import { describe, it, expect, vi, beforeEach } from 'vitest';
import Database from 'better-sqlite3';
import { drizzle } from 'drizzle-orm/better-sqlite3';
import * as schema from '../db/schema.js';
import { setWorkerId } from './snowflake.js';
import fs from 'node:fs';
import path from 'node:path';
import { fileURLToPath } from 'node:url';

setWorkerId(1);

const __dirname = path.dirname(fileURLToPath(import.meta.url));

type TestDb = ReturnType<typeof drizzle<typeof schema>>;
let sqlite: Database.Database;
let testDb: TestDb;

vi.mock('../db/index.js', () => ({
  getDb: () => testDb,
  getRawDb: () => sqlite,
  schema,
}));

import { inviteStatus, generateInviteToken, createInvite, getInviteByToken, listInvites, listRedemptions, InviteValidationError } from './inviteService.js';
import { patchInvite, revokeInvite, InviteStateConflictError, InviteNotFoundError } from './inviteService.js';
import { reinstateInvite } from './inviteService.js';
import { redeemInvite, deleteInvite, InviteUnavailableError } from './inviteService.js';
import { eq } from 'drizzle-orm';

function applyMigrations(db: Database.Database): void {
  const migrationsDir = path.resolve(__dirname, '../../drizzle');
  const files = fs.readdirSync(migrationsDir).filter(f => f.endsWith('.sql')).sort();
  for (const f of files) {
    const sqlText = fs.readFileSync(path.join(migrationsDir, f), 'utf8');
    const statements = sqlText.split(/-->\s*statement-breakpoint/);
    for (const stmt of statements) {
      const clean = stmt.trim();
      if (clean) db.exec(clean);
    }
  }
}

function seedAdmin(): string {
  const adminId = 'admin-user-1';
  testDb.insert(schema.users).values({
    id: adminId,
    username: 'admin',
    passwordHash: 'x',
    isAdmin: 1,
    createdAt: Date.now(),
  }).run();
  return adminId;
}

describe('inviteStatus', () => {
  const base = { revokedAt: null, expiresAt: null, maxUses: null, usedCount: 0 };

  it('returns active for a fresh invite', () => {
    expect(inviteStatus(base)).toBe('active');
  });

  it('returns revoked when revokedAt is set', () => {
    expect(inviteStatus({ ...base, revokedAt: 100 })).toBe('revoked');
  });

  it('returns expired when expiresAt is past', () => {
    expect(inviteStatus({ ...base, expiresAt: Date.now() - 1000 })).toBe('expired');
  });

  it('returns active when expiresAt is future', () => {
    expect(inviteStatus({ ...base, expiresAt: Date.now() + 100_000 })).toBe('active');
  });

  it('returns exhausted when usedCount >= maxUses', () => {
    expect(inviteStatus({ ...base, maxUses: 5, usedCount: 5 })).toBe('exhausted');
    expect(inviteStatus({ ...base, maxUses: 5, usedCount: 6 })).toBe('exhausted');
  });

  it('returns active when usedCount < maxUses', () => {
    expect(inviteStatus({ ...base, maxUses: 5, usedCount: 4 })).toBe('active');
  });

  it('revoked beats expired', () => {
    expect(inviteStatus({ ...base, revokedAt: 100, expiresAt: Date.now() - 1000 })).toBe('revoked');
  });

  it('expired beats exhausted', () => {
    expect(inviteStatus({ ...base, expiresAt: Date.now() - 1000, maxUses: 5, usedCount: 5 })).toBe('expired');
  });

  it('treats maxUses null as unlimited', () => {
    expect(inviteStatus({ ...base, maxUses: null, usedCount: 1_000_000 })).toBe('active');
  });
});

describe('generateInviteToken', () => {
  it('returns 22-char base64url string', () => {
    const t = generateInviteToken();
    expect(t).toMatch(/^[A-Za-z0-9_-]{22}$/);
  });

  it('returns different tokens on subsequent calls', () => {
    const a = generateInviteToken();
    const b = generateInviteToken();
    expect(a).not.toBe(b);
  });
});

