//
//  DailyNotificationRecoveryTests.swift
//  DailyNotificationPluginTests
//
//  Created by Matthew Raymer on 2025-12-16
//  Copyright © 2025 TimeSafari. All rights reserved.
//

import XCTest
import UserNotifications
@testable import DailyNotificationPlugin

/**
 * Recovery tests for invalid data handling and rollover idempotency
 * 
 * Tests recovery scenarios equivalent to Android TEST 4:
 * - Invalid/corrupt records don't crash recovery
 * - Duplicate delivery events are deduped
 * - Rollover is idempotent (can be called multiple times safely)
 * - Cold-start recovery reconciles state correctly
 * - Migration safety (unknown fields don't crash)
 */
class DailyNotificationRecoveryTests: XCTestCase {
    
    var database: DailyNotificationDatabase!
    var storage: DailyNotificationStorage!
    var scheduler: DailyNotificationScheduler!
    var reactivationManager: DailyNotificationReactivationManager!
    var notificationCenter: UNUserNotificationCenter!
    var testDbPath: String!
    
    override func setUp() {
        super.setUp()
        
        // Create clean test database
        let (db, path) = TestDBFactory.createCleanDatabase()
        database = db
        testDbPath = path
        storage = DailyNotificationStorage(databasePath: path)
        scheduler = DailyNotificationScheduler()
        notificationCenter = UNUserNotificationCenter.current()
        
        reactivationManager = DailyNotificationReactivationManager(
            database: database,
            storage: storage,
            scheduler: scheduler
        )
        
        // Clear UserDefaults
        UserDefaults.standard.removeObject(forKey: "DNP_LAST_LAUNCH_TIME")
        
        // Clear pending notifications
        let expectation = XCTestExpectation(description: "Clear notifications")
        notificationCenter.removeAllPendingNotificationRequests { _ in
            expectation.fulfill()
        }
        wait(for: [expectation], timeout: 2.0)
    }
    
    override func tearDown() {
        reactivationManager = nil
        scheduler = nil
        storage = nil
        database = nil
        notificationCenter = nil
        
        // Clean up test database
        if let path = testDbPath {
            TestDBFactory.cleanupDatabase(path: path)
        }
        
        UserDefaults.standard.removeObject(forKey: "DNP_LAST_LAUNCH_TIME")
        
        super.tearDown()
    }
    
    // MARK: - Invalid Records Tests
    
    /**
     * Test that recovery ignores invalid records and continues
     * 
     * Equivalent to Android TEST 4: Invalid Data Handling
     */
    func test_recovery_ignores_invalid_records_and_continues() async throws {
        // Given: Database with invalid records
        TestDBFactory.injectInvalidNotificationRecord(
            database: database,
            id: "", // Empty ID
            scheduledTime: -1, // Invalid time
            payloadJSON: "invalid json {" // Invalid JSON
        )
        
        TestDBFactory.injectInvalidNotificationRecord(
            database: database,
            id: "test_null_time",
            scheduledTime: 0, // Zero time
            payloadJSON: "{\"title\":\"Test\"}" // Valid JSON but missing fields
        )
        
        // Also inject a valid record to ensure recovery continues
        let validNotification = NotificationContent(
            id: UUID().uuidString,
            title: "Valid Notification",
            body: "Valid Body",
            scheduledTime: Int64(Date().addingTimeInterval(3600).timeIntervalSince1970 * 1000),
            fetchedAt: Int64(Date().timeIntervalSince1970 * 1000),
            url: nil,
            payload: nil,
            etag: nil
        )
        storage.saveNotificationContent(validNotification)
        
        // When: Perform recovery
        let expectation = XCTestExpectation(description: "Recovery with invalid records")
        reactivationManager.performRecovery()
        
        DispatchQueue.main.asyncAfter(deadline: .now() + 3.0) {
            expectation.fulfill()
        }
        await fulfillment(of: [expectation], timeout: 5.0)
        
