string = url.to_string();

        // Verify the URL contains properly encoded parameters
        // Note: url crate encodes spaces as + in query parameters (which is valid)
        assert!(url_string.contains("q=hello+world")); // space encoded as +
        assert!(url_string.contains("category=pets%26dogs")); // & encoded as %26
        assert!(url_string.contains("special=foo%3Dbar")); // = encoded as %3D
        assert!(url_string.contains("unicode=caf%C3%A9")); // é encoded as %C3%A9
        assert!(url_string.contains("percent=100%25")); // % encoded as %25
    }

    #[test]
    fn test_array_query_parameters() {
        let base_url = Url::parse("https://api.example.com").unwrap();
        let client = HttpClient::new().with_base_url(base_url).unwrap();

        let tool_metadata = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "/search".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        let mut query_params = HashMap::new();
        query_params.insert(
            "status".to_string(),
            QueryParameter::new(json!(["available", "pending"]), true),
        );
        query_params.insert(
            "tags".to_string(),
            QueryParameter::new(json!(["red & blue", "fast=car"]), true),
        );

        let extracted_params = ExtractedParameters {
            path: HashMap::new(),
            query: query_params,
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let mut url = client.build_url(&tool_metadata, &extracted_params).unwrap();
        HttpClient::add_query_parameters(&mut url, &extracted_params.query);

        let url_string = url.to_string();

        // Verify array parameters are added multiple times with proper encoding
        assert!(url_string.contains("status=available"));
        assert!(url_string.contains("status=pending"));
        assert!(url_string.contains("tags=red+%26+blue")); // "red & blue" encoded (spaces as +)
        assert!(url_string.contains("tags=fast%3Dcar")); // "fast=car" encoded
    }

    #[test]
    fn test_path_parameter_substitution() {
        let base_url = Url::parse("https://api.example.com").unwrap();
        let client = HttpClient::new().with_base_url(base_url).unwrap();

        let tool_metadata = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "/users/{userId}/pets/{petId}".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        let mut path_params = HashMap::new();
        path_params.insert("userId".to_string(), json!(42));
        path_params.insert("petId".to_string(), json!("special-pet-123"));

        let extracted_params = ExtractedParameters {
            path: path_params,
            query: HashMap::new(),
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let url = client.build_url(&tool_metadata, &extracted_params).unwrap();
        assert_eq!(
            url.to_string(),
            "https://api.example.com/users/42/pets/special-pet-123"
        );
    }

    #[test]
    fn test_url_join_edge_cases() {
        // Test trailing slash handling
        let base_url1 = Url::parse("https://api.example.com/").unwrap();
        let client1 = HttpClient::new().with_base_url(base_url1).unwrap();

        let base_url2 = Url::parse("https://api.example.com").unwrap();
        let client2 = HttpClient::new().with_base_url(base_url2).unwrap();

        let tool_metadata = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "/pets".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        let extracted_params = ExtractedParameters {
            path: HashMap::new(),
            query: HashMap::new(),
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let url1 = client1
            .build_url(&tool_metadata, &extracted_params)
            .unwrap();
        let url2 = client2
            .build_url(&tool_metadata, &extracted_params)
            .unwrap();

        // Both should produce the same normalized URL
        assert_eq!(url1.to_string(), "https://api.example.com/pets");
        assert_eq!(url2.to_string(), "https://api.example.com/pets");
    }

    #[test]
    fn test_explode_array_parameters() {
        let base_url = Url::parse("https://api.example.com").unwrap();
        let client = HttpClient::new().with_base_url(base_url).unwrap();

        let tool_metadata = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "/search".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        // Test explode=true (should generate separate parameters)
        let mut query_params_exploded = HashMap::new();
        query_params_exploded.insert(
            "include".to_string(),
            QueryParameter::new(json!(["asset", "scenes"]), true),
        );

        let extracted_params_exploded = ExtractedParameters {
            path: HashMap::new(),
            query: query_params_exploded,
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let mut url_exploded = client
            .build_url(&tool_metadata, &extracted_params_exploded)
            .unwrap();
        HttpClient::add_query_parameters(&mut url_exploded, &extracted_params_exploded.query);
        let url_exploded_string = url_exploded.to_string();

