torrust_tracker_deployer_lib/domain/environment/

mod.rs

//! Environment Domain Module
//!
//! This module contains all environment-related domain entities and types.
//!
//! ## Architecture: Context + State Design
//!
//! The `Environment` entity uses a two-part design to separate immutable identity
//! from mutable lifecycle state:
//!
//! ### `EnvironmentContext` - Three Semantic Categories
//!
//! The context is organized into three distinct semantic types, each with a clear purpose:
//!
//! #### 1. **User Inputs** (`UserInputs`)
//! - **Purpose**: Configuration provided when creating an environment
//! - **Characteristics**: Immutable throughout environment lifecycle
//! - **Fields**: `name`, `instance_name`, `profile_name`, `ssh_credentials`, `ssh_port`
//! - **When to add**: User needs to configure something at creation time
//!
//! #### 2. **Internal Config** (`InternalConfig`)
//! - **Purpose**: Derived configuration for internal use
//! - **Characteristics**: Calculated from user inputs
//! - **Fields**: `build_dir`, `data_dir`
//! - **When to add**: Need internal paths or derived configuration
//!
//! #### 3. **Runtime Outputs** (`RuntimeOutputs`)
//! - **Purpose**: Data generated during deployment operations
//! - **Characteristics**: Mutable as operations progress
//! - **Fields**: `instance_ip` (more fields expected as deployment evolves)
//! - **When to add**: Operations produce new data about deployed infrastructure
//!
//! ### `state: S` - Mutable Lifecycle State
//!
//! Tracks the current phase in the deployment lifecycle using the type-state pattern:
//! - **Success states**: `Created`, `Provisioning`, `Provisioned`, `Configuring`, etc.
//! - **Error states**: `ProvisionFailed`, `ConfigureFailed`, etc.
//!
//! ### Benefits of This Design
//!
//! - **Compile-time safety**: Invalid state transitions caught at compile time
//! - **Reduced pattern matching**: Access common fields without matching on state (83% reduction)
//! - **Clear separation**: Identity vs. lifecycle are distinct concerns
//! - **Semantic clarity**: Types document the purpose of each field
//! - **Developer guidance**: Clear where to add new fields based on their purpose
//! - **Easy extension**: Adding fields or states is straightforward
//!
//! ## Submodules
//!
//! - `context` - Environment context composing the three semantic types
//! - `user_inputs` - User-provided configuration
//! - `internal_config` - Derived paths and internal settings
//! - `runtime_outputs` - Data generated during deployment
//! - `name` - Environment name validation and management
//! - `state` - State marker types and type erasure for environment state machine
//!
//! ## Main Entity
//!
//! The `Environment` entity encapsulates all environment-specific configuration for deployments.
//! Each environment represents an isolated deployment context with its own directories,
//! SSH keys, and instance naming.
//!
//! ## Purpose
//!
//! The Environment entity provides:
//! - Environment-specific directory structure (`data/{env_name}/`, `build/{env_name}/`)
//! - Instance naming with conflict avoidance (`torrust-tracker-vm-{env_name}`)
//! - SSH key pair management per environment
//! - JSON serialization for future state persistence
//!
//! ## Usage Example
//!
//! ```rust
//! use torrust_tracker_deployer_lib::domain::environment::{Environment, name::EnvironmentName};
//! use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
//! use torrust_tracker_deployer_lib::domain::ProfileName;
//! use torrust_tracker_deployer_lib::shared::Username;
//! use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
//! use std::path::PathBuf;
//! use chrono::{TimeZone, Utc};
//!
//! let env_name = EnvironmentName::new("e2e-config".to_string())?;
//! let ssh_username = Username::new("torrust".to_string())?;
//! let ssh_credentials = SshCredentials::new(
//!     PathBuf::from("fixtures/testing_rsa"),
//!     PathBuf::from("fixtures/testing_rsa.pub"),
//!     ssh_username,
//! );
//! let provider_config = ProviderConfig::Lxd(LxdConfig {
//!     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
//! });
//! let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
//! let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
//!
//! // Environment automatically generates paths
//! assert_eq!(*environment.data_dir(), PathBuf::from("./data/e2e-config"));
//! assert_eq!(*environment.build_dir(), PathBuf::from("./build/e2e-config"));
//! assert_eq!(environment.templates_dir(), PathBuf::from("./data/e2e-config/templates"));
//!
//! # Ok::<(), Box<dyn std::error::Error>>(())
//! ```

pub mod context;
pub mod internal_config;
pub mod name;
pub mod params;
pub mod repository;
pub mod runtime_outputs;
pub mod state;
mod trace_id;
pub mod user_inputs;

// Test utilities (only available in test configuration)
#[cfg(test)]
pub mod testing;

// Re-export TraceId for use by state module
pub use trace_id::TraceId;

// Re-export commonly used types for convenience
pub use context::EnvironmentContext;
pub use internal_config::InternalConfig;
pub use name::{EnvironmentName, EnvironmentNameError};
pub use params::EnvironmentParams;
pub use runtime_outputs::{ProvisionMethod, RuntimeOutputs};
pub use state::{
    AnyEnvironmentState, ConfigureFailed, Configured, Configuring, Created, DestroyFailed,
    Destroyed, Destroying, ProvisionFailed, Provisioned, Provisioning, ReleaseFailed, Released,
    Releasing, RunFailed, Running,
};
pub use user_inputs::{UserInputs, UserInputsError};

// Re-export tracker types for convenience
pub use crate::domain::tracker::{
    DatabaseConfig, HealthCheckApiConfig, HttpApiConfig, HttpTrackerConfig, MysqlConfig,
    SqliteConfig, TrackerConfig, TrackerCoreConfig, UdpTrackerConfig,
};

// Re-export Prometheus types for convenience
pub use crate::domain::prometheus::PrometheusConfig;

