amethyst/nestsClient/src/commonTest/kotlin/com/vitorpamplona/nestsclient/NestsConnectTest.kt

/*
 * Copyright (c) 2025 Vitor Pamplona
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy of
 * this software and associated documentation files (the "Software"), to deal in
 * the Software without restriction, including without limitation the rights to use,
 * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
 * Software, and to permit persons to whom the Software is furnished to do so,
 * subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in all
 * copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
 * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
 * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
 * AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 */
package com.vitorpamplona.nestsclient

import com.vitorpamplona.nestsclient.transport.FakeWebTransport
import com.vitorpamplona.nestsclient.transport.WebTransportException
import com.vitorpamplona.nestsclient.transport.WebTransportFactory
import com.vitorpamplona.nestsclient.transport.WebTransportSession
import com.vitorpamplona.quartz.nip01Core.crypto.KeyPair
import com.vitorpamplona.quartz.nip01Core.signers.NostrSigner
import com.vitorpamplona.quartz.nip01Core.signers.NostrSignerInternal
import kotlinx.coroutines.test.runTest
import kotlin.test.Test
import kotlin.test.assertEquals
import kotlin.test.assertIs
import kotlin.test.assertTrue
import kotlin.test.fail

class NestsConnectTest {
    private val room =
        NestsRoomConfig(
            authBaseUrl = "https://relay.example.com/api/v1/nests",
            endpoint = "https://relay.example.com/moq",
            hostPubkey = "0".repeat(64),
            roomId = "abc",
        )

    @Test
    fun connect_walks_mintToken_then_transport_then_moq_lite_session() =
        runTest {
            val (clientSide, _) = FakeWebTransport.pair()
            val httpClient = FakeNestsClient(token = "tok-abc")
            val transport = ConstantWebTransportFactory(clientSide)

            // moq-lite Lite-03 has NO setup message — the WT handshake
            // itself is the handshake. As soon as connect returns, the
            // listener is in Connected and ready to subscribe.
            val listener =
                connectNestsListener(
                    httpClient = httpClient,
                    transport = transport,
                    scope = this,
                    room = room,
                    signer = NostrSignerInternal(KeyPair()),
                )

            val connected = assertIs<NestsListenerState.Connected>(listener.state.value)
            assertEquals(room, connected.room)
            assertEquals(
                MOQ_LITE_03_VERSION,
                connected.negotiatedMoqVersion,
                "synthesised version code identifies the moq-lite-03 ALPN",
            )

            assertEquals("relay.example.com", transport.lastConnectedAuthority)
            assertEquals(
                "/${room.moqNamespace()}?jwt=tok-abc",
                transport.lastConnectedPath,
                "moq-rs treats the WT path as the namespace literal and reads the JWT from `?jwt=`",
            )
            assertEquals(null, transport.lastBearer, "JWT goes in the query param, not Authorization")

            assertEquals(false, httpClient.lastPublishFlag, "listener mints with publish=false")

            listener.close()
            assertIs<NestsListenerState.Closed>(listener.state.value)
        }

    @Test
    fun mintToken_failure_short_circuits_to_Failed() =
        runTest {
            val httpClient = ThrowingNestsClient(NestsException("server returned 500", status = 500))
            val transport = NeverConnectFactory()

            val listener =
                connectNestsListener(
                    httpClient = httpClient,
                    transport = transport,
                    scope = this,
                    room = room,
                    signer = NostrSignerInternal(KeyPair()),
                )

            val failed = assertIs<NestsListenerState.Failed>(listener.state.value)
            assertTrue("Auth failed" in failed.reason)
            assertTrue("500" in failed.reason || (failed.cause as? NestsException)?.status == 500)
            assertEquals(0, transport.connectCallCount, "transport must not be reached")
        }

    @Test
    fun transport_handshake_failure_short_circuits_to_Failed() =
        runTest {
            val httpClient = FakeNestsClient(token = "tok")
            val transport =
                ThrowingTransportFactory(
                    WebTransportException(
                        WebTransportException.Kind.HandshakeFailed,
                        "QUIC handshake refused",
                    ),
                )

            val listener =
                connectNestsListener(
                    httpClient = httpClient,
                    transport = transport,
                    scope = this,
                    room = room,
                    signer = NostrSignerInternal(KeyPair()),
                )

            val failed = assertIs<NestsListenerState.Failed>(listener.state.value)
            assertTrue("HandshakeFailed" in failed.reason, "got: ${failed.reason}")
        }