describe('createInvite', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('creates an invite with required fields', () => {
    const adminId = seedAdmin();
    const invite = createInvite({ name: 'Friends batch 1', maxUses: 10, expiresAt: Date.now() + 86_400_000 }, adminId);
    expect(invite.name).toBe('Friends batch 1');
    expect(invite.maxUses).toBe(10);
    expect(invite.usedCount).toBe(0);
    expect(invite.revokedAt).toBeNull();
    expect(invite.token).toMatch(/^[A-Za-z0-9_-]{22}$/);
    expect(invite.status).toBe('active');
    expect(invite.createdBy).toBe(adminId);
    expect(invite.createdByUsername).toBe('admin');
  });

  it('accepts null maxUses (unlimited)', () => {
    const adminId = seedAdmin();
    const invite = createInvite({ name: 'unlimited', maxUses: null, expiresAt: null }, adminId);
    expect(invite.maxUses).toBeNull();
    expect(invite.expiresAt).toBeNull();
    expect(invite.status).toBe('active');
  });

  it('rejects empty name', () => {
    const adminId = seedAdmin();
    expect(() => createInvite({ name: '', maxUses: null, expiresAt: null }, adminId)).toThrow(InviteValidationError);
  });

  it('rejects name longer than 64 chars', () => {
    const adminId = seedAdmin();
    expect(() => createInvite({ name: 'x'.repeat(65), maxUses: null, expiresAt: null }, adminId)).toThrow(InviteValidationError);
  });

  it('rejects non-positive maxUses', () => {
    const adminId = seedAdmin();
    expect(() => createInvite({ name: 'a', maxUses: 0, expiresAt: null }, adminId)).toThrow(InviteValidationError);
    expect(() => createInvite({ name: 'a', maxUses: -1, expiresAt: null }, adminId)).toThrow(InviteValidationError);
  });

  it('rejects past expiresAt', () => {
    const adminId = seedAdmin();
    expect(() => createInvite({ name: 'a', maxUses: null, expiresAt: Date.now() - 1000 }, adminId)).toThrow(InviteValidationError);
  });
});

describe('getInviteByToken', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('returns the invite when token matches', () => {
    const adminId = seedAdmin();
    const created = createInvite({ name: 'a', maxUses: null, expiresAt: null }, adminId);
    const found = getInviteByToken(created.token);
    expect(found?.id).toBe(created.id);
  });

  it('returns null when token has invalid format', () => {
    expect(getInviteByToken('tooshort')).toBeNull();
    expect(getInviteByToken('nonexistent_token_aaaaaa')).toBeNull(); // 24 chars
  });

  it('returns null when token is well-formed but not in DB', () => {
    expect(getInviteByToken('aaaaaaaaaaaaaaaaaaaaaa')).toBeNull(); // 22 chars, valid format
  });
});

describe('listInvites', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('returns active invites only with status=active', () => {
    const adminId = seedAdmin();
    const a = createInvite({ name: 'active1', maxUses: null, expiresAt: null }, adminId);
    const b = createInvite({ name: 'active2', maxUses: 1, expiresAt: null }, adminId);
    // Manually exhaust b
    testDb.update(schema.inviteLinks).set({ usedCount: 1 }).where(eq(schema.inviteLinks.id, b.id)).run();

    const list = listInvites('active');
    expect(list.map(i => i.id)).toEqual([a.id]);
  });

  it('returns archived invites only with status=archived', () => {
    const adminId = seedAdmin();
    createInvite({ name: 'active', maxUses: null, expiresAt: null }, adminId);
    const exhausted = createInvite({ name: 'exhausted', maxUses: 1, expiresAt: null }, adminId);
    testDb.update(schema.inviteLinks).set({ usedCount: 1 }).where(eq(schema.inviteLinks.id, exhausted.id)).run();
    const revoked = createInvite({ name: 'revoked', maxUses: null, expiresAt: null }, adminId);
    testDb.update(schema.inviteLinks).set({ revokedAt: Date.now() }).where(eq(schema.inviteLinks.id, revoked.id)).run();

