import { maintenanceTick } from '../helpers/provisioning.js';
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
import { newFixture, type Fixture } from '../helpers/fixture.js';
import { maintenanceTimeInZone, nextMaintenanceAt, parsePlutoniumManifest, parsePlutoniumRevision, PLUTONIUM_MANIFEST_URL } from '../../src/lib/plutonium.js';

vi.mock('../../src/lib/server/integrations/rcon.js', () => ({ rconGetPlayerCount: vi.fn(), rconStatusResult: vi.fn(), rconPlutoniumVersion: vi.fn() }));

let fixture: Fixture;
const servers = ['t5_zombie_theater_1', 't6_zombie_town_1'];
beforeEach(async () => {
    vi.resetModules(); vi.resetAllMocks();
    vi.useFakeTimers({ toFake: ['Date'] });
    vi.setSystemTime(new Date('2026-09-21T05:59:00Z'));
    fixture = await newFixture(servers);

    vi.stubEnv('RCON_PASSWORD', 'test'); vi.stubEnv('DEPLOYMENT_RESTART_CONCURRENCY', '1');
    vi.stubGlobal('fetch', vi.fn().mockImplementation(async () => Response.json({ product: 'plutonium-core-prod', revision: 5354, files: [] })));
    const { seedServerRegistry } = await import('../../src/lib/server/fleet/servers.js');
    await seedServerRegistry();
    vi.spyOn(await import('../../src/lib/server/backends/native.js'), 'nativeHealth');
    const k = await import('../../src/lib/server/backends/native.js');

    vi.mocked(k.nativeHealth).mockResolvedValue({ ok: true, state: 'running' });
    const r = await import('../../src/lib/server/integrations/rcon.js');
    vi.mocked(r.rconGetPlayerCount).mockResolvedValue(0);
    vi.mocked(r.rconPlutoniumVersion).mockResolvedValue({ revision: 5354, error: null });
    vi.mocked(r.rconStatusResult).mockResolvedValue({ ok: true, endpoint: { host: 'test', port: 28960 }, rawReply: '', status: { players: 0, map: null, gametype: null, roster: [] } });
});
afterEach(async () => { await fixture.cleanup(); vi.unstubAllEnvs(); vi.unstubAllGlobals(); vi.useRealTimers(); });
const api = () => import('../../src/lib/server/fleet/plutonium.js');

describe('Plutonium versions', () => {
    it.each([
        ['create', 'queued'], ['rebuild', 'waiting'], ['start', 'running'],
        ['restart', 'awaiting-health'], ['stop', 'waiting'], ['destroy', 'running']
    ])('suppresses fleet probes during %s (%s), preserves evidence, and resumes afterwards', async (action, state) => {
        const m = await api();
        await m.checkPlutonium();
        const { db, closeDb } = await import('../../src/lib/server/db/index.js');
        const { nativeHealth } = await import('../../src/lib/server/backends/native.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        const saved = db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0]);
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('busy', ?, ?, ?, 'Provisioning', ?, 'test')`).run(servers[0], action, state, new Date().toISOString());
        closeDb();
        vi.mocked(nativeHealth).mockClear();
        vi.mocked(rconPlutoniumVersion).mockClear();
        vi.setSystemTime(Date.now() + 1_000);
        await m.checkPlutonium();
        expect(nativeHealth).toHaveBeenCalledTimes(1);
        expect(nativeHealth).toHaveBeenCalledWith(servers[1]);
        expect(rconPlutoniumVersion).toHaveBeenCalledTimes(1);
        expect(rconPlutoniumVersion).toHaveBeenCalledWith(servers[1]);
        expect(db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0])).toEqual(saved);
        db().prepare("UPDATE server_deployments SET state = 'done' WHERE id = 'busy'").run();
        await m.checkPlutonium();
        expect(rconPlutoniumVersion).toHaveBeenCalledWith(servers[0]);
        expect(db().prepare('SELECT checked_at FROM plutonium_versions WHERE server = ?').get(servers[0]))
            .toEqual({ checked_at: new Date().toISOString() });
    });
    it('suppresses fleet probes while a failed restart retains recovery capacity', async () => {
        const m = await api();
        await m.checkPlutonium();
        const { db } = await import('../../src/lib/server/db/index.js');
        const { nativeHealth } = await import('../../src/lib/server/backends/native.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        const saved = db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0]);
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('failed-restart', ?, 'restart', 'failed', 'Timed out', ?, 'test')`).run(servers[0], new Date().toISOString());
        db().prepare('INSERT INTO restart_rollout (server, requested_at, operation_id) VALUES (?, ?, ?)')