        // Then: App should not crash, recovery should complete
        XCTAssertTrue(true, "Recovery should complete without crashing on invalid records")
        
        // Verify valid notification can still be retrieved
        let retrieved = storage.getNotificationContent(id: validNotification.id)
        XCTAssertNotNil(retrieved, "Valid notification should still be retrievable")
        XCTAssertEqual(retrieved?.id, validNotification.id, "Valid notification ID should match")
    }
    
    /**
     * Test recovery with null/empty required fields
     */
    func test_recovery_handles_null_fields() async throws {
        // Given: Database with null fields
        TestDBFactory.injectNotificationWithNullFields(database: database)
        
        // When: Perform recovery
        let expectation = XCTestExpectation(description: "Recovery with null fields")
        reactivationManager.performRecovery()
        
        DispatchQueue.main.asyncAfter(deadline: .now() + 2.0) {
            expectation.fulfill()
        }
        await fulfillment(of: [expectation], timeout: 3.0)
        
        // Then: App should not crash
        XCTAssertTrue(true, "Recovery should handle null fields gracefully")
    }
    
    // MARK: - Duplicate Delivery Tests
    
    /**
     * Test that duplicate delivery events are deduped
     * 
     * Simulates two delivery events arriving close together
     * Tests the rollover idempotency mechanism
     */
    func test_recovery_dedupes_duplicate_delivery_events() async throws {
        // Given: A notification that was just delivered
        let notificationId = UUID().uuidString
        let pastTime = Int64(Date().addingTimeInterval(-3600).timeIntervalSince1970 * 1000) // 1 hour ago
        let notification = NotificationContent(
            id: notificationId,
            title: "Test Notification",
            body: "Test Body",
            scheduledTime: pastTime,
            fetchedAt: Int64(Date().timeIntervalSince1970 * 1000),
            url: nil,
            payload: nil,
            etag: nil
        )
        storage.saveNotificationContent(notification)
        
        // When: Simulate duplicate delivery events by calling rollover directly twice
        // (Testing the rollover logic directly, which is what handles duplicate deliveries)
        let firstRollover = await scheduler.scheduleNextNotification(
            notification,
            storage: storage,
            fetcher: nil
        )
        
        // Wait a very short time (simulating rapid duplicate delivery)
        try await Task.sleep(nanoseconds: 50_000_000) // 0.05 seconds
        
        // Call rollover again immediately (simulating duplicate delivery)
        let secondRollover = await scheduler.scheduleNextNotification(
            notification,
            storage: storage,
            fetcher: nil
        )
        
        // Then: Check that rollover is idempotent (second call should be skipped)
        // The rollover state tracking should prevent duplicate scheduling
        XCTAssertTrue(true, "Rollover should handle duplicate calls idempotently")
        
        // Verify only one next notification was scheduled
        let pendingNotifications = try await notificationCenter.pendingNotificationRequests()
        let nextDayTime = pastTime + (24 * 60 * 60 * 1000) // 24 hours later
        let rolloverCount = pendingNotifications.filter { request in
            if let trigger = request.trigger as? UNCalendarNotificationTrigger,
               let nextDate = trigger.nextTriggerDate() {
                let pendingTime = Int64(nextDate.timeIntervalSince1970 * 1000)
                // Allow 1 minute tolerance for DST
                return abs(pendingTime - nextDayTime) < (60 * 1000)
            }
            return false
        }.count
        
        // Should have at most 1 rollover notification (idempotency check)
        XCTAssertLessThanOrEqual(rolloverCount, 1, 
                                "Duplicate rollover calls should result in at most one next notification")
    }
    
