package adminapi

import (
	"bytes"
	"context"
	"encoding/json"
	"errors"
	"mime/multipart"
	"net/http"
	"net/http/httptest"
	"strings"
	"testing"

	"telesrv/internal/admin"
	"telesrv/internal/domain"
	"telesrv/internal/officialgifts"
)

func TestAdminAPIRequiresBearerToken(t *testing.T) {
	srv := &Server{token: "secret", svc: fakeService{}}
	req := httptest.NewRequest(http.MethodPost, "/v1/accounts/set-frozen", strings.NewReader(`{}`))
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusUnauthorized {
		t.Fatalf("status=%d, want 401", rec.Code)
	}
}

type gifCatalogReadService struct{ fakeService }

func (gifCatalogReadService) GifCatalog(context.Context) ([]domain.GifCatalogEntry, error) {
	return []domain.GifCatalogEntry{{
		ID: 9_007_199_254_740_993, Title: "Wave", DocumentID: 9_007_199_254_740_995, Enabled: true,
	}}, nil
}

func TestAdminAPIGifCatalogKeepsInt64IDsAsStrings(t *testing.T) {
	srv := &Server{token: "secret", svc: gifCatalogReadService{}}
	req := httptest.NewRequest(http.MethodGet, "/v1/gif-catalog", nil)
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if body := rec.Body.String(); !strings.Contains(body, `"ID":"9007199254740993"`) ||
		!strings.Contains(body, `"DocumentID":"9007199254740995"`) {
		t.Fatalf("int64 ids were not encoded as strings: %s", body)
	}
}

type gifCategoryCaptureService struct {
	fakeService
	req admin.SetGifCatalogCategoryRequest
}

func (s *gifCategoryCaptureService) SetGifCatalogCategory(_ context.Context, req admin.SetGifCatalogCategoryRequest) (admin.CommandResult, error) {
	s.req = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed"}, nil
}

func TestAdminAPISetGifCatalogCategoryRoute(t *testing.T) {
	svc := &gifCategoryCaptureService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/gif-catalog/set-category", strings.NewReader(`{"command_id":"gif-category-1","actor":"ops","reason":"catalog","id":"9007199254740993","category":"animals"}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK || svc.req.ID != 9_007_199_254_740_993 || svc.req.Category != domain.GifCategoryAnimals {
		t.Fatalf("status=%d req=%+v body=%s", rec.Code, svc.req, rec.Body.String())
	}
}

func TestAdminAPISetAccountFrozen(t *testing.T) {
	svc := &captureFreezeService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/accounts/set-frozen", strings.NewReader(`{"command_id":"c1","actor":"ops","reason":"test","dry_run":true,"user_id":1001,"frozen":true,"freeze_until":"2030-01-02T00:00:00Z","freeze_appeal_url":"https://appeals.example.test"}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if !strings.Contains(rec.Body.String(), `"command_id":"c1"`) {
		t.Fatalf("body=%s", rec.Body.String())
	}
	if svc.req.UserID != 1001 || !svc.req.Frozen || svc.req.Until.IsZero() || svc.req.AppealURL != "https://appeals.example.test" {
		t.Fatalf("decoded freeze request = %+v", svc.req)
	}
}

func TestAdminAPIDeleteAccount(t *testing.T) {
	svc := &captureDeleteService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/accounts/delete", strings.NewReader(`{"command_id":"c2","actor":"ops","reason":"fraud","dry_run":true,"user_id":1002}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if !strings.Contains(rec.Body.String(), `"command_id":"c2"`) {
		t.Fatalf("body=%s", rec.Body.String())
	}
	if svc.req.UserID != 1002 {
		t.Fatalf("decoded delete request = %+v", svc.req)
	}
}

type premiumReadCaptureService struct {
	fakeService
	userID    int64
	limit     int
	paymentID int64
	plansRead bool
	planReq   admin.UpsertPremiumPlanRequest
}

func (s *premiumReadCaptureService) PremiumEntitlements(
	_ context.Context,
	userID int64,
	limit int,
) ([]domain.PremiumEntitlement, error) {
	s.userID, s.limit = userID, limit
	return []domain.PremiumEntitlement{{ID: 11, UserID: userID}}, nil
}

func (s *premiumReadCaptureService) PremiumPayment(
	_ context.Context,
	paymentIntentID int64,
) (domain.PremiumPaymentDetails, bool, error) {
	s.paymentID = paymentIntentID
	return domain.PremiumPaymentDetails{
		Intent: domain.PremiumPaymentIntent{ID: paymentIntentID, Currency: domain.PremiumCurrencyStars},
	}, true, nil
}

func (s *premiumReadCaptureService) PremiumPlans(
	context.Context,
) ([]domain.PremiumPlan, error) {
	s.plansRead = true
	return []domain.PremiumPlan{{
		Months: 3, DurationDays: 90, AmountStars: 750, Enabled: true,
		SortOrder: 10, Label: "3 months", ManagedBy: domain.PremiumPlanManagedByAdmin,
		Version: 4,
	}}, nil
}

func (s *premiumReadCaptureService) UpsertPremiumPlan(
	_ context.Context,
	req admin.UpsertPremiumPlanRequest,
) (admin.CommandResult, error) {
	s.planReq = req
	return admin.CommandResult{
		CommandID: req.CommandID, Action: admin.ActionUpsertPremiumPlan,
		Status: "completed", DryRun: req.DryRun,
	}, nil
}

func TestAdminAPIPremiumReadsRequirePremiumManage(t *testing.T) {
	svc := &premiumReadCaptureService{}
	srv := &Server{
		token: "master",
		scoped: []ScopedToken{
			{Name: "premium-ops", Token: "premium-token", Permissions: []string{PermissionPremiumManage}},
			{Name: "reviewer", Token: "review-token", Permissions: []string{PermissionVerificationReview}},
		},
		svc: svc,
	}
	entitlements := httptest.NewRequest(http.MethodGet, "/v1/premium/users/2002/entitlements?limit=25", nil)
	entitlements.Header.Set("Authorization", "Bearer premium-token")
	entitlementResponse := httptest.NewRecorder()
	srv.routes().ServeHTTP(entitlementResponse, entitlements)
	if entitlementResponse.Code != http.StatusOK || svc.userID != 2002 || svc.limit != 25 ||
		!strings.Contains(entitlementResponse.Body.String(), `"id":11`) {
		t.Fatalf("entitlements status=%d capture=%+v body=%s",
			entitlementResponse.Code, svc, entitlementResponse.Body.String())
	}

	payment := httptest.NewRequest(http.MethodGet, "/v1/premium/payments/44", nil)
	payment.Header.Set("Authorization", "Bearer premium-token")
	paymentResponse := httptest.NewRecorder()
	srv.routes().ServeHTTP(paymentResponse, payment)
	if paymentResponse.Code != http.StatusOK || svc.paymentID != 44 ||
		!strings.Contains(paymentResponse.Body.String(), `"id":44`) {
		t.Fatalf("payment status=%d capture=%+v body=%s",
			paymentResponse.Code, svc, paymentResponse.Body.String())
	}

