#!/bin/bash
# Phase 7: Error Format Comprehensive Test Suite
# Tests consistent error handling across all HTTP status codes (400/401/404/422/500)
# GALA-TEST-7 - 40 tests total
# Date: 2026-01-20

API_BASE="http://localhost:8100/api"
RESULTS_FILE="/tmp/phase7_error_results.txt"
PASSED=0
FAILED=0

# Test event slug (known good event)
TEST_EVENT_SLUG="mohamed-abdo-new-years-celebration-2025"

echo "=== Phase 7: Error Format Comprehensive Test Suite ===" > $RESULTS_FILE
echo "Date: $(date)" >> $RESULTS_FILE
echo "API Base: $API_BASE" >> $RESULTS_FILE
echo "GALA-TEST-7: Error Format Consistency Testing" >> $RESULTS_FILE
echo "" >> $RESULTS_FILE

# Helper: Test error format with optional auth header
# Usage: test_error_format METHOD ENDPOINT EXPECTED_STATUS DESCRIPTION [DATA] [AUTH_HEADER]
test_error_format() {
    local method=$1
    local endpoint=$2
    local expected_status=$3
    local description=$4
    local data=${5:-}
    local auth_header=${6:-}

    echo -n "Testing: $description ... "

    # Build curl command
    local curl_opts="-s -w \n%{http_code}"

    if [ -n "$auth_header" ]; then
        curl_opts="$curl_opts -H \"Authorization: $auth_header\""
    fi

    if [ "$method" == "GET" ]; then
        response=$(curl -s -w "\n%{http_code}" -H "Authorization: $auth_header" "$API_BASE$endpoint" 2>/dev/null)
    elif [ "$method" == "POST" ]; then
        if [ -n "$auth_header" ]; then
            response=$(curl -s -w "\n%{http_code}" -X POST -H "Content-Type: application/json" -H "Authorization: $auth_header" -d "$data" "$API_BASE$endpoint" 2>/dev/null)
        else
            response=$(curl -s -w "\n%{http_code}" -X POST -H "Content-Type: application/json" -d "$data" "$API_BASE$endpoint" 2>/dev/null)
        fi
    elif [ "$method" == "PUT" ]; then
        if [ -n "$auth_header" ]; then
            response=$(curl -s -w "\n%{http_code}" -X PUT -H "Content-Type: application/json" -H "Authorization: $auth_header" -d "$data" "$API_BASE$endpoint" 2>/dev/null)
        else
            response=$(curl -s -w "\n%{http_code}" -X PUT -H "Content-Type: application/json" -d "$data" "$API_BASE$endpoint" 2>/dev/null)
        fi
    elif [ "$method" == "DELETE" ]; then
        if [ -n "$auth_header" ]; then
            response=$(curl -s -w "\n%{http_code}" -X DELETE -H "Authorization: $auth_header" "$API_BASE$endpoint" 2>/dev/null)
        else
            response=$(curl -s -w "\n%{http_code}" -X DELETE "$API_BASE$endpoint" 2>/dev/null)
        fi
    fi

    status=$(echo "$response" | tail -n 1)
    body=$(echo "$response" | sed '$d')

    # Check status code
    if [ "$status" != "$expected_status" ]; then
        echo "FAIL (Expected: $expected_status, Got: $status)"
        echo "FAIL: $description" >> $RESULTS_FILE
        echo "   Expected status: $expected_status, Got: $status" >> $RESULTS_FILE
        echo "   Response: $(echo "$body" | head -c 200)" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    # Validate JSON structure (not HTML)
    if ! echo "$body" | jq empty 2>/dev/null; then
        echo "FAIL (Response is not valid JSON)"
        echo "FAIL: $description - Response is not valid JSON" >> $RESULTS_FILE
        echo "   Response: $(echo "$body" | head -c 200)" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    # Validate error has 'success' field set to false
    success=$(echo "$body" | jq -r '.success' 2>/dev/null)
    if [ "$success" != "false" ]; then
        echo "FAIL (Missing 'success: false')"
        echo "FAIL: $description - Error response missing 'success: false'" >> $RESULTS_FILE
        echo "   Got success=$success" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    # Validate error has 'message' field
    message=$(echo "$body" | jq -r '.message' 2>/dev/null)
    if [ "$message" == "null" ] || [ -z "$message" ]; then
        echo "FAIL (Missing 'message' field)"
        echo "FAIL: $description - Error response missing 'message' field" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    echo "PASS"
    echo "PASS: $description" >> $RESULTS_FILE
    ((PASSED++))
    return 0
}