// Re-export Grafana types for convenience
pub use crate::domain::grafana::GrafanaConfig;

// Re-export Backup types for convenience
pub use crate::domain::backup::BackupConfig;

use crate::adapters::ssh::SshCredentials;
use crate::domain::provider::ProviderConfig;
use crate::domain::{InstanceName, ProfileName};
use crate::shared::Username;
use chrono::{DateTime, Utc};
use serde::{Deserialize, Serialize};
use std::net::IpAddr;
use std::path::PathBuf;

/// Directory name for trace files within an environment's data directory
pub const TRACES_DIR_NAME: &str = "traces";

/// Directory name for template files within an environment's data directory
pub const TEMPLATES_DIR_NAME: &str = "templates";

/// Directory name for Ansible-related files
pub const ANSIBLE_DIR_NAME: &str = "ansible";

/// Directory name for OpenTofu-related files
pub const TOFU_DIR_NAME: &str = "tofu";

/// Provider name for LXD infrastructure
pub const LXD_PROVIDER_NAME: &str = "lxd";

/// Environment configuration encapsulating all environment-specific settings
///
/// This entity represents a complete environment configuration including naming,
/// directory structure, SSH keys, and derived paths. It follows the principle of
/// environment isolation where each environment has its own separate resources.
///
/// # Architecture: Context + State Design
///
/// The `Environment<S>` is composed of two distinct parts:
///
/// ## `context: EnvironmentContext` - Immutable Identity
///
/// Contains all state-independent data that remains constant throughout the
/// environment's lifecycle. This includes identity (`name`, `instance_name`),
/// configuration (SSH credentials, port), and paths (`build_dir`, `data_dir`).
///
/// Accessing context data is efficient and requires no pattern matching on state.
///
/// ## `state: S` - Mutable Lifecycle State
///
/// Represents the current phase in the deployment lifecycle using type parameters.
/// The type-state pattern ensures that state transitions are validated at compile-time.
///
/// # Type-State Pattern
///
/// The Environment uses the type-state pattern to enforce valid state transitions
/// at compile-time. Each state is represented by a distinct type parameter `S`,
/// ensuring that operations are only callable on appropriate states.
///
/// # Design Principles
///
/// - **Isolation**: Each environment is completely isolated from others
/// - **Compile-time Safety**: Invalid state transitions caught during compilation
/// - **Separation of Concerns**: Context (identity) vs. State (lifecycle) are distinct
/// - **Consistency**: All paths follow the same naming pattern
/// - **Predictability**: Paths are derived automatically from environment name
/// - **Traceability**: All artifacts are organized by environment for debugging
/// - **Type Safety**: Invalid state transitions are prevented at compile-time
///
/// # Directory Structure
///
/// ```text
/// data/{env_name}/
///   templates/         # Environment-specific templates
/// build/{env_name}/    # Environment-specific build artifacts
/// ```
///
/// # Instance Naming
///
/// Instance names follow the pattern: `torrust-tracker-vm-{env_name}`
/// This ensures multiple environments can run concurrently without conflicts.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Environment<S = Created> {
    /// Core environment data shared across all states
    context: EnvironmentContext,

    /// Current state of the environment in the deployment lifecycle
    state: S,
}

impl Environment {
    /// Creates a new Environment with auto-generated paths and instance name
    ///
    /// # Arguments
    ///
    /// * `name` - The validated environment name
    /// * `provider_config` - Provider-specific configuration (LXD, Hetzner, etc.)
    /// * `ssh_credentials` - SSH credentials for connecting to instances
    /// * `ssh_port` - SSH port for connecting to instances
    ///
    /// # Returns
    ///
    /// A new Environment instance with all paths and instance name automatically
    /// generated based on the environment name.
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName, ProfileName};
    /// use torrust_tracker_deployer_lib::domain::provider::{ProviderConfig, LxdConfig};
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("production".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/prod_rsa"),
    ///     PathBuf::from("keys/prod_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new("torrust-profile-production".to_string())?,
    /// });
    /// let ssh_port = 22;
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, ssh_port, created_at);
    ///
    /// assert_eq!(environment.instance_name().as_str(), "torrust-tracker-vm-production");
    /// assert_eq!(*environment.data_dir(), PathBuf::from("./data/production"));
    /// assert_eq!(*environment.build_dir(), PathBuf::from("./build/production"));
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    ///
    /// # Panics
    ///
    /// This function does not panic. All instance name generation is guaranteed
    /// to succeed for valid environment names.
    #[must_use]
    #[allow(clippy::needless_pass_by_value)] // Public API takes ownership for ergonomics
    pub fn new(
        name: EnvironmentName,
        provider_config: ProviderConfig,
        ssh_credentials: SshCredentials,
        ssh_port: u16,
        created_at: DateTime<Utc>,
    ) -> Environment<Created> {
        let context = EnvironmentContext::new(
            &name,
            provider_config,
            ssh_credentials,
            ssh_port,
            created_at,
        );

        Environment {
            context,
            state: Created,
        }
    }

    /// Creates a new environment in Created state from validated parameters
    ///
    /// This is the primary factory method for creating a fully-configured
    /// `Environment` aggregate. It accepts an `EnvironmentParams` value object
    /// containing all validated domain inputs.
    ///
    /// This creates absolute paths for data and build directories by using the
    /// provided working directory as the base.
    ///
    /// # Arguments
    ///
    /// * `params` - Validated environment parameters (domain value object)
    /// * `working_dir` - Base directory for data and build directories
    /// * `created_at` - Timestamp for environment creation
    ///
    /// # Errors
    ///
    /// Returns `UserInputsError` if the cross-service configuration is invalid:
    /// - `GrafanaRequiresPrometheus`: Grafana is configured but Prometheus is not
    /// - `HttpsSectionWithoutTlsServices`: HTTPS section exists but no service uses TLS
    /// - `TlsServicesWithoutHttpsSection`: Service has TLS but HTTPS section is missing
    #[allow(clippy::needless_pass_by_value)] // Public API takes ownership for ergonomics
    pub fn create(
        params: EnvironmentParams,
        working_dir: &std::path::Path,
        created_at: DateTime<Utc>,
    ) -> Result<Environment<Created>, UserInputsError> {
        let context = EnvironmentContext::create(params, working_dir, created_at)?;

