"""lasuite-docs — INSTALL overlay (Phase 1d, DG4): override + extend-by-composition.

Reuses the generic "really serving" assertion, then ADDS the recipe-specific checks: the multi-service
stack serves over real HTTPS through the gateway, and a real browser loads the live Docs frontend (the
SPA shell). Login is OIDC-gated (no live OIDC provider in CI), so the functional assertion is that the
frontend SPA is served (unauthenticated landing), not an authenticated flow. Assertion-only on the
shared deployment."""

import os
import sys

sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "runner"))
from harness import generic, lifecycle  # noqa: E402


def test_serving_and_frontend(live_app, meta):
    # extend-by-composition: reuse the generic "really serving" assertion first ...
    generic.assert_serving(live_app, meta)

    # ... then the recipe-specific assertions.
    status = lifecycle.http_get(live_app, "/")
    assert status in (200, 301, 302), f"expected 2xx/3xx from {live_app}, got {status}"

    # A real browser loads the live Docs frontend (the SPA shell) over HTTPS.
    from playwright.sync_api import sync_playwright

    url = f"https://{live_app}/"
    with sync_playwright() as p:
        browser = p.chromium.launch(args=["--no-sandbox"])
        try:
            ctx = browser.new_context(ignore_https_errors=True)
            page = ctx.new_page()
            resp = page.goto(url, wait_until="domcontentloaded", timeout=60000)
            assert resp is not None and resp.status in (
                200,
                301,
                302,
            ), f"page status {resp and resp.status}"
            assert "<html" in page.content().lower(), "no HTML served by the frontend"
        finally:
            browser.close()