# Helper: Test validation error format (422 with 'errors' field)
test_validation_error() {
    local method=$1
    local endpoint=$2
    local description=$3
    local data=$4
    local expected_field=${5:-}

    echo -n "Testing: $description ... "

    if [ "$method" == "POST" ]; then
        response=$(curl -s -w "\n%{http_code}" -X POST -H "Content-Type: application/json" -d "$data" "$API_BASE$endpoint" 2>/dev/null)
    elif [ "$method" == "PUT" ]; then
        response=$(curl -s -w "\n%{http_code}" -X PUT -H "Content-Type: application/json" -d "$data" "$API_BASE$endpoint" 2>/dev/null)
    fi

    status=$(echo "$response" | tail -n 1)
    body=$(echo "$response" | sed '$d')

    # Check status code is 422
    if [ "$status" != "422" ]; then
        echo "FAIL (Expected: 422, Got: $status)"
        echo "FAIL: $description" >> $RESULTS_FILE
        echo "   Expected status: 422, Got: $status" >> $RESULTS_FILE
        echo "   Response: $(echo "$body" | head -c 200)" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    # Validate JSON structure
    if ! echo "$body" | jq empty 2>/dev/null; then
        echo "FAIL (Response is not valid JSON)"
        echo "FAIL: $description - Response is not valid JSON" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    # Validate has 'success: false'
    success=$(echo "$body" | jq -r '.success' 2>/dev/null)
    if [ "$success" != "false" ]; then
        echo "FAIL (Missing 'success: false')"
        echo "FAIL: $description - Missing 'success: false'" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    # Validate has 'message' field
    message=$(echo "$body" | jq -r '.message' 2>/dev/null)
    if [ "$message" == "null" ] || [ -z "$message" ]; then
        echo "FAIL (Missing 'message' field)"
        echo "FAIL: $description - Missing 'message' field" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    # Validate has 'errors' field for 422
    errors=$(echo "$body" | jq '.errors' 2>/dev/null)
    if [ "$errors" == "null" ]; then
        echo "FAIL (Missing 'errors' field)"
        echo "FAIL: $description - Missing 'errors' field for validation error" >> $RESULTS_FILE
        ((FAILED++))
        return 1
    fi

    # If expected_field specified, check it exists in errors
    if [ -n "$expected_field" ]; then
        field_error=$(echo "$body" | jq -r ".errors.$expected_field" 2>/dev/null)
        if [ "$field_error" == "null" ]; then
            echo "FAIL (Missing error for field: $expected_field)"
            echo "FAIL: $description - Missing error for expected field: $expected_field" >> $RESULTS_FILE
            ((FAILED++))
            return 1
        fi
    fi

    echo "PASS"
    echo "PASS: $description" >> $RESULTS_FILE
    ((PASSED++))
    return 0
}

echo ""
echo "=============================================="
echo "Phase 7: Error Format Comprehensive Test Suite"
echo "Testing 40 error scenarios across 5 HTTP codes"
echo "=============================================="
echo ""

# =============================================================================
# SECTION 1: 400 Bad Request (8 tests)
# =============================================================================
echo "=== SECTION 1: 400 Bad Request (8 tests) ==="
echo "" >> $RESULTS_FILE
echo "=== SECTION 1: 400 Bad Request ===" >> $RESULTS_FILE

# Test 1.1: Missing idempotency header on seat confirm
test_error_format "POST" "/seats/confirm" "400" "1.1 Missing idempotency header on seat confirm" '{"hold_id":"test-123"}'

# Test 1.2: Missing idempotency header on deposit
test_error_format "POST" "/orders/deposit" "400" "1.2 Missing idempotency header on deposit" '{"hold_id":"test-123"}'

# Test 1.3: Empty request body on POST confirm
test_error_format "POST" "/seats/confirm" "400" "1.3 Empty request body on confirm" ''

# Test 1.4: Invalid JSON in deposit request (causes parse error)
test_error_format "POST" "/orders/deposit" "400" "1.4 Invalid JSON in deposit request" '{"invalid": json structure'

# Test 1.5: Missing header on payment confirmation
test_error_format "POST" "/seats/confirm" "400" "1.5 Missing header on payment confirmation" '{"session_id":"test"}'

# Test 1.6: Missing session_id on confirm (validation after header check)
test_error_format "POST" "/seats/confirm" "400" "1.6 Confirm missing session_id" '{"customer_name":"Test"}'

# Test 1.7: Invalid hold_id format on confirm (missing header first)
test_error_format "POST" "/seats/confirm" "400" "1.7 Invalid confirm without idempotency" '{"hold_id":"","session_id":""}'

# Test 1.8: Deposit without idempotency key
test_error_format "POST" "/orders/deposit" "400" "1.8 Deposit request without idempotency key" '{"session_id":"test-session","amount":100}'

echo ""