            .run(servers[0], new Date().toISOString(), 'failed-restart');
        vi.mocked(nativeHealth).mockClear();
        vi.mocked(rconPlutoniumVersion).mockClear();
        await m.checkPlutonium();
        expect(nativeHealth).not.toHaveBeenCalledWith(servers[0]);
        expect(rconPlutoniumVersion).not.toHaveBeenCalledWith(servers[0]);
        expect(db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0])).toEqual(saved);
        db().prepare('UPDATE restart_rollout SET healthy_at = ? WHERE server = ?').run(new Date().toISOString(), servers[0]);
        vi.setSystemTime(Date.now() + 1_000);
        await m.checkPlutonium();
        expect(rconPlutoniumVersion).toHaveBeenCalledWith(servers[0]);
    });
    it.each(['health', 'version'] as const)('discards maintenance observations when provisioning is queued during the %s probe', async phase => {
        const m = await api();
        await m.checkPlutonium();
        const { db } = await import('../../src/lib/server/db/index.js');
        const { probeVersion } = await import('../../src/lib/server/integrations/plutonium.js');
        const { nativeHealth } = await import('../../src/lib/server/backends/native.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        const saved = db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0]);
        const queue = () => db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('new-rebuild', ?, 'rebuild', 'waiting', 'Waiting', ?, 'test')`).run(servers[0], new Date().toISOString());
        vi.mocked(rconPlutoniumVersion).mockClear();
        if (phase === 'health') vi.mocked(nativeHealth).mockImplementationOnce(async () => {
            queue(); return { ok: true, state: 'running' };
        });
        else vi.mocked(rconPlutoniumVersion).mockImplementationOnce(async () => {
            queue(); return { revision: null, error: 'Restarting' };
        });
        vi.setSystemTime(Date.now() + 1_000);
        expect(await probeVersion(servers[0], { maintenance: true })).toBeNull();
        if (phase === 'health') expect(rconPlutoniumVersion).not.toHaveBeenCalled();
        expect(db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0])).toEqual(saved);
    });
    it('coalesces published-release checks without probing the fleet', async () => {
        const { checkRelease, release } = await import('../../src/lib/server/integrations/plutonium.js');
        const { nativeHealth } = await import('../../src/lib/server/backends/native.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        const first = checkRelease();
        const second = checkRelease();
        expect(second).toBe(first);
        await Promise.all([first, second]);
        expect(fetch).toHaveBeenCalledTimes(1);
        expect(release()).toMatchObject({ revision: 5354, error: null });
        expect(nativeHealth).not.toHaveBeenCalled();
        expect(rconPlutoniumVersion).not.toHaveBeenCalled();
        await checkRelease();
        expect(fetch).toHaveBeenCalledTimes(2);
    });
    it('lets the verifying rebuild probe its own recovery while maintenance still yields', async () => {
        const { db } = await import('../../src/lib/server/db/index.js');
        const { probeVersion, runningVersions } = await import('../../src/lib/server/integrations/plutonium.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        const submittedAt = new Date(Date.now() - 1000).toISOString();
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, submitted_at, triggered_by)
            VALUES ('rebuild', ?, 'rebuild', 'awaiting-health', 'Verifying', ?, ?, 'test')`).run(servers[0], submittedAt, submittedAt);
        db().prepare('INSERT INTO restart_rollout (server, requested_at, operation_id) VALUES (?, ?, ?)').run(servers[0], submittedAt, 'rebuild');
        expect(await probeVersion(servers[0], { operationId: 'rebuild' })).toBe(5354);
        expect(db().prepare('SELECT healthy_at FROM restart_rollout WHERE server=?').get(servers[0])).toEqual({ healthy_at: null });
        // A successful revision check alone cannot advertise completed recovery.