        // Test explode=false (should generate comma-separated values)
        let mut query_params_not_exploded = HashMap::new();
        query_params_not_exploded.insert(
            "include".to_string(),
            QueryParameter::new(json!(["asset", "scenes"]), false),
        );

        let extracted_params_not_exploded = ExtractedParameters {
            path: HashMap::new(),
            query: query_params_not_exploded,
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let mut url_not_exploded = client
            .build_url(&tool_metadata, &extracted_params_not_exploded)
            .unwrap();
        HttpClient::add_query_parameters(
            &mut url_not_exploded,
            &extracted_params_not_exploded.query,
        );
        let url_not_exploded_string = url_not_exploded.to_string();

        // Verify explode=true generates separate parameters
        assert!(url_exploded_string.contains("include=asset"));
        assert!(url_exploded_string.contains("include=scenes"));

        // Verify explode=false generates comma-separated values
        assert!(url_not_exploded_string.contains("include=asset%2Cscenes")); // comma is URL-encoded as %2C

        // Make sure they're different
        assert_ne!(url_exploded_string, url_not_exploded_string);

        println!("Exploded URL: {url_exploded_string}");
        println!("Non-exploded URL: {url_not_exploded_string}");
    }

    #[test]
    fn test_deep_object_parameters() {
        let base_url = Url::parse("https://api.example.com").unwrap();
        let client = HttpClient::new().with_base_url(base_url).unwrap();

        let tool_metadata = crate::ToolMetadata {
            name: "test".to_string(),
            title: None,
            description: Some("test".to_string()),
            parameters: json!({}),
            output_schema: None,
            method: "GET".to_string(),
            path: "/search".to_string(),
            security: None,
            parameter_mappings: std::collections::HashMap::new(),
        };

        // An OpenAPI `style: deepObject` parameter arrives as an object value.
        let mut query_params = HashMap::new();
        query_params.insert(
            "fields".to_string(),
            QueryParameter::new(
                json!({ "camera": ["name", "type"], "node": ["name"] }),
                true,
            ),
        );

        let extracted_params = ExtractedParameters {
            path: HashMap::new(),
            query: query_params,
            headers: HashMap::new(),
            cookies: HashMap::new(),
            body: HashMap::new(),
            config: crate::tool_generator::RequestConfig::default(),
        };

        let mut url = client.build_url(&tool_metadata, &extracted_params).unwrap();
        HttpClient::add_query_parameters(&mut url, &extracted_params.query);
        let url_string = url.to_string();

        // Each property expands to `fields[<prop>]=<csv>`; `[`/`]`/`,` are
        // percent-encoded as %5B/%5D/%2C.
        assert!(
            url_string.contains("fields%5Bcamera%5D=name%2Ctype"),
            "expected fields[camera]=name,type, got {url_string}"
        );
        assert!(
            url_string.contains("fields%5Bnode%5D=name"),
            "expected fields[node]=name, got {url_string}"
        );
        // The object must not be sent as a JSON blob.
        assert!(
            !url_string.contains("%7B"),
            "object must not be JSON-serialized, got {url_string}"
        );
    }

    #[test]
    fn test_is_image_helper() {
        // Test various image content types
        let response_png = HttpResponse {
            status_code: 200,
            status_text: "OK".to_string(),
            headers: HashMap::new(),
            content_type: Some("image/png".to_string()),
            body: String::new(),
            body_bytes: None,
            is_success: true,
            request_method: "GET".to_string(),
            request_url: "http://example.com".to_string(),
            request_body: String::new(),
        };
        assert!(response_png.is_image());

        let response_jpeg = HttpResponse {
            content_type: Some("image/jpeg".to_string()),
            ..response_png.clone()
        };
        assert!(response_jpeg.is_image());

        // Test with charset parameter
        let response_with_charset = HttpResponse {
            content_type: Some("image/png; charset=utf-8".to_string()),
            ..response_png.clone()
        };
        assert!(response_with_charset.is_image());

        // Test non-image content types
        let response_json = HttpResponse {
            content_type: Some("application/json".to_string()),
            ..response_png.clone()
        };
        assert!(!response_json.is_image());

        let response_text = HttpResponse {
            content_type: Some("text/plain".to_string()),
            ..response_png.clone()
        };
        assert!(!response_text.is_image());

