#!/usr/bin/env python3
"""persist_writer_run._semantic_verdict 的离线测试。

语义状态固化到候选行是接受通道 DB 兜底的依据，绑定/哈希校验必须失败关闭：
报告版本、候选哈希、候选版本、上下文哈希、运行 ID 任一不一致都拒绝落库。

跑法：.venv/bin/python tests/skills/写下一章/test_semantic_verdict.py
"""

from __future__ import annotations

import copy
import pathlib
import sys
import unittest

PROJECT_ROOT = pathlib.Path(__file__).resolve().parents[3]
SCRIPT_DIR = PROJECT_ROOT / "muse" / "content" / "work" / "skills" / "generate" / "写下一章" / "scripts"
if str(SCRIPT_DIR) not in sys.path:
    sys.path.insert(0, str(SCRIPT_DIR))

import persist_writer_run as writer_persist  # noqa: E402

CANDIDATE_SHA = "a" * 64
CONTEXT_SHA = "sha256:" + "b" * 64


def _context() -> dict:
    return {
        "runId": "run-prod-work12-ch2-x",
        "contextSnapshot": {"contextSha256": CONTEXT_SHA},
    }


def _report(*, status: str = "passed", candidate_sha: str = "sha256:" + CANDIDATE_SHA,
            candidate_version=1) -> dict:
    body = {
        "schemaVersion": "semantic-detection-v3",
        "runId": "run-prod-work12-ch2-x",
        "sampleId": "writer-ch2",
        "opaqueArmId": "production",
        "inputSha256": "sha256:" + "1" * 64,
        "candidateVersion": candidate_version,
        "candidateSha256": candidate_sha,
        "contextSnapshotSha256": CONTEXT_SHA,
        "modelReceiptSha256": "sha256:" + "2" * 64,
        "status": status,
        "claims": [], "findings": [], "assertionVerdicts": [],
        "hardConstraintVerdicts": [], "newSettingCandidates": [], "evidenceGaps": [],
    }
    body["reportSha256"] = "sha256:" + writer_persist.hashlib.sha256(
        writer_persist._json(body).encode("utf-8")).hexdigest()
    return body


class SemanticVerdictTest(unittest.TestCase):
    def test_bound_passed_report_yields_status_and_bare_sha(self) -> None:
        report = _report()
        status, sha = writer_persist._semantic_verdict(
            report, _context(), CANDIDATE_SHA, 1)
        self.assertEqual(status, "passed")
        self.assertEqual(sha, report["reportSha256"][len("sha256:"):])

    def test_failed_and_needs_evidence_statuses_pass_through(self) -> None:
        for status in ("failed", "needs_evidence"):
            report = _report(status=status)
            got, _ = writer_persist._semantic_verdict(report, _context(), CANDIDATE_SHA, 1)
            self.assertEqual(got, status)

    def test_unbound_candidate_sha_rejected(self) -> None:
        report = _report(candidate_sha="sha256:" + "f" * 64)
        with self.assertRaises(writer_persist.WriterPersistenceError):
            writer_persist._semantic_verdict(report, _context(), CANDIDATE_SHA, 1)

    def test_unbound_candidate_version_rejected(self) -> None:
        report = _report(candidate_version=2)
        with self.assertRaises(writer_persist.WriterPersistenceError):
            writer_persist._semantic_verdict(report, _context(), CANDIDATE_SHA, 1)

    def test_unbound_context_sha_rejected(self) -> None:
        report = _report()
        report["contextSnapshotSha256"] = "sha256:" + "c" * 64
        with self.assertRaises(writer_persist.WriterPersistenceError):
            writer_persist._semantic_verdict(report, _context(), CANDIDATE_SHA, 1)

    def test_tampered_report_hash_rejected(self) -> None:
        report = _report()
        tampered = copy.deepcopy(report)
        tampered["status"] = "passed"
        tampered["reportSha256"] = report["reportSha256"]
        tampered["claims"] = [{"claimId": "forged"}]  # 改内容不改哈希
        with self.assertRaises(writer_persist.WriterPersistenceError):
            writer_persist._semantic_verdict(tampered, _context(), CANDIDATE_SHA, 1)

    def test_bad_version_or_status_rejected(self) -> None:
        bad_version = _report()
        bad_version["schemaVersion"] = "semantic-detection-v2"
        with self.assertRaises(writer_persist.WriterPersistenceError):
            writer_persist._semantic_verdict(bad_version, _context(), CANDIDATE_SHA, 1)
        bad_status = _report()
        bad_status["status"] = "approved"
        with self.assertRaises(writer_persist.WriterPersistenceError):
            writer_persist._semantic_verdict(bad_status, _context(), CANDIDATE_SHA, 1)
        with self.assertRaises(writer_persist.WriterPersistenceError):
            writer_persist._semantic_verdict(None, _context(), CANDIDATE_SHA, 1)


if __name__ == "__main__":
    unittest.main()