        Ok(Environment {
            context,
            state: Created,
        })
    }
}

// Common transitions available from any state
impl<S> Environment<S> {
    /// Internal helper: Creates a new environment with a different state
    ///
    /// This is a private helper method used by state transition methods to avoid
    /// duplicating field copying code. It transfers all environment data while
    /// changing only the state type parameter.
    ///
    /// This method automatically logs all state transitions at info level with
    /// structured fields for observability and audit trail purposes.
    ///
    /// # Type Parameters
    ///
    /// * `T` - The target state type
    ///
    /// # Arguments
    ///
    /// * `new_state` - The new state instance to transition to
    ///
    /// # Returns
    ///
    /// A new `Environment<T>` with all fields preserved except the state
    fn with_state<T>(self, new_state: T) -> Environment<T> {
        // Log state transition for observability and audit trail
        tracing::info!(
            environment_name = %self.context.user_inputs.name(),
            instance_name = %self.context.user_inputs.instance_name(),
            from_state = std::any::type_name::<S>(),
            to_state = std::any::type_name::<T>(),
            "Environment state transition"
        );

        Environment {
            context: self.context,
            state: new_state,
        }
    }

    /// Transitions from any state to Destroying state
    ///
    /// This method can be called from any state to begin the environment destruction process.
    /// It indicates that the destroy command has started executing.
    #[must_use]
    pub fn start_destroying(self) -> Environment<Destroying> {
        self.with_state(Destroying)
    }

    /// Transitions from any state to Destroyed state
    ///
    /// This method can be called from any state to destroy the environment.
    /// It indicates that all infrastructure resources have been released.
    #[must_use]
    pub fn destroy(self) -> Environment<Destroyed> {
        self.with_state(Destroyed)
    }
}

// Type Erasure: Typed → Runtime conversions (into_any)
// Generic implementations for all states
impl<S> Environment<S> {
    /// Get a reference to the environment context
    ///
    /// Provides access to all state-independent environment data.
    #[must_use]
    pub fn context(&self) -> &EnvironmentContext {
        &self.context
    }

    /// Get a mutable reference to the environment context
    ///
    /// Used for operations that need to modify context data, such as
    /// setting the instance IP after provisioning.
    fn context_mut(&mut self) -> &mut EnvironmentContext {
        &mut self.context
    }

    /// Returns a reference to the current state
    #[must_use]
    pub fn state(&self) -> &S {
        &self.state
    }

    /// Returns the environment name
    #[must_use]
    pub fn name(&self) -> &EnvironmentName {
        self.context.user_inputs.name()
    }

    /// Returns the instance name for this environment
    #[must_use]
    pub fn instance_name(&self) -> &InstanceName {
        self.context.instance_name()
    }

    /// Returns the provider configuration for this environment
    #[must_use]
    pub fn provider_config(&self) -> &ProviderConfig {
        self.context.provider_config()
    }

    /// Returns the SSH credentials for this environment
    #[must_use]
    pub fn ssh_credentials(&self) -> &SshCredentials {
        self.context.ssh_credentials()
    }

    /// Returns the SSH port for this environment
    #[must_use]
    pub fn ssh_port(&self) -> u16 {
        self.context.ssh_port()
    }

    /// Returns the database configuration for this environment
    #[must_use]
    pub fn database_config(&self) -> &DatabaseConfig {
        self.context.database_config()
    }

    /// Returns the tracker configuration for this environment
    #[must_use]
    pub fn tracker_config(&self) -> &TrackerConfig {
        self.context.tracker_config()
    }

    /// Returns the admin token for the HTTP API
    #[must_use]
    pub fn admin_token(&self) -> &str {
        self.context.admin_token()
    }

    /// Returns the Prometheus configuration if enabled
    #[must_use]
    pub fn prometheus_config(&self) -> Option<&PrometheusConfig> {
        self.context.prometheus_config()
    }

    /// Returns the Grafana configuration if enabled
    #[must_use]
    pub fn grafana_config(&self) -> Option<&GrafanaConfig> {
        self.context.grafana_config()
    }

    /// Returns the Backup configuration if enabled
    #[must_use]
    pub fn backup_config(&self) -> Option<&BackupConfig> {
        self.context.backup_config()
    }

    /// Returns the SSH username for this environment
    #[must_use]
    pub fn ssh_username(&self) -> &Username {
        self.context.ssh_username()
    }

    /// Returns the SSH private key path for this environment
    #[must_use]
    pub fn ssh_private_key_path(&self) -> &PathBuf {
        self.context.ssh_private_key_path()
    }

    /// Returns the SSH public key path for this environment
    #[must_use]
    pub fn ssh_public_key_path(&self) -> &PathBuf {
        self.context.ssh_public_key_path()
    }

    /// Returns the build directory for this environment
    #[must_use]
    pub fn build_dir(&self) -> &PathBuf {
        self.context.build_dir()
    }

    /// Returns the data directory for this environment
    #[must_use]
    pub fn data_dir(&self) -> &PathBuf {
        self.context.data_dir()
    }

