package fileio

import (
	"os"
	"path/filepath"
	"strings"
	"testing"
)

func TestSafePathRejectsUnsafeNames(t *testing.T) {
	for _, name := range []string{"/tmp/x", "a/../x", "a//x", `a\x`, `a\\x`} {
		if _, err := SafePath(t.TempDir(), name); err == nil {
			t.Fatalf("SafePath(%q) accepted unsafe path", name)
		}
	}
}

func TestWriteBytesIsAtomicAndUsesRequestedModes(t *testing.T) {
	root := t.TempDir()
	if err := WriteBytes(root, "nested/value", []byte("value"), 0o700, 0o600); err != nil {
		t.Fatal(err)
	}
	for path, want := range map[string]os.FileMode{filepath.Join(root, "nested"): 0o700, filepath.Join(root, "nested", "value"): 0o600} {
		info, err := os.Stat(path)
		if err != nil {
			t.Fatal(err)
		}
		if info.Mode().Perm() != want {
			t.Fatalf("%s mode=%#o want %#o", path, info.Mode().Perm(), want)
		}
	}
	entries, err := os.ReadDir(filepath.Join(root, "nested"))
	if err != nil {
		t.Fatal(err)
	}
	for _, entry := range entries {
		if strings.Contains(entry.Name(), ".tmp-") {
			t.Fatalf("temporary file remains: %s", entry.Name())
		}
	}
}

func TestWriteBytesRejectsSymlinkedComponents(t *testing.T) {
	root := t.TempDir()
	outside := t.TempDir()
	if err := os.Symlink(outside, filepath.Join(root, "link")); err != nil {
		t.Skipf("symbolic links unavailable: %v", err)
	}

	if err := WriteBytes(root, "link/value", []byte("value"), 0o700, 0o600); err == nil {
		t.Fatal("WriteBytes accepted a symlinked directory")
	}
	if _, err := os.Stat(filepath.Join(outside, "value")); !os.IsNotExist(err) {
		t.Fatalf("write escaped through symlink: %v", err)
	}
}