        // Test with no content type
        let response_no_ct = HttpResponse {
            content_type: None,
            ..response_png
        };
        assert!(!response_no_ct.is_image());
    }

    #[test]
    fn test_is_binary_helper() {
        let base_response = HttpResponse {
            status_code: 200,
            status_text: "OK".to_string(),
            headers: HashMap::new(),
            content_type: None,
            body: String::new(),
            body_bytes: None,
            is_success: true,
            request_method: "GET".to_string(),
            request_url: "http://example.com".to_string(),
            request_body: String::new(),
        };

        // Test image types
        let response_image = HttpResponse {
            content_type: Some("image/png".to_string()),
            ..base_response.clone()
        };
        assert!(response_image.is_binary());

        // Test audio types
        let response_audio = HttpResponse {
            content_type: Some("audio/mpeg".to_string()),
            ..base_response.clone()
        };
        assert!(response_audio.is_binary());

        // Test video types
        let response_video = HttpResponse {
            content_type: Some("video/mp4".to_string()),
            ..base_response.clone()
        };
        assert!(response_video.is_binary());

        // Test non-binary types
        let response_json = HttpResponse {
            content_type: Some("application/json".to_string()),
            ..base_response.clone()
        };
        assert!(!response_json.is_binary());

        // Test with no content type
        assert!(!base_response.is_binary());
    }

    #[test]
    fn test_parse_data_uri_valid_png() {
        // "hello" encoded as base64
        let uri = "data:image/png;base64,aGVsbG8=";
        let result = super::parse_data_uri(uri, "test_field").unwrap();

        assert_eq!(result.mime_type, "image/png");
        assert_eq!(result.bytes, b"hello");
    }

    #[test]
    fn test_parse_data_uri_valid_jpeg() {
        // "world" encoded as base64
        let uri = "data:image/jpeg;base64,d29ybGQ=";
        let result = super::parse_data_uri(uri, "image").unwrap();

        assert_eq!(result.mime_type, "image/jpeg");
        assert_eq!(result.bytes, b"world");
    }

    #[test]
    fn test_parse_data_uri_valid_application_json() {
        // "{}" encoded as base64
        let uri = "data:application/json;base64,e30=";
        let result = super::parse_data_uri(uri, "data").unwrap();

        assert_eq!(result.mime_type, "application/json");
        assert_eq!(result.bytes, b"{}");
    }

    #[test]
    fn test_parse_data_uri_missing_data_prefix() {
        let uri = "image/png;base64,aGVsbG8=";
        let result = super::parse_data_uri(uri, "test_field");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("Invalid data URI format"));
        assert!(err.contains("test_field"));
        assert!(err.contains("expected 'data:<mime>;base64,<content>'"));
    }

    #[test]
    fn test_parse_data_uri_missing_semicolon() {
        let uri = "data:image/png,aGVsbG8=";
        let result = super::parse_data_uri(uri, "my_image");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("Invalid data URI format"));
        assert!(err.contains("my_image"));
    }

    #[test]
    fn test_parse_data_uri_missing_comma() {
        let uri = "data:image/png;base64aGVsbG8=";
        let result = super::parse_data_uri(uri, "field");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("Invalid data URI format"));
    }

    #[test]
    fn test_parse_data_uri_unsupported_encoding() {
        let uri = "data:image/png;ascii,hello";
        let result = super::parse_data_uri(uri, "test_field");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("Unsupported encoding 'ascii'"));
        assert!(err.contains("test_field"));
        assert!(err.contains("only base64 is supported"));
    }

    #[test]
    fn test_parse_data_uri_unsupported_encoding_utf8() {
        let uri = "data:text/plain;utf-8,hello world";
        let result = super::parse_data_uri(uri, "content");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("Unsupported encoding 'utf-8'"));
        assert!(err.contains("content"));
    }

    #[test]
    fn test_parse_data_uri_invalid_base64() {
        // Invalid base64: contains characters that aren't valid base64
        let uri = "data:image/png;base64,not-valid-base64!!!";
        let result = super::parse_data_uri(uri, "bad_image");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("Invalid base64 content"));
        assert!(err.contains("bad_image"));
    }