	plans := httptest.NewRequest(http.MethodGet, "/v1/premium/plans", nil)
	plans.Header.Set("Authorization", "Bearer premium-token")
	plansResponse := httptest.NewRecorder()
	srv.routes().ServeHTTP(plansResponse, plans)
	if plansResponse.Code != http.StatusOK || !svc.plansRead ||
		!strings.Contains(plansResponse.Body.String(), `"AmountStars":750`) ||
		!strings.Contains(plansResponse.Body.String(), `"ManagedBy":"admin"`) {
		t.Fatalf("plans status=%d capture=%+v body=%s",
			plansResponse.Code, svc, plansResponse.Body.String())
	}

	upsert := httptest.NewRequest(http.MethodPost, "/v1/premium/plans/upsert", strings.NewReader(
		`{"command_id":"premium-plan-1","reason":"new price","months":3,"duration_days":90,"amount_stars":800,"enabled":true,"sort_order":10,"label":"Quarter","expected_version":4}`,
	))
	upsert.Header.Set("Authorization", "Bearer premium-token")
	upsertResponse := httptest.NewRecorder()
	srv.routes().ServeHTTP(upsertResponse, upsert)
	if upsertResponse.Code != http.StatusOK || svc.planReq.Months != 3 ||
		svc.planReq.AmountStars != 800 || svc.planReq.ExpectedVersion != 4 ||
		svc.planReq.Actor != "premium-ops" {
		t.Fatalf("upsert status=%d req=%+v body=%s",
			upsertResponse.Code, svc.planReq, upsertResponse.Body.String())
	}

	forbidden := httptest.NewRequest(http.MethodGet, "/v1/premium/plans", nil)
	forbidden.Header.Set("Authorization", "Bearer review-token")
	forbiddenResponse := httptest.NewRecorder()
	srv.routes().ServeHTTP(forbiddenResponse, forbidden)
	if forbiddenResponse.Code != http.StatusForbidden ||
		!strings.Contains(forbiddenResponse.Body.String(), PermissionPremiumManage) {
		t.Fatalf("forbidden status=%d body=%s", forbiddenResponse.Code, forbiddenResponse.Body.String())
	}
}

type captureModerationService struct {
	fakeService
	filter       domain.ModerationCaseFilter
	decision     domain.ModerationDecisionRequest
	appealReview domain.ModerationDecisionRequest
}

func (s *captureModerationService) ModerationCases(_ context.Context, filter domain.ModerationCaseFilter) ([]domain.ModerationCase, error) {
	s.filter = filter
	return []domain.ModerationCase{{ID: 7}}, nil
}

func (s *captureModerationService) DecideModerationCase(_ context.Context, request domain.ModerationDecisionRequest) (domain.ModerationCaseDetail, bool, error) {
	s.decision = request
	return domain.ModerationCaseDetail{Case: domain.ModerationCase{ID: request.CaseID}}, true, nil
}

func (s *captureModerationService) ReviewModerationAppeal(_ context.Context, request domain.ModerationDecisionRequest) (domain.ModerationCaseDetail, bool, error) {
	s.appealReview = request
	return domain.ModerationCaseDetail{Case: domain.ModerationCase{ID: request.CaseID}}, true, nil
}

func TestAdminAPIModerationQueueDecisionAndAppealReview(t *testing.T) {
	svc := &captureModerationService{}
	srv := &Server{token: "secret", svc: svc}
	listRequest := httptest.NewRequest(
		http.MethodGet,
		"/v1/moderation/cases?statuses=open,action_failed&assigned_to=alice&target_type=user&target_id=99&limit=25",
		nil,
	)
	listRequest.Header.Set("Authorization", "Bearer secret")
	list := httptest.NewRecorder()
	srv.routes().ServeHTTP(list, listRequest)
	if list.Code != http.StatusOK || !strings.Contains(list.Body.String(), `"ID":7`) {
		t.Fatalf("list status=%d body=%s", list.Code, list.Body.String())
	}
	if len(svc.filter.Statuses) != 2 ||
		svc.filter.Statuses[0] != domain.ModerationCaseOpen ||
		svc.filter.Statuses[1] != domain.ModerationCaseActionFailed ||
		svc.filter.AssignedTo != "alice" ||
		svc.filter.Target != (domain.Peer{Type: domain.PeerTypeUser, ID: 99}) ||
		svc.filter.Limit != 25 {
		t.Fatalf("filter=%+v", svc.filter)
	}

	decisionRequest := httptest.NewRequest(
		http.MethodPost, "/v1/moderation/cases/7/decide",
		strings.NewReader(`{"expected_version":3,"actor":"alice","reason":"confirmed","command_id":"decision-7","kind":"violation","actions":[{"kind":"mark_scam","payload":{}}]}`),
	)
	decisionRequest.Header.Set("Authorization", "Bearer secret")
	decision := httptest.NewRecorder()
	srv.routes().ServeHTTP(decision, decisionRequest)
	if decision.Code != http.StatusOK ||
		!strings.Contains(decision.Body.String(), `"created":true`) ||
		svc.decision.CaseID != 7 || svc.decision.ExpectedVersion != 3 ||
		svc.decision.Kind != domain.ModerationDecisionViolation ||
		len(svc.decision.Actions) != 1 ||
		svc.decision.Actions[0].Kind != domain.ModerationActionMarkScam {
		t.Fatalf("decision status=%d request=%+v body=%s",
			decision.Code, svc.decision, decision.Body.String())
	}

	reviewRequest := httptest.NewRequest(
		http.MethodPost, "/v1/moderation/cases/7/appeals/8/review",
		strings.NewReader(`{"expected_version":5,"actor":"bob","reason":"appeal accepted","command_id":"appeal-8","granted":true,"actions":[{"kind":"clear_peer_flags","payload":{}}]}`),
	)
	reviewRequest.Header.Set("Authorization", "Bearer secret")
	review := httptest.NewRecorder()
	srv.routes().ServeHTTP(review, reviewRequest)
	if review.Code != http.StatusOK ||
		svc.appealReview.CaseID != 7 || svc.appealReview.AppealID != 8 ||
		svc.appealReview.Kind != domain.ModerationDecisionAppealGrant ||
		len(svc.appealReview.Actions) != 1 ||
		svc.appealReview.Actions[0].Kind != domain.ModerationActionClearPeerFlags {
		t.Fatalf("review status=%d request=%+v body=%s",
			review.Code, svc.appealReview, review.Body.String())
	}
}

type emptyModerationCollectionsService struct {
	fakeService
}

func (emptyModerationCollectionsService) ModerationCases(
	context.Context,
	domain.ModerationCaseFilter,
) ([]domain.ModerationCase, error) {
	return nil, nil
}

func (emptyModerationCollectionsService) ModerationCase(
	_ context.Context,
	caseID int64,
) (domain.ModerationCaseDetail, bool, error) {
	return domain.ModerationCaseDetail{
		Case:      domain.ModerationCase{ID: caseID},
		ReportIDs: []int64{9},
	}, true, nil
}

func (emptyModerationCollectionsService) ModerationReport(
	_ context.Context,
	reportID int64,
) (domain.ModerationReport, bool, error) {
	return domain.ModerationReport{
		ID:    reportID,
		Items: []domain.ModerationReportItem{{ItemID: 10}},
	}, true, nil
}

func (emptyModerationCollectionsService) DecideModerationCase(
	_ context.Context,
	request domain.ModerationDecisionRequest,
) (domain.ModerationCaseDetail, bool, error) {
	return domain.ModerationCaseDetail{
		Case:      domain.ModerationCase{ID: request.CaseID},
		ReportIDs: []int64{9},
	}, true, nil
}