        expect(runningVersions().find(version => version.server === servers[0])?.revision).toBeNull();
        const saved = db().prepare('SELECT * FROM plutonium_versions WHERE server=?').get(servers[0]);
        vi.mocked(rconPlutoniumVersion).mockClear();
        expect(await probeVersion(servers[0], { maintenance: true })).toBeNull();
        expect(rconPlutoniumVersion).not.toHaveBeenCalled();
        expect(db().prepare('SELECT * FROM plutonium_versions WHERE server=?').get(servers[0])).toEqual(saved);
    });
    it.each(['another-owner', 'another-server', 'unsubmitted', 'finished'] as const)('does not bypass recovery for %s', async scenario => {
        const { db } = await import('../../src/lib/server/db/index.js');
        const { probeVersion } = await import('../../src/lib/server/integrations/plutonium.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        const submittedAt = new Date(Date.now() - 1000).toISOString();
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, submitted_at, triggered_by)
            VALUES ('rebuild', ?, 'rebuild', ?, 'Verifying', ?, ?, 'test')`).run(scenario === 'another-server' ? servers[1] : servers[0],
                scenario === 'finished' ? 'done' : 'awaiting-health', submittedAt, scenario === 'unsubmitted' ? null : submittedAt);
        db().prepare('INSERT INTO restart_rollout (server, requested_at, operation_id) VALUES (?, ?, ?)')
            .run(servers[0], submittedAt, scenario === 'another-owner' ? 'other-rebuild' : 'rebuild');
        expect(await probeVersion(servers[0], { operationId: 'rebuild' })).toBeNull();
        expect(rconPlutoniumVersion).not.toHaveBeenCalled();
        expect(db().prepare('SELECT healthy_at FROM restart_rollout WHERE server=?').get(servers[0])).toEqual({ healthy_at: null });
    });
    it('discards version evidence if its verifying operation finishes during the probe', async () => {
        const { db } = await import('../../src/lib/server/db/index.js');
        const { probeVersion } = await import('../../src/lib/server/integrations/plutonium.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        const submittedAt = new Date(Date.now() - 1000).toISOString();
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, submitted_at, triggered_by)
            VALUES ('rebuild', ?, 'rebuild', 'awaiting-health', 'Verifying', ?, ?, 'test')`).run(servers[0], submittedAt, submittedAt);
        db().prepare('INSERT INTO restart_rollout (server, requested_at, operation_id) VALUES (?, ?, ?)').run(servers[0], submittedAt, 'rebuild');
        vi.mocked(rconPlutoniumVersion).mockImplementationOnce(async () => {
            db().prepare("UPDATE server_deployments SET state='failed' WHERE id='rebuild'").run();
            return { revision: 5354, error: null };
        });
        expect(await probeVersion(servers[0], { operationId: 'rebuild' })).toBeNull();
        expect(db().prepare('SELECT * FROM plutonium_versions WHERE server=?').get(servers[0])).toBeUndefined();
    });
    it('refreshes hourly fleet versions even when provisioning recently refreshed the release manifest', async () => {
        const m = await api();
        const { checkRelease, HOUR } = await import('../../src/lib/server/integrations/plutonium.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        await m.checkPlutonium();
        vi.setSystemTime(Date.now() + HOUR);
        await checkRelease();
        vi.mocked(rconPlutoniumVersion).mockClear();
        await m.maintenanceTick();
        expect(rconPlutoniumVersion).toHaveBeenCalledTimes(servers.length);
        for (const server of servers) expect(rconPlutoniumVersion).toHaveBeenCalledWith(server);
        await m.maintenanceTick();
        expect(rconPlutoniumVersion).toHaveBeenCalledTimes(servers.length);
    });
    it('uses the official production manifest without requesting the challenged changelog page', async () => {
        const m = await api(); await m.checkPlutonium();
        expect(fetch).toHaveBeenCalledTimes(1);
        expect(fetch).toHaveBeenCalledWith(PLUTONIUM_MANIFEST_URL, expect.any(Object));
        expect(m.plutoniumStatus().release).toMatchObject({ revision: 5354, error: null });
        expect(parsePlutoniumManifest({ product: 'plutonium-core-prod', revision: 5354 })).toBe(5354);
