import json
from pathlib import Path
from types import SimpleNamespace
import unittest
import tempfile
from unittest.mock import patch
from console.native_container import command, cleanup
from console.native_io import read_secret_tables, SecretFilter


class NativeContainerTests(unittest.TestCase):
    def test_registered_key_table_is_redacted_without_environment_injection(self):
        with tempfile.TemporaryDirectory() as temporary:
            path = Path(temporary) / 'keys.txt'
            path.write_text('# local fixture\noperator dummy-audio-key scope\n')
            values = read_secret_tables([{'path': str(path), 'key_column': 1}])
            self.assertEqual(values, ['dummy-audio-key'])
            self.assertNotIn(b'dummy-audio-key', SecretFilter(values).clean(b'header=dummy-audio-key'))

    def setUp(self):
        self.identity = 'a' * 32
        self.profile = {'docker': {'image': 'sha256:' + 'b' * 64, 'mounts': [{'source': '/original/tests', 'target': '/t'}]},
            'interpreter': '/opt/omni/bin/python'}

    def test_fixed_image_readonly_sources_and_owned_output_without_gpu(self):
        args = command(self.profile, Path('/original/tests/test_api.py'), ['x'], '/runs/' + self.identity, self.identity)
        self.assertIn('xas.native-run=' + self.identity, args)
        self.assertIn('type=bind,src=/original/tests,dst=/t,readonly', args)
        self.assertIn('type=bind,src=/runs/' + self.identity + '/work,dst=/out', args)
        self.assertEqual(args[-4:], [self.profile['docker']['image'], '-u', '/t/test_api.py', 'x'])
        self.assertNotIn('--gpus', args)
        self.assertIn('runc', args)

    def test_cleanup_rejects_foreign_container(self):
        inspected = SimpleNamespace(returncode=0, stdout=json.dumps([{'Name': '/adamwen-native-run-' + self.identity,
            'Config': {'Labels': {'xas.native-run': 'other'}}}]), stderr='')
        with patch('console.native_container.subprocess.run', return_value=inspected) as call:
            with self.assertRaises(ValueError): cleanup(self.identity)
            self.assertEqual(call.call_count, 1)

    def test_daemon_error_is_not_treated_as_container_missing(self):
        error = SimpleNamespace(returncode=1, stdout='', stderr='Cannot connect to Docker daemon')
        with patch('console.native_container.subprocess.run', return_value=error):
            with self.assertRaises(OSError): cleanup(self.identity)

    def test_missing_owned_container_is_already_clean(self):
        missing = SimpleNamespace(returncode=1, stdout='', stderr='error: no such object: adamwen-native-run-' + self.identity)
        with patch('console.native_container.subprocess.run', return_value=missing) as call:
            cleanup(self.identity)
            self.assertEqual(call.call_count, 1)

    def test_auto_removed_container_race_is_not_an_uncertain_cleanup(self):
        container_id = 'c' * 64
        inspected = SimpleNamespace(returncode=0, stdout=json.dumps([{'Id':container_id,
            'Name':'/adamwen-native-run-' + self.identity,'Config':{'Labels':{'xas.native-run':self.identity}}}]),stderr='')
        gone = SimpleNamespace(returncode=1,stdout='',stderr='Error: No such container: ' + container_id)
        with patch('console.native_container.subprocess.run',side_effect=[inspected,gone,gone]) as call:
            cleanup(self.identity)
            self.assertEqual(call.call_args_list[1].args[0][-1],container_id)