import base64
import io
import pytest
from fastapi.testclient import TestClient
from PIL import Image
from vrag.api import app
from vrag.providers import Output, Decision, Detection
from vrag.mentor_api import sessions
from config.schema import parse_yaml
from vrag.settings import store

@pytest.fixture
def client(monkeypatch):
    monkeypatch.setenv('VM_USER_TOKEN','u'*32)
    monkeypatch.setenv('VM_ADMIN_TOKEN','a'*32)
    sessions.clear()
    old=store.history,store.version
    store.history=[parse_yaml('''providers:
  vlm: {adapter: openai-chat-vision, base_url_env: URL, model: x, capabilities: [image_understanding], trust: approved_sensitive}
features:
  live.camera1.scene: {providers: [vlm]}
''')];store.version=1
    async def mock(*args,**kwargs):
        return Output(decisions=[Decision(reason='safe observation',source='vlm')])
    monkeypatch.setattr('vrag.routing.adapter.call',mock)
    with TestClient(app,headers={'Authorization':'Bearer '+'u'*32}) as c:
        yield c
    store.history,store.version=old
    sessions.clear()

def frame():
    f=io.BytesIO();Image.new('RGB',(640,480)).save(f,format='JPEG')
    return {'camera_id':'camera1','frame_id':1,'captured_at':1234,'image':'data:image/jpeg;base64,'+base64.b64encode(f.getvalue()).decode(),'feature':'live.camera1.scene','config_version':1,'request_id':'request'}

def test_lifecycle_correlation_and_no_media_storage(client):
    sid=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    r=client.post(f'/api/live/sessions/{sid}/frames',json=frame())
    assert r.status_code==200,r.text
    out=r.json()
    assert out['frame_id']==1 and out['camera_id']=='camera1' and out['source_width']==640
    assert out['detections']==[]
    assert 'image' not in str(sessions[sid].events)
    assert client.post(f'/api/live/sessions/{sid}/frames',json=frame()).status_code==409
    assert client.delete(f'/api/live/sessions/{sid}').status_code==200
    assert client.get(f'/api/live/sessions/{sid}/events').status_code==404

def test_consent_version_ownership_and_limits(client,monkeypatch):
    assert client.post('/api/live/sessions',json={'consent':False}).status_code==400
    sid=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    assert client.post(f'/api/live/sessions/{sid}/frames',json={**frame(),'config_version':2}).status_code==409
    assert client.post(f'/api/live/sessions/{sid}/frames',json={**frame(),'feature':'live.camera2.scene'}).status_code==422
    sessions[sid].owner='different principal'
    assert client.get(f'/api/live/sessions/{sid}/events').status_code==404
    assert client.post('/api/config/apply',json={'yaml':'{}'}).status_code==401
    assert client.post('/api/live/sessions',content=b'x'*3200000).status_code==413

def test_origin_and_image_validation(client):
    assert client.post('/api/live/sessions',json={'consent':True},headers={'Origin':'https://evil.example'}).status_code==403
    sid=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    assert client.post(f'/api/live/sessions/{sid}/frames',json={**frame(),'image':'not-an-image'}).status_code==422

def test_box_coordinates():
    with pytest.raises(ValueError):
        Detection(detection_id='x',label='hand',bbox_xyxy=[0.8,0,0.1,1],confidence=1,source='detector')
    with pytest.raises(ValueError):
        Detection(detection_id='x',label='hand',bbox_xyxy=[0,0,2,1],confidence=1,source='detector')

def test_advisory_task_state_is_owned_and_bounded(client):
    sid=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    r=client.put(f'/api/live/sessions/{sid}/task',json={'goal':'Assemble fixture','step':'Inspect alignment','completed':False})
    assert r.status_code==200 and r.json()['autonomous'] is False
    assert sessions[sid].task['goal']=='Assemble fixture'
    assert client.put(f'/api/live/sessions/{sid}/task',json={'goal':'x'*1001,'step':'x'}).status_code==422

def test_expired_session_data_is_reaped(client):
    import time
    sid=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    sessions[sid].last_transcript='ephemeral speech'
    sessions[sid].expiry=time.monotonic()-1
    assert client.get(f'/api/live/sessions/{sid}/events').status_code==404
    assert sid not in sessions

def test_explicit_origins_cannot_be_bypassed_with_forwarded_host(client,monkeypatch):
    monkeypatch.setenv('VM_ALLOWED_ORIGINS','https://private-app.hf.space')
    assert client.post('/api/live/sessions',json={'consent':True},headers={'Origin':'https://other.example','X-Forwarded-Host':'other.example'}).status_code==403
    assert client.post('/api/live/sessions',json={'consent':True},headers={'Origin':'https://private-app.hf.space'}).status_code==200

def test_camera_backpressure_and_frame_snapshot(client):
    sid=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    sessions[sid].busy.add('camera1')
    assert client.post(f'/api/live/sessions/{sid}/frames',json=frame()).status_code==429
    sessions[sid].busy.clear()
    r=client.post(f'/api/live/sessions/{sid}/frames',json=frame())
    assert r.status_code==200 and r.json()['config_version']==1
    assert client.post(f'/api/live/sessions/{sid}/frames',json={**frame(),'frame_id':2}).status_code==429

def test_request_errors_do_not_echo_private_input(client):
    marker='private-value-do-not-echo'
    r=client.post('/api/live/sessions',json={'consent':marker,marker:marker})
    assert r.status_code==422 and marker not in r.text
    assert all('input' not in error for error in r.json()['detail'])

def test_nonfinite_capture_timestamp_is_safe_validation_error(client):
    import json
    sid=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    body={**frame(),'captured_at':float('nan')}
    r=client.post(f'/api/live/sessions/{sid}/frames',content=json.dumps(body),headers={'Content-Type':'application/json'})
    assert r.status_code==422 and 'NaN' not in r.text and body['image'] not in r.text

def test_session_override_is_local_and_validates_capabilities(client):
    from vrag.settings import store
    sid=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    old=store.history[-1].features['live.camera1.scene'].strategy
    r=client.put(f'/api/live/sessions/{sid}/routing',json={'config_version':1,'feature':'live.camera1.scene','route':{'strategy':'fallback','providers':['vlm']}})
    assert r.status_code==200,r.text
    assert r.json()['persisted'] is False
    assert store.history[-1].features['live.camera1.scene'].strategy==old
    r=client.put(f'/api/live/sessions/{sid}/routing',json={'config_version':1,'feature':'live.camera1.scene','route':{'providers':['unknown']}})
    assert r.status_code==422
    assert client.post(f'/api/live/sessions/{sid}/frames',json=frame()).status_code==200
    other=client.post('/api/live/sessions',json={'consent':True}).json()['session_id']
    assert sessions[other].overrides=={}