/**
 * @file Tests for server/lib/send-file.js: under Express 5 a server-chosen
 * absolute path inside a dotted directory (`~/.claude/…`) is still served, a
 * dotfile itself is still refused (Express 4's rule), and a download keeps its
 * attachment name.
 * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
 */

const { describe, it, before, after } = require("node:test");
const assert = require("node:assert/strict");
const fs = require("fs");
const os = require("os");
const path = require("path");
const express = require("express");
const { sendFile, download } = require("../lib/send-file");

describe("send-file", () => {
  let dir;
  let server;
  let base;

  before(async () => {
    dir = fs.mkdtempSync(path.join(os.tmpdir(), "send-file-"));
    fs.mkdirSync(path.join(dir, ".claude"));
    fs.writeFileSync(path.join(dir, ".claude", "a.txt"), "hi");
    fs.writeFileSync(path.join(dir, ".claude", ".secret"), "no");
    const app = express();
    app.get("/file", (_req, res) => sendFile(res, path.join(dir, ".claude", "a.txt")));
    app.get("/dot", (_req, res) => sendFile(res, path.join(dir, ".claude", ".secret")));
    app.get("/dl", (_req, res) => download(res, path.join(dir, ".claude", "a.txt"), "r.txt"));
    await new Promise((r) => (server = app.listen(0, "127.0.0.1", r)));
    base = `http://127.0.0.1:${server.address().port}`;
  });

  after(() => {
    server.close();
    fs.rmSync(dir, { recursive: true, force: true });
  });

  it("serves a file whose parent directory is a dot-directory", async () => {
    const res = await fetch(`${base}/file`);
    assert.equal(res.status, 200);
    assert.equal(await res.text(), "hi");
  });

  it("still refuses a dotfile", async () => {
    const res = await fetch(`${base}/dot`);
    assert.equal(res.status, 404);
  });

  it("downloads under the given name", async () => {
    const res = await fetch(`${base}/dl`);
    assert.equal(res.status, 200);
    assert.match(res.headers.get("content-disposition"), /^attachment; filename="?r\.txt"?$/);
    assert.equal(await res.text(), "hi");
  });
});