import { test, expect } from '@playwright/test';
import { loginAs, ADMIN_USER, REQUIRE_SEEDED_AUTH, TEST_USER } from './helpers/auth.js';

test.describe('Admin page — admin user', () => {
  test.beforeEach(async ({ page }) => {
    await loginAs(page, ADMIN_USER.email, ADMIN_USER.password);
    const url = page.url();
    test.skip(
      !REQUIRE_SEEDED_AUTH && !url.includes('/chat'),
      'No seeded admin user — skipping admin tests',
    );
  });

  test('admin page loads with the Admin Panel heading', async ({ page }) => {
    await page.goto('/admin');
    await expect(page.getByRole('heading', { name: /admin panel/i })).toBeVisible({
      timeout: 10_000,
    });
  });

  test('shows User Management and System Health tabs', async ({ page }) => {
    await page.goto('/admin');
    await expect(page.getByRole('button', { name: /user management/i })).toBeVisible();
    await expect(page.getByRole('button', { name: /system health/i })).toBeVisible();
  });

  test('User Management tab is active by default', async ({ page }) => {
    await page.goto('/admin');
    // The users tab shows a "+ New User" button
    await expect(page.getByRole('button', { name: /new user/i })).toBeVisible({ timeout: 10_000 });
  });

  test('clicking System Health tab switches to health view', async ({ page }) => {
    await page.goto('/admin');
    await page.getByRole('button', { name: /system health/i }).click();
    // Health cards or loading indicator should appear
    const loadingOrCard = page
      .getByText(/loading health/i)
      .or(page.getByText(/database/i))
      .first();
    await expect(loadingOrCard).toBeVisible({ timeout: 10_000 });
  });
});

test.describe('Admin page — non-admin user', () => {
  test.beforeEach(async ({ page }) => {
    await loginAs(page, TEST_USER.email, TEST_USER.password);
    const url = page.url();
    test.skip(
      !REQUIRE_SEEDED_AUTH && !url.includes('/chat'),
      'No seeded test user — skipping non-admin tests',
    );
  });

  test('non-admin visiting /admin never sees the admin panel', async ({ page }) => {
    await page.goto('/admin');
    // Wait for the app shell to render (redirect and access-denied views both
    // keep the sidebar), then assert the panel itself is absent. globalSetup
    // seeds TEST_USER with role 'member', so this is a real authorization
    // assertion, not environment-dependent.
    await expect(page.getByRole('img', { name: /mosaic logo/i })).toBeVisible({ timeout: 10_000 });
    await expect(page.getByRole('heading', { name: /admin panel/i })).not.toBeVisible();
  });
});