func (emptyModerationCollectionsService) ReviewModerationAppeal(
	_ context.Context,
	request domain.ModerationDecisionRequest,
) (domain.ModerationCaseDetail, bool, error) {
	return domain.ModerationCaseDetail{
		Case:      domain.ModerationCase{ID: request.CaseID},
		ReportIDs: []int64{9},
	}, true, nil
}

func TestAdminAPIModerationCollectionsAreJSONArrays(t *testing.T) {
	srv := &Server{token: "secret", svc: emptyModerationCollectionsService{}}
	tests := []struct {
		name         string
		method       string
		path         string
		body         string
		keys         []string
		nonEmptyKeys []string
		nested       string
	}{
		{
			name: "empty queue", method: http.MethodGet,
			path: "/v1/moderation/cases", keys: []string{"cases"},
		},
		{
			name: "fresh case", method: http.MethodGet,
			path:         "/v1/moderation/cases/7",
			keys:         []string{"Decisions", "Actions", "Appeals"},
			nonEmptyKeys: []string{"ReportIDs"},
		},
		{
			name: "report without media holds", method: http.MethodGet,
			path:         "/v1/moderation/reports/9",
			keys:         []string{"MediaHolds"},
			nonEmptyKeys: []string{"Items"},
		},
		{
			name: "decision response", method: http.MethodPost,
			path: "/v1/moderation/cases/7/decide", body: `{}`,
			nested:       "case",
			keys:         []string{"Decisions", "Actions", "Appeals"},
			nonEmptyKeys: []string{"ReportIDs"},
		},
		{
			name: "appeal review response", method: http.MethodPost,
			path: "/v1/moderation/cases/7/appeals/8/review", body: `{}`,
			nested:       "case",
			keys:         []string{"Decisions", "Actions", "Appeals"},
			nonEmptyKeys: []string{"ReportIDs"},
		},
	}
	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			req := httptest.NewRequest(tt.method, tt.path, strings.NewReader(tt.body))
			req.Header.Set("Authorization", "Bearer secret")
			rec := httptest.NewRecorder()
			srv.routes().ServeHTTP(rec, req)
			if rec.Code != http.StatusOK {
				t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
			}
			var response map[string]any
			if err := json.Unmarshal(rec.Body.Bytes(), &response); err != nil {
				t.Fatalf("decode response: %v", err)
			}
			if tt.nested != "" {
				nestedValue := response[tt.nested]
				var ok bool
				response, ok = nestedValue.(map[string]any)
				if !ok {
					t.Fatalf("%s=%T, want object; body=%s",
						tt.nested, nestedValue, rec.Body.String())
				}
			}
			for _, key := range tt.keys {
				value, ok := response[key]
				if !ok {
					t.Fatalf("%s missing; body=%s", key, rec.Body.String())
				}
				items, ok := value.([]any)
				if !ok || len(items) != 0 {
					t.Fatalf("%s=%#v, want empty JSON array; body=%s",
						key, value, rec.Body.String())
				}
			}
			for _, key := range tt.nonEmptyKeys {
				value, ok := response[key]
				if !ok {
					t.Fatalf("%s missing; body=%s", key, rec.Body.String())
				}
				items, ok := value.([]any)
				if !ok || len(items) == 0 {
					t.Fatalf("%s=%#v, want non-empty JSON array; body=%s",
						key, value, rec.Body.String())
				}
			}
		})
	}
}

func TestAdminAPISetVerified(t *testing.T) {
	srv := &Server{token: "secret", svc: fakeService{}}
	req := httptest.NewRequest(http.MethodPost, "/v1/accounts/set-verified", strings.NewReader(`{"command_id":"c2","actor":"ops","reason":"official","dry_run":true,"user_id":1001,"verified":true}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if !strings.Contains(rec.Body.String(), `"command_id":"c2"`) {
		t.Fatalf("body=%s", rec.Body.String())
	}
}

func TestAdminAPIGrantStars(t *testing.T) {
	srv := &Server{token: "secret", svc: fakeService{}}
	req := httptest.NewRequest(http.MethodPost, "/v1/accounts/grant-stars", strings.NewReader(`{"command_id":"c-stars","actor":"ops","reason":"manual grant","dry_run":true,"user_id":1001,"amount":500}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if !strings.Contains(rec.Body.String(), `"command_id":"c-stars"`) {
		t.Fatalf("body=%s", rec.Body.String())
	}
}

type captureDebitStarsService struct {
	fakeService
	req admin.DebitStarsRequest
}

func (s *captureDebitStarsService) DebitStars(_ context.Context, req admin.DebitStarsRequest) (admin.CommandResult, error) {
	s.req = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func TestAdminAPIDebitStars(t *testing.T) {
	svc := &captureDebitStarsService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/accounts/debit-stars", strings.NewReader(`{"command_id":"refund-1","actor":"bot","reason":"refund","user_id":1001,"amount":20}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK || svc.req.UserID != 1001 || svc.req.Amount != 20 || svc.req.CommandID != "refund-1" {
		t.Fatalf("status=%d request=%+v body=%s", rec.Code, svc.req, rec.Body.String())
	}
}

func TestAdminAPISetChannelVerified(t *testing.T) {
	srv := &Server{token: "secret", svc: fakeService{}}
	req := httptest.NewRequest(http.MethodPost, "/v1/channels/set-verified", strings.NewReader(`{"command_id":"c3","actor":"ops","reason":"official","dry_run":true,"channel_id":2001,"verified":true}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if !strings.Contains(rec.Body.String(), `"command_id":"c3"`) {
		t.Fatalf("body=%s", rec.Body.String())
	}
}

func TestAdminAPIImportStarGiftMultipart(t *testing.T) {
	var body bytes.Buffer
	writer := multipart.NewWriter(&body)
	if err := writer.WriteField("metadata", `{"command_id":"gift-1","actor":"ops","reason":"catalog","dry_run":true,"title":"Gift","stars":50,"convert_stars":25,"enabled":true,"sort_order":3}`); err != nil {
		t.Fatal(err)
	}
	part, err := writer.CreateFormFile("file", "gift.lottie")
	if err != nil {
		t.Fatal(err)
	}
	animation := []byte(`{"v":"5.7","w":512,"h":512,"fr":30,"ip":0,"op":30,"layers":[{}]}`)
	if _, err := part.Write(animation); err != nil {
		t.Fatal(err)
	}
	if err := writer.Close(); err != nil {
		t.Fatal(err)
	}

	svc := &captureGiftService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/gifts/import", &body)
	req.Header.Set("Authorization", "Bearer secret")
	req.Header.Set("Content-Type", writer.FormDataContentType())
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if svc.req.CommandID != "gift-1" || svc.req.FileName != "gift.lottie" || !bytes.Equal(svc.req.Data, animation) || svc.req.Stars != 50 || svc.req.ConvertStars != 25 {
		t.Fatalf("decoded gift request = %+v", svc.req)
	}
}

