#!/usr/bin/env bash
# close-out-release.test.sh — Tests for the RTM-flip awk in
# close-out-release.sh, specifically that it locates the correct
# Status column when the RTM has multiple markdown tables with
# different shapes (#72 regression: the prior implementation locked
# `statuscol` on the FIRST header containing "Status", mangling the
# wrong column when a legend table appeared above the main RTM).
#
# Usage:
#   ./scripts/close-out-release.test.sh

set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
HELPER="$SCRIPT_DIR/close-out-release.sh"
[ -x "$HELPER" ] || chmod +x "$HELPER"

PASS=0
FAIL=0

assert_eq() {
  local desc="$1" want="$2" got="$3"
  if [ "$got" = "$want" ]; then
    echo "  PASS: $desc"
    PASS=$((PASS + 1))
  else
    echo "  FAIL: $desc"
    echo "        want: $want"
    echo "        got:  $got"
    FAIL=$((FAIL + 1))
  fi
}

# Build a self-contained fixture under $1 with:
#   - compliance/RTM.md containing the legend table + the main RTM
#   - compliance/pending-releases/RELEASE-TICKET-REQ-050.md (so the script
#     can stage the move + flip; close-out aborts early without it)
#   - a `.git` so the `git mv` step doesn't break
make_fixture() {
  local dir="$1"
  rm -rf "$dir"
  mkdir -p "$dir/compliance/pending-releases" "$dir/compliance/approved-releases"
  cd "$dir"
  git init -q --initial-branch=main
  git config user.email "test@example.com"
  git config user.name "test"

  # Multi-table RTM: legend table first (Status | Description, 2 cols, the
  # shape that mangled WGB on REQ-048/050), then the main RTM (REQ-ID, …,
  # Status, …, 7 cols).
  cat > compliance/RTM.md <<'EOF'
# Requirements Traceability Matrix

## Status Legend

| Status                       | Description                                |
| ---------------------------- | ------------------------------------------ |
| DRAFT                        | Requirement captured, planning underway    |
| TESTED - PENDING SIGN-OFF    | Implementation merged, awaiting close-out  |
| RELEASED                     | Promoted to main + portal-released         |

## Main RTM

| REQ-ID  | Source | Risk   | Evidence                       | Status                    | Owner   | Date       |
| ------- | ------ | ------ | ------------------------------ | ------------------------- | ------- | ---------- |
| REQ-049 | #155   | LOW    | compliance/evidence/REQ-049/   | RELEASED                  | thomp@. | 2026-05-24 |
| REQ-050 | #180   | HIGH   | compliance/evidence/REQ-050/   | TESTED - PENDING SIGN-OFF | thomp@. | 2026-05-28 |
EOF

  # A minimal release ticket — just enough for the script's pre-checks to pass.
  cat > compliance/pending-releases/RELEASE-TICKET-REQ-050.md <<'EOF'
# Release Ticket: REQ-050

**Status:** TESTED - PENDING SIGN-OFF
**DevAudit Release:** REQ-050
EOF

  git add -A
  git commit -q -m "fixture: pre-close-out state"
}

# ── Case 1: multi-table RTM, status-column lock disambiguated by ID column ─
{
  dir="$(mktemp -d)/cli-close-out-fixture-1"
  make_fixture "$dir"
  # Skip the portal probe + the ticket-move so we isolate the RTM-flip path.
  unset DEVAUDIT_API_KEY DEVAUDIT_BASE_URL || true
  # Run the script; tolerate exit on the warnings — the RTM flip should still
  # have happened before any non-fatal warning.
  bash "$HELPER" REQ-050 >/dev/null 2>&1 || true
  # Assert: col-1 stays REQ-050 (NOT overwritten with RELEASED); col-5 flips.
  row=$(grep -m1 -E "^\| REQ-050 " compliance/RTM.md || true)
  col1=$(echo "$row" | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$2); print $2}')
  col5=$(echo "$row" | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$6); print $6}')
  assert_eq "REQ-050 row: col-1 unchanged"   "REQ-050"  "$col1"
  assert_eq "REQ-050 row: col-5 flipped"     "RELEASED" "$col5"
  # And the unrelated REQ-049 row stays untouched (it was already RELEASED
  # before this run; if the awk picked up the wrong table or column, col-1
  # would say RELEASED instead of REQ-049).
  row49=$(grep -m1 -E "^\| REQ-049 " compliance/RTM.md || true)
  col1_49=$(echo "$row49" | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$2); print $2}')
  assert_eq "REQ-049 row: col-1 untouched"   "REQ-049"  "$col1_49"
  rm -rf "$(dirname "$dir")"
}