    const list = listInvites('archived');
    expect(list.map(i => i.id).sort()).toEqual([exhausted.id, revoked.id].sort());
    expect(list.find(i => i.id === exhausted.id)?.status).toBe('exhausted');
    expect(list.find(i => i.id === revoked.id)?.status).toBe('revoked');
  });

  it('JOIN surfaces createdByUsername; tombstoned creator -> "Deleted User"', () => {
    const adminId = seedAdmin();
    createInvite({ name: 'i1', maxUses: null, expiresAt: null }, adminId);
    // Tombstone admin
    testDb.update(schema.users).set({ isDeleted: 1, username: '!deleted:' + adminId }).where(eq(schema.users.id, adminId)).run();

    const list = listInvites('active');
    expect(list[0]?.createdByUsername).toBe('Deleted User');
  });

  it('sorts by createdAt DESC', async () => {
    const adminId = seedAdmin();
    const a = createInvite({ name: 'first', maxUses: null, expiresAt: null }, adminId);
    await new Promise(r => setTimeout(r, 5));
    const b = createInvite({ name: 'second', maxUses: null, expiresAt: null }, adminId);
    const list = listInvites('active');
    expect(list.map(i => i.id)).toEqual([b.id, a.id]);
  });
});

describe('listRedemptions', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('returns redemption rows with currentUsername joined', () => {
    const adminId = seedAdmin();
    const invite = createInvite({ name: 'i', maxUses: null, expiresAt: null }, adminId);
    const userId = 'user-1';
    testDb.insert(schema.users).values({ id: userId, username: 'alice', passwordHash: 'x', createdAt: Date.now() }).run();
    testDb.insert(schema.inviteRedemptions).values({
      id: 'red-1',
      inviteId: invite.id,
      userId,
      registrantUsername: 'alice',
      redeemedAt: Date.now(),
    }).run();

    const list = listRedemptions(invite.id);
    expect(list).toHaveLength(1);
    expect(list[0]?.registrantUsername).toBe('alice');
    expect(list[0]?.currentUsername).toBe('alice');
    expect(list[0]?.isDeleted).toBe(false);
  });

  it('marks tombstoned users with currentUsername="Deleted User" and isDeleted=true', () => {
    const adminId = seedAdmin();
    const invite = createInvite({ name: 'i', maxUses: null, expiresAt: null }, adminId);
    const userId = 'user-2';
    testDb.insert(schema.users).values({ id: userId, username: 'bob', passwordHash: 'x', isDeleted: 1, createdAt: Date.now() }).run();
    testDb.insert(schema.inviteRedemptions).values({
      id: 'red-2',
      inviteId: invite.id,
      userId,
      registrantUsername: 'bob',
      redeemedAt: Date.now(),
    }).run();

    const list = listRedemptions(invite.id);
    expect(list[0]?.currentUsername).toBe('Deleted User');
    expect(list[0]?.isDeleted).toBe(true);
  });

  it('handles null userId (hard-deleted user)', () => {
    const adminId = seedAdmin();
    const invite = createInvite({ name: 'i', maxUses: null, expiresAt: null }, adminId);
    testDb.insert(schema.inviteRedemptions).values({
      id: 'red-3',
      inviteId: invite.id,
      userId: null,
      registrantUsername: 'ghost',
      redeemedAt: Date.now(),
    }).run();

    const list = listRedemptions(invite.id);
    expect(list[0]?.userId).toBeNull();
    expect(list[0]?.currentUsername).toBeNull();
    expect(list[0]?.isDeleted).toBe(false);
  });
});

describe('patchInvite', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('updates name', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'old', maxUses: null, expiresAt: null }, adminId);
    const updated = patchInvite(inv.id, { name: 'new' });
    expect(updated.name).toBe('new');
  });

  it('updates maxUses', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 5, expiresAt: null }, adminId);
    const updated = patchInvite(inv.id, { maxUses: 20 });
    expect(updated.maxUses).toBe(20);
  });

  it('rejects maxUses below current usedCount', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 10, expiresAt: null }, adminId);
    testDb.update(schema.inviteLinks).set({ usedCount: 7 }).where(eq(schema.inviteLinks.id, inv.id)).run();
    expect(() => patchInvite(inv.id, { maxUses: 5 })).toThrow(InviteValidationError);
  });

