<?php

declare(strict_types=1);

namespace app\adminapi\service {
    // 可控的业务时钟：不启动框架、访问数据库或改变本机时钟。
    function time(): int { return $GLOBALS['migration_test_now']; }
}

namespace {
    require dirname(__DIR__) . '/app/adminapi/service/DoctorWebConsultationPolicy.php';
    require dirname(__DIR__) . '/app/adminapi/http/middleware/DoctorWebConsultationMiddleware.php';

    use app\adminapi\service\DoctorWebConsultationPolicy as Policy;
    use app\adminapi\http\middleware\DoctorWebConsultationMiddleware;

    final class MigrationTestJson
    {
        public static function fail(string $msg, array $data = [], int $code = 0): array
        {
            return compact('code', 'msg', 'data');
        }
        public static function data(array $data): array
        {
            return ['code' => 1, 'show' => 0, 'msg' => '', 'data' => $data];
        }
    }
    class_alias(MigrationTestJson::class, 'app\common\service\JsonService');
    require dirname(__DIR__) . '/vendor/autoload.php';

    final class MigrationConfigController extends \app\adminapi\controller\ConfigController
    {
        public function __construct(string $action = 'doctorWebConsultation')
        {
            $this->request = (new \think\Request())->setAction($action);
        }
    }

    $assertions = 0;
    function migrationExpect(bool $condition, string $message): void
    {
        global $assertions;
        $assertions++;
        if (!$condition) throw new \RuntimeException($message);
    }
    function migrationRejects(array $configuration, string $key): void
    {
        try {
            Policy::publicPolicy(123, $configuration);
        } catch (\InvalidArgumentException $error) {
            migrationExpect(str_contains($error->getMessage(), 'doctor_web_consultation.' . $key), 'configuration error names the invalid field');
            return;
        }
        migrationExpect(false, 'invalid configuration was accepted: ' . $key);
    }

    $cutoff = (new \DateTimeImmutable('2026-10-23T16:00:00Z'))->getTimestamp();
    $GLOBALS['migration_test_now'] = $cutoff;
    date_default_timezone_set('UTC');
    migrationExpect(Policy::cutoffTimestamp() === $cutoff, 'cutoff is independent of process timezone');
    $defaults = require dirname(__DIR__) . '/config/doctor_web_consultation.php';
    $defaultPolicy = Policy::publicPolicy($cutoff);
    migrationExpect($defaultPolicy === [
        'cutoff_at' => '2026-10-24T00:00:00+08:00',
        'approaching_at' => '2026-10-22T00:00:00+08:00',
        'urgent_at' => '2026-10-23T00:00:00+08:00',
        'server_time' => $cutoff,
    ], 'default config exposes the cutoff and both reminder boundaries with explicit Beijing offsets');
    migrationExpect(Policy::cutoffAt() === $defaultPolicy['cutoff_at'], 'cutoff helper uses the same config');
    migrationExpect(str_contains(Policy::message(), '2026年10月24日00:00:00'), 'message derives the exact configured second');
    $doctor = ['admin_id' => 101, 'root' => 0, 'role_id' => [1], 'terminal' => 1];
    $browser = ['User-Agent' => 'Mozilla/5.0', 'Origin' => 'https://example.test'];
    foreach (['getCallSignature', 'startCall', 'getDoctorSignature', 'getPatientSignature'] as $action) {
        foreach ([$cutoff - 1 => false, $cutoff => true, $cutoff + 1 => true] as $now => $expected) {
            migrationExpect(Policy::blocksRequest($doctor, 'tcm.Diagnosis', $action, $browser, $now) === $expected, "$action boundary $now");
        }
    }
    foreach ([['role_id' => [2]], ['role_id' => [3, 7, 8]], ['root' => 1, 'role_id' => [1]], []] as $identity) {
        migrationExpect(!Policy::blocksRequest($identity, 'tcm.diagnosis', 'startCall', $browser), 'only non-root doctors migrate');
    }
    migrationExpect(Policy::blocksRequest(['role_id' => ['2', '1']], 'tcm.diagnosis', 'startCall', $browser), 'mixed and numeric string roles retain doctor policy');
    foreach (['ZytDoctorWorkstation/1.4.8', 'python-httpx/0.27.2', 'python-httpx/0.28.1'] as $ua) {
        migrationExpect(!Policy::blocksRequest($doctor, 'tcm.diagnosis', 'getCallSignature', ['User-Agent' => $ua]), 'new and already installed workstations keep working');
        foreach (['Origin', 'Referer', 'Sec-Fetch-Mode', 'Sec-Fetch-Site', 'Sec-Fetch-Dest'] as $signal) {
            migrationExpect(Policy::blocksRequest($doctor, 'tcm.diagnosis', 'startCall', ['User-Agent' => $ua, $signal => 'same-origin']), 'browser metadata takes priority over desktop UA');
        }
    }
    foreach (['', 'unknown', 'Mozilla/5.0', 'Mozilla/5.0 ZytDoctorWorkstation/1.4.8', 'python-httpx/0.28.1 extra'] as $ua) {
        migrationExpect(Policy::blocksRequest($doctor, 'tcm.diagnosis', 'startCall', ['user-agent' => $ua]), 'missing or unknown client never gains a desktop exemption');
    }
    foreach (['lists', 'detail', 'readonlyDetail', 'edit', 'bindCallRoom', 'endCall', 'watchCall', 'attachLocalCallRecording', 'upsertCallTranscriptSegments', 'finishCallTranscription'] as $action) {
        migrationExpect(!Policy::blocksRequest($doctor, 'tcm.diagnosis', $action, $browser), 'history and in-flight cleanup remain available: ' . $action);
    }
    foreach (['doctor.appointment', 'tcm.prescription', 'auth.admin'] as $controller) {
        migrationExpect(!Policy::blocksRequest($doctor, $controller, 'startCall', $browser), 'exact controller scope');
    }