    // MARK: - Rollover Idempotency Tests
    
    /**
     * Test that rollover is idempotent when called multiple times
     * 
     * Equivalent to Android TEST 0: Daily Rollover Verification
     */
    func test_recovery_rollover_idempotent_when_called_twice() async throws {
        // Given: A notification that was just delivered
        let notificationId = UUID().uuidString
        let pastTime = Int64(Date().addingTimeInterval(-3600).timeIntervalSince1970 * 1000) // 1 hour ago
        let notification = NotificationContent(
            id: notificationId,
            title: "Delivered Notification",
            body: "This was delivered",
            scheduledTime: pastTime,
            fetchedAt: Int64(Date().timeIntervalSince1970 * 1000),
            url: nil,
            payload: nil,
            etag: nil
        )
        storage.saveNotificationContent(notification)
        
        // When: Call scheduleNextNotification twice (simulating duplicate rollover attempts)
        let firstCall = await scheduler.scheduleNextNotification(
            notification,
            storage: storage,
            fetcher: nil
        )
        
        // Wait a bit
        try await Task.sleep(nanoseconds: 100_000_000) // 0.1 seconds
        
        // Call again immediately (should be idempotent)
        let secondCall = await scheduler.scheduleNextNotification(
            notification,
            storage: storage,
            fetcher: nil
        )
        
        // Then: Second call should be skipped (idempotency)
        // First call may succeed, second should be skipped due to rollover state tracking
        XCTAssertTrue(true, "Rollover should be idempotent - second call should be skipped")
        
        // Verify only one next notification was scheduled
        let pendingNotifications = try await notificationCenter.pendingNotificationRequests()
        let nextDayTime = pastTime + (24 * 60 * 60 * 1000) // 24 hours later
        let rolloverCount = pendingNotifications.filter { request in
            if let trigger = request.trigger as? UNCalendarNotificationTrigger,
               let nextDate = trigger.nextTriggerDate() {
                let pendingTime = Int64(nextDate.timeIntervalSince1970 * 1000)
                return abs(pendingTime - nextDayTime) < (60 * 1000) // 1 minute tolerance
            }
            return false
        }.count
        
        XCTAssertLessThanOrEqual(rolloverCount, 1, 
                                "Rollover should be idempotent - only one next notification should be scheduled")
    }
    
    // MARK: - Cold Start Recovery Tests
    
    /**
     * Test recovery after cold start reconciles state correctly
     */
    func test_recovery_after_cold_start_reconciles_state() async throws {
        // Given: Notifications in storage but not in system (simulating cold start)
        let notification1 = NotificationContent(
            id: UUID().uuidString,
            title: "Notification 1",
            body: "Body 1",
            scheduledTime: Int64(Date().addingTimeInterval(3600).timeIntervalSince1970 * 1000),
            fetchedAt: Int64(Date().timeIntervalSince1970 * 1000),
            url: nil,
            payload: nil,
            etag: nil
        )
        
        let notification2 = NotificationContent(
            id: UUID().uuidString,
            title: "Notification 2",
            body: "Body 2",
            scheduledTime: Int64(Date().addingTimeInterval(7200).timeIntervalSince1970 * 1000),
            fetchedAt: Int64(Date().timeIntervalSince1970 * 1000),
            url: nil,
            payload: nil,
            etag: nil
        )
        
        storage.saveNotificationContent(notification1)
        storage.saveNotificationContent(notification2)
        
        // Verify notifications are NOT in system (cold start scenario)
        let pendingBefore = try await notificationCenter.pendingNotificationRequests()
        let foundBefore = pendingBefore.contains { $0.identifier == notification1.id || $0.identifier == notification2.id }
        XCTAssertFalse(foundBefore, "Notifications should not be in system before recovery")
        
        // When: Perform recovery (simulating app launch after cold start)
        let expectation = XCTestExpectation(description: "Cold start recovery")
        reactivationManager.performRecovery()
        
        DispatchQueue.main.asyncAfter(deadline: .now() + 3.0) {
            expectation.fulfill()
        }
        await fulfillment(of: [expectation], timeout: 5.0)
        
        // Then: Notifications should be rescheduled (recovery should reconcile)
        let pendingAfter = try await notificationCenter.pendingNotificationRequests()
        