# ── Case 2: single-table RTM (the simple shape) — behaviour unchanged ──────
{
  dir="$(mktemp -d)/cli-close-out-fixture-2"
  mkdir -p "$dir/compliance/pending-releases" "$dir/compliance/approved-releases"
  cd "$dir"
  git init -q --initial-branch=main >/dev/null
  git config user.email "test@example.com"
  git config user.name "test"
  cat > compliance/RTM.md <<'EOF'
# Requirements Traceability Matrix

| REQ-ID  | Source | Risk   | Evidence                       | Status                    | Owner   | Date       |
| ------- | ------ | ------ | ------------------------------ | ------------------------- | ------- | ---------- |
| REQ-050 | #180   | HIGH   | compliance/evidence/REQ-050/   | TESTED - PENDING SIGN-OFF | thomp@. | 2026-05-28 |
EOF
  cat > compliance/pending-releases/RELEASE-TICKET-REQ-050.md <<'EOF'
# Release Ticket: REQ-050

**Status:** TESTED - PENDING SIGN-OFF
**DevAudit Release:** REQ-050
EOF
  git add -A
  git commit -q -m "fixture: single-table"
  unset DEVAUDIT_API_KEY DEVAUDIT_BASE_URL || true
  bash "$HELPER" REQ-050 >/dev/null 2>&1 || true
  row=$(grep -m1 -E "^\| REQ-050 " compliance/RTM.md || true)
  col1=$(echo "$row" | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$2); print $2}')
  col5=$(echo "$row" | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$6); print $6}')
  assert_eq "single-table: col-1 unchanged" "REQ-050"  "$col1"
  assert_eq "single-table: col-5 flipped"   "RELEASED" "$col5"
  rm -rf "$(dirname "$dir")"
}

# ── Case 3: RTM row with escaped pipes (\|) in Status column ─────────────────
# The Status cell contains literal pipe characters escaped as \| (markdown
# table convention). Without the fix, awk's FS="|" splits on these escaped
# pipes too, creating phantom extra columns and mangling the row on close-out.
{
  dir="$(mktemp -d)/cli-close-out-fixture-3"
  mkdir -p "$dir/compliance/pending-releases" "$dir/compliance/approved-releases"
  cd "$dir"
  git init -q --initial-branch=main >/dev/null
  git config user.email "test@example.com"
  git config user.name "test"
  cat > compliance/RTM.md <<'EOF'
# Requirements Traceability Matrix

| REQ-ID  | Issue | Risk        | Evidence                     | Status                                                                | Approver   | Date       |
| ------- | ----- | ----------- | ---------------------------- | --------------------------------------------------------------------- | ---------- | ---------- |
| REQ-056 | #117  | MEDIUM-HIGH | compliance/evidence/REQ-056/ | IN PROGRESS (regex: /^\s*(stop\|unsubscribe\|opt[-\s]?out)\s*$/i)    | ostendo-io | 2026-06-01 |
| REQ-064 | #121  | MEDIUM      | compliance/evidence/REQ-064/ | IN PROGRESS (enum: open\|in_progress\|awaiting_customer\|resolved\|closed) | dev | 2026-06-02 |
| REQ-075 | #135  | LOW         | compliance/evidence/REQ-075/ | TESTED - PENDING SIGN-OFF (union: 'food'\|'drinks')                  | dev        | 2026-06-03 |
EOF
  cat > compliance/pending-releases/RELEASE-TICKET-REQ-056.md <<'EOF'
# Release Ticket: REQ-056