    $custom = ['cutoff_at' => '2032-01-01 14:30:45', 'approaching_hours' => 72, 'urgent_hours' => 6];
    $customCutoff = (new \DateTimeImmutable('2032-01-01T14:30:45+08:00'))->getTimestamp();
    $customPolicy = Policy::publicPolicy($customCutoff - 1, $custom);
    migrationExpect($customPolicy === [
        'cutoff_at' => '2032-01-01T14:30:45+08:00',
        'approaching_at' => '2031-12-29T14:30:45+08:00',
        'urgent_at' => '2032-01-01T08:30:45+08:00',
        'server_time' => $customCutoff - 1,
    ], 'arbitrary midday/year schedule moves both reminder phases automatically');
    foreach ([$customCutoff - 1 => false, $customCutoff => true, $customCutoff + 1 => true] as $now => $expected) {
        migrationExpect(Policy::blocksRequest($doctor, 'tcm.Diagnosis', 'startCall', $browser, $now, $custom) === $expected,
            'custom schedule controls the exact-second backend cutoff');
    }
    migrationExpect(str_contains(Policy::message($custom), '2032年1月1日14:30:45'), 'custom schedule also changes backend notice text');
    foreach (['UTC', 'America/New_York', 'Asia/Tokyo'] as $processTimezone) {
        date_default_timezone_set($processTimezone);
        migrationExpect(Policy::publicPolicy(123, $custom)['cutoff_at'] === $customPolicy['cutoff_at'], 'Beijing configuration ignores PHP process timezone');
    }
    date_default_timezone_set('UTC');
    $zeroHours = Policy::publicPolicy(123, array_replace($custom, ['approaching_hours' => 0, 'urgent_hours' => 0]));
    migrationExpect($zeroHours['approaching_at'] === $zeroHours['cutoff_at'] && $zeroHours['urgent_at'] === $zeroHours['cutoff_at'], 'zero-hour reminders are valid');
    $equalHours = Policy::publicPolicy(123, array_replace($custom, ['approaching_hours' => 6]));
    migrationExpect($equalHours['approaching_at'] === $equalHours['urgent_at'], 'equal reminder offsets are valid');
    migrationExpect(Policy::publicPolicy(123, array_replace($custom, ['cutoff_at' => '2032-02-29 12:00:01']))['cutoff_at'] === '2032-02-29T12:00:01+08:00', 'valid leap date is retained');
    foreach ([null, false, 20320101, [], '', 'tomorrow', '2032-1-01 14:30:45', '2032-01-01 14:30',
        '2032-01-01 14:30:45 ', '2031-02-29 14:30:45', '2032-04-31 14:30:45', '2032-01-01 24:00:00',
        '2032-01-01 14:60:45', '2032-01-01 14:30:60', '0000-01-01 00:00:00', '1991-04-14 02:30:00',
        '2032-01-01T14:30:45+08:00', '2032-01-01 14:30:45+08:00', '2032-01-01T14:30:45+25:00'] as $invalid) {
        migrationRejects(array_replace($defaults, ['cutoff_at' => $invalid]), 'cutoff_at');
    }
    migrationRejects([], 'cutoff_at');
    foreach (['approaching_hours', 'urgent_hours'] as $key) {
        foreach ([null, -1, 1.5, '24', true, [], PHP_INT_MAX] as $invalid) {
            migrationRejects(array_replace($defaults, [$key => $invalid]), $key);
        }
        $missing = $defaults;
        unset($missing[$key]);
        migrationRejects($missing, $key);
    }
    migrationRejects(array_replace($defaults, ['approaching_hours' => 12, 'urgent_hours' => 24]), 'approaching_hours');
    migrationRejects(array_replace($defaults, ['approaching_hours' => intdiv(PHP_INT_MAX, 3600)]), 'approaching_hours');
    migrationExpect(!Policy::blocksRequest($doctor, 'config', 'doctorWebConsultation', $browser, $cutoff, []), 'invalid migration config never affects unrelated routes');
    migrationExpect(!Policy::blocksRequest(['root' => 1, 'role_id' => [1]], 'tcm.diagnosis', 'startCall', $browser, $cutoff, []), 'invalid migration config never affects root exemption');
    migrationExpect(!Policy::blocksRequest(['role_id' => [2]], 'tcm.diagnosis', 'startCall', $browser, $cutoff, []), 'invalid migration config never affects other roles');
    migrationExpect(!Policy::blocksRequest($doctor, 'tcm.diagnosis', 'startCall', ['User-Agent' => 'python-httpx/0.28.1'], $cutoff, []), 'invalid migration config never affects native exemption');