func TestAdminAPIImportGiftPackMultipart(t *testing.T) {
	var body bytes.Buffer
	writer := multipart.NewWriter(&body)
	if err := writer.WriteField("metadata", `{"command_id":"pack-1","actor":"ops","reason":"catalog","dry_run":true}`); err != nil {
		t.Fatal(err)
	}
	part, err := writer.CreateFormFile("file", "custom.zip")
	if err != nil {
		t.Fatal(err)
	}
	archive := []byte("zip payload")
	if _, err := part.Write(archive); err != nil {
		t.Fatal(err)
	}
	if err := writer.Close(); err != nil {
		t.Fatal(err)
	}
	svc := &captureGiftService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/gifts/import-pack", &body)
	req.Header.Set("Authorization", "Bearer secret")
	req.Header.Set("Content-Type", writer.FormDataContentType())
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK || svc.packReq.CommandID != "pack-1" || svc.packReq.FileName != "custom.zip" || !bytes.Equal(svc.packReq.Data, archive) {
		t.Fatalf("status=%d request=%+v body=%s", rec.Code, svc.packReq, rec.Body.String())
	}
}

func TestAdminAPIPublishStarGiftCollectiblesMultipart(t *testing.T) {
	var body bytes.Buffer
	writer := multipart.NewWriter(&body)
	metadata := `{"command_id":"pool-1","actor":"ops","reason":"pool","dry_run":true,"upgrade_stars":125,"supply_total":100,"slug_prefix":"cake","models":[{"name":"Ruby","rarity_permille":500,"sort_order":0,"file_key":"model-0"},{"name":"Sapphire","rarity_permille":500,"sort_order":1,"file_key":"model-1"}],"patterns":[{"name":"Stars","rarity_permille":500,"sort_order":0,"file_key":"pattern-0"},{"name":"Moons","rarity_permille":500,"sort_order":1,"file_key":"pattern-1"}],"backdrops":[{"name":"Night","backdrop_id":1,"center_color":1122867,"edge_color":2241348,"pattern_color":3359829,"text_color":16777215,"rarity_permille":500,"sort_order":0},{"name":"Day","backdrop_id":2,"center_color":11189196,"edge_color":7833753,"pattern_color":14544639,"text_color":1118481,"rarity_permille":500,"sort_order":1}]}`
	if err := writer.WriteField("metadata", metadata); err != nil {
		t.Fatal(err)
	}
	for key, name := range map[string]string{
		"model-0": "ruby.lottie", "model-1": "sapphire.lottie",
		"pattern-0": "stars.tgs", "pattern-1": "moons.tgs",
	} {
		part, err := writer.CreateFormFile(key, name)
		if err != nil {
			t.Fatal(err)
		}
		if _, err := part.Write([]byte(key)); err != nil {
			t.Fatal(err)
		}
	}
	if err := writer.Close(); err != nil {
		t.Fatal(err)
	}
	svc := &captureCollectibleService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/gifts/11/collectibles/publish", &body)
	req.Header.Set("Authorization", "Bearer secret")
	req.Header.Set("Content-Type", writer.FormDataContentType())
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if svc.req.GiftID != 11 || len(svc.req.Models) != 2 || svc.req.Models[0].FileName != "ruby.lottie" ||
		string(svc.req.Patterns[0].Data) != "pattern-0" || len(svc.req.Backdrops) != 2 || svc.req.Backdrops[1].BackdropID != 2 {
		t.Fatalf("decoded collectible request = %+v", svc.req)
	}
}

func TestCollectiblePreviewResponsePreservesInt64AsDecimalStrings(t *testing.T) {
	const maxInt64 = int64(9223372036854775807)
	got := collectiblePreviewResponse(domain.StarGiftUpgradePreview{
		GiftID:       maxInt64,
		UpgradeStars: maxInt64,
		Models: []domain.StarGiftCollectibleAttribute{{
			ID:                 maxInt64,
			Kind:               domain.StarGiftCollectibleModel,
			Name:               "Exact",
			RarityKind:         domain.StarGiftRarityPermille,
			RarityPermille:     1000,
			OfficialDocumentID: maxInt64,
		}},
	})
	if got["gift_id"] != "9223372036854775807" || got["upgrade_stars"] != "9223372036854775807" {
		t.Fatalf("preview ids = %#v", got)
	}
	models, ok := got["models"].([]map[string]any)
	if !ok || len(models) != 1 {
		t.Fatalf("preview models = %#v", got["models"])
	}
	if models[0]["id"] != "9223372036854775807" || models[0]["official_document_id"] != "9223372036854775807" {
		t.Fatalf("preview model ids = %#v", models[0])
	}
}

func TestOfficialStarGiftListItemExposesExplicitCapabilities(t *testing.T) {
	item := officialStarGiftListItem(officialgifts.GiftSummary{
		ID: 9223372036854775807, Title: "Fresh Socks", Stars: 25, ConvertStars: 10, UpgradeStars: 50,
		UpgradeVariants: 6000, ModelCount: 10, PatternCount: 20, BackdropCount: 30, CraftedModelCount: 2,
	})
	if item["source_gift_id"] != "9223372036854775807" || item["title"] != "Fresh Socks" ||
		item["upgrade_variants"] != 6000 || item["can_upgrade"] != true || item["can_craft"] != true {
		t.Fatalf("official gift item = %#v", item)
	}
	item = officialStarGiftListItem(officialgifts.GiftSummary{
		ID: 1, UpgradeStars: 0, ModelCount: 1, PatternCount: 1, BackdropCount: 1, CraftedModelCount: 1,
	})
	if item["can_upgrade"] != false || item["can_craft"] != false {
		t.Fatalf("unavailable official gift capabilities = %#v", item)
	}
}

type liveMediaStubService struct {
	fakeService
	data     []byte
	mimeType string
	found    bool
	err      error
	calls    int
}

func (s *liveMediaStubService) LiveMedia(context.Context, string) ([]byte, string, bool, error) {
	s.calls++
	return s.data, s.mimeType, s.found, s.err
}

// /v1/media bytes end up on the panel origin, so every successful response has
// to carry the headers that keep a document from rendering as active content,
// and anything outside the media allowlist has to download.
func TestAdminAPILiveMediaHeaders(t *testing.T) {
	html := []byte(`<html><script>alert(1)</script></html>`)
	get := func(svc *liveMediaStubService, target string) *httptest.ResponseRecorder {
		t.Helper()
		srv := &Server{token: "secret", svc: svc}
		req := httptest.NewRequest(http.MethodGet, target, nil)
		req.Header.Set("Authorization", "Bearer secret")
		rec := httptest.NewRecorder()
		srv.routes().ServeHTTP(rec, req)
		return rec
	}
	checkSafety := func(rec *httptest.ResponseRecorder) {
		t.Helper()
		h := rec.Header()
		if h.Get("X-Content-Type-Options") != "nosniff" ||
			!strings.Contains(h.Get("Content-Security-Policy"), "sandbox") ||
			h.Get("Cache-Control") != "no-store" {
			t.Fatalf("safety headers = %v", h)
		}
	}

	rec := get(&liveMediaStubService{data: html, mimeType: "application/octet-stream", found: true}, "/v1/media?key=doc:1")
	if rec.Code != http.StatusOK || rec.Header().Get("Content-Type") != "application/octet-stream" ||
		rec.Header().Get("Content-Disposition") != "attachment" || !bytes.Equal(rec.Body.Bytes(), html) {
		t.Fatalf("octet-stream status=%d headers=%v body=%q", rec.Code, rec.Header(), rec.Body.String())
	}
	checkSafety(rec)

	rec = get(&liveMediaStubService{data: []byte("\x89PNG\r\n\x1a\n"), mimeType: "image/png", found: true}, "/v1/media?key=photo:1")
	if rec.Code != http.StatusOK || rec.Header().Get("Content-Type") != "image/png" ||
		rec.Header().Get("Content-Disposition") != "" {
		t.Fatalf("image status=%d headers=%v", rec.Code, rec.Header())
	}
	checkSafety(rec)