# =============================================================================
# SECTION 2: 401 Unauthorized (10 tests)
# =============================================================================
echo "=== SECTION 2: 401 Unauthorized (10 tests) ==="
echo "" >> $RESULTS_FILE
echo "=== SECTION 2: 401 Unauthorized ===" >> $RESULTS_FILE

# Test 2.1: Admin events list without token
test_error_format "GET" "/admin/events" "401" "2.1 Admin events without token"

# Test 2.2: Admin event create without token
test_error_format "POST" "/admin/events" "401" "2.2 Admin create event without token" '{"name":"Test Event"}'

# Test 2.3: Admin event update without token
test_error_format "PUT" "/admin/events/1" "401" "2.3 Admin update event without token" '{"name":"Updated Event"}'

# Test 2.4: Admin event delete without token
test_error_format "DELETE" "/admin/events/1" "401" "2.4 Admin delete event without token"

# Test 2.5: User profile without token
test_error_format "GET" "/me" "401" "2.5 User profile without token"

# Test 2.6: Order detail without token
test_error_format "GET" "/orders/1" "401" "2.6 Order detail without token"

# Test 2.7: Admin with invalid token format
test_error_format "GET" "/admin/events" "401" "2.7 Admin with invalid token format" "" "Bearer invalid_token_format"

# Test 2.8: Admin with expired token simulation
test_error_format "GET" "/admin/events" "401" "2.8 Admin with expired/invalid token" "" "Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.expired"

# Test 2.9: Admin users list without token
test_error_format "GET" "/admin/users" "401" "2.9 Admin users without token"

# Test 2.10: Admin capacity without token
test_error_format "GET" "/admin/events/1/capacity" "401" "2.10 Admin capacity without token"

echo ""

# =============================================================================
# SECTION 3: 404 Not Found (10 tests)
# =============================================================================
echo "=== SECTION 3: 404 Not Found (10 tests) ==="
echo "" >> $RESULTS_FILE
echo "=== SECTION 3: 404 Not Found ===" >> $RESULTS_FILE

# Test 3.1: Nonexistent event by slug
test_error_format "GET" "/events/nonexistent-event-slug-99999" "404" "3.1 Nonexistent event by slug"

# Test 3.2: Nonexistent event by ID
test_error_format "GET" "/events/99999999" "404" "3.2 Nonexistent event by numeric ID"

# Test 3.3: Nonexistent booking
test_error_format "GET" "/bookings/999999999" "404" "3.3 Nonexistent booking"

# Test 3.4: Nonexistent event tiers
test_error_format "GET" "/events/nonexistent-event-99999/tiers" "404" "3.4 Nonexistent event tiers"

# Test 3.5: Nonexistent event availability
test_error_format "GET" "/events/nonexistent-event-99999/availability" "404" "3.5 Nonexistent event availability"

# Test 3.6: Nonexistent event images
test_error_format "GET" "/events/nonexistent-event-99999/images" "404" "3.6 Nonexistent event images"

# Test 3.7: Nonexistent event collection
test_error_format "GET" "/events/nonexistent-event-99999/collection" "404" "3.7 Nonexistent event collection"

# Test 3.8: Invalid API route
test_error_format "GET" "/nonexistent/api/route" "404" "3.8 Invalid API route"

# Test 3.9: Nonexistent venue by slug
test_error_format "GET" "/venues/nonexistent-venue-slug" "404" "3.9 Nonexistent venue by slug"

# Test 3.10: Nonexistent category
test_error_format "GET" "/categories/nonexistent-category-99999" "404" "3.10 Nonexistent category"

echo ""

# =============================================================================
# SECTION 4: 422 Validation Error (10 tests)
# =============================================================================
echo "=== SECTION 4: 422 Validation Error (10 tests) ==="
echo "" >> $RESULTS_FILE
echo "=== SECTION 4: 422 Validation Error ===" >> $RESULTS_FILE

# Test 4.1: Login with invalid email format
test_validation_error "POST" "/login" "4.1 Login invalid email format" '{"email":"invalid-email","password":"test123"}' "email"

# Test 4.2: Login with missing password
test_validation_error "POST" "/login" "4.2 Login missing password" '{"email":"test@example.com"}' "password"

# Test 4.3: Login with empty credentials
test_validation_error "POST" "/login" "4.3 Login empty credentials" '{}' "email"

# Test 4.4: Register with invalid email
test_validation_error "POST" "/register" "4.4 Register invalid email" '{"email":"not-an-email","password":"test123","name":"Test"}' "email"

