import {afterEach,expect,it,vi} from 'vitest';
import {wakeRender} from '../src/relay-wake';
const config={RENDER_RELAY_URL:'https://relay.example/',RELAY_SHARED_SECRET:'test-only-'.repeat(4)};
afterEach(()=>vi.unstubAllGlobals());
function readySocket(){
 const listeners=new Map<string,Function>();
 return {binaryType:'',addEventListener:(name:string,fn:Function)=>listeners.set(name,fn),close:vi.fn(),accept:()=>queueMicrotask(()=>listeners.get('message')?.({data:new Uint8Array([3,0,0,0,0,16,0,0,0]).buffer}))} as unknown as WebSocket;
}
it('requests Render root and health, then requires an authenticated Wisp packet',async()=>{
 const socket=readySocket();
 const mock=vi.fn(async(url:URL)=>url.pathname==='/wisp/'?{status:101,webSocket:socket}:url.pathname==='/healthz'?Response.json({status:'ok',service:'zeyads-relay'}):new Response('unauthorized',{status:401}));vi.stubGlobal('fetch',mock);
 expect(await (await wakeRender(config)).json()).toEqual({ready:true});
 expect(mock.mock.calls.map(call=>(call[0] as URL).pathname)).toEqual(['/','/healthz','/wisp/']);
 const options=(mock.mock.calls[2] as unknown as [URL,RequestInit])[1];expect(new Headers(options.headers).get('x-relay-token')).toBe(config.RELAY_SHARED_SECRET);expect(socket.close).toHaveBeenCalledOnce();
});
it('does not report ready when health works but Wisp refuses the upgrade',async()=>{
 vi.stubGlobal('fetch',vi.fn(async(url:URL)=>url.pathname==='/healthz'?Response.json({status:'ok',service:'zeyads-relay'}):new Response('not ready',{status:503})));
 expect((await wakeRender(config)).status).toBe(202);
});
it('reports warming on unavailable response or network timeout',async()=>{
 vi.stubGlobal('fetch',vi.fn(async()=>new Response('starting',{status:503})));expect((await wakeRender(config)).status).toBe(202);
 vi.stubGlobal('fetch',vi.fn(async()=>{throw Error('timeout')}));expect((await wakeRender(config)).status).toBe(202);
});
it('does not call an unrelated healthy service ready',async()=>{
 vi.stubGlobal('fetch',vi.fn(async()=>Response.json({status:'ok',service:'other'})));expect(await (await wakeRender(config)).json()).toEqual({ready:false});
});
it('wake route rejects unauthenticated and cross-origin requests before contacting Render',async()=>{
 const {default:worker}=await import('../src/index');const mock=vi.fn();vi.stubGlobal('fetch',mock);
 const env={...config,PROXY_PASSWORD:'test-only-password-'.repeat(3)} as Env;
 const unauthorized=await worker.fetch(new Request('https://hub.example/api/relay/wake',{method:'POST',headers:{Origin:'https://hub.example'}}),env,{} as ExecutionContext);
 expect(unauthorized.status).toBe(401);
 const crossOrigin=await worker.fetch(new Request('https://hub.example/api/relay/wake',{method:'POST',headers:{Origin:'https://evil.example'}}),env,{} as ExecutionContext);
 expect(crossOrigin.status).toBe(403);expect(mock).not.toHaveBeenCalled();
});