// Mocks the admin API via cy.intercept — no live backend (apps/api's Mocha
// suite covers real /admin/* behaviour).

const adminBody = {
  id: 1,
  email: "ops@example.com",
  name: "Ops",
  createdAt: "2026-08-01T00:00:00.000Z",
  lastLoginAt: "2026-08-28T09:00:00.000Z",
};

describe("Admin layout", () => {
  it("redirects to /login when there is no admin session", () => {
    cy.intercept("GET", "**/admin/auth/me", {
      statusCode: 401,
      body: { code: 4011, message: "no" },
    });
    cy.visit("/admin/monitoring");
    cy.url().should("include", "/admin/login");
    cy.contains("h1", "Administration").should("be.visible");
  });

  it("shows the sidebar and navigates between the sections", () => {
    cy.intercept("GET", "**/admin/auth/me", { statusCode: 200, body: adminBody });
    cy.visit("/admin");

    cy.contains("h1", "Tableau de bord").should("be.visible");
    cy.contains(".admin-sidebar__who", "Ops").should("be.visible");

    cy.contains("nav a", "Monitoring").click();
    cy.url().should("include", "/admin/monitoring");
    cy.contains("h1", "Monitoring").should("be.visible");
    cy.contains("nav a", "Monitoring").should("have.class", "active");

    cy.contains("nav a", "Corrections").click();
    cy.url().should("include", "/admin/corrections");
    cy.contains("h1", "Corrections").should("be.visible");

    cy.intercept("GET", "**/admin/catalog/placeholders*", { statusCode: 200, body: [] });
    cy.contains("nav a", "Catalogue").click();
    cy.url().should("include", "/admin/catalogue");
    cy.contains("h1", "Ingrédients hors-catalogue").should("be.visible");

    cy.contains("nav a", "Tableau de bord").click();
    cy.url().should("eq", `${Cypress.config().baseUrl}/admin`);
  });

  it("logs out back to /login", () => {
    cy.intercept("GET", "**/admin/auth/me", { statusCode: 200, body: adminBody });
    cy.intercept("POST", "**/admin/auth/logout", { statusCode: 204 });
    cy.visit("/admin");

    // Wait until the guarded layout has actually mounted before acting.
    cy.contains("h1", "Tableau de bord").should("be.visible");

    // Logout clears the in-memory admin state, which is what bounces the
    // guard to /login — no fresh `me` round-trip involved, so nothing to
    // re-stub here.
    cy.contains("button", "Se déconnecter").click();
    cy.url().should("include", "/admin/login");
  });
});