"""Unit: provenance footer (PRD forge-native-integration)."""

from __future__ import annotations

import unittest

from bot_bottle.contrib.gitea.provenance import build_provenance_footer


def _footer(slug: str = "implementer-abc12", **over) -> str:
    base = {
        "agent_name": "implementer",
        "bottle_names": ("claude",),
        "started_at": "2026-06-29T12:00:00-04:00",
        "finished_at": "2026-06-29T12:04:12-04:00",
        "exit_code": 0,
    }
    base.update(over)
    return build_provenance_footer(slug, **base)


class ProvenanceTest(unittest.TestCase):
    def test_required_fields_present(self):
        out = _footer()
        for token in ("Run provenance", "`implementer`", "`claude`",
                      "`implementer-abc12`", "| exit | 0 ✓ |"):
            self.assertIn(token, out)

    def test_collapsed_details_block(self):
        out = _footer()
        self.assertTrue(out.startswith("<details>"))
        self.assertIn("</details>", out)

    def test_duration_minutes_seconds(self):
        self.assertIn("| duration | 4m 12s |", _footer())

    def test_duration_under_a_minute(self):
        out = _footer(finished_at="2026-06-29T12:00:30-04:00")
        self.assertIn("| duration | 30s |", out)

    def test_duration_unknown_on_bad_timestamp(self):
        out = _footer(finished_at="not-a-time")
        self.assertIn("| duration | unknown |", out)

    def test_nonzero_exit_marked(self):
        self.assertIn("| exit | 1 ✗ |", _footer(exit_code=1))

    def test_watchdog_changes_done_signal_row(self):
        normal = _footer()
        self.assertIn("sidecar `signal_done`", normal)
        fired = _footer(watchdog_fired=True)
        self.assertIn("watchdog — agent did not signal", fired)
        self.assertNotIn("sidecar `signal_done`", fired)

    def test_gitleaks_states(self):
        self.assertIn("not run", _footer())
        self.assertIn("✓ no secrets detected", _footer(gitleaks_clean=True))
        self.assertIn("✗ secrets detected", _footer(gitleaks_clean=False))

    def test_egress_omitted_when_absent(self):
        self.assertNotIn("**Egress**", _footer())

    def test_egress_rendered_when_present(self):
        out = _footer(egress_routes=[
            "`api.anthropic.com` — Bearer auth",
            "`pypi.org` — unauthenticated",
        ])
        self.assertIn("**Egress** (deny-by-default; 2 routes allowed)", out)
        self.assertIn("- `api.anthropic.com` — Bearer auth", out)

    def test_egress_singular_route(self):
        out = _footer(egress_routes=["`api.anthropic.com` — Bearer auth"])
        self.assertIn("1 route allowed", out)

    def test_multiple_bottles_listed(self):
        out = _footer(bottle_names=("claude", "dev"))
        self.assertIn("`claude`, `dev`", out)


if __name__ == "__main__":
    unittest.main()