"""lasuite-docs — install stage (recipe #5, multi-service + object-storage/S3). D2 install: the
multi-service stack (frontend + Django backend + celery + y-provider + docspec + postgres + redis +
minio + nginx) converges and serves the app over real HTTPS through the gateway.

Login is OIDC-gated (no live OIDC provider in CI), so the functional assertion is that the frontend
SPA is served (unauthenticated landing), not an authenticated flow."""
import os
import sys

sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "runner"))
from harness import lifecycle  # noqa: E402


def test_http_reachable(deployed_app):
    status = lifecycle.http_get(deployed_app, "/")
    assert status in (200, 301, 302), f"expected 2xx/3xx from {deployed_app}, got {status}"


def test_playwright_loads_frontend(deployed_app):
    """A real browser loads the live Docs frontend (the SPA shell) over HTTPS."""
    from playwright.sync_api import sync_playwright

    url = f"https://{deployed_app}/"
    with sync_playwright() as p:
        browser = p.chromium.launch(args=["--no-sandbox"])
        try:
            ctx = browser.new_context(ignore_https_errors=True)
            page = ctx.new_page()
            resp = page.goto(url, wait_until="domcontentloaded", timeout=60000)
            assert resp is not None and resp.status in (200, 301, 302), f"page status {resp and resp.status}"
            assert "<html" in page.content().lower(), "no HTML served by the frontend"
        finally:
            browser.close()