    /// Returns the instance IP address if available
    ///
    /// The instance IP is populated after successful provisioning and is
    /// `None` for environments that haven't been provisioned yet.
    ///
    /// # Returns
    ///
    /// - `Some(IpAddr)` if the environment has been provisioned
    /// - `None` if the environment hasn't been provisioned yet
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use std::net::{IpAddr, Ipv4Addr};
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("test".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/test_rsa"),
    ///     PathBuf::from("keys/test_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
    ///
    /// // Before provisioning
    /// assert_eq!(environment.instance_ip(), None);
    ///
    /// // After provisioning (simulated)
    /// let ip = IpAddr::V4(Ipv4Addr::new(192, 168, 1, 100));
    /// let environment = environment.with_instance_ip(ip);
    /// assert_eq!(environment.instance_ip(), Some(ip));
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn instance_ip(&self) -> Option<IpAddr> {
        self.context.instance_ip()
    }

    /// Returns when this environment was created
    ///
    /// This timestamp is set when the environment is first created using the
    /// `create environment` command and never changes throughout the
    /// environment's lifecycle.
    ///
    /// # Returns
    ///
    /// The UTC timestamp when the environment was created.
    #[must_use]
    pub fn created_at(&self) -> DateTime<Utc> {
        self.context.created_at()
    }

    /// Returns the provision method for this environment
    ///
    /// This method indicates how the infrastructure was provisioned:
    /// - `Some(Provisioned)`: Created via `provision` command using `OpenTofu`
    /// - `Some(Registered)`: Connected to existing infrastructure via `register` command
    /// - `None`: Unknown or legacy state (before this field was added)
    ///
    /// # Returns
    ///
    /// The provision method, if set.
    #[must_use]
    pub fn provision_method(&self) -> Option<ProvisionMethod> {
        self.context.provision_method()
    }

    /// Returns whether this environment's infrastructure is managed by this tool
    ///
    /// Infrastructure is considered "managed" if it was created via the `provision` command
    /// using `OpenTofu`. Managed infrastructure can be destroyed using `tofu destroy`.
    ///
    /// Infrastructure is NOT managed if:
    /// - It was registered from existing infrastructure via the `register` command
    /// - The provision method is unknown (legacy state)
    ///
    /// # Returns
    ///
    /// `true` if the infrastructure was provisioned by this tool and can be destroyed,
    /// `false` if the infrastructure is external and should not be touched.
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::environment::runtime_outputs::ProvisionMethod;
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("production".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/prod_rsa"),
    ///     PathBuf::from("keys/prod_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    ///
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// // Provisioned environment - infrastructure is managed
    /// let provisioned_env = Environment::new(env_name.clone(), provider_config.clone(), ssh_credentials.clone(), 22, created_at)
    ///     .with_provision_method(ProvisionMethod::Provisioned);
    /// assert!(provisioned_env.is_infrastructure_managed());
    ///
    /// // Registered environment - infrastructure is NOT managed
    /// let registered_env = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at)
    ///     .with_provision_method(ProvisionMethod::Registered);
    /// assert!(!registered_env.is_infrastructure_managed());
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn is_infrastructure_managed(&self) -> bool {
        // Only infrastructure provisioned by this tool can be managed/destroyed
        // Registered environments have external infrastructure we don't control
        match self.provision_method() {
            Some(ProvisionMethod::Registered) => false,
            // Provisioned or legacy (None) environments are assumed managed
            Some(ProvisionMethod::Provisioned) | None => true,
        }
    }

    /// Sets the instance IP address for this environment
    ///
    /// This method is typically called by the `ProvisionCommandHandler` after successfully
    /// provisioning the infrastructure and obtaining the instance's IP address.
    ///
    /// # Arguments
    ///
    /// * `ip` - The IP address of the provisioned instance
    ///
    /// # Returns
    ///
    /// A new Environment instance with the IP address set
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use std::net::{IpAddr, Ipv4Addr};
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("production".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/prod_rsa"),
    ///     PathBuf::from("keys/prod_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
    ///
    /// // Set IP after provisioning
    /// let ip = IpAddr::V4(Ipv4Addr::new(10, 0, 0, 42));
    /// let environment = environment.with_instance_ip(ip);
    ///
    /// assert_eq!(environment.instance_ip(), Some(ip));
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn with_instance_ip(mut self, ip: IpAddr) -> Self {
        self.context_mut().runtime_outputs.set_instance_ip(ip);
        self
    }

    /// Sets the provision method and returns a new environment with the method set
    ///
    /// This method is used to track how the infrastructure was provisioned:
    /// - `Provisioned`: Created via `provision` command using `OpenTofu`
    /// - `Registered`: Connected to existing infrastructure via `register` command
    ///
    /// # Arguments
    ///
    /// * `method` - The provision method to set
    ///
    /// # Returns
    ///
    /// Returns the environment with the provision method set.
    #[must_use]
    pub fn with_provision_method(mut self, method: runtime_outputs::ProvisionMethod) -> Self {
        self.context_mut()
            .runtime_outputs
            .set_provision_method(method);
        self
    }

    /// Returns the templates directory for this environment
    ///
    /// The templates directory is located at `data/{env_name}/templates/`
    /// and contains environment-specific template files.
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("staging".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/staging_rsa"),
    ///     PathBuf::from("keys/staging_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
    ///
    /// assert_eq!(
    ///     environment.templates_dir(),
    ///     PathBuf::from("./data/staging/templates")
    /// );
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn templates_dir(&self) -> PathBuf {
        self.context.templates_dir()
    }

    /// Returns the traces directory for this environment
    ///
    /// The traces directory is located at `data/{env_name}/traces/`
    /// and contains error trace files for failed operations.
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("production".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/prod_rsa"),
    ///     PathBuf::from("keys/prod_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
    ///
    /// assert_eq!(
    ///     environment.traces_dir(),
    ///     PathBuf::from("./data/production/traces")
    /// );
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn traces_dir(&self) -> PathBuf {
        self.context.traces_dir()
    }