    @Test
    fun malformed_endpoint_url_short_circuits_to_Failed() =
        runTest {
            val badRoom = room.copy(endpoint = "not-a-url")
            val listener =
                connectNestsListener(
                    httpClient = FakeNestsClient(token = "tok"),
                    transport = NeverConnectFactory(),
                    scope = this,
                    room = badRoom,
                    signer = NostrSignerInternal(KeyPair()),
                )

            val failed = assertIs<NestsListenerState.Failed>(listener.state.value)
            assertTrue("Malformed MoQ endpoint" in failed.reason, "got: ${failed.reason}")
        }

    @Test
    fun parseEndpoint_drops_default_port_keeps_explicit_port_and_path() {
        assertEquals(
            "relay.example.com" to "/moq",
            parseEndpoint("https://relay.example.com/moq"),
        )
        assertEquals(
            "relay.example.com:4443" to "/moq",
            parseEndpoint("https://relay.example.com:4443/moq"),
        )
        assertEquals(
            "relay.example.com" to "/",
            parseEndpoint("https://relay.example.com"),
        )
        assertEquals(
            "relay.example.com" to "/api/v1/moq?room=abc",
            parseEndpoint("https://relay.example.com/api/v1/moq?room=abc"),
        )
    }

    @Test
    fun parseEndpoint_handles_IPv6_authorities() {
        // No port — naive `lastIndexOf(':')` would find a colon inside
        // the address; the bracket-aware path keeps `[::1]` whole.
        assertEquals(
            "[::1]" to "/moq",
            parseEndpoint("https://[::1]/moq"),
        )
        assertEquals(
            "[2001:db8::1]:4443" to "/moq",
            parseEndpoint("https://[2001:db8::1]:4443/moq"),
        )
        // Default-port stripping still applies on bracketed authorities.
        assertEquals(
            "[::1]" to "/",
            parseEndpoint("https://[::1]:443/"),
        )
    }

    @Test
    fun buildRelayConnectTarget_percent_encodes_path_unsafe_chars() {
        // A malicious or careless `d` tag containing `?`, `#`, ` ` etc.
        // would otherwise truncate the URL path and shove the JWT into
        // the wrong slot. Encoding keeps the namespace literal in path
        // position; the relay URL-decodes before comparing to claim root.
        val (authority, path) =
            buildRelayConnectTarget(
                endpoint = "https://relay.example.com/moq",
                namespace = "nests/30312:0123:room?weird#frag",
                token = "tok-abc",
            )
        assertEquals("relay.example.com", authority)
        assertEquals("/nests/30312:0123:room%3Fweird%23frag?jwt=tok-abc", path)
    }

    // ---------------------------------------------------------- fakes

    private class FakeNestsClient(
        private val token: String,
    ) : NestsClient {
        var lastPublishFlag: Boolean? = null
            private set

        override suspend fun mintToken(
            room: NestsRoomConfig,
            publish: Boolean,
            signer: NostrSigner,
        ): String {
            lastPublishFlag = publish
            return token
        }
    }

    private class ThrowingNestsClient(
        private val toThrow: NestsException,
    ) : NestsClient {
        override suspend fun mintToken(
            room: NestsRoomConfig,
            publish: Boolean,
            signer: NostrSigner,
        ): String = throw toThrow
    }

    private class ConstantWebTransportFactory(
        private val session: WebTransportSession,
    ) : WebTransportFactory {
        var lastConnectedAuthority: String? = null
            private set
        var lastConnectedPath: String? = null
            private set
        var lastBearer: String? = null
            private set

        override suspend fun connect(
            authority: String,
            path: String,
            bearerToken: String?,
        ): WebTransportSession {
            lastConnectedAuthority = authority
            lastConnectedPath = path
            lastBearer = bearerToken
            return session
        }
    }

    private class ThrowingTransportFactory(
        private val toThrow: WebTransportException,
    ) : WebTransportFactory {
        override suspend fun connect(
            authority: String,
            path: String,
            bearerToken: String?,
        ): WebTransportSession = throw toThrow
    }

    private class NeverConnectFactory : WebTransportFactory {
        var connectCallCount = 0
            private set

        override suspend fun connect(
            authority: String,
            path: String,
            bearerToken: String?,
        ): WebTransportSession {
            connectCallCount++
            fail("transport.connect must not be called")
        }
    }
}