        for (const value of [null, {}, { ref: '1.0.221' }, { product: 'plutonium-core-dev', revision: 6000 },
            { product: 'plutonium-core-prod', revision: '5354' }, { product: 'plutonium-core-prod', revision: -1 }]) {
            expect(() => parsePlutoniumManifest(value)).toThrow();
        }
    });
    it('parses explicit running revisions without interpreting engine numbers as releases', () => {
        expect(parsePlutoniumRevision('print\nPlutonium T6 r5354 win-x86')).toBe(5354);
        expect(parsePlutoniumRevision('version 1.0 build 20260921')).toBeNull();
    });
    it('preserves the cached release with a visible error and clears failed running-version observations', async () => {
        const m = await api(); await m.checkPlutonium();
        vi.mocked(fetch).mockRejectedValue(new Error('Offline'));
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        vi.mocked(rconPlutoniumVersion).mockResolvedValue({ revision: null, error: 'Timeout' });
        await m.checkPlutonium();
        expect(m.plutoniumStatus().release).toMatchObject({ revision: 5354, error: 'Offline' });
        expect(m.plutoniumStatus().servers.every(s => s.revision === null && s.error === 'Timeout')).toBe(true);
    });
    it.each([
        () => new Response('Blocked', { status: 403 }),
        () => new Response('<html>Browser challenge</html>'),
        () => Response.json({ product: 'plutonium-core-dev', revision: 9999 })
    ])('keeps the cached revision when the manifest is unavailable or invalid', async response => {
        const m = await api(); await m.checkPlutonium();
        vi.mocked(fetch).mockImplementation(async () => response());
        await m.checkPlutonium();
        expect(m.plutoniumStatus().release.revision).toBe(5354);
        expect(m.plutoniumStatus().release.error).toBeTruthy();
        m.queueMaintenance([servers[0]]);
        expect(m.plutoniumStatus().jobs[0].target_revision).toBeNull();
    });
    it('rejects a version observed at the startup submission timestamp, then accepts a later observation', async () => {
        const { db } = await import('../../src/lib/server/db/index.js');
        const { probeVersion, runningVersions, checkRelease } = await import('../../src/lib/server/integrations/plutonium.js');
        const submittedAt = new Date().toISOString();
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, submitted_at, triggered_by)
            VALUES ('startup', ?, 'create', 'awaiting-health', 'Waiting for health', ?, ?, 'test')`).run(servers[0], submittedAt, submittedAt);
        await checkRelease();
        expect(await probeVersion(servers[0])).toBeNull();
        expect(runningVersions()[0]).toMatchObject({ revision: null, checked_at: submittedAt, update_status: 'unknown', error: expect.stringContaining('after startup') });
        vi.setSystemTime(Date.now() + 1);
        expect(await probeVersion(servers[0])).toBe(5354);
        expect(runningVersions()[0]).toMatchObject({ revision: 5354, update_status: 'current', error: null });
    });
    it('discards a running revision when a new lifecycle submission arrives during its probe', async () => {
        const { db } = await import('../../src/lib/server/db/index.js');
        const { probeVersion, runningVersions } = await import('../../src/lib/server/integrations/plutonium.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        vi.mocked(rconPlutoniumVersion).mockImplementationOnce(async () => {
            const now = new Date().toISOString();
            db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, submitted_at, triggered_by)
                VALUES ('restart', ?, 'restart', 'awaiting-health', 'Waiting for health', ?, ?, 'test')`).run(servers[0], now, now);
            return { revision: 5354, error: null };
        });
        expect(await probeVersion(servers[0])).toBeNull();
        expect(runningVersions()[0]).toMatchObject({ revision: null, update_status: 'unknown' });
        expect(db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0])).toBeUndefined();
    });
    it.each(['startup', 'replacement'] as const)('preserves a newer successful revision when an old probe finishes after %s', async change => {