    /// Returns the ansible build directory for this environment
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("dev".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/dev_rsa"),
    ///     PathBuf::from("keys/dev_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
    ///
    /// assert_eq!(
    ///     environment.ansible_build_dir(),
    ///     PathBuf::from("./build/dev/ansible")
    /// );
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn ansible_build_dir(&self) -> PathBuf {
        self.context.ansible_build_dir()
    }

    /// Returns the tofu build directory for this environment
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("test".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/test_rsa"),
    ///     PathBuf::from("keys/test_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
    ///
    /// assert_eq!(
    ///     environment.tofu_build_dir(),
    ///     PathBuf::from("./build/test/tofu/lxd")
    /// );
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn tofu_build_dir(&self) -> PathBuf {
        self.context.tofu_build_dir()
    }

    /// Returns the ansible templates directory for this environment
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("integration".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/integration_rsa"),
    ///     PathBuf::from("keys/integration_rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
    ///
    /// assert_eq!(
    ///     environment.ansible_templates_dir(),
    ///     PathBuf::from("./data/integration/templates/ansible")
    /// );
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn ansible_templates_dir(&self) -> PathBuf {
        self.context.ansible_templates_dir()
    }

    /// Returns the tofu templates directory for this environment
    ///
    /// # Examples
    ///
    /// ```rust
    /// use torrust_tracker_deployer_lib::domain::{Environment, EnvironmentName};
    /// use torrust_tracker_deployer_lib::domain::provider::{LxdConfig, ProviderConfig};
    /// use torrust_tracker_deployer_lib::domain::ProfileName;
    /// use torrust_tracker_deployer_lib::shared::Username;
    /// use torrust_tracker_deployer_lib::adapters::ssh::SshCredentials;
    /// use std::path::PathBuf;
    /// use chrono::{TimeZone, Utc};
    ///
    /// let env_name = EnvironmentName::new("load-test".to_string())?;
    /// let ssh_username = Username::new("torrust".to_string())?;
    /// let ssh_credentials = SshCredentials::new(
    ///     PathBuf::from("keys/load-test-rsa"),
    ///     PathBuf::from("keys/load-test-rsa.pub"),
    ///     ssh_username,
    /// );
    /// let provider_config = ProviderConfig::Lxd(LxdConfig {
    ///     profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
    /// });
    /// let created_at = Utc.with_ymd_and_hms(2025, 1, 1, 0, 0, 0).unwrap();
    /// let environment = Environment::new(env_name, provider_config, ssh_credentials, 22, created_at);
    ///
    /// assert_eq!(
    ///     environment.tofu_templates_dir(),
    ///     PathBuf::from("./data/load-test/templates/tofu")
    /// );
    ///
    /// # Ok::<(), Box<dyn std::error::Error>>(())
    /// ```
    #[must_use]
    pub fn tofu_templates_dir(&self) -> PathBuf {
        self.context.tofu_templates_dir()
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::adapters::ssh::SshCredentials;
    use crate::domain::grafana::GrafanaConfig;
    use crate::domain::prometheus::PrometheusConfig;
    use crate::domain::provider::{LxdConfig, ProviderConfig};
    use crate::domain::tracker::TrackerConfig;
    use crate::domain::EnvironmentName;
    use std::path::Path;
    use tempfile::TempDir;

    // ============================================================================
    // Test Fixtures - Builder Pattern
    // ============================================================================

    /// Test builder for creating Environment instances with sensible defaults
    ///
    /// This builder simplifies test setup by providing default values and allowing
    /// customization through a fluent API. It automatically manages temporary
    /// directories and creates all required value objects.
    ///
    /// # Examples
    ///
    /// ```rust
    /// // Simple environment with defaults
    /// let env = EnvironmentTestBuilder::new().build();
    ///
    /// // Customized environment
    /// let env = EnvironmentTestBuilder::new()
    ///     .with_name("staging")
    ///     .with_ssh_key_name("custom_key")
    ///     .build();
    ///
    /// // Environment with access to temp directory
    /// let (env, temp_dir) = EnvironmentTestBuilder::new()
    ///     .with_name("test-env")
    ///     .build_with_temp_dir();
    /// ```
    pub struct EnvironmentTestBuilder {
        env_name: String,
        ssh_key_name: String,
        ssh_username: String,
        temp_dir: TempDir,
    }

    impl EnvironmentTestBuilder {
        /// Creates a new builder with sensible defaults
        pub fn new() -> Self {
            Self {
                env_name: "test-env".to_string(),
                ssh_key_name: "test_key".to_string(),
                ssh_username: "torrust".to_string(),
                temp_dir: TempDir::new().expect("Failed to create temp directory"),
            }
        }

        /// Sets the environment name
        pub fn with_name(mut self, name: &str) -> Self {
            self.env_name = name.to_string();
            self
        }

        /// Sets the SSH key name (without .pub extension)
        pub fn with_ssh_key_name(mut self, key_name: &str) -> Self {
            self.ssh_key_name = key_name.to_string();
            self
        }

        /// Sets the SSH username
        #[allow(dead_code)]
        pub fn with_ssh_username(mut self, username: &str) -> Self {
            self.ssh_username = username.to_string();
            self
        }

        /// Builds an Environment in Created state
        ///
        /// This is the most common use case - creates an environment with
        /// auto-generated paths based on the environment name.
        pub fn build(self) -> Environment<Created> {
            let env_name = EnvironmentName::new(self.env_name).unwrap();
            let ssh_username = Username::new(self.ssh_username).unwrap();
            let temp_path = self.temp_dir.path();

            let ssh_credentials = SshCredentials::new(
                temp_path.join(&self.ssh_key_name),
                temp_path.join(format!("{}.pub", &self.ssh_key_name)),
                ssh_username,
            );

            let ssh_port = 22;
            let provider_config = ProviderConfig::Lxd(LxdConfig {
                profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
            });

