import { assertEquals, assertStringIncludes } from 'jsr:@std/assert'
import { buildBookingNotificationEmail, buildInquiryNotificationEmail } from './email.ts'

Deno.test('buildBookingNotificationEmail includes the service, date, time, and contact details', () => {
  const { subject, html } = buildBookingNotificationEmail({
    serviceName: 'Knotless Braids',
    date: '2026-09-01',
    time: '10:00 AM',
    contact: { name: 'Jane Doe', phone: '555-0100', email: 'jane@example.com', notes: 'First time client' },
  })
  assertEquals(subject, 'New booking: Knotless Braids on 2026-09-01')
  assertStringIncludes(html, 'Jane Doe')
  assertStringIncludes(html, 'Knotless Braids')
  assertStringIncludes(html, '2026-09-01')
  assertStringIncludes(html, '10:00 AM')
  assertStringIncludes(html, '555-0100')
  assertStringIncludes(html, 'jane@example.com')
  assertStringIncludes(html, 'First time client')
})

Deno.test('buildBookingNotificationEmail omits the notes paragraph when notes are empty', () => {
  const { html } = buildBookingNotificationEmail({
    serviceName: 'Cornrows',
    date: '2026-09-02',
    time: '1:00 PM',
    contact: { name: 'Amy', phone: '555-0101', email: 'amy@example.com', notes: '' },
  })
  if (html.includes('Notes:')) throw new Error('expected no Notes: paragraph')
})

Deno.test('buildInquiryNotificationEmail includes the product and contact details', () => {
  const { subject, html } = buildInquiryNotificationEmail({
    productName: 'Silk Edge Control',
    contact: { name: 'Nadia', email: 'nadia@example.com', notes: 'Is this in stock?' },
  })
  assertEquals(subject, 'New inquiry: Silk Edge Control')
  assertStringIncludes(html, 'Nadia')
  assertStringIncludes(html, 'nadia@example.com')
  assertStringIncludes(html, 'Silk Edge Control')
  assertStringIncludes(html, 'Is this in stock?')
})

Deno.test('buildInquiryNotificationEmail omits the notes paragraph when notes are empty', () => {
  const { html } = buildInquiryNotificationEmail({
    productName: 'Braid Oil',
    contact: { name: 'Kim', email: 'kim@example.com', notes: '' },
  })
  if (html.includes('Notes:')) throw new Error('expected no Notes: paragraph')
})

Deno.test('buildBookingNotificationEmail escapes HTML in contact fields so they cannot inject markup', () => {
  const { html } = buildBookingNotificationEmail({
    serviceName: 'Knotless Braids',
    date: '2026-09-01',
    time: '10:00 AM',
    contact: {
      name: '<a href="https://evil.example">Click here</a>',
      phone: '555-0100',
      email: 'jane@example.com',
      notes: '<img src=x onerror=alert(1)>',
    },
  })
  if (html.includes('<a href="https://evil.example">')) throw new Error('expected contact name to be escaped')
  if (html.includes('<img src=x onerror=alert(1)>')) throw new Error('expected notes to be escaped')
  assertStringIncludes(html, '&lt;a href=&quot;https://evil.example&quot;&gt;Click here&lt;/a&gt;')
  assertStringIncludes(html, '&lt;img src=x onerror=alert(1)&gt;')
})

Deno.test('buildInquiryNotificationEmail escapes HTML in contact fields so they cannot inject markup', () => {
  const { html } = buildInquiryNotificationEmail({
    productName: 'Silk Edge Control',
    contact: {
      name: '<script>alert(1)</script>',
      email: 'nadia@example.com',
      notes: '',
    },
  })
  if (html.includes('<script>alert(1)</script>')) throw new Error('expected contact name to be escaped')
  assertStringIncludes(html, '&lt;script&gt;alert(1)&lt;/script&gt;')
})