from __future__ import annotations

import copy
import json
from pathlib import Path

import pytest

from src.services.ai_agent_result_capture_release_authorization_readback_gate import (
    load_latest_ai_agent_result_capture_release_authorization_readback_gate,
)


def test_load_latest_release_authorization_readback_gate_snapshot() -> None:
    snapshot = load_latest_ai_agent_result_capture_release_authorization_readback_gate()

    assert snapshot["schema_version"] == "ai_agent_result_capture_release_authorization_readback_gate_v1"
    assert snapshot["program_status"]["current_task_id"] == "P2-135"
    assert snapshot["program_status"]["next_task_id"] == "P2-136"
    assert snapshot["program_status"]["overall_completion_percent"] == 100
    assert snapshot["program_status"]["runtime_authority"] == "result_capture_release_authorization_readback_gate_only_no_live_write"

    rollups = snapshot["rollups"]
    assert rollups["release_authorization_readback_count"] == 5
    assert rollups["rollback_release_readback_count"] == 5
    assert rollups["maintenance_window_readback_hold_count"] == 5
    assert rollups["live_apply_release_readback_hold_count"] == 5
    assert rollups["blocked_release_readback_transition_count"] == 6
    assert rollups["operator_action_count"] == 5
    assert (
        rollups["approval_required_authorization_readback_count"]
        + rollups["approval_required_rollback_readback_count"]
        + rollups["approval_required_maintenance_window_count"]
        + rollups["approval_required_live_apply_readback_count"]
    ) == 8
    assert (
        rollups["blocked_authorization_readback_count"]
        + rollups["blocked_rollback_readback_count"]
        + rollups["blocked_maintenance_window_count"]
        + rollups["blocked_live_apply_readback_count"]
        + rollups["critical_blocker_count"]
    ) == 9

    assert rollups["owner_release_authorized_count"] == 0
    assert rollups["release_authorization_granted_count"] == 0
    assert rollups["release_authorization_pass_count"] == 0
    assert rollups["rollback_release_pass_count"] == 0
    assert rollups["live_apply_release_pass_count"] == 0
    assert rollups["writer_apply_count"] == 0
    assert rollups["execution_apply_count"] == 0
    assert rollups["receipt_write_count"] == 0
    assert rollups["reviewer_queue_write_count"] == 0
    assert rollups["gateway_queue_write_count"] == 0
    assert rollups["telegram_send_count"] == 0
    assert rollups["bot_api_call_count"] == 0
    assert rollups["report_receipt_write_count"] == 0
    assert rollups["result_capture_write_count"] == 0
    assert rollups["learning_write_count"] == 0
    assert rollups["playbook_trust_write_count"] == 0
    assert rollups["production_write_count"] == 0


def test_release_authorization_readback_truth_keeps_all_live_paths_closed() -> None:
    snapshot = load_latest_ai_agent_result_capture_release_authorization_readback_gate()
    truth = snapshot["release_authorization_readback_truth"]

    assert truth["p2_134_release_authorization_hold_loaded"] is True
    assert truth["release_authorization_readback_ready"] is True
    assert truth["live_apply_release_readback_hold_active"] is True
    assert truth["owner_release_authorized"] is False
    assert truth["owner_release_approved"] is False
    assert truth["maintenance_window_approved"] is False
    assert truth["rollback_owner_confirmed"] is False
    assert truth["post_release_verifier_ready"] is False
    assert truth["final_release_candidate_approved"] is False
    assert truth["release_authorization_granted"] is False
    assert truth["release_authorization_passed"] is False
    assert truth["rollback_release_passed"] is False
    assert truth["live_apply_release_passed"] is False
    assert truth["writer_apply_enabled"] is False
    assert truth["gateway_queue_write_enabled"] is False
    assert truth["telegram_send_enabled"] is False
    assert truth["production_write_enabled"] is False
    assert truth["secret_read_enabled"] is False
    assert truth["destructive_operation_enabled"] is False


def test_rejects_granted_release_authorization(tmp_path: Path) -> None:
    snapshot = copy.deepcopy(load_latest_ai_agent_result_capture_release_authorization_readback_gate())
    snapshot["release_authorization_readback_truth"]["release_authorization_granted"] = True
    _write_snapshot(tmp_path, snapshot)

    with pytest.raises(ValueError, match="must remain false"):
        load_latest_ai_agent_result_capture_release_authorization_readback_gate(tmp_path)


def test_rejects_live_apply_release_enabled(tmp_path: Path) -> None:
    snapshot = copy.deepcopy(load_latest_ai_agent_result_capture_release_authorization_readback_gate())
    snapshot["live_apply_release_readback_holds"][0]["live_apply_release_enabled"] = True
    _write_snapshot(tmp_path, snapshot)

    with pytest.raises(ValueError, match="must stay unpassed and disabled"):
        load_latest_ai_agent_result_capture_release_authorization_readback_gate(tmp_path)


def test_rejects_rollup_drift(tmp_path: Path) -> None:
    snapshot = copy.deepcopy(load_latest_ai_agent_result_capture_release_authorization_readback_gate())
    snapshot["rollups"]["release_authorization_readback_count"] = 4
    _write_snapshot(tmp_path, snapshot)

    with pytest.raises(ValueError, match="rollups mismatch"):
        load_latest_ai_agent_result_capture_release_authorization_readback_gate(tmp_path)


def test_rejects_forbidden_display_terms(tmp_path: Path) -> None:
    snapshot = copy.deepcopy(load_latest_ai_agent_result_capture_release_authorization_readback_gate())
    snapshot["operator_actions"][0]["operator_instruction"] = "不要顯示 work_window_transcript"
    _write_snapshot(tmp_path, snapshot)

    with pytest.raises(ValueError, match="forbidden display terms leaked"):
        load_latest_ai_agent_result_capture_release_authorization_readback_gate(tmp_path)


def _write_snapshot(directory: Path, payload: dict) -> None:
    path = directory / "ai_agent_result_capture_release_authorization_readback_gate_2099-01-01.json"
    path.write_text(json.dumps(payload, ensure_ascii=False), encoding="utf-8")
