//! The host mints exactly the tokens the sidecar verifies: same canonical JSON, same HMAC, same shape as
//! cli/lib/confirm-token.ts. The vector is shared with tests/serve.test.ts in the repository root.
use serde_json::json;
use storebound_desktop::confirm::*;

fn secret() -> Vec<u8> {
    (0u8..32).collect()
}

#[test]
fn shared_vector() {
    let p = json!({ "project": "/tmp/game", "args": { "only": "en-US,tr", "b": [1, true, null, "ü\"\n"] } });
    assert_eq!(canonical(&p).unwrap(), "{\"args\":{\"b\":[1,true,null,\"ü\\\"\\n\"],\"only\":\"en-US,tr\"},\"project\":\"/tmp/game\"}");
    assert_eq!(mac(&secret(), "play.listing", &p, 1_700_000_060_000, "AAAAAAAAAAAAAAAAAAAAAA").unwrap(), "JhSxUL2ej4cm4yrmlcA23rTCPq3YMKJthbB7n6aixxw");
}

#[test]
fn canonical_rules() {
    assert_eq!(canonical(&json!({ "b": 1, "a": [true, null, "x"], "c": { "z": "" } })).unwrap(), "{\"a\":[true,null,\"x\"],\"b\":1,\"c\":{\"z\":\"\"}}");
    assert!(canonical(&json!({ "f": 0.5 })).is_err());
    assert!(canonical(&json!({ "f": 9_007_199_254_740_992u64 })).is_err());
    assert_eq!(canonical(&json!(-9_007_199_254_740_991i64)).unwrap(), "-9007199254740991");
    // keys sort by UTF-16 code units like JavaScript: "\u{e9}" (U+00E9) after "z", astral after BMP private use
    assert_eq!(canonical(&json!({ "é": 1, "z": 2, "A": 3 })).unwrap(), "{\"A\":3,\"z\":2,\"é\":1}");
    assert_eq!(canonical(&json!("\u{1}\t</")).unwrap(), "\"\\u0001\\t</\"");
}

#[test]
fn minted_tokens_have_the_sidecar_shape() {
    let p = json!({ "project": "/p", "args": {} });
    let t = mint(&secret(), "play.listing", &p, 1_000, "AAAAAAAAAAAAAAAAAAAAAA").unwrap();
    let parts: Vec<&str> = t.split('.').collect();
    assert_eq!(parts.len(), 4);
    assert_eq!(parts[0], "sbt1");
    assert_eq!(parts[1], (1_000 + TTL_MS).to_string());
    assert_eq!(parts[3].len(), 43);
    assert_eq!(parts[3], mac(&secret(), "play.listing", &p, 1_000 + TTL_MS, "AAAAAAAAAAAAAAAAAAAAAA").unwrap());
    let n = new_nonce().unwrap();
    assert_eq!(n.len(), 22);
    assert_ne!(n, new_nonce().unwrap());
    assert_ne!(new_secret().unwrap(), new_secret().unwrap());
    assert_eq!(hex(&[0, 15, 255]), "000fff");
}