using Shouldly;
using Xunit;
using ZB.MOM.WW.OtOpcUa.Host.Configuration;
using ZB.MOM.WW.OtOpcUa.OpcUaServer;

namespace ZB.MOM.WW.OtOpcUa.Host.IntegrationTests;

/// <summary>
/// Task 4 — verifies the net-new <see cref="OpcUaApplicationHostOptionsValidator"/> (built on the
/// shared <c>ZB.MOM.WW.Configuration</c> <c>OptionsValidatorBase</c>/<c>ValidationBuilder</c>) that
/// gates the OPC UA host options at startup. The C# defaults are all valid so a host with no
/// explicit <c>"OpcUa"</c> section still passes; the validator exists to reject explicit
/// prod/env overrides. Failure messages carry the real <c>"OpcUa:"</c> section prefix and the
/// exact shared-primitive wording so they read correctly when surfaced via <c>ValidateOnStart</c>.
/// </summary>
public sealed class OpcUaApplicationHostOptionsValidatorTests
{
    private static readonly OpcUaApplicationHostOptionsValidator Sut = new();

    /// <summary>The C# defaults (the as-bound shape when the section is absent) pass validation.</summary>
    [Fact]
    public void Default_options_succeed()
    {
        Sut.Validate(null, new OpcUaApplicationHostOptions()).Succeeded.ShouldBeTrue();
    }

    /// <summary>A port of 0 reports the shared port-range failure with the OpcUa prefix.</summary>
    [Fact]
    public void Zero_port_fails()
    {
        var result = Sut.Validate(null, new OpcUaApplicationHostOptions { OpcUaPort = 0 });

        result.Failed.ShouldBeTrue();
        result.Failures.ShouldContain("OpcUa:OpcUaPort must be between 1 and 65535 (was 0)");
    }

    /// <summary>A blank public hostname reports the shared required failure with the OpcUa prefix.</summary>
    [Fact]
    public void Blank_public_hostname_fails()
    {
        var result = Sut.Validate(null, new OpcUaApplicationHostOptions { PublicHostname = "" });

        result.Failed.ShouldBeTrue();
        result.Failures.ShouldContain("OpcUa:PublicHostname is required");
    }

    /// <summary>An empty security-profile list reports the shared min-count failure with the OpcUa prefix.</summary>
    [Fact]
    public void Empty_security_profiles_fails()
    {
        var result = Sut.Validate(null, new OpcUaApplicationHostOptions
        {
            EnabledSecurityProfiles = new List<OpcUaSecurityProfile>(),
        });

        result.Failed.ShouldBeTrue();
        result.Failures.ShouldContain("OpcUa:EnabledSecurityProfiles must contain at least 1 item(s) (had 0)");
    }
}