  it('throws InviteNotFoundError when id not found', () => {
    expect(() => patchInvite('nonexistent', { name: 'x' })).toThrow(InviteNotFoundError);
  });

  it('throws InviteStateConflictError when invite is revoked', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: null, expiresAt: null }, adminId);
    testDb.update(schema.inviteLinks).set({ revokedAt: Date.now() }).where(eq(schema.inviteLinks.id, inv.id)).run();
    expect(() => patchInvite(inv.id, { name: 'x' })).toThrow(InviteStateConflictError);
  });

  it('allows expiresAt to be moved to past (effective soft-shut)', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: null, expiresAt: Date.now() + 100_000 }, adminId);
    const past = Date.now() - 1000;
    const updated = patchInvite(inv.id, { expiresAt: past });
    expect(updated.expiresAt).toBe(past);
    expect(updated.status).toBe('expired');
  });
});

describe('revokeInvite', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('sets revokedAt and returns revoked summary', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: null, expiresAt: null }, adminId);
    const revoked = revokeInvite(inv.id);
    expect(revoked.status).toBe('revoked');
    expect(revoked.revokedAt).toBeGreaterThan(0);
  });

  it('throws InviteStateConflictError on already-revoked', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: null, expiresAt: null }, adminId);
    revokeInvite(inv.id);
    expect(() => revokeInvite(inv.id)).toThrow(InviteStateConflictError);
  });

  it('throws InviteNotFoundError on missing id', () => {
    expect(() => revokeInvite('nonexistent')).toThrow(InviteNotFoundError);
  });
});

describe('reinstateInvite', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('Path A — was revoked: rotates token, clears revokedAt, applies bumps', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 5, expiresAt: null }, adminId);
    const originalToken = inv.token;
    revokeInvite(inv.id);

    const result = reinstateInvite(inv.id, { maxUses: 10 });
    expect(result.tokenRotated).toBe(true);
    expect(result.invite.token).not.toBe(originalToken);
    expect(result.invite.token).toMatch(/^[A-Za-z0-9_-]{22}$/);
    expect(result.invite.revokedAt).toBeNull();
    expect(result.invite.maxUses).toBe(10);
    expect(result.invite.status).toBe('active');
  });

  it('Path B — exhausted: keeps same token, applies maxUses bump', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 1, expiresAt: null }, adminId);
    // Exhaust it
    testDb.update(schema.inviteLinks).set({ usedCount: 1 }).where(eq(schema.inviteLinks.id, inv.id)).run();

    const result = reinstateInvite(inv.id, { maxUses: 5 });
    expect(result.tokenRotated).toBe(false);
    expect(result.invite.token).toBe(inv.token);
    expect(result.invite.maxUses).toBe(5);
    expect(result.invite.status).toBe('active');
  });

  it('Path B — expired: keeps same token, bumps expiresAt', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: null, expiresAt: Date.now() + 100_000 }, adminId);
    // Move to past to expire
    testDb.update(schema.inviteLinks).set({ expiresAt: Date.now() - 1000 }).where(eq(schema.inviteLinks.id, inv.id)).run();

    const future = Date.now() + 86_400_000;
    const result = reinstateInvite(inv.id, { expiresAt: future });
    expect(result.tokenRotated).toBe(false);
    expect(result.invite.token).toBe(inv.token);
    expect(result.invite.expiresAt).toBe(future);
    expect(result.invite.status).toBe('active');
  });

  it('Path C — already-active: throws InviteStateConflictError', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: null, expiresAt: null }, adminId);
    expect(() => reinstateInvite(inv.id, {})).toThrow(InviteStateConflictError);
  });

  it('throws InviteValidationError when result is still non-active (caller did not bump enough)', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 1, expiresAt: null }, adminId);
    // Exhaust it
    testDb.update(schema.inviteLinks).set({ usedCount: 1 }).where(eq(schema.inviteLinks.id, inv.id)).run();

    // Caller did not bump maxUses → still exhausted → must throw
    expect(() => reinstateInvite(inv.id, {})).toThrow(InviteValidationError);