        // Recovery may or may not succeed depending on permissions, but app shouldn't crash
        XCTAssertNoThrow(pendingAfter, "Recovery should complete without crashing")
        
        // If recovery succeeded, notifications should be rescheduled
        let foundAfter = pendingAfter.contains { $0.identifier == notification1.id || $0.identifier == notification2.id }
        // Note: Recovery may fail due to permissions, but we verify it doesn't crash
        XCTAssertTrue(true, "Recovery should attempt to reschedule notifications")
    }
    
    // MARK: - Migration Safety Tests
    
    /**
     * Test that unknown/missing fields don't crash decode/load paths
     * 
     * Minimum viable migration safety test
     */
    func test_recovery_migration_safety_unknown_fields() async throws {
        // Given: Database with records that have unknown/missing fields
        // We simulate this by injecting records with minimal data
        TestDBFactory.injectInvalidNotificationRecord(
            database: database,
            id: "migration_test_1",
            scheduledTime: Int64(Date().timeIntervalSince1970 * 1000),
            payloadJSON: "{\"title\":\"Test\"}" // Missing 'body' field
        )
        
        TestDBFactory.injectInvalidNotificationRecord(
            database: database,
            id: "migration_test_2",
            scheduledTime: Int64(Date().timeIntervalSince1970 * 1000),
            payloadJSON: "{}" // Empty payload
        )
        
        // When: Try to retrieve notifications (simulating migration/load)
        // Storage should handle missing fields gracefully
        let allNotifications = storage.getAllNotifications()
        
        // Then: App should not crash, should handle missing fields
        XCTAssertNoThrow(allNotifications, "Storage should handle missing fields without crashing")
        
        // Recovery should also handle these gracefully
        let expectation = XCTestExpectation(description: "Migration safety recovery")
        reactivationManager.performRecovery()
        
        DispatchQueue.main.asyncAfter(deadline: .now() + 2.0) {
            expectation.fulfill()
        }
        await fulfillment(of: [expectation], timeout: 3.0)
        
        XCTAssertTrue(true, "Recovery should handle unknown/missing fields gracefully")
    }
    
    // MARK: - Combined Edge Case Tests (P2.2)
    
    /**
     * @resilience @combined-scenarios
     * 
     * Test Scenario A: DST boundary + duplicate delivery + cold start
     * 
     * Simulates a "worst plausible day" where scheduling and recovery must be
     * correct under multiple stressors:
     * - Notification scheduled at DST boundary
     * - Duplicate delivery events arrive
     * - App cold starts during recovery
     * 
     * Acceptance checks:
     * - Recovery is idempotent (running twice yields identical state)
     * - Only one logical delivery is recorded after dedupe
     * - Next scheduled notification time is consistent with DST boundary logic
     * - No crash, no invalid state written
     */
    func test_combined_dst_boundary_duplicate_delivery_cold_start() async throws {
        // Given: Notification scheduled at DST boundary (spring forward scenario)
        // Use a date that's close to DST transition (March 10, 2024 2:00 AM EST -> 3:00 AM EDT)
        let calendar = Calendar.current
        var dstBoundaryComponents = DateComponents()
        dstBoundaryComponents.year = 2024
        dstBoundaryComponents.month = 3
        dstBoundaryComponents.day = 10
        dstBoundaryComponents.hour = 2
        dstBoundaryComponents.minute = 0
        dstBoundaryComponents.timeZone = TimeZone(identifier: "America/New_York")
        
        guard let dstBoundaryDate = calendar.date(from: dstBoundaryComponents) else {
            XCTFail("Failed to create DST boundary date")
            return
        }
        
        let dstBoundaryTime = Int64(dstBoundaryDate.timeIntervalSince1970 * 1000)
        let notificationId = UUID().uuidString
        
        let notification = NotificationContent(
            id: notificationId,
            title: "DST Boundary Test",
            body: "Testing DST + duplicate + cold start",
            scheduledTime: dstBoundaryTime,
            fetchedAt: Int64(Date().timeIntervalSince1970 * 1000),
            url: nil,
            payload: nil,
            etag: nil
        )
        storage.saveNotificationContent(notification)
        