        const { db } = await import('../../src/lib/server/db/index.js');
        const { probeVersion, runningVersions, checkRelease } = await import('../../src/lib/server/integrations/plutonium.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        await checkRelease();
        db().prepare('UPDATE servers SET created_at = ? WHERE name = ?').run('2026-09-21T05:58:00.000Z', servers[0]);
        let finishOld!: (value: { revision: number; error: null }) => void;
        let started!: () => void;
        const probing = new Promise<void>(resolve => { started = resolve; });
        vi.mocked(rconPlutoniumVersion).mockImplementationOnce(() => {
            started();
            return new Promise(resolve => { finishOld = resolve; });
        });
        const oldProbe = probeVersion(servers[0]);
        await probing;
        const now = new Date().toISOString();
        if (change === 'startup') {
            db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, submitted_at, triggered_by)
                VALUES ('new-startup', ?, 'start', 'awaiting-health', 'Waiting for health', ?, ?, 'test')`).run(servers[0], now, now);
        } else {
            // Both registrations have no lifecycle submission, so only their
            // registry identity distinguishes the old and replacement instances.
            db().prepare('DELETE FROM servers WHERE name = ?').run(servers[0]);
            db().prepare('INSERT INTO servers (name, created_at) VALUES (?, ?)').run(servers[0], now);
        }
        vi.setSystemTime(Date.now() + 1);
        expect(await probeVersion(servers[0])).toBe(5354);
        const saved = db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0]);
        vi.setSystemTime(Date.now() + 1);
        finishOld({ revision: 5300, error: null });
        expect(await oldProbe).toBeNull();
        expect(db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0])).toEqual(saved);
        expect(runningVersions()[0]).toMatchObject({ revision: 5354, error: null, update_status: 'current' });
    });
    it('discards a running revision when the server is stopped during its probe', async () => {
        const { db } = await import('../../src/lib/server/db/index.js');
        const { probeVersion, runningVersions } = await import('../../src/lib/server/integrations/plutonium.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        vi.mocked(rconPlutoniumVersion).mockImplementationOnce(async () => {
            db().prepare("UPDATE servers SET desired_state = 'stopped' WHERE name = ?").run(servers[0]);
            return { revision: 5354, error: null };
        });
        expect(await probeVersion(servers[0])).toBeNull();
        expect(runningVersions()[0]).toMatchObject({ revision: null, error: 'Server is intentionally stopped.', update_status: 'stopped' });
    });
});

describe('maintenance timezones', () => {
    it.each([
        ['06:00', '2026-09-21T05:59:00Z', 'America/New_York', '2026-09-21T10:00:00.000Z'],
        ['06:00', '2026-12-21T05:59:00Z', 'America/New_York', '2026-12-21T11:00:00.000Z'],
        ['06:00', '2026-09-21T00:00:00Z', 'Asia/Kathmandu', '2026-09-21T00:15:00.000Z'],
        ['06:00', '2026-09-21T00:15:01Z', 'Asia/Kathmandu', '2026-09-22T00:15:00.000Z'],
        ['02:30', '2026-03-08T05:00:00Z', 'America/New_York', '2026-03-08T07:00:00.000Z'],
        ['01:30', '2026-11-01T04:00:00Z', 'America/New_York', '2026-11-01T05:30:00.000Z'],
        ['01:30', '2026-11-01T05:31:00Z', 'America/New_York', '2026-11-02T06:30:00.000Z'],
        ['02:15', '2026-10-03T13:00:00Z', 'Australia/Lord_Howe', '2026-10-03T15:30:00.000Z']
    ])('schedules %s after %s in %s', (time, now, zone, expected) => {
        expect(nextMaintenanceAt(time, new Date(now), zone)).toBe(expected);
    });
    it('preserves legacy UTC schedules and displays their next occurrence in the user timezone', async () => {
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare('INSERT INTO settings (key, value) VALUES (?, ?)').run('plutonium_schedule', JSON.stringify({
            enabled: true, time: '06:00', nextAt: '2026-09-21T06:00:00.000Z'
        }));
        const m = await api();
        const schedule = m.plutoniumStatus().schedule;
        expect(schedule.timeZone).toBe('UTC');