            Environment::new(
                env_name,
                provider_config,
                ssh_credentials,
                ssh_port,
                chrono::Utc::now(),
            )
        }

        /// Builds an Environment and returns the `TempDir`
        ///
        /// Use this when you need access to the temp directory in your test,
        /// for example to verify paths or create additional test files.
        #[allow(dead_code)]
        pub fn build_with_temp_dir(self) -> (Environment<Created>, TempDir) {
            let env_name = EnvironmentName::new(self.env_name).unwrap();
            let ssh_username = Username::new(self.ssh_username).unwrap();
            let temp_path = self.temp_dir.path();

            let ssh_credentials = SshCredentials::new(
                temp_path.join(&self.ssh_key_name),
                temp_path.join(format!("{}.pub", &self.ssh_key_name)),
                ssh_username,
            );

            let ssh_port = 22;
            let provider_config = ProviderConfig::Lxd(LxdConfig {
                profile_name: ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap(),
            });
            let environment = Environment::new(
                env_name,
                provider_config,
                ssh_credentials,
                ssh_port,
                chrono::Utc::now(),
            );
            (environment, self.temp_dir)
        }

        /// Builds an Environment with custom paths
        ///
        /// Use this when you need full control over the data and build directories.
        /// Returns the environment, `data_dir`, `build_dir`, and `temp_dir`.
        pub fn build_with_custom_paths(self) -> (Environment<Created>, PathBuf, PathBuf, TempDir) {
            let temp_path = self.temp_dir.path();
            let data_dir = temp_path.join("data").join(&self.env_name);
            let build_dir = temp_path.join("build").join(&self.env_name);

            let env_name = EnvironmentName::new(self.env_name).unwrap();
            let ssh_username = Username::new(self.ssh_username).unwrap();
            let ssh_credentials = SshCredentials::new(
                temp_path.join(&self.ssh_key_name),
                temp_path.join(format!("{}.pub", &self.ssh_key_name)),
                ssh_username,
            );

            let profile_name = ProfileName::new(format!("lxd-{}", env_name.as_str())).unwrap();
            let provider_config = ProviderConfig::Lxd(LxdConfig { profile_name });

            let user_inputs = UserInputs::with_tracker(
                &env_name,
                provider_config,
                ssh_credentials,
                22,
                TrackerConfig::default(),
                Some(PrometheusConfig::default()),
                Some(GrafanaConfig::default()),
                None,
                None, // No backup
            )
            .expect("Test UserInputs should always be valid with defaults");

            let context = EnvironmentContext {
                user_inputs,
                internal_config: InternalConfig {
                    data_dir: data_dir.clone(),
                    build_dir: build_dir.clone(),
                },
                runtime_outputs: RuntimeOutputs::new(),
                created_at: chrono::Utc::now(),
            };

            let environment = Environment {
                context,
                state: Created,
            };

            (environment, data_dir, build_dir, self.temp_dir)
        }

        /// Returns a reference to the temp directory path
        #[allow(dead_code)]
        pub fn temp_path(&self) -> &Path {
            self.temp_dir.path()
        }
    }

    impl Default for EnvironmentTestBuilder {
        fn default() -> Self {
            Self::new()
        }
    }

    // ============================================================================
    // Custom Assertion Helpers
    // ============================================================================

    /// Asserts that the environment's paths are within the temp directory
    #[allow(dead_code)]
    fn assert_paths_in_temp_dir(env: &Environment<impl Clone>, temp_path: &Path, env_name: &str) {
        assert!(
            env.data_dir().starts_with(temp_path),
            "data_dir should be in temp: {:?} not in {:?}",
            env.data_dir(),
            temp_path
        );
        assert!(
            env.build_dir().starts_with(temp_path),
            "build_dir should be in temp: {:?} not in {:?}",
            env.build_dir(),
            temp_path
        );
        assert!(
            env.data_dir().to_string_lossy().contains(env_name),
            "data_dir should contain env name: {:?}",
            env.data_dir()
        );
        assert!(
            env.build_dir().to_string_lossy().contains(env_name),
            "build_dir should contain env name: {:?}",
            env.build_dir()
        );
    }

    /// Asserts that SSH credentials match expected paths
    fn assert_ssh_credentials(
        env: &Environment<impl Clone>,
        expected_private: &Path,
        expected_public: &Path,
    ) {
        assert_eq!(
            env.ssh_private_key_path(),
            expected_private,
            "SSH private key path mismatch"
        );
        assert_eq!(
            env.ssh_public_key_path(),
            expected_public,
            "SSH public key path mismatch"
        );
    }

    /// Asserts that the instance name matches the expected format
    fn assert_instance_name_format(env: &Environment<impl Clone>, env_name: &str) {
        let expected = format!("torrust-tracker-vm-{env_name}");
        assert_eq!(
            env.instance_name().as_str(),
            expected,
            "Instance name should match expected format"
        );
    }

    /// Asserts that a path ends with the expected suffix
    #[allow(dead_code)]
    fn assert_path_ends_with(actual: &Path, expected_suffix: &str) {
        assert!(
            actual.to_string_lossy().ends_with(expected_suffix),
            "Path {actual:?} should end with {expected_suffix:?}"
        );
    }

    // ============================================================================
    // Tests
    // ============================================================================

    #[test]
    fn it_should_create_environment_with_auto_generated_paths() {
        // Arrange
        let (environment, data_dir, build_dir, temp_dir) = EnvironmentTestBuilder::new()
            .with_name("test-env")
            .with_ssh_key_name("testing_rsa")
            .build_with_custom_paths();
        let temp_path = temp_dir.path();

        // Act & Assert: Check basic fields
        assert_eq!(environment.name().as_str(), "test-env");
        assert_eq!(environment.ssh_username().as_str(), "torrust");