**Status:** TESTED - PENDING SIGN-OFF
**DevAudit Release:** REQ-056
EOF
  git add -A
  git commit -q -m "fixture: escaped pipes in status"
  unset DEVAUDIT_API_KEY DEVAUDIT_BASE_URL || true
  bash "$HELPER" REQ-056 >/dev/null 2>&1 || true
  # Assert: REQ-056 col-1 stays REQ-056, col-5 flips to RELEASED with note preserved
  # Use sed to neutralize \| before awk field splitting (same technique as the
  # production fix in derive-release-version.sh).
  row=$(grep -m1 -E "^\| REQ-056 " compliance/RTM.md || true)
  col1=$(echo "$row" | sed 's/\\|/  /g' | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$2); print $2}')
  col5=$(echo "$row" | sed 's/\\|/  /g' | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$6); print $6}')
  assert_eq "escaped-pipe: REQ-056 col-1 unchanged" "REQ-056" "$col1"
  # col5 starts with RELEASED (the parenthetical note is preserved by close-out)
  case "$col5" in RELEASED*) assert_eq "escaped-pipe: REQ-056 col-5 flipped" "RELEASED" "RELEASED" ;; *) assert_eq "escaped-pipe: REQ-056 col-5 flipped" "RELEASED" "$col5" ;; esac
  # Assert: the parenthetical note with escaped pipes is preserved
  echo "$row" | grep -qF 'stop\|unsubscribe\|opt' \
    && assert_eq "escaped-pipe: note preserved" "yes" "yes" \
    || assert_eq "escaped-pipe: note preserved" "yes" "no"
  # Assert: REQ-064 row untouched (still has escaped pipes in status)
  row64=$(grep -m1 -E "^\| REQ-064 " compliance/RTM.md || true)
  echo "$row64" | grep -qF 'open\|in_progress' \
    && assert_eq "escaped-pipe: REQ-064 untouched" "yes" "yes" \
    || assert_eq "escaped-pipe: REQ-064 untouched" "yes" "no"
  # Assert: REQ-075 row untouched (text has 'food'\|'drinks' with quotes)
  row75=$(grep -m1 -E "^\| REQ-075 " compliance/RTM.md || true)
  echo "$row75" | grep -qF "food" && echo "$row75" | grep -qF "drinks" \
    && assert_eq "escaped-pipe: REQ-075 untouched" "yes" "yes" \
    || assert_eq "escaped-pipe: REQ-075 untouched" "yes" "no"
  # Assert: row still has exactly 7 columns (9 fields with leading/trailing empty)
  nfields=$(echo "$row" | sed 's/\\|/  /g' | awk -F '|' '{print NF}')
  assert_eq "escaped-pipe: REQ-056 still 7 columns" "9" "$nfields"
  rm -rf "$(dirname "$dir")"
}

# ── Case 4: bundled close-out supersedes predecessor tickets ──────────────────
{
  dir="$(mktemp -d)/cli-close-out-fixture-4"
  mkdir -p "$dir/compliance/pending-releases" \
           "$dir/compliance/approved-releases" \
           "$dir/compliance/superseded-releases"
  cd "$dir"
  git init -q --initial-branch=main >/dev/null
  git config user.email "test@example.com"
  git config user.name "test"
  cat > compliance/RTM.md <<'EOF'
# Requirements Traceability Matrix

| REQ-ID  | Source | Risk | Evidence | Status | Owner | Date |
| ------- | ------ | ---- | -------- | ------ | ----- | ---- |
| REQ-090 | #500   | HIGH | compliance/evidence/REQ-090/ | TESTED - PENDING SIGN-OFF | test | 2026-07-16 |
| REQ-089 | #499   | LOW  | compliance/evidence/REQ-089/ | TESTED - PENDING SIGN-OFF | test | 2026-07-15 |
EOF
  cat > compliance/pending-releases/RELEASE-TICKET-REQ-090.md <<'EOF'
# Release Ticket: REQ-090

