import { describe, expect, it } from "vitest";
import { atomHtmlToText, atomTextToHtml } from "./atom-html.js";

describe("atom ↔ HTML bridge (T-148 web)", () => {
  it("escapes untrusted text and renders atoms as spans", () => {
    const html = atomTextToHtml('a <img src=x onerror=alert(1)> & @status(done) b');
    expect(html).toContain("a &lt;img src=x onerror=alert(1)&gt; &amp; ");
    // no executable markup from the input survives
    expect(html).not.toContain("<img");
    expect(html).toContain('<span class="factory-atom" data-atom-kind="status" data-atom-value="done">done</span>');
  });

  it("escapes label values (XSS vector) in the span text", () => {
    // note: label values may not contain parens (token grammar limit)
    const html = atomTextToHtml("@label(<img src=x onerror=x>)")
    expect(html).toContain(
      '<span class="factory-atom" data-atom-kind="label" data-atom-value="&lt;img src=x onerror=x&gt;"'
    );
    expect(html).not.toContain("<img");
  });

  it("round-trips text → html → text (atoms become tokens)", () => {
    const original = "Due @date(2026-10-11), @status(in-progress), @label(ops team)";
    const html = atomTextToHtml(original);
    expect(atomHtmlToText(html)).toBe(original);
  });

  it("returns null for atom-less HTML (caller keeps original content)", () => {
    expect(atomHtmlToText("<p>plain <strong>bold</strong></p>")).toBeNull();
    expect(atomHtmlToText("")).toBeNull();
  });

  it("strips formatting to plain text; atom-less HTML is left untouched", () => {
    const html = '<p>one <span class="factory-atom" data-atom-kind="status" data-atom-value="done">done</span></p>';
    expect(atomHtmlToText(html)).toBe("one @status(done)");
    // plain formatting HTML has no atoms → null (caller keeps original content)
    expect(atomHtmlToText("<p>two <strong>bold</strong></p>")).toBeNull();
  });

  it("keeps an unknown status value as plain text (no forged token)", () => {
    const html =
      '<span class="factory-atom" data-atom-kind="status" data-atom-value="maybe">maybe</span>';
    expect(atomHtmlToText(html)).toBe("maybe");
  });

  it("unescapes entity-escaped values in the token", () => {
    const html =
      '<span class="factory-atom" data-atom-kind="label" data-atom-value="a&quot;b">a&quot;b</span>';
    expect(atomHtmlToText(html)).toBe("@label(a\"b)");
  });
});