        // Assert: Check SSH credentials
        assert_ssh_credentials(
            &environment,
            &temp_path.join("testing_rsa"),
            &temp_path.join("testing_rsa.pub"),
        );

        // Assert: Check paths are in temp directory
        assert_eq!(*environment.data_dir(), data_dir);
        assert_eq!(*environment.build_dir(), build_dir);

        // Assert: Check instance name format
        assert_instance_name_format(&environment, "test-env");
    }

    #[test]
    fn it_should_generate_correct_template_directories() {
        // Arrange
        let (environment, data_dir, _build_dir, _temp_dir) = EnvironmentTestBuilder::new()
            .with_name("test-production")
            .with_ssh_key_name("prod_rsa")
            .build_with_custom_paths();

        // Act
        let templates_dir = environment.templates_dir();
        let ansible_dir = environment.ansible_templates_dir();
        let tofu_dir = environment.tofu_templates_dir();

        // Assert
        assert_eq!(templates_dir, data_dir.join("templates"));
        assert_eq!(ansible_dir, data_dir.join("templates").join("ansible"));
        assert_eq!(tofu_dir, data_dir.join("templates").join("tofu"));
    }

    #[test]
    fn it_should_generate_correct_build_directories() {
        // Arrange
        let (environment, _data_dir, build_dir, _temp_dir) = EnvironmentTestBuilder::new()
            .with_name("test-staging")
            .with_ssh_key_name("staging_rsa")
            .build_with_custom_paths();

        // Act
        let ansible_dir = environment.ansible_build_dir();
        let tofu_dir = environment.tofu_build_dir();

        // Assert
        assert_eq!(ansible_dir, build_dir.join("ansible"));
        assert_eq!(tofu_dir, build_dir.join("tofu").join("lxd"));
    }

    #[test]
    fn it_should_handle_different_environment_names() {
        // Arrange: Test cases with environment names and expected instance names
        let test_cases = vec![
            ("test-dev", "torrust-tracker-vm-test-dev"),
            (
                "test-e2e-provision",
                "torrust-tracker-vm-test-e2e-provision",
            ),
            ("test-integration", "torrust-tracker-vm-test-integration"),
            ("test-release-v1-2", "torrust-tracker-vm-test-release-v1-2"),
        ];

        for (env_name_str, expected_instance_name) in test_cases {
            // Arrange
            let (environment, data_dir, build_dir, _temp_dir) = EnvironmentTestBuilder::new()
                .with_name(env_name_str)
                .build_with_custom_paths();

            // Act & Assert
            assert_eq!(environment.instance_name().as_str(), expected_instance_name);
            assert_eq!(*environment.data_dir(), data_dir);
            assert_eq!(*environment.build_dir(), build_dir);
        }
    }

    #[test]
    fn it_should_be_serializable_to_json() {
        // Arrange
        let (environment, data_dir, build_dir, temp_dir) = EnvironmentTestBuilder::new()
            .with_name("test-serialization")
            .with_ssh_key_name("test_private_key")
            .build_with_custom_paths();
        let temp_path = temp_dir.path();

        // Act: Serialize to JSON
        let json = serde_json::to_string(&environment).unwrap();

        // Act: Deserialize back
        let deserialized: Environment = serde_json::from_str(&json).unwrap();

        // Assert: Check that all fields are preserved
        assert_eq!(deserialized.name().as_str(), "test-serialization");
        assert_instance_name_format(&deserialized, "test-serialization");
        assert_ssh_credentials(
            &deserialized,
            &temp_path.join("test_private_key"),
            &temp_path.join("test_private_key.pub"),
        );
        assert_eq!(*deserialized.data_dir(), data_dir);
        assert_eq!(*deserialized.build_dir(), build_dir);
    }

    #[test]
    fn it_should_support_common_e2e_environment_names() {
        // Arrange: Common E2E environment names
        let e2e_environments = vec!["test-e2e-config", "test-e2e-provision", "test-e2e-full"];

        for env_name_str in e2e_environments {
            // Arrange
            let environment = EnvironmentTestBuilder::new()
                .with_name(env_name_str)
                .with_ssh_key_name("testing_rsa")
                .build();

            // Act & Assert: Verify the environment is created successfully
            assert_eq!(environment.name().as_str(), env_name_str);
            assert!(environment
                .instance_name()
                .as_str()
                .starts_with("torrust-tracker-vm-"));
            assert!(environment
                .data_dir()
                .to_string_lossy()
                .contains(env_name_str));
            assert!(environment
                .build_dir()
                .to_string_lossy()
                .contains(env_name_str));
        }
    }

    #[test]
    fn it_should_handle_dash_separated_environment_names() {
        // Arrange
        let (environment, data_dir, build_dir, _temp_dir) = EnvironmentTestBuilder::new()
            .with_name("test-feature-user-auth")
            .with_ssh_key_name("feature_rsa")
            .build_with_custom_paths();

        // Act & Assert
        assert_instance_name_format(&environment, "test-feature-user-auth");
        assert_eq!(*environment.data_dir(), data_dir);
        assert_eq!(*environment.build_dir(), build_dir);
        assert_eq!(environment.templates_dir(), data_dir.join("templates"));
    }

    // State transition tests
    mod state_transitions {
        use std::net::{IpAddr, Ipv4Addr};

        use super::*;

        /// Helper function to create a test environment for state transition tests
        fn create_test_environment() -> Environment<Created> {
            EnvironmentTestBuilder::new()
                .with_name("test-state")
                .build()
        }

        #[test]
        fn it_should_transition_to_destroyed_from_created() {
            // Arrange
            let env = create_test_environment();

            // Act
            let env = env.destroy();

            // Assert
            assert_eq!(*env.state(), Destroyed);
            assert_eq!(env.name().as_str(), "test-state");
        }

