import json
from pathlib import Path
import subprocess
import sys


SCRIPT = Path(__file__).parents[1] / "scripts/security_flow_report.py"


def workplan(root, repo, task):
    directory = root / repo / "workplans"
    directory.mkdir(parents=True, exist_ok=True)
    (directory / "test.md").write_text(
        "---\nstatus: active\nflavor: implementation\n---\n\n"
        "## Work\n\n```task\n" + task + "\n```\n"
    )


def report(root):
    return json.loads(subprocess.check_output(
        [sys.executable, str(SCRIPT), "--root", str(root), "--json"], text=True
    ))


def test_default_estate_observes_activity_owner_dependency(tmp_path):
    workplan(tmp_path, "railiance-platform",
             "id: RPF-WP-0048-T02\nstatus: wait\npriority: high\n"
             "depends_on: [ACTIVITY-WP-0041-T03]")
    workplan(tmp_path, "activity-core",
             "id: ACTIVITY-WP-0041-T03\nstatus: todo\npriority: high")
    waiting = report(tmp_path)
    assert [t["id"] for t in waiting["READY"]] == ["ACTIVITY-WP-0041-T03"]
    assert waiting["UNBLOCKED"] == []
    workplan(tmp_path, "activity-core",
             "id: ACTIVITY-WP-0041-T03\nstatus: done\npriority: high")
    assert [t["id"] for t in report(tmp_path)["UNBLOCKED"]] == ["RPF-WP-0048-T02"]


def test_default_estate_includes_custodian_and_explains_human_gate(tmp_path):
    workplan(tmp_path, "the-custodian",
             "id: CUST-WP-0079-T05\nstatus: progress\npriority: medium")
    workplan(tmp_path, "policy-nexus",
             "id: PNEX-WP-0006-T01\nstatus: wait\npriority: high\n"
             'needs_human: true\nintervention_note: "Public publication in daily batch"')
    result = report(tmp_path)
    assert [t["id"] for t in result["READY"]] == ["CUST-WP-0079-T05"]
    assert result["ATTENDED"][0]["reason"] == "Public publication in daily batch"
    assert result["UNBLOCKED"] == []


def test_pending_owner_task_is_not_ready_until_predecessor_finishes(tmp_path):
    workplan(tmp_path, "railiance-platform",
             "id: RPF-WP-0044-T06\nstatus: todo\npriority: medium\n"
             "depends_on: [ACTIVITY-WP-0041-T03]")
    workplan(tmp_path, "activity-core",
             "id: ACTIVITY-WP-0041-T03\nstatus: progress\npriority: high")
    waiting = report(tmp_path)
    assert [t["id"] for t in waiting["READY"]] == ["ACTIVITY-WP-0041-T03"]
    assert waiting["DEPENDENT"][0]["pending_dependencies"] == ["ACTIVITY-WP-0041-T03"]
    workplan(tmp_path, "activity-core",
             "id: ACTIVITY-WP-0041-T03\nstatus: done\npriority: high")
    assert [t["id"] for t in report(tmp_path)["READY"]] == ["RPF-WP-0044-T06"]


def test_unknown_dependency_and_legacy_owner_gate_are_visible_but_not_ready(tmp_path):
    workplan(tmp_path, "access-engine",
             "id: FLEX-WP-0036-T06\nstatus: todo\npriority: medium\n"
             "depends_on: [UNKNOWN-WP-0001-T01]")
    workplan(tmp_path, "ops-mason",
             "id: MASON-WP-0010-T03\nstatus: progress\npriority: high\n"
             "blocked_on: message-from:railiance-platform")
    result = report(tmp_path)
    assert not result["READY"]
    assert len(result["DEPENDENT"]) == 2
    assert result["DEPENDENT"][0]["blocked_on"] == "message-from:railiance-platform"


def test_human_flag_prevents_ready_even_if_status_has_not_been_requalified(tmp_path):
    workplan(tmp_path, "user-engine",
             "id: USER-WP-0027-T04\nstatus: progress\npriority: high\n"
             "needs_human: true\nintervention_note: Real MFA journey")
    result = report(tmp_path)
    assert not result["READY"]
    assert result["ATTENDED"][0]["id"] == "USER-WP-0027-T04"


def test_workplan_and_multiline_task_dependencies_both_gate_successor(tmp_path):
    workplan(tmp_path, "railiance-platform",
             "id: RPF-WP-0048-T02\nstatus: todo\npriority: high\n"
             "depends_on:\n  - ACTIVITY-WP-0041-T03\n  - ACTIVITY-WP-0041-T04")
    source = tmp_path / "railiance-platform/workplans/test.md"
    source.write_text(source.read_text().replace(
        "flavor: implementation", "flavor: implementation\ndepends_on: [ACTIVITY-WP-0042]"))
    result = report(tmp_path)
    assert not result["READY"]
    assert result["DEPENDENT"][0]["pending_dependencies"] == [
        "ACTIVITY-WP-0042", "ACTIVITY-WP-0041-T03", "ACTIVITY-WP-0041-T04"]


def test_attended_item_keeps_unfinished_ordered_prerequisites_visible(tmp_path):
    workplan(tmp_path, "key-cape",
             "id: KEY-WP-0039-T02\nstatus: wait\npriority: medium\n"
             "needs_human: true\nintervention_note: Attended owner token session\n"
             "depends_on: [KEY-WP-0038-T03]")
    result = report(tmp_path)
    assert not result["READY"] and not result["UNBLOCKED"]
    assert result["ATTENDED"][0]["pending_dependencies"] == ["KEY-WP-0038-T03"]