"""Tests de los routers /api/policies y /api/violations."""

from datetime import UTC, datetime
from pathlib import Path
from uuid import uuid4

import pytest
from fastapi.testclient import TestClient

from forja_core.api import deps
from forja_core.api.persistence import append_violation
from forja_core.domain.guardrail import GuardrailViolation
from forja_core.main import create_app

FIXTURES = Path(__file__).parent.parent / "fixtures"


@pytest.fixture(autouse=True)
def patch_settings(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None:
    monkeypatch.setenv("DATA_DIR", str(tmp_path))
    monkeypatch.setenv("AGENTS_DIR", str(FIXTURES / "agents"))
    monkeypatch.setenv("POLICIES_DIR", str(FIXTURES / "policies"))
    for fn in (
        deps.get_settings,
        deps.get_registry,
        deps.get_policy_store,
        deps.get_orchestrator,
        deps.get_llm_provider,
        deps.get_guardrail_engine,
    ):
        fn.cache_clear()


@pytest.fixture
def client() -> TestClient:
    return TestClient(create_app())


def test_list_policies_incluye_default(client: TestClient) -> None:
    r = client.get("/api/policies")
    assert r.status_code == 200
    assert any(p["name"] == "default" for p in r.json())


def test_list_policy_versions(client: TestClient) -> None:
    r = client.get("/api/policies/default/versions")
    assert r.status_code == 200
    assert r.json()[0]["id"] == "v1"


def test_list_policy_versions_inexistente_404(client: TestClient) -> None:
    r = client.get("/api/policies/inexistente/versions")
    assert r.status_code == 404


def test_violations_vacio_si_no_hay(client: TestClient) -> None:
    r = client.get("/api/violations")
    assert r.status_code == 200
    assert r.json() == []


def _violation(trace_id: object, validator: str, severity: str, blocked: bool) -> GuardrailViolation:
    return GuardrailViolation(
        trace_id=trace_id,  # type: ignore[arg-type]
        timestamp=datetime.now(UTC),
        stage="input",
        validator=validator,
        severity=severity,  # type: ignore[arg-type]
        message="m",
        blocked=blocked,
    )


def test_violations_lista_y_filtra(client: TestClient, tmp_path: Path) -> None:
    tid = uuid4()
    append_violation(tmp_path, _violation(tid, "DetectPII", "block", blocked=True))
    append_violation(tmp_path, _violation(uuid4(), "Schema", "warning", blocked=False))
    assert len(client.get("/api/violations").json()) == 2
    assert len(client.get("/api/violations", params={"severity": "block"}).json()) == 1
    assert len(client.get("/api/violations", params={"trace_id": str(tid)}).json()) == 1


def test_violations_severity_invalida_422(client: TestClient) -> None:
    r = client.get("/api/violations", params={"severity": "nope"})
    assert r.status_code == 422