        // When: Simulate duplicate delivery events (rapid succession)
        // First delivery triggers rollover
        let firstRollover = await scheduler.scheduleNextNotification(
            notification,
            storage: storage,
            fetcher: nil
        )
        
        // Simulate duplicate delivery arriving immediately (within dedupe window)
        try await Task.sleep(nanoseconds: 50_000_000) // 0.05 seconds
        
        let secondRollover = await scheduler.scheduleNextNotification(
            notification,
            storage: storage,
            fetcher: nil
        )
        
        // Then: Verify only one next notification was scheduled (deduplication)
        let pendingAfterRollover = try await notificationCenter.pendingNotificationRequests()
        let nextDayTime = scheduler.calculateNextScheduledTime(dstBoundaryTime)
        
        let rolloverCount = pendingAfterRollover.filter { request in
            if let trigger = request.trigger as? UNCalendarNotificationTrigger,
               let nextDate = trigger.nextTriggerDate() {
                let pendingTime = Int64(nextDate.timeIntervalSince1970 * 1000)
                // Allow 1 minute tolerance for DST
                return abs(pendingTime - nextDayTime) < (60 * 1000)
            }
            return false
        }.count
        
        XCTAssertLessThanOrEqual(rolloverCount, 1,
                                "Duplicate delivery should result in at most one next notification")
        
        // When: Simulate cold start (clear system notifications, keep storage)
        let expectation = XCTestExpectation(description: "Cold start recovery")
        notificationCenter.removeAllPendingNotificationRequests { _ in
            expectation.fulfill()
        }
        await fulfillment(of: [expectation], timeout: 2.0)
        
        // Perform recovery (simulating app launch after cold start)
        reactivationManager.performRecovery()
        
        let recoveryExpectation = XCTestExpectation(description: "Recovery after cold start")
        DispatchQueue.main.asyncAfter(deadline: .now() + 3.0) {
            recoveryExpectation.fulfill()
        }
        await fulfillment(of: [recoveryExpectation], timeout: 5.0)
        
        // Then: Recovery should be idempotent (run again, should produce same state)
        reactivationManager.performRecovery()
        
        let secondRecoveryExpectation = XCTestExpectation(description: "Second recovery (idempotency)")
        DispatchQueue.main.asyncAfter(deadline: .now() + 3.0) {
            secondRecoveryExpectation.fulfill()
        }
        await fulfillment(of: [secondRecoveryExpectation], timeout: 5.0)
        
        let pendingAfterRecovery = try await notificationCenter.pendingNotificationRequests()
        
        // Verify recovery didn't crash and state is consistent
        XCTAssertNoThrow(pendingAfterRecovery,
                        "Recovery should complete without crashing under DST + duplicate + cold start")
        
        // Verify next notification time is DST-consistent (should be ~24 hours later, accounting for DST)
        let finalRolloverCount = pendingAfterRecovery.filter { request in
            if let trigger = request.trigger as? UNCalendarNotificationTrigger,
               let nextDate = trigger.nextTriggerDate() {
                let pendingTime = Int64(nextDate.timeIntervalSince1970 * 1000)
                // Allow 1 minute tolerance for DST
                return abs(pendingTime - nextDayTime) < (60 * 1000)
            }
            return false
        }.count
        
        // Should have at most one notification (idempotency)
        XCTAssertLessThanOrEqual(finalRolloverCount, 1,
                                "Recovery should be idempotent - only one next notification after duplicate + cold start")
    }
    
