#!/usr/bin/env bash
set -euo pipefail

repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
help="$("$repo_root/scripts/debug-remote-attach.sh" --help 2>&1)"
grep -Fq -- '--udp-health' <<<"$help"

work="$(mktemp -d)"
trap 'rm -rf "$work"' EXIT
mkdir -p "$work/bin" "$work/state/vev"
printf 'udp health peer=192.0.2.1 home=%s/local\n' "$HOME" >"$work/state/vev/vev-test.log"
cat >"$work/bin/ssh" <<'SSH'
#!/usr/bin/env bash
printf 'udp transport health peer=198.51.100.2 key=ssh-ed25519\nskmem:(r0,rb1,t0,tb1,f0,w0,o0,bl0,d0)\n'
SSH
chmod +x "$work/bin/ssh"

TMPDIR="$work" XDG_STATE_HOME="$work/state" PATH="$work/bin:$PATH" \
  "$repo_root/scripts/debug-remote-attach.sh" --udp-health --duration 0s --vev-bin /bin/true alice@mobile.example.com >"$work/run.out" 2>&1
bundle="$(find "$work" -maxdepth 1 -type d -name 'vev-remote-attach-*' -print -quit)"
test -n "$bundle"
test -f "$bundle/local-after/udp-transport-health.out"
test -f "$bundle/remote-after/udp-socket-memory.out"
grep -Fq "$bundle/remote-after/udp-socket-memory.out" "$work/run.out"
if grep -R --exclude='*.raw' -F -e 'alice@mobile.example.com' -e '192.0.2.1' -e '198.51.100.2' -e 'ssh-ed25519' -e "$HOME/local" "$bundle"; then
  echo 'unredacted diagnostic value found' >&2
  exit 1
fi

echo 'debug-remote-attach diagnostics/redaction: ok'