    // Verify the txn rolled back: row still has maxUses=1 (no partial update)
    const row = testDb.select().from(schema.inviteLinks).where(eq(schema.inviteLinks.id, inv.id)).get();
    expect(row?.maxUses).toBe(1);
  });

  it('Path A — rolls back token rotation when caller did not bump enough', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 1, expiresAt: null }, adminId);
    const originalToken = inv.token;
    // Exhaust then revoke
    testDb.update(schema.inviteLinks).set({ usedCount: 1 }).where(eq(schema.inviteLinks.id, inv.id)).run();
    revokeInvite(inv.id);

    // Try to reinstate without bumping maxUses — would-be Path A but post-state check rejects
    expect(() => reinstateInvite(inv.id, {})).toThrow(InviteValidationError);

    // Verify rollback: original token preserved, revokedAt still set, usedCount still at limit
    const row = testDb.select().from(schema.inviteLinks).where(eq(schema.inviteLinks.id, inv.id)).get();
    expect(row?.token).toBe(originalToken);
    expect(row?.revokedAt).not.toBeNull();
    expect(row?.usedCount).toBe(1);
  });
});

describe('redeemInvite', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('happy path: increments usedCount, writes redemption row, calls insertUser callback', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 5, expiresAt: null }, adminId);
    const newUserId = 'new-user-1';
    const newUsername = 'alice';

    let insertCalled = false;
    const result = redeemInvite(inv.token, () => {
      insertCalled = true;
      // Caller's INSERT — uses the outer testDb handle (mocked getDb), which
      // is correctly serialized into the same logical txn by better-sqlite3.
      testDb.insert(schema.users).values({
        id: newUserId,
        username: newUsername,
        passwordHash: 'x',
        createdAt: Date.now(),
      }).run();
      return { id: newUserId, username: newUsername };
    });

    expect(insertCalled).toBe(true);
    expect(result.id).toBe(newUserId);
    expect(result.username).toBe(newUsername);

    // user row exists
    const user = testDb.select().from(schema.users).where(eq(schema.users.id, newUserId)).get();
    expect(user?.username).toBe(newUsername);

    // usedCount incremented
    const row = testDb.select().from(schema.inviteLinks).where(eq(schema.inviteLinks.id, inv.id)).get();
    expect(row?.usedCount).toBe(1);

    // redemption row written
    const redemptions = testDb.select().from(schema.inviteRedemptions).where(eq(schema.inviteRedemptions.inviteId, inv.id)).all();
    expect(redemptions).toHaveLength(1);
    expect(redemptions[0]?.userId).toBe(newUserId);
    expect(redemptions[0]?.registrantUsername).toBe(newUsername);
  });

  it('throws InviteUnavailableError when status is not active under txn (exhausted)', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 1, expiresAt: null }, adminId);
    // Simulate "another concurrent registration consumed the last slot just before this call"
    testDb.update(schema.inviteLinks).set({ usedCount: 1 }).where(eq(schema.inviteLinks.id, inv.id)).run();

    let insertCalled = false;
    expect(() => redeemInvite(inv.token, () => {
      insertCalled = true;
      return { id: 'x', username: 'x' };
    })).toThrow(InviteUnavailableError);

    expect(insertCalled).toBe(false);
    // No redemption row
    const redemptions = testDb.select().from(schema.inviteRedemptions).where(eq(schema.inviteRedemptions.inviteId, inv.id)).all();
    expect(redemptions).toHaveLength(0);
  });

  it('does not bump usedCount or write a redemption when insertUser throws synchronously', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 5, expiresAt: null }, adminId);

    expect(() => redeemInvite(inv.token, () => {
      throw new Error('username taken');
    })).toThrow('username taken');

    // usedCount unchanged
    const row = testDb.select().from(schema.inviteLinks).where(eq(schema.inviteLinks.id, inv.id)).get();
    expect(row?.usedCount).toBe(0);

    // No redemption row
    const redemptions = testDb.select().from(schema.inviteRedemptions).where(eq(schema.inviteRedemptions.inviteId, inv.id)).all();
    expect(redemptions).toHaveLength(0);
  });

  it('rolls back insertUser writes when a later step throws (true SQLite ROLLBACK)', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: 5, expiresAt: null }, adminId);
    const newUserId = 'rollback-user-1';