    /**
     * @resilience @combined-scenarios
     * 
     * Test Scenario B: Rollover + duplicate delivery + cold start
     * 
     * Validates that rollover logic is robust when combined with:
     * - Duplicate delivery events
     * - App restart during recovery
     * 
     * Acceptance checks:
     * - Rollover is idempotent under re-entry
     * - Duplicate delivery does not double-apply state transitions
     * - Cold start reconciliation produces correct "current day" / "next" state
     */
    func test_combined_rollover_duplicate_delivery_cold_start() async throws {
        // Given: A notification that was just delivered (past time)
        let notificationId = UUID().uuidString
        let pastTime = Int64(Date().addingTimeInterval(-3600).timeIntervalSince1970 * 1000) // 1 hour ago
        
        let notification = NotificationContent(
            id: notificationId,
            title: "Rollover Test",
            body: "Testing rollover + duplicate + cold start",
            scheduledTime: pastTime,
            fetchedAt: Int64(Date().timeIntervalSince1970 * 1000),
            url: nil,
            payload: nil,
            etag: nil
        )
        storage.saveNotificationContent(notification)
        
        // When: Trigger rollover (first delivery)
        let firstRollover = await scheduler.scheduleNextNotification(
            notification,
            storage: storage,
            fetcher: nil
        )
        
        // Simulate duplicate delivery arriving immediately
        try await Task.sleep(nanoseconds: 50_000_000) // 0.05 seconds
        
        // Trigger rollover again (duplicate delivery)
        let secondRollover = await scheduler.scheduleNextNotification(
            notification,
            storage: storage,
            fetcher: nil
        )
        
        // Verify rollover state tracking prevents duplicate
        let pendingAfterDuplicate = try await notificationCenter.pendingNotificationRequests()
        let nextDayTime = pastTime + (24 * 60 * 60 * 1000) // 24 hours later
        
        let duplicateCount = pendingAfterDuplicate.filter { request in
            if let trigger = request.trigger as? UNCalendarNotificationTrigger,
               let nextDate = trigger.nextTriggerDate() {
                let pendingTime = Int64(nextDate.timeIntervalSince1970 * 1000)
                return abs(pendingTime - nextDayTime) < (60 * 1000) // 1 minute tolerance
            }
            return false
        }.count
        
        XCTAssertLessThanOrEqual(duplicateCount, 1,
                                "Duplicate rollover should result in at most one next notification")
        
        // When: Simulate cold start (clear system, keep storage)
        let clearExpectation = XCTestExpectation(description: "Clear notifications for cold start")
        notificationCenter.removeAllPendingNotificationRequests { _ in
            clearExpectation.fulfill()
        }
        await fulfillment(of: [clearExpectation], timeout: 2.0)
        
        // Perform recovery (simulating app launch)
        reactivationManager.performRecovery()
        
        let recoveryExpectation = XCTestExpectation(description: "Recovery after rollover + duplicate")
        DispatchQueue.main.asyncAfter(deadline: .now() + 3.0) {
            recoveryExpectation.fulfill()
        }
        await fulfillment(of: [recoveryExpectation], timeout: 5.0)
        
        // Then: Verify rollover state is correctly reconciled
        let pendingAfterRecovery = try await notificationCenter.pendingNotificationRequests()
        
        // Recovery should reconcile state correctly
        XCTAssertNoThrow(pendingAfterRecovery,
                        "Recovery should complete without crashing after rollover + duplicate + cold start")
        
        // Verify rollover idempotency: run recovery again, should produce same state
        reactivationManager.performRecovery()
        
        let secondRecoveryExpectation = XCTestExpectation(description: "Second recovery (idempotency check)")
        DispatchQueue.main.asyncAfter(deadline: .now() + 3.0) {
            secondRecoveryExpectation.fulfill()
        }
        await fulfillment(of: [secondRecoveryExpectation], timeout: 5.0)
        
        let pendingAfterSecondRecovery = try await notificationCenter.pendingNotificationRequests()
        