        expect(maintenanceTimeInZone(schedule, 'America/New_York')).toBe('02:00');
        expect(m.plutoniumStatus().schedule.nextAt).toBe('2026-09-21T06:00:00.000Z');
    });
});

describe('persistent maintenance', () => {
    it('waits to attach legacy maintenance while another operation owns the server', async () => {
        const m = await api(); await m.checkPlutonium();
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare(`INSERT INTO maintenance_jobs (server, requested_at) VALUES (?, ?)`).run(servers[0], new Date().toISOString());
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('existing-start', ?, 'start', 'waiting', 'Waiting to start', ?, 'test')`).run(servers[0], new Date().toISOString());
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs[0]).toMatchObject({ state: 'queued', provisioning_id: null, detail: expect.stringContaining('another provisioning operation') });
        expect(db().prepare('SELECT COUNT(*) AS count FROM server_deployments').get()).toEqual({ count: 1 });
        db().prepare("UPDATE server_deployments SET state = 'done' WHERE id = 'existing-start'").run();
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs[0].provisioning_id).toBeTruthy();
        expect(db().prepare('SELECT COUNT(*) AS count FROM server_deployments').get()).toEqual({ count: 2 });
    });
    it('defers completed maintenance verification while a later operation owns the server, then resumes', async () => {
        const m = await api(); await m.checkPlutonium(); m.queueMaintenance([servers[0]]);
        const { db } = await import('../../src/lib/server/db/index.js');
        const job = m.plutoniumStatus().jobs[0];
        db().prepare("UPDATE server_deployments SET state = 'done' WHERE id = ?").run(job.provisioning_id);
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('later-restart', ?, 'restart', 'waiting', 'Waiting to restart', ?, 'test')`).run(servers[0], new Date().toISOString());
        const { nativeHealth } = await import('../../src/lib/server/backends/native.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        vi.mocked(nativeHealth).mockClear(); vi.mocked(rconPlutoniumVersion).mockClear();
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs[0]).toMatchObject({ state: 'queued', detail: expect.stringContaining('before verifying') });
        expect(nativeHealth).not.toHaveBeenCalled(); expect(rconPlutoniumVersion).not.toHaveBeenCalled();
        db().prepare("UPDATE server_deployments SET state = 'done' WHERE id = 'later-restart'").run();
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs[0].state).toBe('done');
        expect(rconPlutoniumVersion).toHaveBeenCalledWith(servers[0]);
    });
    it('does not fail maintenance verification when another operation starts during its version probe', async () => {
        const m = await api(); await m.checkPlutonium(); m.queueMaintenance([servers[0]]);
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare("UPDATE server_deployments SET state = 'done' WHERE id = ?").run(m.plutoniumStatus().jobs[0].provisioning_id);
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        vi.mocked(rconPlutoniumVersion).mockImplementationOnce(async () => {
            db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
                VALUES ('later-rebuild', ?, 'rebuild', 'running', 'Rebuilding', ?, 'test')`).run(servers[0], new Date().toISOString());
            return { revision: null, error: 'Restarting' };
        });
        const before = db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0]);
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs[0]).toMatchObject({ state: 'queued', detail: expect.stringContaining('before verifying') });
        expect(db().prepare('SELECT * FROM plutonium_versions WHERE server = ?').get(servers[0])).toEqual(before);
        db().prepare("UPDATE server_deployments SET state = 'done' WHERE id = 'later-rebuild'").run();
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs[0].state).toBe('done');
    });
    it('mirrors its own failed operation even while another operation owns the server', async () => {
        const m = await api(); await m.checkPlutonium(); m.queueMaintenance([servers[0]]);