	if rec = get(&liveMediaStubService{err: admin.ErrLiveMediaTooLarge}, "/v1/media?key=doc:2"); rec.Code != http.StatusRequestEntityTooLarge {
		t.Fatalf("too large status=%d body=%s, want 413", rec.Code, rec.Body.String())
	}
	if rec = get(&liveMediaStubService{}, "/v1/media?key=doc:3"); rec.Code != http.StatusNotFound {
		t.Fatalf("not found status=%d body=%s, want 404", rec.Code, rec.Body.String())
	}
	missing := &liveMediaStubService{}
	if rec = get(missing, "/v1/media"); rec.Code != http.StatusBadRequest || missing.calls != 0 {
		t.Fatalf("missing key status=%d calls=%d, want 400 without a lookup", rec.Code, missing.calls)
	}
}

type fakeService struct{}

type resolveByPhoneService struct {
	fakeService
	phone string
	found bool
	user  domain.User
}

func (s *resolveByPhoneService) ResolveUserByPhone(_ context.Context, phone string) (domain.User, bool, error) {
	s.phone = phone
	return s.user, s.found, nil
}

func TestAdminAPIResolveUserByPhone(t *testing.T) {
	svc := &resolveByPhoneService{found: true, user: domain.User{ID: 1_780_243_207}}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/accounts/resolve-by-phone", strings.NewReader(`{"phone":"+79991234567"}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if svc.phone != "+79991234567" {
		t.Fatalf("decoded phone = %q", svc.phone)
	}
	if !strings.Contains(rec.Body.String(), `"found":true`) || !strings.Contains(rec.Body.String(), `"user_id":1780243207`) {
		t.Fatalf("body=%s", rec.Body.String())
	}
}

func TestAdminAPIResolveUserByPhoneNotFound(t *testing.T) {
	svc := &resolveByPhoneService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/accounts/resolve-by-phone", strings.NewReader(`{"phone":"+79990000000"}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if !strings.Contains(rec.Body.String(), `"found":false`) {
		t.Fatalf("body=%s", rec.Body.String())
	}
}

type captureFreezeService struct {
	fakeService
	req admin.SetAccountFrozenRequest
}

type captureDeleteService struct {
	fakeService
	req admin.DeleteAccountRequest
}

func (s *captureDeleteService) DeleteAccount(_ context.Context, req admin.DeleteAccountRequest) (admin.CommandResult, error) {
	s.req = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

type captureGiftService struct {
	fakeService
	req     admin.ImportStarGiftRequest
	packReq admin.ImportGiftPackRequest
}

type captureCollectibleService struct {
	fakeService
	req admin.PublishStarGiftCollectiblesRequest
}

func (s *captureFreezeService) SetAccountFrozen(_ context.Context, req admin.SetAccountFrozenRequest) (admin.CommandResult, error) {
	s.req = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureGiftService) ImportStarGift(_ context.Context, req admin.ImportStarGiftRequest) (admin.CommandResult, error) {
	s.req = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureGiftService) ImportGiftPack(_ context.Context, req admin.ImportGiftPackRequest) (admin.CommandResult, error) {
	s.packReq = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureCollectibleService) PublishStarGiftCollectibles(_ context.Context, req admin.PublishStarGiftCollectiblesRequest) (admin.CommandResult, error) {
	s.req = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetAccountFrozen(_ context.Context, req admin.SetAccountFrozenRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) DeleteAccount(_ context.Context, req admin.DeleteAccountRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) GrantPremium(_ context.Context, req admin.GrantPremiumRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) GrantStars(_ context.Context, req admin.GrantStarsRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) GrantStarsAll(_ context.Context, req admin.GrantStarsAllRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) UpdateDonationChain(_ context.Context, req admin.UpdateDonationChainRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetVerified(_ context.Context, req admin.SetVerifiedRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetChannelVerified(_ context.Context, req admin.SetChannelVerifiedRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) CreateBot(_ context.Context, req admin.CreateBotRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) DeleteBot(_ context.Context, req admin.DeleteBotRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) ExportBotToken(_ context.Context, req admin.ExportBotTokenRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetUserFlags(_ context.Context, req admin.SetUserFlagsRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetChannelFlags(_ context.Context, req admin.SetChannelFlagsRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetSupport(_ context.Context, req admin.SetSupportRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) GiveGift(_ context.Context, req admin.GiveGiftRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetUsername(_ context.Context, req admin.SetUsernameRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetProfile(_ context.Context, req admin.SetProfileRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetPhone(_ context.Context, req admin.SetPhoneRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetLoginEmail(_ context.Context, req admin.SetLoginEmailRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) AccountAvatar(context.Context, int64) ([]byte, string, bool, error) {
	return nil, "", false, nil
}

func (fakeService) SetAccountAvatar(_ context.Context, req admin.SetAccountAvatarRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) ChannelAvatar(context.Context, int64) ([]byte, string, bool, error) {
	return nil, "", false, nil
}

func (fakeService) SetChannelAvatar(_ context.Context, req admin.SetChannelAvatarRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetUserColor(_ context.Context, req admin.SetUserColorRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetUserEmojiStatus(_ context.Context, req admin.SetUserEmojiStatusRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetChannelSettings(_ context.Context, req admin.SetChannelSettingsRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetChannelUsername(_ context.Context, req admin.SetChannelUsernameRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetChannelColor(_ context.Context, req admin.SetChannelColorRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetChannelEmojiStatus(_ context.Context, req admin.SetChannelEmojiStatusRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) RevokeSessions(context.Context, admin.RevokeSessionsRequest) (admin.CommandResult, error) {
	return admin.CommandResult{}, nil
}

func (fakeService) DeletePrivateMessages(context.Context, admin.DeletePrivateMessagesRequest) (admin.CommandResult, error) {
	return admin.CommandResult{}, nil
}

func (fakeService) DeletePrivateHistory(context.Context, admin.DeletePrivateHistoryRequest) (admin.CommandResult, error) {
	return admin.CommandResult{}, nil
}

func (fakeService) SetStickerSetArchived(_ context.Context, req admin.SetStickerSetArchivedRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetStickerSetSortOrder(_ context.Context, req admin.SetStickerSetSortOrderRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) RenameStickerSet(_ context.Context, req admin.RenameStickerSetRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) DeleteStickerSet(_ context.Context, req admin.DeleteStickerSetRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) CreateStickerSet(_ context.Context, req admin.CreateStickerSetRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) RemoveStickerFromSet(_ context.Context, req admin.RemoveStickerFromSetRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) StickerDocumentAnimation(context.Context, int64) ([]byte, string, bool, error) {
	return nil, "", false, nil
}

func (fakeService) LiveMedia(context.Context, string) ([]byte, string, bool, error) {
	return nil, "", false, nil
}

func (fakeService) ImportStarGift(_ context.Context, req admin.ImportStarGiftRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) ImportGiftPack(_ context.Context, req admin.ImportGiftPackRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) ImportOfficialStarGift(_ context.Context, req admin.ImportOfficialStarGiftRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) OfficialStarGifts(context.Context) ([]officialgifts.GiftSummary, error) {
	return nil, nil
}

func (fakeService) OfficialStarGiftAnimation(context.Context, string) ([]byte, bool, error) {
	return []byte(`{"v":"5.7","w":512,"h":512}`), true, nil
}

