package client

import (
	"os"
	"path/filepath"
	"strings"
	"testing"
)

func TestSecureWipePathRejectsSystemRoot(t *testing.T) {
	msg := SecureWipePath(`C:\Windows`)
	if !strings.Contains(msg, "protected system path") {
		t.Fatalf("expected blocked path, got %q", msg)
	}
}

func TestSecureWipePathRequiresDirectory(t *testing.T) {
	dir := t.TempDir()
	file := filepath.Join(dir, "one.txt")
	if err := os.WriteFile(file, []byte("secret"), 0o644); err != nil {
		t.Fatal(err)
	}
	msg := SecureWipePath(file)
	if !strings.Contains(msg, "must be a directory") {
		t.Fatalf("expected directory error, got %q", msg)
	}
}

func TestSecureWipePathWipesFiles(t *testing.T) {
	dir := t.TempDir()
	sub := filepath.Join(dir, "wipe_me")
	if err := os.Mkdir(sub, 0o755); err != nil {
		t.Fatal(err)
	}
	if err := os.WriteFile(filepath.Join(sub, "a.txt"), []byte("data"), 0o644); err != nil {
		t.Fatal(err)
	}
	if err := os.WriteFile(filepath.Join(sub, "b.txt"), []byte("more"), 0o644); err != nil {
		t.Fatal(err)
	}
	msg := SecureWipePath(sub)
	if !strings.Contains(msg, "wiped: 2") {
		t.Fatalf("unexpected summary: %q", msg)
	}
	if _, err := os.Stat(sub); !os.IsNotExist(err) {
		t.Fatalf("expected directory removed, stat err=%v", err)
	}
}