**Status:** TESTED - PENDING SIGN-OFF
**DevAudit Release:** REQ-090
EOF
  cat > compliance/pending-releases/RELEASE-TICKET-REQ-089.md <<'EOF'
# Release Ticket: REQ-089

**Status:** TESTED - PENDING SIGN-OFF
**DevAudit Release:** REQ-089
EOF
  cat > compliance/pending-releases/RELEASE-TICKET-v2026.07.10.md <<'EOF'
# Release Ticket: v2026.07.10

**Status:** TESTED - PENDING SIGN-OFF
**DevAudit Release:** v2026.07.10
EOF
  cat > compliance/pending-releases/BUNDLED-CHANGES-REQ-090.json <<'EOF'
{
  "schemaVersion": 1,
  "approvalRelease": { "version": "REQ-090" },
  "coreRelease": { "version": "REQ-090" },
  "members": [
    {
      "version": "REQ-089",
      "role": "predecessor",
      "relationship": "superseded",
      "reason": "Explicit predecessor release absorbed into approval envelope REQ-090."
    },
    {
      "version": "v2026.07.10",
      "role": "housekeeping",
      "relationship": "absorbed",
      "reason": "Explicit housekeeping release ticket carried forward into approval envelope REQ-090."
    }
  ],
  "nonReleaseWorkItems": [],
  "manifestHash": "sha256:test"
}
EOF
  git add -A
  git commit -q -m "fixture: bundled close-out"
  unset DEVAUDIT_API_KEY DEVAUDIT_BASE_URL || true
  bash "$HELPER" REQ-090 >/dev/null 2>&1 || true

  [ -f compliance/approved-releases/RELEASE-TICKET-REQ-090.md ] \
    && assert_eq "current release moved to approved-releases" "yes" "yes" \
    || assert_eq "current release moved to approved-releases" "yes" "no"
  [ -f compliance/superseded-releases/RELEASE-TICKET-REQ-089.md ] \
    && assert_eq "predecessor moved to superseded-releases" "yes" "yes" \
    || assert_eq "predecessor moved to superseded-releases" "yes" "no"
  [ -f compliance/superseded-releases/RELEASE-TICKET-v2026.07.10.md ] \
    && assert_eq "housekeeping predecessor moved to superseded-releases" "yes" "yes" \
    || assert_eq "housekeeping predecessor moved to superseded-releases" "yes" "no"

  grep -qF '**Status:** SUPERSEDED' compliance/superseded-releases/RELEASE-TICKET-REQ-089.md \
    && assert_eq "predecessor status flipped" "yes" "yes" \
    || assert_eq "predecessor status flipped" "yes" "no"
  grep -qF '**Superseded by:** REQ-090' compliance/superseded-releases/RELEASE-TICKET-REQ-089.md \
    && assert_eq "predecessor successor recorded" "yes" "yes" \
    || assert_eq "predecessor successor recorded" "yes" "no"
  grep -qF 'Explicit predecessor release absorbed into approval envelope REQ-090.' compliance/superseded-releases/RELEASE-TICKET-REQ-089.md \
    && assert_eq "predecessor reason recorded" "yes" "yes" \
    || assert_eq "predecessor reason recorded" "yes" "no"

  row=$(grep -m1 -E "^\| REQ-089 " compliance/RTM.md || true)
  col5=$(echo "$row" | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$6); print $6}')
  assert_eq "predecessor RTM row flipped" "SUPERSEDED" "$col5"
  rm -rf "$(dirname "$dir")"
}