func (fakeService) PublishStarGiftCollectibles(_ context.Context, req admin.PublishStarGiftCollectiblesRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetStarGiftEnabled(_ context.Context, req admin.SetStarGiftEnabledRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetStarGiftSortOrder(_ context.Context, req admin.SetStarGiftSortOrderRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) SetNftGiftWallet(_ context.Context, req admin.SetNftGiftWalletRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) StarGiftAnimation(context.Context, int64) ([]byte, bool, error) {
	return []byte(`{"v":"5.7","w":512,"h":512}`), true, nil
}

func (fakeService) EmojiAnimation(context.Context, int64) ([]byte, bool, error) {
	return []byte(`{"v":"5.7","w":100,"h":100}`), true, nil
}

func (fakeService) GifCatalog(context.Context) ([]domain.GifCatalogEntry, error) { return nil, nil }
func (fakeService) CreateGifCatalogEntry(_ context.Context, req admin.CreateGifCatalogEntryRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}
func (fakeService) SetGifCatalogEnabled(_ context.Context, req admin.SetGifCatalogEnabledRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}
func (fakeService) SetGifCatalogSortOrder(_ context.Context, req admin.SetGifCatalogSortOrderRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}
func (fakeService) SetGifCatalogCategory(_ context.Context, req admin.SetGifCatalogCategoryRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}
func (fakeService) DeleteGifCatalogEntry(_ context.Context, req admin.DeleteGifCatalogEntryRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}
func (fakeService) GifCatalogDocumentPreview(context.Context, int64) ([]byte, string, bool, error) {
	return nil, "", false, nil
}

func (fakeService) StarGiftCollectibles(context.Context, int64) (domain.StarGiftUpgradePreview, bool, error) {
	return domain.StarGiftUpgradePreview{}, false, nil
}

func (fakeService) StarGiftCollectibleAnimation(context.Context, int64, domain.StarGiftCollectibleAttributeKind, int64) ([]byte, bool, error) {
	return []byte(`{"v":"5.7","w":512,"h":512}`), true, nil
}

func (fakeService) ModerationCases(context.Context, domain.ModerationCaseFilter) ([]domain.ModerationCase, error) {
	return nil, nil
}

func (fakeService) ModerationCase(context.Context, int64) (domain.ModerationCaseDetail, bool, error) {
	return domain.ModerationCaseDetail{}, false, nil
}

func (fakeService) ModerationReport(context.Context, int64) (domain.ModerationReport, bool, error) {
	return domain.ModerationReport{}, false, nil
}

func (fakeService) ClaimModerationCase(context.Context, int64, int64, string) (domain.ModerationCase, error) {
	return domain.ModerationCase{}, nil
}

func (fakeService) DecideModerationCase(context.Context, domain.ModerationDecisionRequest) (domain.ModerationCaseDetail, bool, error) {
	return domain.ModerationCaseDetail{}, true, nil
}

func (fakeService) SubmitModerationAppeal(context.Context, int64, int64, string) (domain.ModerationAppeal, bool, error) {
	return domain.ModerationAppeal{}, true, nil
}

func (fakeService) ReviewModerationAppeal(context.Context, domain.ModerationDecisionRequest) (domain.ModerationCaseDetail, bool, error) {
	return domain.ModerationCaseDetail{}, true, nil
}

type captureCollectibleUsernameService struct {
	fakeService
	mint     admin.MintCollectibleUsernameRequest
	transfer admin.TransferCollectibleUsernameRequest
	revoke   admin.RevokeCollectibleUsernameRequest
	del      admin.DeleteCollectibleUsernameRequest
	filter   domain.CollectibleUsernameFilter
	assetID  int64
}

type failingMintService struct {
	captureCollectibleUsernameService
	result admin.CommandResult
	err    error
}

func (s *failingMintService) MintCollectibleUsername(_ context.Context, req admin.MintCollectibleUsernameRequest) (admin.CommandResult, error) {
	s.mint = req
	return s.result, s.err
}

func (s *captureCollectibleUsernameService) MintCollectibleUsername(_ context.Context, req admin.MintCollectibleUsernameRequest) (admin.CommandResult, error) {
	s.mint = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureCollectibleUsernameService) TransferCollectibleUsername(_ context.Context, req admin.TransferCollectibleUsernameRequest) (admin.CommandResult, error) {
	s.transfer = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureCollectibleUsernameService) RevokeCollectibleUsername(_ context.Context, req admin.RevokeCollectibleUsernameRequest) (admin.CommandResult, error) {
	s.revoke = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureCollectibleUsernameService) DeleteCollectibleUsername(_ context.Context, req admin.DeleteCollectibleUsernameRequest) (admin.CommandResult, error) {
	s.del = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureCollectibleUsernameService) CollectibleUsernames(_ context.Context, filter domain.CollectibleUsernameFilter) ([]domain.CollectibleUsername, error) {
	s.filter = filter
	return []domain.CollectibleUsername{maxInt64Collectible()}, nil
}

func (s *captureCollectibleUsernameService) CollectibleUsernameByID(_ context.Context, id int64) (domain.CollectibleUsername, error) {
	s.assetID = id
	asset := maxInt64Collectible()
	asset.ID = id
	return asset, nil
}

func (s *captureCollectibleUsernameService) CollectibleUsernameTransfers(_ context.Context, collectibleID int64, _ int) ([]domain.CollectibleUsernameTransfer, error) {
	return []domain.CollectibleUsernameTransfer{{
		ID:            9223372036854775807,
		CollectibleID: collectibleID,
		Kind:          domain.CollectibleUsernameKindMint,
		To:            domain.Peer{Type: domain.PeerTypeUser, ID: 1001},
		Currency:      domain.CollectibleCurrencyTON,
		Amount:        9223372036854775807,
		Actor:         "ops",
	}}, nil
}

func maxInt64Collectible() domain.CollectibleUsername {
	return domain.CollectibleUsername{
		ID:             9223372036854775807,
		Username:       "durov",
		Status:         domain.CollectibleUsernameStatusOwned,
		Owner:          domain.Peer{Type: domain.PeerTypeUser, ID: 1001},
		Currency:       domain.CollectibleCurrencyTON,
		Amount:         9223372036854775807,
		CryptoCurrency: domain.CollectibleCryptoCurrencyTON,
		CryptoAmount:   9223372036854775807,
		Version:        9223372036854775807,
	}
}

type captureAccountRatingService struct {
	fakeService
	recompute admin.RecomputeAccountRatingRequest
	adjust    admin.AdjustAccountRatingRequest
	filter    domain.AccountRatingFilter
}

func (s *captureAccountRatingService) RecomputeAccountRating(_ context.Context, req admin.RecomputeAccountRatingRequest) (admin.CommandResult, error) {
	s.recompute = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureAccountRatingService) AdjustAccountRating(_ context.Context, req admin.AdjustAccountRatingRequest) (admin.CommandResult, error) {
	s.adjust = req
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (s *captureAccountRatingService) AccountRatings(_ context.Context, filter domain.AccountRatingFilter) ([]domain.AccountRating, error) {
	s.filter = filter
	return []domain.AccountRating{maxInt64Rating()}, nil
}

func (s *captureAccountRatingService) AccountRating(_ context.Context, userID int64) (domain.AccountRating, error) {
	rating := maxInt64Rating()
	rating.UserID = userID
	return rating, nil
}