    #[test]
    fn test_parse_data_uri_empty_content() {
        // Empty base64 content is valid and decodes to empty bytes
        let uri = "data:application/octet-stream;base64,";
        let result = super::parse_data_uri(uri, "empty").unwrap();

        assert_eq!(result.mime_type, "application/octet-stream");
        assert!(result.bytes.is_empty());
    }

    #[test]
    fn test_parse_data_uri_complex_mime_type() {
        // MIME type with subtype
        let uri = "data:application/vnd.api+json;base64,e30=";
        let result = super::parse_data_uri(uri, "api_data").unwrap();

        assert_eq!(result.mime_type, "application/vnd.api+json");
        assert_eq!(result.bytes, b"{}");
    }

    #[test]
    fn test_parse_data_uri_mime_type_with_parameters() {
        // MIME type with charset parameter
        let uri = "data:text/plain;charset=utf-8;base64,SGVsbG8gV29ybGQ=";
        let result = super::parse_data_uri(uri, "text_field").unwrap();

        assert_eq!(result.mime_type, "text/plain;charset=utf-8");
        assert_eq!(result.bytes, b"Hello World");
    }

    #[test]
    fn test_parse_data_uri_mime_type_with_multiple_parameters() {
        // MIME type with multiple parameters
        let uri = "data:text/html;charset=utf-8;boundary=something;base64,PGh0bWw+";
        let result = super::parse_data_uri(uri, "html_field").unwrap();

        assert_eq!(
            result.mime_type,
            "text/html;charset=utf-8;boundary=something"
        );
        assert_eq!(result.bytes, b"<html>");
    }

    #[test]
    fn test_parse_data_uri_empty_mime_type() {
        // Empty MIME type should be rejected
        let uri = "data:;base64,SGVsbG8=";
        let result = super::parse_data_uri(uri, "field");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("MIME type cannot be empty"));
    }

    #[test]
    fn test_parse_data_uri_empty_string() {
        let result = super::parse_data_uri("", "field");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("Invalid data URI format"));
    }

    #[test]
    fn test_parse_data_uri_just_data_prefix() {
        let result = super::parse_data_uri("data:", "field");

        assert!(result.is_err());
        let err = result.unwrap_err().to_string();
        assert!(err.contains("Invalid data URI format"));
    }

    // ==================== Multipart Form Building Tests ====================
    //
    // Note: The `add_request_body` function modifies a `reqwest::RequestBuilder`
    // which is an opaque type. We cannot inspect the actual multipart form content
    // without sending the request. These tests verify:
    // 1. Error handling for invalid inputs (e.g., invalid data URIs)
    // 2. Successful building for valid inputs (returns Ok)
    //
    // Full integration testing of multipart uploads would require a mock HTTP
    // server, which is beyond the scope of unit tests.

    #[test]
    fn test_add_request_body_multipart_with_valid_file() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/upload");

        let mut body = HashMap::new();
        // Valid file with data URI
        body.insert(
            "file".to_string(),
            json!({
                "content": "data:image/png;base64,iVBORw0KGgo=",
                "filename": "test.png"
            }),
        );
        // Text field
        body.insert("description".to_string(), json!("Test file upload"));

        let config = crate::tool_generator::RequestConfig {
            timeout_seconds: 30,
            content_type: mime::MULTIPART_FORM_DATA.to_string(),
        };

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(
            result.is_ok(),
            "Should successfully build multipart form with valid file"
        );
    }

    #[test]
    fn test_add_request_body_multipart_with_invalid_data_uri() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/upload");

        let mut body = HashMap::new();
        // Invalid data URI (missing base64 marker)
        body.insert(
            "file".to_string(),
            json!({
                "content": "data:image/png,notbase64",
                "filename": "test.png"
            }),
        );

        let config = crate::tool_generator::RequestConfig {
            timeout_seconds: 30,
            content_type: mime::MULTIPART_FORM_DATA.to_string(),
        };

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(result.is_err(), "Should fail with invalid data URI");
        let err = result.unwrap_err().to_string();
        assert!(
            err.contains("Invalid data URI format"),
            "Error should mention invalid format"
        );
    }