    $request = new class($doctor, $browser) {
        public string $actionName = 'getCallSignature';
        public function __construct(public array $adminInfo, public array $headers) {}
        public function controller(): string { return 'tcm.Diagnosis'; }
        public function action(): string { return $this->actionName; }
        public function header(): array { return $this->headers; }
    };
    $executed = 0;
    $next = static function ($request) use (&$executed): string { $executed++; return 'business action executed'; };
    $middleware = new DoctorWebConsultationMiddleware();
    $GLOBALS['migration_test_now'] = $cutoff - 1;
    migrationExpect($middleware->handle($request, $next) === 'business action executed', 'middleware allows October 23');
    $GLOBALS['migration_test_now'] = $cutoff;
    $failure = $middleware->handle($request, $next);
    migrationExpect($executed === 1, 'expired doctor request never reaches signature generation');
    migrationExpect($failure['code'] === 0 && $failure['data']['reason'] === 'doctor_web_consultation_expired', 'business failure does not log the user out');
    migrationExpect(str_contains($failure['msg'], '桌面应用'), 'failure explains migration');
    $request->headers = ['User-Agent' => 'python-httpx/0.28.1'];
    migrationExpect($middleware->handle($request, $next) === 'business action executed', 'same terminal=1 native session remains usable');
    $request->headers = $browser;
    $request->actionName = 'endCall';
    migrationExpect($middleware->handle($request, $next) === 'business action executed', 'active calls can still finish and persist recordings');

    $request->actionName = 'getDoctorSignature';
    $customMiddleware = new DoctorWebConsultationMiddleware($custom);
    $GLOBALS['migration_test_now'] = $customCutoff - 1;
    migrationExpect($customMiddleware->handle($request, $next) === 'business action executed', 'middleware respects configured midday cutoff before its exact second');
    $GLOBALS['migration_test_now'] = $customCutoff;
    $beforeBlocked = $executed;
    $customFailure = $customMiddleware->handle($request, $next);
    migrationExpect($executed === $beforeBlocked && $customFailure['data']['cutoff_at'] === $customPolicy['cutoff_at'], 'actual middleware guard and payload use custom config');
    migrationExpect(str_contains($customFailure['msg'], '2032年1月1日14:30:45'), 'actual middleware response formats custom config');
    foreach (['ZytDoctorWorkstation/1.4.8', 'python-httpx/0.28.1'] as $ua) {
        $request->headers = ['User-Agent' => $ua];
        migrationExpect($customMiddleware->handle($request, $next) === 'business action executed', 'custom cutoff preserves native client compatibility');
    }