# ── Case 5: reused REQ ID — ticket lives in superseded-releases/ with an
#    addendum for a distinct, later, already-shipped release (devaudit-
#    installer#783) ──────────────────────────────────────────────────────────
{
  dir="$(mktemp -d)/cli-close-out-fixture-5"
  mkdir -p "$dir/compliance/pending-releases" "$dir/compliance/approved-releases" "$dir/compliance/superseded-releases"
  cd "$dir"
  git init -q --initial-branch=main >/dev/null
  git config user.email "test@example.com"
  git config user.name "test"
  cat > compliance/RTM.md <<'EOF'
# Requirements Traceability Matrix

| REQ-ID  | Source | Risk   | Evidence                       | Status                   | Owner   | Date       |
| ------- | ------ | ------ | ------------------------------- | ------------------------ | ------- | ---------- |
| REQ-030 | #100   | MEDIUM | compliance/evidence/REQ-030/    | SUPERSEDED (by REQ-031)  | thomp@. | 2026-04-25 |
EOF
  cat > compliance/superseded-releases/RELEASE-TICKET-REQ-030.md <<'EOF'
# Release Ticket: REQ-030

**Status:** SUPERSEDED
**Superseded by:** REQ-031
**DevAudit Release:** REQ-030

> **2026-09-07 addendum:** an unrelated E2E selector-collision fix touching
> this REQ's spec file was authored and released separately.
- **Absorbed predecessor releases:** none
EOF
  git add -A
  git commit -q -m "fixture: reused REQ-030 with superseded original scope"
  unset DEVAUDIT_API_KEY DEVAUDIT_BASE_URL || true

  bash "$HELPER" REQ-030 --release-pr 710 >/dev/null 2>&1 || true

  # Original scope's Status/location must be untouched.
  [ -f compliance/superseded-releases/RELEASE-TICKET-REQ-030.md ] \
    && assert_eq "ticket stays in superseded-releases/" "yes" "yes" \
    || assert_eq "ticket stays in superseded-releases/" "yes" "no"
  grep -qF '**Status:** SUPERSEDED' compliance/superseded-releases/RELEASE-TICKET-REQ-030.md \
    && assert_eq "original top-level Status untouched" "yes" "yes" \
    || assert_eq "original top-level Status untouched" "yes" "no"
  [ -f compliance/approved-releases/RELEASE-TICKET-REQ-030.md ] \
    && assert_eq "ticket NOT duplicated into approved-releases/" "no" "yes" \
    || assert_eq "ticket NOT duplicated into approved-releases/" "no" "no"

  # Addendum status recorded distinctly.
  grep -qF '**Addendum release status:** RELEASED' compliance/superseded-releases/RELEASE-TICKET-REQ-030.md \
    && assert_eq "addendum release status recorded" "yes" "yes" \
    || assert_eq "addendum release status recorded" "yes" "no"
  grep -qF '**Addendum release PR:** #710' compliance/superseded-releases/RELEASE-TICKET-REQ-030.md \
    && assert_eq "addendum release PR recorded" "yes" "yes" \
    || assert_eq "addendum release PR recorded" "yes" "no"

  # RTM row: original SUPERSEDED status preserved, addendum note appended.
  row=$(grep -m1 -E "^\| REQ-030 " compliance/RTM.md || true)
  col5=$(echo "$row" | awk -F '|' '{gsub(/^[[:space:]]+|[[:space:]]+$/,"",$6); print $6}')
  case "$col5" in
    SUPERSEDED*) assert_eq "RTM row keeps SUPERSEDED status" "SUPERSEDED" "SUPERSEDED" ;;
    *) assert_eq "RTM row keeps SUPERSEDED status" "SUPERSEDED" "$col5" ;;
  esac
  echo "$col5" | grep -qF 'Addendum: RELEASED' \
    && assert_eq "RTM row carries addendum note" "yes" "yes" \
    || assert_eq "RTM row carries addendum note" "yes" "no"

  # Idempotency: running again is a no-op, no duplicate addendum block.
  bash "$HELPER" REQ-030 --release-pr 710 >/dev/null 2>&1 || true
  count=$(grep -cF '**Addendum release status:** RELEASED' compliance/superseded-releases/RELEASE-TICKET-REQ-030.md || true)
  assert_eq "addendum close-out is idempotent (no duplicate line)" "1" "$count"
  rm -rf "$(dirname "$dir")"
}

echo
echo "Result: $PASS passed, $FAIL failed"
[ "$FAIL" = "0" ]