    // The callback writes a real users row, then throws AFTER the write.
    // If the txn truly rolls back, the users row must not exist after the call.
    expect(() => redeemInvite(inv.token, () => {
      testDb.insert(schema.users).values({
        id: newUserId,
        username: 'will-be-rolled-back',
        passwordHash: 'x',
        createdAt: Date.now(),
      }).run();
      throw new Error('post-insert failure');
    })).toThrow('post-insert failure');

    // Proves SQLite ROLLBACK reverted the user insert AND the would-be usedCount bump
    const u = testDb.select().from(schema.users).where(eq(schema.users.id, newUserId)).get();
    expect(u).toBeUndefined();

    const after = testDb.select().from(schema.inviteLinks).where(eq(schema.inviteLinks.id, inv.id)).get();
    expect(after?.usedCount).toBe(0);

    const redemptions = testDb.select().from(schema.inviteRedemptions).where(eq(schema.inviteRedemptions.inviteId, inv.id)).all();
    expect(redemptions).toHaveLength(0);
  });

  it('throws InviteUnavailableError when token not found', () => {
    expect(() => redeemInvite('aaaaaaaaaaaaaaaaaaaaaa', () => ({ id: 'x', username: 'x' }))).toThrow(InviteUnavailableError);
  });

  it('throws InviteUnavailableError on revoked invite', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: null, expiresAt: null }, adminId);
    revokeInvite(inv.id);

    let insertCalled = false;
    expect(() => redeemInvite(inv.token, () => {
      insertCalled = true;
      return { id: 'x', username: 'x' };
    })).toThrow(InviteUnavailableError);

    expect(insertCalled).toBe(false);
  });
});

describe('lastRedeemedAt', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('listInvites returns null lastRedeemedAt when invite has zero redemptions', () => {
    const adminId = seedAdmin();
    createInvite({ name: 'no-redeems', maxUses: null, expiresAt: null }, adminId);
    const list = listInvites('active');
    expect(list).toHaveLength(1);
    expect(list[0]?.lastRedeemedAt).toBeNull();
  });

  it('listInvites returns the max redeemed_at when invite has multiple redemptions', () => {
    const adminId = seedAdmin();
    const invite = createInvite({ name: 'multi', maxUses: null, expiresAt: null }, adminId);

    const t1 = Date.now() - 2000;
    const t2 = Date.now() - 1000;
    const t3 = Date.now();
    testDb.insert(schema.users).values({ id: 'u1', username: 'alice', passwordHash: 'x', createdAt: t1 }).run();
    testDb.insert(schema.users).values({ id: 'u2', username: 'bob', passwordHash: 'x', createdAt: t2 }).run();
    testDb.insert(schema.users).values({ id: 'u3', username: 'carol', passwordHash: 'x', createdAt: t3 }).run();
    testDb.insert(schema.inviteRedemptions).values({ id: 'r1', inviteId: invite.id, userId: 'u1', registrantUsername: 'alice', redeemedAt: t1 }).run();
    testDb.insert(schema.inviteRedemptions).values({ id: 'r2', inviteId: invite.id, userId: 'u2', registrantUsername: 'bob', redeemedAt: t3 }).run();
    testDb.insert(schema.inviteRedemptions).values({ id: 'r3', inviteId: invite.id, userId: 'u3', registrantUsername: 'carol', redeemedAt: t2 }).run();

    const list = listInvites('active');
    expect(list).toHaveLength(1);
    expect(list[0]?.lastRedeemedAt).toBe(t3);
  });

  it('listInvites correctly attributes lastRedeemedAt to the right invite when multiple invites exist', () => {
    const adminId = seedAdmin();
    const invA = createInvite({ name: 'A', maxUses: null, expiresAt: null }, adminId);
    const invB = createInvite({ name: 'B', maxUses: null, expiresAt: null }, adminId);