# Test 4.5: Register with short password
test_validation_error "POST" "/register" "4.5 Register short password" '{"email":"test@example.com","password":"123","name":"Test"}' "password"

# Test 4.6: Register missing email
test_validation_error "POST" "/register" "4.6 Register missing email" '{"password":"test123456","first_name":"Test","last_name":"User"}' "email"

# Test 4.7: Seat hold missing event_id
test_validation_error "POST" "/seats/hold" "4.7 Seat hold missing event_id" '{"seat_ids":["seat-1"]}' "event_id"

# Test 4.8: Seat hold with empty seat_ids
test_validation_error "POST" "/seats/hold" "4.8 Seat hold empty seat_ids" '{"event_id":1,"seat_ids":[]}' "seat_ids"

# Test 4.9: Newsletter subscribe invalid email
test_validation_error "POST" "/newsletter/subscribe" "4.9 Newsletter invalid email" '{"email":"not-valid-email"}' "email"

# Test 4.10: Login with empty email
test_validation_error "POST" "/login" "4.10 Login with empty email" '{"email":"","password":"test123"}' "email"

echo ""

# =============================================================================
# SECTION 5: 500 Server Error (2 tests)
# =============================================================================
echo "=== SECTION 5: 500 Server Error (2 tests) ==="
echo "" >> $RESULTS_FILE
echo "=== SECTION 5: 500 Server Error ===" >> $RESULTS_FILE

# Test 5.1: Event with no venue assigned (known to cause 500)
# Note: This test validates that 500 errors return proper JSON format
test_error_format "GET" "/events/$TEST_EVENT_SLUG/venue" "500" "5.1 Event venue with no assignment"

# Test 5.2: Event venue endpoint with nonexistent event (may return 404 or 500)
# Testing that even server errors maintain JSON format
# Note: Using curl with specific header to bypass idempotency check
IDEMP_KEY="test-idemp-$(date +%s)"
echo -n "Testing: 5.2 Confirm with valid headers but nonexistent session ... "
response=$(curl -s -w "\n%{http_code}" -X POST -H "Content-Type: application/json" -H "Payment-Idempotency-Key: $IDEMP_KEY" -d '{"session_id":"nonexistent-session-99999"}' "$API_BASE/seats/confirm" 2>/dev/null)
status=$(echo "$response" | tail -n 1)
body=$(echo "$response" | sed '$d')

# For this test, we accept either 404 (not found) or 422 (validation) or 500 (server error)
# as long as the response is valid JSON with success:false
if echo "$body" | jq empty 2>/dev/null; then
    success=$(echo "$body" | jq -r '.success' 2>/dev/null)
    if [ "$success" == "false" ]; then
        echo "PASS (Got $status with proper error format)"
        echo "PASS: 5.2 Server error handling returns valid JSON (status: $status)" >> $RESULTS_FILE
        ((PASSED++))
    else
        echo "FAIL (Missing 'success: false')"
        echo "FAIL: 5.2 Server error - Missing 'success: false'" >> $RESULTS_FILE
        ((FAILED++))
    fi
else
    echo "FAIL (Response is not valid JSON)"
    echo "FAIL: 5.2 Server error - Response is not valid JSON" >> $RESULTS_FILE
    ((FAILED++))
fi

echo ""

# =============================================================================
# Summary
# =============================================================================
echo "=============================================="
echo "Phase 7 Test Summary"
echo "=============================================="
echo ""
echo "Results: $PASSED passed, $FAILED failed out of 40 tests"
echo "" >> $RESULTS_FILE
echo "=============================================="  >> $RESULTS_FILE
echo "SUMMARY: $PASSED passed, $FAILED failed out of 40 tests" >> $RESULTS_FILE
echo "" >> $RESULTS_FILE

# Quality Gates Check
echo "" >> $RESULTS_FILE
echo "Quality Gates:" >> $RESULTS_FILE
PASS_RATE=$((PASSED * 100 / 40))
echo "  Pass Rate: ${PASS_RATE}% (Target: >=90%)" >> $RESULTS_FILE

if [ $PASS_RATE -ge 90 ]; then
    echo "  Status: PASSED" >> $RESULTS_FILE
else
    echo "  Status: FAILED (below 90% threshold)" >> $RESULTS_FILE
fi

echo ""
echo "Full results saved to: $RESULTS_FILE"
cat $RESULTS_FILE

if [ $FAILED -gt 0 ]; then
    echo ""
    echo "Some tests failed. Review results above."
    # Exit 0 even with failures to allow investigation
    # Tests may fail due to API variations or configuration
    exit 0
else
    echo ""
    echo "ALL 40 ERROR FORMAT TESTS PASSED!"
    exit 0
fi