        // Should have consistent state (idempotency)
        let finalCount = pendingAfterSecondRecovery.filter { request in
            if let trigger = request.trigger as? UNCalendarNotificationTrigger,
               let nextDate = trigger.nextTriggerDate() {
                let pendingTime = Int64(nextDate.timeIntervalSince1970 * 1000)
                return abs(pendingTime - nextDayTime) < (60 * 1000)
            }
            return false
        }.count
        
        XCTAssertLessThanOrEqual(finalCount, 1,
                                "Rollover + duplicate + cold start recovery should be idempotent")
        
        // Verify state is correct: should have next day notification, not duplicate current day
        let currentTime = Int64(Date().timeIntervalSince1970 * 1000)
        let hasFutureNotification = pendingAfterSecondRecovery.contains { request in
            if let trigger = request.trigger as? UNCalendarNotificationTrigger,
               let nextDate = trigger.nextTriggerDate() {
                let pendingTime = Int64(nextDate.timeIntervalSince1970 * 1000)
                return pendingTime > currentTime // Should be in the future
            }
            return false
        }
        
        XCTAssertTrue(hasFutureNotification || finalCount == 0,
                     "Recovery should produce correct 'next day' state, not duplicate current day")
    }
    
    /**
     * @resilience @combined-scenarios
     * 
     * Test Scenario C: Schema version metadata + cold start recovery
     * 
     * Confirms that P2.1's schema version metadata:
     * - Is present when CoreData store is initialized
     * - Is logged during initialization
     * - Does not interfere with recovery logic
     * 
     * Acceptance checks:
     * - Store metadata includes schema version when initialized
     * - Version check logs but does not gate
     * - Recovery works exactly the same with version metadata present
     */
    func test_combined_schema_version_cold_start_recovery() async throws {
        // Given: CoreData store with schema version metadata (from P2.1)
        // The PersistenceController should have set schema_version metadata on init
        let persistenceController = PersistenceController.shared
        
        // Verify schema version metadata is present (if CoreData is available)
        if persistenceController.isAvailable,
           let store = persistenceController.container?.persistentStoreCoordinator.persistentStores.first {
            let schemaVersion = store.metadata["schema_version"] as? Int
            XCTAssertNotNil(schemaVersion,
                          "Schema version metadata should be present in CoreData store")
            
            if let version = schemaVersion {
                XCTAssertEqual(version, 1,
                             "Schema version should be 1 (current version)")
                print("DNP-TEST: Schema version metadata verified: \(version)")
            }
        }
        
        // Given: Notifications in storage (simulating cold start scenario)
        let notification = NotificationContent(
            id: UUID().uuidString,
            title: "Schema Version Test",
            body: "Testing schema version + cold start",
            scheduledTime: Int64(Date().addingTimeInterval(3600).timeIntervalSince1970 * 1000),
            fetchedAt: Int64(Date().timeIntervalSince1970 * 1000),
            url: nil,
            payload: nil,
            etag: nil
        )
        storage.saveNotificationContent(notification)
        
        // When: Perform recovery (schema version check should run during init, not block)
        let expectation = XCTestExpectation(description: "Recovery with schema version metadata")
        reactivationManager.performRecovery()
        
        DispatchQueue.main.asyncAfter(deadline: .now() + 3.0) {
            expectation.fulfill()
        }
        await fulfillment(of: [expectation], timeout: 5.0)
        
        // Then: Recovery should work exactly the same (schema version doesn't interfere)
        let pendingNotifications = try await notificationCenter.pendingNotificationRequests()
        
        XCTAssertNoThrow(pendingNotifications,
                        "Recovery should work identically with schema version metadata present")
        
        // Verify recovery didn't crash and state is correct
        XCTAssertTrue(true,
                     "Schema version metadata should not interfere with recovery logic")
        
        // Verify version logging occurred (check console output would show version log)
        // This is a smoke test - actual logging verification would require capturing stdout
        print("DNP-TEST: Schema version check should have logged during PersistenceController init")
    }
}