import asyncio
import json
from datetime import datetime, timezone
from types import SimpleNamespace
from unittest.mock import AsyncMock
from uuid import uuid4

import pytest
from fastapi import HTTPException

from app.mcp import query_service
from app.mcp.catalog import TOOLS
from app.mcp.models import BoundContext, TaskContextInput
from app.mcp.work_order_skills import read_work_order_skill


@pytest.mark.parametrize("workflow,name", [
    ("burst_report", "burst-report"),
    ("water_quality_complaint", "water-quality-complaint"),
    ("general", "appointment-follow-up"),
])
def test_skill_descriptor_and_body_have_same_version_and_digest(workflow, name):
    descriptor = read_work_order_skill(workflow)
    body = read_work_order_skill(workflow, include_content=True)
    assert descriptor == {key: value for key, value in body.items() if key != "instructions"}
    assert body["name"] == name and body["version"]
    assert len(body["content_sha256"]) == 64 and body["instructions"]
    assert "instructions" not in descriptor
    # MCP task context has no evidence resource fallback: the complete instructions
    # and result envelope must fit its inline response budget.
    assert len(json.dumps(body, ensure_ascii=False).encode()) < 10000


@pytest.mark.parametrize("workflow", [None, "unknown", "../../secrets", "burst-report"])
def test_unknown_workflow_never_falls_back_or_reads_an_arbitrary_path(workflow):
    assert read_work_order_skill(workflow)["available"] is False


def test_task_skill_uses_persisted_workflow_and_preserves_task_scope(monkeypatch):
    task_id, project_id = uuid4(), uuid4()
    reader = AsyncMock(return_value={"task": {"workflow": "burst_report"}})
    monkeypatch.setattr(query_service.reads, "task_context_summary", reader)
    monkeypatch.setattr(query_service, "permissions_for_context", lambda project: {"operational_task.view"})
    scope = SimpleNamespace(connection=object(), project=object())
    binding = BoundContext(
        context_handle="a" * 43, project_id=project_id, subject="u", client_id="host",
        native_session_id="s", purpose="task_execution", task_id=task_id,
        tool_cap=["get_task_context"], permission_cap=["operational_task.view"],
        expires_at=datetime.now(timezone.utc),
    )

    def query(section):
        return asyncio.run(query_service.execute_query(scope, binding, TOOLS["get_task_context"],
            TaskContextInput(context_handle=binding.context_handle, section=section)))

    summary = query("summary")
    body = query("skill")
    assert summary.data["handling_skill"]["content_sha256"] == body.data["skill"]["content_sha256"]
    assert summary.data["display_time_zone"] == "Asia/Shanghai"
    assert body.data["skill"]["workflow"] == "burst_report"
    assert body.data["skill"]["instructions"] and not body.truncated
    assert body.evidence_id is None and body.semantics == "task"
    reader.assert_awaited_with(scope.connection, project_id=project_id, task_id=task_id, report_revision=None)
    binding.permission_cap = []
    with pytest.raises(HTTPException) as caught:
        query("skill")
    assert caught.value.status_code == 403 and reader.await_count == 2


@pytest.mark.parametrize("extra", [{"workflow": "general"}, {"data_path": ["instructions"]}, {"offset": 1}])
def test_skill_input_cannot_select_another_workflow_or_partial_instructions(extra):
    with pytest.raises(ValueError):
        TaskContextInput(context_handle="a" * 43, section="skill", **extra)