{
  config,
  lib,
  pkgs,
  ...
}:
let
  testPkgs = pkgs.appendOverlays [ (import ../modules/overlays.nix) ];
in
testPkgs.testers.runNixOSTest {
  name = "arr-init";

  nodes.machine =
    { pkgs, ... }:
    {
      imports = [
        ../modules/arr-init.nix
      ];

      system.stateVersion = config.system.stateVersion;

      virtualisation.memorySize = 2048;

      environment.systemPackages = with pkgs; [
        curl
        jq
        gnugrep
      ];

      systemd.services.mock-qbittorrent =
        let
          mockQbitScript = pkgs.writeScript "mock-qbittorrent.py" ''
            import json
            from http.server import HTTPServer, BaseHTTPRequestHandler
            from urllib.parse import parse_qs, urlparse


            CATEGORIES = {
                "tv": {"name": "tv", "savePath": "/downloads"},
                "movies": {"name": "movies", "savePath": "/downloads"},
            }


            class QBitMock(BaseHTTPRequestHandler):
                def _respond(self, code=200, body=b"Ok.", content_type="text/plain"):
                    self.send_response(code)
                    self.send_header("Content-Type", content_type)
                    self.send_header("Set-Cookie", "SID=mock_session_id; Path=/")
                    self.end_headers()
                    self.wfile.write(body if isinstance(body, bytes) else body.encode())

                def do_GET(self):
                    path = self.path.split("?")[0]
                    if path == "/api/v2/app/webapiVersion":
                        self._respond(body=b"2.9.3")
                    elif path == "/api/v2/app/version":
                        self._respond(body=b"v5.0.0")
                    elif path == "/api/v2/torrents/info":
                        self._respond(body=b"[]", content_type="application/json")
                    elif path == "/api/v2/torrents/categories":
                        body = json.dumps(CATEGORIES).encode()
                        self._respond(body=body, content_type="application/json")
                    elif path == "/api/v2/app/preferences":
                        body = json.dumps({"save_path": "/tmp"}).encode()
                        self._respond(body=body, content_type="application/json")
                    else:
                        self._respond()

                def do_POST(self):
                    content_length = int(self.headers.get("Content-Length", 0))
                    body = self.rfile.read(content_length).decode()
                    path = urlparse(self.path).path
                    query = parse_qs(urlparse(self.path).query)
                    form = parse_qs(body)
                    params = {**query, **form}
                    if path == "/api/v2/torrents/createCategory":
                        name = params.get("category", [""])[0]
                        save_path = params.get("savePath", params.get("save_path", [""]))[0] or "/downloads"
                        if name:
                            CATEGORIES[name] = {"name": name, "savePath": save_path}
                    if path in ["/api/v2/torrents/editCategory", "/api/v2/torrents/removeCategory"]:
                        self._respond()
                        return
                    self._respond()

                def log_message(self, format, *args):
                    pass


            HTTPServer(("0.0.0.0", 6011), QBitMock).serve_forever()
          '';
        in
        {
          description = "Mock qBittorrent API";
          wantedBy = [ "multi-user.target" ];
          before = [
            "sonarr-init.service"
            "radarr-init.service"
          ];
          serviceConfig = {
            ExecStart = "${pkgs.python3}/bin/python3 ${mockQbitScript}";
            Type = "simple";
          };
        };

      systemd.tmpfiles.rules = [
        "d /media/tv 0755 sonarr sonarr -"
        "d /media/movies 0755 radarr radarr -"
      ];

      services.sonarr = {
        enable = true;
        dataDir = "/var/lib/sonarr/.config/NzbDrone";
        settings.server.port = lib.mkDefault 8989;
      };

      services.radarr = {
        enable = true;
        dataDir = "/var/lib/radarr/.config/Radarr";
        settings.server.port = lib.mkDefault 7878;
      };

      services.arrInit.sonarr = {
        enable = true;
        serviceName = "sonarr";
        dataDir = "/var/lib/sonarr/.config/NzbDrone";
        port = 8989;
        downloadClients = [
          {
            name = "qBittorrent";
            implementation = "QBittorrent";
            configContract = "QBittorrentSettings";
            protocol = "torrent";
            fields = {
              host = "127.0.0.1";
              port = 6011;
              useSsl = false;
              tvCategory = "tv";
            };
          }
        ];
        rootFolders = [ "/media/tv" ];
      };

      services.arrInit.radarr = {
        enable = true;
        serviceName = "radarr";
        dataDir = "/var/lib/radarr/.config/Radarr";
        port = 7878;
        downloadClients = [
          {
            name = "qBittorrent";
            implementation = "QBittorrent";
            configContract = "QBittorrentSettings";
            protocol = "torrent";
            fields = {
              host = "127.0.0.1";
              port = 6011;
              useSsl = false;
              movieCategory = "movies";
            };
          }
        ];
        rootFolders = [ "/media/movies" ];
      };
    };

  testScript = ''
    start_all()