    const tA = Date.now() - 5000;
    const tB = Date.now() - 1000;
    testDb.insert(schema.users).values({ id: 'uA', username: 'alice', passwordHash: 'x', createdAt: tA }).run();
    testDb.insert(schema.users).values({ id: 'uB', username: 'bob', passwordHash: 'x', createdAt: tB }).run();
    testDb.insert(schema.inviteRedemptions).values({ id: 'rA', inviteId: invA.id, userId: 'uA', registrantUsername: 'alice', redeemedAt: tA }).run();
    testDb.insert(schema.inviteRedemptions).values({ id: 'rB', inviteId: invB.id, userId: 'uB', registrantUsername: 'bob', redeemedAt: tB }).run();

    const list = listInvites('active');
    const summaryA = list.find(i => i.id === invA.id);
    const summaryB = list.find(i => i.id === invB.id);
    expect(summaryA?.lastRedeemedAt).toBe(tA);
    expect(summaryB?.lastRedeemedAt).toBe(tB);
  });

  it('getInviteByToken returns the raw row (not InviteLinkSummary) — lastRedeemedAt is not on the raw row type', () => {
    // getInviteByToken intentionally returns the raw $inferSelect row for use
    // by the registration flow, not an InviteLinkSummary. Confirm the raw row
    // exists and can be fetched — the absence of lastRedeemedAt on the type is
    // enforced by TypeScript at compile time.
    const adminId = seedAdmin();
    const created = createInvite({ name: 'a', maxUses: null, expiresAt: null }, adminId);
    const rawRow = getInviteByToken(created.token);
    expect(rawRow).not.toBeNull();
    expect(rawRow?.id).toBe(created.id);
  });

  it('after redeemInvite, a subsequent listInvites reflects the updated lastRedeemedAt', () => {
    const adminId = seedAdmin();
    const invite = createInvite({ name: 'redeem-test', maxUses: 5, expiresAt: null }, adminId);

    // Confirm null before any redemption
    const before = listInvites('active');
    expect(before.find(i => i.id === invite.id)?.lastRedeemedAt).toBeNull();

    const newUserId = 'redeemer-2';
    const tBefore = Date.now();
    redeemInvite(invite.token, () => {
      testDb.insert(schema.users).values({
        id: newUserId,
        username: 'redeemer2',
        passwordHash: 'x',
        createdAt: Date.now(),
      }).run();
      return { id: newUserId, username: 'redeemer2' };
    });
    const tAfter = Date.now();

    const after = listInvites('active');
    const summary = after.find(i => i.id === invite.id);
    expect(summary?.lastRedeemedAt).not.toBeNull();
    expect(summary?.lastRedeemedAt).toBeGreaterThanOrEqual(tBefore);
    expect(summary?.lastRedeemedAt).toBeLessThanOrEqual(tAfter);
  });
});

describe('deleteInvite', () => {
  beforeEach(() => {
    sqlite = new Database(':memory:');
    sqlite.pragma('foreign_keys = ON');
    applyMigrations(sqlite);
    testDb = drizzle(sqlite, { schema });
  });

  it('deletes the invite and CASCADE-removes redemption rows', () => {
    const adminId = seedAdmin();
    const inv = createInvite({ name: 'a', maxUses: null, expiresAt: null }, adminId);

    // Seed a redemption referencing this invite
    const userId = 'redeemer-1';
    testDb.insert(schema.users).values({
      id: userId, username: 'redeemer', passwordHash: 'x', createdAt: Date.now(),
    }).run();
    testDb.insert(schema.inviteRedemptions).values({
      id: 'red-del-1',
      inviteId: inv.id,
      userId,
      registrantUsername: 'redeemer',
      redeemedAt: Date.now(),
    }).run();

    deleteInvite(inv.id);

    // Invite row gone
    const inviteRow = testDb.select().from(schema.inviteLinks).where(eq(schema.inviteLinks.id, inv.id)).get();
    expect(inviteRow).toBeUndefined();

    // Redemption row CASCADE-deleted
    const redemptions = testDb.select().from(schema.inviteRedemptions).where(eq(schema.inviteRedemptions.inviteId, inv.id)).all();
    expect(redemptions).toHaveLength(0);
  });

  it('throws InviteNotFoundError when id not found', () => {
    expect(() => deleteInvite('nonexistent')).toThrow(InviteNotFoundError);
  });
});