func (s *captureAccountRatingService) AccountRatingEvents(_ context.Context, userID int64, _ int) ([]domain.AccountRatingEvent, error) {
	return []domain.AccountRatingEvent{{
		ID: 9223372036854775807, UserID: userID,
		Kind: domain.AccountRatingEventManual, Amount: -9223372036854775807,
		Actor: "ops", Reason: "abuse",
	}}, nil
}

func maxInt64Rating() domain.AccountRating {
	return domain.AccountRating{
		UserID:            1001,
		Level:             7,
		Stars:             9223372036854775807,
		CurrentLevelStars: 4900,
		NextLevelStars:    6400,
		HasNextLevel:      true,
		StarsComponent:    9223372036854775807,
		ManualComponent:   -1500,
		Version:           9223372036854775807,
	}
}

func TestAdminAPICollectibleUsernameCommandsRequireToken(t *testing.T) {
	srv := &Server{token: "secret", svc: fakeService{}}
	for _, path := range []string{
		"/v1/collectible-usernames/mint",
		"/v1/collectible-usernames/transfer",
		"/v1/collectible-usernames/revoke",
		"/v1/account-ratings/recompute",
		"/v1/account-ratings/adjust",
	} {
		req := httptest.NewRequest(http.MethodPost, path, strings.NewReader(`{}`))
		rec := httptest.NewRecorder()
		srv.routes().ServeHTTP(rec, req)
		if rec.Code != http.StatusUnauthorized {
			t.Fatalf("%s status=%d, want 401", path, rec.Code)
		}
	}
	for _, path := range []string{
		"/v1/collectible-usernames",
		"/v1/collectible-usernames/7",
		"/v1/account-ratings",
		"/v1/account-ratings/7",
	} {
		req := httptest.NewRequest(http.MethodGet, path, nil)
		rec := httptest.NewRecorder()
		srv.routes().ServeHTTP(rec, req)
		if rec.Code != http.StatusUnauthorized {
			t.Fatalf("%s status=%d, want 401", path, rec.Code)
		}
	}
}

func TestAdminAPIMintCollectibleUsernameForwardsExactInt64AndDryRun(t *testing.T) {
	const maxInt64 = int64(9223372036854775807)
	svc := &captureCollectibleUsernameService{}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/collectible-usernames/mint", strings.NewReader(`{
		"command_id":"mint-1","actor":"ops","reason":"fragment import","dry_run":true,
		"username":"durov","owner_user_id":"1001","currency":"TON","amount":"9223372036854775807",
		"crypto_currency":"TON","crypto_amount":"250000000000",
		"url":"https://fragment.example/durov","purchase_date":1700000000
	}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	if rec.Code != http.StatusOK || !strings.Contains(rec.Body.String(), `"command_id":"mint-1"`) {
		t.Fatalf("status=%d body=%s", rec.Code, rec.Body.String())
	}
	if !strings.Contains(rec.Body.String(), `"dry_run":true`) {
		t.Fatalf("dry-run was not propagated: %s", rec.Body.String())
	}
	if svc.mint.Username != "durov" || svc.mint.OwnerUserID != 1001 || svc.mint.Amount != maxInt64 ||
		svc.mint.CryptoAmount != 250000000000 || svc.mint.PurchaseDate != 1700000000 || !svc.mint.DryRun {
		t.Fatalf("decoded mint request = %+v", svc.mint)
	}
}

func TestAdminAPIMintCommandFailureCarriesStableCode(t *testing.T) {
	svc := &failingMintService{result: admin.CommandResult{
		CommandID: "mint-1", Action: admin.ActionMintCollectibleUsername, Status: "failed",
		DryRun: true, Error: admin.CodeUsernameOccupied + ": username occupied", Code: admin.CodeUsernameOccupied,
	}, err: errors.New(admin.CodeUsernameOccupied)}
	srv := &Server{token: "secret", svc: svc}
	req := httptest.NewRequest(http.MethodPost, "/v1/collectible-usernames/mint", strings.NewReader(
		`{"command_id":"mint-1","actor":"ops","reason":"duplicate","dry_run":true,"username":"durov","owner_user_id":"1001","currency":"TON","amount":"0"}`))
	req.Header.Set("Authorization", "Bearer secret")
	rec := httptest.NewRecorder()
	srv.routes().ServeHTTP(rec, req)
	var body struct {
		Code   string `json:"code"`
		Error  string `json:"error"`
		Status string `json:"status"`
	}
	if err := json.Unmarshal(rec.Body.Bytes(), &body); err != nil {
		t.Fatalf("decode body: %v", err)
	}
	if rec.Code != http.StatusBadRequest || body.Status != "failed" ||
		body.Code != admin.CodeUsernameOccupied || !strings.Contains(body.Error, admin.CodeUsernameOccupied) {
		t.Fatalf("status=%d body=%s, want a failed command carrying the stable occupied code", rec.Code, rec.Body.String())
	}
}

func TestAdminAPITransferAndRevokeCollectibleUsername(t *testing.T) {
	svc := &captureCollectibleUsernameService{}
	srv := &Server{token: "secret", svc: svc}
	transfer := httptest.NewRequest(http.MethodPost, "/v1/collectible-usernames/transfer", strings.NewReader(
		`{"command_id":"t-1","actor":"ops","reason":"sold","username":"durov","to_channel_id":"2002"}`))
	transfer.Header.Set("Authorization", "Bearer secret")
	transferRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(transferRec, transfer)
	if transferRec.Code != http.StatusOK || svc.transfer.ToChannelID != 2002 || svc.transfer.Username != "durov" {
		t.Fatalf("transfer status=%d request=%+v", transferRec.Code, svc.transfer)
	}

	revoke := httptest.NewRequest(http.MethodPost, "/v1/collectible-usernames/revoke", strings.NewReader(
		`{"command_id":"r-1","actor":"ops","reason":"fraud","username":"durov","burn":true}`))
	revoke.Header.Set("Authorization", "Bearer secret")
	revokeRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(revokeRec, revoke)
	if revokeRec.Code != http.StatusOK || !svc.revoke.Burn || svc.revoke.CommandID != "r-1" {
		t.Fatalf("revoke status=%d request=%+v", revokeRec.Code, svc.revoke)
	}
}

func TestAdminAPIAccountRatingCommands(t *testing.T) {
	svc := &captureAccountRatingService{}
	srv := &Server{token: "secret", svc: svc}
	recompute := httptest.NewRequest(http.MethodPost, "/v1/account-ratings/recompute", strings.NewReader(
		`{"command_id":"rc-1","actor":"ops","reason":"support ticket","dry_run":true,"user_id":"1001"}`))
	recompute.Header.Set("Authorization", "Bearer secret")
	recomputeRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(recomputeRec, recompute)
	if recomputeRec.Code != http.StatusOK || svc.recompute.UserID != 1001 || !svc.recompute.DryRun {
		t.Fatalf("recompute status=%d request=%+v body=%s", recomputeRec.Code, svc.recompute, recomputeRec.Body.String())
	}

	adjust := httptest.NewRequest(http.MethodPost, "/v1/account-ratings/adjust", strings.NewReader(
		`{"command_id":"adj-1","actor":"ops","reason":"manual penalty","user_id":"1001","amount":"-2500"}`))
	adjust.Header.Set("Authorization", "Bearer secret")
	adjustRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(adjustRec, adjust)
	if adjustRec.Code != http.StatusOK || svc.adjust.Amount != -2500 || svc.adjust.DryRun {
		t.Fatalf("adjust status=%d request=%+v body=%s", adjustRec.Code, svc.adjust, adjustRec.Body.String())
	}
}