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare("UPDATE server_deployments SET state = 'failed', error = 'Restart failed' WHERE id = ?").run(m.plutoniumStatus().jobs[0].provisioning_id);
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('later-start', ?, 'start', 'waiting', 'Waiting to start', ?, 'test')`).run(servers[0], new Date().toISOString());
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs[0]).toMatchObject({ state: 'failed', detail: 'Restart failed' });
    });
    it('validates API requests without changing the schedule or queue', async () => {
        const { POST } = await import('../../src/routes/api/plutonium/+server.js');
        const post = (body: unknown) => POST({ request: new Request('http://localhost/api/plutonium', {
            method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body)
        }) });
        expect((await post({ action: 'schedule', enabled: true, time: '26:99' })).status).toBe(400);
        expect((await post({ action: 'restart', servers: ['missing'] })).status).toBe(400);
        expect((await post({ action: 'cancel', id: 100 })).status).toBe(409);
        expect((await post({ action: 'schedule', enabled: true, time: '06:00' })).status).toBe(400);
        expect((await post({ action: 'schedule', enabled: true, time: '06:00', timeZone: 'invalid' })).status).toBe(400);
        expect((await post({ action: 'schedule', enabled: true, time: '06:00', timeZone: 'America/New_York' })).status).toBe(200);
        const m = await api();
        expect(m.plutoniumStatus().jobs).toEqual([]);
        expect(m.plutoniumStatus().schedule.enabled).toBe(true);
        expect(m.plutoniumStatus().schedule).toMatchObject({ timeZone: 'America/New_York', nextAt: '2026-09-21T10:00:00.000Z' });
    });
});

describe('Maintenance policies and runtime updates', () => {
    async function outdated() {
        const rcon = await import('../../src/lib/server/integrations/rcon.js');
        vi.mocked(rcon.rconPlutoniumVersion).mockResolvedValue({ revision: 5300, error: null });
        const m = await api(); await m.checkPlutonium(); return m;
    }
    it('preserves the legacy recovery preference without enabling updates', async () => {
        const { db, closeDb } = await import('../../src/lib/server/db/index.js');
        db().prepare("INSERT INTO settings(key,value) VALUES ('watchdog_enabled','0')").run();
        const p = await import('../../src/lib/server/maintenance/policies.js');
        expect(p.maintenancePolicies()).toEqual({ paused: false, health: false, drift: false, updates: false });
        p.setMaintenancePolicy('health', true); p.pauseMaintenance(true); closeDb();
        expect(p.maintenancePolicies()).toEqual({ paused: true, health: true, drift: false, updates: false });
        expect(p.maintenanceAllowed('health')).toBe(false);
    });
    it('only automatically updates verified outdated servers and requires opt-in', async () => {
        const m = await outdated();
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare('UPDATE plutonium_versions SET revision = NULL WHERE server = ?').run(servers[1]);
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs).toEqual([]);
        const p = await import('../../src/lib/server/maintenance/policies.js'); p.setMaintenancePolicy('updates', true);
        await m.maintenanceTick(); await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs).toEqual([expect.objectContaining({ server: servers[0], kind: 'update', origin: 'automatic', target_revision: 5354 })]);
        expect(m.plutoniumStatus().servers.find(s => s.server === servers[1])?.update_status).toBe('unknown');
    });
    it.each(['queued', 'waiting', 'running', 'awaiting-health'])('skips automatic updates during %s provisioning and resumes after completion', async state => {
        const m = await outdated();
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('existing-restart', ?, 'restart', ?, 'Restarting', ?, 'test')`).run(servers[0], state, new Date().toISOString());
        const p = await import('../../src/lib/server/maintenance/policies.js'); p.setMaintenancePolicy('updates', true);
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs).toEqual([expect.objectContaining({ server: servers[1], kind: 'update', origin: 'automatic' })]);