    $routes = file_get_contents(dirname(__DIR__) . '/app/adminapi/config/route.php');
    migrationExpect(strpos($routes, 'AuthMiddleware::class') < strpos($routes, 'DoctorWebConsultationMiddleware::class'), 'migration runs after normal authorization');
    $GLOBALS['migration_test_now'] = $cutoff;
    migrationExpect(Policy::publicPolicy()['server_time'] === $cutoff, 'profile exposes synchronized server time');
    $controller = new MigrationConfigController();
    migrationExpect($controller->isNotNeedLogin(), 'public polling endpoint passes the real inherited login whitelist');
    migrationExpect(!(new MigrationConfigController('unlistedAction'))->isNotNeedLogin(), 'whitelist only exposes explicitly public actions');
    $endpoint = $controller->doctorWebConsultation();
    migrationExpect($endpoint['code'] === 1 && $endpoint['data'] === $defaultPolicy, 'actual ConfigController returns the full read-only public policy contract');
    $profileSource = file_get_contents(dirname(__DIR__) . '/app/adminapi/logic/auth/AdminLogic.php');
    migrationExpect(str_contains($profileSource, "DoctorWebConsultationPolicy::publicPolicy()"), 'logged-in profile keeps sharing the same backend policy');

    // 在独立临时目录验证配置热加载；不改仓库配置，也不读取 .env 或项目密钥。
    $fixtureRoot = sys_get_temp_dir() . '/zyt-consultation-policy-' . bin2hex(random_bytes(8));
    $fixtureServiceDir = $fixtureRoot . '/app/adminapi/service';
    $fixtureConfigDir = $fixtureRoot . '/config';
    mkdir($fixtureServiceDir, 0700, true);
    mkdir($fixtureConfigDir, 0700, true);
    $fixtureService = $fixtureServiceDir . '/DoctorWebConsultationPolicy.php';
    $fixtureConfig = $fixtureConfigDir . '/doctor_web_consultation.php';
    try {
        $source = file_get_contents(dirname(__DIR__) . '/app/adminapi/service/DoctorWebConsultationPolicy.php');
        file_put_contents($fixtureService, str_replace('namespace app\\adminapi\\service;', 'namespace migration_reload_fixture;', $source));
        file_put_contents($fixtureConfig, '<?php return ' . var_export($defaults, true) . ';');
        $frameworkConfig = new \think\Config();
        $frameworkConfig->set($defaults, 'doctor_web_consultation');
        \think\Container::getInstance()->instance('config', $frameworkConfig);
        require $fixtureService;
        $fixtureClass = \migration_reload_fixture\DoctorWebConsultationPolicy::class;
        migrationExpect($fixtureClass::publicPolicy(123)['cutoff_at'] === $defaultPolicy['cutoff_at'], 'direct config loader starts with default fixture');
        file_put_contents($fixtureConfig, '<?php return ' . var_export($custom, true) . ';');
        migrationExpect($fixtureClass::publicPolicy($customCutoff - 1) === $customPolicy, 'editing only config immediately changes cutoff and both reminders in the same PHP process');
        migrationExpect(\think\facade\Config::get('doctor_web_consultation.cutoff_at') === $defaults['cutoff_at'], 'framework config deliberately remains cached at the old date while policy reloads the new file');
        migrationExpect(str_contains($fixtureClass::message(), '2032年1月1日14:30:45'), 'hot-loaded config immediately changes backend message');
        migrationExpect($fixtureClass::blocksRequest($doctor, 'tcm.diagnosis', 'startCall', $browser, $customCutoff), 'hot-loaded config controls backend enforcement');
        file_put_contents($fixtureConfig, '<?php return "invalid";');
        try {
            $fixtureClass::publicPolicy(123);
            migrationExpect(false, 'non-array config must fail clearly');
        } catch (\UnexpectedValueException $error) {
            migrationExpect(str_contains($error->getMessage(), 'doctor_web_consultation'), 'non-array config has a clear error');
        }
    } finally {
        foreach ([$fixtureConfig, $fixtureService] as $file) {
            if (is_file($file)) unlink($file);
        }
        foreach ([$fixtureServiceDir, dirname($fixtureServiceDir), $fixtureRoot . '/app', $fixtureConfigDir, $fixtureRoot] as $directory) {
            if (is_dir($directory)) rmdir($directory);
        }
    }
    echo "Doctor web consultation policy: {$assertions} assertions passed\n";
}