func TestAdminAPICollectibleUsernameReadsUseDecimalStrings(t *testing.T) {
	svc := &captureCollectibleUsernameService{}
	srv := &Server{token: "secret", svc: svc}
	list := httptest.NewRequest(http.MethodGet,
		"/v1/collectible-usernames?status=owned&owner_user_id=1001&q=%40Durov&limit=25&before_id=42", nil)
	list.Header.Set("Authorization", "Bearer secret")
	listRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(listRec, list)
	if listRec.Code != http.StatusOK {
		t.Fatalf("list status=%d body=%s", listRec.Code, listRec.Body.String())
	}
	if svc.filter.Status != domain.CollectibleUsernameStatusOwned ||
		svc.filter.Owner != (domain.Peer{Type: domain.PeerTypeUser, ID: 1001}) ||
		svc.filter.Query != "@Durov" || svc.filter.Limit != 25 || svc.filter.BeforeID != 42 {
		t.Fatalf("collectible filter = %+v", svc.filter)
	}
	if !strings.Contains(listRec.Body.String(), `"id":"9223372036854775807"`) ||
		!strings.Contains(listRec.Body.String(), `"amount":"9223372036854775807"`) {
		t.Fatalf("list body lost int64 precision: %s", listRec.Body.String())
	}

	detail := httptest.NewRequest(http.MethodGet, "/v1/collectible-usernames/77", nil)
	detail.Header.Set("Authorization", "Bearer secret")
	detailRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(detailRec, detail)
	if detailRec.Code != http.StatusOK || svc.assetID != 77 {
		t.Fatalf("detail status=%d assetID=%d body=%s", detailRec.Code, svc.assetID, detailRec.Body.String())
	}
	var payload struct {
		Asset     map[string]any   `json:"asset"`
		Transfers []map[string]any `json:"transfers"`
	}
	if err := json.Unmarshal(detailRec.Body.Bytes(), &payload); err != nil {
		t.Fatalf("decode detail: %v", err)
	}
	if payload.Asset["id"] != "77" || len(payload.Transfers) != 1 ||
		payload.Transfers[0]["amount"] != "9223372036854775807" ||
		payload.Transfers[0]["collectible_id"] != "77" {
		t.Fatalf("detail payload = %+v", payload)
	}
}

func TestAdminAPIAccountRatingReadsUseDecimalStrings(t *testing.T) {
	svc := &captureAccountRatingService{}
	srv := &Server{token: "secret", svc: svc}
	list := httptest.NewRequest(http.MethodGet, "/v1/account-ratings?min_level=3&user_id=1001&limit=10&before_id=99", nil)
	list.Header.Set("Authorization", "Bearer secret")
	listRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(listRec, list)
	if listRec.Code != http.StatusOK {
		t.Fatalf("list status=%d body=%s", listRec.Code, listRec.Body.String())
	}
	if svc.filter.MinLevel != 3 || svc.filter.UserID != 1001 || svc.filter.Limit != 10 || svc.filter.BeforeID != 99 {
		t.Fatalf("rating filter = %+v", svc.filter)
	}
	if !strings.Contains(listRec.Body.String(), `"stars":"9223372036854775807"`) {
		t.Fatalf("rating list lost int64 precision: %s", listRec.Body.String())
	}

	detail := httptest.NewRequest(http.MethodGet, "/v1/account-ratings/1001", nil)
	detail.Header.Set("Authorization", "Bearer secret")
	detailRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(detailRec, detail)
	if detailRec.Code != http.StatusOK {
		t.Fatalf("detail status=%d body=%s", detailRec.Code, detailRec.Body.String())
	}
	var payload struct {
		Rating map[string]any   `json:"rating"`
		Events []map[string]any `json:"events"`
	}
	if err := json.Unmarshal(detailRec.Body.Bytes(), &payload); err != nil {
		t.Fatalf("decode detail: %v", err)
	}
	if payload.Rating["user_id"] != "1001" || payload.Rating["stars"] != "9223372036854775807" ||
		len(payload.Events) != 1 || payload.Events[0]["amount"] != "-9223372036854775807" {
		t.Fatalf("rating detail payload = %+v", payload)
	}
}

func TestAdminAPIMissingCollectibleAndRatingReportCodedErrors(t *testing.T) {
	srv := &Server{token: "secret", svc: fakeService{}}
	asset := httptest.NewRequest(http.MethodGet, "/v1/collectible-usernames/5", nil)
	asset.Header.Set("Authorization", "Bearer secret")
	assetRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(assetRec, asset)
	if assetRec.Code != http.StatusNotFound ||
		!strings.Contains(assetRec.Body.String(), `"code":"`+admin.CodeCollectibleNotFound+`"`) {
		t.Fatalf("missing asset status=%d body=%s", assetRec.Code, assetRec.Body.String())
	}

	rating := httptest.NewRequest(http.MethodGet, "/v1/account-ratings/5", nil)
	rating.Header.Set("Authorization", "Bearer secret")
	ratingRec := httptest.NewRecorder()
	srv.routes().ServeHTTP(ratingRec, rating)
	if ratingRec.Code != http.StatusNotFound ||
		!strings.Contains(ratingRec.Body.String(), `"code":"`+admin.CodeRatingNotFound+`"`) {
		t.Fatalf("missing rating status=%d body=%s", ratingRec.Code, ratingRec.Body.String())
	}
}

func (fakeService) MintCollectibleUsername(_ context.Context, req admin.MintCollectibleUsernameRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) TransferCollectibleUsername(_ context.Context, req admin.TransferCollectibleUsernameRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) RevokeCollectibleUsername(_ context.Context, req admin.RevokeCollectibleUsernameRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) DeleteCollectibleUsername(_ context.Context, req admin.DeleteCollectibleUsernameRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) CollectibleUsernames(context.Context, domain.CollectibleUsernameFilter) ([]domain.CollectibleUsername, error) {
	return nil, nil
}

func (fakeService) CollectibleUsernameByID(context.Context, int64) (domain.CollectibleUsername, error) {
	return domain.CollectibleUsername{}, domain.ErrCollectibleUsernameNotFound
}

func (fakeService) CollectibleUsernameTransfers(context.Context, int64, int) ([]domain.CollectibleUsernameTransfer, error) {
	return nil, nil
}

func (fakeService) RecomputeAccountRating(_ context.Context, req admin.RecomputeAccountRatingRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) AdjustAccountRating(_ context.Context, req admin.AdjustAccountRatingRequest) (admin.CommandResult, error) {
	return admin.CommandResult{CommandID: req.CommandID, Status: "completed", DryRun: req.DryRun}, nil
}

func (fakeService) AccountRating(context.Context, int64) (domain.AccountRating, error) {
	return domain.AccountRating{}, domain.ErrAccountRatingNotFound
}

func (fakeService) AccountRatings(context.Context, domain.AccountRatingFilter) ([]domain.AccountRating, error) {
	return nil, nil
}

func (fakeService) AccountRatingEvents(context.Context, int64, int) ([]domain.AccountRatingEvent, error) {
	return nil, nil
}

func (fakeService) ListRecentAdminCommands(context.Context, int, string) ([]domain.AdminCommand, error) {
	return nil, nil
}