namespace LibNftables.Tests;

public sealed class NftablesClientIntegrationTests
{
    [Fact]
    public void Validate_InvalidRuleset_ReturnsInvalidResult()
    {
        if (!CanCreateClient())
        {
            return;
        }

        var client = new NftablesClient();
        var request = NftApplyRequest.FromText("this is not valid nft syntax");

        NftValidationResult result = client.Validate(request);

        Assert.False(result.IsValid);
        Assert.False(string.IsNullOrWhiteSpace(result.Diagnostics));
    }

    [Fact]
    public async Task ValidateAsync_InvalidRuleset_ReturnsInvalidResult()
    {
        if (!CanCreateClient())
        {
            return;
        }

        var client = new NftablesClient();
        var request = NftApplyRequest.FromText("this is not valid nft syntax");

        NftValidationResult result = await client.ValidateAsync(request);

        Assert.False(result.IsValid);
        Assert.False(string.IsNullOrWhiteSpace(result.Diagnostics));
    }

    [Fact]
    public void Apply_InvalidRuleset_ThrowsValidationException()
    {
        if (!CanCreateClient())
        {
            return;
        }

        var client = new NftablesClient();
        var request = NftApplyRequest.FromText("this is not valid nft syntax");

        Assert.Throws<NftValidationException>(() => client.Apply(request));
    }

    [Fact]
    public void Snapshot_WithInsufficientPrivileges_ThrowsPermissionOrReturnsRuleset()
    {
        if (!CanCreateClient())
        {
            return;
        }

        var client = new NftablesClient();

        try
        {
            NftSnapshot snapshot = client.Snapshot();
            Assert.False(string.IsNullOrWhiteSpace(snapshot.RulesetText));
        }
        catch (NftPermissionException)
        {
            // Expected in unprivileged environments.
        }
    }

    [Fact]
    public void ValidateRuleset_WithTypedSetDefinition_ReturnsValidResult()
    {
        if (!CanCreateClient())
        {
            return;
        }

        var client = new NftablesClient();
        var ruleset = new NftRuleset();
        var table = new NftTable
        {
            Family = NftFamily.Inet,
            Name = "typed_validation",
        };
        var set = new NftSet
        {
            Name = "blocked_ipv4",
            Type = NftSetType.Ipv4Address,
        };
        set.Elements.Add("10.0.0.1");
        set.Elements.Add("10.0.0.2");
        table.Sets.Add(set);
        ruleset.Tables.Add(table);

        NftValidationResult result = client.ValidateRuleset(ruleset);

        Assert.True(result.IsValid);
    }

    private static bool CanCreateClient()
    {
        try
        {
            _ = new NftablesClient();
            return true;
        }
        catch (NftException)
        {
            return false;
        }
    }
}