    #[test]
    fn test_add_request_body_multipart_with_invalid_base64() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/upload");

        let mut body = HashMap::new();
        // Invalid base64 content
        body.insert(
            "file".to_string(),
            json!({
                "content": "data:image/png;base64,!!!invalid!!!",
                "filename": "test.png"
            }),
        );

        let config = crate::tool_generator::RequestConfig {
            timeout_seconds: 30,
            content_type: mime::MULTIPART_FORM_DATA.to_string(),
        };

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(result.is_err(), "Should fail with invalid base64");
        let err = result.unwrap_err().to_string();
        assert!(
            err.contains("Invalid base64 content"),
            "Error should mention invalid base64"
        );
    }

    #[test]
    fn test_add_request_body_multipart_text_only() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/upload");

        let mut body = HashMap::new();
        body.insert("field1".to_string(), json!("text value"));
        body.insert("field2".to_string(), json!(123));
        body.insert("field3".to_string(), json!(true));

        let config = crate::tool_generator::RequestConfig {
            timeout_seconds: 30,
            content_type: mime::MULTIPART_FORM_DATA.to_string(),
        };

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(
            result.is_ok(),
            "Should successfully build multipart form with text-only fields"
        );
    }

    #[test]
    fn test_add_request_body_multipart_mixed_content() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/upload");

        let mut body = HashMap::new();
        // File field
        body.insert(
            "image".to_string(),
            json!({
                "content": "data:image/jpeg;base64,/9j/4AAQ",
                "filename": "photo.jpg"
            }),
        );
        // Text fields
        body.insert("title".to_string(), json!("My Photo"));
        body.insert("tags".to_string(), json!(["nature", "sunset"]));

        let config = crate::tool_generator::RequestConfig {
            timeout_seconds: 30,
            content_type: mime::MULTIPART_FORM_DATA.to_string(),
        };

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(result.is_ok(), "Should handle mixed file and text content");
    }

    #[test]
    fn test_add_request_body_multipart_without_filename() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/upload");

        let mut body = HashMap::new();
        // File without explicit filename (should default to "file")
        body.insert(
            "upload".to_string(),
            json!({
                "content": "data:application/pdf;base64,JVBERi0="
            }),
        );

        let config = crate::tool_generator::RequestConfig {
            timeout_seconds: 30,
            content_type: mime::MULTIPART_FORM_DATA.to_string(),
        };

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(
            result.is_ok(),
            "Should handle file upload without explicit filename"
        );
    }

    #[test]
    fn test_add_request_body_json() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/api");

        let mut body = HashMap::new();
        body.insert("name".to_string(), json!("test"));
        body.insert("value".to_string(), json!(42));

        let config = crate::tool_generator::RequestConfig {
            timeout_seconds: 30,
            content_type: mime::APPLICATION_JSON.to_string(),
        };

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(result.is_ok(), "Should build JSON body");
    }

    #[test]
    fn test_add_request_body_form_urlencoded() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/form");

        let mut body = HashMap::new();
        body.insert("username".to_string(), json!("user"));
        body.insert("password".to_string(), json!("secret"));

        let config = crate::tool_generator::RequestConfig {
            timeout_seconds: 30,
            content_type: mime::APPLICATION_WWW_FORM_URLENCODED.to_string(),
        };

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(result.is_ok(), "Should build form-urlencoded body");
    }

    #[tokio::test]
    async fn http_client_with_insecure_still_serves_plain_http() {
        let mut server = mockito::Server::new_async().await;
        let mock = server
            .mock("GET", "/ping")
            .with_status(200)
            .with_body("pong")
            .create_async()
            .await;

        let base_url: Url = server.url().parse().unwrap();
        let client = HttpClient::new()
            .with_insecure(true)
            .with_base_url(base_url.clone())
            .unwrap();

        let url = base_url.join("ping").unwrap();
        let response = client.client.get(url).send().await.unwrap();
        assert_eq!(response.status().as_u16(), 200);
        assert_eq!(response.text().await.unwrap(), "pong");

        mock.assert_async().await;
    }

    #[test]
    fn test_add_request_body_empty() {
        let client = HttpClient::new();
        let request = client.client.post("http://example.com/api");

        let body = HashMap::new();

        let config = crate::tool_generator::RequestConfig::default();

        let result = HttpClient::add_request_body(request, &body, &config);
        assert!(result.is_ok(), "Should handle empty body");
    }
}