        #[test]
        fn it_should_complete_full_happy_path_transition() {
            // Arrange
            let env = create_test_environment();

            // Act: Complete happy path: Created -> Running
            let env = env
                .start_provisioning()
                .provisioned(
                    IpAddr::V4(Ipv4Addr::new(192, 168, 1, 100)),
                    ProvisionMethod::Provisioned,
                )
                .start_configuring()
                .configured()
                .start_releasing()
                .released()
                .start_running();

            // Assert
            assert_eq!(*env.state(), Running);
            assert_eq!(env.name().as_str(), "test-state");

            // Act: Then destroy
            let env = env.destroy();

            // Assert
            assert_eq!(*env.state(), Destroyed);
        }

        #[test]
        fn it_should_preserve_all_fields_during_transitions() {
            // Arrange
            let env = create_test_environment();
            let initial_name = env.name().clone();
            let initial_instance_name = env.instance_name().clone();
            let initial_data_dir = env.data_dir().clone();
            let initial_build_dir = env.build_dir().clone();

            // Act: Go through several transitions
            let env = env
                .start_provisioning()
                .provisioned(
                    IpAddr::V4(Ipv4Addr::new(192, 168, 1, 100)),
                    ProvisionMethod::Provisioned,
                )
                .start_configuring()
                .configured();

            // Assert: Verify all fields are preserved
            assert_eq!(env.name(), &initial_name);
            assert_eq!(env.instance_name(), &initial_instance_name);
            assert_eq!(env.data_dir(), &initial_data_dir);
            assert_eq!(env.build_dir(), &initial_build_dir);
        }

        // State transition logging tests
        mod logging {
            use super::*;
            use tracing_test::traced_test;

            #[traced_test]
            #[test]
            fn it_should_log_state_transition_from_created_to_provisioning() {
                let env = create_test_environment();

                let _provisioning = env.start_provisioning();

                // Assert log contains expected fields
                assert!(logs_contain("Environment state transition"));
                assert!(logs_contain("environment_name=test-state"));
                assert!(logs_contain("from_state="));
                assert!(logs_contain("Created"));
                assert!(logs_contain("to_state="));
                assert!(logs_contain("Provisioning"));
            }

            #[traced_test]
            #[test]
            fn it_should_log_state_transition_with_instance_name() {
                let env = create_test_environment();

                let _provisioning = env.start_provisioning();

                assert!(logs_contain("instance_name=torrust-tracker-vm-test-state"));
            }

            #[traced_test]
            #[test]
            fn it_should_log_complete_state_transition_chain() {
                let env = create_test_environment();

                let _env = env
                    .start_provisioning()
                    .provisioned(
                        IpAddr::V4(Ipv4Addr::new(192, 168, 1, 100)),
                        ProvisionMethod::Provisioned,
                    )
                    .start_configuring()
                    .configured();

                // Verify multiple transitions were logged
                assert!(logs_contain("Provisioning"));
                assert!(logs_contain("Provisioned"));
                assert!(logs_contain("Configuring"));
                assert!(logs_contain("Configured"));
            }

            #[traced_test]
            #[test]
            fn it_should_log_destroy_transition_from_any_state() {
                let env = create_test_environment();
                let env = env.start_provisioning();

                let _destroyed = env.destroy();

                assert!(logs_contain("Destroyed"));
            }
        }

        // Three-way split tests
        mod three_way_split {
            use super::*;
            use std::net::{IpAddr, Ipv4Addr};

            #[test]
            fn it_should_separate_user_inputs_from_context() {
                let env = EnvironmentTestBuilder::new()
                    .with_name("test-split")
                    .build();

                // Can access user inputs directly
                assert_eq!(env.context.user_inputs.name().as_str(), "test-split");
                assert_eq!(env.context.user_inputs.ssh_port(), 22);
            }

            #[test]
            fn it_should_derive_internal_config_automatically() {
                let env = EnvironmentTestBuilder::new()
                    .with_name("test-derived")
                    .build();

                // Internal config is derived from name
                let data_dir = &env.context.internal_config.data_dir;
                let build_dir = &env.context.internal_config.build_dir;

                assert!(data_dir.to_string_lossy().contains("test-derived"));
                assert!(build_dir.to_string_lossy().contains("test-derived"));
            }

            #[test]
            fn it_should_initialize_runtime_outputs_as_empty() {
                let env = EnvironmentTestBuilder::new()
                    .with_name("test-runtime")
                    .build();

                // Runtime outputs start empty
                assert_eq!(env.context.runtime_outputs.instance_ip(), None);
            }

            #[test]
            fn it_should_populate_runtime_outputs_during_operations() {
                let env = EnvironmentTestBuilder::new()
                    .with_name("test-populate")
                    .build();

                // Simulate provisioning operation setting the IP
                let ip = IpAddr::V4(Ipv4Addr::new(10, 0, 0, 1));
                let env = env.with_instance_ip(ip);

                assert_eq!(env.context.runtime_outputs.instance_ip(), Some(ip));
            }

            #[test]
            fn it_should_serialize_with_semantic_structure() {
                let env = EnvironmentTestBuilder::new()
                    .with_name("test-serialize")
                    .build();

                let json = serde_json::to_value(&env.context).unwrap();

                // Verify JSON has three top-level keys
                assert!(json.get("user_inputs").is_some());
                assert!(json.get("internal_config").is_some());
                assert!(json.get("runtime_outputs").is_some());
            }

            #[test]
            fn it_should_provide_accessor_methods_for_backward_compatibility() {
                let env = EnvironmentTestBuilder::new()
                    .with_name("test-accessors")
                    .build();

                // Accessor methods should work through the context
                assert_eq!(env.name().as_str(), "test-accessors");
                assert_eq!(env.ssh_port(), 22);
                assert_eq!(env.instance_ip(), None);
            }
        }
    }
}