        expect(db().prepare('SELECT COUNT(*) AS count FROM server_deployments WHERE server = ?').get(servers[0])).toEqual({ count: 1 });
        db().prepare("UPDATE server_deployments SET state = 'done' WHERE id = 'existing-restart'").run();
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs).toHaveLength(2);
        expect(m.plutoniumStatus().jobs[0]).toMatchObject({ server: servers[0], kind: 'update', origin: 'automatic' });
    });
    it('skips a busy server for the scheduled occurrence while other servers proceed', async () => {
        const m = await outdated(); m.saveMaintenanceSchedule(true, '06:00', 'UTC');
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('existing-start', ?, 'start', 'waiting', 'Waiting to start', ?, 'test')`).run(servers[0], new Date().toISOString());
        vi.setSystemTime(new Date('2026-09-21T06:00:00Z'));
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs).toEqual([expect.objectContaining({ server: servers[1], kind: 'schedule' })]);
        expect(m.plutoniumStatus().schedule.nextAt).toBe('2026-09-22T06:00:00.000Z');
        db().prepare("UPDATE server_deployments SET state = 'done' WHERE id = 'existing-start'").run();
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs).toHaveLength(1);
        vi.setSystemTime(new Date('2026-09-22T06:00:00Z'));
        await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs).toHaveLength(2);
        expect(m.plutoniumStatus().jobs[0]).toMatchObject({ server: servers[0], kind: 'schedule' });
    });
    it('skips automatic and scheduled requests while a failed operation retains recovery capacity', async () => {
        const m = await outdated(); m.saveMaintenanceSchedule(true, '06:00', 'UTC');
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('failed-restart', ?, 'restart', 'failed', 'Restart failed', ?, 'test')`).run(servers[0], new Date().toISOString());
        db().prepare(`INSERT INTO restart_rollout (server, requested_at, operation_id) VALUES (?, ?, 'failed-restart')`)
            .run(servers[0], new Date().toISOString());
        expect(m.queueMaintenance([servers[0]], 'update', 'automatic')).toBe(0);
        vi.setSystemTime(new Date('2026-09-21T06:00:00Z')); await m.maintenanceTick();
        expect(m.plutoniumStatus().jobs).toEqual([expect.objectContaining({ server: servers[1], kind: 'schedule' })]);
        db().prepare('UPDATE restart_rollout SET healthy_at = ? WHERE server = ?').run(new Date().toISOString(), servers[0]);
        expect(m.queueMaintenance([servers[0]], 'update', 'automatic')).toBe(1);
    });
    it('preserves explicit update requests while another operation owns the server', async () => {
        const m = await outdated();
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare(`INSERT INTO server_deployments (id, server, action, state, stage, started_at, triggered_by)
            VALUES ('existing-start', ?, 'start', 'waiting', 'Waiting to start', ?, 'test')`).run(servers[0], new Date().toISOString());
        expect(m.queueUpdates([servers[0]])).toBe(1);
        expect(m.plutoniumStatus().jobs[0]).toMatchObject({ server: servers[0], kind: 'update', origin: 'manual' });
    });
    it('does not treat stale, pre-restart, or unhealthy observations as current runtime evidence', async () => {
        const m = await outdated();
        const { db } = await import('../../src/lib/server/db/index.js');
        db().prepare('INSERT INTO restart_rollout(server,requested_at,healthy_at) VALUES (?,?,?)').run(servers[0], new Date().toISOString(), new Date().toISOString());
        expect(m.plutoniumStatus().servers[0].update_status).toBe('unknown');
        vi.setSystemTime(Date.now() + 3_600_000);
        expect(() => m.queueUpdates()).toThrow('published revision');
        const { nativeHealth } = await import('../../src/lib/server/backends/native.js');
        const { rconPlutoniumVersion } = await import('../../src/lib/server/integrations/rcon.js');
        vi.mocked(rconPlutoniumVersion).mockClear();
        vi.mocked(nativeHealth).mockResolvedValue({ ok: false, state: 'starting', reason: 'Starting' });
        await m.checkPlutonium();
        expect(rconPlutoniumVersion).not.toHaveBeenCalled();
        expect(m.plutoniumStatus().servers.every(s => s.update_status === 'unknown')).toBe(true);
    });
});