    # Wait for services to start
    machine.wait_for_unit("mock-qbittorrent.service")
    machine.wait_until_succeeds("curl -sf http://localhost:6011/api/v2/app/version", timeout=30)
    machine.wait_for_unit("sonarr.service")
    machine.wait_for_unit("radarr.service")

    # Wait for Sonarr API to be ready (config.xml is auto-generated on first start)
    machine.wait_until_succeeds(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
        "curl -sf http://localhost:8989/api/v3/system/status -H \"X-Api-Key: $API_KEY\"",
        timeout=120,
    )

    # Wait for Radarr API to be ready
    machine.wait_until_succeeds(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/radarr/.config/Radarr/config.xml) && "
        "curl -sf http://localhost:7878/api/v3/system/status -H \"X-Api-Key: $API_KEY\"",
        timeout=120,
    )

    # Ensure init services run after config.xml exists
    machine.succeed("systemctl restart sonarr-init.service")
    machine.succeed("systemctl restart radarr-init.service")
    machine.wait_for_unit("sonarr-init.service")
    machine.wait_for_unit("radarr-init.service")

    # Wait for init services to complete
    machine.wait_for_unit("sonarr-init.service")
    machine.wait_for_unit("radarr-init.service")

    # Verify Sonarr download clients
    machine.succeed(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
        "curl -sf http://localhost:8989/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
        "jq -e '.[] | select(.name == \"qBittorrent\")'"
    )

    # Verify Sonarr root folders
    machine.succeed(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
        "curl -sf http://localhost:8989/api/v3/rootfolder -H \"X-Api-Key: $API_KEY\" | "
        "jq -e '.[] | select(.path == \"/media/tv\")'"
    )

    # Verify Radarr download clients
    machine.succeed(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/radarr/.config/Radarr/config.xml) && "
        "curl -sf http://localhost:7878/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
        "jq -e '.[] | select(.name == \"qBittorrent\")'"
    )

    # Verify Radarr root folders
    machine.succeed(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/radarr/.config/Radarr/config.xml) && "
        "curl -sf http://localhost:7878/api/v3/rootfolder -H \"X-Api-Key: $API_KEY\" | "
        "jq -e '.[] | select(.path == \"/media/movies\")'"
    )

    # Idempotency test: restart init services and verify no duplicate entries
    machine.succeed("systemctl restart sonarr-init.service")
    machine.succeed("systemctl restart radarr-init.service")

    # Verify Sonarr still has exactly 1 download client
    result = machine.succeed(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
        "curl -sf http://localhost:8989/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
        "jq '. | length'"
    ).strip()
    assert result == "1", f"Expected 1 Sonarr download client, got {result}"

    # Verify Sonarr still has exactly 1 root folder
    result = machine.succeed(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/sonarr/.config/NzbDrone/config.xml) && "
        "curl -sf http://localhost:8989/api/v3/rootfolder -H \"X-Api-Key: $API_KEY\" | "
        "jq '. | length'"
    ).strip()
    assert result == "1", f"Expected 1 Sonarr root folder, got {result}"

    # Verify Radarr still has exactly 1 download client
    result = machine.succeed(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/radarr/.config/Radarr/config.xml) && "
        "curl -sf http://localhost:7878/api/v3/downloadclient -H \"X-Api-Key: $API_KEY\" | "
        "jq '. | length'"
    ).strip()
    assert result == "1", f"Expected 1 Radarr download client, got {result}"

    # Verify Radarr still has exactly 1 root folder
    result = machine.succeed(
        "API_KEY=$(grep -oP '(?<=<ApiKey>)[^<]+' /var/lib/radarr/.config/Radarr/config.xml) && "
        "curl -sf http://localhost:7878/api/v3/rootfolder -H \"X-Api-Key: $API_KEY\" | "
        "jq '. | length'"
    ).strip()
    assert result == "1", f"Expected 1 Radarr root folder, got {result}"
  '';
}